access

type Actor struct {
	ID        string // stable subject id (uuid text); empty when Anonymous
	Kind      string // opaque: "user" | "service" | "delegated" | ...
	IP        string // anon fallback key for reactions / poll votes
	Anonymous bool
}

type ContentResolver interface {
	Resolve(ctx context.Context, refs []contentref.ContentRef, actor Actor) (map[contentref.ContentKey]Resolution, error)
}

type Resolution struct {
	// Ref is the canonical reference every row is stored and read under (an
	// alias or slug resolves to it). A zero Ref keeps the requested one, which
	// content then refuses unless lower case; a Ref of another tenant is an
	// error.
	Ref contentref.ContentRef
	// Visible = published and not soft-deleted. Media's public files (covers,
	// previews) need only Visible to anonymous viewers.
	Visible bool
	// Accessible = the actor may consume it: an opaque host verdict
	// (entitlement, purchase, ACL, flag). ContentKit imposes no access model.
	// For media it is all or nothing: every private file of the item, or none.
	Accessible bool
	// Editor = the actor may edit the item (its creator, staff): media
	// returns edit metadata and editor views only for editors, and gives a
	// visible item's editor its private files whatever Accessible says.
	Editor bool
}