access

type Actor struct {
	ID        string // stable subject id (uuid text); empty when Anonymous
	Kind      string // opaque: "user" | "service" | "delegated" | ...
	IP        string // anon fallback key for reactions / poll votes
	Anonymous bool
}

type ContentResolver interface {
	Resolve(ctx context.Context, refs []contentref.ContentRef, actor Actor) (map[contentref.ContentKey]Resolution, error)
}

type Resolution struct {
	// Ref is the canonical reference every row is stored and read under (an
	// alias or slug resolves to it). A zero Ref keeps the requested one; a Ref
	// of another tenant is an error.
	Ref contentref.ContentRef
	// Visible = published and not soft-deleted. Teasers need only Visible.
	Visible bool
	// Accessible = the actor may consume it: an opaque host verdict
	// (entitlement, purchase, ACL, flag). ContentKit imposes no access model.
	Accessible bool
	// PreviewLimit caps a Visible item to its first N ordered units (pages,
	// files), whatever Accessible says. 0 = no cap. Content interactions
	// ignore it.
	PreviewLimit int
	// Editor = the actor may edit the item (its creator, staff): media signs
	// editor views (the item's temp/, one editor token) and returns edit
	// metadata only for editors. Its read API URLs stay within what Visible,
	// Accessible and PreviewLimit allow.
	Editor bool
}