@vibeorm/scoped-conformance 0.1.0-alpha.0

package/README.md

@@ -0,0 +1,81 @@
+# @vibeorm/scoped-conformance
+
+The binding-agnostic conformance artifact for the **tenant-scoped database handle** — one shared
+contract, two bindings:
+
+1. **VibeORM** — first-class `$scoped` on the client (this repository; see `docs/queries.md`,
+   "Tenant scoping").
+2. **Prisma** — a client-extension package (`$extends` query hooks) in pekka/shared.
+
+Both bindings consume THIS package: the same fixture schema, seed, tenancy map, rewrite vectors
+and behavior checklist — so the contract cannot drift between them.
+
+## The contract (normative)
+
+Input: base client + per-model tenancy map + scope value:
+
+```ts
+base.$scoped({
+  scope: "ws_123",                      // string | null
+  models: {
+    Call:        { column: "tenantId" },
+    Currency:    "none",                // global — passes through untouched
+    Leg:         { through: "call" },   // tenant lives on the parent
+  },
+});
+```
+
+Behavior per call shape (scoped models; `"none"` models pass through):
+
+- `findMany`/`findFirst`/`count`/`aggregate`/`groupBy`: scope predicate AND-merged into `where`.
+- `findUnique`: REWRITTEN to `findFirst` with `{ ...uniqueWhere, [column]: scope }`; foreign row → `null`.
+- `create`/`createMany`: `[column]: scope` auto-filled; explicit DIFFERENT value throws.
+- `update`/`delete` (unique where): compare-and-write — the predicate joins the write's WHERE;
+  a foreign row behaves exactly like a missing one (`null`/not-found sentinel); never touches
+  another tenant's row.
+- `upsert`, nested writes (`create`/`update`/`delete`/`connect`/`connectOrCreate`/`disconnect`/`set`),
+  relation filters in `where`/`orderBy`, `include`/`select` nesting, `_count`, `having`:
+  DENY-BY-DEFAULT over the whole query AST — every node touching a scoped model gets the
+  predicate injected where semantics allow, else the call REFUSES at build time with a typed
+  error naming model + node path. Unknown argument shapes REFUSE. Nested `connect` on a scoped
+  model: verified-lookup rewrite (the predicate joins the resolution where, inside the write's
+  own transaction) — per-model `nested: "refuse"` disables reference verbs instead.
+- `$transaction` (both forms): the tx handle INHERITS the scope.
+- Raw SQL (`$queryRaw`/`$executeRaw`/unsafe): REFUSED on the scoped handle (typed error pointing
+  at the unscoped escape — the BASE client). No `$raw`-with-tenant-param tier exists.
+
+Rules:
+
+- `scope: null` → every scoped-model call refuses (`"none"` models still pass).
+- NULL tenant columns: the scoped handle matches ONLY `column = scope`. NULL rows (unassigned
+  inventory) are invisible to all scoped handles, reachable only via the base client. Scoped
+  create with explicit `null` throws.
+- `{ through }`: supported where the binding's filter language expresses the join predicate;
+  shapes that cannot be expressed refuse instead (each binding documents its list).
+- One typed error class: `ScopedQueryError { model, path, reason }` — matched structurally on
+  `name === "ScopedQueryError"` plus the triple, NEVER on message text or `instanceof`.
+- The scoped handle's TYPE equals the base client's (minus raw methods) — app code needs zero
+  changes.
+- Scope MAY later become a map of named axes (`{ owner: "c_1", partner: "m_2" }`); the single
+  axis stays the simple default spelling. Not built yet — do not design it away.
+
+## What this package ships
+
+| Export | What it is |
+|---|---|
+| `SCOPED_FIXTURE_PRISMA` / `SCOPED_FIXTURE_IR` | The canonical fixture schema (text + neutral structural IR): `Call { column }`, `Leg { through }`, `Currency "none"` (nullable to-one INTO a scoped model), `Draft` (nullable tenant column), `Tag` (implicit M2M with a scoped model) |
+| `SCOPED_MODELS` / `SCOPED_MODELS_LEG_REFUSE` | The canonical tenancy map (+ the strict-nested variant) |
+| `SCOPED_SEED` / `TENANTS` | Two-tenant seed incl. a NULL-tenant row and a cross-tenant to-one |
+| `REWRITE_VECTORS` | Pure vectors: `{ models, scope, call }` → exact rewritten call \| passthrough \| refusal `{ model, path, reason }` |
+| `BEHAVIOR_CHECKLIST` | Named live-database scenarios every binding's suite must implement (test names cite the ids) |
+| `describeRefusal` / `refusalMatches` | Structural refusal matching helpers |
+
+## How a binding proves conformance
+
+1. **Rewrite tier**: run every `REWRITE_VECTORS` entry through the binding's pure rewriter and
+   compare args byte-for-byte (VibeORM: `createScopeRewriter` in `@vibeorm/runtime`, exercised in
+   `packages/runtime/tests/scoped.test.ts`).
+2. **Behavior tier**: implement every `BEHAVIOR_CHECKLIST` id as a live test against the fixture +
+   seed (VibeORM: `apps/tests/src/scoped/scoped.e2e.test.ts`, dialect-parameterized).
+
+A binding is conformant when both tiers are green and no checklist id is unimplemented.

package/dist/fixture.d.ts

@@ -0,0 +1,116 @@
+/**
+ * The canonical conformance fixture: one small schema exercising every
+ * tenancy shape the $scoped contract names —
+ *   Call     { column: "workspaceId" }   tenant column on the row
+ *   Leg      { through: "call" }         tenant lives on the to-one parent
+ *   Currency "none"                      global reference data (with a
+ *                                        nullable to-one INTO a scoped model)
+ *   Draft    { column: "workspaceId" }   NULLABLE tenant column (NULL rows
+ *                                        are invisible to every scoped handle)
+ *   Tag      "none"                      implicit M2M with a scoped model
+ *
+ * Shipped in two equivalent forms: Prisma schema text (for bindings that
+ * parse) and a neutral structural IR (for bindings that build metadata
+ * directly). This package has NO dependencies — the IR types below are
+ * structural mirrors, not imports.
+ */
+export type FixtureField = {
+    readonly name: string;
+    readonly type: string | {
+        readonly enum: string;
+    };
+    readonly isList: boolean;
+    readonly isOptional: boolean;
+    readonly isId: boolean;
+    readonly isUnique: boolean;
+    readonly isUpdatedAt: boolean;
+    readonly default?: {
+        readonly kind: string;
+        readonly value?: unknown;
+    };
+};
+export type FixtureRelation = {
+    readonly name: string;
+    readonly model: string;
+    readonly targetModel: string;
+    readonly type: "oneToOne" | "oneToMany" | "manyToOne" | "manyToMany";
+    readonly relationName?: string;
+    readonly fields?: readonly string[];
+    readonly references?: readonly string[];
+    readonly isList: boolean;
+    readonly isOptional: boolean;
+};
+export type FixtureModel = {
+    readonly name: string;
+    readonly fields: readonly FixtureField[];
+    readonly relations: readonly FixtureRelation[];
+    readonly indexes: readonly unknown[];
+    readonly isView: boolean;
+};
+export type FixtureSchema = {
+    readonly datasource: {
+        readonly provider: string;
+    };
+    readonly enums: readonly unknown[];
+    readonly extensions: readonly unknown[];
+    readonly models: readonly FixtureModel[];
+};
+/** The fixture as Prisma schema text (datasource provider is up to the harness). */
+export declare const SCOPED_FIXTURE_PRISMA: string;
+/** The same fixture as neutral structural IR. */
+export declare const SCOPED_FIXTURE_IR: FixtureSchema;
+export type ConformanceNestedMode = "verify" | "refuse";
+export type ConformanceModelEntry = "none" | {
+    readonly column: string;
+    readonly nested?: ConformanceNestedMode;
+} | {
+    readonly through: string;
+    readonly nested?: ConformanceNestedMode;
+};
+export type ConformanceModelsMap = Readonly<Record<string, ConformanceModelEntry>>;
+/** The default tenancy map every vector assumes unless it carries its own. */
+export declare const SCOPED_MODELS: ConformanceModelsMap;
+/** Variant map with strict nested mode on Leg (the refuse-mode vectors use it). */
+export declare const SCOPED_MODELS_LEG_REFUSE: ConformanceModelsMap;
+/** The two tenants every behavior case runs against. */
+export declare const TENANTS: {
+    readonly a: string;
+    readonly b: string;
+};
+export type SeedSpec = {
+    readonly calls: ReadonlyArray<{
+        readonly id: string;
+        readonly workspaceId: string;
+        readonly slug: string;
+        readonly title: string;
+        readonly secret: string;
+    }>;
+    readonly legs: ReadonlyArray<{
+        readonly id: string;
+        readonly callId: string;
+        readonly duration: number;
+    }>;
+    readonly currencies: ReadonlyArray<{
+        readonly code: string;
+        readonly name: string;
+        readonly featuredCallId: string | null;
+    }>;
+    readonly drafts: ReadonlyArray<{
+        readonly id: string;
+        readonly workspaceId: string | null;
+        readonly title: string;
+    }>;
+    readonly tags: ReadonlyArray<{
+        readonly id: string;
+        readonly name: string;
+        readonly callIds: readonly string[];
+    }>;
+};
+/**
+ * Canonical seed: tenant A owns c1 (legs l1, l2), tenant B owns c2 (leg l3);
+ * USD features tenant B's call (the cross-tenant to-one every oracle vector
+ * probes), NOK features tenant A's, EUR features none; d0 has a NULL tenant
+ * (invisible to every scoped handle); tag t1 links BOTH tenants' calls.
+ */
+export declare const SCOPED_SEED: SeedSpec;
+//# sourceMappingURL=fixture.d.ts.map

package/dist/fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.d.ts","sourceRoot":"","sources":["../src/fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC;IACrE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,OAAO,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;CAC1C,CAAC;AAoBF,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,EAAE,MA0CnC,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,EAAE,aAuF/B,CAAC;AAIF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExD,MAAM,MAAM,qBAAqB,GAC7B,MAAM,GACN;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE1E,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAEnF,8EAA8E;AAC9E,eAAO,MAAM,aAAa,EAAE,oBAM3B,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,EAAE,oBAGtC,CAAC;AAIF,wDAAwD;AACxD,eAAO,MAAM,OAAO,EAAE;IAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CAA6B,CAAC;AAE5F,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1G,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;QACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;KACxC,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrH,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACnH,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,QAqBzB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @vibeorm/scoped-conformance — the binding-agnostic conformance artifact for
+ * the tenant-scoped database handle (`$scoped` in VibeORM, the Prisma
+ * client-extension binding in pekka/shared).
+ *
+ * Dependency-free by design: both bindings consume the SAME fixture, seed,
+ * tenancy map and vectors, so the contract cannot drift between them.
+ */
+export { SCOPED_FIXTURE_IR, SCOPED_FIXTURE_PRISMA, SCOPED_MODELS, SCOPED_MODELS_LEG_REFUSE, SCOPED_SEED, TENANTS, } from "./fixture.ts";
+export type { ConformanceModelEntry, ConformanceModelsMap, ConformanceNestedMode, FixtureField, FixtureModel, FixtureRelation, FixtureSchema, SeedSpec, } from "./fixture.ts";
+export { BEHAVIOR_CHECKLIST, REWRITE_VECTORS } from "./vectors.ts";
+export type { BehaviorCase, ExpectedRefusal, RewriteExpectation, RewriteVector, ScopedCall, } from "./vectors.ts";
+/**
+ * Read the `{ model, path, reason }` triple off a binding's refusal error.
+ * Matches structurally (never `instanceof` — each binding ships its own
+ * `ScopedQueryError` class with these fields and `name: "ScopedQueryError"`).
+ */
+export declare function describeRefusal(error: unknown): {
+    model: string;
+    path: string;
+    reason: string;
+} | null;
+/** Does a caught error match a vector's expected refusal? */
+export declare function refusalMatches(params: {
+    expected: {
+        model: string;
+        path: string;
+        reason: string;
+    };
+    error: unknown;
+}): boolean;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,WAAW,EACX,OAAO,GACR,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,aAAa,EACb,QAAQ,GACT,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACnE,YAAY,EACV,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQtG;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAQ7H"}

package/dist/index.js

@@ -0,0 +1,766 @@
+// @bun
+// packages/scoped-conformance/src/fixture.ts
+function scalar(params) {
+  return {
+    name: params.name,
+    type: params.type,
+    isList: false,
+    isOptional: params.optional === true,
+    isId: params.id === true,
+    isUnique: params.unique === true,
+    isUpdatedAt: false
+  };
+}
+var SCOPED_FIXTURE_PRISMA = `
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+model Call {
+  id          String     @id
+  workspaceId String
+  slug        String     @unique
+  title       String
+  secret      String
+  legs        Leg[]
+  featured    Currency[]
+  tags        Tag[]
+}
+
+model Leg {
+  id       String @id
+  callId   String
+  call     Call   @relation(fields: [callId], references: [id])
+  duration Int
+}
+
+model Currency {
+  code           String  @id
+  name           String
+  featuredCallId String?
+  featuredCall   Call?   @relation(fields: [featuredCallId], references: [id])
+}
+
+model Draft {
+  id          String  @id
+  workspaceId String?
+  title       String
+}
+
+model Tag {
+  id    String @id
+  name  String @unique
+  calls Call[]
+}
+`;
+var SCOPED_FIXTURE_IR = {
+  datasource: { provider: "postgresql" },
+  enums: [],
+  extensions: [],
+  models: [
+    {
+      name: "Call",
+      fields: [
+        scalar({ name: "id", type: "String", id: true }),
+        scalar({ name: "workspaceId", type: "String" }),
+        scalar({ name: "slug", type: "String", unique: true }),
+        scalar({ name: "title", type: "String" }),
+        scalar({ name: "secret", type: "String" })
+      ],
+      relations: [
+        { name: "legs", model: "Call", targetModel: "Leg", type: "oneToMany", isList: true, isOptional: false },
+        { name: "featured", model: "Call", targetModel: "Currency", type: "oneToMany", isList: true, isOptional: false },
+        { name: "tags", model: "Call", targetModel: "Tag", type: "manyToMany", isList: true, isOptional: false }
+      ],
+      indexes: [],
+      isView: false
+    },
+    {
+      name: "Leg",
+      fields: [
+        scalar({ name: "id", type: "String", id: true }),
+        scalar({ name: "callId", type: "String" }),
+        scalar({ name: "duration", type: "Int" })
+      ],
+      relations: [
+        {
+          name: "call",
+          model: "Leg",
+          targetModel: "Call",
+          type: "manyToOne",
+          fields: ["callId"],
+          references: ["id"],
+          isList: false,
+          isOptional: false
+        }
+      ],
+      indexes: [],
+      isView: false
+    },
+    {
+      name: "Currency",
+      fields: [
+        scalar({ name: "code", type: "String", id: true }),
+        scalar({ name: "name", type: "String" }),
+        scalar({ name: "featuredCallId", type: "String", optional: true })
+      ],
+      relations: [
+        {
+          name: "featuredCall",
+          model: "Currency",
+          targetModel: "Call",
+          type: "manyToOne",
+          fields: ["featuredCallId"],
+          references: ["id"],
+          isList: false,
+          isOptional: true
+        }
+      ],
+      indexes: [],
+      isView: false
+    },
+    {
+      name: "Draft",
+      fields: [
+        scalar({ name: "id", type: "String", id: true }),
+        scalar({ name: "workspaceId", type: "String", optional: true }),
+        scalar({ name: "title", type: "String" })
+      ],
+      relations: [],
+      indexes: [],
+      isView: false
+    },
+    {
+      name: "Tag",
+      fields: [scalar({ name: "id", type: "String", id: true }), scalar({ name: "name", type: "String", unique: true })],
+      relations: [
+        { name: "calls", model: "Tag", targetModel: "Call", type: "manyToMany", isList: true, isOptional: false }
+      ],
+      indexes: [],
+      isView: false
+    }
+  ]
+};
+var SCOPED_MODELS = {
+  Call: { column: "workspaceId" },
+  Leg: { through: "call" },
+  Currency: "none",
+  Draft: { column: "workspaceId" },
+  Tag: "none"
+};
+var SCOPED_MODELS_LEG_REFUSE = {
+  ...SCOPED_MODELS,
+  Leg: { through: "call", nested: "refuse" }
+};
+var TENANTS = { a: "ws_1", b: "ws_2" };
+var SCOPED_SEED = {
+  calls: [
+    { id: "c1", workspaceId: TENANTS.a, slug: "call-one", title: "standup", secret: "alpha-secret" },
+    { id: "c2", workspaceId: TENANTS.b, slug: "call-two", title: "standup", secret: "beta-secret" }
+  ],
+  legs: [
+    { id: "l1", callId: "c1", duration: 60 },
+    { id: "l2", callId: "c1", duration: 120 },
+    { id: "l3", callId: "c2", duration: 240 }
+  ],
+  currencies: [
+    { code: "USD", name: "US Dollar", featuredCallId: "c2" },
+    { code: "NOK", name: "Norwegian Krone", featuredCallId: "c1" },
+    { code: "EUR", name: "Euro", featuredCallId: null }
+  ],
+  drafts: [
+    { id: "d1", workspaceId: TENANTS.a, title: "mine" },
+    { id: "d2", workspaceId: TENANTS.b, title: "theirs" },
+    { id: "d0", workspaceId: null, title: "unassigned" }
+  ],
+  tags: [{ id: "t1", name: "shared", callIds: ["c1", "c2"] }]
+};
+// packages/scoped-conformance/src/vectors.ts
+var A = TENANTS.a;
+var B = TENANTS.b;
+var predCall = { workspaceId: A };
+var predLeg = { call: { workspaceId: A } };
+var CALL_CREATE_DATA = { id: "c9", slug: "call-nine", title: "retro", secret: "s9" };
+var REWRITE_VECTORS = [
+  {
+    name: "find-merge",
+    description: "findMany AND-merges the tenant predicate into the user's where",
+    scope: A,
+    call: { model: "Call", method: "findMany", args: { where: { title: "standup" } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "findMany", args: { where: { AND: [{ title: "standup" }, predCall] } } }
+    }
+  },
+  {
+    name: "find-no-where",
+    description: "findMany without a where gets the bare predicate",
+    scope: A,
+    call: { model: "Call", method: "findMany" },
+    expected: { kind: "rewrite", call: { model: "Call", method: "findMany", args: { where: predCall } } }
+  },
+  {
+    name: "none-passthrough",
+    description: '"none" models pass through untouched',
+    scope: A,
+    call: { model: "Currency", method: "findMany", args: { where: { name: "Euro" } } },
+    expected: { kind: "passthrough" }
+  },
+  {
+    name: "findunique-rewrite",
+    description: "findUnique rewrites to findFirst with the unique key + predicate; a foreign row reads as null",
+    scope: A,
+    call: { model: "Call", method: "findUnique", args: { where: { id: "c1" } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "findFirst", args: { where: { AND: [{ id: "c1" }, predCall] } } }
+    }
+  },
+  {
+    name: "findunique-none-kept",
+    description: 'findUnique on a "none" model stays findUnique',
+    scope: A,
+    call: { model: "Currency", method: "findUnique", args: { where: { code: "USD" } } },
+    expected: { kind: "passthrough" }
+  },
+  {
+    name: "through-find",
+    description: "a { through } model filters via its tenancy parent",
+    scope: A,
+    call: { model: "Leg", method: "findMany" },
+    expected: { kind: "rewrite", call: { model: "Leg", method: "findMany", args: { where: predLeg } } }
+  },
+  {
+    name: "count-merge",
+    description: "count AND-merges the predicate",
+    scope: A,
+    call: { model: "Call", method: "count", args: { where: { title: "standup" } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "count", args: { where: { AND: [{ title: "standup" }, predCall] } } }
+    }
+  },
+  {
+    name: "aggregate-merge",
+    description: "aggregate gets the predicate",
+    scope: A,
+    call: { model: "Call", method: "aggregate", args: { _count: true } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "aggregate", args: { _count: true, where: predCall } }
+    }
+  },
+  {
+    name: "groupby-merge",
+    description: "groupBy gets the predicate",
+    scope: A,
+    call: { model: "Call", method: "groupBy", args: { by: ["title"], _count: true } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "groupBy", args: { by: ["title"], _count: true, where: predCall } }
+    }
+  },
+  {
+    name: "relation-is-inject",
+    description: "a to-one relation filter into a scoped model gets the predicate (bare object = is)",
+    scope: A,
+    call: { model: "Currency", method: "findMany", args: { where: { featuredCall: { title: "standup" } } } },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Currency",
+        method: "findMany",
+        args: { where: { featuredCall: { is: { AND: [{ title: "standup" }, predCall] } } } }
+      }
+    }
+  },
+  {
+    name: "relation-is-null-flip",
+    description: "is: null means 'no VISIBLE parent' \u2014 a foreign parent reads as absent",
+    scope: A,
+    call: { model: "Currency", method: "findMany", args: { where: { featuredCall: null } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Currency", method: "findMany", args: { where: { featuredCall: { isNot: predCall } } } }
+    }
+  },
+  {
+    name: "relation-isnot-null-flip",
+    description: "isNot: null means 'a VISIBLE parent exists'",
+    scope: A,
+    call: { model: "Currency", method: "findMany", args: { where: { featuredCall: { isNot: null } } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Currency", method: "findMany", args: { where: { featuredCall: { is: predCall } } } }
+    }
+  },
+  {
+    name: "m2m-some-inject",
+    description: "a to-many (implicit M2M) filter into a scoped model gets the predicate \u2014 the cross-tenant existence oracle closes",
+    scope: A,
+    call: { model: "Tag", method: "findMany", args: { where: { calls: { some: { secret: "beta-secret" } } } } },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Tag",
+        method: "findMany",
+        args: { where: { calls: { some: { AND: [{ secret: "beta-secret" }, predCall] } } } }
+      }
+    }
+  },
+  {
+    name: "every-rewrite",
+    description: "every p becomes none(tenant AND NOT p): only VISIBLE children must satisfy p",
+    scope: A,
+    call: { model: "Call", method: "findMany", args: { where: { legs: { every: { duration: { gt: 100 } } } } } },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "findMany",
+        args: {
+          where: {
+            AND: [{ legs: { none: { AND: [predLeg, { NOT: [{ duration: { gt: 100 } }] }] } } }, predCall]
+          }
+        }
+      }
+    }
+  },
+  {
+    name: "orderby-refuse",
+    description: "orderBy through a relation onto a scoped model refuses (ordering would leak foreign values)",
+    scope: A,
+    call: { model: "Currency", method: "findMany", args: { orderBy: { featuredCall: { title: "asc" } } } },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Call", path: "currency.findMany.orderBy.featuredCall", reason: "relation_orderby_on_scoped" }
+    }
+  },
+  {
+    name: "orderby-tenancy-edge",
+    description: "a through model may order by its OWN tenancy parent (in-tenant by definition)",
+    scope: A,
+    call: { model: "Leg", method: "findMany", args: { orderBy: { call: { title: "asc" } } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Leg", method: "findMany", args: { orderBy: { call: { title: "asc" } }, where: predLeg } }
+    }
+  },
+  {
+    name: "include-inject",
+    description: "include of a scoped child gets the predicate in its relation args",
+    scope: A,
+    call: { model: "Call", method: "findMany", args: { include: { legs: true } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "findMany", args: { include: { legs: { where: predLeg } }, where: predCall } }
+    }
+  },
+  {
+    name: "include-child-where",
+    description: "a child where AND-merges with the predicate",
+    scope: A,
+    call: { model: "Call", method: "findMany", args: { include: { legs: { where: { duration: { gt: 60 } } } } } },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "findMany",
+        args: { include: { legs: { where: { AND: [{ duration: { gt: 60 } }, predLeg] } } }, where: predCall }
+      }
+    }
+  },
+  {
+    name: "include-none-pass",
+    description: 'including a "none" child passes through',
+    scope: A,
+    call: { model: "Call", method: "findMany", args: { include: { featured: true } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "findMany", args: { include: { featured: true }, where: predCall } }
+    }
+  },
+  {
+    name: "count-relation-refuse",
+    description: "_count of a scoped relation refuses (relation counts take no filter \u2014 it would count foreign rows)",
+    scope: A,
+    call: { model: "Tag", method: "findMany", args: { include: { _count: { select: { calls: true } } } } },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Call", path: "tag.findMany.include._count.calls", reason: "count_on_scoped_relation" }
+    }
+  },
+  {
+    name: "count-tenancy-edge-ok",
+    description: "_count over the tenancy inverse is allowed \u2014 those children ARE this row's tenant",
+    scope: A,
+    call: { model: "Call", method: "findMany", args: { include: { _count: { select: { legs: true } } } } },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "findMany",
+        args: { include: { _count: { select: { legs: true } } }, where: predCall }
+      }
+    }
+  },
+  {
+    name: "create-autofill",
+    description: "create fills the tenant column",
+    scope: A,
+    call: { model: "Call", method: "create", args: { data: { ...CALL_CREATE_DATA } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "create", args: { data: { ...CALL_CREATE_DATA, workspaceId: A } } }
+    }
+  },
+  {
+    name: "create-mismatch-refuse",
+    description: "an explicit DIFFERENT tenant value refuses before any SQL",
+    scope: A,
+    call: { model: "Call", method: "create", args: { data: { ...CALL_CREATE_DATA, workspaceId: B } } },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Call", path: "call.create.data.workspaceId", reason: "explicit_scope_mismatch" }
+    }
+  },
+  {
+    name: "create-null-refuse",
+    description: "an explicit NULL tenant value refuses (NULL rows are reachable only via the base client)",
+    scope: A,
+    call: { model: "Call", method: "create", args: { data: { ...CALL_CREATE_DATA, workspaceId: null } } },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Call", path: "call.create.data.workspaceId", reason: "explicit_scope_mismatch" }
+    }
+  },
+  {
+    name: "createmany-autofill",
+    description: "createMany fills every row",
+    scope: A,
+    call: {
+      model: "Draft",
+      method: "createMany",
+      args: { data: [{ id: "d8", title: "a" }, { id: "d9", title: "b" }] }
+    },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Draft",
+        method: "createMany",
+        args: { data: [{ id: "d8", title: "a", workspaceId: A }, { id: "d9", title: "b", workspaceId: A }] }
+      }
+    }
+  },
+  {
+    name: "nested-create-tenancy-edge",
+    description: "nested create under the tenancy inverse passes structurally (the parent defines the child's tenant)",
+    scope: A,
+    call: {
+      model: "Call",
+      method: "create",
+      args: { data: { ...CALL_CREATE_DATA, legs: { create: [{ id: "l9", duration: 30 }] } } }
+    },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "create",
+        args: {
+          data: { ...CALL_CREATE_DATA, workspaceId: A, legs: { create: [{ id: "l9", duration: 30 }] } }
+        }
+      }
+    }
+  },
+  {
+    name: "nested-connect-inject",
+    description: "nested connect becomes a tenant-verified lookup (predicate joins the unique where)",
+    scope: A,
+    call: {
+      model: "Call",
+      method: "create",
+      args: { data: { ...CALL_CREATE_DATA, legs: { connect: [{ id: "l1" }] } } }
+    },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "create",
+        args: {
+          data: { ...CALL_CREATE_DATA, workspaceId: A, legs: { connect: [{ id: "l1", AND: [predLeg] }] } }
+        }
+      }
+    }
+  },
+  {
+    name: "nested-connect-refuse-mode",
+    description: 'nested: "refuse" rejects reference verbs on that model',
+    models: SCOPED_MODELS_LEG_REFUSE,
+    scope: A,
+    call: {
+      model: "Call",
+      method: "create",
+      args: { data: { ...CALL_CREATE_DATA, legs: { connect: [{ id: "l1" }] } } }
+    },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Leg", path: "call.create.data.legs.connect", reason: "nested_refused" }
+    }
+  },
+  {
+    name: "through-create-missing-parent",
+    description: "creating a through-scoped row without its tenancy parent refuses",
+    scope: A,
+    call: { model: "Leg", method: "create", args: { data: { id: "l9", duration: 5 } } },
+    expected: { kind: "refuse", refusal: { model: "Leg", path: "leg.create.data", reason: "through_fk_write" } }
+  },
+  {
+    name: "through-create-bare-fk",
+    description: "a bare foreign-key write on a through-scoped model refuses \u2014 the relation verbs are the verified path",
+    scope: A,
+    call: { model: "Leg", method: "create", args: { data: { id: "l9", duration: 5, callId: "c1" } } },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Leg", path: "leg.create.data.callId", reason: "through_fk_write" }
+    }
+  },
+  {
+    name: "through-create-connect",
+    description: "creating a through-scoped row via connect verifies the parent in-tenant",
+    scope: A,
+    call: {
+      model: "Leg",
+      method: "create",
+      args: { data: { id: "l9", duration: 5, call: { connect: { slug: "call-one" } } } }
+    },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Leg",
+        method: "create",
+        args: { data: { id: "l9", duration: 5, call: { connect: { slug: "call-one", AND: [predCall] } } } }
+      }
+    }
+  },
+  {
+    name: "update-inject",
+    description: "update injects the predicate into the unique where \u2014 compare-and-write, foreign row behaves like missing",
+    scope: A,
+    call: { model: "Call", method: "update", args: { where: { id: "c1" }, data: { title: "renamed" } } },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "update",
+        args: { where: { id: "c1", AND: [predCall] }, data: { title: "renamed" } }
+      }
+    }
+  },
+  {
+    name: "update-column-guard",
+    description: "update writing the tenant column refuses \u2014 a scoped handle cannot move rows between tenants",
+    scope: A,
+    call: { model: "Call", method: "update", args: { where: { id: "c1" }, data: { workspaceId: B } } },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Call", path: "call.update.data.workspaceId", reason: "explicit_scope_mismatch" }
+    }
+  },
+  {
+    name: "updatemany-merge",
+    description: "updateMany AND-merges; the count reflects only in-tenant rows",
+    scope: A,
+    call: { model: "Call", method: "updateMany", args: { where: { title: "standup" }, data: { secret: "s" } } },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "updateMany",
+        args: { where: { AND: [{ title: "standup" }, predCall] }, data: { secret: "s" } }
+      }
+    }
+  },
+  {
+    name: "delete-inject",
+    description: "delete injects the predicate \u2014 a foreign row behaves like a missing one",
+    scope: A,
+    call: { model: "Call", method: "delete", args: { where: { slug: "call-one" } } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "delete", args: { where: { slug: "call-one", AND: [predCall] } } }
+    }
+  },
+  {
+    name: "upsert-inject",
+    description: "upsert: predicate guards the update arm (probe honors it), create arm is force-filled",
+    scope: A,
+    call: {
+      model: "Call",
+      method: "upsert",
+      args: {
+        where: { slug: "call-one" },
+        create: { id: "c9", slug: "call-one", title: "t", secret: "x" },
+        update: { title: "u" }
+      }
+    },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Call",
+        method: "upsert",
+        args: {
+          where: { slug: "call-one", AND: [predCall] },
+          create: { id: "c9", slug: "call-one", title: "t", secret: "x", workspaceId: A },
+          update: { title: "u" }
+        }
+      }
+    }
+  },
+  {
+    name: "deletemany-none-pass",
+    description: 'deleteMany on a "none" model passes through',
+    scope: A,
+    call: { model: "Currency", method: "deleteMany", args: { where: { name: "Euro" } } },
+    expected: { kind: "passthrough" }
+  },
+  {
+    name: "null-scope-refuse",
+    description: "scope: null \u2014 every call on a scoped model refuses",
+    scope: null,
+    call: { model: "Call", method: "findMany" },
+    expected: { kind: "refuse", refusal: { model: "Call", path: "call.findMany", reason: "null_scope" } }
+  },
+  {
+    name: "null-scope-none-pass",
+    description: 'scope: null \u2014 "none" models still work',
+    scope: null,
+    call: { model: "Currency", method: "findMany" },
+    expected: { kind: "passthrough" }
+  },
+  {
+    name: "toone-implicit-refuse",
+    description: "an implicit-target nested verb (to-one update without a where) refuses off the tenancy edge",
+    scope: A,
+    call: {
+      model: "Currency",
+      method: "update",
+      args: { where: { code: "USD" }, data: { featuredCall: { update: { title: "x" } } } }
+    },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Call", path: "currency.update.data.featuredCall.update", reason: "nested_refused" }
+    }
+  },
+  {
+    name: "toone-disconnect-owner-pass",
+    description: "to-one disconnect on the FK-owning side passes \u2014 it writes only this row's own FK",
+    scope: A,
+    call: {
+      model: "Currency",
+      method: "update",
+      args: { where: { code: "USD" }, data: { featuredCall: { disconnect: true } } }
+    },
+    expected: { kind: "passthrough" }
+  },
+  {
+    name: "m2m-set-refuse",
+    description: "M2M set refuses on a scoped target \u2014 its clearing phase would silently unlink foreign rows",
+    scope: A,
+    call: { model: "Tag", method: "update", args: { where: { id: "t1" }, data: { calls: { set: [{ id: "c1" }] } } } },
+    expected: {
+      kind: "refuse",
+      refusal: { model: "Call", path: "tag.update.data.calls.set", reason: "nested_refused" }
+    }
+  },
+  {
+    name: "m2m-connect-inject",
+    description: "M2M connect is tenant-verified via the injected unique where",
+    scope: A,
+    call: {
+      model: "Tag",
+      method: "update",
+      args: { where: { id: "t1" }, data: { calls: { connect: [{ id: "c1" }] } } }
+    },
+    expected: {
+      kind: "rewrite",
+      call: {
+        model: "Tag",
+        method: "update",
+        args: { where: { id: "t1" }, data: { calls: { connect: [{ id: "c1", AND: [predCall] }] } } }
+      }
+    }
+  },
+  {
+    name: "nullable-column-equality",
+    description: "a nullable tenant column scopes by plain equality \u2014 NULL rows are invisible structurally",
+    scope: A,
+    call: { model: "Draft", method: "findMany" },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Draft", method: "findMany", args: { where: { workspaceId: A } } }
+    }
+  },
+  {
+    name: "unknown-arg-preserved",
+    description: "unknown argument keys are preserved for the builder's own loud refusal (never silently dropped)",
+    scope: A,
+    call: { model: "Call", method: "findMany", args: { frobnicate: true } },
+    expected: {
+      kind: "rewrite",
+      call: { model: "Call", method: "findMany", args: { frobnicate: true, where: predCall } }
+    }
+  }
+];
+var BEHAVIOR_CHECKLIST = [
+  { id: "foreign-findunique-null", description: "findUnique on tenant B's row (c2) returns null \u2014 indistinguishable from missing" },
+  { id: "foreign-update-not-found", description: "update/delete addressing c2 fails exactly like a missing row (the binding's not-found error), and the row is untouched" },
+  { id: "create-autofill-persisted", description: "create without the tenant column persists it with the scope value" },
+  { id: "relation-filter-oracle-empty", description: "tag.findMany({ where: { calls: { some: { secret: <tenant B's secret> } } } }) returns [] \u2014 no cross-tenant existence oracle" },
+  { id: "include-nesting-invisible", description: "include legs under a call returns only in-tenant rows; currency include featuredCall of a B-featured currency returns null" },
+  { id: "aggregate-groupby-scoped", description: "count/aggregate/groupBy reflect only tenant A's rows" },
+  { id: "upsert-both-arms", description: "upsert hits the update arm on an in-tenant row and the create arm (force-filled) on a miss" },
+  { id: "upsert-foreign-collision-loud", description: "upsert whose unique key collides with tenant B's row takes the create arm and fails LOUDLY with a unique violation \u2014 never updates the foreign row" },
+  { id: "tx-inheritance", description: "$transaction (callback AND array form) inherits the scope on every operation" },
+  { id: "null-scope-refusal", description: 'a scope: null handle refuses scoped-model calls and still serves "none" models' },
+  { id: "null-column-invisibility", description: "the NULL-tenant draft (d0) is invisible to scoped handles of BOTH tenants and reachable via the base client" },
+  { id: "raw-refusal", description: "$queryRaw/$executeRaw (and unsafe variants) reject on the scoped handle with the typed scoped error" },
+  { id: "unknown-arg-refusal", description: "an unknown argument key still fails loudly through the scoped handle" },
+  { id: "updatemany-count-scoped", description: "updateMany matching rows in both tenants reports a count covering ONLY tenant A's rows" },
+  { id: "nested-connect-cross-tenant-missing", description: "nested connect to tenant B's row (l3) fails exactly like connecting a nonexistent row, atomically (parent create rolls back)" },
+  { id: "m2m-connect-cross-tenant-missing", description: "M2M connect to tenant B's call fails like a missing row" },
+  { id: "nested-refuse-mode", description: 'with nested: "refuse" on Leg, nested connect refuses with the typed scoped error' },
+  { id: "cursor-scoped", description: "cursor pagination returns only in-tenant rows; a foreign cursor id leaks nothing beyond the caller-supplied value" },
+  { id: "scope-isolation-write-proof", description: "after a full scoped-handle session under tenant A, every row of tenant B is byte-identical to its seed state" }
+];
+
+// packages/scoped-conformance/src/index.ts
+function describeRefusal(error) {
+  if (typeof error !== "object" || error === null)
+    return null;
+  const candidate = error;
+  if (candidate.name !== "ScopedQueryError")
+    return null;
+  if (typeof candidate.model !== "string" || typeof candidate.path !== "string" || typeof candidate.reason !== "string") {
+    return null;
+  }
+  return { model: candidate.model, path: candidate.path, reason: candidate.reason };
+}
+function refusalMatches(params) {
+  const actual = describeRefusal(params.error);
+  return actual !== null && actual.model === params.expected.model && actual.path === params.expected.path && actual.reason === params.expected.reason;
+}
+export {
+  refusalMatches,
+  describeRefusal,
+  TENANTS,
+  SCOPED_SEED,
+  SCOPED_MODELS_LEG_REFUSE,
+  SCOPED_MODELS,
+  SCOPED_FIXTURE_PRISMA,
+  SCOPED_FIXTURE_IR,
+  REWRITE_VECTORS,
+  BEHAVIOR_CHECKLIST
+};
+
+//# debugId=D0D7C59A47D0228364756E2164756E21

package/dist/index.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/fixture.ts", "../src/vectors.ts", "../src/index.ts"],
+  "sourcesContent": [
+    "/**\n * The canonical conformance fixture: one small schema exercising every\n * tenancy shape the $scoped contract names —\n *   Call     { column: \"workspaceId\" }   tenant column on the row\n *   Leg      { through: \"call\" }         tenant lives on the to-one parent\n *   Currency \"none\"                      global reference data (with a\n *                                        nullable to-one INTO a scoped model)\n *   Draft    { column: \"workspaceId\" }   NULLABLE tenant column (NULL rows\n *                                        are invisible to every scoped handle)\n *   Tag      \"none\"                      implicit M2M with a scoped model\n *\n * Shipped in two equivalent forms: Prisma schema text (for bindings that\n * parse) and a neutral structural IR (for bindings that build metadata\n * directly). This package has NO dependencies — the IR types below are\n * structural mirrors, not imports.\n */\n\n// ─── Neutral schema IR (structural) ───────────────────────────────\n\nexport type FixtureField = {\n  readonly name: string;\n  readonly type: string | { readonly enum: string };\n  readonly isList: boolean;\n  readonly isOptional: boolean;\n  readonly isId: boolean;\n  readonly isUnique: boolean;\n  readonly isUpdatedAt: boolean;\n  readonly default?: { readonly kind: string; readonly value?: unknown };\n};\n\nexport type FixtureRelation = {\n  readonly name: string;\n  readonly model: string;\n  readonly targetModel: string;\n  readonly type: \"oneToOne\" | \"oneToMany\" | \"manyToOne\" | \"manyToMany\";\n  readonly relationName?: string;\n  readonly fields?: readonly string[];\n  readonly references?: readonly string[];\n  readonly isList: boolean;\n  readonly isOptional: boolean;\n};\n\nexport type FixtureModel = {\n  readonly name: string;\n  readonly fields: readonly FixtureField[];\n  readonly relations: readonly FixtureRelation[];\n  readonly indexes: readonly unknown[];\n  readonly isView: boolean;\n};\n\nexport type FixtureSchema = {\n  readonly datasource: { readonly provider: string };\n  readonly enums: readonly unknown[];\n  readonly extensions: readonly unknown[];\n  readonly models: readonly FixtureModel[];\n};\n\nfunction scalar(params: {\n  name: string;\n  type: string;\n  optional?: boolean;\n  id?: boolean;\n  unique?: boolean;\n}): FixtureField {\n  return {\n    name: params.name,\n    type: params.type,\n    isList: false,\n    isOptional: params.optional === true,\n    isId: params.id === true,\n    isUnique: params.unique === true,\n    isUpdatedAt: false,\n  };\n}\n\n/** The fixture as Prisma schema text (datasource provider is up to the harness). */\nexport const SCOPED_FIXTURE_PRISMA: string = `\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel Call {\n  id          String     @id\n  workspaceId String\n  slug        String     @unique\n  title       String\n  secret      String\n  legs        Leg[]\n  featured    Currency[]\n  tags        Tag[]\n}\n\nmodel Leg {\n  id       String @id\n  callId   String\n  call     Call   @relation(fields: [callId], references: [id])\n  duration Int\n}\n\nmodel Currency {\n  code           String  @id\n  name           String\n  featuredCallId String?\n  featuredCall   Call?   @relation(fields: [featuredCallId], references: [id])\n}\n\nmodel Draft {\n  id          String  @id\n  workspaceId String?\n  title       String\n}\n\nmodel Tag {\n  id    String @id\n  name  String @unique\n  calls Call[]\n}\n`;\n\n/** The same fixture as neutral structural IR. */\nexport const SCOPED_FIXTURE_IR: FixtureSchema = {\n  datasource: { provider: \"postgresql\" },\n  enums: [],\n  extensions: [],\n  models: [\n    {\n      name: \"Call\",\n      fields: [\n        scalar({ name: \"id\", type: \"String\", id: true }),\n        scalar({ name: \"workspaceId\", type: \"String\" }),\n        scalar({ name: \"slug\", type: \"String\", unique: true }),\n        scalar({ name: \"title\", type: \"String\" }),\n        scalar({ name: \"secret\", type: \"String\" }),\n      ],\n      relations: [\n        { name: \"legs\", model: \"Call\", targetModel: \"Leg\", type: \"oneToMany\", isList: true, isOptional: false },\n        { name: \"featured\", model: \"Call\", targetModel: \"Currency\", type: \"oneToMany\", isList: true, isOptional: false },\n        { name: \"tags\", model: \"Call\", targetModel: \"Tag\", type: \"manyToMany\", isList: true, isOptional: false },\n      ],\n      indexes: [],\n      isView: false,\n    },\n    {\n      name: \"Leg\",\n      fields: [\n        scalar({ name: \"id\", type: \"String\", id: true }),\n        scalar({ name: \"callId\", type: \"String\" }),\n        scalar({ name: \"duration\", type: \"Int\" }),\n      ],\n      relations: [\n        {\n          name: \"call\",\n          model: \"Leg\",\n          targetModel: \"Call\",\n          type: \"manyToOne\",\n          fields: [\"callId\"],\n          references: [\"id\"],\n          isList: false,\n          isOptional: false,\n        },\n      ],\n      indexes: [],\n      isView: false,\n    },\n    {\n      name: \"Currency\",\n      fields: [\n        scalar({ name: \"code\", type: \"String\", id: true }),\n        scalar({ name: \"name\", type: \"String\" }),\n        scalar({ name: \"featuredCallId\", type: \"String\", optional: true }),\n      ],\n      relations: [\n        {\n          name: \"featuredCall\",\n          model: \"Currency\",\n          targetModel: \"Call\",\n          type: \"manyToOne\",\n          fields: [\"featuredCallId\"],\n          references: [\"id\"],\n          isList: false,\n          isOptional: true,\n        },\n      ],\n      indexes: [],\n      isView: false,\n    },\n    {\n      name: \"Draft\",\n      fields: [\n        scalar({ name: \"id\", type: \"String\", id: true }),\n        scalar({ name: \"workspaceId\", type: \"String\", optional: true }),\n        scalar({ name: \"title\", type: \"String\" }),\n      ],\n      relations: [],\n      indexes: [],\n      isView: false,\n    },\n    {\n      name: \"Tag\",\n      fields: [scalar({ name: \"id\", type: \"String\", id: true }), scalar({ name: \"name\", type: \"String\", unique: true })],\n      relations: [\n        { name: \"calls\", model: \"Tag\", targetModel: \"Call\", type: \"manyToMany\", isList: true, isOptional: false },\n      ],\n      indexes: [],\n      isView: false,\n    },\n  ],\n};\n\n// ─── The canonical tenancy map ────────────────────────────────────\n\nexport type ConformanceNestedMode = \"verify\" | \"refuse\";\n\nexport type ConformanceModelEntry =\n  | \"none\"\n  | { readonly column: string; readonly nested?: ConformanceNestedMode }\n  | { readonly through: string; readonly nested?: ConformanceNestedMode };\n\nexport type ConformanceModelsMap = Readonly<Record<string, ConformanceModelEntry>>;\n\n/** The default tenancy map every vector assumes unless it carries its own. */\nexport const SCOPED_MODELS: ConformanceModelsMap = {\n  Call: { column: \"workspaceId\" },\n  Leg: { through: \"call\" },\n  Currency: \"none\",\n  Draft: { column: \"workspaceId\" },\n  Tag: \"none\",\n};\n\n/** Variant map with strict nested mode on Leg (the refuse-mode vectors use it). */\nexport const SCOPED_MODELS_LEG_REFUSE: ConformanceModelsMap = {\n  ...SCOPED_MODELS,\n  Leg: { through: \"call\", nested: \"refuse\" },\n};\n\n// ─── Seed ─────────────────────────────────────────────────────────\n\n/** The two tenants every behavior case runs against. */\nexport const TENANTS: { readonly a: string; readonly b: string } = { a: \"ws_1\", b: \"ws_2\" };\n\nexport type SeedSpec = {\n  readonly calls: ReadonlyArray<{\n    readonly id: string;\n    readonly workspaceId: string;\n    readonly slug: string;\n    readonly title: string;\n    readonly secret: string;\n  }>;\n  readonly legs: ReadonlyArray<{ readonly id: string; readonly callId: string; readonly duration: number }>;\n  readonly currencies: ReadonlyArray<{\n    readonly code: string;\n    readonly name: string;\n    readonly featuredCallId: string | null;\n  }>;\n  readonly drafts: ReadonlyArray<{ readonly id: string; readonly workspaceId: string | null; readonly title: string }>;\n  readonly tags: ReadonlyArray<{ readonly id: string; readonly name: string; readonly callIds: readonly string[] }>;\n};\n\n/**\n * Canonical seed: tenant A owns c1 (legs l1, l2), tenant B owns c2 (leg l3);\n * USD features tenant B's call (the cross-tenant to-one every oracle vector\n * probes), NOK features tenant A's, EUR features none; d0 has a NULL tenant\n * (invisible to every scoped handle); tag t1 links BOTH tenants' calls.\n */\nexport const SCOPED_SEED: SeedSpec = {\n  calls: [\n    { id: \"c1\", workspaceId: TENANTS.a, slug: \"call-one\", title: \"standup\", secret: \"alpha-secret\" },\n    { id: \"c2\", workspaceId: TENANTS.b, slug: \"call-two\", title: \"standup\", secret: \"beta-secret\" },\n  ],\n  legs: [\n    { id: \"l1\", callId: \"c1\", duration: 60 },\n    { id: \"l2\", callId: \"c1\", duration: 120 },\n    { id: \"l3\", callId: \"c2\", duration: 240 },\n  ],\n  currencies: [\n    { code: \"USD\", name: \"US Dollar\", featuredCallId: \"c2\" },\n    { code: \"NOK\", name: \"Norwegian Krone\", featuredCallId: \"c1\" },\n    { code: \"EUR\", name: \"Euro\", featuredCallId: null },\n  ],\n  drafts: [\n    { id: \"d1\", workspaceId: TENANTS.a, title: \"mine\" },\n    { id: \"d2\", workspaceId: TENANTS.b, title: \"theirs\" },\n    { id: \"d0\", workspaceId: null, title: \"unassigned\" },\n  ],\n  tags: [{ id: \"t1\", name: \"shared\", callIds: [\"c1\", \"c2\"] }],\n};\n",
+    "/**\n * The conformance vectors.\n *\n * REWRITE tier (pure, no database): `{ models, scope, call }` must produce\n * exactly `expected` — a rewritten call, a byte-identical passthrough, or a\n * refusal matched on `{ model, path, reason }` (never on message text). Both\n * bindings run every vector through their own pure rewriter.\n *\n * BEHAVIOR tier (live database): a checklist of named, normative scenarios\n * each binding implements as tests against the canonical fixture + seed\n * (`SCOPED_FIXTURE_*`, `SCOPED_SEED`). The ids are the shared contract; a\n * binding's suite must cover every id.\n */\n\nimport { SCOPED_MODELS, SCOPED_MODELS_LEG_REFUSE, TENANTS } from \"./fixture.ts\";\nimport type { ConformanceModelsMap } from \"./fixture.ts\";\n\n// ─── Types ────────────────────────────────────────────────────────\n\n/** One ORM call in the shared `{ model, method, args }` language. */\nexport type ScopedCall = {\n  readonly model: string;\n  readonly method: string;\n  readonly args?: Record<string, unknown>;\n};\n\nexport type ExpectedRefusal = {\n  readonly model: string;\n  readonly path: string;\n  readonly reason: string;\n};\n\nexport type RewriteExpectation =\n  | { readonly kind: \"rewrite\"; readonly call: ScopedCall }\n  | { readonly kind: \"passthrough\" }\n  | { readonly kind: \"refuse\"; readonly refusal: ExpectedRefusal };\n\nexport type RewriteVector = {\n  readonly name: string;\n  readonly description: string;\n  /** Tenancy map for this vector; defaults to `SCOPED_MODELS`. */\n  readonly models?: ConformanceModelsMap;\n  readonly scope: string | null;\n  readonly call: ScopedCall;\n  readonly expected: RewriteExpectation;\n};\n\nexport type BehaviorCase = {\n  readonly id: string;\n  readonly description: string;\n};\n\n// ─── Shared predicate spellings ───────────────────────────────────\n\nconst A: string = TENANTS.a;\nconst B: string = TENANTS.b;\nconst predCall = { workspaceId: A } as const;\nconst predLeg = { call: { workspaceId: A } } as const;\n\nconst CALL_CREATE_DATA = { id: \"c9\", slug: \"call-nine\", title: \"retro\", secret: \"s9\" } as const;\n\n// ─── Rewrite vectors ──────────────────────────────────────────────\n\nexport const REWRITE_VECTORS: readonly RewriteVector[] = [\n  {\n    name: \"find-merge\",\n    description: \"findMany AND-merges the tenant predicate into the user's where\",\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\", args: { where: { title: \"standup\" } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"findMany\", args: { where: { AND: [{ title: \"standup\" }, predCall] } } },\n    },\n  },\n  {\n    name: \"find-no-where\",\n    description: \"findMany without a where gets the bare predicate\",\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\" },\n    expected: { kind: \"rewrite\", call: { model: \"Call\", method: \"findMany\", args: { where: predCall } } },\n  },\n  {\n    name: \"none-passthrough\",\n    description: '\"none\" models pass through untouched',\n    scope: A,\n    call: { model: \"Currency\", method: \"findMany\", args: { where: { name: \"Euro\" } } },\n    expected: { kind: \"passthrough\" },\n  },\n  {\n    name: \"findunique-rewrite\",\n    description: \"findUnique rewrites to findFirst with the unique key + predicate; a foreign row reads as null\",\n    scope: A,\n    call: { model: \"Call\", method: \"findUnique\", args: { where: { id: \"c1\" } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"findFirst\", args: { where: { AND: [{ id: \"c1\" }, predCall] } } },\n    },\n  },\n  {\n    name: \"findunique-none-kept\",\n    description: 'findUnique on a \"none\" model stays findUnique',\n    scope: A,\n    call: { model: \"Currency\", method: \"findUnique\", args: { where: { code: \"USD\" } } },\n    expected: { kind: \"passthrough\" },\n  },\n  {\n    name: \"through-find\",\n    description: \"a { through } model filters via its tenancy parent\",\n    scope: A,\n    call: { model: \"Leg\", method: \"findMany\" },\n    expected: { kind: \"rewrite\", call: { model: \"Leg\", method: \"findMany\", args: { where: predLeg } } },\n  },\n  {\n    name: \"count-merge\",\n    description: \"count AND-merges the predicate\",\n    scope: A,\n    call: { model: \"Call\", method: \"count\", args: { where: { title: \"standup\" } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"count\", args: { where: { AND: [{ title: \"standup\" }, predCall] } } },\n    },\n  },\n  {\n    name: \"aggregate-merge\",\n    description: \"aggregate gets the predicate\",\n    scope: A,\n    call: { model: \"Call\", method: \"aggregate\", args: { _count: true } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"aggregate\", args: { _count: true, where: predCall } },\n    },\n  },\n  {\n    name: \"groupby-merge\",\n    description: \"groupBy gets the predicate\",\n    scope: A,\n    call: { model: \"Call\", method: \"groupBy\", args: { by: [\"title\"], _count: true } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"groupBy\", args: { by: [\"title\"], _count: true, where: predCall } },\n    },\n  },\n  {\n    name: \"relation-is-inject\",\n    description: \"a to-one relation filter into a scoped model gets the predicate (bare object = is)\",\n    scope: A,\n    call: { model: \"Currency\", method: \"findMany\", args: { where: { featuredCall: { title: \"standup\" } } } },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Currency\",\n        method: \"findMany\",\n        args: { where: { featuredCall: { is: { AND: [{ title: \"standup\" }, predCall] } } } },\n      },\n    },\n  },\n  {\n    name: \"relation-is-null-flip\",\n    description: \"is: null means 'no VISIBLE parent' — a foreign parent reads as absent\",\n    scope: A,\n    call: { model: \"Currency\", method: \"findMany\", args: { where: { featuredCall: null } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Currency\", method: \"findMany\", args: { where: { featuredCall: { isNot: predCall } } } },\n    },\n  },\n  {\n    name: \"relation-isnot-null-flip\",\n    description: \"isNot: null means 'a VISIBLE parent exists'\",\n    scope: A,\n    call: { model: \"Currency\", method: \"findMany\", args: { where: { featuredCall: { isNot: null } } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Currency\", method: \"findMany\", args: { where: { featuredCall: { is: predCall } } } },\n    },\n  },\n  {\n    name: \"m2m-some-inject\",\n    description: \"a to-many (implicit M2M) filter into a scoped model gets the predicate — the cross-tenant existence oracle closes\",\n    scope: A,\n    call: { model: \"Tag\", method: \"findMany\", args: { where: { calls: { some: { secret: \"beta-secret\" } } } } },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Tag\",\n        method: \"findMany\",\n        args: { where: { calls: { some: { AND: [{ secret: \"beta-secret\" }, predCall] } } } },\n      },\n    },\n  },\n  {\n    name: \"every-rewrite\",\n    description: \"every p becomes none(tenant AND NOT p): only VISIBLE children must satisfy p\",\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\", args: { where: { legs: { every: { duration: { gt: 100 } } } } } },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"findMany\",\n        args: {\n          where: {\n            AND: [{ legs: { none: { AND: [predLeg, { NOT: [{ duration: { gt: 100 } }] }] } } }, predCall],\n          },\n        },\n      },\n    },\n  },\n  {\n    name: \"orderby-refuse\",\n    description: \"orderBy through a relation onto a scoped model refuses (ordering would leak foreign values)\",\n    scope: A,\n    call: { model: \"Currency\", method: \"findMany\", args: { orderBy: { featuredCall: { title: \"asc\" } } } },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Call\", path: \"currency.findMany.orderBy.featuredCall\", reason: \"relation_orderby_on_scoped\" },\n    },\n  },\n  {\n    name: \"orderby-tenancy-edge\",\n    description: \"a through model may order by its OWN tenancy parent (in-tenant by definition)\",\n    scope: A,\n    call: { model: \"Leg\", method: \"findMany\", args: { orderBy: { call: { title: \"asc\" } } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Leg\", method: \"findMany\", args: { orderBy: { call: { title: \"asc\" } }, where: predLeg } },\n    },\n  },\n  {\n    name: \"include-inject\",\n    description: \"include of a scoped child gets the predicate in its relation args\",\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\", args: { include: { legs: true } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"findMany\", args: { include: { legs: { where: predLeg } }, where: predCall } },\n    },\n  },\n  {\n    name: \"include-child-where\",\n    description: \"a child where AND-merges with the predicate\",\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\", args: { include: { legs: { where: { duration: { gt: 60 } } } } } },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"findMany\",\n        args: { include: { legs: { where: { AND: [{ duration: { gt: 60 } }, predLeg] } } }, where: predCall },\n      },\n    },\n  },\n  {\n    name: \"include-none-pass\",\n    description: 'including a \"none\" child passes through',\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\", args: { include: { featured: true } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"findMany\", args: { include: { featured: true }, where: predCall } },\n    },\n  },\n  {\n    name: \"count-relation-refuse\",\n    description: \"_count of a scoped relation refuses (relation counts take no filter — it would count foreign rows)\",\n    scope: A,\n    call: { model: \"Tag\", method: \"findMany\", args: { include: { _count: { select: { calls: true } } } } },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Call\", path: \"tag.findMany.include._count.calls\", reason: \"count_on_scoped_relation\" },\n    },\n  },\n  {\n    name: \"count-tenancy-edge-ok\",\n    description: \"_count over the tenancy inverse is allowed — those children ARE this row's tenant\",\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\", args: { include: { _count: { select: { legs: true } } } } },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"findMany\",\n        args: { include: { _count: { select: { legs: true } } }, where: predCall },\n      },\n    },\n  },\n  {\n    name: \"create-autofill\",\n    description: \"create fills the tenant column\",\n    scope: A,\n    call: { model: \"Call\", method: \"create\", args: { data: { ...CALL_CREATE_DATA } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"create\", args: { data: { ...CALL_CREATE_DATA, workspaceId: A } } },\n    },\n  },\n  {\n    name: \"create-mismatch-refuse\",\n    description: \"an explicit DIFFERENT tenant value refuses before any SQL\",\n    scope: A,\n    call: { model: \"Call\", method: \"create\", args: { data: { ...CALL_CREATE_DATA, workspaceId: B } } },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Call\", path: \"call.create.data.workspaceId\", reason: \"explicit_scope_mismatch\" },\n    },\n  },\n  {\n    name: \"create-null-refuse\",\n    description: \"an explicit NULL tenant value refuses (NULL rows are reachable only via the base client)\",\n    scope: A,\n    call: { model: \"Call\", method: \"create\", args: { data: { ...CALL_CREATE_DATA, workspaceId: null } } },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Call\", path: \"call.create.data.workspaceId\", reason: \"explicit_scope_mismatch\" },\n    },\n  },\n  {\n    name: \"createmany-autofill\",\n    description: \"createMany fills every row\",\n    scope: A,\n    call: {\n      model: \"Draft\",\n      method: \"createMany\",\n      args: { data: [{ id: \"d8\", title: \"a\" }, { id: \"d9\", title: \"b\" }] },\n    },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Draft\",\n        method: \"createMany\",\n        args: { data: [{ id: \"d8\", title: \"a\", workspaceId: A }, { id: \"d9\", title: \"b\", workspaceId: A }] },\n      },\n    },\n  },\n  {\n    name: \"nested-create-tenancy-edge\",\n    description: \"nested create under the tenancy inverse passes structurally (the parent defines the child's tenant)\",\n    scope: A,\n    call: {\n      model: \"Call\",\n      method: \"create\",\n      args: { data: { ...CALL_CREATE_DATA, legs: { create: [{ id: \"l9\", duration: 30 }] } } },\n    },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"create\",\n        args: {\n          data: { ...CALL_CREATE_DATA, workspaceId: A, legs: { create: [{ id: \"l9\", duration: 30 }] } },\n        },\n      },\n    },\n  },\n  {\n    name: \"nested-connect-inject\",\n    description: \"nested connect becomes a tenant-verified lookup (predicate joins the unique where)\",\n    scope: A,\n    call: {\n      model: \"Call\",\n      method: \"create\",\n      args: { data: { ...CALL_CREATE_DATA, legs: { connect: [{ id: \"l1\" }] } } },\n    },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"create\",\n        args: {\n          data: { ...CALL_CREATE_DATA, workspaceId: A, legs: { connect: [{ id: \"l1\", AND: [predLeg] }] } },\n        },\n      },\n    },\n  },\n  {\n    name: \"nested-connect-refuse-mode\",\n    description: 'nested: \"refuse\" rejects reference verbs on that model',\n    models: SCOPED_MODELS_LEG_REFUSE,\n    scope: A,\n    call: {\n      model: \"Call\",\n      method: \"create\",\n      args: { data: { ...CALL_CREATE_DATA, legs: { connect: [{ id: \"l1\" }] } } },\n    },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Leg\", path: \"call.create.data.legs.connect\", reason: \"nested_refused\" },\n    },\n  },\n  {\n    name: \"through-create-missing-parent\",\n    description: \"creating a through-scoped row without its tenancy parent refuses\",\n    scope: A,\n    call: { model: \"Leg\", method: \"create\", args: { data: { id: \"l9\", duration: 5 } } },\n    expected: { kind: \"refuse\", refusal: { model: \"Leg\", path: \"leg.create.data\", reason: \"through_fk_write\" } },\n  },\n  {\n    name: \"through-create-bare-fk\",\n    description: \"a bare foreign-key write on a through-scoped model refuses — the relation verbs are the verified path\",\n    scope: A,\n    call: { model: \"Leg\", method: \"create\", args: { data: { id: \"l9\", duration: 5, callId: \"c1\" } } },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Leg\", path: \"leg.create.data.callId\", reason: \"through_fk_write\" },\n    },\n  },\n  {\n    name: \"through-create-connect\",\n    description: \"creating a through-scoped row via connect verifies the parent in-tenant\",\n    scope: A,\n    call: {\n      model: \"Leg\",\n      method: \"create\",\n      args: { data: { id: \"l9\", duration: 5, call: { connect: { slug: \"call-one\" } } } },\n    },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Leg\",\n        method: \"create\",\n        args: { data: { id: \"l9\", duration: 5, call: { connect: { slug: \"call-one\", AND: [predCall] } } } },\n      },\n    },\n  },\n  {\n    name: \"update-inject\",\n    description: \"update injects the predicate into the unique where — compare-and-write, foreign row behaves like missing\",\n    scope: A,\n    call: { model: \"Call\", method: \"update\", args: { where: { id: \"c1\" }, data: { title: \"renamed\" } } },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"update\",\n        args: { where: { id: \"c1\", AND: [predCall] }, data: { title: \"renamed\" } },\n      },\n    },\n  },\n  {\n    name: \"update-column-guard\",\n    description: \"update writing the tenant column refuses — a scoped handle cannot move rows between tenants\",\n    scope: A,\n    call: { model: \"Call\", method: \"update\", args: { where: { id: \"c1\" }, data: { workspaceId: B } } },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Call\", path: \"call.update.data.workspaceId\", reason: \"explicit_scope_mismatch\" },\n    },\n  },\n  {\n    name: \"updatemany-merge\",\n    description: \"updateMany AND-merges; the count reflects only in-tenant rows\",\n    scope: A,\n    call: { model: \"Call\", method: \"updateMany\", args: { where: { title: \"standup\" }, data: { secret: \"s\" } } },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"updateMany\",\n        args: { where: { AND: [{ title: \"standup\" }, predCall] }, data: { secret: \"s\" } },\n      },\n    },\n  },\n  {\n    name: \"delete-inject\",\n    description: \"delete injects the predicate — a foreign row behaves like a missing one\",\n    scope: A,\n    call: { model: \"Call\", method: \"delete\", args: { where: { slug: \"call-one\" } } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"delete\", args: { where: { slug: \"call-one\", AND: [predCall] } } },\n    },\n  },\n  {\n    name: \"upsert-inject\",\n    description: \"upsert: predicate guards the update arm (probe honors it), create arm is force-filled\",\n    scope: A,\n    call: {\n      model: \"Call\",\n      method: \"upsert\",\n      args: {\n        where: { slug: \"call-one\" },\n        create: { id: \"c9\", slug: \"call-one\", title: \"t\", secret: \"x\" },\n        update: { title: \"u\" },\n      },\n    },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Call\",\n        method: \"upsert\",\n        args: {\n          where: { slug: \"call-one\", AND: [predCall] },\n          create: { id: \"c9\", slug: \"call-one\", title: \"t\", secret: \"x\", workspaceId: A },\n          update: { title: \"u\" },\n        },\n      },\n    },\n  },\n  {\n    name: \"deletemany-none-pass\",\n    description: 'deleteMany on a \"none\" model passes through',\n    scope: A,\n    call: { model: \"Currency\", method: \"deleteMany\", args: { where: { name: \"Euro\" } } },\n    expected: { kind: \"passthrough\" },\n  },\n  {\n    name: \"null-scope-refuse\",\n    description: \"scope: null — every call on a scoped model refuses\",\n    scope: null,\n    call: { model: \"Call\", method: \"findMany\" },\n    expected: { kind: \"refuse\", refusal: { model: \"Call\", path: \"call.findMany\", reason: \"null_scope\" } },\n  },\n  {\n    name: \"null-scope-none-pass\",\n    description: 'scope: null — \"none\" models still work',\n    scope: null,\n    call: { model: \"Currency\", method: \"findMany\" },\n    expected: { kind: \"passthrough\" },\n  },\n  {\n    name: \"toone-implicit-refuse\",\n    description: \"an implicit-target nested verb (to-one update without a where) refuses off the tenancy edge\",\n    scope: A,\n    call: {\n      model: \"Currency\",\n      method: \"update\",\n      args: { where: { code: \"USD\" }, data: { featuredCall: { update: { title: \"x\" } } } },\n    },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Call\", path: \"currency.update.data.featuredCall.update\", reason: \"nested_refused\" },\n    },\n  },\n  {\n    name: \"toone-disconnect-owner-pass\",\n    description: \"to-one disconnect on the FK-owning side passes — it writes only this row's own FK\",\n    scope: A,\n    call: {\n      model: \"Currency\",\n      method: \"update\",\n      args: { where: { code: \"USD\" }, data: { featuredCall: { disconnect: true } } },\n    },\n    expected: { kind: \"passthrough\" },\n  },\n  {\n    name: \"m2m-set-refuse\",\n    description: \"M2M set refuses on a scoped target — its clearing phase would silently unlink foreign rows\",\n    scope: A,\n    call: { model: \"Tag\", method: \"update\", args: { where: { id: \"t1\" }, data: { calls: { set: [{ id: \"c1\" }] } } } },\n    expected: {\n      kind: \"refuse\",\n      refusal: { model: \"Call\", path: \"tag.update.data.calls.set\", reason: \"nested_refused\" },\n    },\n  },\n  {\n    name: \"m2m-connect-inject\",\n    description: \"M2M connect is tenant-verified via the injected unique where\",\n    scope: A,\n    call: {\n      model: \"Tag\",\n      method: \"update\",\n      args: { where: { id: \"t1\" }, data: { calls: { connect: [{ id: \"c1\" }] } } },\n    },\n    expected: {\n      kind: \"rewrite\",\n      call: {\n        model: \"Tag\",\n        method: \"update\",\n        args: { where: { id: \"t1\" }, data: { calls: { connect: [{ id: \"c1\", AND: [predCall] }] } } },\n      },\n    },\n  },\n  {\n    name: \"nullable-column-equality\",\n    description: \"a nullable tenant column scopes by plain equality — NULL rows are invisible structurally\",\n    scope: A,\n    call: { model: \"Draft\", method: \"findMany\" },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Draft\", method: \"findMany\", args: { where: { workspaceId: A } } },\n    },\n  },\n  {\n    name: \"unknown-arg-preserved\",\n    description: \"unknown argument keys are preserved for the builder's own loud refusal (never silently dropped)\",\n    scope: A,\n    call: { model: \"Call\", method: \"findMany\", args: { frobnicate: true } },\n    expected: {\n      kind: \"rewrite\",\n      call: { model: \"Call\", method: \"findMany\", args: { frobnicate: true, where: predCall } },\n    },\n  },\n];\n\n// ─── Behavior checklist ───────────────────────────────────────────\n\n/**\n * Live-database scenarios every binding's suite must implement against the\n * canonical fixture + seed, under tenant A unless stated. The id is the\n * contract; each binding's test names the id it covers.\n */\nexport const BEHAVIOR_CHECKLIST: readonly BehaviorCase[] = [\n  { id: \"foreign-findunique-null\", description: \"findUnique on tenant B's row (c2) returns null — indistinguishable from missing\" },\n  { id: \"foreign-update-not-found\", description: \"update/delete addressing c2 fails exactly like a missing row (the binding's not-found error), and the row is untouched\" },\n  { id: \"create-autofill-persisted\", description: \"create without the tenant column persists it with the scope value\" },\n  { id: \"relation-filter-oracle-empty\", description: \"tag.findMany({ where: { calls: { some: { secret: <tenant B's secret> } } } }) returns [] — no cross-tenant existence oracle\" },\n  { id: \"include-nesting-invisible\", description: \"include legs under a call returns only in-tenant rows; currency include featuredCall of a B-featured currency returns null\" },\n  { id: \"aggregate-groupby-scoped\", description: \"count/aggregate/groupBy reflect only tenant A's rows\" },\n  { id: \"upsert-both-arms\", description: \"upsert hits the update arm on an in-tenant row and the create arm (force-filled) on a miss\" },\n  { id: \"upsert-foreign-collision-loud\", description: \"upsert whose unique key collides with tenant B's row takes the create arm and fails LOUDLY with a unique violation — never updates the foreign row\" },\n  { id: \"tx-inheritance\", description: \"$transaction (callback AND array form) inherits the scope on every operation\" },\n  { id: \"null-scope-refusal\", description: \"a scope: null handle refuses scoped-model calls and still serves \\\"none\\\" models\" },\n  { id: \"null-column-invisibility\", description: \"the NULL-tenant draft (d0) is invisible to scoped handles of BOTH tenants and reachable via the base client\" },\n  { id: \"raw-refusal\", description: \"$queryRaw/$executeRaw (and unsafe variants) reject on the scoped handle with the typed scoped error\" },\n  { id: \"unknown-arg-refusal\", description: \"an unknown argument key still fails loudly through the scoped handle\" },\n  { id: \"updatemany-count-scoped\", description: \"updateMany matching rows in both tenants reports a count covering ONLY tenant A's rows\" },\n  { id: \"nested-connect-cross-tenant-missing\", description: \"nested connect to tenant B's row (l3) fails exactly like connecting a nonexistent row, atomically (parent create rolls back)\" },\n  { id: \"m2m-connect-cross-tenant-missing\", description: \"M2M connect to tenant B's call fails like a missing row\" },\n  { id: \"nested-refuse-mode\", description: \"with nested: \\\"refuse\\\" on Leg, nested connect refuses with the typed scoped error\" },\n  { id: \"cursor-scoped\", description: \"cursor pagination returns only in-tenant rows; a foreign cursor id leaks nothing beyond the caller-supplied value\" },\n  { id: \"scope-isolation-write-proof\", description: \"after a full scoped-handle session under tenant A, every row of tenant B is byte-identical to its seed state\" },\n];\n",
+    "/**\n * @vibeorm/scoped-conformance — the binding-agnostic conformance artifact for\n * the tenant-scoped database handle (`$scoped` in VibeORM, the Prisma\n * client-extension binding in pekka/shared).\n *\n * Dependency-free by design: both bindings consume the SAME fixture, seed,\n * tenancy map and vectors, so the contract cannot drift between them.\n */\n\nexport {\n  SCOPED_FIXTURE_IR,\n  SCOPED_FIXTURE_PRISMA,\n  SCOPED_MODELS,\n  SCOPED_MODELS_LEG_REFUSE,\n  SCOPED_SEED,\n  TENANTS,\n} from \"./fixture.ts\";\nexport type {\n  ConformanceModelEntry,\n  ConformanceModelsMap,\n  ConformanceNestedMode,\n  FixtureField,\n  FixtureModel,\n  FixtureRelation,\n  FixtureSchema,\n  SeedSpec,\n} from \"./fixture.ts\";\n\nexport { BEHAVIOR_CHECKLIST, REWRITE_VECTORS } from \"./vectors.ts\";\nexport type {\n  BehaviorCase,\n  ExpectedRefusal,\n  RewriteExpectation,\n  RewriteVector,\n  ScopedCall,\n} from \"./vectors.ts\";\n\n/**\n * Read the `{ model, path, reason }` triple off a binding's refusal error.\n * Matches structurally (never `instanceof` — each binding ships its own\n * `ScopedQueryError` class with these fields and `name: \"ScopedQueryError\"`).\n */\nexport function describeRefusal(error: unknown): { model: string; path: string; reason: string } | null {\n  if (typeof error !== \"object\" || error === null) return null;\n  const candidate = error as { name?: unknown; model?: unknown; path?: unknown; reason?: unknown };\n  if (candidate.name !== \"ScopedQueryError\") return null;\n  if (typeof candidate.model !== \"string\" || typeof candidate.path !== \"string\" || typeof candidate.reason !== \"string\") {\n    return null;\n  }\n  return { model: candidate.model, path: candidate.path, reason: candidate.reason };\n}\n\n/** Does a caught error match a vector's expected refusal? */\nexport function refusalMatches(params: { expected: { model: string; path: string; reason: string }; error: unknown }): boolean {\n  const actual = describeRefusal(params.error);\n  return (\n    actual !== null &&\n    actual.model === params.expected.model &&\n    actual.path === params.expected.path &&\n    actual.reason === params.expected.reason\n  );\n}\n"
+  ],
+  "mappings": ";;AAyDA,SAAS,MAAM,CAAC,QAMC;AAAA,EACf,OAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM,OAAO;AAAA,IACb,QAAQ;AAAA,IACR,YAAY,OAAO,aAAa;AAAA,IAChC,MAAM,OAAO,OAAO;AAAA,IACpB,UAAU,OAAO,WAAW;AAAA,IAC5B,aAAa;AAAA,EACf;AAAA;AAIK,IAAM,wBAAgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6CtC,IAAM,oBAAmC;AAAA,EAC9C,YAAY,EAAE,UAAU,aAAa;AAAA,EACrC,OAAO,CAAC;AAAA,EACR,YAAY,CAAC;AAAA,EACb,QAAQ;AAAA,IACN;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,IAAI,KAAK,CAAC;AAAA,QAC/C,OAAO,EAAE,MAAM,eAAe,MAAM,SAAS,CAAC;AAAA,QAC9C,OAAO,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,KAAK,CAAC;AAAA,QACrD,OAAO,EAAE,MAAM,SAAS,MAAM,SAAS,CAAC;AAAA,QACxC,OAAO,EAAE,MAAM,UAAU,MAAM,SAAS,CAAC;AAAA,MAC3C;AAAA,MACA,WAAW;AAAA,QACT,EAAE,MAAM,QAAQ,OAAO,QAAQ,aAAa,OAAO,MAAM,aAAa,QAAQ,MAAM,YAAY,MAAM;AAAA,QACtG,EAAE,MAAM,YAAY,OAAO,QAAQ,aAAa,YAAY,MAAM,aAAa,QAAQ,MAAM,YAAY,MAAM;AAAA,QAC/G,EAAE,MAAM,QAAQ,OAAO,QAAQ,aAAa,OAAO,MAAM,cAAc,QAAQ,MAAM,YAAY,MAAM;AAAA,MACzG;AAAA,MACA,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,IAAI,KAAK,CAAC;AAAA,QAC/C,OAAO,EAAE,MAAM,UAAU,MAAM,SAAS,CAAC;AAAA,QACzC,OAAO,EAAE,MAAM,YAAY,MAAM,MAAM,CAAC;AAAA,MAC1C;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,MAAM;AAAA,UACN,QAAQ,CAAC,QAAQ;AAAA,UACjB,YAAY,CAAC,IAAI;AAAA,UACjB,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,MACA,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,OAAO,EAAE,MAAM,QAAQ,MAAM,UAAU,IAAI,KAAK,CAAC;AAAA,QACjD,OAAO,EAAE,MAAM,QAAQ,MAAM,SAAS,CAAC;AAAA,QACvC,OAAO,EAAE,MAAM,kBAAkB,MAAM,UAAU,UAAU,KAAK,CAAC;AAAA,MACnE;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,MAAM;AAAA,UACN,QAAQ,CAAC,gBAAgB;AAAA,UACzB,YAAY,CAAC,IAAI;AAAA,UACjB,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,MACA,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,IAAI,KAAK,CAAC;AAAA,QAC/C,OAAO,EAAE,MAAM,eAAe,MAAM,UAAU,UAAU,KAAK,CAAC;AAAA,QAC9D,OAAO,EAAE,MAAM,SAAS,MAAM,SAAS,CAAC;AAAA,MAC1C;AAAA,MACA,WAAW,CAAC;AAAA,MACZ,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ,CAAC,OAAO,EAAE,MAAM,MAAM,MAAM,UAAU,IAAI,KAAK,CAAC,GAAG,OAAO,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,KAAK,CAAC,CAAC;AAAA,MACjH,WAAW;AAAA,QACT,EAAE,MAAM,SAAS,OAAO,OAAO,aAAa,QAAQ,MAAM,cAAc,QAAQ,MAAM,YAAY,MAAM;AAAA,MAC1G;AAAA,MACA,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAcO,IAAM,gBAAsC;AAAA,EACjD,MAAM,EAAE,QAAQ,cAAc;AAAA,EAC9B,KAAK,EAAE,SAAS,OAAO;AAAA,EACvB,UAAU;AAAA,EACV,OAAO,EAAE,QAAQ,cAAc;AAAA,EAC/B,KAAK;AACP;AAGO,IAAM,2BAAiD;AAAA,KACzD;AAAA,EACH,KAAK,EAAE,SAAS,QAAQ,QAAQ,SAAS;AAC3C;AAKO,IAAM,UAAsD,EAAE,GAAG,QAAQ,GAAG,OAAO;AA0BnF,IAAM,cAAwB;AAAA,EACnC,OAAO;AAAA,IACL,EAAE,IAAI,MAAM,aAAa,QAAQ,GAAG,MAAM,YAAY,OAAO,WAAW,QAAQ,eAAe;AAAA,IAC/F,EAAE,IAAI,MAAM,aAAa,QAAQ,GAAG,MAAM,YAAY,OAAO,WAAW,QAAQ,cAAc;AAAA,EAChG;AAAA,EACA,MAAM;AAAA,IACJ,EAAE,IAAI,MAAM,QAAQ,MAAM,UAAU,GAAG;AAAA,IACvC,EAAE,IAAI,MAAM,QAAQ,MAAM,UAAU,IAAI;AAAA,IACxC,EAAE,IAAI,MAAM,QAAQ,MAAM,UAAU,IAAI;AAAA,EAC1C;AAAA,EACA,YAAY;AAAA,IACV,EAAE,MAAM,OAAO,MAAM,aAAa,gBAAgB,KAAK;AAAA,IACvD,EAAE,MAAM,OAAO,MAAM,mBAAmB,gBAAgB,KAAK;AAAA,IAC7D,EAAE,MAAM,OAAO,MAAM,QAAQ,gBAAgB,KAAK;AAAA,EACpD;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,IAAI,MAAM,aAAa,QAAQ,GAAG,OAAO,OAAO;AAAA,IAClD,EAAE,IAAI,MAAM,aAAa,QAAQ,GAAG,OAAO,SAAS;AAAA,IACpD,EAAE,IAAI,MAAM,aAAa,MAAM,OAAO,aAAa;AAAA,EACrD;AAAA,EACA,MAAM,CAAC,EAAE,IAAI,MAAM,MAAM,UAAU,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;AAC5D;;ACxOA,IAAM,IAAY,QAAQ;AAC1B,IAAM,IAAY,QAAQ;AAC1B,IAAM,WAAW,EAAE,aAAa,EAAE;AAClC,IAAM,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;AAE3C,IAAM,mBAAmB,EAAE,IAAI,MAAM,MAAM,aAAa,OAAO,SAAS,QAAQ,KAAK;AAI9E,IAAM,kBAA4C;AAAA,EACvD;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,OAAO,UAAU,EAAE,EAAE;AAAA,IACjF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,UAAU,GAAG,QAAQ,EAAE,EAAE,EAAE;AAAA,IACxG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,WAAW;AAAA,IAC1C,UAAU,EAAE,MAAM,WAAW,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,OAAO,SAAS,EAAE,EAAE;AAAA,EACtG;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,EAAE;AAAA,IACjF,UAAU,EAAE,MAAM,cAAc;AAAA,EAClC;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,cAAc,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,EAAE;AAAA,IAC3E,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,aAAa,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,GAAG,QAAQ,EAAE,EAAE,EAAE;AAAA,IACjG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,cAAc,MAAM,EAAE,OAAO,EAAE,MAAM,MAAM,EAAE,EAAE;AAAA,IAClF,UAAU,EAAE,MAAM,cAAc;AAAA,EAClC;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,OAAO,QAAQ,WAAW;AAAA,IACzC,UAAU,EAAE,MAAM,WAAW,MAAM,EAAE,OAAO,OAAO,QAAQ,YAAY,MAAM,EAAE,OAAO,QAAQ,EAAE,EAAE;AAAA,EACpG;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,SAAS,MAAM,EAAE,OAAO,EAAE,OAAO,UAAU,EAAE,EAAE;AAAA,IAC9E,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,SAAS,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,UAAU,GAAG,QAAQ,EAAE,EAAE,EAAE;AAAA,IACrG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,aAAa,MAAM,EAAE,QAAQ,KAAK,EAAE;AAAA,IACnE,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,aAAa,MAAM,EAAE,QAAQ,MAAM,OAAO,SAAS,EAAE;AAAA,IACtF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,WAAW,MAAM,EAAE,IAAI,CAAC,OAAO,GAAG,QAAQ,KAAK,EAAE;AAAA,IAChF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,WAAW,MAAM,EAAE,IAAI,CAAC,OAAO,GAAG,QAAQ,MAAM,OAAO,SAAS,EAAE;AAAA,IACnG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,UAAU,EAAE,EAAE,EAAE;AAAA,IACvG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,UAAU,GAAG,QAAQ,EAAE,EAAE,EAAE,EAAE;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,cAAc,KAAK,EAAE,EAAE;AAAA,IACvF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,YAAY,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,SAAS,EAAE,EAAE,EAAE;AAAA,IACxG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,KAAK,EAAE,EAAE,EAAE;AAAA,IAClG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,YAAY,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,SAAS,EAAE,EAAE,EAAE;AAAA,IACrG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,OAAO,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,cAAc,EAAE,EAAE,EAAE,EAAE;AAAA,IAC1G,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,QAAQ,cAAc,GAAG,QAAQ,EAAE,EAAE,EAAE,EAAE;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE;AAAA,IAC3G,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,OAAO;AAAA,YACL,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,QAAQ;AAAA,UAC9F;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,MAAM,EAAE,EAAE,EAAE;AAAA,IACrG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,QAAQ,MAAM,0CAA0C,QAAQ,6BAA6B;AAAA,IACjH;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,OAAO,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,MAAM,EAAE,EAAE,EAAE;AAAA,IACxF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,OAAO,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,MAAM,EAAE,GAAG,OAAO,QAAQ,EAAE;AAAA,IAC1G;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,EAAE,EAAE;AAAA,IAC7E,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,QAAQ,EAAE,GAAG,OAAO,SAAS,EAAE;AAAA,IAC9G;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE;AAAA,IAC5G,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,SAAS;AAAA,MACtG;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,UAAU,KAAK,EAAE,EAAE;AAAA,IACjF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,UAAU,KAAK,GAAG,OAAO,SAAS,EAAE;AAAA,IACpG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,OAAO,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE;AAAA,IACrG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,QAAQ,MAAM,qCAAqC,QAAQ,2BAA2B;AAAA,IAC1G;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE,EAAE,EAAE,EAAE;AAAA,IACrG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE,EAAE,GAAG,OAAO,SAAS;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,MAAM,KAAK,iBAAiB,EAAE,EAAE;AAAA,IACjF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,MAAM,KAAK,kBAAkB,aAAa,EAAE,EAAE,EAAE;AAAA,IACnG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,MAAM,KAAK,kBAAkB,aAAa,EAAE,EAAE,EAAE;AAAA,IACjG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,QAAQ,MAAM,gCAAgC,QAAQ,0BAA0B;AAAA,IACpG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,MAAM,KAAK,kBAAkB,aAAa,KAAK,EAAE,EAAE;AAAA,IACpG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,QAAQ,MAAM,gCAAgC,QAAQ,0BAA0B;AAAA,IACpG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG,EAAE,IAAI,MAAM,OAAO,IAAI,CAAC,EAAE;AAAA,IACrE;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,OAAO,KAAK,aAAa,EAAE,GAAG,EAAE,IAAI,MAAM,OAAO,KAAK,aAAa,EAAE,CAAC,EAAE;AAAA,MACrG;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,MAAM,KAAK,kBAAkB,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,MAAM,UAAU,GAAG,CAAC,EAAE,EAAE,EAAE;AAAA,IACxF;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,MAAM,KAAK,kBAAkB,aAAa,GAAG,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,MAAM,UAAU,GAAG,CAAC,EAAE,EAAE;AAAA,QAC9F;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,MAAM,KAAK,kBAAkB,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE;AAAA,IAC3E;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,MAAM,KAAK,kBAAkB,aAAa,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;AAAA,QACjG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,MAAM,KAAK,kBAAkB,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE;AAAA,IAC3E;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,OAAO,MAAM,iCAAiC,QAAQ,iBAAiB;AAAA,IAC3F;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,OAAO,QAAQ,UAAU,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,UAAU,EAAE,EAAE,EAAE;AAAA,IAClF,UAAU,EAAE,MAAM,UAAU,SAAS,EAAE,OAAO,OAAO,MAAM,mBAAmB,QAAQ,mBAAmB,EAAE;AAAA,EAC7G;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,OAAO,QAAQ,UAAU,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,UAAU,GAAG,QAAQ,KAAK,EAAE,EAAE;AAAA,IAChG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,OAAO,MAAM,0BAA0B,QAAQ,mBAAmB;AAAA,IACtF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,WAAW,EAAE,EAAE,EAAE;AAAA,IACnF;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,YAAY,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE;AAAA,MACpG;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,GAAG,MAAM,EAAE,OAAO,UAAU,EAAE,EAAE;AAAA,IACnG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,KAAK,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,OAAO,UAAU,EAAE;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,GAAG,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;AAAA,IACjG,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,QAAQ,MAAM,gCAAgC,QAAQ,0BAA0B;AAAA,IACpG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,cAAc,MAAM,EAAE,OAAO,EAAE,OAAO,UAAU,GAAG,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE;AAAA,IAC1G,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,UAAU,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,QAAQ,IAAI,EAAE;AAAA,MAClF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,OAAO,EAAE,MAAM,WAAW,EAAE,EAAE;AAAA,IAC/E,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,UAAU,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE;AAAA,IAClG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,OAAO,EAAE,MAAM,WAAW;AAAA,QAC1B,QAAQ,EAAE,IAAI,MAAM,MAAM,YAAY,OAAO,KAAK,QAAQ,IAAI;AAAA,QAC9D,QAAQ,EAAE,OAAO,IAAI;AAAA,MACvB;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,OAAO,EAAE,MAAM,YAAY,KAAK,CAAC,QAAQ,EAAE;AAAA,UAC3C,QAAQ,EAAE,IAAI,MAAM,MAAM,YAAY,OAAO,KAAK,QAAQ,KAAK,aAAa,EAAE;AAAA,UAC9E,QAAQ,EAAE,OAAO,IAAI;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,cAAc,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,EAAE;AAAA,IACnF,UAAU,EAAE,MAAM,cAAc;AAAA,EAClC;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,WAAW;AAAA,IAC1C,UAAU,EAAE,MAAM,UAAU,SAAS,EAAE,OAAO,QAAQ,MAAM,iBAAiB,QAAQ,aAAa,EAAE;AAAA,EACtG;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,YAAY,QAAQ,WAAW;AAAA,IAC9C,UAAU,EAAE,MAAM,cAAc;AAAA,EAClC;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,OAAO,EAAE,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,EAAE;AAAA,IACrF;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,QAAQ,MAAM,4CAA4C,QAAQ,iBAAiB;AAAA,IACvG;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,OAAO,EAAE,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,YAAY,KAAK,EAAE,EAAE;AAAA,IAC/E;AAAA,IACA,UAAU,EAAE,MAAM,cAAc;AAAA,EAClC;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,OAAO,QAAQ,UAAU,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE;AAAA,IAChH,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS,EAAE,OAAO,QAAQ,MAAM,6BAA6B,QAAQ,iBAAiB;AAAA,IACxF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE;AAAA,IAC5E;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;AAAA,MAC7F;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,SAAS,QAAQ,WAAW;AAAA,IAC3C,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,SAAS,QAAQ,YAAY,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE;AAAA,IAClF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,YAAY,KAAK,EAAE;AAAA,IACtE,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,OAAO,QAAQ,QAAQ,YAAY,MAAM,EAAE,YAAY,MAAM,OAAO,SAAS,EAAE;AAAA,IACzF;AAAA,EACF;AACF;AASO,IAAM,qBAA8C;AAAA,EACzD,EAAE,IAAI,2BAA2B,aAAa,uFAAiF;AAAA,EAC/H,EAAE,IAAI,4BAA4B,aAAa,yHAAyH;AAAA,EACxK,EAAE,IAAI,6BAA6B,aAAa,oEAAoE;AAAA,EACpH,EAAE,IAAI,gCAAgC,aAAa,mIAA6H;AAAA,EAChL,EAAE,IAAI,6BAA6B,aAAa,6HAA6H;AAAA,EAC7K,EAAE,IAAI,4BAA4B,aAAa,uDAAuD;AAAA,EACtG,EAAE,IAAI,oBAAoB,aAAa,6FAA6F;AAAA,EACpI,EAAE,IAAI,iCAAiC,aAAa,0JAAoJ;AAAA,EACxM,EAAE,IAAI,kBAAkB,aAAa,+EAA+E;AAAA,EACpH,EAAE,IAAI,sBAAsB,aAAa,iFAAmF;AAAA,EAC5H,EAAE,IAAI,4BAA4B,aAAa,8GAA8G;AAAA,EAC7J,EAAE,IAAI,eAAe,aAAa,sGAAsG;AAAA,EACxI,EAAE,IAAI,uBAAuB,aAAa,uEAAuE;AAAA,EACjH,EAAE,IAAI,2BAA2B,aAAa,yFAAyF;AAAA,EACvI,EAAE,IAAI,uCAAuC,aAAa,+HAA+H;AAAA,EACzL,EAAE,IAAI,oCAAoC,aAAa,0DAA0D;AAAA,EACjH,EAAE,IAAI,sBAAsB,aAAa,mFAAqF;AAAA,EAC9H,EAAE,IAAI,iBAAiB,aAAa,oHAAoH;AAAA,EACxJ,EAAE,IAAI,+BAA+B,aAAa,+GAA+G;AACnK;;;ACnkBO,SAAS,eAAe,CAAC,OAAwE;AAAA,EACtG,IAAI,OAAO,UAAU,YAAY,UAAU;AAAA,IAAM,OAAO;AAAA,EACxD,MAAM,YAAY;AAAA,EAClB,IAAI,UAAU,SAAS;AAAA,IAAoB,OAAO;AAAA,EAClD,IAAI,OAAO,UAAU,UAAU,YAAY,OAAO,UAAU,SAAS,YAAY,OAAO,UAAU,WAAW,UAAU;AAAA,IACrH,OAAO;AAAA,EACT;AAAA,EACA,OAAO,EAAE,OAAO,UAAU,OAAO,MAAM,UAAU,MAAM,QAAQ,UAAU,OAAO;AAAA;AAI3E,SAAS,cAAc,CAAC,QAAgG;AAAA,EAC7H,MAAM,SAAS,gBAAgB,OAAO,KAAK;AAAA,EAC3C,OACE,WAAW,QACX,OAAO,UAAU,OAAO,SAAS,SACjC,OAAO,SAAS,OAAO,SAAS,QAChC,OAAO,WAAW,OAAO,SAAS;AAAA;",
+  "debugId": "D0D7C59A47D0228364756E2164756E21",
+  "names": []
+}

package/dist/vectors.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The conformance vectors.
+ *
+ * REWRITE tier (pure, no database): `{ models, scope, call }` must produce
+ * exactly `expected` — a rewritten call, a byte-identical passthrough, or a
+ * refusal matched on `{ model, path, reason }` (never on message text). Both
+ * bindings run every vector through their own pure rewriter.
+ *
+ * BEHAVIOR tier (live database): a checklist of named, normative scenarios
+ * each binding implements as tests against the canonical fixture + seed
+ * (`SCOPED_FIXTURE_*`, `SCOPED_SEED`). The ids are the shared contract; a
+ * binding's suite must cover every id.
+ */
+import type { ConformanceModelsMap } from "./fixture.ts";
+/** One ORM call in the shared `{ model, method, args }` language. */
+export type ScopedCall = {
+    readonly model: string;
+    readonly method: string;
+    readonly args?: Record<string, unknown>;
+};
+export type ExpectedRefusal = {
+    readonly model: string;
+    readonly path: string;
+    readonly reason: string;
+};
+export type RewriteExpectation = {
+    readonly kind: "rewrite";
+    readonly call: ScopedCall;
+} | {
+    readonly kind: "passthrough";
+} | {
+    readonly kind: "refuse";
+    readonly refusal: ExpectedRefusal;
+};
+export type RewriteVector = {
+    readonly name: string;
+    readonly description: string;
+    /** Tenancy map for this vector; defaults to `SCOPED_MODELS`. */
+    readonly models?: ConformanceModelsMap;
+    readonly scope: string | null;
+    readonly call: ScopedCall;
+    readonly expected: RewriteExpectation;
+};
+export type BehaviorCase = {
+    readonly id: string;
+    readonly description: string;
+};
+export declare const REWRITE_VECTORS: readonly RewriteVector[];
+/**
+ * Live-database scenarios every binding's suite must implement against the
+ * canonical fixture + seed, under tenant A unless stated. The id is the
+ * contract; each binding's test names the id it covers.
+ */
+export declare const BEHAVIOR_CHECKLIST: readonly BehaviorCase[];
+//# sourceMappingURL=vectors.d.ts.map

package/dist/vectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vectors.d.ts","sourceRoot":"","sources":["../src/vectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAIzD,qEAAqE;AACrE,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAaF,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAihBnD,CAAC;AAIF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,YAAY,EAoBrD,CAAC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@vibeorm/scoped-conformance",
+  "version": "0.1.0-alpha.0",
+  "description": "Binding-agnostic conformance artifact for the tenant-scoped database handle ($scoped): the canonical fixture schema, seed, tenancy map, rewrite vectors and behavior checklist that every binding (VibeORM first-class, Prisma extension) must satisfy",
+  "keywords": [
+    "orm",
+    "typescript",
+    "multi-tenancy",
+    "tenant-scoping",
+    "row-level-security",
+    "conformance",
+    "test-vectors",
+    "vibeorm",
+    "prisma"
+  ],
+  "homepage": "https://github.com/vibeorm/vibeorm/tree/master/packages/scoped-conformance#readme",
+  "bugs": {
+    "url": "https://github.com/vibeorm/vibeorm/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vibeorm/vibeorm.git",
+    "directory": "packages/scoped-conformance"
+  },
+  "license": "MIT",
+  "author": "VibeORM contributors",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18",
+    "bun": ">=1.2.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}