@sixb/core 0.1.7 → 0.1.8

package/src/workflows/execution.ts

@@ -1,5 +1,11 @@
-import { canViewWorkflowIntervention, canViewWorkflowRun, isAllowed } from "../authorization"
+import {
+  assertAuthorized,
+  canViewWorkflowIntervention,
+  canViewWorkflowRun,
+  isRuntimeAllowed,
+} from "../authorization"
 import type { AuthorizablePrincipal, ExecutionContext } from "../execution"
+import { resolveRuntimeAuthorizationForProject } from "../execution/authorization"
 import { resolveExecutionCosts } from "../runtime/ai-cost"
 import { resolveExecutionUsage } from "../runtime/ai-usage"
 import type { SixbRuntimeContext } from "../runtime/types"
@@ -101,22 +107,40 @@ export function createWorkflowsRuntime(
   execution: ExecutionContext,
   source: Pick<WorkflowsRuntime, "list" | "getById">
 ): WorkflowsRuntime {
+  const authority = resolveRuntimeAuthorizationForProject(runtime)
   const allowed = (workflowId: string) =>
-    isAllowed(runtime.authorization, { kind: "workflow.run", workflowId })
-  const canAccessHistory = (workflowId: string) =>
-    allowed(workflowId) && (!runtime.authorization || source.getById(workflowId) !== null)
+    isRuntimeAllowed(runtime, { kind: "workflow.run", workflowId })
+  const canAccessHistory = (workflowId: string) => {
+    switch (authority.type) {
+      case "denied":
+      case "delegated":
+        return false
+      case "unrestricted":
+        return true
+      case "principal":
+        return allowed(workflowId) && source.getById(workflowId) !== null
+    }
+  }
   const visibleIds = () =>
     source
       .list()
       .filter((workflow) => allowed(workflow.id))
       .map((workflow) => workflow.id)
+  const historyFilterIds = () =>
+    authority.type === "unrestricted"
+      ? undefined
+      : authority.type === "principal"
+        ? visibleIds()
+        : []
   const getVisibleRunRecord = async (runId: string): Promise<WorkflowRunRecord | null> => {
+    if (authority.type === "denied" || authority.type === "delegated") return null
     const run =
       (await runtime.storage.workflowRuns?.getById({
         projectId: runtime.projectId,
         id: runId,
       })) ?? null
-    return run && canViewWorkflowRun(runtime.authorization, run) && canAccessHistory(run.workflowId)
+    if (!run || !canAccessHistory(run.workflowId)) return null
+    return authority.type === "unrestricted" || canViewWorkflowRun(authority.context, run)
       ? run
       : null
   }
@@ -131,9 +155,9 @@ export function createWorkflowsRuntime(
     const storage = runtime.storage.workflowRuns
     if (!storage || !(await getVisibleRunRecord(runId))) return null
     const result = await storage.nodes.list({
-      projectId: runtime.projectId,
       ...input,
       workflowRunId: runId,
+      projectId: runtime.projectId,
     })
     return {
       ...result,
@@ -142,13 +166,18 @@ export function createWorkflowsRuntime(
   }
 
   return {
-    list: () => source.list().filter((workflow) => allowed(workflow.id)),
+    list: () =>
+      authority.type === "denied" || authority.type === "delegated"
+        ? []
+        : source.list().filter((workflow) => allowed(workflow.id)),
     getById: (workflowId) => {
+      if (authority.type === "denied" || authority.type === "delegated") return null
       const workflow = source.getById(workflowId)
       return workflow && allowed(workflowId) ? workflow : null
     },
     request: (workflow, options) => requestWorkflowRun(runtime, execution, workflow, options),
     requestById: async (input) => {
+      assertAuthorized(runtime, { kind: "workflow.run", workflowId: input.workflowId })
       const workflow = source.getById(input.workflowId)
       if (!workflow) {
         throw new WorkflowValidationError(`[Sixb] Unknown workflow '${input.workflowId}'`)
@@ -158,12 +187,15 @@ export function createWorkflowsRuntime(
     runs: {
       getById: getRun,
       list: async (input = {}) => {
+        if (authority.type === "denied" || authority.type === "delegated") {
+          return { runs: [], hasMore: false, total: 0 }
+        }
         const storage = runtime.storage.workflowRuns
         if (!storage) return { runs: [], hasMore: false, total: 0 }
         const result = await storage.list({
-          projectId: runtime.projectId,
           ...input,
-          workflowIds: runtime.authorization ? visibleIds() : undefined,
+          workflowIds: historyFilterIds(),
+          projectId: runtime.projectId,
         })
         return {
           ...result,
@@ -171,6 +203,9 @@ export function createWorkflowsRuntime(
         }
       },
       listLatest: async (workflowIds) => {
+        if (authority.type === "denied" || authority.type === "delegated") {
+          return { runs: [] }
+        }
         const storage = runtime.storage.workflowRuns
         if (!storage || workflowIds.length === 0) return { runs: [] }
         const allowedIds = workflowIds.filter(canAccessHistory)
@@ -187,24 +222,28 @@ export function createWorkflowsRuntime(
     },
     interventions: {
       getById: async (interventionId) => {
+        if (authority.type === "denied" || authority.type === "delegated") return null
         const intervention =
           (await runtime.storage.workflowInterventions?.getById({
             projectId: runtime.projectId,
             id: interventionId,
           })) ?? null
-        return intervention &&
-          canViewWorkflowIntervention(runtime.authorization, intervention) &&
-          canAccessHistory(intervention.workflowId)
+        if (!intervention || !canAccessHistory(intervention.workflowId)) return null
+        return authority.type === "unrestricted" ||
+          canViewWorkflowIntervention(authority.context, intervention)
           ? intervention
           : null
       },
       list: (input = {}) => {
+        if (authority.type === "denied" || authority.type === "delegated") {
+          return Promise.resolve({ interventions: [], hasMore: false, total: 0 })
+        }
         const storage = runtime.storage.workflowInterventions
         if (!storage) return Promise.resolve({ interventions: [], hasMore: false, total: 0 })
         return storage.list({
-          projectId: runtime.projectId,
           ...input,
-          workflowIds: runtime.authorization ? visibleIds() : undefined,
+          workflowIds: historyFilterIds(),
+          projectId: runtime.projectId,
         })
       },
     },

package/src/workflows/request.ts

@@ -1,5 +1,6 @@
 import { snapshotRequesterGroupIds } from "../auth/attribution"
 import { assertAuthorized } from "../authorization"
+import { resolveExecutionScopeAuthorization } from "../execution/authorization"
 import {
   createPrimitiveExecutionRecord,
   ensureExecutionRecord,
@@ -44,6 +45,10 @@ export async function requestWorkflowRun(
   workflow: WorkflowDefinition,
   options: WorkflowRunRequestOptions = {}
 ): Promise<WorkflowRunRequestResult> {
+  resolveExecutionScopeAuthorization(runtime.projectId, {
+    execution,
+    authorization: runtime.runtimeAuthorization,
+  })
   assertAuthorized(runtime, { kind: "workflow.run", workflowId: workflow.id })
   const requesterGroupIds = execution.requestedBy
     ? await snapshotRequesterGroupIds({

package/dist/chunk-2b5qtban.js.map

@@ -1,14 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/bootstrap/discovery.ts", "../src/rules/errors.ts", "../src/rules/validation.ts", "../src/rules/builders.ts", "../src/bootstrap/ontology-type-manifest.ts"],
-  "sourcesContent": [
-    "/**\n * Filesystem auto-discovery for convention-based module loading.\n *\n * Scans well-known definition directories (`ontology/`, `actions/`, etc.)\n * relative to a project root and returns typed definition arrays ready\n * for the `Sixb` constructor.\n */\n\nimport { readdir } from \"node:fs/promises\"\nimport { join, relative } from \"node:path\"\nimport { pathToFileURL } from \"node:url\"\nimport { isActionDefinition } from \"../actions\"\nimport { isConnectorDefinition } from \"../connectors\"\nimport { isDatasetDefinition } from \"../datasets\"\nimport type { OntologyDocumentInput, OntologySource } from \"../ontology/registry\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport type { ValueType } from \"../ontology/types\"\nimport { isPipelineDefinition } from \"../pipelines\"\nimport { isProjectionDefinition } from \"../projections/builders\"\nimport { isRuleDefinition } from \"../rules\"\nimport { RuntimeError } from \"../runtime/errors\"\nimport { isScheduleDefinition } from \"../schedules\"\nimport { isGroupDefinition, isMembershipPolicyDefinition, isRoleDefinition } from \"../security\"\nimport { isSyncDefinition } from \"../syncs\"\nimport { isWorkflowDefinition } from \"../workflows\"\n\nconst moduleExtensions = new Set([\".ts\", \".tsx\", \".js\", \".jsx\", \".mjs\", \".cjs\"])\n\nexport async function discoverOntologySources(\n  projectRoot: string\n): Promise<readonly OntologySource[]> {\n  const ontologyDir = join(projectRoot, \"ontology\")\n  const modulePaths = await listModuleFiles(ontologyDir)\n  const exportedCandidates = await loadModuleExports({\n    modulePaths,\n    projectRoot,\n    kind: \"ontology\",\n  })\n\n  const ontologyDocuments: OntologyDocumentInput[] = []\n  const objectTypes: ObjectTypeWithPropertyTokens[] = []\n  const valueTypes: ValueType[] = []\n\n  for (const candidate of exportedCandidates) {\n    if (isOntologyDocumentInput(candidate)) {\n      ontologyDocuments.push(candidate)\n      continue\n    }\n\n    if (isObjectTypeWithPropertyTokens(candidate)) {\n      objectTypes.push(candidate)\n      continue\n    }\n\n    if (isValueType(candidate)) {\n      valueTypes.push(candidate)\n    }\n  }\n\n  const discoveredSources: OntologySource[] = [...ontologyDocuments, ...objectTypes]\n  if (valueTypes.length > 0) {\n    discoveredSources.push({\n      id: \"__sixb.discovered.value-types__\",\n      version: \"0.0.0\",\n      objectTypes: [],\n      valueTypes,\n    })\n  }\n\n  return discoveredSources\n}\n\ntype DiscoveryModuleKind =\n  | \"action\"\n  | \"connector\"\n  | \"dataset\"\n  | \"group\"\n  | \"membershipPolicy\"\n  | \"ontology\"\n  | \"pipeline\"\n  | \"projection\"\n  | \"role\"\n  | \"rule\"\n  | \"schedule\"\n  | \"sync\"\n  | \"workflow\"\n\ninterface DefinitionDiscoveryFamily<TDefinition> {\n  readonly directory: readonly string[]\n  readonly kind: Exclude<DiscoveryModuleKind, \"ontology\">\n  readonly isDefinition: (value: unknown) => value is TDefinition\n}\n\nconst definitionDiscoveryRegistry = {\n  actions: { directory: [\"actions\"], kind: \"action\", isDefinition: isActionDefinition },\n  projections: {\n    directory: [\"projections\"],\n    kind: \"projection\",\n    isDefinition: isProjectionDefinition,\n  },\n  schedules: {\n    directory: [\"schedules\"],\n    kind: \"schedule\",\n    isDefinition: isScheduleDefinition,\n  },\n  syncs: { directory: [\"syncs\"], kind: \"sync\", isDefinition: isSyncDefinition },\n  connectors: {\n    directory: [\"connectors\"],\n    kind: \"connector\",\n    isDefinition: isConnectorDefinition,\n  },\n  pipelines: {\n    directory: [\"pipelines\"],\n    kind: \"pipeline\",\n    isDefinition: isPipelineDefinition,\n  },\n  datasets: { directory: [\"datasets\"], kind: \"dataset\", isDefinition: isDatasetDefinition },\n  rules: { directory: [\"rules\"], kind: \"rule\", isDefinition: isRuleDefinition },\n  workflows: {\n    directory: [\"workflows\"],\n    kind: \"workflow\",\n    isDefinition: isWorkflowDefinition,\n  },\n  groups: {\n    directory: [\"security\", \"groups\"],\n    kind: \"group\",\n    isDefinition: isGroupDefinition,\n  },\n  roles: {\n    directory: [\"security\", \"roles\"],\n    kind: \"role\",\n    isDefinition: isRoleDefinition,\n  },\n  membershipPolicies: {\n    directory: [\"security\", \"policies\"],\n    kind: \"membershipPolicy\",\n    isDefinition: isMembershipPolicyDefinition,\n  },\n} as const satisfies Record<string, DefinitionDiscoveryFamily<unknown>>\n\ntype DefinitionFromFamily<TFamily> =\n  TFamily extends DefinitionDiscoveryFamily<infer TDefinition> ? TDefinition : never\n\nexport type DiscoveredProjectDefinitions = {\n  readonly [TKey in keyof typeof definitionDiscoveryRegistry]: readonly DefinitionFromFamily<\n    (typeof definitionDiscoveryRegistry)[TKey]\n  >[]\n}\n\nexport async function discoverProjectDefinitions(\n  projectRoot: string\n): Promise<DiscoveredProjectDefinitions> {\n  const entries = await Promise.all(\n    Object.entries(definitionDiscoveryRegistry).map(async ([key, family]) => {\n      const definitions = await discoverDefinitionFamily(projectRoot, family)\n      return [key, definitions] as const\n    })\n  )\n\n  // Object.fromEntries erases literal keys. Every entry above comes from the exact registry and its\n  // definitions have passed that entry's type guard, so restoring the mapped result type is safe.\n  return Object.fromEntries(entries) as DiscoveredProjectDefinitions\n}\n\nasync function discoverDefinitionFamily(\n  projectRoot: string,\n  family: DefinitionDiscoveryFamily<unknown>\n): Promise<readonly unknown[]> {\n  const modulePaths = await listModuleFiles(join(projectRoot, ...family.directory))\n  const exportedCandidates = await loadModuleExports({\n    modulePaths,\n    projectRoot,\n    kind: family.kind,\n  })\n\n  return exportedCandidates.filter(family.isDefinition)\n}\n\n// ── Internal helpers ────────────────────────────────────────\n\nasync function loadModuleExports(options: {\n  modulePaths: readonly string[]\n  projectRoot: string\n  kind: DiscoveryModuleKind\n}): Promise<unknown[]> {\n  const exportedCandidates: unknown[] = []\n  const seen = new Set<unknown>()\n\n  for (const modulePath of options.modulePaths) {\n    let moduleNamespace: Record<string, unknown>\n    try {\n      moduleNamespace = (await import(pathToFileURL(modulePath).href)) as Record<string, unknown>\n    } catch (error) {\n      const relPath = relative(options.projectRoot, modulePath)\n      const reason = error instanceof Error ? error.message : String(error)\n      throw new RuntimeError(`Failed to load ${options.kind} module '${relPath}': ${reason}`)\n    }\n\n    for (const exportedValue of Object.values(moduleNamespace)) {\n      collectExportedCandidates(exportedValue, exportedCandidates, seen)\n    }\n  }\n\n  return exportedCandidates\n}\n\nfunction collectExportedCandidates(value: unknown, target: unknown[], seen: Set<unknown>): void {\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      collectExportedCandidates(item, target, seen)\n    }\n    return\n  }\n\n  if (value === undefined) {\n    return\n  }\n\n  if ((typeof value === \"object\" && value !== null) || typeof value === \"function\") {\n    if (seen.has(value)) {\n      return\n    }\n    seen.add(value)\n  }\n\n  target.push(value)\n}\n\nasync function listModuleFiles(dir: string): Promise<string[]> {\n  let entries: import(\"node:fs\").Dirent[]\n  try {\n    entries = (await readdir(dir, { withFileTypes: true })) as import(\"node:fs\").Dirent[]\n  } catch (error) {\n    if (isNotFoundError(error)) {\n      return []\n    }\n    throw error\n  }\n\n  const files: string[] = []\n  const sortedEntries = [...entries].sort((a, b) => a.name.localeCompare(b.name))\n\n  for (const entry of sortedEntries) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      files.push(...(await listModuleFiles(fullPath)))\n      continue\n    }\n\n    if (!entry.isFile()) {\n      continue\n    }\n\n    if (!hasSupportedModuleExtension(entry.name)) {\n      continue\n    }\n\n    files.push(fullPath)\n  }\n\n  return files\n}\n\nfunction isNotFoundError(error: unknown): boolean {\n  if (!(error instanceof Error)) {\n    return false\n  }\n\n  const code = (error as NodeJS.ErrnoException).code\n  return code === \"ENOENT\" || code === \"ENOTDIR\"\n}\n\nfunction hasSupportedModuleExtension(fileName: string): boolean {\n  const normalized = fileName.toLowerCase()\n  for (const extension of moduleExtensions) {\n    if (normalized.endsWith(extension)) {\n      return true\n    }\n  }\n  return false\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction isOntologyDocumentInput(value: unknown): value is OntologyDocumentInput {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    typeof value.version === \"string\" &&\n    Array.isArray(value.objectTypes)\n  )\n}\n\nfunction isObjectTypeWithPropertyTokens(value: unknown): value is ObjectTypeWithPropertyTokens {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    Array.isArray(value.properties) &&\n    Array.isArray(value.links) &&\n    isRecord(value.p)\n  )\n}\n\nfunction isValueType(value: unknown): value is ValueType {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    typeof value.name === \"string\" &&\n    \"schema\" in value &&\n    !Array.isArray(value.properties) &&\n    !Array.isArray(value.objectTypes)\n  )\n}\n",
-    "/**\n * Base error for the rules module. `RuleValidationError` covers invalid rule\n * definitions both at builder time and during runtime startup validation.\n */\nexport class RuleError extends Error {\n  readonly name: string = \"RuleError\"\n}\n\nexport class RuleValidationError extends RuleError {\n  override readonly name = \"RuleValidationError\"\n}\n",
-    "import type { OntologyRegistry } from \"../ontology/registry\"\nimport type { ObjectType } from \"../ontology/types\"\nimport { assertPredicateShape } from \"../predicates\"\nimport { RuleValidationError } from \"./errors\"\nimport type { RuleDefinition, RulePredicate } from \"./types\"\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction assertNonEmptyString(\n  value: unknown,\n  field: string,\n  createError: (message: string) => Error\n): asserts value is string {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    throw createError(`${field} must not be empty.`)\n  }\n}\n\n/**\n * Validate only the portable AST shape.\n *\n * This is used by discovery/type guards and by the builder after `.where(...)`.\n * Ontology-aware checks live in `validateRulesAtStartup`, once the full\n * registry has inherited properties and links resolved.\n */\nexport function assertRulePredicateShape(\n  value: unknown,\n  createError: (message: string) => Error = (message) => new RuleValidationError(message)\n): asserts value is RulePredicate {\n  assertPredicateShape(value, { subject: \"Rule\", createError })\n}\n\n/** Validate the serializable rule envelope without consulting ontology state. */\nexport function assertRuleDefinition(\n  value: unknown,\n  createError: (message: string) => Error = (message) => new RuleValidationError(message)\n): asserts value is RuleDefinition {\n  if (!isRecord(value)) {\n    throw createError(\"Rule definition must be an object.\")\n  }\n\n  if (value.kind !== \"rule\") {\n    throw createError(\"Rule definition kind must be 'rule'.\")\n  }\n\n  assertNonEmptyString(value.id, \"Rule id\", createError)\n\n  if (!isRecord(value.subject) || value.subject.kind !== \"object\") {\n    throw createError(`Rule '${value.id}' subject must be an object subject.`)\n  }\n\n  assertNonEmptyString(\n    value.subject.objectTypeId,\n    `Rule '${value.id}' subject objectTypeId`,\n    createError\n  )\n  assertRulePredicateShape(value.predicate, createError)\n}\n\nexport function isRuleDefinition(value: unknown): value is RuleDefinition {\n  try {\n    assertRuleDefinition(value, (message) => new Error(message))\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Validate rules after the ontology registry is built.\n *\n * Startup is where we can reject references that cannot be known from the\n * serialized rule alone: duplicate ids, unknown subject types, unknown\n * properties/links, and empty logical groups.\n */\nexport function validateRulesAtStartup(\n  rules: readonly RuleDefinition[],\n  ontology: OntologyRegistry\n): void {\n  const seenRuleIds = new Set<string>()\n\n  for (const rule of rules) {\n    assertRuleDefinition(rule)\n\n    if (seenRuleIds.has(rule.id)) {\n      throw new RuleValidationError(`Duplicate rule id: ${rule.id}`)\n    }\n    seenRuleIds.add(rule.id)\n\n    const objectType = ontology.getObjectTypeById(rule.subject.objectTypeId)\n    if (!objectType) {\n      throw new RuleValidationError(\n        `Rule \"${rule.id}\": unknown object type \"${rule.subject.objectTypeId}\".`\n      )\n    }\n\n    validatePredicateAgainstSubject(rule, objectType, rule.predicate)\n  }\n}\n\n/** Walk every predicate node and check subject-scoped references. */\nfunction validatePredicateAgainstSubject(\n  rule: RuleDefinition,\n  objectType: ObjectType,\n  predicate: RulePredicate\n): void {\n  if (predicate.kind === \"all\" || predicate.kind === \"any\") {\n    if (predicate.predicates.length === 0) {\n      throw new RuleValidationError(\n        `Rule \"${rule.id}\": ${predicate.kind} predicate must contain at least one predicate.`\n      )\n    }\n\n    for (const child of predicate.predicates) {\n      validatePredicateAgainstSubject(rule, objectType, child)\n    }\n    return\n  }\n\n  if (predicate.kind === \"not\") {\n    validatePredicateAgainstSubject(rule, objectType, predicate.predicate)\n    return\n  }\n\n  if (predicate.kind === \"property\") {\n    const propertyIds = new Set(objectType.properties.map((property) => property.id))\n    if (!propertyIds.has(predicate.propertyId)) {\n      throw new RuleValidationError(\n        `Rule \"${rule.id}\": unknown property \"${predicate.propertyId}\" on object type \"${objectType.id}\".`\n      )\n    }\n    return\n  }\n\n  if (predicate.kind === \"field\") {\n    throw new RuleValidationError(\n      `Rule \"${rule.id}\": field predicates are not supported in rule conditions.`\n    )\n  }\n\n  const linkIds = new Set(objectType.links.map((link) => link.id))\n  if (!linkIds.has(predicate.linkId)) {\n    throw new RuleValidationError(\n      `Rule \"${rule.id}\": unknown link \"${predicate.linkId}\" on object type \"${objectType.id}\".`\n    )\n  }\n}\n",
-    "import {\n  allPredicates,\n  anyPredicates,\n  createLinkPredicateBuilder as createSharedLinkPredicateBuilder,\n  createPropertyPredicateBuilder as createSharedPropertyPredicateBuilder,\n  notPredicate,\n  type RuntimePropertyPredicateBuilder,\n} from \"../predicates\"\nimport { RuleValidationError } from \"./errors\"\nimport type {\n  RuleBuilder,\n  RuleDefinition,\n  RuleLinkPredicateBuilder,\n  RuleObjectType,\n  RulePredicate,\n  RulePropertyPredicate,\n} from \"./types\"\nimport { assertRulePredicateShape } from \"./validation\"\n\n/**\n * Runtime builders stay deliberately concrete.\n *\n * The public overload below provides typed property/link keys to callers, while\n * this internal shape keeps the implementation simple and avoids asking\n * TypeScript to instantiate the full ontology mapped type while checking this\n * file.\n */\ntype RuntimeRulePropertyPredicateBuilder = RuntimePropertyPredicateBuilder<RulePropertyPredicate>\n\ntype RuntimeRuleSubjectBuilder = {\n  p: Record<string, RuntimeRulePropertyPredicateBuilder>\n  l: Record<string, RuleLinkPredicateBuilder>\n  all(...predicates: RulePredicate[]): RulePredicate\n  any(...predicates: RulePredicate[]): RulePredicate\n  not(predicate: RulePredicate): RulePredicate\n}\n\nfunction assertNonEmpty(value: string, field: string): void {\n  if (!value.trim()) {\n    throw new RuleValidationError(`Rule ${field} must not be empty.`)\n  }\n}\n\n/** Build the `tx.p.<propertyId>` API for one ontology property. */\nfunction createPropertyPredicateBuilder(propertyId: string): RuntimeRulePropertyPredicateBuilder {\n  return createSharedPropertyPredicateBuilder(propertyId, {\n    subject: \"Rule\",\n    createError: (message) => new RuleValidationError(message),\n  })\n}\n\n/** Build the `tx.l.<linkId>` API for one ontology link. */\nfunction createLinkPredicateBuilder(linkId: string): RuleLinkPredicateBuilder {\n  return createSharedLinkPredicateBuilder(linkId)\n}\n\n/**\n * Build the callback subject from ontology metadata.\n *\n * This object is only used while `.where(...)` executes. The returned\n * RuleDefinition stores the predicate data produced by these methods, not this\n * builder object or the user callback.\n */\nfunction createRuleSubjectBuilder<TObjectType extends RuleObjectType>(\n  objectType: TObjectType\n): RuntimeRuleSubjectBuilder {\n  const properties = Object.fromEntries(\n    objectType.properties.map((property) => [\n      property.id,\n      createPropertyPredicateBuilder(property.id),\n    ])\n  )\n\n  const links = Object.fromEntries(\n    objectType.links.map((link) => [link.id, createLinkPredicateBuilder(link.id)])\n  )\n\n  return {\n    p: properties,\n    l: links,\n    all(...predicates: RulePredicate[]): RulePredicate {\n      return allPredicates(predicates)\n    },\n    any(...predicates: RulePredicate[]): RulePredicate {\n      return anyPredicates(predicates)\n    },\n    not(predicate: RulePredicate): RulePredicate {\n      return notPredicate(predicate)\n    },\n  }\n}\n\n/**\n * Define an inert business rule.\n *\n * The overload preserves literal ids and typed property/link keys for users.\n * The implementation returns a concrete builder and casts at the boundary so\n * runtime code stays small while callers still get the typed DSL.\n */\nexport function defineRule<const TId extends string>(id: TId): RuleBuilder<TId>\nexport function defineRule(id: string): RuleBuilder<string> {\n  assertNonEmpty(id, \"id\")\n\n  const builder = {\n    on(objectType: RuleObjectType) {\n      return {\n        where(callback: (subject: RuntimeRuleSubjectBuilder) => RulePredicate): RuleDefinition {\n          const predicate = callback(createRuleSubjectBuilder(objectType))\n          assertRulePredicateShape(predicate)\n\n          return {\n            kind: \"rule\",\n            id,\n            subject: {\n              kind: \"object\",\n              objectTypeId: objectType.id,\n            },\n            predicate,\n          }\n        },\n      }\n    },\n  }\n\n  return builder as unknown as RuleBuilder<string>\n}\n",
-    "import { mkdir, readdir, readFile, writeFile } from \"node:fs/promises\"\nimport { dirname, extname, join, relative, resolve, sep } from \"node:path\"\nimport { pathToFileURL } from \"node:url\"\nimport type { OntologyDocumentInput } from \"../ontology/registry\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport { RuntimeError } from \"../runtime/errors\"\n\nconst moduleExtensions = new Set([\".ts\", \".tsx\", \".js\", \".jsx\", \".mjs\", \".cjs\"])\n\nexport interface OntologyTypeManifestEntry {\n  readonly objectTypeId: string\n  readonly modulePath: string\n  readonly exportName: string\n  readonly typeExpression: string\n}\n\nexport interface OntologyTypeManifestDiscovery {\n  readonly entries: readonly OntologyTypeManifestEntry[]\n  readonly moduleCount: number\n}\n\nexport interface GenerateOntologyTypeManifestOptions {\n  readonly projectRoot: string\n  readonly outFile?: string\n}\n\nexport interface GenerateOntologyTypeManifestResult extends OntologyTypeManifestDiscovery {\n  readonly path: string\n  readonly written: boolean\n  readonly skipped: boolean\n}\n\nexport async function discoverOntologyTypeManifest(\n  projectRoot: string\n): Promise<OntologyTypeManifestDiscovery> {\n  const resolvedProjectRoot = resolve(projectRoot)\n  const ontologyDir = join(resolvedProjectRoot, \"ontology\")\n  const modulePaths = await listModuleFiles(ontologyDir)\n  const entries = new Map<string, OntologyTypeManifestEntry>()\n  const seenObjectTypes = new Set<unknown>()\n\n  for (const modulePath of modulePaths) {\n    const moduleSpecifier = toGeneratedModuleSpecifier({\n      fromDir: join(resolvedProjectRoot, \".sixb\", \"types\"),\n      modulePath,\n    })\n    const moduleNamespace = await loadOntologyModule({\n      modulePath,\n      projectRoot: resolvedProjectRoot,\n    })\n\n    for (const [exportName, exportedValue] of Object.entries(moduleNamespace)) {\n      collectManifestEntries({\n        exportedValue,\n        exportName,\n        modulePath,\n        moduleSpecifier,\n        entries,\n        seenObjectTypes,\n      })\n    }\n  }\n\n  return {\n    entries: [...entries.values()].sort((a, b) => a.objectTypeId.localeCompare(b.objectTypeId)),\n    moduleCount: modulePaths.length,\n  }\n}\n\nexport async function generateOntologyTypeManifest(\n  options: GenerateOntologyTypeManifestOptions\n): Promise<GenerateOntologyTypeManifestResult> {\n  const projectRoot = resolve(options.projectRoot)\n  const outFile = resolve(projectRoot, options.outFile ?? join(\".sixb\", \"types\", \"ontology.d.ts\"))\n  const discovery = await discoverOntologyTypeManifest(projectRoot)\n\n  if (discovery.moduleCount === 0) {\n    return {\n      ...discovery,\n      path: outFile,\n      written: false,\n      skipped: true,\n    }\n  }\n\n  const content = renderOntologyTypeManifest(discovery.entries)\n  await mkdir(dirname(outFile), { recursive: true })\n  const written = await writeFileIfChanged(outFile, content)\n\n  return {\n    ...discovery,\n    path: outFile,\n    written,\n    skipped: false,\n  }\n}\n\nfunction collectManifestEntries(input: {\n  readonly exportedValue: unknown\n  readonly exportName: string\n  readonly modulePath: string\n  readonly moduleSpecifier: string\n  readonly entries: Map<string, OntologyTypeManifestEntry>\n  readonly seenObjectTypes: Set<unknown>\n}): void {\n  if (isObjectTypeWithPropertyTokens(input.exportedValue)) {\n    addManifestEntry({\n      objectType: input.exportedValue,\n      modulePath: input.modulePath,\n      exportName: input.exportName,\n      typeExpression: `typeof import(${JSON.stringify(input.moduleSpecifier)})[${JSON.stringify(\n        input.exportName\n      )}]`,\n      entries: input.entries,\n      seenObjectTypes: input.seenObjectTypes,\n    })\n    return\n  }\n\n  if (isOntologyDocumentInput(input.exportedValue)) {\n    for (const objectType of input.exportedValue.objectTypes) {\n      addManifestEntry({\n        objectType,\n        modulePath: input.modulePath,\n        exportName: input.exportName,\n        typeExpression: `Extract<(typeof import(${JSON.stringify(\n          input.moduleSpecifier\n        )})[${JSON.stringify(input.exportName)}])[\"objectTypes\"][number], { id: ${JSON.stringify(\n          objectType.id\n        )} }>`,\n        entries: input.entries,\n        seenObjectTypes: input.seenObjectTypes,\n      })\n    }\n    return\n  }\n\n  if (Array.isArray(input.exportedValue)) {\n    for (const item of input.exportedValue) {\n      if (!isObjectTypeWithPropertyTokens(item)) continue\n      addManifestEntry({\n        objectType: item,\n        modulePath: input.modulePath,\n        exportName: input.exportName,\n        typeExpression: `Extract<(typeof import(${JSON.stringify(\n          input.moduleSpecifier\n        )})[${JSON.stringify(input.exportName)}])[number], { id: ${JSON.stringify(item.id)} }>`,\n        entries: input.entries,\n        seenObjectTypes: input.seenObjectTypes,\n      })\n    }\n  }\n}\n\nfunction addManifestEntry(input: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly modulePath: string\n  readonly exportName: string\n  readonly typeExpression: string\n  readonly entries: Map<string, OntologyTypeManifestEntry>\n  readonly seenObjectTypes: Set<unknown>\n}): void {\n  if (input.seenObjectTypes.has(input.objectType)) {\n    return\n  }\n  input.seenObjectTypes.add(input.objectType)\n\n  const existing = input.entries.get(input.objectType.id)\n  const entry: OntologyTypeManifestEntry = {\n    objectTypeId: input.objectType.id,\n    modulePath: input.modulePath,\n    exportName: input.exportName,\n    typeExpression: input.typeExpression,\n  }\n\n  if (!existing) {\n    input.entries.set(input.objectType.id, entry)\n    return\n  }\n\n  throw new RuntimeError(\n    `[Sixb] Duplicate ontology object type id \"${input.objectType.id}\" while generating `.concat(\n      `the type manifest: ${relative(process.cwd(), existing.modulePath)} and `,\n      `${relative(process.cwd(), input.modulePath)}.`\n    )\n  )\n}\n\nfunction renderOntologyTypeManifest(entries: readonly OntologyTypeManifestEntry[]): string {\n  const lines = [\n    \"// This file is auto-generated by Sixb.\",\n    \"// Do not edit this file directly.\",\n    \"\",\n    'declare module \"@sixb/core/ontology\" {',\n    \"  interface SixbObjectTypeMap {\",\n  ]\n\n  for (const entry of entries) {\n    lines.push(`    ${JSON.stringify(entry.objectTypeId)}: ${entry.typeExpression}`)\n  }\n\n  lines.push(\"  }\", \"}\", \"\", \"export {}\", \"\")\n  return lines.join(\"\\n\")\n}\n\nasync function writeFileIfChanged(path: string, content: string): Promise<boolean> {\n  try {\n    const existing = await readFile(path, \"utf-8\")\n    if (existing === content) return false\n  } catch (error) {\n    if (!isNotFoundError(error)) throw error\n  }\n\n  await writeFile(path, content, \"utf-8\")\n  return true\n}\n\nasync function loadOntologyModule(input: {\n  readonly modulePath: string\n  readonly projectRoot: string\n}): Promise<Record<string, unknown>> {\n  try {\n    return (await import(pathToFileURL(input.modulePath).href)) as Record<string, unknown>\n  } catch (error) {\n    const relPath = relative(input.projectRoot, input.modulePath)\n    const reason = error instanceof Error ? error.message : String(error)\n    throw new RuntimeError(`Failed to load ontology module '${relPath}': ${reason}`)\n  }\n}\n\nasync function listModuleFiles(dir: string): Promise<string[]> {\n  let entries: import(\"node:fs\").Dirent[]\n  try {\n    entries = (await readdir(dir, { withFileTypes: true })) as import(\"node:fs\").Dirent[]\n  } catch (error) {\n    if (isNotFoundError(error)) {\n      return []\n    }\n    throw error\n  }\n\n  const files: string[] = []\n  const sortedEntries = [...entries].sort((a, b) => a.name.localeCompare(b.name))\n\n  for (const entry of sortedEntries) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      files.push(...(await listModuleFiles(fullPath)))\n      continue\n    }\n\n    if (!entry.isFile() || !hasSupportedModuleExtension(entry.name)) {\n      continue\n    }\n\n    files.push(fullPath)\n  }\n\n  return files\n}\n\nfunction toGeneratedModuleSpecifier(input: {\n  readonly fromDir: string\n  readonly modulePath: string\n}): string {\n  const withoutExtension = stripSupportedModuleExtension(input.modulePath)\n  const relativePath = relative(input.fromDir, withoutExtension).split(sep).join(\"/\")\n  return relativePath.startsWith(\".\") ? relativePath : `./${relativePath}`\n}\n\nfunction stripSupportedModuleExtension(path: string): string {\n  const extension = extname(path)\n  return moduleExtensions.has(extension) ? path.slice(0, -extension.length) : path\n}\n\nfunction hasSupportedModuleExtension(fileName: string): boolean {\n  return moduleExtensions.has(extname(fileName).toLowerCase())\n}\n\nfunction isNotFoundError(error: unknown): boolean {\n  if (!(error instanceof Error)) {\n    return false\n  }\n\n  const code = (error as NodeJS.ErrnoException).code\n  return code === \"ENOENT\" || code === \"ENOTDIR\"\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction isObjectTypeWithPropertyTokens(value: unknown): value is ObjectTypeWithPropertyTokens {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    Array.isArray(value.properties) &&\n    Array.isArray(value.links) &&\n    isRecord(value.p)\n  )\n}\n\nfunction isOntologyDocumentInput(value: unknown): value is OntologyDocumentInput {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    typeof value.version === \"string\" &&\n    Array.isArray(value.objectTypes)\n  )\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACA;;;ACNO,MAAM,kBAAkB,MAAM;AAAA,EAC1B,OAAe;AAC1B;AAAA;AAEO,MAAM,4BAA4B,UAAU;AAAA,EAC/B,OAAO;AAC3B;;;ACJA,SAAS,QAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,oBAAoB,CAC3B,OACA,OACA,aACyB;AAAA,EACzB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,MAAM,YAAY,GAAG,0BAA0B;AAAA,EACjD;AAAA;AAUK,SAAS,wBAAwB,CACtC,OACA,cAA0C,CAAC,YAAY,IAAI,oBAAoB,OAAO,GACtD;AAAA,EAChC,qBAAqB,OAAO,EAAE,SAAS,QAAQ,YAAY,CAAC;AAAA;AAIvD,SAAS,oBAAoB,CAClC,OACA,cAA0C,CAAC,YAAY,IAAI,oBAAoB,OAAO,GACrD;AAAA,EACjC,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,IACpB,MAAM,YAAY,oCAAoC;AAAA,EACxD;AAAA,EAEA,IAAI,MAAM,SAAS,QAAQ;AAAA,IACzB,MAAM,YAAY,sCAAsC;AAAA,EAC1D;AAAA,EAEA,qBAAqB,MAAM,IAAI,WAAW,WAAW;AAAA,EAErD,IAAI,CAAC,SAAS,MAAM,OAAO,KAAK,MAAM,QAAQ,SAAS,UAAU;AAAA,IAC/D,MAAM,YAAY,SAAS,MAAM,wCAAwC;AAAA,EAC3E;AAAA,EAEA,qBACE,MAAM,QAAQ,cACd,SAAS,MAAM,4BACf,WACF;AAAA,EACA,yBAAyB,MAAM,WAAW,WAAW;AAAA;AAGhD,SAAS,gBAAgB,CAAC,OAAyC;AAAA,EACxE,IAAI;AAAA,IACF,qBAAqB,OAAO,CAAC,YAAY,IAAI,MAAM,OAAO,CAAC;AAAA,IAC3D,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAWJ,SAAS,sBAAsB,CACpC,OACA,UACM;AAAA,EACN,MAAM,cAAc,IAAI;AAAA,EAExB,WAAW,QAAQ,OAAO;AAAA,IACxB,qBAAqB,IAAI;AAAA,IAEzB,IAAI,YAAY,IAAI,KAAK,EAAE,GAAG;AAAA,MAC5B,MAAM,IAAI,oBAAoB,sBAAsB,KAAK,IAAI;AAAA,IAC/D;AAAA,IACA,YAAY,IAAI,KAAK,EAAE;AAAA,IAEvB,MAAM,aAAa,SAAS,kBAAkB,KAAK,QAAQ,YAAY;AAAA,IACvE,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,IAAI,oBACR,SAAS,KAAK,6BAA6B,KAAK,QAAQ,gBAC1D;AAAA,IACF;AAAA,IAEA,gCAAgC,MAAM,YAAY,KAAK,SAAS;AAAA,EAClE;AAAA;AAIF,SAAS,+BAA+B,CACtC,MACA,YACA,WACM;AAAA,EACN,IAAI,UAAU,SAAS,SAAS,UAAU,SAAS,OAAO;AAAA,IACxD,IAAI,UAAU,WAAW,WAAW,GAAG;AAAA,MACrC,MAAM,IAAI,oBACR,SAAS,KAAK,QAAQ,UAAU,qDAClC;AAAA,IACF;AAAA,IAEA,WAAW,SAAS,UAAU,YAAY;AAAA,MACxC,gCAAgC,MAAM,YAAY,KAAK;AAAA,IACzD;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,SAAS,OAAO;AAAA,IAC5B,gCAAgC,MAAM,YAAY,UAAU,SAAS;AAAA,IACrE;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,SAAS,YAAY;AAAA,IACjC,MAAM,cAAc,IAAI,IAAI,WAAW,WAAW,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AAAA,IAChF,IAAI,CAAC,YAAY,IAAI,UAAU,UAAU,GAAG;AAAA,MAC1C,MAAM,IAAI,oBACR,SAAS,KAAK,0BAA0B,UAAU,+BAA+B,WAAW,MAC9F;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,SAAS,SAAS;AAAA,IAC9B,MAAM,IAAI,oBACR,SAAS,KAAK,6DAChB;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,IAAI,IAAI,WAAW,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAAA,EAC/D,IAAI,CAAC,QAAQ,IAAI,UAAU,MAAM,GAAG;AAAA,IAClC,MAAM,IAAI,oBACR,SAAS,KAAK,sBAAsB,UAAU,2BAA2B,WAAW,MACtF;AAAA,EACF;AAAA;;;AC9GF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,CAAC,MAAM,KAAK,GAAG;AAAA,IACjB,MAAM,IAAI,oBAAoB,QAAQ,0BAA0B;AAAA,EAClE;AAAA;AAIF,SAAS,+BAA8B,CAAC,YAAyD;AAAA,EAC/F,OAAO,+BAAqC,YAAY;AAAA,IACtD,SAAS;AAAA,IACT,aAAa,CAAC,YAAY,IAAI,oBAAoB,OAAO;AAAA,EAC3D,CAAC;AAAA;AAIH,SAAS,2BAA0B,CAAC,QAA0C;AAAA,EAC5E,OAAO,2BAAiC,MAAM;AAAA;AAUhD,SAAS,wBAA4D,CACnE,YAC2B;AAAA,EAC3B,MAAM,aAAa,OAAO,YACxB,WAAW,WAAW,IAAI,CAAC,aAAa;AAAA,IACtC,SAAS;AAAA,IACT,gCAA+B,SAAS,EAAE;AAAA,EAC5C,CAAC,CACH;AAAA,EAEA,MAAM,QAAQ,OAAO,YACnB,WAAW,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,4BAA2B,KAAK,EAAE,CAAC,CAAC,CAC/E;AAAA,EAEA,OAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG,IAAI,YAA4C;AAAA,MACjD,OAAO,cAAc,UAAU;AAAA;AAAA,IAEjC,GAAG,IAAI,YAA4C;AAAA,MACjD,OAAO,cAAc,UAAU;AAAA;AAAA,IAEjC,GAAG,CAAC,WAAyC;AAAA,MAC3C,OAAO,aAAa,SAAS;AAAA;AAAA,EAEjC;AAAA;AAWK,SAAS,UAAU,CAAC,IAAiC;AAAA,EAC1D,eAAe,IAAI,IAAI;AAAA,EAEvB,MAAM,UAAU;AAAA,IACd,EAAE,CAAC,YAA4B;AAAA,MAC7B,OAAO;AAAA,QACL,KAAK,CAAC,UAAiF;AAAA,UACrF,MAAM,YAAY,SAAS,yBAAyB,UAAU,CAAC;AAAA,UAC/D,yBAAyB,SAAS;AAAA,UAElC,OAAO;AAAA,YACL,MAAM;AAAA,YACN;AAAA,YACA,SAAS;AAAA,cACP,MAAM;AAAA,cACN,cAAc,WAAW;AAAA,YAC3B;AAAA,YACA;AAAA,UACF;AAAA;AAAA,MAEJ;AAAA;AAAA,EAEJ;AAAA,EAEA,OAAO;AAAA;;AHlGT,IAAM,mBAAmB,IAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,MAAM,CAAC;AAE/E,eAAsB,uBAAuB,CAC3C,aACoC;AAAA,EACpC,MAAM,cAAc,KAAK,aAAa,UAAU;AAAA,EAChD,MAAM,cAAc,MAAM,gBAAgB,WAAW;AAAA,EACrD,MAAM,qBAAqB,MAAM,kBAAkB;AAAA,IACjD;AAAA,IACA;AAAA,IACA,MAAM;AAAA,EACR,CAAC;AAAA,EAED,MAAM,oBAA6C,CAAC;AAAA,EACpD,MAAM,cAA8C,CAAC;AAAA,EACrD,MAAM,aAA0B,CAAC;AAAA,EAEjC,WAAW,aAAa,oBAAoB;AAAA,IAC1C,IAAI,wBAAwB,SAAS,GAAG;AAAA,MACtC,kBAAkB,KAAK,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,IAAI,+BAA+B,SAAS,GAAG;AAAA,MAC7C,YAAY,KAAK,SAAS;AAAA,MAC1B;AAAA,IACF;AAAA,IAEA,IAAI,YAAY,SAAS,GAAG;AAAA,MAC1B,WAAW,KAAK,SAAS;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,oBAAsC,CAAC,GAAG,mBAAmB,GAAG,WAAW;AAAA,EACjF,IAAI,WAAW,SAAS,GAAG;AAAA,IACzB,kBAAkB,KAAK;AAAA,MACrB,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,CAAC;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,OAAO;AAAA;AAwBT,IAAM,8BAA8B;AAAA,EAClC,SAAS,EAAE,WAAW,CAAC,SAAS,GAAG,MAAM,UAAU,cAAc,mBAAmB;AAAA,EACpF,aAAa;AAAA,IACX,WAAW,CAAC,aAAa;AAAA,IACzB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,WAAW;AAAA,IACT,WAAW,CAAC,WAAW;AAAA,IACvB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,OAAO,EAAE,WAAW,CAAC,OAAO,GAAG,MAAM,QAAQ,cAAc,iBAAiB;AAAA,EAC5E,YAAY;AAAA,IACV,WAAW,CAAC,YAAY;AAAA,IACxB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,WAAW;AAAA,IACT,WAAW,CAAC,WAAW;AAAA,IACvB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,UAAU,EAAE,WAAW,CAAC,UAAU,GAAG,MAAM,WAAW,cAAc,oBAAoB;AAAA,EACxF,OAAO,EAAE,WAAW,CAAC,OAAO,GAAG,MAAM,QAAQ,cAAc,iBAAiB;AAAA,EAC5E,WAAW;AAAA,IACT,WAAW,CAAC,WAAW;AAAA,IACvB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,QAAQ;AAAA,IACN,WAAW,CAAC,YAAY,QAAQ;AAAA,IAChC,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,OAAO;AAAA,IACL,WAAW,CAAC,YAAY,OAAO;AAAA,IAC/B,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,oBAAoB;AAAA,IAClB,WAAW,CAAC,YAAY,UAAU;AAAA,IAClC,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AACF;AAWA,eAAsB,0BAA0B,CAC9C,aACuC;AAAA,EACvC,MAAM,UAAU,MAAM,QAAQ,IAC5B,OAAO,QAAQ,2BAA2B,EAAE,IAAI,QAAQ,KAAK,YAAY;AAAA,IACvE,MAAM,cAAc,MAAM,yBAAyB,aAAa,MAAM;AAAA,IACtE,OAAO,CAAC,KAAK,WAAW;AAAA,GACzB,CACH;AAAA,EAIA,OAAO,OAAO,YAAY,OAAO;AAAA;AAGnC,eAAe,wBAAwB,CACrC,aACA,QAC6B;AAAA,EAC7B,MAAM,cAAc,MAAM,gBAAgB,KAAK,aAAa,GAAG,OAAO,SAAS,CAAC;AAAA,EAChF,MAAM,qBAAqB,MAAM,kBAAkB;AAAA,IACjD;AAAA,IACA;AAAA,IACA,MAAM,OAAO;AAAA,EACf,CAAC;AAAA,EAED,OAAO,mBAAmB,OAAO,OAAO,YAAY;AAAA;AAKtD,eAAe,iBAAiB,CAAC,SAIV;AAAA,EACrB,MAAM,qBAAgC,CAAC;AAAA,EACvC,MAAM,OAAO,IAAI;AAAA,EAEjB,WAAW,cAAc,QAAQ,aAAa;AAAA,IAC5C,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,kBAAmB,MAAa,qBAAc,UAAU,EAAE;AAAA,MAC1D,OAAO,OAAO;AAAA,MACd,MAAM,UAAU,SAAS,QAAQ,aAAa,UAAU;AAAA,MACxD,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MACpE,MAAM,IAAI,aAAa,kBAAkB,QAAQ,gBAAgB,aAAa,QAAQ;AAAA;AAAA,IAGxF,WAAW,iBAAiB,OAAO,OAAO,eAAe,GAAG;AAAA,MAC1D,0BAA0B,eAAe,oBAAoB,IAAI;AAAA,IACnE;AAAA,EACF;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,yBAAyB,CAAC,OAAgB,QAAmB,MAA0B;AAAA,EAC9F,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACxB,WAAW,QAAQ,OAAO;AAAA,MACxB,0BAA0B,MAAM,QAAQ,IAAI;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,WAAW;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,IAAK,OAAO,UAAU,YAAY,UAAU,QAAS,OAAO,UAAU,YAAY;AAAA,IAChF,IAAI,KAAK,IAAI,KAAK,GAAG;AAAA,MACnB;AAAA,IACF;AAAA,IACA,KAAK,IAAI,KAAK;AAAA,EAChB;AAAA,EAEA,OAAO,KAAK,KAAK;AAAA;AAGnB,eAAe,eAAe,CAAC,KAAgC;AAAA,EAC7D,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,UAAW,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACrD,OAAO,OAAO;AAAA,IACd,IAAI,gBAAgB,KAAK,GAAG;AAAA,MAC1B,OAAO,CAAC;AAAA,IACV;AAAA,IACA,MAAM;AAAA;AAAA,EAGR,MAAM,QAAkB,CAAC;AAAA,EACzB,MAAM,gBAAgB,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,EAE9E,WAAW,SAAS,eAAe;AAAA,IACjC,MAAM,WAAW,KAAK,KAAK,MAAM,IAAI;AAAA,IACrC,IAAI,MAAM,YAAY,GAAG;AAAA,MACvB,MAAM,KAAK,GAAI,MAAM,gBAAgB,QAAQ,CAAE;AAAA,MAC/C;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,MAAM,OAAO,GAAG;AAAA,MACnB;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,4BAA4B,MAAM,IAAI,GAAG;AAAA,MAC5C;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,QAAQ;AAAA,EACrB;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,eAAe,CAAC,OAAyB;AAAA,EAChD,IAAI,EAAE,iBAAiB,QAAQ;AAAA,IAC7B,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAQ,MAAgC;AAAA,EAC9C,OAAO,SAAS,YAAY,SAAS;AAAA;AAGvC,SAAS,2BAA2B,CAAC,UAA2B;AAAA,EAC9D,MAAM,aAAa,SAAS,YAAY;AAAA,EACxC,WAAW,aAAa,kBAAkB;AAAA,IACxC,IAAI,WAAW,SAAS,SAAS,GAAG;AAAA,MAClC,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,SAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,uBAAuB,CAAC,OAAgD;AAAA,EAC/E,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,YAAY,YACzB,MAAM,QAAQ,MAAM,WAAW;AAAA;AAInC,SAAS,8BAA8B,CAAC,OAAuD;AAAA,EAC7F,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,MAAM,QAAQ,MAAM,UAAU,KAC9B,MAAM,QAAQ,MAAM,KAAK,KACzB,UAAS,MAAM,CAAC;AAAA;AAIpB,SAAS,WAAW,CAAC,OAAoC;AAAA,EACvD,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,SAAS,YACtB,YAAY,SACZ,CAAC,MAAM,QAAQ,MAAM,UAAU,KAC/B,CAAC,MAAM,QAAQ,MAAM,WAAW;AAAA;;AIjUpC,2BAAgB;AAChB,mCAA2B,mBAAM;AACjC,0BAAS;AAKT,IAAM,oBAAmB,IAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,MAAM,CAAC;AAyB/E,eAAsB,4BAA4B,CAChD,aACwC;AAAA,EACxC,MAAM,sBAAsB,QAAQ,WAAW;AAAA,EAC/C,MAAM,cAAc,MAAK,qBAAqB,UAAU;AAAA,EACxD,MAAM,cAAc,MAAM,iBAAgB,WAAW;AAAA,EACrD,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,kBAAkB,IAAI;AAAA,EAE5B,WAAW,cAAc,aAAa;AAAA,IACpC,MAAM,kBAAkB,2BAA2B;AAAA,MACjD,SAAS,MAAK,qBAAqB,SAAS,OAAO;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,IACD,MAAM,kBAAkB,MAAM,mBAAmB;AAAA,MAC/C;AAAA,MACA,aAAa;AAAA,IACf,CAAC;AAAA,IAED,YAAY,YAAY,kBAAkB,OAAO,QAAQ,eAAe,GAAG;AAAA,MACzE,uBAAuB;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,CAAC,GAAG,QAAQ,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC;AAAA,IAC1F,aAAa,YAAY;AAAA,EAC3B;AAAA;AAGF,eAAsB,4BAA4B,CAChD,SAC6C;AAAA,EAC7C,MAAM,cAAc,QAAQ,QAAQ,WAAW;AAAA,EAC/C,MAAM,UAAU,QAAQ,aAAa,QAAQ,WAAW,MAAK,SAAS,SAAS,eAAe,CAAC;AAAA,EAC/F,MAAM,YAAY,MAAM,6BAA6B,WAAW;AAAA,EAEhE,IAAI,UAAU,gBAAgB,GAAG;AAAA,IAC/B,OAAO;AAAA,SACF;AAAA,MACH,MAAM;AAAA,MACN,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,2BAA2B,UAAU,OAAO;AAAA,EAC5D,MAAM,MAAM,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACjD,MAAM,UAAU,MAAM,mBAAmB,SAAS,OAAO;AAAA,EAEzD,OAAO;AAAA,OACF;AAAA,IACH,MAAM;AAAA,IACN;AAAA,IACA,SAAS;AAAA,EACX;AAAA;AAGF,SAAS,sBAAsB,CAAC,OAOvB;AAAA,EACP,IAAI,gCAA+B,MAAM,aAAa,GAAG;AAAA,IACvD,iBAAiB;AAAA,MACf,YAAY,MAAM;AAAA,MAClB,YAAY,MAAM;AAAA,MAClB,YAAY,MAAM;AAAA,MAClB,gBAAgB,iBAAiB,KAAK,UAAU,MAAM,eAAe,MAAM,KAAK,UAC9E,MAAM,UACR;AAAA,MACA,SAAS,MAAM;AAAA,MACf,iBAAiB,MAAM;AAAA,IACzB,CAAC;AAAA,IACD;AAAA,EACF;AAAA,EAEA,IAAI,yBAAwB,MAAM,aAAa,GAAG;AAAA,IAChD,WAAW,cAAc,MAAM,cAAc,aAAa;AAAA,MACxD,iBAAiB;AAAA,QACf;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,YAAY,MAAM;AAAA,QAClB,gBAAgB,0BAA0B,KAAK,UAC7C,MAAM,eACR,MAAM,KAAK,UAAU,MAAM,UAAU,qCAAqC,KAAK,UAC7E,WAAW,EACb;AAAA,QACA,SAAS,MAAM;AAAA,QACf,iBAAiB,MAAM;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,QAAQ,MAAM,aAAa,GAAG;AAAA,IACtC,WAAW,QAAQ,MAAM,eAAe;AAAA,MACtC,IAAI,CAAC,gCAA+B,IAAI;AAAA,QAAG;AAAA,MAC3C,iBAAiB;AAAA,QACf,YAAY;AAAA,QACZ,YAAY,MAAM;AAAA,QAClB,YAAY,MAAM;AAAA,QAClB,gBAAgB,0BAA0B,KAAK,UAC7C,MAAM,eACR,MAAM,KAAK,UAAU,MAAM,UAAU,sBAAsB,KAAK,UAAU,KAAK,EAAE;AAAA,QACjF,SAAS,MAAM;AAAA,QACf,iBAAiB,MAAM;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAGF,SAAS,gBAAgB,CAAC,OAOjB;AAAA,EACP,IAAI,MAAM,gBAAgB,IAAI,MAAM,UAAU,GAAG;AAAA,IAC/C;AAAA,EACF;AAAA,EACA,MAAM,gBAAgB,IAAI,MAAM,UAAU;AAAA,EAE1C,MAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,WAAW,EAAE;AAAA,EACtD,MAAM,QAAmC;AAAA,IACvC,cAAc,MAAM,WAAW;AAAA,IAC/B,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM;AAAA,IAClB,gBAAgB,MAAM;AAAA,EACxB;AAAA,EAEA,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,QAAQ,IAAI,MAAM,WAAW,IAAI,KAAK;AAAA,IAC5C;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,aACR,6CAA6C,MAAM,WAAW,wBAAwB,OACpF,sBAAsB,UAAS,QAAQ,IAAI,GAAG,SAAS,UAAU,UACjE,GAAG,UAAS,QAAQ,IAAI,GAAG,MAAM,UAAU,IAC7C,CACF;AAAA;AAGF,SAAS,0BAA0B,CAAC,SAAuD;AAAA,EACzF,MAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EAEA,WAAW,SAAS,SAAS;AAAA,IAC3B,MAAM,KAAK,OAAO,KAAK,UAAU,MAAM,YAAY,MAAM,MAAM,gBAAgB;AAAA,EACjF;AAAA,EAEA,MAAM,KAAK,OAAO,KAAK,IAAI,aAAa,EAAE;AAAA,EAC1C,OAAO,MAAM,KAAK;AAAA,CAAI;AAAA;AAGxB,eAAe,kBAAkB,CAAC,MAAc,SAAmC;AAAA,EACjF,IAAI;AAAA,IACF,MAAM,WAAW,MAAM,SAAS,MAAM,OAAO;AAAA,IAC7C,IAAI,aAAa;AAAA,MAAS,OAAO;AAAA,IACjC,OAAO,OAAO;AAAA,IACd,IAAI,CAAC,iBAAgB,KAAK;AAAA,MAAG,MAAM;AAAA;AAAA,EAGrC,MAAM,UAAU,MAAM,SAAS,OAAO;AAAA,EACtC,OAAO;AAAA;AAGT,eAAe,kBAAkB,CAAC,OAGG;AAAA,EACnC,IAAI;AAAA,IACF,OAAQ,MAAa,sBAAc,MAAM,UAAU,EAAE;AAAA,IACrD,OAAO,OAAO;AAAA,IACd,MAAM,UAAU,UAAS,MAAM,aAAa,MAAM,UAAU;AAAA,IAC5D,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IACpE,MAAM,IAAI,aAAa,mCAAmC,aAAa,QAAQ;AAAA;AAAA;AAInF,eAAe,gBAAe,CAAC,KAAgC;AAAA,EAC7D,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,UAAW,MAAM,SAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACrD,OAAO,OAAO;AAAA,IACd,IAAI,iBAAgB,KAAK,GAAG;AAAA,MAC1B,OAAO,CAAC;AAAA,IACV;AAAA,IACA,MAAM;AAAA;AAAA,EAGR,MAAM,QAAkB,CAAC;AAAA,EACzB,MAAM,gBAAgB,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,EAE9E,WAAW,SAAS,eAAe;AAAA,IACjC,MAAM,WAAW,MAAK,KAAK,MAAM,IAAI;AAAA,IACrC,IAAI,MAAM,YAAY,GAAG;AAAA,MACvB,MAAM,KAAK,GAAI,MAAM,iBAAgB,QAAQ,CAAE;AAAA,MAC/C;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,6BAA4B,MAAM,IAAI,GAAG;AAAA,MAC/D;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,QAAQ;AAAA,EACrB;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,0BAA0B,CAAC,OAGzB;AAAA,EACT,MAAM,mBAAmB,8BAA8B,MAAM,UAAU;AAAA,EACvE,MAAM,eAAe,UAAS,MAAM,SAAS,gBAAgB,EAAE,MAAM,GAAG,EAAE,KAAK,GAAG;AAAA,EAClF,OAAO,aAAa,WAAW,GAAG,IAAI,eAAe,KAAK;AAAA;AAG5D,SAAS,6BAA6B,CAAC,MAAsB;AAAA,EAC3D,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC9B,OAAO,kBAAiB,IAAI,SAAS,IAAI,KAAK,MAAM,GAAG,CAAC,UAAU,MAAM,IAAI;AAAA;AAG9E,SAAS,4BAA2B,CAAC,UAA2B;AAAA,EAC9D,OAAO,kBAAiB,IAAI,QAAQ,QAAQ,EAAE,YAAY,CAAC;AAAA;AAG7D,SAAS,gBAAe,CAAC,OAAyB;AAAA,EAChD,IAAI,EAAE,iBAAiB,QAAQ;AAAA,IAC7B,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAQ,MAAgC;AAAA,EAC9C,OAAO,SAAS,YAAY,SAAS;AAAA;AAGvC,SAAS,SAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,+BAA8B,CAAC,OAAuD;AAAA,EAC7F,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,MAAM,QAAQ,MAAM,UAAU,KAC9B,MAAM,QAAQ,MAAM,KAAK,KACzB,UAAS,MAAM,CAAC;AAAA;AAIpB,SAAS,wBAAuB,CAAC,OAAgD;AAAA,EAC/E,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,YAAY,YACzB,MAAM,QAAQ,MAAM,WAAW;AAAA;",
-  "debugId": "03EE8E60B135B4C464756E2164756E21",
-  "names": []
-}