@contember/schema-utils 2.1.0-alpha.37 → 2.1.0-alpha.39

package/dist/production/src/validation/AclValidator.js

@@ -0,0 +1,168 @@
+import "@contember/schema";
+import { PredicateDefinitionProcessor } from "../acl/PredicateDefinitionProcessor.js";
+import { getEntity } from "../model/modelUtils.js";
+import { ErrorBuilder } from "./errors.js";
+import "../type-schema/acl.js";
+import { conditionSchema } from "../type-schema/condition.js";
+import "../type-schema/model.js";
+import "../type-schema/settings.js";
+import "../type-schema/validation.js";
+class AclValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new ErrorBuilder([], ["acl"]);
+    this.validateRoles(schema.roles, errorBuilder);
+    return errorBuilder.errors;
+  }
+  validateRoles(roles, errorBuilder) {
+    for (const role in roles) {
+      if (!roles.hasOwnProperty(role)) {
+        continue;
+      }
+      this.validateRolePermissions(roles[role], Object.keys(roles), errorBuilder.for(role));
+    }
+  }
+  validateRolePermissions(permissions, roles, errorBuilder) {
+    this.validateInherits(permissions.inherits, roles, errorBuilder.for("inherits"));
+    this.validateVariables(permissions.variables, errorBuilder.for("variables"));
+    this.validatePermissions(permissions.entities, permissions.variables || {}, errorBuilder.for("entities"));
+  }
+  validateInherits(inherits, roles, errorBuilder) {
+    if (inherits === void 0) {
+      return void 0;
+    }
+    for (const inheritsFrom of inherits) {
+      if (!roles.includes(inheritsFrom)) {
+        errorBuilder.for(inheritsFrom).add("ACL_UNDEFINED_ROLE", "Referenced role not exists.");
+      }
+    }
+  }
+  validateVariables(variables, errorBuilder) {
+    for (const varName in variables) {
+      if (!variables.hasOwnProperty(varName)) {
+        continue;
+      }
+      this.validateVariable(variables[varName], errorBuilder.for(varName));
+    }
+  }
+  validateVariable(variable, errorBuilder) {
+    switch (variable.type) {
+      case "entity":
+        if (!this.model.entities[variable.entityName]) {
+          errorBuilder.add("ACL_UNDEFINED_ENTITY", `Entity "${variable.entityName}" not found`);
+          return;
+        }
+    }
+    return;
+  }
+  validatePermissions(permissions, variables, errorBuilder) {
+    for (const entityName in permissions) {
+      if (!permissions.hasOwnProperty(entityName)) {
+        continue;
+      }
+      if (!this.model.entities[entityName]) {
+        errorBuilder.add("ACL_UNDEFINED_ENTITY", `Entity ${entityName} not found`);
+        continue;
+      }
+      const entity = getEntity(this.model, entityName);
+      this.validateEntityPermissions(
+        permissions[entityName],
+        entity,
+        variables,
+        errorBuilder.for(entityName)
+      );
+    }
+  }
+  validateEntityPermissions(entityPermissions, entity, variables, errorBuilder) {
+    this.validatePredicates(
+      entityPermissions.predicates,
+      entity,
+      variables,
+      errorBuilder.for("predicates")
+    );
+    this.validateOperations(
+      entityPermissions.operations,
+      entity,
+      entityPermissions.predicates,
+      errorBuilder.for("operations")
+    );
+  }
+  validatePredicates(predicates, entity, variables, errorBuilder) {
+    for (const predicateName in predicates) {
+      if (!predicates.hasOwnProperty(predicateName)) {
+        continue;
+      }
+      this.validatePredicateDefinition(
+        predicates[predicateName],
+        entity,
+        variables,
+        errorBuilder.for(predicateName)
+      );
+    }
+  }
+  validatePredicateDefinition(predicate, entity, variables, errorBuilder) {
+    const processor = new PredicateDefinitionProcessor(this.model);
+    processor.process(entity, predicate, {
+      handleColumn: (ctx) => {
+        if (typeof ctx.value === "string") {
+          if (!variables[ctx.value]) {
+            errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_VARIABLE", `Undefined variable ${ctx.value}`);
+          }
+        } else {
+          try {
+            conditionSchema(ctx.column.type)(ctx.value);
+          } catch (e) {
+            errorBuilder.for(...ctx.path).add("ACL_INVALID_CONDITION", `Invalid condition (${e.message}): ${JSON.stringify(ctx.value)}`);
+          }
+        }
+        return ctx.value;
+      },
+      handleRelation: (ctx) => {
+        if (typeof ctx.value === "string" && !variables[ctx.value]) {
+          errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_VARIABLE", `Undefined variable ${ctx.value}`);
+        }
+        return ctx.value;
+      },
+      handleUndefinedField: (ctx) => {
+        errorBuilder.for(...ctx.path).add("ACL_UNDEFINED_FIELD", `Undefined field ${ctx.name} on entity ${ctx.entity.name}`);
+        return ctx.value;
+      }
+    });
+  }
+  validateOperations(operations, entity, predicates, errorBuilder) {
+    if (operations.delete !== void 0) {
+      this.validatePredicate(operations.delete, predicates, errorBuilder.for("delete"));
+    }
+    for (const op of ["read", "create", "update"]) {
+      const operation = operations[op];
+      if (operation !== void 0) {
+        this.validateFieldPermissions(operation, entity, predicates, errorBuilder.for(op));
+      }
+    }
+  }
+  validateFieldPermissions(permissions, entity, predicates, errorBuilder) {
+    for (const field in permissions) {
+      if (!permissions.hasOwnProperty(field)) {
+        continue;
+      }
+      if (!entity.fields[field]) {
+        errorBuilder.add("ACL_UNDEFINED_FIELD", `Field ${field} not found on entity ${entity.name}`);
+      }
+      this.validatePredicate(permissions[field], predicates, errorBuilder.for(field));
+    }
+  }
+  validatePredicate(predicate, predicates, errorBuilder) {
+    if (predicate === false || predicate === true) {
+      return;
+    }
+    if (!predicates[predicate]) {
+      errorBuilder.add("ACL_UNDEFINED_PREDICATE", `Predicate ${predicate} not found`);
+    }
+  }
+}
+export {
+  AclValidator
+};
+//# sourceMappingURL=AclValidator.js.map

package/dist/production/src/validation/AclValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AclValidator.js","sources":["../../../../../packages/schema-utils/src/validation/AclValidator.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { PredicateDefinitionProcessor } from '../acl'\nimport { getEntity } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { conditionSchema } from '../type-schema'\n\nexport class AclValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Acl.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['acl'])\n\t\tthis.validateRoles(schema.roles, errorBuilder)\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateRoles(roles: Acl.Roles, errorBuilder: ErrorBuilder): void {\n\t\tfor (const role in roles) {\n\t\t\tif (!roles.hasOwnProperty(role)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validateRolePermissions(roles[role], Object.keys(roles), errorBuilder.for(role))\n\t\t}\n\t}\n\n\tprivate validateRolePermissions(\n\t\tpermissions: Acl.RolePermissions,\n\t\troles: string[],\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tthis.validateInherits(permissions.inherits, roles, errorBuilder.for('inherits'))\n\t\tthis.validateVariables(permissions.variables, errorBuilder.for('variables'))\n\t\tthis.validatePermissions(permissions.entities, (permissions.variables as Acl.Variables) || {}, errorBuilder.for('entities'))\n\t\t// todo: plugins validation\n\t}\n\n\tprivate validateInherits(inherits: Acl.RolePermissions['inherits'], roles: string[], errorBuilder: ErrorBuilder): void {\n\t\tif (inherits === undefined) {\n\t\t\treturn undefined\n\t\t}\n\t\tfor (const inheritsFrom of inherits) {\n\t\t\tif (!roles.includes(inheritsFrom)) {\n\t\t\t\terrorBuilder.for(inheritsFrom).add('ACL_UNDEFINED_ROLE', 'Referenced role not exists.')\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateVariables(variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const varName in variables) {\n\t\t\tif (!variables.hasOwnProperty(varName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validateVariable(variables[varName], errorBuilder.for(varName))\n\t\t}\n\t}\n\n\tprivate validateVariable(variable: Acl.Variable, errorBuilder: ErrorBuilder): void {\n\t\tswitch (variable.type) {\n\t\t\tcase 'entity':\n\t\t\t\tif (!this.model.entities[variable.entityName]) {\n\t\t\t\t\terrorBuilder.add('ACL_UNDEFINED_ENTITY', `Entity \"${variable.entityName}\" not found`)\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t}\n\t\treturn\n\t}\n\n\tprivate validatePermissions(permissions: Acl.Permissions, variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const entityName in permissions) {\n\t\t\tif (!permissions.hasOwnProperty(entityName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!this.model.entities[entityName]) {\n\t\t\t\terrorBuilder.add('ACL_UNDEFINED_ENTITY', `Entity ${entityName} not found`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst entity = getEntity(this.model, entityName)\n\n\t\t\tthis.validateEntityPermissions(\n\t\t\t\tpermissions[entityName],\n\t\t\t\tentity,\n\t\t\t\tvariables,\n\t\t\t\terrorBuilder.for(entityName),\n\t\t\t)\n\t\t}\n\t}\n\n\tprivate validateEntityPermissions(\n\t\tentityPermissions: Acl.EntityPermissions,\n\t\tentity: Model.Entity,\n\t\tvariables: Acl.Variables,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tthis.validatePredicates(\n\t\t\tentityPermissions.predicates,\n\t\t\tentity,\n\t\t\tvariables,\n\t\t\terrorBuilder.for('predicates'),\n\t\t)\n\t\tthis.validateOperations(\n\t\t\tentityPermissions.operations,\n\t\t\tentity,\n\t\t\tentityPermissions.predicates as Acl.PredicateMap,\n\t\t\terrorBuilder.for('operations'),\n\t\t)\n\t}\n\n\tprivate validatePredicates(predicates: Acl.PredicateMap, entity: Model.Entity, variables: Acl.Variables, errorBuilder: ErrorBuilder): void {\n\t\tfor (const predicateName in predicates) {\n\t\t\tif (!predicates.hasOwnProperty(predicateName)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tthis.validatePredicateDefinition(\n\t\t\t\tpredicates[predicateName],\n\t\t\t\tentity,\n\t\t\t\tvariables,\n\t\t\t\terrorBuilder.for(predicateName),\n\t\t\t)\n\t\t}\n\t}\n\n\tprivate validatePredicateDefinition(\n\t\tpredicate: Acl.PredicateDefinition,\n\t\tentity: Model.Entity,\n\t\tvariables: Acl.Variables,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tconst processor = new PredicateDefinitionProcessor(this.model)\n\t\tprocessor.process(entity, predicate, {\n\t\t\thandleColumn: ctx => {\n\t\t\t\tif (typeof ctx.value === 'string') {\n\t\t\t\t\tif (!variables[ctx.value]) {\n\t\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_VARIABLE', `Undefined variable ${ctx.value}`)\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconditionSchema(ctx.column.type)(ctx.value)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_INVALID_CONDITION', `Invalid condition (${e.message}): ${JSON.stringify(ctx.value)}`)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t\thandleRelation: ctx => {\n\t\t\t\tif (typeof ctx.value === 'string' && !variables[ctx.value]) {\n\t\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_VARIABLE', `Undefined variable ${ctx.value}`)\n\t\t\t\t}\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t\thandleUndefinedField: ctx => {\n\t\t\t\terrorBuilder.for(...ctx.path).add('ACL_UNDEFINED_FIELD', `Undefined field ${ctx.name} on entity ${ctx.entity.name}`)\n\t\t\t\treturn ctx.value\n\t\t\t},\n\t\t})\n\t}\n\n\tprivate validateOperations(\n\t\toperations: Acl.EntityOperations,\n\t\tentity: Model.Entity,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tif (operations.delete !== undefined) {\n\t\t\tthis.validatePredicate(operations.delete, predicates, errorBuilder.for('delete'))\n\t\t}\n\t\tfor (const op of ['read', 'create', 'update'] as const) {\n\t\t\tconst operation = operations[op]\n\t\t\tif (operation !== undefined) {\n\t\t\t\tthis.validateFieldPermissions(operation, entity, predicates, errorBuilder.for(op))\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateFieldPermissions(\n\t\tpermissions: Acl.FieldPermissions,\n\t\tentity: Model.Entity,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const field in permissions) {\n\t\t\tif (!permissions.hasOwnProperty(field)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\terrorBuilder.add('ACL_UNDEFINED_FIELD', `Field ${field} not found on entity ${entity.name}`)\n\t\t\t}\n\t\t\tthis.validatePredicate(permissions[field], predicates, errorBuilder.for(field))\n\t\t}\n\t}\n\n\tprivate validatePredicate(\n\t\tpredicate: Acl.Predicate,\n\t\tpredicates: Acl.PredicateDefinition,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tif (predicate === false || predicate === true) {\n\t\t\treturn\n\t\t}\n\t\tif (!predicates[predicate]) {\n\t\t\terrorBuilder.add('ACL_UNDEFINED_PREDICATE', `Predicate ${predicate} not found`)\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;AAMO,MAAM,aAAa;AAAA,EACzB,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAAuC;AACtD,UAAM,eAAe,IAAI,aAAa,CAAA,GAAI,CAAC,KAAK,CAAC;AACjD,SAAK,cAAc,OAAO,OAAO,YAAY;AAC7C,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,cAAc,OAAkB,cAAkC;AACzE,eAAW,QAAQ,OAAO;AACzB,UAAI,CAAC,MAAM,eAAe,IAAI,GAAG;AAChC;AAAA,MACD;AACA,WAAK,wBAAwB,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,GAAG,aAAa,IAAI,IAAI,CAAC;AAAA,IACrF;AAAA,EACD;AAAA,EAEQ,wBACP,aACA,OACA,cACO;AACP,SAAK,iBAAiB,YAAY,UAAU,OAAO,aAAa,IAAI,UAAU,CAAC;AAC/E,SAAK,kBAAkB,YAAY,WAAW,aAAa,IAAI,WAAW,CAAC;AAC3E,SAAK,oBAAoB,YAAY,UAAW,YAAY,aAA+B,CAAA,GAAI,aAAa,IAAI,UAAU,CAAC;AAAA,EAE5H;AAAA,EAEQ,iBAAiB,UAA2C,OAAiB,cAAkC;AACtH,QAAI,aAAa,QAAW;AAC3B,aAAO;AAAA,IACR;AACA,eAAW,gBAAgB,UAAU;AACpC,UAAI,CAAC,MAAM,SAAS,YAAY,GAAG;AAClC,qBAAa,IAAI,YAAY,EAAE,IAAI,sBAAsB,6BAA6B;AAAA,MACvF;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBAAkB,WAA0B,cAAkC;AACrF,eAAW,WAAW,WAAW;AAChC,UAAI,CAAC,UAAU,eAAe,OAAO,GAAG;AACvC;AAAA,MACD;AACA,WAAK,iBAAiB,UAAU,OAAO,GAAG,aAAa,IAAI,OAAO,CAAC;AAAA,IACpE;AAAA,EACD;AAAA,EAEQ,iBAAiB,UAAwB,cAAkC;AAClF,YAAQ,SAAS,MAAA;AAAA,MAChB,KAAK;AACJ,YAAI,CAAC,KAAK,MAAM,SAAS,SAAS,UAAU,GAAG;AAC9C,uBAAa,IAAI,wBAAwB,WAAW,SAAS,UAAU,aAAa;AACpF;AAAA,QACD;AAAA,IAAA;AAEF;AAAA,EACD;AAAA,EAEQ,oBAAoB,aAA8B,WAA0B,cAAkC;AACrH,eAAW,cAAc,aAAa;AACrC,UAAI,CAAC,YAAY,eAAe,UAAU,GAAG;AAC5C;AAAA,MACD;AACA,UAAI,CAAC,KAAK,MAAM,SAAS,UAAU,GAAG;AACrC,qBAAa,IAAI,wBAAwB,UAAU,UAAU,YAAY;AACzE;AAAA,MACD;AACA,YAAM,SAAS,UAAU,KAAK,OAAO,UAAU;AAE/C,WAAK;AAAA,QACJ,YAAY,UAAU;AAAA,QACtB;AAAA,QACA;AAAA,QACA,aAAa,IAAI,UAAU;AAAA,MAAA;AAAA,IAE7B;AAAA,EACD;AAAA,EAEQ,0BACP,mBACA,QACA,WACA,cACO;AACP,SAAK;AAAA,MACJ,kBAAkB;AAAA,MAClB;AAAA,MACA;AAAA,MACA,aAAa,IAAI,YAAY;AAAA,IAAA;AAE9B,SAAK;AAAA,MACJ,kBAAkB;AAAA,MAClB;AAAA,MACA,kBAAkB;AAAA,MAClB,aAAa,IAAI,YAAY;AAAA,IAAA;AAAA,EAE/B;AAAA,EAEQ,mBAAmB,YAA8B,QAAsB,WAA0B,cAAkC;AAC1I,eAAW,iBAAiB,YAAY;AACvC,UAAI,CAAC,WAAW,eAAe,aAAa,GAAG;AAC9C;AAAA,MACD;AACA,WAAK;AAAA,QACJ,WAAW,aAAa;AAAA,QACxB;AAAA,QACA;AAAA,QACA,aAAa,IAAI,aAAa;AAAA,MAAA;AAAA,IAEhC;AAAA,EACD;AAAA,EAEQ,4BACP,WACA,QACA,WACA,cACO;AACP,UAAM,YAAY,IAAI,6BAA6B,KAAK,KAAK;AAC7D,cAAU,QAAQ,QAAQ,WAAW;AAAA,MACpC,cAAc,CAAA,QAAO;AACpB,YAAI,OAAO,IAAI,UAAU,UAAU;AAClC,cAAI,CAAC,UAAU,IAAI,KAAK,GAAG;AAC1B,yBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,0BAA0B,sBAAsB,IAAI,KAAK,EAAE;AAAA,UAC9F;AAAA,QACD,OAAO;AACN,cAAI;AACH,4BAAgB,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK;AAAA,UAC3C,SAAS,GAAQ;AAChB,yBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,yBAAyB,sBAAsB,EAAE,OAAO,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,EAAE;AAAA,UAC5H;AAAA,QACD;AACA,eAAO,IAAI;AAAA,MACZ;AAAA,MACA,gBAAgB,CAAA,QAAO;AACtB,YAAI,OAAO,IAAI,UAAU,YAAY,CAAC,UAAU,IAAI,KAAK,GAAG;AAC3D,uBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,0BAA0B,sBAAsB,IAAI,KAAK,EAAE;AAAA,QAC9F;AACA,eAAO,IAAI;AAAA,MACZ;AAAA,MACA,sBAAsB,CAAA,QAAO;AAC5B,qBAAa,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI,uBAAuB,mBAAmB,IAAI,IAAI,cAAc,IAAI,OAAO,IAAI,EAAE;AACnH,eAAO,IAAI;AAAA,MACZ;AAAA,IAAA,CACA;AAAA,EACF;AAAA,EAEQ,mBACP,YACA,QACA,YACA,cACO;AACP,QAAI,WAAW,WAAW,QAAW;AACpC,WAAK,kBAAkB,WAAW,QAAQ,YAAY,aAAa,IAAI,QAAQ,CAAC;AAAA,IACjF;AACA,eAAW,MAAM,CAAC,QAAQ,UAAU,QAAQ,GAAY;AACvD,YAAM,YAAY,WAAW,EAAE;AAC/B,UAAI,cAAc,QAAW;AAC5B,aAAK,yBAAyB,WAAW,QAAQ,YAAY,aAAa,IAAI,EAAE,CAAC;AAAA,MAClF;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,yBACP,aACA,QACA,YACA,cACO;AACP,eAAW,SAAS,aAAa;AAChC,UAAI,CAAC,YAAY,eAAe,KAAK,GAAG;AACvC;AAAA,MACD;AACA,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,qBAAa,IAAI,uBAAuB,SAAS,KAAK,wBAAwB,OAAO,IAAI,EAAE;AAAA,MAC5F;AACA,WAAK,kBAAkB,YAAY,KAAK,GAAG,YAAY,aAAa,IAAI,KAAK,CAAC;AAAA,IAC/E;AAAA,EACD;AAAA,EAEQ,kBACP,WACA,YACA,cACO;AACP,QAAI,cAAc,SAAS,cAAc,MAAM;AAC9C;AAAA,IACD;AACA,QAAI,CAAC,WAAW,SAAS,GAAG;AAC3B,mBAAa,IAAI,2BAA2B,aAAa,SAAS,YAAY;AAAA,IAC/E;AAAA,EACD;AACD;"}

package/dist/production/src/validation/ActionsValidator.cjs

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const modelUtils = require("../model/modelUtils.cjs");
+require("@contember/schema");
+const assertNever = require("../utils/assertNever.cjs");
+const errors = require("./errors.cjs");
+const Typesafe = require("@contember/typesafe");
+const where = require("../type-schema/where.cjs");
+function _interopNamespaceDefault(e) {
+  const n = Object.create(null, { [Symbol.toStringTag]: { value: "Module" } });
+  if (e) {
+    for (const k in e) {
+      if (k !== "default") {
+        const d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: () => e[k]
+        });
+      }
+    }
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+const Typesafe__namespace = /* @__PURE__ */ _interopNamespaceDefault(Typesafe);
+const manyArgsSchema = (args) => Typesafe__namespace.partial({
+  limit: Typesafe__namespace.integer,
+  offset: Typesafe__namespace.integer,
+  orderBy: Typesafe__namespace.array(Typesafe__namespace.anyJsonObject),
+  filter: where.whereSchema(args)
+});
+class ActionsValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new errors.ErrorBuilder([], ["actions"]);
+    this.validateTriggers(schema, errorBuilder.for("triggers"));
+    return errorBuilder.errors;
+  }
+  validateTriggers(schema, errorBuilder) {
+    for (const [name, def] of Object.entries(schema.triggers)) {
+      const triggerErrorBuilder = errorBuilder.for(name);
+      if (name !== def.name) {
+        triggerErrorBuilder.add("ACTIONS_NAME_MISMATCH", `Trigger name ${def.name} does not match the name in a map ${name}`);
+      }
+      if (!schema.targets[def.target]) {
+        triggerErrorBuilder.add("ACTIONS_UNDEFINED_TRIGGER_TARGET", `Trigger target ${def.target} not found`);
+      }
+      this.validateTrigger(def, triggerErrorBuilder);
+    }
+  }
+  validateTrigger(trigger, errorBuilder) {
+    const entity = this.model.entities[trigger.entity];
+    if (!entity) {
+      errorBuilder.add("ACTIONS_UNDEFINED_ENTITY", `Entity ${trigger.entity} not found.`);
+      return;
+    }
+    switch (trigger.type) {
+      case "watch":
+        this.validateWatchTrigger(trigger, entity, errorBuilder);
+        break;
+      case "basic":
+        this.validateBasicTrigger(trigger, entity, errorBuilder);
+        break;
+      default:
+        assertNever.assertNever();
+    }
+  }
+  validateWatchTrigger(trigger, entity, errorBuilder) {
+    this.validateSelection(trigger.watch, entity, errorBuilder.for("watch"));
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+  }
+  validateBasicTrigger(trigger, entity, errorBuilder) {
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+    if (Array.isArray(trigger.update)) {
+      for (const field of trigger.update) {
+        if (!entity.fields[field]) {
+          errorBuilder.for("update").add("ACTIONS_UNDEFINED_FIELD", `Field ${field} of entity ${entity.name} not found.`);
+        }
+      }
+    }
+  }
+  validateSelection(selectionNode, entity, errorBuilder) {
+    for (const part of selectionNode) {
+      const [field, args, selection] = Array.isArray(part) ? part : [part, {}, []];
+      const fieldErrorBuilder = errorBuilder.for(field);
+      if (!entity.fields[field]) {
+        fieldErrorBuilder.add("ACTIONS_UNDEFINED_FIELD", `Undefined field ${field} on entity ${entity.name}`);
+        continue;
+      }
+      modelUtils.acceptFieldVisitor(this.model, entity, field, {
+        visitColumn: () => {
+          if (selection.length) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected sub selection on a column.`);
+          }
+          if (Object.keys(args).length !== 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected args on a column.`);
+          }
+        },
+        visitHasMany: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+          try {
+            manyArgsSchema({ schema: this.model, entity: targetEntity })(args);
+          } catch (e) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Selection args are not valid: ` + e.message);
+          }
+        },
+        visitHasOne: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+        }
+      });
+    }
+  }
+}
+exports.ActionsValidator = ActionsValidator;
+//# sourceMappingURL=ActionsValidator.cjs.map

package/dist/production/src/validation/ActionsValidator.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActionsValidator.cjs","sources":["../../../../../packages/schema-utils/src/validation/ActionsValidator.ts"],"sourcesContent":["import { Actions, Model } from '@contember/schema'\nimport { acceptFieldVisitor } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { assertNever } from '../utils'\nimport * as Typesafe from '@contember/typesafe'\nimport { whereSchema } from '../type-schema/where'\n\nconst manyArgsSchema = (args: { schema: Model.Schema; entity: Model.Entity }) =>\n\tTypesafe.partial({\n\t\tlimit: Typesafe.integer,\n\t\toffset: Typesafe.integer,\n\t\torderBy: Typesafe.array(Typesafe.anyJsonObject),\n\t\tfilter: whereSchema(args),\n\t})\n\nexport class ActionsValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Actions.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['actions'])\n\t\tthis.validateTriggers(schema, errorBuilder.for('triggers'))\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateTriggers(schema: Actions.Schema, errorBuilder: ErrorBuilder) {\n\t\tfor (const [name, def] of Object.entries(schema.triggers)) {\n\t\t\tconst triggerErrorBuilder = errorBuilder.for(name)\n\t\t\tif (name !== def.name) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_NAME_MISMATCH', `Trigger name ${def.name} does not match the name in a map ${name}`)\n\t\t\t}\n\t\t\tif (!schema.targets[def.target]) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_UNDEFINED_TRIGGER_TARGET', `Trigger target ${def.target} not found`)\n\t\t\t}\n\t\t\tthis.validateTrigger(def, triggerErrorBuilder)\n\t\t}\n\t}\n\n\tprivate validateTrigger(trigger: Actions.AnyTrigger, errorBuilder: ErrorBuilder): void {\n\t\tconst entity = this.model.entities[trigger.entity]\n\t\tif (!entity) {\n\t\t\terrorBuilder.add('ACTIONS_UNDEFINED_ENTITY', `Entity ${trigger.entity} not found.`)\n\t\t\treturn\n\t\t}\n\n\t\tswitch (trigger.type) {\n\t\t\tcase 'watch':\n\t\t\t\tthis.validateWatchTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tcase 'basic':\n\t\t\t\tthis.validateBasicTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tdefault:\n\t\t\t\tassertNever(trigger)\n\t\t}\n\t}\n\n\tprivate validateWatchTrigger(trigger: Actions.WatchTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tthis.validateSelection(trigger.watch, entity, errorBuilder.for('watch'))\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\t}\n\n\tprivate validateBasicTrigger(trigger: Actions.BasicTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\n\t\tif (Array.isArray(trigger.update)) {\n\t\t\tfor (const field of trigger.update) {\n\t\t\t\tif (!entity.fields[field]) {\n\t\t\t\t\terrorBuilder.for('update').add('ACTIONS_UNDEFINED_FIELD', `Field ${field} of entity ${entity.name} not found.`)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateSelection(\n\t\tselectionNode: Actions.SelectionNode,\n\t\tentity: Model.Entity,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const part of selectionNode) {\n\t\t\tconst [field, args, selection] = Array.isArray(part) ? part : [part, {}, []]\n\t\t\tconst fieldErrorBuilder = errorBuilder.for(field)\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\tfieldErrorBuilder.add('ACTIONS_UNDEFINED_FIELD', `Undefined field ${field} on entity ${entity.name}`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tacceptFieldVisitor(this.model, entity, field, {\n\t\t\t\tvisitColumn: () => {\n\t\t\t\t\tif (selection.length) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected sub selection on a column.`)\n\t\t\t\t\t}\n\t\t\t\t\tif (Object.keys(args).length !== 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected args on a column.`)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasMany: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t\ttry {\n\t\t\t\t\t\tmanyArgsSchema({ schema: this.model, entity: targetEntity })(args)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Selection args are not valid: ` + e.message)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasOne: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t},\n\t\t\t})\n\t\t}\n\t}\n}\n"],"names":["Typesafe","whereSchema","ErrorBuilder","assertNever","acceptFieldVisitor"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,CAAC,SACvBA,oBAAS,QAAQ;AAAA,EAChB,OAAOA,oBAAS;AAAA,EAChB,QAAQA,oBAAS;AAAA,EACjB,SAASA,oBAAS,MAAMA,oBAAS,aAAa;AAAA,EAC9C,QAAQC,MAAAA,YAAY,IAAI;AACzB,CAAC;AAEK,MAAM,iBAAiB;AAAA,EAC7B,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAA2C;AAC1D,UAAM,eAAe,IAAIC,OAAAA,aAAa,CAAA,GAAI,CAAC,SAAS,CAAC;AACrD,SAAK,iBAAiB,QAAQ,aAAa,IAAI,UAAU,CAAC;AAC1D,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,iBAAiB,QAAwB,cAA4B;AAC5E,eAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,QAAQ,GAAG;AAC1D,YAAM,sBAAsB,aAAa,IAAI,IAAI;AACjD,UAAI,SAAS,IAAI,MAAM;AACtB,4BAAoB,IAAI,yBAAyB,gBAAgB,IAAI,IAAI,qCAAqC,IAAI,EAAE;AAAA,MACrH;AACA,UAAI,CAAC,OAAO,QAAQ,IAAI,MAAM,GAAG;AAChC,4BAAoB,IAAI,oCAAoC,kBAAkB,IAAI,MAAM,YAAY;AAAA,MACrG;AACA,WAAK,gBAAgB,KAAK,mBAAmB;AAAA,IAC9C;AAAA,EACD;AAAA,EAEQ,gBAAgB,SAA6B,cAAkC;AACtF,UAAM,SAAS,KAAK,MAAM,SAAS,QAAQ,MAAM;AACjD,QAAI,CAAC,QAAQ;AACZ,mBAAa,IAAI,4BAA4B,UAAU,QAAQ,MAAM,aAAa;AAClF;AAAA,IACD;AAEA,YAAQ,QAAQ,MAAA;AAAA,MACf,KAAK;AACJ,aAAK,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD,KAAK;AACJ,aAAK,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD;AACCC,oBAAAA,YAAmB;AAAA,IAAA;AAAA,EAEtB;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,SAAK,kBAAkB,QAAQ,OAAO,QAAQ,aAAa,IAAI,OAAO,CAAC;AACvE,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAEA,QAAI,MAAM,QAAQ,QAAQ,MAAM,GAAG;AAClC,iBAAW,SAAS,QAAQ,QAAQ;AACnC,YAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,uBAAa,IAAI,QAAQ,EAAE,IAAI,2BAA2B,SAAS,KAAK,cAAc,OAAO,IAAI,aAAa;AAAA,QAC/G;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBACP,eACA,QACA,cACO;AACP,eAAW,QAAQ,eAAe;AACjC,YAAM,CAAC,OAAO,MAAM,SAAS,IAAI,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAA,GAAI,CAAA,CAAE;AAC3E,YAAM,oBAAoB,aAAa,IAAI,KAAK;AAChD,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,0BAAkB,IAAI,2BAA2B,mBAAmB,KAAK,cAAc,OAAO,IAAI,EAAE;AACpG;AAAA,MACD;AACAC,iBAAAA,mBAAmB,KAAK,OAAO,QAAQ,OAAO;AAAA,QAC7C,aAAa,MAAM;AAClB,cAAI,UAAU,QAAQ;AACrB,8BAAkB,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,cAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AACnC,8BAAkB,IAAI,6BAA6B,8BAA8B;AAAA,UAClF;AAAA,QACD;AAAA,QACA,cAAc,CAAC,EAAE,mBAAmB;AACnC,cAAI,UAAU,WAAW,GAAG;AAC3B,8BAAkB,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,eAAK,kBAAkB,WAAW,cAAc,iBAAiB;AACjE,cAAI;AACH,2BAAe,EAAE,QAAQ,KAAK,OAAO,QAAQ,aAAA,CAAc,EAAE,IAAI;AAAA,UAClE,SAAS,GAAQ;AAChB,8BAAkB,IAAI,6BAA6B,mCAAmC,EAAE,OAAO;AAAA,UAChG;AAAA,QACD;AAAA,QACA,aAAa,CAAC,EAAE,mBAAmB;AAClC,cAAI,UAAU,WAAW,GAAG;AAC3B,8BAAkB,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,eAAK,kBAAkB,WAAW,cAAc,iBAAiB;AAAA,QAClE;AAAA,MAAA,CACA;AAAA,IACF;AAAA,EACD;AACD;;"}

package/dist/production/src/validation/ActionsValidator.js

@@ -0,0 +1,110 @@
+import { acceptFieldVisitor } from "../model/modelUtils.js";
+import "@contember/schema";
+import { assertNever } from "../utils/assertNever.js";
+import { ErrorBuilder } from "./errors.js";
+import * as Typesafe from "@contember/typesafe";
+import { whereSchema } from "../type-schema/where.js";
+const manyArgsSchema = (args) => Typesafe.partial({
+  limit: Typesafe.integer,
+  offset: Typesafe.integer,
+  orderBy: Typesafe.array(Typesafe.anyJsonObject),
+  filter: whereSchema(args)
+});
+class ActionsValidator {
+  constructor(model) {
+    this.model = model;
+  }
+  validate(schema) {
+    const errorBuilder = new ErrorBuilder([], ["actions"]);
+    this.validateTriggers(schema, errorBuilder.for("triggers"));
+    return errorBuilder.errors;
+  }
+  validateTriggers(schema, errorBuilder) {
+    for (const [name, def] of Object.entries(schema.triggers)) {
+      const triggerErrorBuilder = errorBuilder.for(name);
+      if (name !== def.name) {
+        triggerErrorBuilder.add("ACTIONS_NAME_MISMATCH", `Trigger name ${def.name} does not match the name in a map ${name}`);
+      }
+      if (!schema.targets[def.target]) {
+        triggerErrorBuilder.add("ACTIONS_UNDEFINED_TRIGGER_TARGET", `Trigger target ${def.target} not found`);
+      }
+      this.validateTrigger(def, triggerErrorBuilder);
+    }
+  }
+  validateTrigger(trigger, errorBuilder) {
+    const entity = this.model.entities[trigger.entity];
+    if (!entity) {
+      errorBuilder.add("ACTIONS_UNDEFINED_ENTITY", `Entity ${trigger.entity} not found.`);
+      return;
+    }
+    switch (trigger.type) {
+      case "watch":
+        this.validateWatchTrigger(trigger, entity, errorBuilder);
+        break;
+      case "basic":
+        this.validateBasicTrigger(trigger, entity, errorBuilder);
+        break;
+      default:
+        assertNever();
+    }
+  }
+  validateWatchTrigger(trigger, entity, errorBuilder) {
+    this.validateSelection(trigger.watch, entity, errorBuilder.for("watch"));
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+  }
+  validateBasicTrigger(trigger, entity, errorBuilder) {
+    if (trigger.selection) {
+      this.validateSelection(trigger.selection, entity, errorBuilder.for("selection"));
+    }
+    if (Array.isArray(trigger.update)) {
+      for (const field of trigger.update) {
+        if (!entity.fields[field]) {
+          errorBuilder.for("update").add("ACTIONS_UNDEFINED_FIELD", `Field ${field} of entity ${entity.name} not found.`);
+        }
+      }
+    }
+  }
+  validateSelection(selectionNode, entity, errorBuilder) {
+    for (const part of selectionNode) {
+      const [field, args, selection] = Array.isArray(part) ? part : [part, {}, []];
+      const fieldErrorBuilder = errorBuilder.for(field);
+      if (!entity.fields[field]) {
+        fieldErrorBuilder.add("ACTIONS_UNDEFINED_FIELD", `Undefined field ${field} on entity ${entity.name}`);
+        continue;
+      }
+      acceptFieldVisitor(this.model, entity, field, {
+        visitColumn: () => {
+          if (selection.length) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected sub selection on a column.`);
+          }
+          if (Object.keys(args).length !== 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Unexpected args on a column.`);
+          }
+        },
+        visitHasMany: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+          try {
+            manyArgsSchema({ schema: this.model, entity: targetEntity })(args);
+          } catch (e) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Selection args are not valid: ` + e.message);
+          }
+        },
+        visitHasOne: ({ targetEntity }) => {
+          if (selection.length === 0) {
+            fieldErrorBuilder.add("ACTIONS_INVALID_SELECTION", `Sub-selection expected on a relation.`);
+          }
+          this.validateSelection(selection, targetEntity, fieldErrorBuilder);
+        }
+      });
+    }
+  }
+}
+export {
+  ActionsValidator
+};
+//# sourceMappingURL=ActionsValidator.js.map

package/dist/production/src/validation/ActionsValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActionsValidator.js","sources":["../../../../../packages/schema-utils/src/validation/ActionsValidator.ts"],"sourcesContent":["import { Actions, Model } from '@contember/schema'\nimport { acceptFieldVisitor } from '../model'\nimport { ErrorBuilder, ValidationError } from './errors'\nimport { assertNever } from '../utils'\nimport * as Typesafe from '@contember/typesafe'\nimport { whereSchema } from '../type-schema/where'\n\nconst manyArgsSchema = (args: { schema: Model.Schema; entity: Model.Entity }) =>\n\tTypesafe.partial({\n\t\tlimit: Typesafe.integer,\n\t\toffset: Typesafe.integer,\n\t\torderBy: Typesafe.array(Typesafe.anyJsonObject),\n\t\tfilter: whereSchema(args),\n\t})\n\nexport class ActionsValidator {\n\tconstructor(private readonly model: Model.Schema) {}\n\n\tpublic validate(schema: Actions.Schema): ValidationError[] {\n\t\tconst errorBuilder = new ErrorBuilder([], ['actions'])\n\t\tthis.validateTriggers(schema, errorBuilder.for('triggers'))\n\t\treturn errorBuilder.errors\n\t}\n\n\tprivate validateTriggers(schema: Actions.Schema, errorBuilder: ErrorBuilder) {\n\t\tfor (const [name, def] of Object.entries(schema.triggers)) {\n\t\t\tconst triggerErrorBuilder = errorBuilder.for(name)\n\t\t\tif (name !== def.name) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_NAME_MISMATCH', `Trigger name ${def.name} does not match the name in a map ${name}`)\n\t\t\t}\n\t\t\tif (!schema.targets[def.target]) {\n\t\t\t\ttriggerErrorBuilder.add('ACTIONS_UNDEFINED_TRIGGER_TARGET', `Trigger target ${def.target} not found`)\n\t\t\t}\n\t\t\tthis.validateTrigger(def, triggerErrorBuilder)\n\t\t}\n\t}\n\n\tprivate validateTrigger(trigger: Actions.AnyTrigger, errorBuilder: ErrorBuilder): void {\n\t\tconst entity = this.model.entities[trigger.entity]\n\t\tif (!entity) {\n\t\t\terrorBuilder.add('ACTIONS_UNDEFINED_ENTITY', `Entity ${trigger.entity} not found.`)\n\t\t\treturn\n\t\t}\n\n\t\tswitch (trigger.type) {\n\t\t\tcase 'watch':\n\t\t\t\tthis.validateWatchTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tcase 'basic':\n\t\t\t\tthis.validateBasicTrigger(trigger, entity, errorBuilder)\n\t\t\t\tbreak\n\t\t\tdefault:\n\t\t\t\tassertNever(trigger)\n\t\t}\n\t}\n\n\tprivate validateWatchTrigger(trigger: Actions.WatchTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tthis.validateSelection(trigger.watch, entity, errorBuilder.for('watch'))\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\t}\n\n\tprivate validateBasicTrigger(trigger: Actions.BasicTrigger, entity: Model.Entity, errorBuilder: ErrorBuilder): void {\n\t\tif (trigger.selection) {\n\t\t\tthis.validateSelection(trigger.selection, entity, errorBuilder.for('selection'))\n\t\t}\n\n\t\tif (Array.isArray(trigger.update)) {\n\t\t\tfor (const field of trigger.update) {\n\t\t\t\tif (!entity.fields[field]) {\n\t\t\t\t\terrorBuilder.for('update').add('ACTIONS_UNDEFINED_FIELD', `Field ${field} of entity ${entity.name} not found.`)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate validateSelection(\n\t\tselectionNode: Actions.SelectionNode,\n\t\tentity: Model.Entity,\n\t\terrorBuilder: ErrorBuilder,\n\t): void {\n\t\tfor (const part of selectionNode) {\n\t\t\tconst [field, args, selection] = Array.isArray(part) ? part : [part, {}, []]\n\t\t\tconst fieldErrorBuilder = errorBuilder.for(field)\n\t\t\tif (!entity.fields[field]) {\n\t\t\t\tfieldErrorBuilder.add('ACTIONS_UNDEFINED_FIELD', `Undefined field ${field} on entity ${entity.name}`)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tacceptFieldVisitor(this.model, entity, field, {\n\t\t\t\tvisitColumn: () => {\n\t\t\t\t\tif (selection.length) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected sub selection on a column.`)\n\t\t\t\t\t}\n\t\t\t\t\tif (Object.keys(args).length !== 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Unexpected args on a column.`)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasMany: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t\ttry {\n\t\t\t\t\t\tmanyArgsSchema({ schema: this.model, entity: targetEntity })(args)\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Selection args are not valid: ` + e.message)\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tvisitHasOne: ({ targetEntity }) => {\n\t\t\t\t\tif (selection.length === 0) {\n\t\t\t\t\t\tfieldErrorBuilder.add('ACTIONS_INVALID_SELECTION', `Sub-selection expected on a relation.`)\n\t\t\t\t\t}\n\t\t\t\t\tthis.validateSelection(selection, targetEntity, fieldErrorBuilder)\n\t\t\t\t},\n\t\t\t})\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;AAOA,MAAM,iBAAiB,CAAC,SACvB,SAAS,QAAQ;AAAA,EAChB,OAAO,SAAS;AAAA,EAChB,QAAQ,SAAS;AAAA,EACjB,SAAS,SAAS,MAAM,SAAS,aAAa;AAAA,EAC9C,QAAQ,YAAY,IAAI;AACzB,CAAC;AAEK,MAAM,iBAAiB;AAAA,EAC7B,YAA6B,OAAqB;AAArB,SAAA,QAAA;AAAA,EAAsB;AAAA,EAE5C,SAAS,QAA2C;AAC1D,UAAM,eAAe,IAAI,aAAa,CAAA,GAAI,CAAC,SAAS,CAAC;AACrD,SAAK,iBAAiB,QAAQ,aAAa,IAAI,UAAU,CAAC;AAC1D,WAAO,aAAa;AAAA,EACrB;AAAA,EAEQ,iBAAiB,QAAwB,cAA4B;AAC5E,eAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,QAAQ,GAAG;AAC1D,YAAM,sBAAsB,aAAa,IAAI,IAAI;AACjD,UAAI,SAAS,IAAI,MAAM;AACtB,4BAAoB,IAAI,yBAAyB,gBAAgB,IAAI,IAAI,qCAAqC,IAAI,EAAE;AAAA,MACrH;AACA,UAAI,CAAC,OAAO,QAAQ,IAAI,MAAM,GAAG;AAChC,4BAAoB,IAAI,oCAAoC,kBAAkB,IAAI,MAAM,YAAY;AAAA,MACrG;AACA,WAAK,gBAAgB,KAAK,mBAAmB;AAAA,IAC9C;AAAA,EACD;AAAA,EAEQ,gBAAgB,SAA6B,cAAkC;AACtF,UAAM,SAAS,KAAK,MAAM,SAAS,QAAQ,MAAM;AACjD,QAAI,CAAC,QAAQ;AACZ,mBAAa,IAAI,4BAA4B,UAAU,QAAQ,MAAM,aAAa;AAClF;AAAA,IACD;AAEA,YAAQ,QAAQ,MAAA;AAAA,MACf,KAAK;AACJ,aAAK,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD,KAAK;AACJ,aAAK,qBAAqB,SAAS,QAAQ,YAAY;AACvD;AAAA,MACD;AACC,oBAAmB;AAAA,IAAA;AAAA,EAEtB;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,SAAK,kBAAkB,QAAQ,OAAO,QAAQ,aAAa,IAAI,OAAO,CAAC;AACvE,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAAA,EACD;AAAA,EAEQ,qBAAqB,SAA+B,QAAsB,cAAkC;AACnH,QAAI,QAAQ,WAAW;AACtB,WAAK,kBAAkB,QAAQ,WAAW,QAAQ,aAAa,IAAI,WAAW,CAAC;AAAA,IAChF;AAEA,QAAI,MAAM,QAAQ,QAAQ,MAAM,GAAG;AAClC,iBAAW,SAAS,QAAQ,QAAQ;AACnC,YAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,uBAAa,IAAI,QAAQ,EAAE,IAAI,2BAA2B,SAAS,KAAK,cAAc,OAAO,IAAI,aAAa;AAAA,QAC/G;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,kBACP,eACA,QACA,cACO;AACP,eAAW,QAAQ,eAAe;AACjC,YAAM,CAAC,OAAO,MAAM,SAAS,IAAI,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAA,GAAI,CAAA,CAAE;AAC3E,YAAM,oBAAoB,aAAa,IAAI,KAAK;AAChD,UAAI,CAAC,OAAO,OAAO,KAAK,GAAG;AAC1B,0BAAkB,IAAI,2BAA2B,mBAAmB,KAAK,cAAc,OAAO,IAAI,EAAE;AACpG;AAAA,MACD;AACA,yBAAmB,KAAK,OAAO,QAAQ,OAAO;AAAA,QAC7C,aAAa,MAAM;AAClB,cAAI,UAAU,QAAQ;AACrB,8BAAkB,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,cAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AACnC,8BAAkB,IAAI,6BAA6B,8BAA8B;AAAA,UAClF;AAAA,QACD;AAAA,QACA,cAAc,CAAC,EAAE,mBAAmB;AACnC,cAAI,UAAU,WAAW,GAAG;AAC3B,8BAAkB,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,eAAK,kBAAkB,WAAW,cAAc,iBAAiB;AACjE,cAAI;AACH,2BAAe,EAAE,QAAQ,KAAK,OAAO,QAAQ,aAAA,CAAc,EAAE,IAAI;AAAA,UAClE,SAAS,GAAQ;AAChB,8BAAkB,IAAI,6BAA6B,mCAAmC,EAAE,OAAO;AAAA,UAChG;AAAA,QACD;AAAA,QACA,aAAa,CAAC,EAAE,mBAAmB;AAClC,cAAI,UAAU,WAAW,GAAG;AAC3B,8BAAkB,IAAI,6BAA6B,uCAAuC;AAAA,UAC3F;AACA,eAAK,kBAAkB,WAAW,cAAc,iBAAiB;AAAA,QAClE;AAAA,MAAA,CACA;AAAA,IACF;AAAA,EACD;AACD;"}

package/dist/production/src/validation/MembershipResolver.cjs

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const schema = require("@contember/schema");
+const assertNever = require("../utils/assertNever.cjs");
+const schemaUtils = require("../acl/schemaUtils.cjs");
+require("../type-schema/acl.cjs");
+const condition = require("../type-schema/condition.cjs");
+require("../type-schema/model.cjs");
+require("../type-schema/settings.cjs");
+require("../type-schema/validation.cjs");
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
+class MembershipResolver {
+  resolve(acl, memberships, identity, isAssumed) {
+    const errors = [];
+    const parsed = [];
+    const roles = acl.roles;
+    for (const membership of memberships) {
+      if (!roles[membership.role]) {
+        errors.push(new MembershipValidationError(
+          membership.role,
+          "roleNotFound"
+          /* ROLE_NOT_FOUND */
+        ));
+        continue;
+      }
+      const roleVariables = schemaUtils.getRoleVariables(membership.role, acl);
+      for (const variable of membership.variables) {
+        if (!roleVariables[variable.name] || !isAssumed && roleVariables[variable.name].type === schema.Acl.VariableType.predefined) {
+          errors.push(
+            new MembershipValidationError(
+              membership.role,
+              "variableNotFound",
+              variable.name
+            )
+          );
+        }
+      }
+      const [membershipErrors, parsedVariables] = this.readMembershipVariables(roleVariables, membership, identity, isAssumed);
+      errors.push(...membershipErrors);
+      parsed.push({
+        role: membership.role,
+        variables: parsedVariables
+      });
+    }
+    return new MembershipReadResult(errors, parsed);
+  }
+  readMembershipVariables(roleVariables, membership, identity, isAssumed) {
+    const errors = [];
+    const parsedVariables = [];
+    for (const [name, variable] of Object.entries(roleVariables)) {
+      const inputVariable = membership.variables.find((it) => it.name === name);
+      if (variable.type === schema.Acl.VariableType.predefined) {
+        switch (variable.value) {
+          case "identityID":
+            parsedVariables.push({
+              name,
+              condition: { in: isAssumed && inputVariable ? inputVariable.values : [identity.identityId] }
+            });
+            break;
+          case "personID":
+            parsedVariables.push({
+              name,
+              condition: { in: isAssumed && inputVariable ? inputVariable.values : identity.personId ? [identity.personId] : [] }
+            });
+            break;
+          default:
+            parsedVariables.push({ name, condition: { never: true } });
+            errors.push(new MembershipValidationError(membership.role, "variableInvalid", name));
+            break;
+        }
+        continue;
+      }
+      if (!inputVariable) {
+        if (variable.fallback) {
+          parsedVariables.push({ name, condition: variable.fallback });
+        } else {
+          errors.push(new MembershipValidationError(membership.role, "variableEmpty", name));
+          parsedVariables.push({ name, condition: { never: true } });
+        }
+        continue;
+      }
+      if (variable.type === schema.Acl.VariableType.entity) {
+        parsedVariables.push({ name, condition: { in: inputVariable.values } });
+      } else if (variable.type === schema.Acl.VariableType.condition) {
+        try {
+          const conditions = inputVariable.values.map((it) => condition.conditionSchema()(JSON.parse(it)));
+          parsedVariables.push({
+            name,
+            condition: conditions.length === 1 ? conditions[0] : { or: conditions }
+          });
+        } catch {
+          errors.push(new MembershipValidationError(membership.role, "variableInvalid", name));
+          parsedVariables.push({ name, condition: { never: true } });
+        }
+      } else {
+        assertNever.assertNever();
+      }
+    }
+    return [errors, parsedVariables];
+  }
+}
+__publicField(MembershipResolver, "UnknownIdentity", { identityId: "00000000-0000-0000-0000-000000000000" });
+class MembershipReadResult {
+  constructor(errors, memberships) {
+    this.errors = errors;
+    this.memberships = memberships;
+  }
+}
+class MembershipValidationError {
+  constructor(role, error, variable) {
+    this.role = role;
+    this.error = error;
+    this.variable = variable;
+  }
+}
+var MembershipValidationErrorType = /* @__PURE__ */ ((MembershipValidationErrorType2) => {
+  MembershipValidationErrorType2["ROLE_NOT_FOUND"] = "roleNotFound";
+  MembershipValidationErrorType2["VARIABLE_NOT_FOUND"] = "variableNotFound";
+  MembershipValidationErrorType2["VARIABLE_EMPTY"] = "variableEmpty";
+  MembershipValidationErrorType2["VARIABLE_INVALID"] = "variableInvalid";
+  return MembershipValidationErrorType2;
+})(MembershipValidationErrorType || {});
+exports.MembershipReadResult = MembershipReadResult;
+exports.MembershipResolver = MembershipResolver;
+exports.MembershipValidationError = MembershipValidationError;
+exports.MembershipValidationErrorType = MembershipValidationErrorType;
+//# sourceMappingURL=MembershipResolver.cjs.map

package/dist/production/src/validation/MembershipResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MembershipResolver.cjs","sources":["../../../../../packages/schema-utils/src/validation/MembershipResolver.ts"],"sourcesContent":["import { Acl, Input } from '@contember/schema'\nimport { getRoleVariables } from '../acl'\nimport { conditionSchema } from '../type-schema'\nimport { assertNever } from '../utils'\n\nexport class MembershipResolver {\n\tpublic static UnknownIdentity = { identityId: '00000000-0000-0000-0000-000000000000' }\n\n\tresolve(\n\t\tacl: Acl.Schema,\n\t\tmemberships: readonly Acl.Membership[],\n\t\tidentity: {\n\t\t\tidentityId: string\n\t\t\tpersonId?: string\n\t\t},\n\t\tisAssumed: boolean,\n\t): MembershipReadResult {\n\t\tconst errors: MembershipValidationError[] = []\n\t\tconst parsed: ParsedMembership[] = []\n\t\tconst roles = acl.roles\n\t\tfor (const membership of memberships) {\n\t\t\tif (!roles[membership.role]) {\n\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.ROLE_NOT_FOUND))\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst roleVariables = getRoleVariables(membership.role, acl)\n\t\t\tfor (const variable of membership.variables) {\n\t\t\t\tif (!roleVariables[variable.name] || (!isAssumed && roleVariables[variable.name].type === Acl.VariableType.predefined)) {\n\t\t\t\t\terrors.push(\n\t\t\t\t\t\tnew MembershipValidationError(\n\t\t\t\t\t\t\tmembership.role,\n\t\t\t\t\t\t\tMembershipValidationErrorType.VARIABLE_NOT_FOUND,\n\t\t\t\t\t\t\tvariable.name,\n\t\t\t\t\t\t),\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst [membershipErrors, parsedVariables] = this.readMembershipVariables(roleVariables, membership, identity, isAssumed)\n\t\t\terrors.push(...membershipErrors)\n\t\t\tparsed.push({\n\t\t\t\trole: membership.role,\n\t\t\t\tvariables: parsedVariables,\n\t\t\t})\n\t\t}\n\t\treturn new MembershipReadResult(errors, parsed)\n\t}\n\n\tprivate readMembershipVariables(roleVariables: Acl.Variables, membership: Acl.Membership, identity: {\n\t\tidentityId: string\n\t\tpersonId?: string\n\t}, isAssumed: boolean): [MembershipValidationError[], ParsedMembershipVariable[]] {\n\t\tconst errors: MembershipValidationError[] = []\n\t\tconst parsedVariables: ParsedMembershipVariable[] = []\n\t\tfor (const [name, variable] of Object.entries(roleVariables)) {\n\t\t\tconst inputVariable = membership.variables.find(it => it.name === name)\n\t\t\tif (variable.type === Acl.VariableType.predefined) {\n\t\t\t\tswitch (variable.value) {\n\t\t\t\t\tcase 'identityID':\n\t\t\t\t\t\tparsedVariables.push({\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tcondition: { in: isAssumed && inputVariable ? inputVariable.values : [identity.identityId] },\n\t\t\t\t\t\t})\n\t\t\t\t\t\tbreak\n\t\t\t\t\tcase 'personID':\n\t\t\t\t\t\tparsedVariables.push({\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tcondition: { in: isAssumed && inputVariable ? inputVariable.values : identity.personId ? [identity.personId] : [] },\n\t\t\t\t\t\t})\n\t\t\t\t\t\tbreak\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_INVALID, name))\n\t\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcontinue\n\t\t\t}\n\n\t\t\tif (!inputVariable) {\n\t\t\t\tif (variable.fallback) {\n\t\t\t\t\tparsedVariables.push({ name, condition: variable.fallback })\n\t\t\t\t} else {\n\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_EMPTY, name))\n\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t}\n\t\t\t\tcontinue\n\t\t\t}\n\n\t\t\tif (variable.type === Acl.VariableType.entity) {\n\t\t\t\tparsedVariables.push({ name, condition: { in: inputVariable.values } }) // todo: cast to int where primary is int\n\t\t\t} else if (variable.type === Acl.VariableType.condition) {\n\t\t\t\ttry {\n\t\t\t\t\tconst conditions = inputVariable.values.map(it => conditionSchema()(JSON.parse(it)))\n\t\t\t\t\tparsedVariables.push({\n\t\t\t\t\t\tname,\n\t\t\t\t\t\tcondition: conditions.length === 1 ? conditions[0] : { or: conditions },\n\t\t\t\t\t})\n\t\t\t\t} catch {\n\t\t\t\t\terrors.push(new MembershipValidationError(membership.role, MembershipValidationErrorType.VARIABLE_INVALID, name))\n\t\t\t\t\tparsedVariables.push({ name, condition: { never: true } })\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tassertNever(variable)\n\t\t\t}\n\t\t}\n\t\treturn [errors, parsedVariables]\n\t}\n}\n\nexport class MembershipReadResult {\n\tconstructor(\n\t\tpublic readonly errors: MembershipValidationError[],\n\t\tpublic readonly memberships: ParsedMembership[],\n\t) {\n\t}\n}\n\nexport class MembershipValidationError {\n\tconstructor(\n\t\tpublic readonly role: string,\n\t\tpublic readonly error: MembershipValidationErrorType,\n\t\tpublic readonly variable?: string,\n\t) {\n\t}\n}\n\nexport enum MembershipValidationErrorType {\n\tROLE_NOT_FOUND = 'roleNotFound',\n\tVARIABLE_NOT_FOUND = 'variableNotFound',\n\tVARIABLE_EMPTY = 'variableEmpty',\n\tVARIABLE_INVALID = 'variableInvalid',\n}\n\nexport interface ParsedMembershipVariable {\n\treadonly name: string\n\treadonly condition: Input.Condition\n}\n\nexport interface ParsedMembership {\n\treadonly role: string\n\treadonly variables: readonly ParsedMembershipVariable[]\n}\n"],"names":["getRoleVariables","Acl","conditionSchema","assertNever","MembershipValidationErrorType"],"mappings":";;;;;;;;;;;;;AAKO,MAAM,mBAAmB;AAAA,EAG/B,QACC,KACA,aACA,UAIA,WACuB;AACvB,UAAM,SAAsC,CAAA;AAC5C,UAAM,SAA6B,CAAA;AACnC,UAAM,QAAQ,IAAI;AAClB,eAAW,cAAc,aAAa;AACrC,UAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC5B,eAAO,KAAK,IAAI;AAAA,UAA0B,WAAW;AAAA,UAAM;AAAA;AAAA,SAA6C;AACxG;AAAA,MACD;AACA,YAAM,gBAAgBA,YAAAA,iBAAiB,WAAW,MAAM,GAAG;AAC3D,iBAAW,YAAY,WAAW,WAAW;AAC5C,YAAI,CAAC,cAAc,SAAS,IAAI,KAAM,CAAC,aAAa,cAAc,SAAS,IAAI,EAAE,SAASC,OAAAA,IAAI,aAAa,YAAa;AACvH,iBAAO;AAAA,YACN,IAAI;AAAA,cACH,WAAW;AAAA,cACX;AAAA,cACA,SAAS;AAAA,YAAA;AAAA,UACV;AAAA,QAEF;AAAA,MACD;AACA,YAAM,CAAC,kBAAkB,eAAe,IAAI,KAAK,wBAAwB,eAAe,YAAY,UAAU,SAAS;AACvH,aAAO,KAAK,GAAG,gBAAgB;AAC/B,aAAO,KAAK;AAAA,QACX,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,MAAA,CACX;AAAA,IACF;AACA,WAAO,IAAI,qBAAqB,QAAQ,MAAM;AAAA,EAC/C;AAAA,EAEQ,wBAAwB,eAA8B,YAA4B,UAGvF,WAA+E;AACjF,UAAM,SAAsC,CAAA;AAC5C,UAAM,kBAA8C,CAAA;AACpD,eAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,aAAa,GAAG;AAC7D,YAAM,gBAAgB,WAAW,UAAU,KAAK,CAAA,OAAM,GAAG,SAAS,IAAI;AACtE,UAAI,SAAS,SAASA,WAAI,aAAa,YAAY;AAClD,gBAAQ,SAAS,OAAA;AAAA,UAChB,KAAK;AACJ,4BAAgB,KAAK;AAAA,cACpB;AAAA,cACA,WAAW,EAAE,IAAI,aAAa,gBAAgB,cAAc,SAAS,CAAC,SAAS,UAAU,EAAA;AAAA,YAAE,CAC3F;AACD;AAAA,UACD,KAAK;AACJ,4BAAgB,KAAK;AAAA,cACpB;AAAA,cACA,WAAW,EAAE,IAAI,aAAa,gBAAgB,cAAc,SAAS,SAAS,WAAW,CAAC,SAAS,QAAQ,IAAI,CAAA,EAAC;AAAA,YAAE,CAClH;AACD;AAAA,UACD;AACC,4BAAgB,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,KAAA,GAAQ;AACzD,mBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,mBAAgD,IAAI,CAAC;AAChH;AAAA,QAAA;AAEF;AAAA,MACD;AAEA,UAAI,CAAC,eAAe;AACnB,YAAI,SAAS,UAAU;AACtB,0BAAgB,KAAK,EAAE,MAAM,WAAW,SAAS,UAAU;AAAA,QAC5D,OAAO;AACN,iBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,iBAA8C,IAAI,CAAC;AAC9G,0BAAgB,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,KAAA,GAAQ;AAAA,QAC1D;AACA;AAAA,MACD;AAEA,UAAI,SAAS,SAASA,WAAI,aAAa,QAAQ;AAC9C,wBAAgB,KAAK,EAAE,MAAM,WAAW,EAAE,IAAI,cAAc,OAAA,GAAU;AAAA,MACvE,WAAW,SAAS,SAASA,OAAAA,IAAI,aAAa,WAAW;AACxD,YAAI;AACH,gBAAM,aAAa,cAAc,OAAO,IAAI,CAAA,OAAMC,UAAAA,gBAAA,EAAkB,KAAK,MAAM,EAAE,CAAC,CAAC;AACnF,0BAAgB,KAAK;AAAA,YACpB;AAAA,YACA,WAAW,WAAW,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,WAAA;AAAA,UAAW,CACtE;AAAA,QACF,QAAQ;AACP,iBAAO,KAAK,IAAI,0BAA0B,WAAW,MAAM,mBAAgD,IAAI,CAAC;AAChH,0BAAgB,KAAK,EAAE,MAAM,WAAW,EAAE,OAAO,KAAA,GAAQ;AAAA,QAC1D;AAAA,MACD,OAAO;AACNC,oBAAAA,YAAoB;AAAA,MACrB;AAAA,IACD;AACA,WAAO,CAAC,QAAQ,eAAe;AAAA,EAChC;AACD;AApGC,cADY,oBACE,mBAAkB,EAAE,YAAY,uCAAA,CAAuC;AAsG/E,MAAM,qBAAqB;AAAA,EACjC,YACiB,QACA,aACf;AAFe,SAAA,SAAA;AACA,SAAA,cAAA;AAAA,EAEjB;AACD;AAEO,MAAM,0BAA0B;AAAA,EACtC,YACiB,MACA,OACA,UACf;AAHe,SAAA,OAAA;AACA,SAAA,QAAA;AACA,SAAA,WAAA;AAAA,EAEjB;AACD;AAEO,IAAK,kDAAAC,mCAAL;AACNA,iCAAA,gBAAA,IAAiB;AACjBA,iCAAA,oBAAA,IAAqB;AACrBA,iCAAA,gBAAA,IAAiB;AACjBA,iCAAA,kBAAA,IAAmB;AAJR,SAAAA;AAAA,GAAA,iCAAA,CAAA,CAAA;;;;;"}