@kubun/graphql 0.4.3 → 0.4.5

package/lib/context.d.ts

@@ -26,9 +26,11 @@ export type SubscriptionContext = {
  * Query and subscription functions requiring server implementation
  */
 export type ReadOnlyContext = QueryContext & SubscriptionContext;
+export type AccessChecker = (doc: DocumentNode, permissionType: 'read' | 'write') => Promise<boolean>;
 export type ReadContextParams = {
     db: KubunDB;
     viewerDID: string;
+    accessChecker?: AccessChecker;
 };
 export declare function createReadContext(params: ReadContextParams): ReadOnlyContext;
 /**
@@ -39,6 +41,10 @@ export type MutationContext = {
     executeSetMutation(modelID: string, unique: Uint8Array, data: DocumentData, info: GraphQLResolveInfo): Promise<DocumentNode>;
     executeUpdateMutation(input: UpdateMutationInput, info: GraphQLResolveInfo): Promise<DocumentNode>;
     executeRemoveMutation(id: string, info: GraphQLResolveInfo): Promise<void>;
+    executeSetModelAccessDefaults(modelId: string, permissionType: 'read' | 'write', accessLevel: string, allowedDIDs: Array<string> | null): Promise<void>;
+    executeRemoveModelAccessDefaults(modelId: string, permissionTypes: Array<'read' | 'write'>): Promise<void>;
+    executeSetDocumentAccessOverride(documentId: string, permissionType: 'read' | 'write', accessLevel: string, allowedDIDs: Array<string> | null): Promise<void>;
+    executeRemoveDocumentAccessOverride(documentId: string, permissionTypes: Array<'read' | 'write'>): Promise<void>;
 };
 export type Context = ReadOnlyContext & MutationContext;
 //# sourceMappingURL=context.d.ts.map

package/lib/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAY,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,KAAK,EAAE,UAAU,EAAuB,IAAI,EAAE,MAAM,eAAe,CAAA;AAE1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAE7E;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,IAAI,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACtD,iBAAiB,CACf,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EACvB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAA;IACpC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;CACvF,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IACjF,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IACpE,0BAA0B,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;IACpD,4BAA4B,CAC1B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GAC3C,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;IACrC,8BAA8B,CAC5B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GAC3C,cAAc,CAAC,MAAM,CAAC,CAAA;CAC1B,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,mBAAmB,CAAA;AAEhE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CAiJ5E;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,qBAAqB,CACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,YAAY,CAAC,CAAA;IACxB,kBAAkB,CAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,YAAY,CAAC,CAAA;IACxB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAClG,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3E,CAAA;AAED,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,eAAe,CAAA"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAY,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,KAAK,EAAE,UAAU,EAAuB,IAAI,EAAE,MAAM,eAAe,CAAA;AAE1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAE7E;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,IAAI,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACtD,iBAAiB,CACf,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EACvB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAA;IACpC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;CACvF,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IACjF,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IACpE,0BAA0B,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;IACpD,4BAA4B,CAC1B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GAC3C,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;IACrC,8BAA8B,CAC5B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GAC3C,cAAc,CAAC,MAAM,CAAC,CAAA;CAC1B,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,mBAAmB,CAAA;AAEhE,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,YAAY,EACjB,cAAc,EAAE,MAAM,GAAG,OAAO,KAC7B,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,aAAa,CAAA;CAC9B,CAAA;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CAyP5E;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,qBAAqB,CACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,YAAY,CAAC,CAAA;IACxB,kBAAkB,CAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,YAAY,CAAC,CAAA;IACxB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAClG,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,6BAA6B,CAC3B,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GAAG,OAAO,EAChC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,gCAAgC,CAC9B,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,gCAAgC,CAC9B,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GAAG,OAAO,EAChC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,mCAAmC,CACjC,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,eAAe,CAAA"}

package/lib/context.js

@@ -1,7 +1,7 @@
 import { defer } from '@enkaku/async';
 import { DocumentID } from '@kubun/id';
 export function createReadContext(params) {
-    const { db, viewerDID } = params;
+    const { db, viewerDID, accessChecker } = params;
     function createEventGenerator(filter, transform) {
         let isDone = false;
         let pending = null;
@@ -63,32 +63,130 @@ export function createReadContext(params) {
             return viewerDID;
         },
         async loadDocument (id) {
-            return await db.getDocument(DocumentID.fromString(id));
+            const doc = await db.getDocument(DocumentID.fromString(id));
+            if (!doc) return null;
+            // Check access if access checker is provided
+            if (accessChecker) {
+                const hasAccess = await accessChecker(doc, 'read');
+                if (!hasAccess) {
+                    // Access denied - return null (error will be added by GraphQL layer)
+                    return null;
+                }
+            }
+            return doc;
         },
         async resolveConnection (modelIDs, args) {
-            // TODO: access control filtering
-            const { entries, hasMore } = await db.queryDocuments({
-                ...args,
-                modelIDs
-            });
+            // If no access checker, return all documents
+            if (accessChecker == null) {
+                const { entries, hasMore } = await db.queryDocuments({
+                    ...args,
+                    modelIDs
+                });
+                return {
+                    edges: entries.map((e)=>({
+                            cursor: e.cursor,
+                            node: e.document
+                        })),
+                    pageInfo: {
+                        hasNextPage: args.first ? hasMore : false,
+                        hasPreviousPage: args.first ? false : hasMore,
+                        endCursor: entries.at(-1)?.cursor ?? null,
+                        startCursor: entries.at(0)?.cursor ?? null
+                    }
+                };
+            }
+            // With access control: post-fetch filtering with over-fetching
+            const allEntries = [];
+            let requestedCount = 0;
+            let attempts = 0;
+            const maxAttempts = 10 // Prevent infinite loops
+            ;
+            if (args.first != null) {
+                requestedCount = args.first;
+                const fetchSize = requestedCount * 2 // Over-fetch to reduce round trips
+                ;
+                let cursor = args.after;
+                while(allEntries.length < requestedCount && attempts < maxAttempts){
+                    // Fetch unfiltered batch from DB
+                    const { entries, hasMore } = await db.queryDocuments({
+                        ...args,
+                        modelIDs,
+                        first: fetchSize,
+                        after: cursor
+                    });
+                    if (entries.length === 0 && !hasMore) break;
+                    // Filter based on access rules
+                    for (const entry of entries){
+                        if (await accessChecker(entry.document, 'read')) {
+                            allEntries.push(entry);
+                            if (allEntries.length >= requestedCount) break;
+                        }
+                    }
+                    if (!hasMore) break;
+                    cursor = entries.at(-1)?.cursor ?? null;
+                    attempts++;
+                }
+            } else if (args.last != null) {
+                requestedCount = args.last;
+                const fetchSize = requestedCount * 2 // Over-fetch to reduce round trips
+                ;
+                let cursor = args.before;
+                while(allEntries.length < requestedCount && attempts < maxAttempts){
+                    // Fetch unfiltered batch from DB
+                    const { entries, hasMore } = await db.queryDocuments({
+                        ...args,
+                        modelIDs,
+                        last: fetchSize,
+                        before: cursor
+                    });
+                    if (entries.length === 0 && !hasMore) break;
+                    // Filter based on access rules - note we reverse the entries array for backward pagination
+                    for (const entry of [
+                        ...entries
+                    ].reverse()){
+                        if (await accessChecker(entry.document, 'read')) {
+                            allEntries.unshift(entry);
+                            if (allEntries.length >= requestedCount) break;
+                        }
+                    }
+                    if (!hasMore) break;
+                    cursor = entries.at(0)?.cursor ?? null;
+                    attempts++;
+                }
+            }
+            // Return only requested count
+            const resultEntries = allEntries.slice(0, requestedCount);
+            const hasMoreResults = allEntries.length > requestedCount;
             return {
-                edges: entries.map((e)=>({
+                edges: resultEntries.map((e)=>({
                         cursor: e.cursor,
                         node: e.document
                     })),
                 pageInfo: {
-                    hasNextPage: args.first ? hasMore : false,
-                    hasPreviousPage: args.first ? false : hasMore,
-                    endCursor: entries.at(-1)?.cursor ?? null,
-                    startCursor: entries.at(0)?.cursor ?? null
+                    hasNextPage: args.first ? hasMoreResults : false,
+                    hasPreviousPage: args.first ? false : hasMoreResults,
+                    endCursor: resultEntries.at(-1)?.cursor ?? null,
+                    startCursor: resultEntries.at(0)?.cursor ?? null
                 }
             };
         },
         async resolveList (modelIDs, docIDs) {
-            return await db.listDocuments({
+            const documents = await db.listDocuments({
                 modelIDs,
                 docIDs
             });
+            // If no access checker, return all documents
+            if (!accessChecker) {
+                return documents;
+            }
+            // Filter based on access control
+            const accessible = [];
+            for (const doc of documents){
+                if (await accessChecker(doc, 'read')) {
+                    accessible.push(doc);
+                }
+            }
+            return accessible;
         },
         subscribeToDocumentCreated (modelIDs) {
             return createEventGenerator((event)=>event.type === 'create' && modelIDs.includes(event.document.model), (event)=>event.document);

package/lib/schema.d.ts

@@ -25,22 +25,36 @@ type RelationField = {
 };
 type RelationFields = Record<string, Array<RelationField>>;
 export type SchemaBuilderParams = {
-    aliases?: Record<string, string>;
     record: DocumentModelsRecord;
+    aliases?: Record<string, string>;
+    onlyModels?: Array<string> | null;
+    includeInterfaceDependencies?: boolean;
+    includeRelationDependencies?: boolean;
+    includeMutations?: boolean;
+    includeSubscriptions?: boolean;
 };
 export declare class SchemaBuilder {
     _aliases: Record<string, string>;
+    _aliasToModelID: Record<string, string>;
     _definitions: SharedDefinitions | undefined;
     _implemented: Record<string, Array<string>>;
+    _includedModelIDs: Set<string>;
+    _includeInterfaceDependencies: boolean;
+    _includeMutations: boolean;
+    _includeRelationDependencies: boolean;
+    _includeSubscriptions: boolean;
     _inputObjects: Record<string, GraphQLInputObjectType>;
     _mutations: GraphQLFieldConfigMap<unknown, Context>;
     _nodeModelIDs: Array<string>;
+    _onlyModels: Array<string> | null;
     _record: DocumentModelsRecord;
     _references: ReferencesRecordModel;
     _relationsTo: Record<string, RelationFields>;
     _subscriptions: GraphQLFieldConfigMap<unknown, Context>;
     _types: Record<string, GraphQLOutputType>;
     constructor(params: SchemaBuilderParams);
+    _resolveModelIdentifier(identifier: string): string;
+    _resolveModelIDsToInclude(): Set<string>;
     getModelIDs(id: string | null): Array<string>;
     build(): GraphQLSchema;
     _getDefinitions(): SharedDefinitions;
@@ -69,6 +83,6 @@ export declare class SchemaBuilder {
     _buildEnumString(schema: StringEnumModel, parentName?: string): GraphQLEnumType;
     _buildFormatString(schema: StringFormatModel): GraphQLScalarType<unknown, unknown>;
 }
-export declare function createSchema(record: DocumentModelsRecord, aliases?: Record<string, string>): GraphQLSchema;
+export declare function createSchema(params: SchemaBuilderParams): GraphQLSchema;
 export {};
 //# sourceMappingURL=schema.d.ts.map

package/lib/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAc,eAAe,EAAY,MAAM,WAAW,CAAA;AAC/E,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EAEZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,WAAW,EAEX,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,WAAW,EAEX,SAAS,EACV,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAGL,eAAe,EAEf,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAI1B,sBAAsB,EACtB,KAAK,gBAAgB,EAErB,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,aAAa,EAKd,MAAM,SAAS,CAAA;AAkBhB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAoD3C,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,eAAe,GAAG,MAAM,GAAG,eAAe,CAE/E;AAED,wBAAgB,WAAW,CACzB,EAAE,EAAE,eAAe,GAAG,MAAM,EAC5B,QAAQ,EAAE,eAAe,GAAG,MAAM,GACjC,eAAe,CAGjB;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,gBAAgB,iDAE5C;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,iBAAiB,kDAElD;AAyFD,eAAO,MAAM,cAAc,wBAWzB,CAAA;AAUF,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,oBAAoB,CAAA;IACnC,SAAS,EAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC/C,UAAU,EAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,GAAG;IACvD,aAAa,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjD,gBAAgB,EAAE,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC1D,iBAAiB,EAAE,oBAAoB,CAAA;IACvC,kBAAkB,EAAE,qBAAqB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAChE,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;CACrD,CAAA;AAED,KAAK,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AACvD,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;AAE1D,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,MAAM,EAAE,oBAAoB,CAAA;CAC7B,CAAA;AAED,qBAAa,aAAa;IAExB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,EAAE,iBAAiB,GAAG,SAAS,CAAA;IAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAK;IAChD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAA6C;IAClG,UAAU,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAK;IACxD,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5B,OAAO,EAAE,oBAAoB,CAAA;IAC7B,WAAW,EAAE,qBAAqB,CAAK;IACvC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAK;IACjD,cAAc,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAK;IAC5D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAuB;gBAEpD,MAAM,EAAE,mBAAmB;IA+CvC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;IAI7C,KAAK,IAAI,aAAa;IAiFtB,eAAe,IAAI,iBAAiB;IAOpC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB;IAWnE,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS;IAQ1C,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,SAAK,GAAG,gBAAgB;IA4CvF,uBAAuB,IAAI,iBAAiB;IAyI5C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,oBAAoB;IA+G3F,oBAAoB,CAClB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,MAAM,GACX,qBAAqB,CAAC,YAAY,EAAE,OAAO,CAAC;IA2G/C,wBAAwB,CACtB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,MAAM,GACX,oBAAoB,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC;IAoClE,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAgC3D,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,SAAK,GAAG,gBAAgB,GAAG,IAAI;IA0ClF,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,SAAK,GAAG,gBAAgB,GAAG,IAAI;IAgBnF,uBAAuB,CACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,GAAG,WAAW,EACzC,UAAU,SAAK,EACf,UAAU,UAAQ;IAqCpB,wBAAwB,CACtB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,GAAG,WAAW,EACzC,UAAU,SAAK,EACf,UAAU,UAAQ;IA4BpB,wBAAwB,CACtB,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EACzB,aAAa,CAAC,EAAE,MAAM,GACrB,sBAAsB;IA4BzB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,SAAK,GAAG,iBAAiB;IAmBlF,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,SAAK,GAAG,iBAAiB;IAsBjF,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,SAAK,GAAG,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAOhG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,SAAK,GAAG,iBAAiB;IAMjF,kBAAkB,CAChB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,GAAG,WAAW,EACzC,UAAU,SAAK,GACd,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAc1D,oBAAoB,CAClB,MAAM,EAAE,qBAAqB,CAAC,YAAY,EAAE,OAAO,CAAC,EACpD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,IAAI;IA0BP,2BAA2B,CACzB,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,EAC/C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,IAAI;IAsCP,YAAY,CACV,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,MAAM,GACjB,eAAe,GAAG,iBAAiB,GAAG,iBAAiB;IAa1D,kBAAkB,CAAC,MAAM,EAAE,iBAAiB;IAS5C,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,SAAK,GAUvB,eAAe;IAGjD,kBAAkB,CAAC,MAAM,EAAE,iBAAiB;CAO7C;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,aAAa,CAEf"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAc,eAAe,EAAY,MAAM,WAAW,CAAA;AAC/E,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EAEZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,WAAW,EAEX,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,WAAW,EAEX,SAAS,EACV,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAGL,eAAe,EAEf,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAI1B,sBAAsB,EACtB,KAAK,gBAAgB,EAErB,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,aAAa,EAMd,MAAM,SAAS,CAAA;AAkBhB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAiD3C,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,eAAe,GAAG,MAAM,GAAG,eAAe,CAE/E;AAED,wBAAgB,WAAW,CACzB,EAAE,EAAE,eAAe,GAAG,MAAM,EAC5B,QAAQ,EAAE,eAAe,GAAG,MAAM,GACjC,eAAe,CAGjB;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,gBAAgB,iDAE5C;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,iBAAiB,kDAElD;AAyFD,eAAO,MAAM,cAAc,wBAWzB,CAAA;AAUF,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,oBAAoB,CAAA;IACnC,SAAS,EAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC/C,UAAU,EAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,GAAG;IACvD,aAAa,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjD,gBAAgB,EAAE,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC1D,iBAAiB,EAAE,oBAAoB,CAAA;IACvC,kBAAkB,EAAE,qBAAqB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAChE,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;CACrD,CAAA;AAED,KAAK,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AACvD,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;AAE1D,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,oBAAoB,CAAA;IAE5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEhC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IAEjC,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC,2BAA2B,CAAC,EAAE,OAAO,CAAA;IAErC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,qBAAa,aAAa;IAExB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACvC,YAAY,EAAE,iBAAiB,GAAG,SAAS,CAAA;IAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAK;IAChD,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC9B,6BAA6B,EAAE,OAAO,CAAA;IACtC,iBAAiB,EAAE,OAAO,CAAA;IAC1B,4BAA4B,EAAE,OAAO,CAAA;IACrC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAA6C;IAClG,UAAU,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAK;IACxD,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IACjC,OAAO,EAAE,oBAAoB,CAAA;IAC7B,WAAW,EAAE,qBAAqB,CAAK;IACvC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAK;IACjD,cAAc,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAK;IAC5D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAuB;gBAEpD,MAAM,EAAE,mBAAmB;IAyDvC,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAenD,yBAAyB,IAAI,GAAG,CAAC,MAAM,CAAC;IA0DxC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;IAI7C,KAAK,IAAI,aAAa;IAkKtB,eAAe,IAAI,iBAAiB;IAOpC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB;IAWnE,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS;IAQ1C,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,SAAK,GAAG,gBAAgB;IA4CvF,uBAAuB,IAAI,iBAAiB;IAiK5C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,oBAAoB;IAqH3F,oBAAoB,CAClB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,MAAM,GACX,qBAAqB,CAAC,YAAY,EAAE,OAAO,CAAC;IAoH/C,wBAAwB,CACtB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,MAAM,GACX,oBAAoB,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC;IAsClE,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAgC3D,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,SAAK,GAAG,gBAAgB,GAAG,IAAI;IA0ClF,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,SAAK,GAAG,gBAAgB,GAAG,IAAI;IAgBnF,uBAAuB,CACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,GAAG,WAAW,EACzC,UAAU,SAAK,EACf,UAAU,UAAQ;IAqCpB,wBAAwB,CACtB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,GAAG,WAAW,EACzC,UAAU,SAAK,EACf,UAAU,UAAQ;IA4BpB,wBAAwB,CACtB,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EACzB,aAAa,CAAC,EAAE,MAAM,GACrB,sBAAsB;IA4BzB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,SAAK,GAAG,iBAAiB;IAmBlF,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,SAAK,GAAG,iBAAiB;IAsBjF,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,SAAK,GAAG,WAAW,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAOhG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,SAAK,GAAG,iBAAiB;IAMjF,kBAAkB,CAChB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,GAAG,WAAW,EACzC,UAAU,SAAK,GACd,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAc1D,oBAAoB,CAClB,MAAM,EAAE,qBAAqB,CAAC,YAAY,EAAE,OAAO,CAAC,EACpD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,IAAI;IA0BP,2BAA2B,CACzB,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,EAC/C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,GACtB,IAAI;IAsCP,YAAY,CACV,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,MAAM,GACjB,eAAe,GAAG,iBAAiB,GAAG,iBAAiB;IAa1D,kBAAkB,CAAC,MAAM,EAAE,iBAAiB;IAS5C,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,SAAK,GAUvB,eAAe;IAGjD,kBAAkB,CAAC,MAAM,EAAE,iBAAiB;CAO7C;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CAEvE"}

package/lib/schema.js

@@ -26,14 +26,17 @@ function isList(type) {
     return isListType(type) || isNonNullType(type) && isListType(type.ofType);
 }
 function collectAllModelIDs(collected, record, interfaceID) {
-    const info = record[interfaceID];
-    if (info == null) {
+    const implementedBy = record[interfaceID];
+    if (implementedBy == null) {
         throw new Error(`Interface ${interfaceID} not found in record`);
     }
-    for (const id of info.implementedBy){
-        if (info.isInterface) {
+    for (const id of implementedBy){
+        // Check if this id is itself an interface (exists in record with implementers)
+        if (record[id] != null) {
+            // The id is an interface that has implementers, resolve recursively
             collectAllModelIDs(collected, record, id);
         } else {
+            // The id is a concrete model
             collected.add(id);
         }
     }
@@ -219,14 +222,21 @@ const OrderByDirection = new GraphQLEnumType({
 export class SchemaBuilder {
     // Mapping of model or references IDs to their GraphQL object names
     _aliases;
+    _aliasToModelID;
     _definitions;
     _implemented = {};
+    _includedModelIDs;
+    _includeInterfaceDependencies;
+    _includeMutations;
+    _includeRelationDependencies;
+    _includeSubscriptions;
     _inputObjects = {
         ...VALUE_FILTER_INPUTS,
         PatchOperation
     };
     _mutations = {};
     _nodeModelIDs;
+    _onlyModels;
     _record;
     _references = {};
     _relationsTo = {};
@@ -235,24 +245,30 @@ export class SchemaBuilder {
         OrderByDirection
     };
     constructor(params){
-        this._aliases = params.aliases ?? {};
         this._record = params.record;
+        this._onlyModels = params.onlyModels ?? null;
+        this._includeInterfaceDependencies = params.includeInterfaceDependencies ?? true;
+        this._includeRelationDependencies = params.includeRelationDependencies ?? true;
+        this._includeMutations = params.includeMutations ?? true;
+        this._includeSubscriptions = params.includeSubscriptions ?? true;
+        // params.aliases is { aliasName: modelID }, which is what we need for _aliasToModelID
+        this._aliasToModelID = params.aliases ?? {};
+        // Build reverse lookup map (modelID -> alias) for internal use
+        this._aliases = {};
+        for (const [alias, modelID] of Object.entries(this._aliasToModelID)){
+            this._aliases[modelID] = alias;
+        }
+        // Compute which models to include
+        this._includedModelIDs = this._resolveModelIDsToInclude();
         const referencedInterfaces = {};
         for (const [modelIDstring, model] of Object.entries(params.record)){
             const modelID = DocumentModelID.fromString(modelIDstring);
             Object.assign(this._references, model.schema.$defs ?? {});
-            referencedInterfaces[modelIDstring] ??= {
-                isInterface: model.behavior === 'interface',
-                implementedBy: new Set()
-            };
             // Extract interfaces
             for (const iid of model.interfaces){
                 const interfaceID = getGlobalID(iid, modelID).toString();
-                referencedInterfaces[interfaceID] ??= {
-                    isInterface: model.behavior === 'interface',
-                    implementedBy: new Set()
-                };
-                referencedInterfaces[interfaceID].implementedBy.add(modelIDstring);
+                referencedInterfaces[interfaceID] ??= new Set();
+                referencedInterfaces[interfaceID].add(modelIDstring);
             }
             // Extract inverse relations
             for (const [fieldName, meta] of Object.entries(model.fieldsMeta)){
@@ -274,13 +290,76 @@ export class SchemaBuilder {
         for (const id of Object.keys(referencedInterfaces)){
             const implementedBy = new Set();
             collectAllModelIDs(implementedBy, referencedInterfaces, id);
-            this._implemented[id] = Array.from(implementedBy);
+            if (implementedBy.size !== 0) {
+                this._implemented[id] = Array.from(implementedBy);
+            }
             for (const modelID of implementedBy){
                 nodeModelIDs.add(modelID);
             }
         }
         this._nodeModelIDs = Array.from(nodeModelIDs);
     }
+    _resolveModelIdentifier(identifier) {
+        // Check if it's a model ID (exists in record)
+        if (this._record[identifier] != null) {
+            return identifier;
+        }
+        // Check if it's an alias
+        const modelID = this._aliasToModelID[identifier];
+        if (modelID != null && this._record[modelID] != null) {
+            return modelID;
+        }
+        throw new Error(`Model identifier "${identifier}" not found. Must be a valid model ID or alias.`);
+    }
+    _resolveModelIDsToInclude() {
+        // If no restriction, include all models
+        if (this._onlyModels == null || this._onlyModels.length === 0) {
+            return new Set(Object.keys(this._record));
+        }
+        // Resolve identifiers to model IDs
+        const included = new Set();
+        for (const identifier of this._onlyModels){
+            const modelID = this._resolveModelIdentifier(identifier);
+            included.add(modelID);
+        }
+        // If both dependencies are disabled, return early
+        if (!this._includeInterfaceDependencies && !this._includeRelationDependencies) {
+            return included;
+        }
+        // Recursively collect dependencies
+        const toProcess = Array.from(included);
+        const processed = new Set();
+        while(toProcess.length > 0){
+            const modelID = toProcess.pop();
+            if (processed.has(modelID)) continue;
+            processed.add(modelID);
+            const model = this._record[modelID];
+            if (model == null) continue;
+            // Add interface dependencies if enabled
+            if (this._includeInterfaceDependencies) {
+                for (const iid of model.interfaces){
+                    const interfaceID = getGlobalID(iid, modelID).toString();
+                    if (!included.has(interfaceID)) {
+                        included.add(interfaceID);
+                        toProcess.push(interfaceID);
+                    }
+                }
+            }
+            // Add relation dependencies if enabled
+            if (this._includeRelationDependencies) {
+                for (const meta of Object.values(model.fieldsMeta)){
+                    if (meta.type === 'document' && meta.model != null && meta.model !== null) {
+                        const relationID = getGlobalID(meta.model, modelID).toString();
+                        if (!included.has(relationID)) {
+                            included.add(relationID);
+                            toProcess.push(relationID);
+                        }
+                    }
+                }
+            }
+        }
+        return included;
+    }
     getModelIDs(id) {
         return id === null ? this._nodeModelIDs : this._implemented[id] ?? [
             id
@@ -293,7 +372,7 @@ export class SchemaBuilder {
             nodes: definitions.nodesField,
             ...definitions.queryFields
         };
-        for (const id of Object.keys(this._record)){
+        for (const id of this._includedModelIDs){
             this._buildDocument(id);
             const name = this._aliases[id];
             const filterArg = {
@@ -313,16 +392,95 @@ export class SchemaBuilder {
                 }
             };
         }
-        return new GraphQLSchema({
+        // Add access control mutations if mutations are enabled
+        if (this._includeMutations) {
+            this._mutations.setModelAccessDefaults = {
+                type: GraphQLBoolean,
+                args: {
+                    modelId: {
+                        type: new GraphQLNonNull(GraphQLID)
+                    },
+                    permissionType: {
+                        type: new GraphQLNonNull(GraphQLString)
+                    },
+                    accessLevel: {
+                        type: new GraphQLNonNull(GraphQLString)
+                    },
+                    allowedDIDs: {
+                        type: toList(GraphQLString)
+                    }
+                },
+                resolve: async (_, args, ctx)=>{
+                    await ctx.executeSetModelAccessDefaults(args.modelId, args.permissionType, args.accessLevel, args.allowedDIDs ?? null);
+                    return true;
+                }
+            };
+            this._mutations.removeModelAccessDefaults = {
+                type: GraphQLBoolean,
+                args: {
+                    modelId: {
+                        type: new GraphQLNonNull(GraphQLID)
+                    },
+                    permissionTypes: {
+                        type: new GraphQLNonNull(toList(GraphQLString))
+                    }
+                },
+                resolve: async (_, args, ctx)=>{
+                    await ctx.executeRemoveModelAccessDefaults(args.modelId, args.permissionTypes);
+                    return true;
+                }
+            };
+            this._mutations.setDocumentAccessOverride = {
+                type: GraphQLBoolean,
+                args: {
+                    documentId: {
+                        type: new GraphQLNonNull(GraphQLID)
+                    },
+                    permissionType: {
+                        type: new GraphQLNonNull(GraphQLString)
+                    },
+                    accessLevel: {
+                        type: new GraphQLNonNull(GraphQLString)
+                    },
+                    allowedDIDs: {
+                        type: toList(GraphQLString)
+                    }
+                },
+                resolve: async (_, args, ctx)=>{
+                    await ctx.executeSetDocumentAccessOverride(args.documentId, args.permissionType, args.accessLevel, args.allowedDIDs ?? null);
+                    return true;
+                }
+            };
+            this._mutations.removeDocumentAccessOverride = {
+                type: GraphQLBoolean,
+                args: {
+                    documentId: {
+                        type: new GraphQLNonNull(GraphQLID)
+                    },
+                    permissionTypes: {
+                        type: new GraphQLNonNull(toList(GraphQLString))
+                    }
+                },
+                resolve: async (_, args, ctx)=>{
+                    await ctx.executeRemoveDocumentAccessOverride(args.documentId, args.permissionTypes);
+                    return true;
+                }
+            };
+        }
+        const config = {
             query: new GraphQLObjectType({
                 name: 'Query',
                 fields: queryFields
-            }),
-            mutation: new GraphQLObjectType({
+            })
+        };
+        if (this._includeMutations) {
+            config.mutation = new GraphQLObjectType({
                 name: 'Mutation',
                 fields: this._mutations
-            }),
-            subscription: new GraphQLObjectType({
+            });
+        }
+        if (this._includeSubscriptions) {
+            config.subscription = new GraphQLObjectType({
                 name: 'Subscription',
                 fields: ()=>{
                     const fields = {
@@ -347,6 +505,7 @@ export class SchemaBuilder {
                         }
                     };
                     for (const [id, model] of Object.entries(this._record)){
+                        if (!this._includedModelIDs.has(id)) continue;
                         const name = this._aliases[id];
                         fields[`new${name}Created`] = {
                             type: new GraphQLNonNull(this._types[id]),
@@ -365,14 +524,16 @@ export class SchemaBuilder {
                         }
                         for (const [fieldName, relations] of Object.entries(this._relationsTo[id] ?? {})){
                             for (const relation of relations){
+                                if (!this._includedModelIDs.has(relation.model)) continue;
                                 this._buildRelationSubscriptions(fields, id, fieldName, relation);
                             }
                         }
                     }
                     return fields;
                 }
-            })
-        });
+            });
+        }
+        return new GraphQLSchema(config);
     }
     _getDefinitions() {
         if (this._definitions == null) {
@@ -464,6 +625,7 @@ export class SchemaBuilder {
                     }
                 };
                 for (const [id, model] of Object.entries(this._record)){
+                    if (!this._includedModelIDs.has(id)) continue;
                     switch(model.behavior){
                         case 'interface':
                             continue;
@@ -530,6 +692,30 @@ export class SchemaBuilder {
                 }
             }
         });
+        // Create AccessRule type for read/write permissions
+        const accessRuleObject = new GraphQLObjectType({
+            name: 'AccessRule',
+            fields: {
+                level: {
+                    type: new GraphQLNonNull(GraphQLString)
+                },
+                allowedDIDs: {
+                    type: new GraphQLList(new GraphQLNonNull(GraphQLString))
+                }
+            }
+        });
+        // Create AccessPermissions type
+        const accessPermissionsObject = new GraphQLObjectType({
+            name: 'AccessPermissions',
+            fields: {
+                read: {
+                    type: accessRuleObject
+                },
+                write: {
+                    type: accessRuleObject
+                }
+            }
+        });
         const documentNodeFields = {
             // Node interface
             id: {
@@ -547,6 +733,11 @@ export class SchemaBuilder {
             },
             updatedAt: {
                 type: GraphQLDateTimeISO
+            },
+            // Access control
+            accessPermissions: {
+                type: accessPermissionsObject,
+                resolve: (doc)=>doc.data?.accessPermissions ?? null
             }
         };
         const documentInterface = new GraphQLInterfaceType({
@@ -592,7 +783,7 @@ export class SchemaBuilder {
                     definitions.nodeInterface
                 ].concat(model.interfaces.map((interfaceID)=>{
                     return this._types[getGlobalID(interfaceID, id).toString()];
-                }));
+                }).filter((type)=>type != null));
             },
             fields: ()=>this._buildDocumentFields(id, model, name)
         };
@@ -612,7 +803,7 @@ export class SchemaBuilder {
         this._buildObjectFilterInput(id, model.schema, name, true);
         this._buildObjectOrderByInput(id, model.schema, name, true);
         // TODO: move to dedicated method
-        if (!isInterface) {
+        if (!isInterface && this._includeMutations) {
             if (model.behavior === 'default') {
                 this._mutations[`create${name}`] = mutationWithClientMutationId({
                     name: `Create${name}`,
@@ -690,10 +881,18 @@ export class SchemaBuilder {
                             type: new GraphQLNonNull(GraphQLID)
                         }
                     }),
-                outputFields: ()=>definitions.queryFields,
+                outputFields: ()=>({
+                        ...definitions.queryFields,
+                        // Return id so it can be used with Relay's @deleteEdge directive
+                        id: {
+                            type: new GraphQLNonNull(GraphQLID)
+                        }
+                    }),
                 mutateAndGetPayload: async (input, ctx, info)=>{
                     await ctx.executeRemoveMutation(input.id, info);
-                    return {};
+                    return {
+                        id: input.id
+                    };
                 }
             });
         }
@@ -763,7 +962,14 @@ export class SchemaBuilder {
                             relationType = definitions.documentInterface;
                         } else {
                             relationModelID = getGlobalID(relationModel, id).toString();
-                            relationType = this._buildDocument(relationModelID);
+                            // Check if the related model is included in the schema
+                            if (this._includedModelIDs.has(relationModelID)) {
+                                relationType = this._buildDocument(relationModelID);
+                            } else {
+                                // Fall back to generic DocumentNode interface
+                                relationType = definitions.documentInterface;
+                                relationModelID = null; // Treat as unspecified model
+                            }
                         }
                         if (isList(field.type)) {
                             // TODO: add suport for filters?
@@ -791,12 +997,14 @@ export class SchemaBuilder {
             const interfaceID = getGlobalID(iid, id).toString();
             for (const [fieldName, relations] of Object.entries(this._relationsTo[interfaceID] ?? {})){
                 for (const relation of relations){
+                    if (!this._includedModelIDs.has(relation.model)) continue;
                     this._buildRelationFields(fields, fieldName, relation);
                 }
             }
         }
         for (const [fieldName, relations] of Object.entries(this._relationsTo[id] ?? {})){
             for (const relation of relations){
+                if (!this._includedModelIDs.has(relation.model)) continue;
                 this._buildRelationFields(fields, fieldName, relation);
             }
         }
@@ -825,7 +1033,7 @@ export class SchemaBuilder {
                 return model.interfaces.map((interfaceID)=>{
                     const typeID = `${getGlobalID(interfaceID, id).toString()}-data`;
                     return this._types[typeID];
-                });
+                }).filter((type)=>type != null);
             },
             fields
         };
@@ -1196,9 +1404,6 @@ export class SchemaBuilder {
         return scalar;
     }
 }
-export function createSchema(record, aliases) {
-    return new SchemaBuilder({
-        record,
-        aliases
-    }).build();
+export function createSchema(params) {
+    return new SchemaBuilder(params).build();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubun/graphql",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "license": "see LICENSE.md",
   "keywords": [],
   "type": "module",
@@ -23,10 +23,13 @@
     "graphql-scalars": "^1.25.0",
     "multiformats": "^13.4.2",
     "@kubun/id": "^0.4.0",
-    "@kubun/protocol": "^0.4.0"
+    "@kubun/protocol": "^0.4.1"
   },
   "devDependencies": {
-    "@kubun/db": "^0.4.0"
+    "@enkaku/capability": "^0.12.1",
+    "@enkaku/token": "0.12.3",
+    "@kubun/db": "^0.4.0",
+    "@kubun/test-utils": "^0.4.0"
   },
   "scripts": {
     "build:clean": "del lib",