@objectstack/core 17.0.0-rc.6 → 17.0.0

package/dist/index.cjs

@@ -35,6 +35,8 @@ __export(index_exports, {
   ANONYMOUS_DENY_MESSAGE: () => ANONYMOUS_DENY_MESSAGE,
   ANONYMOUS_DENY_STATUS: () => ANONYMOUS_DENY_STATUS,
   API_KEY_PREFIX: () => API_KEY_PREFIX,
+  AUDIENCE_BINDING_SUGGESTION_STATUSES: () => AUDIENCE_BINDING_SUGGESTION_STATUSES,
+  AUDIENCE_BINDING_SUGGESTION_STATUS_VALUES: () => AUDIENCE_BINDING_SUGGESTION_STATUS_VALUES,
   CORE_FALLBACK_FACTORIES: () => CORE_FALLBACK_FACTORIES,
   DependencyResolver: () => DependencyResolver,
   ENTRY_EXECUTION_CONTEXT_FIELDS: () => ENTRY_EXECUTION_CONTEXT_FIELDS,
@@ -68,11 +70,14 @@ __export(index_exports, {
   assembleExecutionContext: () => assembleExecutionContext,
   assembleExecutionContextOrGuest: () => assembleExecutionContextOrGuest,
   assertInitServiceRequirements: () => assertInitServiceRequirements,
+  assertMetadataRegisterContract: () => assertMetadataRegisterContract,
   bucketKeyToCalendarRange: () => bucketKeyToCalendarRange,
   buildPermissionsFromGrants: () => buildPermissionsFromGrants,
   bulkWrite: () => bulkWrite,
   calendarPartsInTz: () => calendarPartsInTz,
   calendarPartsInTzOrUtc: () => calendarPartsInTzOrUtc,
+  canonicalMetadataServiceType: () => canonicalMetadataServiceType,
+  collectInternalWriteResponseFields: () => collectInternalWriteResponseFields,
   counterSignPayload: () => counterSignPayload,
   createLogger: () => createLogger,
   createMemoryCache: () => createMemoryCache,
@@ -97,6 +102,7 @@ __export(index_exports, {
   getMemoryUsage: () => getMemoryUsage,
   hashApiKey: () => hashApiKey,
   hashMigrationPlan: () => hashMigrationPlan,
+  isAudienceBindingSuggestionStatus: () => isAudienceBindingSuggestionStatus,
   isAuthGateAllowlisted: () => isAuthGateAllowlisted,
   isExpired: () => isExpired,
   isGrantActive: () => isGrantActive,
@@ -104,12 +110,14 @@ __export(index_exports, {
   isNode: () => isNode,
   nextUtcCalendarDay: () => import_data.nextUtcCalendarDay,
   normalizeAuthGate: () => normalizeAuthGate,
+  omitInternalFieldsFromWriteResponse: () => omitInternalFieldsFromWriteResponse,
   parseScopes: () => parseScopes,
   parseSignature: () => parseSignature,
   planChunks: () => planChunks,
   postureVisibleRows: () => postureVisibleRows,
   readAuthoredTranslationLayer: () => readAuthoredTranslationLayer,
   readRunJournal: () => readRunJournal,
+  recordNotFoundError: () => recordNotFoundError,
   resolveApiKeyPrincipal: () => resolveApiKeyPrincipal,
   resolveAuthzContext: () => resolveAuthzContext,
   resolveFilterToken: () => resolveFilterToken,
@@ -123,6 +131,7 @@ __export(index_exports, {
   safeExit: () => safeExit,
   shouldDenyAnonymous: () => shouldDenyAnonymous,
   signPayload: () => signPayload,
+  unknownAudienceBindingSuggestionStatusMessage: () => unknownAudienceBindingSuggestionStatusMessage,
   utcInstantMs: () => import_data.utcInstantMs,
   validateInitServiceContract: () => validateInitServiceContract,
   verifyPayload: () => verifyPayload,
@@ -837,7 +846,7 @@ function createLogger(config) {
 }
 
 // src/kernel.ts
-var import_system2 = require("@objectstack/spec/system");
+var import_system3 = require("@objectstack/spec/system");
 
 // src/security/plugin-config-validator.ts
 var import_zod = require("zod");
@@ -1505,6 +1514,7 @@ function createMemoryJob() {
 }
 
 // src/fallbacks/memory-i18n.ts
+var import_system = require("@objectstack/spec/system");
 function deepMerge(target, source) {
   const result = { ...target };
   for (const key of Object.keys(source)) {
@@ -1538,6 +1548,7 @@ function createMemoryI18n() {
   const translations = /* @__PURE__ */ new Map();
   const authored = /* @__PURE__ */ new Map();
   let defaultLocale = "en";
+  let supportedLocales;
   function resolveKey(data, key) {
     const parts = key.split(".");
     let current = data;
@@ -1603,9 +1614,29 @@ function createMemoryI18n() {
         authored.set(locale, { ...data });
       }
     },
+    /**
+     * Report the locales this stack offers.
+     *
+     * [#7679] When the app declared `i18n.supportedLocales`, that declaration
+     * IS the answer — in declared order, and including a declared locale no
+     * bundle was ever loaded for (declared-but-unserved). Reporting the
+     * declaration rather than an intersection is what gives a client the
+     * signal that the locale it is being offered has nothing behind it yet;
+     * quietly dropping it would leave the gap invisible on both sides. It is
+     * also the only answer that does not depend on how much had loaded by the
+     * time this was called.
+     *
+     * With nothing declared, the loaded set — the behaviour every app that
+     * never opted in already has.
+     */
     getLocales() {
+      if (supportedLocales) return [...supportedLocales];
       return [.../* @__PURE__ */ new Set([...translations.keys(), ...authored.keys()])];
     },
+    /** @see II18nService.setSupportedLocales — [#7679] */
+    setSupportedLocales(locales) {
+      supportedLocales = (0, import_system.normalizeSupportedLocales)(locales);
+    },
     getDefaultLocale() {
       return defaultLocale;
     },
@@ -1615,14 +1646,42 @@ function createMemoryI18n() {
   };
 }
 
+// src/metadata-service-contract.ts
+var import_shared = require("@objectstack/spec/shared");
+var REGISTER_REFUSAL_CODE = "VALIDATION_ERROR";
+function canonicalMetadataServiceType(type) {
+  return (0, import_shared.pluralToSingular)(type);
+}
+function registerRefusal(message) {
+  const err = new Error(message);
+  err.code = REGISTER_REFUSAL_CODE;
+  err.status = 400;
+  return err;
+}
+function assertMetadataRegisterContract(type, name, data) {
+  if (typeof data !== "object" || data === null || Array.isArray(data)) {
+    const shape = data === null ? "null" : Array.isArray(data) ? "an array" : `a ${typeof data}`;
+    throw registerRefusal(
+      `IMetadataService.register('${type}', '${name}'): data is ${shape}, not a metadata document. register() stores plain-object documents only \u2014 accepting a value the service cannot key was measured as accept-then-drop on document-keyed stores (#7378 row 3: refuse loudly, never coerce into storability). Wrap the value in a document object whose shape the '${type}' type's schema accepts, or store it under a type that declares one.`
+    );
+  }
+  const documentName = data.name;
+  if (documentName !== void 0 && documentName !== name) {
+    throw registerRefusal(
+      `IMetadataService.register('${type}', '${name}'): data.name is '${String(documentName)}', which disagrees with the name argument '${name}'. A disagreement is almost always an authoring bug, and resolving it silently in either direction can file the item under a key the caller never wrote (#7378 row 1: refuse loudly, locate the mismatch). Register under one name: pass the intended key as the argument and make data.name match it, or omit data.name.`
+    );
+  }
+}
+
 // src/fallbacks/memory-metadata.ts
 function createMemoryMetadata() {
   const store = /* @__PURE__ */ new Map();
   function getTypeMap(type) {
-    let map = store.get(type);
+    const canonical = canonicalMetadataServiceType(type);
+    let map = store.get(canonical);
     if (!map) {
       map = /* @__PURE__ */ new Map();
-      store.set(type, map);
+      store.set(canonical, map);
     }
     return map;
   }
@@ -1637,6 +1696,7 @@ function createMemoryMetadata() {
     },
     _serviceName: "metadata",
     async register(type, name, data) {
+      assertMetadataRegisterContract(type, name, data);
       getTypeMap(type).set(name, data);
     },
     // Mirror MetadataManager.registerInMemory (synchronous, no persistence).
@@ -1648,7 +1708,11 @@ function createMemoryMetadata() {
     // so `defineStack({ datasources })` entries silently never reached the
     // registry and were absent from GET /api/v1/datasources and
     // GET /api/v1/meta/datasource (ADR-0015 §18). This store is already
-    // in-memory only, so registerInMemory and register share an implementation.
+    // in-memory only, so registerInMemory and register share a store — but
+    // NOT the [#7378] refusals: the ruling names `register`, and this member
+    // is a boot-time seeding primitive for source-control-owned artefacts
+    // (see assertMetadataRegisterContract's header for the boundary). It does
+    // share the row-2 canonical type fold, via getTypeMap.
     registerInMemory(type, name, data) {
       getTypeMap(type).set(name, data);
     },
@@ -1677,7 +1741,7 @@ function createMemoryMetadata() {
 }
 
 // src/fallbacks/authored-translation-sync.ts
-var import_system = require("@objectstack/spec/system");
+var import_system2 = require("@objectstack/spec/system");
 var OWNER_PROP = "__authoredTranslationSyncOwner";
 var LOCALE_LIKE = /^[a-z]{2,3}([_-]([A-Za-z]{4}|[A-Za-z]{2}|[0-9]{3}))?$/;
 async function readAuthoredTranslationLayer(engine, logger) {
@@ -1707,7 +1771,7 @@ async function readAuthoredTranslationLayer(engine, logger) {
       continue;
     }
     if (!data || typeof data !== "object") continue;
-    const legacyKeys = import_system.LEGACY_OBJECT_FIRST_KEYS.filter((key) => data[key] !== void 0);
+    const legacyKeys = import_system2.LEGACY_OBJECT_FIRST_KEYS.filter((key) => data[key] !== void 0);
     if (legacyKeys.length > 0) {
       logger?.warn?.(
         `[i18n] authored translation '${row?.name}' uses the retired object-first shape (${legacyKeys.join(", ")}) \u2014 nothing resolves from it; re-author it under 'objects.<object_name>' with a top-level 'locale' \u2014 skipped`
@@ -1945,7 +2009,7 @@ var ObjectKernel = class {
    */
   preInjectCoreFallbacks() {
     if (this.config.skipSystemValidation) return;
-    for (const [serviceName, criticality] of Object.entries(import_system2.ServiceRequirementDef)) {
+    for (const [serviceName, criticality] of Object.entries(import_system3.ServiceRequirementDef)) {
       if (criticality !== "core") continue;
       const hasService = this.services.has(serviceName) || this.pluginLoader.hasService(serviceName);
       if (!hasService) {
@@ -1969,7 +2033,7 @@ var ObjectKernel = class {
     this.logger.debug("Validating system service requirements...");
     const missingServices = [];
     const missingCoreServices = [];
-    for (const [serviceName, criticality] of Object.entries(import_system2.ServiceRequirementDef)) {
+    for (const [serviceName, criticality] of Object.entries(import_system3.ServiceRequirementDef)) {
       const hasService = this.services.has(serviceName) || this.pluginLoader.hasService(serviceName);
       if (!hasService) {
         if (criticality === "required") {
@@ -2644,11 +2708,29 @@ var TestRunner = class {
 };
 
 // src/qa/http-adapter.ts
+var import_api = require("@objectstack/spec/api");
+var dataPathCache;
+function defaultDataPath() {
+  if (dataPathCache === void 0) {
+    const api = import_api.RestApiConfigSchema.parse({});
+    const crud = import_api.CrudEndpointsConfigSchema.parse({});
+    dataPathCache = `${api.apiPath ?? `${api.basePath}/${api.version}`}${crud.dataPrefix}`;
+  }
+  return dataPathCache;
+}
 var HttpTestAdapter = class {
   constructor(baseUrl, authToken) {
     this.baseUrl = baseUrl;
     this.authToken = authToken;
   }
+  /** `{baseUrl}{apiBasePath}{dataPrefix}/{object}` — the collection URL. */
+  collectionUrl(objectName) {
+    return `${this.baseUrl}${defaultDataPath()}/${encodeURIComponent(objectName)}`;
+  }
+  /** `{collection}/{id}` — the single-record URL. */
+  recordUrl(objectName, id) {
+    return `${this.collectionUrl(objectName)}/${encodeURIComponent(String(id))}`;
+  }
   async execute(action, _context) {
     const headers = {
       "Content-Type": "application/json"
@@ -2680,7 +2762,7 @@ var HttpTestAdapter = class {
     }
   }
   async createRecord(objectName, data, headers) {
-    const response = await fetch(`${this.baseUrl}/api/data/${objectName}`, {
+    const response = await fetch(this.collectionUrl(objectName), {
       method: "POST",
       headers,
       body: JSON.stringify(data)
@@ -2688,19 +2770,19 @@ var HttpTestAdapter = class {
     return this.handleResponse(response);
   }
   async updateRecord(objectName, data, headers) {
-    const id = data.id;
+    const { id, ...fields } = data;
     if (!id) throw new Error("Update record requires id in payload");
-    const response = await fetch(`${this.baseUrl}/api/data/${objectName}/${id}`, {
-      method: "PUT",
+    const response = await fetch(this.recordUrl(objectName, id), {
+      method: "PATCH",
       headers,
-      body: JSON.stringify(data)
+      body: JSON.stringify(fields)
     });
     return this.handleResponse(response);
   }
   async deleteRecord(objectName, data, headers) {
     const id = data.id;
     if (!id) throw new Error("Delete record requires id in payload");
-    const response = await fetch(`${this.baseUrl}/api/data/${objectName}/${id}`, {
+    const response = await fetch(this.recordUrl(objectName, id), {
       method: "DELETE",
       headers
     });
@@ -2709,14 +2791,14 @@ var HttpTestAdapter = class {
   async readRecord(objectName, data, headers) {
     const id = data.id;
     if (!id) throw new Error("Read record requires id in payload");
-    const response = await fetch(`${this.baseUrl}/api/data/${objectName}/${id}`, {
+    const response = await fetch(this.recordUrl(objectName, id), {
       method: "GET",
       headers
     });
     return this.handleResponse(response);
   }
   async queryRecords(objectName, data, headers) {
-    const response = await fetch(`${this.baseUrl}/api/data/${objectName}/query`, {
+    const response = await fetch(`${this.collectionUrl(objectName)}/query`, {
       method: "POST",
       headers,
       body: JSON.stringify(data)
@@ -4661,6 +4743,18 @@ function shouldDenyAnonymous(input) {
   return true;
 }
 
+// src/security/audience-binding-suggestion-status.ts
+var AUDIENCE_BINDING_SUGGESTION_STATUSES = {
+  pending: true,
+  confirmed: true,
+  dismissed: true
+};
+var AUDIENCE_BINDING_SUGGESTION_STATUS_VALUES = Object.keys(
+  AUDIENCE_BINDING_SUGGESTION_STATUSES
+);
+var isAudienceBindingSuggestionStatus = (value) => Object.prototype.hasOwnProperty.call(AUDIENCE_BINDING_SUGGESTION_STATUSES, value);
+var unknownAudienceBindingSuggestionStatusMessage = (value) => `Unknown status filter '${value}' \u2014 expected one of: ${AUDIENCE_BINDING_SUGGESTION_STATUS_VALUES.join(", ")}`;
+
 // src/security/operation-private-keys.ts
 var OPERATION_PRIVATE_KEY_PREFIX = "__";
 function withoutOperationPrivateKeys(exec) {
@@ -4914,9 +5008,30 @@ async function bulkWrite(rows, opts) {
   return results;
 }
 
+// src/utils/internal-write-response.ts
+function collectInternalWriteResponseFields(schema) {
+  const fields = schema?.fields;
+  if (!fields || typeof fields !== "object") return [];
+  const out = [];
+  for (const [name, def] of Object.entries(fields)) {
+    if (def && def.internal === true) out.push(name);
+  }
+  return out;
+}
+function omitInternalFieldsFromWriteResponse(schema, records) {
+  if (!records) return;
+  const internalFields = collectInternalWriteResponseFields(schema);
+  if (internalFields.length === 0) return;
+  const list = Array.isArray(records) ? records : [records];
+  for (const row of list) {
+    if (!row || typeof row !== "object") continue;
+    for (const field of internalFields) delete row[field];
+  }
+}
+
 // src/utils/migration-journal.ts
 var import_node_crypto3 = require("crypto");
-var import_system3 = require("@objectstack/spec/system");
+var import_system4 = require("@objectstack/spec/system");
 var SYSTEM_CTX = { isSystem: true };
 var DEFAULT_CHUNK_SIZE = 200;
 function engineCanRollBack(engine) {
@@ -4974,14 +5089,14 @@ function hashMigrationPlan(plan, chunks) {
 }
 async function appendEvent(engine, event, execContext) {
   await engine.insert(
-    import_system3.MIGRATION_JOURNAL_OBJECT,
+    import_system4.MIGRATION_JOURNAL_OBJECT,
     { ...event, created_at: event.created_at ?? (/* @__PURE__ */ new Date()).toISOString() },
     { context: execContext ?? { ...SYSTEM_CTX } }
   );
 }
 async function readRunJournal(engine, runId) {
   const rows = await engine.find(
-    import_system3.MIGRATION_JOURNAL_OBJECT,
+    import_system4.MIGRATION_JOURNAL_OBJECT,
     { where: { run_id: runId } },
     { context: { ...SYSTEM_CTX } }
   );
@@ -4996,7 +5111,7 @@ function chunkSetOf(events, kind) {
 }
 async function findInterruptedRuns(engine) {
   const started = await engine.find(
-    import_system3.MIGRATION_JOURNAL_OBJECT,
+    import_system4.MIGRATION_JOURNAL_OBJECT,
     { where: { kind: "run_started" } },
     { context: { ...SYSTEM_CTX } }
   );
@@ -5504,6 +5619,15 @@ function filterTokenContextFrom(execCtx, now) {
   };
 }
 
+// src/utils/record-not-found.ts
+function recordNotFoundError(object, id) {
+  const err = new Error(`Record ${id} not found in ${object}`);
+  err.code = "RECORD_NOT_FOUND";
+  err.status = 404;
+  err.object = object;
+  return err;
+}
+
 // src/health-monitor.ts
 var PluginHealthMonitor = class {
   constructor(logger) {
@@ -6487,6 +6611,8 @@ var NamespaceResolver = class {
   ANONYMOUS_DENY_MESSAGE,
   ANONYMOUS_DENY_STATUS,
   API_KEY_PREFIX,
+  AUDIENCE_BINDING_SUGGESTION_STATUSES,
+  AUDIENCE_BINDING_SUGGESTION_STATUS_VALUES,
   CORE_FALLBACK_FACTORIES,
   DependencyResolver,
   ENTRY_EXECUTION_CONTEXT_FIELDS,
@@ -6520,11 +6646,14 @@ var NamespaceResolver = class {
   assembleExecutionContext,
   assembleExecutionContextOrGuest,
   assertInitServiceRequirements,
+  assertMetadataRegisterContract,
   bucketKeyToCalendarRange,
   buildPermissionsFromGrants,
   bulkWrite,
   calendarPartsInTz,
   calendarPartsInTzOrUtc,
+  canonicalMetadataServiceType,
+  collectInternalWriteResponseFields,
   counterSignPayload,
   createLogger,
   createMemoryCache,
@@ -6549,6 +6678,7 @@ var NamespaceResolver = class {
   getMemoryUsage,
   hashApiKey,
   hashMigrationPlan,
+  isAudienceBindingSuggestionStatus,
   isAuthGateAllowlisted,
   isExpired,
   isGrantActive,
@@ -6556,12 +6686,14 @@ var NamespaceResolver = class {
   isNode,
   nextUtcCalendarDay,
   normalizeAuthGate,
+  omitInternalFieldsFromWriteResponse,
   parseScopes,
   parseSignature,
   planChunks,
   postureVisibleRows,
   readAuthoredTranslationLayer,
   readRunJournal,
+  recordNotFoundError,
   resolveApiKeyPrincipal,
   resolveAuthzContext,
   resolveFilterToken,
@@ -6575,6 +6707,7 @@ var NamespaceResolver = class {
   safeExit,
   shouldDenyAnonymous,
   signPayload,
+  unknownAudienceBindingSuggestionStatusMessage,
   utcInstantMs,
   validateInitServiceContract,
   verifyPayload,