aimeat 1.40.1 → 2.1.0

package/dist/src/services/workspace-access.js

@@ -1,6 +1,19 @@
 import { authorizeRead } from './access-guard.js';
 import { isSameOwner, isGEAI } from '../utils/gaii.js';
 import { ecoMayReadKey } from './ecosystem-access.js';
+/**
+ * True when this owner is the organism's creator or an admin. Org managers get automatic read+write
+ * access to EVERY workspace under the organism — they already manage its access grants, invitations,
+ * export and archive, so gating them out of the content itself was the illogical gap. Keyed on the
+ * BARE owner name, exactly like every other membership check (organisms.ts / consent.ts). Never
+ * throws; returns false for a missing owner / non-member / plain member.
+ */
+export async function isOrgManager(storage, orgId, ownerName) {
+    if (!ownerName)
+        return false;
+    const m = await storage.getMembership(orgId, ownerName);
+    return !!m && m.status === 'active' && (m.role === 'creator' || m.role === 'admin');
+}
 /**
  * Decide whether the caller may READ the content of one workspace.
  *
@@ -14,22 +27,28 @@ import { ecoMayReadKey } from './ecosystem-access.js';
  * Never throws; returns false on any miss.
  */
 export async function canReadWorkspace(storage, config, organism, callerSub, callerOwner, callerGaii, ws) {
-    // Gate 1: membership.
+    // Gate 1: membership. The owner's membership row also decides org-manager status (creator/admin),
+    // which grants an automatic pass on Gate 2 below — resolve it in the same lookup.
     let isMember = !!callerSub && organism.agentGaiis.includes(callerSub);
-    if (!isMember && callerOwner) {
+    let manager = false;
+    if (callerOwner) {
         const m = await storage.getMembership(organism.id, callerOwner);
-        isMember = !!m && m.status === 'active';
+        if (m && m.status === 'active') {
+            isMember = true;
+            manager = m.role === 'creator' || m.role === 'admin';
+        }
     }
     if (!isMember)
         return false;
-    // Gate 2: workspace read (manifest is the single gate record).
+    // Gate 2: workspace read (manifest is the single gate record). An org manager (creator/admin) passes
+    // unconditionally — they own the organism's access, so they read every workspace under it.
     const manKey = `organism.${organism.id}.w.${ws}.meta.manifest`;
     const scan = await storage.listAllMemory({ prefix: manKey, limit: 5 });
     const manRec = scan.items.find(r => r.key === manKey);
     if (!manRec)
         return false;
     let allowed;
-    if (manRec.ownerGaii === callerGaii || isSameOwner(manRec.ownerGaii, callerGaii)) {
+    if (manager || manRec.ownerGaii === callerGaii || isSameOwner(manRec.ownerGaii, callerGaii)) {
         allowed = true;
     }
     else {

package/dist/src/services/workspace-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-access.js","sourceRoot":"","sources":["../../../src/services/workspace-access.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,MAAoB,EACpB,QAAwB,EACxB,SAA6B,EAC7B,WAA+B,EAC/B,UAAkB,EAClB,EAAU;IAEV,sBAAsB;IACtB,IAAI,QAAQ,GAAG,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAChE,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,+DAA+D;IAC/D,MAAM,MAAM,GAAG,YAAY,QAAQ,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QACjF,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE;YACpD,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG;YAC9E,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM;SACvE,CAAC,CAAC;QACH,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,mGAAmG;IACnG,qGAAqG;IACrG,kGAAkG;IAClG,gGAAgG;IAChG,IAAI,OAAO,IAAI,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzG,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"workspace-access.js","sourceRoot":"","sources":["../../../src/services/workspace-access.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB,EAChB,KAAa,EACb,SAA6B;IAE7B,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,MAAoB,EACpB,QAAwB,EACxB,SAA6B,EAC7B,WAA+B,EAC/B,UAAkB,EAClB,EAAU;IAEV,kGAAkG;IAClG,kFAAkF;IAClF,IAAI,QAAQ,GAAG,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,qGAAqG;IACrG,2FAA2F;IAC3F,MAAM,MAAM,GAAG,YAAY,QAAQ,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,OAAgB,CAAC;IACrB,IAAI,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAC5F,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE;YACpD,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG;YAC9E,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM;SACvE,CAAC,CAAC;QACH,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,mGAAmG;IACnG,qGAAqG;IACrG,kGAAkG;IAClG,gGAAgG;IAChG,IAAI,OAAO,IAAI,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzG,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/services/workspace-provision.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file workspace-provision.ts
+ * @description Create a NEW workspace inside an organism from a manifest + per-namespace JSON schemas:
+ *   generate a ws id, lock each records schema (strict), write the manifest + readme, and register the
+ *   workspace in the organism's registry. Extracted so BOTH the MCP tool (aimeat_workspace_create) and
+ *   the REST route (POST /v1/organisms/:id/workspaces — app-provisionable via the organism:write scope)
+ *   share one implementation instead of two divergent copies of the schema-locking dance.
+ * @structure provisionWorkspace(storage, config, input) -> { ws, types, schemas_locked }
+ *   - WorkspaceProvisionError: thrown for a malformed manifest (surfaces as 400/validation)
+ * @usage const { ws } = await provisionWorkspace(storage, config, { orgId, ownerName, ownerGhii, name, manifest, schemas });
+ * @version-history
+ *   v1.0.0 -- 2026-07-14 -- Extracted from mcp/workspaces.ts _create; adds a REST provisioning path so
+ *     published apps can create their own structured data space (multi-tenant apps) under the owner.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import { WorkspaceMetaError } from './workspace-meta.js';
+export declare class WorkspaceProvisionError extends Error {
+    constructor(message: string);
+}
+type Manifest = {
+    objectTypes?: unknown[];
+    name?: unknown;
+    status?: unknown;
+} & Record<string, unknown>;
+export interface ProvisionWorkspaceInput {
+    orgId: string;
+    /** Bare owner name (registry `createdBy`). */
+    ownerName: string;
+    /** Owner GHII that OWNS the workspace meta + locks the schemas. */
+    ownerGhii: string;
+    name: string;
+    manifest: Manifest;
+    /** Map of namespace → JSON Schema to lock (strict) for each records space. */
+    schemas?: Record<string, Record<string, unknown>>;
+    readme?: string;
+}
+/**
+ * Provision a new workspace. Locks each namespace schema (strict) under the owner GHII, writes the
+ * manifest (validated against the manifest meta-schema) + readme, and appends the workspace to the
+ * organism's registry. Returns the generated ws id. Throws WorkspaceProvisionError / WorkspaceMetaError
+ * on a bad manifest. The CALLER is responsible for authorization (membership + role/scope).
+ */
+export declare function provisionWorkspace(storage: Storage, _config: AimeatConfig, input: ProvisionWorkspaceInput): Promise<{
+    ws: string;
+    types: string[];
+    schemas_locked: string[];
+}>;
+/** Re-export so callers can narrow the manifest-normalization error too. */
+export { WorkspaceMetaError };
+//# sourceMappingURL=workspace-provision.d.ts.map

package/dist/src/services/workspace-provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-provision.d.ts","sourceRoot":"","sources":["../../../src/services/workspace-provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAwB,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAG/E,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAC5B;AAED,KAAK,QAAQ,GAAG;IAAE,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExG,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAWD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAkCpE;AAED,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/src/services/workspace-provision.js

@@ -0,0 +1,56 @@
+import { normalizeObjectTypes, WorkspaceMetaError } from './workspace-meta.js';
+import { validateMemoryWrite } from './schema-validator.js';
+export class WorkspaceProvisionError extends Error {
+    constructor(message) { super(message); this.name = 'WorkspaceProvisionError'; }
+}
+/** Write a workspace-meta record under the owner GHII, version-aware (new = v1, existing = +1). */
+async function setMeta(storage, key, value, owner, now) {
+    const prev = await storage.getMemory(owner, key);
+    await storage.setMemory({
+        key, ownerGaii: owner, value, visibility: prev?.visibility ?? 'private', tags: prev?.tags ?? [], ttlHours: null,
+        version: prev ? prev.version + 1 : 1, createdAt: prev?.createdAt ?? now, updatedAt: now,
+    });
+}
+/**
+ * Provision a new workspace. Locks each namespace schema (strict) under the owner GHII, writes the
+ * manifest (validated against the manifest meta-schema) + readme, and appends the workspace to the
+ * organism's registry. Returns the generated ws id. Throws WorkspaceProvisionError / WorkspaceMetaError
+ * on a bad manifest. The CALLER is responsible for authorization (membership + role/scope).
+ */
+export async function provisionWorkspace(storage, _config, input) {
+    const man = input.manifest;
+    if (!man || typeof man !== 'object' || !Array.isArray(man.objectTypes)) {
+        throw new WorkspaceProvisionError('manifest must be an object with an objectTypes array.');
+    }
+    // Reject unsupported backings + infer mode from kind BEFORE anything is written (throws WorkspaceMetaError).
+    man.objectTypes = normalizeObjectTypes(man.objectTypes);
+    const schemaMap = input.schemas ?? {};
+    const wsId = 'ws-' + Date.now().toString(36) + Math.random().toString(36).slice(2, 5);
+    const root = `organism.${input.orgId}.w.${wsId}`;
+    const now = new Date().toISOString();
+    // 1. Lock the records schemas under the owner GHII (direct storage — no route owner/operator gate).
+    for (const [namespace, schema] of Object.entries(schemaMap)) {
+        if (!schema || typeof schema !== 'object')
+            continue;
+        await storage.setSchema({ keyPattern: `${root}.${namespace}`, applyTo: 'prefix', schemaJson: schema, schemaMode: 'strict', lockedBy: input.ownerGhii, setAt: now, updatedAt: now });
+    }
+    // 2. Manifest (validated against the manifest meta-schema).
+    const manifestValue = { ...man, id: input.orgId, status: (typeof man.status === 'string' ? man.status : undefined) || 'active' };
+    const mkey = `${root}.meta.manifest`;
+    const valid = await validateMemoryWrite(mkey, manifestValue, storage);
+    if (!valid.valid)
+        throw new WorkspaceProvisionError('Manifest rejected by schema: ' + JSON.stringify(valid.errors));
+    await setMeta(storage, mkey, manifestValue, input.ownerGhii, now);
+    // 3. Readme.
+    const summary = man.summary;
+    await setMeta(storage, `${root}.meta.readme`, input.readme || `# ${String(man.name || input.name)}\n\n${typeof summary === 'string' ? summary : ''}`, input.ownerGhii, now);
+    // 4. Register in the organism's workspace registry.
+    const regKey = `organism.${input.orgId}.meta.workspaces`;
+    const regRec = await storage.getMemory(input.ownerGhii, regKey);
+    const workspaces = (regRec?.value?.workspaces) ?? [];
+    await setMeta(storage, regKey, { workspaces: [...workspaces, { id: wsId, name: String(input.name || 'Workspace').trim() || 'Workspace', createdAt: now, createdBy: input.ownerName }] }, input.ownerGhii, now);
+    return { ws: wsId, types: man.objectTypes.map(o => o.name || '').filter(Boolean), schemas_locked: Object.keys(schemaMap) };
+}
+/** Re-export so callers can narrow the manifest-normalization error too. */
+export { WorkspaceMetaError };
+//# sourceMappingURL=workspace-provision.js.map

package/dist/src/services/workspace-provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-provision.js","sourceRoot":"","sources":["../../../src/services/workspace-provision.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC,CAAC,CAAC;CACxF;AAiBD,mGAAmG;AACnG,KAAK,UAAU,OAAO,CAAC,OAAgB,EAAE,GAAW,EAAE,KAAc,EAAE,KAAa,EAAE,GAAW;IAC9F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,CAAC,SAAS,CAAC;QACtB,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI;QAC/G,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG;KACxF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,OAAqB,EACrB,KAA8B;IAE9B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,uBAAuB,CAAC,uDAAuD,CAAC,CAAC;IAC7F,CAAC;IACD,6GAA6G;IAC7G,GAAG,CAAC,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAA6C,CAAc,CAAC;IAEvG,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,YAAY,KAAK,CAAC,KAAK,MAAM,IAAI,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,oGAAoG;IACpG,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACpD,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACtL,CAAC;IACD,4DAA4D;IAC5D,MAAM,aAAa,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,QAAQ,EAAE,CAAC;IACjI,MAAM,IAAI,GAAG,GAAG,IAAI,gBAAgB,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpH,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClE,aAAa;IACb,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC5K,oDAAoD;IACpD,MAAM,MAAM,GAAG,YAAY,KAAK,CAAC,KAAK,kBAAkB,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,CAAE,MAAM,EAAE,KAAgD,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IACjG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAE/M,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAG,GAAG,CAAC,WAAwC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3J,CAAC;AAED,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/src/services/workspace-versions.d.ts

@@ -0,0 +1,110 @@
+/**
+ * @file workspace-versions.ts
+ * @description Value-free helpers for workspace record VERSION HISTORY (`{base}.version.N` rows).
+ *   Every publish appends a full-copy `.version.N` snapshot, so a long-lived record drags an
+ *   ever-growing tail of history rows behind it. These helpers let the publish paths work with that
+ *   history WITHOUT loading a single historic value: `listVersionRefs` enumerates the (owner, key, N)
+ *   addresses via the value-free key-prefix primitive, and `maxVersionOf` yields the next version
+ *   number from the key names alone (the old paths loaded every version's full JSON value just to
+ *   parse N out of the key).
+ *   RETENTION: `effectiveMaxVersions` resolves the per-space history window (manifest objectType
+ *   `maxVersions` → node default `workspaceMaxVersions` / AIMEAT_WS_MAX_VERSIONS; 0 = keep all;
+ *   append-only `create_only` spaces are NEVER pruned), `versionRefsToPrune` picks the rows that
+ *   fall outside the window after a publish, and `compactWorkspaceVersions` is the one-shot
+ *   maintenance sweep that applies the same window to EXISTING bloat (admin route + core job).
+ * @structure
+ *   - VersionRef — one `.version.N` row's address (ownerGaii, key, n)
+ *   - versionNumberOf(key, base) — parse the trailing N (null for non-version keys)
+ *   - listVersionRefs(storage, base) — value-free enumeration of one record's version rows
+ *   - versionRefsByBase(storage, nsPrefix) — ONE value-free namespace scan, grouped per record base
+ *   - maxVersionOf(refs) — the highest N (0 when no history)
+ *   - effectiveMaxVersions(config, ot) — the retention window for a space (0 = keep all)
+ *   - versionRefsToPrune(refs, publishedN, window) — rows outside the window
+ *   - pruneVersionsAfterPublish(storage, config, opts) — best-effort prune after ONE publish
+ *   - compactWorkspaceVersions(storage, config, opts?) — one-shot sweep over existing history
+ * @usage
+ *   import { listVersionRefs, maxVersionOf } from '../services/workspace-versions.js';
+ *   const refs = await listVersionRefs(storage, base);
+ *   const n = maxVersionOf(refs) + 1;
+ * @version-history
+ *   v1.1.0 — 2026-07-16 — Retention (P2): per-space maxVersions window pruned on publish +
+ *     compactWorkspaceVersions one-shot sweep. Append-only (create_only) spaces are never pruned;
+ *     a workspace whose manifest cannot be found is skipped entirely (fail-safe).
+ *   v1.0.0 — 2026-07-16 — Initial: value-free version enumeration for the publish maxN scan (P1 of
+ *     the workspace-record version/archive performance work).
+ */
+import type { Storage } from '../storage/interface.js';
+import type { AimeatConfig } from '../config.js';
+/** The address of one `.version.N` history row — no value loaded. */
+export interface VersionRef {
+    ownerGaii: string;
+    key: string;
+    /** The parsed version number N. */
+    n: number;
+}
+/** Parse the trailing N of `{base}.version.N`; null when `key` is not a version row of `base`
+ *  (including `{base}.version.notanumber` and any deeper suffix). */
+export declare function versionNumberOf(key: string, base: string): number | null;
+/** VALUE-FREE list of one record's `.version.N` rows (active rows only — matching the default
+ *  archive filter the old value-loading scan used). Uses the key-prefix address primitive when the
+ *  backend has it; the fallback loads values (correct, just slower — no current backend needs it). */
+export declare function listVersionRefs(storage: Storage, base: string): Promise<VersionRef[]>;
+/** ONE value-free scan of a whole namespace's version rows, grouped by record base
+ *  (`{nsPrefix}{instance}`) — the batch-publish amortisation of {@link listVersionRefs}. */
+export declare function versionRefsByBase(storage: Storage, nsPrefix: string): Promise<Map<string, VersionRef[]>>;
+/** The highest version number among the refs — 0 when the record has no history yet. */
+export declare function maxVersionOf(refs: VersionRef[]): number;
+/** The manifest objectType fields retention consults. */
+export interface RetentionObjType {
+    create_only?: unknown;
+    maxVersions?: unknown;
+    versioned?: unknown;
+}
+/**
+ * The retention window for a space: how many `.version.N` snapshots to keep per record.
+ * - `create_only` (append-only) spaces → 0 (NEVER pruned — their history is the record).
+ * - A finite non-negative `maxVersions` on the objectType overrides per space (0 = keep all).
+ * - Otherwise the node default `workspaceMaxVersions` (AIMEAT_WS_MAX_VERSIONS; 0/negative = keep all).
+ * Returns 0 for "keep everything".
+ */
+export declare function effectiveMaxVersions(config: Pick<AimeatConfig, 'workspaceMaxVersions'>, ot?: RetentionObjType | null): number;
+/** The refs that fall OUTSIDE the window once version `publishedN` exists: keep
+ *  `publishedN-window+1 … publishedN` (the window includes the just-published snapshot), prune the
+ *  rest. Empty when window <= 0 (keep all). */
+export declare function versionRefsToPrune(refs: VersionRef[], publishedN: number, window: number): VersionRef[];
+/**
+ * Best-effort history prune after ONE publish: deletes the `.version.N` rows outside the space's
+ * retention window. `refs` is the PRE-publish enumeration the caller already holds (it never includes
+ * the snapshot just written). Never throws — a prune failure must not fail the publish that succeeded.
+ * Returns the number of rows pruned.
+ */
+export declare function pruneVersionsAfterPublish(storage: Storage, config: Pick<AimeatConfig, 'workspaceMaxVersions'>, opts: {
+    refs: VersionRef[];
+    publishedN: number;
+    ot?: RetentionObjType | null;
+}): Promise<number>;
+export interface CompactionResult {
+    /** `.version.N` rows enumerated (active rows, value-free). */
+    versionRowsScanned: number;
+    /** Rows deleted. */
+    pruned: number;
+    /** Record instances that lost at least one history row. */
+    recordsPruned: number;
+    /** Workspaces whose manifest could not be read — skipped entirely (fail-safe: without the
+     *  manifest we cannot know a space is append-only). */
+    workspacesSkipped: number;
+}
+/**
+ * ONE-SHOT compaction of EXISTING version bloat: applies the same retention window the publish path
+ * now enforces to every workspace record's accumulated `.version.N` history. Value-free scan
+ * (addresses only); per (org, ws) the manifest is read ONCE and each namespace's objectType decides
+ * the window (`create_only` → skip, `maxVersions` override, else the node default). A workspace
+ * whose manifest is missing/unreadable is SKIPPED entirely — never prune what we cannot classify.
+ * Only active rows are touched (archived history stays in the archive). Optionally scoped to one
+ * organism. Exposed via POST /v1/admin/maintenance/compact-workspace-versions and the
+ * `workspace-version-compaction` core job handler.
+ */
+export declare function compactWorkspaceVersions(storage: Storage, config: Pick<AimeatConfig, 'workspaceMaxVersions'>, opts?: {
+    organismId?: string;
+}): Promise<CompactionResult>;
+//# sourceMappingURL=workspace-versions.d.ts.map

package/dist/src/services/workspace-versions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-versions.d.ts","sourceRoot":"","sources":["../../../src/services/workspace-versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAIjD,qEAAqE;AACrE,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,CAAC,EAAE,MAAM,CAAC;CACX;AAED;qEACqE;AACrE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKxE;AAED;;sGAEsG;AACtG,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAW3F;AAED;4FAC4F;AAC5F,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAkB9G;AAED,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,CAIvD;AAID,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,EAAE,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,CAK7H;AAED;;+CAE+C;AAC/C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAGvG;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAClD,IAAI,EAAE;IAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;CAAE,GAC7E,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB;2DACuD;IACvD,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAClD,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAkD3B"}

package/dist/src/services/workspace-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-versions.js","sourceRoot":"","sources":["../../../src/services/workspace-versions.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAU5C;qEACqE;AACrE,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;sGAEsG;AACtG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,IAAY;IAClE,MAAM,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC;IAClC,MAAM,KAAK,GAA8C,OAAO,CAAC,sBAAsB;QACrF,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC;QAC9C,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;4FAC4F;AAC5F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB,EAAE,QAAgB;IACxE,MAAM,KAAK,GAA8C,OAAO,CAAC,sBAAsB;QACrF,CAAC,CAAC,MAAM,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC;QAChD,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,4FAA4F;QAC5F,iEAAiE;QACjE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG;YAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAkD,EAAE,EAA4B;IACnH,IAAI,EAAE,EAAE,WAAW,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC;IAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;+CAE+C;AAC/C,MAAM,UAAU,kBAAkB,CAAC,IAAkB,EAAE,UAAkB,EAAE,MAAc;IACvF,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,MAAkD,EAClD,IAA8E;IAE9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/H,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;QACtF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,uDAAwD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7F,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAcD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,MAAkD,EAClD,IAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,MAAM,GAAqB,EAAE,kBAAkB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IAC9G,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC;IAI7E,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,YAAY,GAAG,KAAK,EAAE,KAAa,EAAE,EAAU,EAA4B,EAAE;QACjF,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;QACpE,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,KAAK,MAAM,EAAE,gBAAgB,CAAC;YACvD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3E,GAAG,GAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,EAAE,KAA8B,IAAI,IAAI,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;QAAC,CAAC;QACvB,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,4FAA4F;QAC5F,wFAAwF;QACxF,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;QACvF,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,MAAM,IAAI,CAAC;YAAE,SAAS,CAAG,4BAA4B;QACzD,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,CAAC,aAAa,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC,IAAI,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,gBAAgB;YAAE,MAAM,CAAC,MAAM,IAAI,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;;YAChF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,wCAAwC,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,kBAAkB,wBAAwB,MAAM,CAAC,aAAa,WAAW,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,iBAAiB,4CAA4C,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvQ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/storage/adapter/legacy-memory-adapter.d.ts

@@ -0,0 +1,61 @@
+/**
+ * @file src/storage/adapter/legacy-memory-adapter.ts
+ * @description Phase 0 memory adapter: implements {@link MemoryStorageAdapter} by delegating to the
+ *   existing fat `Storage` provider. This is the coexistence bridge — the new
+ *   Service → Repository → Adapter stack runs on top of the SAME storage the routes use today, so the
+ *   framework can land with ZERO behaviour change. Each primitive is a thin pass-through to the
+ *   equivalent `Storage` method; the two composite primitives that have no direct 1:1 (getByOwners,
+ *   bulkUpsert, bulkDelete, withTransaction) are expressed in terms of existing methods and will be
+ *   replaced by real per-backend primitives in later phases (bulk write / ACID transaction).
+ *
+ * @structure LegacyMemoryAdapter — constructor(storage); one method per adapter primitive
+ * @usage const adapter = new LegacyMemoryAdapter(storage);
+ * @version-history
+ *   v1.0.0 — 2026-07-15 — Phase 0 scaffolding: wraps Storage, no behaviour change.
+ */
+import type { MemoryRecord, Storage } from '../interface.js';
+import type { CountOpts, KeyPrefixOpts, ListOpts, MemoryMetaRow, MemoryRef, MemoryStorageAdapter, MemoryTextHit, MemoryTextSearchOpts, MemoryVersionRecord } from './memory-adapter.js';
+export declare class LegacyMemoryAdapter implements MemoryStorageAdapter {
+    private readonly storage;
+    constructor(storage: Storage);
+    getByKey(ownerGaii: string, key: string): Promise<MemoryRecord | null>;
+    /** One key across many identities in one IN read: `listMemoryForOwners({ prefix: key })` returns the
+     *  key plus any siblings sharing the prefix, so filter to the exact key. Matches the single-query
+     *  path the owner-scope helper already uses. */
+    getByOwners(ownerGaiis: string[], key: string): Promise<MemoryRecord[]>;
+    /** Many keys under one owner in one IN read. Uses the bulk primitive when the backend has it; else
+     *  falls back to a per-key loop (correct, just N round-trips). */
+    getByKeys(ownerGaii: string, keys: string[]): Promise<MemoryRecord[]>;
+    findByOwner(ownerGaii: string, opts?: ListOpts): Promise<MemoryRecord[]>;
+    findByOwners(ownerGaiis: string[], opts?: ListOpts): Promise<MemoryRecord[]>;
+    findMetaByOwner(ownerGaii: string, opts?: ListOpts): Promise<MemoryMetaRow[]>;
+    findMetaByOwners(ownerGaiis: string[], opts?: ListOpts): Promise<MemoryMetaRow[]>;
+    findByKeyPrefix(opts?: KeyPrefixOpts): Promise<{
+        items: MemoryRecord[];
+        total: number;
+    }>;
+    countByOwners(ownerGaiis: string[], opts?: CountOpts): Promise<number>;
+    sumBytesByOwner(ownerGaii: string): Promise<number>;
+    sumBytesByOwners(ownerGaiis: string[]): Promise<number>;
+    textSearch(query: string, opts?: MemoryTextSearchOpts): Promise<MemoryTextHit[]>;
+    upsert(record: MemoryRecord): Promise<MemoryRecord>;
+    upsertIfVersion(record: MemoryRecord, expectedVersion: number): Promise<MemoryRecord | null>;
+    /** Bulk upsert via the backend's one-transaction primitive when present (SQLite: one commit); else a
+     *  sequential loop (correct, per-row commit). Per-row version/history semantics are identical either way. */
+    bulkUpsert(records: MemoryRecord[]): Promise<MemoryRecord[]>;
+    deleteByKey(ownerGaii: string, key: string): Promise<boolean>;
+    /** Sequential delete by explicit ref list. (Refs may span owners, so this stays a loop; the
+     *  single-owner record-family case uses {@link deleteSubtree}'s one-statement primitive.) */
+    bulkDelete(refs: MemoryRef[]): Promise<number>;
+    /** Delete a record's whole family under one owner. Uses the backend's one-statement subtree primitive
+     *  when present; else enumerates the subtree (one prefix read) and deletes each (fallback). */
+    deleteSubtree(ownerGaii: string, baseKey: string): Promise<number>;
+    history(ownerGaii: string, key: string, opts?: {
+        limit?: number;
+    }): Promise<MemoryVersionRecord[]>;
+    /** Phase 0: runs the callback directly — the fat provider offers no transaction at this seam, and the
+     *  wrapped operations are already individually consistent. Per-backend adapters (Phase 4) implement a
+     *  real ACID transaction here so a multi-row operation commits atomically. */
+    withTransaction<T>(fn: () => Promise<T>): Promise<T>;
+}
+//# sourceMappingURL=legacy-memory-adapter.d.ts.map

package/dist/src/storage/adapter/legacy-memory-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-memory-adapter.d.ts","sourceRoot":"","sources":["../../../../src/storage/adapter/legacy-memory-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EACb,QAAQ,EACR,aAAa,EACb,SAAS,EACT,oBAAoB,EACpB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,qBAAa,mBAAoB,YAAW,oBAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,OAAO;IAI7C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAItE;;oDAEgD;IAC1C,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAM7E;sEACkE;IAC5D,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAa3E,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIxE,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAK5E,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAI7E,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAKjF,eAAe,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAMxF,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAKtE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAInD,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAOvD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAMhF,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAInD,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAO5F;iHAC6G;IACvG,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAUlE,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7D;iGAC6F;IACvF,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAQpD;mGAC+F;IACzF,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAaxE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAMlG;;kFAE8E;IAC9E,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAGrD"}

package/dist/src/storage/adapter/legacy-memory-adapter.js

@@ -0,0 +1,135 @@
+export class LegacyMemoryAdapter {
+    storage;
+    constructor(storage) {
+        this.storage = storage;
+    }
+    // ── Point + cross-owner reads ──────────────────────────────────────
+    getByKey(ownerGaii, key) {
+        return this.storage.getMemory(ownerGaii, key);
+    }
+    /** One key across many identities in one IN read: `listMemoryForOwners({ prefix: key })` returns the
+     *  key plus any siblings sharing the prefix, so filter to the exact key. Matches the single-query
+     *  path the owner-scope helper already uses. */
+    async getByOwners(ownerGaiis, key) {
+        if (ownerGaiis.length === 0)
+            return [];
+        const rows = await this.storage.listMemoryForOwners(ownerGaiis, { prefix: key });
+        return rows.filter(r => r.key === key);
+    }
+    /** Many keys under one owner in one IN read. Uses the bulk primitive when the backend has it; else
+     *  falls back to a per-key loop (correct, just N round-trips). */
+    async getByKeys(ownerGaii, keys) {
+        if (keys.length === 0)
+            return [];
+        if (this.storage.getMemoryByKeys)
+            return this.storage.getMemoryByKeys(ownerGaii, keys);
+        const out = [];
+        for (const key of keys) {
+            const r = await this.storage.getMemory(ownerGaii, key);
+            if (r)
+                out.push(r);
+        }
+        return out;
+    }
+    // ── Keyspace listings ──────────────────────────────────────────────
+    findByOwner(ownerGaii, opts) {
+        return this.storage.listMemory(ownerGaii, opts);
+    }
+    findByOwners(ownerGaiis, opts) {
+        if (ownerGaiis.length === 0)
+            return Promise.resolve([]);
+        return this.storage.listMemoryForOwners(ownerGaiis, opts);
+    }
+    findMetaByOwner(ownerGaii, opts) {
+        return this.storage.listMemoryMeta(ownerGaii, opts);
+    }
+    findMetaByOwners(ownerGaiis, opts) {
+        if (ownerGaiis.length === 0)
+            return Promise.resolve([]);
+        return this.storage.listMemoryMetaForOwners(ownerGaiis, opts);
+    }
+    findByKeyPrefix(opts) {
+        return this.storage.listAllMemory(opts);
+    }
+    // ── DB-side aggregates ─────────────────────────────────────────────
+    countByOwners(ownerGaiis, opts) {
+        if (ownerGaiis.length === 0)
+            return Promise.resolve(0);
+        return this.storage.countMemory(ownerGaiis, opts);
+    }
+    sumBytesByOwner(ownerGaii) {
+        return this.storage.sumMemoryBytes(ownerGaii);
+    }
+    sumBytesByOwners(ownerGaiis) {
+        if (ownerGaiis.length === 0)
+            return Promise.resolve(0);
+        return this.storage.sumMemoryBytesForOwners(ownerGaiis);
+    }
+    // ── Full-text search ───────────────────────────────────────────────
+    textSearch(query, opts) {
+        return this.storage.searchText(query, opts);
+    }
+    // ── Writes ─────────────────────────────────────────────────────────
+    upsert(record) {
+        return this.storage.setMemory(record);
+    }
+    upsertIfVersion(record, expectedVersion) {
+        // The fat provider exposes setMemoryIfVersion optionally; fall back to a plain upsert only when the
+        // backend genuinely lacks it (the route already guards on `storage.setMemoryIfVersion` existing).
+        if (this.storage.setMemoryIfVersion)
+            return this.storage.setMemoryIfVersion(record, expectedVersion);
+        return this.storage.setMemory(record).then(r => r);
+    }
+    /** Bulk upsert via the backend's one-transaction primitive when present (SQLite: one commit); else a
+     *  sequential loop (correct, per-row commit). Per-row version/history semantics are identical either way. */
+    async bulkUpsert(records) {
+        if (records.length === 0)
+            return [];
+        if (this.storage.bulkSetMemory)
+            return this.storage.bulkSetMemory(records);
+        const out = [];
+        for (const r of records)
+            out.push(await this.storage.setMemory(r));
+        return out;
+    }
+    // ── Deletes ────────────────────────────────────────────────────────
+    deleteByKey(ownerGaii, key) {
+        return this.storage.deleteMemory(ownerGaii, key);
+    }
+    /** Sequential delete by explicit ref list. (Refs may span owners, so this stays a loop; the
+     *  single-owner record-family case uses {@link deleteSubtree}'s one-statement primitive.) */
+    async bulkDelete(refs) {
+        let deleted = 0;
+        for (const { ownerGaii, key } of refs) {
+            if (await this.storage.deleteMemory(ownerGaii, key))
+                deleted++;
+        }
+        return deleted;
+    }
+    /** Delete a record's whole family under one owner. Uses the backend's one-statement subtree primitive
+     *  when present; else enumerates the subtree (one prefix read) and deletes each (fallback). */
+    async deleteSubtree(ownerGaii, baseKey) {
+        if (this.storage.deleteMemorySubtree)
+            return this.storage.deleteMemorySubtree(ownerGaii, baseKey);
+        const rows = await this.storage.listMemory(ownerGaii, { prefix: baseKey });
+        const refs = rows.filter(r => r.key === baseKey || r.key.startsWith(baseKey + '.'));
+        let deleted = 0;
+        for (const r of refs) {
+            if (await this.storage.deleteMemory(r.ownerGaii, r.key))
+                deleted++;
+        }
+        return deleted;
+    }
+    // ── History ────────────────────────────────────────────────────────
+    history(ownerGaii, key, opts) {
+        return this.storage.listMemoryHistory(ownerGaii, key, opts);
+    }
+    // ── Transaction seam ───────────────────────────────────────────────
+    /** Phase 0: runs the callback directly — the fat provider offers no transaction at this seam, and the
+     *  wrapped operations are already individually consistent. Per-backend adapters (Phase 4) implement a
+     *  real ACID transaction here so a multi-row operation commits atomically. */
+    withTransaction(fn) {
+        return fn();
+    }
+}
+//# sourceMappingURL=legacy-memory-adapter.js.map

package/dist/src/storage/adapter/legacy-memory-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-memory-adapter.js","sourceRoot":"","sources":["../../../../src/storage/adapter/legacy-memory-adapter.ts"],"names":[],"mappings":"AA4BA,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,OAAgB;QAAhB,YAAO,GAAP,OAAO,CAAS;IAAG,CAAC;IAEjD,sEAAsE;IAEtE,QAAQ,CAAC,SAAiB,EAAE,GAAW;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAED;;oDAEgD;IAChD,KAAK,CAAC,WAAW,CAAC,UAAoB,EAAE,GAAW;QACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;sEACkE;IAClE,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,IAAc;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvF,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACvD,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IAEtE,WAAW,CAAC,SAAiB,EAAE,IAAe;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,YAAY,CAAC,UAAoB,EAAE,IAAe;QAChD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,eAAe,CAAC,SAAiB,EAAE,IAAe;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,gBAAgB,CAAC,UAAoB,EAAE,IAAe;QACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,eAAe,CAAC,IAAoB;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,sEAAsE;IAEtE,aAAa,CAAC,UAAoB,EAAE,IAAgB;QAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,eAAe,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,gBAAgB,CAAC,UAAoB;QACnC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,sEAAsE;IAEtE,UAAU,CAAC,KAAa,EAAE,IAA2B;QACnD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,sEAAsE;IAEtE,MAAM,CAAC,MAAoB;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,eAAe,CAAC,MAAoB,EAAE,eAAuB;QAC3D,oGAAoG;QACpG,kGAAkG;QAClG,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED;iHAC6G;IAC7G,KAAK,CAAC,UAAU,CAAC,OAAuB;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IAEtE,WAAW,CAAC,SAAiB,EAAE,GAAW;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAED;iGAC6F;IAC7F,KAAK,CAAC,UAAU,CAAC,IAAiB;QAChC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YACtC,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;mGAC+F;IAC/F,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,OAAe;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;QACpF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,sEAAsE;IAEtE,OAAO,CAAC,SAAiB,EAAE,GAAW,EAAE,IAAyB;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,sEAAsE;IAEtE;;kFAE8E;IAC9E,eAAe,CAAI,EAAoB;QACrC,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;CACF"}