@gettersethya/mira 0.1.0-alpha.10

package/dist/src/repository/types.d.ts

@@ -0,0 +1,42 @@
+/** A raw database row — no domain types at this layer. */
+export type RepoRecord = Record<string, unknown>;
+/** A cursor-based result from a paginated list query. No COUNT(*) overhead. */
+export type CursorResult<A> = {
+    items: ReadonlyArray<A>;
+};
+/**
+ * A pre-compiled WHERE fragment from `enforcerForAction()`.
+ * The repository wraps it in `unsafeFragment` and splices it into template literals.
+ */
+export type WhereClause = {
+    sql: string;
+    params: ReadonlyArray<unknown>;
+};
+export type SortOrder = {
+    field: string;
+    direction: "asc" | "desc";
+};
+/** One LEFT JOIN to inline a related record alongside the main row. */
+export type ExpandDef = {
+    localField: string;
+    targetTable: string;
+    targetColumns: ReadonlyArray<string>;
+};
+/** Options for list() — where is optional (omit for public collections). */
+export type ListOptions = {
+    where?: WhereClause;
+    sort?: SortOrder;
+    fields?: ReadonlyArray<string>;
+    expand?: ReadonlyArray<ExpandDef>;
+};
+/**
+ * Options for viewFilter() — where is required because the caller always
+ * specifies what they are filtering by.
+ */
+export type FilterOptions = {
+    where: WhereClause;
+    sort?: SortOrder;
+    fields?: ReadonlyArray<string>;
+    expand?: ReadonlyArray<ExpandDef>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/repository/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/repository/types.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEhD,+EAA+E;AAC/E,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI;IAC5B,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CACxB,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;CAC1B,CAAA;AAED,uEAAuE;AACvE,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CACrC,CAAA;AAED,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAC9B,MAAM,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAA;CAClC,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAC9B,MAAM,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAA;CAClC,CAAA"}

package/dist/src/repository/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/repository/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/repository/types.ts"],"names":[],"mappings":""}

package/dist/src/rule/compiler.d.ts

@@ -0,0 +1,52 @@
+import type { CollectionSchema, ExprNode, OperandNode } from "@gettersethya/mira-client";
+/**
+ * Context passed through the compilation pipeline.
+ * Manages parameter generation, table aliasing, and field mapping.
+ */
+export type CompileCtx = {
+    /** Maps field names to their database column names. */
+    columnOfField: (field: string) => string;
+    /** Table alias prefix (e.g., `"t"`). `undefined` omits the prefix. */
+    tableAlias?: string;
+    /** Generates the next placeholder name (e.g., `@p0`, `@p1`). */
+    nextParam: () => string;
+    /** Accumulator for parameter bindings (placeholder → value). */
+    params: Record<string, unknown>;
+    /** Map of all collection schemas for subquery resolution. */
+    collectionSchemas: Record<string, CollectionSchema>;
+    /** Name of the auth collection for `@auth_*` placeholders. */
+    authCollection?: string;
+};
+/**
+ * Compiles a rule expression tree into a SQL WHERE clause string.
+ * Parameter values are written into `ctx.params` as side effects.
+ *
+ * @example
+ * const ctx = {
+ *   tableAlias: "t",
+ *   nextParam: () => `@p${i++}`,
+ *   params: {},
+ *   columnOfField: (f) => f,
+ *   collectionSchemas: {},
+ *   authCollection: "users"
+ * }
+ * compile(Rule.field("age").gt(Rule.literal(18)), ctx)
+ * // => "t.age > @p0"
+ */
+export declare function compile(node: ExprNode, ctx: CompileCtx): string;
+/**
+ * Compiles an operand node (value expression) into its SQL representation.
+ * Handles field references, literals, auth tokens, subqueries, date functions, and request values.
+ *
+ * - `field` → `t.columnName` (with optional table alias and `columnOfField` mapping)
+ * - `literal` → `@pN` (stored in `ctx.params`)
+ * - `auth` → `@auth_fieldName`
+ * - `authId` → `@auth_id`
+ * - `request` → `@request_source_key`
+ * - `now` → `datetime('now')`
+ * - `dateAdd` → `datetime(expr, '+N days')`
+ * - `dateDiff` → `(julianday(a) - julianday(b))`
+ * - `subquery` → `SELECT field FROM collection WHERE ...`
+ */
+export declare function compileOperand(node: OperandNode, ctx: CompileCtx): string;
+//# sourceMappingURL=compiler.d.ts.map

package/dist/src/rule/compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../../src/rule/compiler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAExF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,uDAAuD;IACvD,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACxC,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,SAAS,EAAE,MAAM,MAAM,CAAA;IACvB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACnD,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,CAyC/D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,CAwCzE"}

package/dist/src/rule/compiler.js

@@ -0,0 +1,115 @@
+/**
+ * Compiles a rule expression tree into a SQL WHERE clause string.
+ * Parameter values are written into `ctx.params` as side effects.
+ *
+ * @example
+ * const ctx = {
+ *   tableAlias: "t",
+ *   nextParam: () => `@p${i++}`,
+ *   params: {},
+ *   columnOfField: (f) => f,
+ *   collectionSchemas: {},
+ *   authCollection: "users"
+ * }
+ * compile(Rule.field("age").gt(Rule.literal(18)), ctx)
+ * // => "t.age > @p0"
+ */
+export function compile(node, ctx) {
+    switch (node.op) {
+        case "public":
+            return "1 = 1";
+        case "eq":
+            return `${compileOperand(node.left, ctx)} = ${compileOperand(node.right, ctx)}`;
+        case "neq":
+            return `${compileOperand(node.left, ctx)} != ${compileOperand(node.right, ctx)}`;
+        case "gt":
+            return `${compileOperand(node.left, ctx)} > ${compileOperand(node.right, ctx)}`;
+        case "gte":
+            return `${compileOperand(node.left, ctx)} >= ${compileOperand(node.right, ctx)}`;
+        case "lt":
+            return `${compileOperand(node.left, ctx)} < ${compileOperand(node.right, ctx)}`;
+        case "lte":
+            return `${compileOperand(node.left, ctx)} <= ${compileOperand(node.right, ctx)}`;
+        case "in": {
+            const leftSql = compileOperand(node.left, ctx);
+            if (node.right.kind === "literal" && Array.isArray(node.right.value)) {
+                const items = node.right.value;
+                if (items.length === 0)
+                    return "1 = 0";
+                const placeholders = items.map((item) => {
+                    const param = ctx.nextParam();
+                    ctx.params[param] = item;
+                    return param;
+                });
+                return `${leftSql} IN (${placeholders.join(", ")})`;
+            }
+            return `${leftSql} IN (${compileOperand(node.right, ctx)})`;
+        }
+        case "and":
+            return `(${compile(node.left, ctx)}) AND (${compile(node.right, ctx)})`;
+        case "or":
+            return `(${compile(node.left, ctx)}) OR (${compile(node.right, ctx)})`;
+        case "not":
+            return `NOT (${compile(node.expr, ctx)})`;
+        case "startsWith":
+            return `${compileOperand(node.left, ctx)} LIKE (${compileOperand(node.right, ctx)} || '%')`;
+        case "contains":
+            return `${compileOperand(node.left, ctx)} LIKE ('%' || ${compileOperand(node.right, ctx)} || '%')`;
+    }
+}
+/**
+ * Compiles an operand node (value expression) into its SQL representation.
+ * Handles field references, literals, auth tokens, subqueries, date functions, and request values.
+ *
+ * - `field` → `t.columnName` (with optional table alias and `columnOfField` mapping)
+ * - `literal` → `@pN` (stored in `ctx.params`)
+ * - `auth` → `@auth_fieldName`
+ * - `authId` → `@auth_id`
+ * - `request` → `@request_source_key`
+ * - `now` → `datetime('now')`
+ * - `dateAdd` → `datetime(expr, '+N days')`
+ * - `dateDiff` → `(julianday(a) - julianday(b))`
+ * - `subquery` → `SELECT field FROM collection WHERE ...`
+ */
+export function compileOperand(node, ctx) {
+    switch (node.kind) {
+        case "field": {
+            const col = ctx.columnOfField(node.field);
+            if (ctx.tableAlias !== undefined && node.collection === undefined) {
+                return `${ctx.tableAlias}.${col}`;
+            }
+            return col;
+        }
+        case "literal": {
+            const param = ctx.nextParam();
+            ctx.params[param] = node.value;
+            return param;
+        }
+        case "auth":
+            return `@auth_${node.field}`;
+        case "authId":
+            return `@auth_id`;
+        case "authCollection":
+            return `@auth_collection`;
+        case "request":
+            return `@request_${node.source}_${node.key}`;
+        case "now":
+            return `datetime('now')`;
+        case "subquery": {
+            const { tableAlias: _alias, ...subCtx } = ctx;
+            const whereSql = compile(node.where, subCtx);
+            return `SELECT ${node.field} FROM ${node.collection} WHERE ${whereSql}`;
+        }
+        case "dateAdd": {
+            const operandSql = compileOperand(node.operand, ctx);
+            const sign = node.amount >= 0 ? "+" : "";
+            return `datetime(${operandSql}, '${sign}${node.amount} ${node.unit}s')`;
+        }
+        case "dateDiff": {
+            const leftSql = compileOperand(node.left, ctx);
+            const rightSql = compileOperand(node.right, ctx);
+            return `(julianday(${leftSql}) - julianday(${rightSql}))`;
+        }
+    }
+}
+//# sourceMappingURL=compiler.js.map

package/dist/src/rule/compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../../src/rule/compiler.ts"],"names":[],"mappings":"AAqBA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,OAAO,CAAC,IAAc,EAAE,GAAe;IACrD,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,OAAO,CAAA;QAChB,KAAK,IAAI;YACP,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAA;QACjF,KAAK,KAAK;YACR,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAA;QAClF,KAAK,IAAI;YACP,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAA;QACjF,KAAK,KAAK;YACR,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAA;QAClF,KAAK,IAAI;YACP,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAA;QACjF,KAAK,KAAK;YACR,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAA;QAClF,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAuB,CAAA;gBAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAA;gBACtC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACtC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,CAAA;oBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAA;oBACxB,OAAO,KAAK,CAAA;gBACd,CAAC,CAAC,CAAA;gBACF,OAAO,GAAG,OAAO,QAAQ,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;YACrD,CAAC;YACD,OAAO,GAAG,OAAO,QAAQ,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAA;QAC7D,CAAC;QACD,KAAK,KAAK;YACR,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAA;QACzE,KAAK,IAAI;YACP,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAA;QACxE,KAAK,KAAK;YACR,OAAO,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAA;QAC3C,KAAK,YAAY;YACf,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAA;QAC7F,KAAK,UAAU;YACb,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAA;IACtG,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,GAAe;IAC/D,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACzC,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClE,OAAO,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAA;YACnC,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,CAAA;YAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAA;YAC9B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,KAAK,MAAM;YACT,OAAO,SAAS,IAAI,CAAC,KAAK,EAAE,CAAA;QAC9B,KAAK,QAAQ;YACX,OAAO,UAAU,CAAA;QACnB,KAAK,gBAAgB;YACnB,OAAO,kBAAkB,CAAA;QAC3B,KAAK,SAAS;YACZ,OAAO,YAAY,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;QAC9C,KAAK,KAAK;YACR,OAAO,iBAAiB,CAAA;QAC1B,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAA;YAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YAC5C,OAAO,UAAU,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,UAAU,UAAU,QAAQ,EAAE,CAAA;QACzE,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;YACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;YACxC,OAAO,YAAY,UAAU,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,CAAA;QACzE,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAChD,OAAO,cAAc,OAAO,iBAAiB,QAAQ,IAAI,CAAA;QAC3D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/rule/enforcer.d.ts

@@ -0,0 +1,47 @@
+import type { CollectionSchema, ExprNode } from "@gettersethya/mira-client";
+import type { CompileCtx } from "./compiler.js";
+/** Result of compiling a rule for runtime enforcement: SQL string + ordered params. */
+export type EnforceResult = {
+    sql: string;
+    params: ReadonlyArray<unknown>;
+};
+/** Context values available to rule evaluation at enforcement time. */
+export type EnforcementCtx = {
+    auth?: {
+        collection: string;
+        record: Record<string, unknown>;
+    };
+    headers: Record<string, string>;
+    query: Record<string, string | Array<string>>;
+};
+/**
+ * Compiles a rule expression into a SQL snippet with `?` placeholders
+ * and an ordered array of parameter values, ready for use with `@effect/sql`.
+ *
+ * @example
+ * const { sql, params } = enforceRule(
+ *   Rule.field("ownerId").eq(Rule.authId(Users))
+ * )
+ * // sql: "t.ownerId = ?"
+ * // params: []
+ *
+ * const { sql, params } = enforceRule(
+ *   Rule.field("status").eq(Rule.literal("active"))
+ * )
+ * // sql: "t.status = ?"
+ * // params: ["active"]
+ */
+export declare function enforceRule(rule: ExprNode, overrides?: Partial<CompileCtx>): EnforceResult;
+/**
+ * Resolves and compiles the rule for a specific action on a collection schema.
+ * Returns `null` if the collection has no `x-rules` or the action has no rule defined.
+ *
+ * @example
+ * const schema = Posts.schema // CollectionSchema with x-rules
+ * const result = enforcerForAction(schema, "list")
+ * if (result) {
+ *   sql.unsafe(`SELECT * FROM posts WHERE ${result.sql}`, result.params)
+ * }
+ */
+export declare function enforcerForAction(collection: CollectionSchema, action: keyof NonNullable<CollectionSchema["x-rules"]>): EnforceResult | null;
+//# sourceMappingURL=enforcer.d.ts.map

package/dist/src/rule/enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer.d.ts","sourceRoot":"","sources":["../../../src/rule/enforcer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAG/C,uFAAuF;AACvF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;CAC/B,CAAA;AAED,uEAAuE;AACvE,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;CAC9C,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,aAAa,CAkB1F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,gBAAgB,EAC5B,MAAM,EAAE,MAAM,WAAW,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,GACrD,aAAa,GAAG,IAAI,CAUtB"}

package/dist/src/rule/enforcer.js

@@ -0,0 +1,60 @@
+import { compile } from "./compiler.js";
+/**
+ * Compiles a rule expression into a SQL snippet with `?` placeholders
+ * and an ordered array of parameter values, ready for use with `@effect/sql`.
+ *
+ * @example
+ * const { sql, params } = enforceRule(
+ *   Rule.field("ownerId").eq(Rule.authId(Users))
+ * )
+ * // sql: "t.ownerId = ?"
+ * // params: []
+ *
+ * const { sql, params } = enforceRule(
+ *   Rule.field("status").eq(Rule.literal("active"))
+ * )
+ * // sql: "t.status = ?"
+ * // params: ["active"]
+ */
+export function enforceRule(rule, overrides) {
+    let i = 0;
+    const paramRecord = {};
+    const ctx = {
+        tableAlias: "t",
+        nextParam: () => `@p${i++}`,
+        params: paramRecord,
+        columnOfField: (f) => f,
+        collectionSchemas: {},
+        ...overrides
+    };
+    const rawSql = compile(rule, ctx);
+    const sql = rawSql.replace(/@p(\d+)/g, "?");
+    const params = [];
+    for (let j = 0; j < i; j++) {
+        params.push(paramRecord[`@p${j}`]);
+    }
+    return { sql, params };
+}
+/**
+ * Resolves and compiles the rule for a specific action on a collection schema.
+ * Returns `null` if the collection has no `x-rules` or the action has no rule defined.
+ *
+ * @example
+ * const schema = Posts.schema // CollectionSchema with x-rules
+ * const result = enforcerForAction(schema, "list")
+ * if (result) {
+ *   sql.unsafe(`SELECT * FROM posts WHERE ${result.sql}`, result.params)
+ * }
+ */
+export function enforcerForAction(collection, action) {
+    const rules = collection["x-rules"];
+    if (rules === undefined) {
+        return null;
+    }
+    const rule = rules[action];
+    if (rule === undefined) {
+        return null;
+    }
+    return enforceRule(rule);
+}
+//# sourceMappingURL=enforcer.js.map

package/dist/src/rule/enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer.js","sourceRoot":"","sources":["../../../src/rule/enforcer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAevC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,SAA+B;IACzE,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,WAAW,GAA4B,EAAE,CAAA;IAC/C,MAAM,GAAG,GAAe;QACtB,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;QAC3B,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,iBAAiB,EAAE,EAAE;QACrB,GAAG,SAAS;KACb,CAAA;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAmB,EAAE,CAAA;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA4B,EAC5B,MAAsD;IAEtD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAA;AAC1B,CAAC"}

package/dist/src/rule/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./compiler.js";
+export * from "./enforcer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/rule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rule/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA"}

package/dist/src/rule/index.js

@@ -0,0 +1,3 @@
+export * from "./compiler.js";
+export * from "./enforcer.js";
+//# sourceMappingURL=index.js.map

package/dist/src/rule/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rule/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA"}

package/dist/src/storage/index.d.ts

@@ -0,0 +1,3 @@
+export { FileStorage, FileStorageError, FileStorageNotFound, makeFileStorageLayer } from "./storage.js";
+export { LocalFileStorage } from "./local-preset.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACvG,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/src/storage/index.js

@@ -0,0 +1,3 @@
+export { FileStorage, FileStorageError, FileStorageNotFound, makeFileStorageLayer } from "./storage.js";
+export { LocalFileStorage } from "./local-preset.js";
+//# sourceMappingURL=index.js.map

package/dist/src/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACvG,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/src/storage/local-preset.d.ts

@@ -0,0 +1,21 @@
+import type { MiraStorage } from "../app/types.js";
+/**
+ * Local file storage preset using the filesystem.
+ *
+ * Creates a `MiraStorage` using the local disk-based `FileStorage` implementation.
+ * Files are stored in the specified directory, with automatic subdirectory creation.
+ *
+ * @param config.directory - The root directory for file storage
+ * @returns A MiraStorage preset
+ *
+ * @example
+ * Mira.builder()
+ *   .storage(LocalFileStorage({ directory: "./uploads" }))
+ *
+ * @see makeFileStorageLayer — underlying implementation
+ * @see MiraStorage — the interface LocalFileStorage implements
+ */
+export declare const LocalFileStorage: (config: {
+    directory: string;
+}) => MiraStorage;
+//# sourceMappingURL=local-preset.d.ts.map

package/dist/src/storage/local-preset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-preset.d.ts","sourceRoot":"","sources":["../../../src/storage/local-preset.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB,GAAI,QAAQ;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,KAAG,WAE/D,CAAA"}

package/dist/src/storage/local-preset.js

@@ -0,0 +1,21 @@
+import { makeFileStorageLayer } from "./storage.js";
+/**
+ * Local file storage preset using the filesystem.
+ *
+ * Creates a `MiraStorage` using the local disk-based `FileStorage` implementation.
+ * Files are stored in the specified directory, with automatic subdirectory creation.
+ *
+ * @param config.directory - The root directory for file storage
+ * @returns A MiraStorage preset
+ *
+ * @example
+ * Mira.builder()
+ *   .storage(LocalFileStorage({ directory: "./uploads" }))
+ *
+ * @see makeFileStorageLayer — underlying implementation
+ * @see MiraStorage — the interface LocalFileStorage implements
+ */
+export const LocalFileStorage = (config) => ({
+    layer: makeFileStorageLayer("local", { directory: config.directory }),
+});
+//# sourceMappingURL=local-preset.js.map

package/dist/src/storage/local-preset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-preset.js","sourceRoot":"","sources":["../../../src/storage/local-preset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAGnD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAA6B,EAAe,EAAE,CAAC,CAAC;IAC/E,KAAK,EAAE,oBAAoB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;CACtE,CAAC,CAAA"}

package/dist/src/storage/storage.d.ts

@@ -0,0 +1,83 @@
+import { FileSystem, Path } from "@effect/platform";
+import { Context, Effect, Layer, Stream } from "effect";
+declare const FileStorageError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "FileStorageError";
+} & Readonly<A>;
+/**
+ * Error raised when a file storage operation fails (disk I/O, permission issues, etc.).
+ *
+ * @example
+ * new FileStorageError({ reason: "ENOSPC: no space left on device" })
+ */
+export declare class FileStorageError extends FileStorageError_base<{
+    reason: string;
+}> {
+}
+declare const FileStorageNotFound_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "FileStorageNotFound";
+} & Readonly<A>;
+/**
+ * Error raised when a requested file does not exist in storage.
+ *
+ * @example
+ * new FileStorageNotFound({ key: "uploads/abc123/image.jpg" })
+ */
+export declare class FileStorageNotFound extends FileStorageNotFound_base<{
+    key: string;
+}> {
+}
+declare const FileStorage_base: Context.TagClass<FileStorage, "FileStorage", {
+    upload<E>(key: string, stream: Stream.Stream<Uint8Array, E>, mimeType: string): Effect.Effect<string, E | FileStorageError>;
+    delete(key: string): Effect.Effect<void, FileStorageError>;
+    url(key: string): string;
+    read(key: string): Effect.Effect<Uint8Array, FileStorageError | FileStorageNotFound>;
+    exists(key: string): Effect.Effect<boolean, FileStorageError>;
+    list(prefix: string): Effect.Effect<ReadonlyArray<string>, FileStorageError>;
+}>;
+/**
+ * File storage abstraction tag.
+ *
+ * Provides `upload`, `delete`, `url`, `read`, `exists`, and `list` operations
+ * for file management. The concrete implementation can be local disk or S3.
+ *
+ * All operations return `Effect` with typed error channels.
+ *
+ * @example
+ * import { FileStorage } from "@gettersethya/mira"
+ *
+ * Effect.gen(function* () {
+ *   const storage = yield* FileStorage
+ *   const key = yield* storage.upload("path/to/file", stream, "image/jpeg")
+ *   const url = storage.url(key)  // synchronous — returns the URL string
+ *   const data = yield* storage.read(key)
+ *   const exists = yield* storage.exists(key)
+ *   const files = yield* storage.list("uploads/")
+ *   yield* storage.delete(key)
+ * })
+ *
+ * @see makeFileStorageLayer — factory function
+ * @see LocalFileStorage — local disk preset
+ */
+export declare class FileStorage extends FileStorage_base {
+}
+/**
+ * Create a FileStorage layer backed by the local filesystem.
+ *
+ * Files are stored under a root directory (default: `./uploads`).
+ * Nested subdirectories are created automatically based on the key path.
+ *
+ * Note: the `_provider` parameter is currently unused and reserved for future
+ * provider detection. Pass `"local"` for now.
+ *
+ * @param _provider - Provider type (currently unused, pass "local")
+ * @param config.directory - Storage root directory (default: "./uploads")
+ * @returns A Layer providing FileStorage
+ *
+ * @example
+ * makeFileStorageLayer("local", { directory: "/var/data/uploads" })
+ *
+ * @see LocalFileStorage — preset wrapping this function
+ */
+export declare function makeFileStorageLayer(_provider: string, config: Record<string, string>): Layer.Layer<FileStorage, never, FileSystem.FileSystem | Path.Path>;
+export {};
+//# sourceMappingURL=storage.d.ts.map

package/dist/src/storage/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/storage/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAQ,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;AAEnE;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,sBAAqC;IACzE,MAAM,EAAE,MAAM,CAAA;CACf,CAAC;CAAG;;;;AAEL;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,yBAAwC;IAC/E,GAAG,EAAE,MAAM,CAAA;CACZ,CAAC;CAAG;;WA6BM,CAAC,OACD,MAAM,UACH,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,YAC1B,MAAM,GACf,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,gBAAgB,CAAC;gBAClC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC;aACjD,MAAM,GAAG,MAAM;cACd,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;gBACxE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC;iBAChD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;;AApChF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,WAAY,SAAQ,gBAc9B;CAAG;AAEN;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,sEA8FrF"}

package/dist/src/storage/storage.js

@@ -0,0 +1,120 @@
+import { FileSystem, Path } from "@effect/platform";
+import { Context, Data, Effect, Layer, Sink, Stream } from "effect";
+/**
+ * Error raised when a file storage operation fails (disk I/O, permission issues, etc.).
+ *
+ * @example
+ * new FileStorageError({ reason: "ENOSPC: no space left on device" })
+ */
+export class FileStorageError extends Data.TaggedError("FileStorageError") {
+}
+/**
+ * Error raised when a requested file does not exist in storage.
+ *
+ * @example
+ * new FileStorageNotFound({ key: "uploads/abc123/image.jpg" })
+ */
+export class FileStorageNotFound extends Data.TaggedError("FileStorageNotFound") {
+}
+/**
+ * File storage abstraction tag.
+ *
+ * Provides `upload`, `delete`, `url`, `read`, `exists`, and `list` operations
+ * for file management. The concrete implementation can be local disk or S3.
+ *
+ * All operations return `Effect` with typed error channels.
+ *
+ * @example
+ * import { FileStorage } from "@gettersethya/mira"
+ *
+ * Effect.gen(function* () {
+ *   const storage = yield* FileStorage
+ *   const key = yield* storage.upload("path/to/file", stream, "image/jpeg")
+ *   const url = storage.url(key)  // synchronous — returns the URL string
+ *   const data = yield* storage.read(key)
+ *   const exists = yield* storage.exists(key)
+ *   const files = yield* storage.list("uploads/")
+ *   yield* storage.delete(key)
+ * })
+ *
+ * @see makeFileStorageLayer — factory function
+ * @see LocalFileStorage — local disk preset
+ */
+export class FileStorage extends Context.Tag("FileStorage")() {
+}
+/**
+ * Create a FileStorage layer backed by the local filesystem.
+ *
+ * Files are stored under a root directory (default: `./uploads`).
+ * Nested subdirectories are created automatically based on the key path.
+ *
+ * Note: the `_provider` parameter is currently unused and reserved for future
+ * provider detection. Pass `"local"` for now.
+ *
+ * @param _provider - Provider type (currently unused, pass "local")
+ * @param config.directory - Storage root directory (default: "./uploads")
+ * @returns A Layer providing FileStorage
+ *
+ * @example
+ * makeFileStorageLayer("local", { directory: "/var/data/uploads" })
+ *
+ * @see LocalFileStorage — preset wrapping this function
+ */
+export function makeFileStorageLayer(_provider, config) {
+    return Layer.effect(FileStorage, Effect.gen(function* () {
+        const fs = yield* FileSystem.FileSystem;
+        const pathSvc = yield* Path.Path;
+        const root = config["directory"] ?? "./uploads";
+        return FileStorage.of({
+            upload: (key, stream, _mimeType) => Effect.gen(function* () {
+                const fullPath = pathSvc.join(root, key);
+                yield* fs.makeDirectory(pathSvc.dirname(fullPath), { recursive: true }).pipe(Effect.catchTags({
+                    BadArgument: (e) => Effect.fail(new FileStorageError({ reason: e.message })),
+                    SystemError: (e) => Effect.fail(new FileStorageError({ reason: e.message }))
+                }));
+                // Map PlatformError at the sink level so generic E is not involved
+                const mappedSink = Sink.mapError(fs.sink(fullPath), (e) => new FileStorageError({ reason: e.message ?? String(e) }));
+                yield* Stream.run(stream, mappedSink);
+                return key;
+            }),
+            delete: (key) => Effect.gen(function* () {
+                const fullPath = pathSvc.join(root, key);
+                yield* fs.remove(fullPath, { force: true }).pipe(Effect.catchTags({
+                    BadArgument: (e) => Effect.fail(new FileStorageError({ reason: e.message })),
+                    SystemError: (e) => Effect.fail(new FileStorageError({ reason: e.message }))
+                }));
+            }),
+            url: (key) => `/files/${key}`,
+            read: (key) => Effect.gen(function* () {
+                const fullPath = pathSvc.join(root, key);
+                const present = yield* fs.exists(fullPath).pipe(Effect.catchTags({
+                    BadArgument: () => Effect.succeed(false),
+                    SystemError: () => Effect.succeed(false)
+                }));
+                if (!present)
+                    return yield* new FileStorageNotFound({ key });
+                return yield* fs.readFile(fullPath).pipe(Effect.catchTags({
+                    BadArgument: (e) => Effect.fail(new FileStorageError({ reason: e.message })),
+                    SystemError: (e) => Effect.fail(new FileStorageError({ reason: e.message }))
+                }));
+            }),
+            exists: (key) => Effect.gen(function* () {
+                const fullPath = pathSvc.join(root, key);
+                return yield* fs.exists(fullPath).pipe(Effect.catchTags({
+                    BadArgument: () => Effect.succeed(false),
+                    SystemError: () => Effect.succeed(false)
+                }));
+            }),
+            list: (prefix) => Effect.gen(function* () {
+                const prefixPath = pathSvc.join(root, prefix);
+                const entries = yield* fs.readDirectory(prefixPath, { recursive: true }).pipe(Effect.catchTags({
+                    BadArgument: () => Effect.succeed([]),
+                    SystemError: () => Effect.succeed([])
+                }));
+                const fileEntries = yield* Effect.filter(entries, (entry) => fs.stat(pathSvc.join(prefixPath, entry)).pipe(Effect.map((info) => info.type === "File"), Effect.orElseSucceed(() => false)), { concurrency: "unbounded" });
+                return fileEntries.map((entry) => pathSvc.join(prefix, entry).split(pathSvc.sep).join("/"));
+            })
+        });
+    }));
+}
+//# sourceMappingURL=storage.js.map