@kernhq/module-quire 0.2.0

package/dist/server/services/access.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Who may do what to a space or a page.
+ *
+ * The permission engine resolves bindings nearest-scope-first, so this file's only job is to hand it
+ * the right scope chain: a page is scoped to itself, with its space and then the workspace as
+ * parents. That is what makes "everyone may read the Handbook, the design team may write it, and
+ * this one contractor may read exactly one page of it" expressible without a second permission
+ * system — and what makes a restriction on a parent page apply to its children, because the chain
+ * carries every ancestor.
+ */
+import type { Principal } from '@kernhq/contracts';
+import { type Kernel, type Tx } from '@kernhq/kernel';
+export interface PageScope {
+    pageId: string;
+    spaceId: string;
+    /** every ancestor, nearest first — a restriction on a parent has to reach its children */
+    ancestorIds: string[];
+}
+export declare function quireAccess(kernel: Kernel): {
+    /** May this user do `permission` anywhere in the space? */
+    canSpace(principal: Principal, permission: string, workspaceId: string, spaceId: string): Promise<boolean>;
+    requireSpace(principal: Principal, permission: string, workspaceId: string, spaceId: string): Promise<void>;
+    /**
+     * The same question about one page. The page is the narrowest scope, and every ancestor page is
+     * in the chain above it so a restriction set higher up is inherited rather than having to be
+     * copied down.
+     */
+    canPage(principal: Principal, permission: string, workspaceId: string, scope: PageScope): Promise<boolean>;
+    requirePage(principal: Principal, permission: string, workspaceId: string, scope: PageScope): Promise<void>;
+    /**
+     * The scope of a page, walked up through its parents.
+     *
+     * Recursive rather than one query per level: a deep tree would otherwise cost a round trip per
+     * ancestor on every read. The `cycle` clause is not paranoia — a move that made a page its own
+     * ancestor would otherwise hang the connection rather than fail.
+     */
+    scopeOf(tx: Tx, workspaceId: string, pageId: string): Promise<PageScope>;
+    /** The space row, or `notFound` — used before every space-scoped check so it cannot be skipped. */
+    spaceRow(tx: Tx, workspaceId: string, spaceId: string): Promise<{
+        id: string;
+        workspaceId: string;
+        key: string;
+        name: string;
+        description: string;
+        icon: string | null;
+        visibility: string;
+        homepageId: string | null;
+        createdBy: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+        archivedAt: Date | null;
+    }>;
+    /** The page row, excluding anything in the trash unless asked for. */
+    pageRow(tx: Tx, workspaceId: string, pageId: string, opts?: {
+        includeTrashed?: boolean;
+    }): Promise<{
+        id: string;
+        workspaceId: string;
+        spaceId: string;
+        parentId: string | null;
+        position: string;
+        kind: string;
+        title: string;
+        icon: string | null;
+        coverUrl: string | null;
+        publishedVersionId: string | null;
+        hasUnpublishedChanges: boolean;
+        text: string;
+        createdBy: string | null;
+        updatedBy: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+        archivedAt: Date | null;
+        deletedAt: Date | null;
+    }>;
+};
+export type QuireAccess = ReturnType<typeof quireAccess>;
+//# sourceMappingURL=access.d.ts.map

package/dist/server/services/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../src/server/services/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAa,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAIhE,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM;IAStC,2DAA2D;wBACvC,SAAS,cAAc,MAAM,eAAe,MAAM,WAAW,MAAM;4BAI/D,SAAS,cAAc,MAAM,eAAe,MAAM,WAAW,MAAM;IAI3F;;;;OAIG;uBACgB,SAAS,cAAc,MAAM,eAAe,MAAM,SAAS,SAAS;2BAc1E,SAAS,cACR,MAAM,eACL,MAAM,SACZ,SAAS,GACf,OAAO,CAAC,IAAI,CAAC;IAKhB;;;;;;OAMG;gBACe,EAAE,eAAe,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAuB9E,mGAAmG;iBAChF,EAAE,eAAe,MAAM,WAAW,MAAM;;;;;;;;;;;;;;IAU3D,sEAAsE;gBACpD,EAAE,eAAe,MAAM,UAAU,MAAM,SAAQ;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;EAchG;AACD,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,CAAA"}

package/dist/server/services/access.js

@@ -0,0 +1,96 @@
+import { KernError } from '@kernhq/kernel';
+import { and, eq, isNull, sql } from 'drizzle-orm';
+import { pages, spaces } from '../schema.js';
+export function quireAccess(kernel) {
+    const spaceScope = (workspaceId, spaceId) => ({
+        kind: 'space',
+        id: spaceId,
+        parents: [{ kind: 'workspace', id: workspaceId }],
+        workspaceId,
+    });
+    return {
+        /** May this user do `permission` anywhere in the space? */
+        canSpace(principal, permission, workspaceId, spaceId) {
+            return kernel.authz.can(principal, permission, spaceScope(workspaceId, spaceId));
+        },
+        requireSpace(principal, permission, workspaceId, spaceId) {
+            return kernel.authz.require(principal, permission, spaceScope(workspaceId, spaceId));
+        },
+        /**
+         * The same question about one page. The page is the narrowest scope, and every ancestor page is
+         * in the chain above it so a restriction set higher up is inherited rather than having to be
+         * copied down.
+         */
+        canPage(principal, permission, workspaceId, scope) {
+            return kernel.authz.can(principal, permission, {
+                kind: 'object',
+                id: scope.pageId,
+                parents: [
+                    ...scope.ancestorIds.map((id) => ({ kind: 'object', id })),
+                    { kind: 'space', id: scope.spaceId },
+                    { kind: 'workspace', id: workspaceId },
+                ],
+                workspaceId,
+            });
+        },
+        async requirePage(principal, permission, workspaceId, scope) {
+            if (!(await this.canPage(principal, permission, workspaceId, scope)))
+                throw KernError.forbidden(permission);
+        },
+        /**
+         * The scope of a page, walked up through its parents.
+         *
+         * Recursive rather than one query per level: a deep tree would otherwise cost a round trip per
+         * ancestor on every read. The `cycle` clause is not paranoia — a move that made a page its own
+         * ancestor would otherwise hang the connection rather than fail.
+         */
+        async scopeOf(tx, workspaceId, pageId) {
+            const rows = await tx.execute(sql `
+        with recursive chain as (
+          select id, space_id, parent_id, 0 as depth
+            from mod_quire.pages
+           where workspace_id = ${workspaceId}::uuid and id = ${pageId}::uuid
+          union all
+          select p.id, p.space_id, p.parent_id, chain.depth + 1
+            from mod_quire.pages p
+            join chain on p.id = chain.parent_id
+           where p.workspace_id = ${workspaceId}::uuid
+        ) cycle id set looped using path
+        select id, space_id, depth from chain order by depth
+      `);
+            const self = rows.rows[0];
+            if (!self)
+                throw KernError.notFound('Page');
+            return {
+                pageId: self.id,
+                spaceId: self.space_id,
+                ancestorIds: rows.rows.slice(1).map((r) => r.id),
+            };
+        },
+        /** The space row, or `notFound` — used before every space-scoped check so it cannot be skipped. */
+        async spaceRow(tx, workspaceId, spaceId) {
+            const [row] = await tx
+                .select()
+                .from(spaces)
+                .where(and(eq(spaces.workspaceId, workspaceId), eq(spaces.id, spaceId)))
+                .limit(1);
+            if (!row)
+                throw KernError.notFound('Space');
+            return row;
+        },
+        /** The page row, excluding anything in the trash unless asked for. */
+        async pageRow(tx, workspaceId, pageId, opts = {}) {
+            const [row] = await tx
+                .select()
+                .from(pages)
+                .where(opts.includeTrashed
+                ? and(eq(pages.workspaceId, workspaceId), eq(pages.id, pageId))
+                : and(eq(pages.workspaceId, workspaceId), eq(pages.id, pageId), isNull(pages.deletedAt)))
+                .limit(1);
+            if (!row)
+                throw KernError.notFound('Page');
+            return row;
+        },
+    };
+}
+//# sourceMappingURL=access.js.map

package/dist/server/services/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../src/server/services/access.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAwB,MAAM,gBAAgB,CAAA;AAChE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAS5C,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,UAAU,GAAG,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,OAAgB;QACtB,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC1D,WAAW;KACZ,CAAC,CAAA;IAEF,OAAO;QACL,2DAA2D;QAC3D,QAAQ,CAAC,SAAoB,EAAE,UAAkB,EAAE,WAAmB,EAAE,OAAe;YACrF,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAClF,CAAC;QAED,YAAY,CAAC,SAAoB,EAAE,UAAkB,EAAE,WAAmB,EAAE,OAAe;YACzF,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QACtF,CAAC;QAED;;;;WAIG;QACH,OAAO,CAAC,SAAoB,EAAE,UAAkB,EAAE,WAAmB,EAAE,KAAgB;YACrF,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE;gBAC7C,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,KAAK,CAAC,MAAM;gBAChB,OAAO,EAAE;oBACP,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;oBACnE,EAAE,IAAI,EAAE,OAAgB,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE;oBAC7C,EAAE,IAAI,EAAE,WAAoB,EAAE,EAAE,EAAE,WAAW,EAAE;iBAChD;gBACD,WAAW;aACZ,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CACf,SAAoB,EACpB,UAAkB,EAClB,WAAmB,EACnB,KAAgB;YAEhB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;gBAClE,MAAM,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACzC,CAAC;QAED;;;;;;WAMG;QACH,KAAK,CAAC,OAAO,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc;YACvD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAkD,GAAG,CAAA;;;;kCAItD,WAAW,mBAAmB,MAAM;;;;;oCAKlC,WAAW;;;OAGxC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACzB,IAAI,CAAC,IAAI;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC3C,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD,CAAA;QACH,CAAC;QAED,mGAAmG;QACnG,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe;YACzD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;iBACvE,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,GAAG;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC3C,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,sEAAsE;QACtE,KAAK,CAAC,OAAO,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc,EAAE,OAAqC,EAAE;YAChG,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CACJ,IAAI,CAAC,cAAc;gBACjB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC/D,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAC3F;iBACA,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,GAAG;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC1C,OAAO,GAAG,CAAA;QACZ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/server/services/index.d.ts

@@ -0,0 +1,15 @@
+import type { Kernel } from '@kernhq/kernel';
+import { quireAccess } from './access.js';
+import { quirePages } from './pages.js';
+import { quireSpaces } from './spaces.js';
+export interface QuireServices {
+    access: ReturnType<typeof quireAccess>;
+    spaces: ReturnType<typeof quireSpaces>;
+    pages: ReturnType<typeof quirePages>;
+}
+/** One set of services per kernel: they are stateless, and rebuilding them per request is waste. */
+export declare function quireServices(kernel: Kernel): QuireServices;
+export * from './access.js';
+export * from './pages.js';
+export * from './spaces.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/services/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAA;IACtC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAA;IACtC,KAAK,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA;CACrC;AAID,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAW3D;AAED,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA"}

package/dist/server/services/index.js

@@ -0,0 +1,22 @@
+import { quireAccess } from './access.js';
+import { quirePages } from './pages.js';
+import { quireSpaces } from './spaces.js';
+const cache = new WeakMap();
+/** One set of services per kernel: they are stateless, and rebuilding them per request is waste. */
+export function quireServices(kernel) {
+    const existing = cache.get(kernel);
+    if (existing)
+        return existing;
+    const access = quireAccess(kernel);
+    const services = {
+        access,
+        spaces: quireSpaces(access),
+        pages: quirePages(access),
+    };
+    cache.set(kernel, services);
+    return services;
+}
+export * from './access.js';
+export * from './pages.js';
+export * from './spaces.js';
+//# sourceMappingURL=index.js.map

package/dist/server/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/services/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQzC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAyB,CAAA;AAElD,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAkB;QAC9B,MAAM;QACN,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QAC3B,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;KAC1B,CAAA;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC3B,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA"}

package/dist/server/services/pages.d.ts

@@ -0,0 +1,190 @@
+import { type Principal } from '@kernhq/contracts';
+import { type Tx } from '@kernhq/kernel';
+import type { Page, PageNode } from '../../contract/index.js';
+import { pages } from '../schema.js';
+import type { QuireAccess } from './access.js';
+type PageRow = typeof pages.$inferSelect;
+/** The name this page's prose is synchronised under, on the collab service. */
+export declare function documentNameOf(row: {
+    workspaceId: string;
+    id: string;
+}): string;
+export declare function toPage(row: PageRow): Page;
+export declare function quirePages(access: QuireAccess): {
+    /**
+     * Every page in the space, flat, ordered so the caller can build the tree without sorting.
+     *
+     * One query for the whole space rather than one per expanded level: a wiki sidebar shows every
+     * level at once, and paging by level turns opening a space into a request per node.
+     */
+    tree(tx: Tx, workspaceId: string, spaceId: string, includeArchived: boolean): Promise<PageNode[]>;
+    get(tx: Tx, workspaceId: string, pageId: string): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        spaceId: string;
+        parentId: string | null;
+        position: string;
+        kind: "page" | "live" | "database";
+        title: string;
+        icon: string | null;
+        coverUrl: string | null;
+        publishedVersionId: string | null;
+        hasUnpublishedChanges: boolean;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        updatedBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+        deletedAt: string | null;
+    }>;
+    trash(tx: Tx, workspaceId: string, spaceId: string, limit: number, cursor: string | null): Promise<{
+        items: {
+            id: string;
+            workspaceId: string & import("zod").$brand<"WorkspaceId">;
+            spaceId: string;
+            parentId: string | null;
+            position: string;
+            kind: "page" | "live" | "database";
+            title: string;
+            icon: string | null;
+            coverUrl: string | null;
+            publishedVersionId: string | null;
+            hasUnpublishedChanges: boolean;
+            createdBy: (string & import("zod").$brand<"UserId">) | null;
+            updatedBy: (string & import("zod").$brand<"UserId">) | null;
+            createdAt: string;
+            updatedAt: string;
+            archivedAt: string | null;
+            deletedAt: string | null;
+        }[];
+        nextCursor: string | null;
+    }>;
+    create(tx: Tx, principal: Principal, workspaceId: string, input: {
+        spaceId: string;
+        parentId: string | null;
+        title: string;
+        kind: string;
+        icon: string | null;
+        afterId: string | null;
+    }): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        spaceId: string;
+        parentId: string | null;
+        position: string;
+        kind: "page" | "live" | "database";
+        title: string;
+        icon: string | null;
+        coverUrl: string | null;
+        publishedVersionId: string | null;
+        hasUnpublishedChanges: boolean;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        updatedBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+        deletedAt: string | null;
+    }>;
+    update(tx: Tx, principal: Principal, workspaceId: string, pageId: string, patch: Partial<Pick<PageRow, "title" | "icon" | "coverUrl" | "kind">>): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        spaceId: string;
+        parentId: string | null;
+        position: string;
+        kind: "page" | "live" | "database";
+        title: string;
+        icon: string | null;
+        coverUrl: string | null;
+        publishedVersionId: string | null;
+        hasUnpublishedChanges: boolean;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        updatedBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+        deletedAt: string | null;
+    }>;
+    /**
+     * Reparent and reorder in one step.
+     *
+     * The cycle guard is the part worth reading: dragging a page onto one of its own descendants
+     * would otherwise produce a subtree with no root, invisible in every query that walks down from
+     * the top and impossible to reach or delete.
+     */
+    move(tx: Tx, principal: Principal, workspaceId: string, pageId: string, parentId: string | null, afterId: string | null): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        spaceId: string;
+        parentId: string | null;
+        position: string;
+        kind: "page" | "live" | "database";
+        title: string;
+        icon: string | null;
+        coverUrl: string | null;
+        publishedVersionId: string | null;
+        hasUnpublishedChanges: boolean;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        updatedBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+        deletedAt: string | null;
+    }>;
+    archive(tx: Tx, principal: Principal, workspaceId: string, pageId: string, archived: boolean): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        spaceId: string;
+        parentId: string | null;
+        position: string;
+        kind: "page" | "live" | "database";
+        title: string;
+        icon: string | null;
+        coverUrl: string | null;
+        publishedVersionId: string | null;
+        hasUnpublishedChanges: boolean;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        updatedBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+        deletedAt: string | null;
+    }>;
+    /** Every page in the subtree rooted at `pageId`, including it, nearest first. */
+    subtreeIds(tx: Tx, workspaceId: string, pageId: string): Promise<string[]>;
+    /** Into the trash, with every descendant — a page whose parent is gone is unreachable. */
+    trashPage(tx: Tx, workspaceId: string, pageId: string): Promise<{
+        ids: string[];
+    }>;
+    /**
+     * Back out of the trash. Only the page asked for and its descendants come back, and only if its
+     * parent is still there — restoring under a deleted parent would put it somewhere unreachable.
+     */
+    restore(tx: Tx, workspaceId: string, pageId: string): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        spaceId: string;
+        parentId: string | null;
+        position: string;
+        kind: "page" | "live" | "database";
+        title: string;
+        icon: string | null;
+        coverUrl: string | null;
+        publishedVersionId: string | null;
+        hasUnpublishedChanges: boolean;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        updatedBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+        deletedAt: string | null;
+    }>;
+    /** Gone. The caller is responsible for telling collab to forget the documents. */
+    purge(tx: Tx, workspaceId: string, pageId: string): Promise<{
+        ids: string[];
+    }>;
+    /** The first page of a brand new space, so a space is never an empty screen. */
+    firstPosition: () => string;
+};
+export type QuirePages = ReturnType<typeof quirePages>;
+export {};
+//# sourceMappingURL=pages.d.ts.map

package/dist/server/services/pages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../../src/server/services/pages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAA;AACxE,OAAO,EAAa,KAAK,EAAE,EAAU,MAAM,gBAAgB,CAAA;AAG3D,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,KAAK,OAAO,GAAG,OAAO,KAAK,CAAC,YAAY,CAAA;AAExC,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAO/E;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAoBzC;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW;IA8B1C;;;;;OAKG;aACY,EAAE,eAAe,MAAM,WAAW,MAAM,mBAAmB,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YAmCzF,EAAE,eAAe,MAAM,UAAU,MAAM;;;;;;;;;;;;;;;;;;;cAIrC,EAAE,eAAe,MAAM,WAAW,MAAM,SAAS,MAAM,UAAU,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;eAmBxF,EAAE,aACK,SAAS,eACP,MAAM,SACZ;QACL,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;QACvB,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KACvB;;;;;;;;;;;;;;;;;;;eA2BG,EAAE,aACK,SAAS,eACP,MAAM,UACX,MAAM,SACP,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC;;;;;;;;;;;;;;;;;;;IAWvE;;;;;;OAMG;aAEG,EAAE,aACK,SAAS,eACP,MAAM,UACX,MAAM,YACJ,MAAM,GAAG,IAAI,WACd,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;gBAqBN,EAAE,aAAa,SAAS,eAAe,MAAM,UAAU,MAAM,YAAY,OAAO;;;;;;;;;;;;;;;;;;;IAclG,iFAAiF;mBAC5D,EAAE,eAAe,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAehF,0FAA0F;kBACtE,EAAE,eAAe,MAAM,UAAU,MAAM;;;IAU3D;;;OAGG;gBACe,EAAE,eAAe,MAAM,UAAU,MAAM;;;;;;;;;;;;;;;;;;;IA0BzD,kFAAkF;cAClE,EAAE,eAAe,MAAM,UAAU,MAAM;;;IAOvD,gFAAgF;;EAGnF;AACD,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA"}