@prosopo/user-access-policy 3.15.7 → 3.15.9

package/dist/tsc/redis/reader/redisRulesReader.js

@@ -0,0 +1,384 @@
+import * as util from "node:util";
+import { chunkIntoBatches, executeBatchesSequentially } from "@prosopo/common";
+import { REDIS_QUERY_DIALECT, getRulesRedisQuery, } from "#policy/redis/reader/redisRulesQuery.js";
+import { buildScopedRulesSubQueries } from "#policy/redis/reader/redisRulesSplitQuery.js";
+import { REDIS_BATCH_SIZE, fetchRedisHashRecords, getMissingRedisKeys, parseRedisRecords, } from "#policy/redis/redisClient.js";
+import { ACCESS_RULES_REDIS_INDEX_NAME, ACCESS_RULE_REDIS_KEY_PREFIX, } from "#policy/redis/redisRuleIndex.js";
+import { AccessPolicyType } from "#policy/rule.js";
+import { accessRuleInput } from "#policy/ruleInput/ruleInput.js";
+import { aggregateRedisKeys, searchRedisKeysBounded, } from "./redisAggregate.js";
+export const SERVER_SIDE_RANK_TOP_N = 20;
+const GREEDY_MAX_CANDIDATES = REDIS_BATCH_SIZE * 10;
+const SPLIT_MAX_CANDIDATES_PER_SUB = 500;
+const SPECIFICITY_EXPR = [
+    "exists(@clientId)",
+    "exists(@userId)",
+    "exists(@ja4Hash)",
+    "exists(@headersHash)",
+    "exists(@userAgentHash)",
+    "exists(@headHash)",
+    "exists(@coords)",
+    "exists(@countryCode)",
+    "exists(@asn)",
+    "exists(@os)",
+    "exists(@browser)",
+    "exists(@headerMatch)",
+    "exists(@numericIp)",
+    "exists(@numericIpMaskMin)",
+].join(" + ");
+const SEVERITY_EXPR = `(@type == "${AccessPolicyType.Block}")`;
+const RANK_EXPR = "(@_spec * 2) + @_sev";
+const RULE_LOAD_FIELDS = [
+    "@__key",
+    "@type",
+    "@captchaType",
+    "@description",
+    "@solvedImagesCount",
+    "@imageThreshold",
+    "@powDifficulty",
+    "@unsolvedImagesCount",
+    "@frictionlessScore",
+    "@deferToVerify",
+    "@messageKey",
+    "@clientId",
+    "@groupId",
+    "@userId",
+    "@ja4Hash",
+    "@headersHash",
+    "@userAgentHash",
+    "@headHash",
+    "@coords",
+    "@countryCode",
+    "@asn",
+    "@os",
+    "@browser",
+    "@headerMatch",
+    "@headerName",
+    "@headerValue",
+    "@headerOperator",
+    "@numericIp",
+    "@numericIpMaskMin",
+    "@numericIpMaskMax",
+];
+const readerSpecificity = (rule) => {
+    let score = 0;
+    if (rule.clientId !== undefined)
+        score++;
+    if (rule.userId !== undefined)
+        score++;
+    if (rule.ja4Hash !== undefined)
+        score++;
+    if (rule.headersHash !== undefined)
+        score++;
+    if (rule.userAgentHash !== undefined)
+        score++;
+    if (rule.headHash !== undefined)
+        score++;
+    if (rule.coords !== undefined)
+        score++;
+    if (rule.countryCode !== undefined)
+        score++;
+    if (rule.asn !== undefined)
+        score++;
+    if (rule.os !== undefined)
+        score++;
+    if (rule.browser !== undefined)
+        score++;
+    if (rule.numericIp !== undefined)
+        score++;
+    if (rule.numericIpMaskMin !== undefined)
+        score++;
+    return score;
+};
+const sortByReaderRank = (rules) => [...rules].sort((a, b) => {
+    const specDelta = readerSpecificity(b) - readerSpecificity(a);
+    if (specDelta !== 0)
+        return specDelta;
+    const aBlock = a.type === AccessPolicyType.Block ? 1 : 0;
+    const bBlock = b.type === AccessPolicyType.Block ? 1 : 0;
+    return bBlock - aBlock;
+});
+export class RedisRulesReader {
+    constructor(client, logger) {
+        this.client = client;
+        this.logger = logger;
+    }
+    async getMissingRuleIds(ruleIds) {
+        const ruleKeys = this.getRuleKeys(ruleIds);
+        const keyBatches = chunkIntoBatches(ruleKeys, REDIS_BATCH_SIZE);
+        const missingKeyBatches = await executeBatchesSequentially(keyBatches, async (keysBatch) => getMissingRedisKeys(this.client, keysBatch));
+        return missingKeyBatches
+            .flat()
+            .map((ruleKey) => ruleKey.slice(ACCESS_RULE_REDIS_KEY_PREFIX.length));
+    }
+    async fetchRules(ruleIds) {
+        const ruleKeys = this.getRuleKeys(ruleIds);
+        const keyBatches = chunkIntoBatches(ruleKeys, REDIS_BATCH_SIZE);
+        const entryBatches = await executeBatchesSequentially(keyBatches, (keysBatch) => this.fetchRuleEntries(keysBatch));
+        return entryBatches.flat();
+    }
+    async findRules(filter, matchingFieldsOnly = false, skipEmptyUserScopes = true) {
+        const query = getRulesRedisQuery(filter, matchingFieldsOnly);
+        if (skipEmptyUserScopes &&
+            query === "( @clientId:{global} | ismissing(@clientId) )") {
+            return [];
+        }
+        if (matchingFieldsOnly && filter.userScope !== undefined) {
+            return this.findRulesSplit(filter);
+        }
+        return this.findRulesGreedy(filter, query);
+    }
+    async findRulesSplit(filter) {
+        const userScope = filter.userScope;
+        if (userScope === undefined) {
+            return [];
+        }
+        const clientId = filter.policyScope?.clientId;
+        const subQueries = buildScopedRulesSubQueries(userScope, clientId, {
+            ...(filter.blockOnly === true && { blockOnly: true }),
+            ...(filter.includeDeferred === true && { includeDeferred: true }),
+        });
+        try {
+            const keyLists = await Promise.all(subQueries.map((sub) => searchRedisKeysBounded(this.client, sub.query, SPLIT_MAX_CANDIDATES_PER_SUB).catch((err) => {
+                this.logger.error(() => ({
+                    err,
+                    data: {
+                        inspect: util.inspect({ subKind: sub.kind, query: sub.query }, { depth: null }),
+                    },
+                    msg: "failed to execute split rule sub-query",
+                }));
+                return [];
+            })));
+            const uniqueKeys = new Set();
+            for (const list of keyLists) {
+                for (const key of list) {
+                    uniqueKeys.add(key);
+                }
+            }
+            if (uniqueKeys.size === 0) {
+                return [];
+            }
+            const ruleKeys = [...uniqueKeys];
+            this.logger.debug(() => ({
+                msg: "Executed split rule sub-queries",
+                data: {
+                    inspect: util.inspect({
+                        subQueryCount: subQueries.length,
+                        uniqueCandidates: ruleKeys.length,
+                        perSubQueryCounts: keyLists.map((l, i) => ({
+                            kind: subQueries[i]?.kind,
+                            found: l.length,
+                        })),
+                        filter,
+                    }, { depth: null }),
+                },
+            }));
+            const { records } = await fetchRedisHashRecords(this.client, ruleKeys, this.logger);
+            const nonEmptyRecords = records.filter((record) => Object.keys(record).length > 0);
+            const parsedRules = parseRedisRecords(nonEmptyRecords, accessRuleInput, this.logger);
+            return sortByReaderRank(parsedRules);
+        }
+        catch (e) {
+            this.logger.error(() => ({
+                err: e,
+                data: {
+                    inspect: util.inspect({ filter }, { depth: null }),
+                },
+                msg: "failed to execute split rule query set",
+            }));
+            return [];
+        }
+    }
+    async findRulesRanked(filter, query) {
+        try {
+            const reply = await this.client.ft.aggregate(ACCESS_RULES_REDIS_INDEX_NAME, query, {
+                DIALECT: REDIS_QUERY_DIALECT,
+                LOAD: [...RULE_LOAD_FIELDS],
+                STEPS: [
+                    { type: "FILTER", expression: "exists(@type)" },
+                    { type: "APPLY", expression: SPECIFICITY_EXPR, AS: "_spec" },
+                    { type: "APPLY", expression: SEVERITY_EXPR, AS: "_sev" },
+                    { type: "APPLY", expression: RANK_EXPR, AS: "_rank" },
+                    {
+                        type: "SORTBY",
+                        BY: [{ BY: "@_rank", DIRECTION: "DESC" }],
+                    },
+                    { type: "LIMIT", from: 0, size: SERVER_SIDE_RANK_TOP_N },
+                ],
+            });
+            if (reply.results.length === 0) {
+                return [];
+            }
+            this.logger.debug(() => ({
+                msg: "Executed ranked search query",
+                data: {
+                    inspect: util.inspect({
+                        filter: filter,
+                        foundCount: reply.results.length,
+                        query: query,
+                    }, { depth: null }),
+                },
+            }));
+            const ruleKeys = [];
+            for (const result of reply.results) {
+                const key = result.__key;
+                if (typeof key === "string") {
+                    ruleKeys.push(key);
+                }
+            }
+            if (ruleKeys.length === 0) {
+                return [];
+            }
+            const { records } = await fetchRedisHashRecords(this.client, ruleKeys, this.logger);
+            const nonEmptyRecords = records.filter((record) => Object.keys(record).length > 0);
+            return parseRedisRecords(nonEmptyRecords, accessRuleInput, this.logger);
+        }
+        catch (e) {
+            this.logger.error(() => ({
+                err: e,
+                data: {
+                    inspect: util.inspect({ query, filter }, { depth: null }),
+                },
+                msg: "failed to execute ranked search query",
+            }));
+            return [];
+        }
+    }
+    async findRulesGreedy(filter, query) {
+        try {
+            const ruleKeys = await aggregateRedisKeys(this.client, query, this.logger, undefined, GREEDY_MAX_CANDIDATES);
+            if (ruleKeys.length === 0) {
+                return [];
+            }
+            this.logger.debug(() => ({
+                msg: "Executed greedy search query",
+                data: {
+                    inspect: util.inspect({
+                        filter: filter,
+                        foundCount: ruleKeys.length,
+                        query: query,
+                    }, { depth: null }),
+                },
+            }));
+            const { records } = await fetchRedisHashRecords(this.client, ruleKeys, this.logger);
+            const nonEmptyRecords = records.filter((record) => Object.keys(record).length > 0);
+            return parseRedisRecords(nonEmptyRecords, accessRuleInput, this.logger);
+        }
+        catch (e) {
+            this.logger.error(() => ({
+                err: e,
+                data: {
+                    inspect: util.inspect({ query, filter }, { depth: null }),
+                },
+                msg: "failed to execute greedy search query",
+            }));
+            return [];
+        }
+    }
+    async findRuleIds(filter, matchingFieldsOnly = false) {
+        const query = getRulesRedisQuery(filter, matchingFieldsOnly);
+        let ruleIds = [];
+        try {
+            const ruleKeys = await aggregateRedisKeys(this.client, query, this.logger);
+            ruleIds = ruleKeys.map((ruleKey) => ruleKey.slice(ACCESS_RULE_REDIS_KEY_PREFIX.length));
+        }
+        catch (e) {
+            this.logger.error(() => ({
+                err: e,
+                data: {
+                    inspect: util.inspect({
+                        query: query,
+                        filter: filter,
+                    }, {
+                        depth: null,
+                    }),
+                },
+                msg: "Failed to execute search query for rule IDs",
+            }));
+            return [];
+        }
+        this.logger.debug(() => ({
+            msg: "Executed search query for rule IDs",
+            data: {
+                query: query,
+                foundCount: ruleIds.length,
+                foundIds: ruleIds,
+            },
+        }));
+        return ruleIds;
+    }
+    async fetchAllRuleIds(batchHandler) {
+        const keysBatchHandler = async (keys) => {
+            const ids = keys.map((ruleKey) => ruleKey.slice(ACCESS_RULE_REDIS_KEY_PREFIX.length));
+            await batchHandler(ids);
+        };
+        await aggregateRedisKeys(this.client, "*", this.logger, keysBatchHandler);
+    }
+    async fetchRuleEntries(keys) {
+        const { records, expirations } = await fetchRedisHashRecords(this.client, keys, this.logger);
+        const entries = [];
+        for (const [index, ruleData] of records.entries()) {
+            const isRulePresent = Object.keys(ruleData).length > 0;
+            if (isRulePresent) {
+                const rule = parseRedisRecords([ruleData], accessRuleInput, this.logger)[0];
+                if (rule) {
+                    entries.push({
+                        rule: rule,
+                        expiresUnixTimestamp: expirations[index],
+                    });
+                }
+            }
+        }
+        return entries;
+    }
+    getRuleKeys(ruleIds) {
+        return ruleIds.map((id) => `${ACCESS_RULE_REDIS_KEY_PREFIX}${id}`);
+    }
+}
+export class DummyRedisRulesReader {
+    constructor(logger) {
+        this.logger = logger;
+    }
+    async getMissingRuleIds(ruleIds) {
+        this.logger.info(() => ({
+            msg: "Dummy getMissingRuleIds() has no effect (redis is not ready)",
+            data: {
+                ruleIds,
+            },
+        }));
+        return [];
+    }
+    async fetchRules(ruleIds) {
+        this.logger.info(() => ({
+            msg: "Dummy fetchRule() has no effect (redis is not ready)",
+            data: {
+                ruleIds,
+            },
+        }));
+        return [];
+    }
+    async findRules(filter, matchingFieldsOnly = false, skipEmptyUserScopes = true) {
+        this.logger.info(() => ({
+            msg: "Dummy findRules() has no effect (redis is not ready)",
+            data: {
+                filter,
+            },
+        }));
+        return [];
+    }
+    async findRuleIds(filter, matchingFieldsOnly = false) {
+        this.logger.info(() => ({
+            msg: "Dummy findRuleIds() has no effect (redis is not ready)",
+            data: {
+                filter,
+            },
+        }));
+        return [];
+    }
+    async fetchAllRuleIds(batchHandler) {
+        this.logger.info(() => ({
+            msg: "Dummy fetchAllRuleIds() has no effect (redis is not ready)",
+        }));
+    }
+}
+//# sourceMappingURL=redisRulesReader.js.map

package/dist/tsc/redis/reader/redisRulesReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesReader.js","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAG/E,OAAO,EACN,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EACN,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,6BAA6B,EAC7B,4BAA4B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAmB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAMjE,OAAO,EACN,kBAAkB,EAClB,sBAAsB,GACtB,MAAM,qBAAqB,CAAC;AAmB7B,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAKzC,MAAM,qBAAqB,GAAG,gBAAgB,GAAG,EAAE,CAAC;AAUpD,MAAM,4BAA4B,GAAG,GAAG,CAAC;AASzC,MAAM,gBAAgB,GAAG;IACxB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,mBAAmB;IACnB,iBAAiB;IACjB,sBAAsB;IACtB,cAAc;IACd,aAAa;IACb,kBAAkB;IAGlB,sBAAsB;IACtB,oBAAoB;IACpB,2BAA2B;CAC3B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAMd,MAAM,aAAa,GAAG,cAAc,gBAAgB,CAAC,KAAK,IAAI,CAAC;AAI/D,MAAM,SAAS,GAAG,sBAAsB,CAAC;AAMzC,MAAM,gBAAgB,GAAG;IACxB,QAAQ;IACR,OAAO;IACP,cAAc;IACd,cAAc;IACd,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,UAAU;IACV,SAAS;IACT,UAAU;IACV,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,cAAc;IACd,MAAM;IACN,KAAK;IACL,UAAU;IACV,cAAc;IACd,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,YAAY;IACZ,mBAAmB;IACnB,mBAAmB;CACV,CAAC;AAMX,MAAM,iBAAiB,GAAG,CAAC,IAAgB,EAAU,EAAE;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IAC5C,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IAC5C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,EAAE,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAKF,MAAM,gBAAgB,GAAG,CAAC,KAAmB,EAAgB,EAAE,CAC9D,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;IACxB,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,GAAG,MAAM,CAAC;AACxB,CAAC,CAAC,CAAC;AAEJ,MAAM,OAAO,gBAAgB;IAC5B,YACkB,MAAuB,EACvB,MAAc;QADd,WAAM,GAAN,MAAM,CAAiB;QACvB,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhE,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,UAAU,EACV,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAChE,CAAC;QAEF,OAAO,iBAAiB;aACtB,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAiB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhE,MAAM,YAAY,GAAG,MAAM,0BAA0B,CACpD,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAC/C,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CACd,MAAyB,EACzB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI;QAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAE7D,IACC,mBAAmB;YAOnB,KAAK,KAAK,+CAA+C,EACxD,CAAC;YACF,OAAO,EAAE,CAAC;QACX,CAAC;QAkBD,IAAI,kBAAkB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAKD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAYO,KAAK,CAAC,cAAc,CAC3B,MAAyB;QAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC;QAE9C,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,EAAE,QAAQ,EAAE;YAClE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;SACjE,CAAC,CAAC;QAEH,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAWtB,sBAAsB,CACrB,IAAI,CAAC,MAAM,EACX,GAAG,CAAC,KAAK,EAMT,4BAA4B,CAC5B,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAKf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG;oBACH,IAAI,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EACvC,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;qBACD;oBACD,GAAG,EAAE,wCAAwC;iBAC7C,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,CAAC;YACX,CAAC,CAAC,CACF,CACD,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACxB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;YACF,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;YAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,iCAAiC;gBACtC,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,aAAa,EAAE,UAAU,CAAC,MAAM;wBAChC,gBAAgB,EAAE,QAAQ,CAAC,MAAM;wBACjC,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC1C,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI;4BACzB,KAAK,EAAE,CAAC,CAAC,MAAM;yBACf,CAAC,CAAC;wBACH,MAAM;qBACN,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;iBACD;aACD,CAAC,CAAC,CAAC;YAEJ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAC9C,IAAI,CAAC,MAAM,EACX,QAAQ,EACR,IAAI,CAAC,MAAM,CACX,CAAC;YAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1C,CAAC;YAEF,MAAM,WAAW,GAAG,iBAAiB,CACpC,eAAe,EACf,eAAe,EACf,IAAI,CAAC,MAAM,CACX,CAAC;YAUF,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBAClD;gBACD,GAAG,EAAE,wCAAwC;aAC7C,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,MAAyB,EACzB,KAAa;QAEb,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAC3C,6BAA6B,EAC7B,KAAK,EACL;gBACC,OAAO,EAAE,mBAAmB;gBAC5B,IAAI,EAAE,CAAC,GAAG,gBAAgB,CAAC;gBAC3B,KAAK,EAAE;oBAaN,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE;oBAC/C,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE;oBAC5D,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE;oBACxD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE;oBACrD;wBACC,IAAI,EAAE,QAAQ;wBACd,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;qBAUzC;oBACD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE;iBACxD;aACD,CACD,CAAC;YAEF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,CAAC;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,8BAA8B;gBACnC,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,MAAM,EAAE,MAAM;wBACd,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;wBAChC,KAAK,EAAE,KAAK;qBACZ,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;iBACD;aACD,CAAC,CAAC,CAAC;YAkBJ,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAI,MAA8B,CAAC,KAAK,CAAC;gBAClD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACF,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;YACX,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAC9C,IAAI,CAAC,MAAM,EACX,QAAQ,EACR,IAAI,CAAC,MAAM,CACX,CAAC;YAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1C,CAAC;YAEF,OAAO,iBAAiB,CAAC,eAAe,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBACzD;gBACD,GAAG,EAAE,uCAAuC;aAC5C,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAQO,KAAK,CAAC,eAAe,CAC5B,MAAyB,EACzB,KAAa;QAEb,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACxC,IAAI,CAAC,MAAM,EACX,KAAK,EACL,IAAI,CAAC,MAAM,EACX,SAAS,EACT,qBAAqB,CACrB,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,8BAA8B;gBACnC,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,MAAM,EAAE,MAAM;wBACd,UAAU,EAAE,QAAQ,CAAC,MAAM;wBAC3B,KAAK,EAAE,KAAK;qBACZ,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CACf;iBACD;aACD,CAAC,CAAC,CAAC;YAEJ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAC9C,IAAI,CAAC,MAAM,EACX,QAAQ,EACR,IAAI,CAAC,MAAM,CACX,CAAC;YAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1C,CAAC;YAEF,OAAO,iBAAiB,CAAC,eAAe,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBACzD;gBACD,GAAG,EAAE,uCAAuC;aAC5C,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,MAAyB,EACzB,kBAAkB,GAAG,KAAK;QAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAE7D,IAAI,OAAO,GAAa,EAAE,CAAC;QAE3B,IAAI,CAAC;YAEJ,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACxC,IAAI,CAAC,MAAM,EACX,KAAK,EACL,IAAI,CAAC,MAAM,CACX,CAAC;YAEF,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAClC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAClD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CACpB;wBACC,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,MAAM;qBACd,EACD;wBACC,KAAK,EAAE,IAAI;qBACX,CACD;iBACD;gBACD,GAAG,EAAE,6CAA6C;aAClD,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,oCAAoC;YACzC,IAAI,EAAE;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,QAAQ,EAAE,OAAO;aACjB;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,YAAkD;QAElD,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAc,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAClD,CAAC;YAEF,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,IAAc;QAC9C,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,CAC3D,IAAI,CAAC,MAAM,EACX,IAAI,EACJ,IAAI,CAAC,MAAM,CACX,CAAC;QACF,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAEvD,IAAI,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,iBAAiB,CAC7B,CAAC,QAAQ,CAAC,EACV,eAAe,EACf,IAAI,CAAC,MAAM,CACX,CAAC,CAAC,CAAC,CAAC;gBAEL,IAAI,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,IAAI;wBACV,oBAAoB,EAAE,WAAW,CAAC,KAAK,CAAC;qBACxC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAES,WAAW,CAAC,OAAiB;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,4BAA4B,GAAG,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;CACD;AAED,MAAM,OAAO,qBAAqB;IACjC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,8DAA8D;YACnE,IAAI,EAAE;gBACL,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAiB;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,sDAAsD;YAC3D,IAAI,EAAE;gBACL,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,SAAS,CACd,MAAyB,EACzB,kBAAkB,GAAG,KAAK,EAC1B,mBAAmB,GAAG,IAAI;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,sDAAsD;YAC3D,IAAI,EAAE;gBACL,MAAM;aACN;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,MAAyB,EACzB,kBAAkB,GAAG,KAAK;QAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,wDAAwD;YAC7D,IAAI,EAAE;gBACL,MAAM;aACN;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,YAAkD;QAElD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,4DAA4D;SACjE,CAAC,CAAC,CAAC;IACL,CAAC;CACD"}

package/dist/tsc/redis/reader/redisRulesSplitQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesSplitQuery.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesSplitQuery.ts"],"names":[],"mappings":"AAeA,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AA0E/E,KAAK,QAAQ,GAAG;IAGf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd,CAAC;AAmCF,eAAO,MAAM,0BAA0B,cAC3B,SAAS,YACV,MAAM,GAAG,SAAS,YACnB;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,KACzD,QAAQ,EAqCV,CAAC;AA+DF,eAAO,MAAM,0BAA0B,cAC3B,SAAS,YACV,MAAM,GAAG,SAAS,KAC1B,QAAQ,EAC0D,CAAC"}

package/dist/tsc/redis/reader/redisRulesSplitQuery.js

@@ -0,0 +1,95 @@
+import { getBlockPoolClause } from "#policy/redis/reader/redisRulesQuery.js";
+import { GLOBAL_CLIENT_SCOPE_SENTINEL } from "#policy/rule.js";
+const escapeTagValue = (value) => value.replace(/([,.<>{}\[\]"':;!@#$%^&*()\-+=~|/\\])/g, "\\$1");
+const FIELDS_REQUIRING_ESCAPE = new Set([
+    "coords",
+]);
+const NUMERIC_FIELDS = new Set(["asn"]);
+const SCALAR_USER_SCOPE_FIELDS = [
+    "userId",
+    "ja4Hash",
+    "headersHash",
+    "userAgentHash",
+    "headHash",
+    "coords",
+    "countryCode",
+    "asn",
+    "os",
+    "browser",
+];
+const ALL_USER_SCOPE_FIELDS = [
+    ...SCALAR_USER_SCOPE_FIELDS,
+    "numericIp",
+    "numericIpMaskMin",
+    "numericIpMaskMax",
+];
+const GLOBAL_SCOPE_INNER = `@clientId:{${GLOBAL_CLIENT_SCOPE_SENTINEL}} | ismissing(@clientId)`;
+const buildScopeClause = (clientId) => {
+    if (clientId === undefined) {
+        return `( ${GLOBAL_SCOPE_INNER} )`;
+    }
+    return `( @clientId:{${clientId}} | ${GLOBAL_SCOPE_INNER} )`;
+};
+const buildFieldClause = (field, value) => {
+    if (value === undefined) {
+        return null;
+    }
+    const stringValue = String(value);
+    if (NUMERIC_FIELDS.has(field)) {
+        return `@${field}:[${stringValue} ${stringValue}]`;
+    }
+    const queryValue = FIELDS_REQUIRING_ESCAPE.has(field)
+        ? escapeTagValue(stringValue)
+        : stringValue;
+    return `@${field}:{${queryValue}}`;
+};
+export const buildScopedRulesSubQueries = (userScope, clientId, options = {}) => {
+    const scopeClause = buildScopeClause(clientId);
+    const typePools = options.blockOnly
+        ? options.includeDeferred === true
+            ? [
+                { tag: "block", clause: `${getBlockPoolClause(false)} ` },
+                { tag: "deferred", clause: "@deferToVerify:{true} " },
+            ]
+            : [{ tag: "", clause: `${getBlockPoolClause(false)} ` }]
+        : [{ tag: "", clause: "" }];
+    const subQueries = [];
+    for (const pool of typePools) {
+        const prefix = `${pool.clause}${scopeClause}`;
+        const label = pool.tag === "" ? "" : `${pool.tag}:`;
+        subQueries.push(...buildProbes(userScope, prefix, label));
+    }
+    return subQueries;
+};
+const buildProbes = (userScope, prefix, label) => {
+    const subQueries = [];
+    for (const field of SCALAR_USER_SCOPE_FIELDS) {
+        const clause = buildFieldClause(field, userScope[field]);
+        if (clause === null) {
+            continue;
+        }
+        subQueries.push({
+            kind: `${label}field:${field}`,
+            query: `${prefix} ${clause}`,
+        });
+    }
+    const requestIp = userScope.numericIp;
+    if (requestIp !== undefined) {
+        subQueries.push({
+            kind: `${label}ip:exact`,
+            query: `${prefix} @numericIp:[${requestIp} ${requestIp}]`,
+        });
+        subQueries.push({
+            kind: `${label}ip:mask`,
+            query: `${prefix} @numericIpMaskMin:[-inf ${requestIp}] @numericIpMaskMax:[${requestIp} +inf]`,
+        });
+    }
+    const noScopeIsmissing = ALL_USER_SCOPE_FIELDS.map((field) => `ismissing(@${field})`).join(" ");
+    subQueries.push({
+        kind: `${label}no-user-scope`,
+        query: `${prefix} ${noScopeIsmissing}`,
+    });
+    return subQueries;
+};
+export const buildScopedBlockSubQueries = (userScope, clientId) => buildScopedRulesSubQueries(userScope, clientId, { blockOnly: true });
+//# sourceMappingURL=redisRulesSplitQuery.js.map

package/dist/tsc/redis/reader/redisRulesSplitQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesSplitQuery.js","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesSplitQuery.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAkB,MAAM,iBAAiB,CAAC;AAK/E,MAAM,cAAc,GAAG,CAAC,KAAa,EAAU,EAAE,CAChD,KAAK,CAAC,OAAO,CAAC,wCAAwC,EAAE,MAAM,CAAC,CAAC;AAGjE,MAAM,uBAAuB,GAAiC,IAAI,GAAG,CAAC;IACrE,QAAQ;CACR,CAAC,CAAC;AAGH,MAAM,cAAc,GAAiC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAKtE,MAAM,wBAAwB,GAAmC;IAChE,QAAQ;IACR,SAAS;IACT,aAAa;IACb,eAAe;IACf,UAAU;IACV,QAAQ;IACR,aAAa;IACb,KAAK;IACL,IAAI;IACJ,SAAS;CACT,CAAC;AAEF,MAAM,qBAAqB,GAAmC;IAC7D,GAAG,wBAAwB;IAC3B,WAAW;IACX,kBAAkB;IAClB,kBAAkB;CAClB,CAAC;AAOF,MAAM,kBAAkB,GAAG,cAAc,4BAA4B,0BAA0B,CAAC;AAMhG,MAAM,gBAAgB,GAAG,CAAC,QAA4B,EAAU,EAAE;IACjE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,kBAAkB,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,gBAAgB,QAAQ,OAAO,kBAAkB,IAAI,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACxB,KAAsB,EACtB,KAAc,EACE,EAAE;IAClB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,KAAK,KAAK,WAAW,IAAI,WAAW,GAAG,CAAC;IACpD,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC;QACpD,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC;QAC7B,CAAC,CAAC,WAAW,CAAC;IACf,OAAO,IAAI,KAAK,KAAK,UAAU,GAAG,CAAC;AACpC,CAAC,CAAC;AA0CF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,SAAoB,EACpB,QAA4B,EAC5B,UAA8D,EAAE,EACnD,EAAE;IACf,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAoB/C,MAAM,SAAS,GAA2C,OAAO,CAAC,SAAS;QAC1E,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI;YACjC,CAAC,CAAC;gBACA,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE;gBACzD,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,wBAAwB,EAAE;aACrD;YACF,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAE7B,MAAM,UAAU,GAAe,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QACpD,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CACnB,SAAoB,EACpB,MAAc,EACd,KAAa,EACA,EAAE;IACf,MAAM,UAAU,GAAe,EAAE,CAAC;IAKlC,KAAK,MAAM,KAAK,IAAI,wBAAwB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrB,SAAS;QACV,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,GAAG,KAAK,SAAS,KAAK,EAAE;YAC9B,KAAK,EAAE,GAAG,MAAM,IAAI,MAAM,EAAE;SAC5B,CAAC,CAAC;IACJ,CAAC;IASD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,GAAG,KAAK,UAAU;YACxB,KAAK,EAAE,GAAG,MAAM,gBAAgB,SAAS,IAAI,SAAS,GAAG;SACzD,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,GAAG,KAAK,SAAS;YACvB,KAAK,EAAE,GAAG,MAAM,4BAA4B,SAAS,wBAAwB,SAAS,QAAQ;SAC9F,CAAC,CAAC;IACJ,CAAC;IAMD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,GAAG,CACjD,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,GAAG,CACjC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,UAAU,CAAC,IAAI,CAAC;QACf,IAAI,EAAE,GAAG,KAAK,eAAe;QAC7B,KAAK,EAAE,GAAG,MAAM,IAAI,gBAAgB,EAAE;KACtC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACnB,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,SAAoB,EACpB,QAA4B,EACf,EAAE,CACf,0BAA0B,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/dist/tsc/redis/redisClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisClient.d.ts","sourceRoot":"","sources":["../../../src/redis/redisClient.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,UAAU,EAAK,MAAM,KAAK,CAAC;AAEvD,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AAEtC,eAAO,MAAM,mBAAmB,WACvB,eAAe,QACjB,MAAM,EAAE,KACZ,OAAO,CAAC,MAAM,EAAE,CAsBlB,CAAC;AAEF,eAAO,MAAM,qBAAqB,WACzB,eAAe,QACjB,MAAM,EAAE,UACN,MAAM,KACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAA;CAAE,CAgBpE,CAAC;AAOF,eAAO,MAAM,iBAAiB,GAAI,CAAC,WACzB,OAAO,EAAE,gBACJ,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UACrC,MAAM,KACZ,CAAC,EAcD,CAAC"}

package/dist/tsc/redis/redisClient.js

@@ -0,0 +1,64 @@
+import { z } from "zod";
+export const REDIS_BATCH_SIZE = 1_000;
+export const getMissingRedisKeys = async (client, keys) => {
+    const queries = client.multi();
+    keys.map((key) => {
+        queries.exists(key);
+    });
+    const records = await queries.exec();
+    const missingKeys = [];
+    records.map((exists, recordIndex) => {
+        if ("0" === String(exists)) {
+            const key = keys[recordIndex];
+            if (key) {
+                missingKeys.push(key);
+            }
+        }
+    });
+    return missingKeys;
+};
+export const fetchRedisHashRecords = async (client, keys, logger) => {
+    const rulesPipe = client.multi();
+    const expirationPipe = client.multi();
+    for (const key of keys) {
+        rulesPipe.hGetAll(key);
+        expirationPipe.expireTime(key);
+    }
+    const records = (await rulesPipe.exec());
+    const expirationRecords = (await expirationPipe.exec());
+    return {
+        records: records,
+        expirations: parseExpirationRecords(expirationRecords, logger),
+    };
+};
+export const parseRedisRecords = (records, recordSchema, logger) => records.flatMap((record) => {
+    const parseResult = recordSchema.safeParse(record);
+    if (parseResult.success) {
+        return [parseResult.data];
+    }
+    logger.error(() => ({
+        msg: "Failed to parse Redis record",
+        data: { record, error: parseResult.error },
+    }));
+    return [];
+});
+const expirationRecordSchema = z.coerce.number();
+const UNSET_EXPIRATION_VALUE = -1;
+const parseExpirationRecords = (records, logger) => records.flatMap((record) => {
+    const parseResult = expirationRecordSchema.safeParse(record);
+    if (parseResult.success) {
+        const expiration = UNSET_EXPIRATION_VALUE === parseResult.data
+            ? undefined
+            : parseResult.data;
+        return [expiration];
+    }
+    logger.error(() => ({
+        msg: "Failed to parse Redis expiration record",
+        data: {
+            record,
+            error: parseResult.error,
+        },
+    }));
+    return [undefined];
+});
+//# sourceMappingURL=redisClient.js.map

package/dist/tsc/redis/redisClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisClient.js","sourceRoot":"","sources":["../../../src/redis/redisClient.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAiC,CAAC,EAAE,MAAM,KAAK,CAAC;AAEvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACvC,MAAuB,EACvB,IAAc,EACM,EAAE;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAE/B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAc,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAEhD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;QACnC,IAAI,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;YAE9B,IAAI,GAAG,EAAE,CAAC;gBACT,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACzC,MAAuB,EACvB,IAAc,EACd,MAAc,EACwD,EAAE;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAEtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvB,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAa,CAAC;IACrD,MAAM,iBAAiB,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAAc,CAAC;IAErE,OAAO;QACN,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,CAAC;KAC9D,CAAC;AACH,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,OAAkB,EAClB,YAA6C,EAC7C,MAAc,EACR,EAAE,CACR,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAEnD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACnB,GAAG,EAAE,8BAA8B;QACnC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE;KAC1C,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,CAAC;AACX,CAAC,CAAC,CAAC;AAEJ,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;AAEjD,MAAM,sBAAsB,GAAG,CAAC,CAAC,CAAC;AAElC,MAAM,sBAAsB,GAAG,CAC9B,OAAkB,EAClB,MAAc,EACW,EAAE,CAC3B,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IAC1B,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,GACf,sBAAsB,KAAK,WAAW,CAAC,IAAI;YAC1C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;QAErB,OAAO,CAAC,UAAU,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACnB,GAAG,EAAE,yCAAyC;QAC9C,IAAI,EAAE;YACL,MAAM;YACN,KAAK,EAAE,WAAW,CAAC,KAAK;SACxB;KACD,CAAC,CAAC,CAAC;IAGJ,OAAO,CAAC,SAAS,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}

package/dist/tsc/redis/redisRuleIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRuleIndex.d.ts","sourceRoot":"","sources":["../../../src/redis/redisRuleIndex.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,KAAK,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AACzE,OAAO,KAAK,EACX,UAAU,EAKV,MAAM,iBAAiB,CAAC;AAGzB,eAAO,MAAM,iBAAiB,EAAE,gBAIL,CAAC;AAE5B,eAAO,MAAM,yBAAyB,EAAE,gBA0BL,CAAC;AAEpC,eAAO,MAAM,oBAAoB,EAAE,gBAGR,CAAC;AAE5B,eAAO,MAAM,sBAAsB,EAAE,gBAKL,CAAC;AAUjC,eAAO,MAAM,qBAAqB,EAAE,gBAiBR,CAAC;AAE7B,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAGvE,eAAO,MAAM,4BAA4B,SAAS,CAAC;AAMnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,eAAO,MAAM,qBAAqB,EAAE,UAOnC,CAAC;AAEF,eAAO,MAAM,qBAAqB,SAAU,UAAU,KAAG,MACD,CAAC"}

package/dist/tsc/redis/redisRuleIndex.js

@@ -0,0 +1,54 @@
+import { SCHEMA_FIELD_TYPE } from "@redis/search";
+import { makeAccessRuleHash } from "#policy/transformRule.js";
+export const userIpRedisSchema = {
+    numericIpMaskMin: { type: SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
+    numericIpMaskMax: { type: SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
+    numericIp: { type: SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
+};
+export const userAttributesRedisSchema = {
+    userId: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    ja4Hash: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    headersHash: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    userAgentHash: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    headHash: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    coords: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true, SEPARATOR: "|" },
+    countryCode: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    asn: { type: SCHEMA_FIELD_TYPE.NUMERIC, INDEXMISSING: true },
+    os: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    browser: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    headerMatch: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    headerName: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    headerValue: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    headerOperator: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    webBotAuthAgent: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+};
+export const userScopeRedisSchema = {
+    ...userAttributesRedisSchema,
+    ...userIpRedisSchema,
+};
+export const policyScopeRedisSchema = {
+    clientId: {
+        type: SCHEMA_FIELD_TYPE.TAG,
+        INDEXMISSING: true,
+    },
+};
+export const accessRuleRedisSchema = {
+    ...policyScopeRedisSchema,
+    ...userScopeRedisSchema,
+    groupId: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    type: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+    deferToVerify: { type: SCHEMA_FIELD_TYPE.TAG, INDEXMISSING: true },
+};
+export const ACCESS_RULES_REDIS_INDEX_NAME = "index:user-access-rules";
+export const ACCESS_RULE_REDIS_KEY_PREFIX = "uar:";
+export { GLOBAL_CLIENT_SCOPE_SENTINEL } from "#policy/rule.js";
+export const accessRulesRedisIndex = {
+    name: ACCESS_RULES_REDIS_INDEX_NAME,
+    schema: accessRuleRedisSchema,
+    options: {
+        ON: "HASH",
+        PREFIX: [ACCESS_RULE_REDIS_KEY_PREFIX],
+    },
+};
+export const getAccessRuleRedisKey = (rule) => ACCESS_RULE_REDIS_KEY_PREFIX + makeAccessRuleHash(rule);
+//# sourceMappingURL=redisRuleIndex.js.map

package/dist/tsc/redis/redisRuleIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRuleIndex.js","sourceRoot":"","sources":["../../../src/redis/redisRuleIndex.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAyB,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAQzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,CAAC,MAAM,iBAAiB,GAAqB;IAClD,gBAAgB,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE;IACzE,gBAAgB,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE;IACzE,SAAS,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE;CACxC,CAAC;AAE5B,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAC5D,WAAW,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAChE,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAE7D,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;IAC3E,WAAW,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAChE,GAAG,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE;IAC5D,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IACvD,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAU5D,WAAW,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAChE,UAAU,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAC/D,WAAW,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAChE,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IACnE,eAAe,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;CAClC,CAAC;AAEpC,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACrD,GAAG,yBAAyB;IAC5B,GAAG,iBAAiB;CACM,CAAC;AAE5B,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACvD,QAAQ,EAAE;QACT,IAAI,EAAE,iBAAiB,CAAC,GAAG;QAC3B,YAAY,EAAE,IAAI;KAClB;CAC8B,CAAC;AAUjC,MAAM,CAAC,MAAM,qBAAqB,GAAqB;IACtD,GAAG,sBAAsB;IACzB,GAAG,oBAAoB;IACvB,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAM5D,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;IAOzD,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;CACvC,CAAC;AAE7B,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAGvE,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAMnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAChD,IAAI,EAAE,6BAA6B;IACnC,MAAM,EAAE,qBAAqB;IAC7B,OAAO,EAAE;QACR,EAAE,EAAE,MAAe;QACnB,MAAM,EAAE,CAAC,4BAA4B,CAAC;KACtC;CACD,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAgB,EAAU,EAAE,CACjE,4BAA4B,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC"}

package/dist/tsc/redis/redisRulesStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesStorage.d.ts","sourceRoot":"","sources":["../../../src/redis/redisRulesStorage.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAEX,kBAAkB,EAElB,MAAM,yBAAyB,CAAC;AAOjC,eAAO,MAAM,6BAA6B,eAC7B,eAAe,UACnB,MAAM,KACZ,kBAqBF,CAAC"}