@powerhousedao/reactor-api 6.0.0-dev.22 → 6.0.0-dev.24

package/dist/src/graphql/document-model-subgraph.d.ts

@@ -1,51 +1,45 @@
-import { type IDocumentDriveServer } from "document-drive";
 import { type DocumentModelModule } from "document-model";
 import { BaseSubgraph } from "./base-subgraph.js";
 import type { SubgraphArgs } from "./types.js";
-export declare function generateDocumentModelResolversLegacy(documentModel: DocumentModelModule, reactor: IDocumentDriveServer): {
-    Query: {
-        [x: string]: () => {
-            getDocument: (args: {
-                docId: string;
-                driveId: string;
-            }) => Promise<{
-                __typename?: string;
-                id: string;
-                name: string;
-                documentType: string;
-                revision: number;
-                createdAtUtcIso: string;
-                lastModifiedAtUtcIso: string;
-                operations: import("./types.js").GqlOperation[];
-                stateJSON: JSON;
-                state: unknown;
-                initialState: unknown;
-                driveId: string;
-            }>;
-            getDocuments: (args: {
-                driveId: string;
-            }) => Promise<{
-                __typename?: string;
-                id: string;
-                name: string;
-                documentType: string;
-                revision: number;
-                createdAtUtcIso: string;
-                lastModifiedAtUtcIso: string;
-                operations: import("./types.js").GqlOperation[];
-                stateJSON: JSON;
-                state: unknown;
-                initialState: unknown;
-                driveId: string;
-            }[]>;
-        };
-    };
-    Mutation: {
-        [x: string]: any;
-    };
-};
 export declare class DocumentModelSubgraphLegacy extends BaseSubgraph {
     private documentModel;
     constructor(documentModel: DocumentModelModule, args: SubgraphArgs);
+    /**
+     * Check if user has global read access (admin, user, or guest)
+     */
+    private hasGlobalReadAccess;
+    /**
+     * Check if user has global write access (admin or user, not guest)
+     */
+    private hasGlobalWriteAccess;
+    /**
+     * Get the parent IDs function for hierarchical permission checks
+     */
+    private getParentIdsFn;
+    /**
+     * Check if user can read a document (with hierarchy)
+     */
+    private canReadDocument;
+    /**
+     * Check if user can write to a document (with hierarchy)
+     */
+    private canWriteDocument;
+    /**
+     * Throw an error if user cannot read the document
+     */
+    private assertCanRead;
+    /**
+     * Throw an error if user cannot write to the document
+     */
+    private assertCanWrite;
+    /**
+     * Check if user can execute a specific operation on a document.
+     * Throws an error if the operation is restricted and user lacks permission.
+     */
+    private assertCanExecuteOperation;
+    /**
+     * Generate resolvers for this document model with permission checks
+     */
+    private generateResolvers;
 }
 //# sourceMappingURL=document-model-subgraph.d.ts.map

package/dist/src/graphql/document-model-subgraph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-model-subgraph.d.ts","sourceRoot":"","sources":["../../../src/graphql/document-model-subgraph.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAW,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAKnE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,wBAAgB,oCAAoC,CAClD,aAAa,EAAE,mBAAmB,EAClC,OAAO,EAAE,oBAAoB;;;gCAiBK;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE;;;;;;;;;;;;;;iCA4BjC;gBAAE,OAAO,EAAE,MAAM,CAAA;aAAE;;;;;;;;;;;;;;;;;;;EA+EvD;AAED,qBAAa,2BAA4B,SAAQ,YAAY;IAC3D,OAAO,CAAC,aAAa,CAAsB;gBAE/B,aAAa,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY;CAYnE"}
+{"version":3,"file":"document-model-subgraph.d.ts","sourceRoot":"","sources":["../../../src/graphql/document-model-subgraph.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAOnE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAW,YAAY,EAAE,MAAM,YAAY,CAAC;AAGxD,qBAAa,2BAA4B,SAAQ,YAAY;IAC3D,OAAO,CAAC,aAAa,CAAsB;gBAE/B,aAAa,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY;IAUlE;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAS3B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAM5B;;OAEG;IACH,OAAO,CAAC,cAAc;IAWtB;;OAEG;YACW,eAAe;IAqB7B;;OAEG;YACW,gBAAgB;IAqB9B;;OAEG;YACW,aAAa;IAS3B;;OAEG;YACW,cAAc;IAY5B;;;OAGG;YACW,yBAAyB;IAuCvC;;OAEG;IACH,OAAO,CAAC,iBAAiB;CA2K1B"}

package/dist/src/graphql/document-model-subgraph.js

@@ -1,104 +1,237 @@
 import { camelCase, kebabCase } from "change-case";
 import { addFile } from "document-drive";
 import { setName } from "document-model";
+import { GraphQLError } from "graphql";
 import { generateDocumentModelSchemaLegacy, getDocumentModelSchemaName, } from "../utils/create-schema.js";
 import { BaseSubgraph } from "./base-subgraph.js";
 import { buildGraphQlDocument } from "./utils.js";
-export function generateDocumentModelResolversLegacy(documentModel, reactor) {
-    const documentType = documentModel.documentModel.global.id;
-    const documentName = getDocumentModelSchemaName(documentModel.documentModel.global);
-    const operations = documentModel.documentModel.global.specifications
-        .at(-1)
-        ?.modules.flatMap((module) => module.operations.filter((op) => op.name)) ?? [];
-    return {
-        Query: {
-            [documentName]: () => {
-                return {
-                    getDocument: async (args) => {
-                        const { docId, driveId } = args;
-                        if (!docId) {
-                            throw new Error("Document id is required");
-                        }
-                        if (driveId) {
-                            const docIds = await reactor.getDocuments(driveId);
-                            if (!docIds.includes(docId)) {
-                                throw new Error(`Document with id ${docId} is not part of ${driveId}`);
+export class DocumentModelSubgraphLegacy extends BaseSubgraph {
+    documentModel;
+    constructor(documentModel, args) {
+        super(args);
+        this.documentModel = documentModel;
+        this.name = kebabCase(documentModel.documentModel.global.name);
+        this.typeDefs = generateDocumentModelSchemaLegacy(this.documentModel.documentModel.global);
+        this.resolvers = this.generateResolvers();
+    }
+    /**
+     * Check if user has global read access (admin, user, or guest)
+     */
+    hasGlobalReadAccess(ctx) {
+        const isGlobalAdmin = ctx.isAdmin?.(ctx.user?.address ?? "");
+        const isGlobalUser = ctx.isUser?.(ctx.user?.address ?? "");
+        const isGlobalGuest = ctx.isGuest?.(ctx.user?.address ?? "") ||
+            process.env.FREE_ENTRY === "true";
+        return !!(isGlobalAdmin || isGlobalUser || isGlobalGuest);
+    }
+    /**
+     * Check if user has global write access (admin or user, not guest)
+     */
+    hasGlobalWriteAccess(ctx) {
+        const isGlobalAdmin = ctx.isAdmin?.(ctx.user?.address ?? "");
+        const isGlobalUser = ctx.isUser?.(ctx.user?.address ?? "");
+        return !!(isGlobalAdmin || isGlobalUser);
+    }
+    /**
+     * Get the parent IDs function for hierarchical permission checks
+     */
+    getParentIdsFn() {
+        return async (documentId) => {
+            try {
+                const result = await this.reactorClient.getParents(documentId);
+                return result.results.map((doc) => doc.header.id);
+            }
+            catch {
+                return [];
+            }
+        };
+    }
+    /**
+     * Check if user can read a document (with hierarchy)
+     */
+    async canReadDocument(documentId, ctx) {
+        // Global access allows reading
+        if (this.hasGlobalReadAccess(ctx)) {
+            return true;
+        }
+        // Check document-level permissions with hierarchy
+        if (this.documentPermissionService) {
+            return this.documentPermissionService.canRead(documentId, ctx.user?.address, this.getParentIdsFn());
+        }
+        return false;
+    }
+    /**
+     * Check if user can write to a document (with hierarchy)
+     */
+    async canWriteDocument(documentId, ctx) {
+        // Global write access allows writing
+        if (this.hasGlobalWriteAccess(ctx)) {
+            return true;
+        }
+        // Check document-level permissions with hierarchy
+        if (this.documentPermissionService) {
+            return this.documentPermissionService.canWrite(documentId, ctx.user?.address, this.getParentIdsFn());
+        }
+        return false;
+    }
+    /**
+     * Throw an error if user cannot read the document
+     */
+    async assertCanRead(documentId, ctx) {
+        const canRead = await this.canReadDocument(documentId, ctx);
+        if (!canRead) {
+            throw new GraphQLError("Forbidden: insufficient permissions to read this document");
+        }
+    }
+    /**
+     * Throw an error if user cannot write to the document
+     */
+    async assertCanWrite(documentId, ctx) {
+        const canWrite = await this.canWriteDocument(documentId, ctx);
+        if (!canWrite) {
+            throw new GraphQLError("Forbidden: insufficient permissions to write to this document");
+        }
+    }
+    /**
+     * Check if user can execute a specific operation on a document.
+     * Throws an error if the operation is restricted and user lacks permission.
+     */
+    async assertCanExecuteOperation(documentId, operationType, ctx) {
+        // Skip if no permission service
+        if (!this.documentPermissionService) {
+            return;
+        }
+        // Global admins bypass operation-level restrictions
+        if (ctx.isAdmin?.(ctx.user?.address ?? "")) {
+            return;
+        }
+        // Check if this operation has any restrictions set
+        const isRestricted = await this.documentPermissionService.isOperationRestricted(documentId, operationType);
+        if (isRestricted) {
+            // Operation is restricted, check if user has permission
+            const canExecute = await this.documentPermissionService.canExecuteOperation(documentId, operationType, ctx.user?.address);
+            if (!canExecute) {
+                throw new GraphQLError(`Forbidden: insufficient permissions to execute operation "${operationType}" on this document`);
+            }
+        }
+    }
+    /**
+     * Generate resolvers for this document model with permission checks
+     */
+    generateResolvers() {
+        const documentType = this.documentModel.documentModel.global.id;
+        const documentName = getDocumentModelSchemaName(this.documentModel.documentModel.global);
+        const operations = this.documentModel.documentModel.global.specifications
+            .at(-1)
+            ?.modules.flatMap((module) => module.operations.filter((op) => op.name)) ?? [];
+        return {
+            Query: {
+                [documentName]: (_, __, ctx) => {
+                    return {
+                        getDocument: async (args) => {
+                            const { docId, driveId } = args;
+                            if (!docId) {
+                                throw new Error("Document id is required");
+                            }
+                            // Check read permission before accessing document
+                            await this.assertCanRead(docId, ctx);
+                            if (driveId) {
+                                const docIds = await this.reactor.getDocuments(driveId);
+                                if (!docIds.includes(docId)) {
+                                    throw new Error(`Document with id ${docId} is not part of ${driveId}`);
+                                }
+                            }
+                            const doc = await this.reactor.getDocument(docId);
+                            if (doc.header.documentType !== documentType) {
+                                throw new Error(`Document with id ${docId} is not of type ${documentType}`);
                             }
-                        }
-                        const doc = await reactor.getDocument(docId);
-                        if (doc.header.documentType !== documentType) {
-                            throw new Error(`Document with id ${docId} is not of type ${documentType}`);
-                        }
-                        return {
-                            driveId: driveId,
-                            ...buildGraphQlDocument(doc),
-                        };
-                    },
-                    getDocuments: async (args) => {
-                        const { driveId } = args;
-                        const docsIds = await reactor.getDocuments(driveId);
-                        const docs = await Promise.all(docsIds.map(async (docId) => {
-                            const doc = await reactor.getDocument(docId);
                             return {
                                 driveId: driveId,
                                 ...buildGraphQlDocument(doc),
                             };
-                        }));
-                        return docs.filter((doc) => doc.documentType === documentType);
-                    },
-                };
-            },
-        },
-        Mutation: {
-            [`${documentName}_createDocument`]: async (_, args) => {
-                const { driveId, name } = args;
-                const document = await reactor.addDocument(documentType);
-                if (driveId) {
-                    await reactor.addAction(driveId, addFile({
-                        name,
-                        id: document.header.id,
-                        documentType: documentType,
-                    }));
-                }
-                if (name) {
-                    await reactor.addAction(document.header.id, setName(name));
-                }
-                return document.header.id;
+                        },
+                        getDocuments: async (args) => {
+                            const { driveId } = args;
+                            // Check read permission on drive before listing documents
+                            await this.assertCanRead(driveId, ctx);
+                            const docsIds = await this.reactor.getDocuments(driveId);
+                            const docs = await Promise.all(docsIds.map(async (docId) => {
+                                const doc = await this.reactor.getDocument(docId);
+                                return {
+                                    driveId: driveId,
+                                    ...buildGraphQlDocument(doc),
+                                };
+                            }));
+                            const filteredByType = docs.filter((doc) => doc.documentType === documentType);
+                            // If user doesn't have global read access, filter by document-level permissions
+                            if (!this.hasGlobalReadAccess(ctx) &&
+                                this.documentPermissionService) {
+                                const filteredDocs = [];
+                                for (const doc of filteredByType) {
+                                    const canRead = await this.canReadDocument(doc.id, ctx);
+                                    if (canRead) {
+                                        filteredDocs.push(doc);
+                                    }
+                                }
+                                return filteredDocs;
+                            }
+                            return filteredByType;
+                        },
+                    };
+                },
             },
-            ...operations.reduce((mutations, op) => {
-                mutations[`${documentName}_${camelCase(op.name)}`] = async (_, args) => {
-                    const { docId, input } = args;
-                    const doc = await reactor.getDocument(docId);
-                    if (!doc) {
-                        throw new Error("Document not found");
+            Mutation: {
+                [`${documentName}_createDocument`]: async (_, args, ctx) => {
+                    const { driveId, name } = args;
+                    // If creating under a drive, check write permission on drive
+                    if (driveId) {
+                        await this.assertCanWrite(driveId, ctx);
                     }
-                    const action = documentModel.actions[camelCase(op.name)];
-                    if (!action) {
-                        throw new Error(`Action ${op.name} not found`);
+                    else if (!this.hasGlobalWriteAccess(ctx)) {
+                        throw new GraphQLError("Forbidden: insufficient permissions to create documents");
                     }
-                    const result = await reactor.addAction(docId, action(input));
-                    if (result.status !== "SUCCESS") {
-                        throw new Error(result.error?.message ?? `Failed to ${op.name}`);
+                    const document = await this.reactor.addDocument(documentType);
+                    if (driveId) {
+                        await this.reactor.addAction(driveId, addFile({
+                            name,
+                            id: document.header.id,
+                            documentType: documentType,
+                        }));
                     }
-                    const errorOp = result.operations.find((op) => op.error);
-                    if (errorOp) {
-                        throw new Error(errorOp.error);
+                    if (name) {
+                        await this.reactor.addAction(document.header.id, setName(name));
                     }
-                    return result.operations.at(-1)?.index ?? -1;
-                };
-                return mutations;
-            }, {}),
-        },
-    };
-}
-export class DocumentModelSubgraphLegacy extends BaseSubgraph {
-    documentModel;
-    constructor(documentModel, args) {
-        super(args);
-        this.documentModel = documentModel;
-        this.name = kebabCase(documentModel.documentModel.global.name);
-        this.typeDefs = generateDocumentModelSchemaLegacy(this.documentModel.documentModel.global);
-        this.resolvers = generateDocumentModelResolversLegacy(this.documentModel, args.reactor);
+                    return document.header.id;
+                },
+                ...operations.reduce((mutations, op) => {
+                    mutations[`${documentName}_${camelCase(op.name)}`] = async (_, args, ctx) => {
+                        const { docId, input } = args;
+                        // Check write permission before mutating document
+                        await this.assertCanWrite(docId, ctx);
+                        // Check operation-level permissions
+                        await this.assertCanExecuteOperation(docId, op.name, ctx);
+                        const doc = await this.reactor.getDocument(docId);
+                        if (!doc) {
+                            throw new Error("Document not found");
+                        }
+                        const action = this.documentModel.actions[camelCase(op.name)];
+                        if (!action) {
+                            throw new Error(`Action ${op.name} not found`);
+                        }
+                        const result = await this.reactor.addAction(docId, action(input));
+                        if (result.status !== "SUCCESS") {
+                            throw new Error(result.error?.message ?? `Failed to ${op.name}`);
+                        }
+                        const errorOp = result.operations.find((op) => op.error);
+                        if (errorOp) {
+                            throw new Error(errorOp.error);
+                        }
+                        return result.operations.at(-1)?.index ?? -1;
+                    };
+                    return mutations;
+                }, {}),
+            },
+        };
     }
 }
 //# sourceMappingURL=document-model-subgraph.js.map

package/dist/src/graphql/document-model-subgraph.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-model-subgraph.js","sourceRoot":"","sources":["../../../src/graphql/document-model-subgraph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,EAA6B,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,OAAO,EAA4B,MAAM,gBAAgB,CAAC;AACnE,OAAO,EACL,iCAAiC,EACjC,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,UAAU,oCAAoC,CAClD,aAAkC,EAClC,OAA6B;IAE7B,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3D,MAAM,YAAY,GAAG,0BAA0B,CAC7C,aAAa,CAAC,aAAa,CAAC,MAAM,CACnC,CAAC;IACF,MAAM,UAAU,GACd,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc;SAC9C,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAC1C,IAAI,EAAE,CAAC;IAEZ,OAAO;QACL,KAAK,EAAE;YACL,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE;gBACnB,OAAO;oBACL,WAAW,EAAE,KAAK,EAAE,IAAwC,EAAE,EAAE;wBAC9D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;wBAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;wBAC7C,CAAC;wBAED,IAAI,OAAO,EAAE,CAAC;4BACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;4BACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gCAC5B,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,mBAAmB,OAAO,EAAE,CACtD,CAAC;4BACJ,CAAC;wBACH,CAAC;wBAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;wBAC7C,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;4BAC7C,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,mBAAmB,YAAY,EAAE,CAC3D,CAAC;wBACJ,CAAC;wBAED,OAAO;4BACL,OAAO,EAAE,OAAO;4BAChB,GAAG,oBAAoB,CAAC,GAAG,CAAC;yBAC7B,CAAC;oBACJ,CAAC;oBACD,YAAY,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;wBAChD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;wBACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;wBACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;4BAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;4BAC7C,OAAO;gCACL,OAAO,EAAE,OAAO;gCAChB,GAAG,oBAAoB,CAAC,GAAG,CAAC;6BAC7B,CAAC;wBACJ,CAAC,CAAC,CACH,CAAC;wBAEF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;oBACjE,CAAC;iBACF,CAAC;YACJ,CAAC;SACF;QACD,QAAQ,EAAE;YACR,CAAC,GAAG,YAAY,iBAAiB,CAAC,EAAE,KAAK,EACvC,CAAU,EACV,IAAwC,EACxC,EAAE;gBACF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;gBAEzD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,OAAO,CAAC,SAAS,CACrB,OAAO,EACP,OAAO,CAAC;wBACN,IAAI;wBACJ,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;wBACtB,YAAY,EAAE,YAAY;qBAC3B,CAAC,CACH,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7D,CAAC;gBAED,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,CAAC;YACD,GAAG,UAAU,CAAC,MAAM,CAClB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE;gBAChB,SAAS,CAAC,GAAG,YAAY,IAAI,SAAS,CAAC,EAAE,CAAC,IAAK,CAAC,EAAE,CAAC,GAAG,KAAK,EACzD,CAAU,EACV,IAAuC,EACvC,EAAE;oBACF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;oBAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;wBACT,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACxC,CAAC;oBAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,IAAK,CAAC,CAAC,CAAC;oBAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,YAAY,CAAC,CAAC;oBACjD,CAAC;oBAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAE7D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,aAAa,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnE,CAAC;oBAED,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;oBACzD,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjC,CAAC;oBAED,OAAO,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;gBAC/C,CAAC,CAAC;gBACF,OAAO,SAAS,CAAC;YACnB,CAAC,EACD,EAAyB,CAC1B;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,2BAA4B,SAAQ,YAAY;IACnD,aAAa,CAAsB;IAE3C,YAAY,aAAkC,EAAE,IAAkB;QAChE,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,iCAAiC,CAC/C,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CACxC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,oCAAoC,CACnD,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,OAAO,CACb,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"document-model-subgraph.js","sourceRoot":"","sources":["../../../src/graphql/document-model-subgraph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,EAA6B,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,OAAO,EAA4B,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EACL,iCAAiC,EACjC,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,OAAO,2BAA4B,SAAQ,YAAY;IACnD,aAAa,CAAsB;IAE3C,YAAY,aAAkC,EAAE,IAAkB;QAChE,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,iCAAiC,CAC/C,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CACxC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,GAAY;QACtC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,aAAa,GACjB,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC;QACpC,OAAO,CAAC,CAAC,CAAC,aAAa,IAAI,YAAY,IAAI,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,GAAY;QACvC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,CAAC,aAAa,IAAI,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,OAAO,KAAK,EAAE,UAAkB,EAAqB,EAAE;YACrD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC/D,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,UAAkB,EAClB,GAAY;QAEZ,+BAA+B;QAC/B,IAAI,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAC3C,UAAU,EACV,GAAG,CAAC,IAAI,EAAE,OAAO,EACjB,IAAI,CAAC,cAAc,EAAE,CACtB,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,UAAkB,EAClB,GAAY;QAEZ,qCAAqC;QACrC,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAC5C,UAAU,EACV,GAAG,CAAC,IAAI,EAAE,OAAO,EACjB,IAAI,CAAC,cAAc,EAAE,CACtB,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAY;QAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CACpB,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAC1B,UAAkB,EAClB,GAAY;QAEZ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,YAAY,CACpB,+DAA+D,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,yBAAyB,CACrC,UAAkB,EAClB,aAAqB,EACrB,GAAY;QAEZ,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,oDAAoD;QACpD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,mDAAmD;QACnD,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,yBAAyB,CAAC,qBAAqB,CACxD,UAAU,EACV,aAAa,CACd,CAAC;QAEJ,IAAI,YAAY,EAAE,CAAC;YACjB,wDAAwD;YACxD,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,yBAAyB,CAAC,mBAAmB,CACtD,UAAU,EACV,aAAa,EACb,GAAG,CAAC,IAAI,EAAE,OAAO,CAClB,CAAC;YAEJ,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,YAAY,CACpB,6DAA6D,aAAa,oBAAoB,CAC/F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,0BAA0B,CAC7C,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CACxC,CAAC;QACF,MAAM,UAAU,GACd,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc;aACnD,EAAE,CAAC,CAAC,CAAC,CAAC;YACP,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAC1C,IAAI,EAAE,CAAC;QAEZ,OAAO;YACL,KAAK,EAAE;gBACL,CAAC,YAAY,CAAC,EAAE,CAAC,CAAU,EAAE,EAAW,EAAE,GAAY,EAAE,EAAE;oBACxD,OAAO;wBACL,WAAW,EAAE,KAAK,EAAE,IAAwC,EAAE,EAAE;4BAC9D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;4BAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;4BAC7C,CAAC;4BAED,kDAAkD;4BAClD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAErC,IAAI,OAAO,EAAE,CAAC;gCACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gCACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oCAC5B,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,mBAAmB,OAAO,EAAE,CACtD,CAAC;gCACJ,CAAC;4BACH,CAAC;4BAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;4BAClD,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gCAC7C,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,mBAAmB,YAAY,EAAE,CAC3D,CAAC;4BACJ,CAAC;4BAED,OAAO;gCACL,OAAO,EAAE,OAAO;gCAChB,GAAG,oBAAoB,CAAC,GAAG,CAAC;6BAC7B,CAAC;wBACJ,CAAC;wBACD,YAAY,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;4BAChD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;4BAEzB,0DAA0D;4BAC1D,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;4BAEvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;4BACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gCAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gCAClD,OAAO;oCACL,OAAO,EAAE,OAAO;oCAChB,GAAG,oBAAoB,CAAC,GAAG,CAAC;iCAC7B,CAAC;4BACJ,CAAC,CAAC,CACH,CAAC;4BAEF,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAChC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAC3C,CAAC;4BAEF,gFAAgF;4BAChF,IACE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;gCAC9B,IAAI,CAAC,yBAAyB,EAC9B,CAAC;gCACD,MAAM,YAAY,GAAG,EAAE,CAAC;gCACxB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;oCACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;oCACxD,IAAI,OAAO,EAAE,CAAC;wCACZ,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oCACzB,CAAC;gCACH,CAAC;gCACD,OAAO,YAAY,CAAC;4BACtB,CAAC;4BAED,OAAO,cAAc,CAAC;wBACxB,CAAC;qBACF,CAAC;gBACJ,CAAC;aACF;YACD,QAAQ,EAAE;gBACR,CAAC,GAAG,YAAY,iBAAiB,CAAC,EAAE,KAAK,EACvC,CAAU,EACV,IAAwC,EACxC,GAAY,EACZ,EAAE;oBACF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;oBAE/B,6DAA6D;oBAC7D,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC1C,CAAC;yBAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC3C,MAAM,IAAI,YAAY,CACpB,yDAAyD,CAC1D,CAAC;oBACJ,CAAC;oBAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;oBAE9D,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAC1B,OAAO,EACP,OAAO,CAAC;4BACN,IAAI;4BACJ,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;4BACtB,YAAY,EAAE,YAAY;yBAC3B,CAAC,CACH,CAAC;oBACJ,CAAC;oBAED,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBAClE,CAAC;oBAED,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,CAAC;gBACD,GAAG,UAAU,CAAC,MAAM,CAClB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE;oBAChB,SAAS,CAAC,GAAG,YAAY,IAAI,SAAS,CAAC,EAAE,CAAC,IAAK,CAAC,EAAE,CAAC,GAAG,KAAK,EACzD,CAAU,EACV,IAAuC,EACvC,GAAY,EACZ,EAAE;wBACF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;wBAE9B,kDAAkD;wBAClD,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAEtC,oCAAoC;wBACpC,MAAM,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,EAAE,CAAC,IAAK,EAAE,GAAG,CAAC,CAAC;wBAE3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;wBAClD,IAAI,CAAC,GAAG,EAAE,CAAC;4BACT,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;wBACxC,CAAC;wBAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,IAAK,CAAC,CAAC,CAAC;wBAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,YAAY,CAAC,CAAC;wBACjD,CAAC;wBAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;wBAElE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;4BAChC,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,aAAa,EAAE,CAAC,IAAI,EAAE,CAChD,CAAC;wBACJ,CAAC;wBAED,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;wBACzD,IAAI,OAAO,EAAE,CAAC;4BACZ,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBACjC,CAAC;wBAED,OAAO,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;oBAC/C,CAAC,CAAC;oBACF,OAAO,SAAS,CAAC;gBACnB,CAAC,EACD,EAAyB,CAC1B;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/test/document-model-subgraph-legacy-permissions.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=document-model-subgraph-legacy-permissions.test.d.ts.map

package/dist/test/document-model-subgraph-legacy-permissions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-model-subgraph-legacy-permissions.test.d.ts","sourceRoot":"","sources":["../../test/document-model-subgraph-legacy-permissions.test.ts"],"names":[],"mappings":""}