@weaveintel/realm 0.1.0

package/dist/resolve.js

@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: MIT
+/**
+ * The resolution engine — given all the config rows a tenant is *allowed to see* for some family
+ * (e.g. every copy of the prompts), pick the ONE that applies to them, and explain why.
+ *
+ * The rule is "nearest owner wins": your own copy beats a parent's shared copy, which beats the
+ * global default. Every result carries **provenance** — is this the global default, your own edit,
+ * or something inherited from a parent — plus, for your own edits, whether they've drifted from the
+ * default they were forked from. Pure functions: no database, no clock. The store just hands them the
+ * visible rows.
+ */
+import { driftState, } from './realm-record.js';
+import { ownerDepth, parentTenantId, strictGrandAncestorIds, } from './context.js';
+/**
+ * Can tenant `ctx` see this record?
+ *  • every global default, and your own records, always;
+ *  • a parent's record only if it's shared to 'children' or 'subtree';
+ *  • a higher ancestor's record only if it's shared to the whole 'subtree'.
+ * A parent's *private* record stays invisible — you resolve past it to the next-nearest or global.
+ */
+export function isVisible(record, ctx) {
+    if (record.realm === 'global')
+        return true;
+    if (ctx.tenantId == null)
+        return false; // global caller sees only global
+    if (record.ownerTenantId === ctx.tenantId)
+        return true;
+    if (record.ownerTenantId === parentTenantId(ctx))
+        return record.shareMode === 'children' || record.shareMode === 'subtree';
+    if (record.ownerTenantId != null && strictGrandAncestorIds(ctx).includes(record.ownerTenantId))
+        return record.shareMode === 'subtree';
+    return false;
+}
+/** Explain a winning record for a given context. `remoteHashOf` looks up the origin's CURRENT hash (for drift). */
+export function provenanceOf(record, ctx, remoteHashOf) {
+    if (record.realm === 'global')
+        return { kind: 'global' };
+    const owner = record.ownerTenantId;
+    if (owner === ctx.tenantId) {
+        if (record.originId == null)
+            return { kind: 'native', ownerTenantId: owner };
+        const remote = remoteHashOf?.(record.originId) ?? null;
+        return { kind: 'own_override', ownerTenantId: owner, drift: driftState(record.originHash, record.contentHash, remote) };
+    }
+    const d = ownerDepth(ctx, owner);
+    return { kind: 'inherited', fromTenantId: owner, distance: d == null ? Infinity : ctx.depth - d };
+}
+/** The "closeness" score of a candidate: your own = deepest, ancestors shallower, global last. */
+function nearness(record, ctx) {
+    if (record.realm === 'global')
+        return -Infinity;
+    return ownerDepth(ctx, record.ownerTenantId) ?? -Infinity;
+}
+/**
+ * Resolve every logical key in a candidate set to its single effective record. Input can be the whole
+ * family (all copies of all keys); the function filters to what `ctx` may see, then keeps the nearest
+ * owner per logical key, attaching provenance. `remoteHashOf` (optional) enables drift on own edits;
+ * by default it's derived from the candidate set (the global original usually sits right there).
+ */
+export function resolveEffective(records, ctx, remoteHashOf) {
+    const hashById = new Map(records.map((r) => [r.id, r.contentHash]));
+    const lookupRemote = remoteHashOf ?? ((originId) => hashById.get(originId));
+    const bestByKey = new Map();
+    for (const r of records) {
+        if (!isVisible(r, ctx))
+            continue;
+        const cur = bestByKey.get(r.logicalKey);
+        if (cur == null) {
+            bestByKey.set(r.logicalKey, r);
+            continue;
+        }
+        const better = nearness(r, ctx) - nearness(cur, ctx);
+        // Tie-break deterministically by id so results are stable (ties shouldn't occur under the unique key).
+        if (better > 0 || (better === 0 && r.id < cur.id))
+            bestByKey.set(r.logicalKey, r);
+    }
+    const out = [];
+    for (const r of bestByKey.values()) {
+        out.push({ ...r, realmProvenance: provenanceOf(r, ctx, lookupRemote) });
+    }
+    out.sort((a, b) => (a.logicalKey < b.logicalKey ? -1 : a.logicalKey > b.logicalKey ? 1 : 0));
+    return out;
+}
+/** Resolve a single logical key, or null if the tenant can see no copy of it. */
+export function resolveOne(records, logicalKey, ctx, remoteHashOf) {
+    const forKey = records.filter((r) => r.logicalKey === logicalKey);
+    return resolveEffective(forKey, ctx, remoteHashOf)[0] ?? null;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B;;;;;;;;;GASG;AACH,OAAO,EACL,UAAU,GAIX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,GAEvB,MAAM,cAAc,CAAC;AActB;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,MAA4C,EAAE,GAAiB;IACvF,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IACzE,IAAI,MAAM,CAAC,aAAa,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,MAAM,CAAC,aAAa,KAAK,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IAC3H,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IACtI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,YAAY,CAC1B,MAAmB,EACnB,GAAiB,EACjB,YAA8D;IAE9D,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,aAAc,CAAC;IACpC,IAAI,KAAK,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;IAC1H,CAAC;IACD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,kGAAkG;AAClG,SAAS,QAAQ,CAAC,MAAmB,EAAE,GAAiB;IACtD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,QAAQ,CAAC;IAChD,OAAO,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAsC,EACtC,GAAiB,EACjB,YAA8D;IAE9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,YAAY,IAAI,CAAC,CAAC,QAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEpF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,SAAS;QACjC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrD,uGAAuG;QACvG,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,UAAU,CACxB,OAAsC,EACtC,UAAkB,EAClB,GAAiB,EACjB,YAA8D;IAE9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAClE,OAAO,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAChE,CAAC"}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@weaveintel/realm",
+  "version": "0.1.0",
+  "description": "Realm configuration — resolve the effective config record for a tenant across a global→tenant hierarchy, with provenance and git-style drift.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": { ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js", "default": "./dist/index.js" } },
+  "files": ["dist", "!dist/**/*.test.*", "!dist/**/*.spec.*"],
+  "publishConfig": { "access": "public" },
+  "scripts": {
+    "build": "tsc -b",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist *.tsbuildinfo"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@weaveintel/core": "^0.1.1",
+    "@weaveintel/identity": "^0.1.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "vitest": "^3.2.6",
+    "better-sqlite3": "^11.8.0",
+    "@types/better-sqlite3": "^7.6.11",
+    "pg": "^8.13.0",
+    "@types/pg": "^8.11.0",
+    "@testcontainers/postgresql": "^11.0.0"
+  }
+}