@haverstack/core 0.33.0 → 0.36.0

package/dist/stack.d.ts

@@ -13,8 +13,8 @@
  *
  * Apps should never talk to a StackAdapter directly.
  */
-import type { StackRecord, StackType, TypeSchema, TypeId, StackAdapter, StackQuery, QueryResult, Association, Permission, Migration, RecordVersion, StackFeatures, GrantAction, AttachmentContent, FileId, EntityId, AppId, TokenSession, ActorOptions, RecordChange, RecordChanges, SubscribeOptions, Unsubscribe, JournalQuery, RecordJournalEntry } from './types.js';
-import type { GrantTarget } from './grants.js';
+import type { StackRecord, StackType, TypeSchema, TypeId, StackAdapter, StackQuery, QueryResult, AuthorityAssociation, DataAssociation, Migration, RecordVersion, StackFeatures, GrantAction, AttachmentContent, FileId, EntityId, AppId, TokenSession, ActorOptions, RecordChange, RecordChanges, SubscribeOptions, Unsubscribe, JournalQuery, RecordJournalEntry } from './types.js';
+import type { GrantQuery, GrantTarget } from './grants.js';
 import { ScopedStack } from './scoped-stack.js';
 export type CreateRecordOptions = {
     /**
@@ -34,8 +34,8 @@ export type CreateRecordOptions = {
      * reconstructing a delegated write. See StackRecord.principalId.
      */
     principalId?: EntityId;
-    permissions?: Permission[];
-    associations?: Association[];
+    permissions?: AuthorityAssociation[];
+    associations?: DataAssociation[];
     /**
      * Create the record already unlisted, so the create event itself is
      * withheld from the feed — there is no window where the record exists
@@ -46,16 +46,11 @@ export type CreateRecordOptions = {
 };
 /**
  * CreateRecordOptions extended with createdAt/updatedAt, for backdating a
- * record's clock fields on import (e.g. migrating an existing archive with
- * its original dates). Accepted unconditionally by unscoped Stack.create().
- * ScopedStack.create() accepts the same two fields, but only from the
- * stack owner acting alone (undelegated, authenticated as themselves) — a
- * grantee, or a delegated app acting for the owner, is refused, since
- * either could otherwise forge a sort position the same way a raw `id`
- * could. A server built on ScopedStack inherits this automatically: an
- * owner-authenticated `POST /records` may carry both fields; anyone else's
- * request has them ignored, as before. See docs/spec/data-model.md §
- * Record IDs and docs/spec/wire-format.md § Records.
+ * record's clock fields on import. Unscoped Stack.create() accepts them
+ * unconditionally; ScopedStack.create() only from the stack owner acting
+ * alone, since a grantee or a delegated app could otherwise forge a sort
+ * position the same way a raw `id` could.
+ * See docs/spec/data-model.md § Record IDs.
  */
 export type BackdatableCreateRecordOptions = CreateRecordOptions & {
     /**
@@ -138,6 +133,22 @@ export type DeleteRecordOptions = IfVersionOptions & {
     /** If true, permanently remove the record and all its history. Default: false */
     hard?: boolean;
 };
+/**
+ * What a delete reports back. Information, not action: a purge never
+ * touches the blob store, and nothing here is deleted by having been
+ * named. See docs/spec/attachments.md § A purge strands the bytes it
+ * referenced.
+ */
+export type DeleteResult = {
+    /**
+     * The files the purged record referenced — its attachment associations
+     * and its `file-ref` content fields, deduplicated. The purge removes the
+     * only rows naming them, so this is the caller's one chance to hold the
+     * argument `deleteAttachment()` takes. Empty on a soft delete, which
+     * strands nothing: a tombstone's references stand.
+     */
+    referencedFileIds: FileId[];
+};
 export type DefineTypeOptions = {
     migratesFrom?: TypeId;
 };
@@ -165,8 +176,9 @@ export interface StackClient {
     getOwnerEntity(): Promise<StackRecord | null>;
     /**
      * Apply a change set: any combination of content patch, `parentId`,
-     * `permissions`, `associations` and `unlisted`, in one atomic write
-     * producing one version. Keys are read for presence, so `unlisted: false`
+     * `permissions`, `associations` and `unlisted`, in one atomic write —
+     * producing one version where it names `contentPatch`, and none where it
+     * doesn't. Keys are read for presence, so `unlisted: false`
      * and `parentId: null` are changes; a change set naming no key at all is
      * a StackQueryError. Under ScopedStack each key carries its own gate and
      * one refused key refuses the call.
@@ -177,14 +189,22 @@ export interface StackClient {
     patchContent(id: string, patch: Record<string, unknown | null>, opts?: IfVersionOptions): Promise<StackRecord>;
     /**
      * Add an association. Never bumps `version`/`updatedAt` and takes no
-     * `ifVersion` — a set-add composes correctly regardless of write order,
-     * so it needs no OCC precondition. See docs/spec/versioning.md § Version
-     * history.
+     * `ifVersion` — a set-add composes regardless of write order.
+     * See docs/spec/versioning.md § Version history.
      */
-    associate(id: string, association: Association): Promise<StackRecord>;
+    associate(id: string, association: DataAssociation): Promise<StackRecord>;
     /** Remove an association. Never bumps `version`/`updatedAt` — see associate(). */
-    dissociate(id: string, association: Association): Promise<StackRecord>;
-    delete(id: string, opts?: DeleteRecordOptions): Promise<void>;
+    dissociate(id: string, association: DataAssociation): Promise<StackRecord>;
+    /**
+     * Extend who reaches a record by one element — the record-level mirror of
+     * the type-level `grant()`, and the amending spelling of the
+     * `permissions` key, which replaces the whole set. No-bump, like
+     * associate(). See docs/spec/access-control.md § Record-level permissions.
+     */
+    grantAccess(id: string, permission: AuthorityAssociation): Promise<StackRecord>;
+    /** Withdraw one element of who reaches a record — see grantAccess(). */
+    revokeAccess(id: string, permission: AuthorityAssociation): Promise<StackRecord>;
+    delete(id: string, opts?: DeleteRecordOptions): Promise<DeleteResult>;
     undelete(id: string, opts?: IfVersionOptions): Promise<StackRecord>;
     getVersions(id: string): Promise<RecordVersion[]>;
     getVersion(id: string, version: number): Promise<RecordVersion | null>;
@@ -193,15 +213,10 @@ export interface StackClient {
      * A record's change journal, oldest first. On the mutate surface, on the
      * same footing as getVersions() — a plain reader is refused.
      *
-     * **Local adapters only, for now.** There is no wire surface yet, so
-     * over `APIAdapter` this throws `APIAdapterCapabilityError` against any
-     * server, not merely one advertising no journal. It is on this interface
-     * regardless, for the reason the adapter contract requires it rather
-     * than making it optional: an adapter with nothing to read refuses and
-     * names why, so an empty log always means "nothing changed" and never
-     * "this stack does not remember". A caller deserves that refusal over a
-     * method that isn't there. See docs/spec/versioning.md § The change
-     * journal.
+     * Required of every adapter rather than optional, which is why it sits
+     * here beside the rest: an empty log has to mean "nothing changed"
+     * unconditionally, so an adapter with nothing to read refuses and names
+     * why instead. See docs/spec/journal.md § Reading it.
      */
     getJournal(id: string, query?: JournalQuery): Promise<RecordJournalEntry[]>;
     /**
@@ -254,7 +269,7 @@ export declare class Stack implements StackClient {
      * and nothing about work they deferred. A handler cannot fail the write:
      * there is nothing left to fail. See docs/spec/events.md § Handlers.
      */
-    private emitChange;
+    private announce;
     /**
      * The actor for a `create` journal entry, read off the record as just
      * built. Create is the one journaled write that stamps the requester
@@ -389,20 +404,14 @@ export declare class Stack implements StackClient {
      */
     get(id: string, opts?: GetRecordOptions): Promise<StackRecord | null>;
     /**
-     * Apply a change set — content patch, `parentId`, `permissions`,
-     * `associations`, `unlisted`, in any combination — as one atomic write
-     * producing one version and one snapshot. Keys are read for presence, so
-     * `unlisted: false` and `parentId: null` are changes.
-     *
-     * Every key present is checked against the record as it stands, and a
-     * change set already satisfied in all of them writes nothing and returns
-     * the record unchanged. The ops the change event carries are derived
-     * from that same comparison, so naming an aspect without moving it is
-     * never reported as moving it.
+     * Apply a change set as one atomic write — see the StackClient
+     * declaration above for what it accepts. Atomicity is what it is for: a
+     * publish is one act, so nothing it names may half-land.
      *
-     * Content is validated against the record's *current* stored type and
-     * `typeId` never changes (see docs/spec/data-model.md § Type
-     * migrations). See docs/spec/data-model.md § Mutations.
+     * Every key present is checked against the record as it stands, and a set
+     * already satisfied in all of them writes nothing. Content is validated
+     * against the record's *current* stored type; `typeId` never changes here.
+     * See docs/spec/data-model.md § Mutations.
      */
     mutate(id: string, changes: RecordChanges, opts?: IfVersionOptions & ActorOptions): Promise<StackRecord>;
     /**
@@ -424,52 +433,58 @@ export declare class Stack implements StackClient {
      */
     private validateChangeSet;
     /**
-     * Refuse a write that would leave a `_group` Record with no `admin` on
-     * its roster. Asked of the roster the write would *produce* — the one
-     * place a change-set check reads the post-state rather than the
-     * pre-state, because the rule is about what is left behind rather than
-     * what the caller named.
-     *
-     * That framing is the whole of the self-removal question: an `admin`
-     * removing themselves passes while another remains and is refused when
-     * they are the last, and neither case needs to know whose entry went.
+     * Refuse a write that would leave a `_group` Record with no `admin` on its
+     * roster. Asked of the roster the write would *produce*, which is the
+     * whole of the self-removal question: an admin removing themselves passes
+     * while another remains and is refused when they are the last, without
+     * either case naming who is going.
      *
-     * Lives here rather than in `ScopedStack` deliberately. Who may write a
-     * `_group` is a permission question and belongs to the gate up there;
-     * this is an integrity constraint on the Record, so it binds every
-     * requester — the stack owner included, who would otherwise be the hole
-     * that stops anything downstream relying on the invariant.
-     * See docs/spec/identity.md § Group.
+     * An integrity constraint on the Record, not a permission question, so it
+     * lives here rather than in `ScopedStack` and binds every requester — the
+     * stack owner included. See docs/spec/identity.md § Group.
      */
     private assertGroupAdminRemains;
     /**
-     * Add an association to a record. Never bumps `version`/`updatedAt` and
-     * never snapshots — a set-add composes correctly regardless of write
-     * order, so it needs neither the OCC `ifVersion` guards content,
-     * `parentId` and `permissions`, nor the rollback history that guards.
-     * See docs/spec/versioning.md § Version history.
+     * Add an association to a record — no-bump and no snapshot, per the
+     * StackClient declaration above.
      *
      * An association the record already holds, saying the same thing, is a
      * no-op; one matching an existing association's identity but naming a
      * different `attachmentRecordId` — or none, which clears the one stored —
-     * re-points that association in place, rather than adding a second
-     * reference to the same file. The emitted event's `associationsAdded`
-     * carries the association as it now stands either way — a re-point's
-     * old `attachmentRecordId` is not reported anywhere; nothing keeps it
-     * once this call lands. See docs/spec/events.md § The event shape.
-     * Returns the record as it now stands — unchanged on a no-op.
+     * re-points it in place rather than adding a second reference to the same
+     * file. What a re-point overwrote is kept only by the journal, on that
+     * entry's `repoint`. See docs/spec/journal.md § The entry.
+     */
+    associate(id: string, association: DataAssociation, opts?: ActorOptions): Promise<StackRecord>;
+    /**
+     * Remove an association from a record — see associate(). Matched by kind,
+     * label and payload; a no-op if not found. The emitted event names the
+     * association by identity only, since an attachment's
+     * `attachmentRecordId` describes nothing current once it is gone; the
+     * journal is where it survives.
      */
-    associate(id: string, association: Association, opts?: ActorOptions): Promise<StackRecord>;
+    dissociate(id: string, association: DataAssociation, opts?: ActorOptions): Promise<StackRecord>;
     /**
-     * Remove an association from a record. Never bumps `version`/`updatedAt`
-     * — see associate(). Matched by kind, label, and payload. No-op if not
-     * found. The emitted event's `associationsRemoved` names the association
-     * by identity only — an attachment's `attachmentRecordId` is not
-     * repeated there, since it no longer describes anything current. See
-     * docs/spec/events.md § The event shape. Returns the record as it now
-     * stands — unchanged on a no-op.
+     * Extend who reaches a record by one element. The spelling that survives
+     * two admins sharing a record at once: a `permissions` key write replaces
+     * the whole set, so the later of two concurrent ones drops what the
+     * earlier granted. No-bump, like associate(); an element the record
+     * already carries is a no-op.
      */
-    dissociate(id: string, association: Association, opts?: ActorOptions): Promise<StackRecord>;
+    grantAccess(id: string, permission: AuthorityAssociation, opts?: ActorOptions): Promise<StackRecord>;
+    /**
+     * Withdraw one element of who reaches a record — see grantAccess() for
+     * why this is a verb rather than a key write. An element the record does
+     * not carry is a no-op. Returns the record as it now stands.
+     */
+    revokeAccess(id: string, permission: AuthorityAssociation, opts?: ActorOptions): Promise<StackRecord>;
+    /**
+     * Hold a permission set to the cross-element invariant — see
+     * validatePermissions() in access.ts for why it reads the post-state.
+     */
+    private assertPermissionSet;
+    /** The record, or the not-found refusal every mutating verb owes. */
+    private requireRecord;
     /**
      * The checks a *caller-named* destination owes, before the cycle walk:
      * `parentId` is a real, well-formed record id. Format first, so a
@@ -484,24 +499,18 @@ export declare class Stack implements StackClient {
     private assertParentExists;
     /**
      * Refuse an edge that would make a record its own ancestor — asked at
-     * every site that adds one: a change set naming `parentId`, a restore
-     * putting a container back, and a create naming both its own id and a parent. Nothing
-     * downstream (a generator deriving a page path, a folder view) is
-     * written to survive a cycle.
+     * every site that adds one. Nothing downstream (a generator deriving a
+     * page path, a folder view) is written to survive a cycle.
      *
-     * Walks with the unscoped adapter deliberately: a walk that skipped the
-     * links a requester cannot read would let a cycle be assembled through
-     * them and break the invariant for every reader. The walk is bounded
-     * because a chain long enough to exhaust it is already pathological.
+     * Walks with the unscoped adapter: a walk that skipped the links a
+     * requester cannot read would let a cycle be assembled through them and
+     * break the invariant for every reader.
      *
      * Read-then-write, so two moves racing on opposite ends of one chain can
-     * both pass — closing that means the invariant lives in the adapter,
-     * where the write is atomic, which puts a graph constraint in the
-     * storage contract every adapter then implements. Same deferral as
-     * checkBindingUnique() above. Consumers that walk `parentId` should
-     * carry a visited set rather than trust this alone; MAX_PARENT_DEPTH is
-     * the same posture applied here.
-     * See docs/spec/data-model.md § Reparenting.
+     * both pass — the same deferral as checkBindingUnique() above, since
+     * closing it would put a graph constraint in the storage contract.
+     * Consumers walking `parentId` should carry a visited set rather than
+     * trust this alone. See docs/spec/data-model.md § Reparenting.
      */
     private assertNoParentCycle;
     /**
@@ -510,8 +519,22 @@ export declare class Stack implements StackClient {
      * version; a no-op if already deleted. `_config` is never deletable
      * (docs/spec.md § The `_config` record). See docs/spec/versioning.md
      * § Deletion.
+     *
+     * A purge reports the files the record referenced. It deletes none of
+     * them — byte lifetime is not the purged record's to decide — but it
+     * destroys the only rows naming them, so a caller who means to erase the
+     * bytes too has nowhere else to read the argument from afterwards. See
+     * docs/spec/attachments.md § A purge strands the bytes it referenced.
      */
-    delete(id: string, opts?: DeleteRecordOptions & ActorOptions): Promise<void>;
+    delete(id: string, opts?: DeleteRecordOptions & ActorOptions): Promise<DeleteResult>;
+    /**
+     * The files a record references, by the same definition
+     * deleteAttachment() and the garbage sweep use: attachment associations
+     * and top-level `file-ref` content fields. An `_attachment` record's own
+     * `fileId` is a plain string by design and is not one, which is why
+     * purging a metadata record reports nothing — see initSystemTypes().
+     */
+    private referencedFileIds;
     /**
      * Reverse a soft delete. Idempotent — undeleting a record that isn't
      * deleted returns it unchanged. Hard-deleted records are gone, so this
@@ -535,48 +558,33 @@ export declare class Stack implements StackClient {
     private resolveBaseIdFilter;
     getVersions(id: string): Promise<RecordVersion[]>;
     /**
-     * A record's change journal, oldest first — what moved, who moved it,
-     * and the association deltas nothing else retains. The mutation
-     * surface's read, on the same footing as getVersions(): a log of who
-     * changed what, gated on current read access, would make a record's past
-     * exactly as reachable as its present. `ScopedStack` applies that gate;
-     * this layer is unscoped and trusted by definition.
+     * A record's change journal, oldest first — what moved, who moved it, and
+     * the association deltas nothing else retains. `ScopedStack` applies the
+     * mutate-surface gate; this layer is unscoped and trusted by definition.
      *
-     * An adapter with no journal to read refuses rather than answering an
-     * empty log — "nothing changed" and "this stack does not remember" are
-     * not the same answer, and a caller reconstructing an association's
-     * history cannot tell them apart. The refusal is the adapter's own, so
-     * it can name why. See docs/spec/versioning.md § The change journal.
+     * A record that isn't there is StackNotFoundError, a purged one included:
+     * a destroyed log and an empty one are not the same answer.
+     * See docs/spec/journal.md § Reading it.
      */
     getJournal(id: string, query?: JournalQuery): Promise<RecordJournalEntry[]>;
     getVersion(id: string, version: number): Promise<RecordVersion | null>;
     /**
      * Restore a record to a previous version by creating a new version —
      * never rewrites history. The snapshot is validated against its own
-     * stored typeId (not the record's current type), restores `parentId`
-     * (absent on the snapshot is the root, so a restore always settles
-     * containment), and restores neither associations nor permissions. See
-     * docs/spec/versioning.md § Restore semantics.
+     * stored typeId, and puts back `content` and `typeId` alone: a snapshot
+     * carries nothing else. See docs/spec/versioning.md § Restore semantics.
      */
     restoreVersion(id: string, version: number, opts?: IfVersionOptions & ActorOptions): Promise<StackRecord>;
     /**
-     * Commit a per-record migration: replace `content` and `typeId` together
-     * in one step, validated against `toTypeId`'s schema exactly as
-     * create()/mutate() validate against a type's schema. The single-record
-     * counterpart to migrateAll() — content here is supplied by the caller
-     * (computed client-side by the type's owning app, per
-     * docs/spec/wire-format.md § Migration commit) rather than a registered
-     * Migration function. Snapshots the prior state to version history, same
-     * as mutate()/restoreVersion(), and takes the same optional `ifVersion`
-     * precondition every version-bumping mutation takes — checked atomically
-     * at the adapter, not here (see docs/spec/versioning.md § Optimistic
-     * concurrency).
+     * Commit a per-record migration — the single-record counterpart to
+     * migrateAll(), with `content` supplied by the caller rather than by a
+     * registered Migration function. See docs/spec/wire-format.md § Migration
+     * commit.
      *
      * Because `content` is a full replacement written under a new `typeId`,
      * this is create-shaped at the destination *and* update-shaped over the
-     * record as it stands, so it owes both sets of integrity checks — the
-     * binding rules, the attachment rules, and `_config`'s. Missing either
-     * half would make migrate a second, unguarded write path to the same
+     * record as it stands, so it owes both sets of integrity checks. Missing
+     * either half would make migrate a second, unguarded write path to a
      * state create()/mutate() refuse to reach.
      */
     commitMigration(id: string, toTypeId: TypeId, content: Record<string, unknown>, opts?: IfVersionOptions & ActorOptions): Promise<StackRecord>;
@@ -606,18 +614,14 @@ export declare class Stack implements StackClient {
      */
     private checkBindingsOnUpdate;
     /**
-     * Bindings across a migration. `content` is a full replacement rather
-     * than a patch, so there is no "field absent from the patch" case to
-     * exempt: every binding field either keeps its value, moves to a new
-     * one, or is shed by omission — and immutability refuses the last two
-     * whichever family they happen in. Asked across the union of the two
-     * families' binding fields, so a card can neither shed its DID by
-     * migrating out of `_entity`/`_app` nor pick one up on the way in.
+     * Bindings across a migration. `content` is a full replacement, so every
+     * binding field either keeps its value, moves to a new one, or is shed by
+     * omission — and immutability refuses the last two. Asked across the
+     * union of both families' binding fields, so a card can neither shed its
+     * DID by migrating out of `_entity`/`_app` nor pick one up on the way in.
      *
-     * Uniqueness is asked only of the destination family, which is where the
-     * record's claim lives once the write lands, and excludes the record
-     * itself — re-sending the value it already holds claims nothing.
-     * See docs/spec/identity.md § DID bindings.
+     * Uniqueness is asked only of the destination family, excluding the
+     * record itself. See docs/spec/identity.md § DID bindings.
      */
     private checkBindingsOnMigrate;
     /**
@@ -626,16 +630,10 @@ export declare class Stack implements StackClient {
      * claiming one value would leave that lookup without a single answer, and
      * ambiguity is all an impersonating card needs. Enforced here rather than
      * by schema, since uniqueness is a property of the set, not of the value.
-     * Called by the paths that can introduce a binding: create and update.
-     *
-     * Short-circuits on the first clash rather than materialising the family,
-     * so a stack whose `_entity` family is larger than a single scan settles
-     * the common case — the value is already taken — without walking the rest.
      *
-     * Read-then-write, so two creates racing on one value can both pass.
-     * Closing that properly means a unique index over a JSON field, which
-     * each adapter would enforce separately — a decision about where
-     * uniqueness lives, not a local fix.
+     * Read-then-write, so two creates racing on one value can both pass:
+     * closing that means a unique index over a JSON field, which is a
+     * decision about where uniqueness lives rather than a local fix.
      * See docs/spec/identity.md § DID bindings.
      */
     private checkBindingUnique;
@@ -799,9 +797,10 @@ export declare class Stack implements StackClient {
     assertOpen(): void;
     /**
      * Create _grant records authorizing entities to act on records of
-     * specific types; null target writes a default grant (any authenticated
-     * entity); `{ groupId }` targets a `_group` Record's roster instead of a
-     * single entity.
+     * specific types. The target is the grantee the record carries:
+     * `{ kind: 'entity' }` for one DID, `{ kind: 'group' }` for a `_group`
+     * Record's roster at a role, `{ kind: 'authenticated' }` for any
+     * authenticated entity.
      *
      * Granting an **app** a `-own` action does not contain it the way the
      * suffix suggests: when that app acts for someone, `-own` is read as the
@@ -811,32 +810,44 @@ export declare class Stack implements StackClient {
      * needs, not the suffix that looks narrowest. See
      * docs/spec/access-control.md § Delegation: principal and subject.
      *
-     * The grantee lives in content.granteeEntityId / content.granteeGroupId,
-     * not record.entityId. See docs/spec/access-control.md § Type-level
-     * grants.
+     * The grantee lives in content.grantee, not record.entityId. See
+     * docs/spec/access-control.md § Type-level grants.
      */
     grant(target: GrantTarget, grants: Array<{
         actions: GrantAction[];
         typeId: TypeId;
     }>): Promise<StackRecord[]>;
     /**
-     * List _grant records. Omit `target` for all grants; pass null for only
-     * default grants; pass `{ groupId }` for grants naming that exact group;
-     * pass a specific entityId for the grants that currently apply to that
-     * entity (ones naming them, ones naming a group they belong to, plus
-     * every default grant) — the same resolution hasGrant() uses.
+     * List _grant records. Omit `query` for all grants;
+     * `{ kind: 'authenticated' }` for only default grants;
+     * `{ kind: 'group' }` for grants naming that exact group and role, or
+     * `role: 'any'` for every grant naming the group;
+     * `{ kind: 'entity' }` for the grants that currently apply to that entity
+     * (ones naming them, ones naming a group they belong to at a role they
+     * hold, plus every default grant) — the same resolution hasGrant() uses.
+     *
+     * Every arm but `entity` answers identity — what `grant()` would have
+     * written with the same argument. The `entity` arm answers coverage, so
+     * its result is not a preview of what `revoke()` would withdraw.
+     * See docs/spec/access-control.md § Type-level grants.
      */
-    listGrants(target?: GrantTarget): Promise<StackRecord[]>;
+    listGrants(query?: GrantQuery): Promise<StackRecord[]>;
     /**
      * The inverse of grant(): soft-deletes _grant records matching `target`
-     * (null for default grants) and each `{ typeId, actions }` pair, at the
-     * same granularity grant() writes. A soft delete like any other — the
-     * owner can undelete a revocation.
+     * and each `{ typeId, actions }` pair, at the same granularity grant()
+     * writes — the grantee is matched whole, role included. A soft delete
+     * like any other — the owner can undelete a revocation.
+     *
+     * Returns the grants it withdrew, as they stood, so a revocation that
+     * matched nothing says so rather than passing in silence. An empty result
+     * is not an error — a grant already withdrawn or never written is the
+     * ordinary case, and re-running a revocation has to stay safe.
+     * See docs/spec/access-control.md § Type-level grants.
      */
     revoke(target: GrantTarget, grants: Array<{
         actions: GrantAction[];
         typeId: TypeId;
-    }>): Promise<void>;
+    }>): Promise<StackRecord[]>;
     /**
      * Validates the whole grant batch before any record is created, so a bad
      * entry fails clean rather than leaving a partial set written. Actions
@@ -864,13 +875,12 @@ export declare class Stack implements StackClient {
     private writeOptions;
     /**
      * Snapshot of a record's prior state, passed with the mutating adapter
-     * call so snapshot and mutation land in one atomic write. `parentId` is
-     * always present (`null` where the record has none) so restore can
-     * distinguish "at the root" from a snapshot that omits the key entirely
-     * ("leave as-is"). Never carries `associations` — associate()/
-     * dissociate() don't bump, so no version ever snapshots the association
-     * set, and there is nothing for a restore to roll back to. See
-     * docs/spec/versioning.md § Version history.
+     * call so snapshot and mutation land in one atomic write. Carries what
+     * only a snapshot preserves: `content` and the `typeId` it is read
+     * under. Containment, listing and associations — the authority ones
+     * among them — are all kept by the journal instead, so no version ever
+     * snapshots them and there is nothing for a restore to roll them back
+     * to. See docs/spec/versioning.md § Version history.
      */
     private buildVersionSnapshot;
 }

package/dist/stack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiCH,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,MAAM,EACN,YAAY,EACZ,UAAU,EAEV,WAAW,EACX,WAAW,EACX,UAAU,EACV,SAAS,EAET,aAAa,EACb,aAAa,EACb,WAAW,EAEX,iBAAiB,EACjB,MAAM,EAEN,QAAQ,EAER,KAAK,EAEL,YAAY,EACZ,YAAY,EAGZ,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAiCpB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA6B/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqChD,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,kEAAkE;IAClE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AACF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,8BAA8B,GAAG,mBAAmB,GAAG;IACjE;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACjC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG;IACnD,iFAAiF;IACjF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAMF;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChE,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,EACV,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACtE,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC3D,4EAA4E;IAC5E,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC9C;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1F,0EAA0E;IAC1E,YAAY,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC,EACrC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtE,kFAAkF;IAClF,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAClD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3F;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC5E;;;;;;;OAOG;IACH,eAAe,CACb,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,aAAa,CACX,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,KAAK,GACZ,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAC;IACzD,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,wBAAwB,CACtB,IAAI,CAAC,EAAE,+BAA+B,GACrC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3C,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACnG;AAMD,qBAAa,KAAM,YAAW,WAAW;IA2BrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IA3BzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAE1D,6DAA6D;IAC7D,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAE/C,OAAO;IAKP;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAclB;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IAS1B;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS;YAQV,aAAa;IAQ3B;;OAEG;WACU,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,KAAK,CAAC;IAkBnF;;;;;;;;;OASG;YACW,iBAAiB;IAY/B,IAAI,aAAa,IAAI,QAAQ,CAE5B;IAEK,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAI1D,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAInD,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IAED,IAAI,QAAQ,IAAI,aAAa,CAE5B;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,EAAE,IAAI,GAAE,kBAAuB,GAAG,WAAW;IAe/E;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,WAAW;IAQ9C;;;;;;OAMG;IACG,UAAU,CACd,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,SAAS,CAAC;IA8Df,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAKpD,+FAA+F;IACzF,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAOvC;;;OAGG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAWpF;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAQ7C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAqB5B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;;;OAKG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAqDnE;;;;;;;;;;OAUG;IACG,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtE,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,EACV,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,CAAC,CAAA;KAAE,CAAC;IA8IxC;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IA4BvB;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAO/E;;;;;;;;;;;;;;;OAeG;IACG,MAAM,CACV,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IAkEvB;;;;OAIG;IACG,YAAY,CAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC,EACrC,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IAIvB;;;;;;;;;;OAUG;YACW,iBAAiB;IAwE/B;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,uBAAuB;IAS/B;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CACb,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,WAAW,EACxB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC;IA8BvB;;;;;;;;OAQG;IACG,UAAU,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,WAAW,EACxB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC;IAoCvB;;;;;;;;;;OAUG;YACW,kBAAkB;IAUhC;;;;;;;;;;;;;;;;;;;;OAoBG;YACW,mBAAmB;IAkBjC;;;;;;OAMG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAmB,GAAG,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCtF;;;;;OAKG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAiB5F;;;;;OAKG;IACG,KAAK,CAAC,KAAK,GAAE,UAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAwBzD;;;;;OAKG;YACW,mBAAmB;IAyB3B,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAKvD;;;;;;;;;;;;;OAaG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAM/E,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAK5E;;;;;;;OAOG;IACG,cAAc,CAClB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IA2EvB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,eAAe,CACnB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IAUvB;;;;;;;;;;;;;;OAcG;YACW,sBAAsB;IAyEpC,6EAA6E;YAC/D,qBAAqB;IAUnC;;;;;OAKG;YACW,qBAAqB;IAkBnC;;;;;;;;;;;;;OAaG;YACW,sBAAsB;IAwBpC;;;;;;;;;;;;;;;;;OAiBG;YACW,kBAAkB;IA2BhC;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAoB7B;;;;;;;;;;;;OAYG;YACW,+BAA+B;IAqB7C;;;;;;;;;;;OAWG;YACW,kCAAkC;IA0ChD;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IASjC;;;;;OAKG;IACH,OAAO,CAAC,4BAA4B;IASpC;;;;;;;OAOG;IACG,aAAa,CACjB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,KAAK,GACZ,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAuBlD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAKxD;;;;;;;;;;;OAWG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC,EAAE,CAAC;IAe5D;;;;OAIG;YACW,iBAAiB;IAK/B;;;;;OAKG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8B9E;;;;OAIG;YACW,2CAA2C;IA0BzD;;;;;OAKG;IACG,wBAAwB,CAC5B,IAAI,GAAE,+BAA+B,GAAG,YAAiB,GACxD,OAAO,CAAC,8BAA8B,CAAC;IA4E1C;;;;;;;;;OASG;IACG,SAAS,CACb,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,EACvC,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,WAAW,CAAC;IAmBvB;;;;;;;;;;OAUG;YACW,SAAS;IAuBvB;;;OAGG;IACH,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B;;;OAGG;IACH,UAAU,IAAI,IAAI;IAQlB;;;;;;;;;;;;;;;;;OAiBG;IACG,KAAK,CACT,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GACxD,OAAO,CAAC,WAAW,EAAE,CAAC;IAkBzB;;;;;;OAMG;IACG,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IA2B9D;;;;;OAKG;IACG,MAAM,CACV,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GACxD,OAAO,CAAC,IAAI,CAAC;IAuBhB;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;YA2CV,eAAe;IA0C7B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;CAa7B"}
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA2BH,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,MAAM,EACN,YAAY,EACZ,UAAU,EAEV,WAAW,EAEX,oBAAoB,EACpB,eAAe,EACf,SAAS,EAET,aAAa,EACb,aAAa,EACb,WAAW,EAEX,iBAAiB,EACjB,MAAM,EAEN,QAAQ,EAER,KAAK,EAEL,YAAY,EACZ,YAAY,EAEZ,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAqCpB,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA4B3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqChD,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,kEAAkE;IAClE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AACF;;;;;;;GAOG;AACH,MAAM,MAAM,8BAA8B,GAAG,mBAAmB,GAAG;IACjE;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACjC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG;IACnD,iFAAiF;IACjF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAMF;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChE,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,EACV,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACtE,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC3D,4EAA4E;IAC5E,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC9C;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1F,0EAA0E;IAC1E,YAAY,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC,EACrC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,kFAAkF;IAClF,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChF,wEAAwE;IACxE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAClD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3F;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC5E;;;;;;;OAOG;IACH,eAAe,CACb,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,aAAa,CACX,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,KAAK,GACZ,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAC;IACzD,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,wBAAwB,CACtB,IAAI,CAAC,EAAE,+BAA+B,GACrC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3C,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACnG;AAMD,qBAAa,KAAM,YAAW,WAAW;IA2BrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IA3BzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAE1D,6DAA6D;IAC7D,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAE/C,OAAO;IAKP;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IAS1B;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS;YAQV,aAAa;IAQ3B;;OAEG;WACU,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,KAAK,CAAC;IAkBnF;;;;;;;;;OASG;YACW,iBAAiB;IAY/B,IAAI,aAAa,IAAI,QAAQ,CAE5B;IAEK,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAI1D,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAInD,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IAED,IAAI,QAAQ,IAAI,aAAa,CAE5B;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,EAAE,IAAI,GAAE,kBAAuB,GAAG,WAAW;IAe/E;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,WAAW;IAQ9C;;;;;;OAMG;IACG,UAAU,CACd,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,SAAS,CAAC;IA8Df,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAKpD,+FAA+F;IACzF,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAOvC;;;OAGG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAWpF;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAQ7C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAqB5B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;;;OAKG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAqDnE;;;;;;;;;;OAUG;IACG,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtE,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,EACV,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,CAAC,CAAA;KAAE,CAAC;IAuIxC;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IA4BvB;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAO/E;;;;;;;;;OASG;IACG,MAAM,CACV,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IAkEvB;;;;OAIG;IACG,YAAY,CAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC,EACrC,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IAIvB;;;;;;;;;;OAUG;YACW,iBAAiB;IAqF/B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,uBAAuB;IAS/B;;;;;;;;;;OAUG;IACG,SAAS,CACb,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,eAAe,EAC5B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC;IA4BvB;;;;;;OAMG;IACG,UAAU,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,eAAe,EAC5B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC;IAoCvB;;;;;;OAMG;IACG,WAAW,CACf,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,oBAAoB,EAChC,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC;IAmBvB;;;;OAIG;IACG,YAAY,CAChB,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,oBAAoB,EAChC,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC;IAoBvB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAK3B,qEAAqE;YACvD,aAAa;IAM3B;;;;;;;;;;OAUG;YACW,kBAAkB;IAUhC;;;;;;;;;;;;;;OAcG;YACW,mBAAmB;IAkBjC;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAmB,GAAG,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAyC9F;;;;;;OAMG;YACW,iBAAiB;IAY/B;;;;;OAKG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAkB5F;;;;;OAKG;IACG,KAAK,CAAC,KAAK,GAAE,UAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAwBzD;;;;;OAKG;YACW,mBAAmB;IAyB3B,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAKvD;;;;;;;;OAQG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAM/E,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAK5E;;;;;OAKG;IACG,cAAc,CAClB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IA2DvB;;;;;;;;;;;OAWG;IACG,eAAe,CACnB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,GAAE,gBAAgB,GAAG,YAAiB,GACzC,OAAO,CAAC,WAAW,CAAC;IAUvB;;;;;;;;;;;;;;OAcG;YACW,sBAAsB;IA2EpC,6EAA6E;YAC/D,qBAAqB;IAUnC;;;;;OAKG;YACW,qBAAqB;IAkBnC;;;;;;;;;OASG;YACW,sBAAsB;IAwBpC;;;;;;;;;;;OAWG;YACW,kBAAkB;IA2BhC;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAoB7B;;;;;;;;;;;;OAYG;YACW,+BAA+B;IAqB7C;;;;;;;;;;;OAWG;YACW,kCAAkC;IA0ChD;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IASjC;;;;;OAKG;IACH,OAAO,CAAC,4BAA4B;IASpC;;;;;;;OAOG;IACG,aAAa,CACjB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,KAAK,GACZ,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC;IA2BlD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAKxD;;;;;;;;;;;OAWG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC,EAAE,CAAC;IAe5D;;;;OAIG;YACW,iBAAiB;IAK/B;;;;;OAKG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkC9E;;;;OAIG;YACW,2CAA2C;IA0BzD;;;;;OAKG;IACG,wBAAwB,CAC5B,IAAI,GAAE,+BAA+B,GAAG,YAAiB,GACxD,OAAO,CAAC,8BAA8B,CAAC;IA4E1C;;;;;;;;;OASG;IACG,SAAS,CACb,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,EACvC,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,WAAW,CAAC;IAmBvB;;;;;;;;;;OAUG;YACW,SAAS;IAuBvB;;;OAGG;IACH,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B;;;OAGG;IACH,UAAU,IAAI,IAAI;IAQlB;;;;;;;;;;;;;;;;;OAiBG;IACG,KAAK,CACT,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GACxD,OAAO,CAAC,WAAW,EAAE,CAAC;IAiBzB;;;;;;;;;;;;;OAaG;IACG,UAAU,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IA2B5D;;;;;;;;;;;OAWG;IACG,MAAM,CACV,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GACxD,OAAO,CAAC,WAAW,EAAE,CAAC;IA+BzB;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;YA2CV,eAAe;IAwD7B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;CAW7B"}