@haverstack/core 0.40.0 → 0.42.0

package/README.md

@@ -46,40 +46,46 @@ const adapter = await LocalAdapter.open({
 // safe to keep passing on every open, it's a no-op once the record exists.
 const stack = await Stack.open(adapter, { ownerProfile: { name: 'Jane Smith' } });
 
-// Define a type. The handle carries the id and schema, and the compiler
+// Define a type. The handle carries the id, name and schema, and the compiler
 // derives the content type from it — no separate interface to keep in step.
-const Note = typeHandle('com.example.myapp/note@1', {
-  text: { kind: 'text', required: true },
-  title: { kind: 'string' },
+const Note = typeHandle({
+  id: 'com.example.myapp/note@1',
+  name: 'Note',
+  schema: {
+    text: { kind: 'text', required: true },
+    title: { kind: 'string' },
+  },
 });
-await stack.defineType({ ...Note, name: 'Note' });
+await stack.defineType(Note);
+
+// Typed access to the Note family
+const notes = stack.collection(Note);
 
 // Create a record
-const note = await stack.create(Note, {
+const note = await notes.create({
   text: 'Hello, Haverstack!',
   title: 'My first note',
 });
 
 // Update its content (partial merge — only changed fields needed)
-await stack.patchContent(Note, note.id, { title: 'Updated title' });
+await notes.patchContent(note.id, { title: 'Updated title' });
 
 // Read it back, typed: `content.text` is a string
-const same = await stack.get(Note, note.id);
+const same = await notes.get(note.id);
 
 // Tag it
-await stack.associate(note.id, [{ kind: 'tag', label: 'favourite' }]);
+await notes.associate(note.id, [{ kind: 'tag', label: 'favourite' }]);
 
 // Or change several things at once — one version, one atomic write
-await stack.mutate(note.id, {
+await notes.mutate(note.id, {
   contentPatch: { title: 'Final title' },
   permissions: [{ kind: 'anyone', label: 'read' }],
   unlisted: false,
 });
 
-// Query. With no filter, query() returns every record you can read, from every
-// app and system types included, so filter by typeId, baseId or appId to get your own.
-const notes = await stack.query({
-  filter: { typeId: 'com.example.myapp/note@1', tags: ['favourite'] },
+// Query the family. stack.query() reads across every type you can see instead.
+const { records: favourites } = await notes.query({
+  filter: { tags: ['favourite'] },
   sort: { field: 'createdAt', direction: 'desc' },
 });
 
@@ -92,60 +98,117 @@ await stack.close();
 An app has two layers, because the stack draws a line between them:
 
 - **A data layer that takes a `StackClient`** — the record API `Stack` and `ScopedStack` both implement. The same code then runs embedded as the owner, or behind a server as a requester who reaches only what they were granted.
-- **An install function that takes a `Stack`**, run by the owner. Defining types, `migrateAll()` and `grantType()` change the whole stack rather than one record, so they live on `Stack` alone and are absent from `StackClient`. Over the wire, `POST /types` and `POST /records/:id/migrate` are served to the owner acting alone.
+- **An install that the owner approves.** Defining types, `migrateAll()` and `grantType()` change the whole stack rather than one record, so they live on `Stack` alone and are absent from `StackClient`.
 
-`registerMigration()` belongs to neither. Its registry lives in memory on each `Stack` instance, so it runs at **every startup**, right after `Stack.open()` — an install function that registers migrations and runs once leaves every later start without them.
+Migrations belong to neither. They are passed to `Stack.open()` on **every startup**, so the chain is complete before the first read.
 
 ```ts
-import { Stack, typeHandle, type StackClient } from '@haverstack/core';
+import { Stack, map, migration, typeHandle } from '@haverstack/core';
+import type { AppManifest, Collection, ContentOf, StackClient } from '@haverstack/core';
 
-const NoteV1 = typeHandle('com.example.myapp/note@1', {
-  text: { kind: 'text', required: true },
+export const Shelf = typeHandle({
+  id: 'com.example.reading/shelf@1',
+  name: 'Shelf',
+  schema: { name: { kind: 'string', required: true } },
 });
-export const Note = typeHandle('com.example.myapp/note@2', {
-  text: { kind: 'text', required: true },
-  pinned: { kind: 'boolean', required: true },
+const BookV1 = typeHandle({
+  id: 'com.example.reading/book@1',
+  name: 'Book',
+  schema: {
+    title: { kind: 'string', required: true },
+    status: { kind: 'enum', values: ['reading', 'done'], required: true },
+  },
+});
+export const Book = typeHandle({
+  id: 'com.example.reading/book@2',
+  name: 'Book',
+  migratesFrom: BookV1,
+  schema: {
+    title: { kind: 'string', required: true },
+    status: { kind: 'enum', values: ['reading', 'finished'], required: true },
+    shelfId: { kind: 'record-ref' },
+  },
 });
+export const Review = typeHandle({
+  id: 'com.example.reading/review@1',
+  name: 'Review',
+  schema: {
+    bookId: { kind: 'record-ref', required: true },
+    rating: { kind: 'number', required: true },
+    text: { kind: 'text' },
+  },
+});
+
+export interface ShelfContent extends ContentOf<typeof Shelf.schema> {}
+export interface BookContent extends ContentOf<typeof Book.schema> {}
+export interface ReviewContent extends ContentOf<typeof Review.schema> {}
+
+// Startup: pass to every Stack.open(). Each step is checked against both
+// handles' schemas when migration() runs.
+export const migrations = [migration(BookV1, Book, [map('status', { done: 'finished' })])];
+
+// Data layer: one collection per type, and typed records from every verb.
+export class Library {
+  readonly shelves: Collection<ShelfContent>;
+  readonly books: Collection<BookContent>;
+  readonly reviews: Collection<ReviewContent>;
 
-// Data layer: whoever the stack lets in.
-export class Notes {
-  constructor(private readonly client: StackClient) {}
-  add(text: string) {
-    return this.client.create(Note, { text, pinned: false });
+  constructor(client: StackClient) {
+    this.shelves = client.collection(Shelf);
+    this.books = client.collection(Book);
+    this.reviews = client.collection(Review);
   }
-  pin(id: string) {
-    return this.client.patchContent(Note, id, { pinned: true });
+
+  addBook(title: string, shelfId: string) {
+    return this.books.create({ title, status: 'reading', shelfId });
   }
-  list() {
-    return this.client.query(Note);
+
+  finish(id: string) {
+    return this.books.patchContent(id, { status: 'finished' });
   }
-}
 
-// Startup: every open, every Stack instance.
-export function registerNoteMigrations(stack: Stack) {
-  stack.registerMigration({
-    from: NoteV1.id,
-    to: Note.id,
-    migrate: (content) => ({ ...content, pinned: false }),
-  });
-}
+  review(bookId: string, rating: number, text?: string) {
+    return this.reviews.create({ bookId, rating, ...(text && { text }) });
+  }
 
-// Install: the owner, once per stack and again after a schema change.
-// defineType() is a no-op for a schema already stored, so re-running is safe.
-export async function installNotes(stack: Stack, appDid?: string) {
-  await stack.defineType({ ...NoteV1, name: 'Note' });
-  await stack.defineType({ ...Note, name: 'Note', migratesFrom: NoteV1.id });
-  await stack.migrateAll(Note.baseId);
-  if (appDid) {
-    await stack.grantType(Note.baseId, {
-      actions: ['create', 'read-own', 'update-own', 'delete-own'],
-      grantee: { kind: 'entity', entityId: appDid },
+  // Records at @1 come back migrated to @2. One written by a newer release
+  // of the app can't be migrated down, so it is reported, not thrown.
+  async onShelf(shelfId: string) {
+    const page = await this.books.query({
+      filter: { content: { shelfId } },
+      sort: { contentField: 'title' },
     });
+    if (page.misfits.length > 0) {
+      console.warn(`${page.misfits.length} books need a newer version of this app`);
+    }
+    return page.records;
   }
 }
+
+// Install, when the owner runs the app. defineType() is a no-op for a
+// schema already stored, so re-running after an upgrade is safe.
+export async function install(stack: Stack) {
+  for (const handle of [Shelf, BookV1, Book, Review]) await stack.defineType(handle);
+  await stack.migrateAll(Book.baseId);
+}
+
+// Install, when the owner doesn't: the same handles, as a request.
+export const manifest: AppManifest = {
+  appId: 'com.example.reading',
+  name: 'Reading',
+  types: [Shelf, BookV1, Book, Review],
+  requests: [Shelf, Book, Review].map((handle) => ({
+    baseId: handle.baseId,
+    actions: ['create', 'read-own', 'update-own', 'delete-own'],
+  })),
+};
 ```
 
-The owner's own app calls `registerNoteMigrations(stack)` and `installNotes(stack)`, then `new Notes(stack)`. A server hands each requester `new Notes(stack.asActor(session))`. An app that isn't the owner has no way to install its own types yet; the owner runs its install function for it.
+**When the owner runs the app**, it opens with `Stack.open(adapter, { migrations })`, calls `install(stack)`, then `new Library(stack)`. A server hands each requester `new Library(stack.asActor(session))`.
+
+**When the app runs elsewhere** — holding its own key and reaching the stack through `APIAdapter` — it can't define types, so it asks: `adapter.requestInstall(manifest)` resolves to `pending` until the owner approves. The owner reviews `stack.planInstall(manifest, { did })` and applies it with `stack.installApp(plan)`, which defines the types, registers the app's key and grants it the requests. The app still opens with its `migrations`, then builds `new Library(stack)` over its own connection. See [App installs](https://github.com/haverstack/core/blob/main/docs/spec/apps.md).
+
+**Name content with an interface**, as above. `ContentOf` flattens its result, so a `type` alias shows the expanded object in editor hovers, while an interface keeps its name. typescript-eslint's recommended `no-empty-object-type` rule rejects an empty interface; its `allowInterfaces: 'with-single-extends'` option admits this one.
 
 ## Core concepts
 
@@ -186,24 +249,23 @@ Tags, attachments, and relationships are unified under a single model:
 
 ### Migrations
 
-Types can evolve over time. Register migration functions between adjacent versions and the library composes them into chains automatically:
+Types can evolve over time. A new version names the one it migrates from, and `migration()` builds the step between two handles from declared steps — `rename`, `map`, `add`, `drop` and `derive` — checked against both schemas when it runs. Pass every step to `Stack.open()`; the library composes adjacent steps into chains:
 
 ```ts
-await stack.defineType({
+const NoteV2 = typeHandle({
   id: 'com.example.myapp/note@2',
   name: 'Note',
+  migratesFrom: NoteV1,
   schema: { text: { kind: 'text', required: true }, title: { kind: 'string' } },
-  migratesFrom: 'com.example.myapp/note@1',
 });
 
-stack.registerMigration({
-  from: 'com.example.myapp/note@1',
-  to: 'com.example.myapp/note@2',
-  migrate: (content) => ({ ...content, title: '' }),
+const stack = await Stack.open(adapter, {
+  migrations: [migration(NoteV1, NoteV2, [add('title', '')])],
 });
+await stack.defineType(NoteV2);
 ```
 
-Records stay at the version they were written at: `get()` and `query()` return them as stored, `presentAt: 'latest'` migrates them in memory for one read, and `stack.migrateAll()` commits a family to disk. Register migrations at every startup — see [Writing an app](#writing-an-app).
+Records stay at the version they were written at: `get()` and `query()` return them as stored, `presentAt: 'latest'` migrates them in memory for one read, and `stack.migrateAll()` commits a family to disk. Because the steps are declared rather than a function, a collection carries a content filter or sort across the versions they translate to — a filter on `title` reaches records still at `@1`. Pass migrations at every startup — see [Writing an app](#writing-an-app).
 
 ## License
 

package/dist/access.d.ts

@@ -3,16 +3,17 @@
  * -------------------------------------------------------
  * Implements the Permissions model from the spec: a pure predicate over a
  * Record's `permissions` field, with no dependency on a transport layer or
- * storage backend. Used by ScopedStack (see scoped-stack.ts) to enforce
+ * storage backend. Used by ScopedStack (see scoped-stack/scoped-stack.ts) to enforce
  * access control; exported standalone for callers that want the raw
- * predicate.
+ * predicate. Also the one home of the `_group` roster rules that predicate
+ * and the grant path resolve against, and of the owner-acting-alone tier.
  *
  * A permission set is read as data throughout, never as the type: it can
  * arrive from an import or a foreign server, where no compiler has seen
  * it. Every tier is affirmative, so an element read past its own kind —
  * or carrying no kind at all — confers nothing.
  */
-import type { Association, AuthorityAssociation, DataAssociation, EntityId, GroupRole, RecordId, StackRecord } from './types.js';
+import type { AuthorityAssociation, DataAssociation, EntityId, GroupRole, RecordId, StackRecord } from './types/index.js';
 import type { ValidationError } from './validate.js';
 export type AccessMode = 'read' | 'write';
 /**
@@ -21,13 +22,10 @@ export type AccessMode = 'read' | 'write';
  */
 export type RecordResolver = (id: RecordId) => Promise<StackRecord | null>;
 /**
- * Whether an entity has read or write access to a Record.
- *
- * The entity here is the **subject** — record-level permissions are written
- * about who data is for, never about the software that carried the request.
- * A delegated app's own authority is a separate question, asked of the
- * principal. See docs/spec/access-control.md § Record-level permissions and
- * § Delegation: principal and subject.
+ * Whether an entity may read or write a Record. The entity is the
+ * **subject**: record-level permissions are written about who data is for,
+ * never the software carrying the request, whose authority is asked of the
+ * principal. See docs/spec/access-control.md § Delegation: principal and subject.
  */
 export declare function checkAccess(record: StackRecord, subjectEntityId: EntityId | null, ownerEntityId: EntityId | null, mode: AccessMode, resolveRecord: RecordResolver): Promise<boolean>;
 /**
@@ -39,40 +37,40 @@ export declare function checkAccess(record: StackRecord, subjectEntityId: Entity
  */
 export declare function validatePermissions(permissions: AuthorityAssociation[] | undefined, path?: string): ValidationError[];
 /**
- * Whether a Record is a roster anything may resolve against, on two counts.
- * The family check: without it an app modelling its own `member` links
- * would turn every record it points a permission at into an ACL. The
- * tombstone check: deleting a Group is how a Group is withdrawn. Shared
- * with the grant path, so the two layers cannot disagree about which Groups
- * still reach anyone. See docs/spec/identity.md § Group.
+ * An entity's role on the `_group` roster `groupId` names. `memo`, when
+ * given, is built per operation, so no resolved role outlives the operation
+ * that resolved it — removal from a group must never go stale.
+ */
+export declare function resolveGroupRole(groupId: RecordId, entityId: EntityId, resolveRecord: RecordResolver, memo?: Map<string, GroupRole | null>): Promise<GroupRole | null>;
+/** Whether a held role meets a grantee's: an admin is also a member. */
+export declare function roleSatisfies(held: GroupRole | null, required: GroupRole): boolean;
+/**
+ * Whether a Record is a `_group`, in any of its type versions — the family
+ * whose roster rules apply.
+ */
+export declare function isGroupRecord(record: StackRecord): boolean;
+/**
+ * Whether a Record is a roster anything may resolve against: a `_group`,
+ * or an app's own `member` links would turn records into ACLs, and not
+ * deleted, since deleting a Group withdraws it. Shared with the grant path
+ * so the two cannot disagree. See docs/spec/identity.md § Group.
  */
 export declare function carriesRoster(record: StackRecord): boolean;
 /**
- * An entity's role within a `_group` Record's roster. `admin`
- * short-circuits, so a matching admin association wins regardless of order.
- *
- * Reads associations alone and cannot tell whose they are: callers pass
- * carriesRoster() first, or an app's own `member` relationships become a
- * roster.
+ * An entity's role on a `_group` roster; a matching `admin` wins regardless
+ * of order. Reads associations alone and cannot tell whose they are, so
+ * callers pass carriesRoster() first.
  */
 export declare function groupRoleFromAssociations(associations: DataAssociation[] | undefined, entityId: EntityId): GroupRole | null;
 /**
- * Whether a roster carries at least one `admin` — the invariant every write
- * to a `_group` Record must leave standing. Asked of the roster a write
- * would *produce*, never the one it started from: that is what lets an
- * admin remove themselves while another remains, and refuses the same
- * removal when they are the last, without either case naming who is going.
- * Reads associations alone, on the same terms as
- * groupRoleFromAssociations() above.
+ * Whether a roster carries at least one `admin` — the invariant every
+ * `_group` write must leave standing. Asked of the roster the write would
+ * *produce*, which lets an admin leave while another remains and refuses
+ * the last. Reads associations alone, like groupRoleFromAssociations().
  */
 export declare function hasGroupAdmin(associations: DataAssociation[] | undefined): boolean;
-/**
- * Whether one association is an `admin` roster entry. The `entity` target is
- * what makes it one — a `record` target carrying the same label confers
- * nothing, so it must not count toward the invariant either.
- * See docs/spec/data-model.md § Relationship targets.
- */
-export declare function isGroupAdminAssociation(association: Association): boolean;
+/** Bootstraps a `_group` record's first admin at create time. */
+export declare function stampGroupAdmin(associations: DataAssociation[] | undefined, creator: EntityId): DataAssociation[];
 /**
  * Whether a request is the stack owner acting alone — the tier behind every
  * unconditional owner authority. Being the owner is never sufficient on its

package/dist/access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,QAAQ,EACR,SAAS,EAET,QAAQ,EACR,WAAW,EACZ,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AAE1C;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;AAE3E;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,EACnB,eAAe,EAAE,QAAQ,GAAG,IAAI,EAChC,aAAa,EAAE,QAAQ,GAAG,IAAI,EAC9B,IAAI,EAAE,UAAU,EAChB,aAAa,EAAE,cAAc,GAC5B,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAyCD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,oBAAoB,EAAE,GAAG,SAAS,EAC/C,IAAI,SAAgB,GACnB,eAAe,EAAE,CAanB;AAaD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAE1D;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,eAAe,EAAE,GAAG,SAAS,EAC3C,QAAQ,EAAE,QAAQ,GACjB,SAAS,GAAG,IAAI,CASlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,SAAS,GAAG,OAAO,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAMzE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,SAAS,EAAE,QAAQ,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,EACpE,aAAa,EAAE,QAAQ,GACtB,OAAO,CAGT"}
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAEV,oBAAoB,EACpB,eAAe,EACf,QAAQ,EAER,SAAS,EAET,QAAQ,EAER,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AAE1C;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,EACnB,eAAe,EAAE,QAAQ,GAAG,IAAI,EAChC,aAAa,EAAE,QAAQ,GAAG,IAAI,EAC9B,IAAI,EAAE,UAAU,EAChB,aAAa,EAAE,cAAc,GAC5B,OAAO,CAAC,OAAO,CAAC,CA4BlB;AA0CD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,oBAAoB,EAAE,GAAG,SAAS,EAC/C,IAAI,SAAgB,GACnB,eAAe,EAAE,CAanB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,QAAQ,EACjB,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,cAAc,EAC7B,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC,GACnC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAS3B;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,EAAE,QAAQ,EAAE,SAAS,GAAG,OAAO,CAElF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAE1D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,eAAe,EAAE,GAAG,SAAS,EAC3C,QAAQ,EAAE,QAAQ,GACjB,SAAS,GAAG,IAAI,CASlB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,SAAS,GAAG,OAAO,CAElF;AAkBD,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,YAAY,EAAE,eAAe,EAAE,GAAG,SAAS,EAC3C,OAAO,EAAE,QAAQ,GAChB,eAAe,EAAE,CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,SAAS,EAAE,QAAQ,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,EACpE,aAAa,EAAE,QAAQ,GACtB,OAAO,CAGT"}

package/dist/access.js

@@ -3,26 +3,24 @@
  * -------------------------------------------------------
  * Implements the Permissions model from the spec: a pure predicate over a
  * Record's `permissions` field, with no dependency on a transport layer or
- * storage backend. Used by ScopedStack (see scoped-stack.ts) to enforce
+ * storage backend. Used by ScopedStack (see scoped-stack/scoped-stack.ts) to enforce
  * access control; exported standalone for callers that want the raw
- * predicate.
+ * predicate. Also the one home of the `_group` roster rules that predicate
+ * and the grant path resolve against, and of the owner-acting-alone tier.
  *
  * A permission set is read as data throughout, never as the type: it can
  * arrive from an import or a foreign server, where no compiler has seen
  * it. Every tier is affirmative, so an element read past its own kind —
  * or carrying no kind at all — confers nothing.
  */
-import { SYSTEM_TYPES } from './types.js';
-import { granteeEqual } from './record-changes.js';
+import { SYSTEM_TYPES } from './types/index.js';
+import { granteeEqual } from './associations/identity.js';
 import { baseIdOf } from './schema.js';
 /**
- * Whether an entity has read or write access to a Record.
- *
- * The entity here is the **subject** — record-level permissions are written
- * about who data is for, never about the software that carried the request.
- * A delegated app's own authority is a separate question, asked of the
- * principal. See docs/spec/access-control.md § Record-level permissions and
- * § Delegation: principal and subject.
+ * Whether an entity may read or write a Record. The entity is the
+ * **subject**: record-level permissions are written about who data is for,
+ * never the software carrying the request, whose authority is asked of the
+ * principal. See docs/spec/access-control.md § Delegation: principal and subject.
  */
 export async function checkAccess(record, subjectEntityId, ownerEntityId, mode, resolveRecord) {
     if (subjectEntityId && subjectEntityId === ownerEntityId)
@@ -31,6 +29,9 @@ export async function checkAccess(record, subjectEntityId, ownerEntityId, mode,
     // No permissions = private.
     if (!perms || perms.length === 0)
         return false;
+    // Two elements can name one group (a `member` and an `admin` read), and
+    // the roster answers both the same way within one check.
+    const roles = new Map();
     for (const p of perms) {
         if (p?.kind === 'anyone') {
             if (mode === 'read' && isWorldRead(p))
@@ -48,7 +49,7 @@ export async function checkAccess(record, subjectEntityId, ownerEntityId, mode,
         // See docs/spec/access-control.md § Write implies read.
         if (mode === 'write' && !holdsRead(perms, p.grantee))
             continue;
-        if (await granteeCovers(p.grantee, subjectEntityId, resolveRecord))
+        if (await granteeCovers(p.grantee, subjectEntityId, resolveRecord, roles))
             return true;
     }
     return false;
@@ -77,13 +78,13 @@ function isWorldRead(association) {
  * Whether a grantee reaches this subject. `role: 'member'` is the wider
  * set — an admin satisfies it — and `role: 'admin'` the narrower.
  */
-async function granteeCovers(grantee, subjectEntityId, resolveRecord) {
+async function granteeCovers(grantee, subjectEntityId, resolveRecord, roles) {
     if (!subjectEntityId)
         return false;
     if (grantee.kind === 'entity')
         return grantee.entityId === subjectEntityId;
-    const role = await resolveGroupRole(grantee.groupId, subjectEntityId, resolveRecord);
-    return grantee.role === 'admin' ? role === 'admin' : role !== null;
+    const role = await resolveGroupRole(grantee.groupId, subjectEntityId, resolveRecord, roles);
+    return roleSatisfies(role, grantee.role);
 }
 /**
  * Rejects a permission set where some grantee holds `write` with no `read`
@@ -107,31 +108,45 @@ export function validatePermissions(permissions, path = 'permissions') {
     });
     return errors;
 }
-/** Resolve a role from the `_group` Record a permission's `groupId` names. */
-async function resolveGroupRole(groupRecordId, entityId, resolveRecord) {
-    const group = await resolveRecord(groupRecordId);
-    if (!group || !carriesRoster(group))
-        return null;
-    return groupRoleFromAssociations(group.associations, entityId);
+/**
+ * An entity's role on the `_group` roster `groupId` names. `memo`, when
+ * given, is built per operation, so no resolved role outlives the operation
+ * that resolved it — removal from a group must never go stale.
+ */
+export async function resolveGroupRole(groupId, entityId, resolveRecord, memo) {
+    const key = `${groupId}:${entityId}`;
+    const cached = memo?.get(key);
+    if (cached !== undefined)
+        return cached;
+    const group = await resolveRecord(groupId);
+    const role = group && carriesRoster(group) ? groupRoleFromAssociations(group.associations, entityId) : null;
+    memo?.set(key, role);
+    return role;
+}
+/** Whether a held role meets a grantee's: an admin is also a member. */
+export function roleSatisfies(held, required) {
+    return required === 'admin' ? held === 'admin' : held !== null;
 }
 /**
- * Whether a Record is a roster anything may resolve against, on two counts.
- * The family check: without it an app modelling its own `member` links
- * would turn every record it points a permission at into an ACL. The
- * tombstone check: deleting a Group is how a Group is withdrawn. Shared
- * with the grant path, so the two layers cannot disagree about which Groups
- * still reach anyone. See docs/spec/identity.md § Group.
+ * Whether a Record is a `_group`, in any of its type versions — the family
+ * whose roster rules apply.
+ */
+export function isGroupRecord(record) {
+    return baseIdOf(record.typeId) === SYSTEM_TYPES.GROUP;
+}
+/**
+ * Whether a Record is a roster anything may resolve against: a `_group`,
+ * or an app's own `member` links would turn records into ACLs, and not
+ * deleted, since deleting a Group withdraws it. Shared with the grant path
+ * so the two cannot disagree. See docs/spec/identity.md § Group.
  */
 export function carriesRoster(record) {
-    return baseIdOf(record.typeId) === SYSTEM_TYPES.GROUP && !record.deletedAt;
+    return isGroupRecord(record) && !record.deletedAt;
 }
 /**
- * An entity's role within a `_group` Record's roster. `admin`
- * short-circuits, so a matching admin association wins regardless of order.
- *
- * Reads associations alone and cannot tell whose they are: callers pass
- * carriesRoster() first, or an app's own `member` relationships become a
- * roster.
+ * An entity's role on a `_group` roster; a matching `admin` wins regardless
+ * of order. Reads associations alone and cannot tell whose they are, so
+ * callers pass carriesRoster() first.
  */
 export function groupRoleFromAssociations(associations, entityId) {
     let role = null;
@@ -146,13 +161,10 @@ export function groupRoleFromAssociations(associations, entityId) {
     return role;
 }
 /**
- * Whether a roster carries at least one `admin` — the invariant every write
- * to a `_group` Record must leave standing. Asked of the roster a write
- * would *produce*, never the one it started from: that is what lets an
- * admin remove themselves while another remains, and refuses the same
- * removal when they are the last, without either case naming who is going.
- * Reads associations alone, on the same terms as
- * groupRoleFromAssociations() above.
+ * Whether a roster carries at least one `admin` — the invariant every
+ * `_group` write must leave standing. Asked of the roster the write would
+ * *produce*, which lets an admin leave while another remains and refuses
+ * the last. Reads associations alone, like groupRoleFromAssociations().
  */
 export function hasGroupAdmin(associations) {
     return (associations ?? []).some(isGroupAdminAssociation);
@@ -163,11 +175,22 @@ export function hasGroupAdmin(associations) {
  * nothing, so it must not count toward the invariant either.
  * See docs/spec/data-model.md § Relationship targets.
  */
-export function isGroupAdminAssociation(association) {
+function isGroupAdminAssociation(association) {
     return (association.kind === 'relationship' &&
         association.label === 'admin' &&
         association.target.kind === 'entity');
 }
+/** Bootstraps a `_group` record's first admin at create time. */
+export function stampGroupAdmin(associations, creator) {
+    const list = associations ?? [];
+    const alreadyAdmin = list.some((a) => isGroupAdminAssociation(a) && a.target.entityId === creator);
+    if (alreadyAdmin)
+        return list;
+    return [
+        ...list,
+        { kind: 'relationship', label: 'admin', target: { kind: 'entity', entityId: creator } },
+    ];
+}
 /**
  * Whether a request is the stack owner acting alone — the tier behind every
  * unconditional owner authority. Being the owner is never sufficient on its

package/dist/access.js.map

@@ -1 +1 @@
-{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAW1C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAWvC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAmB,EACnB,eAAgC,EAChC,aAA8B,EAC9B,IAAgB,EAChB,aAA6B;IAE7B,IAAI,eAAe,IAAI,eAAe,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAEtE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;IAEjC,4BAA4B;IAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QACrD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,SAAS;QAC/B,uEAAuE;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,iDAAiD;QACjD,wDAAwD;QACxD,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC;YAAE,SAAS;QAC/D,IAAI,MAAM,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;IAClF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,WAAmC,EAAE,OAAgB;IACtE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,CAAC,EAAE,IAAI,KAAK,QAAQ;QAClB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CACvF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,WAAiC;IACpD,OAAO,WAAW,CAAC,KAAK,KAAK,MAAM,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,aAAa,CAC1B,OAAgB,EAChB,eAAgC,EAChC,aAA6B;IAE7B,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,QAAQ,KAAK,eAAe,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAA+C,EAC/C,IAAI,GAAG,aAAa;IAEpB,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO;QAC5D,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO;QACvC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG;YACrB,OAAO,EACL,kPAAkP;SACrP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,gBAAgB,CAC7B,aAAuB,EACvB,QAAkB,EAClB,aAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,yBAAyB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,MAAmB;IAC/C,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAA2C,EAC3C,QAAkB;IAElB,IAAI,IAAI,GAAqB,IAAI,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9F,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YACxC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,IAAI,GAAG,QAAQ,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,YAA2C;IACvE,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAwB;IAC9D,OAAO,CACL,WAAW,CAAC,IAAI,KAAK,cAAc;QACnC,WAAW,CAAC,KAAK,KAAK,OAAO;QAC7B,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CACrC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAoE,EACpE,aAAuB;IAEvB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC1F,OAAO,WAAW,KAAK,aAAa,IAAI,KAAK,CAAC,SAAS,KAAK,aAAa,CAAC;AAC5E,CAAC"}
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAahD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAWvC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAmB,EACnB,eAAgC,EAChC,aAA8B,EAC9B,IAAgB,EAChB,aAA6B;IAE7B,IAAI,eAAe,IAAI,eAAe,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAEtE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;IAEjC,4BAA4B;IAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,wEAAwE;IACxE,yDAAyD;IACzD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QACrD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,SAAS;QAC/B,uEAAuE;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,iDAAiD;QACjD,wDAAwD;QACxD,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC;YAAE,SAAS;QAC/D,IAAI,MAAM,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACzF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,WAAmC,EAAE,OAAgB;IACtE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,CAAC,EAAE,IAAI,KAAK,QAAQ;QAClB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CACvF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,WAAiC;IACpD,OAAO,WAAW,CAAC,KAAK,KAAK,MAAM,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,aAAa,CAC1B,OAAgB,EAChB,eAAgC,EAChC,aAA6B,EAC7B,KAAoC;IAEpC,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,QAAQ,KAAK,eAAe,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC5F,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAA+C,EAC/C,IAAI,GAAG,aAAa;IAEpB,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO;QAC5D,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO;QACvC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG;YACrB,OAAO,EACL,kPAAkP;SACrP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAiB,EACjB,QAAkB,EAClB,aAA6B,EAC7B,IAAoC;IAEpC,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GACR,KAAK,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,IAAsB,EAAE,QAAmB;IACvE,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAmB;IAC/C,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAmB;IAC/C,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAA2C,EAC3C,QAAkB;IAElB,IAAI,IAAI,GAAqB,IAAI,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9F,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YACxC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,IAAI,GAAG,QAAQ,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,YAA2C;IACvE,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAC9B,WAAwB;IAExB,OAAO,CACL,WAAW,CAAC,IAAI,KAAK,cAAc;QACnC,WAAW,CAAC,KAAK,KAAK,OAAO;QAC7B,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CACrC,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,YAA2C,EAC3C,OAAiB;IAEjB,MAAM,IAAI,GAAG,YAAY,IAAI,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CACnE,CAAC;IACF,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO;QACL,GAAG,IAAI;QACP,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;KACxF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAoE,EACpE,aAAuB;IAEvB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC1F,OAAO,WAAW,KAAK,aAAa,IAAI,KAAK,CAAC,SAAS,KAAK,aAAa,CAAC;AAC5E,CAAC"}

package/dist/{combine.d.ts → adapter/combine.d.ts}

@@ -1,4 +1,11 @@
-import type { StackAdapter, StackRecordAdapter, StackBlobAdapter } from './types.js';
+/**
+ * Combining adapters
+ * -------------------------------------------------------
+ * A full StackAdapter assembled from a record half and a blob half, so a
+ * deployment can keep records and bytes in different backends without
+ * either adapter knowing about the other.
+ */
+import type { StackAdapter, StackRecordAdapter, StackBlobAdapter } from '../types/index.js';
 /**
  * Compose a StackRecordAdapter and a StackBlobAdapter into a single StackAdapter.
  * Use this when you want different backends for records and blobs, e.g.:

package/dist/adapter/combine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"combine.d.ts","sourceRoot":"","sources":["../../src/adapter/combine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAEV,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAEjB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,gBAAgB,CAAC;CACxB,GAAG,YAAY,CAsEf"}

package/dist/{combine.js → adapter/combine.js}

@@ -1,3 +1,10 @@
+/**
+ * Combining adapters
+ * -------------------------------------------------------
+ * A full StackAdapter assembled from a record half and a blob half, so a
+ * deployment can keep records and bytes in different backends without
+ * either adapter knowing about the other.
+ */
 /**
  * Compose a StackRecordAdapter and a StackBlobAdapter into a single StackAdapter.
  * Use this when you want different backends for records and blobs, e.g.:

package/dist/adapter/combine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"combine.js","sourceRoot":"","sources":["../../src/adapter/combine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAG/B;IACC,OAAO;QACL,IAAI,YAAY;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,CAAC;QACD,IAAI,aAAa;YACf,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ;YACV,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC/B,CAAC;QAED,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC;QAC7D,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,YAAY,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC;QACjF,YAAY,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC;QAC/D,cAAc,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC;QACnE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAEjD,iBAAiB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC;QAE3F,WAAW,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC;QAC/D,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,UAAU,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC;QAC7D,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC;QACzE,eAAe,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAC/C,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;QAE3D,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;QAEzC,qEAAqE;QACrE,gEAAgE;QAChE,+DAA+D;QAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,IAAI;YACtD,mCAAmC,EAAE,CAAC,MAAc,EAAE,eAAyB,EAAE,EAAE,CACjF,KAAK,CAAC,MAAM,CAAC,mCAAoC,CAAC,MAAM,EAAE,eAAe,CAAC;SAC7E,CAAC;QAEF,kEAAkE;QAClE,oEAAoE;QACpE,sEAAsE;QACtE,4CAA4C;QAC5C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI;YACnC,gBAAgB,EAAE,CAAC,IAAsB,EAAE,OAAuC,EAAE,EAAE,CACpF,KAAK,CAAC,MAAM,CAAC,gBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC;SAChD,CAAC;QAEF,+DAA+D;QAC/D,uEAAuE;QACvE,mEAAmE;QACnE,2DAA2D;QAC3D,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3C,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI;YAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAU,EAAE;SACzC,CAAC;QAEF,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/{adapter-entry.d.ts → adapter/index.d.ts}

@@ -7,10 +7,11 @@
  * adapters). Types an app reads too, such as StackCapabilities, live in
  * the root entry point instead: every export has exactly one home.
  */
-export type { StackAdapter, StackRecordAdapter, StackBlobAdapter, BlobInfo, BumpVersionOptions, SnapshotOptions, JournalEntryInput, JournalOptions, SubscribeChangesOptions, } from './types.js';
-export { OwnerMismatchError } from './errors.js';
+export type { StackAdapter, StackRecordAdapter, StackBlobAdapter, BlobInfo, BumpVersionOptions, SnapshotOptions, JournalEntryInput, JournalOptions, MutateOptions, } from '../types/index.js';
+export { OwnerMismatchError } from '../errors.js';
 export { combineAdapters } from './combine.js';
-export { assertQueryCapabilities, assertSortCapability, assertValidSort, assertValidAssociationFilters, assertValidJournalQuery, assertValidVersionsQuery, filtersContent, parseContentFilterKey, } from './query-validation.js';
-export { contentSortEntry, contentSortKey, compareSortEntries } from './sort.js';
+export { assertQueryCapabilities, assertSortCapability, assertValidSort, assertValidAssociationFilters, assertValidJournalQuery, assertValidVersionsQuery, filtersContent, parseContentFilterKey, } from '../query-validation.js';
+export { contentSortEntry, contentSortKey, compareSortEntries, constantSortEntry, sortConstant, } from './sort.js';
 export type { SortEntry } from './sort.js';
-//# sourceMappingURL=adapter-entry.d.ts.map
+export { AUTHORITY_ASSOCIATION_KINDS, partitionAssociations } from '../associations/identity.js';
+//# sourceMappingURL=index.d.ts.map