@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.4

package/dist/sharing/testing/conformance.js

@@ -0,0 +1,509 @@
+"use strict";
+// =============================================================================
+// The sharing slice's conformance suite (issue #732, PP-7.5)
+// =============================================================================
+//
+// The sharing invariants, checked against the APP that consumes the package
+// (spec: "Conformance suites travel with packages"). Importing
+// `@marinoscar/platform-api/sharing/testing` registers the `sharing` suite
+// with `runPlatformConformance()`.
+//
+//   1. no-direct-access: no app source file touches the sharing tables
+//      directly (`prisma.grant`, `.group`, `.groupMember`, `.groupInvite`, or
+//      `grants`, `groups`, `group_members`, `group_invites` in raw SQL). Apps
+//      go through the exported services and helpers. Same scanning technique
+//      as the `ai-no-sdk-leak` conformance suite.
+//   2. group-ownership-registered: every model of the composed schema with an
+//      `owner_group_id` column maps to a resource type registered as
+//      group-owned (`registerResourceType` with group ownership, or a direct
+//      `registerGroupOwnedResource`), so deleting a group can never orphan
+//      its rows.
+//   3. link-routes-guarded: every route reachable from the app's root module
+//      that carries `@LinkGrantResource` is behind `LinkGrantGuard` (and the
+//      other way round), names a type that grants a role to links, and, with
+//      the app's public-marker reader, is deliberately public; the slice's
+//      own routes are public only on the link pattern. Routes are read from
+//      Nest metadata, as the identity suite does.
+//   4. raw-sql-indexes: the three partial unique indexes the slice relies on
+//      exist in the app's migration SQL.
+//   5. resource-type-ids-stable: the registered resource type ids equal the
+//      app's committed snapshot. Removing an id that has grant rows is a
+//      breaking change, like a job type string.
+//
+// Everything is synchronous: one scan (`check`), five cases over its report.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sharingConformanceSuite = exports.SHARING_RAW_SQL_INDEXES = void 0;
+exports.checkNoDirectSharingAccess = checkNoDirectSharingAccess;
+exports.modelsWithOwnerGroupColumn = modelsWithOwnerGroupColumn;
+exports.checkGroupOwnershipRegistered = checkGroupOwnershipRegistered;
+exports.discoverSharingRoutes = discoverSharingRoutes;
+exports.checkLinkRoutesGuarded = checkLinkRoutesGuarded;
+exports.checkSharingRawSqlIndexes = checkSharingRawSqlIndexes;
+exports.checkResourceTypeIdsStable = checkResourceTypeIdsStable;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const constants_1 = require("@nestjs/common/constants");
+const index_1 = require("../../testing/index");
+const resource_types_1 = require("../access/resource-types");
+const link_grant_decorators_1 = require("../links/link-grant.decorators");
+const link_grant_guard_1 = require("../links/link-grant.guard");
+const link_grants_service_1 = require("../links/link-grants.service");
+const ownership_1 = require("../ownership");
+const sharing_module_1 = require("../sharing.module");
+/**
+ * The partial unique indexes the slice relies on (they exist only in migration SQL).
+ *
+ * @stability experimental
+ */
+exports.SHARING_RAW_SQL_INDEXES = Object.freeze([
+    'grants_active_user_uniq_idx',
+    'grants_active_group_uniq_idx',
+    'group_invites_pending_uniq_idx',
+]);
+const DELEGATES = ['grant', 'group', 'groupMember', 'groupInvite'];
+const METHODS = 'findMany|findFirst|findFirstOrThrow|findUnique|findUniqueOrThrow|create|createMany|createManyAndReturn|update|updateMany|updateManyAndReturn|upsert|delete|deleteMany|count|aggregate|groupBy';
+const DELEGATE_USE = new RegExp(`\\.\\s*(${DELEGATES.join('|')})\\s*\\.\\s*(${METHODS})\\s*\\(`, 'g');
+/** What precedes a raw-SQL literal: a `$queryRaw`/`$executeRaw`/`sql` tag, or an `*Unsafe(` call. */
+const RAW_SQL_TAG = /(?:\$(?:queryRaw|executeRaw)|\bsql)\s*$/;
+const RAW_SQL_UNSAFE_CALL = /\$(?:queryRaw|executeRaw)Unsafe\s*\(\s*$/;
+const RAW_TABLE_USE = /\b(from|join|into|update|table)\s+(?:"?public"?\.)?"?(grants|groups|group_members|group_invites)"?(?![\w"])/gi;
+/** Blanks `//` and block comments, keeping line breaks (strings and templates stay: raw SQL lives there). */
+function blankComments(source) {
+    let out = '';
+    let i = 0;
+    while (i < source.length) {
+        const ch = source[i];
+        const next = source[i + 1];
+        if (ch === '/' && next === '/') {
+            const end = source.indexOf('\n', i);
+            const stop = end === -1 ? source.length : end;
+            out += ' '.repeat(stop - i);
+            i = stop;
+        }
+        else if (ch === '/' && next === '*') {
+            const end = source.indexOf('*/', i + 2);
+            const stop = end === -1 ? source.length : end + 2;
+            out += source.slice(i, stop).replace(/[^\n]/g, ' ');
+            i = stop;
+        }
+        else if (ch === '`' || ch === "'" || ch === '"') {
+            let j = i + 1;
+            while (j < source.length && source[j] !== ch)
+                j += source[j] === '\\' ? 2 : 1;
+            out += source.slice(i, j + 1);
+            i = j + 1;
+        }
+        else {
+            out += ch;
+            i += 1;
+        }
+    }
+    return out;
+}
+/**
+ * The string and template literals of `source` that are raw SQL: a template
+ * tagged `$queryRaw`, `$executeRaw` or `sql` (`Prisma.sql`), or the first
+ * argument of `$queryRawUnsafe(` / `$executeRawUnsafe(`. Prose in other strings
+ * ("remove them from groups") is never read as SQL.
+ */
+function rawSqlLiterals(source) {
+    const out = [];
+    for (let i = 0; i < source.length; i++) {
+        const ch = source[i];
+        if (ch !== '`' && ch !== "'" && ch !== '"')
+            continue;
+        let j = i + 1;
+        while (j < source.length && source[j] !== ch)
+            j += source[j] === '\\' ? 2 : 1;
+        const before = source.slice(Math.max(0, i - 40), i);
+        if ((ch === '`' && RAW_SQL_TAG.test(before)) || RAW_SQL_UNSAFE_CALL.test(before))
+            out.push({ start: i, text: source.slice(i, j + 1) });
+        i = j;
+    }
+    return out;
+}
+function lineOf(source, index) {
+    return source.slice(0, index).split('\n').length;
+}
+/** Every non-test `.ts` file under `dir`. */
+function sourceFiles(dir) {
+    return (0, node_fs_1.readdirSync)(dir).flatMap((entry) => {
+        const path = (0, node_path_1.join)(dir, entry);
+        if ((0, node_fs_1.statSync)(path).isDirectory())
+            return entry === 'node_modules' ? [] : sourceFiles(path);
+        return /\.ts$/.test(entry) && !/\.(spec|test|d)\.ts$/.test(entry) ? [path] : [];
+    });
+}
+const toPosix = (path) => path.split(node_path_1.sep).join('/');
+/**
+ * Check 1: the files under `roots` that touch the sharing tables directly.
+ *
+ * @param roots - absolute source directories.
+ * @param exempt - files let through (relative to their root), with the reason.
+ * @returns the findings and the number of files scanned.
+ * @throws Error when a root does not exist.
+ *
+ * @stability experimental
+ */
+function checkNoDirectSharingAccess(roots, exempt = {}) {
+    const findings = [];
+    const used = new Set();
+    let files = 0;
+    for (const root of roots) {
+        if (!(0, node_fs_1.existsSync)(root))
+            throw new Error(`sharing conformance: source root ${root} does not exist`);
+        for (const path of sourceFiles(root)) {
+            files += 1;
+            const file = toPosix((0, node_path_1.relative)(root, path));
+            const source = blankComments((0, node_fs_1.readFileSync)(path, 'utf8'));
+            const hits = [];
+            for (const match of source.matchAll(DELEGATE_USE)) {
+                hits.push(`line ${lineOf(source, match.index)}: \`.${match[1]}.${match[2]}()\``);
+            }
+            for (const literal of rawSqlLiterals(source)) {
+                for (const match of literal.text.matchAll(RAW_TABLE_USE)) {
+                    hits.push(`line ${lineOf(source, literal.start + match.index)}: raw SQL on \`${match[2]}\``);
+                }
+            }
+            if (hits.length === 0)
+                continue;
+            if (exempt[file] !== undefined) {
+                used.add(file);
+                continue;
+            }
+            findings.push({
+                check: 'no-direct-access',
+                file,
+                message: `${hits.join(', ')} touches the sharing tables directly. Go through the slice: AccessPolicy (one record), ` +
+                    'accessibleWhere / accessibleSql / sharedResourceIds (lists; accessibleSql is the only sanctioned raw-SQL path to grants), ' +
+                    'GrantsService (share, revoke, deleteForResources in a delete transaction), GroupsService and GroupMembershipService (groups). ' +
+                    'Exempt the file in directAccessExempt only with a reason.',
+            });
+        }
+    }
+    for (const file of Object.keys(exempt)) {
+        if (!used.has(file)) {
+            findings.push({ check: 'no-direct-access', file, message: 'is in directAccessExempt but no longer touches the sharing tables: remove the stale entry.' });
+        }
+    }
+    return { findings, files };
+}
+/**
+ * The models of a Prisma schema that have an `owner_group_id` column
+ * (`@map("owner_group_id")`, or a field of that name).
+ *
+ * @param schemaPath - a `.prisma` file or a folder of them.
+ * @returns the model names, in schema order.
+ *
+ * @stability experimental
+ */
+function modelsWithOwnerGroupColumn(schemaPath) {
+    const text = (0, index_1.readSchemaText)(schemaPath)
+        .split('\n')
+        .map((line) => line.replace(/\/\/.*$/, ''))
+        .join('\n');
+    const models = [];
+    const withColumn = [];
+    for (const match of text.matchAll(/^\s*model\s+(\w+)\s*\{([\s\S]*?)^\s*\}/gm)) {
+        const [, name, body] = match;
+        models.push(name);
+        if (/@map\(\s*"owner_group_id"\s*\)/.test(body) || /^\s*owner_group_id\s/m.test(body))
+            withColumn.push(name);
+    }
+    return { models, withColumn };
+}
+/**
+ * Check 2: every `owner_group_id` model maps to a registered group-owned type.
+ *
+ * @param schemaPath - the composed schema.
+ * @param groupOwnedModels - model name to resource type id.
+ * @param registered - the group-owned resource type ids (default: the registry).
+ * @returns the findings and what the schema holds.
+ *
+ * @stability experimental
+ */
+function checkGroupOwnershipRegistered(schemaPath, groupOwnedModels = {}, registered = ownership_1.groupOwnedResourceRegistry.list().map((def) => def.type)) {
+    const { models, withColumn } = modelsWithOwnerGroupColumn(schemaPath);
+    const findings = [];
+    const known = new Set(registered);
+    for (const model of withColumn) {
+        const type = groupOwnedModels[model];
+        if (type === undefined) {
+            findings.push({
+                check: 'group-ownership-registered',
+                file: `model ${model}`,
+                message: "has an owner_group_id column but no group-owned resource type: register one (registerResourceType({ ownership: 'group' | 'user_or_group', countOwnedByGroup, ... }), " +
+                    "or registerGroupOwnedResource({ type, countOwnedByGroup }) when the rows are never shared) and map the model to it in groupOwnedModels. " +
+                    'Otherwise deleting a group would orphan its rows.',
+            });
+        }
+        else if (!known.has(type)) {
+            findings.push({
+                check: 'group-ownership-registered',
+                file: `model ${model}`,
+                message: `maps to resource type "${type}", which is not registered as group-owned: register it (registerResourceType with group ownership, or registerGroupOwnedResource) before the suite runs.`,
+            });
+        }
+    }
+    for (const [model, type] of Object.entries(groupOwnedModels)) {
+        if (!models.includes(model)) {
+            findings.push({ check: 'group-ownership-registered', file: `model ${model}`, message: `is in groupOwnedModels (-> "${type}") but not in the schema: remove the stale entry.` });
+        }
+        else if (!withColumn.includes(model)) {
+            findings.push({ check: 'group-ownership-registered', file: `model ${model}`, message: `is in groupOwnedModels (-> "${type}") but has no owner_group_id column: remove the entry or add the column.` });
+        }
+    }
+    return { findings, models: models.length, withColumn: withColumn.length };
+}
+const isDynamic = (value) => typeof value === 'object' && value !== null && 'module' in value;
+const isForwardRef = (value) => typeof value === 'object' && value !== null && 'forwardRef' in value;
+/**
+ * Every route reachable from `root` (static and dynamic module imports, each
+ * module once), with its link metadata and guards.
+ *
+ * @param root - the app's root module.
+ * @param isPublic - the app's public-marker reader, if any.
+ * @returns the routes, in discovery order.
+ *
+ * @stability experimental
+ */
+function discoverSharingRoutes(root, isPublic) {
+    const seen = new Set();
+    const controllers = [];
+    const visit = (entry) => {
+        if (!entry || entry instanceof Promise)
+            return;
+        const resolved = isForwardRef(entry) ? entry.forwardRef() : entry;
+        if (seen.has(resolved))
+            return;
+        seen.add(resolved);
+        const moduleClass = isDynamic(resolved) ? resolved.module : resolved;
+        const fromSlice = moduleClass === sharing_module_1.SharingModule;
+        const own = [
+            ...(Reflect.getMetadata(constants_1.MODULE_METADATA.CONTROLLERS, moduleClass) ?? []),
+            ...(isDynamic(resolved) ? (resolved.controllers ?? []) : []),
+        ];
+        for (const controller of own) {
+            if (!controllers.some((known) => known.controller === controller))
+                controllers.push({ controller, fromSlice });
+        }
+        const children = [
+            ...(Reflect.getMetadata(constants_1.MODULE_METADATA.IMPORTS, moduleClass) ?? []),
+            ...(isDynamic(resolved) ? (resolved.imports ?? []) : []),
+        ];
+        for (const child of children)
+            visit(child);
+    };
+    visit(root);
+    const isLinkGuard = (guard) => typeof guard === 'function' && (guard === link_grant_guard_1.LinkGrantGuard || guard.prototype instanceof link_grant_guard_1.LinkGrantGuard);
+    const routes = [];
+    for (const { controller, fromSlice } of controllers) {
+        const classGuards = (Reflect.getMetadata(constants_1.GUARDS_METADATA, controller) ?? []);
+        const classLink = Reflect.getMetadata(link_grant_decorators_1.LINK_GRANT_RESOURCE_KEY, controller);
+        const prototype = controller.prototype;
+        const names = new Set();
+        for (let proto = prototype; proto && proto !== Object.prototype; proto = Object.getPrototypeOf(proto)) {
+            for (const name of Object.getOwnPropertyNames(proto))
+                names.add(name);
+        }
+        for (const name of names) {
+            if (name === 'constructor')
+                continue;
+            const handler = prototype[name];
+            if (typeof handler !== 'function')
+                continue;
+            if (Reflect.getMetadata(constants_1.METHOD_METADATA, handler) === undefined || Reflect.getMetadata(constants_1.PATH_METADATA, handler) === undefined)
+                continue;
+            const guards = [...classGuards, ...(Reflect.getMetadata(constants_1.GUARDS_METADATA, handler) ?? [])];
+            const linkResource = Reflect.getMetadata(link_grant_decorators_1.LINK_GRANT_RESOURCE_KEY, handler) ?? classLink;
+            routes.push({
+                id: `${controller.name}#${name}`,
+                fromSlice,
+                ...(linkResource ? { linkResource } : {}),
+                linkGuarded: guards.some(isLinkGuard),
+                ...(isPublic ? { isPublic: isPublic(handler) || isPublic(controller) } : {}),
+            });
+        }
+    }
+    return routes;
+}
+/**
+ * Check 3: link routes are guarded, declared, servable and deliberately public.
+ *
+ * @param routes - from {@link discoverSharingRoutes}.
+ * @returns the findings.
+ *
+ * @stability experimental
+ */
+function checkLinkRoutesGuarded(routes) {
+    const findings = [];
+    const push = (file, message) => void findings.push({ check: 'link-routes-guarded', file, message });
+    for (const route of routes) {
+        if (route.linkResource && !route.linkGuarded) {
+            push(route.id, 'declares @LinkGrantResource but is not behind LinkGrantGuard: the metadata alone authenticates nothing, so the route is public with no link check. Add @UseGuards(LinkGrantGuard) to the controller or the handler.');
+        }
+        if (route.linkGuarded && !route.linkResource) {
+            push(route.id, 'is behind LinkGrantGuard without @LinkGrantResource(type, { action }): the guard fails closed (500) on every request. Declare the resource type and action the route serves.');
+        }
+        const type = route.linkResource?.resourceType;
+        if (type && type !== link_grants_service_1.ANY_LINK_RESOURCE_TYPE) {
+            const def = resource_types_1.resourceTypeRegistry.get(type);
+            if (!def) {
+                push(route.id, `serves links of "${type}", which is not a registered resource type: every request would be a 404. Register it with registerResourceType before the suite runs.`);
+            }
+            else if ((def.grantable?.link ?? []).length === 0) {
+                push(route.id, `serves links of "${type}", whose type lists no role under grantable.link: no link of it can exist. Add grantable: { link: [...] } to the type.`);
+            }
+        }
+        if (route.isPublic === undefined)
+            continue;
+        if (route.linkGuarded && !route.isPublic) {
+            push(route.id, "is behind LinkGrantGuard but carries no public marker: add the app's @Public(), so the route inventory (and the identity suite) sees it as deliberately public.");
+        }
+        if (route.fromSlice && route.isPublic && !route.linkGuarded) {
+            push(route.id, 'is a public route of the sharing slice outside the link pattern: the only sharing routes without @Auth() are the link routes behind LinkGrantGuard.');
+        }
+    }
+    return findings;
+}
+/** Every `migration.sql` under `dir`, as one text. */
+function migrationsText(dir) {
+    if (!(0, node_fs_1.existsSync)(dir))
+        throw new Error(`sharing conformance: migrations folder ${dir} does not exist`);
+    const walk = (path) => (0, node_fs_1.statSync)(path).isDirectory() ? (0, node_fs_1.readdirSync)(path).sort().flatMap((entry) => walk((0, node_path_1.join)(path, entry))) : path.endsWith('.sql') ? [path] : [];
+    const files = walk(dir);
+    return { files: files.length, text: files.map((file) => (0, node_fs_1.readFileSync)(file, 'utf8')).join('\n') };
+}
+/**
+ * Check 4: the slice's partial unique indexes exist in the migration SQL.
+ *
+ * @param migrationsDir - the app's migrations folder.
+ * @param indexes - the names to find (default {@link SHARING_RAW_SQL_INDEXES}).
+ * @returns the findings and the number of SQL files read.
+ *
+ * @stability experimental
+ */
+function checkSharingRawSqlIndexes(migrationsDir, indexes = exports.SHARING_RAW_SQL_INDEXES) {
+    const { files, text } = migrationsText(migrationsDir);
+    const findings = [];
+    for (const name of indexes) {
+        const pattern = new RegExp(`CREATE\\s+UNIQUE\\s+INDEX\\s+(?:CONCURRENTLY\\s+)?(?:IF\\s+NOT\\s+EXISTS\\s+)?"?${name}"?(?![\\w])`, 'i');
+        if (!pattern.test(text)) {
+            findings.push({
+                check: 'raw-sql-indexes',
+                file: `index ${name}`,
+                message: `is missing from the migrations under ${toPosix(migrationsDir)}. It exists only in migration SQL (Prisma cannot express a partial unique index): ` +
+                    'install the sharing migrations (npm run db:sync, then prisma:migrate), and never replace it with @@unique or a findFirst pre-check.',
+            });
+        }
+    }
+    return { findings, files };
+}
+/**
+ * Check 5: the registered resource type ids equal the committed snapshot.
+ *
+ * @param snapshot - the app's committed ids.
+ * @param registered - the registered ids (default: the registry).
+ * @returns the findings.
+ *
+ * @stability experimental
+ */
+function checkResourceTypeIdsStable(snapshot, registered = resource_types_1.resourceTypeRegistry.list().map((def) => def.type)) {
+    const findings = [];
+    for (const id of snapshot) {
+        if (!registered.includes(id)) {
+            findings.push({
+                check: 'resource-type-ids-stable',
+                file: `resource type ${id}`,
+                message: 'is in the snapshot but no longer registered. A resource type id is permanent once grants of it exist, like a job type string: ' +
+                    'removing or renaming it orphans every grant row of that type (a breaking change). Re-register it; remove it from the snapshot only ' +
+                    'in the change that proves no grant of the type exists (or migrates them).',
+            });
+        }
+    }
+    for (const id of registered) {
+        if (!snapshot.includes(id)) {
+            findings.push({
+                check: 'resource-type-ids-stable',
+                file: `resource type ${id}`,
+                message: 'is registered but not in the snapshot: add it to resourceTypeIds (the id is permanent once grants of it exist).',
+            });
+        }
+    }
+    return findings;
+}
+/** The findings of one check. */
+function of(report, check) {
+    return report.findings.filter((finding) => finding.check === check);
+}
+/**
+ * The `sharing` conformance suite. Registered when
+ * `@marinoscar/platform-api/sharing/testing` is imported.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.sharingConformanceSuite = {
+    id: 'sharing',
+    title: 'the sharing slice keeps its invariants',
+    description: 'No app file touches the sharing tables directly, every owner_group_id model is a registered group-owned resource, every link route is behind LinkGrantGuard, the raw-SQL indexes exist and resource type ids never disappear.',
+    check(context, options) {
+        const direct = checkNoDirectSharingAccess(options.apiSourceRoots ?? context.sourceRoots, options.directAccessExempt);
+        const ownership = checkGroupOwnershipRegistered(options.schemaPath, options.groupOwnedModels);
+        const routes = discoverSharingRoutes(options.rootModule, options.isPublic);
+        const links = checkLinkRoutesGuarded(routes);
+        if (routes.length < (options.minRoutes ?? 1)) {
+            links.unshift({
+                check: 'link-routes-guarded',
+                file: 'routes',
+                message: `the walk found ${routes.length} route(s), fewer than ${options.minRoutes ?? 1}: is rootModule the app's root module?`,
+            });
+        }
+        const indexes = checkSharingRawSqlIndexes(options.migrationsDir);
+        const ids = checkResourceTypeIdsStable(options.resourceTypeIds);
+        if (direct.files === 0) {
+            direct.findings.unshift({ check: 'no-direct-access', file: 'sourceRoots', message: 'hold no .ts file: the scan would be vacuous.' });
+        }
+        return {
+            scanned: {
+                sourceFiles: direct.files,
+                models: ownership.models,
+                ownerGroupModels: ownership.withColumn,
+                routes: routes.length,
+                linkRoutes: routes.filter((route) => route.linkGuarded || route.linkResource).length,
+                migrationFiles: indexes.files,
+                resourceTypes: resource_types_1.resourceTypeRegistry.list().length,
+            },
+            scannedFiles: { linkRoutes: routes.filter((route) => route.linkGuarded || route.linkResource).map((route) => route.id) },
+            findings: [...direct.findings, ...ownership.findings, ...links, ...indexes.findings, ...ids],
+        };
+    },
+    cases() {
+        return [
+            {
+                name: 'no-direct-access: no app file reads or writes the grants and groups tables directly',
+                run: (report, expect) => expect(of(report, 'no-direct-access')).toEqual([]),
+            },
+            {
+                name: 'group-ownership-registered: every owner_group_id model is a registered group-owned resource',
+                run: (report, expect) => expect(of(report, 'group-ownership-registered')).toEqual([]),
+            },
+            {
+                name: 'link-routes-guarded: every @LinkGrantResource route is behind LinkGrantGuard and deliberately public',
+                run: (report, expect) => expect(of(report, 'link-routes-guarded')).toEqual([]),
+            },
+            {
+                name: 'raw-sql-indexes: the sharing partial unique indexes are in the migration SQL',
+                run: (report, expect) => expect(of(report, 'raw-sql-indexes')).toEqual([]),
+            },
+            {
+                name: 'resource-type-ids-stable: the registered resource type ids equal the snapshot',
+                run: (report, expect) => expect(of(report, 'resource-type-ids-stable')).toEqual([]),
+            },
+        ];
+    },
+};
+if (!index_1.conformanceSuites.has(exports.sharingConformanceSuite.id))
+    index_1.conformanceSuites.register(exports.sharingConformanceSuite);
+//# sourceMappingURL=conformance.js.map

package/dist/sharing/testing/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../../src/sharing/testing/conformance.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,6DAA6D;AAC7D,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,+DAA+D;AAC/D,2EAA2E;AAC3E,mCAAmC;AACnC,EAAE;AACF,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,kDAAkD;AAClD,8EAA8E;AAC9E,qEAAqE;AACrE,6EAA6E;AAC7E,2EAA2E;AAC3E,iBAAiB;AACjB,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,kDAAkD;AAClD,6EAA6E;AAC7E,yCAAyC;AACzC,4EAA4E;AAC5E,yEAAyE;AACzE,gDAAgD;AAChD,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;;;AA2MhF,gEAiDC;AAWD,gEAkBC;AAYD,sEA0CC;AAmCD,sDAqDC;AAUD,wDA+BC;AAoBD,8DAwBC;AAWD,gEA2BC;AAhiBD,qCAA0E;AAC1E,yCAAgD;AAGhD,wDAA4G;AAE5G,+CAAwE;AAExE,6DAAgE;AAChE,0EAAyE;AACzE,gEAA2D;AAC3D,sEAAsG;AACtG,4CAA0D;AAC1D,sDAAkD;AA6FlD;;;;GAIG;AACU,QAAA,uBAAuB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACtE,6BAA6B;IAC7B,8BAA8B;IAC9B,gCAAgC;CACjC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,CAAU,CAAC;AAC5E,MAAM,OAAO,GACX,+LAA+L,CAAC;AAClM,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,WAAW,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,OAAO,UAAU,EAAE,GAAG,CAAC,CAAC;AACtG,qGAAqG;AACrG,MAAM,WAAW,GAAG,yCAAyC,CAAC;AAC9D,MAAM,mBAAmB,GAAG,0CAA0C,CAAC;AACvE,MAAM,aAAa,GAAG,+GAA+G,CAAC;AAEtI,6GAA6G;AAC7G,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9C,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAC5B,CAAC,GAAG,IAAI,CAAC;QACX,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAClD,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpD,CAAC,GAAG,IAAI,CAAC;QACX,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE;gBAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;YACV,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,GAAG,GAA2C,EAAE,CAAC;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,SAAS;QACrD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC,GAAG,CAAC,CAAC;IACR,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,KAAa;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,6CAA6C;AAC7C,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3F,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEpE;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CACxC,KAAwB,EACxB,SAA2C,EAAE;IAO7C,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,iBAAiB,CAAC,CAAC;QAClG,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACzD,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACnF,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACzD,IAAI,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,kBAAkB;gBACzB,IAAI;gBACJ,OAAO,EACL,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,yFAAyF;oBAC3G,4HAA4H;oBAC5H,gIAAgI;oBAChI,2DAA2D;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,4FAA4F,EAAE,CAAC,CAAC;QAC5J,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,0BAA0B,CAAC,UAAkB;IAM3D,MAAM,IAAI,GAAG,IAAA,sBAAc,EAAC,UAAU,CAAC;SACpC,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;SAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,KAA4C,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,6BAA6B,CAC3C,UAAkB,EAClB,mBAAqD,EAAE,EACvD,aAAgC,sCAA0B,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IASxF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,4BAA4B;gBACnC,IAAI,EAAE,SAAS,KAAK,EAAE;gBACtB,OAAO,EACL,uKAAuK;oBACvK,0IAA0I;oBAC1I,mDAAmD;aACtD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,4BAA4B;gBACnC,IAAI,EAAE,SAAS,KAAK,EAAE;gBACtB,OAAO,EAAE,0BAA0B,IAAI,0JAA0J;aAClM,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,OAAO,EAAE,+BAA+B,IAAI,mDAAmD,EAAE,CAAC,CAAC;QAClL,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,KAAK,EAAE,EAAE,OAAO,EAAE,+BAA+B,IAAI,0EAA0E,EAAE,CAAC,CAAC;QACzM,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;AAC5E,CAAC;AAsBD,MAAM,SAAS,GAAG,CAAC,KAAc,EAA0B,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,CAAC;AAC/H,MAAM,YAAY,GAAG,CAAC,KAAc,EAA6B,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,IAAI,KAAK,CAAC;AAEzI;;;;;;;;;GASG;AACH,SAAgB,qBAAqB,CAAC,IAAmC,EAAE,QAAsC;IAC/G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,MAAM,WAAW,GAA6D,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,CAAC,KAA6B,EAAQ,EAAE;QACpD,IAAI,CAAC,KAAK,IAAI,KAAK,YAAY,OAAO;YAAE,OAAO;QAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,UAAU,EAAiB,CAAC,CAAC,CAAC,KAAK,CAAC;QAClF,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC/B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,QAA0B,CAAC;QACxF,MAAM,SAAS,GAAG,WAAW,KAAK,8BAAa,CAAC;QAChD,MAAM,GAAG,GAAG;YACV,GAAI,CAAC,OAAO,CAAC,WAAW,CAAC,2BAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAA0B;YAClG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,GAAG,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,QAAQ,GAAG;YACf,GAAI,CAAC,OAAO,CAAC,WAAW,CAAC,2BAAe,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,CAAkB;YACtF,GAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAkB;SAC3E,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,QAAQ;YAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IAEZ,MAAM,WAAW,GAAG,CAAC,KAAc,EAAW,EAAE,CAC9C,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC,KAAK,KAAK,iCAAc,IAAI,KAAK,CAAC,SAAS,YAAY,iCAAc,CAAC,CAAC;IACzG,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,2BAAe,EAAE,UAAU,CAAC,IAAI,EAAE,CAAc,CAAC;QAC1F,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,+CAAuB,EAAE,UAAU,CAA0C,CAAC;QACpH,MAAM,SAAS,GAAG,UAAU,CAAC,SAAoC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,IAAI,KAAK,GAAkB,SAAS,EAAE,KAAK,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACrH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,aAAa;gBAAE,SAAS;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,OAAO,OAAO,KAAK,UAAU;gBAAE,SAAS;YAC5C,IAAI,OAAO,CAAC,WAAW,CAAC,2BAAe,EAAE,OAAO,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,yBAAa,EAAE,OAAO,CAAC,KAAK,SAAS;gBAAE,SAAS;YACvI,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,EAAE,GAAI,CAAC,OAAO,CAAC,WAAW,CAAC,2BAAe,EAAE,OAAO,CAAC,IAAI,EAAE,CAAe,CAAC,CAAC;YACzG,MAAM,YAAY,GAAI,OAAO,CAAC,WAAW,CAAC,+CAAuB,EAAE,OAAO,CAA2C,IAAI,SAAS,CAAC;YACnI,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,GAAG,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE;gBAChC,SAAS;gBACT,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;gBACrC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,MAA+B;IACpE,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAQ,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1H,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,CACF,KAAK,CAAC,EAAE,EACR,qNAAqN,CACtN,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,8KAA8K,CAAC,CAAC;QACjM,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC;QAC9C,IAAI,IAAI,IAAI,IAAI,KAAK,4CAAsB,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,qCAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,IAAI,wIAAwI,CAAC,CAAC;YACnL,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,IAAI,wHAAwH,CAAC,CAAC;YACnK,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,SAAS;QAC3C,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,iKAAiK,CAAC,CAAC;QACpL,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,qJAAqJ,CAAC,CAAC;QACxK,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sDAAsD;AACtD,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,iBAAiB,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAY,EAAE,CACtC,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5I,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACnG,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CACvC,aAAqB,EACrB,UAA6B,+BAAuB;IAOpD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,mFAAmF,IAAI,aAAa,EAAE,GAAG,CAAC,CAAC;QACtI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,SAAS,IAAI,EAAE;gBACrB,OAAO,EACL,wCAAwC,OAAO,CAAC,aAAa,CAAC,oFAAoF;oBAClJ,qIAAqI;aACxI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,0BAA0B,CACxC,QAA2B,EAC3B,aAAgC,qCAAoB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IAElF,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,0BAA0B;gBACjC,IAAI,EAAE,iBAAiB,EAAE,EAAE;gBAC3B,OAAO,EACL,gIAAgI;oBAChI,qIAAqI;oBACrI,2EAA2E;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,0BAA0B;gBACjC,IAAI,EAAE,iBAAiB,EAAE,EAAE;gBAC3B,OAAO,EAAE,iHAAiH;aAC3H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iCAAiC;AACjC,SAAS,EAAE,CAAC,MAAyB,EAAE,KAA8B;IACnE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAE,OAAqC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;GAMG;AACU,QAAA,uBAAuB,GAAgD;IAClF,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,wCAAwC;IAC/C,WAAW,EACT,+NAA+N;IACjO,KAAK,CAAC,OAAO,EAAE,OAAO;QACpB,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACrH,MAAM,SAAS,GAAG,6BAA6B,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,OAAO,CAAC;gBACZ,KAAK,EAAE,qBAAqB;gBAC5B,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,kBAAkB,MAAM,CAAC,MAAM,yBAAyB,OAAO,CAAC,SAAS,IAAI,CAAC,wCAAwC;aAChI,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,yBAAyB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,0BAA0B,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACvI,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM,CAAC,KAAK;gBACzB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,gBAAgB,EAAE,SAAS,CAAC,UAAU;gBACtC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM;gBACpF,cAAc,EAAE,OAAO,CAAC,KAAK;gBAC7B,aAAa,EAAE,qCAAoB,CAAC,IAAI,EAAE,CAAC,MAAM;aAClD;YACD,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;YACxH,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC;SAC7F,CAAC;IACJ,CAAC;IACD,KAAK;QACH,OAAO;YACL;gBACE,IAAI,EAAE,qFAAqF;gBAC3F,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aAC5E;YACD;gBACE,IAAI,EAAE,6FAA6F;gBACnG,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aACtF;YACD;gBACE,IAAI,EAAE,sGAAsG;gBAC5G,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aAC/E;YACD;gBACE,IAAI,EAAE,8EAA8E;gBACpF,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aAC3E;YACD;gBACE,IAAI,EAAE,+EAA+E;gBACrF,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aACpF;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,IAAI,CAAC,yBAAiB,CAAC,GAAG,CAAC,+BAAuB,CAAC,EAAE,CAAC;IAAE,yBAAiB,CAAC,QAAQ,CAAC,+BAAuB,CAAC,CAAC"}

package/dist/sharing/testing/grantee-kind-conformance.d.ts

@@ -0,0 +1,77 @@
+import type { Principal } from '../../core/index';
+import type { SqlKit } from '../access/accessible';
+import { type GranteeFacts, type GranteeKindDef } from '../access/grantee-kinds';
+/**
+ * Strings a fragment must never let into its SQL text.
+ *
+ * @stability experimental
+ */
+export declare const HOSTILE_STRINGS: readonly string[];
+/**
+ * What an app hands the kit.
+ *
+ * @typeParam S - the app's `Prisma.Sql`.
+ *
+ * @stability experimental
+ */
+export interface GranteeKindConformanceSubject<S> {
+    /** The kind under test. It need not be registered: the kit calls its members directly. */
+    readonly kind: GranteeKindDef;
+    /** The app's SQL builders (`Prisma`). */
+    readonly sqlKit: SqlKit<S>;
+    /**
+     * Runs `query` (a `SELECT (<condition>) AS match`) on the app's database and
+     * returns the `match` column of its one row: `$queryRaw` in the reference app.
+     */
+    readonly runQuery: (query: S) => Promise<boolean | null>;
+    /** Principals to test against (valid uuids; with groups as the kind needs). */
+    readonly principals: readonly Principal[];
+    /** Stored grantees to test (the grants row's grantee columns), of this kind and of others. */
+    readonly grantees: readonly GranteeFacts[];
+    /** Inputs `validateGrantee` accepts. */
+    readonly validInputs: readonly unknown[];
+    /** Inputs it must refuse. */
+    readonly invalidInputs: readonly unknown[];
+}
+/**
+ * The checks of {@link describeGranteeKindConformance}, as functions returning
+ * their violations (empty: the check passes).
+ *
+ * @stability experimental
+ */
+export declare const granteeKindChecks: {
+    /** The descriptor parses and the fixture matrix is not empty. */
+    descriptor<S>(subject: GranteeKindConformanceSubject<S>): Promise<string[]>;
+    /** `validateGrantee` accepts the valid inputs, refuses the invalid ones and stays in its own kind. */
+    validation<S>(subject: GranteeKindConformanceSubject<S>): Promise<string[]>;
+    /** `describe` answers every valid grantee with a display string. */
+    describe<S>(subject: GranteeKindConformanceSubject<S>): Promise<string[]>;
+    /** The in-memory match equals the SQL fragment, evaluated by the database, over the principal x grantee matrix. */
+    agreement<S>(subject: GranteeKindConformanceSubject<S>): Promise<string[]>;
+    /** A grantee of another kind never matches, in memory or in SQL. */
+    otherKinds<S>(subject: GranteeKindConformanceSubject<S>): Promise<string[]>;
+    /** No principal-derived string reaches the SQL text; a sub-select binds the caller's organization value. */
+    sqlSafety<S>(subject: GranteeKindConformanceSubject<S>): Promise<string[]>;
+};
+/**
+ * Registers the grantee-kind conformance suite.
+ *
+ * @param name - the suite's name.
+ * @param subject - the kind and its fixtures.
+ *
+ * @example
+ * ```ts
+ * describeGranteeKindConformance('email-domain', {
+ *   kind: emailDomainGranteeKind,
+ *   sqlKit: Prisma,
+ *   runQuery: async (query) => (await prisma.$queryRaw<Array<{ match: boolean | null }>>(query))[0]?.match ?? null,
+ *   principals, grantees,
+ *   validInputs: ['example.com'], invalidInputs: ['', 'not a domain'],
+ * });
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export declare function describeGranteeKindConformance<S>(name: string, subject: GranteeKindConformanceSubject<S>): void;
+//# sourceMappingURL=grantee-kind-conformance.d.ts.map

package/dist/sharing/testing/grantee-kind-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grantee-kind-conformance.d.ts","sourceRoot":"","sources":["../../../src/sharing/testing/grantee-kind-conformance.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAA4C,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAI3H;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAM5C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B,CAAC,CAAC;IAC9C,0FAA0F;IAC1F,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzD,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;IAC1C,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,OAAO,EAAE,CAAC;IACzC,6BAA6B;IAC7B,QAAQ,CAAC,aAAa,EAAE,SAAS,OAAO,EAAE,CAAC;CAC5C;AA0BD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;IAC5B,iEAAiE;eAChD,CAAC,WAAW,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQjF,sGAAsG;eACrF,CAAC,WAAW,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAoBjF,oEAAoE;aACrD,CAAC,WAAW,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAY/E,mHAAmH;cACnG,CAAC,WAAW,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAchF,oEAAoE;eACnD,CAAC,WAAW,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcjF,4GAA4G;cAC5F,CAAC,WAAW,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAwBjF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC,GAAG,IAAI,CAY/G"}