zeekay cdf0c4c152 A graph's schema is the caller's, and new accounts buy a visitor nothing ...

The schema a graph of a Base renders named every collection to whoever
asked for it.  It is now as far as the caller reaches: a member sees
the Base whole, a visitor only the collections that admit visitors, and
anyone else only those whose list rule is "".  apis.ReachOf answers the
reach by putting the caller's credential through loadAuthToken, the
door every request passes, so the graph decides nothing of its own.
Each reach keeps its own cached schema, and a root beyond the caller's
reach is no field at all rather than a refusal that says it exists.

A visitor's writes were limited per account, which an account made for
the purpose resets.  They are now also held to fifteen a minute from
one client address and 120 a minute from all visitors in a Base, on
the same limiter.  A write that names no client address is refused.

2026-10-20 20:41:44 -07:00

..

composite_test.go

A Base's records are a typed GraphQL schema, answered through its own router

2026-10-19 09:31:00 -07:00

composite.go

A Base's records are a typed GraphQL schema, answered through its own router

2026-10-19 09:31:00 -07:00

filter.go

A Base's records are a typed GraphQL schema, answered through its own router

2026-10-19 09:31:00 -07:00

graph_test.go

A graph's schema is the caller's, and new accounts buy a visitor nothing

2026-10-20 20:41:44 -07:00

graph.go

A graph's schema is the caller's, and new accounts buy a visitor nothing

2026-10-20 20:41:44 -07:00

model.go

A Base's records are a typed GraphQL schema, answered through its own router

2026-10-19 09:31:00 -07:00

resolve.go

A graph's schema is the caller's, and new accounts buy a visitor nothing

2026-10-20 20:41:44 -07:00

rest.go

A Base's records are a typed GraphQL schema, answered through its own router

2026-10-19 09:31:00 -07:00

sdl.go

A Base's records are a typed GraphQL schema, answered through its own router

2026-10-19 09:31:00 -07:00