@iwentsourcing/core 0.1.0

package/dist/management/permission/permission-aggregation.js

@@ -0,0 +1,381 @@
+import { defineAggregation } from '../../aggregation/define-aggregation.js';
+import { iwentsourcingRealm } from '../system/iwentsourcing-realm.js';
+import { defineState } from '../../storage/define-state.js';
+import { declareState } from '../../storage/declare-state.js';
+import { string } from '../../typing/string.js';
+import { union } from '../../typing/union.js';
+import { literal } from '../../typing/literal.js';
+import { optional } from '../../typing/optional.js';
+import { boolean } from '../../typing/boolean.js';
+import { number } from '../../typing/number.js';
+import { accessStream } from '../access/access-stream.js';
+import { getAuthId } from '../../authentication/get-auth-id.js';
+import { injectOutput, injectOutputPattern, } from '../../aggregation/inject-output.js';
+import { record } from '../../typing/record.js';
+import { array } from '../../typing/array.js';
+import { StreamEventDeclaration } from '../../stream/stream-event-declaration.js';
+import { StreamState } from '../../stream/stream-state.js';
+import { EventGrant, StateGrant, } from '../../runtime/permission-grant-schema.js';
+import { PermissionEvents } from '../../runtime/runtime-result.js';
+export function dedupeSerialized(items) {
+    const seen = new Set();
+    return items.filter((item) => {
+        const key = JSON.stringify(item);
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+}
+export function mergeEventPolicyJson(filterLists) {
+    const nonEmpty = filterLists.filter((f) => f.length > 0);
+    if (nonEmpty.length === 0)
+        return undefined;
+    const unique = dedupeSerialized(nonEmpty);
+    if (unique.length === 1) {
+        return JSON.stringify({ filters: unique[0] });
+    }
+    return JSON.stringify({
+        variants: unique.map((filters) => ({ filters })),
+    });
+}
+export function mergeStatePolicyJson(readSpecs) {
+    if (readSpecs.length === 0)
+        return undefined;
+    if (readSpecs.length === 1) {
+        const spec = readSpecs[0];
+        return JSON.stringify({ methods: spec.methods, filters: spec.filters });
+    }
+    return JSON.stringify({ variants: readSpecs });
+}
+export function materializeDeclaredState(stateName, grants) {
+    const readSpecs = [];
+    let read = false;
+    let write = false;
+    for (const g of grants) {
+        if (g.state !== stateName)
+            continue;
+        if (g.access === 'read') {
+            read = true;
+            readSpecs.push({ methods: [...g.methods], filters: [...g.filters] });
+        }
+        if (g.access === 'write')
+            write = true;
+    }
+    if (!read && !write)
+        return null;
+    return {
+        read,
+        write,
+        policyJson: mergeStatePolicyJson(readSpecs) ?? '',
+    };
+}
+export function materializeDeclaredEvent(eventName, grants) {
+    const filterLists = [];
+    let read = false;
+    let write = false;
+    for (const g of grants) {
+        if (g.event !== eventName)
+            continue;
+        if (g.access === 'read')
+            read = true;
+        if (g.access === 'write')
+            write = true;
+        filterLists.push([...g.filters]);
+    }
+    if (!read && !write)
+        return null;
+    return {
+        read,
+        write,
+        policyJson: mergeEventPolicyJson(filterLists) ?? '',
+    };
+}
+export async function revokeAccess(ctx, authId, revoke, signal) {
+    const existing = await ctx.snapshot('permissions').get({
+        type: revoke.type,
+        identifier: revoke.identifier,
+        authId,
+        streamName: ctx.stream.name,
+        streamVersion: ctx.stream.version,
+        run: ctx.stream.run,
+        realm: ctx.stream.realm,
+    }, { signal });
+    if (!existing)
+        return;
+    const has = (field) => existing.data[field] === true;
+    const target = revoke.access;
+    const other = target === 'read' ? 'write' : 'read';
+    if (has(other)) {
+        if (!has(target))
+            return;
+        await ctx.state('permissions').patch({
+            streamVersion: existing.data.streamVersion,
+            streamName: existing.data.streamName,
+            identifier: existing.data.identifier,
+            authId: existing.data.authId,
+            type: existing.data.type,
+            [target]: false,
+            policyJson: target === 'read' ? '' : existing.data.policyJson,
+            run: ctx.stream.run,
+            realm: ctx.stream.realm,
+        });
+    }
+    else {
+        await ctx.state('permissions').delete({
+            streamVersion: existing.data.streamVersion,
+            streamName: existing.data.streamName,
+            authId: existing.data.authId,
+            type: existing.data.type,
+            identifier: existing.data.identifier,
+            run: ctx.stream.run,
+            realm: ctx.stream.realm,
+        });
+    }
+}
+export const PermissionAggregationPermissions = declareState('permissions', {
+    authId: string(),
+    realm: string(),
+    streamVersion: string(),
+    streamName: string(),
+    type: union('PermissionType', [literal('event'), literal('state')]),
+    identifier: string(),
+    read: optional(boolean()),
+    write: optional(boolean()),
+    policyJson: optional(string()),
+    run: number(),
+}, [
+    'realm',
+    'streamVersion',
+    'streamName',
+    'authId',
+    'type',
+    'identifier',
+    'run',
+])
+    .index('auth', ['realm', 'streamVersion', 'streamName', 'authId'])
+    .index('type', ['realm', 'streamVersion', 'streamName', 'type'])
+    .index('name', ['realm', 'streamName']);
+export const PermissionState = defineState([
+    declareState('streams', {
+        pattern: string(),
+        version: string(),
+        realm: string(),
+        events: record(string(), StreamEventDeclaration),
+        state: record(string(), StreamState),
+        stateGrant: array(StateGrant),
+        eventGrant: array(EventGrant),
+    }, ['realm', 'pattern', 'version']),
+    declareState('aggregations', {
+        pattern: string(),
+        version: string(),
+        realm: string(),
+        state: record(string(), StreamState),
+        stateGrant: array(StateGrant),
+        eventGrant: array(EventGrant),
+    }, ['realm', 'pattern', 'version']),
+    PermissionAggregationPermissions,
+]);
+export const permissionAggregation = defineAggregation(iwentsourcingRealm, {
+    state: PermissionState,
+    events: {
+        'grant-access': injectOutputPattern(iwentsourcingRealm, '*', PermissionEvents['grant-access']),
+        'revoke-access': injectOutputPattern(iwentsourcingRealm, '*', PermissionEvents['revoke-access']),
+        'stream-def-created': injectOutput(accessStream, 'stream-def-created'),
+        'stream-created': injectOutput(accessStream, 'stream-created'),
+        'stream-run-created': injectOutput(accessStream, 'stream-run-created'),
+        'aggregation-def-created': injectOutput(accessStream, 'aggregation-def-created'),
+        'aggregation-created': injectOutput(accessStream, 'aggregation-created'),
+        'aggregation-run-created': injectOutput(accessStream, 'aggregation-run-created'),
+        // TODO run creation
+    },
+    handle: {
+        'stream-created': async () => { },
+        'stream-def-created': async (evt, ctx) => {
+            await ctx.state('streams').insert({
+                state: evt.state,
+                events: evt.events,
+                pattern: evt.pattern,
+                version: evt.version,
+                realm: evt.realm,
+                stateGrant: evt.stateGrant,
+                eventGrant: evt.eventGrant,
+            });
+        },
+        'stream-run-created': async (evt, ctx) => {
+            const authId = await getAuthId(ctx.env, evt.auth);
+            const stream = await ctx.snapshot('streams').get({
+                pattern: evt.pattern,
+                version: evt.version,
+                realm: evt.realm,
+            });
+            if (!stream) {
+                return;
+            }
+            const eventGrants = stream.data.eventGrant;
+            for (const evtKey of Object.keys(stream.data.events)) {
+                const decl = eventGrants.length > 0
+                    ? materializeDeclaredEvent(evtKey, eventGrants)
+                    : null;
+                await ctx.state('permissions').upsert({
+                    type: `event`,
+                    identifier: evtKey,
+                    streamName: evt.name,
+                    authId,
+                    streamVersion: evt.version,
+                    read: decl ? decl.read : eventGrants.length > 0 ? false : true,
+                    write: decl ? decl.write : eventGrants.length > 0 ? false : true,
+                    policyJson: decl ? decl.policyJson : '',
+                    run: evt.currentRun,
+                    realm: evt.realm,
+                });
+            }
+            const stateGrants = stream.data.stateGrant;
+            for (const stateName of Object.keys(stream.data.state)) {
+                const decl = stateGrants.length > 0
+                    ? materializeDeclaredState(stateName, stateGrants)
+                    : null;
+                await ctx.state('permissions').upsert({
+                    type: `state`,
+                    identifier: stateName,
+                    streamName: evt.name,
+                    authId,
+                    streamVersion: evt.version,
+                    read: decl ? decl.read : stateGrants.length > 0 ? false : true,
+                    write: decl ? decl.write : stateGrants.length > 0 ? false : false,
+                    policyJson: decl ? decl.policyJson : '',
+                    run: evt.currentRun,
+                    realm: evt.realm,
+                });
+            }
+        },
+        'aggregation-def-created': async (evt, ctx) => {
+            await ctx.state('aggregations').insert({
+                state: evt.state,
+                pattern: evt.pattern,
+                version: evt.version,
+                realm: evt.realm,
+                stateGrant: evt.stateGrant,
+                eventGrant: evt.eventGrant,
+            });
+        },
+        'aggregation-created': async () => { },
+        'aggregation-run-created': async (evt, ctx) => {
+            const authId = await getAuthId(ctx.env, evt.auth);
+            const agg = await ctx.snapshot('aggregations').get({
+                pattern: evt.pattern,
+                version: evt.version,
+                realm: evt.realm,
+            });
+            if (!agg) {
+                return;
+            }
+            const aggStateGrants = agg.data.stateGrant;
+            for (const stateName of Object.keys(agg.data.state)) {
+                const decl = aggStateGrants.length > 0
+                    ? materializeDeclaredState(stateName, aggStateGrants)
+                    : null;
+                await ctx.state('permissions').upsert({
+                    type: `state`,
+                    identifier: stateName,
+                    streamName: evt.name,
+                    authId,
+                    streamVersion: evt.version,
+                    read: decl ? decl.read : true,
+                    write: decl ? decl.write : false,
+                    policyJson: decl ? decl.policyJson : '',
+                    run: evt.currentRun,
+                    realm: evt.realm,
+                });
+            }
+        },
+        'grant-access': async (evt, ctx) => {
+            const authId = await getAuthId(ctx.env, evt.auth);
+            const baseRow = {
+                streamName: ctx.stream.name,
+                authId,
+                streamVersion: ctx.stream.version,
+                run: ctx.stream.run,
+                realm: ctx.stream.realm,
+            };
+            const eventGrants = evt.eventGrants ?? [];
+            const byEvent = new Map();
+            for (const g of eventGrants) {
+                let m = byEvent.get(g.event);
+                if (!m) {
+                    m = { read: false, write: false, filterLists: [] };
+                    byEvent.set(g.event, m);
+                }
+                if (g.access === 'read') {
+                    m.read = true;
+                }
+                if (g.access === 'write') {
+                    m.write = true;
+                }
+                m.filterLists.push([...g.filters]);
+            }
+            for (const [event, m] of byEvent) {
+                const policyJson = mergeEventPolicyJson(m.filterLists);
+                await ctx.state('permissions').upsert({
+                    ...baseRow,
+                    type: `event`,
+                    identifier: event,
+                    read: m.read ? true : undefined,
+                    write: m.write ? true : undefined,
+                    policyJson: policyJson ?? '',
+                });
+            }
+            const stateGrants = evt.stateGrants ?? [];
+            const byState = new Map();
+            for (const g of stateGrants) {
+                let m = byState.get(g.state);
+                if (!m) {
+                    m = { read: false, write: false, readSpecs: [] };
+                    byState.set(g.state, m);
+                }
+                if (g.access === 'read') {
+                    m.read = true;
+                    m.readSpecs.push({
+                        methods: [...g.methods],
+                        filters: [...g.filters],
+                    });
+                }
+                if (g.access === 'write') {
+                    m.write = true;
+                }
+            }
+            for (const [state, m] of byState) {
+                const policyJson = mergeStatePolicyJson(m.readSpecs);
+                await ctx.state('permissions').upsert({
+                    ...baseRow,
+                    type: `state`,
+                    identifier: state,
+                    read: m.read ? true : undefined,
+                    write: m.write ? true : undefined,
+                    policyJson: policyJson ?? '',
+                });
+            }
+        },
+        'revoke-access': async (evt, ctx) => {
+            const authId = await getAuthId(ctx.env, evt.auth);
+            const signal = new AbortController().signal;
+            for (const g of evt.eventGrants ?? []) {
+                await revokeAccess(ctx, authId, {
+                    type: 'event',
+                    identifier: g.event,
+                    access: g.access,
+                }, signal);
+            }
+            for (const g of evt.stateGrants ?? []) {
+                await revokeAccess(ctx, authId, {
+                    type: 'state',
+                    identifier: g.state,
+                    access: g.access,
+                }, signal);
+            }
+        },
+    },
+    pattern: 'permission',
+    auth: { allowAnonymous: false },
+});
+//# sourceMappingURL=permission-aggregation.js.map

package/dist/management/permission/permission-aggregation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-aggregation.js","sourceRoot":"","sources":["../../../src/management/permission/permission-aggregation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EACL,YAAY,EACZ,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAMnE,MAAM,UAAU,gBAAgB,CAAI,KAAU;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,WAA4B;IAE5B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;KACjD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,SAA0D;IAE1D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAiB,EACjB,MAKG;IAEH,MAAM,SAAS,GAAoD,EAAE,CAAC;IACtE,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,KAAK,GAAG,IAAI,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO;QACL,IAAI;QACJ,KAAK;QACL,UAAU,EAAE,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAiB,EACjB,MAIG;IAEH,MAAM,WAAW,GAAoB,EAAE,CAAC;IACxC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,GAAG,IAAI,CAAC;QACrC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,KAAK,GAAG,IAAI,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO;QACL,IAAI;QACJ,KAAK;QACL,UAAU,EAAE,oBAAoB,CAAC,WAAW,CAAC,IAAI,EAAE;KACpD,CAAC;AACJ,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAc,EACd,MAAc,EACd,MAIC,EACD,MAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,GAAG,CACpD;QACE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM;QACN,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;QAC3B,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;QACjC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;QACnB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;KACxB,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,MAAM,GAAG,GAAG,CAAC,KAAuB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAEnD,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QACzB,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC;YACnC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;YAC1C,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;YAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;YACxB,CAAC,MAAM,CAAC,EAAE,KAAK;YACf,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU;YAC7D,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;YACnB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YACpC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;YAC1C,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;YAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;YACxB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;YACnB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,YAAY,CAC1D,aAAa,EACb;IACE,MAAM,EAAE,MAAM,EAAE;IAEhB,KAAK,EAAE,MAAM,EAAE;IACf,aAAa,EAAE,MAAM,EAAE;IACvB,UAAU,EAAE,MAAM,EAAE;IAEpB,IAAI,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,UAAU,EAAE,MAAM,EAAE;IAEpB,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzB,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAE1B,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAE9B,GAAG,EAAE,MAAM,EAAE;CACd,EACD;IACE,OAAO;IACP,eAAe;IACf,YAAY;IACZ,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,KAAK;CACG,CACX;KACE,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;KAC1E,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,CAAU,CAAC;KACxE,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,YAAY,CAAU,CAAC,CAAC;AAKnD,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;IACzC,YAAY,CACV,SAAS,EACT;QACE,OAAO,EAAE,MAAM,EAAE;QACjB,OAAO,EAAE,MAAM,EAAE;QACjB,KAAK,EAAE,MAAM,EAAE;QACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;KAC9B,EACD,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAU,CACzC;IACD,YAAY,CACV,cAAc,EACd;QACE,OAAO,EAAE,MAAM,EAAE;QACjB,OAAO,EAAE,MAAM,EAAE;QACjB,KAAK,EAAE,MAAM,EAAE;QACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;KAC9B,EACD,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAU,CACzC;IACD,gCAAgC;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,kBAAkB,EAAE;IACzE,KAAK,EAAE,eAAe;IACtB,MAAM,EAAE;QACN,cAAc,EAAE,mBAAmB,CACjC,kBAAkB,EAClB,GAAG,EACH,gBAAgB,CAAC,cAAc,CAAC,CACjC;QACD,eAAe,EAAE,mBAAmB,CAClC,kBAAkB,EAClB,GAAG,EACH,gBAAgB,CAAC,eAAe,CAAC,CAClC;QACD,oBAAoB,EAAE,YAAY,CAAC,YAAY,EAAE,oBAAoB,CAAC;QACtE,gBAAgB,EAAE,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC;QAC9D,oBAAoB,EAAE,YAAY,CAAC,YAAY,EAAE,oBAAoB,CAAC;QACtE,yBAAyB,EAAE,YAAY,CACrC,YAAY,EACZ,yBAAyB,CAC1B;QACD,qBAAqB,EAAE,YAAY,CAAC,YAAY,EAAE,qBAAqB,CAAC;QACxE,yBAAyB,EAAE,YAAY,CACrC,YAAY,EACZ,yBAAyB,CAC1B;QACD,oBAAoB;KACrB;IACD,MAAM,EAAE;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QAChC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;gBAChC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAElD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC;gBAC/C,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GACR,WAAW,CAAC,MAAM,GAAG,CAAC;oBACpB,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,WAAW,CAAC;oBAC/C,CAAC,CAAC,IAAI,CAAC;gBACX,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACpC,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,MAAM;oBAClB,UAAU,EAAE,GAAG,CAAC,IAAI;oBACpB,MAAM;oBACN,aAAa,EAAE,GAAG,CAAC,OAAO;oBAC1B,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;oBAC9D,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;oBAChE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;oBACvC,GAAG,EAAE,GAAG,CAAC,UAAU;oBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC3C,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,GACR,WAAW,CAAC,MAAM,GAAG,CAAC;oBACpB,CAAC,CAAC,wBAAwB,CAAC,SAAS,EAAE,WAAW,CAAC;oBAClD,CAAC,CAAC,IAAI,CAAC;gBACX,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACpC,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,GAAG,CAAC,IAAI;oBACpB,MAAM;oBACN,aAAa,EAAE,GAAG,CAAC,OAAO;oBAC1B,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;oBAC9D,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;oBACjE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;oBACvC,GAAG,EAAE,GAAG,CAAC,UAAU;oBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;gBACrC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,qBAAqB,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACrC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAElD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC;gBACjD,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAC3C,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,GACR,cAAc,CAAC,MAAM,GAAG,CAAC;oBACvB,CAAC,CAAC,wBAAwB,CAAC,SAAS,EAAE,cAAc,CAAC;oBACrD,CAAC,CAAC,IAAI,CAAC;gBACX,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACpC,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,GAAG,CAAC,IAAI;oBACpB,MAAM;oBACN,aAAa,EAAE,GAAG,CAAC,OAAO;oBAC1B,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;oBAC7B,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;oBAChC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;oBACvC,GAAG,EAAE,GAAG,CAAC,UAAU;oBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG;gBACd,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;gBAC3B,MAAM;gBACN,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;gBACjC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;gBACnB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;aACxB,CAAC;YAEF,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAGpB,CAAC;YACJ,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;oBACP,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;oBACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC1B,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACxB,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;gBAChB,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACzB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;gBACjB,CAAC;gBACD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAkB,CAAC,CAAC;YACtD,CAAC;YACD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACvD,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACpC,GAAG,OAAO;oBACV,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,KAAK;oBACjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACjC,UAAU,EAAE,UAAU,IAAI,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAOpB,CAAC;YACJ,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;oBACP,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;oBACjD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC1B,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACxB,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;wBACf,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;wBACvB,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAkB;qBACzC,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACzB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACrD,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;oBACpC,GAAG,OAAO;oBACV,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,KAAK;oBACjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACjC,UAAU,EAAE,UAAU,IAAI,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;YAC5C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBACtC,MAAM,YAAY,CAChB,GAAG,EACH,MAAM,EACN;oBACE,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,CAAC,CAAC,KAAK;oBACnB,MAAM,EAAE,CAAC,CAAC,MAAM;iBACjB,EACD,MAAM,CACP,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBACtC,MAAM,YAAY,CAChB,GAAG,EACH,MAAM,EACN;oBACE,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,CAAC,CAAC,KAAK;oBACnB,MAAM,EAAE,CAAC,CAAC,MAAM;iBACjB,EACD,MAAM,CACP,CAAC;YACJ,CAAC;QACH,CAAC;KACF;IACD,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;CAChC,CAAC,CAAC"}

package/dist/management/permission/permission-aggregation.test.d.ts

@@ -0,0 +1 @@
+export {};