@graview/core 0.1.3 → 0.1.4

package/dist/ops/withheld.d.ts

@@ -1,4 +1,5 @@
-import type { Primitive } from "../graph/primitives.js";
+import { type Primitive } from "../graph/primitives.js";
+import { type FieldWriter, type Timeline } from "./served.js";
 import type { Author, Operation } from "./types.js";
 /**
  * A LOG A SEAT MAY NOT FULLY SEE IS REDACTED, NOT GAPPED (FR-16).
@@ -17,6 +18,52 @@ export declare const WITHHELD_AUTHOR: Author;
 export declare function isWithheld(op: Pick<Operation, "withheld">): boolean;
 /** The record ids a primitive touches. */
 export declare function touchedBy(primitive: Primitive): readonly string[];
+/**
+ * WHAT ONE SEAT IS SERVED (FR-55): the judgement a log is redacted by.
+ * `sees` is the seat's sight — the ids it may be told. `shows` is what it
+ * is served: a record it sees, unless a field the record cannot do without
+ * names one it may not see. `served` is a record as the seat receives it,
+ * and `optional` says whether a kind's field may be left off one. A bare
+ * `(id) => boolean` is a lens that clears nothing: a record whose field
+ * names an unseen id is not served at all.
+ */
+export interface SeatLens {
+    readonly sees: (id: string) => boolean;
+    readonly shows: (id: string) => boolean;
+    readonly served: <N extends {
+        readonly id: string;
+        readonly kind: string;
+    }>(node: N) => N | undefined;
+    /** A record as the seat is served it, given who wrote each field's value: the seat's own words are served as written (FR-55). */
+    readonly servedWith: <N extends {
+        readonly id: string;
+        readonly kind: string;
+    }>(node: N, writer: FieldWriter) => N | undefined;
+    /** The seat whose words these are — the person, for an agent acting for one. */
+    readonly actor?: string;
+    readonly optional: (kind: string, field: string) => boolean;
+    /** The kind of a record, by id, when it is known: for a patch, whose primitive does not say. */
+    readonly kindOf: (id: string) => string | undefined;
+    /** The store's graph now and the log that led to it, so an op is judged where it stood (`serveAlong`). */
+    readonly timeline?: Timeline;
+    /**
+     * THIS LENS AS OF NOW, ITS JUDGEMENTS KEPT: each id judged once, each
+     * record served once, for one reading of a store that does not change
+     * while it is read — a log redacted, a snapshot served. A lens follows
+     * the store as it is asked (FR-51); a pinned one is thrown away after the
+     * reading it was made for, so it never answers for a store that moved.
+     */
+    readonly pin?: () => SeatLens;
+}
+/** A lens over a bare sight: it serves a record whole or not at all. */
+export declare function lensOf(seeing: SeatLens | ((id: string) => boolean)): SeatLens;
+/**
+ * WHETHER A VALUE NAMES ANYTHING THE SEAT MAY NOT SEE (FR-55): any string
+ * in it, at any depth, a value or a key, that is an unseen record's id. An
+ * id is minted from a label, so an id a seat is served is the name of what
+ * it was kept from.
+ */
+export declare function namesUnseen(value: unknown, sees: (id: string) => boolean): boolean;
 /**
  * Whether an op touched, read or named anything `sees` says no to: then it
  * is withheld whole, because its sentence ("Book a test drive for Freya")
@@ -26,12 +73,20 @@ export declare function touchesUnseen(op: Operation, sees: (id: string) => boole
 /**
  * THE OP AS A SEAT THAT MAY NOT SEE IT RECEIVES IT. Its id, seq, batch and
  * time stand; who made it, what it meant, the call and the inverse go. Its
- * primitives keep the ones that touch only what the seat sees — a change to
- * a record the seat can see still reaches it, or its copy of the graph
- * would go stale — and its reads and writes keep only seen ids, so an undo
- * the seat asks for is still blocked by it where it should be.
+ * primitives keep the ones that touch only what the seat is served, as it
+ * is served them (FR-55) — a change to a record the seat can see still
+ * reaches it, or its copy of the graph would go stale, and no id of what it
+ * may not see rides along in a field — and its reads and writes keep only
+ * served ids, so an undo the seat asks for is still blocked by it where it
+ * should be.
+ */
+export declare function withhold(op: Operation, seeing: SeatLens | ((id: string) => boolean), served?: readonly Primitive[]): Operation;
+/**
+ * Every op of a log as a seat receives it: what it may see as it is, the
+ * rest withheld in place. An op is withheld when it touches a record the
+ * seat is not served, or names one it may not see ANYWHERE — its call, its
+ * sentence, its author, a field value in a primitive or its inverse
+ * (FR-55). One withheld already is withheld again under this seat's lens.
  */
-export declare function withhold(op: Operation, sees: (id: string) => boolean): Operation;
-/** Every op of a log as a seat receives it: what it may see as it is, the rest withheld in place. */
-export declare function redact(ops: readonly Operation[], sees: (id: string) => boolean): Operation[];
+export declare function redact(ops: readonly Operation[], seeing: SeatLens | ((id: string) => boolean)): Operation[];
 //# sourceMappingURL=withheld.d.ts.map

package/dist/ops/withheld.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"withheld.d.ts","sourceRoot":"","sources":["../../src/ops/withheld.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;;GAQG;AAEH,+DAA+D;AAC/D,eAAO,MAAM,eAAe,4BAA4B,CAAC;AAEzD,0EAA0E;AAC1E,eAAO,MAAM,eAAe,EAAE,MAA4D,CAAC;AAE3F,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,OAAO,CAEnE;AAED,0CAA0C;AAC1C,wBAAgB,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,MAAM,EAAE,CAWjE;AAUD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAInF;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,CAgBhF;AAED,qGAAqG;AACrG,wBAAgB,MAAM,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,EAAE,CAE5F"}
+{"version":3,"file":"withheld.d.ts","sourceRoot":"","sources":["../../src/ops/withheld.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,EAAc,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;;GAQG;AAEH,+DAA+D;AAC/D,eAAO,MAAM,eAAe,4BAA4B,CAAC;AAEzD,0EAA0E;AAC1E,eAAO,MAAM,eAAe,EAAE,MAA4D,CAAC;AAE3F,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,OAAO,CAEnE;AAED,0CAA0C;AAC1C,wBAAgB,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,MAAM,EAAE,CAWjE;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IACtG,iIAAiI;IACjI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,SAAS,CAAC;IAC/H,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5D,gGAAgG;IAChG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD,0GAA0G;IAC1G,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,QAAQ,CAAC;CAC/B;AAMD,wEAAwE;AACxE,wBAAgB,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,QAAQ,CAW7E;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAalF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAInF;AAwCD;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAsB9H;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,EAAE,CAmB3G"}

package/dist/ops/withheld.js

@@ -1,3 +1,6 @@
+import { UNSET } from "../graph/primitives.js";
+import { actingAs } from "../permissions/policy.js";
+import { serveAlong } from "./served.js";
 /**
  * A LOG A SEAT MAY NOT FULLY SEE IS REDACTED, NOT GAPPED (FR-16).
  *
@@ -28,17 +31,47 @@ export function touchedBy(primitive) {
             return [primitive.edge.from, primitive.edge.to];
     }
 }
-/** Every string a call's arguments hold, at any depth: where a record's id would be. */
-function strings(value, into = []) {
+/** Whether any field of a record — not its id or kind — names what `sees` says no to. */
+const fieldsNameUnseen = (node, sees) => Object.entries(node).some(([key, value]) => key !== "id" && key !== "kind" && namesUnseen(value, sees));
+/** A lens over a bare sight: it serves a record whole or not at all. */
+export function lensOf(seeing) {
+    if (typeof seeing !== "function")
+        return seeing;
+    const sees = seeing;
+    return {
+        sees,
+        shows: sees,
+        served: (node) => (sees(node.id) && !fieldsNameUnseen(node, sees) ? node : undefined),
+        servedWith: (node) => (sees(node.id) && !fieldsNameUnseen(node, sees) ? node : undefined),
+        optional: () => false,
+        kindOf: () => undefined,
+    };
+}
+/**
+ * WHETHER A VALUE NAMES ANYTHING THE SEAT MAY NOT SEE (FR-55): any string
+ * in it, at any depth, a value or a key, that is an unseen record's id. An
+ * id is minted from a label, so an id a seat is served is the name of what
+ * it was kept from.
+ */
+export function namesUnseen(value, sees) {
     if (typeof value === "string")
-        into.push(value);
-    else if (Array.isArray(value))
-        for (const inner of value)
-            strings(inner, into);
-    else if (value !== null && typeof value === "object")
-        for (const inner of Object.values(value))
-            strings(inner, into);
-    return into;
+        return !sees(value);
+    if (value === null || typeof value !== "object")
+        return false;
+    // Walked without copying: a served log asks this of every op in it.
+    if (Array.isArray(value)) {
+        for (let at = 0; at < value.length; at++)
+            if (namesUnseen(value[at], sees))
+                return true;
+        return false;
+    }
+    for (const key in value) {
+        if (!Object.hasOwn(value, key))
+            continue;
+        if (!sees(key) || namesUnseen(value[key], sees))
+            return true;
+    }
+    return false;
 }
 /**
  * Whether an op touched, read or named anything `sees` says no to: then it
@@ -50,17 +83,62 @@ export function touchesUnseen(op, sees) {
         return true;
     if (op.writes.some((id) => !sees(id)) || op.reads.some((id) => !sees(id)))
         return true;
-    return op.mutation !== null && strings(op.mutation.args).some((value) => !sees(value));
+    return op.mutation !== null && namesUnseen(op.mutation.args, sees);
+}
+/**
+ * A PRIMITIVE AS A SEAT RECEIVES IT, or nothing (FR-55). One that touches a
+ * record the seat is not served goes. A record it adds is served as the
+ * seat's view serves it — a field naming an unseen record cleared, or the
+ * primitive dropped when that field is one the record cannot do without,
+ * so a client never adds a record that fails its own declaration. A patch
+ * that wrote such a field says the field was cleared, as the view shows
+ * it; one it cannot clear goes. A removal needs only the record's id.
+ */
+function servedPrimitive(primitive, lens) {
+    if (!touchedBy(primitive).every(lens.shows))
+        return undefined;
+    switch (primitive.op) {
+        case "add-node": {
+            const node = lens.served(primitive.node);
+            return node ? (node === primitive.node ? primitive : { op: "add-node", node }) : undefined;
+        }
+        case "remove-node": {
+            const node = primitive.node;
+            if (!fieldsNameUnseen(node, lens.sees))
+                return primitive;
+            return { op: "remove-node", node: Object.fromEntries(Object.entries(node).filter(([key, value]) => key === "id" || key === "kind" || !namesUnseen(value, lens.sees))) };
+        }
+        case "patch-node": {
+            const kind = lens.kindOf(primitive.id);
+            const after = {};
+            for (const [field, value] of Object.entries(primitive.after)) {
+                if (!namesUnseen(value, lens.sees))
+                    after[field] = value;
+                else if (kind !== undefined && lens.optional(kind, field))
+                    after[field] = UNSET;
+                else
+                    return undefined;
+            }
+            const before = Object.fromEntries(Object.entries(primitive.before).filter(([, value]) => !namesUnseen(value, lens.sees)));
+            return { op: "patch-node", id: primitive.id, before, after };
+        }
+        case "add-edge":
+        case "remove-edge":
+            return namesUnseen(primitive.edge, lens.sees) ? undefined : primitive;
+    }
 }
 /**
  * THE OP AS A SEAT THAT MAY NOT SEE IT RECEIVES IT. Its id, seq, batch and
  * time stand; who made it, what it meant, the call and the inverse go. Its
- * primitives keep the ones that touch only what the seat sees — a change to
- * a record the seat can see still reaches it, or its copy of the graph
- * would go stale — and its reads and writes keep only seen ids, so an undo
- * the seat asks for is still blocked by it where it should be.
+ * primitives keep the ones that touch only what the seat is served, as it
+ * is served them (FR-55) — a change to a record the seat can see still
+ * reaches it, or its copy of the graph would go stale, and no id of what it
+ * may not see rides along in a field — and its reads and writes keep only
+ * served ids, so an undo the seat asks for is still blocked by it where it
+ * should be.
  */
-export function withhold(op, sees) {
+export function withhold(op, seeing, served) {
+    const lens = lensOf(seeing);
     return {
         id: op.id,
         seq: op.seq,
@@ -68,17 +146,115 @@ export function withhold(op, sees) {
         author: WITHHELD_AUTHOR,
         intent: WITHHELD_INTENT,
         mutation: null,
-        primitives: op.primitives.filter((primitive) => touchedBy(primitive).every(sees)),
+        primitives: served ??
+            op.primitives.flatMap((primitive) => {
+                const one = servedPrimitive(primitive, lens);
+                return one ? [one] : [];
+            }),
         inverse: [],
-        reads: op.reads.filter(sees),
-        writes: op.writes.filter(sees),
+        reads: op.reads.filter((id) => lens.shows(id) && isRecord(lens, id)),
+        writes: op.writes.filter((id) => lens.shows(id) && isRecord(lens, id)),
         at: op.at,
         ...(op.undoes !== undefined ? { undoes: op.undoes } : {}),
         withheld: true,
     };
 }
-/** Every op of a log as a seat receives it: what it may see as it is, the rest withheld in place. */
-export function redact(ops, sees) {
-    return ops.map((op) => (op.withheld || !touchesUnseen(op, sees) ? op : withhold(op, sees)));
+/**
+ * Every op of a log as a seat receives it: what it may see as it is, the
+ * rest withheld in place. An op is withheld when it touches a record the
+ * seat is not served, or names one it may not see ANYWHERE — its call, its
+ * sentence, its author, a field value in a primitive or its inverse
+ * (FR-55). One withheld already is withheld again under this seat's lens.
+ */
+export function redact(ops, seeing) {
+    // One reading of the store, whatever its length: every id and record judged once in it.
+    const given = lensOf(seeing);
+    const lens = given.pin?.() ?? given;
+    /*
+     * ALONG THE STORE'S HISTORY, when the lens knows it: each primitive judged
+     * by whether its record was served just before it and just after, so the
+     * ops a seat is served fold to the snapshot it is served (`serveAlong`).
+     */
+    if (lens.timeline) {
+        const judge = {
+            served: (node, writer) => lens.servedWith(node, writer),
+            edgeClean: (edge) => !namesUnseen(edge, lens.sees),
+            sees: lens.sees,
+            names: (value) => namesUnseen(value, lens.sees),
+        };
+        return serveAlong(ops, lens.timeline, judge).map(({ op, primitives, faithful }) => (!op.withheld && faithful ? whole(op, lens, primitives) : undefined) ?? withhold(op, lens, primitives));
+    }
+    return ops.map((op) => (!op.withheld && !touchesUnseen(op, lens.shows) ? whole(op, lens) : undefined) ?? withhold(op, lens));
+}
+/**
+ * AN OP SERVED WHOLE, when what it did is all the seat's to know: as it is
+ * when it names nothing hidden, and with its reads and writes trimmed of
+ * what is hidden when that is the only place it does — what it looked at
+ * is not the seat's to be told, what it did is. A string its primitives are
+ * served with, as the seat is served them, is the seat's to read anywhere
+ * in it — a field value the seat wrote, in a patch and in the inverse that
+ * would put it back — and so is its call, when the call was the seat's own
+ * (FR-55). Otherwise its call, sentence, author and inverse are not
+ * trimmed: an act's sentence is made from its call ("Compare with Freya
+ * Davies"), so one that names a hidden record anywhere withholds the op.
+ */
+function whole(op, lens, served) {
+    /*
+     * WHAT IT READ, AS RECORDS THE SEAT SEES (FR-55). An act that looked for a
+     * record that is not there read its absence, and one that looked for a
+     * hidden one read nothing the seat may be told: both are left out alike,
+     * or the reads of a seat's own act would say which guess was real.
+     */
+    const kept = (id) => lens.sees(id) && isRecord(lens, id);
+    const reads = op.reads.filter(kept);
+    const writes = op.writes.filter(kept);
+    const tidy = reads.length === op.reads.length && writes.length === op.writes.length ? op : { ...op, reads, writes };
+    /*
+     * ANOTHER AUTHOR'S SENTENCE, ONLY IF ITS READER SEES WHAT IT READ. A
+     * sentence names records by their labels, which no id check catches;
+     * the op says which records its `describe` read, and a seat that may not
+     * see one of them is served the op withheld. The seat's own sentences
+     * were worded from its own view.
+     */
+    const own = lens.actor !== undefined && actingAs(op.author).id === lens.actor;
+    if (!own && op.described?.some((id) => !lens.sees(id)))
+        return undefined;
+    if (!namesUnseen(op, lens.sees))
+        return tidy;
+    const said = new Set();
+    const collect = (value) => {
+        if (typeof value === "string")
+            said.add(value);
+        else if (Array.isArray(value))
+            for (const inner of value)
+                collect(inner);
+        else if (value !== null && typeof value === "object")
+            for (const [key, inner] of Object.entries(value)) {
+                said.add(key);
+                collect(inner);
+            }
+    };
+    /*
+     * THE SEAT'S OWN WORDS EXCUSE ONLY WHAT IT WROTE. A value the primitives
+     * are served with (the seat wrote it, or it would have been cleared) may
+     * stand in the inverse that puts it back; the call may name what the
+     * seat said only when the call is the seat's own. Another author's call,
+     * sentence and name are judged by sight alone, whatever the seat wrote.
+     */
+    if (served)
+        collect(served);
+    const told = (id) => lens.sees(id) || said.has(id);
+    if (namesUnseen(tidy.inverse, told))
+        return undefined;
+    if (own) {
+        if (op.mutation)
+            collect(op.mutation.args);
+        return namesUnseen({ ...tidy, primitives: [], inverse: [] }, told) ? undefined : tidy;
+    }
+    return namesUnseen({ ...tidy, primitives: [], inverse: [] }, lens.sees) ? undefined : tidy;
+}
+/** Whether an id names a record the store knows — in the graph or its log — when the lens can say; a bare sight cannot, and keeps every id. */
+function isRecord(lens, id) {
+    return lens.timeline === undefined || lens.kindOf(id) !== undefined;
 }
 //# sourceMappingURL=withheld.js.map

package/dist/ops/withheld.js.map

@@ -1 +1 @@
-{"version":3,"file":"withheld.js","sourceRoot":"","sources":["../../src/ops/withheld.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAE3F,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,EAA+B;IACxD,OAAO,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC9B,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,SAAS,CAAC,SAAoB;IAC5C,QAAQ,SAAS,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,KAAK,YAAY;YACf,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAS,OAAO,CAAC,KAAc,EAAE,OAAiB,EAAE;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,MAAM,KAAK,IAAI,KAAK;YAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;SAC1E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAa,EAAE,IAA6B;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAa,EAAE,IAA6B;IACnE,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjF,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,MAAM,CAAC,GAAyB,EAAE,IAA6B;IAC7E,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC"}
+{"version":3,"file":"withheld.js","sourceRoot":"","sources":["../../src/ops/withheld.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAkB,MAAM,wBAAwB,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAmC,MAAM,aAAa,CAAC;AAG1E;;;;;;;;GAQG;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAE3F,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,EAA+B;IACxD,OAAO,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC9B,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,SAAS,CAAC,SAAoB;IAC5C,QAAQ,SAAS,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,KAAK,YAAY;YACf,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAkCD,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,IAA6B,EAAW,EAAE,CAChF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,IAAI,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1G,wEAAwE;AACxE,MAAM,UAAU,MAAM,CAAC,MAA4C;IACjE,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC;IACpB,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,IAA6B;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,oEAAoE;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE;YAAE,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAa,EAAE,IAA6B;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,WAAW,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,SAAoB,EAAE,IAAc;IAC3D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,QAAQ,SAAS,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzD,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAgB,EAAE,CAAC;QACzL,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,KAAK,GAA4B,EAAE,CAAC;YAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;qBACpD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;oBAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;;oBAC3E,OAAO,SAAS,CAAC;YACxB,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1H,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC/D,CAAC;QACD,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAa,EAAE,MAA4C,EAAE,MAA6B;IACjH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,MAAM;YACN,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;gBAClC,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC7C,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,CAAC,CAAC;QACJ,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtE,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,GAAyB,EAAE,MAA4C;IAC5F,wFAAwF;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,KAAK,CAAC;IACpC;;;;OAIG;IACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,CAAC,IAAkB,EAAE,MAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;YAClF,SAAS,EAAE,CAAC,IAAe,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;YAC7D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;SACzD,CAAC;QACF,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7L,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/H,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,KAAK,CAAC,EAAa,EAAE,IAAc,EAAE,MAA6B;IACzE;;;;;OAKG;IACH,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpH;;;;;;OAMG;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAmB,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC;IAC3F,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,KAAc,EAAQ,EAAE;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;aAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,MAAM,KAAK,IAAI,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;aACpE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;IACH,CAAC,CAAC;IACF;;;;;;OAMG;IACH,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3D,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,EAAE,CAAC,QAAQ;YAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,CAAC;IACD,OAAO,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,+IAA+I;AAC/I,SAAS,QAAQ,CAAC,IAAc,EAAE,EAAU;IAC1C,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;AACtE,CAAC"}

package/dist/ops/writers.d.ts

@@ -0,0 +1,29 @@
+import type { Operation } from "./types.js";
+/**
+ * WHO WROTE EACH FIELD'S VALUE, AND WHEN (FR-55).
+ *
+ * A seat is served its own words: a field whose value the seat wrote is
+ * served as written even when it names a record the seat may not see,
+ * because saying back what a seat said tells it nothing — and judging it
+ * like anybody else's would tell a seat that guessed an id whether the
+ * guess was real. So the seat view has to know who wrote a field's value,
+ * at the moment it is served and at every moment of the log it serves.
+ *
+ * Each op that writes a field is an entry: the seq, and the seat that wrote
+ * it — the person, for an agent acting for one. An undo is never the
+ * author of what it puts back: the value it restores is the words of
+ * whoever wrote it before the op it takes back. Kept as the log goes, like
+ * `recordsOf`: a call reads only the ops appended since the last, a log cut
+ * back takes out what its cut ops wrote, and a log compacted behind its
+ * horizon keeps what was read before it.
+ */
+export interface Writers {
+    /** Who wrote the value a field held just before op `seq` ran; `undefined` when nobody this log knows. */
+    writerAt(id: string, field: string, seq: number): string | undefined;
+}
+/** Who wrote each field's value in a log, kept as the log goes (see `Writers`). */
+export declare function writersOf(log: {
+    all(): readonly Operation[];
+    readonly length?: number;
+}): Writers;
+//# sourceMappingURL=writers.d.ts.map

package/dist/ops/writers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writers.d.ts","sourceRoot":"","sources":["../../src/ops/writers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,OAAO;IACtB,yGAAyG;IACzG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACtE;AAiFD,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,GAAG,EAAE;IAAE,GAAG,IAAI,SAAS,SAAS,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAoBjG"}

package/dist/ops/writers.js

@@ -0,0 +1,98 @@
+import { isUnset } from "../graph/primitives.js";
+import { actingAs } from "../permissions/policy.js";
+const keyOf = (id, field) => `${id}\u0000${field}`;
+const INDEXES = new WeakMap();
+function indexFrom(base) {
+    const fields = new Map();
+    const writerAt = (id, field, seq) => {
+        const entries = fields.get(keyOf(id, field));
+        if (!entries)
+            return undefined;
+        let low = 0;
+        let high = entries.length;
+        while (low < high) {
+            const middle = (low + high) >> 1;
+            if (entries[middle].seq < seq)
+                low = middle + 1;
+            else
+                high = middle;
+        }
+        return low === 0 ? undefined : entries[low - 1].by;
+    };
+    return { base, end: base, read: [], fields, written: [], seqOf: new Map(), writers: { writerAt } };
+}
+/** The fields one primitive writes, by record. */
+function writtenBy(primitive) {
+    if (primitive.op === "add-node")
+        return [primitive.node.id, Object.keys(primitive.node).filter((field) => field !== "id" && field !== "kind")];
+    if (primitive.op === "patch-node")
+        return [primitive.id, Object.keys(primitive.after).filter((field) => !isUnset(primitive.after[field]))];
+    return undefined;
+}
+function readInto(index, op) {
+    const seq = index.end;
+    const author = actingAs(op.author).id;
+    // What an undo puts back is the words of whoever wrote them before the op it takes back.
+    const undone = op.undoes !== undefined ? index.seqOf.get(op.undoes) : undefined;
+    const keys = [];
+    for (const primitive of op.primitives) {
+        const written = writtenBy(primitive);
+        if (!written)
+            continue;
+        const [id, fields] = written;
+        for (const field of fields) {
+            const by = op.undoes === undefined ? author : undone !== undefined ? index.writers.writerAt(id, field, undone) : undefined;
+            const key = keyOf(id, field);
+            let entries = index.fields.get(key);
+            if (!entries)
+                index.fields.set(key, (entries = []));
+            entries.push({ seq, by });
+            keys.push(key);
+        }
+    }
+    index.written.push({ seq, keys });
+    index.seqOf.set(op.id, seq);
+    index.read.push(op);
+    index.end++;
+}
+function cutBack(index, seq) {
+    while (index.written.length > 0 && index.written.at(-1).seq >= seq) {
+        const { keys } = index.written.pop();
+        for (const key of keys)
+            index.fields.get(key)?.pop();
+    }
+    for (const op of index.read.slice(seq - index.base))
+        index.seqOf.delete(op.id);
+    index.read.length = seq - index.base;
+    index.end = seq;
+}
+/** Who wrote each field's value in a log, kept as the log goes (see `Writers`). */
+export function writersOf(log) {
+    const ops = log.all();
+    const end = typeof log.length === "number" ? log.length : ops.length;
+    const first = end - ops.length;
+    let index = INDEXES.get(log);
+    if (index && index.base <= first && first <= index.end) {
+        let agreed = Math.min(index.end, end);
+        while (agreed > first && ops[agreed - 1 - first] !== index.read[agreed - 1 - index.base])
+            agreed--;
+        if (agreed === first && first > index.base && agreed < index.end)
+            index = undefined;
+        else {
+            if (agreed < index.end)
+                cutBack(index, agreed);
+            if (first > index.base) {
+                index.read = index.read.slice(first - index.base);
+                index.base = first;
+            }
+        }
+    }
+    else
+        index = undefined;
+    if (!index)
+        INDEXES.set(log, (index = indexFrom(first)));
+    for (let seq = index.end; seq < end; seq++)
+        readInto(index, ops[seq - first]);
+    return index.writers;
+}
+//# sourceMappingURL=writers.js.map

package/dist/ops/writers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writers.js","sourceRoot":"","sources":["../../src/ops/writers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAkB,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AA2CpD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,KAAa,EAAU,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,EAAE,CAAC;AAE3E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAiB,CAAC;AAE7C,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,KAAa,EAAE,GAAW,EAAsB,EAAE;QAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1B,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,MAAM,CAAE,CAAC,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC;;gBAC5C,IAAI,GAAG,MAAM,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;IACtD,CAAC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;AACrG,CAAC;AAED,kDAAkD;AAClD,SAAS,SAAS,CAAC,SAAoB;IACrC,IAAI,SAAS,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC;IAC/I,IAAI,SAAS,CAAC,EAAE,KAAK,YAAY;QAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3I,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAY,EAAE,EAAa;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,MAAmB,CAAC,CAAC,EAAE,CAAC;IACnD,yFAAyF;IACzF,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,SAAS,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3H,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,KAAK,CAAC,GAAG,EAAE,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAY,EAAE,GAAW;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QACpE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;IACrC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;AAClB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,GAA8D;IACtF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACrE,MAAM,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IAC/B,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACvD,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO,MAAM,GAAG,KAAK,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,EAAE,CAAC;QACnG,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG;YAAE,KAAK,GAAG,SAAS,CAAC;aAC/E,CAAC;YACJ,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG;gBAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClD,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;;QAAM,KAAK,GAAG,SAAS,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzD,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,GAAG,KAAK,CAAE,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC"}

package/dist/permissions/sight.d.ts

@@ -1,3 +1,4 @@
+import type { Epoch } from "../ops/log.js";
 import type { Operation } from "../ops/types.js";
 import type { Policy, Principal } from "./types.js";
 /** The edges a graph can be asked about, to say what is joined to whom. */
@@ -25,6 +26,8 @@ export interface RecordedLog {
     all(): readonly Operation[];
     /** The seq the next op takes, counting what a compaction archived; without it, the ops it holds. */
     readonly length?: number;
+    /** Its epochs, for a log compacted behind a checkpoint that names who made what behind it (`Epoch.creators`). */
+    epochs?(): readonly Epoch[];
 }
 /**
  * The records a log names, read from its add- and remove-node primitives.
@@ -38,12 +41,22 @@ export interface RecordedLog {
  * is taken out, back to where the log and the index still agree. A log
  * compacted behind its horizon (FR-23) keeps what the index had already
  * read of the archived ops, so a record made behind the horizon is still
- * known by its maker for as long as this log is open; a log OPENED
- * compacted never read them, and knows its makers from the horizon on.
+ * known by its maker for as long as this log is open. A log OPENED
+ * compacted never read them: it knows them from its checkpoint, which keeps
+ * who made each record behind it (`Epoch.creators`, written by
+ * `store.checkpoint`), and a checkpoint without that (one written before it
+ * existed) leaves it knowing its makers from the horizon on.
  * The `Records` returned is the same object every time, and answers as of
  * the last call.
  */
 export declare function recordsOf(log: RecordedLog): Records;
+/**
+ * WHO MADE EACH RECORD BEFORE `seq`, as a checkpoint at `seq` keeps it
+ * (`Epoch.creators`): record id to the seat that first added it, in the
+ * order they were made — what the log's checkpoint already kept, then what
+ * the ops it holds before `seq` add.
+ */
+export declare function creatorsBefore(log: RecordedLog, seq: number): Record<string, string>;
 /**
  * Whether a principal may see one record.
  *

package/dist/permissions/sight.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sight.d.ts","sourceRoot":"","sources":["../../src/permissions/sight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAS,MAAM,YAAY,CAAC;AAE3D,2EAA2E;AAC3E,UAAU,MAAM;IACd,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpD,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACpD;AAKD,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAE5E;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACvC,wFAAwF;IACxF,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,0GAA0G;AAC1G,MAAM,WAAW,WAAW;IAC1B,GAAG,IAAI,SAAS,SAAS,EAAE,CAAC;IAC5B,oGAAoG;IACpG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AA0DD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAwBnD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,IAAI,CAClB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACpD,KAAK,EAAE,MAAM;AACb,gFAAgF;AAChF,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,GACnC,OAAO,CAmBT"}
+{"version":3,"file":"sight.d.ts","sourceRoot":"","sources":["../../src/permissions/sight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAS,MAAM,YAAY,CAAC;AAE3D,2EAA2E;AAC3E,UAAU,MAAM;IACd,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpD,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACpD;AAKD,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAE5E;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACvC,wFAAwF;IACxF,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,0GAA0G;AAC1G,MAAM,WAAW,WAAW;IAC1B,GAAG,IAAI,SAAS,SAAS,EAAE,CAAC;IAC5B,oGAAoG;IACpG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,iHAAiH;IACjH,MAAM,CAAC,IAAI,SAAS,KAAK,EAAE,CAAC;CAC7B;AA2DD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAwBnD;AAQD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUpF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,IAAI,CAClB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACpD,KAAK,EAAE,MAAM;AACb,gFAAgF;AAChF,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,GACnC,OAAO,CAmBT"}

package/dist/permissions/sight.js

@@ -5,9 +5,10 @@ export function sightedKinds(policy) {
     return new Set((policy?.sees ?? []).flatMap((sight) => sight.kinds));
 }
 const INDEXES = new WeakMap();
-function indexFrom(base) {
+/** A fresh index for a log that begins at seq `base`, knowing the makers its checkpoint kept behind it. */
+function indexFrom(base, behind) {
     const kinds = new Map();
-    const creators = new Map();
+    const creators = new Map(Object.entries(behind ?? {}));
     return { base, end: base, read: [], kinds, creators, entries: [], records: { kindOf: (id) => kinds.get(id), creatorOf: (id) => creators.get(id) } };
 }
 /** Reads one op into the index: the kind of each record it first adds or removes, and who first made one. */
@@ -53,8 +54,11 @@ function cutBack(index, seq) {
  * is taken out, back to where the log and the index still agree. A log
  * compacted behind its horizon (FR-23) keeps what the index had already
  * read of the archived ops, so a record made behind the horizon is still
- * known by its maker for as long as this log is open; a log OPENED
- * compacted never read them, and knows its makers from the horizon on.
+ * known by its maker for as long as this log is open. A log OPENED
+ * compacted never read them: it knows them from its checkpoint, which keeps
+ * who made each record behind it (`Epoch.creators`, written by
+ * `store.checkpoint`), and a checkpoint without that (one written before it
+ * existed) leaves it knowing its makers from the horizon on.
  * The `Records` returned is the same object every time, and answers as of
  * the last call.
  */
@@ -85,11 +89,36 @@ export function recordsOf(log) {
     else
         index = undefined;
     if (!index)
-        INDEXES.set(log, (index = indexFrom(first)));
+        INDEXES.set(log, (index = indexFrom(first, first > 0 ? checkpointOf(log, first)?.creators : undefined)));
     for (let seq = index.end; seq < end; seq++)
         readInto(index, ops[seq - first]);
     return index.records;
 }
+/** The checkpoint a log compacted at `seq` begins from: the last epoch marked `horizon`, when it is there. */
+function checkpointOf(log, seq) {
+    const checkpoint = [...(log.epochs?.() ?? [])].reverse().find((epoch) => epoch.horizon);
+    return checkpoint?.seq === seq ? checkpoint : undefined;
+}
+/**
+ * WHO MADE EACH RECORD BEFORE `seq`, as a checkpoint at `seq` keeps it
+ * (`Epoch.creators`): record id to the seat that first added it, in the
+ * order they were made — what the log's checkpoint already kept, then what
+ * the ops it holds before `seq` add.
+ */
+export function creatorsBefore(log, seq) {
+    recordsOf(log);
+    const index = INDEXES.get(log);
+    const after = new Set();
+    for (let at = index.entries.length - 1; at >= 0 && index.entries[at].seq >= seq; at--) {
+        if (index.entries[at].creator)
+            after.add(index.entries[at].id);
+    }
+    const creators = {};
+    for (const [id, by] of index.creators)
+        if (!after.has(id))
+            creators[id] = by;
+    return creators;
+}
 /**
  * Whether a principal may see one record.
  *