The opaque wrapper with all() and first(): operation access, the Access Filter as a filter entry, Silent failure

[borisno2]

Parent

#1123 — build spec 3 of the Prisma 8 architecture spec. Lands on the prisma-8 integration branch, not main.

What to build

context.db.Post (PascalCase) is an opaque wrapper over a collection; .where(...) composes an immutable value; .all() and .first() resolve operation-level query access lazily, add the access filter as a second entry in the collection's filter list, enter the engine origin around the ORM call, materialise, and return []/null on denial. getDbKey is deleted.

Acceptance criteria

• Anonymous, author and other-user sessions over a blog fixture get exactly their rows; a denied list returns []/null, indistinguishable from empty
• The recording middleware shows the access filter as a filter entry ANDed with the caller's predicate, never hand-merged
• No Collection or CollectionState is reachable from the wrapper's type or value
• context.db.authUser is a compile error; context.db.AuthUser works; getDbKey no longer exists
• Every terminal runs inside the engine origin (tripwire in throw mode passes)

Blocked by

• The Unsafe surface: rename, builders, executors, ORM proxy and transaction-bound shape #1144

---

Generated by Claude Code

[borisno2]

Delivered by PR #1216, squash-merged to `prisma-8` as 26f47b0.

Review findings addressed on the branch; deferred items recorded on #1147 (predicate totality), #1149 (relation-valued `needs`), #1152 (write-path delegate names), #1129 (docs pages) and #1217 (the starter examples / scaffolder templates).