@adminiumjs/manifest 0.3.0-rc.3 → 0.3.0

package/dist/plan-types.js

@@ -0,0 +1,71 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * Whether an existing column can hold what a manifest stores in it — shared by
+ * both halves of the planner.
+ */
+/**
+ * The logical types an existing column may have for each declared type, on
+ * every engine. Deliberately generous: a column that can hold every value the
+ * app writes is not a conflict, whatever it is called. A foreign key is judged
+ * by the key it points at, which the DDL resolves, so it is never judged here.
+ */
+const ACCEPTS = {
+    id: ['varchar', 'text', 'uuid'],
+    text: ['text', 'varchar', 'enum'],
+    int: ['integer', 'bigint'],
+    bigint: ['bigint'],
+    decimal: ['decimal'],
+    money: ['decimal'],
+    float: ['float', 'decimal'],
+    bool: ['boolean'],
+    enum: ['enum', 'varchar', 'text'],
+    json: ['json'],
+    date: ['date', 'timestamp', 'timestamptz'],
+    timestamptz: ['timestamptz', 'timestamp'],
+    uuid: ['uuid', 'varchar', 'text'],
+    blob: ['binary'],
+    fk: null,
+};
+/**
+ * What SQLite reports for the columns the installer itself creates there: it
+ * has four storage classes, so `bool` is an `integer`, `money` a `float` (REAL)
+ * and `json` plain `text`. Without these, an app's own table would conflict
+ * with the app on every SQLite reinstall.
+ */
+const SQLITE_ALSO = {
+    bigint: ['integer'],
+    decimal: ['float'],
+    money: ['float'],
+    bool: ['integer'],
+    json: ['text'],
+};
+/**
+ * Why an existing column cannot hold what the manifest stores in it — its type,
+ * named for a person — or `null` when it can (or cannot be judged).
+ */
+export function typeConflict(declared, existing, dialect) {
+    const accepts = ACCEPTS[declared.type];
+    const have = existing.logicalType;
+    if (accepts === null || have === undefined || have === 'unknown')
+        return null;
+    const also = dialect === 'sqlite' ? (SQLITE_ALSO[declared.type] ?? []) : [];
+    if (!accepts.includes(have) && !also.includes(have))
+        return have;
+    // A width narrower than the one the app declares. An app that declares no
+    // width is not judged: the installer itself keys MySQL text as varchar(255).
+    if (declared.type === 'text' &&
+        have === 'varchar' &&
+        typeof existing.maxLength === 'number' &&
+        declared.maxLength !== undefined &&
+        existing.maxLength < declared.maxLength) {
+        return `varchar(${String(existing.maxLength)})`;
+    }
+    // An enum column narrower than its longest value.
+    if (declared.type === 'enum' && have === 'varchar' && typeof existing.maxLength === 'number') {
+        const longest = Math.max(0, ...(declared.enum ?? []).map((value) => value.length));
+        if (existing.maxLength < longest)
+            return `varchar(${String(existing.maxLength)})`;
+    }
+    return null;
+}
+//# sourceMappingURL=plan-types.js.map

package/dist/plan-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-types.js","sourceRoot":"","sources":["../src/plan-types.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;GAGG;AAKH;;;;;GAKG;AACH,MAAM,OAAO,GAAuE;IAClF,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;IACjC,GAAG,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC1B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,KAAK,EAAE,CAAC,SAAS,CAAC;IAClB,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,aAAa,CAAC;IAC1C,WAAW,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC;IACzC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,QAAQ,CAAC;IAChB,EAAE,EAAE,IAAI;CACT,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,GAA+D;IAC9E,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,OAAO,EAAE,CAAC,OAAO,CAAC;IAClB,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,IAAI,EAAE,CAAC,MAAM,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAwB,EACxB,QAA4B,EAC5B,OAAmC;IAEnC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC;IAClC,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,0EAA0E;IAC1E,6EAA6E;IAC7E,IACE,QAAQ,CAAC,IAAI,KAAK,MAAM;QACxB,IAAI,KAAK,SAAS;QAClB,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,QAAQ,CAAC,SAAS,KAAK,SAAS;QAChC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,EACvC,CAAC;QACD,OAAO,WAAW,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;IAClD,CAAC;IACD,kDAAkD;IAClD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,IAAI,QAAQ,CAAC,SAAS,GAAG,OAAO;YAAE,OAAO,WAAW,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/plan.d.ts

@@ -46,96 +46,9 @@
  * other tables — on MySQL, which has no transactional DDL, that leaves a
  * half-installed add-on with no rollback.
  */
+import type { InstallPlan, PlanContext, SchemaModelView } from './plan-model.js';
 import type { Manifest } from './schema.js';
-/** The existing database, as much of it as planning needs. */
-export interface SchemaModelView {
-    /** Every table name that already exists, however it got there. */
-    tables: readonly {
-        ref: string;
-        columns: readonly ExistingColumnView[];
-    }[];
-}
-/**
- * One existing column. Only `ref` is required; the rest is what the database
- * reports, and a caller that does not know it leaves it out. A column that
- * says nothing is never treated as required.
- */
-export interface ExistingColumnView {
-    ref: string;
-    nullable?: boolean;
-    /** The database fills it when an insert leaves it out (a default, a sequence). */
-    hasDefault?: boolean;
-    isPrimaryKey?: boolean;
-    isGenerated?: boolean;
-}
-/** What will happen to one table. */
-export type TableAction = 'create' | 'reuse';
-export interface PlannedColumn {
-    ref: string;
-    type: string;
-    /** Absent from an existing table, so the install would have to add it. */
-    missing: boolean;
-}
-export interface PlannedTable {
-    ref: string;
-    action: TableAction;
-    columns: PlannedColumn[];
-    /**
-     * Only on `reuse`: columns the manifest requires that the existing table does
-     * not have. A non-empty list is a PARTIAL MATCH — the table is there but does
-     * not carry what the add-on needs, which is a different situation from either
-     * "create it" or "it fits", and the operator should be told which.
-     */
-    missingColumns: string[];
-}
-/** Where one declared foreign key ends up pointing. */
-export interface PlannedReference {
-    fromTable: string;
-    fromColumn: string;
-    to: string;
-    /**
-     * `internal` — the target is another table in this manifest.
-     * `host` — the target already exists in the database (the add-on attaching to
-     *   the host's data, which is the intended shape).
-     * `unresolved` — the target exists nowhere, and the plan is not installable.
-     */
-    resolution: 'internal' | 'host' | 'unresolved';
-}
-/** A reason the plan cannot be applied, phrased for a person. */
-export interface PlanProblem {
-    code: 'UNRESOLVED_REFERENCE' | 'COLUMN_TYPE_CONFLICT' | 'RESERVED_TABLE' | 'FOREIGN_TABLE';
-    message: string;
-    table: string;
-    column?: string;
-}
-export interface InstallPlan {
-    /**
-     * The manifest key this plan is for.
-     *
-     * Named `addOnKey` because add-ons were the only caller when it was written,
-     * and left named that because the wire DTOs each route builds are where a
-     * reader meets it — `routes/apps` spells it `key` on its own reply. Renaming
-     * it here would churn three call sites and a shipped dialog for a field only
-     * the server reads.
-     */
-    addOnKey: string;
-    version: string;
-    /** Tables to create, in declaration order (targets before dependents). */
-    create: PlannedTable[];
-    /** Tables that already exist and will be reused rather than created. */
-    reuse: PlannedTable[];
-    references: PlannedReference[];
-    problems: PlanProblem[];
-    /**
-     * `true` when there is nothing standing in the way. A plan with problems is
-     * still RETURNED — the consent dialog has to be able to show WHY an add-on
-     * cannot be installed here, and an exception would leave it with nothing to
-     * render.
-     */
-    installable: boolean;
-    /** No `requiredSchema` at all: install touches no data source. */
-    touchesData: boolean;
-}
+export type { ExistingColumnView, InstallPlan, PlannedColumn, PlannedReference, PlannedTable, PlanProblem, SchemaModelView, TableAction, } from './plan-model.js';
 /**
  * Diffs a manifest's `requiredSchema` against the database it would install
  * into. Pure: no I/O, no side effects, safe to run for a preview.
@@ -145,5 +58,11 @@ export interface InstallPlan {
  * an "add-on" cannot be installed while looking at an app's install dialog is
  * the kind of small wrongness that makes someone distrust the whole screen.
  */
-export declare function planInstall(manifest: Manifest, model: SchemaModelView): InstallPlan;
+export declare function planInstall(manifest: Manifest, model: SchemaModelView, 
+/**
+ * What the server knows about this connection (prefix, the table record,
+ * other apps, the operator's answers). Absent — every add-on, and any older
+ * caller — the plan is exactly what it always was.
+ */
+context?: PlanContext): InstallPlan;
 //# sourceMappingURL=plan.d.ts.map

package/dist/plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../src/plan.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAiC,MAAM,aAAa,CAAC;AAE3E,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,MAAM,EAAE,SAAS;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACxC,EAAE,CAAC;CACL;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kFAAkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,qCAAqC;AACrC,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,YAAY,CAAC;CAChD;AAED,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,sBAAsB,GAAG,sBAAsB,GAAG,gBAAgB,GAAG,eAAe,CAAC;IAC3F,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B;;;;;;;;OAQG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,wEAAwE;IACxE,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB;;;;;OAKG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,kEAAkE;IAClE,WAAW,EAAE,OAAO,CAAC;CACtB;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,GAAG,WAAW,CA6HnF"}
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../src/plan.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EAKX,eAAe,EAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,QAAQ,EAAiC,MAAM,aAAa,CAAC;AAE3E,YAAY,EACV,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,WAAW,GACZ,MAAM,iBAAiB,CAAC;AA2BzB;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,eAAe;AACtB;;;;GAIG;AACH,OAAO,CAAC,EAAE,WAAW,GACpB,WAAW,CAoKb"}

package/dist/plan.js

@@ -47,6 +47,8 @@
  * other tables — on MySQL, which has no transactional DDL, that leaves a
  * half-installed add-on with no rollback.
  */
+import { planWithContext } from './plan-context.js';
+import { typeConflict } from './plan-types.js';
 /**
  * Table names an add-on may never claim, whatever its manifest says.
  *
@@ -75,7 +77,15 @@ function planColumns(table, existing) {
  * an "add-on" cannot be installed while looking at an app's install dialog is
  * the kind of small wrongness that makes someone distrust the whole screen.
  */
-export function planInstall(manifest, model) {
+export function planInstall(manifest, model, 
+/**
+ * What the server knows about this connection (prefix, the table record,
+ * other apps, the operator's answers). Absent — every add-on, and any older
+ * caller — the plan is exactly what it always was.
+ */
+context) {
+    if (context !== undefined)
+        return planWithContext(manifest, model, context);
     const required = manifest.requiredSchema?.tables ?? [];
     const noun = manifest.kind === 'app' ? 'app' : 'add-on';
     const existingByRef = new Map(model.tables.map((t) => [t.ref, t]));
@@ -140,6 +150,43 @@ export function planInstall(manifest, model) {
                 });
             }
         }
+        /*
+         * EVERY REFUSAL ON THE CHECK STEP.
+         *
+         * A reused table missing columns the app writes, and a column that exists
+         * with a type the app's values do not fit, used to plan as "installable" —
+         * the wizard showed "reuse" with Install enabled, and the install then
+         * refused with a bare error naming no table (the owner's own install hit
+         * exactly that). They are problems now, so the check step names the table
+         * and Install stays disabled until it is resolved.
+         */
+        // Apps only, like FOREIGN_TABLE below: an add-on reuses its HOST's tables,
+        // and keeps its own refusal for a host missing columns.
+        if (existing !== undefined && manifest.kind === 'app' && missingColumns.length > 0) {
+            const list = missingColumns.map((ref) => `"${ref}"`).join(', ');
+            problems.push({
+                code: 'COLUMNS_REQUIRED',
+                table: table.ref,
+                column: missingColumns[0],
+                message: `This database already has a "${table.ref}" table, and it is missing ${list}, which ` +
+                    `this ${noun} writes. Add ${missingColumns.length === 1 ? 'it' : 'them'} to the table, ` +
+                    `or install against a different database.`,
+            });
+        }
+        if (existing !== undefined && manifest.kind === 'app') {
+            for (const column of table.columns) {
+                const have = existing.columns.find((c) => c.ref === column.ref);
+                const conflict = have === undefined ? null : typeConflict(column, have, model.dialect);
+                if (conflict === null)
+                    continue;
+                problems.push({
+                    code: 'COLUMN_TYPE_CONFLICT',
+                    table: table.ref,
+                    column: column.ref,
+                    message: `"${table.ref}.${column.ref}" already exists as ${conflict}, which cannot hold the ${column.type} values this ${noun} stores in it.`,
+                });
+            }
+        }
         for (const column of table.columns) {
             if (column.type !== 'fk' || column.references === undefined)
                 continue;

package/dist/plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan.js","sourceRoot":"","sources":["../src/plan.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAqGH;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAE1C,SAAS,WAAW,CAClB,KAAoB,EACpB,QAA0E;IAE1E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAoB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC;QACzE,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;KACpD,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,QAAkB,EAAE,KAAsB;IACpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,EAAE,MAAM,IAAI,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAErD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,KAAK,CAAC,GAAG;gBAChB,OAAO,EACL,IAAI,KAAK,CAAC,GAAG,wCAAwC,IAAI,0BAA0B;oBACnF,2BAA2B,qBAAqB,IAAI;aACvD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,OAAO,GAAiB;YAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YACnD,OAAO;YACP,cAAc;SACf,CAAC;QACF,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAExD;;;;;;;;;;;;;WAaG;QACH,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACtD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO;iBAC9B,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC3B,CAAC,CAAC,QAAQ,KAAK,KAAK;gBACpB,CAAC,CAAC,UAAU,KAAK,IAAI;gBACrB,CAAC,CAAC,YAAY,KAAK,IAAI;gBACvB,CAAC,CAAC,WAAW,KAAK,IAAI,CACzB;iBACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,KAAK,CAAC,GAAG;oBAChB,MAAM,EAAE,KAAK;oBACb,OAAO,EACL,gCAAgC,KAAK,CAAC,GAAG,2CAA2C;wBACpF,eAAe,IAAI,2DAA2D;wBAC9E,8EAA8E;wBAC9E,iDAAiD;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;gBAAE,SAAS;YACtE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;YACjC,MAAM,UAAU,GAAmC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBACrE,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;oBACzB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,YAAY,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC;gBACd,SAAS,EAAE,KAAK,CAAC,GAAG;gBACpB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,EAAE,EAAE,MAAM;gBACV,UAAU;aACX,CAAC,CAAC;YACH,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,KAAK,EAAE,KAAK,CAAC,GAAG;oBAChB,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB;;;;;;;uBAOG;oBACH,OAAO,EACL,QAAQ,CAAC,IAAI,KAAK,KAAK;wBACrB,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,+BAA+B,MAAM,gBAAgB;4BAChF,+EAA+E;4BAC/E,qCAAqC;wBACvC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,+BAA+B,MAAM,gBAAgB;4BAChF,iFAAiF;4BACjF,sEAAsE;iBAC7E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,GAAG;QACtB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM;QACN,KAAK;QACL,UAAU;QACV,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAClC,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;KACjC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../src/plan.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAUpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAe/C;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAE1C,SAAS,WAAW,CAClB,KAAoB,EACpB,QAA0E;IAE1E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAoB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC;QACzE,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;KACpD,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,QAAkB,EAClB,KAAsB;AACtB;;;;GAIG;AACH,OAAqB;IAErB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,EAAE,MAAM,IAAI,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAErD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,KAAK,CAAC,GAAG;gBAChB,OAAO,EACL,IAAI,KAAK,CAAC,GAAG,wCAAwC,IAAI,0BAA0B;oBACnF,2BAA2B,qBAAqB,IAAI;aACvD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,OAAO,GAAiB;YAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YACnD,OAAO;YACP,cAAc;SACf,CAAC;QACF,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAExD;;;;;;;;;;;;;WAaG;QACH,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACtD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO;iBAC9B,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC3B,CAAC,CAAC,QAAQ,KAAK,KAAK;gBACpB,CAAC,CAAC,UAAU,KAAK,IAAI;gBACrB,CAAC,CAAC,YAAY,KAAK,IAAI;gBACvB,CAAC,CAAC,WAAW,KAAK,IAAI,CACzB;iBACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,KAAK,CAAC,GAAG;oBAChB,MAAM,EAAE,KAAK;oBACb,OAAO,EACL,gCAAgC,KAAK,CAAC,GAAG,2CAA2C;wBACpF,eAAe,IAAI,2DAA2D;wBAC9E,8EAA8E;wBAC9E,iDAAiD;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED;;;;;;;;;WASG;QACH,2EAA2E;QAC3E,wDAAwD;QACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,KAAK,CAAC,GAAG;gBAChB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAE;gBAC1B,OAAO,EACL,gCAAgC,KAAK,CAAC,GAAG,8BAA8B,IAAI,UAAU;oBACrF,QAAQ,IAAI,gBAAgB,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,iBAAiB;oBACxF,0CAA0C;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACtD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvF,IAAI,QAAQ,KAAK,IAAI;oBAAE,SAAS;gBAChC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,KAAK,EAAE,KAAK,CAAC,GAAG;oBAChB,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB,OAAO,EAAE,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,uBAAuB,QAAQ,2BAA2B,MAAM,CAAC,IAAI,gBAAgB,IAAI,gBAAgB;iBAC9I,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;gBAAE,SAAS;YACtE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;YACjC,MAAM,UAAU,GAAmC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBACrE,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;oBACzB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,YAAY,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC;gBACd,SAAS,EAAE,KAAK,CAAC,GAAG;gBACpB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,EAAE,EAAE,MAAM;gBACV,UAAU;aACX,CAAC,CAAC;YACH,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,KAAK,EAAE,KAAK,CAAC,GAAG;oBAChB,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB;;;;;;;uBAOG;oBACH,OAAO,EACL,QAAQ,CAAC,IAAI,KAAK,KAAK;wBACrB,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,+BAA+B,MAAM,gBAAgB;4BAChF,+EAA+E;4BAC/E,qCAAqC;wBACvC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,+BAA+B,MAAM,gBAAgB;4BAChF,iFAAiF;4BACjF,sEAAsE;iBAC7E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,GAAG;QACtB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM;QACN,KAAK;QACL,UAAU;QACV,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAClC,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/public-access.d.ts

@@ -0,0 +1,167 @@
+/**
+ * `publicAccess` — what the app's public screens may do with one table, and
+ * `publicKeys`, the browser keys beyond the one every app gets.
+ *
+ * An entry is served through a browser key the install creates: `customer`
+ * (the default, the app's public side) or one named in `publicKeys`. `GET`
+ * reads, `POST` creates; `PATCH` only behind a claim, on a narrow writable
+ * list. `availability` answers free or full per slot and never a row.
+ *
+ * CLAIMS. An entry with `claim` is the key's IDENTITY: proving you know a
+ * row's details (a mobile and a date of birth) opens a session on that row.
+ * An entry with `claimedBy` is a child of that identity: it reaches only the
+ * rows whose column holds the claimed row's key. `verify: 'email-code'` adds a
+ * second step, a code emailed to the row's own address, which raises the
+ * session from `lookup` to `verified`; an entry that says `level: 'verified'`
+ * refuses a session that has not taken it.
+ */
+import { z } from 'zod';
+import { type ReferenceIssue, type TableIndex } from './refs.js';
+/** The key every entry uses unless it names another. */
+export declare const CUSTOMER_KEY = "customer";
+export declare const publicAccessSchema: z.ZodObject<{
+    table: z.ZodString;
+    kind: z.ZodOptional<z.ZodEnum<{
+        records: "records";
+        availability: "availability";
+    }>>;
+    methods: z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PATCH: "PATCH";
+    }>>;
+    select: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    writable: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    filters: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+        column: z.ZodString;
+        op: z.ZodEnum<{
+            in: "in";
+            eq: "eq";
+            neq: "neq";
+            gte: "gte";
+            lte: "lte";
+        }>;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>]>;
+    }, z.core.$strict>, z.ZodUnion<readonly [z.ZodObject<{
+        column: z.ZodString;
+        op: z.ZodLiteral<"today">;
+    }, z.core.$strict>, z.ZodObject<{
+        column: z.ZodString;
+        op: z.ZodLiteral<"from-today">;
+        days: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>]>]>>>;
+    defaults: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+    claim: z.ZodOptional<z.ZodObject<{
+        match: z.ZodArray<z.ZodString>;
+        verify: z.ZodOptional<z.ZodLiteral<"email-code">>;
+        email: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    claimedBy: z.ZodOptional<z.ZodObject<{
+        table: z.ZodString;
+        column: z.ZodString;
+        optional: z.ZodOptional<z.ZodLiteral<true>>;
+    }, z.core.$strict>>;
+    level: z.ZodOptional<z.ZodEnum<{
+        lookup: "lookup";
+        verified: "verified";
+    }>>;
+    sensitive: z.ZodOptional<z.ZodBoolean>;
+    reason: z.ZodOptional<z.ZodString>;
+    onClaim: z.ZodOptional<z.ZodObject<{
+        clear: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    writableValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>>;
+    writableWhen: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>, z.ZodLiteral<"from-now">, z.ZodObject<{
+        within: z.ZodNumber;
+    }, z.core.$strict>]>>>;
+    humanCheck: z.ZodOptional<z.ZodLiteral<true>>;
+    rank: z.ZodOptional<z.ZodObject<{
+        orderBy: z.ZodString;
+        where: z.ZodOptional<z.ZodObject<{
+            column: z.ZodString;
+            eq: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    maxOpen: z.ZodOptional<z.ZodObject<{
+        column: z.ZodString;
+        values: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+        n: z.ZodNumber;
+        upcoming: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    anonymous: z.ZodOptional<z.ZodObject<{
+        perValue: z.ZodOptional<z.ZodObject<{
+            columns: z.ZodArray<z.ZodString>;
+            n: z.ZodNumber;
+        }, z.core.$strict>>;
+        perKeyHour: z.ZodOptional<z.ZodNumber>;
+        plainText: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    requireSetting: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        table: z.ZodString;
+        column: z.ZodString;
+        when: z.ZodOptional<z.ZodLiteral<"anonymous">>;
+    }, z.core.$strict>>>;
+    key: z.ZodOptional<z.ZodString>;
+    confirm: z.ZodOptional<z.ZodObject<{
+        template: z.ZodEnum<{
+            "booking-confirmation": "booking-confirmation";
+        }>;
+        to: z.ZodString;
+        code: z.ZodOptional<z.ZodString>;
+        when: z.ZodOptional<z.ZodString>;
+        party: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        venue: z.ZodOptional<z.ZodObject<{
+            table: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            address: z.ZodOptional<z.ZodString>;
+            phone: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        link: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PublicAccess = z.infer<typeof publicAccessSchema>;
+/**
+ * A browser key besides `customer`. It is never published to the app's public
+ * side: the staff side hands it only to someone signed in with `role`, and
+ * every request on it must carry that person's staff session too — a token
+ * copied out of the page opens nothing on its own. `enabledBy` switches it
+ * off with a bool in the settings row.
+ */
+export declare const publicKeySchema: z.ZodObject<{
+    requiresStaff: z.ZodObject<{
+        role: z.ZodString;
+    }, z.core.$strict>;
+    enabledBy: z.ZodOptional<z.ZodObject<{
+        table: z.ZodString;
+        column: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const publicKeysSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    requiresStaff: z.ZodObject<{
+        role: z.ZodString;
+    }, z.core.$strict>;
+    enabledBy: z.ZodOptional<z.ZodObject<{
+        table: z.ZodString;
+        column: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>>;
+export type PublicKey = z.infer<typeof publicKeySchema>;
+interface PublicAccessContext {
+    index: TableIndex;
+    /** Columns Adminium decides on a table: a browser may never write them. */
+    decided: (table: string) => ReadonlySet<string>;
+    /** Whether the table carries a capacity or a booking rule to answer availability from. */
+    answersAvailability: (table: string) => boolean;
+    publicKeys: Readonly<Record<string, PublicKey>> | undefined;
+    roles: readonly {
+        key: string;
+        screensOnly?: boolean | undefined;
+        cloneFrom?: string | undefined;
+        permissions?: readonly string[] | undefined;
+    }[];
+}
+/** Everything in `publicAccess` and `publicKeys` that names something undeclared, or breaks a rule. */
+export declare function publicAccessIssues(entries: readonly PublicAccess[], ctx: PublicAccessContext): ReferenceIssue[];
+export {};
+//# sourceMappingURL=public-access.d.ts.map

package/dist/public-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-access.d.ts","sourceRoot":"","sources":["../src/public-access.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAEnB,wDAAwD;AACxD,eAAO,MAAM,YAAY,aAAa,CAAC;AA+BvC,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4GpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;kBAKjB,CAAC;AACZ,eAAO,MAAM,gBAAgB;;;;;;;;mBAEyF,CAAC;AACvH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,UAAU,mBAAmB;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,2EAA2E;IAC3E,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,CAAC;IAChD,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5D,KAAK,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;KAAE,EAAE,CAAC;CACnJ;AAED,uGAAuG;AACvG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,GAAG,EAAE,mBAAmB,GAAG,cAAc,EAAE,CAmR/G"}