@esri/hub-common 15.31.3 → 15.31.4

package/dist/node/discussions/api/utils/channel-permission.js

@@ -0,0 +1,381 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChannelPermission = void 0;
+const types_1 = require("../types");
+const platform_1 = require("./platform");
+const channel_to_dto_map_1 = require("./channels/channel-to-dto-map");
+const constants_1 = require("../../constants");
+var ChannelAction;
+(function (ChannelAction) {
+    ChannelAction["READ_POSTS"] = "readPosts";
+    ChannelAction["WRITE_POSTS"] = "writePosts";
+    ChannelAction["MODERATE_CHANNEL"] = "moderateChannel";
+    ChannelAction["DELETE_CHANNEL"] = "deleteChannel";
+    ChannelAction["IS_MODERATOR"] = "isModerator";
+    ChannelAction["IS_MANAGER"] = "isManager";
+    ChannelAction["IS_OWNER"] = "isOwner";
+})(ChannelAction || (ChannelAction = {}));
+// See confluence for privs documentation: https://confluencewikidev.esri.com/pages/viewpage.action?pageId=153747776#Roles&Privileges-ApplicationtoChannels
+const CHANNEL_ACTION_PRIVS = {
+    // permissions
+    UPDATE_OWNERS: [types_1.Role.OWNER],
+    UPDATE_MANAGERS: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    UPDATE_MODERATORS: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    UPDATE_ORGS: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    UPDATE_GROUPS: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    UPDATE_USERS: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    UPDATE_AUTHENTICATED_USERS: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    UPDATE_ANONYMOUS_USERS: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    // settings
+    UPDATE_POST_REPLIES: [types_1.Role.OWNER, types_1.Role.MANAGE, types_1.Role.MODERATE],
+    UPDATE_POST_REACTIONS: [types_1.Role.OWNER, types_1.Role.MANAGE, types_1.Role.MODERATE],
+    UPDATE_POST_AS_ANONYMOUS: [types_1.Role.OWNER, types_1.Role.MANAGE, types_1.Role.MODERATE],
+    UPDATE_ALLOWED_REACTIONS: [types_1.Role.OWNER, types_1.Role.MANAGE, types_1.Role.MODERATE],
+    UPDATE_DEFAULT_POST_STATUS: [types_1.Role.OWNER, types_1.Role.MANAGE, types_1.Role.MODERATE],
+    UPDATE_BLOCKED_WORDS: [types_1.Role.OWNER, types_1.Role.MANAGE, types_1.Role.MODERATE],
+    UPDATE_CHANNEL_NAME: [types_1.Role.OWNER, types_1.Role.MANAGE],
+    UPDATE_SOFT_DELETE_SETTING: [types_1.Role.OWNER, types_1.Role.MANAGE],
+};
+/**
+ * @internal
+ * @hidden
+ */
+class ChannelPermission {
+    constructor(channel) {
+        this.ALLOWED_GROUP_MEMBER_TYPES = ["owner", "admin", "member"];
+        if (channel.channelAcl === undefined) {
+            throw new Error("channel.channelAcl is required for ChannelPermission checks");
+        }
+        this.existingChannel = channel;
+        this.isChannelAclEmpty = channel.channelAcl.length === 0;
+        this.permissionsByCategory = {};
+        channel.channelAcl.forEach((permission) => {
+            var _c;
+            const { category } = permission;
+            ((_c = this.permissionsByCategory[category]) === null || _c === void 0 ? void 0 : _c.push(permission)) ||
+                (this.permissionsByCategory[category] = [permission]);
+        });
+    }
+    canPostToChannel(user) {
+        if (this.canAnyUser(ChannelAction.WRITE_POSTS)) {
+            return true;
+        }
+        if (this.isUserUnAuthenticated(user)) {
+            return false;
+        }
+        return (this.canAnyAuthenticatedUser(ChannelAction.WRITE_POSTS) ||
+            this.canSomeUser(ChannelAction.WRITE_POSTS, user) ||
+            this.canSomeUserGroup(ChannelAction.WRITE_POSTS, user) ||
+            this.canSomeUserOrg(ChannelAction.WRITE_POSTS, user));
+    }
+    canCreateChannel(user) {
+        if (this.isUserUnAuthenticated(user) || this.isChannelAclEmpty) {
+            return false;
+        }
+        return (this.userCanAddAnonymousToAcl(user) &&
+            this.userCanAddUnauthenticatedToAcl(user) &&
+            this.userCanAddAllGroupsToAcl(user) &&
+            this.userCanAddAllOrgsToAcl(user) &&
+            this.userCanAddUsersToAcl(user));
+    }
+    canModerateChannel(user) {
+        if (this.isUserUnAuthenticated(user)) {
+            return false;
+        }
+        return (this.canSomeUser(ChannelAction.MODERATE_CHANNEL, user) ||
+            this.canSomeUserGroup(ChannelAction.MODERATE_CHANNEL, user) ||
+            this.canSomeUserOrg(ChannelAction.MODERATE_CHANNEL, user));
+    }
+    canReadChannel(user) {
+        if (this.canAnyUser(ChannelAction.READ_POSTS)) {
+            return true;
+        }
+        if (this.isUserUnAuthenticated(user)) {
+            return false;
+        }
+        return (this.canAnyAuthenticatedUser(ChannelAction.READ_POSTS) ||
+            this.canSomeUser(ChannelAction.READ_POSTS, user) ||
+            this.canSomeUserGroup(ChannelAction.READ_POSTS, user) ||
+            this.canSomeUserOrg(ChannelAction.READ_POSTS, user));
+    }
+    canDeleteChannel(user) {
+        if (this.isUserUnAuthenticated(user)) {
+            return false;
+        }
+        return (this.canSomeUser(ChannelAction.DELETE_CHANNEL, user) ||
+            this.canSomeUserGroup(ChannelAction.DELETE_CHANNEL, user) ||
+            this.canSomeUserOrg(ChannelAction.DELETE_CHANNEL, user));
+    }
+    /**
+     * Ensure the user has rights to update the channel before calling this method
+     * Ex: canModerateChannel
+     */
+    canUpdateProperties(user, updateData = {}) {
+        if (Object.keys(updateData).length === 0) {
+            return true;
+        }
+        const userRole = this.determineUserRole(user);
+        const updates = channel_to_dto_map_1.dtoToChannel(updateData);
+        if (
+        // settings
+        (this.isChanged(updates.allowReply, this.existingChannel.allowReply) &&
+            !CHANNEL_ACTION_PRIVS.UPDATE_POST_REPLIES.includes(userRole)) ||
+            (this.isChanged(updates.allowReaction, this.existingChannel.allowReaction) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_POST_REACTIONS.includes(userRole)) ||
+            (this.isChanged(updates.allowAsAnonymous, this.existingChannel.allowAsAnonymous) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_POST_AS_ANONYMOUS.includes(userRole)) ||
+            (this.isStringArrayChanged(updates.allowedReactions, this.existingChannel.allowedReactions) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_ALLOWED_REACTIONS.includes(userRole)) ||
+            (this.isChanged(updates.defaultPostStatus, this.existingChannel.defaultPostStatus) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_DEFAULT_POST_STATUS.includes(userRole)) ||
+            (this.isStringArrayChanged(updates.blockWords, this.existingChannel.blockWords) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_BLOCKED_WORDS.includes(userRole)) ||
+            (this.isChanged(updates.name, this.existingChannel.name) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_CHANNEL_NAME.includes(userRole)) ||
+            (this.isChanged(updates.softDelete, this.existingChannel.softDelete) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_SOFT_DELETE_SETTING.includes(userRole)) ||
+            // permissions
+            (this.isRoleChanged(types_1.Role.OWNER, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_OWNERS.includes(userRole)) ||
+            (this.isRoleChanged(types_1.Role.MANAGE, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_MANAGERS.includes(userRole)) ||
+            (this.isRoleChanged(types_1.Role.MODERATE, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_MODERATORS.includes(userRole)) ||
+            (this.isCategoryChanged(types_1.AclCategory.ORG, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_ORGS.includes(userRole)) ||
+            (this.isCategoryChanged(types_1.AclCategory.GROUP, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_GROUPS.includes(userRole)) ||
+            (this.isCategoryChanged(types_1.AclCategory.USER, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_USERS.includes(userRole)) ||
+            (this.isCategoryChanged(types_1.AclCategory.AUTHENTICATED_USER, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_AUTHENTICATED_USERS.includes(userRole)) ||
+            (this.isCategoryChanged(types_1.AclCategory.ANONYMOUS_USER, updates.channelAcl) &&
+                !CHANNEL_ACTION_PRIVS.UPDATE_ANONYMOUS_USERS.includes(userRole))) {
+            return false;
+        }
+        return true;
+    }
+    isChanged(updateValue, existingValue) {
+        return updateValue !== undefined && updateValue !== existingValue;
+    }
+    isStringArrayChanged(_a, _b) {
+        const a = _a !== null && _a !== void 0 ? _a : [];
+        const b = _b !== null && _b !== void 0 ? _b : [];
+        return (a.filter((x) => !b.includes(x)).length !== 0 ||
+            b.filter((x) => !a.includes(x)).length !== 0);
+    }
+    isRoleChanged(role, aclUpdates) {
+        if (!aclUpdates) {
+            return false;
+        }
+        // ex: ['org_admin_1111_owner', 'group_admin_222_owner', 'user_undefined_333_owner]
+        const existing = this.existingChannel.channelAcl
+            .filter((acl) => acl.role === role)
+            .map((acl) => `${acl.category}_${acl.subCategory}_${acl.key}_${role}`);
+        const changed = aclUpdates
+            .filter((acl) => acl.role === role)
+            .map((acl) => `${acl.category}_${acl.subCategory}_${acl.key}_${role}`);
+        return this.isStringArrayChanged(existing, changed);
+    }
+    isCategoryChanged(category, aclUpdates) {
+        var _c;
+        if (!aclUpdates) {
+            return false;
+        }
+        // ex: ['org_admin_111_OWNER', 'org_member_111_readWrite', 'group_member_2222_read']
+        const existing = ((_c = this.permissionsByCategory[category]) !== null && _c !== void 0 ? _c : []).map((acl) => `${category}_${acl.subCategory}_${acl.key}_${acl.role}`);
+        const changed = aclUpdates
+            .filter((acl) => acl.category === category)
+            .map((acl) => `${category}_${acl.subCategory}_${acl.key}_${acl.role}`);
+        return this.isStringArrayChanged(existing, changed);
+    }
+    canAnyUser(action) {
+        var _c;
+        const anonymousUserRole = (_c = this.permissionsByCategory[types_1.AclCategory.ANONYMOUS_USER]) === null || _c === void 0 ? void 0 : _c[0].role;
+        return channelActionLookup(action).includes(anonymousUserRole);
+    }
+    canAnyAuthenticatedUser(action) {
+        var _c;
+        const role = (_c = this.permissionsByCategory[types_1.AclCategory.AUTHENTICATED_USER]) === null || _c === void 0 ? void 0 : _c[0].role;
+        return channelActionLookup(action).includes(role);
+    }
+    canSomeUser(action, user) {
+        var _c;
+        const userPermissions = (_c = this.permissionsByCategory[types_1.AclCategory.USER]) !== null && _c !== void 0 ? _c : [];
+        const username = user.username;
+        return userPermissions.some((permission) => {
+            const { role, key } = permission;
+            return key === username && channelActionLookup(action).includes(role);
+        });
+    }
+    canSomeUserGroup(action, user) {
+        var _c;
+        const groupAccessControls = (_c = this.permissionsByCategory[types_1.AclCategory.GROUP]) !== null && _c !== void 0 ? _c : [];
+        const userGroupsById = this.mapUserGroupsById(user.groups);
+        return groupAccessControls.some((permission) => {
+            const group = userGroupsById[permission.key];
+            if (action === ChannelAction.READ_POSTS) {
+                if (!group) {
+                    return false;
+                }
+            }
+            else {
+                if (!group || !isGroupDiscussable(group)) {
+                    return false;
+                }
+            }
+            return (doesPermissionAllowGroupMemberType(permission, group) &&
+                channelActionLookup(action).includes(permission.role));
+        });
+    }
+    canSomeUserOrg(action, user) {
+        var _c;
+        const orgPermissions = (_c = this.permissionsByCategory[types_1.AclCategory.ORG]) !== null && _c !== void 0 ? _c : [];
+        return orgPermissions.some((permission) => {
+            if (permission.key !== user.orgId) {
+                return false;
+            }
+            return (doesPermissionAllowOrgRole(permission, user) &&
+                channelActionLookup(action).includes(permission.role));
+        });
+    }
+    userCanAddAnonymousToAcl(user) {
+        if (!this.permissionsByCategory[types_1.AclCategory.ANONYMOUS_USER]) {
+            return true;
+        }
+        return (platform_1.isOrgAdmin(user) ||
+            platform_1.userHasPrivilege(user, "portal:admin:shareToPublic") ||
+            platform_1.userHasPrivilege(user, "portal:user:shareToPublic"));
+    }
+    userCanAddUnauthenticatedToAcl(user) {
+        if (!this.permissionsByCategory[types_1.AclCategory.AUTHENTICATED_USER]) {
+            return true;
+        }
+        return (platform_1.isOrgAdmin(user) ||
+            platform_1.userHasPrivilege(user, "portal:admin:shareToPublic") ||
+            platform_1.userHasPrivilege(user, "portal:user:shareToPublic"));
+    }
+    userCanAddAllGroupsToAcl(user) {
+        const groupPermissions = this.permissionsByCategory[types_1.AclCategory.GROUP];
+        const userGroupsById = this.mapUserGroupsById(user.groups);
+        if (!groupPermissions) {
+            return true;
+        }
+        return groupPermissions.every((permission) => {
+            const userGroup = userGroupsById[permission.key];
+            return (userGroup &&
+                this.isMemberTypeAuthorized(userGroup) &&
+                isGroupDiscussable(userGroup));
+        });
+    }
+    userCanAddAllOrgsToAcl(user) {
+        const orgPermissions = this.permissionsByCategory[types_1.AclCategory.ORG];
+        if (!orgPermissions) {
+            return true;
+        }
+        return ((platform_1.isOrgAdmin(user) ||
+            platform_1.userHasPrivilege(user, "portal:admin:shareToOrg") ||
+            platform_1.userHasPrivilege(user, "portal:user:shareToOrg")) &&
+            this.isEveryPermissionForUserOrg(user.orgId, orgPermissions));
+    }
+    isEveryPermissionForUserOrg(userOrgId, orgPermissions) {
+        return orgPermissions.every((permission) => {
+            const { key: orgId } = permission;
+            return userOrgId === orgId;
+        });
+    }
+    // for now user permissions are disabled on channel create
+    // since users are not notified and cannot opt out
+    userCanAddUsersToAcl(user) {
+        const userPermissions = this.permissionsByCategory[types_1.AclCategory.USER];
+        return !userPermissions;
+    }
+    isUserUnAuthenticated(user) {
+        return user.username === null || user.username === undefined;
+    }
+    mapUserGroupsById(groups) {
+        return groups.reduce((accum, userGroup) => {
+            accum[userGroup.id] = userGroup;
+            return accum;
+        }, {});
+    }
+    isMemberTypeAuthorized(userGroup) {
+        const { userMembership: { memberType }, } = userGroup;
+        return this.ALLOWED_GROUP_MEMBER_TYPES.includes(memberType);
+    }
+    determineUserRole(user) {
+        if (this.isOwner(user)) {
+            return types_1.Role.OWNER;
+        }
+        else if (this.isManager(user)) {
+            return types_1.Role.MANAGE;
+        }
+        else if (this.isModerator(user)) {
+            return types_1.Role.MODERATE;
+        }
+        else {
+            return types_1.Role.READ;
+        }
+    }
+    isOwner(user) {
+        return (this.canSomeUser(ChannelAction.IS_OWNER, user) ||
+            this.canSomeUserGroup(ChannelAction.IS_OWNER, user) ||
+            this.canSomeUserOrg(ChannelAction.IS_OWNER, user));
+    }
+    isManager(user) {
+        return (this.canSomeUser(ChannelAction.IS_MANAGER, user) ||
+            this.canSomeUserGroup(ChannelAction.IS_MANAGER, user) ||
+            this.canSomeUserOrg(ChannelAction.IS_MANAGER, user));
+    }
+    isModerator(user) {
+        return (this.canSomeUser(ChannelAction.IS_MODERATOR, user) ||
+            this.canSomeUserGroup(ChannelAction.IS_MODERATOR, user) ||
+            this.canSomeUserOrg(ChannelAction.IS_MODERATOR, user));
+    }
+}
+exports.ChannelPermission = ChannelPermission;
+function isGroupDiscussable(userGroup) {
+    const { typeKeywords = [] } = userGroup;
+    return !typeKeywords.includes(constants_1.CANNOT_DISCUSS);
+}
+function doesPermissionAllowGroupMemberType(permission, group) {
+    if (permission.category !== types_1.AclCategory.GROUP ||
+        group.userMembership.memberType === "none") {
+        return false;
+    }
+    return (
+    // group owners and admins can do anything permissioned with SubCategory "member"
+    group.userMembership.memberType === "owner" ||
+        group.userMembership.memberType === "admin" ||
+        permission.subCategory === types_1.AclSubCategory.MEMBER);
+}
+function doesPermissionAllowOrgRole(permission, user) {
+    return (permission.category === types_1.AclCategory.ORG &&
+        (permission.subCategory === types_1.AclSubCategory.MEMBER ||
+            (permission.subCategory === types_1.AclSubCategory.ADMIN && platform_1.isOrgAdmin(user))));
+}
+function channelActionLookup(action) {
+    // channel actions
+    if (action === ChannelAction.WRITE_POSTS) {
+        return [types_1.Role.WRITE, types_1.Role.READWRITE, types_1.Role.MODERATE, types_1.Role.MANAGE, types_1.Role.OWNER];
+    }
+    if (action === ChannelAction.MODERATE_CHANNEL) {
+        return [types_1.Role.MODERATE, types_1.Role.MANAGE, types_1.Role.OWNER];
+    }
+    if (action === ChannelAction.DELETE_CHANNEL) {
+        return [types_1.Role.OWNER];
+    }
+    // channel update actions
+    if (action === ChannelAction.IS_MODERATOR) {
+        return [types_1.Role.MODERATE];
+    }
+    if (action === ChannelAction.IS_MANAGER) {
+        return [types_1.Role.MANAGE];
+    }
+    if (action === ChannelAction.IS_OWNER) {
+        return [types_1.Role.OWNER];
+    }
+    // default to read action
+    return [types_1.Role.READ, types_1.Role.READWRITE, types_1.Role.MODERATE, types_1.Role.MANAGE, types_1.Role.OWNER];
+}
+//# sourceMappingURL=channel-permission.js.map

package/dist/node/discussions/api/utils/channel-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-permission.js","sourceRoot":"","sources":["../../../../../src/discussions/api/utils/channel-permission.ts"],"names":[],"mappings":";;;AACA,oCASkB;AAClB,yCAA0D;AAC1D,sEAA6D;AAC7D,+CAAiD;AAMjD,IAAK,aAQJ;AARD,WAAK,aAAa;IAChB,yCAAwB,CAAA;IACxB,2CAA0B,CAAA;IAC1B,qDAAoC,CAAA;IACpC,iDAAgC,CAAA;IAChC,6CAA4B,CAAA;IAC5B,yCAAwB,CAAA;IACxB,qCAAoB,CAAA;AACtB,CAAC,EARI,aAAa,KAAb,aAAa,QAQjB;AAED,2JAA2J;AAC3J,MAAM,oBAAoB,GAA2B;IACnD,cAAc;IACd,aAAa,EAAE,CAAC,YAAI,CAAC,KAAK,CAAC;IAC3B,eAAe,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IAC1C,iBAAiB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IACtC,aAAa,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IACxC,YAAY,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IACvC,0BAA0B,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IACrD,sBAAsB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IACjD,WAAW;IACX,mBAAmB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC;IAC7D,qBAAqB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC;IAC/D,wBAAwB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC;IAClE,wBAAwB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC;IAClE,0BAA0B,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC;IACpE,oBAAoB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC;IAC9D,mBAAmB,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;IAC9C,0BAA0B,EAAE,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,MAAM,CAAC;CACtD,CAAC;AAEF;;;GAGG;AACH,MAAa,iBAAiB;IAM5B,YAAY,OAAiB;QALZ,+BAA0B,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAMzE,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE;YACpC,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;SACH;QACD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAC/B,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC;QAEhC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;;YACxC,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;YAChC,OAAA,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,0CAAE,IAAI,CAAC,UAAU;gBACnD,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,IAAsB;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,IAAI,CAAC;SACb;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACpC,OAAO,KAAK,CAAC;SACd;QAED,OAAO,CACL,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,WAAW,CAAC;YACvD,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC;YACjD,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC;YACtD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CACrD,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,IAAsB;QACrC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE;YAC9D,OAAO,KAAK,CAAC;SACd;QAED,OAAO,CACL,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC;YACzC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;YACjC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAChC,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,IAAsB;QACvC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACpC,OAAO,KAAK,CAAC;SACd;QAED,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC;YACtD,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC;YAC3D,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAC1D,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,IAAsB;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE;YAC7C,OAAO,IAAI,CAAC;SACb;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACpC,OAAO,KAAK,CAAC;SACd;QAED,OAAO,CACL,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,UAAU,CAAC;YACtD,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;YAChD,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;YACrD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CACpD,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,IAAsB;QACrC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACpC,OAAO,KAAK,CAAC;SACd;QAED,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC;YACpD,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC;YACzD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,CACxD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,mBAAmB,CACjB,IAAsB,EACtB,aAA+B,EAAE;QAEjC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;YACxC,OAAO,IAAI,CAAC;SACb;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,iCAAY,CAAC,UAAU,CAAC,CAAC;QAEzC;QACE,WAAW;QACX,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;YAClE,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/D,CAAC,IAAI,CAAC,SAAS,CACb,OAAO,CAAC,aAAa,EACrB,IAAI,CAAC,eAAe,CAAC,aAAa,CACnC;gBACC,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjE,CAAC,IAAI,CAAC,SAAS,CACb,OAAO,CAAC,gBAAgB,EACxB,IAAI,CAAC,eAAe,CAAC,gBAAgB,CACtC;gBACC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpE,CAAC,IAAI,CAAC,oBAAoB,CACxB,OAAO,CAAC,gBAAgB,EACxB,IAAI,CAAC,eAAe,CAAC,gBAAgB,CACtC;gBACC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpE,CAAC,IAAI,CAAC,SAAS,CACb,OAAO,CAAC,iBAAiB,EACzB,IAAI,CAAC,eAAe,CAAC,iBAAiB,CACvC;gBACC,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtE,CAAC,IAAI,CAAC,oBAAoB,CACxB,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,eAAe,CAAC,UAAU,CAChC;gBACC,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;gBACtD,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/D,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;gBAClE,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtE,cAAc;YACd,CAAC,IAAI,CAAC,aAAa,CAAC,YAAI,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;gBACjD,CAAC,oBAAoB,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,IAAI,CAAC,aAAa,CAAC,YAAI,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC;gBAClD,CAAC,oBAAoB,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3D,CAAC,IAAI,CAAC,aAAa,CAAC,YAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC;gBACpD,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC,IAAI,CAAC,iBAAiB,CAAC,mBAAW,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;gBAC1D,CAAC,oBAAoB,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,CAAC,IAAI,CAAC,iBAAiB,CAAC,mBAAW,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;gBAC5D,CAAC,oBAAoB,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,IAAI,CAAC,iBAAiB,CAAC,mBAAW,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;gBAC3D,CAAC,oBAAoB,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxD,CAAC,IAAI,CAAC,iBAAiB,CACrB,mBAAW,CAAC,kBAAkB,EAC9B,OAAO,CAAC,UAAU,CACnB;gBACC,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtE,CAAC,IAAI,CAAC,iBAAiB,CAAC,mBAAW,CAAC,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC;gBACrE,CAAC,oBAAoB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAClE;YACA,OAAO,KAAK,CAAC;SACd;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CACf,WAAkD,EAClD,aAAoD;QAEpD,OAAO,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,aAAa,CAAC;IACpE,CAAC;IAEO,oBAAoB,CAC1B,EAA+B,EAC/B,EAA+B;QAE/B,MAAM,CAAC,GAAG,EAAE,aAAF,EAAE,cAAF,EAAE,GAAI,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,EAAE,aAAF,EAAE,cAAF,EAAE,GAAI,EAAE,CAAC;QACnB,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;YAC5C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAC7C,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,IAAU,EAAE,UAAoC;QACpE,IAAI,CAAC,UAAU,EAAE;YACf,OAAO,KAAK,CAAC;SACd;QACD,mFAAmF;QACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU;aAC7C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;aAClC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,UAAU;aACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;aAClC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAEO,iBAAiB,CACvB,QAAqB,EACrB,UAAoC;;QAEpC,IAAI,CAAC,UAAU,EAAE;YACf,OAAO,KAAK,CAAC;SACd;QACD,oFAAoF;QACpF,MAAM,QAAQ,GAAG,OAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,mCAAI,EAAE,CAAC,CAAC,GAAG,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CACjE,CAAC;QACF,MAAM,OAAO,GAAG,UAAU;aACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;aAC1C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAEO,UAAU,CAAC,MAAqB;;QACtC,MAAM,iBAAiB,SACrB,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,cAAc,CAAC,0CAAG,CAAC,EAAE,IAAI,CAAC;QAEnE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACjE,CAAC;IAEO,uBAAuB,CAAC,MAAqB;;QACnD,MAAM,IAAI,SACR,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,kBAAkB,CAAC,0CAAG,CAAC,EAAE,IAAI,CAAC;QACvE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAEO,WAAW,CAAC,MAAqB,EAAE,IAAsB;;QAC/D,MAAM,eAAe,SAAG,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,IAAI,CAAC,mCAAI,EAAE,CAAC;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/B,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;YAEjC,OAAO,GAAG,KAAK,QAAQ,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,MAAqB,EAAE,IAAsB;;QACpE,MAAM,mBAAmB,SACvB,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,KAAK,CAAC,mCAAI,EAAE,CAAC;QAEtD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE3D,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAE7C,IAAI,MAAM,KAAK,aAAa,CAAC,UAAU,EAAE;gBACvC,IAAI,CAAC,KAAK,EAAE;oBACV,OAAO,KAAK,CAAC;iBACd;aACF;iBAAM;gBACL,IAAI,CAAC,KAAK,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE;oBACxC,OAAO,KAAK,CAAC;iBACd;aACF;YAED,OAAO,CACL,kCAAkC,CAAC,UAAU,EAAE,KAAK,CAAC;gBACrD,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CACtD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,MAAqB,EAAE,IAAsB;;QAClE,MAAM,cAAc,SAAG,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC;QAEzE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACxC,IAAI,UAAU,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE;gBACjC,OAAO,KAAK,CAAC;aACd;YAED,OAAO,CACL,0BAA0B,CAAC,UAAU,EAAE,IAAI,CAAC;gBAC5C,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CACtD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,wBAAwB,CAAC,IAAsB;QACrD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,cAAc,CAAC,EAAE;YAC3D,OAAO,IAAI,CAAC;SACb;QACD,OAAO,CACL,qBAAU,CAAC,IAAI,CAAC;YAChB,2BAAgB,CAAC,IAAI,EAAE,4BAA4B,CAAC;YACpD,2BAAgB,CAAC,IAAI,EAAE,2BAA2B,CAAC,CACpD,CAAC;IACJ,CAAC;IAEO,8BAA8B,CAAC,IAAsB;QAC3D,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,kBAAkB,CAAC,EAAE;YAC/D,OAAO,IAAI,CAAC;SACb;QACD,OAAO,CACL,qBAAU,CAAC,IAAI,CAAC;YAChB,2BAAgB,CAAC,IAAI,EAAE,4BAA4B,CAAC;YACpD,2BAAgB,CAAC,IAAI,EAAE,2BAA2B,CAAC,CACpD,CAAC;IACJ,CAAC;IAEO,wBAAwB,CAAC,IAAsB;QACrD,MAAM,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE3D,IAAI,CAAC,gBAAgB,EAAE;YACrB,OAAO,IAAI,CAAC;SACb;QAED,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;YAC3C,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAEjD,OAAO,CACL,SAAS;gBACT,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC;gBACtC,kBAAkB,CAAC,SAAS,CAAC,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,sBAAsB,CAAC,IAAsB;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,GAAG,CAAC,CAAC;QAEnE,IAAI,CAAC,cAAc,EAAE;YACnB,OAAO,IAAI,CAAC;SACb;QAED,OAAO,CACL,CAAC,qBAAU,CAAC,IAAI,CAAC;YACf,2BAAgB,CAAC,IAAI,EAAE,yBAAyB,CAAC;YACjD,2BAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;YACnD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAC7D,CAAC;IACJ,CAAC;IAEO,2BAA2B,CACjC,SAAiB,EACjB,cAAiD;QAEjD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;YACzC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;YAClC,OAAO,SAAS,KAAK,KAAK,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,kDAAkD;IAC1C,oBAAoB,CAAC,IAAsB;QACjD,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,CAAC,mBAAW,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,eAAe,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAAC,IAAsB;QAClD,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IAC/D,CAAC;IAEO,iBAAiB,CAAC,MAAgB;QACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YACxC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC,EAAE,EAA4B,CAAC,CAAC;IACnC,CAAC;IAEO,sBAAsB,CAAC,SAAiB;QAC9C,MAAM,EACJ,cAAc,EAAE,EAAE,UAAU,EAAE,GAC/B,GAAG,SAAS,CAAC;QACd,OAAO,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAEO,iBAAiB,CAAC,IAAsB;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACtB,OAAO,YAAI,CAAC,KAAK,CAAC;SACnB;aAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YAC/B,OAAO,YAAI,CAAC,MAAM,CAAC;SACpB;aAAM,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;YACjC,OAAO,YAAI,CAAC,QAAQ,CAAC;SACtB;aAAM;YACL,OAAO,YAAI,CAAC,IAAI,CAAC;SAClB;IACH,CAAC;IAEO,OAAO,CAAC,IAAsB;QACpC,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;YACnD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAClD,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,IAAsB;QACtC,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;YAChD,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;YACrD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CACpD,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,IAAsB;QACxC,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,CACtD,CAAC;IACJ,CAAC;CACF;AA1ZD,8CA0ZC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,MAAM,EAAE,YAAY,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,0BAAc,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kCAAkC,CACzC,UAAiC,EACjC,KAAa;IAEb,IACE,UAAU,CAAC,QAAQ,KAAK,mBAAW,CAAC,KAAK;QACzC,KAAK,CAAC,cAAc,CAAC,UAAU,KAAK,MAAM,EAC1C;QACA,OAAO,KAAK,CAAC;KACd;IAED,OAAO;IACL,iFAAiF;IACjF,KAAK,CAAC,cAAc,CAAC,UAAU,KAAK,OAAO;QAC3C,KAAK,CAAC,cAAc,CAAC,UAAU,KAAK,OAAO;QAC3C,UAAU,CAAC,WAAW,KAAK,sBAAc,CAAC,MAAM,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,UAAiC,EACjC,IAAsB;IAEtB,OAAO,CACL,UAAU,CAAC,QAAQ,KAAK,mBAAW,CAAC,GAAG;QACvC,CAAC,UAAU,CAAC,WAAW,KAAK,sBAAc,CAAC,MAAM;YAC/C,CAAC,UAAU,CAAC,WAAW,KAAK,sBAAc,CAAC,KAAK,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAqB;IAChD,kBAAkB;IAClB,IAAI,MAAM,KAAK,aAAa,CAAC,WAAW,EAAE;QACxC,OAAO,CAAC,YAAI,CAAC,KAAK,EAAE,YAAI,CAAC,SAAS,EAAE,YAAI,CAAC,QAAQ,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,KAAK,CAAC,CAAC;KAC7E;IAED,IAAI,MAAM,KAAK,aAAa,CAAC,gBAAgB,EAAE;QAC7C,OAAO,CAAC,YAAI,CAAC,QAAQ,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,KAAK,CAAC,CAAC;KACjD;IAED,IAAI,MAAM,KAAK,aAAa,CAAC,cAAc,EAAE;QAC3C,OAAO,CAAC,YAAI,CAAC,KAAK,CAAC,CAAC;KACrB;IAED,yBAAyB;IACzB,IAAI,MAAM,KAAK,aAAa,CAAC,YAAY,EAAE;QACzC,OAAO,CAAC,YAAI,CAAC,QAAQ,CAAC,CAAC;KACxB;IAED,IAAI,MAAM,KAAK,aAAa,CAAC,UAAU,EAAE;QACvC,OAAO,CAAC,YAAI,CAAC,MAAM,CAAC,CAAC;KACtB;IAED,IAAI,MAAM,KAAK,aAAa,CAAC,QAAQ,EAAE;QACrC,OAAO,CAAC,YAAI,CAAC,KAAK,CAAC,CAAC;KACrB;IAED,yBAAyB;IACzB,OAAO,CAAC,YAAI,CAAC,IAAI,EAAE,YAAI,CAAC,SAAS,EAAE,YAAI,CAAC,QAAQ,EAAE,YAAI,CAAC,MAAM,EAAE,YAAI,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC"}

package/dist/node/discussions/api/utils/channels/can-create-channel-v2.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canCreateChannelV2 = void 0;
+const channel_permission_1 = require("../channel-permission");
+/**
+ * Utility to determine if User has privileges to create a channel with the defined permissions
+ * @export
+ * @param channel
+ * @param user
+ * @returns {boolean}
+ */
+function canCreateChannelV2(channel, user = {}) {
+    const channelPermission = new channel_permission_1.ChannelPermission(channel);
+    return channelPermission.canCreateChannel(user);
+}
+exports.canCreateChannelV2 = canCreateChannelV2;
+//# sourceMappingURL=can-create-channel-v2.js.map

package/dist/node/discussions/api/utils/channels/can-create-channel-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-create-channel-v2.js","sourceRoot":"","sources":["../../../../../../src/discussions/api/utils/channels/can-create-channel-v2.ts"],"names":[],"mappings":";;;AAEA,8DAA0D;AAE1D;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAChC,OAAiB,EACjB,OAAiC,EAAE;IAEnC,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,IAAwB,CAAC,CAAC;AACtE,CAAC;AAND,gDAMC"}

package/dist/node/discussions/api/utils/channels/can-create-channel.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canCreateChannel = void 0;
+const types_1 = require("../../types");
+const platform_1 = require("../platform");
+const constants_1 = require("../../../constants");
+/**
+ * Utility to determine if User has privileges to create a channel with the defined permissions
+ * @deprecated replace with canCreateChannelV2 for v2 discussions
+ * @export
+ * @param channel
+ * @param user
+ * @returns {boolean}
+ */
+function canCreateChannel(channel, user = {}) {
+    const { access, groups, orgs } = channel;
+    return isAuthorizedToCreateByLegacyPermissions(user, {
+        access,
+        groups,
+        orgs,
+    });
+}
+exports.canCreateChannel = canCreateChannel;
+// Once ACL usage is enforced, we will remove authorization by legacy permissions
+function isAuthorizedToCreateByLegacyPermissions(user, channelParams) {
+    const { username, groups: userGroups = [] } = user;
+    const { access, groups: channelGroupIds = [], orgs: channelOrgs, } = channelParams;
+    // ensure authenticated
+    if (!username) {
+        return false;
+    }
+    if (access === types_1.SharingAccess.PRIVATE) {
+        return canAllowGroupsLegacy(userGroups, channelGroupIds);
+    }
+    // public or org access
+    return (canAllowGroupsLegacy(userGroups, channelGroupIds) &&
+        isLegacyChannelOrgAdmin(user, channelOrgs));
+}
+function canAllowGroupsLegacy(userGroups, channelGroupIds) {
+    return channelGroupIds.every((channelGroupId) => {
+        const userGroup = userGroups.find((group) => group.id === channelGroupId);
+        return (userGroup &&
+            isMemberTypeAuthorized(userGroup) &&
+            isGroupDiscussable(userGroup));
+    });
+}
+function isMemberTypeAuthorized(userGroup) {
+    const { userMembership: { memberType }, } = userGroup;
+    return ["owner", "admin", "member"].includes(memberType);
+}
+function isGroupDiscussable(userGroup) {
+    const { typeKeywords = [] } = userGroup;
+    return !typeKeywords.includes(constants_1.CANNOT_DISCUSS);
+}
+function isLegacyChannelOrgAdmin(user, channelOrgs) {
+    return platform_1.isOrgAdmin(user) && channelOrgs.includes(user.orgId);
+}
+//# sourceMappingURL=can-create-channel.js.map

package/dist/node/discussions/api/utils/channels/can-create-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-create-channel.js","sourceRoot":"","sources":["../../../../../../src/discussions/api/utils/channels/can-create-channel.ts"],"names":[],"mappings":";;;AACA,uCAAwE;AACxE,0CAAyC;AACzC,kDAAoD;AAIpD;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,OAAiB,EACjB,OAAiC,EAAE;IAEnC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzC,OAAO,uCAAuC,CAAC,IAAI,EAAE;QACnD,MAAM;QACN,MAAM;QACN,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAXD,4CAWC;AAED,iFAAiF;AACjF,SAAS,uCAAuC,CAC9C,IAA8B,EAC9B,aAAwC;IAExC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IACnD,MAAM,EACJ,MAAM,EACN,MAAM,EAAE,eAAe,GAAG,EAAE,EAC5B,IAAI,EAAE,WAAW,GAClB,GAAG,aAAa,CAAC;IAElB,uBAAuB;IACvB,IAAI,CAAC,QAAQ,EAAE;QACb,OAAO,KAAK,CAAC;KACd;IAED,IAAI,MAAM,KAAK,qBAAa,CAAC,OAAO,EAAE;QACpC,OAAO,oBAAoB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;KAC1D;IAED,uBAAuB;IACvB,OAAO,CACL,oBAAoB,CAAC,UAAU,EAAE,eAAe,CAAC;QACjD,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAoB,EACpB,eAAyB;IAEzB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;QAE1E,OAAO,CACL,SAAS;YACT,sBAAsB,CAAC,SAAS,CAAC;YACjC,kBAAkB,CAAC,SAAS,CAAC,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB;IAC/C,MAAM,EACJ,cAAc,EAAE,EAAE,UAAU,EAAE,GAC/B,GAAG,SAAS,CAAC;IACd,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,MAAM,EAAE,YAAY,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,0BAAc,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAA8B,EAC9B,WAAqB;IAErB,OAAO,qBAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC"}

package/dist/node/discussions/api/utils/channels/can-delete-channel-v2.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canDeleteChannelV2 = void 0;
+const channel_permission_1 = require("../channel-permission");
+const portal_privilege_1 = require("../portal-privilege");
+/**
+ * Utility to determine if User has privileges to delete a channel
+ * @export
+ * @param channel
+ * @param user
+ * @returns {boolean}
+ */
+function canDeleteChannelV2(channel, user = {}) {
+    if (portal_privilege_1.hasOrgAdminDeleteRights(user, channel.orgId)) {
+        return true;
+    }
+    const channelPermission = new channel_permission_1.ChannelPermission(channel);
+    return channelPermission.canDeleteChannel(user);
+}
+exports.canDeleteChannelV2 = canDeleteChannelV2;
+//# sourceMappingURL=can-delete-channel-v2.js.map

package/dist/node/discussions/api/utils/channels/can-delete-channel-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-delete-channel-v2.js","sourceRoot":"","sources":["../../../../../../src/discussions/api/utils/channels/can-delete-channel-v2.ts"],"names":[],"mappings":";;;AAEA,8DAA0D;AAC1D,0DAA8D;AAE9D;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAChC,OAAiB,EACjB,OAAiC,EAAE;IAEnC,IAAI,0CAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAChD,OAAO,IAAI,CAAC;KACb;IAED,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,IAAwB,CAAC,CAAC;AACtE,CAAC;AAVD,gDAUC"}

package/dist/node/discussions/api/utils/channels/can-delete-channel.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canDeleteChannel = void 0;
+const is_authorized_to_modify_channel_by_legacy_permissions_1 = require("./is-authorized-to-modify-channel-by-legacy-permissions");
+const portal_privilege_1 = require("../portal-privilege");
+/**
+ * Utility to determine if User has privileges to delete a channel
+ * @deprecated replace with canDeleteChannelV2 for v2 discussions
+ * @export
+ * @param channel
+ * @param user
+ * @returns {boolean}
+ */
+function canDeleteChannel(channel, user = {}) {
+    if (portal_privilege_1.hasOrgAdminDeleteRights(user, channel.orgId)) {
+        return true;
+    }
+    return is_authorized_to_modify_channel_by_legacy_permissions_1.isAuthorizedToModifyChannelByLegacyPermissions(user, channel);
+}
+exports.canDeleteChannel = canDeleteChannel;
+//# sourceMappingURL=can-delete-channel.js.map

package/dist/node/discussions/api/utils/channels/can-delete-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-delete-channel.js","sourceRoot":"","sources":["../../../../../../src/discussions/api/utils/channels/can-delete-channel.ts"],"names":[],"mappings":";;;AAEA,mIAAyH;AACzH,0DAA8D;AAE9D;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,OAAiB,EACjB,OAAiC,EAAE;IAEnC,IAAI,0CAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAChD,OAAO,IAAI,CAAC;KACb;IAED,OAAO,sGAA8C,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AATD,4CASC"}

package/dist/node/discussions/api/utils/channels/can-edit-channel-v2.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canEditChannelV2 = void 0;
+const channel_permission_1 = require("../channel-permission");
+const portal_privilege_1 = require("../portal-privilege");
+/**
+ * Utility to determine if User has privileges to edit a channel
+ * @export
+ * @param channel
+ * @param user
+ * @param updateData
+ * @returns {boolean}
+ */
+function canEditChannelV2(channel, user = {}, updateData) {
+    if (portal_privilege_1.hasOrgAdminUpdateRights(user, channel.orgId)) {
+        return true;
+    }
+    const channelPermission = new channel_permission_1.ChannelPermission(channel);
+    return (channelPermission.canModerateChannel(user) &&
+        channelPermission.canUpdateProperties(user, updateData));
+}
+exports.canEditChannelV2 = canEditChannelV2;
+//# sourceMappingURL=can-edit-channel-v2.js.map

package/dist/node/discussions/api/utils/channels/can-edit-channel-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-edit-channel-v2.js","sourceRoot":"","sources":["../../../../../../src/discussions/api/utils/channels/can-edit-channel-v2.ts"],"names":[],"mappings":";;;AAEA,8DAA0D;AAC1D,0DAA8D;AAE9D;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,OAAiB,EACjB,OAAiC,EAAE,EACnC,UAA4B;IAE5B,IAAI,0CAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAChD,OAAO,IAAI,CAAC;KACb;IAED,MAAM,iBAAiB,GAAG,IAAI,sCAAiB,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,CACL,iBAAiB,CAAC,kBAAkB,CAAC,IAAwB,CAAC;QAC9D,iBAAiB,CAAC,mBAAmB,CAAC,IAAwB,EAAE,UAAU,CAAC,CAC5E,CAAC;AACJ,CAAC;AAdD,4CAcC"}

package/dist/node/discussions/api/utils/channels/can-edit-channel.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canEditChannel = void 0;
+const is_authorized_to_modify_channel_by_legacy_permissions_1 = require("./is-authorized-to-modify-channel-by-legacy-permissions");
+const portal_privilege_1 = require("../portal-privilege");
+/**
+ * Utility to determine if User has privileges to edit a channel
+ * @export
+ * @deprecated replace with canEditChannelV2 for v2 discussions
+ * @param channel
+ * @param user
+ * @returns {boolean}
+ */
+function canEditChannel(channel, user = {}) {
+    if (portal_privilege_1.hasOrgAdminUpdateRights(user, channel.orgId)) {
+        return true;
+    }
+    return is_authorized_to_modify_channel_by_legacy_permissions_1.isAuthorizedToModifyChannelByLegacyPermissions(user, channel);
+}
+exports.canEditChannel = canEditChannel;
+//# sourceMappingURL=can-edit-channel.js.map

package/dist/node/discussions/api/utils/channels/can-edit-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-edit-channel.js","sourceRoot":"","sources":["../../../../../../src/discussions/api/utils/channels/can-edit-channel.ts"],"names":[],"mappings":";;;AAEA,mIAAyH;AACzH,0DAA8D;AAE9D;;;;;;;GAOG;AACH,SAAgB,cAAc,CAC5B,OAAiB,EACjB,OAAiC,EAAE;IAEnC,IAAI,0CAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAChD,OAAO,IAAI,CAAC;KACb;IAED,OAAO,sGAA8C,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AATD,wCASC"}

package/dist/node/discussions/api/utils/channels/can-modify-channel.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canModifyChannel = void 0;
+const platform_1 = require("../platform");
+const is_authorized_to_modify_channel_by_legacy_permissions_1 = require("./is-authorized-to-modify-channel-by-legacy-permissions");
+// NO V2 EQUIVALENT. Use canEditChannelV2 or canDeleteChannelV2
+/**
+ * Utility to determine if User has privileges to modify a channel
+ * @deprecated use `canEditChannelV2` or `canDeleteChannelV2` instead.
+ * @export
+ * @param channel
+ * @param user
+ * @returns {boolean}
+ */
+function canModifyChannel(channel, user = {}) {
+    if (platform_1.isOrgAdminInOrg(user, channel.orgId)) {
+        return true;
+    }
+    return is_authorized_to_modify_channel_by_legacy_permissions_1.isAuthorizedToModifyChannelByLegacyPermissions(user, channel);
+}
+exports.canModifyChannel = canModifyChannel;
+//# sourceMappingURL=can-modify-channel.js.map

package/dist/node/discussions/api/utils/channels/can-modify-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-modify-channel.js","sourceRoot":"","sources":["../../../../../../src/discussions/api/utils/channels/can-modify-channel.ts"],"names":[],"mappings":";;;AAEA,0CAA8C;AAC9C,mIAAyH;AAEzH,+DAA+D;AAC/D;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,OAAiB,EACjB,OAAiC,EAAE;IAEnC,IAAI,0BAAe,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACxC,OAAO,IAAI,CAAC;KACb;IAED,OAAO,sGAA8C,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AATD,4CASC"}