@weave-kit/engine 0.1.0

package/dist/subsystems/script/dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../../src/subsystems/script/dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,MAAM,EACX,KAAK,cAAc,EAGnB,KAAK,gBAAgB,EAErB,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAO3E,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,2DAA2D;IAC3D,UAAU,EAAE,gBAAgB,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,mFAAmF;AACnF,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAEX,eAAO,MAAM,gBAAgB,mBAAmB,CAAC;AAEjD,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,oBAAoB,CAUrF;AAmBD;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiGxG"}

package/dist/subsystems/script/dispatcher.js

@@ -0,0 +1,143 @@
+import { SCRIPT_HOOKS, SchemaError, } from '../../core/index.js';
+import { PAGINATION } from '../../runtime/data-access/index.js';
+import { createIsolatedVmSandboxBackend } from './backend/isolated-vm.js';
+import { createScriptRpcExecutor } from './bridge.js';
+import { loadScriptDir } from './loader.js';
+import { createDefaultScriptServices } from './services.js';
+/** sandbox resource defaults (`weavekit.config.ts → subsystems.script.sandbox`) */
+export const SCRIPT_DEFAULTS = {
+    timeout: 5000,
+    queryTimeout: 2000,
+    memoryLimit: 64 * 1024 * 1024,
+    maxConcurrentScripts: 10,
+};
+export const RLS_ROLE_DEFAULT = 'weavekit_query';
+export function resolveScriptConfig(config) {
+    const sandbox = config?.sandbox ?? {};
+    return {
+        timeout: sandbox.timeout ?? SCRIPT_DEFAULTS.timeout,
+        queryTimeout: sandbox.queryTimeout ?? SCRIPT_DEFAULTS.queryTimeout,
+        memoryLimit: sandbox.memoryLimit ?? SCRIPT_DEFAULTS.memoryLimit,
+        maxConcurrentScripts: sandbox.maxConcurrentScripts ?? SCRIPT_DEFAULTS.maxConcurrentScripts,
+        rlsRole: sandbox.rls?.role ?? RLS_ROLE_DEFAULT,
+        maxObjectsPerQuery: sandbox.maxObjectsPerQuery ?? PAGINATION.DEFAULT_LIMIT,
+    };
+}
+/** non-queueing concurrency cap: over the limit fails fast instead of deadlocking */
+class ConcurrencyGuard {
+    max;
+    active = 0;
+    constructor(max) {
+        this.max = max;
+    }
+    tryAcquire() {
+        if (this.active >= this.max)
+            return false;
+        this.active += 1;
+        return true;
+    }
+    release() {
+        this.active = Math.max(0, this.active - 1);
+    }
+}
+/**
+ * Assemble the write-path hook dispatcher.
+ *
+ * - discovers `objects/<name>/server.js` (only for registered objects)
+ * - lazily spawns one sandbox per script on first dispatch
+ * - enforces resource limits (timeout / queryTimeout / memory / concurrency)
+ * - before-hook errors throw (data-access aborts); after-hook errors are
+ *   caught by data-access and surfaced as warnings — the dispatcher itself
+ *   always throws on a hook failure and lets the caller decide
+ */
+export async function createScriptDispatcher(options) {
+    const { registry, pool, dataAccess, locale } = options;
+    const config = resolveScriptConfig(options.config);
+    const services = options.services ?? createDefaultScriptServices();
+    let backend;
+    try {
+        backend = createIsolatedVmSandboxBackend({
+            timeoutMs: config.timeout,
+            queryTimeoutMs: config.queryTimeout,
+            memoryLimitMb: Math.max(16, Math.floor(config.memoryLimit / (1024 * 1024))),
+        });
+    }
+    catch (error) {
+        // optional native dependency (`isolated-vm`) missing — fail with an
+        // actionable, localized startup error instead of a raw module error
+        if (error instanceof Error)
+            console.warn(`[weavekit:script] ${error.message}`);
+        throw new SchemaError('script.sandbox.unavailable', {}, locale);
+    }
+    const executor = createScriptRpcExecutor({
+        pool,
+        registry,
+        dataAccess,
+        services,
+        queryTimeoutMs: config.queryTimeout,
+        rlsRole: config.rlsRole,
+        maxObjectsPerQuery: config.maxObjectsPerQuery,
+        locale,
+    });
+    const guard = new ConcurrencyGuard(config.maxConcurrentScripts);
+    const scripts = (await loadScriptDir(options.objectsDir)).filter((s) => registry.get(s.name) !== undefined);
+    const instances = new Map();
+    const hooksByObject = new Map();
+    for (const script of scripts) {
+        instances.set(script.name, backend.create({ name: script.name, source: script.source, hooks: script.hooks }, executor));
+        hooksByObject.set(script.name, new Set(script.hooks));
+    }
+    const hasHook = (objectName, hook) => hooksByObject.get(objectName)?.has(hook) ?? false;
+    return {
+        has: hasHook,
+        async dispatch(objectName, hook, args) {
+            if (!hasHook(objectName, hook))
+                return { warnings: [] };
+            const instance = instances.get(objectName);
+            if (instance === undefined)
+                return { warnings: [] };
+            if (!guard.tryAcquire()) {
+                throw new SchemaError('script.busy', { limit: config.maxConcurrentScripts }, locale);
+            }
+            try {
+                const result = await instance.call(hook, args);
+                if (!result.ok) {
+                    const code = result.error?.code ?? 'abort';
+                    if (code === 'abort') {
+                        throw new SchemaError('script.abort', { hook, message: result.error?.message ?? 'unknown script error' }, locale);
+                    }
+                    throw new SchemaError('script.timeout', { script: `${objectName}.server.js`, timeout: config.timeout }, locale);
+                }
+                const value = result.value;
+                const changes = hook === SCRIPT_HOOKS.BEFORE_UPDATE && value !== null && typeof value === 'object'
+                    ? value
+                    : undefined;
+                const records = hook === SCRIPT_HOOKS.ON_LOAD && Array.isArray(value)
+                    ? value
+                    : undefined;
+                return { changes, records, warnings: [] };
+            }
+            finally {
+                guard.release();
+            }
+        },
+        async close() {
+            // Aggregate the shutdown-handshake results: a `false` means a worker
+            // never acknowledged `closed` (wedged) and was force-terminated, so its
+            // isolate release was NOT confirmed — surface that instead of pretending
+            // everything released cleanly (dev reload's "workers released" log only
+            // tells the truth when this is silent).
+            let allConfirmed = true;
+            for (const instance of instances.values()) {
+                const confirmed = await instance.close();
+                if (!confirmed)
+                    allConfirmed = false;
+            }
+            await backend.close();
+            if (!allConfirmed) {
+                console.warn('[weavekit:script] worker shutdown handshake timed out — forced terminate (isolate release not confirmed)');
+            }
+        },
+    };
+}
+//# sourceMappingURL=dispatcher.js.map

package/dist/subsystems/script/dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../../src/subsystems/script/dispatcher.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,WAAW,GASZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAGhE,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AA0B5D,mFAAmF;AACnF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC7B,oBAAoB,EAAE,EAAE;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IACtC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;QACnD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY;QAClE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC,WAAW;QAC/D,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,eAAe,CAAC,oBAAoB;QAC1F,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,IAAI,gBAAgB;QAC9C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,UAAU,CAAC,aAAa;KAC3E,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,gBAAgB;IAGS;IAFrB,MAAM,GAAG,CAAC,CAAC;IAEnB,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAE5C,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAgC;IAC3E,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACvD,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,2BAA2B,EAAE,CAAC;IAEnE,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,8BAA8B,CAAC;YACvC,SAAS,EAAE,MAAM,CAAC,OAAO;YACzB,cAAc,EAAE,MAAM,CAAC,YAAY;YACnC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oEAAoE;QACpE,oEAAoE;QACpE,IAAI,KAAK,YAAY,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,WAAW,CAAC,4BAA4B,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,cAAc,EAAE,MAAM,CAAC,YAAY;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,MAAM;KACP,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAG,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAE5G,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IACrD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA2B,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,SAAS,CAAC,GAAG,CACX,MAAM,CAAC,IAAI,EACX,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAC5F,CAAC;QACF,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,UAAkB,EAAE,IAAgB,EAAW,EAAE,CAChE,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;IAEpD,OAAO;QACL,GAAG,EAAE,OAAO;QAEZ,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,IAAwB;YACvD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAEpD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,oBAAoB,EAAE,EAAE,MAAM,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC;oBAC3C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;wBACrB,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,sBAAsB,EAAE,EAAE,MAAM,CAAC,CAAC;oBACpH,CAAC;oBACD,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,UAAU,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;gBAClH,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC3B,MAAM,OAAO,GACX,IAAI,KAAK,YAAY,CAAC,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAChF,CAAC,CAAE,KAAiC;oBACpC,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,OAAO,GACX,IAAI,KAAK,YAAY,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACnD,CAAC,CAAE,KAAmC;oBACtC,CAAC,CAAC,SAAS,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC5C,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK;YACT,qEAAqE;YACrE,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,wCAAwC;YACxC,IAAI,YAAY,GAAG,IAAI,CAAC;YACxB,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACzC,IAAI,CAAC,SAAS;oBAAE,YAAY,GAAG,KAAK,CAAC;YACvC,CAAC;YACD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,0GAA0G,CAAC,CAAC;YAC3H,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/subsystems/script/index.d.ts

@@ -0,0 +1,13 @@
+export { NOOP_SCRIPT_DISPATCHER, SCRIPT_HOOKS, } from '../../core/script/index.js';
+export type { EngineScriptConfig, ScriptContext, ScriptDb, ScriptDispatchArgs, ScriptDispatchResult, ScriptDispatcher, ScriptEmailSendOptions, ScriptFindOptions, ScriptFindResult, ScriptHook, ScriptObjectQueryBuilder, ScriptRestrictedQueryResult, ScriptServices, ScriptSlackPostOptions, ScriptSort, ScriptUser, ScriptWebhookCallOptions, } from '../../core/script/index.js';
+export { createScriptDispatcher, resolveScriptConfig, SCRIPT_DEFAULTS } from './dispatcher.js';
+export type { ResolvedScriptConfig, ScriptDispatcherOptions } from './dispatcher.js';
+export { createDefaultScriptServices } from './services.js';
+export { createScriptRpcExecutor } from './bridge.js';
+export type { ScriptBridgeOptions } from './bridge.js';
+export { loadScriptDir } from './loader.js';
+export type { LoadedScript } from './loader.js';
+export { createIsolatedVmSandboxBackend } from './backend/isolated-vm.js';
+export type { IsolatedVmSandboxOptions } from './backend/isolated-vm.js';
+export type { RpcExecutor, RpcRequest, SandboxBackend, SandboxCallResult, SandboxEntry, SandboxInstance, } from './backend/types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/subsystems/script/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/subsystems/script/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,QAAQ,EACR,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,cAAc,EACd,sBAAsB,EACtB,UAAU,EACV,UAAU,EACV,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC/F,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,YAAY,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,YAAY,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,oBAAoB,CAAC"}

package/dist/subsystems/script/index.js

@@ -0,0 +1,7 @@
+export { NOOP_SCRIPT_DISPATCHER, SCRIPT_HOOKS, } from '../../core/script/index.js';
+export { createScriptDispatcher, resolveScriptConfig, SCRIPT_DEFAULTS } from './dispatcher.js';
+export { createDefaultScriptServices } from './services.js';
+export { createScriptRpcExecutor } from './bridge.js';
+export { loadScriptDir } from './loader.js';
+export { createIsolatedVmSandboxBackend } from './backend/isolated-vm.js';
+//# sourceMappingURL=index.js.map

package/dist/subsystems/script/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/subsystems/script/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAoBpC,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/subsystems/script/loader.d.ts

@@ -0,0 +1,18 @@
+import { type ScriptHook } from '../../core/index.js';
+export interface LoadedScript {
+    /** object name (the parent directory name of server.js) */
+    name: string;
+    /** absolute path to the server.js file */
+    path: string;
+    /** raw source, sent to the sandbox for compilation */
+    source: string;
+    /** hook names detected statically (fast-path registration; compile happens in the sandbox) */
+    hooks: ScriptHook[];
+}
+/**
+ * Discover `objects/<name>/server.js` files. `.client.js` (a frontend concern)
+ * and `schema.json` are deliberately ignored. A syntax error is not detected
+ * here — the sandbox reports `script.compile` on first dispatch.
+ */
+export declare function loadScriptDir(objectsDir: string): Promise<LoadedScript[]>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/subsystems/script/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/subsystems/script/loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtF,MAAM,WAAW,YAAY;IAC3B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAcD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAqB/E"}

package/dist/subsystems/script/loader.js

@@ -0,0 +1,44 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+import { detectScriptHooks, SchemaError } from '../../core/index.js';
+async function collectScriptFiles(dir, out) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const full = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            await collectScriptFiles(full, out);
+        }
+        else if (entry.isFile() && entry.name === 'server.js') {
+            out.push(full);
+        }
+    }
+}
+/**
+ * Discover `objects/<name>/server.js` files. `.client.js` (a frontend concern)
+ * and `schema.json` are deliberately ignored. A syntax error is not detected
+ * here — the sandbox reports `script.compile` on first dispatch.
+ */
+export async function loadScriptDir(objectsDir) {
+    let paths = [];
+    try {
+        await collectScriptFiles(objectsDir, paths);
+    }
+    catch {
+        throw new SchemaError('loader.dir.missing', { dir: objectsDir });
+    }
+    paths = paths.sort();
+    const scripts = [];
+    for (const path of paths) {
+        const name = basename(dirname(path));
+        let source;
+        try {
+            source = await readFile(path, 'utf8');
+        }
+        catch {
+            throw new SchemaError('loader.file.read', { file: path });
+        }
+        scripts.push({ name, path, source, hooks: detectScriptHooks(source) });
+    }
+    return scripts;
+}
+//# sourceMappingURL=loader.js.map

package/dist/subsystems/script/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/subsystems/script/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAmB,MAAM,qBAAqB,CAAC;AAatF,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,GAAa;IAC1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAErB,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/subsystems/script/services.d.ts

@@ -0,0 +1,14 @@
+import type { ScriptServices } from '../../core/index.js';
+/**
+ * Default script-service implementations (main-process side of the bridge).
+ * The sandbox never performs network I/O itself — these run in the engine
+ * process and can be replaced via `subsystems.script.services`.
+ *
+ * email/slack require external credentials and throw "not configured" until
+ * the caller supplies an implementation (e.g. nodemailer / a webhook URL via
+ * env); webhook is functional out of the box (documented whitelist escape).
+ */
+export declare function createDefaultScriptServices(options?: {
+    fetch?: typeof globalThis.fetch;
+}): ScriptServices;
+//# sourceMappingURL=services.d.ts.map

package/dist/subsystems/script/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../../src/subsystems/script/services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EAEf,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;CAAO,GAAG,cAAc,CAiC7G"}

package/dist/subsystems/script/services.js

@@ -0,0 +1,48 @@
+/**
+ * Default script-service implementations (main-process side of the bridge).
+ * The sandbox never performs network I/O itself — these run in the engine
+ * process and can be replaced via `subsystems.script.services`.
+ *
+ * email/slack require external credentials and throw "not configured" until
+ * the caller supplies an implementation (e.g. nodemailer / a webhook URL via
+ * env); webhook is functional out of the box (documented whitelist escape).
+ */
+export function createDefaultScriptServices(options = {}) {
+    const fetchFn = options.fetch ?? globalThis.fetch;
+    return {
+        email: {
+            async send() {
+                throw new Error('services.email is not configured — provide subsystems.script.services');
+            },
+        },
+        slack: {
+            async post() {
+                throw new Error('services.slack is not configured — provide subsystems.script.services');
+            },
+        },
+        webhook: {
+            async call(opts) {
+                if (typeof fetchFn !== 'function')
+                    throw new Error('webhook.call requires a fetch implementation');
+                const response = await fetchFn(opts.url, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json', ...(opts.headers ?? {}) },
+                    body: opts.payload === undefined ? undefined : JSON.stringify(opts.payload),
+                    signal: AbortSignal.timeout(10_000),
+                });
+                if (!response.ok)
+                    throw new Error(`webhook.call failed: HTTP ${response.status}`);
+                const text = await response.text();
+                if (text === '')
+                    return undefined;
+                try {
+                    return JSON.parse(text);
+                }
+                catch {
+                    return text;
+                }
+            },
+        },
+    };
+}
+//# sourceMappingURL=services.js.map

package/dist/subsystems/script/services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../../src/subsystems/script/services.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAA+C,EAAE;IAC3F,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,OAAO;QACL,KAAK,EAAE;YACL,KAAK,CAAC,IAAI;gBACR,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;SACF;QACD,KAAK,EAAE;YACL,KAAK,CAAC,IAAI;gBACR,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;SACF;QACD,OAAO,EAAE;YACP,KAAK,CAAC,IAAI,CAAC,IAA8B;gBACvC,IAAI,OAAO,OAAO,KAAK,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACnG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;oBACvC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;oBACxE,IAAI,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC3E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,KAAK,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAClC,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/values.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Browser-safe schema-constant surface (`@weave-kit/engine/values`).
+ *
+ * Aggregates every pure, import-free `values.ts` module so frontends and other
+ * consumers can share the exact engine constants at runtime WITHOUT pulling the
+ * Node server runtime (pg/fastify/isolated-vm/…) into a browser bundle.
+ *
+ * **Hard rule**: every module re-exported here must stay import-free (pure
+ * `as const`). Adding an import breaks the browser-safety guarantee — guarded
+ * by `tests/unit/values-browser-safe.test.ts`.
+ */
+export * from './core/types/values.js';
+export * from './runtime/data-access/values.js';
+export * from './core/formula/values.js';
+export * from './core/tools/values.js';
+export * from './core/script/values.js';
+export * from './cli/types/values.js';
+//# sourceMappingURL=values.d.ts.map

package/dist/values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.d.ts","sourceRoot":"","sources":["../src/values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}

package/dist/values.js

@@ -0,0 +1,18 @@
+/**
+ * Browser-safe schema-constant surface (`@weave-kit/engine/values`).
+ *
+ * Aggregates every pure, import-free `values.ts` module so frontends and other
+ * consumers can share the exact engine constants at runtime WITHOUT pulling the
+ * Node server runtime (pg/fastify/isolated-vm/…) into a browser bundle.
+ *
+ * **Hard rule**: every module re-exported here must stay import-free (pure
+ * `as const`). Adding an import breaks the browser-safety guarantee — guarded
+ * by `tests/unit/values-browser-safe.test.ts`.
+ */
+export * from './core/types/values.js';
+export * from './runtime/data-access/values.js';
+export * from './core/formula/values.js';
+export * from './core/tools/values.js';
+export * from './core/script/values.js';
+export * from './cli/types/values.js';
+//# sourceMappingURL=values.js.map

package/dist/values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.js","sourceRoot":"","sources":["../src/values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,3 @@
+/** engine version — single source of truth for CLI, ops routes and MCP metadata */
+export declare const version = "0.1.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,3 @@
+/** engine version — single source of truth for CLI, ops routes and MCP metadata */
+export const version = '0.1.0';
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,89 @@
+{
+  "name": "@weave-kit/engine",
+  "version": "0.1.0",
+  "description": "WeaveKit engine — metadata-driven headless backend runtime",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./experimental": {
+      "types": "./dist/experimental.d.ts",
+      "default": "./dist/experimental.js"
+    },
+    "./values": {
+      "types": "./dist/values.d.ts",
+      "default": "./dist/values.js"
+    },
+    "./layout": {
+      "types": "./dist/layout-format.d.ts",
+      "default": "./dist/layout-format.js"
+    }
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=24"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "weavekit",
+    "headless",
+    "metadata",
+    "schema",
+    "postgres",
+    "rest",
+    "mcp",
+    "rbac",
+    "audit"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/weavekit/engine.git"
+  },
+  "scripts": {
+    "dev": "node --watch --import tsx src/index.ts",
+    "build": "tsc -p tsconfig.build.json",
+    "prepublishOnly": "npm run build",
+    "typecheck": "tsc --noEmit",
+    "prelint": "node scripts/check-memory-sizes.mjs",
+    "lint": "eslint .",
+    "test": "tsc -p tsconfig.build.json && node --env-file-if-exists=.env --import tsx --test \"tests/unit/**/*.test.ts\" && node --env-file-if-exists=.env --import tsx --test --test-concurrency=1 \"tests/e2e/*.test.ts\""
+  },
+  "bin": {
+    "weave": "./dist/cli/index.js"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/pg": "^8.20.4",
+    "eslint": "^9.0.0",
+    "typescript": "~5.9.0",
+    "typescript-eslint": "^8.0.0"
+  },
+  "dependencies": {
+    "@fastify/cors": "^11.3.0",
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@pgsql/traverse": "^18.7.7",
+    "cli-table3": "^0.6.5",
+    "commander": "^14.0.0",
+    "esbuild": "^0.25.0",
+    "fastify": "^5.11.2",
+    "kleur": "^4.1.5",
+    "pg": "^8.22.0",
+    "pgsql-parser": "^18.2.6",
+    "tsx": "^4.20.0"
+  },
+  "optionalDependencies": {
+    "isolated-vm": "^7.0.1"
+  }
+}