@corgelabs/corge 0.0.1 → 1.0.1

package/dist/db/service.js

@@ -0,0 +1,372 @@
+import { Agent } from 'node:https';
+import { getApp, getApps, initializeApp } from 'firebase-admin/app';
+import { FieldValue, getFirestore } from 'firebase-admin/firestore';
+import { getStorage } from 'firebase-admin/storage';
+import { CORE_CONFIG } from '../config';
+import { Core } from '../index';
+import { collectionRegistry, getCollectionDef } from './schema';
+import { attachNextCursor, buildScopedCollectionQuery, drainQueryBatchDelete, executeFilteredListQuery, fromFirestoreDoc, isCreateOwnScopeAllowed, resolveAllowedScope, resolveJunction, runChunked, stripImmutableUpdateFields, wireCoreCollectionHooks } from './utils';
+const dbs = [undefined, undefined];
+const buckets = [undefined, undefined];
+let cachedToken = '';
+let cachedTokenExp = 0;
+export class DbService {
+    #core;
+    constructor(coreClient) {
+        this.#core = coreClient;
+        wireCoreCollectionHooks();
+    }
+    #ensureFirebaseApp = () => {
+        if (!getApps().length) {
+            initializeApp({
+                projectId: CORE_CONFIG.gcpProject,
+                storageBucket: CORE_CONFIG.storageBuckets.prod,
+                serviceAccountId: CORE_CONFIG.serviceAccount,
+                httpAgent: new Agent({ keepAlive: true })
+            });
+        }
+    };
+    firestore = (isDev = this.#core.env.isDev) => {
+        this.#ensureFirebaseApp();
+        const idx = isDev ? 1 : 0;
+        if (!dbs[idx]) {
+            const db = getFirestore(isDev ? CORE_CONFIG.firestoreDbs.dev : CORE_CONFIG.firestoreDbs.prod);
+            try {
+                db.settings({ ignoreUndefinedProperties: true });
+            }
+            catch { }
+            dbs[idx] = db;
+        }
+        return dbs[idx];
+    };
+    bucket = (isDev = this.#core.env.isDev) => {
+        this.#ensureFirebaseApp();
+        const idx = isDev ? 1 : 0;
+        if (!buckets[idx]) {
+            buckets[idx] = getStorage().bucket(isDev ? CORE_CONFIG.storageBuckets.dev : CORE_CONFIG.storageBuckets.prod);
+        }
+        return buckets[idx];
+    };
+    #getGcpAccessToken = async () => {
+        this.#ensureFirebaseApp();
+        if (cachedToken && cachedTokenExp > Date.now() + 60_000)
+            return cachedToken;
+        return this.#core.internals.resilience.singleflight('gcp:token', async () => {
+            const token = await getApp().options.credential?.getAccessToken();
+            if (!token?.access_token)
+                throw new Error('Unable to acquire GCP ADC access token');
+            cachedToken = token.access_token;
+            cachedTokenExp = Date.now() + (token.expires_in ? token.expires_in * 1000 : 3_000_000);
+            return cachedToken;
+        }, { scope: 'global' });
+    };
+    #effectiveCtx = (ctx) => ({
+        userId: this.#core.userId,
+        userRole: this.#core.role,
+        ...ctx
+    });
+    #resolveRole = (ctx) => this.#core.internals.auth.resolveUserRole(ctx?.userId, ctx?.userRole);
+    #isEntryOwner = async (collection, doc, userId) => {
+        if (!userId)
+            return false;
+        if (userId === this.#core.config.auth.adminUserId)
+            return true;
+        const def = getCollectionDef(collection);
+        const rel = def.userRelation?.type ?? '1:N';
+        if (rel === 'global')
+            return false;
+        if (rel === '1:1')
+            return doc[def.userRelation?.userField ?? 'id'] === userId;
+        if (rel === '1:N')
+            return doc[def.userRelation?.userField ?? 'userId'] === userId;
+        if (rel === 'M:N' && def.userRelation?.junction) {
+            const { collection: jCol, userField, targetField } = resolveJunction(collection, def.userRelation.junction);
+            const jSnap = await this.firestore()
+                .collection(jCol)
+                .where(userField, '==', userId)
+                .where(targetField, '==', doc.id)
+                .limit(1)
+                .get();
+            return !jSnap.empty;
+        }
+        const arr = doc[def.userRelation?.userIdsField ?? 'userIds'];
+        return Array.isArray(arr) && arr.includes(userId);
+    };
+    #fetchRawEntry = async (collection, id) => {
+        if (!id)
+            return undefined;
+        await this.#core.internals.resilience.acquireLimit('firestore');
+        const snap = await this.firestore().collection(collection).doc(id).get();
+        if (!snap.exists)
+            return undefined;
+        const doc = fromFirestoreDoc(collection, snap.id, snap.data() ?? {});
+        return doc.deleted ? undefined : doc;
+    };
+    canAccess = async (collection, docOrId, userId = this.#core.userId, action = 'read', userRole) => {
+        const role = this.#resolveRole({
+            userId,
+            userRole: userRole ?? (userId === this.#core.userId ? this.#core.role : undefined)
+        });
+        const scope = resolveAllowedScope(collection, role, action);
+        if (scope === 'none')
+            return false;
+        if (scope === 'any') {
+            if (!docOrId)
+                return true;
+            return typeof docOrId === 'string' ? Boolean(await this.#fetchRawEntry(collection, docOrId)) : true;
+        }
+        if (!userId)
+            return false;
+        const doc = typeof docOrId === 'string'
+            ? await this.#fetchRawEntry(collection, docOrId)
+            : docOrId;
+        return doc ? this.#isEntryOwner(collection, doc, userId) : false;
+    };
+    create = async (collection, data, ctx) => {
+        const effective = this.#effectiveCtx(ctx);
+        if (!effective.bypassRbac) {
+            const role = this.#resolveRole(effective);
+            const scope = resolveAllowedScope(collection, role, 'create');
+            if (scope === 'none')
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            if (scope === 'own' && !isCreateOwnScopeAllowed(collection, effective.userId, data)) {
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            }
+        }
+        await this.#core.internals.resilience.acquireLimit('firestore');
+        const def = getCollectionDef(collection);
+        const rel = def.userRelation?.type ?? '1:N';
+        const userField = def.userRelation?.userField ?? (rel === '1:1' ? 'id' : 'userId');
+        const col = this.firestore().collection(collection);
+        const explicitId = data.id ?? (rel === '1:1' && userField === 'id' ? data.userId : undefined);
+        const docRef = explicitId ? col.doc(String(explicitId)) : col.doc();
+        const now = new Date();
+        const fullDoc = def.schema.parse({ deleted: false, ...data, id: docRef.id, createdAt: now, updatedAt: now });
+        await docRef.set(fullDoc);
+        return fullDoc;
+    };
+    read = async (collection, id, includeDeleted = false, ctx) => {
+        if (!id)
+            return undefined;
+        await this.#core.internals.resilience.acquireLimit('firestore');
+        const snap = await this.firestore().collection(collection).doc(id).get();
+        if (!snap.exists)
+            return undefined;
+        const doc = fromFirestoreDoc(collection, snap.id, snap.data() ?? {});
+        if (!includeDeleted && doc.deleted)
+            return undefined;
+        const effective = this.#effectiveCtx(ctx);
+        if (!effective.bypassRbac) {
+            const role = this.#resolveRole(effective);
+            const scope = resolveAllowedScope(collection, role, 'read');
+            if (scope === 'none')
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            if (scope === 'own') {
+                if (!effective.userId || !(await this.#isEntryOwner(collection, doc, effective.userId))) {
+                    this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+                }
+            }
+        }
+        return doc;
+    };
+    #batchReadByIds = async (collection, ids, includeDeleted = false, hasSelect = false) => {
+        const uniqueIds = [...new Set(ids.filter(Boolean))];
+        if (!uniqueIds.length)
+            return [];
+        const byId = new Map();
+        const db = this.firestore();
+        for (let i = 0; i < uniqueIds.length; i += 100) {
+            await this.#core.internals.resilience.acquireLimit('firestore');
+            const snaps = await db.getAll(...uniqueIds.slice(i, i + 100).map((id) => db.collection(collection).doc(id)));
+            for (const s of snaps) {
+                if (!s.exists)
+                    continue;
+                const doc = fromFirestoreDoc(collection, s.id, s.data() ?? {}, hasSelect);
+                if (includeDeleted || !doc.deleted)
+                    byId.set(s.id, doc);
+            }
+        }
+        return ids.map((id) => byId.get(id)).filter((d) => Boolean(d));
+    };
+    list = async (collection, opts, ctx) => {
+        const effective = this.#effectiveCtx(ctx);
+        const bypass = Boolean(opts?.bypassRbac || effective.bypassRbac);
+        let scopedUserId = opts?.userId;
+        if (!bypass) {
+            const role = this.#resolveRole(effective);
+            const scope = resolveAllowedScope(collection, role, 'read');
+            if (scope === 'none')
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            if (scope === 'own') {
+                if (!effective.userId)
+                    this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+                if (scopedUserId && scopedUserId !== effective.userId)
+                    this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+                scopedUserId = effective.userId;
+            }
+        }
+        const def = getCollectionDef(collection);
+        const db = this.firestore();
+        const rel = def.userRelation?.type ?? '1:N';
+        const maxDocs = opts?.limit ?? this.#core.config.limits.defaultListLimit;
+        const hasSelect = Boolean(opts?.select?.length);
+        if (opts?.ids) {
+            const docs = await this.#batchReadByIds(collection, opts.ids, opts.includeDeleted, hasSelect);
+            if (!scopedUserId || rel === 'global')
+                return attachNextCursor(docs.slice(0, maxDocs), maxDocs);
+            const ownership = await Promise.all(docs.map((doc) => this.#isEntryOwner(collection, doc, scopedUserId)));
+            return attachNextCursor(docs.filter((_, i) => ownership[i]).slice(0, maxDocs), maxDocs);
+        }
+        await this.#core.internals.resilience.acquireLimit('firestore');
+        if (scopedUserId) {
+            if (rel === '1:1' && (def.userRelation?.userField ?? 'id') === 'id') {
+                const single = await this.read(collection, scopedUserId, opts?.includeDeleted, { bypassRbac: true });
+                return attachNextCursor(single ? [single] : [], maxDocs);
+            }
+            if (rel === 'M:N' && def.userRelation?.junction) {
+                const { collection: jCol, userField, targetField } = resolveJunction(collection, def.userRelation.junction);
+                const jSnap = await db.collection(jCol).where(userField, '==', scopedUserId).limit(maxDocs).get();
+                const targetIds = jSnap.docs.map((d) => String(d.data()[targetField] ?? '')).filter(Boolean);
+                const docs = await this.#batchReadByIds(collection, targetIds, opts?.includeDeleted, hasSelect);
+                return attachNextCursor(docs, maxDocs);
+            }
+        }
+        const baseQuery = buildScopedCollectionQuery(db.collection(collection), collection, scopedUserId, opts?.where, opts?.select);
+        const docs = await executeFilteredListQuery(db, collection, baseQuery, opts, maxDocs, hasSelect, this.#core.config.limits.defaultListLimit);
+        return attachNextCursor(docs.slice(0, maxDocs), maxDocs);
+    };
+    listPage = async (collection, opts, ctx) => {
+        const items = await this.list(collection, opts, ctx);
+        return { items, nextCursor: items.nextCursor ?? null };
+    };
+    update = async (collection, id, data, ctx) => {
+        const effective = this.#effectiveCtx(ctx);
+        if (!effective.bypassRbac) {
+            const allowed = await this.canAccess(collection, id, effective.userId ?? '', 'write', effective.userRole);
+            if (!allowed)
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+        }
+        const cleanPatch = stripImmutableUpdateFields(collection, data, Boolean(effective.bypassRbac));
+        await this.#core.internals.resilience.acquireLimit('firestore');
+        await this.firestore()
+            .collection(collection)
+            .doc(id)
+            .update({ ...cleanPatch, updatedAt: new Date() });
+        return { id, updated: true };
+    };
+    delete = async (collection, id, ctx) => {
+        const existing = await this.read(collection, id, false, { bypassRbac: true });
+        if (!existing)
+            throw new Error(`Not found: ${collection}/${id}`);
+        const effective = this.#effectiveCtx(ctx);
+        if (!effective.bypassRbac) {
+            const allowed = await this.canAccess(collection, existing, effective.userId ?? '', 'delete', effective.userRole);
+            if (!allowed)
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+        }
+        await this.update(collection, id, { deleted: true }, { bypassRbac: true });
+        return { id, deleted: true };
+    };
+    hardDelete = async (collection, id, ctx) => {
+        const def = getCollectionDef(collection);
+        const effective = this.#effectiveCtx(ctx);
+        const existing = def.onHardDelete || !effective.bypassRbac
+            ? await this.read(collection, id, true, { bypassRbac: true })
+            : undefined;
+        if (!effective.bypassRbac) {
+            if (!existing)
+                throw new Error(`Not found: ${collection}/${id}`);
+            const allowed = await this.canAccess(collection, existing, effective.userId ?? '', 'delete', effective.userRole);
+            if (!allowed)
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+        }
+        await this.#core.internals.resilience.acquireLimit('firestore');
+        await this.firestore().collection(collection).doc(id).delete();
+        if (def.onHardDelete && (existing || collection === 'chat')) {
+            const scopedCore = effective.core ??
+                new Core({
+                    env: this.#core.env,
+                    userId: effective.userId ?? this.#core.config.auth.adminUserId,
+                    role: 'admin'
+                });
+            const targetDoc = existing ?? { id };
+            await def.onHardDelete(targetDoc, scopedCore).catch(() => { });
+        }
+        return { id, deleted: true, hard: true };
+    };
+    #eraseOwnedEntries = async (name, userId) => {
+        let total = 0;
+        while (true) {
+            const docs = await this.list(name, { userId, includeDeleted: true, limit: 500, bypassRbac: true });
+            if (!docs.length)
+                break;
+            await runChunked(docs, (d) => this.hardDelete(name, d.id, { bypassRbac: true }).catch(() => { }), 25);
+            total += docs.length;
+            if (docs.length < 500)
+                break;
+        }
+        return total;
+    };
+    #cascadeEraseUserCollections = async (userId, step = this.#core.step) => {
+        const erasedFiles = await step('erase-files', () => this.#eraseOwnedEntries('file', userId));
+        const erasedChats = await step('erase-chats', async () => {
+            const count = await this.#eraseOwnedEntries('chat', userId);
+            const db = this.firestore();
+            await drainQueryBatchDelete(db, db.collectionGroup('messages').where('userId', '==', userId)).catch(() => 0);
+            return count;
+        });
+        const erasedCollections = {};
+        const db = this.firestore();
+        for (const [name, def] of collectionRegistry) {
+            if (name === 'file' || name === 'chat')
+                continue;
+            const rel = def.userRelation?.type ?? '1:N';
+            if (rel === 'global')
+                continue;
+            erasedCollections[name] = await step(`erase-${name}`, async () => {
+                if (rel === '1:1' || rel === '1:N')
+                    return this.#eraseOwnedEntries(name, userId);
+                if (rel === 'M:N' && def.userRelation?.junction) {
+                    const { collection: jCol, userField } = resolveJunction(name, def.userRelation.junction);
+                    const jSnap = await db.collection(jCol).where(userField, '==', userId).get();
+                    await runChunked(jSnap.docs, (d) => d.ref.delete().catch(() => { }), 25);
+                    return jSnap.size;
+                }
+                const userIdsField = def.userRelation?.userIdsField ?? 'userIds';
+                const docs = await this.list(name, { userId, includeDeleted: true, limit: 500, bypassRbac: true });
+                await runChunked(docs, async (d) => {
+                    const currentIds = Array.isArray(d[userIdsField]) ? d[userIdsField] : [];
+                    if (def.userRelation?.deleteWhenEmpty && currentIds.filter((u) => u !== userId).length === 0) {
+                        await this.hardDelete(name, d.id, { bypassRbac: true }).catch(() => { });
+                    }
+                    else {
+                        await db.collection(name).doc(d.id).update({ [userIdsField]: FieldValue.arrayRemove(userId), updatedAt: new Date() }).catch(() => { });
+                    }
+                });
+                return docs.length;
+            });
+        }
+        await step('erase-tasks', async () => {
+            const snap = await db.collection('_tasks').where('userId', '==', userId).get();
+            const bucket = this.bucket();
+            const docsToDelete = snap.docs.filter((d) => d.data().workflowName !== 'erase-user' || d.data().status !== 'running');
+            await Promise.all([
+                runChunked(docsToDelete, (d) => Promise.all([
+                    d.ref.delete().catch(() => { }),
+                    bucket.deleteFiles({ prefix: `_tasks/${d.id}/` }).catch(() => { })
+                ]), 25),
+                drainQueryBatchDelete(db, db.collection('_idempotency').where('userId', '==', userId)).catch(() => 0)
+            ]);
+            return snap.size;
+        });
+        return { erasedFiles, erasedChats, erasedCollections };
+    };
+    get internals() {
+        return {
+            ensureFirebaseApp: this.#ensureFirebaseApp,
+            getGcpAccessToken: this.#getGcpAccessToken,
+            cascadeEraseUserCollections: this.#cascadeEraseUserCollections
+        };
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/db/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/db/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,WAAW,EAA8B,MAAM,WAAW,CAAA;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAUjB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,0BAA0B,EAC1B,uBAAuB,EACxB,MAAM,SAAS,CAAA;AAIhB,MAAM,GAAG,GAAmD,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;AAClF,MAAM,OAAO,GAA2D,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;AAE9F,IAAI,WAAW,GAAG,EAAE,CAAA;AACpB,IAAI,cAAc,GAAG,CAAC,CAAA;AAEtB,MAAM,OAAO,SAAS;IACX,KAAK,CAAM;IAEpB,YAAY,UAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAA;QACvB,uBAAuB,EAAE,CAAA;IAC3B,CAAC;IAED,kBAAkB,GAAG,GAAS,EAAE;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;YACtB,aAAa,CAAC;gBACZ,SAAS,EAAE,WAAW,CAAC,UAAU;gBACjC,aAAa,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI;gBAC9C,gBAAgB,EAAE,WAAW,CAAC,cAAc;gBAC5C,SAAS,EAAE,IAAI,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aAC1C,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;IAED,SAAS,GAAG,CAAC,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAa,EAAE;QAC/D,IAAI,CAAC,kBAAkB,EAAE,CAAA;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;YAC7F,IAAI,CAAC;gBACH,EAAE,CAAC,QAAQ,CAAC,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAA;YAClD,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAA;QACf,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAE,CAAA;IAClB,CAAC,CAAA;IAED,MAAM,GAAG,CAAC,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAiB,EAAE;QAChE,IAAI,CAAC,kBAAkB,EAAE,CAAA;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QAC9G,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAE,CAAA;IACtB,CAAC,CAAA;IAED,kBAAkB,GAAG,KAAK,IAAqB,EAAE;QAC/C,IAAI,CAAC,kBAAkB,EAAE,CAAA;QACzB,IAAI,WAAW,IAAI,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,WAAW,CAAA;QAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CACjD,WAAW,EACX,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,CAAA;YACjE,IAAI,CAAC,KAAK,EAAE,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACnF,WAAW,GAAG,KAAK,CAAC,YAAY,CAAA;YAChC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YACtF,OAAO,WAAW,CAAA;QACpB,CAAC,EACD,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;IACH,CAAC,CAAA;IAED,aAAa,GAAG,CAAC,GAAmB,EAAiB,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;QACzB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;QACzB,GAAG,GAAG;KACP,CAAC,CAAA;IAEF,YAAY,GAAG,CAAC,GAAmB,EAAU,EAAE,CAC7C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;IAEvE,aAAa,GAAG,KAAK,EACnB,UAA0B,EAC1B,GAAwB,EACxB,MAAe,EACG,EAAE;QACpB,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACzB,IAAI,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC9D,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,IAAI,KAAK,CAAA;QAC3C,IAAI,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAClC,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK,MAAM,CAAA;QAC7E,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,QAAQ,CAAC,KAAK,MAAM,CAAA;QACjF,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;YAChD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;YAC3G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE;iBACjC,UAAU,CAAC,IAAI,CAAC;iBAChB,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC;iBAC9B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;iBAChC,KAAK,CAAC,CAAC,CAAC;iBACR,GAAG,EAAE,CAAA;YACR,OAAO,CAAC,KAAK,CAAC,KAAK,CAAA;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,IAAI,SAAS,CAAC,CAAA;QAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnD,CAAC,CAAA;IAED,cAAc,GAAG,KAAK,EACpB,UAAa,EACb,EAAU,EAC2B,EAAE;QACvC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAA;QACzB,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;QACxE,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA;IACtC,CAAC,CAAA;IAED,SAAS,GAAG,KAAK,EACf,UAAa,EACb,OAAiD,EACjD,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EACnC,MAAM,GAAa,MAAM,EACzB,QAAiB,EACC,EAAE;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;YAC7B,MAAM;YACN,QAAQ,EAAE,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3D,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,KAAK,CAAA;QAClC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YACzB,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACrG,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACzB,MAAM,GAAG,GACP,OAAO,OAAO,KAAK,QAAQ;YACzB,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC;YAChD,CAAC,CAAE,OAA2C,CAAA;QAClD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAClE,CAAC,CAAA;IAED,MAAM,GAAG,KAAK,EACZ,UAAa,EACb,IAAmB,EACnB,GAAmB,EACM,EAAE;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC7D,IAAI,KAAK,KAAK,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YAChF,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,IAA2B,CAAC,EAAE,CAAC;gBAC3G,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,IAAI,KAAK,CAAA;QAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QACnD,MAAM,UAAU,GACd,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,CAAE,IAA4B,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACrG,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAA;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5G,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACzB,OAAO,OAAyB,CAAA;IAClC,CAAC,CAAA;IAED,IAAI,GAAG,KAAK,EACV,UAAa,EACb,EAAW,EACX,cAAc,GAAG,KAAK,EACtB,GAAmB,EACkB,EAAE;QACvC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAA;QACzB,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;QACxE,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YAC3D,IAAI,KAAK,KAAK,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YAChF,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBACxF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IAED,eAAe,GAAG,KAAK,EACrB,UAAa,EACb,GAAa,EACb,cAAc,GAAG,KAAK,EACtB,SAAS,GAAG,KAAK,EACU,EAAE;QAC7B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO,EAAE,CAAA;QAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAA;QAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;YAC/D,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5G,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,CAAC,MAAM;oBAAE,SAAQ;gBACvB,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC,CAAA;gBACzE,IAAI,cAAc,IAAI,CAAC,GAAG,CAAC,OAAO;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YACzD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC,CAAA;IAED,IAAI,GAAG,KAAK,EACV,UAAa,EACb,IAAoC,EACpC,GAAmB,EACqB,EAAE;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,CAAA;QAChE,IAAI,YAAY,GAAG,IAAI,EAAE,MAAM,CAAA;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YAC3D,IAAI,KAAK,KAAK,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YAChF,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,MAAM;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;gBACjF,IAAI,YAAY,IAAI,YAAY,KAAK,SAAS,CAAC,MAAM;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;gBACjH,YAAY,GAAG,SAAS,CAAC,MAAM,CAAA;YACjC,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,IAAI,KAAK,CAAA;QAC3C,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAA;QACxE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAE/C,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;YAC7F,IAAI,CAAC,YAAY,IAAI,GAAG,KAAK,QAAQ;gBAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;YAC/F,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;YACzG,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;QACzF,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAE/D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;gBACpG,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YAC1D,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;gBAChD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;gBAC3G,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAA;gBACjG,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC5F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,CAAA;gBAC/F,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,0BAA0B,CAC1C,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EACzB,UAAU,EACV,YAAY,EACZ,IAAI,EAAE,KAA4C,EAClD,IAAI,EAAE,MAAM,CACb,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,wBAAwB,CACzC,EAAE,EACF,UAAU,EACV,SAAS,EACT,IAAI,EACJ,OAAO,EACP,SAAS,EACT,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAC1C,CAAA;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC1D,CAAC,CAAA;IAED,QAAQ,GAAG,KAAK,EACd,UAAa,EACb,IAAoC,EACpC,GAAmB,EACkB,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;QACpD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,CAAA;IACxD,CAAC,CAAA;IAED,MAAM,GAAG,KAAK,EACZ,UAAa,EACb,EAAW,EACX,IAAmB,EACnB,GAAmB,EACsB,EAAE;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;YACzG,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;QAC9F,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC/D,MAAM,IAAI,CAAC,SAAS,EAAE;aACnB,UAAU,CAAC,UAAU,CAAC;aACtB,GAAG,CAAC,EAAE,CAAC;aACP,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;QACnD,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC,CAAA;IAED,MAAM,GAAG,KAAK,EACZ,UAAa,EACb,EAAW,EACX,GAAmB,EACsB,EAAE;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7E,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,IAAI,EAAE,EAAE,CAAC,CAAA;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;YAChH,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3F,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC,CAAA;IAED,UAAU,GAAG,KAAK,EAChB,UAAa,EACb,EAAW,EACX,GAAmB,EACkC,EAAE;QACvD,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,QAAQ,GACZ,GAAG,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,UAAU;YACvC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC7D,CAAC,CAAC,SAAS,CAAA;QACf,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,IAAI,EAAE,EAAE,CAAC,CAAA;YAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;YAChH,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC/D,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;QAC9D,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,QAAQ,IAAI,UAAU,KAAK,MAAM,CAAC,EAAE,CAAC;YAC5D,MAAM,UAAU,GACd,SAAS,CAAC,IAAI;gBACd,IAAI,IAAI,CAAC;oBACP,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;oBACnB,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;oBAC9D,IAAI,EAAE,OAAO;iBACd,CAAC,CAAA;YACJ,MAAM,SAAS,GAAG,QAAQ,IAAK,EAAE,EAAE,EAAqB,CAAA;YACxD,MAAM,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC1C,CAAC,CAAA;IAED,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAE,MAAe,EAAmB,EAAE;QAC5E,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;YAClG,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAK;YACvB,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACpG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAK;QAC9B,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,4BAA4B,GAAG,KAAK,EAClC,MAAe,EACf,IAAI,GAAe,IAAI,CAAC,KAAK,CAAC,IAAI,EACgE,EAAE;QACpG,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;QAC5F,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;YAC3B,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5G,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;QAEF,MAAM,iBAAiB,GAA2B,EAAE,CAAA;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;QAE3B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,kBAAkB,EAAE,CAAC;YAC7C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAQ;YAChD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,IAAI,KAAK,CAAA;YAC3C,IAAI,GAAG,KAAK,QAAQ;gBAAE,SAAQ;YAE9B,iBAAiB,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC/D,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK;oBAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBAChF,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;oBAChD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;oBACxF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,CAAA;oBAC5E,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACvE,OAAO,KAAK,CAAC,IAAI,CAAA;gBACnB,CAAC;gBACD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,EAAE,YAAY,IAAI,SAAS,CAAA;gBAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;gBAClG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;oBACjC,MAAM,UAAU,GAAa,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;oBAClF,IAAI,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC7F,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBACzE,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBACvI,CAAC;gBACH,CAAC,CAAC,CAAA;gBACF,OAAO,IAAI,CAAC,MAAM,CAAA;YACpB,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,CAAA;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;YAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,CAC/E,CAAA;YACD,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,UAAU,CACR,YAAY,EACZ,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,GAAG,CAAC;oBACV,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;oBAC9B,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;iBAClE,CAAC,EACJ,EAAE,CACH;gBACD,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACtG,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAA;QAClB,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAA;IACxD,CAAC,CAAA;IAED,IAAI,SAAS;QACX,OAAO;YACL,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;YAC1C,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;YAC1C,2BAA2B,EAAE,IAAI,CAAC,4BAA4B;SAC/D,CAAA;IACH,CAAC;CACF"}

package/dist/db/utils.d.ts

@@ -0,0 +1,25 @@
+import type { DbAction, DbRole } from '../config';
+import { type CollectionName, type DbListOptions, type PaginatedList, type SelectModel, type UserRelationConfig } from './schema';
+export declare const resolveJunction: (collection: string, j: NonNullable<UserRelationConfig['junction']>) => {
+    collection: string;
+    userField: string;
+    targetField: string;
+};
+export declare const hasAction: (actions: readonly DbAction[] | undefined, target: DbAction) => boolean;
+export declare const resolveAllowedScope: (collection: string, role: DbRole, action: DbAction) => 'any' | 'own' | 'none';
+export declare const normalizeDates: (val: unknown) => unknown;
+export declare const fromFirestoreDoc: <T extends CollectionName>(c: T, id: string, raw: Record<string, unknown>, partial?: boolean) => SelectModel<T>;
+export declare const attachNextCursor: <T extends {
+    id: string;
+}>(items: T[], limit: number) => PaginatedList<T>;
+export declare const stripImmutableUpdateFields: (collection: string, data: unknown, allowSystemFields?: boolean) => Record<string, unknown>;
+export declare const drainQueryBatchDelete: (db: FirebaseFirestore.Firestore, query: FirebaseFirestore.Query, batchSize?: number) => Promise<number>;
+export declare const executeFilteredListQuery: <N extends CollectionName>(db: FirebaseFirestore.Firestore, collection: N, baseQuery: FirebaseFirestore.Query, opts: DbListOptions<SelectModel<N>> | undefined, maxDocs: number, hasSelect: boolean, defaultListLimit: number) => Promise<SelectModel<N>[]>;
+export declare const sortAndSliceFallbackDocs: <T extends Record<string, any> & {
+    id: string;
+}>(docs: T[], sortField: string | undefined, sortDir: 'asc' | 'desc', cursor: string | undefined, sortedInDb: boolean, appliedCursorInDb: boolean) => T[];
+export declare const runChunked: <T>(items: readonly T[], fn: (item: T) => Promise<unknown>, concurrency?: number) => Promise<void>;
+export declare const isCreateOwnScopeAllowed: (collection: string, userId: string | undefined, data: Record<string, any>) => boolean;
+export declare const buildScopedCollectionQuery: (baseQuery: FirebaseFirestore.Query, collection: string, scopedUserId: string | undefined, where: Record<string, unknown> | undefined, select: readonly (string | symbol | number)[] | undefined) => FirebaseFirestore.Query;
+export declare const wireCoreCollectionHooks: () => void;
+//# sourceMappingURL=utils.d.ts.map

package/dist/db/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/db/utils.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAEjD,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACxB,MAAM,UAAU,CAAA;AAEjB,eAAO,MAAM,eAAe,eAAgB,MAAM,KAAK,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAChG,UAAU;IACV,SAAS;IACT,WAAW;CACX,CAAA;AAEF,eAAO,MAAM,SAAS,YAAa,SAAS,QAAQ,EAAE,GAAG,SAAS,UAAU,QAAQ,KAAG,OACd,CAAA;AAEzE,eAAO,MAAM,mBAAmB,eAAgB,MAAM,QAAQ,MAAM,UAAU,QAAQ,KAAG,KAAK,GAAG,KAAK,GAAG,MAOxG,CAAA;AAED,eAAO,MAAM,cAAc,QAAS,OAAO,KAAG,OAO7C,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,cAAc,KACpD,CAAC,MACA,MAAM,OACL,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,wBAE3B,WAAW,CAAC,CAAC,CAIf,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,SAAS,CAAC,EAAE,SAAS,MAAM,KAAG,aAAa,CAAC,CAAC,CAIrG,CAAA;AAED,eAAO,MAAM,0BAA0B,eACzB,MAAM,QACZ,OAAO,kCAEZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAsBxB,CAAA;AAED,eAAO,MAAM,qBAAqB,OAC5B,iBAAiB,CAAC,SAAS,SACxB,iBAAiB,CAAC,KAAK,yBAE7B,OAAO,CAAC,MAAM,CAYhB,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAU,CAAC,SAAS,cAAc,MACjE,iBAAiB,CAAC,SAAS,cACnB,CAAC,aACF,iBAAiB,CAAC,KAAK,QAC5B,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,WACtC,MAAM,aACJ,OAAO,oBACA,MAAM,KACvB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAkC1B,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,QAC/E,CAAC,EAAE,aACE,MAAM,GAAG,SAAS,WACpB,KAAK,GAAG,MAAM,UACf,MAAM,GAAG,SAAS,cACd,OAAO,qBACA,OAAO,KACzB,CAAC,EAiBH,CAAA;AAED,eAAO,MAAM,UAAU,GAAU,CAAC,SACzB,SAAS,CAAC,EAAE,MACf,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,2BAEhC,OAAO,CAAC,IAAI,CAId,CAAA;AAED,eAAO,MAAM,uBAAuB,eACtB,MAAM,UACV,MAAM,GAAG,SAAS,QACpB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KACxB,OAeF,CAAA;AAED,eAAO,MAAM,0BAA0B,cAC1B,iBAAiB,CAAC,KAAK,cACtB,MAAM,gBACJ,MAAM,GAAG,SAAS,SACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,UAClC,SAAS,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,SAAS,KACxD,iBAAiB,CAAC,KAkBpB,CAAA;AAED,eAAO,MAAM,uBAAuB,QAAO,IAkB1C,CAAA"}

package/dist/db/utils.js

@@ -0,0 +1,188 @@
+import { FieldPath, Timestamp } from 'firebase-admin/firestore';
+import { collectionRegistry, getCollectionDef, getEffectiveRbac } from './schema';
+export const resolveJunction = (collection, j) => ({
+    collection: j.collection,
+    userField: j.userField ?? 'userId',
+    targetField: j.targetField ?? `${collection}Id`
+});
+export const hasAction = (actions, target) => Boolean(actions && (actions.includes('*') || actions.includes(target)));
+export const resolveAllowedScope = (collection, role, action) => {
+    const rbac = getEffectiveRbac(collection);
+    const roleScopes = rbac[role];
+    if (!roleScopes)
+        return 'none';
+    if (hasAction(roleScopes.any, action))
+        return 'any';
+    if (hasAction(roleScopes.own, action))
+        return 'own';
+    return 'none';
+};
+export const normalizeDates = (val) => {
+    if (val instanceof Timestamp)
+        return val.toDate();
+    if (Array.isArray(val))
+        return val.map(normalizeDates);
+    if (val && typeof val === 'object' && !(val instanceof Date)) {
+        return Object.fromEntries(Object.entries(val).map(([k, v]) => [k, normalizeDates(v)]));
+    }
+    return val;
+};
+export const fromFirestoreDoc = (c, id, raw, partial = false) => {
+    const norm = normalizeDates({ ...raw, id });
+    const schema = getCollectionDef(c).schema;
+    return (partial ? schema.partial().parse(norm) : schema.parse(norm));
+};
+export const attachNextCursor = (items, limit) => {
+    const nextCursor = items.length >= limit ? (items.at(-1)?.id ?? null) : null;
+    Object.defineProperty(items, 'nextCursor', { value: nextCursor, enumerable: false, configurable: true });
+    return items;
+};
+export const stripImmutableUpdateFields = (collection, data, allowSystemFields = false) => {
+    const def = getCollectionDef(collection);
+    const ownerField = def.userRelation?.userField ?? 'userId';
+    const raw = (data ?? {});
+    const { id: _id, createdAt: _createdAt, updatedAt: _updatedAt, deleted: _deleted, userId: _userId, [ownerField]: _ownerField, ...mutableData } = raw;
+    if (allowSystemFields && raw.deleted !== undefined) {
+        mutableData.deleted = raw.deleted;
+    }
+    const parsed = def.schema.partial().parse(mutableData);
+    return Object.fromEntries(Object.keys(mutableData)
+        .filter((k) => mutableData[k] !== undefined && k in parsed)
+        .map((k) => [k, parsed[k]]));
+};
+export const drainQueryBatchDelete = async (db, query, batchSize = 400) => {
+    let deleted = 0;
+    while (true) {
+        const snap = await query.limit(batchSize).get();
+        if (snap.empty)
+            break;
+        const batch = db.batch();
+        for (const doc of snap.docs)
+            batch.delete(doc.ref);
+        await batch.commit();
+        deleted += snap.size;
+        if (snap.size < batchSize)
+            break;
+    }
+    return deleted;
+};
+export const executeFilteredListQuery = async (db, collection, baseQuery, opts, maxDocs, hasSelect, defaultListLimit) => {
+    const def = getCollectionDef(collection);
+    const sortField = opts?.orderBy?.field ?? (def.sortByUpdated ? 'updatedAt' : undefined);
+    const sortDir = opts?.orderBy?.direction ?? 'desc';
+    const cursorSnap = opts?.cursor ? await db.collection(collection).doc(opts.cursor).get() : undefined;
+    const filteredQuery = !opts?.includeDeleted ? baseQuery.where('deleted', '==', false) : baseQuery;
+    let snap;
+    let sortedInDb = false;
+    let appliedCursorInDb = false;
+    try {
+        let q = sortField ? filteredQuery.orderBy(sortField, sortDir) : filteredQuery.orderBy(FieldPath.documentId(), 'asc');
+        if (cursorSnap?.exists)
+            q = q.startAfter(cursorSnap);
+        snap = await q.limit(maxDocs).get();
+        sortedInDb = true;
+        appliedCursorInDb = Boolean(cursorSnap?.exists);
+    }
+    catch (err) {
+        console.warn(`[db] composite index missing for "${collection}" (falling back to filtered query):`, err instanceof Error ? err.message : err);
+        const fallbackLimit = sortField || opts?.cursor ? Math.max(maxDocs * 5, defaultListLimit) : maxDocs;
+        try {
+            snap = await filteredQuery.limit(fallbackLimit).get();
+        }
+        catch {
+            snap = await baseQuery.limit(fallbackLimit).get();
+        }
+    }
+    const docs = snap.docs
+        .map((s) => fromFirestoreDoc(collection, s.id, s.data() ?? {}, hasSelect))
+        .filter((d) => opts?.includeDeleted || !d.deleted);
+    return sortAndSliceFallbackDocs(docs, sortField, sortDir, opts?.cursor, sortedInDb, appliedCursorInDb);
+};
+export const sortAndSliceFallbackDocs = (docs, sortField, sortDir, cursor, sortedInDb, appliedCursorInDb) => {
+    let result = docs;
+    if (!sortedInDb) {
+        result.sort((a, b) => {
+            if (sortField) {
+                const va = a[sortField] instanceof Date ? a[sortField].getTime() : a[sortField];
+                const vb = b[sortField] instanceof Date ? b[sortField].getTime() : b[sortField];
+                if (va !== vb)
+                    return sortDir === 'asc' ? (va > vb ? 1 : -1) : va < vb ? 1 : -1;
+            }
+            return a.id.localeCompare(b.id);
+        });
+    }
+    if (cursor && !appliedCursorInDb) {
+        const idx = result.findIndex((d) => d.id === cursor);
+        result = idx >= 0 ? result.slice(idx + 1) : [];
+    }
+    return result;
+};
+export const runChunked = async (items, fn, concurrency = 25) => {
+    for (let i = 0; i < items.length; i += concurrency) {
+        await Promise.all(items.slice(i, i + concurrency).map(fn));
+    }
+};
+export const isCreateOwnScopeAllowed = (collection, userId, data) => {
+    if (!userId)
+        return false;
+    const def = getCollectionDef(collection);
+    const rel = def.userRelation?.type ?? '1:N';
+    if (rel === 'global')
+        return false;
+    if (rel === '1:1' || rel === '1:N') {
+        const uf = def.userRelation?.userField ?? (rel === '1:1' ? 'id' : 'userId');
+        const ownerVal = data[uf] ?? (uf === 'id' ? data.id : undefined);
+        if (ownerVal && ownerVal !== userId)
+            return false;
+    }
+    else if (rel === 'M:N' && !def.userRelation?.junction) {
+        const uif = def.userRelation?.userIdsField ?? 'userIds';
+        const ownerIds = data[uif];
+        if (Array.isArray(ownerIds) && !ownerIds.includes(userId))
+            return false;
+    }
+    return true;
+};
+export const buildScopedCollectionQuery = (baseQuery, collection, scopedUserId, where, select) => {
+    const def = getCollectionDef(collection);
+    const rel = def.userRelation?.type ?? '1:N';
+    let q = baseQuery;
+    if (scopedUserId && rel !== 'global') {
+        q =
+            rel === '1:1' || rel === '1:N'
+                ? q.where(def.userRelation?.userField ?? 'userId', '==', scopedUserId)
+                : q.where(def.userRelation?.userIdsField ?? 'userIds', 'array-contains', scopedUserId);
+    }
+    if (where) {
+        for (const [field, value] of Object.entries(where)) {
+            if (value === undefined)
+                continue;
+            q = Array.isArray(value) ? q.where(field, 'in', value.slice(0, 30)) : q.where(field, '==', value);
+        }
+    }
+    if (select?.length)
+        q = q.select(...select);
+    return q;
+};
+export const wireCoreCollectionHooks = () => {
+    const chatDef = collectionRegistry.get('chat');
+    if (chatDef && !chatDef.onHardDelete) {
+        chatDef.onHardDelete = async (doc, core) => {
+            if (!doc.id)
+                return;
+            const db = core.db.firestore();
+            await core.internals.resilience.acquireLimit('firestore');
+            await drainQueryBatchDelete(db, db.collection('chat').doc(doc.id).collection('messages'));
+        };
+    }
+    const fileDef = collectionRegistry.get('file');
+    if (fileDef && !fileDef.onHardDelete) {
+        fileDef.onHardDelete = async (doc, core) => {
+            if (!doc.id)
+                return;
+            await core.internals.resilience.acquireLimit('storage');
+            await core.files.bucket().file(doc.id).delete({ ignoreNotFound: true }).catch(() => { });
+        };
+    }
+};
+//# sourceMappingURL=utils.js.map