@substrat-run/adapter-sqlite 0.1.0

package/README.md

@@ -0,0 +1,49 @@
+# @substrat-run/adapter-sqlite
+
+Pure-SQLite scope host for [Substrat](https://github.com/substrat-run/substrat) — real
+kernel semantics with **no Cloudflare dependency**.
+
+One SQLite file per scope, a per-scope actor for strict serialization, a directory
+database for fail-closed scope addressing, and a kernel-stamped event outbox. It is not
+a mock: it is the adapter that local development and CI run on, and the reason the
+self-host/escrow story is literally true (single-node, but runnable).
+
+## Usage
+
+```ts
+import { SqliteScopeHost } from '@substrat-run/adapter-sqlite';
+import { UNSAFE_allowAllChecker } from '@substrat-run/kernel';
+
+const host = new SqliteScopeHost({
+  dir: './data',                    // one .sqlite file per scope + _directory.sqlite
+  checker: UNSAFE_allowAllChecker,  // omit for the secure default: deny everything
+});
+
+await host.provisionScope({ tenantId, scopeId, jurisdiction: 'eu' }); // idempotent
+const stub = await host.getScope(principal, tenantId, scopeId);
+await stub.invoke('workorder/create', input);
+await host.close();
+```
+
+## Guarantees
+
+This adapter passes the full
+[`@substrat-run/contract-tests`](https://npmjs.com/package/@substrat-run/contract-tests) suite —
+the same suite the Cloudflare adapter (Durable Objects) must pass unchanged:
+
+- strict per-scope serialization (concurrent read-modify-writes cannot interleave)
+- structured-clone boundary on every stub call, both directions
+- kernel-stamped event envelopes; PII-classed events without a `subjectId` are rejected
+- scope storage isolation; mismatched `(tenantId, scopeId)` pairs fail closed
+
+## Notes
+
+- Uses [better-sqlite3](https://npmjs.com/package/better-sqlite3) (native module). With
+  pnpm 10+, allow its build script via `pnpm.onlyBuiltDependencies`.
+- Scope databases run in WAL mode and can be opened read-only with any SQLite tool —
+  local debugging is just opening a file.
+
+## Status
+
+Pre-release (0.x). Migration journal, attachments, and the outbox drain are still
+landing.

package/dist/actor.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Per-scope actor: strict serialization (K-6). One operation runs to
+ * completion before the next starts — the conservative semantics both
+ * adapters can honor (the DO over-delivers via input gates; we deliver
+ * exactly this).
+ */
+export declare class ScopeActor {
+    private tail;
+    enqueue<T>(op: () => Promise<T> | T): Promise<T>;
+}
+//# sourceMappingURL=actor.d.ts.map

package/dist/actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../src/actor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,IAAI,CAAuC;IAEnD,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAMjD"}

package/dist/actor.js

@@ -0,0 +1,16 @@
+/**
+ * Per-scope actor: strict serialization (K-6). One operation runs to
+ * completion before the next starts — the conservative semantics both
+ * adapters can honor (the DO over-delivers via input gates; we deliver
+ * exactly this).
+ */
+export class ScopeActor {
+    tail = Promise.resolve();
+    enqueue(op) {
+        const result = this.tail.then(op);
+        // The chain must survive failures; callers still see the rejection.
+        this.tail = result.catch(() => undefined);
+        return result;
+    }
+}
+//# sourceMappingURL=actor.js.map

package/dist/actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.js","sourceRoot":"","sources":["../src/actor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACb,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnD,OAAO,CAAI,EAAwB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,oEAAoE;QACpE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/checker.d.ts

@@ -0,0 +1,11 @@
+import type Database from 'better-sqlite3';
+import { type RoleDefinition } from '@substrat-run/contracts';
+import type { PermissionChecker } from '@substrat-run/kernel';
+export interface CheckerDeps {
+    directory: Database.Database;
+    /** Resolve an OPEN scope db; checks only run inside operations, so it is open. */
+    scopeDb(scopeId: string): Database.Database | undefined;
+    getRole(tenantId: string, key: string): RoleDefinition | undefined;
+}
+export declare function createTupleChecker(deps: CheckerDeps): PermissionChecker;
+//# sourceMappingURL=checker.d.ts.map

package/dist/checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker.d.ts","sourceRoot":"","sources":["../src/checker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAQL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAiB9D,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC7B,kFAAkF;IAClF,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;IACxD,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;CACpE;AAeD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,iBAAiB,CAmJvE"}

package/dist/checker.js

@@ -0,0 +1,136 @@
+import { objectRef, } from '@substrat-run/contracts';
+/**
+ * The built-in constrained relationship-tuple evaluator (design doc §4.2,
+ * plan D-23). Fixed four-rule algebra — role expansion, tenancy-tree
+ * inheritance, declared entity parent edges (depth ≤ 4), membership — no
+ * negation, no configurable rewrites. Every allow carries its tuple proof.
+ *
+ * Tuple placement: scope-level and entity tuples live in the scope database
+ * (`_substrat_tuples`); tenant-level assignments/grants and org membership
+ * live in the directory (`_substrat_tenant_tuples`). Everything is evaluated
+ * inside the caller's serialization domain, so check-after-write consistency
+ * is free — the "no zookies" property.
+ */
+const ENTITY_WALK_DEPTH = 4;
+const t = (subject, relation, object) => ({
+    subject: objectRef.parse(subject),
+    relation,
+    object: objectRef.parse(object),
+});
+export function createTupleChecker(deps) {
+    const tenantTuples = (tenantId, subject, relationPrefix) => deps.directory
+        .prepare(`SELECT subject, relation, object, expires_at FROM _substrat_tenant_tuples
+         WHERE tenant_id = ? AND subject = ? AND relation LIKE ?`)
+        .all(tenantId, subject, `${relationPrefix}%`);
+    const scopeTuples = (db, subject, relationPrefix) => db
+        .prepare(`SELECT subject, relation, object, expires_at FROM _substrat_tuples
+         WHERE subject = ? AND relation LIKE ?`)
+        .all(subject, `${relationPrefix}%`);
+    const live = (row, now) => row.expires_at === null || row.expires_at > now;
+    return {
+        async check(principal, permission, node, entity) {
+            const now = new Date().toISOString();
+            const deny = { allowed: false, checked: permission, node };
+            const scopeDb = node.scopeId ? deps.scopeDb(node.scopeId) : undefined;
+            // Rule 4 — membership: the subject set is the principal plus its orgs.
+            const subjects = [
+                { ref: `principal:${principal}` },
+            ];
+            for (const m of tenantTuples(node.tenantId, `principal:${principal}`, 'member')) {
+                if (m.relation === 'member' && live(m, now)) {
+                    subjects.push({ ref: m.object, via: t(m.subject, m.relation, m.object) });
+                }
+            }
+            // Inheritance (rule 2): a scope check also consults tenant-level tuples.
+            const nodeObjects = node.scopeId
+                ? [
+                    { obj: `scope:${node.scopeId}`, scoped: true },
+                    { obj: `tenant:${node.tenantId}`, scoped: false },
+                ]
+                : [{ obj: `tenant:${node.tenantId}`, scoped: false }];
+            const tuplesFor = (subject, prefix, scoped) => scoped
+                ? scopeDb
+                    ? scopeTuples(scopeDb, subject, prefix)
+                    : []
+                : tenantTuples(node.tenantId, subject, prefix);
+            for (const nodeObj of nodeObjects) {
+                for (const subject of subjects) {
+                    // Rule 1 — role expansion.
+                    for (const row of tuplesFor(subject.ref, 'role:', nodeObj.scoped)) {
+                        if (row.object !== nodeObj.obj || !live(row, now))
+                            continue;
+                        const roleKey = row.relation.slice('role:'.length);
+                        const role = deps.getRole(node.tenantId, roleKey);
+                        if (role?.permissions.includes(permission)) {
+                            return {
+                                allowed: true,
+                                proof: [
+                                    ...(subject.via ? [subject.via] : []),
+                                    t(row.subject, row.relation, row.object),
+                                    t(`role:${roleKey}`, `granted:${permission}`, nodeObj.obj),
+                                ],
+                            };
+                        }
+                    }
+                    // Direct grants at the node.
+                    for (const row of tuplesFor(subject.ref, `granted:${permission}`, nodeObj.scoped)) {
+                        if (row.object === nodeObj.obj && row.relation === `granted:${permission}` && live(row, now)) {
+                            return {
+                                allowed: true,
+                                proof: [
+                                    ...(subject.via ? [subject.via] : []),
+                                    t(row.subject, row.relation, row.object),
+                                ],
+                            };
+                        }
+                    }
+                }
+            }
+            // Rule 3 — entity walk along declared parent edges (entity grants are
+            // scope-local by construction).
+            if (entity && scopeDb) {
+                let frontier = [
+                    { ref: `${entity.entityType}:${entity.entityId}`, chain: [] },
+                ];
+                for (let depth = 0; depth <= ENTITY_WALK_DEPTH && frontier.length > 0; depth++) {
+                    // grant lookup at current frontier objects
+                    for (const candidate of frontier) {
+                        for (const subject of subjects) {
+                            const grant = scopeDb
+                                .prepare(`SELECT subject, relation, object, expires_at FROM _substrat_tuples
+                   WHERE subject = ? AND relation = ? AND object = ?`)
+                                .get(subject.ref, `granted:${permission}`, candidate.ref);
+                            if (grant && live(grant, now)) {
+                                return {
+                                    allowed: true,
+                                    proof: [
+                                        ...(subject.via ? [subject.via] : []),
+                                        ...candidate.chain,
+                                        t(grant.subject, grant.relation, grant.object),
+                                    ],
+                                };
+                            }
+                        }
+                    }
+                    // expand one level of parents
+                    const next = [];
+                    for (const candidate of frontier) {
+                        const parents = scopeDb
+                            .prepare(`SELECT subject, relation, object, expires_at FROM _substrat_tuples
+                 WHERE subject = ? AND relation = 'parent'`)
+                            .all(candidate.ref);
+                        for (const p of parents) {
+                            next.push({
+                                ref: p.object,
+                                chain: [...candidate.chain, t(p.subject, 'parent', p.object)],
+                            });
+                        }
+                    }
+                    frontier = next;
+                }
+            }
+            return deny;
+        },
+    };
+}
+//# sourceMappingURL=checker.js.map

package/dist/checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker.js","sourceRoot":"","sources":["../src/checker.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,GAQV,MAAM,yBAAyB,CAAC;AAGjC;;;;;;;;;;;GAWG;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAgB5B,MAAM,CAAC,GAAG,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAc,EAAiB,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;IACjC,QAAQ;IACR,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,IAAiB;IAClD,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,OAAe,EAAE,cAAsB,EAAc,EAAE,CAC7F,IAAI,CAAC,SAAS;SACX,OAAO,CACN;iEACyD,CAC1D;SACA,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,GAAG,CAAe,CAAC;IAEhE,MAAM,WAAW,GAAG,CAClB,EAAqB,EACrB,OAAe,EACf,cAAsB,EACV,EAAE,CACd,EAAE;SACC,OAAO,CACN;+CACuC,CACxC;SACA,GAAG,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,CAAe,CAAC;IAEtD,MAAM,IAAI,GAAG,CAAC,GAAa,EAAE,GAAW,EAAW,EAAE,CACnD,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;IAElD,OAAO;QACL,KAAK,CAAC,KAAK,CACT,SAAsB,EACtB,UAAyB,EACzB,IAAU,EACV,MAAkB;YAElB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,GAAa,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAEtE,uEAAuE;YACvE,MAAM,QAAQ,GAA2C;gBACvD,EAAE,GAAG,EAAE,aAAa,SAAS,EAAE,EAAE;aAClC,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,SAAS,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAChF,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,MAAM,WAAW,GAAuC,IAAI,CAAC,OAAO;gBAClE,CAAC,CAAC;oBACE,EAAE,GAAG,EAAE,SAAS,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;oBAC9C,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;iBAClD;gBACH,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAExD,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,MAAe,EAAc,EAAE,CACjF,MAAM;gBACJ,CAAC,CAAC,OAAO;oBACP,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;oBACvC,CAAC,CAAC,EAAE;gBACN,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAEnD,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;gBAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,2BAA2B;oBAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBAClE,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;4BAAE,SAAS;wBAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBACnD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAClD,IAAI,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;4BAC3C,OAAO;gCACL,OAAO,EAAE,IAAI;gCACb,KAAK,EAAE;oCACL,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oCACrC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;oCACxC,CAAC,CAAC,QAAQ,OAAO,EAAE,EAAE,WAAW,UAAU,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC;iCAC3D;6BACF,CAAC;wBACJ,CAAC;oBACH,CAAC;oBACD,6BAA6B;oBAC7B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,UAAU,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBAClF,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;4BAC7F,OAAO;gCACL,OAAO,EAAE,IAAI;gCACb,KAAK,EAAE;oCACL,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oCACrC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;iCACzC;6BACF,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,sEAAsE;YACtE,gCAAgC;YAChC,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gBAEtB,IAAI,QAAQ,GAAe;oBACzB,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;iBAC9D,CAAC;gBACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,iBAAiB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;oBAC/E,2CAA2C;oBAC3C,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;wBACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;4BAC/B,MAAM,KAAK,GAAG,OAAO;iCAClB,OAAO,CACN;qEACmD,CACpD;iCACA,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,UAAU,EAAE,EAAE,SAAS,CAAC,GAAG,CAE7C,CAAC;4BACd,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;gCAC9B,OAAO;oCACL,OAAO,EAAE,IAAI;oCACb,KAAK,EAAE;wCACL,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wCACrC,GAAG,SAAS,CAAC,KAAK;wCAClB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;qCAC/C;iCACF,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,8BAA8B;oBAC9B,MAAM,IAAI,GAAe,EAAE,CAAC;oBAC5B,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;wBACjC,MAAM,OAAO,GAAG,OAAO;6BACpB,OAAO,CACN;2DAC2C,CAC5C;6BACA,GAAG,CAAC,SAAS,CAAC,GAAG,CAAe,CAAC;wBACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;4BACxB,IAAI,CAAC,IAAI,CAAC;gCACR,GAAG,EAAE,CAAC,CAAC,MAAM;gCACb,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;6BAC9D,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBACD,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,35 @@
+import { type PrincipalId, type ScopeId, type TenantId } from '@substrat-run/contracts';
+import { type HostAdmin, type ModuleRegistration, type OperationHandler, type PermissionChecker, type ProvisionScopeInput, type ScopeHost, type ScopeStub } from '@substrat-run/kernel';
+export interface SqliteScopeHostOptions {
+    /** Directory holding one SQLite file per scope plus the directory database. */
+    dir: string;
+    /** Defaults to the built-in tuple checker (deny-by-default on empty tuples). */
+    checker?: PermissionChecker;
+}
+export declare class SqliteScopeHost implements ScopeHost {
+    readonly admin: HostAdmin;
+    private readonly dir;
+    private readonly checker;
+    private readonly directory;
+    private readonly scopes;
+    private readonly scopesById;
+    private readonly operations;
+    private readonly modules;
+    private readonly relations;
+    private readonly roles;
+    private readonly systemPrincipal;
+    constructor(options: SqliteScopeHostOptions);
+    registerModule(registration: ModuleRegistration): void;
+    defineOperation<I, O>(name: string, handler: OperationHandler<I, O>): void;
+    provisionScope(input: ProvisionScopeInput): Promise<void>;
+    getScope(principal: PrincipalId, tenantId: TenantId, scopeId: ScopeId): Promise<ScopeStub>;
+    close(): Promise<void>;
+    private dispatch;
+    private parseOutboxRow;
+    private buildAdmin;
+    private loadRoles;
+    private operationContext;
+    private applyPendingMigrations;
+    private runtime;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAeL,KAAK,WAAW,EAGhB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,kBAAkB,EAEvB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EAExB,KAAK,SAAS,EACd,KAAK,SAAS,EAGf,MAAM,sBAAsB,CAAC;AAkB9B,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAuDD,qBAAa,eAAgB,YAAW,SAAS;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuD;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;gBAE9D,OAAO,EAAE,sBAAsB;IA0C3C,cAAc,CAAC,YAAY,EAAE,kBAAkB,GAAG,IAAI;IAmCtD,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI;IAKpE,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBzD,QAAQ,CACZ,SAAS,EAAE,WAAW,EACtB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,SAAS,CAAC;IAsCf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAYd,QAAQ;IAkDtB,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,UAAU;IA4GlB,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,gBAAgB;IA6ExB,OAAO,CAAC,sBAAsB;IAuC9B,OAAO,CAAC,OAAO;CAoBhB"}