graphddb 0.7.8 → 0.7.10

package/dist/index.js

@@ -1,31 +1,17 @@
 import {
   queryBoundaryRule
 } from "./chunk-MMVHOUM4.js";
-import {
-  CdcEmulator,
-  MAINT_OUTBOX_PK_PREFIX,
-  MaintenanceDrain,
-  compareDesc,
-  createCdcEmulator,
-  createMaintenanceDrain,
-  createMaintenanceDrainHandler,
-  orderAndTrimCollection,
-  pathField,
-  projectFrom
-} from "./chunk-IA6MW2HP.js";
 import {
   BatchGetResult,
   DDBModel,
   EDGE_WRITES_MARKER,
   LOGICAL_EFFECT_CATEGORIES,
-  MARKER_ROW_ENTITY,
   OLD_VALUE_NAMESPACE,
   PREPARED_FORMAT_VERSION,
   PREPARE_CACHE_MAX,
   PreparedReadStatement,
   PreparedWriteStatement,
   RELATION_TRAVERSAL_CONCURRENCY,
-  SPEC_VERSION,
   assertBundleSerializable,
   assertContractBoundaries,
   assertContractN1Safe,
@@ -51,8 +37,6 @@ import {
   contractOfMethodSpec,
   decodeCursor,
   definePlan,
-  defineTransaction,
-  defineTransactions,
   deriveCompositionPlan,
   deriveEdgeWriteItems,
   deriveEdgeWriteItemsFor,
@@ -86,7 +70,6 @@ import {
   isPlannedCommandMethod,
   isPreparedParamRef,
   isQueryModelContract,
-  isTransactionRef,
   mapWithConcurrency,
   mintContractKeyFieldRef,
   mintContractParamRef,
@@ -100,9 +83,57 @@ import {
   resolveRelations,
   serializeEffectParams,
   validateDepth,
-  when,
   wholeKeysSentinel
-} from "./chunk-NZRCBEWS.js";
+} from "./chunk-EOJDN3SA.js";
+import {
+  CdcEmulator,
+  MAINT_OUTBOX_PK_PREFIX,
+  MaintenanceDrain,
+  compareDesc,
+  createCdcEmulator,
+  createMaintenanceDrain,
+  createMaintenanceDrainHandler,
+  orderAndTrimCollection,
+  pathField,
+  projectFrom
+} from "./chunk-AD6ZQTTE.js";
+import {
+  ENTITY_WRITES_MARKER,
+  LIFECYCLE_CONTRACT_MARKER,
+  buildMaintenanceGraph,
+  buildSubscribeHandler,
+  collectViewDefinitions,
+  detectRelationFields,
+  entityWrites,
+  getEntityWrites,
+  getImplicitKeyFields,
+  hydrate,
+  identity,
+  isEntityWritesDefinition,
+  isLifecycleContract,
+  isMaintainTrigger,
+  isSelectBuilder,
+  lifecyclePhaseForIntent,
+  maintainTrigger,
+  parseChange,
+  preview
+} from "./chunk-DFUKGU2Q.js";
+import {
+  EXPR_VERSION,
+  MARKER_ROW_ENTITY,
+  SCP_LOWERED_MARKER,
+  SPEC_VERSION,
+  SPEC_VERSION_SCP,
+  SPEC_VERSION_SUPPORTED,
+  canonicalizeExpressionSpec,
+  defineScpTransaction,
+  defineTransaction,
+  defineTransactions,
+  isTransactionRef,
+  operationsContainScpNodes,
+  operationsSpecVersion,
+  when
+} from "./chunk-3UD3XIF2.js";
 import {
   BATCH_GET_MAX_KEYS,
   BATCH_WRITE_MAX_ITEMS,
@@ -110,8 +141,6 @@ import {
   DEFAULT_MAX_ATTEMPTS,
   DEFAULT_RETRY_POLICY,
   DynamoExecutor,
-  ENTITY_WRITES_MARKER,
-  LIFECYCLE_CONTRACT_MARKER,
   MAX_TRANSACT_ITEMS,
   MetadataRegistry,
   RetryingExecutor,
@@ -119,45 +148,28 @@ import {
   attachModelClass,
   buildConditionExpression,
   buildDeleteInput,
-  buildMaintenanceGraph,
   buildPutInput,
-  buildSubscribeHandler,
   buildUpdateExpression,
   buildUpdateInput,
   collapseSameKeyItems,
   collectRawConditionParams,
-  collectViewDefinitions,
   commitTransaction,
   cond,
-  detectRelationFields,
-  entityWrites,
   execItemKeySignature,
   executeDelete,
   executePut,
   executeTransaction,
   executeUpdate,
-  getEntityWrites,
-  getImplicitKeyFields,
   gsi,
-  hydrate,
-  identity,
-  isEntityWritesDefinition,
-  isLifecycleContract,
-  isMaintainTrigger,
   isParam,
   isRawCondition,
   isRetryableError,
   isRetryableTransactionCancellation,
-  isSelectBuilder,
-  lifecyclePhaseForIntent,
-  maintainTrigger,
   param,
-  parseChange,
-  preview,
   resolveConditionTree,
   resolveModelClass,
   serializeFieldValue
-} from "./chunk-HFFIB77D.js";
+} from "./chunk-3ZU2VW3L.js";
 import {
   Linter,
   TableMapping,
@@ -742,27 +754,129 @@ function cdcProjected() {
   };
 }
 
+// src/operations/declarative-transaction.ts
+import { renderTemplate, TemplateFailure } from "behavior-contracts";
+
+// src/runtime/behavior-contracts-adapter.ts
+function toSharedValue(v) {
+  if (v === null || v === void 0) return null;
+  switch (typeof v) {
+    case "string":
+    case "boolean":
+    case "bigint":
+      return v;
+    case "number":
+      return Number.isInteger(v) ? BigInt(v) : v;
+    default:
+      break;
+  }
+  if (v instanceof Date) return v.toJSON();
+  if (Array.isArray(v)) return v.map((e) => toSharedValue(e));
+  if (typeof v === "object") {
+    const out = {};
+    for (const [k2, field2] of Object.entries(v)) {
+      if (field2 === void 0) continue;
+      out[k2] = toSharedValue(field2);
+    }
+    return out;
+  }
+  return v;
+}
+function toSharedParams(params) {
+  const out = {};
+  for (const [name, value] of Object.entries(params)) {
+    if (value === void 0) continue;
+    out[name] = toSharedValue(value);
+  }
+  return out;
+}
+
+// src/runtime/guard-eval.ts
+import { evaluateExpression, ExprFailure } from "behavior-contracts";
+var GUARD_SCOPE_ROOTS = /* @__PURE__ */ new Set(["input", "item"]);
+function assertGuardScopes(node, context) {
+  if (node === null || typeof node !== "object") return;
+  const obj = node;
+  const ref = obj.ref ?? obj.refOpt;
+  if (Array.isArray(ref)) {
+    const root = ref[0];
+    if (typeof root === "string" && !GUARD_SCOPE_ROOTS.has(root)) {
+      throw new Error(
+        `${context}: this guard references '${root}', but a client-side guard may only reference the transaction 'input' / fan-out 'item' scopes. An expression that reads a DynamoDB attribute must lower to a ConditionExpression (write-condition class), not be evaluated client-side (issue #265). Refusing to evaluate a stale check.`
+      );
+    }
+    return;
+  }
+  for (const value of Object.values(obj)) {
+    if (Array.isArray(value)) {
+      for (const child of value) assertGuardScopes(child, context);
+    } else if (value !== null && typeof value === "object") {
+      for (const child of Object.values(value)) {
+        assertGuardScopes(child, context);
+      }
+    }
+  }
+}
+function evaluateGuard(guard, params, element, context) {
+  assertGuardScopes(guard.expr, context);
+  const scope = { input: toSharedParams(params) };
+  if (element !== void 0) {
+    scope.item = toSharedValue(element);
+  }
+  let result;
+  try {
+    result = evaluateExpression(guard.expr, scope);
+  } catch (exc) {
+    if (exc instanceof ExprFailure) {
+      throw new Error(`${context}: guard evaluation failed (${exc.code}): ${exc.message}`);
+    }
+    throw exc;
+  }
+  if (typeof result !== "boolean") {
+    throw new Error(
+      `${context}: a guard expression must evaluate to a boolean, got ${result === null ? "null" : typeof result} (issue #265).`
+    );
+  }
+  return result;
+}
+
 // src/operations/declarative-transaction.ts
 var PLACEHOLDER_RE = /\{[^{}]+\}/g;
+function hasNonCoreScope(template) {
+  return (template.match(PLACEHOLDER_RE) ?? []).some((m) => {
+    const name = m.slice(1, -1);
+    return name.startsWith("item.") || name.startsWith("result.");
+  });
+}
 function resolveTemplate(template, params, element) {
-  return template.replace(PLACEHOLDER_RE, (match) => {
-    const name = match.slice(1, -1);
-    if (name.startsWith("item.")) {
-      const field2 = name.slice("item.".length);
-      if (!element || !(field2 in element)) {
+  if (hasNonCoreScope(template)) {
+    return template.replace(PLACEHOLDER_RE, (match) => {
+      const name = match.slice(1, -1);
+      if (name.startsWith("item.")) {
+        const field2 = name.slice("item.".length);
+        if (!element || !(field2 in element)) {
+          throw new Error(
+            `declarative transaction: element field '${field2}' is not bound; template '${template}' is only valid inside a forEach over the array param that supplies '${field2}'.`
+          );
+        }
+        return String(element[field2]);
+      }
+      if (!(name in params) || params[name] === void 0 || params[name] === null) {
         throw new Error(
-          `declarative transaction: element field '${field2}' is not bound; template '${template}' is only valid inside a forEach over the array param that supplies '${field2}'.`
+          `declarative transaction: template '${template}' references unbound parameter '${name}'.`
         );
       }
-      return String(element[field2]);
-    }
-    if (!(name in params) || params[name] === void 0 || params[name] === null) {
-      throw new Error(
-        `declarative transaction: template '${template}' references unbound parameter '${name}'.`
-      );
+      return String(params[name]);
+    });
+  }
+  try {
+    return renderTemplate(template, toSharedParams(params));
+  } catch (exc) {
+    if (exc instanceof TemplateFailure && exc.code === "UNBOUND_PARAM") {
+      throw new Error(`declarative transaction: ${exc.message}.`);
     }
-    return String(params[name]);
-  });
+    throw exc;
+  }
 }
 function isWholePlaceholder(template) {
   return /^\{[^{}]+\}$/.test(template);
@@ -847,6 +961,11 @@ function applyCondition(condition, target, params, element) {
     target.ConditionExpression = condition.expression;
     return;
   }
+  if (condition.kind === "scpExpr") {
+    throw new Error(
+      "declarative transaction: this runtime does not evaluate scpExpr write conditions yet (spec 1.2 expression vocabulary, issue #261); evaluation lands with Phase 3 S5 (#265). Refusing to execute the write with its condition ignored."
+    );
+  }
   if (condition.kind === "expr") {
     const concrete = resolveConditionTree(
       condition.declarative,
@@ -1035,10 +1154,14 @@ function expandTransactionItems(spec, manifest, params) {
       }
       for (const element of source) {
         if (item.when && !whenHolds(item.when, params, element)) continue;
+        if (item.guard !== void 0 && !evaluateGuard(item.guard, params, element, "declarative transaction guard"))
+          continue;
         emit(item, element);
       }
     } else {
       if (item.when && !whenHolds(item.when, params, void 0)) continue;
+      if (item.guard !== void 0 && !evaluateGuard(item.guard, params, void 0, "declarative transaction guard"))
+        continue;
       emit(item, void 0);
     }
   }
@@ -1080,9 +1203,9 @@ async function executeDeclarativeTransaction(spec, manifest, params) {
 }
 
 // src/runtime/per-key-cursor.ts
+import { canonicalValue } from "behavior-contracts";
 function serializeContractKey(key2) {
-  const sortedEntries = Object.keys(key2).sort().map((field2) => [field2, key2[field2]]);
-  return JSON.stringify(Object.fromEntries(sortedEntries));
+  return canonicalValue(toSharedValue(key2));
 }
 function encodePerKeyCursor(key2, inner) {
   if (inner === null) return null;
@@ -1291,6 +1414,7 @@ async function executeRangeFanout(op, keys, params = {}) {
 }
 
 // src/runtime/prepared-loader.ts
+import { validateEnvelope, EnvelopeFailure } from "behavior-contracts";
 var LOAD_LABEL = "graphddb.loadPreparedPlan";
 function slotOfBind(bind) {
   if ("param" in bind) return { kind: "param", name: bind.param };
@@ -1490,10 +1614,15 @@ function bindPlan(doc, planId) {
       `${LOAD_LABEL}: unsupported artifact format version '${String(doc.formatVersion)}' (this runtime supports '${PREPARED_FORMAT_VERSION}'). Regenerate the artifact: \`graphddb transform prepared --aot <artifact> --write\`.`
     );
   }
-  if (doc.specVersion !== SPEC_VERSION) {
-    throw new Error(
-      `${LOAD_LABEL}: the artifact was compiled against operation-IR version '${String(doc.specVersion)}' but this runtime speaks '${SPEC_VERSION}'. A version-skewed static plan never executes \u2014 regenerate the artifact.`
-    );
+  try {
+    validateEnvelope(doc, SPEC_VERSION_SUPPORTED, { field: "specVersion", label: LOAD_LABEL });
+  } catch (exc) {
+    if (exc instanceof EnvelopeFailure) {
+      throw new Error(
+        `${LOAD_LABEL}: the artifact was compiled against operation-IR version '${String(doc.specVersion)}' but this runtime speaks '${SPEC_VERSION_SUPPORTED}'. A version-skewed static plan never executes \u2014 regenerate the artifact.`
+      );
+    }
+    throw exc;
   }
   const plan2 = doc.plans[planId];
   if (plan2 === void 0) {
@@ -1938,6 +2067,7 @@ function collectConditionParams(condition, out) {
   }
   const obj = condition;
   if (obj.notExists === true) return;
+  if ("scpExpr" in obj) return;
   if (typeof obj.attributeExists === "string") return;
   if (typeof obj.attributeNotExists === "string") return;
   collectConditionTreeParams(obj, out);
@@ -2127,6 +2257,7 @@ export {
   DynamoExecutor,
   EDGE_WRITES_MARKER,
   ENTITY_WRITES_MARKER,
+  EXPR_VERSION,
   LIFECYCLE_CONTRACT_MARKER,
   Linter,
   MAINT_OUTBOX_PK_PREFIX,
@@ -2139,7 +2270,9 @@ export {
   PreparedReadStatement,
   PreparedWriteStatement,
   RetryingExecutor,
+  SCP_LOWERED_MARKER,
   SPEC_VERSION,
+  SPEC_VERSION_SCP,
   TableMapping,
   TransactionContext,
   aggregate,
@@ -2168,6 +2301,7 @@ export {
   buildTransactions,
   buildUpdateExpression,
   buildUpdateInput,
+  canonicalizeExpressionSpec,
   cdcProjected,
   collectContractBoundaryViolations,
   collectContractN1Violations,
@@ -2194,6 +2328,7 @@ export {
   definePut,
   defineQueries,
   defineQuery,
+  defineScpTransaction,
   defineTransaction,
   defineTransactions,
   defineUpdate,
@@ -2276,6 +2411,8 @@ export {
   noScanRule,
   number,
   numberSet,
+  operationsContainScpNodes,
+  operationsSpecVersion,
   param,
   parseChange,
   plan,

package/dist/linter/index.d.ts

@@ -1,8 +1,9 @@
-import { L as LintRule } from '../registry-pAnFcc62.js';
-export { a as LintResult, b as Linter } from '../registry-pAnFcc62.js';
-export { c as createDefaultLinter, g as gsiAmbiguityRule, m as missingGsiRule, n as noScanRule, q as queryBoundaryRule, r as relationDepthRule, a as requireLimitRule } from '../relation-depth-C9t4s9bt.js';
-import '../maintenance-view-adapter-BCbgKG5d.js';
+import { L as LintRule } from '../registry-LWE54Sdc.js';
+export { a as LintResult, b as Linter } from '../registry-LWE54Sdc.js';
+export { c as createDefaultLinter, g as gsiAmbiguityRule, m as missingGsiRule, n as noScanRule, q as queryBoundaryRule, r as relationDepthRule, a as requireLimitRule } from '../relation-depth-BRS513Tq.js';
+import '../maintenance-view-adapter-BAZ9uBGe.js';
 import '@aws-sdk/client-dynamodb';
+import '../types-BQLzTEqh.js';
 
 /**
  * `samePartition` preset validator (Epic #118 child issue H).