@diister/quick-permission 0.9.0-beta.6 → 0.9.0-beta.7

package/README.md

@@ -127,15 +127,44 @@ the caller deserves to know why.
 ### Providers
 
 A provider turns a subject into grants. Several may be combined, and a subject
-is allowed when any single grant satisfies the permission's rules.
+is allowed when any single grant satisfies the permission's rules. A grant names
+one permission key; there is no wildcard key, so an administrator is granted the
+intermediate keys that expand to everything they hold.
 
 ```ts
 providers: [
   (subject) => db.grants.find({ userId: subject.id }).toArray(),
-  (subject) => (subject.isAdmin ? [{ key: "*", target: ["*"] }] : []),
+  (subject) =>
+    subject.isAdmin ? [{ key: "posts.manage", target: ["post:*"] }] : [],
 ]
 ```
 
+A provider can also be an object, which lets the engine skip it and cache it:
+
+```ts
+{
+  name: "memberships",
+  keys: ["posts.manage"],
+  targetType: "post",
+  cacheKey: (subject) => subject.id,
+  fetch: (subject, key, target) => membershipGrants(subject.id, target?.[0]),
+}
+```
+
+| Field | Effect |
+| --- | --- |
+| `name` | how the provider is named in hooks and in the reasons of a deny |
+| `keys`, `matches` | the keys the provider emits; it is consulted for those and for every key they expand to |
+| `targetType` | consulted only when `target[0]` is one concrete id of that type (`"post:1"`, never `"post:*"`) |
+| `cacheKey` | grants are reused within a `context()` for the same key; return `undefined` to skip the cache |
+| `fetch` | returns the grants |
+
+A provider that throws, or whose `cacheKey` throws, contributes no grant. The
+check goes on with the others, so a failure can only narrow what a subject may
+do. The failure reaches `hooks.onError` and, when the check is denied, its
+`reasons`. A resource or rule that throws rejects only the grant that needed it,
+the same way.
+
 ## Filtering lists, not just single documents
 
 This is what the library is really for. `can()` hands back the query fragments
@@ -177,10 +206,17 @@ const visible = applyFilter(post, result.data as FilterSpec);
 
 ## API reference
 
-### `createSystem({ schema, providers })`
+### `createSystem({ schema, providers, hooks })`
 
 Builds the engine. `schema` maps permission keys to `permission(...)`
-declarations; `providers` lists the grant sources. Returns a `System`:
+declarations; `providers` lists the grant sources; `hooks` observes them:
+
+| Hook | Called with |
+| --- | --- |
+| `onProviderFetch` | provider name, key, target, `durationMs`, `grantCount`, for every fetch that was not served from the cache |
+| `onError` | `{ source: "provider", provider, error, … }` or `{ source: "rule", grantId, error, … }` |
+
+A hook that throws never changes a decision. `createSystem` returns a `System`:
 
 | Member | Purpose |
 | --- | --- |
@@ -225,11 +261,16 @@ type CanResult =
 `applyFilter`, `inputMatch`, `intermediate`, `matchPath`, `pickFields`,
 `requireSelf`, and the types they use.
 
+`isCapabilityQuery(target)`, `isWildcardSegment(segment)` and
+`refType(segment)` expose how the engine reads a target: a query with any
+wildcard segment (`"*"` or `"post:*"`) is a capability query, and `refType`
+returns the type of a `"type:id"` segment.
+
 ## Development
 
 ```bash
 bun install
-bun test          # 184 tests
+bun test          # 198 tests
 bun run check     # tsc
 bun run lint      # biome
 bun run build     # dist/ for npm

package/dist/mod.d.ts

@@ -18,8 +18,8 @@ export { defineRule, inputMatch, matchPath, requireSelf } from "./rules.ts";
 export type { DefineRuleOpts } from "./rules.ts";
 export { intermediate, permission } from "./permission.ts";
 export type { IntermediateBuilder, IntermediateConfig, PermissionBuilder, PermissionConfig, } from "./permission.ts";
-export { createSystem } from "./system.ts";
-export type { CanContext, Provider, ProviderFn, ProviderObject, System, } from "./system.ts";
+export { createSystem, isCapabilityQuery, isWildcardSegment, refType, } from "./system.ts";
+export type { CanContext, PermissionErrorEvent, Provider, ProviderFetchEvent, ProviderFn, ProviderObject, System, SystemHooks, } from "./system.ts";
 export { applyFilter, pickFields } from "./core/filtering.ts";
 export type { FilterSpec } from "./core/merging.ts";
 //# sourceMappingURL=mod.d.ts.map

package/dist/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,YAAY,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,kBAAkB,EAClB,KAAK,EACL,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,cAAc,EACd,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,OAAO,EACP,UAAU,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EACV,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAGlE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5E,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EACV,UAAU,EACV,QAAQ,EACR,UAAU,EACV,cAAc,EACd,MAAM,GACP,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC9D,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,YAAY,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,kBAAkB,EAClB,KAAK,EACL,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,cAAc,EACd,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,OAAO,EACP,UAAU,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EACV,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAGlE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5E,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,GACR,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,QAAQ,EACR,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,MAAM,EACN,WAAW,GACZ,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC9D,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/mod.js

@@ -19,7 +19,7 @@ export { defineRule, inputMatch, matchPath, requireSelf } from "./rules.js";
 // ─── Permission builders ─────────────────────────────────────────────────
 export { intermediate, permission } from "./permission.js";
 // ─── System ──────────────────────────────────────────────────────────────
-export { createSystem } from "./system.js";
+export { createSystem, isCapabilityQuery, isWildcardSegment, refType, } from "./system.js";
 // ─── Field-projection helpers (used outside permission checks too) ───────
 export { applyFilter, pickFields } from "./core/filtering.js";
 //# sourceMappingURL=mod.js.map

package/dist/mod.js.map

@@ -1 +1 @@
-{"version":3,"file":"mod.js","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,4EAA4E;AAC5E,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgC1C,4EAA4E;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,4EAA4E;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO1D,4EAA4E;AAC5E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG5E,4EAA4E;AAC5E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAQ3D,4EAA4E;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,4EAA4E;AAC5E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"mod.js","sourceRoot":"","sources":["../mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,4EAA4E;AAC5E,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgC1C,4EAA4E;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,4EAA4E;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO1D,4EAA4E;AAC5E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG5E,4EAA4E;AAC5E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAQ3D,4EAA4E;AAC5E,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,GACR,MAAM,aAAa,CAAC;AAYrB,4EAA4E;AAC5E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/system.d.ts

@@ -1,43 +1,47 @@
-/**
- * Moteur d'orchestration resource-pipe.
- *
- * Responsabilités :
- *  - Maintenir un cache `(resource.id, dedupKey) → Promise<T>` par context()
- *  - Filtrer les rules actives (activeWhen) avant de fetcher leurs needs
- *  - Lancer les fetches en parallèle (Promise.all) avec dedup
- *  - Évaluer les rules d'un grant en série (préserve l'ordre des reasons)
- *  - OR sémantique entre grants : un grant qui passe = `ok: true`
- *  - Validation d'arity du target au boot et au check
- *
- * Cf. RFC §"Sémantique d'exécution".
- */
 import type { CanResult, Grant, IndirectResourceInfo, ListEntry, Permission, Resource, Subject, TreeNode } from "./types.ts";
 import { type IndirectResource } from "./indirect-resource.ts";
 export type ProviderFn = (subject: Subject, key: string, target?: readonly unknown[]) => readonly Grant[] | Promise<readonly Grant[]>;
-/**
- * Provider sous forme objet : permet d'opt-in à la dedup de grants
- * (cacheKey) et au filtrage par préfixe de key (keys/matches).
- *
- * - `keys`/`matches` : le provider est skip si la key demandée ne match pas
- * - `cacheKey` : grants memoizés par (subject, key, target) au sein d'un context
- */
 export type ProviderObject = {
+    readonly name?: string;
     readonly keys?: readonly string[];
     readonly matches?: (key: string) => boolean;
-    readonly cacheKey?: (subject: Subject, key: string, target?: readonly unknown[]) => string;
+    readonly targetType?: string | readonly string[];
+    readonly cacheKey?: (subject: Subject, key: string, target?: readonly unknown[]) => string | undefined;
     readonly fetch: ProviderFn;
 };
 export type Provider = ProviderFn | ProviderObject;
+export type ProviderFetchEvent = {
+    readonly provider: string;
+    readonly subject: Subject;
+    readonly key: string;
+    readonly target: readonly unknown[] | undefined;
+    readonly durationMs: number;
+    readonly grantCount: number;
+};
+export type PermissionErrorEvent = {
+    readonly source: "provider";
+    readonly provider: string;
+    readonly subject: Subject;
+    readonly key: string;
+    readonly target: readonly unknown[] | undefined;
+    readonly error: unknown;
+} | {
+    readonly source: "rule";
+    readonly grantId: string | undefined;
+    readonly subject: Subject;
+    readonly key: string;
+    readonly target: readonly unknown[] | undefined;
+    readonly error: unknown;
+};
+export type SystemHooks = {
+    readonly onProviderFetch?: (event: ProviderFetchEvent) => void;
+    readonly onError?: (event: PermissionErrorEvent) => void;
+};
+export declare function refType(segment: unknown): string | undefined;
 export type CanContext = {
     readonly checkDate?: Date;
     readonly checkIp?: string;
-    /** True : le target peut contenir des wildcards et matche les grants overlap. */
-    readonly broadMatch?: boolean;
-    /**
-     * Check-time payload exposed to rules as `ctx.input`. Distinct from
-     * `grant.payload` (static, seed-time). Consumed by `inputMatch()` to
-     * validate a CREATE body against `grant.with`.
-     */
+    /** Check-time payload read by `inputMatch()`, as opposed to the grant's static `payload`. */
     readonly input?: unknown;
 };
 export type System<TMeta = unknown> = {
@@ -46,68 +50,39 @@ export type System<TMeta = unknown> = {
         readonly children: Readonly<Record<string, TreeNode<TMeta>>>;
     };
     schema(key: string): Permission<TMeta> | undefined;
-    /**
-     * Every distinct indirect resource referenced by the schema's rules,
-     * deduped by id. Returned in declaration-walk order (first-occurrence
-     * wins for dedup). Function fields are stripped — see
-     * `IndirectResourceInfo`. Empty if no permission uses `.match()` on an
-     * `indirectResource`.
-     */
+    /** Deduplicated by id, in declaration order, without their functions. */
     indirectResources(): readonly IndirectResourceInfo[];
-    /**
-     * Indirect resources referenced by a single permission's rules.
-     * `[]` if `key` is unknown or has no `indirect-match` rule. Useful so
-     * matrix UIs only render the indirect-match editor on permissions where
-     * it has a semantic.
-     */
     indirectsUsedBy(key: string): readonly IndirectResourceInfo[];
-    /** Check direct (sans cache cross-can) — préfère `context()` en HTTP. */
+    /** Nothing is cached across calls; prefer `context()` for a request. */
     can(subject: Subject, key: string, target?: readonly unknown[], context?: CanContext): Promise<CanResult>;
-    /**
-     * Crée un context request-scoped avec cache de fetches partagé entre
-     * tous les `can()` qui en découlent.
-     */
+    /** Resources and provider grants are cached across every `can()` of the context. */
     context(bound: {
         readonly subject: Subject;
     } & CanContext): {
-        /**
-         * `perCall` overrides the bound `CanContext` for this single check.
-         * Canonical use : passing `input` for a CREATE while keeping the
-         * shared (per-request) context. Other fields stay bound — override
-         * only when truly per-call.
-         */
+        /** `perCall` overrides the bound context for this check only, typically `input` on a create. */
         can(key: string, target?: readonly unknown[], perCall?: CanContext): Promise<CanResult>;
         /**
-         * Inject pre-loaded docs into the resource cache so subsequent
-         * `can()` calls skip the fetch. Typical use : after a paginated
-         * list, the caller has all docs in memory — pre-seed them so the
-         * per-doc projection check doesn't hit the DB again.
-         *
-         * `dedupKey(doc)` MUST return the same target segments the resource's
-         * `dedupKey` would compute at fetch time — otherwise the cache key
-         * won't match and the preseed is silently ineffective. For most
-         * resources whose dedupKey is `target[i]`, just return `[doc._id]`
-         * (or the relevant segments).
-         *
-         * `value(doc)` is optional. Defaults to identity (the doc itself,
-         * used for direct resources). Provide it for indirect resources
-         * where the cached value is an array of joined docs nested under
-         * an alias (e.g. `d => d._memberships_of_participant`).
+         * `dedupKey(doc)` must return the segments the resource's own `dedupKey`
+         * computes at fetch time, or the seeded value is never found. `value(doc)`
+         * defaults to the doc; an indirect resource caches its joined docs instead.
          */
         preseed<T, V = T>(resource: Resource<unknown> | IndirectResource | string, docs: ReadonlyArray<T>, opts: {
             dedupKey: (doc: T) => readonly unknown[];
             value?: (doc: T) => V;
         }): void;
-        /** Compteurs de fetches par resource.id (debug / observabilité). */
         getFetchCounters(): Readonly<Record<string, number>>;
-        /** Reset des compteurs (pas du cache). */
+        /** Resets the counters, never the cache. */
         clearCounters(): void;
-        /** Dump des grants émis dans ce context (debug). */
+        /** Only the grants of cached providers already consulted in this context. */
         dumpGrants(): Promise<readonly Grant[]>;
     };
 };
+/** A query with any wildcard segment asks "could this subject, on some target"; rules that need a concrete document pass silently. */
+export declare function isCapabilityQuery(target: readonly unknown[] | undefined): boolean;
+export declare function isWildcardSegment(seg: unknown): boolean;
 export declare function createSystem<TMeta = unknown>(opts: {
     readonly schema: Readonly<Record<string, Permission<TMeta>>>;
     readonly providers?: readonly Provider[];
+    readonly hooks?: SystemHooks;
 }): System<TMeta>;
 //# sourceMappingURL=system.d.ts.map

package/dist/system.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../system.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAEV,SAAS,EAET,KAAK,EACL,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,QAAQ,EAGR,OAAO,EACP,QAAQ,EACT,MAAM,YAAY,CAAC;AASpB,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,KACxB,SAAS,KAAK,EAAE,GAAG,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,KACxB,MAAM,CAAC;IACZ,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;AAiBnD,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,MAAM,CAAC,KAAK,GAAG,OAAO,IAAI;IACpC,IAAI,IAAI,SAAS,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACpC,IAAI,IAAI;QAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;IACzE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IACnD;;;;;;OAMG;IACH,iBAAiB,IAAI,SAAS,oBAAoB,EAAE,CAAC;IACrD;;;;;OAKG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAAC;IAC9D,yEAAyE;IACzE,GAAG,CACD,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,EAC3B,OAAO,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,UAAU,GAAG;QAC1D;;;;;WAKG;QACH,GAAG,CACD,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,EAC3B,OAAO,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB;;;;;;;;;;;;;;;;WAgBG;QACH,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EACd,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,gBAAgB,GAAG,MAAM,EACvD,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,EACtB,IAAI,EAAE;YACJ,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,SAAS,OAAO,EAAE,CAAC;YACzC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;SACvB,GACA,IAAI,CAAC;QACR,oEAAoE;QACpE,gBAAgB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,0CAA0C;QAC1C,aAAa,IAAI,IAAI,CAAC;QACtB,oDAAoD;QACpD,UAAU,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;KACzC,CAAC;CACH,CAAC;AAsVF,wBAAgB,YAAY,CAAC,KAAK,GAAG,OAAO,EAAE,IAAI,EAAE;IAClD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;CAC1C,GAAG,MAAM,CAAC,KAAK,CAAC,CA2chB"}
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../system.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,SAAS,EAGT,KAAK,EACL,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,QAAQ,EAGR,OAAO,EACP,QAAQ,EACT,MAAM,YAAY,CAAC;AASpB,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,KACxB,SAAS,KAAK,EAAE,GAAG,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;AAElD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,KACxB,MAAM,GAAG,SAAS,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;AAEN,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC1D,CAAC;AAeF,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI5D;AAmCD,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,MAAM,CAAC,KAAK,GAAG,OAAO,IAAI;IACpC,IAAI,IAAI,SAAS,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACpC,IAAI,IAAI;QAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;IACzE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IACnD,yEAAyE;IACzE,iBAAiB,IAAI,SAAS,oBAAoB,EAAE,CAAC;IACrD,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAAC;IAC9D,wEAAwE;IACxE,GAAG,CACD,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,EAC3B,OAAO,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,oFAAoF;IACpF,OAAO,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,UAAU,GAAG;QAC1D,gGAAgG;QAChG,GAAG,CACD,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,EAC3B,OAAO,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB;;;;WAIG;QACH,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EACd,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,gBAAgB,GAAG,MAAM,EACvD,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,EACtB,IAAI,EAAE;YACJ,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,SAAS,OAAO,EAAE,CAAC;YACzC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;SACvB,GACA,IAAI,CAAC;QACR,gBAAgB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,4CAA4C;QAC5C,aAAa,IAAI,IAAI,CAAC;QACtB,6EAA6E;QAC7E,UAAU,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;KACzC,CAAC;CACH,CAAC;AAkCF,sIAAsI;AACtI,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GACrC,OAAO,CAGT;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEvD;AA+OD,wBAAgB,YAAY,CAAC,KAAK,GAAG,OAAO,EAAE,IAAI,EAAE;IAClD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;CAC9B,GAAG,MAAM,CAAC,KAAK,CAAC,CAihBhB"}