@relyio/sdk 0.18.0 → 0.19.0

package/dist/index.d.ts

@@ -1,12 +1,12 @@
-import { C as Change, a as ChangesExpiredError, V as VisitorRetry, b as ChangesExpiredReason } from './index-M3luH06A.js';
-export { A as ActiveSandbox, aC as AdhocQuery, aD as AdhocRecord, aA as AggregateMetric, aL as AssetClient, aU as AssetEntryResponse, aM as AssetFileBuilder, aS as AssetFileExtracted, aV as AssetFileWhere, b2 as AssetPlacement, aN as AssetUploadBuilder, aP as AssetVisibility, ac as AutocompleteOptions, a7 as AutocompleteResponse, a6 as AutocompleteSuggestion, as as BatchBody, at as BatchCreate, aw as BatchDelete, az as BatchDeleteTarget, an as BatchOperationResult, av as BatchReplace, ap as BatchResponse, ax as BatchSingletonWrite, ao as BatchSummary, ay as BatchTarget, au as BatchUpdate, aq as BatchWrite, ar as BatchWriteOptions, j as ChangesHeadOptions, k as ChangesOptions, W as ChildEntry, B as ChildrenListOptions, z as ChildrenOptions, X as ChildrenRead, e as ClientDefaults, f as ClientSchema, aZ as ConfirmInput, a_ as ConfirmResult, o as ContentClient, b1 as CreateAssetOptions, p as CreateEntryOptions, g as DeployedContentType, D as DeployedLocale, t as DocumentFields, G as DocumentReadOptions, u as DocumentVersion, w as DocumentVersionRow, x as DocumentVersionsOptions, y as DocumentWriteOptions, I as EntryList, E as EntryPlacement, q as EntryWriteOptions, F as FeedChange, J as FieldKey, aR as FileBackend, be as FileErrorCode, aQ as FileStatus, aT as FileStatusResult, bg as FileUploadError, bf as FileUploadErrorCode, bi as FileValidationConstraints, bh as FileValidationError, K as FreshOption, M as GetOptions, H as Health, l as LIVE_KEEPALIVE_INTERVAL_MS, m as LIVE_SOCKET_OPEN_TIMEOUT_MS, N as ListAllOptions, O as ListOptions, n as LiveChangesOptions, L as LocaleCodeOf, Q as LocaleOption, b5 as MultipartCreateResult, b6 as MultipartPart, b7 as MultipartTarget, aE as NamedQueryOptions, aF as NamedQueryParams, U as Paging, aW as PopulatedAssetReference, aX as PresignInput, aY as PresignResult, P as Project, aG as QueryAggregate, aH as QueryAnswer, aI as QueryCall, aB as QueryMetadata, aJ as QueryName, aK as QueryTypeName, Y as ReadAs, h as ReadEntry, _ as ReadLocale, R as RecordsAccessor, a$ as ResolveUrlInput, b0 as ResolveUrlResult, ba as ResourceConflictError, bb as ResourceExpiredError, b9 as ResourceNotFoundError, i as RetryableWriteOptions, S as SandboxState, ab as SearchEntry, ad as SearchFacet, ae as SearchFieldKey, af as SearchHighlight, a4 as SearchHitMetadata, ag as SearchOptions, ah as SearchPage, a5 as SearchResponse, a3 as SearchResultItem, ai as SearchScope, aj as SearchSelected, ak as SearchSortOption, aa as SearchTypeName, al as SearchWhere, s as SettingsClient, am as SimilarOptions, a9 as SimilarResponse, a8 as SimilarResult, r as SingletonClient, $ as SortOption, d as TypedClientConfig, T as TypedRelyIOClient, b3 as UpdateAssetOptions, b8 as UploadProgress, a0 as VersionOptions, b4 as WaitUntilReadyOptions, Z as WithChildren, a1 as WrittenReadScope, a2 as WrittenSort, c as createClient, c as default, aO as isAssetEntry, bd as isMissingEntry, bc as isResourceNotFound, bj as validateFile, v as versionCheckOf } from './index-M3luH06A.js';
-export { A as AnySchemaDefinition, f as ApiMethod, e as ApiPath, g as ApiSuccessBody, B as BaseRecord, D as DefaultRetryPolicy, H as HttpClient, M as MatchRouteOptions, y as RecordBatchOperation, z as RecordBatchOperationResult, C as RecordBatchOptions, b as RecordBatchResult, a as RecordBatchTarget, n as RecordCallOptions, c as RecordConditionValue, o as RecordFacetBucket, p as RecordFileBytes, q as RecordFileUploadOptions, s as RecordList, t as RecordListOptions, u as RecordMetadata, v as RecordReadOptions, w as RecordUpdateOptions, l as RecordsClient, d as Register, R as RegisteredSchema, j as RetryPolicy, k as RetryableRequest, h as RouteMatch, S as SendOptions, W as Wire, i as isReplaySafe, m as matchRoute, x as refusedOperationOf, r as retryPolicyFor } from './register-B53i97A9.js';
+import { C as Change, a as ChangesExpiredError, V as VisitorRetry, b as ChangesExpiredReason } from './index-BxNnlc5D.js';
+export { A as ActiveSandbox, aC as AdhocQuery, aD as AdhocRecord, aA as AggregateMetric, aL as AssetClient, aU as AssetEntryResponse, aM as AssetFileBuilder, aS as AssetFileExtracted, aV as AssetFileWhere, b2 as AssetPlacement, aN as AssetUploadBuilder, aP as AssetVisibility, ac as AutocompleteOptions, a7 as AutocompleteResponse, a6 as AutocompleteSuggestion, as as BatchBody, at as BatchCreate, aw as BatchDelete, az as BatchDeleteTarget, an as BatchOperationResult, av as BatchReplace, ap as BatchResponse, ax as BatchSingletonWrite, ao as BatchSummary, ay as BatchTarget, au as BatchUpdate, aq as BatchWrite, ar as BatchWriteOptions, j as ChangesHeadOptions, k as ChangesOptions, W as ChildEntry, B as ChildrenListOptions, z as ChildrenOptions, X as ChildrenRead, e as ClientDefaults, f as ClientSchema, aZ as ConfirmInput, a_ as ConfirmResult, o as ContentClient, b1 as CreateAssetOptions, p as CreateEntryOptions, g as DeployedContentType, D as DeployedLocale, t as DocumentFields, G as DocumentReadOptions, u as DocumentVersion, w as DocumentVersionRow, x as DocumentVersionsOptions, y as DocumentWriteOptions, I as EntryList, E as EntryPlacement, q as EntryWriteOptions, F as FeedChange, J as FieldKey, aR as FileBackend, be as FileErrorCode, aQ as FileStatus, aT as FileStatusResult, bg as FileUploadError, bf as FileUploadErrorCode, bi as FileValidationConstraints, bh as FileValidationError, K as FreshOption, M as GetOptions, H as Health, l as LIVE_KEEPALIVE_INTERVAL_MS, m as LIVE_SOCKET_OPEN_TIMEOUT_MS, N as ListAllOptions, O as ListOptions, n as LiveChangesOptions, L as LocaleCodeOf, Q as LocaleOption, b5 as MultipartCreateResult, b6 as MultipartPart, b7 as MultipartTarget, aE as NamedQueryOptions, aF as NamedQueryParams, U as Paging, aW as PopulatedAssetReference, aX as PresignInput, aY as PresignResult, P as Project, aG as QueryAggregate, aH as QueryAnswer, aI as QueryCall, aB as QueryMetadata, aJ as QueryName, aK as QueryTypeName, Y as ReadAs, h as ReadEntry, _ as ReadLocale, R as RecordsAccessor, a$ as ResolveUrlInput, b0 as ResolveUrlResult, ba as ResourceConflictError, bb as ResourceExpiredError, b9 as ResourceNotFoundError, i as RetryableWriteOptions, S as SandboxState, ab as SearchEntry, ad as SearchFacet, ae as SearchFieldKey, af as SearchHighlight, a4 as SearchHitMetadata, ag as SearchOptions, ah as SearchPage, a5 as SearchResponse, a3 as SearchResultItem, ai as SearchScope, aj as SearchSelected, ak as SearchSortOption, aa as SearchTypeName, al as SearchWhere, s as SettingsClient, am as SimilarOptions, a9 as SimilarResponse, a8 as SimilarResult, r as SingletonClient, $ as SortOption, d as TypedClientConfig, T as TypedRelyIOClient, b3 as UpdateAssetOptions, b8 as UploadProgress, a0 as VersionOptions, b4 as WaitUntilReadyOptions, Z as WithChildren, a1 as WrittenReadScope, a2 as WrittenSort, c as createClient, c as default, aO as isAssetEntry, bd as isMissingEntry, bc as isResourceNotFound, bj as validateFile, v as versionCheckOf } from './index-BxNnlc5D.js';
+export { A as AnySchemaDefinition, f as ApiMethod, e as ApiPath, g as ApiSuccessBody, B as BaseRecord, D as DefaultRetryPolicy, H as HttpClient, M as MatchRouteOptions, y as RecordBatchOperation, z as RecordBatchOperationResult, C as RecordBatchOptions, b as RecordBatchResult, a as RecordBatchTarget, n as RecordCallOptions, d as RecordConditionValue, o as RecordFacetBucket, p as RecordFileBytes, q as RecordFileUploadOptions, s as RecordList, t as RecordListOptions, u as RecordMetadata, v as RecordReadOptions, w as RecordUpdateOptions, l as RecordsClient, c as Register, R as RegisteredSchema, j as RetryPolicy, k as RetryableRequest, h as RouteMatch, S as SendOptions, W as Wire, i as isReplaySafe, m as matchRoute, x as refusedOperationOf, r as retryPolicyFor } from './register-BiMQKVp-.js';
 export { fields } from './schema/index.js';
-import { cJ as SDKError, aU as EntryMetadata } from './define-content-type-fb-WCD5e.js';
-export { aP as AnyDeclaredFieldset, cI as ApiResponse, cO as AssetFileBlock, as as AssetReading, ba as AssetServedBlocks, b7 as AssetTypeDefinition, cP as AssetUrls, cQ as BaseContent, B as BaseFieldConfig, cS as BaseSettingsGroup, cR as BaseSingleton, dl as BaseValidationError, aq as BlockOf, de as CacheConfig, dh as CacheStrategy, au as CheckInclude, at as CheckedIncludes, av as ContentReading, aT as ContentTypeDefinition, d7 as ContentTypeSchema, d2 as ContentVersion, d3 as ContentVersionRow, cY as CreateInput, cZ as CreatedContent, d6 as CustomQuery, cX as DateOnlyOperator, df as DebugConfig, aO as DeclaredFieldset, dj as Environment, m as FieldDefinition, aR as FieldMember, d9 as FieldOptions, n as FieldRule, am as FieldSchemaContext, o as FieldType, p as FieldUIConfig, an as FieldValue, F as FieldValues, aN as Fieldset, bd as FileKindConfig, br as FileScanConfig, b as FileUpload, bq as FileUploadConfig, bj as ImageExifConfig, bb as ImageKindConfig, bi as ImageSourceConfig, bh as ImageUploadConfig, aw as IncludablePaths, b9 as InferAssetEntry, b8 as InferAssetType, aV as InferContentType, cr as InferJsonSchema, a$ as InferSingleton, dn as InvalidPayloadError, cs as JsonFieldValue, ct as JsonSchema, cu as JsonValue, ap as Keyed, b6 as KeyedAssetTypeConfig, aS as KeyedContentTypeConfig, r as KeyedEnumConfig, s as KeyedField, t as KeyedFieldOptions, aQ as KeyedFieldsetConfig, b1 as KeyedSettingsGroupConfig, aY as KeyedSingletonConfig, cM as LiveWebSocket, cN as LiveWebSocketConstructor, aW as LocalePublicationFields, w as LocalizationConfig, x as Localized, y as LocalizedDetails, di as LogLevel, N as NeverUniqueFieldConfig, dd as PerformanceMetrics, ay as ReadWith, ax as Reading, db as RealtimeEvent, da as RealtimeEventType, cv as RecordFile, cK as RelyIOConfig, cL as RelyIOConfigUpdate, dg as RequestConfig, d1 as RestoredContent, cG as RetryConfig, c_ as RevisedContent, b2 as SettingsGroupDefinition, az as SettingsReading, ar as ShapeValue, d5 as SingletonContent, aZ as SingletonContentTypeDefinition, a_ as SingletonMetadata, aA as SingletonReading, dc as SubscriptionOptions, ao as UnresolvedEntry, aB as UntypedReading, d4 as UpdateInput, dm as ValidationError, d8 as ValidationRule, dk as ValidationViolation, bk as VariantDefinition, bn as VideoCaptionsConfig, bo as VideoDownloadConfig, bc as VideoKindConfig, bm as VideoPosterConfig, bl as VideoUploadConfig, bp as VideoWatermarkConfig, cV as WhereClause, cU as WhereFieldCondition, cW as WhereOperator, cT as WhereScalar, $ as WidgetOptions, d0 as WrittenSettingsGroup, c$ as WrittenSingleton, b5 as defineAssetType, aL as defineContentType, aC as defineLocale, b0 as defineSettingsGroup, aX as defineSingleton, aM as fieldset } from './define-content-type-fb-WCD5e.js';
-export { v as AggregateBlock, $ as AnyQueryParameters, a0 as DeclaredParameters, u as FetchBlock, J as FilterDefinition, D as IncludeDefinition, Z as InferQueryParams, Y as InferQueryResponse, I as InferRecordType, Q as QueryConfig, s as QueryDefinition, _ as QueryParameterValue, q as RecordFieldsOf, d as RecordUpdateFieldsOf, R as RecordWriteFieldsOf, k as SchemaAssetTypeNames, f as SchemaConfig, a as SchemaContentTypeNames, g as SchemaDefinition, b as SchemaEntry, l as SchemaEntryOf, c as SchemaLocaleCodes, i as SchemaQueryNames, j as SchemaSettingsGroupNames, h as SchemaSingletonNames, w as SearchBlock, G as SelectMapping, B as SortCondition, W as WhereCondition, r as defineQuery, e as defineSchema } from './define-schema-Dlwh6l_J.js';
+import { d3 as SDKError, aW as EntryMetadata } from './define-content-type-C12jh8cY.js';
+export { aQ as AnyDeclaredFieldset, d2 as ApiResponse, d8 as AssetFileBlock, at as AssetReading, bc as AssetServedBlocks, b9 as AssetTypeDefinition, d9 as AssetUrls, da as BaseContent, B as BaseFieldConfig, dc as BaseSettingsGroup, db as BaseSingleton, dI as BaseValidationError, ar as BlockOf, dB as CacheConfig, dE as CacheStrategy, av as CheckInclude, au as CheckedIncludes, aw as ContentReading, aV as ContentTypeDefinition, du as ContentTypeSchema, dp as ContentVersion, dq as ContentVersionRow, di as CreateInput, dj as CreatedContent, dt as CustomQuery, dh as DateOnlyOperator, dC as DebugConfig, aP as DeclaredFieldset, dG as Environment, i as FieldDefinition, aS as FieldMember, dw as FieldOptions, j as FieldRule, al as FieldSchemaContext, k as FieldType, l as FieldUIConfig, am as FieldValue, an as FieldValues, aO as Fieldset, bf as FileKindConfig, bt as FileScanConfig, cx as FileUpload, bs as FileUploadConfig, bl as ImageExifConfig, bd as ImageKindConfig, bk as ImageSourceConfig, bj as ImageUploadConfig, ax as IncludablePaths, bb as InferAssetEntry, ba as InferAssetType, aX as InferContentType, ct as InferJsonSchema, b1 as InferSingleton, dK as InvalidPayloadError, cu as JsonFieldValue, cv as JsonSchema, cw as JsonValue, aq as Keyed, b8 as KeyedAssetTypeConfig, aT as KeyedContentTypeConfig, K as KeyedEnumConfig, n as KeyedField, o as KeyedFieldOptions, aR as KeyedFieldsetConfig, b3 as KeyedSettingsGroupConfig, a_ as KeyedSingletonConfig, d6 as LiveWebSocket, d7 as LiveWebSocketConstructor, aY as LocalePublicationFields, t as LocalizationConfig, u as Localized, v as LocalizedDetails, dF as LogLevel, N as NeverUniqueFieldConfig, dA as PerformanceMetrics, az as ReadWith, ay as Reading, dy as RealtimeEvent, dx as RealtimeEventType, cy as RecordFile, d4 as RelyIOConfig, d5 as RelyIOConfigUpdate, dD as RequestConfig, dn as RestoredContent, d0 as RetryConfig, dk as RevisedContent, b4 as SettingsGroupDefinition, aA as SettingsReading, as as ShapeValue, ds as SingletonContent, a$ as SingletonContentTypeDefinition, b0 as SingletonMetadata, aB as SingletonReading, dz as SubscriptionOptions, ap as UnresolvedEntry, aC as UntypedReading, dr as UpdateInput, dJ as ValidationError, dv as ValidationRule, dH as ValidationViolation, bm as VariantDefinition, bp as VideoCaptionsConfig, bq as VideoDownloadConfig, be as VideoKindConfig, bo as VideoPosterConfig, bn as VideoUploadConfig, br as VideoWatermarkConfig, df as WhereClause, de as WhereFieldCondition, dg as WhereOperator, dd as WhereScalar, Z as WidgetOptions, dm as WrittenSettingsGroup, dl as WrittenSingleton, b7 as defineAssetType, aM as defineContentType, aD as defineLocale, b2 as defineSettingsGroup, aZ as defineSingleton, aN as fieldset } from './define-content-type-C12jh8cY.js';
+export { y as AggregateBlock, a6 as AnyQueryParameters, a7 as DeclaredParameters, x as FetchBlock, U as FilterDefinition, L as IncludeDefinition, a4 as InferQueryParams, a3 as InferQueryResponse, I as InferRecordType, Q as QueryConfig, u as QueryDefinition, a5 as QueryParameterValue, o as RecordFieldsOf, q as RecordUpdateFieldsOf, r as RecordWriteFieldsOf, h as SchemaAssetTypeNames, S as SchemaConfig, b as SchemaContentTypeNames, a as SchemaDefinition, j as SchemaEntry, k as SchemaEntryOf, f as SchemaLocaleCodes, e as SchemaQueryNames, g as SchemaSettingsGroupNames, c as SchemaSingletonNames, z as SearchBlock, T as SelectMapping, G as SortCondition, B as WhereCondition, t as defineQuery, d as defineSchema } from './define-schema-CK7TtYot.js';
 export { camelToSnake, createDeferred, debounce, deepClone, generateId, isBrowser, isNode, isPlainObject, isValidEmail, isValidUrl, mergeDeep, omit, pick, retry, sleep, snakeToCamel, throttle, toSafeString } from './utils/index.js';
-export { n as RICH_TEXT_VOID_TAGS, R as RelyIOFieldAttributes, a as RelyIOFieldName, b as RelyIOFieldPath, c as RelyIOKeyed, q as RichTextAnchorsOption, t as RichTextAttributes, u as RichTextBlocksOf, v as RichTextDeclaredOf, w as RichTextDeclaredWriters, x as RichTextEntryLinkOf, y as RichTextEntryLinkOption, j as RichTextHtmlDeclaredWriters, k as RichTextHtmlFieldOption, l as RichTextHtmlOptions, z as RichTextInlineOf, m as RichTextMarkdownOptions, A as RichTextNodeContext, B as RichTextRenderable, C as RichTextRenderableOf, D as RichTextReplaceableNode, E as RichTextTag, F as RichTextTarget, e as entryHeadingAnchors, g as escapeHtml, o as isDeclaredRichTextNode, r as relyioField, p as renderRichText, d as richTextHeadingAnchors, f as richTextHeadingSlug, h as richTextToHtml, i as richTextToMarkdown, s as safeRichTextHref } from './index-C4LqrNd1.js';
+export { n as RICH_TEXT_VOID_TAGS, R as RelyIOFieldAttributes, a as RelyIOFieldName, b as RelyIOFieldPath, c as RelyIOKeyed, q as RichTextAnchorsOption, t as RichTextAttributes, u as RichTextBlocksOf, v as RichTextDeclaredOf, w as RichTextDeclaredWriters, x as RichTextEntryLinkOf, y as RichTextEntryLinkOption, j as RichTextHtmlDeclaredWriters, k as RichTextHtmlFieldOption, l as RichTextHtmlOptions, z as RichTextInlineOf, m as RichTextMarkdownOptions, A as RichTextNodeContext, B as RichTextRenderable, C as RichTextRenderableOf, D as RichTextReplaceableNode, E as RichTextTag, F as RichTextTarget, e as entryHeadingAnchors, g as escapeHtml, o as isDeclaredRichTextNode, r as relyioField, p as renderRichText, d as richTextHeadingAnchors, f as richTextHeadingSlug, h as richTextToHtml, i as richTextToMarkdown, s as safeRichTextHref } from './index-C-MymZTe.js';
 export { e as RichTextBlock, f as RichTextCellAlignment, g as RichTextCodeBlock, h as RichTextCodeGroup, i as RichTextCodeLines, j as RichTextDivider, d as RichTextEntryLinkMark, k as RichTextHeading, l as RichTextInline, m as RichTextLineBreak, n as RichTextLinkMark, o as RichTextList, p as RichTextListItem, q as RichTextListStyle, r as RichTextMark, s as RichTextMarkType, t as RichTextNode, u as RichTextParagraph, v as RichTextQuote, w as RichTextSpan, x as RichTextStructure, y as RichTextTable, z as RichTextTableCell, B as RichTextTableRow, b as RichTextValue } from './rich-text.d-BWc-5gX1.js';
 import './dev-handshake/index.js';
 
@@ -25,6 +25,40 @@ declare const FUNCTION_RUN_FAILURES: readonly ['threw', 'exceeded-cpu', 'exceede
 /** Why a run ended without an answer: one of {@link FUNCTION_RUN_FAILURES}. */
 type FunctionRunFailure$1 = (typeof FUNCTION_RUN_FAILURES)[number];
 
+/**
+ * The End-user token a request carries, read **one** way wherever it is read (spec 4, REL-3880).
+ *
+ * A customer's app sends the token its identity provider minted for the person signed in to it in
+ * `X-RelyIO-End-User`, beside its key. `apps/services/api` verifies it against the Environment's
+ * identity source and answers as that End user; `apps/edge/api` never looks up or stores a response
+ * to a request that carries it (`edge-delivery-spec.md`'s withhold list), since that response is one
+ * person's. Both read the header here, so "carries a token" is one rule for the cache and the origin:
+ * a request the edge passed through as an End user's is one origin answers as an End user's.
+ *
+ * - The header is matched case-insensitively and its value trimmed. A value that is blank once
+ *   trimmed is **no token**: the request is the key's alone, as without the header.
+ * - It never carries the key, and the key's headers never carry it: `X-API-Key` keeps meaning the
+ *   key, and `Authorization: Bearer` keeps meaning the key when it is alone (`./credential.ts`).
+ *
+ * Its refusal is `END_USER_TOKEN_INVALID` (401) with `details.reason`, one of
+ * {@link END_USER_TOKEN_REFUSAL_REASONS}.
+ */
+
+/**
+ * Why an End user's token was refused, as `END_USER_TOKEN_INVALID`'s `details.reason`:
+ *
+ * - `missing` — the call needs one and carried none: a publishable key's call of a Function declaring
+ *   `endUsers: 'required'` (spec 4, REL-3892).
+ * - `no-identity-source` — the Environment the request is answered in has no identity source: its
+ *   Project uses no identity Extension, or has no Connection of it for the Environment (nor, for
+ *   Preview, for Production).
+ * - the rest — the verifier's (`@relyio/auth/end-users`): the token is malformed, signed with an
+ *   algorithm RelyIO does not take, from another issuer, by a key the issuer does not publish, with a
+ *   signature that does not verify, for another audience, expired, not yet valid, or naming no subject.
+ */
+declare const END_USER_TOKEN_REFUSAL_REASONS: readonly ['missing', 'no-identity-source', 'malformed', 'unsupported-algorithm', 'wrong-issuer', 'unknown-key', 'bad-signature', 'wrong-audience', 'expired', 'not-yet-valid', 'missing-subject'];
+type EndUserTokenRefusalReason = (typeof END_USER_TOKEN_REFUSAL_REASONS)[number];
+
 /**
  * What a key may do is in its prefix. A RelyIO project key is
  * `rly_{scope}_{region}_v2_{entropy}_{checksum}`: the scope first, then the region of its project's
@@ -351,10 +385,10 @@ declare class ConnectionError extends SDKError {
  * `details.reason: 'expired'`.
  *
  * `AuthenticationError` was deleted by REL-1471 for the same reason. The
- * vocabulary's two 401 codes are `MISSING_API_KEY` and `INVALID_API_KEY`, and
- * the mapper throws `MissingApiKeyError` and `InvalidApiKeyError` for them —
- * so a generic 401 class had no refusal left to stand for, and nothing
- * constructed it.
+ * vocabulary's 401 codes are `MISSING_API_KEY`, `INVALID_API_KEY` and — since
+ * spec 4 — `END_USER_TOKEN_INVALID`, and the mapper throws `MissingApiKeyError`,
+ * `InvalidApiKeyError` and `EndUserTokenInvalidError` for them — so a generic
+ * 401 class has no refusal left to stand for, and nothing constructs it.
  */
 declare class AuthorizationError extends SDKError {
     readonly code = "AUTHORIZATION_ERROR";
@@ -368,6 +402,19 @@ declare class InvalidApiKeyError extends SDKError {
     constructor(message?: string, cause?: Error, context?: Record<string, unknown>);
     getUserMessage(): string;
 }
+/**
+ * The End user's token the request carried was refused (spec 4, REL-3863): `reason` says why —
+ * `expired`, `wrong-audience`, `missing` for a call that needs one, and the rest of
+ * `END_USER_TOKEN_REFUSAL_REASONS`. Caught by class, an app signs the shopper in again rather than
+ * reading its key as bad.
+ */
+declare class EndUserTokenInvalidError extends SDKError {
+    readonly reason: EndUserTokenRefusalReason | undefined;
+    readonly code = "END_USER_TOKEN_INVALID";
+    readonly retryable = false;
+    constructor(message: string, reason: EndUserTokenRefusalReason | undefined, context?: Record<string, unknown>);
+    getUserMessage(): string;
+}
 
 /**
  * One class per contract code that had none.
@@ -402,8 +449,11 @@ declare class ReadOnlyKeyError extends SDKError {
     getUserMessage(): string;
 }
 /**
- * `PUBLISHABLE_KEY_REFUSED` — a publishable key on a Record route (REL-3771). A browser reads none
- * of an app's data: send the call from your server or a Function with a secret key.
+ * `PUBLISHABLE_KEY_REFUSED` — a publishable key writing a Record with no End user's token, uploading
+ * a Record's File, or calling a Function that does not declare `endUsers` (REL-3771). A browser
+ * writes a Record only for a signed-in End user, as the type's write Policy allows (spec 4,
+ * REL-3884), and calls a Function only when it opts in (REL-3892): send their token, declare
+ * `endUsers` on the Function, or call from your server with a secret key.
  */
 declare class PublishableKeyRefusedError extends SDKError {
     readonly code = "PUBLISHABLE_KEY_REFUSED";
@@ -1062,4 +1112,4 @@ declare function snapToLadder(value: number): number;
 
 declare const VERSION = "__VERSION__";
 
-export { AuthorizationError, Change, type ChangeSource, type ChangeSourceOptions, ChangesExpiredError, ChangesExpiredReason, ConnectionError, EntryMetadata, ErrorMapper, FOLLOW_BACK_OFF_MAX_MS, FOLLOW_RETRY_BASE_MS, FOLLOW_RETRY_MAX_MS, type FollowEnd, type FollowOptions, type FollowResync, type FollowState, type FollowVerdict, FunctionContainersBusyError, FunctionRunFailedError, type FunctionRunFailure, FunctionRunTimedOutError, IMAGE_LADDER, InvalidApiKeyError, type KeyPathSegment, type LanguageSwitcherOption, type LanguageSwitcherOptions, type LiveEdgeEnd, LiveEdgeError, type LocaleMetadata, type LocaleStatus, type LocalizedEntry, MethodNotAllowedError, MissingApiKeyError, NetworkError, PREVIEW_KEY_PREFIX, PUBLISHABLE_KEY_PREFIX, PayloadTooLargeError, PlanFeatureUnavailableError, PublishableKeyRefusedError, RELYIO_CHANGE_EVENT, RELYIO_RESYNC_EVENT, RateLimitError, ReadOnlyKeyError, type RelyIOChangeDetail, type RelyIOResyncDetail, SDKError, ServerError, ServiceIndeterminateError, TimeoutError, TransactionRolledBackError, type TranslationCompleteness, UnknownContractError, UsageQuotaExceededError, VERSION, buildLanguageSwitcher, classifyFollowFailure, estimateTranslationCompleteness, followChanges, formatKeyPath, getAllLocalizedValues, getAvailableLocaleCodes, getDefaultLocale, getFallbackFields, getFieldFallbackLocale, getLocalizedField, getPublishedLocaleCodes, getRequestedLocale, hasLocale, isFieldFallback, isPreviewKey, isPublishableKey, isPublishedInLocale, localeHelpers, needsTranslation, parseKeyPath, snapToLadder };
+export { AuthorizationError, Change, type ChangeSource, type ChangeSourceOptions, ChangesExpiredError, ChangesExpiredReason, ConnectionError, EndUserTokenInvalidError, EntryMetadata, ErrorMapper, FOLLOW_BACK_OFF_MAX_MS, FOLLOW_RETRY_BASE_MS, FOLLOW_RETRY_MAX_MS, type FollowEnd, type FollowOptions, type FollowResync, type FollowState, type FollowVerdict, FunctionContainersBusyError, FunctionRunFailedError, type FunctionRunFailure, FunctionRunTimedOutError, IMAGE_LADDER, InvalidApiKeyError, type KeyPathSegment, type LanguageSwitcherOption, type LanguageSwitcherOptions, type LiveEdgeEnd, LiveEdgeError, type LocaleMetadata, type LocaleStatus, type LocalizedEntry, MethodNotAllowedError, MissingApiKeyError, NetworkError, PREVIEW_KEY_PREFIX, PUBLISHABLE_KEY_PREFIX, PayloadTooLargeError, PlanFeatureUnavailableError, PublishableKeyRefusedError, RELYIO_CHANGE_EVENT, RELYIO_RESYNC_EVENT, RateLimitError, ReadOnlyKeyError, type RelyIOChangeDetail, type RelyIOResyncDetail, SDKError, ServerError, ServiceIndeterminateError, TimeoutError, TransactionRolledBackError, type TranslationCompleteness, UnknownContractError, UsageQuotaExceededError, VERSION, buildLanguageSwitcher, classifyFollowFailure, estimateTranslationCompleteness, followChanges, formatKeyPath, getAllLocalizedValues, getAvailableLocaleCodes, getDefaultLocale, getFallbackFields, getFieldFallbackLocale, getLocalizedField, getPublishedLocaleCodes, getRequestedLocale, hasLocale, isFieldFallback, isPreviewKey, isPublishableKey, isPublishedInLocale, localeHelpers, needsTranslation, parseKeyPath, snapToLadder };

package/dist/index.js

@@ -1,12 +1,12 @@
 import './chunk-IY5LSKXU.js';
 export { RICH_TEXT_VOID_TAGS, entryHeadingAnchors, escapeHtml, formatKeyPath, isDeclaredRichTextNode, parseKeyPath, relyioField, renderRichText, richTextHeadingAnchors, richTextHeadingSlug, richTextToHtml, richTextToMarkdown, safeRichTextHref } from './chunk-ZAKEY6DY.js';
-export { defineAssetType, defineContentType, defineLocale, defineQuery, defineSchema, defineSettingsGroup, defineSingleton, fields, fieldset } from './chunk-W7JFHSFM.js';
-import { LiveEdgeError, SDKError, serviceInstructedDelayMs, isAborted, sleep } from './chunk-ZHTJ7GXH.js';
-export { AssetClient, AssetFileBuilder, AssetUploadBuilder, AuthorizationError, BaseValidationError, ChangesExpiredError, ConnectionError, ContentClient, DefaultRetryPolicy, ErrorMapper, FileUploadError, FileValidationError, FunctionContainersBusyError, FunctionRunFailedError, FunctionRunTimedOutError, HttpClient, InvalidApiKeyError, InvalidPayloadError, LIVE_KEEPALIVE_INTERVAL_MS, LIVE_SOCKET_OPEN_TIMEOUT_MS, LiveEdgeError, MethodNotAllowedError, MissingApiKeyError, NetworkError, PREVIEW_KEY_PREFIX, PUBLISHABLE_KEY_PREFIX, PayloadTooLargeError, PlanFeatureUnavailableError, PublishableKeyRefusedError, RateLimitError, ReadOnlyKeyError, RecordsClient, ResourceConflictError, ResourceExpiredError, ResourceNotFoundError, SDKError, ServerError, ServiceIndeterminateError, SettingsClient, SingletonClient, TimeoutError, TransactionRolledBackError, TypedRelyIOClient, UnknownContractError, UsageQuotaExceededError, ValidationError, createClient, createClient as default, isAssetEntry, isMissingEntry, isPreviewKey, isPublishableKey, isReplaySafe, isResourceNotFound, matchRoute, refusedOperationOf, retryPolicyFor, validateFile, versionCheckOf } from './chunk-ZHTJ7GXH.js';
+export { defineAssetType, defineContentType, defineLocale, defineQuery, defineSchema, defineSettingsGroup, defineSingleton, fields, fieldset } from './chunk-PZCDJFMA.js';
+import { LiveEdgeError, SDKError, serviceInstructedDelayMs, isAborted, sleep } from './chunk-356SF5Y2.js';
+export { AssetClient, AssetFileBuilder, AssetUploadBuilder, AuthorizationError, BaseValidationError, ChangesExpiredError, ConnectionError, ContentClient, DefaultRetryPolicy, EndUserTokenInvalidError, ErrorMapper, FileUploadError, FileValidationError, FunctionContainersBusyError, FunctionRunFailedError, FunctionRunTimedOutError, HttpClient, InvalidApiKeyError, InvalidPayloadError, LIVE_KEEPALIVE_INTERVAL_MS, LIVE_SOCKET_OPEN_TIMEOUT_MS, LiveEdgeError, MethodNotAllowedError, MissingApiKeyError, NetworkError, PREVIEW_KEY_PREFIX, PUBLISHABLE_KEY_PREFIX, PayloadTooLargeError, PlanFeatureUnavailableError, PublishableKeyRefusedError, RateLimitError, ReadOnlyKeyError, RecordsClient, ResourceConflictError, ResourceExpiredError, ResourceNotFoundError, SDKError, ServerError, ServiceIndeterminateError, SettingsClient, SingletonClient, TimeoutError, TransactionRolledBackError, TypedRelyIOClient, UnknownContractError, UsageQuotaExceededError, ValidationError, createClient, createClient as default, isAssetEntry, isMissingEntry, isPreviewKey, isPublishableKey, isReplaySafe, isResourceNotFound, matchRoute, refusedOperationOf, retryPolicyFor, validateFile, versionCheckOf } from './chunk-356SF5Y2.js';
 export { camelToSnake, createDeferred, debounce, deepClone, generateId, isBrowser, isNode, isPlainObject, isValidEmail, isValidUrl, mergeDeep, omit, pick, retry, sleep, snakeToCamel, throttle, toSafeString } from './chunk-NJQK5STK.js';
 import './chunk-W2A4OTCI.js';
 import './chunk-HDHBYYEY.js';
-import { VISITOR_ADMISSION_RETRY_AFTER_SECONDS } from './chunk-EDE2H37D.js';
+import { VISITOR_ADMISSION_RETRY_AFTER_SECONDS } from './chunk-T7LGREB3.js';
 import { __name } from './chunk-DI6KFDBO.js';
 
 /* RelyIO SDK - Built with ❤️ by the RelyIO Team */

package/dist/preview/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunk7I3SC7SV_cjs = require('../chunk-7I3SC7SV.cjs');
-var chunkSHSK7UUY_cjs = require('../chunk-SHSK7UUY.cjs');
+var chunkNN45CSPZ_cjs = require('../chunk-NN45CSPZ.cjs');
 require('../chunk-L6DXCKVQ.cjs');
 
 
@@ -20,11 +20,11 @@ Object.defineProperty(exports, "previewAtRequest", {
 });
 Object.defineProperty(exports, "PREVIEW_DATASET_PREFIX", {
   enumerable: true,
-  get: function () { return chunkSHSK7UUY_cjs.PREVIEW_DATASET_PREFIX; }
+  get: function () { return chunkNN45CSPZ_cjs.PREVIEW_DATASET_PREFIX; }
 });
 Object.defineProperty(exports, "previewDatasetSlug", {
   enumerable: true,
-  get: function () { return chunkSHSK7UUY_cjs.previewDatasetSlug; }
+  get: function () { return chunkNN45CSPZ_cjs.previewDatasetSlug; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/preview/index.js

@@ -1,5 +1,5 @@
 export { UNKNOWN_PREVIEW_RECHECK_MS, previewAtBuild, previewAtRequest } from '../chunk-HDHBYYEY.js';
-export { PREVIEW_DATASET_PREFIX, previewDatasetSlug } from '../chunk-EDE2H37D.js';
+export { PREVIEW_DATASET_PREFIX, previewDatasetSlug } from '../chunk-T7LGREB3.js';
 import '../chunk-DI6KFDBO.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/{register-B53i97A9.d.ts → register-BiMQKVp-.d.ts}

@@ -1,5 +1,5 @@
-import { cF as paths, cG as RetryConfig, cH as MergedRelyIOConfig, cI as ApiResponse, cw as components, b as FileUpload } from './define-content-type-fb-WCD5e.js';
-import { g as SchemaDefinition } from './define-schema-Dlwh6l_J.js';
+import { c$ as paths, d0 as RetryConfig, d1 as MergedRelyIOConfig, d2 as ApiResponse, cR as components, cx as FileUpload } from './define-content-type-C12jh8cY.js';
+import { a as SchemaDefinition } from './define-schema-CK7TtYot.js';
 
 /**
  * Where the SDK's transport gets its truth.
@@ -261,6 +261,8 @@ declare class HttpClient {
     protected view?: {
         readonly client: ControlledHttpClient;
         readonly headers: Readonly<Record<string, string>>;
+        /** The End user's token function this view asks in place of its client's, when it names one. */
+        readonly getToken?: EndUserTokenSource;
     };
     constructor(config: MergedRelyIOConfig);
     protected announce(): void;
@@ -307,6 +309,10 @@ declare class HttpClient {
      * constructor accepts one so that a module-scope client can be evaluated by a
      * build that holds no key (REL-1120) — and so does one whose `setApiKey` was
      * given none.
+     *
+     * The End user's token is asked for once, after the key is known to be there and before the first
+     * attempt — of `getToken`, the nearest view's function, or the configuration's — so every retry
+     * of one call sends the token its first attempt sent. See `RelyIOConfig.getToken`.
      */
     private request;
     /**
@@ -353,8 +359,13 @@ declare class ControlledHttpClient extends HttpClient {
      * retries and `fetch` are this client's as they are when each request is sent, so a later
      * `configure()` or `setApiKey()` on this client reaches the view, and one on the view reaches
      * this client. `client.with({ dataset })` is one (REL-2417).
+     *
+     * `options.getToken` is the End user's token function the view asks in place of this client's,
+     * and of any view it is made from: `client.with({ getToken })` (REL-3882).
      */
-    withHeaders(headers: Readonly<Record<string, string>>): ControlledHttpClient;
+    withHeaders(headers: Readonly<Record<string, string>>, options?: {
+        readonly getToken?: EndUserTokenSource;
+    }): ControlledHttpClient;
     /**
      * Run on `config` from now on: every later request — whoever holds this client — is sent to its
      * `baseUrl`, with its headers, key and dataset, its timeout and retries, through its `fetch`, and
@@ -370,7 +381,7 @@ declare class ControlledHttpClient extends HttpClient {
      * Replace the key every later request sends as `X-API-Key`, and the `apiKey` the configuration
      * reports.
      *
-     * The key is read the way construction reads it (`presentKey`): an absent, empty or blank key is
+     * The key is read the way construction reads it (`presentCredential`): an absent, empty or blank key is
      * no key, so the header is dropped and the next request is refused with `MissingApiKeyError`
      * before anything is sent. A key header of any other spelling — one given in `headers` — goes
      * too, from the headers sent and from the headers the configuration reports, so the old key is
@@ -385,6 +396,8 @@ declare class ControlledHttpClient extends HttpClient {
      */
     setApiKey(apiKey: string): void;
 }
+/** What `getToken` is: asked per call, answering the signed-in End user's token or `null`. */
+type EndUserTokenSource = NonNullable<MergedRelyIOConfig['getToken']>;
 /** Everything a request reads off the configuration, replaced whole whenever it changes. */
 interface Connection {
     /**
@@ -403,8 +416,10 @@ interface Connection {
  *
  * A Record is an app's data — an order, a stock level, a cart — written by your server with a
  * secret key and live the moment it lands: no draft, no publication, no locale, no version. A
- * publishable key is refused on every Record route (`PUBLISHABLE_KEY_REFUSED`), so call this from a
- * server or a Function, never a browser.
+ * publishable key lists and gets the Records a Record type's read Policy grants it — anonymously, or
+ * as the End user whose token it carries (spec 4, REL-3883) — and creates, updates and deletes them
+ * only as that End user, as the type's write Policy allows (REL-3884): RelyIO sets the owner from
+ * the token. With no token it writes nothing (`PUBLISHABLE_KEY_REFUSED`).
  *
  * Every body is read from the committed document (`INV-API-CLIENT-IS-DERIVED`): the paths are the
  * document's, and `RecordMetadata` is its schema by name.
@@ -513,7 +528,8 @@ TUpdate = TInput> {
      * Store a Record, live the moment it lands. Values that break the Record type's fields are
      * refused with `ValidationError` naming each field, and nothing is stored. Values a unique set of
      * the type claims, held by another Record, are refused with `ResourceConflictError` — its
-     * `blockage` is `{ kind: 'value-taken', facts: { fields, recordId } }` (REL-3782).
+     * `blockage` is `{ kind: 'value-taken', facts: { fields, recordId } }` (REL-3782) — with no
+     * `recordId` for an End user's write, whose read Policy may hide the holder (REL-3863).
      */
     create(fields: TInput, options?: RecordCallOptions): Promise<TRecord>;
     /** One page of the Records `where` keeps, newest first unless `sort` names one key. */
@@ -674,4 +690,4 @@ type RegisteredSchema = Register extends {
     schema: infer S extends AnySchemaDefinition;
 } ? S : undefined;
 
-export { type AnySchemaDefinition as A, type BaseRecord as B, type RecordBatchOptions as C, DefaultRetryPolicy as D, HttpClient as H, type MatchRouteOptions as M, type QueryOf as Q, type RegisteredSchema as R, type SendOptions as S, type Wire as W, type RecordBatchTarget as a, type RecordBatchResult as b, type RecordConditionValue as c, type Register as d, type ApiPath as e, type ApiMethod as f, type ApiSuccessBody as g, type RouteMatch as h, isReplaySafe as i, type RetryPolicy as j, type RetryableRequest as k, RecordsClient as l, matchRoute as m, type RecordCallOptions as n, type RecordFacetBucket as o, type RecordFileBytes as p, type RecordFileUploadOptions as q, retryPolicyFor as r, type RecordList as s, type RecordListOptions as t, type RecordMetadata as u, type RecordReadOptions as v, type RecordUpdateOptions as w, refusedOperationOf as x, type RecordBatchOperation as y, type RecordBatchOperationResult as z };
+export { type AnySchemaDefinition as A, type BaseRecord as B, type RecordBatchOptions as C, DefaultRetryPolicy as D, HttpClient as H, type MatchRouteOptions as M, type QueryOf as Q, type RegisteredSchema as R, type SendOptions as S, type Wire as W, type RecordBatchTarget as a, type RecordBatchResult as b, type Register as c, type RecordConditionValue as d, type ApiPath as e, type ApiMethod as f, type ApiSuccessBody as g, type RouteMatch as h, isReplaySafe as i, type RetryPolicy as j, type RetryableRequest as k, RecordsClient as l, matchRoute as m, type RecordCallOptions as n, type RecordFacetBucket as o, type RecordFileBytes as p, type RecordFileUploadOptions as q, retryPolicyFor as r, type RecordList as s, type RecordListOptions as t, type RecordMetadata as u, type RecordReadOptions as v, type RecordUpdateOptions as w, refusedOperationOf as x, type RecordBatchOperation as y, type RecordBatchOperationResult as z };

package/dist/{register-BYCs0FpF.d.cts → register-DeMsaurp.d.cts}

@@ -1,5 +1,5 @@
-import { cF as paths, cG as RetryConfig, cH as MergedRelyIOConfig, cI as ApiResponse, cw as components, b as FileUpload } from './define-content-type-NEQDrvdq.cjs';
-import { g as SchemaDefinition } from './define-schema-DZhtvLiK.cjs';
+import { c$ as paths, d0 as RetryConfig, d1 as MergedRelyIOConfig, d2 as ApiResponse, cR as components, cx as FileUpload } from './define-content-type-BZ6X8GvL.cjs';
+import { a as SchemaDefinition } from './define-schema-BPlZl4a2.cjs';
 
 /**
  * Where the SDK's transport gets its truth.
@@ -261,6 +261,8 @@ declare class HttpClient {
     protected view?: {
         readonly client: ControlledHttpClient;
         readonly headers: Readonly<Record<string, string>>;
+        /** The End user's token function this view asks in place of its client's, when it names one. */
+        readonly getToken?: EndUserTokenSource;
     };
     constructor(config: MergedRelyIOConfig);
     protected announce(): void;
@@ -307,6 +309,10 @@ declare class HttpClient {
      * constructor accepts one so that a module-scope client can be evaluated by a
      * build that holds no key (REL-1120) — and so does one whose `setApiKey` was
      * given none.
+     *
+     * The End user's token is asked for once, after the key is known to be there and before the first
+     * attempt — of `getToken`, the nearest view's function, or the configuration's — so every retry
+     * of one call sends the token its first attempt sent. See `RelyIOConfig.getToken`.
      */
     private request;
     /**
@@ -353,8 +359,13 @@ declare class ControlledHttpClient extends HttpClient {
      * retries and `fetch` are this client's as they are when each request is sent, so a later
      * `configure()` or `setApiKey()` on this client reaches the view, and one on the view reaches
      * this client. `client.with({ dataset })` is one (REL-2417).
+     *
+     * `options.getToken` is the End user's token function the view asks in place of this client's,
+     * and of any view it is made from: `client.with({ getToken })` (REL-3882).
      */
-    withHeaders(headers: Readonly<Record<string, string>>): ControlledHttpClient;
+    withHeaders(headers: Readonly<Record<string, string>>, options?: {
+        readonly getToken?: EndUserTokenSource;
+    }): ControlledHttpClient;
     /**
      * Run on `config` from now on: every later request — whoever holds this client — is sent to its
      * `baseUrl`, with its headers, key and dataset, its timeout and retries, through its `fetch`, and
@@ -370,7 +381,7 @@ declare class ControlledHttpClient extends HttpClient {
      * Replace the key every later request sends as `X-API-Key`, and the `apiKey` the configuration
      * reports.
      *
-     * The key is read the way construction reads it (`presentKey`): an absent, empty or blank key is
+     * The key is read the way construction reads it (`presentCredential`): an absent, empty or blank key is
      * no key, so the header is dropped and the next request is refused with `MissingApiKeyError`
      * before anything is sent. A key header of any other spelling — one given in `headers` — goes
      * too, from the headers sent and from the headers the configuration reports, so the old key is
@@ -385,6 +396,8 @@ declare class ControlledHttpClient extends HttpClient {
      */
     setApiKey(apiKey: string): void;
 }
+/** What `getToken` is: asked per call, answering the signed-in End user's token or `null`. */
+type EndUserTokenSource = NonNullable<MergedRelyIOConfig['getToken']>;
 /** Everything a request reads off the configuration, replaced whole whenever it changes. */
 interface Connection {
     /**
@@ -403,8 +416,10 @@ interface Connection {
  *
  * A Record is an app's data — an order, a stock level, a cart — written by your server with a
  * secret key and live the moment it lands: no draft, no publication, no locale, no version. A
- * publishable key is refused on every Record route (`PUBLISHABLE_KEY_REFUSED`), so call this from a
- * server or a Function, never a browser.
+ * publishable key lists and gets the Records a Record type's read Policy grants it — anonymously, or
+ * as the End user whose token it carries (spec 4, REL-3883) — and creates, updates and deletes them
+ * only as that End user, as the type's write Policy allows (REL-3884): RelyIO sets the owner from
+ * the token. With no token it writes nothing (`PUBLISHABLE_KEY_REFUSED`).
  *
  * Every body is read from the committed document (`INV-API-CLIENT-IS-DERIVED`): the paths are the
  * document's, and `RecordMetadata` is its schema by name.
@@ -513,7 +528,8 @@ TUpdate = TInput> {
      * Store a Record, live the moment it lands. Values that break the Record type's fields are
      * refused with `ValidationError` naming each field, and nothing is stored. Values a unique set of
      * the type claims, held by another Record, are refused with `ResourceConflictError` — its
-     * `blockage` is `{ kind: 'value-taken', facts: { fields, recordId } }` (REL-3782).
+     * `blockage` is `{ kind: 'value-taken', facts: { fields, recordId } }` (REL-3782) — with no
+     * `recordId` for an End user's write, whose read Policy may hide the holder (REL-3863).
      */
     create(fields: TInput, options?: RecordCallOptions): Promise<TRecord>;
     /** One page of the Records `where` keeps, newest first unless `sort` names one key. */
@@ -674,4 +690,4 @@ type RegisteredSchema = Register extends {
     schema: infer S extends AnySchemaDefinition;
 } ? S : undefined;
 
-export { type AnySchemaDefinition as A, type BaseRecord as B, type RecordBatchOptions as C, DefaultRetryPolicy as D, HttpClient as H, type MatchRouteOptions as M, type QueryOf as Q, type RegisteredSchema as R, type SendOptions as S, type Wire as W, type RecordBatchTarget as a, type RecordBatchResult as b, type RecordConditionValue as c, type Register as d, type ApiPath as e, type ApiMethod as f, type ApiSuccessBody as g, type RouteMatch as h, isReplaySafe as i, type RetryPolicy as j, type RetryableRequest as k, RecordsClient as l, matchRoute as m, type RecordCallOptions as n, type RecordFacetBucket as o, type RecordFileBytes as p, type RecordFileUploadOptions as q, retryPolicyFor as r, type RecordList as s, type RecordListOptions as t, type RecordMetadata as u, type RecordReadOptions as v, type RecordUpdateOptions as w, refusedOperationOf as x, type RecordBatchOperation as y, type RecordBatchOperationResult as z };
+export { type AnySchemaDefinition as A, type BaseRecord as B, type RecordBatchOptions as C, DefaultRetryPolicy as D, HttpClient as H, type MatchRouteOptions as M, type QueryOf as Q, type RegisteredSchema as R, type SendOptions as S, type Wire as W, type RecordBatchTarget as a, type RecordBatchResult as b, type Register as c, type RecordConditionValue as d, type ApiPath as e, type ApiMethod as f, type ApiSuccessBody as g, type RouteMatch as h, isReplaySafe as i, type RetryPolicy as j, type RetryableRequest as k, RecordsClient as l, matchRoute as m, type RecordCallOptions as n, type RecordFacetBucket as o, type RecordFileBytes as p, type RecordFileUploadOptions as q, retryPolicyFor as r, type RecordList as s, type RecordListOptions as t, type RecordMetadata as u, type RecordReadOptions as v, type RecordUpdateOptions as w, refusedOperationOf as x, type RecordBatchOperation as y, type RecordBatchOperationResult as z };

package/dist/rich-text/index.d.cts

@@ -1,3 +1,3 @@
-export { n as RICH_TEXT_VOID_TAGS, q as RichTextAnchorsOption, t as RichTextAttributes, u as RichTextBlocksOf, v as RichTextDeclaredOf, w as RichTextDeclaredWriters, x as RichTextEntryLinkOf, y as RichTextEntryLinkOption, j as RichTextHtmlDeclaredWriters, k as RichTextHtmlFieldOption, l as RichTextHtmlOptions, z as RichTextInlineOf, m as RichTextMarkdownOptions, A as RichTextNodeContext, B as RichTextRenderable, C as RichTextRenderableOf, D as RichTextReplaceableNode, E as RichTextTag, F as RichTextTarget, e as entryHeadingAnchors, g as escapeHtml, o as isDeclaredRichTextNode, p as renderRichText, d as richTextHeadingAnchors, f as richTextHeadingSlug, h as richTextToHtml, i as richTextToMarkdown, s as safeRichTextHref } from '../index-Dnmt_UOo.cjs';
+export { n as RICH_TEXT_VOID_TAGS, q as RichTextAnchorsOption, t as RichTextAttributes, u as RichTextBlocksOf, v as RichTextDeclaredOf, w as RichTextDeclaredWriters, x as RichTextEntryLinkOf, y as RichTextEntryLinkOption, j as RichTextHtmlDeclaredWriters, k as RichTextHtmlFieldOption, l as RichTextHtmlOptions, z as RichTextInlineOf, m as RichTextMarkdownOptions, A as RichTextNodeContext, B as RichTextRenderable, C as RichTextRenderableOf, D as RichTextReplaceableNode, E as RichTextTag, F as RichTextTarget, e as entryHeadingAnchors, g as escapeHtml, o as isDeclaredRichTextNode, p as renderRichText, d as richTextHeadingAnchors, f as richTextHeadingSlug, h as richTextToHtml, i as richTextToMarkdown, s as safeRichTextHref } from '../index-DN0l8RHw.cjs';
 import '../rich-text.d-BWc-5gX1.cjs';
-import '../define-content-type-NEQDrvdq.cjs';
+import '../define-content-type-BZ6X8GvL.cjs';

package/dist/rich-text/index.d.ts

@@ -1,3 +1,3 @@
-export { n as RICH_TEXT_VOID_TAGS, q as RichTextAnchorsOption, t as RichTextAttributes, u as RichTextBlocksOf, v as RichTextDeclaredOf, w as RichTextDeclaredWriters, x as RichTextEntryLinkOf, y as RichTextEntryLinkOption, j as RichTextHtmlDeclaredWriters, k as RichTextHtmlFieldOption, l as RichTextHtmlOptions, z as RichTextInlineOf, m as RichTextMarkdownOptions, A as RichTextNodeContext, B as RichTextRenderable, C as RichTextRenderableOf, D as RichTextReplaceableNode, E as RichTextTag, F as RichTextTarget, e as entryHeadingAnchors, g as escapeHtml, o as isDeclaredRichTextNode, p as renderRichText, d as richTextHeadingAnchors, f as richTextHeadingSlug, h as richTextToHtml, i as richTextToMarkdown, s as safeRichTextHref } from '../index-C4LqrNd1.js';
+export { n as RICH_TEXT_VOID_TAGS, q as RichTextAnchorsOption, t as RichTextAttributes, u as RichTextBlocksOf, v as RichTextDeclaredOf, w as RichTextDeclaredWriters, x as RichTextEntryLinkOf, y as RichTextEntryLinkOption, j as RichTextHtmlDeclaredWriters, k as RichTextHtmlFieldOption, l as RichTextHtmlOptions, z as RichTextInlineOf, m as RichTextMarkdownOptions, A as RichTextNodeContext, B as RichTextRenderable, C as RichTextRenderableOf, D as RichTextReplaceableNode, E as RichTextTag, F as RichTextTarget, e as entryHeadingAnchors, g as escapeHtml, o as isDeclaredRichTextNode, p as renderRichText, d as richTextHeadingAnchors, f as richTextHeadingSlug, h as richTextToHtml, i as richTextToMarkdown, s as safeRichTextHref } from '../index-C-MymZTe.js';
 import '../rich-text.d-BWc-5gX1.js';
-import '../define-content-type-fb-WCD5e.js';
+import '../define-content-type-C12jh8cY.js';

package/dist/schema/index.cjs

@@ -1,165 +1,166 @@
 'use strict';
 
-var chunkZAMAR3X2_cjs = require('../chunk-ZAMAR3X2.cjs');
+var chunk5F3YYPLZ_cjs = require('../chunk-5F3YYPLZ.cjs');
+require('../chunk-NN45CSPZ.cjs');
 require('../chunk-L6DXCKVQ.cjs');
 
 
 
 Object.defineProperty(exports, "BUILT_IN_ROLES", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.BUILT_IN_ROLES; }
+  get: function () { return chunk5F3YYPLZ_cjs.BUILT_IN_ROLES; }
 });
 Object.defineProperty(exports, "BUILT_IN_ROLE_ACTIONS", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.BUILT_IN_ROLE_ACTIONS; }
+  get: function () { return chunk5F3YYPLZ_cjs.BUILT_IN_ROLE_ACTIONS; }
 });
 Object.defineProperty(exports, "CONDITION_OPERATORS", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.CONDITION_OPERATORS; }
+  get: function () { return chunk5F3YYPLZ_cjs.CONDITION_OPERATORS; }
 });
 Object.defineProperty(exports, "ROLE_ACTIONS", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.ROLE_ACTIONS; }
+  get: function () { return chunk5F3YYPLZ_cjs.ROLE_ACTIONS; }
 });
 Object.defineProperty(exports, "and", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.and; }
+  get: function () { return chunk5F3YYPLZ_cjs.and; }
 });
 Object.defineProperty(exports, "buildFallbackChain", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.buildFallbackChain; }
+  get: function () { return chunk5F3YYPLZ_cjs.buildFallbackChain; }
 });
 Object.defineProperty(exports, "conditionRoot", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.conditionRoot; }
+  get: function () { return chunk5F3YYPLZ_cjs.conditionRoot; }
 });
 Object.defineProperty(exports, "defineAssetType", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineAssetType; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineAssetType; }
 });
 Object.defineProperty(exports, "defineContentType", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineContentType; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineContentType; }
 });
 Object.defineProperty(exports, "defineContentTypeWorkflow", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineContentTypeWorkflow; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineContentTypeWorkflow; }
 });
 Object.defineProperty(exports, "defineLocale", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineLocale; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineLocale; }
 });
 Object.defineProperty(exports, "defineQuery", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineQuery; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineQuery; }
 });
 Object.defineProperty(exports, "defineRecordType", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineRecordType; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineRecordType; }
 });
 Object.defineProperty(exports, "defineRole", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineRole; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineRole; }
 });
 Object.defineProperty(exports, "defineSchema", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineSchema; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineSchema; }
 });
 Object.defineProperty(exports, "defineSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineSettingsGroup; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineSettingsGroup; }
 });
 Object.defineProperty(exports, "defineSingleton", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineSingleton; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineSingleton; }
 });
 Object.defineProperty(exports, "defineView", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineView; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineView; }
 });
 Object.defineProperty(exports, "defineWorkflow", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineWorkflow; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineWorkflow; }
 });
 Object.defineProperty(exports, "defineWorkflowStage", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.defineWorkflowStage; }
+  get: function () { return chunk5F3YYPLZ_cjs.defineWorkflowStage; }
 });
 Object.defineProperty(exports, "fields", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.fields; }
+  get: function () { return chunk5F3YYPLZ_cjs.fields; }
 });
 Object.defineProperty(exports, "fieldset", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.fieldset; }
+  get: function () { return chunk5F3YYPLZ_cjs.fieldset; }
 });
 Object.defineProperty(exports, "findDefaultLocale", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.findDefaultLocale; }
+  get: function () { return chunk5F3YYPLZ_cjs.findDefaultLocale; }
 });
 Object.defineProperty(exports, "findWorkflowStage", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.findWorkflowStage; }
+  get: function () { return chunk5F3YYPLZ_cjs.findWorkflowStage; }
 });
 Object.defineProperty(exports, "getActiveLocales", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.getActiveLocales; }
+  get: function () { return chunk5F3YYPLZ_cjs.getActiveLocales; }
 });
 Object.defineProperty(exports, "getBuiltInRoleActions", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.getBuiltInRoleActions; }
+  get: function () { return chunk5F3YYPLZ_cjs.getBuiltInRoleActions; }
 });
 Object.defineProperty(exports, "getFirstWorkflowStage", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.getFirstWorkflowStage; }
+  get: function () { return chunk5F3YYPLZ_cjs.getFirstWorkflowStage; }
 });
 Object.defineProperty(exports, "getLocaleCodes", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.getLocaleCodes; }
+  get: function () { return chunk5F3YYPLZ_cjs.getLocaleCodes; }
 });
 Object.defineProperty(exports, "getNextWorkflowStage", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.getNextWorkflowStage; }
+  get: function () { return chunk5F3YYPLZ_cjs.getNextWorkflowStage; }
 });
 Object.defineProperty(exports, "getWorkflowStageIds", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.getWorkflowStageIds; }
+  get: function () { return chunk5F3YYPLZ_cjs.getWorkflowStageIds; }
 });
 Object.defineProperty(exports, "isBuiltInRole", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.isBuiltInRole; }
+  get: function () { return chunk5F3YYPLZ_cjs.isBuiltInRole; }
 });
 Object.defineProperty(exports, "isFinalWorkflowStage", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.isFinalWorkflowStage; }
+  get: function () { return chunk5F3YYPLZ_cjs.isFinalWorkflowStage; }
 });
 Object.defineProperty(exports, "isLocaleDefinition", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.isLocaleDefinition; }
+  get: function () { return chunk5F3YYPLZ_cjs.isLocaleDefinition; }
 });
 Object.defineProperty(exports, "isRoleDefinition", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.isRoleDefinition; }
+  get: function () { return chunk5F3YYPLZ_cjs.isRoleDefinition; }
 });
 Object.defineProperty(exports, "isWorkflowDefinition", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.isWorkflowDefinition; }
+  get: function () { return chunk5F3YYPLZ_cjs.isWorkflowDefinition; }
 });
 Object.defineProperty(exports, "isWorkflowStageDefinition", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.isWorkflowStageDefinition; }
+  get: function () { return chunk5F3YYPLZ_cjs.isWorkflowStageDefinition; }
 });
 Object.defineProperty(exports, "not", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.not; }
+  get: function () { return chunk5F3YYPLZ_cjs.not; }
 });
 Object.defineProperty(exports, "or", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.or; }
+  get: function () { return chunk5F3YYPLZ_cjs.or; }
 });
 Object.defineProperty(exports, "rollup", {
   enumerable: true,
-  get: function () { return chunkZAMAR3X2_cjs.rollup; }
+  get: function () { return chunk5F3YYPLZ_cjs.rollup; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map