@objectstack/core 12.0.0 → 12.2.0

package/dist/index.d.cts

@@ -1918,6 +1918,14 @@ declare function createMemoryJob(): {
     listJobs(): Promise<string[]>;
 };
 
+/**
+ * Recursively merge `source` into `target`. Nested plain objects are merged
+ * rather than replaced, so multiple plugins can each contribute their own
+ * slice of a locale's translations (e.g. `{objects: {account: ...}}` and
+ * `{objects: {task: ...}}`) without clobbering one another.
+ * Exported for the authored-translation sync (#2591).
+ */
+declare function deepMerge(target: Record<string, unknown>, source: Record<string, unknown>): Record<string, unknown>;
 /**
  * Resolve a locale code against available locales with fallback.
  *
@@ -1947,6 +1955,13 @@ declare function createMemoryI18n(): {
     t(key: string, locale: string, params?: Record<string, unknown>): string;
     getTranslations(locale: string): Record<string, unknown>;
     loadTranslations(locale: string, data: Record<string, unknown>): void;
+    /**
+     * Replace the ENTIRE runtime-authored translation layer (#2591). Called
+     * by the authored-translation sync with the full current set of active
+     * `translation` metadata items keyed by locale. Wholesale replacement —
+     * not a merge — so deleted items/keys stop resolving on the next sync.
+     */
+    replaceAuthoredTranslations(byLocale: Record<string, Record<string, unknown>>): void;
     getLocales(): string[];
     getDefaultLocale(): string;
     setDefaultLocale(locale: string): void;
@@ -1973,6 +1988,34 @@ declare function createMemoryMetadata(): {
     listObjects(): Promise<any[]>;
 };
 
+type AnyRecord = Record<string, any>;
+interface MinimalCtx {
+    logger: {
+        debug?: (...a: any[]) => void;
+        info?: (...a: any[]) => void;
+        warn?: (...a: any[]) => void;
+    };
+    getService(name: string): any;
+    hook?(name: string, fn: () => Promise<void> | void): void;
+}
+/**
+ * Read ACTIVE `translation` metadata rows and compute the authored layer,
+ * keyed by locale. Returns `null` when the read failed (callers must keep
+ * the current layer, never tear it down on an error).
+ */
+declare function readAuthoredTranslationLayer(engine: {
+    find(object: string, opts?: AnyRecord): Promise<any[]>;
+}, logger?: MinimalCtx['logger']): Promise<Record<string, Record<string, unknown>> | null>;
+/**
+ * Wire the authored-translation sync into a plugin context: registers the
+ * `kernel:ready` / `metadata:reloaded` hooks and (at kernel:ready) the
+ * protocol mutation subscription. Idempotent per i18n service instance via
+ * the ownership marker. Safe to call on kernels with no engine, no protocol,
+ * or an i18n service without `replaceAuthoredTranslations` — every path
+ * degrades to a no-op.
+ */
+declare function wireAuthoredTranslationSync(ctx: MinimalCtx): void;
+
 /**
  * Map of core-criticality service names to their in-memory fallback factories.
  * Used by ObjectKernel.validateSystemRequirements() to auto-inject fallbacks
@@ -2255,4 +2298,4 @@ declare class NamespaceResolver {
     private suggestAlternative;
 }
 
-export { API_KEY_PREFIX, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type GeneratedApiKey, HotReloadManager, type KernelState, type KeyInput, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolvedAuthzContext, type ResourceUsage, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, type VersionCompatibility, buildPermissionsFromGrants, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, evaluateAuthGate, extractApiKey, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isNode, parseScopes, parseSignature, resolveApiKeyPrincipal, resolveAuthzContext, resolveLocale, resolveLocalizationContext, safeExit, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature };
+export { API_KEY_PREFIX, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type GeneratedApiKey, HotReloadManager, type KernelState, type KeyInput, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolvedAuthzContext, type ResourceUsage, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, type VersionCompatibility, buildPermissionsFromGrants, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, deepMerge, evaluateAuthGate, extractApiKey, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isNode, parseScopes, parseSignature, readAuthoredTranslationLayer, resolveApiKeyPrincipal, resolveAuthzContext, resolveLocale, resolveLocalizationContext, safeExit, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature, wireAuthoredTranslationSync };

package/dist/index.d.ts

@@ -1918,6 +1918,14 @@ declare function createMemoryJob(): {
     listJobs(): Promise<string[]>;
 };
 
+/**
+ * Recursively merge `source` into `target`. Nested plain objects are merged
+ * rather than replaced, so multiple plugins can each contribute their own
+ * slice of a locale's translations (e.g. `{objects: {account: ...}}` and
+ * `{objects: {task: ...}}`) without clobbering one another.
+ * Exported for the authored-translation sync (#2591).
+ */
+declare function deepMerge(target: Record<string, unknown>, source: Record<string, unknown>): Record<string, unknown>;
 /**
  * Resolve a locale code against available locales with fallback.
  *
@@ -1947,6 +1955,13 @@ declare function createMemoryI18n(): {
     t(key: string, locale: string, params?: Record<string, unknown>): string;
     getTranslations(locale: string): Record<string, unknown>;
     loadTranslations(locale: string, data: Record<string, unknown>): void;
+    /**
+     * Replace the ENTIRE runtime-authored translation layer (#2591). Called
+     * by the authored-translation sync with the full current set of active
+     * `translation` metadata items keyed by locale. Wholesale replacement —
+     * not a merge — so deleted items/keys stop resolving on the next sync.
+     */
+    replaceAuthoredTranslations(byLocale: Record<string, Record<string, unknown>>): void;
     getLocales(): string[];
     getDefaultLocale(): string;
     setDefaultLocale(locale: string): void;
@@ -1973,6 +1988,34 @@ declare function createMemoryMetadata(): {
     listObjects(): Promise<any[]>;
 };
 
+type AnyRecord = Record<string, any>;
+interface MinimalCtx {
+    logger: {
+        debug?: (...a: any[]) => void;
+        info?: (...a: any[]) => void;
+        warn?: (...a: any[]) => void;
+    };
+    getService(name: string): any;
+    hook?(name: string, fn: () => Promise<void> | void): void;
+}
+/**
+ * Read ACTIVE `translation` metadata rows and compute the authored layer,
+ * keyed by locale. Returns `null` when the read failed (callers must keep
+ * the current layer, never tear it down on an error).
+ */
+declare function readAuthoredTranslationLayer(engine: {
+    find(object: string, opts?: AnyRecord): Promise<any[]>;
+}, logger?: MinimalCtx['logger']): Promise<Record<string, Record<string, unknown>> | null>;
+/**
+ * Wire the authored-translation sync into a plugin context: registers the
+ * `kernel:ready` / `metadata:reloaded` hooks and (at kernel:ready) the
+ * protocol mutation subscription. Idempotent per i18n service instance via
+ * the ownership marker. Safe to call on kernels with no engine, no protocol,
+ * or an i18n service without `replaceAuthoredTranslations` — every path
+ * degrades to a no-op.
+ */
+declare function wireAuthoredTranslationSync(ctx: MinimalCtx): void;
+
 /**
  * Map of core-criticality service names to their in-memory fallback factories.
  * Used by ObjectKernel.validateSystemRequirements() to auto-inject fallbacks
@@ -2255,4 +2298,4 @@ declare class NamespaceResolver {
     private suggestAlternative;
 }
 
-export { API_KEY_PREFIX, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type GeneratedApiKey, HotReloadManager, type KernelState, type KeyInput, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolvedAuthzContext, type ResourceUsage, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, type VersionCompatibility, buildPermissionsFromGrants, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, evaluateAuthGate, extractApiKey, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isNode, parseScopes, parseSignature, resolveApiKeyPrincipal, resolveAuthzContext, resolveLocale, resolveLocalizationContext, safeExit, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature };
+export { API_KEY_PREFIX, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type GeneratedApiKey, HotReloadManager, type KernelState, type KeyInput, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolvedAuthzContext, type ResourceUsage, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, type VersionCompatibility, buildPermissionsFromGrants, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, deepMerge, evaluateAuthGate, extractApiKey, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isNode, parseScopes, parseSignature, readAuthoredTranslationLayer, resolveApiKeyPrincipal, resolveAuthzContext, resolveLocale, resolveLocalizationContext, safeExit, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature, wireAuthoredTranslationSync };

package/dist/index.js

@@ -1067,6 +1067,7 @@ function resolveLocale(requestedLocale, availableLocales) {
 }
 function createMemoryI18n() {
   const translations = /* @__PURE__ */ new Map();
+  const authored = /* @__PURE__ */ new Map();
   let defaultLocale = "en";
   function resolveKey(data, key) {
     const parts = key.split(".");
@@ -1077,17 +1078,25 @@ function createMemoryI18n() {
     }
     return typeof current === "string" ? current : void 0;
   }
+  function mergedLocale(locale) {
+    const stat = translations.get(locale);
+    const auth = authored.get(locale);
+    if (stat && auth) return deepMerge(stat, auth);
+    return auth ?? stat;
+  }
   function resolveTranslations(locale) {
-    if (translations.has(locale)) return translations.get(locale);
-    const resolved = resolveLocale(locale, [...translations.keys()]);
-    if (resolved) return translations.get(resolved);
+    const exact = mergedLocale(locale);
+    if (exact) return exact;
+    const allLocales = [.../* @__PURE__ */ new Set([...translations.keys(), ...authored.keys()])];
+    const resolved = resolveLocale(locale, allLocales);
+    if (resolved) return mergedLocale(resolved);
     return void 0;
   }
   return {
     _fallback: true,
     _serviceName: "i18n",
     t(key, locale, params) {
-      const data = resolveTranslations(locale) ?? translations.get(defaultLocale);
+      const data = resolveTranslations(locale) ?? mergedLocale(defaultLocale);
       const value = data ? resolveKey(data, key) : void 0;
       if (value == null) return key;
       if (!params) return value;
@@ -1104,8 +1113,21 @@ function createMemoryI18n() {
         translations.set(locale, { ...data });
       }
     },
+    /**
+     * Replace the ENTIRE runtime-authored translation layer (#2591). Called
+     * by the authored-translation sync with the full current set of active
+     * `translation` metadata items keyed by locale. Wholesale replacement —
+     * not a merge — so deleted items/keys stop resolving on the next sync.
+     */
+    replaceAuthoredTranslations(byLocale) {
+      authored.clear();
+      for (const [locale, data] of Object.entries(byLocale ?? {})) {
+        if (!data || typeof data !== "object") continue;
+        authored.set(locale, { ...data });
+      }
+    },
     getLocales() {
-      return [...translations.keys()];
+      return [.../* @__PURE__ */ new Set([...translations.keys(), ...authored.keys()])];
     },
     getDefaultLocale() {
       return defaultLocale;
@@ -1170,6 +1192,114 @@ function createMemoryMetadata() {
   };
 }
 
+// src/fallbacks/authored-translation-sync.ts
+var OWNER_PROP = "__authoredTranslationSyncOwner";
+var LOCALE_LIKE = /^[a-z]{2,3}([_-]([A-Za-z]{4}|[A-Za-z]{2}|[0-9]{3}))?$/;
+async function readAuthoredTranslationLayer(engine, logger) {
+  let rows;
+  try {
+    rows = await engine.find("sys_metadata", {
+      where: { type: "translation", state: "active" }
+    }) ?? [];
+    if (rows.length === 0) {
+      rows = await engine.find("sys_metadata", {
+        where: { type: "translations", state: "active" }
+      }) ?? [];
+    }
+  } catch (err) {
+    logger?.debug?.("[i18n] authored-translation read failed \u2014 keeping current layer", {
+      error: err?.message
+    });
+    return null;
+  }
+  const byLocale = {};
+  const sorted = [...rows].sort((a, b) => String(a?.name ?? "").localeCompare(String(b?.name ?? "")));
+  for (const row of sorted) {
+    let data;
+    try {
+      data = typeof row.metadata === "string" ? JSON.parse(row.metadata) : row.metadata;
+    } catch {
+      continue;
+    }
+    if (!data || typeof data !== "object") continue;
+    const locale = typeof data?._meta?.locale === "string" && data._meta.locale || typeof data?.locale === "string" && data.locale || (typeof row?.name === "string" && LOCALE_LIKE.test(row.name) ? row.name : void 0) || void 0;
+    if (!locale) {
+      logger?.warn?.(
+        `[i18n] authored translation '${row?.name}' has no resolvable locale (set _meta.locale, or name the item after its BCP-47 locale) \u2014 skipped`
+      );
+      continue;
+    }
+    const { name: _n, locale: _l, _packageId: _p, _provenance: _pr, _lock: _lk, ...payload } = data;
+    byLocale[locale] = deepMerge(byLocale[locale] ?? {}, payload);
+  }
+  return byLocale;
+}
+function wireAuthoredTranslationSync(ctx) {
+  if (typeof ctx.hook !== "function") return;
+  const token = /* @__PURE__ */ Symbol("authored-translation-sync");
+  const resolveOwnedI18n = () => {
+    let i18n;
+    try {
+      i18n = ctx.getService("i18n");
+    } catch {
+      return null;
+    }
+    if (!i18n || typeof i18n.replaceAuthoredTranslations !== "function") return null;
+    const current = i18n[OWNER_PROP];
+    if (current === void 0) {
+      i18n[OWNER_PROP] = token;
+      return i18n;
+    }
+    return current === token ? i18n : null;
+  };
+  let chain = Promise.resolve();
+  const sync = () => {
+    const run = chain.then(async () => {
+      const i18n = resolveOwnedI18n();
+      if (!i18n) return;
+      let engine;
+      try {
+        engine = ctx.getService("objectql");
+      } catch {
+        return;
+      }
+      if (!engine || typeof engine.find !== "function") return;
+      const layer = await readAuthoredTranslationLayer(engine, ctx.logger);
+      if (layer === null) return;
+      i18n.replaceAuthoredTranslations(layer);
+      ctx.logger.info?.("[i18n] synced runtime-authored translations", {
+        locales: Object.keys(layer)
+      });
+    });
+    chain = run.catch(() => void 0);
+    return run;
+  };
+  ctx.hook("kernel:ready", async () => {
+    if (resolveOwnedI18n()) {
+      let protocol = null;
+      try {
+        protocol = ctx.getService("protocol");
+      } catch {
+      }
+      if (protocol && typeof protocol.onMetadataMutation === "function") {
+        protocol.onMetadataMutation((evt) => {
+          if (evt?.type !== "translation" || evt.state === "draft") return;
+          void sync().catch((err) => {
+            ctx.logger.warn?.("[i18n] authored-translation re-sync after mutation failed", {
+              item: evt.name,
+              error: err?.message
+            });
+          });
+        });
+      }
+    }
+    await sync();
+  });
+  ctx.hook("metadata:reloaded", async () => {
+    await sync();
+  });
+}
+
 // src/fallbacks/index.ts
 var CORE_FALLBACK_FACTORIES = {
   metadata: createMemoryMetadata,
@@ -5209,6 +5339,7 @@ export {
   createMemoryQueue,
   createPluginConfigValidator,
   createPluginPermissionEnforcer,
+  deepMerge,
   evaluateAuthGate,
   extractApiKey,
   generateApiKey,
@@ -5221,6 +5352,7 @@ export {
   isNode,
   parseScopes,
   parseSignature,
+  readAuthoredTranslationLayer,
   resolveApiKeyPrincipal,
   resolveAuthzContext,
   resolveLocale,
@@ -5230,6 +5362,7 @@ export {
   verifyPayload,
   verifyPlatformSignature,
   verifyPluginArtifact,
-  verifyPublisherSignature
+  verifyPublisherSignature,
+  wireAuthoredTranslationSync
 };
 //# sourceMappingURL=index.js.map