@gnolith/taproot 0.2.0 → 0.3.0

package/dist/index.js

@@ -1,54 +1,361 @@
+import { InvalidAuthorizationError } from './errors.js';
+import { canonicalizeTaprootBaseIri } from './migrations.js';
+import { KNOWLEDGE_WRITE_CAPABILITY, KNOWLEDGE_POLICY_CAPABILITY, normalizeAuthorizationContext, } from './authorization.js';
+import { applyAuthorizationBackfill as applyAuthorizationBackfillInternal, inspectAuthorizationReadiness as inspectAuthorizationReadinessInternal, planAuthorizationBackfill as planAuthorizationBackfillInternal, } from './authorization-maintenance.js';
 import { TaprootRepository, } from './repository.js';
+const hostWriteCapabilities = new WeakMap();
+const installationAuthorizationGuards = new WeakMap();
+const installationDomainMutationGuards = new WeakMap();
+/**
+ * Issues the non-user capability required by public mutation helpers. The
+ * non-extractable key is host assembly state and must never enter transport
+ * arguments. Taproot uses object identity, not caller-supplied fields.
+ */
+export function createTaprootHostWriteCapability(db, options, key) {
+    const algorithm = key.algorithm;
+    if (key.type !== 'secret' ||
+        key.extractable ||
+        algorithm.name !== 'HMAC' ||
+        algorithm.hash?.name !== 'SHA-256' ||
+        !key.usages.includes('sign'))
+        throw new InvalidAuthorizationError('write capability key must be non-extractable HMAC-SHA-256 with sign usage');
+    const capability = Object.freeze({ kind: 'taproot-host-write-v1' });
+    hostWriteCapabilities.set(capability, {
+        db,
+        baseIri: canonicalizeTaprootBaseIri(options.baseIri),
+    });
+    return capability;
+}
 export * from './canonical.js';
+export * from './authorization.js';
 export * from './errors.js';
 export * from './migrations.js';
 export * from './rdf.js';
-export * from './repository.js';
 export * from './schema.js';
 export * from './types.js';
-export function createTaproot(db, options) {
+function repository(db, options, capability) {
+    const binding = hostWriteCapabilities.get(capability);
+    if (!binding ||
+        binding.db !== db ||
+        binding.baseIri !== canonicalizeTaprootBaseIri(options.baseIri))
+        throw new InvalidAuthorizationError('host-issued write capability is required');
+    if ('validators' in options ||
+        'factory' in options ||
+        'maxEntityBytes' in options)
+        throw new InvalidAuthorizationError('write options cannot install canonical-state observers or size probes');
     return new TaprootRepository(db, options);
 }
-export const getEntity = (db, options, id) => createTaproot(db, options).getEntity(id);
-export const getEntityRevision = (db, options, id, revision) => createTaproot(db, options).getEntityRevision(id, revision);
-export const resolveEntity = (db, options, id, maxDepth) => createTaproot(db, options).resolveEntity(id, maxDepth);
-export const listEntityRevisions = (db, options, id, limit) => createTaproot(db, options).listEntityRevisions(id, limit);
-export const listEntityRevisionsPage = (db, options, id, page) => createTaproot(db, options).listEntityRevisionsPage(id, page);
-export const searchEntities = (db, options, query, search) => createTaproot(db, options).searchEntities(query, search);
-export const searchEntitiesPage = (db, options, query, search) => createTaproot(db, options).searchEntitiesPage(query, search);
-export const listEntities = (db, options, list) => createTaproot(db, options).listEntities(list);
-export const getAuditEvent = (db, options, eventId) => createTaproot(db, options).getAuditEvent(eventId);
-export const listAuditEvents = (db, options, list) => createTaproot(db, options).listAuditEvents(list);
-export const createItem = (db, options, input) => createTaproot(db, options).createItem(input);
-export const createProperty = (db, options, input) => createTaproot(db, options).createProperty(input);
-export const importEntity = (db, options, entity, metadata) => createTaproot(db, options).importEntity(entity, metadata);
-export const importEntities = (db, options, entities, bulk) => createTaproot(db, options).importEntities(entities, bulk);
-export const exportEntities = (db, options, list) => createTaproot(db, options).exportEntities(list);
-export const applyCommands = (db, options, id, commands, edit) => createTaproot(db, options).applyCommands(id, commands, edit);
-export const inspectEntityIntegrity = (db, options, id) => createTaproot(db, options).inspectEntityIntegrity(id);
-export const inspectTaprootIntegrity = (db, options, list) => createTaproot(db, options).inspectTaprootIntegrity(list);
-export const verifyAuditChain = (db, options, id) => createTaproot(db, options).verifyAuditChain(id);
-export const repairEntityProjection = (db, options, id, metadata) => createTaproot(db, options).repairEntityProjection(id, metadata);
-export const replaceEntity = (db, options, id, entity, edit) => createTaproot(db, options).replaceEntity(id, entity, edit);
-export const revertEntity = (db, options, id, targetRevision, edit) => createTaproot(db, options).revertEntity(id, targetRevision, edit);
-export const softDeleteEntity = (db, options, id, edit) => createTaproot(db, options).softDeleteEntity(id, edit);
-export const restoreEntity = (db, options, id, edit) => createTaproot(db, options).restoreEntity(id, edit);
-export const redirectEntity = (db, options, id, target, edit) => createTaproot(db, options).redirectEntity(id, target, edit);
-export const setLabel = (db, options, id, language, value, edit) => createTaproot(db, options).setLabel(id, language, value, edit);
-export const removeLabel = (db, options, id, language, edit) => createTaproot(db, options).removeLabel(id, language, edit);
-export const setDescription = (db, options, id, language, value, edit) => createTaproot(db, options).setDescription(id, language, value, edit);
-export const removeDescription = (db, options, id, language, edit) => createTaproot(db, options).removeDescription(id, language, edit);
-export const addAlias = (db, options, id, language, value, edit) => createTaproot(db, options).addAlias(id, language, value, edit);
-export const removeAlias = (db, options, id, language, ordinal, edit) => createTaproot(db, options).removeAlias(id, language, ordinal, edit);
-export const setSitelink = (db, options, id, site, value, edit) => createTaproot(db, options).setSitelink(id, site, value, edit);
-export const removeSitelink = (db, options, id, site, edit) => createTaproot(db, options).removeSitelink(id, site, edit);
-export const addStatement = (db, options, id, statement, edit) => createTaproot(db, options).addStatement(id, statement, edit);
-export const replaceStatement = (db, options, id, statementId, statement, edit) => createTaproot(db, options).replaceStatement(id, statementId, statement, edit);
-export const removeStatement = (db, options, id, statementId, edit) => createTaproot(db, options).removeStatement(id, statementId, edit);
-export const setStatementRank = (db, options, id, statementId, rank, edit) => createTaproot(db, options).setStatementRank(id, statementId, rank, edit);
-export const addQualifier = (db, options, id, statementId, snak, edit) => createTaproot(db, options).addQualifier(id, statementId, snak, edit);
-export const removeQualifier = (db, options, id, statementId, property, ordinal, edit) => createTaproot(db, options).removeQualifier(id, statementId, property, ordinal, edit);
-export const addReference = (db, options, id, statementId, reference, edit) => createTaproot(db, options).addReference(id, statementId, reference, edit);
-export const removeReference = (db, options, id, statementId, hash, edit) => createTaproot(db, options).removeReference(id, statementId, hash, edit);
-export const replaceReference = (db, options, id, statementId, hash, reference, edit) => createTaproot(db, options).replaceReference(id, statementId, hash, reference, edit);
+function guardedRepository(db, options, guard, rawContext) {
+    const binding = installationAuthorizationGuards.get(guard);
+    if (!binding ||
+        binding.db !== db ||
+        binding.baseIri !== canonicalizeTaprootBaseIri(options.baseIri))
+        throw new InvalidAuthorizationError('assembly-issued installation authorization guard is required');
+    const context = normalizeAuthorizationContext(rawContext);
+    if (context.installationId !== binding.installationId ||
+        !context.capabilities.includes(KNOWLEDGE_WRITE_CAPABILITY))
+        throw new InvalidAuthorizationError('knowledge write authorization denied');
+    if ('validators' in options ||
+        'factory' in options ||
+        'maxEntityBytes' in options)
+        throw new InvalidAuthorizationError('write options cannot install canonical-state observers or size probes');
+    return { repository: new TaprootRepository(db, options), context };
+}
+async function readInstallationAuthorizationState(db) {
+    const result = await db
+        .prepare(`SELECT installation_id, authorization_revision, search_generation, last_advance_id
+       FROM taproot_installation_authorization WHERE singleton = 1`)
+        .all();
+    const row = result.results[0];
+    if (!row)
+        throw new InvalidAuthorizationError('installation authorization has not been bootstrapped');
+    return {
+        installationId: row.installation_id,
+        authorizationRevision: Number(row.authorization_revision),
+        searchGeneration: Number(row.search_generation),
+        lastAdvanceId: row.last_advance_id,
+    };
+}
+async function readGuardState(binding) {
+    const state = await readInstallationAuthorizationState(binding.db);
+    if (state.installationId !== binding.installationId)
+        throw new InvalidAuthorizationError('installation authorization denied');
+    return state;
+}
+async function prepareGuardFence(binding, rawContext, requiredCapabilities) {
+    const context = normalizeAuthorizationContext(rawContext);
+    const state = await readGuardState(binding);
+    if (context.installationId !== state.installationId ||
+        context.authorizationRevision !== state.authorizationRevision ||
+        !requiredCapabilities.every((required) => context.capabilities.includes(required)))
+        throw new InvalidAuthorizationError('installation authorization denied');
+    return {
+        state,
+        statement: binding.db
+            .prepare(`INSERT INTO taproot_assertions(assertion_key)
+       SELECT NULL WHERE NOT EXISTS (
+         SELECT 1 FROM taproot_installation_authorization
+          WHERE singleton = 1 AND installation_id = ?
+            AND authorization_revision = ? AND search_generation = ?
+            AND last_advance_id = ?
+       )`)
+            .bind(state.installationId, state.authorizationRevision, state.searchGeneration, state.lastAdvanceId),
+    };
+}
+async function prepareGuardAdvance(binding, rawContext, audit) {
+    const context = normalizeAuthorizationContext(rawContext);
+    const state = await readGuardState(binding);
+    if (context.installationId !== state.installationId ||
+        context.authorizationRevision !== state.authorizationRevision ||
+        !context.capabilities.includes(KNOWLEDGE_WRITE_CAPABILITY) ||
+        !context.capabilities.includes(KNOWLEDGE_POLICY_CAPABILITY))
+        throw new InvalidAuthorizationError('installation authorization denied');
+    for (const [field, value, maximum] of [
+        ['advanceId', audit.advanceId, 128],
+        ['domain', binding.domain, 64],
+        ['reason', audit.reason, 512],
+    ]) {
+        if (typeof value !== 'string' ||
+            !value.trim() ||
+            value !== value.trim() ||
+            value.length > maximum ||
+            [...value].some((character) => {
+                const code = character.charCodeAt(0);
+                return code <= 0x1f || code === 0x7f;
+            }))
+            throw new InvalidAuthorizationError(`${field} is invalid`);
+    }
+    const authorizationRevision = state.authorizationRevision + 1;
+    const searchGeneration = state.searchGeneration + 1;
+    const createdAt = binding.clock().toISOString();
+    const statements = Object.freeze([
+        binding.db
+            .prepare(`UPDATE taproot_installation_authorization
+         SET authorization_revision = ?, search_generation = ?, last_advance_id = ?, updated_at = ?
+         WHERE singleton = 1 AND installation_id = ?
+           AND authorization_revision = ? AND search_generation = ?
+           AND last_advance_id = ?`)
+            .bind(authorizationRevision, searchGeneration, audit.advanceId, createdAt, state.installationId, state.authorizationRevision, state.searchGeneration, state.lastAdvanceId),
+        binding.db
+            .prepare(`INSERT INTO taproot_assertions(assertion_key)
+         SELECT NULL WHERE NOT EXISTS (
+           SELECT 1 FROM taproot_installation_authorization
+            WHERE singleton = 1 AND installation_id = ?
+              AND authorization_revision = ? AND search_generation = ?
+              AND last_advance_id = ?
+         )`)
+            .bind(state.installationId, authorizationRevision, searchGeneration, audit.advanceId),
+        binding.db
+            .prepare(`INSERT INTO taproot_installation_authorization_advances(
+           advance_id, installation_id, from_revision, to_revision,
+           search_generation, domain, principal_id, reason, created_at
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .bind(audit.advanceId, state.installationId, state.authorizationRevision, authorizationRevision, searchGeneration, binding.domain, context.principalId, audit.reason, createdAt),
+    ]);
+    return { authorizationRevision, searchGeneration, statements };
+}
+function normalizeDomainGuardBinding(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        throw new InvalidAuthorizationError('domain guard binding is invalid');
+    const keys = Object.keys(raw).sort();
+    if (JSON.stringify(keys) !== JSON.stringify(['capability', 'domain']))
+        throw new InvalidAuthorizationError('domain guard binding is invalid');
+    for (const [field, value, maximum] of [
+        ['domain', raw.domain, 64],
+        ['capability', raw.capability, 128],
+    ]) {
+        if (typeof value !== 'string' ||
+            value !== value.normalize('NFC') ||
+            value !== value.trim() ||
+            value.length < 1 ||
+            value.length > maximum ||
+            [...value].some((character) => {
+                const code = character.charCodeAt(0);
+                return code <= 0x1f || code === 0x7f;
+            }))
+            throw new InvalidAuthorizationError(`${field} is invalid`);
+    }
+    if (raw.capability === KNOWLEDGE_WRITE_CAPABILITY ||
+        raw.capability === KNOWLEDGE_POLICY_CAPABILITY)
+        throw new InvalidAuthorizationError('knowledge capabilities require the knowledge authorization guard');
+    return Object.freeze({ domain: raw.domain, capability: raw.capability });
+}
+function validateGuardDomainStatements(statements) {
+    if (!Array.isArray(statements) ||
+        statements.length < 1 ||
+        statements.length > 100)
+        throw new InvalidAuthorizationError('an authorization batch must contain 1 through 100 domain statements');
+}
+/**
+ * Assembly-only pristine bootstrap for immutable installation authorization.
+ * It cannot be used after canonical entities exist.
+ */
+export const bootstrapTaprootAuthorization = (db, options, capability, installationId) => repository(db, options, capability).bootstrapAuthorization(installationId);
+export const bootstrapLegacyTaprootAuthorization = (db, options, capability, installationId, attestation) => repository(db, options, capability).bootstrapLegacyAuthorization(installationId, attestation);
+/** Assembly issues this opaque guard after authorization bootstrap. */
+export async function createInstallationAuthorizationGuard(db, options, capability) {
+    repository(db, options, capability);
+    const state = await readInstallationAuthorizationState(db);
+    const binding = {
+        db,
+        baseIri: canonicalizeTaprootBaseIri(options.baseIri),
+        installationId: state.installationId,
+        clock: options.clock ?? (() => new Date()),
+        domain: 'knowledge',
+    };
+    const guard = Object.freeze({
+        kind: 'taproot-installation-authorization-guard-v1',
+        readCurrentState: () => readGuardState(binding),
+        batchWithExpectedRevision: async (context, statements) => {
+            validateGuardDomainStatements(statements);
+            const fence = await prepareGuardFence(binding, context, [
+                KNOWLEDGE_WRITE_CAPABILITY,
+            ]);
+            return binding.db.batch([...statements, fence.statement]);
+        },
+        batchWithAuthorizationAdvance: async (context, audit, domainStatements) => {
+            validateGuardDomainStatements(domainStatements);
+            const advance = await prepareGuardAdvance(binding, context, audit);
+            const results = await binding.db.batch([
+                ...domainStatements,
+                ...advance.statements,
+            ]);
+            return {
+                authorizationRevision: advance.authorizationRevision,
+                searchGeneration: advance.searchGeneration,
+                results,
+            };
+        },
+    });
+    installationAuthorizationGuards.set(guard, binding);
+    return guard;
+}
+/** Assembly issues a fence-only guard bound to one exact non-Knowledge domain. */
+export async function createInstallationDomainMutationGuard(db, options, hostCapability, rawBinding) {
+    repository(db, options, hostCapability);
+    const requested = normalizeDomainGuardBinding(rawBinding);
+    const state = await readInstallationAuthorizationState(db);
+    const binding = {
+        db,
+        baseIri: canonicalizeTaprootBaseIri(options.baseIri),
+        installationId: state.installationId,
+        clock: options.clock ?? (() => new Date()),
+        domain: requested.domain,
+        capability: requested.capability,
+    };
+    const guard = Object.freeze({
+        kind: 'taproot-installation-domain-mutation-guard-v1',
+        readCurrentState: () => readGuardState(binding),
+        batchWithExpectedRevision: async (context, statements) => {
+            validateGuardDomainStatements(statements);
+            const fence = await prepareGuardFence(binding, context, [
+                binding.capability,
+            ]);
+            const results = await binding.db.batch([...statements, fence.statement]);
+            return {
+                authorizationRevision: fence.state.authorizationRevision,
+                searchGeneration: fence.state.searchGeneration,
+                results: results.slice(0, statements.length),
+            };
+        },
+    });
+    installationDomainMutationGuards.set(guard, binding);
+    return guard;
+}
+export const inspectTaprootAuthorizationReadiness = (db, options, capability, context, inspection) => {
+    repository(db, options, capability);
+    return inspectAuthorizationReadinessInternal(db, context, inspection);
+};
+export const planTaprootAuthorizationBackfill = (db, options, capability, context, inputs) => {
+    repository(db, options, capability);
+    return planAuthorizationBackfillInternal(db, context, inputs);
+};
+export const applyTaprootAuthorizationBackfill = (db, options, capability, context, planId) => {
+    repository(db, options, capability);
+    return applyAuthorizationBackfillInternal(db, context, planId);
+};
+function mutationReceipt(result) {
+    return {
+        entityId: result.entityId,
+        previousRevision: result.previousRevision,
+        newRevision: result.newRevision,
+        status: 'committed',
+        authorizationRevision: result.authorizationRevision,
+        searchGeneration: result.searchGeneration,
+    };
+}
+async function mutation(operation) {
+    return mutationReceipt(await operation);
+}
+function writeMetadata(value, context) {
+    const authorization = value.authorization;
+    if (!Object.hasOwn(value, 'authorization') || authorization === undefined)
+        throw new InvalidAuthorizationError('canonical authorization policy is required for every write');
+    return { ...value, authorizationContext: context };
+}
+function guardedWrite(db, options, guard, context, operation) {
+    const bound = guardedRepository(db, options, guard, context);
+    return mutation(operation(bound.repository, bound.context));
+}
+export const createItem = (db, options, guard, context, input) => {
+    const bound = guardedRepository(db, options, guard, context);
+    return mutation(bound.repository.createItem(writeMetadata(input, bound.context)));
+};
+export const createProperty = (db, options, guard, context, input) => {
+    const bound = guardedRepository(db, options, guard, context);
+    return mutation(bound.repository.createProperty(writeMetadata(input, bound.context)));
+};
+export const importEntity = (db, options, guard, context, entity, metadata) => {
+    const bound = guardedRepository(db, options, guard, context);
+    return mutation(bound.repository.importEntity(entity, writeMetadata(metadata, bound.context)));
+};
+export const importEntities = (db, options, guard, context, entities, bulk) => {
+    const values = [...entities];
+    if (typeof bulk !== 'object' ||
+        bulk === null ||
+        typeof bulk.authorizations !== 'object' ||
+        bulk.authorizations === null ||
+        Array.isArray(bulk.authorizations))
+        throw new InvalidAuthorizationError('bulk authorizations must explicitly and exactly cover imported entities');
+    const expected = [...new Set(values.map(({ id }) => id))].sort();
+    const provided = Object.keys(bulk.authorizations).sort();
+    if (JSON.stringify(expected) !== JSON.stringify(provided))
+        throw new InvalidAuthorizationError('bulk authorizations must explicitly and exactly cover imported entities');
+    const bound = guardedRepository(db, options, guard, context);
+    return bound.repository
+        .importEntities(values, {
+        ...bulk,
+        metadata: {
+            ...(bulk.metadata ?? {}),
+            authorizationContext: bound.context,
+        },
+    })
+        .then((result) => ({
+        succeeded: result.succeeded.map(mutationReceipt),
+        failed: result.failed,
+    }));
+};
+export const applyCommands = (db, options, guard, context, id, commands, edit) => mutation(guardedRepository(db, options, guard, context).repository.applyCommands(id, commands, writeMetadata(edit, normalizeAuthorizationContext(context))));
+export const replaceEntity = (db, options, guard, context, id, entity, edit) => mutation(guardedRepository(db, options, guard, context).repository.replaceEntity(id, entity, writeMetadata(edit, normalizeAuthorizationContext(context))));
+export const revertEntity = (db, options, guard, context, id, targetRevision, edit) => mutation(guardedRepository(db, options, guard, context).repository.revertEntity(id, targetRevision, writeMetadata(edit, normalizeAuthorizationContext(context))));
+export const softDeleteEntity = (db, options, guard, context, id, edit) => mutation(guardedRepository(db, options, guard, context).repository.softDeleteEntity(id, writeMetadata(edit, normalizeAuthorizationContext(context))));
+export const restoreEntity = (db, options, guard, context, id, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.restoreEntity(id, writeMetadata(edit, ctx)));
+export const redirectEntity = (db, options, guard, context, id, target, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.redirectEntity(id, target, writeMetadata(edit, ctx)));
+export const setLabel = (db, options, guard, context, id, language, value, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.setLabel(id, language, value, writeMetadata(edit, ctx)));
+export const removeLabel = (db, options, guard, context, id, language, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.removeLabel(id, language, writeMetadata(edit, ctx)));
+export const setDescription = (db, options, guard, context, id, language, value, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.setDescription(id, language, value, writeMetadata(edit, ctx)));
+export const removeDescription = (db, options, guard, context, id, language, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.removeDescription(id, language, writeMetadata(edit, ctx)));
+export const addAlias = (db, options, guard, context, id, language, value, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.addAlias(id, language, value, writeMetadata(edit, ctx)));
+export const removeAlias = (db, options, guard, context, id, language, ordinal, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.removeAlias(id, language, ordinal, writeMetadata(edit, ctx)));
+export const setSitelink = (db, options, guard, context, id, site, value, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.setSitelink(id, site, value, writeMetadata(edit, ctx)));
+export const removeSitelink = (db, options, guard, context, id, site, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.removeSitelink(id, site, writeMetadata(edit, ctx)));
+export const addStatement = (db, options, guard, context, id, statement, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.addStatement(id, statement, writeMetadata(edit, ctx)));
+export const replaceStatement = (db, options, guard, context, id, statementId, statement, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.replaceStatement(id, statementId, statement, writeMetadata(edit, ctx)));
+export const removeStatement = (db, options, guard, context, id, statementId, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.removeStatement(id, statementId, writeMetadata(edit, ctx)));
+export const setStatementRank = (db, options, guard, context, id, statementId, rank, text, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.setStatementRank(id, statementId, rank, text, writeMetadata(edit, ctx)));
+export const addQualifier = (db, options, guard, context, id, statementId, snak, text, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.addQualifier(id, statementId, snak, text, writeMetadata(edit, ctx)));
+export const removeQualifier = (db, options, guard, context, id, statementId, property, ordinal, text, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.removeQualifier(id, statementId, property, ordinal, text, writeMetadata(edit, ctx)));
+export const addReference = (db, options, guard, context, id, statementId, reference, text, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.addReference(id, statementId, reference, text, writeMetadata(edit, ctx)));
+export const removeReference = (db, options, guard, context, id, statementId, hash, text, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.removeReference(id, statementId, hash, text, writeMetadata(edit, ctx)));
+export const replaceReference = (db, options, guard, context, id, statementId, hash, reference, text, edit) => guardedWrite(db, options, guard, context, (repo, ctx) => repo.replaceReference(id, statementId, hash, reference, text, writeMetadata(edit, ctx)));
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,iBAAiB,GAOlB,MAAM,iBAAiB,CAAC;AAezB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAE3B,MAAM,UAAU,aAAa,CAC3B,EAAkB,EAClB,OAAuB;IAEvB,OAAO,IAAI,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAE9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAgB,EAChB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAiB,EACjB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,KAAc,EACd,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,IAA0C,EAC1C,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAAuB,EACvB,KAAa,EACb,MAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,EAAkB,EAClB,OAAuB,EACvB,KAAa,EACb,MAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAAuB,EACvB,IAA0B,EAC1B,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAAuB,EACvB,OAAe,EACf,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAkB,EAClB,OAAuB,EACvB,IAAuB,EACvB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,EAAkB,EAClB,OAAuB,EACvB,KAAuB,EACvB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAAuB,EACvB,KAA0B,EAC1B,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAAuB,EACvB,MAAsB,EACtB,QAAuB,EACvB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAAuB,EACvB,QAAkC,EAClC,IAAwB,EACxB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAAuB,EACvB,IAA0B,EAC1B,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAkC,EAClC,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,EAAkB,EAClB,OAAuB,EACvB,IAA0B,EAC1B,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAuB,EACvB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,MAAsB,EACtB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,cAAsB,EACtB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,MAAgB,EAChB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAgB,EAChB,KAAa,EACb,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAgB,EAChB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAgB,EAChB,KAAa,EACb,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAgB,EAChB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAgB,EAChB,KAAa,EACb,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,QAAgB,EAChB,OAAe,EACf,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,EAAkB,EAClB,OAAuB,EACvB,EAAgB,EAChB,IAAY,EACZ,KAAe,EACf,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAAuB,EACvB,EAAgB,EAChB,IAAY,EACZ,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,SAAoB,EACpB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,SAAoB,EACpB,IAAsB,EACtB,EAAE,CACF,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,IAAuB,EACvB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,IAAU,EACV,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,QAAoB,EACpB,OAAe,EACf,IAAsB,EACtB,EAAE,CACF,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,eAAe,CACxC,EAAE,EACF,WAAW,EACX,QAAQ,EACR,OAAO,EACP,IAAI,CACL,CAAC;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,SAAoB,EACpB,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,IAAY,EACZ,IAAsB,EACtB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAAuB,EACvB,EAAY,EACZ,WAAmB,EACnB,IAAY,EACZ,SAAoB,EACpB,IAAsB,EACtB,EAAE,CACF,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,gBAAgB,CACzC,EAAE,EACF,WAAW,EACX,IAAI,EACJ,SAAS,EACT,IAAI,CACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,GAE9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,IAAI,kCAAkC,EAChE,6BAA6B,IAAI,qCAAqC,EACtE,yBAAyB,IAAI,iCAAiC,GAE/D,MAAM,gCAAgC,CAAC;AAiBxC,OAAO,EACL,iBAAiB,GAKlB,MAAM,iBAAiB,CAAC;AA6DzB,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAGtC,CAAC;AA8CJ,MAAM,+BAA+B,GAAG,IAAI,OAAO,EAGhD,CAAC;AAMJ,MAAM,gCAAgC,GAAG,IAAI,OAAO,EAGjD,CAAC;AAMJ;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAC9C,EAAkB,EAClB,OAA6C,EAC7C,GAAc;IAEd,MAAM,SAAS,GAAG,GAAG,CAAC,SAErB,CAAC;IACF,IACE,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,GAAG,CAAC,WAAW;QACf,SAAS,CAAC,IAAI,KAAK,MAAM;QACzB,SAAS,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS;QAClC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAE5B,MAAM,IAAI,yBAAyB,CACjC,2EAA2E,CAC5E,CAAC;IACJ,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,uBAAgC,EAAE,CAAC,CAAC;IAC7E,qBAAqB,CAAC,GAAG,CAAC,UAAU,EAAE;QACpC,EAAE;QACF,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC;KACrD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAE3B,SAAS,UAAU,CACjB,EAAkB,EAClB,OAAsC,EACtC,UAAsC;IAEtC,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IACE,CAAC,OAAO;QACR,OAAO,CAAC,EAAE,KAAK,EAAE;QACjB,OAAO,CAAC,OAAO,KAAK,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC;QAE/D,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAC;IACJ,IACE,YAAY,IAAI,OAAO;QACvB,SAAS,IAAI,OAAO;QACpB,gBAAgB,IAAI,OAAO;QAE3B,MAAM,IAAI,yBAAyB,CACjC,uEAAuE,CACxE,CAAC;IACJ,OAAO,IAAI,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CACxB,EAAkB,EAClB,OAAsC,EACtC,KAAqC,EACrC,UAAgC;IAEhC,MAAM,OAAO,GAAG,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,IACE,CAAC,OAAO;QACR,OAAO,CAAC,EAAE,KAAK,EAAE;QACjB,OAAO,CAAC,OAAO,KAAK,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC;QAE/D,MAAM,IAAI,yBAAyB,CACjC,8DAA8D,CAC/D,CAAC;IACJ,MAAM,OAAO,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC1D,IACE,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QACjD,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAE1D,MAAM,IAAI,yBAAyB,CAAC,sCAAsC,CAAC,CAAC;IAC9E,IACE,YAAY,IAAI,OAAO;QACvB,SAAS,IAAI,OAAO;QACpB,gBAAgB,IAAI,OAAO;QAE3B,MAAM,IAAI,yBAAyB,CACjC,uEAAuE,CACxE,CAAC;IACJ,OAAO,EAAE,UAAU,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,EAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,EAAE;SACpB,OAAO,CACN;mEAC6D,CAC9D;SACA,GAAG,EAKA,CAAC;IACP,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QACN,MAAM,IAAI,yBAAyB,CACjC,sDAAsD,CACvD,CAAC;IACJ,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACzD,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC/C,aAAa,EAAE,GAAG,CAAC,eAAe;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAiC;IAEjC,MAAM,KAAK,GAAG,MAAM,kCAAkC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QACjD,MAAM,IAAI,yBAAyB,CAAC,mCAAmC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAAiC,EACjC,UAAgC,EAChC,oBAAuC;IAKvC,MAAM,OAAO,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,IACE,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAC/C,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;QAC7D,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACxC;QAED,MAAM,IAAI,yBAAyB,CAAC,mCAAmC,CAAC,CAAC;IAC3E,OAAO;QACL,KAAK;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;aAClB,OAAO,CACN;;;;;;SAMC,CACF;aACA,IAAI,CACH,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,qBAAqB,EAC3B,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,aAAa,CACpB;KACJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAiC,EACjC,UAAgC,EAChC,KAA4C;IAE5C,MAAM,OAAO,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,IACE,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAC/C,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;QAC7D,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC1D,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAE3D,MAAM,IAAI,yBAAyB,CAAC,mCAAmC,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI;QACpC,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;QACnC,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;KACrB,EAAE,CAAC;QACX,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,KAAK,CAAC,IAAI,EAAE;YACb,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;YACtB,KAAK,CAAC,MAAM,GAAG,OAAO;YACtB,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACrC,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;YACvC,CAAC,CAAC;YAEF,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,GAAG,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,OAAO,CAAC,EAAE;aACP,OAAO,CACN;;;;mCAI2B,CAC5B;aACA,IAAI,CACH,qBAAqB,EACrB,gBAAgB,EAChB,KAAK,CAAC,SAAS,EACf,SAAS,EACT,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,qBAAqB,EAC3B,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,aAAa,CACpB;QACH,OAAO,CAAC,EAAE;aACP,OAAO,CACN;;;;;;WAMG,CACJ;aACA,IAAI,CACH,KAAK,CAAC,cAAc,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,KAAK,CAAC,SAAS,CAChB;QACH,OAAO,CAAC,EAAE;aACP,OAAO,CACN;;;8CAGsC,CACvC;aACA,IAAI,CACH,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,qBAAqB,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,WAAW,EACnB,KAAK,CAAC,MAAM,EACZ,SAAS,CACV;KACJ,CAAC,CAAC;IACH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,2BAA2B,CAClC,GAAsC;IAEtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QACvD,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACnE,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI;QACpC,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1B,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;KAC3B,EAAE,CAAC;QACX,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;YAChC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;YACtB,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,MAAM,GAAG,OAAO;YACtB,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACrC,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;YACvC,CAAC,CAAC;YAEF,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,IACE,GAAG,CAAC,UAAU,KAAK,0BAA0B;QAC7C,GAAG,CAAC,UAAU,KAAK,2BAA2B;QAE9C,MAAM,IAAI,yBAAyB,CACjC,kEAAkE,CACnE,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,6BAA6B,CACpC,UAAkD;IAElD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC1B,UAAU,CAAC,MAAM,GAAG,CAAC;QACrB,UAAU,CAAC,MAAM,GAAG,GAAG;QAEvB,MAAM,IAAI,yBAAyB,CACjC,qEAAqE,CACtE,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,EAAkB,EAClB,OAA4B,EAC5B,UAAsC,EACtC,cAAsB,EACtB,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,EAAkB,EAClB,OAA4B,EAC5B,UAAsC,EACtC,cAAsB,EACtB,WAAoD,EACpD,EAAE,CACF,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,4BAA4B,CAC9D,cAAc,EACd,WAAW,CACZ,CAAC;AAEJ,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,EAAkB,EAClB,OAA4B,EAC5B,UAAsC;IAEtC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,kCAAkC,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAA6B;QACxC,EAAE;QACF,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC;QACpD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1C,MAAM,EAAE,WAAW;KACpB,CAAC;IACF,MAAM,KAAK,GAAmC,MAAM,CAAC,MAAM,CAAC;QAC1D,IAAI,EAAE,6CAAsD;QAC5D,gBAAgB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC;QAC/C,yBAAyB,EAAE,KAAK,EAC9B,OAA6B,EAC7B,UAAkD,EAClD,EAAE;YACF,6BAA6B,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE;gBACtD,0BAA0B;aAC3B,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,6BAA6B,EAAE,KAAK,EAClC,OAA6B,EAC7B,KAA4C,EAC5C,gBAAwD,EACxD,EAAE;YACF,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC;gBACrC,GAAG,gBAAgB;gBACnB,GAAG,OAAO,CAAC,UAAU;aACtB,CAAC,CAAC;YACH,OAAO;gBACL,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;gBACpD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IACH,+BAA+B,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,EAAkB,EAClB,OAA4B,EAC5B,cAA0C,EAC1C,UAA6C;IAE7C,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,kCAAkC,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAuB;QAClC,EAAE;QACF,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC;QACpD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1C,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,UAAU,EAAE,SAAS,CAAC,UAAU;KACjC,CAAC;IACF,MAAM,KAAK,GAAoC,MAAM,CAAC,MAAM,CAAC;QAC3D,IAAI,EAAE,+CAAwD;QAC9D,gBAAgB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC;QAC/C,yBAAyB,EAAE,KAAK,EAC9B,OAA6B,EAC7B,UAAkD,EAClD,EAAE;YACF,6BAA6B,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE;gBACtD,OAAO,CAAC,UAAU;aACnB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACzE,OAAO;gBACL,qBAAqB,EAAE,KAAK,CAAC,KAAK,CAAC,qBAAqB;gBACxD,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;gBAC9C,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;aAC7C,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IACH,gCAAgC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAClD,EAAkB,EAClB,OAA4B,EAC5B,UAAsC,EACtC,OAA6B,EAC7B,UAAkD,EAClD,EAAE;IACF,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACpC,OAAO,qCAAqC,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,EAAkB,EAClB,OAA4B,EAC5B,UAAsC,EACtC,OAA6B,EAC7B,MAAmD,EACnD,EAAE;IACF,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACpC,OAAO,iCAAiC,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAC/C,EAAkB,EAClB,OAA4B,EAC5B,UAAsC,EACtC,OAA6B,EAC7B,MAAc,EACd,EAAE;IACF,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACpC,OAAO,kCAAkC,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC,CAAC;AA0BF,SAAS,eAAe,CAAC,MAAmB;IAC1C,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,WAAW;QACnB,qBAAqB,EAAE,MAAM,CAAC,qBAAsB;QACpD,gBAAgB,EAAE,MAAM,CAAC,gBAAiB;KAC3C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,SAA+B;IAE/B,OAAO,eAAe,CAAC,MAAM,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CACpB,KAAQ,EACR,OAA6B;IAE7B,MAAM,aAAa,GAAI,KAAqC,CAAC,aAAa,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,aAAa,KAAK,SAAS;QACvE,MAAM,IAAI,yBAAyB,CACjC,4DAA4D,CAC7D,CAAC;IACJ,OAAO,EAAE,GAAG,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CACnB,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,SAGyB;IAEzB,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,KAAgC,EAChC,EAAE;IACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,QAAQ,CACb,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,KAAoC,EACpC,EAAE;IACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,QAAQ,CACb,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CACrE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,MAAsB,EACtB,QAAkC,EAClC,EAAE;IACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,QAAQ,CACb,KAAK,CAAC,UAAU,CAAC,YAAY,CAC3B,MAAM,EACN,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CACvC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,QAAkC,EAClC,IAAiC,EACjC,EAAE;IACF,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC7B,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;QACvC,IAAI,CAAC,cAAc,KAAK,IAAI;QAC5B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;QAElC,MAAM,IAAI,yBAAyB,CACjC,yEAAyE,CAC1E,CAAC;IACJ,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QACvD,MAAM,IAAI,yBAAyB,CACjC,yEAAyE,CAC1E,CAAC;IACJ,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,UAAU;SACpB,cAAc,CAAC,MAAM,EAAE;QACtB,GAAG,IAAI;QACP,QAAQ,EAAE;YACR,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YACxB,oBAAoB,EAAE,KAAK,CAAC,OAAO;SACpC;KACF,CAAC;SACD,IAAI,CAAC,CAAC,MAAM,EAAuB,EAAE,CAAC,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,QAAkC,EAClC,IAAgC,EAChC,EAAE,CACF,QAAQ,CACN,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,aAAa,CACrE,EAAE,EACF,QAAQ,EACR,aAAa,CAAC,IAAI,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAC5D,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,MAAsB,EACtB,IAAqC,EACrC,EAAE,CACF,QAAQ,CACN,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,aAAa,CACrE,EAAE,EACF,MAAM,EACN,aAAa,CAAC,IAAI,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAC5D,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,cAAsB,EACtB,IAAqC,EACrC,EAAE,CACF,QAAQ,CACN,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CACpE,EAAE,EACF,cAAc,EACd,aAAa,CAAC,IAAI,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAC5D,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,IAAgC,EAChC,EAAE,CACF,QAAQ,CACN,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,gBAAgB,CACxE,EAAE,EACF,aAAa,CAAC,IAAI,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAC5D,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACjD,CAAC;AAEJ,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,MAAgB,EAChB,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC1D,CAAC;AAEJ,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,QAAgB,EAChB,KAAa,EACb,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC7D,CAAC;AAEJ,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,QAAgB,EAChB,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACzD,CAAC;AAEJ,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,QAAgB,EAChB,KAAa,EACb,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACnE,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,QAAgB,EAChB,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC/D,CAAC;AAEJ,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,QAAgB,EAChB,KAAa,EACb,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC7D,CAAC;AAEJ,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,QAAgB,EAChB,OAAe,EACf,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAClE,CAAC;AAEJ,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAgB,EAChB,IAAY,EACZ,KAAe,EACf,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC5D,CAAC;AAEJ,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAgB,EAChB,IAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACxD,CAAC;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,SAAoB,EACpB,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC3D,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,SAAoB,EACpB,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC5E,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAChE,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,IAAuB,EACvB,IAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,gBAAgB,CACnB,EAAE,EACF,WAAW,EACX,IAAI,EACJ,IAAI,EACJ,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CACzB,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,IAAU,EACV,IAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACzE,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,QAAoB,EACpB,OAAe,EACf,IAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,eAAe,CAClB,EAAE,EACF,WAAW,EACX,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CACzB,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,SAAoB,EACpB,IAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,YAAY,CACf,EAAE,EACF,WAAW,EACX,SAAS,EACT,IAAI,EACJ,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CACzB,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,IAAY,EACZ,IAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC5E,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,EAAkB,EAClB,OAA4B,EAC5B,KAAqC,EACrC,OAA6B,EAC7B,EAAY,EACZ,WAAmB,EACnB,IAAY,EACZ,SAAoB,EACpB,IAAY,EACZ,IAAgC,EAChC,EAAE,CACF,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACtD,IAAI,CAAC,gBAAgB,CACnB,EAAE,EACF,WAAW,EACX,IAAI,EACJ,SAAS,EACT,IAAI,EACJ,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CACzB,CACF,CAAC"}

package/dist/migrations.d.ts

@@ -3,10 +3,16 @@ import { inspectTaprootSchema } from './schema.js';
 export declare const taprootMigrationNamespace = "@gnolith/taproot";
 export declare const taprootMigrations: readonly [{
     readonly id: "0001-v0.1-schema";
-    readonly statements: readonly ["CREATE TABLE IF NOT EXISTS taproot_entities (\n    entity_id TEXT PRIMARY KEY,\n    entity_type TEXT NOT NULL CHECK (entity_type IN ('item', 'property')),\n    datatype TEXT,\n    revision INTEGER NOT NULL,\n    entity_json TEXT NOT NULL CHECK (json_valid(entity_json)),\n    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n    modified_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n    deleted_at TEXT,\n    redirect_to TEXT,\n    CHECK ((entity_type = 'item' AND datatype IS NULL)\n      OR (entity_type = 'property' AND datatype IS NOT NULL))\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_entity_revisions (\n    entity_id TEXT NOT NULL,\n    revision INTEGER NOT NULL,\n    entity_json TEXT NOT NULL CHECK (json_valid(entity_json)),\n    actor TEXT,\n    attribution_json TEXT CHECK (attribution_json IS NULL OR json_valid(attribution_json)),\n    edit_summary TEXT,\n    tags_json TEXT NOT NULL DEFAULT '[]' CHECK (json_valid(tags_json)),\n    event_id TEXT NOT NULL,\n    content_hash TEXT NOT NULL,\n    parent_hash TEXT,\n    deleted_at TEXT,\n    redirect_to TEXT,\n    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n    PRIMARY KEY (entity_id, revision),\n    FOREIGN KEY (entity_id) REFERENCES taproot_entities(entity_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_audit_events (\n    event_id TEXT PRIMARY KEY,\n    entity_id TEXT NOT NULL,\n    revision INTEGER NOT NULL,\n    event_type TEXT NOT NULL CHECK (event_type IN ('create', 'update', 'revert', 'delete', 'restore', 'redirect', 'import', 'repair')),\n    attribution_json TEXT CHECK (attribution_json IS NULL OR json_valid(attribution_json)),\n    edit_summary TEXT,\n    tags_json TEXT NOT NULL DEFAULT '[]' CHECK (json_valid(tags_json)),\n    request_id TEXT,\n    content_hash TEXT NOT NULL,\n    parent_hash TEXT,\n    details_json TEXT NOT NULL DEFAULT '{}' CHECK (json_valid(details_json)),\n    created_at TEXT NOT NULL,\n    FOREIGN KEY (entity_id, revision) REFERENCES taproot_entity_revisions(entity_id, revision)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_migrations (\n    version INTEGER PRIMARY KEY,\n    name TEXT NOT NULL,\n    applied_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_rdf_ownership (\n    entity_id TEXT NOT NULL,\n    subject_key TEXT NOT NULL,\n    predicate_key TEXT NOT NULL,\n    object_key TEXT NOT NULL,\n    graph_key TEXT NOT NULL,\n    PRIMARY KEY (entity_id, subject_key, predicate_key, object_key, graph_key),\n    FOREIGN KEY (entity_id) REFERENCES taproot_entities(entity_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_id_counters (\n    entity_type TEXT PRIMARY KEY CHECK (entity_type IN ('item', 'property')),\n    next_numeric_id INTEGER NOT NULL CHECK (next_numeric_id > 0)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_terms (\n    entity_id TEXT NOT NULL,\n    language TEXT NOT NULL,\n    term_type TEXT NOT NULL CHECK (term_type IN ('label', 'description', 'alias')),\n    value TEXT NOT NULL,\n    ordinal INTEGER NOT NULL DEFAULT 0,\n    PRIMARY KEY (entity_id, language, term_type, ordinal),\n    FOREIGN KEY (entity_id) REFERENCES taproot_entities(entity_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_metadata (\n    metadata_key TEXT PRIMARY KEY,\n    metadata_value TEXT NOT NULL\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_assertions (\n    assertion_key TEXT PRIMARY KEY\n  ) STRICT", "CREATE INDEX IF NOT EXISTS taproot_entities_type_idx\n    ON taproot_entities(entity_type, entity_id)", "CREATE INDEX IF NOT EXISTS taproot_entities_modified_idx\n    ON taproot_entities(modified_at, entity_id)", "CREATE INDEX IF NOT EXISTS taproot_revisions_entity_idx\n    ON taproot_entity_revisions(entity_id, revision DESC)", "CREATE INDEX IF NOT EXISTS taproot_terms_lookup_idx\n    ON taproot_terms(language, value COLLATE NOCASE, entity_id)", "CREATE INDEX IF NOT EXISTS taproot_audit_entity_idx\n    ON taproot_audit_events(entity_id, revision DESC, event_id)", "CREATE INDEX IF NOT EXISTS taproot_audit_request_idx\n    ON taproot_audit_events(request_id) WHERE request_id IS NOT NULL", "CREATE INDEX IF NOT EXISTS taproot_rdf_ownership_quad_idx\n    ON taproot_rdf_ownership(subject_key, predicate_key, object_key, graph_key, entity_id)", "CREATE TRIGGER IF NOT EXISTS taproot_revisions_no_update\n    BEFORE UPDATE ON taproot_entity_revisions BEGIN SELECT RAISE(ABORT, 'taproot revisions are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_revisions_no_delete\n    BEFORE DELETE ON taproot_entity_revisions BEGIN SELECT RAISE(ABORT, 'taproot revisions are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_audit_no_update\n    BEFORE UPDATE ON taproot_audit_events BEGIN SELECT RAISE(ABORT, 'taproot audit events are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_audit_no_delete\n    BEFORE DELETE ON taproot_audit_events BEGIN SELECT RAISE(ABORT, 'taproot audit events are immutable'); END", "INSERT INTO taproot_id_counters(entity_type, next_numeric_id)\n    VALUES ('item', 1), ('property', 1)\n    ON CONFLICT(entity_type) DO NOTHING", "INSERT INTO taproot_metadata(metadata_key, metadata_value)\n    VALUES\n      ('schema_version', '2'),\n      ('canonical_json_version', '1'),\n      ('rdf_mapping_version', '2')\n    ON CONFLICT(metadata_key) DO UPDATE SET metadata_value = excluded.metadata_value", "INSERT INTO taproot_migrations(version, name) VALUES (1, 'initial'), (2, 'audit-and-operations')\n    ON CONFLICT(version) DO NOTHING"];
+    readonly statements: string[];
 }, {
     readonly id: "0002-durable-database-identity";
     readonly statements: readonly ["INSERT INTO taproot_metadata(metadata_key, metadata_value)\n       VALUES ('migration_api_version', '1')\n       ON CONFLICT(metadata_key) DO UPDATE SET metadata_value = excluded.metadata_value"];
+}, {
+    readonly id: "0003-canonical-statement-text";
+    readonly statements: readonly ["INSERT INTO taproot_assertions(assertion_key)\n       WITH canonical_json(entity_json) AS (\n         SELECT entity_json FROM taproot_entities\n         UNION ALL\n         SELECT entity_json FROM taproot_entity_revisions\n       )\n       SELECT NULL\n       FROM canonical_json AS source,\n         json_each(source.entity_json, '$.claims') AS claim,\n         json_each(claim.value) AS statement\n       WHERE json_type(statement.value, '$.text') IS NOT 'text'\n          OR trim(json_extract(statement.value, '$.text')) = ''\n       LIMIT 1", "UPDATE taproot_metadata SET metadata_value = '2'\n       WHERE metadata_key = 'canonical_json_version' AND metadata_value = '1'", "INSERT INTO taproot_assertions(assertion_key)\n       SELECT NULL WHERE NOT EXISTS (\n         SELECT 1 FROM taproot_metadata\n         WHERE metadata_key = 'canonical_json_version' AND metadata_value = '2'\n       )", "INSERT INTO taproot_migrations(version, name)\n       VALUES (3, 'canonical-statement-text')\n       ON CONFLICT(version) DO NOTHING"];
+}, {
+    readonly id: "0004-canonical-authorization-policy";
+    readonly statements: readonly ["CREATE TABLE IF NOT EXISTS taproot_installation_authorization (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    installation_id TEXT NOT NULL UNIQUE,\n    authorization_revision INTEGER NOT NULL CHECK (authorization_revision >= 1),\n    search_generation INTEGER NOT NULL CHECK (search_generation >= 1),\n    last_advance_id TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_entity_authorization (\n    entity_id TEXT PRIMARY KEY,\n    installation_id TEXT NOT NULL,\n    workspace_id TEXT,\n    owner_principal_id TEXT NOT NULL,\n    visibility_json TEXT NOT NULL CHECK (json_valid(visibility_json)),\n    effective_visibility_json TEXT NOT NULL CHECK (json_valid(effective_visibility_json)),\n    source_revision INTEGER NOT NULL,\n    authorization_revision INTEGER NOT NULL,\n    deleted_at TEXT,\n    event_id TEXT NOT NULL UNIQUE,\n    updated_at TEXT NOT NULL,\n    FOREIGN KEY (entity_id) REFERENCES taproot_entities(entity_id),\n    FOREIGN KEY (event_id) REFERENCES taproot_audit_events(event_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_entity_authorization_revisions (\n    entity_id TEXT NOT NULL,\n    source_revision INTEGER NOT NULL,\n    installation_id TEXT NOT NULL,\n    workspace_id TEXT,\n    owner_principal_id TEXT NOT NULL,\n    visibility_json TEXT NOT NULL CHECK (json_valid(visibility_json)),\n    effective_visibility_json TEXT NOT NULL CHECK (json_valid(effective_visibility_json)),\n    authorization_revision INTEGER NOT NULL,\n    deleted_at TEXT,\n    event_id TEXT NOT NULL UNIQUE,\n    created_at TEXT NOT NULL,\n    PRIMARY KEY (entity_id, source_revision),\n    FOREIGN KEY (entity_id, source_revision)\n      REFERENCES taproot_entity_revisions(entity_id, revision),\n    FOREIGN KEY (event_id) REFERENCES taproot_audit_events(event_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_statement_authorization (\n    entity_id TEXT NOT NULL,\n    statement_id TEXT NOT NULL,\n    source_revision INTEGER NOT NULL,\n    restrictions_json TEXT NOT NULL CHECK (json_valid(restrictions_json)),\n    effective_visibility_json TEXT NOT NULL CHECK (json_valid(effective_visibility_json)),\n    authorization_revision INTEGER NOT NULL,\n    PRIMARY KEY (entity_id, statement_id),\n    FOREIGN KEY (entity_id) REFERENCES taproot_entities(entity_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_statement_authorization_revisions (\n    entity_id TEXT NOT NULL,\n    source_revision INTEGER NOT NULL,\n    statement_id TEXT NOT NULL,\n    restrictions_json TEXT NOT NULL CHECK (json_valid(restrictions_json)),\n    effective_visibility_json TEXT NOT NULL CHECK (json_valid(effective_visibility_json)),\n    authorization_revision INTEGER NOT NULL,\n    PRIMARY KEY (entity_id, source_revision, statement_id),\n    FOREIGN KEY (entity_id, source_revision)\n      REFERENCES taproot_entity_revisions(entity_id, revision)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_authorization_projection_outbox (\n    event_id TEXT PRIMARY KEY,\n    entity_id TEXT NOT NULL,\n    source_revision INTEGER NOT NULL,\n    authorization_revision INTEGER NOT NULL,\n    search_generation INTEGER NOT NULL,\n    operation TEXT NOT NULL CHECK (operation IN ('upsert', 'delete', 'repair', 'backfill')),\n    state TEXT NOT NULL DEFAULT 'pending' CHECK (state IN ('pending', 'claimed', 'complete')),\n    created_at TEXT NOT NULL,\n    FOREIGN KEY (event_id) REFERENCES taproot_audit_events(event_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_authorization_backfill_plans (\n    plan_id TEXT PRIMARY KEY,\n    installation_id TEXT NOT NULL,\n    base_authorization_revision INTEGER NOT NULL,\n    manifest_json TEXT NOT NULL CHECK (json_valid(manifest_json)),\n    manifest_hash TEXT NOT NULL,\n    entity_count INTEGER NOT NULL CHECK (entity_count > 0 AND entity_count <= 100),\n    revision_count INTEGER NOT NULL CHECK (revision_count > 0),\n    status TEXT NOT NULL CHECK (status IN ('planned', 'applying', 'complete')),\n    created_by TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    completed_at TEXT\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_authorization_admin_audit (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    audit_id TEXT NOT NULL UNIQUE,\n    event_type TEXT NOT NULL CHECK (event_type IN ('backfill-plan', 'backfill-apply')),\n    principal_id TEXT NOT NULL,\n    plan_id TEXT NOT NULL,\n    authorization_revision INTEGER NOT NULL,\n    details_json TEXT NOT NULL CHECK (json_valid(details_json)),\n    created_at TEXT NOT NULL,\n    FOREIGN KEY (plan_id) REFERENCES taproot_authorization_backfill_plans(plan_id)\n  ) STRICT", "CREATE TABLE IF NOT EXISTS taproot_installation_authorization_advances (\n    advance_id TEXT PRIMARY KEY,\n    installation_id TEXT NOT NULL,\n    from_revision INTEGER NOT NULL,\n    to_revision INTEGER NOT NULL,\n    search_generation INTEGER NOT NULL,\n    domain TEXT NOT NULL,\n    principal_id TEXT NOT NULL,\n    reason TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    CHECK (to_revision = from_revision + 1)\n  ) STRICT", "CREATE INDEX IF NOT EXISTS taproot_entity_authorization_candidate_idx\n    ON taproot_entity_authorization(installation_id, deleted_at, entity_id)", "CREATE INDEX IF NOT EXISTS taproot_entity_authorization_revision_idx\n    ON taproot_entity_authorization_revisions(entity_id, source_revision DESC)", "CREATE INDEX IF NOT EXISTS taproot_statement_authorization_candidate_idx\n    ON taproot_statement_authorization(entity_id, source_revision, statement_id)", "CREATE INDEX IF NOT EXISTS taproot_authorization_outbox_state_idx\n    ON taproot_authorization_projection_outbox(state, authorization_revision, event_id)", "CREATE TRIGGER IF NOT EXISTS taproot_revisions_no_replace\n    BEFORE INSERT ON taproot_entity_revisions\n    WHEN EXISTS (\n      SELECT 1 FROM taproot_entity_revisions\n      WHERE entity_id = NEW.entity_id AND revision = NEW.revision\n    )\n    BEGIN SELECT RAISE(ABORT, 'taproot revisions cannot be replaced'); END", "CREATE TRIGGER IF NOT EXISTS taproot_audit_no_replace\n    BEFORE INSERT ON taproot_audit_events\n    WHEN EXISTS (\n      SELECT 1 FROM taproot_audit_events WHERE event_id = NEW.event_id\n    )\n    BEGIN SELECT RAISE(ABORT, 'taproot audit events cannot be replaced'); END", "CREATE TRIGGER IF NOT EXISTS taproot_installation_identity_no_update\n    BEFORE UPDATE OF installation_id ON taproot_installation_authorization\n    BEGIN SELECT RAISE(ABORT, 'taproot installation identity is immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_installation_authorization_no_delete\n    BEFORE DELETE ON taproot_installation_authorization\n    BEGIN SELECT RAISE(ABORT, 'taproot installation authorization is durable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_installation_authorization_no_replace\n    BEFORE INSERT ON taproot_installation_authorization\n    WHEN EXISTS (SELECT 1 FROM taproot_installation_authorization WHERE singleton = NEW.singleton)\n    BEGIN SELECT RAISE(ABORT, 'taproot installation authorization cannot be replaced'); END", "CREATE TRIGGER IF NOT EXISTS taproot_entity_authorization_revisions_no_update\n    BEFORE UPDATE ON taproot_entity_authorization_revisions\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization revisions are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_entity_authorization_revisions_no_delete\n    BEFORE DELETE ON taproot_entity_authorization_revisions\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization revisions are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_entity_authorization_revisions_no_replace\n    BEFORE INSERT ON taproot_entity_authorization_revisions\n    WHEN EXISTS (\n      SELECT 1 FROM taproot_entity_authorization_revisions\n      WHERE (entity_id = NEW.entity_id AND source_revision = NEW.source_revision)\n         OR event_id = NEW.event_id\n    )\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization revisions cannot be replaced'); END", "CREATE TRIGGER IF NOT EXISTS taproot_statement_authorization_revisions_no_update\n    BEFORE UPDATE ON taproot_statement_authorization_revisions\n    BEGIN SELECT RAISE(ABORT, 'taproot statement authorization revisions are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_statement_authorization_revisions_no_delete\n    BEFORE DELETE ON taproot_statement_authorization_revisions\n    BEGIN SELECT RAISE(ABORT, 'taproot statement authorization revisions are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_statement_authorization_revisions_no_replace\n    BEFORE INSERT ON taproot_statement_authorization_revisions\n    WHEN EXISTS (\n      SELECT 1 FROM taproot_statement_authorization_revisions\n      WHERE entity_id = NEW.entity_id AND source_revision = NEW.source_revision\n        AND statement_id = NEW.statement_id\n    )\n    BEGIN SELECT RAISE(ABORT, 'taproot statement authorization revisions cannot be replaced'); END", "CREATE TRIGGER IF NOT EXISTS taproot_authorization_admin_audit_no_update\n    BEFORE UPDATE ON taproot_authorization_admin_audit\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization administration audit is immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_authorization_admin_audit_no_delete\n    BEFORE DELETE ON taproot_authorization_admin_audit\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization administration audit is immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_authorization_admin_audit_no_replace\n    BEFORE INSERT ON taproot_authorization_admin_audit\n    WHEN EXISTS (\n      SELECT 1 FROM taproot_authorization_admin_audit\n      WHERE sequence = NEW.sequence OR audit_id = NEW.audit_id\n    )\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization administration audit cannot be replaced'); END", "CREATE TRIGGER IF NOT EXISTS taproot_installation_authorization_advances_no_update\n    BEFORE UPDATE ON taproot_installation_authorization_advances\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization advances are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_installation_authorization_advances_no_delete\n    BEFORE DELETE ON taproot_installation_authorization_advances\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization advances are immutable'); END", "CREATE TRIGGER IF NOT EXISTS taproot_installation_authorization_advances_no_replace\n    BEFORE INSERT ON taproot_installation_authorization_advances\n    WHEN EXISTS (\n      SELECT 1 FROM taproot_installation_authorization_advances\n      WHERE advance_id = NEW.advance_id\n    )\n    BEGIN SELECT RAISE(ABORT, 'taproot authorization advances cannot be replaced'); END", "INSERT INTO taproot_metadata(metadata_key, metadata_value)\n    VALUES ('schema_version', '3')\n    ON CONFLICT(metadata_key) DO UPDATE SET metadata_value = excluded.metadata_value", "INSERT INTO taproot_migrations(version, name)\n    VALUES (4, 'canonical-authorization-policy')\n    ON CONFLICT(version) DO NOTHING"];
 }];
 export interface TaprootMigrationPlanEntry {
     id: string;
@@ -29,8 +35,8 @@ export declare function inspectTaprootPersistence(db: SqliteDatabaseLike): Promi
 export declare function planTaprootMigrations(db: SqliteDatabaseLike, knownSchema?: Awaited<ReturnType<typeof inspectTaprootSchema>>): Promise<TaprootMigrationPlanEntry[]>;
 export declare function applyTaprootMigrations(db: SqliteDatabaseLike, options?: TaprootMigrationOptions): Promise<TaprootPersistenceInspection>;
 export declare const taprootPersistenceVersions: {
-    readonly schema: "2";
-    readonly canonicalJson: "1";
+    readonly schema: "3";
+    readonly canonicalJson: "2";
     readonly rdfMapping: "2";
 };
 //# sourceMappingURL=migrations.d.ts.map

package/dist/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EAOL,oBAAoB,EAWrB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAE5D,eAAO,MAAM,iBAAiB;;;;;;EAUqB,CAAC;AASpD,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;IACzD,UAAU,EAAE,yBAAyB,EAAE,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsBhE;AAQD,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,kBAAkB,GACrB,OAAO,CAAC,4BAA4B,CAAC,CA6BvC;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,kBAAkB,EACtB,WAAW,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,GAC7D,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAkDtC;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,kBAAkB,EACtB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,4BAA4B,CAAC,CA4JvC;AAyYD,eAAO,MAAM,0BAA0B;;;;CAI7B,CAAC"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EAOL,oBAAoB,EAerB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAE5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EA6CqB,CAAC;AASpD,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;IACzD,UAAU,EAAE,yBAAyB,EAAE,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsBhE;AAQD,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,kBAAkB,GACrB,OAAO,CAAC,4BAA4B,CAAC,CA6BvC;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,kBAAkB,EACtB,WAAW,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,GAC7D,OAAO,CAAC,yBAAyB,EAAE,CAAC,CA8CtC;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,kBAAkB,EACtB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,4BAA4B,CAAC,CAgNvC;AAiZD,eAAO,MAAM,0BAA0B;;;;CAI7B,CAAC"}