@weave-kit/engine 2.0.0 → 2.1.1

package/dist/runtime/config-types.d.ts

@@ -0,0 +1,434 @@
+/**
+ * Engine assembly configuration types — extracted from `engine.ts` (2.1
+ * maintainability). The runtime assembly and start-up guards live in
+ * `engine.ts` / `guards.ts`; these are pure declarations (no runtime imports).
+ */
+import type { FastifyInstance } from 'fastify';
+import type { Pool } from 'pg';
+import type { AuditMode, CounterStore, EngineScriptConfig, EngineWorkflowConfig, EventPublisher, FieldTypeRegistration, GuardrailPolicy, Locale, MetricsSink, ObjectRegistry, ProxyTargetResolver, ScriptDispatcher, ToolDefinition, TraceSink } from '../core/index.js';
+import type { IngressConfig } from '../core/provider/event/index.js';
+import type { CapabilitiesProvider } from '../core/provider/capabilities/index.js';
+import type { IdentitySource, IdentityStore } from '../core/provider/identity/index.js';
+import type { PgIdentitySourceConfig } from './identity/sources/pg.js';
+import type { ObjectDataAccess, QueryBudget, TotalMode } from './data-access/index.js';
+import type { ProxyForwarder } from './proxy/index.js';
+import type { AuthSource, AuthVerifier, Authenticator, OidcConfig } from '../adapters/auth/index.js';
+import type { EngineMcpConfig, McpServerHandle } from '../adapters/mcp/index.js';
+import type { EngineGraphQLConfig, GraphQLServerHandle } from '../adapters/graphql/index.js';
+import type { PrincipalResolver } from '../adapters/rest/index.js';
+import type { ProjectType } from '../cli/types/index.js';
+import type { ApprovalsQueue, ToolExecutor } from './tools/index.js';
+import type { AuditEngine } from '../subsystems/audit/index.js';
+import type { WorkflowTimerScheduler } from '../subsystems/workflow/index.js';
+/** REST interface configuration */
+export interface EngineRestConfig {
+    enabled?: boolean;
+    /** URL prefix for object routes; defaults to `/api` */
+    prefix?: string;
+    /** per-agent-key sliding-window rate limiting; disabled when absent */
+    rateLimit?: {
+        windowMs?: number;
+        max?: number;
+    };
+    /** CORS settings (passed to @fastify/cors); disabled when absent */
+    cors?: {
+        origin?: string | string[] | boolean;
+        methods?: string[];
+        allowedHeaders?: string[];
+        maxAge?: number;
+    };
+    /** maximum request body size in bytes; defaults to 1 MiB */
+    bodyLimit?: number;
+    /** roles allowed to query the full audit trail and use admin script-source read/write routes */
+    adminRoles?: string[];
+    /**
+     * maps an authenticated request to the data-access principal (see
+     * `PrincipalResolver`). A control plane injects this to run requests under a
+     * **system/admin scope** (cross-tenant global views, D32); absent = `userPrincipal`.
+     */
+    principalFor?: PrincipalResolver;
+}
+/** audit subsystem config (optional; disabled = not loaded = zero overhead) */
+export interface EngineAuditConfig {
+    enabled?: boolean;
+    /**
+     * Durability mode (default `best-effort`): `best-effort` = fire-and-forget
+     * process buffer; `transactional` = audit row written in the business
+     * transaction; `durable` = transactional outbox + relay (crash-safe,
+     * at-least-once).
+     */
+    mode?: AuditMode;
+    /**
+     * Accept a best-effort fallback when `mode` is `transactional`/`durable` but
+     * the resolved sink cannot write in-transaction (`recordInTx`). Default
+     * `false` = fail-closed at startup (a misconfigured sink would otherwise drop
+     * events on crash). Built-in sinks always satisfy the requirement.
+     */
+    allowBestEffortFallback?: boolean;
+    /** audit diff replay: attach before/after row snapshots to update/delete audit events (default off; table always has the columns) */
+    replay?: boolean;
+    /** L1 buffered-sink parameters */
+    batch?: {
+        batchSize?: number;
+        flushMs?: number;
+    };
+}
+/**
+ * Engine-level tool mechanism config (open contract, protocol-agnostic —
+ * lives at the top level, not under `adapters.*`). Disabled when absent.
+ */
+export interface EngineToolsConfig {
+    /** custom tool directory (relative to schemaDir, like `objects/`); default `tools` */
+    toolsDir?: string;
+    /** guardrail policies: inline array or a policies directory path (loaded by the assembly layer) */
+    guardrails?: {
+        policies?: GuardrailPolicy[] | string;
+    };
+    /**
+     * approval queue persistence (release-grade). Absent → PG-backed when the
+     * tool executor is created; `backend: 'memory'` opts into the single-process
+     * in-memory queue (tests). No Redis backend is implemented.
+     */
+    approvals?: {
+        backend?: 'pg' | 'memory';
+    };
+}
+/** live event channel config (optional; disabled = not created = zero overhead) */
+export interface EngineEventsConfig {
+    enabled?: boolean;
+    /** URL prefix for the SSE endpoint; defaults to `/api` */
+    prefix?: string;
+    /** roles allowed to see every actor's audit events (mirrors adapters.rest.adminRoles) */
+    adminRoles?: string[];
+    /** replay ring buffer size + heartbeat tuning */
+    replay?: {
+        maxEvents?: number;
+        heartbeatMs?: number;
+    };
+}
+/**
+ * Generic engine proxy. Configured with `proxy.resolver`
+ * only → otherwise (absent) the proxy is not wired (zero overhead). The engine
+ * provides the mechanism (contract + forwarder + routes); the resolver carries
+ * the application semantics (which connection a subject may reach).
+ */
+export interface EngineProxyConfig {
+    /** inject application layer: resolve connection → target (id/url/key/keyScope). */
+    resolver?: ProxyTargetResolver | ProxyTargetResolverBuilder;
+    /** injectable fetch (tests / custom transport). */
+    fetchImpl?: typeof fetch;
+    /**
+     * custom outbound forwarder, e.g. a tunnel-aware one that routes
+     * `transport: 'tunnel'` targets over a live connector. Builder form receives
+     * the runtime deps so the host can read its own metadata. Default = fetch.
+     */
+    forwarder?: ProxyForwarder | ((deps: ProxyResolverDeps) => ProxyForwarder);
+    enabled?: boolean;
+}
+/** runtime deps handed to a {@link ProxyTargetResolverBuilder} so the app can read its own metadata. */
+export interface ProxyResolverDeps {
+    dataAccess: ObjectDataAccess;
+    pool: Pool;
+    registry: ObjectRegistry;
+    authenticator: Authenticator;
+    locale: Locale;
+}
+/**
+ * Factory form of `resolver`: built by the engine at assembly time with the real
+ * runtime deps, so the app can read its metadata (e.g. the governance engine's
+ * own `connections` object) server-side without a second pool. A plain
+ * `ProxyTargetResolver` instance is also accepted.
+ */
+export type ProxyTargetResolverBuilder = (deps: ProxyResolverDeps) => ProxyTargetResolver;
+/** engine assembly configuration — the single wiring point (see AGENTS.md) */
+/** a host-level background service returned by a service's `start`. */
+export interface EngineServiceHandle {
+    /** tear the service down (abort streams, clear timers); called on engine close. */
+    stop(): Promise<void>;
+}
+/** host-app service factory the engine starts once assembled, stops on close. */
+export interface EngineService {
+    name: string;
+    start(engine: WeaveKitEngine): Promise<EngineServiceHandle> | EngineServiceHandle;
+}
+/** identity directory wiring (see `core/provider/identity`) */
+export interface EngineIdentityConfig {
+    /**
+     * provisioning source: an `IdentitySource` instance (has `pull`) or a
+     * declarative `PgIdentitySourceConfig`. Absent → greenfield (the engine owns
+     * `weavekit_user`/`weavekit_department` directly).
+     */
+    source?: IdentitySource | PgIdentitySourceConfig;
+    /** replaceable local directory store; defaults to PG over `weavekit_*` */
+    store?: IdentityStore;
+    /**
+     * credential verifier (OIDC/JWT/SAML); when set the engine authenticates via
+     * `verifier → directory → subject` and `auth.source` may be omitted.
+     */
+    verifier?: AuthVerifier;
+    /** reject subjects with no local identity for scoped access (default false) */
+    required?: boolean;
+    sync?: {
+        /** run the source sync on engine start (fail-closed) */
+        onStart?: boolean;
+        /** soft-disable local rows absent from the source snapshot */
+        deactivateMissing?: boolean;
+    };
+}
+export interface EngineConfig {
+    /** postgres connection string; defaults to process.env.DATABASE_URL */
+    databaseUrl?: string;
+    /**
+     * connection string used only for schema migration/DDL by the CLI (`weave
+     * migrate`/`weave dev`). Defaults to `databaseUrl`. **Same database, a
+     * separate account** — a PostgreSQL role with DDL rights (usually the owner),
+     * so the runtime account can be least-privileged (no DDL/DROP/TRUNCATE).
+     * Pointing it at a *different* database is a misconfiguration (migrations
+     * would land where the runtime cannot see them). The engine itself never runs
+     * DDL at runtime.
+     */
+    migrationDatabaseUrl?: string;
+    /**
+     * runtime database account guard. The engine only ever runs DML, so its
+     * account should be least-privileged (no schema `CREATE`); DDL is an explicit
+     * `weave migrate` using `migrationDatabaseUrl`. When `requireRestrictedAccount`
+     * is true (the default) the engine **fails to start** if its account can
+     * create objects in the current schema. Set false for a single-account setup
+     * (`weave dev` does this by default), or override with the
+     * `WEAVEKIT_REQUIRE_RESTRICTED_ACCOUNT` env var.
+     */
+    runtime?: {
+        requireRestrictedAccount?: boolean;
+    };
+    /** runtime message locale; resolution: config → env WEAVEKIT_LOCALE → 'en' */
+    locale?: Locale;
+    /**
+     * project starting preset (agent/governance/service/business) — persisted by
+     * the scaffolder. Used as CLI context (e.g. `weave object:create` scaffolds a
+     * `client.js` template only for `business` projects). Not required at runtime.
+     */
+    projectType?: ProjectType;
+    /**
+     * project root whose `objects/<name>/schema.json` files are the metadata source.
+     * The engine loads the schema on startup; it never touches the database unless
+     * `migrate.auto` is true (default false — DDL is an explicit `weave migrate`).
+     */
+    schemaDir?: string;
+    /**
+     * migration behavior:
+     * - `auto` — run the schema→PG migration (CREATE/ALTER) on engine startup.
+     *   Default false: WeaveKit is a headless bridge to your database — building/
+     *   altering tables is an explicit `weave migrate`. Enable for greenfield/
+     *   business projects that want the schema to drive DDL automatically.
+     *   Additive DDL on existing tables is governed per object by
+     *   `schema.alter: true`.
+     */
+    migrate?: {
+        auto?: boolean;
+    };
+    /**
+     * git behavior for engine startup syncs:
+     * - `meta` — git-commit the metadata tree (`objects/`) after a `migrate.auto` sync
+     * - `identity` — commit identity; falls back to a local weavekit identity
+     */
+    commit?: {
+        meta?: boolean;
+        identity?: {
+            name: string;
+            email: string;
+        };
+    };
+    /**
+     * Authentication: a static key map / custom resolver (`source`), a built-in
+     * OIDC/JWT verifier (`oidc`), or `identity.verifier` for a custom protocol
+     * verifier. At least one is required. `oidc` requires a resolvable identity
+     * directory (run `weave sync:identity`).
+     */
+    auth?: {
+        source?: AuthSource;
+        oidc?: OidcConfig;
+    };
+    /** protocol adapters (REST/MCP/events/GraphQL), closable via config */
+    adapters?: {
+        rest?: EngineRestConfig;
+        mcp?: EngineMcpConfig;
+        events?: EngineEventsConfig;
+        graphql?: EngineGraphQLConfig;
+    };
+    /** engine-level tool mechanism: custom tools + guardrail policies; disabled when absent */
+    tools?: EngineToolsConfig;
+    /** optional subsystems, dynamically loaded when enabled (audit/script; workflow is declaration-driven; unknown keys error out) */
+    subsystems?: {
+        audit?: EngineAuditConfig;
+        script?: EngineScriptConfig;
+        workflow?: EngineWorkflowConfig;
+    };
+    /**
+     * durable fixed-period counters / usage budgets (optional; disabled when
+     * absent). Backed by PostgreSQL (`weavekit_counters`) and exposed as
+     * `engine.quotas`; the host consumes it around its own integration calls via
+     * `core/limiter` `consumeQuota` / `assertQuota`.
+     */
+    quotas?: {
+        backend?: 'pg';
+    };
+    /**
+     * Agent-native query budget: caps rows/filters/sorts (data-access), joins /
+     * SQL length / statement timeout (restricted SQL) and GraphQL depth. Absent =
+     * defaults (see `QUERY_BUDGET_DEFAULTS`).
+     */
+    queryBudget?: Partial<QueryBudget>;
+    /**
+     * List-query defaults for every read surface (REST / GraphQL / MCP).
+     * `query.total` selects how a page's `total` is computed: `exact` (default,
+     * `COUNT(*)`), `estimate` (`pg_class.reltuples` — approximate, cheap on large
+     * tables) or `none` (skip counting; `total` omitted). A per-request `total`
+     * argument overrides this.
+     */
+    query?: {
+        total?: TotalMode;
+    };
+    /**
+     * Dedicated schema for the engine's own tables (`weavekit_*` system tables,
+     * `weavekit_record__<object>` side tables, `weavekit_m2m__*` link tables), so
+     * a DBA reviewing the customer schema does not see engine plumbing. Default
+     * (absent) keeps them in the object schema (legacy). Set the same value on
+     * `weave migrate`; the runtime appends it to `search_path`. Only affects new
+     * databases (existing installs need a manual `ALTER TABLE … SET SCHEMA`).
+     */
+    systemSchema?: string;
+    /**
+     * Object-path row-level security (defense in depth; default off in 1.x).
+     * With `enforce`, the engine runs user-principal customer-table reads /
+     * updates / deletes under `role` (default `weavekit_object`), so PostgreSQL
+     * policies generated from the same permission matrix re-check the RBAC row
+     * scope. `weave migrate` provisions the role/policies; the engine refuses to
+     * start when they are missing. Inserts and system principals run as the owner.
+     */
+    rls?: {
+        enforce?: boolean;
+        role?: string;
+    };
+    /**
+     * Execution evidence capture (optional; disabled when absent). When enabled,
+     * every data-access write / workflow transition / tool call records one
+     * `weavekit_evidence` row with its full stage timeline and real outcome
+     * (best-effort: a failed evidence write never blocks the execution). Capture
+     * only — export/retention belong to the enterprise E2 layer.
+     */
+    evidence?: {
+        enabled?: boolean;
+    };
+    /**
+     * Row-scope / multi-tenancy (row mode). When enabled, a subject without a
+     * scope is stamped with `defaultScope`, and objects declaring a `scope` field
+     * are scoped to the subject's scope (RBAC row scope + RLS GUC + audit). Absent
+     * = single-scope (unchanged). Lifecycle / schema-per-tenant are out of scope
+     * (enterprise).
+     */
+    scope?: {
+        enabled?: boolean;
+        defaultScope?: string;
+    };
+    /** generic outbound proxy route wiring (applications provide the resolver) */
+    proxy?: EngineProxyConfig;
+    /**
+     * inbound external-event entry point (first-class ingress seam; disabled when
+     * absent). The app provides provider verification + handling; the engine
+     * preserves the raw body, rate-limits per source and audits the receipt.
+     */
+    ingress?: IngressConfig;
+    /**
+     * low-level observability sinks (optional; absent = no-op = zero overhead).
+     * The engine emits request latency/status, RBAC denials, query-budget rejects
+     * and finished spans; a host injects the telemetry backend. Labels must stay
+     * low-cardinality and PII-free (see `core/observability`).
+     */
+    observability?: {
+        metrics?: MetricsSink;
+        trace?: TraceSink;
+    };
+    /**
+     * capability feature switches (declarative gating). `features.fieldTypes` is
+     * a whitelist of field types a schema may declare; a field outside the list is
+     * rejected by the validator (fail-closed). Defaults to the engine primitives
+     * plus every semantic type (no gating) unless a project narrows it.
+     */
+    features?: {
+        fieldTypes?: string[];
+    };
+    /**
+     * project-local field-type registrations (open registration): a directory of
+     * modules (each default-exporting a `FieldTypeRegistration` or array) and/or
+     * inline entries. Compiled with the built-ins into an immutable effective
+     * registry passed through validation + consumers (no mutable global).
+     */
+    fieldTypes?: {
+        dir?: string;
+        entries?: FieldTypeRegistration[];
+    };
+    /**
+     * engine-owned identity directory (see `core/provider/identity`). `source`
+     * imports an external user/department directory (a `pg` descriptor or an
+     * `IdentitySource`); `weave sync:identity` provisions it into `weavekit_user`
+     * / `weavekit_department` before the engine serves scoped access.
+     */
+    identity?: EngineIdentityConfig;
+    /**
+     * capabilities (feature/entitlement) read-only seam (see
+     * `core/provider/capabilities`). The engine **never judges licensing** — a host
+     * (e.g. `@weave-kit/enterprise` E0) injects a `CapabilitiesProvider`; absent =
+     * baseline (no features). Surfaced at `GET {prefix}/capabilities`.
+     */
+    capabilities?: {
+        provider?: CapabilitiesProvider;
+    };
+    /**
+     * host-level background services (e.g. an instance-liveness monitor). Started
+     * after the engine is assembled and stopped in `close()`, so both `weave dev`
+     * and production `main.ts` manage them identically. A service gets the whole
+     * engine (data-access/pool/events) to orchestrate app-specific work.
+     */
+    services?: EngineService[];
+}
+/** a running engine: fastify app + pool + RBAC-decorated data access */
+export interface WeaveKitEngine {
+    app: FastifyInstance;
+    registry: ObjectRegistry;
+    pool: Pool;
+    dataAccess: ObjectDataAccess;
+    authenticator: Authenticator;
+    /** MCP adapter handle (present unless adapters.mcp.enabled is false) */
+    mcp?: McpServerHandle;
+    /** GraphQL adapter handle (present when adapters.graphql.enabled is true) */
+    graphql?: GraphQLServerHandle;
+    /** tool mechanism (present when config.tools.toolsDir is set): executor + approval queue */
+    tools?: {
+        defs: ToolDefinition[];
+        executor: ToolExecutor;
+    };
+    /** live event publisher (present when adapters.events.enabled): emits committed writes / audit / schema changes */
+    events?: EventPublisher;
+    /** generic proxy handle (present when config.proxy.resolver is set): forwarder + resolver */
+    proxy?: {
+        forwarder: ProxyForwarder;
+        resolver: ProxyTargetResolver;
+    };
+    /** audit subsystem (present when enabled); buffered sink is flushed on close */
+    audit?: AuditEngine;
+    /** durable counter store (present when `config.quotas` is set): quota/budget primitive */
+    quotas?: CounterStore;
+    /** script subsystem (present when enabled); workers are terminated on close */
+    script?: ScriptDispatcher;
+    /** approval queue (present when config.tools is set): shared by tools and workflow transitions */
+    approvals?: ApprovalsQueue;
+    /** workflow timer scheduler (present when `subsystems.workflow.enabled`): fires `onTimeout` */
+    workflow?: WorkflowTimerScheduler;
+    /** observability sinks (no-op unless `config.observability` injects one) */
+    observability: {
+        metrics: MetricsSink;
+        trace: TraceSink;
+    };
+    close(): Promise<void>;
+}
+//# sourceMappingURL=config-types.d.ts.map

package/dist/runtime/config-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-types.d.ts","sourceRoot":"","sources":["../../src/runtime/config-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,MAAM,EACN,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,SAAS,EACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAC7F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE9E,mCAAmC;AACnC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,oEAAoE;IACpE,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;QACrC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,qIAAqI;IACrI,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kCAAkC;IAClC,KAAK,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,UAAU,CAAC,EAAE;QACX,QAAQ,CAAC,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;KACvC,CAAC;IACF;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,IAAI,GAAG,QAAQ,CAAC;KAC3B,CAAC;CACH;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iDAAiD;IACjD,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,QAAQ,CAAC,EAAE,mBAAmB,GAAG,0BAA0B,CAAC;IAC5D,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,IAAI,EAAE,iBAAiB,KAAK,cAAc,CAAC,CAAC;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wGAAwG;AACxG,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE,iBAAiB,KAAK,mBAAmB,CAAC;AAE1F,8EAA8E;AAC9E,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;CACnF;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,GAAG,sBAAsB,CAAC;IACjD,0EAA0E;IAC1E,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE;QACL,wDAAwD;QACxD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,8DAA8D;QAC9D,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE;QAAE,wBAAwB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjD,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACxE;;;;;OAKG;IACH,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC;IAClD,uEAAuE;IACvE,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,gBAAgB,CAAC;QAAC,GAAG,CAAC,EAAE,eAAe,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;QAAC,OAAO,CAAC,EAAE,mBAAmB,CAAA;KAAE,CAAC;IAC1H,2FAA2F;IAC3F,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,kIAAkI;IAClI,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;QAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC;IACzG;;;;;OAKG;IACH,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC;IAC5B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC;IAC9B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;;OAKG;IACH,aAAa,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC;IAC7D;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACrC;;;;;OAKG;IACH,UAAU,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAA;KAAE,CAAC;IACjE;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC;;;;;OAKG;IACH,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC;IACnD;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,eAAe,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,wEAAwE;IACxE,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,4FAA4F;IAC5F,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;IAC3D,mHAAmH;IACnH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,6FAA6F;IAC7F,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,mBAAmB,CAAA;KAAE,CAAC;IACrE,gFAAgF;IAChF,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,kGAAkG;IAClG,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,4EAA4E;IAC5E,aAAa,EAAE;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,SAAS,CAAA;KAAE,CAAC;IAC1D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}

package/dist/runtime/config-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config-types.js.map

package/dist/runtime/config-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-types.js","sourceRoot":"","sources":["../../src/runtime/config-types.ts"],"names":[],"mappings":""}

package/dist/runtime/data-access/query-helpers.d.ts

@@ -0,0 +1,74 @@
+import type { PoolClient } from 'pg';
+import type { ObjectDefinition, ObjectRegistry } from '../../core/index.js';
+import { type Locale, type ScriptUser, type ToolDataAccess } from '../../core/index.js';
+import type { AuditSink } from '../../core/audit/index.js';
+import type { BuildContext } from './builder.js';
+import type { FormulaAuth } from './formula.js';
+import { type DataAccessContext, type FindOptions, type ObjectDataAccess } from './types.js';
+/**
+ * Pure helpers for the object data-access layer — extracted from `query.ts` so
+ * the `DefaultObjectDataAccess` class stays focused on orchestration. None of
+ * these touch instance state; they operate on their arguments only.
+ */
+export declare const q: (id: string) => string;
+/** cross-object formula authorization derived from the request context */
+export declare function formulaAuth(ctx: DataAccessContext): FormulaAuth;
+/** pg QueryResult shape the drift wrapper needs */
+export interface QueryResultLike {
+    rows: unknown[];
+    rowCount?: number | null;
+}
+/**
+ * Run a SQL statement against an object's table, mapping PG `undefined_column`
+ * (42703) — a schema/DB drift (schema declares a field the table lacks) — to an
+ * actionable error instead of a raw 500.
+ */
+export declare function runTableQuery(q: {
+    query(sql: string, params: unknown[]): Promise<QueryResultLike>;
+}, objectName: string, sql: string, params: unknown[], locale?: Locale): Promise<QueryResultLike>;
+/** emit a write-audit event (transaction-aware: in-tx when a tx-capable sink is active) */
+export declare function auditWrite(sink: AuditSink | undefined, ctx: DataAccessContext, action: string, objectName: string, objectId: string | undefined, changes: unknown, error?: unknown, before?: unknown, after?: unknown, client?: PoolClient): Promise<void>;
+/** rebuild `this.user` for hooks from the authenticated subject */
+export declare function scriptUserOf(ctx: DataAccessContext): ScriptUser;
+/** details child auto columns (`parent_id`/`parent_type`/`parent_idx`) */
+export declare const PARENT_COLUMNS: Set<string>;
+export declare function isDetailsChild(registry: ObjectRegistry, name: string): boolean;
+export declare function requireDef(ctx: DataAccessContext, objectName: string): ObjectDefinition;
+export declare function bctx(ctx: DataAccessContext, objectName: string): BuildContext;
+/** hidden select column carrying the SQL-computed record_key for a fetched row */
+export declare const META_KEY_COL = "__weave_record_key";
+/** select expression for the SQL-computed record_key (lossless for temporal keys) */
+export declare function recordKeySelect(def: ObjectDefinition): string;
+/** the record_key of a row, from its declared primary fields (declaration order) */
+export declare function recordKeyOfRow(def: ObjectDefinition, record: Record<string, unknown>): string;
+/** declared primary field names, in declaration order */
+export declare function primaryNames(def: ObjectDefinition): string[];
+/** decode an external id (the record_key, for single and composite keys alike) into primary values */
+export declare function pkValuesOf(def: ObjectDefinition, id: string, ctx: DataAccessContext): string[];
+/** reject a malformed external id up front (keyed objects only; key-less objects 404 later) */
+export declare function validateId(def: ObjectDefinition, id: string, ctx: DataAccessContext): void;
+/** primary-key filter object for `find` (declared names zipped with values) */
+export declare function pkFilter(def: ObjectDefinition, values: readonly string[]): Record<string, unknown>;
+/** `"a" = $1 AND "b" = $2` predicate for the primary names, starting at `startIndex` */
+export declare function pkWhereSql(def: ObjectDefinition, startIndex: number): string;
+/** the external id of a record: always its record_key (single and composite keys alike) */
+export declare function externalIdOf(def: ObjectDefinition, record: Record<string, unknown>): string;
+/** true when the query references a side-table virtual field (`weave_*` minus the derived `weave_id`) */
+export declare function needsSideTable(opts: FindOptions): boolean;
+/**
+ * Narrow `ToolDataAccess` over this data-access for guardrail policies: a policy
+ * calls `ctx.dataAccess.find(obj, opts, { subject? })` with no pool/registry, so
+ * those are injected from the execution context (mirrors the tool executor's
+ * wrapper; `...c` lets a policy override the subject per call).
+ */
+export declare function toolDataAccessOver(inner: ObjectDataAccess, base: DataAccessContext): ToolDataAccess;
+/**
+ * Serialize a value for binding to a DB column. pg (node-postgres) auto-stringifies
+ * JSON *objects* but serializes JSON *arrays* as a PG array literal (`{"a"}`) which
+ * is invalid as `json` — so we explicitly `JSON.stringify` non-string json values
+ * (arrays/objects/numbers/booleans) to valid JSON text. `null` stays SQL NULL.
+ */
+export declare function dbJsonValue(field: {
+    type?: string;
+} | undefined, value: unknown): unknown;
+//# sourceMappingURL=query-helpers.d.ts.map

package/dist/runtime/data-access/query-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-helpers.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/query-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAWL,KAAK,MAAM,EACX,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAsB,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjH;;;;GAIG;AAEH,eAAO,MAAM,CAAC,GAAI,IAAI,MAAM,WAAc,CAAC;AAE3C,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,GAAG,EAAE,iBAAiB,GAAG,WAAW,CAG/D;AAED,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AA+BD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,CAAC,EAAE;IAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAAE,EACtE,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,OAAO,EAAE,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAa1B;AAED,2FAA2F;AAC3F,wBAAsB,UAAU,CAC9B,IAAI,EAAE,SAAS,GAAG,SAAS,EAC3B,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,OAAO,EACf,MAAM,CAAC,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,OAAO,EACf,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,GAAG,EAAE,iBAAiB,GAAG,UAAU,CAQ/D;AAED,0EAA0E;AAC1E,eAAO,MAAM,cAAc,aAIzB,CAAC;AAEH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI9E;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,gBAAgB,CAIvF;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAS7E;AAED,kFAAkF;AAClF,eAAO,MAAM,YAAY,uBAAuB,CAAC;AAEjD,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAE7D;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAE7F;AAED,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAE5D;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAY9F;AAED,+FAA+F;AAC/F,wBAAgB,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAE1F;AAED,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMlG;AAED,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAI5E;AAED,2FAA2F;AAC3F,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAE3F;AAED,yGAAyG;AACzG,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAwBzD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,GAAG,cAAc,CAQnG;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAUzF"}