@selvajs/supabase-provider 0.14.4-beta.0 → 0.15.0-beta.2

package/dist/data/__tests__/compute-server-encryption.test.js

@@ -1,143 +0,0 @@
-/**
- * CI-runnable (no live stack) unit tests for at-rest encryption of
- * `compute_servers.api_key`. Uses a minimal fake of the Supabase query builder
- * that records `insert` payloads and serves canned `select` rows, so we can
- * assert the exact bytes that would reach the DB without a real Postgres.
- *
- * The security property under test: a plaintext apiKey handed to the store is
- * NEVER written verbatim — the DB only ever sees an `enc:v1:` envelope — and it
- * round-trips back to plaintext on read.
- */
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { randomBytes } from 'node:crypto';
-import { isEncryptedSecret, decryptSecret } from '@selvajs/platform/computeServer';
-import { SupabaseComputeServerStore } from '../SupabaseComputeServerStore.js';
-const SYSTEM_CTX = { userId: '', system: true };
-const KEY = randomBytes(32);
-/**
- * Records every `insert` payload and returns canned rows for each table's
- * `select`. Only the fragments the store actually chains are implemented; the
- * builder is thenable so `await client.from(...).select(...)` resolves.
- */
-function fakeBundle(selectRows = {}) {
-    const inserted = {};
-    function builder(table) {
-        const result = { data: selectRows[table] ?? [], error: null };
-        const chain = {
-            select: () => ({
-                ...chain,
-                eq: () => ({ ...chain, maybeSingle: async () => ({ data: null, error: null }) }),
-                then: (resolve) => resolve(result)
-            }),
-            insert: (rows) => {
-                inserted[table] = (inserted[table] ?? []).concat(rows);
-                return { error: null };
-            },
-            delete: () => ({ eq: () => ({ eq: () => ({ error: null }), error: null }) }),
-            update: () => ({ eq: () => ({ error: null }) }),
-            upsert: () => ({ error: null })
-        };
-        return chain;
-    }
-    const client = { from: (t) => builder(t) };
-    const bundle = {
-        serviceClient: client,
-        forRequest: () => client
-    };
-    return { bundle, inserted };
-}
-describe('SupabaseComputeServerStore — apiKey encryption at rest', () => {
-    beforeEach(() => vi.restoreAllMocks());
-    it('encrypts apiKey before insert — DB never sees plaintext', async () => {
-        const { bundle, inserted } = fakeBundle();
-        const store = new SupabaseComputeServerStore(bundle, KEY);
-        await store.savePlatformServers(SYSTEM_CTX, [
-            {
-                id: 's1',
-                label: 'prod',
-                serverUrl: 'https://compute.example.com',
-                apiKey: 'super-secret-key',
-                scope: 'platform',
-                sharedWith: 'all'
-            }
-        ], 's1');
-        const rows = inserted['compute_servers'];
-        expect(rows).toHaveLength(1);
-        expect(rows[0].api_key).not.toBe('super-secret-key');
-        expect(isEncryptedSecret(rows[0].api_key)).toBe(true);
-        // And it's genuinely our plaintext under the envelope.
-        expect(decryptSecret(rows[0].api_key, KEY)).toBe('super-secret-key');
-    });
-    it('decrypts apiKey on read — callers see plaintext', async () => {
-        // Seed the "DB" with an already-encrypted row.
-        const { encryptSecret } = await import('@selvajs/platform/computeServer');
-        const envelope = encryptSecret('round-trip-key', KEY);
-        const { bundle } = fakeBundle({
-            compute_servers: [
-                {
-                    id: 's1',
-                    scope: 'platform',
-                    owner_org_id: null,
-                    shared_with_all: true,
-                    label: 'prod',
-                    server_url: 'https://compute.example.com',
-                    api_key: envelope,
-                    timeout_ms: null,
-                    retry_count: null
-                }
-            ]
-        });
-        const store = new SupabaseComputeServerStore(bundle, KEY);
-        const config = await store.getConfig(SYSTEM_CTX);
-        expect(config.servers).toHaveLength(1);
-        expect(config.servers[0].apiKey).toBe('round-trip-key');
-    });
-    it('throws rather than persist plaintext when no key is configured', async () => {
-        const { bundle } = fakeBundle();
-        const store = new SupabaseComputeServerStore(bundle); // no key
-        await expect(store.savePlatformServers(SYSTEM_CTX, [
-            {
-                id: 's1',
-                label: 'prod',
-                serverUrl: 'https://compute.example.com',
-                apiKey: 'secret',
-                scope: 'platform',
-                sharedWith: 'all'
-            }
-        ], 's1')).rejects.toThrow(/SELVA_AT_REST_KEY/);
-    });
-    it('verifySecrets flags a plaintext row', async () => {
-        const { bundle } = fakeBundle({
-            compute_servers: [{ id: 's1', label: 'legacy', api_key: 'raw-plaintext' }]
-        });
-        const store = new SupabaseComputeServerStore(bundle, KEY);
-        const report = await store.verifySecrets();
-        expect(report.ok).toBe(false);
-        expect(report.plaintextFound).toBe(true);
-        expect(report.failures).toEqual([
-            { serverId: 's1', serverLabel: 'legacy', reason: 'plaintext_on_disk' }
-        ]);
-    });
-    it('verifySecrets reports key_mismatch when the at-rest key rotated', async () => {
-        const { encryptSecret } = await import('@selvajs/platform/computeServer');
-        const envelope = encryptSecret('secret', randomBytes(32)); // different key
-        const { bundle } = fakeBundle({
-            compute_servers: [{ id: 's1', label: 'prod', api_key: envelope }]
-        });
-        const store = new SupabaseComputeServerStore(bundle, KEY);
-        const report = await store.verifySecrets();
-        expect(report.ok).toBe(false);
-        expect(report.plaintextFound).toBe(false);
-        expect(report.failures[0]).toMatchObject({ serverId: 's1', reason: 'key_mismatch' });
-    });
-    it('verifySecrets returns ok when every apiKey decrypts', async () => {
-        const { encryptSecret } = await import('@selvajs/platform/computeServer');
-        const { bundle } = fakeBundle({
-            compute_servers: [{ id: 's1', label: 'prod', api_key: encryptSecret('k', KEY) }]
-        });
-        const store = new SupabaseComputeServerStore(bundle, KEY);
-        const report = await store.verifySecrets();
-        expect(report).toEqual({ ok: true, failures: [], plaintextFound: false });
-    });
-});
-//# sourceMappingURL=compute-server-encryption.test.js.map

package/dist/data/__tests__/compute-server-encryption.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"compute-server-encryption.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/compute-server-encryption.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAG9E,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAA+B,CAAC;AAC7E,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;AAE5B;;;;GAIG;AACH,SAAS,UAAU,CAAC,aAAwC,EAAE;IAC7D,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAE/C,SAAS,OAAO,CAAC,KAAa;QAC7B,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9D,MAAM,KAAK,GAA4B;YACtC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACd,GAAG,KAAK;gBACR,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAChF,IAAI,EAAE,CAAC,OAAgC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;aAC3D,CAAC;YACF,MAAM,EAAE,CAAC,IAAa,EAAE,EAAE;gBACzB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAiB,CAAC,CAAC;gBACpE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG;QACd,aAAa,EAAE,MAAM;QACrB,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM;KACG,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACvE,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;IAEvC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,KAAK,CAAC,mBAAmB,CAC9B,UAAU,EACV;YACC;gBACC,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,6BAA6B;gBACxC,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,UAAU;gBACjB,UAAU,EAAE,KAAK;aACjB;SACD,EACD,IAAI,CACJ,CAAC;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,iBAAiB,CAA+B,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,uDAAuD;QACvD,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAChE,+CAA+C;QAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC7B,eAAe,EAAE;gBAChB;oBACC,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,UAAU;oBACjB,YAAY,EAAE,IAAI;oBAClB,eAAe,EAAE,IAAI;oBACrB,KAAK,EAAE,MAAM;oBACb,UAAU,EAAE,6BAA6B;oBACzC,OAAO,EAAE,QAAQ;oBACjB,UAAU,EAAE,IAAI;oBAChB,WAAW,EAAE,IAAI;iBACjB;aACD;SACD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAE/D,MAAM,MAAM,CACX,KAAK,CAAC,mBAAmB,CACxB,UAAU,EACV;YACC;gBACC,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,6BAA6B;gBACxC,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,UAAU;gBACjB,UAAU,EAAE,KAAK;aACjB;SACD,EACD,IAAI,CACJ,CACD,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC7B,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;SAC1E,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YAC/B,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;SACtE,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB;QAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC7B,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAC7B,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/data/__tests__/definition-conformance.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=definition-conformance.test.d.ts.map

package/dist/data/__tests__/definition-conformance.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"definition-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/definition-conformance.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/definition-conformance.test.js

@@ -1,85 +0,0 @@
-import { describe, beforeEach, it } from 'vitest';
-import { runDefinitionStoreConformance } from '@selvajs/platform/testing';
-import { DEFAULT_ORG_PERMISSIONS } from '@selvajs/platform';
-import { SupabaseDefinitionStore } from '../SupabaseDefinitionStore.js';
-import { readEnv, resetAllData, seedUser } from './test-helpers.js';
-const envCtx = readEnv();
-if (!envCtx) {
-    describe.skip('SupabaseDefinitionStore (skipped: no live stack)', () => {
-        it('populate packages/providers/supabase/.env.test with Supabase creds to run these tests', () => { });
-    });
-}
-else {
-    describe('SupabaseDefinitionStore', () => {
-        beforeEach(async () => {
-            await resetAllData(envCtx);
-        });
-        runDefinitionStoreConformance({
-            name: 'SupabaseDefinitionStore',
-            createStore: () => new SupabaseDefinitionStore(envCtx.bundle),
-            createScope: async () => {
-                // Seed: 1 owner + 1 secondary user + 1 org + 2 projects. Definitions
-                // created in the suite FK to one of those two projects.
-                const { userId: ownerId, sessionToken: ownerSessionToken } = await seedUser(envCtx, '');
-                const { userId: secondaryUserId, sessionToken: secondaryUserSessionToken } = await seedUser(envCtx, '');
-                const orgId = crypto.randomUUID();
-                const projectId = crypto.randomUUID();
-                const secondaryProjectId = crypto.randomUUID();
-                const now = new Date().toISOString();
-                const admin = envCtx.adminClient;
-                const { error: orgError } = await admin.from('orgs').insert({
-                    id: orgId,
-                    name: 'Definition Test Org',
-                    slug: `def-test-${orgId.slice(0, 8)}`,
-                    owner_id: ownerId,
-                    created_at: now,
-                    updated_at: now
-                });
-                if (orgError)
-                    throw orgError;
-                const { error: memberError } = await admin.from('org_members').insert({
-                    org_id: orgId,
-                    user_id: ownerId,
-                    role: 'owner',
-                    permissions: [...DEFAULT_ORG_PERMISSIONS.owner],
-                    joined_at: now
-                });
-                if (memberError)
-                    throw memberError;
-                const { error: p1Error } = await admin.from('projects').insert([
-                    {
-                        id: projectId,
-                        org_id: orgId,
-                        name: 'Project A',
-                        slug: `proj-a-${projectId.slice(0, 8)}`,
-                        visibility: 'public',
-                        owner_id: ownerId,
-                        created_at: now,
-                        updated_at: now
-                    },
-                    {
-                        id: secondaryProjectId,
-                        org_id: orgId,
-                        name: 'Project B',
-                        slug: `proj-b-${secondaryProjectId.slice(0, 8)}`,
-                        visibility: 'public',
-                        owner_id: ownerId,
-                        created_at: now,
-                        updated_at: now
-                    }
-                ]);
-                if (p1Error)
-                    throw p1Error;
-                return {
-                    ownerId,
-                    ownerSessionToken,
-                    projectId,
-                    secondaryProjectId,
-                    secondaryUserId,
-                    secondaryUserSessionToken
-                };
-            }
-        });
-    });
-}
-//# sourceMappingURL=definition-conformance.test.js.map

package/dist/data/__tests__/definition-conformance.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"definition-conformance.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/definition-conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;AAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QACtE,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACJ,CAAC;KAAM,CAAC;IACP,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACxC,UAAU,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,6BAA6B,CAAC;YAC7B,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7D,WAAW,EAAE,KAAK,IAAI,EAAE;gBACvB,qEAAqE;gBACrE,wDAAwD;gBACxD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACxF,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,yBAAyB,EAAE,GAAG,MAAM,QAAQ,CAC1F,MAAM,EACN,EAAE,CACF,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;gBAEjC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;oBAC3D,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,qBAAqB;oBAC3B,IAAI,EAAE,YAAY,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBACrC,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;iBACf,CAAC,CAAC;gBACH,IAAI,QAAQ;oBAAE,MAAM,QAAQ,CAAC;gBAC7B,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACrE,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC;oBAC/C,SAAS,EAAE,GAAG;iBACd,CAAC,CAAC;gBACH,IAAI,WAAW;oBAAE,MAAM,WAAW,CAAC;gBAEnC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;oBAC9D;wBACC,EAAE,EAAE,SAAS;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,WAAW;wBACjB,IAAI,EAAE,UAAU,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;wBACvC,UAAU,EAAE,QAAQ;wBACpB,QAAQ,EAAE,OAAO;wBACjB,UAAU,EAAE,GAAG;wBACf,UAAU,EAAE,GAAG;qBACf;oBACD;wBACC,EAAE,EAAE,kBAAkB;wBACtB,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,WAAW;wBACjB,IAAI,EAAE,UAAU,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;wBAChD,UAAU,EAAE,QAAQ;wBACpB,QAAQ,EAAE,OAAO;wBACjB,UAAU,EAAE,GAAG;wBACf,UAAU,EAAE,GAAG;qBACf;iBACD,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC;gBAE3B,OAAO;oBACN,OAAO;oBACP,iBAAiB;oBACjB,SAAS;oBACT,kBAAkB;oBAClB,eAAe;oBACf,yBAAyB;iBACzB,CAAC;YACH,CAAC;SACD,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/data/__tests__/event-sink-conformance.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=event-sink-conformance.test.d.ts.map

package/dist/data/__tests__/event-sink-conformance.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"event-sink-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/event-sink-conformance.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/event-sink-conformance.test.js

@@ -1,27 +0,0 @@
-import { describe, beforeEach, it } from 'vitest';
-import { runEventSinkConformance } from '@selvajs/platform/testing';
-import { SupabaseDataProvider } from '../SupabaseDataProvider.js';
-import { readEnv, resetAllData, seedUser } from './test-helpers.js';
-const envCtx = readEnv();
-if (!envCtx) {
-    describe.skip('SupabaseDataProvider event-sink (skipped: no live stack)', () => {
-        it('populate packages/providers/supabase/.env.test with Supabase creds to run these tests', () => { });
-    });
-}
-else {
-    describe('SupabaseDataProvider event-sink', () => {
-        beforeEach(async () => {
-            await resetAllData(envCtx);
-        });
-        runEventSinkConformance({
-            name: 'SupabaseDataProvider',
-            createProvider: (sink) => SupabaseDataProvider.create({
-                supabaseUrl: envCtx.url,
-                anonKey: envCtx.anonKey,
-                serviceRoleKey: envCtx.serviceRoleKey
-            }, sink),
-            createActorId: () => seedUser(envCtx, '')
-        });
-    });
-}
-//# sourceMappingURL=event-sink-conformance.test.js.map

package/dist/data/__tests__/event-sink-conformance.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"event-sink-conformance.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/event-sink-conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAA2B,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;AAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAC9E,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACJ,CAAC;KAAM,CAAC;IACP,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAChD,UAAU,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,uBAAuB,CAAC;YACvB,IAAI,EAAE,sBAAsB;YAC5B,cAAc,EAAE,CAAC,IAAwB,EAAE,EAAE,CAC5C,oBAAoB,CAAC,MAAM,CAC1B;gBACC,WAAW,EAAE,MAAM,CAAC,GAAG;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;aACrC,EACD,IAAI,CACJ;YACF,aAAa,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;SACzC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/data/__tests__/invite-conformance.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=invite-conformance.test.d.ts.map

package/dist/data/__tests__/invite-conformance.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"invite-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/invite-conformance.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/invite-conformance.test.js

@@ -1,45 +0,0 @@
-import { describe, beforeEach, it } from 'vitest';
-import { runInviteStoreConformance } from '@selvajs/platform/testing';
-import { DEFAULT_ORG_PERMISSIONS } from '@selvajs/platform';
-import { SupabaseInviteStore } from '../SupabaseInviteStore.js';
-import { readEnv, resetAllData, seedUser } from './test-helpers.js';
-const envCtx = readEnv();
-if (!envCtx) {
-    describe.skip('SupabaseInviteStore (skipped: no live stack)', () => {
-        it('populate packages/providers/supabase/.env.test with Supabase creds to run these tests', () => { });
-    });
-}
-else {
-    describe('SupabaseInviteStore', () => {
-        beforeEach(async () => {
-            await resetAllData(envCtx);
-        });
-        runInviteStoreConformance({
-            name: 'SupabaseInviteStore',
-            createStore: () => new SupabaseInviteStore(envCtx.bundle),
-            createScope: async () => {
-                const { userId: adminId, sessionToken: adminSessionToken } = await seedUser(envCtx, '');
-                const orgId = crypto.randomUUID();
-                const now = new Date().toISOString();
-                await envCtx.adminClient.from('orgs').insert({
-                    id: orgId,
-                    name: 'Invite Test Org',
-                    slug: `invite-test-${orgId.slice(0, 8)}`,
-                    owner_id: adminId,
-                    created_at: now,
-                    updated_at: now
-                });
-                await envCtx.adminClient.from('org_members').insert({
-                    org_id: orgId,
-                    user_id: adminId,
-                    role: 'owner',
-                    permissions: [...DEFAULT_ORG_PERMISSIONS.owner],
-                    joined_at: now
-                });
-                return { adminId, adminSessionToken, orgId };
-            },
-            seedUser: (id) => seedUser(envCtx, id)
-        });
-    });
-}
-//# sourceMappingURL=invite-conformance.test.js.map

package/dist/data/__tests__/invite-conformance.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invite-conformance.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/invite-conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;AAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QAClE,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACJ,CAAC;KAAM,CAAC;IACP,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACpC,UAAU,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,yBAAyB,CAAC;YACzB,IAAI,EAAE,qBAAqB;YAC3B,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC;YACzD,WAAW,EAAE,KAAK,IAAI,EAAE;gBACvB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACxF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;oBAC5C,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,eAAe,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBACxC,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;iBACf,CAAC,CAAC;gBACH,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACnD,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC;oBAC/C,SAAS,EAAE,GAAG;iBACd,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;YAC9C,CAAC;YACD,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;SACtC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/data/__tests__/org-conformance.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=org-conformance.test.d.ts.map

package/dist/data/__tests__/org-conformance.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/org-conformance.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/org-conformance.test.js

@@ -1,29 +0,0 @@
-import { describe, beforeEach, it } from 'vitest';
-import { runOrgStoreConformance } from '@selvajs/platform/testing';
-import { SupabaseOrgStore } from '../SupabaseOrgStore.js';
-import { SupabaseInviteStore } from '../SupabaseInviteStore.js';
-import { SupabaseComputeServerStore } from '../SupabaseComputeServerStore.js';
-import { readEnv, resetAllData, seedUser } from './test-helpers.js';
-const envCtx = readEnv();
-if (!envCtx) {
-    describe.skip('SupabaseOrgStore (skipped: no live stack)', () => {
-        it('populate packages/providers/supabase/.env.test with Supabase creds to run these tests', () => { });
-    });
-}
-else {
-    describe('SupabaseOrgStore', () => {
-        beforeEach(async () => {
-            await resetAllData(envCtx);
-        });
-        runOrgStoreConformance({
-            name: 'SupabaseOrgStore',
-            createStore: () => new SupabaseOrgStore(envCtx.bundle),
-            seedUser: (id) => seedUser(envCtx, id),
-            createCompanionStores: () => ({
-                invites: new SupabaseInviteStore(envCtx.bundle),
-                computeServer: new SupabaseComputeServerStore(envCtx.bundle)
-            })
-        });
-    });
-}
-//# sourceMappingURL=org-conformance.test.js.map

package/dist/data/__tests__/org-conformance.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-conformance.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/org-conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;AAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QAC/D,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACJ,CAAC;KAAM,CAAC;IACP,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QACjC,UAAU,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,sBAAsB,CAAC;YACtB,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;YACtD,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC7B,OAAO,EAAE,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC/C,aAAa,EAAE,IAAI,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC;aAC5D,CAAC;SACF,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/data/__tests__/project-conformance.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=project-conformance.test.d.ts.map

package/dist/data/__tests__/project-conformance.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/project-conformance.test.ts"],"names":[],"mappings":""}

package/dist/data/__tests__/project-conformance.test.js

@@ -1,57 +0,0 @@
-import { describe, beforeEach, it } from 'vitest';
-import { runProjectStoreConformance } from '@selvajs/platform/testing';
-import { DEFAULT_ORG_PERMISSIONS } from '@selvajs/platform';
-import { SupabaseProjectStore } from '../SupabaseProjectStore.js';
-import { readEnv, resetAllData, seedUser } from './test-helpers.js';
-const envCtx = readEnv();
-if (!envCtx) {
-    describe.skip('SupabaseProjectStore (skipped: no live stack)', () => {
-        it('populate packages/providers/supabase/.env.test with Supabase creds to run these tests', () => { });
-    });
-}
-else {
-    describe('SupabaseProjectStore', () => {
-        beforeEach(async () => {
-            await resetAllData(envCtx);
-        });
-        runProjectStoreConformance({
-            name: 'SupabaseProjectStore',
-            createStore: async () => {
-                // Seed an owner + an org so the project tests have an anchor.
-                const { userId: ownerId, sessionToken: ownerSessionToken } = await seedUser(envCtx, '');
-                const orgId = crypto.randomUUID();
-                const now = new Date().toISOString();
-                const admin = envCtx.adminClient;
-                const { error: orgError } = await admin.from('orgs').insert({
-                    id: orgId,
-                    name: 'Conformance Org',
-                    slug: `conformance-${orgId.slice(0, 8)}`,
-                    owner_id: ownerId,
-                    created_at: now,
-                    updated_at: now
-                });
-                if (orgError)
-                    throw orgError;
-                // And an owner membership with `manage_projects` so project
-                // creates pass the `has_org_permission` policy under RLS.
-                const { error: memberError } = await admin.from('org_members').insert({
-                    org_id: orgId,
-                    user_id: ownerId,
-                    role: 'owner',
-                    permissions: [...DEFAULT_ORG_PERMISSIONS.owner],
-                    joined_at: now
-                });
-                if (memberError)
-                    throw memberError;
-                return {
-                    store: new SupabaseProjectStore(envCtx.bundle),
-                    orgId,
-                    ownerId,
-                    ownerSessionToken
-                };
-            },
-            seedUser: (id) => seedUser(envCtx, id)
-        });
-    });
-}
-//# sourceMappingURL=project-conformance.test.js.map

package/dist/data/__tests__/project-conformance.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-conformance.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/project-conformance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;AAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACnE,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACJ,CAAC;KAAM,CAAC;IACP,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACrC,UAAU,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,0BAA0B,CAAC;YAC1B,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,KAAK,IAAI,EAAE;gBACvB,8DAA8D;gBAC9D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACxF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;gBACjC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;oBAC3D,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,eAAe,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBACxC,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;iBACf,CAAC,CAAC;gBACH,IAAI,QAAQ;oBAAE,MAAM,QAAQ,CAAC;gBAC7B,4DAA4D;gBAC5D,0DAA0D;gBAC1D,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACrE,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC;oBAC/C,SAAS,EAAE,GAAG;iBACd,CAAC,CAAC;gBACH,IAAI,WAAW;oBAAE,MAAM,WAAW,CAAC;gBAEnC,OAAO;oBACN,KAAK,EAAE,IAAI,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC9C,KAAK;oBACL,OAAO;oBACP,iBAAiB;iBACjB,CAAC;YACH,CAAC;YACD,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;SACtC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/data/__tests__/share-link-concurrency.test.d.ts

@@ -1,22 +0,0 @@
-/**
- * Audit Q4/Q5 — the concurrent-solve guarantee for share-link caps.
- *
- * `tryIncrementSolveCount` is the load-bearing race-sensitive method: the
- * `/api/compute` endpoint calls it BEFORE solving and turns a `null` return
- * (cap hit) into HTTP 429. Under concurrent solves against one capped link, the
- * cap must hold exactly — no overshoot, no lost update handing two solves the
- * same slot. Supabase provides this via the SECURITY DEFINER
- * `try_increment_share_link_solve_count` RPC, which does the check-and-increment
- * in a single statement.
- *
- * This lives in the Supabase suite (not the shared conformance suite or the app
- * route tests) because it is the ONLY backend that actually provides the
- * guarantee: the local provider's whole-file read-modify-write is a documented
- * dev-scale tradeoff and is not concurrency-safe. Skipped without a live stack,
- * matching the other conformance tests here.
- *
- * Complements the sequential cap/count tests at
- * `packages/selva/src/routes/api/compute/__tests__/solve-cap-and-count.test.ts`.
- */
-export {};
-//# sourceMappingURL=share-link-concurrency.test.d.ts.map

package/dist/data/__tests__/share-link-concurrency.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"share-link-concurrency.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/share-link-concurrency.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/dist/data/__tests__/share-link-concurrency.test.js

@@ -1,115 +0,0 @@
-/**
- * Audit Q4/Q5 — the concurrent-solve guarantee for share-link caps.
- *
- * `tryIncrementSolveCount` is the load-bearing race-sensitive method: the
- * `/api/compute` endpoint calls it BEFORE solving and turns a `null` return
- * (cap hit) into HTTP 429. Under concurrent solves against one capped link, the
- * cap must hold exactly — no overshoot, no lost update handing two solves the
- * same slot. Supabase provides this via the SECURITY DEFINER
- * `try_increment_share_link_solve_count` RPC, which does the check-and-increment
- * in a single statement.
- *
- * This lives in the Supabase suite (not the shared conformance suite or the app
- * route tests) because it is the ONLY backend that actually provides the
- * guarantee: the local provider's whole-file read-modify-write is a documented
- * dev-scale tradeoff and is not concurrency-safe. Skipped without a live stack,
- * matching the other conformance tests here.
- *
- * Complements the sequential cap/count tests at
- * `packages/selva/src/routes/api/compute/__tests__/solve-cap-and-count.test.ts`.
- */
-import { describe, it, expect, beforeEach } from 'vitest';
-import { SupabaseShareLinkStore } from '../SupabaseShareLinkStore.js';
-import { readEnv, resetAllData, seedUser } from './test-helpers.js';
-const envCtx = readEnv();
-if (!envCtx) {
-    describe.skip('SupabaseShareLinkStore concurrency (skipped: no live stack)', () => {
-        it('populate packages/providers/supabase/.env.test with Supabase creds to run these tests', () => { });
-    });
-}
-else {
-    const ctx = { userId: '', system: true };
-    /** Seed org → project → definition → share link, all via service-role. */
-    async function seedCappedLink(maxSolves) {
-        const { userId: ownerId } = await seedUser(envCtx, '');
-        const admin = envCtx.adminClient;
-        const orgId = crypto.randomUUID();
-        const projectId = crypto.randomUUID();
-        const definitionId = crypto.randomUUID();
-        const linkId = crypto.randomUUID();
-        const now = new Date().toISOString();
-        const { error: orgErr } = await admin.from('orgs').insert({
-            id: orgId,
-            name: 'Concurrency Org',
-            slug: `conc-${orgId.slice(0, 8)}`,
-            owner_id: ownerId,
-            created_at: now,
-            updated_at: now
-        });
-        if (orgErr)
-            throw orgErr;
-        const { error: projErr } = await admin.from('projects').insert({
-            id: projectId,
-            org_id: orgId,
-            name: 'Project',
-            slug: `proj-${projectId.slice(0, 8)}`,
-            visibility: 'public',
-            owner_id: ownerId,
-            created_at: now,
-            updated_at: now
-        });
-        if (projErr)
-            throw projErr;
-        const { error: defErr } = await admin.from('definitions').insert({
-            guid: definitionId,
-            project_id: projectId,
-            owner_id: ownerId,
-            display_name: 'Def',
-            status: 'published',
-            created_at: now,
-            updated_at: now
-        });
-        if (defErr)
-            throw defErr;
-        const link = {
-            id: linkId,
-            definitionId,
-            channel: 'live',
-            tokenHash: crypto.randomUUID().replace(/-/g, ''),
-            createdBy: ownerId,
-            createdAt: now,
-            expiresAt: null,
-            revokedAt: null,
-            allowSolve: true,
-            maxSolves,
-            solveCount: 0
-        };
-        const store = new SupabaseShareLinkStore(envCtx.bundle);
-        await store.create(ctx, link);
-        return { linkId };
-    }
-    describe('SupabaseShareLinkStore — concurrent solve-cap enforcement', () => {
-        beforeEach(async () => {
-            await resetAllData(envCtx);
-        });
-        it('N concurrent solves against a cap-K link admit exactly K, refuse the rest', async () => {
-            const CAP = 5;
-            const ATTEMPTS = 25;
-            const { linkId } = await seedCappedLink(CAP);
-            const store = new SupabaseShareLinkStore(envCtx.bundle);
-            const outcomes = await Promise.all(Array.from({ length: ATTEMPTS }, () => store.tryIncrementSolveCount(ctx, linkId)));
-            const admitted = outcomes.filter((n) => n !== null);
-            const refused = outcomes.filter((n) => n === null);
-            // Exactly CAP admitted — the atomic RPC never lets a concurrent burst
-            // overshoot the cap.
-            expect(admitted).toHaveLength(CAP);
-            expect(refused).toHaveLength(ATTEMPTS - CAP);
-            // Each admitted solve got a distinct slot 1..CAP — no lost update.
-            expect([...admitted].sort((a, b) => a - b)).toEqual([1, 2, 3, 4, 5]);
-            // The persisted count settles at exactly the cap.
-            const finalLink = await store.getById(ctx, linkId);
-            expect(finalLink?.solveCount).toBe(CAP);
-        });
-    });
-}
-//# sourceMappingURL=share-link-concurrency.test.js.map

package/dist/data/__tests__/share-link-concurrency.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"share-link-concurrency.test.js","sourceRoot":"","sources":["../../../src/data/__tests__/share-link-concurrency.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;AAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACjF,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACJ,CAAC;KAAM,CAAC;IACP,MAAM,GAAG,GAAmB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAoB,CAAC;IAE3E,0EAA0E;IAC1E,KAAK,UAAU,cAAc,CAAC,SAAiB;QAC9C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAO,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAO,CAAC,WAAW,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YACzD,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,QAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACjC,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SACf,CAAC,CAAC;QACH,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC;QACzB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;YAC9D,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACrC,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SACf,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YAChE,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,OAAO;YACjB,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SACf,CAAC,CAAC;QACH,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC;QAEzB,MAAM,IAAI,GAAc;YACvB,EAAE,EAAE,MAAM;YACV,YAAY;YACZ,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS;YACT,UAAU,EAAE,CAAC;SACb,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IACnB,CAAC;IAED,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;QAC1E,UAAU,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,YAAY,CAAC,MAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;YAC1F,MAAM,GAAG,GAAG,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,EAAE,CAAC;YACpB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;YAEzD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CACjF,CAAC;YAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YACnD,sEAAsE;YACtE,qBAAqB;YACrB,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;YAC7C,mEAAmE;YACnE,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAErE,kDAAkD;YAClD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/data/__tests__/share-link-conformance.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=share-link-conformance.test.d.ts.map

package/dist/data/__tests__/share-link-conformance.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"share-link-conformance.test.d.ts","sourceRoot":"","sources":["../../../src/data/__tests__/share-link-conformance.test.ts"],"names":[],"mappings":""}