@cerebruminc/yates 3.1.1 → 3.2.0-beta.dangerous.abf9bb6

package/dist/index.js

@@ -1,552 +0,0 @@
-"use strict";
-var __makeTemplateObject = (this && this.__makeTemplateObject) || function (cooked, raw) {
-    if (Object.defineProperty) { Object.defineProperty(cooked, "raw", { value: raw }); } else { cooked.raw = raw; }
-    return cooked;
-};
-var __assign = (this && this.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __values = (this && this.__values) || function(o) {
-    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
-    if (m) return m.call(o);
-    if (o && typeof o.length === "number") return {
-        next: function () {
-            if (o && i >= o.length) o = void 0;
-            return { value: o && o[i++], done: !o };
-        }
-    };
-    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
-};
-var __read = (this && this.__read) || function (o, n) {
-    var m = typeof Symbol === "function" && o[Symbol.iterator];
-    if (!m) return o;
-    var i = m.call(o), r, ar = [], e;
-    try {
-        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-    }
-    catch (error) { e = { error: error }; }
-    finally {
-        try {
-            if (r && !r.done && (m = i["return"])) m.call(i);
-        }
-        finally { if (e) throw e.error; }
-    }
-    return ar;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-exports.__esModule = true;
-exports.setup = exports.createRoles = exports.createClient = exports.createRoleName = exports.createAbilityName = void 0;
-var difference_1 = __importDefault(require("lodash/difference"));
-var flatMap_1 = __importDefault(require("lodash/flatMap"));
-var map_1 = __importDefault(require("lodash/map"));
-var toPairs_1 = __importDefault(require("lodash/toPairs"));
-var crypto = __importStar(require("crypto"));
-var expressions_1 = require("./expressions");
-var VALID_OPERATIONS = ["SELECT", "UPDATE", "INSERT", "DELETE"];
-/**
- * This function is used to take a lock that is automatically released at the end of the current transaction.
- * This is very convenient for ensuring we don't hit concurrency issues when running setup code.
- */
-var takeLock = function (prisma) {
-    return prisma.$executeRawUnsafe("SELECT pg_advisory_xact_lock(2142616474639426746);");
-};
-/**
- * In PostgreSQL, the maximum length for a role or policy name is 63 bytes.
- * This limitation is derived from the value of the NAMEDATALEN configuration parameter,
- * which is set to 64 bytes by default. One byte is reserved for the null-terminator,
- * leaving 63 bytes for the actual role name.
- * This function hashes the ability name to ensure it is within the 63 byte limit.
- */
-var hashWithPrefix = function (prefix, abilityName) {
-    var hash = crypto.createHash("sha256");
-    hash.update(abilityName);
-    var hashedAbilityName = hash.digest("hex");
-    var maxLength = 63 - prefix.length;
-    return prefix + hashedAbilityName.slice(0, maxLength);
-};
-// Sanitize a single string by ensuring the it has only lowercase alpha characters and underscores
-var sanitizeSlug = function (slug) { return slug.toLowerCase().replace("-", "_").replace(/[^a-z0-9_]/gi, ""); };
-var createAbilityName = function (model, ability) {
-    return sanitizeSlug(hashWithPrefix("yates_ability_", "".concat(model, "_").concat(ability)));
-};
-exports.createAbilityName = createAbilityName;
-var createRoleName = function (name) {
-    return sanitizeSlug(hashWithPrefix("yates_role_", "".concat(name)));
-};
-exports.createRoleName = createRoleName;
-// This uses client extensions to set the role and context for the current user so that RLS can be applied
-var createClient = function (prisma, getContext, options) {
-    if (options === void 0) { options = {}; }
-    // Set default options
-    var _a = options.txMaxWait, txMaxWait = _a === void 0 ? 30000 : _a, _b = options.txTimeout, txTimeout = _b === void 0 ? 30000 : _b;
-    var client = prisma.$extends({
-        name: "Yates client",
-        query: {
-            $allModels: {
-                $allOperations: function (params) {
-                    var _a;
-                    return __awaiter(this, void 0, void 0, function () {
-                        var model, args, query, operation, ctx, role, context, pgRole, _b, _c, k, _d, _e, v, queryResults, e_1;
-                        var e_2, _f, e_3, _g;
-                        var _this = this;
-                        return __generator(this, function (_h) {
-                            switch (_h.label) {
-                                case 0:
-                                    model = params.model, args = params.args, query = params.query, operation = params.operation;
-                                    if (!model) {
-                                        return [2 /*return*/, query(args)];
-                                    }
-                                    ctx = getContext();
-                                    // If ctx is null, the middleware is explicitly skipped
-                                    if (ctx === null) {
-                                        return [2 /*return*/, query(args)];
-                                    }
-                                    role = ctx.role, context = ctx.context;
-                                    pgRole = (0, exports.createRoleName)(role);
-                                    if (context) {
-                                        try {
-                                            for (_b = __values(Object.keys(context)), _c = _b.next(); !_c.done; _c = _b.next()) {
-                                                k = _c.value;
-                                                if (!k.match(/^[a-z_\.]+$/)) {
-                                                    throw new Error("Context variable \"".concat(k, "\" contains invalid characters. Context variables must only contain lowercase letters, numbers, periods and underscores."));
-                                                }
-                                                if (typeof context[k] !== "number" && typeof context[k] !== "string" && !Array.isArray(context[k])) {
-                                                    throw new Error("Context variable \"".concat(k, "\" must be a string, number or array. Got ").concat(typeof context[k]));
-                                                }
-                                                if (Array.isArray(context[k])) {
-                                                    try {
-                                                        for (_d = (e_3 = void 0, __values(context[k])), _e = _d.next(); !_e.done; _e = _d.next()) {
-                                                            v = _e.value;
-                                                            if (typeof v !== "string") {
-                                                                throw new Error("Context variable \"".concat(k, "\" must be an array of strings. Got ").concat(typeof v));
-                                                            }
-                                                        }
-                                                    }
-                                                    catch (e_3_1) { e_3 = { error: e_3_1 }; }
-                                                    finally {
-                                                        try {
-                                                            if (_e && !_e.done && (_g = _d["return"])) _g.call(_d);
-                                                        }
-                                                        finally { if (e_3) throw e_3.error; }
-                                                    }
-                                                    // Cast to a JSON string so that it can be used in RLS expressions
-                                                    context[k] = JSON.stringify(context[k]);
-                                                }
-                                            }
-                                        }
-                                        catch (e_2_1) { e_2 = { error: e_2_1 }; }
-                                        finally {
-                                            try {
-                                                if (_c && !_c.done && (_f = _b["return"])) _f.call(_b);
-                                            }
-                                            finally { if (e_2) throw e_2.error; }
-                                        }
-                                    }
-                                    _h.label = 1;
-                                case 1:
-                                    _h.trys.push([1, 3, , 4]);
-                                    return [4 /*yield*/, prisma.$transaction(function (tx) { return __awaiter(_this, void 0, void 0, function () {
-                                            var _a, _b, _c, key, value, e_4_1, txId, __internalParams, result;
-                                            var e_4, _d;
-                                            return __generator(this, function (_e) {
-                                                switch (_e.label) {
-                                                    case 0: 
-                                                    // Switch to the user role, We can't use a prepared statement here, due to limitations in PG not allowing prepared statements to be used in SET ROLE
-                                                    return [4 /*yield*/, tx.$queryRawUnsafe("SET ROLE ".concat(pgRole))];
-                                                    case 1:
-                                                        // Switch to the user role, We can't use a prepared statement here, due to limitations in PG not allowing prepared statements to be used in SET ROLE
-                                                        _e.sent();
-                                                        _e.label = 2;
-                                                    case 2:
-                                                        _e.trys.push([2, 7, 8, 9]);
-                                                        _a = __values((0, toPairs_1["default"])(context)), _b = _a.next();
-                                                        _e.label = 3;
-                                                    case 3:
-                                                        if (!!_b.done) return [3 /*break*/, 6];
-                                                        _c = __read(_b.value, 2), key = _c[0], value = _c[1];
-                                                        return [4 /*yield*/, tx.$queryRaw(templateObject_1 || (templateObject_1 = __makeTemplateObject(["SELECT set_config(", ", ", ",  true);"], ["SELECT set_config(", ", ", ",  true);"])), key, value.toString())];
-                                                    case 4:
-                                                        _e.sent();
-                                                        _e.label = 5;
-                                                    case 5:
-                                                        _b = _a.next();
-                                                        return [3 /*break*/, 3];
-                                                    case 6: return [3 /*break*/, 9];
-                                                    case 7:
-                                                        e_4_1 = _e.sent();
-                                                        e_4 = { error: e_4_1 };
-                                                        return [3 /*break*/, 9];
-                                                    case 8:
-                                                        try {
-                                                            if (_b && !_b.done && (_d = _a["return"])) _d.call(_a);
-                                                        }
-                                                        finally { if (e_4) throw e_4.error; }
-                                                        return [7 /*endfinally*/];
-                                                    case 9:
-                                                        txId = tx[Symbol["for"]("prisma.client.transaction.id")];
-                                                        __internalParams = params.__internalParams;
-                                                        return [4 /*yield*/, prisma._executeRequest(__assign(__assign({}, __internalParams), { transaction: {
-                                                                    kind: "itx",
-                                                                    id: txId
-                                                                } }))];
-                                                    case 10:
-                                                        result = _e.sent();
-                                                        // Switch role back to admin user
-                                                        return [4 /*yield*/, tx.$queryRawUnsafe("SET ROLE none")];
-                                                    case 11:
-                                                        // Switch role back to admin user
-                                                        _e.sent();
-                                                        return [2 /*return*/, result];
-                                                }
-                                            });
-                                        }); }, {
-                                            maxWait: txMaxWait,
-                                            timeout: txTimeout
-                                        })];
-                                case 2:
-                                    queryResults = _h.sent();
-                                    return [2 /*return*/, queryResults];
-                                case 3:
-                                    e_1 = _h.sent();
-                                    // Normalize RLS errors to make them a bit more readable.
-                                    if ((_a = e_1.message) === null || _a === void 0 ? void 0 : _a.includes("new row violates row-level security policy for table")) {
-                                        throw new Error("You do not have permission to perform this action: ".concat(model, ".").concat(operation, "(...)"));
-                                    }
-                                    throw e_1;
-                                case 4: return [2 /*return*/];
-                            }
-                        });
-                    });
-                }
-            }
-        }
-    });
-    return client;
-};
-exports.createClient = createClient;
-var setRLS = function (prisma, table, roleName, operation, rawExpression) { return __awaiter(void 0, void 0, void 0, function () {
-    var expression, policyName, rows;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0: return [4 /*yield*/, (0, expressions_1.expressionToSQL)(rawExpression, table)];
-            case 1:
-                expression = _a.sent();
-                policyName = roleName;
-                return [4 /*yield*/, prisma.$queryRawUnsafe("\n\t\tselect * from pg_catalog.pg_policies where tablename = '".concat(table, "' AND policyname = '").concat(policyName, "';\n\t"))];
-            case 2:
-                rows = _a.sent();
-                if (!(rows.length === 0)) return [3 /*break*/, 7];
-                if (!(operation === "INSERT")) return [3 /*break*/, 4];
-                return [4 /*yield*/, prisma.$queryRawUnsafe("\n        CREATE POLICY ".concat(policyName, " ON \"public\".\"").concat(table, "\" FOR ").concat(operation, " TO ").concat(roleName, " WITH CHECK (").concat(expression, ");\n      "))];
-            case 3:
-                _a.sent();
-                return [3 /*break*/, 6];
-            case 4: return [4 /*yield*/, prisma.$queryRawUnsafe("\n        CREATE POLICY ".concat(policyName, " ON \"public\".\"").concat(table, "\" FOR ").concat(operation, " TO ").concat(roleName, " USING (").concat(expression, ");\n      "))];
-            case 5:
-                _a.sent();
-                _a.label = 6;
-            case 6: return [3 /*break*/, 11];
-            case 7:
-                if (!(rows[0].qual !== expression)) return [3 /*break*/, 11];
-                if (!(operation === "INSERT")) return [3 /*break*/, 9];
-                return [4 /*yield*/, prisma.$queryRawUnsafe("\n        ALTER POLICY ".concat(policyName, " ON \"public\".\"").concat(table, "\" TO ").concat(roleName, " WITH CHECK (").concat(expression, ");\n      "))];
-            case 8:
-                _a.sent();
-                return [3 /*break*/, 11];
-            case 9: return [4 /*yield*/, prisma.$queryRawUnsafe("\n        ALTER POLICY ".concat(policyName, " ON \"public\".\"").concat(table, "\" TO ").concat(roleName, " USING (").concat(expression, ");\n      "))];
-            case 10:
-                _a.sent();
-                _a.label = 11;
-            case 11: return [2 /*return*/];
-        }
-    });
-}); };
-var createRoles = function (_a) {
-    var prisma = _a.prisma, customAbilities = _a.customAbilities, getRoles = _a.getRoles;
-    return __awaiter(void 0, void 0, void 0, function () {
-        var abilities, runtimeDataModel, models, diff, models_1, models_1_1, model, ability, operation, roles, _b, _c, _d, _i, model, table, _e, _f, _g, _h, slug, ability, roleName, _loop_1, _j, _k, _l, _m, key;
-        var e_5, _o;
-        var _p;
-        return __generator(this, function (_q) {
-            switch (_q.label) {
-                case 0:
-                    abilities = {};
-                    runtimeDataModel = prisma._runtimeDataModel;
-                    models = Object.keys(runtimeDataModel.models).map(function (m) { return runtimeDataModel.models[m].dbName || m; });
-                    if (customAbilities) {
-                        diff = (0, difference_1["default"])(Object.keys(customAbilities), models);
-                        if (diff.length) {
-                            throw new Error("Invalid models in custom abilities: ".concat(diff.join(", ")));
-                        }
-                    }
-                    try {
-                        for (models_1 = __values(models), models_1_1 = models_1.next(); !models_1_1.done; models_1_1 = models_1.next()) {
-                            model = models_1_1.value;
-                            abilities[model] = {
-                                create: {
-                                    description: "Create ".concat(model),
-                                    expression: "true",
-                                    operation: "INSERT",
-                                    model: model,
-                                    slug: "create"
-                                },
-                                read: {
-                                    description: "Read ".concat(model),
-                                    expression: "true",
-                                    operation: "SELECT",
-                                    model: model,
-                                    slug: "read"
-                                },
-                                update: {
-                                    description: "Update ".concat(model),
-                                    expression: "true",
-                                    operation: "UPDATE",
-                                    model: model,
-                                    slug: "update"
-                                },
-                                "delete": {
-                                    description: "Delete ".concat(model),
-                                    expression: "true",
-                                    operation: "DELETE",
-                                    model: model,
-                                    slug: "delete"
-                                }
-                            };
-                            if (customAbilities === null || customAbilities === void 0 ? void 0 : customAbilities[model]) {
-                                for (ability in customAbilities[model]) {
-                                    operation = (_p = customAbilities[model][ability]) === null || _p === void 0 ? void 0 : _p.operation;
-                                    if (!operation)
-                                        continue;
-                                    abilities[model][ability] = __assign(__assign({}, customAbilities[model][ability]), { operation: operation, model: model, slug: ability });
-                                }
-                            }
-                        }
-                    }
-                    catch (e_5_1) { e_5 = { error: e_5_1 }; }
-                    finally {
-                        try {
-                            if (models_1_1 && !models_1_1.done && (_o = models_1["return"])) _o.call(models_1);
-                        }
-                        finally { if (e_5) throw e_5.error; }
-                    }
-                    roles = getRoles(abilities);
-                    _b = abilities;
-                    _c = [];
-                    for (_d in _b)
-                        _c.push(_d);
-                    _i = 0;
-                    _q.label = 1;
-                case 1:
-                    if (!(_i < _c.length)) return [3 /*break*/, 8];
-                    _d = _c[_i];
-                    if (!(_d in _b)) return [3 /*break*/, 7];
-                    model = _d;
-                    table = model;
-                    return [4 /*yield*/, prisma.$transaction([
-                            takeLock(prisma),
-                            prisma.$queryRawUnsafe("ALTER table \"".concat(table, "\" enable row level security;")),
-                        ])];
-                case 2:
-                    _q.sent();
-                    _e = abilities[model];
-                    _f = [];
-                    for (_g in _e)
-                        _f.push(_g);
-                    _h = 0;
-                    _q.label = 3;
-                case 3:
-                    if (!(_h < _f.length)) return [3 /*break*/, 7];
-                    _g = _f[_h];
-                    if (!(_g in _e)) return [3 /*break*/, 6];
-                    slug = _g;
-                    ability = abilities[model][slug];
-                    if (!VALID_OPERATIONS.includes(ability.operation)) {
-                        throw new Error("Invalid operation: ".concat(ability.operation));
-                    }
-                    roleName = (0, exports.createAbilityName)(model, slug);
-                    // Check if role already exists
-                    return [4 /*yield*/, prisma.$transaction([
-                            takeLock(prisma),
-                            prisma.$queryRawUnsafe("\n\t\t\t\t\tdo\n\t\t\t\t\t$$\n\t\t\t\t\tbegin\n\t\t\t\t\tif not exists (select * from pg_catalog.pg_roles where rolname = '".concat(roleName, "') then \n\t\t\t\t\t\tcreate role ").concat(roleName, ";\n\t\t\t\t\tend if;\n\t\t\t\t\tend\n\t\t\t\t\t$$\n\t\t\t\t\t;\n\t\t\t\t")),
-                            prisma.$queryRawUnsafe("\n\t\t\t\t\tGRANT ".concat(ability.operation, " ON \"").concat(table, "\" TO ").concat(roleName, ";\n\t\t\t\t")),
-                        ])];
-                case 4:
-                    // Check if role already exists
-                    _q.sent();
-                    if (!ability.expression) return [3 /*break*/, 6];
-                    return [4 /*yield*/, setRLS(prisma, table, roleName, ability.operation, ability.expression)];
-                case 5:
-                    _q.sent();
-                    _q.label = 6;
-                case 6:
-                    _h++;
-                    return [3 /*break*/, 3];
-                case 7:
-                    _i++;
-                    return [3 /*break*/, 1];
-                case 8:
-                    _loop_1 = function (key) {
-                        var role, wildCardAbilities, roleAbilities, rlsRoles, userRoles, oldRoles;
-                        return __generator(this, function (_r) {
-                            switch (_r.label) {
-                                case 0:
-                                    role = (0, exports.createRoleName)(key);
-                                    return [4 /*yield*/, prisma.$executeRawUnsafe("\n\t\t\tdo\n\t\t\t$$\n\t\t\tbegin\n\t\t\tif not exists (select * from pg_catalog.pg_roles where rolname = '".concat(role, "') then \n\t\t\t\tcreate role ").concat(role, ";\n\t\t\tend if;\n\t\t\tend\n\t\t\t$$\n\t\t\t;\n\t\t"))];
-                                case 1:
-                                    _r.sent();
-                                    wildCardAbilities = (0, flatMap_1["default"])(abilities, function (model, modelName) {
-                                        return (0, map_1["default"])(model, function (_params, slug) {
-                                            return (0, exports.createAbilityName)(modelName, slug);
-                                        });
-                                    });
-                                    roleAbilities = roles[key];
-                                    rlsRoles = roleAbilities === "*"
-                                        ? wildCardAbilities
-                                        : roleAbilities.map(function (ability) { return (0, exports.createAbilityName)(ability.model, ability.slug); });
-                                    // Note: We need to GRANT all on schema public so that we can resolve relation queries with prisma, as they will sometimes use a join table.
-                                    // This is not ideal, but because we are using RLS, it's not a security risk. Any table with RLS also needs a corresponding policy for the role to have access.
-                                    return [4 /*yield*/, prisma.$transaction([
-                                            takeLock(prisma),
-                                            prisma.$executeRawUnsafe("GRANT ALL ON ALL TABLES IN SCHEMA public TO ".concat(role, ";")),
-                                            prisma.$executeRawUnsafe("\n\t\t\t\tGRANT ALL ON ALL SEQUENCES IN SCHEMA public TO ".concat(role, ";\n\t\t\t")),
-                                            prisma.$executeRawUnsafe("\n\t\t\t\tGRANT ALL ON SCHEMA public TO ".concat(role, ";\n\t\t\t")),
-                                            prisma.$queryRawUnsafe("GRANT ".concat(rlsRoles.join(", "), " TO ").concat(role)),
-                                        ])];
-                                case 2:
-                                    // Note: We need to GRANT all on schema public so that we can resolve relation queries with prisma, as they will sometimes use a join table.
-                                    // This is not ideal, but because we are using RLS, it's not a security risk. Any table with RLS also needs a corresponding policy for the role to have access.
-                                    _r.sent();
-                                    return [4 /*yield*/, prisma.$queryRawUnsafe("\n\t\t\tWITH RECURSIVE cte AS (\n\t\t\t\tSELECT oid FROM pg_roles where rolname = '".concat(role, "'\n\t\t\t\tUNION ALL\n\t\t\t\tSELECT m.roleid\n\t\t\t\tFROM   cte\n\t\t\t\tJOIN   pg_auth_members m ON m.member = cte.oid\n\t\t\t\t)\n\t\t\tSELECT oid, oid::regrole::text AS rolename FROM cte where oid::regrole::text != '").concat(role, "'; \n\t "))];
-                                case 3:
-                                    userRoles = _r.sent();
-                                    oldRoles = userRoles.filter(function (_a) {
-                                        var rolename = _a.rolename;
-                                        return !rlsRoles.includes(rolename);
-                                    }).map(function (_a) {
-                                        var rolename = _a.rolename;
-                                        return rolename;
-                                    });
-                                    if (!oldRoles.length) return [3 /*break*/, 5];
-                                    // Now revoke old roles from the user role
-                                    return [4 /*yield*/, prisma.$executeRawUnsafe("REVOKE ".concat(oldRoles.join(", "), " FROM ").concat(role))];
-                                case 4:
-                                    // Now revoke old roles from the user role
-                                    _r.sent();
-                                    _r.label = 5;
-                                case 5: return [2 /*return*/];
-                            }
-                        });
-                    };
-                    _j = roles;
-                    _k = [];
-                    for (_l in _j)
-                        _k.push(_l);
-                    _m = 0;
-                    _q.label = 9;
-                case 9:
-                    if (!(_m < _k.length)) return [3 /*break*/, 12];
-                    _l = _k[_m];
-                    if (!(_l in _j)) return [3 /*break*/, 11];
-                    key = _l;
-                    return [5 /*yield**/, _loop_1(key)];
-                case 10:
-                    _q.sent();
-                    _q.label = 11;
-                case 11:
-                    _m++;
-                    return [3 /*break*/, 9];
-                case 12: return [2 /*return*/];
-            }
-        });
-    });
-};
-exports.createRoles = createRoles;
-/**
- * Creates an extended client that sets contextual parameters and user role on every query
- **/
-var setup = function (params) { return __awaiter(void 0, void 0, void 0, function () {
-    var prisma, customAbilities, getRoles, getContext, client;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0:
-                prisma = params.prisma, customAbilities = params.customAbilities, getRoles = params.getRoles, getContext = params.getContext;
-                return [4 /*yield*/, (0, exports.createRoles)({ prisma: prisma, customAbilities: customAbilities, getRoles: getRoles })];
-            case 1:
-                _a.sent();
-                client = (0, exports.createClient)(prisma, getContext, params.options);
-                return [2 /*return*/, client];
-        }
-    });
-}); };
-exports.setup = setup;
-var templateObject_1;
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,iEAA2C;AAC3C,2DAAqC;AACrC,mDAA6B;AAC7B,2DAAqC;AACrC,6CAAiC;AACjC,6CAA8E;AAE9E,IAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAwC3E;;;GAGG;AACH,IAAM,QAAQ,GAAG,UAAC,MAAoB;IACrC,OAAA,MAAM,CAAC,iBAAiB,CAAC,oDAAoD,CAAC;AAA9E,CAA8E,CAAC;AAEhF;;;;;;GAMG;AACH,IAAM,cAAc,GAAG,UAAC,MAAc,EAAE,WAAmB;IAC1D,IAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,IAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAM,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,OAAO,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,kGAAkG;AAClG,IAAM,YAAY,GAAG,UAAC,IAAY,IAAK,OAAA,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,EAAhE,CAAgE,CAAC;AAEjG,IAAM,iBAAiB,GAAG,UAAC,KAAa,EAAE,OAAe;IAC/D,OAAO,YAAY,CAAC,cAAc,CAAC,gBAAgB,EAAE,UAAG,KAAK,cAAI,OAAO,CAAE,CAAC,CAAC,CAAC;AAC9E,CAAC,CAAC;AAFW,QAAA,iBAAiB,qBAE5B;AAEK,IAAM,cAAc,GAAG,UAAC,IAAY;IAC1C,OAAO,YAAY,CAAC,cAAc,CAAC,aAAa,EAAE,UAAG,IAAI,CAAE,CAAC,CAAC,CAAC;AAC/D,CAAC,CAAC;AAFW,QAAA,cAAc,kBAEzB;AAEF,0GAA0G;AACnG,IAAM,YAAY,GAAG,UAAC,MAAoB,EAAE,UAAwB,EAAE,OAA2B;IAA3B,wBAAA,EAAA,YAA2B;IACvG,sBAAsB;IACd,IAAA,KAAyC,OAAO,UAA/B,EAAjB,SAAS,mBAAG,KAAK,KAAA,EAAE,KAAsB,OAAO,UAAZ,EAAjB,SAAS,mBAAG,KAAK,KAAA,CAAa;IACzD,IAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE;YACN,UAAU,EAAE;gBACL,cAAc,YAAC,MAAM;;;;;;;;;oCAClB,KAAK,GAA6B,MAAM,MAAnC,EAAE,IAAI,GAAuB,MAAM,KAA7B,EAAE,KAAK,GAAgB,MAAM,MAAtB,EAAE,SAAS,GAAK,MAAM,UAAX,CAAY;oCACjD,IAAI,CAAC,KAAK,EAAE;wCACX,sBAAQ,KAAa,CAAC,IAAI,CAAC,EAAC;qCAC5B;oCAEK,GAAG,GAAG,UAAU,EAAE,CAAC;oCAEzB,uDAAuD;oCACvD,IAAI,GAAG,KAAK,IAAI,EAAE;wCACjB,sBAAO,KAAK,CAAC,IAAI,CAAC,EAAC;qCACnB;oCAEO,IAAI,GAAc,GAAG,KAAjB,EAAE,OAAO,GAAK,GAAG,QAAR,CAAS;oCAExB,MAAM,GAAG,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAC;oCAEpC,IAAI,OAAO,EAAE;;4CACZ,KAAgB,KAAA,SAAA,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA,4CAAE;gDAA3B,CAAC;gDACX,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;oDAC5B,MAAM,IAAI,KAAK,CACd,6BAAqB,CAAC,6HAAyH,CAC/I,CAAC;iDACF;gDACD,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;oDACnG,MAAM,IAAI,KAAK,CAAC,6BAAqB,CAAC,uDAA4C,OAAO,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;iDACvG;gDACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;;wDAC9B,KAAgB,oBAAA,SAAA,OAAO,CAAC,CAAC,CAAU,CAAA,CAAA,4CAAE;4DAA1B,CAAC;4DACX,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;gEAC1B,MAAM,IAAI,KAAK,CAAC,6BAAqB,CAAC,iDAAsC,OAAO,CAAC,CAAE,CAAC,CAAC;6DACxF;yDACD;;;;;;;;;oDACD,kEAAkE;oDAClE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;iDACxC;6CACD;;;;;;;;;qCACD;;;;oCAOqB,qBAAM,MAAM,CAAC,YAAY,CAC7C,UAAO,EAAE;;;;;;oDACR,oJAAoJ;oDACpJ,qBAAM,EAAE,CAAC,eAAe,CAAC,mBAAY,MAAM,CAAE,CAAC,EAAA;;wDAD9C,oJAAoJ;wDACpJ,SAA8C,CAAC;;;;wDAEpB,KAAA,SAAA,IAAA,oBAAO,EAAC,OAAO,CAAC,CAAA;;;;wDAAhC,KAAA,mBAAY,EAAX,GAAG,QAAA,EAAE,KAAK,QAAA;wDACrB,qBAAM,EAAE,CAAC,SAAS,0GAAA,oBAAqB,EAAG,IAAK,EAAgB,WAAW,KAAnC,GAAG,EAAK,KAAK,CAAC,QAAQ,EAAE,GAAW;;wDAA1E,SAA0E,CAAC;;;;;;;;;;;;;;;;;wDAQtE,IAAI,GAAI,EAAU,CAAC,MAAM,CAAC,KAAG,CAAA,CAAC,8BAA8B,CAAC,CAAC,CAAC;wDAG/D,gBAAgB,GAAI,MAAc,CAAC,gBAAgB,CAAC;wDAC3C,qBAAM,MAAM,CAAC,eAAe,uBACvC,gBAAgB,KACnB,WAAW,EAAE;oEACZ,IAAI,EAAE,KAAK;oEACX,EAAE,EAAE,IAAI;iEACR,IACA,EAAA;;wDANI,MAAM,GAAG,SAMb;wDACF,iCAAiC;wDACjC,qBAAM,EAAE,CAAC,eAAe,CAAC,eAAe,CAAC,EAAA;;wDADzC,iCAAiC;wDACjC,SAAyC,CAAC;wDAE1C,sBAAO,MAAM,EAAC;;;6CACd,EACD;4CACC,OAAO,EAAE,SAAS;4CAClB,OAAO,EAAE,SAAS;yCAClB,CACD,EAAA;;oCAlCK,YAAY,GAAG,SAkCpB;oCAED,sBAAO,YAAY,EAAC;;;oCAEpB,yDAAyD;oCACzD,IAAI,MAAA,GAAC,CAAC,OAAO,0CAAE,QAAQ,CAAC,sDAAsD,CAAC,EAAE;wCAChF,MAAM,IAAI,KAAK,CAAC,6DAAsD,KAAK,cAAI,SAAS,UAAO,CAAC,CAAC;qCACjG;oCAED,MAAM,GAAC,CAAC;;;;;iBAET;aACD;SACD;KACD,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AAtGW,QAAA,YAAY,gBAsGvB;AAEF,IAAM,MAAM,GAAG,UACd,MAAoB,EACpB,KAAa,EACb,QAAgB,EAChB,SAAoB,EACpB,aAAyB;;;;oBAER,qBAAM,IAAA,6BAAe,EAAC,aAAa,EAAE,KAAK,CAAC,EAAA;;gBAAxD,UAAU,GAAG,SAA2C;gBAGtD,UAAU,GAAG,QAAQ,CAAC;gBACR,qBAAM,MAAM,CAAC,eAAe,CAAC,wEACU,KAAK,iCAAuB,UAAU,WAChG,CAAC,EAAA;;gBAFI,IAAI,GAAU,SAElB;qBAEE,CAAA,IAAI,CAAC,MAAM,KAAK,CAAC,CAAA,EAAjB,wBAAiB;qBAEhB,CAAA,SAAS,KAAK,QAAQ,CAAA,EAAtB,wBAAsB;gBACzB,qBAAM,MAAM,CAAC,eAAe,CAAC,kCACR,UAAU,8BAAiB,KAAK,oBAAS,SAAS,iBAAO,QAAQ,0BAAgB,UAAU,eAC5G,CAAC,EAAA;;gBAFL,SAEK,CAAC;;oBAEN,qBAAM,MAAM,CAAC,eAAe,CAAC,kCACR,UAAU,8BAAiB,KAAK,oBAAS,SAAS,iBAAO,QAAQ,qBAAW,UAAU,eACvG,CAAC,EAAA;;gBAFL,SAEK,CAAC;;;;qBAEG,CAAA,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAA,EAA3B,yBAA2B;qBACjC,CAAA,SAAS,KAAK,QAAQ,CAAA,EAAtB,wBAAsB;gBACzB,qBAAM,MAAM,CAAC,eAAe,CAAC,iCACT,UAAU,8BAAiB,KAAK,mBAAQ,QAAQ,0BAAgB,UAAU,eAC1F,CAAC,EAAA;;gBAFL,SAEK,CAAC;;oBAEN,qBAAM,MAAM,CAAC,eAAe,CAAC,iCACT,UAAU,8BAAiB,KAAK,mBAAQ,QAAQ,qBAAW,UAAU,eACrF,CAAC,EAAA;;gBAFL,SAEK,CAAC;;;;;KAGR,CAAC;AAEK,IAAM,WAAW,GAAG,UAA8E,EAUxG;QATA,MAAM,YAAA,EACN,eAAe,qBAAA,EACf,QAAQ,cAAA;;;;;;;;oBAQF,SAAS,GAA8B,EAAE,CAAC;oBAM1C,gBAAgB,GAAI,MAAc,CAAC,iBAAqC,CAAC;oBACzE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,EAAtC,CAAsC,CAAa,CAAC;oBACnH,IAAI,eAAe,EAAE;wBACd,IAAI,GAAG,IAAA,uBAAU,EAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;wBAC9D,IAAI,IAAI,CAAC,MAAM,EAAE;4BAChB,MAAM,IAAI,KAAK,CAAC,8CAAuC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAAC,CAAC;yBAC1E;qBACD;;wBACD,KAAoB,WAAA,SAAA,MAAM,CAAA,gFAAE;4BAAjB,KAAK;4BACf,SAAS,CAAC,KAAK,CAAC,GAAG;gCAClB,MAAM,EAAE;oCACP,WAAW,EAAE,iBAAU,KAAK,CAAE;oCAC9B,UAAU,EAAE,MAAM;oCAClB,SAAS,EAAE,QAAQ;oCACnB,KAAK,OAAA;oCACL,IAAI,EAAE,QAAQ;iCACd;gCACD,IAAI,EAAE;oCACL,WAAW,EAAE,eAAQ,KAAK,CAAE;oCAC5B,UAAU,EAAE,MAAM;oCAClB,SAAS,EAAE,QAAQ;oCACnB,KAAK,OAAA;oCACL,IAAI,EAAE,MAAM;iCACZ;gCACD,MAAM,EAAE;oCACP,WAAW,EAAE,iBAAU,KAAK,CAAE;oCAC9B,UAAU,EAAE,MAAM;oCAClB,SAAS,EAAE,QAAQ;oCACnB,KAAK,OAAA;oCACL,IAAI,EAAE,QAAQ;iCACd;gCACD,QAAM,EAAE;oCACP,WAAW,EAAE,iBAAU,KAAK,CAAE;oCAC9B,UAAU,EAAE,MAAM;oCAClB,SAAS,EAAE,QAAQ;oCACnB,KAAK,OAAA;oCACL,IAAI,EAAE,QAAQ;iCACd;6BACD,CAAC;4BACF,IAAI,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAG,KAAK,CAAC,EAAE;gCAC7B,KAAW,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE;oCACvC,SAAS,GAAG,MAAA,eAAe,CAAC,KAAK,CAAE,CAAC,OAAyB,CAAC,0CAAE,SAAS,CAAC;oCAChF,IAAI,CAAC,SAAS;wCAAE,SAAS;oCACzB,SAAS,CAAC,KAAK,CAAE,CAAC,OAAyB,CAAC,yBACxC,eAAe,CAAC,KAAK,CAAE,CAAC,OAAO,CAAC,KACnC,SAAS,WAAA,EACT,KAAK,OAAA,EACL,IAAI,EAAE,OAAO,GACb,CAAC;iCACF;6BACD;yBACD;;;;;;;;;oBAEK,KAAK,GAAG,QAAQ,CAAC,SAAc,CAAC,CAAC;yBAInB,SAAS;;;;;;;;;;;oBACtB,KAAK,GAAG,KAAK,CAAC;oBAEpB,qBAAM,MAAM,CAAC,YAAY,CAAC;4BACzB,QAAQ,CAAC,MAAM,CAAC;4BAChB,MAAM,CAAC,eAAe,CAAC,wBAAgB,KAAK,kCAA8B,CAAC;yBAC3E,CAAC,EAAA;;oBAHF,SAGE,CAAC;yBAEgB,SAAS,CAAC,KAA+B,CAAC;;;;;;;;;;;oBACtD,OAAO,GAAG,SAAS,CAAC,KAA+B,CAAE,CAAC,IAAsB,CAAC,CAAC;oBAEpF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;wBAClD,MAAM,IAAI,KAAK,CAAC,6BAAsB,OAAO,CAAC,SAAS,CAAE,CAAC,CAAC;qBAC3D;oBAEK,QAAQ,GAAG,IAAA,yBAAiB,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBAEhD,+BAA+B;oBAC/B,qBAAM,MAAM,CAAC,YAAY,CAAC;4BACzB,QAAQ,CAAC,MAAM,CAAC;4BAChB,MAAM,CAAC,eAAe,CAAC,qIAI8C,QAAQ,+CAC7D,QAAQ,6EAKvB,CAAC;4BACF,MAAM,CAAC,eAAe,CAAC,4BACd,OAAO,CAAC,SAAS,mBAAQ,KAAK,mBAAQ,QAAQ,gBACtD,CAAC;yBACF,CAAC,EAAA;;oBAjBF,+BAA+B;oBAC/B,SAgBE,CAAC;yBAEC,OAAO,CAAC,UAAU,EAAlB,wBAAkB;oBACrB,qBAAM,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,EAAA;;oBAA5E,SAA4E,CAAC;;;;;;;;;wCAQrE,GAAG;;;;;oCACP,IAAI,GAAG,IAAA,sBAAc,EAAC,GAAG,CAAC,CAAC;oCACjC,qBAAM,MAAM,CAAC,iBAAiB,CAAC,qHAIsC,IAAI,2CACzD,IAAI,yDAKnB,CAAC,EAAA;;oCAVF,SAUE,CAAC;oCAEG,iBAAiB,GAAG,IAAA,oBAAO,EAAC,SAAS,EAAE,UAAC,KAAK,EAAE,SAAS;wCAC7D,OAAO,IAAA,gBAAG,EAAC,KAAK,EAAE,UAAC,OAAO,EAAE,IAAI;4CAC/B,OAAO,IAAA,yBAAiB,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;wCAC3C,CAAC,CAAC,CAAC;oCACJ,CAAC,CAAC,CAAC;oCACG,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;oCAC3B,QAAQ,GACb,aAAa,KAAK,GAAG;wCACpB,CAAC,CAAC,iBAAiB;wCACnB,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,UAAC,OAAO,IAAK,OAAA,IAAA,yBAAiB,EAAC,OAAO,CAAC,KAAM,EAAE,OAAO,CAAC,IAAK,CAAC,EAAhD,CAAgD,CAAC,CAAC;oCAErF,4IAA4I;oCAC5I,+JAA+J;oCAC/J,qBAAM,MAAM,CAAC,YAAY,CAAC;4CACzB,QAAQ,CAAC,MAAM,CAAC;4CAChB,MAAM,CAAC,iBAAiB,CAAC,sDAA+C,IAAI,MAAG,CAAC;4CAChF,MAAM,CAAC,iBAAiB,CAAC,mEACyB,IAAI,cACrD,CAAC;4CACF,MAAM,CAAC,iBAAiB,CAAC,kDACQ,IAAI,cACpC,CAAC;4CACF,MAAM,CAAC,eAAe,CAAC,gBAAS,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAO,IAAI,CAAE,CAAC;yCACjE,CAAC,EAAA;;oCAZF,4IAA4I;oCAC5I,+JAA+J;oCAC/J,SAUE,CAAC;oCAGyD,qBAAM,MAAM,CAAC,eAAe,CAAC,6FAE3C,IAAI,0OAMkC,IAAI,aACvF,CAAC,EAAA;;oCATI,SAAS,GAA6C,SAS1D;oCAEI,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,UAAC,EAAY;4CAAV,QAAQ,cAAA;wCAAO,OAAA,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;oCAA5B,CAA4B,CAAC,CAAC,GAAG,CAAC,UAAC,EAAY;4CAAV,QAAQ,cAAA;wCAAO,OAAA,QAAQ;oCAAR,CAAQ,CAAC,CAAC;yCAC9G,QAAQ,CAAC,MAAM,EAAf,wBAAe;oCAClB,0CAA0C;oCAC1C,qBAAM,MAAM,CAAC,iBAAiB,CAAC,iBAAU,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAS,IAAI,CAAE,CAAC,EAAA;;oCAD5E,0CAA0C;oCAC1C,SAA4E,CAAC;;;;;;yBAtD7D,KAAK;;;;;;;;;;;kDAAZ,GAAG;;;;;;;;;;;CAyDd,CAAC;AAhLW,QAAA,WAAW,eAgLtB;AA+BF;;IAEI;AACG,IAAM,KAAK,GAAG,UAIpB,MAAmC;;;;;gBAE3B,MAAM,GAA4C,MAAM,OAAlD,EAAE,eAAe,GAA2B,MAAM,gBAAjC,EAAE,QAAQ,GAAiB,MAAM,SAAvB,EAAE,UAAU,GAAK,MAAM,WAAX,CAAY;gBACjE,qBAAM,IAAA,mBAAW,EAAI,EAAE,MAAM,QAAA,EAAE,eAAe,iBAAA,EAAE,QAAQ,UAAA,EAAE,CAAC,EAAA;;gBAA3D,SAA2D,CAAC;gBACtD,MAAM,GAAG,IAAA,oBAAY,EAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEhE,sBAAO,MAAM,EAAC;;;KACd,CAAC;AAXW,QAAA,KAAK,SAWhB"}