@substrat-run/contracts 0.138.0 → 0.139.0

package/dist/entity-state.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Entity archive and trash (#119) — the vocabulary the kernel and a module share.
+ *
+ * Three different acts get habitually conflated, and only one of them lives here:
+ *
+ * - **Subject erasure** (#37, K-37) removes a person's data from everywhere the platform can
+ *   reach, history included. Not reversible, and not about an entity.
+ * - **Tenant delete and retention** (#36) removes a whole tenant after a grace window. Not
+ *   about an entity either.
+ * - **Archive and trash** — this — hide ONE entity from active views and keep it. Both are
+ *   reversible, both keep the row, and neither touches history: the events about the entity
+ *   stay exactly as they were.
+ *
+ * Archive and trash are deliberately two acts with two permission keys. Archive says "done
+ * with this, keep it": the row stays readable through the entity's ordinary read authority.
+ * Trash says "I meant to delete this": the row stays recoverable, but only someone holding
+ * the declared trash key can see it or bring it back.
+ *
+ * ## The state is two columns, and the visible state is derived from them
+ *
+ * An entity that declares either one gets kernel-owned columns on its own table,
+ * `_substrat_archived_at` and `_substrat_trashed_at`. Stored apart rather than as one enum,
+ * so trash never forgets an archive: trashing an archived row and restoring it brings it back
+ * archived, never silently into the active view. What a reader sees is one state, derived:
+ *
+ *     trashed   when `_substrat_trashed_at` is set
+ *     archived  else when `_substrat_archived_at` is set
+ *     active    otherwise
+ */
+import { z } from 'zod';
+/** The state an archivable or trashable entity is in, as a reader sees it. */
+export declare const entityStateName: z.ZodEnum<{
+    active: "active";
+    archived: "archived";
+    trashed: "trashed";
+}>;
+export type EntityStateName = z.infer<typeof entityStateName>;
+/** The kernel-owned column that records an archive. */
+export declare const ARCHIVED_AT_COLUMN = "_substrat_archived_at";
+/** The kernel-owned column that records a trash. */
+export declare const TRASHED_AT_COLUMN = "_substrat_trashed_at";
+/**
+ * One entity's declaration, as the manifest carries it.
+ *
+ * Written into a model as `archive: { permission }` / `trash: { permission }` on the entity
+ * (`defineEntities`); `manifestEntities()` turns that into this and fills in `table` and
+ * `idColumn` from the registry, as it does for `searchables`. A hand-written manifest (an
+ * engine's) may declare it directly.
+ *
+ * `archivePermission` gates `ctx.archive` and `ctx.unarchive`; `trashPermission` gates
+ * `ctx.trash`, `ctx.restore` and the trashed readers. At least one is required. A key here
+ * must be one the module declares.
+ */
+export declare const entityStateDeclaration: z.ZodObject<{
+    entityType: z.ZodString;
+    archivePermission: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">>;
+    trashPermission: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">>;
+    table: z.ZodOptional<z.ZodString>;
+    idColumn: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EntityStateDeclaration = z.infer<typeof entityStateDeclaration>;
+/** `ctx.archive` moved an entity out of the active view. Entity: the entity. */
+export declare const ENTITY_ARCHIVED = "entity.archived";
+/** `ctx.unarchive` brought an archived entity back. Entity: the entity. */
+export declare const ENTITY_UNARCHIVED = "entity.unarchived";
+/** `ctx.trash` moved an entity into the trash. Entity: the entity. */
+export declare const ENTITY_TRASHED = "entity.trashed";
+/** `ctx.restore` took an entity out of the trash, back to the state it was trashed from. */
+export declare const ENTITY_RESTORED = "entity.restored";
+/**
+ * The one payload all four carry: the entity, and the visible state before and after.
+ *
+ * Who did it and when are not here — they are the envelope's actor and `occurredAt`, stamped
+ * by the kernel, with the K-34 authorization chain beside them. `from` and `to` are the
+ * derived states, so `entity.restored` says where the entity went back to (`active` or
+ * `archived`) without the reader having to replay anything.
+ */
+export declare const entityStateChangedPayload: z.ZodObject<{
+    entity: z.ZodObject<{
+        entityType: z.ZodString;
+        entityId: z.ZodString;
+    }, z.core.$strip>;
+    from: z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        trashed: "trashed";
+    }>;
+    to: z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        trashed: "trashed";
+    }>;
+}, z.core.$strip>;
+export type EntityStateChangedPayload = z.infer<typeof entityStateChangedPayload>;
+//# sourceMappingURL=entity-state.d.ts.map

package/dist/entity-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-state.d.ts","sourceRoot":"","sources":["../src/entity-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,8EAA8E;AAC9E,eAAO,MAAM,eAAe;;;;EAA4C,CAAC;AACzE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,oDAAoD;AACpD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB;;;;;;iBAMjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,gFAAgF;AAChF,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,sEAAsE;AACtE,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,4FAA4F;AAC5F,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/entity-state.js

@@ -0,0 +1,79 @@
+/**
+ * Entity archive and trash (#119) — the vocabulary the kernel and a module share.
+ *
+ * Three different acts get habitually conflated, and only one of them lives here:
+ *
+ * - **Subject erasure** (#37, K-37) removes a person's data from everywhere the platform can
+ *   reach, history included. Not reversible, and not about an entity.
+ * - **Tenant delete and retention** (#36) removes a whole tenant after a grace window. Not
+ *   about an entity either.
+ * - **Archive and trash** — this — hide ONE entity from active views and keep it. Both are
+ *   reversible, both keep the row, and neither touches history: the events about the entity
+ *   stay exactly as they were.
+ *
+ * Archive and trash are deliberately two acts with two permission keys. Archive says "done
+ * with this, keep it": the row stays readable through the entity's ordinary read authority.
+ * Trash says "I meant to delete this": the row stays recoverable, but only someone holding
+ * the declared trash key can see it or bring it back.
+ *
+ * ## The state is two columns, and the visible state is derived from them
+ *
+ * An entity that declares either one gets kernel-owned columns on its own table,
+ * `_substrat_archived_at` and `_substrat_trashed_at`. Stored apart rather than as one enum,
+ * so trash never forgets an archive: trashing an archived row and restoring it brings it back
+ * archived, never silently into the active view. What a reader sees is one state, derived:
+ *
+ *     trashed   when `_substrat_trashed_at` is set
+ *     archived  else when `_substrat_archived_at` is set
+ *     active    otherwise
+ */
+import { z } from 'zod';
+import { entityRef } from './events.js';
+import { permissionKey } from './ids.js';
+/** The state an archivable or trashable entity is in, as a reader sees it. */
+export const entityStateName = z.enum(['active', 'archived', 'trashed']);
+/** The kernel-owned column that records an archive. */
+export const ARCHIVED_AT_COLUMN = '_substrat_archived_at';
+/** The kernel-owned column that records a trash. */
+export const TRASHED_AT_COLUMN = '_substrat_trashed_at';
+/**
+ * One entity's declaration, as the manifest carries it.
+ *
+ * Written into a model as `archive: { permission }` / `trash: { permission }` on the entity
+ * (`defineEntities`); `manifestEntities()` turns that into this and fills in `table` and
+ * `idColumn` from the registry, as it does for `searchables`. A hand-written manifest (an
+ * engine's) may declare it directly.
+ *
+ * `archivePermission` gates `ctx.archive` and `ctx.unarchive`; `trashPermission` gates
+ * `ctx.trash`, `ctx.restore` and the trashed readers. At least one is required. A key here
+ * must be one the module declares.
+ */
+export const entityStateDeclaration = z.object({
+    entityType: z.string().min(1),
+    archivePermission: permissionKey.optional(),
+    trashPermission: permissionKey.optional(),
+    table: z.string().min(1).optional(),
+    idColumn: z.string().min(1).optional(),
+});
+/** `ctx.archive` moved an entity out of the active view. Entity: the entity. */
+export const ENTITY_ARCHIVED = 'entity.archived';
+/** `ctx.unarchive` brought an archived entity back. Entity: the entity. */
+export const ENTITY_UNARCHIVED = 'entity.unarchived';
+/** `ctx.trash` moved an entity into the trash. Entity: the entity. */
+export const ENTITY_TRASHED = 'entity.trashed';
+/** `ctx.restore` took an entity out of the trash, back to the state it was trashed from. */
+export const ENTITY_RESTORED = 'entity.restored';
+/**
+ * The one payload all four carry: the entity, and the visible state before and after.
+ *
+ * Who did it and when are not here — they are the envelope's actor and `occurredAt`, stamped
+ * by the kernel, with the K-34 authorization chain beside them. `from` and `to` are the
+ * derived states, so `entity.restored` says where the entity went back to (`active` or
+ * `archived`) without the reader having to replay anything.
+ */
+export const entityStateChangedPayload = z.object({
+    entity: entityRef,
+    from: entityStateName,
+    to: entityStateName,
+});
+//# sourceMappingURL=entity-state.js.map

package/dist/entity-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-state.js","sourceRoot":"","sources":["../src/entity-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAGzE,uDAAuD;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAC1D,oDAAoD;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,iBAAiB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC3C,eAAe,EAAE,aAAa,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,sEAAsE;AACtE,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,eAAe;IACrB,EAAE,EAAE,eAAe;CACpB,CAAC,CAAC"}

package/dist/findings.d.ts

@@ -0,0 +1,208 @@
+import { z } from 'zod';
+import { tenantId } from './ids.js';
+/**
+ * Findings (#1748): anomalies a tenant triages like email, in one inbox with one lifecycle.
+ *
+ * - `invariant`: a rule was broken — expected 0, observed N (a scheduled run that failed).
+ * - `drift`: unusual against an expectation — a freshness expectation gone stale.
+ * - `recurring`: one failure shape, seen again and again — the tenant's own projection of an
+ *   `_substrat_issues` fingerprint (#1233), counted over that tenant's occurrences only.
+ *
+ * A finding is TENANT-scoped by construction: its counters, versions and evidence come from
+ * that tenant's own rows, so the fleet aggregate it shares a fingerprint with is never visible
+ * through it. It carries no free text from the evidence (no message, no upstream reference):
+ * the evidence ref names where the rows are, and the reader reads them through its own
+ * tenant-forced view.
+ */
+export declare const findingKind: z.ZodEnum<{
+    drift: "drift";
+    invariant: "invariant";
+    recurring: "recurring";
+}>;
+export type FindingKind = z.infer<typeof findingKind>;
+/**
+ * The lifecycle. `_substrat_issues` maps onto it 1:1 — new → `open`, regressed → `open` with
+ * `regressed`, resolved → `resolved`, ignored → `suppressed` — and `acked` is the one state an
+ * issue has no word for: "somebody is on it".
+ */
+export declare const findingStatus: z.ZodEnum<{
+    acked: "acked";
+    open: "open";
+    resolved: "resolved";
+    suppressed: "suppressed";
+}>;
+export type FindingStatus = z.infer<typeof findingStatus>;
+/**
+ * What a verdict may SET. `suppressed` is never set directly: it is what a suppress RULE does,
+ * because a suppression without a scope and an expiry is a finding nobody will ever see again.
+ */
+export declare const findingStatusInput: z.ZodEnum<{
+    acked: "acked";
+    open: "open";
+    resolved: "resolved";
+}>;
+export type FindingStatusInput = z.infer<typeof findingStatusInput>;
+export declare const findingSeverity: z.ZodEnum<{
+    critical: "critical";
+    info: "info";
+    warning: "warning";
+}>;
+export type FindingSeverity = z.infer<typeof findingSeverity>;
+/** Where the occurrences behind a finding are read: the reader's own tenant-forced view of them. */
+export declare const findingEvidence: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    source: z.ZodLiteral<"ops-failures">;
+    fingerprint: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    source: z.ZodLiteral<"sweep-runs">;
+    kind: z.ZodEnum<{
+        freshness: "freshness";
+        schedule: "schedule";
+    }>;
+    unit: z.ZodString;
+}, z.core.$strip>], "source">;
+export type FindingEvidence = z.infer<typeof findingEvidence>;
+/**
+ * Why the finding is believed to have started, with the reason stated. Only `deploy` today: a
+ * finding that comes back under a version other than the one it was resolved under names the
+ * new version. Nothing is claimed when nothing changed — no cause is better than an invented one.
+ */
+export declare const findingLikelyCause: z.ZodObject<{
+    kind: z.ZodLiteral<"deploy">;
+    version: z.ZodString;
+    reason: z.ZodString;
+}, z.core.$strip>;
+export type FindingLikelyCause = z.infer<typeof findingLikelyCause>;
+export declare const findingEntry: z.ZodObject<{
+    id: z.ZodString;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    kind: z.ZodEnum<{
+        drift: "drift";
+        invariant: "invariant";
+        recurring: "recurring";
+    }>;
+    subject: z.ZodString;
+    status: z.ZodEnum<{
+        acked: "acked";
+        open: "open";
+        resolved: "resolved";
+        suppressed: "suppressed";
+    }>;
+    regressed: z.ZodBoolean;
+    severity: z.ZodEnum<{
+        critical: "critical";
+        info: "info";
+        warning: "warning";
+    }>;
+    title: z.ZodString;
+    operation: z.ZodNullable<z.ZodString>;
+    codes: z.ZodArray<z.ZodEnum<{
+        conflict: "conflict";
+        forbidden: "forbidden";
+        internal: "internal";
+        not_found: "not_found";
+        permission_denied: "permission_denied";
+        precondition_failed: "precondition_failed";
+        rate_limited: "rate_limited";
+        unauthenticated: "unauthenticated";
+        unavailable: "unavailable";
+        validation_failed: "validation_failed";
+    }>>;
+    vertical: z.ZodNullable<z.ZodString>;
+    scopeId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+    count: z.ZodNumber;
+    firstSeen: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+    lastSeen: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+    lastVersion: z.ZodNullable<z.ZodString>;
+    resolvedVersion: z.ZodNullable<z.ZodString>;
+    resolvedAt: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "Instant", "out">>;
+    resolution: z.ZodNullable<z.ZodEnum<{
+        stale: "stale";
+        verdict: "verdict";
+    }>>;
+    acknowledgedAt: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "Instant", "out">>;
+    ruleId: z.ZodNullable<z.ZodString>;
+    evidence: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"ops-failures">;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        source: z.ZodLiteral<"sweep-runs">;
+        kind: z.ZodEnum<{
+            freshness: "freshness";
+            schedule: "schedule";
+        }>;
+        unit: z.ZodString;
+    }, z.core.$strip>], "source">;
+    likelyCause: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodLiteral<"deploy">;
+        version: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type FindingEntry = z.infer<typeof findingEntry>;
+/** The longest a suppression may last. A permanent "never show me this" is not a rule; it is a blind spot. */
+export declare const FINDING_RULE_MAX_DAYS = 90;
+/**
+ * A suppress rule (#1748): a scope plus an expiry. A matching occurrence is still COUNTED on its
+ * finding, but the finding stays `suppressed` instead of opening. Each set field narrows; at
+ * least one must be set, so a rule never silences a whole tenant.
+ */
+export declare const findingRuleInput: z.ZodObject<{
+    kind: z.ZodOptional<z.ZodEnum<{
+        drift: "drift";
+        invariant: "invariant";
+        recurring: "recurring";
+    }>>;
+    operation: z.ZodOptional<z.ZodString>;
+    code: z.ZodOptional<z.ZodEnum<{
+        conflict: "conflict";
+        forbidden: "forbidden";
+        internal: "internal";
+        not_found: "not_found";
+        permission_denied: "permission_denied";
+        precondition_failed: "precondition_failed";
+        rate_limited: "rate_limited";
+        unauthenticated: "unauthenticated";
+        unavailable: "unavailable";
+        validation_failed: "validation_failed";
+    }>>;
+    subject: z.ZodOptional<z.ZodString>;
+    expiresAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+    reason: z.ZodString;
+}, z.core.$strip>;
+export type FindingRuleInput = z.infer<typeof findingRuleInput>;
+export declare const findingRuleEntry: z.ZodObject<{
+    id: z.ZodString;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    kind: z.ZodNullable<z.ZodEnum<{
+        drift: "drift";
+        invariant: "invariant";
+        recurring: "recurring";
+    }>>;
+    operation: z.ZodNullable<z.ZodString>;
+    code: z.ZodNullable<z.ZodEnum<{
+        conflict: "conflict";
+        forbidden: "forbidden";
+        internal: "internal";
+        not_found: "not_found";
+        permission_denied: "permission_denied";
+        precondition_failed: "precondition_failed";
+        rate_limited: "rate_limited";
+        unauthenticated: "unauthenticated";
+        unavailable: "unavailable";
+        validation_failed: "validation_failed";
+    }>>;
+    subject: z.ZodNullable<z.ZodString>;
+    expiresAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+    reason: z.ZodString;
+    createdBy: z.ZodString;
+    createdAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+}, z.core.$strip>;
+export type FindingRuleEntry = z.infer<typeof findingRuleEntry>;
+/** Filter for `listFindings`. `tenantId` absent is the staff fleet read; a tenant's read is forced to it. */
+export interface FindingFilter {
+    tenantId?: z.infer<typeof tenantId>;
+    status?: FindingStatus;
+    kind?: FindingKind;
+    limit?: number;
+}
+//# sourceMappingURL=findings.d.ts.map

package/dist/findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.d.ts","sourceRoot":"","sources":["../src/findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAoB,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGtD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW;;;;EAA8C,CAAC;AACvE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;EAAsD,CAAC;AACjF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;EAAwC,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,eAAe;;;;EAA0C,CAAC;AACvE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,oGAAoG;AACpG,eAAO,MAAM,eAAe;;;;;;;;;;6BAK1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;iBAK7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmCvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,8GAA8G;AAC9G,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;iBAWzB,CAAC;AACL,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,6GAA6G;AAC7G,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/findings.js

@@ -0,0 +1,116 @@
+import { z } from 'zod';
+import { instant, scopeId, tenantId } from './ids.js';
+import { errorCode } from './errors.js';
+/**
+ * Findings (#1748): anomalies a tenant triages like email, in one inbox with one lifecycle.
+ *
+ * - `invariant`: a rule was broken — expected 0, observed N (a scheduled run that failed).
+ * - `drift`: unusual against an expectation — a freshness expectation gone stale.
+ * - `recurring`: one failure shape, seen again and again — the tenant's own projection of an
+ *   `_substrat_issues` fingerprint (#1233), counted over that tenant's occurrences only.
+ *
+ * A finding is TENANT-scoped by construction: its counters, versions and evidence come from
+ * that tenant's own rows, so the fleet aggregate it shares a fingerprint with is never visible
+ * through it. It carries no free text from the evidence (no message, no upstream reference):
+ * the evidence ref names where the rows are, and the reader reads them through its own
+ * tenant-forced view.
+ */
+export const findingKind = z.enum(['invariant', 'drift', 'recurring']);
+/**
+ * The lifecycle. `_substrat_issues` maps onto it 1:1 — new → `open`, regressed → `open` with
+ * `regressed`, resolved → `resolved`, ignored → `suppressed` — and `acked` is the one state an
+ * issue has no word for: "somebody is on it".
+ */
+export const findingStatus = z.enum(['open', 'acked', 'resolved', 'suppressed']);
+/**
+ * What a verdict may SET. `suppressed` is never set directly: it is what a suppress RULE does,
+ * because a suppression without a scope and an expiry is a finding nobody will ever see again.
+ */
+export const findingStatusInput = z.enum(['open', 'acked', 'resolved']);
+export const findingSeverity = z.enum(['info', 'warning', 'critical']);
+/** Where the occurrences behind a finding are read: the reader's own tenant-forced view of them. */
+export const findingEvidence = z.discriminatedUnion('source', [
+    /** `GET /ops-failures`, grouped by this fingerprint. */
+    z.object({ source: z.literal('ops-failures'), fingerprint: z.string().min(1) }),
+    /** `GET /sweep-runs?kind=…&unit=…`. */
+    z.object({ source: z.literal('sweep-runs'), kind: z.enum(['schedule', 'freshness']), unit: z.string().min(1) }),
+]);
+/**
+ * Why the finding is believed to have started, with the reason stated. Only `deploy` today: a
+ * finding that comes back under a version other than the one it was resolved under names the
+ * new version. Nothing is claimed when nothing changed — no cause is better than an invented one.
+ */
+export const findingLikelyCause = z.object({
+    kind: z.literal('deploy'),
+    /** The version-registry id the finding was seen under. */
+    version: z.string().min(1),
+    reason: z.string().min(1),
+});
+export const findingEntry = z.object({
+    id: z.string().min(1),
+    tenantId,
+    kind: findingKind,
+    /** The dedupe key within (tenant, kind): a fingerprint, or a sweep unit. */
+    subject: z.string().min(1),
+    status: findingStatus,
+    /** A fresh occurrence reopened a resolved finding. Cleared by the next `resolved` verdict. */
+    regressed: z.boolean(),
+    severity: findingSeverity,
+    title: z.string().min(1),
+    operation: z.string().nullable(),
+    /** The taxonomy codes seen on this finding, newest first, at most five. */
+    codes: z.array(errorCode),
+    vertical: z.string().nullable(),
+    scopeId: scopeId.nullable(),
+    /** This tenant's occurrences since the finding was first seen — never a fleet count. */
+    count: z.number().int().positive(),
+    firstSeen: instant,
+    lastSeen: instant,
+    lastVersion: z.string().nullable(),
+    /** `lastVersion` when the last `resolved` landed — the X of "resolved under X, seen again under Y". */
+    resolvedVersion: z.string().nullable(),
+    resolvedAt: instant.nullable(),
+    /**
+     * How the last resolve happened: a person's `verdict`, or `stale` — an open finding that went
+     * quiet for the whole retention window, resolved (and audited) by the retention pass rather
+     * than deleted out from under whoever was watching it.
+     */
+    resolution: z.enum(['verdict', 'stale']).nullable(),
+    acknowledgedAt: instant.nullable(),
+    /** The suppress rule holding it, while `suppressed`. */
+    ruleId: z.string().nullable(),
+    evidence: findingEvidence,
+    likelyCause: findingLikelyCause.nullable(),
+});
+/** The longest a suppression may last. A permanent "never show me this" is not a rule; it is a blind spot. */
+export const FINDING_RULE_MAX_DAYS = 90;
+/**
+ * A suppress rule (#1748): a scope plus an expiry. A matching occurrence is still COUNTED on its
+ * finding, but the finding stays `suppressed` instead of opening. Each set field narrows; at
+ * least one must be set, so a rule never silences a whole tenant.
+ */
+export const findingRuleInput = z
+    .object({
+    kind: findingKind.optional(),
+    operation: z.string().min(1).optional(),
+    code: errorCode.optional(),
+    subject: z.string().min(1).optional(),
+    expiresAt: instant,
+    reason: z.string().min(1).max(500),
+})
+    .refine((r) => r.kind !== undefined || r.operation !== undefined || r.code !== undefined || r.subject !== undefined, {
+    message: 'a suppress rule names at least one of kind, operation, code or subject',
+});
+export const findingRuleEntry = z.object({
+    id: z.string().min(1),
+    tenantId,
+    kind: findingKind.nullable(),
+    operation: z.string().nullable(),
+    code: errorCode.nullable(),
+    subject: z.string().nullable(),
+    expiresAt: instant,
+    reason: z.string(),
+    createdBy: z.string(),
+    createdAt: instant,
+});
+//# sourceMappingURL=findings.js.map

package/dist/findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.js","sourceRoot":"","sources":["../src/findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAGvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAGjF;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAGvE,oGAAoG;AACpG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAC5D,wDAAwD;IACxD,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,uCAAuC;IACvC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;CAChH,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,0DAA0D;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ;IACR,IAAI,EAAE,WAAW;IACjB,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,8FAA8F;IAC9F,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,2EAA2E;IAC3E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC3B,wFAAwF;IACxF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,uGAAuG;IACvG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE;IAClC,wDAAwD;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,eAAe;IACzB,WAAW,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAGH,8GAA8G;AAC9G,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,OAAO;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE;IACnH,OAAO,EAAE,wEAAwE;CAClF,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ;IACR,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,OAAO;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC"}

package/dist/index.d.ts

@@ -35,6 +35,7 @@ export * from './idempotency.js';
 export * from './connections.js';
 export * from './connection-health.js';
 export * from './control-plane.js';
+export * from './findings.js';
 export * from './permission.js';
 export * from './impersonation.js';
 export * from './events.js';
@@ -56,6 +57,7 @@ export * from './ci.js';
 export * from './money.js';
 export * from './attachments.js';
 export * from './kernel-events.js';
+export * from './entity-state.js';
 export * from './model.js';
 export * from './operations.js';
 export * from './lifecycle.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -35,6 +35,7 @@ export * from './idempotency.js';
 export * from './connections.js';
 export * from './connection-health.js';
 export * from './control-plane.js';
+export * from './findings.js';
 export * from './permission.js';
 export * from './impersonation.js';
 export * from './events.js';
@@ -56,6 +57,7 @@ export * from './ci.js';
 export * from './money.js';
 export * from './attachments.js';
 export * from './kernel-events.js';
+export * from './entity-state.js';
 export * from './model.js';
 export * from './operations.js';
 export * from './lifecycle.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC"}

package/dist/kernel-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kernel-events.d.ts","sourceRoot":"","sources":["../src/kernel-events.ts"],"names":[],"mappings":"AA8BA,0FAA0F;AAC1F,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAAwC,CAAC;AAElG,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,SAAU,MAAM,KAAG,OAAoC,CAAC;AAE9F,4FAA4F;AAC5F,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQ3D"}
+{"version":3,"file":"kernel-events.d.ts","sourceRoot":"","sources":["../src/kernel-events.ts"],"names":[],"mappings":"AAmCA,0FAA0F;AAC1F,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAAwC,CAAC;AAElG,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,SAAU,MAAM,KAAG,OAAoC,CAAC;AAE9F,4FAA4F;AAC5F,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQ3D"}

package/dist/kernel-events.js

@@ -1,5 +1,6 @@
 import { ATTACHMENT_ADDED, ATTACHMENT_REMOVED } from './attachments.js';
 import { CAPABILITY_EXERCISED, CAPABILITY_MINTED, CAPABILITY_REVOKED } from './capability.js';
+import { ENTITY_ARCHIVED, ENTITY_RESTORED, ENTITY_TRASHED, ENTITY_UNARCHIVED } from './entity-state.js';
 import { substratError } from './errors.js';
 import { ENTITY_LINKED, ENTITY_RELINKED } from './permission.js';
 /**
@@ -23,8 +24,12 @@ const KERNEL_AUTHORED = new Set([
     CAPABILITY_EXERCISED,
     CAPABILITY_MINTED,
     CAPABILITY_REVOKED,
+    ENTITY_ARCHIVED,
     ENTITY_LINKED,
     ENTITY_RELINKED,
+    ENTITY_RESTORED,
+    ENTITY_TRASHED,
+    ENTITY_UNARCHIVED,
 ]);
 /** The reserved types, for readers: a frozen snapshot, not the set the guards consult. */
 export const KERNEL_AUTHORED_EVENT_TYPES = Object.freeze([...KERNEL_AUTHORED]);

package/dist/kernel-events.js.map

@@ -1 +1 @@
-{"version":3,"file":"kernel-events.js","sourceRoot":"","sources":["../src/kernel-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,eAAe;CAChB,CAAC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,CAAC,MAAM,2BAA2B,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;AAElG,+CAA+C;AAC/C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAE9F,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IACvC,MAAM,aAAa,CACjB,mBAAmB,EACnB,yBAAyB,IAAI,+CAA+C,EAC5E,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,EAAE,CACxE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IACtC,MAAM,aAAa,CACjB,UAAU,EACV,qBAAqB,IAAI,qDAAqD;QAC5E,qDAAqD;QACrD,8CAA8C,CACjD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"kernel-events.js","sourceRoot":"","sources":["../src/kernel-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,eAAe;IACf,eAAe;IACf,cAAc;IACd,iBAAiB;CAClB,CAAC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,CAAC,MAAM,2BAA2B,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;AAElG,+CAA+C;AAC/C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAE9F,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IACvC,MAAM,aAAa,CACjB,mBAAmB,EACnB,yBAAyB,IAAI,+CAA+C,EAC5E,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,EAAE,CACxE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IACtC,MAAM,aAAa,CACjB,UAAU,EACV,qBAAqB,IAAI,qDAAqD;QAC5E,qDAAqD;QACrD,8CAA8C,CACjD,CAAC;AACJ,CAAC"}

package/dist/manifest.d.ts

@@ -300,6 +300,13 @@ export declare const moduleManifest: z.ZodObject<{
         table: z.ZodOptional<z.ZodString>;
         idColumn: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    entityStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        archivePermission: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">>;
+        trashPermission: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">>;
+        table: z.ZodOptional<z.ZodString>;
+        idColumn: z.ZodOptional<z.ZodString>;
+        entityType: z.ZodString;
+    }, z.core.$strip>>>;
     ui: z.ZodOptional<z.ZodObject<{
         routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
             path: z.ZodString;

package/dist/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,aAAa,aAEsC,CAAC;AAEjE,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gBAAgB;;;;iBAE3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,WAAW;;;;iBAItB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAa1D,eAAO,MAAM,YAAY;;;;;;;iBAOvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAWxD,eAAO,MAAM,aAAa;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AAEvE,4GAA4G;AAC5G,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAClD,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAClD,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D,wFAAwF;AACxF,MAAM,MAAM,eAAe;AACzB,qFAAqF;AACnF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AACjD,gFAAgF;GAC9E;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE;AAC3B,kFAAkF;GAChF;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,MAAM,EAAE;IAAE,eAAe,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;IAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACjG,eAAe,GAAG,IAAI,CAOxB;AAMD,eAAO,MAAM,UAAU;;;;;;;;;iBAcrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,aAAwC,CAAC;AAChE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C,qFAAqF;IACrF,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAU5F;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,UAAU,EAAE,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC5C,WAAW,CASb;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,aAK3B,CAAC;AAEL,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6RzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,aAAa,aAEsC,CAAC;AAEjE,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gBAAgB;;;;iBAE3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,WAAW;;;;iBAItB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAa1D,eAAO,MAAM,YAAY;;;;;;;iBAOvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAWxD,eAAO,MAAM,aAAa;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AAEvE,4GAA4G;AAC5G,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAClD,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAClD,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D,wFAAwF;AACxF,MAAM,MAAM,eAAe;AACzB,qFAAqF;AACnF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AACjD,gFAAgF;GAC9E;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE;AAC3B,kFAAkF;GAChF;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,MAAM,EAAE;IAAE,eAAe,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;IAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACjG,eAAe,GAAG,IAAI,CAOxB;AAMD,eAAO,MAAM,UAAU;;;;;;;;;iBAcrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,aAAwC,CAAC;AAChE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C,qFAAqF;IACrF,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAU5F;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,UAAU,EAAE,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC5C,WAAW,CASb;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,aAK3B,CAAC;AAEL,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmSzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}