@formbar/arbiter 0.3.0 → 0.7.0

package/README.md

@@ -2,7 +2,63 @@
 
 Formbar plugin bridge for Arbitre production rules. It syncs form data and `$ui` state into an Arbitre session, fires rules during Formbar evaluation, and applies resulting writes back to form state.
 
-## Install
+## Opt-in shared pure expressions (#90)
+
+```ts
+import { createSession } from "@arbitre/core";
+import { registerExpressionThenOperator } from "@formbar/arbiter";
+
+const handlers = new Map();
+const thenOperators = {
+  register: (name, handler) => handlers.set(name, handler),
+  get: name => handlers.get(name),
+  has: name => handlers.has(name),
+};
+const bridge = registerExpressionThenOperator(thenOperators, {
+  programs: new Map([["adjusted", { kind: "op", op: "add", args: [
+      { kind: "ref", ref: { namespace: "data", segments: ["nativeTotal"] } },
+      { kind: "literal", value: 1 },
+    ] }]]),
+});
+const session = createSession({
+  thenOperators,
+  rules: [{ name: "calculate", when: { ready: true }, then: [
+    { $set: { nativeTotal: { $multiply: ["$quantity", "$unitPrice"] } } },
+    { $formbarValue: { adjusted: "adjusted" } },
+  ] }],
+});
+// Optional form integration: createArbiterPlugin({ session }).
+session.assert("quantity", 2);
+session.assert("unitPrice", 12);
+session.assert("ready", true);
+session.fire(); // nativeTotal 24; adjusted 25 from the actual current RHS scope
+session.dispose();
+bridge.dispose();
+```
+
+The bridge compiles all host-registered IDs before mutating Arbitre's public
+`ThenOperatorRegistry`. A host may select one immutable Kuery `ExpressionProfile`. Data maps to
+non-reserved current scope keys, UI to `$ui`, and explicit external roots can be selected with
+`namespaces: scope => ({ pricing: scope.$pricing })`; configure the corresponding
+native session namespace too. Optional authorization applies at every read.
+
+Failures throw fixed-code `ExpressionError`s, not scope values. Native session
+strict/lenient error behavior remains authoritative. Registration is opt-in and
+not globally installed. Every entry evaluates against the same incoming stage scope
+before any tracked write occurs, so failed stages write nothing. Prior stages are
+visible, same-stage writes are not inputs, and separate stages can chain. Writes
+remain visible to Arbitre changes and TMS. The host owns bridge/session disposal;
+disposed retained handlers fail because Arbitre 0.3 has no unregister operation.
+
+This does **not** replace the native `when` compiler, its dependency indexes,
+refiring/TMS semantics or stored-computation scheduling. A continuously true
+native condition is not promised to rerun after every RHS dependency edit. The
+shared arithmetic profile is strictly finite/no-coercion, not a claim of matching
+native Arbitre null/coercion behavior. Broader policy normalization remains #70;
+stored computations/effects remain #68. See the
+[ADR](../expressions/docs/adr/0001-expression-service-and-reactive-props.md).
+
+## Package installation
 
 ```bash
 bun add @formbar/arbiter @formbar/core @arbitre/core kuery
@@ -36,6 +92,9 @@ console.log(form.getState().uiState); // { showDiscount: true }
 form.dispose();
 ```
 
+Pass rules through `createArbiterPlugin` in the `plugins` option. The former top-level `arbiterRules` form option is
+not supported; non-production core builds warn with this migration path when they encounter it.
+
 ## When to use this package
 
 - Use `@formbar/arbiter` when visibility, requiredness, computed values, or other form behavior should be governed by Arbitre production rules.
@@ -45,4 +104,4 @@ form.dispose();
 ## Dependencies
 
 - Depends on `@formbar/core`.
-- Peer dependencies: `@arbitre/core >=0.1.0` and `kuery >=2.0.0`.
+- Peer dependencies: `@arbitre/core ^0.3.0` and `kuery ^2.1.0`.

package/dist/index.cjs

@@ -2,6 +2,7 @@
 
 var core = require('@arbitre/core');
 var kuery = require('kuery');
+var expressions = require('@formbar/expressions');
 
 // src/arbiter-plugin.ts
 
@@ -11,73 +12,134 @@ function isArbiterInternalPath(path) {
 }
 
 // src/arbiter-plugin.ts
+function resolveSession(options) {
+  if (options.session) return { session: options.session, owned: false };
+  if (options.rules) return { session: core.createSession({ rules: options.rules }), owned: true };
+  throw new Error("createArbiterPlugin requires either `rules` or `session`");
+}
+function syncSession(session, ctx) {
+  const data = ctx.data;
+  for (const key of Object.keys(data)) session.assert(key, data[key]);
+  const uiState = ctx.uiState;
+  for (const key of Object.keys(uiState)) session.assert(`$ui.${key}`, uiState[key]);
+}
+function toWrites(result) {
+  return result.changes.filter((change) => !isArbiterInternalPath(change.path)).map((change) => ({ path: change.path, value: change.newValue, mode: "set" }));
+}
+function evaluateSession(session, ctx) {
+  if (ctx.origin.startsWith("plugin:arbiter")) return;
+  if (!ctx.change.dataChanged && !ctx.change.uiChanged) return;
+  syncSession(session, ctx);
+  const writes = toWrites(session.fire());
+  return { writes: writes.length > 0 ? writes : void 0 };
+}
 function createArbiterPlugin(options) {
-  const { rules, session: externalSession } = options;
-  let session;
-  let ownsSession;
-  if (externalSession) {
-    session = externalSession;
-    ownsSession = false;
-  } else if (rules) {
-    session = core.createSession({ rules });
-    ownsSession = true;
-  } else {
-    throw new Error("createArbiterPlugin requires either `rules` or `session`");
-  }
+  const { session, owned } = resolveSession(options);
   return {
     id: "arbiter",
-    evaluate(ctx) {
-      if (ctx.origin.startsWith("plugin:arbiter")) return;
-      if (!ctx.change.dataChanged && !ctx.change.uiChanged) return;
-      const data = ctx.data;
-      for (const key of Object.keys(data)) {
-        session.assert(key, data[key]);
-      }
-      const uiState = ctx.uiState;
-      for (const key of Object.keys(uiState)) {
-        session.assert(`$ui.${key}`, uiState[key]);
-      }
-      const result = session.fire();
-      const writes = [];
-      for (const change of result.changes) {
-        if (isArbiterInternalPath(change.path)) continue;
-        writes.push({
-          path: change.path,
-          value: change.newValue,
-          mode: "set"
-        });
-      }
-      const fieldMeta = {};
-      const state = session.getState();
-      for (const [path, value] of Object.entries(state)) {
-        if (!path.startsWith("$meta.")) continue;
-        const fieldPath = path.slice("$meta.".length);
-        if (typeof value === "object" && value !== null) {
-          fieldMeta[fieldPath] = value;
-        }
-      }
-      return {
-        writes: writes.length > 0 ? writes : void 0,
-        fieldMeta: Object.keys(fieldMeta).length > 0 ? fieldMeta : void 0
-      };
-    },
+    evaluate: (ctx) => evaluateSession(session, ctx),
     onDispose() {
-      if (ownsSession) {
-        session.dispose();
-      }
+      if (owned) session.dispose();
     }
   };
 }
 function evaluateExpression(expr, context) {
   return kuery.evaluate(expr, context);
 }
+var FORMBAR_VALUE_THEN_OPERATOR = "$formbarValue";
+function providers(roots) {
+  return Object.fromEntries(
+    Object.entries(roots).map(([name, root]) => [name, { getSnapshot: () => root, subscribe: () => () => {
+    } }])
+  );
+}
+function plainRootMap(value) {
+  if (value === null || typeof value !== "object") return false;
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== Object.prototype && prototype !== null) return false;
+  return Reflect.ownKeys(value).every((key) => {
+    if (typeof key !== "string") return false;
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    return descriptor !== void 0 && "value" in descriptor && descriptor.enumerable;
+  });
+}
+function scopeProviders(options, scope) {
+  try {
+    const selected = options.namespaces ? expressions.synchronousValue(options.namespaces(scope)) : {};
+    if (!plainRootMap(selected)) throw new expressions.ExpressionError("adapter");
+    const data = Object.fromEntries(Object.entries(scope).filter(([key]) => !key.startsWith("$")));
+    return providers({ ...selected, data, ui: scope.$ui });
+  } catch {
+    throw new expressions.ExpressionError("adapter");
+  }
+}
+function compilePrograms(options) {
+  const service = expressions.createExpressionService({
+    ...options.profile ? { profile: options.profile } : {},
+    ...options.authorize ? { authorize: options.authorize } : {}
+  });
+  const programs = /* @__PURE__ */ new Map();
+  try {
+    for (const [id, expression] of options.programs) {
+      if (typeof id !== "string") throw new expressions.ExpressionError("invalid-input");
+      const compiled = service.compile(expression);
+      if (!compiled.ok) throw new expressions.ExpressionError(compiled.diagnostics[0].code);
+      programs.set(id, compiled.value);
+    }
+    return { service, programs };
+  } catch (error) {
+    service.dispose();
+    programs.clear();
+    throw error;
+  }
+}
+function registerExpressionThenOperator(registry, options) {
+  if (registry.has(FORMBAR_VALUE_THEN_OPERATOR)) throw new expressions.ExpressionError("invalid-input");
+  const { service, programs } = compilePrograms(options);
+  let disposed = false;
+  const handler = (entries, scope, write) => {
+    if (disposed) throw new expressions.ExpressionError("disposed");
+    const selected = [];
+    for (const [path, id] of entries) {
+      if (typeof id !== "string") throw new expressions.ExpressionError("invalid-input");
+      const program = programs.get(id);
+      if (!program) throw new expressions.ExpressionError("unknown-program");
+      selected.push([path, program]);
+    }
+    const context = scopeProviders(options, scope);
+    const values = selected.map(([, program]) => {
+      const result = service.evaluate(program, context);
+      if (!result.ok) throw new expressions.ExpressionError(result.diagnostics[0].code);
+      return result.value;
+    });
+    for (let index = 0; index < selected.length; index++) write(selected[index][0], values[index]);
+  };
+  try {
+    registry.register(FORMBAR_VALUE_THEN_OPERATOR, handler);
+  } catch {
+    service.dispose();
+    programs.clear();
+    throw new expressions.ExpressionError("adapter");
+  }
+  return {
+    handler,
+    dispose: () => {
+      if (disposed) return;
+      disposed = true;
+      service.dispose();
+      programs.clear();
+    }
+  };
+}
 
 Object.defineProperty(exports, "assertSafeSegment", {
   enumerable: true,
   get: function () { return kuery.assertSafeSegment; }
 });
+exports.FORMBAR_VALUE_THEN_OPERATOR = FORMBAR_VALUE_THEN_OPERATOR;
 exports.createArbiterPlugin = createArbiterPlugin;
 exports.evaluateExpression = evaluateExpression;
 exports.isArbiterInternalPath = isArbiterInternalPath;
+exports.registerExpressionThenOperator = registerExpressionThenOperator;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal-paths.ts","../src/arbiter-plugin.ts","../src/expression-utils.ts"],"names":["createSession","evaluate"],"mappings":";;;;;;;;AAIO,SAAS,sBAAsB,IAAA,EAAuB;AAC5D,EAAA,OAAO,KAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,WAAW,MAAM,CAAA;AACvD;;;ACiBO,SAAS,oBAAoB,OAAA,EAA2C;AAC9E,EAAA,MAAM,EAAE,KAAA,EAAO,OAAA,EAAS,eAAA,EAAgB,GAAI,OAAA;AAE5C,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,WAAA;AAEJ,EAAA,IAAI,eAAA,EAAiB;AACpB,IAAA,OAAA,GAAU,eAAA;AACV,IAAA,WAAA,GAAc,KAAA;AAAA,EACf,WAAW,KAAA,EAAO;AACjB,IAAA,OAAA,GAAUA,kBAAA,CAAc,EAAE,KAAA,EAAkC,CAAA;AAC5D,IAAA,WAAA,GAAc,IAAA;AAAA,EACf,CAAA,MAAO;AACN,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC3E;AAEA,EAAA,OAAO;AAAA,IACN,EAAA,EAAI,SAAA;AAAA,IAEJ,SAAS,GAAA,EAA8D;AAEtE,MAAA,IAAI,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,gBAAgB,CAAA,EAAG;AAG7C,MAAA,IAAI,CAAC,GAAA,CAAI,MAAA,CAAO,eAAe,CAAC,GAAA,CAAI,OAAO,SAAA,EAAW;AAGtD,MAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,MAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,EAAG;AACpC,QAAA,OAAA,CAAQ,MAAA,CAAO,GAAA,EAAK,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,MAC9B;AAGA,MAAA,MAAM,UAAU,GAAA,CAAI,OAAA;AACpB,MAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACvC,QAAA,OAAA,CAAQ,OAAO,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,MAC1C;AAGA,MAAA,MAAM,MAAA,GAAuB,QAAQ,IAAA,EAAK;AAG1C,MAAA,MAAM,SAAwB,EAAC;AAC/B,MAAA,KAAA,MAAW,MAAA,IAAU,OAAO,OAAA,EAAS;AACpC,QAAA,IAAI,qBAAA,CAAsB,MAAA,CAAO,IAAI,CAAA,EAAG;AACxC,QAAA,MAAA,CAAO,IAAA,CAAK;AAAA,UACX,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,OAAO,MAAA,CAAO,QAAA;AAAA,UACd,IAAA,EAAM;AAAA,SACN,CAAA;AAAA,MACF;AAGA,MAAA,MAAM,YAA6C,EAAC;AACpD,MAAA,MAAM,KAAA,GAAQ,QAAQ,QAAA,EAAS;AAC/B,MAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAClD,QAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA,EAAG;AAEhC,QAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA;AAC5C,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAChD,UAAA,SAAA,CAAU,SAAS,CAAA,GAAI,KAAA;AAAA,QACxB;AAAA,MACD;AAEA,MAAA,OAAO;AAAA,QACN,MAAA,EAAQ,MAAA,CAAO,MAAA,GAAS,CAAA,GAAI,MAAA,GAAS,MAAA;AAAA,QACrC,WAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,MAAA,GAAS,IAAI,SAAA,GAAY;AAAA,OAC5D;AAAA,IACD,CAAA;AAAA,IAEA,SAAA,GAAY;AACX,MAAA,IAAI,WAAA,EAAa;AAChB,QAAA,OAAA,CAAQ,OAAA,EAAQ;AAAA,MACjB;AAAA,IACD;AAAA,GACD;AACD;AC5FO,SAAS,kBAAA,CAAmB,MAAgB,OAAA,EAA2C;AAC7F,EAAA,OAAOC,cAAA,CAAS,MAAM,OAAO,CAAA;AAC9B","file":"index.cjs","sourcesContent":["/**\n * Arbiter-internal paths start with $ and are not user-facing form data.\n * Filter them out of write intents.\n */\nexport function isArbiterInternalPath(path: string): boolean {\n\treturn path.startsWith(\"$\") && !path.startsWith(\"$ui.\");\n}\n","import { createSession } from \"@arbitre/core\";\nimport type { FiringResult, ProductionRule, RuleSession } from \"@arbitre/core\";\nimport type {\n\tFormPlugin,\n\tPluginEvaluateContext,\n\tPluginEvaluateResult,\n\tPluginFieldMeta,\n\tPluginWrite,\n} from \"@formbar/core\";\nimport { isArbiterInternalPath } from \"./internal-paths.js\";\n\nexport interface ArbiterPluginOptions {\n\t/** Provide raw rules — a session will be created internally. */\n\treadonly rules?: readonly ProductionRule[];\n\t/** Provide a pre-configured session instead of raw rules. */\n\treadonly session?: RuleSession;\n}\n\n/**\n * Creates a FormPlugin that bridges @arbitre/core into the formbar pipeline.\n * Syncs form data into the rule session, fires rules, and converts results\n * into PluginWrite[] and PluginFieldMeta records.\n */\nexport function createArbiterPlugin(options: ArbiterPluginOptions): FormPlugin {\n\tconst { rules, session: externalSession } = options;\n\n\tlet session: RuleSession;\n\tlet ownsSession: boolean;\n\n\tif (externalSession) {\n\t\tsession = externalSession;\n\t\townsSession = false;\n\t} else if (rules) {\n\t\tsession = createSession({ rules: rules as ProductionRule[] });\n\t\townsSession = true;\n\t} else {\n\t\tthrow new Error(\"createArbiterPlugin requires either `rules` or `session`\");\n\t}\n\n\treturn {\n\t\tid: \"arbiter\",\n\n\t\tevaluate(ctx: PluginEvaluateContext): PluginEvaluateResult | undefined {\n\t\t\t// Prevent re-entry from own writes\n\t\t\tif (ctx.origin.startsWith(\"plugin:arbiter\")) return;\n\n\t\t\t// Short-circuit when nothing relevant changed\n\t\t\tif (!ctx.change.dataChanged && !ctx.change.uiChanged) return;\n\n\t\t\t// Sync form data fields into the session\n\t\t\tconst data = ctx.data as Record<string, unknown>;\n\t\t\tfor (const key of Object.keys(data)) {\n\t\t\t\tsession.assert(key, data[key]);\n\t\t\t}\n\n\t\t\t// Sync $ui.* state\n\t\t\tconst uiState = ctx.uiState as Record<string, unknown>;\n\t\t\tfor (const key of Object.keys(uiState)) {\n\t\t\t\tsession.assert(`$ui.${key}`, uiState[key]);\n\t\t\t}\n\n\t\t\t// Fire rules\n\t\t\tconst result: FiringResult = session.fire();\n\n\t\t\t// Convert changes to PluginWrite[], filtering internal paths\n\t\t\tconst writes: PluginWrite[] = [];\n\t\t\tfor (const change of result.changes) {\n\t\t\t\tif (isArbiterInternalPath(change.path)) continue;\n\t\t\t\twrites.push({\n\t\t\t\t\tpath: change.path,\n\t\t\t\t\tvalue: change.newValue,\n\t\t\t\t\tmode: \"set\",\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Derive field meta from session state\n\t\t\tconst fieldMeta: Record<string, PluginFieldMeta> = {};\n\t\t\tconst state = session.getState();\n\t\t\tfor (const [path, value] of Object.entries(state)) {\n\t\t\t\tif (!path.startsWith(\"$meta.\")) continue;\n\t\t\t\t// Convention: $meta.<fieldPath> holds { visible, disabled, required, readOnly, label }\n\t\t\t\tconst fieldPath = path.slice(\"$meta.\".length);\n\t\t\t\tif (typeof value === \"object\" && value !== null) {\n\t\t\t\t\tfieldMeta[fieldPath] = value as PluginFieldMeta;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\twrites: writes.length > 0 ? writes : undefined,\n\t\t\t\tfieldMeta: Object.keys(fieldMeta).length > 0 ? fieldMeta : undefined,\n\t\t\t};\n\t\t},\n\n\t\tonDispose() {\n\t\t\tif (ownsSession) {\n\t\t\t\tsession.dispose();\n\t\t\t}\n\t\t},\n\t};\n}\n","import { assertSafeSegment, evaluate } from \"kuery\";\nimport type { ExprNode } from \"kuery\";\n\n/**\n * Evaluate a kuery expression against a data context.\n * This is a convenience re-export for consumers using expressions with arbiter rules.\n */\nexport function evaluateExpression(expr: ExprNode, context: Record<string, unknown>): unknown {\n\treturn evaluate(expr, context);\n}\n\nexport { assertSafeSegment };\nexport type { ExprNode };\n"]}
+{"version":3,"sources":["../src/internal-paths.ts","../src/arbiter-plugin.ts","../src/expression-utils.ts","../src/expression-then-operator.ts"],"names":["createSession","evaluate","synchronousValue","ExpressionError","createExpressionService"],"mappings":";;;;;;;;;AAIO,SAAS,sBAAsB,IAAA,EAAuB;AAC5D,EAAA,OAAO,KAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,WAAW,MAAM,CAAA;AACvD;;;ACMA,SAAS,eAAe,OAAA,EAAyE;AAChG,EAAA,IAAI,OAAA,CAAQ,SAAS,OAAO,EAAE,SAAS,OAAA,CAAQ,OAAA,EAAS,OAAO,KAAA,EAAM;AACrE,EAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,OAAO,EAAE,OAAA,EAASA,kBAAA,CAAc,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAA2B,CAAA,EAAG,OAAO,IAAA,EAAK;AAC9G,EAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAC3E;AAEA,SAAS,WAAA,CAAY,SAAsB,GAAA,EAAkC;AAC5E,EAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,UAAW,MAAA,CAAO,GAAA,EAAK,IAAA,CAAK,GAAG,CAAC,CAAA;AAClE,EAAA,MAAM,UAAU,GAAA,CAAI,OAAA;AACpB,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClF;AAEA,SAAS,SAAS,MAAA,EAA8C;AAC/D,EAAA,OAAO,MAAA,CAAO,QACZ,MAAA,CAAO,CAAC,WAAW,CAAC,qBAAA,CAAsB,MAAA,CAAO,IAAI,CAAC,CAAA,CACtD,IAAI,CAAC,MAAA,MAAY,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,OAAO,MAAA,CAAO,QAAA,EAAU,IAAA,EAAM,KAAA,EAAe,CAAE,CAAA;AACxF;AAEA,SAAS,eAAA,CAAgB,SAAsB,GAAA,EAA8D;AAC5G,EAAA,IAAI,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,gBAAgB,CAAA,EAAG;AAC7C,EAAA,IAAI,CAAC,GAAA,CAAI,MAAA,CAAO,eAAe,CAAC,GAAA,CAAI,OAAO,SAAA,EAAW;AACtD,EAAA,WAAA,CAAY,SAAS,GAAG,CAAA;AACxB,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,OAAA,CAAQ,IAAA,EAAM,CAAA;AACtC,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,GAAS,CAAA,GAAI,SAAS,MAAA,EAAU;AACzD;AAOO,SAAS,oBAAoB,OAAA,EAA2C;AAC9E,EAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,eAAe,OAAO,CAAA;AACjD,EAAA,OAAO;AAAA,IACN,EAAA,EAAI,SAAA;AAAA,IACJ,QAAA,EAAU,CAAC,GAAA,KAAQ,eAAA,CAAgB,SAAS,GAAG,CAAA;AAAA,IAC/C,SAAA,GAAY;AACX,MAAA,IAAI,KAAA,UAAe,OAAA,EAAQ;AAAA,IAC5B;AAAA,GACD;AACD;AC9CO,SAAS,kBAAA,CAAmB,MAAgB,OAAA,EAA2C;AAC7F,EAAA,OAAOC,cAAA,CAAS,MAAM,OAAO,CAAA;AAC9B;ACLO,IAAM,2BAAA,GAA8B;AAe3C,SAAS,UAAU,KAAA,EAA6E;AAC/F,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACb,OAAO,OAAA,CAAQ,KAAK,EAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,IAAI,CAAA,KAAM,CAAC,MAAM,EAAE,WAAA,EAAa,MAAM,IAAA,EAAM,SAAA,EAAW,MAAM,MAAM;AAAA,IAAC,CAAA,EAAG,CAAC;AAAA,GAC3G;AACD;AAEA,SAAS,aAAa,KAAA,EAA4D;AACjF,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA;AAC7C,EAAA,IAAI,SAAA,KAAc,MAAA,CAAO,SAAA,IAAa,SAAA,KAAc,MAAM,OAAO,KAAA;AACjE,EAAA,OAAO,QAAQ,OAAA,CAAQ,KAAK,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AAC5C,IAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,KAAA;AACpC,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,wBAAA,CAAyB,KAAA,EAAO,GAAG,CAAA;AAC7D,IAAA,OAAO,UAAA,KAAe,MAAA,IAAa,OAAA,IAAW,UAAA,IAAc,UAAA,CAAW,UAAA;AAAA,EACxE,CAAC,CAAA;AACF;AAEA,SAAS,cAAA,CACR,SACA,KAAA,EACoC;AACpC,EAAA,IAAI;AACH,IAAA,MAAM,QAAA,GAAW,QAAQ,UAAA,GAAaC,4BAAA,CAAiB,QAAQ,UAAA,CAAW,KAAK,CAAC,CAAA,GAAI,EAAC;AACrF,IAAA,IAAI,CAAC,YAAA,CAAa,QAAQ,GAAG,MAAM,IAAIC,4BAAgB,SAAS,CAAA;AAChE,IAAA,MAAM,OAAO,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,CAAE,MAAA,CAAO,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,IAAI,UAAA,CAAW,GAAG,CAAC,CAAC,CAAA;AAC7F,IAAA,OAAO,SAAA,CAAU,EAAE,GAAG,QAAA,EAAU,MAAM,EAAA,EAAI,KAAA,CAAM,KAAK,CAAA;AAAA,EACtD,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,IAAIA,4BAAgB,SAAS,CAAA;AAAA,EACpC;AACD;AAEA,SAAS,gBAAgB,OAAA,EAAwC;AAChE,EAAA,MAAM,UAAUC,mCAAA,CAAwB;AAAA,IACvC,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY,EAAC;AAAA,IACtD,GAAI,QAAQ,SAAA,GAAY,EAAE,WAAW,OAAA,CAAQ,SAAA,KAAc;AAAC,GAC5D,CAAA;AACD,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAC1C,EAAA,IAAI;AACH,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,UAAU,CAAA,IAAK,QAAQ,QAAA,EAAU;AAChD,MAAA,IAAI,OAAO,EAAA,KAAO,QAAA,EAAU,MAAM,IAAID,4BAAgB,eAAe,CAAA;AACrE,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,UAAU,CAAA;AAC3C,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,MAAM,IAAIA,4BAAgB,QAAA,CAAS,WAAA,CAAY,CAAC,CAAA,CAAE,IAAI,CAAA;AACxE,MAAA,QAAA,CAAS,GAAA,CAAI,EAAA,EAAI,QAAA,CAAS,KAAK,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,EAAE,SAAS,QAAA,EAAS;AAAA,EAC5B,SAAS,KAAA,EAAO;AACf,IAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,IAAA,QAAA,CAAS,KAAA,EAAM;AACf,IAAA,MAAM,KAAA;AAAA,EACP;AACD;AAGO,SAAS,8BAAA,CACf,UACA,OAAA,EACmC;AACnC,EAAA,IAAI,SAAS,GAAA,CAAI,2BAA2B,GAAG,MAAM,IAAIA,4BAAgB,eAAe,CAAA;AACxF,EAAA,MAAM,EAAE,OAAA,EAAS,QAAA,EAAS,GAAI,gBAAgB,OAAO,CAAA;AACrD,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,MAAM,OAAA,GAA+B,CAAC,OAAA,EAAS,KAAA,EAAO,KAAA,KAAU;AAC/D,IAAA,IAAI,QAAA,EAAU,MAAM,IAAIA,2BAAA,CAAgB,UAAU,CAAA;AAClD,IAAA,MAAM,WAA8C,EAAC;AACrD,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,EAAE,CAAA,IAAK,OAAA,EAAS;AACjC,MAAA,IAAI,OAAO,EAAA,KAAO,QAAA,EAAU,MAAM,IAAIA,4BAAgB,eAAe,CAAA;AACrE,MAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAIA,4BAAgB,iBAAiB,CAAA;AACzD,MAAA,QAAA,CAAS,IAAA,CAAK,CAAC,IAAA,EAAM,OAAO,CAAC,CAAA;AAAA,IAC9B;AACA,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,OAAA,EAAS,KAAK,CAAA;AAC7C,IAAA,MAAM,SAAS,QAAA,CAAS,GAAA,CAAI,CAAC,GAAG,OAAO,CAAA,KAAM;AAC5C,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,QAAA,CAAS,OAAA,EAAS,OAAO,CAAA;AAChD,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,MAAM,IAAIA,4BAAgB,MAAA,CAAO,WAAA,CAAY,CAAC,CAAA,CAAE,IAAI,CAAA;AACpE,MAAA,OAAO,MAAA,CAAO,KAAA;AAAA,IACf,CAAC,CAAA;AACD,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,QAAA,CAAS,QAAQ,KAAA,EAAA,EAAS,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA,CAAE,CAAC,CAAA,EAAG,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC9F,CAAA;AACA,EAAA,IAAI;AACH,IAAA,QAAA,CAAS,QAAA,CAAS,6BAA6B,OAAO,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACP,IAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,IAAA,QAAA,CAAS,KAAA,EAAM;AACf,IAAA,MAAM,IAAIA,4BAAgB,SAAS,CAAA;AAAA,EACpC;AACA,EAAA,OAAO;AAAA,IACN,OAAA;AAAA,IACA,SAAS,MAAM;AACd,MAAA,IAAI,QAAA,EAAU;AACd,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,MAAA,QAAA,CAAS,KAAA,EAAM;AAAA,IAChB;AAAA,GACD;AACD","file":"index.cjs","sourcesContent":["/**\n * Arbiter-internal paths start with $ and are not user-facing form data.\n * Filter them out of write intents.\n */\nexport function isArbiterInternalPath(path: string): boolean {\n\treturn path.startsWith(\"$\") && !path.startsWith(\"$ui.\");\n}\n","import { createSession } from \"@arbitre/core\";\nimport type { FiringResult, ProductionRule, RuleSession } from \"@arbitre/core\";\nimport type { FormPlugin, PluginEvaluateContext, PluginEvaluateResult, PluginWrite } from \"@formbar/core\";\nimport { isArbiterInternalPath } from \"./internal-paths.js\";\n\nexport interface ArbiterPluginOptions {\n\t/** Provide raw rules — a session will be created internally. */\n\treadonly rules?: readonly ProductionRule[];\n\t/** Provide a pre-configured session instead of raw rules. */\n\treadonly session?: RuleSession;\n}\n\nfunction resolveSession(options: ArbiterPluginOptions): { session: RuleSession; owned: boolean } {\n\tif (options.session) return { session: options.session, owned: false };\n\tif (options.rules) return { session: createSession({ rules: options.rules as ProductionRule[] }), owned: true };\n\tthrow new Error(\"createArbiterPlugin requires either `rules` or `session`\");\n}\n\nfunction syncSession(session: RuleSession, ctx: PluginEvaluateContext): void {\n\tconst data = ctx.data as Record<string, unknown>;\n\tfor (const key of Object.keys(data)) session.assert(key, data[key]);\n\tconst uiState = ctx.uiState as Record<string, unknown>;\n\tfor (const key of Object.keys(uiState)) session.assert(`$ui.${key}`, uiState[key]);\n}\n\nfunction toWrites(result: FiringResult): readonly PluginWrite[] {\n\treturn result.changes\n\t\t.filter((change) => !isArbiterInternalPath(change.path))\n\t\t.map((change) => ({ path: change.path, value: change.newValue, mode: \"set\" as const }));\n}\n\nfunction evaluateSession(session: RuleSession, ctx: PluginEvaluateContext): PluginEvaluateResult | undefined {\n\tif (ctx.origin.startsWith(\"plugin:arbiter\")) return;\n\tif (!ctx.change.dataChanged && !ctx.change.uiChanged) return;\n\tsyncSession(session, ctx);\n\tconst writes = toWrites(session.fire());\n\treturn { writes: writes.length > 0 ? writes : undefined };\n}\n\n/**\n * Creates a FormPlugin that bridges @arbitre/core into the formbar pipeline.\n * Syncs form data into the rule session, fires rules, and converts results\n * into PluginWrite[] records.\n */\nexport function createArbiterPlugin(options: ArbiterPluginOptions): FormPlugin {\n\tconst { session, owned } = resolveSession(options);\n\treturn {\n\t\tid: \"arbiter\",\n\t\tevaluate: (ctx) => evaluateSession(session, ctx),\n\t\tonDispose() {\n\t\t\tif (owned) session.dispose();\n\t\t},\n\t};\n}\n","import { assertSafeSegment, evaluate } from \"kuery\";\nimport type { ExprNode } from \"kuery\";\n\n/**\n * Evaluate a kuery expression against a data context.\n * This is a convenience re-export for consumers using expressions with arbiter rules.\n */\nexport function evaluateExpression(expr: ExprNode, context: Record<string, unknown>): unknown {\n\treturn evaluate(expr, context);\n}\n\nexport { assertSafeSegment };\nexport type { ExprNode };\n","import type { ThenOperatorHandler, ThenOperatorRegistry } from \"@arbitre/core\";\nimport { ExpressionError, createExpressionService, synchronousValue } from \"@formbar/expressions\";\nimport type { Authorization, Expression, ExpressionProfile, NamespaceProvider, Program } from \"@formbar/expressions\";\n\nexport const FORMBAR_VALUE_THEN_OPERATOR = \"$formbarValue\";\n\nexport interface ExpressionThenOperatorOptions {\n\treadonly programs: ReadonlyMap<string, Expression>;\n\treadonly profile?: ExpressionProfile;\n\treadonly authorize?: Authorization;\n\t/** Select trusted external roots from the current incoming stage scope. */\n\treadonly namespaces?: (scope: Readonly<Record<string, unknown>>) => Readonly<Record<string, unknown>>;\n}\n\nexport interface RegisteredExpressionThenOperator {\n\treadonly handler: ThenOperatorHandler;\n\tdispose(): void;\n}\n\nfunction providers(roots: Readonly<Record<string, unknown>>): Record<string, NamespaceProvider> {\n\treturn Object.fromEntries(\n\t\tObject.entries(roots).map(([name, root]) => [name, { getSnapshot: () => root, subscribe: () => () => {} }]),\n\t);\n}\n\nfunction plainRootMap(value: unknown): value is Readonly<Record<string, unknown>> {\n\tif (value === null || typeof value !== \"object\") return false;\n\tconst prototype = Object.getPrototypeOf(value);\n\tif (prototype !== Object.prototype && prototype !== null) return false;\n\treturn Reflect.ownKeys(value).every((key) => {\n\t\tif (typeof key !== \"string\") return false;\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, key);\n\t\treturn descriptor !== undefined && \"value\" in descriptor && descriptor.enumerable;\n\t});\n}\n\nfunction scopeProviders(\n\toptions: ExpressionThenOperatorOptions,\n\tscope: Readonly<Record<string, unknown>>,\n): Record<string, NamespaceProvider> {\n\ttry {\n\t\tconst selected = options.namespaces ? synchronousValue(options.namespaces(scope)) : {};\n\t\tif (!plainRootMap(selected)) throw new ExpressionError(\"adapter\");\n\t\tconst data = Object.fromEntries(Object.entries(scope).filter(([key]) => !key.startsWith(\"$\")));\n\t\treturn providers({ ...selected, data, ui: scope.$ui });\n\t} catch {\n\t\tthrow new ExpressionError(\"adapter\");\n\t}\n}\n\nfunction compilePrograms(options: ExpressionThenOperatorOptions) {\n\tconst service = createExpressionService({\n\t\t...(options.profile ? { profile: options.profile } : {}),\n\t\t...(options.authorize ? { authorize: options.authorize } : {}),\n\t});\n\tconst programs = new Map<string, Program>();\n\ttry {\n\t\tfor (const [id, expression] of options.programs) {\n\t\t\tif (typeof id !== \"string\") throw new ExpressionError(\"invalid-input\");\n\t\t\tconst compiled = service.compile(expression);\n\t\t\tif (!compiled.ok) throw new ExpressionError(compiled.diagnostics[0].code);\n\t\t\tprograms.set(id, compiled.value);\n\t\t}\n\t\treturn { service, programs };\n\t} catch (error) {\n\t\tservice.dispose();\n\t\tprograms.clear();\n\t\tthrow error;\n\t}\n}\n\n/** Registers Formbar's atomic expression stage in an Arbitre 0.3 public registry. */\nexport function registerExpressionThenOperator(\n\tregistry: ThenOperatorRegistry,\n\toptions: ExpressionThenOperatorOptions,\n): RegisteredExpressionThenOperator {\n\tif (registry.has(FORMBAR_VALUE_THEN_OPERATOR)) throw new ExpressionError(\"invalid-input\");\n\tconst { service, programs } = compilePrograms(options);\n\tlet disposed = false;\n\tconst handler: ThenOperatorHandler = (entries, scope, write) => {\n\t\tif (disposed) throw new ExpressionError(\"disposed\");\n\t\tconst selected: Array<readonly [string, Program]> = [];\n\t\tfor (const [path, id] of entries) {\n\t\t\tif (typeof id !== \"string\") throw new ExpressionError(\"invalid-input\");\n\t\t\tconst program = programs.get(id);\n\t\t\tif (!program) throw new ExpressionError(\"unknown-program\");\n\t\t\tselected.push([path, program]);\n\t\t}\n\t\tconst context = scopeProviders(options, scope);\n\t\tconst values = selected.map(([, program]) => {\n\t\t\tconst result = service.evaluate(program, context);\n\t\t\tif (!result.ok) throw new ExpressionError(result.diagnostics[0].code);\n\t\t\treturn result.value;\n\t\t});\n\t\tfor (let index = 0; index < selected.length; index++) write(selected[index][0], values[index]);\n\t};\n\ttry {\n\t\tregistry.register(FORMBAR_VALUE_THEN_OPERATOR, handler);\n\t} catch {\n\t\tservice.dispose();\n\t\tprograms.clear();\n\t\tthrow new ExpressionError(\"adapter\");\n\t}\n\treturn {\n\t\thandler,\n\t\tdispose: () => {\n\t\t\tif (disposed) return;\n\t\t\tdisposed = true;\n\t\t\tservice.dispose();\n\t\t\tprograms.clear();\n\t\t},\n\t};\n}\n"]}

package/dist/index.d.cts

@@ -1,7 +1,8 @@
-import { ProductionRule, RuleSession } from '@arbitre/core';
+import { ProductionRule, RuleSession, ThenOperatorHandler, ThenOperatorRegistry } from '@arbitre/core';
 import { FormPlugin } from '@formbar/core';
 import { ExprNode } from 'kuery';
 export { ExprNode, assertSafeSegment } from 'kuery';
+import { Expression, ExpressionProfile, Authorization } from '@formbar/expressions';
 
 interface ArbiterPluginOptions {
     /** Provide raw rules — a session will be created internally. */
@@ -12,7 +13,7 @@ interface ArbiterPluginOptions {
 /**
  * Creates a FormPlugin that bridges @arbitre/core into the formbar pipeline.
  * Syncs form data into the rule session, fires rules, and converts results
- * into PluginWrite[] and PluginFieldMeta records.
+ * into PluginWrite[] records.
  */
 declare function createArbiterPlugin(options: ArbiterPluginOptions): FormPlugin;
 
@@ -28,4 +29,19 @@ declare function evaluateExpression(expr: ExprNode, context: Record<string, unkn
  */
 declare function isArbiterInternalPath(path: string): boolean;
 
-export { type ArbiterPluginOptions, createArbiterPlugin, evaluateExpression, isArbiterInternalPath };
+declare const FORMBAR_VALUE_THEN_OPERATOR = "$formbarValue";
+interface ExpressionThenOperatorOptions {
+    readonly programs: ReadonlyMap<string, Expression>;
+    readonly profile?: ExpressionProfile;
+    readonly authorize?: Authorization;
+    /** Select trusted external roots from the current incoming stage scope. */
+    readonly namespaces?: (scope: Readonly<Record<string, unknown>>) => Readonly<Record<string, unknown>>;
+}
+interface RegisteredExpressionThenOperator {
+    readonly handler: ThenOperatorHandler;
+    dispose(): void;
+}
+/** Registers Formbar's atomic expression stage in an Arbitre 0.3 public registry. */
+declare function registerExpressionThenOperator(registry: ThenOperatorRegistry, options: ExpressionThenOperatorOptions): RegisteredExpressionThenOperator;
+
+export { type ArbiterPluginOptions, type ExpressionThenOperatorOptions, FORMBAR_VALUE_THEN_OPERATOR, type RegisteredExpressionThenOperator, createArbiterPlugin, evaluateExpression, isArbiterInternalPath, registerExpressionThenOperator };

package/dist/index.d.ts

@@ -1,7 +1,8 @@
-import { ProductionRule, RuleSession } from '@arbitre/core';
+import { ProductionRule, RuleSession, ThenOperatorHandler, ThenOperatorRegistry } from '@arbitre/core';
 import { FormPlugin } from '@formbar/core';
 import { ExprNode } from 'kuery';
 export { ExprNode, assertSafeSegment } from 'kuery';
+import { Expression, ExpressionProfile, Authorization } from '@formbar/expressions';
 
 interface ArbiterPluginOptions {
     /** Provide raw rules — a session will be created internally. */
@@ -12,7 +13,7 @@ interface ArbiterPluginOptions {
 /**
  * Creates a FormPlugin that bridges @arbitre/core into the formbar pipeline.
  * Syncs form data into the rule session, fires rules, and converts results
- * into PluginWrite[] and PluginFieldMeta records.
+ * into PluginWrite[] records.
  */
 declare function createArbiterPlugin(options: ArbiterPluginOptions): FormPlugin;
 
@@ -28,4 +29,19 @@ declare function evaluateExpression(expr: ExprNode, context: Record<string, unkn
  */
 declare function isArbiterInternalPath(path: string): boolean;
 
-export { type ArbiterPluginOptions, createArbiterPlugin, evaluateExpression, isArbiterInternalPath };
+declare const FORMBAR_VALUE_THEN_OPERATOR = "$formbarValue";
+interface ExpressionThenOperatorOptions {
+    readonly programs: ReadonlyMap<string, Expression>;
+    readonly profile?: ExpressionProfile;
+    readonly authorize?: Authorization;
+    /** Select trusted external roots from the current incoming stage scope. */
+    readonly namespaces?: (scope: Readonly<Record<string, unknown>>) => Readonly<Record<string, unknown>>;
+}
+interface RegisteredExpressionThenOperator {
+    readonly handler: ThenOperatorHandler;
+    dispose(): void;
+}
+/** Registers Formbar's atomic expression stage in an Arbitre 0.3 public registry. */
+declare function registerExpressionThenOperator(registry: ThenOperatorRegistry, options: ExpressionThenOperatorOptions): RegisteredExpressionThenOperator;
+
+export { type ArbiterPluginOptions, type ExpressionThenOperatorOptions, FORMBAR_VALUE_THEN_OPERATOR, type RegisteredExpressionThenOperator, createArbiterPlugin, evaluateExpression, isArbiterInternalPath, registerExpressionThenOperator };

package/dist/index.js

@@ -1,6 +1,7 @@
 import { createSession } from '@arbitre/core';
 import { evaluate } from 'kuery';
 export { assertSafeSegment } from 'kuery';
+import { ExpressionError, createExpressionService, synchronousValue } from '@formbar/expressions';
 
 // src/arbiter-plugin.ts
 
@@ -10,67 +11,126 @@ function isArbiterInternalPath(path) {
 }
 
 // src/arbiter-plugin.ts
+function resolveSession(options) {
+  if (options.session) return { session: options.session, owned: false };
+  if (options.rules) return { session: createSession({ rules: options.rules }), owned: true };
+  throw new Error("createArbiterPlugin requires either `rules` or `session`");
+}
+function syncSession(session, ctx) {
+  const data = ctx.data;
+  for (const key of Object.keys(data)) session.assert(key, data[key]);
+  const uiState = ctx.uiState;
+  for (const key of Object.keys(uiState)) session.assert(`$ui.${key}`, uiState[key]);
+}
+function toWrites(result) {
+  return result.changes.filter((change) => !isArbiterInternalPath(change.path)).map((change) => ({ path: change.path, value: change.newValue, mode: "set" }));
+}
+function evaluateSession(session, ctx) {
+  if (ctx.origin.startsWith("plugin:arbiter")) return;
+  if (!ctx.change.dataChanged && !ctx.change.uiChanged) return;
+  syncSession(session, ctx);
+  const writes = toWrites(session.fire());
+  return { writes: writes.length > 0 ? writes : void 0 };
+}
 function createArbiterPlugin(options) {
-  const { rules, session: externalSession } = options;
-  let session;
-  let ownsSession;
-  if (externalSession) {
-    session = externalSession;
-    ownsSession = false;
-  } else if (rules) {
-    session = createSession({ rules });
-    ownsSession = true;
-  } else {
-    throw new Error("createArbiterPlugin requires either `rules` or `session`");
-  }
+  const { session, owned } = resolveSession(options);
   return {
     id: "arbiter",
-    evaluate(ctx) {
-      if (ctx.origin.startsWith("plugin:arbiter")) return;
-      if (!ctx.change.dataChanged && !ctx.change.uiChanged) return;
-      const data = ctx.data;
-      for (const key of Object.keys(data)) {
-        session.assert(key, data[key]);
-      }
-      const uiState = ctx.uiState;
-      for (const key of Object.keys(uiState)) {
-        session.assert(`$ui.${key}`, uiState[key]);
-      }
-      const result = session.fire();
-      const writes = [];
-      for (const change of result.changes) {
-        if (isArbiterInternalPath(change.path)) continue;
-        writes.push({
-          path: change.path,
-          value: change.newValue,
-          mode: "set"
-        });
-      }
-      const fieldMeta = {};
-      const state = session.getState();
-      for (const [path, value] of Object.entries(state)) {
-        if (!path.startsWith("$meta.")) continue;
-        const fieldPath = path.slice("$meta.".length);
-        if (typeof value === "object" && value !== null) {
-          fieldMeta[fieldPath] = value;
-        }
-      }
-      return {
-        writes: writes.length > 0 ? writes : void 0,
-        fieldMeta: Object.keys(fieldMeta).length > 0 ? fieldMeta : void 0
-      };
-    },
+    evaluate: (ctx) => evaluateSession(session, ctx),
     onDispose() {
-      if (ownsSession) {
-        session.dispose();
-      }
+      if (owned) session.dispose();
     }
   };
 }
 function evaluateExpression(expr, context) {
   return evaluate(expr, context);
 }
+var FORMBAR_VALUE_THEN_OPERATOR = "$formbarValue";
+function providers(roots) {
+  return Object.fromEntries(
+    Object.entries(roots).map(([name, root]) => [name, { getSnapshot: () => root, subscribe: () => () => {
+    } }])
+  );
+}
+function plainRootMap(value) {
+  if (value === null || typeof value !== "object") return false;
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== Object.prototype && prototype !== null) return false;
+  return Reflect.ownKeys(value).every((key) => {
+    if (typeof key !== "string") return false;
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    return descriptor !== void 0 && "value" in descriptor && descriptor.enumerable;
+  });
+}
+function scopeProviders(options, scope) {
+  try {
+    const selected = options.namespaces ? synchronousValue(options.namespaces(scope)) : {};
+    if (!plainRootMap(selected)) throw new ExpressionError("adapter");
+    const data = Object.fromEntries(Object.entries(scope).filter(([key]) => !key.startsWith("$")));
+    return providers({ ...selected, data, ui: scope.$ui });
+  } catch {
+    throw new ExpressionError("adapter");
+  }
+}
+function compilePrograms(options) {
+  const service = createExpressionService({
+    ...options.profile ? { profile: options.profile } : {},
+    ...options.authorize ? { authorize: options.authorize } : {}
+  });
+  const programs = /* @__PURE__ */ new Map();
+  try {
+    for (const [id, expression] of options.programs) {
+      if (typeof id !== "string") throw new ExpressionError("invalid-input");
+      const compiled = service.compile(expression);
+      if (!compiled.ok) throw new ExpressionError(compiled.diagnostics[0].code);
+      programs.set(id, compiled.value);
+    }
+    return { service, programs };
+  } catch (error) {
+    service.dispose();
+    programs.clear();
+    throw error;
+  }
+}
+function registerExpressionThenOperator(registry, options) {
+  if (registry.has(FORMBAR_VALUE_THEN_OPERATOR)) throw new ExpressionError("invalid-input");
+  const { service, programs } = compilePrograms(options);
+  let disposed = false;
+  const handler = (entries, scope, write) => {
+    if (disposed) throw new ExpressionError("disposed");
+    const selected = [];
+    for (const [path, id] of entries) {
+      if (typeof id !== "string") throw new ExpressionError("invalid-input");
+      const program = programs.get(id);
+      if (!program) throw new ExpressionError("unknown-program");
+      selected.push([path, program]);
+    }
+    const context = scopeProviders(options, scope);
+    const values = selected.map(([, program]) => {
+      const result = service.evaluate(program, context);
+      if (!result.ok) throw new ExpressionError(result.diagnostics[0].code);
+      return result.value;
+    });
+    for (let index = 0; index < selected.length; index++) write(selected[index][0], values[index]);
+  };
+  try {
+    registry.register(FORMBAR_VALUE_THEN_OPERATOR, handler);
+  } catch {
+    service.dispose();
+    programs.clear();
+    throw new ExpressionError("adapter");
+  }
+  return {
+    handler,
+    dispose: () => {
+      if (disposed) return;
+      disposed = true;
+      service.dispose();
+      programs.clear();
+    }
+  };
+}
 
-export { createArbiterPlugin, evaluateExpression, isArbiterInternalPath };
+export { FORMBAR_VALUE_THEN_OPERATOR, createArbiterPlugin, evaluateExpression, isArbiterInternalPath, registerExpressionThenOperator };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal-paths.ts","../src/arbiter-plugin.ts","../src/expression-utils.ts"],"names":[],"mappings":";;;;;;;AAIO,SAAS,sBAAsB,IAAA,EAAuB;AAC5D,EAAA,OAAO,KAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,WAAW,MAAM,CAAA;AACvD;;;ACiBO,SAAS,oBAAoB,OAAA,EAA2C;AAC9E,EAAA,MAAM,EAAE,KAAA,EAAO,OAAA,EAAS,eAAA,EAAgB,GAAI,OAAA;AAE5C,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,WAAA;AAEJ,EAAA,IAAI,eAAA,EAAiB;AACpB,IAAA,OAAA,GAAU,eAAA;AACV,IAAA,WAAA,GAAc,KAAA;AAAA,EACf,WAAW,KAAA,EAAO;AACjB,IAAA,OAAA,GAAU,aAAA,CAAc,EAAE,KAAA,EAAkC,CAAA;AAC5D,IAAA,WAAA,GAAc,IAAA;AAAA,EACf,CAAA,MAAO;AACN,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC3E;AAEA,EAAA,OAAO;AAAA,IACN,EAAA,EAAI,SAAA;AAAA,IAEJ,SAAS,GAAA,EAA8D;AAEtE,MAAA,IAAI,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,gBAAgB,CAAA,EAAG;AAG7C,MAAA,IAAI,CAAC,GAAA,CAAI,MAAA,CAAO,eAAe,CAAC,GAAA,CAAI,OAAO,SAAA,EAAW;AAGtD,MAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,MAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,EAAG;AACpC,QAAA,OAAA,CAAQ,MAAA,CAAO,GAAA,EAAK,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,MAC9B;AAGA,MAAA,MAAM,UAAU,GAAA,CAAI,OAAA;AACpB,MAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACvC,QAAA,OAAA,CAAQ,OAAO,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,MAC1C;AAGA,MAAA,MAAM,MAAA,GAAuB,QAAQ,IAAA,EAAK;AAG1C,MAAA,MAAM,SAAwB,EAAC;AAC/B,MAAA,KAAA,MAAW,MAAA,IAAU,OAAO,OAAA,EAAS;AACpC,QAAA,IAAI,qBAAA,CAAsB,MAAA,CAAO,IAAI,CAAA,EAAG;AACxC,QAAA,MAAA,CAAO,IAAA,CAAK;AAAA,UACX,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,OAAO,MAAA,CAAO,QAAA;AAAA,UACd,IAAA,EAAM;AAAA,SACN,CAAA;AAAA,MACF;AAGA,MAAA,MAAM,YAA6C,EAAC;AACpD,MAAA,MAAM,KAAA,GAAQ,QAAQ,QAAA,EAAS;AAC/B,MAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAClD,QAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA,EAAG;AAEhC,QAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA;AAC5C,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAChD,UAAA,SAAA,CAAU,SAAS,CAAA,GAAI,KAAA;AAAA,QACxB;AAAA,MACD;AAEA,MAAA,OAAO;AAAA,QACN,MAAA,EAAQ,MAAA,CAAO,MAAA,GAAS,CAAA,GAAI,MAAA,GAAS,MAAA;AAAA,QACrC,WAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,MAAA,GAAS,IAAI,SAAA,GAAY;AAAA,OAC5D;AAAA,IACD,CAAA;AAAA,IAEA,SAAA,GAAY;AACX,MAAA,IAAI,WAAA,EAAa;AAChB,QAAA,OAAA,CAAQ,OAAA,EAAQ;AAAA,MACjB;AAAA,IACD;AAAA,GACD;AACD;AC5FO,SAAS,kBAAA,CAAmB,MAAgB,OAAA,EAA2C;AAC7F,EAAA,OAAO,QAAA,CAAS,MAAM,OAAO,CAAA;AAC9B","file":"index.js","sourcesContent":["/**\n * Arbiter-internal paths start with $ and are not user-facing form data.\n * Filter them out of write intents.\n */\nexport function isArbiterInternalPath(path: string): boolean {\n\treturn path.startsWith(\"$\") && !path.startsWith(\"$ui.\");\n}\n","import { createSession } from \"@arbitre/core\";\nimport type { FiringResult, ProductionRule, RuleSession } from \"@arbitre/core\";\nimport type {\n\tFormPlugin,\n\tPluginEvaluateContext,\n\tPluginEvaluateResult,\n\tPluginFieldMeta,\n\tPluginWrite,\n} from \"@formbar/core\";\nimport { isArbiterInternalPath } from \"./internal-paths.js\";\n\nexport interface ArbiterPluginOptions {\n\t/** Provide raw rules — a session will be created internally. */\n\treadonly rules?: readonly ProductionRule[];\n\t/** Provide a pre-configured session instead of raw rules. */\n\treadonly session?: RuleSession;\n}\n\n/**\n * Creates a FormPlugin that bridges @arbitre/core into the formbar pipeline.\n * Syncs form data into the rule session, fires rules, and converts results\n * into PluginWrite[] and PluginFieldMeta records.\n */\nexport function createArbiterPlugin(options: ArbiterPluginOptions): FormPlugin {\n\tconst { rules, session: externalSession } = options;\n\n\tlet session: RuleSession;\n\tlet ownsSession: boolean;\n\n\tif (externalSession) {\n\t\tsession = externalSession;\n\t\townsSession = false;\n\t} else if (rules) {\n\t\tsession = createSession({ rules: rules as ProductionRule[] });\n\t\townsSession = true;\n\t} else {\n\t\tthrow new Error(\"createArbiterPlugin requires either `rules` or `session`\");\n\t}\n\n\treturn {\n\t\tid: \"arbiter\",\n\n\t\tevaluate(ctx: PluginEvaluateContext): PluginEvaluateResult | undefined {\n\t\t\t// Prevent re-entry from own writes\n\t\t\tif (ctx.origin.startsWith(\"plugin:arbiter\")) return;\n\n\t\t\t// Short-circuit when nothing relevant changed\n\t\t\tif (!ctx.change.dataChanged && !ctx.change.uiChanged) return;\n\n\t\t\t// Sync form data fields into the session\n\t\t\tconst data = ctx.data as Record<string, unknown>;\n\t\t\tfor (const key of Object.keys(data)) {\n\t\t\t\tsession.assert(key, data[key]);\n\t\t\t}\n\n\t\t\t// Sync $ui.* state\n\t\t\tconst uiState = ctx.uiState as Record<string, unknown>;\n\t\t\tfor (const key of Object.keys(uiState)) {\n\t\t\t\tsession.assert(`$ui.${key}`, uiState[key]);\n\t\t\t}\n\n\t\t\t// Fire rules\n\t\t\tconst result: FiringResult = session.fire();\n\n\t\t\t// Convert changes to PluginWrite[], filtering internal paths\n\t\t\tconst writes: PluginWrite[] = [];\n\t\t\tfor (const change of result.changes) {\n\t\t\t\tif (isArbiterInternalPath(change.path)) continue;\n\t\t\t\twrites.push({\n\t\t\t\t\tpath: change.path,\n\t\t\t\t\tvalue: change.newValue,\n\t\t\t\t\tmode: \"set\",\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Derive field meta from session state\n\t\t\tconst fieldMeta: Record<string, PluginFieldMeta> = {};\n\t\t\tconst state = session.getState();\n\t\t\tfor (const [path, value] of Object.entries(state)) {\n\t\t\t\tif (!path.startsWith(\"$meta.\")) continue;\n\t\t\t\t// Convention: $meta.<fieldPath> holds { visible, disabled, required, readOnly, label }\n\t\t\t\tconst fieldPath = path.slice(\"$meta.\".length);\n\t\t\t\tif (typeof value === \"object\" && value !== null) {\n\t\t\t\t\tfieldMeta[fieldPath] = value as PluginFieldMeta;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\twrites: writes.length > 0 ? writes : undefined,\n\t\t\t\tfieldMeta: Object.keys(fieldMeta).length > 0 ? fieldMeta : undefined,\n\t\t\t};\n\t\t},\n\n\t\tonDispose() {\n\t\t\tif (ownsSession) {\n\t\t\t\tsession.dispose();\n\t\t\t}\n\t\t},\n\t};\n}\n","import { assertSafeSegment, evaluate } from \"kuery\";\nimport type { ExprNode } from \"kuery\";\n\n/**\n * Evaluate a kuery expression against a data context.\n * This is a convenience re-export for consumers using expressions with arbiter rules.\n */\nexport function evaluateExpression(expr: ExprNode, context: Record<string, unknown>): unknown {\n\treturn evaluate(expr, context);\n}\n\nexport { assertSafeSegment };\nexport type { ExprNode };\n"]}
+{"version":3,"sources":["../src/internal-paths.ts","../src/arbiter-plugin.ts","../src/expression-utils.ts","../src/expression-then-operator.ts"],"names":[],"mappings":";;;;;;;;AAIO,SAAS,sBAAsB,IAAA,EAAuB;AAC5D,EAAA,OAAO,KAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,WAAW,MAAM,CAAA;AACvD;;;ACMA,SAAS,eAAe,OAAA,EAAyE;AAChG,EAAA,IAAI,OAAA,CAAQ,SAAS,OAAO,EAAE,SAAS,OAAA,CAAQ,OAAA,EAAS,OAAO,KAAA,EAAM;AACrE,EAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,OAAO,EAAE,OAAA,EAAS,aAAA,CAAc,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAA2B,CAAA,EAAG,OAAO,IAAA,EAAK;AAC9G,EAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAC3E;AAEA,SAAS,WAAA,CAAY,SAAsB,GAAA,EAAkC;AAC5E,EAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,UAAW,MAAA,CAAO,GAAA,EAAK,IAAA,CAAK,GAAG,CAAC,CAAA;AAClE,EAAA,MAAM,UAAU,GAAA,CAAI,OAAA;AACpB,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAG,CAAC,CAAA;AAClF;AAEA,SAAS,SAAS,MAAA,EAA8C;AAC/D,EAAA,OAAO,MAAA,CAAO,QACZ,MAAA,CAAO,CAAC,WAAW,CAAC,qBAAA,CAAsB,MAAA,CAAO,IAAI,CAAC,CAAA,CACtD,IAAI,CAAC,MAAA,MAAY,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,OAAO,MAAA,CAAO,QAAA,EAAU,IAAA,EAAM,KAAA,EAAe,CAAE,CAAA;AACxF;AAEA,SAAS,eAAA,CAAgB,SAAsB,GAAA,EAA8D;AAC5G,EAAA,IAAI,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,gBAAgB,CAAA,EAAG;AAC7C,EAAA,IAAI,CAAC,GAAA,CAAI,MAAA,CAAO,eAAe,CAAC,GAAA,CAAI,OAAO,SAAA,EAAW;AACtD,EAAA,WAAA,CAAY,SAAS,GAAG,CAAA;AACxB,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,OAAA,CAAQ,IAAA,EAAM,CAAA;AACtC,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,GAAS,CAAA,GAAI,SAAS,MAAA,EAAU;AACzD;AAOO,SAAS,oBAAoB,OAAA,EAA2C;AAC9E,EAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,eAAe,OAAO,CAAA;AACjD,EAAA,OAAO;AAAA,IACN,EAAA,EAAI,SAAA;AAAA,IACJ,QAAA,EAAU,CAAC,GAAA,KAAQ,eAAA,CAAgB,SAAS,GAAG,CAAA;AAAA,IAC/C,SAAA,GAAY;AACX,MAAA,IAAI,KAAA,UAAe,OAAA,EAAQ;AAAA,IAC5B;AAAA,GACD;AACD;AC9CO,SAAS,kBAAA,CAAmB,MAAgB,OAAA,EAA2C;AAC7F,EAAA,OAAO,QAAA,CAAS,MAAM,OAAO,CAAA;AAC9B;ACLO,IAAM,2BAAA,GAA8B;AAe3C,SAAS,UAAU,KAAA,EAA6E;AAC/F,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACb,OAAO,OAAA,CAAQ,KAAK,EAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,IAAI,CAAA,KAAM,CAAC,MAAM,EAAE,WAAA,EAAa,MAAM,IAAA,EAAM,SAAA,EAAW,MAAM,MAAM;AAAA,IAAC,CAAA,EAAG,CAAC;AAAA,GAC3G;AACD;AAEA,SAAS,aAAa,KAAA,EAA4D;AACjF,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA;AAC7C,EAAA,IAAI,SAAA,KAAc,MAAA,CAAO,SAAA,IAAa,SAAA,KAAc,MAAM,OAAO,KAAA;AACjE,EAAA,OAAO,QAAQ,OAAA,CAAQ,KAAK,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AAC5C,IAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,KAAA;AACpC,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,wBAAA,CAAyB,KAAA,EAAO,GAAG,CAAA;AAC7D,IAAA,OAAO,UAAA,KAAe,MAAA,IAAa,OAAA,IAAW,UAAA,IAAc,UAAA,CAAW,UAAA;AAAA,EACxE,CAAC,CAAA;AACF;AAEA,SAAS,cAAA,CACR,SACA,KAAA,EACoC;AACpC,EAAA,IAAI;AACH,IAAA,MAAM,QAAA,GAAW,QAAQ,UAAA,GAAa,gBAAA,CAAiB,QAAQ,UAAA,CAAW,KAAK,CAAC,CAAA,GAAI,EAAC;AACrF,IAAA,IAAI,CAAC,YAAA,CAAa,QAAQ,GAAG,MAAM,IAAI,gBAAgB,SAAS,CAAA;AAChE,IAAA,MAAM,OAAO,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,CAAE,MAAA,CAAO,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,IAAI,UAAA,CAAW,GAAG,CAAC,CAAC,CAAA;AAC7F,IAAA,OAAO,SAAA,CAAU,EAAE,GAAG,QAAA,EAAU,MAAM,EAAA,EAAI,KAAA,CAAM,KAAK,CAAA;AAAA,EACtD,CAAA,CAAA,MAAQ;AACP,IAAA,MAAM,IAAI,gBAAgB,SAAS,CAAA;AAAA,EACpC;AACD;AAEA,SAAS,gBAAgB,OAAA,EAAwC;AAChE,EAAA,MAAM,UAAU,uBAAA,CAAwB;AAAA,IACvC,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY,EAAC;AAAA,IACtD,GAAI,QAAQ,SAAA,GAAY,EAAE,WAAW,OAAA,CAAQ,SAAA,KAAc;AAAC,GAC5D,CAAA;AACD,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAC1C,EAAA,IAAI;AACH,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,UAAU,CAAA,IAAK,QAAQ,QAAA,EAAU;AAChD,MAAA,IAAI,OAAO,EAAA,KAAO,QAAA,EAAU,MAAM,IAAI,gBAAgB,eAAe,CAAA;AACrE,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,UAAU,CAAA;AAC3C,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,MAAM,IAAI,gBAAgB,QAAA,CAAS,WAAA,CAAY,CAAC,CAAA,CAAE,IAAI,CAAA;AACxE,MAAA,QAAA,CAAS,GAAA,CAAI,EAAA,EAAI,QAAA,CAAS,KAAK,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,EAAE,SAAS,QAAA,EAAS;AAAA,EAC5B,SAAS,KAAA,EAAO;AACf,IAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,IAAA,QAAA,CAAS,KAAA,EAAM;AACf,IAAA,MAAM,KAAA;AAAA,EACP;AACD;AAGO,SAAS,8BAAA,CACf,UACA,OAAA,EACmC;AACnC,EAAA,IAAI,SAAS,GAAA,CAAI,2BAA2B,GAAG,MAAM,IAAI,gBAAgB,eAAe,CAAA;AACxF,EAAA,MAAM,EAAE,OAAA,EAAS,QAAA,EAAS,GAAI,gBAAgB,OAAO,CAAA;AACrD,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,MAAM,OAAA,GAA+B,CAAC,OAAA,EAAS,KAAA,EAAO,KAAA,KAAU;AAC/D,IAAA,IAAI,QAAA,EAAU,MAAM,IAAI,eAAA,CAAgB,UAAU,CAAA;AAClD,IAAA,MAAM,WAA8C,EAAC;AACrD,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,EAAE,CAAA,IAAK,OAAA,EAAS;AACjC,MAAA,IAAI,OAAO,EAAA,KAAO,QAAA,EAAU,MAAM,IAAI,gBAAgB,eAAe,CAAA;AACrE,MAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,gBAAgB,iBAAiB,CAAA;AACzD,MAAA,QAAA,CAAS,IAAA,CAAK,CAAC,IAAA,EAAM,OAAO,CAAC,CAAA;AAAA,IAC9B;AACA,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,OAAA,EAAS,KAAK,CAAA;AAC7C,IAAA,MAAM,SAAS,QAAA,CAAS,GAAA,CAAI,CAAC,GAAG,OAAO,CAAA,KAAM;AAC5C,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,QAAA,CAAS,OAAA,EAAS,OAAO,CAAA;AAChD,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,MAAM,IAAI,gBAAgB,MAAA,CAAO,WAAA,CAAY,CAAC,CAAA,CAAE,IAAI,CAAA;AACpE,MAAA,OAAO,MAAA,CAAO,KAAA;AAAA,IACf,CAAC,CAAA;AACD,IAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,QAAA,CAAS,QAAQ,KAAA,EAAA,EAAS,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA,CAAE,CAAC,CAAA,EAAG,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC9F,CAAA;AACA,EAAA,IAAI;AACH,IAAA,QAAA,CAAS,QAAA,CAAS,6BAA6B,OAAO,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACP,IAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,IAAA,QAAA,CAAS,KAAA,EAAM;AACf,IAAA,MAAM,IAAI,gBAAgB,SAAS,CAAA;AAAA,EACpC;AACA,EAAA,OAAO;AAAA,IACN,OAAA;AAAA,IACA,SAAS,MAAM;AACd,MAAA,IAAI,QAAA,EAAU;AACd,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,MAAA,QAAA,CAAS,KAAA,EAAM;AAAA,IAChB;AAAA,GACD;AACD","file":"index.js","sourcesContent":["/**\n * Arbiter-internal paths start with $ and are not user-facing form data.\n * Filter them out of write intents.\n */\nexport function isArbiterInternalPath(path: string): boolean {\n\treturn path.startsWith(\"$\") && !path.startsWith(\"$ui.\");\n}\n","import { createSession } from \"@arbitre/core\";\nimport type { FiringResult, ProductionRule, RuleSession } from \"@arbitre/core\";\nimport type { FormPlugin, PluginEvaluateContext, PluginEvaluateResult, PluginWrite } from \"@formbar/core\";\nimport { isArbiterInternalPath } from \"./internal-paths.js\";\n\nexport interface ArbiterPluginOptions {\n\t/** Provide raw rules — a session will be created internally. */\n\treadonly rules?: readonly ProductionRule[];\n\t/** Provide a pre-configured session instead of raw rules. */\n\treadonly session?: RuleSession;\n}\n\nfunction resolveSession(options: ArbiterPluginOptions): { session: RuleSession; owned: boolean } {\n\tif (options.session) return { session: options.session, owned: false };\n\tif (options.rules) return { session: createSession({ rules: options.rules as ProductionRule[] }), owned: true };\n\tthrow new Error(\"createArbiterPlugin requires either `rules` or `session`\");\n}\n\nfunction syncSession(session: RuleSession, ctx: PluginEvaluateContext): void {\n\tconst data = ctx.data as Record<string, unknown>;\n\tfor (const key of Object.keys(data)) session.assert(key, data[key]);\n\tconst uiState = ctx.uiState as Record<string, unknown>;\n\tfor (const key of Object.keys(uiState)) session.assert(`$ui.${key}`, uiState[key]);\n}\n\nfunction toWrites(result: FiringResult): readonly PluginWrite[] {\n\treturn result.changes\n\t\t.filter((change) => !isArbiterInternalPath(change.path))\n\t\t.map((change) => ({ path: change.path, value: change.newValue, mode: \"set\" as const }));\n}\n\nfunction evaluateSession(session: RuleSession, ctx: PluginEvaluateContext): PluginEvaluateResult | undefined {\n\tif (ctx.origin.startsWith(\"plugin:arbiter\")) return;\n\tif (!ctx.change.dataChanged && !ctx.change.uiChanged) return;\n\tsyncSession(session, ctx);\n\tconst writes = toWrites(session.fire());\n\treturn { writes: writes.length > 0 ? writes : undefined };\n}\n\n/**\n * Creates a FormPlugin that bridges @arbitre/core into the formbar pipeline.\n * Syncs form data into the rule session, fires rules, and converts results\n * into PluginWrite[] records.\n */\nexport function createArbiterPlugin(options: ArbiterPluginOptions): FormPlugin {\n\tconst { session, owned } = resolveSession(options);\n\treturn {\n\t\tid: \"arbiter\",\n\t\tevaluate: (ctx) => evaluateSession(session, ctx),\n\t\tonDispose() {\n\t\t\tif (owned) session.dispose();\n\t\t},\n\t};\n}\n","import { assertSafeSegment, evaluate } from \"kuery\";\nimport type { ExprNode } from \"kuery\";\n\n/**\n * Evaluate a kuery expression against a data context.\n * This is a convenience re-export for consumers using expressions with arbiter rules.\n */\nexport function evaluateExpression(expr: ExprNode, context: Record<string, unknown>): unknown {\n\treturn evaluate(expr, context);\n}\n\nexport { assertSafeSegment };\nexport type { ExprNode };\n","import type { ThenOperatorHandler, ThenOperatorRegistry } from \"@arbitre/core\";\nimport { ExpressionError, createExpressionService, synchronousValue } from \"@formbar/expressions\";\nimport type { Authorization, Expression, ExpressionProfile, NamespaceProvider, Program } from \"@formbar/expressions\";\n\nexport const FORMBAR_VALUE_THEN_OPERATOR = \"$formbarValue\";\n\nexport interface ExpressionThenOperatorOptions {\n\treadonly programs: ReadonlyMap<string, Expression>;\n\treadonly profile?: ExpressionProfile;\n\treadonly authorize?: Authorization;\n\t/** Select trusted external roots from the current incoming stage scope. */\n\treadonly namespaces?: (scope: Readonly<Record<string, unknown>>) => Readonly<Record<string, unknown>>;\n}\n\nexport interface RegisteredExpressionThenOperator {\n\treadonly handler: ThenOperatorHandler;\n\tdispose(): void;\n}\n\nfunction providers(roots: Readonly<Record<string, unknown>>): Record<string, NamespaceProvider> {\n\treturn Object.fromEntries(\n\t\tObject.entries(roots).map(([name, root]) => [name, { getSnapshot: () => root, subscribe: () => () => {} }]),\n\t);\n}\n\nfunction plainRootMap(value: unknown): value is Readonly<Record<string, unknown>> {\n\tif (value === null || typeof value !== \"object\") return false;\n\tconst prototype = Object.getPrototypeOf(value);\n\tif (prototype !== Object.prototype && prototype !== null) return false;\n\treturn Reflect.ownKeys(value).every((key) => {\n\t\tif (typeof key !== \"string\") return false;\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, key);\n\t\treturn descriptor !== undefined && \"value\" in descriptor && descriptor.enumerable;\n\t});\n}\n\nfunction scopeProviders(\n\toptions: ExpressionThenOperatorOptions,\n\tscope: Readonly<Record<string, unknown>>,\n): Record<string, NamespaceProvider> {\n\ttry {\n\t\tconst selected = options.namespaces ? synchronousValue(options.namespaces(scope)) : {};\n\t\tif (!plainRootMap(selected)) throw new ExpressionError(\"adapter\");\n\t\tconst data = Object.fromEntries(Object.entries(scope).filter(([key]) => !key.startsWith(\"$\")));\n\t\treturn providers({ ...selected, data, ui: scope.$ui });\n\t} catch {\n\t\tthrow new ExpressionError(\"adapter\");\n\t}\n}\n\nfunction compilePrograms(options: ExpressionThenOperatorOptions) {\n\tconst service = createExpressionService({\n\t\t...(options.profile ? { profile: options.profile } : {}),\n\t\t...(options.authorize ? { authorize: options.authorize } : {}),\n\t});\n\tconst programs = new Map<string, Program>();\n\ttry {\n\t\tfor (const [id, expression] of options.programs) {\n\t\t\tif (typeof id !== \"string\") throw new ExpressionError(\"invalid-input\");\n\t\t\tconst compiled = service.compile(expression);\n\t\t\tif (!compiled.ok) throw new ExpressionError(compiled.diagnostics[0].code);\n\t\t\tprograms.set(id, compiled.value);\n\t\t}\n\t\treturn { service, programs };\n\t} catch (error) {\n\t\tservice.dispose();\n\t\tprograms.clear();\n\t\tthrow error;\n\t}\n}\n\n/** Registers Formbar's atomic expression stage in an Arbitre 0.3 public registry. */\nexport function registerExpressionThenOperator(\n\tregistry: ThenOperatorRegistry,\n\toptions: ExpressionThenOperatorOptions,\n): RegisteredExpressionThenOperator {\n\tif (registry.has(FORMBAR_VALUE_THEN_OPERATOR)) throw new ExpressionError(\"invalid-input\");\n\tconst { service, programs } = compilePrograms(options);\n\tlet disposed = false;\n\tconst handler: ThenOperatorHandler = (entries, scope, write) => {\n\t\tif (disposed) throw new ExpressionError(\"disposed\");\n\t\tconst selected: Array<readonly [string, Program]> = [];\n\t\tfor (const [path, id] of entries) {\n\t\t\tif (typeof id !== \"string\") throw new ExpressionError(\"invalid-input\");\n\t\t\tconst program = programs.get(id);\n\t\t\tif (!program) throw new ExpressionError(\"unknown-program\");\n\t\t\tselected.push([path, program]);\n\t\t}\n\t\tconst context = scopeProviders(options, scope);\n\t\tconst values = selected.map(([, program]) => {\n\t\t\tconst result = service.evaluate(program, context);\n\t\t\tif (!result.ok) throw new ExpressionError(result.diagnostics[0].code);\n\t\t\treturn result.value;\n\t\t});\n\t\tfor (let index = 0; index < selected.length; index++) write(selected[index][0], values[index]);\n\t};\n\ttry {\n\t\tregistry.register(FORMBAR_VALUE_THEN_OPERATOR, handler);\n\t} catch {\n\t\tservice.dispose();\n\t\tprograms.clear();\n\t\tthrow new ExpressionError(\"adapter\");\n\t}\n\treturn {\n\t\thandler,\n\t\tdispose: () => {\n\t\t\tif (disposed) return;\n\t\t\tdisposed = true;\n\t\t\tservice.dispose();\n\t\t\tprograms.clear();\n\t\t},\n\t};\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@formbar/arbiter",
-	"version": "0.3.0",
+	"version": "0.7.0",
 	"type": "module",
 	"description": "Arbiter rule engine bridge for @formbar/core — declarative UI governance via production rules",
 	"license": "MIT",
@@ -24,17 +24,18 @@
 	"scripts": {
 		"build": "tsc --noEmit",
 		"build:dist": "tsup",
-		"test": "vitest run"
+		"test": "vitest run --root ../.. packages/arbiter/src/__tests__"
 	},
 	"dependencies": {
-		"@formbar/core": "^0.3.0"
+		"@formbar/expressions": "^0.4.0",
+		"@formbar/core": "^0.7.0"
 	},
 	"peerDependencies": {
-		"@arbitre/core": ">=0.1.0",
-		"kuery": ">=2.0.0"
+		"@arbitre/core": "^0.3.0",
+		"kuery": "^2.1.0"
 	},
 	"devDependencies": {
-		"@arbitre/core": "^0.2.0",
-		"kuery": "^2.0.0"
+		"@arbitre/core": "^0.3.0",
+		"kuery": "^2.1.0"
 	}
 }

package/src/__tests__/arbiter-integration.test.ts

@@ -86,6 +86,8 @@ describe("createArbiterPlugin with pre-configured session", () => {
 		expect((state.uiState as Record<string, unknown>).visible).toBe(true);
 		// data writes should pass through
 		expect((state.data as Record<string, unknown>).name).toBe("kept");
+		// $meta remains internal; Arbiter policy production is intentionally deferred.
+		expect(state.fieldPolicy).toEqual([]);
 		form.dispose();
 	});
 });

package/src/__tests__/expression-then-operator.test.ts

@@ -0,0 +1,150 @@
+import { createSession } from "@arbitre/core";
+import type { ThenOperatorHandler, ThenOperatorRegistry } from "@arbitre/core";
+import { ExpressionError } from "@formbar/expressions";
+import { describe, expect, it, vi } from "vitest";
+import { literal, op, ref } from "../../../../test/expression-fixtures.js";
+import { FORMBAR_VALUE_THEN_OPERATOR, registerExpressionThenOperator } from "../index.js";
+
+function createRegistry(): ThenOperatorRegistry {
+	const handlers = new Map<string, ThenOperatorHandler>();
+	return {
+		register(name, handler) {
+			if (handlers.has(name)) throw new Error("duplicate");
+			handlers.set(name, handler);
+		},
+		get: (name) => handlers.get(name),
+		has: (name) => handlers.has(name),
+	};
+}
+
+function programMap(entries: Record<string, ReturnType<typeof literal> | ReturnType<typeof ref>>) {
+	return new Map(Object.entries(entries));
+}
+
+describe("Arbitre expression then operator", () => {
+	it("registers the fixed public name and rejects duplicate registration", () => {
+		const registry = createRegistry();
+		const registered = registerExpressionThenOperator(registry, { programs: programMap({ value: literal(1) }) });
+		expect(registry.get(FORMBAR_VALUE_THEN_OPERATOR)).toBe(registered.handler);
+		expect(() => registerExpressionThenOperator(registry, { programs: new Map() })).toThrow(/^invalid-input$/);
+		registered.dispose();
+	});
+
+	it("compiles every program before mutating the registry and cleans up registration failures", () => {
+		const registry = createRegistry();
+		const register = vi.spyOn(registry, "register");
+		expect(() =>
+			registerExpressionThenOperator(registry, {
+				programs: new Map([
+					["ok", literal(1)],
+					["bad", { kind: "op", op: "missing", args: [] }],
+				]),
+			}),
+		).toThrow(/^unsupported-operator$/);
+		expect(register).not.toHaveBeenCalled();
+		const failing = {
+			...createRegistry(),
+			register: () => {
+				throw new Error("secret");
+			},
+		};
+		expect(() => registerExpressionThenOperator(failing, { programs: new Map() })).toThrow(/^adapter$/);
+	});
+
+	it("uses one incoming scope for atomic ordered writes while separate stages chain", () => {
+		const registry = createRegistry();
+		registerExpressionThenOperator(registry, {
+			programs: new Map([
+				["source", ref("source")],
+				["first", ref("first")],
+			]),
+		});
+		const session = createSession({
+			initialState: { trigger: true, source: 2, first: 10 },
+			thenOperators: registry,
+			rules: [
+				{
+					name: "pipeline",
+					when: { trigger: true },
+					then: [
+						{ $set: { source: 3 } },
+						{ $formbarValue: { first: "source", sameStage: "first" } },
+						{ $formbarValue: { nextStage: "first" } },
+					],
+				},
+			],
+		});
+		const result = session.fire();
+		expect(session.getState()).toMatchObject({ source: 3, first: 3, sameStage: 10, nextStage: 3 });
+		expect(result.changes.map(({ path }) => path)).toEqual(["source", "first", "sameStage", "nextStage"]);
+		expect(session.introspect.getRuleDependencies("pipeline")).toMatchObject({
+			actionWrites: ["source"],
+			actionWritesUnknown: true,
+			rhsReads: [],
+		});
+	});
+
+	it("evaluates all entries before writing and records no partial changes on failure", () => {
+		const registry = createRegistry();
+		registerExpressionThenOperator(registry, {
+			programs: programMap({ ok: literal(1), denied: ref("secret") }),
+			authorize: (reference) => reference.segments[0] !== "secret",
+		});
+		const session = createSession({
+			initialState: { trigger: true, secret: 9 },
+			thenOperators: registry,
+			rules: [
+				{ name: "atomic", when: { trigger: true }, then: [{ $formbarValue: { first: "ok", second: "denied" } }] },
+			],
+		});
+		expect(() => session.fire()).toThrow(/^denied$/);
+		expect(session.getPath("first")).toBeUndefined();
+	});
+
+	it("selects plain synchronous namespaces and maps selector failures to adapter", async () => {
+		const registry = createRegistry();
+		let selection: unknown = { pricing: { rate: 5 } };
+		const registered = registerExpressionThenOperator(registry, {
+			programs: new Map([["total", op("add", ref("source"), ref("rate", "pricing"))]]),
+			namespaces: () => selection as Record<string, unknown>,
+		});
+		const run = () => registered.handler(new Map([["total", "total"]]), { source: 2 }, () => {});
+		expect(run).not.toThrow();
+		selection = null;
+		expect(run).toThrow(/^adapter$/);
+		selection = Promise.reject(new Error("secret"));
+		expect(run).toThrow(/^adapter$/);
+		await new Promise((resolve) => setTimeout(resolve, 0));
+		selection = Object.create({ inherited: true });
+		expect(run).toThrow(/^adapter$/);
+	});
+
+	it("rejects malformed IDs, unknown programs, and use after idempotent disposal", () => {
+		const registry = createRegistry();
+		const registered = registerExpressionThenOperator(registry, { programs: programMap({ value: literal(1) }) });
+		expect(() => registered.handler(new Map([["x", 1]]), {}, () => {})).toThrow(/^invalid-input$/);
+		expect(() => registered.handler(new Map([["x", "unknown"]]), {}, () => {})).toThrow(/^unknown-program$/);
+		registered.dispose();
+		registered.dispose();
+		expect(() => registered.handler(new Map([["x", "value"]]), {}, () => {})).toThrow(/^disposed$/);
+		expect(() => {
+			throw new ExpressionError("adapter");
+		}).toThrow(/^adapter$/);
+	});
+
+	it("participates in Arbitre truth maintenance through tracked writes", () => {
+		const registry = createRegistry();
+		registerExpressionThenOperator(registry, { programs: programMap({ value: literal(7) }) });
+		const session = createSession({
+			initialState: { active: false },
+			thenOperators: registry,
+			rules: [{ name: "derived", when: { active: true }, then: [{ $formbarValue: { derived: "value" } }] }],
+		});
+		session.assert("active", true);
+		expect(session.fire().changes.some(({ path }) => path === "derived")).toBe(true);
+		session.assert("active", false);
+		expect(session.fire().changes.some(({ path, newValue }) => path === "derived" && newValue === undefined)).toBe(
+			true,
+		);
+	});
+});

package/src/arbiter-plugin.ts

@@ -1,12 +1,6 @@
 import { createSession } from "@arbitre/core";
 import type { FiringResult, ProductionRule, RuleSession } from "@arbitre/core";
-import type {
-	FormPlugin,
-	PluginEvaluateContext,
-	PluginEvaluateResult,
-	PluginFieldMeta,
-	PluginWrite,
-} from "@formbar/core";
+import type { FormPlugin, PluginEvaluateContext, PluginEvaluateResult, PluginWrite } from "@formbar/core";
 import { isArbiterInternalPath } from "./internal-paths.js";
 
 export interface ArbiterPluginOptions {
@@ -16,85 +10,45 @@ export interface ArbiterPluginOptions {
 	readonly session?: RuleSession;
 }
 
+function resolveSession(options: ArbiterPluginOptions): { session: RuleSession; owned: boolean } {
+	if (options.session) return { session: options.session, owned: false };
+	if (options.rules) return { session: createSession({ rules: options.rules as ProductionRule[] }), owned: true };
+	throw new Error("createArbiterPlugin requires either `rules` or `session`");
+}
+
+function syncSession(session: RuleSession, ctx: PluginEvaluateContext): void {
+	const data = ctx.data as Record<string, unknown>;
+	for (const key of Object.keys(data)) session.assert(key, data[key]);
+	const uiState = ctx.uiState as Record<string, unknown>;
+	for (const key of Object.keys(uiState)) session.assert(`$ui.${key}`, uiState[key]);
+}
+
+function toWrites(result: FiringResult): readonly PluginWrite[] {
+	return result.changes
+		.filter((change) => !isArbiterInternalPath(change.path))
+		.map((change) => ({ path: change.path, value: change.newValue, mode: "set" as const }));
+}
+
+function evaluateSession(session: RuleSession, ctx: PluginEvaluateContext): PluginEvaluateResult | undefined {
+	if (ctx.origin.startsWith("plugin:arbiter")) return;
+	if (!ctx.change.dataChanged && !ctx.change.uiChanged) return;
+	syncSession(session, ctx);
+	const writes = toWrites(session.fire());
+	return { writes: writes.length > 0 ? writes : undefined };
+}
+
 /**
  * Creates a FormPlugin that bridges @arbitre/core into the formbar pipeline.
  * Syncs form data into the rule session, fires rules, and converts results
- * into PluginWrite[] and PluginFieldMeta records.
+ * into PluginWrite[] records.
  */
 export function createArbiterPlugin(options: ArbiterPluginOptions): FormPlugin {
-	const { rules, session: externalSession } = options;
-
-	let session: RuleSession;
-	let ownsSession: boolean;
-
-	if (externalSession) {
-		session = externalSession;
-		ownsSession = false;
-	} else if (rules) {
-		session = createSession({ rules: rules as ProductionRule[] });
-		ownsSession = true;
-	} else {
-		throw new Error("createArbiterPlugin requires either `rules` or `session`");
-	}
-
+	const { session, owned } = resolveSession(options);
 	return {
 		id: "arbiter",
-
-		evaluate(ctx: PluginEvaluateContext): PluginEvaluateResult | undefined {
-			// Prevent re-entry from own writes
-			if (ctx.origin.startsWith("plugin:arbiter")) return;
-
-			// Short-circuit when nothing relevant changed
-			if (!ctx.change.dataChanged && !ctx.change.uiChanged) return;
-
-			// Sync form data fields into the session
-			const data = ctx.data as Record<string, unknown>;
-			for (const key of Object.keys(data)) {
-				session.assert(key, data[key]);
-			}
-
-			// Sync $ui.* state
-			const uiState = ctx.uiState as Record<string, unknown>;
-			for (const key of Object.keys(uiState)) {
-				session.assert(`$ui.${key}`, uiState[key]);
-			}
-
-			// Fire rules
-			const result: FiringResult = session.fire();
-
-			// Convert changes to PluginWrite[], filtering internal paths
-			const writes: PluginWrite[] = [];
-			for (const change of result.changes) {
-				if (isArbiterInternalPath(change.path)) continue;
-				writes.push({
-					path: change.path,
-					value: change.newValue,
-					mode: "set",
-				});
-			}
-
-			// Derive field meta from session state
-			const fieldMeta: Record<string, PluginFieldMeta> = {};
-			const state = session.getState();
-			for (const [path, value] of Object.entries(state)) {
-				if (!path.startsWith("$meta.")) continue;
-				// Convention: $meta.<fieldPath> holds { visible, disabled, required, readOnly, label }
-				const fieldPath = path.slice("$meta.".length);
-				if (typeof value === "object" && value !== null) {
-					fieldMeta[fieldPath] = value as PluginFieldMeta;
-				}
-			}
-
-			return {
-				writes: writes.length > 0 ? writes : undefined,
-				fieldMeta: Object.keys(fieldMeta).length > 0 ? fieldMeta : undefined,
-			};
-		},
-
+		evaluate: (ctx) => evaluateSession(session, ctx),
 		onDispose() {
-			if (ownsSession) {
-				session.dispose();
-			}
+			if (owned) session.dispose();
 		},
 	};
 }

package/src/expression-then-operator.ts

@@ -0,0 +1,113 @@
+import type { ThenOperatorHandler, ThenOperatorRegistry } from "@arbitre/core";
+import { ExpressionError, createExpressionService, synchronousValue } from "@formbar/expressions";
+import type { Authorization, Expression, ExpressionProfile, NamespaceProvider, Program } from "@formbar/expressions";
+
+export const FORMBAR_VALUE_THEN_OPERATOR = "$formbarValue";
+
+export interface ExpressionThenOperatorOptions {
+	readonly programs: ReadonlyMap<string, Expression>;
+	readonly profile?: ExpressionProfile;
+	readonly authorize?: Authorization;
+	/** Select trusted external roots from the current incoming stage scope. */
+	readonly namespaces?: (scope: Readonly<Record<string, unknown>>) => Readonly<Record<string, unknown>>;
+}
+
+export interface RegisteredExpressionThenOperator {
+	readonly handler: ThenOperatorHandler;
+	dispose(): void;
+}
+
+function providers(roots: Readonly<Record<string, unknown>>): Record<string, NamespaceProvider> {
+	return Object.fromEntries(
+		Object.entries(roots).map(([name, root]) => [name, { getSnapshot: () => root, subscribe: () => () => {} }]),
+	);
+}
+
+function plainRootMap(value: unknown): value is Readonly<Record<string, unknown>> {
+	if (value === null || typeof value !== "object") return false;
+	const prototype = Object.getPrototypeOf(value);
+	if (prototype !== Object.prototype && prototype !== null) return false;
+	return Reflect.ownKeys(value).every((key) => {
+		if (typeof key !== "string") return false;
+		const descriptor = Object.getOwnPropertyDescriptor(value, key);
+		return descriptor !== undefined && "value" in descriptor && descriptor.enumerable;
+	});
+}
+
+function scopeProviders(
+	options: ExpressionThenOperatorOptions,
+	scope: Readonly<Record<string, unknown>>,
+): Record<string, NamespaceProvider> {
+	try {
+		const selected = options.namespaces ? synchronousValue(options.namespaces(scope)) : {};
+		if (!plainRootMap(selected)) throw new ExpressionError("adapter");
+		const data = Object.fromEntries(Object.entries(scope).filter(([key]) => !key.startsWith("$")));
+		return providers({ ...selected, data, ui: scope.$ui });
+	} catch {
+		throw new ExpressionError("adapter");
+	}
+}
+
+function compilePrograms(options: ExpressionThenOperatorOptions) {
+	const service = createExpressionService({
+		...(options.profile ? { profile: options.profile } : {}),
+		...(options.authorize ? { authorize: options.authorize } : {}),
+	});
+	const programs = new Map<string, Program>();
+	try {
+		for (const [id, expression] of options.programs) {
+			if (typeof id !== "string") throw new ExpressionError("invalid-input");
+			const compiled = service.compile(expression);
+			if (!compiled.ok) throw new ExpressionError(compiled.diagnostics[0].code);
+			programs.set(id, compiled.value);
+		}
+		return { service, programs };
+	} catch (error) {
+		service.dispose();
+		programs.clear();
+		throw error;
+	}
+}
+
+/** Registers Formbar's atomic expression stage in an Arbitre 0.3 public registry. */
+export function registerExpressionThenOperator(
+	registry: ThenOperatorRegistry,
+	options: ExpressionThenOperatorOptions,
+): RegisteredExpressionThenOperator {
+	if (registry.has(FORMBAR_VALUE_THEN_OPERATOR)) throw new ExpressionError("invalid-input");
+	const { service, programs } = compilePrograms(options);
+	let disposed = false;
+	const handler: ThenOperatorHandler = (entries, scope, write) => {
+		if (disposed) throw new ExpressionError("disposed");
+		const selected: Array<readonly [string, Program]> = [];
+		for (const [path, id] of entries) {
+			if (typeof id !== "string") throw new ExpressionError("invalid-input");
+			const program = programs.get(id);
+			if (!program) throw new ExpressionError("unknown-program");
+			selected.push([path, program]);
+		}
+		const context = scopeProviders(options, scope);
+		const values = selected.map(([, program]) => {
+			const result = service.evaluate(program, context);
+			if (!result.ok) throw new ExpressionError(result.diagnostics[0].code);
+			return result.value;
+		});
+		for (let index = 0; index < selected.length; index++) write(selected[index][0], values[index]);
+	};
+	try {
+		registry.register(FORMBAR_VALUE_THEN_OPERATOR, handler);
+	} catch {
+		service.dispose();
+		programs.clear();
+		throw new ExpressionError("adapter");
+	}
+	return {
+		handler,
+		dispose: () => {
+			if (disposed) return;
+			disposed = true;
+			service.dispose();
+			programs.clear();
+		},
+	};
+}

package/src/index.ts

@@ -3,3 +3,9 @@ export type { ArbiterPluginOptions } from "./arbiter-plugin.js";
 export { evaluateExpression, assertSafeSegment } from "./expression-utils.js";
 export type { ExprNode } from "./expression-utils.js";
 export { isArbiterInternalPath } from "./internal-paths.js";
+export {
+	FORMBAR_VALUE_THEN_OPERATOR,
+	registerExpressionThenOperator,
+	type ExpressionThenOperatorOptions,
+	type RegisteredExpressionThenOperator,
+} from "./expression-then-operator.js";