@weave-kit/engine 0.5.0 → 0.7.0

package/dist/runtime/identity/sync.js

@@ -0,0 +1,149 @@
+/** external ids that participate in a department parent cycle */
+function detectDepartmentCycles(parentOf) {
+    const cyclic = new Set();
+    const state = new Map();
+    for (const start of parentOf.keys()) {
+        if (state.has(start))
+            continue;
+        const stack = [];
+        let node = start;
+        while (node !== undefined && !state.has(node)) {
+            state.set(node, 1);
+            stack.push(node);
+            node = parentOf.get(node);
+        }
+        if (node !== undefined && state.get(node) === 1) {
+            const from = stack.indexOf(node);
+            for (let i = from; i < stack.length; i += 1)
+                cyclic.add(stack[i]);
+        }
+        for (const n of stack)
+            state.set(n, 2);
+    }
+    return cyclic;
+}
+export async function runIdentitySync(source, store, options = {}) {
+    const dryRun = options.dryRun === true;
+    const deactivate = options.deactivateMissing === true;
+    const warnings = [];
+    const previous = await store.getCursor(source.name);
+    const pulled = await source.pull(previous ?? undefined);
+    const existing = await store.listExternalIds(source.name);
+    const existingUsers = new Set(existing.users);
+    const existingDepts = new Set(existing.departments);
+    const parentOf = new Map();
+    for (const d of pulled.departments)
+        parentOf.set(d.externalId, d.parentExternalId);
+    const cyclic = detectDepartmentCycles(parentOf);
+    for (const id of cyclic)
+        warnings.push(`department "${id}" is part of a parent cycle; its parent link is ignored`);
+    const pulledUserIds = new Set(pulled.users.map((u) => u.externalId));
+    const pulledDeptIds = new Set(pulled.departments.map((d) => d.externalId));
+    const missingUsers = [...existingUsers].filter((id) => !pulledUserIds.has(id));
+    const missingDepts = [...existingDepts].filter((id) => !pulledDeptIds.has(id));
+    const users = {
+        created: pulled.users.filter((u) => !existingUsers.has(u.externalId)).length,
+        updated: pulled.users.filter((u) => existingUsers.has(u.externalId)).length,
+        disabled: deactivate ? missingUsers.length : 0,
+    };
+    const departments = {
+        created: pulled.departments.filter((d) => !existingDepts.has(d.externalId)).length,
+        updated: pulled.departments.filter((d) => existingDepts.has(d.externalId)).length,
+        disabled: deactivate ? missingDepts.length : 0,
+    };
+    if (!dryRun) {
+        // A. upsert departments (no links yet — a child may precede its parent)
+        const deptId = new Map();
+        for (const d of pulled.departments) {
+            const { id } = await store.upsertDepartment({
+                externalSource: source.name,
+                externalId: d.externalId,
+                name: d.name ?? null,
+                code: d.code ?? null,
+                enabled: d.enabled ?? null,
+            });
+            deptId.set(d.externalId, id);
+        }
+        const departmentIdFor = async (externalId) => {
+            if (externalId === undefined)
+                return null;
+            const known = deptId.get(externalId);
+            if (known !== undefined)
+                return known;
+            return (await store.findDepartmentByExternal(source.name, externalId))?.id ?? null;
+        };
+        // B. upsert users (department link; director resolved in C)
+        const userId = new Map();
+        for (const u of pulled.users) {
+            const { id } = await store.upsertUser({
+                externalSource: source.name,
+                externalId: u.externalId,
+                name: u.name ?? null,
+                email: u.email ?? null,
+                mobile: u.mobile ?? null,
+                roles: u.roles ?? [],
+                departmentId: await departmentIdFor(u.departmentExternalId),
+                directorId: null,
+                enabled: u.enabled ?? null,
+            });
+            userId.set(u.externalId, id);
+        }
+        // C. user director links (all users now exist)
+        for (const u of pulled.users) {
+            const directorId = u.directorExternalId === undefined
+                ? null
+                : (userId.get(u.directorExternalId) ?? (await store.findUserByExternal(source.name, u.directorExternalId))?.id ?? null);
+            await store.upsertUser({
+                externalSource: source.name,
+                externalId: u.externalId,
+                name: u.name ?? null,
+                email: u.email ?? null,
+                mobile: u.mobile ?? null,
+                roles: u.roles ?? [],
+                departmentId: await departmentIdFor(u.departmentExternalId),
+                directorId,
+                enabled: u.enabled ?? null,
+            });
+        }
+        // D. department parent + manager links
+        for (const d of pulled.departments) {
+            const parentId = cyclic.has(d.externalId) ? null : await departmentIdFor(d.parentExternalId);
+            const managerId = d.managerExternalId === undefined
+                ? null
+                : (userId.get(d.managerExternalId) ?? (await store.findUserByExternal(source.name, d.managerExternalId))?.id ?? null);
+            await store.upsertDepartment({
+                externalSource: source.name,
+                externalId: d.externalId,
+                name: d.name ?? null,
+                code: d.code ?? null,
+                parentId,
+                managerId,
+                enabled: d.enabled ?? null,
+            });
+        }
+        // E. soft-disable the missing
+        if (deactivate) {
+            for (const ext of missingUsers) {
+                const row = await store.findUserByExternal(source.name, ext);
+                if (row !== null)
+                    await store.setEnabled('user', row.id, false);
+            }
+            for (const ext of missingDepts) {
+                const row = await store.findDepartmentByExternal(source.name, ext);
+                if (row !== null)
+                    await store.setEnabled('department', row.id, false);
+            }
+        }
+        if (pulled.cursor !== undefined)
+            await store.setCursor(source.name, pulled.cursor);
+    }
+    return {
+        source: source.name,
+        dryRun,
+        users,
+        departments,
+        warnings,
+        cursor: pulled.cursor ?? previous ?? null,
+    };
+}
+//# sourceMappingURL=sync.js.map

package/dist/runtime/identity/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../../src/runtime/identity/sync.ts"],"names":[],"mappings":"AAqCA,iEAAiE;AACjE,SAAS,sBAAsB,CAAC,QAAyC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,GAAuB,KAAK,CAAC;QACrC,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAsB,EACtB,KAAoB,EACpB,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC;IACtD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW;QAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAChD,KAAK,MAAM,EAAE,IAAI,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,yDAAyD,CAAC,CAAC;IAEnH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAuB;QAChC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;QAC5E,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;QAC3E,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAC/C,CAAC;IACF,MAAM,WAAW,GAAuB;QACtC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;QAClF,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;QACjF,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAC/C,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,wEAAwE;QACxE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC;gBAC1C,cAAc,EAAE,MAAM,CAAC,IAAI;gBAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;aAC3B,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,EAAE,UAA8B,EAA0B,EAAE;YACvF,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACtC,OAAO,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;QACrF,CAAC,CAAC;QAEF,4DAA4D;QAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC;gBACpC,cAAc,EAAE,MAAM,CAAC,IAAI;gBAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;gBACpB,YAAY,EAAE,MAAM,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBAC3D,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;aAC3B,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;QAED,+CAA+C;QAC/C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,UAAU,GACd,CAAC,CAAC,kBAAkB,KAAK,SAAS;gBAChC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC;YAC5H,MAAM,KAAK,CAAC,UAAU,CAAC;gBACrB,cAAc,EAAE,MAAM,CAAC,IAAI;gBAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;gBACpB,YAAY,EAAE,MAAM,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBAC3D,UAAU;gBACV,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,uCAAuC;QACvC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAC7F,MAAM,SAAS,GACb,CAAC,CAAC,iBAAiB,KAAK,SAAS;gBAC/B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC;YAC1H,MAAM,KAAK,CAAC,gBAAgB,CAAC;gBAC3B,cAAc,EAAE,MAAM,CAAC,IAAI;gBAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,QAAQ;gBACR,SAAS;gBACT,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,8BAA8B;QAC9B,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC7D,IAAI,GAAG,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACnE,IAAI,GAAG,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,MAAM;QACN,KAAK;QACL,WAAW;QACX,QAAQ;QACR,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ,IAAI,IAAI;KAC1C,CAAC;AACJ,CAAC"}

package/dist/runtime/metadata/cache.d.ts

@@ -9,8 +9,6 @@ export interface MetadataEntry {
     contentHash: string;
     definition: unknown;
 }
-/** create the metadata cache table if it does not exist */
-export declare function ensureMetadataTable(pool: Pool): Promise<void>;
 /** read the whole metadata cache keyed by object name */
 export declare function readMetadataCache(pool: Pool): Promise<Map<string, MetadataRow>>;
 /** upsert metadata cache entries inside a transaction */

package/dist/runtime/metadata/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/runtime/metadata/cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAI/B,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,2DAA2D;AAC3D,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAUnE;AAED,yDAAyD;AACzD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAarF;AAED,yDAAyD;AACzD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5F;AAED,wEAAwE;AACxE,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGnF;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,aAAa,EAAE,GACrB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAQnD"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/runtime/metadata/cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAI/B,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,yDAAyD;AACzD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAarF;AAED,yDAAyD;AACzD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5F;AAED,wEAAwE;AACxE,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGnF;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,aAAa,EAAE,GACrB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAOnD"}

package/dist/runtime/metadata/cache.js

@@ -1,14 +1,4 @@
 const TABLE = 'weavekit_metadata';
-/** create the metadata cache table if it does not exist */
-export async function ensureMetadataTable(pool) {
-    await pool.query(`CREATE TABLE IF NOT EXISTS ${TABLE} (
-       object_name text PRIMARY KEY,
-       content_hash text NOT NULL,
-       definition jsonb NOT NULL,
-       applied_at timestamptz NOT NULL DEFAULT now(),
-       updated_at timestamptz NOT NULL DEFAULT now()
-     )`);
-}
 /** read the whole metadata cache keyed by object name */
 export async function readMetadataCache(pool) {
     const result = await pool.query(`SELECT object_name, content_hash, applied_at FROM ${TABLE}`);
@@ -59,7 +49,6 @@ export async function invalidateMetadata(pool, names) {
  * objects were updated (content hash changed) and removed.
  */
 export async function syncMetadataCache(pool, files) {
-    await ensureMetadataTable(pool);
     const existing = await readMetadataCache(pool);
     const updated = files.filter((f) => existing.get(f.name)?.contentHash !== f.contentHash).map((f) => f.name);
     const removed = [...existing.keys()].filter((name) => !files.some((f) => f.name === name));

package/dist/runtime/metadata/cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/runtime/metadata/cache.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAclC,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAClD,MAAM,IAAI,CAAC,KAAK,CACd,8BAA8B,KAAK;;;;;;OAMhC,CACJ,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,qDAAqD,KAAK,EAAE,CAC7D,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAyE,EAAE,CAAC;QACnG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE;YACvB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAU,EAAE,OAAwB;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,KAAK;;;;;kCAKM,EAC1B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAU,EAAE,KAAe;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,KAAK,8BAA8B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,KAAsB;IAEtB,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IAC3F,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/runtime/metadata/cache.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAclC,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,qDAAqD,KAAK,EAAE,CAC7D,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAyE,EAAE,CAAC;QACnG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE;YACvB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAU,EAAE,OAAwB;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,KAAK;;;;;kCAKM,EAC1B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAU,EAAE,KAAe;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,KAAK,8BAA8B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,KAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;IAC3F,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/runtime/metadata/index.d.ts

@@ -1,3 +1,3 @@
-export { ensureMetadataTable, readMetadataCache, writeMetadataCache, invalidateMetadata, syncMetadataCache, } from './cache.js';
+export { readMetadataCache, writeMetadataCache, invalidateMetadata, syncMetadataCache, } from './cache.js';
 export type { MetadataRow, MetadataEntry } from './cache.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/metadata/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/metadata/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/metadata/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/runtime/metadata/index.js

@@ -1,2 +1,2 @@
-export { ensureMetadataTable, readMetadataCache, writeMetadataCache, invalidateMetadata, syncMetadataCache, } from './cache.js';
+export { readMetadataCache, writeMetadataCache, invalidateMetadata, syncMetadataCache, } from './cache.js';
 //# sourceMappingURL=index.js.map

package/dist/runtime/metadata/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/metadata/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/metadata/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/dist/runtime/record-meta/index.d.ts

@@ -0,0 +1,2 @@
+export { getRecordMeta, upsertRecordMeta, deleteRecordMeta, listRecordMeta, type RecordMeta, type RecordMetaPatch, } from './store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/record-meta/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/record-meta/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC"}

package/dist/runtime/record-meta/index.js

@@ -0,0 +1,2 @@
+export { getRecordMeta, upsertRecordMeta, deleteRecordMeta, listRecordMeta, } from './store.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/record-meta/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/record-meta/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GAGf,MAAM,YAAY,CAAC"}

package/dist/runtime/record-meta/store.d.ts

@@ -0,0 +1,43 @@
+import type { Pool, PoolClient } from 'pg';
+/**
+ * Sparse CRUD over an object's record metadata side table
+ * (`weavekit_record__<object>`). Rows are created only when a record gains
+ * engine metadata (status change / owner / workflow binding), so a table holds
+ * entries only for records that actually carry system state.
+ */
+type Db = Pool | PoolClient;
+/** a record metadata row */
+export interface RecordMeta {
+    recordKey: string;
+    status: string;
+    ownerId: string | null;
+    createdBy: string | null;
+    modifiedBy: string | null;
+    createdTime: Date | null;
+    modifiedTime: Date | null;
+    workflowInstanceId: string | null;
+}
+/** fields that may be written on a sparse upsert (absent = leave unchanged) */
+export interface RecordMetaPatch {
+    status?: string;
+    ownerId?: string | null;
+    createdBy?: string | null;
+    modifiedBy?: string | null;
+    createdTime?: Date | null;
+    modifiedTime?: Date | null;
+    workflowInstanceId?: string | null;
+}
+/** read one record's metadata row (null when the record is sparse/default) */
+export declare function getRecordMeta(db: Db, object: string, recordKey: string): Promise<RecordMeta | null>;
+/**
+ * Insert or merge a record's metadata row. Absent patch fields are left
+ * unchanged on conflict; `status` defaults to `draft` on insert. `created_by`
+ * / `created_time` are set on insert only (append-only creation facts).
+ */
+export declare function upsertRecordMeta(db: Db, object: string, recordKey: string, patch?: RecordMetaPatch): Promise<void>;
+/** delete a record's metadata row (when a record is removed) */
+export declare function deleteRecordMeta(db: Db, object: string, recordKey: string): Promise<void>;
+/** read metadata rows for a set of records (missing ones are simply absent) */
+export declare function listRecordMeta(db: Db, object: string, recordKeys: readonly string[]): Promise<RecordMeta[]>;
+export {};
+//# sourceMappingURL=store.d.ts.map

package/dist/runtime/record-meta/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/runtime/record-meta/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAO3C;;;;;GAKG;AAEH,KAAK,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC;AAK5B,4BAA4B;AAC5B,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAuDD,8EAA8E;AAC9E,wBAAsB,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAOzG;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,eAAoB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,gEAAgE;AAChE,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/F;AAED,+EAA+E;AAC/E,wBAAsB,cAAc,CAClC,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,CAQvB"}

package/dist/runtime/record-meta/store.js

@@ -0,0 +1,88 @@
+import { RECORD_META_COLUMNS, RECORD_META_DEFAULT_STATUS, recordMetaTableName, } from '../../core/storage/record-meta.js';
+const q = (id) => `"${id}"`;
+const COL = RECORD_META_COLUMNS;
+const SELECT_COLUMNS = [
+    COL.RECORD_KEY,
+    COL.STATUS,
+    COL.OWNER_ID,
+    COL.CREATED_BY,
+    COL.MODIFIED_BY,
+    COL.CREATED_TIME,
+    COL.MODIFIED_TIME,
+    COL.WORKFLOW_INSTANCE_ID,
+]
+    .map(q)
+    .join(', ');
+function toRecordMeta(row) {
+    return {
+        recordKey: row.record_key,
+        status: row.status,
+        ownerId: row.owner_id,
+        createdBy: row.created_by,
+        modifiedBy: row.modified_by,
+        createdTime: row.created_time,
+        modifiedTime: row.modified_time,
+        workflowInstanceId: row.workflow_instance_id,
+    };
+}
+/** patch entries mapped to (column, value) pairs, with only defined keys */
+function patchEntries(patch) {
+    const entries = [];
+    const put = (column, value) => {
+        if (value !== undefined)
+            entries.push([column, value]);
+    };
+    put(COL.STATUS, patch.status);
+    put(COL.OWNER_ID, patch.ownerId);
+    put(COL.CREATED_BY, patch.createdBy);
+    put(COL.MODIFIED_BY, patch.modifiedBy);
+    put(COL.CREATED_TIME, patch.createdTime);
+    put(COL.MODIFIED_TIME, patch.modifiedTime);
+    put(COL.WORKFLOW_INSTANCE_ID, patch.workflowInstanceId);
+    return entries;
+}
+/** read one record's metadata row (null when the record is sparse/default) */
+export async function getRecordMeta(db, object, recordKey) {
+    const table = recordMetaTableName(object);
+    const res = await db.query(`SELECT ${SELECT_COLUMNS} FROM ${q(table)} WHERE ${q(COL.RECORD_KEY)} = $1`, [
+        recordKey,
+    ]);
+    const row = res.rows[0];
+    return row === undefined ? null : toRecordMeta(row);
+}
+/**
+ * Insert or merge a record's metadata row. Absent patch fields are left
+ * unchanged on conflict; `status` defaults to `draft` on insert. `created_by`
+ * / `created_time` are set on insert only (append-only creation facts).
+ */
+export async function upsertRecordMeta(db, object, recordKey, patch = {}) {
+    const table = recordMetaTableName(object);
+    const entries = patchEntries(patch);
+    const insertCols = [COL.RECORD_KEY, ...entries.map(([c]) => c)];
+    const insertVals = [recordKey, ...entries.map(([, v]) => v)];
+    if (patch.status === undefined) {
+        insertCols.push(COL.STATUS);
+        insertVals.push(RECORD_META_DEFAULT_STATUS);
+    }
+    const immutable = new Set([COL.RECORD_KEY, COL.CREATED_BY, COL.CREATED_TIME]);
+    const updates = entries
+        .filter(([c]) => !immutable.has(c))
+        .map(([c]) => `${q(c)} = EXCLUDED.${q(c)}`);
+    await db.query(`INSERT INTO ${q(table)} (${insertCols.map(q).join(', ')})
+     VALUES (${insertCols.map((_, i) => `$${i + 1}`).join(', ')})
+     ON CONFLICT (${q(COL.RECORD_KEY)}) ${updates.length > 0 ? `DO UPDATE SET ${updates.join(', ')}` : 'DO NOTHING'}`, insertVals);
+}
+/** delete a record's metadata row (when a record is removed) */
+export async function deleteRecordMeta(db, object, recordKey) {
+    const table = recordMetaTableName(object);
+    await db.query(`DELETE FROM ${q(table)} WHERE ${q(COL.RECORD_KEY)} = $1`, [recordKey]);
+}
+/** read metadata rows for a set of records (missing ones are simply absent) */
+export async function listRecordMeta(db, object, recordKeys) {
+    if (recordKeys.length === 0)
+        return [];
+    const table = recordMetaTableName(object);
+    const res = await db.query(`SELECT ${SELECT_COLUMNS} FROM ${q(table)} WHERE ${q(COL.RECORD_KEY)} = ANY($1)`, [recordKeys]);
+    return res.rows.map(toRecordMeta);
+}
+//# sourceMappingURL=store.js.map

package/dist/runtime/record-meta/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/runtime/record-meta/store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAW3C,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AACpC,MAAM,GAAG,GAAG,mBAAmB,CAAC;AAoChC,MAAM,cAAc,GAAG;IACrB,GAAG,CAAC,UAAU;IACd,GAAG,CAAC,MAAM;IACV,GAAG,CAAC,QAAQ;IACZ,GAAG,CAAC,UAAU;IACd,GAAG,CAAC,WAAW;IACf,GAAG,CAAC,YAAY;IAChB,GAAG,CAAC,aAAa;IACjB,GAAG,CAAC,oBAAoB;CACzB;KACE,GAAG,CAAC,CAAC,CAAC;KACN,IAAI,CAAC,IAAI,CAAC,CAAC;AAEd,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;KAC7C,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CAAC,KAAsB;IAC1C,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,KAAc,EAAQ,EAAE;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAM,EAAE,MAAc,EAAE,SAAiB;IAC3E,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,cAAc,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE;QACtG,SAAS;KACV,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAuB,CAAC;IAC9C,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAM,EACN,MAAc,EACd,SAAiB,EACjB,QAAyB,EAAE;IAE3B,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,UAAU,GAAc,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,OAAO;SACpB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9C,MAAM,EAAE,CAAC,KAAK,CACZ,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;eAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,EACjH,UAAU,CACX,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAM,EAAE,MAAc,EAAE,SAAiB;IAC9E,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAM,EACN,MAAc,EACd,UAA6B;IAE7B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CACxB,UAAU,cAAc,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IACF,OAAQ,GAAG,CAAC,IAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC"}

package/dist/runtime/sql-analyzer/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/sql-analyzer/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAIlD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,YAAY;IAC3B,wFAAwF;IACxF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,iGAAiG;IACjG,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,wFAAwF;IACxF,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B;;;OAGG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACnE;AAOD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAqBtC,wBAAgB,iBAAiB,IAAI,WAAW,CA2D/C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/sql-analyzer/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAIlD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,YAAY;IAC3B,wFAAwF;IACxF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,iGAAiG;IACjG,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,wFAAwF;IACxF,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B;;;OAGG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACnE;AAOD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAkEtC,wBAAgB,iBAAiB,IAAI,WAAW,CA2E/C"}

package/dist/runtime/sql-analyzer/index.js

@@ -8,6 +8,49 @@ import { walk } from '@pgsql/traverse';
  * `statement_timeout` ever applies.
  */
 export const MAX_SQL_AST_NODES = 5000;
+/**
+ * Functions with side effects or filesystem/catalog access that a read-only
+ * sandbox query must never call (matched on the bare, lowercased name).
+ */
+const DENIED_FUNCTIONS = new Set([
+    'nextval',
+    'setval',
+    'set_config',
+    'pg_advisory_lock',
+    'pg_advisory_lock_shared',
+    'pg_advisory_xact_lock',
+    'pg_advisory_xact_lock_shared',
+    'pg_advisory_unlock',
+    'pg_advisory_unlock_all',
+    'pg_sleep',
+    'pg_sleep_for',
+    'pg_sleep_until',
+    'pg_read_file',
+    'pg_read_binary_file',
+    'pg_ls_dir',
+    'pg_stat_file',
+    'lo_import',
+    'lo_export',
+    'lo_unlink',
+    'lo_create',
+    'lo_put',
+    'pg_terminate_backend',
+    'pg_cancel_backend',
+    'pg_reload_conf',
+    'pg_rotate_logfile',
+    'pg_create_restore_point',
+    'pg_switch_wal',
+    'pg_stat_reset',
+    'pg_stat_reset_shared',
+    'pg_stat_reset_single_table_counters',
+    'dblink',
+    'dblink_exec',
+    'pg_promote',
+]);
+/** fail-closed with the standard `script.query.invalid` code */
+function reject(detail, locale) {
+    throw new SchemaError('script.query.invalid', { detail }, locale);
+}
 /** count AST nodes (plain objects / arrays) and fail-closed when over the cap */
 function assertBoundedAst(ast, locale) {
     let count = 0;
@@ -79,6 +122,22 @@ export function createSqlAnalyzer() {
                         ? { qualifier: quals.length >= 1 ? quals[0] : undefined, column: '*', star: true }
                         : { qualifier: quals.length > 1 ? quals[0] : undefined, column: quals[quals.length - 1] ?? '', star: false });
                 },
+                // fail-closed: no data-modifying node may appear anywhere (top-level
+                // SELECT check only covers the outermost node; a data-modifying CTE
+                // inside a subquery would otherwise execute a write)
+                InsertStmt: () => reject('data-modifying statements are not allowed', locale),
+                UpdateStmt: () => reject('data-modifying statements are not allowed', locale),
+                DeleteStmt: () => reject('data-modifying statements are not allowed', locale),
+                MergeStmt: () => reject('data-modifying statements are not allowed', locale),
+                // fail-closed: deny side-effecting / filesystem / catalog functions
+                FuncCall: (path) => {
+                    const node = path.node;
+                    const parts = (node.funcname ?? []).map((p) => p.String?.sval ?? '').filter((s) => s.length > 0);
+                    const bare = (parts[parts.length - 1] ?? '').toLowerCase();
+                    if (DENIED_FUNCTIONS.has(bare)) {
+                        reject(`function "${bare}" is not allowed`, locale);
+                    }
+                },
             });
             return { tables: [...new Set(tables)], resolvers, columnRefs };
         },

package/dist/runtime/sql-analyzer/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/sql-analyzer/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAuDvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,GAAY,EAAE,MAAe;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAc,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,iBAAiB,EAAE,CAAC;YAC9B,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,2BAA2B,iBAAiB,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3H,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,MAAiC,CAAC;IAEtC,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM;YAC7B,IAAI,GAA0D,CAAC;YAC/D,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7C,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,oCAAoC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC1G,CAAC;YAED,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAE9B,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,SAAS,GAA2B,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAmB,EAAE,CAAC;YAEtC,IAAI,CAAC,GAAG,EAAE;gBACR,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;oBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAA4D,CAAC;oBAC/E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;wBAAE,OAAO;oBACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC1B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;oBACvC,IAAI,IAAI,CAAC,KAAK,EAAE,SAAS,KAAK,SAAS;wBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1F,CAAC;gBACD,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;oBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAkC,CAAC;oBACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;oBACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,CAAC;oBACtF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;oBACxD,UAAU,CAAC,IAAI,CACb,IAAI;wBACF,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;wBAClF,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAC/G,CAAC;gBACJ,CAAC;aACF,CAAC,CAAC;YAEH,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/sql-analyzer/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAuDvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;;GAGG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAS;IAC5D,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,kBAAkB;IAClB,yBAAyB;IACzB,uBAAuB;IACvB,8BAA8B;IAC9B,oBAAoB;IACpB,wBAAwB;IACxB,UAAU;IACV,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,WAAW;IACX,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,QAAQ;IACR,sBAAsB;IACtB,mBAAmB;IACnB,gBAAgB;IAChB,mBAAmB;IACnB,yBAAyB;IACzB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,qCAAqC;IACrC,QAAQ;IACR,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,gEAAgE;AAChE,SAAS,MAAM,CAAC,MAAc,EAAE,MAAe;IAC7C,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,GAAY,EAAE,MAAe;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAc,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,iBAAiB,EAAE,CAAC;YAC9B,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,2BAA2B,iBAAiB,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3H,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,MAAiC,CAAC;IAEtC,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM;YAC7B,IAAI,GAA0D,CAAC;YAC/D,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7C,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,oCAAoC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC1G,CAAC;YAED,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAE9B,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,SAAS,GAA2B,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAmB,EAAE,CAAC;YAEtC,IAAI,CAAC,GAAG,EAAE;gBACR,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;oBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAA4D,CAAC;oBAC/E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;wBAAE,OAAO;oBACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC1B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;oBACvC,IAAI,IAAI,CAAC,KAAK,EAAE,SAAS,KAAK,SAAS;wBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1F,CAAC;gBACD,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;oBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAkC,CAAC;oBACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;oBACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,CAAC;oBACtF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;oBACxD,UAAU,CAAC,IAAI,CACb,IAAI;wBACF,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;wBAClF,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAC/G,CAAC;gBACJ,CAAC;gBACD,qEAAqE;gBACrE,oEAAoE;gBACpE,qDAAqD;gBACrD,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,EAAE,MAAM,CAAC;gBAC7E,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,EAAE,MAAM,CAAC;gBAC7E,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,EAAE,MAAM,CAAC;gBAC7E,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,EAAE,MAAM,CAAC;gBAC5E,oEAAoE;gBACpE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;oBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAA2D,CAAC;oBAC9E,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACjG,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC3D,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,aAAa,IAAI,kBAAkB,EAAE,MAAM,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;YAEH,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/tools/executor.d.ts

@@ -1,14 +1,14 @@
 import type { Pool } from 'pg';
-import type { AuditSink, RbacSubject, Locale, ObjectRegistry, ToolActor, ToolApprovals, ApprovalsBackend, ToolDefinition, ToolGuardrails, ToolJsonSchema, ToolResult, ApprovalStatus, PendingApproval, GuardrailPolicy } from '../../core/index.js';
+import type { AuditSink, IdentitySubject, Locale, ObjectRegistry, ToolActor, ToolApprovals, ApprovalsBackend, ToolDefinition, ToolGuardrails, ToolJsonSchema, ToolResult, ApprovalStatus, PendingApproval, GuardrailPolicy } from '../../core/index.js';
 import type { ObjectDataAccess } from '../data-access/index.js';
 /**
- * Custom-tool execution pipeline (M10b, protocol-agnostic). Wraps the injected
+ * Custom-tool execution pipeline (protocol-agnostic). Wraps the injected
  * (RBAC-decorated) data-access with the controlled `ToolDataAccess` surface,
  * builds the `ToolCallContext` a handler receives, runs the handler with
  * auto-audit and wires `withTx`. `adapters/mcp` binds protocol specifics
  * (`McpSession → ToolActor`, `mcp.tool.<name>` action) on top of this.
  *
- * M10c adds the guardrail policy pipeline (`evaluatePolicies`) in front of
+ * The guardrail policy pipeline (`evaluatePolicies`) runs in front of
  * `execute`; approvals already live here as the queue the executor exposes.
  */
 /** deterministic approval key for a pending decision (repeat calls don't duplicate) */
@@ -18,9 +18,9 @@ export type ApprovalsQueue = ToolApprovals & {
     pending(action: string, args: Record<string, unknown>, actor: ToolActor, key?: string): Promise<void>;
 };
 /**
- * Approval queue (D1, release-grade): thin facade over a pluggable
+ * Approval queue (release-grade): thin facade over a pluggable
  * `ApprovalsBackend` (in-memory default; PG in `subsystems/approvals`). No Redis
- * backend is implemented. `approvalKey` stays deterministic; resolution (A7)
+ * backend is implemented. `approvalKey` stays deterministic; resolution
  * is audited here, never by the store. Async because the backend performs I/O.
  */
 export declare function createApprovals(options?: {
@@ -37,12 +37,12 @@ export interface ToolExecutorOptions {
     /** rate-limit / alert handle (adapter-provided; agentKey scope) */
     guardrails: ToolGuardrails;
     approvals?: ApprovalsQueue;
-    /** M10c: guardrail policies evaluated before every custom-tool call (empty = no gate) */
+    /** guardrail policies evaluated before every custom-tool call (empty = no gate) */
     policies?: GuardrailPolicy[];
     locale?: Locale;
 }
 export interface CustomToolExecuteRequest {
-    subject: RbacSubject;
+    subject: IdentitySubject;
     actor: ToolActor;
     /** audit action, e.g. `mcp.tool.<name>` (protocol binding decides the prefix) */
     action: string;
@@ -57,11 +57,11 @@ export interface CustomToolSurfaceEntry {
     inputSchema: ToolJsonSchema;
 }
 export interface ToolExecutor {
-    /** roles-filtered custom-tool surface for a subject (per-subject cached, D8) */
-    surface(subject: RbacSubject, customTools: ToolDefinition[]): CustomToolSurfaceEntry[];
-    /** execute a custom tool with a controlled ctx + auto-audit (+ policies in M10c) */
+    /** roles-filtered custom-tool surface for a subject (per-subject cached) */
+    surface(subject: IdentitySubject, customTools: ToolDefinition[]): CustomToolSurfaceEntry[];
+    /** execute a custom tool with a controlled ctx + auto-audit (+ guardrail policies) */
     execute(def: ToolDefinition, args: Record<string, unknown>, req: CustomToolExecuteRequest): Promise<ToolResult>;
-    /** approval queue handle (M10c promotes it to `engine.tools.approvals`) */
+    /** approval queue handle (also exposed as `engine.tools.approvals`) */
     approvals: ToolApprovals;
 }
 export declare function createToolExecutor(options: ToolExecutorOptions): ToolExecutor;

package/dist/runtime/tools/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAuD,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAoB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3T,OAAO,KAAK,EAAE,gBAAgB,EAAkC,MAAM,yBAAyB,CAAC;AAIhG;;;;;;;;;GASG;AAEH,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAQtG;AAED,iHAAiH;AACjH,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG;IAC3C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvG,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAAO,GAC9D,cAAc,CAqDhB;AAED,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,UAAU,EAAE,gBAAgB,CAAC;IAC7B,iEAAiE;IACjE,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,mEAAmE;IACnE,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,sBAAsB,EAAE,CAAC;IACvF,oFAAoF;IACpF,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChH,2EAA2E;IAC3E,SAAS,EAAE,aAAa,CAAC;CAC1B;AAcD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAiH7E;AAED,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAuD,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAoB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC/T,OAAO,KAAK,EAAE,gBAAgB,EAAkC,MAAM,yBAAyB,CAAC;AAIhG;;;;;;;;;GASG;AAEH,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAQtG;AAED,iHAAiH;AACjH,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG;IAC3C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvG,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAAO,GAC9D,cAAc,CAqDhB;AAED,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,UAAU,EAAE,gBAAgB,CAAC;IAC7B,iEAAiE;IACjE,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,mEAAmE;IACnE,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,sBAAsB,EAAE,CAAC;IAC3F,sFAAsF;IACtF,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChH,uEAAuE;IACvE,SAAS,EAAE,aAAa,CAAC;CAC1B;AAcD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAiH7E;AAED,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC"}

package/dist/runtime/tools/executor.js

@@ -3,13 +3,13 @@ import { AUDIT_ACTOR_TYPES } from '../../core/index.js';
 import { withTx as dataAccessWithTx } from '../data-access/index.js';
 import { applyMask, evaluateCall } from './policies.js';
 /**
- * Custom-tool execution pipeline (M10b, protocol-agnostic). Wraps the injected
+ * Custom-tool execution pipeline (protocol-agnostic). Wraps the injected
  * (RBAC-decorated) data-access with the controlled `ToolDataAccess` surface,
  * builds the `ToolCallContext` a handler receives, runs the handler with
  * auto-audit and wires `withTx`. `adapters/mcp` binds protocol specifics
  * (`McpSession → ToolActor`, `mcp.tool.<name>` action) on top of this.
  *
- * M10c adds the guardrail policy pipeline (`evaluatePolicies`) in front of
+ * The guardrail policy pipeline (`evaluatePolicies`) runs in front of
  * `execute`; approvals already live here as the queue the executor exposes.
  */
 /** deterministic approval key for a pending decision (repeat calls don't duplicate) */
@@ -23,9 +23,9 @@ export function approvalKeyFor(actor, action, args) {
     return `ap-${Math.abs(hash).toString(36)}`;
 }
 /**
- * Approval queue (D1, release-grade): thin facade over a pluggable
+ * Approval queue (release-grade): thin facade over a pluggable
  * `ApprovalsBackend` (in-memory default; PG in `subsystems/approvals`). No Redis
- * backend is implemented. `approvalKey` stays deterministic; resolution (A7)
+ * backend is implemented. `approvalKey` stays deterministic; resolution
  * is audited here, never by the store. Async because the backend performs I/O.
  */
 export function createApprovals(options = {}) {
@@ -35,7 +35,7 @@ export function createApprovals(options = {}) {
         const ok = await backend.resolve(approvalKey, by, status);
         if (ok) {
             const entry = await backend.get(approvalKey);
-            // A7: approval/rejection actions are audited against the same action
+            // approval/rejection actions are audited against the same action
             void audit
                 .record({
                 actorType: AUDIT_ACTOR_TYPES.USER,
@@ -162,7 +162,7 @@ export function createToolExecutor(options) {
                 },
                 timestamp: new Date(),
             });
-            // M10c: guardrail policy gate before the handler (allow / deny / requireApproval / mask)
+            // guardrail policy gate before the handler (allow / deny / requireApproval / mask)
             let mask;
             if (options.policies !== undefined && options.policies.length > 0) {
                 const guardrailCtx = {