test(where-matcher): empty the combinator-blind ledger — 75 files, refuse unrecognised $-keys

packages/metadata-protocol/src/protocol.delete-rewrap-envelope.test.ts

@@ -134,6 +134,7 @@ const seedRow = (type: string, name: string): Row => ({
 
 const matchesWhere = (row: Record<string, unknown>, where: Record<string, unknown>) =>
  Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v === null || v === undefined) return row[k] === null || row[k] === undefined;
  return row[k] === v;
  });

packages/metadata-protocol/src/protocol.duplicate-package-bundle-key.test.ts

@@ -94,6 +94,7 @@ function matches(r: Record<string, any>, where: Record<string, unknown>): boolea
  if (!clauses.some((c) => matches(r, c))) return false;
  continue;
  }
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if ((r[k] ?? null) !== v) return false;
  }
  return true;

packages/metadata-protocol/src/protocol.flow-canonicalizer.test.ts

@@ -58,6 +58,7 @@ const canonicalizeStoredFlow = (_name: string, body: any) => {
 function matches(r: Record<string, any>, where: Record<string, unknown>): boolean {
  for (const [k, v] of Object.entries(where)) {
  if (v === undefined) continue;
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if ((r[k] ?? null) !== v) return false;
  }
  return true;

packages/metadata-protocol/src/protocol.legacy-overlay-delete.test.ts

@@ -152,6 +152,7 @@ const seedRow = (type: string, name: string): Row => ({
 
 const matchesWhere = (row: Record<string, unknown>, where: Record<string, unknown>) =>
  Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v === null || v === undefined) return row[k] === null || row[k] === undefined;
  return row[k] === v;
  });

packages/metadata-protocol/src/protocol.stored-migration.test.ts

@@ -43,6 +43,7 @@ interface Row {
 function matches(r: Record<string, any>, where: Record<string, unknown>): boolean {
  for (const [k, v] of Object.entries(where)) {
  if (v === undefined) continue;
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if ((r[k] ?? null) !== v) return false;
  }
  return true;

packages/metadata-protocol/src/sys-metadata-repository.draft-drain.test.ts

@@ -80,7 +80,10 @@ function makeFakeEngine() {
  };
 
  const matchesHistory = (h: Row, where: Record<string, unknown>): boolean =>
- Object.entries(where).every(([k, v]) => v === undefined || h[k] === v);
+ Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return v === undefined || h[k] === v;
+ });
 
  return {
  rows,

packages/metadata-protocol/src/sys-metadata-repository.history-counters.test.ts

@@ -94,7 +94,10 @@ function makeFakeEngine() {
  };
 
  const matchesHistory = (h: Row, where: Record<string, unknown>): boolean =>
- Object.entries(where).every(([k, v]) => v === undefined || h[k] === v);
+ Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return v === undefined || h[k] === v;
+ });
 
  return {
  rows,

packages/metadata-protocol/src/sys-metadata-repository.package-writability.test.ts

@@ -105,7 +105,10 @@ function makeFakeEngine() {
  };
 
  const matchesHistory = (h: Row, where: Record<string, unknown>): boolean =>
- Object.entries(where).every(([k, v]) => v === undefined || h[k] === v);
+ Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return v === undefined || h[k] === v;
+ });
 
  return {
  rows,

packages/metadata-protocol/src/sys-metadata-repository.recorded-by.test.ts

@@ -52,7 +52,10 @@ function makeFakeEngine() {
  };
 
  const matchesHistory = (h: Row, where: Record<string, unknown>): boolean =>
- Object.entries(where).every(([k, v]) => v === undefined || h[k] === v);
+ Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return v === undefined || h[k] === v;
+ });
 
  return {
  rows,

packages/objectql/src/adr0104-attestation-evidence.test.ts

@@ -50,7 +50,10 @@ function rowsOf(store: Store, object: string): Array<Record<string, unknown>> {
 function makeDriver(store: Store, stats: { created: number; existing: number }): IDataDriver {
  const matches = (row: Record<string, unknown>, where: any): boolean => {
  if (!where || typeof where !== 'object') return true;
- return Object.entries(where).every(([k, v]) => row[k] === v);
+ return Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return row[k] === v;
+ });
  };
  return {
  name: 'default',

packages/objectql/src/adr0104-lax-deviation-marker.test.ts

@@ -63,7 +63,10 @@ interface DriverProbe {
 function makeDriver(store: Store, probe: DriverProbe): IDataDriver {
  const matches = (row: Record<string, unknown>, where: any): boolean => {
  if (!where || typeof where !== 'object') return true;
- return Object.entries(where).every(([k, v]) => row[k] === v);
+ return Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return row[k] === v;
+ });
  };
  return {
  name: 'default',

packages/objectql/src/engine-readonly-strict-writes.test.ts

@@ -39,7 +39,10 @@ function makeDriver() {
  };
  const matches = (row: any, where: any): boolean => {
  if (!where || typeof where !== 'object') return true;
- return Object.entries(where).every(([k, v]: [string, any]) => row?.[k] === v);
+ return Object.entries(where).every(([k, v]: [string, any]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return row?.[k] === v;
+ });
  };
  let n = 0;
  const driver: any = {

packages/objectql/src/engine-readonly-strip-caller-values.test.ts

@@ -43,7 +43,10 @@ function makeDriver() {
  };
  const matches = (row: any, where: any): boolean => {
  if (!where || typeof where !== 'object') return true;
- return Object.entries(where).every(([k, v]: [string, any]) => row?.[k] === v);
+ return Object.entries(where).every(([k, v]: [string, any]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return row?.[k] === v;
+ });
  };
  let n = 0;
  const driver: any = {

packages/objectql/src/engine-readonly-strip-signal.test.ts

@@ -51,7 +51,10 @@ function makeDriver() {
  };
  const matches = (row: any, where: any): boolean => {
  if (!where || typeof where !== 'object') return true;
- return Object.entries(where).every(([k, v]: [string, any]) => row?.[k] === v);
+ return Object.entries(where).every(([k, v]: [string, any]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return row?.[k] === v;
+ });
  };
  let n = 0;
  const driver: any = {

packages/objectql/src/engine-summary-recompute-context.test.ts

@@ -84,6 +84,7 @@ function makeDriver() {
  if (!where || typeof where !== 'object') return true;
  return Object.entries(where).every(([k, v]) => {
  if (k === '$and') return (v as any[]).every((sub) => matches(row, sub));
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  return row?.[k] === v;
  });
  };

packages/objectql/src/engine-summary-retry.test.ts

@@ -17,7 +17,10 @@ function makeDriver(opts: { onParentUpdate?: (parentId: string, callN: number) =
  };
  const matches = (row: any, where: any): boolean => {
  if (!where || typeof where !== 'object') return true;
- return Object.entries(where).every(([k, v]) => row?.[k] === v);
+ return Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return row?.[k] === v;
+ });
  };
  const parentCalls = new Map<string, number>();
  let n = 0;

packages/objectql/src/package-disable-enforcement.test.ts

@@ -83,6 +83,7 @@ const rowKey = (w: Record<string, unknown>) =>
 
 const matchesWhere = (row: Record<string, unknown>, where: Record<string, unknown>) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v === null) return row[k] === null || row[k] === undefined;
  return row[k] === v;
  });

packages/objectql/src/protocol-delete-object-registry-heal.test.ts

@@ -57,6 +57,7 @@ const rowKey = (w: Record<string, unknown>) =>
 
 const matchesWhere = (row: Record<string, unknown>, where: Record<string, unknown>) =>
  Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v === null) return row[k] === null || row[k] === undefined;
  return row[k] === v;
  });

packages/objectql/src/protocol-object-overlay-layer.test.ts

@@ -82,6 +82,7 @@ const rowKey = (w: Record<string, unknown>) =>
 
 const matchesWhere = (row: Record<string, unknown>, where: Record<string, unknown>) =>
  Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v === null) return row[k] === null || row[k] === undefined;
  return row[k] === v;
  });

packages/objectql/src/protocol-packaged-object-base.test.ts

@@ -41,6 +41,7 @@ const rowKey = (w: Record<string, unknown>) =>
 
 const matchesWhere = (row: Record<string, unknown>, where: Record<string, unknown>) =>
  Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v === null) return row[k] === null || row[k] === undefined;
  return row[k] === v;
  });

packages/plugins/plugin-approvals/src/approval-actor-impersonation.test.ts

@@ -44,6 +44,7 @@ function makeFakeEngine() {
  if (!(v as any[]).some(sub => matches(row, sub))) return false;
  continue;
  }
+ if (k.startsWith('$')) throw new Error(`fake engine: unsupported filter operator ${k}`);
  const rv = row[k];
  if (v != null && typeof v === 'object' && '$in' in (v as any)) {
  if (!(v as any).$in.includes(rv)) return false;

packages/plugins/plugin-approvals/src/approval-node.test.ts

@@ -19,6 +19,7 @@ function makeFakeEngine() {
  const tables = new Map<string, any[]>();
  const rows = (o: string) => (tables.get(o) ?? (tables.set(o, []), tables.get(o)!));
  const matches = (row: any, where: any) => Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake engine: unsupported filter operator ${k}`);
  if (v && typeof v === 'object' && '$in' in (v as any)) return (v as any).$in.includes(row[k]);
  if (v && typeof v === 'object' && '$ne' in (v as any)) return row[k] !== (v as any).$ne;
  return row[k] === v;

packages/plugins/plugin-approvals/src/approval-override-audit.test.ts

@@ -35,6 +35,7 @@ function makeFakeEngine() {
  if (!(v as any[]).some(sub => matches(row, sub))) return false;
  continue;
  }
+ if (k.startsWith('$')) throw new Error(`fake engine: unsupported filter operator ${k}`);
  const rv = row[k];
  if (v != null && typeof v === 'object' && '$in' in (v as any)) {
  if (!(v as any).$in.includes(rv)) return false;

packages/plugins/plugin-approvals/src/approval-restart-resume.test.ts

@@ -39,6 +39,7 @@ function makeFakeEngine() {
  const tables = new Map<string, any[]>();
  const rows = (o: string) => (tables.get(o) ?? (tables.set(o, []), tables.get(o)!));
  const matches = (row: any, where: any) => Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake engine: unsupported filter operator ${k}`);
  if (v && typeof v === 'object' && '$in' in (v as any)) return (v as any).$in.includes(row[k]);
  if (v && typeof v === 'object' && '$ne' in (v as any)) return row[k] !== (v as any).$ne;
  return row[k] === v;

packages/plugins/plugin-approvals/src/approval-revise.test.ts

@@ -37,6 +37,7 @@ function makeFakeEngine() {
  const tables = new Map<string, any[]>();
  const rows = (o: string) => (tables.get(o) ?? (tables.set(o, []), tables.get(o)!));
  const matches = (row: any, where: any) => Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake engine: unsupported filter operator ${k}`);
  if (v && typeof v === 'object' && '$in' in (v as any)) return (v as any).$in.includes(row[k]);
  if (v && typeof v === 'object' && '$ne' in (v as any)) return row[k] !== (v as any).$ne;
  return row[k] === v;

packages/plugins/plugin-approvals/src/approver-cross-org.integration.test.ts

@@ -29,6 +29,7 @@ function makeEngine(seed: Record<string, Row[]> = {}) {
  if (!(v as any[]).some((sub) => matches(row, sub))) return false;
  continue;
  }
+ if (k.startsWith('$')) throw new Error(`fake engine: unsupported filter operator ${k}`);
  const rv = row[k];
  if (v != null && typeof v === 'object' && '$in' in (v as any)) {
  if (!(v as any).$in.includes(rv)) return false;

packages/plugins/plugin-approvals/src/stranded-request-inspection.test.ts

@@ -30,6 +30,7 @@ function makeFakeEngine() {
  function matches(row: FakeRow, filter: any): boolean {
  if (!filter || typeof filter !== 'object') return true;
  for (const [k, v] of Object.entries(filter)) {
+ if (k.startsWith('$')) throw new Error(`fake engine: unsupported filter operator ${k}`);
  const rv = row[k];
  if (v != null && typeof v === 'object' && '$in' in (v as any)) {
  if (!(v as any).$in.includes(rv)) return false;

packages/plugins/plugin-auth/src/accept-invitation-adopt-membership.test.ts

@@ -48,6 +48,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/auth-manager.jwt-eddsa-fallback.test.ts

@@ -27,6 +27,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/auth-manager.optional-plugin-isolation.test.ts

@@ -61,6 +61,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/auth-plugin.test.ts

@@ -1018,7 +1018,10 @@ describe('AuthPlugin', () => {
  sys_organization: [],
  };
  const matches = (row: any, where: any) =>
- Object.entries(where ?? {}).every(([k, v]) => (v === null ? row[k] == null : row[k] === v));
+ Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return v === null ? row[k] == null : row[k] === v;
+ });
  return {
  tables,
  registerMiddleware: (mw: any) => middlewares.push(mw),
@@ -1131,7 +1134,10 @@ describe('AuthPlugin', () => {
  sys_organization: [],
  };
  const matches = (row: any, where: any) =>
- Object.entries(where ?? {}).every(([k, v]) => (v === null ? row[k] == null : row[k] === v));
+ Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return v === null ? row[k] == null : row[k] === v;
+ });
  return {
  tables,
  registerMiddleware: vi.fn(),

packages/plugins/plugin-auth/src/change-email-delete-user-wiring.test.ts

@@ -75,6 +75,7 @@ function createMemoryEngine() {
  : a === b;
  const matches = (row: MemoryRow, where: Record<string, unknown> = {}): boolean =>
  Object.entries(where).every(([key, expected]) => {
+ if (key.startsWith('$')) throw new Error(`fake driver: unsupported operator ${key}`);
  const actual = row[key];
  if (expected && typeof expected === 'object' && !Array.isArray(expected) && !(expected instanceof Date)) {
  const operators = expected as Record<string, unknown>;

packages/plugins/plugin-auth/src/ensure-default-organization.test.ts

@@ -20,7 +20,10 @@ function makeQl(seed: Partial<Record<string, Row[]>> = {}) {
  ...seed,
  };
  const matches = (row: Row, where: Row) =>
- Object.entries(where ?? {}).every(([k, v]) => (v === null ? row[k] == null : row[k] === v));
+ Object.entries(where ?? {}).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return v === null ? row[k] == null : row[k] === v;
+ });
  return {
  tables,
  find: vi.fn(async (object: string, q: any) =>

packages/plugins/plugin-auth/src/impersonation-bearer-rotation.test.ts

@@ -50,6 +50,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/org-create-posture-gate.test.ts

@@ -82,6 +82,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/remove-member-permission-guard.test.ts

@@ -96,6 +96,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/remove-user-atomicity.test.ts

@@ -101,6 +101,7 @@ const createMemoryEngine = (vetoUserDelete?: () => Error | undefined) => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/session-of-record.test.ts

@@ -57,6 +57,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-auth/src/session-tombstone.test.ts

@@ -62,6 +62,7 @@ const createMemoryEngine = () => {
  : a === b;
  const matches = (row: any, where: Record<string, any> = {}) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  const actual = row[k];
  if (v && typeof v === 'object' && !Array.isArray(v) && !(v instanceof Date)) {
  if ('$ne' in v) return !eq(actual, v.$ne);

packages/plugins/plugin-email/src/email-plugin.attachment-storage.test.ts

@@ -42,6 +42,7 @@ function fakeEngine() {
  const rowsOf = (t: string) => tables.get(t) ?? [];
  const matches = (row: any, where: Record<string, any>) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v && typeof v === 'object' && !Array.isArray(v)) {
  return Object.entries(v).every(([op, target]) => {
  if (op === '$lt') return row[k] < (target as any);

packages/plugins/plugin-email/src/email-plugin.outbox-sweep.test.ts

@@ -51,6 +51,7 @@ function fakeEngine(opts: EngineOpts = {}) {
  const rowsOf = (t: string) => tables.get(t) ?? [];
  const matches = (row: any, where: Record<string, any>) =>
  Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
  if (v && typeof v === 'object' && !Array.isArray(v)) {
  return Object.entries(v).every(([op, target]) => {
  if (op === '$lt') return row[k] < (target as any);

packages/plugins/plugin-email/src/email-plugin.queue-delivery.test.ts

@@ -50,7 +50,10 @@ function fakeEngine() {
  const tables = new Map<string, any[]>();
  const rowsOf = (t: string) => tables.get(t) ?? [];
  const matches = (row: any, where: Record<string, any>) =>
- Object.entries(where).every(([k, v]) => row[k] === v);
+ Object.entries(where).every(([k, v]) => {
+ if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
+ return row[k] === v;
+ });
  return {
  tables,
  rows: (t: string) => [...rowsOf(t)],