@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.2

package/dist/spec/domain/model/Entry.js

@@ -0,0 +1,16 @@
+/**
+ * Lifecycle-agnostic state-transition error. Thrown by `mantle-runtime`'s
+ * dispatcher / entry-writer when a request would violate the transition
+ * table; spec defines the type, runtime is the only thrower.
+ */
+export class IllegalTransitionError extends Error {
+    from;
+    to;
+    constructor(from, to) {
+        super(`illegal state transition: ${from} → ${to}`);
+        this.from = from;
+        this.to = to;
+        this.name = "IllegalTransitionError";
+    }
+}
+//# sourceMappingURL=Entry.js.map

package/dist/spec/domain/model/Entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Entry.js","sourceRoot":"","sources":["../../../../src/spec/domain/model/Entry.ts"],"names":[],"mappings":"AAoBA;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACnB;IAAoC;IAAhE,YAA4B,IAAkB,EAAkB,EAAgB;QAC9E,KAAK,CAAC,6BAA6B,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QADzB,SAAI,GAAJ,IAAI,CAAc;QAAkB,OAAE,GAAF,EAAE,CAAc;QAE9E,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF"}

package/dist/spec/domain/model/Locale.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Locale shape constants + the typed parse error.
+ *
+ * Two forms in play:
+ *
+ *   - **Canonical** (Mantle v0.1 BCP 47 subset): language lowercase,
+ *     region uppercase — e.g. `zh-TW`, `en-US`, `pt-BR`. Used in
+ *     storage (entries.locale, KV keys) and HTML metadata
+ *     (`<html lang>`, `<link hreflang>`, OG locale).
+ *
+ *   - **URL**: always lowercase — e.g. `zh-tw`. Used in public URL
+ *     paths. Lowercase URLs are more forgiving when users hand-type,
+ *     get auto-lowercased by chat clients / CDNs, etc.
+ *
+ * The conversion functions live in `domain/service/LocaleCanonicalizer`;
+ * this file holds the pure shape (regex constants + error class) so
+ * model-layer types can reference them without depending on services.
+ */
+/**
+ * URL-form regex: lowercase Mantle locale (`xx` or `xx-yy`). Matches
+ * what a public-content router should accept verbatim — strict
+ * canonical URL form, no mixed case. Consumer routers can plug this
+ * into framework route patterns directly (e.g.
+ * Hono's `/:locale{${URL_LOCALE.source}}/`).
+ */
+export declare const URL_LOCALE: RegExp;
+export declare class InvalidLocaleError extends Error {
+    constructor(value: string);
+}
+//# sourceMappingURL=Locale.d.ts.map

package/dist/spec/domain/model/Locale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Locale.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/model/Locale.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,QAA6B,CAAC;AAErD,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,KAAK,EAAE,MAAM;CAI1B"}

package/dist/spec/domain/model/Locale.js

@@ -0,0 +1,33 @@
+/**
+ * Locale shape constants + the typed parse error.
+ *
+ * Two forms in play:
+ *
+ *   - **Canonical** (Mantle v0.1 BCP 47 subset): language lowercase,
+ *     region uppercase — e.g. `zh-TW`, `en-US`, `pt-BR`. Used in
+ *     storage (entries.locale, KV keys) and HTML metadata
+ *     (`<html lang>`, `<link hreflang>`, OG locale).
+ *
+ *   - **URL**: always lowercase — e.g. `zh-tw`. Used in public URL
+ *     paths. Lowercase URLs are more forgiving when users hand-type,
+ *     get auto-lowercased by chat clients / CDNs, etc.
+ *
+ * The conversion functions live in `domain/service/LocaleCanonicalizer`;
+ * this file holds the pure shape (regex constants + error class) so
+ * model-layer types can reference them without depending on services.
+ */
+/**
+ * URL-form regex: lowercase Mantle locale (`xx` or `xx-yy`). Matches
+ * what a public-content router should accept verbatim — strict
+ * canonical URL form, no mixed case. Consumer routers can plug this
+ * into framework route patterns directly (e.g.
+ * Hono's `/:locale{${URL_LOCALE.source}}/`).
+ */
+export const URL_LOCALE = /^[a-z]{2}(?:-[a-z]{2})?$/;
+export class InvalidLocaleError extends Error {
+    constructor(value) {
+        super(`invalid locale: ${value}`);
+        this.name = "InvalidLocaleError";
+    }
+}
+//# sourceMappingURL=Locale.js.map

package/dist/spec/domain/model/Locale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Locale.js","sourceRoot":"","sources":["../../../../src/spec/domain/model/Locale.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAErD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,KAAa;QACvB,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}

package/dist/spec/domain/model/ManifestGrammar.d.ts

@@ -0,0 +1,452 @@
+/**
+ * K8s-style manifest envelope, scoped to the cms group of the mantle universe.
+ *
+ *   apiVersion: cms.mantle.aotter.net/v2
+ *   kind: <Kind>
+ *   metadata: { name }
+ *   spec: { ... kind-specific ... }
+ *
+ * Sibling group `analytics.mantle.aotter.net/v1` lives in the parallel mantle (OLAP)
+ * project and is parsed there — the two systems share lineage and mantle.ai
+ * domain but not parsers.
+ *
+ * The parser rejects keys and enum values outside this shipped grammar.
+ * Future syntax is added only with its implementation.
+ */
+export declare const API_VERSION: "cms.mantle.aotter.net/v2";
+export type ApiVersion = typeof API_VERSION;
+/** Media-shaped `x-mcp-hint` values — the subset marking a field as
+ *  holding a media asset URL. */
+export type MediaMcpHint = "media" | "media-image" | "media-video" | "media-file";
+export declare function isMediaMcpHint(value: unknown): value is MediaMcpHint;
+/** Loose JSON Schema shape — we don't constrain it at the type level.
+ *  Manifest authoring stays JSON Schema; runtime validators translate
+ *  to zod (Workers-CSP-safe). Cross-collection refs use the custom
+ *  keyword `x-mantle-ref: <collectionName>` on string-typed fields holding
+ *  foreign-key IDs; `x-mcp-hint` is a widget-intent hint. The grammar
+ *  accepts strings; the conventional values agents and admin
+ *  widgets understand are `markdown`, `html`, `richtext`, `code`,
+ *  `media`, `media-image`, `media-video`, `media-file`, `money-minor`,
+ *  `timestamp-ms`, and `idempotency-key`. */
+export type JsonSchema = {
+    readonly $defs?: Readonly<Record<string, JsonSchema>>;
+    readonly $ref?: string;
+    readonly oneOf?: readonly JsonSchema[];
+    readonly const?: unknown;
+    readonly type?: string | readonly string[];
+    readonly properties?: Readonly<Record<string, JsonSchema>>;
+    readonly required?: readonly string[];
+    readonly items?: JsonSchema;
+    readonly enum?: readonly unknown[];
+    readonly format?: string;
+    readonly pattern?: string;
+    readonly minLength?: number;
+    readonly maxLength?: number;
+    readonly minimum?: number;
+    readonly maximum?: number;
+    readonly minItems?: number;
+    readonly maxItems?: number;
+    readonly nullable?: boolean;
+    /** Standard JSON Schema annotation. At the root of a Schema manifest,
+     *  Mantle keeps generic Admin and Staff MCP authoring read-only while
+     *  allowing trusted Procedure handlers to maintain the projection. */
+    readonly readOnly?: boolean;
+    readonly default?: unknown;
+    readonly additionalProperties?: boolean | JsonSchema;
+    /** Standard JSON Schema keyword: help text for this property, shown
+     *  under the admin-UI form field (`entry-edit-view.tsx`) and the
+     *  row-operation dialog's bound-field label fallback
+     *  (`row-operations.tsx`). Accepts a plain string OR the same
+     *  `LocalizedText` locale-map shape used by `Schema.spec.description`
+     *  (#453, mirroring the property `title` keyword's #443 shape) —
+     *  admin-ui resolves it client-side with `resolveLocalizedText`. `en`
+     *  can stay the dev/OpenAPI-doc string while `zh-TW` etc. carry
+     *  operator-readable copy. Optional; absent renders no help text
+     *  (unchanged v0.1 behavior). */
+    readonly description?: LocalizedText;
+    /** Standard JSON Schema keyword (#443): a human-facing label for this
+     *  property, for admin-UI form labels / list column headers /
+     *  operation form labels. Accepts a plain string OR the same
+     *  `LocalizedText` locale-map shape used by `Schema.spec.title` —
+     *  admin-ui resolves it client-side with `resolveLocalizedText`, same
+     *  as any other `LocalizedText` field. Optional; absent means the
+     *  consumer humanizes the property name instead (unchanged v0.1
+     *  behavior). */
+    readonly title?: LocalizedText;
+    /** Custom: cross-collection reference. The string form names the target
+     *  Schema and means the value is that entry's `id`; the object form also
+     *  names the target field (ADR-0029). */
+    readonly "x-mantle-ref"?: string | MantleRefTarget;
+    /** Custom: hint for MCP tool / agent prompt context. */
+    readonly "x-mcp-hint"?: string;
+    readonly [key: string]: unknown;
+};
+export declare const MANTLE_REF_KEYWORD: "x-mantle-ref";
+/**
+ * A property's string options: its `enum`, or a `oneOf` whose every branch is a string `const` (the standard way to give each
+ * option a `title`). Undefined when the property is neither.
+ */
+export declare function enumOptions(property: JsonSchema | undefined): {
+    readonly value: string;
+    readonly title?: LocalizedText;
+}[] | undefined;
+/** Object form of `x-mantle-ref`: which Schema the value points at, and
+ *  which of its fields holds the value (`id` or a single-field unique
+ *  index). */
+export interface MantleRefTarget {
+    readonly schema: string;
+    readonly field: string;
+}
+/** Normalize either `x-mantle-ref` form, or `null` when the property carries
+ *  none (or a malformed value, which graph validation reports). */
+export declare function resolveMantleRef(property: unknown): MantleRefTarget | null;
+export declare const MCP_HINT_KEYWORD: "x-mcp-hint";
+/** A 0.1.x Schema-property keyword; 0.2.0 refuses it (Schema.spec.scope and a Procedure's SQL replace it). */
+export declare const MANTLE_BIND_KEYWORD: "x-mantle-bind";
+/**
+ * A human-facing label/blurb that is either a plain string (single
+ * language, the v0.1 shape) or a map of locale code → string (e.g.
+ * `{ en: "Products", "zh-TW": "商品" }`) so one manifest can serve a
+ * multi-language admin UI. `Schema.spec.title`/`.description`,
+ * `Procedure.spec.title`/`.description`, and `View.spec.title`/`.description`
+ * use this shape; consumers resolve it to a single displayable string
+ * with `resolveLocalizedText`.
+ */
+export type LocalizedText = string | Readonly<Record<string, string>>;
+/**
+ * Resolve a `LocalizedText` value to a single displayable string for
+ * `preferred` (typically the viewer's chosen admin language), falling
+ * back to `canonical` (the site's canonical locale) and finally to the
+ * record's first own-enumerable entry (insertion order). A plain
+ * string is returned as-is — even an empty string, since only
+ * `null`/`undefined` map to `null` here; shape validation (rejecting
+ * empty strings) is the parser's job, not this resolver's. `null` /
+ * `undefined` input (the field was never set) resolves to `null`, and
+ * an empty record (structurally invalid, but resolved defensively)
+ * also resolves to `null` since there is nothing to fall back to.
+ */
+export declare function resolveLocalizedText(value: LocalizedText | null | undefined, preferred: string, canonical?: string | null): string | null;
+/**
+ * Four declarative atoms. Each maps 1-to-1 to a Postgres primitive — see
+ * ADR-0001 / `docs/handbook/concepts/four-atoms.md` for the mapping. `Procedure`
+ * is the only kind with a code seam (handler ref to consumer's TS file).
+ */
+export type ManifestKind = "Schema" | "View" | "Procedure" | "Trigger";
+export interface ManifestMetadata {
+    /** Resource identifier, e.g. `posts`. Required. Globally unique within
+     *  `(kind, deployment)`. */
+    readonly name: string;
+}
+interface ManifestEnvelope<K extends ManifestKind, S> {
+    readonly apiVersion: ApiVersion;
+    readonly kind: K;
+    readonly metadata: ManifestMetadata;
+    readonly spec: S;
+}
+export type SchemaManifest = ManifestEnvelope<"Schema", SchemaManifestSpec>;
+export interface SchemaManifestSpec {
+    /** Human-readable label for the admin UI. Required at v0.1.x —
+     *  the SPA renders this in the sidebar and elsewhere instead of
+     *  the bare `metadata.name`. Either a plain string, or a
+     *  `LocalizedText` map of locale → string (e.g.
+     *  `{ en: "Products", "zh-TW": "商品" }`) so one manifest can serve a
+     *  multi-language admin UI — the SPA resolves it client-side via
+     *  `resolveLocalizedText`. AI authors MUST populate it in the user's
+     *  primary language (the install-time chosen locale) at minimum,
+     *  since end-admin users may not even read English. See ADR-0010 and
+     *  the authoring contract § Schema authoring. */
+    readonly title: LocalizedText;
+    /** Same string-or-locale-map shape as `title`. Optional. */
+    readonly description?: LocalizedText;
+    /** JSON Schema Draft 2020-12 describing per-entry data. May carry the
+     *  property extensions `x-mantle-ref` and `x-mcp-hint`. */
+    readonly schema: JsonSchema;
+    /** Admin-only presentation. Closed Schema roots: `fields`, `list`,
+     *  `nav`. Optional. */
+    readonly uiSchema?: Record<string, unknown>;
+    /** Boolean SQL expressions over this Schema's own columns, enforced by triggers on every insert and update
+     *  (ADR-0034). No subqueries. Example: `stock >= 0`. */
+    readonly checks?: readonly string[];
+    /** Composite unique-index declarations, e.g. `[[slug, locale]]`. */
+    readonly uniqueIndexes?: ReadonlyArray<ReadonlyArray<string>>;
+    /** Ordered composite non-unique indexes over top-level scalar fields. */
+    readonly indexes?: ReadonlyArray<ReadonlyArray<string>>;
+    /** Top-level string fields included in Admin/MCP free-text search.
+     *  Entry id is always searched; absent or empty means id-only. This is
+     *  intentionally independent from `indexes`: substring LIKE queries do
+     *  not benefit from ordinary B-tree indexes. */
+    readonly searchableFields?: readonly string[];
+    /** Whether entries in this collection carry a per-row locale. Default
+     *  `false`. When `true`, `data.locale` MUST be present and ∈ site
+     *  `locales`; when `false`, `data.locale` MUST be absent. See
+     *  ADR-0010. Mutually constrained with `translates`. */
+    readonly localized?: boolean;
+    /** Parent/child translation pattern: this Schema is the translatable
+     *  companion to a non-localized parent Schema, joined by a shared
+     *  field. Requires explicit `localized: true` and at least one
+     *  locale-specific field besides `locale` and the join field. See ADR-0010. */
+    readonly translates?: TranslatesBinding;
+    /** Content-workflow mode. Default `'publishing'` (draft → published →
+     *  archived, no approval queue). `'operational'` marks record
+     *  Schemas (orders, inventory snapshots, audit rows) that are written
+     *  by Procedures rather than authored: entries are live on creation,
+     *  editable in place, and have no publish/unpublish transitions — the
+     *  admin hides the content-lifecycle chrome for them. */
+    readonly lifecycle?: LifecycleMode;
+    /** Logical expiry policy. Physical removal requires an explicit sweep. */
+    readonly ttl?: {
+        readonly field: string;
+        readonly expireAfterSeconds: number;
+    };
+    /** Caller identity scope for Store operations: one field bound to `auth.uid()`.
+     *  The field must be required and indexed first. */
+    readonly scope?: Readonly<Record<string, "auth.uid()">>;
+}
+export interface TranslatesBinding {
+    /** Name of the parent Schema this translation table joins to. Must
+     *  resolve to a declared Schema; the parent itself MUST NOT be
+     *  `localized: true` (it carries the non-translatable facts). */
+    readonly parent: string;
+    /** Field present in both parent's and this Schema's
+     *  `spec.schema.properties` and used as the join key. Conventionally
+     *  `slug` for content, but any stable identifier works. */
+    readonly on: string;
+}
+export type LifecycleMode = "publishing" | "operational";
+export type ViewManifest = ManifestEnvelope<"View", ViewManifestSpec>;
+export interface ViewCachePolicy {
+    /** Maximum shared-cache staleness for anonymous REST reads, in seconds. */
+    readonly sharedMaxAge: number;
+}
+export declare const VIEW_SURFACES: readonly ["public", "staff", "internal"];
+export type ViewSurface = (typeof VIEW_SURFACES)[number];
+export interface ViewManifestSpec {
+    /** Human-readable label for the admin UI's report sidebar / report
+     *  page (#443). Same string-or-locale-map `LocalizedText` shape as
+     *  `Schema.spec.title`. Optional — Views didn't carry a title before
+     *  v0.1.x; when absent the admin UI falls back to a Title-Cased
+     *  rendering of `metadata.name`, exactly as before this field
+     *  existed. */
+    readonly title?: LocalizedText;
+    /** What the View answers, for agents and people choosing a query
+     *  (ADR-0029). Projected into the View's MCP tool description; absent
+     *  keeps the generated "Query <surface> View '<name>'." text. */
+    readonly description?: LocalizedText;
+    /** Admin's list for a `surface: staff` View: `uiSchema.list.columns`, and
+     *  `searchFields` / `filterFields`, which Store compiles to `LIKE` and `=`
+     *  conditions on the View's outputs for Admin's search box and filters
+     *  (ADR-0032 decision 5). REST and MCP are unchanged. */
+    readonly uiSchema?: Record<string, unknown>;
+    /** One read-only `SELECT` over declared Schemas (ADR-0034). It reads the
+     *  declared `input` as `input.<name>` and the caller as `auth.uid()` /
+     *  `auth.role()`; the CLI compiles it to the plan's IR. */
+    readonly sql: string;
+    /** Adapter exposure policy.
+     *  `"public"` auto-mounts at the public
+     *  `GET /api/views/<name>` (v0.1 default; `requires` may still gate
+     *  the call). When `"staff"` the View is
+     *  NOT mounted on the public path — it mounts at
+     *  `GET /admin/api/views/<name>` behind the staff gate and becomes
+     *  the report-sidebar source. Guards data behind a staff session; use
+     *  it for any View over sensitive rows. `"internal"` mounts on no
+     *  adapter and is callable only through `runtime.store.as(ctx).view()`. */
+    readonly surface: ViewSurface;
+    /** Optional anonymous REST response-cache policy. Validation limits this
+     *  to public Views that read no caller and no TTL or operational Schema. */
+    readonly cache?: ViewCachePolicy;
+    /** Auth gate. Identical shape to `ProcedureManifestSpec.requires.auth`.
+     *  When absent the View is public — `ExecuteViewUseCase` skips the
+     *  predicate check. When present, ALL predicates must hold; the
+     *  runtime enforces with `evaluateAuthAll`. Closed predicate
+     *  vocabulary: `ctx.user`, `ctx.staff`, `ctx.auth`, and
+     *  `ctx.auth.scope`; an optional guard names one consumer Procedure. */
+    readonly requires?: AuthorizationRequirements;
+    /** Caller-supplied parameters, read in `sql` as `input.<name>`. MUST be
+     *  `type: "object"` with declared `properties`. `limit` and `cursor` are
+     *  reserved: the runtime owns them for pagination. */
+    readonly input?: JsonSchema;
+}
+/** Reserved query-string names on the View REST surface. A View `input` may
+ *  not declare them (`VIEW_INPUT_RESERVED_NAME`). */
+export declare const VIEW_INPUT_RESERVED: readonly ["limit", "cursor"];
+export type ProcedureManifest = ManifestEnvelope<"Procedure", ProcedureManifestSpec>;
+export interface ProcedureManifestSpec {
+    /** Human-readable label for the admin UI's staff-operations surface
+     *  (#430). Same string-or-locale-map `LocalizedText` shape as
+     *  `Schema.spec.title`. Optional — Procedures didn't carry a title
+     *  before v0.1.x; when absent the admin UI falls back to a
+     *  Title-Cased rendering of `metadata.name`. */
+    readonly title?: LocalizedText;
+    /** Same string-or-locale-map shape as `title`. Optional. Surfaced by
+     *  `GET /admin/api/operations` as the operation's `description`
+     *  field (replaces the pre-#430 hack of reading
+     *  `spec.input.description`). */
+    readonly description?: LocalizedText;
+    /** Authorization via `requires.auth.all` plus one optional
+     *  `requires.guard.procedure`; static predicates are closed to
+     *  `ctx.user`, `ctx.staff`, `ctx.auth`, and `ctx.auth.scope`. */
+    readonly requires?: AuthorizationRequirements;
+    /** JSON Schema for the request body. */
+    readonly input: JsonSchema;
+    /** Admin-only field widget choices. Does not affect input validation
+     *  or the MCP tool schema. */
+    readonly uiSchema?: Record<string, unknown>;
+    /** JSON Schema for the response body. */
+    readonly output: JsonSchema;
+    /** Handler binding: `{ ref }` (consumer supplies a handler map) or
+     *  `{ sql }` (write statements, compiled to the plan's IR; ADR-0034). */
+    readonly handler: HandlerBinding;
+    /** MCP tool annotations the author declares because Core cannot infer
+     *  them for a `ref` handler (#972). Emitted verbatim on the tool;
+     *  An `x-mcp-hint: idempotency-key` input does not infer an
+     *  `idempotentHint` annotation in 0.2. A `readOnlyHint: true` on a `sql`
+     *  handler, which always writes, is rejected at validation. */
+    readonly mcp?: ProcedureMcpAnnotations;
+    /** The entity the handler mutates and whose version it locks
+     *  (ADR-0029). Needed only for entity-bound interactions and automatic
+     *  version binding. */
+    readonly target?: ProcedureTarget;
+}
+export interface ProcedureTarget {
+    /** Target Schema. */
+    readonly schema: string;
+    /** Required string input property carrying the target entry id. */
+    readonly id: string;
+    /** Number input property carrying the observed version, when locked. */
+    readonly version?: string;
+}
+export declare const PROCEDURE_TARGET_KEYS: readonly ["schema", "id", "version"];
+export interface ProcedureMcpAnnotations {
+    readonly readOnlyHint?: boolean;
+    readonly destructiveHint?: boolean;
+    readonly openWorldHint?: boolean;
+}
+export declare const PROCEDURE_MCP_ANNOTATION_KEYS: readonly ["readOnlyHint", "destructiveHint", "openWorldHint"];
+export type HandlerBinding = HandlerRefBinding | HandlerSqlBinding;
+export interface HandlerRefBinding {
+    /** Opaque registration key (NOT a path). The consumer passes a matching
+     *  key in the runtime/Worker `handlers` map. */
+    readonly ref: string;
+}
+/** One or more write statements (`INSERT`, `UPDATE`, `DELETE`), applied as
+ *  one batch. Reads `input.<name>`, `auth.uid()`, `auth.role()`, `now()`. */
+export interface HandlerSqlBinding {
+    readonly sql: string;
+}
+/** Closed predicate vocabulary. `ctx.user` and `ctx.auth` are bare
+ *  strings; `ctx.staff` and `ctx.auth.scope` carry scalar data under
+ *  literal object keys.
+ */
+export interface AuthorizationRequirements {
+    readonly auth?: {
+        readonly all: readonly AuthPredicate[];
+    };
+    /** Dynamic, consumer-owned authorization check. The named Procedure
+     *  receives the target's validated input/params and the same
+     *  HandlerContext before the target executes. */
+    readonly guard?: {
+        readonly procedure: string;
+    };
+}
+export type AuthPredicate = CtxUserPredicate | CtxStaffPredicate | CtxAuthPredicate | CtxAuthScopePredicate;
+export type CtxUserPredicate = "ctx.user";
+/** Requires any verified credential normalized into HandlerContext.auth. */
+export type CtxAuthPredicate = "ctx.auth";
+export interface CtxStaffPredicate {
+    readonly "ctx.staff": readonly StaffRole[];
+}
+/** Requires one opaque, consumer-owned scope. Repeat under `all` for
+ *  multiple required scopes. */
+export interface CtxAuthScopePredicate {
+    readonly "ctx.auth.scope": string;
+}
+/**
+ * Staff role hierarchy. `users` is the base identity layer (runtime);
+ * `staff` is the privilege overlay (one row per privileged user). A
+ * user without a staff row is a regular site member with no admin
+ * access.
+ *
+ *   owner       — full control, manages staff, manages settings
+ *   editor      — publish, approve/reject, manage all entries
+ *   contributor — create and edit drafts
+ *
+ * `StaffRole` lives in spec because the manifest grammar references
+ * it directly: `requires.auth.all: [{ "ctx.staff": [<role>, ...] }]`
+ * — the parser checks each role string is in `STAFF_ROLES` at boot.
+ * The `Staff` runtime row shape (with grantedBy / grantedAt) lives in
+ * `mantle-runtime`; only the closed enum is grammar.
+ */
+export declare const STAFF_ROLES: readonly ["owner", "editor", "contributor"];
+export type StaffRole = (typeof STAFF_ROLES)[number];
+export declare function isStaffRole(s: string): s is StaffRole;
+export type TriggerManifest = ManifestEnvelope<"Trigger", TriggerManifestSpec>;
+export interface TriggerManifestSpec {
+    readonly source: TriggerSource;
+    /** The Procedure invoked when this Trigger fires. */
+    readonly target: {
+        readonly procedure: string;
+    };
+}
+/** Supported Trigger sources. */
+export type TriggerSource = HttpTriggerSource | LifecycleTriggerSource | McpTriggerSource | ScheduleTriggerSource;
+/** Five-field POSIX cron expression in UTC (weekday 0 = Sunday). Registration remains host-owned. */
+export interface ScheduleTriggerSource {
+    readonly kind: "schedule";
+    readonly cron: string;
+    readonly enabled?: boolean;
+}
+export interface HttpTriggerSource {
+    readonly kind: "http";
+    readonly method: HttpMethod;
+    /** OpenAPI `{param}` syntax. Path params auto-bind to identically-named
+     *  fields on the target Procedure's `input`. No optional segments. */
+    readonly path: string;
+}
+/** Shipped v0.1 lifecycle hook vocabulary: before/after ×
+ *  create/update/delete plus the publish boundary. New entries require an
+ *  explicit grammar-revise round. */
+export declare const LIFECYCLE_HOOKS: readonly ["before_create", "after_create", "before_update", "after_update", "before_delete", "after_delete", "before_publish", "after_publish"];
+export type LifecycleHook = (typeof LIFECYCLE_HOOKS)[number];
+export interface LifecycleTriggerSource {
+    readonly kind: "lifecycle";
+    /** Schema this Trigger watches (`Schema.metadata.name`). */
+    readonly schema: string;
+    /** Hooks bound by this Trigger. Non-empty. */
+    readonly on: readonly LifecycleHook[];
+}
+/** Surfaces an MCP-source Trigger can be bound to. `staff` ⇒
+ *  `/mcp/staff` (bearer + role gate); `public` ⇒ `/mcp` (bearer only).
+ *  The procedure's own `requires.auth` still gates the call —
+ *  surface determines visibility in `tools/list`. */
+export declare const MCP_TRIGGER_SURFACES: readonly ["staff", "public"];
+export type McpTriggerSurface = (typeof MCP_TRIGGER_SURFACES)[number];
+export interface McpTriggerSource {
+    readonly kind: "mcp";
+    /** Which MCP surface this Procedure is callable from. The
+     *  Procedure's `requires.auth` continues to evaluate against the
+     *  authenticated caller — surface only controls discovery. */
+    readonly surface: McpTriggerSurface;
+}
+/** v0.1 HTTP methods that may carry a body. GET is intentionally absent
+ *  — read endpoints are Views, not Procedures. */
+export type HttpMethod = "POST" | "PUT" | "PATCH" | "DELETE";
+export type Manifest = SchemaManifest | ViewManifest | ProcedureManifest | TriggerManifest;
+/** Storage-row metadata columns reserved across every Schema. Used by
+ *  the View SQL compiler (to project them as native columns rather
+ *  than `json_extract`) and by the type emitter (to surface them on
+ *  every Entry interface). Adding a new reserved column is a grammar
+ *  revise — touch this constant + every consumer. */
+export declare const RESERVED_ENTRY_COLUMNS: readonly ["id", "status", "version", "createdAt", "updatedAt", "authorId"];
+export type ReservedEntryColumn = (typeof RESERVED_ENTRY_COLUMNS)[number];
+/**
+ * Reserved Procedure input wire names. `expectedVersion` is the observed
+ * native `entry.version` at read time (not version+1). First-party Admin/SDK
+ * bind and hide it; other callers supply it. Schema `spec.schema.properties`
+ * must not collide — validate is fail-closed (`INVALID_MANIFEST_ENVELOPE`).
+ * New reserved names need an ADR (ADR-0022).
+ */
+export declare const EXPECTED_VERSION_PROPERTY: "expectedVersion";
+export declare const RESERVED_PROCEDURE_INPUT_NAMES: readonly ["expectedVersion"];
+export type ReservedProcedureInputName = (typeof RESERVED_PROCEDURE_INPUT_NAMES)[number];
+export {};
+//# sourceMappingURL=ManifestGrammar.d.ts.map

package/dist/spec/domain/model/ManifestGrammar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManifestGrammar.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/model/ManifestGrammar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,WAAW,EAAG,0BAAmC,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC;AAE5C;iCACiC;AACjC,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,aAAa,GAAG,aAAa,GAAG,YAAY,CAAC;AAElF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAOpE;AAED;;;;;;;;6CAQ6C;AAC7C,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;0EAEsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IACrD;;;;;;;;;qCASiC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC;;;;;;;qBAOiB;IACjB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B;;6CAEyC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC;IACnD,wDAAwD;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAG,cAAuB,CAAC;AAE1D;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,EAAE,GAAG,SAAS,CAKtI;AAED;;cAEc;AACd,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;mEACmE;AACnE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAS1E;AACD,eAAO,MAAM,gBAAgB,EAAG,YAAqB,CAAC;AACtD,8GAA8G;AAC9G,eAAO,MAAM,mBAAmB,EAAG,eAAwB,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EACvC,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,MAAM,GAAG,IAAI,CAWf;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC/B;gCAC4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,gBAAgB,CAAC,CAAC,SAAS,YAAY,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;CAClB;AAID,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAE5E,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;qDASiD;IACjD,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC;+DAC2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B;2BACuB;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C;4DACwD;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,oEAAoE;IACpE,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD;;;oDAGgD;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C;;;4DAGwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;mFAG+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;;;;;6DAKyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/E;wDACoD;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC;;qEAEiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;+DAE2D;IAC3D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,aAAa,CAAC;AAIzD,MAAM,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,aAAa,0CAA2C,CAAC;AACtE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B;;;;;mBAKe;IACf,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B;;qEAEiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC;;;6DAGyD;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C;;+DAE2D;IAC3D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;;;;+EAQ2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B;gFAC4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC;;;;;4EAKwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IAC9C;;0DAEsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC7B;AAED;qDACqD;AACrD,eAAO,MAAM,mBAAmB,8BAA+B,CAAC;AAIhE,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;AAErF,MAAM,WAAW,qBAAqB;IACpC;;;;oDAIgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B;;;qCAGiC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC;;qEAEiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IAC9C,wCAAwC;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B;kCAC8B;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B;6EACyE;IACzE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC;;;;mEAI+D;IAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC;;2BAEuB;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,eAAO,MAAM,qBAAqB,sCAAuC,CAAC;AAE1E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AACD,eAAO,MAAM,6BAA6B,+DAAgE,CAAC;AAE3G,MAAM,MAAM,cAAc,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AACnE,MAAM,WAAW,iBAAiB;IAChC;oDACgD;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;6EAC6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,aAAa,EAAE,CAAA;KAAE,CAAC;IAC3D;;qDAEiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,qBAAqB,CAAC;AAC1B,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAC1C,4EAA4E;AAC5E,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAC1C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,SAAS,SAAS,EAAE,CAAC;CAC5C;AACD;gCACgC;AAChC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,WAAW,6CAA8C,CAAC;AACvE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAMrD,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,SAAS,CAErD;AAID,MAAM,MAAM,eAAe,GAAG,gBAAgB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED,iCAAiC;AACjC,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,sBAAsB,GACtB,gBAAgB,GAChB,qBAAqB,CAAC;AAE1B,qGAAqG;AACrG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B;0EACsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;qCAEqC;AACrC,eAAO,MAAM,eAAe,iJASlB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,EAAE,SAAS,aAAa,EAAE,CAAC;CACvC;AAED;;;qDAGqD;AACrD,eAAO,MAAM,oBAAoB,8BAA+B,CAAC;AACjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB;;kEAE8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC;AAED;kDACkD;AAClD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAI7D,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,YAAY,GAAG,iBAAiB,GAAG,eAAe,CAAC;AAE3F;;;;qDAIqD;AACrD,eAAO,MAAM,sBAAsB,4EAOzB,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAG,iBAA0B,CAAC;AACpE,eAAO,MAAM,8BAA8B,8BAAuC,CAAC;AACnF,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC"}