@proteinjs/db 1.55.1 → 1.57.0

package/dist/test/reusable/TableWatcherAuthorityTests.js

@@ -0,0 +1,392 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tableWatcherAuthorityTests = exports.HOOK_HANDED_NO_DB = void 0;
+var db_1 = require("@proteinjs/db");
+var reflection_1 = require("@proteinjs/reflection");
+var DbTestEnvironment_1 = require("../util/DbTestEnvironment");
+var TableWatcherRunner_1 = require("../../src/TableWatcherRunner");
+var tableWatcherAuthorityTestTables_1 = require("../util/tables/tableWatcherAuthorityTestTables");
+var objectCache = function () { return reflection_1.SourceRepository.get().objectCache; };
+var resetTableWatcherMap = function () {
+    TableWatcherRunner_1.TableWatcherRunner.tableWatcherMap = undefined;
+};
+/** The watcher's refusal when a hook arrives without the write's Db — the contract's first half. */
+exports.HOOK_HANDED_NO_DB = 'the hook was handed no Db';
+var HOOKS = ['beforeInsert', 'afterInsert', 'beforeUpdate', 'afterUpdate', 'beforeDelete', 'afterDelete'];
+/**
+ * Journals every hook run through the HANDED Db and nothing else — the way a watcher is written
+ * once the Db hands one (chat's topic watcher deleting a deleted message's topic links, the media
+ * watcher deleting a deleted row's file, the activity watcher bumping the chat a message landed
+ * in). The journal is a guarded table, so the hook's write and read succeed only with a system
+ * Db: the one the write made, carrying its own authority.
+ */
+var JournalingWatcher = /** @class */ (function () {
+    function JournalingWatcher() {
+    }
+    JournalingWatcher.prototype.name = function () {
+        return 'JournalingWatcher';
+    };
+    JournalingWatcher.prototype.table = function () {
+        return tableWatcherAuthorityTestTables_1.tableWatcherAuthorityTestTables.WatchedNote;
+    };
+    JournalingWatcher.prototype.beforeInsert = function (record, db) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.journal(db, record.id, 'beforeInsert')];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/, record];
+                }
+            });
+        });
+    };
+    JournalingWatcher.prototype.afterInsert = function (record, db) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.journal(db, record.id, 'afterInsert')];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    JournalingWatcher.prototype.beforeUpdate = function (record, qb, db) {
+        return __awaiter(this, void 0, void 0, function () {
+            var _i, _a, row;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _i = 0;
+                        return [4 /*yield*/, this.handed(db).query(this.table(), qb)];
+                    case 1:
+                        _a = _b.sent();
+                        _b.label = 2;
+                    case 2:
+                        if (!(_i < _a.length)) return [3 /*break*/, 5];
+                        row = _a[_i];
+                        return [4 /*yield*/, this.journal(db, row.id, 'beforeUpdate')];
+                    case 3:
+                        _b.sent();
+                        _b.label = 4;
+                    case 4:
+                        _i++;
+                        return [3 /*break*/, 2];
+                    case 5: return [2 /*return*/, record];
+                }
+            });
+        });
+    };
+    JournalingWatcher.prototype.afterUpdate = function (recordUpdateCount, record, qb, db) {
+        return __awaiter(this, void 0, void 0, function () {
+            var _i, _a, row;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _i = 0;
+                        return [4 /*yield*/, this.handed(db).query(this.table(), qb)];
+                    case 1:
+                        _a = _b.sent();
+                        _b.label = 2;
+                    case 2:
+                        if (!(_i < _a.length)) return [3 /*break*/, 5];
+                        row = _a[_i];
+                        return [4 /*yield*/, this.journal(db, row.id, 'afterUpdate')];
+                    case 3:
+                        _b.sent();
+                        _b.label = 4;
+                    case 4:
+                        _i++;
+                        return [3 /*break*/, 2];
+                    case 5: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    JournalingWatcher.prototype.beforeDelete = function (recordsToDelete, _initialQb, _deleteQb, db) {
+        return __awaiter(this, void 0, void 0, function () {
+            var _i, recordsToDelete_1, row;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        _i = 0, recordsToDelete_1 = recordsToDelete;
+                        _a.label = 1;
+                    case 1:
+                        if (!(_i < recordsToDelete_1.length)) return [3 /*break*/, 4];
+                        row = recordsToDelete_1[_i];
+                        return [4 /*yield*/, this.journal(db, row.id, 'beforeDelete')];
+                    case 2:
+                        _a.sent();
+                        _a.label = 3;
+                    case 3:
+                        _i++;
+                        return [3 /*break*/, 1];
+                    case 4: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    JournalingWatcher.prototype.afterDelete = function (_recordDeleteCount, deletedRecords, _initialQb, _deleteQb, db) {
+        return __awaiter(this, void 0, void 0, function () {
+            var _i, deletedRecords_1, row;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        _i = 0, deletedRecords_1 = deletedRecords;
+                        _a.label = 1;
+                    case 1:
+                        if (!(_i < deletedRecords_1.length)) return [3 /*break*/, 5];
+                        row = deletedRecords_1[_i];
+                        return [4 /*yield*/, this.journal(db, row.id, 'afterDelete')];
+                    case 2:
+                        _a.sent();
+                        // The read half of the contract: a query through the handed Db over the guarded table.
+                        return [4 /*yield*/, this.handed(db).query(tableWatcherAuthorityTestTables_1.tableWatcherAuthorityTestTables.GuardedJournal, { note: row.id })];
+                    case 3:
+                        // The read half of the contract: a query through the handed Db over the guarded table.
+                        _a.sent();
+                        _a.label = 4;
+                    case 4:
+                        _i++;
+                        return [3 /*break*/, 1];
+                    case 5: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    JournalingWatcher.prototype.journal = function (db, note, hook) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.handed(db).insert(tableWatcherAuthorityTestTables_1.tableWatcherAuthorityTestTables.GuardedJournal, {
+                            note: note,
+                            hook: hook,
+                            principal: 'the write',
+                        })];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    JournalingWatcher.prototype.handed = function (db) {
+        if (!db) {
+            throw new Error(exports.HOOK_HANDED_NO_DB);
+        }
+        return db;
+    };
+    return JournalingWatcher;
+}());
+/**
+ * A table watcher's hooks run with the authority of the write that fired them: the Db hands every
+ * hook a Db carrying its driver, tables, transaction context and system mode. Before this the
+ * hooks were handed nothing and each watcher opened a session-scoped Db of its own, which a system
+ * write in a session-less context (an account purge, a sweep) could not use — the topic links of a
+ * purged message and the file of a system-deleted media row stayed behind, and the activity bump
+ * of a system-inserted message threw.
+ */
+var tableWatcherAuthorityTests = function (driver, transactionContextFactory, dropTable) {
+    return function () {
+        var testEnv = new DbTestEnvironment_1.DbTestEnvironment(driver, dropTable);
+        var notes = tableWatcherAuthorityTestTables_1.tableWatcherAuthorityTestTables.WatchedNote;
+        var journal = tableWatcherAuthorityTestTables_1.tableWatcherAuthorityTestTables.GuardedJournal;
+        // Constructed in beforeAll, AFTER the watcher registration below: a Db's construction builds
+        // the runner's static watcher map, and the map must be built from the registered watcher.
+        var systemDb;
+        var sessionDb;
+        var originalWatchers;
+        /** A fresh async hop — the shape of a background context that inherits no caller's state. */
+        var inFreshContext = function (fn) {
+            return new Promise(function (resolve, reject) {
+                setImmediate(function () {
+                    fn().then(resolve, reject);
+                });
+            });
+        };
+        var journalHooksFor = function (noteId) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, systemDb.query(journal, { note: noteId })];
+                case 1: return [2 /*return*/, (_a.sent()).map(function (row) { return row.hook; }).sort()];
+            }
+        }); }); };
+        beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        originalWatchers = objectCache()['@proteinjs/db/TableWatcher'];
+                        objectCache()['@proteinjs/db/TableWatcher'] = [new JournalingWatcher()];
+                        resetTableWatcherMap();
+                        systemDb = new db_1.Db(driver, undefined, transactionContextFactory, true);
+                        sessionDb = new db_1.Db(driver, undefined, transactionContextFactory);
+                        return [4 /*yield*/, testEnv.beforeAll()];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        }); }, 120000);
+        afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, testEnv.afterAll()];
+                    case 1:
+                        _a.sent();
+                        if (originalWatchers) {
+                            objectCache()['@proteinjs/db/TableWatcher'] = originalWatchers;
+                        }
+                        else {
+                            delete objectCache()['@proteinjs/db/TableWatcher'];
+                        }
+                        resetTableWatcherMap();
+                        return [2 /*return*/];
+                }
+            });
+        }); }, 120000);
+        beforeEach(function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, systemDb.delete(journal, {})];
+                    case 1:
+                        _a.sent();
+                        return [4 /*yield*/, systemDb.delete(notes, {})];
+                    case 2:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        describe('Table watchers carry the write’s authority', function () {
+            test('a system insert, update and delete in a session-less context: all six hooks write and read the guarded journal through the handed Db', function () { return __awaiter(void 0, void 0, void 0, function () {
+                var noteId, _a, _b;
+                return __generator(this, function (_c) {
+                    switch (_c.label) {
+                        case 0: return [4 /*yield*/, inFreshContext(function () { return __awaiter(void 0, void 0, void 0, function () {
+                                var note;
+                                return __generator(this, function (_a) {
+                                    switch (_a.label) {
+                                        case 0: return [4 /*yield*/, systemDb.insert(notes, { title: 'Kept' })];
+                                        case 1:
+                                            note = _a.sent();
+                                            return [4 /*yield*/, systemDb.update(notes, { title: 'Kept, renamed' }, { id: note.id })];
+                                        case 2:
+                                            _a.sent();
+                                            return [4 /*yield*/, systemDb.delete(notes, { id: note.id })];
+                                        case 3:
+                                            _a.sent();
+                                            return [2 /*return*/, note.id];
+                                    }
+                                });
+                            }); })];
+                        case 1:
+                            noteId = _c.sent();
+                            _a = expect;
+                            return [4 /*yield*/, systemDb.query(notes, { id: noteId })];
+                        case 2:
+                            _a.apply(void 0, [_c.sent()]).toHaveLength(0);
+                            _b = expect;
+                            return [4 /*yield*/, journalHooksFor(noteId)];
+                        case 3:
+                            _b.apply(void 0, [_c.sent()]).toEqual(__spreadArray([], HOOKS, true).sort());
+                            return [2 /*return*/];
+                    }
+                });
+            }); });
+            test('a session write’s hooks run as the session, never as system: the guarded journal refuses the first hook and the write with it', function () { return __awaiter(void 0, void 0, void 0, function () {
+                var _a;
+                return __generator(this, function (_b) {
+                    switch (_b.label) {
+                        case 0: return [4 /*yield*/, expect(sessionDb.insert(notes, { title: 'Refused' })).rejects.toThrow(tableWatcherAuthorityTestTables_1.WATCHER_GUARDED_REFUSAL)];
+                        case 1:
+                            _b.sent();
+                            _a = expect;
+                            return [4 /*yield*/, systemDb.query(notes, { title: 'Refused' })];
+                        case 2:
+                            _a.apply(void 0, [_b.sent()]).toHaveLength(0);
+                            return [2 /*return*/];
+                    }
+                });
+            }); });
+            test('the handed Db rides the write’s transaction: a rolled-back system insert leaves no journal row', function () { return __awaiter(void 0, void 0, void 0, function () {
+                var noteId, _a, _b;
+                return __generator(this, function (_c) {
+                    switch (_c.label) {
+                        case 0: return [4 /*yield*/, expect(systemDb.runTransaction(function () { return __awaiter(void 0, void 0, void 0, function () {
+                                var note;
+                                return __generator(this, function (_a) {
+                                    switch (_a.label) {
+                                        case 0: return [4 /*yield*/, systemDb.insert(notes, { title: 'Rolled back' })];
+                                        case 1:
+                                            note = _a.sent();
+                                            noteId = note.id;
+                                            throw new Error('roll back');
+                                    }
+                                });
+                            }); })).rejects.toThrow('roll back')];
+                        case 1:
+                            _c.sent();
+                            expect(noteId).toBeDefined();
+                            _a = expect;
+                            return [4 /*yield*/, systemDb.query(notes, { id: noteId })];
+                        case 2:
+                            _a.apply(void 0, [_c.sent()]).toHaveLength(0);
+                            _b = expect;
+                            return [4 /*yield*/, journalHooksFor(noteId)];
+                        case 3:
+                            _b.apply(void 0, [_c.sent()]).toEqual([]);
+                            return [2 /*return*/];
+                    }
+                });
+            }); });
+        });
+    };
+};
+exports.tableWatcherAuthorityTests = tableWatcherAuthorityTests;
+//# sourceMappingURL=TableWatcherAuthorityTests.js.map

package/dist/test/reusable/TableWatcherAuthorityTests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TableWatcherAuthorityTests.js","sourceRoot":"","sources":["../../../test/reusable/TableWatcherAuthorityTests.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAAoG;AAEpG,oDAAyD;AACzD,+DAA8D;AAC9D,mEAAkE;AAClE,kGAKwD;AAIxD,IAAM,WAAW,GAAG,cAAM,OAAC,6BAAgB,CAAC,GAAG,EAA2C,CAAC,WAAW,EAA5E,CAA4E,CAAC;AACvG,IAAM,oBAAoB,GAAG;IAC1B,uCAA2D,CAAC,eAAe,GAAG,SAAS,CAAC;AAC3F,CAAC,CAAC;AAEF,oGAAoG;AACvF,QAAA,iBAAiB,GAAG,2BAA2B,CAAC;AAE7D,IAAM,KAAK,GAAG,CAAC,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AAE5G;;;;;;GAMG;AACH;IAAA;IA8EA,CAAC;IA7EC,gCAAI,GAAJ;QACE,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,iCAAK,GAAL;QACE,OAAO,iEAA+B,CAAC,WAAW,CAAC;IACrD,CAAC;IAEK,wCAAY,GAAlB,UACE,MAAkC,EAClC,EAAO;;;;4BAEP,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAG,MAAiC,CAAC,EAAE,EAAE,cAAc,CAAC,EAAA;;wBAA7E,SAA6E,CAAC;wBAC9E,sBAAO,MAAM,EAAC;;;;KACf;IAEK,uCAAW,GAAjB,UAAyC,MAAS,EAAE,EAAO;;;;4BACzD,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,EAAA;;wBAAhD,SAAgD,CAAC;;;;;KAClD;IAEK,wCAAY,GAAlB,UAA0C,MAAkB,EAAE,EAAmB,EAAE,EAAO;;;;;;8BACe;wBAArF,qBAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAA0C,CAAC,EAAA;;wBAArF,KAAA,SAAqF;;;6BAArF,CAAA,cAAqF,CAAA;wBAA5F,GAAG;wBACZ,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,EAAA;;wBAA9C,SAA8C,CAAC;;;wBAD/B,IAAqF,CAAA;;4BAGvG,sBAAO,MAAM,EAAC;;;;KACf;IAEK,uCAAW,GAAjB,UACE,iBAAyB,EACzB,MAAkB,EAClB,EAAmB,EACnB,EAAO;;;;;;8BAEgG;wBAArF,qBAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAA0C,CAAC,EAAA;;wBAArF,KAAA,SAAqF;;;6BAArF,CAAA,cAAqF,CAAA;wBAA5F,GAAG;wBACZ,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,EAAA;;wBAA7C,SAA6C,CAAC;;;wBAD9B,IAAqF,CAAA;;;;;;KAGxG;IAEK,wCAAY,GAAlB,UACE,eAAoB,EACpB,UAA2B,EAC3B,SAA0B,EAC1B,EAAO;;;;;;8BAE0B,EAAf,mCAAe;;;6BAAf,CAAA,6BAAe,CAAA;wBAAtB,GAAG;wBACZ,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,EAAA;;wBAA9C,SAA8C,CAAC;;;wBAD/B,IAAe,CAAA;;;;;;KAGlC;IAEK,uCAAW,GAAjB,UACE,kBAA0B,EAC1B,cAAmB,EACnB,UAA2B,EAC3B,SAA0B,EAC1B,EAAO;;;;;;8BAEyB,EAAd,iCAAc;;;6BAAd,CAAA,4BAAc,CAAA;wBAArB,GAAG;wBACZ,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,EAAA;;wBAA7C,SAA6C,CAAC;wBAC9C,uFAAuF;wBACvF,qBAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,iEAA+B,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAA;;wBAD7F,uFAAuF;wBACvF,SAA6F,CAAC;;;wBAH9E,IAAc,CAAA;;;;;;KAKjC;IAEa,mCAAO,GAArB,UAAsB,EAAkB,EAAE,IAAY,EAAE,IAAY;;;;4BAClE,qBAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,iEAA+B,CAAC,cAAc,EAAE;4BAC3E,IAAI,MAAA;4BACJ,IAAI,MAAA;4BACJ,SAAS,EAAE,WAAW;yBACvB,CAAC,EAAA;;wBAJF,SAIE,CAAC;;;;;KACJ;IAEO,kCAAM,GAAd,UAAe,EAAkB;QAC/B,IAAI,CAAC,EAAE,EAAE;YACP,MAAM,IAAI,KAAK,CAAC,yBAAiB,CAAC,CAAC;SACpC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACH,wBAAC;AAAD,CAAC,AA9ED,IA8EC;AAED;;;;;;;GAOG;AACI,IAAM,0BAA0B,GAAG,UACxC,MAAgB,EAChB,yBAA2D,EAC3D,SAA+C;IAE/C,OAAO;QACL,IAAM,OAAO,GAAG,IAAI,qCAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzD,IAAM,KAAK,GAAG,iEAA+B,CAAC,WAAW,CAAC;QAC1D,IAAM,OAAO,GAAG,iEAA+B,CAAC,cAAc,CAAC;QAC/D,6FAA6F;QAC7F,0FAA0F;QAC1F,IAAI,QAAY,CAAC;QACjB,IAAI,SAAa,CAAC;QAClB,IAAI,gBAAuC,CAAC;QAE5C,6FAA6F;QAC7F,IAAM,cAAc,GAAG,UAAI,EAAoB;YAC7C,OAAA,IAAI,OAAO,CAAI,UAAC,OAAO,EAAE,MAAM;gBAC7B,YAAY,CAAC;oBACX,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC7B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;QAJF,CAIE,CAAC;QAEL,IAAM,eAAe,GAAG,UAAO,MAAc;;wBAC1C,qBAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAA;wBAAhD,sBAAA,CAAC,SAA+C,CAAC,CAAC,GAAG,CAAC,UAAC,GAAmB,IAAK,OAAA,GAAG,CAAC,IAAI,EAAR,CAAQ,CAAC,CAAC,IAAI,EAAE,EAAA;;iBAAA,CAAC;QAElG,SAAS,CAAC;;;;wBACR,gBAAgB,GAAG,WAAW,EAAE,CAAC,4BAA4B,CAAC,CAAC;wBAC/D,WAAW,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;wBACxE,oBAAoB,EAAE,CAAC;wBACvB,QAAQ,GAAG,IAAI,OAAE,CAAC,MAAM,EAAE,SAAS,EAAE,yBAAyB,EAAE,IAAI,CAAC,CAAC;wBACtE,SAAS,GAAG,IAAI,OAAE,CAAC,MAAM,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;wBACjE,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;wBAAzB,SAAyB,CAAC;;;;aAC3B,EAAE,MAAM,CAAC,CAAC;QAEX,QAAQ,CAAC;;;4BACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;wBAAxB,SAAwB,CAAC;wBACzB,IAAI,gBAAgB,EAAE;4BACpB,WAAW,EAAE,CAAC,4BAA4B,CAAC,GAAG,gBAAgB,CAAC;yBAChE;6BAAM;4BACL,OAAO,WAAW,EAAE,CAAC,4BAA4B,CAAC,CAAC;yBACpD;wBACD,oBAAoB,EAAE,CAAC;;;;aACxB,EAAE,MAAM,CAAC,CAAC;QAEX,UAAU,CAAC;;;4BACT,qBAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAA;;wBAAlC,SAAkC,CAAC;wBACnC,qBAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,EAAA;;wBAAhC,SAAgC,CAAC;;;;aAClC,CAAC,CAAC;QAEH,QAAQ,CAAC,4CAA4C,EAAE;YACrD,IAAI,CAAC,sIAAsI,EAAE;;;;gCAC5H,qBAAM,cAAc,CAAC;;;;gDACrB,qBAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAA;;4CAAtD,IAAI,GAAG,SAA+C;4CAC5D,qBAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAA;;4CAAzE,SAAyE,CAAC;4CAC1E,qBAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAA;;4CAA7C,SAA6C,CAAC;4CAC9C,sBAAO,IAAI,CAAC,EAAE,EAAC;;;iCAChB,CAAC,EAAA;;4BALI,MAAM,GAAG,SAKb;4BAEF,KAAA,MAAM,CAAA;4BAAC,qBAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAA;;4BAAlD,kBAAO,SAA2C,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;4BACpE,KAAA,MAAM,CAAA;4BAAC,qBAAM,eAAe,CAAC,MAAM,CAAC,EAAA;;4BAApC,kBAAO,SAA6B,EAAC,CAAC,OAAO,CAAC,kBAAI,KAAK,QAAE,IAAI,EAAE,CAAC,CAAC;;;;iBAClE,CAAC,CAAC;YAEH,IAAI,CAAC,+HAA+H,EAAE;;;;gCACpI,qBAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,yDAAuB,CAAC,EAAA;;4BAApG,SAAoG,CAAC;4BACrG,KAAA,MAAM,CAAA;4BAAC,qBAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;4BAAxD,kBAAO,SAAiD,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;;;;iBAC3E,CAAC,CAAC;YAEH,IAAI,CAAC,gGAAgG,EAAE;;;;gCAErG,qBAAM,MAAM,CACV,QAAQ,CAAC,cAAc,CAAC;;;;gDACT,qBAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAA;;4CAA7D,IAAI,GAAG,SAAsD;4CACnE,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;4CACjB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;;;iCAC9B,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAA;;4BAN9B,SAM8B,CAAC;4BAE/B,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;4BAC7B,KAAA,MAAM,CAAA;4BAAC,qBAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAA;;4BAAlD,kBAAO,SAA2C,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;4BACpE,KAAA,MAAM,CAAA;4BAAC,qBAAM,eAAe,CAAC,MAAO,CAAC,EAAA;;4BAArC,kBAAO,SAA8B,EAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;;;;iBACpD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC,CAAC;AApFW,QAAA,0BAA0B,8BAoFrC"}

package/dist/test/util/DbTestEnvironment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DbTestEnvironment.d.ts","sourceRoot":"","sources":["../../../test/util/DbTestEnvironment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAyBhD;;GAEG;AACH,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,aAAa;gBADb,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;IAGvD,SAAS;IAaT,QAAQ;CAUf"}
+{"version":3,"file":"DbTestEnvironment.d.ts","sourceRoot":"","sources":["../../../test/util/DbTestEnvironment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA2BhD;;GAEG;AACH,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,aAAa;gBADb,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;IAGvD,SAAS;IAaT,QAAQ;CAUf"}

package/dist/test/util/DbTestEnvironment.js

@@ -55,11 +55,12 @@ var recordIteratorTestTables_1 = require("./tables/recordIteratorTestTables");
 var sourceRecordSyncTestTables_1 = require("./tables/sourceRecordSyncTestTables");
 var storedValueContractTestTables_1 = require("./tables/storedValueContractTestTables");
 var tableManagerTestTables_1 = require("./tables/tableManagerTestTables");
+var tableWatcherAuthorityTestTables_1 = require("./tables/tableWatcherAuthorityTestTables");
 var transactionTestTables_1 = require("./tables/transactionTestTables");
-var TABLES = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], Object.values(cascadeDeleteTestTables_1.cascadeDeleteTestTables), true), Object.values(columnTypesTestTables_1.columnTypesTestTables), true), Object.values(crudTestTables_1.crudTestTables), true), Object.values(dynamicReferenceColumnTestTables_1.dynamicReferenceTestTables), true), Object.values(recordIteratorTestTables_1.recordIteratorTestTables), true), Object.values(sourceRecordSyncTestTables_1.sourceRecordSyncTestTables), true), [
+var TABLES = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], Object.values(cascadeDeleteTestTables_1.cascadeDeleteTestTables), true), Object.values(columnTypesTestTables_1.columnTypesTestTables), true), Object.values(crudTestTables_1.crudTestTables), true), Object.values(dynamicReferenceColumnTestTables_1.dynamicReferenceTestTables), true), Object.values(recordIteratorTestTables_1.recordIteratorTestTables), true), Object.values(sourceRecordSyncTestTables_1.sourceRecordSyncTestTables), true), [
     // The member tables are the stored-value suite's own: it builds each physical column order itself.
     storedValueContractTestTables_1.storedValueContractTestTables.Mixed
-], false), Object.values(tableManagerTestTables_1.tableManagerTestTables), true), Object.values(transactionTestTables_1.transactionTestTables), true);
+], false), Object.values(tableManagerTestTables_1.tableManagerTestTables), true), Object.values(tableWatcherAuthorityTestTables_1.tableWatcherAuthorityTestTables), true), Object.values(transactionTestTables_1.transactionTestTables), true);
 /**
  * Convenience functions for setting up a test environment
  */

package/dist/test/util/DbTestEnvironment.js.map

@@ -1 +1 @@
-{"version":3,"file":"DbTestEnvironment.js","sourceRoot":"","sources":["../../../test/util/DbTestEnvironment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,uCAA6D;AAC7D,4EAA2E;AAC3E,wEAAuE;AACvE,0DAAyD;AACzD,8FAAuF;AACvF,8EAA6E;AAC7E,kFAAiF;AACjF,wFAAuF;AACvF,0EAAyE;AACzE,wEAAuE;AAEvE,IAAM,MAAM,qIACP,MAAM,CAAC,MAAM,CAAC,iDAAuB,CAAC,SACtC,MAAM,CAAC,MAAM,CAAC,6CAAqB,CAAC,SACpC,MAAM,CAAC,MAAM,CAAC,+BAAc,CAAC,SAC7B,MAAM,CAAC,MAAM,CAAC,6DAA0B,CAAC,SACzC,MAAM,CAAC,MAAM,CAAC,mDAAwB,CAAC,SACvC,MAAM,CAAC,MAAM,CAAC,uDAA0B,CAAC;IAC5C,mGAAmG;IACnG,6DAA6B,CAAC,KAAK;WAChC,MAAM,CAAC,MAAM,CAAC,+CAAsB,CAAC,SACrC,MAAM,CAAC,MAAM,CAAC,6CAAqB,CAAC,OACxC,CAAC;AAEF;;GAEG;AACH;IACE,2BACU,QAAkB,EAClB,aAAmD;QADnD,aAAQ,GAAR,QAAQ,CAAU;QAClB,kBAAa,GAAb,aAAa,CAAsC;IAC1D,CAAC;IAEE,qCAAS,GAAf;;;;;;wBACE,yFAAyF;wBACzF,+CAA+C;wBAC/C,IAAA,2BAAgB,GAAE,CAAC;6BACf,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAnB,wBAAmB;wBACrB,qBAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAA;;wBAA3B,SAA2B,CAAC;;;8BAGJ,EAAN,iBAAM;;;6BAAN,CAAA,oBAAM,CAAA;wBAAf,KAAK;wBACd,qBAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAA;;wBAAtD,SAAsD,CAAC;;;wBADrC,IAAM,CAAA;;;;;;KAG3B;IAEK,oCAAQ,GAAd;;;;;;wBACE,IAAA,wBAAa,GAAE,CAAC;8BACoB,EAAhB,KAAA,MAAM,CAAC,OAAO,EAAE;;;6BAAhB,CAAA,cAAgB,CAAA;wBAAzB,KAAK;wBACd,qBAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAA;;wBAA/B,SAA+B,CAAC;;;wBADd,IAAgB,CAAA;;;6BAIhC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAlB,wBAAkB;wBACpB,qBAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAA;;wBAA1B,SAA0B,CAAC;;;;;;KAE9B;IACH,wBAAC;AAAD,CAAC,AA7BD,IA6BC;AA7BY,8CAAiB"}
+{"version":3,"file":"DbTestEnvironment.js","sourceRoot":"","sources":["../../../test/util/DbTestEnvironment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,uCAA6D;AAC7D,4EAA2E;AAC3E,wEAAuE;AACvE,0DAAyD;AACzD,8FAAuF;AACvF,8EAA6E;AAC7E,kFAAiF;AACjF,wFAAuF;AACvF,0EAAyE;AACzE,4FAA2F;AAC3F,wEAAuE;AAEvE,IAAM,MAAM,mJACP,MAAM,CAAC,MAAM,CAAC,iDAAuB,CAAC,SACtC,MAAM,CAAC,MAAM,CAAC,6CAAqB,CAAC,SACpC,MAAM,CAAC,MAAM,CAAC,+BAAc,CAAC,SAC7B,MAAM,CAAC,MAAM,CAAC,6DAA0B,CAAC,SACzC,MAAM,CAAC,MAAM,CAAC,mDAAwB,CAAC,SACvC,MAAM,CAAC,MAAM,CAAC,uDAA0B,CAAC;IAC5C,mGAAmG;IACnG,6DAA6B,CAAC,KAAK;WAChC,MAAM,CAAC,MAAM,CAAC,+CAAsB,CAAC,SACrC,MAAM,CAAC,MAAM,CAAC,iEAA+B,CAAC,SAC9C,MAAM,CAAC,MAAM,CAAC,6CAAqB,CAAC,OACxC,CAAC;AAEF;;GAEG;AACH;IACE,2BACU,QAAkB,EAClB,aAAmD;QADnD,aAAQ,GAAR,QAAQ,CAAU;QAClB,kBAAa,GAAb,aAAa,CAAsC;IAC1D,CAAC;IAEE,qCAAS,GAAf;;;;;;wBACE,yFAAyF;wBACzF,+CAA+C;wBAC/C,IAAA,2BAAgB,GAAE,CAAC;6BACf,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAnB,wBAAmB;wBACrB,qBAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAA;;wBAA3B,SAA2B,CAAC;;;8BAGJ,EAAN,iBAAM;;;6BAAN,CAAA,oBAAM,CAAA;wBAAf,KAAK;wBACd,qBAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAA;;wBAAtD,SAAsD,CAAC;;;wBADrC,IAAM,CAAA;;;;;;KAG3B;IAEK,oCAAQ,GAAd;;;;;;wBACE,IAAA,wBAAa,GAAE,CAAC;8BACoB,EAAhB,KAAA,MAAM,CAAC,OAAO,EAAE;;;6BAAhB,CAAA,cAAgB,CAAA;wBAAzB,KAAK;wBACd,qBAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAA;;wBAA/B,SAA+B,CAAC;;;wBADd,IAAgB,CAAA;;;6BAIhC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAlB,wBAAkB;wBACpB,qBAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAA;;wBAA1B,SAA0B,CAAC;;;;;;KAE9B;IACH,wBAAC;AAAD,CAAC,AA7BD,IA6BC;AA7BY,8CAAiB"}

package/dist/test/util/tables/tableWatcherAuthorityTestTables.d.ts

@@ -0,0 +1,35 @@
+import { Table, Record } from '@proteinjs/db';
+/** The watched table: a plain row whose writes fire the suite's journaling watcher. */
+export interface WatchedNote extends Record {
+    title: string;
+}
+/** The watcher's journal: one row per hook run, writable and readable as system only. */
+export interface GuardedJournal extends Record {
+    /** The watched row's id. */
+    note: string;
+    /** The hook that wrote the row (`beforeInsert` … `afterDelete`). */
+    hook: string;
+    /** The scoped-table contract in miniature — see {@link GuardedJournalTable}. */
+    principal: string;
+}
+/** The journal's refusal of a non-system write or query, by name. */
+export declare const WATCHER_GUARDED_REFUSAL = "no user in scope (journal)";
+export declare class WatchedNoteTable extends Table<WatchedNote> {
+    name: string;
+    columns: Table<WatchedNote>['columns'];
+}
+/**
+ * A scoped table's shape without a dependency on one: a non-system write needs the context's
+ * user to stamp the row with, a non-system query needs it to scope the query to — there is none
+ * in a session-less context, so both refuse by name. A system write supplies the principal itself
+ * and a system query is not scoped, exactly as `@proteinjs/user`'s ScopedRecord columns behave.
+ */
+export declare class GuardedJournalTable extends Table<GuardedJournal> {
+    name: string;
+    columns: Table<GuardedJournal>['columns'];
+}
+export declare const tableWatcherAuthorityTestTables: {
+    WatchedNote: Table<WatchedNote>;
+    GuardedJournal: Table<GuardedJournal>;
+};
+//# sourceMappingURL=tableWatcherAuthorityTestTables.d.ts.map

package/dist/test/util/tables/tableWatcherAuthorityTestTables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tableWatcherAuthorityTestTables.d.ts","sourceRoot":"","sources":["../../../../test/util/tables/tableWatcherAuthorityTestTables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,EAAqB,MAAM,EAAE,MAAM,eAAe,CAAC;AAI/E,uFAAuF;AACvF,MAAM,WAAW,WAAY,SAAQ,MAAM;IACzC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAe,SAAQ,MAAM;IAC5C,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AAEpE,qBAAa,gBAAiB,SAAQ,KAAK,CAAC,WAAW,CAAC;IACtD,IAAI,SAAsB;IAC1B,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAEnC;CACJ;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,KAAK,CAAC,cAAc,CAAC;IAC5D,IAAI,SAAyB;IAC7B,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,CActC;CACJ;AAED,eAAO,MAAM,+BAA+B;;;CAG3C,CAAC"}

package/dist/test/util/tables/tableWatcherAuthorityTestTables.js

@@ -0,0 +1,113 @@
+"use strict";
+var __extends = (this && this.__extends) || (function () {
+    var extendStatics = function (d, b) {
+        extendStatics = Object.setPrototypeOf ||
+            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+        return extendStatics(d, b);
+    };
+    return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+        extendStatics(d, b);
+        function __() { this.constructor = d; }
+        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tableWatcherAuthorityTestTables = exports.GuardedJournalTable = exports.WatchedNoteTable = exports.WATCHER_GUARDED_REFUSAL = void 0;
+var db_1 = require("@proteinjs/db");
+var WATCHED_NOTE_TABLE = 'db_test_tw_notes';
+var GUARDED_JOURNAL_TABLE = 'db_test_tw_guarded_journal';
+/** The journal's refusal of a non-system write or query, by name. */
+exports.WATCHER_GUARDED_REFUSAL = 'no user in scope (journal)';
+var WatchedNoteTable = /** @class */ (function (_super) {
+    __extends(WatchedNoteTable, _super);
+    function WatchedNoteTable() {
+        var _this = _super !== null && _super.apply(this, arguments) || this;
+        _this.name = WATCHED_NOTE_TABLE;
+        _this.columns = (0, db_1.withRecordColumns)({
+            title: new db_1.StringColumn('title'),
+        });
+        return _this;
+    }
+    return WatchedNoteTable;
+}(db_1.Table));
+exports.WatchedNoteTable = WatchedNoteTable;
+/**
+ * A scoped table's shape without a dependency on one: a non-system write needs the context's
+ * user to stamp the row with, a non-system query needs it to scope the query to — there is none
+ * in a session-less context, so both refuse by name. A system write supplies the principal itself
+ * and a system query is not scoped, exactly as `@proteinjs/user`'s ScopedRecord columns behave.
+ */
+var GuardedJournalTable = /** @class */ (function (_super) {
+    __extends(GuardedJournalTable, _super);
+    function GuardedJournalTable() {
+        var _this = _super !== null && _super.apply(this, arguments) || this;
+        _this.name = GUARDED_JOURNAL_TABLE;
+        _this.columns = (0, db_1.withRecordColumns)({
+            note: new db_1.StringColumn('note'),
+            hook: new db_1.StringColumn('hook'),
+            principal: new db_1.StringColumn('principal', {
+                defaultValue: function () { return __awaiter(_this, void 0, void 0, function () {
+                    return __generator(this, function (_a) {
+                        throw new Error(exports.WATCHER_GUARDED_REFUSAL);
+                    });
+                }); },
+                forceDefaultValue: function (runAsSystem) { return !runAsSystem; },
+                addToQuery: function (qb, runAsSystem) { return __awaiter(_this, void 0, void 0, function () {
+                    return __generator(this, function (_a) {
+                        if (!runAsSystem) {
+                            throw new Error(exports.WATCHER_GUARDED_REFUSAL);
+                        }
+                        return [2 /*return*/];
+                    });
+                }); },
+            }),
+        });
+        return _this;
+    }
+    return GuardedJournalTable;
+}(db_1.Table));
+exports.GuardedJournalTable = GuardedJournalTable;
+exports.tableWatcherAuthorityTestTables = {
+    WatchedNote: new WatchedNoteTable(),
+    GuardedJournal: new GuardedJournalTable(),
+};
+//# sourceMappingURL=tableWatcherAuthorityTestTables.js.map

package/dist/test/util/tables/tableWatcherAuthorityTestTables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tableWatcherAuthorityTestTables.js","sourceRoot":"","sources":["../../../../test/util/tables/tableWatcherAuthorityTestTables.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAA+E;AAmB/E,IAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,IAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAE3D,qEAAqE;AACxD,QAAA,uBAAuB,GAAG,4BAA4B,CAAC;AAEpE;IAAsC,oCAAkB;IAAxD;QAAA,qEAKC;QAJC,UAAI,GAAG,kBAAkB,CAAC;QAC1B,aAAO,GAAkC,IAAA,sBAAiB,EAAc;YACtE,KAAK,EAAE,IAAI,iBAAY,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;;IACL,CAAC;IAAD,uBAAC;AAAD,CAAC,AALD,CAAsC,UAAK,GAK1C;AALY,4CAAgB;AAO7B;;;;;GAKG;AACH;IAAyC,uCAAqB;IAA9D;QAAA,qEAiBC;QAhBC,UAAI,GAAG,qBAAqB,CAAC;QAC7B,aAAO,GAAqC,IAAA,sBAAiB,EAAiB;YAC5E,IAAI,EAAE,IAAI,iBAAY,CAAC,MAAM,CAAC;YAC9B,IAAI,EAAE,IAAI,iBAAY,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,IAAI,iBAAY,CAAC,WAAW,EAAE;gBACvC,YAAY,EAAE;;wBACZ,MAAM,IAAI,KAAK,CAAC,+BAAuB,CAAC,CAAC;;qBAC1C;gBACD,iBAAiB,EAAE,UAAC,WAAW,IAAK,OAAA,CAAC,WAAW,EAAZ,CAAY;gBAChD,UAAU,EAAE,UAAO,EAAE,EAAE,WAAW;;wBAChC,IAAI,CAAC,WAAW,EAAE;4BAChB,MAAM,IAAI,KAAK,CAAC,+BAAuB,CAAC,CAAC;yBAC1C;;;qBACF;aACF,CAAC;SACH,CAAC,CAAC;;IACL,CAAC;IAAD,0BAAC;AAAD,CAAC,AAjBD,CAAyC,UAAK,GAiB7C;AAjBY,kDAAmB;AAmBnB,QAAA,+BAA+B,GAAG;IAC7C,WAAW,EAAE,IAAI,gBAAgB,EAAwB;IACzD,cAAc,EAAE,IAAI,mBAAmB,EAA2B;CACnE,CAAC"}