@adminiumjs/manifest 0.3.42 → 0.3.44

package/dist/public-access.d.ts

@@ -181,11 +181,15 @@ export declare const codeWhereSchema: z.ZodArray<z.ZodUnion<readonly [z.ZodObjec
  * A value of the row that must agree with another: `column` (followed along
  * `path` through foreign keys) equals, is at most, or is at least the target.
  * `when` applies it only to rows whose value (along its own `path`) is one of
- * `in`.
+ * `in`. `length: true` compares how many characters a text value has, with
+ * `lte` alone: a line's lettering no longer than its product allows
+ * (`{ "column": "lettering", "length": true, "lte": { "via": "product_id",
+ * "column": "lettering_limit" } }`), refused as `too-long`.
  */
 export declare const agreeSchema: z.ZodObject<{
     column: z.ZodString;
     path: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    length: z.ZodOptional<z.ZodLiteral<true>>;
     when: z.ZodOptional<z.ZodObject<{
         path: z.ZodOptional<z.ZodArray<z.ZodString>>;
         in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
@@ -253,6 +257,7 @@ export declare const childEntrySchema: z.ZodObject<{
         agrees: z.ZodOptional<z.ZodArray<z.ZodObject<{
             column: z.ZodString;
             path: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            length: z.ZodOptional<z.ZodLiteral<true>>;
             when: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
@@ -308,6 +313,7 @@ export declare const childEntrySchema: z.ZodObject<{
                 column: z.ZodString;
             }, z.core.$strict>]>;
         }, z.core.$strict>>;
+        uploads: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>>;
     via: z.ZodString;
     writable: z.ZodArray<z.ZodString>;
@@ -321,6 +327,7 @@ export declare const childEntrySchema: z.ZodObject<{
     agrees: z.ZodOptional<z.ZodArray<z.ZodObject<{
         column: z.ZodString;
         path: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        length: z.ZodOptional<z.ZodLiteral<true>>;
         when: z.ZodOptional<z.ZodObject<{
             path: z.ZodOptional<z.ZodArray<z.ZodString>>;
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
@@ -376,6 +383,7 @@ export declare const childEntrySchema: z.ZodObject<{
             column: z.ZodString;
         }, z.core.$strict>]>;
     }, z.core.$strict>>;
+    uploads: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 export type ChildEntry = z.infer<typeof childEntrySchema>;
 export declare const publicAccessSchema: z.ZodObject<{
@@ -388,6 +396,7 @@ export declare const publicAccessSchema: z.ZodObject<{
         POST: "POST";
         PATCH: "PATCH";
         GET: "GET";
+        DELETE: "DELETE";
     }>>;
     select: z.ZodOptional<z.ZodArray<z.ZodString>>;
     writable: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -460,6 +469,7 @@ export declare const publicAccessSchema: z.ZodObject<{
             text: z.ZodRecord<z.ZodString, z.ZodString>;
         }, z.core.$strict>;
     }, z.core.$strict>>;
+    appColumn: z.ZodOptional<z.ZodString>;
     newLink: z.ZodOptional<z.ZodObject<{
         column: z.ZodString;
         kind: z.ZodString;
@@ -481,6 +491,7 @@ export declare const publicAccessSchema: z.ZodObject<{
         via: z.ZodString;
     }, z.core.$strict>>;
     files: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    uploads: z.ZodOptional<z.ZodArray<z.ZodString>>;
     documents: z.ZodOptional<z.ZodArray<z.ZodString>>;
     sensitive: z.ZodOptional<z.ZodBoolean>;
     reason: z.ZodOptional<z.ZodString>;
@@ -533,6 +544,7 @@ export declare const publicAccessSchema: z.ZodObject<{
             agrees: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 column: z.ZodString;
                 path: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                length: z.ZodOptional<z.ZodLiteral<true>>;
                 when: z.ZodOptional<z.ZodObject<{
                     path: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
@@ -588,6 +600,7 @@ export declare const publicAccessSchema: z.ZodObject<{
                     column: z.ZodString;
                 }, z.core.$strict>]>;
             }, z.core.$strict>>;
+            uploads: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>>>;
         via: z.ZodString;
         writable: z.ZodArray<z.ZodString>;
@@ -601,6 +614,7 @@ export declare const publicAccessSchema: z.ZodObject<{
         agrees: z.ZodOptional<z.ZodArray<z.ZodObject<{
             column: z.ZodString;
             path: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            length: z.ZodOptional<z.ZodLiteral<true>>;
             when: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
@@ -656,10 +670,12 @@ export declare const publicAccessSchema: z.ZodObject<{
                 column: z.ZodString;
             }, z.core.$strict>]>;
         }, z.core.$strict>>;
+        uploads: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>>;
     agrees: z.ZodOptional<z.ZodArray<z.ZodObject<{
         column: z.ZodString;
         path: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        length: z.ZodOptional<z.ZodLiteral<true>>;
         when: z.ZodOptional<z.ZodObject<{
             path: z.ZodOptional<z.ZodArray<z.ZodString>>;
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
@@ -812,6 +828,7 @@ export declare const publicAccessSchema: z.ZodObject<{
         }, z.core.$strict>]>>>;
     }, z.core.$strict>]>>;
     pictures: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    assets: z.ZodOptional<z.ZodArray<z.ZodString>>;
     withhold: z.ZodOptional<z.ZodObject<{
         columns: z.ZodArray<z.ZodString>;
         unlessHolder: z.ZodOptional<z.ZodString>;
@@ -891,6 +908,12 @@ interface PublicAccessContext {
     answersAvailability: (table: string) => boolean;
     /** The add-ons whose stock words an entry may be answered by: the ones the manifest names, and itself when it is one. Absent: not checked. */
     addOns?: ReadonlySet<string> | undefined;
+    /**
+     * The manifest is an add-on's: its entries with no key ride the `customer`
+     * key of each app it is attached to, whose own sign-in opens the sessions
+     * they are read with.
+     */
+    ridesAppKeys?: boolean | undefined;
     /** The table's limits, as it declares them (absent: the caller does not say). */
     capacityOf?: (table: string) => Capacity | undefined;
     publicKeys: Readonly<Record<string, PublicKey>> | undefined;

package/dist/public-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-access.d.ts","sourceRoot":"","sources":["../src/public-access.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAKnB,mGAAmG;AACnG,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,wDAAwD;AACxD,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,UAAU,CAAC;AAEjC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,yJAA0J,CAAC;AAEzL,mFAAmF;AACnF,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,iHAAiH;AACjH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;GAGG;AACH,QAAA,MAAM,qBAAqB;;;;oBASzB,CAAC;AAGH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEvE,2CAA2C;AAC3C,eAAO,MAAM,YAAY,GAAI,OAAO,kBAAkB,KAAG,MAA4D,CAAC;AAEtH,4CAA4C;AAC5C,eAAO,MAAM,YAAY,GAAI,OAAO,kBAAkB,KAAG,MAAsF,CAAC;AAsEhJ,eAAO,MAAM,WAAW;;;;;;;;;;;;;;oBAAkE,CAAC;AAC3F,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAInE;AAED,4HAA4H;AAC5H,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,SAAS;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC;CAC1F;AAED,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,GAAG,UAAU,CAEjI;AAED,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEvD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,CAW/G;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,SAAS,YAAY,EAAE,GAAG,SAAS,CAAC;IAAC,cAAc,EAAE;QAAE,MAAM,EAAE,SAAS;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,SAAS;gBAAE,GAAG,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;aAAE,EAAE,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;CAAE,EACnM,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CAWf;AA8BD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;KAAE,EAAE,CAAA;CAAE,EACtH,MAAM,EAAE,MAAM,GACb,QAAQ,GAAG,SAAS,GAAG,IAAI,CAiB7B;AA0CD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;qBAQnB,CAAC;AAwBV;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASb,CAAC;AACZ,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;kBAOd,CAAC;AACZ,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAuClD,uFAAuF;AACvF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA2G,CAAC;AACzI,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAiE1D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6OpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAkBjB,CAAC;AACZ,eAAO,MAAM,gBAAgB;;;;;;;;;;;;mBAOzB,CAAC;AACL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,UAAU,mBAAmB;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,sHAAsH;IACtH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,CAAC;IAChD,4GAA4G;IAC5G,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,CAAC;IACjD,oFAAoF;IACpF,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,8IAA8I;IAC9I,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACzC,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,GAAG,SAAS,CAAC;IACrD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5D,KAAK,EAAE,SAAS;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;QAC5C,+FAA+F;QAC/F,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;KAC/E,EAAE,CAAC;IACJ,6EAA6E;IAC7E,MAAM,CAAC,EACH;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,OAAO,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,CAAC;QAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;KAAE,GACvP,SAAS,CAAC;CACf;AAED,qIAAqI;AACrI,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,aAAa,EAAE,CAezG;AAED,mHAAmH;AACnH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,CAAC;IAChH,SAAS,CAAC,EACN,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,GAAG;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,EAAE,GACjO,SAAS,CAAC;CACf;AAED,wJAAwJ;AACxJ,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IACrG,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qGAAqG;IACrG,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACxD;AAED,wGAAwG;AACxG,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,GAAG,SAAS,CAAC;AAElH;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,GAAG,aAAa,GAAG,IAAI,CAsBjI;AA2DD,uGAAuG;AACvG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,GAAG,EAAE,mBAAmB,GAAG,cAAc,EAAE,CAslB/G;AAuiCD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,SAAS,YAAY,EAAE,EACrC,MAAM,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,GACpH;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA8BrC"}
+{"version":3,"file":"public-access.d.ts","sourceRoot":"","sources":["../src/public-access.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAKnB,mGAAmG;AACnG,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,wDAAwD;AACxD,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,UAAU,CAAC;AAEjC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,yJAA0J,CAAC;AAEzL,mFAAmF;AACnF,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,iHAAiH;AACjH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;GAGG;AACH,QAAA,MAAM,qBAAqB;;;;oBASzB,CAAC;AAGH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEvE,2CAA2C;AAC3C,eAAO,MAAM,YAAY,GAAI,OAAO,kBAAkB,KAAG,MAA4D,CAAC;AAEtH,4CAA4C;AAC5C,eAAO,MAAM,YAAY,GAAI,OAAO,kBAAkB,KAAG,MAAsF,CAAC;AAsEhJ,eAAO,MAAM,WAAW;;;;;;;;;;;;;;oBAAkE,CAAC;AAC3F,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAInE;AAED,4HAA4H;AAC5H,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,SAAS;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC;CAC1F;AAED,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,GAAG,UAAU,CAEjI;AAED,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEvD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,CAW/G;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,SAAS,YAAY,EAAE,GAAG,SAAS,CAAC;IAAC,cAAc,EAAE;QAAE,MAAM,EAAE,SAAS;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,SAAS;gBAAE,GAAG,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;aAAE,EAAE,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;CAAE,EACnM,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CAWf;AA8BD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;KAAE,EAAE,CAAA;CAAE,EACtH,MAAM,EAAE,MAAM,GACb,QAAQ,GAAG,SAAS,GAAG,IAAI,CAiB7B;AA0CD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;qBAQnB,CAAC;AAwBV;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAUb,CAAC;AACZ,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;kBAOd,CAAC;AACZ,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAyClD,uFAAuF;AACvF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA2G,CAAC;AACzI,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAiE1D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqQpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAkBjB,CAAC;AACZ,eAAO,MAAM,gBAAgB;;;;;;;;;;;;mBAOzB,CAAC;AACL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,UAAU,mBAAmB;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,sHAAsH;IACtH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,CAAC;IAChD,4GAA4G;IAC5G,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,CAAC;IACjD,oFAAoF;IACpF,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,8IAA8I;IAC9I,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACzC;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,GAAG,SAAS,CAAC;IACrD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IAC5D,KAAK,EAAE,SAAS;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;QAC5C,+FAA+F;QAC/F,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;KAC/E,EAAE,CAAC;IACJ,6EAA6E;IAC7E,MAAM,CAAC,EACH;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,OAAO,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,CAAC;QAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;KAAE,GACvP,SAAS,CAAC;CACf;AAED,qIAAqI;AACrI,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,aAAa,EAAE,CAezG;AAED,mHAAmH;AACnH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,CAAC;IAChH,SAAS,CAAC,EACN,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,GAAG;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,EAAE,GACjO,SAAS,CAAC;CACf;AAED,wJAAwJ;AACxJ,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IACrG,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qGAAqG;IACrG,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACxD;AAED,wGAAwG;AACxG,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,GAAG,SAAS,CAAC;AAElH;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,GAAG,aAAa,GAAG,IAAI,CAsBjI;AAmFD,uGAAuG;AACvG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,GAAG,EAAE,mBAAmB,GAAG,cAAc,EAAE,CAumB/G;AAipCD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,SAAS,YAAY,EAAE,EACrC,MAAM,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,GACpH;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA8BrC"}

package/dist/public-access.js

@@ -338,12 +338,16 @@ const agreeTargetSchema = z.union([
  * A value of the row that must agree with another: `column` (followed along
  * `path` through foreign keys) equals, is at most, or is at least the target.
  * `when` applies it only to rows whose value (along its own `path`) is one of
- * `in`.
+ * `in`. `length: true` compares how many characters a text value has, with
+ * `lte` alone: a line's lettering no longer than its product allows
+ * (`{ "column": "lettering", "length": true, "lte": { "via": "product_id",
+ * "column": "lettering_limit" } }`), refused as `too-long`.
  */
 export const agreeSchema = z
     .object({
     column: refSchema,
     path: pathSchema.optional(),
+    length: z.literal(true).optional(),
     when: z.object({ path: pathSchema.optional(), in: z.array(scalarSchema).min(1).max(32) }).strict().optional(),
     eq: agreeTargetSchema.optional(),
     lte: agreeTargetSchema.optional(),
@@ -390,6 +394,8 @@ const childEntryShape = {
     plainText: plainTextSchema.optional(),
     /** The most a column may add up to across the rows of one write (a dozen items to an order). */
     sumMax: sumMaxSchema.optional(),
+    /** File columns of the child a guest may upload into (`POST /public/uploads`), as on the entry itself. */
+    uploads: z.array(refSchema).min(1).max(8).optional(),
 };
 const childTablesSchema = (entry) => z.record(refSchema, entry).refine((children) => {
     const count = Object.keys(children).length;
@@ -462,7 +468,8 @@ export const publicAccessSchema = z
     .object({
     table: refSchema,
     kind: z.enum(['records', 'availability']).optional(),
-    methods: z.array(z.enum(['GET', 'POST', 'PATCH'])).min(1),
+    /** `DELETE` only on an add-on's own link: its holder removes their own row while it is in a state the entry names. */
+    methods: z.array(z.enum(['GET', 'POST', 'PATCH', 'DELETE'])).min(1),
     select: z.array(refSchema).optional(),
     writable: z.array(refSchema).optional(),
     filters: z.array(z.union([valueFilterSchema, relativeFilterSchema])).optional(),
@@ -494,6 +501,14 @@ export const publicAccessSchema = z
      * unticked writes nothing: it takes back no earlier yes.
      */
     consent: publicConsentSchema.optional(),
+    /**
+     * On an add-on's entry, which rides the key of every app it is attached
+     * to: a text column of the table that holds the key of the app a row is
+     * for (`app`). Through an app's key the entry reads only the rows whose
+     * column holds that app's key, a create writes that key there (the
+     * browser cannot choose it), and a change never moves it.
+     */
+    appColumn: refSchema.optional(),
     /** On a signed-in person's rows: "Make a new link" for a row's own link. */
     newLink: newLinkSchema.optional(),
     /**
@@ -504,6 +519,14 @@ export const publicAccessSchema = z
     visibleWith: z.object({ table: refSchema, via: refSchema }).strict().optional(),
     /** File columns a claimed person may download (the file the row names, never by its id). */
     files: z.array(refSchema).min(1).max(8).optional(),
+    /**
+     * File columns a guest may upload into (`POST /public/uploads`): each a
+     * `writable` file column whose rule says what a guest may send
+     * (`rules.file.upload`). The upload is kept for a day; the guest's next
+     * create or change through this entry names it in the column, and it
+     * becomes the row's own file.
+     */
+    uploads: z.array(refSchema).min(1).max(8).optional(),
     /** The kinds of document a claimed person may list and open for these rows. */
     documents: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/, 'a document kind')).min(1).max(8).optional(),
     /**
@@ -685,6 +708,13 @@ export const publicAccessSchema = z
         .optional(),
     /** Image columns any visitor may see, through the rows this entry reads. */
     pictures: z.array(refSchema).min(1).max(4).optional(),
+    /**
+     * File columns of product assets every visitor's browser may load,
+     * through the rows this entry reads (`GET /public/assets`): a preview
+     * model (GLB), a print model (STL, 3MF), a web font (WOFF2), an SVG piece.
+     * Each column holds files by a `file` rule that takes only those kinds.
+     */
+    assets: z.array(refSchema).min(1).max(8).optional(),
     /**
      * On rows reached through a parent: `columns` are left out unless
      * `unlessHolder` is empty or names the session's own person (a ticket
@@ -851,11 +881,40 @@ function formsEntryIssues(entry, i, entries, appKey, index) {
     }
     return out;
 }
+/**
+ * An entry held to the app whose key serves it (`appColumn`): a text column
+ * of its table, never one a browser writes or a value the entry sets, and
+ * only on an entry that rides each app's own key (no key of the add-on's,
+ * no sign-in of its own).
+ */
+function appColumnIssues(entries, index) {
+    const out = [];
+    entries.forEach((entry, i) => {
+        const column = entry.appColumn;
+        if (column === undefined)
+            return;
+        const at = ['publicAccess', i, 'appColumn'];
+        const found = index.column(entry.table, column);
+        if (found === undefined)
+            out.push({ path: at, message: `"${entry.table}" has no column "${column}"` });
+        else if (found.type !== 'text')
+            out.push({ path: at, message: `"${entry.table}.${column}" is not a text column, so it cannot hold an app's key` });
+        if ((entry.writable ?? []).includes(column) || Object.prototype.hasOwnProperty.call(entry.defaults ?? {}, column)) {
+            out.push({ path: at, message: `"${column}" holds the app whose key serves the entry: Adminium writes it, so it is neither writable nor a default` });
+        }
+        if ((entry.key ?? CUSTOMER_KEY) !== CUSTOMER_KEY)
+            out.push({ path: at, message: `an entry on "${String(entry.key)}" is served by no app's key, so it has no app to be held to` });
+        if (entry.claim !== undefined || entry.identity !== undefined)
+            out.push({ path: at, message: 'a sign-in entry is the key\'s own, and is held to no app' });
+    });
+    return out;
+}
 /** Everything in `publicAccess` and `publicKeys` that names something undeclared, or breaks a rule. */
 export function publicAccessIssues(entries, ctx) {
     const out = [];
     const { index } = ctx;
     const has = index.has;
+    out.push(...appColumnIssues(entries, index));
     for (const [name, key] of Object.entries(ctx.publicKeys ?? {})) {
         const at = ['publicKeys', name];
         // The app's own key, named only for its peak: nothing more to check.
@@ -1030,14 +1089,25 @@ export function publicAccessIssues(entries, ctx) {
         if (patches && entry.claim === undefined && entry.visibleWith === undefined && (entry.claimedBy === undefined || entry.claimedBy.optional === true)) {
             out.push({ path: at('methods'), message: 'PATCH is allowed only with a claim' });
         }
+        /*
+         * A removal from a browser: only through an add-on's own link (a shopper
+         * deleting their own saved draft), on the entry that opens the row by it.
+         * Nothing else a guest holds removes a row.
+         */
+        if (entry.methods.includes('DELETE')) {
+            const ownLink = ctx.ridesAppKeys === true && entry.key !== undefined && entry.claim !== undefined && 'by' in entry.claim && entry.claim.own === true;
+            if (!ownLink)
+                out.push({ path: at('methods'), message: "DELETE is allowed only on an add-on's own link, the entry that opens the row by it (claim by token, own)" });
+        }
         // Nothing a server decides may be written by a browser.
         const decided = ctx.decided(entry.table);
         for (const ref of writable) {
             if (decided.has(ref))
                 out.push({ path: at('writable'), message: `"${ref}" is decided by Adminium and cannot be written publicly` });
         }
-        // A file column names a file a signed-in staff member uploaded: a browser's key uploads nothing, so it names none.
-        for (const [list, refs] of [['writable', [...writable]], ['defaults', Object.keys(entry.defaults ?? {})]]) {
+        // A file column names a file a signed-in staff member uploaded: a browser's key uploads nothing, so it names none —
+        // but a guest's own upload, in a column the entry lets them upload into (`uploads`).
+        for (const [list, refs] of [['writable', [...writable].filter((ref) => !(entry.uploads ?? []).includes(ref))], ['defaults', Object.keys(entry.defaults ?? {})]]) {
             for (const ref of refs) {
                 const found = ctx.index.column(entry.table, ref);
                 if (found?.rules?.file !== undefined)
@@ -1220,7 +1290,8 @@ export function publicAccessIssues(entries, ctx) {
                 out.push({ path: at('visibleWith'), message: 'the entries it is visible with lead to no claimed person' });
         }
         for (const ref of entry.files ?? []) {
-            if (writable.has(ref))
+            // A guest's own upload is written by naming it, and only a file they uploaded for the column is taken there.
+            if (writable.has(ref) && !(entry.uploads ?? []).includes(ref))
                 out.push({ path: at('files'), message: `"${ref}" is offered for download, so a browser never writes it` });
             const found = column(ref);
             if (found === undefined)
@@ -1325,7 +1396,7 @@ export function publicAccessIssues(entries, ctx) {
                 !('within' in when) &&
                 [when.after, when.before].some((end) => end !== undefined) &&
                 [when.after, when.before].every((end) => end === undefined || end.column !== undefined));
-        if (entry.writableWhen !== undefined && !patches && !createWindow) {
+        if (entry.writableWhen !== undefined && !patches && !entry.methods.includes('DELETE') && !createWindow) {
             out.push({ path: at('writableWhen'), message: "writableWhen limits a change, and this entry changes nothing (a child's create takes a window read from its parent, keyed by the link)" });
         }
         for (const [ref, when] of Object.entries(entry.writableWhen ?? {})) {
@@ -1505,6 +1576,13 @@ export function publicAccessIssues(entries, ctx) {
             out.push(...unlockIssues(entry, entry.unlockBy, entries, ctx, at));
         if (entry.pictures !== undefined)
             out.push(...pictureIssues(entry, entry.pictures, entries, ctx, at));
+        if (entry.uploads !== undefined) {
+            if (!entry.methods.includes('POST') && !entry.methods.includes('PATCH'))
+                out.push({ path: at('uploads'), message: "a guest's upload is named by a create or a change, and this entry makes neither" });
+            out.push(...uploadIssues(ctx.index, entry.table, entry.uploads, entry.writable ?? [], at('uploads')));
+        }
+        if (entry.assets !== undefined)
+            out.push(...assetIssues(entry, entry.assets, entries, ctx, at));
     });
     out.push(...treeIssues(entries, ctx, identities, shareCodes));
     out.push(...personIssues(entries, ctx, identities));
@@ -1686,6 +1764,105 @@ function pictureIssues(entry, pictures, entries, ctx, at) {
     }
     return out;
 }
+/** The kinds of file a product asset may be (`ASSET_FILE_KINDS` in `schema.ts`, which imports this file). */
+const ASSET_KINDS = ['svg', 'glb', 'stl', '3mf', 'woff2'];
+/**
+ * Product assets every visitor's browser loads: file columns the entry shows,
+ * held to a model's, a font's or an SVG's kinds, which no browser writes. The
+ * same shape as pictures: a viewer `fetch`es a model and `@font-face` loads a
+ * font with no session, so the rows are read by every visitor alike.
+ */
+function assetIssues(entry, assets, entries, ctx, at) {
+    const out = [];
+    if (entry.methods.length !== 1 || entry.methods[0] !== 'GET' || entry.kind === 'availability') {
+        out.push({ path: at('assets'), message: 'assets are served through an entry that only reads rows' });
+    }
+    if (entry.claim !== undefined || entry.claimedBy !== undefined || entry.visibleWith !== undefined) {
+        out.push({ path: at('assets'), message: "assets are for every visitor; a signed-in person's own files are `files`" });
+    }
+    if (entry.unlockBy !== undefined)
+        out.push({ path: at('assets'), message: 'assets are for every visitor; rows a code unlocks are read only by whoever gave the code' });
+    if (entry.level !== undefined && entry.claim === undefined && entry.claimedBy === undefined && entry.visibleWith === undefined) {
+        out.push({ path: at('assets'), message: 'assets are for every visitor; rows read by a signed-in session alone are no asset a page loads for anyone' });
+    }
+    if ((entry.key ?? CUSTOMER_KEY) !== CUSTOMER_KEY)
+        out.push({ path: at('key'), message: "assets are served through the app's customer key" });
+    const writes = new Set([...(entry.writable ?? []), ...Object.keys(entry.defaults ?? {})]);
+    const shareCodes = shareCodeColumns(entries, entry.table, ctx.index);
+    const guests = guestUploadColumns(entries, entry.table);
+    if (new Set(assets).size !== assets.length)
+        out.push({ path: at('assets'), message: 'an asset column is named twice' });
+    for (const ref of assets) {
+        const found = ctx.index.column(entry.table, ref);
+        if (found === undefined) {
+            out.push({ path: at('assets'), message: `"${entry.table}" has no column "${ref}"` });
+            continue;
+        }
+        const accept = found.rules?.file?.accept;
+        if (accept === undefined || accept.length === 0 || accept.some((kind) => !ASSET_KINDS.includes(kind))) {
+            out.push({ path: at('assets'), message: `"${entry.table}.${ref}" is not a column of assets: a file rule that takes only ${ASSET_KINDS.join(', ')}` });
+        }
+        if (writes.has(ref))
+            out.push({ path: at('assets'), message: `"${ref}" is an asset every visitor loads, so a browser never writes it` });
+        if (entry.select !== undefined && !entry.select.includes(ref))
+            out.push({ path: at('assets'), message: `"${ref}" is not one of the columns the entry shows` });
+        if ((entry.files ?? []).includes(ref))
+            out.push({ path: at('assets'), message: `"${ref}" is a signed-in person's file, not an asset for everyone` });
+        if ((entry.pictures ?? []).includes(ref))
+            out.push({ path: at('assets'), message: `"${ref}" is a picture already; a column is one or the other` });
+        if (found.rules?.secret === true || found.rules?.code !== undefined || shareCodes.includes(ref)) {
+            out.push({ path: at('assets'), message: `"${entry.table}.${ref}" is kept from readers, so it is no asset for everyone` });
+        }
+        if (found.rules?.personal === true)
+            out.push({ path: at('assets'), message: `"${entry.table}.${ref}" is personal data, so it is no asset for everyone` });
+        if (guests.has(ref))
+            out.push({ path: at('assets'), message: `guests upload into "${entry.table}.${ref}", and a guest's file is kept private, so it is no asset for everyone` });
+    }
+    return out;
+}
+/** The columns of `table` any entry lets a guest upload into, on the entry itself or on a level of its child rows. */
+function guestUploadColumns(entries, table) {
+    const out = new Set();
+    const walk = (children) => {
+        for (const [name, child] of Object.entries(children ?? {})) {
+            if (name === table)
+                for (const ref of child.uploads ?? [])
+                    out.add(ref);
+            walk(child.children);
+        }
+    };
+    for (const entry of entries) {
+        if (entry.table === table)
+            for (const ref of entry.uploads ?? [])
+                out.add(ref);
+        walk(entry.children);
+    }
+    return out;
+}
+/**
+ * The file columns a guest may upload into, at one level of an entry: each a
+ * column of the table, written there, whose file rule says what a guest may
+ * send (`rules.file.upload`). Named once each.
+ */
+function uploadIssues(index, table, uploads, writable, path) {
+    const out = [];
+    if (new Set(uploads).size !== uploads.length)
+        out.push({ path, message: 'each column is named once' });
+    for (const ref of uploads) {
+        const found = ruledColumn(index, table, ref);
+        if (found === undefined) {
+            out.push({ path, message: `"${table}" has no column "${ref}"` });
+            continue;
+        }
+        if (found.rules?.file === undefined)
+            out.push({ path, message: `"${table}.${ref}" holds no files: give it a file rule (rules.file)` });
+        else if (found.rules.file.upload === undefined)
+            out.push({ path, message: `"${table}.${ref}" does not say what a guest may upload: give its file rule an upload (kinds, maxBytes)` });
+        if (!writable.includes(ref))
+            out.push({ path, message: `"${ref}" is filled by naming the upload, so it is writable` });
+    }
+    return out;
+}
 /**
  * Whether an entry reads a table's rows: a GET that is not an availability
  * answer (free or full per slot, never a row), so it can be a child's parent.
@@ -1850,9 +2027,21 @@ function agreeIssues(index, table, parent, agree, at) {
                 out.push({ path: at(test, 'column'), message: `"${via.references}" has no column "${target.column}"` });
         }
     }
-    else if (typeof reached !== 'string' && !agreeValueFits(reached.column, target.value)) {
+    else if (agree.length !== true && typeof reached !== 'string' && !agreeValueFits(reached.column, target.value)) {
         out.push({ path: at(test, 'value'), message: `${JSON.stringify(target.value)} is not a value of "${reached.table}.${reached.column.ref}"` });
     }
+    if (agree.length === true) {
+        // How many characters a text has, at most a number: the text is the row's, the most is a number.
+        if (test !== 'lte')
+            out.push({ path: at(test), message: 'a length is compared with lte (at most so many characters)' });
+        if (typeof reached !== 'string' && reached.column.type !== 'text')
+            out.push({ path: at('length'), message: `"${reached.table}.${reached.column.ref}" is not text, so it has no length` });
+        if (other !== undefined && !NUMBERS.includes(other.type))
+            out.push({ path: at(test), message: `"${other.ref}" is not a number, so it is no most characters` });
+        if ('value' in target && (typeof target.value !== 'number' || !Number.isInteger(target.value) || target.value < 0))
+            out.push({ path: at(test, 'value'), message: 'the most characters is a whole number' });
+        return out;
+    }
     if (typeof reached !== 'string') {
         if (test !== 'eq' && !NUMBERS.includes(reached.column.type)) {
             out.push({ path: at(test), message: `"${reached.table}.${reached.column.ref}" is not a number, so it is not at most or at least another` });
@@ -2093,6 +2282,8 @@ function treeIssues(entries, ctx, identities, shareCodes) {
                     }
                 }
                 out.push(...boundIssues(index, ctx, name, child.writable, here('writable')));
+                if (child.uploads !== undefined)
+                    out.push(...uploadIssues(index, name, child.uploads, child.writable, here('uploads')));
                 (child.agrees ?? []).forEach((agree, a) => out.push(...agreeIssues(index, name, parent, agree, (...rest) => here('agrees', a, ...rest))));
                 (child.counts ?? []).forEach((counts, c) => out.push(...countsIssues(index, name, parent, counts, (...rest) => here('counts', c, ...rest))));
                 if (child.children !== undefined) {
@@ -2429,7 +2620,9 @@ function personIssues(entries, ctx, identities) {
         if (entry.level !== undefined && entry.claim === undefined && entry.claimedBy === undefined && entry.visibleWith === undefined) {
             if (entry.methods.length !== 1 || entry.methods[0] !== 'GET')
                 out.push({ path: at('methods'), message: 'a read for a signed-in guest alone only reads' });
-            if (!identities.has(key))
+            // An add-on's entry on an app's key is read with a session the app's own sign-in opened (a guest who found their order).
+            const appSignsIn = ctx.ridesAppKeys === true && key === CUSTOMER_KEY;
+            if (!identities.has(key) && !appSignsIn)
                 out.push({ path: at('level'), message: `the "${key}" key signs nobody in, so no session could read this` });
             if (entry.select === undefined)
                 out.push({ path: at('select'), message: 'a read for a signed-in guest lists what it shows; without select it would show every column' });