Skip to content

isClaimsDependentRowFilter

isClaimsDependentRowFilter(filter): boolean

Defined in: packages/contracts/src/config.ts:495

Whether a row filter denies (or cannot serve) an unauthenticated caller — a claims-dependent filter (ADR-0039). The client probes this at lazy-group activation: a group whose members probe claims-dependent, activated with no auth token, opens an empty subscription by construction, so the client warns.

A filter is claims-dependent when its customWhere, evaluated with empty claims ({} — exactly what the proxy passes for an unauthenticated request) and no params, either throws or returns the DENY_ALL sentinel by reference identity (which every contracts helper — buildOwnershipShapeWhere and friends — returns for a missing subject, and which is already the documented deny-anonymous pattern). Any other result — null (no filtering), a string, or a different SQL fragment — is not claims-dependent as far as this probe can tell.

Requires customWhere to be pure (its contract; see RowFilterSpec.customWhere).

RowFilterSpec | undefined

boolean