@weave-kit/engine 0.1.0

package/dist/core/i18n/zh.js

@@ -0,0 +1,193 @@
+export const zh = {
+    'storage.alter.requiredNoDefault': '对象 "{object}"：不能给已有表添加无默认值的必填列 "{column}"——请加默认值或去掉 required',
+    'tools.dir.missing': '工具目录 "{dir}" 不存在',
+    'tools.tool.invalid': '无效的工具定义: {detail}',
+    'tools.tool.name.invalid': '工具名 "{name}" 必须匹配 {pattern}',
+    'tools.tool.name.reserved': '工具名 "{name}" 已被保留',
+    'tools.tool.handler.missing': '工具 "{name}": 必须提供 handler 函数',
+    'tools.tool.schema.invalid': '工具 "{name}": inputSchema 必须是合法的 JSON Schema 对象',
+    'mcp.policy.denied': '请求被护栏策略拒绝：{reason}',
+    'mcp.approval.pending': '需要审批——待批键：{approvalKey}',
+    'mcp.approval.notFound': '审批 "{approvalKey}" 不存在或已处理',
+    'object.notObject': '对象定义必须是 JSON 对象',
+    'object.name.required': '对象 "{object}"：name 必填',
+    'object.name.snake': '对象 "{object}"：名称必须为 snake_case',
+    'object.nameHint.mismatch': '目录名 "{dir}" 与对象名 "{name}" 不一致',
+    'object.fields.required': '对象 "{object}" 必须声明至少一个字段',
+    'object.field.duplicate': '对象 "{object}" 字段 "{field}" 重复',
+    'object.primary.none': '对象 "{object}" 必须声明且仅声明一个主键字段',
+    'object.alter.boolean': '对象 "{object}"：alter 必须是布尔值',
+    'data.schemaDrift': 'schema/DB 漂移：对象 "{object}" 声明了字段 "{field}"，但表缺少该列——运行 "weave migrate"，或在 objects/{object}/schema.json 中设置 "alter": true',
+    'object.primary.many': '对象 "{object}" 只能有一个主键字段',
+    'object.primary.scalarOnly': 'primary 仅允许标量字段，不能是 "{type}"',
+    'object.primary.columnMissing': '对象 "{object}"：主键字段 "{column}" 不存在于已有表 "{table}"',
+    'object.field.columnMissing': '对象 "{object}"：字段 "{field}" 不是已有表 "{table}" 中的列',
+    'field.notObject': '对象 "{object}"：字段定义必须是对象',
+    'field.name.required': '对象 "{object}"：字段名必填',
+    'field.name.snake': '对象 "{object}"：字段名 "{name}" 必须为 snake_case',
+    'field.type.invalid': '对象 "{object}"：type "{type}" 不是合法字段类型',
+    'field.type.disabled': '对象 "{object}"：type "{type}" 已禁用——需在 features.fieldTypes 中启用',
+    'field.attr.notAllowed': '对象 "{object}"：type={type} 不允许属性 "{attr}"',
+    'field.attr.string': '对象 "{object}"：属性 "{attr}" 必须是字符串',
+    'field.attr.boolean': '对象 "{object}"：属性 "{attr}" 必须是布尔值',
+    'field.attr.number': '对象 "{object}"：属性 "{attr}" 必须是数字',
+    'field.attr.positiveInt': '对象 "{object}"：属性 "{attr}" 必须是正整数',
+    'field.default.string': '对象 "{object}"：default 必须是字符串',
+    'field.default.integer': '对象 "{object}"：default 必须是整数',
+    'field.default.number': '对象 "{object}"：default 必须是数字',
+    'field.default.boolean': '对象 "{object}"：default 必须是布尔值',
+    'field.default.iso': '对象 "{object}"：default 必须是字符串（ISO 8601 或 "now"）',
+    'field.default.inOptions': '对象 "{object}"：default "{value}" 不在 options 中',
+    'field.default.notSupported': '对象 "{object}"：type {type} 不支持 default',
+    'field.minGtMax': '对象 "{object}"：min 不能大于 max',
+    'field.minLengthGtMaxLength': '对象 "{object}"：minLength 不能大于 maxLength',
+    'field.regex.invalid': '对象 "{object}"：regex 不是合法正则表达式',
+    'field.min.integer': '对象 "{object}"：min 必须是整数',
+    'field.max.integer': '对象 "{object}"：max 必须是整数',
+    'field.enum.options.required': '对象 "{object}"：enum 必须有非空 options',
+    'field.enum.options.strings': '对象 "{object}"：enum options 必须全是字符串',
+    'field.enum.options.duplicate': '对象 "{object}"：enum options 存在重复值 "{value}"',
+    'field.enum.multiple.primary': '对象 "{object}"：enum multiple 字段不能是 primary',
+    'field.enum.multiple.unique': '对象 "{object}"：enum multiple 字段不支持 unique',
+    'field.enum.multiple.default.array': '对象 "{object}"：enum multiple 的 default 必须是字符串数组',
+    'field.enum.multiple.default.inOptions': '对象 "{object}"：default 值 "{value}" 不在 options 中',
+    'field.relation.target.required': '对象 "{object}"：relation 必须声明 target',
+    'field.relation.target.snake': '对象 "{object}"：target "{target}" 必须为 snake_case',
+    'field.relation.onDelete.invalid': '对象 "{object}"：onDelete 必须是：{actions}',
+    'field.details.target.required': '对象 "{object}"：details 必须声明 target',
+    'field.details.target.snake': '对象 "{object}"：target "{target}" 必须为 snake_case',
+    'field.multiRelation.target.required': '对象 "{object}"：multiRelation 必须声明 target',
+    'field.multiRelation.target.snake': '对象 "{object}"：target "{target}" 必须为 snake_case',
+    'field.seqNo.format.seq': '对象 "{object}"：seq_no 的 format 必须包含 {seq} 占位符',
+    'field.seqNo.format.token': '对象 "{object}"：seq_no 的 format 含不支持的占位符 "{token}"',
+    'field.seqNo.cycle.invalid': '对象 "{object}"：seq_no 的 cycle 必须是 none/year',
+    'field.labels.notObject': '对象 "{object}"：labels 必须是 locale 到字符串的对象',
+    'field.labels.locale.invalid': '对象 "{object}"：labels 键 "{locale}" 不是合法 locale 标签',
+    'field.labels.value.string': '对象 "{object}"：labels 的 "{locale}" 值必须是非空字符串',
+    'permission.notObject': '对象 "{object}"：permissions 必须是对象',
+    'permission.role.notObject': '对象 "{object}"：角色 "{role}" 的权限必须是对象',
+    'permission.read.invalid': '对象 "{object}"：角色 "{role}" 的 read 必须是 own/team/all',
+    'permission.create.boolean': '对象 "{object}"：角色 "{role}" 的 create 必须是布尔值',
+    'permission.delete.boolean': '对象 "{object}"：角色 "{role}" 的 delete 必须是布尔值',
+    'permission.update.invalid': '角色 "{role}" 的 update 必须是布尔值或字符串数组',
+    'permission.exclude.strings': '对象 "{object}"：角色 "{role}" 的 fields.exclude 必须是字符串数组',
+    'permission.fields.notObject': '对象 "{object}"：角色 "{role}" 的 fields 必须是对象',
+    'permission.createFields.strings': '对象 "{object}"：角色 "{role}" 的 fields.create 必须是字符串数组',
+    'permission.createFields.unknown': '对象 "{object}"：角色 "{role}" 的 fields.create 引用了未知字段 "{field}"',
+    'permission.createFields.missingRequired': '对象 "{object}"：角色 "{role}" 的 fields.create 必须包含必填字段 "{field}"',
+    'permission.own.ownershipField': '对象 "{object}"：角色 "{role}" 的 read:own 需要一个 ownership 标记的 string 字段',
+    'permission.team.teamField': '对象 "{object}"：角色 "{role}" 的 read:team 需要一个 team 标记的 string 字段',
+    'field.ownership.many': '对象 "{object}"：至多一个字段可标记 ownership: true',
+    'field.team.many': '对象 "{object}"：至多一个字段可标记 team: true',
+    'index.notArray': '对象 "{object}"：indexes 必须是数组',
+    'index.notObject': '对象 "{object}"：索引 {i} 必须是对象',
+    'index.type.invalid': '对象 "{object}"：索引 {i} 的 type 必须是：{types}',
+    'index.fields.invalid': '对象 "{object}"：索引 {i} 的 fields 必须是非空字符串数组',
+    'title.notString': '对象 "{object}"：titleTemplate 必须是字符串',
+    'title.placeholder.missing': '对象 "{object}"：titleTemplate 占位符 "{field}" 引用不存在的字段',
+    'title.placeholder.relation': '对象 "{object}"：titleTemplate 占位符 "{field}" 不能引用 {type} 字段',
+    'title.placeholder.multiEnum': '对象 "{object}"：titleTemplate 占位符 "{field}" 不能引用多选 enum 字段',
+    'graph.relation.target.missing': '对象 "{object}" 的 relation 字段 "{field}" 指向不存在的目标 "{target}"',
+    'graph.details.self': '对象 "{object}" 的 details 字段 "{field}" 不能指向自身',
+    'graph.details.target.missing': '对象 "{object}" 的 details 字段 "{field}" 指向不存在的子对象 "{target}"',
+    'graph.details.parentPkString': 'details 父对象 "{object}" 的主键必须为 string 类型',
+    'graph.details.reserved': '子对象 "{object}" 不能声明保留列 "{column}"',
+    'graph.multiRelation.self': '对象 "{object}" 的 multiRelation 字段 "{field}" 不能指向自身',
+    'graph.multiRelation.target.missing': '对象 "{object}" 的 multiRelation 字段 "{field}" 指向不存在的目标 "{target}"',
+    'registry.duplicate': '对象 "{name}" 重复定义',
+    'parse.json.invalid': 'schema.json 不是合法 JSON',
+    'formula.syntax': '对象 "{object}"：公式语法错误：{detail}',
+    'formula.excludedAttr': '对象 "{object}"：公式字段不能含有 {attr}',
+    'formula.refMissing': '对象 "{object}"：公式引用了不存在的字段 "{field}"',
+    'formula.refType': '对象 "{object}"：公式不能引用 {type} 字段 "{field}"',
+    'formula.aggregateMissing': '对象 "{object}"：公式聚合引用了子对象 "{child}" 上不存在的字段 "{field}"',
+    'formula.typeMismatch': '对象 "{object}"：公式结果类型（{got}）与字段类型（{expected}）不兼容',
+    'formula.operandType': '对象 "{object}"：运算符 {op} 需要 {expected} 操作数，实际是 {got}',
+    'formula.cycle': '检测到公式循环：{chain}',
+    'data.field.unknown': '对象 "{object}"：未知字段 "{field}"',
+    'data.field.readonly': '对象 "{object}"：字段 "{field}" 只读',
+    'data.field.required': '对象 "{object}"：字段 "{field}" 必填',
+    'data.field.type': '对象 "{object}"：字段 "{field}" 的值必须是 {type}',
+    'data.field.enum': '对象 "{object}"：字段 "{field}" 的值必须是 {options} 之一',
+    'data.field.min': '对象 "{object}"：字段 "{field}" 的值必须 >= {min}',
+    'data.field.max': '对象 "{object}"：字段 "{field}" 的值必须 <= {max}',
+    'data.field.minLength': '对象 "{object}"：字段 "{field}" 至少 {min} 个字符',
+    'data.field.maxLength': '对象 "{object}"：字段 "{field}" 最多 {max} 个字符',
+    'data.field.regex': '对象 "{object}"：字段 "{field}" 的值不符合格式',
+    'data.field.relationMissing': '对象 "{object}"：字段 "{field}" 引用的记录（{value}）不存在',
+    'data.field.multiRelationMissing': '对象 "{object}"：字段 "{field}" 的部分值不存在',
+    'data.details.rejected': '对象 "{object}"：更新不允许嵌套 details——子行请经子对象 CRUD 管理',
+    'data.objectUnknown': '对象 "{object}" 不存在',
+    'data.recordNotFound': '对象 "{object}"：记录 "{id}" 不存在',
+    'rbac.denied.read': '对象 "{object}"：角色 "{role}" 无读取权限',
+    'rbac.denied.create': '对象 "{object}"：角色 "{role}" 无创建权限',
+    'rbac.denied.update': '对象 "{object}"：角色 "{role}" 无更新权限',
+    'rbac.denied.delete': '对象 "{object}"：角色 "{role}" 无删除权限',
+    'rbac.denied.field': '对象 "{object}"：角色 "{role}" 无权更新字段 "{field}"',
+    'rbac.teamId.missing': '对象 "{object}"：read:team 需要主体携带 teamId',
+    'auth.missingKey': '缺少 Bearer API Key',
+    'auth.invalidKey': 'API Key 无效',
+    'auth.notConfigured': '未配置认证（auth）— 拒绝启动',
+    'engine.databaseUrl.missing': 'databaseUrl 必填（请设置 config.databaseUrl 或 DATABASE_URL 环境变量）',
+    'git.notRepo': '"{dir}" 不是 git 仓库',
+    'git.command.failed': 'git {command} 失败：{detail}',
+    'loader.dir.missing': '元数据目录 "{dir}" 不存在',
+    'loader.file.read': '无法读取 schema 文件 "{file}"',
+    'http.param.invalid': '参数 "{param}" 的值无效',
+    'http.notFound': '路由不存在',
+    'http.rateLimited': '\u901f\u7387\u9650\u5236\u5df2\u8d85\u51fa',
+    'http.internal': '服务器内部错误',
+    'audit.denied.actor': '查询其他操作者的审计记录需要管理员角色',
+    'approval.notFound': '未找到待审批项 "{approvalKey}"',
+    'mcp.onBehalfOf.missing': "MCP 会话需要 X-Weavekit-On-Behalf-Of 请求头",
+    'mcp.identity.unknown': "身份 \"{ref}\" 未知",
+    'mcp.session.notFound': "找不到 MCP 会话 \"{session}\"",
+    'mcp.tool.notFound': "找不到 MCP 工具 \"{tool}\"",
+    'mcp.rateLimited': "已超出 MCP 速率限制，请稍后重试",
+    'script.abort': '脚本钩子 "{hook}" 拒绝了该操作：{message}',
+    'script.timeout': '脚本 "{script}" 执行超时（{timeout}ms）',
+    'script.compile': '无法编译脚本文件 "{file}"：{detail}',
+    'script.query.invalid': '受限 SQL 被拒绝：{detail}',
+    'script.query.denied': '对象 "{object}" 的受限 SQL 被拒绝：{detail}',
+    'script.busy': '脚本子系统繁忙：并发脚本过多（{limit}）',
+    'script.sandbox.unavailable': '脚本沙箱不可用——请安装 "isolated-vm"（npm install isolated-vm）或关闭 subsystems.script',
+    'schema.version.unsupported': '不支持的 schema 格式版本 "{version}"（本引擎最高支持 {supported}）',
+    'quota.exceeded': '“{key}” 超出配额（每 {period} 上限 {limit}）',
+    'ingress.unauthorized': '来源 "{source}" 的入站事件被拒绝',
+    'http.conflict': '冲突：{detail}',
+    'source.versionMismatch': '源码版本不匹配：期望 "{expectVersion}"，当前为 "{version}"',
+    'page.exists': '页面 "{id}" 已存在',
+    'page.ref.inUse': '页面 "{id}" 仍被 {count} 处引用：{refs}',
+    'layout.file.invalid': '无效的布局文件',
+    'layout.node.invalid': '布局节点不是对象',
+    'layout.node.typeMissing': '布局节点缺少 "type"',
+    'layout.node.unknown': '未知布局节点类型 "{type}"',
+    'layout.node.notAllowed': '节点类型 "{type}" 不允许出现在 profile "{profile}"（位于 {path}）',
+    'layout.objectList.singleList': 'object-list 配置仅允许一个且仅一个 list 块（实际 {count} 个），不允许其它块',
+    'layout.uiId.missing': '布局节点缺少 "ui_id"',
+    'layout.uiId.duplicate': '"ui_id" "{ui_id}" 重复（首次声明于 {first}）',
+    'layout.children.invalid': '布局节点 "{type}" 的子节点无效',
+    'layout.tab.labelMissing': '标签页缺少 label',
+    'layout.tab.uiIdMissing': '标签页缺少 "ui_id"',
+    'layout.column.uiIdMissing': 'grid column is missing `ui_id`',
+    'layout.viewport.unknown': '未知视口 "{viewport}"',
+    'layout.viewport.invalid': '视口 "{viewport}" 无效',
+    'layout.viewport.mode.invalid': '视口 "{viewport}" 的 mode 必须为 "vertical" 或 "horizontal"',
+    'layout.shell.outletMissing': '壳视口 "{viewport}" 必须包含一个 outlet',
+    'layout.sidebar.target.conflict': '侧边栏项 "{label}" 必须且只能使用 "page" 或 "href" 之一',
+    'layout.pageRef.invalid': '无效的页面引用',
+    'layout.outlet.nameMissing': 'outlet 缺少 name',
+    'layout.object.unknown': '对象 "{object}" 不存在',
+    'layout.field.nameMissing': '字段条目缺少字段名',
+    'layout.field.onlyInFields': '字段条目只能位于 `fields` 容器内',
+    'layout.fields.childInvalid': '`fields` 容器只能包含 `field` 条目',
+    'layout.columns.invalid': '对象 "{object}" 的列 "{field}" 无效',
+    'layout.list.defaultSort.invalid': 'list 的 "defaultSort" 必须为 { field, dir: asc|desc }',
+    'layout.block.objectForbidden': '块 "{type}" 不得绑定对象',
+    'proxy.unreachable': '客户引擎 "{instance}" 不可达',
+    'proxy.timeout': '代理请求 "{instance}" 超时（{timeout}ms）',
+    'proxy.notFound': '代理目标 "{instance}" 不存在',
+    'proxy.denied': '代理请求被拒绝',
+    'proxy.responseTooLarge': '来自 "{instance}" 的代理响应超过 {max} 字节',
+};
+//# sourceMappingURL=zh.js.map

package/dist/core/i18n/zh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zh.js","sourceRoot":"","sources":["../../../src/core/i18n/zh.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,EAAE,GAA+B;IAC5C,iCAAiC,EAAE,8DAA8D;IACjG,mBAAmB,EAAE,kBAAkB;IACvC,oBAAoB,EAAE,mBAAmB;IACzC,yBAAyB,EAAE,6BAA6B;IACxD,0BAA0B,EAAE,mBAAmB;IAC/C,4BAA4B,EAAE,8BAA8B;IAC5D,2BAA2B,EAAE,gDAAgD;IAC7E,mBAAmB,EAAE,oBAAoB;IACzC,sBAAsB,EAAE,yBAAyB;IACjD,uBAAuB,EAAE,4BAA4B;IACrD,kBAAkB,EAAE,iBAAiB;IACrC,sBAAsB,EAAE,uBAAuB;IAC/C,mBAAmB,EAAE,gCAAgC;IACrD,0BAA0B,EAAE,+BAA+B;IAC3D,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,+BAA+B;IACzD,qBAAqB,EAAE,8BAA8B;IACrD,sBAAsB,EAAE,4BAA4B;IACpD,kBAAkB,EAAE,yHAAyH;IAC7I,qBAAqB,EAAE,yBAAyB;IAChD,2BAA2B,EAAE,8BAA8B;IAC3D,8BAA8B,EAAE,iDAAiD;IACjF,4BAA4B,EAAE,gDAAgD;IAC9E,iBAAiB,EAAE,yBAAyB;IAC5C,qBAAqB,EAAE,qBAAqB;IAC5C,kBAAkB,EAAE,2CAA2C;IAC/D,oBAAoB,EAAE,sCAAsC;IAC5D,qBAAqB,EAAE,6DAA6D;IACpF,uBAAuB,EAAE,0CAA0C;IACnE,mBAAmB,EAAE,kCAAkC;IACvD,oBAAoB,EAAE,kCAAkC;IACxD,mBAAmB,EAAE,iCAAiC;IACtD,wBAAwB,EAAE,kCAAkC;IAC5D,sBAAsB,EAAE,8BAA8B;IACtD,uBAAuB,EAAE,6BAA6B;IACtD,sBAAsB,EAAE,6BAA6B;IACrD,uBAAuB,EAAE,8BAA8B;IACvD,mBAAmB,EAAE,gDAAgD;IACrE,yBAAyB,EAAE,8CAA8C;IACzE,4BAA4B,EAAE,uCAAuC;IACrE,gBAAgB,EAAE,4BAA4B;IAC9C,4BAA4B,EAAE,wCAAwC;IACtE,qBAAqB,EAAE,+BAA+B;IACtD,mBAAmB,EAAE,yBAAyB;IAC9C,mBAAmB,EAAE,yBAAyB;IAC9C,6BAA6B,EAAE,kCAAkC;IACjE,4BAA4B,EAAE,oCAAoC;IAClE,8BAA8B,EAAE,4CAA4C;IAC5E,6BAA6B,EAAE,2CAA2C;IAC1E,4BAA4B,EAAE,0CAA0C;IACxE,mCAAmC,EAAE,gDAAgD;IACrF,uCAAuC,EAAE,gDAAgD;IACzF,gCAAgC,EAAE,oCAAoC;IACtE,6BAA6B,EAAE,gDAAgD;IAC/E,iCAAiC,EAAE,sCAAsC;IACzE,+BAA+B,EAAE,mCAAmC;IACpE,4BAA4B,EAAE,gDAAgD;IAC9E,qCAAqC,EAAE,yCAAyC;IAChF,kCAAkC,EAAE,gDAAgD;IACpF,wBAAwB,EAAE,8CAA8C;IACxE,0BAA0B,EAAE,kDAAkD;IAC9E,2BAA2B,EAAE,4CAA4C;IACzE,wBAAwB,EAAE,yCAAyC;IACnE,6BAA6B,EAAE,kDAAkD;IACjF,2BAA2B,EAAE,6CAA6C;IAC1E,sBAAsB,EAAE,iCAAiC;IACzD,2BAA2B,EAAE,oCAAoC;IACjE,yBAAyB,EAAE,mDAAmD;IAC9E,2BAA2B,EAAE,2CAA2C;IACxE,2BAA2B,EAAE,2CAA2C;IACxE,2BAA2B,EAAE,mCAAmC;IAChE,4BAA4B,EAAE,qDAAqD;IACnF,6BAA6B,EAAE,0CAA0C;IACzE,iCAAiC,EAAE,oDAAoD;IACvF,iCAAiC,EAAE,6DAA6D;IAChG,yCAAyC,EAAE,8DAA8D;IACzG,+BAA+B,EAAE,mEAAmE;IACpG,2BAA2B,EAAE,+DAA+D;IAC5F,sBAAsB,EAAE,yCAAyC;IACjE,iBAAiB,EAAE,oCAAoC;IACvD,gBAAgB,EAAE,6BAA6B;IAC/C,iBAAiB,EAAE,4BAA4B;IAC/C,oBAAoB,EAAE,yCAAyC;IAC/D,sBAAsB,EAAE,0CAA0C;IAClE,iBAAiB,EAAE,oCAAoC;IACvD,2BAA2B,EAAE,oDAAoD;IACjF,4BAA4B,EAAE,0DAA0D;IACxF,6BAA6B,EAAE,0DAA0D;IACzF,+BAA+B,EAAE,2DAA2D;IAC5F,oBAAoB,EAAE,6CAA6C;IACnE,8BAA8B,EAAE,2DAA2D;IAC3F,8BAA8B,EAAE,yCAAyC;IACzE,wBAAwB,EAAE,mCAAmC;IAC7D,0BAA0B,EAAE,mDAAmD;IAC/E,oCAAoC,EAAE,gEAAgE;IACtG,oBAAoB,EAAE,kBAAkB;IACxC,oBAAoB,EAAE,uBAAuB;IAC7C,gBAAgB,EAAE,+BAA+B;IACjD,sBAAsB,EAAE,+BAA+B;IACvD,oBAAoB,EAAE,qCAAqC;IAC3D,iBAAiB,EAAE,0CAA0C;IAC7D,0BAA0B,EAAE,sDAAsD;IAClF,sBAAsB,EAAE,iDAAiD;IACzE,qBAAqB,EAAE,oDAAoD;IAC3E,eAAe,EAAE,iBAAiB;IAClC,oBAAoB,EAAE,8BAA8B;IACpD,qBAAqB,EAAE,+BAA+B;IACtD,qBAAqB,EAAE,+BAA+B;IACtD,iBAAiB,EAAE,yCAAyC;IAC5D,iBAAiB,EAAE,+CAA+C;IAClE,gBAAgB,EAAE,0CAA0C;IAC5D,gBAAgB,EAAE,0CAA0C;IAC5D,sBAAsB,EAAE,yCAAyC;IACjE,sBAAsB,EAAE,yCAAyC;IACjE,kBAAkB,EAAE,oCAAoC;IACxD,4BAA4B,EAAE,8CAA8C;IAC5E,iCAAiC,EAAE,oCAAoC;IACvE,uBAAuB,EAAE,gDAAgD;IACzE,oBAAoB,EAAE,mBAAmB;IACzC,qBAAqB,EAAE,6BAA6B;IACpD,kBAAkB,EAAE,iCAAiC;IACrD,oBAAoB,EAAE,iCAAiC;IACvD,oBAAoB,EAAE,iCAAiC;IACvD,oBAAoB,EAAE,iCAAiC;IACvD,mBAAmB,EAAE,4CAA4C;IACjE,qBAAqB,EAAE,uCAAuC;IAC9D,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,YAAY;IAC/B,oBAAoB,EAAE,mBAAmB;IACzC,4BAA4B,EAAE,4DAA4D;IAC1F,aAAa,EAAE,mBAAmB;IAClC,oBAAoB,EAAE,2BAA2B;IACjD,oBAAoB,EAAE,mBAAmB;IACzC,kBAAkB,EAAE,yBAAyB;IAC7C,oBAAoB,EAAE,mBAAmB;IACzC,eAAe,EAAE,OAAO;IACxB,kBAAkB,EAAE,4CAA4C;IAChE,eAAe,EAAE,SAAS;IAC1B,oBAAoB,EAAE,qBAAqB;IAC3C,mBAAmB,EAAE,yBAAyB;IAC9C,wBAAwB,EAAE,sCAAsC;IAChE,sBAAsB,EAAE,iBAAiB;IACzC,sBAAsB,EAAE,0BAA0B;IAClD,mBAAmB,EAAE,uBAAuB;IAC5C,iBAAiB,EAAE,oBAAoB;IACvC,cAAc,EAAE,gCAAgC;IAChD,gBAAgB,EAAE,iCAAiC;IACnD,gBAAgB,EAAE,4BAA4B;IAC9C,sBAAsB,EAAE,qBAAqB;IAC7C,qBAAqB,EAAE,oCAAoC;IAC3D,aAAa,EAAE,yBAAyB;IACxC,4BAA4B,EAAE,0EAA0E;IACxG,4BAA4B,EAAE,mDAAmD;IACjF,gBAAgB,EAAE,qCAAqC;IACvD,sBAAsB,EAAE,wBAAwB;IAChD,eAAe,EAAE,aAAa;IAC9B,wBAAwB,EAAE,8CAA8C;IACxE,aAAa,EAAE,eAAe;IAC9B,gBAAgB,EAAE,iCAAiC;IACnD,qBAAqB,EAAE,SAAS;IAChC,qBAAqB,EAAE,UAAU;IACjC,yBAAyB,EAAE,eAAe;IAC1C,qBAAqB,EAAE,mBAAmB;IAC1C,wBAAwB,EAAE,qDAAqD;IAC/E,8BAA8B,EAAE,qDAAqD;IACrF,qBAAqB,EAAE,gBAAgB;IACvC,uBAAuB,EAAE,qCAAqC;IAC9D,yBAAyB,EAAE,sBAAsB;IACjD,yBAAyB,EAAE,aAAa;IACxC,wBAAwB,EAAE,eAAe;IACzC,2BAA2B,EAAE,gCAAgC;IAC7D,yBAAyB,EAAE,mBAAmB;IAC9C,yBAAyB,EAAE,oBAAoB;IAC/C,8BAA8B,EAAE,sDAAsD;IACtF,4BAA4B,EAAE,gCAAgC;IAC9D,gCAAgC,EAAE,2CAA2C;IAC7E,wBAAwB,EAAE,SAAS;IACnC,2BAA2B,EAAE,gBAAgB;IAC7C,uBAAuB,EAAE,mBAAmB;IAC5C,0BAA0B,EAAE,WAAW;IACvC,2BAA2B,EAAE,uBAAuB;IACpD,4BAA4B,EAAE,4BAA4B;IAC1D,wBAAwB,EAAE,+BAA+B;IACzD,iCAAiC,EAAE,mDAAmD;IACtF,8BAA8B,EAAE,mBAAmB;IACnD,mBAAmB,EAAE,uBAAuB;IAC5C,eAAe,EAAE,mCAAmC;IACpD,gBAAgB,EAAE,uBAAuB;IACzC,cAAc,EAAE,SAAS;IACzB,wBAAwB,EAAE,kCAAkC;CACpD,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,13 @@
+export * from './types/index.js';
+export * from './object/index.js';
+export * from './i18n/index.js';
+export * from './formula/index.js';
+export * from './storage/index.js';
+export * from './rbac/index.js';
+export * from './audit/index.js';
+export * from './script/index.js';
+export * from './limiter/index.js';
+export * from './provider/index.js';
+export * from './tools/index.js';
+export * from './proxy/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,13 @@
+export * from './types/index.js';
+export * from './object/index.js';
+export * from './i18n/index.js';
+export * from './formula/index.js';
+export * from './storage/index.js';
+export * from './rbac/index.js';
+export * from './audit/index.js';
+export * from './script/index.js';
+export * from './limiter/index.js';
+export * from './provider/index.js';
+export * from './tools/index.js';
+export * from './proxy/index.js';
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/core/limiter/counter.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Durable fixed-period counter contract — the mechanism behind quotas and
+ * usage budgets. Pure interface (zero dependencies); the PG implementation
+ * lives in `subsystems/quota` and is injected by the assembly layer, mirroring
+ * `ApprovalsBackend` (see `MEMORY/approvals.md`).
+ *
+ * The engine owns atomicity and storage; the application owns the semantics
+ * (which key, which limit, which period) — it calls `consume` around its own
+ * outbound/integration work. Quota keys are opaque to the engine.
+ */
+/** supported fixed accounting periods (UTC boundaries) */
+export declare const COUNTER_PERIODS: {
+    readonly DAY: "day";
+    readonly MONTH: "month";
+};
+export type CounterPeriod = typeof COUNTER_PERIODS[keyof typeof COUNTER_PERIODS];
+/** outcome of an atomic {@link CounterStore.consume} */
+export interface CounterConsume {
+    /** true when the increment was applied (`value + amount` stayed within `limit`) */
+    allowed: boolean;
+    /** the stored value (after a successful increment, or unchanged when denied) */
+    value: number;
+}
+/**
+ * Fixed-period counters keyed by an arbitrary string. Implementations MUST make
+ * `consume` atomic and safe across engine instances (single-statement compare +
+ * increment), so a multi-instance deployment cannot overspend a budget.
+ */
+export interface CounterStore {
+    /**
+     * Atomically add `amount` to `key` in the period starting at `periodStart`,
+     * applying it only when the result stays `<= limit`. A denied consume leaves
+     * the counter untouched.
+     */
+    consume(key: string, amount: number, limit: number, periodStart: Date): Promise<CounterConsume>;
+    /** current value for `key` in the period starting at `periodStart` (0 when absent). */
+    value(key: string, periodStart: Date): Promise<number>;
+}
+//# sourceMappingURL=counter.d.ts.map

package/dist/core/limiter/counter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"counter.d.ts","sourceRoot":"","sources":["../../../src/core/limiter/counter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,0DAA0D;AAC1D,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAEjF,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,mFAAmF;IACnF,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChG,uFAAuF;IACvF,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxD"}

package/dist/core/limiter/counter.js

@@ -0,0 +1,16 @@
+/**
+ * Durable fixed-period counter contract — the mechanism behind quotas and
+ * usage budgets. Pure interface (zero dependencies); the PG implementation
+ * lives in `subsystems/quota` and is injected by the assembly layer, mirroring
+ * `ApprovalsBackend` (see `MEMORY/approvals.md`).
+ *
+ * The engine owns atomicity and storage; the application owns the semantics
+ * (which key, which limit, which period) — it calls `consume` around its own
+ * outbound/integration work. Quota keys are opaque to the engine.
+ */
+/** supported fixed accounting periods (UTC boundaries) */
+export const COUNTER_PERIODS = {
+    DAY: 'day',
+    MONTH: 'month',
+};
+//# sourceMappingURL=counter.js.map

package/dist/core/limiter/counter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"counter.js","sourceRoot":"","sources":["../../../src/core/limiter/counter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;CACN,CAAC"}

package/dist/core/limiter/index.d.ts

@@ -0,0 +1,7 @@
+export { createSlidingWindow } from './sliding-window.js';
+export type { SlidingWindow, SlidingWindowOptions } from './sliding-window.js';
+export { COUNTER_PERIODS } from './counter.js';
+export type { CounterConsume, CounterPeriod, CounterStore } from './counter.js';
+export { assertQuota, consumeQuota, periodBounds } from './quota.js';
+export type { QuotaDecision, QuotaPolicy } from './quota.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/limiter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/limiter/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/limiter/index.js

@@ -0,0 +1,4 @@
+export { createSlidingWindow } from './sliding-window.js';
+export { COUNTER_PERIODS } from './counter.js';
+export { assertQuota, consumeQuota, periodBounds } from './quota.js';
+//# sourceMappingURL=index.js.map

package/dist/core/limiter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/limiter/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/limiter/quota.d.ts

@@ -0,0 +1,45 @@
+import type { Locale } from '../i18n/index.js';
+import { type CounterPeriod, type CounterStore } from './counter.js';
+/**
+ * Pure quota/budget evaluation on top of a {@link CounterStore}. A quota is a
+ * hard period budget (e.g. "10000 integration calls per month"), which is a
+ * different product capability from the in-memory sliding-window rate limiter
+ * (`sliding-window.ts`): rate = request velocity, quota = durable spend.
+ */
+/** a fixed-period budget policy */
+export interface QuotaPolicy {
+    /** maximum amount allowed per period */
+    limit: number;
+    /** accounting period (UTC boundaries) */
+    period: CounterPeriod;
+}
+/** the result of consuming against a policy */
+export interface QuotaDecision {
+    /** true when the amount was within budget and has been consumed */
+    allowed: boolean;
+    limit: number;
+    /** value after a successful consume (unchanged when denied) */
+    value: number;
+    /** budget left after this decision (never negative) */
+    remaining: number;
+    /** inclusive start of the current period (UTC) */
+    periodStart: Date;
+    /** exclusive start of the next period (UTC) */
+    resetAt: Date;
+}
+/** the [start, resetAt) bounds of the period containing `now` (UTC). */
+export declare function periodBounds(now: Date, period: CounterPeriod): {
+    start: Date;
+    resetAt: Date;
+};
+/**
+ * Consume `amount` (default 1) against `policy`; never throws — inspect
+ * `allowed`. Use this when the caller wants to decide what a denial means.
+ */
+export declare function consumeQuota(store: CounterStore, key: string, policy: QuotaPolicy, amount?: number, now?: Date): Promise<QuotaDecision>;
+/**
+ * Consume or throw a localized `quota.exceeded` (429-family). The natural
+ * opt-in enforcement point for an outbound integration call.
+ */
+export declare function assertQuota(store: CounterStore, key: string, policy: QuotaPolicy, locale: Locale, amount?: number, now?: Date): Promise<QuotaDecision>;
+//# sourceMappingURL=quota.d.ts.map

package/dist/core/limiter/quota.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../../src/core/limiter/quota.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAmB,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEtF;;;;;GAKG;AAEH,mCAAmC;AACnC,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,+CAA+C;AAC/C,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,WAAW,EAAE,IAAI,CAAC;IAClB,+CAA+C;IAC/C,OAAO,EAAE,IAAI,CAAC;CACf;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,GAAG;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,CAS7F;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,EACnB,MAAM,SAAI,EACV,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,aAAa,CAAC,CAWxB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,SAAI,EACV,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,aAAa,CAAC,CAMxB"}

package/dist/core/limiter/quota.js

@@ -0,0 +1,41 @@
+import { SchemaError } from '../types/errors.js';
+import { COUNTER_PERIODS } from './counter.js';
+/** the [start, resetAt) bounds of the period containing `now` (UTC). */
+export function periodBounds(now, period) {
+    if (period === COUNTER_PERIODS.MONTH) {
+        const start = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1));
+        const resetAt = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth() + 1, 1));
+        return { start, resetAt };
+    }
+    const start = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
+    const resetAt = new Date(start.getTime() + 24 * 60 * 60 * 1000);
+    return { start, resetAt };
+}
+/**
+ * Consume `amount` (default 1) against `policy`; never throws — inspect
+ * `allowed`. Use this when the caller wants to decide what a denial means.
+ */
+export async function consumeQuota(store, key, policy, amount = 1, now = new Date()) {
+    const { start, resetAt } = periodBounds(now, policy.period);
+    const { allowed, value } = await store.consume(key, amount, policy.limit, start);
+    return {
+        allowed,
+        limit: policy.limit,
+        value,
+        remaining: Math.max(0, policy.limit - value),
+        periodStart: start,
+        resetAt,
+    };
+}
+/**
+ * Consume or throw a localized `quota.exceeded` (429-family). The natural
+ * opt-in enforcement point for an outbound integration call.
+ */
+export async function assertQuota(store, key, policy, locale, amount = 1, now) {
+    const decision = await consumeQuota(store, key, policy, amount, now);
+    if (!decision.allowed) {
+        throw new SchemaError('quota.exceeded', { key, limit: policy.limit, period: policy.period }, locale);
+    }
+    return decision;
+}
+//# sourceMappingURL=quota.js.map

package/dist/core/limiter/quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.js","sourceRoot":"","sources":["../../../src/core/limiter/quota.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAyC,MAAM,cAAc,CAAC;AAgCtF,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,GAAS,EAAE,MAAqB;IAC3D,IAAI,MAAM,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAmB,EACnB,GAAW,EACX,MAAmB,EACnB,MAAM,GAAG,CAAC,EACV,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjF,OAAO;QACL,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5C,WAAW,EAAE,KAAK;QAClB,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAmB,EACnB,GAAW,EACX,MAAmB,EACnB,MAAc,EACd,MAAM,GAAG,CAAC,EACV,GAAU;IAEV,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/limiter/sliding-window.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generic sliding-window rate limiter (core, zero dependencies). Shared by the
+ * MCP guardrails and the REST adapter so both endpoints throttle by the same
+ * algorithm. Instances are created per caller (REST and MCP keep their own).
+ */
+export interface SlidingWindow {
+    /** record a hit for `key`; returns true when within the limit, false when exceeded */
+    check(key: string, now?: number): boolean;
+    /** drop all recorded hits (used on shutdown / reset) */
+    clear(): void;
+}
+export interface SlidingWindowOptions {
+    /** window length in ms; defaults to 60_000 */
+    windowMs?: number;
+    /** max hits per window; defaults to 100 */
+    max?: number;
+}
+/** in-memory sliding-window limiter keyed by an arbitrary string (agent key, ...) */
+export declare function createSlidingWindow(options?: SlidingWindowOptions): SlidingWindow;
+//# sourceMappingURL=sliding-window.d.ts.map

package/dist/core/limiter/sliding-window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliding-window.d.ts","sourceRoot":"","sources":["../../../src/core/limiter/sliding-window.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,wDAAwD;IACxD,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAqBrF"}

package/dist/core/limiter/sliding-window.js

@@ -0,0 +1,29 @@
+/**
+ * Generic sliding-window rate limiter (core, zero dependencies). Shared by the
+ * MCP guardrails and the REST adapter so both endpoints throttle by the same
+ * algorithm. Instances are created per caller (REST and MCP keep their own).
+ */
+/** in-memory sliding-window limiter keyed by an arbitrary string (agent key, ...) */
+export function createSlidingWindow(options = {}) {
+    const windowMs = options.windowMs ?? 60_000;
+    const max = options.max ?? 100;
+    const hits = new Map();
+    function check(key, now = Date.now()) {
+        const window = hits.get(key) ?? [];
+        const cutoff = now - windowMs;
+        while (window.length > 0 && window[0] <= cutoff)
+            window.shift();
+        if (window.length >= max)
+            return false;
+        window.push(now);
+        hits.set(key, window);
+        return true;
+    }
+    return {
+        check,
+        clear() {
+            hits.clear();
+        },
+    };
+}
+//# sourceMappingURL=sliding-window.js.map

package/dist/core/limiter/sliding-window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliding-window.js","sourceRoot":"","sources":["../../../src/core/limiter/sliding-window.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEzC,SAAS,KAAK,CAAC,GAAW,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,IAAI,MAAM;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/object/describe.d.ts

@@ -0,0 +1,76 @@
+import type { Locale } from '../i18n/index.js';
+import { type ReadScope } from '../types/index.js';
+import type { ObjectRegistry } from './registry.js';
+/**
+ * Metadata description — the engine's neutral "schema + permissions" view,
+ * shared by the MCP introspection tools and the REST metadata/permissions
+ * endpoints (M11). Protocol-agnostic: describes type semantics only (enum
+ * options, relation targets, multiple), never UI/widget hints — the Headless
+ * line stays intact; frontends derive controls from field types.
+ */
+/** one field as seen by a frontend — type semantics only */
+export interface MetadataField {
+    name: string;
+    type: string;
+    label: string;
+    description?: string;
+    required?: boolean;
+    options?: string[];
+    multiple?: boolean;
+    target?: string;
+    /** for `person` fields: the department FK field name on the person target object */
+    department?: string;
+    /** true when this field is the object's primary key (the CRUD id field for frontends) */
+    primary?: boolean;
+    /** true for engine-managed read-only fields (system / formula); `seq_no` is derivable from its type */
+    readOnly?: boolean;
+}
+/** a relation field (weak/strong/multi) as a named edge */
+export interface MetadataRelation {
+    field: string;
+    type: string;
+    target?: string;
+}
+/** effective permissions for one identity on one object */
+export interface MetadataPermissions {
+    read?: ReadScope;
+    create: boolean;
+    /** null = every field updatable; [] = none; otherwise the field whitelist */
+    update: string[] | null;
+    delete: boolean;
+    /** fields hidden from read output for this identity */
+    excludedFields: string[];
+    /** null = all writable fields allowed on create; [] = none; otherwise the whitelist */
+    createFields: string[] | null;
+}
+/** full object descriptor: schema + the identity's effective permissions */
+export interface ObjectDescriptor {
+    name: string;
+    label: string;
+    description?: string;
+    titleTemplate?: string;
+    fields: MetadataField[];
+    relations: MetadataRelation[];
+    permissions: MetadataPermissions;
+}
+/** minimal list entry (object name/label/description) */
+export interface ObjectListEntry {
+    name: string;
+    label: string;
+    description?: string;
+}
+/** objects the identity can read — the frontend menu/list minimum (mirrors MCP list_objects) */
+export declare function listObjectDescriptors(registry: ObjectRegistry, roles: readonly string[]): ObjectListEntry[];
+/**
+ * Full descriptor for one object (schema + effective permissions, excluded
+ * fields stripped). Throws `data.objectUnknown` (unknown object) or
+ * `rbac.denied.read` (identity may not read it).
+ */
+export declare function describeObject(registry: ObjectRegistry, name: string, roles: readonly string[], locale: Locale): ObjectDescriptor;
+/** per-object effective permissions for the identity (any resolved permission — read, create, update or delete) */
+export declare function listObjectPermissions(registry: ObjectRegistry, roles: readonly string[]): Array<{
+    name: string;
+    label: string;
+    permissions: MetadataPermissions;
+}>;
+//# sourceMappingURL=describe.d.ts.map

package/dist/core/object/describe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe.d.ts","sourceRoot":"","sources":["../../../src/core/object/describe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD;;;;;;GAMG;AAEH,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uGAAuG;IACvG,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,uDAAuD;IACvD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,uFAAuF;IACvF,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAC/B;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,WAAW,EAAE,mBAAmB,CAAC;CAClC;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA8CD,gGAAgG;AAChG,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,EAAE,CAK3G;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,MAAM,EAAE,MAAM,GACb,gBAAgB,CA4BlB;AAED,mHAAmH;AACnH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAS1E"}