@gettersethya/mira 0.1.0-alpha.2

package/dist/src/collection-service/context.d.ts

@@ -0,0 +1,17 @@
+import type { RepoRecord } from "../repository/types.js";
+/** Auth-resolved request context. JWT parsing is not done here — the route handler provides this. */
+export type RequestCtx = {
+    auth?: {
+        collection: string;
+        record: RepoRecord;
+    };
+    headers: Record<string, string>;
+    query: Record<string, string | ReadonlyArray<string>>;
+};
+/** Paginated result — cursor-based via seqId. Used for all collection kinds. */
+export type CursorPage = {
+    items: ReadonlyArray<RepoRecord>;
+    /** seqId of the last item. Pass as `after` to fetch the next page. null = no more pages. */
+    nextCursor: number | null;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/src/collection-service/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/collection-service/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEvD,qGAAqG;AACrG,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAA;IACjD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;CACtD,CAAA;AAED,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IAChC,4FAA4F;IAC5F,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,CAAA"}

package/dist/src/collection-service/context.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=context.js.map

package/dist/src/collection-service/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/collection-service/context.ts"],"names":[],"mappings":""}

package/dist/src/collection-service/decode.d.ts

@@ -0,0 +1,6 @@
+import { Effect } from "effect";
+import type { CollectionSchema } from "@gettersethya/mira-client";
+import type { RepoRecord } from "../repository/types.js";
+export type RowDecoder = (record: RepoRecord) => Effect.Effect<RepoRecord>;
+export declare function makeRowDecoder(colSchema: CollectionSchema): RowDecoder;
+//# sourceMappingURL=decode.d.ts.map

package/dist/src/collection-service/decode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.d.ts","sourceRoot":"","sources":["../../../src/collection-service/decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAIvD,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAE1E,wBAAgB,cAAc,CAAC,SAAS,EAAE,gBAAgB,GAAG,UAAU,CAsBtE"}

package/dist/src/collection-service/decode.js

@@ -0,0 +1,26 @@
+import { Effect, Schema } from "effect";
+const RecordSchema = Schema.Record({ key: Schema.String, value: Schema.Unknown });
+export function makeRowDecoder(colSchema) {
+    const boolKeys = new Set();
+    for (const [key, prop] of Object.entries(colSchema.properties)) {
+        if (prop.type === "boolean")
+            boolKeys.add(key);
+    }
+    if (boolKeys.size === 0)
+        return Effect.succeed;
+    const RowSchema = Schema.transform(RecordSchema, RecordSchema, {
+        decode: (record) => {
+            const result = { ...record };
+            for (const key of boolKeys) {
+                const v = result[key];
+                if (v === 0 || v === 1)
+                    result[key] = v === 1;
+            }
+            return result;
+        },
+        encode: (v) => v
+    });
+    const decode = Schema.decodeUnknown(RowSchema);
+    return (record) => decode(record).pipe(Effect.orDie, Effect.map((r) => r));
+}
+//# sourceMappingURL=decode.js.map

package/dist/src/collection-service/decode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.js","sourceRoot":"","sources":["../../../src/collection-service/decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAIvC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;AAIjF,MAAM,UAAU,cAAc,CAAC,SAA2B;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAA;IAE9C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,EAAE;QAC7D,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YACjB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;YAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;gBACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC/C,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;KACjB,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;IAC9C,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAe,CAAC,CAAC,CAAA;AAC1F,CAAC"}

package/dist/src/collection-service/errors.d.ts

@@ -0,0 +1,67 @@
+import type { SqlError } from "@effect/sql";
+import { ValidationError } from "@gettersethya/mira-client";
+export { ValidationError };
+declare const NotFoundError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "NotFoundError";
+} & Readonly<A>;
+/**
+ * Error raised when a requested record is not found.
+ * Contains the collection name and the requested record ID.
+ *
+ * The server returns HTTP 404 when this error propagates to the HTTP layer.
+ *
+ * @example
+ * new NotFoundError({ collection: "posts", id: "abc123" })
+ *
+ * @see CollectionService — raises this error on getOne/update/delete for missing records
+ */
+export declare class NotFoundError extends NotFoundError_base<{
+    collection: string;
+    id: string;
+}> {
+}
+declare const ForbiddenError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ForbiddenError";
+} & Readonly<A>;
+/**
+ * Error raised when an action is forbidden by access rules.
+ * Contains the collection name and the attempted action.
+ *
+ * The server returns HTTP 403 when this error propagates to the HTTP layer.
+ *
+ * @example
+ * new ForbiddenError({ collection: "posts", action: "update" })
+ *
+ * @see CollectionService — raises this error when rules deny an action
+ */
+export declare class ForbiddenError extends ForbiddenError_base<{
+    collection: string;
+    action: string;
+}> {
+}
+declare const ReadOnlyError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ReadOnlyError";
+} & Readonly<A>;
+/**
+ * Error raised when a write operation is attempted on a read-only collection.
+ * View collections always raise this on create/update/delete.
+ *
+ * The server returns HTTP 405 (Method Not Allowed) when this error propagates.
+ *
+ * @example
+ * new ReadOnlyError({ collection: "active_posts" })
+ *
+ * @see ViewCollection — view collections are read-only
+ */
+export declare class ReadOnlyError extends ReadOnlyError_base<{
+    collection: string;
+}> {
+}
+/**
+ * Union of all errors that can be raised by CollectionService operations.
+ * Includes NotFoundError, ForbiddenError, ValidationError, ReadOnlyError, and SqlError.
+ *
+ * @see CollectionService — all methods fail with CollectionError
+ */
+export type CollectionError = NotFoundError | ForbiddenError | ValidationError | ReadOnlyError | SqlError.SqlError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/src/collection-service/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/collection-service/errors.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,OAAO,EAAE,eAAe,EAAE,CAAA;;;;AAE1B;;;;;;;;;;GAUG;AACH,qBAAa,aAAc,SAAQ,mBAAkC;IACnE,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;CACX,CAAC;CAAG;;;;AAEL;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,SAAQ,oBAAmC;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf,CAAC;CAAG;;;;AAEL;;;;;;;;;;GAUG;AACH,qBAAa,aAAc,SAAQ,mBAAkC;IACnE,UAAU,EAAE,MAAM,CAAA;CACnB,CAAC;CAAG;AAEL;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,cAAc,GACd,eAAe,GACf,aAAa,GACb,QAAQ,CAAC,QAAQ,CAAA"}

package/dist/src/collection-service/errors.js

@@ -0,0 +1,43 @@
+import { Data } from "effect";
+import { ValidationError } from "@gettersethya/mira-client";
+export { ValidationError };
+/**
+ * Error raised when a requested record is not found.
+ * Contains the collection name and the requested record ID.
+ *
+ * The server returns HTTP 404 when this error propagates to the HTTP layer.
+ *
+ * @example
+ * new NotFoundError({ collection: "posts", id: "abc123" })
+ *
+ * @see CollectionService — raises this error on getOne/update/delete for missing records
+ */
+export class NotFoundError extends Data.TaggedError("NotFoundError") {
+}
+/**
+ * Error raised when an action is forbidden by access rules.
+ * Contains the collection name and the attempted action.
+ *
+ * The server returns HTTP 403 when this error propagates to the HTTP layer.
+ *
+ * @example
+ * new ForbiddenError({ collection: "posts", action: "update" })
+ *
+ * @see CollectionService — raises this error when rules deny an action
+ */
+export class ForbiddenError extends Data.TaggedError("ForbiddenError") {
+}
+/**
+ * Error raised when a write operation is attempted on a read-only collection.
+ * View collections always raise this on create/update/delete.
+ *
+ * The server returns HTTP 405 (Method Not Allowed) when this error propagates.
+ *
+ * @example
+ * new ReadOnlyError({ collection: "active_posts" })
+ *
+ * @see ViewCollection — view collections are read-only
+ */
+export class ReadOnlyError extends Data.TaggedError("ReadOnlyError") {
+}
+//# sourceMappingURL=errors.js.map

package/dist/src/collection-service/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/collection-service/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,OAAO,EAAE,eAAe,EAAE,CAAA;AAE1B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,aAAc,SAAQ,IAAI,CAAC,WAAW,CAAC,eAAe,CAGjE;CAAG;AAEL;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAEL;;;;;;;;;;GAUG;AACH,MAAM,OAAO,aAAc,SAAQ,IAAI,CAAC,WAAW,CAAC,eAAe,CAEjE;CAAG"}

package/dist/src/collection-service/index.d.ts

@@ -0,0 +1,5 @@
+export { CollectionService, CollectionServiceLive, makeCollectionServiceLayer } from "./collection-service.js";
+export type { CollectionError } from "./errors.js";
+export { ForbiddenError, NotFoundError, ReadOnlyError, ValidationError } from "./errors.js";
+export type { CursorPage, RequestCtx } from "./context.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/collection-service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/collection-service/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAC9G,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC3F,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA"}

package/dist/src/collection-service/index.js

@@ -0,0 +1,3 @@
+export { CollectionService, CollectionServiceLive, makeCollectionServiceLayer } from "./collection-service.js";
+export { ForbiddenError, NotFoundError, ReadOnlyError, ValidationError } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/src/collection-service/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/collection-service/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAE9G,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA"}

package/dist/src/collection-service/input-schema.d.ts

@@ -0,0 +1,10 @@
+import { ParseResult, Schema } from "effect";
+import type { AnyCollectionDef } from "@gettersethya/mira-client";
+import { ValidationError } from "./errors.js";
+export type InputSchemas = {
+    create: Schema.Schema<any, any, never>;
+    update: Schema.Schema<any, any, never>;
+};
+export declare function buildInputSchemas(colDef: AnyCollectionDef): InputSchemas;
+export declare function parseErrToValidationError(collection: string): (err: ParseResult.ParseError) => ValidationError;
+//# sourceMappingURL=input-schema.d.ts.map

package/dist/src/collection-service/input-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-schema.d.ts","sourceRoot":"","sources":["../../../src/collection-service/input-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAgD,MAAM,2BAA2B,CAAA;AAC/G,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAI7C,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IACtC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;CACvC,CAAA;AAgFD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,YAAY,CAiCxE;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,IAClD,KAAK,WAAW,CAAC,UAAU,KAAG,eAAe,CAOtD"}

package/dist/src/collection-service/input-schema.js

@@ -0,0 +1,109 @@
+import { ParseResult, Schema } from "effect";
+import { ValidationError } from "./errors.js";
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+function filterAnnotations(kind, errorFn) {
+    if (errorFn === undefined)
+        return undefined;
+    const msg = errorFn(kind);
+    if (msg === undefined)
+        return undefined;
+    return { message: () => msg };
+}
+function propertyToSchema(prop, fieldDef) {
+    const errorFn = fieldDef?.error;
+    if (prop["x-kind"] === "json")
+        return Schema.Unknown;
+    if (prop["x-kind"] === "date" ||
+        prop["x-kind"] === "relation" ||
+        prop["x-kind"] === "file")
+        return Schema.String;
+    if (prop.type === "string") {
+        const typeMsg = errorFn?.("type");
+        const base = typeMsg !== undefined
+            ? Schema.String.annotations({ message: () => typeMsg })
+            : Schema.String;
+        let s = base;
+        if (prop.format === "email") {
+            s = s.pipe(Schema.pattern(EMAIL_RE, filterAnnotations("email", errorFn)));
+        }
+        if (prop.minLength !== undefined) {
+            s = s.pipe(Schema.minLength(prop.minLength, filterAnnotations("minLength", errorFn)));
+        }
+        if (prop.maxLength !== undefined) {
+            s = s.pipe(Schema.maxLength(prop.maxLength, filterAnnotations("maxLength", errorFn)));
+        }
+        return s;
+    }
+    if (prop.type === "integer") {
+        const typeMsg = errorFn?.("type");
+        const base = typeMsg !== undefined
+            ? Schema.Number.annotations({ message: () => typeMsg })
+            : Schema.Number;
+        let s = base.pipe(Schema.int(filterAnnotations("int", errorFn)));
+        if (prop.minimum !== undefined) {
+            s = s.pipe(Schema.greaterThanOrEqualTo(prop.minimum, filterAnnotations("minimum", errorFn)));
+        }
+        if (prop.maximum !== undefined) {
+            s = s.pipe(Schema.lessThanOrEqualTo(prop.maximum, filterAnnotations("maximum", errorFn)));
+        }
+        return s;
+    }
+    if (prop.type === "number") {
+        const typeMsg = errorFn?.("type");
+        const base = typeMsg !== undefined
+            ? Schema.Number.annotations({ message: () => typeMsg })
+            : Schema.Number;
+        let s = base;
+        if (prop.minimum !== undefined) {
+            s = s.pipe(Schema.greaterThanOrEqualTo(prop.minimum, filterAnnotations("minimum", errorFn)));
+        }
+        if (prop.maximum !== undefined) {
+            s = s.pipe(Schema.lessThanOrEqualTo(prop.maximum, filterAnnotations("maximum", errorFn)));
+        }
+        return s;
+    }
+    if (prop.type === "boolean") {
+        const typeMsg = errorFn?.("type");
+        return typeMsg !== undefined
+            ? Schema.Boolean.annotations({ message: () => typeMsg })
+            : Schema.Boolean;
+    }
+    return Schema.Unknown;
+}
+export function buildInputSchemas(colDef) {
+    const schema = colDef.schema;
+    const required = new Set(schema.required ?? []);
+    const createFields = {};
+    const updateFields = {};
+    for (const [key, prop] of Object.entries(schema.properties)) {
+        if (prop["x-system"] === true)
+            continue;
+        const fieldDef = colDef.fields[key];
+        const errorFn = fieldDef?.error;
+        const base = propertyToSchema(prop, fieldDef);
+        if (required.has(key)) {
+            const requiredMsg = errorFn?.("required");
+            createFields[key] = requiredMsg !== undefined
+                ? Schema.propertySignature(base).annotations({ missingMessage: () => requiredMsg })
+                : base;
+        }
+        else {
+            createFields[key] = Schema.optional(base);
+        }
+        updateFields[key] = Schema.optional(base);
+    }
+    return {
+        create: Schema.Struct(createFields),
+        update: Schema.Struct(updateFields)
+    };
+}
+export function parseErrToValidationError(collection) {
+    return (err) => {
+        const issues = ParseResult.ArrayFormatter.formatIssueSync(err.issue).map((i) => {
+            const prefix = i.path.length > 0 ? `${i.path.join(".")}: ` : "";
+            return `${prefix}${i.message}`;
+        });
+        return new ValidationError({ collection, issues });
+    };
+}
+//# sourceMappingURL=input-schema.js.map

package/dist/src/collection-service/input-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-schema.js","sourceRoot":"","sources":["../../../src/collection-service/input-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,QAAQ,GAAG,4BAA4B,CAAA;AAO7C,SAAS,iBAAiB,CACxB,IAAoB,EACpB,OAAmE;IAEnE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAA;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAwB,EAAE,QAA8B;IAChF,MAAM,OAAO,GAAG,QAAQ,EAAE,KAAK,CAAA;IAE/B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAA;IACpD,IACE,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM;QACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;QAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM;QACzB,OAAO,MAAM,CAAC,MAAM,CAAA;IAEtB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,IAAI,GAAmC,OAAO,KAAK,SAAS;YAChE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACvD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;QACjB,IAAI,CAAC,GAAmC,IAAI,CAAA;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,IAAI,GAAmC,OAAO,KAAK,SAAS;YAChE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACvD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;QACjB,IAAI,CAAC,GAAmC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAChG,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC3F,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,IAAI,GAAmC,OAAO,KAAK,SAAS;YAChE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACvD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;QACjB,IAAI,CAAC,GAAmC,IAAI,CAAA;QAC5C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC3F,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAA;QACjC,OAAO,OAAO,KAAK,SAAS;YAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACxD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAA;IACpB,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAwB;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;IAK/C,MAAM,YAAY,GAAgC,EAAE,CAAA;IACpD,MAAM,YAAY,GAAgC,EAAE,CAAA;IAEpD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI;YAAE,SAAQ;QAEvC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,QAAQ,EAAE,KAAK,CAAA;QAE/B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAE7C,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,UAAU,CAAC,CAAA;YACzC,YAAY,CAAC,GAAG,CAAC,GAAG,WAAW,KAAK,SAAS;gBAC3C,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;gBACnF,CAAC,CAAC,IAAI,CAAA;QACV,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC3C,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;KACpC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,OAAO,CAAC,GAA2B,EAAmB,EAAE;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7E,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/D,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;QAChC,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;IACpD,CAAC,CAAA;AACH,CAAC"}

package/dist/src/collection-service/where.d.ts

@@ -0,0 +1,35 @@
+import { Effect } from "effect";
+import type { CollectionSchema } from "@gettersethya/mira-client";
+import type { EnforceResult } from "../rule/enforcer.js";
+import type { RepoRecord, SortOrder, WhereClause } from "../repository/types.js";
+import type { RequestCtx } from "./context.js";
+import { ForbiddenError } from "./errors.js";
+/** Combines two WHERE clauses with AND. Both inputs are trusted internal code. */
+export declare function andWhere(a: WhereClause, b: WhereClause): WhereClause;
+/** Produces a WHERE clause that matches a single record by id. */
+export declare function idClause(id: string): WhereClause;
+/** Produces a WHERE clause for cursor pagination: seqId strictly after the given cursor. */
+export declare function cursorClause(after: number): WhereClause;
+/**
+ * Resolves `@auth_<field>` and `@request_<source>_<key>` placeholders produced by the
+ * rule compiler into positional `?` params bound from `RequestCtx`.
+ *
+ * The replacement is done in a single left-to-right pass so that the param array stays
+ * in the same order as the `?` placeholders in the resulting SQL.
+ *
+ * Returns `ForbiddenError` if the rule references auth but `ctx.auth` is absent.
+ */
+export declare function resolveCtxPlaceholders(result: EnforceResult, ctx: RequestCtx, collection: string, action: string): Effect.Effect<{
+    sql: string;
+    params: unknown[];
+}, ForbiddenError, never>;
+/**
+ * Replaces `t.<fieldName>` column references in a WHERE clause with `?` params
+ * bound to the corresponding values in `record`.
+ *
+ * Used for the `create` permission pre-check: `SELECT 1 WHERE <rule>` without a FROM.
+ * The replacement is done left-to-right to preserve param ordering with existing `?`.
+ */
+export declare function resolveFieldRefs(clause: WhereClause, record: RepoRecord): WhereClause;
+export declare function buildUserSort(query: RequestCtx["query"], schema: CollectionSchema): SortOrder | null;
+//# sourceMappingURL=where.d.ts.map

package/dist/src/collection-service/where.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"where.d.ts","sourceRoot":"","sources":["../../../src/collection-service/where.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,kFAAkF;AAClF,wBAAgB,QAAQ,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,GAAG,WAAW,CAKpE;AAED,kEAAkE;AAClE,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,CAEhD;AAED,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAEvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;0BA+BhH;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,WAAW,CAgBrF;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAC1B,MAAM,EAAE,gBAAgB,GACvB,SAAS,GAAG,IAAI,CAMlB"}

package/dist/src/collection-service/where.js

@@ -0,0 +1,88 @@
+import { Effect } from "effect";
+import { ForbiddenError } from "./errors.js";
+/** Combines two WHERE clauses with AND. Both inputs are trusted internal code. */
+export function andWhere(a, b) {
+    return {
+        sql: `(${a.sql}) AND (${b.sql})`,
+        params: [...a.params, ...b.params]
+    };
+}
+/** Produces a WHERE clause that matches a single record by id. */
+export function idClause(id) {
+    return { sql: "t.id = ?", params: [id] };
+}
+/** Produces a WHERE clause for cursor pagination: seqId strictly after the given cursor. */
+export function cursorClause(after) {
+    return { sql: "t.seqId > ?", params: [after] };
+}
+/**
+ * Resolves `@auth_<field>` and `@request_<source>_<key>` placeholders produced by the
+ * rule compiler into positional `?` params bound from `RequestCtx`.
+ *
+ * The replacement is done in a single left-to-right pass so that the param array stays
+ * in the same order as the `?` placeholders in the resulting SQL.
+ *
+ * Returns `ForbiddenError` if the rule references auth but `ctx.auth` is absent.
+ */
+export function resolveCtxPlaceholders(result, ctx, collection, action) {
+    return Effect.gen(function* () {
+        const needsAuth = /@auth_\w+/.test(result.sql);
+        if (needsAuth && ctx.auth === undefined) {
+            return yield* new ForbiddenError({ collection, action });
+        }
+        const resolved = [];
+        let pIdx = 0;
+        const { params } = result;
+        // Single-pass left-to-right replacement preserves param ordering.
+        // Groups: (1) @auth field, (2) @request source, (3) @request key
+        const newSql = result.sql.replace(/\?|@auth_(\w+)|@request_(\w+)_(\w+)/g, (match, g1, g2, g3) => {
+            const authField = typeof g1 === "string" ? g1 : undefined;
+            const reqSource = typeof g2 === "string" ? g2 : undefined;
+            const reqKey = typeof g3 === "string" ? g3 : undefined;
+            if (match === "?") {
+                resolved.push(params[pIdx++]);
+            }
+            else if (authField !== undefined) {
+                resolved.push(ctx.auth?.record[authField] ?? null);
+            }
+            else if (reqSource !== undefined && reqKey !== undefined) {
+                const val = reqSource === "query" ? ctx.query[reqKey] : ctx.headers[reqKey];
+                resolved.push(Array.isArray(val) ? val[0] : (val ?? null));
+            }
+            return "?";
+        });
+        return yield* Effect.succeed({ sql: newSql, params: resolved });
+    });
+}
+/**
+ * Replaces `t.<fieldName>` column references in a WHERE clause with `?` params
+ * bound to the corresponding values in `record`.
+ *
+ * Used for the `create` permission pre-check: `SELECT 1 WHERE <rule>` without a FROM.
+ * The replacement is done left-to-right to preserve param ordering with existing `?`.
+ */
+export function resolveFieldRefs(clause, record) {
+    const resolved = [];
+    let pIdx = 0;
+    const { params } = clause;
+    const newSql = clause.sql.replace(/\?|\bt\.(\w+)\b/g, (_, g1) => {
+        const field = typeof g1 === "string" ? g1 : undefined;
+        if (field !== undefined) {
+            resolved.push(record[field] ?? null);
+        }
+        else {
+            resolved.push(params[pIdx++]);
+        }
+        return "?";
+    });
+    return { sql: newSql, params: resolved };
+}
+export function buildUserSort(query, schema) {
+    const sortField = typeof query["sort"] === "string" ? query["sort"] : null;
+    if (sortField === null || !schema.properties[sortField])
+        return null;
+    const rawOrder = typeof query["order"] === "string" ? query["order"] : null;
+    const direction = rawOrder === "desc" ? "desc" : "asc";
+    return { field: sortField, direction };
+}
+//# sourceMappingURL=where.js.map

package/dist/src/collection-service/where.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"where.js","sourceRoot":"","sources":["../../../src/collection-service/where.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAK/B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,kFAAkF;AAClF,MAAM,UAAU,QAAQ,CAAC,CAAc,EAAE,CAAc;IACrD,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,GAAG;QAChC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;KACnC,CAAA;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,QAAQ,CAAC,EAAU;IACjC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAA;AAC1C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB,EAAE,GAAe,EAAE,UAAkB,EAAE,MAAc;IAC/G,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAmB,EAAE,CAAA;QACnC,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;QAEzB,kEAAkE;QAClE,iEAAiE;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,sCAAsC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAU,EAAE;YACtG,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YACzD,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YACzD,MAAM,MAAM,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YAEtD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC/B,CAAC;iBAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAA;YACpD,CAAC;iBAAM,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3D,MAAM,GAAG,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBAC3E,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAA;YAC5D,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC,CAAC,CAAA;QAEF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAmB,EAAE,MAAkB;IACtE,MAAM,QAAQ,GAAmB,EAAE,CAAA;IACnC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAU,EAAE;QACtE,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAA;QACtC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC/B,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAA0B,EAC1B,MAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3E,MAAM,SAAS,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACxC,CAAC"}

package/dist/src/config/config.d.ts

@@ -0,0 +1,44 @@
+import { SqlClient } from "@effect/sql";
+import { CryptoService } from "../crypto/index.js";
+import { Context, Layer } from "effect";
+import type { AppConfigShape } from "./types.js";
+declare const AppConfig_base: Context.TagClass<AppConfig, "AppConfig", AppConfigShape>;
+/**
+ * Application configuration tag, backed by the `_config` table in the database.
+ *
+ * On first boot, seeds default values (including an auto-generated `jwt_secret`)
+ * into the `_config` table. Runtime reads go through the database — no env vars
+ * or config files are needed for basic operation.
+ *
+ * Provides access to:
+ * - `appName`, `port`, `applicationUrl` — basic server configuration
+ * - `jwtSecret` — Redacted JWT signing secret (auto-generated)
+ * - `useS3`, `s3Config` — optional S3 storage configuration
+ *
+ * @example
+ * import { AppConfig } from "@gettersethya/mira"
+ *
+ * Effect.gen(function* () {
+ *   const cfg = yield* AppConfig
+ *   console.log(cfg.appName, cfg.port)
+ *   const secret = cfg.jwtSecret  // Redacted<string>
+ * })
+ *
+ * @see AppConfigLive — the live layer implementation
+ * @see AppConfigShape — the full config shape
+ */
+export declare class AppConfig extends AppConfig_base {
+}
+/**
+ * Live layer for `AppConfig`.
+ * Seeds the `_config` table on first boot with sensible defaults
+ * (including auto-generating `jwt_secret` via CryptoService).
+ *
+ * @example
+ * Layer.provideMerge(AppConfigLive)
+ *
+ * @see AppConfig — the service tag
+ */
+export declare const AppConfigLive: Layer.Layer<AppConfig, import("effect/ParseResult").ParseError | import("@effect/sql/SqlError").SqlError, CryptoService | SqlClient.SqlClient>;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/src/config/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAa,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,OAAO,EAAU,KAAK,EAA4B,MAAM,QAAQ,CAAA;AACzE,OAAO,KAAK,EAAE,cAAc,EAAY,MAAM,YAAY,CAAA;;AAO1D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,SAAU,SAAQ,cAAqD;CAAG;AAEvF;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,gJA8DzB,CAAA"}

package/dist/src/config/config.js

@@ -0,0 +1,89 @@
+import { SqlClient, SqlSchema } from "@effect/sql";
+import { CryptoService } from "../crypto/index.js";
+import { Context, Effect, Layer, Option, Redacted, Schema } from "effect";
+const ConfigRowSchema = Schema.Struct({
+    key: Schema.String,
+    value: Schema.String
+});
+/**
+ * Application configuration tag, backed by the `_config` table in the database.
+ *
+ * On first boot, seeds default values (including an auto-generated `jwt_secret`)
+ * into the `_config` table. Runtime reads go through the database — no env vars
+ * or config files are needed for basic operation.
+ *
+ * Provides access to:
+ * - `appName`, `port`, `applicationUrl` — basic server configuration
+ * - `jwtSecret` — Redacted JWT signing secret (auto-generated)
+ * - `useS3`, `s3Config` — optional S3 storage configuration
+ *
+ * @example
+ * import { AppConfig } from "@gettersethya/mira"
+ *
+ * Effect.gen(function* () {
+ *   const cfg = yield* AppConfig
+ *   console.log(cfg.appName, cfg.port)
+ *   const secret = cfg.jwtSecret  // Redacted<string>
+ * })
+ *
+ * @see AppConfigLive — the live layer implementation
+ * @see AppConfigShape — the full config shape
+ */
+export class AppConfig extends Context.Tag("AppConfig")() {
+}
+/**
+ * Live layer for `AppConfig`.
+ * Seeds the `_config` table on first boot with sensible defaults
+ * (including auto-generating `jwt_secret` via CryptoService).
+ *
+ * @example
+ * Layer.provideMerge(AppConfigLive)
+ *
+ * @see AppConfig — the service tag
+ */
+export const AppConfigLive = Layer.effect(AppConfig, Effect.gen(function* () {
+    const sql = yield* SqlClient.SqlClient;
+    // DDL — sql.unsafe is fine for CREATE TABLE
+    yield* sql.unsafe(`CREATE TABLE IF NOT EXISTS _config (key TEXT PRIMARY KEY, value TEXT NOT NULL)`);
+    const rows = yield* SqlSchema.findAll({
+        Request: Schema.Void,
+        Result: ConfigRowSchema,
+        execute: () => sql `SELECT key, value FROM ${sql("_config")}`
+    })(undefined);
+    const stored = new Map(rows.map((r) => [r.key, r.value]));
+    const seed = (key, defaultValue) => Effect.gen(function* () {
+        const existing = stored.get(key);
+        if (existing !== undefined)
+            return existing;
+        yield* sql `INSERT INTO ${sql("_config")} ${sql.insert({ key, value: defaultValue })}`;
+        return defaultValue;
+    });
+    const require = (key) => Effect.fromNullable(stored.get(key)).pipe(Effect.mapError(() => new Error(`_config key "${key}" is required when use_s3=true`)), Effect.orDie);
+    const appName = yield* seed("app_name", "mira");
+    const port = Number(yield* seed("port", "8080"));
+    const applicationUrl = yield* seed("application_url", `http://localhost:${port}`);
+    // Generated once on first boot, persisted so tokens survive restarts
+    const existingSecret = stored.get("jwt_secret");
+    const jwtSecretStr = existingSecret !== undefined
+        ? existingSecret
+        : yield* Effect.gen(function* () {
+            const cryptoSvc = yield* CryptoService;
+            const generated = Buffer.from(yield* cryptoSvc.randomBytes(48)).toString("hex");
+            yield* sql `INSERT INTO ${sql("_config")} ${sql.insert({ key: "jwt_secret", value: generated })}`;
+            yield* Effect.logInfo("jwt_secret generated and persisted to _config table.");
+            return generated;
+        });
+    const jwtSecret = Redacted.make(jwtSecretStr);
+    const useS3 = (yield* seed("use_s3", "false")) === "true";
+    const s3Config = useS3
+        ? Option.some({
+            endpoint: Redacted.make(yield* require("s3_endpoint")),
+            bucketName: yield* require("s3_bucket_name"),
+            regionName: yield* require("s3_region_name"),
+            accessKey: Redacted.make(yield* require("s3_access_key")),
+            secret: Redacted.make(yield* require("s3_secret"))
+        })
+        : Option.none();
+    return { appName, port, applicationUrl, jwtSecret, useS3, s3Config };
+}));
+//# sourceMappingURL=config.js.map

package/dist/src/config/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAGzE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC,MAAM;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM;CACrB,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAA6B;CAAG;AAEvF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CACvC,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAA;IAEtC,4CAA4C;IAC5C,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gFAAgF,CAAC,CAAA;IAEnG,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAA,0BAA0B,GAAG,CAAC,SAAS,CAAC,EAAE;KAC7D,CAAC,CAAC,SAAS,CAAC,CAAA;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEzD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,YAAoB,EAAE,EAAE,CACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,KAAK,CAAC,CAAC,GAAG,CAAA,eAAe,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;QACrF,OAAO,YAAY,CAAA;IACrB,CAAC,CAAC,CAAA;IAEJ,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAC9B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,gCAAgC,CAAC,CAAC,EACrF,MAAM,CAAC,KAAK,CACb,CAAA;IAEH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAA;IAEjF,qEAAqE;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAC/C,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;QAC1B,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAA;YACtC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC/E,KAAK,CAAC,CAAC,GAAG,CAAA,eAAe,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;YAChG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAA;YAC7E,OAAO,SAAS,CAAA;QAClB,CAAC,CAAC,CAAA;IACR,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAE7C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,MAAM,CAAA;IAEzD,MAAM,QAAQ,GAA4B,KAAK;QAC7C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACtD,UAAU,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC5C,UAAU,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC5C,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;SACnD,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAEjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;AACtE,CAAC,CAAC,CACH,CAAA"}

package/dist/src/config/index.d.ts

@@ -0,0 +1,3 @@
+export { AppConfig, AppConfigLive } from "./config.js";
+export type { AppConfigShape, S3Config } from "./types.js";
+//# sourceMappingURL=index.d.ts.map