mindoodb 0.0.94 → 0.0.96

package/dist/core/query/queryView.d.ts

@@ -32,6 +32,14 @@ export interface MindooQueryViewDefinition {
      * `_textScoreRaw` (engine-specific raw score).
      */
     text?: MindooQueryTextClause;
+    /**
+     * Restrict the view to documents whose id matches this prefix or one of
+     * these prefixes (boundary-aware: `"m_r3"` matches `m_r3` and `m_r3_…`).
+     * Applies to every source unless a source provides its own `idPrefix`.
+     * When a source's summary is scoped (`SummaryConfig.idPrefixes`), the
+     * prefixes must lie inside that scope.
+     */
+    idPrefix?: string | string[];
     /** View columns (categories/sorting/totals work as in persistent views). */
     columns: Array<VirtualViewColumn | VirtualViewColumnOptions>;
     categorizationStyle?: CategorizationStyle;
@@ -55,6 +63,11 @@ export interface EphemeralViewSource {
      * definition-level `text` clause for this source.
      */
     text?: MindooQueryTextClause;
+    /**
+     * Per-source id-prefix filter. When set it replaces the definition-level
+     * `idPrefix` for this source.
+     */
+    idPrefix?: string | string[];
     /**
      * Origin identifier for entries of this source. Must be unique within
      * the view. Defaults to `<tenantId>/<storeId>#ephemeral`, which is
@@ -69,6 +82,7 @@ interface ResolvedViewSource {
     origin: string;
     filter?: MindooDBAppBooleanExpression;
     text?: MindooQueryTextClause;
+    idPrefix?: string | string[];
 }
 /**
  * An ephemeral VirtualView over one or more document summary buffers,

package/dist/core/query/queryView.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queryView.d.ts","sourceRoot":"","sources":["../../../src/core/query/queryView.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,4BAA4B,EAAyB,MAAM,sBAAsB,CAAC;AAOhG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAErF,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAC9G,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAoB,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,4EAA4E;IAC5E,OAAO,EAAE,KAAK,CAAC,iBAAiB,GAAG,wBAAwB,CAAC,CAAC;IAC7D,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,EAAE,EAAE,QAAQ,CAAC;IAEb;;;OAGG;IACH,MAAM,CAAC,EAAE,4BAA4B,CAAC;IAEtC;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAE7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wEAAwE;AACxE,UAAU,kBAAkB;IAC1B,EAAE,EAAE,QAAQ,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC,IAAI,CAAC,EAAE,qBAAqB,CAAC;CAC9B;AAkCD;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IAQ7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,UAAU;IARpB,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,SAAS,CAAwC;IACzD,OAAO,CAAC,QAAQ,CAAS;IACzB,mEAAmE;IACnE,OAAO,CAAC,SAAS,CAAS;gBAGP,OAAO,EAAE,kBAAkB,EAAE,EACtC,UAAU,EAAE,yBAAyB;IAK/C,OAAO,CAAC,SAAS;IAmCjB,yEAAyE;IACzE,OAAO,IAAI,WAAW;IAKtB,uEAAuE;IACjE,MAAM,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/D;;;;;OAKG;IACG,MAAM,CACV,UAAU,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,yBAAyB,EAAE,SAAS,CAAC,EAC3F,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,IAAI,CAAC;IAchB;;;;;;OAMG;IACH,MAAM,IAAI,MAAM,IAAI;IASpB,OAAO,CAAC,WAAW;IAMnB,uCAAuC;IACvC,MAAM,IAAI,IAAI;IAKd;;;;OAIG;IACH,OAAO,IAAI,IAAI;IAYf,UAAU,IAAI,OAAO;IAIrB,OAAO,CAAC,iBAAiB;CAK1B;AAyGD;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,oBAAoB,EAC7B,UAAU,EAAE,yBAAyB,EACrC,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,oBAAoB,CAAC,CAS/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAAE,EAC9B,UAAU,EAAE,yBAAyB,EACrC,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,oBAAoB,CAAC,CAM/B"}
+{"version":3,"file":"queryView.d.ts","sourceRoot":"","sources":["../../../src/core/query/queryView.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,4BAA4B,EAAyB,MAAM,sBAAsB,CAAC;AAOhG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAErF,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAC9G,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAoB,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,4EAA4E;IAC5E,OAAO,EAAE,KAAK,CAAC,iBAAiB,GAAG,wBAAwB,CAAC,CAAC;IAC7D,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,EAAE,EAAE,QAAQ,CAAC;IAEb;;;OAGG;IACH,MAAM,CAAC,EAAE,4BAA4B,CAAC;IAEtC;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAE7B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wEAAwE;AACxE,UAAU,kBAAkB;IAC1B,EAAE,EAAE,QAAQ,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAmCD;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IAQ7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,UAAU;IARpB,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,SAAS,CAAwC;IACzD,OAAO,CAAC,QAAQ,CAAS;IACzB,mEAAmE;IACnE,OAAO,CAAC,SAAS,CAAS;gBAGP,OAAO,EAAE,kBAAkB,EAAE,EACtC,UAAU,EAAE,yBAAyB;IAK/C,OAAO,CAAC,SAAS;IA4CjB,yEAAyE;IACzE,OAAO,IAAI,WAAW;IAKtB,uEAAuE;IACjE,MAAM,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/D;;;;;OAKG;IACG,MAAM,CACV,UAAU,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,yBAAyB,EAAE,SAAS,CAAC,EAC3F,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,IAAI,CAAC;IAchB;;;;;;OAMG;IACH,MAAM,IAAI,MAAM,IAAI;IASpB,OAAO,CAAC,WAAW;IAMnB,uCAAuC;IACvC,MAAM,IAAI,IAAI;IAKd;;;;OAIG;IACH,OAAO,IAAI,IAAI;IAYf,UAAU,IAAI,OAAO;IAIrB,OAAO,CAAC,iBAAiB;CAK1B;AAyGD;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,oBAAoB,EAC7B,UAAU,EAAE,yBAAyB,EACrC,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,oBAAoB,CAAC,CAS/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAAE,EAC9B,UAAU,EAAE,yBAAyB,EACrC,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,oBAAoB,CAAC,CAM/B"}

package/dist/core/query/queryView.js

@@ -3,27 +3,29 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.EphemeralSummaryView = void 0;
 exports.createEphemeralSummaryView = createEphemeralSummaryView;
 exports.queryViewAcross = queryViewAcross;
+const idGeneration_1 = require("../utils/idGeneration");
+const types_1 = require("../indexing/summary/types");
 const expressions_1 = require("../expressions");
 const SummaryVirtualViewDataProvider_1 = require("../indexing/summary/SummaryVirtualViewDataProvider");
 const VirtualView_1 = require("../indexing/virtualviews/VirtualView");
 const VirtualViewColumn_1 = require("../indexing/virtualviews/VirtualViewColumn");
-const types_1 = require("./types");
+const types_2 = require("./types");
 function defaultEphemeralOrigin(db) {
     return `${db.getTenant().getId()}/${db.getStore().getId()}#ephemeral`;
 }
 function resolveSources(sources) {
     if (sources.length === 0) {
-        throw new types_1.MindooQueryError("An ephemeral view needs at least one source database.");
+        throw new types_2.MindooQueryError("An ephemeral view needs at least one source database.");
     }
     const resolved = [];
     const seenOrigins = new Set();
     for (const source of sources) {
         if (!source.db.getSummaryStore) {
-            throw new types_1.MindooQueryError("A source database does not support summary stores.");
+            throw new types_2.MindooQueryError("A source database does not support summary stores.");
         }
         const origin = source.origin ?? defaultEphemeralOrigin(source.db);
         if (seenOrigins.has(origin)) {
-            throw new types_1.MindooQueryError(`Duplicate view source origin "${origin}" — pass distinct 'origin' values when combining the same database twice.`);
+            throw new types_2.MindooQueryError(`Duplicate view source origin "${origin}" — pass distinct 'origin' values when combining the same database twice.`);
         }
         seenOrigins.add(origin);
         resolved.push({
@@ -32,6 +34,7 @@ function resolveSources(sources) {
             origin,
             filter: source.filter,
             text: source.text,
+            idPrefix: source.idPrefix,
         });
     }
     return resolved;
@@ -69,15 +72,22 @@ class EphemeralSummaryView {
             let text;
             if (textClause) {
                 if (!source.db.getFullTextIndex) {
-                    throw new types_1.MindooQueryError(`View source "${source.origin}" does not support full-text search.`, "fulltext-not-enabled");
+                    throw new types_2.MindooQueryError(`View source "${source.origin}" does not support full-text search.`, "fulltext-not-enabled");
                 }
                 text = { index: source.db.getFullTextIndex(), clause: textClause };
             }
+            const idPrefix = source.idPrefix ?? definition.idPrefix;
+            const scope = source.summary.getIdPrefixScope?.() ?? null;
+            if (!(0, types_1.isIdPrefixFilterCoveredByScope)((0, idGeneration_1.normalizeDocIdPrefixes)(idPrefix), scope)) {
+                throw new types_2.MindooQueryError(`View source "${source.origin}": its summary only covers documents with id prefix ` +
+                    `${scope.map((p) => `"${p}"`).join(", ")}; pass an idPrefix inside that scope.`);
+            }
             const provider = new SummaryVirtualViewDataProvider_1.SummaryVirtualViewDataProvider({
                 origin: source.origin,
                 summary: source.summary,
                 filter: source.filter ?? definition.filter,
                 text,
+                idPrefix,
             });
             provider.init(view);
             view.addDataProvider(provider);
@@ -183,12 +193,12 @@ const TEXT_SCORE_FIELDS = new Set(["_textScore", "_textScoreRaw"]);
 function assertKnownExpression(expression, role) {
     const unknown = (0, expressions_1.findUnknownExpressionNode)(expression);
     if (unknown !== null) {
-        throw new types_1.MindooQueryError(`View ${role} contains ${unknown}, which the expression language does not define ` +
+        throw new types_2.MindooQueryError(`View ${role} contains ${unknown}, which the expression language does not define ` +
             `(build it with createViewLanguage(), or parse formula text with ` +
             `parseMindooDBFormulaBooleanExpression()).`);
     }
     if ((0, expressions_1.analyzeExpressionRequirements)(expression).filingStores.length > 0) {
-        throw new types_1.MindooQueryError(`View ${role} cannot use folders() / inFolder(); they need a view that joins the filing store (VirtualViewBuilder.withFilingStore); ` +
+        throw new types_2.MindooQueryError(`View ${role} cannot use folders() / inFolder(); they need a view that joins the filing store (VirtualViewBuilder.withFilingStore); ` +
             `ad-hoc queries and ephemeral query views cannot evaluate them.`);
     }
 }
@@ -209,7 +219,7 @@ function validateViewDefinition(sources, definition) {
         assertKnownExpression(expression, "column");
         const requirements = (0, expressions_1.analyzeExpressionRequirements)(expression);
         if (requirements.needsDecryption) {
-            throw new types_1.MindooQueryError("View columns cannot use decrypt expressions: encrypted fields are not stored in the summary buffer.");
+            throw new types_2.MindooQueryError("View columns cannot use decrypt expressions: encrypted fields are not stored in the summary buffer.");
         }
         for (const path of (0, expressions_1.getReferencedFields)(expression)) {
             columnPaths.add(path);
@@ -222,10 +232,10 @@ function validateViewDefinition(sources, definition) {
             assertKnownExpression(filter, "filter");
             const requirements = (0, expressions_1.analyzeExpressionRequirements)(filter);
             if (requirements.needsViewContext) {
-                throw new types_1.MindooQueryError(`View filters cannot use view-tree operations (${requirements.viewContextOperations.join(", ")}).`);
+                throw new types_2.MindooQueryError(`View filters cannot use view-tree operations (${requirements.viewContextOperations.join(", ")}).`);
             }
             if (requirements.needsDecryption) {
-                throw new types_1.MindooQueryError("View filters cannot use decrypt expressions: encrypted fields are not stored in the summary buffer.");
+                throw new types_2.MindooQueryError("View filters cannot use decrypt expressions: encrypted fields are not stored in the summary buffer.");
             }
             for (const path of (0, expressions_1.getReferencedFields)(filter)) {
                 referencedPaths.add(path);
@@ -235,13 +245,13 @@ function validateViewDefinition(sources, definition) {
         for (const path of referencedPaths) {
             if (TEXT_SCORE_FIELDS.has(path)) {
                 if (!hasTextClause) {
-                    throw new types_1.MindooQueryError(`Expression references "${path}", but source "${source.origin}" has no 'text' clause — ` +
+                    throw new types_2.MindooQueryError(`Expression references "${path}", but source "${source.origin}" has no 'text' clause — ` +
                         `text scores only exist for full-text pre-filtered views.`);
                 }
                 continue;
             }
             if (!source.summary.isFieldCovered(path)) {
-                throw new types_1.MindooQueryError(`Field "${path}" is not covered by the summary configuration of source "${source.origin}" ` +
+                throw new types_2.MindooQueryError(`Field "${path}" is not covered by the summary configuration of source "${source.origin}" ` +
                     `(check include/exclude in SummaryConfig).`);
             }
         }

package/dist/core/query/queryView.js.map

@@ -1 +1 @@
-{"version":3,"file":"queryView.js","sourceRoot":"","sources":["../../../src/core/query/queryView.ts"],"names":[],"mappings":";;;AAuXA,gEAcC;AA2BD,0CAUC;AAvaD,gDAIwB;AAExB,uGAAoG;AACpG,sEAAmE;AACnE,kFAA8G;AAG9G,mCAAuE;AAwEvE,SAAS,sBAAsB,CAAC,EAAY;IAC1C,OAAO,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,OAA8B;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,wBAAgB,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAgB,CAAC,oDAAoD,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,wBAAgB,CACxB,iCAAiC,MAAM,2EAA2E,CACnH,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE;YACpC,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAa,oBAAoB;IAO/B,YACmB,OAA6B,EACtC,UAAqC;QAD5B,YAAO,GAAP,OAAO,CAAsB;QACtC,eAAU,GAAV,UAAU,CAA2B;QAPvC,cAAS,GAAqC,EAAE,CAAC;QACjD,aAAQ,GAAG,KAAK,CAAC;QACzB,mEAAmE;QAC3D,cAAS,GAAG,KAAK,CAAC;QAMxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAEO,SAAS,CAAC,UAAqC;QACrD,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAChD,MAAM,YAAY,qCAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,qCAAiB,CAAC,MAAM,CAAC,CAC7E,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,yBAAW,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC;YAClD,IAAI,IAAiF,CAAC;YACtF,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;oBAChC,MAAM,IAAI,wBAAgB,CACxB,gBAAgB,MAAM,CAAC,MAAM,sCAAsC,EACnE,sBAAsB,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YACrE,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,+DAA8B,CAAC;gBAClD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM;gBAC1C,IAAI;aACL,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,OAAO;QACL,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM,CAAC,OAAkC;QAC7C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,UAA2F,EAC3F,OAAkC;QAElC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG;YAChB,GAAG,IAAI,CAAC,UAAU;YAClB,GAAG,UAAU;SACd,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACJ,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;IAEO,WAAW;QACjB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,MAAM;QACJ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AA1ID,oDA0IC;AAED;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AAEnE;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,UAAiC,EAAE,IAAY;IAC5E,MAAM,OAAO,GAAG,IAAA,uCAAyB,EAAC,UAAU,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,wBAAgB,CACxB,QAAQ,IAAI,aAAa,OAAO,kDAAkD;YAClF,kEAAkE;YAClE,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,IAAA,2CAA6B,EAAC,UAAU,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,wBAAgB,CACxB,QAAQ,IAAI,yHAAyH;YACnI,gEAAgE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,OAA6B,EAAE,UAAqC;IAClG,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,YAAY,qCAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QAC/F,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QACD,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAA,2CAA6B,EAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,wBAAgB,CACxB,qGAAqG,CACtG,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAA,iCAAmB,EAAC,UAAU,CAAC,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,WAAW,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACxC,MAAM,YAAY,GAAG,IAAA,2CAA6B,EAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,YAAY,CAAC,gBAAgB,EAAE,CAAC;gBAClC,MAAM,IAAI,wBAAgB,CACxB,iDAAiD,YAAY,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACnG,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;gBACjC,MAAM,IAAI,wBAAgB,CACxB,qGAAqG,CACtG,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAA,iCAAmB,EAAC,MAAM,CAAC,EAAE,CAAC;gBAC/C,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,wBAAgB,CACxB,0BAA0B,IAAI,kBAAkB,MAAM,CAAC,MAAM,2BAA2B;wBACxF,0DAA0D,CAC3D,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,wBAAgB,CACxB,UAAU,IAAI,4DAA4D,MAAM,CAAC,MAAM,IAAI;oBAC3F,2CAA2C,CAC5C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,0BAA0B,CAC9C,EAAY,EACZ,OAA6B,EAC7B,UAAqC,EACrC,OAAkC;IAElC,4EAA4E;IAC5E,MAAM,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,oBAAoB,CACnC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC,EACrD,UAAU,CACX,CAAC;IACF,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACI,KAAK,UAAU,eAAe,CACnC,OAA8B,EAC9B,UAAqC,EACrC,OAAkC;IAElC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"queryView.js","sourceRoot":"","sources":["../../../src/core/query/queryView.ts"],"names":[],"mappings":";;;AAkZA,gEAcC;AA2BD,0CAUC;AArcD,wDAA+D;AAC/D,qDAA2E;AAI3E,gDAIwB;AAExB,uGAAoG;AACpG,sEAAmE;AACnE,kFAA8G;AAG9G,mCAAuE;AAuFvE,SAAS,sBAAsB,CAAC,EAAY;IAC1C,OAAO,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,OAA8B;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,wBAAgB,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAgB,CAAC,oDAAoD,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,wBAAgB,CACxB,iCAAiC,MAAM,2EAA2E,CACnH,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE;YACpC,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAa,oBAAoB;IAO/B,YACmB,OAA6B,EACtC,UAAqC;QAD5B,YAAO,GAAP,OAAO,CAAsB;QACtC,eAAU,GAAV,UAAU,CAA2B;QAPvC,cAAS,GAAqC,EAAE,CAAC;QACjD,aAAQ,GAAG,KAAK,CAAC;QACzB,mEAAmE;QAC3D,cAAS,GAAG,KAAK,CAAC;QAMxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAEO,SAAS,CAAC,UAAqC;QACrD,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAChD,MAAM,YAAY,qCAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,qCAAiB,CAAC,MAAM,CAAC,CAC7E,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,yBAAW,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC;YAClD,IAAI,IAAiF,CAAC;YACtF,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;oBAChC,MAAM,IAAI,wBAAgB,CACxB,gBAAgB,MAAM,CAAC,MAAM,sCAAsC,EACnE,sBAAsB,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YACrE,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,IAAI,IAAI,CAAC;YAC1D,IAAI,CAAC,IAAA,sCAA8B,EAAC,IAAA,qCAAsB,EAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,wBAAgB,CACxB,gBAAgB,MAAM,CAAC,MAAM,sDAAsD;oBACnF,GAAG,KAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CACjF,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,+DAA8B,CAAC;gBAClD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM;gBAC1C,IAAI;gBACJ,QAAQ;aACT,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,OAAO;QACL,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM,CAAC,OAAkC;QAC7C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,UAA2F,EAC3F,OAAkC;QAElC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG;YAChB,GAAG,IAAI,CAAC,UAAU;YAClB,GAAG,UAAU;SACd,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACJ,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;IAEO,WAAW;QACjB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,MAAM;QACJ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AAnJD,oDAmJC;AAED;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AAEnE;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,UAAiC,EAAE,IAAY;IAC5E,MAAM,OAAO,GAAG,IAAA,uCAAyB,EAAC,UAAU,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,wBAAgB,CACxB,QAAQ,IAAI,aAAa,OAAO,kDAAkD;YAClF,kEAAkE;YAClE,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,IAAA,2CAA6B,EAAC,UAAU,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,wBAAgB,CACxB,QAAQ,IAAI,yHAAyH;YACnI,gEAAgE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,OAA6B,EAAE,UAAqC;IAClG,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,YAAY,qCAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QAC/F,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QACD,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAA,2CAA6B,EAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,wBAAgB,CACxB,qGAAqG,CACtG,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAA,iCAAmB,EAAC,UAAU,CAAC,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,WAAW,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACxC,MAAM,YAAY,GAAG,IAAA,2CAA6B,EAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,YAAY,CAAC,gBAAgB,EAAE,CAAC;gBAClC,MAAM,IAAI,wBAAgB,CACxB,iDAAiD,YAAY,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACnG,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;gBACjC,MAAM,IAAI,wBAAgB,CACxB,qGAAqG,CACtG,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAA,iCAAmB,EAAC,MAAM,CAAC,EAAE,CAAC;gBAC/C,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,wBAAgB,CACxB,0BAA0B,IAAI,kBAAkB,MAAM,CAAC,MAAM,2BAA2B;wBACxF,0DAA0D,CAC3D,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,wBAAgB,CACxB,UAAU,IAAI,4DAA4D,MAAM,CAAC,MAAM,IAAI;oBAC3F,2CAA2C,CAC5C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,0BAA0B,CAC9C,EAAY,EACZ,OAA6B,EAC7B,UAAqC,EACrC,OAAkC;IAElC,4EAA4E;IAC5E,MAAM,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,oBAAoB,CACnC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC,EACrD,UAAU,CACX,CAAC;IACF,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACI,KAAK,UAAU,eAAe,CACnC,OAA8B,EAC9B,UAAqC,EACrC,OAAkC;IAElC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/query/types.d.ts

@@ -128,6 +128,15 @@ export interface MindooQuery {
      * explicit `sortBy`, results are ordered best score first.
      */
     text?: MindooQueryTextClause;
+    /**
+     * Restrict the query to documents whose id matches this prefix or one of
+     * these prefixes (boundary-aware: `"m_r3"` matches `m_r3` and `m_r3_…`;
+     * list several for e.g. a range of months). With `allowFullScan`
+     * non-matching documents are skipped before they are loaded or
+     * decrypted. When the summary is scoped (`SummaryConfig.idPrefixes`),
+     * summary-backed queries must pass prefixes inside that scope.
+     */
+    idPrefix?: string | string[];
     sortBy?: MindooQuerySortKey[];
     limit?: number;
     offset?: number;

package/dist/core/query/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/query/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sFAAsF;IACtF,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,0EAA0E;IAC1E,WAAW,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,4BAA4B,GAAG,MAAM,CAAC;IAC/C,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,6FAA6F;IAC7F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,4BAA4B,GAAG,MAAM,CAAC;IAC/C;;;;;OAKG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC9C;AAED,gFAAgF;AAChF,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG;IACtF,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CACpD,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG;IACxE,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CACpD,CAAC;AAEF,MAAM,WAAW,kBAAmB,SAAQ,wBAAwB;IAClE;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,EAAE,GAAG,IAAI,CAAC,CAAC;AAE/F,MAAM,WAAW,cAAc,CAAC,SAAS,SAAS,uBAAuB,GAAG,uBAAuB;IACjG,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,WAAW,CAAC;AAEhE,MAAM,WAAW,iBAAiB,CAAC,SAAS,SAAS,uBAAuB,GAAG,uBAAuB;IACpG,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IAClC,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE1D;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC;gBAEzB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,oBAAoB;CAKzD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/query/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sFAAsF;IACtF,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,0EAA0E;IAC1E,WAAW,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,4BAA4B,GAAG,MAAM,CAAC;IAC/C,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,6FAA6F;IAC7F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,4BAA4B,GAAG,MAAM,CAAC;IAC/C;;;;;OAKG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC9C;AAED,gFAAgF;AAChF,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG;IACtF,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CACpD,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG;IACxE,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CACpD,CAAC;AAEF,MAAM,WAAW,kBAAmB,SAAQ,wBAAwB;IAClE;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,EAAE,GAAG,IAAI,CAAC,CAAC;AAE/F,MAAM,WAAW,cAAc,CAAC,SAAS,SAAS,uBAAuB,GAAG,uBAAuB;IACjG,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,WAAW,CAAC;AAEhE,MAAM,WAAW,iBAAiB,CAAC,SAAS,SAAS,uBAAuB,GAAG,uBAAuB;IACpG,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IAClC,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE1D;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC;gBAEzB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,oBAAoB;CAKzD"}

package/dist/core/query/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/query/types.ts"],"names":[],"mappings":";;;AAyDA;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,CAAC,CAAC;AA2KnC;;;;;GAKG;AACH,MAAa,gBAAiB,SAAQ,KAAK;IAIzC,YAAY,OAAe,EAAE,IAA2B;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AATD,4CASC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/query/types.ts"],"names":[],"mappings":";;;AAyDA;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,CAAC,CAAC;AAoLnC;;;;;GAKG;AACH,MAAa,gBAAiB,SAAQ,KAAK;IAIzC,YAAY,OAAe,EAAE,IAA2B;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AATD,4CASC"}

package/dist/core/types.d.ts

@@ -1,3 +1,4 @@
+import type { AdminKeyInfo } from "./accesscontrol/adminKeys";
 import type { KeyBag } from "./keys/KeyBag";
 import type { KeyType } from "./keys/KeyContext";
 import type { PublicUserId, PrivateUserId } from "./userid";
@@ -229,6 +230,12 @@ interface CreateTenantPasswords {
      * (legacy behavior: v1 entries remain acceptable).
      */
     requireV2Entries?: boolean;
+    /**
+     * Name the founding app user's device self-grant key in their grant, so
+     * they may add their own devices (docs/userkeys.md §9.4). Defaults to
+     * `true`; ignored when the identity has no self-grant key.
+     */
+    allowDeviceSelfGrantForAppUser?: boolean;
     /**
      * Optional human-readable tenant label stored in the directory document
      * `tenantsetup` (doc under `$publicinfos`; label field-encrypted under
@@ -324,6 +331,12 @@ export interface JoinRequest {
      * first device.
      */
     userPublicKey?: string;
+    /**
+     * Public half of the person's device self-grant key (Ed25519 PEM,
+     * docs/userkeys.md §9). The admin may name it in the grant with
+     * {@link ApproveJoinRequestOptions.allowDeviceSelfGrant}.
+     */
+    deviceSelfGrantPublicKey?: string;
     /**
      * Hint for the approving admin: which document keys this device is asking
      * for. Not a grant — the admin remains the authority. `$publicinfos` is
@@ -333,6 +346,18 @@ export interface JoinRequest {
      */
     requestedDocKeyIds?: string[];
 }
+/**
+ * Admin-signed delegation on a person's grant (`grantaccess.deviceSelfGrant`,
+ * docs/userkeys.md §9): the person may certify their own devices with the
+ * named Ed25519 key. Revoking keeps the key and sets `revokedAt`; certificates
+ * and generations signed before that trusted time stay valid.
+ */
+export interface DeviceSelfGrant {
+    /** Ed25519 public key (PEM) of the person's device self-grant key. */
+    signingPublicKey: string;
+    grantedAt: number;
+    revokedAt?: number;
+}
 /**
  * Options for {@link MindooTenantFactory.createJoinRequest}.
  */
@@ -384,6 +409,13 @@ export interface ApproveJoinRequestOptions {
      * its grant (`accessPrefixes`), admin-signed. Omit for ordinary members.
      */
     accessPrefixes?: string[];
+    /**
+     * Name the person's device self-grant key from the request
+     * ({@link JoinRequest.deviceSelfGrantPublicKey}) in their grant, so they may
+     * certify further devices themselves (docs/userkeys.md §9). Ignored when the
+     * request carries no such key.
+     */
+    allowDeviceSelfGrant?: boolean;
     /**
      * Human-readable label for the joining device's key pair. When set,
      * it overrides any label the joining user suggested in the join request and
@@ -425,6 +457,23 @@ export interface JoinResponseEncryptedDocKeyVersion {
      */
     wrappedKey?: string;
 }
+/** Options of {@link MindooTenant.approveAdminRequest} (docs/accesscontrol.md §6.13). */
+export interface ApproveAdminRequestOptions {
+    /** The ROOT administration private key. */
+    adminSigningKey: EncryptedPrivateKey;
+    /** Password of {@link adminSigningKey}. */
+    adminPassword: string;
+    /** The admin's name; defaults to the name suggested in the request. */
+    name?: string;
+    /** Device label; defaults to the label suggested in the request. */
+    label?: string;
+    /** Witness time (ms) the admin key becomes effective, if later than the approval. */
+    validFrom?: number;
+    serverUrl?: string;
+    tenantLabel?: string;
+    /** "uri" returns a mdb://admin-response/... string. */
+    format?: "object" | "uri";
+}
 export interface JoinResponseEncryptedDocKey {
     /** Logical document key id within the tenant, e.g. "$publicinfos", "default", or a named key. */
     keyId: string;
@@ -740,6 +789,11 @@ export interface MindooTenantFactory {
      * the identity so paper backup includes it.
      */
     ensureUserKeyPair?(user: PrivateUserId, password: string): Promise<EncryptionKeyPair>;
+    /**
+     * Generate the person's device self-grant key (Ed25519) on `user` if absent
+     * (docs/userkeys.md §9). Password-encrypted with salt `"deviceselfgrant"`.
+     */
+    ensureDeviceSelfGrantKeyPair?(user: PrivateUserId, password: string): Promise<SigningKeyPair>;
     /**
      * Join a tenant using a join response from an admin.
      * This orchestrates:
@@ -1082,6 +1136,17 @@ export interface MindooTenant {
         format: "uri";
     }): Promise<string>;
     approveJoinRequest(joinRequest: JoinRequest | string, options: ApproveJoinRequestOptions): Promise<JoinResponse>;
+    /**
+     * Approve a delegated-admin request (docs/accesscontrol.md §6.13). Root admin
+     * key only. Writes the `acl_adminkey_<fingerprint>` document and the
+     * `tenantsetup` entry, and returns an admin response that wraps the tenant
+     * `default` and `$publicinfos` keys to the new admin key.
+     *
+     * @param request An AdminRequest object or a mdb://admin-request/... URI string.
+     * @param options The ROOT admin key and password, the admin's name (overrides the suggested one) and optional label, server URL and tenant label.
+     * @returns The AdminResponse, or a mdb://admin-response/... URI string when `format` is "uri".
+     */
+    approveAdminRequest?(request: import("./uri/adminUri").AdminRequest | string, options: ApproveAdminRequestOptions): Promise<import("./uri/adminUri").AdminResponse | string>;
     /** Devices on this person's grant that still need a User-Key wrap. */
     listPendingUserKeyDevices?(): Promise<import("./userkeys/types").PendingUserKeyDevice[]>;
     listUserKeyDevices?(): Promise<import("./userkeys/types").UserKeyDeviceRow[]>;
@@ -1089,6 +1154,31 @@ export interface MindooTenant {
     declineUserKeyDevice?(fingerprint: string): Promise<void>;
     undoDeclineUserKeyDevice?(fingerprint: string): Promise<void>;
     rotateUserKey?(): Promise<void>;
+    /**
+     * Public half of this person's device self-grant key as held by this device
+     * (docs/userkeys.md §9), for the admin to name in the grant. `null` while
+     * this device holds none.
+     */
+    getDeviceSelfGrantPublicKey?(): Promise<string | null>;
+    /**
+     * Certify another device of this person with their device self-grant key
+     * (docs/userkeys.md §9.6) and wrap the User-Key to it. Requires
+     * `deviceSelfGrant` on the person's grant.
+     */
+    issueDeviceCertificate?(device: {
+        signingPublicKey: string;
+        encryptionPublicKey: string;
+    }, label?: string): Promise<{
+        docId: string;
+        certificate: import("./userkeys/deviceCertificate").DeviceCertificatePayload;
+    }>;
+    /** Withdraw an own device certificate by device fingerprint or document id. */
+    revokeOwnDeviceCertificate?(fingerprint: string): Promise<number>;
+    listOwnDeviceCertificates?(): Promise<Array<{
+        docId: string;
+        fingerprint: string;
+        certificate: import("./userkeys/deviceCertificate").DeviceCertificatePayload;
+    }>>;
     reconcileUserKeys?(options?: {
         allowSelfCreate?: boolean;
     }): Promise<import("./userkeys/types").UserKeyEnrollmentStatus>;
@@ -1923,9 +2013,11 @@ export interface ListDocumentIdsOptions {
      * boundary-aware: an id matches when it equals `idPrefix` exactly or begins
      * with `<idPrefix>_`, mirroring the `<prefix>_<objectId>` id scheme produced by
      * `createDocument({ idPrefix })`. So `"cls"` matches `cls_…` documents but not
-     * an unrelated `classroom_…` id. Omit (or pass an empty string) for no filter.
+     * an unrelated `classroom_…` id. Pass a list to match any of several
+     * prefixes (e.g. `["m_r3_202610", "m_r3_202611"]`). Omit (or pass an empty
+     * string / empty list) for no filter.
      */
-    idPrefix?: string;
+    idPrefix?: string | readonly string[];
 }
 /**
  * Which lifecycle states a listing returns, mirroring the split between
@@ -1975,10 +2067,10 @@ export interface IterateChangesOptions {
      * For {@link MindooDB.iterateChangesSince} this skips non-matching documents
      * *before* their body is loaded or decrypted, so filtering by content-type
      * prefix avoids materializing unrelated documents — and, across the app-SDK
-     * bridge, avoids shipping them to the client. Omit (or pass an empty string)
-     * for no filter.
+     * bridge, avoids shipping them to the client. A list matches any of its
+     * prefixes. Omit (or pass an empty string / empty list) for no filter.
      */
-    idPrefix?: string;
+    idPrefix?: string | readonly string[];
     /**
      * Whether documents this iteration has to materialize are kept in the
      * persistent document cache (L2) like regular reads (default `true`).
@@ -3170,6 +3262,29 @@ export interface MindooTenantDirectory {
      * time `T`, or `null` when the key was not an active grant member then.
      */
     resolveUsernameHashForSigningKey?(signingKey: string, trustedTime: number): Promise<string | null>;
+    /**
+     * The person's admin-granted device self-grant delegation
+     * (docs/userkeys.md §9), read from the grant(s) with `usernameHash`, or
+     * `null` when the admin never granted it.
+     */
+    getDeviceSelfGrantForUsernameHash?(usernameHash: string): Promise<DeviceSelfGrant | null>;
+    /**
+     * The person a signing key acts for at trusted time `T`: a device on their
+     * grant, or a device with a valid certificate (docs/userkeys.md §9.6).
+     * `null` when neither.
+     */
+    resolveSignerToGrant?(signingKey: string, trustedTime: number): Promise<{
+        grant: {
+            usernameHash: string;
+        };
+        via: "grant" | "certificate";
+    } | null>;
+    /**
+     * The tenant-wide trusted-time cutoff from which a new User-Key generation
+     * must be signed to count (`requireUserKeyGenerationSignatureSince` in the
+     * default policy, docs/userkeys.md §9.3), or `undefined` when none is set.
+     */
+    getRequireUserKeyGenerationSignatureSince?(): Promise<number | undefined>;
     /**
      * Whether a Tier 2 (`withfields`) content rule exists for `op` on `dbid` at
      * the current head state. Lets callers skip materializing before/after
@@ -3197,6 +3312,63 @@ export interface MindooTenantDirectory {
      * @returns The set of trusted witness Ed25519 signing public keys (PEM) in effect at `T`.
      */
     getTrustedWitnessKeysAt?(T: number): Promise<Set<string>>;
+    /**
+     * Whether `signingKey` is a tenant admin at trusted time `T`
+     * (docs/accesscontrol.md §6.13): the root admin key (`administrationPublicKey`)
+     * always; a delegated admin key while its admin-key document's window
+     * (`validFrom ≤ T < validUntil`, witness time) covers `T`.
+     *
+     * @param signingKey Ed25519 signing public key (PEM).
+     * @param T Trusted time (ms epoch); `Number.MAX_SAFE_INTEGER` means the directory head judged now.
+     * @returns True when the key may act as an administrator at `T`.
+     */
+    isAdminAt?(signingKey: string, T: number): Promise<boolean>;
+    /**
+     * The delegated admin keys at the directory head, with window, name and
+     * status at "now" (§6.13). The root admin key is not listed.
+     *
+     * @returns One entry per delegated admin key, oldest first.
+     */
+    listAdminKeys?(): Promise<AdminKeyInfo[]>;
+    /**
+     * The delegated admin keys as the directory knew them at trusted time `T` (§6.13).
+     *
+     * @param T Trusted time (ms epoch).
+     * @returns One entry per delegated admin key known at `T`, status judged at `T`.
+     */
+    getAdminKeysAt?(T: number): Promise<AdminKeyInfo[]>;
+    /**
+     * Make a signing key a delegated administrator (§6.13). Root admin key only.
+     * Writes `acl_adminkey_<fingerprint>` and records the admin in
+     * `tenantsetup.administrators`. Re-adding a deactivated key reactivates it
+     * from the witness time of this write on.
+     *
+     * @param admin The admin device: its public keys, the admin's name, an optional device label and an optional later start.
+     * @param administrationPrivateKey The ROOT administration private key.
+     * @param administrationPrivateKeyPassword Its password.
+     */
+    addAdminKey?(admin: {
+        signingPublicKey: string;
+        encryptionPublicKey: string;
+        name: string;
+        label?: string;
+        validFrom?: number;
+    }, administrationPrivateKey: EncryptedPrivateKey, administrationPrivateKeyPassword: string): Promise<void>;
+    /**
+     * Set or clear the window of a delegated admin key (§6.13). Root admin key
+     * only. `validUntil` in the future schedules the end; a value before this
+     * write's witness time is raised to it (no retroactive deactivation).
+     * `validUntil: null` on an ended key reactivates it from now on.
+     *
+     * @param signingPublicKey The delegated admin's signing public key (PEM).
+     * @param validity New `validFrom` / `validUntil` (ms, witness time); `null` clears a bound.
+     * @param administrationPrivateKey The ROOT administration private key.
+     * @param administrationPrivateKeyPassword Its password.
+     */
+    setAdminKeyValidity?(signingPublicKey: string, validity: {
+        validFrom?: number | null;
+        validUntil?: number | null;
+    }, administrationPrivateKey: EncryptedPrivateKey, administrationPrivateKeyPassword: string): Promise<void>;
     /**
      * The canonical write-time hash for `username` (the value stored in a
      * distribution's `pushto`/`pullfrom` hash lists). Used to build `pullfrom`
@@ -3421,11 +3593,14 @@ export interface MindooTenantDirectory {
      * independent. Optional: directories without remote-wipe support omit it.
      *
      * @param username The user whose signing-key universe to resolve (format: "CN=<username>/O=<tenantId>").
-     * @returns The `active` (currently-granted) and `wipeRequested` (remote-wipe-targeted) signing public keys.
+     * @returns The `active` (currently-granted) and `wipeRequested` (remote-wipe-targeted) signing public keys,
+     *   and optionally the `revoked` keys (kept on a grant as revoked pairs and not active anywhere), so a
+     *   server can tell a revoked device why it is refused.
      */
     getUserSigningKeyUniverse?(username: string): Promise<{
         active: string[];
         wipeRequested: string[];
+        revoked?: string[];
     }>;
     /**
      * If `signingKey` is the target of an admin-requested remote wipe (§6.5),
@@ -5536,5 +5711,17 @@ export interface BuiltinIngestEntry {
     docId?: string;
     encryptedData?: Uint8Array;
     decryptionKeyId?: string;
+    /**
+     * Witness receipt and the metadata it signs. An entry of a delegated admin
+     * (docs/accesscontrol.md §6.13) only passes with a valid receipt of a trusted
+     * witness; a full {@link StoreEntry} carries all of these.
+     */
+    id?: string;
+    contentHash?: string;
+    createdAt?: number;
+    receivedAt?: number;
+    receivedByPublicKey?: string;
+    receivedDateSignature?: Uint8Array;
+    receiptScheme?: string;
 }
 //# sourceMappingURL=types.d.ts.map