nervur 0.10.0 → 0.11.0

package/being.mjs

@@ -143,7 +143,10 @@ const rotates = ({ mine }, from, nextPkHash) => {
     .list('refs/')
     .map((key) => ({ key, referred: mine.read(key) }))
     .find(({ referred }) => referred?.nextPkHash === claim);
-  if (held === undefined) {
+  if (
+    held === undefined ||
+    (held.key !== `refs/${from}` && mine.read(`refs/${from}`) !== undefined)
+  ) {
     return undefined;
   }
   mine.write(`refs/${from}`, { nextPkHash, rights: held.referred.rights });
@@ -261,7 +264,7 @@ const Being = ({ voice, address, deliver, modules, registry, vouched, watch }) =
           });
           return answer({ referred: from, rights: pending.rights });
         }
-        if (op?.ask === undefined || program === undefined) {
+        if (op?.ask === undefined || program === undefined || !program.visible(rights)) {
           return undefined;
         }
         const asked = await program.ask({

package/blueprint.mjs

@@ -167,12 +167,12 @@ const merged = (base, added) =>
     ]),
   );
 
+// Bare names, not Type.field pairs: X's "if create answers, it created"
+// makes Query.create and Mutation.create one reserved word.
 const doorsIn = (sdl) =>
   parse(sdl)
-    .definitions.filter(
-      (one) => one.kind === Kind.OBJECT_TYPE_DEFINITION || one.kind === Kind.OBJECT_TYPE_EXTENSION,
-    )
-    .flatMap((one) => (one.fields ?? []).map((field) => `${one.name.value}.${field.name.value}`));
+    .definitions.filter((one) => doorHolder(one) && ['Mutation', 'Query'].includes(one.name.value))
+    .flatMap((one) => (one.fields ?? []).map((field) => field.name.value));
 
 const composed = (baseSource, addedSource) => {
   try {
@@ -319,23 +319,36 @@ const Blueprint = (source) => {
       rights,
       schema,
       // The directive definition stays: pointer.mjs runs buildSchema on this output.
-      sdlFor: (held) =>
-        print({
+      sdlFor: (held) => {
+        const kept = document.definitions
+          .map((one) =>
+            doorHolder(one)
+              ? {
+                  ...one,
+                  fields: (one.fields ?? []).filter((field) => {
+                    const allowed = rightsOf(field);
+                    return allowed === undefined || allowed.includes(held);
+                  }),
+                }
+              : one,
+          )
+          .filter((one) => !doorHolder(one) || one.fields.length > 0);
+        const defined = new Set(
+          kept
+            .filter((one) => one.kind === Kind.OBJECT_TYPE_DEFINITION)
+            .map((one) => one.name.value),
+        );
+        // A filtered view where only a part's extension survives must still
+        // stand alone as a schema, or the right it serves opens nothing.
+        return print({
           ...document,
-          definitions: document.definitions
-            .map((one) =>
-              doorHolder(one)
-                ? {
-                    ...one,
-                    fields: (one.fields ?? []).filter((field) => {
-                      const allowed = rightsOf(field);
-                      return allowed === undefined || allowed.includes(held);
-                    }),
-                  }
-                : one,
-            )
-            .filter((one) => !doorHolder(one) || one.fields.length > 0),
-        }),
+          definitions: kept.map((one) =>
+            one.kind === Kind.OBJECT_TYPE_EXTENSION && !defined.has(one.name.value)
+              ? { ...one, kind: Kind.OBJECT_TYPE_DEFINITION }
+              : one,
+          ),
+        });
+      },
       trespass: [],
     });
   } catch {

package/client.mjs

@@ -64,4 +64,4 @@ const Client = ({ voice, deliver, resolve = (one) => one }) => {
   });
 };
 
-export { Client };
+export { Client, speaking };

package/index.mjs

@@ -1,6 +1,6 @@
 export { ADMIN } from './admin.mjs';
 export { Blueprint, CLASSES, CORE_ONLY, OPEN, STRUCTURAL, coreClass, reads } from './blueprint.mjs';
-export { Client } from './client.mjs';
+export { Client, speaking } from './client.mjs';
 export { Contract, Contracts } from './contract.mjs';
 export { FLOOR, GROUND, Ground } from './ground.mjs';
 export { Cells, Clock, Dns, Entropy, Keychain, Memory, Paths, Wire } from './modules.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nervur",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "A distributed system of sovereign beings — one door, one question: by whose authority.",
   "license": "Apache-2.0",
   "author": "Razvan Gherghina",

package/program.mjs

@@ -4,6 +4,8 @@ import {
   getIntrospectionQuery,
   graphql,
   isObjectType,
+  parse,
+  validate,
 } from 'graphql';
 import { Blueprint } from './blueprint.mjs';
 
@@ -41,8 +43,39 @@ const Program = (source) => {
     }
     return curtained.get(held);
   };
+  // graphql's validator demands a Query root even to judge a mutation, so an
+  // all-mutation filtered world validates against a copy wearing an empty one
+  // — never printed, never executed against.
+  const askable = new Map();
+  const askableBy = (held) => {
+    if (!askable.has(held)) {
+      const seen = seenBy(held);
+      try {
+        askable.set(
+          held,
+          seen === undefined || seen.getQueryType() != null
+            ? seen
+            : buildSchema(`${blueprint.sdlFor(held)}\ntype Query { _stands: Boolean }`),
+        );
+      } catch {
+        askable.set(held, undefined);
+      }
+    }
+    return askable.get(held);
+  };
   return Object.freeze({
     ask: async ({ source: asked, variables, context }) => {
+      const seen = askableBy(context.rights);
+      if (seen === undefined) {
+        return undefined;
+      }
+      try {
+        if (validate(seen, parse(asked)).length > 0) {
+          return undefined;
+        }
+      } catch {
+        return undefined;
+      }
       const answered = await graphql({
         contextValue: context,
         schema,