@nest-boot/row-level-security 7.0.0 → 7.2.0

package/dist/interfaces/row-level-security-options.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=row-level-security-options.interface.js.map

package/dist/interfaces/row-level-security-options.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"row-level-security-options.interface.js","sourceRoot":"","sources":["../../src/interfaces/row-level-security-options.interface.ts"],"names":[],"mappings":""}

package/dist/row-level-security-context.d.ts

@@ -1,14 +0,0 @@
-import { RowLevelSecurityContextValue, SnakeCase } from "./utils/row-level-security-context-builder.types";
-/** Request-scoped row-level security role and context helpers. */
-export declare class RowLevelSecurityContext {
-    /** Stores the database role that should be applied to the next RLS transaction. */
-    static setRole(role: string): void;
-    /** Reads the request-scoped database role, if one is active. */
-    static getRole(): string | undefined;
-    /** Stores a context value that will be converted to a PostgreSQL setting. */
-    static set<S extends string>(key: SnakeCase<S>, value: RowLevelSecurityContextValue): void;
-    /** Reads a request-scoped context value by key. */
-    static get<S extends string>(key: SnakeCase<S>): RowLevelSecurityContextValue;
-    /** Returns all request-scoped context entries for RLS transaction setup. */
-    static entries(): [string, RowLevelSecurityContextValue][];
-}

package/dist/row-level-security-context.js

@@ -1,38 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RowLevelSecurityContext = void 0;
-const request_context_1 = require("@nest-boot/request-context");
-const ROW_LEVEL_SECURITY_CONTEXT = Symbol("ROW_LEVEL_SECURITY_CONTEXT");
-const ROW_LEVEL_SECURITY_ROLE = Symbol("ROW_LEVEL_SECURITY_ROLE");
-/** Request-scoped row-level security role and context helpers. */
-class RowLevelSecurityContext {
-    /** Stores the database role that should be applied to the next RLS transaction. */
-    static setRole(role) {
-        request_context_1.RequestContext.set(ROW_LEVEL_SECURITY_ROLE, role);
-    }
-    /** Reads the request-scoped database role, if one is active. */
-    static getRole() {
-        return request_context_1.RequestContext.isActive()
-            ? request_context_1.RequestContext.get(ROW_LEVEL_SECURITY_ROLE)
-            : undefined;
-    }
-    /** Stores a context value that will be converted to a PostgreSQL setting. */
-    static set(key, value) {
-        const context = request_context_1.RequestContext.getOrSet(ROW_LEVEL_SECURITY_CONTEXT, new Map());
-        context.set(key, value);
-    }
-    /** Reads a request-scoped context value by key. */
-    static get(key) {
-        return request_context_1.RequestContext.isActive()
-            ? request_context_1.RequestContext.get(ROW_LEVEL_SECURITY_CONTEXT)?.get(key)
-            : undefined;
-    }
-    /** Returns all request-scoped context entries for RLS transaction setup. */
-    static entries() {
-        return request_context_1.RequestContext.isActive()
-            ? Array.from(request_context_1.RequestContext.get(ROW_LEVEL_SECURITY_CONTEXT) ?? [])
-            : [];
-    }
-}
-exports.RowLevelSecurityContext = RowLevelSecurityContext;
-//# sourceMappingURL=row-level-security-context.js.map

package/dist/row-level-security-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"row-level-security-context.js","sourceRoot":"","sources":["../src/row-level-security-context.ts"],"names":[],"mappings":";;;AAAA,gEAA4D;AAS5D,MAAM,0BAA0B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AACxE,MAAM,uBAAuB,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAElE,kEAAkE;AAClE,MAAa,uBAAuB;IAClC,mFAAmF;IACnF,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,gCAAc,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,gEAAgE;IAChE,MAAM,CAAC,OAAO;QACZ,OAAO,gCAAc,CAAC,QAAQ,EAAE;YAC9B,CAAC,CAAC,gCAAc,CAAC,GAAG,CAAS,uBAAuB,CAAC;YACrD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,GAAG,CACR,GAAiB,EACjB,KAAmC;QAEnC,MAAM,OAAO,GAAG,gCAAc,CAAC,QAAQ,CACrC,0BAA0B,EAC1B,IAAI,GAAG,EAAE,CACV,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,GAAG,CACR,GAAiB;QAEjB,OAAO,gCAAc,CAAC,QAAQ,EAAE;YAC9B,CAAC,CAAC,gCAAc,CAAC,GAAG,CAChB,0BAA0B,CAC3B,EAAE,GAAG,CAAC,GAAG,CAAC;YACb,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,OAAO;QACZ,OAAO,gCAAc,CAAC,QAAQ,EAAE;YAC9B,CAAC,CAAC,KAAK,CAAC,IAAI,CACR,gCAAc,CAAC,GAAG,CAChB,0BAA0B,CAC3B,IAAI,EAAE,CACR;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;CACF;AA/CD,0DA+CC"}

package/dist/row-level-security-context.spec.js

@@ -1,29 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const request_context_1 = require("@nest-boot/request-context");
-const row_level_security_context_1 = require("./row-level-security-context");
-describe("RowLevelSecurityContext", () => {
-    it("stores the database role in RequestContext", async () => {
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), () => {
-            row_level_security_context_1.RowLevelSecurityContext.setRole("authenticated");
-            expect(row_level_security_context_1.RowLevelSecurityContext.getRole()).toBe("authenticated");
-        });
-    });
-    it("stores policy context values in RequestContext", async () => {
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), () => {
-            row_level_security_context_1.RowLevelSecurityContext.set("tenant_id", "42");
-            row_level_security_context_1.RowLevelSecurityContext.set("user_id", 7);
-            expect(row_level_security_context_1.RowLevelSecurityContext.get("tenant_id")).toBe("42");
-            expect(row_level_security_context_1.RowLevelSecurityContext.entries()).toEqual([
-                ["tenant_id", "42"],
-                ["user_id", 7],
-            ]);
-        });
-    });
-    it("returns empty values when RequestContext is inactive", () => {
-        expect(row_level_security_context_1.RowLevelSecurityContext.getRole()).toBeUndefined();
-        expect(row_level_security_context_1.RowLevelSecurityContext.get("tenant_id")).toBeUndefined();
-        expect(row_level_security_context_1.RowLevelSecurityContext.entries()).toEqual([]);
-    });
-});
-//# sourceMappingURL=row-level-security-context.spec.js.map

package/dist/row-level-security-context.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"row-level-security-context.spec.js","sourceRoot":"","sources":["../src/row-level-security-context.spec.ts"],"names":[],"mappings":";;AAAA,gEAA4D;AAE5D,6EAAuE;AAEvE,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE;YAClE,oDAAuB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAEjD,MAAM,CAAC,oDAAuB,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE;YAClE,oDAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC/C,oDAAuB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAE1C,MAAM,CAAC,oDAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,oDAAuB,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;gBAChD,CAAC,WAAW,EAAE,IAAI,CAAC;gBACnB,CAAC,SAAS,EAAE,CAAC,CAAC;aACf,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,oDAAuB,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,oDAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACjE,MAAM,CAAC,oDAAuB,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/row-level-security-entity-manager.d.ts

@@ -1,22 +0,0 @@
-import { CountOptions, Cursor, DeleteOptions, EntityData, EntityManager, EntityName, FilterQuery, FindAllOptions, FindByCursorOptions, FindOneOptions, FindOneOrFailOptions, FindOptions, Loaded, NativeInsertUpdateOptions, NoInfer, PopulatePath, Primary, RequiredEntityData, TransactionOptions, UpdateOptions, UpsertManyOptions, UpsertOptions } from "@mikro-orm/postgresql";
-/**
- * MikroORM entity manager that wraps database operations in transactions with
- * transaction-local PostgreSQL role and context settings.
- */
-export declare class RowLevelSecurityEntityManager extends EntityManager {
-    transactional<T>(cb: (em: this) => T | Promise<T>, options?: TransactionOptions): Promise<T>;
-    find<Entity extends object, Hint extends string = never, Fields extends string = PopulatePath.ALL, Excludes extends string = never>(entityName: EntityName<Entity>, where: FilterQuery<NoInfer<Entity>>, options?: FindOptions<Entity, Hint, Fields, Excludes>): Promise<Loaded<Entity, Hint, Fields, Excludes>[]>;
-    findAll<Entity extends object, Hint extends string = never, Fields extends string = "*", Excludes extends string = never>(entityName: EntityName<Entity>, options?: FindAllOptions<NoInfer<Entity>, Hint, Fields, Excludes>): Promise<Loaded<Entity, Hint, Fields, Excludes>[]>;
-    findOne<Entity extends object, Hint extends string = never, Fields extends string = "*", Excludes extends string = never>(entityName: EntityName<Entity>, where: FilterQuery<NoInfer<Entity>>, options?: FindOneOptions<Entity, Hint, Fields, Excludes>): Promise<Loaded<Entity, Hint, Fields, Excludes> | null>;
-    findOneOrFail<Entity extends object, Hint extends string = never, Fields extends string = "*", Excludes extends string = never>(entityName: EntityName<Entity>, where: FilterQuery<NoInfer<Entity>>, options?: FindOneOrFailOptions<Entity, Hint, Fields, Excludes>): Promise<Loaded<Entity, Hint, Fields, Excludes>>;
-    findAndCount<Entity extends object, Hint extends string = never, Fields extends string = PopulatePath.ALL, Excludes extends string = never>(entityName: EntityName<Entity>, where: FilterQuery<NoInfer<Entity>>, options?: FindOptions<Entity, Hint, Fields, Excludes>): Promise<[Loaded<Entity, Hint, Fields, Excludes>[], number]>;
-    findByCursor<Entity extends object, Hint extends string = never, Fields extends string = "*", Excludes extends string = never, IncludeCount extends boolean = true>(entityName: EntityName<Entity>, where: FilterQuery<NoInfer<Entity>>, options: FindByCursorOptions<Entity, Hint, Fields, Excludes, IncludeCount>): Promise<Cursor<Entity, Hint, Fields, Excludes, IncludeCount>>;
-    count<Entity extends object, Hint extends string = never>(entityName: EntityName<Entity>, where?: FilterQuery<NoInfer<Entity>>, options?: CountOptions<Entity, Hint>): Promise<number>;
-    insert<Entity extends object>(entityNameOrEntity: EntityName<Entity> | Entity, data?: RequiredEntityData<Entity> | Entity, options?: NativeInsertUpdateOptions<Entity>): Promise<Primary<Entity>>;
-    insertMany<Entity extends object>(entityNameOrEntities: EntityName<Entity> | Entity[], data?: RequiredEntityData<Entity>[] | Entity[], options?: NativeInsertUpdateOptions<Entity>): Promise<Primary<Entity>[]>;
-    nativeUpdate<Entity extends object>(entityName: EntityName<Entity>, where: FilterQuery<NoInfer<Entity>>, data: EntityData<Entity>, options?: UpdateOptions<Entity>): Promise<number>;
-    nativeDelete<Entity extends object>(entityName: EntityName<Entity>, where: FilterQuery<NoInfer<Entity>>, options?: DeleteOptions<Entity>): Promise<number>;
-    upsert<Entity extends object, Fields extends string = any>(entityNameOrEntity: EntityName<Entity> | Entity, data?: EntityData<Entity> | NoInfer<Entity>, options?: UpsertOptions<Entity, Fields>): Promise<Entity>;
-    upsertMany<Entity extends object, Fields extends string = any>(entityNameOrEntity: EntityName<Entity> | Entity[], data?: (EntityData<Entity> | NoInfer<Entity>)[], options?: UpsertManyOptions<Entity, Fields>): Promise<Entity[]>;
-    flush(): Promise<void>;
-}

package/dist/row-level-security-entity-manager.js

@@ -1,135 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RowLevelSecurityEntityManager = void 0;
-const postgresql_1 = require("@mikro-orm/postgresql");
-const row_level_security_context_1 = require("./row-level-security-context");
-const assert_snake_case_1 = require("./utils/assert-snake-case");
-const get_row_level_security_options_1 = require("./utils/get-row-level-security-options");
-const row_level_security_context_builder_1 = require("./utils/row-level-security-context-builder");
-/**
- * MikroORM entity manager that wraps database operations in transactions with
- * transaction-local PostgreSQL role and context settings.
- */
-class RowLevelSecurityEntityManager extends postgresql_1.EntityManager {
-    async transactional(cb, options) {
-        const rowLevelSecurityOptions = (0, get_row_level_security_options_1.getRowLevelSecurityOptions)();
-        if (rowLevelSecurityOptions.shouldApply &&
-            !(await rowLevelSecurityOptions.shouldApply())) {
-            return await super.transactional(cb, options);
-        }
-        return await super.transactional(async (em) => {
-            const knex = em.getTransactionContext();
-            if (!knex) {
-                throw new Error("Transaction context is not available. Ensure you are calling this method within a transaction.");
-            }
-            const builder = new row_level_security_context_builder_1.RowLevelSecurityContextBuilder();
-            const role = row_level_security_context_1.RowLevelSecurityContext.getRole() ??
-                ((await rowLevelSecurityOptions.isAuthenticated?.())
-                    ? (rowLevelSecurityOptions.authenticatedRole ?? "authenticated")
-                    : (rowLevelSecurityOptions.anonymousRole ?? "anonymous"));
-            const context = await rowLevelSecurityOptions.getContext?.();
-            appendContext(builder, context);
-            appendContext(builder, row_level_security_context_1.RowLevelSecurityContext.entries());
-            (0, assert_snake_case_1.assertSnakeCase)(role, "Row level security database role");
-            await knex.raw([
-                /* SQL */ `SET LOCAL ROLE ${role};`,
-                builder.entries().length > 0 ? builder.toSQL() : "",
-            ]
-                .filter(Boolean)
-                .join("\n"));
-            return await cb(em);
-        }, options);
-    }
-    find(entityName, where, options) {
-        if (this.isInTransaction()) {
-            return super.find(entityName, where, options);
-        }
-        return this.transactional((em) => em.find(entityName, where, options));
-    }
-    findAll(entityName, options) {
-        if (this.isInTransaction()) {
-            return super.findAll(entityName, options);
-        }
-        return this.transactional((em) => em.findAll(entityName, options));
-    }
-    findOne(entityName, where, options) {
-        if (this.isInTransaction()) {
-            return super.findOne(entityName, where, options);
-        }
-        return this.transactional((em) => em.findOne(entityName, where, options));
-    }
-    findOneOrFail(entityName, where, options) {
-        if (this.isInTransaction()) {
-            return super.findOneOrFail(entityName, where, options);
-        }
-        return this.transactional((em) => em.findOneOrFail(entityName, where, options));
-    }
-    findAndCount(entityName, where, options) {
-        if (this.isInTransaction()) {
-            return super.findAndCount(entityName, where, options);
-        }
-        return this.transactional((em) => em.findAndCount(entityName, where, options));
-    }
-    findByCursor(entityName, where, options) {
-        if (this.isInTransaction()) {
-            return super.findByCursor(entityName, where, options);
-        }
-        return this.transactional((em) => em.findByCursor(entityName, where, options));
-    }
-    count(entityName, where, options) {
-        if (this.isInTransaction()) {
-            return super.count(entityName, where, options);
-        }
-        return this.transactional((em) => em.count(entityName, where, options));
-    }
-    insert(entityNameOrEntity, data, options) {
-        if (this.isInTransaction()) {
-            return super.insert(entityNameOrEntity, data, options);
-        }
-        return this.transactional((em) => em.insert(entityNameOrEntity, data, options));
-    }
-    // @ts-expect-error - MikroORM type duplication/deep mapped type collision
-    insertMany(entityNameOrEntities, data, options) {
-        if (this.isInTransaction()) {
-            return super.insertMany(entityNameOrEntities, data, options);
-        }
-        return this.transactional((em) => em.insertMany(entityNameOrEntities, data, options));
-    }
-    nativeUpdate(entityName, where, data, options) {
-        if (this.isInTransaction()) {
-            return super.nativeUpdate(entityName, where, data, options);
-        }
-        return this.transactional((em) => em.nativeUpdate(entityName, where, data, options));
-    }
-    nativeDelete(entityName, where, options) {
-        if (this.isInTransaction()) {
-            return super.nativeDelete(entityName, where, options);
-        }
-        return this.transactional((em) => em.nativeDelete(entityName, where, options));
-    }
-    upsert(entityNameOrEntity, data, options) {
-        if (this.isInTransaction()) {
-            return super.upsert(entityNameOrEntity, data, options);
-        }
-        return this.transactional((em) => em.upsert(entityNameOrEntity, data, options));
-    }
-    upsertMany(entityNameOrEntity, data, options) {
-        if (this.isInTransaction()) {
-            return super.upsertMany(entityNameOrEntity, data, options);
-        }
-        return this.transactional((em) => em.upsertMany(entityNameOrEntity, data, options));
-    }
-    flush() {
-        if (this.isInTransaction()) {
-            return super.flush();
-        }
-        return this.transactional((em) => em.flush());
-    }
-}
-exports.RowLevelSecurityEntityManager = RowLevelSecurityEntityManager;
-function appendContext(builder, context) {
-    for (const [key, value] of context ?? []) {
-        builder.set(key, value);
-    }
-}
-//# sourceMappingURL=row-level-security-entity-manager.js.map

package/dist/row-level-security-entity-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"row-level-security-entity-manager.js","sourceRoot":"","sources":["../src/row-level-security-entity-manager.ts"],"names":[],"mappings":";;;AAAA,sDAwB+B;AAE/B,6EAAuE;AACvE,iEAA4D;AAC5D,2FAAoF;AACpF,mGAA4F;AAG5F;;;GAGG;AACH,MAAa,6BAA8B,SAAQ,0BAAa;IAC9D,KAAK,CAAC,aAAa,CACjB,EAAgC,EAChC,OAA4B;QAE5B,MAAM,uBAAuB,GAAG,IAAA,2DAA0B,GAAE,CAAC;QAE7D,IACE,uBAAuB,CAAC,WAAW;YACnC,CAAC,CAAC,MAAM,uBAAuB,CAAC,WAAW,EAAE,CAAC,EAC9C,CAAC;YACD,OAAO,MAAM,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,qBAAqB,EAAQ,CAAC;YAE9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,mEAA8B,EAAE,CAAC;YACrD,MAAM,IAAI,GACR,oDAAuB,CAAC,OAAO,EAAE;gBACjC,CAAC,CAAC,MAAM,uBAAuB,CAAC,eAAe,EAAE,EAAE,CAAC;oBAClD,CAAC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,IAAI,eAAe,CAAC;oBAChE,CAAC,CAAC,CAAC,uBAAuB,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,EAAE,CAAC;YAE7D,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChC,aAAa,CAAC,OAAO,EAAE,oDAAuB,CAAC,OAAO,EAAE,CAAC,CAAC;YAE1D,IAAA,mCAAe,EAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,GAAG,CACZ;gBACE,SAAS,CAAC,kBAAkB,IAAI,GAAG;gBACnC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;aACpD;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;YAEF,OAAO,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC;IAED,IAAI,CAMF,UAA8B,EAC9B,KAAmC,EACnC,OAAqD;QAErD,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,CAML,UAA8B,EAC9B,OAAiE;QAEjE,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAML,UAA8B,EAC9B,KAAmC,EACnC,OAAwD;QAExD,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,aAAa,CAMX,UAA8B,EAC9B,KAAmC,EACnC,OAA8D;QAE9D,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED,YAAY,CAMV,UAA8B,EAC9B,KAAmC,EACnC,OAAqD;QAErD,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAC5C,CAAC;IACJ,CAAC;IAED,YAAY,CAOV,UAA8B,EAC9B,KAAmC,EACnC,OAA0E;QAE1E,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CACH,UAA8B,EAC9B,KAAoC,EACpC,OAAoC;QAEpC,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CACJ,kBAA+C,EAC/C,IAA0C,EAC1C,OAA2C;QAE3C,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,UAAU,CACR,oBAAmD,EACnD,IAA8C,EAC9C,OAA2C;QAE3C,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,UAAU,CACrB,oBAA2B,EAC3B,IAAW,EACX,OAAO,CACD,CAAC;QACX,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CACvB,CAAC,EAAE,EAAE,EAAE,CACL,EAAE,CAAC,UAAU,CAAC,oBAA2B,EAAE,IAAW,EAAE,OAAO,CAAQ,CAC1E,CAAC;IACJ,CAAC;IAED,YAAY,CACV,UAA8B,EAC9B,KAAmC,EACnC,IAAwB,EACxB,OAA+B;QAE/B,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,YAAY,CACV,UAA8B,EAC9B,KAAmC,EACnC,OAA+B;QAE/B,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAC5C,CAAC;IACJ,CAAC;IAED,MAAM,CACJ,kBAA+C,EAC/C,IAA2C,EAC3C,OAAuC;QAEvC,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED,UAAU,CACR,kBAAiD,EACjD,IAA+C,EAC/C,OAA2C;QAE3C,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAC/B,EAAE,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CACjD,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;CACF;AA1QD,sEA0QC;AAED,SAAS,aAAa,CACpB,OAAuC,EACvC,OAEa;IAEb,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/row-level-security-entity-manager.spec.js

@@ -1,200 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const postgresql_1 = require("@mikro-orm/postgresql");
-const request_context_1 = require("@nest-boot/request-context");
-const row_level_security_context_1 = require("./row-level-security-context");
-const row_level_security_entity_manager_1 = require("./row-level-security-entity-manager");
-const set_row_level_security_options_1 = require("./utils/set-row-level-security-options");
-describe("RowLevelSecurityEntityManager", () => {
-    afterEach(() => {
-        jest.restoreAllMocks();
-        (0, set_row_level_security_options_1.setRowLevelSecurityOptions)();
-    });
-    it("sets authenticated row level security transaction context", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        const result = await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            (0, set_row_level_security_options_1.setRowLevelSecurityOptions)({
-                authenticatedRole: "app_authenticated",
-                isAuthenticated: () => true,
-                getContext: () => [["tenant_id", "42"]],
-            });
-            return await callTransactional();
-        });
-        expect(result).toBe("transaction-result");
-        expect(rawSql).toEqual([
-            "SET LOCAL ROLE app_authenticated;\nSELECT set_config('app.tenant_id', '42', true);",
-        ]);
-    });
-    it("omits context SQL when no row level security context values are present", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            await callTransactional();
-        });
-        expect(rawSql).toEqual(["SET LOCAL ROLE anonymous;"]);
-    });
-    it("throws when a transaction context is unavailable", async () => {
-        jest
-            .spyOn(postgresql_1.EntityManager.prototype, "transactional")
-            .mockImplementation(async (cb) => {
-            return await cb({
-                getTransactionContext: () => undefined,
-            });
-        });
-        await expect(request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), callTransactional)).rejects.toThrow("Transaction context is not available");
-    });
-    it("uses the anonymous role when no user is present", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            (0, set_row_level_security_options_1.setRowLevelSecurityOptions)({
-                anonymousRole: "app_anonymous",
-                getContext: () => [["tenant_id", "42"]],
-            });
-            await callTransactional();
-        });
-        expect(rawSql).toEqual([
-            "SET LOCAL ROLE app_anonymous;\nSELECT set_config('app.tenant_id', '42', true);",
-        ]);
-    });
-    it("uses the default authenticated role when the tenant authentication marker is present", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            (0, set_row_level_security_options_1.setRowLevelSecurityOptions)({
-                isAuthenticated: () => true,
-                getContext: () => [["tenant_id", "42"]],
-            });
-            await callTransactional();
-        });
-        expect(rawSql).toEqual([
-            "SET LOCAL ROLE authenticated;\nSELECT set_config('app.tenant_id', '42', true);",
-        ]);
-    });
-    it("uses the request context role when one is set", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            row_level_security_context_1.RowLevelSecurityContext.setRole("service_role");
-            row_level_security_context_1.RowLevelSecurityContext.set("tenant_id", "42");
-            await callTransactional();
-        });
-        expect(rawSql).toEqual([
-            "SET LOCAL ROLE service_role;\nSELECT set_config('app.tenant_id', '42', true);",
-        ]);
-    });
-    it("sets additional row level security context values from RequestContext", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            (0, set_row_level_security_options_1.setRowLevelSecurityOptions)({
-                getContext: () => [["tenant_id", "42"]],
-            });
-            row_level_security_context_1.RowLevelSecurityContext.set("user_id", "7");
-            await callTransactional();
-        });
-        expect(rawSql).toEqual([
-            "SET LOCAL ROLE anonymous;\nSELECT set_config('app.tenant_id', '42', true),set_config('app.user_id', '7', true);",
-        ]);
-    });
-    it("uses the default anonymous role when the tenant authentication marker is absent", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        await request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), async () => {
-            (0, set_row_level_security_options_1.setRowLevelSecurityOptions)({
-                getContext: () => [["tenant_id", "42"]],
-            });
-            await callTransactional();
-        });
-        expect(rawSql).toEqual([
-            "SET LOCAL ROLE anonymous;\nSELECT set_config('app.tenant_id', '42', true);",
-        ]);
-    });
-    it("delegates without tenant SQL when shouldApply returns false", async () => {
-        const rawSql = [];
-        const transactionalSpy = mockSuperTransactional(rawSql);
-        (0, set_row_level_security_options_1.setRowLevelSecurityOptions)({
-            shouldApply: () => false,
-        });
-        const result = await callTransactional();
-        expect(result).toBe("transaction-result");
-        expect(rawSql).toEqual([]);
-        expect(transactionalSpy).toHaveBeenCalledTimes(1);
-    });
-    it("rejects unsafe database role names", async () => {
-        const rawSql = [];
-        mockSuperTransactional(rawSql);
-        (0, set_row_level_security_options_1.setRowLevelSecurityOptions)({
-            authenticatedRole: "app.authenticated",
-            isAuthenticated: () => true,
-        });
-        await expect(request_context_1.RequestContext.run(new request_context_1.RequestContext({ type: "http" }), callTransactional)).rejects.toThrow("Row level security database role must be snake_case");
-    });
-    it.each(getDelegatedMethodCases())("wraps %s in a row level security transaction when outside a transaction", async (methodName, args, result) => {
-        const delegatedMethod = jest.fn(() => Promise.resolve(result));
-        const transactional = jest.fn(async (cb) => {
-            return await cb({
-                [methodName]: delegatedMethod,
-            });
-        });
-        const entityManager = {
-            isInTransaction: () => false,
-            transactional,
-        };
-        const actual = await row_level_security_entity_manager_1.RowLevelSecurityEntityManager.prototype[methodName].call(entityManager, ...args);
-        expect(actual).toBe(result);
-        expect(transactional).toHaveBeenCalledTimes(1);
-        expect(delegatedMethod.mock.calls[0]?.slice(0, args.length)).toEqual(args);
-    });
-    it.each(getDelegatedMethodCases())("delegates %s directly when already inside a transaction", async (methodName, args, result) => {
-        const superMethod = jest
-            .spyOn(postgresql_1.EntityManager.prototype, methodName)
-            .mockResolvedValue(result);
-        const entityManager = {
-            isInTransaction: () => true,
-        };
-        const actual = await row_level_security_entity_manager_1.RowLevelSecurityEntityManager.prototype[methodName].call(entityManager, ...args);
-        expect(actual).toBe(result);
-        expect(superMethod.mock.calls[0]?.slice(0, args.length)).toEqual(args);
-    });
-});
-function mockSuperTransactional(rawSql) {
-    return jest
-        .spyOn(postgresql_1.EntityManager.prototype, "transactional")
-        .mockImplementation(async (cb) => {
-        const em = {
-            getTransactionContext: () => ({
-                raw: (sql) => {
-                    rawSql.push(sql);
-                    return Promise.resolve();
-                },
-            }),
-        };
-        return await cb(em);
-    });
-}
-async function callTransactional() {
-    return await row_level_security_entity_manager_1.RowLevelSecurityEntityManager.prototype.transactional.call({}, () => "transaction-result");
-}
-function getDelegatedMethodCases() {
-    class Entity {
-    }
-    return [
-        ["find", [Entity, { id: "1" }, { limit: 1 }], [{ id: "1" }]],
-        ["findAll", [Entity, { limit: 1 }], [{ id: "1" }]],
-        ["findOne", [Entity, { id: "1" }], { id: "1" }],
-        ["findOneOrFail", [Entity, { id: "1" }], { id: "1" }],
-        ["findAndCount", [Entity, { id: "1" }], [[{ id: "1" }], 1]],
-        ["findByCursor", [Entity, {}, { first: 10 }], { items: [] }],
-        ["count", [Entity, { active: true }], 1],
-        ["insert", [Entity, { name: "one" }], "1"],
-        ["insertMany", [Entity, [{ name: "one" }]], ["1"]],
-        ["nativeUpdate", [Entity, { id: "1" }, { name: "one" }], 1],
-        ["nativeDelete", [Entity, { id: "1" }], 1],
-        ["upsert", [Entity, { id: "1", name: "one" }], { id: "1" }],
-        ["upsertMany", [Entity, [{ id: "1", name: "one" }]], [{ id: "1" }]],
-        ["flush", [], undefined],
-    ];
-}
-//# sourceMappingURL=row-level-security-entity-manager.spec.js.map

package/dist/row-level-security-entity-manager.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"row-level-security-entity-manager.spec.js","sourceRoot":"","sources":["../src/row-level-security-entity-manager.spec.ts"],"names":[],"mappings":";;AAAA,sDAAsD;AACtD,gEAA4D;AAE5D,6EAAuE;AACvE,2FAAoF;AACpF,2FAAoF;AAEpF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAA,2DAA0B,GAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,gCAAc,CAAC,GAAG,CACrC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EACpC,KAAK,IAAI,EAAE;YACT,IAAA,2DAA0B,EAAC;gBACzB,iBAAiB,EAAE,mBAAmB;gBACtC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC3B,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;aACxC,CAAC,CAAC;YAEH,OAAO,MAAM,iBAAiB,EAAE,CAAC;QACnC,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,oFAAoF;SACrF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,IAAI;aACD,KAAK,CAAC,0BAAa,CAAC,SAAS,EAAE,eAAe,CAAC;aAC/C,kBAAkB,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE;YACpC,OAAO,MAAM,EAAE,CAAC;gBACd,qBAAqB,EAAE,GAAG,EAAE,CAAC,SAAS;aACvC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEL,MAAM,MAAM,CACV,gCAAc,CAAC,GAAG,CAChB,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EACpC,iBAAiB,CAClB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;YACxE,IAAA,2DAA0B,EAAC;gBACzB,aAAa,EAAE,eAAe;gBAC9B,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;aACxC,CAAC,CAAC;YAEH,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,gFAAgF;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;YACxE,IAAA,2DAA0B,EAAC;gBACzB,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC3B,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;aACxC,CAAC,CAAC;YAEH,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,gFAAgF;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;YACxE,oDAAuB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAChD,oDAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAE/C,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,+EAA+E;SAChF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;YACxE,IAAA,2DAA0B,EAAC;gBACzB,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;aACxC,CAAC,CAAC;YACH,oDAAuB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAE5C,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,iHAAiH;SAClH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE/B,MAAM,gCAAc,CAAC,GAAG,CAAC,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE;YACxE,IAAA,2DAA0B,EAAC;gBACzB,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;aACxC,CAAC,CAAC;YAEH,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,4EAA4E;SAC7E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACxD,IAAA,2DAA0B,EAAC;YACzB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAA,2DAA0B,EAAC;YACzB,iBAAiB,EAAE,mBAAmB;YACtC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI;SAC5B,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,gCAAc,CAAC,GAAG,CAChB,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EACpC,iBAAiB,CAClB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAChC,yEAAyE,EACzE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACjC,MAAM,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE;YAC9C,OAAO,MAAM,EAAE,CAAC;gBACd,CAAC,UAAU,CAAC,EAAE,eAAe;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG;YACpB,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK;YAC5B,aAAa;SACd,CAAC;QAEF,MAAM,MAAM,GAAG,MACb,iEAA6B,CAAC,SAAS,CAAC,UAAU,CACnD,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAClE,IAAI,CACL,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAChC,yDAAyD,EACzD,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACjC,MAAM,WAAW,GAAG,IAAI;aACrB,KAAK,CACJ,0BAAa,CAAC,SAGb,EACD,UAAU,CACX;aACA,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,aAAa,GAAG;YACpB,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI;SAC5B,CAAC;QAEF,MAAM,MAAM,GAAG,MACb,iEAA6B,CAAC,SAAS,CAAC,UAAU,CACnD,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,MAAgB;IAC9C,OAAO,IAAI;SACR,KAAK,CAAC,0BAAa,CAAC,SAAS,EAAE,eAAe,CAAC;SAC/C,kBAAkB,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE;QACpC,MAAM,EAAE,GAAG;YACT,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC5B,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE;oBACnB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;aACF,CAAC;SACH,CAAC;QAEF,OAAO,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,OAAO,MAAM,iEAA6B,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CACrE,EAAmC,EACnC,GAAG,EAAE,CAAC,oBAAoB,CAC3B,CAAC;AACJ,CAAC;AAkBD,SAAS,uBAAuB;IAK9B,MAAM,MAAM;KAAG;IAEf,OAAO;QACL,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC/C,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QACrD,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC5D,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC;QAC1C,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC3D,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;KACzB,CAAC;AACJ,CAAC"}