@contember/schema-definition 2.1.0-alpha.36 → 2.1.0-alpha.39

package/dist/production/src/acl/builder/EntityPermissionsBuilder.js

@@ -0,0 +1,120 @@
+import { tuple } from "../../utils/tuple.js";
+import "reflect-metadata";
+import { Acl } from "@contember/schema";
+import FieldSelector from "./FieldSelector.js";
+import FieldPermissionsBuilder from "./FieldPermissionsBuilder.js";
+import { resolvePredicateReference } from "./PredicateReference.js";
+class EntityPermissionsBuilder {
+  constructor(builder, entities) {
+    this.builder = builder;
+    this.entities = entities;
+  }
+  get schema() {
+    return this.builder.schema;
+  }
+  get permissions() {
+    return this.builder.permissions;
+  }
+  addPredicate(name, predicate) {
+    const predicates = this.entities.reduce(
+      (acc, entity) => ({
+        ...acc,
+        [entity.name]: {
+          operations: {},
+          predicates: { [name]: resolvePredicateReference(this.schema, this.permissions, entity, predicate) }
+        }
+      }),
+      {}
+    );
+    return this.add(predicates);
+  }
+  allow(operations, predicate = true) {
+    return this.updateAll(operations, predicate);
+  }
+  allowAll(predicate = true) {
+    return this.updateAll(
+      [Acl.Operation.read, Acl.Operation.create, Acl.Operation.update, Acl.Operation.delete],
+      predicate
+    );
+  }
+  allowOnlyRead(predicate = true) {
+    return this.disallowAll().allow([Acl.Operation.read], predicate);
+  }
+  disallowAll() {
+    return this.updateAll([Acl.Operation.read, Acl.Operation.create, Acl.Operation.update, Acl.Operation.delete], false);
+  }
+  allowDelete(predicate = true) {
+    return this.addEntityPermission(() => ({ operations: { delete: predicate }, predicates: {} }));
+  }
+  allowCustomPrimary() {
+    return this.addEntityPermission(() => ({ operations: { customPrimary: true }, predicates: {} }));
+  }
+  updateAll(operations, predicate) {
+    return this.addEntityPermission((entity) => {
+      const fieldPermissions = Object.keys(entity.fields).reduce(
+        (permissions, fieldName) => {
+          return { ...permissions, [fieldName]: predicate };
+        },
+        {}
+      );
+      const entityOperations = {};
+      if (operations.includes(Acl.Operation.read)) {
+        entityOperations.read = fieldPermissions;
+      }
+      if (operations.includes(Acl.Operation.create)) {
+        entityOperations.create = fieldPermissions;
+      }
+      if (operations.includes(Acl.Operation.update)) {
+        entityOperations.update = fieldPermissions;
+      }
+      if (operations.includes(Acl.Operation.delete)) {
+        entityOperations.delete = predicate;
+      }
+      return {
+        operations: entityOperations,
+        predicates: {}
+      };
+    });
+  }
+  addEntityPermission(entityPermission) {
+    const permissions = this.entities.reduce(
+      (acc, entity) => ({ ...acc, [entity.name]: entityPermission(entity) }),
+      {}
+    );
+    return this.add(permissions);
+  }
+  add(permissions) {
+    return new EntityPermissionsBuilder(this.builder.add(permissions), this.entities);
+  }
+  onEntity(entitySelector) {
+    return this.builder.onEntity(entitySelector);
+  }
+  onEveryEntity() {
+    return this.builder.onEveryEntity();
+  }
+  onField(fieldSelector) {
+    if (typeof fieldSelector === "string") {
+      fieldSelector = FieldSelector.named(fieldSelector);
+    } else if (Array.isArray(fieldSelector)) {
+      fieldSelector = FieldSelector.named(...fieldSelector);
+    }
+    const fieldSelectorConst = fieldSelector;
+    const fields = this.entities.map(
+      (it) => tuple(
+        it,
+        Object.values(it.fields).filter((field) => fieldSelectorConst.matches(this.schema, it, field))
+      )
+    ).reduce(
+      (acc, [entity, fields2]) => [...acc, ...fields2.map((it) => tuple(entity, it))],
+      []
+    );
+    return new FieldPermissionsBuilder(this, fields);
+  }
+  onEveryField() {
+    return this.onField(FieldSelector.every());
+  }
+}
+export {
+  EntityPermissionsBuilder as default
+};
+//# sourceMappingURL=EntityPermissionsBuilder.js.map

package/dist/production/src/acl/builder/EntityPermissionsBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntityPermissionsBuilder.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/EntityPermissionsBuilder.ts"],"sourcesContent":["import { tuple } from '../../utils'\nimport EntitySelector from './EntitySelector'\nimport { Acl, Model, Writable } from '@contember/schema'\nimport FieldSelector from './FieldSelector'\nimport FieldPermissionsBuilder from './FieldPermissionsBuilder'\nimport { PermissionsBuilder } from './PermissionsBuilder'\nimport PredicateReference, { resolvePredicateReference } from './PredicateReference'\n\nexport default class EntityPermissionsBuilder {\n\tpublic constructor(public readonly builder: PermissionsBuilder, private readonly entities: Model.Entity[]) {}\n\n\tget schema(): Model.Schema {\n\t\treturn this.builder.schema\n\t}\n\n\tget permissions(): Acl.Permissions {\n\t\treturn this.builder.permissions\n\t}\n\n\taddPredicate(name: string, predicate: Acl.PredicateDefinition<PredicateReference>): EntityPermissionsBuilder {\n\t\tconst predicates = this.entities.reduce<Acl.Permissions>(\n\t\t\t(acc, entity) => ({\n\t\t\t\t...acc,\n\t\t\t\t[entity.name]: {\n\t\t\t\t\toperations: {},\n\t\t\t\t\tpredicates: { [name]: resolvePredicateReference(this.schema, this.permissions, entity, predicate) },\n\t\t\t\t},\n\t\t\t}),\n\t\t\t{},\n\t\t)\n\n\t\treturn this.add(predicates)\n\t}\n\n\tallow(operations: Acl.Operation[], predicate: Acl.Predicate = true): EntityPermissionsBuilder {\n\t\treturn this.updateAll(operations, predicate)\n\t}\n\n\tallowAll(predicate: Acl.Predicate = true): EntityPermissionsBuilder {\n\t\treturn this.updateAll(\n\t\t\t[Acl.Operation.read, Acl.Operation.create, Acl.Operation.update, Acl.Operation.delete],\n\t\t\tpredicate,\n\t\t)\n\t}\n\n\tallowOnlyRead(predicate: Acl.Predicate = true): EntityPermissionsBuilder {\n\t\treturn this.disallowAll().allow([Acl.Operation.read], predicate)\n\t}\n\n\tdisallowAll(): EntityPermissionsBuilder {\n\t\treturn this.updateAll([Acl.Operation.read, Acl.Operation.create, Acl.Operation.update, Acl.Operation.delete], false)\n\t}\n\n\tallowDelete(predicate: Acl.Predicate = true): EntityPermissionsBuilder {\n\t\treturn this.addEntityPermission(() => ({ operations: { delete: predicate }, predicates: {} }))\n\t}\n\n\tallowCustomPrimary(): EntityPermissionsBuilder {\n\t\treturn this.addEntityPermission(() => ({ operations: { customPrimary: true }, predicates: {} }))\n\t}\n\n\tprivate updateAll(operations: Acl.Operation[], predicate: Acl.Predicate): EntityPermissionsBuilder {\n\t\treturn this.addEntityPermission(entity => {\n\t\t\tconst fieldPermissions = Object.keys(entity.fields).reduce(\n\t\t\t\t(permissions: Acl.FieldPermissions, fieldName): Acl.FieldPermissions => {\n\t\t\t\t\treturn { ...permissions, [fieldName]: predicate }\n\t\t\t\t},\n\t\t\t\t{},\n\t\t\t)\n\t\t\tconst entityOperations: Writable<Acl.EntityOperations> = {}\n\t\t\tif (operations.includes(Acl.Operation.read)) {\n\t\t\t\tentityOperations.read = fieldPermissions\n\t\t\t}\n\t\t\tif (operations.includes(Acl.Operation.create)) {\n\t\t\t\tentityOperations.create = fieldPermissions\n\t\t\t}\n\t\t\tif (operations.includes(Acl.Operation.update)) {\n\t\t\t\tentityOperations.update = fieldPermissions\n\t\t\t}\n\t\t\tif (operations.includes(Acl.Operation.delete)) {\n\t\t\t\tentityOperations.delete = predicate\n\t\t\t}\n\t\t\treturn {\n\t\t\t\toperations: entityOperations,\n\t\t\t\tpredicates: {},\n\t\t\t}\n\t\t})\n\t}\n\n\tprivate addEntityPermission(\n\t\tentityPermission: (entity: Model.Entity) => Acl.EntityPermissions,\n\t): EntityPermissionsBuilder {\n\t\tconst permissions = this.entities.reduce<Acl.Permissions>(\n\t\t\t(acc, entity) => ({ ...acc, [entity.name]: entityPermission(entity) }),\n\t\t\t{},\n\t\t)\n\t\treturn this.add(permissions)\n\t}\n\n\tpublic add(permissions: Acl.Permissions): EntityPermissionsBuilder {\n\t\treturn new EntityPermissionsBuilder(this.builder.add(permissions), this.entities)\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\treturn this.builder.onEntity(entitySelector)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.builder.onEveryEntity()\n\t}\n\n\tonField(fieldSelector: FieldSelector | string | string[]): FieldPermissionsBuilder {\n\t\tif (typeof fieldSelector === 'string') {\n\t\t\tfieldSelector = FieldSelector.named(fieldSelector)\n\t\t} else if (Array.isArray(fieldSelector)) {\n\t\t\tfieldSelector = FieldSelector.named(...fieldSelector)\n\t\t}\n\t\tconst fieldSelectorConst = fieldSelector\n\t\tconst fields = this.entities\n\t\t\t.map(it =>\n\t\t\t\ttuple(\n\t\t\t\t\tit,\n\t\t\t\t\tObject.values(it.fields).filter(field => fieldSelectorConst.matches(this.schema, it, field)),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.reduce<[Model.Entity, Model.AnyField][]>(\n\t\t\t\t(acc, [entity, fields]) => [...acc, ...fields.map(it => tuple(entity, it))],\n\t\t\t\t[],\n\t\t\t)\n\t\treturn new FieldPermissionsBuilder(this, fields)\n\t}\n\n\tonEveryField(): FieldPermissionsBuilder {\n\t\treturn this.onField(FieldSelector.every())\n\t}\n}\n"],"names":["fields"],"mappings":";;;;;;AAQA,MAAqB,yBAAyB;AAAA,EACtC,YAA4B,SAA8C,UAA0B;AAAxE,SAAA,UAAA;AAA8C,SAAA,WAAA;AAAA,EAA2B;AAAA,EAE5G,IAAI,SAAuB;AAC1B,WAAO,KAAK,QAAQ;AAAA,EACrB;AAAA,EAEA,IAAI,cAA+B;AAClC,WAAO,KAAK,QAAQ;AAAA,EACrB;AAAA,EAEA,aAAa,MAAc,WAAkF;AAC5G,UAAM,aAAa,KAAK,SAAS;AAAA,MAChC,CAAC,KAAK,YAAY;AAAA,QACjB,GAAG;AAAA,QACH,CAAC,OAAO,IAAI,GAAG;AAAA,UACd,YAAY,CAAA;AAAA,UACZ,YAAY,EAAE,CAAC,IAAI,GAAG,0BAA0B,KAAK,QAAQ,KAAK,aAAa,QAAQ,SAAS,EAAA;AAAA,QAAE;AAAA,MACnG;AAAA,MAED,CAAA;AAAA,IAAC;AAGF,WAAO,KAAK,IAAI,UAAU;AAAA,EAC3B;AAAA,EAEA,MAAM,YAA6B,YAA2B,MAAgC;AAC7F,WAAO,KAAK,UAAU,YAAY,SAAS;AAAA,EAC5C;AAAA,EAEA,SAAS,YAA2B,MAAgC;AACnE,WAAO,KAAK;AAAA,MACX,CAAC,IAAI,UAAU,MAAM,IAAI,UAAU,QAAQ,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM;AAAA,MACrF;AAAA,IAAA;AAAA,EAEF;AAAA,EAEA,cAAc,YAA2B,MAAgC;AACxE,WAAO,KAAK,cAAc,MAAM,CAAC,IAAI,UAAU,IAAI,GAAG,SAAS;AAAA,EAChE;AAAA,EAEA,cAAwC;AACvC,WAAO,KAAK,UAAU,CAAC,IAAI,UAAU,MAAM,IAAI,UAAU,QAAQ,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM,GAAG,KAAK;AAAA,EACpH;AAAA,EAEA,YAAY,YAA2B,MAAgC;AACtE,WAAO,KAAK,oBAAoB,OAAO,EAAE,YAAY,EAAE,QAAQ,aAAa,YAAY,CAAA,EAAC,EAAI;AAAA,EAC9F;AAAA,EAEA,qBAA+C;AAC9C,WAAO,KAAK,oBAAoB,OAAO,EAAE,YAAY,EAAE,eAAe,QAAQ,YAAY,CAAA,EAAC,EAAI;AAAA,EAChG;AAAA,EAEQ,UAAU,YAA6B,WAAoD;AAClG,WAAO,KAAK,oBAAoB,CAAA,WAAU;AACzC,YAAM,mBAAmB,OAAO,KAAK,OAAO,MAAM,EAAE;AAAA,QACnD,CAAC,aAAmC,cAAoC;AACvE,iBAAO,EAAE,GAAG,aAAa,CAAC,SAAS,GAAG,UAAA;AAAA,QACvC;AAAA,QACA,CAAA;AAAA,MAAC;AAEF,YAAM,mBAAmD,CAAA;AACzD,UAAI,WAAW,SAAS,IAAI,UAAU,IAAI,GAAG;AAC5C,yBAAiB,OAAO;AAAA,MACzB;AACA,UAAI,WAAW,SAAS,IAAI,UAAU,MAAM,GAAG;AAC9C,yBAAiB,SAAS;AAAA,MAC3B;AACA,UAAI,WAAW,SAAS,IAAI,UAAU,MAAM,GAAG;AAC9C,yBAAiB,SAAS;AAAA,MAC3B;AACA,UAAI,WAAW,SAAS,IAAI,UAAU,MAAM,GAAG;AAC9C,yBAAiB,SAAS;AAAA,MAC3B;AACA,aAAO;AAAA,QACN,YAAY;AAAA,QACZ,YAAY,CAAA;AAAA,MAAC;AAAA,IAEf,CAAC;AAAA,EACF;AAAA,EAEQ,oBACP,kBAC2B;AAC3B,UAAM,cAAc,KAAK,SAAS;AAAA,MACjC,CAAC,KAAK,YAAY,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,iBAAiB,MAAM;MAClE,CAAA;AAAA,IAAC;AAEF,WAAO,KAAK,IAAI,WAAW;AAAA,EAC5B;AAAA,EAEO,IAAI,aAAwD;AAClE,WAAO,IAAI,yBAAyB,KAAK,QAAQ,IAAI,WAAW,GAAG,KAAK,QAAQ;AAAA,EACjF;AAAA,EAEO,SAAS,gBAA8E;AAC7F,WAAO,KAAK,QAAQ,SAAS,cAAc;AAAA,EAC5C;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,QAAQ,cAAA;AAAA,EACrB;AAAA,EAEA,QAAQ,eAA2E;AAClF,QAAI,OAAO,kBAAkB,UAAU;AACtC,sBAAgB,cAAc,MAAM,aAAa;AAAA,IAClD,WAAW,MAAM,QAAQ,aAAa,GAAG;AACxC,sBAAgB,cAAc,MAAM,GAAG,aAAa;AAAA,IACrD;AACA,UAAM,qBAAqB;AAC3B,UAAM,SAAS,KAAK,SAClB;AAAA,MAAI,CAAA,OACJ;AAAA,QACC;AAAA,QACA,OAAO,OAAO,GAAG,MAAM,EAAE,OAAO,CAAA,UAAS,mBAAmB,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC;AAAA,MAAA;AAAA,IAC5F,EAEA;AAAA,MACA,CAAC,KAAK,CAAC,QAAQA,OAAM,MAAM,CAAC,GAAG,KAAK,GAAGA,QAAO,IAAI,CAAA,OAAM,MAAM,QAAQ,EAAE,CAAC,CAAC;AAAA,MAC1E,CAAA;AAAA,IAAC;AAEH,WAAO,IAAI,wBAAwB,MAAM,MAAM;AAAA,EAChD;AAAA,EAEA,eAAwC;AACvC,WAAO,KAAK,QAAQ,cAAc,MAAA,CAAO;AAAA,EAC1C;AACD;"}

package/dist/production/src/acl/builder/EntitySelector.cjs

@@ -0,0 +1,32 @@
+"use strict";
+const schemaUtils = require("@contember/schema-utils");
+class EntitySelector {
+  constructor(matchers) {
+    this.matchers = matchers;
+  }
+  static every() {
+    return new EntitySelector([]);
+  }
+  static named(...name) {
+    return EntitySelector.every().named(...name);
+  }
+  named(...name) {
+    return this.matching((schema, entity) => name.includes(entity.name));
+  }
+  havingRelation(name, targetEntityName) {
+    return this.matching(
+      (schema, entity) => entity.fields[name] && schemaUtils.acceptFieldVisitor(schema, entity, name, {
+        visitColumn: () => false,
+        visitRelation: ({ targetEntity }) => !targetEntityName || targetEntity.name === targetEntityName
+      })
+    );
+  }
+  matching(matcher) {
+    return new EntitySelector([...this.matchers, matcher]);
+  }
+  matches(schema, entity) {
+    return this.matchers.reduce((prev, predicate) => prev && predicate(schema, entity), true);
+  }
+}
+module.exports = EntitySelector;
+//# sourceMappingURL=EntitySelector.cjs.map

package/dist/production/src/acl/builder/EntitySelector.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntitySelector.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/EntitySelector.ts"],"sourcesContent":["import { Model } from '@contember/schema'\nimport { acceptFieldVisitor } from '@contember/schema-utils'\n\ntype Matcher = (schema: Model.Schema, entity: Model.Entity) => boolean\n\nexport default class EntitySelector {\n\tprivate constructor(private readonly matchers: Matcher[]) {}\n\n\tpublic static every() {\n\t\treturn new EntitySelector([])\n\t}\n\n\tpublic static named(...name: string[]) {\n\t\treturn EntitySelector.every().named(...name)\n\t}\n\n\tpublic named(...name: string[]) {\n\t\treturn this.matching((schema, entity) => name.includes(entity.name))\n\t}\n\n\tpublic havingRelation(name: string, targetEntityName?: string) {\n\t\treturn this.matching(\n\t\t\t(schema, entity) =>\n\t\t\t\tentity.fields[name]\n\t\t\t\t&& acceptFieldVisitor(schema, entity, name, {\n\t\t\t\t\tvisitColumn: () => false,\n\t\t\t\t\tvisitRelation: ({ targetEntity }) => !targetEntityName || targetEntity.name === targetEntityName,\n\t\t\t\t}),\n\t\t)\n\t}\n\n\tpublic matching(matcher: Matcher): EntitySelector {\n\t\treturn new EntitySelector([...this.matchers, matcher])\n\t}\n\n\tpublic matches(schema: Model.Schema, entity: Model.Entity): boolean {\n\t\treturn this.matchers.reduce<boolean>((prev, predicate) => prev && predicate(schema, entity), true)\n\t}\n}\n"],"names":["acceptFieldVisitor"],"mappings":";;AAKA,MAAqB,eAAe;AAAA,EAC3B,YAA6B,UAAqB;AAArB,SAAA,WAAA;AAAA,EAAsB;AAAA,EAE3D,OAAc,QAAQ;AACrB,WAAO,IAAI,eAAe,EAAE;AAAA,EAC7B;AAAA,EAEA,OAAc,SAAS,MAAgB;AACtC,WAAO,eAAe,MAAA,EAAQ,MAAM,GAAG,IAAI;AAAA,EAC5C;AAAA,EAEO,SAAS,MAAgB;AAC/B,WAAO,KAAK,SAAS,CAAC,QAAQ,WAAW,KAAK,SAAS,OAAO,IAAI,CAAC;AAAA,EACpE;AAAA,EAEO,eAAe,MAAc,kBAA2B;AAC9D,WAAO,KAAK;AAAA,MACX,CAAC,QAAQ,WACR,OAAO,OAAO,IAAI,KACfA,+BAAmB,QAAQ,QAAQ,MAAM;AAAA,QAC3C,aAAa,MAAM;AAAA,QACnB,eAAe,CAAC,EAAE,aAAA,MAAmB,CAAC,oBAAoB,aAAa,SAAS;AAAA,MAAA,CAChF;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEO,SAAS,SAAkC;AACjD,WAAO,IAAI,eAAe,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,EACtD;AAAA,EAEO,QAAQ,QAAsB,QAA+B;AACnE,WAAO,KAAK,SAAS,OAAgB,CAAC,MAAM,cAAc,QAAQ,UAAU,QAAQ,MAAM,GAAG,IAAI;AAAA,EAClG;AACD;;"}

package/dist/production/src/acl/builder/EntitySelector.js

@@ -0,0 +1,33 @@
+import { acceptFieldVisitor } from "@contember/schema-utils";
+class EntitySelector {
+  constructor(matchers) {
+    this.matchers = matchers;
+  }
+  static every() {
+    return new EntitySelector([]);
+  }
+  static named(...name) {
+    return EntitySelector.every().named(...name);
+  }
+  named(...name) {
+    return this.matching((schema, entity) => name.includes(entity.name));
+  }
+  havingRelation(name, targetEntityName) {
+    return this.matching(
+      (schema, entity) => entity.fields[name] && acceptFieldVisitor(schema, entity, name, {
+        visitColumn: () => false,
+        visitRelation: ({ targetEntity }) => !targetEntityName || targetEntity.name === targetEntityName
+      })
+    );
+  }
+  matching(matcher) {
+    return new EntitySelector([...this.matchers, matcher]);
+  }
+  matches(schema, entity) {
+    return this.matchers.reduce((prev, predicate) => prev && predicate(schema, entity), true);
+  }
+}
+export {
+  EntitySelector as default
+};
+//# sourceMappingURL=EntitySelector.js.map

package/dist/production/src/acl/builder/EntitySelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntitySelector.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/EntitySelector.ts"],"sourcesContent":["import { Model } from '@contember/schema'\nimport { acceptFieldVisitor } from '@contember/schema-utils'\n\ntype Matcher = (schema: Model.Schema, entity: Model.Entity) => boolean\n\nexport default class EntitySelector {\n\tprivate constructor(private readonly matchers: Matcher[]) {}\n\n\tpublic static every() {\n\t\treturn new EntitySelector([])\n\t}\n\n\tpublic static named(...name: string[]) {\n\t\treturn EntitySelector.every().named(...name)\n\t}\n\n\tpublic named(...name: string[]) {\n\t\treturn this.matching((schema, entity) => name.includes(entity.name))\n\t}\n\n\tpublic havingRelation(name: string, targetEntityName?: string) {\n\t\treturn this.matching(\n\t\t\t(schema, entity) =>\n\t\t\t\tentity.fields[name]\n\t\t\t\t&& acceptFieldVisitor(schema, entity, name, {\n\t\t\t\t\tvisitColumn: () => false,\n\t\t\t\t\tvisitRelation: ({ targetEntity }) => !targetEntityName || targetEntity.name === targetEntityName,\n\t\t\t\t}),\n\t\t)\n\t}\n\n\tpublic matching(matcher: Matcher): EntitySelector {\n\t\treturn new EntitySelector([...this.matchers, matcher])\n\t}\n\n\tpublic matches(schema: Model.Schema, entity: Model.Entity): boolean {\n\t\treturn this.matchers.reduce<boolean>((prev, predicate) => prev && predicate(schema, entity), true)\n\t}\n}\n"],"names":[],"mappings":";AAKA,MAAqB,eAAe;AAAA,EAC3B,YAA6B,UAAqB;AAArB,SAAA,WAAA;AAAA,EAAsB;AAAA,EAE3D,OAAc,QAAQ;AACrB,WAAO,IAAI,eAAe,EAAE;AAAA,EAC7B;AAAA,EAEA,OAAc,SAAS,MAAgB;AACtC,WAAO,eAAe,MAAA,EAAQ,MAAM,GAAG,IAAI;AAAA,EAC5C;AAAA,EAEO,SAAS,MAAgB;AAC/B,WAAO,KAAK,SAAS,CAAC,QAAQ,WAAW,KAAK,SAAS,OAAO,IAAI,CAAC;AAAA,EACpE;AAAA,EAEO,eAAe,MAAc,kBAA2B;AAC9D,WAAO,KAAK;AAAA,MACX,CAAC,QAAQ,WACR,OAAO,OAAO,IAAI,KACf,mBAAmB,QAAQ,QAAQ,MAAM;AAAA,QAC3C,aAAa,MAAM;AAAA,QACnB,eAAe,CAAC,EAAE,aAAA,MAAmB,CAAC,oBAAoB,aAAa,SAAS;AAAA,MAAA,CAChF;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEO,SAAS,SAAkC;AACjD,WAAO,IAAI,eAAe,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,EACtD;AAAA,EAEO,QAAQ,QAAsB,QAA+B;AACnE,WAAO,KAAK,SAAS,OAAgB,CAAC,MAAM,cAAc,QAAQ,UAAU,QAAQ,MAAM,GAAG,IAAI;AAAA,EAClG;AACD;"}

package/dist/production/src/acl/builder/FieldPermissionsBuilder.cjs

@@ -0,0 +1,59 @@
+"use strict";
+const schema = require("@contember/schema");
+class FieldPermissionsBuilder {
+  constructor(entityPermissionsBuilder, fields) {
+    this.entityPermissionsBuilder = entityPermissionsBuilder;
+    this.fields = fields;
+  }
+  get builder() {
+    return this.entityPermissionsBuilder.builder;
+  }
+  get schema() {
+    return this.entityPermissionsBuilder.schema;
+  }
+  get permissions() {
+    return this.entityPermissionsBuilder.permissions;
+  }
+  allowCreate(predicate = true) {
+    return this.allow([schema.Acl.Operation.create], predicate);
+  }
+  allowRead(predicate = true) {
+    return this.allow([schema.Acl.Operation.read], predicate);
+  }
+  allowUpdate(predicate = true) {
+    return this.allow([schema.Acl.Operation.update], predicate);
+  }
+  allowAll(predicate = true) {
+    return this.allow([schema.Acl.Operation.create, schema.Acl.Operation.read, schema.Acl.Operation.update], predicate);
+  }
+  allow(operations, predicate = true) {
+    const permissions = {};
+    for (const [entity, field] of this.fields) {
+      if (!permissions[entity.name]) {
+        permissions[entity.name] = { operations: {}, predicates: {} };
+      }
+      const entityOperations = permissions[entity.name].operations;
+      for (const op of operations) {
+        entityOperations[op] = {
+          ...permissions[entity.name].operations[op] || {},
+          [field.name]: predicate
+        };
+      }
+    }
+    return new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields);
+  }
+  onEntity(entitySelector) {
+    return this.entityPermissionsBuilder.onEntity(entitySelector);
+  }
+  onEveryEntity() {
+    return this.entityPermissionsBuilder.onEveryEntity();
+  }
+  onField(fieldSelector) {
+    return this.entityPermissionsBuilder.onField(fieldSelector);
+  }
+  onEveryField() {
+    return this.entityPermissionsBuilder.onEveryField();
+  }
+}
+module.exports = FieldPermissionsBuilder;
+//# sourceMappingURL=FieldPermissionsBuilder.cjs.map

package/dist/production/src/acl/builder/FieldPermissionsBuilder.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldPermissionsBuilder.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldPermissionsBuilder.ts"],"sourcesContent":["import FieldSelector from './FieldSelector'\nimport EntityPermissionsBuilder from './EntityPermissionsBuilder'\nimport { Acl, Model, Writable } from '@contember/schema'\nimport EntitySelector from './EntitySelector'\nimport { PermissionsBuilder } from './PermissionsBuilder'\n\nexport default class FieldPermissionsBuilder {\n\tpublic constructor(\n\t\tpublic entityPermissionsBuilder: EntityPermissionsBuilder,\n\t\tprivate readonly fields: [Model.Entity, Model.AnyField][],\n\t) {}\n\n\tget builder(): PermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.builder\n\t}\n\n\tget schema(): Model.Schema {\n\t\treturn this.entityPermissionsBuilder.schema\n\t}\n\n\tget permissions(): Acl.Permissions {\n\t\treturn this.entityPermissionsBuilder.permissions\n\t}\n\n\tpublic allowCreate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create], predicate)\n\t}\n\n\tpublic allowRead(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.read], predicate)\n\t}\n\n\tpublic allowUpdate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.update], predicate)\n\t}\n\n\tpublic allowAll(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create, Acl.Operation.read, Acl.Operation.update], predicate)\n\t}\n\n\tpublic allow(\n\t\toperations: (Acl.Operation.create | Acl.Operation.read | Acl.Operation.update)[],\n\t\tpredicate: Acl.Predicate = true,\n\t): FieldPermissionsBuilder {\n\t\tconst permissions: Writable<Acl.Permissions> = {}\n\t\tfor (const [entity, field] of this.fields) {\n\t\t\tif (!permissions[entity.name]) {\n\t\t\t\tpermissions[entity.name] = { operations: {}, predicates: {} }\n\t\t\t}\n\t\t\tconst entityOperations: Writable<Acl.EntityOperations> = permissions[entity.name].operations\n\t\t\tfor (const op of operations) {\n\t\t\t\tentityOperations[op] = {\n\t\t\t\t\t...(permissions[entity.name].operations[op] || {}),\n\t\t\t\t\t[field.name]: predicate,\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields)\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEntity(entitySelector)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryEntity()\n\t}\n\n\tpublic onField(fieldSelector: FieldSelector | string | string[]) {\n\t\treturn this.entityPermissionsBuilder.onField(fieldSelector)\n\t}\n\n\tpublic onEveryField(): FieldPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryField()\n\t}\n}\n"],"names":["Acl"],"mappings":";;AAMA,MAAqB,wBAAwB;AAAA,EACrC,YACC,0BACU,QAChB;AAFM,SAAA,2BAAA;AACU,SAAA,SAAA;AAAA,EACf;AAAA,EAEH,IAAI,UAA8B;AACjC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,SAAuB;AAC1B,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,cAA+B;AAClC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,UAAU,YAA2B,MAA+B;AAC1E,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,IAAI,GAAG,SAAS;AAAA,EAClD;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,SAAS,YAA2B,MAA+B;AACzE,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,QAAQA,OAAAA,IAAI,UAAU,MAAMA,OAAAA,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EAC9F;AAAA,EAEO,MACN,YACA,YAA2B,MACD;AAC1B,UAAM,cAAyC,CAAA;AAC/C,eAAW,CAAC,QAAQ,KAAK,KAAK,KAAK,QAAQ;AAC1C,UAAI,CAAC,YAAY,OAAO,IAAI,GAAG;AAC9B,oBAAY,OAAO,IAAI,IAAI,EAAE,YAAY,CAAA,GAAI,YAAY,GAAC;AAAA,MAC3D;AACA,YAAM,mBAAmD,YAAY,OAAO,IAAI,EAAE;AAClF,iBAAW,MAAM,YAAY;AAC5B,yBAAiB,EAAE,IAAI;AAAA,UACtB,GAAI,YAAY,OAAO,IAAI,EAAE,WAAW,EAAE,KAAK,CAAA;AAAA,UAC/C,CAAC,MAAM,IAAI,GAAG;AAAA,QAAA;AAAA,MAEhB;AAAA,IACD;AACA,WAAO,IAAI,wBAAwB,KAAK,yBAAyB,IAAI,WAAW,GAAG,KAAK,MAAM;AAAA,EAC/F;AAAA,EAEO,SAAS,gBAA8E;AAC7F,WAAO,KAAK,yBAAyB,SAAS,cAAc;AAAA,EAC7D;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,yBAAyB,cAAA;AAAA,EACtC;AAAA,EAEO,QAAQ,eAAkD;AAChE,WAAO,KAAK,yBAAyB,QAAQ,aAAa;AAAA,EAC3D;AAAA,EAEO,eAAwC;AAC9C,WAAO,KAAK,yBAAyB,aAAA;AAAA,EACtC;AACD;;"}

package/dist/production/src/acl/builder/FieldPermissionsBuilder.js

@@ -0,0 +1,60 @@
+import { Acl } from "@contember/schema";
+class FieldPermissionsBuilder {
+  constructor(entityPermissionsBuilder, fields) {
+    this.entityPermissionsBuilder = entityPermissionsBuilder;
+    this.fields = fields;
+  }
+  get builder() {
+    return this.entityPermissionsBuilder.builder;
+  }
+  get schema() {
+    return this.entityPermissionsBuilder.schema;
+  }
+  get permissions() {
+    return this.entityPermissionsBuilder.permissions;
+  }
+  allowCreate(predicate = true) {
+    return this.allow([Acl.Operation.create], predicate);
+  }
+  allowRead(predicate = true) {
+    return this.allow([Acl.Operation.read], predicate);
+  }
+  allowUpdate(predicate = true) {
+    return this.allow([Acl.Operation.update], predicate);
+  }
+  allowAll(predicate = true) {
+    return this.allow([Acl.Operation.create, Acl.Operation.read, Acl.Operation.update], predicate);
+  }
+  allow(operations, predicate = true) {
+    const permissions = {};
+    for (const [entity, field] of this.fields) {
+      if (!permissions[entity.name]) {
+        permissions[entity.name] = { operations: {}, predicates: {} };
+      }
+      const entityOperations = permissions[entity.name].operations;
+      for (const op of operations) {
+        entityOperations[op] = {
+          ...permissions[entity.name].operations[op] || {},
+          [field.name]: predicate
+        };
+      }
+    }
+    return new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields);
+  }
+  onEntity(entitySelector) {
+    return this.entityPermissionsBuilder.onEntity(entitySelector);
+  }
+  onEveryEntity() {
+    return this.entityPermissionsBuilder.onEveryEntity();
+  }
+  onField(fieldSelector) {
+    return this.entityPermissionsBuilder.onField(fieldSelector);
+  }
+  onEveryField() {
+    return this.entityPermissionsBuilder.onEveryField();
+  }
+}
+export {
+  FieldPermissionsBuilder as default
+};
+//# sourceMappingURL=FieldPermissionsBuilder.js.map

package/dist/production/src/acl/builder/FieldPermissionsBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldPermissionsBuilder.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldPermissionsBuilder.ts"],"sourcesContent":["import FieldSelector from './FieldSelector'\nimport EntityPermissionsBuilder from './EntityPermissionsBuilder'\nimport { Acl, Model, Writable } from '@contember/schema'\nimport EntitySelector from './EntitySelector'\nimport { PermissionsBuilder } from './PermissionsBuilder'\n\nexport default class FieldPermissionsBuilder {\n\tpublic constructor(\n\t\tpublic entityPermissionsBuilder: EntityPermissionsBuilder,\n\t\tprivate readonly fields: [Model.Entity, Model.AnyField][],\n\t) {}\n\n\tget builder(): PermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.builder\n\t}\n\n\tget schema(): Model.Schema {\n\t\treturn this.entityPermissionsBuilder.schema\n\t}\n\n\tget permissions(): Acl.Permissions {\n\t\treturn this.entityPermissionsBuilder.permissions\n\t}\n\n\tpublic allowCreate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create], predicate)\n\t}\n\n\tpublic allowRead(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.read], predicate)\n\t}\n\n\tpublic allowUpdate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.update], predicate)\n\t}\n\n\tpublic allowAll(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create, Acl.Operation.read, Acl.Operation.update], predicate)\n\t}\n\n\tpublic allow(\n\t\toperations: (Acl.Operation.create | Acl.Operation.read | Acl.Operation.update)[],\n\t\tpredicate: Acl.Predicate = true,\n\t): FieldPermissionsBuilder {\n\t\tconst permissions: Writable<Acl.Permissions> = {}\n\t\tfor (const [entity, field] of this.fields) {\n\t\t\tif (!permissions[entity.name]) {\n\t\t\t\tpermissions[entity.name] = { operations: {}, predicates: {} }\n\t\t\t}\n\t\t\tconst entityOperations: Writable<Acl.EntityOperations> = permissions[entity.name].operations\n\t\t\tfor (const op of operations) {\n\t\t\t\tentityOperations[op] = {\n\t\t\t\t\t...(permissions[entity.name].operations[op] || {}),\n\t\t\t\t\t[field.name]: predicate,\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields)\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEntity(entitySelector)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryEntity()\n\t}\n\n\tpublic onField(fieldSelector: FieldSelector | string | string[]) {\n\t\treturn this.entityPermissionsBuilder.onField(fieldSelector)\n\t}\n\n\tpublic onEveryField(): FieldPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryField()\n\t}\n}\n"],"names":[],"mappings":";AAMA,MAAqB,wBAAwB;AAAA,EACrC,YACC,0BACU,QAChB;AAFM,SAAA,2BAAA;AACU,SAAA,SAAA;AAAA,EACf;AAAA,EAEH,IAAI,UAA8B;AACjC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,SAAuB;AAC1B,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,cAA+B;AAClC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,UAAU,YAA2B,MAA+B;AAC1E,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,IAAI,GAAG,SAAS;AAAA,EAClD;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,SAAS,YAA2B,MAA+B;AACzE,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EAC9F;AAAA,EAEO,MACN,YACA,YAA2B,MACD;AAC1B,UAAM,cAAyC,CAAA;AAC/C,eAAW,CAAC,QAAQ,KAAK,KAAK,KAAK,QAAQ;AAC1C,UAAI,CAAC,YAAY,OAAO,IAAI,GAAG;AAC9B,oBAAY,OAAO,IAAI,IAAI,EAAE,YAAY,CAAA,GAAI,YAAY,GAAC;AAAA,MAC3D;AACA,YAAM,mBAAmD,YAAY,OAAO,IAAI,EAAE;AAClF,iBAAW,MAAM,YAAY;AAC5B,yBAAiB,EAAE,IAAI;AAAA,UACtB,GAAI,YAAY,OAAO,IAAI,EAAE,WAAW,EAAE,KAAK,CAAA;AAAA,UAC/C,CAAC,MAAM,IAAI,GAAG;AAAA,QAAA;AAAA,MAEhB;AAAA,IACD;AACA,WAAO,IAAI,wBAAwB,KAAK,yBAAyB,IAAI,WAAW,GAAG,KAAK,MAAM;AAAA,EAC/F;AAAA,EAEO,SAAS,gBAA8E;AAC7F,WAAO,KAAK,yBAAyB,SAAS,cAAc;AAAA,EAC7D;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,yBAAyB,cAAA;AAAA,EACtC;AAAA,EAEO,QAAQ,eAAkD;AAChE,WAAO,KAAK,yBAAyB,QAAQ,aAAa;AAAA,EAC3D;AAAA,EAEO,eAAwC;AAC9C,WAAO,KAAK,yBAAyB,aAAA;AAAA,EACtC;AACD;"}

package/dist/production/src/acl/builder/FieldSelector.cjs

@@ -0,0 +1,26 @@
+"use strict";
+class FieldSelector {
+  constructor(matchers) {
+    this.matchers = matchers;
+  }
+  static every() {
+    return new FieldSelector([]);
+  }
+  static named(...name) {
+    return FieldSelector.every().named(...name);
+  }
+  named(...name) {
+    return this.matching((schema, entity, field) => name.includes(field.name));
+  }
+  except(...name) {
+    return this.matching((schema, entity, field) => !name.includes(field.name));
+  }
+  matching(matcher) {
+    return new FieldSelector([...this.matchers, matcher]);
+  }
+  matches(schema, entity, field) {
+    return this.matchers.reduce((prev, predicate) => prev && predicate(schema, entity, field), true);
+  }
+}
+module.exports = FieldSelector;
+//# sourceMappingURL=FieldSelector.cjs.map

package/dist/production/src/acl/builder/FieldSelector.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldSelector.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldSelector.ts"],"sourcesContent":["import { Model } from '@contember/schema'\n\ntype Matcher = (schema: Model.Schema, entity: Model.Entity, field: Model.AnyField) => boolean\n\nexport default class FieldSelector {\n\tprivate constructor(private readonly matchers: Matcher[]) {}\n\n\tpublic static every() {\n\t\treturn new FieldSelector([])\n\t}\n\n\tpublic static named(...name: string[]) {\n\t\treturn FieldSelector.every().named(...name)\n\t}\n\n\tpublic named(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => name.includes(field.name))\n\t}\n\n\tpublic except(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => !name.includes(field.name))\n\t}\n\n\tpublic matching(matcher: Matcher): FieldSelector {\n\t\treturn new FieldSelector([...this.matchers, matcher])\n\t}\n\n\tpublic matches(schema: Model.Schema, entity: Model.Entity, field: Model.AnyField): boolean {\n\t\treturn this.matchers.reduce<boolean>((prev, predicate) => prev && predicate(schema, entity, field), true)\n\t}\n}\n"],"names":[],"mappings":";AAIA,MAAqB,cAAc;AAAA,EAC1B,YAA6B,UAAqB;AAArB,SAAA,WAAA;AAAA,EAAsB;AAAA,EAE3D,OAAc,QAAQ;AACrB,WAAO,IAAI,cAAc,EAAE;AAAA,EAC5B;AAAA,EAEA,OAAc,SAAS,MAAgB;AACtC,WAAO,cAAc,MAAA,EAAQ,MAAM,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEO,SAAS,MAAgB;AAC/B,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC1E;AAAA,EAEO,UAAU,MAAgB;AAChC,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,CAAC,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC3E;AAAA,EAEO,SAAS,SAAiC;AAChD,WAAO,IAAI,cAAc,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,EACrD;AAAA,EAEO,QAAQ,QAAsB,QAAsB,OAAgC;AAC1F,WAAO,KAAK,SAAS,OAAgB,CAAC,MAAM,cAAc,QAAQ,UAAU,QAAQ,QAAQ,KAAK,GAAG,IAAI;AAAA,EACzG;AACD;;"}

package/dist/production/src/acl/builder/FieldSelector.js

@@ -0,0 +1,27 @@
+class FieldSelector {
+  constructor(matchers) {
+    this.matchers = matchers;
+  }
+  static every() {
+    return new FieldSelector([]);
+  }
+  static named(...name) {
+    return FieldSelector.every().named(...name);
+  }
+  named(...name) {
+    return this.matching((schema, entity, field) => name.includes(field.name));
+  }
+  except(...name) {
+    return this.matching((schema, entity, field) => !name.includes(field.name));
+  }
+  matching(matcher) {
+    return new FieldSelector([...this.matchers, matcher]);
+  }
+  matches(schema, entity, field) {
+    return this.matchers.reduce((prev, predicate) => prev && predicate(schema, entity, field), true);
+  }
+}
+export {
+  FieldSelector as default
+};
+//# sourceMappingURL=FieldSelector.js.map

package/dist/production/src/acl/builder/FieldSelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldSelector.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldSelector.ts"],"sourcesContent":["import { Model } from '@contember/schema'\n\ntype Matcher = (schema: Model.Schema, entity: Model.Entity, field: Model.AnyField) => boolean\n\nexport default class FieldSelector {\n\tprivate constructor(private readonly matchers: Matcher[]) {}\n\n\tpublic static every() {\n\t\treturn new FieldSelector([])\n\t}\n\n\tpublic static named(...name: string[]) {\n\t\treturn FieldSelector.every().named(...name)\n\t}\n\n\tpublic named(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => name.includes(field.name))\n\t}\n\n\tpublic except(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => !name.includes(field.name))\n\t}\n\n\tpublic matching(matcher: Matcher): FieldSelector {\n\t\treturn new FieldSelector([...this.matchers, matcher])\n\t}\n\n\tpublic matches(schema: Model.Schema, entity: Model.Entity, field: Model.AnyField): boolean {\n\t\treturn this.matchers.reduce<boolean>((prev, predicate) => prev && predicate(schema, entity, field), true)\n\t}\n}\n"],"names":[],"mappings":"AAIA,MAAqB,cAAc;AAAA,EAC1B,YAA6B,UAAqB;AAArB,SAAA,WAAA;AAAA,EAAsB;AAAA,EAE3D,OAAc,QAAQ;AACrB,WAAO,IAAI,cAAc,EAAE;AAAA,EAC5B;AAAA,EAEA,OAAc,SAAS,MAAgB;AACtC,WAAO,cAAc,MAAA,EAAQ,MAAM,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEO,SAAS,MAAgB;AAC/B,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC1E;AAAA,EAEO,UAAU,MAAgB;AAChC,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,CAAC,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC3E;AAAA,EAEO,SAAS,SAAiC;AAChD,WAAO,IAAI,cAAc,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,EACrD;AAAA,EAEO,QAAQ,QAAsB,QAAsB,OAAgC;AAC1F,WAAO,KAAK,SAAS,OAAgB,CAAC,MAAM,cAAc,QAAQ,UAAU,QAAQ,QAAQ,KAAK,GAAG,IAAI;AAAA,EACzG;AACD;"}

package/dist/production/src/acl/builder/PermissionOverrider.cjs

@@ -0,0 +1,37 @@
+"use strict";
+const tuple = require("../../utils/tuple.cjs");
+require("reflect-metadata");
+class PermissionOverrider {
+  override(original, overrides) {
+    return Object.entries({ ...overrides, ...original }).map(([key, value]) => {
+      if (overrides[key]) {
+        return tuple.tuple(key, this.overrideEntityPermissions(value, overrides[key]));
+      }
+      return tuple.tuple(key, value);
+    }).reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {});
+  }
+  overrideEntityPermissions(original, overrides) {
+    return {
+      predicates: { ...original.predicates, ...overrides.predicates },
+      operations: {
+        create: { ...original.operations.create || {}, ...overrides.operations.create || {} },
+        read: { ...original.operations.read || {}, ...overrides.operations.read || {} },
+        update: { ...original.operations.update || {}, ...overrides.operations.update || {} },
+        ...original.operations.delete === void 0 && overrides.operations.delete === void 0 ? {} : {
+          delete: overrides.operations.delete ?? original.operations.delete
+        },
+        ...original.operations.customPrimary === void 0 && overrides.operations.customPrimary === void 0 ? {} : {
+          customPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary
+        },
+        ...original.operations.noRoot || overrides.operations.noRoot ? {
+          noRoot: [
+            ...original.operations.noRoot || [],
+            ...overrides.operations.noRoot || []
+          ]
+        } : {}
+      }
+    };
+  }
+}
+module.exports = PermissionOverrider;
+//# sourceMappingURL=PermissionOverrider.cjs.map

package/dist/production/src/acl/builder/PermissionOverrider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionOverrider.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/PermissionOverrider.ts"],"sourcesContent":["import { Acl } from '@contember/schema'\nimport { tuple } from '../../utils'\n\nexport default class PermissionOverrider {\n\tpublic override(original: Acl.Permissions, overrides: Acl.Permissions): Acl.Permissions {\n\t\treturn Object.entries({ ...overrides, ...original })\n\t\t\t.map(([key, value]) => {\n\t\t\t\tif (overrides[key]) {\n\t\t\t\t\treturn tuple(key, this.overrideEntityPermissions(value, overrides[key]))\n\t\t\t\t}\n\t\t\t\treturn tuple(key, value)\n\t\t\t})\n\t\t\t.reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {})\n\t}\n\n\tprivate overrideEntityPermissions(\n\t\toriginal: Acl.EntityPermissions,\n\t\toverrides: Acl.EntityPermissions,\n\t): Acl.EntityPermissions {\n\t\treturn {\n\t\t\tpredicates: { ...original.predicates, ...overrides.predicates },\n\t\t\toperations: {\n\t\t\t\tcreate: { ...(original.operations.create || {}), ...(overrides.operations.create || {}) },\n\t\t\t\tread: { ...(original.operations.read || {}), ...(overrides.operations.read || {}) },\n\t\t\t\tupdate: { ...(original.operations.update || {}), ...(overrides.operations.update || {}) },\n\t\t\t\t...(original.operations.delete === undefined && overrides.operations.delete === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tdelete: overrides.operations.delete ?? original.operations.delete,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.customPrimary === undefined && overrides.operations.customPrimary === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tcustomPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.noRoot || overrides.operations.noRoot\n\t\t\t\t\t? {\n\t\t\t\t\t\tnoRoot: [\n\t\t\t\t\t\t\t...(original.operations.noRoot || []),\n\t\t\t\t\t\t\t...(overrides.operations.noRoot || []),\n\t\t\t\t\t\t],\n\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["tuple"],"mappings":";;;AAGA,MAAqB,oBAAoB;AAAA,EACjC,SAAS,UAA2B,WAA6C;AACvF,WAAO,OAAO,QAAQ,EAAE,GAAG,WAAW,GAAG,UAAU,EACjD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AACtB,UAAI,UAAU,GAAG,GAAG;AACnB,eAAOA,MAAAA,MAAM,KAAK,KAAK,0BAA0B,OAAO,UAAU,GAAG,CAAC,CAAC;AAAA,MACxE;AACA,aAAOA,MAAAA,MAAM,KAAK,KAAK;AAAA,IACxB,CAAC,EACA,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,MAAA,IAAU,CAAA,CAAE;AAAA,EAC/D;AAAA,EAEQ,0BACP,UACA,WACwB;AACxB,WAAO;AAAA,MACN,YAAY,EAAE,GAAG,SAAS,YAAY,GAAG,UAAU,WAAA;AAAA,MACnD,YAAY;AAAA,QACX,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,MAAM,EAAE,GAAI,SAAS,WAAW,QAAQ,IAAK,GAAI,UAAU,WAAW,QAAQ,GAAC;AAAA,QAC/E,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,GAAI,SAAS,WAAW,WAAW,UAAa,UAAU,WAAW,WAAW,SAC7E,KACA;AAAA,UACD,QAAQ,UAAU,WAAW,UAAU,SAAS,WAAW;AAAA,QAAA;AAAA,QAE7D,GAAI,SAAS,WAAW,kBAAkB,UAAa,UAAU,WAAW,kBAAkB,SAC3F,KACA;AAAA,UACD,eAAe,UAAU,WAAW,iBAAiB,SAAS,WAAW;AAAA,QAAA;AAAA,QAE3E,GAAI,SAAS,WAAW,UAAU,UAAU,WAAW,SACpD;AAAA,UACD,QAAQ;AAAA,YACP,GAAI,SAAS,WAAW,UAAU,CAAA;AAAA,YAClC,GAAI,UAAU,WAAW,UAAU,CAAA;AAAA,UAAC;AAAA,QACrC,IAEC,CAAA;AAAA,MAAC;AAAA,IACL;AAAA,EAEF;AACD;;"}

package/dist/production/src/acl/builder/PermissionOverrider.js

@@ -0,0 +1,38 @@
+import { tuple } from "../../utils/tuple.js";
+import "reflect-metadata";
+class PermissionOverrider {
+  override(original, overrides) {
+    return Object.entries({ ...overrides, ...original }).map(([key, value]) => {
+      if (overrides[key]) {
+        return tuple(key, this.overrideEntityPermissions(value, overrides[key]));
+      }
+      return tuple(key, value);
+    }).reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {});
+  }
+  overrideEntityPermissions(original, overrides) {
+    return {
+      predicates: { ...original.predicates, ...overrides.predicates },
+      operations: {
+        create: { ...original.operations.create || {}, ...overrides.operations.create || {} },
+        read: { ...original.operations.read || {}, ...overrides.operations.read || {} },
+        update: { ...original.operations.update || {}, ...overrides.operations.update || {} },
+        ...original.operations.delete === void 0 && overrides.operations.delete === void 0 ? {} : {
+          delete: overrides.operations.delete ?? original.operations.delete
+        },
+        ...original.operations.customPrimary === void 0 && overrides.operations.customPrimary === void 0 ? {} : {
+          customPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary
+        },
+        ...original.operations.noRoot || overrides.operations.noRoot ? {
+          noRoot: [
+            ...original.operations.noRoot || [],
+            ...overrides.operations.noRoot || []
+          ]
+        } : {}
+      }
+    };
+  }
+}
+export {
+  PermissionOverrider as default
+};
+//# sourceMappingURL=PermissionOverrider.js.map

package/dist/production/src/acl/builder/PermissionOverrider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionOverrider.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/PermissionOverrider.ts"],"sourcesContent":["import { Acl } from '@contember/schema'\nimport { tuple } from '../../utils'\n\nexport default class PermissionOverrider {\n\tpublic override(original: Acl.Permissions, overrides: Acl.Permissions): Acl.Permissions {\n\t\treturn Object.entries({ ...overrides, ...original })\n\t\t\t.map(([key, value]) => {\n\t\t\t\tif (overrides[key]) {\n\t\t\t\t\treturn tuple(key, this.overrideEntityPermissions(value, overrides[key]))\n\t\t\t\t}\n\t\t\t\treturn tuple(key, value)\n\t\t\t})\n\t\t\t.reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {})\n\t}\n\n\tprivate overrideEntityPermissions(\n\t\toriginal: Acl.EntityPermissions,\n\t\toverrides: Acl.EntityPermissions,\n\t): Acl.EntityPermissions {\n\t\treturn {\n\t\t\tpredicates: { ...original.predicates, ...overrides.predicates },\n\t\t\toperations: {\n\t\t\t\tcreate: { ...(original.operations.create || {}), ...(overrides.operations.create || {}) },\n\t\t\t\tread: { ...(original.operations.read || {}), ...(overrides.operations.read || {}) },\n\t\t\t\tupdate: { ...(original.operations.update || {}), ...(overrides.operations.update || {}) },\n\t\t\t\t...(original.operations.delete === undefined && overrides.operations.delete === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tdelete: overrides.operations.delete ?? original.operations.delete,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.customPrimary === undefined && overrides.operations.customPrimary === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tcustomPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.noRoot || overrides.operations.noRoot\n\t\t\t\t\t? {\n\t\t\t\t\t\tnoRoot: [\n\t\t\t\t\t\t\t...(original.operations.noRoot || []),\n\t\t\t\t\t\t\t...(overrides.operations.noRoot || []),\n\t\t\t\t\t\t],\n\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAGA,MAAqB,oBAAoB;AAAA,EACjC,SAAS,UAA2B,WAA6C;AACvF,WAAO,OAAO,QAAQ,EAAE,GAAG,WAAW,GAAG,UAAU,EACjD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AACtB,UAAI,UAAU,GAAG,GAAG;AACnB,eAAO,MAAM,KAAK,KAAK,0BAA0B,OAAO,UAAU,GAAG,CAAC,CAAC;AAAA,MACxE;AACA,aAAO,MAAM,KAAK,KAAK;AAAA,IACxB,CAAC,EACA,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,MAAA,IAAU,CAAA,CAAE;AAAA,EAC/D;AAAA,EAEQ,0BACP,UACA,WACwB;AACxB,WAAO;AAAA,MACN,YAAY,EAAE,GAAG,SAAS,YAAY,GAAG,UAAU,WAAA;AAAA,MACnD,YAAY;AAAA,QACX,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,MAAM,EAAE,GAAI,SAAS,WAAW,QAAQ,IAAK,GAAI,UAAU,WAAW,QAAQ,GAAC;AAAA,QAC/E,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,GAAI,SAAS,WAAW,WAAW,UAAa,UAAU,WAAW,WAAW,SAC7E,KACA;AAAA,UACD,QAAQ,UAAU,WAAW,UAAU,SAAS,WAAW;AAAA,QAAA;AAAA,QAE7D,GAAI,SAAS,WAAW,kBAAkB,UAAa,UAAU,WAAW,kBAAkB,SAC3F,KACA;AAAA,UACD,eAAe,UAAU,WAAW,iBAAiB,SAAS,WAAW;AAAA,QAAA;AAAA,QAE3E,GAAI,SAAS,WAAW,UAAU,UAAU,WAAW,SACpD;AAAA,UACD,QAAQ;AAAA,YACP,GAAI,SAAS,WAAW,UAAU,CAAA;AAAA,YAClC,GAAI,UAAU,WAAW,UAAU,CAAA;AAAA,UAAC;AAAA,QACrC,IAEC,CAAA;AAAA,MAAC;AAAA,IACL;AAAA,EAEF;AACD;"}

package/dist/production/src/acl/builder/PermissionsBuilder.cjs

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const schema = require("@contember/schema");
+const schemaUtils = require("@contember/schema-utils");
+const PermissionOverrider = require("./PermissionOverrider.cjs");
+const EntitySelector = require("./EntitySelector.cjs");
+const EntityPermissionsBuilder = require("./EntityPermissionsBuilder.cjs");
+const FieldSelector = require("./FieldSelector.cjs");
+const PredicateReference = require("./PredicateReference.cjs");
+class PermissionsBuilder {
+  constructor(schema2, permissions) {
+    this.schema = schema2;
+    this.permissions = permissions;
+  }
+  static create(model) {
+    return new PermissionsBuilder(model, {});
+  }
+  allowAll() {
+    return this.allow([schema.Acl.Operation.read, schema.Acl.Operation.update, schema.Acl.Operation.delete, schema.Acl.Operation.create]);
+  }
+  allow(operations) {
+    const allowAllFactory = new schemaUtils.AllowAllPermissionFactory(operations);
+    return this.add(allowAllFactory.create(this.schema));
+  }
+  allowCustomPrimary() {
+    return this.onEveryEntity().allowCustomPrimary().builder;
+  }
+  add(permissions) {
+    const overrider = new PermissionOverrider();
+    return new PermissionsBuilder(this.schema, overrider.override(this.permissions, permissions));
+  }
+  onEntity(entitySelector) {
+    if (typeof entitySelector === "string") {
+      entitySelector = EntitySelector.named(entitySelector);
+    } else if (Array.isArray(entitySelector)) {
+      entitySelector = EntitySelector.named(...entitySelector);
+    }
+    const entitySelectorWithType = entitySelector;
+    const entities = Object.values(this.schema.entities).filter((entity) => entitySelectorWithType.matches(this.schema, entity));
+    return new EntityPermissionsBuilder(this, entities);
+  }
+  onEveryEntity() {
+    return this.onEntity(EntitySelector.every());
+  }
+}
+((PermissionsBuilder2) => {
+  PermissionsBuilder2.everyEntity = () => {
+    return EntitySelector.every();
+  };
+  PermissionsBuilder2.everyField = () => {
+    return FieldSelector.every();
+  };
+  PermissionsBuilder2.predicateReference = (name) => new PredicateReference.default(name);
+})(PermissionsBuilder || (PermissionsBuilder = {}));
+exports.PermissionsBuilder = PermissionsBuilder;
+//# sourceMappingURL=PermissionsBuilder.cjs.map

package/dist/production/src/acl/builder/PermissionsBuilder.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsBuilder.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/PermissionsBuilder.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { AllowAllPermissionFactory } from '@contember/schema-utils'\nimport PermissionOverrider from './PermissionOverrider'\nimport EntitySelector from './EntitySelector'\nimport EntityPermissionsBuilder from './EntityPermissionsBuilder'\nimport FieldSelector from './FieldSelector'\nimport Reference from './PredicateReference'\n\nclass PermissionsBuilder {\n\tconstructor(public readonly schema: Model.Schema, public readonly permissions: Acl.Permissions) {}\n\n\tpublic static create(model: Model.Schema): PermissionsBuilder {\n\t\treturn new PermissionsBuilder(model, {})\n\t}\n\n\tpublic allowAll(): PermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.read, Acl.Operation.update, Acl.Operation.delete, Acl.Operation.create])\n\t}\n\n\tpublic allow(operations: Acl.Operation[]): PermissionsBuilder {\n\t\tconst allowAllFactory = new AllowAllPermissionFactory(operations)\n\t\treturn this.add(allowAllFactory.create(this.schema))\n\t}\n\n\tpublic allowCustomPrimary(): PermissionsBuilder {\n\t\treturn this.onEveryEntity().allowCustomPrimary().builder\n\t}\n\n\tpublic add(permissions: Acl.Permissions): PermissionsBuilder {\n\t\tconst overrider = new PermissionOverrider()\n\t\treturn new PermissionsBuilder(this.schema, overrider.override(this.permissions, permissions))\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\tif (typeof entitySelector === 'string') {\n\t\t\tentitySelector = EntitySelector.named(entitySelector)\n\t\t} else if (Array.isArray(entitySelector)) {\n\t\t\tentitySelector = EntitySelector.named(...entitySelector)\n\t\t}\n\t\tconst entitySelectorWithType = entitySelector\n\t\tconst entities = Object.values(this.schema.entities).filter(entity => entitySelectorWithType.matches(this.schema, entity))\n\t\treturn new EntityPermissionsBuilder(this, entities)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.onEntity(EntitySelector.every())\n\t}\n}\n\nnamespace PermissionsBuilder {\n\texport const everyEntity = () => {\n\t\treturn EntitySelector.every()\n\t}\n\texport const everyField = () => {\n\t\treturn FieldSelector.every()\n\t}\n\texport const predicateReference = (name: Acl.PredicateReference) => new Reference(name)\n}\nexport { PermissionsBuilder }\n"],"names":["schema","Acl","AllowAllPermissionFactory","PermissionsBuilder","Reference"],"mappings":";;;;;;;;;AAQA,MAAM,mBAAmB;AAAA,EACxB,YAA4BA,SAAsC,aAA8B;AAApE,SAAA,SAAAA;AAAsC,SAAA,cAAA;AAAA,EAA+B;AAAA,EAEjG,OAAc,OAAO,OAAyC;AAC7D,WAAO,IAAI,mBAAmB,OAAO,EAAE;AAAA,EACxC;AAAA,EAEO,WAA+B;AACrC,WAAO,KAAK,MAAM,CAACC,OAAAA,IAAI,UAAU,MAAMA,WAAI,UAAU,QAAQA,OAAAA,IAAI,UAAU,QAAQA,OAAAA,IAAI,UAAU,MAAM,CAAC;AAAA,EACzG;AAAA,EAEO,MAAM,YAAiD;AAC7D,UAAM,kBAAkB,IAAIC,YAAAA,0BAA0B,UAAU;AAChE,WAAO,KAAK,IAAI,gBAAgB,OAAO,KAAK,MAAM,CAAC;AAAA,EACpD;AAAA,EAEO,qBAAyC;AAC/C,WAAO,KAAK,gBAAgB,mBAAA,EAAqB;AAAA,EAClD;AAAA,EAEO,IAAI,aAAkD;AAC5D,UAAM,YAAY,IAAI,oBAAA;AACtB,WAAO,IAAI,mBAAmB,KAAK,QAAQ,UAAU,SAAS,KAAK,aAAa,WAAW,CAAC;AAAA,EAC7F;AAAA,EAEO,SAAS,gBAA8E;AAC7F,QAAI,OAAO,mBAAmB,UAAU;AACvC,uBAAiB,eAAe,MAAM,cAAc;AAAA,IACrD,WAAW,MAAM,QAAQ,cAAc,GAAG;AACzC,uBAAiB,eAAe,MAAM,GAAG,cAAc;AAAA,IACxD;AACA,UAAM,yBAAyB;AAC/B,UAAM,WAAW,OAAO,OAAO,KAAK,OAAO,QAAQ,EAAE,OAAO,CAAA,WAAU,uBAAuB,QAAQ,KAAK,QAAQ,MAAM,CAAC;AACzH,WAAO,IAAI,yBAAyB,MAAM,QAAQ;AAAA,EACnD;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,SAAS,eAAe,MAAA,CAAO;AAAA,EAC5C;AACD;AAAA,CAEA,CAAUC,wBAAV;AACcA,sBAAA,cAAc,MAAM;AAChC,WAAO,eAAe,MAAA;AAAA,EACvB;AACaA,sBAAA,aAAa,MAAM;AAC/B,WAAO,cAAc,MAAA;AAAA,EACtB;AACaA,sBAAA,qBAAqB,CAAC,SAAiC,IAAIC,mBAAAA,QAAU,IAAI;AAAA,GAP7E,uBAAA,qBAAA,CAAA,EAAA;;"}