@thomasfosterau/pulpit 0.0.0 → 0.1.0

package/dist/comments.d.ts

@@ -0,0 +1,212 @@
+/**
+ * **The comments family** — threaded comments on any node, as versioned
+ * owned leaves, behind the target's own read gate and the moderation gate.
+ *
+ * The behavioural spec is gardeneria's `apps/api/src/operations/comments.ts`
+ * (`isCommentReadableBy`, `moderationVisibilityFilter`,
+ * `targetVisibilityFilter`) and its tests
+ * (`comment-visibility.test.ts`, `comment-target-visibility-flip.test.ts`);
+ * a `#NNN` here names a gardeneria issue.
+ *
+ * ## The model (owner decisions on pulpit#50)
+ *
+ * - **A comment is a versioned owned leaf**, built with `./subtype`'s
+ *   `defineSubtype`: edits append versions, a delete tombstones, and its
+ *   history is gated like any leaf's. Its moderation state is
+ *   `./moderation`'s, so the leaf's hooks carry `moderationHook` (a new
+ *   comment starts `pending`).
+ * - **Reply depth is the family's `maxDepth`**, default `1` (gardeneria):
+ *   `0` is flat (website), `N` threads `N` deep. A reply past it fails
+ *   {@link CommentDepthExceeded}. Each comment stores its `targetType`,
+ *   `targetId`, `parentId` (`null` at the top) and `depth` (`0` at the
+ *   top), written by `create`.
+ *
+ * ## The read gates (all three, `SEC-AUTH-ENUM-001`)
+ *
+ * A comment reads to a viewer only when:
+ *
+ * 1. the comment leaf's own `get` serves it (its owned visibility, and a
+ *    tombstone only to the view-deleted rung);
+ * 2. it is `approved`, or the viewer wrote it, or holds the moderate rung
+ *    ({@link canViewModerated} / {@link moderationListFilter}, one rule in
+ *    two readings): moderation is not ownership, so the target's owner
+ *    does not see a pending comment on their own row;
+ * 3. the viewer can read its target, through the target leaf's own `get`:
+ *    a comment on a target they can't read is missing to them, whatever
+ *    its own state, and listing by target checks the target first.
+ *
+ * Anything else is `NodeNotFound`, never `Forbidden`. Writes to an
+ * existing comment are the comment leaf's own (its author, or the moderate
+ * rung).
+ *
+ * @copyright Thomas Foster
+ * @module pulpit/comments
+ * @since 0.1.0
+ */
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Schema from "effect/Schema";
+import { type ListFilter } from "./filter.ts";
+import type { ModerationDeclaration } from "./moderation.ts";
+import { type AccessPolicy, type Forbidden, type InvalidListOrder, type LeafRow, type LeafStore, type ListOrder, type Page, type SubtypeOps, type Unauthorized, type Viewer, type WriteRejected } from "./subtype.ts";
+import { NodeNotFound, type ChainState, type ChainWrite, type NodeAlreadyExists, type VersionConflict } from "./version-chain.ts";
+declare const CommentDepthExceeded_base: Schema.Class<CommentDepthExceeded, Schema.TaggedStruct<"CommentDepthExceeded", {
+    readonly type: Schema.String;
+    readonly parentId: Schema.String;
+    readonly maxDepth: Schema.Finite;
+}>, import("effect/Cause").YieldableError & {
+    readonly brand: unique symbol;
+}>;
+/**
+ * A reply that would nest deeper than the family's `maxDepth`: the wire's
+ * 422.
+ *
+ * @since 0.1.0
+ */
+export declare class CommentDepthExceeded extends CommentDepthExceeded_base {
+}
+declare const CommentDeclarationError_base: Schema.Class<CommentDeclarationError, Schema.TaggedStruct<"CommentDeclarationError", {
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError & {
+    readonly brand: unique symbol;
+}>;
+/**
+ * A comments family declared against the rules: a `maxDepth` that is not
+ * a non-negative safe integer. Thrown by {@link defineComments} when the
+ * family is declared, never an Effect failure.
+ *
+ * @since 0.1.0
+ */
+export declare class CommentDeclarationError extends CommentDeclarationError_base {
+}
+/**
+ * The columns the moderation gate reads: the comment's author (its owner
+ * column) and its moderation state.
+ *
+ * @since 0.1.0
+ */
+export interface ModeratedColumns {
+    readonly authorColumn: string;
+    readonly stateColumn: string;
+}
+/**
+ * The moderation gate on one comment row: the moderate rung reads every
+ * state, a signed-in viewer their own comments in every state, and
+ * everyone else only an exactly `approved` one. The single-row reading of
+ * {@link moderationListFilter}; the two never disagree. Never fails.
+ *
+ * @since 0.1.0
+ */
+export declare const canViewModerated: (viewer: Viewer, policy: AccessPolicy, columns: ModeratedColumns, row: LeafRow) => boolean;
+/**
+ * The moderation gate as a list filter: {@link canViewModerated}'s three
+ * arms.
+ *
+ * @since 0.1.0
+ */
+export declare const moderationListFilter: <Following>(viewer: Viewer, policy: AccessPolicy, columns: ModeratedColumns) => ListFilter<Following>;
+/**
+ * A target leaf a comment may hang off: its read, which the target gate
+ * runs as the viewer.
+ *
+ * @since 0.1.0
+ */
+export interface CommentTarget<E, R> {
+    /** The target leaf's own `get`: `NodeNotFound` for a target the viewer can't read. */
+    readonly get: (id: string) => Effect.Effect<unknown, NodeNotFound | E, R>;
+}
+/**
+ * A comments family's declaration.
+ *
+ * @since 0.1.0
+ */
+export interface CommentsDefinition<Resource, Following, E, R> {
+    /**
+     * The comment leaf's operations (`defineSubtype` over an owned access,
+     * with `moderationHook` among its hooks).
+     */
+    readonly comments: SubtypeOps<Resource, E, R>;
+    /** The comment leaf's current-version view: the rows the gates read their facts from. */
+    readonly leaves: LeafStore<LeafRow, Following, E, R>;
+    /** The leaves a comment may target, by wire type; any other type is `NodeNotFound`. */
+    readonly targets: {
+        readonly [type: string]: CommentTarget<E, R>;
+    };
+    readonly viewer: Effect.Effect<Viewer, never, R>;
+    readonly policy: AccessPolicy;
+    /** The moderation declaration the comment leaf's hook uses; its `column` is the state the gate reads. */
+    readonly moderation: ModerationDeclaration;
+    /** The comment's author column: the leaf's `ownerColumn` (conventionally `ownerId`). */
+    readonly authorColumn: string;
+    /**
+     * How deep replies nest: `0` flat, `1` (the default) one level of
+     * replies, `N` deeper. A non-negative safe integer, or
+     * {@link defineComments} throws {@link CommentDeclarationError}.
+     */
+    readonly maxDepth?: number | undefined;
+}
+/**
+ * A comment create: its target, its parent comment (none for a top-level
+ * comment), and the leaf's own columns (its body, its visibility).
+ *
+ * @since 0.1.0
+ */
+export interface CommentCreate {
+    readonly id: Option.Option<string>;
+    readonly targetType: string;
+    readonly targetId: string;
+    readonly parentId: Option.Option<string>;
+    readonly state: ChainState;
+}
+/**
+ * One page of a target's comments.
+ *
+ * @since 0.1.0
+ */
+export interface CommentListRequest {
+    readonly targetType: string;
+    readonly targetId: string;
+    /**
+     * None: every comment on the target; some none: the top-level comments
+     * (`depth = 0`); some parent: that comment's replies.
+     */
+    readonly parentId: Option.Option<Option.Option<string>>;
+    readonly limit: number;
+    readonly offset: number;
+    /** Tombstoned comments too, for the view-deleted rung (as the leaf's own `list` takes it). */
+    readonly includeDeleted: boolean;
+    readonly orderBy?: ReadonlyArray<ListOrder> | undefined;
+}
+/**
+ * The operations {@link defineComments} produces.
+ *
+ * @since 0.1.0
+ */
+export interface CommentOps<Resource, E, R> {
+    /**
+     * Comment on a target the viewer can read, as a reply to `parentId`
+     * when given (a comment on the same target the viewer can read). Fails
+     * `NodeNotFound` for an unreadable target or parent, a parent on another
+     * target included; {@link CommentDepthExceeded} past `maxDepth`; and as
+     * the comment leaf's `create` does (`Unauthorized` when anonymous).
+     */
+    readonly create: (input: CommentCreate) => Effect.Effect<ChainWrite, NodeNotFound | CommentDepthExceeded | Unauthorized | Forbidden | WriteRejected | NodeAlreadyExists | VersionConflict | E, R>;
+    /** One comment, through all three read gates; `NodeNotFound` otherwise. */
+    readonly get: (id: string) => Effect.Effect<Resource, NodeNotFound | E, R>;
+    /**
+     * A target's comments, after its target gate (`NodeNotFound` for a target
+     * the viewer can't read), through the comment leaf's own list and the
+     * moderation gate. The page is clamped to `MAX_PAGE_LIMIT`; an unsortable
+     * order fails `InvalidListOrder`, as the comment leaf's `list` does.
+     */
+    readonly listByTarget: (request: CommentListRequest) => Effect.Effect<Page<Resource>, NodeNotFound | InvalidListOrder | E, R>;
+}
+/**
+ * Bind a comments family over its comment leaf. Edits, deletes and history
+ * stay the comment leaf's own operations.
+ *
+ * @since 0.1.0
+ */
+export declare const defineComments: <Resource, Following, E, R>(definition: CommentsDefinition<Resource, Following, E, R>) => CommentOps<Resource, E, R>;
+export {};
+//# sourceMappingURL=comments.d.ts.map

package/dist/comments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.d.ts","sourceRoot":"","sources":["../src/comments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,OAAO,EACZ,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;;;;;;oBAYR,OAAO,MAAM;;AARjC;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,yBAOxC;CAAG;;;;oBAWe,OAAO,MAAM;;AATjC;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,4BAGa;CAAG;AAI7D;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,WACnB,MAAM,UACN,YAAY,WACX,gBAAgB,OACpB,OAAO,KACX,OAOA,CAAC;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,UACpC,MAAM,UACN,YAAY,WACX,gBAAgB,KACxB,UAAU,CAAC,SAAS,CAOnB,CAAC;AAIL;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,CAAC;IACjC,sFAAsF;IACtF,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;CAC3E;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC3D;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,yFAAyF;IACzF,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;KAAE,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,yGAAyG;IACzG,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,wFAAwF;IACxF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IAEH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IAEjC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;CACzD;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,aAAa,KACjB,MAAM,CAAC,MAAM,CAChB,UAAU,EACR,YAAY,GACZ,oBAAoB,GACpB,YAAY,GACZ,SAAS,GACT,aAAa,GACb,iBAAiB,GACjB,eAAe,GACf,CAAC,EACH,CAAC,CACF,CAAC;IACF,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,CACrB,OAAO,EAAE,kBAAkB,KACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,gBAAgB,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;CAC5E;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,cAC1C,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,KACxD,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CA4G3B,CAAC"}

package/dist/comments.js

@@ -0,0 +1,192 @@
+/**
+ * **The comments family** — threaded comments on any node, as versioned
+ * owned leaves, behind the target's own read gate and the moderation gate.
+ *
+ * The behavioural spec is gardeneria's `apps/api/src/operations/comments.ts`
+ * (`isCommentReadableBy`, `moderationVisibilityFilter`,
+ * `targetVisibilityFilter`) and its tests
+ * (`comment-visibility.test.ts`, `comment-target-visibility-flip.test.ts`);
+ * a `#NNN` here names a gardeneria issue.
+ *
+ * ## The model (owner decisions on pulpit#50)
+ *
+ * - **A comment is a versioned owned leaf**, built with `./subtype`'s
+ *   `defineSubtype`: edits append versions, a delete tombstones, and its
+ *   history is gated like any leaf's. Its moderation state is
+ *   `./moderation`'s, so the leaf's hooks carry `moderationHook` (a new
+ *   comment starts `pending`).
+ * - **Reply depth is the family's `maxDepth`**, default `1` (gardeneria):
+ *   `0` is flat (website), `N` threads `N` deep. A reply past it fails
+ *   {@link CommentDepthExceeded}. Each comment stores its `targetType`,
+ *   `targetId`, `parentId` (`null` at the top) and `depth` (`0` at the
+ *   top), written by `create`.
+ *
+ * ## The read gates (all three, `SEC-AUTH-ENUM-001`)
+ *
+ * A comment reads to a viewer only when:
+ *
+ * 1. the comment leaf's own `get` serves it (its owned visibility, and a
+ *    tombstone only to the view-deleted rung);
+ * 2. it is `approved`, or the viewer wrote it, or holds the moderate rung
+ *    ({@link canViewModerated} / {@link moderationListFilter}, one rule in
+ *    two readings): moderation is not ownership, so the target's owner
+ *    does not see a pending comment on their own row;
+ * 3. the viewer can read its target, through the target leaf's own `get`:
+ *    a comment on a target they can't read is missing to them, whatever
+ *    its own state, and listing by target checks the target first.
+ *
+ * Anything else is `NodeNotFound`, never `Forbidden`. Writes to an
+ * existing comment are the comment leaf's own (its author, or the moderate
+ * rung).
+ *
+ * @copyright Thomas Foster
+ * @module pulpit/comments
+ * @since 0.1.0
+ */
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Predicate from "effect/Predicate";
+import * as Schema from "effect/Schema";
+import { always, and, eq, or } from "./filter.js";
+import { MAX_PAGE_LIMIT, } from "./subtype.js";
+import { NodeNotFound, } from "./version-chain.js";
+// ── Errors ────────────────────────────────────────────────────────────
+/**
+ * A reply that would nest deeper than the family's `maxDepth`: the wire's
+ * 422.
+ *
+ * @since 0.1.0
+ */
+export class CommentDepthExceeded extends Schema.TaggedError()("CommentDepthExceeded", {
+    type: Schema.String,
+    parentId: Schema.String,
+    maxDepth: Schema.Finite,
+}) {
+}
+/**
+ * A comments family declared against the rules: a `maxDepth` that is not
+ * a non-negative safe integer. Thrown by {@link defineComments} when the
+ * family is declared, never an Effect failure.
+ *
+ * @since 0.1.0
+ */
+export class CommentDeclarationError extends Schema.TaggedError()("CommentDeclarationError", { message: Schema.String }) {
+}
+/**
+ * The moderation gate on one comment row: the moderate rung reads every
+ * state, a signed-in viewer their own comments in every state, and
+ * everyone else only an exactly `approved` one. The single-row reading of
+ * {@link moderationListFilter}; the two never disagree. Never fails.
+ *
+ * @since 0.1.0
+ */
+export const canViewModerated = (viewer, policy, columns, row) => row[columns.stateColumn] === "approved" ||
+    Option.exists(viewer, (account) => policy.canModerate(account) ||
+        (Predicate.isString(row[columns.authorColumn]) && row[columns.authorColumn] === account.id));
+/**
+ * The moderation gate as a list filter: {@link canViewModerated}'s three
+ * arms.
+ *
+ * @since 0.1.0
+ */
+export const moderationListFilter = (viewer, policy, columns) => Option.match(viewer, {
+    onNone: () => eq(columns.stateColumn, "approved"),
+    onSome: (account) => policy.canModerate(account)
+        ? always
+        : or(eq(columns.stateColumn, "approved"), eq(columns.authorColumn, account.id)),
+});
+/**
+ * Bind a comments family over its comment leaf. Edits, deletes and history
+ * stay the comment leaf's own operations.
+ *
+ * @since 0.1.0
+ */
+export const defineComments = (definition) => {
+    const { comments, leaves, policy } = definition;
+    const type = comments.type;
+    const maxDepth = definition.maxDepth ?? 1;
+    if (!Number.isSafeInteger(maxDepth) || maxDepth < 0) {
+        throw new CommentDeclarationError({
+            message: `${type}: maxDepth must be a non-negative safe integer, not ${maxDepth}`,
+        });
+    }
+    const columns = {
+        authorColumn: definition.authorColumn,
+        stateColumn: definition.moderation.column,
+    };
+    /** The target gate: the target leaf's own read, as the viewer. */
+    const targetReadable = (targetType, targetId) => Option.match(Option.fromUndefinedOr(definition.targets[targetType]), {
+        onNone: () => Effect.fail(new NodeNotFound({ type: targetType, id: targetId })),
+        onSome: (target) => Effect.asVoid(target.get(targetId)),
+    });
+    /** The comment row a viewer may read, through all three gates, or `NodeNotFound`. */
+    const readableRow = (viewer, id) => Effect.gen(function* () {
+        const resource = yield* comments.get(id);
+        const row = yield* leaves.get(id);
+        if (Option.isNone(row) || !canViewModerated(viewer, policy, columns, row.value)) {
+            return yield* new NodeNotFound({ type, id });
+        }
+        const targetType = row.value["targetType"];
+        const targetId = row.value["targetId"];
+        if (!Predicate.isString(targetType) || !Predicate.isString(targetId)) {
+            return yield* new NodeNotFound({ type, id });
+        }
+        // A comment on a target the viewer can't read is missing to them.
+        yield* Effect.mapError(targetReadable(targetType, targetId), () => new NodeNotFound({ type, id }));
+        return { resource, row: row.value };
+    });
+    /** A row's stored depth: `0` for a top-level comment; a value that is no number reads as past every limit. */
+    const depthOf = (row) => {
+        const depth = row["depth"];
+        return Predicate.isNumber(depth) ? depth : Number.POSITIVE_INFINITY;
+    };
+    const create = Effect.fn(`${type}.comments.create`)(function* (input) {
+        const viewer = yield* definition.viewer;
+        yield* targetReadable(input.targetType, input.targetId);
+        let depth = 0;
+        if (Option.isSome(input.parentId)) {
+            const parentId = input.parentId.value;
+            const parent = yield* readableRow(viewer, parentId);
+            if (parent.row["targetId"] !== input.targetId ||
+                parent.row["targetType"] !== input.targetType) {
+                return yield* new NodeNotFound({ type, id: parentId });
+            }
+            depth = depthOf(parent.row) + 1;
+            if (depth > maxDepth)
+                return yield* new CommentDepthExceeded({ type, parentId, maxDepth });
+        }
+        return yield* comments.create({
+            id: input.id,
+            state: {
+                ...input.state,
+                targetType: input.targetType,
+                targetId: input.targetId,
+                parentId: Option.getOrNull(input.parentId),
+                depth,
+            },
+        });
+    });
+    const get = Effect.fn(`${type}.comments.get`)(function* (id) {
+        return (yield* readableRow(yield* definition.viewer, id)).resource;
+    });
+    const listByTarget = Effect.fn(`${type}.comments.listByTarget`)(function* (request) {
+        const viewer = yield* definition.viewer;
+        yield* targetReadable(request.targetType, request.targetId);
+        const parent = Option.match(request.parentId, {
+            onNone: () => always,
+            onSome: (parentId) => Option.match(parentId, {
+                onNone: () => eq("depth", 0),
+                onSome: (id) => eq("parentId", id),
+            }),
+        });
+        return yield* comments.list({
+            where: and(eq("targetType", request.targetType), eq("targetId", request.targetId), moderationListFilter(viewer, policy, columns), parent),
+            includeDeleted: request.includeDeleted,
+            limit: Math.min(request.limit, MAX_PAGE_LIMIT),
+            offset: request.offset,
+            orderBy: request.orderBy,
+        });
+    });
+    return { create, get, listByTarget };
+};
+//# sourceMappingURL=comments.js.map

package/dist/comments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.js","sourceRoot":"","sources":["../src/comments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAmB,MAAM,aAAa,CAAC;AAEnE,OAAO,EACL,cAAc,GAYf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,GAKb,MAAM,oBAAoB,CAAC;AAE5B,yEAAyE;AAEzE;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAGzD,CAAC,sBAAsB,EAAE;IAC1B,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM;CACxB,CAAC;CAAG;AAEL;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAG5D,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;CAAG;AAe7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,EACd,MAAoB,EACpB,OAAyB,EACzB,GAAY,EACH,EAAE,CACX,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,UAAU;IACvC,MAAM,CAAC,MAAM,CACX,MAAM,EACN,CAAC,OAAO,EAAE,EAAE,CACV,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QAC3B,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC,CAC9F,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,MAAc,EACd,MAAoB,EACpB,OAAyB,EACF,EAAE,CACzB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,GAA0B,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC;IACxE,MAAM,EAAE,CAAC,OAAO,EAAyB,EAAE,CACzC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,EAAE,CAAY,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CAC/F,CAAC,CAAC;AAwHL;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,UAAyD,EAC7B,EAAE;IAC9B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,uBAAuB,CAAC;YAChC,OAAO,EAAE,GAAG,IAAI,uDAAuD,QAAQ,EAAE;SAClF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAqB;QAChC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM;KAC1C,CAAC;IAEF,kEAAkE;IAClE,MAAM,cAAc,GAAG,CAAC,UAAkB,EAAE,QAAgB,EAAE,EAAE,CAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE;QACnE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;KACxD,CAAC,CAAC;IAEL,qFAAqF;IACrF,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,EAAU,EAAE,EAAE,CACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,kEAAkE;QAClE,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CACpB,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,EACpC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CACrC,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,8GAA8G;IAC9G,MAAM,OAAO,GAAG,CAAC,GAAY,EAAU,EAAE;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IACtE,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAoB;QACjF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACxC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACpD,IACE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,QAAQ;gBACzC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,UAAU,EAC7C,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,GAAG,QAAQ;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE;gBACL,GAAG,KAAK,CAAC,KAAK;gBACd,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC1C,KAAK;aACN;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAU;QACjE,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EACvE,OAA2B;QAE3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACxC,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC5C,MAAM,EAAE,GAAsB,EAAE,CAAC,MAAM;YACvC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACnB,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;gBACrB,MAAM,EAAE,GAAsB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/C,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;aACnC,CAAC;SACL,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC1B,KAAK,EAAE,GAAG,CACR,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EACpC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAChC,oBAAoB,CAAQ,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EACpD,MAAM,CACP;YACD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC,CAAC"}

package/dist/content.d.ts

@@ -0,0 +1,231 @@
+/**
+ * **The Content model half of the kernel** — the shared Content-axis field
+ * spreads and the base `content` resource, defined via
+ * `@thomasfosterau/effect-jsonapi`'s `Resource.make`.
+ *
+ * Ported from gardeneria's `packages/models/src/models/content.ts` (the
+ * three-state `Visibility`; website's copy is the older two-state one) and the
+ * timestamp / tombstone spreads of its `packages/models/src/utilities.ts`. A
+ * `#NNN` here names a gardeneria issue.
+ *
+ * Every spread is a plain `const` field map a Content subtype spreads into its
+ * own `Resource.make({ attributes })`, so one declaration drives the resource
+ * object, its documents and the create / update projections (the tri-state
+ * rule: a value sets, `null` clears a nullable column, `undefined` carries
+ * forward — declared on the descriptor, never re-spelled at a call site).
+ *
+ * @copyright Thomas Foster
+ * @module pulpit/content
+ * @since 0.1.0
+ */
+import { Relationship, Resource } from "@thomasfosterau/effect-jsonapi";
+import * as Schema from "effect/Schema";
+/**
+ * Visibility — the explicit access axis the publication policy reads,
+ * independent of soft-delete and the draft flag. Three states, because the
+ * kernel is multi-tenant:
+ *
+ * - `public` — anyone, signed in or not; the only state the KV read-through
+ *   cache may ever hold (`isPubliclyServeable` in `./publication`);
+ * - `followers` — the owner, the owner's followers (the follower seam in
+ *   `./subtype`), and the privileged rung;
+ * - `private` — the owner and the privileged rung only.
+ *
+ * The predicate lives in ONE place — `canViewOwned` in `./subtype` — and
+ * every read of an owned row goes through it. Content carries it on the
+ * Content branch's version row; owned Entity / File leaves carry the same
+ * column on their own version row, declared with
+ * {@link ownedVisibilityResourceFields}.
+ *
+ * @since 0.1.0
+ */
+export declare const Visibility: Schema.Literals<readonly ["public", "followers", "private"]>;
+/**
+ * The {@link Visibility} literal union: `"public" | "followers" | "private"`.
+ *
+ * @since 0.1.0
+ */
+export type Visibility = typeof Visibility.Type;
+/**
+ * The two orthogonal Content-branch axes every Content subtype carries on its
+ * version row: `visibility` (three-state, above) and the binary `draft` flag
+ * (`PUB-009` / `PUB-010`). Both are required on the resource but optional to
+ * supply at create / update (a DB default applies, updates carry forward);
+ * neither is ever cleared.
+ *
+ * `Resource.attribute(schema, { create: "optional" })` is the
+ * required-on-resource, optional-at-both-inputs, never-cleared descriptor.
+ *
+ * @since 0.1.0
+ */
+export declare const contentVisibilityResourceFields: {
+    readonly visibility: Resource.Attribute<Schema.Literals<readonly ["public", "followers", "private"]>, true, "optional", "optional", false>;
+    readonly draft: Resource.Attribute<Schema.Boolean, true, "optional", "optional", false>;
+};
+/**
+ * The visibility / draft fields as **create-input** shapes (`Schema.optional`,
+ * non-null), for Content subtypes' hand-written `Create` structs — a form
+ * adapter passes `value | undefined`, which `createInput`'s strict
+ * `optionalKey` rejects, so the create struct is hand-written.
+ *
+ * @since 0.1.0
+ */
+export declare const contentVisibilityCreateFields: {
+    readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "followers", "private"]>>;
+    readonly draft: Schema.optional<Schema.Boolean>;
+};
+/**
+ * The visibility axis alone, for **owned Entity / File leaves** (a garden, an
+ * organism, an image): they carry `visibility` on their own version row but
+ * no `draft` flag — a garden is not a draft of anything. Same descriptor as
+ * the Content pair: required on the resource, optional at both inputs, never
+ * cleared.
+ *
+ * @since 0.1.0
+ */
+export declare const ownedVisibilityResourceFields: {
+    readonly visibility: Resource.Attribute<Schema.Literals<readonly ["public", "followers", "private"]>, true, "optional", "optional", false>;
+};
+/**
+ * The version-chain timestamps every node-family resource carries:
+ * `createdAt` (the node's version-0 commit time) and `updatedAt` (its current
+ * version's), server-computed and present on the resource only
+ * (`readOnlyAttribute`), never accepted as command input.
+ *
+ * @since 0.1.0
+ */
+export declare const nodeTimestampResourceFields: {
+    readonly createdAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly updatedAt: Resource.ReadOnlyAttribute<Schema.Date>;
+};
+/**
+ * The soft-delete tombstone: `deletedAt` is present only on a tombstoned row
+ * (`resource: "optional"` — emitters omit the key entirely while live, #691)
+ * and is in no write projection. A tombstone is written by the chain's
+ * `delete` operation (`./version-chain`), never by an input.
+ *
+ * @since 0.1.0
+ */
+export declare const tombstoneResourceFields: {
+    readonly deletedAt: Resource.Attribute<Schema.Date, "optional", false, false, false>;
+};
+/**
+ * The attribute spread every **reference-data** leaf carries: the two
+ * timestamps and the tombstone. Reference data has no visibility axis of its
+ * own — the corpus is publicly readable; a Content-branch reference leaf reads
+ * `visibility` off the branch row like every other Content subtype, and shows
+ * only a `public` row below the view-private rung.
+ *
+ * @since 0.1.0
+ */
+export declare const referenceLeafResourceFields: {
+    readonly createdAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly updatedAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly deletedAt: Resource.Attribute<Schema.Date, "optional", false, false, false>;
+};
+/**
+ * The attribute spread every **owned Content leaf** opens its attributes with:
+ * the timestamps, the tombstone, and the access axis —
+ * {@link referenceLeafResourceFields} plus {@link ownedVisibilityResourceFields}.
+ *
+ * `draft` is deliberately absent from THIS shared spread. The family that
+ * actually wants a bare boolean "come back and finish this later" flag
+ * declares it directly through {@link contentVisibilityResourceFields};
+ * folding it in here would put an unused, always-`false` `draft` attribute on
+ * every other owned Content leaf's wire contract. A leaf gated by a
+ * publication *stamp* (`publishedAt`, the axis `./publication` reads) carries
+ * that on its own row instead — a different axis from `draft`'s hard gate
+ * (#1118).
+ *
+ * @since 0.1.0
+ */
+export declare const ownedContentLeafResourceFields: {
+    readonly visibility: Resource.Attribute<Schema.Literals<readonly ["public", "followers", "private"]>, true, "optional", "optional", false>;
+    readonly createdAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly updatedAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly deletedAt: Resource.Attribute<Schema.Date, "optional", false, false, false>;
+};
+/**
+ * The `owner` relationship every **owned** leaf carries — the account family
+ * the application supplies (its `users` resource) that owns the row.
+ *
+ * Server-assigned from the authenticated caller at creation and never
+ * re-parented: the operation layer stamps the owner from the viewer rather
+ * than from the payload (`stampOwner` in `./subtype`), so an application's
+ * hand-written create / update structs omit it. Spread into a leaf's
+ * `Resource.make({ relationships })` to opt in — the registry flags the same
+ * leaf `owned`, and the subtype factory's `access: { kind: "owned", … }`
+ * names the column the linkage reads.
+ *
+ * `Relationship.one`: every owned row has an owner. The target may still fail
+ * to resolve (deleting an account does not cascade to its rows); consumers
+ * degrade to a neutral label rather than erroring.
+ *
+ * Note that effect-jsonapi lists a `one` relationship as **required** in
+ * the generated `createPayload`; an application serving the generated payload
+ * strips the linkage at its handler seam. effect-jsonapi has no read-only
+ * linkage descriptor (effect-jsonapi#172 closed without one; 0.17.0 has
+ * none), and `tests/content.test.ts` pins the required linkage so the day one
+ * ships is visible.
+ *
+ * @since 0.1.0
+ */
+export declare const ownerRef: <Owner extends Resource.Any>(owner: () => Owner) => {
+    owner: Relationship.One<Owner, false, undefined, NoInfer<Schema.$Record<Schema.String, Schema.Unknown>>>;
+};
+/**
+ * The base Content resource's attributes: the timestamps and the tombstone —
+ * exactly {@link referenceLeafResourceFields}, named for the resource that
+ * carries them so a subtype extending the base and a leaf spreading the
+ * fields declare the same wire shape.
+ *
+ * @since 0.1.0
+ */
+export declare const contentResourceAttributeFields: {
+    readonly createdAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly updatedAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly deletedAt: Resource.Attribute<Schema.Date, "optional", false, false, false>;
+};
+/**
+ * Build the base `content` resource with the application's own id brand
+ * (`makeContentResource(ContentId)`) — the shape {@link ContentResource}
+ * carries with the auto-derived `Resource.Id<"content">`. An application whose
+ * ids are branded hierarchically (a `PostId` that is also a `ContentId` and a
+ * `NodeId`) declares the base with its own brand so the two agree.
+ *
+ * @since 0.1.0
+ */
+export declare const makeContentResource: <IdSchema extends Schema.Codec<any, string>>(id: IdSchema) => Resource.Resource<"content", {
+    readonly createdAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly updatedAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly deletedAt: Resource.Attribute<Schema.Date, "optional", false, false, false>;
+}, Record<never, never>, Schema.$Record<Schema.String, Schema.Unknown>, IdSchema>;
+/**
+ * The base Content resource with the auto-derived id (timestamps + soft-delete tombstone).
+ *
+ * @since 0.1.0
+ */
+export declare const ContentResource: Resource.Resource<"content", {
+    readonly createdAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly updatedAt: Resource.ReadOnlyAttribute<Schema.Date>;
+    readonly deletedAt: Resource.Attribute<Schema.Date, "optional", false, false, false>;
+}, Record<never, never>, Schema.$Record<Schema.String, Schema.Unknown>, Resource.Id<"content">>;
+/**
+ * Inferred type for a base content resource.
+ *
+ * @since 0.1.0
+ */
+export type Content = typeof ContentResource.Type;
+/**
+ * Lightweight `{ type, id }` reference to content.
+ *
+ * @since 0.1.0
+ */
+export declare const ContentRef: Resource.Identifier<"content", Resource.Id<"content">>;
+/**
+ * Inferred type for a content reference.
+ *
+ * @since 0.1.0
+ */
+export type ContentRef = typeof ContentRef.Type;
+//# sourceMappingURL=content.d.ts.map

package/dist/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../src/content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,UAAU,8DAAsD,CAAC;AAC9E;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,+BAA+B;aAC1C,UAAU;aACV,KAAK;CACG,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;aACxC,UAAU;aACV,KAAK;CACG,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B;aACxC,UAAU;CACF,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B;aACtC,SAAS;aACT,SAAS;CACD,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;aAClC,SAAS;CAKD,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B;;;;CAG9B,CAAC;AAEX;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,8BAA8B;;;;;CAGjC,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,QAAQ,GAAI,KAAK,SAAS,QAAQ,CAAC,GAAG,SAAS,MAAM,KAAK;IACrE,KAAK;CACL,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B;;;;CAA8B,CAAC;AAE1E;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,SAAS,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,QAAQ;;;;iFACd,CAAC;AAE/E;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;+FAE1B,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,UAAU,wDAA6B,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC"}