@authup/access 1.0.0-beta.33 → 1.0.0-beta.35

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../src/permission/error/module.ts","../src/permission/provider/memory.ts","../src/policy/helpers/invert.ts","../src/policy/error/module.ts","../src/policy/engine/module.ts","../src/policy/data.ts","../src/policy/evaluation/context/define.ts","../src/policy/issue/constants.ts","../src/policy/issue/define.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/permission/evaluator/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorOptions } from '@authup/errors';\nimport { AuthupError, ErrorCode } from '@authup/errors';\nimport type { PolicyIssue } from '../../policy';\n\nexport class PermissionError extends AuthupError {\n    constructor(options: AuthupErrorOptions = {}) {\n        super({\n            ...options,\n            message: options.message || 'A permission error occurred.',\n            statusCode: options.statusCode || 403,\n        });\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static notFound(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} was not found.`,\n            code: ErrorCode.PERMISSION_NOT_FOUND,\n        });\n    }\n\n    static denied(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} has not been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static deniedAll(names: string[]) {\n        return new PermissionError({\n            message: `None of the permissions ${names.join(', ')} has been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static evaluationFailed(name: string | string[]) {\n        if (Array.isArray(name)) {\n            return new PermissionError({\n                message: `The evaluation of permissions ${name.join(', ')} failed`,\n                code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n            });\n        }\n\n        return new PermissionError({\n            message: `The evaluation of permission ${name} failed`,\n            code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n        });\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildPermissionBindingKey, mergePermissionBindings } from '../helpers';\nimport type { PermissionBinding } from '../types';\nimport type { IPermissionProvider, PermissionGetOptions } from './types';\n\nexport class PermissionMemoryProvider implements IPermissionProvider {\n    protected items : Record<string, PermissionBinding> = {};\n\n    constructor(items: PermissionBinding[] = []) {\n        this.setMany(items);\n    }\n\n    async findOne(\n        options: PermissionGetOptions,\n    ): Promise<PermissionBinding | null> {\n        const entry = this.items[buildPermissionBindingKey({\n            name: options.name,\n            client_id: options.clientId,\n            realm_id: options.realmId,\n        })];\n        if (entry) {\n            return entry;\n        }\n\n        return null;\n    }\n\n    setMany(input: PermissionBinding[]) {\n        this.items = mergePermissionBindings(input)\n            .reduce((prev, current) => {\n                prev[buildPermissionBindingKey(current.permission)] = current;\n                return prev;\n            }, {} as Record<string, PermissionBinding>);\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\ntype InvertFn = (input: boolean) => boolean;\n\nexport function maybeInvertPolicyOutcome(\n    outcome: boolean,\n    invert?: boolean | InvertFn,\n) {\n    if (typeof invert === 'undefined') {\n        return outcome;\n    }\n\n    if (typeof invert === 'function') {\n        return invert(outcome);\n    }\n\n    if (!invert) {\n        return outcome;\n    }\n\n    return !outcome;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError, ErrorCode } from '@authup/errors';\nimport type { PolicyIssue } from '../issue';\n\nexport class PolicyError extends AuthupError {\n    constructor(message?: string, code?: string | null) {\n        super({\n            message,\n            code, \n        });\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static evaluatorNotFound(type: string) {\n        return new PolicyError(\n            `No evaluator is registered to handle the policy: ${type}`,\n            ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n        );\n    }\n\n    static evaluatorNotProcessable() {\n        return new PolicyError(\n            'The evaluator can not process the policy.',\n            ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n        );\n    }\n\n    static evaluatorContextInvalid() {\n        return new PolicyError(\n            'The evaluator context is not valid.',\n            ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID,\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport { defineIssueItem } from 'validup';\nimport type {\n    IPolicyEvaluator, \n    PolicyEvaluationContext, \n    PolicyEvaluationResult, \n    PolicyEvaluators,\n} from '../evaluation';\nimport { maybeInvertPolicyOutcome } from '../helpers';\nimport type { PolicyIssue } from '../issue';\nimport type { IPolicy } from '../types.ts';\nimport type { IPolicyEngine } from './types.ts';\nimport { PolicyError } from '../error';\n\n/**\n * The policy engine is a component that interprets defined policies and makes decisions\n * on whether to allow or deny a particular access.\n */\nexport class PolicyEngine implements IPolicyEngine {\n    protected evaluators : Record<string, IPolicyEvaluator>;\n\n    constructor(evaluators: PolicyEvaluators = {}) {\n        this.evaluators = evaluators;\n    }\n\n    public registerEvaluator(\n        type: string,\n        evaluator: IPolicyEvaluator,\n    ) : void {\n        this.evaluators[type] = evaluator;\n    }\n\n    public registerEvaluators(evaluators: PolicyEvaluators) {\n        const keys = Object.keys(evaluators);\n        for (const key of keys) {\n            this.registerEvaluator(key, evaluators[key]);\n        }\n    }\n\n    /**\n     * @param policy\n     * @param ctx\n     */\n    async evaluate(policy: IPolicy, ctx: PolicyEvaluationContext) : Promise<PolicyEvaluationResult> {\n        if (\n            ctx.exclude &&\n            ctx.exclude.length > 0 &&\n            ctx.exclude.includes(policy.type)\n        ) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        if (\n            ctx.include &&\n            ctx.include.length > 0 &&\n            !ctx.include.includes(policy.type)\n        ) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        const issues : PolicyIssue[] = [];\n\n        const evaluator = this.evaluators[policy.type];\n        if (!evaluator) {\n            // todo: add issue here instead + return false ?\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The policy ${policy.type} can not be handled by any evaluator.`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n            }));\n\n            return {\n                success: maybeInvertPolicyOutcome(false, policy.invert),\n                issues,\n            };\n        }\n\n        try {\n            return await evaluator.evaluate(policy, {\n                ...ctx,\n                evaluators: {\n                    ...this.evaluators,\n                    ...(ctx.evaluators || {}),\n                },\n            });\n        } catch {\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The ${policy.type} evaluator can not process the policy specification.`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n            }));\n\n            return {\n                success: maybeInvertPolicyOutcome(false, policy.invert),\n                issues,\n            };\n        }\n    }\n\n    async evaluateOrFail(policy: IPolicy, ctx: PolicyEvaluationContext) : Promise<void> {\n        const issues : PolicyIssue[] = [];\n\n        try {\n            const outcome = await this.evaluate(policy, ctx);\n            if (outcome.success) {\n                return;\n            }\n\n            if (outcome.issues) {\n                issues.push(...outcome.issues);\n            }\n        } catch (e) {\n            if (e instanceof PolicyError) {\n                throw e;\n            }\n        }\n\n        const error = new PolicyError(`The policy ${policy.type} evaluation failed.`);\n        error.addIssues(issues);\n\n        throw error;\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport interface IPolicyData {\n    set(key: string, value: unknown) : void;\n    has(key: string): boolean;\n    get<T = unknown>(key: string) : T;\n\n    isValidated(key: string): boolean;\n    setValidated(key: string) : void;\n\n    clone() : IPolicyData\n}\n\nexport class PolicyData implements IPolicyData {\n    protected data: Record<string, any>;\n\n    protected validated : Set<string>;\n\n    constructor(\n        data: Record<string, any> = {},\n        validated: Set<string> = new Set(),\n    ) {\n        this.data = data;\n        this.validated = validated;\n    }\n\n    set<T = unknown>(key: string, value: T) : void {\n        this.data[key] = value;\n        this.validated.delete(key);\n    }\n\n    get<T = unknown>(key: string) : T {\n        if (key in this.data) {\n            return this.data[key];\n        }\n\n        throw new Error(`Policy data item ${key} does not exist.`);\n    }\n\n    has(key: string): boolean {\n        return key in this.data;\n    }\n\n    setValidated(key: string) : void {\n        this.validated.add(key);\n    }\n\n    isValidated(key: string) : boolean {\n        return this.validated.has(key);\n    }\n\n    clone() {\n        return new PolicyData({ ...this.data }, new Set(this.validated));\n    }\n}\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyEvaluationContext, PolicyEvaluationContextInput } from './types.ts';\nimport { PolicyData } from '../../data.ts';\n\nexport function definePolicyEvaluationContext(\n    input: PolicyEvaluationContextInput = {},\n) : PolicyEvaluationContext {\n    return {\n        evaluators: input.evaluators || {},\n        path: input.path || [],\n        data: input.data || new PolicyData(),\n        include: input.include || [],\n        exclude: input.exclude || [],\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum PolicyIssueSeverity {\n    WARNING = 'warning',\n    ERROR = 'error',\n}\n\nexport enum PolicyIssueCode {\n    // Data/Input\n    DATA_MISSING = 'DATA_MISSING',\n    DATA_INVALID = 'DATA_INVALID',\n\n    // Policy Spec / Config\n    INVALID = 'INVALID',\n    TYPE_UNKNOWN = 'TYPE_UNKNOWN',\n    FIELD_MISSING = 'FIELD_MISSING',\n    FIELD_INVALID = 'FIELD_INVALID',\n\n    // Composite / Tree evaluation\n    CHILD_INVALID = 'CHILD_INVALID',\n    CHILD_EVALUATION_FAILED = 'CHILD_EVALUATION_FAILED',\n\n    // Engine / Evaluator registry\n    EVALUATION_DENIED = 'EVALUATION_DENIED',\n    EVALUATOR_NOT_FOUND = 'EVALUATOR_NOT_FOUND',\n    EVALUATOR_ERROR = 'EVALUATOR_ERROR',\n\n    // Execution control\n    SKIPPED_EXCLUDED = 'SKIPPED_EXCLUDED',\n    SKIPPED_NOT_INCLUDED = 'SKIPPED_NOT_INCLUDED',\n\n    // Internal / unexpected\n    INTERNAL_ERROR = 'INTERNAL_ERROR',\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup, defineIssueItem } from 'validup';\nimport type { PolicyIssueGroup, PolicyIssueItem } from './types.ts';\n\nexport function definePolicyIssueItem(input: Omit<PolicyIssueItem, 'type'>) : PolicyIssueItem {\n    return defineIssueItem(input);\n}\n\nexport function definePolicyIssueGroup(input: Omit<PolicyIssueGroup, 'type'>) : PolicyIssueGroup {\n    return defineIssueGroup(input);\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributeNamesPolicy } from './types';\n\nexport class AttributeNamesPolicyValidator extends Container<AttributeNamesPolicy> {\n    initialize() {\n        super.initialize();\n\n        this.mount(\n            'names',\n            createValidator(\n                z.array(\n                    z.string()\n                        .min(3)\n                        .max(128),\n                ),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AttributesPolicy } from './types';\n\nexport function defineAttributesPolicy<\n    T extends Record<string, any> = Record<string, any>,\n>(\n    data: AttributesPolicy<T>,\n) : AttributesPolicy<T> {\n    return data;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum BuiltInPolicyType {\n    /**\n     * Bundles different policies.\n     */\n    COMPOSITE = 'composite',\n    /**\n     * Date Based Access Control (DBAC)\n     */\n    DATE = 'date',\n    /**\n     * Time Based Access Control (TBAC)\n     */\n    TIME = 'time',\n    /**\n     * Attribute Name Based Access Control (ANBAC)\n     */\n    ATTRIBUTE_NAMES = 'attributeNames',\n    /**\n     * Attribute Based Access Control (ABAC)\n     */\n    ATTRIBUTES = 'attributes',\n    /**\n     * Realm of Identity is for attribute realm.\n     */\n    REALM_MATCH = 'realmMatch',\n\n    /**\n     * Restriction based on identity (type, id, ...)\n     */\n    IDENTITY = 'identity',\n\n    /**\n     * Restriction based on a binding between identity <-> permission\n     */\n    PERMISSION_BINDING = 'permissionBinding',\n\n    // Location (LBAC)\n    // Device (DBAC)\n}\n\nexport const SystemPolicyName = {\n    DEFAULT: 'system.default',\n    IDENTITY: 'system.identity',\n    PERMISSION_BINDING: 'system.permission-binding',\n    REALM_MATCH: 'system.realm-match',\n    REALM_BOUND: 'system.realm-bound',\n    REALM_OR_GLOBAL: 'system.realm-or-global',\n} as const;\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributesPolicy } from './types';\n\nexport class AttributesPolicyValidator<\n    T extends Record<string, any> = Record<string, any>,\n> extends Container<AttributesPolicy<T>> {\n    initialize() {\n        super.initialize();\n\n        this.mount(\n            'query',\n            createValidator(\n                z.looseObject({}),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { guard } from '@ucast/mongo2js';\nimport { isObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { AttributesPolicyValidator } from './validator';\n\nexport class AttributesPolicyEvaluator<\n    T extends Record<string, any> = Record<string, any>,\n> implements IPolicyEvaluator {\n    protected validator : AttributesPolicyValidator<T>;\n\n    constructor() {\n        this.validator = new AttributesPolicyValidator<T>();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<T | null> {\n        if (!ctx.data.has(BuiltInPolicyType.ATTRIBUTES)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.ATTRIBUTES)) {\n            return ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n        }\n\n        // todo: run validator on attributes (isObject ...)\n        const data = ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n\n        ctx.data.set(BuiltInPolicyType.ATTRIBUTES, data);\n        ctx.data.setValidated(BuiltInPolicyType.ATTRIBUTES);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        this.fixQuery(policy.query);\n\n        const testIt = guard<T>(policy.query);\n\n        return { success: maybeInvertPolicyOutcome(testIt(data as T), policy.invert) };\n    }\n\n    protected fixQuery(\n        query: unknown | unknown[],\n    ) {\n        if (Array.isArray(query)) {\n            for (const element of query) {\n                this.fixQuery(element);\n            }\n\n            return;\n        }\n\n        if (isObject(query)) {\n            const keys = Object.keys(query);\n            for (const key of keys) {\n                const value = query[key];\n\n                if (isObject(value) || Array.isArray(value)) {\n                    this.fixQuery(value);\n                    continue;\n                }\n\n                if (\n                    key === '$regex' &&\n                    typeof value === 'string'\n                ) {\n                    const fragments = value.match(/\\/(.*?)\\/([a-z]*)?$/i);\n                    if (fragments) {\n                        query[key] = new RegExp(fragments[1], fragments[2]);\n                    }\n                }\n            }\n        }\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { flattenObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport type { PolicyIssue } from '../../issue';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributeNamesPolicyValidator } from './validator';\nimport { AttributesPolicyEvaluator } from '../attributes';\n\nexport class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : AttributeNamesPolicyValidator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new AttributeNamesPolicyValidator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.attributesEvaluator.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const attributes = flattenObject(data);\n        const keys = Object.keys(attributes);\n\n        const issues : PolicyIssue[] = [];\n        for (const key of keys) {\n            const index = policy.names.indexOf(key);\n            if (index === -1) {\n                issues.push(definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: `The attribute ${key} is not included`,\n                    path: [...ctx.path, key],\n                }));\n            }\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(issues.length === 0, policy.invert),\n            issues,\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { CompositePolicy } from './types';\n\nexport class CompositePolicyValidator extends Container<CompositePolicy> {\n    initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'children',\n            createValidator(\n                z.array(z.looseObject({ type: z.string().min(3) })),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup } from 'validup';\nimport { DecisionStrategy } from '../../../constants';\nimport { PolicyEngine } from '../../engine';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport type { PolicyIssue } from '../../issue';\nimport { CompositePolicyValidator } from './validator';\n\nexport class CompositePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : CompositePolicyValidator;\n\n    constructor() {\n        this.validator = new CompositePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let count = 0;\n\n        const decision_strategy = policy.decision_strategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const engine = new PolicyEngine(ctx.evaluators);\n        const issues : PolicyIssue[] = [];\n\n        for (let i = 0; i < policy.children.length; i++) {\n            const childPolicy = policy.children[i];\n            const path = [...(ctx.path || []), childPolicy.type];\n\n            const outcome = await engine.evaluate(childPolicy, {\n                ...ctx,\n                path,\n            });\n\n            if (outcome.success) {\n                if (decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return {\n                        success: maybeInvertPolicyOutcome(true, policy.invert),\n                        issues: [],\n                    };\n                }\n\n                count++;\n            } else {\n                if (outcome.issues) {\n                    issues.push(defineIssueGroup({\n                        message: `The evaluation of child policy ${childPolicy.type} failed`,\n                        issues: outcome.issues || [],\n                        path,\n                    }));\n                }\n\n                if (decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    return {\n                        success: maybeInvertPolicyOutcome(false, policy.invert),\n                        issues: [\n                            defineIssueGroup({\n                                message: `The evaluation of composite policy failed (${DecisionStrategy.UNANIMOUS})`,\n                                issues,\n                                path: ctx.path,\n                            }),\n                        ],\n                    };\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(false, policy.invert),\n            issues: [\n                defineIssueGroup({\n                    message: `The evaluation of composite policy failed (${DecisionStrategy.CONSENSUS})`,\n                    issues: issues || [],\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../../types';\nimport { BuiltInPolicyType } from '../constants';\nimport type { CompositePolicy } from './types';\n\nexport function isCompositePolicy(\n    input: PolicyWithType,\n) : input is PolicyWithType<CompositePolicy> {\n    return input.type === BuiltInPolicyType.COMPOSITE;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { DatePolicy } from './types';\n\nexport class DatePolicyValidator extends Container<DatePolicy> {\n    initialize() {\n        super.initialize();\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('invert', createValidator(\n            z.boolean()\n                .or(z.undefined())\n                .or(z.null())\n                .optional(),\n        ));\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { DatePolicyValidator } from './validator';\n\nfunction normalizeDate(input: Date) {\n    return new Date(input.getFullYear(), input.getMonth(), input.getDate());\n}\n\nfunction toDate(input: Date | string | number) : Date {\n    if (typeof input === 'string') {\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class DatePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : DatePolicyValidator;\n\n    constructor() {\n        this.validator = new DatePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.DATE)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.DATE)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.DATE);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = normalizeDate(toDate(ctx.data.get(BuiltInPolicyType.DATE)));\n\n                ctx.data.set(BuiltInPolicyType.DATE, now);\n                ctx.data.setValidated(BuiltInPolicyType.DATE);\n            }\n        } else {\n            now = normalizeDate(new Date());\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start));\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end));\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\n\nimport type { IdentityPolicyData } from '../types.ts';\n\nexport class PolicyIdentityDataValidator extends Container<IdentityPolicyData> {\n    initialize() {\n        super.initialize();\n\n        this.mount(\n            'type',\n            createValidator(\n                z.string().min(3).max(128),\n            ),\n        );\n\n        this.mount(\n            'id',\n            createValidator(\n                z.uuid(),\n            ),\n        );\n\n        this.mount(\n            'clientId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmName',\n            createValidator(\n                z.string().min(3).max(128)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { IdentityPolicy } from './types';\n\nexport class IdentityPolicyValidator extends Container<IdentityPolicy> {\n    protected initialize() {\n        this.mount(\n            'types',\n            createValidator(\n                z.array(z.string())\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIdentityDataValidator } from './data';\nimport type { IdentityPolicyData } from './types';\nimport { IdentityPolicyValidator } from './validator';\n\nexport class IdentityPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : IdentityPolicyValidator;\n\n    protected dataValidator : PolicyIdentityDataValidator;\n\n    constructor() {\n        this.validator = new IdentityPolicyValidator();\n        this.dataValidator = new PolicyIdentityDataValidator();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<IdentityPolicyData | null> {\n        if (!ctx.data.has('identity')) {\n            return null;\n        }\n\n        if (ctx.data.isValidated('identity')) {\n            return ctx.data.get<IdentityPolicyData>('identity');\n        }\n\n        const data = await this.dataValidator.run(ctx.data.get('identity'));\n\n        ctx.data.set('identity', data);\n        ctx.data.setValidated('identity');\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        if (!policy.types || policy.types.length === 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        const typeAllowed = policy.types.includes(data.type);\n        if (typeAllowed) {\n            return { success: maybeInvertPolicyOutcome(typeAllowed, policy.invert) };\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(typeAllowed, policy.invert),\n            issues: [\n                definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: `The type ${data.type} is not covered by the policy configuration`,\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Container } from 'validup';\nimport type { PermissionBindingPolicy } from './types';\n\nexport class PermissionBindingPolicyValidator extends Container<PermissionBindingPolicy> {\n    protected initialize() {\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PermissionBindingPolicyValidator } from './validator';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator: PermissionBindingPolicyValidator;\n\n    constructor() {\n        this.validator = new PermissionBindingPolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        // todo: this must be changed when the permission-checker not only checks owned permissions.\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { RealmMatchPolicy } from './types';\n\nexport class RealmMatchPolicyValidator extends Container<RealmMatchPolicy> {\n    initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'attribute_name',\n            createValidator(\n                z.string()\n                    .min(3)\n                    .or(z.array(z.string().min(3)))\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_name_strict',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_null_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'identity_master_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { hasOwnProperty } from '@authup/kit';\nimport { DecisionStrategy } from '../../../constants';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributesPolicyEvaluator } from '../attributes';\nimport { IdentityPolicyEvaluator } from '../identity';\nimport { RealmMatchPolicyValidator } from './validator';\n\nexport class RealmMatchPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : RealmMatchPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new RealmMatchPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const attributes = await this.attributesEvaluator.accessData(ctx);\n        if (!attributes) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityMasterMatchAll = policy.identity_master_match_all ?? true;\n        if (\n            identityMasterMatchAll &&\n            identity.realmName &&\n            identity.realmName === 'master'\n        ) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        let keys : string[];\n        if (policy.attribute_name) {\n            if (Array.isArray(policy.attribute_name)) {\n                keys = policy.attribute_name;\n            } else {\n                keys = [policy.attribute_name];\n            }\n        } else {\n            keys = [\n                'realm_id',\n                'realm_name',\n                'realmId',\n                'realmName',\n            ];\n\n            policy.decision_strategy = DecisionStrategy.CONSENSUS;\n        }\n\n        const attribute_name_strict = policy.attribute_name_strict ?? true;\n        if (!attribute_name_strict) {\n            const resourceKeys = Object.keys(attributes);\n            const keysToAdd : string[] = [];\n            for (const resourceKey of resourceKeys) {\n                let contains : boolean = false;\n\n                for (const key of keys) {\n                    if (\n                        resourceKey !== key &&\n                        resourceKey.includes(key)\n                    ) {\n                        contains = true;\n                        break;\n                    }\n                }\n\n                if (contains) {\n                    keysToAdd.push(resourceKey);\n                }\n            }\n\n            if (keysToAdd.length > 0) {\n                keys.push(...keysToAdd);\n            }\n        }\n\n        let count = 0;\n        let evaluated = false;\n\n        for (const key of keys) {\n            if (!hasOwnProperty(attributes, key)) {\n                continue;\n            }\n\n            evaluated = true;\n\n            let outcome : boolean = false;\n\n            const attributeValue = attributes[key];\n\n            if (\n                attributeValue === null &&\n                policy.attribute_null_match_all\n            ) {\n                outcome = true;\n            } else if (\n                attributeValue === identity.realmId ||\n                attributeValue === identity.realmName\n            ) {\n                outcome = true;\n            }\n\n            if (outcome) {\n                if (policy.decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n                }\n\n                count++;\n            } else {\n                if (policy.decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n\n                count--;\n            }\n        }\n\n        if (!evaluated) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        return { success: maybeInvertPolicyOutcome(count > 0, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum TimePolicyInterval {\n    DAILY = 'daily',\n    WEEKLY = 'weekly',\n    MONTHLY = 'monthly',\n    YEARLY = 'yearly',\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TimePolicyInterval } from './constants';\n\nexport function isIntervalForDayOfWeek(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.WEEKLY ||\n        interval === TimePolicyInterval.MONTHLY ||\n        interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfMonth(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.MONTHLY ||\n    interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfYear(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.YEARLY;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { TimePolicy } from './types';\nimport { TimePolicyInterval } from './constants';\n\nexport class TimePolicyValidator extends Container<TimePolicy> {\n    initialize() {\n        super.initialize();\n\n        this.mount('day_of_week', createValidator(\n            z.number()\n                .min(0).max(6)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_month', createValidator(\n            z.number()\n                .min(1)\n                .max(31)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_year', createValidator(\n            z.number()\n                .min(1)\n                .max(365)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount(\n            'interval',\n            createValidator(\n                z.enum(TimePolicyInterval)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.undefined())\n                    .or(z.null())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants';\nimport { isIntervalForDayOfMonth, isIntervalForDayOfWeek, isIntervalForDayOfYear } from './helpers';\nimport { TimePolicyValidator } from './validator';\n\nconst timeRegex = /^(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d)?$/;\n\nfunction normalizeDate(input: Date, dateRef?: Date) {\n    const date = dateRef ? new Date(dateRef) : new Date();\n    date.setHours(input.getHours(), input.getMinutes());\n\n    return date;\n}\n\nfunction toDate(\n    input: Date | string | number,\n    dateRef?: Date,\n) : Date {\n    if (typeof input === 'string') {\n        if (timeRegex.test(input)) {\n            const [startHours, startMinutes] = input.split(':').map(Number);\n            const date = dateRef ? new Date(dateRef) : new Date();\n            date.setHours(startHours, startMinutes);\n            return date;\n        }\n\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class TimePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : TimePolicyValidator;\n\n    constructor() {\n        this.validator = new TimePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.TIME)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.TIME)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.TIME);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = toDate(ctx.data.get(BuiltInPolicyType.TIME));\n\n                ctx.data.set(BuiltInPolicyType.TIME, now);\n                ctx.data.setValidated(BuiltInPolicyType.TIME);\n            }\n        } else {\n            now = new Date();\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start, now), now);\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end, now), now);\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.interval) {\n            if (\n                isIntervalForDayOfWeek(policy.interval) &&\n                policy.day_of_week\n            ) {\n                if (now.getDay() !== policy.day_of_week) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfMonth(policy.interval) &&\n                policy.day_of_month\n            ) {\n                if (now.getDate() !== policy.day_of_month) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfYear(policy.interval) &&\n                policy.day_of_year\n            ) {\n                const start = new Date(now.getFullYear(), 0, 0);\n                const diff = (now.getTime() - start.getTime()) +\n                    ((start.getTimezoneOffset() - now.getTimezoneOffset()) * 60 * 1000);\n\n                const oneDay = 1000 * 60 * 60 * 24;\n                const dayOfYear = Math.floor(diff / oneDay);\n\n                if (dayOfYear !== policy.day_of_year) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../types';\nimport type { BuiltInPolicyTypeMap } from './types';\n\nexport function definePolicyWithType<\n    K extends keyof BuiltInPolicyTypeMap,\n    D extends BuiltInPolicyTypeMap<any>[K],\n>(\n    type: K,\n    data: D,\n) : PolicyWithType<D, K> {\n    return {\n        ...data,\n        type,\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AttributeNamesPolicyEvaluator,\n    AttributesPolicyEvaluator,\n    BuiltInPolicyType,\n    CompositePolicyEvaluator,\n    DatePolicyEvaluator,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyEvaluator,\n    RealmMatchPolicyEvaluator,\n    TimePolicyEvaluator,\n} from './built-in';\n\nexport const PolicyDefaultEvaluators = {\n    [BuiltInPolicyType.COMPOSITE]: new CompositePolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTES]: new AttributesPolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTE_NAMES]: new AttributeNamesPolicyEvaluator(),\n    [BuiltInPolicyType.DATE]: new DatePolicyEvaluator(),\n    [BuiltInPolicyType.IDENTITY]: new IdentityPolicyEvaluator(),\n    [BuiltInPolicyType.PERMISSION_BINDING]: new PermissionBindingPolicyEvaluator(),\n    [BuiltInPolicyType.REALM_MATCH]: new RealmMatchPolicyEvaluator(),\n    [BuiltInPolicyType.TIME]: new TimePolicyEvaluator(),\n} as const;\n","/*\n * Copyright (c) 2021-2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport type { Issue } from 'validup';\nimport { defineIssueItem } from 'validup';\nimport { DecisionStrategy } from '../../constants.ts';\nimport type { CompositePolicy, IPolicyEngine, PolicyWithType } from '../../policy';\nimport {\n    BuiltInPolicyType,\n    PolicyData,\n    PolicyDefaultEvaluators,\n    PolicyEngine,\n    definePolicyEvaluationContext,\n    definePolicyIssueGroup,\n} from '../../policy';\nimport { PermissionError } from '../error';\nimport type { IPermissionProvider, PermissionGetOptions } from '../provider';\nimport { PermissionMemoryProvider } from '../provider';\n\nimport type { PermissionBinding } from '../types.ts';\nimport type { IPermissionEvaluator, PermissionEvaluationContext, PermissionEvaluatorOptions } from './types.ts';\n\nexport class PermissionEvaluator implements IPermissionEvaluator {\n    protected provider : IPermissionProvider;\n\n    protected policyEngine : IPolicyEngine;\n\n    protected clientId?: string | null;\n\n    protected realmId?: string | null;\n\n    // ----------------------------------------------\n\n    constructor(options: PermissionEvaluatorOptions = {}) {\n        if (options.provider) {\n            this.provider = options.provider;\n        } else {\n            this.provider = new PermissionMemoryProvider();\n        }\n\n        if (typeof options.clientId !== 'undefined') {\n            this.clientId = options.clientId;\n        }\n\n        if (typeof options.realmId !== 'undefined') {\n            this.realmId = options.realmId;\n        }\n\n        if (options.policyEngine) {\n            this.policyEngine = options.policyEngine;\n        } else {\n            this.policyEngine = new PolicyEngine(PolicyDefaultEvaluators);\n        }\n    }\n\n    // ----------------------------------------------\n\n    protected async findOne(\n        input: string,\n        overrides?: {\n            realmId?: string | null,\n            clientId?: string | null \n        },\n    ) : Promise<PermissionBinding | null> {\n        const options : PermissionGetOptions = { name: input };\n\n        if (typeof overrides?.clientId !== 'undefined') {\n            options.clientId = overrides.clientId;\n        } else if (typeof this.clientId !== 'undefined') {\n            options.clientId = this.clientId;\n        }\n\n        if (typeof overrides?.realmId !== 'undefined') {\n            options.realmId = overrides.realmId;\n        } else if (typeof this.realmId !== 'undefined') {\n            options.realmId = this.realmId;\n        }\n\n        return this.provider.findOne(options);\n    }\n\n    // ----------------------------------------------\n\n    async evaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        if (!Array.isArray(ctx.name)) {\n            await this.evaluate({\n                ...ctx,\n                name: [ctx.name],\n            });\n            return;\n        }\n\n        const { options = {} } = ctx;\n\n        const decisionStrategy = options.decisionStrategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const issues : Issue[] = [];\n\n        let count = 0;\n\n        const dataBase = ctx.input || new PolicyData();\n\n        for (let i = 0; i < ctx.name.length; i++) {\n            const binding = await this.findOne(ctx.name[i], {\n                realmId: ctx.realmId,\n                clientId: ctx.clientId,\n            });\n            if (!binding) {\n                issues.push(defineIssueItem({\n                    code: ErrorCode.PERMISSION_NOT_FOUND,\n                    message: `The ${ctx.name[i]} permission could not be resolved`,\n                    path: [ctx.name[i]],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(ctx.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                continue;\n            }\n\n            const policies = binding.policies ?? [];\n            if (policies.length === 0) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n\n                continue;\n            }\n\n            const data = dataBase.clone();\n            data.set(BuiltInPolicyType.PERMISSION_BINDING, binding);\n\n            const policyDecisionStrategy = binding.permission.decision_strategy ??\n                DecisionStrategy.UNANIMOUS;\n\n            const compositePolicy : PolicyWithType<CompositePolicy> = {\n                type: BuiltInPolicyType.COMPOSITE,\n                decision_strategy: policyDecisionStrategy,\n                children: policies,\n            };\n\n            const evaluationResult = await this.policyEngine.evaluate(\n                compositePolicy,\n                definePolicyEvaluationContext({\n                    include: options.policiesIncluded,\n                    exclude: options.policiesExcluded,\n                    data,\n                }),\n            );\n\n            if (evaluationResult.success) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n            } else {\n                issues.push(definePolicyIssueGroup({\n                    code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n                    issues: evaluationResult.issues || [],\n                    message: `The ${binding.permission.name} permissions policy evaluation failed`,\n                    path: [binding.permission.name],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(binding.permission.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return;\n        }\n\n        if (issues.length === 0) {\n            throw PermissionError.deniedAll(ctx.name);\n        } else {\n            const error = PermissionError.evaluationFailed(ctx.name);\n            error.addIssues(issues);\n            throw error;\n        }\n    }\n\n    async evaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n\n    // ----------------------------------------------\n\n    async preEvaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                policiesExcluded: [\n                    BuiltInPolicyType.ATTRIBUTES,\n                    BuiltInPolicyType.ATTRIBUTE_NAMES,\n                    BuiltInPolicyType.REALM_MATCH,\n                ],\n            },\n        });\n    }\n\n    async preEvaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.preEvaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n}\n"],"names":["PermissionError","AuthupError","options","message","statusCode","addIssue","data","issues","push","addIssues","notFound","name","code","ErrorCode","PERMISSION_NOT_FOUND","denied","PERMISSION_DENIED","deniedAll","names","join","evaluationFailed","Array","isArray","PERMISSION_EVALUATION_FAILED","PermissionMemoryProvider","items","setMany","findOne","entry","buildPermissionBindingKey","client_id","clientId","realm_id","realmId","input","mergePermissionBindings","reduce","prev","current","permission","maybeInvertPolicyOutcome","outcome","invert","PolicyError","evaluatorNotFound","type","POLICY_EVALUATOR_NOT_FOUND","evaluatorNotProcessable","POLICY_EVALUATOR_NOT_PROCESSABLE","evaluatorContextInvalid","POLICY_EVALUATOR_CONTEXT_INVALID","PolicyEngine","evaluators","registerEvaluator","evaluator","registerEvaluators","keys","Object","key","evaluate","policy","ctx","exclude","length","includes","success","include","defineIssueItem","path","evaluateOrFail","e","error","PolicyData","validated","Set","set","value","delete","get","Error","has","setValidated","add","isValidated","clone","definePolicyEvaluationContext","PolicyIssueSeverity","PolicyIssueCode","definePolicyIssueItem","definePolicyIssueGroup","defineIssueGroup","AttributeNamesPolicyValidator","Container","initialize","mount","createValidator","z","array","string","min","max","boolean","or","null","undefined","optional","defineAttributesPolicy","BuiltInPolicyType","SystemPolicyName","DEFAULT","IDENTITY","PERMISSION_BINDING","REALM_MATCH","REALM_BOUND","REALM_OR_GLOBAL","AttributesPolicyValidator","looseObject","AttributesPolicyEvaluator","validator","accessData","ATTRIBUTES","run","DATA_MISSING","fixQuery","query","testIt","guard","element","isObject","fragments","match","RegExp","AttributeNamesPolicyEvaluator","attributesEvaluator","attributes","flattenObject","index","indexOf","EVALUATION_DENIED","CompositePolicyValidator","enum","DecisionStrategy","CompositePolicyEvaluator","count","decision_strategy","UNANIMOUS","engine","i","children","childPolicy","AFFIRMATIVE","CONSENSUS","isCompositePolicy","COMPOSITE","DatePolicyValidator","date","iso","number","normalizeDate","Date","getFullYear","getMonth","getDate","toDate","DatePolicyEvaluator","now","DATE","start","end","PolicyIdentityDataValidator","uuid","IdentityPolicyValidator","IdentityPolicyEvaluator","dataValidator","types","typeAllowed","PermissionBindingPolicyValidator","PermissionBindingPolicyEvaluator","RealmMatchPolicyValidator","RealmMatchPolicyEvaluator","identityEvaluator","identity","identityMasterMatchAll","identity_master_match_all","realmName","attribute_name","attribute_name_strict","resourceKeys","keysToAdd","resourceKey","contains","evaluated","hasOwnProperty","attributeValue","attribute_null_match_all","TimePolicyInterval","isIntervalForDayOfWeek","interval","WEEKLY","MONTHLY","YEARLY","isIntervalForDayOfMonth","isIntervalForDayOfYear","TimePolicyValidator","datetime","time","timeRegex","dateRef","setHours","getHours","getMinutes","test","startHours","startMinutes","split","map","Number","TimePolicyEvaluator","TIME","day_of_week","getDay","day_of_month","day_of_year","diff","getTime","getTimezoneOffset","oneDay","dayOfYear","Math","floor","definePolicyWithType","PolicyDefaultEvaluators","ATTRIBUTE_NAMES","PermissionEvaluator","provider","policyEngine","overrides","decisionStrategy","dataBase","binding","policies","policyDecisionStrategy","compositePolicy","evaluationResult","policiesIncluded","policiesExcluded","evaluateOneOf","preEvaluate","preEvaluateOneOf"],"mappings":";;;;;;;;;;AAWO,MAAMA,eAAAA,SAAwBC,WAAAA,CAAAA;IACjC,WAAA,CAAYC,OAAAA,GAA8B,EAAE,CAAE;AAC1C,QAAA,KAAK,CAAC;AACF,YAAA,GAAGA,OAAO;YACVC,OAAAA,EAASD,OAAAA,CAAQC,OAAO,IAAI,8BAAA;YAC5BC,UAAAA,EAAYF,OAAAA,CAAQE,UAAU,IAAI;AACtC,SAAA,CAAA;AACJ,IAAA;AAEAC,IAAAA,QAAAA,CAASC,IAAiB,EAAE;AACxB,QAAA,IAAI,CAACC,MAAM,CAACC,IAAI,CAACF,IAAAA,CAAAA;AACrB,IAAA;AAEAG,IAAAA,SAAAA,CAAUH,IAAmB,EAAE;AAC3B,QAAA,IAAI,CAACC,MAAM,CAACC,IAAI,CAAA,GAAIF,IAAAA,CAAAA;AACxB,IAAA;IAEA,OAAOI,QAAAA,CAASC,IAAY,EAAE;AAC1B,QAAA,OAAO,IAAIX,eAAAA,CAAgB;AACvBG,YAAAA,OAAAA,EAAS,CAAC,eAAe,EAAEQ,IAAAA,CAAK,eAAe,CAAC;AAChDC,YAAAA,IAAAA,EAAMC,UAAUC;AACpB,SAAA,CAAA;AACJ,IAAA;IAEA,OAAOC,MAAAA,CAAOJ,IAAY,EAAE;AACxB,QAAA,OAAO,IAAIX,eAAAA,CAAgB;AACvBG,YAAAA,OAAAA,EAAS,CAAC,eAAe,EAAEQ,IAAAA,CAAK,sBAAsB,CAAC;AACvDC,YAAAA,IAAAA,EAAMC,UAAUG;AACpB,SAAA,CAAA;AACJ,IAAA;IAEA,OAAOC,SAAAA,CAAUC,KAAe,EAAE;AAC9B,QAAA,OAAO,IAAIlB,eAAAA,CAAgB;YACvBG,OAAAA,EAAS,CAAC,wBAAwB,EAAEe,KAAAA,CAAMC,IAAI,CAAC,IAAA,CAAA,CAAM,kBAAkB,CAAC;AACxEP,YAAAA,IAAAA,EAAMC,UAAUG;AACpB,SAAA,CAAA;AACJ,IAAA;IAEA,OAAOI,gBAAAA,CAAiBT,IAAuB,EAAE;QAC7C,IAAIU,KAAAA,CAAMC,OAAO,CAACX,IAAAA,CAAAA,EAAO;AACrB,YAAA,OAAO,IAAIX,eAAAA,CAAgB;gBACvBG,OAAAA,EAAS,CAAC,8BAA8B,EAAEQ,IAAAA,CAAKQ,IAAI,CAAC,IAAA,CAAA,CAAM,OAAO,CAAC;AAClEP,gBAAAA,IAAAA,EAAMC,UAAUU;AACpB,aAAA,CAAA;AACJ,QAAA;AAEA,QAAA,OAAO,IAAIvB,eAAAA,CAAgB;AACvBG,YAAAA,OAAAA,EAAS,CAAC,6BAA6B,EAAEQ,IAAAA,CAAK,OAAO,CAAC;AACtDC,YAAAA,IAAAA,EAAMC,UAAUU;AACpB,SAAA,CAAA;AACJ,IAAA;AACJ;;ACnDO,MAAMC,wBAAAA,CAAAA;AACCC,IAAAA,KAAAA,GAA4C,EAAC;IAEvD,WAAA,CAAYA,KAAAA,GAA6B,EAAE,CAAE;QACzC,IAAI,CAACC,OAAO,CAACD,KAAAA,CAAAA;AACjB,IAAA;IAEA,MAAME,OAAAA,CACFzB,OAA6B,EACI;AACjC,QAAA,MAAM0B,KAAAA,GAAQ,IAAI,CAACH,KAAK,CAACI,yBAAAA,CAA0B;AAC/ClB,YAAAA,IAAAA,EAAMT,QAAQS,IAAI;AAClBmB,YAAAA,SAAAA,EAAW5B,QAAQ6B,QAAQ;AAC3BC,YAAAA,QAAAA,EAAU9B,QAAQ+B;SACtB,CAAA,CAAG;AACH,QAAA,IAAIL,KAAAA,EAAO;YACP,OAAOA,KAAAA;AACX,QAAA;QAEA,OAAO,IAAA;AACX,IAAA;AAEAF,IAAAA,OAAAA,CAAQQ,KAA0B,EAAE;QAChC,IAAI,CAACT,KAAK,GAAGU,uBAAAA,CAAwBD,OAChCE,MAAM,CAAC,CAACC,IAAAA,EAAMC,OAAAA,GAAAA;AACXD,YAAAA,IAAI,CAACR,yBAAAA,CAA0BS,OAAAA,CAAQC,UAAU,EAAE,GAAGD,OAAAA;YACtD,OAAOD,IAAAA;AACX,QAAA,CAAA,EAAG,EAAC,CAAA;AACZ,IAAA;AACJ;;ACxCA;;;;;AAKC,IAIM,SAASG,wBAAAA,CACZC,OAAgB,EAChBC,MAA2B,EAAA;IAE3B,IAAI,OAAOA,WAAW,WAAA,EAAa;QAC/B,OAAOD,OAAAA;AACX,IAAA;IAEA,IAAI,OAAOC,WAAW,UAAA,EAAY;AAC9B,QAAA,OAAOA,MAAAA,CAAOD,OAAAA,CAAAA;AAClB,IAAA;AAEA,IAAA,IAAI,CAACC,MAAAA,EAAQ;QACT,OAAOD,OAAAA;AACX,IAAA;AAEA,IAAA,OAAO,CAACA,OAAAA;AACZ;;AChBO,MAAME,WAAAA,SAAoB1C,WAAAA,CAAAA;IAC7B,WAAA,CAAYE,OAAgB,EAAES,IAAoB,CAAE;AAChD,QAAA,KAAK,CAAC;AACFT,YAAAA,OAAAA;AACAS,YAAAA;AACJ,SAAA,CAAA;AACJ,IAAA;AAEAP,IAAAA,QAAAA,CAASC,IAAiB,EAAE;AACxB,QAAA,IAAI,CAACC,MAAM,CAACC,IAAI,CAACF,IAAAA,CAAAA;AACrB,IAAA;AAEAG,IAAAA,SAAAA,CAAUH,IAAmB,EAAE;AAC3B,QAAA,IAAI,CAACC,MAAM,CAACC,IAAI,CAAA,GAAIF,IAAAA,CAAAA;AACxB,IAAA;IAEA,OAAOsC,iBAAAA,CAAkBC,IAAY,EAAE;QACnC,OAAO,IAAIF,YACP,CAAC,iDAAiD,EAAEE,IAAAA,CAAAA,CAAM,EAC1DhC,UAAUiC,0BAA0B,CAAA;AAE5C,IAAA;AAEA,IAAA,OAAOC,uBAAAA,GAA0B;AAC7B,QAAA,OAAO,IAAIJ,WAAAA,CACP,2CAAA,EACA9B,SAAAA,CAAUmC,gCAAgC,CAAA;AAElD,IAAA;AAEA,IAAA,OAAOC,uBAAAA,GAA0B;AAC7B,QAAA,OAAO,IAAIN,WAAAA,CACP,qCAAA,EACA9B,SAAAA,CAAUqC,gCAAgC,CAAA;AAElD,IAAA;AACJ;;ACzBA;;;AAGC,IACM,MAAMC,YAAAA,CAAAA;IACCC,UAAAA;IAEV,WAAA,CAAYA,UAAAA,GAA+B,EAAE,CAAE;QAC3C,IAAI,CAACA,UAAU,GAAGA,UAAAA;AACtB,IAAA;IAEOC,iBAAAA,CACHR,IAAY,EACZS,SAA2B,EACtB;AACL,QAAA,IAAI,CAACF,UAAU,CAACP,IAAAA,CAAK,GAAGS,SAAAA;AAC5B,IAAA;AAEOC,IAAAA,kBAAAA,CAAmBH,UAA4B,EAAE;QACpD,MAAMI,IAAAA,GAAOC,MAAAA,CAAOD,IAAI,CAACJ,UAAAA,CAAAA;QACzB,KAAK,MAAMM,OAAOF,IAAAA,CAAM;AACpB,YAAA,IAAI,CAACH,iBAAiB,CAACK,GAAAA,EAAKN,UAAU,CAACM,GAAAA,CAAI,CAAA;AAC/C,QAAA;AACJ,IAAA;AAEA;;;AAGC,QACD,MAAMC,QAAAA,CAASC,MAAe,EAAEC,GAA4B,EAAoC;AAC5F,QAAA,IACIA,IAAIC,OAAO,IACXD,GAAAA,CAAIC,OAAO,CAACC,MAAM,GAAG,CAAA,IACrBF,GAAAA,CAAIC,OAAO,CAACE,QAAQ,CAACJ,MAAAA,CAAOf,IAAI,CAAA,EAClC;YACE,OAAO;gBAAEoB,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,aAAA;AACpE,QAAA;AAEA,QAAA,IACImB,IAAIK,OAAO,IACXL,GAAAA,CAAIK,OAAO,CAACH,MAAM,GAAG,CAAA,IACrB,CAACF,IAAIK,OAAO,CAACF,QAAQ,CAACJ,MAAAA,CAAOf,IAAI,CAAA,EACnC;YACE,OAAO;gBAAEoB,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,aAAA;AACpE,QAAA;AAEA,QAAA,MAAMnC,SAAyB,EAAE;AAEjC,QAAA,MAAM+C,YAAY,IAAI,CAACF,UAAU,CAACQ,MAAAA,CAAOf,IAAI,CAAC;AAC9C,QAAA,IAAI,CAACS,SAAAA,EAAW;;YAEZ/C,MAAAA,CAAOC,IAAI,CAAC2D,eAAAA,CAAgB;gBACxBC,IAAAA,EAAM;AAACR,oBAAAA,MAAAA,CAAOf;AAAK,iBAAA;AACnB1C,gBAAAA,OAAAA,EAAS,CAAC,WAAW,EAAEyD,OAAOf,IAAI,CAAC,qCAAqC,CAAC;AACzEjC,gBAAAA,IAAAA,EAAMC,UAAUiC;AACpB,aAAA,CAAA,CAAA;YAEA,OAAO;gBACHmB,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM,CAAA;AACtDnC,gBAAAA;AACJ,aAAA;AACJ,QAAA;QAEA,IAAI;AACA,YAAA,OAAO,MAAM+C,SAAAA,CAAUK,QAAQ,CAACC,MAAAA,EAAQ;AACpC,gBAAA,GAAGC,GAAG;gBACNT,UAAAA,EAAY;oBACR,GAAG,IAAI,CAACA,UAAU;AAClB,oBAAA,GAAIS,GAAAA,CAAIT,UAAU,IAAI;AAC1B;AACJ,aAAA,CAAA;AACJ,QAAA,CAAA,CAAE,OAAM;YACJ7C,MAAAA,CAAOC,IAAI,CAAC2D,eAAAA,CAAgB;gBACxBC,IAAAA,EAAM;AAACR,oBAAAA,MAAAA,CAAOf;AAAK,iBAAA;AACnB1C,gBAAAA,OAAAA,EAAS,CAAC,IAAI,EAAEyD,OAAOf,IAAI,CAAC,oDAAoD,CAAC;AACjFjC,gBAAAA,IAAAA,EAAMC,UAAUmC;AACpB,aAAA,CAAA,CAAA;YAEA,OAAO;gBACHiB,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM,CAAA;AACtDnC,gBAAAA;AACJ,aAAA;AACJ,QAAA;AACJ,IAAA;AAEA,IAAA,MAAM8D,cAAAA,CAAeT,MAAe,EAAEC,GAA4B,EAAkB;AAChF,QAAA,MAAMtD,SAAyB,EAAE;QAEjC,IAAI;AACA,YAAA,MAAMkC,UAAU,MAAM,IAAI,CAACkB,QAAQ,CAACC,MAAAA,EAAQC,GAAAA,CAAAA;YAC5C,IAAIpB,OAAAA,CAAQwB,OAAO,EAAE;AACjB,gBAAA;AACJ,YAAA;YAEA,IAAIxB,OAAAA,CAAQlC,MAAM,EAAE;gBAChBA,MAAAA,CAAOC,IAAI,CAAA,GAAIiC,OAAAA,CAAQlC,MAAM,CAAA;AACjC,YAAA;AACJ,QAAA,CAAA,CAAE,OAAO+D,CAAAA,EAAG;AACR,YAAA,IAAIA,aAAa3B,WAAAA,EAAa;gBAC1B,MAAM2B,CAAAA;AACV,YAAA;AACJ,QAAA;QAEA,MAAMC,KAAAA,GAAQ,IAAI5B,WAAAA,CAAY,CAAC,WAAW,EAAEiB,MAAAA,CAAOf,IAAI,CAAC,mBAAmB,CAAC,CAAA;AAC5E0B,QAAAA,KAAAA,CAAM9D,SAAS,CAACF,MAAAA,CAAAA;QAEhB,MAAMgE,KAAAA;AACV,IAAA;AACJ;;ACjIA;;;;;AAKC,IAaM,MAAMC,UAAAA,CAAAA;IACClE,IAAAA;IAEAmE,SAAAA;AAEV,IAAA,WAAA,CACInE,OAA4B,EAAE,EAC9BmE,SAAAA,GAAyB,IAAIC,KAAK,CACpC;QACE,IAAI,CAACpE,IAAI,GAAGA,IAAAA;QACZ,IAAI,CAACmE,SAAS,GAAGA,SAAAA;AACrB,IAAA;IAEAE,GAAAA,CAAiBjB,GAAW,EAAEkB,KAAQ,EAAS;AAC3C,QAAA,IAAI,CAACtE,IAAI,CAACoD,GAAAA,CAAI,GAAGkB,KAAAA;AACjB,QAAA,IAAI,CAACH,SAAS,CAACI,MAAM,CAACnB,GAAAA,CAAAA;AAC1B,IAAA;AAEAoB,IAAAA,GAAAA,CAAiBpB,GAAW,EAAM;AAC9B,QAAA,IAAIA,GAAAA,IAAO,IAAI,CAACpD,IAAI,EAAE;AAClB,YAAA,OAAO,IAAI,CAACA,IAAI,CAACoD,GAAAA,CAAI;AACzB,QAAA;AAEA,QAAA,MAAM,IAAIqB,KAAAA,CAAM,CAAC,iBAAiB,EAAErB,GAAAA,CAAI,gBAAgB,CAAC,CAAA;AAC7D,IAAA;AAEAsB,IAAAA,GAAAA,CAAItB,GAAW,EAAW;QACtB,OAAOA,GAAAA,IAAO,IAAI,CAACpD,IAAI;AAC3B,IAAA;AAEA2E,IAAAA,YAAAA,CAAavB,GAAW,EAAS;AAC7B,QAAA,IAAI,CAACe,SAAS,CAACS,GAAG,CAACxB,GAAAA,CAAAA;AACvB,IAAA;AAEAyB,IAAAA,WAAAA,CAAYzB,GAAW,EAAY;AAC/B,QAAA,OAAO,IAAI,CAACe,SAAS,CAACO,GAAG,CAACtB,GAAAA,CAAAA;AAC9B,IAAA;IAEA0B,KAAAA,GAAQ;AACJ,QAAA,OAAO,IAAIZ,UAAAA,CAAW;YAAE,GAAG,IAAI,CAAClE;AAAK,SAAA,EAAG,IAAIoE,GAAAA,CAAI,IAAI,CAACD,SAAS,CAAA,CAAA;AAClE,IAAA;AACJ;;ACjDO,SAASY,6BAAAA,CACZnD,KAAAA,GAAsC,EAAE,EAAA;IAExC,OAAO;QACHkB,UAAAA,EAAYlB,KAAAA,CAAMkB,UAAU,IAAI,EAAC;QACjCgB,IAAAA,EAAMlC,KAAAA,CAAMkC,IAAI,IAAI,EAAE;QACtB9D,IAAAA,EAAM4B,KAAAA,CAAM5B,IAAI,IAAI,IAAIkE,UAAAA,EAAAA;QACxBN,OAAAA,EAAShC,KAAAA,CAAMgC,OAAO,IAAI,EAAE;QAC5BJ,OAAAA,EAAS5B,KAAAA,CAAM4B,OAAO,IAAI;AAC9B,KAAA;AACJ;;ACpBA;;;;;IAOO,IAAKwB,mBAAAA,iBAAAA,SAAAA,mBAAAA,EAAAA;;;AAAAA,IAAAA,OAAAA,mBAAAA;AAGX,CAAA,CAAA,EAAA;AAEM,IAAA,eAAKC,iBAAAA,SAAAA,eAAAA,EAAAA;;;;;;;;;;;;;;;;;;;;;AAAAA,IAAAA,OAAAA,eAAAA;AA0BX,CAAA,CAAA,EAAA;;AC5BM,SAASC,sBAAsBtD,KAAoC,EAAA;AACtE,IAAA,OAAOiC,eAAAA,CAAgBjC,KAAAA,CAAAA;AAC3B;AAEO,SAASuD,uBAAuBvD,KAAqC,EAAA;AACxE,IAAA,OAAOwD,gBAAAA,CAAiBxD,KAAAA,CAAAA;AAC5B;;ACJO,MAAMyD,6BAAAA,SAAsCC,SAAAA,CAAAA;IAC/CC,UAAAA,GAAa;AACT,QAAA,KAAK,CAACA,UAAAA,EAAAA;AAEN,QAAA,IAAI,CAACC,KAAK,CACN,OAAA,EACAC,gBACIC,CAAAA,CAAEC,KAAK,CACHD,CAAAA,CAAEE,MAAM,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJC,GAAG,CAAC,GAAA,CAAA,CAAA,CAAA,CAAA;AAKrB,QAAA,IAAI,CAACN,KAAK,CACN,UACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGzB,IAAA;AACJ;;ACrCA;;;;;IASO,SAASC,sBAAAA,CAGZpG,IAAyB,EAAA;IAEzB,OAAOA,IAAAA;AACX;;ACfA;;;;;IAOO,IAAKqG,iBAAAA,iBAAAA,SAAAA,iBAAAA,EAAAA;AACR;;AAEC,QAAA,iBAAA,CAAA,WAAA,CAAA,GAAA,WAAA;AAED;;AAEC,QAAA,iBAAA,CAAA,MAAA,CAAA,GAAA,MAAA;AAED;;AAEC,QAAA,iBAAA,CAAA,MAAA,CAAA,GAAA,MAAA;AAED;;AAEC,QAAA,iBAAA,CAAA,iBAAA,CAAA,GAAA,gBAAA;AAED;;AAEC,QAAA,iBAAA,CAAA,YAAA,CAAA,GAAA,YAAA;AAED;;AAEC,QAAA,iBAAA,CAAA,aAAA,CAAA,GAAA,YAAA;AAGD;;AAEC,QAAA,iBAAA,CAAA,UAAA,CAAA,GAAA,UAAA;AAGD;;AAEC,QAAA,iBAAA,CAAA,oBAAA,CAAA,GAAA,mBAAA;AAjCOA,IAAAA,OAAAA,iBAAAA;AAsCX,CAAA,CAAA,EAAA;MAEYC,gBAAAA,GAAmB;IAC5BC,OAAAA,EAAS,gBAAA;IACTC,QAAAA,EAAU,iBAAA;IACVC,kBAAAA,EAAoB,2BAAA;IACpBC,WAAAA,EAAa,oBAAA;IACbC,WAAAA,EAAa,oBAAA;IACbC,eAAAA,EAAiB;AACrB;;AC1CO,MAAMC,yBAAAA,SAEHvB,SAAAA,CAAAA;IACNC,UAAAA,GAAa;AACT,QAAA,KAAK,CAACA,UAAAA,EAAAA;QAEN,IAAI,CAACC,KAAK,CACN,OAAA,EACAC,gBACIC,CAAAA,CAAEoB,WAAW,CAAC,EAAC,CAAA,CAAA,CAAA;AAIvB,QAAA,IAAI,CAACtB,KAAK,CACN,UACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGzB,IAAA;AACJ;;ACpBO,MAAMY,yBAAAA,CAAAA;IAGCC,SAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACA,SAAS,GAAG,IAAIH,yBAAAA,EAAAA;AACzB,IAAA;IAEA,MAAMI,UAAAA,CAAW1D,GAA4B,EAAsB;QAC/D,IAAI,CAACA,IAAIvD,IAAI,CAAC0E,GAAG,CAAC2B,iBAAAA,CAAkBa,UAAU,CAAA,EAAG;YAC7C,OAAO,IAAA;AACX,QAAA;AAEA,QAAA,IAAI3D,IAAIvD,IAAI,CAAC6E,WAAW,CAACwB,iBAAAA,CAAkBa,UAAU,CAAA,EAAG;AACpD,YAAA,OAAO3D,IAAIvD,IAAI,CAACwE,GAAG,CAAI6B,kBAAkBa,UAAU,CAAA;AACvD,QAAA;;AAGA,QAAA,MAAMlH,OAAOuD,GAAAA,CAAIvD,IAAI,CAACwE,GAAG,CAAI6B,kBAAkBa,UAAU,CAAA;AAEzD3D,QAAAA,GAAAA,CAAIvD,IAAI,CAACqE,GAAG,CAACgC,iBAAAA,CAAkBa,UAAU,EAAElH,IAAAA,CAAAA;AAC3CuD,QAAAA,GAAAA,CAAIvD,IAAI,CAAC2E,YAAY,CAAC0B,kBAAkBa,UAAU,CAAA;QAElD,OAAOlH,IAAAA;AACX,IAAA;AAEA,IAAA,MAAMqD,QAAAA,CAASiB,KAA0B,EAAEf,GAA4B,EAAmC;;AAEtG,QAAA,MAAMD,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;AAExC,QAAA,MAAMtE,IAAAA,GAAO,MAAM,IAAI,CAACiH,UAAU,CAAC1D,GAAAA,CAAAA;AACnC,QAAA,IAAI,CAACvD,IAAAA,EAAM;YACP,OAAO;gBACH2D,OAAAA,EAAS,KAAA;gBACT1D,MAAAA,EAAQ;oBACJiF,qBAAAA,CAAsB;AAClB5E,wBAAAA,IAAAA,EAAM2E,gBAAgBmC,YAAY;wBAClCvH,OAAAA,EAAS,yCAAA;AACTiE,wBAAAA,IAAAA,EAAMP,IAAIO;AACd,qBAAA;AACH;AACL,aAAA;AACJ,QAAA;AAEA,QAAA,IAAI,CAACuD,QAAQ,CAAC/D,MAAAA,CAAOgE,KAAK,CAAA;QAE1B,MAAMC,MAAAA,GAASC,KAAAA,CAASlE,MAAAA,CAAOgE,KAAK,CAAA;QAEpC,OAAO;AAAE3D,YAAAA,OAAAA,EAASzB,wBAAAA,CAAyBqF,MAAAA,CAAOvH,IAAAA,CAAAA,EAAYsD,MAAAA,CAAOlB,MAAM;AAAE,SAAA;AACjF,IAAA;AAEUiF,IAAAA,QAAAA,CACNC,KAA0B,EAC5B;QACE,IAAIvG,KAAAA,CAAMC,OAAO,CAACsG,KAAAA,CAAAA,EAAQ;YACtB,KAAK,MAAMG,WAAWH,KAAAA,CAAO;gBACzB,IAAI,CAACD,QAAQ,CAACI,OAAAA,CAAAA;AAClB,YAAA;AAEA,YAAA;AACJ,QAAA;AAEA,QAAA,IAAIC,SAASJ,KAAAA,CAAAA,EAAQ;YACjB,MAAMpE,IAAAA,GAAOC,MAAAA,CAAOD,IAAI,CAACoE,KAAAA,CAAAA;YACzB,KAAK,MAAMlE,OAAOF,IAAAA,CAAM;gBACpB,MAAMoB,KAAAA,GAAQgD,KAAK,CAAClE,GAAAA,CAAI;AAExB,gBAAA,IAAIsE,QAAAA,CAASpD,KAAAA,CAAAA,IAAUvD,KAAAA,CAAMC,OAAO,CAACsD,KAAAA,CAAAA,EAAQ;oBACzC,IAAI,CAAC+C,QAAQ,CAAC/C,KAAAA,CAAAA;AACd,oBAAA;AACJ,gBAAA;AAEA,gBAAA,IACIlB,GAAAA,KAAQ,QAAA,IACR,OAAOkB,KAAAA,KAAU,QAAA,EACnB;oBACE,MAAMqD,SAAAA,GAAYrD,KAAAA,CAAMsD,KAAK,CAAC,sBAAA,CAAA;AAC9B,oBAAA,IAAID,SAAAA,EAAW;wBACXL,KAAK,CAAClE,GAAAA,CAAI,GAAG,IAAIyE,MAAAA,CAAOF,SAAS,CAAC,CAAA,CAAE,EAAEA,SAAS,CAAC,CAAA,CAAE,CAAA;AACtD,oBAAA;AACJ,gBAAA;AACJ,YAAA;AACJ,QAAA;AACJ,IAAA;AACJ;;ACrFO,MAAMG,6BAAAA,CAAAA;IACCd,SAAAA;IAEAe,mBAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACf,SAAS,GAAG,IAAI3B,6BAAAA,EAAAA;QACrB,IAAI,CAAC0C,mBAAmB,GAAG,IAAIhB,yBAAAA,EAAAA;AACnC,IAAA;AAEA,IAAA,MAAM1D,QAAAA,CAASiB,KAA0B,EAAEf,GAA4B,EAAmC;;AAEtG,QAAA,MAAMD,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;AAExC,QAAA,MAAMtE,OAAO,MAAM,IAAI,CAAC+H,mBAAmB,CAACd,UAAU,CAAC1D,GAAAA,CAAAA;AACvD,QAAA,IAAI,CAACvD,IAAAA,EAAM;YACP,OAAO;gBACH2D,OAAAA,EAAS,KAAA;gBACT1D,MAAAA,EAAQ;oBACJiF,qBAAAA,CAAsB;AAClB5E,wBAAAA,IAAAA,EAAM2E,gBAAgBmC,YAAY;wBAClCvH,OAAAA,EAAS,yCAAA;AACTiE,wBAAAA,IAAAA,EAAMP,IAAIO;AACd,qBAAA;AACH;AACL,aAAA;AACJ,QAAA;AAEA,QAAA,MAAMkE,aAAaC,aAAAA,CAAcjI,IAAAA,CAAAA;QACjC,MAAMkD,IAAAA,GAAOC,MAAAA,CAAOD,IAAI,CAAC8E,UAAAA,CAAAA;AAEzB,QAAA,MAAM/H,SAAyB,EAAE;QACjC,KAAK,MAAMmD,OAAOF,IAAAA,CAAM;AACpB,YAAA,MAAMgF,KAAAA,GAAQ5E,MAAAA,CAAO1C,KAAK,CAACuH,OAAO,CAAC/E,GAAAA,CAAAA;YACnC,IAAI8E,KAAAA,KAAU,EAAC,EAAG;gBACdjI,MAAAA,CAAOC,IAAI,CAACgF,qBAAAA,CAAsB;AAC9B5E,oBAAAA,IAAAA,EAAM2E,gBAAgBmD,iBAAiB;AACvCvI,oBAAAA,OAAAA,EAAS,CAAC,cAAc,EAAEuD,GAAAA,CAAI,gBAAgB,CAAC;oBAC/CU,IAAAA,EAAM;AAAIP,wBAAAA,GAAAA,GAAAA,CAAIO,IAAI;AAAEV,wBAAAA;AAAI;AAC5B,iBAAA,CAAA,CAAA;AACJ,YAAA;AACJ,QAAA;QAEA,OAAO;AACHO,YAAAA,OAAAA,EAASzB,yBAAyBjC,MAAAA,CAAOwD,MAAM,KAAK,CAAA,EAAGH,OAAOlB,MAAM,CAAA;AACpEnC,YAAAA;AACJ,SAAA;AACJ,IAAA;AACJ;;AClDO,MAAMoI,wBAAAA,SAAiC/C,SAAAA,CAAAA;IAC1CC,UAAAA,GAAa;AACT,QAAA,KAAK,CAACA,UAAAA,EAAAA;AAEN,QAAA,IAAI,CAACC,KAAK,CACN,qBACAC,eAAAA,CACIC,CAAAA,CAAE4C,IAAI,CAACC,gBAAAA,CAAAA,CACFvC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;QAIrB,IAAI,CAACX,KAAK,CACN,UAAA,EACAC,eAAAA,CACIC,EAAEC,KAAK,CAACD,CAAAA,CAAEoB,WAAW,CAAC;AAAEvE,YAAAA,IAAAA,EAAMmD,CAAAA,CAAEE,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA;AAAG,SAAA,CAAA,CAAA,CAAA,CAAA;AAIxD,QAAA,IAAI,CAACL,KAAK,CACN,UACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGzB,IAAA;AACJ;;AC7BO,MAAMqC,wBAAAA,CAAAA;IACCxB,SAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACA,SAAS,GAAG,IAAIqB,wBAAAA,EAAAA;AACzB,IAAA;AAEA,IAAA,MAAMhF,QAAAA,CAASiB,KAA0B,EAAEf,GAA4B,EAAmC;;AAEtG,QAAA,MAAMD,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;AAExC,QAAA,IAAImE,KAAAA,GAAQ,CAAA;AAEZ,QAAA,MAAMC,iBAAAA,GAAoBpF,MAAAA,CAAOoF,iBAAiB,IAC9CH,iBAAiBI,SAAS;AAE9B,QAAA,MAAMC,MAAAA,GAAS,IAAI/F,YAAAA,CAAaU,GAAAA,CAAIT,UAAU,CAAA;AAC9C,QAAA,MAAM7C,SAAyB,EAAE;QAEjC,IAAK,IAAI4I,IAAI,CAAA,EAAGA,CAAAA,GAAIvF,OAAOwF,QAAQ,CAACrF,MAAM,EAAEoF,CAAAA,EAAAA,CAAK;AAC7C,YAAA,MAAME,WAAAA,GAAczF,MAAAA,CAAOwF,QAAQ,CAACD,CAAAA,CAAE;AACtC,YAAA,MAAM/E,IAAAA,GAAO;mBAAKP,GAAAA,CAAIO,IAAI,IAAI,EAAE;AAAGiF,gBAAAA,WAAAA,CAAYxG;AAAK,aAAA;AAEpD,YAAA,MAAMJ,OAAAA,GAAU,MAAMyG,MAAAA,CAAOvF,QAAQ,CAAC0F,WAAAA,EAAa;AAC/C,gBAAA,GAAGxF,GAAG;AACNO,gBAAAA;AACJ,aAAA,CAAA;YAEA,IAAI3B,OAAAA,CAAQwB,OAAO,EAAE;gBACjB,IAAI+E,iBAAAA,KAAsBH,gBAAAA,CAAiBS,WAAW,EAAE;oBACpD,OAAO;wBACHrF,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM,CAAA;AACrDnC,wBAAAA,MAAAA,EAAQ;AACZ,qBAAA;AACJ,gBAAA;AAEAwI,gBAAAA,KAAAA,EAAAA;YACJ,CAAA,MAAO;gBACH,IAAItG,OAAAA,CAAQlC,MAAM,EAAE;oBAChBA,MAAAA,CAAOC,IAAI,CAACkF,gBAAAA,CAAiB;AACzBvF,wBAAAA,OAAAA,EAAS,CAAC,+BAA+B,EAAEkJ,YAAYxG,IAAI,CAAC,OAAO,CAAC;wBACpEtC,MAAAA,EAAQkC,OAAAA,CAAQlC,MAAM,IAAI,EAAE;AAC5B6D,wBAAAA;AACJ,qBAAA,CAAA,CAAA;AACJ,gBAAA;gBAEA,IAAI4E,iBAAAA,KAAsBH,gBAAAA,CAAiBI,SAAS,EAAE;oBAClD,OAAO;wBACHhF,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM,CAAA;wBACtDnC,MAAAA,EAAQ;4BACJmF,gBAAAA,CAAiB;AACbvF,gCAAAA,OAAAA,EAAS,CAAC,2CAA2C,EAAE0I,iBAAiBI,SAAS,CAAC,CAAC,CAAC;AACpF1I,gCAAAA,MAAAA;AACA6D,gCAAAA,IAAAA,EAAMP,IAAIO;AACd,6BAAA;AACH;AACL,qBAAA;AACJ,gBAAA;AAEA2E,gBAAAA,KAAAA,EAAAA;AACJ,YAAA;AACJ,QAAA;AAEA,QAAA,IAAIA,QAAQ,CAAA,EAAG;YACX,OAAO;gBAAE9E,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,aAAA;AACpE,QAAA;QAEA,OAAO;YACHuB,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM,CAAA;YACtDnC,MAAAA,EAAQ;gBACJmF,gBAAAA,CAAiB;AACbvF,oBAAAA,OAAAA,EAAS,CAAC,2CAA2C,EAAE0I,iBAAiBU,SAAS,CAAC,CAAC,CAAC;AACpFhJ,oBAAAA,MAAAA,EAAQA,UAAU,EAAE;AACpB6D,oBAAAA,IAAAA,EAAMP,IAAIO;AACd,iBAAA;AACH;AACL,SAAA;AACJ,IAAA;AACJ;;AClFO,SAASoF,kBACZtH,KAAqB,EAAA;AAErB,IAAA,OAAOA,KAAAA,CAAMW,IAAI,KAAK8D,iBAAAA,CAAkB8C,SAAS;AACrD;;ACHO,MAAMC,mBAAAA,SAA4B9D,SAAAA,CAAAA;IACrCC,UAAAA,GAAa;AACT,QAAA,KAAK,CAACA,UAAAA,EAAAA;AAEN,QAAA,IAAI,CAACC,KAAK,CAAC,OAAA,EAASC,eAAAA,CAChBC,CAAAA,CAAE2D,IAAI,EAAA,CACDrD,EAAE,CAACN,CAAAA,CAAE4D,GAAG,CAACD,IAAI,EAAA,CAAA,CACbrD,EAAE,CAACN,CAAAA,CAAE6D,MAAM,EAAA,CAAA,CACXvD,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAEjB,QAAA,IAAI,CAACX,KAAK,CAAC,KAAA,EAAOC,eAAAA,CACdC,CAAAA,CAAE2D,IAAI,EAAA,CACDrD,EAAE,CAACN,CAAAA,CAAE4D,GAAG,CAACD,IAAI,EAAA,CAAA,CACbrD,EAAE,CAACN,CAAAA,CAAE6D,MAAM,EAAA,CAAA,CACXvD,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGjB,QAAA,IAAI,CAACX,KAAK,CAAC,UAAUC,eAAAA,CACjBC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEQ,SAAS,EAAA,CAAA,CACdF,EAAE,CAACN,CAAAA,CAAEO,IAAI,IACTE,QAAQ,EAAA,CAAA,CAAA;AAErB,IAAA;AACJ;;AC5BA,SAASqD,gBAAc5H,KAAW,EAAA;IAC9B,OAAO,IAAI6H,KAAK7H,KAAAA,CAAM8H,WAAW,IAAI9H,KAAAA,CAAM+H,QAAQ,EAAA,EAAI/H,KAAAA,CAAMgI,OAAO,EAAA,CAAA;AACxE;AAEA,SAASC,SAAOjI,KAA6B,EAAA;IACzC,IAAI,OAAOA,UAAU,QAAA,EAAU;AAC3B,QAAA,OAAO,IAAI6H,IAAAA,CAAK7H,KAAAA,CAAAA;AACpB,IAAA;IAEA,IAAI,OAAOA,UAAU,QAAA,EAAU;AAC3B,QAAA,OAAO,IAAI6H,IAAAA,CAAK7H,KAAAA,CAAAA;AACpB,IAAA;IAEA,OAAOA,KAAAA;AACX;AAEO,MAAMkI,mBAAAA,CAAAA;IACC9C,SAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACA,SAAS,GAAG,IAAIoC,mBAAAA,EAAAA;AACzB,IAAA;AAEA,IAAA,MAAM/F,QAAAA,CAASiB,KAA0B,EAAEf,GAA4B,EAAmC;;AAEtG,QAAA,MAAMD,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;QAExC,IAAIyF,GAAAA;AAEJ,QAAA,IAAIxG,IAAIvD,IAAI,CAAC0E,GAAG,CAAC2B,iBAAAA,CAAkB2D,IAAI,CAAA,EAAG;AACtC,YAAA,IAAIzG,IAAIvD,IAAI,CAAC6E,WAAW,CAACwB,iBAAAA,CAAkB2D,IAAI,CAAA,EAAG;AAC9CD,gBAAAA,GAAAA,GAAMxG,IAAIvD,IAAI,CAACwE,GAAG,CAAO6B,kBAAkB2D,IAAI,CAAA;YACnD,CAAA,MAAO;;gBAEHD,GAAAA,GAAMP,eAAAA,CAAcK,SAAOtG,GAAAA,CAAIvD,IAAI,CAACwE,GAAG,CAAC6B,kBAAkB2D,IAAI,CAAA,CAAA,CAAA;AAE9DzG,gBAAAA,GAAAA,CAAIvD,IAAI,CAACqE,GAAG,CAACgC,iBAAAA,CAAkB2D,IAAI,EAAED,GAAAA,CAAAA;AACrCxG,gBAAAA,GAAAA,CAAIvD,IAAI,CAAC2E,YAAY,CAAC0B,kBAAkB2D,IAAI,CAAA;AAChD,YAAA;QACJ,CAAA,MAAO;AACHD,YAAAA,GAAAA,GAAMP,gBAAc,IAAIC,IAAAA,EAAAA,CAAAA;AAC5B,QAAA;QAEA,IAAInG,MAAAA,CAAO2G,KAAK,EAAE;AACd,YAAA,MAAMA,KAAAA,GAAQT,eAAAA,CAAcK,QAAAA,CAAOvG,MAAAA,CAAO2G,KAAK,CAAA,CAAA;AAC/C,YAAA,IAAIF,MAAME,KAAAA,EAAO;gBACb,OAAO;oBAAEtG,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,iBAAA;AACrE,YAAA;AACJ,QAAA;QAEA,IAAIkB,MAAAA,CAAO4G,GAAG,EAAE;AACZ,YAAA,MAAMA,GAAAA,GAAMV,eAAAA,CAAcK,QAAAA,CAAOvG,MAAAA,CAAO4G,GAAG,CAAA,CAAA;AAC3C,YAAA,IAAIH,MAAMG,GAAAA,EAAK;gBACX,OAAO;oBAAEvG,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,iBAAA;AACrE,YAAA;AACJ,QAAA;QAEA,OAAO;YAAEuB,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,SAAA;AACpE,IAAA;AACJ;;AC1DO,MAAM+H,2BAAAA,SAAoC7E,SAAAA,CAAAA;IAC7CC,UAAAA,GAAa;AACT,QAAA,KAAK,CAACA,UAAAA,EAAAA;AAEN,QAAA,IAAI,CAACC,KAAK,CACN,MAAA,EACAC,eAAAA,CACIC,CAAAA,CAAEE,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAA,CAAA;AAI9B,QAAA,IAAI,CAACN,KAAK,CACN,IAAA,EACAC,eAAAA,CACIC,EAAE0E,IAAI,EAAA,CAAA,CAAA;AAId,QAAA,IAAI,CAAC5E,KAAK,CACN,YACAC,eAAAA,CACIC,CAAAA,CAAE0E,IAAI,EAAA,CACDpE,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAIrB,QAAA,IAAI,CAACX,KAAK,CACN,WACAC,eAAAA,CACIC,CAAAA,CAAE0E,IAAI,EAAA,CACDpE,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;QAIrB,IAAI,CAACX,KAAK,CACN,WAAA,EACAC,eAAAA,CACIC,EAAEE,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CACjBE,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,EAAA,CAAA,CACdC,QAAQ,EAAA,CAAA,CAAA;AAGzB,IAAA;AACJ;;ACjDO,MAAMkE,uBAAAA,SAAgC/E,SAAAA,CAAAA;IAC/BC,UAAAA,GAAa;QACnB,IAAI,CAACC,KAAK,CACN,OAAA,EACAC,gBACIC,CAAAA,CAAEC,KAAK,CAACD,CAAAA,CAAEE,MAAM,IACXI,EAAE,CAACN,EAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,EAAA,CAAA,CACdC,QAAQ,EAAA,CAAA,CAAA;AAIrB,QAAA,IAAI,CAACX,KAAK,CACN,UACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGzB,IAAA;AACJ;;ACpBO,MAAMmE,uBAAAA,CAAAA;IACCtD,SAAAA;IAEAuD,aAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACvD,SAAS,GAAG,IAAIqD,uBAAAA,EAAAA;QACrB,IAAI,CAACE,aAAa,GAAG,IAAIJ,2BAAAA,EAAAA;AAC7B,IAAA;IAEA,MAAMlD,UAAAA,CAAW1D,GAA4B,EAAuC;AAChF,QAAA,IAAI,CAACA,GAAAA,CAAIvD,IAAI,CAAC0E,GAAG,CAAC,UAAA,CAAA,EAAa;YAC3B,OAAO,IAAA;AACX,QAAA;AAEA,QAAA,IAAInB,GAAAA,CAAIvD,IAAI,CAAC6E,WAAW,CAAC,UAAA,CAAA,EAAa;AAClC,YAAA,OAAOtB,GAAAA,CAAIvD,IAAI,CAACwE,GAAG,CAAqB,UAAA,CAAA;AAC5C,QAAA;AAEA,QAAA,MAAMxE,IAAAA,GAAO,MAAM,IAAI,CAACuK,aAAa,CAACpD,GAAG,CAAC5D,GAAAA,CAAIvD,IAAI,CAACwE,GAAG,CAAC,UAAA,CAAA,CAAA;AAEvDjB,QAAAA,GAAAA,CAAIvD,IAAI,CAACqE,GAAG,CAAC,UAAA,EAAYrE,IAAAA,CAAAA;QACzBuD,GAAAA,CAAIvD,IAAI,CAAC2E,YAAY,CAAC,UAAA,CAAA;QAEtB,OAAO3E,IAAAA;AACX,IAAA;AAEA,IAAA,MAAMqD,QAAAA,CAASiB,KAA0B,EAAEf,GAA4B,EAAmC;;AAEtG,QAAA,MAAMD,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;AAExC,QAAA,MAAMtE,IAAAA,GAAO,MAAM,IAAI,CAACiH,UAAU,CAAC1D,GAAAA,CAAAA;AACnC,QAAA,IAAI,CAACvD,IAAAA,EAAM;YACP,OAAO;gBACH2D,OAAAA,EAAS,KAAA;gBACT1D,MAAAA,EAAQ;oBACJiF,qBAAAA,CAAsB;AAClB5E,wBAAAA,IAAAA,EAAM2E,gBAAgBmC,YAAY;wBAClCvH,OAAAA,EAAS,uCAAA;AACTiE,wBAAAA,IAAAA,EAAMP,IAAIO;AACd,qBAAA;AACH;AACL,aAAA;AACJ,QAAA;QAEA,IAAI,CAACR,OAAOkH,KAAK,IAAIlH,OAAOkH,KAAK,CAAC/G,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;gBAAEE,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,aAAA;AACpE,QAAA;AAEA,QAAA,MAAMqI,cAAcnH,MAAAA,CAAOkH,KAAK,CAAC9G,QAAQ,CAAC1D,KAAKuC,IAAI,CAAA;AACnD,QAAA,IAAIkI,WAAAA,EAAa;YACb,OAAO;gBAAE9G,OAAAA,EAASzB,wBAAAA,CAAyBuI,WAAAA,EAAanH,MAAAA,CAAOlB,MAAM;AAAE,aAAA;AAC3E,QAAA;QAEA,OAAO;YACHuB,OAAAA,EAASzB,wBAAAA,CAAyBuI,WAAAA,EAAanH,MAAAA,CAAOlB,MAAM,CAAA;YAC5DnC,MAAAA,EAAQ;gBACJiF,qBAAAA,CAAsB;AAClB5E,oBAAAA,IAAAA,EAAM2E,gBAAgBmD,iBAAiB;AACvCvI,oBAAAA,OAAAA,EAAS,CAAC,SAAS,EAAEG,KAAKuC,IAAI,CAAC,2CAA2C,CAAC;AAC3EuB,oBAAAA,IAAAA,EAAMP,IAAIO;AACd,iBAAA;AACH;AACL,SAAA;AACJ,IAAA;AACJ;;ACrEO,MAAM4G,gCAAAA,SAAyCpF,SAAAA,CAAAA;AACxCC,IAAAA,UAAAA,GAAa,CACvB;AACJ;;ACFO,MAAMoF,gCAAAA,CAAAA;IACC3D,SAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACA,SAAS,GAAG,IAAI0D,gCAAAA,EAAAA;AACzB,IAAA;IAEA,MAAMrH,QAAAA,CAASiB,KAA0B,EAAmC;AACxE,QAAA,MAAMhB,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;;QAGxC,OAAO;YAAEX,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,SAAA;AACpE,IAAA;AACJ;;ACXO,MAAMwI,yBAAAA,SAAkCtF,SAAAA,CAAAA;IAC3CC,UAAAA,GAAa;AACT,QAAA,KAAK,CAACA,UAAAA,EAAAA;AAEN,QAAA,IAAI,CAACC,KAAK,CACN,qBACAC,eAAAA,CACIC,CAAAA,CAAE4C,IAAI,CAACC,gBAAAA,CAAAA,CACFvC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAIrB,QAAA,IAAI,CAACX,KAAK,CACN,gBAAA,EACAC,gBACIC,CAAAA,CAAEE,MAAM,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJG,EAAE,CAACN,EAAEC,KAAK,CAACD,CAAAA,CAAEE,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAA,CAAA,CAC1BG,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGrB,QAAA,IAAI,CAACX,KAAK,CACN,yBACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGrB,QAAA,IAAI,CAACX,KAAK,CACN,4BACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAIrB,QAAA,IAAI,CAACX,KAAK,CACN,6BACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAIrB,QAAA,IAAI,CAACX,KAAK,CACN,UACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGzB,IAAA;AACJ;;AC7DO,MAAM0E,yBAAAA,CAAAA;IACC7D,SAAAA;IAEA8D,iBAAAA;IAEA/C,mBAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACf,SAAS,GAAG,IAAI4D,yBAAAA,EAAAA;QACrB,IAAI,CAACE,iBAAiB,GAAG,IAAIR,uBAAAA,EAAAA;QAC7B,IAAI,CAACvC,mBAAmB,GAAG,IAAIhB,yBAAAA,EAAAA;AACnC,IAAA;AAEA,IAAA,MAAM1D,QAAAA,CAASiB,KAA0B,EAAEf,GAA4B,EAAmC;;AAEtG,QAAA,MAAMD,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;AAExC,QAAA,MAAMyG,WAAW,MAAM,IAAI,CAACD,iBAAiB,CAAC7D,UAAU,CAAC1D,GAAAA,CAAAA;AACzD,QAAA,IAAI,CAACwH,QAAAA,EAAU;YACX,OAAO;gBACHpH,OAAAA,EAAS,KAAA;gBACT1D,MAAAA,EAAQ;oBACJiF,qBAAAA,CAAsB;AAClB5E,wBAAAA,IAAAA,EAAM2E,gBAAgBmC,YAAY;wBAClCvH,OAAAA,EAAS,uCAAA;AACTiE,wBAAAA,IAAAA,EAAMP,IAAIO;AACd,qBAAA;AACH;AACL,aAAA;AACJ,QAAA;AAEA,QAAA,MAAMkE,aAAa,MAAM,IAAI,CAACD,mBAAmB,CAACd,UAAU,CAAC1D,GAAAA,CAAAA;AAC7D,QAAA,IAAI,CAACyE,UAAAA,EAAY;YACb,OAAO;gBACHrE,OAAAA,EAAS,KAAA;gBACT1D,MAAAA,EAAQ;oBACJiF,qBAAAA,CAAsB;AAClB5E,wBAAAA,IAAAA,EAAM2E,gBAAgBmC,YAAY;wBAClCvH,OAAAA,EAAS,yCAAA;AACTiE,wBAAAA,IAAAA,EAAMP,IAAIO;AACd,qBAAA;AACH;AACL,aAAA;AACJ,QAAA;QAEA,MAAMkH,sBAAAA,GAAyB1H,MAAAA,CAAO2H,yBAAyB,IAAI,IAAA;AACnE,QAAA,IACID,0BACAD,QAAAA,CAASG,SAAS,IAClBH,QAAAA,CAASG,SAAS,KAAK,QAAA,EACzB;YACE,OAAO;gBAAEvH,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,aAAA;AACpE,QAAA;QAEA,IAAIc,IAAAA;QACJ,IAAII,MAAAA,CAAO6H,cAAc,EAAE;AACvB,YAAA,IAAIpK,KAAAA,CAAMC,OAAO,CAACsC,MAAAA,CAAO6H,cAAc,CAAA,EAAG;AACtCjI,gBAAAA,IAAAA,GAAOI,OAAO6H,cAAc;YAChC,CAAA,MAAO;gBACHjI,IAAAA,GAAO;AAACI,oBAAAA,MAAAA,CAAO6H;AAAe,iBAAA;AAClC,YAAA;QACJ,CAAA,MAAO;YACHjI,IAAAA,GAAO;AACH,gBAAA,UAAA;AACA,gBAAA,YAAA;AACA,gBAAA,SAAA;AACA,gBAAA;AACH,aAAA;YAEDI,MAAAA,CAAOoF,iBAAiB,GAAGH,gBAAAA,CAAiBU,SAAS;AACzD,QAAA;QAEA,MAAMmC,qBAAAA,GAAwB9H,MAAAA,CAAO8H,qBAAqB,IAAI,IAAA;AAC9D,QAAA,IAAI,CAACA,qBAAAA,EAAuB;YACxB,MAAMC,YAAAA,GAAelI,MAAAA,CAAOD,IAAI,CAAC8E,UAAAA,CAAAA;AACjC,YAAA,MAAMsD,YAAuB,EAAE;YAC/B,KAAK,MAAMC,eAAeF,YAAAA,CAAc;AACpC,gBAAA,IAAIG,QAAAA,GAAqB,KAAA;gBAEzB,KAAK,MAAMpI,OAAOF,IAAAA,CAAM;AACpB,oBAAA,IACIqI,WAAAA,KAAgBnI,GAAAA,IAChBmI,WAAAA,CAAY7H,QAAQ,CAACN,GAAAA,CAAAA,EACvB;wBACEoI,QAAAA,GAAW,IAAA;AACX,wBAAA;AACJ,oBAAA;AACJ,gBAAA;AAEA,gBAAA,IAAIA,QAAAA,EAAU;AACVF,oBAAAA,SAAAA,CAAUpL,IAAI,CAACqL,WAAAA,CAAAA;AACnB,gBAAA;AACJ,YAAA;YAEA,IAAID,SAAAA,CAAU7H,MAAM,GAAG,CAAA,EAAG;AACtBP,gBAAAA,IAAAA,CAAKhD,IAAI,CAAA,GAAIoL,SAAAA,CAAAA;AACjB,YAAA;AACJ,QAAA;AAEA,QAAA,IAAI7C,KAAAA,GAAQ,CAAA;AACZ,QAAA,IAAIgD,SAAAA,GAAY,KAAA;QAEhB,KAAK,MAAMrI,OAAOF,IAAAA,CAAM;YACpB,IAAI,CAACwI,cAAAA,CAAe1D,UAAAA,EAAY5E,GAAAA,CAAAA,EAAM;AAClC,gBAAA;AACJ,YAAA;YAEAqI,SAAAA,GAAY,IAAA;AAEZ,YAAA,IAAItJ,OAAAA,GAAoB,KAAA;YAExB,MAAMwJ,cAAAA,GAAiB3D,UAAU,CAAC5E,GAAAA,CAAI;AAEtC,YAAA,IACIuI,cAAAA,KAAmB,IAAA,IACnBrI,MAAAA,CAAOsI,wBAAwB,EACjC;gBACEzJ,OAAAA,GAAU,IAAA;YACd,CAAA,MAAO,IACHwJ,mBAAmBZ,QAAAA,CAASpJ,OAAO,IACnCgK,cAAAA,KAAmBZ,QAAAA,CAASG,SAAS,EACvC;gBACE/I,OAAAA,GAAU,IAAA;AACd,YAAA;AAEA,YAAA,IAAIA,OAAAA,EAAS;AACT,gBAAA,IAAImB,MAAAA,CAAOoF,iBAAiB,KAAKH,gBAAAA,CAAiBS,WAAW,EAAE;oBAC3D,OAAO;wBAAErF,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,qBAAA;AACpE,gBAAA;AAEAqG,gBAAAA,KAAAA,EAAAA;YACJ,CAAA,MAAO;AACH,gBAAA,IAAInF,MAAAA,CAAOoF,iBAAiB,KAAKH,gBAAAA,CAAiBI,SAAS,EAAE;oBACzD,OAAO;wBAAEhF,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,qBAAA;AACrE,gBAAA;AAEAqG,gBAAAA,KAAAA,EAAAA;AACJ,YAAA;AACJ,QAAA;AAEA,QAAA,IAAI,CAACgD,SAAAA,EAAW;YACZ,OAAO;gBAAE9H,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,aAAA;AACpE,QAAA;QAEA,OAAO;AAAEuB,YAAAA,OAAAA,EAASzB,wBAAAA,CAAyBuG,KAAAA,GAAQ,CAAA,EAAGnF,MAAAA,CAAOlB,MAAM;AAAE,SAAA;AACzE,IAAA;AACJ;;AClKA;;;;;IAOO,IAAKyJ,kBAAAA,iBAAAA,SAAAA,kBAAAA,EAAAA;;;;;AAAAA,IAAAA,OAAAA,kBAAAA;AAKX,CAAA,CAAA,EAAA;;ACHM,SAASC,uBACZC,QAAgB,EAAA;IAEhB,OAAOA,QAAAA,KAAaF,kBAAAA,CAAmBG,MAAM,IACzCD,QAAAA,KAAaF,mBAAmBI,OAAO,IACvCF,QAAAA,KAAaF,kBAAAA,CAAmBK,MAAM;AAC9C;AAEO,SAASC,wBACZJ,QAAgB,EAAA;AAEhB,IAAA,OAAOA,aAAaF,kBAAAA,CAAmBI,OAAO,IAC9CF,QAAAA,KAAaF,mBAAmBK,MAAM;AAC1C;AAEO,SAASE,uBACZL,QAAgB,EAAA;IAEhB,OAAOA,QAAAA,KAAaF,mBAAmBK,MAAM;AACjD;;ACfO,MAAMG,mBAAAA,SAA4B/G,SAAAA,CAAAA;IACrCC,UAAAA,GAAa;AACT,QAAA,KAAK,CAACA,UAAAA,EAAAA;QAEN,IAAI,CAACC,KAAK,CAAC,aAAA,EAAeC,eAAAA,CACtBC,EAAE6D,MAAM,EAAA,CACH1D,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CACXE,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,EAAA,CAAA,CACdC,QAAQ,EAAA,CAAA,CAAA;QAEjB,IAAI,CAACX,KAAK,CAAC,cAAA,EAAgBC,eAAAA,CACvBC,EAAE6D,MAAM,EAAA,CACH1D,GAAG,CAAC,CAAA,CAAA,CACJC,GAAG,CAAC,EAAA,CAAA,CACJE,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,EAAA,CAAA,CACdC,QAAQ,EAAA,CAAA,CAAA;QAEjB,IAAI,CAACX,KAAK,CAAC,aAAA,EAAeC,eAAAA,CACtBC,EAAE6D,MAAM,EAAA,CACH1D,GAAG,CAAC,CAAA,CAAA,CACJC,GAAG,CAAC,GAAA,CAAA,CACJE,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,EAAA,CAAA,CACdC,QAAQ,EAAA,CAAA,CAAA;AAGjB,QAAA,IAAI,CAACX,KAAK,CAAC,OAAA,EAASC,eAAAA,CAChBC,EAAE2D,IAAI,EAAA,CACDrD,EAAE,CAACN,EAAE4D,GAAG,CAACgD,QAAQ,EAAA,CAAA,CACjBtG,EAAE,CAACN,CAAAA,CAAE4D,GAAG,CAACiD,IAAI,EAAA,CAAA,CACbvG,EAAE,CAACN,CAAAA,CAAE6D,MAAM,EAAA,CAAA,CACXvD,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAEjB,QAAA,IAAI,CAACX,KAAK,CAAC,KAAA,EAAOC,eAAAA,CACdC,EAAE2D,IAAI,EAAA,CACDrD,EAAE,CAACN,EAAE4D,GAAG,CAACgD,QAAQ,EAAA,CAAA,CACjBtG,EAAE,CAACN,CAAAA,CAAE4D,GAAG,CAACiD,IAAI,EAAA,CAAA,CACbvG,EAAE,CAACN,CAAAA,CAAE6D,MAAM,EAAA,CAAA,CACXvD,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAGjB,QAAA,IAAI,CAACX,KAAK,CACN,YACAC,eAAAA,CACIC,CAAAA,CAAE4C,IAAI,CAACuD,kBAAAA,CAAAA,CACF7F,EAAE,CAACN,CAAAA,CAAEO,IAAI,EAAA,CAAA,CACTD,EAAE,CAACN,CAAAA,CAAEQ,SAAS,IACdC,QAAQ,EAAA,CAAA,CAAA;AAIrB,QAAA,IAAI,CAACX,KAAK,CACN,UACAC,eAAAA,CACIC,CAAAA,CAAEK,OAAO,EAAA,CACJC,EAAE,CAACN,CAAAA,CAAEQ,SAAS,EAAA,CAAA,CACdF,EAAE,CAACN,CAAAA,CAAEO,IAAI,IACTE,QAAQ,EAAA,CAAA,CAAA;AAGzB,IAAA;AACJ;;ACnEA,MAAMqG,SAAAA,GAAY,0CAAA;AAElB,SAAShD,aAAAA,CAAc5H,KAAW,EAAE6K,OAAc,EAAA;AAC9C,IAAA,MAAMpD,IAAAA,GAAOoD,OAAAA,GAAU,IAAIhD,IAAAA,CAAKgD,WAAW,IAAIhD,IAAAA,EAAAA;AAC/CJ,IAAAA,IAAAA,CAAKqD,QAAQ,CAAC9K,KAAAA,CAAM+K,QAAQ,EAAA,EAAI/K,MAAMgL,UAAU,EAAA,CAAA;IAEhD,OAAOvD,IAAAA;AACX;AAEA,SAASQ,MAAAA,CACLjI,KAA6B,EAC7B6K,OAAc,EAAA;IAEd,IAAI,OAAO7K,UAAU,QAAA,EAAU;QAC3B,IAAI4K,SAAAA,CAAUK,IAAI,CAACjL,KAAAA,CAAAA,EAAQ;YACvB,MAAM,CAACkL,YAAYC,YAAAA,CAAa,GAAGnL,MAAMoL,KAAK,CAAC,GAAA,CAAA,CAAKC,GAAG,CAACC,MAAAA,CAAAA;AACxD,YAAA,MAAM7D,IAAAA,GAAOoD,OAAAA,GAAU,IAAIhD,IAAAA,CAAKgD,WAAW,IAAIhD,IAAAA,EAAAA;YAC/CJ,IAAAA,CAAKqD,QAAQ,CAACI,UAAAA,EAAYC,YAAAA,CAAAA;YAC1B,OAAO1D,IAAAA;AACX,QAAA;AAEA,QAAA,OAAO,IAAII,IAAAA,CAAK7H,KAAAA,CAAAA;AACpB,IAAA;IAEA,IAAI,OAAOA,UAAU,QAAA,EAAU;AAC3B,QAAA,OAAO,IAAI6H,IAAAA,CAAK7H,KAAAA,CAAAA;AACpB,IAAA;IAEA,OAAOA,KAAAA;AACX;AAEO,MAAMuL,mBAAAA,CAAAA;IACCnG,SAAAA;IAEV,WAAA,EAAc;QACV,IAAI,CAACA,SAAS,GAAG,IAAIqF,mBAAAA,EAAAA;AACzB,IAAA;AAEA,IAAA,MAAMhJ,QAAAA,CAASiB,KAA0B,EAAEf,GAA4B,EAAmC;;AAEtG,QAAA,MAAMD,SAAS,MAAM,IAAI,CAAC0D,SAAS,CAACG,GAAG,CAAC7C,KAAAA,CAAAA;QAExC,IAAIyF,GAAAA;AAEJ,QAAA,IAAIxG,IAAIvD,IAAI,CAAC0E,GAAG,CAAC2B,iBAAAA,CAAkB+G,IAAI,CAAA,EAAG;AACtC,YAAA,IAAI7J,IAAIvD,IAAI,CAAC6E,WAAW,CAACwB,iBAAAA,CAAkB+G,IAAI,CAAA,EAAG;AAC9CrD,gBAAAA,GAAAA,GAAMxG,IAAIvD,IAAI,CAACwE,GAAG,CAAO6B,kBAAkB+G,IAAI,CAAA;YACnD,CAAA,MAAO;;AAEHrD,gBAAAA,GAAAA,GAAMF,OAAOtG,GAAAA,CAAIvD,IAAI,CAACwE,GAAG,CAAC6B,kBAAkB+G,IAAI,CAAA,CAAA;AAEhD7J,gBAAAA,GAAAA,CAAIvD,IAAI,CAACqE,GAAG,CAACgC,iBAAAA,CAAkB+G,IAAI,EAAErD,GAAAA,CAAAA;AACrCxG,gBAAAA,GAAAA,CAAIvD,IAAI,CAAC2E,YAAY,CAAC0B,kBAAkB+G,IAAI,CAAA;AAChD,YAAA;QACJ,CAAA,MAAO;AACHrD,YAAAA,GAAAA,GAAM,IAAIN,IAAAA,EAAAA;AACd,QAAA;QAEA,IAAInG,MAAAA,CAAO2G,KAAK,EAAE;AACd,YAAA,MAAMA,QAAQT,aAAAA,CAAcK,MAAAA,CAAOvG,MAAAA,CAAO2G,KAAK,EAAEF,GAAAA,CAAAA,EAAMA,GAAAA,CAAAA;AACvD,YAAA,IAAIA,MAAME,KAAAA,EAAO;gBACb,OAAO;oBAAEtG,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,iBAAA;AACrE,YAAA;AACJ,QAAA;QAEA,IAAIkB,MAAAA,CAAO4G,GAAG,EAAE;AACZ,YAAA,MAAMA,MAAMV,aAAAA,CAAcK,MAAAA,CAAOvG,MAAAA,CAAO4G,GAAG,EAAEH,GAAAA,CAAAA,EAAMA,GAAAA,CAAAA;AACnD,YAAA,IAAIA,MAAMG,GAAAA,EAAK;gBACX,OAAO;oBAAEvG,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,iBAAA;AACrE,YAAA;AACJ,QAAA;QAEA,IAAIkB,MAAAA,CAAOyI,QAAQ,EAAE;AACjB,YAAA,IACID,uBAAuBxI,MAAAA,CAAOyI,QAAQ,CAAA,IACtCzI,MAAAA,CAAO+J,WAAW,EACpB;AACE,gBAAA,IAAItD,GAAAA,CAAIuD,MAAM,EAAA,KAAOhK,MAAAA,CAAO+J,WAAW,EAAE;oBACrC,OAAO;wBAAE1J,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,qBAAA;AACrE,gBAAA;AACJ,YAAA;AAEA,YAAA,IACI+J,wBAAwB7I,MAAAA,CAAOyI,QAAQ,CAAA,IACvCzI,MAAAA,CAAOiK,YAAY,EACrB;AACE,gBAAA,IAAIxD,GAAAA,CAAIH,OAAO,EAAA,KAAOtG,MAAAA,CAAOiK,YAAY,EAAE;oBACvC,OAAO;wBAAE5J,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,qBAAA;AACrE,gBAAA;AACJ,YAAA;AAEA,YAAA,IACIgK,uBAAuB9I,MAAAA,CAAOyI,QAAQ,CAAA,IACtCzI,MAAAA,CAAOkK,WAAW,EACpB;AACE,gBAAA,MAAMvD,QAAQ,IAAIR,IAAAA,CAAKM,GAAAA,CAAIL,WAAW,IAAI,CAAA,EAAG,CAAA,CAAA;AAC7C,gBAAA,MAAM+D,OAAO,GAAC1D,CAAI2D,OAAO,EAAA,GAAKzD,MAAMyD,OAAO,EAAA,GACtC,CAACzD,MAAM0D,iBAAiB,EAAA,GAAK5D,IAAI4D,iBAAiB,EAAC,IAAK,EAAA,GAAK,IAAA;gBAElE,MAAMC,MAAAA,GAAS,IAAA,GAAO,EAAA,GAAK,EAAA,GAAK,EAAA;AAChC,gBAAA,MAAMC,SAAAA,GAAYC,IAAAA,CAAKC,KAAK,CAACN,IAAAA,GAAOG,MAAAA,CAAAA;gBAEpC,IAAIC,SAAAA,KAAcvK,MAAAA,CAAOkK,WAAW,EAAE;oBAClC,OAAO;wBAAE7J,OAAAA,EAASzB,wBAAAA,CAAyB,KAAA,EAAOoB,MAAAA,CAAOlB,MAAM;AAAE,qBAAA;AACrE,gBAAA;AACJ,YAAA;AACJ,QAAA;QAEA,OAAO;YAAEuB,OAAAA,EAASzB,wBAAAA,CAAyB,IAAA,EAAMoB,MAAAA,CAAOlB,MAAM;AAAE,SAAA;AACpE,IAAA;AACJ;;AC3HA;;;;;AAKC,IAKM,SAAS4L,oBAAAA,CAIZzL,IAAO,EACPvC,IAAO,EAAA;IAEP,OAAO;AACH,QAAA,GAAGA,IAAI;AACPuC,QAAAA;AACJ,KAAA;AACJ;;MCFa0L,uBAAAA,GAA0B;AACnC,IAAA,CAAC5H,iBAAAA,CAAkB8C,SAAS,GAAG,IAAIX,wBAAAA,EAAAA;AACnC,IAAA,CAACnC,iBAAAA,CAAkBa,UAAU,GAAG,IAAIH,yBAAAA,EAAAA;AACpC,IAAA,CAACV,iBAAAA,CAAkB6H,eAAe,GAAG,IAAIpG,6BAAAA,EAAAA;AACzC,IAAA,CAACzB,iBAAAA,CAAkB2D,IAAI,GAAG,IAAIF,mBAAAA,EAAAA;AAC9B,IAAA,CAACzD,iBAAAA,CAAkBG,QAAQ,GAAG,IAAI8D,uBAAAA,EAAAA;AAClC,IAAA,CAACjE,iBAAAA,CAAkBI,kBAAkB,GAAG,IAAIkE,gCAAAA,EAAAA;AAC5C,IAAA,CAACtE,iBAAAA,CAAkBK,WAAW,GAAG,IAAImE,yBAAAA,EAAAA;AACrC,IAAA,CAACxE,iBAAAA,CAAkB+G,IAAI,GAAG,IAAID,mBAAAA;AAClC;;ACDO,MAAMgB,mBAAAA,CAAAA;IACCC,QAAAA;IAEAC,YAAAA;IAEA5M,QAAAA;IAEAE,OAAAA;;IAIV,WAAA,CAAY/B,OAAAA,GAAsC,EAAE,CAAE;QAClD,IAAIA,OAAAA,CAAQwO,QAAQ,EAAE;AAClB,YAAA,IAAI,CAACA,QAAQ,GAAGxO,OAAAA,CAAQwO,QAAQ;QACpC,CAAA,MAAO;YACH,IAAI,CAACA,QAAQ,GAAG,IAAIlN,wBAAAA,EAAAA;AACxB,QAAA;AAEA,QAAA,IAAI,OAAOtB,OAAAA,CAAQ6B,QAAQ,KAAK,WAAA,EAAa;AACzC,YAAA,IAAI,CAACA,QAAQ,GAAG7B,OAAAA,CAAQ6B,QAAQ;AACpC,QAAA;AAEA,QAAA,IAAI,OAAO7B,OAAAA,CAAQ+B,OAAO,KAAK,WAAA,EAAa;AACxC,YAAA,IAAI,CAACA,OAAO,GAAG/B,OAAAA,CAAQ+B,OAAO;AAClC,QAAA;QAEA,IAAI/B,OAAAA,CAAQyO,YAAY,EAAE;AACtB,YAAA,IAAI,CAACA,YAAY,GAAGzO,OAAAA,CAAQyO,YAAY;QAC5C,CAAA,MAAO;AACH,YAAA,IAAI,CAACA,YAAY,GAAG,IAAIxL,YAAAA,CAAaoL,uBAAAA,CAAAA;AACzC,QAAA;AACJ,IAAA;;AAIA,IAAA,MAAgB5M,OAAAA,CACZO,KAAa,EACb0M,SAGC,EACiC;AAClC,QAAA,MAAM1O,OAAAA,GAAiC;YAAES,IAAAA,EAAMuB;AAAM,SAAA;QAErD,IAAI,OAAO0M,SAAAA,EAAW7M,QAAAA,KAAa,WAAA,EAAa;YAC5C7B,OAAAA,CAAQ6B,QAAQ,GAAG6M,SAAAA,CAAU7M,QAAQ;AACzC,QAAA,CAAA,MAAO,IAAI,OAAO,IAAI,CAACA,QAAQ,KAAK,WAAA,EAAa;AAC7C7B,YAAAA,OAAAA,CAAQ6B,QAAQ,GAAG,IAAI,CAACA,QAAQ;AACpC,QAAA;QAEA,IAAI,OAAO6M,SAAAA,EAAW3M,OAAAA,KAAY,WAAA,EAAa;YAC3C/B,OAAAA,CAAQ+B,OAAO,GAAG2M,SAAAA,CAAU3M,OAAO;AACvC,QAAA,CAAA,MAAO,IAAI,OAAO,IAAI,CAACA,OAAO,KAAK,WAAA,EAAa;AAC5C/B,YAAAA,OAAAA,CAAQ+B,OAAO,GAAG,IAAI,CAACA,OAAO;AAClC,QAAA;AAEA,QAAA,OAAO,IAAI,CAACyM,QAAQ,CAAC/M,OAAO,CAACzB,OAAAA,CAAAA;AACjC,IAAA;;IAIA,MAAMyD,QAAAA,CAASE,GAAgC,EAAkB;AAC7D,QAAA,IAAI,CAACxC,KAAAA,CAAMC,OAAO,CAACuC,GAAAA,CAAIlD,IAAI,CAAA,EAAG;YAC1B,MAAM,IAAI,CAACgD,QAAQ,CAAC;AAChB,gBAAA,GAAGE,GAAG;gBACNlD,IAAAA,EAAM;AAACkD,oBAAAA,GAAAA,CAAIlD;AAAK;AACpB,aAAA,CAAA;AACA,YAAA;AACJ,QAAA;AAEA,QAAA,MAAM,EAAET,OAAAA,GAAU,EAAE,EAAE,GAAG2D,GAAAA;AAEzB,QAAA,MAAMgL,gBAAAA,GAAmB3O,OAAAA,CAAQ2O,gBAAgB,IAC7ChG,iBAAiBI,SAAS;AAE9B,QAAA,MAAM1I,SAAmB,EAAE;AAE3B,QAAA,IAAIwI,KAAAA,GAAQ,CAAA;AAEZ,QAAA,MAAM+F,QAAAA,GAAWjL,GAAAA,CAAI3B,KAAK,IAAI,IAAIsC,UAAAA,EAAAA;QAElC,IAAK,IAAI2E,IAAI,CAAA,EAAGA,CAAAA,GAAItF,IAAIlD,IAAI,CAACoD,MAAM,EAAEoF,CAAAA,EAAAA,CAAK;YACtC,MAAM4F,OAAAA,GAAU,MAAM,IAAI,CAACpN,OAAO,CAACkC,GAAAA,CAAIlD,IAAI,CAACwI,CAAAA,CAAE,EAAE;AAC5ClH,gBAAAA,OAAAA,EAAS4B,IAAI5B,OAAO;AACpBF,gBAAAA,QAAAA,EAAU8B,IAAI9B;AAClB,aAAA,CAAA;AACA,YAAA,IAAI,CAACgN,OAAAA,EAAS;gBACVxO,MAAAA,CAAOC,IAAI,CAAC2D,eAAAA,CAAgB;AACxBvD,oBAAAA,IAAAA,EAAMC,UAAUC,oBAAoB;oBACpCX,OAAAA,EAAS,CAAC,IAAI,EAAE0D,GAAAA,CAAIlD,IAAI,CAACwI,CAAAA,CAAE,CAAC,iCAAiC,CAAC;oBAC9D/E,IAAAA,EAAM;wBAACP,GAAAA,CAAIlD,IAAI,CAACwI,CAAAA;AAAG;AACvB,iBAAA,CAAA,CAAA;gBAEA,IAAI0F,gBAAAA,KAAqBhG,gBAAAA,CAAiBI,SAAS,EAAE;AACjD,oBAAA,MAAM1E,KAAAA,GAAQvE,eAAAA,CAAgBoB,gBAAgB,CAACyC,IAAIlD,IAAI,CAAA;AACvD4D,oBAAAA,KAAAA,CAAM9D,SAAS,CAACF,MAAAA,CAAAA;oBAChB,MAAMgE,KAAAA;AACV,gBAAA;AAEA,gBAAA;AACJ,YAAA;AAEA,YAAA,MAAMyK,QAAAA,GAAWD,OAAAA,CAAQC,QAAQ,IAAI,EAAE;YACvC,IAAIA,QAAAA,CAASjL,MAAM,KAAK,CAAA,EAAG;gBACvB,IAAI8K,gBAAAA,KAAqBhG,gBAAAA,CAAiBS,WAAW,EAAE;AACnD,oBAAA;AACJ,gBAAA;AAEAP,gBAAAA,KAAAA,EAAAA;AAEA,gBAAA;AACJ,YAAA;YAEA,MAAMzI,IAAAA,GAAOwO,SAAS1J,KAAK,EAAA;AAC3B9E,YAAAA,IAAAA,CAAKqE,GAAG,CAACgC,iBAAAA,CAAkBI,kBAAkB,EAAEgI,OAAAA,CAAAA;AAE/C,YAAA,MAAME,yBAAyBF,OAAAA,CAAQxM,UAAU,CAACyG,iBAAiB,IAC/DH,iBAAiBI,SAAS;AAE9B,YAAA,MAAMiG,eAAAA,GAAoD;AACtDrM,gBAAAA,IAAAA,EAAM8D,kBAAkB8C,SAAS;gBACjCT,iBAAAA,EAAmBiG,sBAAAA;gBACnB7F,QAAAA,EAAU4F;AACd,aAAA;YAEA,MAAMG,gBAAAA,GAAmB,MAAM,IAAI,CAACR,YAAY,CAAChL,QAAQ,CACrDuL,eAAAA,EACA7J,6BAAAA,CAA8B;AAC1BnB,gBAAAA,OAAAA,EAAShE,QAAQkP,gBAAgB;AACjCtL,gBAAAA,OAAAA,EAAS5D,QAAQmP,gBAAgB;AACjC/O,gBAAAA;AACJ,aAAA,CAAA,CAAA;YAGJ,IAAI6O,gBAAAA,CAAiBlL,OAAO,EAAE;gBAC1B,IAAI4K,gBAAAA,KAAqBhG,gBAAAA,CAAiBS,WAAW,EAAE;AACnD,oBAAA;AACJ,gBAAA;AAEAP,gBAAAA,KAAAA,EAAAA;YACJ,CAAA,MAAO;gBACHxI,MAAAA,CAAOC,IAAI,CAACiF,sBAAAA,CAAuB;AAC/B7E,oBAAAA,IAAAA,EAAMC,UAAUU,4BAA4B;oBAC5ChB,MAAAA,EAAQ4O,gBAAAA,CAAiB5O,MAAM,IAAI,EAAE;oBACrCJ,OAAAA,EAAS,CAAC,IAAI,EAAE4O,OAAAA,CAAQxM,UAAU,CAAC5B,IAAI,CAAC,qCAAqC,CAAC;oBAC9EyD,IAAAA,EAAM;wBAAC2K,OAAAA,CAAQxM,UAAU,CAAC5B;AAAK;AACnC,iBAAA,CAAA,CAAA;gBAEA,IAAIkO,gBAAAA,KAAqBhG,gBAAAA,CAAiBI,SAAS,EAAE;AACjD,oBAAA,MAAM1E,QAAQvE,eAAAA,CAAgBoB,gBAAgB,CAAC2N,OAAAA,CAAQxM,UAAU,CAAC5B,IAAI,CAAA;AACtE4D,oBAAAA,KAAAA,CAAM9D,SAAS,CAACF,MAAAA,CAAAA;oBAChB,MAAMgE,KAAAA;AACV,gBAAA;AAEAwE,gBAAAA,KAAAA,EAAAA;AACJ,YAAA;AACJ,QAAA;AAEA,QAAA,IAAIA,QAAQ,CAAA,EAAG;AACX,YAAA;AACJ,QAAA;QAEA,IAAIxI,MAAAA,CAAOwD,MAAM,KAAK,CAAA,EAAG;AACrB,YAAA,MAAM/D,eAAAA,CAAgBiB,SAAS,CAAC4C,GAAAA,CAAIlD,IAAI,CAAA;QAC5C,CAAA,MAAO;AACH,YAAA,MAAM4D,KAAAA,GAAQvE,eAAAA,CAAgBoB,gBAAgB,CAACyC,IAAIlD,IAAI,CAAA;AACvD4D,YAAAA,KAAAA,CAAM9D,SAAS,CAACF,MAAAA,CAAAA;YAChB,MAAMgE,KAAAA;AACV,QAAA;AACJ,IAAA;IAEA,MAAM+K,aAAAA,CAAczL,GAAgC,EAAkB;QAClE,OAAO,IAAI,CAACF,QAAQ,CAAC;AACjB,YAAA,GAAGE,GAAG;YACN3D,OAAAA,EAAS;AACL,gBAAA,GAAI2D,GAAAA,CAAI3D,OAAO,IAAI,EAAE;AACrB2O,gBAAAA,gBAAAA,EAAkBhG,iBAAiBS;AACvC;AACJ,SAAA,CAAA;AACJ,IAAA;;IAIA,MAAMiG,WAAAA,CAAY1L,GAAgC,EAAkB;QAChE,OAAO,IAAI,CAACF,QAAQ,CAAC;AACjB,YAAA,GAAGE,GAAG;YACN3D,OAAAA,EAAS;AACL,gBAAA,GAAI2D,GAAAA,CAAI3D,OAAO,IAAI,EAAE;gBACrBmP,gBAAAA,EAAkB;AACd1I,oBAAAA,iBAAAA,CAAkBa,UAAU;AAC5Bb,oBAAAA,iBAAAA,CAAkB6H,eAAe;AACjC7H,oBAAAA,iBAAAA,CAAkBK;AACrB;AACL;AACJ,SAAA,CAAA;AACJ,IAAA;IAEA,MAAMwI,gBAAAA,CAAiB3L,GAAgC,EAAkB;QACrE,OAAO,IAAI,CAAC0L,WAAW,CAAC;AACpB,YAAA,GAAG1L,GAAG;YACN3D,OAAAA,EAAS;AACL,gBAAA,GAAI2D,GAAAA,CAAI3D,OAAO,IAAI,EAAE;AACrB2O,gBAAAA,gBAAAA,EAAkBhG,iBAAiBS;AACvC;AACJ,SAAA,CAAA;AACJ,IAAA;AACJ;;;;"}
+{"version":3,"file":"index.mjs","names":["DecisionStrategy","normalizeDate","toDate"],"sources":["../src/permission/error/module.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/key.ts","../src/permission/helpers/merge.ts","../src/permission/provider/memory.ts","../src/policy/helpers/invert.ts","../src/policy/error/module.ts","../src/policy/engine/module.ts","../src/policy/data.ts","../src/policy/evaluation/context/define.ts","../src/policy/issue/constants.ts","../src/policy/issue/define.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/permission/evaluator/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorOptions } from '@authup/errors';\nimport { AuthupError, ErrorCode } from '@authup/errors';\nimport type { PolicyIssue } from '../../policy';\n\nexport class PermissionError extends AuthupError {\n    constructor(options: AuthupErrorOptions = {}) {\n        super({\n            ...options,\n            message: options.message || 'A permission error occurred.',\n            statusCode: options.statusCode || 403,\n        });\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static notFound(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} was not found.`,\n            code: ErrorCode.PERMISSION_NOT_FOUND,\n        });\n    }\n\n    static denied(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} has not been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static deniedAll(names: string[]) {\n        return new PermissionError({\n            message: `None of the permissions ${names.join(', ')} has been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static evaluationFailed(name: string | string[]) {\n        if (Array.isArray(name)) {\n            return new PermissionError({\n                message: `The evaluation of permissions ${name.join(', ')} failed`,\n                code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n            });\n        }\n\n        return new PermissionError({\n            message: `The evaluation of permission ${name} failed`,\n            code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n        });\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PermissionPolicyBinding } from '../types';\n\nexport function isPermissionPolicyBindingEqual(a: PermissionPolicyBinding, b: PermissionPolicyBinding): boolean {\n    if (a.permission.name !== b.permission.name) {\n        return false;\n    }\n\n    if ((a.permission.realm_id ?? null) !== (b.permission.realm_id ?? null)) {\n        return false;\n    }\n\n    if ((a.permission.client_id ?? null) !== (b.permission.client_id ?? null)) {\n        return false;\n    }\n\n    return true;\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n\nimport type { BasePermission } from '../types.ts';\n\nfunction formatKeySegment(value?: string | null): string {\n    return value || '*';\n}\n\nexport function buildPermissionKey(\n    input: BasePermission,\n) {\n    return `${formatKeySegment(input.realm_id)}/${formatKeySegment(input.client_id)}/${input.name}`;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { DecisionStrategy } from '@authup/kit';\nimport type { BasePolicy } from '../../policy';\nimport type { PermissionPolicyBinding } from '../types';\nimport { buildPermissionKey } from './key';\n\ntype CompositePolicy = BasePolicy & {\n    decision_strategy?: `${DecisionStrategy}`,\n    children: BasePolicy[],\n};\n\nexport function mergePermissionPolicyBindings(input: PermissionPolicyBinding[]) : PermissionPolicyBinding[] {\n    const grouped : Record<string, PermissionPolicyBinding[]> = input\n        .reduce((previous, current) => {\n            const key = buildPermissionKey(current.permission);\n            if (!previous[key]) {\n                previous[key] = [];\n            }\n\n            previous[key].push(current);\n\n            return previous;\n        }, {} as Record<string, PermissionPolicyBinding[]>);\n\n    const output : PermissionPolicyBinding[] = [];\n    const keys = Object.keys(grouped);\n    for (const key of keys) {\n        const group = grouped[key]!;\n        const first = group[0]!;\n\n        if (group.length === 1) {\n            output.push(first);\n            continue;\n        }\n\n        const children : BasePolicy[] = [];\n\n        for (const element of group) {\n            if (!element.policies || element.policies.length === 0) {\n                continue;\n            }\n\n            const policy: CompositePolicy = {\n                type: 'composite',\n                decision_strategy: element.permission.decision_strategy || DecisionStrategy.UNANIMOUS,\n                children: element.policies,\n            };\n\n            children.push(policy);\n        }\n\n        let mergedPolicies: BasePolicy[] | undefined;\n\n        if (\n            children.length > 0 &&\n            children.length === group.length\n        ) {\n            const policy: CompositePolicy = {\n                type: 'composite',\n                decision_strategy: DecisionStrategy.AFFIRMATIVE,\n                children,\n            };\n\n            mergedPolicies = [policy];\n        }\n\n        output.push({\n            permission: {\n                ...first.permission,\n                decision_strategy: DecisionStrategy.AFFIRMATIVE,\n            },\n            policies: mergedPolicies,\n        });\n    }\n\n    return output;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildPermissionKey, mergePermissionPolicyBindings } from '../helpers';\nimport type { PermissionPolicyBinding } from '../types';\nimport type { IPermissionProvider, PermissionGetOptions } from './types';\n\nexport class PermissionMemoryProvider implements IPermissionProvider {\n    protected items : Record<string, PermissionPolicyBinding> = {};\n\n    constructor(items: PermissionPolicyBinding[] = []) {\n        this.setMany(items);\n    }\n\n    async findOne(\n        options: PermissionGetOptions,\n    ): Promise<PermissionPolicyBinding | null> {\n        const key = buildPermissionKey({\n            name: options.name,\n            client_id: options.clientId,\n            realm_id: options.realmId,\n        });\n\n        const entry = this.items[key];\n        if (entry) {\n            return entry;\n        }\n\n        return null;\n    }\n\n    setMany(input: PermissionPolicyBinding[]) {\n        this.items = mergePermissionPolicyBindings(input)\n            .reduce((prev, current) => {\n                const key = buildPermissionKey(current.permission);\n                prev[key] = current;\n                return prev;\n            }, {} as Record<string, PermissionPolicyBinding>);\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\ntype InvertFn = (input: boolean) => boolean;\n\nexport function maybeInvertPolicyOutcome(\n    outcome: boolean,\n    invert?: boolean | InvertFn,\n) {\n    if (typeof invert === 'undefined') {\n        return outcome;\n    }\n\n    if (typeof invert === 'function') {\n        return invert(outcome);\n    }\n\n    if (!invert) {\n        return outcome;\n    }\n\n    return !outcome;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError, ErrorCode } from '@authup/errors';\nimport type { PolicyIssue } from '../issue';\n\nexport class PolicyError extends AuthupError {\n    constructor(message?: string, code?: string | null) {\n        super({\n            message,\n            code, \n        });\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static evaluatorNotFound(type: string) {\n        return new PolicyError(\n            `No evaluator is registered to handle the policy: ${type}`,\n            ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n        );\n    }\n\n    static evaluatorNotProcessable() {\n        return new PolicyError(\n            'The evaluator can not process the policy.',\n            ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n        );\n    }\n\n    static evaluatorContextInvalid() {\n        return new PolicyError(\n            'The evaluator context is not valid.',\n            ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID,\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport { defineIssueItem } from 'validup';\nimport type {\n    IPolicyEvaluator,\n    PolicyEvaluationContext,\n    PolicyEvaluationResult,\n    PolicyEvaluators,\n} from '../evaluation';\nimport { maybeInvertPolicyOutcome } from '../helpers';\nimport type { PolicyIssue } from '../issue';\nimport type { IPolicyEngine } from './types.ts';\nimport { PolicyError } from '../error';\nimport type { BasePolicy } from '../types.ts';\n\n/**\n * The policy engine is a component that interprets defined policies and makes decisions\n * on whether to allow or deny a particular access.\n */\nexport class PolicyEngine implements IPolicyEngine {\n    protected evaluators : Record<string, IPolicyEvaluator>;\n\n    constructor(evaluators: PolicyEvaluators = {}) {\n        this.evaluators = evaluators;\n    }\n\n    public registerEvaluator(\n        type: string,\n        evaluator: IPolicyEvaluator,\n    ) : void {\n        this.evaluators[type] = evaluator;\n    }\n\n    public registerEvaluators(evaluators: PolicyEvaluators) {\n        const keys = Object.keys(evaluators);\n        for (const key of keys) {\n            this.registerEvaluator(key, evaluators[key]!);\n        }\n    }\n\n    /**\n     * @param policy\n     * @param ctx\n     */\n    async evaluate(policy: BasePolicy, ctx: PolicyEvaluationContext) : Promise<PolicyEvaluationResult> {\n        if (!policy.type) {\n            return {\n                success: maybeInvertPolicyOutcome(false, policy.invert),\n                issues: [\n                    defineIssueItem({\n                        path: [],\n                        message: 'The policy can not be handled by any evaluator.',\n                        code: ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n                    }),\n                ],\n            };\n        }\n        if (\n            ctx.exclude &&\n            ctx.exclude.length > 0 &&\n            ctx.exclude.includes(policy.type)\n        ) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        if (\n            ctx.include &&\n            ctx.include.length > 0 &&\n            !ctx.include.includes(policy.type)\n        ) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        const issues : PolicyIssue[] = [];\n\n        const evaluator = this.evaluators[policy.type];\n        if (!evaluator) {\n            // todo: add issue here instead + return false ?\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The policy ${policy.type} can not be handled by any evaluator.`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n            }));\n\n            return {\n                success: maybeInvertPolicyOutcome(false, policy.invert),\n                issues,\n            };\n        }\n\n        try {\n            return await evaluator.evaluate(policy, {\n                ...ctx,\n                evaluators: {\n                    ...this.evaluators,\n                    ...(ctx.evaluators || {}),\n                },\n            });\n        } catch {\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The ${policy.type} evaluator can not process the policy specification.`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n            }));\n\n            return {\n                success: maybeInvertPolicyOutcome(false, policy.invert),\n                issues,\n            };\n        }\n    }\n\n    async evaluateOrFail(policy: BasePolicy, ctx: PolicyEvaluationContext) : Promise<void> {\n        const issues : PolicyIssue[] = [];\n\n        try {\n            const outcome = await this.evaluate(policy, ctx);\n            if (outcome.success) {\n                return;\n            }\n\n            if (outcome.issues) {\n                issues.push(...outcome.issues);\n            }\n        } catch (e) {\n            if (e instanceof PolicyError) {\n                throw e;\n            }\n        }\n\n        const error = new PolicyError(`The policy ${policy.type} evaluation failed.`);\n        error.addIssues(issues);\n\n        throw error;\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport interface IPolicyData {\n    set(key: string, value: unknown) : void;\n    has(key: string): boolean;\n    get<T = unknown>(key: string) : T;\n\n    isValidated(key: string): boolean;\n    setValidated(key: string) : void;\n\n    clone() : IPolicyData\n}\n\nexport class PolicyData implements IPolicyData {\n    protected data: Record<string, any>;\n\n    protected validated : Set<string>;\n\n    constructor(\n        data: Record<string, any> = {},\n        validated: Set<string> = new Set(),\n    ) {\n        this.data = data;\n        this.validated = validated;\n    }\n\n    set<T = unknown>(key: string, value: T) : void {\n        this.data[key] = value;\n        this.validated.delete(key);\n    }\n\n    get<T = unknown>(key: string) : T {\n        if (key in this.data) {\n            return this.data[key];\n        }\n\n        throw new Error(`Policy data item ${key} does not exist.`);\n    }\n\n    has(key: string): boolean {\n        return key in this.data;\n    }\n\n    setValidated(key: string) : void {\n        this.validated.add(key);\n    }\n\n    isValidated(key: string) : boolean {\n        return this.validated.has(key);\n    }\n\n    clone() {\n        return new PolicyData({ ...this.data }, new Set(this.validated));\n    }\n}\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyEvaluationContext, PolicyEvaluationContextInput } from './types.ts';\nimport { PolicyData } from '../../data.ts';\n\nexport function definePolicyEvaluationContext(\n    input: PolicyEvaluationContextInput = {},\n) : PolicyEvaluationContext {\n    return {\n        evaluators: input.evaluators || {},\n        path: input.path || [],\n        data: input.data || new PolicyData(),\n        include: input.include || [],\n        exclude: input.exclude || [],\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum PolicyIssueSeverity {\n    WARNING = 'warning',\n    ERROR = 'error',\n}\n\nexport enum PolicyIssueCode {\n    // Data/Input\n    DATA_MISSING = 'DATA_MISSING',\n    DATA_INVALID = 'DATA_INVALID',\n\n    // Policy Spec / Config\n    INVALID = 'INVALID',\n    TYPE_UNKNOWN = 'TYPE_UNKNOWN',\n    FIELD_MISSING = 'FIELD_MISSING',\n    FIELD_INVALID = 'FIELD_INVALID',\n\n    // Composite / Tree evaluation\n    CHILD_INVALID = 'CHILD_INVALID',\n    CHILD_EVALUATION_FAILED = 'CHILD_EVALUATION_FAILED',\n\n    // Engine / Evaluator registry\n    EVALUATION_DENIED = 'EVALUATION_DENIED',\n    EVALUATOR_NOT_FOUND = 'EVALUATOR_NOT_FOUND',\n    EVALUATOR_ERROR = 'EVALUATOR_ERROR',\n\n    // Execution control\n    SKIPPED_EXCLUDED = 'SKIPPED_EXCLUDED',\n    SKIPPED_NOT_INCLUDED = 'SKIPPED_NOT_INCLUDED',\n\n    // Internal / unexpected\n    INTERNAL_ERROR = 'INTERNAL_ERROR',\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup, defineIssueItem } from 'validup';\nimport type { PolicyIssueGroup, PolicyIssueItem } from './types.ts';\n\nexport function definePolicyIssueItem(input: Omit<PolicyIssueItem, 'type'>) : PolicyIssueItem {\n    return defineIssueItem(input);\n}\n\nexport function definePolicyIssueGroup(input: Omit<PolicyIssueGroup, 'type'>) : PolicyIssueGroup {\n    return defineIssueGroup(input);\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributeNamesPolicy } from './types';\n\nexport class AttributeNamesPolicyValidator extends Container<AttributeNamesPolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'names',\n            createValidator(\n                z.array(\n                    z.string()\n                        .min(3)\n                        .max(128),\n                ),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AttributesPolicy } from './types';\n\nexport function defineAttributesPolicy<\n    T extends Record<string, any> = Record<string, any>,\n>(\n    data: AttributesPolicy<T>,\n) : AttributesPolicy<T> {\n    return data;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum BuiltInPolicyType {\n    /**\n     * Bundles different policies.\n     */\n    COMPOSITE = 'composite',\n    /**\n     * Date Based Access Control (DBAC)\n     */\n    DATE = 'date',\n    /**\n     * Time Based Access Control (TBAC)\n     */\n    TIME = 'time',\n    /**\n     * Attribute Name Based Access Control (ANBAC)\n     */\n    ATTRIBUTE_NAMES = 'attributeNames',\n    /**\n     * Attribute Based Access Control (ABAC)\n     */\n    ATTRIBUTES = 'attributes',\n    /**\n     * Realm of Identity is for attribute realm.\n     */\n    REALM_MATCH = 'realmMatch',\n\n    /**\n     * Restriction based on identity (type, id, ...)\n     */\n    IDENTITY = 'identity',\n\n    /**\n     * Restriction based on a binding between identity <-> permission\n     */\n    PERMISSION_BINDING = 'permissionBinding',\n\n    // Location (LBAC)\n    // Device (DBAC)\n}\n\nexport const SystemPolicyName = {\n    DEFAULT: 'system.default',\n    IDENTITY: 'system.identity',\n    PERMISSION_BINDING: 'system.permission-binding',\n    REALM_MATCH: 'system.realm-match',\n    REALM_BOUND: 'system.realm-bound',\n    REALM_OR_GLOBAL: 'system.realm-or-global',\n} as const;\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributesPolicy } from './types';\n\nexport class AttributesPolicyValidator<\n    T extends Record<string, any> = Record<string, any>,\n> extends Container<AttributesPolicy<T>> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'query',\n            createValidator(\n                z.looseObject({}),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { guard } from '@ucast/mongo2js';\nimport { isObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { AttributesPolicyValidator } from './validator';\n\nexport class AttributesPolicyEvaluator<\n    T extends Record<string, any> = Record<string, any>,\n> implements IPolicyEvaluator {\n    protected validator : AttributesPolicyValidator<T>;\n\n    constructor() {\n        this.validator = new AttributesPolicyValidator<T>();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<T | null> {\n        if (!ctx.data.has(BuiltInPolicyType.ATTRIBUTES)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.ATTRIBUTES)) {\n            return ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n        }\n\n        // todo: run validator on attributes (isObject ...)\n        const data = ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n\n        ctx.data.set(BuiltInPolicyType.ATTRIBUTES, data);\n        ctx.data.setValidated(BuiltInPolicyType.ATTRIBUTES);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        this.fixQuery(policy.query);\n\n        const testIt = guard<T>(policy.query);\n\n        return { success: maybeInvertPolicyOutcome(testIt(data as T), policy.invert) };\n    }\n\n    protected fixQuery(\n        query: unknown | unknown[],\n    ) {\n        if (Array.isArray(query)) {\n            for (const element of query) {\n                this.fixQuery(element);\n            }\n\n            return;\n        }\n\n        if (isObject(query)) {\n            const keys = Object.keys(query);\n            for (const key of keys) {\n                const value = query[key];\n\n                if (isObject(value) || Array.isArray(value)) {\n                    this.fixQuery(value);\n                    continue;\n                }\n\n                if (\n                    key === '$regex' &&\n                    typeof value === 'string'\n                ) {\n                    const fragments = value.match(/\\/(.*?)\\/([a-z]*)?$/i);\n                    if (fragments && fragments[1] !== undefined) {\n                        query[key] = new RegExp(fragments[1], fragments[2] || '');\n                    }\n                }\n            }\n        }\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { flattenObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport type { PolicyIssue } from '../../issue';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributeNamesPolicyValidator } from './validator';\nimport { AttributesPolicyEvaluator } from '../attributes';\n\nexport class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : AttributeNamesPolicyValidator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new AttributeNamesPolicyValidator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.attributesEvaluator.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const attributes = flattenObject(data);\n        const keys = Object.keys(attributes);\n\n        const issues : PolicyIssue[] = [];\n        for (const key of keys) {\n            const index = policy.names.indexOf(key);\n            if (index === -1) {\n                issues.push(definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: `The attribute ${key} is not included`,\n                    path: [...ctx.path, key],\n                }));\n            }\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(issues.length === 0, policy.invert),\n            issues,\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { CompositePolicy } from './types';\n\nexport class CompositePolicyValidator extends Container<CompositePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'children',\n            createValidator(\n                z.array(z.looseObject({ type: z.string().min(3) })),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup } from 'validup';\nimport { DecisionStrategy } from '../../../constants';\nimport { PolicyEngine } from '../../engine';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport type { PolicyIssue } from '../../issue';\nimport { CompositePolicyValidator } from './validator';\n\nexport class CompositePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : CompositePolicyValidator;\n\n    constructor() {\n        this.validator = new CompositePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let count = 0;\n\n        const decision_strategy = policy.decision_strategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const engine = new PolicyEngine(ctx.evaluators);\n        const issues : PolicyIssue[] = [];\n\n        for (const childPolicy of policy.children) {\n            const path = [\n                ...(ctx.path || []),\n                ...(childPolicy.type ? [childPolicy.type] : []),\n            ];\n\n            const outcome = await engine.evaluate(childPolicy, {\n                ...ctx,\n                path,\n            });\n\n            if (outcome.success) {\n                if (decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return {\n                        success: maybeInvertPolicyOutcome(true, policy.invert),\n                        issues: [],\n                    };\n                }\n\n                count++;\n            } else {\n                if (outcome.issues) {\n                    issues.push(defineIssueGroup({\n                        message: `The evaluation of child policy ${childPolicy.type} failed`,\n                        issues: outcome.issues || [],\n                        path,\n                    }));\n                }\n\n                if (decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    return {\n                        success: maybeInvertPolicyOutcome(false, policy.invert),\n                        issues: [\n                            defineIssueGroup({\n                                message: `The evaluation of composite policy failed (${DecisionStrategy.UNANIMOUS})`,\n                                issues,\n                                path: ctx.path,\n                            }),\n                        ],\n                    };\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(false, policy.invert),\n            issues: [\n                defineIssueGroup({\n                    message: `The evaluation of composite policy failed (${DecisionStrategy.CONSENSUS})`,\n                    issues: issues || [],\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../../types';\nimport { BuiltInPolicyType } from '../constants';\nimport type { CompositePolicy } from './types';\n\nexport function isCompositePolicy(\n    input: PolicyWithType,\n) : input is PolicyWithType<CompositePolicy> {\n    return input.type === BuiltInPolicyType.COMPOSITE;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { DatePolicy } from './types';\n\nexport class DatePolicyValidator extends Container<DatePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('invert', createValidator(\n            z.boolean()\n                .or(z.undefined())\n                .or(z.null())\n                .optional(),\n        ));\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { DatePolicyValidator } from './validator';\n\nfunction normalizeDate(input: Date) {\n    return new Date(input.getFullYear(), input.getMonth(), input.getDate());\n}\n\nfunction toDate(input: Date | string | number) : Date {\n    if (typeof input === 'string') {\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class DatePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : DatePolicyValidator;\n\n    constructor() {\n        this.validator = new DatePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.DATE)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.DATE)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.DATE);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = normalizeDate(toDate(ctx.data.get(BuiltInPolicyType.DATE)));\n\n                ctx.data.set(BuiltInPolicyType.DATE, now);\n                ctx.data.setValidated(BuiltInPolicyType.DATE);\n            }\n        } else {\n            now = normalizeDate(new Date());\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start));\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end));\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\n\nimport type { IdentityPolicyData } from '../types.ts';\n\nexport class PolicyIdentityDataValidator extends Container<IdentityPolicyData> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'type',\n            createValidator(\n                z.string().min(3).max(128),\n            ),\n        );\n\n        this.mount(\n            'id',\n            createValidator(\n                z.uuid(),\n            ),\n        );\n\n        this.mount(\n            'clientId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmName',\n            createValidator(\n                z.string().min(3).max(128)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { IdentityPolicy } from './types';\n\nexport class IdentityPolicyValidator extends Container<IdentityPolicy> {\n    override initialize() {\n        this.mount(\n            'types',\n            createValidator(\n                z.array(z.string())\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIdentityDataValidator } from './data';\nimport type { IdentityPolicyData } from './types';\nimport { IdentityPolicyValidator } from './validator';\n\nexport class IdentityPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : IdentityPolicyValidator;\n\n    protected dataValidator : PolicyIdentityDataValidator;\n\n    constructor() {\n        this.validator = new IdentityPolicyValidator();\n        this.dataValidator = new PolicyIdentityDataValidator();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<IdentityPolicyData | null> {\n        if (!ctx.data.has('identity')) {\n            return null;\n        }\n\n        if (ctx.data.isValidated('identity')) {\n            return ctx.data.get<IdentityPolicyData>('identity');\n        }\n\n        const data = await this.dataValidator.run(ctx.data.get('identity'));\n\n        ctx.data.set('identity', data);\n        ctx.data.setValidated('identity');\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        if (!policy.types || policy.types.length === 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        const typeAllowed = policy.types.includes(data.type);\n        if (typeAllowed) {\n            return { success: maybeInvertPolicyOutcome(typeAllowed, policy.invert) };\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(typeAllowed, policy.invert),\n            issues: [\n                definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: `The type ${data.type} is not covered by the policy configuration`,\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Container } from 'validup';\nimport type { PermissionBindingPolicy } from './types';\n\nexport class PermissionBindingPolicyValidator extends Container<PermissionBindingPolicy> {\n    override initialize() {\n\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PermissionBindingPolicyValidator } from './validator';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator: PermissionBindingPolicyValidator;\n\n    constructor() {\n        this.validator = new PermissionBindingPolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        // todo: this must be changed when the permission-checker not only checks owned permissions.\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { RealmMatchPolicy } from './types';\n\nexport class RealmMatchPolicyValidator extends Container<RealmMatchPolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'attribute_name',\n            createValidator(\n                z.string()\n                    .min(3)\n                    .or(z.array(z.string().min(3)))\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_name_strict',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_null_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'identity_master_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { hasOwnProperty } from '@authup/kit';\nimport { DecisionStrategy } from '../../../constants';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributesPolicyEvaluator } from '../attributes';\nimport { IdentityPolicyEvaluator } from '../identity';\nimport { RealmMatchPolicyValidator } from './validator';\n\nexport class RealmMatchPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : RealmMatchPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new RealmMatchPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const attributes = await this.attributesEvaluator.accessData(ctx);\n        if (!attributes) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityMasterMatchAll = policy.identity_master_match_all ?? true;\n        if (\n            identityMasterMatchAll &&\n            identity.realmName &&\n            identity.realmName === 'master'\n        ) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        let keys : string[];\n        if (policy.attribute_name) {\n            if (Array.isArray(policy.attribute_name)) {\n                keys = policy.attribute_name;\n            } else {\n                keys = [policy.attribute_name];\n            }\n        } else {\n            keys = [\n                'realm_id',\n                'realm_name',\n                'realmId',\n                'realmName',\n            ];\n\n            policy.decision_strategy = DecisionStrategy.CONSENSUS;\n        }\n\n        const attribute_name_strict = policy.attribute_name_strict ?? true;\n        if (!attribute_name_strict) {\n            const resourceKeys = Object.keys(attributes);\n            const keysToAdd : string[] = [];\n            for (const resourceKey of resourceKeys) {\n                let contains : boolean = false;\n\n                for (const key of keys) {\n                    if (\n                        resourceKey !== key &&\n                        resourceKey.includes(key)\n                    ) {\n                        contains = true;\n                        break;\n                    }\n                }\n\n                if (contains) {\n                    keysToAdd.push(resourceKey);\n                }\n            }\n\n            if (keysToAdd.length > 0) {\n                keys.push(...keysToAdd);\n            }\n        }\n\n        let count = 0;\n        let evaluated = false;\n\n        for (const key of keys) {\n            if (!hasOwnProperty(attributes, key)) {\n                continue;\n            }\n\n            evaluated = true;\n\n            let outcome : boolean = false;\n\n            const attributeValue = attributes[key];\n\n            if (\n                attributeValue === null &&\n                policy.attribute_null_match_all\n            ) {\n                outcome = true;\n            } else if (\n                attributeValue === identity.realmId ||\n                attributeValue === identity.realmName\n            ) {\n                outcome = true;\n            }\n\n            if (outcome) {\n                if (policy.decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n                }\n\n                count++;\n            } else {\n                if (policy.decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n\n                count--;\n            }\n        }\n\n        if (!evaluated) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        return { success: maybeInvertPolicyOutcome(count > 0, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum TimePolicyInterval {\n    DAILY = 'daily',\n    WEEKLY = 'weekly',\n    MONTHLY = 'monthly',\n    YEARLY = 'yearly',\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TimePolicyInterval } from './constants';\n\nexport function isIntervalForDayOfWeek(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.WEEKLY ||\n        interval === TimePolicyInterval.MONTHLY ||\n        interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfMonth(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.MONTHLY ||\n    interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfYear(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.YEARLY;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { TimePolicy } from './types';\nimport { TimePolicyInterval } from './constants';\n\nexport class TimePolicyValidator extends Container<TimePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount('day_of_week', createValidator(\n            z.number()\n                .min(0).max(6)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_month', createValidator(\n            z.number()\n                .min(1)\n                .max(31)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_year', createValidator(\n            z.number()\n                .min(1)\n                .max(365)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount(\n            'interval',\n            createValidator(\n                z.enum(TimePolicyInterval)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.undefined())\n                    .or(z.null())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants';\nimport { isIntervalForDayOfMonth, isIntervalForDayOfWeek, isIntervalForDayOfYear } from './helpers';\nimport { TimePolicyValidator } from './validator';\n\nconst timeRegex = /^(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d)?$/;\n\nfunction normalizeDate(input: Date, dateRef?: Date) {\n    const date = dateRef ? new Date(dateRef) : new Date();\n    date.setHours(input.getHours(), input.getMinutes());\n\n    return date;\n}\n\nfunction toDate(\n    input: Date | string | number,\n    dateRef?: Date,\n) : Date {\n    if (typeof input === 'string') {\n        if (timeRegex.test(input)) {\n            const parts = input.split(':');\n\n            const startHours = Number(parts[0]);\n            const startMinutes = Number(parts[1]);\n            const startSeconds = parts[2] !== undefined ? Number(parts[2]) : 0;\n\n            if (\n                Number.isFinite(startHours) &&\n                Number.isFinite(startMinutes) &&\n                Number.isFinite(startSeconds)\n            ) {\n                const date = dateRef ? new Date(dateRef) : new Date();\n                date.setHours(startHours, startMinutes, startSeconds, 0);\n\n                return date;\n            }\n        }\n\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class TimePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : TimePolicyValidator;\n\n    constructor() {\n        this.validator = new TimePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.TIME)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.TIME)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.TIME);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = toDate(ctx.data.get(BuiltInPolicyType.TIME));\n\n                ctx.data.set(BuiltInPolicyType.TIME, now);\n                ctx.data.setValidated(BuiltInPolicyType.TIME);\n            }\n        } else {\n            now = new Date();\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start, now), now);\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end, now), now);\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.interval) {\n            if (\n                isIntervalForDayOfWeek(policy.interval) &&\n                policy.day_of_week\n            ) {\n                if (now.getDay() !== policy.day_of_week) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfMonth(policy.interval) &&\n                policy.day_of_month\n            ) {\n                if (now.getDate() !== policy.day_of_month) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfYear(policy.interval) &&\n                policy.day_of_year\n            ) {\n                const start = new Date(now.getFullYear(), 0, 0);\n                const diff = (now.getTime() - start.getTime()) +\n                    ((start.getTimezoneOffset() - now.getTimezoneOffset()) * 60 * 1000);\n\n                const oneDay = 1000 * 60 * 60 * 24;\n                const dayOfYear = Math.floor(diff / oneDay);\n\n                if (dayOfYear !== policy.day_of_year) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../types';\nimport type { BuiltInPolicyTypeMap } from './types';\n\nexport function definePolicyWithType<\n    K extends keyof BuiltInPolicyTypeMap,\n    D extends BuiltInPolicyTypeMap<any>[K],\n>(\n    type: K,\n    data: D,\n) : PolicyWithType<D, K> {\n    return {\n        ...data,\n        type,\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AttributeNamesPolicyEvaluator,\n    AttributesPolicyEvaluator,\n    BuiltInPolicyType,\n    CompositePolicyEvaluator,\n    DatePolicyEvaluator,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyEvaluator,\n    RealmMatchPolicyEvaluator,\n    TimePolicyEvaluator,\n} from './built-in';\n\nexport const PolicyDefaultEvaluators = {\n    [BuiltInPolicyType.COMPOSITE]: new CompositePolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTES]: new AttributesPolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTE_NAMES]: new AttributeNamesPolicyEvaluator(),\n    [BuiltInPolicyType.DATE]: new DatePolicyEvaluator(),\n    [BuiltInPolicyType.IDENTITY]: new IdentityPolicyEvaluator(),\n    [BuiltInPolicyType.PERMISSION_BINDING]: new PermissionBindingPolicyEvaluator(),\n    [BuiltInPolicyType.REALM_MATCH]: new RealmMatchPolicyEvaluator(),\n    [BuiltInPolicyType.TIME]: new TimePolicyEvaluator(),\n} as const;\n","/*\n * Copyright (c) 2021-2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport type { Issue } from 'validup';\nimport { defineIssueItem } from 'validup';\nimport { DecisionStrategy } from '../../constants.ts';\nimport type { CompositePolicy, IPolicyEngine } from '../../policy';\nimport {\n    BuiltInPolicyType,\n    PolicyData,\n    PolicyDefaultEvaluators,\n    PolicyEngine,\n    definePolicyEvaluationContext,\n    definePolicyIssueGroup,\n} from '../../policy';\nimport { PermissionError } from '../error';\nimport type { IPermissionProvider } from '../provider';\n\nimport type { PermissionPolicyBinding } from '../types.ts';\nimport type { IPermissionEvaluator, PermissionEvaluationContext, PermissionEvaluatorOptions } from './types.ts';\n\nexport class PermissionEvaluator implements IPermissionEvaluator {\n    protected provider : IPermissionProvider;\n\n    protected policyEngine : IPolicyEngine;\n\n    protected clientId?: string | null;\n\n    protected realmId?: string | null;\n\n    // ----------------------------------------------\n\n    constructor(options: PermissionEvaluatorOptions) {\n        this.provider = options.provider;\n\n        this.clientId = options.clientId || null;\n        this.realmId = options.realmId || null;\n\n        if (options.policyEngine) {\n            this.policyEngine = options.policyEngine;\n        } else {\n            this.policyEngine = new PolicyEngine(PolicyDefaultEvaluators);\n        }\n    }\n\n    // ----------------------------------------------\n\n    protected async findOne(\n        input: string,\n        overrides: {\n            realmId?: string | null,\n            clientId?: string | null\n        } = {},\n    ) : Promise<PermissionPolicyBinding | null> {\n        return this.provider.findOne({\n            name: input,\n            clientId: overrides.clientId ?? this.clientId,\n            realmId: overrides.realmId ?? this.realmId,\n        });\n    }\n\n    // ----------------------------------------------\n\n    async evaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        if (!Array.isArray(ctx.name)) {\n            await this.evaluate({\n                ...ctx,\n                name: [ctx.name],\n            });\n            return;\n        }\n\n        const { options = {} } = ctx;\n\n        const decisionStrategy = options.decisionStrategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const issues : Issue[] = [];\n\n        let count = 0;\n\n        const dataBase = ctx.input || new PolicyData();\n\n        for (const name of ctx.name) {\n            const binding = await this.findOne(name, {\n                realmId: ctx.realmId,\n                clientId: ctx.clientId,\n            });\n            if (!binding) {\n                issues.push(defineIssueItem({\n                    code: ErrorCode.PERMISSION_NOT_FOUND,\n                    message: `The ${name} permission could not be resolved`,\n                    path: [name],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(ctx.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                continue;\n            }\n\n            const policies = binding.policies ?? [];\n            if (policies.length === 0) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n\n                continue;\n            }\n\n            const data = dataBase.clone();\n            data.set(BuiltInPolicyType.PERMISSION_BINDING, binding);\n\n            const policyDecisionStrategy = binding.permission.decision_strategy ??\n                DecisionStrategy.UNANIMOUS;\n\n            const compositePolicy : CompositePolicy = {\n                type: BuiltInPolicyType.COMPOSITE,\n                decision_strategy: policyDecisionStrategy,\n                children: policies,\n            };\n\n            const evaluationResult = await this.policyEngine.evaluate(\n                compositePolicy,\n                definePolicyEvaluationContext({\n                    include: options.policiesIncluded,\n                    exclude: options.policiesExcluded,\n                    data,\n                }),\n            );\n\n            if (evaluationResult.success) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n            } else {\n                issues.push(definePolicyIssueGroup({\n                    code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n                    issues: evaluationResult.issues || [],\n                    message: `The ${binding.permission.name} permissions policy evaluation failed`,\n                    path: [binding.permission.name],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(binding.permission.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return;\n        }\n\n        if (issues.length === 0) {\n            throw PermissionError.deniedAll(ctx.name);\n        } else {\n            const error = PermissionError.evaluationFailed(ctx.name);\n            error.addIssues(issues);\n            throw error;\n        }\n    }\n\n    async evaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n\n    // ----------------------------------------------\n\n    async preEvaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                policiesExcluded: [\n                    BuiltInPolicyType.ATTRIBUTES,\n                    BuiltInPolicyType.ATTRIBUTE_NAMES,\n                    BuiltInPolicyType.REALM_MATCH,\n                ],\n            },\n        });\n    }\n\n    async preEvaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.preEvaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;AAWA,IAAa,kBAAb,MAAa,wBAAwB,YAAY;CAC7C,YAAY,UAA8B,EAAE,EAAE;AAC1C,QAAM;GACF,GAAG;GACH,SAAS,QAAQ,WAAW;GAC5B,YAAY,QAAQ,cAAc;GACrC,CAAC;;CAGN,SAAS,MAAmB;AACxB,OAAK,OAAO,KAAK,KAAK;;CAG1B,UAAU,MAAqB;AAC3B,OAAK,OAAO,KAAK,GAAG,KAAK;;CAG7B,OAAO,SAAS,MAAc;AAC1B,SAAO,IAAI,gBAAgB;GACvB,SAAS,kBAAkB,KAAK;GAChC,MAAM,UAAU;GACnB,CAAC;;CAGN,OAAO,OAAO,MAAc;AACxB,SAAO,IAAI,gBAAgB;GACvB,SAAS,kBAAkB,KAAK;GAChC,MAAM,UAAU;GACnB,CAAC;;CAGN,OAAO,UAAU,OAAiB;AAC9B,SAAO,IAAI,gBAAgB;GACvB,SAAS,2BAA2B,MAAM,KAAK,KAAK,CAAC;GACrD,MAAM,UAAU;GACnB,CAAC;;CAGN,OAAO,iBAAiB,MAAyB;AAC7C,MAAI,MAAM,QAAQ,KAAK,CACnB,QAAO,IAAI,gBAAgB;GACvB,SAAS,iCAAiC,KAAK,KAAK,KAAK,CAAC;GAC1D,MAAM,UAAU;GACnB,CAAC;AAGN,SAAO,IAAI,gBAAgB;GACvB,SAAS,gCAAgC,KAAK;GAC9C,MAAM,UAAU;GACnB,CAAC;;;;;ACnDV,SAAgB,+BAA+B,GAA4B,GAAqC;AAC5G,KAAI,EAAE,WAAW,SAAS,EAAE,WAAW,KACnC,QAAO;AAGX,MAAK,EAAE,WAAW,YAAY,WAAW,EAAE,WAAW,YAAY,MAC9D,QAAO;AAGX,MAAK,EAAE,WAAW,aAAa,WAAW,EAAE,WAAW,aAAa,MAChE,QAAO;AAGX,QAAO;;;;ACZX,SAAS,iBAAiB,OAA+B;AACrD,QAAO,SAAS;;AAGpB,SAAgB,mBACZ,OACF;AACE,QAAO,GAAG,iBAAiB,MAAM,SAAS,CAAC,GAAG,iBAAiB,MAAM,UAAU,CAAC,GAAG,MAAM;;;;ACA7F,SAAgB,8BAA8B,OAA8D;CACxG,MAAM,UAAsD,MACvD,QAAQ,UAAU,YAAY;EAC3B,MAAM,MAAM,mBAAmB,QAAQ,WAAW;AAClD,MAAI,CAAC,SAAS,KACV,UAAS,OAAO,EAAE;AAGtB,WAAS,KAAK,KAAK,QAAQ;AAE3B,SAAO;IACR,EAAE,CAA8C;CAEvD,MAAM,SAAqC,EAAE;CAC7C,MAAM,OAAO,OAAO,KAAK,QAAQ;AACjC,MAAK,MAAM,OAAO,MAAM;EACpB,MAAM,QAAQ,QAAQ;EACtB,MAAM,QAAQ,MAAM;AAEpB,MAAI,MAAM,WAAW,GAAG;AACpB,UAAO,KAAK,MAAM;AAClB;;EAGJ,MAAM,WAA0B,EAAE;AAElC,OAAK,MAAM,WAAW,OAAO;AACzB,OAAI,CAAC,QAAQ,YAAY,QAAQ,SAAS,WAAW,EACjD;GAGJ,MAAM,SAA0B;IAC5B,MAAM;IACN,mBAAmB,QAAQ,WAAW,qBAAqBA,mBAAiB;IAC5E,UAAU,QAAQ;IACrB;AAED,YAAS,KAAK,OAAO;;EAGzB,IAAI;AAEJ,MACI,SAAS,SAAS,KAClB,SAAS,WAAW,MAAM,OAQ1B,kBAAiB,CANe;GAC5B,MAAM;GACN,mBAAmBA,mBAAiB;GACpC;GACH,CAEwB;AAG7B,SAAO,KAAK;GACR,YAAY;IACR,GAAG,MAAM;IACT,mBAAmBA,mBAAiB;IACvC;GACD,UAAU;GACb,CAAC;;AAGN,QAAO;;;;ACtEX,IAAa,2BAAb,MAAqE;CACjE,QAA4D,EAAE;CAE9D,YAAY,QAAmC,EAAE,EAAE;AAC/C,OAAK,QAAQ,MAAM;;CAGvB,MAAM,QACF,SACuC;EACvC,MAAM,MAAM,mBAAmB;GAC3B,MAAM,QAAQ;GACd,WAAW,QAAQ;GACnB,UAAU,QAAQ;GACrB,CAAC;EAEF,MAAM,QAAQ,KAAK,MAAM;AACzB,MAAI,MACA,QAAO;AAGX,SAAO;;CAGX,QAAQ,OAAkC;AACtC,OAAK,QAAQ,8BAA8B,MAAM,CAC5C,QAAQ,MAAM,YAAY;GACvB,MAAM,MAAM,mBAAmB,QAAQ,WAAW;AAClD,QAAK,OAAO;AACZ,UAAO;KACR,EAAE,CAA4C;;;;;AChC7D,SAAgB,yBACZ,SACA,QACF;AACE,KAAI,OAAO,WAAW,YAClB,QAAO;AAGX,KAAI,OAAO,WAAW,WAClB,QAAO,OAAO,QAAQ;AAG1B,KAAI,CAAC,OACD,QAAO;AAGX,QAAO,CAAC;;;;ACfZ,IAAa,cAAb,MAAa,oBAAoB,YAAY;CACzC,YAAY,SAAkB,MAAsB;AAChD,QAAM;GACF;GACA;GACH,CAAC;;CAGN,SAAS,MAAmB;AACxB,OAAK,OAAO,KAAK,KAAK;;CAG1B,UAAU,MAAqB;AAC3B,OAAK,OAAO,KAAK,GAAG,KAAK;;CAG7B,OAAO,kBAAkB,MAAc;AACnC,SAAO,IAAI,YACP,oDAAoD,QACpD,UAAU,2BACb;;CAGL,OAAO,0BAA0B;AAC7B,SAAO,IAAI,YACP,6CACA,UAAU,iCACb;;CAGL,OAAO,0BAA0B;AAC7B,SAAO,IAAI,YACP,uCACA,UAAU,iCACb;;;;;;;;;ACnBT,IAAa,eAAb,MAAmD;CAC/C;CAEA,YAAY,aAA+B,EAAE,EAAE;AAC3C,OAAK,aAAa;;CAGtB,kBACI,MACA,WACK;AACL,OAAK,WAAW,QAAQ;;CAG5B,mBAA0B,YAA8B;EACpD,MAAM,OAAO,OAAO,KAAK,WAAW;AACpC,OAAK,MAAM,OAAO,KACd,MAAK,kBAAkB,KAAK,WAAW,KAAM;;;;;;CAQrD,MAAM,SAAS,QAAoB,KAAgE;AAC/F,MAAI,CAAC,OAAO,KACR,QAAO;GACH,SAAS,yBAAyB,OAAO,OAAO,OAAO;GACvD,QAAQ,CACJ,gBAAgB;IACZ,MAAM,EAAE;IACR,SAAS;IACT,MAAM,UAAU;IACnB,CAAC,CACL;GACJ;AAEL,MACI,IAAI,WACJ,IAAI,QAAQ,SAAS,KACrB,IAAI,QAAQ,SAAS,OAAO,KAAK,CAEjC,QAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;AAGrE,MACI,IAAI,WACJ,IAAI,QAAQ,SAAS,KACrB,CAAC,IAAI,QAAQ,SAAS,OAAO,KAAK,CAElC,QAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;EAGrE,MAAM,SAAyB,EAAE;EAEjC,MAAM,YAAY,KAAK,WAAW,OAAO;AACzC,MAAI,CAAC,WAAW;AAEZ,UAAO,KAAK,gBAAgB;IACxB,MAAM,CAAC,OAAO,KAAK;IACnB,SAAS,cAAc,OAAO,KAAK;IACnC,MAAM,UAAU;IACnB,CAAC,CAAC;AAEH,UAAO;IACH,SAAS,yBAAyB,OAAO,OAAO,OAAO;IACvD;IACH;;AAGL,MAAI;AACA,UAAO,MAAM,UAAU,SAAS,QAAQ;IACpC,GAAG;IACH,YAAY;KACR,GAAG,KAAK;KACR,GAAI,IAAI,cAAc,EAAE;KAC3B;IACJ,CAAC;UACE;AACJ,UAAO,KAAK,gBAAgB;IACxB,MAAM,CAAC,OAAO,KAAK;IACnB,SAAS,OAAO,OAAO,KAAK;IAC5B,MAAM,UAAU;IACnB,CAAC,CAAC;AAEH,UAAO;IACH,SAAS,yBAAyB,OAAO,OAAO,OAAO;IACvD;IACH;;;CAIT,MAAM,eAAe,QAAoB,KAA8C;EACnF,MAAM,SAAyB,EAAE;AAEjC,MAAI;GACA,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,IAAI;AAChD,OAAI,QAAQ,QACR;AAGJ,OAAI,QAAQ,OACR,QAAO,KAAK,GAAG,QAAQ,OAAO;WAE7B,GAAG;AACR,OAAI,aAAa,YACb,OAAM;;EAId,MAAM,QAAQ,IAAI,YAAY,cAAc,OAAO,KAAK,qBAAqB;AAC7E,QAAM,UAAU,OAAO;AAEvB,QAAM;;;;;ACzHd,IAAa,aAAb,MAAa,WAAkC;CAC3C;CAEA;CAEA,YACI,OAA4B,EAAE,EAC9B,4BAAyB,IAAI,KAAK,EACpC;AACE,OAAK,OAAO;AACZ,OAAK,YAAY;;CAGrB,IAAiB,KAAa,OAAiB;AAC3C,OAAK,KAAK,OAAO;AACjB,OAAK,UAAU,OAAO,IAAI;;CAG9B,IAAiB,KAAiB;AAC9B,MAAI,OAAO,KAAK,KACZ,QAAO,KAAK,KAAK;AAGrB,QAAM,IAAI,MAAM,oBAAoB,IAAI,kBAAkB;;CAG9D,IAAI,KAAsB;AACtB,SAAO,OAAO,KAAK;;CAGvB,aAAa,KAAoB;AAC7B,OAAK,UAAU,IAAI,IAAI;;CAG3B,YAAY,KAAuB;AAC/B,SAAO,KAAK,UAAU,IAAI,IAAI;;CAGlC,QAAQ;AACJ,SAAO,IAAI,WAAW,EAAE,GAAG,KAAK,MAAM,EAAE,IAAI,IAAI,KAAK,UAAU,CAAC;;;;;AC/CxE,SAAgB,8BACZ,QAAsC,EAAE,EAChB;AACxB,QAAO;EACH,YAAY,MAAM,cAAc,EAAE;EAClC,MAAM,MAAM,QAAQ,EAAE;EACtB,MAAM,MAAM,QAAQ,IAAI,YAAY;EACpC,SAAS,MAAM,WAAW,EAAE;EAC5B,SAAS,MAAM,WAAW,EAAE;EAC/B;;;;ACZL,IAAY,sBAAL,yBAAA,qBAAA;AACH,qBAAA,aAAA;AACA,qBAAA,WAAA;;KACH;AAED,IAAY,kBAAL,yBAAA,iBAAA;AAEH,iBAAA,kBAAA;AACA,iBAAA,kBAAA;AAGA,iBAAA,aAAA;AACA,iBAAA,kBAAA;AACA,iBAAA,mBAAA;AACA,iBAAA,mBAAA;AAGA,iBAAA,mBAAA;AACA,iBAAA,6BAAA;AAGA,iBAAA,uBAAA;AACA,iBAAA,yBAAA;AACA,iBAAA,qBAAA;AAGA,iBAAA,sBAAA;AACA,iBAAA,0BAAA;AAGA,iBAAA,oBAAA;;KACH;;;AC5BD,SAAgB,sBAAsB,OAAwD;AAC1F,QAAO,gBAAgB,MAAM;;AAGjC,SAAgB,uBAAuB,OAA0D;AAC7F,QAAO,iBAAiB,MAAM;;;;ACHlC,IAAa,gCAAb,cAAmD,UAAgC;CAC/E,aAAsB;AAClB,QAAM,YAAY;AAElB,OAAK,MACD,SACA,gBACI,EAAE,MACE,EAAE,QAAQ,CACL,IAAI,EAAE,CACN,IAAI,IAAI,CAChB,CACJ,CACJ;AAED,OAAK,MACD,UACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;;;;;AC1BT,SAAgB,uBAGZ,MACoB;AACpB,QAAO;;;;ACPX,IAAY,oBAAL,yBAAA,mBAAA;;;;AAIH,mBAAA,eAAA;;;;AAIA,mBAAA,UAAA;;;;AAIA,mBAAA,UAAA;;;;AAIA,mBAAA,qBAAA;;;;AAIA,mBAAA,gBAAA;;;;AAIA,mBAAA,iBAAA;;;;AAKA,mBAAA,cAAA;;;;AAKA,mBAAA,wBAAA;;KAIH;AAED,MAAa,mBAAmB;CAC5B,SAAS;CACT,UAAU;CACV,oBAAoB;CACpB,aAAa;CACb,aAAa;CACb,iBAAiB;CACpB;;;AC1CD,IAAa,4BAAb,cAEU,UAA+B;CACrC,aAAsB;AAClB,QAAM,YAAY;AAElB,OAAK,MACD,SACA,gBACI,EAAE,YAAY,EAAE,CAAC,CACpB,CACJ;AAED,OAAK,MACD,UACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;;;;;AClBT,IAAa,4BAAb,MAE8B;CAC1B;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,2BAA8B;;CAGvD,MAAM,WAAW,KAAkD;AAC/D,MAAI,CAAC,IAAI,KAAK,IAAI,kBAAkB,WAAW,CAC3C,QAAO;AAGX,MAAI,IAAI,KAAK,YAAY,kBAAkB,WAAW,CAClD,QAAO,IAAI,KAAK,IAAO,kBAAkB,WAAW;EAIxD,MAAM,OAAO,IAAI,KAAK,IAAO,kBAAkB,WAAW;AAE1D,MAAI,KAAK,IAAI,kBAAkB,YAAY,KAAK;AAChD,MAAI,KAAK,aAAa,kBAAkB,WAAW;AAEnD,SAAO;;CAGX,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,MAAM;EAE9C,MAAM,OAAO,MAAM,KAAK,WAAW,IAAI;AACvC,MAAI,CAAC,KACD,QAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAM,gBAAgB;IACtB,SAAS;IACT,MAAM,IAAI;IACb,CAAC,CACL;GACJ;AAGL,OAAK,SAAS,OAAO,MAAM;AAI3B,SAAO,EAAE,SAAS,yBAFH,MAAS,OAAO,MAAM,CAEa,KAAU,EAAE,OAAO,OAAO,EAAE;;CAGlF,SACI,OACF;AACE,MAAI,MAAM,QAAQ,MAAM,EAAE;AACtB,QAAK,MAAM,WAAW,MAClB,MAAK,SAAS,QAAQ;AAG1B;;AAGJ,MAAI,SAAS,MAAM,EAAE;GACjB,MAAM,OAAO,OAAO,KAAK,MAAM;AAC/B,QAAK,MAAM,OAAO,MAAM;IACpB,MAAM,QAAQ,MAAM;AAEpB,QAAI,SAAS,MAAM,IAAI,MAAM,QAAQ,MAAM,EAAE;AACzC,UAAK,SAAS,MAAM;AACpB;;AAGJ,QACI,QAAQ,YACR,OAAO,UAAU,UACnB;KACE,MAAM,YAAY,MAAM,MAAM,uBAAuB;AACrD,SAAI,aAAa,UAAU,OAAO,KAAA,EAC9B,OAAM,OAAO,IAAI,OAAO,UAAU,IAAI,UAAU,MAAM,GAAG;;;;;;;;AC/EjF,IAAa,gCAAb,MAAuE;CACnE;CAEA;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,+BAA+B;AACpD,OAAK,sBAAsB,IAAI,2BAA2B;;CAG9D,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,MAAM;EAE9C,MAAM,OAAO,MAAM,KAAK,oBAAoB,WAAW,IAAI;AAC3D,MAAI,CAAC,KACD,QAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAM,gBAAgB;IACtB,SAAS;IACT,MAAM,IAAI;IACb,CAAC,CACL;GACJ;EAGL,MAAM,aAAa,cAAc,KAAK;EACtC,MAAM,OAAO,OAAO,KAAK,WAAW;EAEpC,MAAM,SAAyB,EAAE;AACjC,OAAK,MAAM,OAAO,KAEd,KADc,OAAO,MAAM,QAAQ,IAAI,KACzB,GACV,QAAO,KAAK,sBAAsB;GAC9B,MAAM,gBAAgB;GACtB,SAAS,iBAAiB,IAAI;GAC9B,MAAM,CAAC,GAAG,IAAI,MAAM,IAAI;GAC3B,CAAC,CAAC;AAIX,SAAO;GACH,SAAS,yBAAyB,OAAO,WAAW,GAAG,OAAO,OAAO;GACrE;GACH;;;;;AChDT,IAAa,2BAAb,cAA8C,UAA2B;CACrE,aAAsB;AAClB,QAAM,YAAY;AAElB,OAAK,MACD,qBACA,gBACI,EAAE,KAAK,iBAAiB,CACnB,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,YACA,gBACI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CACtD,CACJ;AAED,OAAK,MACD,UACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;;;;;AC3BT,IAAa,2BAAb,MAAkE;CAC9D;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,0BAA0B;;CAGnD,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,MAAM;EAE9C,IAAI,QAAQ;EAEZ,MAAM,oBAAoB,OAAO,qBAC7B,iBAAiB;EAErB,MAAM,SAAS,IAAI,aAAa,IAAI,WAAW;EAC/C,MAAM,SAAyB,EAAE;AAEjC,OAAK,MAAM,eAAe,OAAO,UAAU;GACvC,MAAM,OAAO,CACT,GAAI,IAAI,QAAQ,EAAE,EAClB,GAAI,YAAY,OAAO,CAAC,YAAY,KAAK,GAAG,EAAE,CACjD;GAED,MAAM,UAAU,MAAM,OAAO,SAAS,aAAa;IAC/C,GAAG;IACH;IACH,CAAC;AAEF,OAAI,QAAQ,SAAS;AACjB,QAAI,sBAAsB,iBAAiB,YACvC,QAAO;KACH,SAAS,yBAAyB,MAAM,OAAO,OAAO;KACtD,QAAQ,EAAE;KACb;AAGL;UACG;AACH,QAAI,QAAQ,OACR,QAAO,KAAK,iBAAiB;KACzB,SAAS,kCAAkC,YAAY,KAAK;KAC5D,QAAQ,QAAQ,UAAU,EAAE;KAC5B;KACH,CAAC,CAAC;AAGP,QAAI,sBAAsB,iBAAiB,UACvC,QAAO;KACH,SAAS,yBAAyB,OAAO,OAAO,OAAO;KACvD,QAAQ,CACJ,iBAAiB;MACb,SAAS,8CAA8C,iBAAiB,UAAU;MAClF;MACA,MAAM,IAAI;MACb,CAAC,CACL;KACJ;AAGL;;;AAIR,MAAI,QAAQ,EACR,QAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;AAGrE,SAAO;GACH,SAAS,yBAAyB,OAAO,OAAO,OAAO;GACvD,QAAQ,CACJ,iBAAiB;IACb,SAAS,8CAA8C,iBAAiB,UAAU;IAClF,QAAQ,UAAU,EAAE;IACpB,MAAM,IAAI;IACb,CAAC,CACL;GACJ;;;;;AClFT,SAAgB,kBACZ,OACyC;AACzC,QAAO,MAAM,SAAS,kBAAkB;;;;ACF5C,IAAa,sBAAb,cAAyC,UAAsB;CAC3D,aAAsB;AAClB,QAAM,YAAY;AAElB,OAAK,MAAM,SAAS,gBAChB,EAAE,MAAM,CACH,GAAG,EAAE,IAAI,MAAM,CAAC,CAChB,GAAG,EAAE,QAAQ,CAAC,CACd,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CAAC;AACF,OAAK,MAAM,OAAO,gBACd,EAAE,MAAM,CACH,GAAG,EAAE,IAAI,MAAM,CAAC,CAChB,GAAG,EAAE,QAAQ,CAAC,CACd,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CAAC;AAEF,OAAK,MAAM,UAAU,gBACjB,EAAE,SAAS,CACN,GAAG,EAAE,WAAW,CAAC,CACjB,GAAG,EAAE,MAAM,CAAC,CACZ,UAAU,CAClB,CAAC;;;;;AC1BV,SAASC,gBAAc,OAAa;AAChC,QAAO,IAAI,KAAK,MAAM,aAAa,EAAE,MAAM,UAAU,EAAE,MAAM,SAAS,CAAC;;AAG3E,SAASC,SAAO,OAAsC;AAClD,KAAI,OAAO,UAAU,SACjB,QAAO,IAAI,KAAK,MAAM;AAG1B,KAAI,OAAO,UAAU,SACjB,QAAO,IAAI,KAAK,MAAM;AAG1B,QAAO;;AAGX,IAAa,sBAAb,MAA6D;CACzD;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,qBAAqB;;CAG9C,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,MAAM;EAE9C,IAAI;AAEJ,MAAI,IAAI,KAAK,IAAI,kBAAkB,KAAK,CACpC,KAAI,IAAI,KAAK,YAAY,kBAAkB,KAAK,CAC5C,OAAM,IAAI,KAAK,IAAU,kBAAkB,KAAK;OAC7C;AAEH,SAAMD,gBAAcC,SAAO,IAAI,KAAK,IAAI,kBAAkB,KAAK,CAAC,CAAC;AAEjE,OAAI,KAAK,IAAI,kBAAkB,MAAM,IAAI;AACzC,OAAI,KAAK,aAAa,kBAAkB,KAAK;;MAGjD,OAAMD,gCAAc,IAAI,MAAM,CAAC;AAGnC,MAAI,OAAO,OAAO;GACd,MAAM,QAAQA,gBAAcC,SAAO,OAAO,MAAM,CAAC;AACjD,OAAI,MAAM,MACN,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;;AAI1E,MAAI,OAAO,KAAK;GACZ,MAAM,MAAMD,gBAAcC,SAAO,OAAO,IAAI,CAAC;AAC7C,OAAI,MAAM,IACN,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;;AAI1E,SAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;;;;;ACxDzE,IAAa,8BAAb,cAAiD,UAA8B;CAC3E,aAAsB;AAClB,QAAM,YAAY;AAElB,OAAK,MACD,QACA,gBACI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAC7B,CACJ;AAED,OAAK,MACD,MACA,gBACI,EAAE,MAAM,CACX,CACJ;AAED,OAAK,MACD,YACA,gBACI,EAAE,MAAM,CACH,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,WACA,gBACI,EAAE,MAAM,CACH,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,aACA,gBACI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CACrB,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;;;;;AC/CT,IAAa,0BAAb,cAA6C,UAA0B;CACnE,aAAsB;AAClB,OAAK,MACD,SACA,gBACI,EAAE,MAAM,EAAE,QAAQ,CAAC,CACd,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,UACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;;;;;AClBT,IAAa,0BAAb,MAAiE;CAC7D;CAEA;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,yBAAyB;AAC9C,OAAK,gBAAgB,IAAI,6BAA6B;;CAG1D,MAAM,WAAW,KAAmE;AAChF,MAAI,CAAC,IAAI,KAAK,IAAI,WAAW,CACzB,QAAO;AAGX,MAAI,IAAI,KAAK,YAAY,WAAW,CAChC,QAAO,IAAI,KAAK,IAAwB,WAAW;EAGvD,MAAM,OAAO,MAAM,KAAK,cAAc,IAAI,IAAI,KAAK,IAAI,WAAW,CAAC;AAEnE,MAAI,KAAK,IAAI,YAAY,KAAK;AAC9B,MAAI,KAAK,aAAa,WAAW;AAEjC,SAAO;;CAGX,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,MAAM;EAE9C,MAAM,OAAO,MAAM,KAAK,WAAW,IAAI;AACvC,MAAI,CAAC,KACD,QAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAM,gBAAgB;IACtB,SAAS;IACT,MAAM,IAAI;IACb,CAAC,CACL;GACJ;AAGL,MAAI,CAAC,OAAO,SAAS,OAAO,MAAM,WAAW,EACzC,QAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;EAGrE,MAAM,cAAc,OAAO,MAAM,SAAS,KAAK,KAAK;AACpD,MAAI,YACA,QAAO,EAAE,SAAS,yBAAyB,aAAa,OAAO,OAAO,EAAE;AAG5E,SAAO;GACH,SAAS,yBAAyB,aAAa,OAAO,OAAO;GAC7D,QAAQ,CACJ,sBAAsB;IAClB,MAAM,gBAAgB;IACtB,SAAS,YAAY,KAAK,KAAK;IAC/B,MAAM,IAAI;IACb,CAAC,CACL;GACJ;;;;;ACnET,IAAa,mCAAb,cAAsD,UAAmC;CACrF,aAAsB;;;;ACA1B,IAAa,mCAAb,MAA0E;CACtE;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,kCAAkC;;CAG3D,MAAM,SAAS,OAA6D;AAIxE,SAAO,EAAE,SAAS,yBAAyB,OAH5B,MAAM,KAAK,UAAU,IAAI,MAAM,EAGU,OAAO,EAAE;;;;;ACTzE,IAAa,4BAAb,cAA+C,UAA4B;CACvE,aAAsB;AAClB,QAAM,YAAY;AAElB,OAAK,MACD,qBACA,gBACI,EAAE,KAAK,iBAAiB,CACnB,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,kBACA,gBACI,EAAE,QAAQ,CACL,IAAI,EAAE,CACN,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAC9B,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AACD,OAAK,MACD,yBACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AACD,OAAK,MACD,4BACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,6BACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,UACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;;;;;AC3DT,IAAa,4BAAb,MAAmE;CAC/D;CAEA;CAEA;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,2BAA2B;AAChD,OAAK,oBAAoB,IAAI,yBAAyB;AACtD,OAAK,sBAAsB,IAAI,2BAA2B;;CAG9D,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,MAAM;EAE9C,MAAM,WAAW,MAAM,KAAK,kBAAkB,WAAW,IAAI;AAC7D,MAAI,CAAC,SACD,QAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAM,gBAAgB;IACtB,SAAS;IACT,MAAM,IAAI;IACb,CAAC,CACL;GACJ;EAGL,MAAM,aAAa,MAAM,KAAK,oBAAoB,WAAW,IAAI;AACjE,MAAI,CAAC,WACD,QAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAM,gBAAgB;IACtB,SAAS;IACT,MAAM,IAAI;IACb,CAAC,CACL;GACJ;AAIL,OAD+B,OAAO,6BAA6B,SAG/D,SAAS,aACT,SAAS,cAAc,SAEvB,QAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;EAGrE,IAAI;AACJ,MAAI,OAAO,eACP,KAAI,MAAM,QAAQ,OAAO,eAAe,CACpC,QAAO,OAAO;MAEd,QAAO,CAAC,OAAO,eAAe;OAE/B;AACH,UAAO;IACH;IACA;IACA;IACA;IACH;AAED,UAAO,oBAAoB,iBAAiB;;AAIhD,MAAI,EAD0B,OAAO,yBAAyB,OAClC;GACxB,MAAM,eAAe,OAAO,KAAK,WAAW;GAC5C,MAAM,YAAuB,EAAE;AAC/B,QAAK,MAAM,eAAe,cAAc;IACpC,IAAI,WAAqB;AAEzB,SAAK,MAAM,OAAO,KACd,KACI,gBAAgB,OAChB,YAAY,SAAS,IAAI,EAC3B;AACE,gBAAW;AACX;;AAIR,QAAI,SACA,WAAU,KAAK,YAAY;;AAInC,OAAI,UAAU,SAAS,EACnB,MAAK,KAAK,GAAG,UAAU;;EAI/B,IAAI,QAAQ;EACZ,IAAI,YAAY;AAEhB,OAAK,MAAM,OAAO,MAAM;AACpB,OAAI,CAAC,eAAe,YAAY,IAAI,CAChC;AAGJ,eAAY;GAEZ,IAAI,UAAoB;GAExB,MAAM,iBAAiB,WAAW;AAElC,OACI,mBAAmB,QACnB,OAAO,yBAEP,WAAU;YAEV,mBAAmB,SAAS,WAC5B,mBAAmB,SAAS,UAE5B,WAAU;AAGd,OAAI,SAAS;AACT,QAAI,OAAO,sBAAsB,iBAAiB,YAC9C,QAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;AAGrE;UACG;AACH,QAAI,OAAO,sBAAsB,iBAAiB,UAC9C,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;AAGtE;;;AAIR,MAAI,CAAC,UACD,QAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;AAGrE,SAAO,EAAE,SAAS,yBAAyB,QAAQ,GAAG,OAAO,OAAO,EAAE;;;;;ACzJ9E,IAAY,qBAAL,yBAAA,oBAAA;AACH,oBAAA,WAAA;AACA,oBAAA,YAAA;AACA,oBAAA,aAAA;AACA,oBAAA,YAAA;;KACH;;;ACHD,SAAgB,uBACZ,UACF;AACE,QAAO,aAAa,mBAAmB,UACnC,aAAa,mBAAmB,WAChC,aAAa,mBAAmB;;AAGxC,SAAgB,wBACZ,UACF;AACE,QAAO,aAAa,mBAAmB,WACvC,aAAa,mBAAmB;;AAGpC,SAAgB,uBACZ,UACF;AACE,QAAO,aAAa,mBAAmB;;;;ACd3C,IAAa,sBAAb,cAAyC,UAAsB;CAC3D,aAAsB;AAClB,QAAM,YAAY;AAElB,OAAK,MAAM,eAAe,gBACtB,EAAE,QAAQ,CACL,IAAI,EAAE,CAAC,IAAI,EAAE,CACb,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CAAC;AACF,OAAK,MAAM,gBAAgB,gBACvB,EAAE,QAAQ,CACL,IAAI,EAAE,CACN,IAAI,GAAG,CACP,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CAAC;AACF,OAAK,MAAM,eAAe,gBACtB,EAAE,QAAQ,CACL,IAAI,EAAE,CACN,IAAI,IAAI,CACR,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CAAC;AAEF,OAAK,MAAM,SAAS,gBAChB,EAAE,MAAM,CACH,GAAG,EAAE,IAAI,UAAU,CAAC,CACpB,GAAG,EAAE,IAAI,MAAM,CAAC,CAChB,GAAG,EAAE,QAAQ,CAAC,CACd,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CAAC;AACF,OAAK,MAAM,OAAO,gBACd,EAAE,MAAM,CACH,GAAG,EAAE,IAAI,UAAU,CAAC,CACpB,GAAG,EAAE,IAAI,MAAM,CAAC,CAChB,GAAG,EAAE,QAAQ,CAAC,CACd,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CAAC;AAEF,OAAK,MACD,YACA,gBACI,EAAE,KAAK,mBAAmB,CACrB,GAAG,EAAE,MAAM,CAAC,CACZ,GAAG,EAAE,WAAW,CAAC,CACjB,UAAU,CAClB,CACJ;AAED,OAAK,MACD,UACA,gBACI,EAAE,SAAS,CACN,GAAG,EAAE,WAAW,CAAC,CACjB,GAAG,EAAE,MAAM,CAAC,CACZ,UAAU,CAClB,CACJ;;;;;ACjET,MAAM,YAAY;AAElB,SAAS,cAAc,OAAa,SAAgB;CAChD,MAAM,OAAO,UAAU,IAAI,KAAK,QAAQ,mBAAG,IAAI,MAAM;AACrD,MAAK,SAAS,MAAM,UAAU,EAAE,MAAM,YAAY,CAAC;AAEnD,QAAO;;AAGX,SAAS,OACL,OACA,SACK;AACL,KAAI,OAAO,UAAU,UAAU;AAC3B,MAAI,UAAU,KAAK,MAAM,EAAE;GACvB,MAAM,QAAQ,MAAM,MAAM,IAAI;GAE9B,MAAM,aAAa,OAAO,MAAM,GAAG;GACnC,MAAM,eAAe,OAAO,MAAM,GAAG;GACrC,MAAM,eAAe,MAAM,OAAO,KAAA,IAAY,OAAO,MAAM,GAAG,GAAG;AAEjE,OACI,OAAO,SAAS,WAAW,IAC3B,OAAO,SAAS,aAAa,IAC7B,OAAO,SAAS,aAAa,EAC/B;IACE,MAAM,OAAO,UAAU,IAAI,KAAK,QAAQ,mBAAG,IAAI,MAAM;AACrD,SAAK,SAAS,YAAY,cAAc,cAAc,EAAE;AAExD,WAAO;;;AAIf,SAAO,IAAI,KAAK,MAAM;;AAG1B,KAAI,OAAO,UAAU,SACjB,QAAO,IAAI,KAAK,MAAM;AAG1B,QAAO;;AAGX,IAAa,sBAAb,MAA6D;CACzD;CAEA,cAAc;AACV,OAAK,YAAY,IAAI,qBAAqB;;CAG9C,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,MAAM;EAE9C,IAAI;AAEJ,MAAI,IAAI,KAAK,IAAI,kBAAkB,KAAK,CACpC,KAAI,IAAI,KAAK,YAAY,kBAAkB,KAAK,CAC5C,OAAM,IAAI,KAAK,IAAU,kBAAkB,KAAK;OAC7C;AAEH,SAAM,OAAO,IAAI,KAAK,IAAI,kBAAkB,KAAK,CAAC;AAElD,OAAI,KAAK,IAAI,kBAAkB,MAAM,IAAI;AACzC,OAAI,KAAK,aAAa,kBAAkB,KAAK;;MAGjD,uBAAM,IAAI,MAAM;AAGpB,MAAI,OAAO,OAAO;GACd,MAAM,QAAQ,cAAc,OAAO,OAAO,OAAO,IAAI,EAAE,IAAI;AAC3D,OAAI,MAAM,MACN,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;;AAI1E,MAAI,OAAO,KAAK;GACZ,MAAM,MAAM,cAAc,OAAO,OAAO,KAAK,IAAI,EAAE,IAAI;AACvD,OAAI,MAAM,IACN,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;;AAI1E,MAAI,OAAO,UAAU;AACjB,OACI,uBAAuB,OAAO,SAAS,IACvC,OAAO;QAEH,IAAI,QAAQ,KAAK,OAAO,YACxB,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;;AAI1E,OACI,wBAAwB,OAAO,SAAS,IACxC,OAAO;QAEH,IAAI,SAAS,KAAK,OAAO,aACzB,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;;AAI1E,OACI,uBAAuB,OAAO,SAAS,IACvC,OAAO,aACT;IACE,MAAM,QAAQ,IAAI,KAAK,IAAI,aAAa,EAAE,GAAG,EAAE;IAC/C,MAAM,OAAQ,IAAI,SAAS,GAAG,MAAM,SAAS,IACvC,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,IAAI,KAAK;AAKlE,QAFkB,KAAK,MAAM,QADd,MAAO,KAAK,KAAK,IACW,KAEzB,OAAO,YACrB,QAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,OAAO,EAAE;;;AAK9E,SAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,OAAO,EAAE;;;;;AC3HzE,SAAgB,qBAIZ,MACA,MACqB;AACrB,QAAO;EACH,GAAG;EACH;EACH;;;;ACDL,MAAa,0BAA0B;EAClC,kBAAkB,YAAY,IAAI,0BAA0B;EAC5D,kBAAkB,aAAa,IAAI,2BAA2B;EAC9D,kBAAkB,kBAAkB,IAAI,+BAA+B;EACvE,kBAAkB,OAAO,IAAI,qBAAqB;EAClD,kBAAkB,WAAW,IAAI,yBAAyB;EAC1D,kBAAkB,qBAAqB,IAAI,kCAAkC;EAC7E,kBAAkB,cAAc,IAAI,2BAA2B;EAC/D,kBAAkB,OAAO,IAAI,qBAAqB;CACtD;;;ACFD,IAAa,sBAAb,MAAiE;CAC7D;CAEA;CAEA;CAEA;CAIA,YAAY,SAAqC;AAC7C,OAAK,WAAW,QAAQ;AAExB,OAAK,WAAW,QAAQ,YAAY;AACpC,OAAK,UAAU,QAAQ,WAAW;AAElC,MAAI,QAAQ,aACR,MAAK,eAAe,QAAQ;MAE5B,MAAK,eAAe,IAAI,aAAa,wBAAwB;;CAMrE,MAAgB,QACZ,OACA,YAGI,EAAE,EACkC;AACxC,SAAO,KAAK,SAAS,QAAQ;GACzB,MAAM;GACN,UAAU,UAAU,YAAY,KAAK;GACrC,SAAS,UAAU,WAAW,KAAK;GACtC,CAAC;;CAKN,MAAM,SAAS,KAAkD;AAC7D,MAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,EAAE;AAC1B,SAAM,KAAK,SAAS;IAChB,GAAG;IACH,MAAM,CAAC,IAAI,KAAK;IACnB,CAAC;AACF;;EAGJ,MAAM,EAAE,UAAU,EAAE,KAAK;EAEzB,MAAM,mBAAmB,QAAQ,oBAC7B,iBAAiB;EAErB,MAAM,SAAmB,EAAE;EAE3B,IAAI,QAAQ;EAEZ,MAAM,WAAW,IAAI,SAAS,IAAI,YAAY;AAE9C,OAAK,MAAM,QAAQ,IAAI,MAAM;GACzB,MAAM,UAAU,MAAM,KAAK,QAAQ,MAAM;IACrC,SAAS,IAAI;IACb,UAAU,IAAI;IACjB,CAAC;AACF,OAAI,CAAC,SAAS;AACV,WAAO,KAAK,gBAAgB;KACxB,MAAM,UAAU;KAChB,SAAS,OAAO,KAAK;KACrB,MAAM,CAAC,KAAK;KACf,CAAC,CAAC;AAEH,QAAI,qBAAqB,iBAAiB,WAAW;KACjD,MAAM,QAAQ,gBAAgB,iBAAiB,IAAI,KAAK;AACxD,WAAM,UAAU,OAAO;AACvB,WAAM;;AAGV;;GAGJ,MAAM,WAAW,QAAQ,YAAY,EAAE;AACvC,OAAI,SAAS,WAAW,GAAG;AACvB,QAAI,qBAAqB,iBAAiB,YACtC;AAGJ;AAEA;;GAGJ,MAAM,OAAO,SAAS,OAAO;AAC7B,QAAK,IAAI,kBAAkB,oBAAoB,QAAQ;GAEvD,MAAM,yBAAyB,QAAQ,WAAW,qBAC9C,iBAAiB;GAErB,MAAM,kBAAoC;IACtC,MAAM,kBAAkB;IACxB,mBAAmB;IACnB,UAAU;IACb;GAED,MAAM,mBAAmB,MAAM,KAAK,aAAa,SAC7C,iBACA,8BAA8B;IAC1B,SAAS,QAAQ;IACjB,SAAS,QAAQ;IACjB;IACH,CAAC,CACL;AAED,OAAI,iBAAiB,SAAS;AAC1B,QAAI,qBAAqB,iBAAiB,YACtC;AAGJ;UACG;AACH,WAAO,KAAK,uBAAuB;KAC/B,MAAM,UAAU;KAChB,QAAQ,iBAAiB,UAAU,EAAE;KACrC,SAAS,OAAO,QAAQ,WAAW,KAAK;KACxC,MAAM,CAAC,QAAQ,WAAW,KAAK;KAClC,CAAC,CAAC;AAEH,QAAI,qBAAqB,iBAAiB,WAAW;KACjD,MAAM,QAAQ,gBAAgB,iBAAiB,QAAQ,WAAW,KAAK;AACvE,WAAM,UAAU,OAAO;AACvB,WAAM;;AAGV;;;AAIR,MAAI,QAAQ,EACR;AAGJ,MAAI,OAAO,WAAW,EAClB,OAAM,gBAAgB,UAAU,IAAI,KAAK;OACtC;GACH,MAAM,QAAQ,gBAAgB,iBAAiB,IAAI,KAAK;AACxD,SAAM,UAAU,OAAO;AACvB,SAAM;;;CAId,MAAM,cAAc,KAAkD;AAClE,SAAO,KAAK,SAAS;GACjB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,EAAE;IACrB,kBAAkB,iBAAiB;IACtC;GACJ,CAAC;;CAKN,MAAM,YAAY,KAAkD;AAChE,SAAO,KAAK,SAAS;GACjB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,EAAE;IACrB,kBAAkB;KACd,kBAAkB;KAClB,kBAAkB;KAClB,kBAAkB;KACrB;IACJ;GACJ,CAAC;;CAGN,MAAM,iBAAiB,KAAkD;AACrE,SAAO,KAAK,YAAY;GACpB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,EAAE;IACrB,kBAAkB,iBAAiB;IACtC;GACJ,CAAC"}

package/dist/permission/evaluator/module.d.ts

@@ -1,17 +1,17 @@
 import type { IPolicyEngine } from '../../policy';
 import type { IPermissionProvider } from '../provider';
-import type { PermissionBinding } from '../types.ts';
+import type { PermissionPolicyBinding } from '../types.ts';
 import type { IPermissionEvaluator, PermissionEvaluationContext, PermissionEvaluatorOptions } from './types.ts';
 export declare class PermissionEvaluator implements IPermissionEvaluator {
     protected provider: IPermissionProvider;
     protected policyEngine: IPolicyEngine;
     protected clientId?: string | null;
     protected realmId?: string | null;
-    constructor(options?: PermissionEvaluatorOptions);
+    constructor(options: PermissionEvaluatorOptions);
     protected findOne(input: string, overrides?: {
         realmId?: string | null;
         clientId?: string | null;
-    }): Promise<PermissionBinding | null>;
+    }): Promise<PermissionPolicyBinding | null>;
     evaluate(ctx: PermissionEvaluationContext): Promise<void>;
     evaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
     preEvaluate(ctx: PermissionEvaluationContext): Promise<void>;

package/dist/permission/evaluator/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/permission/evaluator/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAmB,aAAa,EAAkB,MAAM,cAAc,CAAC;AAUnF,OAAO,KAAK,EAAE,mBAAmB,EAAwB,MAAM,aAAa,CAAC;AAG7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEhH,qBAAa,mBAAoB,YAAW,oBAAoB;IAC5D,SAAS,CAAC,QAAQ,EAAG,mBAAmB,CAAC;IAEzC,SAAS,CAAC,YAAY,EAAG,aAAa,CAAC;IAEvC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBAItB,OAAO,GAAE,0BAA+B;cAwBpC,OAAO,CACnB,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC3B,GACD,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAoB/B,QAAQ,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IA8G1D,aAAa,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IAY/D,WAAW,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IAc7D,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;CAS3E"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/permission/evaluator/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAmB,aAAa,EAAE,MAAM,cAAc,CAAC;AAUnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEhH,qBAAa,mBAAoB,YAAW,oBAAoB;IAC5D,SAAS,CAAC,QAAQ,EAAG,mBAAmB,CAAC;IAEzC,SAAS,CAAC,YAAY,EAAG,aAAa,CAAC;IAEvC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBAItB,OAAO,EAAE,0BAA0B;cAe/B,OAAO,CACnB,KAAK,EAAE,MAAM,EACb,SAAS,GAAE;QACP,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KACtB,GACN,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAUrC,QAAQ,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IA8G1D,aAAa,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IAY/D,WAAW,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IAc7D,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;CAS3E"}

package/dist/permission/evaluator/types.d.ts

@@ -8,7 +8,7 @@ export interface IPermissionEvaluator {
     preEvaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
 }
 export type PermissionEvaluatorOptions = {
-    provider?: IPermissionProvider;
+    provider: IPermissionProvider;
     policyEngine?: IPolicyEngine;
     realmId?: string | null;
     clientId?: string | null;

package/dist/permission/evaluator/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/evaluator/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D,aAAa,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D,WAAW,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,MAAM,0BAA0B,GAAG;IACrC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,2BAA2B,CAAA;CACxC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/evaluator/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D,aAAa,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D,WAAW,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,MAAM,0BAA0B,GAAG;IACrC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,2BAA2B,CAAA;CACxC,CAAC"}

package/dist/permission/helpers/equal.d.ts

@@ -1,2 +1,3 @@
-export { isPermissionBindingEqual } from '@authup/core-kit';
+import type { PermissionPolicyBinding } from '../types';
+export declare function isPermissionPolicyBindingEqual(a: PermissionPolicyBinding, b: PermissionPolicyBinding): boolean;
 //# sourceMappingURL=equal.d.ts.map

package/dist/permission/helpers/equal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"equal.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/equal.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"equal.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/equal.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAExD,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAc9G"}

package/dist/permission/helpers/index.d.ts

@@ -1,4 +1,4 @@
-export * from './key';
 export * from './equal';
+export * from './key';
 export * from './merge';
 //# sourceMappingURL=index.d.ts.map

package/dist/permission/helpers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/index.ts"],"names":[],"mappings":"AAOA,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC"}

package/dist/permission/helpers/key.d.ts

@@ -1,2 +1,3 @@
-export { buildPermissionBindingKey } from '@authup/core-kit';
+import type { BasePermission } from '../types.ts';
+export declare function buildPermissionKey(input: BasePermission): string;
 //# sourceMappingURL=key.d.ts.map

package/dist/permission/helpers/key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/key.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/key.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAMlD,wBAAgB,kBAAkB,CAC9B,KAAK,EAAE,cAAc,UAGxB"}

package/dist/permission/helpers/merge.d.ts

@@ -1,2 +1,3 @@
-export { mergePermissionBindings } from '@authup/core-kit';
+import type { PermissionPolicyBinding } from '../types';
+export declare function mergePermissionPolicyBindings(input: PermissionPolicyBinding[]): PermissionPolicyBinding[];
 //# sourceMappingURL=merge.d.ts.map

package/dist/permission/helpers/merge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"merge.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/merge.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"merge.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/merge.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAQxD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,uBAAuB,EAAE,GAAI,uBAAuB,EAAE,CAiE1G"}