@jskit-ai/agent-docs 0.1.269 → 0.1.270

package/guide/agent/app-setup/existing-application-migration.md

@@ -183,6 +183,9 @@ The JSKIT host defaults to plain output and full write responses; standard
 document repositories explicitly request JSON:API output and full create/patch
 responses. A plain collection is still `{ data: [...], meta?, links? }`; use
 `extractJsonRestCollectionRows()` when a custom repository needs its rows.
+A query without a page returns only the resource's first 20 rows; a
+server-side read that needs every row uses `queryAllJsonRestCollectionRows()`
+([every row](/guide/framework/typed-features#every-row)).
 
 ```js
 await jsonRestApi.resources.books.patch({

package/guide/agent/framework/typed-features.md

@@ -683,6 +683,47 @@ const trx = resolveTransaction(options);
 const trx = options?.trx || options?.transaction || null;
 ```
 
+### Every row
+
+**A server-side resource query that needs every row it matches reads them
+with `queryAllJsonRestCollectionRows(resource, params, context)`
+(`@jskit-ai/json-rest-api-core/server/jsonRestApiHost`). A query without a
+page means "the first 20 rows".**
+
+- json-rest-api answers a query that names no page with the resource's
+  default page, 20 rows, and says nothing about the rest. The CRUD
+  repository's `queryDocuments(query)` without a `limit` is the same first
+  page.
+- The helper reads cursor pages of the resource's maximum size
+  (`queryMaxLimit`, 100 unless the resource sets it) in id order until none
+  follows, keeping the call's transaction and context, so no row is skipped
+  or repeated. It sets the page and sort itself; sort the rows it returns.
+- A lookup by a unique key (an id, a slug, a token hash, a unique pair such
+  as workspace and user) matches at most one row and may read `rows[0]` of a
+  plain query. A read of the newest or first few rows names its own `sort`
+  and `page`.
+- HTTP list routes keep the caller's page: their default and maximum page
+  sizes are public behaviour, not a server-side limit to raise.
+
+Why: a list read without a page looks complete until the 21st row, then
+silently drops the rest from every person picker, scope and delivery built on it.
+
+```js
+// good
+const rows = await queryAllJsonRestCollectionRows(api.resources.workspaceMemberships, {
+  queryParams: { filters: { workspace: workspaceId, status: "active" }, include: ["user"] },
+  transaction: resolveTransaction(options),
+  format: "plain"
+}, options.context);
+
+// bad: the first 20 members only
+const rows = extractJsonRestCollectionRows(await api.resources.workspaceMemberships.query({
+  queryParams: { filters: { workspace: workspaceId, status: "active" }, include: ["user"] },
+  transaction: resolveTransaction(options),
+  format: "plain"
+}, createJsonRestContext(options.context)));
+```
+
 ### Routes
 
 **A route does HTTP work only (status, cookies, redirects) and runs an action

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/agent-docs",
-  "version": "0.1.269",
+  "version": "0.1.270",
   "description": "Distributed JSKIT agent references, prompts, guides, and generated reference maps.",
   "type": "module",
   "files": [

package/patterns/minimal-foundation/example/package.json

@@ -49,7 +49,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.245",
-    "@jskit-ai/jskit-catalog": "0.2.21",
+    "@jskit-ai/jskit-catalog": "0.2.22",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/patterns/shell-foundation/example/package.json

@@ -51,7 +51,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.245",
-    "@jskit-ai/jskit-catalog": "0.2.21",
+    "@jskit-ai/jskit-catalog": "0.2.22",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/reference/autogen/PATTERN_INDEX.md

@@ -15,7 +15,7 @@ A concrete Fastify, Vue, and JSKIT application foundation for products that do n
 
 - Id: `app/minimal-foundation`
 - Keywords: `app`, `fastify`, `foundation`, `minimal`, `server`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.269`
+- Owner: `@jskit-ai/agent-docs@0.1.270`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/app/minimal-foundation/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/app/minimal-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`
@@ -26,7 +26,7 @@ A concrete JSKIT web application foundation with responsive shell navigation, se
 
 - Id: `app/shell-foundation`
 - Keywords: `app`, `foundation`, `material`, `navigation`, `placements`, `shell`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.269`
+- Owner: `@jskit-ai/agent-docs@0.1.270`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/app/shell-foundation/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/app/shell-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -246,7 +246,7 @@ Add a protected administration surface, settings shell, and semantic navigation
 
 - Id: `console/console-surface`
 - Keywords: `admin`, `console`, `navigation`, `owner`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/console-web@0.1.231`
+- Owner: `@jskit-ai/console-web@0.1.232`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/console/console-surface/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/console/console-surface/example/)
 - Requires: `@jskit-ai/console-core`, `@jskit-ai/console-web`, `@jskit-ai/shell-web`
@@ -268,7 +268,7 @@ Build a complete application-owned CRUD server package from a migration, resourc
 
 - Id: `crud/json-api-resource-package`
 - Keywords: `actions`, `crud`, `database`, `json-api`, `migration`, `permissions`, `provider`, `repository`, `routes`, `service`
-- Owner: `@jskit-ai/crud-core@0.2.7`
+- Owner: `@jskit-ai/crud-core@0.2.8`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/crud/json-api-resource-package/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/crud/json-api-resource-package/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/resource-crud-core`
@@ -334,7 +334,7 @@ Compose application-owned Google Publisher Tag delivery with the generic rewarde
 
 - Id: `rewards/google-rewarded`
 - Keywords: `ads`, `google`, `publisher tag`, `rewarded`, `unlock`
-- Owner: `@jskit-ai/rewarded-web@0.2.9`
+- Owner: `@jskit-ai/rewarded-web@0.2.10`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/rewards/google-rewarded/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/rewards/google-rewarded/example/)
 - Requires: `@jskit-ai/rewarded-web`
@@ -345,7 +345,7 @@ Define a server feature through explicit capabilities and first-class actions, a
 
 - Id: `server/feature-package`
 - Keywords: `actions`, `feature`, `json-rest`, `knex`, `orchestration`, `package`, `provider`, `repository`, `routes`, `server`
-- Owner: `@jskit-ai/agent-docs@0.1.269`
+- Owner: `@jskit-ai/agent-docs@0.1.270`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/server/feature-package/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/server/feature-package/example/)
 - Requires: `@jskit-ai/kernel`
@@ -378,7 +378,7 @@ Compose an account settings route and profile, preference, notification, and sig
 
 - Id: `users/account-settings`
 - Keywords: `account`, `link provider`, `notifications`, `oauth`, `preferences`, `profile`, `settings`, `sign-in methods`, `user`, `vue`
-- Owner: `@jskit-ai/users-web@0.2.14`
+- Owner: `@jskit-ai/users-web@0.2.15`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/users/account-settings/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/users/account-settings/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/users-core`, `@jskit-ai/users-web`
@@ -389,7 +389,7 @@ Expose user administration and workspace-scoped member operations through app-ow
 
 - Id: `users/user-administration-server`
 - Keywords: `account`, `admin`, `member`, `repository`, `resource`, `routes`, `service`, `user`, `workspace`
-- Owner: `@jskit-ai/users-core@0.2.8`
+- Owner: `@jskit-ai/users-core@0.2.9`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/users/user-administration-server/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/users/user-administration-server/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/users-core`
@@ -400,7 +400,7 @@ Configure roles, workspace access policy, invitations, and app-owned invitation
 
 - Id: `workspaces/workspace-server`
 - Keywords: `access`, `invite`, `membership`, `multitenancy`, `policy`, `role`, `tenancy`, `workspace`
-- Owner: `@jskit-ai/workspaces-core@0.2.8`
+- Owner: `@jskit-ai/workspaces-core@0.2.9`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/workspaces/workspace-server/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/workspaces/workspace-server/example/)
 - Requires: `@jskit-ai/users-core`, `@jskit-ai/workspaces-core`
@@ -411,7 +411,7 @@ Compose workspace selection, invitation, member administration, settings, and re
 
 - Id: `workspaces/workspace-surfaces`
 - Keywords: `admin`, `invite`, `member`, `navigation`, `settings`, `surface`, `switcher`, `workspace`
-- Owner: `@jskit-ai/workspaces-web@0.2.14`
+- Owner: `@jskit-ai/workspaces-web@0.2.15`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/workspaces/workspace-surfaces/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/workspaces/workspace-surfaces/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/workspaces-core`, `@jskit-ai/workspaces-web`

package/reference/autogen/packages/json-rest-api-core.md

@@ -21,6 +21,7 @@ Exports
 - `createJsonRestResourceScopeOptions(resource = {}, { writeSerializers = {}, normalizeId, rowPolicy, searchSchema, queryFields } = {})`
 - `createJsonRestContext(context = null)`
 - `extractJsonRestCollectionRows(payload)`
+- `queryAllJsonRestCollectionRows(resource, { queryParams, ...params }, context)`
 - `returnNullWhenJsonRestResourceMissing(run)`
 - `returnBadRequestWhenJsonRestFieldsetInvalid(run)`
 - `resolveWorkspaceScopeValue(context = null)`

package/skills/jskit/references/existing-application-migration.md

@@ -178,6 +178,9 @@ The JSKIT host defaults to plain output and full write responses; standard
 document repositories explicitly request JSON:API output and full create/patch
 responses. A plain collection is still `{ data: [...], meta?, links? }`; use
 `extractJsonRestCollectionRows()` when a custom repository needs its rows.
+A query without a page returns only the resource's first 20 rows; a
+server-side read that needs every row uses `queryAllJsonRestCollectionRows()`
+([every row](typed-features.md#every-row)).
 
 ```js
 await jsonRestApi.resources.books.patch({

package/skills/jskit/references/heuristics/INDEX.md

@@ -44,7 +44,7 @@ How to use it:
   - [crud-repository-mapping.md](./crud-repository-mapping.md)
 - row policy, permission filtering, visibility before pagination, recursive CTE, descendants, package cycle, `RowPolicyPlugin`
   - [row-policies.md](./row-policies.md)
-- typed features, server feature, provider, service, repository, collaborator, `typeof`, `= null`, `setProvider`, `register`, `input || {}`, `payload = {}`, `async execute`, `Object.freeze`, `requires`, `optional`, `types.js`, `RuntimeKnex`, `silentLogger`, `create<Name>Actions`, `ActionSpecifications`, request context, `jskit/*` lint findings, `readable-check: allow`, `optional operation:`, `process.env`, `AppError` code, `Object.assign(new Error`, `idempotency`, `…ForTests` export, file or function size
+- typed features, server feature, provider, service, repository, collaborator, `typeof`, `= null`, `setProvider`, `register`, `input || {}`, `payload = {}`, `async execute`, `Object.freeze`, `requires`, `optional`, `types.js`, `RuntimeKnex`, `silentLogger`, `create<Name>Actions`, `ActionSpecifications`, request context, `api.resources.x.query`, every row, list stops at 20 rows, `queryAllJsonRestCollectionRows`, `jskit/*` lint findings, `readable-check: allow`, `optional operation:`, `process.env`, `AppError` code, `Object.assign(new Error`, `idempotency`, `…ForTests` export, file or function size
   - [typed-features.md](./typed-features.md)
 - client features, composable, `use<Name>`, Vue component, client provider, props, emits, `inject`, `provide`, `ref`, `reactive`, `watch`, `addEventListener`, `setInterval`, module state, `Object.freeze` on a composable, `?.()` in a template, `jskit/typed-inject`, `jskit/collaborator-props`, `jskit/fixed-result-shape`, `jskit/released-listeners`, `jskit/no-module-state`, `jskit/no-frozen-vue-state`, `clientFeaturesConfig`, `shared resource:`
   - [client-features.md](./client-features.md)

package/skills/jskit/references/heuristics/typed-features.md

@@ -63,6 +63,8 @@ ends with the same link.
   - [One helper per package](../typed-features.md#one-helper-per-package)
 - `options?.trx || options?.transaction`, a hand-read actor, cursor or created id
   - [One reader per fact](../typed-features.md#one-reader-per-fact)
+- `api.resources.x.query(…)` with no `page` for a list, `queryDocuments(query)` with no `limit` in a service, a list that stops at 20 rows
+  - [Every row](../typed-features.md#every-row)
 - a route that queries storage, `boot*.js` holding routes
   - [Routes](../typed-features.md#routes)
 - `new AppError(status, message)` with no code, `new NotFoundError("…")`, one code for two sentences (`jskit/app-error-code`)

package/skills/jskit/references/pattern-index.md

@@ -15,7 +15,7 @@ A concrete Fastify, Vue, and JSKIT application foundation for products that do n
 
 - Id: `app/minimal-foundation`
 - Keywords: `app`, `fastify`, `foundation`, `minimal`, `server`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.269`
+- Owner: `@jskit-ai/agent-docs@0.1.270`
 - Read: [PATTERN.md](patterns/app/minimal-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/minimal-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`
@@ -26,7 +26,7 @@ A concrete JSKIT web application foundation with responsive shell navigation, se
 
 - Id: `app/shell-foundation`
 - Keywords: `app`, `foundation`, `material`, `navigation`, `placements`, `shell`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.269`
+- Owner: `@jskit-ai/agent-docs@0.1.270`
 - Read: [PATTERN.md](patterns/app/shell-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/shell-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -246,7 +246,7 @@ Add a protected administration surface, settings shell, and semantic navigation
 
 - Id: `console/console-surface`
 - Keywords: `admin`, `console`, `navigation`, `owner`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/console-web@0.1.231`
+- Owner: `@jskit-ai/console-web@0.1.232`
 - Read: [PATTERN.md](patterns/console/console-surface/PATTERN.md)
 - Examples: [example/](patterns/console/console-surface/example/)
 - Requires: `@jskit-ai/console-core`, `@jskit-ai/console-web`, `@jskit-ai/shell-web`
@@ -268,7 +268,7 @@ Build a complete application-owned CRUD server package from a migration, resourc
 
 - Id: `crud/json-api-resource-package`
 - Keywords: `actions`, `crud`, `database`, `json-api`, `migration`, `permissions`, `provider`, `repository`, `routes`, `service`
-- Owner: `@jskit-ai/crud-core@0.2.7`
+- Owner: `@jskit-ai/crud-core@0.2.8`
 - Read: [PATTERN.md](patterns/crud/json-api-resource-package/PATTERN.md)
 - Examples: [example/](patterns/crud/json-api-resource-package/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/resource-crud-core`
@@ -334,7 +334,7 @@ Compose application-owned Google Publisher Tag delivery with the generic rewarde
 
 - Id: `rewards/google-rewarded`
 - Keywords: `ads`, `google`, `publisher tag`, `rewarded`, `unlock`
-- Owner: `@jskit-ai/rewarded-web@0.2.9`
+- Owner: `@jskit-ai/rewarded-web@0.2.10`
 - Read: [PATTERN.md](patterns/rewards/google-rewarded/PATTERN.md)
 - Examples: [example/](patterns/rewards/google-rewarded/example/)
 - Requires: `@jskit-ai/rewarded-web`
@@ -345,7 +345,7 @@ Define a server feature through explicit capabilities and first-class actions, a
 
 - Id: `server/feature-package`
 - Keywords: `actions`, `feature`, `json-rest`, `knex`, `orchestration`, `package`, `provider`, `repository`, `routes`, `server`
-- Owner: `@jskit-ai/agent-docs@0.1.269`
+- Owner: `@jskit-ai/agent-docs@0.1.270`
 - Read: [PATTERN.md](patterns/server/feature-package/PATTERN.md)
 - Examples: [example/](patterns/server/feature-package/example/)
 - Requires: `@jskit-ai/kernel`
@@ -378,7 +378,7 @@ Compose an account settings route and profile, preference, notification, and sig
 
 - Id: `users/account-settings`
 - Keywords: `account`, `link provider`, `notifications`, `oauth`, `preferences`, `profile`, `settings`, `sign-in methods`, `user`, `vue`
-- Owner: `@jskit-ai/users-web@0.2.14`
+- Owner: `@jskit-ai/users-web@0.2.15`
 - Read: [PATTERN.md](patterns/users/account-settings/PATTERN.md)
 - Examples: [example/](patterns/users/account-settings/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/users-core`, `@jskit-ai/users-web`
@@ -389,7 +389,7 @@ Expose user administration and workspace-scoped member operations through app-ow
 
 - Id: `users/user-administration-server`
 - Keywords: `account`, `admin`, `member`, `repository`, `resource`, `routes`, `service`, `user`, `workspace`
-- Owner: `@jskit-ai/users-core@0.2.8`
+- Owner: `@jskit-ai/users-core@0.2.9`
 - Read: [PATTERN.md](patterns/users/user-administration-server/PATTERN.md)
 - Examples: [example/](patterns/users/user-administration-server/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/users-core`
@@ -400,7 +400,7 @@ Configure roles, workspace access policy, invitations, and app-owned invitation
 
 - Id: `workspaces/workspace-server`
 - Keywords: `access`, `invite`, `membership`, `multitenancy`, `policy`, `role`, `tenancy`, `workspace`
-- Owner: `@jskit-ai/workspaces-core@0.2.8`
+- Owner: `@jskit-ai/workspaces-core@0.2.9`
 - Read: [PATTERN.md](patterns/workspaces/workspace-server/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-server/example/)
 - Requires: `@jskit-ai/users-core`, `@jskit-ai/workspaces-core`
@@ -411,7 +411,7 @@ Compose workspace selection, invitation, member administration, settings, and re
 
 - Id: `workspaces/workspace-surfaces`
 - Keywords: `admin`, `invite`, `member`, `navigation`, `settings`, `surface`, `switcher`, `workspace`
-- Owner: `@jskit-ai/workspaces-web@0.2.14`
+- Owner: `@jskit-ai/workspaces-web@0.2.15`
 - Read: [PATTERN.md](patterns/workspaces/workspace-surfaces/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-surfaces/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/workspaces-core`, `@jskit-ai/workspaces-web`

package/skills/jskit/references/patterns/app/minimal-foundation/example/package.json

@@ -49,7 +49,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.245",
-    "@jskit-ai/jskit-catalog": "0.2.21",
+    "@jskit-ai/jskit-catalog": "0.2.22",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/package.json

@@ -51,7 +51,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.245",
-    "@jskit-ai/jskit-catalog": "0.2.21",
+    "@jskit-ai/jskit-catalog": "0.2.22",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/crud/json-api-resource-package/example/packages/books/package.json

@@ -9,7 +9,7 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.7",
+    "@jskit-ai/crud-core": "0.2.8",
     "@jskit-ai/resource-crud-core": "0.1.198"
   },
   "jskit": {

package/skills/jskit/references/patterns/users/user-administration-server/example/packages/users/package.json

@@ -10,7 +10,7 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.7",
+    "@jskit-ai/crud-core": "0.2.8",
     "@jskit-ai/resource-crud-core": "0.1.198"
   },
   "jskit": {

package/skills/jskit/references/patterns/users/user-administration-server/example/packages/users-workspace/package.json

@@ -10,9 +10,9 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.7",
+    "@jskit-ai/crud-core": "0.2.8",
     "@jskit-ai/resource-crud-core": "0.1.198",
-    "@jskit-ai/workspaces-core": "0.2.8"
+    "@jskit-ai/workspaces-core": "0.2.9"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/typed-features.md

@@ -678,6 +678,47 @@ const trx = resolveTransaction(options);
 const trx = options?.trx || options?.transaction || null;
 ```
 
+### Every row
+
+**A server-side resource query that needs every row it matches reads them
+with `queryAllJsonRestCollectionRows(resource, params, context)`
+(`@jskit-ai/json-rest-api-core/server/jsonRestApiHost`). A query without a
+page means "the first 20 rows".**
+
+- json-rest-api answers a query that names no page with the resource's
+  default page, 20 rows, and says nothing about the rest. The CRUD
+  repository's `queryDocuments(query)` without a `limit` is the same first
+  page.
+- The helper reads cursor pages of the resource's maximum size
+  (`queryMaxLimit`, 100 unless the resource sets it) in id order until none
+  follows, keeping the call's transaction and context, so no row is skipped
+  or repeated. It sets the page and sort itself; sort the rows it returns.
+- A lookup by a unique key (an id, a slug, a token hash, a unique pair such
+  as workspace and user) matches at most one row and may read `rows[0]` of a
+  plain query. A read of the newest or first few rows names its own `sort`
+  and `page`.
+- HTTP list routes keep the caller's page: their default and maximum page
+  sizes are public behaviour, not a server-side limit to raise.
+
+Why: a list read without a page looks complete until the 21st row, then
+silently drops the rest from every person picker, scope and delivery built on it.
+
+```js
+// good
+const rows = await queryAllJsonRestCollectionRows(api.resources.workspaceMemberships, {
+  queryParams: { filters: { workspace: workspaceId, status: "active" }, include: ["user"] },
+  transaction: resolveTransaction(options),
+  format: "plain"
+}, options.context);
+
+// bad: the first 20 members only
+const rows = extractJsonRestCollectionRows(await api.resources.workspaceMemberships.query({
+  queryParams: { filters: { workspace: workspaceId, status: "active" }, include: ["user"] },
+  transaction: resolveTransaction(options),
+  format: "plain"
+}, createJsonRestContext(options.context)));
+```
+
 ### Routes
 
 **A route does HTTP work only (status, cookies, redirects) and runs an action