@flaks/onerecord 0.1.2

package/dist/iri/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../src/iri/normalize.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACtB,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAA;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAmB,EAAE,CAAmB;IAChE,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAA;AAC5C,CAAC"}

package/dist/iri/strategy.d.ts

@@ -0,0 +1,26 @@
+declare const SafeIriBrand: unique symbol;
+/**
+ * Branded IRI string. Production code may only obtain `SafeIri` via
+ * `validateIri` or `IriStrategy.build`. The brand prevents passing
+ * untrusted strings into IRI-shaped fields.
+ */
+export type SafeIri = string & {
+    readonly [SafeIriBrand]: true;
+};
+export interface IriParts {
+    tenant: string;
+    uuid: string;
+    host?: string;
+}
+/** Class name union — narrowed to the v0.1.0 ~32 classes during Phase 5–11 wiring. */
+export type ClassName = string;
+export interface IriStrategy {
+    /** Scheme allowlist for outputs. Default impl uses `['https']`. */
+    readonly allowedSchemes: readonly string[];
+    /** Build an IRI for a class instance. Output MUST satisfy validateIri. */
+    build(className: ClassName, parts: IriParts): SafeIri;
+    /** Optional host allowlist for further egress restriction. */
+    readonly allowedHosts?: readonly string[];
+}
+export {};
+//# sourceMappingURL=strategy.d.ts.map

package/dist/iri/strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../../src/iri/strategy.ts"],"names":[],"mappings":"AAEA,OAAO,CAAC,MAAM,YAAY,EAAE,OAAO,MAAM,CAAA;AAEzC;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,CAAA;CAAE,CAAA;AAEhE,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,sFAAsF;AACtF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAA;AAE9B,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,0EAA0E;IAC1E,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAA;IACrD,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC1C"}

package/dist/iri/strategy.js

@@ -0,0 +1,3 @@
+// src/iri/strategy.ts
+export {};
+//# sourceMappingURL=strategy.js.map

package/dist/iri/strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.js","sourceRoot":"","sources":["../../src/iri/strategy.ts"],"names":[],"mappings":"AAAA,sBAAsB"}

package/dist/iri/validate.d.ts

@@ -0,0 +1,8 @@
+import type { ParseResult } from '../result.js';
+import type { SafeIri } from './strategy.js';
+export interface ValidateIriOpts {
+    allowedSchemes?: readonly string[];
+    allowedHosts?: readonly string[];
+}
+export declare function validateIri(iri: string, opts?: ValidateIriOpts): ParseResult<SafeIri>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/iri/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/iri/validate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAI5C,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACjC;AAoBD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,WAAW,CAAC,OAAO,CAAC,CAqCzF"}

package/dist/iri/validate.js

@@ -0,0 +1,54 @@
+const ALWAYS_FORBIDDEN_SCHEMES = new Set(['javascript', 'data', 'file', 'vbscript', 'about']);
+const DEFAULT_ALLOWED_SCHEMES = ['https'];
+function checkScheme(scheme, allowed, iri) {
+    if (ALWAYS_FORBIDDEN_SCHEMES.has(scheme)) {
+        return {
+            ok: false,
+            error: { kind: 'invalid_iri', got: iri, reason: 'disallowed_scheme', path: '$' },
+        };
+    }
+    if (!allowed.includes(scheme)) {
+        return {
+            ok: false,
+            error: { kind: 'invalid_iri', got: iri, reason: 'disallowed_scheme', path: '$' },
+        };
+    }
+    return { ok: true, value: true };
+}
+export function validateIri(iri, opts = {}) {
+    const allowedSchemes = opts.allowedSchemes ?? DEFAULT_ALLOWED_SCHEMES;
+    const allowedHosts = opts.allowedHosts;
+    // First detect scheme via regex — reliable for both HTTP and non-HTTP (urn:, etc.)
+    const schemeMatch = iri.match(/^([a-zA-Z][a-zA-Z0-9+.\-]*):/);
+    if (!schemeMatch) {
+        return { ok: false, error: { kind: 'invalid_iri', got: iri, reason: 'malformed', path: '$' } };
+    }
+    const scheme = (schemeMatch[1] ?? '').toLowerCase();
+    const schemeR = checkScheme(scheme, allowedSchemes, iri);
+    if (!schemeR.ok)
+        return schemeR;
+    // Try to parse via URL for HTTP-shaped schemes; fall back to NFC-normalized exact for non-URL-shaped
+    let url = null;
+    try {
+        url = new URL(iri);
+    }
+    catch {
+        return { ok: true, value: iri.normalize('NFC') };
+    }
+    if (url.username !== '' || url.password !== '') {
+        return {
+            ok: false,
+            error: { kind: 'invalid_iri', got: iri, reason: 'has_userinfo', path: '$' },
+        };
+    }
+    if (allowedHosts && url.host !== '' && !allowedHosts.includes(url.host)) {
+        return {
+            ok: false,
+            error: { kind: 'invalid_iri', got: iri, reason: 'disallowed_host', path: '$' },
+        };
+    }
+    // For HTTP(S), normalize via .href; for non-HTTP that parsed (urn:uuid), prefer original (NFC)
+    const value = url.protocol === 'https:' || url.protocol === 'http:' ? url.href : iri.normalize('NFC');
+    return { ok: true, value: value };
+}
+//# sourceMappingURL=validate.js.map

package/dist/iri/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/iri/validate.ts"],"names":[],"mappings":"AAIA,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AAO7F,MAAM,uBAAuB,GAAsB,CAAC,OAAO,CAAC,CAAA;AAE5D,SAAS,WAAW,CAAC,MAAc,EAAE,OAA0B,EAAE,GAAW;IAC1E,IAAI,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE;SACjF,CAAA;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE;SACjF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,OAAwB,EAAE;IACjE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,uBAAuB,CAAA;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;IAEtC,mFAAmF;IACnF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAA;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IACnD,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;IACxD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAA;IAE/B,qGAAqG;IACrG,IAAI,GAAG,GAAe,IAAI,CAAA;IAC1B,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAY,EAAE,CAAA;IAC7D,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE;SAC5E,CAAA;IACH,CAAC;IACD,IAAI,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,EAAE;SAC/E,CAAA;IACH,CAAC;IACD,+FAA+F;IAC/F,MAAM,KAAK,GACT,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACzF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAgB,EAAE,CAAA;AAC9C,CAAC"}

package/dist/iri/zod-safe-iri.d.ts

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+import type { ParseError } from '../result.js';
+import type { SafeIri } from './strategy.js';
+import { type ValidateIriOpts } from './validate.js';
+/**
+ * Zod helper for IRI-shaped fields. Use in every per-class schema for IRI fields:
+ *   shipmentInformation: safeIri().optional()
+ *   containedPieces: z.array(safeIri()).min(1).optional()
+ *
+ * On failure, emits a `custom` Zod issue with a structured `params` payload
+ * tagged with `__safe_iri__: true`. Per-class deserializers walk the Zod
+ * issues, lift any safeIri-tagged issue into a `kind: 'invalid_iri'` ParseError
+ * (see `findInvalidIriInIssues` below), and only fall through to
+ * `kind: 'zod_validation'` if no IRI issues are present.
+ *
+ * v3 (A1-R2-B1): v2 emitted only a string message, which forced every IRI
+ * failure into `zod_validation` and broke discriminated-union routing for
+ * Tracks B/C and the negative-test catalogue (T48a invalid-iri.test.ts).
+ */
+export declare function safeIri(opts?: ValidateIriOpts): z.ZodPipe<z.ZodString, z.ZodTransform<SafeIri, string>>;
+/**
+ * Walk a single Zod issue; if it came from `safeIri()` (recognisable via the
+ * `__safe_iri__` marker on `params`), return a ParseError of kind `invalid_iri`.
+ * Otherwise return null so the caller can fall through to `zod_validation`.
+ */
+export declare function extractInvalidIriIssue(issue: {
+    code?: string;
+    message?: string;
+    path: ReadonlyArray<PropertyKey>;
+    params?: unknown;
+}, path: string): Extract<ParseError, {
+    kind: 'invalid_iri';
+}> | null;
+/**
+ * Walk an entire Zod issue collection; return the FIRST safeIri-tagged issue
+ * lifted to ParseError (or null if none). Per-class deserializers prefer this
+ * to the per-issue helper because the negative-test catalogue asserts
+ * `r.error.kind === 'invalid_iri'` on the FIRST IRI failure.
+ */
+export declare function findInvalidIriInIssues(issues: ReadonlyArray<{
+    code?: string;
+    message?: string;
+    path: ReadonlyArray<PropertyKey>;
+    params?: unknown;
+}>, envelopePathPrefix?: string): Extract<ParseError, {
+    kind: 'invalid_iri';
+}> | null;
+//# sourceMappingURL=zod-safe-iri.d.ts.map

package/dist/iri/zod-safe-iri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-safe-iri.d.ts","sourceRoot":"","sources":["../../src/iri/zod-safe-iri.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,KAAK,eAAe,EAAe,MAAM,eAAe,CAAA;AAejE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,OAAO,CAAC,IAAI,GAAE,eAAoB,2DAiBjD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,EAC9F,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,GAAG,IAAI,CAWrD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,CAAA;IAChC,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,CAAC,EACF,kBAAkB,SAAM,GACvB,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,GAAG,IAAI,CAUrD"}

package/dist/iri/zod-safe-iri.js

@@ -0,0 +1,79 @@
+// src/iri/zod-safe-iri.ts
+import { z } from 'zod';
+import { validateIri } from './validate.js';
+/**
+ * Marker key so per-class deserializers can recognise issues from this helper
+ * (vs other custom-coded issues a schema author might emit).
+ */
+const SAFE_IRI_PARAMS_MARKER = '__safe_iri__';
+/**
+ * Zod helper for IRI-shaped fields. Use in every per-class schema for IRI fields:
+ *   shipmentInformation: safeIri().optional()
+ *   containedPieces: z.array(safeIri()).min(1).optional()
+ *
+ * On failure, emits a `custom` Zod issue with a structured `params` payload
+ * tagged with `__safe_iri__: true`. Per-class deserializers walk the Zod
+ * issues, lift any safeIri-tagged issue into a `kind: 'invalid_iri'` ParseError
+ * (see `findInvalidIriInIssues` below), and only fall through to
+ * `kind: 'zod_validation'` if no IRI issues are present.
+ *
+ * v3 (A1-R2-B1): v2 emitted only a string message, which forced every IRI
+ * failure into `zod_validation` and broke discriminated-union routing for
+ * Tracks B/C and the negative-test catalogue (T48a invalid-iri.test.ts).
+ */
+export function safeIri(opts = {}) {
+    return z.string().transform((s, ctx) => {
+        const r = validateIri(s, opts);
+        if (!r.ok) {
+            // r.error.kind is always 'invalid_iri' from validateIri; narrow defensively
+            const reason = r.error.kind === 'invalid_iri' ? r.error.reason : 'malformed';
+            const params = {
+                [SAFE_IRI_PARAMS_MARKER]: true,
+                kind: 'invalid_iri',
+                got: s,
+                reason,
+            };
+            ctx.addIssue({ code: 'custom', message: 'invalid_iri', params });
+            return z.NEVER;
+        }
+        return r.value;
+    });
+}
+/**
+ * Walk a single Zod issue; if it came from `safeIri()` (recognisable via the
+ * `__safe_iri__` marker on `params`), return a ParseError of kind `invalid_iri`.
+ * Otherwise return null so the caller can fall through to `zod_validation`.
+ */
+export function extractInvalidIriIssue(issue, path) {
+    if (issue.code !== 'custom' || issue.message !== 'invalid_iri')
+        return null;
+    const p = issue.params;
+    if (!p || p[SAFE_IRI_PARAMS_MARKER] !== true)
+        return null;
+    if (p.kind !== 'invalid_iri')
+        return null;
+    return {
+        kind: 'invalid_iri',
+        got: p.got ?? '',
+        reason: p.reason ?? 'malformed',
+        path,
+    };
+}
+/**
+ * Walk an entire Zod issue collection; return the FIRST safeIri-tagged issue
+ * lifted to ParseError (or null if none). Per-class deserializers prefer this
+ * to the per-issue helper because the negative-test catalogue asserts
+ * `r.error.kind === 'invalid_iri'` on the FIRST IRI failure.
+ */
+export function findInvalidIriInIssues(issues, envelopePathPrefix = '$') {
+    for (const issue of issues) {
+        const dotted = issue.path.length === 0
+            ? envelopePathPrefix
+            : `${envelopePathPrefix}.${issue.path.map(String).join('.')}`;
+        const extracted = extractInvalidIriIssue(issue, dotted);
+        if (extracted)
+            return extracted;
+    }
+    return null;
+}
+//# sourceMappingURL=zod-safe-iri.js.map

package/dist/iri/zod-safe-iri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-safe-iri.js","sourceRoot":"","sources":["../../src/iri/zod-safe-iri.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAA;AAEjE;;;GAGG;AACH,MAAM,sBAAsB,GAAG,cAAuB,CAAA;AAStD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,OAAO,CAAC,OAAwB,EAAE;IAChD,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAW,EAAE;QAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,4EAA4E;YAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAA;YAC5E,MAAM,MAAM,GAAuB;gBACjC,CAAC,sBAAsB,CAAC,EAAE,IAAI;gBAC9B,IAAI,EAAE,aAAa;gBACnB,GAAG,EAAE,CAAC;gBACN,MAAM;aACP,CAAA;YACD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;YAChE,OAAO,CAAC,CAAC,KAAc,CAAA;QACzB,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,CAAA;IAChB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAA8F,EAC9F,IAAY;IAEZ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IAC3E,MAAM,CAAC,GAAG,KAAK,CAAC,MAAiD,CAAA;IACjE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACzD,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IACzC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,WAAW;QAC/B,IAAI;KACL,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAKE,EACF,kBAAkB,GAAG,GAAG;IAExB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,GAAG,kBAAkB,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;QACjE,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACvD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;IACjC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/operations/apply-change.d.ts

@@ -0,0 +1,19 @@
+import type { Codec } from '../classes/shared/codec.js';
+import type { ParseResult } from '../result.js';
+import type { JsonPointer } from './json-pointer.js';
+export interface OperationLike {
+    op: 'ADD' | 'DELETE';
+    path: string;
+    value?: unknown;
+}
+export interface ChangeLike {
+    hasOperation: ReadonlyArray<OperationLike>;
+}
+/**
+ * v2 (A1-M3, A3-M1): allowedFields type matches spec §13 exactly (no `| string` arm).
+ */
+export interface ApplyChangeOpts {
+    allowedFields?: ReadonlyArray<JsonPointer | RegExp>;
+}
+export declare function applyChange<App, Wire>(codec: Codec<App, Wire>, obj: App, change: ChangeLike, opts?: ApplyChangeOpts): ParseResult<App>;
+//# sourceMappingURL=apply-change.d.ts.map

package/dist/operations/apply-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-change.d.ts","sourceRoot":"","sources":["../../src/operations/apply-change.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AACvD,OAAO,KAAK,EAAc,WAAW,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAIpD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,KAAK,GAAG,QAAQ,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,aAAa,CAAC,WAAW,GAAG,MAAM,CAAC,CAAA;CACpD;AAkJD,wBAAgB,WAAW,CAAC,GAAG,EAAE,IAAI,EACnC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EACvB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,eAAoB,GACzB,WAAW,CAAC,GAAG,CAAC,CA4FlB"}

package/dist/operations/apply-change.js

@@ -0,0 +1,232 @@
+import { isValidArrayIndex } from '../safety/path-traversal.js';
+import { asJsonPointer, splitPointer } from './json-pointer.js';
+import { validateOperation } from './validate-operation.js';
+function nullProtoClone(v) {
+    if (v === null || typeof v !== 'object')
+        return v;
+    if (Array.isArray(v))
+        return v.map(nullProtoClone);
+    const out = Object.create(null);
+    for (const k of Object.getOwnPropertyNames(v)) {
+        out[k] = nullProtoClone(v[k]);
+    }
+    return out;
+}
+/** v3 (A1-R2-B2): build an invalid_pointer ParseError. */
+function pointerErr(pointer, reason, path) {
+    return { kind: 'invalid_pointer', pointer, reason, path };
+}
+/**
+ * v3 (A1-R2-B2): traversal failures emit `invalid_pointer`, not `invalid_iri`.
+ * Array-index validation continues to emit `prototype_pollution_attempt` for
+ * non-canonical indices (length, -1, 1.5, NaN, leading zero, etc.) — that's a
+ * different threat (attacker probing Array prototype), distinct from a benign
+ * "this pointer doesn't resolve on this object" failure.
+ */
+function setAtPath(root, segments, pointer, value) {
+    if (segments.length === 0) {
+        return { ok: false, error: pointerErr(pointer, 'empty', '$') };
+    }
+    // Reject any empty-string segment — "/" has one segment "" which is not a valid field name
+    for (const seg of segments) {
+        if (seg === '') {
+            return { ok: false, error: pointerErr(pointer, 'empty', '$') };
+        }
+    }
+    let cur = root;
+    for (let i = 0; i < segments.length - 1; i++) {
+        if (cur === null || typeof cur !== 'object') {
+            return {
+                ok: false,
+                error: pointerErr(pointer, 'segment_not_object', `/${segments.slice(0, i).join('/')}`),
+            };
+        }
+        const seg = segments[i] ?? '';
+        if (Array.isArray(cur)) {
+            if (!isValidArrayIndex(seg)) {
+                return {
+                    ok: false,
+                    error: { kind: 'prototype_pollution_attempt', key: seg, path: `/${segments.join('/')}` },
+                };
+            }
+            cur = cur[Number(seg)];
+        }
+        else {
+            let next = cur[seg];
+            if (next === undefined) {
+                next = Object.create(null);
+                cur[seg] = next;
+            }
+            cur = next;
+        }
+        if (cur === undefined) {
+            return {
+                ok: false,
+                error: pointerErr(pointer, 'segment_missing', `/${segments.slice(0, i + 1).join('/')}`),
+            };
+        }
+    }
+    const lastKey = segments[segments.length - 1] ?? '';
+    if (cur === null || typeof cur !== 'object') {
+        return {
+            ok: false,
+            error: pointerErr(pointer, 'segment_not_object', `/${segments.slice(0, -1).join('/')}`),
+        };
+    }
+    if (Array.isArray(cur)) {
+        if (!isValidArrayIndex(lastKey)) {
+            return {
+                ok: false,
+                error: {
+                    kind: 'prototype_pollution_attempt',
+                    key: lastKey,
+                    path: `/${segments.join('/')}`,
+                },
+            };
+        }
+        ;
+        cur[Number(lastKey)] = value;
+    }
+    else {
+        ;
+        cur[lastKey] = value;
+    }
+    return { ok: true, value: true };
+}
+function deleteAtPath(root, segments, pointer) {
+    if (segments.length === 0)
+        return { ok: true, value: { existed: false } };
+    let cur = root;
+    for (let i = 0; i < segments.length - 1; i++) {
+        if (cur === null || typeof cur !== 'object')
+            return { ok: true, value: { existed: false } };
+        const seg = segments[i] ?? '';
+        if (Array.isArray(cur)) {
+            if (!isValidArrayIndex(seg)) {
+                return {
+                    ok: false,
+                    error: { kind: 'prototype_pollution_attempt', key: seg, path: `/${segments.join('/')}` },
+                };
+            }
+            cur = cur[Number(seg)];
+        }
+        else {
+            cur = cur[seg];
+        }
+    }
+    if (cur === null || typeof cur !== 'object')
+        return { ok: true, value: { existed: false } };
+    const lastKey = segments[segments.length - 1] ?? '';
+    if (Array.isArray(cur)) {
+        if (!isValidArrayIndex(lastKey)) {
+            return {
+                ok: false,
+                error: {
+                    kind: 'prototype_pollution_attempt',
+                    key: lastKey,
+                    path: `/${segments.join('/')}`,
+                },
+            };
+        }
+        const idx = Number(lastKey);
+        if (idx < 0 || idx >= cur.length)
+            return { ok: true, value: { existed: false } };
+        cur.splice(idx, 1);
+        return { ok: true, value: { existed: true } };
+    }
+    if (!Object.prototype.hasOwnProperty.call(cur, lastKey))
+        return { ok: true, value: { existed: false } };
+    delete cur[lastKey];
+    return { ok: true, value: { existed: true } };
+}
+export function applyChange(codec, obj, change, opts = {}) {
+    if (change.hasOperation.length === 0)
+        return { ok: true, value: obj };
+    // Pre-validate: paths + (optional) field allowlist
+    for (let i = 0; i < change.hasOperation.length; i++) {
+        const op = change.hasOperation[i];
+        if (op === undefined)
+            continue;
+        if (opts.allowedFields !== undefined) {
+            const v = validateOperation(op, opts.allowedFields);
+            if (!v.ok) {
+                return {
+                    ok: false,
+                    error: {
+                        kind: 'change_partial_failure',
+                        failedAt: i,
+                        total: change.hasOperation.length,
+                        cause: v.error,
+                    },
+                };
+            }
+        }
+        const p = asJsonPointer(op.path);
+        if (!p.ok) {
+            return {
+                ok: false,
+                error: {
+                    kind: 'change_partial_failure',
+                    failedAt: i,
+                    total: change.hasOperation.length,
+                    cause: p.error,
+                },
+            };
+        }
+    }
+    const clone = nullProtoClone(obj);
+    for (let i = 0; i < change.hasOperation.length; i++) {
+        const op = change.hasOperation[i];
+        if (op === undefined)
+            continue;
+        const p = asJsonPointer(op.path);
+        if (!p.ok) {
+            return {
+                ok: false,
+                error: {
+                    kind: 'change_partial_failure',
+                    failedAt: i,
+                    total: change.hasOperation.length,
+                    cause: p.error,
+                },
+            };
+        }
+        const segments = splitPointer(p.value);
+        const r = op.op === 'ADD'
+            ? setAtPath(clone, segments, op.path, op.value)
+            : deleteAtPath(clone, segments, op.path);
+        if (!r.ok) {
+            return {
+                ok: false,
+                error: {
+                    kind: 'change_partial_failure',
+                    failedAt: i,
+                    total: change.hasOperation.length,
+                    cause: r.error,
+                },
+            };
+        }
+    }
+    const r = codec.schema.safeParse(clone);
+    if (!r.success) {
+        return {
+            ok: false,
+            error: {
+                kind: 'change_partial_failure',
+                failedAt: change.hasOperation.length - 1,
+                total: change.hasOperation.length,
+                cause: {
+                    kind: 'zod_validation',
+                    issues: r.error.issues.map((issue) => ({
+                        path: issue.path.length === 0 ? '$' : issue.path.join('.'),
+                        message: issue.message,
+                        code: issue.code,
+                    })),
+                },
+            },
+        };
+    }
+    // v2 (A1-M5): final null-proto clone of returned graph
+    return { ok: true, value: nullProtoClone(r.data) };
+}
+//# sourceMappingURL=apply-change.js.map

package/dist/operations/apply-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-change.js","sourceRoot":"","sources":["../../src/operations/apply-change.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAmB3D,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAA;IAC1D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,0DAA0D;AAC1D,SAAS,UAAU,CACjB,OAAe,EACf,MAA0D,EAC1D,IAAY;IAEZ,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAChB,IAAa,EACb,QAA2B,EAC3B,OAAe,EACf,KAAc;IAEd,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAA;IAChE,CAAC;IACD,2FAA2F;IAC3F,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAA;QAChE,CAAC;IACH,CAAC;IACD,IAAI,GAAG,GAAY,IAAI,CAAA;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;aACvF,CAAA;QACH,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;iBACzF,CAAA;YACH,CAAC;YACD,GAAG,GAAI,GAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAA;YAChD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CACpD;gBAAC,GAA+B,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;YAC/C,CAAC;YACD,GAAG,GAAG,IAAI,CAAA;QACZ,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;aACxF,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACnD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;SACxF,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,6BAA6B;oBACnC,GAAG,EAAE,OAAO;oBACZ,IAAI,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;iBAC/B;aACF,CAAA;QACH,CAAC;QACD,CAAC;QAAC,GAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,CAAA;IAC9C,CAAC;SAAM,CAAC;QACN,CAAC;QAAC,GAA+B,CAAC,OAAO,CAAC,GAAG,KAAK,CAAA;IACpD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAClC,CAAC;AAED,SAAS,YAAY,CACnB,IAAa,EACb,QAA2B,EAC3B,OAAe;IAEf,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAA;IACzE,IAAI,GAAG,GAAY,IAAI,CAAA;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAA;QAC3F,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;iBACzF,CAAA;YACH,CAAC;YACD,GAAG,GAAI,GAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAA;IAC3F,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,6BAA6B;oBACnC,GAAG,EAAE,OAAO;oBACZ,IAAI,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;iBAC/B;aACF,CAAA;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QAC3B,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAK,GAAiB,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAC9F;QAAC,GAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;IAC/C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAA;IAChD,OAAQ,GAA+B,CAAC,OAAO,CAAC,CAAA;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAuB,EACvB,GAAQ,EACR,MAAkB,EAClB,OAAwB,EAAE;IAE1B,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IAErE,mDAAmD;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAQ;QAC9B,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;YACnD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,wBAAwB;wBAC9B,QAAQ,EAAE,CAAC;wBACX,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;wBACjC,KAAK,EAAE,CAAC,CAAC,KAAK;qBACf;iBACF,CAAA;YACH,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,QAAQ,EAAE,CAAC;oBACX,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;oBACjC,KAAK,EAAE,CAAC,CAAC,KAAK;iBACf;aACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAQ;QAC9B,MAAM,CAAC,GAAG,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,QAAQ,EAAE,CAAC;oBACX,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;oBACjC,KAAK,EAAE,CAAC,CAAC,KAAK;iBACf;aACF,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,GACL,EAAE,CAAC,EAAE,KAAK,KAAK;YACb,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC;YAC/C,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,QAAQ,EAAE,CAAC;oBACX,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;oBACjC,KAAK,EAAE,CAAC,CAAC,KAAK;iBACf;aACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACvC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBACxC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;gBACjC,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACrC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC1D,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC,CAAC;iBACJ;aACF;SACF,CAAA;IACH,CAAC;IAED,uDAAuD;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAQ,EAAE,CAAA;AAC3D,CAAC"}

package/dist/operations/index.d.ts

@@ -0,0 +1,6 @@
+export { applyChange } from './apply-change.js';
+export type { ApplyChangeOpts, ChangeLike, OperationLike } from './apply-change.js';
+export { asJsonPointer, splitPointer } from './json-pointer.js';
+export type { JsonPointer } from './json-pointer.js';
+export { validateOperation } from './validate-operation.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/operations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/operations/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACnF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC/D,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/operations/index.js

@@ -0,0 +1,5 @@
+// src/operations/index.ts
+export { applyChange } from './apply-change.js';
+export { asJsonPointer, splitPointer } from './json-pointer.js';
+export { validateOperation } from './validate-operation.js';
+//# sourceMappingURL=index.js.map

package/dist/operations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/operations/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/operations/json-pointer.d.ts

@@ -0,0 +1,20 @@
+import type { ParseResult } from '../result.js';
+declare const JsonPointerBrand: unique symbol;
+export type JsonPointer = string & {
+    readonly [JsonPointerBrand]: true;
+};
+/**
+ * Parse a JSON-pointer string per RFC 6901. Empty pointer "" means "the
+ * whole document"; non-empty pointers must start with "/". Each segment is
+ * validated by `validatePathSegments` (rejects __proto__/constructor/prototype
+ * + other prototype-pollution vectors).
+ */
+export declare function asJsonPointer(s: string): ParseResult<JsonPointer>;
+/**
+ * Split a JSON-pointer string into segments. RFC 6901 escape rules:
+ *   ~0 -> ~  (must be decoded second)
+ *   ~1 -> /  (must be decoded first)
+ */
+export declare function splitPointer(p: JsonPointer): readonly string[];
+export {};
+//# sourceMappingURL=json-pointer.d.ts.map

package/dist/operations/json-pointer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-pointer.d.ts","sourceRoot":"","sources":["../../src/operations/json-pointer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAG/C,OAAO,CAAC,MAAM,gBAAgB,EAAE,OAAO,MAAM,CAAA;AAC7C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAA;CAAE,CAAA;AAExE;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAUjE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,WAAW,GAAG,SAAS,MAAM,EAAE,CAI9D"}

package/dist/operations/json-pointer.js

@@ -0,0 +1,31 @@
+import { validatePathSegments } from '../safety/path-traversal.js';
+/**
+ * Parse a JSON-pointer string per RFC 6901. Empty pointer "" means "the
+ * whole document"; non-empty pointers must start with "/". Each segment is
+ * validated by `validatePathSegments` (rejects __proto__/constructor/prototype
+ * + other prototype-pollution vectors).
+ */
+export function asJsonPointer(s) {
+    if (s !== '' && !s.startsWith('/')) {
+        return {
+            ok: false,
+            error: { kind: 'invalid_pointer', pointer: s, reason: 'empty', path: '$' },
+        };
+    }
+    const r = validatePathSegments(s);
+    if (!r.ok)
+        return r;
+    return { ok: true, value: s };
+}
+/**
+ * Split a JSON-pointer string into segments. RFC 6901 escape rules:
+ *   ~0 -> ~  (must be decoded second)
+ *   ~1 -> /  (must be decoded first)
+ */
+export function splitPointer(p) {
+    if (p === '')
+        return [];
+    const raw = p.slice(1);
+    return raw.split('/').map((seg) => seg.replace(/~1/g, '/').replace(/~0/g, '~'));
+}
+//# sourceMappingURL=json-pointer.js.map

package/dist/operations/json-pointer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-pointer.js","sourceRoot":"","sources":["../../src/operations/json-pointer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAKlE;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE;SAC3E,CAAA;IACH,CAAC;IACD,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;IACjC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAuB,CAAA;IACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAgB,EAAE,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,CAAc;IACzC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACtB,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;AACjF,CAAC"}

package/dist/operations/validate-operation.d.ts

@@ -0,0 +1,10 @@
+import type { ParseResult } from '../result.js';
+import type { OperationLike } from './apply-change.js';
+import type { JsonPointer } from './json-pointer.js';
+/**
+ * v2 (A3-M1): allowedFields is `ReadonlyArray<JsonPointer | RegExp>` — NO bare
+ * string arm. Literal pointers must be branded via `asJsonPointer(...).value`
+ * first. This matches spec §13.
+ */
+export declare function validateOperation(op: OperationLike, allowedFields: ReadonlyArray<JsonPointer | RegExp>): ParseResult<OperationLike>;
+//# sourceMappingURL=validate-operation.d.ts.map

package/dist/operations/validate-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-operation.d.ts","sourceRoot":"","sources":["../../src/operations/validate-operation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,aAAa,EACjB,aAAa,EAAE,aAAa,CAAC,WAAW,GAAG,MAAM,CAAC,GACjD,WAAW,CAAC,aAAa,CAAC,CAiB5B"}