@gettersethya/mira-collection 0.1.0-alpha.3 → 0.1.0-alpha.30

package/README.md

@@ -1,164 +1,173 @@
-# @gettersethya/mira-collection
-
-> **Early pre-alpha.** Breaking changes may occur without notice.
-
-Collection definitions, filter DSL, and access rule builder for [Mira](https://github.com/gettersethya/mira). Shared between server and client — isomorphic, no runtime dependencies beyond `effect`.
-
-## Installation
-
-```bash
-npm install @gettersethya/mira-collection effect
-# or
-pnpm add @gettersethya/mira-collection effect
-```
-
-## Collection types
-
-### Base collection
-
-Standard CRUD collection. System fields `id`, `seqId`, `created`, and `updated` are added automatically.
-
-```typescript
-import { BaseCollection, Bytes, Field, Rule } from "@gettersethya/mira-collection"
-
-const Posts = BaseCollection.define("posts", {
-  title:     Field.text({ maxLength: 200 }),
-  slug:      Field.text({ unique: true }),
-  content:   Field.text(),
-  published: Field.boolean({ default: false }),
-  authorId:  Field.relation(Users),
-  thumbnail: Field.file({ maxSize: Bytes.fromMB(5), mimeTypes: ["image/*"] }),
-})
-.indexes((I) => [
-  I.on("authorId"),
-  I.unique("slug"),
-])
-.rules((R) => ({
-  list:   R.field("published").eq(R.literal(true)),
-  view:   Rule.or(R.field("published").eq(R.literal(true)), R.field("authorId").eq(R.authId(Users))),
-  create: R.authId(Users).neq(R.literal(null)),
-  update: R.field("authorId").eq(R.authId(Users)),
-  delete: R.field("authorId").eq(R.authId(Users)),
-}))
-```
-
-### Auth collection
-
-Adds `email`, `password` (hashed), and `emailVerified` system fields. Exposes an `authWithPassword` endpoint.
-
-```typescript
-import { AuthCollection, Field, Rule } from "@gettersethya/mira-collection"
-
-const Users = AuthCollection.define("users", {
-  displayName: Field.text(),
-  username:    Field.text({ unique: true }),
-  role:        Field.text({ default: "user" }),
-})
-.rules((R) => ({
-  list:   Rule.public(),
-  view:   Rule.public(),
-  create: Rule.public(),
-  update: R.selfId().eq(R.authId(Users)),  // users can only edit themselves
-}))
-```
-
-### View collection
-
-Read-only, backed by a SQL `VIEW`. Supports `list` and `view` only. Every field must be marked `.view()`.
-
-```typescript
-import { Field, Rule, ViewCollection } from "@gettersethya/mira-collection"
-
-const PostsWithAuthors = ViewCollection.define(
-  "posts_with_authors",
-  `SELECT p.id, p.seqId, p.title, u.displayName AS authorName
-   FROM posts p LEFT JOIN users u ON p.authorId = u.id`,
-  {
-    id:         Field.text().view(),
-    seqId:      Field.integer().view(),
-    title:      Field.text().view(),
-    authorName: Field.text().view(),
-  }
-)
-.rules((R) => ({ list: Rule.public(), view: Rule.public() }))
-```
-
-## Field types
-
-```typescript
-Field.text({ minLength?, maxLength?, unique?, indexed?, required?, default? })
-Field.email()
-Field.integer({ min?, max?, unique?, indexed?, default? })
-Field.number({ min?, max? })
-Field.boolean({ default? })
-Field.date()
-Field.json()
-Field.file({ maxSize?, mimeTypes?, protected? })
-Field.relation(Collection)
-
-// File size helpers
-Bytes.fromKB(n)
-Bytes.fromMB(n)
-Bytes.fromGB(n)
-```
-
-## Indexes
-
-```typescript
-// Field-level (single column)
-Field.text({ unique: true })   // unique index
-Field.text({ indexed: true })  // non-unique index
-
-// Callback (composite or explicit)
-.indexes((I) => [
-  I.on("authorId"),                 // non-unique
-  I.on("authorId", "published"),    // composite
-  I.unique("slug"),                 // unique constraint
-  I.unique("teamId", "userId"),     // composite unique
-])
-```
-
-## Rules
-
-Rules are evaluated server-side on every request. A missing key means **deny all** for that action.
-
-```typescript
-Rule.public()                                        // allow all
-R.authId(Users).neq(R.literal(null))                // logged-in users only
-R.field("ownerId").eq(R.authId(Users))              // owner-only
-R.field("role").in(R.literal(["admin", "mod"]))     // role check
-R.auth(Users, "role").eq(R.literal("admin"))        // check a field on the auth record
-Rule.not(R.field("archived").eq(R.literal(true)))   // negation
-Rule.or(R.field("isPublic").eq(R.literal(true)), R.field("ownerId").eq(R.authId(Users)))
-Rule.and(R.field("published").eq(R.literal(true)), R.field("ownerId").eq(R.authId(Users)))
-
-// Date arithmetic
-R.field("created").gte(Rule.dateAdd(Rule.now(), -30, "day"))
-
-// Request values (header, query param, or body field)
-Rule.request("header", "x-api-key").eq(R.literal("secret"))
-
-// Subquery membership check
-Rule.subquery(Members, "teamId").where(R.field("userId").eq(R.authId(Users)))
-```
-
-## Filters
-
-Used in client queries. Type-checked against the collection's field types.
-
-```typescript
-f.field("published").eq(true)
-f.field("viewCount").gte(100)
-f.field("status").in(["draft", "published"])
-f.field("title").like("%effect%")
-f.field("deletedAt").null()
-f.field("price").between(10, 100)
-
-f.and(f.field("published").eq(true), f.field("viewCount").gte(100))
-f.or(f.field("category").eq("tech"), f.field("category").eq("science"))
-f.not(f.field("archived").eq(true))
-```
-
-## More
-
-See the [Mira root README](https://github.com/gettersethya/mira) for full documentation.
+# @gettersethya/mira-collection
+
+[![npm](https://img.shields.io/npm/v/@gettersethya/mira-collection)](https://www.npmjs.com/package/@gettersethya/mira-collection)
+
+> **Early pre-alpha.** Breaking changes may occur without notice.
+
+Collection definitions, filter DSL, and access rule builder for [Mira](https://github.com/gettersethya/mira). Shared between server and client — isomorphic, no runtime dependencies beyond `effect`.
+
+## Installation
+
+```bash
+npm install @gettersethya/mira-collection effect
+# or
+pnpm add @gettersethya/mira-collection effect
+```
+
+## Collection types
+
+### Base collection
+
+Standard CRUD collection. System fields `id`, `seqId`, `created`, and `updated` are added automatically.
+
+```typescript
+import { BaseCollection, Bytes, Field } from "@gettersethya/mira-collection"
+
+export const Posts = BaseCollection.define("posts", {
+  title:     Field.text({ maxLength: 200 }),
+  slug:      Field.text({ unique: true }),
+  content:   Field.text(),
+  published: Field.boolean({ default: false }),
+  authorId:  Field.relation(Users),
+  thumbnail: Field.file({ maxSize: Bytes.fromMB(5), mimeTypes: ["image/*"] }),
+})
+.indexes((I) => [
+  I.on("authorId"),
+  I.unique("slug"),
+])
+```
+
+### Auth collection
+
+Adds `email`, `password` (hashed with scrypt on create/update), and `emailVerified` system fields. Exposes an `authWithPassword` endpoint.
+
+```typescript
+import { AuthCollection, Field } from "@gettersethya/mira-collection"
+
+export const Users = AuthCollection.define("users", {
+  displayName: Field.text(),
+  username:    Field.text({ unique: true }),
+  role:        Field.text({ default: "user" }),
+})
+```
+
+### View collection
+
+Read-only, backed by a SQL `VIEW`. Supports `list` and `view` access rules. Every field must be marked `.view()`.
+
+```typescript
+import { Field, ViewCollection } from "@gettersethya/mira-collection"
+
+export const PostsWithAuthors = ViewCollection.define(
+  "posts_with_authors",
+  `SELECT p.id, p.seqId, p.title, u.displayName AS authorName
+   FROM posts p LEFT JOIN users u ON p.authorId = u.id`,
+  {
+    id:         Field.text().view(),
+    seqId:      Field.integer().view(),
+    title:      Field.text().view(),
+    authorName: Field.text().view(),
+  }
+)
+```
+
+Rules for collections are defined server-side using `defineRule()` from `@gettersethya/mira`.
+
+## Type inference
+
+The record and input inference types are exported from `@gettersethya/mira-collection`, so no
+server or client package is required to derive TypeScript types from a collection definition.
+
+```typescript
+import type { InferRecord, InferCreateInput, InferMutationInput } from "@gettersethya/mira-collection"
+import { Posts } from "./collections.js"
+
+type Post    = InferRecord<typeof Posts>         // full record incl. system fields
+type NewPost = InferCreateInput<typeof Posts>    // create input, no system fields
+type Edit    = InferMutationInput<typeof Posts>  // mutation input; file fields are File | Blob
+```
+
+Also exported: `RelationKeys`, `FileKeys`, `WithExpand`, `CollectionKind`, `CreateInput`,
+`UpdateInput`, `AuthCreateInput`, `AuthUpdateInput`, `RegisterInput`, and `AnyAuthCollectionDef`.
+
+## Field types
+
+```typescript
+Field.text({ minLength?, maxLength?, unique?, indexed?, required?, default? })
+Field.literalText({ literal: ["a", "b"], default? })
+Field.email()
+Field.integer({ min?, max?, unique?, indexed?, default? })
+Field.number({ min?, max? })
+Field.boolean({ default? })
+Field.date()
+Field.json()
+Field.file({ maxSize?, mimeTypes?, protected? })
+Field.relation(Collection)
+
+// File size helpers
+Bytes.fromKB(n)
+Bytes.fromMB(n)
+Bytes.fromGB(n)
+Bytes.fromTB(n)
+```
+
+## Indexes
+
+```typescript
+// Field-level (single column)
+Field.text({ unique: true })   // unique index
+Field.text({ indexed: true })  // non-unique index
+
+// Callback (composite or explicit)
+.indexes((I) => [
+  I.on("authorId"),                 // non-unique
+  I.on("authorId", "published"),    // composite
+  I.unique("slug"),                 // unique constraint
+  I.unique("teamId", "userId"),     // composite unique
+])
+```
+
+## Rules
+
+Rules are evaluated server-side on every request. A missing key means **deny all** for that action.
+
+```typescript
+Rule.public()                                        // allow all
+R.authId(Users).neq(R.literal(""))                  // logged-in users only
+R.field("ownerId").eq(R.authId(Users))              // owner-only
+R.field("role").in(R.literal(["admin", "mod"]))     // role check
+R.auth(Users, "role").eq(R.literal("admin"))        // check a field on the auth record
+Rule.not(R.field("archived").eq(R.literal(true)))   // negation
+Rule.or(R.field("isPublic").eq(R.literal(true)), R.field("ownerId").eq(R.authId(Users)))
+Rule.and(R.field("published").eq(R.literal(true)), R.field("ownerId").eq(R.authId(Users)))
+
+// Date arithmetic
+R.field("created").gte(Rule.dateAdd(Rule.now(), -30, "day"))
+
+// Request values (header, query param, or body field)
+Rule.request("header", "x-api-key").eq(R.literal("secret"))
+
+// Subquery membership check
+Rule.subquery(Members, "teamId").where(R.field("userId").eq(R.authId(Users)))
+```
+
+## Filters
+
+Used in client queries. Type-checked against the collection's field types.
+
+```typescript
+f.field("published").eq(true)
+f.field("viewCount").gte(100)
+f.field("status").in(["draft", "published"])
+f.field("title").like("%effect%")
+f.field("deletedAt").null()
+f.field("price").between(10, 100)
+
+f.and(f.field("published").eq(true), f.field("viewCount").gte(100))
+f.or(f.field("category").eq("tech"), f.field("category").eq("science"))
+f.not(f.field("archived").eq(true))
+```
+
+## More
+
+See the [Mira root README](https://github.com/gettersethya/mira) for full documentation.

package/dist/src/collection/auth.d.ts

@@ -1,46 +1,26 @@
-import type { RuleBuilder } from "../rule/builder.js";
-import type { RuleMap } from "../rule/types.js";
-import type { OperandNode } from "../rule/types.js";
 import type { IndexBuilder, IndexEntry } from "./index-builder.js";
 import type { CollectionSchema, FieldDef, FieldsMap } from "./types.js";
 type AuthSystemField = "id" | "email" | "password" | "emailVerified" | "created" | "updated" | "seqId";
 type AuthRuleField = "id" | "email" | "emailVerified" | "created" | "updated" | "seqId";
-type AuthSystemFieldDefs = {
-    id: FieldDef & {
-        kind: "text";
-    };
+/** Only the auth-specific fields not already provided by InferRecord's base type. */
+type AuthPublicFieldDefs = {
     email: FieldDef & {
         kind: "email";
     };
     emailVerified: FieldDef & {
         kind: "boolean";
     };
-    created: FieldDef & {
-        kind: "date";
-    };
-    updated: FieldDef & {
-        kind: "date";
-    };
-    seqId: FieldDef & {
-        kind: "seqId";
-    };
-};
-/** Rule builder for auth collections — extends RuleBuilder with `selfId()`. */
-type AuthRuleBuilder<F extends FieldsMap> = RuleBuilder<F> & {
-    /** authId operand for this collection. Use instead of `Rule.authId(ThisCollection)` to avoid circular references. */
-    selfId(): OperandNode<any, string>;
 };
 type IndexCb<F extends FieldsMap> = (I: IndexBuilder<(keyof F & string) | AuthRuleField>) => Array<IndexEntry<(keyof F & string) | AuthRuleField>>;
-type RuleCb<F extends FieldsMap> = (R: AuthRuleBuilder<F & AuthSystemFieldDefs>) => RuleMap;
 /**
  * Builder returned by `AuthCollection.define()`.
  * Immediately satisfies `AnyCollectionDef` — no terminal `.build()` needed.
- * Chain `.indexes()` and/or `.rules()` to add optional concerns.
+ * Chain `.indexes()` to add optional indexes.
  * Each chained method returns a new builder; the original is unchanged.
  */
 export type AuthCollectionBuilder<F extends FieldsMap> = {
     name: string;
-    fields: F;
+    fields: F & AuthPublicFieldDefs;
     schema: CollectionSchema & {
         "x-collection-kind": "auth";
     };
@@ -50,12 +30,6 @@ export type AuthCollectionBuilder<F extends FieldsMap> = {
      * Pass a callback to get a typed index builder with auto-completion over field names.
      */
     indexes(cb: IndexCb<F>): AuthCollectionBuilder<F>;
-    /**
-     * Add per-action access rules. No rule means deny all.
-     * The rule builder includes `.selfId()` as a shorthand for the authenticated user's id
-     * on this collection — use it instead of `Rule.authId(ThisCollection)` to avoid circular references.
-     */
-    rules(cb: RuleCb<F>): AuthCollectionBuilder<F>;
 };
 /**
  * Defines an auth collection for user authentication.
@@ -67,10 +41,6 @@ export type AuthCollectionBuilder<F extends FieldsMap> = {
  *   name: Field.text(),
  *   avatar: Field.file({ maxSize: Bytes.fromMB(2) })
  * })
- * .rules((R) => ({
- *   list: R.field("id").eq(R.selfId()),
- *   create: R.public()
- * }))
  */
 export declare const AuthCollection: {
     define<F extends FieldsMap & { [K in keyof F & AuthSystemField]?: never; }>(name: string, extraFields: F): AuthCollectionBuilder<F>;

package/dist/src/collection/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/collection/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAgC,MAAM,YAAY,CAAA;AAErG,KAAK,eAAe,GAAG,IAAI,GAAG,OAAO,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AACtG,KAAK,aAAa,GAAG,IAAI,GAAG,OAAO,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AAEvF,KAAK,mBAAmB,GAAG;IACzB,EAAE,EAAa,QAAQ,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,KAAK,EAAU,QAAQ,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAA;IAC3C,aAAa,EAAE,QAAQ,GAAG;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAA;IAC7C,OAAO,EAAQ,QAAQ,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,OAAO,EAAQ,QAAQ,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,KAAK,EAAU,QAAQ,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAA;CAC5C,CAAA;AAED,+EAA+E;AAC/E,KAAK,eAAe,CAAC,CAAC,SAAS,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG;IAC3D,qHAAqH;IACrH,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;CACnC,CAAA;AAED,KAAK,OAAO,CAAC,CAAC,SAAS,SAAS,IAAI,CAClC,CAAC,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,aAAa,CAAC,KAChD,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAA;AAE1D,KAAK,MAAM,CAAC,CAAC,SAAS,SAAS,IAAI,CACjC,CAAC,EAAE,eAAe,CAAC,CAAC,GAAG,mBAAmB,CAAC,KACxC,OAAO,CAAA;AAEZ;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,SAAS,IAAI;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,CAAC,CAAA;IACT,MAAM,EAAE,gBAAgB,GAAG;QAAE,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;IACjD;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;CAC/C,CAAA;AAqCD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,cAAc;WAClB,CAAC,SAAS,SAAS,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,GAAE,QACjE,MAAM,eACC,CAAC,GACb,qBAAqB,CAAC,CAAC,CAAC;CAG5B,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/collection/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAGlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAgC,MAAM,YAAY,CAAA;AAErG,KAAK,eAAe,GAAG,IAAI,GAAG,OAAO,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AACtG,KAAK,aAAa,GAAG,IAAI,GAAG,OAAO,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AAEvF,qFAAqF;AACrF,KAAK,mBAAmB,GAAG;IACzB,KAAK,EAAU,QAAQ,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAA;IAC3C,aAAa,EAAE,QAAQ,GAAG;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAA;CAC9C,CAAA;AAED,KAAK,OAAO,CAAC,CAAC,SAAS,SAAS,IAAI,CAClC,CAAC,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,aAAa,CAAC,KAChD,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,SAAS,IAAI;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,CAAC,GAAG,mBAAmB,CAAA;IAC/B,MAAM,EAAE,gBAAgB,GAAG;QAAE,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;CAClD,CAAA;AAuCD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc;WAClB,CAAC,SAAS,SAAS,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,GAAE,QACjE,MAAM,eACC,CAAC,GACb,qBAAqB,CAAC,CAAC,CAAC;CAG5B,CAAA"}

package/dist/src/collection/auth.js

@@ -1,30 +1,31 @@
-import { makeRuleBuilder } from "../rule/builder.js";
 import { Index } from "./index-builder.js";
 import { toJSONSchema } from "./serialize.js";
 const AUTH_SYSTEM_PROPERTIES = {
     email: { type: "string", format: "email", "x-system": true },
-    password: { type: "string", "x-system": true, "x-hidden": true },
+    password: { type: "string", "x-system": true, "x-hidden": true, "x-kind": "password" },
     emailVerified: { type: "boolean", "x-system": true, default: false }
 };
+const AUTH_SYSTEM_FIELD_DEFS = {
+    email: { _tag: "FieldDef", kind: "email" },
+    emailVerified: { _tag: "FieldDef", kind: "boolean" },
+};
 const AUTH_SYSTEM_INDEXES = [{ fields: ["email"], unique: true }];
-function makeAuthBuilder(name, extraFields, indexesCb, rulesCb) {
-    const indexes = indexesCb?.(Index);
-    const authRuleBuilder = {
-        ...makeRuleBuilder(),
-        selfId() { return { kind: "authId", collection: name }; }
-    };
-    const rules = rulesCb?.(authRuleBuilder);
-    const schema = toJSONSchema("auth", name, extraFields, {
-        indexes: [...AUTH_SYSTEM_INDEXES, ...(indexes ?? [])],
-        systemFields: AUTH_SYSTEM_PROPERTIES,
-        ...(rules !== undefined ? { rules } : {})
-    });
+function makeAuthBuilder(name, extraFields, indexesCb) {
+    let _schema;
     return {
         name,
-        fields: extraFields,
-        schema,
-        indexes: (cb) => makeAuthBuilder(name, extraFields, cb, rulesCb),
-        rules: (cb) => makeAuthBuilder(name, extraFields, indexesCb, cb)
+        fields: Object.assign({}, AUTH_SYSTEM_FIELD_DEFS, extraFields),
+        get schema() {
+            if (_schema === undefined) {
+                const indexes = indexesCb?.(Index);
+                _schema = toJSONSchema("auth", name, extraFields, {
+                    indexes: [...AUTH_SYSTEM_INDEXES, ...(indexes ?? [])],
+                    systemFields: AUTH_SYSTEM_PROPERTIES,
+                });
+            }
+            return _schema;
+        },
+        indexes: (cb) => makeAuthBuilder(name, extraFields, cb)
     };
 }
 /**
@@ -37,10 +38,6 @@ function makeAuthBuilder(name, extraFields, indexesCb, rulesCb) {
  *   name: Field.text(),
  *   avatar: Field.file({ maxSize: Bytes.fromMB(2) })
  * })
- * .rules((R) => ({
- *   list: R.field("id").eq(R.selfId()),
- *   create: R.public()
- * }))
  */
 export const AuthCollection = {
     define(name, extraFields) {

package/dist/src/collection/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/collection/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAInD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAqD7C,MAAM,sBAAsB,GAAuC;IACjE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;IAC5D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;IAChE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;CACrE,CAAA;AAED,MAAM,mBAAmB,GAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAElF,SAAS,eAAe,CACtB,IAAY,EACZ,WAAc,EACd,SAAsB,EACtB,OAAmB;IAGnB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,KAAyB,CAAC,CAAA;IACtD,MAAM,eAAe,GAA6C;QAChE,GAAG,eAAe,EAA2B;QAC7C,MAAM,KAA+B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA,CAAC,CAAC;KACnF,CAAA;IACD,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,eAAe,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE;QACrD,OAAO,EAAE,CAAC,GAAG,mBAAmB,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrD,YAAY,EAAE,sBAAsB;QACpC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;IACF,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,WAAW;QACnB,MAAM;QACN,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC;QAChE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC;KACjE,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM,CACJ,IAAY,EACZ,WAAc;QAEd,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC3C,CAAC;CACF,CAAA"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/collection/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAkC7C,MAAM,sBAAsB,GAAuC;IACjE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;IAC5D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE;IACtF,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;CACrE,CAAA;AAED,MAAM,sBAAsB,GAAwB;IAClD,KAAK,EAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;IAClD,aAAa,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;CACrD,CAAA;AAED,MAAM,mBAAmB,GAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAElF,SAAS,eAAe,CACtB,IAAY,EACZ,WAAc,EACd,SAAsB;IAGtB,IAAI,OAAyE,CAAA;IAC7E,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,sBAAsB,EAAE,WAAW,CAAC;QAC9D,IAAI,MAAM;YACR,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,KAAyB,CAAC,CAAA;gBACtD,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE;oBAChD,OAAO,EAAE,CAAC,GAAG,mBAAmB,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;oBACrD,YAAY,EAAE,sBAAsB;iBACrC,CAAuD,CAAA;YAC1D,CAAC;YACD,OAAO,OAAQ,CAAA;QACjB,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;KACxD,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM,CACJ,IAAY,EACZ,WAAc;QAEd,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC3C,CAAC;CACF,CAAA"}

package/dist/src/collection/base.d.ts

@@ -1,45 +1,25 @@
-import type { RuleBuilder } from "../rule/builder.js";
-import type { RuleMap } from "../rule/types.js";
 import type { IndexBuilder, IndexEntry } from "./index-builder.js";
-import type { CollectionSchema, FieldDef, FieldsMap } from "./types.js";
+import type { CollectionSchema, FieldsMap } from "./types.js";
 type BaseForbiddenField = "id" | "seqId";
 type BaseSystemField = "id" | "seqId" | "created" | "updated";
-type BaseSystemFieldDefs = {
-    id: FieldDef & {
-        kind: "text";
-    };
-    created: FieldDef & {
-        kind: "date";
-    };
-    updated: FieldDef & {
-        kind: "date";
-    };
-    seqId: FieldDef & {
-        kind: "seqId";
-    };
-};
 type IndexCb<F extends FieldsMap> = (I: IndexBuilder<(keyof F & string) | BaseSystemField>) => Array<IndexEntry<(keyof F & string) | BaseSystemField>>;
-type RuleCb<F extends FieldsMap> = (R: RuleBuilder<F & BaseSystemFieldDefs>) => RuleMap;
 /**
  * Builder returned by `BaseCollection.define()`.
  * Immediately satisfies `AnyCollectionDef` — no terminal `.build()` needed.
- * Chain `.indexes()` and/or `.rules()` to add optional concerns.
+ * Chain `.indexes()` to add optional indexes.
  * Each chained method returns a new builder; the original is unchanged.
  */
 export type BaseCollectionBuilder<F extends FieldsMap> = {
-    name: string;
-    fields: F;
-    schema: CollectionSchema;
+    readonly name: string;
+    readonly fields: F;
+    readonly schema: CollectionSchema & {
+        "x-collection-kind": "base";
+    };
     /**
      * Add collection-level indexes (in addition to field-level `unique`/`indexed` flags).
      * Pass a callback to get a typed index builder with auto-completion over field names.
      */
     indexes(cb: IndexCb<F>): BaseCollectionBuilder<F>;
-    /**
-     * Add per-action access rules. No rule means deny all.
-     * Pass a callback to get a typed rule builder with auto-completion over field names.
-     */
-    rules(cb: RuleCb<F>): BaseCollectionBuilder<F>;
 };
 /**
  * Defines a standard data collection.
@@ -52,10 +32,6 @@ export type BaseCollectionBuilder<F extends FieldsMap> = {
  *   ownerId: Field.text()
  * })
  * .indexes((I) => [I.on("ownerId")])
- * .rules((R) => ({
- *   list: Rule.public(),
- *   view: R.field("ownerId").eq(R.authId(Users))
- * }))
  */
 export declare const BaseCollection: {
     define<F extends FieldsMap & { [K in keyof F & BaseForbiddenField]?: never; }>(name: string, fields: F): BaseCollectionBuilder<F>;

package/dist/src/collection/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/collection/base.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEvE,KAAK,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAA;AACxC,KAAK,eAAe,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAA;AAE7D,KAAK,mBAAmB,GAAG;IACzB,EAAE,EAAO,QAAQ,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACpC,OAAO,EAAE,QAAQ,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACpC,OAAO,EAAE,QAAQ,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACpC,KAAK,EAAI,QAAQ,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAA;CACtC,CAAA;AAED,KAAK,OAAO,CAAC,CAAC,SAAS,SAAS,IAAI,CAClC,CAAC,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,eAAe,CAAC,KAClD,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAA;AAE5D,KAAK,MAAM,CAAC,CAAC,SAAS,SAAS,IAAI,CACjC,CAAC,EAAE,WAAW,CAAC,CAAC,GAAG,mBAAmB,CAAC,KACpC,OAAO,CAAA;AAEZ;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,SAAS,IAAI;IACvD,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,CAAC,CAAA;IACT,MAAM,EAAE,gBAAgB,CAAA;IACxB;;;OAGG;IACH,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;IACjD;;;OAGG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;CAC/C,CAAA;AAwBD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc;WAClB,CAAC,SAAS,SAAS,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,EAAE,KAAK,GAAE,QACpE,MAAM,UACJ,CAAC,GACR,qBAAqB,CAAC,CAAC,CAAC;CAG5B,CAAA"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/collection/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAGlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE7D,KAAK,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAA;AACxC,KAAK,eAAe,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAA;AAE7D,KAAK,OAAO,CAAC,CAAC,SAAS,SAAS,IAAI,CAClC,CAAC,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,eAAe,CAAC,KAClD,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAA;AAE5D;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,SAAS,IAAI;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG;QAAE,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAA;IACnE;;;OAGG;IACH,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;CAClD,CAAA;AAyBD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc;WAClB,CAAC,SAAS,SAAS,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,EAAE,KAAK,GAAE,QACpE,MAAM,UACJ,CAAC,GACR,qBAAqB,CAAC,CAAC,CAAC;CAG5B,CAAA"}

package/dist/src/collection/base.js

@@ -1,19 +1,20 @@
-import { makeRuleBuilder } from "../rule/builder.js";
 import { Index } from "./index-builder.js";
 import { toJSONSchema } from "./serialize.js";
-function makeBaseBuilder(name, fields, indexesCb, rulesCb) {
-    const indexes = indexesCb?.(Index);
-    const rules = rulesCb?.(makeRuleBuilder());
-    const schema = toJSONSchema("base", name, fields, {
-        ...(indexes !== undefined ? { indexes } : {}),
-        ...(rules !== undefined ? { rules } : {})
-    });
+function makeBaseBuilder(name, fields, indexesCb) {
+    let _schema;
     return {
         name,
         fields,
-        schema,
-        indexes: (cb) => makeBaseBuilder(name, fields, cb, rulesCb),
-        rules: (cb) => makeBaseBuilder(name, fields, indexesCb, cb)
+        get schema() {
+            if (_schema === undefined) {
+                const indexes = indexesCb?.(Index);
+                _schema = toJSONSchema("base", name, fields, {
+                    ...(indexes !== undefined ? { indexes } : {})
+                });
+            }
+            return _schema;
+        },
+        indexes: (cb) => makeBaseBuilder(name, fields, cb)
     };
 }
 /**
@@ -27,10 +28,6 @@ function makeBaseBuilder(name, fields, indexesCb, rulesCb) {
  *   ownerId: Field.text()
  * })
  * .indexes((I) => [I.on("ownerId")])
- * .rules((R) => ({
- *   list: Rule.public(),
- *   view: R.field("ownerId").eq(R.authId(Users))
- * }))
  */
 export const BaseCollection = {
     define(name, fields) {

package/dist/src/collection/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/collection/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AA2C7C,SAAS,eAAe,CACtB,IAAY,EACZ,MAAS,EACT,SAAsB,EACtB,OAAmB;IAGnB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,KAAyB,CAAC,CAAA;IACtD,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,eAAe,EAA2B,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;QAChD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;IACF,OAAO;QACL,IAAI;QACJ,MAAM;QACN,MAAM;QACN,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC;QAC3D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;KAC5D,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM,CACJ,IAAY,EACZ,MAAS;QAET,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACtC,CAAC;CACF,CAAA"}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/collection/base.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AA2B7C,SAAS,eAAe,CACtB,IAAY,EACZ,MAAS,EACT,SAAsB;IAGtB,IAAI,OAAyE,CAAA;IAC7E,OAAO;QACL,IAAI;QACJ,MAAM;QACN,IAAI,MAAM;YACR,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,KAAyB,CAAC,CAAA;gBACtD,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;oBAC3C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9C,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,OAAQ,CAAA;QACjB,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;KACnD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM,CACJ,IAAY,EACZ,MAAS;QAET,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACtC,CAAC;CACF,CAAA"}