@fitzzero/quickdraw-core 5.1.1 → 5.1.2

package/dist/{http-Djj2Inuu.d.ts → http-DotQ5bj8.d.ts}

@@ -1,12 +1,12 @@
 import { IncomingMessage, ServerResponse } from 'node:http';
-import { L as Logger } from './logger-BY28acW-.js';
-import { J as AnyContract, A as AccessLevel } from './infer-Teo1xpsd.js';
-import { P as Principal, T as Transport, a as McpContext, D as DbOf, c as PrincipalOf, M as MaybePromise } from './types-Cu0vmx7c.js';
-import { A as AnyService, g as ServiceMethod, R as RowLevels, k as AccessFilter, d as Caller, l as RunContext, m as RunOptions, P as Presence, n as ServerRooms, o as StreamHandle, p as AnyContext, S as StorageAdapter, U as UnitOfWorkFactory, e as FlushSink, q as AccessEngine } from './caller-CXTFswBO.js';
-import { ad as Version, x as CallReply } from './envelope-Cp3YcVxC.js';
+import { L as Logger } from './logger-Yz93KzdV.js';
+import { J as AnyContract, A as AccessLevel } from './infer-BmoZsL9a.js';
+import { P as Principal, T as Transport, a as McpContext, D as DbOf, c as PrincipalOf, M as MaybePromise } from './types-CYliTP65.js';
+import { A as AnyService, g as ServiceMethod, R as RowLevels, k as AccessFilter, d as Caller, l as RunContext, m as RunOptions, P as Presence, n as ServerRooms, o as StreamHandle, p as AnyContext, S as StorageAdapter, U as UnitOfWorkFactory, e as FlushSink, q as AccessEngine } from './caller-BT-Mv4bD.js';
+import { ad as Version, x as CallReply } from './envelope-DzWyIXjj.js';
 import { Q as QuickdrawError } from './errors-S-bxEIBC.js';
-import { C as CallRecord } from './metrics-BdBu5o8G.js';
-import { S as ServerAuth } from './auth-BhWqdyb-.js';
+import { C as CallRecord } from './metrics-DW80Exve.js';
+import { S as ServerAuth } from './auth-DXiSJZaf.js';
 
 /** How one call ended. The dispatcher's `call` resolves with it and never rejects. */
 type DispatchResult = {
@@ -144,11 +144,12 @@ type PrincipalOfServices<S extends readonly AnyService[]> = [S[number]] extends
 /** The contracts the services of `S` were defined from. */
 type ContractOfServices<S extends readonly AnyService[]> = [S[number]] extends [never] ? AnyContract : S[number]["contract"];
 /**
- * Options of {@link createDispatcher}: the services and the database client
- * handlers receive, plus the pipeline's seams and limits. `db` may be left
- * out only when the services declared no database type.
+ * The options `createDispatcher` and `createServer` share: the services and
+ * the database client handlers receive, plus the pipeline's seams and
+ * limits. `db` may be left out only when the services declared no database
+ * type.
  */
-type DispatcherOptions<S extends readonly AnyService[]> = PipelineOptions & {
+type DispatcherBaseOptions<S extends readonly AnyService[]> = PipelineOptions & {
     /** The services to serve. Two services with one name are an error. */
     readonly services: S;
 } & (unknown extends DbOfServices<S> ? {
@@ -156,6 +157,23 @@ type DispatcherOptions<S extends readonly AnyService[]> = PipelineOptions & {
 } : {
     readonly db: DbOfServices<S>;
 });
+/** Options of {@link createDispatcher}: the shared ones, and where users' grants are stored. */
+type DispatcherOptions<S extends readonly AnyService[]> = DispatcherBaseOptions<S> & {
+    /**
+     * Where users' service-wide grants are stored, as `{ model: "user",
+     * column: "serviceAccess" }`: the admin kit on that model treats the
+     * column as the grants field, whatever its name (hidden unless
+     * `grants: true`, and then for service-wide Admins only). `createServer`
+     * takes it as `auth.serviceAccessSource`, which also refreshes the grants
+     * it stores; a dispatcher made without `createServer` (an app that serves
+     * HTTP with `createHttpRouter`, an MCP process) names it here, or the
+     * column is an ordinary field there.
+     */
+    readonly serviceAccessSource?: {
+        readonly model: string;
+        readonly column: string;
+    };
+};
 /** `dispatcher.collections` and `qd.collections`: the services' collections (RFC 0003 section 7). */
 interface DispatcherCollections {
     /**
@@ -226,6 +244,16 @@ interface Dispatcher<S extends readonly AnyService[] = readonly AnyService[]> {
     readonly registry: Registry;
     /** The resolved limits, for a server to announce in `qd:hello`. */
     readonly limits: DispatcherLimits;
+    /**
+     * Where users' service-wide grants are stored, as the dispatcher was made
+     * with it (`serviceAccessSource`, which `createServer` takes from
+     * `auth.serviceAccessSource`): the admin kit on that model treats the
+     * column as the grants field. `undefined` without one.
+     */
+    readonly serviceAccessSource: {
+        readonly model: string;
+        readonly column: string;
+    } | undefined;
 }
 /**
  * Creates a dispatcher for `services`.
@@ -257,6 +285,12 @@ interface VersionRequest {
  * checked, for queries that declare no `version` of their own. It must take
  * the version before any row is read, so a reply is never older than the
  * version it claims.
+ *
+ * A version is a one-bit oracle: "not modified" comes before the handler
+ * runs, and tells the caller that what the version stands for exists and
+ * has not changed. Answer only for rows the method's access form let the
+ * caller read; the default answers for an `entry` form on `id`, a `rowless`
+ * method and a caller the service's `Admin` bypass passes.
  */
 interface VersionSource {
     versionOf(request: VersionRequest): MaybePromise<Version | undefined>;
@@ -334,7 +368,13 @@ type LimitsOptions = Partial<Omit<DispatcherLimits, "subscriptions">> & {
 declare const DEFAULT_LIMITS: DispatcherLimits;
 /** The pipeline's options: every seam and limit has a default. */
 interface PipelineOptions extends TrackingOptions {
-    /** Receives one entry per call, and the original error of every `INTERNAL` failure. Default: the console. */
+    /**
+     * Receives one entry per call, and the original error of every `INTERNAL`
+     * failure; a Prisma error is summarized (class, code, `meta`, frames),
+     * never its message, which renders the call's values. Default: the
+     * console (`consoleLogger`), which drops `debug` when `NODE_ENV` is
+     * "production"; `createConsoleLogger({ level })` names another level.
+     */
     readonly logger?: Logger;
     /**
      * The access options (`{ cacheMs }`), or an engine of the app's own that
@@ -346,7 +386,11 @@ interface PipelineOptions extends TrackingOptions {
      * Answers query versions for "not modified" replies, for queries that
      * declare no `version` of their own. Default: the version of the row a
      * query returns, for a query whose output is one projection row and whose
-     * input has an `id`: the service's `versionColumn`, or the change log.
+     * input has an `id`: the service's `versionColumn`, or the change log;
+     * only when the method's form checked that row (an `entry` form on `id`, a
+     * `rowless` method, or the service's `Admin` bypass). A source of the
+     * app's own must answer only for rows the form let the caller read: a
+     * version is a one-bit oracle, answered before the handler runs.
      */
     readonly versions?: VersionSource;
     /**
@@ -406,7 +450,8 @@ interface HttpTransportOptions {
      * the cookie a domain; else `"__Host-session"` on a request over HTTPS
      * (`req.secure`, `X-Forwarded-Proto: https` or an `https:` `Origin`),
      * which never reads the plain name a sibling site could plant, and
-     * `"session"` (then `"__Host-session"`) on a plain HTTP one. A name given
+     * `"session"` on a plain HTTP one, where `"__Host-session"` is read first
+     * all the same. A name given
      * here is the only one read, on any request. A name the request repeats
      * counts as no cookie.
      */
@@ -423,8 +468,14 @@ interface HttpTransportOptions {
 /** Options of {@link createHttpRouter}. */
 interface HttpRouterOptions<P extends Principal = Principal> extends HttpTransportOptions {
     /** The dispatcher whose methods the router serves. */
-    readonly dispatcher: Pick<Dispatcher, "call">;
-    /** Authenticates each request, with the same hooks as `createServer`'s `auth`. */
+    readonly dispatcher: Pick<Dispatcher, "call"> & Partial<Pick<Dispatcher, "serviceAccessSource">>;
+    /**
+     * Authenticates each request, with the same hooks as `createServer`'s
+     * `auth`. Its `serviceAccessSource` must be the dispatcher's own (made
+     * with `createDispatcher({ serviceAccessSource })`), or the router throws:
+     * the admin kit protects the grants column only where the dispatcher
+     * names it.
+     */
     readonly auth?: ServerAuth<P>;
     /** Default: the console. */
     readonly logger?: Logger;
@@ -439,4 +490,4 @@ interface HttpRouterOptions<P extends Principal = Principal> extends HttpTranspo
  */
 declare function createHttpRouter<P extends Principal = Principal>(options: HttpRouterOptions<P>): HttpRouter;
 
-export { type AccessOptions as A, type ContractOfServices as C, type Dispatcher as D, type HttpRouter as H, type LimitsOptions as L, type PrincipalOfServices as P, type RegisteredMethod as R, type SharedData as S, type TrackingOptions as T, type VersionRequest as V, type DispatcherOptions as a, type HttpTransportOptions as b, type DispatcherCollections as c, type ChangeLogOptions as d, createDispatcher as e, type DbOfServices as f, type Registry as g, type DispatchRequest as h, type DispatchResult as i, DEFAULT_LIMITS as j, type DispatcherLimits as k, type PipelineOptions as l, type SubscriptionLimits as m, type DispatcherAccess as n, type AccessChange as o, type AccessChangeListener as p, type VersionSource as q, createHttpRouter as r, type HttpMiddleware as s, toCallReply as t, type HttpRouterOptions as u };
+export { type AccessOptions as A, type ContractOfServices as C, type Dispatcher as D, type HttpRouter as H, type LimitsOptions as L, type PrincipalOfServices as P, type RegisteredMethod as R, type SharedData as S, type TrackingOptions as T, type VersionRequest as V, type DispatcherBaseOptions as a, type HttpTransportOptions as b, type DispatcherOptions as c, type DispatcherCollections as d, type ChangeLogOptions as e, createDispatcher as f, type DbOfServices as g, type Registry as h, type DispatchRequest as i, type DispatchResult as j, DEFAULT_LIMITS as k, type DispatcherLimits as l, type PipelineOptions as m, type SubscriptionLimits as n, type DispatcherAccess as o, type AccessChange as p, type AccessChangeListener as q, type VersionSource as r, createHttpRouter as s, toCallReply as t, type HttpMiddleware as u, type HttpRouterOptions as v };

package/dist/index.d.ts

@@ -1,12 +1,12 @@
-export { a as ACE, b as ACL, A as AccessLevel, J as AnyContract, Y as CHANNEL_DEFAULT_RATE, a0 as ChannelDef, a9 as ChannelInputOf, aa as ChannelName, ab as ChannelPayloadOf, a1 as ChannelRequires, C as CollectionDef, ac as CollectionName, ad as CollectionOf, y as CollectionWhere, K as Contract, L as ContractDefinition, ae as ContractMap, D as DEFAULT_COLLECTION_LIMIT, w as DEFAULT_COLLECTION_MAX_LIMIT, af as EntityOf, E as EntityProjection, a2 as EventDef, ag as EventName, ah as EventPayloadOf, ai as FullProjectionOf, Z as GLOBAL_STREAM, aj as IndexFieldOf, R as IndexRow, ak as IndexRowOf, I as InferInput, c as InferOutput, al as InputOf, am as IsScopedStream, an as ItemOf, ao as KindOf, M as MethodDef, k as MethodKind, ap as MethodName, aq as MethodOf, o as MethodOutput, p as MutationDef, N as NullableProjection, O as OrderBy, ar as OutputOf, as as ParsedInputOf, a3 as PayloadSelector, P as ProjectionList, at as ProjectionName, au as ProjectionOf, r as ProjectionRef, Q as QueryDef, av as ReceivedRow, U as ReservedMethodName, a4 as RoomPrefix, a5 as RoomSelector, X as RowSchema, _ as STREAM_MAX_SEED, aw as ScopeOf, s as ServiceModelsWatch, ax as ServiceNameOf, u as ServiceWatch, z as SortDirection, S as StandardJSONSchemaV1, d as StandardSchemaV1, e as StandardSchemaWithJSON, f as StandardTypedV1, a6 as StreamAccess, a7 as StreamDef, ay as StreamItemOf, az as StreamName, a8 as StreamRoom, T as TODO_SCHEMA_VENDOR, g as TodoSchemaOptions, V as ValidationIssue, j as ValidationResult, B as ViaScope, aA as ViewName, G as ViewPredicate, F as Viewer, W as Watch, H as defineContract, h as hasJsonSchema, $ as isScopedStream, i as isStandardSchema, l as listOf, m as mutation, n as nullable, q as query, t as todoSchema, v as validate, x as via } from './infer-Teo1xpsd.js';
-export { L as Logger, c as consoleLogger } from './logger-BY28acW-.js';
-export { A as ADMIN_METHODS, w as AdminContractOptions, x as AdminCreateDef, y as AdminDeleteDef, z as AdminGetDef, D as AdminListDef, E as AdminMetaDef, F as AdminMethodName, G as AdminMethods, H as AdminMethodsOf, J as AdminReemitDef, K as AdminSubscribersDef, M as AdminTag, O as AdminUpdateDef, B as BulkPatch, t as BulkResult, s as CRUD_MAX_IDS, C as CRUD_METHODS, a as CrudBulkDelete, b as CrudBulkUpdate, d as CrudContractOptions, e as CrudCreate, f as CrudDelete, g as CrudGet, h as CrudGetMany, i as CrudInputOptions, j as CrudList, k as CrudListOptions, l as CrudMethodName, m as CrudMethods, n as CrudReorder, o as CrudReorderOptions, p as CrudTag, q as CrudToggle, r as CrudUpdate, I as IdInput, u as IdsInput, P as KitSchema, L as ListInput, N as NumberFieldOf, R as ReorderInput, S as ScalarFieldOf, W as WithId, v as admin, c as crud } from './admin-DKwkIh5i.js';
-export { o as ADMIN_DEFAULT_PAGE_SIZE, A as ADMIN_FIELD_TYPES, p as ADMIN_MAX_PAGE, q as ADMIN_MAX_PAGE_SIZE, k as ADMIN_NEVER_WRITABLE, r as AdminCreateInput, s as AdminCreateQuery, t as AdminData, l as AdminFieldConfig, m as AdminFieldType, u as AdminListInput, v as AdminListQuery, w as AdminMetaInput, x as AdminNeverWritable, y as AdminPage, n as AdminServiceMeta, z as AdminSubscribers, B as AdminUpdateInput, C as AdminUpdateQuery, D as AdminWritable, F as FilterValue, L as LIST_DEFAULT_LIMIT, a as LIST_MAX_LIMIT, b as ListPage, c as ListQuery, d as ListSort, S as SEARCH_DEFAULT_LIMIT, e as SEARCH_DEFAULT_MIN_LENGTH, f as SEARCH_MAX_LIMIT, g as SEARCH_MAX_QUERY_LENGTH, h as SearchInput, i as SearchPage, j as SearchQuery, E as SubscriberLevel } from './adminSchemas-2DUA_hZ8.js';
-export { A as AclMethodName, I as InviteByNameInput, z as InviteByNameQuery, B as InviteInput, C as InviteQuery, L as LeaveInput, D as ListMembersInput, E as ListMembersQuery, F as Member, G as MemberInput, M as MembersMethodName, H as MembersPage, y as SHARE_LEVELS, d as SHARING_METHODS, S as SearchContractOptions, a as SearchDef, b as SearchMethods, c as SearchTag, J as SetRoleInput, K as ShareByNameInput, N as ShareByNameQuery, O as ShareInput, P as ShareLevel, f as SharingByNameMethod, g as SharingContractOptions, h as SharingDefOf, i as SharingInvite, j as SharingInviteByName, k as SharingLeave, l as SharingListMembers, m as SharingListShares, n as SharingMethodName, o as SharingMethods, p as SharingMode, q as SharingRemove, r as SharingSetLevel, t as SharingSetRole, u as SharingShare, v as SharingShareByName, w as SharingTag, x as SharingUnshare, T as TextFieldOf, U as UnshareInput, Q as UserLookupInput, s as search, e as sharing } from './sharing-DVa8W-yR.js';
-export { q as AccessFrame, A as AuthenticationRefused, C as CLIENT_EVENTS, r as CallEnvelope, v as CallId, w as CallNotModified, x as CallReply, y as CallSuccess, z as CancelFrame, B as ChangedFrame, D as ChannelFrame, d as ClientEventName, E as ClientToServerEvents, F as CollectionDelta, G as CollectionFrame, I as CollectionItemsReply, J as CollectionItemsRequest, K as CollectionResumed, L as CollectionScopeRef, M as CollectionSnapshot, N as CollectionSubscribe, O as CollectionSubscribeReply, T as EntityFrame, U as EntityNotModified, V as EntityPatch, W as EntityRemove, X as EntityResult, Y as EntityRow, Z as EntitySubscribe, _ as EntitySubscribeReply, $ as EntityUnsubscribe, a0 as EntityUpdate, a1 as EventFrame, a2 as Failure, H as HandshakeAuth, k as HelloFrame, l as HelloLimits, m as HelloSubscriptionLimits, a3 as Ok, P as PROTOCOL_MISMATCH, g as PROTOCOL_VERSION, a4 as PresenceFrame, n as ProtocolMismatch, Q as QdHandshake, R as RESERVED_ROOM_PREFIXES, a5 as Revision, a7 as RevokeReason, a6 as RevokedFrame, a8 as RotateFrame, S as SERVER_EVENTS, a as SERVICE_TOPIC, f as ServerEventName, a9 as ServerToClientEvents, aa as StreamFrame, ab as StreamSubscribe, ac as StreamSubscribeReply, ad as Version, ae as WatchFrame, af as WireIndexRow, c as collectionRoom, b as collectionTopic, e as entityRoom, i as isAuthenticationRefused, o as isCallEnvelope, p as isCancel, h as isProtocolMismatch, j as isQdHandshake, s as streamRoom, t as topicRoom, u as userRoom } from './envelope-Cp3YcVxC.js';
+export { a as ACE, b as ACL, A as AccessLevel, J as AnyContract, Y as CHANNEL_DEFAULT_RATE, a0 as ChannelDef, a9 as ChannelInputOf, aa as ChannelName, ab as ChannelPayloadOf, a1 as ChannelRequires, C as CollectionDef, ac as CollectionName, ad as CollectionOf, y as CollectionWhere, K as Contract, L as ContractDefinition, ae as ContractMap, D as DEFAULT_COLLECTION_LIMIT, w as DEFAULT_COLLECTION_MAX_LIMIT, af as EntityOf, E as EntityProjection, a2 as EventDef, ag as EventName, ah as EventPayloadOf, ai as FullProjectionOf, Z as GLOBAL_STREAM, aj as IndexFieldOf, R as IndexRow, ak as IndexRowOf, I as InferInput, c as InferOutput, al as InputOf, am as IsScopedStream, an as ItemOf, ao as KindOf, M as MethodDef, k as MethodKind, ap as MethodName, aq as MethodOf, o as MethodOutput, p as MutationDef, N as NullableProjection, O as OrderBy, ar as OutputOf, as as ParsedInputOf, a3 as PayloadSelector, P as ProjectionList, at as ProjectionName, au as ProjectionOf, r as ProjectionRef, Q as QueryDef, av as ReceivedRow, U as ReservedMethodName, a4 as RoomPrefix, a5 as RoomSelector, X as RowSchema, _ as STREAM_MAX_SEED, aw as ScopeOf, s as ServiceModelsWatch, ax as ServiceNameOf, u as ServiceWatch, z as SortDirection, S as StandardJSONSchemaV1, d as StandardSchemaV1, e as StandardSchemaWithJSON, f as StandardTypedV1, a6 as StreamAccess, a7 as StreamDef, ay as StreamItemOf, az as StreamName, a8 as StreamRoom, T as TODO_SCHEMA_VENDOR, g as TodoSchemaOptions, V as ValidationIssue, j as ValidationResult, B as ViaScope, aA as ViewName, G as ViewPredicate, F as Viewer, W as Watch, H as defineContract, h as hasJsonSchema, $ as isScopedStream, i as isStandardSchema, l as listOf, m as mutation, n as nullable, q as query, t as todoSchema, v as validate, x as via } from './infer-BmoZsL9a.js';
+export { C as ConsoleLoggerOptions, b as LogLevel, L as Logger, c as consoleLogger, a as createConsoleLogger } from './logger-Yz93KzdV.js';
+export { A as ADMIN_METHODS, w as AdminContractOptions, x as AdminCreateDef, y as AdminDeleteDef, z as AdminGetDef, D as AdminListDef, E as AdminMetaDef, F as AdminMethodName, G as AdminMethods, H as AdminMethodsOf, J as AdminReemitDef, K as AdminSubscribersDef, M as AdminTag, O as AdminUpdateDef, B as BulkPatch, t as BulkResult, s as CRUD_MAX_IDS, C as CRUD_METHODS, a as CrudBulkDelete, b as CrudBulkUpdate, d as CrudContractOptions, e as CrudCreate, f as CrudDelete, g as CrudGet, h as CrudGetMany, i as CrudInputOptions, j as CrudList, k as CrudListOptions, l as CrudMethodName, m as CrudMethods, n as CrudReorder, o as CrudReorderOptions, p as CrudTag, q as CrudToggle, r as CrudUpdate, I as IdInput, u as IdsInput, P as KitSchema, L as ListInput, N as NumberFieldOf, R as ReorderInput, S as ScalarFieldOf, W as WithId, v as admin, c as crud } from './admin-DWWrT1h6.js';
+export { o as ADMIN_DEFAULT_PAGE_SIZE, A as ADMIN_FIELD_TYPES, p as ADMIN_MAX_PAGE, q as ADMIN_MAX_PAGE_SIZE, k as ADMIN_NEVER_WRITABLE, r as AdminCreateInput, s as AdminCreateQuery, t as AdminData, l as AdminFieldConfig, m as AdminFieldType, u as AdminListInput, v as AdminListQuery, w as AdminMetaInput, x as AdminNeverWritable, y as AdminPage, n as AdminServiceMeta, z as AdminSubscribers, B as AdminUpdateInput, C as AdminUpdateQuery, D as AdminWritable, F as FilterValue, L as LIST_DEFAULT_LIMIT, a as LIST_MAX_LIMIT, b as ListPage, c as ListQuery, d as ListSort, S as SEARCH_DEFAULT_LIMIT, e as SEARCH_DEFAULT_MIN_LENGTH, f as SEARCH_MAX_LIMIT, g as SEARCH_MAX_QUERY_LENGTH, h as SearchInput, i as SearchPage, j as SearchQuery, E as SubscriberLevel } from './adminSchemas-D4bFKsrb.js';
+export { A as AclMethodName, I as InviteByNameInput, z as InviteByNameQuery, B as InviteInput, C as InviteQuery, L as LeaveInput, D as ListMembersInput, E as ListMembersQuery, F as Member, G as MemberInput, M as MembersMethodName, H as MembersPage, y as SHARE_LEVELS, d as SHARING_METHODS, S as SearchContractOptions, a as SearchDef, b as SearchMethods, c as SearchTag, J as SetRoleInput, K as ShareByNameInput, N as ShareByNameQuery, O as ShareInput, P as ShareLevel, f as SharingByNameMethod, g as SharingContractOptions, h as SharingDefOf, i as SharingInvite, j as SharingInviteByName, k as SharingLeave, l as SharingListMembers, m as SharingListShares, n as SharingMethodName, o as SharingMethods, p as SharingMode, q as SharingRemove, r as SharingSetLevel, t as SharingSetRole, u as SharingShare, v as SharingShareByName, w as SharingTag, x as SharingUnshare, T as TextFieldOf, U as UnshareInput, Q as UserLookupInput, s as search, e as sharing } from './sharing-UDLn1049.js';
+export { q as AccessFrame, A as AuthenticationRefused, C as CLIENT_EVENTS, r as CallEnvelope, v as CallId, w as CallNotModified, x as CallReply, y as CallSuccess, z as CancelFrame, B as ChangedFrame, D as ChannelFrame, d as ClientEventName, E as ClientToServerEvents, F as CollectionDelta, G as CollectionFrame, I as CollectionItemsReply, J as CollectionItemsRequest, K as CollectionResumed, L as CollectionScopeRef, M as CollectionSnapshot, N as CollectionSubscribe, O as CollectionSubscribeReply, T as EntityFrame, U as EntityNotModified, V as EntityPatch, W as EntityRemove, X as EntityResult, Y as EntityRow, Z as EntitySubscribe, _ as EntitySubscribeReply, $ as EntityUnsubscribe, a0 as EntityUpdate, a1 as EventFrame, a2 as Failure, H as HandshakeAuth, k as HelloFrame, l as HelloLimits, m as HelloSubscriptionLimits, a3 as Ok, P as PROTOCOL_MISMATCH, g as PROTOCOL_VERSION, a4 as PresenceFrame, n as ProtocolMismatch, Q as QdHandshake, R as RESERVED_ROOM_PREFIXES, a5 as Revision, a7 as RevokeReason, a6 as RevokedFrame, a8 as RotateFrame, S as SERVER_EVENTS, a as SERVICE_TOPIC, f as ServerEventName, a9 as ServerToClientEvents, aa as StreamFrame, ab as StreamSubscribe, ac as StreamSubscribeReply, ad as Version, ae as WatchFrame, af as WireIndexRow, c as collectionRoom, b as collectionTopic, e as entityRoom, i as isAuthenticationRefused, o as isCallEnvelope, p as isCancel, h as isProtocolMismatch, j as isQdHandshake, s as streamRoom, t as topicRoom, u as userRoom } from './envelope-DzWyIXjj.js';
 export { E as ERROR_CODES, a as ErrorCode, Q as QuickdrawError, R as RateLimitedErrorData, V as ValidationErrorData, W as WireError, b as WireIssue, f as fromWire, h as httpStatus, i as isErrorCode, t as toWire } from './errors-S-bxEIBC.js';
 
 /** The published version of `@fitzzero/quickdraw-core`. Kept in step with package.json. */
-declare const QUICKDRAW_VERSION = "5.1.1";
+declare const QUICKDRAW_VERSION = "5.1.2";
 
 export { QUICKDRAW_VERSION };

package/dist/index.js

@@ -4,11 +4,11 @@ import {
   SHARING_METHODS,
   crud,
   sharing
-} from "./chunk-QCHKWIRS.js";
+} from "./chunk-NMXYENH4.js";
 import {
   isCallEnvelope,
   isCancel
-} from "./chunk-QEKVYG5F.js";
+} from "./chunk-RL4VKLBX.js";
 import {
   ADMIN_DEFAULT_PAGE_SIZE,
   ADMIN_FIELD_TYPES,
@@ -29,9 +29,8 @@ import {
   nullable,
   query,
   search
-} from "./chunk-CDKG4TFA.js";
+} from "./chunk-GKH3LJ7N.js";
 import {
-  ACCESS_LEVELS,
   CLIENT_EVENTS,
   PROTOCOL_MISMATCH,
   PROTOCOL_VERSION,
@@ -42,24 +41,30 @@ import {
   collectionRoom,
   collectionTopic,
   entityRoom,
-  isAccessLevel,
   isAuthenticationRefused,
   isProtocolMismatch,
   isQdHandshake,
   reservedRoomPrefix,
+  socketIdShaped,
   streamRoom,
   topicRoom,
   userRoom
-} from "./chunk-VSQBHPWH.js";
+} from "./chunk-753VJIUP.js";
 import {
   CHANNEL_DEFAULT_RATE,
-  DEFAULT_COLLECTION_LIMIT,
-  DEFAULT_COLLECTION_MAX_LIMIT,
   GLOBAL_STREAM,
   STREAM_MAX_SEED,
-  isScopedStream,
+  isScopedStream
+} from "./chunk-5CGO426C.js";
+import {
+  DEFAULT_COLLECTION_LIMIT,
+  DEFAULT_COLLECTION_MAX_LIMIT,
   via
-} from "./chunk-RT6OILOI.js";
+} from "./chunk-4D2DOGAW.js";
+import {
+  ACCESS_LEVELS,
+  isAccessLevel
+} from "./chunk-AK23XSWD.js";
 import {
   TODO_SCHEMA_VENDOR,
   hasJsonSchema,
@@ -68,8 +73,9 @@ import {
   validate
 } from "./chunk-47AEXVDM.js";
 import {
-  consoleLogger
-} from "./chunk-YSWH776Y.js";
+  consoleLogger,
+  createConsoleLogger
+} from "./chunk-DKE6QO26.js";
 import {
   ERROR_CODES,
   QuickdrawError,
@@ -143,6 +149,9 @@ function checkMember(kind, name, value, schemaKey, keys, fail) {
   }
   return value;
 }
+function socketIdProblem(room) {
+  return `room "${room}" has the shape of a Socket.IO socket id (20 letters, digits, "_" or "-"), which ctx.rooms.join refuses: no socket is in it as an app room`;
+}
 function streamRoomProblem(access, scoped) {
   const { room } = access;
   if (Object.keys(access).length !== 1) {
@@ -151,12 +160,18 @@ function streamRoomProblem(access, scoped) {
   if (typeof room === "function") {
     return scoped ? void 0 : "a room computed from the scope needs a scoped stream";
   }
+  if (scoped) {
+    return "a room for a scoped stream is a function of its scope, (scope) => room: a name or { prefix } admits a socket in that room to every scope";
+  }
   const name = isRecord(room) && Object.keys(room).length === 1 ? room.prefix : room;
   if (!isName(name) || name.length > MAX_ROOM_LENGTH) {
     return `room must be an app room's name, { prefix } or a function of the scope, of 1 to ${MAX_ROOM_LENGTH} characters`;
   }
   const reserved = reservedRoomPrefix(name);
-  return reserved === void 0 ? void 0 : `room "${name}" is no app room: names starting with "${reserved}" are the framework's own rooms`;
+  if (reserved !== void 0) {
+    return `room "${name}" is no app room: names starting with "${reserved}" are the framework's own rooms`;
+  }
+  return typeof room === "string" && socketIdShaped(room) ? socketIdProblem(room) : void 0;
 }
 function streamAccessProblem(access, scoped) {
   if (access === "public" || access === "authenticated") {
@@ -255,6 +270,9 @@ function checkRoomRequirement(owner, form, fail) {
       `${owner}: requires.room "${room}" is not an app room: names starting with "${prefix}" are the framework's own rooms, which ctx.rooms.join refuses`
     );
   }
+  if (socketIdShaped(room)) {
+    fail(`${owner}: requires.${socketIdProblem(room)}`);
+  }
 }
 function checkRequires(owner, requires, scope, fail) {
   if (requires === void 0) {
@@ -627,6 +645,11 @@ function assembleContract(name, def) {
   if (!isName2(name)) {
     throw new TypeError("defineContract: the service name must be a non-empty string");
   }
+  if (/[:@]/u.test(name)) {
+    throw new TypeError(
+      `defineContract("${name}"): the service name may not contain ":" or "@": it is part of every room name of the service (qd:e:{service}:{id}@{level}, qd:c:{service}:{collection}:{scope}), which must split one way only`
+    );
+  }
   const fail = (message) => {
     throw new TypeError(`defineContract("${name}"): ${message}`);
   };
@@ -717,6 +740,7 @@ export {
   collectionRoom,
   collectionTopic,
   consoleLogger,
+  createConsoleLogger,
   crud,
   defineContract,
   entityRoom,