@objectstack/core 16.0.0 → 17.0.0-rc.0

package/dist/index.d.cts

@@ -1751,6 +1751,14 @@ interface ResolvedAuthzContext {
     tabPermissions?: Record<string, 'visible' | 'hidden' | 'default_on' | 'default_off'>;
     /** Fellow-org user IDs for RLS scoping of identity tables (`id IN (...)`). */
     org_user_ids: string[];
+    /**
+     * [ADR-0105 D2] Every organization this principal currently holds a VALID
+     * membership in — the caller's org access set, and the read reach of the
+     * `group` tenancy posture (Layer 0 becomes `organization_id IN (...)`).
+     * Resolved here, once, so no surface re-derives it; empty for an anonymous or
+     * membership-less principal, which fails the group wall closed.
+     */
+    accessible_org_ids: string[];
     /**
      * [ADR-0095 D2/D3] The monotonic posture rung this principal resolves to,
      * DERIVED once here from held capability grants (never a better-auth role):
@@ -1781,6 +1789,58 @@ interface ResolveAuthzInput {
  * never throws. Anonymous requests yield `{ positions: [], permissions: [], ... }`.
  */
 declare function resolveAuthzContext(input: ResolveAuthzInput): Promise<ResolvedAuthzContext>;
+/** The authorization grants a KNOWN user holds — a subset of {@link ResolvedAuthzContext}. */
+interface UserAuthzGrants {
+    positions: string[];
+    permissions: string[];
+    systemPermissions: string[];
+    /** Fellow-org user IDs for RLS scoping of identity tables (`id IN (...)`). */
+    org_user_ids: string[];
+    /** [ADR-0105 D2] Organizations this user holds a currently-valid membership in. */
+    accessible_org_ids: string[];
+    tabPermissions?: Record<string, 'visible' | 'hidden' | 'default_on' | 'default_off'>;
+    posture?: AuthzPosture;
+    /** The user's unique email (`sys_user`), for `current_user.email` owner RLS. */
+    email?: string;
+}
+interface ResolveUserAuthzGrantsOptions {
+    /** Active org/tenant id — scopes org-bound grants (a null-org row is global). */
+    tenantId?: string;
+    /** Clock injection for grant validity windows (tests). */
+    nowMs?: number;
+    /**
+     * Permission names the CALLER already resolved (e.g. API-key scopes) to seed
+     * `permissions` BEFORE permission-set names are appended, so a mixed
+     * API-key+session principal keeps every scope and the ordering is preserved.
+     * Copied, never mutated.
+     */
+    seedPermissions?: string[];
+    /** A caller-supplied email (e.g. from the session) that wins over the `sys_user` read. */
+    seedEmail?: string;
+}
+/**
+ * resolveUserAuthzGrants — the userId-driven core of {@link resolveAuthzContext}.
+ *
+ * Given a KNOWN user id, aggregate the authorization grants that user holds:
+ * org-admin positions (`sys_member`), platform-RBAC positions
+ * (`sys_user_position`), user- and position-bound permission sets
+ * (`sys_user_permission_set` / `sys_position_permission_set` →
+ * `sys_permission_set`), the derived `platform_admin` built-in + posture rung,
+ * fellow-org peers for identity-table RLS, and the env-side `ai_seat`.
+ *
+ * Factored out of `resolveAuthzContext` so a surface that already knows WHO the
+ * principal is — with no HTTP request to resolve it from — can build the SAME
+ * envelope through the ONE resolver, instead of re-reading `sys_member` /
+ * `sys_user_position` / `sys_*_permission_set` itself. The motivating consumer
+ * is a `runAs:'user'` automation run resolving the triggering user's grants
+ * (#3356): the record-change hook session carries only a `userId`, so the
+ * automation engine calls this to run the flow's data ops exactly as that user
+ * — not the bare member/everyone fallback the missing grants used to leave it.
+ *
+ * Fail-closed like its parent: every read is defensive, a missing engine/table
+ * yields an empty-but-valid envelope, and it never throws.
+ */
+declare function resolveUserAuthzGrants(ql: any, userId: string, opts?: ResolveUserAuthzGrantsOptions): Promise<UserAuthzGrants>;
 interface ResolveLocalizationInput {
     ql: any;
     /** Settings service exposing `get(namespace, key, { tenantId, userId })`. */
@@ -2073,12 +2133,16 @@ type BucketGranularity = 'day' | 'week' | 'month' | 'quarter' | 'year';
  * `datetime` field in a reference timezone layers that on top (and, per
  * ADR-0053, a `date` field compares against these `YYYY-MM-DD` bounds directly).
  *
- * Returns `null` for the null/empty bucket, an unparseable key, or a key that
- * is shape-valid but out of range (e.g. `2026-13`, a `-W53` in a 52-week year,
+ * Returns `null` for the empty bucket, an unparseable key, or a key that is
+ * shape-valid but out of range (e.g. `2026-13`, a `-W53` in a 52-week year,
  * `2026-02-30`). Callers drop the range and fall back to an unscoped (superset)
  * drill rather than emit a wrong bound.
+ *
+ * `key` admits `null` because that IS the empty bucket's key on both aggregation
+ * paths (#3839); callers pass a grouped row's dimension value straight through
+ * rather than casting a lie.
  */
-declare function bucketKeyToCalendarRange(key: string, granularity: BucketGranularity): {
+declare function bucketKeyToCalendarRange(key: string | null | undefined, granularity: BucketGranularity): {
     start: string;
     end: string;
 } | null;
@@ -2201,6 +2265,92 @@ declare function withTransientRetry<T>(fn: (attempt: number) => Promise<T>, opts
  */
 declare function bulkWrite<TRow, TRecord = any>(rows: TRow[], opts: BulkWriteOptions<TRow, TRecord>): Promise<BulkWriteRowResult<TRecord>[]>;
 
+/**
+ * The slice of an execution context the resolver reads. Structural on purpose —
+ * see {@link filterTokenContextFrom}.
+ */
+interface ExecutionContextLike {
+    readonly userId?: string;
+    readonly tenantId?: string;
+    readonly timezone?: string;
+}
+/**
+ * The request-scoped values a placeholder can resolve against.
+ *
+ * `now` is captured ONCE per resolve call so every token in one filter shares
+ * an instant — otherwise a `$gte {current_month_start}` / `$lt
+ * {next_month_start}` pair evaluated microseconds apart could straddle a
+ * month boundary and silently drop a row.
+ */
+interface FilterTokenResolutionContext {
+    /** Reference instant. Defaults to `new Date()` at call time. */
+    now?: Date;
+    /** IANA reference timezone for calendar boundaries. Defaults to UTC. */
+    timezone?: string;
+    /** Resolves `{current_user_id}`. */
+    userId?: string;
+    /** Resolves `{current_org_id}`. */
+    orgId?: string;
+}
+/**
+ * Raised when a filter carries a placeholder outside the vocabulary.
+ *
+ * Carries `status`/`code` so the REST layer's generic 4xx passthrough maps it
+ * to a **400 with a fixable message** rather than a 500: the caller's filter is
+ * malformed, the server is fine. (Same convention plugin-sharing uses for its
+ * record-scope denial — no runtime dependency in either direction.)
+ */
+declare class UnknownFilterTokenError extends Error {
+    readonly token: string;
+    readonly suggestion?: string;
+    readonly status = 400;
+    readonly code = "FILTER_TOKEN_UNKNOWN";
+    constructor(token: string, suggestion?: string);
+}
+/**
+ * Raised when a token IS in the vocabulary but the request carries no value
+ * for it — an unauthenticated caller filtering on `{current_user_id}`.
+ *
+ * Distinct from {@link UnknownFilterTokenError} because the fix is different:
+ * the metadata is correct, the context is not. Never silently resolves to
+ * `null`/`undefined`, which on most drivers degrades to `IS NULL` and would
+ * quietly hand back rows the filter was written to exclude.
+ */
+declare class UnresolvedFilterTokenError extends Error {
+    readonly token: string;
+    /** 400, not 500 — see {@link UnknownFilterTokenError}. */
+    readonly status = 400;
+    readonly code = "FILTER_TOKEN_UNRESOLVED";
+    constructor(token: string, detail: string);
+}
+/**
+ * Resolve one token NAME (the bit inside the braces) to its concrete value.
+ * Throws {@link UnresolvedFilterTokenError} for a vocabulary token the request
+ * carries no value for. Returns `undefined` only when the token is outside the
+ * vocabulary — callers turn that into {@link UnknownFilterTokenError}.
+ */
+declare function resolveFilterToken(token: string, ctx?: FilterTokenResolutionContext): unknown;
+/**
+ * Deep-replace every fully-wrapped placeholder in `filter` with its resolved
+ * value, returning a NEW tree (the caller's metadata is never mutated — a view
+ * or dataset definition is shared across requests, so resolving in place would
+ * bake one request's user id, and one day's dates, into every later render).
+ *
+ * Returns the input unchanged, by reference, when it holds no placeholders.
+ */
+declare function resolveFilterTokens<T>(filter: T, ctx?: FilterTokenResolutionContext): T;
+/**
+ * Convenience bridge from an execution context to the resolver's inputs.
+ * `{current_org_id}` reads `tenantId` — the active organization IS the tenant
+ * on the read path (same value the RLS compiler binds to
+ * `current_user.organization_id`).
+ *
+ * Typed structurally, not as `ExecutionContext`, so both the parsed context
+ * (defaults applied) and the pre-parse `ExecutionContextInput` a caller holds
+ * mid-pipeline satisfy it. The three fields read here are optional in both.
+ */
+declare function filterTokenContextFrom(execCtx: ExecutionContextLike | undefined, now?: Date): FilterTokenResolutionContext;
+
 /**
  * In-memory Map-backed cache fallback.
  *
@@ -2637,4 +2787,4 @@ declare class NamespaceResolver {
     private suggestAlternative;
 }
 
-export { ANONYMOUS_DENY_BODY, ANONYMOUS_DENY_CODE, ANONYMOUS_DENY_MESSAGE, ANONYMOUS_DENY_STATUS, API_KEY_PREFIX, type AnonymousDenyInput, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, type BucketGranularity, type BulkWriteOptions, type BulkWriteRowResult, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type GeneratedApiKey, type GrantValidityWindow, HotReloadManager, type KernelState, type KeyInput, type LadderPrincipal, type LadderRow, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, POSTURE_INJECTION_RULE, POSTURE_LADDER, POSTURE_RANK, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PostureEvidence, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolvedAuthzContext, type ResourceUsage, type RetryOptions, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, type VersionCompatibility, bucketKeyToCalendarRange, buildPermissionsFromGrants, bulkWrite, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, deepMerge, defaultIsTransientError, derivePosture, evaluateAuthGate, extractApiKey, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isGrantActive, isGrantExpired, isNode, parseScopes, parseSignature, postureVisibleRows, readAuthoredTranslationLayer, resolveApiKeyPrincipal, resolveAuthzContext, resolveLocale, resolveLocalizationContext, safeExit, shouldDenyAnonymous, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature, wireAuthoredTranslationSync, withTransientRetry, zonedDateStartToUtcMs };
+export { ANONYMOUS_DENY_BODY, ANONYMOUS_DENY_CODE, ANONYMOUS_DENY_MESSAGE, ANONYMOUS_DENY_STATUS, API_KEY_PREFIX, type AnonymousDenyInput, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, type BucketGranularity, type BulkWriteOptions, type BulkWriteRowResult, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type ExecutionContextLike, type FilterTokenResolutionContext, type GeneratedApiKey, type GrantValidityWindow, HotReloadManager, type KernelState, type KeyInput, type LadderPrincipal, type LadderRow, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, POSTURE_INJECTION_RULE, POSTURE_LADDER, POSTURE_RANK, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PostureEvidence, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolveUserAuthzGrantsOptions, type ResolvedAuthzContext, type ResourceUsage, type RetryOptions, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, UnknownFilterTokenError, UnresolvedFilterTokenError, type UserAuthzGrants, type VersionCompatibility, bucketKeyToCalendarRange, buildPermissionsFromGrants, bulkWrite, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, deepMerge, defaultIsTransientError, derivePosture, evaluateAuthGate, extractApiKey, filterTokenContextFrom, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isGrantActive, isGrantExpired, isNode, parseScopes, parseSignature, postureVisibleRows, readAuthoredTranslationLayer, resolveApiKeyPrincipal, resolveAuthzContext, resolveFilterToken, resolveFilterTokens, resolveLocale, resolveLocalizationContext, resolveUserAuthzGrants, safeExit, shouldDenyAnonymous, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature, wireAuthoredTranslationSync, withTransientRetry, zonedDateStartToUtcMs };

package/dist/index.d.ts

@@ -1751,6 +1751,14 @@ interface ResolvedAuthzContext {
     tabPermissions?: Record<string, 'visible' | 'hidden' | 'default_on' | 'default_off'>;
     /** Fellow-org user IDs for RLS scoping of identity tables (`id IN (...)`). */
     org_user_ids: string[];
+    /**
+     * [ADR-0105 D2] Every organization this principal currently holds a VALID
+     * membership in — the caller's org access set, and the read reach of the
+     * `group` tenancy posture (Layer 0 becomes `organization_id IN (...)`).
+     * Resolved here, once, so no surface re-derives it; empty for an anonymous or
+     * membership-less principal, which fails the group wall closed.
+     */
+    accessible_org_ids: string[];
     /**
      * [ADR-0095 D2/D3] The monotonic posture rung this principal resolves to,
      * DERIVED once here from held capability grants (never a better-auth role):
@@ -1781,6 +1789,58 @@ interface ResolveAuthzInput {
  * never throws. Anonymous requests yield `{ positions: [], permissions: [], ... }`.
  */
 declare function resolveAuthzContext(input: ResolveAuthzInput): Promise<ResolvedAuthzContext>;
+/** The authorization grants a KNOWN user holds — a subset of {@link ResolvedAuthzContext}. */
+interface UserAuthzGrants {
+    positions: string[];
+    permissions: string[];
+    systemPermissions: string[];
+    /** Fellow-org user IDs for RLS scoping of identity tables (`id IN (...)`). */
+    org_user_ids: string[];
+    /** [ADR-0105 D2] Organizations this user holds a currently-valid membership in. */
+    accessible_org_ids: string[];
+    tabPermissions?: Record<string, 'visible' | 'hidden' | 'default_on' | 'default_off'>;
+    posture?: AuthzPosture;
+    /** The user's unique email (`sys_user`), for `current_user.email` owner RLS. */
+    email?: string;
+}
+interface ResolveUserAuthzGrantsOptions {
+    /** Active org/tenant id — scopes org-bound grants (a null-org row is global). */
+    tenantId?: string;
+    /** Clock injection for grant validity windows (tests). */
+    nowMs?: number;
+    /**
+     * Permission names the CALLER already resolved (e.g. API-key scopes) to seed
+     * `permissions` BEFORE permission-set names are appended, so a mixed
+     * API-key+session principal keeps every scope and the ordering is preserved.
+     * Copied, never mutated.
+     */
+    seedPermissions?: string[];
+    /** A caller-supplied email (e.g. from the session) that wins over the `sys_user` read. */
+    seedEmail?: string;
+}
+/**
+ * resolveUserAuthzGrants — the userId-driven core of {@link resolveAuthzContext}.
+ *
+ * Given a KNOWN user id, aggregate the authorization grants that user holds:
+ * org-admin positions (`sys_member`), platform-RBAC positions
+ * (`sys_user_position`), user- and position-bound permission sets
+ * (`sys_user_permission_set` / `sys_position_permission_set` →
+ * `sys_permission_set`), the derived `platform_admin` built-in + posture rung,
+ * fellow-org peers for identity-table RLS, and the env-side `ai_seat`.
+ *
+ * Factored out of `resolveAuthzContext` so a surface that already knows WHO the
+ * principal is — with no HTTP request to resolve it from — can build the SAME
+ * envelope through the ONE resolver, instead of re-reading `sys_member` /
+ * `sys_user_position` / `sys_*_permission_set` itself. The motivating consumer
+ * is a `runAs:'user'` automation run resolving the triggering user's grants
+ * (#3356): the record-change hook session carries only a `userId`, so the
+ * automation engine calls this to run the flow's data ops exactly as that user
+ * — not the bare member/everyone fallback the missing grants used to leave it.
+ *
+ * Fail-closed like its parent: every read is defensive, a missing engine/table
+ * yields an empty-but-valid envelope, and it never throws.
+ */
+declare function resolveUserAuthzGrants(ql: any, userId: string, opts?: ResolveUserAuthzGrantsOptions): Promise<UserAuthzGrants>;
 interface ResolveLocalizationInput {
     ql: any;
     /** Settings service exposing `get(namespace, key, { tenantId, userId })`. */
@@ -2073,12 +2133,16 @@ type BucketGranularity = 'day' | 'week' | 'month' | 'quarter' | 'year';
  * `datetime` field in a reference timezone layers that on top (and, per
  * ADR-0053, a `date` field compares against these `YYYY-MM-DD` bounds directly).
  *
- * Returns `null` for the null/empty bucket, an unparseable key, or a key that
- * is shape-valid but out of range (e.g. `2026-13`, a `-W53` in a 52-week year,
+ * Returns `null` for the empty bucket, an unparseable key, or a key that is
+ * shape-valid but out of range (e.g. `2026-13`, a `-W53` in a 52-week year,
  * `2026-02-30`). Callers drop the range and fall back to an unscoped (superset)
  * drill rather than emit a wrong bound.
+ *
+ * `key` admits `null` because that IS the empty bucket's key on both aggregation
+ * paths (#3839); callers pass a grouped row's dimension value straight through
+ * rather than casting a lie.
  */
-declare function bucketKeyToCalendarRange(key: string, granularity: BucketGranularity): {
+declare function bucketKeyToCalendarRange(key: string | null | undefined, granularity: BucketGranularity): {
     start: string;
     end: string;
 } | null;
@@ -2201,6 +2265,92 @@ declare function withTransientRetry<T>(fn: (attempt: number) => Promise<T>, opts
  */
 declare function bulkWrite<TRow, TRecord = any>(rows: TRow[], opts: BulkWriteOptions<TRow, TRecord>): Promise<BulkWriteRowResult<TRecord>[]>;
 
+/**
+ * The slice of an execution context the resolver reads. Structural on purpose —
+ * see {@link filterTokenContextFrom}.
+ */
+interface ExecutionContextLike {
+    readonly userId?: string;
+    readonly tenantId?: string;
+    readonly timezone?: string;
+}
+/**
+ * The request-scoped values a placeholder can resolve against.
+ *
+ * `now` is captured ONCE per resolve call so every token in one filter shares
+ * an instant — otherwise a `$gte {current_month_start}` / `$lt
+ * {next_month_start}` pair evaluated microseconds apart could straddle a
+ * month boundary and silently drop a row.
+ */
+interface FilterTokenResolutionContext {
+    /** Reference instant. Defaults to `new Date()` at call time. */
+    now?: Date;
+    /** IANA reference timezone for calendar boundaries. Defaults to UTC. */
+    timezone?: string;
+    /** Resolves `{current_user_id}`. */
+    userId?: string;
+    /** Resolves `{current_org_id}`. */
+    orgId?: string;
+}
+/**
+ * Raised when a filter carries a placeholder outside the vocabulary.
+ *
+ * Carries `status`/`code` so the REST layer's generic 4xx passthrough maps it
+ * to a **400 with a fixable message** rather than a 500: the caller's filter is
+ * malformed, the server is fine. (Same convention plugin-sharing uses for its
+ * record-scope denial — no runtime dependency in either direction.)
+ */
+declare class UnknownFilterTokenError extends Error {
+    readonly token: string;
+    readonly suggestion?: string;
+    readonly status = 400;
+    readonly code = "FILTER_TOKEN_UNKNOWN";
+    constructor(token: string, suggestion?: string);
+}
+/**
+ * Raised when a token IS in the vocabulary but the request carries no value
+ * for it — an unauthenticated caller filtering on `{current_user_id}`.
+ *
+ * Distinct from {@link UnknownFilterTokenError} because the fix is different:
+ * the metadata is correct, the context is not. Never silently resolves to
+ * `null`/`undefined`, which on most drivers degrades to `IS NULL` and would
+ * quietly hand back rows the filter was written to exclude.
+ */
+declare class UnresolvedFilterTokenError extends Error {
+    readonly token: string;
+    /** 400, not 500 — see {@link UnknownFilterTokenError}. */
+    readonly status = 400;
+    readonly code = "FILTER_TOKEN_UNRESOLVED";
+    constructor(token: string, detail: string);
+}
+/**
+ * Resolve one token NAME (the bit inside the braces) to its concrete value.
+ * Throws {@link UnresolvedFilterTokenError} for a vocabulary token the request
+ * carries no value for. Returns `undefined` only when the token is outside the
+ * vocabulary — callers turn that into {@link UnknownFilterTokenError}.
+ */
+declare function resolveFilterToken(token: string, ctx?: FilterTokenResolutionContext): unknown;
+/**
+ * Deep-replace every fully-wrapped placeholder in `filter` with its resolved
+ * value, returning a NEW tree (the caller's metadata is never mutated — a view
+ * or dataset definition is shared across requests, so resolving in place would
+ * bake one request's user id, and one day's dates, into every later render).
+ *
+ * Returns the input unchanged, by reference, when it holds no placeholders.
+ */
+declare function resolveFilterTokens<T>(filter: T, ctx?: FilterTokenResolutionContext): T;
+/**
+ * Convenience bridge from an execution context to the resolver's inputs.
+ * `{current_org_id}` reads `tenantId` — the active organization IS the tenant
+ * on the read path (same value the RLS compiler binds to
+ * `current_user.organization_id`).
+ *
+ * Typed structurally, not as `ExecutionContext`, so both the parsed context
+ * (defaults applied) and the pre-parse `ExecutionContextInput` a caller holds
+ * mid-pipeline satisfy it. The three fields read here are optional in both.
+ */
+declare function filterTokenContextFrom(execCtx: ExecutionContextLike | undefined, now?: Date): FilterTokenResolutionContext;
+
 /**
  * In-memory Map-backed cache fallback.
  *
@@ -2637,4 +2787,4 @@ declare class NamespaceResolver {
     private suggestAlternative;
 }
 
-export { ANONYMOUS_DENY_BODY, ANONYMOUS_DENY_CODE, ANONYMOUS_DENY_MESSAGE, ANONYMOUS_DENY_STATUS, API_KEY_PREFIX, type AnonymousDenyInput, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, type BucketGranularity, type BulkWriteOptions, type BulkWriteRowResult, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type GeneratedApiKey, type GrantValidityWindow, HotReloadManager, type KernelState, type KeyInput, type LadderPrincipal, type LadderRow, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, POSTURE_INJECTION_RULE, POSTURE_LADDER, POSTURE_RANK, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PostureEvidence, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolvedAuthzContext, type ResourceUsage, type RetryOptions, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, type VersionCompatibility, bucketKeyToCalendarRange, buildPermissionsFromGrants, bulkWrite, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, deepMerge, defaultIsTransientError, derivePosture, evaluateAuthGate, extractApiKey, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isGrantActive, isGrantExpired, isNode, parseScopes, parseSignature, postureVisibleRows, readAuthoredTranslationLayer, resolveApiKeyPrincipal, resolveAuthzContext, resolveLocale, resolveLocalizationContext, safeExit, shouldDenyAnonymous, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature, wireAuthoredTranslationSync, withTransientRetry, zonedDateStartToUtcMs };
+export { ANONYMOUS_DENY_BODY, ANONYMOUS_DENY_CODE, ANONYMOUS_DENY_MESSAGE, ANONYMOUS_DENY_STATUS, API_KEY_PREFIX, type AnonymousDenyInput, type ApiKeyPrincipal, ApiRegistry, type ApiRegistryPluginConfig, type AuthGate, type BucketGranularity, type BulkWriteOptions, type BulkWriteRowResult, CORE_FALLBACK_FACTORIES, type CalendarParts, DependencyResolver, type ExecutionContextLike, type FilterTokenResolutionContext, type GeneratedApiKey, type GrantValidityWindow, HotReloadManager, type KernelState, type KeyInput, type LadderPrincipal, type LadderRow, LiteKernel, type NamespaceCheckResult, type NamespaceConflict, type NamespaceEntry, NamespaceResolver, ObjectKernel, ObjectKernelBase, type ObjectKernelConfig, ObjectLogger, POSTURE_INJECTION_RULE, POSTURE_LADDER, POSTURE_RANK, type ParsedSignature, type PermissionCheckResult$1 as PermissionCheckResult, type PermissionGrant, type Plugin, type PluginArtifactVerifyResult, PluginConfigValidator, type PluginContext, PluginHealthMonitor, type PluginHealthStatus, type PluginLoadResult, PluginLoader, type PluginMetadata, type PermissionCheckResult as PluginPermissionCheckResult, PluginPermissionEnforcer, PluginPermissionManager, type PluginPermissions, PluginSandboxRuntime, PluginSecurityScanner, type PluginSignatureConfig, PluginSignatureVerifier, type PluginStartupResult, type PostureEvidence, type PublisherVerifyResult, index as QA, type ResolveAuthzInput, type ResolveLocalizationInput, type ResolveUserAuthzGrantsOptions, type ResolvedAuthzContext, type ResourceUsage, type RetryOptions, SIGNATURE_ALG, type SandboxContext, type ScanTarget, SecurePluginContext, type SecurityIssue, SemanticVersionManager, type ServiceFactory, ServiceLifecycle, type ServiceRegistration, type SignatureVerificationResult, UnknownFilterTokenError, UnresolvedFilterTokenError, type UserAuthzGrants, type VersionCompatibility, bucketKeyToCalendarRange, buildPermissionsFromGrants, bulkWrite, calendarPartsInTz, calendarPartsInTzOrUtc, counterSignPayload, createApiRegistryPlugin, createMemoryCache, createMemoryI18n, createMemoryJob, createMemoryMetadata, createMemoryQueue, createPluginConfigValidator, createPluginPermissionEnforcer, deepMerge, defaultIsTransientError, derivePosture, evaluateAuthGate, extractApiKey, filterTokenContextFrom, generateApiKey, generateEd25519KeyPair, getEnv, getMemoryUsage, hashApiKey, isAuthGateAllowlisted, isExpired, isGrantActive, isGrantExpired, isNode, parseScopes, parseSignature, postureVisibleRows, readAuthoredTranslationLayer, resolveApiKeyPrincipal, resolveAuthzContext, resolveFilterToken, resolveFilterTokens, resolveLocale, resolveLocalizationContext, resolveUserAuthzGrants, safeExit, shouldDenyAnonymous, signPayload, verifyPayload, verifyPlatformSignature, verifyPluginArtifact, verifyPublisherSignature, wireAuthoredTranslationSync, withTransientRetry, zonedDateStartToUtcMs };