@aventara/core 1.0.0-rc.1 → 1.0.0-rc.11

package/dist/runtime/outcome-mapper.d.ts

@@ -13,10 +13,11 @@ export declare function uniqueMissFailure(operation: AvOperationIdentity, data:
  */
 export declare function mapOperationOutcome(operation: AvOperationIdentity, data: unknown): AvOperationResponse;
 /** The A-codes a set of Framework Validation Layer issues can roll up to. */
-export type ValidationOutcomeCode = "A2001" | "A2002" | "A2004" | "A2007" | "A2009";
+type ValidationOutcomeCode = "A2001" | "A2002" | "A2004" | "A2007" | "A2009";
 /** The framework's top-level `cause.message` for each validation outcome code. */
 export declare const VALIDATION_OUTCOME_MESSAGES: {
     readonly [K in ValidationOutcomeCode]: string;
 };
 /** Maps framework validation issues to their stable failure envelope. */
 export declare function mapValidationOutcome(issues: readonly AvValidationIssue[]): AvOperationFailureResponse;
+export {};

package/dist/runtime/output-validator.d.ts

@@ -2,7 +2,7 @@ import type { AvContract } from "../contracts/contract.js";
 import type { AvOperationIdentity } from "../operations/operation-identity.js";
 import type { AvValidationIssue } from "../operations/validation-code.js";
 import type { ReadProjectionPlan } from "./computed-read-runtime.js";
-export type OutputValidationResult = {
+type OutputValidationResult = {
     readonly ok: true;
 } | {
     readonly ok: false;

package/dist/runtime/output-validator.js

@@ -1,12 +1,10 @@
 import { lookupField, lookupResource } from "../contracts/contract-lookup.js";
 import { advertisedReducers, } from "../contracts/field.js";
+import { isRecord } from "./record.guard.js";
 import { normalizeScalarFieldValue } from "./scalar-runtime.js";
 function issue(message, path = ["data"]) {
     return { ok: false, issues: [{ path, code: "V1001", message }] };
 }
-function isRecord(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 function validatesRecordOrNull(value) {
     return value === null || isRecord(value);
 }

package/dist/runtime/owned-execution.registry.d.ts

@@ -1,11 +1,41 @@
-import type { AgentTransactionRequest, ClientTransactionRequest } from "../transactions/transaction-request.js";
+import type { RemoteRequestOrigin } from "../config/config-layer.js";
+import type { PolicyCaller } from "../policy/policy-request.js";
+import type { AvAgentTransactionRequest, AvClientTransactionRequest } from "../transactions/transaction-request.js";
 import type { AvTransactionResponse } from "../transactions/transaction-response.js";
+import type { AvCallerDataError } from "./caller-data.copier.js";
 import type { RemoteOperationRequest } from "./operation-request.js";
 import type { AvOperationResponse } from "./operation-response.js";
-/** The two entries that run a request the protocol decoded itself, uncopied. */
+import type { AvState } from "./request-state.js";
+/**
+ * The entries that run a request the protocol decoded itself, uncopied, and
+ * what an Operation Set reads off the Framework besides.
+ */
 export type OwnedExecution = {
-    readonly execute: (request: RemoteOperationRequest) => Promise<AvOperationResponse>;
-    readonly executeTransaction: (request: ClientTransactionRequest | AgentTransactionRequest) => Promise<AvTransactionResponse>;
+    /**
+     * Runs `request` uncopied; with `refused`, its arguments are a host's parsed body
+     * whose copy at the call failed, answered as the door answers that failure.
+     * `member` is an Operation Set entry's: the principal derived once for the
+     * set, and the entry's key, which its diagnostics name.
+     */
+    readonly execute: (request: RemoteOperationRequest, refused?: AvCallerDataError, member?: {
+        readonly caller?: PolicyCaller;
+        readonly key?: string;
+    }) => Promise<AvOperationResponse>;
+    /**
+     * The principal a remote request with this state runs as, derived once, or
+     * `undefined` when no policy checks it. Throws or rejects as
+     * `policy.principal` does.
+     */
+    readonly caller: (request: {
+        readonly origin: RemoteRequestOrigin;
+        readonly state: AvState;
+    }) => PolicyCaller | undefined | Promise<PolicyCaller>;
+    /**
+     * Runs `request` uncopied; with `refused`, its plan is a host's parsed plan taken
+     * at the call, and these steps' arguments could not be copied there: each is
+     * answered at its turn as the door answers that failure.
+     */
+    readonly executeTransaction: (request: AvClientTransactionRequest | AvAgentTransactionRequest, refused?: ReadonlyMap<number, AvCallerDataError>) => Promise<AvTransactionResponse>;
 };
 /** Records `framework`'s owned entries; called once, at construction. */
 export declare function recordOwnedExecution(framework: object, execution: OwnedExecution): void;

package/dist/runtime/pipe-output.validator.d.ts

@@ -24,6 +24,8 @@ import type { AvOperationFailureResponse } from "./operation-response.js";
  */
 /** The one text every `A3004` carries on the wire. */
 export declare const PIPE_OUTPUT_FAILURE_MESSAGE = "A server pipeline produced invalid arguments.";
+/** The Contract a stage's output is held to: Core's Resources plus what `active` adds. */
+export declare function serverContractFor(core: AvContractCore, active: AvContract): AvContract;
 /** The error the diagnostics channel receives for a refused pipe output. */
 export declare class AvPipeOutputError extends Error {
     readonly issues: readonly AvValidationIssue[];
@@ -61,3 +63,11 @@ export declare function refuseStageOutput(contracts: {
 }, request: AvOperationIdentity & {
     readonly resource: string;
 }, args: unknown, subject: string, options?: OperationValidationOptions): RefusedStageOutput | undefined;
+/**
+ * The `A3004` for a stage output the server's rules raised `issues` against
+ * (paths under `["arguments", …]`), the first named in the diagnostic;
+ * `undefined` when there are none.
+ */
+export declare function refusedStageOutput(request: AvOperationIdentity & {
+    readonly resource: string;
+}, issues: readonly AvValidationIssue[], subject: string): RefusedStageOutput | undefined;

package/dist/runtime/pipe-output.validator.js

@@ -19,7 +19,7 @@ function serverContract(core, active) {
     return { ...core, resources };
 }
 const SERVER_VIEWS = new WeakMap();
-function serverContractFor(core, active) {
+export function serverContractFor(core, active) {
     let view = SERVER_VIEWS.get(active);
     if (view === undefined) {
         view = serverContract(core, active);
@@ -64,7 +64,9 @@ export function refusePipeOutput(contracts, request, args, pipe, index, options)
     return refuseStageOutput(contracts, request, args, `Pipe ${pipeLabel(pipe, index)}`, options);
 }
 export function refuseStageOutput(contracts, request, args, subject, options) {
-    const issues = serverIssues(serverContractFor(contracts.core, contracts.active), request, args, options);
+    return refusedStageOutput(request, serverIssues(serverContractFor(contracts.core, contracts.active), request, args, options), subject);
+}
+export function refusedStageOutput(request, issues, subject) {
     const [first] = issues;
     if (first === undefined) {
         return undefined;

package/dist/runtime/pipeline.d.ts

@@ -1,22 +1,27 @@
 import type { AvAdapterModel } from "../adapters/adapter-model.js";
 import type { AvAdapterSqlValue } from "../adapters/adapter-sql-statement.js";
+import type { AvPreComputeLift } from "../config/computed-fields.js";
 import type { AvRequestOrigin } from "../config/config-layer.js";
 import type { AvConfigResourceKey } from "../config/framework-field-definition.js";
 import type { AvContract } from "../contracts/contract.js";
 import type { AvApplicationScalarForms } from "../contracts/scalar-value-type.js";
-import type { AvContractApplicationView } from "../framework/contract-view.js";
+import type { AvContractApplicationView, RequirementsLessComputed } from "../framework/contract-view.js";
 import type { AvContextOperations } from "../framework/operation-facade.js";
 import type { AvOperationArgumentsFor, AvResourceKey } from "../operations/operation-arguments.js";
 import type { AvOperationFamily, AvOperationIdentity } from "../operations/operation-identity.js";
 import type { AvTransactionReference } from "../transactions/transaction-reference.js";
 import type { AvError } from "./framework-error.js";
-import type { AvDeepReadonly, AvDeepReadonlyLeaf } from "./readonly-value.js";
+import type { ArrayForm, AvDeepReadonly, AvDeepReadonlyLeaf } from "./readonly-value.js";
 import type { AvState } from "./request-state.js";
 /**
  * What a pipeline is told about the HTTP request a client-origin operation arrived on.
  */
 export type AvTransportContext = {
-    readonly method: "POST";
+    /**
+     * `"POST"`, or `"GET"` for a read of a Resource with `cache` (a browser's
+     * prefetch or a CDN's refetch is a GET too).
+     */
+    readonly method: "POST" | "GET";
     readonly headers: Readonly<Record<string, string>>;
 };
 /** What a pipeline ctx states about the request, whatever the stage. */
@@ -36,24 +41,38 @@ type AvContextFacts = {
      */
     readonly $state: AvState;
 };
-/**
- * `ctx.$sql`: a developer SQL statement, written only as a tagged template —
- * ``await ctx.$sql<Row>`insert into audit (actor) values (${actorId})` `` — run at
- * once. Every interpolated value is bound as a parameter, never spliced into the
- * text. It runs in the current transaction; outside one, as a plain statement,
- * with no transaction opened around it. Resolves the rows the statement returned.
- */
-export type AvContextSql = <Row = unknown>(strings: TemplateStringsArray, ...values: readonly AvAdapterSqlValue[]) => Promise<Row[]>;
 /**
  * The arguments a variant-level stage is told: the operation's arguments under
  * the model's Application Contract view, in the application forms, a reference
  * position admitting an unresolved `$ref`. `unknown` for a model whose Resource
  * names are not literal.
  */
-export type AvStageArguments<M extends AvAdapterModel, R extends string, F extends AvOperationFamily, V extends string> = string extends R ? unknown : R extends AvResourceKey<AvContractApplicationView<M>> ? AvOperationArgumentsFor<AvContractApplicationView<M>, R, Extract<AvOperationIdentity, {
+export type AvStageArguments<M extends AvAdapterModel, R extends string, F extends AvOperationFamily, V extends string> = StageArgumentsOf<AvContractApplicationView<M>, R, F, V>;
+/** The arguments of operation `F`.`V` on `R` under the Contract view `C`. */
+type StageArgumentsOf<C extends AvContract, R extends string, F extends AvOperationFamily, V extends string> = string extends R ? unknown : R extends AvResourceKey<C> ? AvOperationArgumentsFor<C, R, Extract<AvOperationIdentity, {
     readonly family: F;
     readonly variant: V;
 }>, AvApplicationScalarForms, AvApplicationScalarForms> : unknown;
+/**
+ * The arguments a variant's guards, pipes and filters are told: the operation's
+ * arguments before write compute has run, so a create need not hold a field
+ * `compute.create` fills (`Lift`, as `"<Resource>.<field>"`; `string`: any).
+ */
+export type AvPreComputeStageArguments<M extends AvAdapterModel, R extends string, F extends AvOperationFamily, V extends string, Lift extends string = AvPreComputeLift<M, "root">> = F extends "find" | "delete" ? AvStageArguments<M, R, F, V> : [Lift] extends [never] ? AvStageArguments<M, R, F, V> : StageArgumentsOf<PreComputeView<AvContractApplicationView<M>, Lift>, R, F, V>;
+/** A Contract view with the create requirements `Lift` names lifted. */
+type PreComputeView<C, Lift extends string> = Extract<{
+    readonly [P in keyof C]: P extends "resources" ? string extends Lift ? {
+        readonly [R in keyof C[P]]: Omit<C[P][R], "createRequirements">;
+    } : {
+        readonly [R in keyof C[P]]: LiftedResource<C[P][R], LiftedFieldOf<Lift, R>>;
+    } : C[P];
+}, AvContract>;
+/** The fields of Resource `R` that `Lift` names. */
+type LiftedFieldOf<Lift extends string, R> = Lift extends `${R & string}.${infer Field}` ? Field : never;
+/** One Resource with the create requirements on `Fields` lifted; itself when none. */
+type LiftedResource<Resource, Fields> = [Fields] extends [never] ? Resource : {
+    readonly [P in keyof Resource]: P extends "createRequirements" ? RequirementsLessComputed<Exclude<Resource[P], undefined>, Fields> : Resource[P];
+};
 /**
  * What a pipeline callback is told about the operation it is wrapping, and the
  * framework's executor: `ctx.<Resource>.<family>.<variant>(args)`, `ctx.$sql` and
@@ -83,11 +102,20 @@ export type AvContext<M extends AvAdapterModel = AvAdapterModel, R extends strin
      * returned them in a pipe, and the validated arguments the operation executes in
      * an interceptor, a hook or a filter. Only a pipe changes them, by returning new
      * ones; writing to them throws a `TypeError`. At a variant, typed as that
-     * operation's arguments ({@link AvStageArguments}), deep read-only; above it,
-     * `unknown`.
+     * operation's arguments ({@link AvStageArguments}), deep read-only; in a guard or
+     * a filter a create may lack the fields `compute.create` fills ({@link
+     * AvPreComputeStageArguments}: write compute has not run); above it, `unknown`.
      */
     readonly $args: AvDeepReadonly<A>;
-    readonly $sql: AvContextSql;
+    /**
+     * A developer SQL statement, written only as a tagged template —
+     * ``await ctx.$sql<Row>`insert into audit (actor) values (${actorId})` ``
+     * — run at once. Every interpolated value is bound as a parameter, never
+     * spliced into the text. It runs in the current transaction; outside one,
+     * as a plain statement, with no transaction opened around it. Resolves
+     * the rows the statement returned.
+     */
+    readonly $sql: <Row = unknown>(strings: TemplateStringsArray, ...values: readonly AvAdapterSqlValue[]) => Promise<Row[]>;
     /**
      * Runs `work` in a transaction, `tx` being this ctx bound to it, and resolves
      * what `work` resolved; a throw rolls it back. Inside an open transaction it
@@ -103,22 +131,22 @@ export type AvGuard<M extends AvAdapterModel = AvAdapterModel, R extends string
  * Transforms the arguments before the validators judge them: the only stage
  * that changes them. `args` is deep-frozen, so a pipe returns new arguments;
  * returning `undefined` keeps them as they are. At a variant, `args` and the
- * return are typed as that operation's arguments ({@link AvStageArguments}),
- * `args` deep read-only.
+ * return are typed as that operation's arguments before write compute runs
+ * ({@link AvPreComputeStageArguments}: a create may lack the fields
+ * `compute.create` fills), `args` deep read-only.
  */
 export type AvPipe<M extends AvAdapterModel = AvAdapterModel, R extends string = AvConfigResourceKey<M>, F extends AvOperationFamily = AvOperationFamily, V extends string = string, A = unknown> = {
-    pipe(args: PipeArguments<A>, context: AvContext<M, R, F, V, A>): PipeResult<PipeArguments<A>>;
+    pipe(args: PipeArguments<A>, context: AvContext<M, R, F, V, A>): unknown extends PipeArguments<A> ? any : PipeArguments<A> | undefined | void | Promise<PipeArguments<A> | undefined | void>;
 }["pipe"];
 /**
  * A variant pipe's arguments and return: the operation's arguments, deep
  * read-only, each member closed to inference.
  */
-type PipeArguments<T> = T extends AvDeepReadonlyLeaf | AvTransactionReference ? T : T extends object ? {
+type PipeArguments<T> = T extends AvDeepReadonlyLeaf | AvTransactionReference ? T : T extends readonly unknown[] ? ArrayForm<T> extends "array" ? readonly NoInfer<PipeArguments<Exclude<T[number], undefined>>>[] : {
+    readonly [K in keyof T]: NoInfer<PipeArguments<Exclude<T[K], undefined>>>;
+} : T extends object ? {
     readonly [K in keyof T]: NoInfer<PipeArguments<Exclude<T[K], undefined>>>;
 } : T;
-/** What a pipe returns: arguments of type `A`, or `undefined` to keep them. */
-type PipeResult<A> = unknown extends A ? any : // biome-ignore lint/suspicious/noConfusingVoidType: a pipe written as `() => void sideEffect()` keeps the arguments, as `undefined` does
-A | undefined | void | Promise<A | undefined | void>;
 /** Runs just before the operation executes, inside every interceptor; `ctx.$args` is deep-frozen. */
 export type AvBeforeHook<M extends AvAdapterModel = AvAdapterModel, R extends string = AvConfigResourceKey<M>, F extends AvOperationFamily = AvOperationFamily, V extends string = string, A = unknown> = {
     before(context: AvContext<M, R, F, V, A>): void | Promise<void>;
@@ -180,7 +208,8 @@ export type AvTransactionStep<M extends AvAdapterModel = AvAdapterModel> = {
 export type AvTransactionContext<M extends AvAdapterModel = AvAdapterModel> = AvContextOperations<M> & AvContextFacts & {
     /** The plan, in step order, `$ref`s unresolved, deep-frozen. */
     readonly $args: readonly AvTransactionStep<M>[];
-    readonly $sql: AvContextSql;
+    /** As a stage's `ctx.$sql`: a developer SQL statement, run in this transaction. */
+    readonly $sql: <Row = unknown>(strings: TemplateStringsArray, ...values: readonly AvAdapterSqlValue[]) => Promise<Row[]>;
     /** Runs `work` inside this transaction (it opens nothing): `tx` is this ctx. */
     $transaction<T>(work: (tx: AvTransactionContext<M>) => Promise<T>): Promise<T>;
 };

package/dist/runtime/readonly-value.d.ts

@@ -1,12 +1,23 @@
-import { AvDecimal } from "./decimal.js";
+import { type AvDecimal } from "./decimal.js";
 /** A value `AvDeepReadonly` leaves as it is: a primitive, a function, or a scalar instance. */
 export type AvDeepReadonlyLeaf = string | number | boolean | bigint | symbol | null | undefined | Date | Uint8Array | AvDecimal | ((...args: never[]) => unknown);
+/**
+ * Whether array type `T` is an open array (every length: `"array"`) or a tuple
+ * (`"tuple"`). A tuple whose only fixed positions are optional ones before a rest
+ * element (`[a?, ...b[]]`) has every length too and reads as an array.
+ */
+export type ArrayForm<T extends readonly unknown[]> = T extends readonly [] | readonly [unknown, ...unknown[]] | readonly [...unknown[], unknown] ? "tuple" : T extends {
+    readonly length: infer Length;
+} ? number extends Length ? "array" : "tuple" : "tuple";
 /**
  * `T` with every property, element and nested property read-only: what a stage
- * that only reads is told. Arrays become read-only arrays; a `Date`, a
- * `Uint8Array`, an `AvDecimal` and functions are left as they are.
+ * that only reads is told. Arrays become read-only arrays, tuples read-only
+ * tuples; a `Date`, a `Uint8Array`, an `AvDecimal` and functions are left as
+ * they are.
  */
-export type AvDeepReadonly<T> = T extends AvDeepReadonlyLeaf ? T : T extends object ? {
+export type AvDeepReadonly<T> = T extends AvDeepReadonlyLeaf ? T : T extends readonly unknown[] ? ArrayForm<T> extends "array" ? readonly AvDeepReadonly<T[number]>[] : {
+    readonly [K in keyof T]: AvDeepReadonly<T[K]>;
+} : T extends object ? {
     readonly [K in keyof T]: AvDeepReadonly<T[K]>;
 } : T;
 /**
@@ -21,8 +32,12 @@ export declare function deepFreeze<T>(value: T): T;
  * only reads is told — the validated arguments after validation, a result in an
  * after hook — so neither what is written nor the result the caller receives can
  * be changed through it.
+ *
+ * With `snapshot`, a copied container found to hold no `Date` or `Uint8Array`
+ * is remembered as such at once, so a later `frozenCopy` of the copy shares it
+ * without walking it: for a copy that is itself copied again for each stage.
  */
-export declare function frozenCopy<T>(value: T): AvDeepReadonly<T>;
+export declare function frozenCopy<T>(value: T, snapshot?: boolean): AvDeepReadonly<T>;
 /**
  * A read-only view of `value`: reads see the live value, nested plain objects
  * and arrays as views too, and any write, definition or deletion throws a

package/dist/runtime/readonly-value.js

@@ -1,4 +1,4 @@
-import { AvDecimal } from "./decimal.js";
+import { isAvDecimal } from "./decimal.js";
 function isContainer(value) {
     if (value === null || typeof value !== "object") {
         return false;
@@ -6,7 +6,7 @@ function isContainer(value) {
     if (Array.isArray(value)) {
         return true;
     }
-    if (value instanceof AvDecimal) {
+    if (isAvDecimal(value)) {
         return false;
     }
     const prototype = Object.getPrototypeOf(value);
@@ -36,51 +36,99 @@ function scalarCopy(value) {
     }
     return undefined;
 }
-export function frozenCopy(value) {
+const SCALAR_FREE = new WeakSet();
+function scalarFree(value) {
+    return Object.isFrozen(value) && SCALAR_FREE.has(value);
+}
+const WALKING = Symbol("walking");
+function place(target, key, value, enumerable) {
+    if (enumerable && typeof key === "string" && !(key in target)) {
+        target[key] = value;
+        return;
+    }
+    Object.defineProperty(target, key, {
+        value,
+        enumerable,
+        writable: true,
+        configurable: true,
+    });
+}
+export function frozenCopy(value, snapshot = false) {
+    const scalar = scalarCopy(value);
+    if (scalar !== undefined) {
+        return scalar;
+    }
+    if (!isContainer(value) || scalarFree(value)) {
+        return value;
+    }
     const copies = new Map();
+    let cycled = false;
+    let holdsScalar = false;
     const copy = (current) => {
+        if (current === null || typeof current !== "object") {
+            return current;
+        }
         const scalar = scalarCopy(current);
         if (scalar !== undefined) {
+            holdsScalar = true;
             return scalar;
         }
-        if (!isContainer(current)) {
+        if (!isContainer(current) || scalarFree(current)) {
             return current;
         }
-        if (copies.has(current)) {
-            return copies.get(current);
+        const known = copies.get(current);
+        if (known === WALKING) {
+            cycled = true;
+            return current;
+        }
+        if (known !== undefined) {
+            holdsScalar ||= !scalarFree(known);
+            return known;
         }
-        copies.set(current, current);
-        const entries = [];
-        let changed = !DEEP_FROZEN.has(current);
+        copies.set(current, WALKING);
+        const outer = holdsScalar;
+        holdsScalar = false;
+        let changed = !(Object.isFrozen(current) && DEEP_FROZEN.has(current));
+        const array = Array.isArray(current);
+        const prototype = Object.getPrototypeOf(current);
+        const target = array
+            ? new Array(current.length)
+            : prototype === Object.prototype
+                ? {}
+                : Object.create(prototype);
         for (const key of Reflect.ownKeys(current)) {
+            if (array && key === "length") {
+                continue;
+            }
             const descriptor = Object.getOwnPropertyDescriptor(current, key);
-            if (descriptor === undefined ||
-                !("value" in descriptor) ||
-                (Array.isArray(current) && key === "length")) {
+            if (descriptor === undefined || !("value" in descriptor)) {
                 continue;
             }
             const next = copy(descriptor.value);
             changed ||= next !== descriptor.value;
-            entries.push([key, descriptor, next]);
+            place(target, key, next, descriptor.enumerable === true);
         }
+        const held = holdsScalar;
+        holdsScalar = outer || held;
         if (!changed) {
             copies.set(current, current);
+            if (!cycled) {
+                SCALAR_FREE.add(current);
+            }
             return current;
         }
-        const target = Array.isArray(current)
-            ? new Array(current.length)
-            : Object.create(Object.getPrototypeOf(current));
-        for (const [key, descriptor, next] of entries) {
-            Object.defineProperty(target, key, {
-                value: next,
-                enumerable: descriptor.enumerable ?? false,
-                writable: true,
-                configurable: true,
-            });
+        Object.freeze(target);
+        DEEP_FROZEN.add(target);
+        if (cycled) {
+            for (const key of Reflect.ownKeys(target)) {
+                deepFreeze(target[key]);
+            }
+        }
+        if (snapshot && !held && !cycled) {
+            SCALAR_FREE.add(target);
         }
-        const frozen = deepFreeze(target);
-        copies.set(current, frozen);
-        return frozen;
+        copies.set(current, target);
+        return target;
     };
     return copy(value);
 }

package/dist/runtime/record.guard.d.ts

@@ -0,0 +1,14 @@
+/** An object that is not a list: what core reads as a record of named values. */
+export declare function isRecord<T extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>>(value: unknown): value is T;
+/**
+ * A **plain** record: an object literal (prototype `Object.prototype` or
+ * `null`), not a `Date`, a core `AvDecimal`, a `Uint8Array` or another class
+ * instance. The one discriminant between an argument OBJECT and a VALUE wherever
+ * a position admits both: a write record, a directive's operand, a filter
+ * position above all, where a plain record is an operator object and anything
+ * else is a value that equality shorthand holds to the field's scalar. The
+ * validator (`operation-validator-core.ts`) reads a filter position through this
+ * same answer, and an adapter's filter translation is expected to, so a position
+ * cannot be operators to one reader and a value to another.
+ */
+export declare function isPlainRecord<T extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>>(value: unknown): value is T;

package/dist/runtime/record.guard.js

@@ -0,0 +1,10 @@
+export function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+export function isPlainRecord(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}

package/dist/runtime/referential-action.d.ts

@@ -29,7 +29,7 @@ export type ReferentialEdge = {
      * relation `field` and any of these names the reference twice and is refused;
      * a required relation may be written through all of them instead.
      */
-    readonly references: readonly string[];
+    readonly referenceFields: readonly string[];
     /** What deleting a `target` row does to rows of the ENCLOSING Resource. */
     readonly onDelete: ReferentialDeleteEffect;
 };

package/dist/runtime/request-envelope.validator.js

@@ -1,10 +1,13 @@
+import { isRecord } from "./record.guard.js";
 const ORIGINS = ["application", "client", "agent"];
 const OPERATION_IDENTITY_MEMBERS = ["resource", "family", "variant"];
 export function validateOperationEnvelope(request) {
     if (!isRecord(request)) {
         return [issue([], "V1001", "Operation request must be an object.")];
     }
-    const issues = [...originAndIdentityIssues(request)];
+    const issues = [
+        ...originAndIdentityIssues(request, request.family === "find"),
+    ];
     for (const member of OPERATION_IDENTITY_MEMBERS) {
         const failure = requiredStringIssue(request, member);
         if (failure !== undefined) {
@@ -17,9 +20,9 @@ export function validateTransactionEnvelope(request) {
     if (!isRecord(request)) {
         return [issue([], "V1001", "Transaction request must be an object.")];
     }
-    return originAndIdentityIssues(request);
+    return originAndIdentityIssues(request, false);
 }
-function originAndIdentityIssues(request) {
+function originAndIdentityIssues(request, readable) {
     const issues = [];
     const origin = request.origin;
     if (origin === undefined) {
@@ -46,7 +49,7 @@ function originAndIdentityIssues(request) {
     if (origin === "client" || origin === "agent") {
         issues.push(...protocolIssues(request.protocol, origin));
         if (request.transport !== undefined) {
-            issues.push(...transportIssues(request.transport));
+            issues.push(...transportIssues(request.transport, readable));
         }
     }
     else if (origin === "application") {
@@ -84,15 +87,18 @@ function protocolIssues(protocol, origin) {
     }
     return issues;
 }
-function transportIssues(transport) {
+function transportIssues(transport, readable) {
     if (!isRecord(transport)) {
         return [
             issue(["transport"], "V1001", "Transport metadata must be an object."),
         ];
     }
     const issues = [];
-    if (transport.method !== "POST") {
-        issues.push(issue(["transport", "method"], "V1001", 'Transport method must be "POST".'));
+    if (transport.method !== "POST" &&
+        !(readable && transport.method === "GET")) {
+        issues.push(issue(["transport", "method"], "V1001", readable
+            ? 'Transport method must be "POST" or "GET".'
+            : 'Transport method must be "POST".'));
     }
     const headers = transport.headers;
     if (!isRecord(headers)) {
@@ -115,9 +121,6 @@ function requiredStringIssue(request, member) {
         ? undefined
         : issue([member], "V1001", `Property "${member}" must be a string.`);
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function issue(path, code, message) {
     return { path, code, message };
 }

package/dist/runtime/scalar-runtime.d.ts

@@ -1,19 +1,18 @@
 import type { AvRequestOrigin } from "../config/config-layer.js";
-import type { AvScalarFilterOperator } from "../contracts/capability.js";
 import type { AvContract } from "../contracts/contract.js";
 import type { AvScalarField } from "../contracts/field.js";
 import type { AvOperationIdentity } from "../operations/operation-identity.js";
 import type { OperationValidationOptions, SemanticOperationArguments } from "../operations/operation-validator.js";
 import type { AvValidationIssue } from "../operations/validation-code.js";
 import { type TransactionSlotShape } from "../transactions/transaction-reference.js";
-export type ScalarNormalizationResult = {
+type ScalarNormalizationResult = {
     readonly ok: true;
     readonly arguments: SemanticOperationArguments;
 } | {
     readonly ok: false;
     readonly issues: readonly AvValidationIssue[];
 };
-export type ScalarValueNormalizationResult = {
+type ScalarValueNormalizationResult = {
     readonly ok: true;
     readonly value: unknown;
 } | {
@@ -21,16 +20,8 @@ export type ScalarValueNormalizationResult = {
     readonly issues: readonly AvValidationIssue[];
 };
 type Path = readonly (string | number)[];
-/**
- * The one discriminant between an argument OBJECT and a VALUE wherever a position
- * admits both — a filter position above all: a **plain** record is an operator object,
- * and anything else — a `Date`, a core `AvDecimal`, a `Uint8Array` — is a value, which
- * equality shorthand then holds to the field's scalar. The validator (`operation-
- * validator-core.ts`) reads a filter position through this same answer, and an
- * adapter's filter translation is expected to, so a position cannot be operators to
- * one reader and a value to another.
- */
-export declare function isPlainRecord(value: unknown): value is Readonly<Record<string, unknown>>;
+/** The `V1001` of an `undefined` the request reads with. */
+export declare function unsentReadValueIssue(path: Path): AvValidationIssue;
 /**
  * An operation argument's JSON value is bounded by `maxJsonDepth`, which the
  * structural walk enforces before this runs; a `$sql` step's parameter is not
@@ -71,14 +62,6 @@ export declare function jsonShapeIssues(field: AvScalarField<AvContract>, value:
  * its copy.
  */
 export declare function copyScalarFieldValue(field: AvScalarField<AvContract>, value: unknown): unknown;
-/**
- * The operators of a step's own filter whose operand is a reference position, and
- * the shape each holds — the one table the normalization below and the reference
- * collector (`transaction-reference-collector.ts`) both read. `not` also takes a
- * nested operator object. Not here, so never a reference: `mode`, `isEmpty`, `path`
- * and a `json` field's `string*`/`array*` operators, which take no field value.
- */
-export declare const REFERENCE_OPERANDS: Readonly<Partial<Record<AvScalarFilterOperator, TransactionSlotShape>>>;
 /** The shape of `operator`'s operand when it is a reference position. */
 export declare function referenceOperandShape(operator: string): TransactionSlotShape | undefined;
 /**