mindoodb 0.0.85 → 0.0.88

package/dist/core/builtinDbInvariants.d.ts

@@ -63,6 +63,44 @@ export interface BuiltinWriteDecision {
     allowed: boolean;
     reason: string;
 }
+/**
+ * Prefixes of **personal databases**: `<prefix><grantDocId>` belongs to the
+ * person whose `grantaccess` document has that id (docs/accesscontrol.md
+ * §6.11). Built in, like the `directory` and `userdirectory` invariants:
+ *
+ * - read and sync only for the devices on that grant, identities whose grant
+ *   lists the prefix in `accessPrefixes` (a service such as the mail gateway
+ *   that serves every person's outbox), and the tenant admin,
+ * - deposit (push of sealed creates only, §6.10) only for identities whose
+ *   grant lists the prefix in `depositPrefixes`,
+ *
+ * whatever a configured policy says; a policy can add prefixes
+ * (`personalDatabasePrefixes`) and can deny more, never allow more.
+ *
+ * `mmail_` — MindooMail's mailbox (`mmail_${user.persondocid}` in Haven); the
+ *   mail gateway deposits incoming mail.
+ * `mmailout_` — MindooMail's outbox: the person writes outgoing mail, the mail
+ *   gateway (accessPrefixes) reads it, sends it and writes status documents.
+ */
+export declare const BUILTIN_PERSONAL_DATABASE_PREFIXES: readonly ["mmail_", "mmailout_"];
+/**
+ * Default document-id prefixes a depositor may use in a built-in personal
+ * database (docs/accesscontrol.md §6.11): deposits into a mailbox are MindooMail
+ * messages (`memo_…`), so documents of other kinds (events, status, folders)
+ * there are always the owner's own. A grant's `depositDocIdPrefixes` overrides
+ * this per database prefix.
+ */
+export declare const BUILTIN_PERSONAL_DEPOSIT_DOC_ID_PREFIXES: Readonly<Record<string, readonly string[]>>;
+/** A valid personal-database prefix: lowercase letters and digits, ending in `_`. */
+export declare const PERSONAL_DATABASE_PREFIX_REGEX: RegExp;
+/**
+ * The owner of a personal database: the matching prefix and the grant id
+ * that follows it, or `null` when `dbId` is not a personal database.
+ */
+export declare function personalDatabaseOwner(dbId: string, extraPrefixes?: readonly string[]): {
+    prefix: string;
+    grantDocId: string;
+} | null;
 export declare function hasBuiltinWriteInvariant(dbId: string): boolean;
 export declare function evaluateBuiltinWrite(input: BuiltinWriteInput): BuiltinWriteDecision;
 /**
@@ -89,4 +127,15 @@ export declare function shouldSkipLoadedEntry(input: {
     docId?: string;
     creatorUsernameHash?: string | null;
 }): boolean;
+/** Document-id prefix of a purge request inside a personal database. */
+export declare const PURGE_REQUEST_ID_PREFIX = "purgereq_";
+/** `form` of a purge request document. */
+export declare const PURGE_REQUEST_FORM = "purgerequest";
+/** Whether `docId` is a purge request of a personal database. */
+export declare function isPurgeRequestDocId(docId: string): boolean;
+/**
+ * The document ids a purge request names, from its decrypted `doc_create`
+ * payload (`$publicinfos`), or null when the payload is not a purge request.
+ */
+export declare function purgeRequestDocIdsFromCreateBytes(changeBytes: Uint8Array): string[] | null;
 //# sourceMappingURL=builtinDbInvariants.d.ts.map

package/dist/core/builtinDbInvariants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builtinDbInvariants.d.ts","sourceRoot":"","sources":["../../src/core/builtinDbInvariants.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,cAAc,GAAG,cAAc,CAAC;AAE1G;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,wBAAwB,mCAAoC,CAAC;AAE1E,kEAAkE;AAClE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAGtF;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,cAAc,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,oBAAoB,CAqEnF;AA4ED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAgBxF;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAc7E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,GAAG,OAAO,CAsCV"}
+{"version":3,"file":"builtinDbInvariants.d.ts","sourceRoot":"","sources":["../../src/core/builtinDbInvariants.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,cAAc,GAAG,cAAc,CAAC;AAE1G;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,wBAAwB,mCAAoC,CAAC;AAE1E,kEAAkE;AAClE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAGtF;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,cAAc,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kCAAkC,kCAAmC,CAAC;AAEnF;;;;;;GAMG;AACH,eAAO,MAAM,wCAAwC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAEhG,CAAC;AAEF,qFAAqF;AACrF,eAAO,MAAM,8BAA8B,QAAsB,CAAC;AAElE;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,aAAa,GAAE,SAAS,MAAM,EAAO,GACpC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAO/C;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,oBAAoB,CAqEnF;AA4ED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAgBxF;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAc7E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,GAAG,OAAO,CAsCV;AAMD,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,cAAc,CAAC;AACnD,0CAA0C;AAC1C,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAEjD,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,IAAI,CAkB1F"}

package/dist/core/builtinDbInvariants.js

@@ -1,12 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PERSONAL_DOC_ID_PREFIXES = void 0;
+exports.PURGE_REQUEST_FORM = exports.PURGE_REQUEST_ID_PREFIX = exports.PERSONAL_DATABASE_PREFIX_REGEX = exports.BUILTIN_PERSONAL_DEPOSIT_DOC_ID_PREFIXES = exports.BUILTIN_PERSONAL_DATABASE_PREFIXES = exports.PERSONAL_DOC_ID_PREFIXES = void 0;
 exports.isPersonalUserdirectoryDocId = isPersonalUserdirectoryDocId;
+exports.personalDatabaseOwner = personalDatabaseOwner;
 exports.hasBuiltinWriteInvariant = hasBuiltinWriteInvariant;
 exports.evaluateBuiltinWrite = evaluateBuiltinWrite;
 exports.usernameHashFromCreateChangeBytes = usernameHashFromCreateChangeBytes;
 exports.entryTypeToBuiltinOp = entryTypeToBuiltinOp;
 exports.shouldSkipLoadedEntry = shouldSkipLoadedEntry;
+exports.isPurgeRequestDocId = isPurgeRequestDocId;
+exports.purgeRequestDocIdsFromCreateBytes = purgeRequestDocIdsFromCreateBytes;
 const automerge_adapter_1 = require("./automerge-adapter");
 const DirectoryStateNode_1 = require("./accesscontrol/DirectoryStateNode");
 const types_1 = require("./types");
@@ -34,6 +37,50 @@ function isPersonalUserdirectoryDocId(docId) {
         return false;
     return exports.PERSONAL_DOC_ID_PREFIXES.some((prefix) => docId.startsWith(prefix));
 }
+/**
+ * Prefixes of **personal databases**: `<prefix><grantDocId>` belongs to the
+ * person whose `grantaccess` document has that id (docs/accesscontrol.md
+ * §6.11). Built in, like the `directory` and `userdirectory` invariants:
+ *
+ * - read and sync only for the devices on that grant, identities whose grant
+ *   lists the prefix in `accessPrefixes` (a service such as the mail gateway
+ *   that serves every person's outbox), and the tenant admin,
+ * - deposit (push of sealed creates only, §6.10) only for identities whose
+ *   grant lists the prefix in `depositPrefixes`,
+ *
+ * whatever a configured policy says; a policy can add prefixes
+ * (`personalDatabasePrefixes`) and can deny more, never allow more.
+ *
+ * `mmail_` — MindooMail's mailbox (`mmail_${user.persondocid}` in Haven); the
+ *   mail gateway deposits incoming mail.
+ * `mmailout_` — MindooMail's outbox: the person writes outgoing mail, the mail
+ *   gateway (accessPrefixes) reads it, sends it and writes status documents.
+ */
+exports.BUILTIN_PERSONAL_DATABASE_PREFIXES = ["mmail_", "mmailout_"];
+/**
+ * Default document-id prefixes a depositor may use in a built-in personal
+ * database (docs/accesscontrol.md §6.11): deposits into a mailbox are MindooMail
+ * messages (`memo_…`), so documents of other kinds (events, status, folders)
+ * there are always the owner's own. A grant's `depositDocIdPrefixes` overrides
+ * this per database prefix.
+ */
+exports.BUILTIN_PERSONAL_DEPOSIT_DOC_ID_PREFIXES = {
+    mmail_: ["memo_"],
+};
+/** A valid personal-database prefix: lowercase letters and digits, ending in `_`. */
+exports.PERSONAL_DATABASE_PREFIX_REGEX = /^[a-z][a-z0-9]*_$/;
+/**
+ * The owner of a personal database: the matching prefix and the grant id
+ * that follows it, or `null` when `dbId` is not a personal database.
+ */
+function personalDatabaseOwner(dbId, extraPrefixes = []) {
+    for (const prefix of [...exports.BUILTIN_PERSONAL_DATABASE_PREFIXES, ...extraPrefixes]) {
+        if (dbId.startsWith(prefix) && dbId.length > prefix.length) {
+            return { prefix, grantDocId: dbId.slice(prefix.length) };
+        }
+    }
+    return null;
+}
 function hasBuiltinWriteInvariant(dbId) {
     return dbId === types_1.DIRECTORY_DB_ID || dbId === types_1.USER_DIRECTORY_DB_ID;
 }
@@ -250,4 +297,42 @@ function shouldSkipLoadedEntry(input) {
     }
     return false;
 }
+// ---------------------------------------------------------------------------
+// Hard delete in personal databases (docs/accesscontrol.md §6.11, "Purge")
+// ---------------------------------------------------------------------------
+/** Document-id prefix of a purge request inside a personal database. */
+exports.PURGE_REQUEST_ID_PREFIX = "purgereq_";
+/** `form` of a purge request document. */
+exports.PURGE_REQUEST_FORM = "purgerequest";
+/** Whether `docId` is a purge request of a personal database. */
+function isPurgeRequestDocId(docId) {
+    return docId.startsWith(exports.PURGE_REQUEST_ID_PREFIX);
+}
+/**
+ * The document ids a purge request names, from its decrypted `doc_create`
+ * payload (`$publicinfos`), or null when the payload is not a purge request.
+ */
+function purgeRequestDocIdsFromCreateBytes(changeBytes) {
+    const fromRecord = (record) => {
+        if (!record || record.form !== exports.PURGE_REQUEST_FORM || !Array.isArray(record.docIds))
+            return null;
+        const ids = record.docIds.map((id) => String(id)).filter((id) => id.length > 0);
+        return ids.length > 0 ? ids : null;
+    };
+    try {
+        const [doc] = automerge_adapter_1.Automerge.applyChanges(automerge_adapter_1.Automerge.init(), [changeBytes]);
+        const ids = fromRecord(JSON.parse(JSON.stringify(doc)));
+        if (ids)
+            return ids;
+    }
+    catch {
+        // Payload may be a full Automerge document rather than a change.
+    }
+    try {
+        return fromRecord(JSON.parse(JSON.stringify(automerge_adapter_1.Automerge.load(changeBytes))));
+    }
+    catch {
+        return null;
+    }
+}
 //# sourceMappingURL=builtinDbInvariants.js.map

package/dist/core/builtinDbInvariants.js.map

@@ -1 +1 @@
-{"version":3,"file":"builtinDbInvariants.js","sourceRoot":"","sources":["../../src/core/builtinDbInvariants.ts"],"names":[],"mappings":";;;AA+CA,oEAGC;AA4BD,4DAEC;AAED,oDAqEC;AAkFD,8EAgBC;AAED,oDAcC;AAQD,sDA+CC;AAhUD,2DAAgD;AAChD,2EAAsE;AACtE,mCAAgE;AAyBhE;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,wBAAwB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE1E,kEAAkE;AAClE,SAAgB,4BAA4B,CAAC,KAAgC;IAC3E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,gCAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,CAAC;AA4BD,SAAgB,wBAAwB,CAAC,IAAY;IACnD,OAAO,IAAI,KAAK,uBAAe,IAAI,IAAI,KAAK,4BAAoB,CAAC;AACnE,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAwB;IAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAe,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC;QAC/F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,4BAAoB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;YAC9B,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE;gBACzD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QAC7E,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;YAChC,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;YAC9E,IACE,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;YACnE,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,wEAAwE;aACjF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;YAC9B,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YAC5E,IACE,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;YAChE,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sEAAsE;aAC/E,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,IACE,KAAK,CAAC,oBAAoB;YAC1B,KAAK,CAAC,kBAAkB;YACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IACxF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAC/B,KAAwB,EACxB,OAAgB;IAEhB,MAAM,OAAO,GAAG,OAAO,CACrB,KAAK,CAAC,mBAAmB;QACvB,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,kBAAkB,CACzD,CAAC;IACF,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;QAC9B,wEAAwE;QACxE,qEAAqE;QACrE,2CAA2C;QAC3C,IAAI,OAAO,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACpE,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,0DACN,KAAK,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UACzC,sBAAsB;SACvB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,8DAA8D;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,sEAAsE;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAA4B;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iCAAiC,CAAC,WAAuB;IACvE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,GAAG,6BAAS,CAAC,YAAY,CAClC,6BAAS,CAAC,IAAI,EAA2B,EACzC,CAAC,WAAW,CAAC,CACd,CAAC;QACF,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAA8B,CAAC,CAAC;QAC1E,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,6BAAS,CAAC,IAAI,CAA0B,WAAW,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAAiB;IACpD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,KASrC;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAe,EAAE,CAAC;QACnC,OAAO,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,4BAAoB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,uEAAuE;YACvE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY;gBAAE,OAAO,KAAK,CAAC;YACnD,MAAM,WAAW,GACf,KAAK,CAAC,SAAS,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,CAAC;YACzE,IAAI,OAAO;gBAAE,OAAO,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,kBAAkB;gBAAE,OAAO,KAAK,CAAC;YAC1E,OAAO,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,kBAAkB,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,OAAO,CAAC;QAClB,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;YAC3E,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3B,IACE,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"builtinDbInvariants.js","sourceRoot":"","sources":["../../src/core/builtinDbInvariants.ts"],"names":[],"mappings":";;;AA+CA,oEAGC;AAmED,sDAUC;AAED,4DAEC;AAED,oDAqEC;AAkFD,8EAgBC;AAED,oDAcC;AAQD,sDA+CC;AAYD,kDAEC;AAMD,8EAkBC;AAzZD,2DAAgD;AAChD,2EAAsE;AACtE,mCAAgE;AAyBhE;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,wBAAwB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE1E,kEAAkE;AAClE,SAAgB,4BAA4B,CAAC,KAAgC;IAC3E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,gCAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,CAAC;AA4BD;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,kCAAkC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAU,CAAC;AAEnF;;;;;;GAMG;AACU,QAAA,wCAAwC,GAAgD;IACnG,MAAM,EAAE,CAAC,OAAO,CAAC;CAClB,CAAC;AAEF,qFAAqF;AACxE,QAAA,8BAA8B,GAAG,mBAAmB,CAAC;AAElE;;;GAGG;AACH,SAAgB,qBAAqB,CACnC,IAAY,EACZ,gBAAmC,EAAE;IAErC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,0CAAkC,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAAY;IACnD,OAAO,IAAI,KAAK,uBAAe,IAAI,IAAI,KAAK,4BAAoB,CAAC;AACnE,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAwB;IAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAe,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC;QAC/F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,4BAAoB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;YAC9B,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE;gBACzD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QAC7E,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;YAChC,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;YAC9E,IACE,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;YACnE,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,wEAAwE;aACjF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;YAC9B,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YAC5E,IACE,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;YAChE,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sEAAsE;aAC/E,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,IACE,KAAK,CAAC,oBAAoB;YAC1B,KAAK,CAAC,kBAAkB;YACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IACxF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAC/B,KAAwB,EACxB,OAAgB;IAEhB,MAAM,OAAO,GAAG,OAAO,CACrB,KAAK,CAAC,mBAAmB;QACvB,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,kBAAkB,CACzD,CAAC;IACF,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;QAC9B,wEAAwE;QACxE,qEAAqE;QACrE,2CAA2C;QAC3C,IAAI,OAAO,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACpE,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,IAAI,KAAK,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,0DACN,KAAK,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UACzC,sBAAsB;SACvB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,8DAA8D;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,sEAAsE;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAA4B;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iCAAiC,CAAC,WAAuB;IACvE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,GAAG,6BAAS,CAAC,YAAY,CAClC,6BAAS,CAAC,IAAI,EAA2B,EACzC,CAAC,WAAW,CAAC,CACd,CAAC;QACF,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAA8B,CAAC,CAAC;QAC1E,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,6BAAS,CAAC,IAAI,CAA0B,WAAW,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAAiB;IACpD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,KASrC;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAe,EAAE,CAAC;QACnC,OAAO,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,4BAAoB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,uEAAuE;YACvE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY;gBAAE,OAAO,KAAK,CAAC;YACnD,MAAM,WAAW,GACf,KAAK,CAAC,SAAS,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,CAAC;YACzE,IAAI,OAAO;gBAAE,OAAO,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,kBAAkB;gBAAE,OAAO,KAAK,CAAC;YAC1E,OAAO,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,kBAAkB,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,OAAO,CAAC;QAClB,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;YAC3E,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3B,IACE,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,kBAAkB,EACvD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E,wEAAwE;AAC3D,QAAA,uBAAuB,GAAG,WAAW,CAAC;AACnD,0CAA0C;AAC7B,QAAA,kBAAkB,GAAG,cAAc,CAAC;AAEjD,iEAAiE;AACjE,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,CAAC,UAAU,CAAC,+BAAuB,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,SAAgB,iCAAiC,CAAC,WAAuB;IACvE,MAAM,UAAU,GAAG,CAAC,MAAsC,EAAmB,EAAE;QAC7E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,0BAAkB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChG,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,GAAG,6BAAS,CAAC,YAAY,CAAC,6BAAS,CAAC,IAAI,EAA2B,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAA4B,CAAC,CAAC;QACnF,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,6BAAS,CAAC,IAAI,CAA0B,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/crypto/AuthChallenge.d.ts

@@ -0,0 +1,68 @@
+/**
+ * What a client signs when it answers a login challenge, and what a server
+ * accepts back.
+ *
+ * Every login in MindooDB is challenge/response with an Ed25519 key: a user's
+ * device key against a tenant server (sync, Iroh), the system admin key, a
+ * server's key against a peer server, and device discovery. Those keys sign
+ * other things too — store entries (`EntrySignature.ts`), app seals
+ * (`DomainStatement.ts`), witness receipts — so the bytes a challenge makes
+ * the key sign must never be one of those.
+ *
+ * Until v2 the client signed the challenge string as it came. The side that
+ * issues the challenge is the side the client is logging in to — a server, or
+ * on Iroh a peer device — so whoever ran it could send any string and get a
+ * signature over its UTF-8 bytes. The entry layout is expressible as UTF-8,
+ * which made that a way to obtain a valid author signature over a forged entry.
+ *
+ * ## The two challenge forms
+ *
+ * - **v2** (`mindoodb-auth-challenge/v2:<uuid>`): issued by current servers.
+ *   The client signs `utf8("mindoodb-auth/v2") || 0x00 || utf8(challenge)`,
+ *   a domain no other signer in MindooDB uses.
+ * - **legacy** (a bare UUID): issued by servers that predate v2. The client
+ *   signs the UUID's bytes as before. A UUID starts with a hex digit, so it
+ *   cannot be an entry layout (version byte `0x01`) or a domain statement
+ *   (`mindoodb-…`).
+ *
+ * A client refuses to sign anything else. That alone closes the attack against
+ * a hostile server or peer, whatever version it runs.
+ *
+ * ## Transition
+ *
+ * Clients that predate v2 sign whatever string they get, so they answer a v2
+ * challenge with a raw signature over it. Servers accept that as long as
+ * `acceptLegacySignatures` is on (the default) — it is still safe, because the
+ * server chose the bytes. Switch it off once no old clients remain.
+ */
+/** Prefix of a v2 challenge. Not a signing domain: the client adds its own. */
+export declare const AUTH_CHALLENGE_V2_PREFIX = "mindoodb-auth-challenge/v2:";
+/** Domain a v2 challenge response is signed under. */
+export declare const AUTH_CHALLENGE_SIGNING_DOMAIN = "mindoodb-auth/v2";
+/** A fresh v2 challenge, for a server to hand out. */
+export declare function issueAuthChallenge(): string;
+/** Which form `challenge` is in, or null when a client must not sign it. */
+export declare function authChallengeForm(challenge: unknown): "v2" | "legacy" | null;
+/**
+ * The bytes a client signs to answer `challenge`. Throws for anything that is
+ * neither a v2 challenge nor a bare UUID — the server or peer sending it is
+ * either broken or trying to get a signature over bytes of its choosing.
+ */
+export declare function authChallengeSigningBytes(challenge: string): Uint8Array<ArrayBuffer>;
+/**
+ * The byte strings a server accepts a signature over, for a challenge it
+ * issued itself: the v2 domain form, plus the raw string from clients that
+ * predate v2 while `acceptLegacySignatures` is on. A legacy (bare UUID)
+ * challenge only ever had the raw form.
+ */
+export declare function authChallengeVerificationInputs(challenge: string, options?: {
+    acceptLegacySignatures?: boolean;
+}): Uint8Array<ArrayBuffer>[];
+/**
+ * Verify a challenge response against an imported Ed25519 public key, trying
+ * each form {@link authChallengeVerificationInputs} allows.
+ */
+export declare function verifyAuthChallengeSignature(subtle: SubtleCrypto, publicKey: CryptoKey, challenge: string, signature: Uint8Array, options?: {
+    acceptLegacySignatures?: boolean;
+}): Promise<boolean>;
+//# sourceMappingURL=AuthChallenge.d.ts.map

package/dist/core/crypto/AuthChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthChallenge.d.ts","sourceRoot":"","sources":["../../../src/core/crypto/AuthChallenge.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,sDAAsD;AACtD,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAMhE,sDAAsD;AACtD,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,IAAI,CAQ5E;AAYD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAYpF;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAAO,GACjD,UAAU,CAAC,WAAW,CAAC,EAAE,CAM3B;AAED;;;GAGG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,GAAE;IAAE,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAAO,GACjD,OAAO,CAAC,OAAO,CAAC,CAWlB"}

package/dist/core/crypto/AuthChallenge.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_CHALLENGE_SIGNING_DOMAIN = exports.AUTH_CHALLENGE_V2_PREFIX = void 0;
+exports.issueAuthChallenge = issueAuthChallenge;
+exports.authChallengeForm = authChallengeForm;
+exports.authChallengeSigningBytes = authChallengeSigningBytes;
+exports.authChallengeVerificationInputs = authChallengeVerificationInputs;
+exports.verifyAuthChallengeSignature = verifyAuthChallengeSignature;
+const idGeneration_1 = require("../utils/idGeneration");
+/**
+ * What a client signs when it answers a login challenge, and what a server
+ * accepts back.
+ *
+ * Every login in MindooDB is challenge/response with an Ed25519 key: a user's
+ * device key against a tenant server (sync, Iroh), the system admin key, a
+ * server's key against a peer server, and device discovery. Those keys sign
+ * other things too — store entries (`EntrySignature.ts`), app seals
+ * (`DomainStatement.ts`), witness receipts — so the bytes a challenge makes
+ * the key sign must never be one of those.
+ *
+ * Until v2 the client signed the challenge string as it came. The side that
+ * issues the challenge is the side the client is logging in to — a server, or
+ * on Iroh a peer device — so whoever ran it could send any string and get a
+ * signature over its UTF-8 bytes. The entry layout is expressible as UTF-8,
+ * which made that a way to obtain a valid author signature over a forged entry.
+ *
+ * ## The two challenge forms
+ *
+ * - **v2** (`mindoodb-auth-challenge/v2:<uuid>`): issued by current servers.
+ *   The client signs `utf8("mindoodb-auth/v2") || 0x00 || utf8(challenge)`,
+ *   a domain no other signer in MindooDB uses.
+ * - **legacy** (a bare UUID): issued by servers that predate v2. The client
+ *   signs the UUID's bytes as before. A UUID starts with a hex digit, so it
+ *   cannot be an entry layout (version byte `0x01`) or a domain statement
+ *   (`mindoodb-…`).
+ *
+ * A client refuses to sign anything else. That alone closes the attack against
+ * a hostile server or peer, whatever version it runs.
+ *
+ * ## Transition
+ *
+ * Clients that predate v2 sign whatever string they get, so they answer a v2
+ * challenge with a raw signature over it. Servers accept that as long as
+ * `acceptLegacySignatures` is on (the default) — it is still safe, because the
+ * server chose the bytes. Switch it off once no old clients remain.
+ */
+/** Prefix of a v2 challenge. Not a signing domain: the client adds its own. */
+exports.AUTH_CHALLENGE_V2_PREFIX = "mindoodb-auth-challenge/v2:";
+/** Domain a v2 challenge response is signed under. */
+exports.AUTH_CHALLENGE_SIGNING_DOMAIN = "mindoodb-auth/v2";
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const textEncoder = new TextEncoder();
+/** A fresh v2 challenge, for a server to hand out. */
+function issueAuthChallenge() {
+    return `${exports.AUTH_CHALLENGE_V2_PREFIX}${(0, idGeneration_1.generateRandomUuid)()}`;
+}
+/** Which form `challenge` is in, or null when a client must not sign it. */
+function authChallengeForm(challenge) {
+    if (typeof challenge !== "string") {
+        return null;
+    }
+    if (challenge.startsWith(exports.AUTH_CHALLENGE_V2_PREFIX)) {
+        return UUID_PATTERN.test(challenge.slice(exports.AUTH_CHALLENGE_V2_PREFIX.length)) ? "v2" : null;
+    }
+    return UUID_PATTERN.test(challenge) ? "legacy" : null;
+}
+function domainBytes(challenge) {
+    const prefix = textEncoder.encode(exports.AUTH_CHALLENGE_SIGNING_DOMAIN);
+    const body = textEncoder.encode(challenge);
+    const out = new Uint8Array(prefix.byteLength + 1 + body.byteLength);
+    out.set(prefix, 0);
+    out[prefix.byteLength] = 0x00;
+    out.set(body, prefix.byteLength + 1);
+    return out;
+}
+/**
+ * The bytes a client signs to answer `challenge`. Throws for anything that is
+ * neither a v2 challenge nor a bare UUID — the server or peer sending it is
+ * either broken or trying to get a signature over bytes of its choosing.
+ */
+function authChallengeSigningBytes(challenge) {
+    const form = authChallengeForm(challenge);
+    if (form === "v2") {
+        return domainBytes(challenge);
+    }
+    if (form === "legacy") {
+        return textEncoder.encode(challenge);
+    }
+    throw new Error("Refusing to sign a login challenge in an unknown format. "
+        + "The server or peer is not a MindooDB server, or is misbehaving.");
+}
+/**
+ * The byte strings a server accepts a signature over, for a challenge it
+ * issued itself: the v2 domain form, plus the raw string from clients that
+ * predate v2 while `acceptLegacySignatures` is on. A legacy (bare UUID)
+ * challenge only ever had the raw form.
+ */
+function authChallengeVerificationInputs(challenge, options = {}) {
+    const raw = textEncoder.encode(challenge);
+    if (authChallengeForm(challenge) !== "v2") {
+        return [raw];
+    }
+    return options.acceptLegacySignatures === false ? [domainBytes(challenge)] : [domainBytes(challenge), raw];
+}
+/**
+ * Verify a challenge response against an imported Ed25519 public key, trying
+ * each form {@link authChallengeVerificationInputs} allows.
+ */
+async function verifyAuthChallengeSignature(subtle, publicKey, challenge, signature, options = {}) {
+    const signatureBytes = signature.buffer.slice(signature.byteOffset, signature.byteOffset + signature.byteLength);
+    for (const message of authChallengeVerificationInputs(challenge, options)) {
+        if (await subtle.verify({ name: "Ed25519" }, publicKey, signatureBytes, message)) {
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=AuthChallenge.js.map

package/dist/core/crypto/AuthChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthChallenge.js","sourceRoot":"","sources":["../../../src/core/crypto/AuthChallenge.ts"],"names":[],"mappings":";;;AAmDA,gDAEC;AAGD,8CAQC;AAiBD,8DAYC;AAQD,0EASC;AAMD,oEAiBC;AArID,wDAA2D;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,+EAA+E;AAClE,QAAA,wBAAwB,GAAG,6BAA6B,CAAC;AAEtE,sDAAsD;AACzC,QAAA,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE,MAAM,YAAY,GAAG,iEAAiE,CAAC;AAEvF,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,sDAAsD;AACtD,SAAgB,kBAAkB;IAChC,OAAO,GAAG,gCAAwB,GAAG,IAAA,iCAAkB,GAAE,EAAE,CAAC;AAC9D,CAAC;AAED,4EAA4E;AAC5E,SAAgB,iBAAiB,CAAC,SAAkB;IAClD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,gCAAwB,CAAC,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gCAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,qCAA6B,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CAAC,SAAiB;IACzD,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,2DAA2D;UACvD,iEAAiE,CACtE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,+BAA+B,CAC7C,SAAiB,EACjB,UAAgD,EAAE;IAElD,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,iBAAiB,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,sBAAsB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7G,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,4BAA4B,CAChD,MAAoB,EACpB,SAAoB,EACpB,SAAiB,EACjB,SAAqB,EACrB,UAAgD,EAAE;IAElD,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAC3C,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAC7B,CAAC;IACjB,KAAK,MAAM,OAAO,IAAI,+BAA+B,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1E,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/crypto/DomainStatement.d.ts

@@ -14,9 +14,11 @@
  *
  * and `domain` must come from {@link SIGNING_DOMAINS}. Because every allowed
  * domain starts with an ASCII letter while the entry layout starts with its
- * version byte `0x01`, and challenges are random tokens that never begin with
- * `"mindoodb-"`, the three input spaces cannot overlap. The `0x00` separator
- * stops one domain from being a prefix of another.
+ * version byte `0x01`, the two cannot overlap. Login challenges are signed
+ * under their own domain `mindoodb-auth/v2`, or — against servers older than
+ * that — only when they are a bare UUID (`crypto/AuthChallenge.ts`), so they
+ * stay out of both spaces too. The `0x00` separator stops one domain from
+ * being a prefix of another.
  */
 /**
  * Every purpose an app may request a signature for. Deliberately a closed list:

package/dist/core/crypto/DomainStatement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DomainStatement.d.ts","sourceRoot":"","sources":["../../../src/core/crypto/DomainStatement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B,gFAAgF;;EAEvE,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAInF,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAErD,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,MAAM,EAAE,MAAM;CAM3B;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,aAAa,CAE9E;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAI1F;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAa3F"}
+{"version":3,"file":"DomainStatement.d.ts","sourceRoot":"","sources":["../../../src/core/crypto/DomainStatement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B,gFAAgF;;EAEvE,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAInF,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAErD,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,MAAM,EAAE,MAAM;CAM3B;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,aAAa,CAE9E;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAI1F;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAa3F"}

package/dist/core/crypto/DomainStatement.js

@@ -15,9 +15,11 @@
  *
  * and `domain` must come from {@link SIGNING_DOMAINS}. Because every allowed
  * domain starts with an ASCII letter while the entry layout starts with its
- * version byte `0x01`, and challenges are random tokens that never begin with
- * `"mindoodb-"`, the three input spaces cannot overlap. The `0x00` separator
- * stops one domain from being a prefix of another.
+ * version byte `0x01`, the two cannot overlap. Login challenges are signed
+ * under their own domain `mindoodb-auth/v2`, or — against servers older than
+ * that — only when they are a bare UUID (`crypto/AuthChallenge.ts`), so they
+ * stay out of both spaces too. The `0x00` separator stops one domain from
+ * being a prefix of another.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InvalidSigningDomainError = exports.MAX_DOMAIN_STATEMENT_BYTES = exports.SIGNING_DOMAINS = void 0;

package/dist/core/crypto/DomainStatement.js.map

@@ -1 +1 @@
-{"version":3,"file":"DomainStatement.js","sourceRoot":"","sources":["../../../src/core/crypto/DomainStatement.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AA2BH,wDAEC;AAED,gEAIC;AAQD,8DAaC;AAtDD;;;GAGG;AACU,QAAA,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,gFAAgF;IAChF,OAAO,EAAE,kBAAkB;CACnB,CAAC,CAAC;AAIZ,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAe,CAAC,CAAC,CAAC;AAErF,+DAA+D;AAClD,QAAA,0BAA0B,GAAG,GAAG,GAAG,IAAI,CAAC;AAErD,MAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,MAAc;QACxB,KAAK,CACH,IAAI,MAAM,wDAAwD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5G,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAPD,8DAOC;AAED,SAAgB,sBAAsB,CAAC,MAAc;IACnD,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,0BAA0B,CAAC,MAAc;IACvD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB,CAAC,MAAc,EAAE,SAAqB;IAC7E,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,SAAS,CAAC,UAAU,GAAG,kCAA0B,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,wBAAwB,SAAS,CAAC,UAAU,eAAe,kCAA0B,GAAG,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACzE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"DomainStatement.js","sourceRoot":"","sources":["../../../src/core/crypto/DomainStatement.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AA2BH,wDAEC;AAED,gEAIC;AAQD,8DAaC;AAtDD;;;GAGG;AACU,QAAA,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,gFAAgF;IAChF,OAAO,EAAE,kBAAkB;CACnB,CAAC,CAAC;AAIZ,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAe,CAAC,CAAC,CAAC;AAErF,+DAA+D;AAClD,QAAA,0BAA0B,GAAG,GAAG,GAAG,IAAI,CAAC;AAErD,MAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,MAAc;QACxB,KAAK,CACH,IAAI,MAAM,wDAAwD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5G,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAPD,8DAOC;AAED,SAAgB,sBAAsB,CAAC,MAAc;IACnD,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,0BAA0B,CAAC,MAAc;IACvD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB,CAAC,MAAc,EAAE,SAAqB;IAC7E,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,SAAS,CAAC,UAAU,GAAG,kCAA0B,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,wBAAwB,SAAS,CAAC,UAAU,eAAe,kCAA0B,GAAG,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACzE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/crypto/encryptedFields.d.ts

@@ -6,6 +6,10 @@
 export interface EncryptedFieldDecryptor {
     decryptPayload(encryptedPayload: Uint8Array, decryptionKeyId: string): Promise<Uint8Array>;
 }
+/** Minimal encryptor surface for {@link encryptEncryptedField} (a subset of `MindooTenant`). */
+export interface EncryptedFieldEncryptor {
+    encryptPayload(payload: Uint8Array, decryptionKeyId: string): Promise<Uint8Array>;
+}
 /**
  * Resolves the symmetric key id for an `_encrypted` field following the
  * `<field>_encrypted` / `<field>_encrypted_key` naming convention.
@@ -14,6 +18,13 @@ export interface EncryptedFieldDecryptor {
  * field on the document -> the tenant default key (`"default"`).
  */
 export declare function getEncryptedFieldKeyId(data: Record<string, unknown>, encryptedFieldName: string, override?: string | null): string;
+/**
+ * Encrypts UTF-8 `plaintext` for an `_encrypted` field with the symmetric key
+ * `keyId` (default: the tenant `default` key), the counterpart of
+ * {@link decryptEncryptedField}. Store a non-default `keyId` in the
+ * `<field>_key` companion field so readers find it.
+ */
+export declare function encryptEncryptedField(encryptor: EncryptedFieldEncryptor, plaintext: string, keyId?: string): Promise<string>;
 /**
  * Decrypts a base64 `_encrypted` field to its UTF-8 plaintext.
  *

package/dist/core/crypto/encryptedFields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encryptedFields.d.ts","sourceRoot":"","sources":["../../../src/core/crypto/encryptedFields.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5F;AAKD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,kBAAkB,EAAE,MAAM,EAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CASR;AAYD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,uBAAuB,EAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,kBAAkB,EAAE,MAAM,EAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB"}
+{"version":3,"file":"encryptedFields.d.ts","sourceRoot":"","sources":["../../../src/core/crypto/encryptedFields.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5F;AAED,gGAAgG;AAChG,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACnF;AAKD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,kBAAkB,EAAE,MAAM,EAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CASR;AAWD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,uBAAuB,EAClC,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,MAA8B,GACpC,OAAO,CAAC,MAAM,CAAC,CAEjB;AAYD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,uBAAuB,EAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,kBAAkB,EAAE,MAAM,EAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB"}

package/dist/core/crypto/encryptedFields.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEncryptedFieldKeyId = getEncryptedFieldKeyId;
+exports.encryptEncryptedField = encryptEncryptedField;
 exports.decryptEncryptedField = decryptEncryptedField;
 const types_1 = require("../types");
 /** Suffix of the companion field naming the key id of an `_encrypted` field. */
@@ -22,6 +23,23 @@ function getEncryptedFieldKeyId(data, encryptedFieldName, override) {
     }
     return types_1.DEFAULT_TENANT_KEY_ID;
 }
+/** Encodes bytes as base64. */
+function uint8ArrayToBase64(bytes) {
+    let binary = "";
+    for (let i = 0; i < bytes.length; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary);
+}
+/**
+ * Encrypts UTF-8 `plaintext` for an `_encrypted` field with the symmetric key
+ * `keyId` (default: the tenant `default` key), the counterpart of
+ * {@link decryptEncryptedField}. Store a non-default `keyId` in the
+ * `<field>_key` companion field so readers find it.
+ */
+async function encryptEncryptedField(encryptor, plaintext, keyId = types_1.DEFAULT_TENANT_KEY_ID) {
+    return uint8ArrayToBase64(await encryptor.encryptPayload(new TextEncoder().encode(plaintext), keyId));
+}
 /** Decodes a base64 string into bytes. */
 function base64ToUint8Array(base64) {
     const binary = atob(base64);

package/dist/core/crypto/encryptedFields.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryptedFields.js","sourceRoot":"","sources":["../../../src/core/crypto/encryptedFields.ts"],"names":[],"mappings":";;AAqBA,wDAaC;AAqBD,sDAkBC;AAzED,oCAAiD;AAWjD,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,IAA6B,EAC7B,kBAA0B,EAC1B,QAAwB;IAExB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,gBAAgB,EAAE,CAAC,CAAC;IACnE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,6BAAqB,CAAC;AAC/B,CAAC;AAED,0CAA0C;AAC1C,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,qBAAqB,CACzC,SAAkC,EAClC,IAA6B,EAC7B,kBAA0B,EAC1B,aAA6B;IAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"encryptedFields.js","sourceRoot":"","sources":["../../../src/core/crypto/encryptedFields.ts"],"names":[],"mappings":";;AA0BA,wDAaC;AAiBD,sDAMC;AAqBD,sDAkBC;AArGD,oCAAiD;AAgBjD,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,IAA6B,EAC7B,kBAA0B,EAC1B,QAAwB;IAExB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,gBAAgB,EAAE,CAAC,CAAC;IACnE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,6BAAqB,CAAC;AAC/B,CAAC;AAED,+BAA+B;AAC/B,SAAS,kBAAkB,CAAC,KAAiB;IAC3C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,qBAAqB,CACzC,SAAkC,EAClC,SAAiB,EACjB,QAAgB,6BAAqB;IAErC,OAAO,kBAAkB,CAAC,MAAM,SAAS,CAAC,cAAc,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,0CAA0C;AAC1C,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,qBAAqB,CACzC,SAAkC,EAClC,IAA6B,EAC7B,kBAA0B,EAC1B,aAA6B;IAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/expressions/evaluateExpression.d.ts

@@ -71,6 +71,14 @@ export declare const VIEW_CONTEXT_OPERATIONS: ReadonlySet<string>;
 export declare function getFieldValue(source: Record<string, unknown>, path: string): unknown;
 export declare function expressionToNumber(value: unknown): number | null;
 export declare function expressionToBoolean(value: unknown): boolean;
+/**
+ * Ordering for `gt`/`gte`/`lt`/`lte`. Numbers compare numerically (a numeric
+ * string next to a number counts as a number) and dates by time (an ISO
+ * string next to a date counts as a date); everything else, including a
+ * missing value, compares as strings, so `10 > 9` holds and `"10" > "9"`
+ * stays a string comparison.
+ */
+export declare function compareOrdered(a: unknown, b: unknown): number;
 /**
  * Evaluates an expression against a document plus the current view/value
  * context. This is the runtime counterpart of the builder and parser.

package/dist/core/expressions/evaluateExpression.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluateExpression.d.ts","sourceRoot":"","sources":["../../../src/core/expressions/evaluateExpression.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,uBAAuB,CAAC;CAClC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B,CAAC;AAEF,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC7B,CAAC;AAOF,MAAM,MAAM,uBAAuB,GAAG;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAQtD,CAAC;AAEH,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAgBpF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAShE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAY3D;AA2MD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,EAAE,OAAO,EAAE,2BAA2B,GAAG,OAAO,CA6CnH;AAsCD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAYtE,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CAsB1F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,qBAAqB,GAAG,cAAc,EAAE,CAQ1F;AAUD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAY/E;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAQrF;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,qBAAqB,GAAG;IAChF,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAqBA"}
+{"version":3,"file":"evaluateExpression.d.ts","sourceRoot":"","sources":["../../../src/core/expressions/evaluateExpression.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,uBAAuB,CAAC;CAClC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B,CAAC;AAEF,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC7B,CAAC;AAOF,MAAM,MAAM,uBAAuB,GAAG;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAQtD,CAAC;AAEH,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAgBpF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAShE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAY3D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,MAAM,CAa7D;AA2MD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,EAAE,OAAO,EAAE,2BAA2B,GAAG,OAAO,CA6CnH;AAsCD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAYtE,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CAsB1F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,qBAAqB,GAAG,cAAc,EAAE,CAQ1F;AAUD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAY/E;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,qBAAqB,GAAG,MAAM,EAAE,CAQrF;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,qBAAqB,GAAG;IAChF,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAqBA"}

package/dist/core/expressions/evaluateExpression.js

@@ -4,6 +4,7 @@ exports.EXPRESSION_KINDS = exports.VIEW_CONTEXT_OPERATIONS = void 0;
 exports.getFieldValue = getFieldValue;
 exports.expressionToNumber = expressionToNumber;
 exports.expressionToBoolean = expressionToBoolean;
+exports.compareOrdered = compareOrdered;
 exports.evaluateExpression = evaluateExpression;
 exports.findUnknownExpressionNode = findUnknownExpressionNode;
 exports.collectDecryptRequests = collectDecryptRequests;
@@ -61,6 +62,30 @@ function expressionToBoolean(value) {
     }
     return Boolean(value);
 }
+/**
+ * Ordering for `gt`/`gte`/`lt`/`lte`. Numbers compare numerically (a numeric
+ * string next to a number counts as a number) and dates by time (an ISO
+ * string next to a date counts as a date); everything else, including a
+ * missing value, compares as strings, so `10 > 9` holds and `"10" > "9"`
+ * stays a string comparison.
+ */
+function compareOrdered(a, b) {
+    if (a instanceof Date || b instanceof Date) {
+        const ta = toDate(a)?.getTime();
+        const tb = toDate(b)?.getTime();
+        if (ta !== undefined && tb !== undefined)
+            return ta - tb;
+    }
+    else if (typeof a === "number" || typeof b === "number") {
+        const na = expressionToNumber(a);
+        const nb = expressionToNumber(b);
+        if (na !== null && nb !== null)
+            return na - nb;
+    }
+    const sa = String(a ?? "");
+    const sb = String(b ?? "");
+    return sa < sb ? -1 : sa > sb ? 1 : 0;
+}
 function toDate(value) {
     if (value instanceof Date) {
         return Number.isNaN(value.getTime()) ? null : value;
@@ -159,13 +184,13 @@ function evaluateOperation(expression, context) {
         case "neq":
             return args[0] !== args[1];
         case "gt":
-            return String(args[0] ?? "") > String(args[1] ?? "");
+            return compareOrdered(args[0], args[1]) > 0;
         case "gte":
-            return String(args[0] ?? "") >= String(args[1] ?? "");
+            return compareOrdered(args[0], args[1]) >= 0;
         case "lt":
-            return String(args[0] ?? "") < String(args[1] ?? "");
+            return compareOrdered(args[0], args[1]) < 0;
         case "lte":
-            return String(args[0] ?? "") <= String(args[1] ?? "");
+            return compareOrdered(args[0], args[1]) <= 0;
         case "and":
             return args.every((value) => expressionToBoolean(value));
         case "or":