@weave-kit/engine 0.5.0 → 0.6.0

package/dist/runtime/data-access/details.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"details.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/details.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAc5C;;;GAGG;AACH,wBAAsB,aAAa,CACjC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,cAAc,EACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,mEAAmE;AACnE,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAUf"}
+{"version":3,"file":"details.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/details.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAe5C;;;GAGG;AACH,wBAAsB,aAAa,CACjC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,cAAc,EACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,mEAAmE;AACnE,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/runtime/data-access/details.js

@@ -1,5 +1,6 @@
 import { SchemaError } from '../../core/index.js';
-import { DETAILS_COLUMNS, FIELD_TYPES } from '../../core/index.js';
+import { DETAILS_COLUMNS, FIELD_TYPES, primaryFieldsOf } from '../../core/index.js';
+import { insertLinks } from './link.js';
 import { validateRecord } from './validate.js';
 import { WRITE_MODES } from './values.js';
 const q = (id) => `"${id}"`;
@@ -25,7 +26,9 @@ export async function insertDetails(db, parent, parentPk, data, registry, locale
         if (child === undefined)
             continue;
         const table = child.name;
-        const modelCols = child.fields.filter((f) => f.type !== FIELD_TYPES.DETAILS).map((f) => f.name);
+        const modelCols = child.fields
+            .filter((f) => f.type !== FIELD_TYPES.DETAILS && f.type !== FIELD_TYPES.MULTI_RELATION)
+            .map((f) => f.name);
         const cols = [...modelCols, DETAILS_COLUMNS.PARENT_ID, DETAILS_COLUMNS.PARENT_TYPE, DETAILS_COLUMNS.PARENT_IDX];
         for (let i = 0; i < rows.length; i++) {
             const row = rows[i];
@@ -40,6 +43,8 @@ export async function insertDetails(db, parent, parentPk, data, registry, locale
             const values = [...modelCols.map((c) => record[c] ?? null), parentPk, parent.name, i + 1];
             const placeholders = cols.map((_, idx) => `$${idx + 1}`).join(', ');
             await db.query(`INSERT INTO ${q(table)} (${cols.map(q).join(', ')}) VALUES (${placeholders})`, values);
+            const childPkValues = primaryFieldsOf(child).map((p) => record[p.name]);
+            await insertLinks(db, child, childPkValues, record, registry, locale);
         }
     }
 }

package/dist/runtime/data-access/details.js.map

@@ -1 +1 @@
-{"version":3,"file":"details.js","sourceRoot":"","sources":["../../../src/runtime/data-access/details.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAEpC,SAAS,aAAa,CAAC,MAAwB;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc;IACxD,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAa,EACb,MAAwB,EACxB,QAAiB,EACjB,IAA6B,EAC7B,QAAwB,EACxB,MAAe;IAEf,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAG,EAAyB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;QAEhH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;YACnH,CAAC;YACD,MAAM,MAAM,GAAG,GAA8B,CAAC;YAC9C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACxF,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,YAAY,GAAG,EAAE,MAAM,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAa,EACb,MAAwB,EACxB,QAAiB,EACjB,QAAwB;IAExB,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAG,EAAyB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QACzB,MAAM,EAAE,CAAC,KAAK,CACZ,eAAe,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,EAC/G,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"details.js","sourceRoot":"","sources":["../../../src/runtime/data-access/details.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAEpC,SAAS,aAAa,CAAC,MAAwB;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc;IACxD,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAa,EACb,MAAwB,EACxB,QAAiB,EACjB,IAA6B,EAC7B,QAAwB,EACxB,MAAe;IAEf,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAG,EAAyB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,cAAc,CAAC;aACtF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;QAEhH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;YACnH,CAAC;YACD,MAAM,MAAM,GAAG,GAA8B,CAAC;YAC9C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACxF,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,YAAY,GAAG,EAAE,MAAM,CAAC,CAAC;YACvG,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAa,EACb,MAAwB,EACxB,QAAiB,EACjB,QAAwB;IAExB,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAG,EAAyB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QACzB,MAAM,EAAE,CAAC,KAAK,CACZ,eAAe,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,EAC/G,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/runtime/data-access/formula.d.ts

@@ -1,8 +1,16 @@
-import type { ObjectDefinition, ObjectRegistry } from '../../core/index.js';
+import type { IdentitySubject, Locale, ObjectDefinition, ObjectRegistry } from '../../core/index.js';
 import type { Queryable } from './types.js';
+/** authorization input for cross-object resolution (subject absent = unrestricted/internal) */
+export interface FormulaAuth {
+    subject?: IdentitySubject;
+    roles: readonly string[];
+    locale?: Locale;
+}
 /**
  * Evaluate all formula fields of an object against a record (mutating it),
- * resolving cross-object references and details aggregations via PG.
+ * resolving cross-object references and details aggregations via PG. When
+ * `auth.subject` is set, every cross-object read is scoped by the subject's
+ * RBAC (a denied reference resolves to null rather than leaking data).
  */
-export declare function computeFormulas(object: ObjectDefinition, record: Record<string, unknown>, db: Queryable, registry: ObjectRegistry, now: Date): Promise<void>;
+export declare function computeFormulas(object: ObjectDefinition, record: Record<string, unknown>, db: Queryable, registry: ObjectRegistry, now: Date, recordKey?: string, auth?: FormulaAuth): Promise<void>;
 //# sourceMappingURL=formula.d.ts.map

package/dist/runtime/data-access/formula.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formula.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/formula.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA4G5C;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,EAAE,EAAE,SAAS,EACb,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,IAAI,GACR,OAAO,CAAC,IAAI,CAAC,CASf"}
+{"version":3,"file":"formula.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/formula.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAarG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAK5C,+FAA+F;AAC/F,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA+JD;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,EAAE,EAAE,SAAS,EACb,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,IAAI,EACT,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/runtime/data-access/formula.js

@@ -1,46 +1,107 @@
-import { DETAILS_COLUMNS, FIELD_TYPES, primaryKeyOf } from '../../core/index.js';
+import { DETAILS_COLUMNS, FIELD_TYPES, primaryFieldsOf, decodeRecordKey, encodeRecordKey, canonicalizePrimaryValue, resolvePermissionFor, buildRowScopeFor, } from '../../core/index.js';
 import { evaluate, extractRefs, parseFormula } from '../../core/index.js';
+import { scopeSuffix } from './builder.js';
 const q = (id) => `"${id}"`;
+/** relation-like field types that carry a cross-object `target` (details handled separately) */
+const REF_TYPES = new Set([FIELD_TYPES.RELATION, FIELD_TYPES.USER, FIELD_TYPES.DEPARTMENT]);
 /** resolve a cross-object field reference (relation target field), or null */
-async function resolveRefValue(object, parent, name, record, db, registry) {
+async function resolveRefValue(object, parent, name, record, db, registry, auth) {
     const parentField = object.fields.find((f) => f.name === parent);
-    if (parentField === undefined || parentField.type !== FIELD_TYPES.RELATION)
+    if (parentField === undefined || !REF_TYPES.has(parentField.type)) {
         return null;
+    }
     const fk = record[parent];
     if (fk === null || fk === undefined)
         return null;
     const target = registry.get(parentField.target);
     if (target === undefined)
         return null;
+    // RBAC: the subject must be able to read the target object (row + column scope);
+    // denied → null (no existence leak). No subject = unrestricted (internal use).
+    let scope;
+    if (auth?.subject !== undefined) {
+        const p = resolvePermissionFor(registry, target, auth.roles);
+        if (p?.read === undefined)
+            return null;
+        if (p.exclude.includes(name))
+            return null;
+        scope = buildRowScopeFor(registry, target, p.read, auth.subject, auth.roles, auth.locale);
+    }
     const table = target.name;
-    const pk = primaryKeyOf(target);
-    if (pk === undefined)
+    const pks = primaryFieldsOf(target);
+    if (pks.length === 0)
         return null;
-    const res = await db.query(`SELECT ${q(name)} FROM ${q(table)} WHERE ${q(pk)} = $1`, [fk]);
+    let sql;
+    let params;
+    if (pks.length === 1) {
+        sql = `SELECT ${q(name)} FROM ${q(table)} WHERE ${q(pks[0].name)} = $1`;
+        params = [fk];
+    }
+    else {
+        let values;
+        try {
+            values = decodeRecordKey(String(fk));
+        }
+        catch {
+            return null;
+        }
+        if (values.length !== pks.length)
+            return null;
+        const where = pks.map((p, i) => `${q(p.name)} = $${i + 1}`).join(' AND ');
+        sql = `SELECT ${q(name)} FROM ${q(table)} WHERE ${where}`;
+        params = values;
+    }
+    if (scope !== undefined) {
+        const scoped = scopeSuffix(scope, params.length);
+        sql = `${sql} AND (${scoped.sql})`;
+        params = [...params, ...scoped.params];
+    }
+    if (pks.length !== 1)
+        sql = `${sql} LIMIT 1`;
+    const res = await db.query(sql, params);
     const row = res.rows[0];
     return row === undefined ? null : (row[name] ?? null);
 }
 /** resolve details aggregation values for a child field (name = null for COUNT) */
-async function resolveAggregateValue(object, parent, name, record, db, registry) {
+async function resolveAggregateValue(object, parent, name, record, db, registry, recordKey, auth) {
     const parentField = object.fields.find((f) => f.name === parent);
     if (parentField === undefined || parentField.type !== FIELD_TYPES.DETAILS)
         return [];
     const child = registry.get(parentField.target);
     if (child === undefined)
         return [];
-    const pk = primaryKeyOf(object);
-    if (pk === undefined)
+    const pks = primaryFieldsOf(object);
+    if (pks.length === 0)
         return [];
-    const pkVal = record[pk];
-    if (pkVal === null || pkVal === undefined)
+    // details children are keyed by the parent's record_key (the external id); use
+    // the lossless SQL-computed key when the caller has it, else derive it
+    const pkVal = recordKey ?? encodeRecordKey(pks.map((f) => canonicalizePrimaryValue(record[f.name])));
+    if (pkVal === '')
         return [];
+    // RBAC: aggregating a child field requires read on the (parent-inherited) child
+    let scope;
+    if (auth?.subject !== undefined) {
+        const p = resolvePermissionFor(registry, child, auth.roles);
+        if (p?.read === undefined)
+            return [];
+        if (name !== null && p.exclude.includes(name))
+            return [];
+        scope = buildRowScopeFor(registry, child, p.read, auth.subject, auth.roles, auth.locale);
+    }
     const table = child.name;
-    const res = await db.query(`SELECT ${name === null ? '1' : q(name)} AS v FROM ${q(table)}
-     WHERE ${q(DETAILS_COLUMNS.PARENT_TYPE)} = $1 AND ${q(DETAILS_COLUMNS.PARENT_ID)} = $2`, [object.name, pkVal]);
+    let sql = `SELECT ${name === null ? '1' : q(name)} AS v FROM ${q(table)}
+     WHERE ${q(DETAILS_COLUMNS.PARENT_TYPE)} = $1 AND ${q(DETAILS_COLUMNS.PARENT_ID)} = $2`;
+    const params = [object.name, pkVal];
+    if (scope !== undefined) {
+        const scoped = scopeSuffix(scope, params.length);
+        sql = `${sql} AND (${scoped.sql})`;
+        params.push(...scoped.params);
+    }
+    const res = await db.query(sql, params);
     return res.rows.map((r) => r.v);
 }
 /** pre-fetch all cross refs + aggregates, then evaluate synchronously */
-async function evalWithResolvers(ast, object, record, db, registry, now) {
+async function evalWithResolvers(ast, object, record, db, registry, now, recordKey, auth) {
     const { fields: refs, aggregates } = extractRefs(ast);
     const refValues = new Map();
     for (const ref of refs) {
@@ -49,14 +110,14 @@ async function evalWithResolvers(ast, object, record, db, registry, now) {
         const key = `${ref.parent}.${ref.name}`;
         if (refValues.has(key))
             continue;
-        refValues.set(key, await resolveRefValue(object, ref.parent, ref.name, record, db, registry));
+        refValues.set(key, await resolveRefValue(object, ref.parent, ref.name, record, db, registry, auth));
     }
     const aggValues = new Map();
     for (const agg of aggregates) {
         const key = `${agg.parent}.${agg.name ?? ''}`;
         if (aggValues.has(key))
             continue;
-        aggValues.set(key, await resolveAggregateValue(object, agg.parent, agg.name, record, db, registry));
+        aggValues.set(key, await resolveAggregateValue(object, agg.parent, agg.name, record, db, registry, recordKey, auth));
     }
     return evaluate(ast, {
         record,
@@ -85,16 +146,18 @@ function coerce(value, type) {
 }
 /**
  * Evaluate all formula fields of an object against a record (mutating it),
- * resolving cross-object references and details aggregations via PG.
+ * resolving cross-object references and details aggregations via PG. When
+ * `auth.subject` is set, every cross-object read is scoped by the subject's
+ * RBAC (a denied reference resolves to null rather than leaking data).
  */
-export async function computeFormulas(object, record, db, registry, now) {
+export async function computeFormulas(object, record, db, registry, now, recordKey, auth) {
     const formulaFields = object.fields.filter((f) => f.formula !== undefined);
     if (formulaFields.length === 0)
         return;
     for (const field of formulaFields) {
         const formula = field.formula;
         const ast = parseFormula(formula);
-        const value = await evalWithResolvers(ast, object, record, db, registry, now);
+        const value = await evalWithResolvers(ast, object, record, db, registry, now, recordKey, auth);
         record[field.name] = coerce(value, field.type);
     }
 }

package/dist/runtime/data-access/formula.js.map

@@ -1 +1 @@
-{"version":3,"file":"formula.js","sourceRoot":"","sources":["../../../src/runtime/data-access/formula.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAI1E,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAEpC,8EAA8E;AAC9E,KAAK,UAAU,eAAe,CAC5B,MAAwB,EACxB,MAAc,EACd,IAAY,EACZ,MAA+B,EAC/B,EAAa,EACb,QAAwB;IAExB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CACxB,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,OAAO,EACxD,CAAC,EAAE,CAAC,CACL,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAwB,CAAC,IAAI,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,qBAAqB,CAClC,MAAwB,EACxB,MAAc,EACd,IAAmB,EACnB,MAA+B,EAC/B,EAAa,EACb,QAAwB;IAExB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CACxB,UAAU,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC;aACpD,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,EACvF,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CACrB,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAoB,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,iBAAiB,CAC9B,GAAgB,EAChB,MAAwB,EACxB,MAA+B,EAC/B,EAAa,EACb,QAAwB,EACxB,GAAS;IAET,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;YAAE,SAAS;QAClC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,EAAE;QACnB,MAAM;QACN,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI;QACxE,gBAAgB,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QAClF,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;KACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,IAAI;YACnB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAwB,EACxB,MAA+B,EAC/B,EAAa,EACb,QAAwB,EACxB,GAAS;IAET,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA0B,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACrG,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,OAAO,GAAI,KAA6B,CAAC,OAAO,CAAC;QACvD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}
+{"version":3,"file":"formula.js","sourceRoot":"","sources":["../../../src/runtime/data-access/formula.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAG1E,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AASpC,gGAAgG;AAChG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;AAEpG,8EAA8E;AAC9E,KAAK,UAAU,eAAe,CAC5B,MAAwB,EACxB,MAAc,EACd,IAAY,EACZ,MAA+B,EAC/B,EAAa,EACb,QAAwB,EACxB,IAAkB;IAElB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAE,WAAkC,CAAC,MAAM,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,iFAAiF;IACjF,+EAA+E;IAC/E,IAAI,KAAqD,CAAC;IAC1D,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,MAAiB,CAAC;IACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,GAAG,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,OAAO,CAAC;QACzE,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,GAAG,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;QAC1D,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,GAAG,GAAG,GAAG,GAAG,SAAS,MAAM,CAAC,GAAG,GAAG,CAAC;QACnC,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,GAAG,GAAG,GAAG,UAAU,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAwB,CAAC,IAAI,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,qBAAqB,CAClC,MAAwB,EACxB,MAAc,EACd,IAAmB,EACnB,MAA+B,EAC/B,EAAa,EACb,QAAwB,EACxB,SAAkB,EAClB,IAAkB;IAElB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,+EAA+E;IAC/E,uEAAuE;IACvE,MAAM,KAAK,GAAG,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,gFAAgF;IAChF,IAAI,KAAqD,CAAC;IAC1D,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,IAAI,GAAG,GAAG,UAAU,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC;aAC5D,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC;IAC1F,MAAM,MAAM,GAAc,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,GAAG,GAAG,GAAG,GAAG,SAAS,MAAM,CAAC,GAAG,GAAG,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAoB,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,iBAAiB,CAC9B,GAAgB,EAChB,MAAwB,EACxB,MAA+B,EAC/B,EAAa,EACb,QAAwB,EACxB,GAAS,EACT,SAAkB,EAClB,IAAkB;IAElB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;YAAE,SAAS;QAClC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACvH,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,EAAE;QACnB,MAAM;QACN,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI;QACxE,gBAAgB,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QAClF,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;KACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,IAAI;YACnB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAwB,EACxB,MAA+B,EAC/B,EAAa,EACb,QAAwB,EACxB,GAAS,EACT,SAAkB,EAClB,IAAkB;IAElB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA0B,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACrG,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,OAAO,GAAI,KAA6B,CAAC,OAAO,CAAC;QACvD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/runtime/data-access/index.d.ts

@@ -5,7 +5,7 @@ export { buildWhere, buildOrderBy, buildColumns, resolvePagination, buildFindSql
 export type { BuiltQuery, BuildContext, RowScope } from "./builder.js";
 export { validateRecord } from "./validate.js";
 export type { ValidateRecordOptions } from "./validate.js";
-export { ensureSeqTable, seqBucket, renderSeq, generateSeqNo, } from "./seqno.js";
+export { seqBucket, renderSeq, generateSeqNo, } from "./seqno.js";
 export { insertDetails, deleteDetailsChildren } from "./details.js";
 export { computeFormulas } from "./formula.js";
 export { executeRestrictedSql } from "./sql-executor.js";

package/dist/runtime/data-access/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EACV,MAAM,EACN,WAAW,EACX,WAAW,EACX,IAAI,EACJ,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EACV,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EACV,MAAM,EACN,WAAW,EACX,WAAW,EACX,IAAI,EACJ,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EACL,SAAS,EACT,SAAS,EACT,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EACV,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC"}

package/dist/runtime/data-access/index.js

@@ -1,7 +1,7 @@
 export { FILTER_OPS, SORT_DIRS, PAGINATION, WRITE_MODES } from "./values.js";
 export { buildWhere, buildOrderBy, buildColumns, resolvePagination, buildFindSql, buildCountSql, } from "./builder.js";
 export { validateRecord } from "./validate.js";
-export { ensureSeqTable, seqBucket, renderSeq, generateSeqNo, } from "./seqno.js";
+export { seqBucket, renderSeq, generateSeqNo, } from "./seqno.js";
 export { insertDetails, deleteDetailsChildren } from "./details.js";
 export { computeFormulas } from "./formula.js";
 export { executeRestrictedSql } from "./sql-executor.js";

package/dist/runtime/data-access/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/data-access/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa7E,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAKzD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/data-access/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa7E,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EACL,SAAS,EACT,SAAS,EACT,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAKzD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC"}

package/dist/runtime/data-access/link.d.ts

@@ -0,0 +1,7 @@
+import type { Locale, ObjectDefinition, ObjectRegistry } from '../../core/index.js';
+import type { Queryable } from './types.js';
+/** insert link rows on create (a multiRelation value present in the payload) */
+export declare function insertLinks(db: Queryable, owner: ObjectDefinition, ownerPkValues: readonly unknown[], payload: Record<string, unknown>, registry: ObjectRegistry, locale?: Locale): Promise<void>;
+/** replace link rows on update (only fields present in the payload) */
+export declare function replaceLinks(db: Queryable, owner: ObjectDefinition, ownerPkValues: readonly unknown[], payload: Record<string, unknown>, registry: ObjectRegistry, locale?: Locale): Promise<void>;
+//# sourceMappingURL=link.d.ts.map

package/dist/runtime/data-access/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/link.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAWpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA2E5C,gFAAgF;AAChF,wBAAsB,WAAW,CAC/B,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,gBAAgB,EACvB,aAAa,EAAE,SAAS,OAAO,EAAE,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,EAAE,cAAc,EACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CASf;AAED,uEAAuE;AACvE,wBAAsB,YAAY,CAChC,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,gBAAgB,EACvB,aAAa,EAAE,SAAS,OAAO,EAAE,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,EAAE,cAAc,EACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/runtime/data-access/link.js

@@ -0,0 +1,80 @@
+import { FIELD_TYPES, LINK_IDX_COLUMN, SchemaError, decodeRecordKey, linkOwnerColumn, linkTableName, linkTargetColumn, primaryFieldsOf, } from '../../core/index.js';
+const q = (id) => `"${id}"`;
+function multiFields(owner) {
+    return owner.fields.filter((f) => f.type === FIELD_TYPES.MULTI_RELATION);
+}
+/** decode an external target id into the raw PK values for the link columns */
+function targetPkValues(target, id, locale) {
+    const pks = primaryFieldsOf(target);
+    if (pks.length === 1)
+        return [id];
+    if (typeof id !== 'string') {
+        throw new SchemaError('data.field.type', { field: 'multiRelation', type: 'record key' }, locale);
+    }
+    const tuple = decodeRecordKey(id);
+    if (tuple.length !== pks.length) {
+        throw new SchemaError('data.field.multiRelationMissing', { field: 'multiRelation' }, locale);
+    }
+    return tuple;
+}
+/** insert the link rows for one multiRelation field (dedup by target PK; order via idx) */
+async function writeLinks(db, owner, field, target, ownerPkValues, ids, locale) {
+    const ownerCols = primaryFieldsOf(owner).map((p) => linkOwnerColumn(p.name));
+    const targetCols = primaryFieldsOf(target).map((p) => linkTargetColumn(p.name));
+    const cols = [...ownerCols, ...targetCols, LINK_IDX_COLUMN];
+    const seen = new Set();
+    const rows = [];
+    for (const id of ids) {
+        const tvals = targetPkValues(target, id, locale);
+        const key = tvals.map(String).join('\u0000');
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        rows.push([...ownerPkValues, ...tvals, rows.length]);
+    }
+    if (rows.length === 0)
+        return;
+    const placeholders = rows
+        .map((_, r) => `(${cols.map((_, c) => `$${r * cols.length + c + 1}`).join(', ')})`)
+        .join(', ');
+    await db.query(`INSERT INTO ${q(linkTableName(owner.name, field.name))} (${cols.map(q).join(', ')}) VALUES ${placeholders} ON CONFLICT DO NOTHING`, rows.flat());
+}
+/** delete every link row of one owner row for one multiRelation field */
+async function deleteFieldLinks(db, owner, field, ownerPkValues) {
+    const ownerCols = primaryFieldsOf(owner).map((p) => linkOwnerColumn(p.name));
+    const where = ownerCols.map((c, i) => `${q(c)} = $${i + 1}`).join(' AND ');
+    await db.query(`DELETE FROM ${q(linkTableName(owner.name, field.name))} WHERE ${where}`, [...ownerPkValues]);
+}
+function assertArray(value, owner, field, locale) {
+    if (!Array.isArray(value)) {
+        throw new SchemaError('data.field.type', { object: owner, field, type: 'array' }, locale);
+    }
+}
+/** insert link rows on create (a multiRelation value present in the payload) */
+export async function insertLinks(db, owner, ownerPkValues, payload, registry, locale) {
+    for (const field of multiFields(owner)) {
+        const value = payload[field.name];
+        if (value === undefined)
+            continue;
+        assertArray(value, owner.name, field.name, locale);
+        const target = registry.get(field.target);
+        if (target === undefined)
+            continue;
+        await writeLinks(db, owner, field, target, ownerPkValues, value, locale);
+    }
+}
+/** replace link rows on update (only fields present in the payload) */
+export async function replaceLinks(db, owner, ownerPkValues, payload, registry, locale) {
+    for (const field of multiFields(owner)) {
+        const value = payload[field.name];
+        if (value === undefined)
+            continue;
+        assertArray(value, owner.name, field.name, locale);
+        const target = registry.get(field.target);
+        if (target === undefined)
+            continue;
+        await deleteFieldLinks(db, owner, field, ownerPkValues);
+        await writeLinks(db, owner, field, target, ownerPkValues, value, locale);
+    }
+}
+//# sourceMappingURL=link.js.map

package/dist/runtime/data-access/link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.js","sourceRoot":"","sources":["../../../src/runtime/data-access/link.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,eAAe,EACf,WAAW,EACX,eAAe,EACf,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,CAAC,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAKpC,SAAS,WAAW,CAAC,KAAuB;IAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,cAAc,CAAC,CAAC;AAC/F,CAAC;AAED,+EAA+E;AAC/E,SAAS,cAAc,CAAC,MAAwB,EAAE,EAAW,EAAE,MAAe;IAC5E,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,UAAU,CACvB,EAAa,EACb,KAAuB,EACvB,KAAoB,EACpB,MAAwB,EACxB,aAAiC,EACjC,GAAuB,EACvB,MAAe;IAEf,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,YAAY,GAAG,IAAI;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;SAClF,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,EAAE,CAAC,KAAK,CACZ,eAAe,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,YAAY,yBAAyB,EACnI,IAAI,CAAC,IAAI,EAAE,CACZ,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,gBAAgB,CAC7B,EAAa,EACb,KAAuB,EACvB,KAAoB,EACpB,aAAiC;IAEjC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa,EAAE,KAAa,EAAE,MAAe;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAa,EACb,KAAuB,EACvB,aAAiC,EACjC,OAAgC,EAChC,QAAwB,EACxB,MAAe;IAEf,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAa,EACb,KAAuB,EACvB,aAAiC,EACjC,OAAgC,EAChC,QAAwB,EACxB,MAAe;IAEf,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/runtime/data-access/query.d.ts

@@ -1,22 +1,33 @@
 import type { AuditSink } from '../../core/audit/index.js';
 import type { EventPublisher } from '../../core/provider/event/index.js';
-import { type ScriptDispatcher } from '../../core/index.js';
+import { type GuardrailPolicy, type ScriptDispatcher, type WorkflowTimerSync } from '../../core/index.js';
+import { type PolicyApprovals } from '../tools/policies.js';
+import { type WorkflowStatus, type WorkflowHistory, type WorkflowTodo, type WorkflowOverride } from './workflow.js';
 import type { DataAccessContext, FindOptions, FindResult, ObjectDataAccess } from './types.js';
 /** controlled object data-access implementation (PG-backed) */
 export declare class DefaultObjectDataAccess implements ObjectDataAccess {
     private readonly audit?;
     private readonly script;
-    /** M10 diff replay: attach before/after row snapshots to update/delete audit events */
+    /** audit diff replay: attach before/after row snapshots to update/delete audit events */
     private readonly replay;
-    /** M12 live events: publish committed writes to the bus (undefined = zero overhead) */
+    /** live events: publish committed writes to the bus (undefined = zero overhead) */
     private readonly events?;
     /** objects currently dispatching onLoad — skips re-entrant onLoad (a hook re-reading the same object) */
     private readonly onLoadInFlight;
+    /** guardrail policies shared with the open-contract (empty = no policy gate on transitions) */
+    private readonly policies;
+    /** approval queue used when a policy or a transition requires approval */
+    private readonly approvals?;
+    /** workflow timer handle: re-arm/cancel a record's `onTimeout` on state changes */
+    private readonly workflowTimers?;
     constructor(options?: {
         audit?: AuditSink;
         script?: ScriptDispatcher;
         replay?: boolean;
         events?: EventPublisher;
+        policies?: readonly GuardrailPolicy[];
+        approvals?: PolicyApprovals;
+        workflowTimers?: WorkflowTimerSync;
     });
     /**
      * Run the read hook (`onLoad`) over a fetched batch. The hook receives the
@@ -42,6 +53,37 @@ export declare class DefaultObjectDataAccess implements ObjectDataAccess {
     findOne<T = Record<string, unknown>>(objectName: string, id: string, ctx: DataAccessContext): Promise<T | null>;
     create<T = Record<string, unknown>>(objectName: string, data: Record<string, unknown>, ctx: DataAccessContext): Promise<T>;
     update<T = Record<string, unknown>>(objectName: string, id: string, changes: Record<string, unknown>, ctx: DataAccessContext): Promise<T>;
+    /**
+     * Fire a workflow action against the three-layer runtime (instance/step/
+     * workitem). Runs in one transaction: the instance row is locked, the current
+     * step's workitems are quorum-evaluated, the new step/workitems are opened and
+     * the side-table status mirror is updated. The customer row is never touched.
+     */
+    transition<T = Record<string, unknown>>(objectName: string, id: string, action: string, ctx: DataAccessContext, payload?: Record<string, unknown>): Promise<T>;
+    /**
+     * Read a record's workflow status (state/node/actions/own workitems).
+     */
+    workflowStatus(objectName: string, id: string, ctx: DataAccessContext): Promise<WorkflowStatus>;
+    /** Acquire/renew the caller's presence lock on the current step (TTL lease). */
+    acquireWorkflowLock(objectName: string, id: string, ctx: DataAccessContext): Promise<{
+        expiresAt: Date;
+    }>;
+    /** Release the caller's presence lock. */
+    releaseWorkflowLock(objectName: string, id: string, ctx: DataAccessContext): Promise<void>;
+    /** Read a record's workflow history (steps + workitems). */
+    workflowHistory(objectName: string, id: string, ctx: DataAccessContext): Promise<WorkflowHistory>;
+    /** The subject's pending workitems across all objects. */
+    workflowTodos(ctx: DataAccessContext): Promise<WorkflowTodo[]>;
+    /** Admin override: jump the record to a node or terminate the instance. */
+    overrideWorkflow(objectName: string, id: string, patch: WorkflowOverride, ctx: DataAccessContext): Promise<{
+        state: string;
+        nodeId?: string;
+    }>;
+    /**
+     * Upsert a record's sparse metadata side-table row (status/owner/timestamps)
+     * inside the caller's transaction. `created` also stamps the creation facts.
+     */
+    private writeRecordMeta;
     delete(objectName: string, id: string, ctx: DataAccessContext): Promise<void>;
 }
 export declare function createDataAccess(options?: {
@@ -49,5 +91,8 @@ export declare function createDataAccess(options?: {
     script?: ScriptDispatcher;
     replay?: boolean;
     events?: EventPublisher;
+    policies?: readonly GuardrailPolicy[];
+    approvals?: PolicyApprovals;
+    workflowTimers?: WorkflowTimerSync;
 }): ObjectDataAccess;
 //# sourceMappingURL=query.d.ts.map

package/dist/runtime/data-access/query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/query.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAwC,KAAK,gBAAgB,EAAoC,MAAM,qBAAqB,CAAC;AAKpI,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA4I/F,+DAA+D;AAC/D,qBAAa,uBAAwB,YAAW,gBAAgB;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;IACzC,yGAAyG;IACzG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;gBAExC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,cAAc,CAAA;KAAO;IAOrH;;;;;;OAMG;YACW,SAAS;IA6BvB;;;;OAIG;YACW,aAAa;IAgB3B;;;;OAIG;YACW,YAAY;IA8BpB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAWnB,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAUd,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,CAAC,CAAC;IA8GP,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,CAAC,CAAC;IAgFP,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAgDpF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CAAO,GAAG,gBAAgB,CAE5J"}
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/runtime/data-access/query.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAA+D,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAyD,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC9N,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIhF,OAAO,EAQL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAGvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA8P/F,+DAA+D;AAC/D,qBAAa,uBAAwB,YAAW,gBAAgB;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;IACzC,yGAAyG;IACzG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAkB;IAC7C,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAoB;gBAGlD,OAAO,GAAE;QACP,KAAK,CAAC,EAAE,SAAS,CAAC;QAClB,MAAM,CAAC,EAAE,gBAAgB,CAAC;QAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,QAAQ,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;QACtC,SAAS,CAAC,EAAE,eAAe,CAAC;QAC5B,cAAc,CAAC,EAAE,iBAAiB,CAAC;KAC/B;IAWR;;;;;;OAMG;YACW,SAAS;IA6BvB;;;;OAIG;YACW,aAAa;IAkB3B;;;;OAIG;YACW,YAAY;IAgCpB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAiBnB,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAiBd,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,CAAC,CAAC;IAiIP,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,CAAC,CAAC;IA+Fb;;;;;OAKG;IACG,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1C,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,iBAAiB,EACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,CAAC,CAAC;IA0Gb;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;IAQrG,gFAAgF;IAC1E,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC;IAK/G,0CAA0C;IACpC,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhG,4DAA4D;IACtD,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAQvG,0DAA0D;IACpD,aAAa,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIpE,2EAA2E;IACrE,gBAAgB,CACpB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA+B9C;;;OAGG;YACW,eAAe;IAmBvB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAqDpF;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,QAAQ,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IACtC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,cAAc,CAAC,EAAE,iBAAiB,CAAC;CAC/B,GACL,gBAAgB,CAElB"}