@thomasfosterau/pulpit 0.0.0 → 0.1.0

package/dist/index.js

@@ -0,0 +1,133 @@
+/**
+ * `@thomasfosterau/pulpit` — the versioned-content kernel.
+ *
+ * Every module is exported as a namespace from the package root, following
+ * the convention of `effect` and `@thomasfosterau/effect-jsonapi`; each is
+ * also a subpath (`@thomasfosterau/pulpit/content`, …) for a consumer that
+ * wants one module without the barrel. The in-memory fakes are the one
+ * exception: they are the subpath `@thomasfosterau/pulpit/testing` only, so
+ * that production code never pulls them in through the barrel.
+ *
+ * @copyright Thomas Foster
+ * @module pulpit
+ */
+/**
+ * The Content model fields: `Visibility`, the visibility / draft / timestamp /
+ * tombstone spreads, `ownerRef`, the base `content` resource.
+ */
+export * as Content from "./content.js";
+/**
+ * The registry flag vocabulary, `validateRegistry`, and the derived families /
+ * branches.
+ */
+export * as Registry from "./registry.js";
+/**
+ * The append-only node / version chain: create, update, restore, delete,
+ * getVersion, compare (with the pure `diffStates`), restoreVersion, history —
+ * over a store seam.
+ */
+export * as VersionChain from "./version-chain.js";
+/** The list-filter vocabulary the read predicates render into, and its in-memory evaluator. */
+export * as Filter from "./filter.js";
+/**
+ * The subtype operation factory: `LeafAccess`, the read scope and viewer
+ * predicates, the write gates, `defineSubtype` and its handlers seam.
+ */
+export * as Subtype from "./subtype.js";
+/**
+ * The publication axis, the moderation state, and the cache serveability
+ * policy (`isPubliclyServeable`, the `serveable` hook).
+ */
+export * as Publication from "./publication.js";
+/**
+ * The content-addressed document store seam (`DocumentStore`), the
+ * `DocumentHash` it is keyed by, and the `documentRef` field spread a version
+ * row carries the reference in.
+ */
+export * as Documents from "./documents.js";
+/**
+ * The edge operations factory: a relation between nodes as its own family
+ * (`defineEdgeOps` over an `EdgeStore` seam), readable only when every end
+ * is, with declared cardinality limits.
+ */
+export * as Edges from "./edges.js";
+/**
+ * Suggested edits: a contributor's patch against a node's version, accepted
+ * through the target's own update or rejected (`defineProposals` over a
+ * `ProposalStore` seam), with its two-tier stale / conflict classification.
+ */
+export * as Proposals from "./proposals.js";
+/**
+ * File and media leaves: the blob-store seam (`BlobStore`) keyed by the
+ * content hash, the file field spread, the commit-ordered byte write
+ * (`defineFileWrites`) and the usage index's edge ends.
+ */
+export * as Blobs from "./blobs.js";
+/**
+ * Routable content: a leaf's path claims tied to its version chain
+ * (`routable` over a `PathStore` seam), the aliases a path change leaves
+ * behind, and the gated resolution of a path.
+ */
+export * as Paths from "./paths.js";
+/**
+ * The moderation workflow: the transition rules as a before hook
+ * (`moderationHook`), the decision (`defineModeration`), the review-queue
+ * filter, threshold grading (`gradeScores`) and member reports
+ * (`defineReports` over a `ReportStore` seam).
+ */
+export * as Moderation from "./moderation.js";
+/**
+ * The working copy: an editor's autosave buffer outside the version chain
+ * (`WorkingCopyStore`), committed as one ordinary version
+ * (`defineWorkingCopy`).
+ */
+export * as WorkingCopy from "./working-copy.js";
+/**
+ * The comments family: threaded comments on any node as versioned owned
+ * leaves (`defineComments`), behind the target's read gate and the
+ * moderation gate.
+ */
+export * as Comments from "./comments.js";
+/**
+ * Purge: erasure, the one destructive path through a node's history. It
+ * hard-deletes a node's chain and the rows kept for it, then the documents
+ * and bytes nothing else references (`definePurge` over a `PurgeStore`).
+ */
+export * as Purge from "./purge.js";
+/**
+ * Hybrid search: reciprocal rank fusion over ranked branches, the reranker
+ * and branch seams every branch's scope runs through, and the embedding
+ * pipeline as seams (`fuseRankings`, `hybridSearch`, `embedPending`).
+ */
+export * as Search from "./search.js";
+/**
+ * Write budgets: a declared ceiling on an account's writes in a rolling
+ * window, spent inside the write as a before hook or by a plain-row family,
+ * over a `BudgetCounter` seam (`bindBudget`, `budgetHook`).
+ */
+export * as Budgets from "./budgets.js";
+/**
+ * Reactions: one reaction per account per node, a kind from the family's
+ * vocabulary, behind the target's read gate, with a grouped tally
+ * (`defineReactions` over a `ReactionStore`).
+ */
+export * as Reactions from "./reactions.js";
+/**
+ * The reference resource cache: `./subtype`'s `ResourceCacheSeam`, with a
+ * read-through `get`, over a minimal versioned key-value seam
+ * (`makeResourceCache` over a `VersionedKv`).
+ */
+export * as Cache from "./cache.js";
+/**
+ * Ordered collections: positioned members of a parent node, the order kept
+ * beside the chain or versioned with the parent (`defineCollection` over a
+ * `CollectionStore`).
+ */
+export * as Collections from "./collections.js";
+/**
+ * The social graph: follow, mute and block between accounts, the follower
+ * seam filled from it, and the opt-in read filter over silenced authors
+ * (`defineSocial` over a `SocialStore`).
+ */
+export * as Social from "./social.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;GAGG;AACH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AAExC;;;GAGG;AACH,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE1C;;;;GAIG;AACH,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AAEnD,+FAA+F;AAC/F,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AAExC;;;GAGG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAEhD;;;;GAIG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAE5C;;;;GAIG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC;;;;GAIG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAE5C;;;;GAIG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC;;;;GAIG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAC;AAE9C;;;;GAIG;AACH,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AAEjD;;;;GAIG;AACH,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE1C;;;;GAIG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC;;;;GAIG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;;GAIG;AACH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AAExC;;;;GAIG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAE5C;;;;GAIG;AACH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC;;;;GAIG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAEhD;;;;GAIG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC"}

package/dist/internal/filter-columns.d.ts

@@ -0,0 +1,8 @@
+import type { ListFilter } from "../filter.ts";
+/**
+ * Every column of `filter` rewritten by `rename`; the tree's shape and every
+ * comparand are kept. Exhaustive over the node kinds, so a new kind cannot
+ * slip through with its column unrenamed.
+ */
+export declare const renameColumns: <Following>(filter: ListFilter<Following>, rename: (column: string) => string) => ListFilter<Following>;
+//# sourceMappingURL=filter-columns.d.ts.map

package/dist/internal/filter-columns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-columns.d.ts","sourceRoot":"","sources":["../../src/internal/filter-columns.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,aAAa,GAAI,SAAS,UAC7B,UAAU,CAAC,SAAS,CAAC,UACrB,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,KACjC,UAAU,CAAC,SAAS,CA4BpB,CAAC"}

package/dist/internal/filter-columns.js

@@ -0,0 +1,43 @@
+/**
+ * **A list filter's columns, renamed**: `./edges` qualifies a leaf's filter
+ * with an end's alias through it, so a store can render that filter against
+ * the view it joined under the alias.
+ *
+ * Internal: not a package entry point (absent from `package.json`
+ * `exports`) and excluded from the generated API docs (`docgen.json`).
+ *
+ * @internal
+ */
+import * as Match from "effect/Match";
+/**
+ * Every column of `filter` rewritten by `rename`; the tree's shape and every
+ * comparand are kept. Exhaustive over the node kinds, so a new kind cannot
+ * slip through with its column unrenamed.
+ */
+export const renameColumns = (filter, rename) => Match.value(filter).pipe(Match.discriminatorsExhaustive("kind")({
+    always: (node) => node,
+    never: (node) => node,
+    eq: (node) => ({ ...node, column: rename(node.column) }),
+    ne: (node) => ({ ...node, column: rename(node.column) }),
+    in: (node) => ({ ...node, column: rename(node.column) }),
+    notIn: (node) => ({ ...node, column: rename(node.column) }),
+    gt: (node) => ({ ...node, column: rename(node.column) }),
+    gte: (node) => ({ ...node, column: rename(node.column) }),
+    lt: (node) => ({ ...node, column: rename(node.column) }),
+    lte: (node) => ({ ...node, column: rename(node.column) }),
+    anyOf: (node) => ({ ...node, column: rename(node.column) }),
+    noneOf: (node) => ({ ...node, column: rename(node.column) }),
+    isNull: (node) => ({ ...node, column: rename(node.column) }),
+    published: (node) => ({ ...node, column: rename(node.column) }),
+    notPublished: (node) => ({ ...node, column: rename(node.column) }),
+    locale: (node) => ({ ...node, column: rename(node.column) }),
+    and: (node) => ({
+        kind: "and",
+        filters: node.filters.map((part) => renameColumns(part, rename)),
+    }),
+    or: (node) => ({
+        kind: "or",
+        filters: node.filters.map((part) => renameColumns(part, rename)),
+    }),
+}));
+//# sourceMappingURL=filter-columns.js.map

package/dist/internal/filter-columns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-columns.js","sourceRoot":"","sources":["../../src/internal/filter-columns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAA6B,EAC7B,MAAkC,EACX,EAAE,CACzB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,IAAI;IAC7C,KAAK,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,IAAI;IAC5C,EAAE,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/E,EAAE,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/E,EAAE,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/E,KAAK,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAClF,EAAE,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/E,GAAG,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAChF,EAAE,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/E,GAAG,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAChF,KAAK,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAClF,MAAM,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACnF,MAAM,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACnF,SAAS,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtF,YAAY,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACzF,MAAM,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACnF,GAAG,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;KACjE,CAAC;IACF,EAAE,EAAE,CAAC,IAAI,EAAyB,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;KACjE,CAAC;CACH,CAAC,CACH,CAAC"}

package/dist/internal/list-order.d.ts

@@ -0,0 +1,26 @@
+import * as Order from "effect/Order";
+import type { ColumnValue } from "../version-chain.ts";
+/**
+ * Strings by code point, as SQL's `"C"` collation orders them over UTF-8.
+ * JavaScript's `<` compares UTF-16 code units instead, which puts an astral
+ * character (a surrogate pair, from U+D800) before U+E000–U+FFFF.
+ */
+export declare const byCodePoint: Order.Order<string>;
+/** One order key, structurally (`./subtype`'s `ListOrder` fits). */
+interface OrderKey {
+    readonly column: string;
+    readonly direction: "asc" | "desc";
+}
+/** A row as the order reads it: its `id` and its columns by name. */
+type SortRow = {
+    readonly id: string;
+    readonly [column: string]: ColumnValue;
+};
+/**
+ * The total order a list renders as `ORDER BY <key> <direction> NULLS LAST,
+ * …, id ASC`: each key in turn, a `NULL` (or absent) column after every
+ * value in either direction, then `id` ascending, so no two rows tie.
+ */
+export declare const rowOrder: (keys: ReadonlyArray<OrderKey>) => Order.Order<SortRow>;
+export {};
+//# sourceMappingURL=list-order.d.ts.map

package/dist/internal/list-order.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-order.d.ts","sourceRoot":"","sources":["../../src/internal/list-order.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAG3C,CAAC;AA8DF,oEAAoE;AACpE,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC;CACpC;AAED,qEAAqE;AACrE,KAAK,OAAO,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,CAAC;AAgB/E;;;;GAIG;AACH,eAAO,MAAM,QAAQ,SAAU,aAAa,CAAC,QAAQ,CAAC,KAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CACvB,CAAC"}

package/dist/internal/list-order.js

@@ -0,0 +1,92 @@
+/**
+ * **The kernel's value and row orders**: the code-point string order that
+ * `./filter`'s comparison arms share with SQL's `COLLATE "C"`, and the list
+ * order the in-memory `LeafStore` fake sorts by (pulpit#112), so the fake and
+ * the filter never compare a string two ways.
+ *
+ * Internal: not a package entry point (absent from `package.json`
+ * `exports`) and excluded from the generated API docs (`docgen.json`).
+ * Typed structurally, so it never imports `./subtype`.
+ *
+ * @internal
+ */
+import * as Array from "effect/Array";
+import * as Order from "effect/Order";
+import * as Predicate from "effect/Predicate";
+/**
+ * Strings by code point, as SQL's `"C"` collation orders them over UTF-8.
+ * JavaScript's `<` compares UTF-16 code units instead, which puts an astral
+ * character (a surrogate pair, from U+D800) before U+E000–U+FFFF.
+ */
+export const byCodePoint = Order.mapInput(Order.Array(Order.Number), (text) => Array.map(Array.fromIterable(text), (char) => char.codePointAt(0) ?? 0));
+/**
+ * Numbers as PostgreSQL's `float8` sorts them: `NaN` equal to itself and
+ * after every number, where Effect's `Order.Number` puts it first.
+ */
+const byNumber = Order.make((self, that) => {
+    if (Number.isNaN(self))
+        return Number.isNaN(that) ? 0 : 1;
+    return Number.isNaN(that) ? -1 : Order.Number(self, that);
+});
+/**
+ * One kind of sort-key value: its guard and its order, the order lifted to
+ * every {@link ColumnValue} (two values the guard doesn't both admit tie).
+ */
+const kind = (is, order) => ({
+    is,
+    order: Order.make((self, that) => (is(self) && is(that) ? order(self, that) : 0)),
+});
+/**
+ * The kinds of sort-key value, each sorted as PostgreSQL sorts its type: a
+ * boolean `false` first, a number numerically, a `bigint` by value, a
+ * string by code point, a `Date` by its instant (an invalid one as `NaN`).
+ */
+const kinds = [
+    kind(Predicate.isBoolean, Order.Boolean),
+    kind(Predicate.isNumber, byNumber),
+    kind(Predicate.isBigInt, Order.BigInt),
+    kind(Predicate.isString, byCodePoint),
+    kind(Predicate.isDate, Order.mapInput(byNumber, (date) => date.getTime())),
+];
+/**
+ * A value's place in {@link kinds}; a JSON object or array comes after
+ * them all. Two values of different kinds sort by it, which is outside the
+ * contract (a SQL column has one type), so it only keeps the fake's order
+ * total and deterministic.
+ */
+const kindOf = (value) => {
+    const index = kinds.findIndex((each) => each.is(value));
+    return index === -1 ? kinds.length : index;
+};
+/**
+ * Two non-`NULL` sort-key values: by kind, then by that kind's order. Two
+ * JSON objects or arrays tie, leaving the order to the next key.
+ */
+const byValue = Order.make((self, that) => {
+    const left = kindOf(self);
+    const right = kindOf(that);
+    if (left !== right)
+        return Order.Number(left, right);
+    const same = kinds[left];
+    return same === undefined ? 0 : same.order(self, that);
+});
+/** One key: its column's values in its direction, a `NULL` or absent column last in both. */
+const byKey = (key) => {
+    const values = key.direction === "desc" ? Order.flip(byValue) : byValue;
+    return Order.make((self, that) => {
+        const left = self[key.column] ?? null;
+        const right = that[key.column] ?? null;
+        if (left === null)
+            return right === null ? 0 : 1;
+        return right === null ? -1 : values(left, right);
+    });
+};
+/** The closing key every list order ends with: `id` ascending, by code point. */
+const byId = Order.mapInput(byCodePoint, (row) => row.id);
+/**
+ * The total order a list renders as `ORDER BY <key> <direction> NULLS LAST,
+ * …, id ASC`: each key in turn, a `NULL` (or absent) column after every
+ * value in either direction, then `id` ascending, so no two rows tie.
+ */
+export const rowOrder = (keys) => Order.combineAll([...Array.map(keys, byKey), byId]);
+//# sourceMappingURL=list-order.js.map

package/dist/internal/list-order.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-order.js","sourceRoot":"","sources":["../../src/internal/list-order.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAG9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwB,KAAK,CAAC,QAAQ,CAC5D,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EACzB,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC1F,CAAC;AAEF;;;GAGG;AACH,MAAM,QAAQ,GAAwB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;IAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,IAAI,GAAG,CACX,EAAsC,EACtC,KAAqB,EACrB,EAAE,CAAC,CAAC;IACJ,EAAE;IACF,KAAK,EAAE,KAAK,CAAC,IAAI,CAAc,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/F,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,KAAK,GAAG;IACZ,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;IACxC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC;IACrC,IAAI,CACF,SAAS,CAAC,MAAM,EAChB,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CACzD;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,GAAG,CAAC,KAAkB,EAAU,EAAE;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,GAA6B,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAWH,6FAA6F;AAC7F,MAAM,KAAK,GAAG,CAAC,GAAa,EAAwB,EAAE;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QACvC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,IAAI,GAAyB,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAA6B,EAAwB,EAAE,CAC9E,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC"}

package/dist/internal/owned-columns.d.ts

@@ -0,0 +1,93 @@
+/**
+ * **The owned leaf's row reading**, shared by `./subtype` and `./edges` so
+ * the two cannot read the same view or row differently: the declared-column
+ * check (pulpit#79), the facts read off a row (pulpit#80), and the predicate
+ * over those facts, which `canViewOwned` delegates to (pulpit#85).
+ *
+ * Internal: not a package entry point (absent from `package.json`
+ * `exports`) and excluded from the generated API docs (`docgen.json`).
+ * Typed structurally, so it never imports `./subtype`.
+ *
+ * @internal
+ */
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import { Visibility } from "../content.ts";
+import type { ColumnValue } from "../version-chain.ts";
+/** The owned access declaration's column names, structurally (`./subtype`'s owned `LeafAccess` fits). */
+interface OwnedColumns {
+    readonly ownerColumn: string;
+    readonly visibilityColumn: string;
+    readonly draftColumn: Option.Option<string>;
+    readonly moderationColumn: Option.Option<string>;
+}
+/**
+ * The facts {@link canViewOwnedRow} reads off an owned row: `./subtype`'s
+ * `OwnedFacts`, except that the owner may be absent. A row whose owner
+ * column holds no string has no owner (pulpit#85).
+ */
+interface OwnedRowFacts {
+    readonly ownerId: Option.Option<string>;
+    readonly visibility: Visibility;
+    readonly draft: boolean;
+    /** Under review or rejected: a moderated row whose state is not exactly `approved` (pulpit#154). */
+    readonly unapproved: boolean;
+}
+/** The parts of `./subtype`'s viewer, policy and follower seam the predicate reads, structurally. */
+interface Account {
+    readonly id: string;
+}
+interface PrivateRung<A> {
+    readonly canViewPrivate: (account: A) => boolean;
+}
+interface IsFollower<R> {
+    readonly isFollower: (followerId: string, ownerId: string) => Effect.Effect<boolean, never, R>;
+}
+/**
+ * Whether the view carries every column an owned leaf declares (owner,
+ * visibility and, when declared, draft and moderation state). An owned leaf whose view lacks one
+ * reads no row: `ownedListFilter` lists nothing, and `defineSubtype`'s
+ * `get` / `getMany` and `./edges`' `canViewEndpoint` show nothing. Fail
+ * closed (`SEC-AUTH-ENUM-001`). Never throws.
+ *
+ * @internal
+ */
+export declare const declaresColumns: (access: OwnedColumns, viewColumns: ReadonlySet<string>) => boolean;
+/**
+ * Read an owned row's facts for `canViewOwned`, in `defineSubtype`'s
+ * `get` / `getMany` and `./edges`' `canViewEndpoint`. Each reading fails
+ * closed where `ownedListFilter` does (`SEC-AUTH-ENUM-001`): a visibility
+ * outside the enum (a dropped projection, a schema drift) reads as
+ * `private`, since the filter's `eq(visibility, "public")` arm lists only
+ * `public`; a draft column holding anything but an explicit `false` (a
+ * `NULL`, an absent key, a value outside the type) reads as a draft, since
+ * its `eq(draft, false)` arms list only `false`. A leaf without the draft
+ * axis reads `draft: false`. A moderation column holding anything but
+ * exactly `"approved"` reads as unapproved, since the filter's
+ * `eq(moderation, "approved")` arms list only `approved`; a leaf without the
+ * axis reads `unapproved: false`. An owner column holding anything but a string
+ * (a `NULL`, an absent key, a value outside the type) reads as no owner,
+ * never as its `String` form (pulpit#85; see pulpit#75): its `eq(owner, …)`
+ * and `in(owner, following)` arms match no `NULL`. Callers check
+ * {@link declaresColumns} first. Never throws.
+ *
+ * @internal
+ */
+export declare const ownedFacts: (access: OwnedColumns, row: {
+    readonly [column: string]: ColumnValue;
+}) => OwnedRowFacts;
+/**
+ * The owned-material read predicate over {@link ownedFacts}: `canViewOwned`
+ * in `./subtype` is this with a present owner, and `defineSubtype`'s
+ * `get` / `getMany` and `./edges`' `canViewEndpoint` call it directly. A
+ * row with no owner skips the owner arm and the follower check, so no
+ * viewer's id matches it and the follower seam is never asked about it:
+ * it is visible only when it is `public`, not a draft and not unapproved, or to the
+ * view-private rung, as `ownedListFilter` lists it (`SEC-AUTH-ENUM-001`).
+ * Never fails.
+ *
+ * @internal
+ */
+export declare const canViewOwnedRow: <A extends Account, R>(viewer: Option.Option<A>, policy: PrivateRung<A>, followers: IsFollower<R>, row: OwnedRowFacts) => Effect.Effect<boolean, never, R>;
+export {};
+//# sourceMappingURL=owned-columns.d.ts.map

package/dist/internal/owned-columns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-columns.d.ts","sourceRoot":"","sources":["../../src/internal/owned-columns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,yGAAyG;AACzG,UAAU,YAAY;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAClD;AAED;;;;GAIG;AACH,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,oGAAoG;IACpG,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,qGAAqG;AACrG,UAAU,OAAO;IACf,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AACD,UAAU,WAAW,CAAC,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC;CAClD;AACD,UAAU,UAAU,CAAC,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;CAChG;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,WAAY,YAAY,eAAe,WAAW,CAAC,MAAM,CAAC,KAAG,OAM3C,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,UAAU,WACb,YAAY,OACf;IAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,KAC9C,aAcD,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,OAAO,EAAE,CAAC,UAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAChB,WAAW,CAAC,CAAC,CAAC,aACX,UAAU,CAAC,CAAC,CAAC,OACnB,aAAa,KACjB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAajC,CAAC"}

package/dist/internal/owned-columns.js

@@ -0,0 +1,98 @@
+/**
+ * **The owned leaf's row reading**, shared by `./subtype` and `./edges` so
+ * the two cannot read the same view or row differently: the declared-column
+ * check (pulpit#79), the facts read off a row (pulpit#80), and the predicate
+ * over those facts, which `canViewOwned` delegates to (pulpit#85).
+ *
+ * Internal: not a package entry point (absent from `package.json`
+ * `exports`) and excluded from the generated API docs (`docgen.json`).
+ * Typed structurally, so it never imports `./subtype`.
+ *
+ * @internal
+ */
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Predicate from "effect/Predicate";
+import * as Schema from "effect/Schema";
+import { Visibility } from "../content.js";
+const isVisibility = Schema.is(Visibility);
+/**
+ * Whether the view carries every column an owned leaf declares (owner,
+ * visibility and, when declared, draft and moderation state). An owned leaf whose view lacks one
+ * reads no row: `ownedListFilter` lists nothing, and `defineSubtype`'s
+ * `get` / `getMany` and `./edges`' `canViewEndpoint` show nothing. Fail
+ * closed (`SEC-AUTH-ENUM-001`). Never throws.
+ *
+ * @internal
+ */
+export const declaresColumns = (access, viewColumns) => [
+    access.ownerColumn,
+    access.visibilityColumn,
+    ...Option.toArray(access.draftColumn),
+    ...Option.toArray(access.moderationColumn),
+].every((column) => viewColumns.has(column));
+/**
+ * Read an owned row's facts for `canViewOwned`, in `defineSubtype`'s
+ * `get` / `getMany` and `./edges`' `canViewEndpoint`. Each reading fails
+ * closed where `ownedListFilter` does (`SEC-AUTH-ENUM-001`): a visibility
+ * outside the enum (a dropped projection, a schema drift) reads as
+ * `private`, since the filter's `eq(visibility, "public")` arm lists only
+ * `public`; a draft column holding anything but an explicit `false` (a
+ * `NULL`, an absent key, a value outside the type) reads as a draft, since
+ * its `eq(draft, false)` arms list only `false`. A leaf without the draft
+ * axis reads `draft: false`. A moderation column holding anything but
+ * exactly `"approved"` reads as unapproved, since the filter's
+ * `eq(moderation, "approved")` arms list only `approved`; a leaf without the
+ * axis reads `unapproved: false`. An owner column holding anything but a string
+ * (a `NULL`, an absent key, a value outside the type) reads as no owner,
+ * never as its `String` form (pulpit#85; see pulpit#75): its `eq(owner, …)`
+ * and `in(owner, following)` arms match no `NULL`. Callers check
+ * {@link declaresColumns} first. Never throws.
+ *
+ * @internal
+ */
+export const ownedFacts = (access, row) => ({
+    ownerId: Option.liftPredicate(row[access.ownerColumn], Predicate.isString),
+    visibility: Option.getOrElse(Option.liftPredicate(row[access.visibilityColumn], isVisibility), () => "private"),
+    draft: Option.match(access.draftColumn, {
+        onNone: () => false,
+        onSome: (column) => row[column] !== false,
+    }),
+    unapproved: Option.match(access.moderationColumn, {
+        onNone: () => false,
+        onSome: (column) => row[column] !== "approved",
+    }),
+});
+/**
+ * The owned-material read predicate over {@link ownedFacts}: `canViewOwned`
+ * in `./subtype` is this with a present owner, and `defineSubtype`'s
+ * `get` / `getMany` and `./edges`' `canViewEndpoint` call it directly. A
+ * row with no owner skips the owner arm and the follower check, so no
+ * viewer's id matches it and the follower seam is never asked about it:
+ * it is visible only when it is `public`, not a draft and not unapproved, or to the
+ * view-private rung, as `ownedListFilter` lists it (`SEC-AUTH-ENUM-001`).
+ * Never fails.
+ *
+ * @internal
+ */
+export const canViewOwnedRow = (viewer, policy, followers, row) => {
+    if (!row.draft && !row.unapproved && row.visibility === "public")
+        return Effect.succeed(true);
+    if (Option.isNone(viewer))
+        return Effect.succeed(false);
+    const account = viewer.value;
+    if (Option.contains(row.ownerId, account.id))
+        return Effect.succeed(true);
+    if (policy.canViewPrivate(account))
+        return Effect.succeed(true);
+    // Not the owner, not privileged: a draft, or a row not approved, is hidden whatever its visibility.
+    if (row.draft || row.unapproved)
+        return Effect.succeed(false);
+    if (row.visibility === "private")
+        return Effect.succeed(false);
+    return Option.match(row.ownerId, {
+        onNone: () => Effect.succeed(false),
+        onSome: (ownerId) => followers.isFollower(account.id, ownerId),
+    });
+};
+//# sourceMappingURL=owned-columns.js.map

package/dist/internal/owned-columns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-columns.js","sourceRoot":"","sources":["../../src/internal/owned-columns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAmC3C,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;AAE3C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAoB,EAAE,WAAgC,EAAW,EAAE,CACjG;IACE,MAAM,CAAC,WAAW;IAClB,MAAM,CAAC,gBAAgB;IACvB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;IACrC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;CAC3C,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAAoB,EACpB,GAA+C,EAChC,EAAE,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC;IAC1E,UAAU,EAAE,MAAM,CAAC,SAAS,CAC1B,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC,EAChE,GAAe,EAAE,CAAC,SAAS,CAC5B;IACD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QACtC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;QACnB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK;KAC1C,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAChD,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;QACnB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,UAAU;KAC/C,CAAC;CACH,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,MAAwB,EACxB,MAAsB,EACtB,SAAwB,EACxB,GAAkB,EACgB,EAAE;IACpC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,oGAAoG;IACpG,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE;QAC/B,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/internal/plain-rows.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The pieces `./proposals` and `./moderation`'s reports share: both are
+ * plain-row families (not nodes) with a sign-in gate, a write clock and a
+ * page query narrowed to one leaf type, an optional target and an
+ * optional status.
+ *
+ * @module pulpit/internal/plain-rows
+ */
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import { type ListFilter } from "../filter.ts";
+import { Unauthorized, type Viewer, type ViewerAccount } from "../subtype.ts";
+/** The write clock: the current instant, as the `Date` a row stores. */
+export declare const nowDate: Effect.Effect<Date>;
+/** The signed-in account, or `Unauthorized`. */
+export declare const signedIn: <R>(viewer: Effect.Effect<Viewer, never, R>) => Effect.Effect<ViewerAccount, Unauthorized, R>;
+/**
+ * A list request's store query: the leaf's rows under the viewer's `scope`,
+ * narrowed by target and status when asked, the page clamped to
+ * `MAX_PAGE_LIMIT` (`SEC-INPUT-003`).
+ */
+export declare const plainRowQuery: <Status extends string>(type: string, scope: ListFilter<never>, request: {
+    readonly targetId: Option.Option<string>;
+    readonly status: Option.Option<Status>;
+    readonly limit: number;
+    readonly offset: number;
+}) => {
+    where: ListFilter<never>;
+    limit: number;
+    offset: number;
+};
+//# sourceMappingURL=plain-rows.d.ts.map

package/dist/internal/plain-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plain-rows.d.ts","sourceRoot":"","sources":["../../src/internal/plain-rows.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAkB,YAAY,EAAE,KAAK,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9F,wEAAwE;AACxE,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAEvC,CAAC;AAEF,gDAAgD;AAChD,eAAO,MAAM,QAAQ,GAAI,CAAC,UAChB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KACtC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAC4C,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,aAAa,GAAI,MAAM,SAAS,MAAM,QAC3C,MAAM,SACL,UAAU,CAAC,KAAK,CAAC,WACf;IACP,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;IAED,KAAK;IASL,KAAK;IACL,MAAM;CACN,CAAC"}

package/dist/internal/plain-rows.js

@@ -0,0 +1,32 @@
+/**
+ * The pieces `./proposals` and `./moderation`'s reports share: both are
+ * plain-row families (not nodes) with a sign-in gate, a write clock and a
+ * page query narrowed to one leaf type, an optional target and an
+ * optional status.
+ *
+ * @module pulpit/internal/plain-rows
+ */
+import * as Clock from "effect/Clock";
+import * as DateTime from "effect/DateTime";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import { always, and, eq } from "../filter.js";
+import { MAX_PAGE_LIMIT, Unauthorized } from "../subtype.js";
+/** The write clock: the current instant, as the `Date` a row stores. */
+export const nowDate = Effect.map(Clock.currentTimeMillis, (millis) => DateTime.toDate(DateTime.makeUnsafe(millis)));
+/** The signed-in account, or `Unauthorized`. */
+export const signedIn = (viewer) => Effect.flatMap(viewer, (account) => Effect.fromOption(account, () => new Unauthorized()));
+/**
+ * A list request's store query: the leaf's rows under the viewer's `scope`,
+ * narrowed by target and status when asked, the page clamped to
+ * `MAX_PAGE_LIMIT` (`SEC-INPUT-003`).
+ */
+export const plainRowQuery = (type, scope, request) => ({
+    where: and(eq("targetType", type), scope, Option.match(request.targetId, { onNone: () => always, onSome: (id) => eq("targetId", id) }), Option.match(request.status, {
+        onNone: () => always,
+        onSome: (status) => eq("status", status),
+    })),
+    limit: Math.max(1, Math.min(Math.trunc(request.limit), MAX_PAGE_LIMIT)),
+    offset: Math.max(0, Math.trunc(request.offset)),
+});
+//# sourceMappingURL=plain-rows.js.map

package/dist/internal/plain-rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plain-rows.js","sourceRoot":"","sources":["../../src/internal/plain-rows.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAmB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAmC,MAAM,eAAe,CAAC;AAE9F,wEAAwE;AACxE,MAAM,CAAC,MAAM,OAAO,GAAwB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CACzF,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAC7C,CAAC;AAEF,gDAAgD;AAChD,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,MAAuC,EACQ,EAAE,CACjD,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC;AAE5F;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,IAAY,EACZ,KAAwB,EACxB,OAKC,EACD,EAAE,CAAC,CAAC;IACJ,KAAK,EAAE,GAAG,CACR,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,EACtB,KAAK,EACL,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,EAC5F,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE;QAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM;QACpB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;KACzC,CAAC,CACH;IACD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;IACvE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;CAChD,CAAC,CAAC"}