@sixb/core 0.1.20 → 0.1.21

package/dist/datasets/execution.d.ts

@@ -3,6 +3,7 @@ import type { ExecutionContext } from "../execution";
 import type { DatasetMergeCommitResult } from "../lake-storage/merge";
 import type { DatasetRow, DatasetVersion, LakeStorage } from "../lake-storage/types";
 import type { SixbRuntimeContext } from "../runtime/types";
+import type { DatasetVersionMarkings } from "../security/dataset-version-markings";
 import type { Redactions } from "../security/types";
 import type { MergeChange } from "./changes";
 import type { DatasetDefinition } from "./types";
@@ -28,7 +29,7 @@ export interface DatasetRows {
     /** Columns each row holds. Redacted columns are left out. */
     readonly columns: readonly string[];
     /**
-     * Every column of the dataset the reader cannot read, whether or not it was requested. Absent
+     * Every column of the version the reader cannot read, whether or not it was requested. Absent
      * when the reader can read every column.
      */
     readonly redactions?: Redactions;
@@ -44,5 +45,5 @@ export interface DatasetsRuntime {
     readRows(dataset: DatasetDefinition, input?: DatasetReadRowsInput): Promise<DatasetRows | null>;
     ingest(dataset: DatasetDefinition, input: DatasetIngestInput): Promise<DatasetIngestResult>;
 }
-export declare function createDatasetsRuntime(runtime: SixbRuntimeContext, execution: ExecutionContext, source: Pick<DatasetsRuntime, "list" | "getById">, lakeStorage: LakeStorage, blobStorage: Pick<BlobStorage, "stat">): DatasetsRuntime;
+export declare function createDatasetsRuntime(runtime: SixbRuntimeContext, execution: ExecutionContext, source: Pick<DatasetsRuntime, "list" | "getById">, lakeStorage: LakeStorage, blobStorage: Pick<BlobStorage, "stat">, versionMarkings: DatasetVersionMarkings): DatasetsRuntime;
 //# sourceMappingURL=execution.d.ts.map

package/dist/datasets/execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/datasets/execution.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EACZ,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,GAC7C,aAAa,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1F,MAAM,WAAW,oBAAoB;IACnC,sCAAsC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,SAAS,iBAAiB,EAAE,CAAA;IACpC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAAA;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAC/F,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;CAC5F;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,gBAAgB,EAC3B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC,EACjD,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GACrC,eAAe,CAkGjB"}
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/datasets/execution.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAA;AAElF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EACZ,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,GAC7C,aAAa,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1F,MAAM,WAAW,oBAAoB;IACnC,sCAAsC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,SAAS,iBAAiB,EAAE,CAAA;IACpC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAAA;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAC/F,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;CAC5F;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,gBAAgB,EAC3B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC,EACjD,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EACtC,eAAe,EAAE,sBAAsB,GACtC,eAAe,CAsGjB"}

package/dist/datasets/write.js

@@ -2,15 +2,15 @@
 import {
   lakeDatasetDefinition2,
   writeDataset2
-} from "../chunk-t7x8dmn0.js";
-import"../chunk-way52z4h.js";
-import"../chunk-0yh890a4.js";
-import"../chunk-gc4ntf7d.js";
+} from "../chunk-431pyp2c.js";
+import"../chunk-e17zdm62.js";
+import"../chunk-q5e5tv4b.js";
+import"../chunk-cwdzcv37.js";
 import"../chunk-gfdh9kqa.js";
-import"../chunk-es1gxsbf.js";
-import"../chunk-gsjm1wms.js";
-import"../chunk-jhm3zsa7.js";
-import"../chunk-z3y5kg1x.js";
+import"../chunk-f4pamkt9.js";
+import"../chunk-dhdha526.js";
+import"../chunk-6eqsgvxk.js";
+import"../chunk-wkv3h3q7.js";
 export {
   lakeDatasetDefinition2 as lakeDatasetDefinition,
   writeDataset2 as writeDataset

package/dist/error-reporting/internal.js

@@ -1,6 +1,6 @@
 // @bun
-import"../chunk-8mx7qw3y.js";
-import"../chunk-z3y5kg1x.js";
+import"../chunk-dvd2fp9q.js";
+import"../chunk-6eqsgvxk.js";
 import {
   attachSixbErrorReporter2,
   shareSixbErrorReporter2,
@@ -9,11 +9,11 @@ import {
   reportEventDeliveryFailure2,
   reportRuleEvaluationFailure2,
   flushSixbErrors2
-} from "../chunk-fa02jy15.js";
+} from "../chunk-cy4mbddw.js";
 import {
   normalizeReportedError2,
   SixbErrorReporter2
-} from "../chunk-7t429e3f.js";
+} from "../chunk-xvsc5m8n.js";
 export {
   SixbErrorReporter2 as SixbErrorReporter,
   attachSixbErrorReporter2 as attachSixbErrorReporter,

package/dist/errors/internal.d.ts

@@ -5,6 +5,7 @@ export declare const SIXB_FAILURE_MAX_MESSAGE_BYTES: number;
 export declare const SIXB_FAILURE_MAX_SERIALIZED_BYTES: number;
 type SixbErrorCodeTuple = readonly [SixbErrorCode, ...SixbErrorCode[]];
 export { SIXB_ERROR_CODES };
+export { withFailureMessage } from "./failure-message";
 export interface SixbErrorOptions {
     readonly cause?: unknown;
     readonly details?: ReadonlyJsonValue;

package/dist/errors/internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/errors/internal.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8C,KAAK,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE5F,OAAO,EAAE,gBAAgB,EAA0B,MAAM,WAAW,CAAA;AAGpE,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAEzD,eAAO,MAAM,8BAA8B,QAAW,CAAA;AACtD,eAAO,MAAM,iCAAiC,QAAY,CAAA;AAI1D,KAAK,kBAAkB,GAAG,SAAS,CAAC,aAAa,EAAE,GAAG,aAAa,EAAE,CAAC,CAAA;AAEtE,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CACrC;AAED,8FAA8F;AAC9F,MAAM,WAAW,cAAe,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,CAAA;CACnB;AAED,MAAM,WAAW,0BAA0B,CAAC,MAAM,SAAS,kBAAkB,CAC3E,SAAQ,oBAAoB;IAC5B,gDAAgD;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,kBAAkB,CAC1E,SAAQ,0BAA0B,CAAC,MAAM,CAAC;IAC1C,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACpC,qFAAqF;IACrF,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CACrC;AA0BD,yEAAyE;AACzE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gBAAqB,GAC7B,cAAc,CAEhB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EACxE,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC,GACzC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAc7B;AAED,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAMnE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EACnE,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,0BAA0B,CAAC,MAAM,CAAC,GAC1C,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9B,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,WAAW,CAAA;AAkIjG,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EAC1E,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EACpC,YAAY,EAAE,MAAM,GACnB,MAAM,CAAA;AACT,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAAA;AASlE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EACtE,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,GACnB,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9B,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAA;AAwF7D;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/E"}
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/errors/internal.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8C,KAAK,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE5F,OAAO,EAAE,gBAAgB,EAA0B,MAAM,WAAW,CAAA;AAGpE,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAEzD,eAAO,MAAM,8BAA8B,QAAW,CAAA;AACtD,eAAO,MAAM,iCAAiC,QAAY,CAAA;AAI1D,KAAK,kBAAkB,GAAG,SAAS,CAAC,aAAa,EAAE,GAAG,aAAa,EAAE,CAAC,CAAA;AAEtE,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CACrC;AAED,8FAA8F;AAC9F,MAAM,WAAW,cAAe,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,CAAA;CACnB;AAED,MAAM,WAAW,0BAA0B,CAAC,MAAM,SAAS,kBAAkB,CAC3E,SAAQ,oBAAoB;IAC5B,gDAAgD;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,yBAAyB,CAAC,MAAM,SAAS,kBAAkB,CAC1E,SAAQ,0BAA0B,CAAC,MAAM,CAAC;IAC1C,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACpC,qFAAqF;IACrF,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CACrC;AA0BD,yEAAyE;AACzE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gBAAqB,GAC7B,cAAc,CAEhB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EACxE,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC,GACzC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAc7B;AAED,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAMnE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EACnE,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,0BAA0B,CAAC,MAAM,CAAC,GAC1C,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9B,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,WAAW,CAAA;AAkIjG,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EAC1E,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EACpC,YAAY,EAAE,MAAM,GACnB,MAAM,CAAA;AACT,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAAA;AASlE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,MAAM,SAAS,kBAAkB,EACtE,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,GACnB,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9B,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAA;AAwF7D;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/E"}

package/dist/errors/internal.js

@@ -10,8 +10,10 @@ import {
   serializeSixbFailure2,
   parseSixbFailure2,
   summarizeErrorMessage2
-} from "../chunk-8mx7qw3y.js";
-import"../chunk-z3y5kg1x.js";
+} from "../chunk-dvd2fp9q.js";
+import {
+  withFailureMessage2
+} from "../chunk-6eqsgvxk.js";
 export {
   SIXB_ERROR_CODES2 as SIXB_ERROR_CODES,
   SIXB_FAILURE_MAX_MESSAGE_BYTES2 as SIXB_FAILURE_MAX_MESSAGE_BYTES,
@@ -22,7 +24,8 @@ export {
   parseSixbFailure2 as parseSixbFailure,
   serializeSixbFailure2 as serializeSixbFailure,
   summarizeErrorMessage2 as summarizeErrorMessage,
-  toSixbFailure2 as toSixbFailure
+  toSixbFailure2 as toSixbFailure,
+  withFailureMessage2 as withFailureMessage
 };
 
-//# debugId=D0F56F0AAC4B77D464756E2164756E21
+//# debugId=A9DFAA28C5A65F4D64756E2164756E21

package/dist/errors/internal.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "D0F56F0AAC4B77D464756E2164756E21",
+  "debugId": "A9DFAA28C5A65F4D64756E2164756E21",
   "names": []
 }

package/dist/events/execution.d.ts

@@ -2,12 +2,22 @@ import type { SixbRuntimeContext } from "../runtime/types";
 import type { EventsAppendInput, EventsEmitOptions, EventsReadInput, EventsSubscribeInput } from "./service";
 import type { StoredDomainEvent } from "./types";
 export interface EventsRuntime {
-    /** The event as this execution may read it: hidden events are `undefined`, others redacted. */
-    readable(event: StoredDomainEvent): StoredDomainEvent | undefined;
+    /**
+     * The events this execution may read, in order: hidden events are dropped, the others redacted.
+     * Markings apply as they are now, with those of the versions an object event's values came from:
+     * the version a projection's event applied, and every marking a column declares for projected
+     * values that came from earlier versions.
+     */
+    visible(events: readonly StoredDomainEvent[]): Promise<readonly StoredDomainEvent[]>;
     append(input: EventsAppendInput): Promise<readonly StoredDomainEvent[]>;
     emit(input: EventsAppendInput, options: EventsEmitOptions): Promise<void>;
     read(input?: EventsReadInput): Promise<readonly StoredDomainEvent[]>;
     latestCursor(): Promise<string | undefined>;
+    /**
+     * Deliver the events this execution may read as they are appended. A batch whose markings cannot
+     * be enforced, because the versions projections applied cannot be read, is dropped with a
+     * warning: read it again with `read({ afterCursor })`.
+     */
     subscribe(input: EventsSubscribeInput, handler: (events: readonly StoredDomainEvent[]) => unknown): Promise<() => void>;
 }
 export declare function createEventsRuntime(runtime: SixbRuntimeContext): EventsRuntime;

package/dist/events/execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/events/execution.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACrB,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAEhD,MAAM,WAAW,aAAa;IAC5B,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,SAAS,CAAA;IACjE,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACpE,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,SAAS,CACP,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,KAAK,OAAO,GACzD,OAAO,CAAC,MAAM,IAAI,CAAC,CAAA;CACvB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAoE9E"}
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/events/execution.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACrB,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAEhD,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACpF,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACpE,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C;;;;OAIG;IACH,SAAS,CACP,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,KAAK,OAAO,GACzD,OAAO,CAAC,MAAM,IAAI,CAAC,CAAA;CACvB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAsF9E"}

package/dist/events/index.js

@@ -22,7 +22,7 @@ import {
   DomainEventService2,
   createDomainEventService2,
   toStoredEvent2
-} from "../chunk-yzwja0mj.js";
+} from "../chunk-5hx48dnn.js";
 import {
   events2,
   eventSelectorSpec2,
@@ -31,9 +31,9 @@ import {
 import {
   scopeKeysForEvent2
 } from "../chunk-bkpke1sg.js";
-import"../chunk-7t429e3f.js";
-import"../chunk-8mx7qw3y.js";
-import"../chunk-z3y5kg1x.js";
+import"../chunk-xvsc5m8n.js";
+import"../chunk-dvd2fp9q.js";
+import"../chunk-6eqsgvxk.js";
 export {
   DATASET_EVENT_DEFINITIONS2 as DATASET_EVENT_DEFINITIONS,
   DEFAULT_EVENTS_RETENTION_MS2 as DEFAULT_EVENTS_RETENTION_MS,

package/dist/execution/agent.js

@@ -7,70 +7,77 @@ import {
   bindAgentModelExecution2,
   restoreAgentExecutionScope2,
   assertAgentExecutionRecord2
-} from "../chunk-6c6sn0bh.js";
-import"../chunk-xfs8x8m9.js";
-import"../chunk-tg2cw67r.js";
-import"../chunk-fkgc1wt8.js";
-import"../chunk-4vyr1j8f.js";
-import"../chunk-hjzdd750.js";
-import"../chunk-mfs23znk.js";
-import"../chunk-1zq2p6g0.js";
-import"../chunk-99nd4rc1.js";
-import"../chunk-vyf9kfqf.js";
-import"../chunk-bx9q3cwv.js";
-import"../chunk-yevzdx4y.js";
+} from "../chunk-akzryx9h.js";
+import"../chunk-0bphap9y.js";
+import"../chunk-ky3j490c.js";
+import"../chunk-cfj9dfbb.js";
+import"../chunk-z58tm0hm.js";
+import"../chunk-rmakanzx.js";
+import"../chunk-6rqgmkde.js";
+import"../chunk-3qms4nax.js";
+import"../chunk-bk9svbcq.js";
 import {
   ensureExecutionRecord2
-} from "../chunk-9dmt152s.js";
-import"../chunk-n33z5bjw.js";
-import"../chunk-9ybhtmg4.js";
-import"../chunk-br3k6qbf.js";
-import"../chunk-jmfet9r4.js";
+} from "../chunk-vf57cr4t.js";
+import"../chunk-mfs23znk.js";
+import"../chunk-1cc1xaf3.js";
+import"../chunk-99nd4rc1.js";
+import"../chunk-q7gn29y3.js";
+import"../chunk-cn0fwwhy.js";
+import"../chunk-918wwnaa.js";
 import"../chunk-qf954wje.js";
-import"../chunk-rrzt8jdy.js";
-import"../chunk-tw03bsmb.js";
-import"../chunk-9w055r5b.js";
-import"../chunk-s16apyk9.js";
-import"../chunk-hn2r7z41.js";
-import"../chunk-h89wz928.js";
+import"../chunk-9j4jw7as.js";
+import"../chunk-tbc1ngpd.js";
 import"../chunk-pbcbn83d.js";
 import"../chunk-qczk96d9.js";
 import"../chunk-mmagke4x.js";
-import"../chunk-b38szspf.js";
-import"../chunk-a40ad1ft.js";
-import"../chunk-s54c868q.js";
+import"../chunk-vvxtn22d.js";
+import"../chunk-hn2r7z41.js";
+import"../chunk-br3k6qbf.js";
+import"../chunk-jmfet9r4.js";
+import"../chunk-3qct2mdc.js";
 import"../chunk-ere85b8y.js";
 import"../chunk-rj69qcrd.js";
 import"../chunk-4as3wt1c.js";
+import"../chunk-eptrvnby.js";
+import"../chunk-d09e3rax.js";
+import"../chunk-h89wz928.js";
+import"../chunk-x0v3jd47.js";
+import"../chunk-dhcv7yxc.js";
+import"../chunk-a40ad1ft.js";
+import"../chunk-g257jwnc.js";
+import"../chunk-7n440zgt.js";
 import"../chunk-29yx306f.js";
 import"../chunk-pqajwytd.js";
-import"../chunk-d09tj99x.js";
-import"../chunk-3qms4nax.js";
-import"../chunk-7n440zgt.js";
-import"../chunk-m427qgq0.js";
-import"../chunk-fa02jy15.js";
-import"../chunk-7t429e3f.js";
-import"../chunk-3zxk45er.js";
 import"../chunk-5a4a52tq.js";
-import"../chunk-t7x8dmn0.js";
-import"../chunk-way52z4h.js";
-import"../chunk-0yh890a4.js";
-import"../chunk-gc4ntf7d.js";
+import"../chunk-431pyp2c.js";
+import"../chunk-e17zdm62.js";
+import"../chunk-q5e5tv4b.js";
+import"../chunk-m427qgq0.js";
+import"../chunk-cy4mbddw.js";
+import"../chunk-xvsc5m8n.js";
+import"../chunk-cwdzcv37.js";
 import"../chunk-gfdh9kqa.js";
+import"../chunk-8ncg20rd.js";
 import"../chunk-pfp1txq2.js";
-import"../chunk-5e43w60z.js";
-import"../chunk-vpq4shxz.js";
-import"../chunk-c85m1hyj.js";
-import"../chunk-v9xd5wzd.js";
-import"../chunk-es1gxsbf.js";
+import"../chunk-5948n82c.js";
+import"../chunk-9kgkfg6v.js";
+import"../chunk-nn5xnx3s.js";
+import"../chunk-447a5c0p.js";
+import"../chunk-s7jg7pmn.js";
+import"../chunk-f4pamkt9.js";
 import"../chunk-hcbyfxbe.js";
-import"../chunk-d0bqz29d.js";
+import"../chunk-6vb4st8k.js";
 import"../chunk-v4jbb3rs.js";
-import"../chunk-hvsb78a1.js";
-import"../chunk-gsjm1wms.js";
-import"../chunk-jhm3zsa7.js";
-import"../chunk-8mx7qw3y.js";
-import"../chunk-z3y5kg1x.js";
+import"../chunk-8frc8a4j.js";
+import"../chunk-dhdha526.js";
+import"../chunk-dvd2fp9q.js";
+import"../chunk-6eqsgvxk.js";
+import"../chunk-48qjhh6v.js";
+import"../chunk-a3faa34j.js";
+import"../chunk-wkv3h3q7.js";
+import"../chunk-7q8t23v4.js";
+import"../chunk-mjddfa7k.js";
 export {
   assertAgentExecutionRecord2 as assertAgentExecutionRecord,
   bindAgentModelExecution2 as bindAgentModelExecution,
@@ -82,4 +89,4 @@ export {
   restoreAgentExecutionScope2 as restoreAgentExecutionScope
 };
 
-//# debugId=E08266ED6EE409F664756E2164756E21
+//# debugId=9A4B18A3A947A04264756E2164756E21

package/dist/execution/agent.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "E08266ED6EE409F664756E2164756E21",
+  "debugId": "9A4B18A3A947A04264756E2164756E21",
   "names": []
 }

package/dist/execution/authorized-object-reader.d.ts

@@ -1,12 +1,14 @@
 import type { EmbeddingModelCatalog, RerankingModelCatalog } from "../models/catalog";
-import { type AuthorizedOntologyView } from "../objects/authorized-ontology-view";
+import type { AuthorizedOntologyView } from "../objects/authorized-ontology-view";
 import { type ExecuteObjectCountInput, type ExecuteObjectCountResult, type ExecuteObjectExistsInput, type ExecuteObjectExistsResult, type ExecuteObjectFacetsInput, type ExecuteObjectFacetsResult, type ExecuteObjectQueryInput, type ExecuteObjectQueryLinksInput, type ExecuteObjectQueryLinksResult, type ExecuteObjectQueryResult } from "../objects/query";
 import { type TelemetryHistoryReadAdmission, type TelemetryHistoryReadWorkloadInput } from "../objects/telemetry/workload";
 import type { OntologyRegistry } from "../ontology";
+import type { AppliedMarkings } from "../security/applied-markings";
 import type { ObjectReadStorage, ObjectRow, ObjectStorage } from "../storage";
-import { resolveExecutionScopeAuthorization } from "./authorization";
+import type { Clearance, EventSources } from "./object-reader-clearance";
+import { ObjectReaderOntology } from "./object-reader-ontology";
+import { ObjectReaderSecurity } from "./object-reader-security";
 import type { ExecutionScope } from "./types";
-type ResolvedExecutionAuthority = ReturnType<typeof resolveExecutionScopeAuthorization>;
 type GetObjectInput = Omit<Parameters<ObjectReadStorage["getByPrimaryId"]>[0], "projectId">;
 type GetObjectsInput = Omit<Parameters<ObjectReadStorage["getByPrimaryIdBatch"]>[0], "projectId">;
 type SelectObjectPropertiesInput = Parameters<ObjectReadStorage["selectsObjectProperties"]>[0];
@@ -15,6 +17,11 @@ type CanReadObjectPropertiesBatchInput = Omit<SelectObjectPropertiesInput, "proj
 type ListObjectsInput = Omit<Parameters<ObjectReadStorage["list"]>[0], "projectId">;
 type ListLinksInput = Omit<Parameters<ObjectReadStorage["listLinks"]>[0], "projectId">;
 type ListLinksBatchInput = Omit<Parameters<ObjectReadStorage["listLinksBatch"]>[0], "projectId">;
+/** The model catalogs semantic and reranked search use. */
+interface ObjectReaderModels {
+    readonly embedding?: EmbeddingModelCatalog;
+    readonly reranking?: RerankingModelCatalog;
+}
 declare const readerConstructionKey: Readonly<{}>;
 /**
  * Core-owned object read boundary for one exact execution authority.
@@ -22,18 +29,24 @@ declare const readerConstructionKey: Readonly<{}>;
  * The implementation class is intentionally private to this module. Its private fields make the
  * exported instance type nominal, while the construction key prevents code that discovers the
  * JavaScript constructor through an instance from manufacturing another reader.
+ *
+ * Its state is grouped as a project is: the ontology it resolves against, the security of the
+ * authority (its delegation and clearance included), the model catalogs search uses, and the
+ * storage it reads. Each group decides what belongs to it; the reader composes them.
  */
 declare class AuthorizedObjectReaderImpl {
     #private;
     constructor(key: typeof readerConstructionKey, input: {
-        readonly scope: ExecutionScope;
-        readonly ontology: OntologyRegistry;
-        readonly embeddingModels?: EmbeddingModelCatalog;
-        readonly rerankingModels?: RerankingModelCatalog;
+        readonly ontology: ObjectReaderOntology;
+        readonly security: ObjectReaderSecurity;
+        readonly models: ObjectReaderModels;
         readonly storage: ObjectReadStorage;
-        readonly authority: ResolvedExecutionAuthority;
     });
     static assertBound(reader: AuthorizedObjectReaderImpl, scope: ExecutionScope): void;
+    /** What the reader cannot read now, for surfaces such as events that redact on their own. */
+    static clearance(reader: AuthorizedObjectReaderImpl): Promise<Clearance>;
+    /** What the reader cannot read in an object event. */
+    static eventClearance(reader: AuthorizedObjectReaderImpl, sources: EventSources): Clearance | Promise<Clearance>;
     static ontologyView(reader: AuthorizedObjectReaderImpl): AuthorizedOntologyView;
     /** Project identity carried by this nominal reader capability. */
     get projectId(): string;
@@ -50,10 +63,17 @@ declare class AuthorizedObjectReaderImpl {
     exists(input: Omit<ExecuteObjectExistsInput, "projectId">): Promise<ExecuteObjectExistsResult>;
     facet(input: Omit<ExecuteObjectFacetsInput, "projectId">): Promise<ExecuteObjectFacetsResult>;
     /**
-     * Redact a row returned by a write. An upsert returns the merged effective row, which may hold
-     * marked values the writer never sent and cannot read.
+     * Redact the rows a write of this object type returns. An upsert returns the merged effective
+     * row, which may hold marked values the writer never sent and cannot read. Resolved before the
+     * write, which it refuses when the writer cannot read the type at all.
      */
-    redactWrittenRow<TRow extends ObjectRow>(row: TRow): TRow;
+    writtenRowRedactor(objectTypeId: string): Promise<(<TRow extends ObjectRow>(row: TRow) => TRow)>;
+    /**
+     * Refuse a write or a request that names an object type or link this authority cannot read,
+     * before any lookup: it would answer whether what it names exists, and land where the reader
+     * cannot see.
+     */
+    assertReadable(targets: ReadTargets): Promise<void>;
     /** Enforce the delegated response budget without exposing or recombining its limits. */
     assertVisibleOutputWithinLimit(value: unknown): void;
     /** Admit adjacent telemetry work without exposing which authority policy was selected. */
@@ -67,6 +87,8 @@ export declare function createAuthorizedObjectReader(input: {
     readonly embeddingModels?: EmbeddingModelCatalog;
     readonly rerankingModels?: RerankingModelCatalog;
     readonly objectStorage: ObjectStorage;
+    /** Markings of the dataset versions projections applied; the code's markings alone without. */
+    readonly appliedMarkings?: AppliedMarkings;
 }): AuthorizedObjectReader;
 /** Reject recombining an authorized reader with any other execution authority. */
 export declare function assertAuthorizedObjectReaderBinding(input: {
@@ -75,5 +97,24 @@ export declare function assertAuthorizedObjectReaderBinding(input: {
 }): void;
 /** Return inert metadata projected from the exact authority already owned by the reader. */
 export declare function getAuthorizedOntologyView(reader: AuthorizedObjectReader): AuthorizedOntologyView;
+/**
+ * What a reader resolved for this authority cannot read now. Events redact with it: an event of an
+ * object type the reader cannot read is not delivered, and the others are redacted like rows.
+ */
+export declare function readerClearance(reader: AuthorizedObjectReader): Promise<Clearance>;
+/**
+ * What a reader cannot read in an object event: the current markings, with those of the versions
+ * its values came from. A plain value for a reader those markings cannot affect, which reads no
+ * version.
+ */
+export declare function readerEventClearance(reader: AuthorizedObjectReader, sources: EventSources): Clearance | Promise<Clearance>;
+/** What a write or a request names: object types, and links by their source type. */
+interface ReadTargets {
+    readonly objectTypeIds: readonly string[];
+    readonly links?: readonly {
+        readonly objectTypeId: string;
+        readonly linkId: string;
+    }[];
+}
 export {};
 //# sourceMappingURL=authorized-object-reader.d.ts.map

package/dist/execution/authorized-object-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorized-object-reader.d.ts","sourceRoot":"","sources":["../../src/execution/authorized-object-reader.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAEL,KAAK,sBAAsB,EAE5B,MAAM,qCAAqC,CAAA;AAO5C,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAK9B,MAAM,kBAAkB,CAAA;AAgBzB,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACvC,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAKV,iBAAiB,EACjB,SAAS,EACT,aAAa,EACd,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAyB,kCAAkC,EAAE,MAAM,iBAAiB,CAAA;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,SAAS,CAAA;AAQnE,KAAK,0BAA0B,GAAG,UAAU,CAAC,OAAO,kCAAkC,CAAC,CAAA;AACvF,KAAK,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAC3F,KAAK,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACjG,KAAK,2BAA2B,GAAG,UAAU,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9F,KAAK,0BAA0B,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAA;AAC9E,KAAK,iCAAiC,GAAG,IAAI,CAAC,2BAA2B,EAAE,WAAW,CAAC,CAAA;AACvF,KAAK,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACnF,KAAK,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACtF,KAAK,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAEhG,QAAA,MAAM,qBAAqB,cAAoB,CAAA;AAE/C;;;;;;GAMG;AACH,cAAM,0BAA0B;;gBAgB5B,GAAG,EAAE,OAAO,qBAAqB,EACjC,KAAK,EAAE;QACL,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;QAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;QACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;QAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;QAChD,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;QACnC,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAA;KAC/C;IAgCH,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI;IAUnF,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,0BAA0B,GAAG,sBAAsB;IAe/E,kEAAkE;IAClE,IAAI,SAAS,IAAI,MAAM,CAEtB;IAEK,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAatF,mBAAmB,CACvB,KAAK,EAAE,eAAe,GACrB,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAiBjD,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;IAgB1E,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC;IAqBxB,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAmCpE,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAiB5E,cAAc,CAClB,KAAK,EAAE,mBAAmB,GACzB,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IA0B5C,YAAY,CAChB,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC;IAgB9B,UAAU,CACd,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,CAAC,GACrD,OAAO,CAAC,6BAA6B,CAAC;IAgDnC,KAAK,CACT,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC;IAW9B,MAAM,CACV,KAAK,EAAE,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,GACjD,OAAO,CAAC,yBAAyB,CAAC;IAW/B,KAAK,CACT,KAAK,EAAE,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,GACjD,OAAO,CAAC,yBAAyB,CAAC;IAyCrC;;;OAGG;IACH,gBAAgB,CAAC,IAAI,SAAS,SAAS,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI;IAIzD,wFAAwF;IACxF,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAKpD,0FAA0F;IAC1F,yBAAyB,CACvB,KAAK,EAAE,iCAAiC,GACvC,6BAA6B;CAkHjC;AAKD,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAA;AAE/D,0FAA0F;AAC1F,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;IAChD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;CACtC,GAAG,sBAAsB,CAezB;AAED,kFAAkF;AAClF,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;IACvC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAC/B,GAAG,IAAI,CAEP;AAED,4FAA4F;AAC5F,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAEhG"}
+{"version":3,"file":"authorized-object-reader.d.ts","sourceRoot":"","sources":["../../src/execution/authorized-object-reader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AAOjF,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAK9B,MAAM,kBAAkB,CAAA;AAczB,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACvC,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAIV,iBAAiB,EACjB,SAAS,EACT,aAAa,EACd,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAmC,MAAM,0BAA0B,CAAA;AAChG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,KAAK,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAC3F,KAAK,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACjG,KAAK,2BAA2B,GAAG,UAAU,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9F,KAAK,0BAA0B,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAA;AAC9E,KAAK,iCAAiC,GAAG,IAAI,CAAC,2BAA2B,EAAE,WAAW,CAAC,CAAA;AACvF,KAAK,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACnF,KAAK,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACtF,KAAK,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAEhG,2DAA2D;AAC3D,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAA;CAC3C;AAED,QAAA,MAAM,qBAAqB,cAAoB,CAAA;AAE/C;;;;;;;;;;GAUG;AACH,cAAM,0BAA0B;;gBAO5B,GAAG,EAAE,OAAO,qBAAqB,EACjC,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAA;QACvC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAA;QACvC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;QACnC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;KACpC;IAWH,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI;IAUnF,6FAA6F;WAChF,SAAS,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,SAAS,CAAC;IAI9E,sDAAsD;IACtD,MAAM,CAAC,cAAc,CACnB,MAAM,EAAE,0BAA0B,EAClC,OAAO,EAAE,YAAY,GACpB,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAIjC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,0BAA0B,GAAG,sBAAsB;IAI/E,kEAAkE;IAClE,IAAI,SAAS,IAAI,MAAM,CAEtB;IAEK,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAkBtF,mBAAmB,CACvB,KAAK,EAAE,eAAe,GACrB,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAuBjD,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;IAkB1E,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC;IAyBxB,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAwCpE,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAkB5E,cAAc,CAClB,KAAK,EAAE,mBAAmB,GACzB,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IA8B5C,YAAY,CAChB,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC;IAqB9B,UAAU,CACd,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,CAAC,GACrD,OAAO,CAAC,6BAA6B,CAAC;IAmEnC,KAAK,CACT,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC;IAY9B,MAAM,CACV,KAAK,EAAE,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,GACjD,OAAO,CAAC,yBAAyB,CAAC;IAY/B,KAAK,CACT,KAAK,EAAE,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,GACjD,OAAO,CAAC,yBAAyB,CAAC;IA0CrC;;;;OAIG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,GACnB,OAAO,EAAC,CAAC,IAAI,SAAS,SAAS,EAAE,GAAG,EAAE,IAAI,KAAK,IAAI,EAAC;IAMvD;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,wFAAwF;IACxF,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAKpD,0FAA0F;IAC1F,yBAAyB,CACvB,KAAK,EAAE,iCAAiC,GACvC,6BAA6B;CA0FjC;AAKD,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAA;AAE/D,0FAA0F;AAC1F,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;IAChD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,+FAA+F;IAC/F,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;CAC3C,GAAG,sBAAsB,CAsBzB;AAED,kFAAkF;AAClF,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;IACvC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAC/B,GAAG,IAAI,CAEP;AAED,4FAA4F;AAC5F,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAEhG;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,SAAS,CAAC,CAElF;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,YAAY,GACpB,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAEhC;AAED,qFAAqF;AACrF,UAAU,WAAW;IACnB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACvF"}

package/dist/execution/object-reader-clearance.d.ts

@@ -0,0 +1,41 @@
+import { type PropertyClearance } from "../objects/property-clearance";
+import type { OntologyRegistry } from "../ontology";
+import type { AppliedMarkings } from "../security/applied-markings";
+import type { EventOriginRef } from "../security/applied-markings-contribution";
+/** What one read may not return; `undefined` when it reads everything. */
+export type Clearance = PropertyClearance | undefined;
+/**
+ * What one authority cannot read: the markings the code declares, and those the dataset versions
+ * projections applied add, for an authority they can affect.
+ *
+ * A reader they cannot affect, trusted code included, gets the code's clearance as a plain value:
+ * awaiting it costs one microtask, not a refresh. Otherwise the clearance is resolved for each
+ * snapshot, which rarely changes, so the last one is kept.
+ */
+export declare class ObjectReaderClearance {
+    #private;
+    constructor(input: {
+        readonly ontology: OntologyRegistry;
+        readonly clearances: ReadonlySet<string> | undefined;
+        readonly appliedMarkings?: AppliedMarkings;
+    });
+    /** What the authority cannot read now. */
+    current(): Clearance | Promise<Clearance>;
+    /**
+     * What the authority cannot read in an object event. Reads the event's origin version only for
+     * an authority its markings affect.
+     */
+    forEvent(sources: EventSources): Clearance | Promise<Clearance>;
+}
+/** Where the values of an object event came from. */
+export interface EventSources {
+    readonly objectTypeId: string;
+    /** The projection that emitted the event, and the version it applied. */
+    readonly origin?: EventOriginRef;
+    /**
+     * Whether the event holds values from before it, which came from versions applied earlier: an
+     * update or a deletion, or a record an action or a direct write took of projected values.
+     */
+    readonly earlier: boolean;
+}
+//# sourceMappingURL=object-reader-clearance.d.ts.map

package/dist/execution/object-reader-clearance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-reader-clearance.d.ts","sourceRoot":"","sources":["../../src/execution/object-reader-clearance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAA4B,MAAM,+BAA+B,CAAA;AAChG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAA;AAG/E,0EAA0E;AAC1E,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAA;AAErD;;;;;;;GAOG;AACH,qBAAa,qBAAqB;;gBAWpB,KAAK,EAAE;QACjB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;QACnC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;QACpD,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;KAC3C;IAYD,0CAA0C;IAC1C,OAAO,IAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAczC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;CAehE;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B"}

package/dist/execution/object-reader-ontology.d.ts

@@ -0,0 +1,12 @@
+import { type AuthorizedOntologyView } from "../objects/authorized-ontology-view";
+import type { OntologyRegistry } from "../ontology";
+import type { ResolvedExecutionAuthority } from "./object-reader-security";
+/** The ontology a reader resolves against, and the part of it its authority may describe. */
+export declare class ObjectReaderOntology {
+    #private;
+    readonly registry: OntologyRegistry;
+    constructor(registry: OntologyRegistry, authority: ResolvedExecutionAuthority);
+    /** Inert metadata for the types the authority may view, built on first use. */
+    view(): AuthorizedOntologyView;
+}
+//# sourceMappingURL=object-reader-ontology.d.ts.map

package/dist/execution/object-reader-ontology.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-reader-ontology.d.ts","sourceRoot":"","sources":["../../src/execution/object-reader-ontology.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,sBAAsB,EAE5B,MAAM,qCAAqC,CAAA;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAE1E,6FAA6F;AAC7F,qBAAa,oBAAoB;;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;gBAIvB,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,0BAA0B;IAM7E,+EAA+E;IAC/E,IAAI,IAAI,sBAAsB;CAc/B"}

package/dist/execution/object-reader-security.d.ts

@@ -0,0 +1,45 @@
+import type { AuthorizationContext } from "../authorization/types";
+import { type SelectedObjectQueryAdmission } from "../objects/query/selected-read-admission";
+import type { OntologyRegistry } from "../ontology";
+import type { AppliedMarkings } from "../security/applied-markings";
+import type { ObjectLinkRow } from "../storage";
+import type { resolveExecutionScopeAuthorization } from "./authorization";
+import { type Clearance, ObjectReaderClearance } from "./object-reader-clearance";
+import type { RuntimeAuthorization } from "./types";
+export type ResolvedExecutionAuthority = ReturnType<typeof resolveExecutionScopeAuthorization>;
+export type RuntimeReadAuthorization = {
+    readonly projectId: string;
+    readonly runtimeAuthorization: RuntimeAuthorization;
+    readonly authorization?: AuthorizationContext;
+};
+/** What a delegated authority selected: the object types, links, and queries it may read. */
+export interface ObjectReaderDelegation {
+    readonly objectTypeIds: ReadonlySet<string>;
+    readonly linkDefinitions: ReadonlySet<string>;
+    readonly queryAdmission: SelectedObjectQueryAdmission;
+}
+/**
+ * Who reads, and what it may read: the exact execution authority, the selection a delegated one
+ * carries, and its clearance. It decides whether an object type or a link is viewable.
+ */
+export declare class ObjectReaderSecurity {
+    /** The registered authority the reader is bound to. */
+    readonly authorization: RuntimeAuthorization;
+    readonly authority: ResolvedExecutionAuthority;
+    /** The authority as generic authorization checks take it. */
+    readonly runtime: RuntimeReadAuthorization;
+    /** Present for delegated authority only. */
+    readonly delegation?: ObjectReaderDelegation;
+    readonly clearance: ObjectReaderClearance;
+    constructor(input: {
+        readonly authorization: RuntimeAuthorization;
+        readonly authority: ResolvedExecutionAuthority;
+        readonly projectId: string;
+        readonly ontology: OntologyRegistry;
+        readonly appliedMarkings?: AppliedMarkings;
+    });
+    assertObjectTypesViewable(objectTypeIds: readonly string[], clearance: Clearance): void;
+    isObjectTypeViewable(objectTypeId: string, clearance: Clearance): boolean;
+    isLinkViewable(link: ObjectLinkRow, clearance: Clearance): boolean;
+}
+//# sourceMappingURL=object-reader-security.d.ts.map

package/dist/execution/object-reader-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-reader-security.d.ts","sourceRoot":"","sources":["../../src/execution/object-reader-security.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAElE,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,0CAA0C,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAA0B,aAAa,EAAE,MAAM,YAAY,CAAA;AACvE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,EAAE,KAAK,SAAS,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAEnD,MAAM,MAAM,0BAA0B,GAAG,UAAU,CAAC,OAAO,kCAAkC,CAAC,CAAA;AAE9F,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAA;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAA;CAC9C,CAAA;AAED,6FAA6F;AAC7F,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC7C,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAA;CACtD;AAED;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAA;IAC9C,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAA;IAC1C,4CAA4C;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAA;IAC5C,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;gBAE7B,KAAK,EAAE;QACjB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;QAC5C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAA;QAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;QACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAA;KAC3C;IA4BD,yBAAyB,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI;IAuBvF,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO;IAMzE,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO;CAWnE"}