@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/testing/suites/cron-enqueue-only.js

@@ -0,0 +1,177 @@
+"use strict";
+// =============================================================================
+// Suite: every `@Cron` enqueues rather than working (issues #353, #694)
+// =============================================================================
+//
+// Epic #345 decision 1: every long-running activity is a queue job. A `@Cron`
+// only decides WHETHER work is due and enqueues it. This suite reads the BODY of
+// every `@Cron`-decorated method under the app's source roots and requires two
+// things of it: that it queues something, and that it contains none of the
+// markers of doing the work itself.
+//
+// It does not follow calls into helper methods: a cron calling
+// `this.fireDueBackup(...)` is trusted, and that helper's own spec is what pins
+// that it only enqueues. This is a tripwire on the shape of a cron body, not a
+// proof about the whole call graph.
+//
+// Known limit, kept on purpose: the body opens at the first `{` after `@Cron(`,
+// so a decorator OPTIONS object is read as the body and reported as queueing
+// nothing. That fails loudly, never silently; no cron in the base uses options.
+//
+// The scan was moved here UNCHANGED from apps/api/test/jobs/cron-enqueue-only.spec.ts:
+// same markers, same enqueue pattern, same brace matching. What the app keeps
+// is DATA: its exemption list (each one argued) and its vacuity minimum.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cronEnqueueOnlySuite = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+/**
+ * Markers of a cron doing the work itself.
+ *
+ * Deliberately concrete rather than clever: these are the exact shapes the
+ * seven converted crons used to contain, so a revert reintroduces one of them
+ * almost by definition.
+ */
+const WORK_MARKERS = [
+    { pattern: /\.deleteMany\(/, what: 'a bulk delete' },
+    { pattern: /\.updateMany(AndReturn)?\(/, what: 'a bulk update' },
+    { pattern: /\.\$executeRaw/, what: 'raw SQL' },
+    { pattern: /withAdminConnection\(/, what: 'a cluster admin connection' },
+    { pattern: /\bcleanupExpired\w*\(/, what: 'an inline cleanup call' },
+    { pattern: /\.prune\(\)/, what: 'an inline retention prune' },
+    { pattern: /\bdropExpired\w*\(/, what: 'an inline DROP DATABASE sweep' },
+    { pattern: /\bthis\.sweep\(/, what: 'an inline sweep' },
+    { pattern: /\bthis\.releaseStaleRuns\(/, what: 'an inline stale release' },
+    { pattern: /\bthis\.storage(Provider)?\./, what: 'a direct storage-provider call' },
+];
+/** What a cron body must contain to count as queueing its work. */
+const ENQUEUES = /enqueueHousekeepingJob\(|\.enqueue\(/;
+/** Every `.ts` file under `dir`, excluding tests. */
+function sourceFiles(dir) {
+    return (0, node_fs_1.readdirSync)(dir).flatMap((entry) => {
+        const full = (0, node_path_1.join)(dir, entry);
+        if ((0, node_fs_1.statSync)(full).isDirectory())
+            return sourceFiles(full);
+        if (!entry.endsWith('.ts') || entry.endsWith('.spec.ts'))
+            return [];
+        return [full];
+    });
+}
+/**
+ * The body of every `@Cron`-decorated method in `source`, brace-matched.
+ *
+ * Brace matching rather than a regex over the whole method: a cron body
+ * contains braces (template literals, object arguments, nested blocks), and a
+ * lazy match would stop at the first `}` and declare every task compliant.
+ */
+function cronBodies(source) {
+    const bodies = [];
+    let index = source.indexOf('@Cron(');
+    while (index !== -1) {
+        const open = source.indexOf('{', index);
+        if (open === -1)
+            break;
+        let depth = 0;
+        let end = open;
+        for (; end < source.length; end += 1) {
+            if (source[end] === '{')
+                depth += 1;
+            else if (source[end] === '}') {
+                depth -= 1;
+                if (depth === 0)
+                    break;
+            }
+        }
+        bodies.push(source.slice(open, end + 1));
+        index = source.indexOf('@Cron(', end);
+    }
+    return bodies;
+}
+/** Runs the scan; see {@link cronEnqueueOnlySuite}. */
+function check(context, options) {
+    if (context.sourceRoots.length === 0) {
+        throw new Error('cron-enqueue-only: sourceRoots is empty, so there is nothing to scan.');
+    }
+    if (!Number.isInteger(options.minCronFiles) || options.minCronFiles < 1) {
+        throw new Error('cron-enqueue-only: minCronFiles must be a positive integer, or the scan could pass vacuously.');
+    }
+    const markers = [...WORK_MARKERS, ...(options.extraWorkMarkers ?? [])];
+    const exemptFiles = new Set(options.exempt.map((entry) => entry.file));
+    const files = context.sourceRoots
+        .flatMap((root) => {
+        let found;
+        try {
+            found = sourceFiles(root);
+        }
+        catch (cause) {
+            throw new Error(`cron-enqueue-only: cannot read source root ${root}: ${cause.message}`);
+        }
+        return found.map((file) => ({ path: file, rel: (0, node_path_1.relative)(root, file).split('\\').join('/') }));
+    })
+        .map((file) => ({ ...file, source: (0, node_fs_1.readFileSync)(file.path, 'utf8') }))
+        .filter((file) => file.source.includes('@Cron('));
+    const findings = [];
+    for (const file of files) {
+        if (exemptFiles.has(file.rel))
+            continue;
+        for (const body of cronBodies(file.source)) {
+            if (!ENQUEUES.test(body)) {
+                findings.push({ file: file.rel, message: 'a @Cron body that queues nothing' });
+            }
+            for (const marker of markers) {
+                if (marker.pattern.test(body)) {
+                    findings.push({ file: file.rel, message: `a @Cron body containing ${marker.what}` });
+                }
+            }
+        }
+    }
+    return {
+        scanned: { cronFiles: files.length },
+        scannedFiles: { cronFiles: files.map((file) => file.rel) },
+        findings,
+    };
+}
+/** The tests the harness registers for this suite. */
+function cases(options) {
+    return [
+        {
+            // The failure this guards: a refactor moves the tasks, the scan finds
+            // nothing, and every case below passes over an empty list.
+            name: 'finds the crons at all, so a broken scan cannot pass vacuously',
+            run: (report, expect) => {
+                expect(report.scanned.cronFiles).toBeGreaterThanOrEqual(options.minCronFiles);
+            },
+        },
+        ...options.exempt.map((entry) => ({
+            name: `exempts ${entry.file}, on the record`,
+            run: (report, expect) => {
+                // The exemption is only real if the file is: a stale entry would
+                // silently exempt nothing while looking like it exempted something.
+                expect(report.scannedFiles.cronFiles).toContain(entry.file);
+                expect(entry.why.length).toBeGreaterThanOrEqual(41);
+            },
+        })),
+        {
+            name: 'queues its work instead of doing it, in every non-exempt cron',
+            run: (report, expect) => {
+                expect(report.findings.map((finding) => `${finding.file}: ${finding.message}`)).toEqual([]);
+            },
+        },
+    ];
+}
+/**
+ * The suite behind `runPlatformConformance({ suites: { cronEnqueueOnly } })`:
+ * every `@Cron` body enqueues a job and contains no marker of inline work.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.cronEnqueueOnlySuite = {
+    id: 'cron-enqueue-only',
+    title: 'every @Cron enqueues rather than working',
+    description: 'A @Cron body only decides whether work is due and enqueues a job; it never does the work inline.',
+    check,
+    cases,
+};
+//# sourceMappingURL=cron-enqueue-only.js.map

package/dist/testing/suites/cron-enqueue-only.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-enqueue-only.js","sourceRoot":"","sources":["../../../src/testing/suites/cron-enqueue-only.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,+DAA+D;AAC/D,gFAAgF;AAChF,+EAA+E;AAC/E,oCAAoC;AACpC,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,uFAAuF;AACvF,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;;;AAEhF,qCAA8D;AAC9D,yCAA2C;AA+C3C;;;;;;GAMG;AACH,MAAM,YAAY,GAAqD;IACrE,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE;IACpD,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,eAAe,EAAE;IAChE,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9C,EAAE,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,4BAA4B,EAAE;IACxE,EAAE,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpE,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,2BAA2B,EAAE;IAC7D,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,+BAA+B,EAAE;IACxE,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACvD,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC1E,EAAE,OAAO,EAAE,8BAA8B,EAAE,IAAI,EAAE,gCAAgC,EAAE;CACpF,CAAC;AAEF,mEAAmE;AACnE,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAExD,qDAAqD;AACrD,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErC,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAExC,IAAI,IAAI,KAAK,CAAC,CAAC;YAAE,MAAM;QAEvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,IAAI,CAAC;QAEf,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;iBAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC7B,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,KAAK,CAAC;oBAAE,MAAM;YACzB,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACzC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uDAAuD;AACvD,SAAS,KAAK,CAAC,OAA2B,EAAE,OAA+B;IACzE,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW;SAC9B,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAChB,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;SACrE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAExC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACjF,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,2BAA2B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE;QACpC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC1D,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,KAAK,CAAC,OAA+B;IAC5C,OAAO;QACL;YACE,sEAAsE;YACtE,2DAA2D;YAC3D,IAAI,EAAE,gEAAgE;YACtE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAChF,CAAC;SACF;QACD,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CACnB,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,WAAW,KAAK,CAAC,IAAI,iBAAiB;YAC5C,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,iEAAiE;gBACjE,oEAAoE;gBACpE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CACH;QACD;YACE,IAAI,EAAE,+DAA+D;YACrE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACU,QAAA,oBAAoB,GAA6C;IAC5E,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,0CAA0C;IACjD,WAAW,EAAE,kGAAkG;IAC/G,KAAK;IACL,KAAK;CACN,CAAC"}

package/dist/testing/suites/user-owned-data.d.ts

@@ -0,0 +1,86 @@
+import type { UserOwnedModelDef } from '../../core/index';
+import type { ConformanceFinding, ConformanceSuite } from '../conformance-suite';
+import { type DatamodelModel } from '../prisma-schema';
+/**
+ * How an app configures the user-owned data suite.
+ *
+ * @example
+ * ```ts
+ * const options: UserOwnedDataOptions = {
+ *   schemaPath: join(__dirname, '..', '..', 'prisma', 'schema'),
+ *   policies: userOwnedModelRegistry.list(),
+ *   rawSqlAllowlist: [{ file: 'health/indicators/database.indicator.ts', why: 'Health probe: SELECT 1.' }],
+ *   registerIn: 'src/app-registrations/user-owned-models.ts',
+ * };
+ * ```
+ *
+ * @extensionPoint option
+ * @stability experimental
+ */
+export interface UserOwnedDataOptions {
+    /** Absolute path to the app's `schema.prisma`, or to a folder of `*.prisma` files (a composed schema). */
+    schemaPath: string;
+    /** The app's registry contents: import the module that fills it, then pass `userOwnedModelRegistry.list()`. */
+    policies: readonly UserOwnedModelDef[];
+    /**
+     * Files allowed to issue raw SQL, as paths relative to the source root that
+     * contains them (`/` separators), each with a non-empty reason. The suite
+     * fails for an allowlisted file that no longer uses raw SQL (or is gone).
+     */
+    rawSqlAllowlist: ReadonlyArray<{
+        /** The file, relative to its source root, with `/` separators. */
+        file: string;
+        /** Why it needs raw SQL, and why no request-derived id reaches it unscoped. */
+        why: string;
+    }>;
+    /** The model whose foreign keys mark ownership. Default `'User'`. */
+    userModel?: string;
+    /**
+     * Where the fix goes, completing "Register `Model.field` in ...", for
+     * example `'src/app-registrations/user-owned-models.ts'`. Default: "the
+     * user-owned data registry".
+     */
+    registerIn?: string;
+}
+/**
+ * Every disagreement between the registered definitions and the datamodel.
+ * An empty array means the registry is complete and consistent. Pure.
+ *
+ * @internal
+ */
+export declare function checkUserOwnedModels(datamodel: readonly DatamodelModel[], defs: readonly UserOwnedModelDef[], options?: {
+    userModel?: string;
+    registerIn?: string;
+}): string[];
+/**
+ * Replaces the contents of comments and of `'...'`/`"..."` strings with
+ * spaces, keeping line breaks. Template literals are kept: a raw call is a tag
+ * written before one, never inside it.
+ *
+ * @internal
+ */
+export declare function blankCommentsAndStrings(source: string): string;
+/**
+ * The raw SQL methods a source file uses, outside comments and strings.
+ *
+ * @internal
+ */
+export declare function rawSqlUses(source: string): string[];
+/**
+ * One finding per unlisted file, per stale allowlist entry and per entry
+ * without a reason. Pure.
+ *
+ * @param found - every file using raw SQL, relative path → methods.
+ * @internal
+ */
+export declare function checkRawSqlAllowlist(found: ReadonlyMap<string, readonly string[]>, allowlist: UserOwnedDataOptions['rawSqlAllowlist']): ConformanceFinding[];
+/**
+ * The suite behind `runPlatformConformance({ suites: { userOwnedData } })`:
+ * every foreign key to `User` is registered with policies that match the
+ * schema, and raw SQL appears only in allowlisted files.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare const userOwnedDataSuite: ConformanceSuite<UserOwnedDataOptions>;
+//# sourceMappingURL=user-owned-data.d.ts.map

package/dist/testing/suites/user-owned-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-owned-data.d.ts","sourceRoot":"","sources":["../../../src/testing/suites/user-owned-data.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAGV,kBAAkB,EAElB,gBAAgB,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA+D,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEpH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,oBAAoB;IACnC,0GAA0G;IAC1G,UAAU,EAAE,MAAM,CAAC;IACnB,+GAA+G;IAC/G,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvC;;;;OAIG;IACH,eAAe,EAAE,aAAa,CAAC;QAC7B,kEAAkE;QAClE,IAAI,EAAE,MAAM,CAAC;QACb,+EAA+E;QAC/E,GAAG,EAAE,MAAM,CAAC;KACb,CAAC,CAAC;IACH,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAuBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,SAAS,cAAc,EAAE,EACpC,IAAI,EAAE,SAAS,iBAAiB,EAAE,EAClC,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,MAAM,EAAE,CAuFV;AAQD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAmC9D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAEnD;AAWD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,EAC7C,SAAS,EAAE,oBAAoB,CAAC,iBAAiB,CAAC,GACjD,kBAAkB,EAAE,CAkBtB;AA0FD;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB,CAOrE,CAAC"}

package/dist/testing/suites/user-owned-data.js

@@ -0,0 +1,329 @@
+"use strict";
+// =============================================================================
+// Suite: user-owned data is registered, and raw SQL is allowlisted
+// (issue #688, moved to the harness by #699)
+// =============================================================================
+//
+// Two tripwires around scoped data access (`@marinoscar/platform-api/core`,
+// "Scoped data access"), moved here UNCHANGED from the reference app's
+// apps/api/test/prisma/{user-owned-models,raw-sql-allowlist}.spec.ts:
+//
+//   1. Registry vs schema. Fails when a model gains a relation to `User`
+//      without a user-owned registry entry; when an entry names a model, field
+//      or exportOmit column that does not exist, or a field that is not a
+//      foreign key to `User`; when a purge policy contradicts the relation's
+//      `onDelete` ('delete' ⇔ Cascade, 'detach' ⇔ SetNull, 'retain' ⇔
+//      Restrict/NoAction); when an owner relation is not where `ownerRelation`
+//      points; or when an actor field on an owned model cascades.
+//   2. Raw SQL. Raw SQL bypasses the scoped client, so every non-spec source
+//      file using `$queryRaw`, `$queryRawUnsafe`, `$executeRaw` or
+//      `$executeRawUnsafe` (outside comments and string literals) must be on
+//      the app's allowlist with a reason, and every allowlisted file must
+//      still use raw SQL.
+//
+// The app keeps the DATA: its registrations (passed as `policies`), its schema
+// path and its allowlist.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userOwnedDataSuite = void 0;
+exports.checkUserOwnedModels = checkUserOwnedModels;
+exports.blankCommentsAndStrings = blankCommentsAndStrings;
+exports.rawSqlUses = rawSqlUses;
+exports.checkRawSqlAllowlist = checkRawSqlAllowlist;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const index_1 = require("../../core/index");
+const prisma_schema_1 = require("../prisma-schema");
+/** The `onDelete` values each purge policy accepts. */
+const PURGE_ON_DELETE = {
+    delete: ['Cascade'],
+    detach: ['SetNull'],
+    retain: ['Restrict', 'NoAction'],
+};
+// -----------------------------------------------------------------------------
+// Check 1: registry vs schema
+// -----------------------------------------------------------------------------
+/** Every relation to `userModel` that holds the foreign key on this side, keyed by FK field name. */
+function userForeignKeys(model, userModel) {
+    const keys = new Map();
+    for (const field of model.fields) {
+        if (field.type !== userModel || !field.relation)
+            continue;
+        for (const fk of field.relation.fields)
+            keys.set(fk, field);
+    }
+    return keys;
+}
+/**
+ * Every disagreement between the registered definitions and the datamodel.
+ * An empty array means the registry is complete and consistent. Pure.
+ *
+ * @internal
+ */
+function checkUserOwnedModels(datamodel, defs, options = {}) {
+    const userModel = options.userModel ?? 'User';
+    const registerIn = options.registerIn ?? 'the user-owned data registry';
+    const registerHint = (model, field) => `Register ${model}.${field} in ${registerIn}, with a purge and export policy.`;
+    const problems = [];
+    const models = new Map(datamodel.map((model) => [model.name, model]));
+    const registered = new Map(defs.map((def) => [def.model, def]));
+    // 1. Every User foreign key is registered.
+    for (const model of datamodel) {
+        for (const fk of userForeignKeys(model, userModel).keys()) {
+            const def = registered.get(model.name);
+            const fields = def ? [def.ownerField, ...(def.actorFields ?? [])] : [];
+            if (!fields.includes(fk)) {
+                problems.push(`${model.name}.${fk} is a foreign key to ${userModel} with no registry entry. ${registerHint(model.name, fk)}`);
+            }
+        }
+    }
+    // 2. Every registered model and field exists, and its policy matches onDelete.
+    for (const def of defs) {
+        const model = models.get(def.model);
+        if (!model) {
+            problems.push(`${def.model} is registered but schema.prisma has no such model. Remove or rename the entry.`);
+            continue;
+        }
+        const scalars = new Set(model.fields.filter((field) => !field.relation).map((field) => field.name));
+        const foreignKeys = userForeignKeys(model, userModel);
+        const checkField = (field, role) => {
+            if (!scalars.has(field)) {
+                problems.push(`${def.model}.${field} is registered as the ${role} field but schema.prisma has no such column.`);
+                return undefined;
+            }
+            const relation = foreignKeys.get(field);
+            if (!relation) {
+                problems.push(`${def.model}.${field} is registered as the ${role} field but is not a foreign key to ${userModel}.`);
+            }
+            return relation;
+        };
+        const checkPurge = (field, relation) => {
+            const onDelete = (0, prisma_schema_1.effectiveOnDelete)(relation);
+            const accepted = PURGE_ON_DELETE[def.purge];
+            if (!accepted.includes(onDelete)) {
+                problems.push(`${def.model}.${field}: purge '${def.purge}' requires onDelete ${accepted.join(' or ')}, but schema.prisma has ${onDelete} (relation ${relation.name}).`);
+            }
+        };
+        if (def.ownerField !== undefined) {
+            const relation = checkField(def.ownerField, 'owner');
+            if (relation) {
+                checkPurge(def.ownerField, relation);
+                const expected = (0, index_1.ownerRelationOf)(def);
+                if (relation.name !== expected) {
+                    problems.push(`${def.model}.${def.ownerField}: the owner relation field is "${relation.name}", not "${expected}". Set ownerRelation: '${relation.name}'.`);
+                }
+            }
+        }
+        for (const field of def.actorFields ?? []) {
+            const relation = checkField(field, 'actor');
+            if (!relation)
+                continue;
+            if (def.ownerField === undefined) {
+                checkPurge(field, relation);
+            }
+            else if ((0, prisma_schema_1.effectiveOnDelete)(relation) === 'Cascade') {
+                problems.push(`${def.model}.${field}: an actor field on an owned model cannot be onDelete Cascade: deleting the actor would delete a row another user owns.`);
+            }
+        }
+        for (const column of def.exportOmit ?? []) {
+            if (!scalars.has(column)) {
+                problems.push(`${def.model}.exportOmit names "${column}", which schema.prisma does not have.`);
+            }
+        }
+    }
+    return problems;
+}
+// -----------------------------------------------------------------------------
+// Check 2: raw SQL only in allowlisted files
+// -----------------------------------------------------------------------------
+const RAW_SQL = /\$(?:queryRaw|executeRaw)(?:Unsafe)?\b/g;
+/**
+ * Replaces the contents of comments and of `'...'`/`"..."` strings with
+ * spaces, keeping line breaks. Template literals are kept: a raw call is a tag
+ * written before one, never inside it.
+ *
+ * @internal
+ */
+function blankCommentsAndStrings(source) {
+    let out = '';
+    let i = 0;
+    while (i < source.length) {
+        const ch = source[i];
+        const next = source[i + 1];
+        if (ch === '/' && next === '/') {
+            const end = source.indexOf('\n', i);
+            const stop = end === -1 ? source.length : end;
+            out += ' '.repeat(stop - i);
+            i = stop;
+        }
+        else if (ch === '/' && next === '*') {
+            const end = source.indexOf('*/', i + 2);
+            const stop = end === -1 ? source.length : end + 2;
+            out += source.slice(i, stop).replace(/[^\n]/g, ' ');
+            i = stop;
+        }
+        else if (ch === '`') {
+            // Copied through, so a quote inside a template never starts a string.
+            let j = i + 1;
+            while (j < source.length && source[j] !== '`')
+                j += source[j] === '\\' ? 2 : 1;
+            out += source.slice(i, j + 1);
+            i = j + 1;
+        }
+        else if (ch === "'" || ch === '"') {
+            let j = i + 1;
+            while (j < source.length && source[j] !== ch && source[j] !== '\n') {
+                j += source[j] === '\\' ? 2 : 1;
+            }
+            out += ' '.repeat(Math.min(j + 1, source.length) - i);
+            i = j + 1;
+        }
+        else {
+            out += ch;
+            i += 1;
+        }
+    }
+    return out;
+}
+/**
+ * The raw SQL methods a source file uses, outside comments and strings.
+ *
+ * @internal
+ */
+function rawSqlUses(source) {
+    return [...new Set(blankCommentsAndStrings(source).match(RAW_SQL) ?? [])].sort();
+}
+/** Every `.ts` file under `dir`, excluding tests. */
+function sourceFiles(dir) {
+    return (0, node_fs_1.readdirSync)(dir).flatMap((entry) => {
+        const full = (0, node_path_1.join)(dir, entry);
+        if ((0, node_fs_1.statSync)(full).isDirectory())
+            return sourceFiles(full);
+        return entry.endsWith('.ts') && !entry.endsWith('.spec.ts') ? [full] : [];
+    });
+}
+/**
+ * One finding per unlisted file, per stale allowlist entry and per entry
+ * without a reason. Pure.
+ *
+ * @param found - every file using raw SQL, relative path → methods.
+ * @internal
+ */
+function checkRawSqlAllowlist(found, allowlist) {
+    const findings = [];
+    const listed = new Set(allowlist.map((entry) => entry.file));
+    for (const [file, uses] of found) {
+        if (!listed.has(file)) {
+            findings.push({
+                file,
+                message: `uses ${uses.join(', ')}: add it to the raw-SQL allowlist with a reason, and make sure it never runs with request-derived ids unscoped.`,
+            });
+        }
+    }
+    for (const entry of allowlist) {
+        if (!found.has(entry.file)) {
+            findings.push({ file: entry.file, message: 'is in the raw-SQL allowlist but no longer uses raw SQL (or no longer exists): remove the entry.' });
+        }
+        if (entry.why.trim() === '')
+            findings.push({ file: entry.file, message: 'the raw-SQL allowlist entry needs a reason.' });
+    }
+    return findings;
+}
+// -----------------------------------------------------------------------------
+// The suite
+// -----------------------------------------------------------------------------
+/** The `file` of every registry finding: the schema's own name (never a `.ts` path). */
+function schemaLabel(options) {
+    return (0, node_path_1.basename)(options.schemaPath);
+}
+/** Runs both scans; see {@link userOwnedDataSuite}. */
+function check(context, options) {
+    if (context.sourceRoots.length === 0) {
+        throw new Error('user-owned-data: sourceRoots is empty, so there is nothing to scan.');
+    }
+    let datamodel;
+    try {
+        datamodel = (0, prisma_schema_1.readSchemaDatamodel)(options.schemaPath);
+    }
+    catch (cause) {
+        throw new Error(`user-owned-data: cannot read the schema at ${options.schemaPath}: ${cause.message}`);
+    }
+    const userModel = options.userModel ?? 'User';
+    const label = schemaLabel(options);
+    const registryFindings = checkUserOwnedModels(datamodel, options.policies, {
+        userModel,
+        ...(options.registerIn !== undefined ? { registerIn: options.registerIn } : {}),
+    }).map((message) => ({ file: label, message }));
+    const found = new Map();
+    let scannedSources = 0;
+    for (const root of context.sourceRoots) {
+        let files;
+        try {
+            files = sourceFiles(root);
+        }
+        catch (cause) {
+            throw new Error(`user-owned-data: cannot read source root ${root}: ${cause.message}`);
+        }
+        for (const file of files) {
+            scannedSources += 1;
+            const uses = rawSqlUses((0, node_fs_1.readFileSync)(file, 'utf8'));
+            if (uses.length > 0)
+                found.set((0, node_path_1.relative)(root, file).split('\\').join('/'), uses);
+        }
+    }
+    const ownedModels = datamodel.filter((model) => userForeignKeys(model, userModel).size > 0);
+    return {
+        scanned: {
+            models: datamodel.length,
+            userForeignKeyModels: ownedModels.length,
+            sourceFiles: scannedSources,
+            rawSqlFiles: found.size,
+        },
+        scannedFiles: { rawSqlFiles: [...found.keys()] },
+        findings: [...registryFindings, ...checkRawSqlAllowlist(found, options.rawSqlAllowlist)],
+    };
+}
+/** The tests the harness registers for this suite. */
+function cases(options) {
+    const label = schemaLabel(options);
+    const describe = (finding) => `${finding.file}: ${finding.message}`;
+    return [
+        {
+            // The failure this guards: the schema moves, the parse finds nothing,
+            // and every case below passes over an empty datamodel.
+            name: 'reads the schema and the sources at all, so a broken scan cannot pass vacuously',
+            run: (report, expect) => {
+                expect(report.scanned.userForeignKeyModels).toBeGreaterThanOrEqual(1);
+                expect(report.scanned.sourceFiles).toBeGreaterThanOrEqual(1);
+            },
+        },
+        {
+            name: 'registers every User foreign key, with purge policies that match onDelete',
+            run: (report, expect) => {
+                expect(report.findings.filter((finding) => finding.file === label).map(describe)).toEqual([]);
+            },
+        },
+        {
+            name: 'issues raw SQL only from allowlisted files, each with a reason',
+            run: (report, expect) => {
+                expect(report.findings.filter((finding) => finding.file !== label).map(describe)).toEqual([]);
+            },
+        },
+    ];
+}
+/**
+ * The suite behind `runPlatformConformance({ suites: { userOwnedData } })`:
+ * every foreign key to `User` is registered with policies that match the
+ * schema, and raw SQL appears only in allowlisted files.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.userOwnedDataSuite = {
+    id: 'user-owned-data',
+    title: 'user-owned data is registered and raw SQL is allowlisted',
+    description: 'Every foreign key to User has a user-owned registry entry whose purge policy matches onDelete, and only allowlisted files issue raw SQL.',
+    check,
+    cases,
+};
+//# sourceMappingURL=user-owned-data.js.map

package/dist/testing/suites/user-owned-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-owned-data.js","sourceRoot":"","sources":["../../../src/testing/suites/user-owned-data.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,mEAAmE;AACnE,6CAA6C;AAC7C,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,sEAAsE;AACtE,EAAE;AACF,yEAAyE;AACzE,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,sEAAsE;AACtE,+EAA+E;AAC/E,kEAAkE;AAClE,6EAA6E;AAC7E,mEAAmE;AACnE,6EAA6E;AAC7E,0EAA0E;AAC1E,0BAA0B;AAC1B,EAAE;AACF,+EAA+E;AAC/E,0BAA0B;AAC1B,gFAAgF;;;AAqFhF,oDA2FC;AAeD,0DAmCC;AAOD,gCAEC;AAkBD,oDAqBC;AAhRD,qCAA8D;AAC9D,yCAAqD;AAErD,4CAAmD;AASnD,oDAAoH;AA4CpH,uDAAuD;AACvD,MAAM,eAAe,GAAoE;IACvF,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC,CAAC;AAEF,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,qGAAqG;AACrG,SAAS,eAAe,CAAC,KAAqB,EAAE,SAAiB;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,SAAS;QAC1D,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,SAAoC,EACpC,IAAkC,EAClC,UAAuD,EAAE;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,8BAA8B,CAAC;IACxE,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CACpD,YAAY,KAAK,IAAI,KAAK,OAAO,UAAU,mCAAmC,CAAC;IAEjF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CAA4B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAE3F,2CAA2C;IAC3C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,wBAAwB,SAAS,4BAA4B,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,iFAAiF,CAAC,CAAC;YAC7G,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpG,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEtD,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,IAAuB,EAA8B,EAAE;YACxF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,yBAAyB,IAAI,8CAA8C,CAAC,CAAC;gBAChH,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,yBAAyB,IAAI,sCAAsC,SAAS,GAAG,CAAC,CAAC;YACtH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,QAAwB,EAAE,EAAE;YAC7D,MAAM,QAAQ,GAAG,IAAA,iCAAiB,EAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,QAAQ,CAAC,IAAI,CACX,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,YAAY,GAAG,CAAC,KAAK,uBAAuB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,QAAQ,cAAc,QAAQ,CAAC,IAAI,IAAI,CACzJ,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,QAAQ,EAAE,CAAC;gBACb,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACrC,MAAM,QAAQ,GAAG,IAAA,uBAAe,EAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CACX,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,kCAAkC,QAAQ,CAAC,IAAI,WAAW,QAAQ,0BAA0B,QAAQ,CAAC,IAAI,IAAI,CAC5I,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACjC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,IAAA,iCAAiB,EAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CACX,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,yHAAyH,CAC/I,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,sBAAsB,MAAM,uCAAuC,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,6CAA6C;AAC7C,gFAAgF;AAEhF,MAAM,OAAO,GAAG,yCAAyC,CAAC;AAE1D;;;;;;GAMG;AACH,SAAgB,uBAAuB,CAAC,MAAc;IACpD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9C,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAC5B,CAAC,GAAG,IAAI,CAAC;QACX,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAClD,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpD,CAAC,GAAG,IAAI,CAAC;QACX,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,sEAAsE;YACtE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/E,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;YACD,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;YACV,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,MAAc;IACvC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnF,CAAC;AAED,qDAAqD;AACrD,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAClC,KAA6C,EAC7C,SAAkD;IAElD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iHAAiH;aAClJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,iGAAiG,EAAE,CAAC,CAAC;QAClJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,wFAAwF;AACxF,SAAS,WAAW,CAAC,OAA6B;IAChD,OAAO,IAAA,oBAAQ,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,uDAAuD;AACvD,SAAS,KAAK,CAAC,OAA2B,EAAE,OAA6B;IACvE,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,SAA2B,CAAC;IAChC,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,mCAAmB,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,CAAC,UAAU,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;QACzE,SAAS;QACT,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAsB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,cAAc,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAE5F,OAAO;QACL,OAAO,EAAE;YACP,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,oBAAoB,EAAE,WAAW,CAAC,MAAM;YACxC,WAAW,EAAE,cAAc;YAC3B,WAAW,EAAE,KAAK,CAAC,IAAI;SACxB;QACD,YAAY,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE;QAChD,QAAQ,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,KAAK,CAAC,OAA6B;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,CAAC,OAA2B,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;IACxF,OAAO;QACL;YACE,sEAAsE;YACtE,uDAAuD;YACvD,IAAI,EAAE,iFAAiF;YACvF,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;gBACtE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;SACF;QACD;YACE,IAAI,EAAE,2EAA2E;YACjF,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC;SACF;QACD;YACE,IAAI,EAAE,gEAAgE;YACtE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,kBAAkB,GAA2C;IACxE,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,0DAA0D;IACjE,WAAW,EACT,0IAA0I;IAC5I,KAAK;IACL,KAAK;CACN,CAAC"}