@aventara/testing 1.0.0-rc.1 → 1.0.0-rc.10

package/CHANGELOG.md

@@ -1,5 +1,119 @@
 # @aventara/testing
 
+## 1.0.0-rc.10
+
+### Patch Changes
+
+- 04bb39a: `engines.node` is now `^22.23.4 || >=24.22.1`, the Node security releases of 2026-10-20 (CVE-2026-105481,
+  CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-106072, CVE-2026-106073, CVE-2026-106074,
+  CVE-2026-111497). The bins refuse an older Node in one sentence naming that range.
+- 587dd01: The protocol corpus covers `POST /_access/can`: its answers and refusals, driven against a third corpus Client
+  Contract built with `access`. `AvProtocolCorpus.framework(hash)` serves that Contract for its hash, and
+  `fixtures/protocol-v1.json` carries it beside the other two.
+- Updated dependencies [587dd01]
+- Updated dependencies [d7e7369]
+- Updated dependencies [7ee547b]
+- Updated dependencies [f52c499]
+- Updated dependencies [2907484]
+- Updated dependencies [a6bbdf0]
+- Updated dependencies [3e26549]
+- Updated dependencies [a6bbdf0]
+- Updated dependencies [6f3f6f6]
+- Updated dependencies [04bb39a]
+- Updated dependencies [3fb3333]
+- Updated dependencies [827ccb6]
+- Updated dependencies [7f5abc3]
+- Updated dependencies [88263a1]
+- Updated dependencies [10341d5]
+- Updated dependencies [8129844]
+- Updated dependencies [88263a1]
+- Updated dependencies [3020b5c]
+- Updated dependencies [88263a1]
+- Updated dependencies [88263a1]
+  - @aventara/core@1.0.0-rc.10
+
+## 1.0.0-rc.9
+
+### Patch Changes
+
+- Updated dependencies [205a379]
+- Updated dependencies [a0bb05e]
+- Updated dependencies [86ab319]
+- Updated dependencies [fdf52e6]
+  - @aventara/core@1.0.0-rc.9
+
+## 1.0.0-rc.8
+
+1.0.0-rc.5, rc.6 and rc.7 were tagged but never published; 1.0.0-rc.8 contains everything listed under them and the changes below.
+
+### Patch Changes
+
+- Updated dependencies [1c8e4ee]
+  - @aventara/core@1.0.0-rc.8
+
+## 1.0.0-rc.7
+
+1.0.0-rc.5 and 1.0.0-rc.6 were tagged but never published; 1.0.0-rc.7 contains everything listed under them and the changes below.
+
+### Patch Changes
+
+- Updated dependencies [f917c1c]
+  - @aventara/core@1.0.0-rc.7
+
+## 1.0.0-rc.6
+
+1.0.0-rc.5 was tagged but never published. 1.0.0-rc.6 contains everything listed under 1.0.0-rc.5 and the fix below.
+
+### Patch Changes
+
+- Updated dependencies [1cf72e0]
+  - @aventara/core@1.0.0-rc.6
+
+## 1.0.0-rc.5
+
+### Patch Changes
+
+- Updated dependencies [4795ff1]
+- Updated dependencies [9e178ca]
+  - @aventara/core@1.0.0-rc.5
+
+## 1.0.0-rc.4
+
+### Patch Changes
+
+- Updated dependencies [e3d03a7]
+- Updated dependencies [d10639a]
+- Updated dependencies [f67e68c]
+- Updated dependencies [708556c]
+- Updated dependencies [3a0dfca]
+- Updated dependencies [99169d2]
+- Updated dependencies [0fd2608]
+- Updated dependencies [154e440]
+- Updated dependencies [2fcffdb]
+  - @aventara/core@1.0.0-rc.4
+
+## 1.0.0-rc.3
+
+### Patch Changes
+
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+  - @aventara/core@1.0.0-rc.3
+
+## 1.0.0-rc.2
+
+### Patch Changes
+
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+  - @aventara/core@1.0.0-rc.2
+
 ## 1.0.0-rc.1
 
 ### Patch Changes
@@ -465,7 +579,7 @@
   `framework.transaction`, `framework.executeTransaction` and `POST /_transactions` alike. A single call is unchanged
   (`["arguments", …]`). If your code reads `issue.path` from a transaction's answer, drop the `"operations", i, "args"`
   prefix to get the path inside that step's arguments. `@aventara/testing`'s protocol corpus row "a client-hidden
-  field — /_transactions" and `fixtures/protocol-v1.json` carry the new path.
+  field — /\_transactions" and `fixtures/protocol-v1.json` carry the new path.
 - 032f792: **Behaviour changes, transactions:** an error about a transaction step itself — rather than its arguments — now
   names the step too, so every path in a transaction's answer is a path through the request you sent: an unknown or
   hidden Resource is at `["operations", i, "resource"]`, a fingerprint that does not match at

package/README.md

@@ -20,7 +20,7 @@ It depends on `@aventara/core` only.
 npm install --save-dev @aventara/testing@rc
 ```
 
-Node `^22.18.0 || >=24.2.0`. ES modules.
+Node `^22.23.4 || >=24.22.1`. ES modules.
 
 ## Serving the corpus through your own stack
 

package/dist/protocol/corpus-contract.fixture.d.ts

@@ -1,5 +1,6 @@
-import type { AvContext, AvFramework } from "@aventara/core";
+import type { AvAdapterModel, AvContext, AvFramework, AvPrebuiltContracts } from "@aventara/core";
 import { AvDecimal } from "@aventara/core";
+import type { AvAdapterOperation } from "@aventara/core/internal";
 /**
  * The corpus's adapter model:
  *
@@ -402,6 +403,12 @@ export declare const CORPUS_CLIENT_CONTRACT_DOCUMENT = "{\"enums\":{},\"limits\"
  * against it would.
  */
 export declare const CORPUS_NONE_CLIENT_CONTRACT_HASH = "sha256:5e99809294a2aae922b635e9a44b464b1b6e03359a54d30420292c62676a7ce5";
+/**
+ * The hash of the corpus's third ClientContract: the same model and
+ * configuration with the framework's `access` option ({@link CORPUS_ACCESS}),
+ * so it carries the `access` section and its `POST /_access/can` route.
+ */
+export declare const CORPUS_ACCESS_CLIENT_CONTRACT_HASH = "sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23";
 /** The one record the corpus Adapter knows. */
 export declare const CORPUS_AUTHOR: {
     readonly id: "a1";
@@ -421,13 +428,168 @@ export declare const CORPUS_SAMPLE: {
     readonly blob: Uint8Array<ArrayBuffer>;
 };
 /**
- * A fresh corpus Framework, and the count of operations its Adapter has been
- * handed so far — a row's `adapterCalls` is read from it. `contractHash`
- * selects which corpus ClientContract it serves: the `transactions: "none"`
- * one when it is {@link CORPUS_NONE_CLIENT_CONTRACT_HASH}, the main one
+ * The corpus's access provider, behind {@link CORPUS_ACCESS_CLIENT_CONTRACT_HASH}:
+ * every request is anonymous (`me: null`, the same through every host), and its
+ * policy answers by the question alone, never by a row. Every operation is
+ * allowed, every row is in scope, every field readable, except: no `authors`
+ * row is in the delete scope; a question about `books` is refused by an
+ * `AvError` the engine throws; and any question about `samples` is the engine's
+ * own defect.
+ */
+export declare const CORPUS_ACCESS: {
+    state: () => {
+        me: null;
+    };
+    policy: {
+        can: ({ resource }: {
+            readonly principal: unknown;
+            readonly origin: import("@aventara/core").AvRequestOrigin;
+            readonly resource: string;
+        } & {
+            readonly action: "read" | "create" | "update" | "delete";
+            readonly row?: Readonly<Record<string, unknown>>;
+            readonly before?: Readonly<Record<string, unknown>>;
+            readonly beforeGrants?: readonly string[];
+            readonly exists: (resource: string, where: import("@aventara/core").AvPolicyWhere) => Promise<boolean>;
+        }) => true;
+        scopeOf: ({ resource, action }: {
+            readonly principal: unknown;
+            readonly origin: import("@aventara/core").AvRequestOrigin;
+            readonly resource: string;
+        } & {
+            readonly action: "read" | "update" | "delete";
+        }) => boolean;
+        fieldsOf: () => {
+            always: "all";
+            perRow: {};
+        };
+    };
+};
+/**
+ * The corpus Framework's configuration, over a fresh corpus Adapter, and the
+ * count of operations that Adapter has been handed so far. `contractHash`
+ * selects which corpus ClientContract it compiles to: the `transactions:
+ * "none"` one when it is {@link CORPUS_NONE_CLIENT_CONTRACT_HASH}, the one with
+ * `access` when it is {@link CORPUS_ACCESS_CLIENT_CONTRACT_HASH}, the main one
  * otherwise (a stale or absent hash included).
  */
-export declare function createCorpusFramework(contractHash?: string): Promise<{
+export declare function corpusConfiguration(contractHash?: string): {
+    config: {
+        access?: {
+            state: () => {
+                me: null;
+            };
+            policy: {
+                can: ({ resource }: {
+                    readonly principal: unknown;
+                    readonly origin: import("@aventara/core").AvRequestOrigin;
+                    readonly resource: string;
+                } & {
+                    readonly action: "read" | "create" | "update" | "delete";
+                    readonly row?: Readonly<Record<string, unknown>>;
+                    readonly before?: Readonly<Record<string, unknown>>;
+                    readonly beforeGrants?: readonly string[];
+                    readonly exists: (resource: string, where: import("@aventara/core").AvPolicyWhere) => Promise<boolean>;
+                }) => true;
+                scopeOf: ({ resource, action }: {
+                    readonly principal: unknown;
+                    readonly origin: import("@aventara/core").AvRequestOrigin;
+                    readonly resource: string;
+                } & {
+                    readonly action: "read" | "update" | "delete";
+                }) => boolean;
+                fieldsOf: () => {
+                    always: "all";
+                    perRow: {};
+                };
+            };
+        };
+        api: string;
+        adapter: import("@aventara/core").AvAdapter<AvAdapterModel> & {
+            readonly operations: readonly AvAdapterOperation<AvAdapterModel>[];
+            readonly transactions: readonly import("../adapters/fake-adapter.js").AvFakeTransactionTrace<AvAdapterModel>[];
+        } & {
+            transaction?: <T>(work: (executor: import("@aventara/core/internal").AvAdapterTransactionExecutor<AvAdapterModel>) => Promise<T>) => Promise<T>;
+            referentialActions: {
+                readonly books: readonly [{
+                    readonly field: "author";
+                    readonly target: "authors";
+                    readonly references: readonly ["authorId"];
+                    readonly onDelete: "cascade";
+                }];
+            };
+        };
+        resources: {
+            readonly books: {
+                readonly fields: {
+                    readonly label: {
+                        readonly definition: {
+                            readonly type: {
+                                readonly scalar: "string";
+                            };
+                            readonly nullable: false;
+                            readonly list: false;
+                            readonly lifecycle: readonly ["VIRTUAL"];
+                        };
+                        readonly pipelines: {
+                            readonly compute: {
+                                readonly read: {
+                                    readonly dependsOn: readonly ["id"];
+                                    readonly compute: ({ record, }: {
+                                        readonly record: Readonly<Record<string, unknown>>;
+                                    }) => string;
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        application: {
+            readonly exposed: true;
+            readonly exemptions: {
+                readonly resources: {
+                    readonly books: {
+                        readonly fields: {
+                            readonly label: true;
+                        };
+                    };
+                };
+            };
+        };
+        client: {
+            readonly pipelines: {
+                readonly guards: readonly [typeof corpusGuard];
+                readonly pipes: readonly [typeof corpusPipe];
+            };
+            readonly exposed: true;
+            readonly exemptions: {
+                readonly resources: {
+                    readonly authors: {
+                        readonly fields: {
+                            readonly secret: true;
+                        };
+                    };
+                    readonly secrets: {
+                        readonly operations: {
+                            readonly find: readonly ["many"];
+                        };
+                    };
+                    readonly hiddenRes: true;
+                };
+            };
+        };
+    };
+    adapterCalls: () => number;
+};
+/**
+ * A fresh corpus Framework, and the count of operations its Adapter has been
+ * handed so far — a row's `adapterCalls` is read from it. `contractHash` selects
+ * which corpus ClientContract it serves ({@link corpusConfiguration}). With
+ * `prebuilt`, its Contracts are loaded from that file when it matches, as a
+ * serverless deployment's would be.
+ */
+export declare function createCorpusFramework(contractHash?: string, prebuilt?: AvPrebuiltContracts): Promise<{
     readonly framework: AvFramework;
     readonly adapterCalls: () => number;
 }>;

package/dist/protocol/corpus-contract.fixture.js

@@ -174,6 +174,7 @@ export const CORPUS_ENTRYPOINT = "/api";
 export const CORPUS_CLIENT_CONTRACT_HASH = "sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307";
 export const CORPUS_CLIENT_CONTRACT_DOCUMENT = '{"enums":{},"limits":{"maxBooleanNodes":50,"maxJsonDepth":64,"maxListLimit":250,"maxNestingDepth":12,"maxRequestBytes":1048576,"maxTransactionOperations":20},"protocol":{"hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","version":1},"resources":{"authors":{"fields":{"id":{"capabilities":{"filter":["equals"],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"string"}},"name":{"capabilities":{"create":[],"filter":["equals"],"select":true,"update":[]},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"string"}}},"identifiers":[["id"]],"operations":{"create":{"count":true,"many":true,"one":true},"delete":{"count":true,"first":true,"many":true,"unique":true},"find":{"count":true,"first":true,"many":true,"unique":true},"update":{"count":true,"first":true,"many":true,"unique":true},"upsert":{"unique":true}}},"books":{"fields":{"authorId":{"capabilities":{"filter":["equals"],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"string"}},"id":{"capabilities":{"filter":["equals"],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"string"}},"label":{"capabilities":{"select":true},"kind":"scalar","lifecycle":["COMPUTED_ON_READ","VIRTUAL"],"list":false,"nullable":false,"type":{"scalar":"string"}}},"identifiers":[["id"]],"operations":{"find":{"many":true}}},"samples":{"fields":{"amount":{"capabilities":{"create":[],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"decimal"}},"at":{"capabilities":{"create":[],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"datetime"}},"blob":{"capabilities":{"create":[],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"bytes"}},"count":{"capabilities":{"create":[],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"bigint"}},"id":{"capabilities":{"filter":["equals"],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"string"}}},"identifiers":[["id"]],"operations":{"create":{"one":true},"find":{"unique":true}}},"secrets":{"fields":{"id":{"capabilities":{"filter":["equals"],"select":true},"kind":"scalar","lifecycle":[],"list":false,"nullable":false,"type":{"scalar":"string"}}},"identifiers":[["id"]],"operations":{}}},"scalars":{"bigint":{"builtin":true},"bytes":{"builtin":true},"datetime":{"builtin":true},"decimal":{"builtin":true},"string":{"builtin":true}},"transactions":"interactive"}';
 export const CORPUS_NONE_CLIENT_CONTRACT_HASH = "sha256:5e99809294a2aae922b635e9a44b464b1b6e03359a54d30420292c62676a7ce5";
+export const CORPUS_ACCESS_CLIENT_CONTRACT_HASH = "sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23";
 export const CORPUS_AUTHOR = { id: "a1", name: "Ada" };
 export const CORPUS_NOBODY = "nobody";
 export const CORPUS_SAMPLE = {
@@ -221,6 +222,22 @@ function corpusAnswer(operation) {
     }
     return CORPUS_AUTHOR;
 }
+export const CORPUS_ACCESS = {
+    state: () => ({ me: null }),
+    policy: {
+        can: ({ resource }) => {
+            if (resource === "samples") {
+                throw new Error("the corpus policy failed");
+            }
+            if (resource === "books") {
+                throw new AvError("A4002", "The corpus policy refuses books.");
+            }
+            return true;
+        },
+        scopeOf: ({ resource, action }) => !(resource === "authors" && action === "delete"),
+        fieldsOf: () => ({ always: "all", perRow: {} }),
+    },
+};
 function failingCommit(transaction) {
     return async (work) => {
         let doomed = false;
@@ -238,7 +255,7 @@ function failingCommit(transaction) {
         return result;
     };
 }
-export async function createCorpusFramework(contractHash) {
+export function corpusConfiguration(contractHash) {
     const fake = createFakeAdapter({
         model: contractHash === CORPUS_NONE_CLIENT_CONTRACT_HASH
             ? { ...CORPUS_MODEL, transactions: "none" }
@@ -251,12 +268,25 @@ export async function createCorpusFramework(contractHash) {
             ? {}
             : { transaction: failingCommit(fake.transaction) }),
     });
+    return {
+        config: {
+            api: CORPUS_ENTRYPOINT,
+            adapter,
+            resources: CORPUS_RESOURCES,
+            application: CORPUS_APPLICATION_CONFIG,
+            client: CORPUS_CLIENT_CONFIG,
+            ...(contractHash === CORPUS_ACCESS_CLIENT_CONTRACT_HASH
+                ? { access: CORPUS_ACCESS }
+                : {}),
+        },
+        adapterCalls: () => adapter.operations.length,
+    };
+}
+export async function createCorpusFramework(contractHash, prebuilt) {
+    const { config, adapterCalls } = corpusConfiguration(contractHash);
     const framework = await createFramework({
-        api: CORPUS_ENTRYPOINT,
-        adapter,
-        resources: CORPUS_RESOURCES,
-        application: CORPUS_APPLICATION_CONFIG,
-        client: CORPUS_CLIENT_CONFIG,
+        ...config,
+        ...(prebuilt === undefined ? {} : { prebuilt }),
     });
-    return { framework, adapterCalls: () => adapter.operations.length };
+    return { framework, adapterCalls };
 }

package/dist/protocol/in-process.driver.d.ts

@@ -2,7 +2,7 @@ import type { AvProtocolDriver } from "./protocol-driver.js";
 /**
  * The protocol hosted in process, with no HTTP stack: `/_contract` goes to
  * `protocol.encodeContract`, `/_transactions` to `protocol.handleTransaction`,
- * every other request to `protocol.handleOperation`, and the answer is written
- * back as it is.
+ * `/_access/can` to `protocol.handleCan`, every other request to
+ * `protocol.handleOperation`, and the answer is written back as it is.
  */
 export declare const inProcessDriver: AvProtocolDriver;

package/dist/protocol/in-process.driver.js

@@ -8,6 +8,8 @@ export const inProcessDriver = async (framework) => {
                     return protocol.encodeContract(request);
                 case "/_transactions":
                     return protocol.handleTransaction(request);
+                case "/_access/can":
+                    return protocol.handleCan(request);
                 default:
                     return protocol.handleOperation(request);
             }

package/dist/protocol/per-route.driver.d.ts

@@ -2,7 +2,8 @@ import type { AvProtocolDriver } from "./protocol-driver.js";
 /**
  * The protocol hosted in process as a host that mounts one route per
  * `protocol.surface()` entry (each operation on `handleOperation`,
- * `/_transactions` on `handleTransaction`, `/_contract` on `encodeContract`,
+ * `/_transactions` on `handleTransaction`, `/_access/can` on `handleCan`,
+ * `/_contract` on `encodeContract`,
  * matched by method and path) and uses `protocol.answerAbsent` as the fallback
  * for everything it did not mount. `undefined` from the fallback is a path
  * outside the protocol, which this host answers with its own bodiless 404.

package/dist/protocol/per-route.driver.js

@@ -14,6 +14,8 @@ export const perRouteDriver = async (framework) => {
                     return protocol.handleOperation(request);
                 case "transactions":
                     return protocol.handleTransaction(request);
+                case "can":
+                    return protocol.handleCan(request);
                 case "contract":
                     return protocol.encodeContract(request);
                 default:

package/dist/protocol/protocol-corpus.d.ts

@@ -17,7 +17,9 @@ export declare const AvProtocolCorpus: {
      * pure function of the operation it is handed. `contractHash` picks which
      * corpus ClientContract it serves, as a row's `Aventara-Contract-Hash` does:
      * the corpus's `transactions: "none"` contract for that contract's hash (the
-     * `/_transactions` absence rows send it), the main one for anything else.
+     * `/_transactions` absence rows send it), the one with the framework's
+     * `access` option for its hash (the `/_access/can` rows send it), the main one
+     * for anything else.
      */
     readonly framework: (contractHash?: string) => Promise<AvFramework>;
     /** Where the corpus Framework is mounted; every row's `path` is relative to it. */

package/dist/protocol/protocol-fixtures.js

@@ -1,4 +1,4 @@
-import { CORPUS_AUTHOR, CORPUS_CLIENT_CONTRACT_DOCUMENT, CORPUS_CLIENT_CONTRACT_HASH, CORPUS_NOBODY, CORPUS_NONE_CLIENT_CONTRACT_HASH, CORPUS_TRIGGER, } from "./corpus-contract.fixture.js";
+import { CORPUS_ACCESS_CLIENT_CONTRACT_HASH, CORPUS_AUTHOR, CORPUS_CLIENT_CONTRACT_DOCUMENT, CORPUS_CLIENT_CONTRACT_HASH, CORPUS_NOBODY, CORPUS_NONE_CLIENT_CONTRACT_HASH, CORPUS_TRIGGER, } from "./corpus-contract.fixture.js";
 const OPERATION_REQUEST = {
     method: "POST",
     path: "/_resources/authors/find/many",
@@ -837,6 +837,146 @@ const CORRELATION = [
         ["an id with a space", "a b"],
     ].map(([what, id]) => answered(`correlation: ${what} is not adopted, and never refused → 200 A1000`, corpusRequest("find/many", {}, id), 200, 1, { data: [CORPUS_AUTHOR], code: "A1000", cause: null }, { "Content-Type": "application/json" })),
 ];
+const canRequest = (requestId, questions, overrides = {}) => {
+    const base = corpusRequest("", { questions }, requestId);
+    return {
+        ...base,
+        path: "/_access/can",
+        headers: {
+            ...base.headers,
+            "Aventara-Contract-Hash": CORPUS_ACCESS_CLIENT_CONTRACT_HASH,
+        },
+        ...overrides,
+    };
+};
+const AUTHOR_ROW = { where: { id: CORPUS_AUTHOR.id } };
+const QUESTIONS_INVALID = "Operation arguments failed framework validation.";
+const ACCESS_QUESTIONS = [
+    answered("can: three questions in one request, one answer each → 200 A1000", canRequest("corpus-can-three", [
+        { resource: "authors", action: "update", ...AUTHOR_ROW },
+        { resource: "authors", action: "delete", ...AUTHOR_ROW },
+        { resource: "authors", action: "read" },
+    ]), 200, 1, { data: [true, false, true], code: "A1000", cause: null }),
+    answered("can: a row that does not exist answers false, never A2003", canRequest("corpus-can-missing", [
+        {
+            resource: "authors",
+            action: "update",
+            where: { id: CORPUS_NOBODY },
+        },
+    ]), 200, 1, { data: [false], code: "A1000", cause: null }),
+    answered("can: an operation the client is not offered answers false", canRequest("corpus-can-unoffered", [
+        { resource: "secrets", action: "read" },
+        { resource: "samples", action: "delete" },
+    ]), 200, 0, { data: [false, false], code: "A1000", cause: null }),
+    answered("can: an AvError the engine throws answers false", canRequest("corpus-can-engine-refuses", [
+        { resource: "books", action: "read" },
+        { resource: "authors", action: "read" },
+    ]), 200, 0, { data: [false, true], code: "A1000", cause: null }),
+    answered("can: no questions, no answers → 200 A1000", canRequest("corpus-can-none", []), 200, 0, { data: [], code: "A1000", cause: null }),
+    absent('/_access/can without access → 404 A2002 at ["questions"]', {
+        ...canRequest("corpus-absent-can", []),
+        headers: {
+            ...canRequest("corpus-absent-can", []).headers,
+            "Aventara-Contract-Hash": CORPUS_CLIENT_CONTRACT_HASH,
+        },
+    }, 404, "A2002", {
+        message: "Access questions are not available on the active Contract.",
+        issues: [
+            {
+                code: "V1006",
+                path: ["questions"],
+                message: "Access questions are not available on the active Contract.",
+            },
+        ],
+    }),
+    refused("method: GET on /_access/can → 405 A2012 with Allow: POST", canRequest("corpus-can-get", [], { method: "GET" }), 405, "A2012", "The HTTP method is not allowed on this framework route.", { Allow: "POST" }),
+    answered("can: an unknown and a client-hidden Resource → 404 A2001 for the batch", canRequest("corpus-can-unknown", [
+        { resource: "authors", action: "read" },
+        { resource: "nope", action: "read" },
+        { resource: "hiddenRes", action: "read" },
+    ]), 404, 0, {
+        data: null,
+        code: "A2001",
+        cause: {
+            message: "The requested Resource is not available.",
+            issues: [
+                {
+                    code: "V1005",
+                    path: ["questions", 1, "resource"],
+                    message: 'Resource "nope" is not available in the active Contract.',
+                },
+                {
+                    code: "V1005",
+                    path: ["questions", 2, "resource"],
+                    message: 'Resource "hiddenRes" is not available in the active Contract.',
+                },
+            ],
+        },
+    }),
+    answered('can: a malformed question → 422 A2004 at ["questions", i, …]', canRequest("corpus-can-malformed", [
+        { resource: "authors", action: "refund" },
+        { resource: "authors", action: "read", where: { name: "Ada" } },
+        { resource: "authors", action: "create", ...AUTHOR_ROW },
+    ]), 422, 0, {
+        data: null,
+        code: "A2004",
+        cause: {
+            message: QUESTIONS_INVALID,
+            issues: [
+                {
+                    code: "V1002",
+                    path: ["questions", 0, "action"],
+                    message: 'action must be one of "read", "create", "update" or "delete".',
+                },
+                {
+                    code: "V1007",
+                    path: ["questions", 1, "where"],
+                    message: 'Unique selector must exactly match one active identifier on Resource "authors".',
+                },
+                {
+                    code: "V1001",
+                    path: ["questions", 2, "where"],
+                    message: "A create question names no row: it takes no where.",
+                },
+            ],
+        },
+    }),
+    answered("can: more questions than maxListLimit → 422 A2009", canRequest("corpus-can-over-limit", Array.from({ length: 251 }, () => ({
+        resource: "authors",
+        action: "read",
+    }))), 422, 0, {
+        data: null,
+        code: "A2009",
+        cause: {
+            message: QUESTIONS_INVALID,
+            issues: [
+                {
+                    code: "V1014",
+                    path: ["questions"],
+                    message: "Question count exceeds maxListLimit (250).",
+                },
+            ],
+        },
+    }),
+    answered("can: the engine throws → 500 A3000", canRequest("corpus-can-engine-throws", [
+        { resource: "samples", action: "read" },
+    ]), 500, 0, {
+        data: null,
+        code: "A3000",
+        cause: { message: "Internal framework error." },
+    }),
+    answered("can: the Adapter fails reading the row → 500 A3001", canRequest("corpus-can-adapter-throws", [
+        {
+            resource: "authors",
+            action: "update",
+            where: { id: CORPUS_TRIGGER.adapterThrows },
+        },
+    ]), 500, 1, {
+        data: null,
+        code: "A3001",
+        cause: { message: "Adapter execution failed." },
+    }),
+];
 export const AvProtocolFixtures = [
     ...CONTRACT_DISCOVERY,
     ...SUCCESS_STATUSES,
@@ -849,6 +989,7 @@ export const AvProtocolFixtures = [
     ...ABSENCE,
     ...TRANSACTIONS,
     ...TRANSACTION_REFERENCES,
+    ...ACCESS_QUESTIONS,
     ...INTERNAL,
     ...CONFLICT,
     ...WIRE_SCALARS,

package/dist/protocol/protocol-fixtures.json-codec.d.ts

@@ -4,7 +4,7 @@ import type { AvProtocolFixture } from "./protocol-fixture.js";
  * its bytes: `prefix + repeat × times + suffix`. The one oversized-body row
  * would otherwise be a megabyte of `x`.
  */
-export type ProtocolFixtureContentRecipe = {
+type ProtocolFixtureContentRecipe = {
     readonly prefix?: string;
     readonly repeat: string;
     readonly times: number;
@@ -41,3 +41,4 @@ export declare function expandProtocolFixtureRow(row: ProtocolFixtureJsonRow): A
  * in corpus order, so a change to the corpus is a change to its own lines.
  */
 export declare function protocolFixturesJson(): Promise<string>;
+export {};

package/dist/protocol/protocol-fixtures.json-codec.js

@@ -1,6 +1,6 @@
 import { AVENTARA_PROTOCOL_VERSION } from "@aventara/core/internal";
 import { AvProtocol } from "@aventara/core/protocol";
-import { CORPUS_CLIENT_CONTRACT_HASH, CORPUS_ENTRYPOINT, CORPUS_NONE_CLIENT_CONTRACT_HASH, createCorpusFramework, } from "./corpus-contract.fixture.js";
+import { CORPUS_ACCESS_CLIENT_CONTRACT_HASH, CORPUS_CLIENT_CONTRACT_HASH, CORPUS_ENTRYPOINT, CORPUS_NONE_CLIENT_CONTRACT_HASH, createCorpusFramework, } from "./corpus-contract.fixture.js";
 import { AvProtocolFixtures } from "./protocol-fixtures.js";
 const RECIPE_MINIMUM = 1024;
 function recipeOf(text) {
@@ -78,6 +78,10 @@ export async function protocolFixturesJson() {
             hash: CORPUS_NONE_CLIENT_CONTRACT_HASH,
             document: await contractDocument(CORPUS_NONE_CLIENT_CONTRACT_HASH),
         },
+        {
+            hash: CORPUS_ACCESS_CLIENT_CONTRACT_HASH,
+            document: await contractDocument(CORPUS_ACCESS_CLIENT_CONTRACT_HASH),
+        },
     ];
     const head = JSON.stringify({
         protocolVersion: AVENTARA_PROTOCOL_VERSION,

package/fixtures/protocol-v1.json

@@ -1,6 +1,7 @@
 {"protocolVersion":1,"entrypoint":"/api","clientContractHash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","contracts":[
 {"hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","document":"{\"enums\":{},\"limits\":{\"maxBooleanNodes\":50,\"maxJsonDepth\":64,\"maxListLimit\":250,\"maxNestingDepth\":12,\"maxRequestBytes\":1048576,\"maxTransactionOperations\":20},\"protocol\":{\"hash\":\"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307\",\"version\":1},\"resources\":{\"authors\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"name\":{\"capabilities\":{\"create\":[],\"filter\":[\"equals\"],\"select\":true,\"update\":[]},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"count\":true,\"many\":true,\"one\":true},\"delete\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"find\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"update\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"upsert\":{\"unique\":true}}},\"books\":{\"fields\":{\"authorId\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"label\":{\"capabilities\":{\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[\"COMPUTED_ON_READ\",\"VIRTUAL\"],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"find\":{\"many\":true}}},\"samples\":{\"fields\":{\"amount\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"decimal\"}},\"at\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"datetime\"}},\"blob\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bytes\"}},\"count\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bigint\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"one\":true},\"find\":{\"unique\":true}}},\"secrets\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{}}},\"scalars\":{\"bigint\":{\"builtin\":true},\"bytes\":{\"builtin\":true},\"datetime\":{\"builtin\":true},\"decimal\":{\"builtin\":true},\"string\":{\"builtin\":true}},\"transactions\":\"interactive\"}"},
-{"hash":"sha256:5e99809294a2aae922b635e9a44b464b1b6e03359a54d30420292c62676a7ce5","document":"{\"enums\":{},\"limits\":{\"maxBooleanNodes\":50,\"maxJsonDepth\":64,\"maxListLimit\":250,\"maxNestingDepth\":12,\"maxRequestBytes\":1048576,\"maxTransactionOperations\":20},\"protocol\":{\"hash\":\"sha256:5e99809294a2aae922b635e9a44b464b1b6e03359a54d30420292c62676a7ce5\",\"version\":1},\"resources\":{\"authors\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"name\":{\"capabilities\":{\"create\":[],\"filter\":[\"equals\"],\"select\":true,\"update\":[]},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"count\":true,\"many\":true,\"one\":true},\"delete\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"find\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"update\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"upsert\":{\"unique\":true}}},\"books\":{\"fields\":{\"authorId\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"label\":{\"capabilities\":{\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[\"COMPUTED_ON_READ\",\"VIRTUAL\"],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"find\":{\"many\":true}}},\"samples\":{\"fields\":{\"amount\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"decimal\"}},\"at\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"datetime\"}},\"blob\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bytes\"}},\"count\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bigint\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"one\":true},\"find\":{\"unique\":true}}},\"secrets\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{}}},\"scalars\":{\"bigint\":{\"builtin\":true},\"bytes\":{\"builtin\":true},\"datetime\":{\"builtin\":true},\"decimal\":{\"builtin\":true},\"string\":{\"builtin\":true}},\"transactions\":\"none\"}"}
+{"hash":"sha256:5e99809294a2aae922b635e9a44b464b1b6e03359a54d30420292c62676a7ce5","document":"{\"enums\":{},\"limits\":{\"maxBooleanNodes\":50,\"maxJsonDepth\":64,\"maxListLimit\":250,\"maxNestingDepth\":12,\"maxRequestBytes\":1048576,\"maxTransactionOperations\":20},\"protocol\":{\"hash\":\"sha256:5e99809294a2aae922b635e9a44b464b1b6e03359a54d30420292c62676a7ce5\",\"version\":1},\"resources\":{\"authors\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"name\":{\"capabilities\":{\"create\":[],\"filter\":[\"equals\"],\"select\":true,\"update\":[]},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"count\":true,\"many\":true,\"one\":true},\"delete\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"find\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"update\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"upsert\":{\"unique\":true}}},\"books\":{\"fields\":{\"authorId\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"label\":{\"capabilities\":{\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[\"COMPUTED_ON_READ\",\"VIRTUAL\"],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"find\":{\"many\":true}}},\"samples\":{\"fields\":{\"amount\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"decimal\"}},\"at\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"datetime\"}},\"blob\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bytes\"}},\"count\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bigint\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"one\":true},\"find\":{\"unique\":true}}},\"secrets\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{}}},\"scalars\":{\"bigint\":{\"builtin\":true},\"bytes\":{\"builtin\":true},\"datetime\":{\"builtin\":true},\"decimal\":{\"builtin\":true},\"string\":{\"builtin\":true}},\"transactions\":\"none\"}"},
+{"hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","document":"{\"access\":{},\"enums\":{},\"limits\":{\"maxBooleanNodes\":50,\"maxJsonDepth\":64,\"maxListLimit\":250,\"maxNestingDepth\":12,\"maxRequestBytes\":1048576,\"maxTransactionOperations\":20},\"protocol\":{\"hash\":\"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23\",\"version\":1},\"resources\":{\"authors\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"name\":{\"capabilities\":{\"create\":[],\"filter\":[\"equals\"],\"select\":true,\"update\":[]},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"count\":true,\"many\":true,\"one\":true},\"delete\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"find\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"update\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"upsert\":{\"unique\":true}}},\"books\":{\"fields\":{\"authorId\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"label\":{\"capabilities\":{\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[\"COMPUTED_ON_READ\",\"VIRTUAL\"],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"find\":{\"many\":true}}},\"samples\":{\"fields\":{\"amount\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"decimal\"}},\"at\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"datetime\"}},\"blob\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bytes\"}},\"count\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bigint\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"one\":true},\"find\":{\"unique\":true}}},\"secrets\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{}}},\"scalars\":{\"bigint\":{\"builtin\":true},\"bytes\":{\"builtin\":true},\"datetime\":{\"builtin\":true},\"decimal\":{\"builtin\":true},\"string\":{\"builtin\":true}},\"transactions\":\"interactive\"}"}
 ],"rows":[
 {"label":"contract: GET → 200 with the JCS bytes, ETag and no-cache","request":{"method":"GET","path":"/_contract","headers":{"Aventara-Request-Id":"corpus-contract"},"body":{"kind":"raw","content":""}},"server":{"status":200,"code":null,"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-contract","ETag":"\"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307\"","Cache-Control":"no-cache"},"bodyBytes":"{\"enums\":{},\"limits\":{\"maxBooleanNodes\":50,\"maxJsonDepth\":64,\"maxListLimit\":250,\"maxNestingDepth\":12,\"maxRequestBytes\":1048576,\"maxTransactionOperations\":20},\"protocol\":{\"hash\":\"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307\",\"version\":1},\"resources\":{\"authors\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"name\":{\"capabilities\":{\"create\":[],\"filter\":[\"equals\"],\"select\":true,\"update\":[]},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"count\":true,\"many\":true,\"one\":true},\"delete\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"find\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"update\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"upsert\":{\"unique\":true}}},\"books\":{\"fields\":{\"authorId\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"label\":{\"capabilities\":{\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[\"COMPUTED_ON_READ\",\"VIRTUAL\"],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"find\":{\"many\":true}}},\"samples\":{\"fields\":{\"amount\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"decimal\"}},\"at\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"datetime\"}},\"blob\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bytes\"}},\"count\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bigint\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"one\":true},\"find\":{\"unique\":true}}},\"secrets\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{}}},\"scalars\":{\"bigint\":{\"builtin\":true},\"bytes\":{\"builtin\":true},\"datetime\":{\"builtin\":true},\"decimal\":{\"builtin\":true},\"string\":{\"builtin\":true}},\"transactions\":\"interactive\"}"},"client":{"outcome":"resolve"}},
 {"label":"contract: no identity header is required, nor judged when sent","request":{"method":"GET","path":"/_contract","headers":{"Aventara-Request-Id":"corpus-contract-identity","Aventara-Protocol-Version":"2","Aventara-Contract-Hash":"sha256:0000000000000000000000000000000000000000000000000000000000000000"},"body":{"kind":"raw","content":""}},"server":{"status":200,"code":null,"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-contract-identity","ETag":"\"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307\"","Cache-Control":"no-cache"},"bodyBytes":"{\"enums\":{},\"limits\":{\"maxBooleanNodes\":50,\"maxJsonDepth\":64,\"maxListLimit\":250,\"maxNestingDepth\":12,\"maxRequestBytes\":1048576,\"maxTransactionOperations\":20},\"protocol\":{\"hash\":\"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307\",\"version\":1},\"resources\":{\"authors\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"name\":{\"capabilities\":{\"create\":[],\"filter\":[\"equals\"],\"select\":true,\"update\":[]},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"count\":true,\"many\":true,\"one\":true},\"delete\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"find\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"update\":{\"count\":true,\"first\":true,\"many\":true,\"unique\":true},\"upsert\":{\"unique\":true}}},\"books\":{\"fields\":{\"authorId\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}},\"label\":{\"capabilities\":{\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[\"COMPUTED_ON_READ\",\"VIRTUAL\"],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"find\":{\"many\":true}}},\"samples\":{\"fields\":{\"amount\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"decimal\"}},\"at\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"datetime\"}},\"blob\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bytes\"}},\"count\":{\"capabilities\":{\"create\":[],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"bigint\"}},\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{\"create\":{\"one\":true},\"find\":{\"unique\":true}}},\"secrets\":{\"fields\":{\"id\":{\"capabilities\":{\"filter\":[\"equals\"],\"select\":true},\"kind\":\"scalar\",\"lifecycle\":[],\"list\":false,\"nullable\":false,\"type\":{\"scalar\":\"string\"}}},\"identifiers\":[[\"id\"]],\"operations\":{}}},\"scalars\":{\"bigint\":{\"builtin\":true},\"bytes\":{\"builtin\":true},\"datetime\":{\"builtin\":true},\"decimal\":{\"builtin\":true},\"string\":{\"builtin\":true}},\"transactions\":\"interactive\"}"},"client":{"outcome":"resolve"}},
@@ -88,6 +89,18 @@
 {"label":"method: GET on /_transactions → 405 A2012 with Allow: POST","request":{"method":"GET","path":"/_transactions","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","Aventara-Request-Id":"corpus-tx-get"},"body":{"kind":"raw","content":"{\"operations\":[{\"resource\":\"authors\",\"family\":\"find\",\"variant\":\"many\",\"args\":{},\"fingerprint\":\"fp1:1aLMnUbKspahv3fbsV7pKg\"}]}"}},"server":{"status":405,"code":"A2012","causeKeys":["message"],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-tx-get","Allow":"POST"},"bodyBytes":"{\"data\":null,\"code\":\"A2012\",\"cause\":{\"message\":\"The HTTP method is not allowed on this framework route.\"}}"},"client":{"outcome":"framework-error","code":"A2012"}},
 {"label":"transaction — a unique where and a filter reference an earlier step's result → 200 A1009","request":{"method":"POST","path":"/_transactions","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","Aventara-Request-Id":"corpus-tx-ref-where"},"body":{"kind":"raw","content":"{\"operations\":[{\"resource\":\"authors\",\"family\":\"create\",\"variant\":\"one\",\"args\":{\"data\":{\"name\":\"Ada\"},\"select\":[\"id\"]},\"fingerprint\":\"fp1:aMKNYrUwcifOeY8ZYk4pow\"},{\"resource\":\"authors\",\"family\":\"find\",\"variant\":\"unique\",\"args\":{\"where\":{\"id\":{\"$ref\":{\"operation\":0,\"fingerprint\":\"fp1:aMKNYrUwcifOeY8ZYk4pow\",\"path\":[\"id\"]}}}},\"fingerprint\":\"fp1:hKbxzChGakplMZvnpEa1_w\"},{\"resource\":\"authors\",\"family\":\"find\",\"variant\":\"many\",\"args\":{\"where\":{\"OR\":[{\"id\":{\"equals\":{\"$ref\":{\"operation\":0,\"fingerprint\":\"fp1:aMKNYrUwcifOeY8ZYk4pow\",\"path\":[\"id\"]}}}}]}},\"fingerprint\":\"fp1:4LK9l_j8Skjk4iU_wSoRzQ\"}]}"}},"server":{"status":200,"code":"A1009","adapterCalls":3,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-tx-ref-where"},"bodyBytes":"{\"data\":[{\"id\":\"a1\"},{\"id\":\"a1\",\"name\":\"Ada\"},[{\"id\":\"a1\",\"name\":\"Ada\"}]],\"code\":\"A1009\",\"cause\":null}"},"client":{"outcome":"resolve"}},
 {"label":"argument: a plan reference in a where to an operation index no earlier step has → 422 A2007 / V1016","request":{"method":"POST","path":"/_transactions","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","Aventara-Request-Id":"corpus-arg-ref-where-index"},"body":{"kind":"raw","content":"{\"operations\":[{\"resource\":\"authors\",\"family\":\"create\",\"variant\":\"one\",\"args\":{\"data\":{\"name\":\"Ada\"},\"select\":[\"id\"]},\"fingerprint\":\"fp1:aMKNYrUwcifOeY8ZYk4pow\"},{\"resource\":\"authors\",\"family\":\"find\",\"variant\":\"unique\",\"args\":{\"where\":{\"id\":{\"$ref\":{\"operation\":5,\"fingerprint\":\"fp1:aMKNYrUwcifOeY8ZYk4pow\",\"path\":[\"id\"]}}}},\"fingerprint\":\"fp1:VS6Zk71avpYzuC90z8qzrQ\"}]}"}},"server":{"status":422,"code":"A2007","causeKeys":["issues","message","operation"],"issues":[{"code":"V1016","path":["operations",1,"args","where","id","$ref","operation"]}],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-arg-ref-where-index"},"bodyBytes":"{\"data\":null,\"code\":\"A2007\",\"cause\":{\"message\":\"Operation arguments failed framework validation.\",\"issues\":[{\"code\":\"V1016\",\"path\":[\"operations\",1,\"args\",\"where\",\"id\",\"$ref\",\"operation\"],\"message\":\"Transaction reference operation index is invalid.\"}],\"operation\":1}}"},"client":{"outcome":"framework-error","code":"A2007"}},
+{"label":"can: three questions in one request, one answer each → 200 A1000","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-three"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"authors\",\"action\":\"update\",\"where\":{\"id\":\"a1\"}},{\"resource\":\"authors\",\"action\":\"delete\",\"where\":{\"id\":\"a1\"}},{\"resource\":\"authors\",\"action\":\"read\"}]}"}},"server":{"status":200,"code":"A1000","adapterCalls":1,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-three"},"bodyBytes":"{\"data\":[true,false,true],\"code\":\"A1000\",\"cause\":null}"},"client":{"outcome":"resolve"}},
+{"label":"can: a row that does not exist answers false, never A2003","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-missing"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"authors\",\"action\":\"update\",\"where\":{\"id\":\"nobody\"}}]}"}},"server":{"status":200,"code":"A1000","adapterCalls":1,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-missing"},"bodyBytes":"{\"data\":[false],\"code\":\"A1000\",\"cause\":null}"},"client":{"outcome":"resolve"}},
+{"label":"can: an operation the client is not offered answers false","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-unoffered"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"secrets\",\"action\":\"read\"},{\"resource\":\"samples\",\"action\":\"delete\"}]}"}},"server":{"status":200,"code":"A1000","adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-unoffered"},"bodyBytes":"{\"data\":[false,false],\"code\":\"A1000\",\"cause\":null}"},"client":{"outcome":"resolve"}},
+{"label":"can: an AvError the engine throws answers false","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-engine-refuses"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"books\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"}]}"}},"server":{"status":200,"code":"A1000","adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-engine-refuses"},"bodyBytes":"{\"data\":[false,true],\"code\":\"A1000\",\"cause\":null}"},"client":{"outcome":"resolve"}},
+{"label":"can: no questions, no answers → 200 A1000","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-none"},"body":{"kind":"raw","content":"{\"questions\":[]}"}},"server":{"status":200,"code":"A1000","adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-none"},"bodyBytes":"{\"data\":[],\"code\":\"A1000\",\"cause\":null}"},"client":{"outcome":"resolve"}},
+{"label":"absent: /_access/can without access → 404 A2002 at [\"questions\"]","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","Aventara-Request-Id":"corpus-absent-can"},"body":{"kind":"raw","content":"{\"questions\":[]}"}},"server":{"status":404,"code":"A2002","causeKeys":["issues","message"],"issues":[{"code":"V1006","path":["questions"]}],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-absent-can"},"bodyBytes":"{\"data\":null,\"code\":\"A2002\",\"cause\":{\"message\":\"Access questions are not available on the active Contract.\",\"issues\":[{\"code\":\"V1006\",\"path\":[\"questions\"],\"message\":\"Access questions are not available on the active Contract.\"}]}}"},"client":{"outcome":"framework-error","code":"A2002"}},
+{"label":"method: GET on /_access/can → 405 A2012 with Allow: POST","request":{"method":"GET","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-get"},"body":{"kind":"raw","content":"{\"questions\":[]}"}},"server":{"status":405,"code":"A2012","causeKeys":["message"],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-get","Allow":"POST"},"bodyBytes":"{\"data\":null,\"code\":\"A2012\",\"cause\":{\"message\":\"The HTTP method is not allowed on this framework route.\"}}"},"client":{"outcome":"framework-error","code":"A2012"}},
+{"label":"can: an unknown and a client-hidden Resource → 404 A2001 for the batch","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-unknown"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"nope\",\"action\":\"read\"},{\"resource\":\"hiddenRes\",\"action\":\"read\"}]}"}},"server":{"status":404,"code":"A2001","causeKeys":["issues","message"],"issues":[{"code":"V1005","path":["questions",1,"resource"]},{"code":"V1005","path":["questions",2,"resource"]}],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-unknown"},"bodyBytes":"{\"data\":null,\"code\":\"A2001\",\"cause\":{\"message\":\"The requested Resource is not available.\",\"issues\":[{\"code\":\"V1005\",\"path\":[\"questions\",1,\"resource\"],\"message\":\"Resource \\\"nope\\\" is not available in the active Contract.\"},{\"code\":\"V1005\",\"path\":[\"questions\",2,\"resource\"],\"message\":\"Resource \\\"hiddenRes\\\" is not available in the active Contract.\"}]}}"},"client":{"outcome":"framework-error","code":"A2001"}},
+{"label":"can: a malformed question → 422 A2004 at [\"questions\", i, …]","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-malformed"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"authors\",\"action\":\"refund\"},{\"resource\":\"authors\",\"action\":\"read\",\"where\":{\"name\":\"Ada\"}},{\"resource\":\"authors\",\"action\":\"create\",\"where\":{\"id\":\"a1\"}}]}"}},"server":{"status":422,"code":"A2004","causeKeys":["issues","message"],"issues":[{"code":"V1002","path":["questions",0,"action"]},{"code":"V1007","path":["questions",1,"where"]},{"code":"V1001","path":["questions",2,"where"]}],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-malformed"},"bodyBytes":"{\"data\":null,\"code\":\"A2004\",\"cause\":{\"message\":\"Operation arguments failed framework validation.\",\"issues\":[{\"code\":\"V1002\",\"path\":[\"questions\",0,\"action\"],\"message\":\"action must be one of \\\"read\\\", \\\"create\\\", \\\"update\\\" or \\\"delete\\\".\"},{\"code\":\"V1007\",\"path\":[\"questions\",1,\"where\"],\"message\":\"Unique selector must exactly match one active identifier on Resource \\\"authors\\\".\"},{\"code\":\"V1001\",\"path\":[\"questions\",2,\"where\"],\"message\":\"A create question names no row: it takes no where.\"}]}}"},"client":{"outcome":"framework-error","code":"A2004"}},
+{"label":"can: more questions than maxListLimit → 422 A2009","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-over-limit"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"},{\"resource\":\"authors\",\"action\":\"read\"}]}"}},"server":{"status":422,"code":"A2009","causeKeys":["issues","message"],"issues":[{"code":"V1014","path":["questions"]}],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-over-limit"},"bodyBytes":"{\"data\":null,\"code\":\"A2009\",\"cause\":{\"message\":\"Operation arguments failed framework validation.\",\"issues\":[{\"code\":\"V1014\",\"path\":[\"questions\"],\"message\":\"Question count exceeds maxListLimit (250).\"}]}}"},"client":{"outcome":"framework-error","code":"A2009"}},
+{"label":"can: the engine throws → 500 A3000","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-engine-throws"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"samples\",\"action\":\"read\"}]}"}},"server":{"status":500,"code":"A3000","causeKeys":["message"],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-engine-throws"},"bodyBytes":"{\"data\":null,\"code\":\"A3000\",\"cause\":{\"message\":\"Internal framework error.\"}}"},"client":{"outcome":"framework-error","code":"A3000"}},
+{"label":"can: the Adapter fails reading the row → 500 A3001","request":{"method":"POST","path":"/_access/can","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:e45cdbc0c5f27e94058a1e0a1e4b9e532522ebeddcbb68170ac6ec6b45ca0d23","Aventara-Request-Id":"corpus-can-adapter-throws"},"body":{"kind":"raw","content":"{\"questions\":[{\"resource\":\"authors\",\"action\":\"update\",\"where\":{\"id\":\"A3001\"}}]}"}},"server":{"status":500,"code":"A3001","causeKeys":["message"],"adapterCalls":1,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-can-adapter-throws"},"bodyBytes":"{\"data\":null,\"code\":\"A3001\",\"cause\":{\"message\":\"Adapter execution failed.\"}}"},"client":{"outcome":"framework-error","code":"A3001"}},
 {"label":"internal: a guard that throws → 500 A3000","request":{"method":"POST","path":"/_resources/authors/find/unique","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","Aventara-Request-Id":"corpus-internal-a3000"},"body":{"kind":"raw","content":"{\"where\":{\"id\":\"A3000\"}}"}},"server":{"status":500,"code":"A3000","causeKeys":["message"],"adapterCalls":0,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-internal-a3000"},"bodyBytes":"{\"data\":null,\"code\":\"A3000\",\"cause\":{\"message\":\"Internal framework error.\"}}"},"client":{"outcome":"framework-error","code":"A3000"}},
 {"label":"internal: an Adapter that throws → 500 A3001","request":{"method":"POST","path":"/_resources/authors/find/unique","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","Aventara-Request-Id":"corpus-internal-a3001"},"body":{"kind":"raw","content":"{\"where\":{\"id\":\"A3001\"}}"}},"server":{"status":500,"code":"A3001","causeKeys":["message"],"adapterCalls":1,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-internal-a3001"},"bodyBytes":"{\"data\":null,\"code\":\"A3001\",\"cause\":{\"message\":\"Adapter execution failed.\"}}"},"client":{"outcome":"framework-error","code":"A3001"}},
 {"label":"internal: a plan whose commit fails after the work → 500 A3002","request":{"method":"POST","path":"/_transactions","headers":{"Content-Type":"application/json","Aventara-Protocol-Version":"1","Aventara-Contract-Hash":"sha256:502530d5b918266c61f45e70035acd7d9637bbf7305c5572106185d5e63ec307","Aventara-Request-Id":"corpus-internal-a3002"},"body":{"kind":"raw","content":"{\"operations\":[{\"resource\":\"authors\",\"family\":\"update\",\"variant\":\"unique\",\"args\":{\"where\":{\"id\":\"A3002\"},\"data\":{\"name\":\"Ada\"}},\"fingerprint\":\"fp1:8gs-RmzsqGlD_FFmk6dlQA\"}]}"}},"server":{"status":500,"code":"A3002","causeKeys":["message"],"adapterCalls":1,"responseHeaders":{"Content-Type":"application/json","Aventara-Request-Id":"corpus-internal-a3002"},"bodyBytes":"{\"data\":null,\"code\":\"A3002\",\"cause\":{\"message\":\"Transaction failed.\"}}"},"client":{"outcome":"framework-error","code":"A3002"}},

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@aventara/testing",
-  "version": "1.0.0-rc.1",
+  "version": "1.0.0-rc.10",
   "license": "SEE LICENSE IN LICENSE",
   "description": "Conformance and extension testing utilities for Aventara.",
   "type": "module",
   "engines": {
-    "node": "^22.18.0 || >=24.2.0"
+    "node": "^22.23.4 || >=24.22.1"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -24,7 +24,7 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@aventara/core": "1.0.0-rc.1"
+    "@aventara/core": "1.0.0-rc.10"
   },
   "publishConfig": {
     "access": "public"