@nacre.work/api 0.31.1 → 0.32.0

package/dist/access.d.ts

@@ -0,0 +1,81 @@
+import { type Permission, type PrincipalType } from '@nacre.work/core';
+import type { Pool } from 'pg';
+import { type PrincipalsCache } from './adapters.js';
+import { type AuthContext } from './auth.js';
+/**
+ * What somebody else can reach, computed by the resolver — for an
+ * administrator asking "what does Petya see, and why".
+ *
+ * docs/mcp-admin.md lists it among the administrative reads, and it is the one
+ * that cannot be answered by reading the grant list. A grant list says what
+ * was *issued*; what a principal reaches is what the resolver makes of those
+ * grants, their groups' grants, the denies beneath them and their role — and
+ * an administrator adding that up by hand from a list is exactly how the wrong
+ * conclusion gets drawn about who can read a contract.
+ *
+ * So it asks the **active resolver**, the same one search asks, with the same
+ * input `contextFor` builds for a request — the subject's own effective
+ * principals, their grants, the scope tree. A module that replaces the
+ * resolver replaces this answer with it, which is the property: the access
+ * view and the search path cannot disagree about who sees what.
+ *
+ * No ceiling, deliberately. The subject is a principal and not a token, and
+ * what a connection of theirs may do is the connection's own ceiling on top of
+ * this, which the Connections listing already says.
+ */
+export interface AccessSubject {
+    readonly type: PrincipalType;
+    readonly id: string;
+}
+/** One permission's reach, as the resolver plans it. */
+export interface Reach {
+    /** Every layer in the organization, by role or by grants. */
+    readonly all: boolean;
+    /** Layers reachable in full, by id — at most `MAX_REACH_LAYERS` of them. */
+    readonly layers: readonly string[];
+    /** How many more layers the plan reaches than `layers` lists. */
+    readonly moreLayers: number;
+    /** Documents reached outside those layers, by a document-scoped grant. */
+    readonly extraDocuments: number;
+    /** Documents a deny excludes inside a reached layer. */
+    readonly deniedDocuments: number;
+}
+export interface EffectiveAccess {
+    readonly subject: AccessSubject;
+    /** The role, for a user; `member` for anything else. */
+    readonly role: AuthContext['role'];
+    /** The groups the subject belongs to, directly or through other groups. */
+    readonly groups: readonly string[];
+    readonly read: Reach;
+    readonly write: Reach;
+    readonly admin: Reach;
+    /**
+     * The grants that decide it: every grant naming the subject or one of their
+     * groups. A grant naming somebody else cannot change this answer, so it is
+     * not here.
+     */
+    readonly grants: readonly {
+        readonly principal: string;
+        readonly scopeType: string;
+        readonly scopeId: string;
+        readonly permission: Permission;
+        readonly effect: 'allow' | 'deny';
+    }[];
+}
+/** Bounded, because a scoped plan on an installation sized in layers is unbounded. */
+export declare const MAX_REACH_LAYERS = 200;
+export declare class PostgresAccess {
+    private readonly pool;
+    private readonly role?;
+    private readonly principalsCache?;
+    constructor(pool: Pool, role?: string | undefined, principalsCache?: PrincipalsCache | undefined);
+    /**
+     * `undefined` when the caller does not administer the organization, or the
+     * subject is not a live principal in it — one answer, invariant 4. A
+     * disabled user is still answered: an administrator asking what somebody
+     * who has left could reach is asking the question this exists for, and
+     * their grants still stand until somebody removes them.
+     */
+    effective(auth: AuthContext, subject: AccessSubject): Promise<EffectiveAccess | undefined>;
+}
+//# sourceMappingURL=access.d.ts.map

package/dist/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC/F,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAE9B,OAAO,EAAc,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAChE,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,WAAW,CAAA;AAEzD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,KAAK;IACpB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,iEAAiE;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;QAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;KAClC,EAAE,CAAA;CACJ;AAED,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,MAAM,CAAA;AAInC,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAFhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD;;;;;;OAMG;IACG,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;CAqDjG"}

package/dist/access.js

@@ -0,0 +1,92 @@
+import { activeResolver, withOrg } from '@nacre.work/core';
+import { contextFor } from './adapters.js';
+import { administers } from './auth.js';
+/** Bounded, because a scoped plan on an installation sized in layers is unbounded. */
+export const MAX_REACH_LAYERS = 200;
+const PERMISSIONS = ['read', 'write', 'admin'];
+export class PostgresAccess {
+    pool;
+    role;
+    principalsCache;
+    constructor(pool, role, principalsCache) {
+        this.pool = pool;
+        this.role = role;
+        this.principalsCache = principalsCache;
+    }
+    /**
+     * `undefined` when the caller does not administer the organization, or the
+     * subject is not a live principal in it — one answer, invariant 4. A
+     * disabled user is still answered: an administrator asking what somebody
+     * who has left could reach is asking the question this exists for, and
+     * their grants still stand until somebody removes them.
+     */
+    async effective(auth, subject) {
+        if (!administers(auth))
+            return undefined;
+        return withOrg(this.pool, auth.orgId, async (client) => {
+            const role = await subjectRole(client, auth.orgId, subject);
+            if (role === undefined)
+                return undefined;
+            const asSubject = { orgId: auth.orgId, principal: subject, role };
+            const context = await contextFor(client, asSubject, this.principalsCache);
+            const resolver = activeResolver();
+            const reach = (permission) => {
+                const plan = resolver.resolve(context, permission);
+                if (plan.kind === 'all')
+                    return { all: true, layers: [], moreLayers: 0, extraDocuments: 0, deniedDocuments: 0 };
+                if (plan.kind === 'none')
+                    return { all: false, layers: [], moreLayers: 0, extraDocuments: 0, deniedDocuments: 0 };
+                const sorted = [...plan.layers].sort();
+                return {
+                    all: false,
+                    layers: sorted.slice(0, MAX_REACH_LAYERS),
+                    moreLayers: Math.max(0, sorted.length - MAX_REACH_LAYERS),
+                    extraDocuments: plan.extraDocs.length,
+                    deniedDocuments: plan.deniedDocs.length,
+                };
+            };
+            const self = `${subject.type}:${subject.id}`;
+            return {
+                subject,
+                role,
+                groups: [...context.principals]
+                    .filter((ref) => ref !== self && ref.startsWith('group:'))
+                    .map((ref) => ref.slice('group:'.length))
+                    .sort(),
+                read: reach(PERMISSIONS[0]),
+                write: reach(PERMISSIONS[1]),
+                admin: reach(PERMISSIONS[2]),
+                grants: context.grants
+                    .filter((g) => g.orgId === auth.orgId && context.principals.has(`${g.principal.type}:${g.principal.id}`))
+                    .map((g) => ({
+                    principal: `${g.principal.type}:${g.principal.id}`,
+                    scopeType: g.scope.type,
+                    scopeId: g.scope.id,
+                    permission: g.permission,
+                    effect: g.effect,
+                })),
+            };
+        }, this.role === undefined ? {} : { role: this.role });
+    }
+}
+/**
+ * The subject's role, or `undefined` when it is not a principal of this
+ * organization. Every statement names the organization in its own literal, on
+ * top of the row-level policy, because a deployment connecting as a superuser
+ * has no policy to fall back on.
+ */
+async function subjectRole(client, orgId, subject) {
+    if (!/^[0-9a-f-]{36}$/i.test(subject.id))
+        return undefined;
+    if (subject.type === 'user') {
+        const { rows } = await client.query(`SELECT role FROM users WHERE org_id = $1 AND id = $2`, [orgId, subject.id]);
+        return rows[0]?.role;
+    }
+    if (subject.type === 'group') {
+        const { rows } = await client.query(`SELECT 1 FROM groups WHERE org_id = $1 AND id = $2`, [orgId, subject.id]);
+        return rows.length === 0 ? undefined : 'member';
+    }
+    const { rows } = await client.query(`SELECT 1 FROM service_accounts WHERE org_id = $1 AND id = $2 AND revoked_at IS NULL`, [orgId, subject.id]);
+    return rows.length === 0 ? undefined : 'member';
+}
+//# sourceMappingURL=access.js.map

package/dist/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,OAAO,EAAuC,MAAM,kBAAkB,CAAA;AAG/F,OAAO,EAAE,UAAU,EAAwB,MAAM,eAAe,CAAA;AAChE,OAAO,EAAE,WAAW,EAAoB,MAAM,WAAW,CAAA;AAkEzD,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAEnC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU,CAAA;AAEvD,MAAM,OAAO,cAAc;IAEN;IACA;IACA;IAHnB,YACmB,IAAU,EACV,IAAa,EACb,eAAiC;QAFjC,SAAI,GAAJ,IAAI,CAAM;QACV,SAAI,GAAJ,IAAI,CAAS;QACb,oBAAe,GAAf,eAAe,CAAkB;IACjD,CAAC;IAEJ;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,IAAiB,EAAE,OAAsB;QACvD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAExC,OAAO,OAAO,CACZ,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,EACV,KAAK,EAAE,MAAM,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YAC3D,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAExC,MAAM,SAAS,GAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAC9E,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;YACzE,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAA;YAEjC,MAAM,KAAK,GAAG,CAAC,UAAsB,EAAS,EAAE;gBAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBAClD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;oBAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAA;gBAC/G,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAA;gBACjH,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;gBACtC,OAAO;oBACL,GAAG,EAAE,KAAK;oBACV,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;oBACzC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC;oBACzD,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;oBACrC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;iBACxC,CAAA;YACH,CAAC,CAAA;YAED,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CAAA;YAC5C,OAAO;gBACL,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;qBAC5B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;qBACzD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;qBACxC,IAAI,EAAE;gBACT,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC3B,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC5B,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;qBACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;qBACxG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACX,SAAS,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE;oBAClD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI;oBACvB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;oBACnB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,MAAM,EAAE,CAAC,CAAC,MAAM;iBACjB,CAAC,CAAC;aACN,CAAA;QACH,CAAC,EACD,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACnD,CAAA;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,MAA+B,EAC/B,KAAa,EACb,OAAsB;IAEtB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,sDAAsD,EACtD,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CACpB,CAAA;QACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAA;IACtB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9G,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;IACjD,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,qFAAqF,EACrF,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CACpB,CAAA;IACD,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;AACjD,CAAC"}

package/dist/adapters.d.ts

@@ -1,7 +1,7 @@
 import { type AddressResolver, buildFilter, VectorStore, type CacheStore, type Metadata } from '@nacre.work/core';
 import type { Pool } from 'pg';
 import { type Reranker } from './rerank.js';
-import type { Reindex, ReindexOutcome, RetryOutcome, EmbeddingProviderRemoval, ReindexStatus, ReferenceQueries, ReferenceQuery, AuditEvent, AuditQuery, AuditReader, AuditRecord, AuditWriter, Documents, GrantInput, GrantRecord, Grants, Ingest, IngestOutcome, IngestRefused, IngestRequest, Job, Jobs, Layer, LayerOutcome, DocumentView, Layers, Page, PageResult, EmbeddingProvider as EmbeddingProviderView, EmbeddingProviderOutcome, EmbeddingProviders, Workspace, WorkspaceOutcome, Workspaces, SearchHit, SearchOptions, SearchService } from './server.js';
+import type { Reindex, ReindexOutcome, RetryOutcome, EmbeddingProviderRemoval, ReindexStatus, ReferenceQueries, ReferenceQuery, AuditEvent, AuditQuery, AuditReader, AuditRecord, AuditWriter, Documents, GrantInput, GrantRecord, GrantFilter, Grants, Ingest, IngestOutcome, IngestRefused, IngestRequest, Job, Jobs, Layer, LayerOutcome, DocumentView, Layers, Page, PageResult, EmbeddingProvider as EmbeddingProviderView, EmbeddingProviderOutcome, EmbeddingProviders, Workspace, WorkspaceOutcome, Workspaces, SearchHit, SearchOptions, SearchService } from './server.js';
 import { type AuthContext } from './auth.js';
 /**
  * The adapters that put the permission model on the request path.
@@ -622,7 +622,7 @@ export declare class PostgresGrants implements Grants {
      * removed after it, which is a page of grants silently missing from an
      * administrator's view of who can reach what.
      */
-    list(auth: AuthContext, page?: Page): Promise<PageResult<GrantRecord>>;
+    list(auth: AuthContext, page?: Page, filter?: GrantFilter): Promise<PageResult<GrantRecord>>;
     issue(auth: AuthContext, input: GrantInput): Promise<GrantRecord | undefined>;
     /**
      * Withdraw a grant.
@@ -662,6 +662,18 @@ export declare class PostgresGrants implements Grants {
  * produce a first page that works and a second page that silently returns the
  * beginning of the log.
  */
+/** What `summarize` groups by. Each is a fixed expression; nothing a caller sends reaches the SQL. */
+export type AuditGrouping = 'actor' | 'action' | 'result' | 'surface' | 'connection' | 'layer' | 'document' | 'day' | 'hour';
+export declare const AUDIT_GROUPINGS: readonly AuditGrouping[];
+export interface AuditBucket {
+    /** The value grouped on; `null` where events carry none, such as a document for a sign-in. */
+    readonly key: string | null;
+    readonly events: number;
+    readonly denied: number;
+    readonly errors: number;
+    readonly first: string;
+    readonly last: string;
+}
 export declare class PostgresAuditReader implements AuditReader {
     private readonly pool;
     private readonly role?;
@@ -694,6 +706,27 @@ export declare class PostgresAuditReader implements AuditReader {
      * against every writer, which is what keeps this derivation honest.
      */
     private static readonly DOCUMENT_ACCESS;
+    /**
+     * The predicates every read of the log shares beyond time, actor, action and
+     * result — and the platform administrator's restriction, which is here so
+     * that `summarize` cannot be written without it. A count of document reads
+     * is a record of document access as much as the rows are.
+     */
+    private static narrowing;
+    /**
+     * Counts, computed in the database. docs/mcp-admin.md's `summarize_audit`:
+     * an agent asked "who read `contracts` most this month" must not page
+     * through a million rows to count them, and a person asking the console the
+     * same thing should not have to export a CSV.
+     *
+     * The window is **required** and bounded. A count over a whole retention
+     * window on every call is the expensive thing `read` was written never to
+     * do, and an unbounded `GROUP BY` is that with extra steps.
+     */
+    summarize(auth: AuthContext, query: AuditQuery & {
+        readonly from: string;
+        readonly to: string;
+    }, by: AuditGrouping, limit: number): Promise<readonly AuditBucket[]>;
     read(auth: AuthContext, query: AuditQuery, page: Page): Promise<PageResult<AuditRecord>>;
     private scopeFor;
 }

package/dist/adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACpB,WAAW,EAiBX,WAAW,EASX,KAAK,UAAU,EAEf,KAAK,QAAQ,EAQd,MAAM,kBAAkB,CAAA;AAGzB,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAA;AAG1C,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEzD,OAAO,KAAK,EACV,OAAO,EACP,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,SAAS,EACT,UAAU,EACV,WAAW,EACX,MAAM,EACN,MAAM,EACN,aAAa,EACb,aAAa,EACb,aAAa,EACb,GAAG,EACH,IAAI,EACJ,KAAK,EACL,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,IAAI,EACJ,UAAU,EACV,iBAAiB,IAAI,qBAAqB,EAC1C,wBAAwB,EACxB,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,aAAa,EACb,aAAa,EACd,MAAM,aAAa,CAAA;AACpB,OAAO,EAAqE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAA;AAG/G;;;;;;;GAOG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;CACzE;AA6BD,qBAAa,iBAAkB,YAAW,SAAS;IAE/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAnBR,IAAI,EAAE,IAAI;IAC3B;;;;;;OAMG;IACc,OAAO,EAAE,sBAAsB,EAC/B,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAClD;;;;;;OAMG;IACc,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,YAAA;IAGzD;;;;;;;;;OASG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IA0GpF;;;;;;;;;;;;;;;;;;;OAmBG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAgDnE,cAAc,CAClB,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,OAAO,CAAC;CAmDpB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvF;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;IAC1C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,QAAQ,CAAA;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CACnD;AAED,mDAAmD;AACnD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5C;AASD,qBAAa,kBAAmB,YAAW,aAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC;IA8OhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;IAiErB;;;;;;;;;;;;;OAaG;YACW,QAAQ;IAwBtB;;;;;;;;;;;;;;;OAeG;YACW,MAAM;IAoBpB;;;;;;;;;;;;;;;;;;;;OAoBG;YACW,OAAO;IAoDrB,8EAA8E;IAC9E,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;CAGxE;AAED;;;;;;;GAOG;AACH,qBAAa,aAAc,YAAW,WAAW;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAQ,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAlC,IAAI,EAAE,IAAI,EAAmB,IAAI,CAAC,EAAE,MAAM,YAAA;IAEjE,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAqC9C;AAED;;;;;;GAMG;AACH,qBAAa,YAAa,YAAW,QAAQ;IAEzC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,yDAAyD;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAbd,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM;IACnC,yDAAyD;IACxC,SAAS,SAAS;IACnC,qEAAqE;IACpD,KAAK,GAAE,MAA4B;IACpD;;;;;OAKG;IACc,cAAc,GAAE,SAAS,MAAM,EAAqC;IAGvF;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,GAAE,MAA4B;IACnC,4EAA4E;IAC5E,cAAc,GAAE,SAAS,MAAM,EAAO,GACrC,CAAC,QAAQ,EAAE,iBAAiB,KAAK,QAAQ;IAkBtC,KAAK,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IAqB9E,yEAAyE;YAC3D,IAAI;CA4BnB;AAKD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjE;AAED,qBAAa,WAAY,YAAW,MAAM;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,OAAO,KAAK,IAAI,GAEf;IAED,OAAO,KAAK,KAAK,GAEhB;IAED,oDAAoD;YACtC,aAAa;IAsC3B;;;;OAIG;IACG,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS5D,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,GAAG,aAAa,GAAG,SAAS,CAAC;IAwMpG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA+EtE;AAED;;;;;;;GAOG;AACH,qBAAa,YAAa,YAAW,IAAI;IAErC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAG9C,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC;CA0FvE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AA2BD,mFAAmF;AACnF,wBAAsB,UAAU,CAC9B,MAAM,EAAE,OAAO,IAAI,EAAE,UAAU,EAC/B,IAAI,EAAE,WAAW,EACjB,KAAK,CAAC,EAAE,eAAe,GACtB,OAAO,CAAC;IACT,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzB,UAAU,EAAE,WAAW,CAAC,OAAO,kBAAkB,EAAE,YAAY,CAAC,CAAA;IAChE,MAAM,EAAE,SAAS,OAAO,kBAAkB,EAAE,KAAK,EAAE,CAAA;IACnD,IAAI,EAAE,OAAO,kBAAkB,EAAE,SAAS,CAAA;IAC1C,OAAO,CAAC,EAAE,SAAS,OAAO,kBAAkB,EAAE,UAAU,EAAE,CAAA;CAC3D,CAAC,CASD;AAmCD,qBAAa,cAAe,YAAW,MAAM;IAEzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO;IAKxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAnBhB,IAAI,EAAE,IAAI;IAC3B;;;;;;;;;;OAUG;IACc,OAAO,EAAE;QACxB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9D,wEAAwE;QACxE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACnE,EACgB,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;;OAOG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAkHhE,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,OAAO,CAAC;IAIb,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuE5D,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9E,OAAO,CAAC,YAAY,CAAC;CAsKzB;AAED;;;;;;;;;GASG;AACH;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,0BAA2B,YAAW,kBAAkB;IAEjE,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB;8EAC0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B;;uEAEmE;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC;4EACwE;IACxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAXT,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B;8EAC0E;IACzD,YAAY,GAAE,SAAS,MAAM,EAAO;IACrD;;uEAEmE;IAClD,eAAe,GAAE,OAAc;IAChD;4EACwE;IACvD,QAAQ,CAAC,EAAE,eAAe,YAAA;IAGvC,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IA+BlE,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAC3E,OAAO,CAAC,wBAAwB,CAAC;IAqE9B,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAmC/E;AAED,qBAAa,kBAAmB,YAAW,UAAU;IAEjD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAkI1E;;;;;;;;;;;;OAYG;IACG,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACpC,OAAO,CAAC,gBAAgB,CAAC;CA6C7B;AA8DD,qBAAa,cAAe,YAAW,MAAM;IAEzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;;OAOG;IACH;;;;;;;;;;;;OAYG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAmEtE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAgHnF;;;;;;;;;;;;;OAaG;IACG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAuCnE;AAGD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,mBAAoB,YAAW,WAAW;IAEnD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA0B;IAE3D,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAkF9F,OAAO,CAAC,QAAQ;CAGjB;AAmBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,eAAgB,YAAW,OAAO;IAE3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAJhB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;QAAE,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,EAC3E,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAEK,KAAK,CACT,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAkJhC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAsCpF;;;;;;;OAOG;YACW,SAAS;IAevB,OAAO,CAAC,QAAQ;CAgCjB;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IAE7D,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAFhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;OAMG;YACW,aAAa;IAgBrB,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;IAkBxF,OAAO,CACX,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,EAAE,GACjE,OAAO,CAAC,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;CA0ClD"}
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACpB,WAAW,EAiBX,WAAW,EASX,KAAK,UAAU,EAEf,KAAK,QAAQ,EASd,MAAM,kBAAkB,CAAA;AAGzB,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAA;AAG1C,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEzD,OAAO,KAAK,EACV,OAAO,EACP,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,UAAU,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,SAAS,EACT,UAAU,EACV,WAAW,EACX,WAAW,EACX,MAAM,EACN,MAAM,EACN,aAAa,EACb,aAAa,EACb,aAAa,EACb,GAAG,EACH,IAAI,EACJ,KAAK,EACL,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,IAAI,EACJ,UAAU,EACV,iBAAiB,IAAI,qBAAqB,EAC1C,wBAAwB,EACxB,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,aAAa,EACb,aAAa,EACd,MAAM,aAAa,CAAA;AACpB,OAAO,EAAqE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAA;AAG/G;;;;;;;GAOG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;CACzE;AA6BD,qBAAa,iBAAkB,YAAW,SAAS;IAE/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAnBR,IAAI,EAAE,IAAI;IAC3B;;;;;;OAMG;IACc,OAAO,EAAE,sBAAsB,EAC/B,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAClD;;;;;;OAMG;IACc,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,YAAA;IAGzD;;;;;;;;;OASG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IA0GpF;;;;;;;;;;;;;;;;;;;OAmBG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAgDnE,cAAc,CAClB,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,OAAO,CAAC;CAmDpB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvF;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;IAC1C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,QAAQ,CAAA;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CACnD;AAED,mDAAmD;AACnD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5C;AASD,qBAAa,kBAAmB,YAAW,aAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC;IA8OhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;IAiErB;;;;;;;;;;;;;OAaG;YACW,QAAQ;IAwBtB;;;;;;;;;;;;;;;OAeG;YACW,MAAM;IAoBpB;;;;;;;;;;;;;;;;;;;;OAoBG;YACW,OAAO;IAoDrB,8EAA8E;IAC9E,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;CAGxE;AAED;;;;;;;GAOG;AACH,qBAAa,aAAc,YAAW,WAAW;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAQ,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAlC,IAAI,EAAE,IAAI,EAAmB,IAAI,CAAC,EAAE,MAAM,YAAA;IAEjE,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAyC9C;AAED;;;;;;GAMG;AACH,qBAAa,YAAa,YAAW,QAAQ;IAEzC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,yDAAyD;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAbd,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM;IACnC,yDAAyD;IACxC,SAAS,SAAS;IACnC,qEAAqE;IACpD,KAAK,GAAE,MAA4B;IACpD;;;;;OAKG;IACc,cAAc,GAAE,SAAS,MAAM,EAAqC;IAGvF;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,GAAE,MAA4B;IACnC,4EAA4E;IAC5E,cAAc,GAAE,SAAS,MAAM,EAAO,GACrC,CAAC,QAAQ,EAAE,iBAAiB,KAAK,QAAQ;IAkBtC,KAAK,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IAqB9E,yEAAyE;YAC3D,IAAI;CA4BnB;AAKD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjE;AAED,qBAAa,WAAY,YAAW,MAAM;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,OAAO,KAAK,IAAI,GAEf;IAED,OAAO,KAAK,KAAK,GAEhB;IAED,oDAAoD;YACtC,aAAa;IAsC3B;;;;OAIG;IACG,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS5D,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,GAAG,aAAa,GAAG,SAAS,CAAC;IAwMpG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA+EtE;AAED;;;;;;;GAOG;AACH,qBAAa,YAAa,YAAW,IAAI;IAErC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAG9C,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC;CA0FvE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AA2BD,mFAAmF;AACnF,wBAAsB,UAAU,CAC9B,MAAM,EAAE,OAAO,IAAI,EAAE,UAAU,EAC/B,IAAI,EAAE,WAAW,EACjB,KAAK,CAAC,EAAE,eAAe,GACtB,OAAO,CAAC;IACT,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzB,UAAU,EAAE,WAAW,CAAC,OAAO,kBAAkB,EAAE,YAAY,CAAC,CAAA;IAChE,MAAM,EAAE,SAAS,OAAO,kBAAkB,EAAE,KAAK,EAAE,CAAA;IACnD,IAAI,EAAE,OAAO,kBAAkB,EAAE,SAAS,CAAA;IAC1C,OAAO,CAAC,EAAE,SAAS,OAAO,kBAAkB,EAAE,UAAU,EAAE,CAAA;CAC3D,CAAC,CASD;AAmCD,qBAAa,cAAe,YAAW,MAAM;IAEzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO;IAKxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAnBhB,IAAI,EAAE,IAAI;IAC3B;;;;;;;;;;OAUG;IACc,OAAO,EAAE;QACxB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9D,wEAAwE;QACxE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACnE,EACgB,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;;OAOG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAkHhE,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,OAAO,CAAC;IAIb,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuE5D,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9E,OAAO,CAAC,YAAY,CAAC;CAsKzB;AAED;;;;;;;;;GASG;AACH;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,0BAA2B,YAAW,kBAAkB;IAEjE,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB;8EAC0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B;;uEAEmE;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC;4EACwE;IACxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAXT,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B;8EAC0E;IACzD,YAAY,GAAE,SAAS,MAAM,EAAO;IACrD;;uEAEmE;IAClD,eAAe,GAAE,OAAc;IAChD;4EACwE;IACvD,QAAQ,CAAC,EAAE,eAAe,YAAA;IAGvC,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IA+BlE,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAC3E,OAAO,CAAC,wBAAwB,CAAC;IAqE9B,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAmC/E;AAED,qBAAa,kBAAmB,YAAW,UAAU;IAEjD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAkI1E;;;;;;;;;;;;OAYG;IACG,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACpC,OAAO,CAAC,gBAAgB,CAAC;CA6C7B;AA8DD,qBAAa,cAAe,YAAW,MAAM;IAEzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;;OAOG;IACH;;;;;;;;;;;;OAYG;IACG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAgF5F,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAgHnF;;;;;;;;;;;;;OAaG;IACG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAuCnE;AAGD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,sGAAsG;AACtG,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,CAAA;AA+B5H,eAAO,MAAM,eAAe,EAAiC,SAAS,aAAa,EAAE,CAAA;AAErF,MAAM,WAAW,WAAW;IAC1B,8FAA8F;IAC9F,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,qBAAa,mBAAoB,YAAW,WAAW;IAEnD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAHhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA0B;IAEjE;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS;IAyBxB;;;;;;;;;OASG;IACG,SAAS,CACb,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,UAAU,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAClE,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAyD5B,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAgF9F,OAAO,CAAC,QAAQ;CAGjB;AAmBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,eAAgB,YAAW,OAAO;IAE3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAJhB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;QAAE,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,EAC3E,IAAI,CAAC,EAAE,MAAM,YAAA;IAC9B,0EAA0E;IACzD,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAEK,KAAK,CACT,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAkJhC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAsCpF;;;;;;;OAOG;YACW,SAAS;IAevB,OAAO,CAAC,QAAQ;CAgCjB;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IAE7D,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAFhB,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,eAAe,CAAC,EAAE,eAAe,YAAA;IAGpD,OAAO,KAAK,KAAK,GAEhB;IAED;;;;;;OAMG;YACW,aAAa;IAgBrB,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;IAkBxF,OAAO,CACX,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,EAAE,GACjE,OAAO,CAAC,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;CA0ClD"}

package/dist/adapters.js

@@ -1,4 +1,4 @@
-import { admitEmbeddingEndpoint, egressFetch, endpointOrigin, buildFilter, cachedEffectivePrincipals, documentKey, effectivePrincipals, encodeQuery, fromStateJson, isEmpty, loadGrants, loadGroupsVersion, loadScopeTree, PostgresGroupGraph, referenceAllows, reindexProgress, activeResolver, admitIngest, SPARSE_VECTOR_NAME, toStateJson, VectorStore, vectorName, withOrg, DEFAULT_EMBED_BATCH, embedInBatches, endpointReason, endpointUrl, modelEndpointRefused, classifyIngestFailure, withoutHosts, DOCUMENT_ACCESS_ACTIONS, } from '@nacre.work/core';
+import { admitEmbeddingEndpoint, egressFetch, endpointOrigin, buildFilter, cachedEffectivePrincipals, documentKey, effectivePrincipals, encodeQuery, fromStateJson, isEmpty, loadGrants, loadGroupsVersion, loadScopeTree, PostgresGroupGraph, referenceAllows, reindexProgress, activeResolver, admitIngest, SPARSE_VECTOR_NAME, toStateJson, VectorStore, vectorName, withOrg, DEFAULT_EMBED_BATCH, embedInBatches, endpointReason, endpointUrl, modelEndpointRefused, classifyIngestFailure, withoutHosts, DOCUMENT_ACCESS_ACTIONS, auditClient, } from '@nacre.work/core';
 import { createHash } from 'node:crypto';
 import { encodeCursor, pageOf } from './pagination.js';
 import { applyRanking } from './rerank.js';
@@ -696,8 +696,8 @@ export class PostgresAudit {
             // and the schema were right from the first migration; only the write
             // was not.
             `INSERT INTO audit_events
-             (org_id, actor_type, actor_id, actor_label, action, surface, target, result, detail, request_id)
-           VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8,$9,$10)`, [
+             (org_id, actor_type, actor_id, actor_label, action, surface, target, result, detail, request_id, client)
+           VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,$8,$9,$10,$11)`, [
                 event.orgId,
                 actorType ?? 'unknown',
                 /^[0-9a-f-]{36}$/i.test(actorId ?? '') ? actorId : null,
@@ -708,6 +708,10 @@ export class PostgresAudit {
                 event.result,
                 JSON.stringify(event.detail),
                 event.requestId,
+                // From the event, or from the request's scope where a port was
+                // not wrapped by `withAuditSinks`. NULL for anything that did not
+                // come through a connection — a console session, a service key.
+                event.client ?? auditClient() ?? null,
             ]);
         }, this.role === undefined ? {} : { role: this.role });
         // Forwarding to a module's sinks is deliberately *not* here. It is
@@ -1950,18 +1954,31 @@ export class PostgresGrants {
      * removed after it, which is a page of grants silently missing from an
      * administrator's view of who can reach what.
      */
-    async list(auth, page) {
+    async list(auth, page, filter) {
         return withOrg(this.pool, auth.orgId, async (client) => {
             const context = await contextFor(client, auth, this.principalsCache);
             const plan = activeResolver().resolve(context, 'admin');
             if (plan.kind === 'none')
                 return { items: [], nextCursor: null };
+            const params = [auth.orgId];
+            const bind = (value) => {
+                params.push(value);
+                return `$${params.length}`;
+            };
             const after = page?.after;
-            const seek = after === undefined ? '' : ' AND (created_at, id) > ($2::timestamptz, $3::uuid)';
+            const seek = after === undefined
+                ? ''
+                : ` AND (created_at, id) > (${bind(after.createdAt)}::timestamptz, ${bind(after.id)}::uuid)`;
+            const narrowed = [
+                filter?.principalType === undefined ? '' : ` AND principal_type = ${bind(filter.principalType)}`,
+                filter?.principalId === undefined ? '' : ` AND principal_id = ${bind(filter.principalId)}::uuid`,
+                filter?.scopeType === undefined ? '' : ` AND scope_type = ${bind(filter.scopeType)}`,
+                filter?.scopeId === undefined ? '' : ` AND scope_id = ${bind(filter.scopeId)}::uuid`,
+            ].join('');
             const cap = page === undefined ? '' : ` LIMIT ${page.limit}`;
             const { rows } = await client.query(`SELECT id, principal_type, principal_id, scope_type, scope_id, permission, effect, source,
                   created_at, created_at::text AS created_at_text
-             FROM grants WHERE org_id = $1${seek} ORDER BY created_at, id${cap}`, after === undefined ? [auth.orgId] : [auth.orgId, after.createdAt, after.id]);
+             FROM grants WHERE org_id = $1${seek}${narrowed} ORDER BY created_at, id${cap}`, params);
             const visible = rows
                 .filter((r) => referenceAllows(context, { type: r.scope_type, id: r.scope_id }, 'admin'))
                 .map((r) => ({
@@ -2122,28 +2139,33 @@ export class PostgresGrants {
         }, this.scope);
     }
 }
+/** A JSON array in `target`, or an empty one: `jsonb_array_elements_text` raises on anything else. */
+const targetArray = (field) => `jsonb_array_elements_text(CASE WHEN jsonb_typeof(e.target->'${field}') = 'array' THEN e.target->'${field}' ELSE '[]'::jsonb END)`;
 /**
- * Reading the access log back.
- *
- * Scoped through `withOrg` like every other tenant read, so the row-level
- * policy on `audit_events` is the second line of defence behind the role check
- * in the handler. `SELECT` is the only grant the application role has on this
- * table and that stays true — nothing here writes.
- *
- * ## Newest first, and what that does to the cursor
+ * The keys one event contributes, as a set-returning subquery over `e`.
  *
- * Every other paged collection here reads oldest-first, because a catalog is a
- * set and the order is arbitrary. A log is not: the useful end is the recent
- * one, and an auditor paging forward from the beginning of a 400-day retention
- * window to find yesterday is not a feature. So this orders
- * `(occurred_at, id) DESC` and the seek predicate is `<` rather than `>`.
- *
- * The cursor still means "everything after the last row you saw", which is the
- * same contract read in the other direction. It is worth being explicit because
- * copying the seek clause from the layers adapter — where it is `>` — would
- * produce a first page that works and a second page that silently returns the
- * beginning of the log.
+ * A layer is reported by slug whichever shape recorded it: an id is looked up
+ * in this organization's own layers, so two spellings of one layer are one
+ * bucket rather than two half-counts.
  */
+const GROUPING_KEYS = {
+    actor: 'SELECT e.actor_label',
+    // A template rather than a quoted string: `lint:audit-actions` reads every
+    // quoted `action:` under the writers as an action somebody records, and this
+    // is a grouping, not a record.
+    action: `SELECT e.action`,
+    result: 'SELECT e.result',
+    surface: 'SELECT e.surface',
+    connection: 'SELECT e.client',
+    layer: `SELECT l.slug FROM layers l WHERE l.org_id = e.org_id AND l.id::text = e.target->>'layer_id'
+          UNION SELECT e.target->>'layer' WHERE e.target->>'layer' IS NOT NULL
+          UNION SELECT ${targetArray('layers')}`,
+    document: `SELECT e.target->>'document_id' WHERE e.target->>'document_id' IS NOT NULL
+             UNION SELECT ${targetArray('returned_docs')}`,
+    day: "SELECT to_char(date_trunc('day', e.occurred_at AT TIME ZONE 'UTC'), 'YYYY-MM-DD')",
+    hour: "SELECT to_char(date_trunc('hour', e.occurred_at AT TIME ZONE 'UTC'), 'YYYY-MM-DD\"T\"HH24:00\"Z\"')",
+};
+export const AUDIT_GROUPINGS = Object.keys(GROUPING_KEYS);
 export class PostgresAuditReader {
     pool;
     role;
@@ -2179,6 +2201,90 @@ export class PostgresAuditReader {
      * against every writer, which is what keeps this derivation honest.
      */
     static DOCUMENT_ACCESS = DOCUMENT_ACCESS_ACTIONS;
+    /**
+     * The predicates every read of the log shares beyond time, actor, action and
+     * result — and the platform administrator's restriction, which is here so
+     * that `summarize` cannot be written without it. A count of document reads
+     * is a record of document access as much as the rows are.
+     */
+    static narrowing(query, bind) {
+        const where = [];
+        // A layer and a document are each recorded in three shapes: an
+        // administrative write names `layer_id`, an ingest the `layer` slug, and a
+        // search the `layers` it reached and the `returned_docs` it answered with.
+        // A filter on one shape would miss the reads, which are the rows an
+        // investigation is usually after.
+        if (query.layer !== undefined) {
+            const slug = bind(query.layer.slug);
+            where.push(`(target->>'layer_id' = ${bind(query.layer.id)} OR target->>'layer' = ${slug} OR target->'layers' ? ${slug})`);
+        }
+        if (query.documentId !== undefined) {
+            const id = bind(query.documentId);
+            where.push(`(target->>'document_id' = ${id} OR target->'returned_docs' ? ${id})`);
+        }
+        if (query.client !== undefined)
+            where.push(`client = ${bind(query.client)}`);
+        if (query.surface !== undefined)
+            where.push(`surface = ${bind(query.surface)}`);
+        if (query.administrativeOnly === true) {
+            where.push(`action <> ALL(${bind(PostgresAuditReader.DOCUMENT_ACCESS)}::text[])`);
+        }
+        return where;
+    }
+    /**
+     * Counts, computed in the database. docs/mcp-admin.md's `summarize_audit`:
+     * an agent asked "who read `contracts` most this month" must not page
+     * through a million rows to count them, and a person asking the console the
+     * same thing should not have to export a CSV.
+     *
+     * The window is **required** and bounded. A count over a whole retention
+     * window on every call is the expensive thing `read` was written never to
+     * do, and an unbounded `GROUP BY` is that with extra steps.
+     */
+    async summarize(auth, query, by, limit) {
+        return withOrg(this.pool, auth.orgId, async (client) => {
+            const where = ['org_id = $1'];
+            const params = [auth.orgId];
+            const bind = (value) => {
+                params.push(value);
+                return `$${params.length}`;
+            };
+            where.push(`occurred_at >= ${bind(query.from)}::timestamptz`);
+            where.push(`occurred_at < ${bind(query.to)}::timestamptz`);
+            if (query.actorId !== undefined)
+                where.push(`actor_id = ${bind(query.actorId)}::uuid`);
+            if (query.action !== undefined)
+                where.push(`action = ${bind(query.action)}`);
+            if (query.result !== undefined)
+                where.push(`result = ${bind(query.result)}`);
+            where.push(...PostgresAuditReader.narrowing(query, bind));
+            const keys = GROUPING_KEYS[by];
+            const { rows } = await client.query(
+            // One row per (event, key). For most groupings an event has exactly
+            // one key; for a layer or a document a search has several, and an
+            // event naming none drops out — "reads by document" is not about a
+            // sign-in. UNION inside the lateral, so one event counts once per
+            // key however many of its shapes name it.
+            `SELECT k.key, count(*) AS events,
+                  count(*) FILTER (WHERE result = 'deny') AS denied,
+                  count(*) FILTER (WHERE result = 'error') AS errors,
+                  min(occurred_at)::text AS first, max(occurred_at)::text AS last
+             FROM audit_events e
+             CROSS JOIN LATERAL (${keys}) AS k(key)
+            WHERE ${where.join(' AND ')}
+            GROUP BY k.key
+            ORDER BY 2 DESC, 1 NULLS LAST
+            LIMIT ${Math.max(1, Math.min(limit, 200))}`, params);
+            return rows.map((r) => ({
+                key: r.key,
+                events: Number(r.events),
+                denied: Number(r.denied),
+                errors: Number(r.errors),
+                first: new Date(r.first).toISOString(),
+                last: new Date(r.last).toISOString(),
+            }));
+        }, this.scopeFor());
+    }
     async read(auth, query, page) {
         return withOrg(this.pool, auth.orgId, async (client) => {
             const where = ['org_id = $1'];
@@ -2197,9 +2303,7 @@ export class PostgresAuditReader {
                 where.push(`action = ${bind(query.action)}`);
             if (query.result !== undefined)
                 where.push(`result = ${bind(query.result)}`);
-            if (query.administrativeOnly === true) {
-                where.push(`action <> ALL(${bind(PostgresAuditReader.DOCUMENT_ACCESS)}::text[])`);
-            }
+            where.push(...PostgresAuditReader.narrowing(query, bind));
             // Descending, and `<` to match. See the note on the class.
             if (page.after !== undefined) {
                 where.push(`(occurred_at, id) < (${bind(page.after.createdAt)}::timestamptz, ${bind(page.after.id)}::bigint)`);