@indorania/contracts 0.1.0

package/dist/constitution/openapi.js

@@ -0,0 +1,375 @@
+/**
+ * The constitution, checked against an OpenAPI 3.1 document. Pure: it reads the document and
+ * reports; it imports nothing from the kernel, so any member can run it on its own contract.
+ */
+import { summarise } from "./report.js";
+import { DECLINE_TOKENS, MEMBER_NAMES, MEMBERSHIP_TOKENS, METER_TOKENS, ORIGIN_TOKENS, PERSON_TOKENS, SCORE_TOKENS, SECRET_TOKENS, hasToken, } from "./words.js";
+const isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/** The one person-side identifier component (see `RelationshipId` in common.ts). */
+export const PERSON_SIDE_SCHEMA = "RelationshipId";
+export const ORGANISATION_ID_SCHEMA = "OrganisationId";
+export const ENVELOPE_SCHEMA = "DsseEnvelope";
+/**
+ * The only reads allowed to return a list (d41: no endpoint answers "everything matching X", for
+ * anyone, admin included). Each is the caller's own, or public by design; its reason is on the
+ * operation as `x-indorania-collection`. Adding one is a reviewed edit to this list.
+ */
+export const COLLECTIONS = [
+    "listVersions",
+    "getWebhookKeys",
+    "listSeats",
+    "getCapabilities",
+    "getEntitlements",
+    "listAsks",
+    "listStandingRules",
+    "listSessionLines",
+];
+/** A list may be paged and narrowed by state — never searched or filtered. */
+const COLLECTION_QUERY = new Set(["cursor", "limit", "state", "after"]);
+const MEMBERSHIP_NOUNS = new Set(["member", "members", "membership", "memberships", "roster", "rosters"]);
+const METHODS = ["get", "put", "post", "delete", "patch", "head", "options", "trace"];
+const esc = (s) => s.replace(/~/g, "~0").replace(/\//g, "~1");
+function* operations(doc) {
+    for (const [kind, section] of [
+        ["path", doc.paths],
+        ["webhook", doc.webhooks],
+    ]) {
+        if (!isObj(section))
+            continue;
+        for (const [key, item] of Object.entries(section)) {
+            if (!isObj(item))
+                continue;
+            for (const method of METHODS) {
+                const op = item[method];
+                if (isObj(op))
+                    yield { kind, key, method, op, pointer: `/${kind === "path" ? "paths" : "webhooks"}/${esc(key)}/${method}` };
+            }
+        }
+    }
+}
+function refName(node) {
+    if (isObj(node) && typeof node.$ref === "string" && node.$ref.startsWith("#/components/schemas/")) {
+        return node.$ref.slice("#/components/schemas/".length);
+    }
+    return null;
+}
+function component(doc, kind, name) {
+    const section = isObj(doc.components) ? doc.components[kind] : undefined;
+    const found = isObj(section) ? section[name] : undefined;
+    return isObj(found) ? found : undefined;
+}
+/** Every schema node reachable from `root`, following $refs (each once per path), noting whether it sits inside a list. */
+function walk(doc, root, pointer, visit) {
+    const open = new Set();
+    const go = (node, at, inArray) => {
+        if (!isObj(node))
+            return;
+        const ref = refName(node);
+        const personSide = ref === PERSON_SIDE_SCHEMA || (ref === null && node["x-indorania-person-side"] === true);
+        visit(node, { pointer: at, inArray, ref, personSide });
+        if (personSide)
+            return; // a leaf: counted once, here
+        if (ref) {
+            const target = component(doc, "schemas", ref);
+            if (!target || open.has(ref))
+                return;
+            open.add(ref);
+            go(target, `/components/schemas/${esc(ref)}`, inArray);
+            open.delete(ref);
+            return;
+        }
+        if (isObj(node.properties))
+            for (const [k, v] of Object.entries(node.properties))
+                go(v, `${at}/properties/${esc(k)}`, inArray);
+        if (node.items !== undefined)
+            go(node.items, `${at}/items`, true);
+        if (Array.isArray(node.prefixItems))
+            node.prefixItems.forEach((v, i) => go(v, `${at}/prefixItems/${i}`, true));
+        for (const key of ["allOf", "anyOf", "oneOf"]) {
+            const list = node[key];
+            if (Array.isArray(list))
+                list.forEach((v, i) => go(v, `${at}/${key}/${i}`, inArray));
+        }
+        // A map of values is a list by another name.
+        if (isObj(node.additionalProperties))
+            go(node.additionalProperties, `${at}/additionalProperties`, true);
+    };
+    go(root, pointer, false);
+}
+function parameters(doc, o) {
+    const list = Array.isArray(o.op.parameters) ? o.op.parameters : [];
+    return list.flatMap((p, i) => {
+        let param = p;
+        if (isObj(p) && typeof p.$ref === "string" && p.$ref.startsWith("#/components/parameters/")) {
+            param = component(doc, "parameters", p.$ref.slice("#/components/parameters/".length));
+        }
+        if (!isObj(param) || typeof param.name !== "string")
+            return [];
+        return [{ name: param.name, in: String(param.in), schema: param.schema, pointer: `${o.pointer}/parameters/${i}` }];
+    });
+}
+function bodySchemas(container, pointer) {
+    if (!isObj(container) || !isObj(container.content))
+        return [];
+    return Object.entries(container.content).flatMap(([media, m]) => isObj(m) && m.schema !== undefined ? [{ schema: m.schema, pointer: `${pointer}/content/${esc(media)}/schema` }] : []);
+}
+function responseSchemas(o, onlySuccess) {
+    if (!isObj(o.op.responses))
+        return [];
+    return Object.entries(o.op.responses).flatMap(([status, r]) => onlySuccess && !/^2\d\d$/.test(status) ? [] : bodySchemas(r, `${o.pointer}/responses/${esc(status)}`));
+}
+/** What a caller sends in. For a webhook, the receiver's reply is what comes back in. */
+function inputs(doc, o) {
+    if (o.kind === "webhook")
+        return responseSchemas(o, false);
+    return [
+        ...parameters(doc, o).map((p) => ({ schema: p.schema, pointer: p.pointer })),
+        ...bodySchemas(o.op.requestBody, `${o.pointer}/requestBody`),
+    ];
+}
+/** What goes out. For a webhook, its payload. */
+function outputs(o) {
+    if (o.kind === "webhook")
+        return bodySchemas(o.op.requestBody, `${o.pointer}/requestBody`);
+    return responseSchemas(o, false);
+}
+/** Every structural name in the document: paths, operations, tags, parameters, properties, schema names, enum values. */
+function names(doc) {
+    const out = [];
+    for (const [kind, section] of [
+        ["paths", doc.paths],
+        ["webhooks", doc.webhooks],
+    ]) {
+        if (!isObj(section))
+            continue;
+        for (const key of Object.keys(section)) {
+            for (const segment of key.split(/[/.]/).filter(Boolean))
+                out.push({ kind: "path-segment", name: segment, where: `/${kind}/${esc(key)}` });
+        }
+    }
+    for (const o of operations(doc)) {
+        if (typeof o.op.operationId === "string")
+            out.push({ kind: "operation", name: o.op.operationId, where: o.pointer });
+        if (Array.isArray(o.op.tags))
+            for (const t of o.op.tags)
+                if (typeof t === "string")
+                    out.push({ kind: "tag", name: t, where: o.pointer });
+        for (const p of parameters(doc, o))
+            out.push({ kind: "parameter", name: p.name, where: p.pointer, schema: p.schema });
+    }
+    const schemas = isObj(doc.components) && isObj(doc.components.schemas) ? doc.components.schemas : {};
+    for (const name of Object.keys(schemas))
+        out.push({ kind: "schema", name, where: `/components/schemas/${esc(name)}` });
+    const deep = (node, at) => {
+        if (Array.isArray(node)) {
+            node.forEach((v, i) => deep(v, `${at}/${i}`));
+            return;
+        }
+        if (!isObj(node))
+            return;
+        if (isObj(node.properties)) {
+            for (const [k, v] of Object.entries(node.properties))
+                out.push({ kind: "property", name: k, where: `${at}/properties/${esc(k)}`, schema: v });
+        }
+        if (Array.isArray(node.enum))
+            for (const v of node.enum)
+                if (typeof v === "string")
+                    out.push({ kind: "enum-value", name: v, where: `${at}/enum` });
+        if (typeof node.const === "string")
+            out.push({ kind: "enum-value", name: node.const, where: `${at}/const` });
+        for (const [k, v] of Object.entries(node)) {
+            if (k.startsWith("x-") || k === "description" || k === "example" || k === "examples" || k === "securitySchemes")
+                continue;
+            deep(v, `${at}/${esc(k)}`);
+        }
+    };
+    deep(doc.paths, "/paths");
+    deep(doc.webhooks, "/webhooks");
+    deep(doc.components, "/components");
+    return out;
+}
+const isPersonSide = (schema) => {
+    if (refName(schema) === PERSON_SIDE_SCHEMA)
+        return true;
+    if (isObj(schema) && schema["x-indorania-person-side"] === true)
+        return true;
+    // A nullable person-side id is generated as anyOf [ref, null].
+    if (isObj(schema) && Array.isArray(schema.anyOf)) {
+        const ids = schema.anyOf.filter((s) => !(isObj(s) && s.type === "null"));
+        return ids.length === 1 && isPersonSide(ids[0]);
+    }
+    return false;
+};
+/**
+ * Format identifiers are not names a client must learn: URIs, media types, and versioned format
+ * tags such as `kashscript-ask/1`, which attest requires verbatim.
+ */
+const isIdentifierValue = (value) => /^[a-z][a-z0-9+.-]*:\/\//i.test(value) || /^[a-z]+\/[a-z0-9.+-]+$/i.test(value) || /^[a-z0-9.-]+\/\d+$/i.test(value);
+function isCollectionShape(doc, schema) {
+    let node = schema;
+    const ref = refName(node);
+    if (ref === ENVELOPE_SCHEMA)
+        return false;
+    if (ref)
+        node = component(doc, "schemas", ref);
+    if (!isObj(node))
+        return false;
+    if (node.type === "array")
+        return true;
+    if (isObj(node.properties) && "next" in node.properties) {
+        const items = node.properties.items;
+        const resolved = refName(items) ? component(doc, "schemas", refName(items) ?? "") : items;
+        return isObj(resolved) && resolved.type === "array";
+    }
+    return false;
+}
+export function checkOpenApi(document, options = {}) {
+    const doc = document;
+    const findings = [];
+    const add = (rule, where, why) => findings.push({ rule, where, why });
+    const allNames = names(doc);
+    // ── no-origin-fields ─────────────────────────────────────────────────────────────────────
+    for (const n of allNames) {
+        const hit = hasToken(n.name, ORIGIN_TOKENS);
+        if (hit)
+            add("no-origin-fields", n.where, `${n.kind} "${n.name}" names ${hit}`);
+    }
+    // ── no-cross-relationship-joins ──────────────────────────────────────────────────────────
+    const personSide = component(doc, "schemas", PERSON_SIDE_SCHEMA);
+    if (!personSide || personSide["x-indorania-person-side"] !== true) {
+        add("no-cross-relationship-joins", `/components/schemas/${PERSON_SIDE_SCHEMA}`, "the person-side identifier component is missing or unmarked, so nothing below could be checked");
+    }
+    for (const n of allNames) {
+        if (n.kind !== "property" && n.kind !== "parameter")
+            continue;
+        const hit = hasToken(n.name, PERSON_TOKENS);
+        if (hit && !isPersonSide(n.schema))
+            add("no-cross-relationship-joins", n.where, `${n.kind} "${n.name}" names a person (${hit}) but is not a ${PERSON_SIDE_SCHEMA}`);
+    }
+    for (const o of operations(doc)) {
+        const id = String(o.op.operationId ?? o.pointer);
+        let count = 0;
+        let listed = false;
+        for (const root of inputs(doc, o)) {
+            walk(doc, root.schema, root.pointer, (_node, at) => {
+                if (!at.personSide)
+                    return;
+                count += 1;
+                if (at.inArray)
+                    listed = true;
+            });
+        }
+        if (listed)
+            add("no-cross-relationship-joins", o.pointer, `${id} takes a list of person-side ids`);
+        else if (count > 1)
+            add("no-cross-relationship-joins", o.pointer, `${id} takes ${count} person-side ids in one request`);
+        let returnsOrgList = false;
+        for (const root of outputs(o)) {
+            walk(doc, root.schema, root.pointer, (_node, at) => {
+                if (at.personSide && at.inArray) {
+                    add("no-cross-relationship-joins", `${o.pointer} → ${at.pointer}`, `${id} returns person-side ids in a list`);
+                    add("no-house-member-list", `${o.pointer} → ${at.pointer}`, `${id} returns a list of person-side ids`);
+                }
+                if (at.ref === ORGANISATION_ID_SCHEMA && at.inArray)
+                    returnsOrgList = true;
+            });
+        }
+        // ── no-house-member-list: "which houses is Y in" ─────────────────────────────────────
+        if (count > 0 && returnsOrgList)
+            add("no-house-member-list", o.pointer, `${id} takes a person-side id and returns a list of organisations`);
+        if (o.kind === "path" && o.method === "get") {
+            for (const segment of o.key.split("/").filter(Boolean)) {
+                const hit = hasToken(segment, MEMBERSHIP_TOKENS);
+                if (hit)
+                    add("no-house-member-list", o.pointer, `a read's path names ${hit}`);
+            }
+        }
+    }
+    for (const n of allNames) {
+        if (n.kind !== "property" && n.kind !== "schema" && n.kind !== "parameter")
+            continue;
+        const hit = hasToken(n.name, MEMBERSHIP_NOUNS);
+        if (hit)
+            add("no-house-member-list", n.where, `${n.kind} "${n.name}" names ${hit}; staff are seats, and house members are never modelled`);
+    }
+    // ── collections-allowlisted ──────────────────────────────────────────────────────────────
+    const allow = new Set(options.collections ?? COLLECTIONS);
+    const seen = new Set();
+    for (const o of operations(doc)) {
+        if (o.kind !== "path" || o.method !== "get")
+            continue;
+        const id = String(o.op.operationId ?? o.pointer);
+        seen.add(id);
+        const declared = typeof o.op["x-indorania-collection"] === "string";
+        const shaped = responseSchemas(o, true).some((r) => isCollectionShape(doc, r.schema));
+        if (!declared && !shaped)
+            continue;
+        if (!allow.has(id))
+            add("collections-allowlisted", o.pointer, `${id} returns a list but is not on the allowlist`);
+        if (shaped && !declared)
+            add("collections-allowlisted", o.pointer, `${id} returns a list without saying why (x-indorania-collection)`);
+        for (const p of parameters(doc, o)) {
+            if (p.in === "query" && !COLLECTION_QUERY.has(p.name))
+                add("collections-allowlisted", p.pointer, `${id} narrows its list by "${p.name}" — a list is paged, never searched`);
+        }
+    }
+    for (const id of allow)
+        if (!seen.has(id))
+            add("collections-allowlisted", "/paths", `allowlisted ${id} is not a read in this document`);
+    // ── no-volume-meter ──────────────────────────────────────────────────────────────────────
+    for (const o of operations(doc)) {
+        if (!Array.isArray(o.op.tags) || !o.op.tags.includes("entitlements"))
+            continue;
+        for (const root of [...inputs(doc, o), ...outputs(o)]) {
+            walk(doc, root.schema, root.pointer, (node, at) => {
+                if (!isObj(node.properties))
+                    return;
+                for (const k of Object.keys(node.properties)) {
+                    const hit = hasToken(k, METER_TOKENS);
+                    if (hit)
+                        add("no-volume-meter", `${at.pointer}/properties/${esc(k)}`, `entitlement field "${k}" meters ${hit}; capacity is what costs work, volume never is`);
+                }
+            });
+        }
+    }
+    // ── no-decline-trace · no-member-names · no-score-or-balance · no-secret-material ───────
+    for (const n of allNames) {
+        const decline = hasToken(n.name, DECLINE_TOKENS);
+        if (decline)
+            add("no-decline-trace", n.where, `${n.kind} "${n.name}" names ${decline}`);
+        if (!(n.kind === "enum-value" && isIdentifierValue(n.name))) {
+            const member = hasToken(n.name, MEMBER_NAMES);
+            if (member)
+                add("no-member-names", n.where, `${n.kind} "${n.name}" names a member (${member})`);
+        }
+        if (n.kind === "property" || n.kind === "parameter") {
+            const score = hasToken(n.name, SCORE_TOKENS);
+            if (score)
+                add("no-score-or-balance", n.where, `${n.kind} "${n.name}" names ${score}`);
+            const secret = hasToken(n.name, SECRET_TOKENS);
+            if (secret)
+                add("no-secret-material", n.where, `${n.kind} "${n.name}" names ${secret}`);
+            if (n.kind === "property" && n.name === "d")
+                add("no-secret-material", n.where, `a property named "d" is a private JWK parameter`);
+        }
+    }
+    const voucher = new Set((options.voucherFields ?? []).map((f) => f.toLowerCase()));
+    if (voucher.size > 0) {
+        for (const o of operations(doc)) {
+            if (!Array.isArray(o.op.tags) || !o.op.tags.includes("thank-yous"))
+                continue;
+            for (const root of [...inputs(doc, o), ...outputs(o)]) {
+                walk(doc, root.schema, root.pointer, (node, at) => {
+                    if (!isObj(node.properties))
+                        return;
+                    for (const k of Object.keys(node.properties)) {
+                        if (voucher.has(k.toLowerCase()))
+                            add("no-score-or-balance", `${at.pointer}/properties/${esc(k)}`, `a thank-you carries "${k}", which could add up`);
+                    }
+                });
+            }
+        }
+    }
+    return summarise(findings);
+}
+//# sourceMappingURL=openapi.js.map

package/dist/constitution/openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../../src/constitution/openapi.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAA8C,MAAM,aAAa,CAAC;AACpF,OAAO,EACL,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,QAAQ,GACT,MAAM,YAAY,CAAC;AAGpB,MAAM,KAAK,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAElG,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,iBAAiB;IACjB,UAAU;IACV,mBAAmB;IACnB,kBAAkB;CACnB,CAAC;AAEF,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACxE,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAS/H,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAUtF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAEtE,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAS;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI;QAC5B,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC;QACnB,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC;KACjB,EAAE,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxB,IAAI,KAAK,CAAC,EAAE,CAAC;oBAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC;YAC9H,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAa;IAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAClG,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,GAAS,EAAE,IAA8B,EAAE,IAAY;IACxE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAUD,2HAA2H;AAC3H,SAAS,IAAI,CAAC,GAAS,EAAE,IAAa,EAAE,OAAe,EAAE,KAAmC;IAC1F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,EAAE,GAAG,CAAC,IAAa,EAAE,EAAU,EAAE,OAAgB,EAAQ,EAAE;QAC/D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,UAAU,GAAG,GAAG,KAAK,kBAAkB,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,yBAAyB,CAAC,KAAK,IAAI,CAAC,CAAC;QAC5G,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACvD,IAAI,UAAU;YAAE,OAAO,CAAC,6BAA6B;QACrD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO;YACrC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,EAAE,CAAC,MAAM,EAAE,uBAAuB,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;gBAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/H,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/G,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,6CAA6C;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC;IAC1G,CAAC,CAAC;IACF,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAOD,SAAS,UAAU,CAAC,GAAS,EAAE,CAAQ;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAC5F,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC/D,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,SAAkB,EAAE,OAAe;IACtD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9D,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,YAAY,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACrH,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAAQ,EAAE,WAAoB;IACrD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAC5D,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,cAAc,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CACtG,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,MAAM,CAAC,GAAS,EAAE,CAAQ;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO;QACL,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,OAAO,cAAc,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,SAAS,OAAO,CAAC,CAAQ;IACvB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC;IAC3F,OAAO,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AASD,yHAAyH;AACzH,SAAS,KAAK,CAAC,GAAS;IACtB,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI;QAC5B,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC;QACpB,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC;KAClB,EAAE,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5I,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,WAAW,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpH,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI;gBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzI,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEvH,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,EAAU,EAAQ,EAAE;QAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QACzB,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAChJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACnJ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7G,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,iBAAiB;gBAAE,SAAS;YAC1H,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,MAAe,EAAW,EAAE;IAChD,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,yBAAyB,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7E,+DAA+D;IAC/D,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,EAAE,CAC1C,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEvH,SAAS,iBAAiB,CAAC,GAAS,EAAE,MAAe;IACnD,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,GAAG,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,GAAG;QAAE,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1F,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,UAA+B,EAAE;IAC9E,MAAM,GAAG,GAAG,QAAgB,CAAC;IAC7B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAE5B,4FAA4F;IAC5F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC5C,IAAI,GAAG;YAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,WAAW,GAAG,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,4FAA4F;IAC5F,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,yBAAyB,CAAC,KAAK,IAAI,EAAE,CAAC;QAClE,GAAG,CAAC,6BAA6B,EAAE,uBAAuB,kBAAkB,EAAE,EAAE,gGAAgG,CAAC,CAAC;IACpL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,6BAA6B,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,qBAAqB,GAAG,kBAAkB,kBAAkB,EAAE,CAAC,CAAC;IACtK,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACjD,IAAI,CAAC,EAAE,CAAC,UAAU;oBAAE,OAAO;gBAC3B,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,EAAE,CAAC,OAAO;oBAAE,MAAM,GAAG,IAAI,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM;YAAE,GAAG,CAAC,6BAA6B,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,kCAAkC,CAAC,CAAC;aAC9F,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,6BAA6B,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,KAAK,iCAAiC,CAAC,CAAC;QAEzH,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACjD,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;oBAChC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,oCAAoC,CAAC,CAAC;oBAC9G,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,oCAAoC,CAAC,CAAC;gBACzG,CAAC;gBACD,IAAI,EAAE,CAAC,GAAG,KAAK,sBAAsB,IAAI,EAAE,CAAC,OAAO;oBAAE,cAAc,GAAG,IAAI,CAAC;YAC7E,CAAC,CAAC,CAAC;QACL,CAAC;QAED,wFAAwF;QACxF,IAAI,KAAK,GAAG,CAAC,IAAI,cAAc;YAAE,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,6DAA6D,CAAC,CAAC;QAC5I,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC5C,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;gBACjD,IAAI,GAAG;oBAAE,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QACrF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC/C,IAAI,GAAG;YAAE,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,WAAW,GAAG,yDAAyD,CAAC,CAAC;IAC7I,CAAC;IAED,4FAA4F;IAC5F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK;YAAE,SAAS;QACtD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,KAAK,QAAQ,CAAC;QACpE,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,SAAS;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,6CAA6C,CAAC,CAAC;QAClH,IAAI,MAAM,IAAI,CAAC,QAAQ;YAAE,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,6DAA6D,CAAC,CAAC;QACvI,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC;QAC9K,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,yBAAyB,EAAE,QAAQ,EAAE,eAAe,EAAE,iCAAiC,CAAC,CAAC;IAExI,4FAA4F;IAC5F,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,SAAS;QAC/E,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;gBAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,OAAO;gBACpC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,GAAG;wBAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,sBAAsB,CAAC,YAAY,GAAG,gDAAgD,CAAC,CAAC;gBAChK,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,OAAO;YAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,WAAW,OAAO,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC9C,IAAI,MAAM;gBAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC7C,IAAI,KAAK;gBAAE,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC;YACvF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAC/C,IAAI,MAAM;gBAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,WAAW,MAAM,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG;gBAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,KAAK,EAAE,iDAAiD,CAAC,CAAC;QACrI,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,SAAS;YAC7E,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;oBAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;wBAAE,OAAO;oBACpC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;4BAAE,GAAG,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,OAAO,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,wBAAwB,CAAC,uBAAuB,CAAC,CAAC;oBACvJ,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC"}

package/dist/constitution/report.d.ts

@@ -0,0 +1,63 @@
+/** The shape every constitutional check reports in, and a plain-text rendering of it. */
+export declare const RULES: {
+    readonly "no-origin-fields": {
+        readonly required: true;
+        readonly title: "No origin, ethnicity, sect, caste or descent field anywhere (d36; content rule 2)";
+    };
+    readonly "no-cross-relationship-joins": {
+        readonly required: true;
+        readonly title: "Nothing joins a person across relationships: person-side ids are relationship ids, one at a time (d41, d47(g))";
+    };
+    readonly "no-house-member-list": {
+        readonly required: true;
+        readonly title: "Nothing lists a house's members, or the houses a person is in (d47(c))";
+    };
+    readonly "collections-allowlisted": {
+        readonly required: false;
+        readonly title: "Only allowlisted reads return lists; none answers \"everything matching X\" (d41; PL-4 edge 3)";
+    };
+    readonly "no-volume-meter": {
+        readonly required: false;
+        readonly title: "Entitlements carry capacity only — no meter, counter or price per record (d50; PL-4 edge 5)";
+    };
+    readonly "no-decline-trace": {
+        readonly required: false;
+        readonly title: "A decline has no endpoint, state or field (d49(a); PL-4 edge 6)";
+    };
+    readonly "no-member-names": {
+        readonly required: false;
+        readonly title: "No member is named in structure — members appear as capabilities (PL-4 edge 7)";
+    };
+    readonly "no-score-or-balance": {
+        readonly required: false;
+        readonly title: "No score, rank, percentage or balance; thank-yous never add up (d27, d43, d49)";
+    };
+    readonly "no-secret-material": {
+        readonly required: false;
+        readonly title: "No private key, secret or seed in any field (d47(g))";
+    };
+};
+export type RuleId = keyof typeof RULES;
+export interface Finding {
+    readonly rule: RuleId;
+    /** A JSON pointer into the OpenAPI document, or `schema.table.column`. */
+    readonly where: string;
+    readonly why: string;
+}
+/** A finding someone has reviewed and accepted, with the reason — printed in every report, never silent. */
+export interface AcceptedFinding extends Finding {
+    readonly reason: string;
+}
+export interface RuleResult {
+    readonly id: RuleId;
+    readonly required: boolean;
+    readonly title: string;
+    readonly findings: readonly Finding[];
+    /** Findings a reviewer accepted, each with its reason. They do not fail the rule. */
+    readonly accepted: readonly AcceptedFinding[];
+}
+/** One result per rule that applies — by default, every rule. */
+export declare function summarise(findings: readonly Finding[], applicable?: readonly RuleId[], accepted?: readonly AcceptedFinding[]): RuleResult[];
+export declare function formatReport(heading: string, results: readonly RuleResult[]): string;
+export declare function passed(results: readonly RuleResult[]): boolean;
+//# sourceMappingURL=report.d.ts.map

package/dist/constitution/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/constitution/report.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCR,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,MAAM,OAAO,KAAK,CAAC;AAExC,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,4GAA4G;AAC5G,MAAM,WAAW,eAAgB,SAAQ,OAAO;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CAC/C;AAED,iEAAiE;AACjE,wBAAgB,SAAS,CACvB,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,UAAU,GAAE,SAAS,MAAM,EAAmC,EAC9D,QAAQ,GAAE,SAAS,eAAe,EAAO,GACxC,UAAU,EAAE,CAYd;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAWpF;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAE9D"}

package/dist/constitution/report.js

@@ -0,0 +1,73 @@
+/** The shape every constitutional check reports in, and a plain-text rendering of it. */
+export const RULES = {
+    "no-origin-fields": {
+        required: true,
+        title: "No origin, ethnicity, sect, caste or descent field anywhere (d36; content rule 2)",
+    },
+    "no-cross-relationship-joins": {
+        required: true,
+        title: "Nothing joins a person across relationships: person-side ids are relationship ids, one at a time (d41, d47(g))",
+    },
+    "no-house-member-list": {
+        required: true,
+        title: "Nothing lists a house's members, or the houses a person is in (d47(c))",
+    },
+    "collections-allowlisted": {
+        required: false,
+        title: "Only allowlisted reads return lists; none answers \"everything matching X\" (d41; PL-4 edge 3)",
+    },
+    "no-volume-meter": {
+        required: false,
+        title: "Entitlements carry capacity only — no meter, counter or price per record (d50; PL-4 edge 5)",
+    },
+    "no-decline-trace": {
+        required: false,
+        title: "A decline has no endpoint, state or field (d49(a); PL-4 edge 6)",
+    },
+    "no-member-names": {
+        required: false,
+        title: "No member is named in structure — members appear as capabilities (PL-4 edge 7)",
+    },
+    "no-score-or-balance": {
+        required: false,
+        title: "No score, rank, percentage or balance; thank-yous never add up (d27, d43, d49)",
+    },
+    "no-secret-material": {
+        required: false,
+        title: "No private key, secret or seed in any field (d47(g))",
+    },
+};
+/** One result per rule that applies — by default, every rule. */
+export function summarise(findings, applicable = Object.keys(RULES), accepted = []) {
+    return applicable.map((id) => {
+        const seen = new Set();
+        const own = findings.filter((f) => {
+            if (f.rule !== id)
+                return false;
+            const key = `${f.where}\u0000${f.why}`;
+            if (seen.has(key))
+                return false;
+            seen.add(key);
+            return true;
+        });
+        return { id, required: RULES[id].required, title: RULES[id].title, findings: own, accepted: accepted.filter((a) => a.rule === id) };
+    });
+}
+export function formatReport(heading, results) {
+    const lines = [heading, ""];
+    for (const r of results) {
+        const mark = r.findings.length === 0 ? "PASS" : "FAIL";
+        lines.push(`${mark}  ${r.id}${r.required ? "" : "  (also checked)"} — ${r.title}`);
+        for (const f of r.findings)
+            lines.push(`        ${f.where}: ${f.why}`);
+        for (const a of r.accepted)
+            lines.push(`        ACCEPTED ${a.where}: ${a.why} — ${a.reason}`);
+    }
+    const failed = results.filter((r) => r.findings.length > 0).length;
+    lines.push("", failed === 0 ? `All ${results.length} rules pass.` : `${failed} of ${results.length} rules fail.`);
+    return lines.join("\n");
+}
+export function passed(results) {
+    return results.every((r) => r.findings.length === 0);
+}
+//# sourceMappingURL=report.js.map

package/dist/constitution/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/constitution/report.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,kBAAkB,EAAE;QAClB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,mFAAmF;KAC3F;IACD,6BAA6B,EAAE;QAC7B,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,gHAAgH;KACxH;IACD,sBAAsB,EAAE;QACtB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,wEAAwE;KAChF;IACD,yBAAyB,EAAE;QACzB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,gGAAgG;KACxG;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,6FAA6F;KACrG;IACD,kBAAkB,EAAE;QAClB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,iEAAiE;KACzE;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,gFAAgF;KACxF;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,gFAAgF;KACxF;IACD,oBAAoB,EAAE;QACpB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,sDAAsD;KAC9D;CACO,CAAC;AAyBX,iEAAiE;AACjE,MAAM,UAAU,SAAS,CACvB,QAA4B,EAC5B,aAAgC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAa,EAC9D,WAAuC,EAAE;IAEzC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;IACtI,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAA8B;IAC1E,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC;IAClH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAA8B;IACnD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/constitution/tables.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The constitution, checked against a database schema — described as plain data, so it works for
+ * any ORM. `@indorania/db` builds this model from its Drizzle tables; a member can build one from
+ * its own.
+ */
+import { type RuleId, type RuleResult } from "./report.ts";
+export interface ColumnModel {
+    readonly name: string;
+    /** e.g. "text", "jsonb", "timestamp with time zone". */
+    readonly sqlType: string;
+    readonly notNull: boolean;
+    readonly enumValues?: readonly string[];
+}
+export interface ForeignKeyModel {
+    readonly columns: readonly string[];
+    readonly foreignSchema: string;
+    readonly foreignTable: string;
+}
+export interface TableModel {
+    readonly schema: string;
+    readonly name: string;
+    readonly columns: readonly ColumnModel[];
+    readonly foreignKeys: readonly ForeignKeyModel[];
+}
+/**
+ * Every json column says what it holds. Party content — anything a person's or a counterparty's
+ * encounter produced — may only sit in a table that expires, so the platform keeps no store of it.
+ */
+export interface JsonColumnClass {
+    /** `schema.table.column` */
+    readonly column: string;
+    readonly holds: "party-content" | "configuration";
+    readonly reason: string;
+}
+/**
+ * A finding a reviewer has accepted, by rule and column, with the reason. For columns a library
+ * defines and we cannot rename (an identity library's `password`, held empty by a CHECK constraint).
+ * An exception that no longer matches a finding fails the check, so a stale one cannot linger.
+ */
+export interface AcceptedColumn {
+    /** `schema.table.column` */
+    readonly column: string;
+    readonly rule: RuleId;
+    readonly reason: string;
+}
+export interface DbModel {
+    readonly tables: readonly TableModel[];
+    readonly jsonColumns: readonly JsonColumnClass[];
+    readonly accepted?: readonly AcceptedColumn[];
+}
+export declare const EXPIRY_COLUMN = "expires_at";
+export declare function checkTables(model: DbModel): RuleResult[];
+//# sourceMappingURL=tables.d.ts.map

package/dist/constitution/tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../src/constitution/tables.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAwD,KAAK,MAAM,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAajH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,4BAA4B;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAID,eAAO,MAAM,aAAa,eAAe,CAAC;AAE1C,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,EAAE,CAmFxD"}