@baseplate-dev/project-builder-lib 0.6.4 → 0.6.6

package/dist/expression-parsers/authorizer/authorizer-expression-validator.js

@@ -0,0 +1,379 @@
+/**
+ * Validator for authorizer expressions.
+ *
+ * Validates that:
+ * - Model field references exist on the parent model
+ * - Auth field references are valid AuthContext properties
+ * - Role names exist in project config (warning only)
+ */
+import { authConfigSpec } from '#src/plugins/spec/auth-config-spec.js';
+import { visitAuthorizerExpression } from './authorizer-expression-visitor.js';
+/**
+ * Valid auth context field names that can be accessed.
+ */
+const VALID_AUTH_FIELDS = new Set(['userId']);
+/**
+ * Get role info from the project definition using the auth config spec.
+ *
+ * @param pluginStore - The plugin spec store
+ * @param definition - The raw project definition data
+ * @returns Role information including built-in status
+ */
+function getAuthRoleInfo(pluginStore, definition) {
+    const authConfig = pluginStore.use(authConfigSpec);
+    const roles = authConfig.getAuthConfig(definition)?.roles;
+    return {
+        allRoleNames: new Set(roles?.map((role) => role.name)),
+        autoAssignedRoleNames: new Set(roles?.filter((role) => role.autoAssigned).map((role) => role.name)),
+    };
+}
+/**
+ * Validate an authorizer expression AST against model and project context.
+ *
+ * @param ast - The parsed expression AST
+ * @param modelContext - Information about the parent model
+ * @param pluginStore - The plugin spec store for accessing auth config
+ * @param definition - The raw project definition data
+ * @returns Array of warnings (errors are thrown, warnings are returned)
+ *
+ * @example
+ * ```typescript
+ * const warnings = validateAuthorizerExpression(
+ *   ast,
+ *   { modelName: 'User', scalarFieldNames: new Set(['id', 'email']) },
+ *   pluginStore,
+ *   definition,
+ * );
+ * ```
+ */
+export function validateAuthorizerExpression(ast, modelContext, pluginStore, definition) {
+    const warnings = [];
+    const { allRoleNames, autoAssignedRoleNames } = getAuthRoleInfo(pluginStore, definition);
+    const assignableRoleNames = [...allRoleNames].filter((name) => !autoAssignedRoleNames.has(name));
+    function warnIfAutoAssignedRole(role, start, end) {
+        if (autoAssignedRoleNames.has(role)) {
+            const message = role === 'user'
+                ? `Role 'user' is an auto-assigned role. Use 'isAuthenticated' instead to check if the user is authenticated.`
+                : `Role '${role}' is an auto-assigned role and should not be used in authorizer expressions. Use assignable roles: ${assignableRoleNames.join(', ')}.`;
+            warnings.push({ message, start, end });
+        }
+    }
+    const validationVisitor = {
+        fieldComparison(node) {
+            if (node.left.type === 'fieldRef') {
+                validateFieldRef(node.left);
+            }
+            if (node.right.type === 'fieldRef') {
+                validateFieldRef(node.right);
+            }
+            // Type-check: warn if a model field is compared to an incompatible literal
+            const fieldRef = node.left.type === 'fieldRef' ? node.left : node.right;
+            const literalNode = node.left.type === 'literalValue'
+                ? node.left
+                : node.right.type === 'literalValue'
+                    ? node.right
+                    : null;
+            if (fieldRef.type === 'fieldRef' &&
+                fieldRef.source === 'model' &&
+                literalNode !== null) {
+                const fieldType = modelContext.fieldTypes.get(fieldRef.field);
+                if (fieldType) {
+                    validateLiteralTypeCompatibility(fieldRef.field, fieldType, modelContext.modelName, literalNode);
+                }
+            }
+        },
+        hasRole(node) {
+            // Warn if role doesn't exist (but allow - plugins may define roles)
+            if (allRoleNames.has(node.role)) {
+                warnIfAutoAssignedRole(node.role, node.roleStart, node.roleEnd);
+            }
+            else {
+                warnings.push({
+                    message: `Role '${node.role}' is not defined in the project configuration. Available roles: ${[...allRoleNames].join(', ')}.`,
+                    start: node.roleStart,
+                    end: node.roleEnd,
+                });
+            }
+        },
+        hasSomeRole(node) {
+            for (let i = 0; i < node.roles.length; i++) {
+                const role = node.roles[i];
+                const start = node.rolesStart[i];
+                const end = node.rolesEnd[i];
+                if (allRoleNames.has(role)) {
+                    warnIfAutoAssignedRole(role, start, end);
+                }
+                else {
+                    warnings.push({
+                        message: `Role '${role}' is not defined in the project configuration. Available roles: ${[...allRoleNames].join(', ')}.`,
+                        start,
+                        end,
+                    });
+                }
+            }
+        },
+        nestedHasRole(node) {
+            validateNestedRelation(node.relationName, node.relationStart, node.relationEnd, [node.role], [node.roleStart], [node.roleEnd]);
+        },
+        nestedHasSomeRole(node) {
+            validateNestedRelation(node.relationName, node.relationStart, node.relationEnd, node.roles, node.rolesStart, node.rolesEnd);
+        },
+        relationFilter(node) {
+            validateRelationFilter(node);
+        },
+        isAuthenticated() {
+            // No validation needed
+        },
+        binaryLogical(node, _ctx, visit) {
+            visit(node.left);
+            visit(node.right);
+        },
+    };
+    function validateNestedRelation(relationName, relationStart, relationEnd, roles, rolesStart, rolesEnd) {
+        const { relationInfo } = modelContext;
+        if (!relationInfo) {
+            // Can't validate without relation info
+            return;
+        }
+        const relation = relationInfo.get(relationName);
+        if (!relation) {
+            const availableRelations = [...relationInfo.keys()].join(', ');
+            warnings.push({
+                message: `Relation '${relationName}' does not exist on model '${modelContext.modelName}'.${availableRelations ? ` Available relations: ${availableRelations}.` : ''}`,
+                start: relationStart,
+                end: relationEnd,
+            });
+            return;
+        }
+        if (relation.referenceCount !== 1) {
+            warnings.push({
+                message: `Relation '${relationName}' has ${relation.referenceCount} foreign key references. Nested authorizer checks only support single-key relations.`,
+                start: relationStart,
+                end: relationEnd,
+            });
+            return;
+        }
+        // Validate each role exists on the foreign model's authorizer
+        for (const [i, role] of roles.entries()) {
+            if (!relation.foreignAuthorizerRoleNames.has(role)) {
+                const availableRoles = [...relation.foreignAuthorizerRoleNames].join(', ');
+                warnings.push({
+                    message: `Role '${role}' is not defined on model '${relation.foreignModelName}' authorizer.${availableRoles ? ` Available roles: ${availableRoles}.` : ''}`,
+                    start: rolesStart[i],
+                    end: rolesEnd[i],
+                });
+            }
+        }
+    }
+    function validateRelationFilter(node) {
+        const { relationInfo } = modelContext;
+        if (!relationInfo) {
+            return;
+        }
+        const relation = relationInfo.get(node.relationName);
+        if (!relation) {
+            const availableRelations = [...relationInfo.keys()].join(', ');
+            warnings.push({
+                message: `Relation '${node.relationName}' does not exist on model '${modelContext.modelName}'.${availableRelations ? ` Available relations: ${availableRelations}.` : ''}`,
+                start: node.relationStart,
+                end: node.relationEnd,
+            });
+            return;
+        }
+        // exists()/all() only make sense on reverse (1:many) relations
+        if (relation.direction === 'local') {
+            warnings.push({
+                message: `Relation '${node.relationName}' is a local (belongs-to) relation on model '${modelContext.modelName}'. exists()/all() require a reverse (has-many) relation.`,
+                start: node.relationStart,
+                end: node.relationEnd,
+            });
+            return;
+        }
+        // Validate condition fields exist on the foreign model
+        for (const condition of node.conditions) {
+            if (relation.foreignScalarFieldNames &&
+                !relation.foreignScalarFieldNames.has(condition.field)) {
+                const availableFields = [...relation.foreignScalarFieldNames].join(', ');
+                warnings.push({
+                    message: `Field '${condition.field}' does not exist on model '${relation.foreignModelName}'.${availableFields ? ` Available fields: ${availableFields}.` : ''}`,
+                    start: condition.fieldStart,
+                    end: condition.fieldEnd,
+                });
+            }
+            // Validate field reference values (e.g., model.typo or invalid auth fields)
+            if (condition.value.type === 'fieldRef') {
+                validateFieldRef(condition.value);
+            }
+            // Type-check literal condition values against foreign field types
+            if (condition.value.type === 'literalValue' &&
+                relation.foreignFieldTypes) {
+                const foreignFieldType = relation.foreignFieldTypes.get(condition.field);
+                if (foreignFieldType) {
+                    validateLiteralTypeCompatibility(condition.field, foreignFieldType, relation.foreignModelName, condition.value);
+                }
+            }
+        }
+    }
+    function validateLiteralTypeCompatibility(fieldName, fieldType, modelName, literalNode) {
+        const literalJsType = typeof literalNode.value;
+        const isCompatible = (() => {
+            switch (fieldType) {
+                case 'boolean': {
+                    return literalJsType === 'boolean';
+                }
+                case 'int': {
+                    return (typeof literalNode.value === 'number' &&
+                        Number.isInteger(literalNode.value));
+                }
+                case 'float':
+                case 'decimal': {
+                    return literalJsType === 'number';
+                }
+                case 'string':
+                case 'uuid':
+                case 'enum': {
+                    return literalJsType === 'string';
+                }
+                default: {
+                    return true;
+                }
+            }
+        })();
+        if (!isCompatible) {
+            warnings.push({
+                message: `Literal value type '${literalJsType}' is not compatible with field '${fieldName}' of type '${fieldType}' on model '${modelName}'.`,
+                start: literalNode.start,
+                end: literalNode.end,
+            });
+        }
+    }
+    function validateFieldRef(node) {
+        if (node.source === 'model') {
+            // Check if field exists on model
+            if (!modelContext.scalarFieldNames.has(node.field)) {
+                warnings.push({
+                    message: `Field '${node.field}' does not exist on model '${modelContext.modelName}'.`,
+                    start: node.start,
+                    end: node.end,
+                });
+            }
+        }
+        else if (!VALID_AUTH_FIELDS.has(node.field)) {
+            // node.source === 'auth' is implied since source is 'model' | 'auth'
+            warnings.push({
+                message: `Invalid auth property '${node.field}'. Valid properties are: ${[...VALID_AUTH_FIELDS].join(', ')}.`,
+                start: node.start,
+                end: node.end,
+            });
+        }
+    }
+    visitAuthorizerExpression(ast, validationVisitor);
+    return warnings;
+}
+/**
+ * Build authorizer role info (role names) from a model.
+ */
+function buildAuthorizerRoleNames(model) {
+    const names = new Set();
+    if (model.authorizer?.roles) {
+        for (const role of model.authorizer.roles) {
+            names.add(role.name);
+        }
+    }
+    return names;
+}
+/**
+ * Build scalar field info (names + types) from a model.
+ */
+function getModelFields(model) {
+    // Fields can be at top level (raw JSON) or nested under model (typed ModelConfig)
+    return model.fields ?? model.model?.fields ?? [];
+}
+function buildFieldInfo(model) {
+    const fieldNames = new Set();
+    const fieldTypes = new Map();
+    for (const field of getModelFields(model)) {
+        fieldNames.add(field.name);
+        if (field.type) {
+            fieldTypes.set(field.name, field.type);
+        }
+    }
+    return {
+        foreignScalarFieldNames: fieldNames.size > 0 ? fieldNames : undefined,
+        foreignFieldTypes: fieldTypes.size > 0 ? fieldTypes : undefined,
+    };
+}
+/**
+ * Build complete model expression context from a model and all project models.
+ *
+ * This is the primary entry point for building validation and autocomplete context.
+ * It discovers both local relations (FK on this model) and foreign/reverse relations
+ * (FK on other models pointing to this model) for use with `hasRole()`, `exists()`, `all()`, etc.
+ *
+ * @param model - The current model (structural typing: works with both typed ModelConfig and raw JSON)
+ * @param allModels - All models in the project
+ * @returns Complete model validation context including all relations
+ */
+export function buildModelExpressionContext(model, allModels) {
+    // Build scalar field info for the current model
+    const scalarFieldNames = new Set();
+    const fieldTypes = new Map();
+    for (const field of getModelFields(model)) {
+        scalarFieldNames.add(field.name);
+        if (field.type) {
+            fieldTypes.set(field.name, field.type);
+        }
+    }
+    // Build lookups by both id and name for flexible matching
+    const modelsById = new Map(allModels
+        .filter((m) => m.id != null)
+        .map((m) => [m.id, m]));
+    const modelsByName = new Map(allModels.map((m) => [m.name, m]));
+    function lookupModel(ref) {
+        return modelsById.get(ref) ?? modelsByName.get(ref);
+    }
+    const relationInfo = new Map();
+    // 1. Local relations (FK on this model) — used by hasRole(model.relation, 'role')
+    for (const relation of model.model?.relations ?? []) {
+        const foreignModel = lookupModel(relation.modelRef);
+        relationInfo.set(relation.name, {
+            referenceCount: relation.references?.length ?? 0,
+            foreignModelName: foreignModel?.name ?? relation.modelRef,
+            foreignAuthorizerRoleNames: foreignModel
+                ? buildAuthorizerRoleNames(foreignModel)
+                : new Set(),
+            ...(foreignModel ? buildFieldInfo(foreignModel) : {}),
+            direction: 'local',
+        });
+    }
+    // 2. Foreign/reverse relations (FK on other models pointing to this model)
+    //    Used by exists(model.members, { ... }) and all(model.tasks, { ... })
+    const currentModelId = model.id ?? model.name;
+    for (const otherModel of allModels) {
+        for (const rel of otherModel.model?.relations ?? []) {
+            if (rel.modelRef !== currentModelId || !rel.foreignRelationName) {
+                continue;
+            }
+            // Skip if a local relation already has this name
+            if (relationInfo.has(rel.foreignRelationName)) {
+                continue;
+            }
+            // For foreign relations, the "foreign model" (for field/role validation)
+            // is the OTHER model that has the FK
+            relationInfo.set(rel.foreignRelationName, {
+                referenceCount: rel.references?.length ?? 0,
+                foreignModelName: otherModel.name,
+                foreignAuthorizerRoleNames: buildAuthorizerRoleNames(otherModel),
+                ...buildFieldInfo(otherModel),
+                direction: 'foreign',
+            });
+        }
+    }
+    return {
+        modelName: model.name,
+        scalarFieldNames,
+        fieldTypes,
+        relationInfo,
+    };
+}
+//# sourceMappingURL=authorizer-expression-validator.js.map

package/dist/expression-parsers/authorizer/authorizer-expression-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-validator.js","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AASvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAkC/E;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAY9C;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,WAA4B,EAC5B,UAAmB;IAEnB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,UAAU,CAAC,aAAa,CACpC,UAA+B,CAChC,EAAE,KAAK,CAAC;IACT,OAAO;QACL,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,qBAAqB,EAAE,IAAI,GAAG,CAC5B,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CACpE;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAA6B,EAC7B,YAAoC,EACpC,WAA4B,EAC5B,UAAmB;IAEnB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,eAAe,CAC7D,WAAW,EACX,UAAU,CACX,CAAC;IACF,MAAM,mBAAmB,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAClD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAC3C,CAAC;IAEF,SAAS,sBAAsB,CAC7B,IAAY,EACZ,KAAa,EACb,GAAW;QAEX,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,OAAO,GACX,IAAI,KAAK,MAAM;gBACb,CAAC,CAAC,4GAA4G;gBAC9G,CAAC,CAAC,SAAS,IAAI,sGAAsG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC3J,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAsC;QAC3D,eAAe,CAAC,IAAI;YAClB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAClC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,2EAA2E;YAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACxE,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc;gBAC/B,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;oBAClC,CAAC,CAAC,IAAI,CAAC,KAAK;oBACZ,CAAC,CAAC,IAAI,CAAC;YACb,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;gBAC5B,QAAQ,CAAC,MAAM,KAAK,OAAO;gBAC3B,WAAW,KAAK,IAAI,EACpB,CAAC;gBACD,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC9D,IAAI,SAAS,EAAE,CAAC;oBACd,gCAAgC,CAC9B,QAAQ,CAAC,KAAK,EACd,SAAS,EACT,YAAY,CAAC,SAAS,EACtB,WAAW,CACZ,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI;YACV,oEAAoE;YACpE,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,mEAAmE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC7H,KAAK,EAAE,IAAI,CAAC,SAAS;oBACrB,GAAG,EAAE,IAAI,CAAC,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,WAAW,CAAC,IAAI;YACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3B,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC;wBACZ,OAAO,EAAE,SAAS,IAAI,mEAAmE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;wBACxH,KAAK;wBACL,GAAG;qBACJ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,aAAa,CAAC,IAAI;YAChB,sBAAsB,CACpB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,EAChB,CAAC,IAAI,CAAC,IAAI,CAAC,EACX,CAAC,IAAI,CAAC,SAAS,CAAC,EAChB,CAAC,IAAI,CAAC,OAAO,CAAC,CACf,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI;YACpB,sBAAsB,CACpB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,QAAQ,CACd,CAAC;QACJ,CAAC;QACD,cAAc,CAAC,IAAI;YACjB,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,eAAe;YACb,uBAAuB;QACzB,CAAC;QACD,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK;YAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;IAEF,SAAS,sBAAsB,CAC7B,YAAoB,EACpB,aAAqB,EACrB,WAAmB,EACnB,KAAe,EACf,UAAoB,EACpB,QAAkB;QAElB,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC;QACtC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,uCAAuC;YACvC,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,kBAAkB,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,aAAa,YAAY,8BAA8B,YAAY,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,kBAAkB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrK,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,WAAW;aACjB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,aAAa,YAAY,SAAS,QAAQ,CAAC,cAAc,sFAAsF;gBACxJ,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,WAAW;aACjB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAClE,IAAI,CACL,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,SAAS,IAAI,8BAA8B,QAAQ,CAAC,gBAAgB,gBAAgB,cAAc,CAAC,CAAC,CAAC,qBAAqB,cAAc,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3J,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;oBACpB,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,sBAAsB,CAC7B,IAAmE;QAEnE,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC;QACtC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,kBAAkB,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,aAAa,IAAI,CAAC,YAAY,8BAA8B,YAAY,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,kBAAkB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1K,KAAK,EAAE,IAAI,CAAC,aAAa;gBACzB,GAAG,EAAE,IAAI,CAAC,WAAW;aACtB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,aAAa,IAAI,CAAC,YAAY,gDAAgD,YAAY,CAAC,SAAS,0DAA0D;gBACvK,KAAK,EAAE,IAAI,CAAC,aAAa;gBACzB,GAAG,EAAE,IAAI,CAAC,WAAW;aACtB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,uDAAuD;QACvD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,IACE,QAAQ,CAAC,uBAAuB;gBAChC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EACtD,CAAC;gBACD,MAAM,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAChE,IAAI,CACL,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,UAAU,SAAS,CAAC,KAAK,8BAA8B,QAAQ,CAAC,gBAAgB,KAAK,eAAe,CAAC,CAAC,CAAC,sBAAsB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC/J,KAAK,EAAE,SAAS,CAAC,UAAU;oBAC3B,GAAG,EAAE,SAAS,CAAC,QAAQ;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,4EAA4E;YAC5E,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxC,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,kEAAkE;YAClE,IACE,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;gBACvC,QAAQ,CAAC,iBAAiB,EAC1B,CAAC;gBACD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CACrD,SAAS,CAAC,KAAK,CAChB,CAAC;gBACF,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gCAAgC,CAC9B,SAAS,CAAC,KAAK,EACf,gBAAgB,EAChB,QAAQ,CAAC,gBAAgB,EACzB,SAAS,CAAC,KAAK,CAChB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,gCAAgC,CACvC,SAAiB,EACjB,SAAiB,EACjB,SAAiB,EACjB,WAA6B;QAE7B,MAAM,aAAa,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC;QAE/C,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACzB,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,OAAO,aAAa,KAAK,SAAS,CAAC;gBACrC,CAAC;gBACD,KAAK,KAAK,CAAC,CAAC,CAAC;oBACX,OAAO,CACL,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;wBACrC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CACpC,CAAC;gBACJ,CAAC;gBACD,KAAK,OAAO,CAAC;gBACb,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,OAAO,aAAa,KAAK,QAAQ,CAAC;gBACpC,CAAC;gBACD,KAAK,QAAQ,CAAC;gBACd,KAAK,MAAM,CAAC;gBACZ,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,OAAO,aAAa,KAAK,QAAQ,CAAC;gBACpC,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,uBAAuB,aAAa,mCAAmC,SAAS,cAAc,SAAS,eAAe,SAAS,IAAI;gBAC5I,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,GAAG,EAAE,WAAW,CAAC,GAAG;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS,gBAAgB,CAAC,IAAkB;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,iCAAiC;YACjC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,8BAA8B,YAAY,CAAC,SAAS,IAAI;oBACrF,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,qEAAqE;YACrE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,0BAA0B,IAAI,CAAC,KAAK,4BAA4B,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC7G,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yBAAyB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAElD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAyBD;;GAEG;AACH,SAAS,wBAAwB,CAAC,KAA6B;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,KAA6B;IAE7B,kFAAkF;IAClF,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IAInD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO;QACL,uBAAuB,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACrE,iBAAiB,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAA6B,EAC7B,SAA4C;IAE5C,gDAAgD;IAChD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,SAAS;SACN,MAAM,CAAC,CAAC,CAAC,EAAkC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CACzB,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,SAAS,WAAW,CAAC,GAAW;QAC9B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkC,CAAC;IAE/D,kFAAkF;IAClF,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEpD,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC9B,cAAc,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;YAChD,gBAAgB,EAAE,YAAY,EAAE,IAAI,IAAI,QAAQ,CAAC,QAAQ;YACzD,0BAA0B,EAAE,YAAY;gBACtC,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC;gBACxC,CAAC,CAAC,IAAI,GAAG,EAAE;YACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,cAAc,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC;IAC9C,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YAED,iDAAiD;YACjD,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,yEAAyE;YACzE,qCAAqC;YACrC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE;gBACxC,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;gBAC3C,gBAAgB,EAAE,UAAU,CAAC,IAAI;gBACjC,0BAA0B,EAAE,wBAAwB,CAAC,UAAU,CAAC;gBAChE,GAAG,cAAc,CAAC,UAAU,CAAC;gBAC7B,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,gBAAgB;QAChB,UAAU;QACV,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/expression-parsers/authorizer/authorizer-expression-visitor.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Visitor pattern for traversing authorizer expression ASTs.
+ *
+ * Provides a type-safe way to implement operations over all expression
+ * node types without writing switch statements. Each new operation
+ * (code generation, validation, info extraction) implements the visitor
+ * interface and is dispatched by `visitAuthorizerExpression`.
+ */
+import type { AuthorizerExpressionNode, BinaryLogicalNode, FieldComparisonNode, HasRoleNode, HasSomeRoleNode, IsAuthenticatedNode, NestedHasRoleNode, NestedHasSomeRoleNode, RelationFilterNode } from './authorizer-expression-ast.js';
+/**
+ * Visitor interface for authorizer expression AST nodes.
+ *
+ * Each method handles one node type and returns `TResult`.
+ * The `binaryLogical` method receives a `visit` callback to
+ * recursively process child nodes.
+ *
+ * @typeParam TResult - The return type of each visitor method
+ * @typeParam TContext - Optional context passed to each method
+ *
+ * @example
+ * ```typescript
+ * const printer: AuthorizerExpressionVisitor<string> = {
+ *   fieldComparison: (node) => `${node.left} ${node.operator} ${node.right}`,
+ *   hasRole: (node) => `hasRole('${node.role}')`,
+ *   // ...
+ * };
+ * const result = visitAuthorizerExpression(ast, printer);
+ * ```
+ */
+export interface AuthorizerExpressionVisitor<TResult, TContext = undefined> {
+    fieldComparison(node: FieldComparisonNode, ctx: TContext): TResult;
+    hasRole(node: HasRoleNode, ctx: TContext): TResult;
+    hasSomeRole(node: HasSomeRoleNode, ctx: TContext): TResult;
+    nestedHasRole(node: NestedHasRoleNode, ctx: TContext): TResult;
+    nestedHasSomeRole(node: NestedHasSomeRoleNode, ctx: TContext): TResult;
+    relationFilter(node: RelationFilterNode, ctx: TContext): TResult;
+    isAuthenticated(node: IsAuthenticatedNode, ctx: TContext): TResult;
+    binaryLogical(node: BinaryLogicalNode, ctx: TContext, visit: (child: AuthorizerExpressionNode) => TResult): TResult;
+}
+/**
+ * Walk an authorizer expression AST, dispatching each node to the
+ * corresponding visitor method.
+ *
+ * The `binaryLogical` visitor method receives a bound `visit` callback
+ * so it can recursively process `node.left` and `node.right` without
+ * needing direct access to the walker.
+ *
+ * @param node - The AST node to visit
+ * @param visitor - The visitor implementation
+ * @param ctx - Context passed to every visitor method
+ * @returns The result of visiting the root node
+ */
+export declare function visitAuthorizerExpression<TResult, TContext = undefined>(node: AuthorizerExpressionNode, visitor: AuthorizerExpressionVisitor<TResult, TContext>, ...args: TContext extends undefined ? [] : [ctx: TContext]): TResult;
+//# sourceMappingURL=authorizer-expression-visitor.d.ts.map

package/dist/expression-parsers/authorizer/authorizer-expression-visitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-visitor.d.ts","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-visitor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,2BAA2B,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS;IACxE,eAAe,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;IACnE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;IACnD,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC/D,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;IACvE,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;IACjE,eAAe,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;IACnE,aAAa,CACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,GAClD,OAAO,CAAC;CACZ;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,EACrE,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,EACvD,GAAG,IAAI,EAAE,QAAQ,SAAS,SAAS,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GACzD,OAAO,CA+BT"}

package/dist/expression-parsers/authorizer/authorizer-expression-visitor.js

@@ -0,0 +1,52 @@
+/**
+ * Visitor pattern for traversing authorizer expression ASTs.
+ *
+ * Provides a type-safe way to implement operations over all expression
+ * node types without writing switch statements. Each new operation
+ * (code generation, validation, info extraction) implements the visitor
+ * interface and is dispatched by `visitAuthorizerExpression`.
+ */
+/**
+ * Walk an authorizer expression AST, dispatching each node to the
+ * corresponding visitor method.
+ *
+ * The `binaryLogical` visitor method receives a bound `visit` callback
+ * so it can recursively process `node.left` and `node.right` without
+ * needing direct access to the walker.
+ *
+ * @param node - The AST node to visit
+ * @param visitor - The visitor implementation
+ * @param ctx - Context passed to every visitor method
+ * @returns The result of visiting the root node
+ */
+export function visitAuthorizerExpression(node, visitor, ...args) {
+    const ctx = args[0];
+    const visit = (child) => visitAuthorizerExpression(child, visitor, ...args);
+    switch (node.type) {
+        case 'fieldComparison': {
+            return visitor.fieldComparison(node, ctx);
+        }
+        case 'hasRole': {
+            return visitor.hasRole(node, ctx);
+        }
+        case 'hasSomeRole': {
+            return visitor.hasSomeRole(node, ctx);
+        }
+        case 'nestedHasRole': {
+            return visitor.nestedHasRole(node, ctx);
+        }
+        case 'nestedHasSomeRole': {
+            return visitor.nestedHasSomeRole(node, ctx);
+        }
+        case 'relationFilter': {
+            return visitor.relationFilter(node, ctx);
+        }
+        case 'isAuthenticated': {
+            return visitor.isAuthenticated(node, ctx);
+        }
+        case 'binaryLogical': {
+            return visitor.binaryLogical(node, ctx, visit);
+        }
+    }
+}
+//# sourceMappingURL=authorizer-expression-visitor.js.map

package/dist/expression-parsers/authorizer/authorizer-expression-visitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer-expression-visitor.js","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/authorizer-expression-visitor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiDH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA8B,EAC9B,OAAuD,EACvD,GAAG,IAAuD;IAE1D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAa,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,KAA+B,EAAW,EAAE,CACzD,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAErD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,OAAO,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,OAAO,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/expression-parsers/authorizer/index.d.ts

@@ -0,0 +1,6 @@
+export * from './authorizer-expression-acorn-parser.js';
+export * from './authorizer-expression-ast.js';
+export * from './authorizer-expression-parser.js';
+export * from './authorizer-expression-validator.js';
+export * from './authorizer-expression-visitor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/expression-parsers/authorizer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/index.ts"],"names":[],"mappings":"AAAA,cAAc,yCAAyC,CAAC;AACxD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC"}

package/dist/expression-parsers/authorizer/index.js

@@ -0,0 +1,6 @@
+export * from './authorizer-expression-acorn-parser.js';
+export * from './authorizer-expression-ast.js';
+export * from './authorizer-expression-parser.js';
+export * from './authorizer-expression-validator.js';
+export * from './authorizer-expression-visitor.js';
+//# sourceMappingURL=index.js.map

package/dist/expression-parsers/authorizer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/expression-parsers/authorizer/index.ts"],"names":[],"mappings":"AAAA,cAAc,yCAAyC,CAAC;AACxD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC"}

package/dist/expression-parsers/register-core-module.d.ts

@@ -0,0 +1,6 @@
+import type { PluginModuleWithKey } from '#src/plugins/imports/types.js';
+/**
+ * Core module with key for inclusion in PluginStore.coreModules.
+ */
+export declare const expressionParserCoreModule: PluginModuleWithKey;
+//# sourceMappingURL=register-core-module.d.ts.map

package/dist/expression-parsers/register-core-module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-core-module.d.ts","sourceRoot":"","sources":["../../src/expression-parsers/register-core-module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAyBzE;;GAEG;AACH,eAAO,MAAM,0BAA0B,EAAE,mBAIxC,CAAC"}

package/dist/expression-parsers/register-core-module.js

@@ -0,0 +1,29 @@
+import { createPluginModule } from '#src/plugins/imports/types.js';
+import { expressionParserSpec } from '../references/expression-parser-spec.js';
+import { AuthorizerExpressionParser } from './authorizer/authorizer-expression-parser.js';
+/**
+ * Core module that registers built-in expression parsers.
+ *
+ * This module is included in every consumer's coreModules array
+ * (server, web, CLI, tests) to ensure the authorizer expression parser
+ * is available for schemas that use `withExpression(authorizerExpressionRef, ...)`.
+ */
+const registerExpressionParsersModule = createPluginModule({
+    name: 'register-expression-parsers',
+    dependencies: {
+        expressionParsers: expressionParserSpec,
+    },
+    initialize: ({ expressionParsers }) => {
+        const parser = new AuthorizerExpressionParser();
+        expressionParsers.parsers.set(parser.name, parser);
+    },
+});
+/**
+ * Core module with key for inclusion in PluginStore.coreModules.
+ */
+export const expressionParserCoreModule = {
+    key: 'core/lib/expression-parsers',
+    pluginKey: 'core',
+    module: registerExpressionParsersModule,
+};
+//# sourceMappingURL=register-core-module.js.map

package/dist/expression-parsers/register-core-module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-core-module.js","sourceRoot":"","sources":["../../src/expression-parsers/register-core-module.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F;;;;;;GAMG;AACH,MAAM,+BAA+B,GAAG,kBAAkB,CAAC;IACzD,IAAI,EAAE,6BAA6B;IACnC,YAAY,EAAE;QACZ,iBAAiB,EAAE,oBAAoB;KACxC;IACD,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,IAAI,0BAA0B,EAAE,CAAC;QAChD,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAwB;IAC7D,GAAG,EAAE,6BAA6B;IAClC,SAAS,EAAE,MAAM;IACjB,MAAM,EAAE,+BAA+B;CACxC,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export * from './compiler/index.js';
 export * from './constants/index.js';
 export * from './definition/index.js';
+export { expressionParserCoreModule } from './expression-parsers/register-core-module.js';
 export * from './feature-flags/index.js';
 export * from './migrations/index.js';
 export * from './parser/index.js';

package/dist/index.js

@@ -1,6 +1,7 @@
 export * from './compiler/index.js';
 export * from './constants/index.js';
 export * from './definition/index.js';
+export { expressionParserCoreModule } from './expression-parsers/register-core-module.js';
 export * from './feature-flags/index.js';
 export * from './migrations/index.js';
 export * from './parser/index.js';

package/dist/migrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA2BlD,eAAO,MAAM,iBAAiB,EAAE,eAAe,EAyB9C,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,iBAAiB,EAAE,OAAO,GACzB,iBAAiB,IAAI,iBAAiB,CAMxC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,KAAK,EAAE,OAAO,CAAC;gBAEnB,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAQlD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,GAAG;IAC9D,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,EAAE,eAAe,EAAE,CAAC;CACtC,CAoBA;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA8BlD,eAAO,MAAM,iBAAiB,EAAE,eAAe,EA4B9C,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,iBAAiB,EAAE,OAAO,GACzB,iBAAiB,IAAI,iBAAiB,CAMxC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,KAAK,EAAE,OAAO,CAAC;gBAEnB,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAQlD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,GAAG;IAC9D,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,EAAE,eAAe,EAAE,CAAC;CACtC,CAoBA;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD"}

package/dist/migrations/index.js

@@ -22,6 +22,9 @@ import { migration025ServiceMethodAuth } from './migration-025-service-method-au
 import { migration026QuerySharedRoles } from './migration-026-query-shared-roles.js';
 import { migration027EnableSentryPlugin } from './migration-027-enable-sentry-plugin.js';
 import { migration028EnableStripePlugin } from './migration-028-enable-stripe-plugin.js';
+import { migration029AdminRoleAndAutoAssigned } from './migration-029-admin-role-and-auto-assigned.js';
+import { migration030RemoveThemeHoverColors } from './migration-030-remove-theme-hover-colors.js';
+import { migration031UuidDefaultGeneration } from './migration-031-uuid-default-generation.js';
 export const SCHEMA_MIGRATIONS = [
     migration005PrimaryUniqueRefs,
     migration006IndividualServiceControllers,
@@ -47,6 +50,9 @@ export const SCHEMA_MIGRATIONS = [
     migration026QuerySharedRoles,
     migration027EnableSentryPlugin,
     migration028EnableStripePlugin,
+    migration029AdminRoleAndAutoAssigned,
+    migration030RemoveThemeHoverColors,
+    migration031UuidDefaultGeneration,
 ];
 export function isMigrateableProjectDefinition(projectDefinition) {
     return (typeof projectDefinition === 'object' &&

package/dist/migrations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wCAAwC,EAAE,MAAM,mDAAmD,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAEzF,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,6BAA6B;IAC7B,wCAAwC;IACxC,wBAAwB;IACxB,+BAA+B;IAC/B,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;IACpB,6BAA6B;IAC7B,+BAA+B;IAC/B,4BAA4B;IAC5B,0BAA0B;IAC1B,0BAA0B;IAC1B,4BAA4B;IAC5B,4BAA4B;IAC5B,2BAA2B;IAC3B,qCAAqC;IACrC,iCAAiC;IACjC,qCAAqC;IACrC,0BAA0B;IAC1B,sCAAsC;IACtC,6BAA6B;IAC7B,4BAA4B;IAC5B,8BAA8B;IAC9B,8BAA8B;CAC/B,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAC5C,iBAA0B;IAE1B,OAAO,CACL,OAAO,iBAAiB,KAAK,QAAQ;QACrC,CAAC,CAAC,iBAAiB;QACnB,eAAe,IAAI,iBAAiB,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7B,aAAa,CAAS;IACtB,KAAK,CAAU;IAE/B,YAAY,aAAqB,EAAE,KAAc;QAC/C,KAAK,CACH,oBAAoB,aAAa,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAyB;IAI3D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAEjC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,aAAa,CACjC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAE5C,IAAI,kBAAkB,GAAG,MAAM,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,kBAAkB,GAAG;gBACnB,GAAI,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAuB;gBAC/D,aAAa,EAAE,SAAS,CAAC,OAAO;aACjC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,wCAAwC,EAAE,MAAM,mDAAmD,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,oCAAoC,EAAE,MAAM,iDAAiD,CAAC;AACvG,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAE/F,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,6BAA6B;IAC7B,wCAAwC;IACxC,wBAAwB;IACxB,+BAA+B;IAC/B,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;IACpB,6BAA6B;IAC7B,+BAA+B;IAC/B,4BAA4B;IAC5B,0BAA0B;IAC1B,0BAA0B;IAC1B,4BAA4B;IAC5B,4BAA4B;IAC5B,2BAA2B;IAC3B,qCAAqC;IACrC,iCAAiC;IACjC,qCAAqC;IACrC,0BAA0B;IAC1B,sCAAsC;IACtC,6BAA6B;IAC7B,4BAA4B;IAC5B,8BAA8B;IAC9B,8BAA8B;IAC9B,oCAAoC;IACpC,kCAAkC;IAClC,iCAAiC;CAClC,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAC5C,iBAA0B;IAE1B,OAAO,CACL,OAAO,iBAAiB,KAAK,QAAQ;QACrC,CAAC,CAAC,iBAAiB;QACnB,eAAe,IAAI,iBAAiB,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7B,aAAa,CAAS;IACtB,KAAK,CAAU;IAE/B,YAAY,aAAqB,EAAE,KAAc;QAC/C,KAAK,CACH,oBAAoB,aAAa,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAyB;IAI3D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAEjC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,aAAa,CACjC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAE5C,IAAI,kBAAkB,GAAG,MAAM,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,kBAAkB,GAAG;gBACnB,GAAI,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAuB;gBAC/D,aAAa,EAAE,SAAS,CAAC,OAAO;aACjC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC;AAChD,CAAC"}