@adminiumjs/manifest 0.3.34 → 0.3.36

package/dist/removal.d.ts

@@ -0,0 +1,55 @@
+/**
+ * What a table keeps of its removed rows, and a column whose earlier values
+ * staff never read back.
+ *
+ * `removal` (a table word, opt-in):
+ * - `reason: true | "required"`: every door a person removes a row through
+ *   (the delete route, a bulk delete, the add-on kit's `remove`) takes a
+ *   reason, written into the removal's audit entry; `"required"` refuses a
+ *   removal without one. Every other removal (an undo, a cascade, a rule's or
+ *   a move's delete) is recorded with no reason.
+ * - `history: true`: a removed row stays readable, through a row it linked to
+ *   that the reader reads now (a deal's removed member, a job's cancelled
+ *   visit), masked as a live read is, until an undo brings it back. Never on
+ *   a private table: its rows are read by their own people only, and a
+ *   removed row has nobody it belongs to any more.
+ *
+ * `history: "audit"` (a column rule): the column's earlier values stay out of
+ * record history, a rule's `{{was.<column>}}`, a removed row's history and
+ * live frames; only the audit log, which the install's owner reads, keeps
+ * them (a removed message's text).
+ */
+import { z } from 'zod';
+export declare const removalSchema: z.ZodObject<{
+    reason: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodLiteral<"required">]>>;
+    history: z.ZodOptional<z.ZodLiteral<true>>;
+}, z.core.$strict>;
+export type RemovalRule = z.infer<typeof removalSchema>;
+/** The longest reason a removal keeps, in characters. */
+export declare const REMOVAL_REASON_MAX = 500;
+/** The column rule's one value: earlier values kept for the audit log only. */
+export declare const columnHistorySchema: z.ZodLiteral<"audit">;
+interface RemovalTableShape {
+    ref: string;
+    private?: true | undefined;
+    removal?: RemovalRule | undefined;
+    columns: readonly {
+        ref: string;
+        type: string;
+        role?: string | undefined;
+        references?: unknown;
+        rules?: {
+            history?: 'audit' | undefined;
+            secret?: unknown;
+        } | undefined;
+    }[];
+}
+/** Everything wrong with the tables' `removal` words and their columns' `history` rules. */
+export declare function removalIssues(tables: readonly RemovalTableShape[]): {
+    path: (string | number)[];
+    message: string;
+}[];
+/** The columns of a table whose earlier values only the audit log keeps. */
+export declare function auditOnlyColumns(table: Pick<RemovalTableShape, 'columns'>): string[];
+export {};
+//# sourceMappingURL=removal.d.ts.map

package/dist/removal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removal.d.ts","sourceRoot":"","sources":["../src/removal.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa;;;kBAMmH,CAAC;AAC9I,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAExD,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,uBAAqB,CAAC;AAEtD,UAAU,iBAAiB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;YAAC,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,EAAE,CAAC;CAC7K;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG;IAAE,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAkBpH;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,MAAM,EAAE,CAEpF"}

package/dist/removal.js

@@ -0,0 +1,62 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * What a table keeps of its removed rows, and a column whose earlier values
+ * staff never read back.
+ *
+ * `removal` (a table word, opt-in):
+ * - `reason: true | "required"`: every door a person removes a row through
+ *   (the delete route, a bulk delete, the add-on kit's `remove`) takes a
+ *   reason, written into the removal's audit entry; `"required"` refuses a
+ *   removal without one. Every other removal (an undo, a cascade, a rule's or
+ *   a move's delete) is recorded with no reason.
+ * - `history: true`: a removed row stays readable, through a row it linked to
+ *   that the reader reads now (a deal's removed member, a job's cancelled
+ *   visit), masked as a live read is, until an undo brings it back. Never on
+ *   a private table: its rows are read by their own people only, and a
+ *   removed row has nobody it belongs to any more.
+ *
+ * `history: "audit"` (a column rule): the column's earlier values stay out of
+ * record history, a rule's `{{was.<column>}}`, a removed row's history and
+ * live frames; only the audit log, which the install's owner reads, keeps
+ * them (a removed message's text).
+ */
+import { z } from 'zod';
+export const removalSchema = z
+    .object({
+    reason: z.union([z.literal(true), z.literal('required')]).optional(),
+    history: z.literal(true).optional(),
+})
+    .strict()
+    .refine((rule) => rule.reason !== undefined || rule.history !== undefined, { message: 'a removal rule says "reason", "history", or both' });
+/** The longest reason a removal keeps, in characters. */
+export const REMOVAL_REASON_MAX = 500;
+/** The column rule's one value: earlier values kept for the audit log only. */
+export const columnHistorySchema = z.literal('audit');
+/** Everything wrong with the tables' `removal` words and their columns' `history` rules. */
+export function removalIssues(tables) {
+    const out = [];
+    tables.forEach((table, t) => {
+        const at = (...rest) => ['requiredSchema', 'tables', t, ...rest];
+        if (table.removal?.history === true) {
+            if (table.private === true)
+                out.push({ path: at('removal', 'history'), message: 'a private table\'s rows are read by their own people only: its removed rows are kept for nobody' });
+            // Read through a row it linked to: a table with no link has no such row.
+            if (!table.columns.some((column) => column.type === 'fk' && column.references !== undefined)) {
+                out.push({ path: at('removal', 'history'), message: `a removed row is read through a row it linked to, and "${table.ref}" links to none` });
+            }
+        }
+        table.columns.forEach((column, c) => {
+            if (column.rules?.history === undefined)
+                return;
+            // How a row's history is found: its key is never left out of it.
+            if (column.role === 'pk')
+                out.push({ path: at('columns', c, 'rules', 'history'), message: 'a row\'s key is how its history is found: it is never kept for the audit log only' });
+        });
+    });
+    return out;
+}
+/** The columns of a table whose earlier values only the audit log keeps. */
+export function auditOnlyColumns(table) {
+    return table.columns.filter((column) => column.rules?.history === 'audit').map((column) => column.ref);
+}
+//# sourceMappingURL=removal.js.map

package/dist/removal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"removal.js","sourceRoot":"","sources":["../src/removal.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;AAG9I,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAStD,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,MAAoC;IAChE,MAAM,GAAG,GAAqD,EAAE,CAAC;IACjE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,CAAC,GAAG,IAAyB,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACtF,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,iGAAiG,EAAE,CAAC,CAAC;YACrL,yEAAyE;YACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC7F,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,0DAA0D,KAAK,CAAC,GAAG,iBAAiB,EAAE,CAAC,CAAC;YAC9I,CAAC;QACH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS;gBAAE,OAAO;YAChD,iEAAiE;YACjE,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,mFAAmF,EAAE,CAAC,CAAC;QACnL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,KAAyC;IACxE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzG,CAAC"}

package/dist/roles.d.ts

@@ -21,8 +21,8 @@
  *
  * `readable` limits the role's READ of the table to some columns, the same
  * way: housekeeping reads a stay's room and dates, and none of its guest or
- * its money. The key and the table's links to other rows are always read (a
- * screen moves through them). A column the role may not read is not written
+ * its money. The key is always read; a link to another row only when it is
+ * listed, as any column (before 0.3.35 every link was read). A column the role may not read is not written
  * through it either, unless `writable` names it.
  *
  * `writableFrom` says which rows the update reaches at all, by the value a
@@ -62,11 +62,64 @@
  *
  * Each reach is its own whole test (its `while` and its `by` hold for it
  * alone), as two roles' reaches are.
+ *
+ * `notBy` on an update (or a delete) reach takes out the rows a staff column
+ * names the person in — of the row itself, or of the row one of its links
+ * names (`starter_id.user_id`): a sales manager changes her team's targets
+ * but never her own, whatever door the change comes through —
+ *
+ * ```json
+ * "rows": { "update": { "reach": "team", "notBy": "rep_id" } }
+ * ```
+ *
+ * It judges the person alone, never the people they lead, and it judges the
+ * row as the change leaves it too: nobody names themselves into it.
+ *
+ * `via` beside `by`, on a table whose rows are whoever's their parent is
+ * (`belongs: [{ "via": "deal_id" }]`), judges the row by a staff column of
+ * that PARENT and by nothing else: a sales manager reaches the visits of the
+ * deals somebody she leads OWNS, and not a visit on another team's deal, even
+ * where her rep helps on that deal or the visit names her rep —
+ *
+ * ```json
+ * "rows": { "read": { "reach": "team", "via": "deal_id", "by": "owner_id" } }
+ * ```
+ *
+ * Without it, a child row is reached by every way its table and its parent
+ * say (a helper listed on the deal, the visit's own rep), as before.
+ *
+ * `notThrough` on an update (or a delete) reach names a listing the reach
+ * does not count: a `through` way of the table, or of a row it hangs off
+ * (`via`, up to two links up), whose table is that listing. A helper listed
+ * on a deal reads it and its quotes and comments on them, and changes none
+ * of them; whoever covers for the deal's owner, and the owner, change them as
+ * before —
+ *
+ * ```json
+ * "rows": { "update": { "reach": "own", "notThrough": "deal_members" } }
+ * ```
+ *
+ * Every other way counts as it did: a staff column, another listing, the
+ * rows nobody owns.
  */
 import { z } from 'zod';
 import { type ColumnShape, type ReferenceIssue, type TableIndex } from './refs.js';
 /** How far one action reaches: the person's own rows, their teams', or every row (only `while` some value). */
 export declare const ROW_REACHES: readonly ["own", "team", "all"];
+/** The most listings one reach's `notThrough` names. */
+export declare const NOT_THROUGH_MAX = 4;
+/**
+ * A person a row names: a staff column of the row (`rep_id`), or
+ * `<link>.<staff column>`, the staff column of the row one of its links names
+ * (`deal_id.owner_id`, the deal's owner).
+ */
+export declare const personPathSchema: z.ZodString;
+/**
+ * What is wrong with a person path on a table of the manifest, or null: the
+ * column is not there, holds no staff member, or (with a link) the first
+ * column links nowhere the manifest can read.
+ */
+export declare function personPathIssue<C extends ColumnShape>(index: TableIndex<C>, table: string, path: string): string | null;
 export declare const rowReachSchema: z.ZodObject<{
     reach: z.ZodEnum<{
         own: "own";
@@ -79,8 +132,15 @@ export declare const rowReachSchema: z.ZodObject<{
         in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     by: z.ZodOptional<z.ZodString>;
+    notBy: z.ZodOptional<z.ZodString>;
+    via: z.ZodOptional<z.ZodString>;
+    notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
 }, z.core.$strict>;
 export type RowReach = z.infer<typeof rowReachSchema>;
+/** The listings a reach's `notThrough` names, as a list, however it was written. */
+export declare function notThroughList(reach: {
+    notThrough?: string | readonly string[] | undefined;
+}): readonly string[];
 /** The actions a row limit narrows. A create makes a new row: it is held by the links and people it names. */
 export declare const ROW_LIMIT_ACTIONS: readonly ["read", "update", "delete"];
 /** The most reaches one action names. */
@@ -98,6 +158,9 @@ export declare const rowReachesSchema: z.ZodUnion<readonly [z.ZodObject<{
         in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     by: z.ZodOptional<z.ZodString>;
+    notBy: z.ZodOptional<z.ZodString>;
+    via: z.ZodOptional<z.ZodString>;
+    notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
 }, z.core.$strict>, z.ZodArray<z.ZodObject<{
     reach: z.ZodEnum<{
         own: "own";
@@ -110,6 +173,9 @@ export declare const rowReachesSchema: z.ZodUnion<readonly [z.ZodObject<{
         in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     by: z.ZodOptional<z.ZodString>;
+    notBy: z.ZodOptional<z.ZodString>;
+    via: z.ZodOptional<z.ZodString>;
+    notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
 }, z.core.$strict>>]>;
 export type RowReaches = z.infer<typeof rowReachesSchema>;
 /** An action's reaches as a list, whether the manifest wrote one or several. */
@@ -128,6 +194,9 @@ export declare const rowsLimitSchema: z.ZodObject<{
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         by: z.ZodOptional<z.ZodString>;
+        notBy: z.ZodOptional<z.ZodString>;
+        via: z.ZodOptional<z.ZodString>;
+        notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     }, z.core.$strict>, z.ZodArray<z.ZodObject<{
         reach: z.ZodEnum<{
             own: "own";
@@ -140,6 +209,9 @@ export declare const rowsLimitSchema: z.ZodObject<{
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         by: z.ZodOptional<z.ZodString>;
+        notBy: z.ZodOptional<z.ZodString>;
+        via: z.ZodOptional<z.ZodString>;
+        notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     }, z.core.$strict>>]>>;
     update: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         reach: z.ZodEnum<{
@@ -153,6 +225,9 @@ export declare const rowsLimitSchema: z.ZodObject<{
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         by: z.ZodOptional<z.ZodString>;
+        notBy: z.ZodOptional<z.ZodString>;
+        via: z.ZodOptional<z.ZodString>;
+        notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     }, z.core.$strict>, z.ZodArray<z.ZodObject<{
         reach: z.ZodEnum<{
             own: "own";
@@ -165,6 +240,9 @@ export declare const rowsLimitSchema: z.ZodObject<{
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         by: z.ZodOptional<z.ZodString>;
+        notBy: z.ZodOptional<z.ZodString>;
+        via: z.ZodOptional<z.ZodString>;
+        notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     }, z.core.$strict>>]>>;
     delete: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         reach: z.ZodEnum<{
@@ -178,6 +256,9 @@ export declare const rowsLimitSchema: z.ZodObject<{
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         by: z.ZodOptional<z.ZodString>;
+        notBy: z.ZodOptional<z.ZodString>;
+        via: z.ZodOptional<z.ZodString>;
+        notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     }, z.core.$strict>, z.ZodArray<z.ZodObject<{
         reach: z.ZodEnum<{
             own: "own";
@@ -190,6 +271,9 @@ export declare const rowsLimitSchema: z.ZodObject<{
             in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         by: z.ZodOptional<z.ZodString>;
+        notBy: z.ZodOptional<z.ZodString>;
+        via: z.ZodOptional<z.ZodString>;
+        notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     }, z.core.$strict>>]>>;
 }, z.core.$strict>;
 export type RowsLimit = z.infer<typeof rowsLimitSchema>;
@@ -300,6 +384,9 @@ export declare const roleLimitSchema: z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>, z.ZodArray<z.ZodObject<{
             reach: z.ZodEnum<{
                 own: "own";
@@ -312,6 +399,9 @@ export declare const roleLimitSchema: z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>>]>>;
         update: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             reach: z.ZodEnum<{
@@ -325,6 +415,9 @@ export declare const roleLimitSchema: z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>, z.ZodArray<z.ZodObject<{
             reach: z.ZodEnum<{
                 own: "own";
@@ -337,6 +430,9 @@ export declare const roleLimitSchema: z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>>]>>;
         delete: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             reach: z.ZodEnum<{
@@ -350,6 +446,9 @@ export declare const roleLimitSchema: z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>, z.ZodArray<z.ZodObject<{
             reach: z.ZodEnum<{
                 own: "own";
@@ -362,6 +461,9 @@ export declare const roleLimitSchema: z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>>]>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
@@ -387,6 +489,9 @@ export declare const roleLimitsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>, z.ZodArray<z.ZodObject<{
             reach: z.ZodEnum<{
                 own: "own";
@@ -399,6 +504,9 @@ export declare const roleLimitsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>>]>>;
         update: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             reach: z.ZodEnum<{
@@ -412,6 +520,9 @@ export declare const roleLimitsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>, z.ZodArray<z.ZodObject<{
             reach: z.ZodEnum<{
                 own: "own";
@@ -424,6 +535,9 @@ export declare const roleLimitsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>>]>>;
         delete: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             reach: z.ZodEnum<{
@@ -437,6 +551,9 @@ export declare const roleLimitsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>, z.ZodArray<z.ZodObject<{
             reach: z.ZodEnum<{
                 own: "own";
@@ -449,6 +566,9 @@ export declare const roleLimitsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
                 in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
             }, z.core.$strict>>;
             by: z.ZodOptional<z.ZodString>;
+            notBy: z.ZodOptional<z.ZodString>;
+            via: z.ZodOptional<z.ZodString>;
+            notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         }, z.core.$strict>>]>>;
     }, z.core.$strict>>;
 }, z.core.$strict>>;
@@ -461,6 +581,12 @@ export interface RoleShape {
 }
 /** Every `limits` problem across the app's roles. */
 export declare function roleLimitIssues<C extends ColumnShape>(roles: readonly RoleShape[], index: TableIndex<C>, rowTables?: RowTables): ReferenceIssue[];
+/**
+ * The listings a table's rows are read through: the table of each of its
+ * `through` ways, and of the rows it hangs off (`via`), as far up as a row is
+ * followed ({@link BELONGS_VIA_MAX_STEPS} links).
+ */
+export declare function listingsOf<C extends ColumnShape>(ref: string, index: TableIndex<C>, ways: (ref: string) => readonly BelongsWay[]): Set<string>;
 /** What the row checks read of a table beside its columns. */
 export interface BelongsTableShape {
     ref: string;
@@ -471,6 +597,8 @@ export interface BelongsTableShape {
 export interface RowTables {
     belongs: (ref: string) => boolean;
     privateTables: () => readonly string[];
+    /** A table's own ways, as written (none for a table with no `belongs`). */
+    ways?: (ref: string) => readonly BelongsWay[];
 }
 export declare function rowTablesOf(tables: readonly BelongsTableShape[]): RowTables;
 /**
@@ -516,6 +644,9 @@ export declare const roleAddOnTableSchema: z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>, z.ZodArray<z.ZodObject<{
                 reach: z.ZodEnum<{
                     own: "own";
@@ -528,6 +659,9 @@ export declare const roleAddOnTableSchema: z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>>]>>;
             update: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 reach: z.ZodEnum<{
@@ -541,6 +675,9 @@ export declare const roleAddOnTableSchema: z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>, z.ZodArray<z.ZodObject<{
                 reach: z.ZodEnum<{
                     own: "own";
@@ -553,6 +690,9 @@ export declare const roleAddOnTableSchema: z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>>]>>;
             delete: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 reach: z.ZodEnum<{
@@ -566,6 +706,9 @@ export declare const roleAddOnTableSchema: z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>, z.ZodArray<z.ZodObject<{
                 reach: z.ZodEnum<{
                     own: "own";
@@ -578,6 +721,9 @@ export declare const roleAddOnTableSchema: z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>>]>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
@@ -611,6 +757,9 @@ export declare const roleAddOnTablesSchema: z.ZodArray<z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>, z.ZodArray<z.ZodObject<{
                 reach: z.ZodEnum<{
                     own: "own";
@@ -623,6 +772,9 @@ export declare const roleAddOnTablesSchema: z.ZodArray<z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>>]>>;
             update: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 reach: z.ZodEnum<{
@@ -636,6 +788,9 @@ export declare const roleAddOnTablesSchema: z.ZodArray<z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>, z.ZodArray<z.ZodObject<{
                 reach: z.ZodEnum<{
                     own: "own";
@@ -648,6 +803,9 @@ export declare const roleAddOnTablesSchema: z.ZodArray<z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>>]>>;
             delete: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 reach: z.ZodEnum<{
@@ -661,6 +819,9 @@ export declare const roleAddOnTablesSchema: z.ZodArray<z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>, z.ZodArray<z.ZodObject<{
                 reach: z.ZodEnum<{
                     own: "own";
@@ -673,6 +834,9 @@ export declare const roleAddOnTablesSchema: z.ZodArray<z.ZodObject<{
                     in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
                 }, z.core.$strict>>;
                 by: z.ZodOptional<z.ZodString>;
+                notBy: z.ZodOptional<z.ZodString>;
+                via: z.ZodOptional<z.ZodString>;
+                notThrough: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
             }, z.core.$strict>>]>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
@@ -687,7 +851,8 @@ export declare function roleAddOnTableIssues(roles: readonly {
  * from under it, or lean on it and stop working: each is refused where it is
  * written. A private table's rows are read on the screen by the people they
  * belong to; nothing is kept from them elsewhere, nothing else is reached
- * through them, and nothing Adminium does by itself runs on them.
+ * through them but by those same people, and nothing Adminium does by itself
+ * runs on them.
  */
 export declare function privateShapeIssues(tables: readonly {
     ref: string;

package/dist/roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../src/roles.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAsC,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvH,+GAA+G;AAC/G,eAAO,MAAM,WAAW,iCAAkC,CAAC;AAE3D,eAAO,MAAM,cAAc;;;;;;;;;;;;kBAgBuG,CAAC;AACnI,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,8GAA8G;AAC9G,eAAO,MAAM,iBAAiB,uCAAwC,CAAC;AAEvE,yCAAyC;AACzC,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,0HAA0H;AAC1H,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;qBAAiF,CAAC;AAC/G,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,QAAQ,EAAE,CAE9E;AAED,0EAA0E;AAC1E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAGyJ,CAAC;AACtL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,qHAAqH;AACrH,eAAO,MAAM,eAAe,qCAAsC,CAAC;AAEnE,yGAAyG;AACzG,eAAO,MAAM,kBAAkB;;;;;;oBAG7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAU3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,mEAAmE;AACnE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAA0C,CAAC;AAErE,6FAA6F;AAC7F,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,yBAAyB;AACzB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBxB,CAAC;AACL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAAuC,CAAC;AAErE,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5C,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;CAC1D;AAQD,qDAAqD;AACrD,wBAAgB,eAAe,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,cAAc,EAAE,CAuHjJ;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC;IAC5C,OAAO,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,aAAa,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,CAM3E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,WAAW,EAAE,MAAM,EAAE,SAAS,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,cAAc,EAAE,CAoHtL;AAED,kHAAkH;AAClH,eAAO,MAAM,mBAAmB,uCAAwC,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAA+C,CAAC;AAElF,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,CAAA;CAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,cAAc,EAAE,CAsCpK;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IACzC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,CAAC,CAAC,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IACpL,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,GAAG,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC;YAAC,MAAM,CAAC,EAAE;gBAAE,KAAK,EAAE,OAAO,CAAA;aAAE,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,EAAE,CAAC;CACjO,EAAE,GACF,cAAc,EAAE,CAyClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,GAAG,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,EAC7L,KAAK,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAA;CAAE,EAAE,GAC7N,cAAc,EAAE,CAyBlB;AAKD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,EAAE,CAkBlI"}
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../src/roles.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAsC,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvH,+GAA+G;AAC/G,eAAO,MAAM,WAAW,iCAAkC,CAAC;AAE3D,wDAAwD;AACxD,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,aAAsI,CAAC;AAEpK;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUvH;AAED,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;kBAqCqK,CAAC;AACjM,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,MAAM,EAAE,CAGhH;AAED,8GAA8G;AAC9G,eAAO,MAAM,iBAAiB,uCAAwC,CAAC;AAEvE,yCAAyC;AACzC,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,0HAA0H;AAC1H,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAAiF,CAAC;AAC/G,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,QAAQ,EAAE,CAE9E;AAED,0EAA0E;AAC1E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAGyJ,CAAC;AACtL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,qHAAqH;AACrH,eAAO,MAAM,eAAe,qCAAsC,CAAC;AAEnE,yGAAyG;AACzG,eAAO,MAAM,kBAAkB;;;;;;oBAG7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAU3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,mEAAmE;AACnE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAA0C,CAAC;AAErE,6FAA6F;AAC7F,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,yBAAyB;AACzB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBxB,CAAC;AACL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAAuC,CAAC;AAErE,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5C,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;CAC1D;AAQD,qDAAqD;AACrD,wBAAgB,eAAe,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,cAAc,EAAE,CAwJjJ;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,UAAU,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAe9I;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC;IAC5C,OAAO,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,aAAa,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;IACvC,2EAA2E;IAC3E,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,UAAU,EAAE,CAAC;CAC/C;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,CAO3E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,WAAW,EAAE,MAAM,EAAE,SAAS,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,cAAc,EAAE,CAoHtL;AAED,kHAAkH;AAClH,eAAO,MAAM,mBAAmB,uCAAwC,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAA+C,CAAC;AAElF,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,CAAA;CAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,cAAc,EAAE,CAwCpK;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IACzC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,CAAC,CAAC,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IACpL,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,GAAG,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAC;YAAC,MAAM,CAAC,EAAE;gBAAE,KAAK,EAAE,OAAO,CAAA;aAAE,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,EAAE,CAAC;CACjO,EAAE,GACF,cAAc,EAAE,CA2DlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,GAAG,EAAE,MAAM,CAAA;aAAE,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,EAC7L,KAAK,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAA;CAAE,EAAE,GAC7N,cAAc,EAAE,CAyBlB;AAKD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,EAAE,CAkBlI"}