@jantstack/adonis-authz 1.1.0 → 2.4.0-alpha.1

package/build/src/drivers/database_relations_driver.js

@@ -0,0 +1,450 @@
+/**
+ * Driver `database` del puerto `RelationsDriver` — ReBAC sobre SQL propio
+ * (Fase 4, lote 4-3).
+ *
+ * Los hechos de relación viven en la tabla `authz_relations` (una fila por
+ * tupla, INSERT/DELETE-ONLY, decisión (c) del dueño): NO hay `expires_at` y no
+ * hay «renovar = delete+insert» (la caducidad de relaciones —R-15— quedó FUERA
+ * de la 2.4, default del dueño). La resolución de `check`/`membersOf`/
+ * `listObjects` —includes de un nivel y usersets de grupos anidados— es una
+ * **CTE recursiva por dialecto** (mismo patrón que `sql_descendants.ts`), y el
+ * cruce de particiones lo defiende, además, el trigger `relationPartitionTrigger`
+ * (defensa en profundidad para el escritor «a mano»; el corte primario es la
+ * columna `partition_key` en cada consulta).
+ *
+ * Pureza: este módulo vive en `drivers/` y NO importa `openfga` (regla 3 de
+ * `check_purity.mjs`) ni el `manager`. Consume solo el puerto (`../types.js`),
+ * los errores, la gramática compartida (`../identity.js`), el guard SQL y el
+ * TIPO de la config de relaciones (`../relations/define_relations_config.js`).
+ */
+import db from '@adonisjs/lucid/services/db';
+import { v7 as uuidv7 } from 'uuid';
+import { InvalidIdentityError, UnsupportedDialectError } from '../errors.js';
+import { assertScope, assertSubject, scopeKey, scopeSpellings } from '../identity.js';
+import { relationPartitionTrigger, relationPartitionTriggerDrops } from '../relation_partition_trigger.js';
+import { systemClock } from '../clock.js';
+import { guardSql } from '../shared/backend_guard.js';
+import { isRelUserset } from '../types.js';
+const DEFAULT_TIMEOUT_MS = 5_000;
+const RELATIONS_TABLE = 'authz_relations';
+/** Longitud máxima del id de un objeto/holder de relación (columna `varchar(64)`). */
+const RELATION_ID_MAX = 64;
+/** El tipo BUILT-IN portador de usersets (declarado por el generador, no por el consumidor). */
+const GROUP_TYPE = 'group';
+const GROUP_MEMBER = 'member';
+/** Tamaño de página por defecto y tope de `enumerateRelations` (origen de reconcile). */
+const DEFAULT_ENUMERATE_LIMIT = 100;
+const MAX_ENUMERATE_LIMIT = 1_000;
+/** Formato de id de relación: minúsculas, dígitos y `._-`; sin separadores del store. */
+const RELATION_ID_FORMAT = /^[a-z0-9_.-]+$/;
+const DIALECTS = {
+    postgres: { quote: '"', text: (e) => `CAST(${e} AS varchar(64))`, hint: '' },
+    sqlite3: { quote: '"', text: (e) => `CAST(${e} AS text)`, hint: '' },
+    'better-sqlite3': { quote: '"', text: (e) => `CAST(${e} AS text)`, hint: '' },
+    mysql: { quote: '`', text: (e) => `CAST(${e} AS CHAR(64))`, hint: '/*+ SET_VAR(cte_max_recursion_depth = 50000) */ ' },
+    mysql2: { quote: '`', text: (e) => `CAST(${e} AS CHAR(64))`, hint: '/*+ SET_VAR(cte_max_recursion_depth = 50000) */ ' },
+};
+// La DDL del trigger de partición vive en el módulo PURO
+// `../relation_partition_trigger.js` (sin dependencia del servicio `db`, para
+// que lo importe también el espejo del esquema, cargado antes de bootear la
+// app). Se re-exporta aquí por comodidad del consumidor del driver.
+export { relationPartitionTrigger, relationPartitionTriggerDrops };
+/**
+ * El driver `database` de relaciones. Toda consulta pasa por `guardSql`: un
+ * fallo del cliente SQL sale como `AuthorizationBackendError` (503), nunca como
+ * el error crudo de knex (invariante 5).
+ */
+export class DatabaseRelationsDriver {
+    /**
+     * Lo que declara (cada valor tiene su cara en `runRelationsDriverContract`):
+     *  - `singleCheckRelations`: `check` es UNA consulta (la CTE resuelve includes
+     *    + usersets anidados en un round-trip).
+     *  - `listObjectsInherited: false`: los `list*` no abren un subárbol (invariante 7).
+     *  - `usersetSubjects`: `listSubjects` incluye los usersets directos (`group#member`).
+     *  - `membersOfNative`: la membresía TRANSITIVA la resuelve la CTE recursiva.
+     *  - `enumerateRelations: true` (4-5): es ORIGEN de `authz:reconcile` de
+     *    relaciones — enumera los hechos DIRECTOS de la partición (`authz_relations`),
+     *    paginados por la PK, sin filtrar ni derivar (invariante 7 + higiene de
+     *    reconcile): la caña la ve el destino tal cual la escribió el origen.
+     *  - `listObjectsTruncation: false`: sin tope de servidor, `listObjects` es exhaustiva.
+     */
+    capabilities = Object.freeze({
+        singleCheckRelations: true,
+        listObjectsInherited: false,
+        usersetSubjects: true,
+        membersOfNative: true,
+        enumerateRelations: true,
+        listObjectsTruncation: false,
+    });
+    #config;
+    #connectionName;
+    #timeoutMs;
+    #now;
+    /** Inyectable para probar el dialecto ajeno sin servidor. */
+    #database;
+    constructor(config, options = {}, database = db) {
+        this.#config = config;
+        this.#connectionName = options.connection;
+        this.#timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.#now = options.now ?? systemClock;
+        this.#database = database;
+    }
+    /* ── Infraestructura ──────────────────────────────────────────────────── */
+    #connection() {
+        return this.#database.connection(this.#connectionName);
+    }
+    #dialectMeta() {
+        const connection = this.#connection();
+        const name = connection?.dialect?.name ?? connection?.client?.driverName ?? 'desconocido';
+        const meta = DIALECTS[name];
+        if (!meta) {
+            throw new UnsupportedDialectError(`DatabaseRelationsDriver: dialecto '${name}' sin observación en la suite ` +
+                `(hoy: PostgreSQL, MySQL 8 y SQLite). La CTE recursiva del check no se declara igual en dos ` +
+                `motores; impleméntala a mano para este motor.`);
+        }
+        return meta;
+    }
+    #sql(operation, fn) {
+        return guardSql('database-relations', operation, this.#timeoutMs, fn);
+    }
+    #raw(operation, text, bindings) {
+        return this.#sql(operation, () => this.#connection().rawQuery(text, bindings));
+    }
+    /* ── Validación de identidad (defensa en profundidad) ─────────────────── */
+    /** El objeto es `{ type, id }` bien formado (el `type` ya pasó F-05 en el manager). */
+    #assertObject(object) {
+        if (!object || typeof object !== 'object') {
+            throw new InvalidIdentityError(`Objeto de relación inválido: llegó ${typeof object}`);
+        }
+        this.#assertId('el tipo de objeto', object.type, RELATION_ID_MAX);
+        this.#assertId(`el id del objeto '${object.type}'`, object.id, RELATION_ID_MAX);
+    }
+    #assertId(kind, value, max) {
+        if (typeof value !== 'string' || value.length === 0 || value.length > max || !RELATION_ID_FORMAT.test(value)) {
+            throw new InvalidIdentityError(`${kind} inválido: se esperaba una cadena de 1-${max} caracteres en minúsculas, dígitos y '._-' ` +
+                `(llegó ${JSON.stringify(value)})`);
+        }
+    }
+    /** Valida el sujeto (holder o userset) y devuelve sus columnas. */
+    #subjectColumns(subject, partitionKey) {
+        if (isRelUserset(subject)) {
+            this.#assertObject(subject.object);
+            this.#assertId(`la relación del userset '${subject.object.type}'`, subject.relation, RELATION_ID_MAX);
+            // El userset comparte la partición de la tupla (el manager así lo exige);
+            // se materializa en `subject_partition` para que el trigger lo defienda.
+            return { type: subject.object.type, uuid: subject.object.id, relation: subject.relation, partition: partitionKey };
+        }
+        assertSubject(subject);
+        return { type: subject.type, uuid: subject.uuid, relation: null, partition: null };
+    }
+    /* ── Expansión de includes (un nivel, hacia ABAJO desde la relación) ──── */
+    #expandDown(objectType, relation) {
+        const out = new Set([relation]);
+        const type = this.#config.objectTypes.find((t) => t.type === objectType);
+        const queue = [relation];
+        while (queue.length) {
+            const current = queue.pop();
+            const def = type?.relations.find((r) => r.name === current);
+            for (const inc of def?.includes ?? []) {
+                if (!out.has(inc)) {
+                    out.add(inc);
+                    queue.push(inc);
+                }
+            }
+        }
+        return [...out];
+    }
+    /* ── Escrituras ───────────────────────────────────────────────────────── */
+    async relate(subject, relation, object, partition, _options) {
+        assertScope(partition);
+        this.#assertObject(object);
+        this.#assertId(`la relación de '${object.type}'`, relation, RELATION_ID_MAX);
+        const partitionKey = scopeKey(partition);
+        const s = this.#subjectColumns(subject, partitionKey);
+        // Transacción INTERNA: la atomicidad trigger+insert (el trigger corre en el
+        // mismo INSERT; el check-then-insert idempotente va dentro de la misma
+        // transacción). `{trx}` NO se expone en el puerto (decisión (b), diferido).
+        await this.#sql('relate', () => this.#connection().transaction(async (trx) => {
+            const existing = await trx
+                .from(RELATIONS_TABLE)
+                .where('partition_key', partitionKey)
+                .where('object_type', object.type)
+                .where('object_uuid', object.id)
+                .where('relation', relation)
+                .where('subject_type', s.type)
+                .where('subject_uuid', s.uuid)
+                .where((b) => (s.relation === null ? b.whereNull('subject_relation') : b.where('subject_relation', s.relation)))
+                .limit(1);
+            if (existing.length > 0)
+                return; // idempotente (invariante 6): no duplica.
+            await trx.table(RELATIONS_TABLE).insert({
+                uuid: uuidv7(),
+                partition_key: partitionKey,
+                object_type: object.type,
+                object_uuid: object.id,
+                relation,
+                subject_type: s.type,
+                subject_uuid: s.uuid,
+                subject_relation: s.relation,
+                subject_partition: s.partition,
+                created_at: this.#now(),
+            });
+        }));
+    }
+    async unrelate(subject, relation, object, partition, _options) {
+        assertScope(partition);
+        this.#assertObject(object);
+        this.#assertId(`la relación de '${object.type}'`, relation, RELATION_ID_MAX);
+        const partitionKey = scopeKey(partition);
+        const s = this.#subjectColumns(subject, partitionKey);
+        await this.#sql('unrelate', () => this.#connection()
+            .from(RELATIONS_TABLE)
+            .where('partition_key', partitionKey)
+            .where('object_type', object.type)
+            .where('object_uuid', object.id)
+            .where('relation', relation)
+            .where('subject_type', s.type)
+            .where('subject_uuid', s.uuid)
+            .where((b) => (s.relation === null ? b.whereNull('subject_relation') : b.where('subject_relation', s.relation)))
+            .delete());
+    }
+    /* ── Lecturas ─────────────────────────────────────────────────────────── */
+    async check(subject, relation, object, partition) {
+        assertScope(partition);
+        this.#assertObject(object);
+        const partitionKey = scopeKey(partition);
+        const s = this.#subjectColumns(subject, partitionKey);
+        const relations = this.#expandDown(object.type, relation);
+        const meta = this.#dialectMeta();
+        const q = (name) => `${meta.quote}${name}${meta.quote}`;
+        const { cte, bindings: cteBindings } = this.#principalCte(meta, q, s, partitionKey);
+        const relPlaceholders = relations.map(() => '?').join(', ');
+        const sql = cte +
+            ` SELECT ${meta.hint}1 FROM ${q(RELATIONS_TABLE)} r ` +
+            `JOIN principal p ON r.${q('subject_type')} = p.p_type AND r.${q('subject_uuid')} = p.p_uuid ` +
+            `AND COALESCE(r.${q('subject_relation')}, '') = p.p_rel ` +
+            `WHERE r.${q('partition_key')} = ? AND r.${q('object_type')} = ? AND r.${q('object_uuid')} = ? ` +
+            `AND r.${q('relation')} IN (${relPlaceholders}) LIMIT 1`;
+        const bindings = [...cteBindings, partitionKey, object.type, object.id, ...relations];
+        const rows = rowsOf(await this.#raw('check', sql, bindings));
+        return rows.length > 0;
+    }
+    async listObjects(subject, relation, objectType, partition, _page) {
+        assertScope(partition);
+        this.#assertId('el tipo de objeto', objectType, RELATION_ID_MAX);
+        const partitionKey = scopeKey(partition);
+        const s = this.#subjectColumns(subject, partitionKey);
+        const relations = this.#expandDown(objectType, relation);
+        const meta = this.#dialectMeta();
+        const q = (name) => `${meta.quote}${name}${meta.quote}`;
+        const { cte, bindings: cteBindings } = this.#principalCte(meta, q, s, partitionKey);
+        const relPlaceholders = relations.map(() => '?').join(', ');
+        const sql = cte +
+            ` SELECT ${meta.hint}DISTINCT r.${q('object_uuid')} AS ${q('object_uuid')} FROM ${q(RELATIONS_TABLE)} r ` +
+            `JOIN principal p ON r.${q('subject_type')} = p.p_type AND r.${q('subject_uuid')} = p.p_uuid ` +
+            `AND COALESCE(r.${q('subject_relation')}, '') = p.p_rel ` +
+            `WHERE r.${q('partition_key')} = ? AND r.${q('object_type')} = ? ` +
+            `AND r.${q('relation')} IN (${relPlaceholders})`;
+        const bindings = [...cteBindings, partitionKey, objectType, ...relations];
+        const rows = rowsOf(await this.#raw('listObjects', sql, bindings));
+        const objects = rows
+            .map((row) => ({ type: objectType, id: String(row.object_uuid) }))
+            .sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
+        return { objects };
+    }
+    async listSubjects(relation, object, partition, _page) {
+        assertScope(partition);
+        this.#assertObject(object);
+        const partitionKey = scopeKey(partition);
+        // DIRECTOS del relation EXACTO (invariante 7): ni transitivo (eso es
+        // `membersOf`) ni derivado por includes. `usersetSubjects: true` ⇒ los
+        // usersets (`group#member`) salen junto con los holders.
+        const rows = await this.#sql('listSubjects', () => this.#connection()
+            .from(RELATIONS_TABLE)
+            .where('partition_key', partitionKey)
+            .where('object_type', object.type)
+            .where('object_uuid', object.id)
+            .where('relation', relation)
+            .select('subject_type', 'subject_uuid', 'subject_relation'));
+        const subjects = rows.map((row) => this.#rowToSubject(row));
+        return { subjects };
+    }
+    /**
+     * Membresía TRANSITIVA de un objeto-grupo: todos los HOLDERS que son `member`
+     * directa o a través de grupos anidados (usersets `group#member`). CTE
+     * recursiva hacia ABAJO por los usersets. DISTINTA de `listSubjects` (hechos
+     * directos): en un grupo con `member(g1#member, g2)`, `membersOf(g2)` trae a
+     * los holders de g1 y `listSubjects(member, g2)` solo el userset `g1#member`.
+     */
+    async membersOf(object, relation, partition, _page) {
+        assertScope(partition);
+        this.#assertObject(object);
+        const partitionKey = scopeKey(partition);
+        const relations = this.#expandDown(object.type, relation);
+        const meta = this.#dialectMeta();
+        const q = (name) => `${meta.quote}${name}${meta.quote}`;
+        const relPlaceholders = relations.map(() => '?').join(', ');
+        // `grp`: los grupos alcanzables por usersets desde (object, RS) —directos y
+        // anidados—. Ancla de UN solo SELECT (MySQL no mezcla UNION ALL con la
+        // recursión): los usersets directos del objeto para cualquier rel de RS.
+        const sql = `WITH RECURSIVE grp(g_uuid) AS ( ` +
+            `SELECT r.${q('subject_uuid')} FROM ${q(RELATIONS_TABLE)} r ` +
+            `WHERE r.${q('partition_key')} = ? AND r.${q('object_type')} = ? AND r.${q('object_uuid')} = ? ` +
+            `AND r.${q('relation')} IN (${relPlaceholders}) AND r.${q('subject_type')} = '${GROUP_TYPE}' ` +
+            `AND r.${q('subject_relation')} = '${GROUP_MEMBER}' ` +
+            `UNION ` +
+            `SELECT r.${q('subject_uuid')} FROM ${q(RELATIONS_TABLE)} r ` +
+            `JOIN grp ON r.${q('object_uuid')} = grp.g_uuid ` +
+            `WHERE r.${q('partition_key')} = ? AND r.${q('object_type')} = '${GROUP_TYPE}' ` +
+            `AND r.${q('relation')} = '${GROUP_MEMBER}' AND r.${q('subject_type')} = '${GROUP_TYPE}' ` +
+            `AND r.${q('subject_relation')} = '${GROUP_MEMBER}' ` +
+            `) ` +
+            // Holders directos del objeto para RS, UNION holders directos de cualquier grupo de `grp`.
+            `SELECT ${meta.hint}${q('subject_type')} AS ${q('subject_type')}, ${q('subject_uuid')} AS ${q('subject_uuid')} ` +
+            `FROM ${q(RELATIONS_TABLE)} r ` +
+            `WHERE r.${q('partition_key')} = ? AND r.${q('object_type')} = ? AND r.${q('object_uuid')} = ? ` +
+            `AND r.${q('relation')} IN (${relPlaceholders}) AND r.${q('subject_relation')} IS NULL ` +
+            `UNION ` +
+            `SELECT r.${q('subject_type')}, r.${q('subject_uuid')} FROM ${q(RELATIONS_TABLE)} r ` +
+            `JOIN grp ON r.${q('object_uuid')} = grp.g_uuid ` +
+            `WHERE r.${q('partition_key')} = ? AND r.${q('object_type')} = '${GROUP_TYPE}' ` +
+            `AND r.${q('relation')} = '${GROUP_MEMBER}' AND r.${q('subject_relation')} IS NULL`;
+        const bindings = [
+            // grp ancla
+            partitionKey, object.type, object.id, ...relations,
+            // grp recursiva
+            partitionKey,
+            // holders directos del objeto
+            partitionKey, object.type, object.id, ...relations,
+            // holders de los grupos
+            partitionKey,
+        ];
+        const rows = rowsOf(await this.#raw('membersOf', sql, bindings));
+        const subjects = rows.map((row) => ({ type: String(row.subject_type), uuid: String(row.subject_uuid) }));
+        return { subjects };
+    }
+    /* ── Purga (invariante 11): el DELETE demuestra el cero ───────────────── */
+    async purgeObject(object, partition) {
+        assertScope(partition);
+        this.#assertObject(object);
+        const partitionKeys = this.#partitionSpellings(partition);
+        await this.#sql('purgeObject', () => this.#connection()
+            .from(RELATIONS_TABLE)
+            .whereIn('partition_key', partitionKeys)
+            .where('object_type', object.type)
+            .where('object_uuid', object.id)
+            .delete());
+    }
+    async purgeSubject(subject, partition) {
+        assertScope(partition);
+        const partitionKeys = this.#partitionSpellings(partition);
+        const s = this.#subjectColumns(subject, scopeKey(partition));
+        await this.#sql('purgeSubject', () => this.#connection()
+            .from(RELATIONS_TABLE)
+            .whereIn('partition_key', partitionKeys)
+            .where('subject_type', s.type)
+            .where('subject_uuid', s.uuid)
+            .where((b) => (s.relation === null ? b.whereNull('subject_relation') : b.where('subject_relation', s.relation)))
+            .delete());
+    }
+    /* ── ORIGEN de reconcile (4-5): enumera los hechos directos ───────────── */
+    /**
+     * **`enumerateRelations` — el ORIGEN de `authz:reconcile` de relaciones**
+     * (4-5). Devuelve los hechos DIRECTOS de la partición (`authz_relations`),
+     * paginados por la PK (`uuid`, cursor que AVANZA), sin derivar por
+     * includes/usersets (el modelo del destino lo recompone): el destino recibe
+     * los hechos tal cual y decide qué escribe (invariante 7 + la higiene de
+     * reconcile — una caducada tendría que LLEGAR; aquí no hay caducidad, R-15
+     * quedó fuera). Barre las DOS ortografías del uuid de partición (🟡2,
+     * coherente con `purge*`): un origen que las funde no puede dejar hechos del
+     * alias sin migrar.
+     *
+     * **Filtra por TIPOS DECLARADOS** (⚪3, paridad con `openfga`): el driver
+     * `openfga` descarta de su enumeración todo `object_type` que no sea `group`
+     * ni un tipo de `defineRelationsConfig`; el de `database` NO lo hacía y
+     * devolvía TODA fila. Como `reconcileRelations` escribe `to.relate(...)`
+     * DIRECTO (salta el manager/F-05), una fila `object_type='role_binding'`
+     * sembrada a mano habría migrado al store compartido y reabierto la escalada.
+     * Con el filtro ambos drivers censan lo mismo y el chokepoint no deja residuo
+     * por el camino de reconcile.
+     */
+    async enumerateRelations(partition, page) {
+        assertScope(partition);
+        const partitionKeys = this.#partitionSpellings(partition);
+        const declaredTypes = [GROUP_TYPE, ...this.#config.objectTypes.map((t) => t.type)];
+        const limit = Math.max(1, Math.min(page?.limit ?? DEFAULT_ENUMERATE_LIMIT, MAX_ENUMERATE_LIMIT));
+        const after = page?.after;
+        const rows = await this.#sql('enumerateRelations', () => {
+            let q = this.#connection()
+                .from(RELATIONS_TABLE)
+                .whereIn('partition_key', partitionKeys)
+                .whereIn('object_type', declaredTypes)
+                .orderBy('uuid', 'asc')
+                .limit(limit + 1);
+            if (after)
+                q = q.where('uuid', '>', after);
+            return q.select('uuid', 'object_type', 'object_uuid', 'relation', 'subject_type', 'subject_uuid', 'subject_relation');
+        });
+        const hasMore = rows.length > limit;
+        const pageRows = hasMore ? rows.slice(0, limit) : rows;
+        const tuples = pageRows.map((row) => ({
+            subject: this.#rowToSubject(row),
+            relation: String(row.relation),
+            object: { type: String(row.object_type), id: String(row.object_uuid) },
+            // La partición canónica pedida: el barrido de ortografías ya la unificó.
+            partition,
+        }));
+        const cursor = hasMore ? String(pageRows[pageRows.length - 1].uuid) : undefined;
+        return cursor ? { tuples, cursor } : { tuples };
+    }
+    /* ── Helpers privados ─────────────────────────────────────────────────── */
+    /**
+     * **Barre AMBAS ortografías del uuid de partición** (🟡2 del auditor,
+     * paridad con el fix del lote 3b-2h): un motor que funde `aaa…` con `aaa-…`
+     * (tipo `uuid` de PG, collation `*_ci`) haría del `DELETE` un no-op sobre el
+     * alias y la fila real seguiría concediendo. `scopeSpellings` da la del
+     * llamante Y la canónica de la que puede ser alias; se convierten a clave.
+     */
+    #partitionSpellings(partition) {
+        const keys = scopeSpellings(partition).map((s) => scopeKey(s));
+        return [...new Set(keys)];
+    }
+    /**
+     * La CTE `principal`: el conjunto de identidades `(p_type, p_uuid, p_rel)` que
+     * el SUJETO «es» —él mismo (holder ⇒ `p_rel = ''`; userset ⇒ su relación) más
+     * cada `group#member` del que es miembro, transitivamente (grupos anidados)—.
+     * Un `check`/`listObjects` casa un hecho directo del objeto contra cualquiera
+     * de esas identidades. Devuelve el `WITH RECURSIVE …` (sin el SELECT final) y
+     * sus bindings.
+     */
+    #principalCte(meta, q, s, partitionKey) {
+        const baseRel = s.relation ?? '';
+        const cte = `WITH RECURSIVE principal(p_type, p_uuid, p_rel) AS ( ` +
+            `SELECT ${meta.text('?')}, ${meta.text('?')}, ${meta.text('?')} ` +
+            `UNION ` +
+            `SELECT ${meta.text(`'${GROUP_TYPE}'`)}, r.${q('object_uuid')}, ${meta.text(`'${GROUP_MEMBER}'`)} ` +
+            `FROM ${q(RELATIONS_TABLE)} r ` +
+            `JOIN principal p ON r.${q('subject_type')} = p.p_type AND r.${q('subject_uuid')} = p.p_uuid ` +
+            `AND COALESCE(r.${q('subject_relation')}, '') = p.p_rel ` +
+            `WHERE r.${q('partition_key')} = ? AND r.${q('object_type')} = '${GROUP_TYPE}' ` +
+            `AND r.${q('relation')} = '${GROUP_MEMBER}' )`;
+        return { cte, bindings: [s.type, s.uuid, baseRel, partitionKey] };
+    }
+    #rowToSubject(row) {
+        if (row.subject_relation === null || row.subject_relation === undefined) {
+            return { type: String(row.subject_type), uuid: String(row.subject_uuid) };
+        }
+        return { object: { type: String(row.subject_type), id: String(row.subject_uuid) }, relation: String(row.subject_relation) };
+    }
+}
+/**
+ * Forma del resultado crudo por cliente: pg `{ rows }`, sqlite `rows[]`,
+ * mysql2 `[rows[], fields[]]` (2.5 · J3).
+ */
+function rowsOf(result) {
+    if (Array.isArray(result)) {
+        return result.length === 2 && Array.isArray(result[0]) && Array.isArray(result[1]) ? result[0] : result;
+    }
+    return result?.rows ?? [];
+}
+//# sourceMappingURL=database_relations_driver.js.map

package/build/src/drivers/database_relations_driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database_relations_driver.js","sourceRoot":"","sources":["../../../src/drivers/database_relations_driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,MAAM,6BAA6B,CAAA;AAC5C,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAC5E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACrF,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAA;AAC1G,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAiB1C,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAChC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AACzC,sFAAsF;AACtF,MAAM,eAAe,GAAG,EAAE,CAAA;AAC1B,gGAAgG;AAChG,MAAM,UAAU,GAAG,OAAO,CAAA;AAC1B,MAAM,YAAY,GAAG,QAAQ,CAAA;AAC7B,yFAAyF;AACzF,MAAM,uBAAuB,GAAG,GAAG,CAAA;AACnC,MAAM,mBAAmB,GAAG,KAAK,CAAA;AAEjC,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,gBAAgB,CAAA;AAgB3C,MAAM,QAAQ,GAAgC;IAC5C,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,EAAE;IAC5E,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;IACpE,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;IAC7E,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,EAAE,kDAAkD,EAAE;IACtH,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,EAAE,kDAAkD,EAAE;CACxH,CAAA;AAED,yDAAyD;AACzD,8EAA8E;AAC9E,4EAA4E;AAC5E,oEAAoE;AACpE,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,CAAA;AAwBlE;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAClC;;;;;;;;;;;;OAYG;IACM,YAAY,GAAgC,MAAM,CAAC,MAAM,CAAC;QACjE,oBAAoB,EAAE,IAAI;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,kBAAkB,EAAE,IAAI;QACxB,qBAAqB,EAAE,KAAK;KAC7B,CAAC,CAAA;IAEO,OAAO,CAAiB;IACxB,eAAe,CAAS;IACxB,UAAU,CAAQ;IAClB,IAAI,CAAO;IACpB,6DAA6D;IACpD,SAAS,CAAoC;IAEtD,YACE,MAAuB,EACvB,UAA0C,EAAE,EAC5C,WAA+C,EAAE;QAEjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,UAAU,CAAA;QACzC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAA;QACzD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAA;QACtC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,6EAA6E;IAE7E,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACxD,CAAC;IAED,YAAY;QACV,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QACrC,MAAM,IAAI,GAAW,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,aAAa,CAAA;QACjG,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,uBAAuB,CAC/B,sCAAsC,IAAI,gCAAgC;gBACxE,6FAA6F;gBAC7F,+CAA+C,CAClD,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAI,SAAiB,EAAE,EAAoB;QAC7C,OAAO,QAAQ,CAAC,oBAAoB,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IACvE,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,IAAY,EAAE,QAAmB;QACvD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IAChF,CAAC;IAED,6EAA6E;IAE7E,uFAAuF;IACvF,aAAa,CAAC,MAAiB;QAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,OAAO,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QACjE,IAAI,CAAC,SAAS,CAAC,qBAAqB,MAAM,CAAC,IAAI,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;IACjF,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,KAAc,EAAE,GAAW;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,MAAM,IAAI,oBAAoB,CAC5B,GAAG,IAAI,0CAA0C,GAAG,6CAA6C;gBAC/F,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CACrC,CAAA;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,eAAe,CAAC,OAAmB,EAAE,YAAoB;QAMvD,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAClC,IAAI,CAAC,SAAS,CAAC,4BAA4B,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;YACrG,0EAA0E;YAC1E,yEAAyE;YACzE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,CAAA;QACpH,CAAC;QACD,aAAa,CAAC,OAAO,CAAC,CAAA;QACtB,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IACpF,CAAC;IAED,6EAA6E;IAE7E,WAAW,CAAC,UAAkB,EAAE,QAAgB;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAA;QAChG,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAA;QACxB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAA;YAC5B,MAAM,GAAG,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;YAC3D,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;oBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAA;IACjB,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,MAAM,CACV,OAAmB,EACnB,QAAgB,EAChB,MAAiB,EACjB,SAAmB,EACnB,QAA+B;QAE/B,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,SAAS,CAAC,mBAAmB,MAAM,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;QAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACrD,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAC7B,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAQ,EAAE,EAAE;YAChD,MAAM,QAAQ,GAAG,MAAM,GAAG;iBACvB,IAAI,CAAC,eAAe,CAAC;iBACrB,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC;iBACpC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC;iBACjC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;iBAC/B,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC;iBAC3B,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;iBAC7B,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;iBAC7B,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;iBACpH,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAM,CAAC,0CAA0C;YAC1E,MAAM,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;gBACtC,IAAI,EAAE,MAAM,EAAE;gBACd,aAAa,EAAE,YAAY;gBAC3B,WAAW,EAAE,MAAM,CAAC,IAAI;gBACxB,WAAW,EAAE,MAAM,CAAC,EAAE;gBACtB,QAAQ;gBACR,YAAY,EAAE,CAAC,CAAC,IAAI;gBACpB,YAAY,EAAE,CAAC,CAAC,IAAI;gBACpB,gBAAgB,EAAE,CAAC,CAAC,QAAQ;gBAC5B,iBAAiB,EAAE,CAAC,CAAC,SAAS;gBAC9B,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE;aACF,CAAC,CAAA;QAC1B,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,OAAmB,EACnB,QAAgB,EAChB,MAAiB,EACjB,SAAmB,EACnB,QAA+B;QAE/B,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,SAAS,CAAC,mBAAmB,MAAM,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;QAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACrD,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,IAAI,CAAC,WAAW,EAAE;aACf,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC;aACpC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC;aACjC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;aAC/B,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC;aAC3B,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;aACpH,MAAM,EAAE,CACZ,CAAA;IACH,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,KAAK,CAAC,OAAmB,EAAE,QAAgB,EAAE,MAAiB,EAAE,SAAmB;QACvF,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QAE/D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAA;QACnF,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,GAAG,GACP,GAAG;YACH,WAAW,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK;YACrD,yBAAyB,CAAC,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,cAAc,CAAC,cAAc;YAC9F,kBAAkB,CAAC,CAAC,kBAAkB,CAAC,kBAAkB;YACzD,WAAW,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO;YAChG,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,eAAe,WAAW,CAAA;QAC1D,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,CAAA;QACrF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAAmB,EACnB,QAAgB,EAChB,UAAkB,EAClB,SAAmB,EACnB,KAAoB;QAEpB,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;QAChE,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QAE/D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAA;QACnF,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,GAAG,GACP,GAAG;YACH,WAAW,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,KAAK;YACzG,yBAAyB,CAAC,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,cAAc,CAAC,cAAc;YAC9F,kBAAkB,CAAC,CAAC,kBAAkB,CAAC,kBAAkB;YACzD,WAAW,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO;YAClE,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,eAAe,GAAG,CAAA;QAClD,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,CAAA;QACzE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;QAClE,MAAM,OAAO,GAAgB,IAAI;aAC9B,GAAG,CAAC,CAAC,GAAQ,EAAa,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;aACjF,IAAI,CAAC,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjF,OAAO,EAAE,OAAO,EAAE,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,MAAiB,EACjB,SAAmB,EACnB,KAAoB;QAEpB,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QACxC,qEAAqE;QACrE,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,IAAI,GAAU,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CACvD,IAAI,CAAC,WAAW,EAAE;aACf,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC;aACpC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC;aACjC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;aAC/B,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC;aAC3B,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAC9D,CAAA;QACD,MAAM,QAAQ,GAAiB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;QAC9E,OAAO,EAAE,QAAQ,EAAE,CAAA;IACrB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CACb,MAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,KAAoB;QAEpB,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QAC/D,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE3D,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,GAAG,GACP,kCAAkC;YAClC,YAAY,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,KAAK;YAC7D,WAAW,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO;YAChG,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,eAAe,WAAW,CAAC,CAAC,cAAc,CAAC,OAAO,UAAU,IAAI;YAC9F,SAAS,CAAC,CAAC,kBAAkB,CAAC,OAAO,YAAY,IAAI;YACrD,QAAQ;YACR,YAAY,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,KAAK;YAC7D,iBAAiB,CAAC,CAAC,aAAa,CAAC,gBAAgB;YACjD,WAAW,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO,UAAU,IAAI;YAChF,SAAS,CAAC,CAAC,UAAU,CAAC,OAAO,YAAY,WAAW,CAAC,CAAC,cAAc,CAAC,OAAO,UAAU,IAAI;YAC1F,SAAS,CAAC,CAAC,kBAAkB,CAAC,OAAO,YAAY,IAAI;YACrD,IAAI;YACJ,2FAA2F;YAC3F,UAAU,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,GAAG;YAChH,QAAQ,CAAC,CAAC,eAAe,CAAC,KAAK;YAC/B,WAAW,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO;YAChG,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,eAAe,WAAW,CAAC,CAAC,kBAAkB,CAAC,WAAW;YACxF,QAAQ;YACR,YAAY,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,KAAK;YACrF,iBAAiB,CAAC,CAAC,aAAa,CAAC,gBAAgB;YACjD,WAAW,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO,UAAU,IAAI;YAChF,SAAS,CAAC,CAAC,UAAU,CAAC,OAAO,YAAY,WAAW,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAA;QACrF,MAAM,QAAQ,GAAG;YACf,YAAY;YACZ,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,SAAS;YAClD,gBAAgB;YAChB,YAAY;YACZ,8BAA8B;YAC9B,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,SAAS;YAClD,wBAAwB;YACxB,YAAY;SACb,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAiB,IAAI,CAAC,GAAG,CACrC,CAAC,GAAQ,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAC/F,CAAA;QACD,OAAO,EAAE,QAAQ,EAAE,CAAA;IACrB,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,WAAW,CAAC,MAAiB,EAAE,SAAmB;QACtD,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAClC,IAAI,CAAC,WAAW,EAAE;aACf,IAAI,CAAC,eAAe,CAAC;aACrB,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC;aACvC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC;aACjC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;aAC/B,MAAM,EAAE,CACZ,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAmB,EAAE,SAAmB;QACzD,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CACnC,IAAI,CAAC,WAAW,EAAE;aACf,IAAI,CAAC,eAAe,CAAC;aACrB,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC;aACvC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;aACpH,MAAM,EAAE,CACZ,CAAA;IACH,CAAC;IAED,6EAA6E;IAE7E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAmB,EAAE,IAAmB;QAC/D,WAAW,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAClF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,uBAAuB,EAAE,mBAAmB,CAAC,CAAC,CAAA;QAChG,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAA;QACzB,MAAM,IAAI,GAAkB,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;YACrE,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE;iBACvB,IAAI,CAAC,eAAe,CAAC;iBACrB,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC;iBACvC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC;iBACrC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;iBACtB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACnB,IAAI,KAAK;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAC,MAAM,CACb,MAAM,EACN,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,EACd,kBAAkB,CACnB,CAAA;QACH,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACtD,MAAM,MAAM,GAAoB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;YAChC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YACtE,yEAAyE;YACzE,SAAS;SACV,CAAC,CAAC,CAAA;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/E,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAA;IACjD,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,mBAAmB,CAAC,SAAmB;QACrC,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CACX,IAAiB,EACjB,CAA2B,EAC3B,CAA0D,EAC1D,YAAoB;QAEpB,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAA;QAChC,MAAM,GAAG,GACP,uDAAuD;YACvD,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YACjE,QAAQ;YACR,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,GAAG;YACnG,QAAQ,CAAC,CAAC,eAAe,CAAC,KAAK;YAC/B,yBAAyB,CAAC,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,cAAc,CAAC,cAAc;YAC9F,kBAAkB,CAAC,CAAC,kBAAkB,CAAC,kBAAkB;YACzD,WAAW,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,OAAO,UAAU,IAAI;YAChF,SAAS,CAAC,CAAC,UAAU,CAAC,OAAO,YAAY,KAAK,CAAA;QAChD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAA;IACnE,CAAC;IAED,aAAa,CAAC,GAAQ;QACpB,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAA;QAC3E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAA;IAC7H,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,MAAW;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IACzG,CAAC;IACD,OAAO,MAAM,EAAE,IAAI,IAAI,EAAE,CAAA;AAC3B,CAAC"}