@proteinjs/db 1.25.2 → 1.26.0

package/dist/src/UpdatePreserving.js

@@ -0,0 +1,72 @@
+"use strict";
+/**
+ * Support for `Db.updatePreserving` / `Transaction.updatePreserving`: an update
+ * whose payload carries a column value the writer only PARTIALLY owns — the
+ * listed sub-paths belong to other writers, so their committed values are
+ * preserved (overlaid into the payload read-modify-write) instead of being
+ * clobbered by whatever stale copy the writer's snapshot happened to hold.
+ *
+ * The motivating case: a structural editor operation changes non-text fields of
+ * a JSON object column (styling, child overrides) while a debounced text save
+ * owns the object's text content. The structural payload's `content` is stale
+ * by construction (text syncs into the record at save time, not per keystroke);
+ * writing it would erase a concurrently committed text save. Preserving
+ * `content` from the committed row makes the two writers commute.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.overlayPreservedPaths = void 0;
+/**
+ * Overlay committed values at `paths` into a clone of `incomingValue`.
+ * Pure: returns the (possibly cloned) value to write. Only plain-JSON values
+ * are supported (the clone is JSON-based).
+ */
+function overlayPreservedPaths(committedValue, incomingValue, paths, whenType) {
+    if (incomingValue == null || committedValue == null) {
+        return incomingValue;
+    }
+    var result;
+    for (var _i = 0, paths_1 = paths; _i < paths_1.length; _i++) {
+        var path = paths_1[_i];
+        var committedAtPath = deepGet(committedValue, path);
+        if (committedAtPath === undefined) {
+            continue;
+        }
+        if (whenType && typeof committedAtPath !== whenType) {
+            continue;
+        }
+        if (deepGet(result !== null && result !== void 0 ? result : incomingValue, path) === committedAtPath) {
+            continue;
+        }
+        if (result === undefined) {
+            result = JSON.parse(JSON.stringify(incomingValue));
+        }
+        deepSet(result, path, committedAtPath);
+    }
+    return result === undefined ? incomingValue : result;
+}
+exports.overlayPreservedPaths = overlayPreservedPaths;
+function deepGet(value, path) {
+    var current = value;
+    for (var _i = 0, _a = path.split('.'); _i < _a.length; _i++) {
+        var key = _a[_i];
+        if (current == null || typeof current !== 'object') {
+            return undefined;
+        }
+        current = current[key];
+    }
+    return current;
+}
+function deepSet(value, path, pathValue) {
+    var keys = path.split('.');
+    var current = value;
+    for (var i = 0; i < keys.length - 1; i++) {
+        var next = current === null || current === void 0 ? void 0 : current[keys[i]];
+        if (next == null || typeof next !== 'object') {
+            // The incoming value doesn't have this path's parent — nothing to preserve into.
+            return;
+        }
+        current = next;
+    }
+    current[keys[keys.length - 1]] = pathValue;
+}
+//# sourceMappingURL=UpdatePreserving.js.map

package/dist/src/UpdatePreserving.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdatePreserving.js","sourceRoot":"","sources":["../../src/UpdatePreserving.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAgBH;;;;GAIG;AACH,SAAgB,qBAAqB,CACnC,cAAuB,EACvB,aAAsB,EACtB,KAAe,EACf,QAAoC;IAEpC,IAAI,aAAa,IAAI,IAAI,IAAI,cAAc,IAAI,IAAI,EAAE;QACnD,OAAO,aAAa,CAAC;KACtB;IAED,IAAI,MAA2B,CAAC;IAChC,KAAmB,UAAK,EAAL,eAAK,EAAL,mBAAK,EAAL,IAAK,EAAE;QAArB,IAAM,IAAI,cAAA;QACb,IAAM,eAAe,GAAG,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,SAAS,EAAE;YACjC,SAAS;SACV;QACD,IAAI,QAAQ,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE;YACnD,SAAS;SACV;QACD,IAAI,OAAO,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,aAAa,EAAE,IAAI,CAAC,KAAK,eAAe,EAAE;YAC9D,SAAS;SACV;QACD,IAAI,MAAM,KAAK,SAAS,EAAE;YACxB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;SACpD;QACD,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;KACxC;IAED,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AA7BD,sDA6BC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,IAAI,OAAO,GAAQ,KAAK,CAAC;IACzB,KAAkB,UAAe,EAAf,KAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAf,cAAe,EAAf,IAAe,EAAE;QAA9B,IAAM,GAAG,SAAA;QACZ,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;YAClD,OAAO,SAAS,CAAC;SAClB;QACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;KACxB;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY,EAAE,SAAkB;IAC/D,IAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAQ,KAAK,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;QACxC,IAAM,IAAI,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;YAC5C,iFAAiF;YACjF,OAAO;SACR;QACD,OAAO,GAAG,IAAI,CAAC;KAChB;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;AAC7C,CAAC"}

package/dist/src/auth/TableAuth.d.ts

@@ -16,6 +16,15 @@ export type TableOperationsAuth = {
     update?: Identity;
     delete?: Identity;
 };
+/**
+ * A table-auth denial. The message names the table and operation and is safe to show the caller
+ * (it only echoes what they asked for). Name-tagged rather than relying on instanceof — the
+ * prototype chain is unreliable across package compile targets (same reason ServiceRouter's
+ * isServiceError checks `name`).
+ */
+export declare class TableAuthError extends Error {
+    constructor(message: string);
+}
 /**
  * Util to check which table operations a user can perform
  */

package/dist/src/auth/TableAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TableAuth.d.ts","sourceRoot":"","sources":["../../../src/auth/TableAuth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEjC;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,EAAE,CAAC;AAE7D;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,SAAS;IAoBjB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;IAM/D,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;IAMhE,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;IAMhE,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;CAKjE"}
+{"version":3,"file":"TableAuth.d.ts","sourceRoot":"","sources":["../../../src/auth/TableAuth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEjC;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,EAAE,CAAC;AAE7D;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,SAAS;IAoBjB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;IAM/D,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;IAMhE,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;IAMhE,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAE,IAAI,GAAG,SAAgB,GAAG,IAAI;CAKjE"}

package/dist/src/auth/TableAuth.js

@@ -1,7 +1,38 @@
 "use strict";
+var __extends = (this && this.__extends) || (function () {
+    var extendStatics = function (d, b) {
+        extendStatics = Object.setPrototypeOf ||
+            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+        return extendStatics(d, b);
+    };
+    return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+        extendStatics(d, b);
+        function __() { this.constructor = d; }
+        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TableAuth = void 0;
+exports.TableAuth = exports.TableAuthError = void 0;
 var user_auth_1 = require("@proteinjs/user-auth");
+/**
+ * A table-auth denial. The message names the table and operation and is safe to show the caller
+ * (it only echoes what they asked for). Name-tagged rather than relying on instanceof — the
+ * prototype chain is unreliable across package compile targets (same reason ServiceRouter's
+ * isServiceError checks `name`).
+ */
+var TableAuthError = /** @class */ (function (_super) {
+    __extends(TableAuthError, _super);
+    function TableAuthError(message) {
+        var _this = _super.call(this, message) || this;
+        _this.name = 'TableAuthError';
+        return _this;
+    }
+    return TableAuthError;
+}(Error));
+exports.TableAuthError = TableAuthError;
 /**
  * Util to check which table operations a user can perform
  */
@@ -23,25 +54,25 @@ var TableAuth = /** @class */ (function () {
     TableAuth.prototype.canQuery = function (table, api) {
         if (api === void 0) { api = 'db'; }
         if (!this.canAccess(table, api, 'query')) {
-            throw new Error("User is not authorized to query table: ".concat(table.name));
+            throw new TableAuthError("User is not authorized to query table: ".concat(table.name));
         }
     };
     TableAuth.prototype.canInsert = function (table, api) {
         if (api === void 0) { api = 'db'; }
         if (!this.canAccess(table, api, 'insert')) {
-            throw new Error("User is not authorized to insert records into table: ".concat(table.name));
+            throw new TableAuthError("User is not authorized to insert records into table: ".concat(table.name));
         }
     };
     TableAuth.prototype.canUpdate = function (table, api) {
         if (api === void 0) { api = 'db'; }
         if (!this.canAccess(table, api, 'update')) {
-            throw new Error("User is not authorized to update records in table: ".concat(table.name));
+            throw new TableAuthError("User is not authorized to update records in table: ".concat(table.name));
         }
     };
     TableAuth.prototype.canDelete = function (table, api) {
         if (api === void 0) { api = 'db'; }
         if (!this.canAccess(table, api, 'delete')) {
-            throw new Error("User is not authorized to delete records from table: ".concat(table.name));
+            throw new TableAuthError("User is not authorized to delete records from table: ".concat(table.name));
         }
     };
     return TableAuth;

package/dist/src/auth/TableAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"TableAuth.js","sourceRoot":"","sources":["../../../src/auth/TableAuth.ts"],"names":[],"mappings":";;;AAAA,kDAAgD;AAsBhD;;GAEG;AACH;IAAA;IA4CA,CAAC;IA3CS,6BAAS,GAAjB,UACE,KAAiB,EACjB,GAAqB,EACrB,SAAmD;QAEnD,IAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE;YACpD,OAAO,oBAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SAClC;QAED,OAAO,CACL,SAAS,CAAC,GAAG,KAAK,QAAQ;YAC1B,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ;YACjC,CAAC,SAAS,CAAC,GAAG,KAAK,eAAe,IAAI,oBAAQ,CAAC,UAAU,EAAE,CAAC;YAC5D,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,eAAe,IAAI,oBAAQ,CAAC,UAAU,EAAE,CAAC;YACnE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,oBAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAClF,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,oBAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAa,EAAE,cAAc,CAAC,CAAC,CAC7G,CAAC;IACJ,CAAC;IAED,4BAAQ,GAAR,UAAS,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACtD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,iDAA0C,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SACzE;IACH,CAAC;IAED,6BAAS,GAAT,UAAU,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,+DAAwD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SACvF;IACH,CAAC;IAED,6BAAS,GAAT,UAAU,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,6DAAsD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SACrF;IACH,CAAC;IAED,6BAAS,GAAT,UAAU,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,+DAAwD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SACvF;IACH,CAAC;IACH,gBAAC;AAAD,CAAC,AA5CD,IA4CC;AA5CY,8BAAS"}
+{"version":3,"file":"TableAuth.js","sourceRoot":"","sources":["../../../src/auth/TableAuth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,kDAAgD;AAsBhD;;;;;GAKG;AACH;IAAoC,kCAAK;IACvC,wBAAY,OAAe;QAA3B,YACE,kBAAM,OAAO,CAAC,SAEf;QADC,KAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;;IAC/B,CAAC;IACH,qBAAC;AAAD,CAAC,AALD,CAAoC,KAAK,GAKxC;AALY,wCAAc;AAO3B;;GAEG;AACH;IAAA;IA4CA,CAAC;IA3CS,6BAAS,GAAjB,UACE,KAAiB,EACjB,GAAqB,EACrB,SAAmD;QAEnD,IAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE;YACpD,OAAO,oBAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SAClC;QAED,OAAO,CACL,SAAS,CAAC,GAAG,KAAK,QAAQ;YAC1B,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ;YACjC,CAAC,SAAS,CAAC,GAAG,KAAK,eAAe,IAAI,oBAAQ,CAAC,UAAU,EAAE,CAAC;YAC5D,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,eAAe,IAAI,oBAAQ,CAAC,UAAU,EAAE,CAAC;YACnE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,oBAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAClF,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,oBAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAa,EAAE,cAAc,CAAC,CAAC,CAC7G,CAAC;IACJ,CAAC;IAED,4BAAQ,GAAR,UAAS,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACtD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;YACxC,MAAM,IAAI,cAAc,CAAC,iDAA0C,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SAClF;IACH,CAAC;IAED,6BAAS,GAAT,UAAU,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE;YACzC,MAAM,IAAI,cAAc,CAAC,+DAAwD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SAChG;IACH,CAAC;IAED,6BAAS,GAAT,UAAU,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE;YACzC,MAAM,IAAI,cAAc,CAAC,6DAAsD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SAC9F;IACH,CAAC;IAED,6BAAS,GAAT,UAAU,KAAiB,EAAE,GAA4B;QAA5B,oBAAA,EAAA,UAA4B;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE;YACzC,MAAM,IAAI,cAAc,CAAC,+DAAwD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;SAChG;IACH,CAAC;IACH,gBAAC;AAAD,CAAC,AA5CD,IA4CC;AA5CY,8BAAS"}

package/dist/src/auth/TableServiceAuth.d.ts

@@ -8,5 +8,12 @@ export declare class TableServiceAuth {
      * specific, actionable error. Server-side `Db` usage never runs this check.
      */
     private checkServiceProtectedColumns;
+    /**
+     * `updateArrayMembership`'s payload names its target column (`columnPropertyName`) instead of
+     * carrying record fields, so the record-shaped protected-column check above can't see the
+     * write. Membership ops always SET real membership — there is no null-clearing form — so
+     * targeting a protected column is rejected outright.
+     */
+    private checkArrayMembershipProtectedColumn;
 }
 //# sourceMappingURL=TableServiceAuth.d.ts.map

package/dist/src/auth/TableServiceAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TableServiceAuth.d.ts","sourceRoot":"","sources":["../../../src/auth/TableServiceAuth.ts"],"names":[],"mappings":"AAKA,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAA+C;IAE7D,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO;IAoCnD;;;;;OAKG;IACH,OAAO,CAAC,4BAA4B;CAarC"}
+{"version":3,"file":"TableServiceAuth.d.ts","sourceRoot":"","sources":["../../../src/auth/TableServiceAuth.ts"],"names":[],"mappings":"AAKA,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAA+C;IAE7D,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO;IAoDnD;;;;;OAKG;IACH,OAAO,CAAC,4BAA4B;IAcpC;;;;;OAKG;IACH,OAAO,CAAC,mCAAmC;CAY5C"}

package/dist/src/auth/TableServiceAuth.js

@@ -27,6 +27,17 @@ var TableServiceAuth = /** @class */ (function () {
                 tableAuth.canUpdate(table, 'service');
                 this.checkServiceProtectedColumns(table, args[1]);
             }
+            else if (methodName === 'updateArrayMembership') {
+                // An update in RMW clothing: gated exactly like `update`. Row visibility is enforced
+                // inside the operation itself — scoped/column query injection runs on the server-side
+                // read-modify-write, so a caller can only touch rows they could already update.
+                tableAuth.canUpdate(table, 'service');
+                this.checkArrayMembershipProtectedColumn(table, args[1]);
+            }
+            else if (methodName === 'updatePreserving') {
+                tableAuth.canUpdate(table, 'service');
+                this.checkServiceProtectedColumns(table, args[1]);
+            }
             else if (methodName === 'delete') {
                 tableAuth.canDelete(table, 'service');
             }
@@ -42,6 +53,13 @@ var TableServiceAuth = /** @class */ (function () {
             if ((error === null || error === void 0 ? void 0 : error.name) === 'ServiceError') {
                 throw error;
             }
+            // A table-auth denial is equally client-safe (it only names the table/operation the caller
+            // asked for). Cross the wire verbatim so the caller sees "not authorized to query table:
+            // session" rather than the generic run-service denial — a denied query must be
+            // distinguishable from an empty one at the surface that shows it.
+            if ((error === null || error === void 0 ? void 0 : error.name) === 'TableAuthError') {
+                throw new service_1.ServiceError(error.message);
+            }
             this.logger.error({ message: "Failed evaluating auth for method: ".concat(methodName), error: error });
             return false;
         }
@@ -67,6 +85,22 @@ var TableServiceAuth = /** @class */ (function () {
             }
         }
     };
+    /**
+     * `updateArrayMembership`'s payload names its target column (`columnPropertyName`) instead of
+     * carrying record fields, so the record-shaped protected-column check above can't see the
+     * write. Membership ops always SET real membership — there is no null-clearing form — so
+     * targeting a protected column is rejected outright.
+     */
+    TableServiceAuth.prototype.checkArrayMembershipProtectedColumn = function (table, update) {
+        var _a;
+        var protectedColumns = (_a = table.auth) === null || _a === void 0 ? void 0 : _a.serviceProtectedColumns;
+        if (!(protectedColumns === null || protectedColumns === void 0 ? void 0 : protectedColumns.length) || !update || typeof update !== 'object') {
+            return;
+        }
+        if (protectedColumns.includes(update.columnPropertyName)) {
+            throw new service_1.ServiceError("Column '".concat(update.columnPropertyName, "' cannot be written via the db service on table: ").concat(table.name));
+        }
+    };
     return TableServiceAuth;
 }());
 exports.TableServiceAuth = TableServiceAuth;

package/dist/src/auth/TableServiceAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"TableServiceAuth.js","sourceRoot":"","sources":["../../../src/auth/TableServiceAuth.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAC3C,8CAAkD;AAClD,kCAA0C;AAC1C,yCAAwC;AAExC;IAAA;QACU,WAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAyD/D,CAAC;IAvDC,oCAAS,GAAT,UAAU,UAAkB,EAAE,IAAW;QACvC,IAAI;YACF,IAAM,KAAK,GAA2B,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAA,eAAO,EAAC,KAAK,CAAC,EAAE;gBACnB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACrE;YAED,IAAM,SAAS,GAAG,IAAI,qBAAS,EAAE,CAAC;YAClC,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,IAAI,OAAO,IAAI,UAAU,IAAI,aAAa,EAAE;gBAChF,SAAS,CAAC,QAAQ,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;aACpD;iBAAM,IAAI,UAAU,KAAK,QAAQ,EAAE;gBAClC,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,CAAC,4BAA4B,CAAC,KAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE;iBAAM,IAAI,UAAU,KAAK,QAAQ,EAAE;gBAClC,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,CAAC,4BAA4B,CAAC,KAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE;iBAAM,IAAI,UAAU,KAAK,QAAQ,EAAE;gBAClC,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;aACrD;iBAAM;gBACL,MAAM,IAAI,KAAK,CAAC,uEAAgE,UAAU,CAAE,CAAC,CAAC;aAC/F;SACF;QAAC,OAAO,KAAU,EAAE;YACnB,yFAAyF;YACzF,qFAAqF;YACrF,uFAAuF;YACvF,uFAAuF;YACvF,IAAI,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,MAAK,cAAc,EAAE;gBAClC,MAAM,KAAK,CAAC;aACb;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6CAAsC,UAAU,CAAE,EAAE,KAAK,OAAA,EAAE,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC;SACd;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,uDAA4B,GAApC,UAAqC,KAAiB,EAAE,MAAW;;QACjE,IAAM,gBAAgB,GAAG,MAAA,KAAK,CAAC,IAAI,0CAAE,uBAAuB,CAAC;QAC7D,IAAI,CAAC,CAAA,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,MAAM,CAAA,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YACtE,OAAO;SACR;QAED,KAAqB,UAAgB,EAAhB,qCAAgB,EAAhB,8BAAgB,EAAhB,IAAgB,EAAE;YAAlC,IAAM,MAAM,yBAAA;YACf,IAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;gBACzC,MAAM,IAAI,sBAAY,CAAC,kBAAW,MAAM,8DAAoD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;aAC3G;SACF;IACH,CAAC;IACH,uBAAC;AAAD,CAAC,AA1DD,IA0DC;AA1DY,4CAAgB"}
+{"version":3,"file":"TableServiceAuth.js","sourceRoot":"","sources":["../../../src/auth/TableServiceAuth.ts"],"names":[],"mappings":";;;AAAA,4CAA2C;AAC3C,8CAAkD;AAClD,kCAA0C;AAC1C,yCAAwD;AAExD;IAAA;QACU,WAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IA4F/D,CAAC;IA1FC,oCAAS,GAAT,UAAU,UAAkB,EAAE,IAAW;QACvC,IAAI;YACF,IAAM,KAAK,GAA2B,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAA,eAAO,EAAC,KAAK,CAAC,EAAE;gBACnB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACrE;YAED,IAAM,SAAS,GAAG,IAAI,qBAAS,EAAE,CAAC;YAClC,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,IAAI,OAAO,IAAI,UAAU,IAAI,aAAa,EAAE;gBAChF,SAAS,CAAC,QAAQ,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;aACpD;iBAAM,IAAI,UAAU,KAAK,QAAQ,EAAE;gBAClC,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,CAAC,4BAA4B,CAAC,KAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE;iBAAM,IAAI,UAAU,KAAK,QAAQ,EAAE;gBAClC,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,CAAC,4BAA4B,CAAC,KAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE;iBAAM,IAAI,UAAU,KAAK,uBAAuB,EAAE;gBACjD,qFAAqF;gBACrF,sFAAsF;gBACtF,gFAAgF;gBAChF,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,CAAC,mCAAmC,CAAC,KAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACxE;iBAAM,IAAI,UAAU,KAAK,kBAAkB,EAAE;gBAC5C,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,CAAC,4BAA4B,CAAC,KAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE;iBAAM,IAAI,UAAU,KAAK,QAAQ,EAAE;gBAClC,SAAS,CAAC,SAAS,CAAC,KAAmB,EAAE,SAAS,CAAC,CAAC;aACrD;iBAAM;gBACL,MAAM,IAAI,KAAK,CAAC,uEAAgE,UAAU,CAAE,CAAC,CAAC;aAC/F;SACF;QAAC,OAAO,KAAU,EAAE;YACnB,yFAAyF;YACzF,qFAAqF;YACrF,uFAAuF;YACvF,uFAAuF;YACvF,IAAI,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,MAAK,cAAc,EAAE;gBAClC,MAAM,KAAK,CAAC;aACb;YACD,2FAA2F;YAC3F,yFAAyF;YACzF,+EAA+E;YAC/E,kEAAkE;YAClE,IAAI,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,MAAK,gBAAgB,EAAE;gBACpC,MAAM,IAAI,sBAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aACvC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6CAAsC,UAAU,CAAE,EAAE,KAAK,OAAA,EAAE,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC;SACd;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,uDAA4B,GAApC,UAAqC,KAAiB,EAAE,MAAW;;QACjE,IAAM,gBAAgB,GAAG,MAAA,KAAK,CAAC,IAAI,0CAAE,uBAAuB,CAAC;QAC7D,IAAI,CAAC,CAAA,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,MAAM,CAAA,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YACtE,OAAO;SACR;QAED,KAAqB,UAAgB,EAAhB,qCAAgB,EAAhB,8BAAgB,EAAhB,IAAgB,EAAE;YAAlC,IAAM,MAAM,yBAAA;YACf,IAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;gBACzC,MAAM,IAAI,sBAAY,CAAC,kBAAW,MAAM,8DAAoD,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;aAC3G;SACF;IACH,CAAC;IAED;;;;;OAKG;IACK,8DAAmC,GAA3C,UAA4C,KAAiB,EAAE,MAAW;;QACxE,IAAM,gBAAgB,GAAyB,MAAA,KAAK,CAAC,IAAI,0CAAE,uBAAuB,CAAC;QACnF,IAAI,CAAC,CAAA,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,MAAM,CAAA,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YACtE,OAAO;SACR;QAED,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE;YACxD,MAAM,IAAI,sBAAY,CACpB,kBAAW,MAAM,CAAC,kBAAkB,8DAAoD,KAAK,CAAC,IAAI,CAAE,CACrG,CAAC;SACH;IACH,CAAC;IACH,uBAAC;AAAD,CAAC,AA7FD,IA6FC;AA7FY,4CAAgB"}

package/dist/src/reference/ArrayMembershipOps.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Commutative membership operations for `ReferenceArrayColumn` values.
+ *
+ * Motivation (the write-side lost-update class): a client writer that persists a
+ * reference-array column as a FULL ID LIST snapshots its in-memory state — when two
+ * such writes race (fire-and-forget issuance + driver-level abort/retry can commit
+ * an earlier-issued transaction later), the last commit wins wholesale and erases
+ * the other writer's committed membership change. Expressing membership changes as
+ * ops (add/remove/move) applied read-modify-write against COMMITTED truth inside a
+ * transaction makes concurrent writes converge instead of clobber:
+ * `remove(x)` + `remove(y)` in any commit order removes both; `add(x)` + `add(y)`
+ * keeps both.
+ *
+ * `applyArrayMembershipOps` is the single applier used by `Db.updateArrayMembership`
+ * (server-side RMW) — and by any test that needs the committed rule as importable
+ * truth. `computeArrayMembershipOps` derives the minimal op set from a
+ * before/after id-list pair, for callers whose op layer only knows list states.
+ */
+export type ArrayMembershipOp = 
+/** Insert `id` after `afterId` (`null` = at the head). If `id` is already present it is repositioned. */
+{
+    op: 'add';
+    id: string;
+    afterId: string | null;
+}
+/** Remove `id`. No-op when absent. */
+ | {
+    op: 'remove';
+    id: string;
+}
+/** Reposition `id` after `afterId` (`null` = at the head). No-op when `id` is absent (a concurrent remove wins). */
+ | {
+    op: 'move';
+    id: string;
+    afterId: string | null;
+};
+export type ArrayMembershipUpdate = {
+    /** The record whose array column is being updated. */
+    recordId: string;
+    /** Property name of the `ReferenceArrayColumn` on the table. */
+    columnPropertyName: string;
+    /** Ops applied in order against the committed id list. */
+    ops: ArrayMembershipOp[];
+};
+/**
+ * Apply membership ops to an id list. Pure; returns a new array and whether it
+ * differs from the input.
+ *
+ * Anchor resolution (`afterId`) against a diverged committed list is
+ * convergence-by-anchor: a missing anchor appends at the end (the anchor was
+ * concurrently removed — the element still lands in the list, order is
+ * best-effort), `afterId: null` inserts at the head.
+ */
+export declare function applyArrayMembershipOps(currentIds: string[], ops: ArrayMembershipOp[]): {
+    ids: string[];
+    changed: boolean;
+};
+/**
+ * Compute the op set that transforms `beforeIds` into `afterIds`.
+ *
+ * Removes first, then a single walk of `afterIds` emitting `add` for new
+ * elements and `move` for surviving elements whose relative order changed.
+ * Moves are minimized via the longest increasing subsequence of surviving
+ * elements (elements on the LIS stay put; everything else moves). Replaying
+ * the result on `beforeIds` yields exactly `afterIds`; replaying it on a
+ * DIVERGED committed list converges by anchor instead of clobbering.
+ */
+export declare function computeArrayMembershipOps(beforeIds: string[], afterIds: string[]): ArrayMembershipOp[];
+//# sourceMappingURL=ArrayMembershipOps.d.ts.map

package/dist/src/reference/ArrayMembershipOps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArrayMembershipOps.d.ts","sourceRoot":"","sources":["../../../src/reference/ArrayMembershipOps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,iBAAiB;AAC3B,yGAAyG;AACvG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACnD,sCAAsC;GACpC;IAAE,EAAE,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE;AAC9B,oHAAoH;GAClH;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEvD,MAAM,MAAM,qBAAqB,GAAG;IAClC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,GAAG,EAAE,iBAAiB,EAAE,CAAC;CAC1B,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAAE,EACpB,GAAG,EAAE,iBAAiB,EAAE,GACvB;IAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAmCrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAiB,EAAE,CA8BtG"}

package/dist/src/reference/ArrayMembershipOps.js

@@ -0,0 +1,146 @@
+"use strict";
+/**
+ * Commutative membership operations for `ReferenceArrayColumn` values.
+ *
+ * Motivation (the write-side lost-update class): a client writer that persists a
+ * reference-array column as a FULL ID LIST snapshots its in-memory state — when two
+ * such writes race (fire-and-forget issuance + driver-level abort/retry can commit
+ * an earlier-issued transaction later), the last commit wins wholesale and erases
+ * the other writer's committed membership change. Expressing membership changes as
+ * ops (add/remove/move) applied read-modify-write against COMMITTED truth inside a
+ * transaction makes concurrent writes converge instead of clobber:
+ * `remove(x)` + `remove(y)` in any commit order removes both; `add(x)` + `add(y)`
+ * keeps both.
+ *
+ * `applyArrayMembershipOps` is the single applier used by `Db.updateArrayMembership`
+ * (server-side RMW) — and by any test that needs the committed rule as importable
+ * truth. `computeArrayMembershipOps` derives the minimal op set from a
+ * before/after id-list pair, for callers whose op layer only knows list states.
+ */
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeArrayMembershipOps = exports.applyArrayMembershipOps = void 0;
+/**
+ * Apply membership ops to an id list. Pure; returns a new array and whether it
+ * differs from the input.
+ *
+ * Anchor resolution (`afterId`) against a diverged committed list is
+ * convergence-by-anchor: a missing anchor appends at the end (the anchor was
+ * concurrently removed — the element still lands in the list, order is
+ * best-effort), `afterId: null` inserts at the head.
+ */
+function applyArrayMembershipOps(currentIds, ops) {
+    var ids = __spreadArray([], currentIds, true);
+    for (var _i = 0, ops_1 = ops; _i < ops_1.length; _i++) {
+        var op = ops_1[_i];
+        if (op.op === 'remove') {
+            var idx = ids.indexOf(op.id);
+            if (idx !== -1) {
+                ids.splice(idx, 1);
+            }
+            continue;
+        }
+        if (op.op === 'move' && ids.indexOf(op.id) === -1) {
+            // Move of a concurrently-removed element: the remove intent wins.
+            continue;
+        }
+        // add (insert or reposition) and move (reposition) share placement logic.
+        var existingIdx = ids.indexOf(op.id);
+        if (existingIdx !== -1) {
+            ids.splice(existingIdx, 1);
+        }
+        if (op.afterId === null) {
+            ids.unshift(op.id);
+        }
+        else {
+            var anchorIdx = ids.indexOf(op.afterId);
+            if (anchorIdx === -1) {
+                ids.push(op.id);
+            }
+            else {
+                ids.splice(anchorIdx + 1, 0, op.id);
+            }
+        }
+    }
+    var changed = ids.length !== currentIds.length || ids.some(function (id, i) { return id !== currentIds[i]; });
+    return { ids: ids, changed: changed };
+}
+exports.applyArrayMembershipOps = applyArrayMembershipOps;
+/**
+ * Compute the op set that transforms `beforeIds` into `afterIds`.
+ *
+ * Removes first, then a single walk of `afterIds` emitting `add` for new
+ * elements and `move` for surviving elements whose relative order changed.
+ * Moves are minimized via the longest increasing subsequence of surviving
+ * elements (elements on the LIS stay put; everything else moves). Replaying
+ * the result on `beforeIds` yields exactly `afterIds`; replaying it on a
+ * DIVERGED committed list converges by anchor instead of clobbering.
+ */
+function computeArrayMembershipOps(beforeIds, afterIds) {
+    var before = beforeIds;
+    var after = afterIds;
+    var beforeSet = new Set(before);
+    var afterSet = new Set(after);
+    var ops = [];
+    for (var _i = 0, before_1 = before; _i < before_1.length; _i++) {
+        var id = before_1[_i];
+        if (!afterSet.has(id)) {
+            ops.push({ op: 'remove', id: id });
+        }
+    }
+    // Surviving elements, in after-order, with their positions in `before`.
+    var surviving = after.filter(function (id) { return beforeSet.has(id); });
+    var beforeIndex = new Map(before.map(function (id, i) { return [id, i]; }));
+    var stable = longestIncreasingSubsequence(surviving.map(function (id) { return beforeIndex.get(id); }));
+    var stableIds = new Set(stable.map(function (i) { return surviving[i]; }));
+    for (var i = 0; i < after.length; i++) {
+        var id = after[i];
+        var afterId = i === 0 ? null : after[i - 1];
+        if (!beforeSet.has(id)) {
+            ops.push({ op: 'add', id: id, afterId: afterId });
+        }
+        else if (!stableIds.has(id)) {
+            ops.push({ op: 'move', id: id, afterId: afterId });
+        }
+    }
+    return ops;
+}
+exports.computeArrayMembershipOps = computeArrayMembershipOps;
+/** Indices (into the input array) of one longest strictly-increasing subsequence. */
+function longestIncreasingSubsequence(values) {
+    var tailIndices = [];
+    var prev = new Array(values.length).fill(-1);
+    for (var i = 0; i < values.length; i++) {
+        var lo = 0;
+        var hi = tailIndices.length;
+        while (lo < hi) {
+            var mid = (lo + hi) >> 1;
+            if (values[tailIndices[mid]] < values[i]) {
+                lo = mid + 1;
+            }
+            else {
+                hi = mid;
+            }
+        }
+        if (lo > 0) {
+            prev[i] = tailIndices[lo - 1];
+        }
+        tailIndices[lo] = i;
+    }
+    var result = [];
+    var k = tailIndices.length > 0 ? tailIndices[tailIndices.length - 1] : -1;
+    while (k !== -1) {
+        result.unshift(k);
+        k = prev[k];
+    }
+    return result;
+}
+//# sourceMappingURL=ArrayMembershipOps.js.map

package/dist/src/reference/ArrayMembershipOps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArrayMembershipOps.js","sourceRoot":"","sources":["../../../src/reference/ArrayMembershipOps.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;AAmBH;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CACrC,UAAoB,EACpB,GAAwB;IAExB,IAAM,GAAG,qBAAO,UAAU,OAAC,CAAC;IAC5B,KAAiB,UAAG,EAAH,WAAG,EAAH,iBAAG,EAAH,IAAG,EAAE;QAAjB,IAAM,EAAE,YAAA;QACX,IAAI,EAAE,CAAC,EAAE,KAAK,QAAQ,EAAE;YACtB,IAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACpB;YACD,SAAS;SACV;QAED,IAAI,EAAE,CAAC,EAAE,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE;YACjD,kEAAkE;YAClE,SAAS;SACV;QAED,0EAA0E;QAC1E,IAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE;YACtB,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;SAC5B;QACD,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI,EAAE;YACvB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SACpB;aAAM;YACL,IAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE;gBACpB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;aACjB;iBAAM;gBACL,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;aACrC;SACF;KACF;IAED,IAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,UAAC,EAAE,EAAE,CAAC,IAAK,OAAA,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,EAApB,CAAoB,CAAC,CAAC;IAC9F,OAAO,EAAE,GAAG,KAAA,EAAE,OAAO,SAAA,EAAE,CAAC;AAC1B,CAAC;AAtCD,0DAsCC;AAED;;;;;;;;;GASG;AACH,SAAgB,yBAAyB,CAAC,SAAmB,EAAE,QAAkB;IAC/E,IAAM,MAAM,GAAG,SAAS,CAAC;IACzB,IAAM,KAAK,GAAG,QAAQ,CAAC;IACvB,IAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,IAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAiB,UAAM,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;QAApB,IAAM,EAAE,eAAA;QACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACrB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAA,EAAE,CAAC,CAAC;SAChC;KACF;IAED,wEAAwE;IACxE,IAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,UAAC,EAAE,IAAK,OAAA,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAjB,CAAiB,CAAC,CAAC;IAC1D,IAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAC,EAAE,EAAE,CAAC,IAAK,OAAA,CAAC,EAAE,EAAE,CAAC,CAAU,EAAhB,CAAgB,CAAC,CAAC,CAAC;IACrE,IAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,UAAC,EAAE,IAAK,OAAA,WAAW,CAAC,GAAG,CAAC,EAAE,CAAW,EAA7B,CAA6B,CAAC,CAAC,CAAC;IAClG,IAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,SAAS,CAAC,CAAC,CAAC,EAAZ,CAAY,CAAC,CAAC,CAAC;IAE3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACrC,IAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,IAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACtB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAA,EAAE,OAAO,SAAA,EAAE,CAAC,CAAC;SACtC;aAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAA,EAAE,OAAO,SAAA,EAAE,CAAC,CAAC;SACvC;KACF;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AA9BD,8DA8BC;AAED,qFAAqF;AACrF,SAAS,4BAA4B,CAAC,MAAgB;IACpD,IAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAM,IAAI,GAAa,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACtC,IAAI,EAAE,GAAG,CAAC,CAAC;QACX,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,GAAG,EAAE,EAAE;YACd,IAAM,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE;gBACxC,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;aACd;iBAAM;gBACL,EAAE,GAAG,GAAG,CAAC;aACV;SACF;QACD,IAAI,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;SAC/B;QACD,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;KACrB;IACD,IAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;QACf,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;KACb;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/services/DbService.d.ts

@@ -2,6 +2,8 @@ import { Service } from '@proteinjs/service';
 import { Table } from '../Table';
 import { Record } from '../Record';
 import { QueryBuilder } from '@proteinjs/db-query';
+import { ArrayMembershipUpdate } from '../reference/ArrayMembershipOps';
+import { PreservedPath } from '../UpdatePreserving';
 export declare const getDbService: () => DbService<Record>;
 export type Query<T> = ObjectQuery<T> | QueryBuilder<T>;
 export type ObjectQuery<T> = Partial<{
@@ -25,6 +27,42 @@ export interface DbService<R extends Record = Record> extends Service {
     get<T extends R>(table: Table<T>, query: Query<T>, options?: QueryOptions<T>): Promise<T>;
     insert<T extends R>(table: Table<T>, record: Omit<T, keyof R>): Promise<T>;
     update<T extends R>(table: Table<T>, record: Partial<T>, query?: Query<T>): Promise<number>;
+    /**
+     * Apply commutative membership ops (add/remove/move) to a `ReferenceArrayColumn`,
+     * read-modify-write against COMMITTED truth inside a server-side transaction, so concurrent
+     * membership writers converge instead of last-write-wins clobbering each other (the
+     * write-side lost-update class).
+     *
+     * Use when the column has a NAMED multi-writer split — more than one writer changes the
+     * list's membership concurrently. Use plain `update` when the column has a single writer,
+     * or when the intent genuinely is wholesale assignment of the entire list.
+     *
+     * Authorization is identical to `update`: the table's `update` grant gates the call, and
+     * scoped/column query injection applies to the server-side read-modify-write — a scoped
+     * caller can only touch rows they could already update (an out-of-scope record behaves as
+     * nonexistent: returns 0).
+     *
+     * @returns the update count (0 when the ops are a no-op against committed truth, or the
+     * record does not exist / is not visible to the caller)
+     */
+    updateArrayMembership<T extends R>(table: Table<T>, update: ArrayMembershipUpdate): Promise<number>;
+    /**
+     * Update with committed-truth preservation for column sub-paths the writer does not own:
+     * the payload's listed paths are overlaid with their committed values (read in the same
+     * server-side transaction), so this write commutes with the writers that own those paths.
+     * Plain-JSON columns only.
+     *
+     * Use when ownership of a column's VALUE is split across writers by sub-path (e.g. a
+     * structural editor op writes an object's styling while a debounced text save owns
+     * `content` — the structural payload's `content` is stale by construction). Use plain
+     * `update` when the writer owns the whole value it writes.
+     *
+     * Authorization is identical to `update` (update grant, scoped/column query injection,
+     * `serviceProtectedColumns` enforced on the payload).
+     *
+     * @returns the update count (0 when the record does not exist / is not visible to the caller)
+     */
+    updatePreserving<T extends R>(table: Table<T>, record: Partial<T>, preserve: PreservedPath[]): Promise<number>;
     delete<T extends R>(table: Table<T>, query: Query<T>): Promise<number>;
     query<T extends R>(table: Table<T>, query: Query<T>, options?: QueryOptions<T>): Promise<T[]>;
     getRowCount<T extends R>(table: Table<T>, query?: Query<T>): Promise<number>;

package/dist/src/services/DbService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DbService.d.ts","sourceRoot":"","sources":["../../../src/services/DbService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAkB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,eAAO,MAAM,YAAY,yBAAuD,CAAC;AAEjF,MAAM,MAAM,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG;CAAE,CAAC,CAAC;AAC9D,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI;IAC5B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;KAAE,CAAC;CAC5G,CAAC;AAEF,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,OAAO;IACnE,WAAW,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,WAAW,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9E"}
+{"version":3,"file":"DbService.d.ts","sourceRoot":"","sources":["../../../src/services/DbService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAkB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,eAAO,MAAM,YAAY,yBAAuD,CAAC;AAEjF,MAAM,MAAM,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG;CAAE,CAAC,CAAC;AAC9D,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI;IAC5B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;KAAE,CAAC;CAC5G,CAAC;AAEF,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,OAAO;IACnE,WAAW,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F;;;;;;;;;;;;;;;;;OAiBG;IACH,qBAAqB,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpG;;;;;;;;;;;;;;;OAeG;IACH,gBAAgB,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/G,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,WAAW,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9E"}

package/dist/src/services/DbService.js.map

@@ -1 +1 @@
-{"version":3,"file":"DbService.js","sourceRoot":"","sources":["../../../src/services/DbService.ts"],"names":[],"mappings":";;;AAAA,8CAA6D;AAKhD,QAAA,YAAY,GAAG,IAAA,wBAAc,EAAY,yBAAyB,CAAC,CAAC"}
+{"version":3,"file":"DbService.js","sourceRoot":"","sources":["../../../src/services/DbService.ts"],"names":[],"mappings":";;;AAAA,8CAA6D;AAOhD,QAAA,YAAY,GAAG,IAAA,wBAAc,EAAY,yBAAyB,CAAC,CAAC"}

package/dist/src/transaction/Transaction.d.ts

@@ -1,14 +1,16 @@
 import { Record } from '../Record';
 import { DbService } from '../services/DbService';
 import { Table } from '../Table';
+import { ArrayMembershipUpdate } from '../reference/ArrayMembershipOps';
+import { PreservedPath } from '../UpdatePreserving';
 export type OperationQueue<R extends Record = Record> = {
     insert: (...args: Parameters<DbService<R>['insert']>) => Promise<R>;
     update: (...args: Parameters<DbService<R>['update']>) => void;
     delete: (...args: Parameters<DbService<R>['delete']>) => void;
 };
 export type Operation<R extends Record = Record> = {
-    name: 'insert' | 'update' | 'delete';
-    args: Parameters<DbService<R>['insert']> | Parameters<DbService<R>['update']> | Parameters<DbService<R>['delete']>;
+    name: 'insert' | 'update' | 'delete' | 'updateArrayMembership' | 'updatePreserving';
+    args: Parameters<DbService<R>['insert']> | Parameters<DbService<R>['update']> | Parameters<DbService<R>['delete']> | [Table<any>, ArrayMembershipUpdate] | [Table<any>, Partial<R>, PreservedPath[]];
 };
 /**
  * A queue of db write operations that are executed sequentially (not batched) as a single transaction when `run` is called.
@@ -61,6 +63,21 @@ export declare class Transaction implements OperationQueue {
      * Passing in an `ObjectQuery` or a `QueryBuilder` with a `id IN string[]` condition will update the cached `db`.
      */
     delete<R extends Record = Record>(...args: Parameters<DbService<R>['delete']>): void;
+    /**
+     * Queue a commutative array-membership update (see `Db.updateArrayMembership`).
+     *
+     * The op is applied read-modify-write against COMMITTED truth server-side, so it
+     * does not touch the local record cache (the caller's in-memory state is the
+     * client-side truth and was already mutated by the operation that queued this);
+     * `onUpdate` listeners do not fire for membership ops.
+     */
+    updateArrayMembership(table: Table<any>, update: ArrayMembershipUpdate): void;
+    /**
+     * Queue an update with committed-truth preservation for the listed column
+     * sub-paths (see `Db.updatePreserving`). Cache semantics match `update`
+     * for the provided fields; the preservation itself happens server-side.
+     */
+    updatePreserving<R extends Record = Record>(table: Table<R>, record: Partial<R>, preserve: PreservedPath[]): void;
     /**
      * If a QueryBuilder contains a condition like this:
      *  `{ field: 'id', operator: 'IN', value: string[] }`

package/dist/src/transaction/Transaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Transaction.d.ts","sourceRoot":"","sources":["../../../src/transaction/Transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,SAAS,EAAe,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAyB,KAAK,EAAE,MAAM,UAAU,CAAC;AAIxD,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACtD,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC;IAC9D,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACjD,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACrC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;CACpH,CAAC;AAIF;;;;;;GAMG;AACH,qBAAa,WAAY,YAAW,cAAc;IAY9C,OAAO,CAAC,QAAQ,CAAC;IACjB,OAAO,CAAC,QAAQ,CAAC;IACjB,OAAO,CAAC,QAAQ,CAAC;IAbnB,8EAA8E;IAC9E,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAM;IAE3B;;;;OAIG;IACH,EAAE,EAAE;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG;YAAE,CAAC,EAAE,EAAE,MAAM,GAAG,GAAG,CAAA;SAAE,CAAA;KAAE,CAAM;gBAG1C,QAAQ,CAAC,WAAU,MAAM,GAAG,CAAC,UAAU,GAAG,KAAK,IAAI,aAAA,EACnD,QAAQ,CAAC,WAAU,MAAM,GAAG,CAAC,cAAc,GAAG,iBAAiB,GAAG,KAAK,IAAI,aAAA,EAC3E,QAAQ,CAAC,WAAU,MAAM,GAAG,CAAC,UAAU,GAAG,KAAK,IAAI,aAAA;IAG7D;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM;;;IAQvB;;OAEG;IACG,MAAM,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAmBhG;;;;;;;;OAQG;IACH,MAAM,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI;IAwDpF;;;;;OAKG;IACH,MAAM,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI;IAoCpF;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IA6B7B;;OAEG;IACG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAS3B"}
+{"version":3,"file":"Transaction.d.ts","sourceRoot":"","sources":["../../../src/transaction/Transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,SAAS,EAAe,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAyB,KAAK,EAAE,MAAM,UAAU,CAAC;AAGxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACtD,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC;IAC9D,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACjD,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,uBAAuB,GAAG,kBAAkB,CAAC;IACpF,IAAI,EACA,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAClC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAClC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAClC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC,GACnC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;CAC/C,CAAC;AAIF;;;;;;GAMG;AACH,qBAAa,WAAY,YAAW,cAAc;IAY9C,OAAO,CAAC,QAAQ,CAAC;IACjB,OAAO,CAAC,QAAQ,CAAC;IACjB,OAAO,CAAC,QAAQ,CAAC;IAbnB,8EAA8E;IAC9E,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAM;IAE3B;;;;OAIG;IACH,EAAE,EAAE;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG;YAAE,CAAC,EAAE,EAAE,MAAM,GAAG,GAAG,CAAA;SAAE,CAAA;KAAE,CAAM;gBAG1C,QAAQ,CAAC,WAAU,MAAM,GAAG,CAAC,UAAU,GAAG,KAAK,IAAI,aAAA,EACnD,QAAQ,CAAC,WAAU,MAAM,GAAG,CAAC,cAAc,GAAG,iBAAiB,GAAG,KAAK,IAAI,aAAA,EAC3E,QAAQ,CAAC,WAAU,MAAM,GAAG,CAAC,UAAU,GAAG,KAAK,IAAI,aAAA;IAG7D;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM;;;IAQvB;;OAEG;IACG,MAAM,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAmBhG;;;;;;;;OAQG;IACH,MAAM,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI;IAwDpF;;;;;OAKG;IACH,MAAM,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI;IAoCpF;;;;;;;OAOG;IACH,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,qBAAqB,GAAG,IAAI;IAQ7E;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI;IAsBjH;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IA6B7B;;OAEG;IACG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAS3B"}