@haverstack/core 0.8.0 → 0.9.0

package/dist/types.d.ts

@@ -15,6 +15,20 @@ export type RecordId = string;
 export type TypeId = string;
 /** Opaque file identifier returned by putAttachment */
 export type FileId = string;
+/**
+ * Reverse-DNS identifier for the software that wrote a Record, e.g.
+ * "com.example.myapp" — not a RecordId. Self-reported and never a
+ * permission input; `StackRecord.principalId` is the verified counterpart.
+ * See docs/spec/identity.md § App.
+ */
+export type AppId = string;
+/**
+ * Identifies a "who" — a DID string, e.g. "did:key:z6Mk...". A
+ * self-certifying identifier that means the same thing in every stack,
+ * unlike a RecordId. did:key is the mandatory floor method (see did.ts).
+ * See docs/spec/identity.md.
+ */
+export type EntityId = string;
 export type TagAssociation = {
     kind: 'tag';
     label: string;
@@ -23,7 +37,6 @@ export type AttachmentAssociation = {
     kind: 'attachment';
     label: string;
     fileId: FileId;
-    mimeType: string;
 };
 export type RelationshipAssociation = {
     kind: 'relationship';
@@ -40,12 +53,14 @@ export type Permission = {
     access: 'public';
 } | {
     access: 'entity';
-    entityId: RecordId;
+    entityId: EntityId;
     read: boolean;
     write: boolean;
 } | {
     access: 'group';
     groupId: RecordId;
+    /** Restricts this entry to group admins. Absent = any member (member or admin). */
+    role?: 'admin';
     read: boolean;
     write: boolean;
 };
@@ -57,19 +72,31 @@ export type StackRecord = {
     content: Record<string, unknown>;
     version: number;
     parentId?: RecordId;
-    entityId?: RecordId;
-    appId?: RecordId;
+    entityId?: EntityId;
+    appId?: AppId;
+    /**
+     * The authenticated principal behind the write, when it isn't the author
+     * itself — a delegated app's own DID. Absent means the writer
+     * authenticated as the author, so `appId` is an unverifiable self-report;
+     * present means `appId` can be checked against the `_app` record naming
+     * this DID. See docs/spec/identity.md § App.
+     */
+    principalId?: EntityId;
     deletedAt?: Date;
     permissions?: Permission[];
     associations?: Association[];
 };
 export type RecordVersion = {
     version: number;
+    /** The record's typeId at the moment this version was snapshotted. */
+    typeId: TypeId;
     content: Record<string, unknown>;
     updatedAt: Date;
-    entityId?: RecordId;
+    entityId?: EntityId;
+    associations?: Association[];
+    permissions?: Permission[];
 };
-export type ScalarFieldKind = 'string' | 'number' | 'boolean' | 'date' | 'text' | 'record-ref';
+export type ScalarFieldKind = 'string' | 'number' | 'boolean' | 'date' | 'text' | 'record-ref' | 'file-ref';
 export type ScalarFieldDef = {
     kind: ScalarFieldKind;
     required?: boolean;
@@ -104,41 +131,82 @@ export type StackType = {
     migratesFrom?: TypeId;
     createdAt: Date;
 };
-/** Content for _entity records */
+/**
+ * Content for _entity records: a stack-local profile card *about* a DID,
+ * not the identity itself. `name`/`handle` are this owner's local labels
+ * for that DID (the petname pattern), so two stacks holding different
+ * names for the same DID is correct. See docs/spec/identity.md § Entity.
+ */
 export type EntityContent = {
+    /**
+     * The identity this profile is about. e.g. "did:key:z6Mk...". A binding,
+     * not a value — a Record's `entityId` resolves through it to the name
+     * this card carries, so it is unique per stack and immutable once set.
+     * See docs/spec/identity.md § DID bindings.
+     */
+    did: string;
     /** Display name — human-friendly, not necessarily unique. May contain spaces and punctuation. e.g. "Jane Smith" */
     name: string;
-    /** Short unique identifier within a namespace — URL-safe, no spaces. e.g. "janesmith". Like a username. Optional for private entities. */
+    /**
+     * Short, conventionally URL-safe label. e.g. "janesmith". A label, not a
+     * key: duplicates are legitimate and `did` is what identifies this
+     * profile. See docs/spec/identity.md § Entity.
+     */
     handle?: string;
 };
 /** Content for _app records */
 export type AppContent = {
+    /**
+     * The software this card is about, in reverse-DNS form — the value a
+     * Record's `appId` is checked against. Distinct from the card Record's
+     * own `appId`, which names whatever wrote the card (an admin console
+     * registering a third-party app is the ordinary case, and the two differ
+     * there). See docs/spec/identity.md § App.
+     */
+    appId: AppId;
     /** Display name of the app e.g. "My Notes App" */
     name: string;
+    /** Semver string e.g. "1.0.0". `appId` is the machine-readable identity, so no handle is needed here. */
+    version?: string;
     /**
-     * Semver string e.g. "1.0.0". The app's unique machine-readable identity
-     * is already captured by the _app record's appId (e.g. "com.example.myapp"),
-     * so no handle is needed here.
+     * The DID this app authenticates with, when it holds a key of its own.
+     * Lets an attribution UI resolve a record's `principalId` to this card,
+     * and a server check a self-reported `appId` against the principal that
+     * wrote it. Absent for apps that ride their user's identity. Unique per
+     * stack and immutable once set, like `appId` above — see
+     * docs/spec/identity.md § DID bindings.
      */
-    version?: string;
+    did?: string;
 };
 /** Content for _group records */
 export type GroupContent = {
     /** Display name — human-friendly, not necessarily unique. May contain spaces and punctuation. e.g. "Jane's Book Club" */
     name: string;
-    /** Short unique identifier — URL-safe, no spaces. e.g. "janes-book-club". Useful for groups other people need to reference. Optional for private groups. */
+    /**
+     * Short, conventionally URL-safe label. e.g. "janes-book-club". A label,
+     * not a key: duplicates are legitimate, and a group is addressed by
+     * `stackUrl` when it has one and by its record id otherwise. See
+     * docs/spec/identity.md § Group.
+     */
     handle?: string;
     /** If present, this group owns a shared collaborative stack at this URL. Absent = permission-only group. */
     stackUrl?: string;
 };
-/** Actions that can be granted via a _grant record. */
-export type GrantAction = 'create' | 'read-own' | 'read-any' | 'update-own' | 'update-any' | 'delete-own' | 'delete-any';
+/**
+ * Actions that can be granted via a _grant record. The array is the source
+ * of truth — GrantAction is derived from it so runtime validation (see
+ * Stack.grant()) can't drift from the type.
+ */
+export declare const GRANT_ACTIONS: readonly ["create", "read-own", "read-any", "update-own", "update-any", "delete-own", "delete-any"];
+export type GrantAction = (typeof GRANT_ACTIONS)[number];
 /** Content for _grant records */
 export type GrantContent = {
     /** Which record type the grant applies to. */
     typeId: TypeId;
     /** Which actions are permitted. */
     actions: GrantAction[];
+    /** Who the grant applies to. Absent = default grant, applies to any authenticated entity. */
+    granteeEntityId?: EntityId;
 };
 /** Content for _attachment records — one per upload, tracks file metadata. */
 export type AttachmentContent = {
@@ -153,10 +221,17 @@ export type AttachmentContent = {
 };
 /** Content for _config records — one singleton per stack, created on initialization. */
 export type ConfigContent = {
-    /** Entity ID of the stack owner. */
-    entityId: string;
-    /** IANA timezone string e.g. "America/New_York". */
-    timezone: string;
+    /**
+     * DID of the stack owner. Immutable — see docs/spec.md § The `_config`
+     * record for why ownership transfer isn't a field write.
+     */
+    entityId: EntityId;
+    /**
+     * IANA timezone string e.g. "America/New_York". Optional passthrough app
+     * metadata — nothing in core reads it for behavior, and there is no
+     * default. See docs/spec.md § The `_config` record.
+     */
+    timezone?: string;
 };
 /** Reserved system type IDs */
 export declare const SYSTEM_TYPES: {
@@ -176,9 +251,18 @@ export type DateRange = {
 };
 export type RecordFilter = {
     typeId?: TypeId | TypeId[];
+    /**
+     * Match every version of a type family — e.g. baseId: "com.example/note"
+     * matches both "com.example/note@1" and "com.example/note@2" records.
+     * Resolved against registered Types, not parsed from typeId strings, so
+     * it works regardless of which versions happen to exist. Combined with
+     * typeId (if both given) as an intersection.
+     */
+    baseId?: string | string[];
     parentId?: RecordId | null;
-    appId?: RecordId | RecordId[];
-    entityId?: RecordId | RecordId[];
+    appId?: AppId | AppId[];
+    entityId?: EntityId | EntityId[];
+    principalId?: EntityId | EntityId[];
     createdAt?: DateRange;
     updatedAt?: DateRange;
     tags?: string[];
@@ -201,6 +285,13 @@ export type StackQuery = {
     sort?: QuerySort;
     limit?: number;
     cursor?: string;
+    /**
+     * Records are returned exactly as stored by default ("stored"). Pass
+     * "latest" to apply the registered migration chain in memory before
+     * returning — never written back. Throws StackMigrationError if any
+     * matched record has no registered path to the latest version.
+     */
+    presentAt?: 'stored' | 'latest';
 };
 export type QueryResult = {
     records: StackRecord[];
@@ -222,39 +313,136 @@ export type Migration = {
 };
 export type AdapterCapabilities = {
     fullTextSearch: boolean;
+    /**
+     * Required `true` for local/in-process adapters; wire adapters may
+     * report `false`, driven by the server's discovery response.
+     * Stack.query() throws StackQueryError rather than silently widening.
+     * See docs/spec/adapters.md § Adapter capabilities.
+     */
     contentFieldQuery: boolean;
     sortableFields: Array<QuerySort['field']>;
+    /**
+     * Maximum attachment upload size in bytes, or `null` if unbounded. Lets
+     * apps pre-check and surface limits before burning an upload on a 413.
+     */
+    maxAttachmentBytes: number | null;
+    /**
+     * Maximum serialized size in bytes of a Record's content — a create body
+     * or a merge patch — or `null` if unbounded. The counterpart to
+     * maxAttachmentBytes for the JSON side of a write, which had no stated
+     * ceiling anywhere despite the spec bounding every other resource
+     * (validation depth, queryAllPages, GC grace).
+     *
+     * Local adapters declare `null`: nothing at the storage layer imposes
+     * one, and a caller with in-process access to the database can spend its
+     * own memory however it likes. A server declares its request-size limit
+     * here so apps can pre-check rather than discover it as a 413.
+     * See docs/spec/adapters.md § Adapter capabilities.
+     */
+    maxContentBytes: number | null;
 };
 /** What a Stack can do, as seen by app and plugin code. */
 export type StackFeatures = AdapterCapabilities;
 /**
- * The record-storage half of an adapter. Handles structured data, queries,
+ * Opt-in optimistic-concurrency precondition, accepted by every mutation
+ * that bumps a record's version. On mismatch the adapter throws
+ * StackVersionConflictError without applying anything. The check is atomic
+ * inside the adapter's write, never a read-then-write. See
+ * docs/spec/versioning.md § Optimistic concurrency (`ifVersion`).
+ */
+export type ExpectedVersionOptions = {
+    expectedVersion?: number;
+};
+/**
+ * Accepted by every mutating StackRecordAdapter method. The adapter
+ * persists this prior-state snapshot as part of the SAME atomic write as
+ * the mutation, so a crash between the two can't leave an orphan versions
+ * row. Server-backed adapters (already atomic per-request) can ignore it.
+ */
+export type SnapshotOptions = {
+    snapshot?: RecordVersion;
+};
+/**
+ * The record-storage half of an adapter: structured data, queries,
  * associations, versioning, type definitions, and stack identity.
  */
 export interface StackRecordAdapter {
     readonly capabilities: AdapterCapabilities;
-    /** Entity ID of the stack owner. Set during adapter initialization. */
-    readonly ownerEntityId: string;
-    /** IANA timezone string for this stack e.g. "America/New_York". */
-    readonly timezone: string;
+    /** DID of the stack owner. Set during adapter initialization. */
+    readonly ownerEntityId: EntityId;
+    /**
+     * IANA timezone string for this stack, or undefined if never set.
+     * Passthrough app metadata with no default — see docs/spec.md § The
+     * `_config` record.
+     */
+    readonly timezone: string | undefined;
+    /**
+     * Throws StackConflictError if `record.id` already exists — never a
+     * silent overwrite. The check must be atomic with the write (a PK/unique
+     * constraint or equivalent); Stack itself doesn't pre-check, so a raw
+     * adapter that skips this enforces nothing.
+     */
     createRecord(record: StackRecord): Promise<StackRecord>;
     getRecord(id: RecordId): Promise<StackRecord | null>;
-    updateRecord(id: RecordId, changes: Partial<StackRecord>): Promise<StackRecord>;
+    /**
+     * Apply a content-only RFC 7396 merge patch: `null` removes a field,
+     * omitted fields are retained. Bumps `version`/`updatedAt` in the same
+     * write. Never touches `typeId` — a type change goes through
+     * commitMigration() instead.
+     */
+    patchContent(id: RecordId, patch: Record<string, unknown | null>, opts?: ExpectedVersionOptions & SnapshotOptions): Promise<StackRecord>;
     deleteRecord(id: RecordId, opts?: {
         hard?: boolean;
-    }): Promise<void>;
+    } & ExpectedVersionOptions & SnapshotOptions): Promise<void>;
+    /** Reverse a soft delete. Returns the record as it now stands. */
+    undeleteRecord(id: RecordId, opts?: ExpectedVersionOptions & SnapshotOptions): Promise<StackRecord>;
     queryRecords(query: StackQuery): Promise<QueryResult>;
-    associate(id: RecordId, association: Association): Promise<void>;
-    dissociate(id: RecordId, association: Association): Promise<void>;
+    associate(id: RecordId, association: Association, opts?: ExpectedVersionOptions & SnapshotOptions): Promise<void>;
+    dissociate(id: RecordId, association: Association, opts?: ExpectedVersionOptions & SnapshotOptions): Promise<void>;
+    /** Replace all permissions on a record. Bumps version internally. */
+    setPermissions(id: RecordId, permissions: Permission[], opts?: ExpectedVersionOptions & SnapshotOptions): Promise<void>;
     getVersions(id: RecordId): Promise<RecordVersion[]>;
     getVersion(id: RecordId, version: number): Promise<RecordVersion | null>;
+    /**
+     * Standalone snapshot write, outside of a mutation's own atomic path.
+     * Mutating methods above take a `snapshot` option instead, so the
+     * snapshot and the mutation land in one write — see SnapshotOptions.
+     */
     saveVersion(id: RecordId, version: RecordVersion): Promise<void>;
+    /**
+     * Restore a record to a previous version's content (and associations,
+     * when the snapshot has them). Never restores permissions. Bumps version
+     * internally. Throws StackNotFoundError if the version doesn't exist.
+     */
+    restoreVersion(id: RecordId, version: number, opts?: ExpectedVersionOptions & SnapshotOptions): Promise<StackRecord>;
+    /**
+     * Commit a migration: write new content under a new typeId in one step.
+     * This is the only way a record's typeId changes after creation — used
+     * exclusively by Stack.migrateAll(); Stack.update() never changes typeId
+     * as a side effect. Bumps version internally.
+     */
+    commitMigration(id: RecordId, toTypeId: TypeId, content: Record<string, unknown>, opts?: SnapshotOptions): Promise<StackRecord>;
     saveType(type: StackType): Promise<void>;
     getType(id: TypeId): Promise<StackType | null>;
     listTypes(): Promise<StackType[]>;
+    /**
+     * Atomically verify fileId is unreferenced, then hard-delete its
+     * metadata records in the same adapter call, returning their ids.
+     * Throws StackConflictError if still referenced. Optional —
+     * Stack.deleteAttachment() has a non-atomic fallback. See
+     * docs/spec/attachments.md § Deleting attachments.
+     */
+    deleteUnreferencedAttachmentRecords?(fileId: FileId, metadataTypeId: TypeId): Promise<RecordId[]>;
     flush?(): Promise<void>;
     close?(): Promise<void>;
 }
+/** One stored blob, as reported by StackBlobAdapter.listFiles(). */
+export type BlobFileInfo = {
+    fileId: FileId;
+    size: number;
+    /** When the blob was written. Used to apply a GC grace period to fresh, not-yet-associated uploads. */
+    modifiedAt: Date;
+};
 /**
  * The blob-storage half of an adapter. Handles raw binary data only;
  * attachment metadata lives on _attachment@1 records in the record adapter.
@@ -263,6 +451,13 @@ export interface StackBlobAdapter {
     putAttachment(data: Uint8Array): Promise<FileId>;
     getAttachment(fileId: FileId): Promise<Uint8Array>;
     deleteAttachment(fileId: FileId): Promise<void>;
+    /**
+     * Enumerate every blob currently in storage. Optional — without it,
+     * garbage collection can't find bare-bytes orphans (bytes with no
+     * metadata record at all). See docs/spec/attachments.md § Garbage
+     * collection.
+     */
+    listFiles?(): Promise<BlobFileInfo[]>;
     flush?(): Promise<void>;
     close?(): Promise<void>;
 }
@@ -271,5 +466,60 @@ export interface StackBlobAdapter {
  * Pass this to Stack.create(). Build one with combineAdapters() when you
  * want different backends for records and blobs (e.g. SQLite + S3).
  */
-export type StackAdapter = StackRecordAdapter & StackBlobAdapter;
+export type StackAdapter = StackRecordAdapter & StackBlobAdapter & {
+    /**
+     * Store bytes and create the accompanying _attachment@1 record as one
+     * atomic operation. Optional; implement only when bytes and records
+     * live behind a single boundary (today: APIAdapter alone), and never
+     * synthesized by combineAdapters(). A security boundary, not an
+     * efficiency shortcut — see docs/spec/adapters.md § Interface split.
+     */
+    putAttachmentWithMetadata?(data: Uint8Array, mimeType: string, filename?: string, appId?: AppId): Promise<StackRecord>;
+};
+/**
+ * The two identities a token establishes. Both are always populated: on an
+ * undelegated token they are the same DID, and spelling that out is what
+ * keeps the mapping onto asEntity() mechanical.
+ *
+ *     stack.asEntity(session.principalId, { onBehalfOf: session.subjectId })
+ *
+ * See docs/spec/access-control.md § Delegation: principal and subject.
+ */
+export type TokenSession = {
+    /** Who authenticated — the DID that proved key possession. Governs authority. */
+    principalId: EntityId;
+    /** Who the principal acts for. Governs attribution. Equal to principalId unless delegated. */
+    subjectId: EntityId;
+};
+export type TokenInfo = TokenSession & {
+    id: string;
+    label?: string;
+    createdAt: Date;
+    expiresAt?: Date;
+};
+/**
+ * Bearer-token issuance and lookup for server implementations — a
+ * standalone interface, not a slot on StackAdapter. createToken() trusts
+ * its caller: DID verification happens first, via the challenge-response
+ * handshake. Tokens SHOULD be stored outside the portable stack file.
+ * See docs/spec/wire-format.md § Authentication.
+ *
+ * `onBehalfOf` is the delegation binding, and no handshake can establish
+ * it — proving key possession proves the principal and nothing about whom
+ * it may act for. It is asserted by the owner out of band, which is safe
+ * because effective authority is the intersection of both parties' grants.
+ */
+export interface StackTokenStore {
+    createToken(principalId: EntityId, opts?: {
+        onBehalfOf?: EntityId;
+        label?: string;
+        expiresAt?: Date;
+    }): Promise<{
+        id: string;
+        token: string;
+    }>;
+    lookupToken(token: string): Promise<TokenSession | null>;
+    listTokens(): Promise<TokenInfo[]>;
+    revokeToken(id: string): Promise<void>;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,4EAA4E;AAC5E,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAE5B,uDAAuD;AACvD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAM5B,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,qBAAqB,GAAG,uBAAuB,CAAC;AAM3F;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAM1E,MAAM,MAAM,WAAW,GAAG;IAExB,EAAE,EAAE,QAAQ,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAGhB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;CAC9B,CAAC;AAMF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB,CAAC;AAMF,MAAM,MAAM,eAAe,GACvB,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,MAAM,GACN,MAAM,GACN,YAAY,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,aAAa,GAAG,cAAc,CAAC;AAEvE,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAMF,kCAAkC;AAClC,MAAM,MAAM,aAAa,GAAG;IAC1B,mHAAmH;IACnH,IAAI,EAAE,MAAM,CAAC;IACb,0IAA0I;IAC1I,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,+BAA+B;AAC/B,MAAM,MAAM,UAAU,GAAG;IACvB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iCAAiC;AACjC,MAAM,MAAM,YAAY,GAAG;IACzB,yHAAyH;IACzH,IAAI,EAAE,MAAM,CAAC;IACb,4JAA4J;IAC5J,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,uDAAuD;AACvD,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,UAAU,GACV,UAAU,GACV,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,YAAY,CAAC;AAEjB,iCAAiC;AACjC,MAAM,MAAM,YAAY,GAAG;IACzB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG;IAC1B,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,+BAA+B;AAC/B,eAAO,MAAM,YAAY;;;;IAIvB,oDAAoD;;IAEpD,0DAA0D;;IAE1D,8DAA8D;;CAEtD,CAAC;AAMX,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,KAAK,CAAC,EAAE,IAAI,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAEzB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,SAAS,CAAC,EAAE,SAAS,CAAC;IAGtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,QAAQ,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGlC,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;IAC7C,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAMF,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExF,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC;AAMF,MAAM,MAAM,mBAAmB,GAAG;IAChC,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;CAC3C,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAMhD;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE3C,uEAAuE;IACvE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAG1B,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACrD,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChF,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAGtD,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGlE,WAAW,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGjE,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC/C,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAGlC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAE/B,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGhD,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,4EAA4E;AAC5E,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAE5B,uDAAuD;AACvD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,MAAM,KAAK,GAAG,MAAM,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAM9B,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,qBAAqB,GAAG,uBAAuB,CAAC;AAM3F;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACvE;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;IAClB,mFAAmF;IACnF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAMN,MAAM,MAAM,WAAW,GAAG;IAExB,EAAE,EAAE,QAAQ,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAGhB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;CAC9B,CAAC;AAMF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC5B,CAAC;AAMF,MAAM,MAAM,eAAe,GACvB,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,MAAM,GACN,MAAM,GACN,YAAY,GACZ,UAAU,CAAC;AAEf,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,aAAa,GAAG,cAAc,CAAC;AAEvE,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAMF;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,mHAAmH;IACnH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,+BAA+B;AAC/B,MAAM,MAAM,UAAU,GAAG;IACvB;;;;;;OAMG;IACH,KAAK,EAAE,KAAK,CAAC;IACb,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,yGAAyG;IACzG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,iCAAiC;AACjC,MAAM,MAAM,YAAY,GAAG;IACzB,yHAAyH;IACzH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa,qGAQhB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,iCAAiC;AACjC,MAAM,MAAM,YAAY,GAAG;IACzB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,6FAA6F;IAC7F,eAAe,CAAC,EAAE,QAAQ,CAAC;CAC5B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG;IAC1B;;;OAGG;IACH,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,+BAA+B;AAC/B,eAAO,MAAM,YAAY;;;;IAIvB,oDAAoD;;IAEpD,0DAA0D;;IAE1D,8DAA8D;;CAEtD,CAAC;AAMX,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,KAAK,CAAC,EAAE,IAAI,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAEzB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,SAAS,CAAC,EAAE,SAAS,CAAC;IAGtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,QAAQ,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGlC,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;IAC7C,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAMF,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExF,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC;AAMF,MAAM,MAAM,mBAAmB,GAAG;IAChC,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C;;;OAGG;IACH,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;;;;;;;;;;OAYG;IACH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAMhD;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE3C,iEAAiE;IACjE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAGtC;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACrD;;;;;OAKG;IACH,YAAY,CACV,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC,EACrC,IAAI,CAAC,EAAE,sBAAsB,GAAG,eAAe,GAC9C,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,YAAY,CACV,EAAE,EAAE,QAAQ,EACZ,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,sBAAsB,GAAG,eAAe,GACnE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,kEAAkE;IAClE,cAAc,CACZ,EAAE,EAAE,QAAQ,EACZ,IAAI,CAAC,EAAE,sBAAsB,GAAG,eAAe,GAC9C,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAGtD,SAAS,CACP,EAAE,EAAE,QAAQ,EACZ,WAAW,EAAE,WAAW,EACxB,IAAI,CAAC,EAAE,sBAAsB,GAAG,eAAe,GAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CACR,EAAE,EAAE,QAAQ,EACZ,WAAW,EAAE,WAAW,EACxB,IAAI,CAAC,EAAE,sBAAsB,GAAG,eAAe,GAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,qEAAqE;IACrE,cAAc,CACZ,EAAE,EAAE,QAAQ,EACZ,WAAW,EAAE,UAAU,EAAE,EACzB,IAAI,CAAC,EAAE,sBAAsB,GAAG,eAAe,GAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;IAGjB,WAAW,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE;;;;OAIG;IACH,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE;;;;OAIG;IACH,cAAc,CACZ,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,sBAAsB,GAAG,eAAe,GAC9C,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB;;;;;OAKG;IACH,eAAe,CACb,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,WAAW,CAAC,CAAC;IAGxB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC/C,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAElC;;;;;;OAMG;IACH,mCAAmC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAGlG,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,oEAAoE;AACpE,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,uGAAuG;IACvG,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAE/B,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD;;;;;OAKG;IACH,SAAS,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAGtC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAC3C,gBAAgB,GAAG;IACjB;;;;;;OAMG;IACH,yBAAyB,CAAC,CACxB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,KAAK,GACZ,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB,CAAC;AAEJ;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,iFAAiF;IACjF,WAAW,EAAE,QAAQ,CAAC;IACtB,8FAA8F;IAC9F,SAAS,EAAE,QAAQ,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,CACT,WAAW,EAAE,QAAQ,EACrB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,CAAA;KAAE,GACjE,OAAO,CAAC;QACT,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACzD,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC"}

package/dist/types.js

@@ -4,6 +4,20 @@
  * This file is the source of truth for all types in the
  * Stack library. No logic lives here — just shapes.
  */
+/**
+ * Actions that can be granted via a _grant record. The array is the source
+ * of truth — GrantAction is derived from it so runtime validation (see
+ * Stack.grant()) can't drift from the type.
+ */
+export const GRANT_ACTIONS = [
+    'create',
+    'read-own',
+    'read-any',
+    'update-own',
+    'update-any',
+    'delete-own',
+    'delete-any',
+];
 /** Reserved system type IDs */
 export const SYSTEM_TYPES = {
     ENTITY: '_entity',

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuNH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,MAAM;IACX,KAAK,EAAE,QAAQ;IACf,oDAAoD;IACpD,KAAK,EAAE,QAAQ;IACf,0DAA0D;IAC1D,UAAU,EAAE,aAAa;IACzB,8DAA8D;IAC9D,MAAM,EAAE,SAAS;CACT,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsPH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ;IACR,UAAU;IACV,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,YAAY;CACJ,CAAC;AAyCX,+BAA+B;AAC/B,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,MAAM;IACX,KAAK,EAAE,QAAQ;IACf,oDAAoD;IACpD,KAAK,EAAE,QAAQ;IACf,0DAA0D;IAC1D,UAAU,EAAE,aAAa;IACzB,8DAA8D;IAC9D,MAAM,EAAE,SAAS;CACT,CAAC"}

package/dist/validate.d.ts

@@ -20,6 +20,32 @@ export type ValidationError = {
  * @param errors   - Internal: error accumulator for recursive calls
  */
 export declare const validateContent: (content: Record<string, unknown>, schema: TypeSchema, prefix?: string, errors?: ValidationError[], depth?: number) => ValidationError[];
+/**
+ * Content keys that name JavaScript's object machinery rather than a
+ * field. Undeclared content fields are allowed by design, so without this
+ * they reach `merged[key] = value` in applyMergePatch — where `__proto__`
+ * invokes the prototype setter instead of setting a field.
+ *
+ * That is not a prototype-pollution gadget today: JSON.stringify writes
+ * only own-enumerable properties, so a reassigned prototype never reaches
+ * storage, and JSON.parse recreates `__proto__` as an own property rather
+ * than invoking the setter, so a stored one round-trips inertly. The
+ * defect is that the two write paths disagree — a merge patch to
+ * `__proto__` silently vanishes, while the same key through create()
+ * stores as an ordinary field — and that a future refactor deepening the
+ * shallow merge would turn a quiet inconsistency into a real one.
+ *
+ * Rejecting is more honest than skipping: a caller who sends one of these
+ * finds out, rather than watching a write appear to succeed and do
+ * nothing. See docs/spec/data-model.md § Reserved content keys.
+ */
+export declare const RESERVED_CONTENT_KEYS: readonly string[];
+/**
+ * Top-level only. Nested occurrences survive the JSON round trip as inert
+ * own properties (see above), and walking undeclared subtrees to find them
+ * would cost a traversal the schema walk doesn't otherwise do.
+ */
+export declare const validateReservedKeys: (content: Record<string, unknown>) => ValidationError[];
 /**
  * Returns true if the content is valid against the schema.
  * Use validateContent() directly to get error details.

package/dist/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAA6B,MAAM,YAAY,CAAC;AAQxE,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA8EF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,UAAU,EAClB,eAAW,EACX,SAAQ,eAAe,EAAO,EAC9B,cAAS,KACR,eAAe,EAyBjB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,OAAO,GAAI,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,UAAU,KAAG,OAChC,CAAC"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAA6B,MAAM,YAAY,CAAC;AAmBxE,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA6FF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,UAAU,EAClB,eAAW,EACX,SAAQ,eAAe,EAAO,EAC9B,cAAS,KACR,eAAe,EAyBjB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAA8C,CAAC;AAElG;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,eAAe,EAIlF,CAAC;AAEN;;;GAGG;AACH,eAAO,MAAM,OAAO,GAAI,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,UAAU,KAAG,OAChC,CAAC"}

package/dist/validate.js

@@ -8,6 +8,15 @@
  * Coercion is never performed — types must match exactly.
  */
 const MAX_VALIDATION_DEPTH = 32;
+/** fileId format: SHA-256 hex, lowercase — matches blob-adapter-disk's assertFileId(). */
+const FILE_ID_RE = /^[0-9a-f]{64}$/;
+/**
+ * ISO 8601 date or date-time shape. The regex pins the shape (bare
+ * `Date.parse` accepts engine-dependent non-ISO formats); `Date.parse`
+ * still runs afterward as a calendar sanity check. See
+ * docs/spec/data-model.md § Types.
+ */
+const ISO_8601_RE = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})?)?$/;
 // -------------------------------------------------------
 // Internal helpers
 // -------------------------------------------------------
@@ -16,6 +25,7 @@ const jsTypeForScalar = (kind) => {
         case 'string':
         case 'text':
         case 'record-ref':
+        case 'file-ref':
             return 'string';
         case 'number':
             return 'number';
@@ -51,7 +61,9 @@ const validateField = (value, def, path, errors, depth = 0) => {
     }
     // Scalar validation
     if (def.kind === 'date') {
-        if (typeof value !== 'string' || isNaN(Date.parse(value))) {
+        if (typeof value !== 'string' ||
+            !ISO_8601_RE.test(value) ||
+            isNaN(Date.parse(value))) {
             errors.push({
                 path,
                 message: `Expected ISO 8601 date string, got ${typeof value}`,
@@ -59,6 +71,15 @@ const validateField = (value, def, path, errors, depth = 0) => {
         }
         return;
     }
+    if (def.kind === 'file-ref') {
+        if (typeof value !== 'string' || !FILE_ID_RE.test(value)) {
+            errors.push({
+                path,
+                message: 'Expected a 64-character lowercase hex fileId (SHA-256)',
+            });
+        }
+        return;
+    }
     const expected = jsTypeForScalar(def.kind);
     if (typeof value !== expected) {
         errors.push({
@@ -99,6 +120,35 @@ export const validateContent = (content, schema, prefix = '', errors = [], depth
     }
     return errors;
 };
+/**
+ * Content keys that name JavaScript's object machinery rather than a
+ * field. Undeclared content fields are allowed by design, so without this
+ * they reach `merged[key] = value` in applyMergePatch — where `__proto__`
+ * invokes the prototype setter instead of setting a field.
+ *
+ * That is not a prototype-pollution gadget today: JSON.stringify writes
+ * only own-enumerable properties, so a reassigned prototype never reaches
+ * storage, and JSON.parse recreates `__proto__` as an own property rather
+ * than invoking the setter, so a stored one round-trips inertly. The
+ * defect is that the two write paths disagree — a merge patch to
+ * `__proto__` silently vanishes, while the same key through create()
+ * stores as an ordinary field — and that a future refactor deepening the
+ * shallow merge would turn a quiet inconsistency into a real one.
+ *
+ * Rejecting is more honest than skipping: a caller who sends one of these
+ * finds out, rather than watching a write appear to succeed and do
+ * nothing. See docs/spec/data-model.md § Reserved content keys.
+ */
+export const RESERVED_CONTENT_KEYS = ['__proto__', 'constructor', 'prototype'];
+/**
+ * Top-level only. Nested occurrences survive the JSON round trip as inert
+ * own properties (see above), and walking undeclared subtrees to find them
+ * would cost a traversal the schema walk doesn't otherwise do.
+ */
+export const validateReservedKeys = (content) => RESERVED_CONTENT_KEYS.filter((key) => Object.hasOwn(content, key)).map((key) => ({
+    path: key,
+    message: `"${key}" is a reserved content key and cannot be used as a field name`,
+}));
 /**
  * Returns true if the content is valid against the schema.
  * Use validateContent() directly to get error details.