@substrat-run/adapter-cloudflare 0.2.0

package/dist/host.js

@@ -0,0 +1,234 @@
+import { adminLogEntry, createTenantInput, identityLink, moduleManifest, resolvedIdentity, roleDefinition, tenant as tenantSchema, } from '@substrat-run/contracts';
+import { ulid, } from '@substrat-run/kernel';
+export class CloudflareScopeHost {
+    admin;
+    scopeNs;
+    cp;
+    // Registration-mechanics bookkeeping (validation only — the DO executes).
+    // Code-time, derived from the bundled modules, NOT durable directory state.
+    moduleIds = new Set();
+    operations = new Set();
+    predicateNames = new Map(); // name → module
+    withdrawn = new Map(); // operation → module
+    operationEntitlement = new Map();
+    constructor(options) {
+        this.scopeNs = options.scope;
+        this.cp = options.controlPlane.get(options.controlPlane.idFromName('control-plane'));
+        this.admin = this.buildAdmin();
+    }
+    // -- registration mechanics (validation only) -----------------------------
+    registerModule(registration) {
+        const manifest = moduleManifest.parse(registration.manifest);
+        if (this.moduleIds.has(manifest.id)) {
+            throw new Error(`module already registered: ${manifest.id}`);
+        }
+        const migrations = registration.migrations ?? [];
+        const seen = new Set();
+        for (const m of migrations) {
+            if (seen.has(m.version)) {
+                throw new Error(`duplicate migration version in ${manifest.id}: ${m.version}`);
+            }
+            seen.add(m.version);
+        }
+        const declaredConsumes = new Set(manifest.events.consumes.map((c) => c.type));
+        for (const eventType of Object.keys(registration.consumers ?? {})) {
+            if (!declaredConsumes.has(eventType)) {
+                throw new Error(`${manifest.id} registers a consumer for undeclared event type: ${eventType}`);
+            }
+        }
+        for (const name of Object.keys(registration.predicates ?? {})) {
+            const existing = this.predicateNames.get(name);
+            if (existing) {
+                throw new Error(`guard predicate already contributed by ${existing}: ${name} (names are global)`);
+            }
+            this.predicateNames.set(name, manifest.id);
+        }
+        this.moduleIds.add(manifest.id);
+        const ownOperations = new Set(Object.keys(registration.operations ?? {}));
+        for (const name of manifest.withdraws ?? []) {
+            if (ownOperations.has(name)) {
+                throw new Error(`${manifest.id} withdraws its own operation: ${name} (a module cannot withdraw itself — just don't register it)`);
+            }
+            this.withdrawn.set(name, manifest.id);
+            this.operations.delete(name);
+            this.operationEntitlement.delete(name);
+        }
+        for (const name of Object.keys(registration.operations ?? {})) {
+            this.bindOperation(name);
+            this.operationEntitlement.set(name, manifest.entitlementKey);
+        }
+    }
+    defineOperation(name, _handler) {
+        this.bindOperation(name);
+    }
+    bindOperation(name) {
+        if (this.withdrawn.has(name))
+            return; // withdrawn by another manifest — never binds
+        if (this.operations.has(name))
+            throw new Error(`operation already defined: ${name}`);
+        this.operations.add(name);
+    }
+    // -- scope lifecycle ------------------------------------------------------
+    async provisionScope(actor, input) {
+        // Fail-closed tenant gate throws out of the awaited cp call BEFORE migrate
+        // or audit, so a rejected provision creates nothing and writes no audit row.
+        const created = await this.cp.provisionScope(input.tenantId, input.scopeId, input.storageShape ?? 'A', input.jurisdiction ?? null, new Date().toISOString());
+        // Instantiate the scope DO and trigger its lazy migration.
+        await this.scopeStub(input.scopeId).migrate();
+        // Audit a real provision only; an idempotent re-provision changed nothing.
+        if (created) {
+            await this.recordAdmin(actor, 'provisionScope', { tenantId: input.tenantId, scopeId: input.scopeId }, null, { storageShape: input.storageShape ?? 'A', jurisdiction: input.jurisdiction ?? null });
+        }
+    }
+    async getScope(principal, tenantId, scopeId) {
+        // Lifecycle gates (control-plane.md §4.1/§4.2), the K-3 fail-closed path,
+        // evaluated durably in the ControlPlaneDO. A throw propagates here.
+        await this.cp.validateScopeAccess(tenantId, scopeId);
+        const stub = this.scopeStub(scopeId);
+        await stub.migrate();
+        const cp = this.cp;
+        const operationEntitlement = this.operationEntitlement;
+        return {
+            tenantId,
+            scopeId,
+            invoke: async (operation, input) => {
+                // Entitlement gate (§4.3): a module loads for a tenant only if the tenant
+                // holds its SKU flag. Fails closed the same way withdrawal does.
+                const requiredKey = operationEntitlement.get(operation);
+                if (requiredKey && !(await cp.tenantHoldsEntitlement(tenantId, requiredKey))) {
+                    return Promise.reject(new Error(`operation not entitled: ${operation} — tenant does not hold '${requiredKey}'`));
+                }
+                return stub.invoke(operation, input, principal, tenantId, scopeId);
+            },
+        };
+    }
+    async close() {
+        // Nothing to drain: every admin write awaits its RPC to completion inline.
+    }
+    // -- admin surface --------------------------------------------------------
+    buildAdmin() {
+        const transitionScope = async (actor, action, tenantId, scopeId, from, to) => {
+            const before = await this.cp.transitionScope(tenantId, scopeId, from, to, action);
+            await this.recordAdmin(actor, action, { tenantId, scopeId }, { status: before }, { status: to });
+        };
+        const writeGrant = async (subject, permission, node, entity, expiresAt) => {
+            if (entity) {
+                await this.writeScopeTuple(node.scopeId, subject, `granted:${permission}`, `${entity.entityType}:${entity.entityId}`, expiresAt ?? null);
+            }
+            else if (node.scopeId) {
+                await this.writeScopeTuple(node.scopeId, subject, `granted:${permission}`, `scope:${node.scopeId}`, expiresAt ?? null);
+            }
+            else {
+                await this.cp.writeTenantTuple(node.tenantId, subject, `granted:${permission}`, `tenant:${node.tenantId}`, expiresAt ?? null);
+            }
+        };
+        return {
+            defineRole: async (actor, tenantId, role) => {
+                const parsed = roleDefinition.parse(role);
+                const before = await this.cp.defineRole(tenantId, parsed);
+                await this.recordAdmin(actor, 'defineRole', { tenantId }, before, parsed);
+            },
+            assignRole: async (actor, assignment) => {
+                const subject = `principal:${assignment.principalId}`;
+                if (assignment.node.scopeId) {
+                    await this.writeScopeTuple(assignment.node.scopeId, subject, `role:${assignment.roleKey}`, `scope:${assignment.node.scopeId}`, null);
+                }
+                else {
+                    await this.cp.writeTenantTuple(assignment.node.tenantId, subject, `role:${assignment.roleKey}`, `tenant:${assignment.node.tenantId}`, null);
+                }
+                await this.recordAdmin(actor, 'assignRole', { tenantId: assignment.node.tenantId, scopeId: assignment.node.scopeId }, null, assignment);
+            },
+            grant: async (actor, grant) => {
+                await writeGrant(`principal:${grant.principalId}`, grant.permission, grant.node, grant.entity, grant.expiresAt);
+                await this.recordAdmin(actor, 'grant', { tenantId: grant.node.tenantId, scopeId: grant.node.scopeId }, null, grant);
+            },
+            grantToOrg: async (actor, orgId, permission, node, entity) => {
+                await writeGrant(`org:${orgId}`, permission, node, entity);
+                await this.recordAdmin(actor, 'grantToOrg', { tenantId: node.tenantId, scopeId: node.scopeId }, null, { orgId, permission, node, entity });
+            },
+            addMember: async (actor, tenantId, principal, orgId) => {
+                await this.cp.writeTenantTuple(tenantId, `principal:${principal}`, 'member', `org:${orgId}`, null);
+                await this.recordAdmin(actor, 'addMember', { tenantId }, null, { principal, orgId });
+            },
+            createTenant: async (actor, input) => {
+                const parsed = createTenantInput.parse(input);
+                const created = await this.cp.createTenant(parsed.id, parsed.slug, parsed.name, new Date().toISOString());
+                // Idempotent: re-creating an existing tenant is a no-op, not audited.
+                if (!created)
+                    return;
+                await this.recordAdmin(actor, 'createTenant', { tenantId: parsed.id }, null, created);
+            },
+            setTenantStatus: async (actor, tenantId, status) => {
+                const before = await this.cp.setTenantStatus(tenantId, status);
+                await this.recordAdmin(actor, 'setTenantStatus', { tenantId }, { status: before }, { status });
+            },
+            listTenants: async () => (await this.cp.listTenants()).map((t) => tenantSchema.parse(t)),
+            getTenant: async (tenantId) => {
+                const t = await this.cp.getTenant(tenantId);
+                return t ? tenantSchema.parse(t) : undefined;
+            },
+            suspendScope: async (actor, tenantId, scopeId) => transitionScope(actor, 'suspendScope', tenantId, scopeId, ['active'], 'suspended'),
+            unsuspendScope: async (actor, tenantId, scopeId) => transitionScope(actor, 'unsuspendScope', tenantId, scopeId, ['suspended'], 'active'),
+            archiveScope: async (actor, tenantId, scopeId) => transitionScope(actor, 'archiveScope', tenantId, scopeId, ['active', 'suspended'], 'archived'),
+            unarchiveScope: async (actor, tenantId, scopeId) => transitionScope(actor, 'unarchiveScope', tenantId, scopeId, ['archived'], 'active'),
+            grantEntitlement: async (actor, tenantId, entitlementKey) => {
+                const changed = await this.cp.grantEntitlement(tenantId, entitlementKey);
+                if (!changed)
+                    return; // idempotent
+                await this.recordAdmin(actor, 'grantEntitlement', { tenantId }, null, { entitlementKey });
+            },
+            revokeEntitlement: async (actor, tenantId, entitlementKey) => {
+                const changed = await this.cp.revokeEntitlement(tenantId, entitlementKey);
+                if (!changed)
+                    return; // nothing held, nothing changed
+                await this.recordAdmin(actor, 'revokeEntitlement', { tenantId }, { entitlementKey }, null);
+            },
+            listEntitlements: async (tenantId) => this.cp.listEntitlements(tenantId),
+            linkIdentity: async (actor, input) => {
+                const parsed = identityLink.parse(input);
+                const changed = await this.cp.linkIdentity(parsed.provider, parsed.externalId, parsed.principal, parsed.tenantId, parsed.scopeId ?? null, new Date().toISOString());
+                // Idempotent: an identity already bound is a no-op, not audited.
+                if (!changed)
+                    return;
+                await this.recordAdmin(actor, 'linkIdentity', { tenantId: parsed.tenantId, scopeId: parsed.scopeId }, null, { provider: parsed.provider, externalId: parsed.externalId, principal: parsed.principal });
+            },
+            resolveIdentity: async (provider, externalId) => {
+                const row = await this.cp.resolveIdentity(provider, externalId);
+                if (!row)
+                    return undefined;
+                return resolvedIdentity.parse({
+                    principal: row.principal,
+                    tenantId: row.tenantId,
+                    scopeId: row.scopeId,
+                });
+            },
+            auditLog: async (filter) => {
+                const rows = await this.cp.auditLog(filter?.tenantId ?? null);
+                return rows.map((r) => adminLogEntry.parse(r));
+            },
+        };
+    }
+    // -- helpers --------------------------------------------------------------
+    async recordAdmin(actor, action, target, before, after) {
+        await this.cp.recordAdmin({
+            id: ulid(),
+            actor,
+            action,
+            tenantId: target.tenantId,
+            scopeId: target.scopeId ?? null,
+            vertical: target.vertical ?? null,
+            before: before ?? null,
+            after: after ?? null,
+            at: new Date().toISOString(),
+        });
+    }
+    async writeScopeTuple(scopeId, subject, relation, object, expiresAt) {
+        await this.scopeStub(scopeId).writeTuple(subject, relation, object, expiresAt);
+    }
+    scopeStub(scopeId) {
+        // Deterministic DO id in milestone 1. Production mints per-jurisdiction ids
+        // via newUniqueId (K-7) and stores the mapping in the directory — deferred.
+        return this.scopeNs.get(this.scopeNs.idFromName(scopeId));
+    }
+}
+//# sourceMappingURL=host.js.map

package/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,MAAM,IAAI,YAAY,GAmBvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,IAAI,GAQL,MAAM,sBAAsB,CAAC;AAsH9B,MAAM,OAAO,mBAAmB;IACrB,KAAK,CAAY;IAET,OAAO,CAAyB;IAChC,EAAE,CAAmB;IAEtC,0EAA0E;IAC1E,4EAA4E;IAC3D,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,gBAAgB;IAC5D,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,qBAAqB;IAC5D,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElE,YAAY,OAAmC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAChC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAClB,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;IAED,4EAA4E;IAE5E,cAAc,CAAC,YAAgC;QAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,EAAE,oDAAoD,SAAS,EAAE,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,KAAK,IAAI,qBAAqB,CACjF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,EAAE,iCAAiC,IAAI,6DAA6D,CACjH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,eAAe,CAAO,IAAY,EAAE,QAAgC;QAClE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAEO,aAAa,CAAC,IAAY;QAChC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,8CAA8C;QACpF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,cAAc,CAAC,KAAsB,EAAE,KAA0B;QACrE,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,cAAc,CAC1C,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,YAAY,IAAI,GAAG,EACzB,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;QACF,2DAA2D;QAC3D,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9C,2EAA2E;QAC3E,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,EACL,gBAAgB,EAChB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EACpD,IAAI,EACJ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAsB,EACtB,QAAkB,EAClB,OAAgB;QAEhB,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAEvD,OAAO;YACL,QAAQ;YACR,OAAO;YACP,MAAM,EAAE,KAAK,EAAQ,SAAiB,EAAE,KAAS,EAAc,EAAE;gBAC/D,0EAA0E;gBAC1E,iEAAiE;gBACjE,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxD,IAAI,WAAW,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;oBAC7E,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,2BAA2B,SAAS,4BAA4B,WAAW,GAAG,CAC/E,CACF,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAe,CAAC;YACnF,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,2EAA2E;IAC7E,CAAC;IAED,4EAA4E;IAEpE,UAAU;QAChB,MAAM,eAAe,GAAG,KAAK,EAC3B,KAAsB,EACtB,MAAmB,EACnB,QAAkB,EAClB,OAAgB,EAChB,IAAmB,EACnB,EAAe,EACf,EAAE;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;YAClF,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACnG,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,KAAK,EACtB,OAAe,EACf,UAAyB,EACzB,IAAU,EACV,MAAkB,EAClB,SAAkB,EACH,EAAE;YACjB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,eAAe,CACxB,IAAI,CAAC,OAAQ,EACb,OAAO,EACP,WAAW,UAAU,EAAE,EACvB,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EACzC,SAAS,IAAI,IAAI,CAClB,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,eAAe,CACxB,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,WAAW,UAAU,EAAE,EACvB,SAAS,IAAI,CAAC,OAAO,EAAE,EACvB,SAAS,IAAI,IAAI,CAClB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAC5B,IAAI,CAAC,QAAQ,EACb,OAAO,EACP,WAAW,UAAU,EAAE,EACvB,UAAU,IAAI,CAAC,QAAQ,EAAE,EACzB,SAAS,IAAI,IAAI,CAClB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;gBAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC1D,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5E,CAAC;YACD,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,UAA0B,EAAE,EAAE;gBACtD,MAAM,OAAO,GAAG,aAAa,UAAU,CAAC,WAAW,EAAE,CAAC;gBACtD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC5B,MAAM,IAAI,CAAC,eAAe,CACxB,UAAU,CAAC,IAAI,CAAC,OAAO,EACvB,OAAO,EACP,QAAQ,UAAU,CAAC,OAAO,EAAE,EAC5B,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAClC,IAAI,CACL,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAC5B,UAAU,CAAC,IAAI,CAAC,QAAQ,EACxB,OAAO,EACP,QAAQ,UAAU,CAAC,OAAO,EAAE,EAC5B,UAAU,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EACpC,IAAI,CACL,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,EACL,YAAY,EACZ,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EACxE,IAAI,EACJ,UAAU,CACX,CAAC;YACJ,CAAC;YACD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAsB,EAAE,EAAE;gBAC7C,MAAM,UAAU,CACd,aAAa,KAAK,CAAC,WAAW,EAAE,EAChC,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,CAChB,CAAC;gBACF,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,EACL,OAAO,EACP,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAC9D,IAAI,EACJ,KAAK,CACN,CAAC;YACJ,CAAC;YACD,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC3D,MAAM,UAAU,CAAC,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC3D,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,EACL,YAAY,EACZ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAClD,IAAI,EACJ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CACpC,CAAC;YACJ,CAAC;YACD,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;gBACrD,MAAM,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAC5B,QAAQ,EACR,aAAa,SAAS,EAAE,EACxB,QAAQ,EACR,OAAO,KAAK,EAAE,EACd,IAAI,CACL,CAAC;gBACF,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,KAAwB,EAAE,EAAE;gBACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CACxC,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,IAAI,EACX,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;gBACF,sEAAsE;gBACtE,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACxF,CAAC;YACD,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAoB,EAAE,EAAE;gBAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,WAAW,EAAE,KAAK,IAAuB,EAAE,CACzC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAA+B,EAAE;gBACzD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC5C,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/C,CAAC;YACD,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAC/C,eAAe,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;YACpF,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CACjD,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;YACtF,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAC/C,eAAe,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC;YAChG,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CACjD,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC;YACrF,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE;gBAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;gBACzE,IAAI,CAAC,OAAO;oBAAE,OAAO,CAAC,aAAa;gBACnC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE;gBAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;gBAC1E,IAAI,CAAC,OAAO;oBAAE,OAAO,CAAC,gCAAgC;gBACtD,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7F,CAAC;YACD,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAqB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC;YAC3F,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,KAAmB,EAAE,EAAE;gBACjD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CACxC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,OAAO,IAAI,IAAI,EACtB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;gBACF,iEAAiE;gBACjE,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,EACL,cAAc,EACd,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EACtD,IAAI,EACJ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAC1F,CAAC;YACJ,CAAC;YACD,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAyC,EAAE;gBACrF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAChE,IAAI,CAAC,GAAG;oBAAE,OAAO,SAAS,CAAC;gBAC3B,OAAO,gBAAgB,CAAC,KAAK,CAAC;oBAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAA4B,EAAE;gBACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;gBAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;SACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,WAAW,CACvB,KAAsB,EACtB,MAAmB,EACnB,MAAkF,EAClF,MAAe,EACf,KAAc;QAEd,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC;YACxB,EAAE,EAAE,IAAI,EAAE;YACV,KAAK;YACL,MAAM;YACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,KAAK,EAAE,KAAK,IAAI,IAAI;YACpB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,OAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,MAAc,EACd,SAAwB;QAExB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjF,CAAC;IAEO,SAAS,CAAC,OAAgB;QAChC,4EAA4E;QAC5E,4EAA4E;QAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAA4B,CAAC;IACvF,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `@substrat-run/adapter-cloudflare` — the Durable-Object scope host (D-14).
+ *
+ * Milestone 1: the shared contract-test suites run in workerd against real
+ * Durable Objects. The adapter boundary is the scope-host contract (§5.7):
+ * everything above it is the same kernel + contracts + modules the pure adapter
+ * runs, unchanged.
+ *
+ *   - CloudflareScopeHost — the coordinator (Worker isolate) implementing ScopeHost
+ *   - defineScopeDO       — one SQLite-backed Durable Object per scope
+ *   - ControlPlaneDO      — the cross-DO directory slice (roles + tenant tuples)
+ */
+export { CloudflareScopeHost } from './host.js';
+export type { CloudflareScopeHostOptions } from './host.js';
+export { defineScopeDO } from './scope-do.js';
+export { ControlPlaneDO } from './control-plane-do.js';
+export { OperationQueue } from './serialization.js';
+export { doScopedSql } from './sql.js';
+export { createDoTupleChecker } from './checker.js';
+export type { ControlPlaneReader, DoCheckerDeps } from './checker.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/**
+ * `@substrat-run/adapter-cloudflare` — the Durable-Object scope host (D-14).
+ *
+ * Milestone 1: the shared contract-test suites run in workerd against real
+ * Durable Objects. The adapter boundary is the scope-host contract (§5.7):
+ * everything above it is the same kernel + contracts + modules the pure adapter
+ * runs, unchanged.
+ *
+ *   - CloudflareScopeHost — the coordinator (Worker isolate) implementing ScopeHost
+ *   - defineScopeDO       — one SQLite-backed Durable Object per scope
+ *   - ControlPlaneDO      — the cross-DO directory slice (roles + tenant tuples)
+ */
+export { CloudflareScopeHost } from './host.js';
+export { defineScopeDO } from './scope-do.js';
+export { ControlPlaneDO } from './control-plane-do.js';
+export { OperationQueue } from './serialization.js';
+export { doScopedSql } from './sql.js';
+export { createDoTupleChecker } from './checker.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC"}

package/dist/scope-do.d.ts

@@ -0,0 +1,21 @@
+import { DurableObject } from 'cloudflare:workers';
+import { type ModuleRegistration, type OperationHandler } from '@substrat-run/kernel';
+/**
+ * `defineScopeDO` — one Durable Object per scope, the CF analogue of a single
+ * `SqliteScopeHost` scope runtime (D-14). It closes over a CODE-TIME module set
+ * (a DO cannot receive handler closures over RPC), builds the kernel spine in
+ * its own SQLite, and runs each operation inside `ctx.storage.transaction` — the
+ * async transaction API that commits on success and rolls back on a throw even
+ * across an `await` (verified in workerd), the direct analogue of the pure
+ * adapter's `BEGIN IMMEDIATE … COMMIT/ROLLBACK`.
+ *
+ * The coordinator (`CloudflareScopeHost`) owns the directory, the entitlement
+ * gate, and audit; the DO owns per-scope execution: migrations, guards,
+ * handlers, emits, the outbox→consumer dispatch loop, entity links, and local
+ * permission evaluation (scope tuples here, tenant tuples via ControlPlaneDO).
+ */
+export interface ScopeDoEnv {
+    CONTROL_PLANE: DurableObjectNamespace;
+}
+export declare function defineScopeDO(modules: ModuleRegistration[], bareOps: Record<string, OperationHandler<never, unknown>>): new (ctx: DurableObjectState, env: ScopeDoEnv) => DurableObject;
+//# sourceMappingURL=scope-do.d.ts.map

package/dist/scope-do.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-do.d.ts","sourceRoot":"","sources":["../src/scope-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAgBnD,OAAO,EAIL,KAAK,kBAAkB,EAEvB,KAAK,gBAAgB,EAGtB,MAAM,sBAAsB,CAAC;AAK9B;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,sBAAsB,CAAC;CACvC;AAkFD,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,GACxD,KAAK,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,KAAK,aAAa,CA8WjE"}