@owlmeans/server-planning 0.1.18-rc.9 → 0.1.18

package/build/utils/index.js

@@ -1,3 +1,6 @@
+export * from './access.js';
 export * from './guard.js';
+export * from './handler.js';
+export * from './request.js';
 export * from './scope.js';
 //# sourceMappingURL=index.js.map

package/build/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAMA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA"}

package/build/utils/request/types.d.ts

@@ -0,0 +1,23 @@
+import type { PlanningScope, TransitionActor } from '@owlmeans/planning';
+import type { PlanningAccess } from '../../types.js';
+/** One request's identity as planning reads it — built at the top of a handler, never stored. */
+export interface RequestScope {
+    /** The authenticated subject of a request, as a transition names it. */
+    actorOf: () => TransitionActor;
+    /**
+     * The scope a request reads and writes as.
+     *
+     * `entityId` is `requireEntityKey(req)` — the resolved organization id, never a value from the
+     * body or the query — and `extra` cannot replace it; `extra` adds what the deployment derives
+     * (a `channel`, a `service`). The actor is the authenticated subject plus that channel.
+     *
+     * @throws {AuthorizationError} when the request carries no organization
+     */
+    scopeOf: (extra?: Partial<PlanningScope>) => PlanningScope;
+    /**
+     * The scope of a request under a resolved {@link PlanningAccess}: the organization is the
+     * resolver's — never the token's, never `extra`'s — and `projects` narrows it.
+     */
+    accessScopeOf: (access: PlanningAccess, extra?: Partial<PlanningScope>) => PlanningScope;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/utils/request/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/utils/request/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD,iGAAiG;AACjG,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,OAAO,EAAE,MAAM,eAAe,CAAA;IAC9B;;;;;;;;OAQG;IACH,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK,aAAa,CAAA;IAC1D;;;OAGG;IACH,aAAa,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK,aAAa,CAAA;CACzF"}

package/build/utils/request/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/utils/request/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/utils/request/types.ts"],"names":[],"mappings":""}

package/build/utils/request.d.ts

@@ -0,0 +1,4 @@
+import type { AbstractRequest } from '@owlmeans/entrypoint';
+import type { RequestScope } from './request/types.js';
+export declare const makeRequestScope: (req: AbstractRequest) => RequestScope;
+//# sourceMappingURL=request.d.ts.map

package/build/utils/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/utils/request.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAG3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAMtD,eAAO,MAAM,gBAAgB,QAAS,eAAe,KAAG,YA6BvD,CAAA"}

package/build/utils/request.js

@@ -0,0 +1,27 @@
+import { makeEntityScope } from '@owlmeans/auth-common';
+const clean = (record) => Object.fromEntries(Object.entries(record).filter(([, value]) => value != null && value !== ''));
+export const makeRequestScope = (req) => {
+    const actorOf = () => clean({
+        profileId: req.auth?.profileId,
+        userId: req.auth?.userId,
+    });
+    const scopeWith = (entityId, extra) => {
+        const subject = actorOf();
+        const channel = extra?.channel ?? extra?.actor?.channel;
+        return clean({
+            ...extra,
+            ...subject,
+            entityId,
+            channel,
+            actor: clean({ ...extra?.actor, ...subject, channel }),
+        });
+    };
+    const scopeOf = (extra) => scopeWith(makeEntityScope(req).requireEntityKey(), extra);
+    const accessScopeOf = (access, extra) => {
+        const { projects: _projects, entityId: _entityId, ...rest } = extra ?? {};
+        const scope = scopeWith(access.entityId, rest);
+        return access.projects != null ? { ...scope, projects: [...access.projects] } : scope;
+    };
+    return { actorOf, scopeOf, accessScopeOf };
+};
+//# sourceMappingURL=request.js.map

package/build/utils/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/utils/request.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,KAAK,GAAG,CAAmB,MAAS,EAAK,EAAE,CAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAM,CAAA;AAEtG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAoB,EAAgB,EAAE;IACrE,MAAM,OAAO,GAAG,GAAoB,EAAE,CAAC,KAAK,CAAC;QAC3C,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS;QAC9B,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM;KACzB,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,KAA8B,EAAiB,EAAE;QACpF,MAAM,OAAO,GAAG,OAAO,EAAE,CAAA;QACzB,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,KAAK,EAAE,OAAO,CAAA;QAEvD,OAAO,KAAK,CAAC;YACX,GAAG,KAAK;YACR,GAAG,OAAO;YACV,QAAQ;YACR,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;SACvD,CAAkB,CAAA;IACrB,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,CAAC,KAA8B,EAAiB,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE,KAAK,CAAC,CAAA;IAE5H,MAAM,aAAa,GAAG,CAAC,MAAsB,EAAE,KAA8B,EAAiB,EAAE;QAC9F,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,CAAA;QACzE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAE9C,OAAO,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;IACvF,CAAC,CAAA;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;AAC5C,CAAC,CAAA"}

package/build/utils/scope.d.ts

@@ -1,20 +1,24 @@
 import type { BasicConfig, BasicContext } from '@owlmeans/context';
 import type { AbstractRequest } from '@owlmeans/entrypoint';
-import type { PlanningFacade, PlanningScope, PlanningService, TransitionActor } from '@owlmeans/planning';
-import type { PlanningHandlerOptions } from '../types.js';
-/** The authenticated subject of a request, as a transition names it. */
+import type { PlanningFacade, PlanningScope, PlanningService, TransitionActor, Workcard } from '@owlmeans/planning';
+import type { PlanningAccess, PlanningAccessGrants, PlanningHandlerOptions } from '../types.js';
+import type { HandlerScope } from './types.js';
+/** @deprecated compat:factory-refactor — use `makeRequestScope(req).actorOf()` */
 export declare const actorOf: (req: AbstractRequest) => TransitionActor;
-/**
- * The scope a request reads and writes as.
- *
- * `entityId` is `requireEntityKey(req)` — the resolved organization id, never a value from the
- * body or the query — and `extra` cannot replace it; `extra` adds what the deployment derives
- * (a `channel`, a `service`). The actor is the authenticated subject plus that channel.
- *
- * @throws {AuthorizationError} when the request carries no organization
- */
+/** @deprecated compat:factory-refactor — use `makeRequestScope(req).scopeOf(…)` */
 export declare const scopeOf: (req: AbstractRequest, extra?: Partial<PlanningScope>) => PlanningScope;
+/** @deprecated compat:factory-refactor — use `makeRequestScope(req).accessScopeOf(…)` */
+export declare const accessScopeOf: (req: AbstractRequest, access: PlanningAccess, extra?: Partial<PlanningScope>) => PlanningScope;
+/** @deprecated compat:factory-refactor — use `planningHandlerOf(ctx).planningServiceOf(…)` */
 export declare const planningServiceOf: (ctx: BasicContext<BasicConfig>, opts?: Pick<PlanningHandlerOptions, 'service'>) => PlanningService;
-/** The facade a handler works through: the request's scope plus what `opts.scope` derives. */
+/** @deprecated compat:factory-refactor — use `planningHandlerOf(ctx).handlerScopeOf(…)` */
+export declare const handlerScopeOf: (ctx: BasicContext<BasicConfig>, req: AbstractRequest, opts?: PlanningHandlerOptions) => Promise<HandlerScope>;
+/** @deprecated compat:factory-refactor — use `planningHandlerOf(ctx).handlerFacade(…)` */
 export declare const handlerFacade: (ctx: BasicContext<BasicConfig>, req: AbstractRequest, opts?: PlanningHandlerOptions) => Promise<PlanningFacade>;
+/** @deprecated compat:factory-refactor — use `makePlanningAccessModel(access).assertGranted(…)` */
+export declare const assertGranted: (access: PlanningAccess | undefined, grant: keyof PlanningAccessGrants, target?: string) => void;
+/** @deprecated compat:factory-refactor — use `makePlanningAccessModel(access).writableIn(…)` */
+export declare const writableIn: (access: PlanningAccess | undefined, card: Pick<Workcard, 'id' | 'parents'>) => boolean;
+/** @deprecated compat:factory-refactor — use `makePlanningAccessModel(access).assertWrites(…)` */
+export declare const assertWrites: (access: PlanningAccess | undefined, target?: string) => void;
 //# sourceMappingURL=scope.d.ts.map

package/build/utils/scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../src/utils/scope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzG,OAAO,KAAK,EAAE,sBAAsB,EAAuB,MAAM,aAAa,CAAA;AAK9E,wEAAwE;AACxE,eAAO,MAAM,OAAO,QAAS,eAAe,KAAG,eAG7C,CAAA;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,QAAS,eAAe,UAAU,OAAO,CAAC,aAAa,CAAC,KAAG,aAY9E,CAAA;AAED,eAAO,MAAM,iBAAiB,QACvB,YAAY,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,KAC7E,eAAsF,CAAA;AAEzF,8FAA8F;AAC9F,eAAO,MAAM,aAAa,QACnB,YAAY,CAAC,WAAW,CAAC,OAAO,eAAe,SAAS,sBAAsB,KAClF,OAAO,CAAC,cAAc,CAIxB,CAAA"}
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../src/utils/scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACnH,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAI/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,kFAAkF;AAClF,eAAO,MAAM,OAAO,QAAS,eAAe,KAAG,eAAkD,CAAA;AAEjG,mFAAmF;AACnF,eAAO,MAAM,OAAO,QAAS,eAAe,UAAU,OAAO,CAAC,aAAa,CAAC,KAAG,aACzC,CAAA;AAEtC,yFAAyF;AACzF,eAAO,MAAM,aAAa,QACnB,eAAe,UAAU,cAAc,UAAU,OAAO,CAAC,aAAa,CAAC,KAC3E,aAAmE,CAAA;AAEtE,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB,QACvB,YAAY,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,KAC7E,eAAiE,CAAA;AAEpE,2FAA2F;AAC3F,eAAO,MAAM,cAAc,QACpB,YAAY,CAAC,WAAW,CAAC,OAAO,eAAe,SAAS,sBAAsB,KAClF,OAAO,CAAC,YAAY,CAA2D,CAAA;AAElF,0FAA0F;AAC1F,eAAO,MAAM,aAAa,QACnB,YAAY,CAAC,WAAW,CAAC,OAAO,eAAe,SAAS,sBAAsB,KAClF,OAAO,CAAC,cAAc,CAA0D,CAAA;AAEnF,mGAAmG;AACnG,eAAO,MAAM,aAAa,WAChB,cAAc,GAAG,SAAS,SAAS,MAAM,oBAAoB,WAAW,MAAM,KACrF,IAAoE,CAAA;AAEvE,gGAAgG;AAChG,eAAO,MAAM,UAAU,WAAY,cAAc,GAAG,SAAS,QAAQ,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,SAAS,CAAC,KAAG,OACtD,CAAA;AAElD,kGAAkG;AAClG,eAAO,MAAM,YAAY,WAAY,cAAc,GAAG,SAAS,WAAW,MAAM,KAAG,IAC7B,CAAA"}

package/build/utils/scope.js

@@ -1,36 +1,22 @@
-import { requireEntityKey } from '@owlmeans/auth-common';
-import { PLANNING_SERVICE } from '@owlmeans/planning';
-const clean = (record) => Object.fromEntries(Object.entries(record).filter(([, value]) => value != null && value !== ''));
-/** The authenticated subject of a request, as a transition names it. */
-export const actorOf = (req) => clean({
-    profileId: req.auth?.profileId,
-    userId: req.auth?.userId,
-});
-/**
- * The scope a request reads and writes as.
- *
- * `entityId` is `requireEntityKey(req)` — the resolved organization id, never a value from the
- * body or the query — and `extra` cannot replace it; `extra` adds what the deployment derives
- * (a `channel`, a `service`). The actor is the authenticated subject plus that channel.
- *
- * @throws {AuthorizationError} when the request carries no organization
- */
-export const scopeOf = (req, extra) => {
-    const entityId = requireEntityKey(req);
-    const subject = actorOf(req);
-    const channel = extra?.channel ?? extra?.actor?.channel;
-    return clean({
-        ...extra,
-        ...subject,
-        entityId,
-        channel,
-        actor: clean({ ...extra?.actor, ...subject, channel }),
-    });
-};
-export const planningServiceOf = (ctx, opts) => ctx.service(opts?.service ?? PLANNING_SERVICE);
-/** The facade a handler works through: the request's scope plus what `opts.scope` derives. */
-export const handlerFacade = async (ctx, req, opts) => {
-    const extra = await opts?.scope?.(req, ctx);
-    return planningServiceOf(ctx, opts).for(scopeOf(req, extra ?? undefined));
-};
+import { makePlanningAccessModel } from './access.js';
+import { planningHandlerOf } from './handler.js';
+import { makeRequestScope } from './request.js';
+/** @deprecated compat:factory-refactor — use `makeRequestScope(req).actorOf()` */
+export const actorOf = (req) => makeRequestScope(req).actorOf();
+/** @deprecated compat:factory-refactor — use `makeRequestScope(req).scopeOf(…)` */
+export const scopeOf = (req, extra) => makeRequestScope(req).scopeOf(extra);
+/** @deprecated compat:factory-refactor — use `makeRequestScope(req).accessScopeOf(…)` */
+export const accessScopeOf = (req, access, extra) => makeRequestScope(req).accessScopeOf(access, extra);
+/** @deprecated compat:factory-refactor — use `planningHandlerOf(ctx).planningServiceOf(…)` */
+export const planningServiceOf = (ctx, opts) => planningHandlerOf(ctx).planningServiceOf(opts);
+/** @deprecated compat:factory-refactor — use `planningHandlerOf(ctx).handlerScopeOf(…)` */
+export const handlerScopeOf = async (ctx, req, opts) => await planningHandlerOf(ctx).handlerScopeOf(req, opts);
+/** @deprecated compat:factory-refactor — use `planningHandlerOf(ctx).handlerFacade(…)` */
+export const handlerFacade = async (ctx, req, opts) => await planningHandlerOf(ctx).handlerFacade(req, opts);
+/** @deprecated compat:factory-refactor — use `makePlanningAccessModel(access).assertGranted(…)` */
+export const assertGranted = (access, grant, target) => makePlanningAccessModel(access).assertGranted(grant, target);
+/** @deprecated compat:factory-refactor — use `makePlanningAccessModel(access).writableIn(…)` */
+export const writableIn = (access, card) => makePlanningAccessModel(access).writableIn(card);
+/** @deprecated compat:factory-refactor — use `makePlanningAccessModel(access).assertWrites(…)` */
+export const assertWrites = (access, target) => makePlanningAccessModel(access).assertWrites(target);
 //# sourceMappingURL=scope.js.map

package/build/utils/scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/utils/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAIrD,MAAM,KAAK,GAAG,CAAmB,MAAS,EAAK,EAAE,CAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAM,CAAA;AAEtG,wEAAwE;AACxE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAmB,EAAE,CAAC,KAAK,CAAC;IACtE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS;IAC9B,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM;CACzB,CAAC,CAAA;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE,KAA8B,EAAiB,EAAE;IAC7F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,KAAK,EAAE,OAAO,CAAA;IAEvD,OAAO,KAAK,CAAC;QACX,GAAG,KAAK;QACR,GAAG,OAAO;QACV,QAAQ;QACR,OAAO;QACP,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;KACvD,CAAkB,CAAA;AACrB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,GAA8B,EAAE,IAA8C,EAC7D,EAAE,CAAC,GAAG,CAAC,OAAO,CAAsB,IAAI,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAA;AAEzF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,GAA8B,EAAE,GAAoB,EAAE,IAA6B,EAC1D,EAAE;IAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAE3C,OAAO,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,IAAI,SAAS,CAAC,CAAC,CAAA;AAC3E,CAAC,CAAA"}
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/utils/scope.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAG/C,kFAAkF;AAClF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAmB,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;AAEjG,mFAAmF;AACnF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE,KAA8B,EAAiB,EAAE,CAC7F,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtC,yFAAyF;AACzF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,GAAoB,EAAE,MAAsB,EAAE,KAA8B,EAC7D,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAEtE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,GAA8B,EAAE,IAA8C,EAC7D,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;AAEpE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,GAA8B,EAAE,GAAoB,EAAE,IAA6B,EAC5D,EAAE,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAElF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,GAA8B,EAAE,GAAoB,EAAE,IAA6B,EAC1D,EAAE,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAEnF,mGAAmG;AACnG,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAkC,EAAE,KAAiC,EAAE,MAAe,EAChF,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AAEvE,gGAAgG;AAChG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAkC,EAAE,IAAsC,EAAW,EAAE,CAChH,uBAAuB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AAElD,kGAAkG;AAClG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAkC,EAAE,MAAe,EAAQ,EAAE,CACxF,uBAAuB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA"}

package/build/utils/types.d.ts

@@ -0,0 +1,8 @@
+import type { PlanningFacade } from '@owlmeans/planning';
+import type { PlanningAccess } from '../types.js';
+export interface HandlerScope {
+    facade: PlanningFacade;
+    /** The resolver's answer, when the handler options carry one. */
+    access?: PlanningAccess;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/utils/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,cAAc,CAAA;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,cAAc,CAAA;CACxB"}

package/build/utils/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/utils/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@owlmeans/server-planning",
-  "version": "0.1.18-rc.9",
+  "version": "0.1.18",
   "license": "MIT",
-  "description": "The general planning implementation — the planning service and its plugin/middleware registry, the transition executor, the in-memory store, the protocol handlers and the commit feed.",
+  "description": "The general planning implementation \u2014 the planning service and its plugin/middleware registry, the transition executor, the in-memory store, the protocol handlers and the commit feed.",
   "type": "module",
   "scripts": {
     "build": "tsc -b",
@@ -34,35 +34,43 @@
       "default": "./build/queue/index.js",
       "module": "./build/queue/index.js",
       "types": "./build/queue/index.d.ts"
+    },
+    "./conformance": {
+      "import": "./build/conformance/index.js",
+      "require": "./build/conformance/index.js",
+      "default": "./build/conformance/index.js",
+      "module": "./build/conformance/index.js",
+      "types": "./build/conformance/index.d.ts"
     }
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.34",
-    "@owlmeans/auth-common": "^0.1.18-rc.36",
-    "@owlmeans/basic-ids": "^0.1.18-rc.33",
-    "@owlmeans/context": "^0.1.18-rc.32",
-    "@owlmeans/entrypoint": "^0.1.18-rc.35",
-    "@owlmeans/error": "^0.1.18-rc.34",
-    "@owlmeans/planning": "^0.1.18-rc.8",
-    "@owlmeans/queue": "^0.1.18-rc.30",
-    "@owlmeans/resource": "^0.1.18-rc.34",
-    "@owlmeans/route": "^0.1.18-rc.33",
-    "@owlmeans/server-api": "^0.1.18-rc.40",
-    "@owlmeans/server-context": "^0.1.18-rc.35",
-    "@owlmeans/server-entrypoint": "^0.1.18-rc.34",
-    "@owlmeans/server-socket": "^0.1.18-rc.43",
-    "@owlmeans/socket": "^0.1.18-rc.32"
+    "@owlmeans/auth": "^0.1.18",
+    "@owlmeans/auth-common": "^0.1.18",
+    "@owlmeans/basic-ids": "^0.1.18",
+    "@owlmeans/context": "^0.1.18",
+    "@owlmeans/entrypoint": "^0.1.18",
+    "@owlmeans/error": "^0.1.18",
+    "@owlmeans/planning": "^0.1.18",
+    "@owlmeans/queue": "^0.1.18",
+    "@owlmeans/resource": "^0.1.18",
+    "@owlmeans/log": "^0.1.18",
+    "@owlmeans/route": "^0.1.18",
+    "@owlmeans/server-api": "^0.1.18",
+    "@owlmeans/server-context": "^0.1.18",
+    "@owlmeans/server-entrypoint": "^0.1.18",
+    "@owlmeans/server-socket": "^0.1.18",
+    "@owlmeans/socket": "^0.1.18"
   },
   "peerDependencies": {
     "ajv": "*",
     "ajv-formats": "*"
   },
   "devDependencies": {
-    "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/test": "^0.1.18-rc.32",
-    "@types/bun": "^1.4.0",
-    "@types/node": "^26.1.0",
-    "ajv": "^8.17.1",
+    "@owlmeans/dep-config": "^0.1.18",
+    "@owlmeans/test": "^0.1.18",
+    "@types/bun": "^1.4.2",
+    "@types/node": "^26.6.4",
+    "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
     "nodemon": "^3.1.14",
     "typescript": "^7.0.2"

package/src/actions/apply-schema-request.ts

@@ -0,0 +1,36 @@
+import { SchemaWriteMode, type PlanningDefinitions, type SchemaDefineReply, type SchemaDefineRequest, type ScopedSchemaRecord } from '@owlmeans/planning'
+
+/**
+ * Apply one `schema.define` request to a facade's definitions: the declarations in the request's
+ * mode (flows before types), then the retirements — answering what was written and the layer as it
+ * resolves afterwards.
+ */
+export const applySchemaRequest = async (
+  definitions: PlanningDefinitions, request: SchemaDefineRequest
+): Promise<SchemaDefineReply> => {
+  const layer = request.project != null ? { project: request.project } : {}
+  const declarations = { types: request.types ?? [], flows: request.flows ?? [], assigneeTypes: request.assigneeTypes ?? [] }
+  const records: ScopedSchemaRecord[] = []
+
+  switch (request.mode ?? SchemaWriteMode.Define) {
+    case SchemaWriteMode.Put:
+      for (const schema of declarations.assigneeTypes) records.push(await definitions.putAssigneeType(schema))
+      for (const flow of declarations.flows) {
+        records.push(await definitions.putFlow(flow, layer))
+      }
+      for (const type of declarations.types) {
+        records.push(await definitions.putType(type, layer))
+      }
+      break
+    case SchemaWriteMode.Seed:
+      records.push(...await definitions.seed(declarations, layer))
+      break
+    default:
+      records.push(...await definitions.define(declarations, layer))
+  }
+  for (const key of request.retire ?? []) {
+    records.push(await definitions.retire(key.kind, key.key, layer))
+  }
+
+  return { records, bundle: await definitions.bundle(request.project) }
+}

package/src/actions/commit.ts

@@ -2,7 +2,9 @@ import { handlers } from '@owlmeans/server-api'
 import { CommitState, MAX_COMMIT_POLL } from '@owlmeans/planning'
 import type { CommitStatus, PlanningProtocols } from '@owlmeans/planning'
 import type { Context, PlanningHandlerOptions } from '../types.js'
-import { clampSeconds, concealed, handlerFacade } from '../utils/index.js'
+import { guardHelper } from '../utils/guard.js'
+import { planningHandlerOf } from '../utils/handler.js'
+import type { RequestHandler } from './types.js'
 
 /**
  * The poll tool: a commit's status, held open up to `wait` seconds (clamped to `maxPoll`).
@@ -15,13 +17,13 @@ import { clampSeconds, concealed, handlerFacade } from '../utils/index.js'
  */
 export const getCommit = (
   protocol: PlanningProtocols['commit']['get'], opts?: PlanningHandlerOptions
-): ReturnType<ReturnType<typeof handlers<Context>>['request']> =>
-  handlers<Context>().request(protocol, async (req, ctx) => concealed(async (): Promise<CommitStatus> => {
-    const facade = await handlerFacade(ctx, req, opts)
+): RequestHandler =>
+  handlers<Context>().request(protocol, async (req, ctx) => guardHelper.reply(async (): Promise<CommitStatus> => {
+    const facade = await planningHandlerOf(ctx).handlerFacade(req, opts)
     const transition = `${req.params.transition}`
 
     let status = await facade.commits.status(transition)
-    const wait = clampSeconds(req.query?.wait, opts?.maxPoll ?? MAX_COMMIT_POLL)
+    const wait = guardHelper.clampSeconds(req.query?.wait, opts?.maxPoll ?? MAX_COMMIT_POLL)
     if (status.state !== CommitState.Pending || wait <= 0) {
       return status
     }

package/src/actions/define-schemas.ts

@@ -0,0 +1,34 @@
+import { handlers } from '@owlmeans/server-api'
+import { PlanningUnsupported, type PlanningProtocols, type SchemaDefineReply, type SchemaDefineRequest } from '@owlmeans/planning'
+import type { Context, PlanningHandlerOptions } from '../types.js'
+import { makePlanningAccessModel } from '../utils/access.js'
+import { guardHelper } from '../utils/guard.js'
+import { planningHandlerOf } from '../utils/handler.js'
+import { applySchemaRequest } from './apply-schema-request.js'
+import type { RequestHandler } from './types.js'
+
+/**
+ * The write of data-defined types and flows. A project layer needs the project in the access's
+ * `writes` when the resolver answers it; then `grants.defineSchemas` gates when the resolver answers
+ * grants (the organization-wide layer needs `true`, a project layer its id).
+ *
+ * @throws {PlanningUnsupported} where the store holds no data-defined schemas
+ * @throws {PlanningForbidden | SchemaConflict | SchemaSealed | SchemaInvalid | SchemaInUse | WorkcardNotFound}
+ */
+export const defineSchemas = (
+  protocol: NonNullable<PlanningProtocols['schema']['define']>, opts?: PlanningHandlerOptions
+): RequestHandler =>
+  handlers<Context>().request(protocol, async (req, ctx) => guardHelper.reply(async (): Promise<SchemaDefineReply> => {
+    const { facade, access } = await planningHandlerOf(ctx).handlerScopeOf(req, opts)
+    const request = (req.body ?? {}) as SchemaDefineRequest
+    if (facade.definitions == null) {
+      throw new PlanningUnsupported('definitions')
+    }
+    const model = makePlanningAccessModel(access)
+    if (request.project != null) {
+      model.assertWrites(request.project)
+    }
+    model.assertGranted('defineSchemas', request.project)
+
+    return await applySchemaRequest(facade.definitions, request)
+  }))

package/src/actions/execute.ts

@@ -1,47 +1,45 @@
 import { handlers } from '@owlmeans/server-api'
-import { DEFAULT_COMMIT_TIMEOUT, MAX_COMMIT_POLL, TransitionAction } from '@owlmeans/planning'
+import { MAX_COMMIT_POLL } from '@owlmeans/planning'
 import type {
-  ExecuteOptions, ExecuteRequest, PlanningProtocols, PlanningScope, TransitionExecution, TransitionReceiptView,
+  ExecuteOptions, ExecuteRequest, PlanningFacade, PlanningProtocols, PlanningScope, TransitionExecution,
+  TransitionReceiptView,
 } from '@owlmeans/planning'
-import type { Context, PlanningHandlerOptions } from '../types.js'
-import { concealed, handlerFacade } from '../utils/index.js'
-
-/**
- * What a wire execution may say. `actor` is dropped — the scope names the writer — and a create's
- * `createdBy` is the authenticated subject, whatever the body claimed.
- */
-export const wireExecution = (body: ExecuteRequest, scope: PlanningScope): TransitionExecution => {
-  const { wait: _wait, timeout: _timeout, actor: _actor, ...exec } = body
-  if (exec.action === TransitionAction.Create && exec.card != null && typeof exec.card === 'object') {
-    const { createdBy: _createdBy, ...draft } = exec.card
-    const subject = scope.profileId ?? scope.userId
-    exec.card = subject != null ? { ...draft, createdBy: subject } : draft
-  }
-  return exec
-}
-
-/** `wait`/`timeout` as a server grants them: the timeout never holds a request past `maxPoll`. */
-export const executeOptionsOf = (body: Pick<ExecuteRequest, 'wait' | 'timeout'>, maxPoll: number): ExecuteOptions => {
-  const ceiling = maxPoll * 1000
-  if (body.wait !== true) {
-    return {}
-  }
-  const asked = Number(body.timeout ?? DEFAULT_COMMIT_TIMEOUT)
-  return { wait: true, timeout: Math.min(Number.isFinite(asked) && asked > 0 ? asked : DEFAULT_COMMIT_TIMEOUT, ceiling) }
-}
+import type { Context, PlanningAccess, PlanningHandlerOptions } from '../types.js'
+import { guardHelper } from '../utils/guard.js'
+import { planningHandlerOf } from '../utils/handler.js'
+import { executionHelper } from './execution.js'
+import type { RequestHandler } from './types.js'
 
 /** The one write route. */
 export const executePlanning = (
   protocol: PlanningProtocols['execute'], opts?: PlanningHandlerOptions
-): ReturnType<ReturnType<typeof handlers<Context>>['request']> =>
-  handlers<Context>().request(protocol, async (req, ctx) => concealed(async (): Promise<TransitionReceiptView> => {
-    const facade = await handlerFacade(ctx, req, opts)
+): RequestHandler =>
+  handlers<Context>().request(protocol, async (req, ctx) => guardHelper.reply(async (): Promise<TransitionReceiptView> => {
+    const { facade, access } = await planningHandlerOf(ctx).handlerScopeOf(req, opts)
     const body = (req.body ?? {}) as ExecuteRequest
-    const receipt = await facade.execute(
-      wireExecution(body, facade.scope), executeOptionsOf(body, opts?.maxPoll ?? MAX_COMMIT_POLL)
-    )
+    const exec = executionHelper.wireExecution(body, facade.scope)
+    await executionHelper.assertExecutionGranted(facade, exec, access)
+    const receipt = await facade.execute(exec, executionHelper.executeOptionsOf(body, opts?.maxPoll ?? MAX_COMMIT_POLL))
 
     return receipt.card !== undefined
       ? { transition: receipt.transition, card: receipt.card }
       : { transition: receipt.transition }
   }))
+
+/** @deprecated compat:factory-refactor — use `executionHelper.wireExecution(…)` */
+export const wireExecution = (body: ExecuteRequest, scope: PlanningScope): TransitionExecution =>
+  executionHelper.wireExecution(body, scope)
+
+/** @deprecated compat:factory-refactor — use `executionHelper.executeOptionsOf(…)` */
+export const executeOptionsOf = (body: Pick<ExecuteRequest, 'wait' | 'timeout'>, maxPoll: number): ExecuteOptions =>
+  executionHelper.executeOptionsOf(body, maxPoll)
+
+/** @deprecated compat:factory-refactor — use `executionHelper.assertExecutionWrites(…)` */
+export const assertExecutionWrites = async (
+  facade: PlanningFacade, exec: TransitionExecution, access?: PlanningAccess
+): Promise<void> => await executionHelper.assertExecutionWrites(facade, exec, access)
+
+/** @deprecated compat:factory-refactor — use `executionHelper.assertExecutionGranted(…)` */
+export const assertExecutionGranted = async (
+  facade: PlanningFacade, exec: TransitionExecution, access?: PlanningAccess
+): Promise<void> => await executionHelper.assertExecutionGranted(facade, exec, access)

package/src/actions/execution/types.ts

@@ -0,0 +1,34 @@
+import type { ExecuteOptions, ExecuteRequest, PlanningFacade, PlanningScope, TransitionExecution } from '@owlmeans/planning'
+import type { PlanningAccess } from '../../types.js'
+
+/** What a wire execution may say, how long it may hold, and what access it needs. */
+export interface ExecutionHelper {
+  /**
+   * What a wire execution may say. `actor` is dropped — the scope names the writer — and a create's
+   * `createdBy` claim is dropped too: the executor's `creatorHelper.withCreator` stamps the
+   * authenticated subject, the same rule an in-process create follows. Applied here as well, so the
+   * returned execution already carries it. A `createdBy` in `changes` or `unset` is not dropped: the
+   * executor refuses it on every action (`assertCreatorFixed`), so no body moves an owner.
+   */
+  wireExecution: (body: ExecuteRequest, scope: PlanningScope) => TransitionExecution
+  /** `wait`/`timeout` as a server grants them: the timeout never holds a request past `maxPoll`. */
+  executeOptionsOf: (body: Pick<ExecuteRequest, 'wait' | 'timeout'>, maxPoll: number) => ExecuteOptions
+  /**
+   * Refuse an execution outside the access's `writes`: the card it acts on (a specification through
+   * its parent card), or every parent a create names, must be one `writableIn` admits. A create
+   * of a project is `grants.createProjects`' alone. A card or parent this scope cannot see is left to
+   * the executor, which answers it as absent.
+   *
+   * @throws {PlanningForbidden}
+   */
+  assertExecutionWrites: (facade: PlanningFacade, exec: TransitionExecution, access?: PlanningAccess) => Promise<void>
+  /**
+   * The access a wire execution needs. `writes` first ({@link ExecutionHelper.assertExecutionWrites});
+   * then the grants: `createProjects` for a project create (its primary parent, or the root),
+   * `deleteProjects` for the delete of a project card. A card this scope cannot see is left to the
+   * executor, which answers it as absent.
+   *
+   * @throws {PlanningForbidden}
+   */
+  assertExecutionGranted: (facade: PlanningFacade, exec: TransitionExecution, access?: PlanningAccess) => Promise<void>
+}