@pithy-sh/core 0.13.0 → 0.15.0

package/dist/capability/capability.d.ts

@@ -4,9 +4,12 @@ import type { ExecutionContext, ForwardableEmailMessage } from "@cloudflare/work
 import type { Hono, MiddlewareHandler } from "hono";
 import type { z } from "zod";
 import type { ActingOrganizationResolver } from "../access/acting";
+import type { AuditCitationReader } from "../audit/citations";
 import type { AuditEmit } from "../audit/recorder";
+import { type ConsentPurpose } from "../consent/purpose";
+import type { ConsentGrantedListener, ConsentReader, ConsentWithdrawnListener } from "../consent/reader";
 import type { ControlPlaneContext } from "../controlPlane/context";
-import type { AdminRoute } from "../controlPlane/discovery/adminRoute";
+import type { AdminRouteDeclaration } from "../controlPlane/discovery/adminRoute";
 import type { CapabilityManifestConfig } from "../controlPlane/discovery/configuration";
 import type { CapabilityHealth } from "../controlPlane/discovery/health";
 import type { ControlPlaneVerifier } from "../controlPlane/http/guard";
@@ -20,12 +23,19 @@ import type { LocaleContext } from "../i18n/locale";
 import type { Translator } from "../i18n/translator";
 import type { KvNamespaceSpecMap } from "../kv/namespaces";
 import type { Logger } from "../logger/logger";
+import { type PresenceDeclaration } from "../presence/declaration";
+import { type ProcessingActivity, type ProcessingActivityInput } from "../processing/activity";
+import type { CapabilityQueueHandler } from "../queue/consumer";
+import type { PurgeWindowDefault } from "../retention/policy";
 import type { SeedSet } from "../seed/seed";
+import type { SessionRotatedListener } from "../session/rotated";
 import type { WorkflowSpecMap } from "../workflow/spec";
 import { BindingSpec, type BindingSpecInput } from "./bindings";
 import type { ClientProjection, ClientProjectionContext } from "./client";
+import type { ErasureRecords } from "./erasure";
 import { type PurgeContribution } from "./purge";
 import type { CapabilitySettings } from "./settings";
+import { type VectorIndexContribution } from "./vectorIndex";
 /** Hono `Variables` every capability's routes are typed against. `createBackend` seeds these per request. */
 export interface PithyVars {
     /** The authenticated identity, populated by `@pithy-sh/auth`; `null` until a strategy sets it. */
@@ -176,7 +186,7 @@ export interface SecretRegistryEntrySeam {
     readonly devValue?: string;
     /**
      * The Worker binding this value exists to reach, or absent when it reaches none — the constant half
-     * of *can this composition use this secret* (#541).
+     * of *can this composition use this secret*.
      *
      * Read here and never interpreted, exactly like {@link devValue}: the CLI joins it against a Worker's
      * `declinedBindings` so a credential whose bucket the project declined stops being listed as
@@ -200,7 +210,7 @@ export type SecretRegistrySeam = Record<string, SecretRegistryEntrySeam>;
  * **It is declared, not matched by name.** `PaymentsRailToggles.paddle` and
  * `PaymentsProviderCredentials.paddle` happen to be spelled the same today, and a CLI that keyed off
  * that would be right by coincidence: nothing makes a config flag and a schema key the same thing, and
- * two of them one line apart cannot be told apart by convention (#513). The capability already knows
+ * two of them one line apart cannot be told apart by convention. The capability already knows
  * the answer at construction — it has both halves in hand — so it states it, and the CLI reads a fact
  * instead of inferring one.
  *
@@ -221,8 +231,8 @@ export type SecretBranchSeam = Record<string, readonly string[]>;
  * The neighbor of {@link SecretBranchSeam}, one level up. That one says which *blocks* of a bundle
  * apply when the bundle itself does; this says that a whole secret does not. `@pithy-sh/auth` declares
  * one credential per OAuth provider, so a project running Google and GitHub has two secrets that no
- * code path will ever read — and until #541 `pithy doctor` listed both as outstanding work under
- * *"fine to leave until you need it"*, which is not true of a credential the configuration has refused.
+ * code path will ever read, and `pithy doctor` does not list them as outstanding work: the configuration
+ * has refused them.
  *
  * **Declared, never inferred**, for {@link SecretBranchSeam}'s reason: `auth-apple-credentials` and
  * `providers.apple` are spelled alike today and nothing makes a secret name and a config key the same
@@ -296,7 +306,7 @@ export interface CapabilityComposeContext {
  * message (an untouched message is dropped by the runtime).
  *
  * **`ForwardableEmailMessage` and `ExecutionContext` are imported rather than assumed ambient**, and
- * that is the whole of #315's second half. This module is reachable from a client: a browser program
+ * that is deliberate. This module is reachable from a client: a browser program
  * that names a control-plane scope through a capability's guards lands here, and a browser program
  * has no Workers globals. Read off the global scope, the two names resolved only for a consumer that
  * had `@cloudflare/workers-types` in its `types` — so an adopter's DOM program failed on two errors
@@ -379,7 +389,7 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * The CF permissions this capability's **deployed Workers** call Cloudflare with, as short catalog keys
      * (`secrets:write`, `images:write`, `analytics:read`). The runtime counterpart of {@link ciPermissions}.
      *
-     * **A deployed application holds one Cloudflare API token, and this is the only way into it (#728).**
+     * **A deployed application holds one Cloudflare API token, and this is the only way into it.**
      * Every composed capability's keys union into the project-level `runtime` profile, minted per
      * environment into the Secrets Store and read by every Worker of that environment through one binding,
      * the way every capability's `ciPermissions` union into the one `ci-system` token. A capability cannot
@@ -406,10 +416,10 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * the router that actually mounted; a stale declaration is worse than none, because a client
      * believes it.
      */
-    adminRoutes?: readonly AdminRoute[];
+    adminRoutes?: readonly AdminRouteDeclaration[];
     /**
      * The bounded health summary this capability contributes to its own manifest entry — a small, fixed
-     * set of scalars a management client can render beside a rail without a second round trip (#317).
+     * set of scalars a management client can render beside a rail without a second round trip.
      * Omit it when a capability has nothing to say, which is the normal case.
      *
      * **Declared alongside the routes, and only through `defineCapabilityHealth`.** The type is branded,
@@ -425,7 +435,7 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
     health?: CapabilityHealth;
     /**
      * The configured facts this capability states into its own manifest entry — the decisions an adopter
-     * already made that a management client has to respect to call anything (#422). Omit it when nothing
+     * already made that a management client has to respect to call anything. Omit it when nothing
      * this capability is configured with changes how a client calls it, which is the normal case.
      *
      * **A third field, because the two obvious names are taken and neither is this.**
@@ -446,7 +456,7 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
     manifestConfig?: CapabilityManifestConfig;
     /**
      * How this capability checks that its own **settings work**, as opposed to being merely present — the
-     * seam `pithy doctor` runs for every capability every Worker composes (#411). Omit it when a capability
+     * seam `pithy doctor` runs for every capability every Worker composes. Omit it when a capability
      * has nothing worth checking, which is the normal case and is silent rather than a fault.
      *
      * Declared here, on the instance, and **never keyed off `pithy.manifest.json`**: `@pithy-sh/matchmaking`
@@ -484,7 +494,7 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * The npm **package** that supplies this capability, or `null` where there is none.
      *
      * The join key {@link Capability.version} is useless without. A version joins against a release feed
-     * by package name, and this manifest reported the version alone until #626 — so a client had to guess
+     * by package name, and without this a client has to guess
      * `@pithy-sh/${name}`, which is right for most capabilities and wrong for the one that matters:
      * `controlplane` ships inside `@pithy-sh/core`, so the guess reaches a package that has never been
      * published and the join comes back empty, which is indistinguishable from "up to date".
@@ -523,7 +533,7 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * *load*, because the adopter's own toolchain has to keep working on the project while they fix it.
      * `@pithy-sh/payments` is the case it exists for: `pithy add` scaffolds an unimplemented
      * `resolveSubject`, every CLI command keeps loading that config, and the Worker refuses to boot until
-     * the adopter has written it (#500). A check that can be made at composition still belongs at
+     * the adopter has written it. A check that can be made at composition still belongs at
      * composition — earlier is better, and a refusal the CLI can raise is a refusal an adopter sees sooner.
      */
     boot?: (context: CapabilityComposeContext) => void;
@@ -535,6 +545,18 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * parsed with. A capability with no socket leaves it unset.
      */
     sockets?: readonly SocketChannel[];
+    /**
+     * The presence room kinds this capability serves (`../presence/declaration.ts`): who else has one of its
+     * records open, live. Omit it when a capability has no record more than one person acts on, which is the
+     * normal case.
+     *
+     * **Declaring it is the whole of the wiring.** `defineCapability` adds the `PRESENCE_ROOMS` Durable Object
+     * binding and the room socket to this capability's {@link requiredBindings} and {@link sockets};
+     * `createBackend` mounts `{basePath}/presence/tickets` and `{basePath}/presence/rooms/:kind/:recordId`
+     * beside its routes; the control-plane seam answers `POST /control-plane/presence/tickets` for every kind
+     * and lists them in the manifest. Build it from the resolved config, like {@link adminRoutes}.
+     */
+    presence?: PresenceDeclaration;
     /**
      * Composable middleware (e.g. turnstile(), requireAuth()). Runs on every request, the control-plane
      * surface included. A refusal that protects a route — a rate limit, authentication, a CSRF check —
@@ -573,7 +595,7 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
     /**
      * Whether this capability fills `AuthContext.scopes` — whether anything will ever put a string in the
      * array the scope gates read. `@pithy-sh/auth` declares it when an adopter supplies `resolveScopes`, and
-     * not otherwise (#560).
+     * not otherwise.
      *
      * The same reason {@link providesEntitlements} exists, one seam over. Every scope gate fails closed, so a
      * Worker composing `leaderboard` with no resolver is not broken: it refuses every caller on the gated
@@ -612,9 +634,16 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * capability that declares one (e.g. `@pithy-sh/email`'s bounce/complaint handler).
      */
     email?: CapabilityEmailHandler;
+    /**
+     * Queue consumer. The entrypoint (`createEntrypoint`) exposes the Worker's one `queue` export when any
+     * capability declares one, and hands each the messages of a batch whose body names it — see
+     * `../queue/consumer.ts` for why the body, not the queue name, decides. The queue itself is declared as a
+     * `queue` binding with a `consumer`, which is what writes the `queues.consumers` entry that delivers here.
+     */
+    queue?: CapabilityQueueHandler;
     /**
      * The audit recorder this capability provides **for code that has no request** — a Workflow step, which the
-     * runtime constructs with `env` and nothing else (#622). `@pithy-sh/audit` declares it; nothing else does.
+     * runtime constructs with `env` and nothing else. `@pithy-sh/audit` declares it; nothing else does.
      *
      * A route records through `c.var.emit`, which the same capability's middleware fills, and keeps doing that.
      * This is the other door, for the purge that erases a deleted account: it runs in a Workflow and still owes
@@ -623,6 +652,59 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * from the env per call, like the request recorder is built per request. Non-fatal by the same contract.
      */
     auditRecorder?: (env: Record<string, unknown>) => AuditEmit;
+    /**
+     * The trail's citation reader: which recorded events name a resource, and where each sits in its chain.
+     * `@pithy-sh/audit` declares it; nothing else does. The erasure attestation cites a purge's events through it,
+     * found among the composed capabilities by `../audit/citations.ts`, so the control plane imports no audit package.
+     */
+    auditCitations?: (env: Record<string, unknown>) => AuditCitationReader;
+    /**
+     * The purposes this capability processes under consent — `@pithy-sh/email` declares `email.marketing`
+     * and `email.tracking`. Omit it when nothing here needs consent, which is the ordinary case.
+     *
+     * **Only under this capability's own `name`**, as `<name>.<purpose>`: `defineCapability` refuses anything else,
+     * the rule tables and error codes follow. The consent capability composes every declaration into the catalog its
+     * `hasConsent` answers from, and `pithy doctor` names a composition that declares purposes and records no consent.
+     */
+    consentPurposes?: readonly ConsentPurpose[];
+    /**
+     * The processing activities this capability performs on personal data — `@pithy-sh/auth` declares `auth.account`.
+     * Each names a purpose, the data classes it uses and, where the capability can say, a default legal basis. Only
+     * under this capability's own `name`, as `<name>.<activity>`. `GET /control-plane/processing` derives the GDPR
+     * Article 30 record from them; see `../processing/activity.ts`. Build it from the resolved config, so a recipient
+     * that is switched off is not named.
+     */
+    processing?: readonly ProcessingActivity[];
+    /**
+     * The consent seam's provider: a reader built over this run's env. `@pithy-sh/consent` declares it;
+     * nothing else does. A capability asks it through `composedConsent` in `../consent/reader.ts`, never by
+     * importing the consent package.
+     */
+    consentReader?: (env: Record<string, unknown>) => ConsentReader;
+    /**
+     * Hear of a withdrawal from one of this capability's own purposes, to keep its own state in step — email
+     * suppresses an address for marketing when `email.marketing` is withdrawn. The consent capability calls
+     * it after the withdrawal is recorded, only for purposes under this capability's name.
+     */
+    consentWithdrawn?: ConsentWithdrawnListener;
+    /**
+     * Hear of a grant to one of this capability's own purposes once it stands — the other half of
+     * {@link Capability.consentWithdrawn}. Email lifts the marketing suppression a withdrawal wrote when
+     * `email.marketing` is granted again, so the suppression list and the record never disagree either way.
+     */
+    consentGranted?: ConsentGrantedListener;
+    /**
+     * Hear of a session replaced by its successor, to carry state keyed on the old session id to the new one —
+     * `@pithy-sh/organization` moves the acting selection. The capability that owns sessions announces it through
+     * `announceSessionRotated` in `../session/rotated.ts`, so neither side imports the other.
+     */
+    sessionRotated?: SessionRotatedListener;
+    /**
+     * An account's email address, by user id, or `null` when it has none — the capability that owns accounts
+     * declares it (`@pithy-sh/auth`), so a capability holding state by address finds one without importing auth.
+     * Read on demand, never carried.
+     */
+    addressOf?: (env: Record<string, unknown>, userId: string) => Promise<string | null>;
     /**
      * Named D1 databases this capability contributes tables to (database name → {@link DatabaseSpec}).
      * `createBackend` merges every capability's slices per database (via `composeDatabases`) and serves
@@ -660,6 +742,24 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * on their own `app` capability for their own tables, with the same types.
      */
     purge?: readonly PurgeContribution[];
+    /**
+     * How this capability's record of a purge is read back — declared by the capability that owns a purge
+     * subject and runs its purge: `@pithy-sh/auth` for a user, `@pithy-sh/organization` for an organization. The
+     * control plane's erasure attestation reads it. See `./erasure.ts`.
+     */
+    erasureRecords?: ErasureRecords;
+    /**
+     * This capability's own soft-delete window — declared by the capability that owns a deletion, from its
+     * own `retention.purgeAfterDays`. A Worker's `retention` block may replace it; `GET /control-plane/manifest`
+     * and `pithy doctor` report which window takes effect and where it came from. See `../retention/policy.ts`.
+     */
+    purgeWindow?: PurgeWindowDefault;
+    /**
+     * The audit actions that record this capability's lifecycle transitions beyond its erasure — a suspension, a
+     * reinstatement, a restore. The retention floor covers each, beside the actions `erasureRecords` names, so an
+     * operator lifting a suspension is kept as long as the deletion it reversed. See `../retention/policy.ts`.
+     */
+    lifecycleAuditActions?: readonly string[];
     /**
      * The role powers this capability's own routes gate on, through the acting-organization seam —
      * `media:manage`, `storage:manage`. Omit it when a capability asks no power, which is the normal case.
@@ -671,12 +771,19 @@ export interface Capability<Databases extends DatabaseSpecMap = DatabaseSpecMap,
      * importing any of them.
      */
     powers?: readonly string[];
+    /**
+     * The Vectorize indexes this capability owns and re-embeds in a Workflow of its own — see `./vectorIndex.ts`.
+     * `pithy vector reprocess` reads them beside `vector()`'s own indexes, so one command re-embeds every
+     * index in the project. Omit it when a capability owns no index, which is the ordinary case.
+     */
+    vectorIndexes?: readonly VectorIndexContribution[];
     /** Bindings this capability needs in the env (normalized — `optional` is always set). */
     requiredBindings: BindingSpec[];
 }
 /** Authoring shape: `requiredBindings` may omit `optional`; `defineCapability` normalizes them. */
-export type CapabilityInput<Databases extends DatabaseSpecMap = Record<never, never>, Namespaces extends KvNamespaceSpecMap = Record<never, never>, Name extends string = string, Workflows extends WorkflowSpecMap = Record<never, never>> = Omit<Capability<Databases, Namespaces, Name, Workflows>, "requiredBindings"> & {
+export type CapabilityInput<Databases extends DatabaseSpecMap = Record<never, never>, Namespaces extends KvNamespaceSpecMap = Record<never, never>, Name extends string = string, Workflows extends WorkflowSpecMap = Record<never, never>> = Omit<Capability<Databases, Namespaces, Name, Workflows>, "requiredBindings" | "processing"> & {
     requiredBindings: BindingSpecInput[];
+    processing?: readonly ProcessingActivityInput[];
 };
 /**
  * Author a capability. Parses each binding through `BindingSpec` — normalizing `optional`

package/dist/capability/capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/capability/capability.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACpD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,6GAA6G;AAC7G,MAAM,WAAW,SAAS;IACxB,kGAAkG;IAClG,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,0BAA0B,CAAC;IAC/C;;;;;;;OAOG;IACH,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B;;;;;;;OAOG;IACH,CAAC,EAAE,UAAU,CAAC;IACd;;;;;;;;;OASG;IACH,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzC;;;;;;;;OAQG;IACH,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAClD;;;;;;;;;OASG;IACH,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC;IAClC;;;;;OAKG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;;;;OAQG;IACH,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,iHAAiH;AACjH,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC;AAEvF,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;AAEhE;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,2FAA2F;AAC3F,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,qGAAqG;IACrG,YAAY,EAAE,SAAS,UAAU,EAAE,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,gBAAgB,KAClB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU,CACzB,SAAS,SAAS,eAAe,GAAG,eAAe,EACnD,UAAU,SAAS,kBAAkB,GAAG,kBAAkB,EAC1D,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,SAAS,SAAS,eAAe,GAAG,eAAe;IAEnD;;;;OAIG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wDAAwD;IACxD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACnB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,sBAAsB,CAAC;IAC7C;;;;;OAKG;IACH,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACpC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,cAAc,CAAC,EAAE,wBAAwB,CAAC;IAC1C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,IAAI,CAAC;IACtD;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,IAAI,CAAC;IACnD,gCAAgC;IAChC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;IAC3C;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACnC;;;;OAIG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAClC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAClC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,gBAAgB,CAAC;IAChE;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;OAGG;IACH,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC;IAC5D;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC5C;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACrC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,yFAAyF;IACzF,gBAAgB,EAAE,WAAW,EAAE,CAAC;CACjC;AAED,mGAAmG;AACnG,MAAM,MAAM,eAAe,CACzB,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EACxD,UAAU,SAAS,kBAAkB,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC5D,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IACtD,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,kBAAkB,CAAC,GAAG;IACjF,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;CACtC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,CAAC,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC9D,KAAK,CAAC,UAAU,SAAS,kBAAkB,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAClE,KAAK,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM,EAClC,KAAK,CAAC,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC9D,KAAK,EAAE,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAapH;AAED,sGAAsG;AACtG,KAAK,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC;AAEpH,kFAAkF;AAClF,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAE7G,sFAAsF;AACtF,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAE3G;;;;;GAKG;AACH,KAAK,gBAAgB,CAAC,CAAC,IACrB,CAAC,SAAS,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,MAAM,IAAI,EAAE,MAAM,CAAC,CAAC,GAC1E;KAAG,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;CAAE,GAC5E,KAAK,CAAC;AAEZ;;;;GAIG;AACH,KAAK,YAAY,CAAC,MAAM,EAAE,KAAK,IAC7B,mBAAmB,CAAC,MAAM,CAAC,SAAS,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;AAEpH,sFAAsF;AACtF,MAAM,MAAM,eAAe,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,IAAI,YAAY,CAC5E,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EACzB,eAAe,CAChB,CAAC;AAEF,6FAA6F;AAC7F,MAAM,MAAM,kBAAkB,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,IAAI,YAAY,CAC/E,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAC1B,kBAAkB,CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,IAAI,YAAY,CACjF,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CACxB,CAAC"}
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/capability/capability.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACpD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,oBAAoB,CAAC;AAC/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACzG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAE7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE7F,6GAA6G;AAC7G,MAAM,WAAW,SAAS;IACxB,kGAAkG;IAClG,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,0BAA0B,CAAC;IAC/C;;;;;;;OAOG;IACH,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B;;;;;;;OAOG;IACH,CAAC,EAAE,UAAU,CAAC;IACd;;;;;;;;;OASG;IACH,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzC;;;;;;;;OAQG;IACH,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAClD;;;;;;;;;OASG;IACH,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC;IAClC;;;;;OAKG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;;;;OAQG;IACH,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,iHAAiH;AACjH,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC;AAEvF,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;AAEhE;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,2FAA2F;AAC3F,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,qGAAqG;IACrG,YAAY,EAAE,SAAS,UAAU,EAAE,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,gBAAgB,KAClB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU,CACzB,SAAS,SAAS,eAAe,GAAG,eAAe,EACnD,UAAU,SAAS,kBAAkB,GAAG,kBAAkB,EAC1D,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,SAAS,SAAS,eAAe,GAAG,eAAe;IAEnD;;;;OAIG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wDAAwD;IACxD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACnB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,sBAAsB,CAAC;IAC7C;;;;;OAKG;IACH,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,cAAc,CAAC,EAAE,wBAAwB,CAAC;IAC1C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,IAAI,CAAC;IACtD;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,IAAI,CAAC;IACnD,gCAAgC;IAChC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;IAC3C;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAClC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAClC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,gBAAgB,CAAC;IAChE;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;OAGG;IACH,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC;IAC5D;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,mBAAmB,CAAC;IACvE;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC3C;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,aAAa,CAAC;IAChE;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAC5C;;;;OAIG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC;;;;OAIG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrF;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC5C;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACrC;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACnD,yFAAyF;IACzF,gBAAgB,EAAE,WAAW,EAAE,CAAC;CACjC;AAED,mGAAmG;AACnG,MAAM,MAAM,eAAe,CACzB,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EACxD,UAAU,SAAS,kBAAkB,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC5D,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IACtD,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,kBAAkB,GAAG,YAAY,CAAC,GAAG;IAChG,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACjD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,CAAC,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC9D,KAAK,CAAC,UAAU,SAAS,kBAAkB,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAClE,KAAK,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM,EAClC,KAAK,CAAC,SAAS,SAAS,eAAe,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC9D,KAAK,EAAE,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAkCpH;AAED,sGAAsG;AACtG,KAAK,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC;AAEpH,kFAAkF;AAClF,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAE7G,sFAAsF;AACtF,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAE3G;;;;;GAKG;AACH,KAAK,gBAAgB,CAAC,CAAC,IACrB,CAAC,SAAS,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,MAAM,IAAI,EAAE,MAAM,CAAC,CAAC,GAC1E;KAAG,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;CAAE,GAC5E,KAAK,CAAC;AAEZ;;;;GAIG;AACH,KAAK,YAAY,CAAC,MAAM,EAAE,KAAK,IAC7B,mBAAmB,CAAC,MAAM,CAAC,SAAS,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;AAEpH,sFAAsF;AACtF,MAAM,MAAM,eAAe,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,IAAI,YAAY,CAC5E,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EACzB,eAAe,CAChB,CAAC;AAEF,6FAA6F;AAC7F,MAAM,MAAM,kBAAkB,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,IAAI,YAAY,CAC/E,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAC1B,kBAAkB,CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,CAAC,IAAI,SAAS,SAAS,UAAU,EAAE,IAAI,YAAY,CACjF,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CACxB,CAAC"}

package/dist/capability/capability.js

@@ -1,8 +1,13 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
 import { BindingSpec } from "./bindings.js";
+import { parseConsentPurposes } from "../consent/purpose.js";
 import { declareRetained } from "../migrations/retainedDeclaration.js";
+import { PRESENCE_ROOMS_BINDING_SPEC, assertPresenceDeclaration } from "../presence/declaration.js";
+import { presenceRoomsSocket } from "../presence/channel.js";
+import { parseProcessingActivities } from "../processing/activity.js";
 import { assertPurgeContributions } from "./purge.js";
+import { assertVectorIndexContributions } from "./vectorIndex.js";
 //#region src/capability/capability.ts
 /**
 * Author a capability. Parses each binding through `BindingSpec` — normalizing `optional`
@@ -13,9 +18,19 @@ import { assertPurgeContributions } from "./purge.js";
 function defineCapability(input) {
 	for (const spec of Object.values(input.databases ?? {})) if (spec.migrations && spec.retained) declareRetained(spec.migrations, spec.retained);
 	if (input.purge) assertPurgeContributions(input.name, input.purge);
+	if (input.vectorIndexes) assertVectorIndexContributions(input.name, input.vectorIndexes, Object.keys(input.workflows ?? {}));
+	const consentPurposes = input.consentPurposes ? parseConsentPurposes(input.name, input.consentPurposes, input.name) : void 0;
+	const processing = input.processing ? parseProcessingActivities(input.name, input.processing, input.name) : void 0;
+	const presence = input.presence && input.presence.rooms.length > 0 ? input.presence : void 0;
+	if (presence) assertPresenceDeclaration(input.name, presence, input.adminRoutes ?? []);
+	const requiredBindings = presence && !input.requiredBindings.some((binding) => binding.name === PRESENCE_ROOMS_BINDING_SPEC.name) ? [...input.requiredBindings, PRESENCE_ROOMS_BINDING_SPEC] : input.requiredBindings;
+	const { processing: _declared, ...declared } = input;
 	return {
-		...input,
-		requiredBindings: input.requiredBindings.map((binding) => BindingSpec.parse(binding))
+		...declared,
+		...consentPurposes ? { consentPurposes } : {},
+		...processing ? { processing } : {},
+		...presence ? { sockets: [...input.sockets ?? [], presenceRoomsSocket(input.name, presence)] } : {},
+		requiredBindings: requiredBindings.map((binding) => BindingSpec.parse(binding))
 	};
 }
 //#endregion

package/dist/capability/erasure.d.ts

@@ -0,0 +1,75 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+import type { PurgeSubject } from "./purge";
+/**
+ * **The erasure record (#823): what a capability that runs a purge kept about it, read back.**
+ *
+ * A purge (#620, #623) records its progress in the lifecycle table of the capability that owns the subject:
+ * `pithy_auth_user_lifecycle` for a user, `pithy_organization_lifecycle` for an organization. Each holds the
+ * deletion, one row per step (erased, or retained with its basis under #814), a failure when the purge gave up, and
+ * the `purged` row at the end, keyed by the subject's id and nothing else.
+ *
+ * The control plane's erasure attestation assembles those rows into a record an auditor can be handed. It cannot
+ * import auth or organization (principle 4), so the capability that owns a subject declares how its rows are read,
+ * here, and which audit actions its purge records — so the attestation can cite them in the chain (#822).
+ *
+ * **Nothing about the person crosses this seam** beyond the id the trail already keeps: no address, no name.
+ */
+/** What happened, as the lifecycle tables name it. Only the rows an erasure is made of. */
+export type ErasureHistoryAction = "deleted" | "restored" | "purge_step" | "purge_retained" | "purge_failed" | "purged";
+/** How a deletion was asked for: with a window (`soft`) or none (`hard`). */
+export type ErasureDeletionMode = "soft" | "hard";
+/** One row of a subject's lifecycle, as the attestation reads it. Oldest first, in the order it was written. */
+export interface ErasureHistoryRow {
+    /** The subject's id. */
+    readonly subjectId: string;
+    /** What happened. */
+    readonly action: ErasureHistoryAction;
+    /** Who did it: `control-plane`, `user` or `system`. */
+    readonly actorType: string;
+    /** Why, in whoever acted's words. A step's summary, a retained step's basis. Null when nobody had to say. */
+    readonly reason: string | null;
+    /** The purge step a step, retained or failed row names — the capability, or the purge's own step. */
+    readonly step: string | null;
+    /** On a `deleted` row written since #823, how the deletion was asked for. Null before. */
+    readonly mode: ErasureDeletionMode | null;
+    /** On a `deleted` row written since #823, when its purge comes due. Null before. */
+    readonly purgeAfter: Date | null;
+    /** When it happened. */
+    readonly at: Date;
+}
+/** The audit actions one subject's purge records, so the attestation cites them. */
+export interface ErasureAuditActions {
+    /** Every action a deletion of the subject is recorded under — soft, hard, by its owner. */
+    readonly deleted: readonly string[];
+    /** One purge step: erased or retained, its `metadata.step` naming which. */
+    readonly step: string;
+    /** The purge giving up, its `metadata.step` naming where. */
+    readonly failed: string;
+    /** The purge finishing. */
+    readonly purged: string;
+}
+/** Reading one kind of subject's erasure rows, over one env. */
+export interface ErasureHistoryReader {
+    /** Every erasure row for these subjects, oldest first. A subject with none is absent. */
+    history(subjectIds: readonly string[]): Promise<ErasureHistoryRow[]>;
+    /**
+     * Every subject with a purge in the window: a step, a failure or a completion written in it, a deletion whose
+     * purge came due in it, or one still outstanding in it — due by its end (or recorded before a due instant was) and
+     * neither purged nor restored before it opened. The last is the purge that came due earlier and has written nothing
+     * since, which is the one a period read exists to name. Inclusive at both ends.
+     */
+    subjectsIn(since: Date, until: Date): Promise<string[]>;
+}
+/** What a capability that owns a purge subject declares: which subject, its trail, and how its rows are read. */
+export interface ErasureRecords {
+    /** The subject this capability's purge erases. One capability per subject. */
+    readonly subject: PurgeSubject;
+    /** The `resourceType` its audit events are recorded against. */
+    readonly resourceType: string;
+    /** The audit actions its purge records. */
+    readonly auditActions: ErasureAuditActions;
+    /** The reader, over one env. */
+    readonly read: (env: Record<string, unknown>) => ErasureHistoryReader;
+}
+//# sourceMappingURL=erasure.d.ts.map

package/dist/capability/erasure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erasure.d.ts","sourceRoot":"","sources":["../../src/capability/erasure.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C;;;;;;;;;;;;;GAaG;AAEH,2FAA2F;AAC3F,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,gBAAgB,GAAG,cAAc,GAAG,QAAQ,CAAC;AAExH,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD,gHAAgH;AAChH,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qBAAqB;IACrB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qGAAqG;IACrG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,0FAA0F;IAC1F,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1C,oFAAoF;IACpF,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACjC,wBAAwB;IACxB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CACnB;AAED,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,yFAAyF;IACzF,OAAO,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACrE;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACzD;AAED,iHAAiH;AACjH,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,2CAA2C;IAC3C,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,oBAAoB,CAAC;CACvE"}

package/dist/capability/erasure.js

@@ -0,0 +1,2 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT

package/dist/capability/manifest.d.ts

@@ -309,6 +309,11 @@ export declare const CapabilityManifest: z.ZodObject<{
             global: "global";
         }>>;
         resource: z.ZodOptional<z.ZodString>;
+        consumer: z.ZodOptional<z.ZodObject<{
+            deadLetter: z.ZodString;
+            maxRetries: z.ZodNumber;
+            maxBatchSize: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     peerCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
     optionalCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;

package/dist/capability/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/capability/manifest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgDxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,iBAAiB,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEvH,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAUgD,CAAC;AA6D5G;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CASlE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAE7C;;;;;;;;;;;GAWG;AACH;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAOD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,EAC5C,MAAM,EAAE,MAAM,GACb,MAAM,CAaR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASlF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7E;AAwDD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,+FAA+F;IAC/F,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,IAAI,EACJ,MAAM,EACN,WAAgB,EAChB,aAAoB,GACrB,EAAE,sBAAsB,GAAG,MAAM,CAKjC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB;aAAK,YAAY,EAAE,eAAe;CAAW,CAAC;AAE3E,8DAA8D;AAC9D,eAAO,MAAM,cAAc;;EAEuF,CAAC;AACnH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,wGAAwG;AACxG,MAAM,WAAW,cAAc;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,YAAY;;iBAErB,OAAO,EAAE,gBAAgB;iBACzB,MAAM,EAAE,wBAAwB;iBAChC,SAAS,EAAE,uBAAuB;iBAClC,QAAQ,EACN,+IAA+I;;;iBAGjJ,OAAO,EAAE,OAAO;iBAChB,MAAM,EAAE,2BAA2B;iBACnC,SAAS,EAAE,0BAA0B;iBACrC,QAAQ,EACN,mKAAmK;;CAEtH,CAAC;AAEpD,oDAAoD;AACpD,eAAO,MAAM,UAAU;;;EAE8E,CAAC;AACtG,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,YAAY;;;;;;;;;;iBAwGoE,CAAC;AAC9F,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuE0D,CAAC;AAC1F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/capability/manifest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgDxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,iBAAiB,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEvH,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAUgD,CAAC;AA6D5G;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CASlE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAE7C;;;;;;;;;;;GAWG;AACH;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAOD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,EAC5C,MAAM,EAAE,MAAM,GACb,MAAM,CAaR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASlF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7E;AAwDD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,+FAA+F;IAC/F,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,IAAI,EACJ,MAAM,EACN,WAAgB,EAChB,aAAoB,GACrB,EAAE,sBAAsB,GAAG,MAAM,CAKjC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB;aAAK,YAAY,EAAE,eAAe;CAAW,CAAC;AAE3E,8DAA8D;AAC9D,eAAO,MAAM,cAAc;;EAEuF,CAAC;AACnH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,wGAAwG;AACxG,MAAM,WAAW,cAAc;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,YAAY;;iBAErB,OAAO,EAAE,gBAAgB;iBACzB,MAAM,EAAE,wBAAwB;iBAChC,SAAS,EAAE,uBAAuB;iBAClC,QAAQ,EACN,+IAA+I;;;iBAGjJ,OAAO,EAAE,OAAO;iBAChB,MAAM,EAAE,2BAA2B;iBACnC,SAAS,EAAE,0BAA0B;iBACrC,QAAQ,EACN,mKAAmK;;CAEtH,CAAC;AAEpD,oDAAoD;AACpD,eAAO,MAAM,UAAU;;;EAE8E,CAAC;AACtG,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,YAAY;;;;;;;;;;iBAwGoE,CAAC;AAC9F,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuE0D,CAAC;AAC1F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/capability/personColumns.d.ts

@@ -0,0 +1,28 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+import type { DatabaseSpecMap } from "../data/databases";
+/** Whether a column, by its camelCase name, names a person: an id of one, or an address. */
+export declare function isPersonColumn(column: string): boolean;
+/** What the check reads off a capability — its name, its tables and its purge contributions. */
+export interface PersonRowsSubject {
+    readonly name: string;
+    readonly databases?: DatabaseSpecMap;
+    readonly purge?: readonly {
+        readonly subject: string;
+        readonly export?: unknown;
+    }[];
+}
+/** One capability that holds rows about a person and does not answer for them. */
+export interface PersonRowGap {
+    /** The capability. */
+    readonly capability: string;
+    /** Its person columns, as `table.column`. */
+    readonly columns: readonly string[];
+    /** `no_contribution` — no `user` purge contribution at all; `no_export` — one that does not export. */
+    readonly gap: "no_contribution" | "no_export";
+}
+/** Every person column in a capability's tables, as `table.column`, in declaration order. */
+export declare function personColumnsOf(capability: PersonRowsSubject): string[];
+/** Every capability among `capabilities` that holds rows about a person and does not answer for them. */
+export declare function personRowGaps(capabilities: readonly PersonRowsSubject[]): PersonRowGap[];
+//# sourceMappingURL=personColumns.d.ts.map

package/dist/capability/personColumns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personColumns.d.ts","sourceRoot":"","sources":["../../src/capability/personColumns.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAgCzD,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,gGAAgG;AAChG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CACrF;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC3B,sBAAsB;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,uGAAuG;IACvG,QAAQ,CAAC,GAAG,EAAE,iBAAiB,GAAG,WAAW,CAAC;CAC/C;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,EAAE,CASvE;AAED,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,GAAG,YAAY,EAAE,CAWxF"}

package/dist/capability/personColumns.js

@@ -0,0 +1,66 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+//#region src/capability/personColumns.ts
+/**
+* **Every capability that holds rows about a person answers for them** — erases them on a purge, or keeps them and
+* says why, and in both cases exports them (#814). This is the check that holds a capability to it, from its own
+* schema rather than from a list somebody maintains.
+*
+* A table carries a row about a person when a column names one: an id (`userId`, `ownerId`, `subjectId`, `actorId`,
+* any `…UserId`, the two sides of an invite or a friendship) or an address (`email`, `recipient`, any `…Address`).
+* A capability whose schema carries one must declare a `user` purge contribution with an `export`. `retain` requires
+* one already; an erasing contribution may omit it, and for an adopter's own capability that is the honest
+* `not_exported` — but no kit capability may.
+*
+* Over-reaching is cheap here and under-reaching is the defect: a column that names an operator or a sender rather
+* than the person still costs only a contribution that finds nothing, while a person column the rule missed is rows
+* an access request never answers for.
+*/
+/** Column names that name a person outright. */
+const PERSON_COLUMNS = /* @__PURE__ */ new Set([
+	"userId",
+	"ownerId",
+	"subjectId",
+	"actorId",
+	"inviterId",
+	"inviteeId",
+	"userA",
+	"userB",
+	"email",
+	"recipient"
+]);
+/** Whether a column, by its camelCase name, names a person: an id of one, or an address. */
+function isPersonColumn(column) {
+	return PERSON_COLUMNS.has(column) || column.endsWith("UserId") || column.endsWith("Address");
+}
+/** Every person column in a capability's tables, as `table.column`, in declaration order. */
+function personColumnsOf(capability) {
+	const found = [];
+	for (const spec of Object.values(capability.databases ?? {})) for (const [table, schema] of Object.entries(spec.tables)) {
+		const shape = schema.shape ?? {};
+		for (const column of Object.keys(shape)) if (isPersonColumn(column)) found.push(`${table}.${column}`);
+	}
+	return found;
+}
+/** Every capability among `capabilities` that holds rows about a person and does not answer for them. */
+function personRowGaps(capabilities) {
+	const gaps = [];
+	for (const capability of capabilities) {
+		const columns = personColumnsOf(capability);
+		if (columns.length === 0) continue;
+		const contribution = capability.purge?.find((candidate) => candidate.subject === "user");
+		if (!contribution) gaps.push({
+			capability: capability.name,
+			columns,
+			gap: "no_contribution"
+		});
+		else if (typeof contribution.export !== "function") gaps.push({
+			capability: capability.name,
+			columns,
+			gap: "no_export"
+		});
+	}
+	return gaps;
+}
+//#endregion
+export { isPersonColumn, personColumnsOf, personRowGaps };