@substrat-run/kernel 0.143.0 → 0.145.0

package/dist/entity-grant-shape.js

@@ -1,7 +1,7 @@
-import { ENTITY_GRANTS_RETIRED, ENTITY_GRANTS_TOPPED_UP, ENTITY_SHAPE_MARKER_RELATION, domainEvent, entityGrantsRetiredPayload, entityGrantsToppedUpPayload, entityObjectRef, eventId, } from '@substrat-run/contracts';
+import { ENTITY_GRANTS_RETIRED, ENTITY_GRANTS_TOPPED_UP, ENTITY_SHAPE_MARKER_RELATION, domainEvent, entityGrantsRetiredPayload, entityGrantsToppedUpPayload, entityObjectRef, eventId, retiredKeysOf, } from '@substrat-run/contracts';
 import { assertKernelAuthoredType, substratError } from '@substrat-run/contracts';
 import { KERNEL_ACTOR, kernelOutboxInsertSql } from './kernel-outbox.js';
-import { GRANTEE_KEY_RELATION, explicitTupleSql } from './entity-grant.js';
+import { SHAPE_PROTECTED_KEY_RELATION, explicitTupleSql } from './entity-grant.js';
 import { liveTupleSql } from './permission-eval.js';
 import { assertSqlIdentifier } from './sql-identifier.js';
 /**
@@ -40,13 +40,25 @@ import { assertSqlIdentifier } from './sql-identifier.js';
  *   the principal; a table column naming the principal), and a person is marked only on their
  *   own record, and only when they hold a row there (live or tombstoned) for some key of the
  *   shape — evidence they were given it. Someone `ctx.grant`ed even the whole shape on another
- *   person's record is never marked. A shape with no `holder` gets no backfill. Each batch marks
- *   at most what the pass's budget allows; the markers are the progress, since a marked pair is
- *   no longer a candidate, and a record tuple (`shape:<type>`, `shape-backfilled`, `scope:<id>`)
- *   ends it once a batch comes back short.
+ *   person's record is never marked. A shape with no `holder` gets no backfill. It is read in
+ *   windows like the walks (#2154): each pass reads at most its read budget of rows, in an index
+ *   order, marks at most its write budget, and hands back the last row it read as the cursor's
+ *   `row`, so the next pass seeks past it rather than re-reading from the start. A record tuple
+ *   (`shape:<type>`, `shape-backfilled`, `scope:<id>`) ends it once a read reaches the end of the
+ *   range, and never before. A table holder's read is keyed on `idColumn` and then the row's own
+ *   identity (its `rowid`, or a `WITHOUT ROWID` table's primary key), because nothing makes
+ *   `idColumn` unique or the principal non-NULL, and a key that ties lets a window's edge skip a row.
+ *
+ *   The cut-off is the cursor. Evidence that lands behind it while the backfill runs (a direct
+ *   grant of a shape key to the person on their own record, for `'self'` or a table holder) is not
+ *   marked, and once the record is written nothing is: the same accepted gap as a grant landing
+ *   after the record. There is deliberately no confirming walk, as a retirement has: it would
+ *   double every first backfill's reads to catch a grant that a shape grant should have made. For
+ *   `'grantee'` nothing can land at all, since the first pass records the grantee keys and the
+ *   tuple writer refuses them to every other grant from then on.
  * - `holder: 'grantee'` (#2083), for a record that names no principal (a portal customer, a
  *   contact): whoever holds a live current or retired key of the shape on such an entity was given it.
- *   Each pass records current and retired keys (`shape-grantee-key`), and the explicit tuple
+ *   Each reconcile records current and retired keys (`shape-grantee-key`), and the explicit tuple
  *   writer makes non-shape grants refuse them on that entity type. A tuple from before the
  *   first such pass cannot be told apart. A marker already written by a shape grant persists
  *   through retirement, so its holder receives the new keys even if their old key was K alone.
@@ -69,7 +81,8 @@ export const SHAPE_MARKER_INDEX_DDL = `CREATE INDEX IF NOT EXISTS _substrat_tupl
 /** Holders topped up per pass — one transaction each, so a large scope never holds one long. */
 export const SHAPE_TOP_UP_BATCH = 500;
 /**
- * Markers a pass may READ, per row of work it may write. The budget bounds writes, but finding
+ * Rows a pass may READ, per row of work it may write: markers on a walk, and the tuples or table
+ * rows the backfill reads for candidates (#2154). The budget bounds writes, but finding
  * the holders who need one means reading past the ones who do not, and on a scope where nobody
  * does (the common reconcile: nothing changed) that is every marker. Ten per row keeps a pass at
  * 5000 index rows by default, short on any scope, while a rollout still spends most of each pass
@@ -125,12 +138,15 @@ export function grantEntityShapeIn(db, principal, entity, permissions) {
 }
 /**
  * One pass of the reconcile over one scope, at most `limit` rows of work and
- * `limit × SHAPE_MARKER_READS_PER_ROW` markers read: backfill marks for any shape whose backfill
+ * `limit × SHAPE_MARKER_READS_PER_ROW` rows read (markers, and the backfill's tuples or table
+ * rows): backfill marks for any shape whose backfill
  * is not done here, then holders whose retired keys are taken back, each with its
  * `entity.grants-retired` event, then holders topped up, each with its `entity.grants-topped-up`
  * event. `next` is `null` once the scope is done; otherwise the caller runs another pass with it
  * as `after`. `retirementsLeftOpen` counts the shapes whose retirement this pass gave up on at
- * `SHAPE_RETIRE_CONFIRMS_MAX`, for the next reconcile to run again. Run it inside ONE
+ * `SHAPE_RETIRE_CONFIRMS_MAX`, for the next reconcile to run again. The last pass (`next: null`)
+ * also answers `boundEver` (#2184): every type this scope has ever bound (`shape-bound`), read
+ * after this reconcile recorded its facts, for the platform's binding-shape gate. Run it inside ONE
  * transaction, so the keys and their events commit together. Re-running a finished scope writes
  * nothing.
  */
@@ -139,7 +155,9 @@ export function topUpEntityGrantShapes(db, pass) {
     // a caller looping until it does would never stop.
     const limit = shapeTopUpBatch(pass.limit);
     const room = { writes: limit, reads: limit * SHAPE_MARKER_READS_PER_ROW };
-    recordGranteeKeys(db, pass.shapes);
+    // The registry is the same for every pass of one reconcile, so its facts are recorded by the first.
+    if (!pass.after)
+        recordShapeFacts(db, pass.shapes);
     let toppedUp = 0;
     let retired = 0;
     let retirementsLeftOpen = 0;
@@ -151,26 +169,26 @@ export function topUpEntityGrantShapes(db, pass) {
             continue;
         const keys = keysOf(shape.permissions);
         // A key the shape grants is never taken back, whatever the declaration says.
-        const gone = keysOf(shape.retired ?? []).filter((k) => !keys.includes(k));
+        const gone = retiredKeysOf(shape);
         if (keys.length === 0 && gone.length === 0)
             continue;
         // Where this shape starts: the cursor's step if it points here, else the beginning.
         const resume = from?.shape === i ? from : null;
         const at = resume?.step ?? 'backfill';
         const marker = (step) => (resume?.step === step ? resume.marker : null);
-        const stop = (step, last, confirm) => ({
+        const stop = (step, last, more) => ({
             toppedUp,
             retired,
             retirementsLeftOpen,
-            next: { shape: i, step, marker: last, ...(confirm ? { confirm } : {}) },
+            next: { shape: i, step, marker: last, ...more },
         });
         const prefix = `${shape.entityType}:`;
         if (at === 'backfill') {
             // A live retired key still identifies a legacy holder so this pass can retire it.
             // The grantee query excludes tombstoned tuples.
-            room.writes -= backfill(db, pass, shape, prefix, JSON.stringify([...keys, ...gone]), room.writes);
-            if (room.writes === 0)
-                return stop('backfill', null);
+            const read = backfill(db, pass, shape, prefix, JSON.stringify([...keys, ...gone]), room, resume?.row ?? null);
+            if (!read.done)
+                return stop('backfill', null, read.at ? { row: read.at } : undefined);
         }
         if (at !== 'topUp') {
             reopenRetirements(db, pass, shape.entityType, keys);
@@ -183,7 +201,7 @@ export function topUpEntityGrantShapes(db, pass) {
                 if (confirm)
                     confirm = { ...confirm, clean: confirm.clean && took.found.length === 0 };
                 if (!took.done)
-                    return stop('retire', took.at, confirm);
+                    return stop('retire', took.at, confirm ? { confirm } : undefined);
                 if (confirm?.clean)
                     break; // `retire` recorded the retirement finished
                 // A confirming walk from the first marker, for what landed behind this one; a walk that
@@ -203,15 +221,47 @@ export function topUpEntityGrantShapes(db, pass) {
         if (!gave.done)
             return stop('topUp', gave.at);
     }
-    return { toppedUp, retired, retirementsLeftOpen, next: null };
+    return { toppedUp, retired, retirementsLeftOpen, next: null, boundEver: boundEverTypes(db) };
+}
+/**
+ * #2184: every entity type this scope has ever bound (`shape-bound`, sticky), sorted. One read of
+ * the `shape:` range of the spine, bounded by the types ever declared.
+ */
+function boundEverTypes(db) {
+    return db.all(`SELECT subject FROM _substrat_tuples WHERE subject >= 'shape:' AND subject < 'shape;' AND relation = ? ORDER BY subject`, BOUND_EVER_RELATION).map((r) => r.subject.slice('shape:'.length));
 }
 /** A step with nothing to walk: done, having read nothing. */
 const NOTHING_TO_WALK = { found: [], done: true, at: null };
+/**
+ * One window of a step's read, fetched in sort order with each row's `hit` computed in the SELECT
+ * rather than filtered in the WHERE, so `LIMIT window` bounds the rows read and not only the rows
+ * wanted. Takes the wanted pairs, each once, until the write budget is spent, and charges every
+ * row FETCHED to the read budget: the whole window, not only up to where the writes ran out,
+ * because SQLite evaluated `hit` on every row it returned. `done` once every row fetched was taken
+ * and the fetch came back short of the window; `last` is the last row taken, where the next
+ * window starts after.
+ */
+function takeWindow(rows, window, room) {
+    const found = [];
+    // A pair can come back on several rows of one window (a tuple per key it holds); it is one write.
+    const seen = new Set();
+    let read = 0;
+    while (read < rows.length && found.length < room.writes) {
+        const r = rows[read++];
+        const pair = `${r.subject}\n${r.object}`;
+        if (!r.hit || seen.has(pair))
+            continue;
+        seen.add(pair);
+        found.push(r);
+    }
+    room.reads -= rows.length;
+    room.writes -= found.length;
+    return { found, done: read === rows.length && rows.length < window, last: rows[read - 1] };
+}
 /**
  * The live markers of one shape after `after`, in index order, that are `wanted` (a SQL predicate
- * on the marker `m`, binding one parameter: `json`), as many as `room` allows. Spends one write
- * per marker found, and one read per marker FETCHED: the whole window, not only up to where the
- * writes ran out, because SQLite evaluated `wanted` on every row it returned.
+ * on the marker `m`, binding one parameter: `json`), as many as `room` allows, read as one
+ * {@link takeWindow}.
  */
 function walkMarkers(db, now, prefix, after, room, wanted, json) {
     if (room.writes === 0 || room.reads === 0)
@@ -227,22 +277,8 @@ function walkMarkers(db, now, prefix, after, room, wanted, json) {
       LIMIT ?`, now, json, 
     // A row-value seek: a resumed walk starts after the cursor and reads none of what it passed.
     from.object, from.subject, end, window);
-    const found = [];
-    let read = 0;
-    while (read < rows.length && found.length < room.writes) {
-        const r = rows[read++];
-        if (r.hit)
-            found.push({ subject: r.subject, object: r.object });
-    }
-    room.reads -= rows.length;
-    room.writes -= found.length;
-    const last = rows[read - 1];
-    return {
-        found,
-        // Every marker it fetched was read, and the fetch came back short of the window: no more.
-        done: read === rows.length && rows.length < window,
-        at: last ? { object: last.object, subject: last.subject } : after,
-    };
+    const { found, done, last } = takeWindow(rows, window, room);
+    return { found, done, at: last ? { object: last.object, subject: last.subject } : after };
 }
 /**
  * One bounded walk of a shape's top-up: each live marker whose entity lacks a key of the current
@@ -323,93 +359,225 @@ function reopenRetirements(db, pass, entityType, keys) {
         AND relation IN (SELECT '${RETIRED_RELATION}' || value FROM json_each(?))`, pass.now, ...recordRefs(entityType, pass.scopeId), JSON.stringify(keys));
 }
 /**
- * One bounded batch of the backfill for one shape — at most `budget` marks — and the run-once
- * record when the batch comes back short. Returns how many it marked. See the module comment:
- * provenance only, from the shape's declared `holder`.
+ * One window of the backfill for one shape after `after` (#2154), as one {@link takeWindow}: at
+ * most `room.reads` rows read, in an index order a cursor can seek, and at most `room.writes`
+ * marks; `done` once it read its whole range, else `at` is the last row it read. The run-once record is written only by the window that reads to the end of the range, so
+ * a backfill cut short by either budget hands back where it stopped and keeps no record. See the
+ * module comment: provenance only, from the shape's declared `holder`.
  */
-function backfill(db, pass, shape, prefix, json, budget) {
-    if (!shape.holder || budget === 0)
-        return 0;
+function backfill(db, pass, shape, prefix, json, room, after) {
+    if (!shape.holder)
+        return { done: true, at: null };
     const [shapeRef, scopeRef] = recordRefs(shape.entityType, pass.scopeId);
     const record = [shapeRef, BACKFILLED_RELATION, scopeRef];
     if (db.all('SELECT 1 FROM _substrat_tuples WHERE subject = ? AND relation = ? AND object = ?', ...record).length > 0) {
-        return 0;
+        return { done: true, at: null };
     }
+    if (room.writes === 0 || room.reads === 0)
+        return { done: false, at: after };
+    const window = room.reads;
     // Not yet a holder in any state: a tombstoned marker is a revoke of the holding, kept.
     const unmarked = (subject, object) => `NOT EXISTS (SELECT 1 FROM _substrat_tuples m WHERE m.subject = ${subject} AND m.relation = '${ENTITY_SHAPE_MARKER_RELATION}' AND m.object = ${object})`;
     const heldThere = (subject, object) => `EXISTS (SELECT 1 FROM _substrat_tuples g WHERE g.subject = ${subject} AND g.object = ${object}
                AND g.relation IN (SELECT 'granted:' || value FROM json_each(?)))`;
-    let candidates;
-    if (shape.holder === 'self') {
-        // The entity id IS the principal: `owner:<p>` belongs to `principal:<p>` and nobody else.
-        candidates = db.all(`SELECT DISTINCT t.subject, t.object FROM _substrat_tuples t
-        WHERE t.object >= ? AND t.object < ?
-          AND t.subject = '${PRINCIPAL}' || substr(t.object, ?)
-          AND t.relation IN (SELECT 'granted:' || value FROM json_each(?))
-          AND ${unmarked('t.subject', 't.object')}
-        ORDER BY t.subject, t.object
-        LIMIT ?`, ...typeRange(prefix), prefix.length + 1, json, budget);
-    }
-    else if (shape.holder === 'grantee') {
-        // Whoever holds a LIVE key of the shape on an entity of this type. Live, unlike the other two
-        // holders: with no record naming the person, a key taken back from them is no evidence they
-        // still belong there, and marking them would hand a revoked portal the next key it gains.
-        candidates = db.all(`SELECT DISTINCT t.subject, t.object FROM _substrat_tuples t
-        WHERE t.object >= ? AND t.object < ?
-          AND substr(t.subject, 1, ${PRINCIPAL.length}) = '${PRINCIPAL}'
-          AND t.relation IN (SELECT 'granted:' || value FROM json_each(?))
-          AND ${liveTupleSql('t')}
-          AND ${unmarked('t.subject', 't.object')}
-        ORDER BY t.subject, t.object
-        LIMIT ?`, ...typeRange(prefix), json, pass.now, budget);
+    const shapeKey = `t.relation IN (SELECT 'granted:' || value FROM json_each(?))`;
+    // The rows of the window, and the sort key the cursor carries for a row.
+    let rows;
+    let keyOf;
+    if (shape.holder === 'self' || shape.holder === 'grantee') {
+        // The type's tuples on `_substrat_tuples_object_relation_subject`, in its order, so the cursor
+        // is a row-value seek into the range. Every tuple of the type is read, a key of another shape
+        // or a marker included; which of them make a candidate is `hit`.
+        const [, end] = typeRange(prefix);
+        const from = after ?? [prefix, '', ''];
+        const [holds, holdsParams] = shape.holder === 'self'
+            ? // The entity id IS the principal: `owner:<p>` belongs to `principal:<p>` and nobody else.
+                [`t.subject = '${PRINCIPAL}' || substr(t.object, ${prefix.length + 1})`, []]
+            : // Whoever holds a LIVE key of the shape on an entity of this type. Live, unlike the other
+                // two holders: with no record naming the person, a key taken back from them is no evidence
+                // they still belong there, and marking them would hand a revoked portal the next key it gains.
+                [`substr(t.subject, 1, ${PRINCIPAL.length}) = '${PRINCIPAL}' AND ${liveTupleSql('t')}`, [pass.now]];
+        rows = db.all(`SELECT t.object, t.relation, t.subject, (${shapeKey} AND ${holds} AND ${unmarked('t.subject', 't.object')}) AS hit
+         FROM _substrat_tuples t
+        WHERE (t.object, t.relation, t.subject) > (?, ?, ?) AND t.object < ?
+        ORDER BY t.object, t.relation, t.subject
+        LIMIT ?`, json, ...holdsParams, ...from, end, window);
+        keyOf = (r) => [r.object, r.relation, r.subject];
     }
     else {
-        const { table, idColumn, principalColumn } = shape.holder;
-        const where = `entityGrants holder of '${shape.entityType}'`;
-        for (const [kind, name] of [['a table', table], ['a column', idColumn], ['a column', principalColumn]]) {
-            assertSqlIdentifier('reconcileEntityGrantShapes', kind, name, where);
-        }
+        const { table, idColumn, principalColumn } = holderNames(shape.holder, 'reconcileEntityGrantShapes', `entityGrants holder of '${shape.entityType}'`);
         // The vertical's table may not exist yet on this scope (a module not migrated): nothing to
         // mark, and the backfill stays open for the next reconcile rather than being recorded done.
-        if (db.all(`SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?`, table).length === 0)
-            return 0;
+        // Asked of SQLite, not read off the DDL's text, which keeps table options in any order and
+        // comments after them (#2159 review).
+        const listed = db.all(`SELECT wr FROM pragma_table_list WHERE schema = 'main' AND type = 'table' AND name = ?`, table)[0];
+        if (!listed)
+            return { done: true, at: null };
         const subject = `'${PRINCIPAL}' || e."${principalColumn}"`;
         const object = `? || e."${idColumn}"`;
-        candidates = db.all(`SELECT ${subject} AS subject, ${object} AS object FROM "${table}" e
-        WHERE e."${principalColumn}" IS NOT NULL
-          AND ${heldThere(subject, object)}
-          AND ${unmarked(subject, object)}
-        ORDER BY 1, 2
-        LIMIT ?`, prefix, prefix, json, prefix, budget);
+        // The table in `idColumn` order, the cursor a seek on it: the raw values, so they compare as the
+        // columns do. Nothing makes `idColumn` unique, and the principal may be NULL, so the key goes on
+        // to the row's own identity (#2159 review): rows sharing an id are never skipped at a window's
+        // edge. Bounded only where `idColumn` leads an index (an entity id is the primary key);
+        // otherwise every window sorts the whole table, which `warnUnboundedRead` reports.
+        const key = [`e."${idColumn}"`, ...rowIdentity(db, table, idColumn, Number(listed['wr']) === 1)];
+        const sql = `SELECT ${key.map((k, i) => `${k} AS k${i}`).join(', ')}, ${subject} AS subject, ${object} AS object,
+                        (e."${principalColumn}" IS NOT NULL AND ${heldThere(subject, object)} AND ${unmarked(subject, object)}) AS hit
+                   FROM "${table}" e
+                  WHERE ${after ? `(${key.join(', ')}) > (${key.map(() => '?').join(', ')})` : `e."${idColumn}" IS NOT NULL`}
+                  ORDER BY ${key.join(', ')}
+                  LIMIT ?`;
+        const params = [prefix, prefix, json, prefix, ...(after ?? []), window];
+        if (!after)
+            warnUnboundedRead(db, pass, shape.entityType, { table, idColumn }, sql, params);
+        rows = db.all(sql, ...params);
+        keyOf = (r) => key.map((_, i) => r[`k${i}`]);
     }
-    for (const c of candidates) {
+    const { found, done, last } = takeWindow(rows, window, room);
+    for (const c of found) {
         db.run('INSERT OR IGNORE INTO _substrat_tuples (subject, relation, object) VALUES (?, ?, ?)', c.subject, ENTITY_SHAPE_MARKER_RELATION, c.object);
     }
-    if (candidates.length < budget) {
+    if (done)
         db.run('INSERT OR IGNORE INTO _substrat_tuples (subject, relation, object) VALUES (?, ?, ?)', ...record);
+    return { done, at: last ? keyOf(last) : after };
+}
+/**
+ * What tells apart two rows of a holder table that share an `idColumn`, after it in the read's key:
+ * the `rowid`, unique, never NULL, and already the last column of every index on a rowid table, so
+ * an index leading with `idColumn` serves the whole key with no sort. Named by the first of its three
+ * names that no column of the table has taken: a column called `rowid` is that column, not the row's
+ * identity. A table that takes all three is refused (`validation_failed`) rather than read with a key
+ * that can tie: a rowid table's primary key may hold NULLs, so it cannot stand in. A `WITHOUT ROWID` table has
+ * none; its primary key columns are NOT NULL, unique, and end each of its indexes the same way, so
+ * they stand in, read in key order (those already `idColumn`'s left out: a key of `idColumn`
+ * alone is unique, and needs nothing after it).
+ */
+function rowIdentity(db, table, idColumn, withoutRowid) {
+    const columns = db.all('SELECT name, pk FROM pragma_table_info(?) ORDER BY pk', table).map((r) => ({ name: String(r['name']), pk: Number(r['pk']) }));
+    if (withoutRowid) {
+        return columns.filter((c) => c.pk > 0 && c.name !== idColumn).map((c) => `e."${c.name.replaceAll('"', '""')}"`);
     }
-    return candidates.length;
+    const taken = new Set(columns.map((c) => c.name.toLowerCase()));
+    const alias = ROWID_NAMES.find((n) => !taken.has(n));
+    if (!alias) {
+        throw substratError('validation_failed', `reconcileEntityGrantShapes: holder table "${table}" has columns named rowid, _rowid_ and oid, so its rows cannot be told apart; rename one`, { errors: [{ path: 'holder.table', message: 'a table that leaves one of rowid, _rowid_ or oid to the row' }] });
+    }
+    return [`e.${alias}`];
 }
+/** The names SQLite answers a rowid table's row identity to, unless a column has taken one. */
+const ROWID_NAMES = ['rowid', '_rowid_', 'oid'];
 /**
- * The current and retired keys of every `holder: 'grantee'` bootstrap shape, recorded so the
- * explicit tuple writer can refuse them to every non-shape grant. A reconcile carries the
- * reached version's whole reviewed registry,
- * so the records are made to match it exactly: a declaration a later version drops stops
- * refusing. Bounded by the declared keys, so it runs in every pass without a budget.
+ * A table holder's backfill is bounded only where SQLite reads the table in `idColumn` order off
+ * an index; where it must sort instead (`idColumn` leads no index), every window reads the whole
+ * table. The schema is the vertical's, known only on the scope, so the backfill's first window
+ * asks SQLite for the plan of the read it is about to send and writes one structured warn line
+ * when the plan sorts the whole table (`USE TEMP B-TREE FOR ORDER BY`), its keys a contract as the
+ * log lines' are. The read still runs: the backfill is correct, only unbounded. A sort of only the
+ * key's LAST TERM is not reported: an index on `(idColumn, principalColumn)` serves `idColumn` but
+ * not the row identity after it, so SQLite sorts the rows of one id at a time, which is bounded by
+ * the rows sharing an id, not by the table.
  */
-function recordGranteeKeys(db, shapes) {
-    const rows = shapes
-        .filter((s) => s.bootstrap && s.holder === 'grantee')
-        .flatMap((s) => keysOf([...s.permissions, ...(s.retired ?? [])]).map((k) => [`shape:${s.entityType}`, `granted:${k}`]));
+function warnUnboundedRead(db, pass, entityType, holder, sql, params) {
+    const plan = db.all(`EXPLAIN QUERY PLAN ${sql}`, ...params).map((r) => String(r['detail']));
+    if (!plan.some((d) => d.startsWith('USE TEMP B-TREE FOR ORDER BY')))
+        return;
+    console.warn(JSON.stringify({
+        substrat: 'shape-backfill-unbounded',
+        level: 'warn',
+        tenantId: pass.tenantId,
+        scopeId: pass.scopeId,
+        entityType,
+        ...holder,
+        message: `the entity-grant backfill of '${entityType}' sorts all of "${holder.table}" on every pass: index "${holder.idColumn}" to bound it`,
+    }));
+}
+/**
+ * A BINDING shape's record (#1686), on the scope's tuple spine beside the grantee keys: which
+ * table column names the record's person (`<table>.<idColumn>.<principalColumn>`), the key that
+ * lets someone bind or unbind them, and the shape's current keys — what a binding invite's claim
+ * gives. The claim and an unbind read these, never the vertical's code: the shape is the reviewed
+ * registry the platform last reconciled this scope with. Each identifier is a SQL identifier, so
+ * `.` cannot occur inside one.
+ */
+export const BIND_HOLDER_RELATION = 'shape-bind-holder';
+export const BIND_PERMISSION_RELATION = 'shape-bind-permission';
+export const BIND_KEY_RELATION = 'shape-bind-key';
+/**
+ * `(shape:<type>, shape-bound, bound)`: this scope has declared a binding for `<type>` (#1686).
+ * Written by the first reconcile that records the binding (and by every claim, to the same effect)
+ * and STICKY — no reconcile removes it, whatever later
+ * versions declare — so an erasure keeps releasing that type's holders after a version drops the
+ * shape, drops its `bind` or moves its holder column. A spine tuple like the others here, so
+ * module code can never write one (`ctx.sql` refuses every `_substrat_*` write).
+ */
+export const BOUND_EVER_RELATION = 'shape-bound';
+/** A shape the reconcile records as binding: bootstrap, a table holder, and a `bind`. */
+const binds = (s) => !!s.bootstrap && !!s.bind && typeof s.holder === 'object';
+/** A table holder's three names, each checked as a SQL identifier before anything interpolates it. */
+function holderNames(holder, area, where) {
+    for (const [kind, name] of [['a table', holder.table], ['a column', holder.idColumn], ['a column', holder.principalColumn]]) {
+        assertSqlIdentifier(area, kind, name, where);
+    }
+    return holder;
+}
+/**
+ * The registry facts a reconcile records for the explicit tuple writer and a binding claim, made to
+ * match the reached version's whole reviewed registry exactly, so a declaration a later version
+ * drops stops counting:
+ * - every current and retired key of each `holder: 'grantee'` or BOUND bootstrap shape
+ *   (`shape-grantee-key`), which every non-shape grant then refuses on that entity type;
+ * - each bound shape's holder column and current keys, and — only while it declares `bind` — its
+ *   bind key (#1686).
+ *
+ * A type that has ever bound (`shape-bound`) keeps its protected keys whatever later versions
+ * declare, so the keys stay refused to direct grants while its holders keep the shape; a key a
+ * later version gives the shape joins them.
+ *
+ * A shape is BOUND while it declares `bind`, and stays bound after a version drops `bind` for as
+ * long as it is still a bootstrap shape with the same table holder: records may already name their
+ * people in that column, holding the shape through it, and an erasure releases them by these
+ * facts. Without the bind key nobody can mint, claim or unbind any more; what was bound stays as a
+ * shape holder does when a key is dropped without being retired. A version that drops the shape,
+ * or changes its holder, drops the facts with it.
+ * Three statements, bounded by the declared shapes, so it runs without a budget.
+ */
+function recordShapeFacts(db, shapes) {
+    const ref = (s) => `shape:${s.entityType}`;
+    const holderOf = (s) => {
+        const { table, idColumn, principalColumn } = holderNames(s.holder, 'reconcileEntityGrantShapes', `entityGrants bind of '${s.entityType}'`);
+        return `${table}.${idColumn}.${principalColumn}`;
+    };
+    const recorded = new Map(db.all(`SELECT subject, object FROM _substrat_tuples WHERE subject >= 'shape:' AND subject < 'shape;' AND relation = ?`, BIND_HOLDER_RELATION).map((r) => [r.subject, r.object]));
+    const tableHeld = (s) => !!s.bootstrap && typeof s.holder === 'object';
+    const bound = shapes.filter(tableHeld).filter((s) => binds(s) || recorded.get(ref(s)) === holderOf(s));
+    const boundTypes = new Set(bound.map((s) => s.entityType));
+    const facts = [
+        ...shapes
+            .filter((s) => (s.bootstrap && s.holder === 'grantee') || boundTypes.has(s.entityType))
+            .flatMap((s) => keysOf([...s.permissions, ...(s.retired ?? [])]).map((k) => [ref(s), SHAPE_PROTECTED_KEY_RELATION, `granted:${k}`])),
+        ...bound.map((s) => [ref(s), BIND_HOLDER_RELATION, holderOf(s)]),
+        ...shapes.filter(binds).map((s) => [ref(s), BIND_PERMISSION_RELATION, s.bind.permission]),
+        // A declared binding is sticky from the first reconcile that records it, not only from its first
+        // claim: its keys stay refused and its holders (backfilled ones included) stay reachable by an
+        // erasure, whatever later versions declare. Never deleted: the DELETE below names other relations.
+        ...shapes.filter(binds).map((s) => [ref(s), BOUND_EVER_RELATION, 'bound']),
+        ...bound.flatMap((s) => keysOf(s.permissions).map((k) => [ref(s), BIND_KEY_RELATION, `granted:${k}`])),
+    ];
+    const json = JSON.stringify(facts);
     db.run(
     // The subject range keeps it on the primary key: `shape:` rows only, never the whole table.
-    `DELETE FROM _substrat_tuples WHERE subject >= 'shape:' AND subject < 'shape;' AND relation = ?
+    `DELETE FROM _substrat_tuples WHERE subject >= 'shape:' AND subject < 'shape;' AND relation IN (?, ?, ?, ?)
         AND NOT EXISTS (SELECT 1 FROM json_each(?) r
                          WHERE json_extract(r.value, '$[0]') = _substrat_tuples.subject
-                           AND json_extract(r.value, '$[1]') = _substrat_tuples.object)`, GRANTEE_KEY_RELATION, JSON.stringify(rows));
-    for (const [subject, object] of rows) {
-        db.run('INSERT OR IGNORE INTO _substrat_tuples (subject, relation, object) VALUES (?, ?, ?)', subject, GRANTEE_KEY_RELATION, object);
-    }
+                           AND json_extract(r.value, '$[1]') = _substrat_tuples.relation
+                           AND json_extract(r.value, '$[2]') = _substrat_tuples.object)
+        -- A type that ever bound keeps its protected keys whatever this version declares (#1686):
+        -- its holders keep the shape until released, and a direct grant of a key of it made while
+        -- the shape is out of the registry would be a holder no marker, unbind or held check sees.
+        AND NOT (relation = ? AND EXISTS (SELECT 1 FROM _substrat_tuples b
+                                           WHERE b.subject = _substrat_tuples.subject AND b.relation = ?))`, SHAPE_PROTECTED_KEY_RELATION, BIND_HOLDER_RELATION, BIND_PERMISSION_RELATION, BIND_KEY_RELATION, json, SHAPE_PROTECTED_KEY_RELATION, BOUND_EVER_RELATION);
+    db.run(`INSERT OR IGNORE INTO _substrat_tuples (subject, relation, object)
+       SELECT json_extract(value, '$[0]'), json_extract(value, '$[1]'), json_extract(value, '$[2]') FROM json_each(?)`, json);
 }
 /**
  * The kernel's event for one (person, entity) a pass changed — a top-up or a retirement — the

package/dist/entity-grant-shape.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-grant-shape.js","sourceRoot":"","sources":["../src/entity-grant-shape.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,4BAA4B,EAC5B,WAAW,EACX,0BAA0B,EAC1B,2BAA2B,EAC3B,eAAe,EACf,OAAO,GAKR,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oHAAoH,4BAA4B,GAAG,CAAC;AAE1L,gGAAgG;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,2GAA2G;AAC3G,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,KAAK,GAAW,kBAAkB;IAChE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;QAC5E,MAAM,aAAa,CACjB,mBAAmB,EACnB,kEAAkE,sBAAsB,SAAS,KAAK,EAAE,EACxG,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAC/C,kGAAkG;AAClG,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAE1C,yEAAyE;AACzE,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,SAAS,UAAU,EAAE,EAAE,SAAS,OAAO,EAAE,CAAU,CAAC;AAEjH,iFAAiF;AAGjF,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,MAAM,MAAM,GAAG,CAAC,WAA8B,EAAY,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAE9F;;;GAGG;AACH,MAAM,SAAS,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAa,EAAE,SAAsB,EAAE,MAAiB,EAAE,WAA8B;IACzH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI;QACf,gBAAgB,CAAC,OAAO,EAAE,4BAA4B,EAAE,MAAM,CAAC;QAC/D,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;KACrF,EAAE,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAqDD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAa,EACb,IAAe;IAEf,+FAA+F;IAC/F,mDAAmD;IACnD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,0BAA0B,EAAE,CAAC;IAC1E,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,wFAAwF;QACxF,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,6EAA6E;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACrD,oFAAoF;QACpF,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,EAAE,IAAI,IAAI,UAAU,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,IAAyB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,CAAC,IAAyB,EAAE,IAA2B,EAAE,OAAgC,EAAE,EAAE,CAAC,CAAC;YAC1G,QAAQ;YACR,OAAO;YACP,mBAAmB;YACnB,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SACxE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC;QACtC,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC;YACtB,kFAAkF;YAClF,gDAAgD;YAChD,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAClG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,2FAA2F;YAC3F,IAAI,OAAO,GAAG,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC;gBACpG,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC7B,IAAI,OAAO;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvF,IAAI,CAAC,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACxD,IAAI,OAAO,EAAE,KAAK;oBAAE,MAAM,CAAC,4CAA4C;gBACvE,wFAAwF;gBACxF,mFAAmF;gBACnF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,IAAI,KAAK,IAAI,yBAAyB,EAAE,CAAC;oBACvC,mBAAmB,EAAE,CAAC;oBACtB,MAAM;gBACR,CAAC;gBACD,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACpF,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC;AAeD,8DAA8D;AAC9D,MAAM,eAAe,GAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAElE;;;;;GAKG;AACH,SAAS,WAAW,CAClB,EAAa,EACb,GAAW,EACX,MAAc,EACd,KAA4B,EAC5B,IAAU,EACV,MAAc,EACd,IAAY;IAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACxF,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB;oCACgC,SAAS,CAAC,MAAM,QAAQ,SAAS,SAAS,YAAY,CAAC,GAAG,CAAC,QAAQ,MAAM;;4BAEjF,4BAA4B;;cAE1C,EACV,GAAG,EACH,IAAI;IACJ,6FAA6F;IAC7F,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,MAAM,CAC+C,CAAC;IACxD,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAE,CAAC;QACxB,IAAI,CAAC,CAAC,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO;QACL,KAAK;QACL,0FAA0F;QAC1F,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;QAClD,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK;KAClE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,KAAK,CACZ,EAAa,EACb,IAAe,EACf,UAAkB,EAClB,MAAc,EACd,IAAuB,EACvB,KAA4B,EAC5B,IAAU;IAEV,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,WAAW,CACtB,EAAE,EACF,IAAI,CAAC,GAAG,EACR,MAAM,EACN,KAAK,EACL,IAAI,EACJ;;;4EAGwE,EACxE,IAAI,CACL,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GACT,EAAE,CAAC,GAAG,CACJ;;;2BAGmB,EACnB,IAAI,EACJ,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,MAAM,CAEX,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,EAAE,CAAC,GAAG,CACJ,qFAAqF,EACrF,CAAC,CAAC,OAAO,EACT,WAAW,GAAG,EAAE,EAChB,CAAC,CAAC,MAAM,CACT,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,qBAAqB,CAC9B,UAAU,CAAC,IAAI,EAAE,uBAAuB,EAAE,2BAA2B,EAAE;YACrE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAgB;YAC3D,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC/D,KAAK;SACN,CAAC,EACF,IAAI,CAAC,OAAO,CACb,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CACb,EAAa,EACb,IAAe,EACf,UAAkB,EAClB,MAAc,EACd,IAAuB,EACvB,KAA4B,EAC5B,IAAU,EACV,KAAc;IAEd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IAC9C,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAEpB,EAAE,CAAC,GAAG,CACJ,2BAA2B,gBAAgB,CAAC,MAAM,GAAG,CAAC;;uCAEvB,gBAAgB,+BAA+B,EAC9E,QAAQ,EACR,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAEvB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACpB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,WAAW,CACtB,EAAE,EACF,IAAI,CAAC,GAAG,EACR,MAAM,EACN,KAAK,EACL,IAAI,EACJ;;kFAE8E,EAC9E,IAAI,CACL,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,4FAA4F;QAC5F,MAAM,OAAO,GAAG,MAAM,CAElB,EAAE,CAAC,GAAG,CACJ;;;iDAGuC,EACvC,IAAI,CAAC,GAAG,EACR,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,MAAM,EACR,IAAI,CAEP,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACpB,CAAC;QACF,MAAM,EAAE,GAAG,qBAAqB,CAC9B,UAAU,CAAC,IAAI,EAAE,qBAAqB,EAAE,0BAA0B,EAAE;YAClE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAgB;YAC3D,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC/D,OAAO;SACR,CAAC,EACF,IAAI,CAAC,OAAO,CACb,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,EAAE,CAAC,GAAG,CACJ,sFAAsF,EACtF,QAAQ,EACR,GAAG,gBAAgB,GAAG,CAAC,EAAE,EACzB,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,EAAa,EAAE,IAAe,EAAE,UAAkB,EAAE,IAAuB;IACpG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,EAAE,CAAC,GAAG,CACJ;;mCAE+B,gBAAgB,+BAA+B,EAC9E,IAAI,CAAC,GAAG,EACR,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,EAAa,EAAE,IAAe,EAAE,KAAuB,EAAE,MAAc,EAAE,IAAY,EAAE,MAAc;IACrH,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,CAAU,CAAC;IAClE,IAAI,EAAE,CAAC,GAAG,CAAC,kFAAkF,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,uFAAuF;IACvF,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE,CACnD,kEAAkE,OAAO,sBAAsB,4BAA4B,oBAAoB,MAAM,GAAG,CAAC;IAC3J,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE,CACpD,8DAA8D,OAAO,mBAAmB,MAAM;iFACjB,CAAC;IAChF,IAAI,UAAiD,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5B,0FAA0F;QAC1F,UAAU,GAAG,EAAE,CAAC,GAAG,CACjB;;6BAEuB,SAAS;;gBAEtB,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;;gBAEjC,EACV,GAAG,SAAS,CAAC,MAAM,CAAC,EACpB,MAAM,CAAC,MAAM,GAAG,CAAC,EACjB,IAAI,EACJ,MAAM,CACkC,CAAC;IAC7C,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,8FAA8F;QAC9F,4FAA4F;QAC5F,0FAA0F;QAC1F,UAAU,GAAG,EAAE,CAAC,GAAG,CACjB;;qCAE+B,SAAS,CAAC,MAAM,QAAQ,SAAS;;gBAEtD,YAAY,CAAC,GAAG,CAAC;gBACjB,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;;gBAEjC,EACV,GAAG,SAAS,CAAC,MAAM,CAAC,EACpB,IAAI,EACJ,IAAI,CAAC,GAAG,EACR,MAAM,CACkC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1D,MAAM,KAAK,GAAG,2BAA2B,KAAK,CAAC,UAAU,GAAG,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,eAAe,CAAC,CAAU,EAAE,CAAC;YAChH,mBAAmB,CAAC,4BAA4B,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,2FAA2F;QAC3F,4FAA4F;QAC5F,IAAI,EAAE,CAAC,GAAG,CAAC,+DAA+D,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,IAAI,SAAS,WAAW,eAAe,GAAG,CAAC;QAC3D,MAAM,MAAM,GAAG,WAAW,QAAQ,GAAG,CAAC;QACtC,UAAU,GAAG,EAAE,CAAC,GAAG,CACjB,UAAU,OAAO,gBAAgB,MAAM,oBAAoB,KAAK;mBACnD,eAAe;gBAClB,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC;gBAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;gBAEzB,EACV,MAAM,EACN,MAAM,EACN,IAAI,EACJ,MAAM,EACN,MAAM,CACkC,CAAC;IAC7C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,EAAE,CAAC,GAAG,CAAC,qFAAqF,EAAE,CAAC,CAAC,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC/B,EAAE,CAAC,GAAG,CAAC,qFAAqF,EAAE,GAAG,MAAM,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,EAAa,EAAE,MAAmC;IAC3E,MAAM,IAAI,GAAG,MAAM;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACpD,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5I,EAAE,CAAC,GAAG;IACJ,4FAA4F;IAC5F;;;wFAGoF,EACpF,oBAAoB,EACpB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrC,EAAE,CAAC,GAAG,CAAC,qFAAqF,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACvI,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,IAAe,EACf,IAAmE,EACnE,MAAoC,EACpC,OAAU;IAEV,OAAO,WAAW,CAAC,KAAK,CAAC;QACvB,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI;QACJ,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"entity-grant-shape.js","sourceRoot":"","sources":["../src/entity-grant-shape.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,4BAA4B,EAC5B,WAAW,EACX,0BAA0B,EAC1B,2BAA2B,EAC3B,eAAe,EACf,OAAO,EACP,aAAa,GAKd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAO1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oHAAoH,4BAA4B,GAAG,CAAC;AAE1L,gGAAgG;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,2GAA2G;AAC3G,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,KAAK,GAAW,kBAAkB;IAChE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;QAC5E,MAAM,aAAa,CACjB,mBAAmB,EACnB,kEAAkE,sBAAsB,SAAS,KAAK,EAAE,EACxG,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAC/C,kGAAkG;AAClG,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAE1C,yEAAyE;AACzE,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,SAAS,UAAU,EAAE,EAAE,SAAS,OAAO,EAAE,CAAU,CAAC;AAEjH,iFAAiF;AAGjF,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,MAAM,MAAM,GAAG,CAAC,WAA8B,EAAY,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAE9F;;;GAGG;AACH,MAAM,SAAS,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAa,EAAE,SAAsB,EAAE,MAAiB,EAAE,WAA8B;IACzH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI;QACf,gBAAgB,CAAC,OAAO,EAAE,4BAA4B,EAAE,MAAM,CAAC;QAC/D,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;KACrF,EAAE,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AA8DD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAa,EACb,IAAe;IAEf,+FAA+F;IAC/F,mDAAmD;IACnD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,0BAA0B,EAAE,CAAC;IAC1E,oGAAoG;IACpG,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,wFAAwF;QACxF,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,6EAA6E;QAC7E,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACrD,oFAAoF;QACpF,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,EAAE,IAAI,IAAI,UAAU,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,IAAyB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,CAAC,IAAyB,EAAE,IAA2B,EAAE,IAA2C,EAAE,EAAE,CAAC,CAAC;YACrH,QAAQ;YACR,OAAO;YACP,mBAAmB;YACnB,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC;QACtC,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC;YACtB,kFAAkF;YAClF,gDAAgD;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;YAC9G,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,2FAA2F;YAC3F,IAAI,OAAO,GAAG,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC;gBACpG,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC7B,IAAI,OAAO;oBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvF,IAAI,CAAC,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAClF,IAAI,OAAO,EAAE,KAAK;oBAAE,MAAM,CAAC,4CAA4C;gBACvE,wFAAwF;gBACxF,mFAAmF;gBACnF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,IAAI,KAAK,IAAI,yBAAyB,EAAE,CAAC;oBACvC,mBAAmB,EAAE,CAAC;oBACtB,MAAM;gBACR,CAAC;gBACD,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACpF,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,EAAa;IACnC,OACE,EAAE,CAAC,GAAG,CAAC,yHAAyH,EAAE,mBAAmB,CAGtJ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAeD,8DAA8D;AAC9D,MAAM,eAAe,GAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AASlE;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAsB,IAAkB,EAAE,MAAc,EAAE,IAAU;IACrF,MAAM,KAAK,GAAQ,EAAE,CAAC;IACtB,kGAAkG;IAClG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAClB,EAAa,EACb,GAAW,EACX,MAAc,EACd,KAA4B,EAC5B,IAAU,EACV,MAAc,EACd,IAAY;IAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACxF,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB;oCACgC,SAAS,CAAC,MAAM,QAAQ,SAAS,SAAS,YAAY,CAAC,GAAG,CAAC,QAAQ,MAAM;;4BAEjF,4BAA4B;;cAE1C,EACV,GAAG,EACH,IAAI;IACJ,6FAA6F;IAC7F,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,MAAM,CACQ,CAAC;IACjB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,SAAS,KAAK,CACZ,EAAa,EACb,IAAe,EACf,UAAkB,EAClB,MAAc,EACd,IAAuB,EACvB,KAA4B,EAC5B,IAAU;IAEV,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,WAAW,CACtB,EAAE,EACF,IAAI,CAAC,GAAG,EACR,MAAM,EACN,KAAK,EACL,IAAI,EACJ;;;4EAGwE,EACxE,IAAI,CACL,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GACT,EAAE,CAAC,GAAG,CACJ;;;2BAGmB,EACnB,IAAI,EACJ,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,MAAM,CAEX,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,EAAE,CAAC,GAAG,CACJ,qFAAqF,EACrF,CAAC,CAAC,OAAO,EACT,WAAW,GAAG,EAAE,EAChB,CAAC,CAAC,MAAM,CACT,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,qBAAqB,CAC9B,UAAU,CAAC,IAAI,EAAE,uBAAuB,EAAE,2BAA2B,EAAE;YACrE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAgB;YAC3D,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC/D,KAAK;SACN,CAAC,EACF,IAAI,CAAC,OAAO,CACb,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CACb,EAAa,EACb,IAAe,EACf,UAAkB,EAClB,MAAc,EACd,IAAuB,EACvB,KAA4B,EAC5B,IAAU,EACV,KAAc;IAEd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IAC9C,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAEpB,EAAE,CAAC,GAAG,CACJ,2BAA2B,gBAAgB,CAAC,MAAM,GAAG,CAAC;;uCAEvB,gBAAgB,+BAA+B,EAC9E,QAAQ,EACR,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAEvB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACpB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,WAAW,CACtB,EAAE,EACF,IAAI,CAAC,GAAG,EACR,MAAM,EACN,KAAK,EACL,IAAI,EACJ;;kFAE8E,EAC9E,IAAI,CACL,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,4FAA4F;QAC5F,MAAM,OAAO,GAAG,MAAM,CAElB,EAAE,CAAC,GAAG,CACJ;;;iDAGuC,EACvC,IAAI,CAAC,GAAG,EACR,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,MAAM,EACR,IAAI,CAEP,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACpB,CAAC;QACF,MAAM,EAAE,GAAG,qBAAqB,CAC9B,UAAU,CAAC,IAAI,EAAE,qBAAqB,EAAE,0BAA0B,EAAE;YAClE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAgB;YAC3D,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC/D,OAAO;SACR,CAAC,EACF,IAAI,CAAC,OAAO,CACb,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,EAAE,CAAC,GAAG,CACJ,sFAAsF,EACtF,QAAQ,EACR,GAAG,gBAAgB,GAAG,CAAC,EAAE,EACzB,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,EAAa,EAAE,IAAe,EAAE,UAAkB,EAAE,IAAuB;IACpG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,EAAE,CAAC,GAAG,CACJ;;mCAE+B,gBAAgB,+BAA+B,EAC9E,IAAI,CAAC,GAAG,EACR,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CACf,EAAa,EACb,IAAe,EACf,KAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAU,EACV,KAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,CAAU,CAAC;IAClE,IAAI,EAAE,CAAC,GAAG,CAAC,kFAAkF,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,uFAAuF;IACvF,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE,CACnD,kEAAkE,OAAO,sBAAsB,4BAA4B,oBAAoB,MAAM,GAAG,CAAC;IAC3J,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE,CACpD,8DAA8D,OAAO,mBAAmB,MAAM;iFACjB,CAAC;IAChF,MAAM,QAAQ,GAAG,8DAA8D,CAAC;IAChF,yEAAyE;IACzE,IAAI,IAAiB,CAAC;IACtB,IAAI,KAA4C,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1D,+FAA+F;QAC/F,8FAA8F;QAC9F,iEAAiE;QACjE,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,GACxB,KAAK,CAAC,MAAM,KAAK,MAAM;YACrB,CAAC,CAAC,0FAA0F;gBAC1F,CAAC,gBAAgB,SAAS,yBAAyB,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9E,CAAC,CAAC,0FAA0F;gBAC1F,2FAA2F;gBAC3F,+FAA+F;gBAC/F,CAAC,wBAAwB,SAAS,CAAC,MAAM,QAAQ,SAAS,SAAS,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1G,IAAI,GAAG,EAAE,CAAC,GAAG,CACX,4CAA4C,QAAQ,QAAQ,KAAK,QAAQ,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;;;;gBAIhG,EACV,IAAI,EACJ,GAAG,WAAW,EACd,GAAG,IAAI,EACP,GAAG,EACH,MAAM,CACQ,CAAC;QACjB,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAG,CAAsC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,4BAA4B,EAAE,2BAA2B,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;QACrJ,2FAA2F;QAC3F,4FAA4F;QAC5F,2FAA2F;QAC3F,sCAAsC;QACtC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,wFAAwF,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1H,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,SAAS,WAAW,eAAe,GAAG,CAAC;QAC3D,MAAM,MAAM,GAAG,WAAW,QAAQ,GAAG,CAAC;QACtC,iGAAiG;QACjG,iGAAiG;QACjG,+FAA+F;QAC/F,wFAAwF;QACxF,mFAAmF;QACnF,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,GAAG,EAAE,GAAG,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,gBAAgB,MAAM;8BAC3E,eAAe,qBAAqB,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;2BAClG,KAAK;0BACN,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,QAAQ,eAAe;6BAC/F,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;0BACjB,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK;YAAE,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5F,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAgB,CAAC;QAC7C,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAE,CAAgD,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,EAAE,CAAC,GAAG,CAAC,qFAAqF,EAAE,CAAC,CAAC,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,IAAI;QAAE,EAAE,CAAC,GAAG,CAAC,qFAAqF,EAAE,GAAG,MAAM,CAAC,CAAC;IACnH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,EAAa,EAAE,KAAa,EAAE,QAAgB,EAAE,YAAqB;IACxF,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtJ,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,aAAa,CACjB,mBAAmB,EACnB,6CAA6C,KAAK,0FAA0F,EAC5I,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC,EAAE,CAC/G,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,+FAA+F;AAC/F,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CACxB,EAAa,EACb,IAAe,EACf,UAAkB,EAClB,MAA2C,EAC3C,GAAW,EACX,MAAoC;IAEpC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,sBAAsB,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;QAAE,OAAO;IAC5E,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;QACb,QAAQ,EAAE,0BAA0B;QACpC,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU;QACV,GAAG,MAAM;QACT,OAAO,EAAE,iCAAiC,UAAU,mBAAmB,MAAM,CAAC,KAAK,2BAA2B,MAAM,CAAC,QAAQ,eAAe;KAC7I,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAC;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAClD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD,yFAAyF;AACzF,MAAM,KAAK,GAAG,CAAC,CAAmB,EAAkI,EAAE,CACpK,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;AAE5D,sGAAsG;AACtG,SAAS,WAAW,CAAC,MAAoE,EAAE,IAAY,EAAE,KAAa;IACpH,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,CAAU,EAAE,CAAC;QACrI,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,gBAAgB,CAAC,EAAa,EAAE,MAAmC;IAC1E,MAAM,GAAG,GAAG,CAAC,CAAmB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,CAA8F,EAAE,EAAE;QAClH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,4BAA4B,EAAE,yBAAyB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC3I,OAAO,GAAG,KAAK,IAAI,QAAQ,IAAI,eAAe,EAAE,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CACrB,EAAE,CAAC,GAAG,CAAC,gHAAgH,EAAE,oBAAoB,CAG1I,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACvC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAAmB,EAAoG,EAAE,CAC1I,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAA0D;QACnE,GAAG,MAAM;aACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;aACtF,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,WAAW,CAAC,EAAE,CAA6B,CAAC,CAAC;QAClK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAA6B,CAAC;QAC5F,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAA6B,CAAC;QACrH,iGAAiG;QACjG,+FAA+F;QAC/F,mGAAmG;QACnG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAA6B,CAAC;QACtG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE,CAA6B,CAAC,CAAC;KACnI,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,EAAE,CAAC,GAAG;IACJ,4FAA4F;IAC5F;;;;;;;;;2GASuG,EACvG,4BAA4B,EAC5B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,IAAI,EACJ,4BAA4B,EAC5B,mBAAmB,CACpB,CAAC;IACF,EAAE,CAAC,GAAG,CACJ;sHACkH,EAClH,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,IAAe,EACf,IAAmE,EACnE,MAAoC,EACpC,OAAU;IAEV,OAAO,WAAW,CAAC,KAAK,CAAC;QACvB,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI;QACJ,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC"}

package/dist/entity-grant.d.ts

@@ -14,8 +14,25 @@
  */
 import type { SwitchSql } from './system-switch.js';
 type Params = [string, string, string];
-/** A reconciled grantee shape's protected key, stored on the scope's tuple spine. */
-export declare const GRANTEE_KEY_RELATION = "shape-grantee-key";
+/**
+ * A key only its shape may give, stored on the scope's tuple spine: every current and retired key of
+ * a reconciled `'grantee'` or binding shape (#2083, #1686). The stored relation keeps its first name.
+ */
+export declare const SHAPE_PROTECTED_KEY_RELATION = "shape-grantee-key";
+/**
+ * The entity types whose shape protects a `granted:<key>` relation, as `entity_type` rows. The
+ * subject range keeps it on the primary key: `shape:` rows only. One spelling for the two places
+ * that ask: the explicit writer below refuses the key on a record of such a type, and the
+ * permission walk stops at one for that key (`permission-eval.ts`, #2177).
+ *
+ * The range's bounds are parameters, not literals: the scope DO judges whether a statement writes
+ * by its text (`isWriteStatement`), and a `;` inside a literal would read as a second statement,
+ * counting every check that asks as a write.
+ */
+export declare function shapeProtectedTypesQuery(relation: string): {
+    sql: string;
+    params: [string, string, string, string];
+};
 /** The explicit scope-tuple write for admin/local grants and ctx.grant, behind one shape guard. */
 export declare function writeExplicitTupleIn(db: SwitchSql, subject: string, relation: string, object: string, mode: {
     kind: 'replace';

package/dist/entity-grant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-grant.d.ts","sourceRoot":"","sources":["../src/entity-grant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,KAAK,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvC,qFAAqF;AACrF,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AAgBxD,mGAAmG;AACnG,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,SAAS,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GAC1E,IAAI,CAcN;AAQD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOnH;AAED,mGAAmG;AACnG,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,GACT;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAA;CAAE,CAM9C"}
+{"version":3,"file":"entity-grant.d.ts","sourceRoot":"","sources":["../src/entity-grant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,KAAK,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,4BAA4B,sBAAsB,CAAC;AAEhE;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAMpH;AAiBD,mGAAmG;AACnG,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,SAAS,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GAC1E,IAAI,CAcN;AAQD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOnH;AAED,mGAAmG;AACnG,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,GACT;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAA;CAAE,CAM9C"}