@opendatalabs/personal-server-ts-core 0.0.1-canary.00328bf

package/dist/storage/pdpp-records/enforcement.js

@@ -0,0 +1,79 @@
+import { PdppError } from "../../errors/pdpp-catalog.js";
+import { findStreamGrant, withinTimeConstraint, } from "../../ports/pdpp-auth.js";
+import { withRequiredFields, } from "./stream-declaration.js";
+export function resolveReadScope(context, stream, declaration) {
+    if (!context.active) {
+        throw mapInactiveToError(context);
+    }
+    if (!declaration) {
+        throw new PdppError("not_found", `Stream '${stream}' not found`);
+    }
+    if (context.tokenKind === "owner") {
+        // Owner tokens carry no grant: full current-capability read, but still
+        // scoped to the owner's own subject — enforced by the caller passing
+        // only that subject's instance_ids into the store query, which for the
+        // owner-token case is "every instance belonging to subjectId". This
+        // module doesn't own instance-to-subject resolution (that's the RS
+        // route layer's data-store lookup); it returns `undefined` fields (no
+        // projection restriction) since an owner token has no grant field list.
+        return { instanceIds: [], fields: undefined };
+    }
+    // Client token: requires an active resolved grant.
+    if (!context.grant) {
+        throw new PdppError("grant_invalid", "Client token has no resolved grant");
+    }
+    const streamGrant = findStreamGrant(context.grant, stream);
+    if (!streamGrant) {
+        throw new PdppError("grant_stream_not_allowed", `Grant does not include stream '${stream}'`);
+    }
+    if (streamGrant.fields.length === 0 ||
+        streamGrant.instance_ids.length === 0) {
+        // Per the AS contract: "If the RS finds ... an empty `fields`, or an
+        // empty `instance_ids`, that is an AS bug — fail closed."
+        throw new PdppError("grant_invalid", "Resolved grant is malformed (empty fields or instance_ids)");
+    }
+    return {
+        instanceIds: streamGrant.instance_ids,
+        fields: withRequiredFields(streamGrant.fields, declaration.requiredFields),
+        streamGrant,
+    };
+}
+/**
+ * Validates that a record's time field satisfies the grant's frozen
+ * time_constraint, if any. Callers filter store results through this before
+ * returning them (the store itself is time_constraint-agnostic).
+ */
+export function recordWithinGrantTimeConstraint(data, streamGrant) {
+    if (!streamGrant?.time_constraint)
+        return true;
+    const value = data[streamGrant.time_constraint.field];
+    return withinTimeConstraint(typeof value === "string" ? value : undefined, streamGrant.time_constraint);
+}
+/** Validates a canonical record_key is within the grant's `resources` allowlist, if constrained. */
+export function recordKeyWithinGrantResources(recordKey, streamGrant) {
+    if (!streamGrant?.resources)
+        return true; // absent = all records
+    return streamGrant.resources.includes(recordKey);
+}
+/**
+ * The PdppError an inactive token maps to.
+ *
+ * Exported so every route answers an inactive token with the SAME reason.
+ * `/v1/streams` previously inlined a flat `authentication_error` while record
+ * reads used this mapping, so one revoked grant produced a 401 on one endpoint
+ * and a 403 `grant_revoked` on another.
+ */
+export function mapInactiveToError(context) {
+    switch (context.inactiveReason) {
+        case "grant_revoked":
+            return new PdppError("grant_revoked", "Grant has been revoked");
+        case "grant_expired":
+            return new PdppError("grant_expired", "Grant has expired");
+        case "expired":
+        case "revoked":
+        case "unknown":
+        default:
+            return new PdppError("authentication_error", "Missing or invalid access token");
+    }
+}
+//# sourceMappingURL=enforcement.js.map

package/dist/storage/pdpp-records/enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcement.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EACL,eAAe,EACf,oBAAoB,GAGrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kBAAkB,GAEnB,MAAM,yBAAyB,CAAC;AAkBjC,MAAM,UAAU,gBAAgB,CAC9B,OAAyB,EACzB,MAAc,EACd,WAA0C;IAE1C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,MAAM,aAAa,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAClC,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,oCAAoC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,SAAS,CACjB,0BAA0B,EAC1B,kCAAkC,MAAM,GAAG,CAC5C,CAAC;IACJ,CAAC;IAED,IACE,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC/B,WAAW,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EACrC,CAAC;QACD,qEAAqE;QACrE,0DAA0D;QAC1D,MAAM,IAAI,SAAS,CACjB,eAAe,EACf,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,YAAY;QACrC,MAAM,EAAE,kBAAkB,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,cAAc,CAAC;QAC1E,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA6B,EAC7B,WAAoC;IAEpC,IAAI,CAAC,WAAW,EAAE,eAAe;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,oBAAoB,CACzB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAC7C,WAAW,CAAC,eAAe,CAC5B,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,WAAoC;IAEpC,IAAI,CAAC,WAAW,EAAE,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB;IACjE,OAAO,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,QAAQ,OAAO,CAAC,cAAc,EAAE,CAAC;QAC/B,KAAK,eAAe;YAClB,OAAO,IAAI,SAAS,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;QAClE,KAAK,eAAe;YAClB,OAAO,IAAI,SAAS,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QAC7D,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf;YACE,OAAO,IAAI,SAAS,CAClB,sBAAsB,EACtB,iCAAiC,CAClC,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/storage/pdpp-records/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./types.js";
+export * from "./interface.js";
+export { encodeRecordKey, computeRecordKeyFromData, keyMatchesData, RecordKeyError, } from "./record-key.js";
+export * from "./cursor.js";
+export * from "./memory-store.js";
+export * from "./stream-declaration.js";
+export * from "./enforcement.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/pdpp-records/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC"}

package/dist/storage/pdpp-records/index.js

@@ -0,0 +1,8 @@
+export * from "./types.js";
+export * from "./interface.js";
+export { encodeRecordKey, computeRecordKeyFromData, keyMatchesData, RecordKeyError, } from "./record-key.js";
+export * from "./cursor.js";
+export * from "./memory-store.js";
+export * from "./stream-declaration.js";
+export * from "./enforcement.js";
+//# sourceMappingURL=index.js.map

package/dist/storage/pdpp-records/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC"}

package/dist/storage/pdpp-records/interface.d.ts

@@ -0,0 +1,49 @@
+import type { ChangesSinceOptions, ChangesSincePage, IngestResult, ListRecordsOptions, ListRecordsPage, PdppBlobMeta, PdppRecordEnvelopeInput, PdppStoredRecord, StreamListing, StreamSemantics } from "./types.js";
+/**
+ * Persistence index for PDPP records. Implementable by a SQLite backend
+ * (desktop, `sqlite-store.ts`) and an in-memory backend that stands in for
+ * the Enclave runtime (`memory-store.ts`) — real Enclave persistence
+ * integration needs the supplied Enclave runtime and is out of scope here.
+ */
+export interface PdppRecordStore {
+    /**
+     * Validates key/data agreement per envelope, computes the canonical
+     * record_key, allocates the next version for mutable_state streams, and
+     * writes the whole batch atomically: a failure partway through rolls back
+     * every write from this call, it never leaves partial version/history
+     * state. Per-envelope validation failures (e.g. key/data mismatch) are
+     * reported in `rejected` and do not fail the rest of the batch.
+     */
+    ingestBatch(envelopes: PdppRecordEnvelopeInput[], streamSemantics: (stream: string) => StreamSemantics, primaryKeyFields: (stream: string) => string[]): IngestResult;
+    getRecord(instance: string, stream: string, recordKey: string): PdppStoredRecord | undefined;
+    listRecords(stream: string, options: ListRecordsOptions): ListRecordsPage;
+    /**
+     * Owner-authenticated explicit delete directive (DELETE endpoint). Only
+     * valid for mutable_state streams; returns false if the stream is
+     * append_only or the record does not exist.
+     */
+    deleteRecord(instance: string, stream: string, recordKey: string, deletedAt: string, streamSemantics: StreamSemantics): boolean;
+    changesSince(stream: string, options: ChangesSinceOptions): ChangesSincePage;
+    listStreams(instanceIds: string[]): StreamListing[];
+    putBlobMeta(meta: PdppBlobMeta): void;
+    getBlobMeta(blobId: string): PdppBlobMeta | undefined;
+    /**
+     * Finds the record that references a `blob_id` via `data.blob_ref.blob_id`
+     * (spec §4 "Binary data (blob_ref)"), if any. A `blob_id` alone is never
+     * sufficient to authorize access (spec §8 "Get a blob"): the resource
+     * server must verify the grant includes a stream containing a record that
+     * references this blob, that record passes all grant filters, and
+     * `blob_ref` is in the grant's authorized field projection. This lookup
+     * is what makes that verification possible instead of trusting field-name
+     * presence alone. Returns undefined if no ingested record currently
+     * references this blob_id.
+     */
+    findBlobReference(blobId: string): BlobReference | undefined;
+    close(): void;
+}
+export interface BlobReference {
+    instance: string;
+    stream: string;
+    recordKey: string;
+}
+//# sourceMappingURL=interface.d.ts.map

package/dist/storage/pdpp-records/interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,WAAW,CACT,SAAS,EAAE,uBAAuB,EAAE,EACpC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,eAAe,EACpD,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,GAC7C,YAAY,CAAC;IAEhB,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,GAAG,SAAS,CAAC;IAEhC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,eAAe,CAAC;IAE1E;;;;OAIG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,eAAe,GAC/B,OAAO,CAAC;IAEX,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,gBAAgB,CAAC;IAE7E,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAEpD,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IAEtC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAEtD;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAE7D,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/storage/pdpp-records/interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=interface.js.map

package/dist/storage/pdpp-records/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/interface.ts"],"names":[],"mappings":""}

package/dist/storage/pdpp-records/memory-store.d.ts

@@ -0,0 +1,9 @@
+import type { PdppRecordStore } from "./interface.js";
+/**
+ * In-memory PdppRecordStore. Stands in for the Enclave runtime for this
+ * lane's own tests and as a second implementation of the shared interface.
+ * This is NOT a real Enclave persistence integration — that needs the
+ * supplied Enclave runtime, which this lane does not have access to.
+ */
+export declare function createMemoryRecordStore(): PdppRecordStore;
+//# sourceMappingURL=memory-store.d.ts.map

package/dist/storage/pdpp-records/memory-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/memory-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAyCtD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,eAAe,CA8dzD"}

package/dist/storage/pdpp-records/memory-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/memory-store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAanB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAIvD,SAAS,MAAM,CAAC,QAAgB,EAAE,MAAc,EAAE,SAAiB;IACjE,OAAO,GAAG,QAAQ,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;AAC9C,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,2DAA2D;IAE/E,SAAS,kBAAkB;QACzB,UAAU,IAAI,CAAC,CAAC;QAChB,kEAAkE;QAClE,qEAAqE;QACrE,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,SAAS,aAAa,CACpB,QAAgB,EAChB,MAAc,EACd,SAAiB;QAEjB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,SAAS,WAAW,CAClB,SAAoC,EACpC,eAAoD,EACpD,gBAA8C;QAE9C,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAC9C,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,MAAM,GAIP,EAAE,CAAC;QAER,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnD,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAEnD,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAC7B,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;wBAChC,QAAQ,CAAC,IAAI,CAAC;4BACZ,KAAK;4BACL,MAAM,EAAE,sDAAsD;yBAC/D,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,MAAM,OAAO,GACX,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;oBACtE,MAAM,SAAS,GAAwB;wBACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,SAAS,EAAE,YAAY;wBACvB,OAAO;wBACP,SAAS,EAAE,QAAQ,CAAC,UAAU;wBAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;wBAC9B,OAAO,EAAE,IAAI;qBACd,CAAC;oBACF,MAAM,CAAC,IAAI,CAAC;wBACV,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;wBAC7D,GAAG,EAAE,SAAS;wBACd,OAAO,EAAE;4BACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;4BACvB,SAAS,EAAE,YAAY;4BACvB,OAAO;4BACP,SAAS,EAAE,kBAAkB,EAAE;4BAC/B,GAAG,EAAE,SAAS;yBACf;qBACF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC3D,QAAQ,CAAC,IAAI,CAAC;wBACZ,KAAK;wBACL,MAAM,EACJ,gEAAgE;qBACnE,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,MAAM,WAAW,GAAG,MAAM,CACxB,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,MAAM,EACf,YAAY,CACb,CAAC;gBACF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAE1C,IAAI,SAAS,KAAK,aAAa,IAAI,QAAQ,EAAE,CAAC;oBAC5C,yDAAyD;oBACzD,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GACX,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;gBACtE,MAAM,MAAM,GAAqB;oBAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,YAAY;oBACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,OAAO;oBACP,SAAS,EAAE,QAAQ,CAAC,UAAU;oBAC9B,OAAO,EAAE,KAAK;iBACf,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,EAAE,WAAW;oBAChB,GAAG,EAAE,MAAM;oBACX,OAAO,EAAE;wBACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,SAAS,EAAE,YAAY;wBACvB,OAAO;wBACP,SAAS,EAAE,kBAAkB,EAAE;wBAC/B,GAAG,EAAE,MAAM;qBACZ;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK;oBACL,MAAM,EAAE,GAAG,YAAY,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAClE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED,SAAS,SAAS,CAChB,QAAgB,EAChB,MAAc,EACd,SAAiB;QAEjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,aAAa,CACpB,IAA6B,EAC7B,MAA4B;QAE5B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,IAAI,IAAI;gBAAE,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,OAAO,CAAC,GAAqB;QACpC,uEAAuE;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,iDAAiD;QACjD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,WAAW,CAClB,MAAc,EACd,OAA2B;QAE3B,IAAI,UAAU,GAA4B,IAAI,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YAC5D,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACpE,UAAU,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,GAAG,EAA2B,EAAE,CAC/B,CAAC,GAAG,CAAC,OAAO;YACZ,GAAG,CAAC,MAAM,KAAK,MAAM;YACrB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC7C,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACjB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,GAAG,GACP,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC;YACxC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC7B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GACP,GAAG,KAAK,QAAQ;oBACd,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC;oBAC7B,CAAC,CAAC,GAAG,GAAG,QAAQ;wBACd,CAAC,CAAC,CAAC,CAAC;wBACJ,CAAC,CAAC,CAAC,CAAC;gBACV,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEnC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvB,GAAG,GAAG;gBACN,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;aAC9C,CAAC,CAAC;YACH,OAAO;YACP,UAAU,EACR,OAAO,IAAI,IAAI;gBACb,CAAC,CAAC,YAAY,CAAC;oBACX,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC;gBACJ,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAED,SAAS,YAAY,CACnB,QAAgB,EAChB,MAAc,EACd,SAAiB,EACjB,SAAiB,EACjB,eAAgC;QAEhC,IAAI,eAAe,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAEhD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;QACrC,MAAM,SAAS,GAAwB;YACrC,QAAQ;YACR,MAAM;YACN,SAAS;YACT,OAAO;YACP,SAAS;YACT,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,IAAI;SACd,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ;YACR,MAAM;YACN,SAAS;YACT,OAAO;YACP,SAAS,EAAE,kBAAkB,EAAE;YAC/B,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,YAAY,CACnB,MAAc,EACd,OAA4B;QAE5B,IAAI,OAAe,CAAC;QACpB,IAAI,YAA2B,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,mEAAmE;YACnE,oEAAoE;YACpE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACrE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAC1B,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YACpC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;aAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;oBAC5C,MAAM,IAAI,kBAAkB,EAAE,CAAC;gBACjC,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACrE,+DAA+D;YAC/D,qEAAqE;YACrE,+DAA+D;YAC/D,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;YAC/B,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACjC,CAAC;QAED,sEAAsE;QACtE,qEAAqE;QACrE,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,MAAM;YACvB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,KAAK,CAAC,SAAS,IAAI,OAAO,CAC7B,CAAC;QAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5C,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBACzB,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;oBAC/B,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBAC7B,CAAC,CAAC,SAAS,GAAG,YAAY;oBAC1B,CAAC,CAAC,SAAS,IAAI,OAAO,CACzB,CAAC;gBACF,IAAI,CAAC,eAAe;oBAAE,SAAS;YACjC,CAAC;YAED,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAEnE,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC5C,kEAAkE;gBAClE,iEAAiE;gBACjE,6DAA6D;gBAC7D,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC;qBAC5B,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBACzB,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;oBAC/B,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBAC7B,CAAC,CAAC,SAAS,IAAI,YAAY,CAC9B;qBACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC1C,MAAM,cAAc,GAAG,aAAa,CAClC,UAAU,CAAC,GAAG,CAAC,IAAI,EACnB,OAAO,CAAC,MAAM,CACf,CAAC;oBACF,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;wBACpE,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,qEAAqE;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,gCAAgC;YAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAExD,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO;YACP,UAAU,EAAE,OAAO;gBACjB,CAAC,CAAC,YAAY,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,OAAO;oBACP,YAAY;oBACZ,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK;iBAC/B,CAAC;gBACJ,CAAC,CAAC,SAAS;YACb,gBAAgB,EAAE,OAAO;gBACvB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,YAAY,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,OAAO;oBACP,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE,CAAC;iBACV,CAAC;SACP,CAAC;IACJ,CAAC;IAED,SAAS,WAAW,CAAC,WAAqB;QACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;QACJ,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,OAAO;gBAAE,SAAS;YAC1B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC1E,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtD,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;YAC9B,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,KAAK;YACpB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,SAAS,iBAAiB,CAAC,MAAc;QACvC,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,0DAA0D;QAC1D,gEAAgE;QAChE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,OAAO;gBAAE,SAAS;YAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,QAA6C,CAAC;YACvE,IACE,OAAO;gBACP,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,CAAC,OAAO,KAAK,MAAM,EAC1B,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,WAAW,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAClD,iBAAiB;QACjB,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnB,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/storage/pdpp-records/record-key.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Canonical record-key encoding, spec-core.md Section 4 "Compound key encoding".
+ *
+ * Single-field primary keys: the key is the string form of that value.
+ * Multi-field (compound) primary keys: the key is the minified JSON array of
+ * string-converted key values, in the order declared by the SourceDeclaration
+ * `primary_key`. Every component is converted to a string before encoding,
+ * even when the source value is a number, boolean, or date.
+ *
+ * Known encoding ambiguity (reviewed, not fixed — INFO, not exploitable):
+ * a single-field key whose literal string value happens to look like a
+ * minified JSON array, e.g. `'["a","b"]'`, encodes identically to the
+ * compound key `["a", "b"]`. Evaluated against how this collides in
+ * practice: `PdppRecordStore` keys every row by `(instance, stream,
+ * record_key)`, and a stream's declared `primary_key` arity is fixed at
+ * declaration time — a stream cannot be single-key for one record and
+ * compound-key for another. The ambiguous pair above can therefore only
+ * ever arise across two DIFFERENT streams (one single-key, one compound),
+ * which are different storage-key namespaces and never compared against
+ * each other. It cannot happen within one stream. It also does not widen a
+ * grant: `resources` matching is exact string `includes()`, never a prefix
+ * or substring match (`enforcement.ts`), so an aliased key string cannot be
+ * used to smuggle access to a record the grant didn't name. Not fixed here:
+ * changing the wire encoding (e.g. a type-tagged prefix) would need
+ * coordination with every existing reader of these keys (list/get/delete/
+ * blob routes here, and any client already parsing record IDs), which this
+ * lane should not do unilaterally for a risk that is bounded to data
+ * integrity within a single (currently impossible) same-stream collision.
+ */
+import type { EnvelopeKey } from "./types.js";
+export declare class RecordKeyError extends Error {
+}
+/**
+ * Encodes an envelope `key` (string or string[]) into the canonical record-key
+ * string used for storage, URLs, and `resources[]` grant entries.
+ */
+export declare function encodeRecordKey(key: EnvelopeKey): string;
+/**
+ * Computes the canonical record key from a record's `data` object and the
+ * stream's declared `primary_key` field list, independent of the envelope's
+ * `key` field. Used to validate `key` <-> `data` agreement (spec §4 "Record
+ * identity").
+ */
+export declare function computeRecordKeyFromData(data: Record<string, unknown>, primaryKeyFields: string[]): string;
+/**
+ * Validates that the envelope `key` field encodes to the same canonical
+ * string as the record's `data`, per spec §4 "Record identity": "the values
+ * of the `data` fields named by the stream's `primary_key` MUST match the
+ * values in the `key` envelope field (in order)."
+ */
+export declare function keyMatchesData(envelopeKey: EnvelopeKey, data: Record<string, unknown>, primaryKeyFields: string[]): boolean;
+//# sourceMappingURL=record-key.d.ts.map

package/dist/storage/pdpp-records/record-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-key.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/record-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAoB9C,qBAAa,cAAe,SAAQ,KAAK;CAAG;AAE5C;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CASxD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,gBAAgB,EAAE,MAAM,EAAE,GACzB,MAAM,CAkBR;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,WAAW,EACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAIT"}

package/dist/storage/pdpp-records/record-key.js

@@ -0,0 +1,97 @@
+/**
+ * Canonical record-key encoding, spec-core.md Section 4 "Compound key encoding".
+ *
+ * Single-field primary keys: the key is the string form of that value.
+ * Multi-field (compound) primary keys: the key is the minified JSON array of
+ * string-converted key values, in the order declared by the SourceDeclaration
+ * `primary_key`. Every component is converted to a string before encoding,
+ * even when the source value is a number, boolean, or date.
+ *
+ * Known encoding ambiguity (reviewed, not fixed — INFO, not exploitable):
+ * a single-field key whose literal string value happens to look like a
+ * minified JSON array, e.g. `'["a","b"]'`, encodes identically to the
+ * compound key `["a", "b"]`. Evaluated against how this collides in
+ * practice: `PdppRecordStore` keys every row by `(instance, stream,
+ * record_key)`, and a stream's declared `primary_key` arity is fixed at
+ * declaration time — a stream cannot be single-key for one record and
+ * compound-key for another. The ambiguous pair above can therefore only
+ * ever arise across two DIFFERENT streams (one single-key, one compound),
+ * which are different storage-key namespaces and never compared against
+ * each other. It cannot happen within one stream. It also does not widen a
+ * grant: `resources` matching is exact string `includes()`, never a prefix
+ * or substring match (`enforcement.ts`), so an aliased key string cannot be
+ * used to smuggle access to a record the grant didn't name. Not fixed here:
+ * changing the wire encoding (e.g. a type-tagged prefix) would need
+ * coordination with every existing reader of these keys (list/get/delete/
+ * blob routes here, and any client already parsing record IDs), which this
+ * lane should not do unilaterally for a risk that is bounded to data
+ * integrity within a single (currently impossible) same-stream collision.
+ */
+/** Converts a single primary-key field value to its canonical string form. */
+function toKeyComponentString(value) {
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "number" || typeof value === "boolean") {
+        return String(value);
+    }
+    if (value instanceof Date)
+        return value.toISOString();
+    if (value === null || value === undefined) {
+        throw new RecordKeyError("Primary key component cannot be null or undefined");
+    }
+    // Objects/arrays are not valid primary-key component types.
+    throw new RecordKeyError(`Primary key component has unsupported type: ${typeof value}`);
+}
+export class RecordKeyError extends Error {
+}
+/**
+ * Encodes an envelope `key` (string or string[]) into the canonical record-key
+ * string used for storage, URLs, and `resources[]` grant entries.
+ */
+export function encodeRecordKey(key) {
+    if (Array.isArray(key)) {
+        if (key.length === 0) {
+            throw new RecordKeyError("Compound key array must not be empty");
+        }
+        const components = key.map(toKeyComponentString);
+        return JSON.stringify(components);
+    }
+    return toKeyComponentString(key);
+}
+/**
+ * Computes the canonical record key from a record's `data` object and the
+ * stream's declared `primary_key` field list, independent of the envelope's
+ * `key` field. Used to validate `key` <-> `data` agreement (spec §4 "Record
+ * identity").
+ */
+export function computeRecordKeyFromData(data, primaryKeyFields) {
+    if (primaryKeyFields.length === 0) {
+        throw new RecordKeyError("Stream has no declared primary_key fields");
+    }
+    if (primaryKeyFields.length === 1) {
+        const [field] = primaryKeyFields;
+        if (!(field in data)) {
+            throw new RecordKeyError(`data is missing primary key field "${field}"`);
+        }
+        return toKeyComponentString(data[field]);
+    }
+    const components = primaryKeyFields.map((field) => {
+        if (!(field in data)) {
+            throw new RecordKeyError(`data is missing primary key field "${field}"`);
+        }
+        return toKeyComponentString(data[field]);
+    });
+    return JSON.stringify(components);
+}
+/**
+ * Validates that the envelope `key` field encodes to the same canonical
+ * string as the record's `data`, per spec §4 "Record identity": "the values
+ * of the `data` fields named by the stream's `primary_key` MUST match the
+ * values in the `key` envelope field (in order)."
+ */
+export function keyMatchesData(envelopeKey, data, primaryKeyFields) {
+    const fromEnvelope = encodeRecordKey(envelopeKey);
+    const fromData = computeRecordKeyFromData(data, primaryKeyFields);
+    return fromEnvelope === fromData;
+}
+//# sourceMappingURL=record-key.js.map

package/dist/storage/pdpp-records/record-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-key.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/record-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,cAAc,CACtB,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,4DAA4D;IAC5D,MAAM,IAAI,cAAc,CACtB,+CAA+C,OAAO,KAAK,EAAE,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,cAAc,CAAC,sCAAsC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA6B,EAC7B,gBAA0B;IAE1B,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,2CAA2C,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,cAAc,CAAC,sCAAsC,KAAK,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChD,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,cAAc,CAAC,sCAAsC,KAAK,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAwB,EACxB,IAA6B,EAC7B,gBAA0B;IAE1B,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClE,OAAO,YAAY,KAAK,QAAQ,CAAC;AACnC,CAAC"}

package/dist/storage/pdpp-records/stream-declaration.d.ts

@@ -0,0 +1,43 @@
+import type { StreamSemantics } from "./types.js";
+/**
+ * The minimal per-stream declaration this lane needs from spec-core.md
+ * Section 5 "Source Declaration" — NOT a full Source Declaration model (that
+ * is Collection Profile / Lane D territory, out of scope here). This lane
+ * only needs enough to validate ingest and serve §8 reads: semantics,
+ * primary key, the field used for stable list ordering / incremental sync,
+ * and which fields are schema-required (always included in a sparse
+ * projection per spec §8 "fields" parameter).
+ */
+export interface StreamDeclaration {
+    name: string;
+    semantics: StreamSemantics;
+    primaryKey: string[];
+    cursorField: string;
+    /** Fields declared as consent_time_field candidates for time_constraint enforcement. */
+    consentTimeField?: string;
+    /** Always included in a sparse `fields` projection, even if not requested. */
+    requiredFields: string[];
+    /**
+     * The stream's JSON Schema from the retained declaration (§5).
+     *
+     * §8 stream metadata carries this so a client can understand record shape
+     * without a second lookup. Optional because a deployment may boot from a
+     * private-shape declaration that has no schema to carry; the route then
+     * falls back to a field-name projection rather than fabricating one.
+     */
+    schema?: Record<string, unknown>;
+    /**
+     * The stream's declared selection capabilities (§5), e.g.
+     * `{ fields: true, resources: false }`. §8 metadata reports what the source
+     * supports so a client knows which selections are even expressible.
+     */
+    selection?: Record<string, unknown>;
+}
+export interface StreamDeclarationRegistry {
+    get(stream: string): StreamDeclaration | undefined;
+    list(): StreamDeclaration[];
+}
+export declare function createStreamDeclarationRegistry(declarations: StreamDeclaration[]): StreamDeclarationRegistry;
+/** Schema-required fields are always included, even under a sparse `fields` request. */
+export declare function withRequiredFields(requested: string[] | undefined, required: string[]): string[] | undefined;
+//# sourceMappingURL=stream-declaration.d.ts.map

package/dist/storage/pdpp-records/stream-declaration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-declaration.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/stream-declaration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC;IACnD,IAAI,IAAI,iBAAiB,EAAE,CAAC;CAC7B;AAED,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE,iBAAiB,EAAE,GAChC,yBAAyB,CAM3B;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,EAC/B,QAAQ,EAAE,MAAM,EAAE,GACjB,MAAM,EAAE,GAAG,SAAS,CAKtB"}

package/dist/storage/pdpp-records/stream-declaration.js

@@ -0,0 +1,17 @@
+export function createStreamDeclarationRegistry(declarations) {
+    const byName = new Map(declarations.map((d) => [d.name, d]));
+    return {
+        get: (stream) => byName.get(stream),
+        list: () => declarations,
+    };
+}
+/** Schema-required fields are always included, even under a sparse `fields` request. */
+export function withRequiredFields(requested, required) {
+    if (!requested)
+        return undefined;
+    const merged = new Set(requested);
+    for (const field of required)
+        merged.add(field);
+    return Array.from(merged);
+}
+//# sourceMappingURL=stream-declaration.js.map

package/dist/storage/pdpp-records/stream-declaration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-declaration.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/stream-declaration.ts"],"names":[],"mappings":"AA0CA,MAAM,UAAU,+BAA+B,CAC7C,YAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3C,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY;KACzB,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAChC,SAA+B,EAC/B,QAAkB;IAElB,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/dist/storage/pdpp-records/types.d.ts

@@ -0,0 +1,93 @@
+/**
+ * PDPP record persistence types (spec-core.md Section 4 "Record Model").
+ *
+ * This is a NEW, separate index for PDPP-shaped records. It is deliberately
+ * not the legacy `packages/core/src/storage/index/` DPP fileId/scope model —
+ * that module serves existing non-PDPP callers and is left untouched.
+ */
+export type StreamSemantics = "append_only" | "mutable_state";
+export type EnvelopeKey = string | string[];
+/** The RECORD envelope, spec §4 "The RECORD envelope". */
+export interface PdppRecordEnvelopeInput {
+    instance: string;
+    stream: string;
+    key: EnvelopeKey;
+    data: Record<string, unknown> | null;
+    emitted_at: string;
+    op?: "upsert" | "delete";
+}
+export interface PdppStoredRecord {
+    instance: string;
+    stream: string;
+    recordKey: string;
+    data: Record<string, unknown>;
+    version: number;
+    emittedAt: string;
+    deleted: false;
+}
+export interface PdppTombstoneRecord {
+    instance: string;
+    stream: string;
+    recordKey: string;
+    version: number;
+    deletedAt: string;
+    emittedAt: string;
+    deleted: true;
+}
+export type PdppRecordRow = PdppStoredRecord | PdppTombstoneRecord;
+export interface IngestRejection {
+    index: number;
+    reason: string;
+}
+export interface IngestResult {
+    accepted: number;
+    rejected: IngestRejection[];
+}
+export interface ListRecordsOptions {
+    instanceIds: string[];
+    limit: number;
+    cursor?: string;
+    order: "asc" | "desc";
+    /** undefined = no projection restriction (owner reads / unrestricted). */
+    fields?: string[];
+}
+export interface ListRecordsPage {
+    data: PdppStoredRecord[];
+    hasMore: boolean;
+    nextCursor?: string;
+}
+export interface ChangesSinceOptions {
+    instanceIds: string[];
+    /** Absent = start a new session anchored at "now". */
+    changesSince?: string;
+    /** Page cursor within an already-anchored session. */
+    cursor?: string;
+    limit: number;
+    fields?: string[];
+}
+export interface ChangesSincePage {
+    data: PdppRecordRow[];
+    hasMore: boolean;
+    nextCursor?: string;
+    /** Present only on the terminal page. */
+    nextChangesSince?: string;
+}
+export interface StreamListing {
+    stream: string;
+    recordCount: number;
+    lastUpdated: string | null;
+}
+export interface PdppBlobMeta {
+    blobId: string;
+    mimeType: string;
+    sizeBytes: number;
+    sha256: string;
+}
+export declare class CursorExpiredError extends Error {
+    constructor();
+}
+export declare class InvalidCursorError extends Error {
+}
+export declare class RecordIdentityMismatchError extends Error {
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/storage/pdpp-records/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/storage/pdpp-records/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,eAAe,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAE5C,0DAA0D;AAC1D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,KAAK,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,IAAI,CAAC;CACf;AAED,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,mBAAmB,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;;CAI5C;AAED,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,qBAAa,2BAA4B,SAAQ,KAAK;CAAG"}

package/dist/storage/pdpp-records/types.js

@@ -0,0 +1,17 @@
+/**
+ * PDPP record persistence types (spec-core.md Section 4 "Record Model").
+ *
+ * This is a NEW, separate index for PDPP-shaped records. It is deliberately
+ * not the legacy `packages/core/src/storage/index/` DPP fileId/scope model —
+ * that module serves existing non-PDPP callers and is left untouched.
+ */
+export class CursorExpiredError extends Error {
+    constructor() {
+        super("changes_since cursor has expired");
+    }
+}
+export class InvalidCursorError extends Error {
+}
+export class RecordIdentityMismatchError extends Error {
+}
+//# sourceMappingURL=types.js.map

package/dist/storage/pdpp-records/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/storage/pdpp-records/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA8FH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C;QACE,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;CAAG"}

package/dist/storage/preview.d.ts

@@ -0,0 +1,12 @@
+export interface EnvelopePreview {
+    text: string;
+    truncated: boolean;
+}
+export declare function previewEnvelopeValue(envelope: unknown, maxBytes: number, options?: {
+    nodeBudget?: number;
+}): EnvelopePreview;
+export declare function previewJsonEnvelopePrefix(jsonText: string, maxBytes: number, options?: {
+    sourceTruncated?: boolean;
+    nodeBudget?: number;
+}): EnvelopePreview;
+//# sourceMappingURL=preview.d.ts.map

package/dist/storage/preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.d.ts","sourceRoot":"","sources":["../../src/storage/preview.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACpB;AAoED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,eAAe,CAwDjB;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,eAAe,CAiDjB"}