@contember/schema-utils 1.4.0-rc.7 → 2.0.0-alpha.10

package/dist/production/src/validation/ActionsValidator.js

@@ -0,0 +1,110 @@
+import { acceptFieldVisitor } from "../model/modelUtils.js";
+import "@contember/schema";
+import { assertNever } from "../utils/assertNever.js";
+import { ErrorBuilder } from "./errors.js";
+import * as Typesafe from "@contember/typesafe";
+import { whereSchema } from "../type-schema/where.js";
+const manyArgsSchema = (args) => Typesafe.partial({
+  limit: Typesafe.integer,
+  offset: Typesafe.integer,
+  orderBy: Typesafe.array(Typesafe.anyJsonObject),
+  filter: whereSchema(args)
+});
+class ActionsValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new ErrorBuilder([], ["actions"]);
+    this.validateTriggers(schema, errorBuilder.for("triggers"));
+    return errorBuilder.errors;
+  }
+  validateTriggers(schema, errorBuilder) {
+    for (const [name, def] of Object.entries(schema.triggers)) {
+      const triggerErrorBuilder = errorBuilder.for(name);
+      if (name !== def.name) {
+        triggerErrorBuilder.add("ACTIONS_NAME_MISMATCH", `Trigger name ${def.name} does not match the name in a map ${name}`);
+      }
+      if (!schema.targets[def.target]) {
+        triggerErrorBuilder.add("ACTIONS_UNDEFINED_TRIGGER_TARGET", `Trigger target ${def.target} not found`);
+      }
+      this.validateTrigger(def, triggerErrorBuilder);
+    }
+  }
+  validateTrigger(trigger, errorBuilder) {
+    const entity = this.model.entities[trigger.entity];
+    if (!entity) {
+      errorBuilder.add("ACTIONS_UNDEFINED_ENTITY", `Entity ${trigger.entity} not found.`);
+      return;
+    }
+    switch (trigger.type) {
+      case "watch":
+        this.validateWatchTrigger(trigger, entity, errorBuilder);
+        break;
+      case "basic":
+        this.validateBasicTrigger(trigger, entity, errorBuilder);
+        break;
+      default:
+        assertNever();
+    }
+  }
+  validateWatchTrigger(trigger, entity, errorBuilder) {
+    this.validateSelection(trigger.watch, entity, errorBuilder.for("watch"));
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+  }
+  validateBasicTrigger(trigger, entity, errorBuilder) {
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+    if (Array.isArray(trigger.update)) {
+      for (const field of trigger.update) {
+        if (!entity.fields[field]) {
+          errorBuilder.for("update").add("ACTIONS_UNDEFINED_FIELD", `Field ${field} of entity ${entity.name} not found.`);
+        }
+      }
+    }
+  }
+  validateSelection(selectionNode, entity, errorBuilder) {
+    for (const part of selectionNode) {
+      const [field, args, selection] = Array.isArray(part) ? part : [part, {}, []];
+      const fieldErrorBuilder = errorBuilder.for(field);
+      if (!entity.fields[field]) {
+        fieldErrorBuilder.add("ACTIONS_UNDEFINED_FIELD", `Undefined field ${field} on entity ${entity.name}`);
+        continue;
+      }
+      acceptFieldVisitor(this.model, entity, field, {
+        visitColumn: () => {
+          if (selection.length) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected sub selection on a column.`);
+          }
+          if (Object.keys(args).length !== 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected args on a column.`);
+          }
+        },
+        visitHasMany: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+          try {
+            manyArgsSchema({ schema: this.model, entity: targetEntity })(args);
+          } catch (e) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Selection args are not valid: ` + e.message);
+          }
+        },
+        visitHasOne: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+        }
+      });
+    }
+  }
+}
+export {
+  ActionsValidator
+};
+//# sourceMappingURL=ActionsValidator.js.map

package/dist/production/src/validation/ActionsValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActionsValidator.js","sources":["../../../../../packages/schema-utils/src/validation/ActionsValidator.ts"],"sourcesContent":["import { Actions, Model } from '@contember/schema'\nimport { acceptFieldVisitor } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { assertNever } from '../utils'\nimport * as Typesafe from '@contember/typesafe'\nimport { whereSchema } from '../type-schema/where'\n\nconst manyArgsSchema = (args: {schema: Model.Schema; entity: Model.Entity}) => Typesafe.partial({\n\tlimit: Typesafe.integer,\n\toffset: Typesafe.integer,\n\torderBy: Typesafe.array(Typesafe.anyJsonObject),\n\tfilter: whereSchema(args),\n})\n\nexport class ActionsValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Actions.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['actions'])\n\t\tthis.validateTriggers(schema, errorBuilder.for('triggers'))\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateTriggers(schema: Actions.Schema, errorBuilder: ErrorBuilder) {\n\t\tfor (const [name, def] of Object.entries(schema.triggers)) {\n\t\t\tconst triggerErrorBuilder = errorBuilder.for(name)\n\t\t\tif (name !== def.name) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_NAME_MISMATCH', `Trigger name ${def.name} does not match the name in a map ${name}`)\n\t\t\t}\n\t\t\tif (!schema.targets[def.target]) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_UNDEFINED_TRIGGER_TARGET', `Trigger target ${def.target} not found`)\n\t\t\t}\n\t\t\tthis.validateTrigger(def, triggerErrorBuilder)\n\t\t}\n\t}\n\n\n\tprivate validateTrigger(trigger: Actions.AnyTrigger, errorBuilder: ErrorBuilder): void {\n\t\tconst entity = this.model.entities[trigger.entity]\n\t\tif (!entity) {\n\t\t\terrorBuilder.add('ACTIONS_UNDEFINED_ENTITY', `Entity ${trigger.entity} not found.`)\n\t\t\treturn\n\t\t}\n\n\t\tswitch (trigger.type) {\n\t\t\tcase 'watch':\n\t\t\t\tthis.validateWatchTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tcase 'basic':\n\t\t\t\tthis.validateBasicTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tdefault:\n\t\t\t\tassertNever(trigger)\n\t\t}\n\t}\n\n\tprivate validateWatchTrigger(trigger: Actions.WatchTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tthis.validateSelection(trigger.watch, entity, errorBuilder.for('watch'))\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\t}\n\n\tprivate validateBasicTrigger(trigger: Actions.BasicTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\n\t\tif (Array.isArray(trigger.update)) {\n\t\t\tfor (const field of trigger.update) {\n\t\t\t\tif (!entity.fields[field]) {\n\t\t\t\t\terrorBuilder.for('update').add('ACTIONS_UNDEFINED_FIELD', `Field ${field} of entity ${entity.name} not found.`)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateSelection(\n\t\tselectionNode: Actions.SelectionNode,\n\t\tentity: Model.Entity,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const part of selectionNode) {\n\t\t\tconst [field, args, selection] = Array.isArray(part) ? part : [part, {}, []]\n\t\t\tconst fieldErrorBuilder = errorBuilder.for(field)\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\tfieldErrorBuilder.add('ACTIONS_UNDEFINED_FIELD', `Undefined field ${field} on entity ${entity.name}`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tacceptFieldVisitor(this.model, entity, field, {\n\t\t\t\tvisitColumn: () => {\n\t\t\t\t\tif (selection.length) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected sub selection on a column.`)\n\t\t\t\t\t}\n\t\t\t\t\tif (Object.keys(args).length !== 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected args on a column.`)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasMany: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t\ttry {\n\t\t\t\t\t\tmanyArgsSchema({ schema: this.model, entity: targetEntity })(args)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Selection args are not valid: ` + e.message)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasOne: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t},\n\t\t\t})\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;AAOA,MAAM,iBAAiB,CAAC,SAAuD,SAAS,QAAQ;AAAA,EAC/F,OAAO,SAAS;AAAA,EAChB,QAAQ,SAAS;AAAA,EACjB,SAAS,SAAS,MAAM,SAAS,aAAa;AAAA,EAC9C,QAAQ,YAAY,IAAI;AACzB,CAAC;AAEM,MAAM,iBAAiB;AAAA,EAC7B,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAA2C;AAC1D,UAAM,eAAe,IAAI,aAAa,CAAI,GAAA,CAAC,SAAS,CAAC;AACrD,SAAK,iBAAiB,QAAQ,aAAa,IAAI,UAAU,CAAC;AAC1D,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,iBAAiB,QAAwB,cAA4B;AACjE,eAAA,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,QAAQ,GAAG;AACpD,YAAA,sBAAsB,aAAa,IAAI,IAAI;AAC7C,UAAA,SAAS,IAAI,MAAM;AACtB,4BAAoB,IAAI,yBAAyB,gBAAgB,IAAI,IAAI,qCAAqC,IAAI,EAAE;AAAA,MACrH;AACA,UAAI,CAAC,OAAO,QAAQ,IAAI,MAAM,GAAG;AAChC,4BAAoB,IAAI,oCAAoC,kBAAkB,IAAI,MAAM,YAAY;AAAA,MACrG;AACK,WAAA,gBAAgB,KAAK,mBAAmB;AAAA,IAC9C;AAAA,EACD;AAAA,EAGQ,gBAAgB,SAA6B,cAAkC;AACtF,UAAM,SAAS,KAAK,MAAM,SAAS,QAAQ,MAAM;AACjD,QAAI,CAAC,QAAQ;AACZ,mBAAa,IAAI,4BAA4B,UAAU,QAAQ,MAAM,aAAa;AAClF;AAAA,IACD;AAEA,YAAQ,QAAQ,MAAM;AAAA,MACrB,KAAK;AACC,aAAA,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD,KAAK;AACC,aAAA,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD;AACC,oBAAmB;AAAA,IACrB;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,SAAK,kBAAkB,QAAQ,OAAO,QAAQ,aAAa,IAAI,OAAO,CAAC;AACvE,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAEA,QAAI,MAAM,QAAQ,QAAQ,MAAM,GAAG;AACvB,iBAAA,SAAS,QAAQ,QAAQ;AACnC,YAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AACb,uBAAA,IAAI,QAAQ,EAAE,IAAI,2BAA2B,SAAS,KAAK,cAAc,OAAO,IAAI,aAAa;AAAA,QAC/G;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBACP,eACA,QACA,cACO;AACP,eAAW,QAAQ,eAAe;AACjC,YAAM,CAAC,OAAO,MAAM,SAAS,IAAI,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAE,CAAA;AACrE,YAAA,oBAAoB,aAAa,IAAI,KAAK;AAChD,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,0BAAkB,IAAI,2BAA2B,mBAAmB,KAAK,cAAc,OAAO,IAAI,EAAE;AACpG;AAAA,MACD;AACmB,yBAAA,KAAK,OAAO,QAAQ,OAAO;AAAA,QAC7C,aAAa,MAAM;AAClB,cAAI,UAAU,QAAQ;AACH,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,cAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AACjB,8BAAA,IAAI,6BAA6B,8BAA8B;AAAA,UAClF;AAAA,QACD;AAAA,QACA,cAAc,CAAC,EAAE,mBAAmB;AAC/B,cAAA,UAAU,WAAW,GAAG;AACT,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACK,eAAA,kBAAkB,WAAW,cAAc,iBAAiB;AAC7D,cAAA;AACY,2BAAA,EAAE,QAAQ,KAAK,OAAO,QAAQ,aAAa,CAAC,EAAE,IAAI;AAAA,mBACzD,GAAQ;AAChB,8BAAkB,IAAI,6BAA6B,mCAAmC,EAAE,OAAO;AAAA,UAChG;AAAA,QACD;AAAA,QACA,aAAa,CAAC,EAAE,mBAAmB;AAC9B,cAAA,UAAU,WAAW,GAAG;AACT,8BAAA,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACK,eAAA,kBAAkB,WAAW,cAAc,iBAAiB;AAAA,QAClE;AAAA,MAAA,CACA;AAAA,IACF;AAAA,EACD;AACD;"}

package/dist/production/src/validation/MembershipResolver.cjs

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const schema = require("@contember/schema");
+const assertNever = require("../utils/assertNever.cjs");
+const schemaUtils = require("../acl/schemaUtils.cjs");
+require("../type-schema/acl.cjs");
+const condition = require("../type-schema/condition.cjs");
+require("../type-schema/model.cjs");
+require("../type-schema/settings.cjs");
+require("../type-schema/validation.cjs");
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
+class MembershipResolver {
+  resolve(acl, memberships, identity) {
+    const errors = [];
+    const parsed = [];
+    const roles = acl.roles;
+    for (const membership of memberships) {
+      if (!roles[membership.role]) {
+        errors.push(new MembershipValidationError(
+          membership.role,
+          "roleNotFound"
+          /* ROLE_NOT_FOUND */
+        ));
+        continue;
+      }
+      const roleVariables = schemaUtils.getRoleVariables(membership.role, acl);
+      for (const variable of membership.variables) {
+        if (!roleVariables[variable.name] || roleVariables[variable.name].type === schema.Acl.VariableType.predefined) {
+          errors.push(
+            new MembershipValidationError(
+              membership.role,
+              "variableNotFound",
+              variable.name
+            )
+          );
+        }
+      }
+      const [membershipErrors, parsedVariables] = this.readMembershipVariables(roleVariables, membership, identity);
+      errors.push(...membershipErrors);
+      parsed.push({
+        role: membership.role,
+        variables: parsedVariables
+      });
+    }
+    return new MembershipReadResult(errors, parsed);
+  }
+  readMembershipVariables(roleVariables, membership, identity) {
+    const errors = [];
+    const parsedVariables = [];
+    for (const [name, variable] of Object.entries(roleVariables)) {
+      if (variable.type === schema.Acl.VariableType.predefined) {
+        switch (variable.value) {
+          case "identityID":
+            parsedVariables.push({ name, condition: { in: [identity.identityId] } });
+            break;
+          case "personID":
+            parsedVariables.push({
+              name,
+              condition: { in: identity.personId ? [identity.personId] : [] }
+            });
+            break;
+          default:
+            parsedVariables.push({ name, condition: { never: true } });
+            errors.push(new MembershipValidationError(membership.role, "variableInvalid", name));
+            break;
+        }
+        continue;
+      }
+      const inputVariable = membership.variables.find((it) => it.name === name);
+      if (!inputVariable) {
+        if (variable.fallback) {
+          parsedVariables.push({ name, condition: variable.fallback });
+        } else {
+          errors.push(new MembershipValidationError(membership.role, "variableEmpty", name));
+          parsedVariables.push({ name, condition: { never: true } });
+        }
+        continue;
+      }
+      if (variable.type === schema.Acl.VariableType.entity) {
+        parsedVariables.push({ name, condition: { in: inputVariable.values } });
+      } else if (variable.type === schema.Acl.VariableType.condition) {
+        try {
+          const conditions = inputVariable.values.map((it) => condition.conditionSchema()(JSON.parse(it)));
+          parsedVariables.push({
+            name,
+            condition: conditions.length === 1 ? conditions[0] : { or: conditions }
+          });
+        } catch {
+          errors.push(new MembershipValidationError(membership.role, "variableInvalid", name));
+          parsedVariables.push({ name, condition: { never: true } });
+        }
+      } else {
+        assertNever.assertNever();
+      }
+    }
+    return [errors, parsedVariables];
+  }
+}
+__publicField(MembershipResolver, "UnknownIdentity", { identityId: "00000000-0000-0000-0000-000000000000" });
+class MembershipReadResult {
+  constructor(errors, memberships) {
+    this.errors = errors;
+    this.memberships = memberships;
+  }
+}
+class MembershipValidationError {
+  constructor(role, error, variable) {
+    this.role = role;
+    this.error = error;
+    this.variable = variable;
+  }
+}
+var MembershipValidationErrorType = /* @__PURE__ */ ((MembershipValidationErrorType2) => {
+  MembershipValidationErrorType2["ROLE_NOT_FOUND"] = "roleNotFound";
+  MembershipValidationErrorType2["VARIABLE_NOT_FOUND"] = "variableNotFound";
+  MembershipValidationErrorType2["VARIABLE_EMPTY"] = "variableEmpty";
+  MembershipValidationErrorType2["VARIABLE_INVALID"] = "variableInvalid";
+  return MembershipValidationErrorType2;
+})(MembershipValidationErrorType || {});
+exports.MembershipReadResult = MembershipReadResult;
+exports.MembershipResolver = MembershipResolver;
+exports.MembershipValidationError = MembershipValidationError;
+exports.MembershipValidationErrorType = MembershipValidationErrorType;
+//# sourceMappingURL=MembershipResolver.cjs.map

package/dist/production/src/validation/MembershipResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MembershipResolver.cjs","sources":["../../../../../packages/schema-utils/src/validation/MembershipResolver.ts"],"sourcesContent":["import { Acl, Input } from '@contember/schema'\nimport { getRoleVariables } from '../acl'\nimport { conditionSchema } from '../type-schema'\nimport { assertNever } from '../utils'\n\n\nexport class MembershipResolver {\n\tpublic static UnknownIdentity = { identityId: '00000000-0000-0000-0000-000000000000' }\n\n\tresolve(\n\t\tacl: Acl.Schema,\n\t\tmemberships: readonly Acl.Membership[],\n\t\tidentity: {\n\t\t\tidentityId: string\n\t\t\tpersonId?: string\n\t\t},\n\t): MembershipReadResult {\n\t\tconst errors: MembershipValidationError[] = []\n\t\tconst parsed: ParsedMembership[] = []\n\t\tconst roles = acl.roles\n\t\tfor (const membership of memberships) {\n\t\t\tif (!roles[membership.role]) {\n\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.ROLE_NOT_FOUND))\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst roleVariables = getRoleVariables(membership.role, acl)\n\t\t\tfor (const variable of membership.variables) {\n\t\t\t\tif (!roleVariables[variable.name] || roleVariables[variable.name].type === Acl.VariableType.predefined) {\n\t\t\t\t\terrors.push(\n\t\t\t\t\t\tnew MembershipValidationError(\n\t\t\t\t\t\t\tmembership.role,\n\t\t\t\t\t\t\tMembershipValidationErrorType.VARIABLE_NOT_FOUND,\n\t\t\t\t\t\t\tvariable.name,\n\t\t\t\t\t\t),\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst [membershipErrors, parsedVariables] = this.readMembershipVariables(roleVariables, membership, identity)\n\t\t\terrors.push(...membershipErrors)\n\t\t\tparsed.push({\n\t\t\t\trole: membership.role,\n\t\t\t\tvariables: parsedVariables,\n\t\t\t})\n\t\t}\n\t\treturn new MembershipReadResult(errors, parsed)\n\t}\n\n\tprivate readMembershipVariables(roleVariables: Acl.Variables, membership: Acl.Membership, identity: {\n\t\tidentityId: string\n\t\tpersonId?: string\n\t}): [MembershipValidationError[], ParsedMembershipVariable[]] {\n\t\tconst errors: MembershipValidationError[] = []\n\t\tconst parsedVariables: ParsedMembershipVariable[] = []\n\t\tfor (const [name, variable] of Object.entries(roleVariables)) {\n\t\t\tif (variable.type === Acl.VariableType.predefined) {\n\t\t\t\tswitch (variable.value) {\n\t\t\t\t\tcase 'identityID':\n\t\t\t\t\t\tparsedVariables.push({ name, condition: { in: [identity.identityId] } })\n\t\t\t\t\t\tbreak\n\t\t\t\t\tcase 'personID':\n\t\t\t\t\t\tparsedVariables.push({\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tcondition: { in: identity.personId ? [identity.personId] : [] },\n\t\t\t\t\t\t})\n\t\t\t\t\t\tbreak\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_INVALID, name))\n\t\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcontinue\n\t\t\t}\n\n\t\t\tconst inputVariable = membership.variables.find(it => it.name === name)\n\t\t\tif (!inputVariable) {\n\t\t\t\tif (variable.fallback) {\n\t\t\t\t\tparsedVariables.push({ name, condition: variable.fallback })\n\t\t\t\t} else {\n\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_EMPTY, name))\n\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t}\n\t\t\t\tcontinue\n\t\t\t}\n\n\t\t\tif (variable.type === Acl.VariableType.entity) {\n\t\t\t\tparsedVariables.push({ name, condition: { in: inputVariable.values } }) // todo: cast to int where primary is int\n\n\t\t\t} else if (variable.type === Acl.VariableType.condition) {\n\t\t\t\ttry {\n\t\t\t\t\tconst conditions = inputVariable.values.map(it => conditionSchema()(JSON.parse(it)))\n\t\t\t\t\tparsedVariables.push({\n\t\t\t\t\t\tname,\n\t\t\t\t\t\tcondition: conditions.length === 1 ? conditions[0] : { or: conditions },\n\t\t\t\t\t})\n\t\t\t\t} catch {\n\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_INVALID, name))\n\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tassertNever(variable)\n\t\t\t}\n\t\t}\n\t\treturn [errors, parsedVariables]\n\t}\n}\n\nexport class MembershipReadResult {\n\tconstructor(\n\t\tpublic readonly errors: MembershipValidationError[],\n\t\tpublic readonly memberships: ParsedMembership[],\n\t) {\n\t}\n}\n\nexport class MembershipValidationError {\n\tconstructor(\n\t\tpublic readonly role: string,\n\t\tpublic readonly error: MembershipValidationErrorType,\n\t\tpublic readonly variable?: string,\n\t) {\n\t}\n}\n\nexport enum MembershipValidationErrorType {\n\tROLE_NOT_FOUND = 'roleNotFound',\n\tVARIABLE_NOT_FOUND = 'variableNotFound',\n\tVARIABLE_EMPTY = 'variableEmpty',\n\tVARIABLE_INVALID = 'variableInvalid',\n}\n\n\nexport interface ParsedMembershipVariable {\n\treadonly name: string\n\treadonly condition: Input.Condition\n}\n\nexport interface ParsedMembership {\n\treadonly role: string\n\treadonly variables: readonly ParsedMembershipVariable[]\n}\n"],"names":["getRoleVariables","Acl","conditionSchema","assertNever","MembershipValidationErrorType"],"mappings":";;;;;;;;;;;;;AAMO,MAAM,mBAAmB;AAAA,EAG/B,QACC,KACA,aACA,UAIuB;AACvB,UAAM,SAAsC,CAAA;AAC5C,UAAM,SAA6B,CAAA;AACnC,UAAM,QAAQ,IAAI;AAClB,eAAW,cAAc,aAAa;AACrC,UAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC5B,eAAO,KAAK,IAAI;AAAA,UAA0B,WAAW;AAAA,UAAM;AAAA;AAAA,SAA6C;AACxG;AAAA,MACD;AACA,YAAM,gBAAgBA,YAAA,iBAAiB,WAAW,MAAM,GAAG;AAChD,iBAAA,YAAY,WAAW,WAAW;AAC5C,YAAI,CAAC,cAAc,SAAS,IAAI,KAAK,cAAc,SAAS,IAAI,EAAE,SAASC,WAAI,aAAa,YAAY;AAChG,iBAAA;AAAA,YACN,IAAI;AAAA,cACH,WAAW;AAAA,cACX;AAAA,cACA,SAAS;AAAA,YACV;AAAA,UAAA;AAAA,QAEF;AAAA,MACD;AACM,YAAA,CAAC,kBAAkB,eAAe,IAAI,KAAK,wBAAwB,eAAe,YAAY,QAAQ;AACrG,aAAA,KAAK,GAAG,gBAAgB;AAC/B,aAAO,KAAK;AAAA,QACX,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,MAAA,CACX;AAAA,IACF;AACO,WAAA,IAAI,qBAAqB,QAAQ,MAAM;AAAA,EAC/C;AAAA,EAEQ,wBAAwB,eAA8B,YAA4B,UAG5B;AAC7D,UAAM,SAAsC,CAAA;AAC5C,UAAM,kBAA8C,CAAA;AACpD,eAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,aAAa,GAAG;AAC7D,UAAI,SAAS,SAASA,WAAI,aAAa,YAAY;AAClD,gBAAQ,SAAS,OAAO;AAAA,UACvB,KAAK;AACY,4BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,IAAI,CAAC,SAAS,UAAU,EAAE,EAAA,CAAG;AACvE;AAAA,UACD,KAAK;AACJ,4BAAgB,KAAK;AAAA,cACpB;AAAA,cACA,WAAW,EAAE,IAAI,SAAS,WAAW,CAAC,SAAS,QAAQ,IAAI,GAAG;AAAA,YAAA,CAC9D;AACD;AAAA,UACD;AACiB,4BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,QAAQ;AACzD,mBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,mBAAgD,IAAI,CAAC;AAChH;AAAA,QACF;AACA;AAAA,MACD;AAEA,YAAM,gBAAgB,WAAW,UAAU,KAAK,CAAM,OAAA,GAAG,SAAS,IAAI;AACtE,UAAI,CAAC,eAAe;AACnB,YAAI,SAAS,UAAU;AACtB,0BAAgB,KAAK,EAAE,MAAM,WAAW,SAAS,UAAU;AAAA,QAAA,OACrD;AACN,iBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,iBAA8C,IAAI,CAAC;AAC9F,0BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,QAAQ;AAAA,QAC1D;AACA;AAAA,MACD;AAEA,UAAI,SAAS,SAASA,WAAI,aAAa,QAAQ;AAC9B,wBAAA,KAAK,EAAE,MAAM,WAAW,EAAE,IAAI,cAAc,OAAO,EAAA,CAAG;AAAA,MAE5D,WAAA,SAAS,SAASA,OAAAA,IAAI,aAAa,WAAW;AACpD,YAAA;AACG,gBAAA,aAAa,cAAc,OAAO,IAAI,CAAA,OAAMC,UAAgB,gBAAA,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;AACnF,0BAAgB,KAAK;AAAA,YACpB;AAAA,YACA,WAAW,WAAW,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,WAAW;AAAA,UAAA,CACtE;AAAA,QAAA,QACM;AACP,iBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,mBAAgD,IAAI,CAAC;AAChG,0BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,QAAQ;AAAA,QAC1D;AAAA,MAAA,OACM;AACNC,oBAAAA,YAAoB;AAAA,MACrB;AAAA,IACD;AACO,WAAA,CAAC,QAAQ,eAAe;AAAA,EAChC;AACD;AAjGC,cADY,oBACE,mBAAkB,EAAE,YAAY,uCAAuC,CAAA;AAmG/E,MAAM,qBAAqB;AAAA,EACjC,YACiB,QACA,aACf;AAFe,SAAA,SAAA;AACA,SAAA,cAAA;AAAA,EAEjB;AACD;AAEO,MAAM,0BAA0B;AAAA,EACtC,YACiB,MACA,OACA,UACf;AAHe,SAAA,OAAA;AACA,SAAA,QAAA;AACA,SAAA,WAAA;AAAA,EAEjB;AACD;AAEY,IAAA,kDAAAC,mCAAL;AACNA,iCAAA,gBAAiB,IAAA;AACjBA,iCAAA,oBAAqB,IAAA;AACrBA,iCAAA,gBAAiB,IAAA;AACjBA,iCAAA,kBAAmB,IAAA;AAJRA,SAAAA;AAAA,GAAA,iCAAA,CAAA,CAAA;;;;;"}

package/dist/production/src/validation/MembershipResolver.js

@@ -0,0 +1,126 @@
+import { Acl } from "@contember/schema";
+import { assertNever } from "../utils/assertNever.js";
+import { getRoleVariables } from "../acl/schemaUtils.js";
+import "../type-schema/acl.js";
+import { conditionSchema } from "../type-schema/condition.js";
+import "../type-schema/model.js";
+import "../type-schema/settings.js";
+import "../type-schema/validation.js";
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
+class MembershipResolver {
+  resolve(acl, memberships, identity) {
+    const errors = [];
+    const parsed = [];
+    const roles = acl.roles;
+    for (const membership of memberships) {
+      if (!roles[membership.role]) {
+        errors.push(new MembershipValidationError(
+          membership.role,
+          "roleNotFound"
+          /* ROLE_NOT_FOUND */
+        ));
+        continue;
+      }
+      const roleVariables = getRoleVariables(membership.role, acl);
+      for (const variable of membership.variables) {
+        if (!roleVariables[variable.name] || roleVariables[variable.name].type === Acl.VariableType.predefined) {
+          errors.push(
+            new MembershipValidationError(
+              membership.role,
+              "variableNotFound",
+              variable.name
+            )
+          );
+        }
+      }
+      const [membershipErrors, parsedVariables] = this.readMembershipVariables(roleVariables, membership, identity);
+      errors.push(...membershipErrors);
+      parsed.push({
+        role: membership.role,
+        variables: parsedVariables
+      });
+    }
+    return new MembershipReadResult(errors, parsed);
+  }
+  readMembershipVariables(roleVariables, membership, identity) {
+    const errors = [];
+    const parsedVariables = [];
+    for (const [name, variable] of Object.entries(roleVariables)) {
+      if (variable.type === Acl.VariableType.predefined) {
+        switch (variable.value) {
+          case "identityID":
+            parsedVariables.push({ name, condition: { in: [identity.identityId] } });
+            break;
+          case "personID":
+            parsedVariables.push({
+              name,
+              condition: { in: identity.personId ? [identity.personId] : [] }
+            });
+            break;
+          default:
+            parsedVariables.push({ name, condition: { never: true } });
+            errors.push(new MembershipValidationError(membership.role, "variableInvalid", name));
+            break;
+        }
+        continue;
+      }
+      const inputVariable = membership.variables.find((it) => it.name === name);
+      if (!inputVariable) {
+        if (variable.fallback) {
+          parsedVariables.push({ name, condition: variable.fallback });
+        } else {
+          errors.push(new MembershipValidationError(membership.role, "variableEmpty", name));
+          parsedVariables.push({ name, condition: { never: true } });
+        }
+        continue;
+      }
+      if (variable.type === Acl.VariableType.entity) {
+        parsedVariables.push({ name, condition: { in: inputVariable.values } });
+      } else if (variable.type === Acl.VariableType.condition) {
+        try {
+          const conditions = inputVariable.values.map((it) => conditionSchema()(JSON.parse(it)));
+          parsedVariables.push({
+            name,
+            condition: conditions.length === 1 ? conditions[0] : { or: conditions }
+          });
+        } catch {
+          errors.push(new MembershipValidationError(membership.role, "variableInvalid", name));
+          parsedVariables.push({ name, condition: { never: true } });
+        }
+      } else {
+        assertNever();
+      }
+    }
+    return [errors, parsedVariables];
+  }
+}
+__publicField(MembershipResolver, "UnknownIdentity", { identityId: "00000000-0000-0000-0000-000000000000" });
+class MembershipReadResult {
+  constructor(errors, memberships) {
+    this.errors = errors;
+    this.memberships = memberships;
+  }
+}
+class MembershipValidationError {
+  constructor(role, error, variable) {
+    this.role = role;
+    this.error = error;
+    this.variable = variable;
+  }
+}
+var MembershipValidationErrorType = /* @__PURE__ */ ((MembershipValidationErrorType2) => {
+  MembershipValidationErrorType2["ROLE_NOT_FOUND"] = "roleNotFound";
+  MembershipValidationErrorType2["VARIABLE_NOT_FOUND"] = "variableNotFound";
+  MembershipValidationErrorType2["VARIABLE_EMPTY"] = "variableEmpty";
+  MembershipValidationErrorType2["VARIABLE_INVALID"] = "variableInvalid";
+  return MembershipValidationErrorType2;
+})(MembershipValidationErrorType || {});
+export {
+  MembershipReadResult,
+  MembershipResolver,
+  MembershipValidationError,
+  MembershipValidationErrorType
+};
+//# sourceMappingURL=MembershipResolver.js.map

package/dist/production/src/validation/MembershipResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MembershipResolver.js","sources":["../../../../../packages/schema-utils/src/validation/MembershipResolver.ts"],"sourcesContent":["import { Acl, Input } from '@contember/schema'\nimport { getRoleVariables } from '../acl'\nimport { conditionSchema } from '../type-schema'\nimport { assertNever } from '../utils'\n\n\nexport class MembershipResolver {\n\tpublic static UnknownIdentity = { identityId: '00000000-0000-0000-0000-000000000000' }\n\n\tresolve(\n\t\tacl: Acl.Schema,\n\t\tmemberships: readonly Acl.Membership[],\n\t\tidentity: {\n\t\t\tidentityId: string\n\t\t\tpersonId?: string\n\t\t},\n\t): MembershipReadResult {\n\t\tconst errors: MembershipValidationError[] = []\n\t\tconst parsed: ParsedMembership[] = []\n\t\tconst roles = acl.roles\n\t\tfor (const membership of memberships) {\n\t\t\tif (!roles[membership.role]) {\n\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.ROLE_NOT_FOUND))\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst roleVariables = getRoleVariables(membership.role, acl)\n\t\t\tfor (const variable of membership.variables) {\n\t\t\t\tif (!roleVariables[variable.name] || roleVariables[variable.name].type === Acl.VariableType.predefined) {\n\t\t\t\t\terrors.push(\n\t\t\t\t\t\tnew MembershipValidationError(\n\t\t\t\t\t\t\tmembership.role,\n\t\t\t\t\t\t\tMembershipValidationErrorType.VARIABLE_NOT_FOUND,\n\t\t\t\t\t\t\tvariable.name,\n\t\t\t\t\t\t),\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst [membershipErrors, parsedVariables] = this.readMembershipVariables(roleVariables, membership, identity)\n\t\t\terrors.push(...membershipErrors)\n\t\t\tparsed.push({\n\t\t\t\trole: membership.role,\n\t\t\t\tvariables: parsedVariables,\n\t\t\t})\n\t\t}\n\t\treturn new MembershipReadResult(errors, parsed)\n\t}\n\n\tprivate readMembershipVariables(roleVariables: Acl.Variables, membership: Acl.Membership, identity: {\n\t\tidentityId: string\n\t\tpersonId?: string\n\t}): [MembershipValidationError[], ParsedMembershipVariable[]] {\n\t\tconst errors: MembershipValidationError[] = []\n\t\tconst parsedVariables: ParsedMembershipVariable[] = []\n\t\tfor (const [name, variable] of Object.entries(roleVariables)) {\n\t\t\tif (variable.type === Acl.VariableType.predefined) {\n\t\t\t\tswitch (variable.value) {\n\t\t\t\t\tcase 'identityID':\n\t\t\t\t\t\tparsedVariables.push({ name, condition: { in: [identity.identityId] } })\n\t\t\t\t\t\tbreak\n\t\t\t\t\tcase 'personID':\n\t\t\t\t\t\tparsedVariables.push({\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tcondition: { in: identity.personId ? [identity.personId] : [] },\n\t\t\t\t\t\t})\n\t\t\t\t\t\tbreak\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_INVALID, name))\n\t\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcontinue\n\t\t\t}\n\n\t\t\tconst inputVariable = membership.variables.find(it => it.name === name)\n\t\t\tif (!inputVariable) {\n\t\t\t\tif (variable.fallback) {\n\t\t\t\t\tparsedVariables.push({ name, condition: variable.fallback })\n\t\t\t\t} else {\n\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_EMPTY, name))\n\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t}\n\t\t\t\tcontinue\n\t\t\t}\n\n\t\t\tif (variable.type === Acl.VariableType.entity) {\n\t\t\t\tparsedVariables.push({ name, condition: { in: inputVariable.values } }) // todo: cast to int where primary is int\n\n\t\t\t} else if (variable.type === Acl.VariableType.condition) {\n\t\t\t\ttry {\n\t\t\t\t\tconst conditions = inputVariable.values.map(it => conditionSchema()(JSON.parse(it)))\n\t\t\t\t\tparsedVariables.push({\n\t\t\t\t\t\tname,\n\t\t\t\t\t\tcondition: conditions.length === 1 ? conditions[0] : { or: conditions },\n\t\t\t\t\t})\n\t\t\t\t} catch {\n\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_INVALID, name))\n\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tassertNever(variable)\n\t\t\t}\n\t\t}\n\t\treturn [errors, parsedVariables]\n\t}\n}\n\nexport class MembershipReadResult {\n\tconstructor(\n\t\tpublic readonly errors: MembershipValidationError[],\n\t\tpublic readonly memberships: ParsedMembership[],\n\t) {\n\t}\n}\n\nexport class MembershipValidationError {\n\tconstructor(\n\t\tpublic readonly role: string,\n\t\tpublic readonly error: MembershipValidationErrorType,\n\t\tpublic readonly variable?: string,\n\t) {\n\t}\n}\n\nexport enum MembershipValidationErrorType {\n\tROLE_NOT_FOUND = 'roleNotFound',\n\tVARIABLE_NOT_FOUND = 'variableNotFound',\n\tVARIABLE_EMPTY = 'variableEmpty',\n\tVARIABLE_INVALID = 'variableInvalid',\n}\n\n\nexport interface ParsedMembershipVariable {\n\treadonly name: string\n\treadonly condition: Input.Condition\n}\n\nexport interface ParsedMembership {\n\treadonly role: string\n\treadonly variables: readonly ParsedMembershipVariable[]\n}\n"],"names":["MembershipValidationErrorType"],"mappings":";;;;;;;;;;;AAMO,MAAM,mBAAmB;AAAA,EAG/B,QACC,KACA,aACA,UAIuB;AACvB,UAAM,SAAsC,CAAA;AAC5C,UAAM,SAA6B,CAAA;AACnC,UAAM,QAAQ,IAAI;AAClB,eAAW,cAAc,aAAa;AACrC,UAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC5B,eAAO,KAAK,IAAI;AAAA,UAA0B,WAAW;AAAA,UAAM;AAAA;AAAA,SAA6C;AACxG;AAAA,MACD;AACA,YAAM,gBAAgB,iBAAiB,WAAW,MAAM,GAAG;AAChD,iBAAA,YAAY,WAAW,WAAW;AAC5C,YAAI,CAAC,cAAc,SAAS,IAAI,KAAK,cAAc,SAAS,IAAI,EAAE,SAAS,IAAI,aAAa,YAAY;AAChG,iBAAA;AAAA,YACN,IAAI;AAAA,cACH,WAAW;AAAA,cACX;AAAA,cACA,SAAS;AAAA,YACV;AAAA,UAAA;AAAA,QAEF;AAAA,MACD;AACM,YAAA,CAAC,kBAAkB,eAAe,IAAI,KAAK,wBAAwB,eAAe,YAAY,QAAQ;AACrG,aAAA,KAAK,GAAG,gBAAgB;AAC/B,aAAO,KAAK;AAAA,QACX,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,MAAA,CACX;AAAA,IACF;AACO,WAAA,IAAI,qBAAqB,QAAQ,MAAM;AAAA,EAC/C;AAAA,EAEQ,wBAAwB,eAA8B,YAA4B,UAG5B;AAC7D,UAAM,SAAsC,CAAA;AAC5C,UAAM,kBAA8C,CAAA;AACpD,eAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,aAAa,GAAG;AAC7D,UAAI,SAAS,SAAS,IAAI,aAAa,YAAY;AAClD,gBAAQ,SAAS,OAAO;AAAA,UACvB,KAAK;AACY,4BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,IAAI,CAAC,SAAS,UAAU,EAAE,EAAA,CAAG;AACvE;AAAA,UACD,KAAK;AACJ,4BAAgB,KAAK;AAAA,cACpB;AAAA,cACA,WAAW,EAAE,IAAI,SAAS,WAAW,CAAC,SAAS,QAAQ,IAAI,GAAG;AAAA,YAAA,CAC9D;AACD;AAAA,UACD;AACiB,4BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,QAAQ;AACzD,mBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,mBAAgD,IAAI,CAAC;AAChH;AAAA,QACF;AACA;AAAA,MACD;AAEA,YAAM,gBAAgB,WAAW,UAAU,KAAK,CAAM,OAAA,GAAG,SAAS,IAAI;AACtE,UAAI,CAAC,eAAe;AACnB,YAAI,SAAS,UAAU;AACtB,0BAAgB,KAAK,EAAE,MAAM,WAAW,SAAS,UAAU;AAAA,QAAA,OACrD;AACN,iBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,iBAA8C,IAAI,CAAC;AAC9F,0BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,QAAQ;AAAA,QAC1D;AACA;AAAA,MACD;AAEA,UAAI,SAAS,SAAS,IAAI,aAAa,QAAQ;AAC9B,wBAAA,KAAK,EAAE,MAAM,WAAW,EAAE,IAAI,cAAc,OAAO,EAAA,CAAG;AAAA,MAE5D,WAAA,SAAS,SAAS,IAAI,aAAa,WAAW;AACpD,YAAA;AACG,gBAAA,aAAa,cAAc,OAAO,IAAI,CAAA,OAAM,gBAAgB,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;AACnF,0BAAgB,KAAK;AAAA,YACpB;AAAA,YACA,WAAW,WAAW,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,WAAW;AAAA,UAAA,CACtE;AAAA,QAAA,QACM;AACP,iBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,mBAAgD,IAAI,CAAC;AAChG,0BAAA,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,QAAQ;AAAA,QAC1D;AAAA,MAAA,OACM;AACN,oBAAoB;AAAA,MACrB;AAAA,IACD;AACO,WAAA,CAAC,QAAQ,eAAe;AAAA,EAChC;AACD;AAjGC,cADY,oBACE,mBAAkB,EAAE,YAAY,uCAAuC,CAAA;AAmG/E,MAAM,qBAAqB;AAAA,EACjC,YACiB,QACA,aACf;AAFe,SAAA,SAAA;AACA,SAAA,cAAA;AAAA,EAEjB;AACD;AAEO,MAAM,0BAA0B;AAAA,EACtC,YACiB,MACA,OACA,UACf;AAHe,SAAA,OAAA;AACA,SAAA,QAAA;AACA,SAAA,WAAA;AAAA,EAEjB;AACD;AAEY,IAAA,kDAAAA,mCAAL;AACNA,iCAAA,gBAAiB,IAAA;AACjBA,iCAAA,oBAAqB,IAAA;AACrBA,iCAAA,gBAAiB,IAAA;AACjBA,iCAAA,kBAAmB,IAAA;AAJRA,SAAAA;AAAA,GAAA,iCAAA,CAAA,CAAA;"}