@thomasfosterau/pulpit 0.0.0 → 0.1.0

package/dist/internal/reference-columns.d.ts

@@ -0,0 +1,80 @@
+/**
+ * **The reference leaf's privacy arm** (`PUB-009`), shared by `./subtype`
+ * and `./edges` so a reference row is read one way: as a list filter
+ * ({@link referenceListFilter}, behind `referencePrivacyFilter`, the subtype
+ * `list` and `./edges`' `endpointFilter`) and as a row predicate
+ * ({@link canViewReferenceRow}, behind `defineSubtype`'s `visibleRow` and
+ * `./edges`' `canViewEndpoint`). Before pulpit#92 each module spelled the
+ * predicate for itself.
+ *
+ * The row's facts are read by `ownedFacts`, so an owner-like value that is
+ * not a string reads as no owner and never reaches the follower seam
+ * (pulpit#85, pulpit#100).
+ *
+ * Internal: not a package entry point (absent from `package.json`
+ * `exports`) and excluded from the generated API docs (`docgen.json`).
+ * Typed structurally, so it never imports `./subtype`.
+ *
+ * @internal
+ */
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import { type ListFilter } from "../filter.ts";
+import type { ColumnValue } from "../version-chain.ts";
+/** The reference access declaration, structurally (`./subtype`'s reference `LeafAccess` fits). */
+interface ReferenceColumns {
+    readonly followersOfColumn?: string | undefined;
+}
+/** The parts of `./subtype`'s viewer, policy, follower seam and read scope the arm reads, structurally. */
+interface Account {
+    readonly id: string;
+}
+interface PrivateRung<A> {
+    readonly canViewPrivate: (account: A) => boolean;
+}
+interface IsFollower<R> {
+    readonly isFollower: (followerId: string, ownerId: string) => Effect.Effect<boolean, never, R>;
+}
+type Scope<Following> = {
+    readonly kind: "all";
+} | {
+    readonly kind: "public";
+} | {
+    readonly kind: "member";
+    readonly userId: string;
+    readonly following: Following;
+};
+/**
+ * The reference privacy arm as a list filter: `always` over a view without a
+ * `visibility` column or for the view-private rung (`scope.kind === "all"`);
+ * otherwise `visibility = 'public'`, and for a signed-in viewer also
+ * `visibility = 'followers' AND (<followersOfColumn> = <viewer> OR
+ * <followersOfColumn> IN (<following>))` when the leaf declares that column
+ * and the view carries it (pulpit#92): the account the column names and its
+ * followers read its `followers` rows. Its `private` rows stay the
+ * view-private rung's alone. Never throws.
+ *
+ * @internal
+ */
+export declare const referenceListFilter: <Following>(access: ReferenceColumns, viewColumns: ReadonlySet<string>, scope: Scope<Following>) => ListFilter<Following>;
+/**
+ * The reference privacy arm as a row predicate, the same facts as
+ * {@link referenceListFilter}: a view without a `visibility` column shows
+ * the row; otherwise it shows when its visibility is exactly `public`, to
+ * the view-private rung, or, when it is exactly `followers` and the leaf
+ * declares a followers column the view carries, to the signed-in account
+ * that column names and to its followers, as the follower seam answers
+ * (pulpit#92). That account's `private` rows stay the view-private rung's
+ * alone. A column value that is not a string names no account, so it never
+ * matches the viewer and the seam is never asked about it (pulpit#85,
+ * pulpit#100). Anything else is hidden, which the
+ * caller answers as `NodeNotFound` (`SEC-AUTH-ENUM-001`). The soft-delete
+ * axis is the caller's. Never fails.
+ *
+ * @internal
+ */
+export declare const canViewReferenceRow: <A extends Account, R>(access: ReferenceColumns, viewColumns: ReadonlySet<string>, viewer: Option.Option<A>, policy: PrivateRung<A>, followers: IsFollower<R>, row: {
+    readonly [column: string]: ColumnValue;
+}) => Effect.Effect<boolean, never, R>;
+export {};
+//# sourceMappingURL=reference-columns.d.ts.map

package/dist/internal/reference-columns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-columns.d.ts","sourceRoot":"","sources":["../../src/internal/reference-columns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,kGAAkG;AAClG,UAAU,gBAAgB;IAExB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED,2GAA2G;AAC3G,UAAU,OAAO;IACf,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AACD,UAAU,WAAW,CAAC,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC;CAClD;AACD,UAAU,UAAU,CAAC,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;CAChG;AACD,KAAK,KAAK,CAAC,SAAS,IAChB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC;AAkBxF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,UACnC,gBAAgB,eACX,WAAW,CAAC,MAAM,CAAC,SACzB,KAAK,CAAC,SAAS,CAAC,KACtB,UAAU,CAAC,SAAS,CAqBtB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,GAAI,CAAC,SAAS,OAAO,EAAE,CAAC,UAC9C,gBAAgB,eACX,WAAW,CAAC,MAAM,CAAC,UACxB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAChB,WAAW,CAAC,CAAC,CAAC,aACX,UAAU,CAAC,CAAC,CAAC,OACnB;IAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,KAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CA8BjC,CAAC"}

package/dist/internal/reference-columns.js

@@ -0,0 +1,102 @@
+/**
+ * **The reference leaf's privacy arm** (`PUB-009`), shared by `./subtype`
+ * and `./edges` so a reference row is read one way: as a list filter
+ * ({@link referenceListFilter}, behind `referencePrivacyFilter`, the subtype
+ * `list` and `./edges`' `endpointFilter`) and as a row predicate
+ * ({@link canViewReferenceRow}, behind `defineSubtype`'s `visibleRow` and
+ * `./edges`' `canViewEndpoint`). Before pulpit#92 each module spelled the
+ * predicate for itself.
+ *
+ * The row's facts are read by `ownedFacts`, so an owner-like value that is
+ * not a string reads as no owner and never reaches the follower seam
+ * (pulpit#85, pulpit#100).
+ *
+ * Internal: not a package entry point (absent from `package.json`
+ * `exports`) and excluded from the generated API docs (`docgen.json`).
+ * Typed structurally, so it never imports `./subtype`.
+ *
+ * @internal
+ */
+import * as Effect from "effect/Effect";
+import * as Match from "effect/Match";
+import * as Option from "effect/Option";
+import { always, and, eq, isIn, or } from "../filter.js";
+import { ownedFacts } from "./owned-columns.js";
+/** The reference axis's one column; a view without it rides no privacy axis. */
+const VISIBILITY = "visibility";
+/**
+ * The column whose followers may read a `followers` row, when the leaf
+ * declares one and the view carries it. A declared column the view lacks
+ * reads as none: the followers arm then matches nothing (fail closed).
+ */
+const followersColumn = (access, viewColumns) => Option.filter(Option.fromUndefinedOr(access.followersOfColumn), (column) => viewColumns.has(column));
+/**
+ * The reference privacy arm as a list filter: `always` over a view without a
+ * `visibility` column or for the view-private rung (`scope.kind === "all"`);
+ * otherwise `visibility = 'public'`, and for a signed-in viewer also
+ * `visibility = 'followers' AND (<followersOfColumn> = <viewer> OR
+ * <followersOfColumn> IN (<following>))` when the leaf declares that column
+ * and the view carries it (pulpit#92): the account the column names and its
+ * followers read its `followers` rows. Its `private` rows stay the
+ * view-private rung's alone. Never throws.
+ *
+ * @internal
+ */
+export const referenceListFilter = (access, viewColumns, scope) => {
+    if (!viewColumns.has(VISIBILITY))
+        return always;
+    const column = followersColumn(access, viewColumns);
+    return Match.value(scope).pipe(Match.discriminatorsExhaustive("kind")({
+        all: () => always,
+        public: () => eq(VISIBILITY, "public"),
+        member: (member) => Option.match(column, {
+            onNone: () => eq(VISIBILITY, "public"),
+            onSome: (followed) => or(eq(VISIBILITY, "public"), and(eq(VISIBILITY, "followers"), or(eq(followed, member.userId), isIn(followed, member.following)))),
+        }),
+    }));
+};
+/**
+ * The reference privacy arm as a row predicate, the same facts as
+ * {@link referenceListFilter}: a view without a `visibility` column shows
+ * the row; otherwise it shows when its visibility is exactly `public`, to
+ * the view-private rung, or, when it is exactly `followers` and the leaf
+ * declares a followers column the view carries, to the signed-in account
+ * that column names and to its followers, as the follower seam answers
+ * (pulpit#92). That account's `private` rows stay the view-private rung's
+ * alone. A column value that is not a string names no account, so it never
+ * matches the viewer and the seam is never asked about it (pulpit#85,
+ * pulpit#100). Anything else is hidden, which the
+ * caller answers as `NodeNotFound` (`SEC-AUTH-ENUM-001`). The soft-delete
+ * axis is the caller's. Never fails.
+ *
+ * @internal
+ */
+export const canViewReferenceRow = (access, viewColumns, viewer, policy, followers, row) => {
+    if (!viewColumns.has(VISIBILITY))
+        return Effect.succeed(true);
+    const visibility = row[VISIBILITY];
+    if (visibility === "public")
+        return Effect.succeed(true);
+    if (Option.isNone(viewer))
+        return Effect.succeed(false);
+    const account = viewer.value;
+    if (policy.canViewPrivate(account))
+        return Effect.succeed(true);
+    if (visibility !== "followers")
+        return Effect.succeed(false);
+    return Option.match(followersColumn(access, viewColumns), {
+        onNone: () => Effect.succeed(false),
+        onSome: (column) => Option.match(ownedFacts({
+            ownerColumn: column,
+            visibilityColumn: VISIBILITY,
+            draftColumn: Option.none(),
+            moderationColumn: Option.none(),
+        }, row).ownerId, {
+            onNone: () => Effect.succeed(false),
+            onSome: (ownerId) => ownerId === account.id
+                ? Effect.succeed(true)
+                : followers.isFollower(account.id, ownerId),
+        }),
+    });
+};
+//# sourceMappingURL=reference-columns.js.map

package/dist/internal/reference-columns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-columns.js","sourceRoot":"","sources":["../../src/internal/reference-columns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAmB,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAuBhD,gFAAgF;AAChF,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC;;;;GAIG;AACH,MAAM,eAAe,GAAG,CACtB,MAAwB,EACxB,WAAgC,EACT,EAAE,CACzB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CACzE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CACxB,CAAC;AAEJ;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAAwB,EACxB,WAAgC,EAChC,KAAuB,EACA,EAAE;IACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAC5B,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACrC,GAAG,EAAE,GAA0B,EAAE,CAAC,MAAM;QACxC,MAAM,EAAE,GAA0B,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC7D,MAAM,EAAE,CAAC,MAAM,EAAyB,EAAE,CACxC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;YACnB,MAAM,EAAE,GAA0B,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;YAC7D,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACnB,EAAE,CACA,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EACxB,GAAG,CACD,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAC3B,EAAE,CAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAC7E,CACF;SACJ,CAAC;KACL,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAAwB,EACxB,WAAgC,EAChC,MAAwB,EACxB,MAAsB,EACtB,SAAwB,EACxB,GAA+C,EACb,EAAE;IACpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7B,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;QACxD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,KAAK,CACV,UAAU,CACR;YACE,WAAW,EAAE,MAAM;YACnB,gBAAgB,EAAE,UAAU;YAC5B,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,IAAI,EAAE;SAChC,EACD,GAAG,CACJ,CAAC,OAAO,EACT;YACE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YACnC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAClB,OAAO,KAAK,OAAO,CAAC,EAAE;gBACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBACtB,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC;SAChD,CACF;KACJ,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/moderation.d.ts

@@ -0,0 +1,392 @@
+/**
+ * **The moderation workflow** — the rules that move a leaf's row between
+ * moderation states, the threshold grading of a classifier's scores, the
+ * review-queue filter, and member reports.
+ *
+ * The behavioural spec is gardeneria's comment moderation
+ * (`apps/api/src/operations/comments.ts`' `moderateCommentE`), its moderation
+ * plane (`apps/api/src/operations/moderation.ts`) and its threshold grader
+ * (`packages/jobs/src/moderation/thresholds.ts`), with their tests; a
+ * `#NNN` here names a gardeneria issue.
+ *
+ * ## The model (owner decisions on pulpit#51)
+ *
+ * The kernel owns the rules; the transport (a queue, the classifier run, the
+ * API-call ledger, moderator notifications) stays the application's.
+ *
+ * - **The state lives on the version row**, in the leaf's
+ *   `moderationState` column ({@link ModerationState}): a decision is an
+ *   appended version, so history shows who decided what, and when.
+ * - **Transitions.** Every new row starts `pending`. Only the moderate rung
+ *   changes the state: `pending → approved | rejected`, re-moderation
+ *   between `approved` and `rejected`, and re-review back to `pending`
+ *   ({@link isModerationTransition}). A write by anyone else that changes the
+ *   state fails `WriteRejected`.
+ * - **Re-review triggers are the leaf's**: an edit that changes one of its
+ *   declared `reReviewOn` attributes sends an `approved` row back to
+ *   `pending` ({@link ModerationDeclaration}).
+ * - **Owners withdraw their own content** by deleting it: the owned write
+ *   gate admits its owner in every moderation state, and a tombstone needs
+ *   no decision.
+ *
+ * {@link moderationHook} enforces the rules as a before hook (`./subtype`'s
+ * lifecycle seam), so every write path honours them, and
+ * {@link defineModeration}'s `moderate` is the decision itself.
+ *
+ * ## Grading and the queue
+ *
+ * {@link gradeScores} turns a classifier's per-category scores (shaped like
+ * effect-ai-ext's `ModerationModel` output; pulpit doesn't import it) into a
+ * verdict against the application's thresholds. Classification itself runs
+ * from an application's after hook. The review queue is the leaf's pending
+ * rows ({@link reviewQueueFilter}) plus the open member reports
+ * ({@link defineReports}), both the moderate rung's alone.
+ *
+ * @copyright Thomas Foster
+ * @module pulpit/moderation
+ * @since 0.1.0
+ */
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Result from "effect/Result";
+import * as Schema from "effect/Schema";
+import type { BoundBudget } from "./budgets.ts";
+import { type ListFilter } from "./filter.ts";
+import { ModerationState } from "./publication.ts";
+import { Forbidden, Unauthorized, WriteRejected, type AccessPolicy, type BeforeWriteEvent, type BeforeWriteHook, type Page, type SubtypeOps, type Viewer } from "./subtype.ts";
+import type { ChainPatch, ChainWrite, NodeNotFound, Precondition, StaleVersion, VersionConflict } from "./version-chain.ts";
+/**
+ * Whether a row may move from `from` (none for a row being created) to
+ * `to`: a new row only to `pending`; an existing one to any other state
+ * (decision, re-moderation, re-review). Staying put is no transition.
+ *
+ * @example
+ * ```ts
+ * import { strictEqual } from "node:assert";
+ * import * as Option from "effect/Option";
+ * import { isModerationTransition } from "@thomasfosterau/pulpit/moderation";
+ *
+ * strictEqual(isModerationTransition(Option.none(), "pending"), true);
+ * strictEqual(isModerationTransition(Option.none(), "approved"), false);
+ * strictEqual(isModerationTransition(Option.some("pending"), "approved"), true);
+ * strictEqual(isModerationTransition(Option.some("approved"), "approved"), false);
+ * ```
+ *
+ * @since 0.1.0
+ */
+export declare const isModerationTransition: (from: Option.Option<ModerationState>, to: ModerationState) => boolean;
+/**
+ * A leaf's moderation columns and its re-review triggers.
+ *
+ * @since 0.1.0
+ */
+export interface ModerationDeclaration {
+    /** The state column ({@link ModerationState}); conventionally `moderationState`. */
+    readonly column: string;
+    /** The column a decision stamps with its instant, when the leaf has one. */
+    readonly moderatedAtColumn: Option.Option<string>;
+    /** The column a decision stamps with the deciding account's id, when the leaf has one. */
+    readonly moderatedByColumn: Option.Option<string>;
+    /**
+     * The attributes whose change sends an `approved` row back to `pending`
+     * (a comment's `body`, an image's file). Empty, an approval survives
+     * every edit.
+     */
+    readonly reReviewOn: ReadonlyArray<string>;
+}
+/**
+ * The declaration with the conventional column names.
+ *
+ * @since 0.1.0
+ */
+export declare const moderatedColumns: (reReviewOn: ReadonlyArray<string>) => ModerationDeclaration;
+/**
+ * The moderation rules applied to one write: the patch the write should
+ * apply, or the reason it is refused. Pure, so every case is testable
+ * without a chain.
+ *
+ * - A **create** stores `pending`; a patch asking for another state is refused.
+ * - A **delete** is untouched (withdrawal needs no decision).
+ * - A **`restoreVersion`** by anyone but the moderate rung carries the
+ *   prior row's moderation columns over the restored version's, so an old
+ *   approval never comes back with old content.
+ * - A patch that **changes the state** is a decision: refused below the
+ *   moderate rung or outside {@link isModerationTransition}, and otherwise
+ *   stamped (`moderatedAtColumn`, `moderatedByColumn`). A patch that sets
+ *   the state it already has changes nothing.
+ * - Otherwise, an edit that changes a `reReviewOn` attribute of an
+ *   `approved` row sends it back to `pending`.
+ *
+ * @since 0.1.0
+ */
+export declare const moderatePatch: (event: BeforeWriteEvent, declaration: ModerationDeclaration, policy: AccessPolicy, now: Date) => Result.Result<ChainPatch, string>;
+/**
+ * The moderation rules ({@link moderatePatch}) as a before hook for the
+ * leaf's `LifecycleHooks`: every write applies them, and a refusal
+ * fails the write with `WriteRejected`, appending nothing. Compose it first,
+ * so later hooks see the state it settled.
+ *
+ * @since 0.1.0
+ */
+export declare const moderationHook: <E = never, R = never>(declaration: ModerationDeclaration, policy: AccessPolicy) => BeforeWriteHook<E, R>;
+/**
+ * The operations {@link defineModeration} produces.
+ *
+ * @since 0.1.0
+ */
+export interface ModerationOps<E, R> {
+    /**
+     * Record a decision: append the state through the target's own `update`,
+     * which runs the {@link moderationHook} (stamping it). Fails
+     * `Unauthorized` when anonymous and `Forbidden` below the moderate rung,
+     * before anything is read, then as the target's `update` does
+     * (`NodeNotFound` for a missing or tombstoned row, `StaleVersion`, and
+     * `WriteRejected` from its hooks).
+     */
+    readonly moderate: (id: string, decision: ModerationState, precondition?: Precondition) => Effect.Effect<ChainWrite, Unauthorized | Forbidden | NodeNotFound | StaleVersion | VersionConflict | WriteRejected | E, R>;
+}
+/**
+ * Bind a leaf's moderation decision. The leaf's hooks must include
+ * {@link moderationHook} with the same declaration: it is what admits the
+ * decision and stamps it.
+ *
+ * @since 0.1.0
+ */
+export declare const defineModeration: <Resource, E, R>(definition: {
+    readonly target: SubtypeOps<Resource, E, R>;
+    readonly declaration: ModerationDeclaration;
+    readonly viewer: Effect.Effect<Viewer, never, R>;
+    readonly policy: AccessPolicy;
+}) => ModerationOps<E, R>;
+/**
+ * The review queue's leaf half as a list filter: the `pending` rows, for
+ * the moderate rung only (`never` for anyone else). Pass it as a list
+ * request's `where`; the leaf's own read arms still apply.
+ *
+ * @since 0.1.0
+ */
+export declare const reviewQueueFilter: (viewer: Viewer, policy: AccessPolicy, column?: string) => ListFilter<never>;
+/**
+ * A classifier's report, shaped like effect-ai-ext's `ModerationModel`
+ * output: its own flag, and a score in `[0, 1]` per category it assessed.
+ * A category it didn't assess is absent, never `0`.
+ *
+ * @since 0.1.0
+ */
+export interface ModerationScores {
+    readonly flagged: boolean;
+    readonly categoryScores: {
+        readonly [category: string]: number;
+    };
+}
+/**
+ * The band a flagged row lands in, from its worst breach.
+ *
+ * @since 0.1.0
+ */
+export declare const ModerationPriority: Schema.Literals<readonly ["low", "medium", "high", "urgent"]>;
+/**
+ * The {@link ModerationPriority} literal union.
+ *
+ * @since 0.1.0
+ */
+export type ModerationPriority = typeof ModerationPriority.Type;
+/**
+ * A graded report.
+ *
+ * @since 0.1.0
+ */
+export interface ModerationGrade {
+    /** The classifier's own flag, or a threshold breach. */
+    readonly isFlagged: boolean;
+    /** The categories that cleared their threshold, sorted. */
+    readonly exceeded: ReadonlyArray<string>;
+    /** The highest score across every category, or `0` when none was scored. */
+    readonly topScore: number;
+    readonly priority: ModerationPriority;
+}
+/**
+ * The bar a category with no configured threshold is graded against;
+ * strictly above it flags. A starting point to tune, not a measured value.
+ *
+ * @since 0.1.0
+ */
+export declare const DEFAULT_MODERATION_THRESHOLD = 0.5;
+/**
+ * Grade a classifier's scores against the leaf's thresholds (a category
+ * missing from `thresholds` grades against `defaultThreshold`). A category
+ * breaches when its score is strictly above its bar; an unassessed one is
+ * absent and can't breach. The classifier's own flag is never overridden
+ * downward, only added to (raise a category's bar to `1` to ignore it). The
+ * band is the worst breaching score's, or the top score's for a flag with
+ * no breach. Pure.
+ *
+ * @example
+ * ```ts
+ * import { deepStrictEqual } from "node:assert";
+ * import { gradeScores } from "@thomasfosterau/pulpit/moderation";
+ *
+ * deepStrictEqual(
+ *   gradeScores({ flagged: false, categoryScores: { hate: 0.8, spam: 0.3 } }, { spam: 0.2 }),
+ *   { isFlagged: true, exceeded: ["hate", "spam"], topScore: 0.8, priority: "high" },
+ * );
+ * ```
+ *
+ * @since 0.1.0
+ */
+export declare const gradeScores: (scores: ModerationScores, thresholds: {
+    readonly [category: string]: number;
+}, defaultThreshold?: number) => ModerationGrade;
+/**
+ * A report's status: `open` until the moderate rung resolves it (acted on)
+ * or dismisses it.
+ *
+ * @since 0.1.0
+ */
+export declare const ReportStatus: Schema.Literals<readonly ["open", "resolved", "dismissed"]>;
+/**
+ * The {@link ReportStatus} literal union.
+ *
+ * @since 0.1.0
+ */
+export type ReportStatus = typeof ReportStatus.Type;
+/**
+ * One member report, filed against a node.
+ *
+ * @since 0.1.0
+ */
+export interface ReportRow {
+    readonly id: string;
+    readonly targetId: string;
+    readonly targetType: string;
+    readonly reporterId: string;
+    /** The application's reason code (`spam`, `harassment`, …). */
+    readonly reason: string;
+    readonly details: Option.Option<string>;
+    readonly status: ReportStatus;
+    readonly filedAt: Date;
+    readonly resolvedAt: Option.Option<Date>;
+    readonly resolvedBy: Option.Option<string>;
+    readonly resolutionNote: Option.Option<string>;
+}
+/**
+ * The write that closes an open report.
+ *
+ * @since 0.1.0
+ */
+export interface ReportResolution {
+    readonly status: Exclude<ReportStatus, "open">;
+    readonly resolvedAt: Date;
+    readonly resolvedBy: string;
+    readonly resolutionNote: Option.Option<string>;
+}
+/**
+ * The report table an application supplies. It applies no policy, never
+ * opens a transaction, and fails only with its `E` (README → Seams).
+ *
+ * @since 0.1.0
+ */
+export interface ReportStore<E, R> {
+    readonly mintId: Effect.Effect<string, E, R>;
+    readonly insert: (row: ReportRow) => Effect.Effect<void, E, R>;
+    readonly get: (id: string) => Effect.Effect<Option.Option<ReportRow>, E, R>;
+    /** One row, `FOR UPDATE`, so two resolutions serialise. */
+    readonly lock: (id: string) => Effect.Effect<Option.Option<ReportRow>, E, R>;
+    readonly close: (id: string, resolution: ReportResolution) => Effect.Effect<void, E, R>;
+    /**
+     * The page under `where`, newest first (`filed_at DESC, id DESC`), with
+     * the unpaged total. `where` reads `reporterId`, `targetId`, `targetType`
+     * and `status`.
+     */
+    readonly list: (query: {
+        readonly where: ListFilter<never>;
+        readonly limit: number;
+        readonly offset: number;
+    }) => Effect.Effect<Page<ReportRow>, E, R>;
+}
+declare const ReportNotFound_base: Schema.Class<ReportNotFound, Schema.TaggedStruct<"ReportNotFound", {
+    readonly id: Schema.String;
+}>, import("effect/Cause").YieldableError & {
+    readonly brand: unique symbol;
+}>;
+/**
+ * No report at that id the viewer may read: the wire's 404.
+ *
+ * @since 0.1.0
+ */
+export declare class ReportNotFound extends ReportNotFound_base {
+}
+declare const ReportClosed_base: Schema.Class<ReportClosed, Schema.TaggedStruct<"ReportClosed", {
+    readonly id: Schema.String;
+    readonly status: Schema.Literals<readonly ["open", "resolved", "dismissed"]>;
+}>, import("effect/Cause").YieldableError & {
+    readonly brand: unique symbol;
+}>;
+/**
+ * The report is already resolved or dismissed: the wire's 409.
+ *
+ * @since 0.1.0
+ */
+export declare class ReportClosed extends ReportClosed_base {
+}
+/**
+ * The operations {@link defineReports} produces.
+ *
+ * @since 0.1.0
+ */
+export interface ReportOps<E, R> {
+    /**
+     * File a report against `targetId`. Fails `Unauthorized` when anonymous
+     * and `NodeNotFound` when the reporter can't `get` the target, never
+     * `Forbidden` (`SEC-AUTH-ENUM-001`), and `WriteRejected` (`RATE_LIMITED`)
+     * when the declared budget is spent. The answer is the reporter's own
+     * report: never whether others reported the same node.
+     */
+    readonly file: (input: {
+        readonly targetId: string;
+        readonly reason: string;
+        readonly details: Option.Option<string>;
+    }) => Effect.Effect<{
+        readonly id: string;
+    }, Unauthorized | NodeNotFound | WriteRejected | E, R>;
+    /** One report, for its reporter or the moderate rung; `ReportNotFound` otherwise. */
+    readonly get: (id: string) => Effect.Effect<ReportRow, ReportNotFound | E, R>;
+    /**
+     * One page, newest first: every report for the moderate rung (the queue's
+     * report half, by `status: open`), the viewer's own for anyone else.
+     */
+    readonly list: (request: {
+        readonly targetId: Option.Option<string>;
+        readonly status: Option.Option<ReportStatus>;
+        readonly limit: number;
+        readonly offset: number;
+    }) => Effect.Effect<Page<ReportRow>, E, R>;
+    /**
+     * Close an open report as `resolved` or `dismissed`. Fails `Unauthorized`
+     * / `Forbidden` below the moderate rung, before the report is read, then
+     * `ReportNotFound` and `ReportClosed`. Acting on the node is the target's
+     * own operation (`moderate`, a delete), called separately.
+     */
+    readonly resolve: (id: string, outcome: Exclude<ReportStatus, "open">, note: Option.Option<string>) => Effect.Effect<void, Unauthorized | Forbidden | ReportNotFound | ReportClosed | E, R>;
+}
+/**
+ * Bind member reports against one leaf: filed by a signed-in account that
+ * can read the target, read by their reporter and the moderate rung, and
+ * resolved by the moderate rung.
+ *
+ * @since 0.1.0
+ */
+export declare const defineReports: <Resource, E, R>(definition: {
+    readonly target: SubtypeOps<Resource, E, R>;
+    readonly reports: ReportStore<E, R>;
+    readonly viewer: Effect.Effect<Viewer, never, R>;
+    readonly policy: AccessPolicy;
+    /**
+     * A write budget on `file` (pulpit#199, `./budgets`' `bindBudget`), spent
+     * as the `file` action once the reporter can read the target and before
+     * the report is stored. Omitted, reports are unthrottled.
+     */
+    readonly budget?: BoundBudget<E, R> | undefined;
+}) => ReportOps<E, R>;
+export {};
+//# sourceMappingURL=moderation.d.ts.map

package/dist/moderation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"moderation.d.ts","sourceRoot":"","sources":["../src/moderation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAGH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,SAAS,EACT,YAAY,EACZ,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,MAAM,EAEZ,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EAEV,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAI5B;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,sBAAsB,SAC3B,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAChC,eAAe,KAClB,OACsF,CAAC;AAE1F;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,0FAA0F;IAC1F,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,eAAgB,aAAa,CAAC,MAAM,CAAC,KAAG,qBAKnE,CAAC;AA2DH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,aAAa,UACjB,gBAAgB,eACV,qBAAqB,UAC1B,YAAY,OACf,IAAI,KACR,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAgBlC,CAAC;AA2CF;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,eACpC,qBAAqB,UAC1B,YAAY,KACnB,eAAe,CAAC,CAAC,EAAE,CAAC,CAYrB,CAAC;AAIH;;;;GAIG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,EAAE,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,EAAE,CACjB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,eAAe,EACzB,YAAY,CAAC,EAAE,YAAY,KACxB,MAAM,CAAC,MAAM,CAChB,UAAU,EACV,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,GAAG,aAAa,GAAG,CAAC,EAC5F,CAAC,CACF,CAAC;CACH;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,QAAQ,EAAE,CAAC,EAAE,CAAC,cAAc;IAC3D,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,KAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAepB,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,WACpB,MAAM,UACN,YAAY,WACZ,MAAM,KACb,UAAU,CAAC,KAAK,CAAgF,CAAC;AAIpG;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE;QAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAClE;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,+DAAuD,CAAC;AACvF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AAEhE;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AAED;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAMhD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,WAAW,WACd,gBAAgB,cACZ;IAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,qBACjC,MAAM,KACvB,eAmBF,CAAC;AAIF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,6DAAqD,CAAC;AAC/E;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAChD;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,EAAE,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;CAC5C;;;;oBASmB,OAAO,MAAM;;AAPjC;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,mBAKlC;CAAG;;;;;oBASe,OAAO,MAAM;;AAPjC;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,iBAMhC;CAAG;AAEL;;;;GAIG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;KACzC,KAAK,MAAM,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjG,qFAAqF;IACrF,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,CAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,EACtC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;CAC3F;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,EAAE,CAAC,EAAE,CAAC,cAAc;IACxD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;;OAIG;IAEH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;CACjD,KAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAwFjB,CAAC"}