on-zero 0.12.7 → 0.12.8

package/src/createPermissions.ts

@@ -1,5 +1,4 @@
 import { ensure } from './helpers/ensure'
-import { mutatorContext } from './helpers/mutatorContext'
 import { prettyFormatZeroQuery } from './helpers/prettyFormatZeroQuery'
 import { getZQL } from './state'
 import { getWhereTableName } from './where'
@@ -95,17 +94,21 @@ export function createPermissions<Schema extends ZeroSchema>({
     return eb.and(permissionReturn, ...primaryKeyWheres)
   }
 
-  const can: Can = async (where, obj) => {
-    // on client we always allow! we only check on server (like zero does)
-    if (environment === 'server') {
-      const ctx = mutatorContext()
+  // bound to the transaction that will call it, never read from ambient state.
+  // an ambient lookup checks permissions against whichever mutator happens to be
+  // in flight, and only a real AsyncLocalStorage makes that the calling one — a
+  // browser-hosted server has none.
+  const bindCan =
+    (tx: Transaction, authData: AuthData | null): Can =>
+    async (where, obj) => {
+      // on client we always allow! we only check on server (like zero does)
+      if (environment !== 'server') return
       const tableName = getWhereTableName(where)
       if (!tableName) {
         throw new Error(`Must use where('table') style where to pass to can()`)
       }
-      await ensurePermission(ctx.tx, ctx.authData, tableName, where, obj)
+      await ensurePermission(tx, authData, tableName, where, obj)
     }
-  }
 
   async function ensurePermission(
     tx: Transaction,
@@ -148,7 +151,7 @@ export function createPermissions<Schema extends ZeroSchema>({
   }
 
   return {
-    can,
+    bindCan,
     buildPermissionQuery,
   }
 }

package/src/createZeroClient.tsx

@@ -304,7 +304,7 @@ export function createZeroClientInternal<
       models,
       environment: 'client',
       authData: null,
-      can: permissionsHelpers.can,
+      bindCan: permissionsHelpers.bindCan,
       rollups,
     })
     return clientMutators

package/src/helpers/asyncContext.native.ts

@@ -5,86 +5,20 @@ interface AsyncContext<T> {
 
 export function setupAsyncLocalStorage(_AsyncLocalStorage: unknown): void {}
 
-// react native implementation - no node:async_hooks available
+// react native has no node:async_hooks, and an ambient mutator context cannot
+// be emulated soundly without it: a module-level "current context" is visible
+// to every other task that runs while a mutator awaits, and patching
+// Promise.prototype does not follow a native `await` at all. so there is no
+// ambient mutator context here — createMutators passes each mutator its own
+// context, and transactional reads go through that transaction
+// (`tx.run(zql...)`). see asyncContext.ts for the same reasoning on the web.
 export function createAsyncContext<T>(): AsyncContext<T> {
-  let currentContext: T | undefined
-  const contextStack: (T | undefined)[] = []
-
   return {
     get(): T | undefined {
-      return currentContext
+      return undefined
     },
-    async run<R>(value: T, fn: () => R | Promise<R>): Promise<R> {
-      const prevContext = currentContext
-      currentContext = value
-      contextStack.push(prevContext)
-
-      // store original Promise methods
-      const OriginalPromise = Promise
-      const OriginalThen = OriginalPromise.prototype.then
-      const OriginalCatch = OriginalPromise.prototype.catch
-      const OriginalFinally = OriginalPromise.prototype.finally
-
-      function wrapCallback(
-        callback: Function | undefined | null,
-        context: T | undefined
-      ): Function | undefined | null {
-        if (!callback) return callback
-        return (...args: any[]) => {
-          const prevContext = currentContext
-          currentContext = context
-          try {
-            return callback(...args)
-          } finally {
-            currentContext = prevContext
-          }
-        }
-      }
-
-      // patch Promise methods to capture and restore context
-      // eslint-disable-next-line no-then-property -- intentional patching for context propagation
-      OriginalPromise.prototype.then = function (
-        this: Promise<any>,
-        onFulfilled?: any,
-        onRejected?: any
-      ): Promise<any> {
-        const context = currentContext
-        return OriginalThen.call(
-          this,
-          wrapCallback(onFulfilled, context) as any,
-          wrapCallback(onRejected, context) as any
-        )
-      }
-
-      OriginalPromise.prototype.catch = function (
-        this: Promise<any>,
-        onRejected?: any
-      ): Promise<any> {
-        const context = currentContext
-        return OriginalCatch.call(this, wrapCallback(onRejected, context) as any)
-      }
-
-      OriginalPromise.prototype.finally = function (
-        this: Promise<any>,
-        onFinally?: any
-      ): Promise<any> {
-        const context = currentContext
-        return OriginalFinally.call(this, wrapCallback(onFinally, context) as any)
-      }
-
-      try {
-        const result = await fn()
-        return result
-      } finally {
-        // restore original Promise methods
-        // eslint-disable-next-line no-then-property -- restoring original methods
-        OriginalPromise.prototype.then = OriginalThen
-        OriginalPromise.prototype.catch = OriginalCatch
-        OriginalPromise.prototype.finally = OriginalFinally
-
-        contextStack.pop()
-        currentContext = prevContext
-      }
+    async run<R>(_value: T, fn: () => R | Promise<R>): Promise<R> {
+      return await fn()
     },
   }
 }

package/src/helpers/asyncContext.ts

@@ -69,91 +69,30 @@ export function createAsyncContext<T>(): AsyncContext<T> {
         return storage.run(value, fn)
       },
     }
-  } else {
-    // browser implementation using promise patching
-    return createBrowserAsyncContext<T>()
   }
-}
 
-function createBrowserAsyncContext<T>(): AsyncContext<T> {
-  let currentContext: T | undefined
-  const contextStack: (T | undefined)[] = []
+  return createJsRuntimeAsyncContext<T>()
+}
 
+// browsers and the react-native JS runtime have no AsyncLocalStorage, and an
+// ambient mutator context cannot be emulated soundly on them. a module-level
+// "current context" is visible to every other task that runs while a mutator
+// awaits, and patching Promise.prototype does not follow a native `await` at
+// all. the emulation that used to live here handed a mutator a *different*
+// mutator's transaction whenever two overlapped, and left Promise.prototype
+// patched for the life of the page once two runs interleaved.
+//
+// so on these runtimes there is no ambient mutator context. createMutators
+// already passes each mutator its own context, and transactional reads go
+// through that transaction (`tx.run(zql...)`) rather than through ambient
+// state.
+function createJsRuntimeAsyncContext<T>(): AsyncContext<T> {
   return {
     get(): T | undefined {
-      return currentContext
+      return undefined
     },
-    async run<R>(value: T, fn: () => R | Promise<R>): Promise<R> {
-      const prevContext = currentContext
-      currentContext = value
-      contextStack.push(prevContext)
-
-      // store original Promise methods
-      const OriginalPromise = Promise
-      const OriginalThen = OriginalPromise.prototype.then
-      const OriginalCatch = OriginalPromise.prototype.catch
-      const OriginalFinally = OriginalPromise.prototype.finally
-
-      function wrapCallback(
-        callback: Function | undefined | null,
-        context: T | undefined
-      ): Function | undefined | null {
-        if (!callback) return callback
-        return (...args: any[]) => {
-          const prevContext = currentContext
-          currentContext = context
-          try {
-            return callback(...args)
-          } finally {
-            currentContext = prevContext
-          }
-        }
-      }
-
-      // patch Promise methods to capture and restore context
-      // eslint-disable-next-line no-then-property -- intentional patching for context propagation
-      OriginalPromise.prototype.then = function (
-        this: Promise<any>,
-        onFulfilled?: any,
-        onRejected?: any
-      ): Promise<any> {
-        const context = currentContext
-        return OriginalThen.call(
-          this,
-          wrapCallback(onFulfilled, context) as any,
-          wrapCallback(onRejected, context) as any
-        )
-      }
-
-      OriginalPromise.prototype.catch = function (
-        this: Promise<any>,
-        onRejected?: any
-      ): Promise<any> {
-        const context = currentContext
-        return OriginalCatch.call(this, wrapCallback(onRejected, context) as any)
-      }
-
-      OriginalPromise.prototype.finally = function (
-        this: Promise<any>,
-        onFinally?: any
-      ): Promise<any> {
-        const context = currentContext
-        return OriginalFinally.call(this, wrapCallback(onFinally, context) as any)
-      }
-
-      try {
-        const result = await fn()
-        return result
-      } finally {
-        // restore original Promise methods
-        // eslint-disable-next-line no-then-property -- restoring original methods
-        OriginalPromise.prototype.then = OriginalThen
-        OriginalPromise.prototype.catch = OriginalCatch
-        OriginalPromise.prototype.finally = OriginalFinally
-
-        contextStack.pop()
-        currentContext = prevContext
-      }
+    async run<R>(_value: T, fn: () => R | Promise<R>): Promise<R> {
+      return await fn()
     },
   }
 }

package/src/helpers/createMutators.test.ts

@@ -15,7 +15,7 @@ describe('createMutators timeout guard', () => {
     const mutators = createMutators({
       environment: 'server',
       authData: null,
-      can: {} as never,
+      bindCan: () => async () => {},
       models: {
         task: {
           mutate: {
@@ -35,7 +35,7 @@ describe('createMutators timeout guard', () => {
     const mutators = createMutators({
       environment: 'server',
       authData: null,
-      can: {} as never,
+      bindCan: () => async () => {},
       models: {
         task: {
           mutate: {
@@ -121,7 +121,7 @@ test('createMutators installs optimistic rollups on client transactions', async
   const mutators = createMutators({
     environment: 'client',
     authData: null,
-    can: async () => {},
+    bindCan: () => async () => {},
     rollups,
     models: {
       comment: {
@@ -141,3 +141,49 @@ test('createMutators installs optimistic rollups on client transactions', async
 
   expect(rows.post).toEqual([{ id: 'p1', commentCount: 1 }])
 })
+
+test('each mutator permission check runs against its own transaction', async () => {
+  // two mutations overlap, which is the ordinary case anywhere several writes
+  // are in flight. a permission check that reached for an ambient context would
+  // check one mutator's rows through the other's transaction, and on a
+  // browser-hosted server (no AsyncLocalStorage) it always would.
+  const checked: Array<{ mutation: string; tx: string }> = []
+  const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms))
+
+  const mutators = createMutators({
+    environment: 'server',
+    authData: null,
+    bindCan: (tx) => async (_where, obj) => {
+      checked.push({
+        mutation: String(obj),
+        tx: (tx as unknown as { name: string }).name,
+      })
+    },
+    models: {
+      task: {
+        mutate: {
+          touch: async (ctx, input: { label: string; delay: number }) => {
+            await sleep(input.delay)
+            await ctx.can({} as never, input.label)
+          },
+        },
+      },
+    } as never,
+  }) as any
+
+  await Promise.all([
+    Reflect.apply(mutators.task.touch, null, [
+      { name: 'tx-A' },
+      { label: 'A', delay: 20 },
+    ]),
+    Reflect.apply(mutators.task.touch, null, [
+      { name: 'tx-B' },
+      { label: 'B', delay: 5 },
+    ]),
+  ])
+
+  expect(checked.sort((l, r) => l.mutation.localeCompare(r.mutation))).toEqual([
+    { mutation: 'A', tx: 'tx-A' },
+    { mutation: 'B', tx: 'tx-B' },
+  ])
+})

package/src/helpers/createMutators.ts

@@ -30,7 +30,7 @@ export function createMutators<Models extends GenericModels>({
   createServerActions,
   enqueueTask = () => {},
   enqueueAction = () => {},
-  can,
+  bindCan,
   models,
   validateMutation,
   mutationValidators,
@@ -39,7 +39,7 @@ export function createMutators<Models extends GenericModels>({
 }: {
   environment: 'server' | 'client'
   authData: AuthData | null
-  can: Can
+  bindCan: (tx: Transaction, authData: AuthData | null) => Can
   models: Models
   enqueueTask?: NonNullable<MutatorContext['server']>['enqueueTask']
   enqueueAction?: NonNullable<MutatorContext['server']>['enqueueAction']
@@ -61,14 +61,18 @@ export function createMutators<Models extends GenericModels>({
     return async (tx: Transaction, ...args: Args): Promise<void> => {
       const transaction =
         environment === 'client' && rollups ? withOptimisticRollups(tx, rollups) : tx
+      // on client, read authData dynamically to avoid stale closure during auth
+      // transitions (ZeroProvider recreates Zero instance in useEffect, but
+      // mutations can run before that)
+      const contextAuthData =
+        environment === 'client' ? getAuthData() : (resolveAuthData?.() ?? authData)
       const mutationContext: MutatorContext = {
         tx: transaction,
-        // on client, read authData dynamically to avoid stale closure during auth transitions
-        // (ZeroProvider recreates Zero instance in useEffect, but mutations can run before that)
-        authData:
-          environment === 'client' ? getAuthData() : (resolveAuthData?.() ?? authData),
+        authData: contextAuthData,
         environment,
-        can,
+        // bound to THIS transaction. a permission check must run against the
+        // mutator that asked for it, and ambient lookup cannot promise that.
+        can: bindCan(transaction, contextAuthData),
         server:
           environment === 'server'
             ? ({

package/src/helpers/ensureLoggedIn.ts

@@ -1,10 +1,15 @@
 import { ensure } from './ensure'
-import { mutatorContext } from './mutatorContext'
+import { getAuth } from './getAuth'
 
 import type { AuthData } from '../types'
 
+// the mutator context is ambient only where the runtime can scope it, which is
+// the server. on the client and in react native a mutator's authData is the
+// same value getAuth() resolves — createMutators seeds the client context from
+// it — so reading through getAuth keeps this working in mutators on every
+// environment.
 export const ensureLoggedIn = (): AuthData => {
-  const { authData } = mutatorContext()
+  const authData = getAuth()
   ensure(authData, 'logged in')
   return authData
 }

package/src/helpers/mutatorContext.test.ts

@@ -0,0 +1,96 @@
+// force the non-server runtime before anything reads platform.ts, so this file
+// exercises the browser / react-native path rather than AsyncLocalStorage.
+process.env.VITE_ENVIRONMENT = 'client'
+
+import { beforeEach, describe, expect, test } from 'vitest'
+
+import { setAuthData } from '../state'
+
+const store = globalThis as typeof globalThis & {
+  __onZeroMutatorContext__?: unknown
+  __onZeroAuthScopeContext__?: unknown
+}
+
+beforeEach(() => {
+  store.__onZeroMutatorContext__ = undefined
+  store.__onZeroAuthScopeContext__ = undefined
+})
+
+const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms))
+
+const fakeContext = (name: string) =>
+  ({
+    tx: { name } as never,
+    authData: null,
+    environment: 'client',
+    can: {} as never,
+  }) as never
+
+describe('mutator context on runtimes without AsyncLocalStorage', () => {
+  test('a task running alongside a mutator is never told it is in a mutation', async () => {
+    const { isInZeroMutation, runWithContext } = await import('./mutatorContext')
+
+    // stands in for agentQaRunner: ordinary async work on its own timeline that
+    // asks "am I inside a mutation?" to decide how to run a query. it started
+    // before any mutator and belongs to no transaction.
+    const observations: boolean[] = []
+    const bystander = (async () => {
+      for (let i = 0; i < 6; i++) {
+        await sleep(5)
+        observations.push(isInZeroMutation())
+      }
+    })()
+
+    await sleep(8)
+    await runWithContext(fakeContext('A'), async () => {
+      await sleep(20)
+    })
+    await bystander
+
+    expect(observations).toHaveLength(6)
+    expect(observations.filter(Boolean)).toEqual([])
+  })
+
+  test('overlapping mutators leave Promise.prototype alone', async () => {
+    const { runWithContext } = await import('./mutatorContext')
+    const pristine = {
+      then: Promise.prototype.then,
+      catch: Promise.prototype.catch,
+      finally: Promise.prototype.finally,
+    }
+
+    const first = runWithContext(fakeContext('A'), () => sleep(20))
+    await sleep(5)
+    const second = runWithContext(fakeContext('B'), () => sleep(20))
+    await Promise.all([first, second])
+
+    expect(Promise.prototype.then).toBe(pristine.then)
+    expect(Promise.prototype.catch).toBe(pristine.catch)
+    expect(Promise.prototype.finally).toBe(pristine.finally)
+  })
+
+  test('runWithContext still returns the function result and propagates throws', async () => {
+    const { runWithContext } = await import('./mutatorContext')
+
+    await expect(runWithContext(fakeContext('A'), async () => 'ok')).resolves.toBe('ok')
+    await expect(
+      runWithContext(fakeContext('A'), async () => {
+        throw new Error('boom')
+      })
+    ).rejects.toThrow('boom')
+  })
+
+  test('ensureLoggedIn works inside a mutator without an ambient context', async () => {
+    const { runWithContext } = await import('./mutatorContext')
+    const { ensureLoggedIn } = await import('./ensureLoggedIn')
+
+    setAuthData({ id: 'user_1' } as never)
+
+    const auth = await runWithContext(fakeContext('A'), async () => {
+      await sleep(5)
+      return ensureLoggedIn()
+    })
+
+    expect(auth.id).toBe('user_1')
+  })
+})

package/src/server.ts

@@ -305,7 +305,7 @@ export function createZeroServerBindings<
   }
   const decoratedMutators = createMutators({
     authData: null,
-    can: permissions.can,
+    bindCan: permissions.bindCan,
     createServerActions: options.createServerActions,
     environment: 'server',
     models: options.models,

package/src/zeroRunner.ts

@@ -21,6 +21,12 @@ export function setRunner(r: ZeroRunner | null) {
 }
 
 export function getRunner(instance?: { runner: ZeroRunner | null }): ZeroRunner {
+  // only the server has a real async context, so only there can "am I inside a
+  // mutator" be answered for the CALLER rather than for the page. on the client
+  // isInZeroMutation() is always false by construction (see asyncContext.ts):
+  // ordinary async code that happens to overlap a mutator must not be handed
+  // that mutator's transaction, and a client mutator that needs a transactional
+  // read uses its own `tx.run(zql...)`.
   if (isInZeroMutation()) {
     return (q, o) => mutatorContext().tx.run(q, o)
   }

package/types/createPermissions.d.ts

@@ -1,4 +1,4 @@
-import type { AdminRoleMode, AuthData, Can, TableName, Where } from './types';
+import type { AdminRoleMode, AuthData, Can, TableName, Transaction, Where } from './types';
 import type { Condition, ExpressionBuilder, Schema as ZeroSchema } from '@rocicorp/zero';
 export declare class PermissionError extends Error {
     constructor(message: string);
@@ -8,7 +8,7 @@ export declare function createPermissions<Schema extends ZeroSchema>({ environme
     schema: Schema;
     adminRoleMode?: AdminRoleMode;
 }): {
-    can: Can;
+    bindCan: (tx: Transaction, authData: AuthData | null) => Can;
     buildPermissionQuery: <PermissionWhere extends Where<string>>(authData: AuthData | null, eb: ExpressionBuilder<any, any>, permissionWhere: PermissionWhere, objOrId: Record<string, any> | string, tableNameOverride?: TableName) => Condition;
 };
 //# sourceMappingURL=createPermissions.d.ts.map

package/types/createPermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createPermissions.d.ts","sourceRoot":"","sources":["../src/createPermissions.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAe,KAAK,EAAE,MAAM,SAAS,CAAA;AAC1F,OAAO,KAAK,EACV,SAAS,EACT,iBAAiB,EAEjB,MAAM,IAAI,UAAU,EACrB,MAAM,gBAAgB,CAAA;AAEvB,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,iBAAiB,CAAC,MAAM,SAAS,UAAU,EAAE,EAC3D,WAAW,EACX,MAAM,EACN,aAAqB,GACtB,EAAE;IACD,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,aAAa,CAAA;CAC9B;;2BAG+B,eAAe,kCACjC,QAAQ,GAAG,IAAI,MACrB,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,mBACd,eAAe,WAEvB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,sBACjB,SAAS;EAmHhC"}
+{"version":3,"file":"createPermissions.d.ts","sourceRoot":"","sources":["../src/createPermissions.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC1F,OAAO,KAAK,EACV,SAAS,EACT,iBAAiB,EAEjB,MAAM,IAAI,UAAU,EACrB,MAAM,gBAAgB,CAAA;AAEvB,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,iBAAiB,CAAC,MAAM,SAAS,UAAU,EAAE,EAC3D,WAAW,EACX,MAAM,EACN,aAAqB,GACtB,EAAE;IACD,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,aAAa,CAAA;CAC9B;kBAyEQ,WAAW,YAAY,QAAQ,GAAG,IAAI,KAAG,GAAG;2BAtErB,eAAe,kCACjC,QAAQ,GAAG,IAAI,MACrB,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,mBACd,eAAe,WAEvB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,sBACjB,SAAS;EAuHhC"}

package/types/helpers/asyncContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"asyncContext.d.ts","sourceRoot":"","sources":["../../src/helpers/asyncContext.ts"],"names":[],"mappings":"AAEA,UAAU,YAAY,CAAC,CAAC;IACtB,GAAG,IAAI,CAAC,GAAG,SAAS,CAAA;IACpB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACvD;AAED,UAAU,qBAAqB,CAAC,CAAC;IAC/B,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAA;IACzB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;CACvC;AAED,UAAU,4BAA4B;IACpC,KAAK,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,CAAA;CACpC;AAQD,wBAAgB,sBAAsB,CACpC,iBAAiB,EAAE,4BAA4B,GAAG,IAAI,GACrD,IAAI,CAEN;AAeD,wBAAgB,kBAAkB,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAkCvD"}
+{"version":3,"file":"asyncContext.d.ts","sourceRoot":"","sources":["../../src/helpers/asyncContext.ts"],"names":[],"mappings":"AAEA,UAAU,YAAY,CAAC,CAAC;IACtB,GAAG,IAAI,CAAC,GAAG,SAAS,CAAA;IACpB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACvD;AAED,UAAU,qBAAqB,CAAC,CAAC;IAC/B,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAA;IACzB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;CACvC;AAED,UAAU,4BAA4B;IACpC,KAAK,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,CAAA;CACpC;AAQD,wBAAgB,sBAAsB,CACpC,iBAAiB,EAAE,4BAA4B,GAAG,IAAI,GACrD,IAAI,CAEN;AAeD,wBAAgB,kBAAkB,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAiCvD"}

package/types/helpers/asyncContext.native.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"asyncContext.native.d.ts","sourceRoot":"","sources":["../../src/helpers/asyncContext.native.ts"],"names":[],"mappings":"AAAA,UAAU,YAAY,CAAC,CAAC;IACtB,GAAG,IAAI,CAAC,GAAG,SAAS,CAAA;IACpB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACvD;AAED,wBAAgB,sBAAsB,CAAC,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAG;AAG5E,wBAAgB,kBAAkB,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAiFvD"}
+{"version":3,"file":"asyncContext.native.d.ts","sourceRoot":"","sources":["../../src/helpers/asyncContext.native.ts"],"names":[],"mappings":"AAAA,UAAU,YAAY,CAAC,CAAC;IACtB,GAAG,IAAI,CAAC,GAAG,SAAS,CAAA;IACpB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACvD;AAED,wBAAgB,sBAAsB,CAAC,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAG;AAS5E,wBAAgB,kBAAkB,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CASvD"}

package/types/helpers/createMutators.d.ts

@@ -1,4 +1,4 @@
-import type { AuthData, Can, GenericModels, GetZeroMutators, MutatorContext } from '../types';
+import type { AuthData, Can, GenericModels, GetZeroMutators, MutatorContext, Transaction } from '../types';
 import type { RollupSet } from 'orez-lite/rollup';
 export type ValidateMutationFn = (args: {
     authData: AuthData | null;
@@ -7,10 +7,10 @@ export type ValidateMutationFn = (args: {
     args: unknown;
 }) => void | Promise<void>;
 export type { ValidateMutationFn as CreateMutatorsValidateFn };
-export declare function createMutators<Models extends GenericModels>({ environment, authData, createServerActions, enqueueTask, enqueueAction, can, models, validateMutation, mutationValidators, resolveAuthData, rollups, }: {
+export declare function createMutators<Models extends GenericModels>({ environment, authData, createServerActions, enqueueTask, enqueueAction, bindCan, models, validateMutation, mutationValidators, resolveAuthData, rollups, }: {
     environment: 'server' | 'client';
     authData: AuthData | null;
-    can: Can;
+    bindCan: (tx: Transaction, authData: AuthData | null) => Can;
     models: Models;
     enqueueTask?: NonNullable<MutatorContext['server']>['enqueueTask'];
     enqueueAction?: NonNullable<MutatorContext['server']>['enqueueAction'];

package/types/helpers/createMutators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createMutators.d.ts","sourceRoot":"","sources":["../../src/helpers/createMutators.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,QAAQ,EACR,GAAG,EACH,aAAa,EACb,eAAe,EACf,cAAc,EAEf,MAAM,UAAU,CAAA;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,OAAO,CAAA;CACd,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAE1B,YAAY,EAAE,kBAAkB,IAAI,wBAAwB,EAAE,CAAA;AAE9D,wBAAgB,cAAc,CAAC,MAAM,SAAS,aAAa,EAAE,EAC3D,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,WAAsB,EACtB,aAAwB,EACxB,GAAG,EACH,MAAM,EACN,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,OAAO,GACR,EAAE;IACD,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAChC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IACtE,mBAAmB,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/C,gBAAgB,CAAC,EAAE,kBAAkB,CAAA;IACrC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IACxD,eAAe,CAAC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAA;IACvC,OAAO,CAAC,EAAE,SAAS,CAAA;CACpB,GAAG,eAAe,CAAC,MAAM,CAAC,CA4K1B"}
+{"version":3,"file":"createMutators.d.ts","sourceRoot":"","sources":["../../src/helpers/createMutators.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,QAAQ,EACR,GAAG,EACH,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACZ,MAAM,UAAU,CAAA;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,OAAO,CAAA;CACd,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAE1B,YAAY,EAAE,kBAAkB,IAAI,wBAAwB,EAAE,CAAA;AAE9D,wBAAgB,cAAc,CAAC,MAAM,SAAS,aAAa,EAAE,EAC3D,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,WAAsB,EACtB,aAAwB,EACxB,OAAO,EACP,MAAM,EACN,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,OAAO,GACR,EAAE;IACD,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAChC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,OAAO,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,KAAK,GAAG,CAAA;IAC5D,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IACtE,mBAAmB,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/C,gBAAgB,CAAC,EAAE,kBAAkB,CAAA;IACrC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IACxD,eAAe,CAAC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAA;IACvC,OAAO,CAAC,EAAE,SAAS,CAAA;CACpB,GAAG,eAAe,CAAC,MAAM,CAAC,CAgL1B"}

package/types/helpers/ensureLoggedIn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ensureLoggedIn.d.ts","sourceRoot":"","sources":["../../src/helpers/ensureLoggedIn.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC,eAAO,MAAM,cAAc,QAAO,QAIjC,CAAA"}
+{"version":3,"file":"ensureLoggedIn.d.ts","sourceRoot":"","sources":["../../src/helpers/ensureLoggedIn.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAOxC,eAAO,MAAM,cAAc,QAAO,QAIjC,CAAA"}

package/types/helpers/mutatorContext.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mutatorContext.test.d.ts.map

package/types/helpers/mutatorContext.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutatorContext.test.d.ts","sourceRoot":"","sources":["../../src/helpers/mutatorContext.test.ts"],"names":[],"mappings":""}

package/types/zeroRunner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zeroRunner.d.ts","sourceRoot":"","sources":["../src/zeroRunner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EACb,KAAK,EACL,UAAU,EACV,MAAM,IAAI,UAAU,EACrB,MAAM,gBAAgB,CAAA;AAEvB,YAAY,EAAE,UAAU,EAAE,CAAA;AAE1B,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAC/B,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,EACtC,OAAO,CAAC,EAAE,UAAU,KACjB,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;AAIpC,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,QAE7C;AAED,wBAAgB,SAAS,CAAC,QAAQ,CAAC,EAAE;IAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAAA;CAAE,GAAG,UAAU,CAM9E;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,CAAC,EAAE;IAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAAA;CAAE,GAAG,UAAU,CAcrF"}
+{"version":3,"file":"zeroRunner.d.ts","sourceRoot":"","sources":["../src/zeroRunner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EACb,KAAK,EACL,UAAU,EACV,MAAM,IAAI,UAAU,EACrB,MAAM,gBAAgB,CAAA;AAEvB,YAAY,EAAE,UAAU,EAAE,CAAA;AAE1B,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAC/B,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,EACtC,OAAO,CAAC,EAAE,UAAU,KACjB,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;AAIpC,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,QAE7C;AAED,wBAAgB,SAAS,CAAC,QAAQ,CAAC,EAAE;IAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAAA;CAAE,GAAG,UAAU,CAY9E;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,CAAC,EAAE;IAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAAA;CAAE,GAAG,UAAU,CAcrF"}