@sequenceholdings/orm 0.1.1 → 0.1.2

package/dist/canonical.d.ts

@@ -0,0 +1,369 @@
+import { z } from 'zod';
+
+/**
+ * Canonical namespace definition v2 — the data-only JSON a consumer's
+ * TypeScript schema serializes to. This is v2's equivalent of the v1 YAML
+ * `NamespaceDefinition`: the CLI's jiti loader produces it, the content hash
+ * is computed over it, the server re-validates it (consumer TS never runs
+ * server-side), and the SDL generator / GraphQL compiler / migration engine
+ * all consume it.
+ *
+ * FROZEN CONTRACT (week 1): downstream tracks build against these shapes.
+ * Additive evolution only; `definition_format` discriminates on the wire.
+ */
+
+declare const CANONICAL_FORMAT: 2;
+/** Identifier grammar shared with v1 (`^[a-z][a-z0-9_]*$`, ≤63 bytes). */
+declare const IDENTIFIER_RE: RegExp;
+/** The 10 v1 column types, unchanged in v2. */
+declare const COLUMN_TYPES: readonly ["uuid", "text", "integer", "bigint", "numeric", "double", "boolean", "timestamptz", "date", "jsonb"];
+type ColumnType = (typeof COLUMN_TYPES)[number];
+/** Enum columns reference a namespace-level `defineEnum` by name. */
+declare const canonicalEnumSchema: z.ZodObject<{
+    name: z.ZodString;
+    values: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+type CanonicalEnum = z.infer<typeof canonicalEnumSchema>;
+declare const canonicalColumnSchema: z.ZodObject<{
+    name: z.ZodString;
+    columnName: z.ZodString;
+    type: z.ZodUnion<readonly [z.ZodEnum<{
+        bigint: "bigint";
+        boolean: "boolean";
+        uuid: "uuid";
+        text: "text";
+        integer: "integer";
+        numeric: "numeric";
+        double: "double";
+        timestamptz: "timestamptz";
+        date: "date";
+        jsonb: "jsonb";
+    }>, z.ZodObject<{
+        enum: z.ZodString;
+    }, z.core.$strip>]>;
+    nullable: z.ZodDefault<z.ZodBoolean>;
+    unique: z.ZodDefault<z.ZodBoolean>;
+    default: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+    defaultFn: z.ZodOptional<z.ZodEnum<{
+        "gen_random_uuid()": "gen_random_uuid()";
+        "now()": "now()";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+    renamedFrom: z.ZodOptional<z.ZodString>;
+    cast: z.ZodOptional<z.ZodString>;
+    deprecated: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+type CanonicalColumn = z.infer<typeof canonicalColumnSchema>;
+declare const canonicalLinkSchema: z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodEnum<{
+        toOne: "toOne";
+        toMany: "toMany";
+        toPlatformUser: "toPlatformUser";
+    }>;
+    target: z.ZodOptional<z.ZodString>;
+    on: z.ZodString;
+    references: z.ZodOptional<z.ZodString>;
+    enforce: z.ZodDefault<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type CanonicalLink = z.infer<typeof canonicalLinkSchema>;
+declare const canonicalIndexSchema: z.ZodObject<{
+    columns: z.ZodArray<z.ZodString>;
+    unique: z.ZodDefault<z.ZodBoolean>;
+    name: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Policy expressions stay DSL SOURCE STRINGS in the canonical form — parsing
+ * and claim-key validation happen in both CLI and server via the shared
+ * predicate parser. Variants follow §4c permissive-union semantics.
+ */
+declare const policyVariantSchema: z.ZodObject<{
+    when: z.ZodString;
+    allow: z.ZodOptional<z.ZodLiteral<true>>;
+    policy: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const policyExpressionSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    default: z.ZodString;
+    variants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        when: z.ZodString;
+        allow: z.ZodOptional<z.ZodLiteral<true>>;
+        policy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>]>;
+type PolicyExpression = z.infer<typeof policyExpressionSchema>;
+declare const canonicalPoliciesSchema: z.ZodObject<{
+    read: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        default: z.ZodString;
+        variants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            allow: z.ZodOptional<z.ZodLiteral<true>>;
+            policy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>]>>;
+    write: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        default: z.ZodString;
+        variants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            when: z.ZodString;
+            allow: z.ZodOptional<z.ZodLiteral<true>>;
+            policy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>]>>;
+}, z.core.$strip>;
+/** Actions carry over from v1 as compiled named-SQL ops (plan: resolved OQ-1). */
+declare const canonicalActionSchema: z.ZodObject<{
+    name: z.ZodString;
+    requires: z.ZodOptional<z.ZodString>;
+    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodEnum<{
+            bigint: "bigint";
+            boolean: "boolean";
+            uuid: "uuid";
+            text: "text";
+            integer: "integer";
+            numeric: "numeric";
+            double: "double";
+            timestamptz: "timestamptz";
+            date: "date";
+            jsonb: "jsonb";
+        }>;
+        nullable: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    executes: z.ZodString;
+    returns: z.ZodDefault<z.ZodEnum<{
+        rows: "rows";
+        rowsAffected: "rowsAffected";
+        scalar: "scalar";
+    }>>;
+    audit: z.ZodOptional<z.ZodObject<{
+        action: z.ZodString;
+        resource: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const canonicalTableSchema: z.ZodObject<{
+    table: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    renamedFrom: z.ZodOptional<z.ZodString>;
+    source: z.ZodOptional<z.ZodString>;
+    columns: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        columnName: z.ZodString;
+        type: z.ZodUnion<readonly [z.ZodEnum<{
+            bigint: "bigint";
+            boolean: "boolean";
+            uuid: "uuid";
+            text: "text";
+            integer: "integer";
+            numeric: "numeric";
+            double: "double";
+            timestamptz: "timestamptz";
+            date: "date";
+            jsonb: "jsonb";
+        }>, z.ZodObject<{
+            enum: z.ZodString;
+        }, z.core.$strip>]>;
+        nullable: z.ZodDefault<z.ZodBoolean>;
+        unique: z.ZodDefault<z.ZodBoolean>;
+        default: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+        defaultFn: z.ZodOptional<z.ZodEnum<{
+            "gen_random_uuid()": "gen_random_uuid()";
+            "now()": "now()";
+        }>>;
+        description: z.ZodOptional<z.ZodString>;
+        renamedFrom: z.ZodOptional<z.ZodString>;
+        cast: z.ZodOptional<z.ZodString>;
+        deprecated: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    primaryKey: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    links: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            toOne: "toOne";
+            toMany: "toMany";
+            toPlatformUser: "toPlatformUser";
+        }>;
+        target: z.ZodOptional<z.ZodString>;
+        on: z.ZodString;
+        references: z.ZodOptional<z.ZodString>;
+        enforce: z.ZodDefault<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    indexes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        columns: z.ZodArray<z.ZodString>;
+        unique: z.ZodDefault<z.ZodBoolean>;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    policies: z.ZodDefault<z.ZodObject<{
+        read: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            default: z.ZodString;
+            variants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                when: z.ZodString;
+                allow: z.ZodOptional<z.ZodLiteral<true>>;
+                policy: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>]>>;
+        write: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            default: z.ZodString;
+            variants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                when: z.ZodString;
+                allow: z.ZodOptional<z.ZodLiteral<true>>;
+                policy: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>]>>;
+    }, z.core.$strip>>;
+    actions: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        requires: z.ZodOptional<z.ZodString>;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                bigint: "bigint";
+                boolean: "boolean";
+                uuid: "uuid";
+                text: "text";
+                integer: "integer";
+                numeric: "numeric";
+                double: "double";
+                timestamptz: "timestamptz";
+                date: "date";
+                jsonb: "jsonb";
+            }>;
+            nullable: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        executes: z.ZodString;
+        returns: z.ZodDefault<z.ZodEnum<{
+            rows: "rows";
+            rowsAffected: "rowsAffected";
+            scalar: "scalar";
+        }>>;
+        audit: z.ZodOptional<z.ZodObject<{
+            action: z.ZodString;
+            resource: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type CanonicalTable = z.infer<typeof canonicalTableSchema>;
+declare const canonicalDefinitionSchema: z.ZodObject<{
+    definition_format: z.ZodLiteral<2>;
+    namespace: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    enums: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        values: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>>;
+    tables: z.ZodArray<z.ZodObject<{
+        table: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        renamedFrom: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+        columns: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            columnName: z.ZodString;
+            type: z.ZodUnion<readonly [z.ZodEnum<{
+                bigint: "bigint";
+                boolean: "boolean";
+                uuid: "uuid";
+                text: "text";
+                integer: "integer";
+                numeric: "numeric";
+                double: "double";
+                timestamptz: "timestamptz";
+                date: "date";
+                jsonb: "jsonb";
+            }>, z.ZodObject<{
+                enum: z.ZodString;
+            }, z.core.$strip>]>;
+            nullable: z.ZodDefault<z.ZodBoolean>;
+            unique: z.ZodDefault<z.ZodBoolean>;
+            default: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+            defaultFn: z.ZodOptional<z.ZodEnum<{
+                "gen_random_uuid()": "gen_random_uuid()";
+                "now()": "now()";
+            }>>;
+            description: z.ZodOptional<z.ZodString>;
+            renamedFrom: z.ZodOptional<z.ZodString>;
+            cast: z.ZodOptional<z.ZodString>;
+            deprecated: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        primaryKey: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        links: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            kind: z.ZodEnum<{
+                toOne: "toOne";
+                toMany: "toMany";
+                toPlatformUser: "toPlatformUser";
+            }>;
+            target: z.ZodOptional<z.ZodString>;
+            on: z.ZodString;
+            references: z.ZodOptional<z.ZodString>;
+            enforce: z.ZodDefault<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        indexes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            columns: z.ZodArray<z.ZodString>;
+            unique: z.ZodDefault<z.ZodBoolean>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        policies: z.ZodDefault<z.ZodObject<{
+            read: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                default: z.ZodString;
+                variants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    when: z.ZodString;
+                    allow: z.ZodOptional<z.ZodLiteral<true>>;
+                    policy: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>]>>;
+            write: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                default: z.ZodString;
+                variants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    when: z.ZodString;
+                    allow: z.ZodOptional<z.ZodLiteral<true>>;
+                    policy: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>]>>;
+        }, z.core.$strip>>;
+        actions: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            requires: z.ZodOptional<z.ZodString>;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+                type: z.ZodEnum<{
+                    bigint: "bigint";
+                    boolean: "boolean";
+                    uuid: "uuid";
+                    text: "text";
+                    integer: "integer";
+                    numeric: "numeric";
+                    double: "double";
+                    timestamptz: "timestamptz";
+                    date: "date";
+                    jsonb: "jsonb";
+                }>;
+                nullable: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            executes: z.ZodString;
+            returns: z.ZodDefault<z.ZodEnum<{
+                rows: "rows";
+                rowsAffected: "rowsAffected";
+                scalar: "scalar";
+            }>>;
+            audit: z.ZodOptional<z.ZodObject<{
+                action: z.ZodString;
+                resource: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    capabilities: z.ZodDefault<z.ZodObject<{
+        roles: z.ZodOptional<z.ZodUnknown>;
+        uses: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type CanonicalDefinition = z.infer<typeof canonicalDefinitionSchema>;
+/**
+ * Deterministic serialization discipline: tables sorted by name, columns in
+ * declaration order (order is meaningful for DDL), links/indexes/actions
+ * sorted by name, object keys emitted in schema order. `serializeNamespace`
+ * (authoring layer) and the server-side re-validation both normalize through
+ * this function before hashing so CLI and server hash identical bytes.
+ */
+declare function normalizeCanonical(definition: CanonicalDefinition): CanonicalDefinition;
+
+export { CANONICAL_FORMAT, COLUMN_TYPES, type CanonicalColumn, type CanonicalDefinition, type CanonicalEnum, type CanonicalLink, type CanonicalTable, type ColumnType, IDENTIFIER_RE, type PolicyExpression, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalTableSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema };

package/dist/canonical.js

@@ -0,0 +1,131 @@
+import { z } from 'zod';
+
+// src/canonical/v2.ts
+var CANONICAL_FORMAT = 2;
+var IDENTIFIER_RE = /^[a-z][a-z0-9_]*$/;
+var identifier = z.string().min(1).max(63).regex(IDENTIFIER_RE);
+var COLUMN_TYPES = [
+  "uuid",
+  "text",
+  "integer",
+  "bigint",
+  "numeric",
+  "double",
+  "boolean",
+  "timestamptz",
+  "date",
+  "jsonb"
+];
+var columnTypeSchema = z.enum(COLUMN_TYPES);
+var canonicalEnumSchema = z.object({
+  name: identifier,
+  values: z.array(z.string().min(1).max(63)).min(1).max(100)
+});
+var canonicalColumnSchema = z.object({
+  /** Property name in TS (camelCase); columnName is the Postgres name. */
+  name: z.string().min(1).max(63),
+  columnName: identifier,
+  type: z.union([columnTypeSchema, z.object({ enum: identifier })]),
+  nullable: z.boolean().default(true),
+  unique: z.boolean().default(false),
+  /** Literal default, or one of the allowlisted SQL functions. */
+  default: z.union([z.string(), z.number(), z.boolean(), z.null()]).optional(),
+  defaultFn: z.enum(["gen_random_uuid()", "now()"]).optional(),
+  description: z.string().max(500).optional(),
+  /** Migration hints — same semantics as v1. */
+  renamedFrom: identifier.optional(),
+  cast: z.string().max(200).optional(),
+  deprecated: z.boolean().default(false)
+});
+var canonicalLinkSchema = z.object({
+  name: z.string().min(1).max(63),
+  kind: z.enum(["toOne", "toMany", "toPlatformUser"]),
+  /** Target table name (namespace-local). Absent for toPlatformUser. */
+  target: identifier.optional(),
+  /** FK column on the owning side (toOne/toPlatformUser: on this table; toMany: on the target). */
+  on: identifier,
+  /** Referenced column on the target (default: target's PK / platform user `sub`). */
+  references: identifier.optional(),
+  /** enforce: true emits a real FK constraint (same-namespace toOne only). */
+  enforce: z.boolean().default(false),
+  description: z.string().max(500).optional()
+});
+var canonicalIndexSchema = z.object({
+  columns: z.array(identifier).min(1),
+  unique: z.boolean().default(false),
+  name: identifier.optional()
+});
+var policyVariantSchema = z.object({
+  /** Claims-only guard (capability()/role()/claim() comparisons — no columns). */
+  when: z.string().min(1).max(1e3),
+  /** Exactly one of: allow-all bypass, or a row predicate. */
+  allow: z.literal(true).optional(),
+  policy: z.string().min(1).max(2e3).optional()
+}).refine((v) => v.allow === true !== (typeof v.policy === "string"), {
+  message: "A variant declares exactly one of allow: true or policy"
+});
+var policyExpressionSchema = z.union([
+  z.string().min(1).max(2e3),
+  z.object({
+    default: z.string().min(1).max(2e3),
+    variants: z.array(policyVariantSchema).max(10).default([])
+  })
+]);
+var canonicalPoliciesSchema = z.object({
+  read: policyExpressionSchema.optional(),
+  write: policyExpressionSchema.optional()
+});
+var canonicalActionSchema = z.object({
+  name: identifier,
+  requires: z.string().max(1e3).optional(),
+  params: z.record(z.string(), z.object({
+    type: columnTypeSchema,
+    nullable: z.boolean().default(false)
+  })).default({}),
+  executes: z.string().min(1).max(1e4),
+  returns: z.enum(["rows", "rowsAffected", "scalar"]).default("rowsAffected"),
+  audit: z.object({ action: z.string(), resource: z.string() }).optional()
+});
+var canonicalTableSchema = z.object({
+  table: identifier,
+  description: z.string().max(2e3).optional(),
+  /** Table-level rename hint (new in v2). */
+  renamedFrom: identifier.optional(),
+  /** Synced/reflected read-only tables (`source: gold.*`) — v1 semantics. */
+  source: z.string().regex(/^gold\.[a-z][a-z0-9_]*$/).optional(),
+  columns: z.array(canonicalColumnSchema).default([]),
+  primaryKey: z.array(identifier).min(1).max(8).optional(),
+  links: z.array(canonicalLinkSchema).default([]),
+  indexes: z.array(canonicalIndexSchema).default([]),
+  policies: canonicalPoliciesSchema.default({}),
+  actions: z.array(canonicalActionSchema).default([])
+});
+var canonicalDefinitionSchema = z.object({
+  definition_format: z.literal(CANONICAL_FORMAT),
+  namespace: identifier.max(41),
+  description: z.string().max(2e3).optional(),
+  enums: z.array(canonicalEnumSchema).default([]),
+  tables: z.array(canonicalTableSchema).min(0).max(500),
+  /** Verbatim custom-roles grammar (@sequenceholdings/custom-roles-manifest). */
+  capabilities: z.object({
+    roles: z.unknown().optional(),
+    uses: z.array(z.string()).default([])
+  }).default({ uses: [] })
+});
+function normalizeCanonical(definition) {
+  const sortByName = (items) => [...items].sort((a, b) => a.name.localeCompare(b.name));
+  return {
+    ...definition,
+    enums: sortByName(definition.enums),
+    tables: [...definition.tables].sort((a, b) => a.table.localeCompare(b.table)).map((t) => ({
+      ...t,
+      links: sortByName(t.links),
+      indexes: [...t.indexes].sort((a, b) => (a.name ?? a.columns.join("_")).localeCompare(b.name ?? b.columns.join("_"))),
+      actions: sortByName(t.actions)
+    }))
+  };
+}
+
+export { CANONICAL_FORMAT, COLUMN_TYPES, IDENTIFIER_RE, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalTableSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema };
+//# sourceMappingURL=canonical.js.map
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/canonical/v2.ts"],"names":[],"mappings":";;;AAaO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,aAAA,GAAgB;AAC7B,IAAM,UAAA,GAAa,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,KAAA,CAAM,aAAa,CAAA;AAGzD,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA;AAAA,EAAQ,MAAA;AAAA,EAAQ,SAAA;AAAA,EAAW,QAAA;AAAA,EAAU,SAAA;AAAA,EAAW,QAAA;AAAA,EAChD,SAAA;AAAA,EAAW,aAAA;AAAA,EAAe,MAAA;AAAA,EAAQ;AACpC;AAGA,IAAM,gBAAA,GAAmB,CAAA,CAAE,IAAA,CAAK,YAAY,CAAA;AAGrC,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EAC1C,IAAA,EAAM,UAAA;AAAA,EACN,QAAQ,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG;AAC3D,CAAC;AAGM,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA;AAAA,EAE5C,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAC9B,UAAA,EAAY,UAAA;AAAA,EACZ,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,CAAC,gBAAA,EAAkB,CAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAM,UAAA,EAAY,CAAC,CAAC,CAAA;AAAA,EAChE,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,IAAI,CAAA;AAAA,EAClC,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA;AAAA,EAEjC,SAAS,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,MAAA,EAAO,EAAG,CAAA,CAAE,SAAQ,EAAG,CAAA,CAAE,MAAM,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3E,SAAA,EAAW,EAAE,IAAA,CAAK,CAAC,qBAAqB,OAAO,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3D,aAAa,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA;AAAA,EAE1C,WAAA,EAAa,WAAW,QAAA,EAAS;AAAA,EACjC,MAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA,EACnC,UAAA,EAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK;AACvC,CAAC;AAGM,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EAC1C,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAC9B,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,QAAA,EAAU,gBAAgB,CAAC,CAAA;AAAA;AAAA,EAElD,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA;AAAA,EAE5B,EAAA,EAAI,UAAA;AAAA;AAAA,EAEJ,UAAA,EAAY,WAAW,QAAA,EAAS;AAAA;AAAA,EAEhC,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,EAClC,aAAa,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA;AACnC,CAAC;AAGM,IAAM,oBAAA,GAAuB,EAAE,MAAA,CAAO;AAAA,EAC3C,SAAS,CAAA,CAAE,KAAA,CAAM,UAAU,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EAClC,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,EACjC,IAAA,EAAM,WAAW,QAAA;AACnB,CAAC;AAOM,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA;AAAA,EAE1C,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA;AAAA;AAAA,EAEhC,KAAA,EAAO,CAAA,CAAE,OAAA,CAAQ,IAAI,EAAE,QAAA,EAAS;AAAA,EAChC,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAI,CAAA,CAAE,QAAA;AACtC,CAAC,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAO,CAAA,CAAE,UAAU,IAAA,MAAW,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,CAAA,EAAW;AAAA,EACtE,OAAA,EAAS;AACX,CAAC;AAEM,IAAM,sBAAA,GAAyB,EAAE,KAAA,CAAM;AAAA,EAC5C,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA;AAAA,EAC1B,EAAE,MAAA,CAAO;AAAA,IACP,OAAA,EAAS,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA;AAAA,IACnC,QAAA,EAAU,CAAA,CAAE,KAAA,CAAM,mBAAmB,CAAA,CAAE,IAAI,EAAE,CAAA,CAAE,OAAA,CAAQ,EAAE;AAAA,GAC1D;AACH,CAAC;AAGM,IAAM,uBAAA,GAA0B,EAAE,MAAA,CAAO;AAAA,EAC9C,IAAA,EAAM,uBAAuB,QAAA,EAAS;AAAA,EACtC,KAAA,EAAO,uBAAuB,QAAA;AAChC,CAAC;AAGM,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EAC5C,IAAA,EAAM,UAAA;AAAA,EACN,UAAU,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAI,EAAE,QAAA,EAAS;AAAA,EACxC,QAAQ,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAO,EAAG,EAAE,MAAA,CAAO;AAAA,IACpC,IAAA,EAAM,gBAAA;AAAA,IACN,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK;AAAA,GACpC,CAAC,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACd,QAAA,EAAU,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAM,CAAA;AAAA,EACtC,OAAA,EAAS,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,gBAAgB,QAAQ,CAAC,CAAA,CAAE,OAAA,CAAQ,cAAc,CAAA;AAAA,EAC1E,KAAA,EAAO,CAAA,CAAE,MAAA,CAAO,EAAE,QAAQ,CAAA,CAAE,MAAA,EAAO,EAAG,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,EAAG,EAAE,QAAA;AAChE,CAAC;AAEM,IAAM,oBAAA,GAAuB,EAAE,MAAA,CAAO;AAAA,EAC3C,KAAA,EAAO,UAAA;AAAA,EACP,aAAa,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAI,EAAE,QAAA,EAAS;AAAA;AAAA,EAE3C,WAAA,EAAa,WAAW,QAAA,EAAS;AAAA;AAAA,EAEjC,QAAQ,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,yBAAyB,EAAE,QAAA,EAAS;AAAA,EAC7D,SAAS,CAAA,CAAE,KAAA,CAAM,qBAAqB,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EAClD,UAAA,EAAY,CAAA,CAAE,KAAA,CAAM,UAAU,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EACvD,OAAO,CAAA,CAAE,KAAA,CAAM,mBAAmB,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EAC9C,SAAS,CAAA,CAAE,KAAA,CAAM,oBAAoB,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACjD,QAAA,EAAU,uBAAA,CAAwB,OAAA,CAAQ,EAAE,CAAA;AAAA,EAC5C,SAAS,CAAA,CAAE,KAAA,CAAM,qBAAqB,CAAA,CAAE,OAAA,CAAQ,EAAE;AACpD,CAAC;AAGM,IAAM,yBAAA,GAA4B,EAAE,MAAA,CAAO;AAAA,EAChD,iBAAA,EAAmB,CAAA,CAAE,OAAA,CAAQ,gBAAgB,CAAA;AAAA,EAC7C,SAAA,EAAW,UAAA,CAAW,GAAA,CAAI,EAAE,CAAA;AAAA,EAC5B,aAAa,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAI,EAAE,QAAA,EAAS;AAAA,EAC3C,OAAO,CAAA,CAAE,KAAA,CAAM,mBAAmB,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EAC9C,MAAA,EAAQ,EAAE,KAAA,CAAM,oBAAoB,EAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA;AAAA,EAEpD,YAAA,EAAc,EAAE,MAAA,CAAO;AAAA,IACrB,KAAA,EAAO,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IAC5B,IAAA,EAAM,EAAE,KAAA,CAAM,CAAA,CAAE,QAAQ,CAAA,CAAE,OAAA,CAAQ,EAAE;AAAA,GACrC,CAAA,CAAE,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAI;AACzB,CAAC;AAUM,SAAS,mBAAmB,UAAA,EAAsD;AACvF,EAAA,MAAM,aAAa,CAA6B,KAAA,KAC9C,CAAC,GAAG,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AACxD,EAAA,OAAO;AAAA,IACL,GAAG,UAAA;AAAA,IACH,KAAA,EAAO,UAAA,CAAW,UAAA,CAAW,KAAK,CAAA;AAAA,IAClC,QAAQ,CAAC,GAAG,WAAW,MAAM,CAAA,CAC1B,KAAK,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,KAAA,CAAM,cAAc,CAAA,CAAE,KAAK,CAAC,CAAA,CAC7C,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACX,GAAG,CAAA;AAAA,MACH,KAAA,EAAO,UAAA,CAAW,CAAA,CAAE,KAAK,CAAA;AAAA,MACzB,OAAA,EAAS,CAAC,GAAG,CAAA,CAAE,OAAO,EAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAA,CAC9B,CAAA,CAAE,IAAA,IAAQ,EAAE,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA,EAAG,aAAA,CAAc,CAAA,CAAE,IAAA,IAAQ,CAAA,CAAE,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAC,CAAA;AAAA,MAC9E,OAAA,EAAS,UAAA,CAAW,CAAA,CAAE,OAAO;AAAA,KAC/B,CAAE;AAAA,GACN;AACF","file":"canonical.js","sourcesContent":["/**\n * Canonical namespace definition v2 — the data-only JSON a consumer's\n * TypeScript schema serializes to. This is v2's equivalent of the v1 YAML\n * `NamespaceDefinition`: the CLI's jiti loader produces it, the content hash\n * is computed over it, the server re-validates it (consumer TS never runs\n * server-side), and the SDL generator / GraphQL compiler / migration engine\n * all consume it.\n *\n * FROZEN CONTRACT (week 1): downstream tracks build against these shapes.\n * Additive evolution only; `definition_format` discriminates on the wire.\n */\nimport { z } from 'zod'\n\nexport const CANONICAL_FORMAT = 2 as const\n\n/** Identifier grammar shared with v1 (`^[a-z][a-z0-9_]*$`, ≤63 bytes). */\nexport const IDENTIFIER_RE = /^[a-z][a-z0-9_]*$/\nconst identifier = z.string().min(1).max(63).regex(IDENTIFIER_RE)\n\n/** The 10 v1 column types, unchanged in v2. */\nexport const COLUMN_TYPES = [\n  'uuid', 'text', 'integer', 'bigint', 'numeric', 'double',\n  'boolean', 'timestamptz', 'date', 'jsonb',\n] as const\nexport type ColumnType = (typeof COLUMN_TYPES)[number]\n\nconst columnTypeSchema = z.enum(COLUMN_TYPES)\n\n/** Enum columns reference a namespace-level `defineEnum` by name. */\nexport const canonicalEnumSchema = z.object({\n  name: identifier,\n  values: z.array(z.string().min(1).max(63)).min(1).max(100),\n})\nexport type CanonicalEnum = z.infer<typeof canonicalEnumSchema>\n\nexport const canonicalColumnSchema = z.object({\n  /** Property name in TS (camelCase); columnName is the Postgres name. */\n  name: z.string().min(1).max(63),\n  columnName: identifier,\n  type: z.union([columnTypeSchema, z.object({ enum: identifier })]),\n  nullable: z.boolean().default(true),\n  unique: z.boolean().default(false),\n  /** Literal default, or one of the allowlisted SQL functions. */\n  default: z.union([z.string(), z.number(), z.boolean(), z.null()]).optional(),\n  defaultFn: z.enum(['gen_random_uuid()', 'now()']).optional(),\n  description: z.string().max(500).optional(),\n  /** Migration hints — same semantics as v1. */\n  renamedFrom: identifier.optional(),\n  cast: z.string().max(200).optional(),\n  deprecated: z.boolean().default(false),\n})\nexport type CanonicalColumn = z.infer<typeof canonicalColumnSchema>\n\nexport const canonicalLinkSchema = z.object({\n  name: z.string().min(1).max(63),\n  kind: z.enum(['toOne', 'toMany', 'toPlatformUser']),\n  /** Target table name (namespace-local). Absent for toPlatformUser. */\n  target: identifier.optional(),\n  /** FK column on the owning side (toOne/toPlatformUser: on this table; toMany: on the target). */\n  on: identifier,\n  /** Referenced column on the target (default: target's PK / platform user `sub`). */\n  references: identifier.optional(),\n  /** enforce: true emits a real FK constraint (same-namespace toOne only). */\n  enforce: z.boolean().default(false),\n  description: z.string().max(500).optional(),\n})\nexport type CanonicalLink = z.infer<typeof canonicalLinkSchema>\n\nexport const canonicalIndexSchema = z.object({\n  columns: z.array(identifier).min(1),\n  unique: z.boolean().default(false),\n  name: identifier.optional(),\n})\n\n/**\n * Policy expressions stay DSL SOURCE STRINGS in the canonical form — parsing\n * and claim-key validation happen in both CLI and server via the shared\n * predicate parser. Variants follow §4c permissive-union semantics.\n */\nexport const policyVariantSchema = z.object({\n  /** Claims-only guard (capability()/role()/claim() comparisons — no columns). */\n  when: z.string().min(1).max(1000),\n  /** Exactly one of: allow-all bypass, or a row predicate. */\n  allow: z.literal(true).optional(),\n  policy: z.string().min(1).max(2000).optional(),\n}).refine((v) => (v.allow === true) !== (typeof v.policy === 'string'), {\n  message: 'A variant declares exactly one of allow: true or policy',\n})\n\nexport const policyExpressionSchema = z.union([\n  z.string().min(1).max(2000),\n  z.object({\n    default: z.string().min(1).max(2000),\n    variants: z.array(policyVariantSchema).max(10).default([]),\n  }),\n])\nexport type PolicyExpression = z.infer<typeof policyExpressionSchema>\n\nexport const canonicalPoliciesSchema = z.object({\n  read: policyExpressionSchema.optional(),\n  write: policyExpressionSchema.optional(),\n})\n\n/** Actions carry over from v1 as compiled named-SQL ops (plan: resolved OQ-1). */\nexport const canonicalActionSchema = z.object({\n  name: identifier,\n  requires: z.string().max(1000).optional(),\n  params: z.record(z.string(), z.object({\n    type: columnTypeSchema,\n    nullable: z.boolean().default(false),\n  })).default({}),\n  executes: z.string().min(1).max(10_000),\n  returns: z.enum(['rows', 'rowsAffected', 'scalar']).default('rowsAffected'),\n  audit: z.object({ action: z.string(), resource: z.string() }).optional(),\n})\n\nexport const canonicalTableSchema = z.object({\n  table: identifier,\n  description: z.string().max(2000).optional(),\n  /** Table-level rename hint (new in v2). */\n  renamedFrom: identifier.optional(),\n  /** Synced/reflected read-only tables (`source: gold.*`) — v1 semantics. */\n  source: z.string().regex(/^gold\\.[a-z][a-z0-9_]*$/).optional(),\n  columns: z.array(canonicalColumnSchema).default([]),\n  primaryKey: z.array(identifier).min(1).max(8).optional(),\n  links: z.array(canonicalLinkSchema).default([]),\n  indexes: z.array(canonicalIndexSchema).default([]),\n  policies: canonicalPoliciesSchema.default({}),\n  actions: z.array(canonicalActionSchema).default([]),\n})\nexport type CanonicalTable = z.infer<typeof canonicalTableSchema>\n\nexport const canonicalDefinitionSchema = z.object({\n  definition_format: z.literal(CANONICAL_FORMAT),\n  namespace: identifier.max(41),\n  description: z.string().max(2000).optional(),\n  enums: z.array(canonicalEnumSchema).default([]),\n  tables: z.array(canonicalTableSchema).min(0).max(500),\n  /** Verbatim custom-roles grammar (@sequenceholdings/custom-roles-manifest). */\n  capabilities: z.object({\n    roles: z.unknown().optional(),\n    uses: z.array(z.string()).default([]),\n  }).default({ uses: [] }),\n})\nexport type CanonicalDefinition = z.infer<typeof canonicalDefinitionSchema>\n\n/**\n * Deterministic serialization discipline: tables sorted by name, columns in\n * declaration order (order is meaningful for DDL), links/indexes/actions\n * sorted by name, object keys emitted in schema order. `serializeNamespace`\n * (authoring layer) and the server-side re-validation both normalize through\n * this function before hashing so CLI and server hash identical bytes.\n */\nexport function normalizeCanonical(definition: CanonicalDefinition): CanonicalDefinition {\n  const sortByName = <T extends { name: string }>(items: T[]): T[] =>\n    [...items].sort((a, b) => a.name.localeCompare(b.name))\n  return {\n    ...definition,\n    enums: sortByName(definition.enums),\n    tables: [...definition.tables]\n      .sort((a, b) => a.table.localeCompare(b.table))\n      .map((t) => ({\n        ...t,\n        links: sortByName(t.links),\n        indexes: [...t.indexes].sort((a, b) =>\n          (a.name ?? a.columns.join('_')).localeCompare(b.name ?? b.columns.join('_'))),\n        actions: sortByName(t.actions),\n      })),\n  }\n}\n"]}