@cerbos/orm-prisma 4.1.0 → 5.0.0

package/lib/hierarchy.js

@@ -0,0 +1,266 @@
+"use strict";
+// The hierarchy operators: `overlaps`, `ancestorOf`, `descendentOf` over `hierarchy(...)`
+// operands, lowered to equality, IN-lists of strict prefixes, and a prefix match on a column.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleOverlapsOperator = handleOverlapsOperator;
+exports.handleAncestorDescendantOperator = handleAncestorDescendantOperator;
+const fields_1 = require("./fields");
+const mapping_1 = require("./mapping");
+const plan_1 = require("./plan");
+const translate_1 = require("./translate");
+const errors_1 = require("./errors");
+function resolveHierarchy(expr, context) {
+    const operands = expr.operands;
+    if (operands.length === 2) {
+        const strOperand = (0, plan_1.assertDefined)(operands[0], "hierarchy requires operands");
+        const delimOperand = (0, plan_1.assertDefined)(operands[1], "hierarchy requires a delimiter");
+        if (!(0, plan_1.isValueOperand)(delimOperand)) {
+            throw new errors_1.UnsupportedQueryPlanError("hierarchy delimiter must be a value");
+        }
+        const delimiter = String(delimOperand.value);
+        if ((0, plan_1.isValueOperand)(strOperand)) {
+            return {
+                type: "constant",
+                segments: splitPath(String(strOperand.value), delimiter),
+            };
+        }
+        if ((0, plan_1.isNamedOperand)(strOperand)) {
+            return {
+                type: "field",
+                fieldRef: (0, mapping_1.resolveFieldReference)(strOperand.name, context),
+                delimiter,
+            };
+        }
+        throw new errors_1.UnsupportedQueryPlanError("hierarchy(string, delimiter) requires a value or field operand");
+    }
+    if (operands.length === 1) {
+        const inner = (0, plan_1.assertDefined)(operands[0], "hierarchy requires an operand");
+        if ((0, plan_1.isValueOperand)(inner)) {
+            return { type: "constant", segments: String(inner.value).split(".") };
+        }
+        if ((0, plan_1.isNamedOperand)(inner)) {
+            return {
+                type: "field",
+                fieldRef: (0, mapping_1.resolveFieldReference)(inner.name, context),
+                delimiter: ".",
+            };
+        }
+        if ((0, plan_1.isOperatorOperand)(inner) && inner.operator === "list") {
+            const segments = inner.operands.map((op) => {
+                const resolved = (0, translate_1.resolveOperand)(op, context);
+                if ((0, mapping_1.isResolvedValue)(resolved)) {
+                    return { type: "constant", value: String(resolved.value) };
+                }
+                return { type: "field", fieldRef: resolved };
+            });
+            return { type: "segmented", segments };
+        }
+        throw new errors_1.UnsupportedQueryPlanError("hierarchy requires a value, field, or list operand");
+    }
+    throw new errors_1.UnsupportedQueryPlanError("hierarchy requires 1 or 2 operands");
+}
+/**
+ * Cerbos splits a path with Go's `strings.Split`: an empty delimiter yields one segment per code
+ * point, and an empty path then has no segments at all.
+ */
+function splitPath(path, delimiter) {
+    return delimiter === "" ? Array.from(path) : path.split(delimiter);
+}
+function toSegments(resolved) {
+    switch (resolved.type) {
+        case "constant":
+            return resolved.segments.map((s) => ({ type: "constant", value: s }));
+        case "segmented":
+            return resolved.segments;
+        case "field":
+            throw new errors_1.UnsupportedQueryPlanError("Cannot get segments from a field-reference hierarchy");
+    }
+}
+/** A segmented hierarchy whose segments are all constants is a constant hierarchy. */
+function normalizeHierarchy(h) {
+    if (h.type !== "segmented")
+        return h;
+    const constants = [];
+    for (const segment of h.segments) {
+        if (segment.type !== "constant")
+            return h;
+        constants.push(segment.value);
+    }
+    return { type: "constant", segments: constants };
+}
+function checkPrefixConditions(shorter, longer) {
+    if (shorter.length > longer.length)
+        return null;
+    const conditions = [];
+    for (let i = 0; i < shorter.length; i++) {
+        const s = shorter[i];
+        const l = longer[i];
+        if (s.type === "constant" && l.type === "constant") {
+            if (s.value !== l.value)
+                return null;
+        }
+        else if (s.type === "field" && l.type === "constant") {
+            conditions.push((0, fields_1.buildFieldFilter)(s.fieldRef, "equals", l.value));
+        }
+        else if (s.type === "constant" && l.type === "field") {
+            conditions.push((0, fields_1.buildFieldFilter)(l.fieldRef, "equals", s.value));
+        }
+        else {
+            throw new errors_1.UnsupportedQueryPlanError("Cannot compare two field references in hierarchy overlap");
+        }
+    }
+    if (conditions.length === 0)
+        return {};
+    if (conditions.length === 1)
+        return conditions[0];
+    return { AND: conditions };
+}
+function handleOverlapsOperator(operands, context) {
+    const [left, right] = extractHierarchyOperands("overlaps", operands, context);
+    if (left.type === "field" || right.type === "field") {
+        return handleFieldOverlaps(left, right);
+    }
+    const leftSegs = toSegments(left);
+    const rightSegs = toSegments(right);
+    const leftPrefixOfRight = checkPrefixConditions(leftSegs, rightSegs);
+    const rightPrefixOfLeft = checkPrefixConditions(rightSegs, leftSegs);
+    const validConditions = [leftPrefixOfRight, rightPrefixOfLeft].filter((c) => c !== null);
+    // Hierarchy construction evaluates every segment, including a trailing segment that
+    // neither prefix comparison needs. Preserve its SQL UNKNOWN under outer negation too.
+    const fields = [...leftSegs, ...rightSegs]
+        .filter((segment) => segment.type === "field")
+        .filter((segment) => segment.fieldRef.nullable !== false);
+    const pairs = fields.map(({ fieldRef }) => ({
+        equal: (0, fields_1.buildFieldFilter)(fieldRef, "equals", ""),
+        unequal: (0, fields_1.buildFieldFilter)(fieldRef, "not", ""),
+    }));
+    const presence = pairs.map(({ equal, unequal }) => ({
+        OR: [equal, unequal],
+    }));
+    const unknown = pairs.map(({ equal, unequal }) => ({
+        AND: [equal, unequal],
+    }));
+    if (validConditions.length === 0) {
+        if (unknown.length > 0)
+            return { OR: unknown };
+        const field = [...leftSegs, ...rightSegs].find((segment) => segment.type === "field");
+        if (field)
+            return (0, fields_1.buildImpossibleFilter)(field.fieldRef);
+        throw new errors_1.UnsupportedQueryPlanError("Cannot determine overlap: no field references found");
+    }
+    if (validConditions.some((condition) => Object.keys(condition).length === 0)) {
+        return presence.length === 0 ? {} : { AND: presence };
+    }
+    // Equal-length comparisons are identical in either direction. A contradiction is
+    // FALSE for a present field and UNKNOWN for NULL, restoring errors even if the
+    // prefix comparison is FALSE (FALSE AND NULL alone would lose that error).
+    const condition = validConditions[0];
+    return presence.length === 0
+        ? condition
+        : {
+            OR: [{ AND: [condition, ...presence] }, ...unknown],
+        };
+}
+function handleFieldOverlaps(left, right) {
+    if (left.type === "field" && right.type === "field") {
+        throw new errors_1.UnsupportedQueryPlanError("overlaps: cannot compare two field-reference hierarchies");
+    }
+    // The caller routes here only when at least one side is a field hierarchy.
+    const field = left.type === "field" ? left : right.type === "field" ? right : undefined;
+    if (field === undefined) {
+        throw new errors_1.UnsupportedQueryPlanError("overlaps: neither side is a field-reference hierarchy");
+    }
+    const other = field === left ? right : left;
+    if (other.type !== "constant") {
+        throw new errors_1.UnsupportedQueryPlanError("overlaps: segmented hierarchies with field hierarchies are not supported");
+    }
+    const delimiter = field.delimiter;
+    const otherRaw = other.segments.join(delimiter);
+    const strictPrefixes = getStrictPrefixes(other.segments, delimiter);
+    const conditions = [];
+    if (strictPrefixes.length > 0) {
+        conditions.push((0, fields_1.buildFieldFilter)(field.fieldRef, "in", strictPrefixes));
+    }
+    conditions.push((0, fields_1.buildFieldFilter)(field.fieldRef, "equals", otherRaw));
+    conditions.push((0, fields_1.buildPrefixFilter)(field.fieldRef, otherRaw + delimiter));
+    return { OR: conditions };
+}
+function extractHierarchyOperands(operatorName, operands, context) {
+    if (operands.length !== 2) {
+        throw new errors_1.UnsupportedQueryPlanError(`${operatorName} requires exactly two operands`);
+    }
+    const leftOp = (0, plan_1.assertDefined)(operands[0], `${operatorName} requires a left operand`);
+    const rightOp = (0, plan_1.assertDefined)(operands[1], `${operatorName} requires a right operand`);
+    if (!(0, plan_1.isOperatorOperand)(leftOp) || leftOp.operator !== "hierarchy" ||
+        !(0, plan_1.isOperatorOperand)(rightOp) || rightOp.operator !== "hierarchy") {
+        throw new errors_1.UnsupportedQueryPlanError(`${operatorName} requires two hierarchy operands`);
+    }
+    return [
+        normalizeHierarchy(resolveHierarchy(leftOp, context)),
+        normalizeHierarchy(resolveHierarchy(rightOp, context)),
+    ];
+}
+function getStrictPrefixes(segments, delimiter) {
+    if (delimiter === "") {
+        // Per code point, the empty path is itself a (zero-segment) strict prefix.
+        return segments.map((_, length) => segments.slice(0, length).join(""));
+    }
+    if (segments.length <= 1)
+        return [];
+    const prefixes = [];
+    let current = segments[0];
+    prefixes.push(current);
+    for (let i = 1; i < segments.length - 1; i++) {
+        current = current + delimiter + segments[i];
+        prefixes.push(current);
+    }
+    return prefixes;
+}
+function handleAncestorDescendantOperator(operands, context, direction) {
+    const operatorName = direction === "ancestor" ? "ancestorOf" : "descendentOf";
+    const [left, right] = extractHierarchyOperands(operatorName, operands, context);
+    // ancestorOf(A, B) = A is strict prefix of B
+    // descendentOf(A, B) = B is strict prefix of A
+    const ancestor = direction === "ancestor" ? left : right;
+    const descendant = direction === "ancestor" ? right : left;
+    if (ancestor.type === "field")
+        (0, fields_1.assertStringField)(ancestor.fieldRef, operatorName);
+    if (descendant.type === "field")
+        (0, fields_1.assertStringField)(descendant.fieldRef, operatorName);
+    if (ancestor.type === "constant" && descendant.type === "field") {
+        if (descendant.delimiter === "") {
+            // Per code point, a descendant is the ancestor followed by at least one more character.
+            return (0, fields_1.buildPrefixFilter)(descendant.fieldRef, ancestor.segments.join(""), true);
+        }
+        return (0, fields_1.buildPrefixFilter)(descendant.fieldRef, ancestor.segments.join(descendant.delimiter) + descendant.delimiter);
+    }
+    if (ancestor.type === "field" && descendant.type === "constant") {
+        const delimiter = ancestor.delimiter;
+        const prefixes = getStrictPrefixes(descendant.segments, delimiter);
+        if (prefixes.length === 0) {
+            if (ancestor.fieldRef.nullable === false)
+                return (0, fields_1.buildImpossibleFilter)(ancestor.fieldRef);
+            return {
+                AND: [
+                    (0, fields_1.buildFieldFilter)(ancestor.fieldRef, "equals", ""),
+                    (0, fields_1.buildFieldFilter)(ancestor.fieldRef, "not", ""),
+                ],
+            };
+        }
+        if (prefixes.length === 1) {
+            return (0, fields_1.buildFieldFilter)(ancestor.fieldRef, "equals", prefixes[0]);
+        }
+        return (0, fields_1.buildFieldFilter)(ancestor.fieldRef, "in", prefixes);
+    }
+    if (ancestor.type === "constant" && descendant.type === "constant") {
+        const ancestorSegs = ancestor.segments;
+        const descendantSegs = descendant.segments;
+        if (descendantSegs.length > ancestorSegs.length &&
+            ancestorSegs.every((seg, i) => seg === descendantSegs[i])) {
+            return {};
+        }
+        throw new errors_1.UnsupportedQueryPlanError(`${operatorName}: constants do not satisfy ${direction} relationship`);
+    }
+    throw new errors_1.UnsupportedQueryPlanError(`${operatorName}: unsupported hierarchy type combination`);
+}
+//# sourceMappingURL=hierarchy.js.map

package/lib/hierarchy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hierarchy.js","sourceRoot":"","sources":["../src/hierarchy.ts"],"names":[],"mappings":";AAAA,0FAA0F;AAC1F,8FAA8F;;AA0L9F,wDAkEC;AAmFD,4EAoEC;AA/YD,qCAKkB;AAElB,uCAAmE;AAEnE,iCAKgB;AAEhB,2CAA6C;AAC7C,qCAAqD;AA0BrD,SAAS,gBAAgB,CACvB,IAAqB,EACrB,OAA2B;IAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAE/B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAA,oBAAa,EAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC;QAE7E,MAAM,YAAY,GAAG,IAAA,oBAAa,EAChC,QAAQ,CAAC,CAAC,CAAC,EACX,gCAAgC,CACjC,CAAC;QAEF,IAAI,CAAC,IAAA,qBAAc,EAAC,YAAY,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,kCAAyB,CAAC,qCAAqC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAE7C,IAAI,IAAA,qBAAc,EAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,IAAI,IAAA,qBAAc,EAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,IAAA,+BAAqB,EAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;gBACzD,SAAS;aACV,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,kCAAyB,CAAC,gEAAgE,CAAC,CAAC;IACxG,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAA,oBAAa,EAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAE1E,IAAI,IAAA,qBAAc,EAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,CAAC;QAED,IAAI,IAAA,qBAAc,EAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,IAAA,+BAAqB,EAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;gBACpD,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,CAAC;QAED,IAAI,IAAA,wBAAiB,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAoB,EAAE;gBAC3D,MAAM,QAAQ,GAAG,IAAA,0BAAc,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAE7C,IAAI,IAAA,yBAAe,EAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,CAAC;gBAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,IAAI,kCAAyB,CAAC,oDAAoD,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,kCAAyB,CAAC,oCAAoC,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAChD,OAAO,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,QAA2B;IAC7C,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC3B,KAAK,OAAO;YACV,MAAM,IAAI,kCAAyB,CACjC,sDAAsD,CACvD,CAAC;IACN,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,kBAAkB,CAAC,CAAoB;IAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QAC1C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA2B,EAC3B,MAA0B;IAE1B,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,UAAU,GAAmB,EAAE,CAAC;IAEtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAErB,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACnD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,IAAA,yBAAgB,EAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,IAAA,yBAAgB,EAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,kCAAyB,CACjC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;IAEnD,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,SAAgB,sBAAsB,CACpC,QAAiC,EACjC,OAA2B;IAE3B,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,wBAAwB,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE9E,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAEpC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAErE,MAAM,eAAe,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,MAAM,CACnE,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CACrC,CAAC;IAEF,oFAAoF;IACpF,sFAAsF;IACtF,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC;SACvC,MAAM,CAAC,CAAC,OAAO,EAA2B,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;SACtE,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,KAAK,EAAE,IAAA,yBAAgB,EAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAA,yBAAgB,EAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;KAC/C,CAAC,CAAC,CAAC;IAEJ,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;KACrB,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;KACtB,CAAC,CAAC,CAAC;IAEJ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;QAE/C,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAC5C,CAAC,OAAO,EAA2B,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAC/D,CAAC;QAEF,IAAI,KAAK;YAAE,OAAO,IAAA,8BAAqB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,IAAI,kCAAyB,CAAC,qDAAqD,CAAC,CAAC;IAC7F,CAAC;IAED,IACE,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EACxE,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAE,CAAC;IAEtC,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC;SACpD,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAuB,EACvB,KAAwB;IAExB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,kCAAyB,CAAC,0DAA0D,CAAC,CAAC;IAClG,CAAC;IAED,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAExF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,kCAAyB,CAAC,uDAAuD,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,kCAAyB,CAAC,0EAA0E,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEpE,MAAM,UAAU,GAAmB,EAAE,CAAC;IAEtC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,IAAA,yBAAgB,EAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,IAAA,yBAAgB,EAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtE,UAAU,CAAC,IAAI,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;IAEzE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,wBAAwB,CAC/B,YAAoB,EACpB,QAAiC,EACjC,OAA2B;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kCAAyB,CAAC,GAAG,YAAY,gCAAgC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,oBAAa,EAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,0BAA0B,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAA,oBAAa,EAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,2BAA2B,CAAC,CAAC;IAEvF,IACE,CAAC,IAAA,wBAAiB,EAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW;QAC7D,CAAC,IAAA,wBAAiB,EAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,EAC/D,CAAC;QACD,MAAM,IAAI,kCAAyB,CAAC,GAAG,YAAY,kCAAkC,CAAC,CAAC;IACzF,CAAC;IAED,OAAO;QACL,kBAAkB,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB,EAAE,SAAiB;IAC9D,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,2EAA2E;QAC3E,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,gCAAgC,CAC9C,QAAiC,EACjC,OAA2B,EAC3B,SAAoC;IAEpC,MAAM,YAAY,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;IAC9E,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,wBAAwB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEhF,6CAA6C;IAC7C,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,UAAU,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3D,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAC3B,IAAA,0BAAiB,EAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAErD,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;QAC7B,IAAA,0BAAiB,EAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEvD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChE,IAAI,UAAU,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;YAChC,wFAAwF;YACxF,OAAO,IAAA,0BAAiB,EAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,IAAA,0BAAiB,EACtB,UAAU,CAAC,QAAQ,EACnB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK;gBAAE,OAAO,IAAA,8BAAqB,EAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE1F,OAAO;gBACL,GAAG,EAAE;oBACH,IAAA,yBAAgB,EAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;oBACjD,IAAA,yBAAgB,EAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;iBAC/C;aACF,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAA,yBAAgB,EAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAA,yBAAgB,EAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACvC,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;QAE3C,IACE,cAAc,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM;YAC3C,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,EACzD,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,kCAAyB,CAAC,GAAG,YAAY,8BAA8B,SAAS,eAAe,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,IAAI,kCAAyB,CAAC,GAAG,YAAY,0CAA0C,CAAC,CAAC;AACjG,CAAC"}

package/lib/index.d.ts

@@ -1,21 +1,27 @@
 import { PlanKind } from "@cerbos/core";
 import type { PlanResourcesResponse } from "@cerbos/core";
-export { PlanKind };
-export type PrismaFilter = Record<string, any>;
+import { UnsupportedQueryPlanError } from "./errors";
+import type { PrismaFilter } from "./value";
+export { PlanKind, UnsupportedQueryPlanError };
+export type { PrismaFilter, PrismaValue } from "./value";
 export type MapperConfig = {
     field?: string;
     /**
-     * Declares the database value kind when the Cerbos expression wraps a field in a typed
-     * constructor. Date-time metadata is required for timestamp(field) so a string column is
-     * never silently treated as a temporal column merely because it happens to contain ISO text.
+     * Declares the Prisma scalar kind so incompatible operands are rejected before query
+     * execution. Undeclared scalar kinds preserve the historical behavior. Date-time metadata
+     * is required for timestamp(field); raw DateTime column comparisons lose lexical spelling.
      */
-    valueType?: "dateTime";
+    valueType?: "dateTime" | "string" | "number" | "boolean";
     /**
      * Marks the mapped column as nullable in the database. Cerbos treats a missing attribute as
      * an evaluation error (deny), which matches SQL three-valued logic for simple predicates —
      * but relation subqueries (some/every/none) collapse UNKNOWN to false at the EXISTS boundary,
      * so collection macros over elements with NULL fields need an explicit guard to stay
-     * deny-aligned. Declaring nullability here enables those guards.
+     * deny-aligned. An element column is treated as nullable unless this says `false`, because
+     * the unguarded filter is the one that over-grants; declare `nullable: false` on every required
+     * element column, since Prisma rejects a `null` comparison against one. Scalar hierarchy
+     * segments likewise preserve missing-value errors unless nullable: false declares that a
+     * segment cannot be NULL.
      */
     nullable?: boolean;
     /**
@@ -41,7 +47,7 @@ export type MapperConfig = {
      * no-overload error on a null receiver in CEL, which denies under both polarities exactly as a
      * dropped row does, so they are left alone.
      *
-     * Distinct from `nullable` above, which declares that a *relation element* column can be NULL so
+     * Distinct from `nullable` above, which declares whether a *relation element* column can be NULL so
      * collection macros gain their three-valued guards. The two are independent: `nullable` is about
      * what a subquery does with an UNKNOWN element, this is about what the caller sent to the PDP.
      *
@@ -91,11 +97,15 @@ export type Mapper = Record<string, MapperConfig> | ((key: string) => MapperConf
  * The planner emits the same `eq(attr, null)` node either way, so the plan cannot reveal which
  * convention is in use and the adapter has to be told.
  *
- * - `"explicit"` (default) — a NULL column is sent as an explicit `null` attribute. CEL compares
+ * - `"explicit"` — a NULL column is sent as an explicit `null` attribute. CEL compares
  *   `null == null`, so `IS NULL` selects exactly the rows `check()` allows.
- * - `"omitted"` — a NULL column sends no attribute at all. CEL then raises a missing-attribute
- *   error, which Cerbos treats as a deny, so a filter that *selects* NULL rows returns rows the
- *   PDP denies. Null comparison operands are rejected instead of translated.
+ * - `"omitted"` (default) — a NULL column sends no attribute at all. CEL then raises a
+ *   missing-attribute error, which Cerbos treats as a deny, so a filter that *selects* NULL rows returns rows the
+ *   PDP denies. A null comparison operand is never translated into a NULL-selecting filter.
+ *
+ * The default is the convention whose wrong guess fails closed: a caller that actually sends
+ * explicit nulls loses the NULL rows, never gains rows the PDP denies
+ * (docs/adr/0011-denial-fails-closed-in-the-result.md).
  *
  * See https://github.com/cerbos/query-plan-adapters/issues/302.
  */
@@ -111,7 +121,7 @@ export interface QueryPlanToPrismaArgs {
     model?: string;
     /**
      * Which NULL-column representation the caller uses when building `check()` attributes.
-     * Defaults to `"explicit"`, preserving the historical `IS NULL` translation.
+     * Defaults to `"omitted"`, which never selects NULL rows for an undeclared attribute.
      */
     nullAttributeRepresentation?: NullAttributeRepresentation;
 }

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,EACV,qBAAqB,EAGtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,QAAQ,EAAE,CAAC;AAqGpB,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE/C,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;QACrB;;;;WAIG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtC;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,cAAc,CAAC,EAAE,YAAY,CAAC;KAC/B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,MAAM,GACd,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC5B,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,YAAY,CAAC,CAAC;AAEpC;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,2BAA2B,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,qBAAqB,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,IAAI,EAAE,QAAQ,CAAC,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC;CACxD,GACD;IACE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC;IAC3B,OAAO,EAAE,YAAY,CAAC;CACvB,CAAC;AAmcN;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,SAAS,EACT,MAAW,EACX,KAAK,EACL,2BAAwC,GACzC,EAAE,qBAAqB,GAAG,uBAAuB,CA6CjD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAW1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,CAAC;AAE/C,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEzD,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;QACrB;;;;WAIG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtC;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,cAAc,CAAC,EAAE,YAAY,CAAC;KAC/B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,MAAM,GACd,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC5B,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,YAAY,CAAC,CAAC;AAEpC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,2BAA2B,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,qBAAqB,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,IAAI,EAAE,QAAQ,CAAC,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC;CACxD,GACD;IACE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC;IAC3B,OAAO,EAAE,YAAY,CAAC;CACvB,CAAC;AAEN;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,SAAS,EACT,MAAW,EACX,KAAK,EACL,2BAAuC,GACxC,EAAE,qBAAqB,GAAG,uBAAuB,CAoDjD"}