@fitzzero/quickdraw-core 5.0.0 → 5.1.0

package/dist/server/index.d.ts

@@ -1,18 +1,18 @@
-import { J as AnyContract, at as ProjectionName, ai as FullProjectionOf, ac as CollectionName, ap as MethodName, d as StandardSchemaV1, c as InferOutput, N as NullableProjection, P as ProjectionList, aq as MethodOf, as as ParsedInputOf, ao as KindOf, A as AccessLevel, af as EntityOf, ar as OutputOf } from '../infer-Dw21kmLw.js';
-import { M as ModelName, v as PolicyFor, w as RowForms, x as AccessFor, H as HandlerContext, y as ModelColumn, z as WatchAccess, B as PublicAccess, E as HandlerArgs, G as CustomAccess, I as ShareMode, J as ChannelOptions, K as StreamOptions, u as RoomLeaveHandler, L as ChannelsRequired, f as Service, N as BaseContext, O as CallerFor, l as RunContext, m as RunOptions, o as StreamHandle, P as Presence, n as ServerRooms, Q as AccessPolicy, T as AnyAccessPolicy, V as PolicyColumns, X as PolicyForeign, Y as PolicyTools, k as AccessFilter, Z as RowAccess, q as AccessEngine, b as StorageWhere } from '../caller-DHzK3oiI.js';
-export { aI as ANY_FIELD, aA as AccessForm, aB as AccessRequest, _ as AffectsLink, p as AnyContext, A as AnyService, r as AppRooms, aC as AuthenticatedAccess, aq as CallOptions, i as Caller, a9 as ChannelAccess, aa as ChannelContext, ab as ChannelHandler, ac as ChannelImplementation, ad as ChannelRoomOf, a4 as CollectionScope, a6 as ContextRooms, a7 as ContextServices, C as CountArgs, a3 as DEFAULT_BULK_THRESHOLD, g as DevWarning, D as DevWarningError, h as DevWarningKind, aD as EntryAccess, F as FindManyArgs, e as FlushInfo, d as FlushSink, at as ForeignColumns, au as ForeignColumnsOf, aE as IdKeyOf, aF as IdSelector, av as MembershipRead, ar as MethodCaller, aM as N_PLUS_ONE_STATEMENTS, aw as ParentLink, ax as PolicyKind, ay as PolicyReads, $ as ProjectedOutput, a0 as Projection, ae as RoomLeave, af as RoomLeaveReason, ag as RoomLeft, ah as RoomTarget, az as RowLevel, R as RowLevels, aG as ScopeAccess, aH as ServiceAccess, as as ServiceCaller, ai as ServiceChannel, a5 as ServiceCollection, j as ServiceMethod, aj as ServiceStream, c as StatementCount, S as StorageAdapter, a as StorageRow, ak as StreamImplementation, al as StreamPushArgs, am as StreamPushManyArgs, an as StreamSeed, ao as StreamSeedContext, t as StreamSubscriptions, ap as StreamValidation, a1 as TierGroup, a2 as Tiers, a8 as TouchOptions, aJ as UnitOfWork, U as UnitOfWorkFactory, aK as UnitOfWorkScope, W as WriteRecord, aL as formatDevWarning, s as storageOf } from '../caller-DHzK3oiI.js';
-import { S as ServerOptions, Q as QuickdrawServer } from '../createServer-DUacdfKl.js';
-export { C as ClusterClient, t as ClusterOptions, D as DEFAULT_STALL_INTERVAL_MS, e as DEFAULT_STALL_MAX_MS, f as DEFAULT_STALL_THRESHOLD_MS, p as DisconnectUserOptions, E as EntitySubscription, a as EntitySubscriptions, H as HttpApp, I as IoRedisLike, M as MIN_STALL_INTERVAL_MS, m as QuickdrawIo, n as QuickdrawServerSocket, o as QuickdrawSocketData, x as RateLimitOptions, y as RateLimiter, R as RotateOptions, g as STALL_RESOLUTION_MS, b as ScopeSubscription, c as ScopeSubscriptions, l as ServerOnlyOptions, h as SlowMethod, q as SocketCors, r as SocketOptions, s as SocketRateLimitOptions, i as StallReport, j as StallWatchdogOptions, T as TopicWatch, d as TopicWatches, v as applyRateLimitMiddleware, u as createRateLimiter, k as createServer, w as createTieredRateLimiter } from '../createServer-DUacdfKl.js';
-import { ad as Version } from '../envelope-nf5eGB-a.js';
-import { Q as QuickdrawTypes, D as DbOf, c as PrincipalOf, M as MaybePromise, b as McpContextOf, C as ContextExtensionOf, P as Principal } from '../types-Bwg3kIEc.js';
-export { a as McpContext, T as Transport } from '../types-Bwg3kIEc.js';
-import { a as DispatcherOptions, D as Dispatcher, c as DispatcherCollections } from '../http--uoooIH5.js';
-export { o as AccessChange, p as AccessChangeListener, A as AccessOptions, d as ChangeLogOptions, C as ContractOfServices, j as DEFAULT_LIMITS, f as DbOfServices, h as DispatchRequest, i as DispatchResult, n as DispatcherAccess, k as DispatcherLimits, s as HttpMiddleware, H as HttpRouter, u as HttpRouterOptions, b as HttpTransportOptions, L as LimitsOptions, l as PipelineOptions, P as PrincipalOfServices, R as RegisteredMethod, g as Registry, S as SharedData, m as SubscriptionLimits, T as TrackingOptions, V as VersionRequest, q as VersionSource, e as createDispatcher, r as createHttpRouter, t as toCallReply } from '../http--uoooIH5.js';
-import { l as CrudMethodName, d as CrudContractOptions, S as ScalarFieldOf, N as NumberFieldOf, m as CrudMethods, H as AdminMethodsOf, w as AdminContractOptions, G as AdminMethods } from '../admin-BiU4LRZS.js';
-import { S as SearchContractOptions, T as TextFieldOf, b as SearchMethods, n as SharingMethodName, f as SharingByNameMethod, g as SharingContractOptions, o as SharingMethods } from '../sharing-n4ss-ONM.js';
-import { l as AdminFieldConfig } from '../adminSchemas-k5a1Ov7b.js';
-export { a as CallOutcome, C as CallRecord } from '../metrics-C0WvB7-I.js';
-export { b as AuthenticateRequest, A as AuthenticateResult, c as HttpAuthenticateRequest, d as HttpCredentialSource, S as ServerAuth, e as ServiceAccessSource, a as ServiceGrants, f as SocketAuthenticateRequest, r as recordSocketSession } from '../auth-CMyRkfjZ.js';
+import { J as AnyContract, at as ProjectionName, ai as FullProjectionOf, ac as CollectionName, ap as MethodName, d as StandardSchemaV1, c as InferOutput, N as NullableProjection, P as ProjectionList, aq as MethodOf, as as ParsedInputOf, ao as KindOf, A as AccessLevel, af as EntityOf, ar as OutputOf } from '../infer-Teo1xpsd.js';
+import { M as ModelName, v as PolicyFor, w as RowForms, x as AccessFor, H as HandlerContext, y as ModelColumn, z as WatchAccess, B as PublicAccess, E as HandlerArgs, G as CustomAccess, I as ShareMode, J as ChannelOptions, K as StreamOptions, u as RoomLeaveHandler, L as ChannelsRequired, h as Service, N as BaseContext, O as CallerFor, l as RunContext, m as RunOptions, o as StreamHandle, P as Presence, n as ServerRooms, Q as AccessPolicy, T as AnyAccessPolicy, V as PolicyColumns, X as PolicyForeign, Y as PolicyTools, k as AccessFilter, Z as RowAccess, q as AccessEngine, b as StorageWhere } from '../caller-CXTFswBO.js';
+export { aI as ANY_FIELD, aA as AccessForm, aB as AccessRequest, _ as AffectsLink, p as AnyContext, A as AnyService, r as AppRooms, aC as AuthenticatedAccess, aq as CallOptions, d as Caller, a9 as ChannelAccess, aa as ChannelContext, ab as ChannelHandler, ac as ChannelImplementation, ad as ChannelRoomOf, a4 as CollectionScope, a6 as ContextRooms, a7 as ContextServices, C as CountArgs, a3 as DEFAULT_BULK_THRESHOLD, i as DevWarning, D as DevWarningError, j as DevWarningKind, aD as EntryAccess, F as FindManyArgs, f as FlushInfo, e as FlushSink, at as ForeignColumns, au as ForeignColumnsOf, aE as IdKeyOf, aF as IdSelector, av as MembershipRead, ar as MethodCaller, aM as N_PLUS_ONE_STATEMENTS, aw as ParentLink, ax as PolicyKind, ay as PolicyReads, $ as ProjectedOutput, a0 as Projection, ae as RoomLeave, af as RoomLeaveReason, ag as RoomLeft, ah as RoomTarget, az as RowLevel, R as RowLevels, aG as ScopeAccess, aH as ServiceAccess, as as ServiceCaller, ai as ServiceChannel, a5 as ServiceCollection, g as ServiceMethod, aj as ServiceStream, c as StatementCount, S as StorageAdapter, a as StorageRow, ak as StreamImplementation, al as StreamPushArgs, am as StreamPushManyArgs, an as StreamSeed, ao as StreamSeedContext, t as StreamSubscriptions, ap as StreamValidation, a1 as TierGroup, a2 as Tiers, a8 as TouchOptions, aJ as UnitOfWork, U as UnitOfWorkFactory, aK as UnitOfWorkScope, W as WriteRecord, aL as formatDevWarning, s as storageOf } from '../caller-CXTFswBO.js';
+import { S as ServerOptions, Q as QuickdrawServer } from '../createServer-CP9eDHZZ.js';
+export { C as ClusterClient, u as ClusterOptions, D as DEFAULT_STALL_INTERVAL_MS, e as DEFAULT_STALL_MAX_MS, f as DEFAULT_STALL_THRESHOLD_MS, p as DisconnectUserOptions, E as EntitySubscription, a as EntitySubscriptions, H as HttpApp, I as IoRedisLike, L as LegacyReply, t as LegacyWireOptions, M as MIN_STALL_INTERVAL_MS, m as QuickdrawIo, n as QuickdrawServerSocket, o as QuickdrawSocketData, y as RateLimitOptions, z as RateLimiter, R as RotateOptions, g as STALL_RESOLUTION_MS, b as ScopeSubscription, c as ScopeSubscriptions, l as ServerOnlyOptions, h as SlowMethod, q as SocketCors, r as SocketOptions, s as SocketRateLimitOptions, i as StallReport, j as StallWatchdogOptions, T as TopicWatch, d as TopicWatches, w as applyRateLimitMiddleware, v as createRateLimiter, k as createServer, x as createTieredRateLimiter } from '../createServer-CP9eDHZZ.js';
+import { ad as Version } from '../envelope-Cp3YcVxC.js';
+import { Q as QuickdrawTypes, D as DbOf, d as PrincipalKindOf, c as PrincipalOf, M as MaybePromise, b as McpContextOf, C as ContextExtensionOf, P as Principal } from '../types-Cu0vmx7c.js';
+export { a as McpContext, T as Transport } from '../types-Cu0vmx7c.js';
+import { a as DispatcherOptions, D as Dispatcher, c as DispatcherCollections } from '../http-Djj2Inuu.js';
+export { o as AccessChange, p as AccessChangeListener, A as AccessOptions, d as ChangeLogOptions, C as ContractOfServices, j as DEFAULT_LIMITS, f as DbOfServices, h as DispatchRequest, i as DispatchResult, n as DispatcherAccess, k as DispatcherLimits, s as HttpMiddleware, H as HttpRouter, u as HttpRouterOptions, b as HttpTransportOptions, L as LimitsOptions, l as PipelineOptions, P as PrincipalOfServices, R as RegisteredMethod, g as Registry, S as SharedData, m as SubscriptionLimits, T as TrackingOptions, V as VersionRequest, q as VersionSource, e as createDispatcher, r as createHttpRouter, t as toCallReply } from '../http-Djj2Inuu.js';
+import { l as CrudMethodName, d as CrudContractOptions, S as ScalarFieldOf, N as NumberFieldOf, m as CrudMethods, H as AdminMethodsOf, w as AdminContractOptions, G as AdminMethods } from '../admin-DKwkIh5i.js';
+import { S as SearchContractOptions, T as TextFieldOf, b as SearchMethods, n as SharingMethodName, f as SharingByNameMethod, g as SharingContractOptions, o as SharingMethods } from '../sharing-DVa8W-yR.js';
+import { x as AdminNeverWritable, l as AdminFieldConfig } from '../adminSchemas-2DUA_hZ8.js';
+export { a as CallOutcome, C as CallRecord } from '../metrics-BdBu5o8G.js';
+export { b as AuthenticateRequest, A as AuthenticateResult, c as HttpAuthenticateRequest, d as HttpCredentialSource, S as ServerAuth, e as ServiceAccessSource, a as ServiceGrants, f as SocketAuthenticateRequest, r as recordSocketSession } from '../auth-BhWqdyb-.js';
 import { Server } from 'socket.io';
 import { L as Logger } from '../logger-BY28acW-.js';
 import 'node:http';
@@ -34,16 +34,6 @@ declare const STREAM_MAX_SCOPES = 10000;
 /** The most stream feeds one socket may subscribe to at once. */
 declare const MAX_STREAMS_PER_SOCKET = 500;
 
-/** 4.x's `ServiceResponse`, the shape every reply of the shim takes. */
-type LegacyReply = {
-    readonly success: true;
-    readonly data: unknown;
-} | {
-    readonly success: false;
-    readonly error: string;
-    readonly code: number;
-};
-
 /**
  * A JSON column's value as a database client types it: structurally
  * Prisma's `JsonValue` (and its `InputJsonValue` objects and arrays). A row
@@ -252,6 +242,16 @@ interface MutationOptions {
 type MethodImplementation<T extends QuickdrawTypes, C extends AnyContract, M extends MethodName<C>, A, Rows extends RowForms = "all", Proj = Empty$2> = {
     /** Who may call: `"public"`, `"authenticated"`, `{ service }`, `{ entry }`, `{ scope, of, id }` or `custom(fn)`. */
     readonly access: AccessValue<A, MethodAccess<T, C, M, Rows>>;
+    /**
+     * The kinds of principal that may call this method (RFC 0003 section
+     * 4.1), within its service's `kinds` (or the app's): `kinds: ["user"]`
+     * keeps an agent's token out of a method that mints tokens. A principal
+     * of another kind, or without a `kind`, gets `FORBIDDEN` before `access`
+     * is asked, whatever its grants; an anonymous caller is left to `access`.
+     * Not on a `"public"` method, which a caller of any kind could call
+     * signed out. Leave it out for the service's list.
+     */
+    readonly kinds?: readonly PrincipalKindOf<T>[];
     /**
      * Runs the method. For a projection output it returns the database row
      * (or rows, or `null`), which the framework projects: only the
@@ -377,6 +377,18 @@ interface ServiceDefinition<T extends QuickdrawTypes, C extends AnyContract, A,
      * service (RFC 0003 section 4.1). Default `true`.
      */
     readonly adminBypass?: boolean;
+    /**
+     * The kinds of principal that may call the service's methods and
+     * subscribe to its live data (RFC 0003 section 4.1): `kinds: ["user"]`.
+     * Within the app's `initQuickdraw({ kinds })`, which the service takes
+     * when it leaves this out; a method's own `kinds` narrows it further. A
+     * principal of another kind, or without a `kind`, gets `FORBIDDEN` before
+     * any access form is asked, and a service-wide `Admin` grant does not
+     * pass it; an anonymous caller is left to the form. Its entity, collection,
+     * topic and stream subscriptions refuse such a principal the same way, and
+     * its channels drop its messages.
+     */
+    readonly kinds?: readonly PrincipalKindOf<T>[];
 }
 /** `qd.defineService`, typed by the app's `QuickdrawTypes`. */
 type DefineService<T extends QuickdrawTypes> = <C extends AnyContract, const Model extends ModelName<DbOf<T>> | undefined = undefined, Policy extends PolicyFor<DbOf<T>, Model> | undefined = undefined, const A extends MethodKeys<C> = AccessMap<T, C, RowFormsOf<Model, Policy>>, const Proj = Empty$2>(contract: C, definition: ServiceDefinition<T, C, A, Model, Policy, Proj> & CollectionsRequired<C> & ChannelsRequired<C>) => Service<T, C>;
@@ -390,6 +402,15 @@ type ContextFactory<T extends QuickdrawTypes> = (base: BaseContext<PrincipalOf<T
 interface InitOptions<T extends QuickdrawTypes> {
     /** Adds the app's fields to every handler's `ctx`. Required when the app's types declare `context`. */
     readonly context?: ContextFactory<T>;
+    /**
+     * The kinds of principal every service this instance defines admits
+     * (RFC 0003 section 4.1), so a new service starts closed to the rest:
+     * `kinds: ["user", "agent"]`. A service's `kinds`, and a method's, may
+     * only narrow it. A principal of another kind, or without a `kind`, gets
+     * `FORBIDDEN` before any access form or `Admin` grant is asked; an
+     * anonymous caller is left to the form. Leave it out to admit every kind.
+     */
+    readonly kinds?: readonly PrincipalKindOf<T>[];
 }
 /** `initQuickdraw`'s arguments: the options are required when `T` declares `context`. */
 type InitArgs<T extends QuickdrawTypes> = T extends {
@@ -616,8 +637,25 @@ declare function inherit<const Via extends string>(options: InheritOptions<Via>)
  */
 declare function anyOf<const P extends readonly AnyAccessPolicy[]>(...policies: P): AccessPolicy<PolicyColumns<P[number]>, PolicyForeign<P[number]>>;
 
+/** A membership table a resolver's levels depend on: `{ model, entry, user, level, levels? }`, as `members` takes it. */
+type ResolverMembership = MembersOptions;
+/** What a resolver's levels depend on: `resolver({ reads })`. Name at least one column or table. */
+interface ResolverReads<Column extends string = string, Membership extends ResolverMembership = ResolverMembership> {
+    /**
+     * Columns of the service's own model. A tracked write that sets one (or
+     * creates or deletes a row) re-checks that row, for every user. `tools.rows`
+     * reads them.
+     */
+    readonly columns?: readonly Column[];
+    /**
+     * Membership tables, one row per user and row of this service: `entry`
+     * holds the id of this service's row, as for `members`. A tracked write to
+     * one re-checks that user on that row.
+     */
+    readonly memberships?: readonly Membership[];
+}
 /** Options of {@link resolver}. */
-interface ResolverOptions<P extends Principal = Principal> {
+interface ResolverOptions<P extends Principal = Principal, Column extends string = string, Membership extends ResolverMembership = ResolverMembership> {
     /**
      * The principal's level on each of `ids`, as a map or a record by id. An id
      * left out, or given anything but an access level, has no level. Read
@@ -631,21 +669,52 @@ interface ResolverOptions<P extends Principal = Principal> {
      * no row.
      */
     readonly where?: (principal: P, level: AccessLevel, tools: PolicyTools) => MaybePromise<AccessFilter>;
+    /**
+     * What the levels depend on, so tracked writes re-check what they
+     * decided: live rows, collection scopes and change topics.
+     * `{ columns, memberships }` names the service's columns and the membership
+     * tables `levelsFor` and `where` read; `"none"` says nothing a tracked
+     * write changes can change a level (the levels come from the principal's
+     * grants alone, say). Without it nothing a write does re-checks this
+     * policy, and the server says so in development (`resolver-without-reads`).
+     */
+    readonly reads?: ResolverReads<Column, Membership> | "none";
 }
+/** The other models and columns the membership tables `M` read: what `defineService` checks. */
+type MembershipColumns<M> = M extends {
+    readonly model: infer Model extends string;
+    readonly entry: infer Entry extends string;
+    readonly user: infer User extends string;
+    readonly level: infer Level extends string;
+} ? {
+    readonly model: Model;
+    readonly columns: Entry | User | Level;
+} : never;
 /**
  * A policy written in app code: `levelsFor` answers the level per row and
  * `where` the list filter. A resolver's own results are memoized for the
- * request and never cached across requests, because the framework cannot
- * know which writes change them; what it reads through `tools` is cached as
- * usual.
+ * request and never cached across requests; what it reads through `tools`
+ * is: `tools.rows(ids)` reads `id` and the declared columns in one query,
+ * and `tools.memberships(table, userId, ids)` a member's levels, both kept
+ * with `cacheMs` and evicted by tracked writes when `reads` declares them.
+ *
+ * `reads` declares what the levels depend on, so a tracked write to it
+ * re-checks the live rows, collection scopes and change topics the policy
+ * authorized, as for the other builders: a user removed from a membership
+ * table stops receiving the rows it gave them. `defineService` checks the
+ * declared columns and tables against the app's database client.
  *
  * @example
  * access: resolver({
- *   levelsFor: async (principal, ids) => levelsFromMyTable(principal.userId, ids),
+ *   levelsFor: (principal, ids, tools) => levelsFromMyTables(principal.userId, ids, tools),
  *   where: (principal) => ({ visibility: "public" }),
+ *   reads: {
+ *     columns: ["visibility"],
+ *     memberships: [{ model: "teamMember", entry: "projectId", user: "userId", level: "role" }],
+ *   },
  * }),
  */
-declare function resolver<P extends Principal = Principal>(options: ResolverOptions<P>): AccessPolicy<never, never>;
+declare function resolver<P extends Principal = Principal, const Column extends string = never, const Membership extends ResolverMembership = never>(options: ResolverOptions<P, Column, Membership>): AccessPolicy<Column, MembershipColumns<Membership>>;
 
 /**
  * Every signed-in user has `level` on every row. Anonymous callers have no
@@ -1184,6 +1253,18 @@ interface AdminHandlersOptions<C extends AnyContract, A, Db = unknown> {
      * an entity with such a field. Default `false`.
      */
     readonly grants?: [Extract<AdminFieldOf<C>, "serviceAccess" | "service_access">] extends [never] ? never : boolean;
+    /**
+     * The only fields `adminCreate` and `adminUpdate` write (finding R1.4 of
+     * the 5.0.0 review): `adminMeta` reports every other field `editable:
+     * false`, so a generic form leaves it read-only, and a write naming one is
+     * refused with `VALIDATION` ("is not editable"). Each must be a field the
+     * kit shows, never `id` or a timestamp, and a `fieldOverrides` entry may
+     * not say otherwise about it. When `admin.contract` was given a list, this
+     * one must name the same fields, and without this one the contract's
+     * applies. Without either, the kit writes every field but `id`, the
+     * timestamps, the hidden ones and those an override made read-only.
+     */
+    readonly editable?: readonly Exclude<AdminFieldOf<C>, AdminNeverWritable>[];
     /** Changes to the configuration `adminMeta` derives, per field. */
     readonly fieldOverrides?: {
         readonly [Field in AdminFieldOf<C>]?: AdminFieldOverride;
@@ -1253,7 +1334,7 @@ type Empty = Record<never, never>;
 declare function handlers<C extends AnyContract, const A extends AdminAccess<C> = Empty, Db = unknown>(contract: C & NoInfer<AdminContract<C>>, options?: AdminHandlersOptions<C, A, Db>): AdminImplementations<C, A, Db>;
 /**
  * The admin kit: `admin.handlers(contract, { access?, displayName?,
- * hiddenFields?, fieldOverrides?, rowless?, grants? })` implements the
+ * hiddenFields?, editable?, fieldOverrides?, rowless?, grants? })` implements the
  * methods `admin.contract` made in `contract`, each open to a service-wide
  * `Admin` grant unless `access` gives another form. `admin.contract` is here
  * too, for server code; a shared package imports it from the root export.
@@ -1273,6 +1354,12 @@ declare const admin: Readonly<{
         readonly sort: `admin.contract: sort: "${Exclude<O extends infer T_3 ? T_3 extends O ? T_3 extends {
             readonly sort: readonly (infer Field extends string)[];
         } ? Field : never : never : never, ScalarFieldOf<Entity extends StandardSchemaV1<unknown, unknown> ? InferOutput<Entity> : never>> & string}" is not a field of the entity holding strings, numbers or booleans`;
+    }) & ([Exclude<O extends infer T_4 ? T_4 extends O ? T_4 extends {
+        readonly editable: readonly (infer Field extends string)[];
+    } ? Field : never : never : never, Exclude<keyof (Entity extends StandardSchemaV1<unknown, unknown> ? InferOutput<Entity> : never), AdminNeverWritable>>] extends [never] ? unknown : {
+        readonly editable: `admin.contract: editable: "${Exclude<O extends infer T_5 ? T_5 extends O ? T_5 extends {
+            readonly editable: readonly (infer Field extends string)[];
+        } ? Field : never : never : never, Exclude<keyof (Entity extends StandardSchemaV1<unknown, unknown> ? InferOutput<Entity> : never), AdminNeverWritable>> & string}" is not a field of the entity the kit may write`;
     }) : unknown>) => AdminMethods<O>;
     handlers: typeof handlers;
 }>;
@@ -1491,4 +1578,4 @@ declare function decryptIfEncrypted(value: string): string;
 /** Safe wrapper that returns `null` instead of throwing on invalid/stale ciphertext. */
 declare function tryDecrypt(ciphertext: string, logger?: Logger): string | null;
 
-export { ADMIN_HIDDEN_FIELDS, AccessEngine, AccessFilter, AccessFor, type AccessMap, AccessPolicy, type AdminAccess, type AdminContract, type AdminDefaultAccess, type AdminFieldOf, type AdminFieldOverride, type AdminHandlersOptions, type AdminImplementations, type AdminOnCommitted, type AdminOnWrite, type AdminOutputOf, type AdminWrite, type AffectsOption, AnyAccessPolicy, BaseContext, type BasicAccessEngineOptions, CHANNEL_ABUSE_MULTIPLIER, CHANNEL_ABUSE_WINDOW_MS, CallerFor, ChannelOptions, ChannelsRequired, type CollectionOption, type CollectionOptions, type CollectionsRequired, ContextExtensionOf, type ContextFactory, type CrudAccess, type CrudCreateOf, type CrudHandlersOptions, type CrudImplementations, type CrudKindOf, type CrudMethodsOf, type CrudPrepare, CustomAccess, DbOf, type DefineService, Dispatcher, DispatcherCollections, DispatcherOptions, type EnvValidationResult, HandlerArgs, HandlerContext, type HandlerOutputOf, type HandlerRow, INDEX_MAX_ROWS, type InheritOptions, type InitArgs, type InitOptions, type JsonAclOptions, type JsonColumnValue, type KitContext, type KitHandler, type KitHandlerArgs, type LegacyReply, MAX_APP_ROOMS, MAX_ITEM_IDS, MAX_STREAMS_PER_SOCKET, MaybePromise, McpContextOf, type MembersOptions, type MethodAccess, type MethodImplementation, ModelColumn, ModelName, type NextOrdinalOptions, ORDINAL_STEP, PRESENCE_MAX_LAST_SEEN, PolicyFor, PolicyTools, Presence, Principal, type PrincipalFor, PrincipalOf, type ProjectCheck, type ProjectionOption, PublicAccess, type Quickdraw, QuickdrawServer, QuickdrawTypes, RESUME_MAX_AGE_MS, RESUME_MAX_DELTAS, type RedisAdapterOptions, type RedisAdapterResult, type ResolverOptions, RoomLeaveHandler, RowAccess, type RowFor, RowForms, type RowFormsOf, RunContext, RunOptions, STREAM_MAX_SCOPES, type SearchAccess, type SearchContract, type SearchHandlersOptions, type SearchIdsOptions, type SearchImplementations, type SearchMethodsOf, type SearchStrategy, type SearchStrategyContext, ServerOptions, ServerRooms, Service, type ServiceDefinition, ShareMode, type SharingAccess, type SharingByNameOf, type SharingChange, type SharingChangeKind, type SharingContract, type SharingDefaultAccess, type SharingHandlersOptions, type SharingImplementations, type SharingKindOf, type SharingMethodsOf, type SharingOnChange, type SharingOptionsArgs, type SharingResolveUser, type SharingUserLookup, StorageWhere, StreamHandle, StreamOptions, type ValidateEnvOptions, WatchAccess, admin, anyOf, checkEnv, createBasicAccessEngine, crud, custom, decrypt, decryptIfEncrypted, displayNameOf, encrypt, everyone, inherit, initQuickdraw, isEncrypted, isRedisAdapterAvailable, jsonAcl, labelOf, meetsLevel, members, nextOrdinal, owner, requireEnv, requireRow, resolver, search, serviceGrant, setupRedisAdapter, sharing, tryDecrypt, validateEnv };
+export { ADMIN_HIDDEN_FIELDS, AccessEngine, AccessFilter, AccessFor, type AccessMap, AccessPolicy, type AdminAccess, type AdminContract, type AdminDefaultAccess, type AdminFieldOf, type AdminFieldOverride, type AdminHandlersOptions, type AdminImplementations, type AdminOnCommitted, type AdminOnWrite, type AdminOutputOf, type AdminWrite, type AffectsOption, AnyAccessPolicy, BaseContext, type BasicAccessEngineOptions, CHANNEL_ABUSE_MULTIPLIER, CHANNEL_ABUSE_WINDOW_MS, CallerFor, ChannelOptions, ChannelsRequired, type CollectionOption, type CollectionOptions, type CollectionsRequired, ContextExtensionOf, type ContextFactory, type CrudAccess, type CrudCreateOf, type CrudHandlersOptions, type CrudImplementations, type CrudKindOf, type CrudMethodsOf, type CrudPrepare, CustomAccess, DbOf, type DefineService, Dispatcher, DispatcherCollections, DispatcherOptions, type EnvValidationResult, HandlerArgs, HandlerContext, type HandlerOutputOf, type HandlerRow, INDEX_MAX_ROWS, type InheritOptions, type InitArgs, type InitOptions, type JsonAclOptions, type JsonColumnValue, type KitContext, type KitHandler, type KitHandlerArgs, MAX_APP_ROOMS, MAX_ITEM_IDS, MAX_STREAMS_PER_SOCKET, MaybePromise, McpContextOf, type MembersOptions, type MethodAccess, type MethodImplementation, ModelColumn, ModelName, type NextOrdinalOptions, ORDINAL_STEP, PRESENCE_MAX_LAST_SEEN, PolicyFor, PolicyTools, Presence, Principal, type PrincipalFor, PrincipalKindOf, PrincipalOf, type ProjectCheck, type ProjectionOption, PublicAccess, type Quickdraw, QuickdrawServer, QuickdrawTypes, RESUME_MAX_AGE_MS, RESUME_MAX_DELTAS, type RedisAdapterOptions, type RedisAdapterResult, type ResolverMembership, type ResolverOptions, type ResolverReads, RoomLeaveHandler, RowAccess, type RowFor, RowForms, type RowFormsOf, RunContext, RunOptions, STREAM_MAX_SCOPES, type SearchAccess, type SearchContract, type SearchHandlersOptions, type SearchIdsOptions, type SearchImplementations, type SearchMethodsOf, type SearchStrategy, type SearchStrategyContext, ServerOptions, ServerRooms, Service, type ServiceDefinition, ShareMode, type SharingAccess, type SharingByNameOf, type SharingChange, type SharingChangeKind, type SharingContract, type SharingDefaultAccess, type SharingHandlersOptions, type SharingImplementations, type SharingKindOf, type SharingMethodsOf, type SharingOnChange, type SharingOptionsArgs, type SharingResolveUser, type SharingUserLookup, StorageWhere, StreamHandle, StreamOptions, type ValidateEnvOptions, WatchAccess, admin, anyOf, checkEnv, createBasicAccessEngine, crud, custom, decrypt, decryptIfEncrypted, displayNameOf, encrypt, everyone, inherit, initQuickdraw, isEncrypted, isRedisAdapterAvailable, jsonAcl, labelOf, meetsLevel, members, nextOrdinal, owner, requireEnv, requireRow, resolver, search, serviceGrant, setupRedisAdapter, sharing, tryDecrypt, validateEnv };