@powerhousedao/reactor-api 6.0.0-dev.8 → 6.0.0-dev.81

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@powerhousedao/reactor-api",
-  "version": "6.0.0-dev.8",
+  "version": "6.0.0-dev.81",
   "description": "",
   "type": "module",
   "repository": {
@@ -12,6 +12,14 @@
       "import": "./dist/index.js",
       "types": "./dist/index.d.ts"
     },
+    "./graphql": {
+      "import": "./dist/graphql/index.js",
+      "types": "./dist/graphql/index.d.ts"
+    },
+    "./graphql/*": {
+      "import": "./dist/graphql/*.js",
+      "types": "./dist/graphql/*.d.ts"
+    },
     "./test": {
       "import": "./test/index.ts"
     }
@@ -32,87 +40,70 @@
     "@apollo/server": "^5.0.0",
     "@apollo/subgraph": "^2.11.3",
     "@as-integrations/express4": "^1.1.2",
-    "@electric-sql/pglite": "0.2.17",
-    "@graphql-typed-document-node/core": "^3.2.0",
+    "@electric-sql/pglite": "0.3.15",
     "@opentelemetry/auto-instrumentations-node": "^0.57.1",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.57.2",
     "@opentelemetry/exporter-trace-otlp-http": "^0.57.2",
+    "@opentelemetry/sdk-metrics": "^1.29.0",
     "@opentelemetry/resources": "^1.29.0",
     "@opentelemetry/sdk-node": "^0.57.2",
     "@opentelemetry/sdk-trace-base": "^1.29.0",
     "@opentelemetry/semantic-conventions": "^1.29.0",
     "@originjs/vite-plugin-commonjs": "^1.0.3",
-    "@powerhousedao/analytics-engine-core": "^0.5.0",
-    "@powerhousedao/analytics-engine-graphql": "^0.4.0",
-    "@powerhousedao/analytics-engine-pg": "^0.6.0",
-    "@powerhousedao/document-engineering": "^1.40.1",
+    "@powerhousedao/document-engineering": "1.40.1",
     "body-parser": "^1.20.3",
-    "change-case": "^5.4.4",
+    "change-case": "5.4.4",
     "cors": "^2.8.5",
     "devcert": "^1.2.2",
     "dotenv": "^16.4.5",
-    "drizzle-kit": "^0.25.0",
-    "drizzle-orm": "^0.34.1",
-    "ethers": "^6.0.8",
     "express": "^4.21.1",
-    "graphql": "^16.11.0",
+    "graphql": "16.12.0",
     "graphql-subscriptions": "^3.0.0",
     "graphql-type-json": "^0.3.2",
     "graphql-ws": "^6.0.6",
-    "jsonwebtoken": "^9.0.2",
-    "knex": "^3.1.0",
-    "knex-pglite": "^0.10.0",
-    "kysely": "^0.28.2",
-    "kysely-knex": "^0.2.0",
-    "ms": "^2.1.3",
-    "nanoevents": "^9.0.0",
-    "pg": "^8.13.0",
-    "read-pkg": "^9.0.1",
-    "siwe": "^2.3.2",
-    "uuid": "^9.0.1",
-    "wildcard-match": "^5.1.3",
+    "knex": "3.1.0",
+    "knex-pglite": "0.13.0",
+    "kysely": "0.28.11",
+    "kysely-knex": "0.2.0",
+    "path-to-regexp": "^8.3.0",
+    "pg": "8.18.0",
+    "read-pkg": "10.1.0",
     "ws": "^8.18.3",
-    "zod": "^4.3.5",
-    "@powerhousedao/reactor": "6.0.0-dev.8",
-    "@powerhousedao/config": "6.0.0-dev.8",
-    "@powerhousedao/reactor-mcp": "6.0.0-dev.8",
-    "@renown/sdk": "6.0.0-dev.8",
-    "document-drive": "6.0.0-dev.8",
-    "document-model": "6.0.0-dev.8"
+    "zod": "4.3.6",
+    "@powerhousedao/analytics-engine-core": "6.0.0-dev.81",
+    "@powerhousedao/analytics-engine-graphql": "6.0.0-dev.81",
+    "@powerhousedao/analytics-engine-pg": "6.0.0-dev.81",
+    "@powerhousedao/reactor": "6.0.0-dev.81",
+    "@powerhousedao/reactor-mcp": "6.0.0-dev.81",
+    "@powerhousedao/config": "6.0.0-dev.81",
+    "@renown/sdk": "6.0.0-dev.81",
+    "document-drive": "6.0.0-dev.81",
+    "document-model": "6.0.0-dev.81",
+    "@powerhousedao/shared": "6.0.0-dev.81"
   },
   "devDependencies": {
-    "@graphql-codegen/cli": "^5.0.0",
-    "@graphql-codegen/client-preset": "^4.1.0",
-    "@graphql-codegen/typed-document-node": "^5.0.1",
-    "@graphql-codegen/typescript": "^4.0.1",
-    "@graphql-codegen/typescript-generic-sdk": "^4.0.2",
-    "@graphql-codegen/typescript-graphql-request": "^6.2.0",
-    "@graphql-codegen/typescript-operations": "^4.0.1",
-    "@graphql-codegen/typescript-resolvers": "^4.0.1",
-    "@graphql-tools/graphql-file-loader": "^8.0.0",
-    "@graphql-tools/load": "^8.0.0",
+    "@graphql-codegen/cli": "6.1.1",
+    "@graphql-codegen/typescript": "5.0.7",
+    "@graphql-codegen/typescript-generic-sdk": "4.1.0",
+    "@graphql-codegen/typescript-operations": "5.0.7",
+    "@graphql-codegen/typescript-resolvers": "5.1.5",
     "@types/body-parser": "^1.19.5",
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.25",
-    "@types/jsonwebtoken": "^9.0.7",
-    "@types/ms": "^0.7.34",
-    "@types/node": "^24.6.1",
-    "@types/pg": "^8.11.10",
+    "@types/node": "25.2.3",
+    "@types/pg": "8.16.0",
     "@types/ws": "^8.18.1",
-    "copyfiles": "^2.4.1",
-    "esbuild": "^0.24.0",
-    "graphql-codegen-typescript-validation-schema": "^0.12.0",
-    "graphql-tag": "^2.12.6",
-    "kysely-pglite-dialect": "^1.2.0",
+    "copyfiles": "2.4.1",
+    "graphql-tag": "2.12.6",
     "msw": "^2.7.3",
-    "tinybench": "^3.1.1",
-    "vite": "^7.1.9",
-    "vitest": "^3.2.4"
+    "vite": "7.3.1",
+    "vitest": "3.2.4"
   },
   "scripts": {
     "tsc": "tsc",
-    "build": "pnpm tsc --build && copyfiles -u 0 \"src/**/*.graphql\" dist/",
+    "build:misc": "copyfiles -u 0 \"src/**/*.graphql\" dist/",
     "lint": "eslint",
-    "test": "vitest run",
+    "test": "vitest --run",
     "bench": "vitest bench",
     "codegen": "graphql-codegen --config codegen.ts && prettier --write src/graphql/reactor/gen/*.ts && eslint --fix src/graphql/reactor/gen/*.ts --no-warn-ignored",
     "codegen:watch": "graphql-codegen --config codegen.ts --watch"

package/dist/src/graphql/drive-subgraph.d.ts

@@ -1,25 +0,0 @@
-import type { GraphQLResolverMap } from "@apollo/subgraph/dist/schema-helper/resolverMap.js";
-import type { Context, GqlOperation, SubgraphArgs } from "@powerhousedao/reactor-api";
-import type { FileNode } from "document-drive";
-import { BaseSubgraph } from "./base-subgraph.js";
-export declare const DocumentDriveResolvers: {
-    DocumentDrive_Node: {
-        __resolveType: (obj: FileNode) => string;
-    };
-    DocumentDrive: {
-        operations: (obj: unknown, { skip, first }: {
-            skip?: number;
-            first?: number;
-        }, ctx: Context) => GqlOperation[];
-    };
-};
-export declare class DriveSubgraph extends BaseSubgraph {
-    private logger;
-    constructor(args: SubgraphArgs);
-    name: string;
-    typeDefs: import("graphql").DocumentNode;
-    private getDriveIdBySlugOrId;
-    private getDriveBySlugOrId;
-    resolvers: GraphQLResolverMap<Context>;
-}
-//# sourceMappingURL=drive-subgraph.d.ts.map

package/dist/src/graphql/drive-subgraph.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"drive-subgraph.d.ts","sourceRoot":"","sources":["../../../src/graphql/drive-subgraph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,KAAK,EACV,OAAO,EAEP,YAAY,EAEZ,YAAY,EACb,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAGV,QAAQ,EAMT,MAAM,gBAAgB,CAAC;AAgBxB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,eAAO,MAAM,sBAAsB;;6BAEV,QAAQ;;;;gBAsGL,CAAC;iBAClB,CAAC;;;CA9FX,CAAC;AAEF,qBAAa,aAAc,SAAQ,YAAY;IAC7C,OAAO,CAAC,MAAM,CAGX;gBAES,IAAI,EAAE,YAAY;IAS9B,IAAI,SAAc;IAClB,QAAQ,iCAyKN;YAEY,oBAAoB;YASpB,kBAAkB;IAWhC,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,CA+WpC;CACH"}

package/dist/src/graphql/drive-subgraph.js

@@ -1,487 +0,0 @@
-import { pascalCase } from "change-case";
-import { childLogger, PullResponderTransmitter, responseForDocument, responseForDrive, } from "document-drive";
-import { generateId } from "document-model/core";
-import { GraphQLError } from "graphql";
-import { gql } from "graphql-tag";
-import { processAcknowledge, processGetStrands, processPushUpdate, } from "../sync/utils.js";
-import { BaseSubgraph } from "./base-subgraph.js";
-import { buildGraphQlDriveDocument, IDocumentGraphql } from "./utils.js";
-const driveKindTypeNames = {
-    file: "DocumentDrive_FileNode",
-    folder: "DocumentDrive_FolderNode",
-};
-export const DocumentDriveResolvers = {
-    DocumentDrive_Node: {
-        __resolveType: (obj) => {
-            return obj.documentType
-                ? driveKindTypeNames.file
-                : driveKindTypeNames.folder;
-        },
-    },
-    DocumentDrive: {
-        operations: IDocumentGraphql.resolvers.IDocument.operations,
-    },
-};
-export class DriveSubgraph extends BaseSubgraph {
-    logger = childLogger([
-        "DriveSubgraph",
-        Math.floor(Math.random() * 999).toString(),
-    ]);
-    constructor(args) {
-        super(args);
-        this.logger.verbose(`constructor()`);
-    }
-    // Note: This GQL declaration depends on the document drive subgraph already
-    // being registered. If the document drive subgraph is not registered, this
-    // will throw an error as it relies on those types.
-    name = "d/:drive";
-    typeDefs = gql `
-    type DriveMeta {
-      preferredEditor: String
-    }
-
-    extend type DocumentDrive_DocumentDriveState {
-      meta: DriveMeta
-    }
-    extend type DocumentDrive {
-      meta: DriveMeta
-      slug: String!
-    }
-
-    type Query {
-      system: System
-      drive: DriveInfo
-      driveDocument: DocumentDrive
-      document(id: String!): DriveDocument
-      documents: [String!]!
-    }
-
-    type Mutation {
-      registerPullResponderListener(
-        filter: InputListenerFilter!
-        listenerId: String
-      ): DocumentDrive_Listener
-      pushUpdates(strands: [InputStrandUpdate!]): [ListenerRevision!]!
-      acknowledge(
-        listenerId: String!
-        revisions: [ListenerRevisionInput]
-      ): Boolean
-    }
-
-    input InputOperationSignerUser {
-      address: String!
-      networkId: String!
-      chainId: Int!
-    }
-
-    type OperationSignerUser {
-      address: String!
-      networkId: String!
-      chainId: Int!
-    }
-
-    input InputOperationSignerApp {
-      name: String!
-      key: String!
-    }
-
-    type OperationSignerApp {
-      name: String!
-      key: String!
-    }
-
-    type OperationSigner {
-      app: OperationSignerApp
-      user: OperationSignerUser
-      signatures: [[String!]]!
-    }
-
-    input InputOperationSigner {
-      app: InputOperationSignerApp
-      user: InputOperationSignerUser
-      signatures: [[String!]]!
-    }
-
-    type OperationContext {
-      signer: OperationSigner
-    }
-
-    input InputOperationContext {
-      signer: InputOperationSigner
-    }
-
-    input InputOperationUpdate {
-      index: Int!
-      skip: Int
-      type: String!
-      id: String!
-      actionId: String!
-      input: String!
-      hash: String!
-      timestampUtcMs: String!
-      error: String
-      context: InputOperationContext
-    }
-
-    type OperationUpdate {
-      index: Int!
-      skip: Int
-      type: String!
-      id: String!
-      actionId: String!
-      input: String!
-      hash: String!
-      timestampUtcMs: String!
-      error: String
-      context: OperationContext
-    }
-
-    type StrandUpdate {
-      driveId: String!
-      documentId: String!
-      documentType: String!
-      scope: String!
-      branch: String!
-      operations: [OperationUpdate!]!
-    }
-
-    input InputStrandUpdate {
-      driveId: String!
-      documentId: String!
-      documentType: String!
-      scope: String!
-      branch: String!
-      operations: [InputOperationUpdate!]!
-    }
-
-    input InputListenerFilter {
-      documentType: [String!]
-      documentId: [String!]
-      scope: [String!]
-      branch: [String!]
-    }
-
-    enum UpdateStatus {
-      SUCCESS
-      MISSING
-      CONFLICT
-      ERROR
-    }
-
-    input ListenerRevisionInput {
-      driveId: String!
-      documentId: String!
-      documentType: String!
-      scope: String!
-      branch: String!
-      status: UpdateStatus!
-      revision: Int!
-    }
-
-    type ListenerRevision {
-      driveId: String!
-      documentId: String!
-      documentType: String!
-      scope: String!
-      branch: String!
-      status: UpdateStatus!
-      revision: Int!
-      error: String
-    }
-
-    type System {
-      sync: Sync
-    }
-
-    type Sync {
-      strands(listenerId: ID!, since: String): [StrandUpdate!]!
-    }
-
-    type DriveInfo {
-      id: String!
-      name: String!
-      slug: String!
-      meta: DriveMeta
-      icon: String
-    }
-  `;
-    async getDriveIdBySlugOrId(slugOrId) {
-        try {
-            return await this.reactor.getDriveIdBySlug(slugOrId);
-        }
-        catch {
-            const drive = await this.reactor.getDrive(slugOrId);
-            return drive.header.id;
-        }
-    }
-    async getDriveBySlugOrId(slugOrId) {
-        try {
-            return await this.reactor.getDriveBySlug(slugOrId);
-        }
-        catch {
-            const drive = await this.reactor.getDrive(slugOrId);
-            return drive;
-        }
-    }
-    resolvers = {
-        Asset: {
-            __resolveType: (obj) => {
-                return obj.type;
-            },
-        },
-        Node: {
-            __resolveType: (obj) => {
-                return obj.documentType
-                    ? driveKindTypeNames.file
-                    : driveKindTypeNames.folder;
-            },
-        },
-        Operation: {
-            type: (operation) => "type" in operation ? operation.type : operation.action.type,
-            id: (operation) => operation.id,
-        },
-        DriveDocument: {
-            operations: IDocumentGraphql.resolvers.IDocument.operations,
-        },
-        ...DocumentDriveResolvers,
-        Query: {
-            drive: async (_, args, ctx) => {
-                this.logger.verbose(`drive()`, JSON.stringify(args));
-                if (!ctx.driveId)
-                    throw new Error("Drive ID is required");
-                const drive = await this.getDriveBySlugOrId(ctx.driveId);
-                return responseForDrive(drive);
-            },
-            driveDocument: async (_, args, ctx) => {
-                this.logger.verbose(`driveDocument()`, JSON.stringify(args));
-                if (!ctx.driveId)
-                    throw new Error("Drive ID is required");
-                const drive = await this.getDriveBySlugOrId(ctx.driveId);
-                ctx.document = drive;
-                return buildGraphQlDriveDocument(drive);
-            },
-            documents: async (_, args, ctx) => {
-                this.logger.verbose(`documents(drive: ${ctx.driveId})`, args);
-                if (!ctx.driveId)
-                    throw new Error("Drive ID is required");
-                const driveId = await this.getDriveIdBySlugOrId(ctx.driveId);
-                const documents = await this.reactor.getDocuments(driveId);
-                return documents;
-            },
-            document: async (_, { id }, ctx) => {
-                this.logger.verbose(`document(drive: ${ctx.driveId}, id: ${id})`);
-                if (!ctx.driveId)
-                    throw new Error("Drive ID is required");
-                const driveId = await this.getDriveIdBySlugOrId(ctx.driveId);
-                if (id !== driveId) {
-                    const driveDocuments = await this.reactor.getDocuments(driveId);
-                    if (!driveDocuments.includes(id)) {
-                        throw new GraphQLError("Document is not part of this drive");
-                    }
-                }
-                const document = await this.reactor.getDocument(id);
-                const dms = this.reactor.getDocumentModelModules();
-                const dm = dms.find(({ documentModel }) => documentModel.global.id === document.header.documentType);
-                let node;
-                const driveDocument = await this.reactor.getDrive(driveId);
-                if (driveDocument?.state?.global?.nodes) {
-                    node = driveDocument.state.global.nodes.find((node) => node.id === id);
-                }
-                // eslint-disable-next-line
-                const globalState = document.state.global;
-                if (!globalState)
-                    throw new Error("Document was found with no global state");
-                const typeName = pascalCase((dm?.documentModel.global.name || "").replaceAll("/", " "));
-                return responseForDocument(document, typeName, node?.name);
-            },
-            system: () => ({ sync: {} }),
-        },
-        Mutation: {
-            registerPullResponderListener: async (_, { filter, listenerId }, ctx) => {
-                this.logger.verbose(`registerPullResponderListener(drive: ${ctx.driveId})`, filter);
-                if (!ctx.driveId) {
-                    throw new Error("Drive ID is required");
-                }
-                const reactorDriveId = await this.getDriveIdBySlugOrId(ctx.driveId);
-                // Check global roles first
-                const isGlobalAdmin = ctx.isAdmin?.(ctx.user?.address ?? "");
-                const isGlobalUser = ctx.isUser?.(ctx.user?.address ?? "");
-                const isGlobalGuest = ctx.isGuest?.(ctx.user?.address ?? "") ||
-                    process.env.FREE_ENTRY === "true";
-                // If user has a global role, allow access
-                const hasGlobalAccess = isGlobalAdmin || isGlobalUser || isGlobalGuest;
-                // If no global access, check document-level permissions
-                if (!hasGlobalAccess && this.documentPermissionService) {
-                    const canRead = await this.documentPermissionService.canReadDocument(reactorDriveId, ctx.user?.address);
-                    if (!canRead) {
-                        this.logger.warn(`registerPullResponderListener rejected: user ${ctx.user?.address ?? "anonymous"} lacks read permission for drive ${reactorDriveId}`);
-                        throw new GraphQLError("Forbidden: insufficient permissions to read from this drive");
-                    }
-                }
-                else if (!hasGlobalAccess) {
-                    throw new GraphQLError("Forbidden");
-                }
-                const driveId = await this.getDriveIdBySlugOrId(ctx.driveId);
-                // Create the listener and transmitter
-                const uuid = listenerId ?? generateId();
-                const listener = {
-                    driveId: driveId,
-                    listenerId: uuid,
-                    block: false,
-                    filter,
-                    system: false,
-                    label: `Pullresponder #${uuid}`,
-                    callInfo: {
-                        data: "",
-                        name: "PullResponder",
-                        transmitterType: "PullResponder",
-                    },
-                };
-                // TODO: circular reference
-                // TODO: once we have DI, remove this and pass around
-                const listenerManager = this.reactor.listeners;
-                listener.transmitter = new PullResponderTransmitter(listener, listenerManager);
-                // set the listener on the manager directly (bypassing operations)
-                try {
-                    await listenerManager.setListener(driveId, listener);
-                }
-                catch (error) {
-                    this.logger.error(`Failed to register ephemeral listener: ${error}`);
-                    throw new Error(`Listener couldn't be registered: ${error}`);
-                }
-                // for backwards compatibility: return everything but the transmitter
-                return {
-                    driveId: listener.driveId,
-                    listenerId: listener.listenerId,
-                    label: listener.label,
-                    block: listener.block,
-                    system: listener.system,
-                    filter: listener.filter,
-                    callInfo: listener.callInfo,
-                };
-            },
-            pushUpdates: async (_, { strands: strandsGql }, ctx) => {
-                if (!ctx.driveId)
-                    throw new Error("Drive ID is required");
-                const driveId = await this.getDriveIdBySlugOrId(ctx.driveId);
-                this.logger.verbose(`pushUpdates(drive: slug:${ctx.driveId} id:${driveId})`, strandsGql);
-                // Check global roles first (write requires admin or user, not guest)
-                const isGlobalAdmin = ctx.isAdmin?.(ctx.user?.address ?? "");
-                const isGlobalUser = ctx.isUser?.(ctx.user?.address ?? "");
-                // If user has global write access, allow
-                const hasGlobalWriteAccess = isGlobalAdmin || isGlobalUser;
-                // If no global write access, check document-level permissions
-                if (!hasGlobalWriteAccess && this.documentPermissionService) {
-                    const canWrite = await this.documentPermissionService.canWriteDocument(driveId, ctx.user?.address);
-                    if (!canWrite) {
-                        this.logger.warn(`pushUpdates rejected: user ${ctx.user?.address ?? "anonymous"} lacks write permission for drive ${driveId}`);
-                        throw new GraphQLError("Forbidden: insufficient permissions to write to this drive");
-                    }
-                }
-                else if (!hasGlobalWriteAccess) {
-                    throw new GraphQLError("Forbidden");
-                }
-                // translate data types
-                const strands = strandsGql.map((strandGql) => {
-                    return {
-                        operations: strandGql.operations.map((op) => ({
-                            index: op.index,
-                            skip: op.skip ?? 0,
-                            timestampUtcMs: op.timestampUtcMs,
-                            hash: op.hash,
-                            id: op.id,
-                            // Map GraphQL context to Action.context (only signer is defined in schema)
-                            action: {
-                                id: op.actionId,
-                                type: op.type,
-                                timestampUtcMs: op.timestampUtcMs,
-                                scope: strandGql.scope,
-                                input: JSON.parse(op.input),
-                                context: op.context,
-                            },
-                        })),
-                        documentId: strandGql.documentId,
-                        documentType: strandGql.documentType,
-                        driveId: strandGql.driveId,
-                        scope: strandGql.scope,
-                        branch: strandGql.branch,
-                    };
-                });
-                // return a list of listener revisions
-                return await Promise.all(strands.map((strand) => processPushUpdate(this.reactor, strand)));
-            },
-            acknowledge: async (_, { listenerId, revisions, }, ctx) => {
-                if (!listenerId || !revisions)
-                    return false;
-                if (!ctx.driveId)
-                    throw new Error("Drive ID is required");
-                const driveId = await this.getDriveIdBySlugOrId(ctx.driveId);
-                this.logger.verbose(`acknowledge(drive: ${ctx.driveId}/${driveId}, listenerId: ${listenerId})`, revisions);
-                // translate data types
-                const validEntries = revisions
-                    .filter((r) => r !== null)
-                    .map((e) => ({
-                    driveId: e.driveId,
-                    documentId: e.documentId,
-                    documentType: e.documentType,
-                    scope: e.scope,
-                    branch: e.branch,
-                    revision: e.revision,
-                    status: e.status,
-                }));
-                // return a boolean indicating if the acknowledge was successful
-                return await processAcknowledge(this.reactor, driveId, listenerId, validEntries);
-            },
-        },
-        System: {},
-        Sync: {
-            strands: async (_, { listenerId, since, }, ctx) => {
-                if (!ctx.driveId)
-                    throw new Error("Drive ID is required");
-                const driveId = await this.getDriveIdBySlugOrId(ctx.driveId);
-                this.logger.verbose(`strands(drive: ${ctx.driveId}/${driveId}, listenerId: ${listenerId}, since:${since})`);
-                // Check global roles first
-                const isGlobalAdmin = ctx.isAdmin?.(ctx.user?.address ?? "");
-                const isGlobalUser = ctx.isUser?.(ctx.user?.address ?? "");
-                const isGlobalGuest = ctx.isGuest?.(ctx.user?.address ?? "") ||
-                    process.env.FREE_ENTRY === "true";
-                // If user has a global role, allow access
-                const hasGlobalAccess = isGlobalAdmin || isGlobalUser || isGlobalGuest;
-                // If no global access, check document-level permissions
-                if (!hasGlobalAccess && this.documentPermissionService) {
-                    const canRead = await this.documentPermissionService.canReadDocument(driveId, ctx.user?.address);
-                    if (!canRead) {
-                        this.logger.warn(`strands filtered: user ${ctx.user?.address ?? "anonymous"} lacks read permission for drive ${driveId}`);
-                        return []; // Return empty for drives without permission
-                    }
-                }
-                else if (!hasGlobalAccess) {
-                    return []; // Return empty if no access
-                }
-                // get the requested strand updates
-                const strands = await processGetStrands(this.reactor, driveId, listenerId, since);
-                // translate data types
-                return strands.map((update) => ({
-                    driveId: update.driveId,
-                    documentId: update.documentId,
-                    documentType: update.documentType,
-                    scope: update.scope,
-                    branch: update.branch,
-                    operations: update.operations.map((op) => ({
-                        index: op.index,
-                        skip: op.skip,
-                        // no extra name field; GraphQL schema exposes `type`
-                        input: JSON.stringify(op.input),
-                        hash: op.hash,
-                        timestampUtcMs: op.timestampUtcMs,
-                        type: op.type,
-                        context: op.context,
-                        id: op.id,
-                        actionId: op.actionId,
-                    })),
-                }));
-            },
-        },
-    };
-}
-//# sourceMappingURL=drive-subgraph.js.map