Class AccessApi

Resource-targeted slice walk. Returns true iff subject is a member of any group owning the resource's zone-tree slice. NPCs and null subjects fail closed. When the walk finds no owners, falls back to the universal 'core' group.

Role-gated check used when the target IS a Zone Template (transfer ownership, mutate accessGroups, destruct the slice). Requires 'owner' role in the zone's primary ownerGroup.

Orthogonal archwizard axis. True iff subject is an Avatar whose playerId is in the 'archwizards' group. Archwizards confer/revoke wizard status via wizard grant/revoke (the requiresArchwizard validator). Operator/root-managed; the Prime Minister office above them is deferred.

Broad "is the actor a member of any group with content scope?". Used by MQL pre-gates that can't be resource-targeted. Fail- closed in the no-Registry test path (the absent permission snapshot already permits the resolver from the dispatcher side).

Orthogonal streamer axis. True iff subject is an Avatar whose playerId is in the 'streamers' group. Gates the livestream control plane (the stream verb). Distinct from the wizard axis — a streamer drives the broadcast overlay without holding TypeScript-escape capability.

Orthogonal wizard axis — the code-trust capability. True iff subject is an Avatar whose playerId is in the 'wizards' group. Gates every TypeScript-authoring/execution door (eval, reload, source writes, CMS source read/write) AND the executable code-naming fields on a content template (class / hydratorClass / behaviors[].brain). A content author who is not a wizard is a "protowizard": content-write access without code trust.

Walk a source-tree path against the template tree most-specific-first, returning the closest extant FolderZone instance. Workspace controllers in source/mirror mode pass the resolved zone as the access resource.

Narrow-entry mutation: add (makeWizard=true) or remove the player from the 'wizards' group. Gated to the WizardController (the wizard grant/revoke verb) via the string-keyed FromModule policy — string-keyed to avoid a value-level static-import cycle. The controller is cloned per execution, and FromModule matches it by its class module id (code provenance), so the cloned instance is admitted directly. The authority (the giver's archwizard status) is enforced by the verb's requiresArchwizard validator; this method is the structurally single entry to the membership write. Returns true iff membership changed.