@tiangong-lca/cli 0.1.0 → 0.1.2

package/dist/src/lib/supabase-data-api-contract.d.ts

@@ -0,0 +1,304 @@
+export { DATA_API_RPC_REPLAY_CLASSIFICATION, isDataApiAuthRefreshReplaySafe, } from './supabase-data-api-replay.js';
+export declare const DATA_API_PROFILE_ENV = "TIANGONG_LCA_DATA_API_PROFILE";
+export declare const DATA_API_PROFILES: readonly ['api-contract-v1'];
+export type DataApiProfile = (typeof DATA_API_PROFILES)[number];
+export type DataApiRole = 'anon' | 'authenticated' | 'service_role';
+export declare const CORE_PUBLIC_RELATIONS: readonly ['contacts', 'flowproperties', 'flows', 'ilcd', 'lciamethods', 'lifecyclemodels', 'processes', 'sources', 'unitgroups'];
+export type CorePublicRelation = (typeof CORE_PUBLIC_RELATIONS)[number];
+export declare const DATA_API_RELATION_CONSUMERS: {
+    readonly contacts: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+    readonly flowproperties: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/dataset-maintenance-flow-identity-capture.ts", "src/lib/process-refresh-references.ts"];
+    readonly flows: readonly ["src/lib/flow-read.ts", "src/lib/flow-list.ts", "src/lib/flow-publish-version.ts", "src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/dataset-maintenance-flow-identity-capture.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+    readonly ilcd: readonly [];
+    readonly lciamethods: readonly ["src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/process-refresh-references.ts"];
+    readonly lifecyclemodels: readonly ["src/lib/lifecyclemodel-bundle-save.ts", "src/lib/process-dedup-review.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/supabase-json-ordered-write.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+    readonly processes: readonly ["src/lib/process-get.ts", "src/lib/process-list.ts", "src/lib/process-save-draft.ts", "src/lib/process-scope-statistics.ts", "src/lib/process-dedup-review.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/supabase-json-ordered-write.ts", "src/lib/supabase-rest.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+    readonly sources: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/supabase-json-ordered-write.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+    readonly unitgroups: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/dataset-maintenance-flow-identity-capture.ts", "src/lib/process-refresh-references.ts"];
+};
+export declare const DATA_API_RPC_TARGETS: {
+    readonly cmd_dataset_alias_execution_admit_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_alias_execution_admit_guarded(p_request jsonb)';
+    };
+    readonly cmd_dataset_alias_execution_gate_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_alias_execution_gate_guarded(p_request_id uuid, p_preflight_token text, p_gate_name text)';
+    };
+    readonly cmd_dataset_alias_execution_preflight_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_alias_execution_preflight_guarded(p_request jsonb)';
+    };
+    readonly cmd_dataset_alias_execution_read: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_alias_execution_read(p_request_id uuid)';
+    };
+    readonly cmd_dataset_delete: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_delete(p_table text, p_id uuid, p_version text, p_audit jsonb)';
+    };
+    readonly cmd_dataset_derivative_rebuild_plan_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_derivative_rebuild_plan_guarded(p_plan jsonb)';
+    };
+    readonly cmd_dataset_derivative_rebuild_read: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_derivative_rebuild_read(p_request_id uuid)';
+    };
+    readonly cmd_dataset_derivative_rebuild_snapshot: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_derivative_rebuild_snapshot(p_table text, p_id uuid, p_version text)';
+    };
+    readonly cmd_dataset_flow_identity_capture_attest_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_flow_identity_capture_attest_guarded(p_request jsonb)';
+    };
+    readonly cmd_dataset_flow_identity_process_rewrite_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_flow_identity_process_rewrite_guarded(p_scope_id uuid, p_request jsonb, p_authorization jsonb)';
+    };
+    readonly cmd_dataset_flow_identity_scope_finalize_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_flow_identity_scope_finalize_guarded(p_scope_id uuid, p_request jsonb, p_authorization jsonb)';
+    };
+    readonly cmd_dataset_flow_identity_scope_lookup: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_flow_identity_scope_lookup(p_request jsonb)';
+    };
+    readonly cmd_dataset_flow_identity_scope_preflight_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_flow_identity_scope_preflight_guarded(p_request jsonb)';
+    };
+    readonly cmd_dataset_flow_identity_scope_read: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_flow_identity_scope_read(p_scope_id uuid)';
+    };
+    readonly cmd_dataset_flow_identity_scope_recover_guarded: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_flow_identity_scope_recover_guarded(p_scope_id uuid, p_request jsonb)';
+    };
+    readonly cmd_dataset_save_draft: {
+        readonly targetSchema: 'api';
+        readonly signature: 'api.cmd_dataset_save_draft(p_table text, p_id uuid, p_version text, p_json_ordered jsonb, p_model_id uuid, p_rule_verification boolean, p_audit jsonb)';
+    };
+};
+export type DataApiRpc = keyof typeof DATA_API_RPC_TARGETS;
+export declare const DATA_API_CONTRACT: {
+    readonly schemaVersion: 'tiangong-lca-cli.data-api-contract.v1';
+    readonly databaseContract: {
+        readonly repository: 'tiangong-lca/database-engine';
+        readonly databaseCommit: '0a97cc761f8127ca379ab7d4df4395dab255707a';
+        readonly migrationHead: '20260807103000';
+        readonly migrationSetGitTreeSha: '116c1f08b5490eec630f997403b07c3fcb830a69';
+        readonly contractMigrations: {
+            readonly fullSchemaCutover: {
+                readonly path: 'supabase/migrations/20260805130000_full_schema_cutover.sql';
+                readonly sha256: 'd409022fb25d9313d17b0f76216ca6e4abbfce7d6c5b6e74c869314d1c7e5afb';
+            };
+            readonly apiContractClosure: {
+                readonly path: 'supabase/migrations/20260806160000_api_contract_closure.sql';
+                readonly sha256: 'e0e7aec8e03d70c60ee0d5c2b332ce73fa7b4b229725c9a9fcb0e1a1d7e8c511';
+            };
+            readonly migrationHead: {
+                readonly path: 'supabase/migrations/20260807103000_data_product_consumer_facades.sql';
+                readonly sha256: 'd7fe990d487a75a8aecced5af580d27f176e74ac00f18e7fa6e6d88733152646';
+            };
+        };
+        readonly contractReady: true;
+        readonly snapshotRole: 'frozen-post-cutover-api-contract';
+        readonly provenanceIssue: 'tiangong-lca/database-engine#422';
+        readonly publicCoreTableCount: 9;
+        readonly publicRoutineCount: 0;
+    };
+    readonly profiles: {
+        readonly 'api-contract-v1': {
+            readonly phase: 'contract';
+            readonly description: 'Frozen api RPC profile for database-engine migration head 20260807103000.';
+        };
+    };
+    readonly corePublicRelations: readonly ["contacts", "flowproperties", "flows", "ilcd", "lciamethods", "lifecyclemodels", "processes", "sources", "unitgroups"];
+    readonly relationConsumers: {
+        readonly contacts: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+        readonly flowproperties: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/dataset-maintenance-flow-identity-capture.ts", "src/lib/process-refresh-references.ts"];
+        readonly flows: readonly ["src/lib/flow-read.ts", "src/lib/flow-list.ts", "src/lib/flow-publish-version.ts", "src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/dataset-maintenance-flow-identity-capture.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+        readonly ilcd: readonly [];
+        readonly lciamethods: readonly ["src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/process-refresh-references.ts"];
+        readonly lifecyclemodels: readonly ["src/lib/lifecyclemodel-bundle-save.ts", "src/lib/process-dedup-review.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/supabase-json-ordered-write.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+        readonly processes: readonly ["src/lib/process-get.ts", "src/lib/process-list.ts", "src/lib/process-save-draft.ts", "src/lib/process-scope-statistics.ts", "src/lib/process-dedup-review.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/supabase-json-ordered-write.ts", "src/lib/supabase-rest.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+        readonly sources: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/supabase-json-ordered-write.ts", "src/lib/process-refresh-references.ts", "src/lib/dataset-maintenance-clear-account.ts"];
+        readonly unitgroups: readonly ["src/lib/dataset-save-draft-run.ts", "src/lib/dataset-remote-verify.ts", "src/lib/dataset-maintenance-remote.ts", "src/lib/dataset-maintenance-flow-identity-capture.ts", "src/lib/process-refresh-references.ts"];
+    };
+    readonly views: readonly [];
+    readonly rpcs: {
+        readonly cmd_dataset_alias_execution_admit_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_alias_execution_admit_guarded(p_request jsonb)';
+        };
+        readonly cmd_dataset_alias_execution_gate_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_alias_execution_gate_guarded(p_request_id uuid, p_preflight_token text, p_gate_name text)';
+        };
+        readonly cmd_dataset_alias_execution_preflight_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_alias_execution_preflight_guarded(p_request jsonb)';
+        };
+        readonly cmd_dataset_alias_execution_read: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_alias_execution_read(p_request_id uuid)';
+        };
+        readonly cmd_dataset_delete: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_delete(p_table text, p_id uuid, p_version text, p_audit jsonb)';
+        };
+        readonly cmd_dataset_derivative_rebuild_plan_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_derivative_rebuild_plan_guarded(p_plan jsonb)';
+        };
+        readonly cmd_dataset_derivative_rebuild_read: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_derivative_rebuild_read(p_request_id uuid)';
+        };
+        readonly cmd_dataset_derivative_rebuild_snapshot: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_derivative_rebuild_snapshot(p_table text, p_id uuid, p_version text)';
+        };
+        readonly cmd_dataset_flow_identity_capture_attest_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_flow_identity_capture_attest_guarded(p_request jsonb)';
+        };
+        readonly cmd_dataset_flow_identity_process_rewrite_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_flow_identity_process_rewrite_guarded(p_scope_id uuid, p_request jsonb, p_authorization jsonb)';
+        };
+        readonly cmd_dataset_flow_identity_scope_finalize_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_flow_identity_scope_finalize_guarded(p_scope_id uuid, p_request jsonb, p_authorization jsonb)';
+        };
+        readonly cmd_dataset_flow_identity_scope_lookup: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_flow_identity_scope_lookup(p_request jsonb)';
+        };
+        readonly cmd_dataset_flow_identity_scope_preflight_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_flow_identity_scope_preflight_guarded(p_request jsonb)';
+        };
+        readonly cmd_dataset_flow_identity_scope_read: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_flow_identity_scope_read(p_scope_id uuid)';
+        };
+        readonly cmd_dataset_flow_identity_scope_recover_guarded: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_flow_identity_scope_recover_guarded(p_scope_id uuid, p_request jsonb)';
+        };
+        readonly cmd_dataset_save_draft: {
+            readonly targetSchema: 'api';
+            readonly signature: 'api.cmd_dataset_save_draft(p_table text, p_id uuid, p_version text, p_json_ordered jsonb, p_model_id uuid, p_rule_verification boolean, p_audit jsonb)';
+        };
+    };
+    readonly rpcReplayClassification: {
+        readonly cmd_dataset_alias_execution_admit_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_alias_execution_gate_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_alias_execution_preflight_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_alias_execution_read: {
+            readonly operation: 'read';
+            readonly authRefreshReplay: 'once-after-401-403';
+        };
+        readonly cmd_dataset_delete: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_derivative_rebuild_plan_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_derivative_rebuild_read: {
+            readonly operation: 'read';
+            readonly authRefreshReplay: 'once-after-401-403';
+        };
+        readonly cmd_dataset_derivative_rebuild_snapshot: {
+            readonly operation: 'read';
+            readonly authRefreshReplay: 'once-after-401-403';
+        };
+        readonly cmd_dataset_flow_identity_capture_attest_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_flow_identity_process_rewrite_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_flow_identity_scope_finalize_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_flow_identity_scope_lookup: {
+            readonly operation: 'read';
+            readonly authRefreshReplay: 'once-after-401-403';
+        };
+        readonly cmd_dataset_flow_identity_scope_preflight_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_flow_identity_scope_read: {
+            readonly operation: 'read';
+            readonly authRefreshReplay: 'once-after-401-403';
+        };
+        readonly cmd_dataset_flow_identity_scope_recover_guarded: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+        readonly cmd_dataset_save_draft: {
+            readonly operation: 'mutation';
+            readonly authRefreshReplay: 'never';
+        };
+    };
+    readonly cliRolePolicy: {
+        readonly anon: 'deny';
+        readonly authenticated: 'allow';
+        readonly service_role: 'deny';
+    };
+    readonly retryPolicy: {
+        readonly reads: 'GET/HEAD and manifest-classified read RPCs permit one auth-refresh replay only after 401/403';
+        readonly mutations: 'no automatic transport retry; recovery must use the capability idempotency/read path';
+    };
+    readonly retiredCapabilities: readonly [{
+        readonly capability: 'rpc:cmd_dataset_alias_plan_guarded';
+        readonly targetSchema: 'private';
+        readonly reason: 'The whole-plan executor is private. Authenticated CLI execution uses the frozen alias execution preflight/gate/admit/read api capabilities.';
+    }];
+    readonly blockers: readonly [];
+};
+export type ResolvedDataApiCapability = {
+    kind: 'relation' | 'rpc';
+    name: string;
+    schema: 'public' | 'api';
+    profile: DataApiProfile;
+    role: DataApiRole;
+    signature: string | null;
+};
+export declare function resolveDataApiProfile(env?: NodeJS.ProcessEnv): DataApiProfile;
+export declare function resolveDataApiCapability(options: {
+    kind: 'relation' | 'rpc';
+    name: string;
+    env?: NodeJS.ProcessEnv;
+    profile?: DataApiProfile;
+    role?: DataApiRole;
+}): ResolvedDataApiCapability;
+export declare function applyDataApiProfileHeaders(headers: HeadersInit | undefined, capability: ResolvedDataApiCapability, method?: string): Record<string, string>;
+export declare function resolveDataApiCapabilityFromUrl(options: {
+    url: string;
+    method?: string;
+    env?: NodeJS.ProcessEnv;
+    profile?: DataApiProfile;
+}): ResolvedDataApiCapability;
+export declare function isDataApiUrl(url: string): boolean;
+export declare function buildDataApiUrl(restBaseUrl: string, capability: Pick<ResolvedDataApiCapability, 'kind' | 'name'>): string;

package/dist/src/lib/supabase-data-api-replay.d.ts

@@ -0,0 +1,74 @@
+export type RpcReplayClassification = {
+    operation: 'read' | 'mutation';
+    authRefreshReplay: 'once-after-401-403' | 'never';
+};
+export declare const DATA_API_RPC_REPLAY_CLASSIFICATION: {
+    readonly cmd_dataset_alias_execution_admit_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_alias_execution_gate_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_alias_execution_preflight_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_alias_execution_read: {
+        readonly operation: 'read';
+        readonly authRefreshReplay: 'once-after-401-403';
+    };
+    readonly cmd_dataset_delete: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_derivative_rebuild_plan_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_derivative_rebuild_read: {
+        readonly operation: 'read';
+        readonly authRefreshReplay: 'once-after-401-403';
+    };
+    readonly cmd_dataset_derivative_rebuild_snapshot: {
+        readonly operation: 'read';
+        readonly authRefreshReplay: 'once-after-401-403';
+    };
+    readonly cmd_dataset_flow_identity_capture_attest_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_flow_identity_process_rewrite_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_flow_identity_scope_finalize_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_flow_identity_scope_lookup: {
+        readonly operation: 'read';
+        readonly authRefreshReplay: 'once-after-401-403';
+    };
+    readonly cmd_dataset_flow_identity_scope_preflight_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_flow_identity_scope_read: {
+        readonly operation: 'read';
+        readonly authRefreshReplay: 'once-after-401-403';
+    };
+    readonly cmd_dataset_flow_identity_scope_recover_guarded: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+    readonly cmd_dataset_save_draft: {
+        readonly operation: 'mutation';
+        readonly authRefreshReplay: 'never';
+    };
+};
+export declare function isDataApiAuthRefreshReplaySafe(options: {
+    url: string;
+    method: string;
+}): boolean;

package/dist/src/lib/supabase-json-ordered-write.d.ts

@@ -0,0 +1,65 @@
+import { type DatasetCommandTransport } from './dataset-command.js';
+import type { FetchLike } from './http.js';
+import { createSupabaseDataClient } from './supabase-client.js';
+type JsonObject = Record<string, unknown>;
+export type SupabaseJsonOrderedTable = 'lifecyclemodels' | 'processes' | 'sources';
+export type SupabaseJsonOrderedWriteMode = 'upsert_current_version' | 'append_only_insert';
+export type SupabaseJsonOrderedWriteOperation = 'insert' | 'update_existing' | 'update_after_insert_error' | 'skipped_existing';
+export type SupabaseJsonOrderedWriteResult = {
+    status: 'success';
+    operation: SupabaseJsonOrderedWriteOperation;
+};
+type VisibleRow = {
+    id: string;
+    version: string;
+    state_code: number | null;
+};
+type SupabaseDataClient = ReturnType<typeof createSupabaseDataClient>['client'];
+declare function buildSelectUrl(restBaseUrl: string, table: SupabaseJsonOrderedTable, id: string, version: string): string;
+declare function buildUpdateUrl(restBaseUrl: string, table: SupabaseJsonOrderedTable, id: string, version: string): string;
+declare function parseVisibleRows(payload: unknown, url: string): VisibleRow[];
+declare function exactVisibleRows(options: {
+    client: SupabaseDataClient;
+    restBaseUrl: string;
+    table: SupabaseJsonOrderedTable;
+    id: string;
+    version: string;
+}): Promise<VisibleRow[]>;
+declare function insertJsonOrderedRow(options: {
+    transport: DatasetCommandTransport;
+    table: SupabaseJsonOrderedTable;
+    id: string;
+    payload: JsonObject;
+    extraData?: JsonObject;
+}): Promise<void>;
+declare function updateJsonOrderedRow(options: {
+    transport: DatasetCommandTransport;
+    table: SupabaseJsonOrderedTable;
+    id: string;
+    version: string;
+    payload: JsonObject;
+    extraData?: JsonObject;
+}): Promise<void>;
+declare function requireNonEmptyToken(value: string, label: string, code: string): string;
+export declare function hasSupabaseRestRuntime(env: NodeJS.ProcessEnv | undefined): boolean;
+export declare function syncSupabaseJsonOrderedRecord(options: {
+    table: SupabaseJsonOrderedTable;
+    id: string;
+    version: string;
+    payload: JsonObject;
+    writeMode: SupabaseJsonOrderedWriteMode;
+    env: NodeJS.ProcessEnv;
+    fetchImpl: FetchLike;
+    timeoutMs?: number;
+    extraData?: JsonObject;
+}): Promise<SupabaseJsonOrderedWriteResult>;
+export declare const __testInternals: {
+    buildSelectUrl: typeof buildSelectUrl;
+    buildUpdateUrl: typeof buildUpdateUrl;
+    parseVisibleRows: typeof parseVisibleRows;
+    exactVisibleRows: typeof exactVisibleRows;
+    insertJsonOrderedRow: typeof insertJsonOrderedRow;
+    updateJsonOrderedRow: typeof updateJsonOrderedRow;
+    requireNonEmptyToken: typeof requireNonEmptyToken;
+};
+export {};

package/dist/src/lib/supabase-rest.d.ts

@@ -0,0 +1,26 @@
+import type { FetchLike } from './http.js';
+import { deriveSupabaseRestBaseUrl, requireSupabaseRestRuntime, type SupabaseDataRuntime } from './supabase-client.js';
+type JsonObject = Record<string, unknown>;
+export type SupabaseProcessRow = {
+    id: string;
+    version: string;
+    json: unknown;
+    modified_at: string | null;
+    state_code: number | null;
+};
+export type SupabaseProcessLookup = {
+    row: SupabaseProcessRow;
+    sourceUrl: string;
+    resolution: 'remote_supabase_exact' | 'remote_supabase_latest' | 'remote_supabase_latest_fallback';
+};
+declare function normalizeSupabaseProcessPayload(payload: unknown, lookupKey: string): JsonObject;
+declare function fetchExactOrLatestProcessRow(options: {
+    runtime: SupabaseDataRuntime;
+    id: string;
+    version?: string | null;
+    timeoutMs: number;
+    fetchImpl: FetchLike;
+    fallbackToLatest?: boolean;
+}): Promise<SupabaseProcessLookup | null>;
+export { requireSupabaseRestRuntime, deriveSupabaseRestBaseUrl, normalizeSupabaseProcessPayload, fetchExactOrLatestProcessRow, };
+export type { SupabaseDataRuntime };

package/dist/src/lib/supabase-session.d.ts

@@ -0,0 +1,115 @@
+import { type Session } from '@supabase/supabase-js';
+import type { FetchLike } from './http.js';
+import { type SupabaseDataRuntime, type SupabaseRestRuntime } from './supabase-client.js';
+export type CachedSupabaseSessionRecord = {
+    schema_version: 1;
+    supabase_url: string;
+    publishable_key_fingerprint: string;
+    user_api_key_fingerprint: string;
+    user_email: string;
+    access_token: string;
+    refresh_token: string;
+    expires_at: number | null;
+    updated_at_utc: string;
+};
+export type ResolvedSupabaseUserSession = {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number | null;
+    userEmail: string;
+    projectBaseUrl: string;
+    sessionFile: string | null;
+    source: 'memory' | 'cache' | 'refresh' | 'signin';
+};
+type RuntimeIdentity = {
+    projectBaseUrl: string;
+    publishableKeyFingerprint: string;
+    userApiKeyFingerprint: string;
+    sessionFilePath: string | null;
+    memoKey: string;
+};
+declare function computeExpiresAt(session: Session, now: Date): number | null;
+declare function parseCachedSessionRecord(value: unknown): CachedSupabaseSessionRecord | null;
+declare function resolveDefaultSessionFilePath(options: {
+    platform: NodeJS.Platform;
+    homeDir: string;
+    xdgStateHome: string | null;
+    localAppData: string | null;
+}): string;
+declare function resolveSessionFilePath(runtime: SupabaseRestRuntime): string | null;
+declare function buildRuntimeIdentity(runtime: SupabaseRestRuntime): RuntimeIdentity;
+declare function recordMatchesRuntime(record: CachedSupabaseSessionRecord, runtime: RuntimeIdentity): boolean;
+declare function isSessionFresh(record: CachedSupabaseSessionRecord, now: Date): boolean;
+declare function buildCachedSessionRecord(options: {
+    runtime: RuntimeIdentity;
+    session: Session;
+    userEmail: string;
+    now: Date;
+}): CachedSupabaseSessionRecord;
+declare function readCachedSessionRecord(sessionFilePath: string): CachedSupabaseSessionRecord | null;
+declare function writeCachedSessionRecord(sessionFilePath: string, record: CachedSupabaseSessionRecord): void;
+declare function getMemoizedRecord(runtime: RuntimeIdentity): CachedSupabaseSessionRecord | null;
+declare function memoizeRecord(runtime: RuntimeIdentity, record: CachedSupabaseSessionRecord): void;
+declare function dropMemoizedRecord(runtime: RuntimeIdentity): void;
+declare function withSessionOperationLock<T>(memoKey: string, task: () => Promise<T>): Promise<T>;
+declare function createSupabaseAuthClient(runtime: RuntimeIdentity, publishableKey: string, fetchImpl: FetchLike, timeoutMs: number): import("@supabase/supabase-js").SupabaseClient<any, "public", "public", any, any>;
+declare function signInWithUserApiKey(options: {
+    runtime: SupabaseRestRuntime;
+    runtimeIdentity: RuntimeIdentity;
+    fetchImpl: FetchLike;
+    timeoutMs: number;
+    now: Date;
+}): Promise<CachedSupabaseSessionRecord>;
+declare function refreshWithRefreshToken(options: {
+    runtime: SupabaseRestRuntime;
+    runtimeIdentity: RuntimeIdentity;
+    refreshToken: string;
+    userEmail: string;
+    fetchImpl: FetchLike;
+    timeoutMs: number;
+    now: Date;
+}): Promise<CachedSupabaseSessionRecord | null>;
+declare function resolveAndPersistSession(options: {
+    runtime: SupabaseRestRuntime;
+    runtimeIdentity: RuntimeIdentity;
+    fetchImpl: FetchLike;
+    timeoutMs: number;
+    now: Date;
+    forceRefresh: boolean;
+}): Promise<ResolvedSupabaseUserSession>;
+export declare function resolveSupabaseUserSession(options: {
+    runtime: SupabaseRestRuntime;
+    fetchImpl: FetchLike;
+    timeoutMs?: number;
+    now?: Date;
+    forceRefresh?: boolean;
+}): Promise<ResolvedSupabaseUserSession>;
+export declare function createSupabaseDataRuntime(options: {
+    runtime: SupabaseRestRuntime;
+    fetchImpl: FetchLike;
+    timeoutMs?: number;
+    now?: Date;
+}): SupabaseDataRuntime;
+export declare const __testInternals: {
+    SESSION_MEMORY_CACHE: Map<string, CachedSupabaseSessionRecord>;
+    SESSION_OPERATION_CHAINS: Map<string, Promise<void>>;
+    buildCachedSessionRecord: typeof buildCachedSessionRecord;
+    buildRuntimeIdentity: typeof buildRuntimeIdentity;
+    computeExpiresAt: typeof computeExpiresAt;
+    createSupabaseAuthClient: typeof createSupabaseAuthClient;
+    dropMemoizedRecord: typeof dropMemoizedRecord;
+    getMemoizedRecord: typeof getMemoizedRecord;
+    isSessionFresh: typeof isSessionFresh;
+    memoizeRecord: typeof memoizeRecord;
+    parseCachedSessionRecord: typeof parseCachedSessionRecord;
+    readCachedSessionRecord: typeof readCachedSessionRecord;
+    recordMatchesRuntime: typeof recordMatchesRuntime;
+    refreshWithRefreshToken: typeof refreshWithRefreshToken;
+    resolveDefaultSessionFilePath: typeof resolveDefaultSessionFilePath;
+    resolveAndPersistSession: typeof resolveAndPersistSession;
+    resolveSessionFilePath: typeof resolveSessionFilePath;
+    signInWithUserApiKey: typeof signInWithUserApiKey;
+    withSessionOperationLock: typeof withSessionOperationLock;
+    writeCachedSessionRecord: typeof writeCachedSessionRecord;
+};
+export {};

package/dist/src/lib/tidas-languages.d.ts

@@ -0,0 +1,3 @@
+export declare const TIDAS_LANGUAGE_CODES: readonly ['aa', 'ab', 'ae', 'af', 'ak', 'am', 'an', 'ar', 'as', 'av', 'ay', 'az', 'ba', 'be', 'bg', 'bh', 'bi', 'bm', 'bn', 'bo', 'br', 'bs', 'ca', 'ce', 'ch', 'co', 'cr', 'cs', 'cu', 'cv', 'cy', 'da', 'de', 'dv', 'dz', 'ee', 'el', 'en', 'eo', 'es', 'et', 'eu', 'fa', 'ff', 'fi', 'fj', 'fo', 'fr', 'fy', 'ga', 'gd', 'gl', 'gn', 'gu', 'gv', 'ha', 'he', 'hi', 'ho', 'hr', 'ht', 'hu', 'hy', 'hz', 'ia', 'id', 'ie', 'ig', 'ii', 'ik', 'io', 'is', 'it', 'iu', 'ja', 'jv', 'ka', 'kg', 'ki', 'kj', 'kk', 'kl', 'km', 'kn', 'ko', 'kr', 'ks', 'ku', 'kv', 'kw', 'ky', 'la', 'lb', 'lg', 'li', 'ln', 'lo', 'lt', 'lu', 'lv', 'mg', 'mh', 'mi', 'mk', 'ml', 'mn', 'mo', 'mr', 'ms', 'mt', 'my', 'na', 'nb', 'nd', 'ne', 'ng', 'nl', 'nn', 'no', 'nr', 'nv', 'ny', 'oc', 'oj', 'om', 'or', 'os', 'pa', 'pi', 'pl', 'ps', 'pt', 'qu', 'rm', 'rn', 'ro', 'ru', 'rw', 'sa', 'sc', 'sd', 'se', 'sg', 'si', 'sk', 'sl', 'sm', 'sn', 'so', 'sq', 'sr', 'ss', 'st', 'su', 'sv', 'sw', 'ta', 'te', 'tg', 'th', 'ti', 'tk', 'tl', 'tn', 'to', 'tr', 'ts', 'tt', 'tw', 'ty', 'ug', 'uk', 'ur', 'uz', 've', 'vi', 'vo', 'wa', 'wo', 'xh', 'yi', 'yo', 'za', 'zh', 'zu'];
+export type TidasLanguageCode = (typeof TIDAS_LANGUAGE_CODES)[number];
+export declare const TIDAS_LANGUAGE_CODE_SET: ReadonlySet<string>;