@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.1

package/dist/core/sql/run.js

@@ -0,0 +1,267 @@
+/**
+ * Running a compiled program: a Procedure is one all-or-nothing batch with lifecycle hooks around it,
+ * a View is one read with keyset paging (ADR-0032 decisions 2 and 3, ADR-0034 decision 4). Store and
+ * `invokeProcedure` both run through here; nothing else reaches the executor.
+ */
+import { DiagnosticError, runtimeDiagnostic } from "../../spec/kernel/index.js";
+import { decideLifecycleWrite, hasSubLink, isIdCol, pinnedTarget } from "../../spec/domain/index.js";
+import { bindValues, compileProgram } from "./compile.js";
+import { NATIVE } from "../store/json.js";
+import { S, op, ref } from "./ast.js";
+import { applyPolicy, HOOK_PREFIX } from "./policy.js";
+const refuse = (message) => new DiagnosticError(runtimeDiagnostic({ code: "INPUT_VALIDATION_FAILED", severity: "error", path: "store", message }));
+const conflict = (opIndex) => new DiagnosticError(runtimeDiagnostic({ code: "CONFLICT", severity: "error", path: "store", message: `CONFLICT op=${opIndex}`, conflict: { opIndex, reason: "expect" } }));
+const ctxOf = (env, p, extra = {}) => ({
+    dialect: env.dialect, schemas: env.schemas, inputs: p.inputs, kind: p.kind, mode: env.mode, seen: env.seen, unsafeNoVisibility: env.unsafeNoVisibility, ...extra,
+});
+const select = (targetList, from, where) => ({
+    SelectStmt: { targetList, ...(from ? { fromClause: [from] } : {}), ...(where ? { whereClause: where } : {}), limitOption: "LIMIT_OPTION_DEFAULT", op: "SETOP_NONE" },
+});
+function conjuncts(w) {
+    return w?.BoolExpr?.boolop === "AND_EXPR" ? w.BoolExpr.args.flatMap(conjuncts) : w ? [w] : [];
+}
+/** The scalar of the `id = <scalar>` conjunct that makes a statement a row op. */
+function idOf(stmt) {
+    for (const x of conjuncts((stmt.UpdateStmt ?? stmt.DeleteStmt).whereClause)) {
+        const e = x.A_Expr;
+        if (e?.kind !== "AEXPR_OP" || e.name[0].String.sval !== "=")
+            continue;
+        if (isIdCol(e.lexpr))
+            return e.rexpr;
+        if (isIdCol(e.rexpr))
+            return e.lexpr;
+    }
+    throw new Error("not a row op");
+}
+/** A publish fires publish hooks instead of update hooks; the key is `schema.<insert|update|delete|publish>`. */
+const verbOf = (c) => (c.publish ? "publish" : c.verb);
+const key = (c) => `${c.schema}.${verbOf(c)}`;
+const HOOK = { insert: "create", update: "update", delete: "delete", publish: "publish" };
+const NOT_ALLOWED = {
+    transition: "that status change is not allowed from the entry's current status",
+    "not-editable": "only a draft can be edited: unpublish or restore the entry first",
+    "published-protected": "a published entry cannot be deleted: unpublish or archive it first",
+};
+/** The row a before hook or the lifecycle sees: the visible current row of an update or delete, or the values an insert supplies. */
+async function preRead(env, p, i, c, as) {
+    const stmt = p.ir[i];
+    let read;
+    if (c.verb === "insert") {
+        const cols = stmt.InsertStmt.cols;
+        const values = stmt.InsertStmt.selectStmt.SelectStmt.valuesLists[0].List.items;
+        // the hook sees these values in a read of its own, so they must not depend on data that can change before the commit
+        if (hasSubLink(values))
+            throw refuse(`SQL_SHAPE: an insert into ${c.schema}, which has a before create hook, may not read data in its VALUES`);
+        if (!values.length)
+            return {}; // an insert that names no column: the hook sees an empty entry
+        read = select(values.map((val, k) => ({ ResTarget: { name: cols[k].ResTarget.name, val } })));
+    }
+    else {
+        const t = (f) => ref("t", f);
+        read = select([{ ResTarget: { val: ref("t", "id") } }, { ResTarget: { val: ref("t", "version") } }, ...(env.schemas[c.schema]?.publishing ? [{ ResTarget: { val: ref("t", "status") } }] : []), { ResTarget: { val: { ColumnRef: { fields: [S("t"), { A_Star: {} }] } } } }], { RangeVar: { relname: c.schema, alias: { aliasname: "t" }, inh: true, relpersistence: "p", mantle: "table" } }, { A_Expr: { kind: "AEXPR_OP", name: [S("=")], lexpr: t("id"), rexpr: idOf(stmt) } });
+    }
+    const rc = applyPolicy(read, { schemas: env.schemas, inputs: p.inputs, mode: env.mode, seen: env.seen, unsafeNoVisibility: env.unsafeNoVisibility, lower: env.dialect.lowering });
+    const [row] = await env.executor.select({ ir: rc.ast, binds: bindValues(env.dialect, rc.binds, as.bind) });
+    if (c.verb !== "insert" && !row)
+        throw conflict(i); // no visible row: fail closed, and the hook never learns whether it exists
+    return row ?? {};
+}
+/** A native column by its physical name: the name Store gives it and the type it decodes as (Store's own table, inverted). */
+const BY_COLUMN = new Map(Object.entries(NATIVE).map(([name, { col, type }]) => [col, { name, type }]));
+/** A returned row split into what the statement's own RETURNING asked for and the row its after hook receives. */
+function split(row) {
+    const result = {}, hook = {};
+    for (const [k, v] of Object.entries(row))
+        if (k.startsWith(HOOK_PREFIX))
+            hook[k.slice(HOOK_PREFIX.length)] = v;
+        else
+            result[k] = v;
+    return { result, hook };
+}
+/** A Procedure: before hooks (row ops only), one batch applied in order and all or nothing, then after hooks. */
+export async function runProcedure(env, p, as) {
+    const lc = env.lifecycle;
+    const afterSchemas = new Set([...(lc?.after ?? [])].map((k) => k.split(".")[0]));
+    const base = ctxOf(env, p, { returning: afterSchemas, statuses: p.statuses });
+    const plan = compileProgram(p.ir, base);
+    const versions = {};
+    // a hook receives the entry as Store's `select` returns it (declared names, decoded values, `{ lat, lng }`), not the storage encoding
+    const entry = (schema, row) => {
+        const def = env.schemas[schema];
+        const out = {};
+        for (const [k, v] of Object.entries(row)) {
+            const native = BY_COLUMN.get(k);
+            if (native)
+                out[native.name] = env.dialect.codec.decode(native.type, v);
+            else if (def.fields[k] && def.fields[k] !== "geo")
+                out[def.names?.[k] ?? k] = env.dialect.codec.decode(def.fields[k], v);
+            else if (!/_(lat|lng)$/.test(k) || def.fields[k.slice(0, -4)] !== "geo")
+                out[k] = v;
+        }
+        for (const [f, t] of Object.entries(def.fields))
+            if (t === "geo" && (`${f}_lat` in row))
+                out[def.names?.[f] ?? f] = row[`${f}_lat`] == null || row[`${f}_lng`] == null ? null : { lat: row[`${f}_lat`], lng: row[`${f}_lng`] };
+        return out;
+    };
+    const event = (i, hook, schema, rows) => ({
+        id: `${as.seq ?? as.cause.id}:${i}:${hook}`, schema, hook: hook, rows: rows.map((r) => entry(schema, r)), caller: as.caller, parent: as.cause,
+    });
+    for (const [i, c] of plan.entries()) {
+        if (!c.schema || !c.verb)
+            continue;
+        const hooked = !!lc?.before.has(key(c));
+        // a publishing Schema drafts, protects what is published and moves through statuses by one rule (ADR-0032 decision 1)
+        const lifecycle = !!env.schemas[c.schema]?.publishing && c.kind === "row" && c.verb !== "insert";
+        if (hooked && c.kind !== "row")
+            throw refuse(`SQL_SHAPE: a set op on ${c.schema} is refused: ${c.schema} has a before ${verbOf(c)} hook, and before hooks take row ops only`);
+        if (!hooked && !lifecycle)
+            continue;
+        const row = await preRead(env, p, i, c, as);
+        if (lifecycle) {
+            const to = p.statuses?.[i];
+            const stmt = p.ir[i];
+            const from = row.status;
+            const d = decideLifecycleWrite({ spec: { lifecycle: "publishing" } }, c.verb === "delete" ? { op: "delete", from } : { op: "update", from, ...(to ? { to } : {}), data: (stmt.UpdateStmt?.targetList?.length ?? 0) > 0 });
+            if (!d.allowed)
+                throw new DiagnosticError(runtimeDiagnostic({ code: "CONFLICT", severity: "error", path: "store", message: `CONFLICT: ${c.schema} entry is ${from}; ${NOT_ALLOWED[d.reason]}.` }));
+            await p.checks?.[i]?.(row);
+        }
+        if (hooked)
+            await lc.dispatcher.before([event(i, `before_${HOOK[verbOf(c)]}`, c.schema, [row])]);
+        versions[i] = row.version;
+        // the statement carries the version it was decided on, so a change in between is CONFLICT
+        if (c.verb !== "insert")
+            plan[i] = compileProgram([p.ir[i]], { ...base, lockVersion: true, statuses: [p.statuses?.[i]] })[0];
+    }
+    // a row op that matched nothing is `lock` when the entry is visible at another version than the one `version = input.x` asked for
+    // (ADR-0032 decision 2), and `expect` otherwise: an invisible entry is a missing one
+    const lockReason = async (e) => {
+        if (!(e instanceof DiagnosticError) || e.diagnostic.conflict?.reason !== "expect")
+            return e;
+        const i = e.diagnostic.conflict.opIndex;
+        const c = i === undefined ? undefined : plan[i];
+        const asked = c && c.kind === "row" && c.verb !== "insert" ? pinnedTarget(p.ir[i])?.version : undefined;
+        const expected = asked === undefined ? undefined : as.bind.input?.[asked];
+        if (expected === undefined)
+            return e;
+        const row = await preRead(env, p, i, c, as).catch(() => undefined);
+        if (!row || row.version === expected)
+            return e;
+        return new DiagnosticError(runtimeDiagnostic({ code: "CONFLICT", severity: "error", path: "store", message: e.message, conflict: { opIndex: i, reason: "lock" } }));
+    };
+    const res = await env.executor.apply(plan.map((c, i) => ({
+        ir: c.ast,
+        binds: bindValues(env.dialect, c.binds, as.bind, { version: versions[i] }),
+        ...((p.expects?.[i] ?? (c.kind === "row" ? 1 : undefined)) === undefined ? {} : { expect: p.expects?.[i] ?? 1 }),
+    }))).catch(async (e) => { throw await lockReason(e); });
+    const parts = res.map((r, i) => (plan[i].hooked ? r.rows.map(split) : undefined));
+    // a statement without RETURNING returns no rows, whatever its hook was given
+    const rows = res.map((r, i) => (!parts[i] ? r.rows : p.ir[i][Object.keys(p.ir[i])[0]].returningClause ? parts[i].map((x) => x.result) : []));
+    if (lc)
+        for (const [i, c] of plan.entries()) {
+            if (!c.schema || !c.verb || !lc.after.has(key(c)) || !res[i].rows.length)
+                continue; // a statement that writes no row calls no hook
+            const cause = parts[i].map((x) => x.hook);
+            // a failure of an after hook never changes the committed result (ADR-0032 decision 3); the dispatcher reports its own failures
+            await lc.dispatcher.after([event(i, `after_${HOOK[verbOf(c)]}`, c.schema, cause)]).catch(() => undefined);
+        }
+    return { rows, affected: res.map((r) => r.affected) };
+}
+// ---- Views and cursors --------------------------------------------------------------------------------
+const refuseOutput = (name) => { throw refuse(`SQL_SHAPE: the View has no output named '${name}'`); };
+/** The name a View output has on the row: its alias, or the column it reads. */
+export const outName = (t) => t.ResTarget.name ?? t.ResTarget.val?.ColumnRef?.fields?.at(-1)?.String?.sval;
+/** `%text%` with the LIKE metacharacters escaped, so a search matches what was typed. */
+const likePattern = (text) => `%${text.replace(/[\\%_]/g, (c) => `\\${c}`)}%`;
+/**
+ * Keyset pagination over a View. The sort keys (the author's plus the compiler's appended id or group key)
+ * become hidden `_k<i>` columns; the cursor is the last row's keys and the next page filters on them. A NULL key
+ * sorts by the page's own NULLS rule (stated on every key, so the cursor and the order agree).
+ *
+ * A View's own LIMIT bounds every page together. A View without ORDER BY (a DISTINCT, a GROUP BY or an aggregate) cannot
+ * be paged: it returns its rows when they fit one page and is refused when they do not.
+ */
+export async function runView(env, p, as, opts = {}) {
+    const [c] = compileProgram(p.ir, ctxOf(env, p));
+    if (!opts.pageSize)
+        return { rows: await env.executor.select({ ir: c.ast, binds: bindValues(env.dialect, c.binds, as.bind) }) };
+    const sel = structuredClone(c.ast.SelectStmt);
+    const keys = sel.sortClause ?? [];
+    if (opts.cursor && !keys.length)
+        throw refuse("SQL_SHAPE: this View has no ORDER BY, so it is one page and takes no cursor");
+    const visible = sel.targetList.map(outName);
+    if (!keys.length && !opts.match?.search?.text && !opts.match?.eq?.length) {
+        // nothing to wrap: the View's own statement, one row past the page to tell whether it fits
+        const rows = await env.executor.select({ ir: { SelectStmt: { ...sel, limitCount: { A_Const: { ival: { ival: opts.pageSize + 1 } } }, limitOption: "LIMIT_OPTION_COUNT" } }, binds: bindValues(env.dialect, c.binds, as.bind) });
+        if (rows.length > opts.pageSize)
+            throw refuse(`SQL_SHAPE: this View has more than ${opts.pageSize} rows and no ORDER BY to page them by: add an ORDER BY`);
+        return { rows };
+    }
+    if (visible.some((n) => !n))
+        throw refuse("SQL_SHAPE: a paged View names every output column");
+    const names = visible;
+    const aliasVal = new Map(sel.targetList.map((t) => [outName(t), t.ResTarget.val]));
+    const hidden = keys.map((k, i) => {
+        const node = k.SortBy.node;
+        const f = node.ColumnRef?.fields;
+        const position = node.A_Const?.ival ? Number(node.A_Const.ival.ival) : undefined;
+        // an ORDER BY alias or position is its select-list expression; a bare constant would sort nothing
+        const val = position !== undefined ? sel.targetList[position - 1]?.ResTarget.val ?? refuseOutput(String(position))
+            : f?.length === 1 && aliasVal.has(f[0].String.sval) ? aliasVal.get(f[0].String.sval) : node;
+        return { ResTarget: { name: `_k${i}`, val } };
+    });
+    // SQLite's own rule, stated: ascending puts NULL first, descending last
+    const desc = (k) => k.SortBy.sortby_dir === "SORTBY_DESC";
+    const nullsFirst = (k) => (k.SortBy.sortby_nulls === "SORTBY_NULLS_FIRST" ? true : k.SortBy.sortby_nulls === "SORTBY_NULLS_LAST" ? false : !desc(k));
+    // an authored LIMIT bounds the whole result: the View's own ORDER BY and LIMIT pick its rows, and the pages run through those
+    const inner = sel.limitCount
+        ? { ...sel, targetList: [...sel.targetList, ...hidden] }
+        : { ...sel, targetList: [...sel.targetList, ...hidden], sortClause: undefined, limitCount: undefined, limitOption: "LIMIT_OPTION_DEFAULT" };
+    const base = c.binds.length;
+    const extra = [];
+    const param = (value) => (extra.push(value), { ParamRef: { number: base + extra.length } });
+    const col = (n) => ref("_p", n);
+    const isNull = (n, t) => ({ NullTest: { arg: n, nulltesttype: t } });
+    const conditions = [];
+    if (opts.cursor) {
+        const cur = opts.cursor;
+        const same = (j) => (cur[j] === null ? isNull(col(`_k${j}`), "IS_NULL") : op("=", col(`_k${j}`), param(cur[j])));
+        // the rows after the cursor's key i: past a NULL comes every value when NULL sorts first, nothing when it sorts last
+        const past = (k, i) => {
+            const at = col(`_k${i}`);
+            if (cur[i] === null)
+                return nullsFirst(k) ? isNull(at, "IS_NOT_NULL") : undefined;
+            const beyond = op(desc(k) ? "<" : ">", at, param(cur[i]));
+            return nullsFirst(k) ? beyond : { BoolExpr: { boolop: "OR_EXPR", args: [beyond, isNull(at, "IS_NULL")] } };
+        };
+        const args = keys.flatMap((k, i) => {
+            const last = past(k, i);
+            return last ? [{ BoolExpr: { boolop: "AND_EXPR", args: [...keys.slice(0, i).map((_x, j) => same(j)), last] } }] : [];
+        });
+        conditions.push(args.length ? { BoolExpr: { boolop: "OR_EXPR", args } } : { A_Const: { boolval: { boolval: false } } });
+    }
+    // an output by the name SQL gave it: an unquoted alias or column folds to lower case
+    const output = (name) => names.find((n) => n === name) ?? names.find((n) => n === name.toLowerCase()) ?? refuseOutput(name);
+    const search = opts.match?.search;
+    if (search?.text) {
+        const pattern = likePattern(search.text);
+        conditions.push({ BoolExpr: { boolop: "OR_EXPR", args: search.columns.map((c) => ({ A_Expr: { kind: "AEXPR_LIKE", name: [{ String: { sval: "~~" } }], lexpr: col(output(c)),
+                        rexpr: { FuncCall: { funcname: [{ String: { sval: "like_escape" } }], args: [param(pattern), { A_Const: { sval: { sval: "\\" } } }], funcformat: "COERCE_EXPLICIT_CALL" } } } })) } });
+    }
+    for (const { column, value } of opts.match?.eq ?? [])
+        conditions.push(op("=", col(output(column)), param(value)));
+    const outer = { SelectStmt: {
+            targetList: [...names.map((n) => ({ ResTarget: { val: col(n), name: n } })), ...keys.map((_k, i) => ({ ResTarget: { val: col(`_k${i}`), name: `_k${i}` } }))],
+            fromClause: [{ RangeSubselect: { subquery: { SelectStmt: inner }, alias: { aliasname: "_p" } } }],
+            whereClause: conditions.length > 1 ? { BoolExpr: { boolop: "AND_EXPR", args: conditions } } : conditions[0],
+            sortClause: keys.map((k, i) => ({ SortBy: { node: col(`_k${i}`), sortby_dir: k.SortBy.sortby_dir, sortby_nulls: nullsFirst(k) ? "SORTBY_NULLS_FIRST" : "SORTBY_NULLS_LAST" } })),
+            limitCount: { A_Const: { ival: { ival: opts.pageSize + 1 } } }, limitOption: "LIMIT_OPTION_COUNT", op: "SETOP_NONE"
+        } };
+    const rows = await env.executor.select({ ir: outer, binds: [...bindValues(env.dialect, c.binds, as.bind), ...extra] });
+    if (!keys.length && rows.length > opts.pageSize)
+        throw refuse(`SQL_SHAPE: this View has more than ${opts.pageSize} matching rows and no ORDER BY to page them by: add an ORDER BY`);
+    const page = rows.slice(0, opts.pageSize);
+    const next = keys.length && rows.length > opts.pageSize ? keys.map((_k, i) => page.at(-1)[`_k${i}`]) : undefined;
+    return { rows: page.map((r) => Object.fromEntries(names.map((n) => [n, r[n]]))), ...(next ? { next } : {}) };
+}
+//# sourceMappingURL=run.js.map

package/dist/core/sql/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/core/sql/run.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAwC,MAAM,4BAA4B,CAAC;AAI3I,OAAO,EAAE,UAAU,EAAE,cAAc,EAAyC,MAAM,cAAc,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAiB,MAAM,aAAa,CAAC;AAqCtE,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC3J,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;AAEjN,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,CAAU,EAAE,QAAiC,EAAE,EAAkB,EAAE,CAAC,CAAC;IAC/F,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,KAAK;CACjK,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,UAAe,EAAE,IAAQ,EAAE,KAAS,EAAK,EAAE,CAAC,CAAC;IAC3D,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,EAAE,EAAE,YAAY,EAAE;CACrK,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,CAAgB;IACjC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AACD,kFAAkF;AAClF,SAAS,IAAI,CAAC,IAAO;IACnB,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG;YAAE,SAAS;QACtE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;QACrC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,iHAAiH;AACjH,MAAM,MAAM,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC;AAClE,MAAM,GAAG,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAW,CAAC;AACnG,MAAM,WAAW,GAAG;IAClB,UAAU,EAAE,mEAAmE;IAC/E,cAAc,EAAE,kEAAkE;IAClF,qBAAqB,EAAE,oEAAoE;CACnF,CAAC;AAEX,qIAAqI;AACrI,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,CAAU,EAAE,CAAS,EAAE,CAAW,EAAE,EAAS;IAC/E,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;IACtB,IAAI,IAAO,CAAC;IACZ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,GAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACvC,MAAM,MAAM,GAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACpF,qHAAqH;QACrH,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC,MAAM,mEAAmE,CAAC,CAAC;QAC/I,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC,CAAC,+DAA+D;QAC9F,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,GAAG,MAAM,CACX,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAO,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAC/P,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAC/G,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClL,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3G,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,2EAA2E;IAC/H,OAAO,GAAG,IAAI,EAAE,CAAC;AACnB,CAAC;AAED,8HAA8H;AAC9H,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAExG,kHAAkH;AAClH,SAAS,KAAK,CAAC,GAAa;IAC1B,MAAM,MAAM,GAA4B,EAAE,EAAE,IAAI,GAA4B,EAAE,CAAC;IAC/E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;;YAAM,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,CAAU,EAAE,EAAS;IACnE,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;IACzB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,sIAAsI;IACtI,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,GAAa,EAAY,EAAE;QACxD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAE,CAAC;QACjC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,MAAM;gBAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBACnE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK;gBAAE,GAAG,CAAE,GAA0C,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;iBAC7J,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;gBAAE,GAAG,CAAE,GAA0C,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxN,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,IAAY,EAAE,MAAc,EAAE,IAA+B,EAAE,EAAE,CAAC,CAAC;QAC3F,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAa,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAyC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK;KAC/L,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,sHAAsH;QACtH,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;QACjG,IAAI,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;YAAE,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,MAAM,iBAAiB,MAAM,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;QAC9K,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;YAAE,SAAS;QACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAA6B,CAAC;YACvD,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAsB,CAAC;YACxC,MAAM,CAAC,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1N,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,MAAM,aAAa,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACnM,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM;YAAE,MAAM,EAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;QAC1B,0FAA0F;QAC1F,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IACjI,CAAC;IAED,kIAAkI;IAClI,qFAAqF;IACrF,MAAM,UAAU,GAAG,KAAK,EAAE,CAAU,EAAoB,EAAE;QACxD,IAAI,CAAC,CAAC,CAAC,YAAY,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAE,EAAE,CAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACvK,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,EAAE,EAAE,CAAC,CAAC,GAAG;QACT,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KACjH,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,6EAA6E;IAC7E,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjJ,IAAI,EAAE;QAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,MAAM;gBAAE,SAAS,CAAC,+CAA+C;YACpI,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAyC,CAAC;YACnF,+HAA+H;YAC/H,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,0GAA0G;AAC1G,MAAM,YAAY,GAAG,CAAC,IAAY,EAAS,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACrH,gFAAgF;AAChF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC;AAiB9G,yFAAyF;AACzF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,CAAU,EAAE,EAAS,EAAE,OAA8E,EAAE;IAChJ,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAE,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAClI,MAAM,GAAG,GAAG,eAAe,CAAC,CAAE,CAAC,GAAG,CAAC,UAAU,CAAM,CAAC;IACpD,MAAM,IAAI,GAAQ,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,MAAM,CAAC,6EAA6E,CAAC,CAAC;IAC7H,MAAM,OAAO,GAA2B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QACzE,2FAA2F;QAC3F,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjO,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ;YAAE,MAAM,MAAM,CAAC,sCAAsC,IAAI,CAAC,QAAQ,wDAAwD,CAAC,CAAC;QAC3J,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,MAAM,CAAC,mDAAmD,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,OAAmB,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAY,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,kGAAkG;QAClG,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChH,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/F,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,wEAAwE;IACxE,MAAM,IAAI,GAAG,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,aAAa,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,8HAA8H;IAC9H,MAAM,KAAK,GAAM,GAAG,CAAC,UAAU;QAC7B,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,EAAE;QACxD,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;IAC9I,MAAM,IAAI,GAAG,CAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,KAAc,EAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,CAAC,CAAS,EAAK,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,CAAI,EAAE,CAA4B,EAAK,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtG,MAAM,UAAU,GAAQ,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,qHAAqH;QACrH,MAAM,IAAI,GAAG,CAAC,CAAI,EAAE,CAAS,EAAiB,EAAE;YAC9C,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7G,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvH,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,qFAAqF;IACrF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;IAClC,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;wBACzK,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3L,CAAC;IACD,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,KAAK,GAAM,EAAE,UAAU,EAAE;YAC7B,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7J,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACjG,WAAW,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3G,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YAChL,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE,EAAE,YAAY;SAAE,EAAE,CAAC;IAC1H,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACxH,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ;QAAE,MAAM,MAAM,CAAC,sCAAsC,IAAI,CAAC,QAAQ,iEAAiE,CAAC,CAAC;IACpL,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/G,CAAC"}

package/dist/core/store/createStore.d.ts

@@ -0,0 +1,49 @@
+import { type AuthorizationRequirements, type JsonSchema, type SqlNode as N } from "../../spec/domain/index.js";
+import type { Caller } from "../caller.js";
+import type { InvocationCause } from "../invocation.js";
+import type { CallerStore, MantleStore, StoreExecutor } from "../store.js";
+import type { MantleDialect } from "../dialect.js";
+import { type BindContext, type Mode } from "../sql/compile.js";
+import { type LifecycleHooks } from "../sql/run.js";
+import { type StoreSchemas } from "./json.js";
+/** A compiled View: its IR and declared input types. `public` shows published rows only (ADR-0032 decision 8). */
+export interface StoreView {
+    readonly ir: readonly N[];
+    readonly inputs: Readonly<Record<string, string>>;
+    /** The View's input JSON Schema: a call's input is checked against it (required, unknown keys, types) before it runs. */
+    readonly input?: JsonSchema;
+    readonly public?: boolean;
+    /** Checked against a caller-bound Store (the host's own `runtime.store` is trusted and skips it). */
+    readonly requires?: AuthorizationRequirements;
+    /** The Procedure `requires.guard` names, run before the View on a caller-bound Store. */
+    readonly guard?: string;
+    /** Outputs that read a Schema field unchanged: decoded and named as `select` returns them. */
+    readonly columns?: Readonly<Record<string, {
+        readonly schema: string;
+        readonly field: string;
+    }>>;
+    /** `uiSchema.list.searchFields` and `filterFields`: the outputs `search` and `filters` may match (ADR-0032 decision 5). */
+    readonly searchFields?: readonly string[];
+    readonly filterFields?: readonly string[];
+}
+export interface StoreDeps {
+    readonly executor: StoreExecutor;
+    readonly dialect: MantleDialect;
+    readonly schemas: StoreSchemas;
+    readonly views: Readonly<Record<string, StoreView>>;
+    readonly lifecycle?: LifecycleHooks;
+    /** Microseconds since the epoch. */
+    readonly now: () => number;
+    readonly newId: () => string;
+    /** Runs a View's guard Procedure with the View's input; the runtime supplies it (Store never references Procedures). */
+    readonly guardView?: (procedure: string, caller: Caller, input: Readonly<Record<string, unknown>>, cause: InvocationCause) => Promise<void>;
+}
+/** `caller` undefined is the host (trusted): no scope, TTL still applies. */
+export declare function bindFor(now: number, caller: Caller | undefined): {
+    mode: Mode;
+    bind: BindContext;
+};
+/** Internal host binding: preserves the trusted Store's caller-free authorization semantics. */
+export declare function bindStoreCause(store: MantleStore, cause: InvocationCause): CallerStore;
+export declare function createStore(deps: StoreDeps): MantleStore;
+//# sourceMappingURL=createStore.d.ts.map

package/dist/core/store/createStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createStore.d.ts","sourceRoot":"","sources":["../../../src/core/store/createStore.ts"],"names":[],"mappings":"AAMA,OAAO,EAA+F,KAAK,yBAAyB,EAAE,KAAK,UAAU,EAAE,KAAK,OAAO,IAAI,CAAC,EAAE,MAAM,4BAA4B,CAAC;AAC7M,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAmE,MAAM,aAAa,CAAC;AAC5I,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAY,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE1E,OAAO,EAAyB,KAAK,cAAc,EAA6C,MAAM,eAAe,CAAC;AAGtH,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAEnF,kHAAkH;AAClH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,yHAAyH;IACzH,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,qGAAqG;IACrG,QAAQ,CAAC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IAC9C,yFAAyF;IACzF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACjG,2HAA2H;IAC3H,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IACpC,oCAAoC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAC7B,wHAAwH;IACxH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7I;AA+BD,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAIlG;AAuHD,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,GAAG,WAAW,CAEtF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,CAQxD"}

package/dist/core/store/createStore.js

@@ -0,0 +1,227 @@
+/**
+ * MantleStore over a StoreExecutor (ADR-0032 decision 1). A Store call is validated, converted to IR
+ * (`json.ts`), and run by the same runner as a manifest's Procedure or View, so policy, hooks and OCC
+ * have one implementation.
+ */
+import { DiagnosticError, runtimeDiagnostic } from "../../spec/kernel/index.js";
+import { firstZodIssueAsJsonPointer, jsonSchemaToZod, safeParseJson, NATIVE_OUTPUT_TYPES, SqlRefusal } from "../../spec/domain/index.js";
+import { sqlInput } from "../sql/compile.js";
+import { num, op, ref, table } from "../sql/ast.js";
+import { runProcedure, runView } from "../sql/run.js";
+import { evaluateAuthAll } from "../runtime/auth.js";
+import { decodeCursor, encodeCursor } from "./cursor.js";
+import { StoreJson, geoValue, validateValues } from "./json.js";
+const viewInputs = new WeakMap();
+const invalid = (message) => new DiagnosticError(runtimeDiagnostic({ code: "INPUT_VALIDATION_FAILED", severity: "error", path: "store", message }));
+/** `search` and `filters` as the View declares them; a filter on an output the View did not declare is refused. */
+function viewMatch(name, v, options, encode) {
+    const search = options.search?.trim();
+    const filters = Object.entries(options.filters ?? {});
+    if (search && !v.searchFields?.length)
+        throw invalid(`View '${name}' declares no uiSchema.list.searchFields to search.`);
+    const undeclared = filters.find(([f]) => !v.filterFields?.includes(f));
+    if (undeclared)
+        throw invalid(`View '${name}' has no filter '${undeclared[0]}'; its uiSchema.list.filterFields are ${JSON.stringify(v.filterFields ?? [])}.`);
+    if (!search && !filters.length)
+        return undefined;
+    return { ...(search ? { search: { columns: v.searchFields, text: search } } : {}), eq: filters.map(([column, value]) => ({ column, value: encode(column, value) })) };
+}
+/** A refusal thrown while binding (a value the declared type cannot hold) is the caller's input error. */
+async function guard(f) {
+    try {
+        return await f();
+    }
+    catch (e) {
+        if (e instanceof SqlRefusal)
+            throw invalid(e.message);
+        throw e;
+    }
+}
+/** Decode what the engine stores back to the declared JSON type (timestamps, dates, numerics, booleans, json). */
+function decode(dialect, row, types) {
+    return Object.fromEntries(Object.entries(row).map(([k, v]) => [k, types.has(k) ? dialect.codec.decode(types.get(k), v) : v]));
+}
+/** `caller` undefined is the host (trusted): no scope, TTL still applies. */
+export function bindFor(now, caller) {
+    if (!caller || caller.kind === "system")
+        return { mode: "trusted", bind: { uid: caller ? `system:${caller.reason}` : null, now } };
+    if (caller.kind === "anonymous")
+        return { mode: "caller", bind: { uid: null, now } };
+    return { mode: "caller", bind: { uid: caller.subject, now, role: caller.role } };
+}
+/** `parent` is the invocation this Store serves: hooks it fires chain to it, so the depth limit and cause ids hold across writes. */
+function make(deps, caller, parent) {
+    const env = (mode) => ({ executor: deps.executor, dialect: deps.dialect, schemas: deps.schemas, mode, lifecycle: deps.lifecycle });
+    let writes = 0;
+    const as = (bound) => ({
+        bind: bound,
+        ...(parent ? { seq: `${parent.id}#${++writes}` } : {}),
+        caller: caller ?? { kind: "system", reason: "host" },
+        cause: parent ?? { kind: "internal", id: `store:${deps.newId()}` },
+    });
+    return {
+        select: (q) => guard(async () => {
+            const json = new StoreJson(deps.schemas, deps.dialect.codec);
+            const s = json.select(q);
+            const binding = `${s.from}:${s.order.column.col}:${s.order.dir}`;
+            const { mode, bind: b } = bindFor(deps.now(), caller);
+            const cursor = q.cursor === undefined ? undefined : decodeCursor(binding, q.cursor);
+            const program = { kind: "view", inputs: json.inputs, ir: [s.ir] };
+            const page = await runView(env(mode), program, as({ ...b, input: json.values }), { pageSize: s.pageSize, ...(cursor ? { cursor } : {}) });
+            const types = new Map(s.columns.map((c) => [c.out, c.type]));
+            return { rows: page.rows.map((r) => decode(deps.dialect, geoValue(r, s.columns), types)), ...(page.next ? { nextCursor: encodeCursor(binding, page.next) } : {}) };
+        }),
+        write: (ops) => guard(async () => {
+            if (!Array.isArray(ops) || !ops.length)
+                throw invalid("A write takes a non-empty list of operations.");
+            const json = new StoreJson(deps.schemas, deps.dialect.codec);
+            const built = ops.map((o) => json.write(o));
+            // the parent is read before the batch, so one write may not publish a translation and move its parent too
+            built.forEach((x, i) => {
+                const o = ops[i];
+                const tr = x.status === "published" && "update" in o ? deps.schemas[o.update.toLowerCase()]?.translates : undefined;
+                if (tr && ops.some((y) => "update" in y && y.update.toLowerCase() === tr.parent.toLowerCase() && "status" in y.set))
+                    throw invalid(`A write that publishes a translation may not also change the status of its ${tr.parent} parent: do that in its own write.`);
+            });
+            const { mode, bind: b } = bindFor(deps.now(), caller);
+            const program = {
+                kind: "procedure", inputs: json.inputs, ir: built.map((x) => x.ir), expects: ops.map((o) => o.expect),
+                statuses: built.map((x) => x.status),
+                // a publish must leave a complete entry: checked on the entry the lifecycle read, so it is the one the statement locks
+                checks: ops.map((o, i) => {
+                    if (built[i].status !== "published" || !("update" in o))
+                        return undefined;
+                    const def = deps.schemas[o.update.toLowerCase()];
+                    return async (current) => {
+                        // the row carries lower-cased columns in the database's encoding; the JSON Schema names them as declared
+                        const props = def.schema?.properties ?? {};
+                        const nullable = (name) => [props[name]?.type].flat().includes("null");
+                        const entry = {};
+                        for (const [k, type] of Object.entries(def.fields)) {
+                            const name = def.names?.[k] ?? k;
+                            if (type === "geo") {
+                                if (current[`${k}_lat`] != null && current[`${k}_lng`] != null)
+                                    entry[name] = { lat: current[`${k}_lat`], lng: current[`${k}_lng`] };
+                                continue;
+                            }
+                            const v = current[k];
+                            if (v !== null && v !== undefined)
+                                entry[name] = deps.dialect.codec.decode(type, v);
+                            else if (v === null && nullable(name))
+                                entry[name] = null; // a NULL is "absent" unless the field says null is a value
+                        }
+                        validateValues(def, { ...entry, ...Object.fromEntries(Object.entries(o.set).filter(([k]) => k !== "status")) }, "full");
+                        if (def.translates) {
+                            const { parent: parentSchema, on } = def.translates;
+                            const key = entry[on];
+                            // the parent counts when any entry sharing the key is published (nothing makes `on` unique on the parent)
+                            const found = key === undefined ? [] : (await make(deps, caller, parent).select({ from: parentSchema, columns: ["id"], where: { [on]: key, status: "published" }, limit: 1 })).rows;
+                            if (!found.length)
+                                throw new DiagnosticError(runtimeDiagnostic({ code: "CONFLICT", severity: "error", path: "store", message: `CONFLICT: publish the ${parentSchema} entry with the same ${on} first; a translation publishes only after its parent.` }));
+                        }
+                    };
+                }),
+            };
+            const result = await runProcedure(env(mode), program, as({ ...b, input: json.values }));
+            return ops.map((_o, i) => {
+                const row = built[i].row ? result.rows[i][0] : undefined;
+                if (row)
+                    return { id: String(row.id), version: Number(row.version) };
+                return { affected: result.affected[i] };
+            });
+        }),
+        view: (name, options = {}) => guard(async () => {
+            const v = Object.hasOwn(deps.views, name) ? deps.views[name] : undefined;
+            if (!v)
+                throw invalid(`Unknown View '${name}'.`);
+            const denial = caller && evaluateAuthAll(v.requires, caller, `manifest:View/${name}`);
+            if (denial)
+                throw new DiagnosticError(denial);
+            // the input as its schema reads it (defaults filled), as a Procedure binds it
+            let input = options.input;
+            if (v.input) {
+                let z = viewInputs.get(v);
+                if (!z)
+                    viewInputs.set(v, (z = jsonSchemaToZod(v.input)));
+                const r = safeParseJson(z, options.input ?? {});
+                if (!r.success) {
+                    const { instancePath, message } = firstZodIssueAsJsonPointer(r.error);
+                    throw invalid(`View '${name}' input does not match its schema${instancePath ? ` at ${instancePath}` : ""}: ${message}`);
+                }
+                input = r.data;
+            }
+            if (caller && v.guard)
+                await deps.guardView?.(v.guard, caller, (input ?? {}), parent ?? { kind: "internal", id: `store:${deps.newId()}` });
+            const limit = options.limit ?? 50;
+            if (!Number.isSafeInteger(limit) || limit < 1 || limit > 500)
+                throw invalid("View limit must be an integer from 1 to 500.");
+            const { mode, bind: b } = bindFor(deps.now(), caller);
+            const cursor = options.cursor === undefined ? undefined : decodeCursor(`view:${name}`, options.cursor);
+            const page = await runView(env(v.public ? "public" : mode), { kind: "view", inputs: v.inputs, ir: v.ir }, as({ ...b, input: sqlInput(v.input, input) }), { pageSize: limit, ...(cursor ? { cursor } : {}), match: viewMatch(name, v, options, (column, value) => {
+                    // an output that reads a Schema field compares in that field's storage encoding (a boolean is 0/1, a date-time microseconds)
+                    const c = v.columns?.[column] ?? v.columns?.[column.toLowerCase()];
+                    const def = c && deps.schemas[c.schema];
+                    return def ? deps.dialect.codec.encode((Object.hasOwn(def.fields, c.field) ? def.fields[c.field] : NATIVE_OUTPUT_TYPES[c.field]), value) : value;
+                }) });
+            const decodeView = (row) => Object.fromEntries(Object.entries(row).map(([k, value]) => {
+                const c = v.columns && Object.hasOwn(v.columns, k) ? v.columns[k] : undefined;
+                const def = c && deps.schemas[c.schema];
+                return def ? [k === c.field ? def.names?.[c.field] ?? k : k, deps.dialect.codec.decode((Object.hasOwn(def.fields, c.field) ? def.fields[c.field] : NATIVE_OUTPUT_TYPES[c.field]), value)] : [k, value];
+            }));
+            return { rows: (v.columns ? page.rows.map(decodeView) : page.rows), ...(page.next ? { nextCursor: encodeCursor(`view:${name}`, page.next) } : {}) };
+        }),
+        id: deps.newId,
+    };
+}
+const causeBindings = new WeakMap();
+/** Internal host binding: preserves the trusted Store's caller-free authorization semantics. */
+export function bindStoreCause(store, cause) {
+    return causeBindings.get(store)(cause);
+}
+export function createStore(deps) {
+    const store = {
+        ...make(deps, undefined),
+        as: (caller, cause) => make(deps, caller, cause),
+        sweepExpired: (request) => sweepExpired(deps, request),
+    };
+    causeBindings.set(store, (cause) => make(deps, undefined, cause));
+    return store;
+}
+// ---- TTL sweep ---------------------------------------------------------------------------------------------------
+/**
+ * Physical statements built by hand: the sweep is the one path that sees expired rows and addresses `_rid`, so it
+ * skips the validator and the policy on purpose. It is host-only and touches only rows past their TTL.
+ */
+async function sweepExpired(deps, request) {
+    const name = String(request.collection).toLowerCase();
+    const def = deps.schemas[name];
+    if (!def?.ttl || def.ttlSeconds === undefined)
+        throw invalid(`Schema '${request.collection}' has no ttl.`);
+    const limit = request.limit ?? 500;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 500)
+        throw invalid("Sweep limit must be an integer from 1 to 500.");
+    const after = request.cursor === undefined ? undefined : decodeCursor(`sweep:${name}`, request.cursor)[0];
+    if (after !== undefined && !Number.isSafeInteger(after))
+        throw invalid("The cursor does not belong to this query.");
+    const rel = () => ({ RangeVar: table(name, "system") });
+    const expired = () => ({ BoolExpr: { boolop: "AND_EXPR", args: [
+                { NullTest: { arg: ref(def.ttl), nulltesttype: "IS_NOT_NULL" } }, op("<=", ref(def.ttl), { ParamRef: { number: 1 } }),
+                ...(after === undefined ? [] : [op(">", ref("_rid"), num(after))]),
+            ] } });
+    const pick = () => ({ SelectStmt: { targetList: [{ ResTarget: { val: ref("_rid") } }], fromClause: [rel()], whereClause: expired(),
+            sortClause: [{ SortBy: { node: ref("_rid"), sortby_dir: "SORTBY_ASC", sortby_nulls: "SORTBY_NULLS_DEFAULT" } }],
+            limitCount: num(limit), limitOption: "LIMIT_OPTION_COUNT", op: "SETOP_NONE" } });
+    const binds = [deps.dialect.codec.encode("timestamptz", deps.now() - def.ttlSeconds * 1_000_000)];
+    const statements = [{ ir: pick(), binds }];
+    if (request.delete !== false) {
+        statements.push({ ir: { DeleteStmt: { relation: rel().RangeVar, whereClause: { SubLink: { subLinkType: "ANY_SUBLINK", testexpr: ref("_rid"), subselect: pick() } } } }, binds });
+    }
+    const [scanned, deleted] = await deps.executor.apply(statements);
+    const last = scanned.rows.at(-1)?._rid;
+    return {
+        scanned: scanned.rows.length,
+        removed: deleted?.affected ?? 0,
+        ...(scanned.rows.length === limit && last !== undefined ? { nextCursor: encodeCursor(`sweep:${name}`, [last]) } : {}),
+    };
+}
+//# sourceMappingURL=createStore.js.map