@nocobase/app-plugin-releases 0.0.0-stage → 0.1.0-beta.0

package/dist/server/services/variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variables.js","sourceRoot":"","sources":["../../../server/services/variables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,GAQtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAwB,MAAM,cAAc,CAAC;AAE9E,4GAA4G;AAC5G,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAE,6BAA6B;IACvC,KAAK,EAAE,0BAA0B;IACjC,QAAQ,EAAE,6BAA6B;CAC/B,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD,oHAAoH;AACpH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,oBAAoB;CACnB,CAAC;AAEX,mHAAmH;AAEnH,MAAM,UAAU,GAAiC;IAC/C,QAAQ;IACR,YAAY;IACZ,UAAU;CACX,CAAC;AAEF,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,aAAa,CACtB,+BAA+B,OAAO,EAAE,EACxC,4BAA4B,EAC5B,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,GAAW,EACX,IAAY;IAEZ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QACjD,MAAM,eAAe,CAAC,GAAG,IAAI,4BAA4B,GAAG,cAAc,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,eAAe,CAAC,yBAAyB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC;QAC3B,MAAM,eAAe,CAAC,0BAA0B,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,MAAM,eAAe,CAAC,2BAA2B,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,sBAAsB;QACjD,MAAM,eAAe,CACnB,0BAA0B,sBAAsB,aAAa,CAC9D,CAAC;IACJ,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAc,EAAmB,EAAE;QACxE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,eAAe,CAAC,6BAA6B,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/D,MAAM,eAAe,CACnB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uEAAuE,CAC/F,CAAC;QACJ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,eAAe,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;QACxC,IACE,QAAQ,KAAK,IAAI;YACjB,CAAC,UAAU,CAAC,QAAQ,CAAC,QAA6B,CAAC;YAEnD,MAAM,eAAe,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,YAAY,CAC9B,KAAK,CAAC,WAAW,EACjB,IAAI,EACJ,GAAG,IAAI,eAAe,CACvB,CAAC;QACF,OAAO;YACL,IAAI;YACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;YACjC,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,cAAc,EAAE,KAAK,CAAC,cAAc,KAAK,IAAI;YAC7C,QAAQ,EAAE,QAAoC;YAC9C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QAC7B,CAAC,CAAC;YACE,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ;gBACpC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ;gBACvC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,sBAAsB,CAC3B,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAa,CAAC,CAAC,CAAC,KAAK,CACnE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mHAAmH;AAEnH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,MAAM,IAAI,aAAa,CACrB,iGAAiG,EACjG,uBAAuB,EACvB,kBAAkB,CACnB,CAAC;IACJ,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,MAAM,IAAI,aAAa,CACrB,GAAG,IAAI,kDAAkD,EACzD,mBAAmB,EACnB,kBAAkB,CACnB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,MAAM,IAAI,aAAa,CACrB,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,CACnB,CAAC;IACJ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,wBAAwB;QACrD,MAAM,IAAI,aAAa,CACrB,qCAAqC,EACrC,wBAAwB,EACxB,kBAAkB,CACnB,CAAC;AACN,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,YAAY;YACf,OAAO,KAAK,iBAAiB,EAAE,EAAE,CAAC;QACpC,KAAK,UAAU;YACb,OAAO,cAAc,EAAE,CAAC;QAC1B;YACE,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE;IAChD,MAAM,QAAQ,GAAG,2DAA2D,CAAC;IAC7E,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;SAC5B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC/C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAwBD,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAC9B,IAA2B,EAC3B,OAAe,EACf,IAAY;IAEZ,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,aAAa;IAEL;IADnB,YACmB,OAGhB;QAHgB,YAAO,GAAP,OAAO,CAGvB;IACA,CAAC;IAEG,KAAK,CAAC,oBAAoB,CAC/B,aAAqB;QAErB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE;aAC5B,UAAU,CAAC,yBAAyB,CAAC;aACrC,SAAS,EAAE;aACX,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,aAAa,CAAC;aAC1C,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;aACtB,OAAO,EAAO,CAAC;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;YACxC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,IAAI,CACd,GAAG,CAAC,KAAK,EACT,gBAAgB,CACd,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EACzB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CACjB,CACF;YACD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC3B,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;YAC5C,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;YACxC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE;aAC5B,UAAU,CAAC,iBAAiB,CAAC;aAC7B,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;aACtB,OAAO,EAAO,CAAC;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,IAAI,CACd,GAAG,CAAC,KAAK,EACT,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC7D;YACD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC3B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,sBAAsB,CACjC,aAAqB,EACrB,IAAY,EACZ,KAKC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CACtB,KAAK,CAAC,KAAK,EACX,gBAAgB,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC,CACrD,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE;aAChC,UAAU,CAAC,yBAAyB,CAAC;aACrC,MAAM,CAAC,IAAI,CAAC;aACZ,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,aAAa,CAAC;aAC1C,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;aACxB,gBAAgB,EAAO,CAAC;QAC3B,IAAI,QAAQ;YACV,MAAM,IAAI,CAAC,KAAK,EAAE;iBACf,WAAW,CAAC,yBAAyB,CAAC;iBACtC,GAAG,CAAC;gBACH,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvC,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,SAAS,EAAE,GAAG;aACf,CAAC;iBACD,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;iBACrC,OAAO,EAAE,CAAC;;YAEb,MAAM,IAAI,CAAC,KAAK,EAAE;iBACf,UAAU,CAAC,yBAAyB,CAAC;iBACrC,MAAM,CAAC;gBACN,EAAE,EAAE,UAAU,EAAE;gBAChB,aAAa;gBACb,IAAI;gBACJ,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;iBACD,OAAO,EAAE,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,wBAAwB,CACnC,aAAqB,EACrB,IAAY;QAEZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE;aAC9B,UAAU,CAAC,yBAAyB,CAAC;aACrC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,aAAa,CAAC;aAC1C,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;aACxB,OAAO,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,4BAA4B;IACrB,KAAK,CAAC,cAAc,CACzB,KAAa,EACb,IAAY,EACZ,KAKC,EACD,UAA+B;QAE/B,MAAM,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,KAAK;aACzB,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC,IAAI,CAAC;aACZ,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;aACxB,gBAAgB,EAAO,CAAC;QAC3B,IAAI,QAAQ;YACV,MAAM,KAAK;iBACR,WAAW,CAAC,iBAAiB,CAAC;iBAC9B,GAAG,CAAC;gBACH,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI;gBACnC,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,SAAS,EAAE,GAAG;aACf,CAAC;iBACD,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;iBACrC,OAAO,EAAE,CAAC;;YAEb,MAAM,KAAK;iBACR,UAAU,CAAC,iBAAiB,CAAC;iBAC7B,MAAM,CAAC;gBACN,EAAE,EAAE,UAAU,EAAE;gBAChB,KAAK;gBACL,IAAI;gBACJ,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI;gBACnC,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;iBACD,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,iEAAiE;IAC1D,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,IAAY;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE;aAC3B,UAAU,CAAC,iBAAiB,CAAC;aAC7B,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;aACvB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;aACxB,gBAAgB,EAAO,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,IAAI,CAAC,KAAK,EAAE;aACf,UAAU,CAAC,iBAAiB,CAAC;aAC7B,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,KAAa,EACb,UAA8B;QAE9B,MAAM,UAAU,CAAC,KAAK;aACnB,UAAU,CAAC,iBAAiB,CAAC;aAC7B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,OAAO,EAAE,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,aAAqB;QAClD,MAAM,IAAI,CAAC,KAAK,EAAE;aACf,UAAU,CAAC,yBAAyB,CAAC;aACrC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,aAAa,CAAC;aAC1C,OAAO,EAAE,CAAC;IACf,CAAC;IAEM,IAAI,CAAC,KAAa,EAAE,QAA2B;QACpD,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IAED,6FAA6F;IACrF,IAAI,CAAC,KAAc,EAAE,QAA2B;QACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;IAClD,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAmC;IAEnC,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC7C,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAoB,EAAE,MAAe;IACtD,OAAO,EAAE,GAAG,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;AAC/D,CAAC;AA6CD,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAC9B,KAA4B;IAE5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE;QACpD,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS;QAC5B,GAAG,QAAQ,CAAC,IAAI,EAAE;QAClB,GAAG,WAAW,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAClC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAC7C,IAAI,MAAsB,CAAC;QAC3B,IAAI,KAAyB,CAAC;QAC9B,IAAI,GAAG,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7C,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,GAAG,aAAa,CAAC;YACvB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,CAAC;aAAM,IACL,WAAW,EAAE,IAAI;YACjB,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,EAChD,CAAC;YACD,MAAM,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,GAAG,WAAW,CAAC;YACrB,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,WAAW,CAAC;QACvB,CAAC;aAAM,IAAI,WAAW,EAAE,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,OAAO,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC3C,MAAM,cAAc,GAAG,WAAW,EAAE,cAAc,IAAI,KAAK,CAAC;QAC5D,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,IAAI,KAAK,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,IAAI,MAAM,KAAK,OAAO,CAAC;QAC/C,MAAM,OAAO,GACX,CAAC,cAAc;YACf,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,KAAK,CAAC,OAAO,KAAK,IAAI;YACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI;YACJ,WAAW;YACX,MAAM;YACN,MAAM,EACJ,CAAC,WAAW,EAAE,MAAM,IAAI,KAAK,CAAC;gBAC9B,OAAO,CAAC,GAAG,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,CAAC;YACxC,cAAc;YACd,QAAQ;YACR,KAAK;YACL,OAAO;YACP,OAAO;YACP,GAAG,EAAE,GAAG;YACR,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IACD,gFAAgF;IAChF,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QACnD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,cAAc,IAAI,KAAK,CAAC,CACrE;QACH,CAAC,CAAC,KAAK,CAAC;IACZ,OAAO;QACL,GAAG;QACH,SAAS;QACT,OAAO,EAAE,SAAS;aACf,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC;aAC9D,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAY,CAAC;QAC3C,WAAW,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC;QAC/C,OAAO,EAAE,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,aAAa,CAC3B,GAAqC,EACrC,QAAyC;IAEzC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SAC7C,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAAC,QAA0B;IACxD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IAC5B,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,WAAW,KAAK,IAAI;QACvC,WAAW,EACT,QAAQ,CAAC,WAAW,EAAE,WAAW;YACjC,QAAQ,CAAC,WAAW,EAAE,WAAW;YACjC,IAAI;QACN,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,IAAI,IAAI;QAChD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;QAC/C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACf,CAAC,CAAC;gBACE,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;gBACxC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS;aAClC;YACH,CAAC,CAAC,IAAI;QACR,WAAW,EAAE,QAAQ,CAAC,WAAW;YAC/B,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;YAC/C,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,mHAAmH;AAEnH,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAAC,MAAe,EAAE,IAAY;IACzD,IAAI,KAAK,GAAY,MAAM,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,YAAY,CAAC,MAAe,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/dist/server/tokens.d.ts

@@ -0,0 +1,110 @@
+/**
+ * The plugin's service tokens and the ports the assembling application binds. The plugin knows nothing about who the
+ * people are or what roles they hold: the application decides each caller's `ReleasesPermissions`
+ * (`releasesAccessToken`), may widen what "related" means, resolves approvers and marks agents, registers deployment
+ * drivers (`releasesDriversToken`) and hears what happens (`releasesEventsToken`).
+ */
+import type { AuthorizationIdentity } from '@nocobase/authorization/core';
+import { type ServiceToken } from '@nocobase/service-provider';
+import type { AppAction, ReleasesPermissions } from '../shared/access.js';
+import type { ActorKind, AppView, DeploymentRequestView, DeploymentView, EnvironmentRecord, ReleaseView } from '../shared/releases.js';
+import type { DriverRegistry } from './drivers/types.js';
+import type { Releases } from './composition.js';
+/**
+ * Roles as the plugin needs them. The application keeps the roles and binds this token; unbound, every caller holds
+ * nothing.
+ */
+export interface ReleasesAccess {
+    /** What a signed-in caller may do, decided once per request. */
+    permissionsOf(identity: AuthorizationIdentity): Promise<ReleasesPermissions>;
+    /**
+     * What a user may do when they are not the caller: the issuer of an upload ticket when it is used, and an approver
+     * deciding a request.
+     */
+    permissionsOfUser(userId: string): Promise<ReleasesPermissions>;
+    /**
+     * Whether the caller is a person or an agent acting for one. Agents are refused `deploy-protected`, `configure`
+     * and `delete` whatever they hold, and never decide a deployment request. Defaults to `human`. Asked for a
+     * scoped identity too: `agent` makes it an agent's (such as an agent's run bounded by its scope) rather than a key's.
+     */
+    actorKindOf?(identity: AuthorizationIdentity): 'human' | 'agent';
+    /** Apps beyond the ones the users created that count as related to any of them for an action (for listing). */
+    relatedAppIds?(userIds: readonly string[], action: AppAction): Promise<readonly string[]>;
+    /** Whether one App counts as related to any of the users for an action, beyond the ones they created. */
+    isRelated?(appId: string, userIds: readonly string[], action: AppAction): Promise<boolean>;
+    /**
+     * The user IDs who may decide a deployment request. Defaults to the environment's `approvers` taken as user IDs;
+     * with none, anyone holding `deploy-protected` on the App (`deploy` on an unprotected environment), other than the
+     * requester, may decide.
+     */
+    approversOf?(environment: EnvironmentRecord, request: DeploymentRequestView): Promise<readonly string[]>;
+}
+export declare const releasesAccessToken: ServiceToken<ReleasesAccess>;
+/** The deployment drivers environments may name; the plugin registers `host` when its Host runtime is enabled. */
+export declare const releasesDriversToken: ServiceToken<DriverRegistry>;
+/**
+ * The local App Host runtime, for an application listener that forwards Host traffic (requests outside its own
+ * mount). `proxyTarget` is null while the Host is disabled or not ready.
+ */
+export interface ReleasesHostRuntime {
+    proxyTarget(): URL | null;
+}
+export declare const releasesHostToken: ServiceToken<ReleasesHostRuntime>;
+/** Who performed an operation, as events report it. */
+export interface ActorRef {
+    readonly userId: string | null;
+    readonly kind: ActorKind;
+}
+/**
+ * What happened, after it was committed. Deployments report once they finish; `deployment.rolledBack` replaces
+ * `deployment.succeeded` for a successful rollback. A request event carries the approvers so the application can
+ * notify them; the plugin sends no notifications itself.
+ */
+export type ReleasesEvent = {
+    readonly type: 'app.created';
+    readonly app: AppView;
+    readonly actor: ActorRef;
+} | {
+    readonly type: 'app.removed';
+    readonly app: AppView;
+    readonly actor: ActorRef;
+} | {
+    readonly type: 'release.created';
+    readonly app: AppView;
+    readonly release: ReleaseView;
+    readonly actor: ActorRef;
+} | {
+    readonly type: 'deployment.succeeded' | 'deployment.rolledBack';
+    readonly app: AppView;
+    readonly deployment: DeploymentView;
+    readonly release: ReleaseView;
+    readonly actor: ActorRef;
+} | {
+    readonly type: 'deployment.failed';
+    readonly app: AppView;
+    readonly deployment: DeploymentView;
+    readonly release: ReleaseView;
+    readonly error: string;
+    readonly actor: ActorRef;
+} | {
+    readonly type: 'request.created';
+    readonly app: AppView;
+    readonly request: DeploymentRequestView;
+    readonly approvers: readonly string[];
+    readonly actor: ActorRef;
+} | {
+    readonly type: 'request.decided';
+    readonly app: AppView;
+    readonly request: DeploymentRequestView;
+    readonly decision: 'approved' | 'rejected' | 'cancelled';
+    readonly actor: ActorRef;
+};
+export type ReleasesEventListener = (event: ReleasesEvent) => void | Promise<void>;
+/** Where the application listens; a listener's failure is logged and never undoes the operation. */
+export interface ReleasesEvents {
+    subscribe(listener: ReleasesEventListener): () => void;
+}
+export declare const releasesEventsToken: ServiceToken<ReleasesEvents>;
+/** The plugin's services, for an application that calls them in process (a preview service, a CLI command). */
+export declare const releasesToken: ServiceToken<Releases>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/server/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../server/tokens.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,KAAK,EACV,SAAS,EACT,OAAO,EACP,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,aAAa,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7E;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE;;;;OAIG;IACH,WAAW,CAAC,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,GAAG,OAAO,CAAC;IACjE,+GAA+G;IAC/G,aAAa,CAAC,CACZ,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC9B,yGAAyG;IACzG,SAAS,CAAC,CACR,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB;;;;OAIG;IACH,WAAW,CAAC,CACV,WAAW,EAAE,iBAAiB,EAC9B,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CAC/B;AAED,eAAO,MAAM,mBAAmB,EAAE,YAAY,CAAC,cAAc,CACe,CAAC;AAE7E,kHAAkH;AAClH,eAAO,MAAM,oBAAoB,EAAE,YAAY,CAAC,cAAc,CACe,CAAC;AAE9E;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,WAAW,IAAI,GAAG,GAAG,IAAI,CAAC;CAC3B;AAED,eAAO,MAAM,iBAAiB,EAAE,YAAY,CAAC,mBAAmB,CACe,CAAC;AAEhF,uDAAuD;AACvD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;IAChE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IACzD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,qBAAqB,GAAG,CAClC,KAAK,EAAE,aAAa,KACjB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,oGAAoG;AACpG,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,IAAI,CAAC;CACxD;AAED,eAAO,MAAM,mBAAmB,EAAE,YAAY,CAAC,cAAc,CACe,CAAC;AAE7E,+GAA+G;AAC/G,eAAO,MAAM,aAAa,EAAE,YAAY,CAAC,QAAQ,CACuB,CAAC"}

package/dist/server/tokens.js

@@ -0,0 +1,9 @@
+import { createServiceToken, } from '@nocobase/service-provider';
+export const releasesAccessToken = createServiceToken('@nocobase/app-plugin-releases/access');
+/** The deployment drivers environments may name; the plugin registers `host` when its Host runtime is enabled. */
+export const releasesDriversToken = createServiceToken('@nocobase/app-plugin-releases/drivers');
+export const releasesHostToken = createServiceToken('@nocobase/app-plugin-releases/host');
+export const releasesEventsToken = createServiceToken('@nocobase/app-plugin-releases/events');
+/** The plugin's services, for an application that calls them in process (a preview service, a CLI command). */
+export const releasesToken = createServiceToken('@nocobase/app-plugin-releases/releases');
+//# sourceMappingURL=tokens.js.map

package/dist/server/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../server/tokens.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAsDpC,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kBAAkB,CAAiB,sCAAsC,CAAC,CAAC;AAE7E,kHAAkH;AAClH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,kBAAkB,CAAiB,uCAAuC,CAAC,CAAC;AAU9E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,kBAAkB,CAAsB,oCAAoC,CAAC,CAAC;AAqEhF,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kBAAkB,CAAiB,sCAAsC,CAAC,CAAC;AAE7E,+GAA+G;AAC/G,MAAM,CAAC,MAAM,aAAa,GACxB,kBAAkB,CAAW,wCAAwC,CAAC,CAAC"}

package/dist/shared/access.d.ts

@@ -0,0 +1,212 @@
+/**
+ * What this plugin offers to be granted: its pages, settings items and business actions with the levels each offers.
+ * The plugin registers its settings items and its businesses (the `rel` resource type, each level of an action its own
+ * action: `deploy.related`, `deploy.all`) with the authorization plugin from here; the application that assembles it
+ * keeps the roles, stores the grants and tells the plugin each caller's `ReleasesPermissions` through `releasesAccessToken`
+ * (`server/tokens.ts`). The client reads the signed-in user's permissions (`GET /api/releases/me`) to show only what the
+ * server would allow.
+ */
+/** The namespace of every title below, in the plugin's locales (`shared/locales/access.*.ts`). */
+export declare const ACCESS_NAMESPACE = "@nocobase/app-plugin-releases";
+/** A title as the authorization plugin stores it: an i18n key in this plugin's namespace. */
+export declare function accessText(key: string): {
+    readonly key: string;
+    readonly ns: string;
+};
+/** The authorization workspace subsection (under administration) that lists the settings items. */
+export declare const ACCESS_SECTION = "releases";
+/**
+ * The app pages a role may open (`page` grants, action `access`); the client routes are named and authorized by the
+ * same ids. `rel-apps` lists Apps and opens their deployments.
+ */
+export declare const PAGES: readonly ["rel-apps"];
+export type Page = (typeof PAGES)[number];
+/**
+ * Settings items. `rel.environments`: `read` lists environments and their runtime status, `manage` adds, edits and
+ * removes them, writes their credentials and marks them protected.
+ */
+export declare const SETTINGS_ACTIONS: {
+    readonly 'rel.environments': readonly ["read", "manage"];
+};
+export type SettingsItem = keyof typeof SETTINGS_ACTIONS;
+export type SettingsAction<S extends SettingsItem = SettingsItem> = (typeof SETTINGS_ACTIONS)[S][number];
+/** `item/action`, the key of a capability in `ReleasesPermissions.settings`. */
+export type SettingsKey = {
+    [S in SettingsItem]: `${S}/${SettingsAction<S>}`;
+}[SettingsItem];
+/**
+ * Business actions on Apps, each reaching every App, none, or the Apps related to a set of users (`Scope`). An App is
+ * related to the user who created it; the assembling application may relate more (`ReleasesAccess.isRelated`,
+ * `ReleasesAccess.relatedAppIds`).
+ *
+ * | Action             | What it allows                                                                        |
+ * | ------------------ | ------------------------------------------------------------------------------------- |
+ * | `view`             | see the App, its releases and deployment history and its runtime status               |
+ * | `read-logs`        | read the App's runtime logs and its deployment logs                                    |
+ * | `create`           | create Apps (offers only none or all)                                                  |
+ * | `configure`        | read and change the App's configuration and settings, labels and expiry                |
+ * | `upload`           | upload releases, request upload tickets, promote releases into the App, label releases |
+ * | `deploy`           | deploy and roll back on an unprotected environment, request a deployment anywhere      |
+ * | `deploy-protected` | approve deployments to a protected environment that names no approvers; people only   |
+ * | `operate`          | start, stop and restart                                                                |
+ * | `delete`           | delete the App with its data                                                           |
+ */
+export declare const BUSINESS_ACTIONS: {
+    readonly 'rel.apps': readonly ["view", "read-logs", "create", "configure", "upload", "deploy", "deploy-protected", "operate", "delete"];
+};
+export type Business = keyof typeof BUSINESS_ACTIONS;
+export type BusinessAction<B extends Business = Business> = (typeof BUSINESS_ACTIONS)[B][number];
+export type AppAction = BusinessAction<'rel.apps'>;
+/** `business/action`, the key of a scope in `ReleasesPermissions.scopes`. */
+export type BusinessKey = {
+    [B in Business]: `${B}/${BusinessAction<B>}`;
+}[Business];
+/**
+ * How far a business action reaches for a caller: every App, none, or the Apps related to any of `users`
+ * (`RELATIONS`). The application resolves the level a role gives to this; an empty set reaches nothing.
+ */
+export type Scope = 'all' | 'none' | {
+    readonly users: readonly string[];
+};
+/** Whether `scope` reaches a record related to any of `userIds` (null and undefined relate nothing). */
+export declare function reaches(scope: Scope, ...userIds: readonly (string | null | undefined)[]): boolean;
+/**
+ * How an App relates to a user, as the application words it: they created it, or the application relates it to them.
+ */
+export type Relation = 'owned';
+/** Each business action's relation; null where the action has no records to relate, so it is held or not. */
+export declare const RELATIONS: Readonly<Record<BusinessKey, Relation | null>>;
+/** The authorization resource type the businesses are registered under; every business id starts with it. */
+export declare const RESOURCE_TYPE = "rel";
+/** The permission workspace subsection (under business) that lists the businesses. */
+export declare const BUSINESS_SECTION = "rel";
+/**
+ * The levels an action whose Apps relate to users (`RELATIONS`) is registered at, lowest first, each its own
+ * authorization action: `deploy.related` reaches the related Apps, `deploy.all` every one. An action without related
+ * records is registered as itself (`create`), held or not. Holding a level reaches at least what the lower ones do, so
+ * the application takes the highest one held.
+ */
+export declare const ACTION_LEVELS: readonly ["related", "all"];
+export type ActionLevel = (typeof ACTION_LEVELS)[number];
+/** The authorization actions a business action is registered as, lowest level first. */
+export declare function levelActionsOf(key: BusinessKey): readonly {
+    readonly level: ActionLevel;
+    readonly name: string;
+}[];
+/** The resource a business's actions are granted on. */
+export declare function businessResource(business: Business): {
+    readonly type: string;
+    readonly id: string;
+};
+/** A business's title or its one-line description (`access.businesses.apps.title`). */
+export declare function businessText(business: Business, part: 'title' | 'description'): {
+    readonly key: string;
+    readonly ns: string;
+};
+/**
+ * A business action's title, its one-line description, the title of one of its levels, or the wording of its `related`
+ * level: `relatedLabel`, its short name in a level choice ("in projects I can see"), and `relatedHint`, one line on what
+ * it reaches. An application reads the last two beside the `related` level's registered title.
+ */
+export declare function actionText(key: BusinessKey, part: 'title' | 'description' | ActionLevel | 'relatedLabel' | 'relatedHint'): {
+    readonly key: string;
+    readonly ns: string;
+};
+/**
+ * Actions an agent or a key may never perform, whatever its grants: the assembling application marks a caller as an
+ * agent (`ReleasesAccess.actorKindOf`), a request made with a scoped credential is a key, and the plugin refuses these
+ * for both.
+ */
+export declare const HUMAN_ONLY_ACTIONS: readonly AppAction[];
+/** What a caller may do, decided once per request by the assembling application. */
+export interface ReleasesPermissions {
+    readonly scopes: Readonly<Record<BusinessKey, Scope>>;
+    readonly settings: Readonly<Record<SettingsKey, boolean>>;
+    readonly pages: Readonly<Record<Page, boolean>>;
+}
+export declare function businessKey<B extends Business>(business: B, action: BusinessAction<B>): BusinessKey;
+export declare function settingsKey<S extends SettingsItem>(item: S, action: SettingsAction<S>): SettingsKey;
+/** Every business action, in declaration order. */
+export declare const BUSINESS_KEYS: readonly {
+    readonly business: Business;
+    readonly action: BusinessAction;
+    readonly key: BusinessKey;
+}[];
+/** Every settings capability, in declaration order. */
+export declare const SETTINGS_KEYS: readonly {
+    readonly item: SettingsItem;
+    readonly action: SettingsAction;
+    readonly key: SettingsKey;
+}[];
+/** Nothing allowed: the start of a new role, and what an unknown caller holds. */
+export declare function noPermissions(): ReleasesPermissions;
+/** Everything allowed, at `all`: what the plugin's own background work acts with. */
+export declare function allPermissions(): ReleasesPermissions;
+/** A permission an API key's scope may cover: a page, a settings action or a business action of this plugin. */
+type KeyScopeAccess = {
+    readonly kind: 'page';
+    readonly id: Page;
+} | {
+    readonly kind: 'settings';
+    readonly id: SettingsItem;
+    readonly action: string;
+} | {
+    readonly kind: 'business';
+    readonly id: Business;
+    readonly action: AppAction;
+};
+/**
+ * The permission groups this plugin offers to API keys with a scope, as data the application hands to the API keys
+ * plugin (the shape of its `KeyScopeGroupDeclaration`; nothing here imports it). Each level includes the ones before.
+ *
+ * - `releases.apps`: read sees Apps, their releases, deployments and logs; write also uploads, deploys and starts or
+ *   stops them — what CI needs. It may be limited to some Apps (`objects`), which the guard enforces. Configuring,
+ *   creating and deleting Apps are not offered: a key may never configure or delete one (`HUMAN_ONLY_ACTIONS`), and
+ *   CI has no need to create them.
+ * - `releases.environments`: read lists the environments, write manages them.
+ *
+ * Whatever its scope, a key never deploys directly to a protected environment, and nobody else does either; it may ask
+ * for a deployment there (a deployment request) when it may deploy the App.
+ */
+export declare const KEY_SCOPE_GROUPS: readonly {
+    readonly id: string;
+    readonly category: 'business' | 'administration' | 'account';
+    readonly title: {
+        readonly key: string;
+        readonly ns: string;
+    };
+    readonly description?: {
+        readonly key: string;
+        readonly ns: string;
+    };
+    readonly levels: Readonly<Partial<Record<'read' | 'write' | 'admin', readonly KeyScopeAccess[]>>>;
+    readonly objects?: {
+        readonly business: Business;
+        readonly title: {
+            readonly key: string;
+            readonly ns: string;
+        };
+    };
+}[];
+/**
+ * Presets for a key's scope, for the Apps chosen and 90 days: "CI deploy" uploads and deploys (`acme release upload`
+ * then `acme deploy`), "CI upload" only uploads.
+ */
+export declare const KEY_SCOPE_PRESETS: readonly {
+    readonly id: string;
+    readonly title: {
+        readonly key: string;
+        readonly ns: string;
+    };
+    readonly description?: {
+        readonly key: string;
+        readonly ns: string;
+    };
+    readonly groups: Readonly<Record<string, {
+        readonly level: 'read' | 'write' | 'admin';
+        readonly objects?: 'all' | 'pick';
+    }>>;
+    readonly expiresInDays?: number | null;
+}[];
+export {};
+//# sourceMappingURL=access.d.ts.map

package/dist/shared/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../shared/access.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,kCAAkC,CAAC;AAEhE,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,CAEA;AAED,mGAAmG;AACnG,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC;;;GAGG;AACH,eAAO,MAAM,KAAK,uBAAwB,CAAC;AAE3C,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;CAEnB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,gBAAgB,CAAC;AACzD,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY,IAC9D,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvC,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG;KACvB,CAAC,IAAI,YAAY,GAAG,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE;CACjD,CAAC,YAAY,CAAC,CAAC;AAEhB;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gBAAgB;;CAYnB,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,gBAAgB,CAAC;AACrD,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,QAAQ,GAAG,QAAQ,IACtD,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACvC,MAAM,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG;KACvB,CAAC,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE;CAC7C,CAAC,QAAQ,CAAC,CAAC;AAEZ;;;GAGG;AACH,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAE3E,wGAAwG;AACxG,wBAAgB,OAAO,CACrB,KAAK,EAAE,KAAK,EACZ,GAAG,OAAO,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GACjD,OAAO,CAIT;AAED;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC;AAE/B,6GAA6G;AAC7G,eAAO,MAAM,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAAC,CAUpE,CAAC;AAEF,6GAA6G;AAC7G,eAAO,MAAM,aAAa,QAAQ,CAAC;AAEnC,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,aAAa,6BAA8B,CAAC;AAEzD,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,wFAAwF;AACxF,wBAAgB,cAAc,CAC5B,GAAG,EAAE,WAAW,GACf,SAAS;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAKnE;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,CAEA;AAQD,uFAAuF;AACvF,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,OAAO,GAAG,aAAa,GAC5B;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAE/C;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,cAAc,GAAG,aAAa,GAC3E;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAK/C;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,SAAS,EAIlD,CAAC;AAEF,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;CACjD;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,QAAQ,EAC5C,QAAQ,EAAE,CAAC,EACX,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GACxB,WAAW,CAEb;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,YAAY,EAChD,IAAI,EAAE,CAAC,EACP,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GACxB,WAAW,CAEb;AAED,mDAAmD;AACnD,eAAO,MAAM,aAAa,EAAE,SAAS;IACnC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;CAC3B,EAMA,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,aAAa,EAAE,SAAS;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;CAC3B,EAMA,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,aAAa,IAAI,mBAAmB,CAanD;AAED,qFAAqF;AACrF,wBAAgB,cAAc,IAAI,mBAAmB,CAapD;AAMD,gHAAgH;AAChH,KAAK,cAAc,GACf;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAC5C;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B,CAAC;AAEN;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CACvB,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC,CAAC,CACvE,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/D,CAAC;CACH,EAkCA,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CACvB,MAAM,CACJ,MAAM,EACN;QACE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;QAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;KACnC,CACF,CACF,CAAC;IACF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC,EAeA,CAAC"}

package/dist/shared/access.js

@@ -0,0 +1,228 @@
+/**
+ * What this plugin offers to be granted: its pages, settings items and business actions with the levels each offers.
+ * The plugin registers its settings items and its businesses (the `rel` resource type, each level of an action its own
+ * action: `deploy.related`, `deploy.all`) with the authorization plugin from here; the application that assembles it
+ * keeps the roles, stores the grants and tells the plugin each caller's `ReleasesPermissions` through `releasesAccessToken`
+ * (`server/tokens.ts`). The client reads the signed-in user's permissions (`GET /api/releases/me`) to show only what the
+ * server would allow.
+ */
+/** The namespace of every title below, in the plugin's locales (`shared/locales/access.*.ts`). */
+export const ACCESS_NAMESPACE = '@nocobase/app-plugin-releases';
+/** A title as the authorization plugin stores it: an i18n key in this plugin's namespace. */
+export function accessText(key) {
+    return { key: `access.${key}`, ns: ACCESS_NAMESPACE };
+}
+/** The authorization workspace subsection (under administration) that lists the settings items. */
+export const ACCESS_SECTION = 'releases';
+/**
+ * The app pages a role may open (`page` grants, action `access`); the client routes are named and authorized by the
+ * same ids. `rel-apps` lists Apps and opens their deployments.
+ */
+export const PAGES = ['rel-apps'];
+/**
+ * Settings items. `rel.environments`: `read` lists environments and their runtime status, `manage` adds, edits and
+ * removes them, writes their credentials and marks them protected.
+ */
+export const SETTINGS_ACTIONS = {
+    'rel.environments': ['read', 'manage'],
+};
+/**
+ * Business actions on Apps, each reaching every App, none, or the Apps related to a set of users (`Scope`). An App is
+ * related to the user who created it; the assembling application may relate more (`ReleasesAccess.isRelated`,
+ * `ReleasesAccess.relatedAppIds`).
+ *
+ * | Action             | What it allows                                                                        |
+ * | ------------------ | ------------------------------------------------------------------------------------- |
+ * | `view`             | see the App, its releases and deployment history and its runtime status               |
+ * | `read-logs`        | read the App's runtime logs and its deployment logs                                    |
+ * | `create`           | create Apps (offers only none or all)                                                  |
+ * | `configure`        | read and change the App's configuration and settings, labels and expiry                |
+ * | `upload`           | upload releases, request upload tickets, promote releases into the App, label releases |
+ * | `deploy`           | deploy and roll back on an unprotected environment, request a deployment anywhere      |
+ * | `deploy-protected` | approve deployments to a protected environment that names no approvers; people only   |
+ * | `operate`          | start, stop and restart                                                                |
+ * | `delete`           | delete the App with its data                                                           |
+ */
+export const BUSINESS_ACTIONS = {
+    'rel.apps': [
+        'view',
+        'read-logs',
+        'create',
+        'configure',
+        'upload',
+        'deploy',
+        'deploy-protected',
+        'operate',
+        'delete',
+    ],
+};
+/** Whether `scope` reaches a record related to any of `userIds` (null and undefined relate nothing). */
+export function reaches(scope, ...userIds) {
+    if (scope === 'all')
+        return true;
+    if (scope === 'none')
+        return false;
+    return userIds.some((id) => !!id && scope.users.includes(id));
+}
+/** Each business action's relation; null where the action has no records to relate, so it is held or not. */
+export const RELATIONS = {
+    'rel.apps/view': 'owned',
+    'rel.apps/read-logs': 'owned',
+    'rel.apps/create': null,
+    'rel.apps/configure': 'owned',
+    'rel.apps/upload': 'owned',
+    'rel.apps/deploy': 'owned',
+    'rel.apps/deploy-protected': 'owned',
+    'rel.apps/operate': 'owned',
+    'rel.apps/delete': 'owned',
+};
+/** The authorization resource type the businesses are registered under; every business id starts with it. */
+export const RESOURCE_TYPE = 'rel';
+/** The permission workspace subsection (under business) that lists the businesses. */
+export const BUSINESS_SECTION = 'rel';
+/**
+ * The levels an action whose Apps relate to users (`RELATIONS`) is registered at, lowest first, each its own
+ * authorization action: `deploy.related` reaches the related Apps, `deploy.all` every one. An action without related
+ * records is registered as itself (`create`), held or not. Holding a level reaches at least what the lower ones do, so
+ * the application takes the highest one held.
+ */
+export const ACTION_LEVELS = ['related', 'all'];
+/** The authorization actions a business action is registered as, lowest level first. */
+export function levelActionsOf(key) {
+    const action = key.slice(key.indexOf('/') + 1);
+    return RELATIONS[key]
+        ? ACTION_LEVELS.map((level) => ({ level, name: `${action}.${level}` }))
+        : [{ level: 'all', name: action }];
+}
+/** The resource a business's actions are granted on. */
+export function businessResource(business) {
+    return { type: RESOURCE_TYPE, id: business };
+}
+const camel = (name) => name.replace(/-([a-z])/gu, (_, letter) => letter.toUpperCase());
+const localName = (business) => business.slice(business.indexOf('.') + 1);
+/** A business's title or its one-line description (`access.businesses.apps.title`). */
+export function businessText(business, part) {
+    return accessText(`businesses.${localName(business)}.${part}`);
+}
+/**
+ * A business action's title, its one-line description, the title of one of its levels, or the wording of its `related`
+ * level: `relatedLabel`, its short name in a level choice ("in projects I can see"), and `relatedHint`, one line on what
+ * it reaches. An application reads the last two beside the `related` level's registered title.
+ */
+export function actionText(key, part) {
+    const [business = '', action = ''] = key.split('/');
+    return accessText(`businesses.${localName(business)}.actions.${camel(action)}.${part}`);
+}
+/**
+ * Actions an agent or a key may never perform, whatever its grants: the assembling application marks a caller as an
+ * agent (`ReleasesAccess.actorKindOf`), a request made with a scoped credential is a key, and the plugin refuses these
+ * for both.
+ */
+export const HUMAN_ONLY_ACTIONS = [
+    'deploy-protected',
+    'delete',
+    'configure',
+];
+export function businessKey(business, action) {
+    return `${business}/${action}`;
+}
+export function settingsKey(item, action) {
+    return `${item}/${action}`;
+}
+/** Every business action, in declaration order. */
+export const BUSINESS_KEYS = Object.entries(BUSINESS_ACTIONS).flatMap(([business, actions]) => actions.map((action) => ({
+    business: business,
+    action: action,
+    key: `${business}/${action}`,
+})));
+/** Every settings capability, in declaration order. */
+export const SETTINGS_KEYS = Object.entries(SETTINGS_ACTIONS).flatMap(([item, actions]) => actions.map((action) => ({
+    item: item,
+    action: action,
+    key: `${item}/${action}`,
+})));
+/** Nothing allowed: the start of a new role, and what an unknown caller holds. */
+export function noPermissions() {
+    return {
+        scopes: Object.fromEntries(BUSINESS_KEYS.map(({ key }) => [key, 'none'])),
+        settings: Object.fromEntries(SETTINGS_KEYS.map(({ key }) => [key, false])),
+        pages: Object.fromEntries(PAGES.map((page) => [page, false])),
+    };
+}
+/** Everything allowed, at `all`: what the plugin's own background work acts with. */
+export function allPermissions() {
+    return {
+        scopes: Object.fromEntries(BUSINESS_KEYS.map(({ key }) => [key, 'all'])),
+        settings: Object.fromEntries(SETTINGS_KEYS.map(({ key }) => [key, true])),
+        pages: Object.fromEntries(PAGES.map((page) => [page, true])),
+    };
+}
+/**
+ * The permission groups this plugin offers to API keys with a scope, as data the application hands to the API keys
+ * plugin (the shape of its `KeyScopeGroupDeclaration`; nothing here imports it). Each level includes the ones before.
+ *
+ * - `releases.apps`: read sees Apps, their releases, deployments and logs; write also uploads, deploys and starts or
+ *   stops them — what CI needs. It may be limited to some Apps (`objects`), which the guard enforces. Configuring,
+ *   creating and deleting Apps are not offered: a key may never configure or delete one (`HUMAN_ONLY_ACTIONS`), and
+ *   CI has no need to create them.
+ * - `releases.environments`: read lists the environments, write manages them.
+ *
+ * Whatever its scope, a key never deploys directly to a protected environment, and nobody else does either; it may ask
+ * for a deployment there (a deployment request) when it may deploy the App.
+ */
+export const KEY_SCOPE_GROUPS = [
+    {
+        id: 'releases.apps',
+        category: 'business',
+        title: accessText('keyScopes.apps.title'),
+        description: accessText('keyScopes.apps.description'),
+        levels: {
+            read: [
+                { kind: 'page', id: 'rel-apps' },
+                { kind: 'business', id: 'rel.apps', action: 'view' },
+                { kind: 'business', id: 'rel.apps', action: 'read-logs' },
+            ],
+            // Uploading is apart from deploying: a CI that only builds holds `write`, one that also ships holds `admin`.
+            write: [{ kind: 'business', id: 'rel.apps', action: 'upload' }],
+            admin: [
+                { kind: 'business', id: 'rel.apps', action: 'deploy' },
+                { kind: 'business', id: 'rel.apps', action: 'operate' },
+            ],
+        },
+        objects: {
+            business: 'rel.apps',
+            title: accessText('keyScopes.apps.objects'),
+        },
+    },
+    {
+        id: 'releases.environments',
+        category: 'administration',
+        title: accessText('keyScopes.environments.title'),
+        description: accessText('keyScopes.environments.description'),
+        levels: {
+            read: [{ kind: 'settings', id: 'rel.environments', action: 'read' }],
+            write: [{ kind: 'settings', id: 'rel.environments', action: 'manage' }],
+        },
+    },
+];
+/**
+ * Presets for a key's scope, for the Apps chosen and 90 days: "CI deploy" uploads and deploys (`acme release upload`
+ * then `acme deploy`), "CI upload" only uploads.
+ */
+export const KEY_SCOPE_PRESETS = [
+    {
+        id: 'ci-deploy',
+        title: accessText('keyScopes.presets.ciDeploy.title'),
+        description: accessText('keyScopes.presets.ciDeploy.description'),
+        groups: { 'releases.apps': { level: 'admin', objects: 'pick' } },
+        expiresInDays: 90,
+    },
+    {
+        id: 'ci-upload',
+        title: accessText('keyScopes.presets.ciUpload.title'),
+        description: accessText('keyScopes.presets.ciUpload.description'),
+        groups: { 'releases.apps': { level: 'write', objects: 'pick' } },
+        expiresInDays: 90,
+    },
+];
+//# sourceMappingURL=access.js.map

package/dist/shared/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../shared/access.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEhE,6FAA6F;AAC7F,MAAM,UAAU,UAAU,CAAC,GAAW;IAIpC,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC;AACxD,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAU,CAAC;AAI3C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,kBAAkB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAWX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU,EAAE;QACV,MAAM;QACN,WAAW;QACX,QAAQ;QACR,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,kBAAkB;QAClB,SAAS;QACT,QAAQ;KACT;CACO,CAAC;AAkBX,wGAAwG;AACxG,MAAM,UAAU,OAAO,CACrB,KAAY,EACZ,GAAG,OAA+C;IAElD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAOD,6GAA6G;AAC7G,MAAM,CAAC,MAAM,SAAS,GAAmD;IACvE,eAAe,EAAE,OAAO;IACxB,oBAAoB,EAAE,OAAO;IAC7B,iBAAiB,EAAE,IAAI;IACvB,oBAAoB,EAAE,OAAO;IAC7B,iBAAiB,EAAE,OAAO;IAC1B,iBAAiB,EAAE,OAAO;IAC1B,2BAA2B,EAAE,OAAO;IACpC,kBAAkB,EAAE,OAAO;IAC3B,iBAAiB,EAAE,OAAO;CAC3B,CAAC;AAEF,6GAA6G;AAC7G,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AAEnC,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,KAAK,CAAU,CAAC;AAIzD,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAC5B,GAAgB;IAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,OAAO,SAAS,CAAC,GAAG,CAAC;QACnB,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IAIjD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CACrC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAE1E,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAU,EAAE,CAC7C,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5C,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAC1B,QAAkB,EAClB,IAA6B;IAE7B,OAAO,UAAU,CAAC,cAAc,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,GAAgB,EAChB,IAA4E;IAE5E,MAAM,CAAC,QAAQ,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,OAAO,UAAU,CACf,cAAc,SAAS,CAAC,QAAQ,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CACrE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAyB;IACtD,kBAAkB;IAClB,QAAQ;IACR,WAAW;CACZ,CAAC;AASF,MAAM,UAAU,WAAW,CACzB,QAAW,EACX,MAAyB;IAEzB,OAAO,GAAG,QAAQ,IAAI,MAAM,EAAiB,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAO,EACP,MAAyB;IAEzB,OAAO,GAAG,IAAI,IAAI,MAAM,EAAiB,CAAC;AAC5C,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAIpB,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CACrE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;IAC/B,QAAQ,EAAE,QAAoB;IAC9B,MAAM,EAAE,MAAwB;IAChC,GAAG,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAiB;CAC5C,CAAC,CAAC,CACJ,CAAC;AAEF,uDAAuD;AACvD,MAAM,CAAC,MAAM,aAAa,GAIpB,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CACjE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,EAAE,IAAoB;IAC1B,MAAM,EAAE,MAAwB;IAChC,GAAG,EAAE,GAAG,IAAI,IAAI,MAAM,EAAiB;CACxC,CAAC,CAAC,CACJ,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAChB;QAC/B,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CACb;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAG3D;KACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CACf;QAC/B,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CACZ;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAG1D;KACF,CAAC;AACJ,CAAC;AAoBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAYvB;IACJ;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU,CAAC,sBAAsB,CAAC;QACzC,WAAW,EAAE,UAAU,CAAC,4BAA4B,CAAC;QACrD,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE;gBAChC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;gBACpD,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE;aAC1D;YACD,6GAA6G;YAC7G,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC/D,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACtD,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE;aACxD;SACF;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,UAAU,CAAC,wBAAwB,CAAC;SAC5C;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,UAAU,CAAC,8BAA8B,CAAC;QACjD,WAAW,EAAE,UAAU,CAAC,oCAAoC,CAAC;QAC7D,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACpE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SACxE;KACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAcxB;IACJ;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,UAAU,CAAC,kCAAkC,CAAC;QACrD,WAAW,EAAE,UAAU,CAAC,wCAAwC,CAAC;QACjE,MAAM,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,aAAa,EAAE,EAAE;KAClB;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,UAAU,CAAC,kCAAkC,CAAC;QACrD,WAAW,EAAE,UAAU,CAAC,wCAAwC,CAAC;QACjE,MAAM,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,aAAa,EAAE,EAAE;KAClB;CACF,CAAC"}