@inixiative/json-rules 3.4.1 → 3.5.1

package/dist/index.d.cts

@@ -183,7 +183,7 @@ type ModelDefaultNarrowing = {
      * that hop's narrowing (`where`, `picks`/`omits` of the target's columns, further `relations`).
      * Only the first narrowing over the base lens turns a relation on; a later layer may only narrow
      * one its parent shows. Model-default turn-ons grow a tree under each spelled node: each model
-     * once, at its nearest reach; reach it another way by spelling the path under `root`. The first narrowing's grants (`where`) may read any
+     * once, at its nearest reach; reach it another way by spelling the path under `root`. The first narrowing's clamps (`where`) may read any
      * relation; a later layer's only what its parent shows.
      */
     relations?: Record<string, ModelNarrowing>;
@@ -651,6 +651,24 @@ declare const bindLens: <T extends Lens | LensNarrowing>(lensOrNarrowing: T, bin
 /** The base lens a narrowing chain is rooted at; a lens is its own. Throws on a cyclic chain. */
 declare const getLensRoot: (x: Lens | LensNarrowing) => Lens;
 
+type Clamps = Pick<ModelDefaultNarrowing, 'where' | 'sources'>;
+/** Clamps for {@link clampLens}: a `root` where, and per-map model-default wheres and
+ *  source wheres. */
+type LensClamps = {
+    root?: Pick<ModelDefaultNarrowing, 'where'>;
+    mapDefaults?: Record<string, {
+        models: Record<string, Clamps>;
+    }>;
+};
+/**
+ * The lens with `clamps` ANDed into its first narrowing over the base lens (one is added over a
+ * bare lens). A clamp that reads what a later layer hides belongs there: only the first layer's
+ * clamps read the whole schema. A `where` ANDs with the one in place; a source's `where` ANDs
+ * and its `label` / `groupBy` win. Wheres only narrow; a source clamp can add an option set for
+ * a field, or relabel or regroup one, but never widens what rows or columns the lens shows.
+ */
+declare const clampLens: (lens: Lens | LensNarrowing, clamps: LensClamps) => LensNarrowing;
+
 /** Stamp `coerceType` onto every field rule from the lens's field map: the rule carries its
  *  coercion; `check()` never infers types from values. A relation node's condition / filter stamp
  *  against the relation's model; below a Json boundary the kind is undeclared, so nothing is
@@ -753,7 +771,7 @@ type ToPrismaOptions = CompileOptions & {
     };
 };
 
-/** A narrowing the lens refuses to apply: a grant validateNarrowing reports, met at runtime. */
+/** A narrowing the lens refuses to apply: a clamp validateNarrowing reports, met at runtime. */
 declare class LensRefusal extends Error {
     readonly code: string;
     name: string;
@@ -835,20 +853,20 @@ type LensRelationSelect = {
     select?: LensSelect;
     where?: PrismaWhere;
 };
-/** What a grant's compile reads: the clock, never a schema (the lens is it). */
+/** What a clamp's compile reads: the clock, never a schema (the lens is it). */
 type LensSelectOptions = Omit<ToPrismaOptions, 'map' | 'mapName' | 'model' | 'lens'>;
-/** `keepGrantColumns`: keep the columns the lens's `where`s read, though it hides them. The rest is
+/** `keepClampColumns`: keep the columns the lens's `where`s read, though it hides them. The rest is
  *  what each `where` is checked with. */
 type ProjectRowsOptions = CheckOptions & {
-    keepGrantColumns?: boolean;
+    keepClampColumns?: boolean;
 };
 /**
  * Prisma `findMany` args for the rows a lens shows, at its base model: each shown visit's visible
  * columns and the relations turned on there (one that is off is not fetched), and the
- * columns every `where` on the way reads, through any relation. A to-many relation carries its visit's grants compiled as its `where`, so
- * related rows come pre-narrowed, unless a grant reads that list (it reads it whole); a to-one relation can't (Prisma
- * takes no `where` there), so `projectRows` drops one its grant hides. The root's own grants are the
- * query's `where`: `toPrisma(rule, { lens })`. Bridges are not selected. A to-many relation's grant
+ * columns every `where` on the way reads, through any relation. A to-many relation carries its visit's clamps compiled as its `where`, so
+ * related rows come pre-narrowed, unless a clamp reads that list (it reads it whole); a to-one relation can't (Prisma
+ * takes no `where` there), so `projectRows` drops one its clamp hides. The root's own clamps are the
+ * query's `where`: `toPrisma(rule, { lens })`. Bridges are not selected. A to-many relation's clamp
  * that needs a counting step, or has a window toPrisma can't compile, is refused before anything
  * compiles.
  */
@@ -858,13 +876,13 @@ declare const toLensSelect: (lensOrNarrowing: Lens | LensNarrowing, options?: Le
 /**
  * Rows cut to what a lens shows, recursively from its base model: hidden columns, and relations
  * hidden or off, removed, and every row a visit's `where` hides gone — a root or list row dropped, a to-one row
- * null. `keepGrantColumns` also keeps the columns those `where`s read (hidden or not), and a hidden to-one row, or a hidden row of a list a grant
+ * null. `keepClampColumns` also keeps the columns those `where`s read (hidden or not), and a hidden to-one row, or a hidden row of a list a clamp
  * reads, as those columns alone, so a later `check(narrowRule(rule, lens), row)` re-tests the
- * grants as the database does for any rule the lens admits. Its output carries hidden values: it's for that re-check, never for
+ * clamps as the database does for any rule the lens admits. Its output carries hidden values: it's for that re-check, never for
  * a viewer. The rest of `options` is what each
  * `where` is checked with (`now`, `bindings`). Plain JSON in and out; the input is not mutated.
  */
-declare const projectRows: (lensOrNarrowing: Lens | LensNarrowing, rows: readonly Row[], { keepGrantColumns, ...options }?: ProjectRowsOptions) => Row[];
+declare const projectRows: (lensOrNarrowing: Lens | LensNarrowing, rows: readonly Row[], { keepClampColumns, ...options }?: ProjectRowsOptions) => Row[];
 
 /** Prisma `select` shape — nested for a grouped source's relation path. */
 type SourceSelect = {
@@ -881,7 +899,8 @@ type SourcePrismaQuery = {
     distinct?: string[];
     select: SourceSelect;
     where: PrismaWhere;
-    /** Present only if the composed where used count operators (run via executePrismaPlan). */
+    /** Present when the where needs `executePrismaPlan`: a count step, or a column reference to
+     *  resolve. Run `executePrismaPlan({ steps }, prisma)` and query with the where it returns. */
     steps?: PrismaStep[];
 };
 /** `sql` is null when the composed where uses a predicate SQL can't express
@@ -909,7 +928,7 @@ type SourceQuery = {
     composedWhere: Condition;
     prisma: SourcePrismaQuery;
     sql: SourceSqlQuery;
-    /** Present when the source reads across a bridge (its where, a grant carried across one, its
+    /** Present when the source reads across a bridge (its where, a clamp carried across one, its
      * label or an axis); absent otherwise. **If `recheck` is present, the query's rows are
      * candidates, not options:** a database holds one side of a bridge, so the query folds what
      * reads across it to TRUE and over-fetches — it never misses an option, but may return more.
@@ -926,9 +945,9 @@ type SourceQueryOptions = DateConfig;
 /**
  * Compile a DISTINCT(value) query — Prisma and SQL — per sourced field across
  * the projected lens. The WHERE is the field's composed eligibility: the model's
- * own narrowing at that path, the grants above it carried down the path, its source
+ * own narrowing at that path, the clamps above it carried down the path, its source
  * where(s), the guards of the relations they cross and any allowed values. A
- * `from: 'mapDefaults'` source reads the model's own source and carries no grant from
+ * `from: 'mapDefaults'` source reads the model's own source and carries no clamp from
  * its layer on. The app runs these (with its own client) to materialize each field's
  * option set — feed the fetched rows to `materializeSourceQuery`. `options` is the clock a
  * relative date in the where compiles with (`now` required for one, as for any compile). A
@@ -967,10 +986,10 @@ declare const materializeSourceQuery: (query: SourceQuery, rows: readonly Row[],
  * the in-memory executor of `sources` declarations, alongside `toSourceQueries`
  * (which compiles the same declarations to DISTINCT queries for a DB). Rows are
  * the collection the lens fetches — `toLensSelect`'s rows as fetched, or as
- * `projectRows(…, { keepGrantColumns: true })` keeps them; a viewer's projection drops what
- * the sources read, and a row lacking a key a source or a grant on its path reads throws. The
- * path is walked down the rows, each level's grants met, and each row it reaches must meet its
- * visit's grants, its source `where` narrowed as a rule, the guards of the relations its label
+ * `projectRows(…, { keepClampColumns: true })` keeps them; a viewer's projection drops what
+ * the sources read, and a row lacking a key a source or a clamp on its path reads throws. The
+ * path is walked down the rows, each level's clamps met, and each row it reaches must meet its
+ * visit's clamps, its source `where` narrowed as a rule, the guards of the relations its label
  * and axes cross and any allowed values — evaluated with `check()` (`options`: `now`,
  * `bindings`), so it offers what the database does. Scalar-list fields contribute one option per
  * element, a value takes its least label (a sibling column, or a dotted to-one path read through
@@ -990,7 +1009,7 @@ declare const validateNarrowing: (narrowing: LensNarrowing) => ValidationResult;
 /** `validateNarrowing`, throwing its issues. */
 declare const assertValidNarrowing: (narrowing: LensNarrowing) => void;
 
-/** A rule with the lens's grants (`where`s) injected at their anchors: the root's around it, each
+/** A rule with the lens's clamps (`where`s) injected at their anchors: the root's around it, each
  *  relation's where the rule descends into it — under an `all`, into its window `filter`. */
 declare const narrowRule: (rule: Condition, lensOrNarrowing: Lens | LensNarrowing) => Condition;
 
@@ -1018,9 +1037,9 @@ type LensValue = {
 /**
  * One value off a row, as the lens shows it: the path walked as `validateRuleInLens` walks a
  * field (a hidden segment — a column it doesn't keep, a relation it doesn't turn on — or a missing or past-scalar one is refused), each related row checked against
- * its visit's grants, the row itself included (a row a grant hides, or a missing one, reads `null`), and only the row's own
+ * its visit's clamps, the row itself included (a row a clamp hides, or a missing one, reads `null`), and only the row's own
  * properties read, into a Json column too. A path ending on a relation, or crossing a list, names
- * rows rather than a value and is refused. `options` is what each grant is checked with.
+ * rows rather than a value and is refused. `options` is what each clamp is checked with.
  */
 declare const readLensValue: (lensOrNarrowing: Lens | LensNarrowing, row: Row, path: string, options?: CheckOptions) => LensValue;
 
@@ -1132,4 +1151,11 @@ type ToSqlOptions = CompileOptions & {
  *  base lens. */
 declare const toSql: (rule: Condition, compileOptions?: ToSqlOptions) => ToSqlResult;
 
-export { ALL_KINDS, type AggregateMode, type AggregateRule, type All, type Any, ArrayOperator, type ArrayRule, type Bridge, type BridgeCardinality, type BridgeDictionary, type BridgeEndpoint, type CheckData, type CheckOptions, type CompileOptions, type Condition, type DateConfig, type DateExpr, type DateInputOrExpr, type DateInputValue, type DateOffset, DateOperator, type DateRule, type DateRuleValue, type EdgeExpr, type EngineGlobalsState, type EnumNarrowing, FieldKind, type FieldMap, type FieldMapEntry, type FieldMapSet, type FuzzyConfig, type GroupByStep, type IfThenElse, type Lens, type LensNarrowing, type LensPathHop, type LensPathResolution, LensRefusal, type LensRelationSelect, type LensSelect, type LensSelectOptions, type LensValue, type ListBindingsOptions, type Magnitude, type MaterializeSourceQueryOptions, type ModelDefaultNarrowing, type ModelEntry, type ModelNarrowing, NUMERIC_KINDS, type NarrowingDefaults, type NumberOffset, Operator, type OperatorFamily, type OrderBy, type OrderedRuleValue, type PathProjection, type PeriodExpr, type PeriodUnit, type PrismaProvider, type PrismaStep, type PrismaWhere, type ProjectLensOptions, type ProjectRowsOptions, type ProjectedVisit, type RelativeUnits, type RollingExpr, type Row, type Rule, type RuleDescription, type RuleScalar, type RuleSourceDescription, RuleTarget, type RuleValue, type ScopeOutOfBounds, type ScopeRef, type ScopedRef, type SortDir, type SourceEntry, type SourceOption, type SourcePrismaQuery, type SourceQuery, type SourceRowShape, type SourceSelect, type SourceSpec, type SourceSqlQuery, type SourceValues, type StepRef, type StoredLens, type StrictAggregateRule, type StrictAll, type StrictAny, type StrictArrayCountRule, type StrictArrayPredicateRule, type StrictArrayPresenceRule, type StrictArrayRule, type StrictCondition, type StrictContainsRule, type StrictDateComparisonRule, type StrictDateDayRule, type StrictDateRangeRule, type StrictDateRule, type StrictEqualityRule, type StrictIfThenElse, type StrictMembershipRule, type StrictOrderedComparisonRule, type StrictPatternRule, type StrictPresenceRule, type StrictRangeRule, type StrictRule, type StrictStringBoundaryRule, type TimeZoneConfig, type ToPrismaOptions, type ToPrismaResult, type ToSqlOptions, type ToSqlResult, UsageError, type ValidateRuleOptions, type ValidationIssue, type ValidationResult, ValueShape, type ValueSourceFields, type ValueSourceOf, type WeekStart, type WhereStep, type WindowFields, assertValidFieldMaps, assertValidNarrowing, assertValidRule, bindLens, bindRule, check, coerceRule, composeLens, createLens, describeRule, describeRuleSources, engineGlobals, executePrismaPlan, getAggregateOperators, getArrayOperators, getLensRoot, getOperatorsForKind, getValueShape, indexBridges, lensVisit, listBindings, listLensBindings, materializeSourceQuery, materializeSources, narrowRule, parseScopeRef, projectLens, projectRows, readLensValue, readScopeRef, stitchFieldMaps, storeLens, toLensSelect, toPrisma, toSourceQueries, toSql, validateFieldMaps, validateNarrowing, validateRule, validateRuleInLens, walkLensPath };
+/**
+ * Records sorted by an `OrderBy`, the way every rail orders a window: each key in turn, read as an
+ * own-property path, `dir` order, a NULL (or absent) value last in either direction; ties keep their
+ * input order. A new array; the input is not mutated.
+ */
+declare const orderRecords: <T>(items: readonly T[], orderBy: OrderBy) => T[];
+
+export { ALL_KINDS, type AggregateMode, type AggregateRule, type All, type Any, ArrayOperator, type ArrayRule, type Bridge, type BridgeCardinality, type BridgeDictionary, type BridgeEndpoint, type CheckData, type CheckOptions, type CompileOptions, type Condition, type DateConfig, type DateExpr, type DateInputOrExpr, type DateInputValue, type DateOffset, DateOperator, type DateRule, type DateRuleValue, type EdgeExpr, type EngineGlobalsState, type EnumNarrowing, FieldKind, type FieldMap, type FieldMapEntry, type FieldMapSet, type FuzzyConfig, type GroupByStep, type IfThenElse, type Lens, type LensClamps, type LensNarrowing, type LensPathHop, type LensPathResolution, LensRefusal, type LensRelationSelect, type LensSelect, type LensSelectOptions, type LensValue, type ListBindingsOptions, type Magnitude, type MaterializeSourceQueryOptions, type ModelDefaultNarrowing, type ModelEntry, type ModelNarrowing, NUMERIC_KINDS, type NarrowingDefaults, type NumberOffset, Operator, type OperatorFamily, type OrderBy, type OrderedRuleValue, type PathProjection, type PeriodExpr, type PeriodUnit, type PrismaProvider, type PrismaStep, type PrismaWhere, type ProjectLensOptions, type ProjectRowsOptions, type ProjectedVisit, type RelativeUnits, type RollingExpr, type Row, type Rule, type RuleDescription, type RuleScalar, type RuleSourceDescription, RuleTarget, type RuleValue, type ScopeOutOfBounds, type ScopeRef, type ScopedRef, type SortDir, type SourceEntry, type SourceOption, type SourcePrismaQuery, type SourceQuery, type SourceRowShape, type SourceSelect, type SourceSpec, type SourceSqlQuery, type SourceValues, type StepRef, type StoredLens, type StrictAggregateRule, type StrictAll, type StrictAny, type StrictArrayCountRule, type StrictArrayPredicateRule, type StrictArrayPresenceRule, type StrictArrayRule, type StrictCondition, type StrictContainsRule, type StrictDateComparisonRule, type StrictDateDayRule, type StrictDateRangeRule, type StrictDateRule, type StrictEqualityRule, type StrictIfThenElse, type StrictMembershipRule, type StrictOrderedComparisonRule, type StrictPatternRule, type StrictPresenceRule, type StrictRangeRule, type StrictRule, type StrictStringBoundaryRule, type TimeZoneConfig, type ToPrismaOptions, type ToPrismaResult, type ToSqlOptions, type ToSqlResult, UsageError, type ValidateRuleOptions, type ValidationIssue, type ValidationResult, ValueShape, type ValueSourceFields, type ValueSourceOf, type WeekStart, type WhereStep, type WindowFields, assertValidFieldMaps, assertValidNarrowing, assertValidRule, bindLens, bindRule, check, clampLens, coerceRule, composeLens, createLens, describeRule, describeRuleSources, engineGlobals, executePrismaPlan, getAggregateOperators, getArrayOperators, getLensRoot, getOperatorsForKind, getValueShape, indexBridges, lensVisit, listBindings, listLensBindings, materializeSourceQuery, materializeSources, narrowRule, orderRecords, parseScopeRef, projectLens, projectRows, readLensValue, readScopeRef, stitchFieldMaps, storeLens, toLensSelect, toPrisma, toSourceQueries, toSql, validateFieldMaps, validateNarrowing, validateRule, validateRuleInLens, walkLensPath };

package/dist/index.d.ts

@@ -183,7 +183,7 @@ type ModelDefaultNarrowing = {
      * that hop's narrowing (`where`, `picks`/`omits` of the target's columns, further `relations`).
      * Only the first narrowing over the base lens turns a relation on; a later layer may only narrow
      * one its parent shows. Model-default turn-ons grow a tree under each spelled node: each model
-     * once, at its nearest reach; reach it another way by spelling the path under `root`. The first narrowing's grants (`where`) may read any
+     * once, at its nearest reach; reach it another way by spelling the path under `root`. The first narrowing's clamps (`where`) may read any
      * relation; a later layer's only what its parent shows.
      */
     relations?: Record<string, ModelNarrowing>;
@@ -651,6 +651,24 @@ declare const bindLens: <T extends Lens | LensNarrowing>(lensOrNarrowing: T, bin
 /** The base lens a narrowing chain is rooted at; a lens is its own. Throws on a cyclic chain. */
 declare const getLensRoot: (x: Lens | LensNarrowing) => Lens;
 
+type Clamps = Pick<ModelDefaultNarrowing, 'where' | 'sources'>;
+/** Clamps for {@link clampLens}: a `root` where, and per-map model-default wheres and
+ *  source wheres. */
+type LensClamps = {
+    root?: Pick<ModelDefaultNarrowing, 'where'>;
+    mapDefaults?: Record<string, {
+        models: Record<string, Clamps>;
+    }>;
+};
+/**
+ * The lens with `clamps` ANDed into its first narrowing over the base lens (one is added over a
+ * bare lens). A clamp that reads what a later layer hides belongs there: only the first layer's
+ * clamps read the whole schema. A `where` ANDs with the one in place; a source's `where` ANDs
+ * and its `label` / `groupBy` win. Wheres only narrow; a source clamp can add an option set for
+ * a field, or relabel or regroup one, but never widens what rows or columns the lens shows.
+ */
+declare const clampLens: (lens: Lens | LensNarrowing, clamps: LensClamps) => LensNarrowing;
+
 /** Stamp `coerceType` onto every field rule from the lens's field map: the rule carries its
  *  coercion; `check()` never infers types from values. A relation node's condition / filter stamp
  *  against the relation's model; below a Json boundary the kind is undeclared, so nothing is
@@ -753,7 +771,7 @@ type ToPrismaOptions = CompileOptions & {
     };
 };
 
-/** A narrowing the lens refuses to apply: a grant validateNarrowing reports, met at runtime. */
+/** A narrowing the lens refuses to apply: a clamp validateNarrowing reports, met at runtime. */
 declare class LensRefusal extends Error {
     readonly code: string;
     name: string;
@@ -835,20 +853,20 @@ type LensRelationSelect = {
     select?: LensSelect;
     where?: PrismaWhere;
 };
-/** What a grant's compile reads: the clock, never a schema (the lens is it). */
+/** What a clamp's compile reads: the clock, never a schema (the lens is it). */
 type LensSelectOptions = Omit<ToPrismaOptions, 'map' | 'mapName' | 'model' | 'lens'>;
-/** `keepGrantColumns`: keep the columns the lens's `where`s read, though it hides them. The rest is
+/** `keepClampColumns`: keep the columns the lens's `where`s read, though it hides them. The rest is
  *  what each `where` is checked with. */
 type ProjectRowsOptions = CheckOptions & {
-    keepGrantColumns?: boolean;
+    keepClampColumns?: boolean;
 };
 /**
  * Prisma `findMany` args for the rows a lens shows, at its base model: each shown visit's visible
  * columns and the relations turned on there (one that is off is not fetched), and the
- * columns every `where` on the way reads, through any relation. A to-many relation carries its visit's grants compiled as its `where`, so
- * related rows come pre-narrowed, unless a grant reads that list (it reads it whole); a to-one relation can't (Prisma
- * takes no `where` there), so `projectRows` drops one its grant hides. The root's own grants are the
- * query's `where`: `toPrisma(rule, { lens })`. Bridges are not selected. A to-many relation's grant
+ * columns every `where` on the way reads, through any relation. A to-many relation carries its visit's clamps compiled as its `where`, so
+ * related rows come pre-narrowed, unless a clamp reads that list (it reads it whole); a to-one relation can't (Prisma
+ * takes no `where` there), so `projectRows` drops one its clamp hides. The root's own clamps are the
+ * query's `where`: `toPrisma(rule, { lens })`. Bridges are not selected. A to-many relation's clamp
  * that needs a counting step, or has a window toPrisma can't compile, is refused before anything
  * compiles.
  */
@@ -858,13 +876,13 @@ declare const toLensSelect: (lensOrNarrowing: Lens | LensNarrowing, options?: Le
 /**
  * Rows cut to what a lens shows, recursively from its base model: hidden columns, and relations
  * hidden or off, removed, and every row a visit's `where` hides gone — a root or list row dropped, a to-one row
- * null. `keepGrantColumns` also keeps the columns those `where`s read (hidden or not), and a hidden to-one row, or a hidden row of a list a grant
+ * null. `keepClampColumns` also keeps the columns those `where`s read (hidden or not), and a hidden to-one row, or a hidden row of a list a clamp
  * reads, as those columns alone, so a later `check(narrowRule(rule, lens), row)` re-tests the
- * grants as the database does for any rule the lens admits. Its output carries hidden values: it's for that re-check, never for
+ * clamps as the database does for any rule the lens admits. Its output carries hidden values: it's for that re-check, never for
  * a viewer. The rest of `options` is what each
  * `where` is checked with (`now`, `bindings`). Plain JSON in and out; the input is not mutated.
  */
-declare const projectRows: (lensOrNarrowing: Lens | LensNarrowing, rows: readonly Row[], { keepGrantColumns, ...options }?: ProjectRowsOptions) => Row[];
+declare const projectRows: (lensOrNarrowing: Lens | LensNarrowing, rows: readonly Row[], { keepClampColumns, ...options }?: ProjectRowsOptions) => Row[];
 
 /** Prisma `select` shape — nested for a grouped source's relation path. */
 type SourceSelect = {
@@ -881,7 +899,8 @@ type SourcePrismaQuery = {
     distinct?: string[];
     select: SourceSelect;
     where: PrismaWhere;
-    /** Present only if the composed where used count operators (run via executePrismaPlan). */
+    /** Present when the where needs `executePrismaPlan`: a count step, or a column reference to
+     *  resolve. Run `executePrismaPlan({ steps }, prisma)` and query with the where it returns. */
     steps?: PrismaStep[];
 };
 /** `sql` is null when the composed where uses a predicate SQL can't express
@@ -909,7 +928,7 @@ type SourceQuery = {
     composedWhere: Condition;
     prisma: SourcePrismaQuery;
     sql: SourceSqlQuery;
-    /** Present when the source reads across a bridge (its where, a grant carried across one, its
+    /** Present when the source reads across a bridge (its where, a clamp carried across one, its
      * label or an axis); absent otherwise. **If `recheck` is present, the query's rows are
      * candidates, not options:** a database holds one side of a bridge, so the query folds what
      * reads across it to TRUE and over-fetches — it never misses an option, but may return more.
@@ -926,9 +945,9 @@ type SourceQueryOptions = DateConfig;
 /**
  * Compile a DISTINCT(value) query — Prisma and SQL — per sourced field across
  * the projected lens. The WHERE is the field's composed eligibility: the model's
- * own narrowing at that path, the grants above it carried down the path, its source
+ * own narrowing at that path, the clamps above it carried down the path, its source
  * where(s), the guards of the relations they cross and any allowed values. A
- * `from: 'mapDefaults'` source reads the model's own source and carries no grant from
+ * `from: 'mapDefaults'` source reads the model's own source and carries no clamp from
  * its layer on. The app runs these (with its own client) to materialize each field's
  * option set — feed the fetched rows to `materializeSourceQuery`. `options` is the clock a
  * relative date in the where compiles with (`now` required for one, as for any compile). A
@@ -967,10 +986,10 @@ declare const materializeSourceQuery: (query: SourceQuery, rows: readonly Row[],
  * the in-memory executor of `sources` declarations, alongside `toSourceQueries`
  * (which compiles the same declarations to DISTINCT queries for a DB). Rows are
  * the collection the lens fetches — `toLensSelect`'s rows as fetched, or as
- * `projectRows(…, { keepGrantColumns: true })` keeps them; a viewer's projection drops what
- * the sources read, and a row lacking a key a source or a grant on its path reads throws. The
- * path is walked down the rows, each level's grants met, and each row it reaches must meet its
- * visit's grants, its source `where` narrowed as a rule, the guards of the relations its label
+ * `projectRows(…, { keepClampColumns: true })` keeps them; a viewer's projection drops what
+ * the sources read, and a row lacking a key a source or a clamp on its path reads throws. The
+ * path is walked down the rows, each level's clamps met, and each row it reaches must meet its
+ * visit's clamps, its source `where` narrowed as a rule, the guards of the relations its label
  * and axes cross and any allowed values — evaluated with `check()` (`options`: `now`,
  * `bindings`), so it offers what the database does. Scalar-list fields contribute one option per
  * element, a value takes its least label (a sibling column, or a dotted to-one path read through
@@ -990,7 +1009,7 @@ declare const validateNarrowing: (narrowing: LensNarrowing) => ValidationResult;
 /** `validateNarrowing`, throwing its issues. */
 declare const assertValidNarrowing: (narrowing: LensNarrowing) => void;
 
-/** A rule with the lens's grants (`where`s) injected at their anchors: the root's around it, each
+/** A rule with the lens's clamps (`where`s) injected at their anchors: the root's around it, each
  *  relation's where the rule descends into it — under an `all`, into its window `filter`. */
 declare const narrowRule: (rule: Condition, lensOrNarrowing: Lens | LensNarrowing) => Condition;
 
@@ -1018,9 +1037,9 @@ type LensValue = {
 /**
  * One value off a row, as the lens shows it: the path walked as `validateRuleInLens` walks a
  * field (a hidden segment — a column it doesn't keep, a relation it doesn't turn on — or a missing or past-scalar one is refused), each related row checked against
- * its visit's grants, the row itself included (a row a grant hides, or a missing one, reads `null`), and only the row's own
+ * its visit's clamps, the row itself included (a row a clamp hides, or a missing one, reads `null`), and only the row's own
  * properties read, into a Json column too. A path ending on a relation, or crossing a list, names
- * rows rather than a value and is refused. `options` is what each grant is checked with.
+ * rows rather than a value and is refused. `options` is what each clamp is checked with.
  */
 declare const readLensValue: (lensOrNarrowing: Lens | LensNarrowing, row: Row, path: string, options?: CheckOptions) => LensValue;
 
@@ -1132,4 +1151,11 @@ type ToSqlOptions = CompileOptions & {
  *  base lens. */
 declare const toSql: (rule: Condition, compileOptions?: ToSqlOptions) => ToSqlResult;
 
-export { ALL_KINDS, type AggregateMode, type AggregateRule, type All, type Any, ArrayOperator, type ArrayRule, type Bridge, type BridgeCardinality, type BridgeDictionary, type BridgeEndpoint, type CheckData, type CheckOptions, type CompileOptions, type Condition, type DateConfig, type DateExpr, type DateInputOrExpr, type DateInputValue, type DateOffset, DateOperator, type DateRule, type DateRuleValue, type EdgeExpr, type EngineGlobalsState, type EnumNarrowing, FieldKind, type FieldMap, type FieldMapEntry, type FieldMapSet, type FuzzyConfig, type GroupByStep, type IfThenElse, type Lens, type LensNarrowing, type LensPathHop, type LensPathResolution, LensRefusal, type LensRelationSelect, type LensSelect, type LensSelectOptions, type LensValue, type ListBindingsOptions, type Magnitude, type MaterializeSourceQueryOptions, type ModelDefaultNarrowing, type ModelEntry, type ModelNarrowing, NUMERIC_KINDS, type NarrowingDefaults, type NumberOffset, Operator, type OperatorFamily, type OrderBy, type OrderedRuleValue, type PathProjection, type PeriodExpr, type PeriodUnit, type PrismaProvider, type PrismaStep, type PrismaWhere, type ProjectLensOptions, type ProjectRowsOptions, type ProjectedVisit, type RelativeUnits, type RollingExpr, type Row, type Rule, type RuleDescription, type RuleScalar, type RuleSourceDescription, RuleTarget, type RuleValue, type ScopeOutOfBounds, type ScopeRef, type ScopedRef, type SortDir, type SourceEntry, type SourceOption, type SourcePrismaQuery, type SourceQuery, type SourceRowShape, type SourceSelect, type SourceSpec, type SourceSqlQuery, type SourceValues, type StepRef, type StoredLens, type StrictAggregateRule, type StrictAll, type StrictAny, type StrictArrayCountRule, type StrictArrayPredicateRule, type StrictArrayPresenceRule, type StrictArrayRule, type StrictCondition, type StrictContainsRule, type StrictDateComparisonRule, type StrictDateDayRule, type StrictDateRangeRule, type StrictDateRule, type StrictEqualityRule, type StrictIfThenElse, type StrictMembershipRule, type StrictOrderedComparisonRule, type StrictPatternRule, type StrictPresenceRule, type StrictRangeRule, type StrictRule, type StrictStringBoundaryRule, type TimeZoneConfig, type ToPrismaOptions, type ToPrismaResult, type ToSqlOptions, type ToSqlResult, UsageError, type ValidateRuleOptions, type ValidationIssue, type ValidationResult, ValueShape, type ValueSourceFields, type ValueSourceOf, type WeekStart, type WhereStep, type WindowFields, assertValidFieldMaps, assertValidNarrowing, assertValidRule, bindLens, bindRule, check, coerceRule, composeLens, createLens, describeRule, describeRuleSources, engineGlobals, executePrismaPlan, getAggregateOperators, getArrayOperators, getLensRoot, getOperatorsForKind, getValueShape, indexBridges, lensVisit, listBindings, listLensBindings, materializeSourceQuery, materializeSources, narrowRule, parseScopeRef, projectLens, projectRows, readLensValue, readScopeRef, stitchFieldMaps, storeLens, toLensSelect, toPrisma, toSourceQueries, toSql, validateFieldMaps, validateNarrowing, validateRule, validateRuleInLens, walkLensPath };
+/**
+ * Records sorted by an `OrderBy`, the way every rail orders a window: each key in turn, read as an
+ * own-property path, `dir` order, a NULL (or absent) value last in either direction; ties keep their
+ * input order. A new array; the input is not mutated.
+ */
+declare const orderRecords: <T>(items: readonly T[], orderBy: OrderBy) => T[];
+
+export { ALL_KINDS, type AggregateMode, type AggregateRule, type All, type Any, ArrayOperator, type ArrayRule, type Bridge, type BridgeCardinality, type BridgeDictionary, type BridgeEndpoint, type CheckData, type CheckOptions, type CompileOptions, type Condition, type DateConfig, type DateExpr, type DateInputOrExpr, type DateInputValue, type DateOffset, DateOperator, type DateRule, type DateRuleValue, type EdgeExpr, type EngineGlobalsState, type EnumNarrowing, FieldKind, type FieldMap, type FieldMapEntry, type FieldMapSet, type FuzzyConfig, type GroupByStep, type IfThenElse, type Lens, type LensClamps, type LensNarrowing, type LensPathHop, type LensPathResolution, LensRefusal, type LensRelationSelect, type LensSelect, type LensSelectOptions, type LensValue, type ListBindingsOptions, type Magnitude, type MaterializeSourceQueryOptions, type ModelDefaultNarrowing, type ModelEntry, type ModelNarrowing, NUMERIC_KINDS, type NarrowingDefaults, type NumberOffset, Operator, type OperatorFamily, type OrderBy, type OrderedRuleValue, type PathProjection, type PeriodExpr, type PeriodUnit, type PrismaProvider, type PrismaStep, type PrismaWhere, type ProjectLensOptions, type ProjectRowsOptions, type ProjectedVisit, type RelativeUnits, type RollingExpr, type Row, type Rule, type RuleDescription, type RuleScalar, type RuleSourceDescription, RuleTarget, type RuleValue, type ScopeOutOfBounds, type ScopeRef, type ScopedRef, type SortDir, type SourceEntry, type SourceOption, type SourcePrismaQuery, type SourceQuery, type SourceRowShape, type SourceSelect, type SourceSpec, type SourceSqlQuery, type SourceValues, type StepRef, type StoredLens, type StrictAggregateRule, type StrictAll, type StrictAny, type StrictArrayCountRule, type StrictArrayPredicateRule, type StrictArrayPresenceRule, type StrictArrayRule, type StrictCondition, type StrictContainsRule, type StrictDateComparisonRule, type StrictDateDayRule, type StrictDateRangeRule, type StrictDateRule, type StrictEqualityRule, type StrictIfThenElse, type StrictMembershipRule, type StrictOrderedComparisonRule, type StrictPatternRule, type StrictPresenceRule, type StrictRangeRule, type StrictRule, type StrictStringBoundaryRule, type TimeZoneConfig, type ToPrismaOptions, type ToPrismaResult, type ToSqlOptions, type ToSqlResult, UsageError, type ValidateRuleOptions, type ValidationIssue, type ValidationResult, ValueShape, type ValueSourceFields, type ValueSourceOf, type WeekStart, type WhereStep, type WindowFields, assertValidFieldMaps, assertValidNarrowing, assertValidRule, bindLens, bindRule, check, clampLens, coerceRule, composeLens, createLens, describeRule, describeRuleSources, engineGlobals, executePrismaPlan, getAggregateOperators, getArrayOperators, getLensRoot, getOperatorsForKind, getValueShape, indexBridges, lensVisit, listBindings, listLensBindings, materializeSourceQuery, materializeSources, narrowRule, orderRecords, parseScopeRef, projectLens, projectRows, readLensValue, readScopeRef, stitchFieldMaps, storeLens, toLensSelect, toPrisma, toSourceQueries, toSql, validateFieldMaps, validateNarrowing, validateRule, validateRuleInLens, walkLensPath };