@cogenta/schema 0.3.0 → 0.4.1

package/dist/store/role-permission-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission-export.js","sourceRoot":"","sources":["../../src/store/role-permission-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAsB,MAAM,aAAa,CAAA;AAMjE;;;;;;;;;;;;GAYG;AAEH,MAAM,YAAY,GAAwC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;AACpF,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,eAAe,CAAC,CAAA;AAEhE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAA;AAkB/C,SAAS,OAAO,CAAC,GAA4B;IAC3C,OAAO,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,EAAE,CAAA;AAC5D,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,6BAA6B,CAC3C,OAAgD,EAChD,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAElC,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjF,OAAO,EAAE,OAAO,EAAE,8BAA8B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAA;AAChG,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAiC;IAChE,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,4CAA4C,MAAM,GAAG;QAC9D,IAAI,EAAE,uEAAuE;QAC7E,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,KAAa;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,OAAO,CAAC,aAAa,KAAK,oBAAoB,CAAC,CAAA;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAE5C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAA6B,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,CAAC,aAAa,KAAK,iDAAiD,EAAE;YACjF,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;QACtE,MAAM,OAAO,CAAC,aAAa,KAAK,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,OAAO,CAAC,aAAa,KAAK,2BAA2B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACvF,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,EACpE,CAAC;QACD,MAAM,OAAO,CAAC,aAAa,KAAK,gDAAgD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,CAAC,aAAa,KAAK,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;QACpE,MAAM,OAAO,CAAC,aAAa,KAAK,wCAAwC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,OAAO,CAAC,aAAa,KAAK,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,YAAY,CAA6B;QACzD,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;QAC7B,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAkB;QACtC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAsB;QACxC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;QACf,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;QAC3B,SAAS,EAAE,GAAG,CAAC,WAAW,CAAkB;KAC7C,CAAA;AACH,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC/F,MAAM,QAAQ,GAAG,KAAgC,CAAA;IAEjD,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,8BAA8B,EAAE,CAAC;QAC3D,MAAM,OAAO,CAAC,mBAAmB,8BAA8B,EAAE,EAAE;YACjE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC;SAC3B,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,OAAO,CAAC,uCAAuC,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAA;IAC7C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,8BAA8B;QACvC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;KACxE,CAAA;AACH,CAAC"}

package/dist/store/role-permission-overlay.d.ts

@@ -0,0 +1,27 @@
+import type { ContentAction, NormalisedPermissionRule } from '../types.js';
+import type { RolePermissionStore } from './role-permission-store.js';
+/**
+ * The synchronous face `PermissionLayer` (`@cogenta/api`) actually reads.
+ *
+ * `can()`/`canTerm()` run on every request, in a tight loop, and must stay
+ * synchronous — turning them `async` would ripple through every REST route,
+ * the GraphQL gateway and the page-builder preview for one feature. So the
+ * database read happens once, here, ahead of time; the request path only
+ * ever does a `Map.get`.
+ */
+export interface RolePermissionOverrides {
+    /** `undefined` means no override exists — the caller falls back to the file. Never the reverse. */
+    getCollectionRule(collection: string, action: ContentAction): NormalisedPermissionRule | undefined;
+    getTaxonomyRule(taxonomy: string, action: ContentAction): NormalisedPermissionRule | undefined;
+}
+export interface RolePermissionOverlay extends RolePermissionOverrides {
+    /**
+     * Re-reads every row from the store. Call after a write completes so the
+     * very next request already sees it — no restart, the same promise the
+     * appearance screen's live theme swap already makes.
+     */
+    refresh(): Promise<void>;
+}
+/** Built once at startup (`assembleSite`), awaited before `createPermissionLayer` runs. */
+export declare function createRolePermissionOverlay(store: RolePermissionStore): Promise<RolePermissionOverlay>;
+//# sourceMappingURL=role-permission-overlay.d.ts.map

package/dist/store/role-permission-overlay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission-overlay.d.ts","sourceRoot":"","sources":["../../src/store/role-permission-overlay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAC1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAErE;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,mGAAmG;IACnG,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,wBAAwB,GAAG,SAAS,CAAA;IAClG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,wBAAwB,GAAG,SAAS,CAAA;CAC/F;AAED,MAAM,WAAW,qBAAsB,SAAQ,uBAAuB;IACpE;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAMD,2FAA2F;AAC3F,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,qBAAqB,CAAC,CA0BhC"}

package/dist/store/role-permission-overlay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission-overlay.js","sourceRoot":"","sources":["../../src/store/role-permission-overlay.ts"],"names":[],"mappings":"AA2BA,SAAS,GAAG,CAAC,IAAY,EAAE,MAAqB;IAC9C,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAA;AAC5B,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAA0B;IAE1B,IAAI,YAAY,GAAG,IAAI,GAAG,EAAoC,CAAA;IAC9D,IAAI,UAAU,GAAG,IAAI,GAAG,EAAoC,CAAA;IAE5D,KAAK,UAAU,MAAM;QACnB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoC,CAAA;QAClE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoC,CAAA;QAEhE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAA6B,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;YAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAA;YACjF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;QACzD,CAAC;QAED,YAAY,GAAG,cAAc,CAAA;QAC7B,UAAU,GAAG,YAAY,CAAA;IAC3B,CAAC;IAED,MAAM,MAAM,EAAE,CAAA;IAEd,OAAO;QACL,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpF,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5E,OAAO,EAAE,MAAM;KAChB,CAAA;AACH,CAAC"}

package/dist/store/role-permission-store.d.ts

@@ -0,0 +1,72 @@
+import { type DatabaseHandle } from '@cogenta/core';
+import type { CollectionDefinition, ContentAction, TaxonomyDefinition } from '../types.js';
+/**
+ * The database-backed override layer of a role's permissions (fiche 63,
+ * ADR-0028).
+ *
+ * A row here **replaces** a `(targetType, targetName, action)` rule from
+ * `cogenta.schema.*` entirely; it never merges with it. `PermissionLayer`
+ * (`@cogenta/api`) is the only reader that turns this into an access
+ * decision — this store's job stops at persisting a validated row.
+ *
+ * **Validation reuses `defineCollection`/`defineTaxonomy` — task 4 of the
+ * fiche, "ne pas dupliquer une seconde logique de validation."** A candidate
+ * write is folded into the real, already-loaded `CollectionDefinition` or
+ * `TaxonomyDefinition` (the same objects `PermissionLayer` was built from) in
+ * place of the one action being changed, and the result is handed to the
+ * same function that validates a collection or taxonomy loaded from the
+ * schema file. An invalid role name, an unknown action, or `own` on a
+ * taxonomy (which has no author — `defineTaxonomy`'s own `checkPermissions`
+ * only accepts a plain role list) is refused by that single door, not a
+ * second copy of its rules.
+ */
+export type RolePermissionTargetType = 'collection' | 'taxonomy';
+export interface RolePermissionOverrideRecord {
+    readonly targetType: RolePermissionTargetType;
+    readonly targetName: string;
+    readonly action: ContentAction;
+    readonly roles: readonly string[];
+    /** Always `false` for a taxonomy target — see the module comment. */
+    readonly own: boolean;
+    readonly updatedAt: string;
+    readonly updatedBy: string | null;
+}
+export interface SetRolePermissionInput {
+    readonly targetType: RolePermissionTargetType;
+    readonly targetName: string;
+    readonly action: ContentAction;
+    readonly roles: readonly string[];
+    readonly own?: boolean;
+    readonly updatedBy?: string | null;
+}
+export interface RolePermissionStoreOptions {
+    readonly db: DatabaseHandle;
+    /**
+     * The file-declared collections/taxonomies to validate an override
+     * against — the same arrays `createPermissionLayer` was built from at
+     * startup. A target absent from both is `ROLE_PERMISSION_TARGET_UNKNOWN`:
+     * an override can narrow or widen an existing collection or taxonomy's
+     * rule, never invent a collection that is not declared in code.
+     */
+    readonly collections: readonly CollectionDefinition[];
+    readonly taxonomies: readonly TaxonomyDefinition[];
+    readonly now?: () => Date;
+}
+export interface RolePermissionStore {
+    /** Creates the table if it is missing. Called for you by every other method. */
+    ensureTable(): Promise<void>;
+    list(): Promise<readonly RolePermissionOverrideRecord[]>;
+    /**
+     * Validates the candidate (see the module comment) and writes it,
+     * replacing any existing row for the same `(targetType, targetName,
+     * action)` triple.
+     */
+    set(input: SetRolePermissionInput): Promise<RolePermissionOverrideRecord>;
+    /**
+     * Deletes the override, if any — the target's action falls back to
+     * `cogenta.schema.*` on the very next check. Returns whether a row existed.
+     */
+    remove(targetType: RolePermissionTargetType, targetName: string, action: ContentAction): Promise<boolean>;
+}
+export declare function createRolePermissionStore(options: RolePermissionStoreOptions): RolePermissionStore;
+//# sourceMappingURL=role-permission-store.d.ts.map

package/dist/store/role-permission-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission-store.d.ts","sourceRoot":"","sources":["../../src/store/role-permission-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAAmB,MAAM,eAAe,CAAA;AAGlF,OAAO,KAAK,EACV,oBAAoB,EAEpB,aAAa,EACb,kBAAkB,EACnB,MAAM,aAAa,CAAA;AAGpB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,qEAAqE;IACrE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACrD,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,IAAI,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC,CAAA;IACxD;;;;OAIG;IACH,GAAG,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACzE;;;OAGG;IACH,MAAM,CACJ,UAAU,EAAE,wBAAwB,EACpC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,OAAO,CAAC,CAAA;CACpB;AAgFD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CAqGrB"}

package/dist/store/role-permission-store.js

@@ -0,0 +1,148 @@
+import { CogentaError, identifier, sql } from '@cogenta/core';
+import { defineCollection } from '../define-collection.js';
+import { defineTaxonomy } from '../define-taxonomy.js';
+import { ensureRolePermissionTable, ROLE_PERMISSIONS_TABLE } from './role-permission-tables.js';
+function text(value) {
+    return typeof value === 'string' ? value : String(value);
+}
+function nullableText(value) {
+    return value === null || value === undefined ? null : text(value);
+}
+function toBool(value) {
+    return value === true || value === 'true' || value === 1 || value === '1';
+}
+function toRecord(row) {
+    return {
+        targetType: text(row['target_type']),
+        targetName: text(row['target_name']),
+        action: text(row['action']),
+        roles: JSON.parse(text(row['roles'])),
+        own: toBool(row['own']),
+        updatedAt: text(row['updated_at']),
+        updatedBy: nullableText(row['updated_by']),
+    };
+}
+function unknownTarget(targetType, targetName) {
+    return new CogentaError({
+        code: 'ROLE_PERMISSION_TARGET_UNKNOWN',
+        message: `No ${targetType} named "${targetName}" is declared in the site's schema.`,
+        hint: targetType === 'collection'
+            ? 'Overriding a role permission needs a real defineCollection() — check the spelling against cogenta.schema.*.'
+            : 'Overriding a role permission needs a real defineTaxonomy() — check the spelling against cogenta.schema.*.',
+        details: { targetType, targetName },
+    });
+}
+function ownNotSupported(targetName) {
+    return new CogentaError({
+        code: 'ROLE_PERMISSION_INVALID',
+        message: `Taxonomy "${targetName}" has no author, so "own" has no meaning here.`,
+        hint: 'Drop "own" — it only applies to a collection action (schema@2.1, ADR-0027).',
+        details: { targetName },
+    });
+}
+/**
+ * Folds one action's candidate rule into the real, already-validated
+ * definition and re-validates the whole thing through `defineCollection` —
+ * the single door contract A's permission shape ever passes through. Any
+ * other action already on the collection is carried over unchanged.
+ */
+function validateCollectionCandidate(target, action, roles, own) {
+    const permissions = {
+        ...target.permissions,
+        [action]: own ? { roles, own: true } : [...roles],
+    };
+    // Throws SCHEMA_INVALID (via `schemaError`) naming every issue, exactly as
+    // it would for a hand-edited `cogenta.schema.*` — the only difference here
+    // is *where* the candidate came from.
+    defineCollection({ ...target, permissions });
+}
+function validateTaxonomyCandidate(target, action, roles) {
+    const permissions = { ...target.permissions, [action]: [...roles] };
+    defineTaxonomy({ ...target, permissions });
+}
+export function createRolePermissionStore(options) {
+    const { db, collections, taxonomies } = options;
+    const dialect = db.dialect;
+    const now = options.now ?? (() => new Date());
+    const table = identifier(ROLE_PERMISSIONS_TABLE, dialect);
+    let ready = false;
+    async function ensureTable() {
+        if (ready)
+            return;
+        await ensureRolePermissionTable(db);
+        ready = true;
+    }
+    function findCollection(name) {
+        return collections.find((collection) => collection.name === name);
+    }
+    function findTaxonomy(name) {
+        return taxonomies.find((taxonomy) => taxonomy.name === name);
+    }
+    return {
+        ensureTable,
+        list: async () => {
+            await ensureTable();
+            const found = await db.query(sql `select * from ${table} order by ${identifier('target_type', dialect)} asc, ${identifier('target_name', dialect)} asc, ${identifier('action', dialect)} asc`);
+            return found.rows.map(toRecord);
+        },
+        set: async (input) => {
+            await ensureTable();
+            const own = input.own === true;
+            if (input.targetType === 'collection') {
+                const target = findCollection(input.targetName);
+                if (target === undefined)
+                    throw unknownTarget('collection', input.targetName);
+                validateCollectionCandidate(target, input.action, input.roles, own);
+            }
+            else {
+                if (own)
+                    throw ownNotSupported(input.targetName);
+                const target = findTaxonomy(input.targetName);
+                if (target === undefined)
+                    throw unknownTarget('taxonomy', input.targetName);
+                validateTaxonomyCandidate(target, input.action, input.roles);
+            }
+            const at = now().toISOString();
+            const updatedBy = input.updatedBy ?? null;
+            const rolesJson = JSON.stringify(input.roles);
+            const ownValue = own ? 'true' : 'false';
+            await db.transaction(async (tx) => {
+                // Delete-then-insert rather than an upsert: `ON CONFLICT`, `ON
+                // DUPLICATE KEY` and `INSERT OR REPLACE` are three different
+                // statements across the three dialects — the same reasoning
+                // `redirects.ts`'s `performAdd` already gives for its own writes.
+                await tx.query(sql `delete from ${table}
+                where ${identifier('target_type', dialect)} = ${input.targetType}
+                  and ${identifier('target_name', dialect)} = ${input.targetName}
+                  and ${identifier('action', dialect)} = ${input.action}`);
+                await tx.query(sql `insert into ${table} (
+                  ${identifier('target_type', dialect)}, ${identifier('target_name', dialect)},
+                  ${identifier('action', dialect)}, ${identifier('roles', dialect)},
+                  ${identifier('own', dialect)}, ${identifier('updated_at', dialect)},
+                  ${identifier('updated_by', dialect)}
+                ) values (
+                  ${input.targetType}, ${input.targetName}, ${input.action}, ${rolesJson},
+                  ${ownValue}, ${at}, ${updatedBy}
+                )`);
+            }, { immediate: true });
+            return {
+                targetType: input.targetType,
+                targetName: input.targetName,
+                action: input.action,
+                roles: input.roles,
+                own,
+                updatedAt: at,
+                updatedBy,
+            };
+        },
+        remove: async (targetType, targetName, action) => {
+            await ensureTable();
+            const result = await db.query(sql `delete from ${table}
+            where ${identifier('target_type', dialect)} = ${targetType}
+              and ${identifier('target_name', dialect)} = ${targetName}
+              and ${identifier('action', dialect)} = ${action}`);
+            return result.rowsAffected > 0;
+        },
+    };
+}
+//# sourceMappingURL=role-permission-store.js.map

package/dist/store/role-permission-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission-store.js","sourceRoot":"","sources":["../../src/store/role-permission-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAOtD,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAkF/F,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,CAAA;AAC3E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAQ;IACxB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAA6B;QAChE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAkB;QAC5C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAsB;QAC1D,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAClC,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;KAC3C,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,UAAoC,EAAE,UAAkB;IAC7E,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,MAAM,UAAU,WAAW,UAAU,qCAAqC;QACnF,IAAI,EACF,UAAU,KAAK,YAAY;YACzB,CAAC,CAAC,6GAA6G;YAC/G,CAAC,CAAC,2GAA2G;QACjH,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;KACpC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,aAAa,UAAU,gDAAgD;QAChF,IAAI,EAAE,6EAA6E;QACnF,OAAO,EAAE,EAAE,UAAU,EAAE;KACxB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,2BAA2B,CAClC,MAA4B,EAC5B,MAAqB,EACrB,KAAwB,EACxB,GAAY;IAEZ,MAAM,WAAW,GAA0B;QACzC,GAAG,MAAM,CAAC,WAAW;QACrB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;KAClD,CAAA;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,yBAAyB,CAChC,MAA0B,EAC1B,MAAqB,EACrB,KAAwB;IAExB,MAAM,WAAW,GAA0B,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAA;IAC1F,cAAc,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAmC;IAEnC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;IACzD,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,KAAK,UAAU,WAAW;QACxB,IAAI,KAAK;YAAE,OAAM;QACjB,MAAM,yBAAyB,CAAC,EAAE,CAAC,CAAA;QACnC,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IAED,SAAS,cAAc,CAAC,IAAY;QAClC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IACnE,CAAC;IAED,SAAS,YAAY,CAAC,IAAY;QAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO;QACL,WAAW;QAEX,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAC1B,GAAG,CAAA,iBAAiB,KAAK,aAAa,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAChK,CAAA;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACnB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,CAAA;YAE9B,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;gBAC/C,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;gBAC7E,2BAA2B,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACrE,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG;oBAAE,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;gBAChD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;gBAC7C,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;gBAC3E,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;YAC9D,CAAC;YAED,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;YAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAA;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;YAEvC,MAAM,EAAE,CAAC,WAAW,CAClB,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,+DAA+D;gBAC/D,6DAA6D;gBAC7D,4DAA4D;gBAC5D,kEAAkE;gBAClE,MAAM,EAAE,CAAC,KAAK,CACZ,GAAG,CAAA,eAAe,KAAK;wBACX,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,UAAU;wBACxD,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,UAAU;wBACxD,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAC9D,CAAA;gBACD,MAAM,EAAE,CAAC,KAAK,CACZ,GAAG,CAAA,eAAe,KAAK;oBACf,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC;oBACzE,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;oBAC9D,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC;oBAChE,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC;;oBAEjC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM,KAAK,SAAS;oBACpE,QAAQ,KAAK,EAAE,KAAK,SAAS;kBAC/B,CACP,CAAA;YACH,CAAC,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAA;YAED,OAAO;gBACL,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG;gBACH,SAAS,EAAE,EAAE;gBACb,SAAS;aACV,CAAA;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,eAAe,KAAK;oBACX,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,UAAU;oBAClD,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,UAAU;oBAClD,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,MAAM,EAAE,CACxD,CAAA;YACD,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/role-permission-tables.d.ts

@@ -0,0 +1,27 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * Role permission overrides (fiche 63, ADR-0028).
+ *
+ * `cogenta.schema.*` (contract A's `permissions` block) is the file the site
+ * was deployed with — code, reviewed and versioned like any other (ADR-0010).
+ * This table is the deliberate exception that decision names: a permission
+ * change an admin makes in production, applied without a deploy cycle. One
+ * fixed table, exactly `menu-tables.ts`'s and `site-settings-tables.ts`'s
+ * pattern — a role's grant on a collection or taxonomy action is not
+ * schema-declared content, it is runtime, admin-editable state.
+ *
+ * One row per `(targetType, targetName, action)` triple **overrides** that
+ * action's rule entirely — it does not merge with the file. `PermissionLayer`
+ * (`@cogenta/api`) checks this table first and falls back to the file only
+ * when no row exists for that exact triple, never the other way around: a
+ * deployment that regressed the file must not silently widen what the table
+ * had already narrowed.
+ *
+ * `own` only ever applies to a collection (`schema@2.1`, ADR-0027) — a
+ * taxonomy term has no author, and `createRolePermissionStore`'s own
+ * validation (reusing `defineTaxonomy`'s `checkPermissions`) refuses `own` on
+ * a taxonomy target before a row is ever written.
+ */
+export declare const ROLE_PERMISSIONS_TABLE = "cogenta_role_permissions";
+export declare function ensureRolePermissionTable(db: DatabaseHandle): Promise<void>;
+//# sourceMappingURL=role-permission-tables.d.ts.map

package/dist/store/role-permission-tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission-tables.d.ts","sourceRoot":"","sources":["../../src/store/role-permission-tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAqC,MAAM,eAAe,CAAA;AAGtF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,eAAO,MAAM,sBAAsB,6BAA6B,CAAA;AAShE,wBAAsB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBjF"}

package/dist/store/role-permission-tables.js

@@ -0,0 +1,52 @@
+import { identifier, sql } from '@cogenta/core';
+import { booleanColumn, textColumn, timestampColumn } from './columns.js';
+/**
+ * Role permission overrides (fiche 63, ADR-0028).
+ *
+ * `cogenta.schema.*` (contract A's `permissions` block) is the file the site
+ * was deployed with — code, reviewed and versioned like any other (ADR-0010).
+ * This table is the deliberate exception that decision names: a permission
+ * change an admin makes in production, applied without a deploy cycle. One
+ * fixed table, exactly `menu-tables.ts`'s and `site-settings-tables.ts`'s
+ * pattern — a role's grant on a collection or taxonomy action is not
+ * schema-declared content, it is runtime, admin-editable state.
+ *
+ * One row per `(targetType, targetName, action)` triple **overrides** that
+ * action's rule entirely — it does not merge with the file. `PermissionLayer`
+ * (`@cogenta/api`) checks this table first and falls back to the file only
+ * when no row exists for that exact triple, never the other way around: a
+ * deployment that regressed the file must not silently widen what the table
+ * had already narrowed.
+ *
+ * `own` only ever applies to a collection (`schema@2.1`, ADR-0027) — a
+ * taxonomy term has no author, and `createRolePermissionStore`'s own
+ * validation (reusing `defineTaxonomy`'s `checkPermissions`) refuses `own` on
+ * a taxonomy target before a row is ever written.
+ */
+export const ROLE_PERMISSIONS_TABLE = 'cogenta_role_permissions';
+/** `collection` or `taxonomy` — matches `RolePermissionTargetType`. */
+const TARGET_TYPE_LENGTH = 16;
+/** Same bound `naming.ts`'s `checked()` enforces on a collection/taxonomy name. */
+const TARGET_NAME_LENGTH = 64;
+/** `read`, `create`, `update`, `delete`, `publish` — contract A's fixed set. */
+const ACTION_LENGTH = 16;
+export async function ensureRolePermissionTable(db) {
+    const dialect = db.dialect;
+    const table = identifier(ROLE_PERMISSIONS_TABLE, dialect);
+    const statements = [
+        sql `create table if not exists ${table} (
+      ${identifier('target_type', dialect)} ${textColumn(dialect, TARGET_TYPE_LENGTH)} not null,
+      ${identifier('target_name', dialect)} ${textColumn(dialect, TARGET_NAME_LENGTH)} not null,
+      ${identifier('action', dialect)} ${textColumn(dialect, ACTION_LENGTH)} not null,
+      ${identifier('roles', dialect)} ${textColumn(dialect, 2000)} not null,
+      ${identifier('own', dialect)} ${booleanColumn(dialect)} not null,
+      ${identifier('updated_at', dialect)} ${timestampColumn(dialect)} not null,
+      ${identifier('updated_by', dialect)} ${textColumn(dialect, 36)},
+      primary key (${identifier('target_type', dialect)}, ${identifier('target_name', dialect)}, ${identifier('action', dialect)})
+    )`,
+    ];
+    for (const statement of statements) {
+        await db.query(statement);
+    }
+}
+//# sourceMappingURL=role-permission-tables.js.map

package/dist/store/role-permission-tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission-tables.js","sourceRoot":"","sources":["../../src/store/role-permission-tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAoB,GAAG,EAAE,MAAM,eAAe,CAAA;AACtF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEzE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAA;AAEhE,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,gFAAgF;AAChF,MAAM,aAAa,GAAG,EAAE,CAAA;AAExB,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAAkB;IAChE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;IAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;IAEzD,MAAM,UAAU,GAAkB;QAChC,GAAG,CAAA,8BAA8B,KAAK;QAClC,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC;QAC7E,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC;QAC7E,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC;QACnE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC;QACzD,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC;QACpD,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;QAC7D,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;qBAC/C,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC;MAC1H;KACH,CAAA;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC"}

package/dist/store/scheduled-publish-failures.d.ts

@@ -0,0 +1,36 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * "Contenu programmé dont la publication a échoué" — fiche 38 task 1's last
+ * named source. `registerScheduledPublishing`'s handler (wired by
+ * `cogenta serve`) can throw — the target collection's own validation refuses
+ * the entry, a `restrict` foreign key blocks it, a driver hiccups — and until
+ * now nothing surfaced that anywhere: the queue's own row silently sits in
+ * `status: 'failed'` after its retries are exhausted, and the only way to
+ * notice was to already suspect something and go look at the table by hand.
+ *
+ * Deliberately its own tiny table rather than a query against the queue
+ * driver's internal job table: the queue interface (`@cogenta/core`) has no
+ * "list jobs of this name past their retries" method, and reaching past it
+ * into one specific driver's schema would tie this notice to whichever queue
+ * driver a site happens to run — the opposite of R1. `record`/`clear` are
+ * called from the same handler that already knows collection/entry/locale,
+ * so nothing here has to guess.
+ */
+export declare const SCHEDULED_PUBLISH_FAILURES_TABLE = "cogenta_scheduled_publish_failures";
+export interface ScheduledPublishFailure {
+    readonly collection: string;
+    readonly entryId: string;
+    readonly locale: string;
+    readonly error: string;
+    readonly failedAt: string;
+}
+export interface ScheduledPublishFailureStore {
+    ensureTable(): Promise<void>;
+    /** Idempotent: a second failed attempt on the same entry replaces the first, it does not pile up. */
+    record(failure: Omit<ScheduledPublishFailure, 'failedAt'>): Promise<void>;
+    /** Called once a later attempt (or a fresh schedule) actually publishes the entry. */
+    clear(collection: string, entryId: string, locale: string): Promise<void>;
+    list(): Promise<readonly ScheduledPublishFailure[]>;
+}
+export declare function createScheduledPublishFailureStore(db: DatabaseHandle, now?: () => number): ScheduledPublishFailureStore;
+//# sourceMappingURL=scheduled-publish-failures.d.ts.map

package/dist/store/scheduled-publish-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-publish-failures.d.ts","sourceRoot":"","sources":["../../src/store/scheduled-publish-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAI3E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gCAAgC,uCAAuC,CAAA;AAEpF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,qGAAqG;IACrG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,sFAAsF;IACtF,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,IAAI,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAA;CACpD;AAUD,wBAAgB,kCAAkC,CAChD,EAAE,EAAE,cAAc,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,4BAA4B,CAgD9B"}

package/dist/store/scheduled-publish-failures.js

@@ -0,0 +1,67 @@
+import { identifier, newId, sql } from '@cogenta/core';
+import { textColumn, timestampColumn, uuidColumn } from './columns.js';
+import { indexName } from './naming.js';
+/**
+ * "Contenu programmé dont la publication a échoué" — fiche 38 task 1's last
+ * named source. `registerScheduledPublishing`'s handler (wired by
+ * `cogenta serve`) can throw — the target collection's own validation refuses
+ * the entry, a `restrict` foreign key blocks it, a driver hiccups — and until
+ * now nothing surfaced that anywhere: the queue's own row silently sits in
+ * `status: 'failed'` after its retries are exhausted, and the only way to
+ * notice was to already suspect something and go look at the table by hand.
+ *
+ * Deliberately its own tiny table rather than a query against the queue
+ * driver's internal job table: the queue interface (`@cogenta/core`) has no
+ * "list jobs of this name past their retries" method, and reaching past it
+ * into one specific driver's schema would tie this notice to whichever queue
+ * driver a site happens to run — the opposite of R1. `record`/`clear` are
+ * called from the same handler that already knows collection/entry/locale,
+ * so nothing here has to guess.
+ */
+export const SCHEDULED_PUBLISH_FAILURES_TABLE = 'cogenta_scheduled_publish_failures';
+export function createScheduledPublishFailureStore(db, now = Date.now) {
+    const table = identifier(SCHEDULED_PUBLISH_FAILURES_TABLE, db.dialect);
+    const d = db.dialect;
+    return {
+        async ensureTable() {
+            await db.query(sql `
+        create table if not exists ${table} (
+          id ${uuidColumn(d)} not null primary key,
+          collection ${textColumn(d, 128)} not null,
+          entry_id ${uuidColumn(d)} not null,
+          locale ${textColumn(d, 16)} not null,
+          error ${textColumn(d, 2048)} not null,
+          failed_at ${timestampColumn(d)} not null
+        )`);
+            await db
+                .query(sql `
+          create unique index ${identifier(indexName(SCHEDULED_PUBLISH_FAILURES_TABLE, 'entry'), d)}
+          on ${table} (collection, entry_id, locale)`)
+                .catch(() => undefined); // already there — no portable "if not exists" for indexes
+        },
+        async record(failure) {
+            await db.query(sql `
+        delete from ${table}
+        where collection = ${failure.collection} and entry_id = ${failure.entryId} and locale = ${failure.locale}`);
+            await db.query(sql `
+        insert into ${table} (id, collection, entry_id, locale, error, failed_at)
+        values (${newId(now)}, ${failure.collection}, ${failure.entryId}, ${failure.locale}, ${failure.error}, ${new Date(now()).toISOString()})`);
+        },
+        async clear(collection, entryId, locale) {
+            await db.query(sql `
+        delete from ${table}
+        where collection = ${collection} and entry_id = ${entryId} and locale = ${locale}`);
+        },
+        async list() {
+            const result = await db.query(sql `select * from ${table} order by failed_at desc`);
+            return result.rows.map((row) => ({
+                collection: row.collection,
+                entryId: row.entry_id,
+                locale: row.locale,
+                error: row.error,
+                failedAt: row.failed_at,
+            }));
+        },
+    };
+}
+//# sourceMappingURL=scheduled-publish-failures.js.map

package/dist/store/scheduled-publish-failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-publish-failures.js","sourceRoot":"","sources":["../../src/store/scheduled-publish-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAC3E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,oCAAoC,CAAA;AA2BpF,MAAM,UAAU,kCAAkC,CAChD,EAAkB,EAClB,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,MAAM,KAAK,GAAG,UAAU,CAAC,gCAAgC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IACtE,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAA;IAEpB,OAAO;QACL,KAAK,CAAC,WAAW;YACf,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;qCACa,KAAK;eAC3B,UAAU,CAAC,CAAC,CAAC;uBACL,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC;qBACpB,UAAU,CAAC,CAAC,CAAC;mBACf,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;kBAClB,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC;sBACf,eAAe,CAAC,CAAC,CAAC;UAC9B,CAAC,CAAA;YACL,MAAM,EAAE;iBACL,KAAK,CAAC,GAAG,CAAA;gCACc,UAAU,CAAC,SAAS,CAAC,gCAAgC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;eACpF,KAAK,iCAAiC,CAAC;iBAC7C,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,0DAA0D;QACtF,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;6BACE,OAAO,CAAC,UAAU,mBAAmB,OAAO,CAAC,OAAO,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;YAC7G,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;kBACT,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QAC9I,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM;YACrC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;6BACE,UAAU,mBAAmB,OAAO,iBAAiB,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAa,GAAG,CAAA,iBAAiB,KAAK,0BAA0B,CAAC,CAAA;YAC9F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,SAAS;aACxB,CAAC,CAAC,CAAA;QACL,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/schema-2-1-migration.d.ts

@@ -0,0 +1,29 @@
+import { type Migration } from '@cogenta/core';
+import type { CollectionDefinition } from '../types.js';
+/**
+ * The `schema@2.0 → 2.1` migration (ADR-0027).
+ *
+ * Adds the editorial workflow's two columns to every collection's entry
+ * table — `review_state` (`schema@2.1`'s `reviewState`, orthogonal to
+ * `status` exactly as `deleted_at` is) and `assigned_reviewer`. Both are
+ * additive and reversible:
+ *
+ * - `review_state` is `not null default 'none'`, so every existing row reads
+ *   `'none'` the instant the column exists — a client that reads `status`
+ *   and ignores everything else gets exactly the values it always did.
+ * - `assigned_reviewer` is nullable, defaulting to unassigned.
+ *
+ * **Not marked `destructive`.** Unlike `schema@1.0 → 2.0`, whose rollback
+ * discarded the trash and every classification, rolling this one back only
+ * drops two columns nothing yet depends on the day it ships — there is no
+ * site in production, so no real workflow state exists to lose. A future
+ * migration that adds this to a live site with real review history should
+ * reconsider that if the down path would then discard something real.
+ */
+export interface Schema21MigrationOptions {
+    readonly collections: readonly CollectionDefinition[];
+    /** Overridable so a site can slot this into its own numbering. */
+    readonly id?: string;
+}
+export declare function schema21Migration(options: Schema21MigrationOptions): Migration;
+//# sourceMappingURL=schema-2-1-migration.d.ts.map

package/dist/store/schema-2-1-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-2-1-migration.d.ts","sourceRoot":"","sources":["../../src/store/schema-2-1-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,SAAS,EAKf,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAIvD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACrD,kEAAkE;IAClE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CACrB;AAwDD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,SAAS,CAsC9E"}

package/dist/store/schema-2-1-migration.js

@@ -0,0 +1,71 @@
+import { identifier, sql, unsafeRaw, } from '@cogenta/core';
+import { textColumn } from './columns.js';
+import { entriesTable, indexName } from './naming.js';
+const DEFAULT_ID = '0003_schema_2_1_editorial_workflow';
+function addReviewState(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table}
+             add column ${identifier('review_state', dialect)} ${textColumn(dialect, 24)}
+             not null default ${unsafeRaw("'none'")}`;
+}
+function addAssignedReviewer(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table}
+             add column ${identifier('assigned_reviewer', dialect)} ${textColumn(dialect, 64)}`;
+}
+function dropReviewState(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table} drop column ${identifier('review_state', dialect)}`;
+}
+function dropAssignedReviewer(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table} drop column ${identifier('assigned_reviewer', dialect)}`;
+}
+function reviewIndex(collection, dialect) {
+    const name = entriesTable(collection.name);
+    return sql `create index ${identifier(indexName(name, 'review'), dialect)}
+             on ${identifier(name, dialect)}
+             (${identifier('review_state', dialect)}, ${identifier('assigned_reviewer', dialect)})`;
+}
+/** MySQL needs the table named to drop an index; SQLite (and Postgres) name it directly. */
+function dropReviewIndexOnTable(collection, dialect) {
+    return sql `drop index ${identifier(indexName(entriesTable(collection.name), 'review'), dialect)}
+             on ${identifier(entriesTable(collection.name), dialect)}`;
+}
+function dropReviewIndexStandalone(collection, dialect) {
+    return sql `drop index ${identifier(indexName(entriesTable(collection.name), 'review'), dialect)}`;
+}
+export function schema21Migration(options) {
+    const { collections } = options;
+    return {
+        id: options.id ?? DEFAULT_ID,
+        name: 'schema@2.1 — editorial workflow and owner permission',
+        destructive: false,
+        impact: "Adds review_state (not null, default 'none') and a nullable assigned_reviewer column " +
+            'to every collection. Moves no existing row and changes no existing value: a client ' +
+            'that reads status and ignores the rest sees exactly what it always did. The rollback ' +
+            'drops both columns, which is safe today because no site in production carries real ' +
+            'review history yet.',
+        estimatedDurationMs: 300 * Math.max(1, collections.length),
+        up: async (tx) => {
+            const dialect = tx.dialect;
+            for (const collection of collections) {
+                await tx.query(addReviewState(collection, dialect));
+                await tx.query(addAssignedReviewer(collection, dialect));
+                // `create index` has no portable `if not exists`; a failure here means
+                // it is already there, which is the state we wanted anyway.
+                await tx.query(reviewIndex(collection, dialect)).catch(() => undefined);
+            }
+        },
+        down: async (tx) => {
+            const dialect = tx.dialect;
+            for (const collection of [...collections].reverse()) {
+                const drop = dialect === 'mysql' ? dropReviewIndexOnTable : dropReviewIndexStandalone;
+                await tx.query(drop(collection, dialect)).catch(() => undefined);
+                await tx.query(dropAssignedReviewer(collection, dialect));
+                await tx.query(dropReviewState(collection, dialect));
+            }
+        },
+    };
+}
+//# sourceMappingURL=schema-2-1-migration.js.map

package/dist/store/schema-2-1-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-2-1-migration.js","sourceRoot":"","sources":["../../src/store/schema-2-1-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EAIV,GAAG,EACH,SAAS,GACV,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA6BrD,MAAM,UAAU,GAAG,oCAAoC,CAAA;AAEvD,SAAS,cAAc,CAAC,UAAgC,EAAE,OAAwB;IAChF,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK;0BACN,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gCACxD,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAA;AACrD,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAgC,EAChC,OAAwB;IAExB,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK;0BACN,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAA;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,UAAgC,EAAE,OAAwB;IACjF,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK,gBAAgB,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAA;AACrF,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAgC,EAChC,OAAwB;IAExB,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK,gBAAgB,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAA;AAC1F,CAAC;AAED,SAAS,WAAW,CAAC,UAAgC,EAAE,OAAwB;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1C,OAAO,GAAG,CAAA,gBAAgB,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;kBACxD,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;gBAC3B,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAA;AACnG,CAAC;AAED,4FAA4F;AAC5F,SAAS,sBAAsB,CAC7B,UAAgC,EAChC,OAAwB;IAExB,OAAO,GAAG,CAAA,cAAc,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;kBAC/E,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,CAAA;AACtE,CAAC;AAED,SAAS,yBAAyB,CAChC,UAAgC,EAChC,OAAwB;IAExB,OAAO,GAAG,CAAA,cAAc,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,CAAA;AACnG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAE/B,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,UAAU;QAC5B,IAAI,EAAE,sDAAsD;QAC5D,WAAW,EAAE,KAAK;QAClB,MAAM,EACJ,uFAAuF;YACvF,qFAAqF;YACrF,uFAAuF;YACvF,qFAAqF;YACrF,qBAAqB;QACvB,mBAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC;QAE1D,EAAE,EAAE,KAAK,EAAE,EAAe,EAAiB,EAAE;YAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;YAE1B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;gBACnD,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;gBACxD,uEAAuE;gBACvE,4DAA4D;gBAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAe,EAAiB,EAAE;YAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;YAE1B,KAAK,MAAM,UAAU,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,yBAAyB,CAAA;gBACrF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBAChE,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;gBACzD,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}