@selvajs/local-provider 0.11.0

package/dist/data/LocalShareLinkStore.js

@@ -0,0 +1,108 @@
+import * as path from 'node:path';
+import { ProviderError, SYSTEM_CONTEXT, actorFrom, NoopEventSink } from '@selvajs/platform';
+import { paginate } from './pagination.js';
+import { readJsonFile, writeJsonFile } from './fsJson.js';
+const empty = () => ({ links: {} });
+/**
+ * Spec §7 — share-link store backed by share-links.json.
+ *
+ * `tryIncrementSolveCount` is the load-bearing race-sensitive method; in
+ * the local provider we read-modify-write under a single fs round-trip,
+ * which is acceptable at single-node scale. Postgres adapters use a true
+ * atomic UPDATE.
+ */
+export class LocalShareLinkStore {
+    definitionProvider;
+    events;
+    configFilePath;
+    static fromEnv(env) {
+        if (!env.DATA_PATH)
+            throw new Error('Missing required env var: DATA_PATH');
+        return new LocalShareLinkStore({
+            filePath: path.join(env.DATA_PATH, 'share-links.json')
+        });
+    }
+    constructor(opts) {
+        this.configFilePath = opts.filePath;
+        this.events = opts.events ?? new NoopEventSink();
+    }
+    /**
+     * Wire the definition store so token resolution can check the parent
+     * definition's `deletedAt` (Permissions.md §7 cascade contract). Mirrors
+     * Supabase, which performs the equivalent JOIN. Optional: when unset, the
+     * store falls back to the local-only revoke check; the route layer in
+     * the selva app does the parent lookup as a safety net either way.
+     */
+    setDefinitionProvider(definitions) {
+        this.definitionProvider = definitions;
+    }
+    async readAll() {
+        return readJsonFile(this.configFilePath, empty());
+    }
+    async writeAll(data) {
+        await writeJsonFile(this.configFilePath, data);
+    }
+    isLive(l) {
+        return Boolean(l && l.revokedAt == null);
+    }
+    async create(ctx, link) {
+        const all = await this.readAll();
+        if (all.links[link.id]) {
+            throw new ProviderError(`Share link '${link.id}' already exists`, 409);
+        }
+        all.links[link.id] = { ...link, revokedAt: null };
+        await this.writeAll(all);
+        await this.events.emit({
+            type: 'share_link.minted',
+            linkId: link.id,
+            definitionId: link.definitionId,
+            actorId: actorFrom(ctx)
+        });
+    }
+    async listByDefinition(_ctx, definitionId, opts) {
+        const all = await this.readAll();
+        const rows = Object.values(all.links)
+            .filter((l) => l.definitionId === definitionId && this.isLive(l))
+            .sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+        return paginate(rows, opts);
+    }
+    async getById(_ctx, id) {
+        const all = await this.readAll();
+        return all.links[id] ?? null;
+    }
+    async getByTokenHash(_ctx, tokenHash) {
+        const all = await this.readAll();
+        const found = Object.values(all.links).find((l) => l.tokenHash === tokenHash);
+        if (!this.isLive(found))
+            return null;
+        // §7: token resolution MUST NOT see links whose parent definition is
+        // soft-deleted. Supabase enforces this via JOIN; here we look up.
+        if (this.definitionProvider) {
+            const parent = await this.definitionProvider.get(SYSTEM_CONTEXT, found.definitionId);
+            if (!parent)
+                return null;
+        }
+        return found;
+    }
+    async revoke(ctx, id) {
+        const all = await this.readAll();
+        const l = all.links[id];
+        if (!l || !this.isLive(l))
+            return; // idempotent
+        l.revokedAt = new Date().toISOString();
+        await this.writeAll(all);
+        await this.events.emit({ type: 'share_link.revoked', linkId: id, actorId: actorFrom(ctx) });
+    }
+    async tryIncrementSolveCount(_ctx, id) {
+        const all = await this.readAll();
+        const l = all.links[id];
+        if (!l || !this.isLive(l))
+            return null;
+        if (l.maxSolves != null && l.solveCount >= l.maxSolves)
+            return null;
+        l.solveCount += 1;
+        await this.writeAll(all);
+        return l.solveCount;
+    }
+}
+//# sourceMappingURL=LocalShareLinkStore.js.map

package/dist/data/LocalShareLinkStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalShareLinkStore.js","sourceRoot":"","sources":["../../src/data/LocalShareLinkStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAUlC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAM1D,MAAM,KAAK,GAAG,GAAgB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAQjD;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACvB,kBAAkB,CAAoB;IAC7B,MAAM,CAAa;IACnB,cAAc,CAAS;IAExC,MAAM,CAAC,OAAO,CAAC,GAAuC;QACrD,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3E,OAAO,IAAI,mBAAmB,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;IAED,YAAY,IAAgC;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,qBAAqB,CAAC,WAA6B;QAClD,IAAI,CAAC,kBAAkB,GAAG,WAAW,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,OAAO;QACpB,OAAO,YAAY,CAAc,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAiB;QACvC,MAAM,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAEO,MAAM,CAAC,CAA+B;QAC7C,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,IAAe;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CAAC,eAAe,IAAI,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACvB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,IAAoB,EACpB,YAAoB,EACpB,IAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aAChE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,EAAU;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAoB,EAAE,SAAiB;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YACrF,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;QAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,EAAU;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,aAAa;QAChD,CAAC,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,IAAoB,EAAE,EAAU;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACpE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;QAClB,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC,UAAU,CAAC;IACrB,CAAC;CACD"}

package/dist/data/__tests__/LocalDefinitionMetaProvider.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=LocalDefinitionMetaProvider.test.d.ts.map

package/dist/data/__tests__/LocalDefinitionMetaProvider.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalDefinitionMetaProvider.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/LocalDefinitionMetaProvider.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/LocalDefinitionMetaProvider.test.js

@@ -0,0 +1,21 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { runDefinitionStoreConformance } from '@selva/platform/testing';
+import { LocalDefinitionMetaProvider } from '../LocalDefinitionMetaProvider.js';
+describe('LocalDefinitionMetaProvider', () => {
+    let tempDir;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'selva-test-'));
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    runDefinitionStoreConformance({
+        name: 'LocalDefinitionMetaProvider',
+        createStore: () => new LocalDefinitionMetaProvider(tempDir),
+        runner: { describe, it, expect }
+    });
+});
+//# sourceMappingURL=LocalDefinitionMetaProvider.test.js.map

package/dist/data/__tests__/LocalDefinitionMetaProvider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalDefinitionMetaProvider.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/LocalDefinitionMetaProvider.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAEhF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC5C,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,6BAA6B,CAAC;QAC7B,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC;QAC3D,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE;KAChC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/data/__tests__/cascade.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cascade.test.d.ts.map

package/dist/data/__tests__/cascade.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/cascade.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/cascade.test.js

@@ -0,0 +1,265 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { ALL_ORG_PERMISSIONS, ALL_PLATFORM_PERMISSIONS, SYSTEM_CONTEXT } from '@selvajs/platform';
+import { LocalOrgStore, LocalOrgStoreLoader } from '../LocalOrgStore.js';
+import { LocalProjectStore } from '../LocalProjectStore.js';
+import { LocalDefinitionStore } from '../LocalDefinitionStore.js';
+import { LocalShareLinkStore } from '../LocalShareLinkStore.js';
+import { LocalInviteStore } from '../LocalInviteStore.js';
+import { LocalComputeServerStore } from '../LocalComputeServerStore.js';
+import { LocalPlatformProjectGrantStore } from '../LocalPlatformProjectGrantStore.js';
+/**
+ * Cross-store cascade behavior. Lives outside the per-store conformance suites
+ * because the invariants involve both `IOrgStore` and `IProjectStore`.
+ */
+describe('Cross-store cascade', () => {
+    let tempDir;
+    let orgs;
+    let projects;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'selva-test-'));
+        const loader = new LocalOrgStoreLoader(tempDir);
+        const invites = new LocalInviteStore(tempDir);
+        const computeServer = new LocalComputeServerStore(path.join(tempDir, 'compute.config.json'), Buffer.alloc(32, 0x42));
+        const grants = new LocalPlatformProjectGrantStore(path.join(tempDir, 'platform-project-grants.json'));
+        orgs = new LocalOrgStore({ loader, invites, computeServer, grants });
+        projects = new LocalProjectStore({ loader, grants });
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    function ctxFor(userId) {
+        return {
+            userId,
+            platformPermissions: [...ALL_PLATFORM_PERMISSIONS],
+            orgPermissions: [...ALL_ORG_PERMISSIONS]
+        };
+    }
+    it('removeOrgMember soft-deletes the user’s project memberships in that org (§9)', async () => {
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const orgId = randomUUID();
+        const projectAId = randomUUID();
+        const projectBId = randomUUID();
+        const now = new Date().toISOString();
+        const ownerCtx = ctxFor(ownerId);
+        await orgs.createOrg(ownerCtx, {
+            id: orgId,
+            name: 'Acme',
+            slug: 'acme',
+            ownerId,
+            createdBy: ownerId,
+            updatedBy: ownerId,
+            createdAt: now,
+            updatedAt: now,
+            deletedAt: null
+        });
+        await orgs.addOrgMember(ownerCtx, {
+            orgId,
+            userId: memberId,
+            role: 'member',
+            permissions: [],
+            joinedAt: now,
+            updatedAt: now,
+            updatedBy: ownerId,
+            deletedAt: null
+        });
+        for (const id of [projectAId, projectBId]) {
+            await projects.createProject(ownerCtx, {
+                id,
+                orgId,
+                ownerId,
+                name: `Project ${id.slice(0, 4)}`,
+                slug: `p-${id.slice(0, 4)}`,
+                visibility: 'private',
+                autoJoinOnUpload: false,
+                createdBy: ownerId,
+                updatedBy: ownerId,
+                createdAt: now,
+                updatedAt: now,
+                deletedAt: null
+            });
+            await projects.addProjectMember(ownerCtx, {
+                projectId: id,
+                userId: memberId,
+                role: 'editor',
+                joinedAt: now,
+                updatedAt: now,
+                updatedBy: ownerId,
+                deletedAt: null
+            });
+        }
+        // Sanity: memberships are live before the cascade fires.
+        expect(await projects.getProjectMember(ownerCtx, projectAId, memberId)).not.toBeNull();
+        expect(await projects.getProjectMember(ownerCtx, projectBId, memberId)).not.toBeNull();
+        await orgs.removeOrgMember(ownerCtx, orgId, memberId);
+        expect(await orgs.getOrgMember(ownerCtx, orgId, memberId)).toBeNull();
+        expect(await projects.getProjectMember(ownerCtx, projectAId, memberId)).toBeNull();
+        expect(await projects.getProjectMember(ownerCtx, projectBId, memberId)).toBeNull();
+    });
+    it('removeOrgMember does not touch project memberships in other orgs', async () => {
+        const ownerAId = randomUUID();
+        const ownerBId = randomUUID();
+        const memberId = randomUUID();
+        const orgAId = randomUUID();
+        const orgBId = randomUUID();
+        const projectAId = randomUUID();
+        const projectBId = randomUUID();
+        const now = new Date().toISOString();
+        await orgs.createOrg(ctxFor(ownerAId), {
+            id: orgAId,
+            name: 'Acme',
+            slug: 'acme',
+            ownerId: ownerAId,
+            createdBy: ownerAId,
+            updatedBy: ownerAId,
+            createdAt: now,
+            updatedAt: now,
+            deletedAt: null
+        });
+        await orgs.createOrg(ctxFor(ownerBId), {
+            id: orgBId,
+            name: 'BigClient',
+            slug: 'bigclient',
+            ownerId: ownerBId,
+            createdBy: ownerBId,
+            updatedBy: ownerBId,
+            createdAt: now,
+            updatedAt: now,
+            deletedAt: null
+        });
+        for (const [orgOwner, orgId] of [
+            [ownerAId, orgAId],
+            [ownerBId, orgBId]
+        ]) {
+            await orgs.addOrgMember(ctxFor(orgOwner), {
+                orgId,
+                userId: memberId,
+                role: 'member',
+                permissions: [],
+                joinedAt: now,
+                updatedAt: now,
+                updatedBy: orgOwner,
+                deletedAt: null
+            });
+        }
+        for (const [orgOwner, orgId, projectId] of [
+            [ownerAId, orgAId, projectAId],
+            [ownerBId, orgBId, projectBId]
+        ]) {
+            await projects.createProject(ctxFor(orgOwner), {
+                id: projectId,
+                orgId,
+                ownerId: orgOwner,
+                name: `Project ${projectId.slice(0, 4)}`,
+                slug: `p-${projectId.slice(0, 4)}`,
+                visibility: 'private',
+                autoJoinOnUpload: false,
+                createdBy: orgOwner,
+                updatedBy: orgOwner,
+                createdAt: now,
+                updatedAt: now,
+                deletedAt: null
+            });
+            await projects.addProjectMember(ctxFor(orgOwner), {
+                projectId,
+                userId: memberId,
+                role: 'editor',
+                joinedAt: now,
+                updatedAt: now,
+                updatedBy: orgOwner,
+                deletedAt: null
+            });
+        }
+        // Remove from org A only.
+        await orgs.removeOrgMember(ctxFor(ownerAId), orgAId, memberId);
+        expect(await projects.getProjectMember(ctxFor(ownerAId), projectAId, memberId)).toBeNull();
+        // Org B membership and its project membership are untouched.
+        expect(await orgs.getOrgMember(ctxFor(ownerBId), orgBId, memberId)).not.toBeNull();
+        expect(await projects.getProjectMember(ctxFor(ownerBId), projectBId, memberId)).not.toBeNull();
+    });
+    it('share-link getByTokenHash returns null when parent definition is soft-deleted (§7)', async () => {
+        // §7: token resolution MUST fail closed when its parent definition is
+        // soft-deleted. Supabase enforces this via JOIN; the local store gets
+        // the same behavior by injecting a definition provider through the
+        // LocalDataProvider wiring (see LocalShareLinkStore.setDefinitionProvider).
+        const ownerId = randomUUID();
+        const orgId = randomUUID();
+        const projectId = randomUUID();
+        const definitionId = randomUUID();
+        const linkId = randomUUID();
+        const tokenHash = `hash-${randomUUID()}`;
+        const now = new Date().toISOString();
+        const ownerCtx = ctxFor(ownerId);
+        await orgs.createOrg(ownerCtx, {
+            id: orgId,
+            name: 'Acme',
+            slug: 'acme',
+            ownerId,
+            createdBy: ownerId,
+            updatedBy: ownerId,
+            createdAt: now,
+            updatedAt: now,
+            deletedAt: null
+        });
+        await projects.createProject(ownerCtx, {
+            id: projectId,
+            orgId,
+            ownerId,
+            name: 'P',
+            slug: 'p',
+            visibility: 'private',
+            autoJoinOnUpload: false,
+            createdBy: ownerId,
+            updatedBy: ownerId,
+            createdAt: now,
+            updatedAt: now,
+            deletedAt: null
+        });
+        const definitions = new LocalDefinitionStore(tempDir);
+        const shareLinks = new LocalShareLinkStore({
+            filePath: path.join(tempDir, 'share-links.json')
+        });
+        shareLinks.setDefinitionProvider(definitions);
+        const definition = {
+            guid: definitionId,
+            projectId,
+            ownerId,
+            createdBy: ownerId,
+            updatedBy: ownerId,
+            displayName: 'Def',
+            status: 'published',
+            solveCount: 0,
+            liveVersionId: null,
+            draftVersionId: null,
+            createdAt: now,
+            updatedAt: now,
+            deletedAt: null
+        };
+        await definitions.create(ownerCtx, definition);
+        const link = {
+            id: linkId,
+            definitionId,
+            channel: 'live',
+            tokenHash,
+            createdBy: ownerId,
+            createdAt: now,
+            expiresAt: null,
+            revokedAt: null,
+            allowSolve: true,
+            maxSolves: null,
+            solveCount: 0
+        };
+        await shareLinks.create(SYSTEM_CONTEXT, link);
+        // Sanity: token resolves while parent is live.
+        expect(await shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash)).not.toBeNull();
+        // Soft-delete the parent definition.
+        await definitions.delete(ownerCtx, definitionId);
+        // Cascade contract: token resolution must now fail closed.
+        expect(await shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash)).toBeNull();
+    });
+});
+//# sourceMappingURL=cascade.test.js.map

package/dist/data/__tests__/cascade.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/cascade.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,mBAAmB,EACnB,wBAAwB,EACxB,cAAc,EAId,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAEtF;;;GAGG;AACH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,IAAI,OAAe,CAAC;IACpB,IAAI,IAAmB,CAAC;IACxB,IAAI,QAA2B,CAAC;IAEhC,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,EACzC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CACtB,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,8BAA8B,CAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAClD,CAAC;QACF,IAAI,GAAG,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,QAAQ,GAAG,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,SAAS,MAAM,CAAC,MAAc;QAC7B,OAAO;YACN,MAAM;YACN,mBAAmB,EAAE,CAAC,GAAG,wBAAwB,CAAC;YAClD,cAAc,EAAE,CAAC,GAAG,mBAAmB,CAAC;SACxC,CAAC;IACH,CAAC;IAED,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;YAC9B,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO;YACP,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;YACjC,KAAK;YACL,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,KAAK,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACtC,EAAE;gBACF,KAAK;gBACL,OAAO;gBACP,IAAI,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACjC,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBAC3B,UAAU,EAAE,SAAS;gBACrB,gBAAgB,EAAE,KAAK;gBACvB,SAAS,EAAE,OAAO;gBAClB,SAAS,EAAE,OAAO;gBAClB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE;gBACzC,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,GAAG;gBACb,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,OAAO;gBAClB,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,MAAM,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACvF,MAAM,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAEvF,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEtD,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtE,MAAM,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnF,MAAM,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACtC,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACtC,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI;YAC/B,CAAC,QAAQ,EAAE,MAAM,CAAC;YAClB,CAAC,QAAQ,EAAE,MAAM,CAAC;SAClB,EAAE,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;gBACzC,KAAK;gBACL,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,EAAE;gBACf,QAAQ,EAAE,GAAG;gBACb,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI;YAC1C,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;YAC9B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;SAC9B,EAAE,CAAC;YACH,MAAM,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;gBAC9C,EAAE,EAAE,SAAS;gBACb,KAAK;gBACL,OAAO,EAAE,QAAQ;gBACjB,IAAI,EAAE,WAAW,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACxC,IAAI,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBAClC,UAAU,EAAE,SAAS;gBACrB,gBAAgB,EAAE,KAAK;gBACvB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;gBACjD,SAAS;gBACT,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,GAAG;gBACb,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3F,6DAA6D;QAC7D,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnF,MAAM,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QACnG,sEAAsE;QACtE,sEAAsE;QACtE,mEAAmE;QACnE,4EAA4E;QAC5E,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,UAAU,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;YAC9B,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO;YACP,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE;YACtC,EAAE,EAAE,SAAS;YACb,KAAK;YACL,OAAO;YACP,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,KAAK;YACvB,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,UAAU,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAqB;YACpC,IAAI,EAAE,YAAY;YAClB,SAAS;YACT,OAAO;YACP,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;SACf,CAAC;QACF,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE/C,MAAM,IAAI,GAAc;YACvB,EAAE,EAAE,MAAM;YACV,YAAY;YACZ,OAAO,EAAE,MAAM;YACf,SAAS;YACT,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,CAAC;SACb,CAAC;QACF,MAAM,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE9C,+CAA+C;QAC/C,MAAM,CAAC,MAAM,UAAU,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAElF,qCAAqC;QACrC,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEjD,2DAA2D;QAC3D,MAAM,CAAC,MAAM,UAAU,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/E,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/data/__tests__/compute-server-conformance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=compute-server-conformance.test.d.ts.map

package/dist/data/__tests__/compute-server-conformance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-server-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/compute-server-conformance.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/compute-server-conformance.test.js

@@ -0,0 +1,21 @@
+import { describe, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { runComputeServerStoreConformance } from '@selvajs/platform/testing';
+import { LocalComputeServerStore } from '../LocalComputeServerStore.js';
+const TEST_SECRET_KEY = Buffer.alloc(32, 0x42);
+describe('LocalComputeServerStore', () => {
+    let tempDir;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'selva-compute-'));
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    runComputeServerStoreConformance({
+        name: 'LocalComputeServerStore',
+        createStore: () => new LocalComputeServerStore(path.join(tempDir, 'compute.config.json'), TEST_SECRET_KEY)
+    });
+});
+//# sourceMappingURL=compute-server-conformance.test.js.map

package/dist/data/__tests__/compute-server-conformance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-server-conformance.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/compute-server-conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAExE,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAE/C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACxC,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,gCAAgC,CAAC;QAChC,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,GAAG,EAAE,CACjB,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAAE,eAAe,CAAC;KACxF,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/data/__tests__/compute-server-encryption.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=compute-server-encryption.test.d.ts.map

package/dist/data/__tests__/compute-server-encryption.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-server-encryption.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/compute-server-encryption.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/compute-server-encryption.test.js

@@ -0,0 +1,131 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { SYSTEM_CONTEXT } from '@selvajs/platform';
+import { LocalComputeServerStore } from '../LocalComputeServerStore.js';
+const TEST_SECRET_KEY = Buffer.alloc(32, 0x42);
+const OTHER_KEY = Buffer.alloc(32, 0x99);
+function makePlatformServer(overrides = {}) {
+    return {
+        id: overrides.id ?? 'a1',
+        scope: 'platform',
+        sharedWith: overrides.sharedWith ?? 'all',
+        label: overrides.label ?? 'Test',
+        serverUrl: overrides.serverUrl ?? 'http://localhost:5000',
+        apiKey: overrides.apiKey,
+        timeoutMs: overrides.timeoutMs,
+        retryCount: overrides.retryCount
+    };
+}
+describe('LocalComputeServerStore — apiKey encryption at rest', () => {
+    let tempDir;
+    let configPath;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'selva-compute-enc-'));
+        configPath = path.join(tempDir, 'compute.config.json');
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    it('round-trips apiKey plaintext through the store', async () => {
+        const store = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        await store.savePlatformServers(SYSTEM_CONTEXT, [makePlatformServer({ apiKey: 'super-secret-value' })], 'a1');
+        const got = await store.getConfig(SYSTEM_CONTEXT);
+        expect(got.servers[0].apiKey).toBe('super-secret-value');
+    });
+    it('does not write the plaintext apiKey to disk', async () => {
+        const store = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        const plaintext = 'plaintext-must-not-appear-on-disk';
+        await store.savePlatformServers(SYSTEM_CONTEXT, [makePlatformServer({ apiKey: plaintext })], 'a1');
+        const onDisk = await fs.readFile(configPath, 'utf-8');
+        expect(onDisk).not.toContain(plaintext);
+        expect(onDisk).toContain('enc:v1:');
+    });
+    it('getConfig with the wrong key returns the server with apiKey omitted (does not throw)', async () => {
+        // Per-row tolerance: a key mismatch on `getConfig` must not blank out
+        // the entire compute-config response, because every page that reads
+        // it (e.g. /projects) would otherwise 500. Strict detection is the
+        // job of `verifySecrets` at boot.
+        const writer = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        await writer.savePlatformServers(SYSTEM_CONTEXT, [makePlatformServer({ apiKey: 'value' })], 'a1');
+        const reader = new LocalComputeServerStore(configPath, OTHER_KEY);
+        const got = await reader.getConfig(SYSTEM_CONTEXT);
+        expect(got.servers).toHaveLength(1);
+        expect(got.servers[0].apiKey).toBeUndefined();
+    });
+    it('verifySecrets reports key_mismatch when the at-rest key has rotated', async () => {
+        const writer = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        await writer.savePlatformServers(SYSTEM_CONTEXT, [makePlatformServer({ id: 'a1', label: 'Prod', apiKey: 'value' })], 'a1');
+        const reader = new LocalComputeServerStore(configPath, OTHER_KEY);
+        const report = await reader.verifySecrets();
+        expect(report.ok).toBe(false);
+        expect(report.plaintextFound).toBe(false);
+        expect(report.failures).toHaveLength(1);
+        expect(report.failures[0]).toMatchObject({
+            serverId: 'a1',
+            serverLabel: 'Prod',
+            reason: 'key_mismatch'
+        });
+    });
+    it('verifySecrets reports plaintext_on_disk for hand-edited config', async () => {
+        await fs.mkdir(path.dirname(configPath), { recursive: true });
+        await fs.writeFile(configPath, JSON.stringify({
+            servers: [
+                {
+                    id: 'a1',
+                    scope: 'platform',
+                    sharedWith: 'all',
+                    label: 'Legacy',
+                    serverUrl: 'http://localhost:5000',
+                    apiKey: 'plaintext-leftover'
+                }
+            ]
+        }), 'utf-8');
+        const store = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        const report = await store.verifySecrets();
+        expect(report.ok).toBe(false);
+        expect(report.plaintextFound).toBe(true);
+        expect(report.failures[0]).toMatchObject({
+            serverId: 'a1',
+            reason: 'plaintext_on_disk'
+        });
+    });
+    it('verifySecrets returns ok when every encrypted apiKey decrypts', async () => {
+        const store = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        await store.savePlatformServers(SYSTEM_CONTEXT, [
+            makePlatformServer({ id: 'a1', apiKey: 'one' }),
+            makePlatformServer({ id: 'a2', apiKey: 'two' }),
+            makePlatformServer({ id: 'a3' }) // no apiKey — ignored
+        ], 'a1');
+        const report = await store.verifySecrets();
+        expect(report.ok).toBe(true);
+        expect(report.failures).toEqual([]);
+        expect(report.plaintextFound).toBe(false);
+    });
+    it('refuses to read a legacy plaintext apiKey from disk', async () => {
+        // Simulate a hand-edited or legacy file with a plaintext apiKey.
+        await fs.mkdir(path.dirname(configPath), { recursive: true });
+        await fs.writeFile(configPath, JSON.stringify({
+            servers: [
+                {
+                    id: 'a1',
+                    scope: 'platform',
+                    sharedWith: 'all',
+                    label: 'Legacy',
+                    serverUrl: 'http://localhost:5000',
+                    apiKey: 'plaintext-leftover'
+                }
+            ]
+        }), 'utf-8');
+        const store = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        await expect(store.getConfig(SYSTEM_CONTEXT)).rejects.toThrow(/unencrypted apiKey/);
+    });
+    it('preserves servers with no apiKey', async () => {
+        const store = new LocalComputeServerStore(configPath, TEST_SECRET_KEY);
+        await store.savePlatformServers(SYSTEM_CONTEXT, [makePlatformServer({ label: 'No Key' })], 'a1');
+        const got = await store.getConfig(SYSTEM_CONTEXT);
+        expect(got.servers[0].apiKey).toBeUndefined();
+    });
+});
+//# sourceMappingURL=compute-server-encryption.test.js.map

package/dist/data/__tests__/compute-server-encryption.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-server-encryption.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/compute-server-encryption.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,cAAc,EAA8B,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAExE,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAEzC,SAAS,kBAAkB,CAC1B,YAA2D,EAAE;IAE7D,OAAO;QACN,EAAE,EAAE,SAAS,CAAC,EAAE,IAAI,IAAI;QACxB,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,KAAK;QACzC,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,MAAM;QAChC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,uBAAuB;QACzD,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;KAChC,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACpE,IAAI,OAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IAEvB,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACzE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC,mBAAmB,CAC9B,cAAc,EACd,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,EACtD,IAAI,CACJ,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,mCAAmC,CAAC;QACtD,MAAM,KAAK,CAAC,mBAAmB,CAC9B,cAAc,EACd,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,EAC3C,IAAI,CACJ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACrG,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,kCAAkC;QAClC,MAAM,MAAM,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACxE,MAAM,MAAM,CAAC,mBAAmB,CAC/B,cAAc,EACd,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EACzC,IAAI,CACJ,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACxE,MAAM,MAAM,CAAC,mBAAmB,CAC/B,cAAc,EACd,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAClE,IAAI,CACJ,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACxC,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,cAAc;SACtB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CACjB,UAAU,EACV,IAAI,CAAC,SAAS,CAAC;YACd,OAAO,EAAE;gBACR;oBACC,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,UAAU;oBACjB,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,QAAQ;oBACf,SAAS,EAAE,uBAAuB;oBAClC,MAAM,EAAE,oBAAoB;iBAC5B;aACD;SACD,CAAC,EACF,OAAO,CACP,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACxC,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,mBAAmB;SAC3B,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC,mBAAmB,CAC9B,cAAc,EACd;YACC,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC/C,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC/C,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,sBAAsB;SACvD,EACD,IAAI,CACJ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,iEAAiE;QACjE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CACjB,UAAU,EACV,IAAI,CAAC,SAAS,CAAC;YACd,OAAO,EAAE;gBACR;oBACC,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,UAAU;oBACjB,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,QAAQ;oBACf,SAAS,EAAE,uBAAuB;oBAClC,MAAM,EAAE,oBAAoB;iBAC5B;aACD;SACD,CAAC,EACF,OAAO,CACP,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC,mBAAmB,CAC9B,cAAc,EACd,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EACzC,IAAI,CACJ,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/data/__tests__/definition-conformance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=definition-conformance.test.d.ts.map

package/dist/data/__tests__/definition-conformance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/definition-conformance.test.ts"],"names":[],"mappings":""}