@nest-boot/row-level-security 7.1.0 → 7.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/enums/row-level-security-role.enum.d.ts +7 -0
- package/dist/enums/row-level-security-role.enum.js +12 -0
- package/dist/enums/row-level-security-role.enum.js.map +1 -0
- package/dist/index.d.ts +4 -2
- package/dist/index.js +4 -2
- package/dist/index.js.map +1 -1
- package/dist/index.spec.js +7 -14
- package/dist/index.spec.js.map +1 -1
- package/dist/interfaces/index.d.ts +0 -1
- package/dist/interfaces/index.js +0 -1
- package/dist/interfaces/index.js.map +1 -1
- package/dist/interfaces/policy-options.interface.d.ts +2 -2
- package/dist/interfaces/policy-sql-options.interface.d.ts +2 -2
- package/dist/row-level-security-driver.d.ts +15 -0
- package/dist/row-level-security-driver.js +136 -0
- package/dist/row-level-security-driver.js.map +1 -0
- package/dist/row-level-security-driver.spec.js +267 -0
- package/dist/row-level-security-driver.spec.js.map +1 -0
- package/dist/row-level-security-migration-generator.d.ts +4 -0
- package/dist/row-level-security-migration-generator.js +54 -9
- package/dist/row-level-security-migration-generator.js.map +1 -1
- package/dist/row-level-security-migration-generator.spec.js +355 -12
- package/dist/row-level-security-migration-generator.spec.js.map +1 -1
- package/dist/row-level-security-migration.d.ts +2 -4
- package/dist/row-level-security-migration.js +9 -7
- package/dist/row-level-security-migration.js.map +1 -1
- package/dist/row-level-security-migration.spec.js +7 -16
- package/dist/row-level-security-migration.spec.js.map +1 -1
- package/dist/row-level-security-migrator.d.ts +13 -0
- package/dist/row-level-security-migrator.js +60 -0
- package/dist/row-level-security-migrator.js.map +1 -0
- package/dist/row-level-security.d.ts +29 -0
- package/dist/row-level-security.js +69 -0
- package/dist/row-level-security.js.map +1 -0
- package/dist/row-level-security.spec.js +52 -0
- package/dist/row-level-security.spec.js.map +1 -0
- package/dist/tsconfig.build.tsbuildinfo +1 -1
- package/dist/utils/create-policy-bootstrap-sql-statements.d.ts +1 -1
- package/dist/utils/create-policy-bootstrap-sql-statements.js +1 -7
- package/dist/utils/create-policy-bootstrap-sql-statements.js.map +1 -1
- package/dist/utils/create-policy-privilege-down-sql-statements.d.ts +8 -0
- package/dist/utils/create-policy-privilege-down-sql-statements.js +93 -0
- package/dist/utils/create-policy-privilege-down-sql-statements.js.map +1 -0
- package/dist/utils/create-policy-role-sql-statements.d.ts +6 -0
- package/dist/utils/create-policy-role-sql-statements.js +48 -0
- package/dist/utils/create-policy-role-sql-statements.js.map +1 -0
- package/dist/utils/create-policy-up-sql-statements.js +8 -2
- package/dist/utils/create-policy-up-sql-statements.js.map +1 -1
- package/dist/utils/create-row-level-security-transaction-setup.d.ts +20 -0
- package/dist/utils/create-row-level-security-transaction-setup.js +53 -0
- package/dist/utils/create-row-level-security-transaction-setup.js.map +1 -0
- package/dist/utils/index.d.ts +2 -3
- package/dist/utils/index.js +2 -3
- package/dist/utils/index.js.map +1 -1
- package/dist/utils/policy-migration-sql.spec.js +125 -7
- package/dist/utils/policy-migration-sql.spec.js.map +1 -1
- package/package.json +4 -4
- package/dist/interfaces/row-level-security-options.interface.d.ts +0 -18
- package/dist/interfaces/row-level-security-options.interface.js +0 -3
- package/dist/interfaces/row-level-security-options.interface.js.map +0 -1
- package/dist/row-level-security-context.d.ts +0 -14
- package/dist/row-level-security-context.js +0 -38
- package/dist/row-level-security-context.js.map +0 -1
- package/dist/row-level-security-context.spec.js +0 -29
- package/dist/row-level-security-context.spec.js.map +0 -1
- package/dist/row-level-security-entity-manager.d.ts +0 -22
- package/dist/row-level-security-entity-manager.js +0 -135
- package/dist/row-level-security-entity-manager.js.map +0 -1
- package/dist/row-level-security-entity-manager.spec.js +0 -200
- package/dist/row-level-security-entity-manager.spec.js.map +0 -1
- package/dist/utils/default-row-level-security-options.d.ts +0 -3
- package/dist/utils/default-row-level-security-options.js +0 -9
- package/dist/utils/default-row-level-security-options.js.map +0 -1
- package/dist/utils/get-row-level-security-options.d.ts +0 -8
- package/dist/utils/get-row-level-security-options.js +0 -9
- package/dist/utils/get-row-level-security-options.js.map +0 -1
- package/dist/utils/row-level-security-options-state.d.ts +0 -4
- package/dist/utils/row-level-security-options-state.js +0 -8
- package/dist/utils/row-level-security-options-state.js.map +0 -1
- package/dist/utils/set-row-level-security-options.d.ts +0 -3
- package/dist/utils/set-row-level-security-options.js +0 -13
- package/dist/utils/set-row-level-security-options.js.map +0 -1
- /package/dist/{row-level-security-context.spec.d.ts → row-level-security-driver.spec.d.ts} +0 -0
- /package/dist/{row-level-security-entity-manager.spec.d.ts → row-level-security.spec.d.ts} +0 -0
|
@@ -6,10 +6,14 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
|
|
|
6
6
|
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
7
|
};
|
|
8
8
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
|
+
const node_fs_1 = require("node:fs");
|
|
10
|
+
const node_os_1 = require("node:os");
|
|
11
|
+
const node_path_1 = require("node:path");
|
|
9
12
|
const migrations_1 = require("@mikro-orm/migrations");
|
|
10
13
|
const policy_decorator_1 = require("./decorators/policy.decorator");
|
|
11
14
|
const policy_command_enum_1 = require("./enums/policy-command.enum");
|
|
12
15
|
const row_level_security_migration_generator_1 = require("./row-level-security-migration-generator");
|
|
16
|
+
const row_level_security_migrator_1 = require("./row-level-security-migrator");
|
|
13
17
|
let WorkspaceMember = class WorkspaceMember {
|
|
14
18
|
};
|
|
15
19
|
WorkspaceMember = __decorate([
|
|
@@ -42,6 +46,17 @@ WorkspaceMemberWithGeneratedPolicy = __decorate([
|
|
|
42
46
|
context: "user_id",
|
|
43
47
|
})
|
|
44
48
|
], WorkspaceMemberWithGeneratedPolicy);
|
|
49
|
+
let WorkspaceMemberWithWorkspaceContextPolicy = class WorkspaceMemberWithWorkspaceContextPolicy {
|
|
50
|
+
};
|
|
51
|
+
WorkspaceMemberWithWorkspaceContextPolicy = __decorate([
|
|
52
|
+
(0, policy_decorator_1.Policy)({
|
|
53
|
+
name: "workspace_member_workspace_select_policy",
|
|
54
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
55
|
+
property: "workspace",
|
|
56
|
+
context: "workspace_id",
|
|
57
|
+
roles: ["authenticated"],
|
|
58
|
+
})
|
|
59
|
+
], WorkspaceMemberWithWorkspaceContextPolicy);
|
|
45
60
|
let AuditLog = class AuditLog {
|
|
46
61
|
};
|
|
47
62
|
AuditLog = __decorate([
|
|
@@ -51,6 +66,33 @@ AuditLog = __decorate([
|
|
|
51
66
|
using: "true",
|
|
52
67
|
})
|
|
53
68
|
], AuditLog);
|
|
69
|
+
let WorkspaceMemberWithCustomRole = class WorkspaceMemberWithCustomRole {
|
|
70
|
+
};
|
|
71
|
+
WorkspaceMemberWithCustomRole = __decorate([
|
|
72
|
+
(0, policy_decorator_1.Policy)({
|
|
73
|
+
name: "workspace_member_admin_select_policy",
|
|
74
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
75
|
+
using: "true",
|
|
76
|
+
roles: ["workspace_admin"],
|
|
77
|
+
})
|
|
78
|
+
], WorkspaceMemberWithCustomRole);
|
|
79
|
+
let WorkspaceMemberWithSharedRolePolicies = class WorkspaceMemberWithSharedRolePolicies {
|
|
80
|
+
};
|
|
81
|
+
WorkspaceMemberWithSharedRolePolicies = __decorate([
|
|
82
|
+
(0, policy_decorator_1.Policy)({
|
|
83
|
+
name: "workspace_member_admin_select_policy",
|
|
84
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
85
|
+
using: "true",
|
|
86
|
+
roles: ["workspace_admin"],
|
|
87
|
+
}),
|
|
88
|
+
(0, policy_decorator_1.Policy)({
|
|
89
|
+
name: "workspace_member_admin_update_policy",
|
|
90
|
+
command: policy_command_enum_1.PolicyCommand.UPDATE,
|
|
91
|
+
using: "true",
|
|
92
|
+
withCheck: "true",
|
|
93
|
+
roles: ["workspace_admin"],
|
|
94
|
+
})
|
|
95
|
+
], WorkspaceMemberWithSharedRolePolicies);
|
|
54
96
|
class UnmanagedEntity {
|
|
55
97
|
}
|
|
56
98
|
describe("RowLevelSecurityMigrationGenerator", () => {
|
|
@@ -109,6 +151,36 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
109
151
|
with_check: "true",
|
|
110
152
|
roles: ["authenticated"],
|
|
111
153
|
},
|
|
154
|
+
{
|
|
155
|
+
policy_name: "workspace_member_public_select_policy",
|
|
156
|
+
schema_name: "public",
|
|
157
|
+
table_name: "workspace_member",
|
|
158
|
+
permissive: true,
|
|
159
|
+
command: "r",
|
|
160
|
+
qual: "true",
|
|
161
|
+
with_check: null,
|
|
162
|
+
roles: null,
|
|
163
|
+
},
|
|
164
|
+
{
|
|
165
|
+
policy_name: "workspace_member_string_roles_select_policy",
|
|
166
|
+
schema_name: "public",
|
|
167
|
+
table_name: "workspace_member",
|
|
168
|
+
permissive: true,
|
|
169
|
+
command: "r",
|
|
170
|
+
qual: "true",
|
|
171
|
+
with_check: null,
|
|
172
|
+
roles: "{authenticated,anonymous}",
|
|
173
|
+
},
|
|
174
|
+
{
|
|
175
|
+
policy_name: "external_workspace_policy",
|
|
176
|
+
schema_name: "external",
|
|
177
|
+
table_name: "workspace",
|
|
178
|
+
permissive: true,
|
|
179
|
+
command: "r",
|
|
180
|
+
qual: "true",
|
|
181
|
+
with_check: null,
|
|
182
|
+
roles: ["workspace_admin"],
|
|
183
|
+
},
|
|
112
184
|
]));
|
|
113
185
|
const superGenerate = jest
|
|
114
186
|
.spyOn(migrations_1.TSMigrationGenerator.prototype, "generate")
|
|
@@ -130,6 +202,25 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
130
202
|
policyName: "workspace_member_all_policy",
|
|
131
203
|
command: "all",
|
|
132
204
|
}),
|
|
205
|
+
expect.objectContaining({
|
|
206
|
+
policyName: "workspace_member_public_select_policy",
|
|
207
|
+
roles: [],
|
|
208
|
+
}),
|
|
209
|
+
expect.objectContaining({
|
|
210
|
+
policyName: "workspace_member_string_roles_select_policy",
|
|
211
|
+
roles: ["anonymous", "authenticated"],
|
|
212
|
+
}),
|
|
213
|
+
]));
|
|
214
|
+
expect(this.existingPolicyDefinitions).not.toEqual(expect.arrayContaining([
|
|
215
|
+
expect.objectContaining({
|
|
216
|
+
policyName: "external_workspace_policy",
|
|
217
|
+
}),
|
|
218
|
+
]));
|
|
219
|
+
expect(this.existingPolicyRoleDefinitions).toEqual(expect.arrayContaining([
|
|
220
|
+
expect.objectContaining({
|
|
221
|
+
policyName: "external_workspace_policy",
|
|
222
|
+
roles: ["workspace_admin"],
|
|
223
|
+
}),
|
|
133
224
|
]));
|
|
134
225
|
expect(this.currentPolicyDefinitions).toEqual([
|
|
135
226
|
expect.objectContaining({
|
|
@@ -151,9 +242,10 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
151
242
|
});
|
|
152
243
|
await expect(generator.generate({ up: [], down: [] }, "/tmp", "Migration")).resolves.toEqual(["migration-file", "/tmp/Migration.ts"]);
|
|
153
244
|
expect(superGenerate).toHaveBeenCalledWith({ up: [], down: [] }, "/tmp", "Migration");
|
|
154
|
-
expect(execute.mock.calls[0]?.[0]).toContain("
|
|
245
|
+
expect(execute.mock.calls[0]?.[0]).toContain("FROM pg_policy");
|
|
155
246
|
expect(execute.mock.calls[0]?.[0]).toContain("unnest(p.polroles)");
|
|
156
247
|
expect(generator.existingPolicyDefinitions).toBeUndefined();
|
|
248
|
+
expect(generator.existingPolicyRoleDefinitions).toBeUndefined();
|
|
157
249
|
expect(generator.currentPolicyDefinitions).toBeUndefined();
|
|
158
250
|
});
|
|
159
251
|
it("continues generation when the driver has no database connection", async () => {
|
|
@@ -175,6 +267,39 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
175
267
|
]);
|
|
176
268
|
expect(superGenerate).toHaveBeenCalledTimes(1);
|
|
177
269
|
});
|
|
270
|
+
it("detects pending policy-only changes from existing database policies", async () => {
|
|
271
|
+
const execute = jest.fn((_sql) => Promise.resolve([
|
|
272
|
+
{
|
|
273
|
+
policy_name: "workspace_member_workspace_select_policy",
|
|
274
|
+
schema_name: "public",
|
|
275
|
+
table_name: "workspace_member",
|
|
276
|
+
permissive: true,
|
|
277
|
+
command: "r",
|
|
278
|
+
qual: `((select app.get_context('tenant_id', null::bigint)) = "workspace_id")`,
|
|
279
|
+
with_check: null,
|
|
280
|
+
roles: ["authenticated"],
|
|
281
|
+
},
|
|
282
|
+
]));
|
|
283
|
+
const generator = createGenerator([
|
|
284
|
+
{
|
|
285
|
+
class: WorkspaceMemberWithWorkspaceContextPolicy,
|
|
286
|
+
tableName: "workspace_member",
|
|
287
|
+
properties: {
|
|
288
|
+
workspace: {
|
|
289
|
+
fieldNames: ["workspace_id"],
|
|
290
|
+
columnTypes: ["bigint"],
|
|
291
|
+
},
|
|
292
|
+
},
|
|
293
|
+
},
|
|
294
|
+
], {
|
|
295
|
+
getConnection: () => ({
|
|
296
|
+
execute,
|
|
297
|
+
}),
|
|
298
|
+
});
|
|
299
|
+
await expect(generator.hasPendingPolicyChanges({ up: [], down: [] })).resolves.toBe(true);
|
|
300
|
+
expect(generator.existingPolicyDefinitions).toBeUndefined();
|
|
301
|
+
expect(generator.currentPolicyDefinitions).toBeUndefined();
|
|
302
|
+
});
|
|
178
303
|
it("does not recreate policies for unrelated schema changes without a database connection", async () => {
|
|
179
304
|
const diff = {
|
|
180
305
|
up: [
|
|
@@ -219,11 +344,30 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
219
344
|
await generator.generate({ up: [], down: [] });
|
|
220
345
|
expect(execute).not.toHaveBeenCalled();
|
|
221
346
|
});
|
|
222
|
-
it("only
|
|
223
|
-
const execute = jest.fn((_sql) => Promise.resolve([
|
|
347
|
+
it("only diffs existing database policies for tables managed by Policy metadata", async () => {
|
|
348
|
+
const execute = jest.fn((_sql) => Promise.resolve([
|
|
349
|
+
{
|
|
350
|
+
policy_name: "unmanaged_policy",
|
|
351
|
+
schema_name: "public",
|
|
352
|
+
table_name: "unmanaged_entity",
|
|
353
|
+
permissive: true,
|
|
354
|
+
command: "r",
|
|
355
|
+
qual: "true",
|
|
356
|
+
with_check: null,
|
|
357
|
+
roles: ["authenticated"],
|
|
358
|
+
},
|
|
359
|
+
]));
|
|
224
360
|
jest
|
|
225
361
|
.spyOn(migrations_1.TSMigrationGenerator.prototype, "generate")
|
|
226
|
-
.
|
|
362
|
+
.mockImplementation(function () {
|
|
363
|
+
expect(this.existingPolicyDefinitions).toEqual([]);
|
|
364
|
+
expect(this.existingPolicyRoleDefinitions).toEqual([
|
|
365
|
+
expect.objectContaining({
|
|
366
|
+
policyName: "unmanaged_policy",
|
|
367
|
+
}),
|
|
368
|
+
]);
|
|
369
|
+
return Promise.resolve(["migration-file", "/tmp/Migration.ts"]);
|
|
370
|
+
});
|
|
227
371
|
const generator = createGenerator([
|
|
228
372
|
{
|
|
229
373
|
class: WorkspaceMember,
|
|
@@ -239,8 +383,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
239
383
|
}),
|
|
240
384
|
});
|
|
241
385
|
await generator.generate({ up: [], down: [] });
|
|
242
|
-
expect(execute.mock.calls[0]?.[0]).toContain("
|
|
243
|
-
expect(execute.mock.calls[0]?.[0]).not.toContain("unmanaged_entity");
|
|
386
|
+
expect(execute.mock.calls[0]?.[0]).toContain("FROM pg_policy");
|
|
244
387
|
});
|
|
245
388
|
it("throws when MikroORM metadata is unavailable", () => {
|
|
246
389
|
const generator = new row_level_security_migration_generator_1.RowLevelSecurityMigrationGenerator({}, {}, { emit: "ts" });
|
|
@@ -304,7 +447,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
304
447
|
down: [],
|
|
305
448
|
});
|
|
306
449
|
expect(file).toContain("extends RowLevelSecurityMigration");
|
|
307
|
-
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = '
|
|
450
|
+
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = 'anonymous') then create role anonymous nologin; end if; end \\$\\$;`);");
|
|
308
451
|
expect(file).toContain("this.addSql(`create schema if not exists app;`);");
|
|
309
452
|
expect(file).toContain("this.addSql(`create or replace function app.get_context(context_key text, context_type anyelement) returns anyelement as \\$\\$ declare context_value text; begin context_value := current_setting('app.' || context_key, true); if context_value is null or context_value = '' then return null; end if; execute format('select \\$1::%s', pg_typeof(context_type)::text) using context_value into context_type; return context_type; end; \\$\\$ language plpgsql stable;`);");
|
|
310
453
|
expect(file).not.toContain("get_tenant_id()");
|
|
@@ -315,6 +458,82 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
315
458
|
expect(file).toContain('this.addSql(`drop policy if exists workspace_member_user_select_policy on "public"."workspace_member";`);');
|
|
316
459
|
expect(file).toContain('this.addSql(`create policy workspace_member_user_select_policy on "public"."workspace_member" as permissive for select using ((select app.get_context(\'user_id\', null::bigint)) = "user_id");`);');
|
|
317
460
|
});
|
|
461
|
+
it("creates anonymous and custom policy roles in up and revokes generated grants in down", () => {
|
|
462
|
+
const generator = createGenerator([
|
|
463
|
+
{
|
|
464
|
+
class: WorkspaceMemberWithCustomRole,
|
|
465
|
+
tableName: "workspace_member",
|
|
466
|
+
},
|
|
467
|
+
]);
|
|
468
|
+
const file = generator.generateMigrationFile("MigrationTest", {
|
|
469
|
+
up: [],
|
|
470
|
+
down: [],
|
|
471
|
+
});
|
|
472
|
+
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = 'anonymous') then create role anonymous nologin; end if; end \\$\\$;`);");
|
|
473
|
+
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = 'workspace_admin') then create role workspace_admin nologin; end if; end \\$\\$;`);");
|
|
474
|
+
expect(file).toContain('this.addSql(`grant select on table "public"."workspace_member" to workspace_admin;`);');
|
|
475
|
+
expect(file).toContain('this.addSql(`revoke select on table "public"."workspace_member" from workspace_admin;`);');
|
|
476
|
+
expect(file).toContain("this.addSql(`revoke usage on schema app from workspace_admin;`);");
|
|
477
|
+
expect(file).toContain("this.addSql(`revoke workspace_admin from current_user;`);");
|
|
478
|
+
expect(file).not.toContain("drop role workspace_admin");
|
|
479
|
+
});
|
|
480
|
+
it("keeps grants required by pre-existing policies when rolling back added policies", () => {
|
|
481
|
+
const generator = createGenerator([
|
|
482
|
+
{
|
|
483
|
+
class: WorkspaceMemberWithSharedRolePolicies,
|
|
484
|
+
tableName: "workspace_member",
|
|
485
|
+
},
|
|
486
|
+
]);
|
|
487
|
+
generator.existingPolicyDefinitions = [
|
|
488
|
+
{
|
|
489
|
+
entityName: "WorkspaceMemberWithSharedRolePolicies",
|
|
490
|
+
schemaName: "public",
|
|
491
|
+
tableName: "workspace_member",
|
|
492
|
+
policyName: "workspace_member_admin_select_policy",
|
|
493
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
494
|
+
using: "true",
|
|
495
|
+
roles: ["workspace_admin"],
|
|
496
|
+
},
|
|
497
|
+
];
|
|
498
|
+
const file = generator.generateMigrationFile("MigrationTest", {
|
|
499
|
+
up: [],
|
|
500
|
+
down: [],
|
|
501
|
+
});
|
|
502
|
+
expect(file).toContain("drop policy if exists workspace_member_admin_update_policy");
|
|
503
|
+
expect(file).toContain('this.addSql(`revoke update on table "public"."workspace_member" from workspace_admin;`);');
|
|
504
|
+
expect(file).not.toContain('this.addSql(`revoke select, update on table "public"."workspace_member" from workspace_admin;`);');
|
|
505
|
+
expect(file).not.toContain("this.addSql(`revoke usage on schema app from anonymous;`);");
|
|
506
|
+
expect(file).not.toContain("this.addSql(`revoke anonymous from current_user;`);");
|
|
507
|
+
expect(file).not.toContain("this.addSql(`revoke usage on schema app from workspace_admin;`);");
|
|
508
|
+
expect(file).not.toContain("this.addSql(`revoke workspace_admin from current_user;`);");
|
|
509
|
+
});
|
|
510
|
+
it("keeps role grants required by policies outside the generated diff", () => {
|
|
511
|
+
const generator = createGenerator([
|
|
512
|
+
{
|
|
513
|
+
class: WorkspaceMemberWithCustomRole,
|
|
514
|
+
tableName: "workspace_member",
|
|
515
|
+
},
|
|
516
|
+
]);
|
|
517
|
+
generator.existingPolicyDefinitions = [];
|
|
518
|
+
generator.existingPolicyRoleDefinitions = [
|
|
519
|
+
{
|
|
520
|
+
entityName: "ExternalPolicy",
|
|
521
|
+
schemaName: "external",
|
|
522
|
+
tableName: "workspace",
|
|
523
|
+
policyName: "external_workspace_policy",
|
|
524
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
525
|
+
using: "true",
|
|
526
|
+
roles: ["workspace_admin"],
|
|
527
|
+
},
|
|
528
|
+
];
|
|
529
|
+
const file = generator.generateMigrationFile("MigrationTest", {
|
|
530
|
+
up: [],
|
|
531
|
+
down: [],
|
|
532
|
+
});
|
|
533
|
+
expect(file).toContain('this.addSql(`revoke select on table "public"."workspace_member" from workspace_admin;`);');
|
|
534
|
+
expect(file).not.toContain("this.addSql(`revoke usage on schema app from workspace_admin;`);");
|
|
535
|
+
expect(file).not.toContain("this.addSql(`revoke workspace_admin from current_user;`);");
|
|
536
|
+
});
|
|
318
537
|
it("handles removed policies when an existing database policy is no longer declared", () => {
|
|
319
538
|
const generator = createGenerator([
|
|
320
539
|
{
|
|
@@ -341,7 +560,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
341
560
|
expect(file).toContain("create policy workspace_member_user_select_policy");
|
|
342
561
|
expect(file).toContain("create policy removed_workspace_member_policy");
|
|
343
562
|
expect(file).toContain("create policy removed_workspace_member_policy on");
|
|
344
|
-
expect(file).toContain("for select to authenticated using true");
|
|
563
|
+
expect(file).toContain("for select to authenticated using (true)");
|
|
345
564
|
});
|
|
346
565
|
it("recreates policies when an existing policy changes content", () => {
|
|
347
566
|
const generator = createGenerator([
|
|
@@ -368,7 +587,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
368
587
|
expect(file).toContain("drop policy if exists workspace_member_user_select_policy");
|
|
369
588
|
expect(file).toContain("create policy workspace_member_user_select_policy on");
|
|
370
589
|
expect(file).toContain("using ((select app.get_context('user_id', null::bigint)) = \"user_id\")");
|
|
371
|
-
expect(file).toContain("for select to authenticated using false");
|
|
590
|
+
expect(file).toContain("for select to authenticated using (false)");
|
|
372
591
|
});
|
|
373
592
|
it("matches create table statements for non-public schemas and collection names", () => {
|
|
374
593
|
const generator = createGenerator([
|
|
@@ -382,7 +601,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
382
601
|
up: ['create table if not exists "app"."audit_log" ("id" bigint);'],
|
|
383
602
|
down: ['drop table if exists "app"."audit_log";'],
|
|
384
603
|
});
|
|
385
|
-
expect(file).toContain('this.addSql(`create policy audit_log_select_policy on "app"."audit_log" as permissive for select using true;`);');
|
|
604
|
+
expect(file).toContain('this.addSql(`create policy audit_log_select_policy on "app"."audit_log" as permissive for select using (true);`);');
|
|
386
605
|
});
|
|
387
606
|
it("generates all policies declared on an entity", () => {
|
|
388
607
|
const generator = createGenerator([
|
|
@@ -455,14 +674,138 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
455
674
|
expect(row_level_security_migration_generator_1.RowLevelSecurityMigrationGenerator.prototype).toBeInstanceOf(migrations_1.TSMigrationGenerator);
|
|
456
675
|
});
|
|
457
676
|
});
|
|
458
|
-
|
|
677
|
+
describe("RowLevelSecurityMigrator", () => {
|
|
678
|
+
afterEach(() => {
|
|
679
|
+
jest.restoreAllMocks();
|
|
680
|
+
});
|
|
681
|
+
it("creates a migration when only row-level-security policies changed", async () => {
|
|
682
|
+
const diff = { up: [], down: [] };
|
|
683
|
+
const generator = createGenerator([]);
|
|
684
|
+
const hasPendingPolicyChanges = jest
|
|
685
|
+
.spyOn(generator, "hasPendingPolicyChanges")
|
|
686
|
+
.mockResolvedValue(true);
|
|
687
|
+
const generate = jest
|
|
688
|
+
.spyOn(generator, "generate")
|
|
689
|
+
.mockResolvedValue(["migration-file", "Migration.ts"]);
|
|
690
|
+
const storeCurrentSchema = jest.fn();
|
|
691
|
+
const migrator = Object.assign(Object.create(row_level_security_migrator_1.RowLevelSecurityMigrator.prototype), {
|
|
692
|
+
generator,
|
|
693
|
+
ensureMigrationsDirExists: jest.fn(),
|
|
694
|
+
getSchemaDiff: jest.fn().mockResolvedValue(diff),
|
|
695
|
+
storeCurrentSchema,
|
|
696
|
+
});
|
|
697
|
+
await expect(migrator.createMigration("/tmp", false, false, "Migration")).resolves.toEqual({
|
|
698
|
+
fileName: "Migration.ts",
|
|
699
|
+
code: "migration-file",
|
|
700
|
+
diff,
|
|
701
|
+
});
|
|
702
|
+
expect(hasPendingPolicyChanges).toHaveBeenCalledWith(diff);
|
|
703
|
+
expect(generate).toHaveBeenCalledWith(diff, "/tmp", "Migration");
|
|
704
|
+
expect(storeCurrentSchema).toHaveBeenCalledTimes(1);
|
|
705
|
+
});
|
|
706
|
+
it("generates a policy diff after an applied context policy changes", async () => {
|
|
707
|
+
const migrationPath = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "rls-policy-diff-"));
|
|
708
|
+
const diff = { up: [], down: [] };
|
|
709
|
+
const execute = jest.fn((_sql) => Promise.resolve([
|
|
710
|
+
{
|
|
711
|
+
policy_name: "workspace_member_workspace_select_policy",
|
|
712
|
+
schema_name: "public",
|
|
713
|
+
table_name: "workspace_member",
|
|
714
|
+
permissive: true,
|
|
715
|
+
command: "r",
|
|
716
|
+
qual: `((select app.get_context('tenant_id', null::bigint)) = "workspace_id")`,
|
|
717
|
+
with_check: null,
|
|
718
|
+
roles: ["authenticated"],
|
|
719
|
+
},
|
|
720
|
+
]));
|
|
721
|
+
const generator = createGenerator([
|
|
722
|
+
{
|
|
723
|
+
class: WorkspaceMemberWithWorkspaceContextPolicy,
|
|
724
|
+
tableName: "workspace_member",
|
|
725
|
+
properties: {
|
|
726
|
+
workspace: {
|
|
727
|
+
fieldNames: ["workspace_id"],
|
|
728
|
+
columnTypes: ["bigint"],
|
|
729
|
+
},
|
|
730
|
+
},
|
|
731
|
+
},
|
|
732
|
+
], {
|
|
733
|
+
getConnection: () => ({
|
|
734
|
+
execute,
|
|
735
|
+
}),
|
|
736
|
+
}, {
|
|
737
|
+
path: migrationPath,
|
|
738
|
+
pathTs: migrationPath,
|
|
739
|
+
});
|
|
740
|
+
const storeCurrentSchema = jest.fn();
|
|
741
|
+
const migrator = Object.assign(Object.create(row_level_security_migrator_1.RowLevelSecurityMigrator.prototype), {
|
|
742
|
+
generator,
|
|
743
|
+
ensureMigrationsDirExists: jest.fn(),
|
|
744
|
+
getSchemaDiff: jest.fn().mockResolvedValue(diff),
|
|
745
|
+
storeCurrentSchema,
|
|
746
|
+
});
|
|
747
|
+
try {
|
|
748
|
+
const result = await migrator.createMigration(migrationPath, false, false, "MigrationPolicyContextDiff");
|
|
749
|
+
expect(result.fileName).toBe("MigrationPolicyContextDiff.ts");
|
|
750
|
+
expect(result.diff).toBe(diff);
|
|
751
|
+
expect(result.code).toContain("extends RowLevelSecurityMigration");
|
|
752
|
+
expect(result.code).toContain("drop policy if exists workspace_member_workspace_select_policy");
|
|
753
|
+
expect(result.code).toContain("app.get_context('workspace_id', null::bigint)");
|
|
754
|
+
expect(result.code).toContain("app.get_context('tenant_id', null::bigint)");
|
|
755
|
+
expect(result.code.indexOf("drop policy if exists workspace_member_workspace_select_policy")).toBeLessThan(result.code.indexOf("create policy workspace_member_workspace_select_policy"));
|
|
756
|
+
expect(storeCurrentSchema).toHaveBeenCalledTimes(1);
|
|
757
|
+
}
|
|
758
|
+
finally {
|
|
759
|
+
(0, node_fs_1.rmSync)(migrationPath, { force: true, recursive: true });
|
|
760
|
+
}
|
|
761
|
+
});
|
|
762
|
+
it("keeps MikroORM no-op behavior when schema and policies are unchanged", async () => {
|
|
763
|
+
const diff = { up: [], down: [] };
|
|
764
|
+
const generator = createGenerator([]);
|
|
765
|
+
jest.spyOn(generator, "hasPendingPolicyChanges").mockResolvedValue(false);
|
|
766
|
+
const generate = jest.spyOn(generator, "generate");
|
|
767
|
+
const storeCurrentSchema = jest.fn();
|
|
768
|
+
const migrator = Object.assign(Object.create(row_level_security_migrator_1.RowLevelSecurityMigrator.prototype), {
|
|
769
|
+
generator,
|
|
770
|
+
ensureMigrationsDirExists: jest.fn(),
|
|
771
|
+
getSchemaDiff: jest.fn().mockResolvedValue(diff),
|
|
772
|
+
storeCurrentSchema,
|
|
773
|
+
});
|
|
774
|
+
await expect(migrator.createMigration()).resolves.toEqual({
|
|
775
|
+
fileName: "",
|
|
776
|
+
code: "",
|
|
777
|
+
diff,
|
|
778
|
+
});
|
|
779
|
+
expect(generate).not.toHaveBeenCalled();
|
|
780
|
+
expect(storeCurrentSchema).not.toHaveBeenCalled();
|
|
781
|
+
});
|
|
782
|
+
it("reports migration needed when only row-level-security policies changed", async () => {
|
|
783
|
+
const diff = { up: [], down: [] };
|
|
784
|
+
const generator = createGenerator([]);
|
|
785
|
+
jest.spyOn(generator, "hasPendingPolicyChanges").mockResolvedValue(true);
|
|
786
|
+
const migrator = Object.assign(Object.create(row_level_security_migrator_1.RowLevelSecurityMigrator.prototype), {
|
|
787
|
+
generator,
|
|
788
|
+
ensureMigrationsDirExists: jest.fn(),
|
|
789
|
+
getSchemaDiff: jest.fn().mockResolvedValue(diff),
|
|
790
|
+
});
|
|
791
|
+
await expect(migrator.checkMigrationNeeded()).resolves.toBe(true);
|
|
792
|
+
});
|
|
793
|
+
});
|
|
794
|
+
function createGenerator(metadata, driverOptions = {}, generatorOptions = {}) {
|
|
459
795
|
return new row_level_security_migration_generator_1.RowLevelSecurityMigrationGenerator({
|
|
460
796
|
config: {
|
|
797
|
+
get: (key) => (key === "baseDir" ? process.cwd() : undefined),
|
|
461
798
|
getMetadata: () => ({
|
|
462
799
|
getAll: () => metadata,
|
|
463
800
|
}),
|
|
464
801
|
},
|
|
465
802
|
...driverOptions,
|
|
466
|
-
}, {
|
|
803
|
+
}, {
|
|
804
|
+
classToMigrationName: (_timestamp, name) => name ?? "Migration",
|
|
805
|
+
}, {
|
|
806
|
+
emit: "ts",
|
|
807
|
+
fileName: (_timestamp, name) => name ?? "Migration",
|
|
808
|
+
...generatorOptions,
|
|
809
|
+
});
|
|
467
810
|
}
|
|
468
811
|
//# sourceMappingURL=row-level-security-migration-generator.spec.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"row-level-security-migration-generator.spec.js","sourceRoot":"","sources":["../src/row-level-security-migration-generator.spec.ts"],"names":[],"mappings":";;;;;;;;AAAA,sDAA6D;AAE7D,oEAAuD;AACvD,qEAA4D;AAC5D,qGAA8F;AAO9F,IAAM,eAAe,GAArB,MAAM,eAAe;CAAG,CAAA;AAAlB,eAAe;IALpB,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;GACI,eAAe,CAAG;AAYxB,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;CAAG,CAAA;AAAtC,mCAAmC;IAVxC,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;IACD,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,2EAA2E;QAClF,SAAS,EAAE,2EAA2E;KACvF,CAAC;GACI,mCAAmC,CAAG;AAO5C,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;CAAG,CAAA;AAArC,kCAAkC;IALvC,IAAA,yBAAM,EAAC;QACN,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,SAAS;KACnB,CAAC;GACI,kCAAkC,CAAG;AAO3C,IAAM,QAAQ,GAAd,MAAM,QAAQ;CAAG,CAAA;AAAX,QAAQ;IALb,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;KACd,CAAC;GACI,QAAQ,CAAG;AAEjB,MAAM,eAAe;CAAG;AAExB,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,qCAAqC;gBAClD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,6BAA6B;gBAC1C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC,CACH,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,OAAO,CACrD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,MAAM;oBACjB,KAAK,EAAE,CAAC,eAAe,CAAC;iBACzB,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,MAAM;iBACd,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,6BAA6B;oBACzC,OAAO,EAAE,KAAK;iBACf,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC;gBACrD,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,qCAAqC;oBACjD,SAAS,EAAE,kBAAkB;iBAC9B,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,MAAM,CACV,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAC9D,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAE5D,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EACpB,MAAM,EACN,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C,gCAAgC,CACjC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,CAAE,SAAiB,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,CAAE,SAAiB,CAAC,wBAAwB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;YAEhE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtE,gBAAgB;YAChB,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,IAAI,GAAG;YACX,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,IAAI,CAAC;gBACjD,mBAAmB;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;YACD;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C,gCAAgC,CACjC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,2EAAkC,CACtD,EAAW,EACX,EAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAW,CACxB,CAAC;QAEF,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,GAAG;gBACX,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,0DAA0D,CAAC;YAChE,IAAI,EAAE,CAAC,kDAAkD,CAAC;SAC3D,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4EAA4E,CAC7E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAClE,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACnE,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAC1E,CAAC,YAAY,CACZ,IAAI,CAAC,OAAO,CAAC,kDAAkD,CAAC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,uBAAuB,CAAC;aAC9D,eAAe,CAAC,+BAA+B,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oKAAoK,CACrK,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,gdAAgd,CACjd,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oFAAoF,CACrF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2GAA2G,CAC5G,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,iCAAiC;gBAC7C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,uDAAuD,CACxD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mDAAmD,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,qCAAqC;gBACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2DAA2D,CAC5D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,yEAAyE,CAC1E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,WAAW;aACxB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,6DAA6D,CAAC;YACnE,IAAI,EAAE,CAAC,yCAAyC,CAAC;SAClD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,iHAAiH,CAClH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,mCAAmC;gBAC1C,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4RAA4R,CAC7R,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,kCAAkC;gBACzC,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,WAAW,EAAE,CAAC,SAAS,CAAC;wBACxB,UAAU,EAAE;4BACV,WAAW,EAAE,CAAC,IAAI,CAAC;4BACnB,UAAU,EAAE;gCACV,EAAE,EAAE;oCACF,WAAW,EAAE,CAAC,QAAQ,CAAC;iCACxB;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,WAAW,CAAC;YACjB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,2EAAkC,CAAC,SAAS,CAAC,CAAC,cAAc,CACjE,iCAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,QAAkB,EAClB,gBAAyC,EAAE;IAE3C,OAAO,IAAI,2EAAkC,CAC3C;QACE,MAAM,EAAE;YACN,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;aACvB,CAAC;SACH;QACD,GAAG,aAAa;KACR,EACV,EAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAW,CACxB,CAAC;AACJ,CAAC"}
|
|
1
|
+
{"version":3,"file":"row-level-security-migration-generator.spec.js","sourceRoot":"","sources":["../src/row-level-security-migration-generator.spec.ts"],"names":[],"mappings":";;;;;;;;AAAA,qCAA8C;AAC9C,qCAAiC;AACjC,yCAAiC;AAEjC,sDAA6D;AAE7D,oEAAuD;AACvD,qEAA4D;AAC5D,qGAA8F;AAC9F,+EAAyE;AAOzE,IAAM,eAAe,GAArB,MAAM,eAAe;CAAG,CAAA;AAAlB,eAAe;IALpB,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;GACI,eAAe,CAAG;AAYxB,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;CAAG,CAAA;AAAtC,mCAAmC;IAVxC,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;IACD,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,2EAA2E;QAClF,SAAS,EAAE,2EAA2E;KACvF,CAAC;GACI,mCAAmC,CAAG;AAO5C,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;CAAG,CAAA;AAArC,kCAAkC;IALvC,IAAA,yBAAM,EAAC;QACN,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,SAAS;KACnB,CAAC;GACI,kCAAkC,CAAG;AAS3C,IAAM,yCAAyC,GAA/C,MAAM,yCAAyC;CAAG,CAAA;AAA5C,yCAAyC;IAP9C,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,0CAA0C;QAChD,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,CAAC,eAAe,CAAC;KACzB,CAAC;GACI,yCAAyC,CAAG;AAOlD,IAAM,QAAQ,GAAd,MAAM,QAAQ;CAAG,CAAA;AAAX,QAAQ;IALb,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;KACd,CAAC;GACI,QAAQ,CAAG;AAQjB,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;CAAG,CAAA;AAAhC,6BAA6B;IANlC,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;KAC3B,CAAC;GACI,6BAA6B,CAAG;AAetC,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;CAAG,CAAA;AAAxC,qCAAqC;IAb1C,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;KAC3B,CAAC;IACD,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,CAAC,iBAAiB,CAAC;KAC3B,CAAC;GACI,qCAAqC,CAAG;AAE9C,MAAM,eAAe;CAAG;AAExB,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,qCAAqC;gBAClD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,6BAA6B;gBAC1C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,uCAAuC;gBACpD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,IAAI;aACZ;YACD;gBACE,WAAW,EAAE,6CAA6C;gBAC1D,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,2BAA2B;aACnC;YACD;gBACE,WAAW,EAAE,2BAA2B;gBACxC,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,WAAW;gBACvB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,iBAAiB,CAAC;aAC3B;SACF,CAAC,CACH,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,OAAO,CACrD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,MAAM;oBACjB,KAAK,EAAE,CAAC,eAAe,CAAC;iBACzB,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,MAAM;iBACd,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,6BAA6B;oBACzC,OAAO,EAAE,KAAK;iBACf,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,uCAAuC;oBACnD,KAAK,EAAE,EAAE;iBACV,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,6CAA6C;oBACzD,KAAK,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;iBACtC,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,OAAO,CACzD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,2BAA2B;iBACxC,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,6BAA6B,CAAC,CAAC,OAAO,CACzD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,2BAA2B;oBACvC,KAAK,EAAE,CAAC,iBAAiB,CAAC;iBAC3B,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC;gBACrD,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,qCAAqC;oBACjD,SAAS,EAAE,kBAAkB;iBAC9B,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,MAAM,CACV,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAC9D,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAE5D,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EACpB,MAAM,EACN,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,CAAE,SAAiB,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,CAAE,SAAiB,CAAC,6BAA6B,CAAC,CAAC,aAAa,EAAE,CAAC;QACzE,MAAM,CAAE,SAAiB,CAAC,wBAAwB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;YAEhE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtE,gBAAgB;YAChB,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,0CAA0C;gBACvD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,wEAAwE;gBAC9E,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC,CACH,CAAC;QACF,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,yCAAyC;gBAChD,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE;oBACV,SAAS,EAAE;wBACT,UAAU,EAAE,CAAC,cAAc,CAAC;wBAC5B,WAAW,EAAE,CAAC,QAAQ,CAAC;qBACxB;iBACF;aACF;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,MAAM,CACV,SAAS,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CACxD,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAE,SAAiB,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,CAAE,SAAiB,CAAC,wBAAwB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,IAAI,GAAG;YACX,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,IAAI,CAAC;gBACjD,mBAAmB;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,kBAAkB;gBAC/B,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC,CACH,CAAC;QACF,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAE,IAAY,CAAC,6BAA6B,CAAC,CAAC,OAAO,CAAC;gBAC1D,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,kBAAkB;iBAC/B,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;YACD;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,2EAAkC,CACtD,EAAW,EACX,EAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAW,CACxB,CAAC;QAEF,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,GAAG;gBACX,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,0DAA0D,CAAC;YAChE,IAAI,EAAE,CAAC,kDAAkD,CAAC;SAC3D,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4EAA4E,CAC7E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAClE,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACnE,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAC1E,CAAC,YAAY,CACZ,IAAI,CAAC,OAAO,CAAC,kDAAkD,CAAC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,uBAAuB,CAAC;aAC9D,eAAe,CAAC,+BAA+B,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4JAA4J,CAC7J,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,gdAAgd,CACjd,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oFAAoF,CACrF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2GAA2G,CAC5G,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,6BAA6B;gBACpC,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4JAA4J,CAC7J,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,wKAAwK,CACzK,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,uFAAuF,CACxF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,0FAA0F,CAC3F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,kEAAkE,CACnE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2DAA2D,CAC5D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,qCAAqC;gBAC5C,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,uCAAuC;gBACnD,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,sCAAsC;gBAClD,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;aAC3B;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4DAA4D,CAC7D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,0FAA0F,CAC3F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,kGAAkG,CACnG,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,4DAA4D,CAC7D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,qDAAqD,CACtD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,kEAAkE,CACnE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,2DAA2D,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,6BAA6B;gBACpC,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG,EAAE,CAAC;QACjD,SAAiB,CAAC,6BAA6B,GAAG;YACjD;gBACE,UAAU,EAAE,gBAAgB;gBAC5B,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,WAAW;gBACtB,UAAU,EAAE,2BAA2B;gBACvC,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;aAC3B;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,0FAA0F,CAC3F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,kEAAkE,CACnE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,2DAA2D,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,iCAAiC;gBAC7C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,uDAAuD,CACxD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mDAAmD,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,qCAAqC;gBACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2DAA2D,CAC5D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,yEAAyE,CAC1E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,WAAW;aACxB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,6DAA6D,CAAC;YACnE,IAAI,EAAE,CAAC,yCAAyC,CAAC;SAClD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,mHAAmH,CACpH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,mCAAmC;gBAC1C,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4RAA4R,CAC7R,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,kCAAkC;gBACzC,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,WAAW,EAAE,CAAC,SAAS,CAAC;wBACxB,UAAU,EAAE;4BACV,WAAW,EAAE,CAAC,IAAI,CAAC;4BACnB,UAAU,EAAE;gCACV,EAAE,EAAE;oCACF,WAAW,EAAE,CAAC,QAAQ,CAAC;iCACxB;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,WAAW,CAAC;YACjB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,2EAAkC,CAAC,SAAS,CAAC,CAAC,cAAc,CACjE,iCAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,uBAAuB,GAAG,IAAI;aACjC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC;aAC3C,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI;aAClB,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC;aAC5B,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;QACzD,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,MAAM,CAAC,MAAM,CAAC,sDAAwB,CAAC,SAAS,CAAC,EACjD;YACE,SAAS;YACT,yBAAyB,EAAE,IAAI,CAAC,EAAE,EAAE;YACpC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAChD,kBAAkB;SACnB,CAC0B,CAAC;QAE9B,MAAM,MAAM,CACV,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAC5D,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjB,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,gBAAgB;YACtB,IAAI;SACL,CAAC,CAAC;QACH,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,aAAa,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,0CAA0C;gBACvD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,wEAAwE;gBAC9E,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC,CACH,CAAC;QACF,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,yCAAyC;gBAChD,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE;oBACV,SAAS,EAAE;wBACT,UAAU,EAAE,CAAC,cAAc,CAAC;wBAC5B,WAAW,EAAE,CAAC,QAAQ,CAAC;qBACxB;iBACF;aACF;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,EACD;YACE,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,aAAa;SACtB,CACF,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,MAAM,CAAC,MAAM,CAAC,sDAAwB,CAAC,SAAS,CAAC,EACjD;YACE,SAAS;YACT,yBAAyB,EAAE,IAAI,CAAC,EAAE,EAAE;YACpC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAChD,kBAAkB;SACnB,CAC0B,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAC3C,aAAa,EACb,KAAK,EACL,KAAK,EACL,4BAA4B,CAC7B,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YACnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAC3B,gEAAgE,CACjE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAC3B,+CAA+C,CAChD,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAC3B,4CAA4C,CAC7C,CAAC;YACF,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,OAAO,CACjB,gEAAgE,CACjE,CACF,CAAC,YAAY,CACZ,MAAM,CAAC,IAAI,CAAC,OAAO,CACjB,wDAAwD,CACzD,CACF,CAAC;YACF,MAAM,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,MAAM,CAAC,MAAM,CAAC,sDAAwB,CAAC,SAAS,CAAC,EACjD;YACE,SAAS;YACT,yBAAyB,EAAE,IAAI,CAAC,EAAE,EAAE;YACpC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAChD,kBAAkB;SACnB,CAC0B,CAAC;QAE9B,MAAM,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACxD,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,EAAE;YACR,IAAI;SACL,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,MAAM,CAAC,MAAM,CAAC,sDAAwB,CAAC,SAAS,CAAC,EACjD;YACE,SAAS;YACT,yBAAyB,EAAE,IAAI,CAAC,EAAE,EAAE;YACpC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;SACjD,CAC0B,CAAC;QAE9B,MAAM,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,QAAkB,EAClB,gBAAyC,EAAE,EAC3C,mBAA4C,EAAE;IAE9C,OAAO,IAAI,2EAAkC,CAC3C;QACE,MAAM,EAAE;YACN,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;aACvB,CAAC;SACH;QACD,GAAG,aAAa;KACR,EACV;QACE,oBAAoB,EAAE,CAAC,UAAkB,EAAE,IAAa,EAAE,EAAE,CAC1D,IAAI,IAAI,WAAW;KACb,EACV;QACE,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,CAAC,UAAkB,EAAE,IAAa,EAAE,EAAE,CAAC,IAAI,IAAI,WAAW;QACpE,GAAG,gBAAgB;KACX,CACX,CAAC;AACJ,CAAC"}
|
|
@@ -2,10 +2,8 @@ import { Migration } from "@mikro-orm/migrations";
|
|
|
2
2
|
import type { PolicySqlOptions } from "./interfaces/policy-sql-options.interface";
|
|
3
3
|
/** Base MikroORM migration with convenience helpers for row-level security SQL. */
|
|
4
4
|
export declare abstract class RowLevelSecurityMigration extends Migration {
|
|
5
|
-
/** Adds the shared RLS
|
|
6
|
-
protected addRowLevelSecurityBootstrapSql(): void;
|
|
5
|
+
/** Adds the shared RLS schema, helper function, roles, and role grants. */
|
|
6
|
+
protected addRowLevelSecurityBootstrapSql(roles?: string[]): void;
|
|
7
7
|
/** Adds SQL that enables RLS and creates the configured policy. */
|
|
8
8
|
protected addPolicySql(options: PolicySqlOptions): void;
|
|
9
|
-
/** Adds SQL that drops the configured policy and disables RLS when no policies remain. */
|
|
10
|
-
protected addDropPolicySql(options: PolicySqlOptions): void;
|
|
11
9
|
}
|
|
@@ -3,26 +3,28 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.RowLevelSecurityMigration = void 0;
|
|
4
4
|
const migrations_1 = require("@mikro-orm/migrations");
|
|
5
5
|
const create_policy_bootstrap_sql_statements_1 = require("./utils/create-policy-bootstrap-sql-statements");
|
|
6
|
-
const
|
|
6
|
+
const create_policy_role_sql_statements_1 = require("./utils/create-policy-role-sql-statements");
|
|
7
7
|
const create_policy_up_sql_statements_1 = require("./utils/create-policy-up-sql-statements");
|
|
8
8
|
/** Base MikroORM migration with convenience helpers for row-level security SQL. */
|
|
9
9
|
class RowLevelSecurityMigration extends migrations_1.Migration {
|
|
10
|
-
/** Adds the shared RLS
|
|
11
|
-
addRowLevelSecurityBootstrapSql() {
|
|
10
|
+
/** Adds the shared RLS schema, helper function, roles, and role grants. */
|
|
11
|
+
addRowLevelSecurityBootstrapSql(roles = []) {
|
|
12
12
|
for (const sql of (0, create_policy_bootstrap_sql_statements_1.createPolicyBootstrapSqlStatements)()) {
|
|
13
13
|
this.addSql(sql);
|
|
14
14
|
}
|
|
15
|
+
for (const sql of (0, create_policy_role_sql_statements_1.createPolicyRoleUpSqlStatements)(roles)) {
|
|
16
|
+
this.addSql(sql);
|
|
17
|
+
}
|
|
15
18
|
}
|
|
16
19
|
/** Adds SQL that enables RLS and creates the configured policy. */
|
|
17
20
|
addPolicySql(options) {
|
|
21
|
+
for (const sql of (0, create_policy_role_sql_statements_1.createPolicyRoleUpSqlStatements)(options.roles)) {
|
|
22
|
+
this.addSql(sql);
|
|
23
|
+
}
|
|
18
24
|
for (const sql of (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)(options)) {
|
|
19
25
|
this.addSql(sql);
|
|
20
26
|
}
|
|
21
27
|
}
|
|
22
|
-
/** Adds SQL that drops the configured policy and disables RLS when no policies remain. */
|
|
23
|
-
addDropPolicySql(options) {
|
|
24
|
-
this.addSql((0, create_policy_down_sql_1.createPolicyDownSql)(options));
|
|
25
|
-
}
|
|
26
28
|
}
|
|
27
29
|
exports.RowLevelSecurityMigration = RowLevelSecurityMigration;
|
|
28
30
|
//# sourceMappingURL=row-level-security-migration.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"row-level-security-migration.js","sourceRoot":"","sources":["../src/row-level-security-migration.ts"],"names":[],"mappings":";;;AAAA,sDAAkD;AAGlD,2GAAoG;AACpG,
|
|
1
|
+
{"version":3,"file":"row-level-security-migration.js","sourceRoot":"","sources":["../src/row-level-security-migration.ts"],"names":[],"mappings":";;;AAAA,sDAAkD;AAGlD,2GAAoG;AACpG,iGAA4F;AAC5F,6FAAsF;AAEtF,mFAAmF;AACnF,MAAsB,yBAA0B,SAAQ,sBAAS;IAC/D,2EAA2E;IACjE,+BAA+B,CAAC,QAAkB,EAAE;QAC5D,KAAK,MAAM,GAAG,IAAI,IAAA,2EAAkC,GAAE,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAA,mEAA+B,EAAC,KAAK,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,mEAAmE;IACzD,YAAY,CAAC,OAAyB;QAC9C,KAAK,MAAM,GAAG,IAAI,IAAA,mEAA+B,EAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAA,6DAA2B,EAAC,OAAO,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAtBD,8DAsBC"}
|