@iwentsourcing/core 0.1.0

package/dist/management/state-read-policy.js

@@ -0,0 +1,274 @@
+import { CustomError } from '../error/custom-error.js';
+import { PermissionError, } from './permission-error.js';
+import { replacePlaceholders } from '../stream/replace-placeholders.js';
+import { getPlaceholderNames } from '../stream/get-placeholder-names.js';
+export function readPermissionRowPolicyJson(perm) {
+    const v = perm?.data.policyJson;
+    return typeof v === 'string' ? v : undefined;
+}
+async function denyManagedStateReadPolicy(lazyContext, scope, terminal, index) {
+    const [context, partition] = await Promise.all([
+        lazyContext.resolve(),
+        scope.lazyPartition.resolve(),
+    ]);
+    const detail = {
+        kind: 'state-read-policy',
+        stateName: scope.stateName,
+        terminal,
+        indexName: index?.name,
+        indexBindings: index?.bindings !== undefined && Object.keys(index.bindings).length > 0
+            ? index.bindings
+            : undefined,
+    };
+    throw new PermissionError({ context, partition, detail });
+}
+export function parseStateReadPolicyJson(raw) {
+    if (raw == null || raw === '') {
+        return [];
+    }
+    const j = JSON.parse(raw);
+    if (typeof j !== 'object' || j === null) {
+        return [];
+    }
+    const o = j;
+    if (Array.isArray(o['variants'])) {
+        return o['variants']
+            .map((v) => normalizeVariant(v))
+            .filter((v) => v !== null);
+    }
+    const single = normalizeVariant(j);
+    return single ? [single] : [];
+}
+function normalizeVariant(v) {
+    if (typeof v !== 'object' || v === null) {
+        return null;
+    }
+    const o = v;
+    const methods = o['methods'];
+    const filters = o['filters'];
+    if (!Array.isArray(methods) || !Array.isArray(filters)) {
+        return null;
+    }
+    return {
+        methods: methods.filter((m) => typeof m === 'string'),
+        filters: filters
+            .map((f) => {
+            if (typeof f !== 'object' || f === null) {
+                return null;
+            }
+            const fo = f;
+            if (typeof fo['field'] !== 'string' ||
+                typeof fo['value'] !== 'string') {
+                return null;
+            }
+            return { field: fo['field'], value: fo['value'] };
+        })
+            .filter((x) => x !== null),
+    };
+}
+export function buildPolicyPlaceholderMap(context) {
+    const auth = context.auth;
+    const argsEntries = Object.entries(context.args).reduce((map, [key, arg]) => {
+        map[`args.${key.toLowerCase()}`] = arg;
+        return map;
+    }, {});
+    return {
+        ...argsEntries,
+        'auth.sub': auth.sub,
+        'auth.aud': auth.aud,
+        'auth.iss': auth.iss,
+        'auth.id': context.authId,
+    };
+}
+export function resolvePolicyTemplate(template, context) {
+    if (!template.includes('$(')) {
+        return template;
+    }
+    const map = buildPolicyPlaceholderMap(context);
+    const lower = template.toLowerCase();
+    for (const ph of getPlaceholderNames(lower)) {
+        if (map[ph.name] === undefined) {
+            throw new CustomError('unknown policy placeholder', {
+                name: ph.name,
+            });
+        }
+    }
+    return replacePlaceholders(lower, map).value;
+}
+function policyKeyFieldString(value) {
+    if (value === undefined || value === null) {
+        return '';
+    }
+    if (typeof value === 'string' ||
+        typeof value === 'number' ||
+        typeof value === 'boolean') {
+        return String(value);
+    }
+    if (value instanceof Date) {
+        return value.toISOString();
+    }
+    return JSON.stringify(value);
+}
+function variantSatisfiedByKey(variant, key, context) {
+    for (const f of variant.filters) {
+        const expected = resolvePolicyTemplate(f.value, context);
+        const actual = key[f.field];
+        if (actual === undefined || actual === null) {
+            return false;
+        }
+        if (policyKeyFieldString(actual) !== expected) {
+            return false;
+        }
+    }
+    return true;
+}
+function variantSatisfiedByBindings(variant, bound, context) {
+    for (const f of variant.filters) {
+        const expected = resolvePolicyTemplate(f.value, context);
+        const got = bound.get(f.field);
+        if (got === undefined || got !== expected) {
+            return false;
+        }
+    }
+    return true;
+}
+function anyVariantAllowsTerminal(variants, terminal, check) {
+    for (const variant of variants) {
+        if (!variant.methods.includes(terminal)) {
+            continue;
+        }
+        if (check(variant)) {
+            return true;
+        }
+    }
+    return false;
+}
+export function wrapSnapshotClientWithReadPolicy(inner, variants, lazyContext, stateDef, scope) {
+    if (variants.length === 0) {
+        return inner;
+    }
+    return {
+        async get(id, opts) {
+            const context = await lazyContext.resolve();
+            const key = id;
+            const ok = anyVariantAllowsTerminal(variants, 'get', (v) => variantSatisfiedByKey(v, key, context));
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'get');
+            }
+            return inner.get(id, opts);
+        },
+        async *range(bookmark, opts) {
+            await lazyContext.resolve();
+            const ok = anyVariantAllowsTerminal(variants, 'range', (v) => {
+                if (v.filters.length > 0) {
+                    return false;
+                }
+                return true;
+            });
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'range');
+            }
+            yield* inner.range(bookmark, opts);
+        },
+        index(index) {
+            return wrapSnapshotIndexClient(inner.index(index), variants, lazyContext, stateDef, String(index), new Map(), scope);
+        },
+    };
+}
+function wrapSnapshotIndexClient(inner, variants, lazyContext, stateDef, indexName, bound, scope) {
+    return {
+        async *range(bookmark, opts) {
+            const context = await lazyContext.resolve();
+            const ok = anyVariantAllowsTerminal(variants, 'range', (v) => variantSatisfiedByBindings(v, bound, context));
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'range', {
+                    name: indexName,
+                    bindings: bound.size > 0 ? Object.fromEntries(bound) : undefined,
+                });
+            }
+            yield* inner.range(bookmark, opts);
+        },
+        filter(key, value) {
+            const next = new Map(bound);
+            next.set(String(key), String(value));
+            return wrapSnapshotIndexClient(inner.filter(key, value), variants, lazyContext, stateDef, indexName, next, scope);
+        },
+    };
+}
+export function wrapObservedClientWithReadPolicy(inner, variants, lazyContext, stateDef, scope) {
+    if (variants.length === 0) {
+        return inner;
+    }
+    return {
+        index(index) {
+            return wrapObservedIndexClient(inner.index(index), variants, lazyContext, stateDef, String(index), new Map(), scope);
+        },
+        async *observe(id, opts) {
+            const context = await lazyContext.resolve();
+            const key = id;
+            const ok = anyVariantAllowsTerminal(variants, 'observe', (v) => variantSatisfiedByKey(v, key, context));
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'observe');
+            }
+            yield* inner.observe(id, opts);
+        },
+        async *iterate(bookmark, opts) {
+            await lazyContext.resolve();
+            const ok = anyVariantAllowsTerminal(variants, 'iterate', (v) => {
+                if (v.filters.length > 0) {
+                    return false;
+                }
+                return true;
+            });
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'iterate');
+            }
+            yield* inner.iterate(bookmark, opts);
+        },
+        async *observeRange(bookmark, opts) {
+            await lazyContext.resolve();
+            const ok = anyVariantAllowsTerminal(variants, 'observeRange', (v) => {
+                if (v.filters.length > 0) {
+                    return false;
+                }
+                return true;
+            });
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'observeRange');
+            }
+            yield* inner.observeRange(bookmark, opts);
+        },
+    };
+}
+function wrapObservedIndexClient(inner, variants, lazyContext, stateDef, indexName, bound, scope) {
+    return {
+        async *observeRange(bookmark, opts) {
+            const context = await lazyContext.resolve();
+            const ok = anyVariantAllowsTerminal(variants, 'observeRange', (v) => variantSatisfiedByBindings(v, bound, context));
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'observeRange', {
+                    name: indexName,
+                    bindings: bound.size > 0 ? Object.fromEntries(bound) : undefined,
+                });
+            }
+            yield* inner.observeRange(bookmark, opts);
+        },
+        async *iterate(bookmark, opts) {
+            const context = await lazyContext.resolve();
+            const ok = anyVariantAllowsTerminal(variants, 'iterate', (v) => variantSatisfiedByBindings(v, bound, context));
+            if (!ok) {
+                await denyManagedStateReadPolicy(lazyContext, scope, 'iterate', {
+                    name: indexName,
+                    bindings: bound.size > 0 ? Object.fromEntries(bound) : undefined,
+                });
+            }
+            yield* inner.iterate(bookmark, opts);
+        },
+        filter(key, value) {
+            const next = new Map(bound);
+            next.set(String(key), String(value));
+            return wrapObservedIndexClient(inner.filter(key, value), variants, lazyContext, stateDef, indexName, next, scope);
+        },
+    };
+}
+//# sourceMappingURL=state-read-policy.js.map

package/dist/management/state-read-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-read-policy.js","sourceRoot":"","sources":["../../src/management/state-read-policy.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EACL,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAOzE,MAAM,UAAU,2BAA2B,CACzC,IAA2D;IAE3D,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAOD,KAAK,UAAU,0BAA0B,CACvC,WAA8B,EAC9B,KAA2B,EAC3B,QAAgB,EAChB,KAA2D;IAE3D,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC7C,WAAW,CAAC,OAAO,EAAE;QACrB,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,MAAM,GACV;QACE,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ;QACR,SAAS,EAAE,KAAK,EAAE,IAAI;QACtB,aAAa,EACX,KAAK,EAAE,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;YACrE,CAAC,CAAC,KAAK,CAAC,QAAQ;YAChB,CAAC,CAAC,SAAS;KAChB,CAAC;IACJ,MAAM,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAA8B;IAE9B,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACjC,OAAQ,CAAC,CAAC,UAAU,CAAe;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAClE,OAAO,EAAE,OAAO;aACb,GAAG,CAAC,CAAC,CAAC,EAA2C,EAAE;YAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,IACE,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAC/B,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,EAC/B,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAyC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAoB;IAEpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAErD,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE;QACpB,GAAG,CAAC,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,OAAO;QACL,GAAG,WAAW;QACd,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,SAAS,EAAE,OAAO,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,OAAoB;IAEpB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,WAAW,CAAC,4BAA4B,EAAE;gBAClD,IAAI,EAAE,EAAE,CAAC,IAAI;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAyB,EACzB,GAA4B,EAC5B,OAAoB;IAEpB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAyB,EACzB,KAA0B,EAC1B,OAAoB;IAEpB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAA4B,EAC5B,QAAgB,EAChB,KAAuC;IAEvC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gCAAgC,CAG9C,KAA6B,EAC7B,QAA4B,EAC5B,WAA8B,EAC9B,QAAgB,EAChB,KAA2B;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI;YAChB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,EAA6B,CAAC;YAC1C,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACzD,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CACvC,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI;YACzB,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC3D,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAA6C,KAAQ;YACxD,OAAO,uBAAuB,CAC5B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAClB,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,MAAM,CAAC,KAAK,CAAC,EACb,IAAI,GAAG,EAAE,EACT,KAAK,CACN,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAI9B,KAA0C,EAC1C,QAA4B,EAC5B,WAA8B,EAC9B,QAAgB,EAChB,SAAiB,EACjB,KAA0B,EAC1B,KAA2B;IAE3B,OAAO;QACL,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI;YACzB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3D,0BAA0B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAC9C,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE;oBAC5D,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,KAAK;YACf,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAyC,CAAC,CAAC,CAAC;YACzE,OAAO,uBAAuB,CAC5B,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EACxB,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,CACN,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAG9C,KAA6B,EAC7B,QAA4B,EAC5B,WAA8B,EAC9B,QAAgB,EAChB,KAA2B;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,KAAK,CAA6C,KAAQ;YACxD,OAAO,uBAAuB,CAC5B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAClB,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,MAAM,CAAC,KAAK,CAAC,EACb,IAAI,GAAG,EAAE,EACT,KAAK,CACN,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI;YACrB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,EAA6B,CAAC;YAC1C,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7D,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CACvC,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI;YAC3B,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC7D,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI;YAChC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;gBAClE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAI9B,KAA0C,EAC1C,QAA4B,EAC5B,WAA8B,EAC9B,QAAgB,EAChB,SAAiB,EACjB,KAA0B,EAC1B,KAA2B;IAE3B,OAAO;QACL,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI;YAChC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAClE,0BAA0B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAC9C,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE;oBACnE,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI;YAC3B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7D,0BAA0B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAC9C,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,0BAA0B,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;oBAC9D,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,KAAK;YACf,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAyC,CAAC,CAAC,CAAC;YACzE,OAAO,uBAAuB,CAC5B,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EACxB,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,CACN,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/management/state-read-policy.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/management/state-read-policy.test.js

@@ -0,0 +1,66 @@
+import { describe, it } from 'node:test';
+import { deepEqual, throws } from 'node:assert';
+import { parseStateReadPolicyJson, readPermissionRowPolicyJson, resolvePolicyTemplate, } from './state-read-policy.js';
+describe('state-read-policy', () => {
+    it('readPermissionRowPolicyJson narrows unknown row fields', () => {
+        deepEqual(readPermissionRowPolicyJson(null), undefined);
+        deepEqual(readPermissionRowPolicyJson(undefined), undefined);
+        deepEqual(readPermissionRowPolicyJson({ data: {} }), undefined);
+        deepEqual(readPermissionRowPolicyJson({ data: { policyJson: 1 } }), undefined);
+        deepEqual(readPermissionRowPolicyJson({ data: { policyJson: '{}' } }), '{}');
+    });
+    it('parseStateReadPolicyJson returns empty for absent or empty input', () => {
+        deepEqual(parseStateReadPolicyJson(undefined), []);
+        deepEqual(parseStateReadPolicyJson(null), []);
+        deepEqual(parseStateReadPolicyJson(''), []);
+    });
+    it('parseStateReadPolicyJson parses a single variant object', () => {
+        const raw = JSON.stringify({
+            methods: ['range', 'iterate'],
+            filters: [{ field: 'authId', value: '$(auth.id)' }],
+        });
+        deepEqual(parseStateReadPolicyJson(raw), [
+            {
+                methods: ['range', 'iterate'],
+                filters: [{ field: 'authId', value: '$(auth.id)' }],
+            },
+        ]);
+    });
+    it('parseStateReadPolicyJson parses variants array', () => {
+        const raw = JSON.stringify({
+            variants: [
+                {
+                    methods: ['get'],
+                    filters: [{ field: 'x', value: '1' }],
+                },
+                {
+                    methods: ['range'],
+                    filters: [],
+                },
+            ],
+        });
+        deepEqual(parseStateReadPolicyJson(raw), [
+            { methods: ['get'], filters: [{ field: 'x', value: '1' }] },
+            { methods: ['range'], filters: [] },
+        ]);
+    });
+    it('resolvePolicyTemplate resolves auth.id placeholder', () => {
+        const ctx = {
+            name: 'n',
+            authId: 'resolved-id',
+            auth: { sub: 's', aud: 'a', iss: 'i' },
+            args: {},
+        };
+        deepEqual(resolvePolicyTemplate('prefix-$(auth.id)-suffix', ctx), 'prefix-resolved-id-suffix');
+    });
+    it('resolvePolicyTemplate throws on unknown placeholder', () => {
+        const ctx = {
+            name: 'n',
+            authId: 'id',
+            auth: { sub: 's', aud: 'a', iss: 'i' },
+            args: {},
+        };
+        throws(() => resolvePolicyTemplate('$(auth.unknown)', ctx), /unknown policy placeholder/);
+    });
+});
+//# sourceMappingURL=state-read-policy.test.js.map

package/dist/management/state-read-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-read-policy.test.js","sourceRoot":"","sources":["../../src/management/state-read-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAGhC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,SAAS,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,SAAS,CAAC,2BAA2B,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7D,SAAS,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,SAAS,CACP,2BAA2B,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,EACxD,SAAS,CACV,CAAC;QACF,SAAS,CACP,2BAA2B,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,EAC3D,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,SAAS,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,SAAS,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;YAC7B,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,SAAS,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE;YACvC;gBACE,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;gBAC7B,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;aACpD;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,QAAQ,EAAE;gBACR;oBACE,OAAO,EAAE,CAAC,KAAK,CAAC;oBAChB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;iBACtC;gBACD;oBACE,OAAO,EAAE,CAAC,OAAO,CAAC;oBAClB,OAAO,EAAE,EAAE;iBACZ;aACF;SACF,CAAC,CAAC;QACH,SAAS,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE;YACvC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE;YAC3D,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACtC,IAAI,EAAE,EAAE;SACa,CAAC;QACxB,SAAS,CACP,qBAAqB,CAAC,0BAA0B,EAAE,GAAG,CAAC,EACtD,2BAA2B,CAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACtC,IAAI,EAAE,EAAE;SACa,CAAC;QACxB,MAAM,CACJ,GAAG,EAAE,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,GAAG,CAAC,EACnD,4BAA4B,CAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/management/stream-access.d.ts

@@ -0,0 +1,11 @@
+import { StateDeclarations } from '../storage/state-declaration.js';
+import { EventDeclarations } from '../event-store/event-declarations.js';
+import { Reader } from '../sequencer/reader.js';
+import { StreamEventStore } from '../event-store/stream-event-store.js';
+import { RemoteSequencer } from '../sequencer/create-remote-sequencer.js';
+import { InMemorySequencer } from '../sequencer/in-memory-sequencer.js';
+export interface StreamAccess<TState extends StateDeclarations, TEvent extends EventDeclarations> {
+    reader: Reader<TState>;
+    sequencer: RemoteSequencer | InMemorySequencer;
+    streamStore: StreamEventStore<TEvent>;
+}

package/dist/management/stream-access.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=stream-access.js.map

package/dist/management/stream-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-access.js","sourceRoot":"","sources":["../../src/management/stream-access.ts"],"names":[],"mappings":""}

package/dist/management/stream-interface-options.d.ts

@@ -0,0 +1,13 @@
+import { StateDeclarations } from '../storage/state-declaration.js';
+import { EventDeclarations } from '../event-store/event-declarations.js';
+import { Lazy } from '../lazy/lazy.js';
+import { StreamAccess } from './stream-access.js';
+import { EventTransformer } from '../stream/event-store-transformer.js';
+import { Telemetry } from '../tracer/telemetry.js';
+export interface StreamInterfaceOptions<TState extends StateDeclarations, TEvent extends EventDeclarations> {
+    lazyAccess: (signal: AbortSignal) => Lazy<StreamAccess<TState, TEvent>>;
+    transformer: EventTransformer<TEvent>;
+    lazyName: Lazy<string>;
+    state: TState;
+    telemetry: Telemetry;
+}

package/dist/management/stream-interface-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=stream-interface-options.js.map

package/dist/management/stream-interface-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-interface-options.js","sourceRoot":"","sources":["../../src/management/stream-interface-options.ts"],"names":[],"mappings":""}

package/dist/management/system/create-in-memory-systems.d.ts

@@ -0,0 +1,5 @@
+import { RuntimeOptions } from '../runtime-options.js';
+import { InMemorySystems } from './in-memory-systems.js';
+export declare function createInMemorySystems(opts: {
+    runtime: RuntimeOptions;
+}): InMemorySystems;

package/dist/management/system/create-in-memory-systems.js

@@ -0,0 +1,8 @@
+import { createSystems } from './create-systems.js';
+export function createInMemorySystems(opts) {
+    return {
+        ...createSystems({ ...opts, remote: false }),
+        remote: false,
+    };
+}
+//# sourceMappingURL=create-in-memory-systems.js.map

package/dist/management/system/create-in-memory-systems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-in-memory-systems.js","sourceRoot":"","sources":["../../../src/management/system/create-in-memory-systems.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,qBAAqB,CAAC,IAErC;IACC,OAAO;QACL,GAAG,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC5C,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC"}

package/dist/management/system/create-remote-systems.d.ts

@@ -0,0 +1,5 @@
+import { RuntimeOptions } from '../runtime-options.js';
+import { RemoteSystems } from './remote-systems.js';
+export declare function createRemoteSystems(opts: {
+    runtime: RuntimeOptions;
+}): RemoteSystems;

package/dist/management/system/create-remote-systems.js

@@ -0,0 +1,8 @@
+import { createSystems } from './create-systems.js';
+export function createRemoteSystems(opts) {
+    return {
+        ...createSystems({ ...opts, remote: true }),
+        remote: true,
+    };
+}
+//# sourceMappingURL=create-remote-systems.js.map

package/dist/management/system/create-remote-systems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-remote-systems.js","sourceRoot":"","sources":["../../../src/management/system/create-remote-systems.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,mBAAmB,CAAC,IAEnC;IACC,OAAO;QACL,GAAG,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3C,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC"}

package/dist/management/system/create-system-partition.d.ts

@@ -0,0 +1,14 @@
+import { StateDefinitions } from '../../storage/state-declaration.js';
+import { EventDeclarations } from '../../event-store/event-declarations.js';
+import { StreamHostRuntime } from '../../runtime/host-runtime.js';
+import { RealmDefinition } from '../../realm/realm-definition.js';
+import { AuthProviders } from '../../authentication/auth-providers.js';
+import { RuntimeOptions } from '../runtime-options.js';
+import { SequencerPartition } from '../../sequencer/sequencer-partition.js';
+import { OutputDeclarations } from '../../stream/output-declarations.js';
+export declare function createSystemPartition<TState extends StateDefinitions, TEvent extends EventDeclarations>(opts: {
+    stream: StreamHostRuntime<TState, TEvent, OutputDeclarations, RealmDefinition<AuthProviders>>;
+    runtime: RuntimeOptions;
+    run: number;
+    tenant: string;
+}): Promise<SequencerPartition>;

package/dist/management/system/create-system-partition.js

@@ -0,0 +1,11 @@
+export async function createSystemPartition(opts) {
+    return {
+        version: await opts.stream.source.version.resolve(opts.runtime.env),
+        realm: opts.stream.source.realm.name,
+        pattern: opts.stream.source.pattern,
+        name: opts.stream.source.pattern,
+        run: opts.run,
+        tenant: opts.tenant,
+    };
+}
+//# sourceMappingURL=create-system-partition.js.map

package/dist/management/system/create-system-partition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-system-partition.js","sourceRoot":"","sources":["../../../src/management/system/create-system-partition.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAGzC,IAUD;IACC,OAAO;QACL,OAAO,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACnE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;QACpC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;QACnC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;QAChC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}

package/dist/management/system/create-system-stream-interface.d.ts

@@ -0,0 +1,17 @@
+import { StateDeclarations } from '../../storage/state-declaration.js';
+import { EventDeclarations } from '../../event-store/event-declarations.js';
+import { StreamHostRuntime } from '../../runtime/host-runtime.js';
+import { RuntimeOptions } from '../runtime-options.js';
+import { StreamInterface } from '../../stream/stream-interface.js';
+import { EventAuth } from '../../event-store/event-auth.js';
+import { RealmDefinition } from '../../realm/realm-definition.js';
+import { AuthProviders } from '../../authentication/auth-providers.js';
+import { OutputDeclarations } from '../../stream/output-declarations.js';
+export declare function createSystemStreamInterface<TState extends StateDeclarations, TEvent extends EventDeclarations>(opts: {
+    stream: StreamHostRuntime<TState, TEvent, OutputDeclarations, RealmDefinition<AuthProviders>>;
+    runtime: RuntimeOptions;
+    run: number;
+    tenant: string;
+    auth: EventAuth;
+    remote: boolean;
+}): StreamInterface<TState, TEvent>;

package/dist/management/system/create-system-stream-interface.js

@@ -0,0 +1,80 @@
+import { createTracedLazy } from '../../lazy/create-lazy.js';
+import { createStreamEventStore } from '../../event-store/create-stream-event-store.js';
+import { createReader } from '../../sequencer/create-reader.js';
+import { createStreamInterface } from '../create-stream-interface.js';
+import { getAuthId } from '../../authentication/get-auth-id.js';
+import { buildStreamKey } from '../../stream/build-stream-name.js';
+import { createSystemPartition } from './create-system-partition.js';
+import { createRemoteSequencer } from '../../sequencer/create-remote-sequencer.js';
+import { resolvedLazy } from '../../lazy/resolved-lazy.js';
+import { createEventStoreTransformer } from '../../stream/event-store-transformer.js';
+import { createStreamSequencer } from '../../worker/create-stream-sequencer.js';
+export function createSystemStreamInterface(opts) {
+    const name = buildStreamKey(opts.stream.source.pattern, {
+        auth: opts.auth,
+        args: {},
+    });
+    const tracer = opts.runtime.telemetry.createTracer('system-stream-interface');
+    return createStreamInterface({
+        telemetry: opts.runtime.telemetry,
+        lazyName: resolvedLazy(name),
+        transformer: createEventStoreTransformer({
+            telemetry: opts.runtime.telemetry,
+            patterns: { [opts.stream.source.pattern]: opts.stream.source.events },
+        }),
+        lazyAccess: (signal) => createTracedLazy(tracer, 'lazy-access', { attributes: { streamPattern: opts.stream.source.pattern } }, async () => {
+            const partition = await createSystemPartition({
+                runtime: opts.runtime,
+                run: opts.run,
+                tenant: opts.tenant,
+                stream: opts.stream,
+            });
+            const context = {
+                auth: opts.auth,
+                args: {},
+                name: name,
+                authId: await getAuthId(opts.runtime.env, opts.auth),
+            };
+            const sequencer = opts.remote
+                ? createRemoteSequencer({
+                    state: opts.stream.source.state,
+                    runtime: opts.runtime,
+                    partition,
+                }, signal)
+                : createStreamSequencer({ runtime: opts.runtime }, {
+                    state: opts.stream.source.state,
+                    outputs: opts.stream.source.outputs,
+                    runtime: opts.stream.runtime,
+                    events: opts.stream.source.events,
+                    identifier: {
+                        tenant: partition.tenant,
+                        version: partition.version,
+                        pattern: partition.pattern,
+                        realm: partition.realm,
+                    },
+                    auth: opts.stream.source.auth,
+                    stateGrant: opts.stream.source.stateGrant,
+                    eventGrant: opts.stream.source.eventGrant,
+                }, { name: context.name, args: context.args, run: partition.run }, signal);
+            return {
+                reader: createReader({
+                    queue: opts.runtime.queue,
+                    state: opts.stream.source.state,
+                    partitionBuilder: opts.runtime.partitionBuilder,
+                    telemetry: opts.runtime.telemetry,
+                    partition,
+                }, signal),
+                sequencer,
+                streamStore: createStreamEventStore({
+                    runtime: opts.runtime,
+                    context,
+                    events: opts.stream.source.events,
+                    partition,
+                    sequencer,
+                }, signal),
+            };
+        }),
+        state: opts.stream.source.state,
+    });
+}
+//# sourceMappingURL=create-system-stream-interface.js.map

package/dist/management/system/create-system-stream-interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-system-stream-interface.js","sourceRoot":"","sources":["../../../src/management/system/create-system-stream-interface.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAInE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAGrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,MAAM,UAAU,2BAA2B,CAGzC,IAYD;IACC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QACtD,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;IAC9E,OAAO,qBAAqB,CAAC;QAC3B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QACjC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;QAC5B,WAAW,EAAE,2BAA2B,CAAC;YACvC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;SACtE,CAAC;QACF,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CACrB,gBAAgB,CACd,MAAM,EACN,aAAa,EACb,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAC7D,KAAK,IAAI,EAAE;YACT,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAgB;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;aACrD,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM;gBAC3B,CAAC,CAAC,qBAAqB,CACnB;oBACE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;oBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS;iBACV,EACD,MAAM,CACP;gBACH,CAAC,CAAC,qBAAqB,CACnB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACzB;oBACE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;oBAC/B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;oBACnC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;oBACjC,UAAU,EAAE;wBACV,MAAM,EAAE,SAAS,CAAC,MAAM;wBACxB,OAAO,EAAE,SAAS,CAAC,OAAO;wBAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;wBAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;qBACvB;oBACD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;oBAC7B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;oBACzC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;iBAC1C,EACD,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,EAC9D,MAAM,CACP,CAAC;YAEN,OAAO;gBACL,MAAM,EAAE,YAAY,CAClB;oBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;oBACzB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;oBAC/B,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;oBAC/C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;oBACjC,SAAS;iBACV,EACD,MAAM,CACP;gBACD,SAAS;gBACT,WAAW,EAAE,sBAAsB,CACjC;oBACE,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;oBACjC,SAAS;oBACT,SAAS;iBACV,EACD,MAAM,CACP;aACF,CAAC;QACJ,CAAC,CACF;QACH,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/management/system/create-system-user-context.d.ts

@@ -0,0 +1,7 @@
+import { UserContext } from '../user-context.js';
+export declare function createSystemUserContext(): UserContext;
+export declare const systemAuth: {
+    aud: string;
+    iss: string;
+    sub: string;
+};

package/dist/management/system/create-system-user-context.js

@@ -0,0 +1,18 @@
+export function createSystemUserContext() {
+    return {
+        auth: {
+            aud: 'system',
+            iss: 'system',
+            sub: 'system',
+        },
+        authId: 'system',
+        name: '',
+        args: {},
+    };
+}
+export const systemAuth = {
+    aud: 'system',
+    iss: 'system',
+    sub: 'system',
+};
+//# sourceMappingURL=create-system-user-context.js.map

package/dist/management/system/create-system-user-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-system-user-context.js","sourceRoot":"","sources":["../../../src/management/system/create-system-user-context.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,QAAQ;SACd;QACD,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,EAAE;QACR,IAAI,EAAE,EAAE;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;CACd,CAAC"}

package/dist/management/system/create-systems.d.ts

@@ -0,0 +1,6 @@
+import { RuntimeOptions } from '../runtime-options.js';
+import { Systems } from './systems.js';
+export declare function createSystems(opts: {
+    runtime: RuntimeOptions;
+    remote: boolean;
+}): Systems;