@graffiti-garden/api 1.0.0 → 1.0.2

package/dist/tests.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../tests/utils.ts"],
-  "sourcesContent": ["import { assert } from \"vitest\";\nimport type {\n  GraffitiPostObject,\n  GraffitiObjectStream,\n  JSONSchema,\n  GraffitiObject,\n  GraffitiObjectStreamReturn,\n  GraffitiObjectStreamContinue,\n  Graffiti,\n  GraffitiSession,\n} from \"@graffiti-garden/api\";\n\nexport function randomString(): string {\n  const array = new Uint8Array(16);\n  crypto.getRandomValues(array);\n  const str = Array.from(array)\n    .map((b) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n\n  // check for unicode support\n  return str + \"\uD83D\uDC69\uD83C\uDFFD\u200D\u2764\uFE0F\u200D\uD83D\uDC8B\u200D\uD83D\uDC69\uD83C\uDFFB\uD83E\uDEF1\uD83C\uDFFC\u200D\uD83E\uDEF2\uD83C\uDFFF\";\n}\n\nexport function randomValue() {\n  return {\n    [randomString()]: randomString(),\n  };\n}\n\nexport function randomPostObject(): GraffitiPostObject<{}> {\n  return {\n    value: randomValue(),\n    channels: [randomString(), randomString()],\n  };\n}\n\nexport async function nextStreamValue<Schema extends JSONSchema>(\n  iterator: GraffitiObjectStream<Schema>,\n): Promise<GraffitiObject<Schema>> {\n  const result = await iterator.next();\n  assert(!result.done && !result.value.error, \"result has no value\");\n  assert(!result.value.tombstone, \"result has been deleted!\");\n  return result.value.object;\n}\n\nexport function continueStream<Schema extends JSONSchema>(\n  graffiti: Pick<Graffiti, \"continueDiscover\">,\n  streamReturn: GraffitiObjectStreamReturn<Schema>,\n  type: \"cursor\" | \"continue\",\n  session?: GraffitiSession | null,\n): GraffitiObjectStreamContinue<Schema> {\n  if (type === \"cursor\") {\n    return graffiti.continueDiscover(\n      streamReturn.cursor,\n      session,\n    ) as unknown as GraffitiObjectStreamContinue<Schema>;\n  } else {\n    return streamReturn.continue();\n  }\n}\n"],
-  "mappings": ";AAAA,SAAS,cAAc;AAYhB,SAAS,eAAuB;AACrC,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,SAAO,gBAAgB,KAAK;AAC5B,QAAM,MAAM,MAAM,KAAK,KAAK,EACzB,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAGV,SAAO,MAAM;AACf;AAEO,SAAS,cAAc;AAC5B,SAAO;AAAA,IACL,CAAC,aAAa,CAAC,GAAG,aAAa;AAAA,EACjC;AACF;AAEO,SAAS,mBAA2C;AACzD,SAAO;AAAA,IACL,OAAO,YAAY;AAAA,IACnB,UAAU,CAAC,aAAa,GAAG,aAAa,CAAC;AAAA,EAC3C;AACF;AAEA,eAAsB,gBACpB,UACiC;AACjC,QAAM,SAAS,MAAM,SAAS,KAAK;AACnC,SAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM,OAAO,qBAAqB;AACjE,SAAO,CAAC,OAAO,MAAM,WAAW,0BAA0B;AAC1D,SAAO,OAAO,MAAM;AACtB;AAEO,SAAS,eACd,UACA,cACA,MACA,SACsC;AACtC,MAAI,SAAS,UAAU;AACrB,WAAO,SAAS;AAAA,MACd,aAAa;AAAA,MACb;AAAA,IACF;AAAA,EACF,OAAO;AACL,WAAO,aAAa,SAAS;AAAA,EAC/B;AACF;",
-  "names": []
+  "sources": ["../tests/crud.ts", "../tests/utils.ts", "../tests/discover.ts", "../tests/media.ts"],
+  "sourcesContent": ["import { it, expect, describe, beforeAll } from \"vitest\";\nimport type {\n  Graffiti,\n  GraffitiSession,\n  JSONSchema,\n} from \"@graffiti-garden/api\";\nimport {\n  GraffitiErrorNotFound,\n  GraffitiErrorSchemaMismatch,\n  GraffitiErrorInvalidSchema,\n  GraffitiErrorForbidden,\n} from \"@graffiti-garden/api\";\nimport { randomPostObject, randomString } from \"./utils\";\n\nexport const graffitiCRUDTests = (\n  useGraffiti: () => Pick<Graffiti, \"post\" | \"get\" | \"delete\">,\n  useSession1: () => GraffitiSession | Promise<GraffitiSession>,\n  useSession2: () => GraffitiSession | Promise<GraffitiSession>,\n) => {\n  describe.concurrent(\n    \"CRUD\",\n    {\n      timeout: 20000,\n    },\n    () => {\n      let graffiti: ReturnType<typeof useGraffiti>;\n      let session: GraffitiSession;\n      let session1: GraffitiSession;\n      let session2: GraffitiSession;\n      beforeAll(async () => {\n        graffiti = useGraffiti();\n        session1 = await useSession1();\n        session = session1;\n        session2 = await useSession2();\n      });\n\n      it(\"post, get, delete\", async () => {\n        const value = {\n          something: \"hello, world~ c:\",\n        };\n        const channels = [randomString(), randomString()];\n\n        // Post the object\n        const previous = await graffiti.post<{}>({ value, channels }, session);\n        expect(previous.value).toEqual(value);\n        expect(previous.channels).toEqual(channels);\n        expect(previous.allowed).toEqual(undefined);\n        expect(previous.actor).toEqual(session.actor);\n\n        // Get it back\n        const gotten = await graffiti.get(previous, {});\n        expect(gotten.value).toEqual(value);\n        expect(gotten.channels).toEqual([]);\n        expect(gotten.allowed).toBeUndefined();\n        expect(gotten.url).toEqual(previous.url);\n        expect(gotten.actor).toEqual(previous.actor);\n\n        // Delete it\n        await graffiti.delete(gotten, session);\n\n        // Get is not found\n        await expect(graffiti.get(gotten, {})).rejects.toBeInstanceOf(\n          GraffitiErrorNotFound,\n        );\n\n        // Delete it again\n        await expect(graffiti.delete(gotten, session)).rejects.toThrow(\n          GraffitiErrorNotFound,\n        );\n      });\n\n      it(\"post then delete with wrong actor\", async () => {\n        const posted = await graffiti.post<{}>(\n          { value: {}, channels: [] },\n          session2,\n        );\n\n        await expect(graffiti.delete(posted, session1)).rejects.toThrow(\n          GraffitiErrorForbidden,\n        );\n      });\n\n      it(\"post and get with schema\", async () => {\n        const schema = {\n          properties: {\n            value: {\n              properties: {\n                something: {\n                  type: \"string\",\n                },\n                another: {\n                  type: \"array\",\n                  items: {\n                    type: \"number\",\n                  },\n                },\n                deeper: {\n                  type: \"object\",\n                  properties: {\n                    deepProp: {\n                      type: \"string\",\n                    },\n                  },\n                  required: [\"deepProp\"],\n                },\n              },\n              required: [\"another\", \"deeper\"],\n            },\n          },\n        } as const satisfies JSONSchema;\n\n        const goodValue = {\n          something: \"hello\",\n          another: [1, 2, 3],\n          deeper: {\n            deepProp: \"hello\",\n          },\n        };\n\n        const posted = await graffiti.post<typeof schema>(\n          {\n            value: goodValue,\n            channels: [],\n          },\n          session,\n        );\n        const gotten = await graffiti.get(posted, schema);\n\n        expect(gotten.value.something).toEqual(goodValue.something);\n        expect(gotten.value.another).toEqual(goodValue.another);\n        expect(gotten.value.another[0]).toEqual(1);\n        expect(gotten.value.deeper.deepProp).toEqual(goodValue.deeper.deepProp);\n      });\n\n      it(\"post and get with invalid schema\", async () => {\n        const posted = await graffiti.post<{}>(\n          { value: {}, channels: [] },\n          session,\n        );\n        await expect(\n          graffiti.get(posted, {\n            properties: {\n              value: {\n                //@ts-ignore\n                type: \"asdf\",\n              },\n            },\n          }),\n        ).rejects.toThrow(GraffitiErrorInvalidSchema);\n      });\n\n      it(\"post and get with wrong schema\", async () => {\n        const posted = await graffiti.post<{}>(\n          {\n            value: {\n              hello: \"world\",\n            },\n            channels: [],\n          },\n          session,\n        );\n\n        await expect(\n          graffiti.get(posted, {\n            properties: {\n              value: {\n                properties: {\n                  hello: {\n                    type: \"number\",\n                  },\n                },\n              },\n            },\n          }),\n        ).rejects.toThrow(GraffitiErrorSchemaMismatch);\n      });\n\n      it(\"post and get with empty access control\", async () => {\n        const value = {\n          um: \"hi\",\n        };\n        const allowed = [randomString()];\n        const channels = [randomString()];\n        const posted = await graffiti.post<{}>(\n          { value, allowed, channels },\n          session1,\n        );\n\n        // Get it with authenticated session\n        const gotten = await graffiti.get(posted, {}, session1);\n        expect(gotten.url).toEqual(posted.url);\n        expect(gotten.actor).toEqual(session1.actor);\n        expect(gotten.value).toEqual(value);\n        expect(gotten.allowed).toEqual(allowed);\n        expect(gotten.channels).toEqual(channels);\n\n        // But not without session\n        await expect(graffiti.get(posted, {})).rejects.toBeInstanceOf(\n          GraffitiErrorNotFound,\n        );\n\n        // Or the wrong session\n        await expect(graffiti.get(posted, {}, session2)).rejects.toBeInstanceOf(\n          GraffitiErrorNotFound,\n        );\n      });\n\n      it(\"post and get with specific access control\", async () => {\n        const value = {\n          um: \"hi\",\n        };\n        const allowed = [randomString(), session2.actor, randomString()];\n        const channels = [randomString()];\n        const posted = await graffiti.post<{}>(\n          {\n            value,\n            allowed,\n            channels,\n          },\n          session1,\n        );\n\n        // Get it with authenticated session\n        const gotten = await graffiti.get(posted, {}, session1);\n        expect(gotten.url).toEqual(posted.url);\n        expect(gotten.actor).toEqual(session1.actor);\n        expect(gotten.value).toEqual(value);\n        expect(gotten.allowed).toEqual(allowed);\n        expect(gotten.channels).toEqual(channels);\n\n        // But not without session\n        await expect(graffiti.get(posted, {})).rejects.toBeInstanceOf(\n          GraffitiErrorNotFound,\n        );\n\n        const gotten2 = await graffiti.get(posted, {}, session2);\n        expect(gotten.url).toEqual(posted.url);\n        expect(gotten.actor).toEqual(session1.actor);\n        expect(gotten2.value).toEqual(value);\n        // They should only see that is is private to them\n        expect(gotten2.allowed).toEqual([session2.actor]);\n        // And not see any channels\n        expect(gotten2.channels).toEqual([]);\n      });\n    },\n  );\n};\n", "import { assert } from \"vitest\";\nimport type {\n  GraffitiPostObject,\n  GraffitiObjectStream,\n  JSONSchema,\n  GraffitiObject,\n  GraffitiObjectStreamReturn,\n  GraffitiObjectStreamContinue,\n  Graffiti,\n  GraffitiSession,\n} from \"@graffiti-garden/api\";\n\nexport function randomString(): string {\n  const array = new Uint8Array(16);\n  crypto.getRandomValues(array);\n  const str = Array.from(array)\n    .map((b) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n\n  // check for unicode support\n  return str + \"\uD83D\uDC69\uD83C\uDFFD\u200D\u2764\uFE0F\u200D\uD83D\uDC8B\u200D\uD83D\uDC69\uD83C\uDFFB\uD83E\uDEF1\uD83C\uDFFC\u200D\uD83E\uDEF2\uD83C\uDFFF\";\n}\n\nexport function randomValue() {\n  return {\n    [randomString()]: randomString(),\n  };\n}\n\nexport function randomPostObject(): GraffitiPostObject<{}> {\n  return {\n    value: randomValue(),\n    channels: [randomString(), randomString()],\n  };\n}\n\nexport async function nextStreamValue<Schema extends JSONSchema>(\n  iterator: GraffitiObjectStream<Schema>,\n): Promise<GraffitiObject<Schema>> {\n  const result = await iterator.next();\n  assert(!result.done && !result.value.error, \"result has no value\");\n  assert(!result.value.tombstone, \"result has been deleted!\");\n  return result.value.object;\n}\n\nexport function continueStream<Schema extends JSONSchema>(\n  graffiti: Pick<Graffiti, \"continueDiscover\">,\n  streamReturn: GraffitiObjectStreamReturn<Schema>,\n  type: \"cursor\" | \"continue\",\n  session?: GraffitiSession | null,\n): GraffitiObjectStreamContinue<Schema> {\n  if (type === \"cursor\") {\n    return graffiti.continueDiscover(\n      streamReturn.cursor,\n      session,\n    ) as unknown as GraffitiObjectStreamContinue<Schema>;\n  } else {\n    return streamReturn.continue();\n  }\n}\n", "import { it, expect, describe, assert, beforeAll } from \"vitest\";\nimport type {\n  Graffiti,\n  GraffitiObjectBase,\n  GraffitiSession,\n  JSONSchema,\n} from \"@graffiti-garden/api\";\nimport {\n  randomString,\n  nextStreamValue,\n  randomPostObject,\n  continueStream,\n} from \"./utils\";\n\nexport const graffitiDiscoverTests = (\n  useGraffiti: () => Pick<\n    Graffiti,\n    \"discover\" | \"post\" | \"delete\" | \"continueDiscover\"\n  >,\n  useSession1: () => GraffitiSession | Promise<GraffitiSession>,\n  useSession2: () => GraffitiSession | Promise<GraffitiSession>,\n) => {\n  describe.concurrent(\"discover\", { timeout: 20000 }, () => {\n    let graffiti: ReturnType<typeof useGraffiti>;\n    let session: GraffitiSession;\n    let session1: GraffitiSession;\n    let session2: GraffitiSession;\n    beforeAll(async () => {\n      graffiti = useGraffiti();\n      session1 = await useSession1();\n      session = session1;\n      session2 = await useSession2();\n    });\n\n    it(\"discover nothing\", async () => {\n      const iterator = graffiti.discover([], {});\n      expect(await iterator.next()).toHaveProperty(\"done\", true);\n    });\n\n    it(\"discover single\", async () => {\n      const object = randomPostObject();\n\n      const posted = await graffiti.post<{}>(object, session);\n\n      const queryChannels = [randomString(), object.channels[0]];\n      const iterator = graffiti.discover<{}>(queryChannels, {});\n      const value = await nextStreamValue<{}>(iterator);\n      expect(value.url).toEqual(posted.url);\n      expect(value.value).toEqual(object.value);\n      expect(value.channels).toEqual([object.channels[0]]);\n      expect(value.allowed).toBeUndefined();\n      expect(value.actor).toEqual(session.actor);\n      const result2 = await iterator.next();\n      expect(result2.done).toBe(true);\n    });\n\n    it(\"discover wrong channel\", async () => {\n      const object = randomPostObject();\n      await graffiti.post<{}>(object, session);\n      const iterator = graffiti.discover([randomString()], {});\n      await expect(iterator.next()).resolves.toHaveProperty(\"done\", true);\n    });\n\n    it(\"discover not allowed\", async () => {\n      const object = randomPostObject();\n      object.allowed = [randomString(), randomString()];\n      const posted = await graffiti.post<{}>(object, session1);\n\n      const iteratorSession1 = graffiti.discover<{}>(\n        object.channels,\n        {},\n        session1,\n      );\n      const value = await nextStreamValue<{}>(iteratorSession1);\n      expect(value.url).toEqual(posted.url);\n      expect(value.value).toEqual(object.value);\n      expect(value.channels).toEqual(object.channels);\n      expect(value.allowed).toEqual(object.allowed);\n      expect(value.actor).toEqual(session1.actor);\n\n      const iteratorSession2 = graffiti.discover(object.channels, {}, session2);\n      expect(await iteratorSession2.next()).toHaveProperty(\"done\", true);\n\n      const iteratorNoSession = graffiti.discover(object.channels, {});\n      expect(await iteratorNoSession.next()).toHaveProperty(\"done\", true);\n    });\n\n    it(\"discover allowed\", async () => {\n      const object = randomPostObject();\n      object.allowed = [randomString(), session2.actor, randomString()];\n      const posted = await graffiti.post<{}>(object, session1);\n\n      const iteratorSession2 = graffiti.discover<{}>(\n        object.channels,\n        {},\n        session2,\n      );\n      const value = await nextStreamValue<{}>(iteratorSession2);\n      expect(value.url).toEqual(posted.url);\n      expect(value.value).toEqual(object.value);\n      expect(value.allowed).toEqual([session2.actor]);\n      expect(value.channels).toEqual(object.channels);\n      expect(value.actor).toEqual(session1.actor);\n    });\n\n    it(\"discover for actor\", async () => {\n      const object1 = randomPostObject();\n      const posted1 = await graffiti.post<{}>(object1, session1);\n\n      const object2 = randomPostObject();\n      object2.channels = object1.channels;\n      const posted2 = await graffiti.post<{}>(object2, session2);\n\n      const iterator = graffiti.discover<{}>(object1.channels, {\n        properties: {\n          actor: { const: posted1.actor },\n        },\n      });\n\n      const value = await nextStreamValue<{}>(iterator);\n      expect(value.url).toEqual(posted1.url);\n      expect(value.url).not.toEqual(posted2.url);\n      expect(value.value).toEqual(object1.value);\n      await expect(iterator.next()).resolves.toHaveProperty(\"done\", true);\n    });\n\n    it(\"discover schema allowed, as and not as owner\", async () => {\n      const object = randomPostObject();\n      object.allowed = [randomString(), session2.actor, randomString()];\n      await graffiti.post<{}>(object, session1);\n\n      const iteratorSession1 = graffiti.discover<{}>(\n        object.channels,\n        {\n          properties: {\n            allowed: {\n              minItems: 3,\n              // Make sure session2.actor is in the allow list\n              not: {\n                items: {\n                  not: { const: session2.actor },\n                },\n              },\n            },\n          },\n        },\n        session1,\n      );\n      const value = await nextStreamValue<{}>(iteratorSession1);\n      expect(value.value).toEqual(object.value);\n      await expect(iteratorSession1.next()).resolves.toHaveProperty(\n        \"done\",\n        true,\n      );\n\n      const iteratorSession2BigAllow = graffiti.discover(\n        object.channels,\n        {\n          properties: {\n            allowed: {\n              minItems: 3,\n            },\n          },\n        },\n        session2,\n      );\n      await expect(iteratorSession2BigAllow.next()).resolves.toHaveProperty(\n        \"done\",\n        true,\n      );\n      const iteratorSession2PeekOther = graffiti.discover(\n        object.channels,\n        {\n          properties: {\n            allowed: {\n              not: {\n                items: {\n                  not: { const: object.allowed[0] },\n                },\n              },\n            },\n          },\n        },\n        session2,\n      );\n      await expect(iteratorSession2PeekOther.next()).resolves.toHaveProperty(\n        \"done\",\n        true,\n      );\n      const iteratorSession2SmallAllowPeekSelf = graffiti.discover<{}>(\n        object.channels,\n        {\n          properties: {\n            allowed: {\n              maxItems: 1,\n              not: {\n                items: {\n                  not: { const: session2.actor },\n                },\n              },\n            },\n          },\n        },\n        session2,\n      );\n      const value2 = await nextStreamValue<{}>(\n        iteratorSession2SmallAllowPeekSelf,\n      );\n      expect(value2.value).toEqual(object.value);\n      await expect(\n        iteratorSession2SmallAllowPeekSelf.next(),\n      ).resolves.toHaveProperty(\"done\", true);\n    });\n\n    it(\"discover schema channels, as and not as owner\", async () => {\n      const object = randomPostObject();\n      object.channels = [randomString(), randomString(), randomString()];\n      await graffiti.post<{}>(object, session1);\n\n      const iteratorSession1 = graffiti.discover<{}>(\n        [object.channels[0], object.channels[2]],\n        {\n          properties: {\n            channels: {\n              minItems: 3,\n              // Make sure channel 1 is in the allow list\n              not: {\n                items: {\n                  not: { const: object.channels[1] },\n                },\n              },\n            },\n          },\n        },\n        session1,\n      );\n      const value = await nextStreamValue<{}>(iteratorSession1);\n      expect(value.value).toEqual(object.value);\n      await expect(iteratorSession1.next()).resolves.toHaveProperty(\n        \"done\",\n        true,\n      );\n\n      const iteratorSession2BigAllow = graffiti.discover(\n        [object.channels[0], object.channels[2]],\n        {\n          properties: {\n            channels: {\n              minItems: 3,\n            },\n          },\n        },\n        session2,\n      );\n      await expect(iteratorSession2BigAllow.next()).resolves.toHaveProperty(\n        \"done\",\n        true,\n      );\n      const iteratorSession2PeekOther = graffiti.discover(\n        [object.channels[0], object.channels[2]],\n        {\n          properties: {\n            channels: {\n              not: {\n                items: {\n                  not: { const: object.channels[1] },\n                },\n              },\n            },\n          },\n        },\n        session2,\n      );\n      await expect(iteratorSession2PeekOther.next()).resolves.toHaveProperty(\n        \"done\",\n        true,\n      );\n      const iteratorSession2SmallAllowPeekSelf = graffiti.discover<{}>(\n        [object.channels[0], object.channels[2]],\n        {\n          properties: {\n            allowed: {\n              maxItems: 2,\n              not: {\n                items: {\n                  not: { const: object.channels[2] },\n                },\n              },\n            },\n          },\n        },\n        session2,\n      );\n      const value2 = await nextStreamValue<{}>(\n        iteratorSession2SmallAllowPeekSelf,\n      );\n      expect(value2.value).toEqual(object.value);\n      await expect(\n        iteratorSession2SmallAllowPeekSelf.next(),\n      ).resolves.toHaveProperty(\"done\", true);\n    });\n\n    it(\"discover query for empty allowed\", async () => {\n      const publicO = randomPostObject();\n\n      const publicSchema = {\n        not: {\n          required: [\"allowed\"],\n        },\n      } satisfies JSONSchema;\n\n      await graffiti.post<{}>(publicO, session1);\n      const iterator = graffiti.discover<{}>(\n        publicO.channels,\n        publicSchema,\n        session1,\n      );\n      const value = await nextStreamValue<{}>(iterator);\n      expect(value.value).toEqual(publicO.value);\n      expect(value.allowed).toBeUndefined();\n      await expect(iterator.next()).resolves.toHaveProperty(\"done\", true);\n\n      const restricted = randomPostObject();\n      restricted.allowed = [];\n      await graffiti.post<{}>(restricted, session1);\n      const iterator2 = graffiti.discover(\n        restricted.channels,\n        publicSchema,\n        session1,\n      );\n      await expect(iterator2.next()).resolves.toHaveProperty(\"done\", true);\n    });\n\n    it(\"discover query for values\", async () => {\n      const object1 = randomPostObject();\n      object1.value = { test: randomString() };\n      await graffiti.post<{}>(object1, session);\n\n      const object2 = randomPostObject();\n      object2.channels = object1.channels;\n      object2.value = { test: randomString(), something: randomString() };\n      await graffiti.post<{}>(object2, session);\n\n      const object3 = randomPostObject();\n      object3.channels = object1.channels;\n      object3.value = { other: randomString(), something: randomString() };\n      await graffiti.post<{}>(object3, session);\n\n      const counts = new Map<string, number>();\n      for (const property of [\"test\", \"something\", \"other\"] as const) {\n        let count = 0;\n        for await (const result of graffiti.discover(object1.channels, {\n          properties: {\n            value: {\n              required: [property],\n            },\n          },\n        })) {\n          assert(!result.error, \"result has error\");\n          if (property in result.object.value) {\n            count++;\n          }\n        }\n        counts.set(property, count);\n      }\n\n      expect(counts.get(\"test\")).toBe(2);\n      expect(counts.get(\"something\")).toBe(2);\n      expect(counts.get(\"other\")).toBe(1);\n    });\n\n    for (const continueType of [\"cursor\", \"continue\"] as const) {\n      describe(`continue discover with ${continueType}`, () => {\n        it(\"discover for deleted content\", async () => {\n          const object = randomPostObject();\n\n          const posted = await graffiti.post<{}>(object, session);\n\n          const iterator1 = graffiti.discover<{}>(object.channels, {});\n          const value1 = await nextStreamValue<{}>(iterator1);\n          expect(value1.value).toEqual(object.value);\n          const returnValue = await iterator1.next();\n          assert(returnValue.done, \"value2 is not done\");\n\n          await graffiti.delete(posted, session);\n\n          const iterator = graffiti.discover(object.channels, {});\n          await expect(iterator.next()).resolves.toHaveProperty(\"done\", true);\n\n          const tombIterator = continueStream<{}>(\n            graffiti,\n            returnValue.value,\n            continueType,\n          );\n          const value = await tombIterator.next();\n          assert(!value.done && !value.value.error, \"value is done\");\n          assert(value.value.tombstone, \"value is not tombstone\");\n          expect(value.value.object.url).toEqual(posted.url);\n          await expect(tombIterator.next()).resolves.toHaveProperty(\n            \"done\",\n            true,\n          );\n        });\n      });\n    }\n  });\n};\n", "import {\n  GraffitiErrorNotAcceptable,\n  GraffitiErrorNotFound,\n  GraffitiErrorTooLarge,\n  type Graffiti,\n  type GraffitiSession,\n} from \"@graffiti-garden/api\";\nimport { it, expect, describe, beforeAll } from \"vitest\";\nimport { randomString } from \"./utils\";\n\nexport const graffitiMediaTests = (\n  useGraffiti: () => Pick<Graffiti, \"postMedia\" | \"getMedia\" | \"deleteMedia\">,\n  useSession1: () => GraffitiSession | Promise<GraffitiSession>,\n  useSession2: () => GraffitiSession | Promise<GraffitiSession>,\n) => {\n  describe.concurrent(\n    \"media\",\n    {\n      timeout: 20000,\n    },\n    () => {\n      let graffiti: ReturnType<typeof useGraffiti>;\n      let session: GraffitiSession;\n      let session1: GraffitiSession;\n      let session2: GraffitiSession;\n      beforeAll(async () => {\n        graffiti = useGraffiti();\n        session1 = await useSession1();\n        session = session1;\n        session2 = await useSession2();\n      });\n\n      it(\"post, get, delete media\", async () => {\n        // Post media\n        const text = randomString();\n        const data = new Blob([text], { type: \"text/plain\" });\n        const mediaUrl = await graffiti.postMedia({ data }, session);\n\n        // Get the media back\n        const media = await graffiti.getMedia(mediaUrl, {});\n        expect(await media.data.text()).toEqual(text);\n        expect(media.data.type).toEqual(\"text/plain\");\n        expect(media.allowed).toBeUndefined();\n        expect(media.actor).toBe(session.actor);\n\n        // Delete the media\n        await graffiti.deleteMedia(mediaUrl, session);\n\n        // Try to get the media again\n        await expect(graffiti.getMedia(mediaUrl, {})).rejects.toThrow(\n          GraffitiErrorNotFound,\n        );\n      });\n\n      it(\"acceptable type\", async () => {\n        const text = randomString();\n        const data = new Blob([text], { type: \"text/plain\" });\n        const mediaUrl = await graffiti.postMedia({ data }, session);\n\n        const media = await graffiti.getMedia(mediaUrl, {\n          accept: \"text/*\",\n        });\n        expect(await media.data.text()).toEqual(text);\n        expect(media.data.type).toEqual(\"text/plain\");\n        expect(media.allowed).toBeUndefined();\n        expect(media.actor).toBe(session.actor);\n      });\n\n      it(\"unacceptable type\", async () => {\n        const text = randomString();\n        const data = new Blob([text], { type: \"text/plain\" });\n        const mediaUrl = await graffiti.postMedia({ data }, session);\n\n        await expect(\n          graffiti.getMedia(mediaUrl, {\n            accept: \"image/*\",\n          }),\n        ).rejects.toThrow(GraffitiErrorNotAcceptable);\n      });\n\n      it(\"acceptable size\", async () => {\n        const text = randomString();\n        const data = new Blob([text], { type: \"text/plain\" });\n        const mediaUrl = await graffiti.postMedia({ data }, session);\n\n        const media = await graffiti.getMedia(mediaUrl, {\n          maxBytes: data.size,\n        });\n        expect(await media.data.text()).toEqual(text);\n        expect(media.data.type).toEqual(\"text/plain\");\n        expect(media.allowed).toBeUndefined();\n        expect(media.actor).toBe(session.actor);\n      });\n\n      it(\"unacceptable size\", async () => {\n        const text = randomString();\n        const data = new Blob([text], { type: \"text/plain\" });\n        const mediaUrl = await graffiti.postMedia({ data }, session);\n\n        await expect(\n          graffiti.getMedia(mediaUrl, {\n            maxBytes: data.size - 1,\n          }),\n        ).rejects.toThrow(GraffitiErrorTooLarge);\n      });\n\n      it(\"empty allowed\", async () => {\n        const text = randomString();\n        const data = new Blob([text], { type: \"text/plain\" });\n        const allowed: string[] = [];\n        const mediaUrl = await graffiti.postMedia({ data, allowed }, session1);\n\n        // Get it with the authorized user\n        const media = await graffiti.getMedia(mediaUrl, {}, session1);\n        expect(await media.data.text()).toEqual(text);\n        expect(media.data.type).toEqual(\"text/plain\");\n        expect(media.allowed).toEqual([]);\n        expect(media.actor).toBe(session1.actor);\n\n        // Get it with the unauthorized user\n        await expect(graffiti.getMedia(mediaUrl, {}, session2)).rejects.toThrow(\n          GraffitiErrorNotFound,\n        );\n\n        // Get it without authorization\n        await expect(graffiti.getMedia(mediaUrl, {})).rejects.toThrow(\n          GraffitiErrorNotFound,\n        );\n      });\n\n      it(\"allowed\", async () => {\n        const text = randomString();\n        const data = new Blob([text], { type: \"text/plain\" });\n        const allowed = [randomString(), session2.actor, randomString()];\n        const mediaUrl = await graffiti.postMedia({ data, allowed }, session1);\n\n        // Get it with the authorized user\n        const media = await graffiti.getMedia(mediaUrl, {}, session1);\n        expect(await media.data.text()).toEqual(text);\n        expect(media.data.type).toEqual(\"text/plain\");\n        expect(media.allowed).toEqual(allowed);\n        expect(media.actor).toBe(session1.actor);\n\n        // Get it with the allowed user\n        const media2 = await graffiti.getMedia(mediaUrl, {}, session2);\n        expect(await media2.data.text()).toEqual(text);\n        expect(media2.data.type).toEqual(\"text/plain\");\n        expect(media2.allowed).toEqual([session2.actor]);\n        expect(media2.actor).toBe(session1.actor);\n\n        // Get it without authorization\n        await expect(graffiti.getMedia(mediaUrl, {})).rejects.toThrow(\n          GraffitiErrorNotFound,\n        );\n      });\n    },\n  );\n};\n"],
+  "mappings": ";AAAA,SAAS,IAAI,QAAQ,UAAU,iBAAiB;AAMhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACXP,SAAS,cAAc;AAYhB,SAAS,eAAuB;AACrC,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,SAAO,gBAAgB,KAAK;AAC5B,QAAM,MAAM,MAAM,KAAK,KAAK,EACzB,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAGV,SAAO,MAAM;AACf;AAEO,SAAS,cAAc;AAC5B,SAAO;AAAA,IACL,CAAC,aAAa,CAAC,GAAG,aAAa;AAAA,EACjC;AACF;AAEO,SAAS,mBAA2C;AACzD,SAAO;AAAA,IACL,OAAO,YAAY;AAAA,IACnB,UAAU,CAAC,aAAa,GAAG,aAAa,CAAC;AAAA,EAC3C;AACF;AAEA,eAAsB,gBACpB,UACiC;AACjC,QAAM,SAAS,MAAM,SAAS,KAAK;AACnC,SAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM,OAAO,qBAAqB;AACjE,SAAO,CAAC,OAAO,MAAM,WAAW,0BAA0B;AAC1D,SAAO,OAAO,MAAM;AACtB;AAEO,SAAS,eACd,UACA,cACA,MACA,SACsC;AACtC,MAAI,SAAS,UAAU;AACrB,WAAO,SAAS;AAAA,MACd,aAAa;AAAA,MACb;AAAA,IACF;AAAA,EACF,OAAO;AACL,WAAO,aAAa,SAAS;AAAA,EAC/B;AACF;;;AD7CO,IAAM,oBAAoB,CAC/B,aACA,aACA,gBACG;AACH,WAAS;AAAA,IACP;AAAA,IACA;AAAA,MACE,SAAS;AAAA,IACX;AAAA,IACA,MAAM;AACJ,UAAI;AACJ,UAAI;AACJ,UAAI;AACJ,UAAI;AACJ,gBAAU,YAAY;AACpB,mBAAW,YAAY;AACvB,mBAAW,MAAM,YAAY;AAC7B,kBAAU;AACV,mBAAW,MAAM,YAAY;AAAA,MAC/B,CAAC;AAED,SAAG,qBAAqB,YAAY;AAClC,cAAM,QAAQ;AAAA,UACZ,WAAW;AAAA,QACb;AACA,cAAM,WAAW,CAAC,aAAa,GAAG,aAAa,CAAC;AAGhD,cAAM,WAAW,MAAM,SAAS,KAAS,EAAE,OAAO,SAAS,GAAG,OAAO;AACrE,eAAO,SAAS,KAAK,EAAE,QAAQ,KAAK;AACpC,eAAO,SAAS,QAAQ,EAAE,QAAQ,QAAQ;AAC1C,eAAO,SAAS,OAAO,EAAE,QAAQ,MAAS;AAC1C,eAAO,SAAS,KAAK,EAAE,QAAQ,QAAQ,KAAK;AAG5C,cAAM,SAAS,MAAM,SAAS,IAAI,UAAU,CAAC,CAAC;AAC9C,eAAO,OAAO,KAAK,EAAE,QAAQ,KAAK;AAClC,eAAO,OAAO,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAClC,eAAO,OAAO,OAAO,EAAE,cAAc;AACrC,eAAO,OAAO,GAAG,EAAE,QAAQ,SAAS,GAAG;AACvC,eAAO,OAAO,KAAK,EAAE,QAAQ,SAAS,KAAK;AAG3C,cAAM,SAAS,OAAO,QAAQ,OAAO;AAGrC,cAAM,OAAO,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ;AAAA,UAC7C;AAAA,QACF;AAGA,cAAM,OAAO,SAAS,OAAO,QAAQ,OAAO,CAAC,EAAE,QAAQ;AAAA,UACrD;AAAA,QACF;AAAA,MACF,CAAC;AAED,SAAG,qCAAqC,YAAY;AAClD,cAAM,SAAS,MAAM,SAAS;AAAA,UAC5B,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,UAC1B;AAAA,QACF;AAEA,cAAM,OAAO,SAAS,OAAO,QAAQ,QAAQ,CAAC,EAAE,QAAQ;AAAA,UACtD;AAAA,QACF;AAAA,MACF,CAAC;AAED,SAAG,4BAA4B,YAAY;AACzC,cAAM,SAAS;AAAA,UACb,YAAY;AAAA,YACV,OAAO;AAAA,cACL,YAAY;AAAA,gBACV,WAAW;AAAA,kBACT,MAAM;AAAA,gBACR;AAAA,gBACA,SAAS;AAAA,kBACP,MAAM;AAAA,kBACN,OAAO;AAAA,oBACL,MAAM;AAAA,kBACR;AAAA,gBACF;AAAA,gBACA,QAAQ;AAAA,kBACN,MAAM;AAAA,kBACN,YAAY;AAAA,oBACV,UAAU;AAAA,sBACR,MAAM;AAAA,oBACR;AAAA,kBACF;AAAA,kBACA,UAAU,CAAC,UAAU;AAAA,gBACvB;AAAA,cACF;AAAA,cACA,UAAU,CAAC,WAAW,QAAQ;AAAA,YAChC;AAAA,UACF;AAAA,QACF;AAEA,cAAM,YAAY;AAAA,UAChB,WAAW;AAAA,UACX,SAAS,CAAC,GAAG,GAAG,CAAC;AAAA,UACjB,QAAQ;AAAA,YACN,UAAU;AAAA,UACZ;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,SAAS;AAAA,UAC5B;AAAA,YACE,OAAO;AAAA,YACP,UAAU,CAAC;AAAA,UACb;AAAA,UACA;AAAA,QACF;AACA,cAAM,SAAS,MAAM,SAAS,IAAI,QAAQ,MAAM;AAEhD,eAAO,OAAO,MAAM,SAAS,EAAE,QAAQ,UAAU,SAAS;AAC1D,eAAO,OAAO,MAAM,OAAO,EAAE,QAAQ,UAAU,OAAO;AACtD,eAAO,OAAO,MAAM,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;AACzC,eAAO,OAAO,MAAM,OAAO,QAAQ,EAAE,QAAQ,UAAU,OAAO,QAAQ;AAAA,MACxE,CAAC;AAED,SAAG,oCAAoC,YAAY;AACjD,cAAM,SAAS,MAAM,SAAS;AAAA,UAC5B,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,UAC1B;AAAA,QACF;AACA,cAAM;AAAA,UACJ,SAAS,IAAI,QAAQ;AAAA,YACnB,YAAY;AAAA,cACV,OAAO;AAAA;AAAA,gBAEL,MAAM;AAAA,cACR;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH,EAAE,QAAQ,QAAQ,0BAA0B;AAAA,MAC9C,CAAC;AAED,SAAG,kCAAkC,YAAY;AAC/C,cAAM,SAAS,MAAM,SAAS;AAAA,UAC5B;AAAA,YACE,OAAO;AAAA,cACL,OAAO;AAAA,YACT;AAAA,YACA,UAAU,CAAC;AAAA,UACb;AAAA,UACA;AAAA,QACF;AAEA,cAAM;AAAA,UACJ,SAAS,IAAI,QAAQ;AAAA,YACnB,YAAY;AAAA,cACV,OAAO;AAAA,gBACL,YAAY;AAAA,kBACV,OAAO;AAAA,oBACL,MAAM;AAAA,kBACR;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH,EAAE,QAAQ,QAAQ,2BAA2B;AAAA,MAC/C,CAAC;AAED,SAAG,0CAA0C,YAAY;AACvD,cAAM,QAAQ;AAAA,UACZ,IAAI;AAAA,QACN;AACA,cAAM,UAAU,CAAC,aAAa,CAAC;AAC/B,cAAM,WAAW,CAAC,aAAa,CAAC;AAChC,cAAM,SAAS,MAAM,SAAS;AAAA,UAC5B,EAAE,OAAO,SAAS,SAAS;AAAA,UAC3B;AAAA,QACF;AAGA,cAAM,SAAS,MAAM,SAAS,IAAI,QAAQ,CAAC,GAAG,QAAQ;AACtD,eAAO,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrC,eAAO,OAAO,KAAK,EAAE,QAAQ,SAAS,KAAK;AAC3C,eAAO,OAAO,KAAK,EAAE,QAAQ,KAAK;AAClC,eAAO,OAAO,OAAO,EAAE,QAAQ,OAAO;AACtC,eAAO,OAAO,QAAQ,EAAE,QAAQ,QAAQ;AAGxC,cAAM,OAAO,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ;AAAA,UAC7C;AAAA,QACF;AAGA,cAAM,OAAO,SAAS,IAAI,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,QAAQ;AAAA,UACvD;AAAA,QACF;AAAA,MACF,CAAC;AAED,SAAG,6CAA6C,YAAY;AAC1D,cAAM,QAAQ;AAAA,UACZ,IAAI;AAAA,QACN;AACA,cAAM,UAAU,CAAC,aAAa,GAAG,SAAS,OAAO,aAAa,CAAC;AAC/D,cAAM,WAAW,CAAC,aAAa,CAAC;AAChC,cAAM,SAAS,MAAM,SAAS;AAAA,UAC5B;AAAA,YACE;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAGA,cAAM,SAAS,MAAM,SAAS,IAAI,QAAQ,CAAC,GAAG,QAAQ;AACtD,eAAO,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrC,eAAO,OAAO,KAAK,EAAE,QAAQ,SAAS,KAAK;AAC3C,eAAO,OAAO,KAAK,EAAE,QAAQ,KAAK;AAClC,eAAO,OAAO,OAAO,EAAE,QAAQ,OAAO;AACtC,eAAO,OAAO,QAAQ,EAAE,QAAQ,QAAQ;AAGxC,cAAM,OAAO,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ;AAAA,UAC7C;AAAA,QACF;AAEA,cAAM,UAAU,MAAM,SAAS,IAAI,QAAQ,CAAC,GAAG,QAAQ;AACvD,eAAO,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrC,eAAO,OAAO,KAAK,EAAE,QAAQ,SAAS,KAAK;AAC3C,eAAO,QAAQ,KAAK,EAAE,QAAQ,KAAK;AAEnC,eAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,SAAS,KAAK,CAAC;AAEhD,eAAO,QAAQ,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAAA,MACrC,CAAC;AAAA,IACH;AAAA,EACF;AACF;;;AEtPA,SAAS,MAAAA,KAAI,UAAAC,SAAQ,YAAAC,WAAU,UAAAC,SAAQ,aAAAC,kBAAiB;AAcjD,IAAM,wBAAwB,CACnC,aAIA,aACA,gBACG;AACH,EAAAC,UAAS,WAAW,YAAY,EAAE,SAAS,IAAM,GAAG,MAAM;AACxD,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,IAAAC,WAAU,YAAY;AACpB,iBAAW,YAAY;AACvB,iBAAW,MAAM,YAAY;AAC7B,gBAAU;AACV,iBAAW,MAAM,YAAY;AAAA,IAC/B,CAAC;AAED,IAAAC,IAAG,oBAAoB,YAAY;AACjC,YAAM,WAAW,SAAS,SAAS,CAAC,GAAG,CAAC,CAAC;AACzC,MAAAC,QAAO,MAAM,SAAS,KAAK,CAAC,EAAE,eAAe,QAAQ,IAAI;AAAA,IAC3D,CAAC;AAED,IAAAD,IAAG,mBAAmB,YAAY;AAChC,YAAM,SAAS,iBAAiB;AAEhC,YAAM,SAAS,MAAM,SAAS,KAAS,QAAQ,OAAO;AAEtD,YAAM,gBAAgB,CAAC,aAAa,GAAG,OAAO,SAAS,CAAC,CAAC;AACzD,YAAM,WAAW,SAAS,SAAa,eAAe,CAAC,CAAC;AACxD,YAAM,QAAQ,MAAM,gBAAoB,QAAQ;AAChD,MAAAC,QAAO,MAAM,GAAG,EAAE,QAAQ,OAAO,GAAG;AACpC,MAAAA,QAAO,MAAM,KAAK,EAAE,QAAQ,OAAO,KAAK;AACxC,MAAAA,QAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;AACnD,MAAAA,QAAO,MAAM,OAAO,EAAE,cAAc;AACpC,MAAAA,QAAO,MAAM,KAAK,EAAE,QAAQ,QAAQ,KAAK;AACzC,YAAM,UAAU,MAAM,SAAS,KAAK;AACpC,MAAAA,QAAO,QAAQ,IAAI,EAAE,KAAK,IAAI;AAAA,IAChC,CAAC;AAED,IAAAD,IAAG,0BAA0B,YAAY;AACvC,YAAM,SAAS,iBAAiB;AAChC,YAAM,SAAS,KAAS,QAAQ,OAAO;AACvC,YAAM,WAAW,SAAS,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;AACvD,YAAMC,QAAO,SAAS,KAAK,CAAC,EAAE,SAAS,eAAe,QAAQ,IAAI;AAAA,IACpE,CAAC;AAED,IAAAD,IAAG,wBAAwB,YAAY;AACrC,YAAM,SAAS,iBAAiB;AAChC,aAAO,UAAU,CAAC,aAAa,GAAG,aAAa,CAAC;AAChD,YAAM,SAAS,MAAM,SAAS,KAAS,QAAQ,QAAQ;AAEvD,YAAM,mBAAmB,SAAS;AAAA,QAChC,OAAO;AAAA,QACP,CAAC;AAAA,QACD;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,gBAAoB,gBAAgB;AACxD,MAAAC,QAAO,MAAM,GAAG,EAAE,QAAQ,OAAO,GAAG;AACpC,MAAAA,QAAO,MAAM,KAAK,EAAE,QAAQ,OAAO,KAAK;AACxC,MAAAA,QAAO,MAAM,QAAQ,EAAE,QAAQ,OAAO,QAAQ;AAC9C,MAAAA,QAAO,MAAM,OAAO,EAAE,QAAQ,OAAO,OAAO;AAC5C,MAAAA,QAAO,MAAM,KAAK,EAAE,QAAQ,SAAS,KAAK;AAE1C,YAAM,mBAAmB,SAAS,SAAS,OAAO,UAAU,CAAC,GAAG,QAAQ;AACxE,MAAAA,QAAO,MAAM,iBAAiB,KAAK,CAAC,EAAE,eAAe,QAAQ,IAAI;AAEjE,YAAM,oBAAoB,SAAS,SAAS,OAAO,UAAU,CAAC,CAAC;AAC/D,MAAAA,QAAO,MAAM,kBAAkB,KAAK,CAAC,EAAE,eAAe,QAAQ,IAAI;AAAA,IACpE,CAAC;AAED,IAAAD,IAAG,oBAAoB,YAAY;AACjC,YAAM,SAAS,iBAAiB;AAChC,aAAO,UAAU,CAAC,aAAa,GAAG,SAAS,OAAO,aAAa,CAAC;AAChE,YAAM,SAAS,MAAM,SAAS,KAAS,QAAQ,QAAQ;AAEvD,YAAM,mBAAmB,SAAS;AAAA,QAChC,OAAO;AAAA,QACP,CAAC;AAAA,QACD;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,gBAAoB,gBAAgB;AACxD,MAAAC,QAAO,MAAM,GAAG,EAAE,QAAQ,OAAO,GAAG;AACpC,MAAAA,QAAO,MAAM,KAAK,EAAE,QAAQ,OAAO,KAAK;AACxC,MAAAA,QAAO,MAAM,OAAO,EAAE,QAAQ,CAAC,SAAS,KAAK,CAAC;AAC9C,MAAAA,QAAO,MAAM,QAAQ,EAAE,QAAQ,OAAO,QAAQ;AAC9C,MAAAA,QAAO,MAAM,KAAK,EAAE,QAAQ,SAAS,KAAK;AAAA,IAC5C,CAAC;AAED,IAAAD,IAAG,sBAAsB,YAAY;AACnC,YAAM,UAAU,iBAAiB;AACjC,YAAM,UAAU,MAAM,SAAS,KAAS,SAAS,QAAQ;AAEzD,YAAM,UAAU,iBAAiB;AACjC,cAAQ,WAAW,QAAQ;AAC3B,YAAM,UAAU,MAAM,SAAS,KAAS,SAAS,QAAQ;AAEzD,YAAM,WAAW,SAAS,SAAa,QAAQ,UAAU;AAAA,QACvD,YAAY;AAAA,UACV,OAAO,EAAE,OAAO,QAAQ,MAAM;AAAA,QAChC;AAAA,MACF,CAAC;AAED,YAAM,QAAQ,MAAM,gBAAoB,QAAQ;AAChD,MAAAC,QAAO,MAAM,GAAG,EAAE,QAAQ,QAAQ,GAAG;AACrC,MAAAA,QAAO,MAAM,GAAG,EAAE,IAAI,QAAQ,QAAQ,GAAG;AACzC,MAAAA,QAAO,MAAM,KAAK,EAAE,QAAQ,QAAQ,KAAK;AACzC,YAAMA,QAAO,SAAS,KAAK,CAAC,EAAE,SAAS,eAAe,QAAQ,IAAI;AAAA,IACpE,CAAC;AAED,IAAAD,IAAG,gDAAgD,YAAY;AAC7D,YAAM,SAAS,iBAAiB;AAChC,aAAO,UAAU,CAAC,aAAa,GAAG,SAAS,OAAO,aAAa,CAAC;AAChE,YAAM,SAAS,KAAS,QAAQ,QAAQ;AAExC,YAAM,mBAAmB,SAAS;AAAA,QAChC,OAAO;AAAA,QACP;AAAA,UACE,YAAY;AAAA,YACV,SAAS;AAAA,cACP,UAAU;AAAA;AAAA,cAEV,KAAK;AAAA,gBACH,OAAO;AAAA,kBACL,KAAK,EAAE,OAAO,SAAS,MAAM;AAAA,gBAC/B;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,gBAAoB,gBAAgB;AACxD,MAAAC,QAAO,MAAM,KAAK,EAAE,QAAQ,OAAO,KAAK;AACxC,YAAMA,QAAO,iBAAiB,KAAK,CAAC,EAAE,SAAS;AAAA,QAC7C;AAAA,QACA;AAAA,MACF;AAEA,YAAM,2BAA2B,SAAS;AAAA,QACxC,OAAO;AAAA,QACP;AAAA,UACE,YAAY;AAAA,YACV,SAAS;AAAA,cACP,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAMA,QAAO,yBAAyB,KAAK,CAAC,EAAE,SAAS;AAAA,QACrD;AAAA,QACA;AAAA,MACF;AACA,YAAM,4BAA4B,SAAS;AAAA,QACzC,OAAO;AAAA,QACP;AAAA,UACE,YAAY;AAAA,YACV,SAAS;AAAA,cACP,KAAK;AAAA,gBACH,OAAO;AAAA,kBACL,KAAK,EAAE,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,gBAClC;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAMA,QAAO,0BAA0B,KAAK,CAAC,EAAE,SAAS;AAAA,QACtD;AAAA,QACA;AAAA,MACF;AACA,YAAM,qCAAqC,SAAS;AAAA,QAClD,OAAO;AAAA,QACP;AAAA,UACE,YAAY;AAAA,YACV,SAAS;AAAA,cACP,UAAU;AAAA,cACV,KAAK;AAAA,gBACH,OAAO;AAAA,kBACL,KAAK,EAAE,OAAO,SAAS,MAAM;AAAA,gBAC/B;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,MACF;AACA,MAAAA,QAAO,OAAO,KAAK,EAAE,QAAQ,OAAO,KAAK;AACzC,YAAMA;AAAA,QACJ,mCAAmC,KAAK;AAAA,MAC1C,EAAE,SAAS,eAAe,QAAQ,IAAI;AAAA,IACxC,CAAC;AAED,IAAAD,IAAG,iDAAiD,YAAY;AAC9D,YAAM,SAAS,iBAAiB;AAChC,aAAO,WAAW,CAAC,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AACjE,YAAM,SAAS,KAAS,QAAQ,QAAQ;AAExC,YAAM,mBAAmB,SAAS;AAAA,QAChC,CAAC,OAAO,SAAS,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;AAAA,QACvC;AAAA,UACE,YAAY;AAAA,YACV,UAAU;AAAA,cACR,UAAU;AAAA;AAAA,cAEV,KAAK;AAAA,gBACH,OAAO;AAAA,kBACL,KAAK,EAAE,OAAO,OAAO,SAAS,CAAC,EAAE;AAAA,gBACnC;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,gBAAoB,gBAAgB;AACxD,MAAAC,QAAO,MAAM,KAAK,EAAE,QAAQ,OAAO,KAAK;AACxC,YAAMA,QAAO,iBAAiB,KAAK,CAAC,EAAE,SAAS;AAAA,QAC7C;AAAA,QACA;AAAA,MACF;AAEA,YAAM,2BAA2B,SAAS;AAAA,QACxC,CAAC,OAAO,SAAS,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;AAAA,QACvC;AAAA,UACE,YAAY;AAAA,YACV,UAAU;AAAA,cACR,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAMA,QAAO,yBAAyB,KAAK,CAAC,EAAE,SAAS;AAAA,QACrD;AAAA,QACA;AAAA,MACF;AACA,YAAM,4BAA4B,SAAS;AAAA,QACzC,CAAC,OAAO,SAAS,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;AAAA,QACvC;AAAA,UACE,YAAY;AAAA,YACV,UAAU;AAAA,cACR,KAAK;AAAA,gBACH,OAAO;AAAA,kBACL,KAAK,EAAE,OAAO,OAAO,SAAS,CAAC,EAAE;AAAA,gBACnC;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAMA,QAAO,0BAA0B,KAAK,CAAC,EAAE,SAAS;AAAA,QACtD;AAAA,QACA;AAAA,MACF;AACA,YAAM,qCAAqC,SAAS;AAAA,QAClD,CAAC,OAAO,SAAS,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;AAAA,QACvC;AAAA,UACE,YAAY;AAAA,YACV,SAAS;AAAA,cACP,UAAU;AAAA,cACV,KAAK;AAAA,gBACH,OAAO;AAAA,kBACL,KAAK,EAAE,OAAO,OAAO,SAAS,CAAC,EAAE;AAAA,gBACnC;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,MACF;AACA,MAAAA,QAAO,OAAO,KAAK,EAAE,QAAQ,OAAO,KAAK;AACzC,YAAMA;AAAA,QACJ,mCAAmC,KAAK;AAAA,MAC1C,EAAE,SAAS,eAAe,QAAQ,IAAI;AAAA,IACxC,CAAC;AAED,IAAAD,IAAG,oCAAoC,YAAY;AACjD,YAAM,UAAU,iBAAiB;AAEjC,YAAM,eAAe;AAAA,QACnB,KAAK;AAAA,UACH,UAAU,CAAC,SAAS;AAAA,QACtB;AAAA,MACF;AAEA,YAAM,SAAS,KAAS,SAAS,QAAQ;AACzC,YAAM,WAAW,SAAS;AAAA,QACxB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,gBAAoB,QAAQ;AAChD,MAAAC,QAAO,MAAM,KAAK,EAAE,QAAQ,QAAQ,KAAK;AACzC,MAAAA,QAAO,MAAM,OAAO,EAAE,cAAc;AACpC,YAAMA,QAAO,SAAS,KAAK,CAAC,EAAE,SAAS,eAAe,QAAQ,IAAI;AAElE,YAAM,aAAa,iBAAiB;AACpC,iBAAW,UAAU,CAAC;AACtB,YAAM,SAAS,KAAS,YAAY,QAAQ;AAC5C,YAAM,YAAY,SAAS;AAAA,QACzB,WAAW;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA,YAAMA,QAAO,UAAU,KAAK,CAAC,EAAE,SAAS,eAAe,QAAQ,IAAI;AAAA,IACrE,CAAC;AAED,IAAAD,IAAG,6BAA6B,YAAY;AAC1C,YAAM,UAAU,iBAAiB;AACjC,cAAQ,QAAQ,EAAE,MAAM,aAAa,EAAE;AACvC,YAAM,SAAS,KAAS,SAAS,OAAO;AAExC,YAAM,UAAU,iBAAiB;AACjC,cAAQ,WAAW,QAAQ;AAC3B,cAAQ,QAAQ,EAAE,MAAM,aAAa,GAAG,WAAW,aAAa,EAAE;AAClE,YAAM,SAAS,KAAS,SAAS,OAAO;AAExC,YAAM,UAAU,iBAAiB;AACjC,cAAQ,WAAW,QAAQ;AAC3B,cAAQ,QAAQ,EAAE,OAAO,aAAa,GAAG,WAAW,aAAa,EAAE;AACnE,YAAM,SAAS,KAAS,SAAS,OAAO;AAExC,YAAM,SAAS,oBAAI,IAAoB;AACvC,iBAAW,YAAY,CAAC,QAAQ,aAAa,OAAO,GAAY;AAC9D,YAAI,QAAQ;AACZ,yBAAiB,UAAU,SAAS,SAAS,QAAQ,UAAU;AAAA,UAC7D,YAAY;AAAA,YACV,OAAO;AAAA,cACL,UAAU,CAAC,QAAQ;AAAA,YACrB;AAAA,UACF;AAAA,QACF,CAAC,GAAG;AACF,UAAAE,QAAO,CAAC,OAAO,OAAO,kBAAkB;AACxC,cAAI,YAAY,OAAO,OAAO,OAAO;AACnC;AAAA,UACF;AAAA,QACF;AACA,eAAO,IAAI,UAAU,KAAK;AAAA,MAC5B;AAEA,MAAAD,QAAO,OAAO,IAAI,MAAM,CAAC,EAAE,KAAK,CAAC;AACjC,MAAAA,QAAO,OAAO,IAAI,WAAW,CAAC,EAAE,KAAK,CAAC;AACtC,MAAAA,QAAO,OAAO,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC;AAAA,IACpC,CAAC;AAED,eAAW,gBAAgB,CAAC,UAAU,UAAU,GAAY;AAC1D,MAAAH,UAAS,0BAA0B,YAAY,IAAI,MAAM;AACvD,QAAAE,IAAG,gCAAgC,YAAY;AAC7C,gBAAM,SAAS,iBAAiB;AAEhC,gBAAM,SAAS,MAAM,SAAS,KAAS,QAAQ,OAAO;AAEtD,gBAAM,YAAY,SAAS,SAAa,OAAO,UAAU,CAAC,CAAC;AAC3D,gBAAM,SAAS,MAAM,gBAAoB,SAAS;AAClD,UAAAC,QAAO,OAAO,KAAK,EAAE,QAAQ,OAAO,KAAK;AACzC,gBAAM,cAAc,MAAM,UAAU,KAAK;AACzC,UAAAC,QAAO,YAAY,MAAM,oBAAoB;AAE7C,gBAAM,SAAS,OAAO,QAAQ,OAAO;AAErC,gBAAM,WAAW,SAAS,SAAS,OAAO,UAAU,CAAC,CAAC;AACtD,gBAAMD,QAAO,SAAS,KAAK,CAAC,EAAE,SAAS,eAAe,QAAQ,IAAI;AAElE,gBAAM,eAAe;AAAA,YACnB;AAAA,YACA,YAAY;AAAA,YACZ;AAAA,UACF;AACA,gBAAM,QAAQ,MAAM,aAAa,KAAK;AACtC,UAAAC,QAAO,CAAC,MAAM,QAAQ,CAAC,MAAM,MAAM,OAAO,eAAe;AACzD,UAAAA,QAAO,MAAM,MAAM,WAAW,wBAAwB;AACtD,UAAAD,QAAO,MAAM,MAAM,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACjD,gBAAMA,QAAO,aAAa,KAAK,CAAC,EAAE,SAAS;AAAA,YACzC;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;;;ACtZA;AAAA,EACE;AAAA,EACA,yBAAAE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,MAAAC,KAAI,UAAAC,SAAQ,YAAAC,WAAU,aAAAC,kBAAiB;AAGzC,IAAM,qBAAqB,CAChC,aACA,aACA,gBACG;AACH,EAAAC,UAAS;AAAA,IACP;AAAA,IACA;AAAA,MACE,SAAS;AAAA,IACX;AAAA,IACA,MAAM;AACJ,UAAI;AACJ,UAAI;AACJ,UAAI;AACJ,UAAI;AACJ,MAAAC,WAAU,YAAY;AACpB,mBAAW,YAAY;AACvB,mBAAW,MAAM,YAAY;AAC7B,kBAAU;AACV,mBAAW,MAAM,YAAY;AAAA,MAC/B,CAAC;AAED,MAAAC,IAAG,2BAA2B,YAAY;AAExC,cAAM,OAAO,aAAa;AAC1B,cAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,cAAM,WAAW,MAAM,SAAS,UAAU,EAAE,KAAK,GAAG,OAAO;AAG3D,cAAM,QAAQ,MAAM,SAAS,SAAS,UAAU,CAAC,CAAC;AAClD,QAAAC,QAAO,MAAM,MAAM,KAAK,KAAK,CAAC,EAAE,QAAQ,IAAI;AAC5C,QAAAA,QAAO,MAAM,KAAK,IAAI,EAAE,QAAQ,YAAY;AAC5C,QAAAA,QAAO,MAAM,OAAO,EAAE,cAAc;AACpC,QAAAA,QAAO,MAAM,KAAK,EAAE,KAAK,QAAQ,KAAK;AAGtC,cAAM,SAAS,YAAY,UAAU,OAAO;AAG5C,cAAMA,QAAO,SAAS,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ;AAAA,UACpDC;AAAA,QACF;AAAA,MACF,CAAC;AAED,MAAAF,IAAG,mBAAmB,YAAY;AAChC,cAAM,OAAO,aAAa;AAC1B,cAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,cAAM,WAAW,MAAM,SAAS,UAAU,EAAE,KAAK,GAAG,OAAO;AAE3D,cAAM,QAAQ,MAAM,SAAS,SAAS,UAAU;AAAA,UAC9C,QAAQ;AAAA,QACV,CAAC;AACD,QAAAC,QAAO,MAAM,MAAM,KAAK,KAAK,CAAC,EAAE,QAAQ,IAAI;AAC5C,QAAAA,QAAO,MAAM,KAAK,IAAI,EAAE,QAAQ,YAAY;AAC5C,QAAAA,QAAO,MAAM,OAAO,EAAE,cAAc;AACpC,QAAAA,QAAO,MAAM,KAAK,EAAE,KAAK,QAAQ,KAAK;AAAA,MACxC,CAAC;AAED,MAAAD,IAAG,qBAAqB,YAAY;AAClC,cAAM,OAAO,aAAa;AAC1B,cAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,cAAM,WAAW,MAAM,SAAS,UAAU,EAAE,KAAK,GAAG,OAAO;AAE3D,cAAMC;AAAA,UACJ,SAAS,SAAS,UAAU;AAAA,YAC1B,QAAQ;AAAA,UACV,CAAC;AAAA,QACH,EAAE,QAAQ,QAAQ,0BAA0B;AAAA,MAC9C,CAAC;AAED,MAAAD,IAAG,mBAAmB,YAAY;AAChC,cAAM,OAAO,aAAa;AAC1B,cAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,cAAM,WAAW,MAAM,SAAS,UAAU,EAAE,KAAK,GAAG,OAAO;AAE3D,cAAM,QAAQ,MAAM,SAAS,SAAS,UAAU;AAAA,UAC9C,UAAU,KAAK;AAAA,QACjB,CAAC;AACD,QAAAC,QAAO,MAAM,MAAM,KAAK,KAAK,CAAC,EAAE,QAAQ,IAAI;AAC5C,QAAAA,QAAO,MAAM,KAAK,IAAI,EAAE,QAAQ,YAAY;AAC5C,QAAAA,QAAO,MAAM,OAAO,EAAE,cAAc;AACpC,QAAAA,QAAO,MAAM,KAAK,EAAE,KAAK,QAAQ,KAAK;AAAA,MACxC,CAAC;AAED,MAAAD,IAAG,qBAAqB,YAAY;AAClC,cAAM,OAAO,aAAa;AAC1B,cAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,cAAM,WAAW,MAAM,SAAS,UAAU,EAAE,KAAK,GAAG,OAAO;AAE3D,cAAMC;AAAA,UACJ,SAAS,SAAS,UAAU;AAAA,YAC1B,UAAU,KAAK,OAAO;AAAA,UACxB,CAAC;AAAA,QACH,EAAE,QAAQ,QAAQ,qBAAqB;AAAA,MACzC,CAAC;AAED,MAAAD,IAAG,iBAAiB,YAAY;AAC9B,cAAM,OAAO,aAAa;AAC1B,cAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,cAAM,UAAoB,CAAC;AAC3B,cAAM,WAAW,MAAM,SAAS,UAAU,EAAE,MAAM,QAAQ,GAAG,QAAQ;AAGrE,cAAM,QAAQ,MAAM,SAAS,SAAS,UAAU,CAAC,GAAG,QAAQ;AAC5D,QAAAC,QAAO,MAAM,MAAM,KAAK,KAAK,CAAC,EAAE,QAAQ,IAAI;AAC5C,QAAAA,QAAO,MAAM,KAAK,IAAI,EAAE,QAAQ,YAAY;AAC5C,QAAAA,QAAO,MAAM,OAAO,EAAE,QAAQ,CAAC,CAAC;AAChC,QAAAA,QAAO,MAAM,KAAK,EAAE,KAAK,SAAS,KAAK;AAGvC,cAAMA,QAAO,SAAS,SAAS,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,QAAQ;AAAA,UAC9DC;AAAA,QACF;AAGA,cAAMD,QAAO,SAAS,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ;AAAA,UACpDC;AAAA,QACF;AAAA,MACF,CAAC;AAED,MAAAF,IAAG,WAAW,YAAY;AACxB,cAAM,OAAO,aAAa;AAC1B,cAAM,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AACpD,cAAM,UAAU,CAAC,aAAa,GAAG,SAAS,OAAO,aAAa,CAAC;AAC/D,cAAM,WAAW,MAAM,SAAS,UAAU,EAAE,MAAM,QAAQ,GAAG,QAAQ;AAGrE,cAAM,QAAQ,MAAM,SAAS,SAAS,UAAU,CAAC,GAAG,QAAQ;AAC5D,QAAAC,QAAO,MAAM,MAAM,KAAK,KAAK,CAAC,EAAE,QAAQ,IAAI;AAC5C,QAAAA,QAAO,MAAM,KAAK,IAAI,EAAE,QAAQ,YAAY;AAC5C,QAAAA,QAAO,MAAM,OAAO,EAAE,QAAQ,OAAO;AACrC,QAAAA,QAAO,MAAM,KAAK,EAAE,KAAK,SAAS,KAAK;AAGvC,cAAM,SAAS,MAAM,SAAS,SAAS,UAAU,CAAC,GAAG,QAAQ;AAC7D,QAAAA,QAAO,MAAM,OAAO,KAAK,KAAK,CAAC,EAAE,QAAQ,IAAI;AAC7C,QAAAA,QAAO,OAAO,KAAK,IAAI,EAAE,QAAQ,YAAY;AAC7C,QAAAA,QAAO,OAAO,OAAO,EAAE,QAAQ,CAAC,SAAS,KAAK,CAAC;AAC/C,QAAAA,QAAO,OAAO,KAAK,EAAE,KAAK,SAAS,KAAK;AAGxC,cAAMA,QAAO,SAAS,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ;AAAA,UACpDC;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "names": ["it", "expect", "describe", "assert", "beforeAll", "describe", "beforeAll", "it", "expect", "assert", "GraffitiErrorNotFound", "it", "expect", "describe", "beforeAll", "describe", "beforeAll", "it", "expect", "GraffitiErrorNotFound"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@graffiti-garden/api",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "The heart of Graffiti",
   "types": "./dist/src/index.d.ts",
   "module": "./dist/index.mjs",
@@ -52,9 +52,10 @@
     "tsx": "^4.21.0",
     "typedoc": "^0.28.15",
     "typescript": "^5.9.3",
-    "vitest": "^3.2.4"
+    "vitest": "^4.0.16"
   },
   "dependencies": {
+    "ajv": "^8.17.1",
     "json-schema-to-ts": "^3.1.1"
   }
 }

package/src/1-api.ts

@@ -103,7 +103,7 @@ import type { JSONSchema } from "json-schema-to-ts";
  * @groupDescription 3 - Media Methods
  * Methods for {@link postMedia | creating}, {@link getMedia | reading},
  * and {@link deleteMedia | deleting} media data.
- * @groupDescription 4 - Session Management
+ * @groupDescription 4 - Identity Methods
  * Methods and properties for logging in and out.
  */
 export abstract class Graffiti {
@@ -118,12 +118,14 @@ export abstract class Graffiti {
    */
   abstract post<Schema extends JSONSchema>(
     /**
-     * An object to post. This object is statically type-checked against the [JSON schema](https://json-schema.org/) that can be optionally provided
-     * as the generic type parameter. It is recommended to a schema to
+     * An object to post, minus its {@link GraffitiObjectBase.url | `url`} and
+     * {@link GraffitiObjectBase.actor | `actor`}, which will be assigned once posted.
+     * This object is statically type-checked against the [JSON schema](https://json-schema.org/) that can be optionally provided
+     * as the generic type parameter. It is recommended to use a schema to
      * ensure that the posted object matches subsequent {@link get} or {@link discover}
      * methods.
      */
-    object: GraffitiPostObject<Schema>,
+    partialObject: GraffitiPostObject<Schema>,
     /**
      * An implementation-specific object with information to authenticate the
      * {@link GraffitiObjectBase.actor | `actor`}.
@@ -284,12 +286,24 @@ export abstract class Graffiti {
    * @group 3 - Media Methods
    */
   abstract postMedia(
-    /**
-     * The binary data of the media to be uploaded,
-     * along with its [media type](https://www.iana.org/assignments/media-types/media-types.xhtml),
-     * formatted as a [Blob](https://developer.mozilla.org/en-US/docs/Web/API/Blob).
-     */
-    media: Blob,
+    media: {
+      /**
+       * The binary data of the media to be uploaded,
+       * along with its [media type](https://www.iana.org/assignments/media-types/media-types.xhtml),
+       * formatted as a [Blob](https://developer.mozilla.org/en-US/docs/Web/API/Blob).
+       */
+      data: Blob;
+      /**
+       * An optional list, identical in function to an object's
+       * {@link GraffitiObjectBase.allowed | `allowed`} property,
+       * that specifies the {@link GraffitiObjectBase.actor | `actor`}s
+       * who are allowed to access the media. If the list is `undefined`
+       * or `null`, anyone with the URL can access the media. If the list
+       * is empty, only the {@link GraffitiObjectBase.actor | `actor`}
+       * who {@link postMedia | `post`ed} the media can access it.
+       */
+      allowed?: string[] | null;
+    },
     /**
      * An implementation-specific object with information to authenticate the
      * {@link GraffitiObjectBase.actor | `actor`}.
@@ -341,22 +355,28 @@ export abstract class Graffiti {
      */
     mediaUrl: string,
     /**
-     * An optional set of requirements the retrieved media must meet.
+     * A set of requirements the retrieved media must meet.
      */
-    requirements?: {
+    requirements: {
       /**
        * A list of acceptable media types for the retrieved media,
        * formatted as like an [HTTP Accept header](https://httpwg.org/specs/rfc9110.html#field.accept)
        */
       accept?: string;
       /**
-       * The maximum size, in bytes, of the media.
+       * The maximum acceptable size, in bytes, of the media.
        */
       maxBytes?: number;
     },
+    /**
+     * An implementation-specific object with information to authenticate the
+     * {@link GraffitiObjectBase.actor | `actor`}.
+     */
+    session?: GraffitiSession | null,
   ): Promise<{
-    media: Blob;
+    data: Blob;
     actor: string;
+    allowed?: string[] | null;
   }>;
 
   /**
@@ -369,7 +389,7 @@ export abstract class Graffiti {
    * asynchronously via {@link Graffiti.sessionEvents | sessionEvents}
    * as a {@link GraffitiLoginEvent} with event type `login`.
    *
-   * @group 4 - Session Management
+   * @group 4 - Identity Methods
    */
   abstract login(
     /**
@@ -394,7 +414,7 @@ export abstract class Graffiti {
    * {@link Graffiti.sessionEvents | sessionEvents}
    * as a {@link GraffitiLogoutEvent} as event type `logout`.
    *
-   * @group 4 - Session Management
+   * @group 4 - Identity Methods
    */
   abstract logout(
     /**
@@ -410,7 +430,37 @@ export abstract class Graffiti {
    * - `logout` - {@link GraffitiLogoutEvent}
    * - `initialized` - {@link GraffitiSessionInitializedEvent}
    *
-   * @group 4 - Session Management
+   * @group 4 - Identity Methods
    */
   abstract readonly sessionEvents: EventTarget;
+
+  /**
+   * Retrieves the human-readable handle associated
+   * with the given actor. The handle may change over time
+   * and so it should be used for display purposes only.
+   *
+   * The inverse of {@link handleToActor}.
+   *
+   * @throws {@link GraffitiErrorNotFound} if a handle cannot be
+   * found for the given actor.
+   *
+   * @returns A human-readable handle for the given actor.
+   *
+   * @group 4 - Identity Methods
+   */
+  abstract actorToHandle(actor: string): Promise<string>;
+
+  /**
+   * Retrieves the actor ID associated with the given handle.
+   *
+   * The inverse of {@link actorToHandle}.
+   *
+   * @throws {@link GraffitiErrorNotFound} if there is no actor
+   * with the given handle.
+   *
+   * @returns The actor ID for the given handle.
+   *
+   * @group 4 - Identity Methods
+   */
+  abstract handleToActor(handle: string): Promise<string>;
 }

package/src/2-types.ts

@@ -102,7 +102,7 @@ export interface GraffitiObjectBase {
  * Schema-aware objects are returned by {@link Graffiti.get} and {@link Graffiti.discover}.
  */
 export type GraffitiObject<Schema extends JSONSchema> = GraffitiObjectBase &
-  FromSchema<Schema & typeof GraffitiObjectJSONSchema>;
+  FromSchema<Schema & typeof GraffitiPostObjectJSONSchema>;
 
 /**
  * A JSON Schema equivalent to the {@link GraffitiObjectBase} type.
@@ -145,7 +145,6 @@ export type GraffitiPostObject<Schema extends JSONSchema> = Pick<
   GraffitiObjectBase,
   "value" | "channels" | "allowed"
 > &
-  Partial<GraffitiObjectBase> &
   FromSchema<Schema & typeof GraffitiPostObjectJSONSchema>;
 
 /**
@@ -315,7 +314,9 @@ export interface GraffitiObjectStreamReturn<Schema extends JSONSchema> {
    * @returns A function that creates new stream that continues from where the original stream left off.
    * It preserves the typing of the original stream.
    */
-  continue: () => GraffitiObjectStreamContinue<Schema>;
+  continue: (
+    session?: GraffitiSession | null,
+  ) => GraffitiObjectStreamContinue<Schema>;
   /**
    * A string that can be serialized and stored to resume the stream later.
    * It must be passed to the {@link Graffiti.continueDiscover} method

package/src/3-errors.ts

@@ -1,11 +1,3 @@
-export class GraffitiErrorUnauthorized extends Error {
-  constructor(message?: string) {
-    super(message);
-    this.name = "GraffitiErrorUnauthorized";
-    Object.setPrototypeOf(this, GraffitiErrorUnauthorized.prototype);
-  }
-}
-
 export class GraffitiErrorForbidden extends Error {
   constructor(message?: string) {
     super(message);
@@ -53,19 +45,3 @@ export class GraffitiErrorNotAcceptable extends Error {
     Object.setPrototypeOf(this, GraffitiErrorNotAcceptable.prototype);
   }
 }
-
-export class GraffitiErrorInvalidUrl extends Error {
-  constructor(message?: string) {
-    super(message);
-    this.name = "GraffitiErrorInvalidUrl";
-    Object.setPrototypeOf(this, GraffitiErrorInvalidUrl.prototype);
-  }
-}
-
-export class GraffitiErrorUnrecognizedUrlScheme extends Error {
-  constructor(message?: string) {
-    super(message);
-    this.name = "GraffitiErrorUnrecognizedUriScheme";
-    Object.setPrototypeOf(this, GraffitiErrorUnrecognizedUrlScheme.prototype);
-  }
-}

package/src/4-utilities.ts

@@ -0,0 +1,65 @@
+import type { JSONSchema } from "json-schema-to-ts";
+import type { Ajv } from "ajv";
+import { GraffitiErrorInvalidSchema } from "./3-errors";
+import type {
+  GraffitiObjectBase,
+  GraffitiObject,
+  GraffitiObjectUrl,
+  GraffitiSession,
+} from "./2-types";
+
+export function unpackObjectUrl(url: string | GraffitiObjectUrl) {
+  return typeof url === "string" ? url : url.url;
+}
+
+export function compileGraffitiObjectSchema<Schema extends JSONSchema>(
+  ajv: Ajv,
+  schema: Schema,
+) {
+  try {
+    // Force the validation guard because
+    // it is too big for the type checker.
+    // Fortunately json-schema-to-ts is
+    // well tested against ajv.
+    return ajv.compile(schema) as (
+      data: GraffitiObjectBase,
+    ) => data is GraffitiObject<Schema>;
+  } catch (error) {
+    throw new GraffitiErrorInvalidSchema(
+      error instanceof Error ? error.message : undefined,
+    );
+  }
+}
+
+export function isActorAllowedGraffitiObject(
+  object: GraffitiObjectBase,
+  session?: GraffitiSession | null,
+) {
+  return (
+    // If there is no allowed list, the actor is allowed.
+    !Array.isArray(object.allowed) ||
+    // Otherwise...
+    (typeof session?.actor === "string" &&
+      // The actor must be the creator of the object
+      (object.actor === session.actor ||
+        // Or be on the allowed list
+        object.allowed.includes(session.actor)))
+  );
+}
+
+export function maskGraffitiObject(
+  object: GraffitiObjectBase,
+  channels: string[],
+  session?: GraffitiSession | null,
+): void {
+  // If the actor is not the creator, mask the object.
+  if (object.actor !== session?.actor) {
+    // If there is an allowed list, mask it to only include the actor
+    // (This assumes the actor is already allowed to access the object)
+    object.allowed = object.allowed && session ? [session.actor] : undefined;
+    // Mask the channels to only include the channels that are being queried
+    object.channels = object.channels.filter((channel) =>
+      channels.includes(channel),
+    );
+  }
+}

package/src/index.ts

@@ -1,4 +1,5 @@
 export * from "./1-api";
 export * from "./2-types";
 export * from "./3-errors";
+export * from "./4-utilities";
 export type { JSONSchema } from "json-schema-to-ts";

package/tests/crud.ts

@@ -80,21 +80,6 @@ export const graffitiCRUDTests = (
         );
       });
 
-      it("post then delete object that is not allowed", async () => {
-        const posted = await graffiti.post<{}>(
-          {
-            value: {},
-            channels: [],
-            allowed: [],
-          },
-          session1,
-        );
-
-        await expect(graffiti.delete(posted, session2)).rejects.toThrow(
-          GraffitiErrorNotFound,
-        );
-      });
-
       it("post and get with schema", async () => {
         const schema = {
           properties: {

package/tests/index.ts

@@ -1,3 +1,4 @@
-// export * from "./crud";
-// export * from "./discover";
+export * from "./crud";
+export * from "./discover";
 export * from "./utils";
+export * from "./media";

package/tests/media.ts

@@ -0,0 +1,158 @@
+import {
+  GraffitiErrorNotAcceptable,
+  GraffitiErrorNotFound,
+  GraffitiErrorTooLarge,
+  type Graffiti,
+  type GraffitiSession,
+} from "@graffiti-garden/api";
+import { it, expect, describe, beforeAll } from "vitest";
+import { randomString } from "./utils";
+
+export const graffitiMediaTests = (
+  useGraffiti: () => Pick<Graffiti, "postMedia" | "getMedia" | "deleteMedia">,
+  useSession1: () => GraffitiSession | Promise<GraffitiSession>,
+  useSession2: () => GraffitiSession | Promise<GraffitiSession>,
+) => {
+  describe.concurrent(
+    "media",
+    {
+      timeout: 20000,
+    },
+    () => {
+      let graffiti: ReturnType<typeof useGraffiti>;
+      let session: GraffitiSession;
+      let session1: GraffitiSession;
+      let session2: GraffitiSession;
+      beforeAll(async () => {
+        graffiti = useGraffiti();
+        session1 = await useSession1();
+        session = session1;
+        session2 = await useSession2();
+      });
+
+      it("post, get, delete media", async () => {
+        // Post media
+        const text = randomString();
+        const data = new Blob([text], { type: "text/plain" });
+        const mediaUrl = await graffiti.postMedia({ data }, session);
+
+        // Get the media back
+        const media = await graffiti.getMedia(mediaUrl, {});
+        expect(await media.data.text()).toEqual(text);
+        expect(media.data.type).toEqual("text/plain");
+        expect(media.allowed).toBeUndefined();
+        expect(media.actor).toBe(session.actor);
+
+        // Delete the media
+        await graffiti.deleteMedia(mediaUrl, session);
+
+        // Try to get the media again
+        await expect(graffiti.getMedia(mediaUrl, {})).rejects.toThrow(
+          GraffitiErrorNotFound,
+        );
+      });
+
+      it("acceptable type", async () => {
+        const text = randomString();
+        const data = new Blob([text], { type: "text/plain" });
+        const mediaUrl = await graffiti.postMedia({ data }, session);
+
+        const media = await graffiti.getMedia(mediaUrl, {
+          accept: "text/*",
+        });
+        expect(await media.data.text()).toEqual(text);
+        expect(media.data.type).toEqual("text/plain");
+        expect(media.allowed).toBeUndefined();
+        expect(media.actor).toBe(session.actor);
+      });
+
+      it("unacceptable type", async () => {
+        const text = randomString();
+        const data = new Blob([text], { type: "text/plain" });
+        const mediaUrl = await graffiti.postMedia({ data }, session);
+
+        await expect(
+          graffiti.getMedia(mediaUrl, {
+            accept: "image/*",
+          }),
+        ).rejects.toThrow(GraffitiErrorNotAcceptable);
+      });
+
+      it("acceptable size", async () => {
+        const text = randomString();
+        const data = new Blob([text], { type: "text/plain" });
+        const mediaUrl = await graffiti.postMedia({ data }, session);
+
+        const media = await graffiti.getMedia(mediaUrl, {
+          maxBytes: data.size,
+        });
+        expect(await media.data.text()).toEqual(text);
+        expect(media.data.type).toEqual("text/plain");
+        expect(media.allowed).toBeUndefined();
+        expect(media.actor).toBe(session.actor);
+      });
+
+      it("unacceptable size", async () => {
+        const text = randomString();
+        const data = new Blob([text], { type: "text/plain" });
+        const mediaUrl = await graffiti.postMedia({ data }, session);
+
+        await expect(
+          graffiti.getMedia(mediaUrl, {
+            maxBytes: data.size - 1,
+          }),
+        ).rejects.toThrow(GraffitiErrorTooLarge);
+      });
+
+      it("empty allowed", async () => {
+        const text = randomString();
+        const data = new Blob([text], { type: "text/plain" });
+        const allowed: string[] = [];
+        const mediaUrl = await graffiti.postMedia({ data, allowed }, session1);
+
+        // Get it with the authorized user
+        const media = await graffiti.getMedia(mediaUrl, {}, session1);
+        expect(await media.data.text()).toEqual(text);
+        expect(media.data.type).toEqual("text/plain");
+        expect(media.allowed).toEqual([]);
+        expect(media.actor).toBe(session1.actor);
+
+        // Get it with the unauthorized user
+        await expect(graffiti.getMedia(mediaUrl, {}, session2)).rejects.toThrow(
+          GraffitiErrorNotFound,
+        );
+
+        // Get it without authorization
+        await expect(graffiti.getMedia(mediaUrl, {})).rejects.toThrow(
+          GraffitiErrorNotFound,
+        );
+      });
+
+      it("allowed", async () => {
+        const text = randomString();
+        const data = new Blob([text], { type: "text/plain" });
+        const allowed = [randomString(), session2.actor, randomString()];
+        const mediaUrl = await graffiti.postMedia({ data, allowed }, session1);
+
+        // Get it with the authorized user
+        const media = await graffiti.getMedia(mediaUrl, {}, session1);
+        expect(await media.data.text()).toEqual(text);
+        expect(media.data.type).toEqual("text/plain");
+        expect(media.allowed).toEqual(allowed);
+        expect(media.actor).toBe(session1.actor);
+
+        // Get it with the allowed user
+        const media2 = await graffiti.getMedia(mediaUrl, {}, session2);
+        expect(await media2.data.text()).toEqual(text);
+        expect(media2.data.type).toEqual("text/plain");
+        expect(media2.allowed).toEqual([session2.actor]);
+        expect(media2.actor).toBe(session1.actor);
+
+        // Get it without authorization
+        await expect(graffiti.getMedia(mediaUrl, {})).rejects.toThrow(
+          GraffitiErrorNotFound,
+        );
+      });
+    },
+  );
+};