@lovrozagar/oat 0.9.1 → 0.11.0

package/dist/runtime/scope.js

@@ -0,0 +1,423 @@
+/**
+ * Operation scope: which operations a run grades.
+ *
+ * A full run grades every operation some check judges. A targeted run (`--ops`, `--only`) grades
+ * only the named operations. Everything else oat calls — principal sign-up, parent creates, the
+ * cohort create behind a list, teardown deletes — is support: called to reach or observe a
+ * target, never graded. Resolution is static over the entity graph so `oat plan --ops` can show
+ * the scope with no network, and so a typo fails before the first request.
+ */
+import { isAuthFlow } from "../config/define-config.js";
+import { owningEntityName } from "../spec/graph.js";
+import { pathTemplateMatches } from "../spec/load.js";
+import { CHECKS } from "./checks.js";
+export class ScopeError extends Error {
+    name = "ScopeError";
+}
+/** Union of every check's subjects for this entity. */
+export function staticSubjects(entity, model) {
+    const ids = new Set();
+    for (const check of CHECKS)
+        for (const id of check.subjects(entity, model))
+            ids.add(id);
+    return ids;
+}
+/** operationIds named in any principal `auth.steps` — those creates already ran during login. */
+export function authStepOperationIds(principals) {
+    const ids = new Set();
+    for (const principal of principals) {
+        const auth = principal.auth;
+        if (auth === undefined || !isAuthFlow(auth))
+            continue;
+        for (const step of auth.steps) {
+            if ("operationId" in step)
+                ids.add(step.operationId);
+        }
+    }
+    return ids;
+}
+export function createIsAuthProvisioned(createOp, authCreates) {
+    return createOp.freshPrincipal || authCreates.has(createOp.operationId);
+}
+/** Why an entity cannot be seeded and checked, or `null` when it can. */
+export function untestableEntityReason(entity, model, authCreates) {
+    const createOp = entity.create === undefined ? undefined : model.byOperationId.get(entity.create);
+    const authProvisioned = createOp !== undefined && createIsAuthProvisioned(createOp, authCreates);
+    /* Register-as-create with no item route is the auth flow, not a fixture. */
+    if (authProvisioned && entity.read === undefined) {
+        return `"${entity.name}" is created by the auth flow and has no item route`;
+    }
+    if (entity.invite !== null && entity.list !== undefined)
+        return null;
+    const missing = [
+        ...(entity.list === undefined ? ["a list operation"] : []),
+        ...(entity.create === undefined ? ["a create operation"] : []),
+        ...(entity.list !== undefined && entity.create !== undefined && !entity.trackable
+            ? ["records oat can identify after create"]
+            : []),
+    ];
+    return missing.length === 0 ? null : `"${entity.name}" has no ${missing.join(" and no ")}`;
+}
+export function testableEntities(model, authCreates) {
+    return [...model.entities.values()]
+        .filter((entity) => untestableEntityReason(entity, model, authCreates) === null)
+        .sort((a, b) => a.name.localeCompare(b.name));
+}
+function globToRegExp(pattern) {
+    const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+    return new RegExp(`^${escaped}$`);
+}
+function distance(a, b) {
+    const row = Array.from({ length: b.length + 1 }, (_, i) => i);
+    for (let i = 1; i <= a.length; i++) {
+        let diagonal = row[0];
+        row[0] = i;
+        for (let j = 1; j <= b.length; j++) {
+            const above = row[j];
+            row[j] = Math.min(above + 1, row[j - 1] + 1, diagonal + (a[i - 1] === b[j - 1] ? 0 : 1));
+            diagonal = above;
+        }
+    }
+    return row[b.length];
+}
+function nearest(name, candidates) {
+    return [...candidates]
+        .map((candidate) => ({ candidate, d: distance(name, candidate) }))
+        .filter((item) => item.d <= Math.max(3, Math.floor(name.length / 3)))
+        .sort((a, b) => a.d - b.d || a.candidate.localeCompare(b.candidate))
+        .slice(0, 3)
+        .map((item) => item.candidate);
+}
+function didYouMean(name, candidates) {
+    const close = nearest(name, candidates);
+    return close.length === 0 ? "" : ` Did you mean: ${close.join(", ")}?`;
+}
+function matchPattern(pattern, model, label) {
+    if (!pattern.includes("*")) {
+        if (model.byOperationId.has(pattern))
+            return { exact: true, ids: [pattern] };
+        throw new ScopeError(`oat: --ops "${label}" matches no operation.${didYouMean(pattern, model.byOperationId.keys())}`);
+    }
+    const re = globToRegExp(pattern);
+    const ids = [...model.byOperationId.keys()].filter((id) => re.test(id));
+    if (ids.length === 0)
+        throw new ScopeError(`oat: --ops "${label}" matches no operation.`);
+    return { exact: false, ids };
+}
+function untestableReason(op, model, authCreates) {
+    if (op.entity === null) {
+        return `unmodeled: no entity owns ${op.method.toUpperCase()} ${op.path}`;
+    }
+    const entity = model.entities.get(op.entity);
+    const why = entity === undefined ? `"${op.entity}" is not modeled` : untestableEntityReason(entity, model, authCreates);
+    if (why !== null)
+        return `entity-not-testable: ${why}`;
+    return `no-applicable-check: no check judges ${op.operationId}`;
+}
+export function resolveTargetScope(model, input) {
+    const ops = [...(input.ops ?? [])].map((s) => s.trim()).filter(Boolean);
+    const only = [...(input.only ?? [])].map((s) => s.trim()).filter(Boolean);
+    const authCreates = input.authCreates ?? new Set();
+    const testable = testableEntities(model, authCreates);
+    const requested = { only, ops };
+    if (ops.length === 0 && only.length === 0) {
+        return {
+            entities: testable,
+            excluded: [],
+            inScope: () => true,
+            mode: "full",
+            origins: new Map(),
+            requested,
+            targets: new Set(),
+            untestable: new Map(),
+        };
+    }
+    const targets = new Set();
+    const originTargets = new Map();
+    const excluded = [];
+    const admit = (id, exact, opModel, into, label) => {
+        const op = opModel.byOperationId.get(id);
+        const reason = op === undefined || input.exclusion === undefined ? null : input.exclusion.reason(op);
+        if (reason === null) {
+            into.add(id);
+            return;
+        }
+        if (exact) {
+            throw new ScopeError(`oat: target ${label} is excluded by --profile ${input.exclusion?.profile} (${reason}). ` +
+                `Drop it from --ops or run --profile full.`);
+        }
+        excluded.push({ operationId: label, reason });
+    };
+    for (const pattern of ops) {
+        const colon = pattern.indexOf(":");
+        const originId = colon > 0 ? pattern.slice(0, colon) : undefined;
+        const originModel = originId === undefined ? undefined : input.origins?.get(originId);
+        if (originId !== undefined && originModel !== undefined) {
+            const local = pattern.slice(colon + 1);
+            const into = originTargets.get(originId) ?? new Set();
+            originTargets.set(originId, into);
+            const matched = matchPattern(local, originModel, pattern);
+            for (const id of matched.ids)
+                admit(id, matched.exact, originModel, into, `${originId}:${id}`);
+            continue;
+        }
+        if (originId !== undefined && !model.byOperationId.has(pattern) && input.origins !== undefined) {
+            const known = [...input.origins.keys()];
+            if (!known.includes(originId)) {
+                throw new ScopeError(`oat: --ops "${pattern}" names origin "${originId}", which is not configured.` +
+                    (known.length === 0 ? "" : ` Known: ${known.join(", ")}.`));
+            }
+        }
+        const matched = matchPattern(pattern, model, pattern);
+        for (const id of matched.ids)
+            admit(id, matched.exact, model, targets, id);
+    }
+    for (const name of only) {
+        let found = false;
+        if (model.entities.has(name)) {
+            found = true;
+            for (const op of model.operations)
+                if (op.entity === name)
+                    admit(op.operationId, false, model, targets, op.operationId);
+        }
+        for (const [originId, originModel] of input.origins ?? []) {
+            if (!originModel.entities.has(name))
+                continue;
+            found = true;
+            const into = originTargets.get(originId) ?? new Set();
+            originTargets.set(originId, into);
+            for (const op of originModel.operations) {
+                if (op.entity === name)
+                    admit(op.operationId, false, originModel, into, `${originId}:${op.operationId}`);
+            }
+        }
+        if (!found) {
+            const known = [
+                ...model.entities.keys(),
+                ...[...(input.origins?.values() ?? [])].flatMap((m) => [...m.entities.keys()]),
+            ];
+            throw new ScopeError(`oat: --only "${name}" names no entity.${didYouMean(name, known)}`);
+        }
+    }
+    const graded = new Set();
+    const entities = testable.filter((entity) => {
+        const subjects = staticSubjects(entity, model);
+        const hit = [...subjects].some((id) => targets.has(id));
+        if (hit)
+            for (const id of subjects)
+                if (targets.has(id))
+                    graded.add(id);
+        return hit;
+    });
+    const untestable = new Map();
+    for (const id of targets) {
+        if (graded.has(id))
+            continue;
+        const op = model.byOperationId.get(id);
+        if (op !== undefined)
+            untestable.set(id, untestableReason(op, model, authCreates));
+    }
+    const origins = new Map();
+    for (const [originId, ids] of originTargets)
+        if (ids.size > 0)
+            origins.set(originId, [...ids]);
+    return {
+        entities,
+        excluded,
+        inScope: (operationId) => targets.has(operationId),
+        mode: "targeted",
+        origins,
+        requested,
+        targets,
+        untestable,
+    };
+}
+/** Which checks graded which operations, filled as checks run. */
+export class GradeLedger {
+    ran = new Map();
+    suppressed = new Map();
+    needs = new Map();
+    #add(map, operations, value) {
+        for (const op of operations) {
+            const set = map.get(op) ?? new Set();
+            set.add(value);
+            map.set(op, set);
+        }
+    }
+    graded(operations, check) {
+        this.#add(this.ran, operations, check);
+    }
+    suppress(operations, check) {
+        this.#add(this.suppressed, operations, check);
+    }
+    skipped(operations, needs) {
+        this.#add(this.needs, operations, needs);
+    }
+}
+const NOT_DEFECTS = new Set(["COVERAGE_GAP", "BLOCKED"]);
+/** The operation an exchange hit, preferring literal segments over parameters on a tie. */
+export function operationFor(model, method, url, baseUrl) {
+    let pathname;
+    let basePath;
+    try {
+        pathname = new URL(url).pathname;
+        basePath = new URL(baseUrl).pathname.replace(/\/$/, "");
+    }
+    catch {
+        return null;
+    }
+    const local = basePath !== "" && pathname.startsWith(basePath) ? pathname.slice(basePath.length) : pathname;
+    let best = null;
+    let bestParams = Number.POSITIVE_INFINITY;
+    for (const op of model.operations) {
+        if (op.method.toUpperCase() !== method.toUpperCase())
+            continue;
+        if (!pathTemplateMatches(op.path, local) && !pathTemplateMatches(op.path, pathname))
+            continue;
+        if (op.pathParams.length < bestParams) {
+            best = op;
+            bestParams = op.pathParams.length;
+        }
+    }
+    return best;
+}
+function statusOf(held, failed, inconclusive, blocked) {
+    if (failed > 0)
+        return "failed";
+    if (held > 0)
+        return "held";
+    if (inconclusive > 0)
+        return "inconclusive";
+    return blocked ? "blocked" : "untested";
+}
+export function buildScopeReport(input) {
+    const { model, scope, ledger } = input;
+    const graded = new Set();
+    for (const entity of scope.entities)
+        for (const id of staticSubjects(entity, model))
+            graded.add(id);
+    const ids = scope.mode === "targeted" ? [...scope.targets].sort() : model.operations.map((op) => op.operationId);
+    const operations = ids.map((operationId) => {
+        const op = model.byOperationId.get(operationId);
+        const mine = (attributed) => attributed?.includes(operationId) === true;
+        const defects = input.findings.filter((f) => mine(f.operations) && !NOT_DEFECTS.has(f.verdict));
+        const blocked = input.findings.filter((f) => mine(f.operations) && f.verdict === "BLOCKED");
+        const failed = [...new Set(defects.map((f) => f.check))].sort();
+        const inconclusive = [...new Set(input.inconclusive.filter((i) => mine(i.operations)).map((i) => i.check))]
+            .filter((check) => !failed.includes(check))
+            .sort();
+        const ran = ledger.ran.get(operationId) ?? new Set();
+        const gapFindings = input.findings.filter((f) => mine(f.operations) && f.verdict === "COVERAGE_GAP" && ran.has(f.check));
+        const gaps = [...new Set(gapFindings.map((f) => f.check))].filter((check) => !failed.includes(check)).sort();
+        const held = [...ran]
+            .filter((check) => !failed.includes(check) && !inconclusive.includes(check) && !gaps.includes(check))
+            .sort();
+        const suppressed = [...(ledger.suppressed.get(operationId) ?? [])].sort();
+        const status = statusOf(held.length, failed.length, inconclusive.length, suppressed.length > 0 || blocked.length > 0);
+        let reason = null;
+        if (status === "blocked") {
+            reason = blocked[0]?.detail ?? `suppressed by an earlier failure (${suppressed.join(", ")})`;
+        }
+        else if (status === "untested") {
+            const statically = scope.untestable.get(operationId) ??
+                (op !== undefined && !graded.has(operationId) ? untestableReason(op, model, input.authCreates) : undefined);
+            const needs = [...(ledger.needs.get(operationId) ?? [])];
+            reason =
+                statically ??
+                    (gapFindings[0] === undefined ? undefined : `coverage gap: ${gapFindings[0].summary}`) ??
+                    (needs.length > 0 ? `no check applied: needs ${needs.slice(0, 3).join("; ")}` : "no check exercised it");
+        }
+        return {
+            checks: { failed, gaps, held, inconclusive, suppressed },
+            entity: op?.entity ?? null,
+            findings: defects.length,
+            operationId,
+            reason,
+            status,
+        };
+    });
+    const support = new Map();
+    if (scope.mode === "targeted") {
+        for (const exchange of input.transcript) {
+            const named = exchange.operationId === undefined ? undefined : model.byOperationId.get(exchange.operationId);
+            const op = named ?? operationFor(model, exchange.method, exchange.url, input.baseUrl);
+            if (op === null || scope.targets.has(op.operationId))
+                continue;
+            const use = support.get(op.operationId) ?? { calls: 0, non2xx: 0, operationId: op.operationId };
+            use.calls++;
+            if (exchange.status < 200 || exchange.status >= 300) {
+                use.non2xx++;
+                use.firstFailure ??= { requestId: exchange.requestId, status: exchange.status };
+            }
+            support.set(op.operationId, use);
+        }
+    }
+    return {
+        excluded: scope.excluded,
+        mode: scope.mode,
+        operations,
+        originsSkipped: [],
+        requested: scope.requested,
+        support: [...support.values()].sort((a, b) => a.operationId.localeCompare(b.operationId)),
+    };
+}
+/** `--ops a,b --only c` as the reader typed it. */
+export function describeRequested(requested) {
+    return [
+        ...(requested.ops.length > 0 ? [`--ops ${requested.ops.join(",")}`] : []),
+        ...(requested.only.length > 0 ? [`--only ${requested.only.join(",")}`] : []),
+    ].join(" ");
+}
+/** The scope a run would take, with no network: what `oat plan --ops` prints. */
+export function planScope(model, scope) {
+    const checksFor = new Map();
+    for (const entity of scope.entities) {
+        for (const check of CHECKS) {
+            for (const id of check.subjects(entity, model)) {
+                if (!scope.inScope(id))
+                    continue;
+                const set = checksFor.get(id) ?? new Set();
+                set.add(check.id);
+                checksFor.set(id, set);
+            }
+        }
+    }
+    const support = new Set();
+    const parents = (op, seen) => {
+        if (op === undefined || seen.has(op.operationId))
+            return;
+        seen.add(op.operationId);
+        for (const param of op.pathParams) {
+            const owner = owningEntityName(op.path, param);
+            const create = owner === null ? undefined : model.byOperationId.get(model.entities.get(owner)?.create ?? "");
+            if (create === undefined || create.operationId === op.operationId)
+                continue;
+            support.add(create.operationId);
+            parents(create, seen);
+        }
+    };
+    for (const entity of scope.entities) {
+        for (const id of [entity.create, entity.list, entity.read, entity.delete])
+            if (id !== undefined)
+                support.add(id);
+        parents(model.byOperationId.get(entity.create ?? ""), new Set());
+    }
+    const ids = scope.mode === "targeted" ? [...scope.targets].sort() : [...checksFor.keys()].sort();
+    return {
+        entities: scope.entities.map((entity) => entity.name),
+        excluded: scope.excluded,
+        mode: scope.mode,
+        origins: Object.fromEntries(scope.origins),
+        requested: scope.requested,
+        support: [...support].filter((id) => scope.mode === "full" || !scope.targets.has(id)).sort(),
+        targets: ids
+            .filter((id) => !scope.untestable.has(id))
+            .map((operationId) => ({
+            checks: [...(checksFor.get(operationId) ?? [])].sort(),
+            entity: model.byOperationId.get(operationId)?.entity ?? null,
+            operationId,
+        })),
+        untestable: [...scope.untestable].map(([operationId, reason]) => ({ operationId, reason })),
+    };
+}
+//# sourceMappingURL=scope.js.map

package/dist/runtime/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/runtime/scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAkB,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAyC,gBAAgB,EAAkB,MAAM,kBAAkB,CAAA;AAC1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAIpC,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC3B,IAAI,GAAG,YAAY,CAAA;CAC5B;AA+BD,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,MAAmB,EAAE,KAAgB;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACvF,OAAO,GAAG,CAAA;AACX,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,oBAAoB,CAAC,UAAgC;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAA;QAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAQ;QACrD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,aAAa,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACrD,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAwB,EAAE,WAAgC;IACjG,OAAO,QAAQ,CAAC,cAAc,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACxE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CACrC,MAAmB,EACnB,KAAgB,EAChB,WAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACjG,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS,IAAI,uBAAuB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAChG,4EAA4E;IAC5E,IAAI,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,IAAI,MAAM,CAAC,IAAI,qDAAqD,CAAA;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACpE,MAAM,OAAO,GAAG;QACf,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS;YAChF,CAAC,CAAC,CAAC,uCAAuC,CAAC;YAC3C,CAAC,CAAC,EAAE,CAAC;KACN,CAAA;IACD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,YAAY,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAgB,EAAE,WAAgC;IAClF,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;SACjC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,CAAC;SAC/E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAClF,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAW,CAAA;QAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAW,CAAA;YAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAY,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACpG,QAAQ,GAAG,KAAK,CAAA;QACjB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAW,CAAA;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,UAA4B;IAC1D,OAAO,CAAC,GAAG,UAAU,CAAC;SACpB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;SACjE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;SACpE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;SACnE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,UAA4B;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACvC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;AACvE,CAAC;AAOD,SAAS,YAAY,CAAC,OAAe,EAAE,KAAgB,EAAE,KAAa;IACrE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAA;QAC5E,MAAM,IAAI,UAAU,CACnB,eAAe,KAAK,0BAA0B,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAC/F,CAAA;IACF,CAAC;IACD,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,KAAK,yBAAyB,CAAC,CAAA;IACzF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAkB,EAAE,KAAgB,EAAE,WAAgC;IAC/F,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,6BAA6B,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,GAAG,GACR,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;IAC5G,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,wBAAwB,GAAG,EAAE,CAAA;IACtD,OAAO,wCAAwC,EAAE,CAAC,WAAW,EAAE,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAgB,EAAE,KAAiB;IACrE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzE,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,GAAG,EAAU,CAAA;IAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IAE/B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO;YACN,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;YACnB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,SAAS;YACT,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,UAAU,EAAE,IAAI,GAAG,EAAE;SACrB,CAAA;IACF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,QAAQ,GAAmD,EAAE,CAAA;IAEnE,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,KAAc,EAAE,OAAkB,EAAE,IAAiB,EAAE,KAAa,EAAQ,EAAE;QACxG,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACxC,MAAM,MAAM,GAAG,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACpG,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACZ,OAAM;QACP,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,UAAU,CACnB,eAAe,KAAK,6BAA6B,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,MAAM,KAAK;gBACxF,2CAA2C,CAC5C,CAAA;QACF,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAC9C,CAAC,CAAA;IAED,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrF,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACtC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;YAC7D,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACjC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;YACzD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG;gBAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAA;YAC9F,SAAQ;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChG,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YACvC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,UAAU,CACnB,eAAe,OAAO,mBAAmB,QAAQ,6BAA6B;oBAC7E,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAC3D,CAAA;YACF,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QACrD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG;YAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,KAAK,GAAG,IAAI,CAAA;YACZ,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU;gBAChC,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI;oBAAE,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,CAAA;QACtF,CAAC;QACD,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC3D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC7C,KAAK,GAAG,IAAI,CAAA;YACZ,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;YAC7D,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACjC,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI;oBAAE,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,QAAQ,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;YACzG,CAAC;QACF,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG;gBACb,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACxB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;aAC9E,CAAA;YACD,MAAM,IAAI,UAAU,CAAC,gBAAgB,IAAI,qBAAqB,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;QACzF,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACvD,IAAI,GAAG;YAAE,KAAK,MAAM,EAAE,IAAI,QAAQ;gBAAE,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvE,OAAO,GAAG,CAAA;IACX,CAAC,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAQ;QAC5B,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtC,IAAI,EAAE,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,aAAa;QAAE,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IAE9F,OAAO;QACN,QAAQ;QACR,QAAQ;QACR,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAClD,IAAI,EAAE,UAAU;QAChB,OAAO;QACP,SAAS;QACT,OAAO;QACP,UAAU;KACV,CAAA;AACF,CAAC;AAwCD,kEAAkE;AAClE,MAAM,OAAO,WAAW;IACd,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpC,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC3C,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAA;IAE/C,IAAI,CAAC,GAA6B,EAAE,UAA6B,EAAE,KAAa;QAC/E,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;YAC5C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACd,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACjB,CAAC;IACF,CAAC;IAED,MAAM,CAAC,UAA6B,EAAE,KAAa;QAClD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IACvC,CAAC;IAED,QAAQ,CAAC,UAA6B,EAAE,KAAa;QACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAC9C,CAAC;IAED,OAAO,CAAC,UAA6B,EAAE,KAAa;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IACzC,CAAC;CACD;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAA;AAExD,2FAA2F;AAC3F,MAAM,UAAU,YAAY,CAAC,KAAgB,EAAE,MAAc,EAAE,GAAW,EAAE,OAAe;IAC1F,IAAI,QAAgB,CAAA;IACpB,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;QAChC,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IAC3G,IAAI,IAAI,GAA0B,IAAI,CAAA;IACtC,IAAI,UAAU,GAAG,MAAM,CAAC,iBAAiB,CAAA;IACzC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC9D,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,SAAQ;QAC7F,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACvC,IAAI,GAAG,EAAE,CAAA;YACT,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAA;QAClC,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAaD,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc,EAAE,YAAoB,EAAE,OAAgB;IACrF,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC/B,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,MAAM,CAAA;IAC3B,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,cAAc,CAAA;IAC3C,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAoB;IACpD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ;QAAE,KAAK,MAAM,EAAE,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEnG,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;IAEhH,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAqB,EAAE;QAC7D,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC/C,MAAM,IAAI,GAAG,CAAC,UAAgC,EAAW,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,CAAA;QACtG,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QAC/F,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAA;QAC3F,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/D,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;aACzG,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aAC1C,IAAI,EAAE,CAAA;QACR,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;QAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,cAAc,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAC7E,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5G,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC;aACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACpG,IAAI,EAAE,CAAA;QACR,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzE,MAAM,MAAM,GAAG,QAAQ,CACtB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,MAAM,EACb,YAAY,CAAC,MAAM,EACnB,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAC3C,CAAA;QACD,IAAI,MAAM,GAAkB,IAAI,CAAA;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,qCAAqC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;QAC7F,CAAC;aAAM,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,UAAU,GACf,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;gBACjC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC5G,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YACxD,MAAM;gBACL,UAAU;oBACV,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;oBACtF,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAA;QAC1G,CAAC;QACD,OAAO;YACN,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE;YACxD,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,IAAI;YAC1B,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,WAAW;YACX,MAAM;YACN,MAAM;SACN,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YAC5G,MAAM,EAAE,GAAG,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YACrF,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC;gBAAE,SAAQ;YAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAA;YAC/F,GAAG,CAAC,KAAK,EAAE,CAAA;YACX,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBACrD,GAAG,CAAC,MAAM,EAAE,CAAA;gBACZ,GAAG,CAAC,YAAY,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;YAChF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QACjC,CAAC;IACF,CAAC;IAED,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU;QACV,cAAc,EAAE,EAAE;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;KACzF,CAAA;AACF,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAAC,SAA8D;IAC/F,OAAO;QACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACZ,CAAC;AAgBD,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,KAAgB,EAAE,KAAkB;IAC7D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAA;IAChD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAAE,SAAQ;gBAChC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;gBAClD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YACvB,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,OAAO,GAAG,CAAC,EAA8B,EAAE,IAAiB,EAAQ,EAAE;QAC3E,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC;YAAE,OAAM;QACxD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;QACxB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAA;YAC5G,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC,WAAW;gBAAE,SAAQ;YAC3E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC/B,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACtB,CAAC;IACF,CAAC,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChH,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAChG,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QAC5F,OAAO,EAAE,GAAG;aACV,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACzC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACtB,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;YACtD,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,IAAI;YAC5D,WAAW;SACX,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;KAC3F,CAAA;AACF,CAAC"}

package/dist/runtime/teardown.d.ts

@@ -8,11 +8,18 @@
  */
 import type { SpecModel } from "../spec/graph.ts";
 import type { Client } from "./client.ts";
+/** The principal a record belongs to, as far as removing it goes. */
+export interface Owner {
+    id: string;
+    headers: () => Record<string, string>;
+}
 export interface Disposable {
     entity: string;
     id: string;
     /** Path parameters in scope when the record was created. */
     scope: Record<string, string>;
+    /** Who created it. Only the creator's view of the record decides whether it is gone. */
+    owner: Owner;
 }
 export interface TeardownReport {
     removed: number;
@@ -24,15 +31,21 @@ export interface TeardownReport {
     unsupported: string[];
 }
 /**
- * Registry of what a run brought into existence. Entities are recorded in creation order so the
- * unwind can reverse it.
+ * Registry of what a run brought into existence, recorded the moment each record is created.
+ *
+ * Entries carry their creator. Removing a record with somebody else's credential is at best a
+ * 403 and at worst a 404 that reads as success while the record sits on in the creator's tenant —
+ * so the creator deletes first, and a 404 counts as removal only when the creator sees it.
+ * Entities are recorded in creation order so the unwind can reverse it. A record oat adopted
+ * rather than created must never be recorded here: it was not oat's to remove.
  */
 export declare class Ledger {
     private readonly items;
-    record(entity: string, id: string, scope: Record<string, string>): void;
+    private readonly seen;
+    record(entity: string, id: string, scope: Record<string, string>, owner: Owner): void;
     get size(): number;
     entries(): readonly Disposable[];
-    unwind(model: SpecModel, client: Client, headers: () => Record<string, string>, onItem?: (done: number, total: number, item: Disposable) => void): Promise<TeardownReport>;
+    unwind(model: SpecModel, client: Client, fallbacks: (owner: Owner) => Owner[], onItem?: (done: number, total: number, item: Disposable) => void): Promise<TeardownReport>;
 }
 export declare function renderTeardown(report: TeardownReport, created: number): string[];
 //# sourceMappingURL=teardown.d.ts.map

package/dist/runtime/teardown.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"teardown.d.ts","sourceRoot":"","sources":["../../src/runtime/teardown.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAkB,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAIzC,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;IACV,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7D,WAAW,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;;GAGG;AACH,qBAAa,MAAM;IAClB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IAEzC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAKvE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,IAAI,SAAS,UAAU,EAAE;IAI1B,MAAM,CACX,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,IAAI,GAC9D,OAAO,CAAC,cAAc,CAAC;CA2D1B;AAuBD,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAqBhF"}
+{"version":3,"file":"teardown.d.ts","sourceRoot":"","sources":["../../src/runtime/teardown.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAkB,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAIzC,qEAAqE;AACrE,MAAM,WAAW,KAAK;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrC;AAED,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;IACV,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,wFAAwF;IACxF,KAAK,EAAE,KAAK,CAAA;CACZ;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7D,WAAW,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,qBAAa,MAAM;IAClB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IAEzC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI;IAQrF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,IAAI,SAAS,UAAU,EAAE;IAI1B,MAAM,CACX,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,MAAM,EAGd,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,KAAK,EAAE,EACpC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,IAAI,GAC9D,OAAO,CAAC,cAAc,CAAC;CA8E1B;AAuBD,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAqBhF"}

package/dist/runtime/teardown.js

@@ -9,15 +9,25 @@
 import { parseRouteRef } from "../spec/load.js";
 import { fillPath } from "./world.js";
 /**
- * Registry of what a run brought into existence. Entities are recorded in creation order so the
- * unwind can reverse it.
+ * Registry of what a run brought into existence, recorded the moment each record is created.
+ *
+ * Entries carry their creator. Removing a record with somebody else's credential is at best a
+ * 403 and at worst a 404 that reads as success while the record sits on in the creator's tenant —
+ * so the creator deletes first, and a 404 counts as removal only when the creator sees it.
+ * Entities are recorded in creation order so the unwind can reverse it. A record oat adopted
+ * rather than created must never be recorded here: it was not oat's to remove.
  */
 export class Ledger {
     items = [];
-    record(entity, id, scope) {
+    seen = new Set();
+    record(entity, id, scope, owner) {
         if (id === "" || id === "undefined")
             return;
-        this.items.push({ entity, id, scope: { ...scope } });
+        const key = `${entity}\u0000${id}`;
+        if (this.seen.has(key))
+            return;
+        this.seen.add(key);
+        this.items.push({ entity, id, owner, scope: { ...scope } });
     }
     get size() {
         return this.items.length;
@@ -25,20 +35,28 @@ export class Ledger {
     entries() {
         return this.items;
     }
-    async unwind(model, client, headers, onItem) {
+    async unwind(model, client, 
+    /* Principals allowed to remove a record its creator was refused, strongest first — the
+     * same tenant's owner removing what a member created. */
+    fallbacks, onItem) {
         const report = { failed: [], removed: 0, unsupported: [] };
         const unsupported = new Set();
-        /* Newest first: a child created inside a parent must be removed before the parent, and
-         * creation order already encodes that dependency. */
+        /*
+         * Deepest first, one level at a time, and every record within a level at once. A record's
+         * depth is how many path parameters its delete route takes: a child's route carries its
+         * parent's parameters and its own, so a level never holds a record and its parent.
+         * Newest first within a level keeps the order the creation sequence implies.
+         */
         const queue = [...this.items].reverse();
+        const depthOf = (item) => deleteOperationFor(item.entity, model)?.pathParams.length ?? 0;
+        const levels = [...new Set(queue.map(depthOf))].sort((a, b) => b - a);
         let done = 0;
-        for (const item of queue) {
-            onItem?.(done, queue.length, item);
+        const remove = async (item) => {
             const deleteOp = deleteOperationFor(item.entity, model);
             if (deleteOp === null) {
                 unsupported.add(item.entity);
                 done += 1;
-                continue;
+                return;
             }
             const param = deleteOp.pathParams.at(-1);
             const scope = param === undefined ? item.scope : { ...item.scope, [param]: item.id };
@@ -53,19 +71,31 @@ export class Ledger {
                     reason: error instanceof Error ? error.message : String(error),
                 });
                 done += 1;
-                continue;
+                return;
             }
             try {
-                const exchange = await client.request("DELETE", path, { headers });
-                /* 404 means it is already gone — the goal is absence, not a successful call. */
-                if (exchange.status < 300 || exchange.status === 404 || exchange.status === 410) {
-                    report.removed += 1;
+                const attempts = [];
+                let removed = false;
+                for (const [index, deleter] of [item.owner, ...fallbacks(item.owner)].entries()) {
+                    const exchange = await client.request("DELETE", path, { headers: deleter.headers });
+                    attempts.push(`${deleter.id}: ${exchange.status}`);
+                    /* Gone is the goal, not a successful call — but only the creator's 404 says the
+                     * record is gone. Anyone else's may just mean they cannot see it. */
+                    if (exchange.status < 300 || (index === 0 && (exchange.status === 404 || exchange.status === 410))) {
+                        removed = true;
+                        break;
+                    }
+                    /* Only a denial is worth retrying with a stronger credential. */
+                    if (exchange.status !== 401 && exchange.status !== 403)
+                        break;
                 }
+                if (removed)
+                    report.removed += 1;
                 else {
                     report.failed.push({
                         entity: item.entity,
                         id: item.id,
-                        reason: `DELETE ${path} returned ${exchange.status}`,
+                        reason: `DELETE ${path} returned ${attempts.join(", ")}`,
                     });
                 }
             }
@@ -78,6 +108,9 @@ export class Ledger {
             }
             done += 1;
             onItem?.(done, queue.length, item);
+        };
+        for (const level of levels) {
+            await Promise.all(queue.filter((item) => depthOf(item) === level).map(remove));
         }
         report.unsupported = [...unsupported];
         return report;