@rangka/core 0.0.1

package/dist/auth/__tests__/scope-registry.test.js

@@ -0,0 +1,261 @@
+import { describe, it, expect } from 'vitest';
+import { ScopeRegistry, ScopeResolutionError } from '../scope-registry.js';
+import { SchemaRegistry } from '../../schema/registry.js';
+function makeModel(overrides) {
+    return {
+        app: overrides.module ?? 'test',
+        module: overrides.module ?? 'test',
+        name: overrides.qualifiedName.split('.')[1],
+        auditLog: false,
+        traits: [],
+        fields: [],
+        indexes: [],
+        ...overrides,
+    };
+}
+function linkField(name, model) {
+    return {
+        name,
+        config: { type: 'link', model },
+        provenance: { source: 'base' },
+    };
+}
+describe('ScopeRegistry', () => {
+    describe('scope registration', () => {
+        it('registers scopes from modules', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: {
+                        company: { model: 'core.company', default: 'user.default_company', switchable: true },
+                    },
+                },
+            ];
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core', fields: [] }),
+            ]);
+            const scopeRegistry = new ScopeRegistry(modules, schemaRegistry);
+            const scope = scopeRegistry.getScope('company');
+            expect(scope).toBeDefined();
+            expect(scope.name).toBe('company');
+            expect(scope.definition.model).toBe('core.company');
+            expect(scope.module).toBe('core');
+        });
+        it('registers multiple scopes from different modules', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: {
+                        company: { model: 'core.company', default: 'user.default_company' },
+                    },
+                },
+                {
+                    name: 'cms',
+                    label: 'CMS',
+                    scopes: {
+                        workspace: { model: 'cms.workspace', default: 'user.default_workspace' },
+                    },
+                },
+            ];
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                makeModel({ qualifiedName: 'cms.workspace', module: 'cms' }),
+            ]);
+            const scopeRegistry = new ScopeRegistry(modules, schemaRegistry);
+            expect(scopeRegistry.getAllScopes()).toHaveLength(2);
+            expect(scopeRegistry.getScope('company')).toBeDefined();
+            expect(scopeRegistry.getScope('workspace')).toBeDefined();
+        });
+        it('throws on duplicate scope name across modules', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: { company: { model: 'core.company', default: 'user.default_company' } },
+                },
+                {
+                    name: 'sales',
+                    label: 'Sales',
+                    scopes: { company: { model: 'sales.company', default: 'user.company' } },
+                },
+            ];
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                makeModel({ qualifiedName: 'sales.company', module: 'sales' }),
+            ]);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(ScopeResolutionError);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(/Scope "company" declared by module "sales" conflicts/);
+        });
+        it('handles modules without scopes', () => {
+            const modules = [
+                { name: 'core', label: 'Core' },
+                { name: 'sales', label: 'Sales' },
+            ];
+            const schemaRegistry = new SchemaRegistry([]);
+            const scopeRegistry = new ScopeRegistry(modules, schemaRegistry);
+            expect(scopeRegistry.getAllScopes()).toHaveLength(0);
+        });
+    });
+    describe('model binding resolution', () => {
+        it('resolves scope column from link field targeting scope model', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: { company: { model: 'core.company', default: 'user.default_company' } },
+                },
+            ];
+            const invoiceModel = makeModel({
+                qualifiedName: 'sales.invoice',
+                module: 'sales',
+                scope: 'company',
+                fields: [linkField('company', 'core.company'), linkField('customer', 'sales.customer')],
+            });
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                makeModel({ qualifiedName: 'sales.customer', module: 'sales' }),
+                invoiceModel,
+            ]);
+            const scopeRegistry = new ScopeRegistry(modules, schemaRegistry);
+            const binding = scopeRegistry.getModelBinding('sales.invoice');
+            expect(binding).toBeDefined();
+            expect(binding.scopeName).toBe('company');
+            expect(binding.column).toBe('company');
+            expect(binding.scopeModel).toBe('core.company');
+        });
+        it('returns undefined for models without scope', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: { company: { model: 'core.company', default: 'user.default_company' } },
+                },
+            ];
+            const customerModel = makeModel({
+                qualifiedName: 'sales.customer',
+                module: 'sales',
+                fields: [linkField('company', 'core.company')],
+            });
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                customerModel,
+            ]);
+            const scopeRegistry = new ScopeRegistry(modules, schemaRegistry);
+            expect(scopeRegistry.getModelBinding('sales.customer')).toBeUndefined();
+            expect(scopeRegistry.isModelScoped('sales.customer')).toBe(false);
+        });
+        it('isModelScoped returns true for scoped models', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: { company: { model: 'core.company', default: 'user.default_company' } },
+                },
+            ];
+            const invoiceModel = makeModel({
+                qualifiedName: 'sales.invoice',
+                module: 'sales',
+                scope: 'company',
+                fields: [linkField('company', 'core.company')],
+            });
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                invoiceModel,
+            ]);
+            const scopeRegistry = new ScopeRegistry(modules, schemaRegistry);
+            expect(scopeRegistry.isModelScoped('sales.invoice')).toBe(true);
+        });
+        it('throws when model references undefined scope', () => {
+            const modules = [{ name: 'core', label: 'Core' }];
+            const invoiceModel = makeModel({
+                qualifiedName: 'sales.invoice',
+                module: 'sales',
+                scope: 'company',
+                fields: [linkField('company', 'core.company')],
+            });
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                invoiceModel,
+            ]);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(ScopeResolutionError);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(/references scope "company" which is not defined/);
+        });
+        it('throws when model has no link field to scope model', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: { company: { model: 'core.company', default: 'user.default_company' } },
+                },
+            ];
+            const invoiceModel = makeModel({
+                qualifiedName: 'sales.invoice',
+                module: 'sales',
+                scope: 'company',
+                fields: [
+                    { name: 'total', config: { type: 'number' }, provenance: { source: 'base' } },
+                ],
+            });
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                invoiceModel,
+            ]);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(ScopeResolutionError);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(/has no link field to "core.company"/);
+        });
+        it('throws when model has multiple link fields to scope model without explicit field', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: { company: { model: 'core.company', default: 'user.default_company' } },
+                },
+            ];
+            const transferModel = makeModel({
+                qualifiedName: 'accounting.transfer',
+                module: 'accounting',
+                scope: 'company',
+                fields: [
+                    linkField('source_company', 'core.company'),
+                    linkField('target_company', 'core.company'),
+                ],
+            });
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                transferModel,
+            ]);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(ScopeResolutionError);
+            expect(() => new ScopeRegistry(modules, schemaRegistry)).toThrow(/multiple link fields.*source_company, target_company/);
+        });
+        it('uses explicit field override when model has multiple links', () => {
+            const modules = [
+                {
+                    name: 'core',
+                    label: 'Core',
+                    scopes: { company: { model: 'core.company', default: 'user.default_company' } },
+                },
+            ];
+            const transferModel = makeModel({
+                qualifiedName: 'accounting.transfer',
+                module: 'accounting',
+                scope: { name: 'company', field: 'source_company' },
+                fields: [
+                    linkField('source_company', 'core.company'),
+                    linkField('target_company', 'core.company'),
+                ],
+            });
+            const schemaRegistry = new SchemaRegistry([
+                makeModel({ qualifiedName: 'core.company', module: 'core' }),
+                transferModel,
+            ]);
+            const scopeRegistry = new ScopeRegistry(modules, schemaRegistry);
+            const binding = scopeRegistry.getModelBinding('accounting.transfer');
+            expect(binding).toBeDefined();
+            expect(binding.column).toBe('source_company');
+            expect(binding.scopeName).toBe('company');
+        });
+    });
+});
+//# sourceMappingURL=scope-registry.test.js.map

package/dist/auth/__tests__/scope-registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-registry.test.js","sourceRoot":"","sources":["../../../src/auth/__tests__/scope-registry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAI1D,SAAS,SAAS,CAAC,SAA6D;IAC9E,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,MAAM,IAAI,MAAM;QAC/B,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,MAAM;QAClC,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3C,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE;QACxC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAe,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE;wBACN,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE;qBACtF;iBACF;aACF,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;aACzE,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAEjE,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,KAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACrD,MAAM,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE;wBACN,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;qBACpE;iBACF;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE;wBACN,SAAS,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,wBAAwB,EAAE;qBACzE;iBACF;aACF,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,SAAS,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aAC7D,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAEjE,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE;iBAChF;gBACD;oBACE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,OAAO;oBACd,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE;iBACzE;aACF,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,SAAS,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;aAC/D,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAC9D,sDAAsD,CACvD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;aAClC,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;YAE9C,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACjE,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE;iBAChF;aACF,CAAC;YACF,MAAM,YAAY,GAAG,SAAS,CAAC;gBAC7B,aAAa,EAAE,eAAe;gBAC9B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;aACxF,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,SAAS,CAAC,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC/D,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YAC/D,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,CAAC,OAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE;iBAChF;aACF,CAAC;YACF,MAAM,aAAa,GAAG,SAAS,CAAC;gBAC9B,aAAa,EAAE,gBAAgB;gBAC/B,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,aAAa;aACd,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACjE,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACxE,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE;iBAChF;aACF,CAAC;YACF,MAAM,YAAY,GAAG,SAAS,CAAC;gBAC7B,aAAa,EAAE,eAAe;gBAC9B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACjE,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,SAAS,CAAC;gBAC7B,aAAa,EAAE,eAAe;gBAC9B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAC9D,iDAAiD,CAClD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE;iBAChF;aACF,CAAC;YACF,MAAM,YAAY,GAAG,SAAS,CAAC;gBAC7B,aAAa,EAAE,eAAe;gBAC9B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE;oBACN,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAS,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;iBACrF;aACF,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAC9D,qCAAqC,CACtC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;YAC1F,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE;iBAChF;aACF,CAAC;YACF,MAAM,aAAa,GAAG,SAAS,CAAC;gBAC9B,aAAa,EAAE,qBAAqB;gBACpC,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE;oBACN,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC;oBAC3C,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC;iBAC5C;aACF,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,aAAa;aACd,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAC9D,sDAAsD,CACvD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,OAAO,GAAmB;gBAC9B;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE;iBAChF;aACF,CAAC;YACF,MAAM,aAAa,GAAG,SAAS,CAAC;gBAC9B,aAAa,EAAE,qBAAqB;gBACpC,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE;gBACnD,MAAM,EAAE;oBACN,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC;oBAC3C,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC;iBAC5C;aACF,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,aAAa;aACd,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC;YACrE,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/C,MAAM,CAAC,OAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/__tests__/scopes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scopes.test.d.ts.map

package/dist/auth/__tests__/scopes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.test.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/scopes.test.ts"],"names":[],"mappings":""}

package/dist/auth/__tests__/scopes.test.js

@@ -0,0 +1,57 @@
+import { describe, it, expect } from 'vitest';
+import { applyScopeFiltersToQuery } from '../scopes.js';
+describe('scope system', () => {
+    describe('applyScopeFiltersToQuery', () => {
+        it('applies eq filters to query', () => {
+            const wheres = [];
+            const fakeQuery = {
+                where(field, op, value) {
+                    wheres.push([field, op, value]);
+                    return fakeQuery;
+                },
+            };
+            const result = applyScopeFiltersToQuery(fakeQuery, [
+                { field: 'company', operator: 'eq', value: 'C-001' },
+            ]);
+            expect(wheres).toEqual([['company', '=', 'C-001']]);
+            expect(result).toBe(fakeQuery);
+        });
+        it('applies in filters to query', () => {
+            const wheres = [];
+            const fakeQuery = {
+                where(field, op, value) {
+                    wheres.push([field, op, value]);
+                    return fakeQuery;
+                },
+            };
+            const result = applyScopeFiltersToQuery(fakeQuery, [
+                { field: 'territory', operator: 'in', value: ['North', 'East'] },
+            ]);
+            expect(wheres).toEqual([['territory', 'in', ['North', 'East']]]);
+            expect(result).toBe(fakeQuery);
+        });
+        it('applies multiple filters sequentially', () => {
+            const wheres = [];
+            const fakeQuery = {
+                where(field, op, value) {
+                    wheres.push([field, op, value]);
+                    return fakeQuery;
+                },
+            };
+            applyScopeFiltersToQuery(fakeQuery, [
+                { field: 'company', operator: 'eq', value: 'C-001' },
+                { field: 'territory', operator: 'in', value: ['North'] },
+            ]);
+            expect(wheres).toEqual([
+                ['company', '=', 'C-001'],
+                ['territory', 'in', ['North']],
+            ]);
+        });
+        it('returns query unchanged when no filters', () => {
+            const fakeQuery = { where: () => fakeQuery };
+            const result = applyScopeFiltersToQuery(fakeQuery, []);
+            expect(result).toBe(fakeQuery);
+        });
+    });
+});
+//# sourceMappingURL=scopes.test.js.map

package/dist/auth/__tests__/scopes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.test.js","sourceRoot":"","sources":["../../../src/auth/__tests__/scopes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAExD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAqC,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG;gBAChB,KAAK,CAAC,KAAa,EAAE,EAAU,EAAE,KAAc;oBAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;oBAChC,OAAO,SAAS,CAAC;gBACnB,CAAC;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,EAAE;gBACjD,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;aACrD,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAqC,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG;gBAChB,KAAK,CAAC,KAAa,EAAE,EAAU,EAAE,KAAc;oBAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;oBAChC,OAAO,SAAS,CAAC;gBACnB,CAAC;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,EAAE;gBACjD,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;aACjE,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,MAAM,GAAqC,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG;gBAChB,KAAK,CAAC,KAAa,EAAE,EAAU,EAAE,KAAc;oBAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;oBAChC,OAAO,SAAS,CAAC;gBACnB,CAAC;aACF,CAAC;YAEF,wBAAwB,CAAC,SAAS,EAAE;gBAClC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;gBACpD,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;aACzD,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC;gBACzB,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/__tests__/session.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session.test.d.ts.map

package/dist/auth/__tests__/session.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.test.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/session.test.ts"],"names":[],"mappings":""}

package/dist/auth/__tests__/session.test.js

@@ -0,0 +1,199 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import { PermissionRegistry } from '../permission-registry.js';
+import { createAuthHook, createSessionHandler, generateToken } from '../session.js';
+import { hashPassword } from '../password.js';
+import { createTestServer } from '../../__tests__/helpers.js';
+function createMockDb(data) {
+    return {
+        selectFrom(table) {
+            return {
+                selectAll() {
+                    return this;
+                },
+                select(..._args) {
+                    return this;
+                },
+                where(field, op, value) {
+                    const store = table === 'core.session'
+                        ? data.sessions
+                        : table === 'core.user'
+                            ? data.users
+                            : table === 'core.user_role'
+                                ? data.userRoles
+                                : data.roles;
+                    const filtered = store.filter((r) => {
+                        if (op === '=')
+                            return r[field] === value;
+                        if (op === 'in')
+                            return value.includes(r[field]);
+                        return false;
+                    });
+                    return {
+                        executeTakeFirst: async () => filtered[0] ?? undefined,
+                        execute: async () => filtered,
+                        where(f2, o2, v2) {
+                            const f = filtered.filter((r) => {
+                                if (o2 === '=')
+                                    return r[f2] === v2;
+                                if (o2 === 'in')
+                                    return v2.includes(r[f2]);
+                                return false;
+                            });
+                            return { executeTakeFirst: async () => f[0], execute: async () => f };
+                        },
+                    };
+                },
+                executeTakeFirst: async () => undefined,
+                execute: async () => [],
+            };
+        },
+        insertInto(_table) {
+            return {
+                values(vals) {
+                    return {
+                        returningAll() {
+                            return { executeTakeFirstOrThrow: async () => ({ id: 'new-id', ...vals }) };
+                        },
+                        execute: async () => { },
+                    };
+                },
+            };
+        },
+        deleteFrom(_table) {
+            return {
+                where() {
+                    return { execute: async () => { } };
+                },
+            };
+        },
+    };
+}
+describe('session auth hook', () => {
+    let permissionRegistry;
+    beforeEach(() => {
+        permissionRegistry = new PermissionRegistry();
+        permissionRegistry.registerRoles({ Admin: { label: 'Admin', models: {} } }, 'core');
+    });
+    it('returns 401 for missing Authorization header', async () => {
+        const db = createMockDb({ users: [], sessions: [], userRoles: [], roles: [] });
+        const server = createTestServer();
+        server.get('/test', {
+            onRequest: createAuthHook(db, permissionRegistry),
+            handler: async () => ({ ok: true }),
+        });
+        const res = await server.inject({ method: 'GET', url: '/test' });
+        expect(res.statusCode).toBe(401);
+        expect(res.json().error.code).toBe('UNAUTHORIZED');
+    });
+    it('returns 401 for invalid token', async () => {
+        const db = createMockDb({ users: [], sessions: [], userRoles: [], roles: [] });
+        const server = createTestServer();
+        server.get('/test', {
+            onRequest: createAuthHook(db, permissionRegistry),
+            handler: async () => ({ ok: true }),
+        });
+        const res = await server.inject({
+            method: 'GET',
+            url: '/test',
+            headers: { authorization: 'Bearer invalid-token' },
+        });
+        expect(res.statusCode).toBe(401);
+    });
+    it('returns 401 for expired token', async () => {
+        const expired = new Date(Date.now() - 1000).toISOString();
+        const db = createMockDb({
+            users: [{ id: 'u1', email: 'a@b.com', enabled: true }],
+            sessions: [{ id: 's1', token: 'tok', user_id: 'u1', expires_at: expired }],
+            userRoles: [],
+            roles: [],
+        });
+        const server = createTestServer();
+        server.get('/test', {
+            onRequest: createAuthHook(db, permissionRegistry),
+            handler: async () => ({ ok: true }),
+        });
+        const res = await server.inject({
+            method: 'GET',
+            url: '/test',
+            headers: { authorization: 'Bearer tok' },
+        });
+        expect(res.statusCode).toBe(401);
+        expect(res.json().error.message).toContain('expired');
+    });
+    it('authenticates valid token and attaches context', async () => {
+        const future = new Date(Date.now() + 60000).toISOString();
+        const db = createMockDb({
+            users: [{ id: 'u1', email: 'a@b.com', full_name: 'Test', enabled: true, password_hash: 'x' }],
+            sessions: [{ id: 's1', token: 'valid-tok', user_id: 'u1', expires_at: future }],
+            userRoles: [{ user_id: 'u1', role_id: 'r1' }],
+            roles: [{ id: 'r1', name: 'Admin' }],
+        });
+        const server = createTestServer();
+        server.get('/test', {
+            onRequest: createAuthHook(db, permissionRegistry),
+            handler: async (request) => {
+                const ctx = request.authContext;
+                return { email: ctx.user.email };
+            },
+        });
+        const res = await server.inject({
+            method: 'GET',
+            url: '/test',
+            headers: { authorization: 'Bearer valid-tok' },
+        });
+        expect(res.statusCode).toBe(200);
+        expect(res.json().email).toBe('a@b.com');
+    });
+});
+describe('session create endpoint', () => {
+    it('returns 401 for invalid credentials', async () => {
+        const db = createMockDb({ users: [], sessions: [], userRoles: [], roles: [] });
+        const server = createTestServer();
+        server.post('/api/core/session', createSessionHandler(db));
+        const res = await server.inject({
+            method: 'POST',
+            url: '/api/core/session',
+            payload: { email: 'bad@test.com', password: 'wrong' },
+        });
+        expect(res.statusCode).toBe(401);
+    });
+    it('returns 400 for missing fields', async () => {
+        const db = createMockDb({ users: [], sessions: [], userRoles: [], roles: [] });
+        const server = createTestServer();
+        server.post('/api/core/session', createSessionHandler(db));
+        const res = await server.inject({
+            method: 'POST',
+            url: '/api/core/session',
+            payload: {},
+        });
+        expect(res.statusCode).toBe(400);
+    });
+    it('creates session for valid credentials', async () => {
+        const pw = hashPassword('secret');
+        const db = createMockDb({
+            users: [
+                { id: 'u1', email: 'user@test.com', full_name: 'User', enabled: true, password_hash: pw },
+            ],
+            sessions: [],
+            userRoles: [],
+            roles: [],
+        });
+        const server = createTestServer();
+        server.post('/api/core/session', createSessionHandler(db));
+        const res = await server.inject({
+            method: 'POST',
+            url: '/api/core/session',
+            payload: { email: 'user@test.com', password: 'secret' },
+        });
+        expect(res.statusCode).toBe(201);
+        expect(res.json().data.token).toBeDefined();
+    });
+});
+describe('generateToken', () => {
+    it('generates a 64-character hex string', () => {
+        const token = generateToken();
+        expect(token).toHaveLength(64);
+        expect(/^[a-f0-9]+$/.test(token)).toBe(true);
+    });
+});
+//# sourceMappingURL=session.test.js.map

package/dist/auth/__tests__/session.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.test.js","sourceRoot":"","sources":["../../../src/auth/__tests__/session.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,SAAS,YAAY,CAAC,IAAuE;IAC3F,OAAO;QACL,UAAU,CAAC,KAAa;YACtB,OAAO;gBACL,SAAS;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,CAAC,GAAG,KAAY;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,KAAK,CAAC,KAAa,EAAE,EAAU,EAAE,KAAU;oBACzC,MAAM,KAAK,GACT,KAAK,KAAK,cAAc;wBACtB,CAAC,CAAC,IAAI,CAAC,QAAQ;wBACf,CAAC,CAAC,KAAK,KAAK,WAAW;4BACrB,CAAC,CAAC,IAAI,CAAC,KAAK;4BACZ,CAAC,CAAC,KAAK,KAAK,gBAAgB;gCAC1B,CAAC,CAAC,IAAI,CAAC,SAAS;gCAChB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;oBAErB,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE;wBACvC,IAAI,EAAE,KAAK,GAAG;4BAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;wBAC1C,IAAI,EAAE,KAAK,IAAI;4BAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACf,CAAC,CAAC,CAAC;oBACH,OAAO;wBACL,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS;wBACtD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;wBAC7B,KAAK,CAAC,EAAU,EAAE,EAAU,EAAE,EAAO;4BACnC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE;gCACnC,IAAI,EAAE,KAAK,GAAG;oCAAE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;gCACpC,IAAI,EAAE,KAAK,IAAI;oCAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gCAC3C,OAAO,KAAK,CAAC;4BACf,CAAC,CAAC,CAAC;4BACH,OAAO,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;wBACxE,CAAC;qBACF,CAAC;gBACJ,CAAC;gBACD,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;gBACvC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACxB,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,MAAc;YACvB,OAAO;gBACL,MAAM,CAAC,IAAS;oBACd,OAAO;wBACL,YAAY;4BACV,OAAO,EAAE,uBAAuB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;wBAC9E,CAAC;wBACD,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;qBACxB,CAAC;gBACJ,CAAC;aACF,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,MAAc;YACvB,OAAO;gBACL,KAAK;oBACH,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC;gBACrC,CAAC;aACF,CAAC;QACJ,CAAC;KACK,CAAC;AACX,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,kBAAsC,CAAC;IAE3C,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAC9C,kBAAkB,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;YAClB,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,kBAAkB,CAAC;YACjD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;YAClB,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,kBAAkB,CAAC;YACjD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,EAAE,aAAa,EAAE,sBAAsB,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACtD,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YAC1E,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;YAClB,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,kBAAkB,CAAC;YACjD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;YAC7F,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YAC/E,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC7C,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;YAClB,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,kBAAkB,CAAC;YACjD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,MAAM,GAAG,GAAI,OAAe,CAAC,WAAW,CAAC;gBACzC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,EAAE,aAAa,EAAE,kBAAkB,EAAE;SAC/C,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE;aAC1F;YACD,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE;SACxD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}