@raybase/core 0.0.2 → 0.3.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/dist/.admin-build/AdminApp.css +2 -0
- package/dist/.admin-build/AdminApp.js +77 -0
- package/dist/.admin-docs-build/AdminDocsApp.css +2 -0
- package/dist/.admin-docs-build/AdminDocsApp.js +45 -0
- package/dist/actions.d.ts +347 -0
- package/dist/actions.d.ts.map +1 -0
- package/dist/actions.js +661 -0
- package/dist/actions.js.map +1 -0
- package/dist/admin-assets/admin.7738f50720a8ed7b.css +2 -0
- package/dist/admin-assets/admin.8678cb61db34dc81.js +77 -0
- package/dist/admin-boot.d.ts +94 -0
- package/dist/admin-boot.d.ts.map +1 -0
- package/dist/admin-boot.js +139 -0
- package/dist/admin-boot.js.map +1 -0
- package/dist/admin-docs-content.d.ts +95 -0
- package/dist/admin-docs-content.d.ts.map +1 -0
- package/dist/admin-docs-content.js +463 -0
- package/dist/admin-docs-content.js.map +1 -0
- package/dist/admin-docs-ui.d.ts +11 -0
- package/dist/admin-docs-ui.d.ts.map +1 -0
- package/dist/admin-docs-ui.js +23 -0
- package/dist/admin-docs-ui.js.map +1 -0
- package/dist/admin-kit.d.ts +29 -0
- package/dist/admin-kit.js +1557 -0
- package/dist/admin-role.d.ts +8 -0
- package/dist/admin-role.d.ts.map +1 -0
- package/dist/admin-role.js +22 -0
- package/dist/admin-role.js.map +1 -0
- package/dist/admin-ui.d.ts +3 -0
- package/dist/admin-ui.d.ts.map +1 -0
- package/dist/admin-ui.js +16 -0
- package/dist/admin-ui.js.map +1 -0
- package/dist/agent-ai-chat.d.ts +127 -0
- package/dist/agent-ai-chat.d.ts.map +1 -0
- package/dist/agent-ai-chat.js +5975 -0
- package/dist/agent-ai-chat.js.map +1 -0
- package/dist/agent-chapter-archive.d.ts +214 -0
- package/dist/agent-chapter-archive.d.ts.map +1 -0
- package/dist/agent-chapter-archive.js +696 -0
- package/dist/agent-chapter-archive.js.map +1 -0
- package/dist/agent-chapter-search.d.ts +116 -0
- package/dist/agent-chapter-search.d.ts.map +1 -0
- package/dist/agent-chapter-search.js +605 -0
- package/dist/agent-chapter-search.js.map +1 -0
- package/dist/agent-chapter-tools.d.ts +45 -0
- package/dist/agent-chapter-tools.d.ts.map +1 -0
- package/dist/agent-chapter-tools.js +344 -0
- package/dist/agent-chapter-tools.js.map +1 -0
- package/dist/agent-chapters.d.ts +228 -0
- package/dist/agent-chapters.d.ts.map +1 -0
- package/dist/agent-chapters.js +737 -0
- package/dist/agent-chapters.js.map +1 -0
- package/dist/agent-data-parts.d.ts +167 -0
- package/dist/agent-data-parts.d.ts.map +1 -0
- package/dist/agent-data-parts.js +68 -0
- package/dist/agent-data-parts.js.map +1 -0
- package/dist/agent-errors.d.ts +41 -0
- package/dist/agent-errors.d.ts.map +1 -0
- package/dist/agent-errors.js +191 -0
- package/dist/agent-errors.js.map +1 -0
- package/dist/agent-follow-up-store.d.ts +273 -0
- package/dist/agent-follow-up-store.d.ts.map +1 -0
- package/dist/agent-follow-up-store.js +703 -0
- package/dist/agent-follow-up-store.js.map +1 -0
- package/dist/agent-follow-ups.d.ts +314 -0
- package/dist/agent-follow-ups.d.ts.map +1 -0
- package/dist/agent-follow-ups.js +840 -0
- package/dist/agent-follow-ups.js.map +1 -0
- package/dist/agent-memory.d.ts +323 -0
- package/dist/agent-memory.d.ts.map +1 -0
- package/dist/agent-memory.js +1270 -0
- package/dist/agent-memory.js.map +1 -0
- package/dist/agent-message-parts.d.ts +58 -0
- package/dist/agent-message-parts.d.ts.map +1 -0
- package/dist/agent-message-parts.js +163 -0
- package/dist/agent-message-parts.js.map +1 -0
- package/dist/agent-remote-mcp-credentials.d.ts +154 -0
- package/dist/agent-remote-mcp-credentials.d.ts.map +1 -0
- package/dist/agent-remote-mcp-credentials.js +287 -0
- package/dist/agent-remote-mcp-credentials.js.map +1 -0
- package/dist/agent-remote-mcp-crypto.d.ts +32 -0
- package/dist/agent-remote-mcp-crypto.d.ts.map +1 -0
- package/dist/agent-remote-mcp-crypto.js +101 -0
- package/dist/agent-remote-mcp-crypto.js.map +1 -0
- package/dist/agent-remote-mcp-install.d.ts +299 -0
- package/dist/agent-remote-mcp-install.d.ts.map +1 -0
- package/dist/agent-remote-mcp-install.js +785 -0
- package/dist/agent-remote-mcp-install.js.map +1 -0
- package/dist/agent-remote-mcp-oauth.d.ts +73 -0
- package/dist/agent-remote-mcp-oauth.d.ts.map +1 -0
- package/dist/agent-remote-mcp-oauth.js +344 -0
- package/dist/agent-remote-mcp-oauth.js.map +1 -0
- package/dist/agent-remote-mcp-transport.d.ts +46 -0
- package/dist/agent-remote-mcp-transport.d.ts.map +1 -0
- package/dist/agent-remote-mcp-transport.js +225 -0
- package/dist/agent-remote-mcp-transport.js.map +1 -0
- package/dist/agent-remote-mcp.d.ts +147 -0
- package/dist/agent-remote-mcp.d.ts.map +1 -0
- package/dist/agent-remote-mcp.js +681 -0
- package/dist/agent-remote-mcp.js.map +1 -0
- package/dist/agent-room-redaction.d.ts +66 -0
- package/dist/agent-room-redaction.d.ts.map +1 -0
- package/dist/agent-room-redaction.js +264 -0
- package/dist/agent-room-redaction.js.map +1 -0
- package/dist/agent-rooms.d.ts +209 -0
- package/dist/agent-rooms.d.ts.map +1 -0
- package/dist/agent-rooms.js +244 -0
- package/dist/agent-rooms.js.map +1 -0
- package/dist/agent-runtime.d.ts +541 -0
- package/dist/agent-runtime.d.ts.map +1 -0
- package/dist/agent-runtime.js +4260 -0
- package/dist/agent-runtime.js.map +1 -0
- package/dist/agent-skill-archive.d.ts +20 -0
- package/dist/agent-skill-archive.d.ts.map +1 -0
- package/dist/agent-skill-archive.js +316 -0
- package/dist/agent-skill-archive.js.map +1 -0
- package/dist/agent-skill-discovery.d.ts +96 -0
- package/dist/agent-skill-discovery.d.ts.map +1 -0
- package/dist/agent-skill-discovery.js +464 -0
- package/dist/agent-skill-discovery.js.map +1 -0
- package/dist/agent-skill-format.d.ts +57 -0
- package/dist/agent-skill-format.d.ts.map +1 -0
- package/dist/agent-skill-format.js +238 -0
- package/dist/agent-skill-format.js.map +1 -0
- package/dist/agent-skill-import.d.ts +64 -0
- package/dist/agent-skill-import.d.ts.map +1 -0
- package/dist/agent-skill-import.js +295 -0
- package/dist/agent-skill-import.js.map +1 -0
- package/dist/agent-skill-publish.d.ts +51 -0
- package/dist/agent-skill-publish.d.ts.map +1 -0
- package/dist/agent-skill-publish.js +136 -0
- package/dist/agent-skill-publish.js.map +1 -0
- package/dist/agent-skill-store.d.ts +252 -0
- package/dist/agent-skill-store.d.ts.map +1 -0
- package/dist/agent-skill-store.js +514 -0
- package/dist/agent-skill-store.js.map +1 -0
- package/dist/agent-skills.d.ts +85 -0
- package/dist/agent-skills.d.ts.map +1 -0
- package/dist/agent-skills.js +291 -0
- package/dist/agent-skills.js.map +1 -0
- package/dist/agent-transcript-pager.d.ts +77 -0
- package/dist/agent-transcript-pager.d.ts.map +1 -0
- package/dist/agent-transcript-pager.js +210 -0
- package/dist/agent-transcript-pager.js.map +1 -0
- package/dist/agent-user-data-parts.d.ts +20 -0
- package/dist/agent-user-data-parts.d.ts.map +1 -0
- package/dist/agent-user-data-parts.js +161 -0
- package/dist/agent-user-data-parts.js.map +1 -0
- package/dist/agent-user-transcript.d.ts +46 -0
- package/dist/agent-user-transcript.d.ts.map +1 -0
- package/dist/agent-user-transcript.js +106 -0
- package/dist/agent-user-transcript.js.map +1 -0
- package/dist/agent-voice-notes.d.ts +15 -0
- package/dist/agent-voice-notes.d.ts.map +1 -0
- package/dist/agent-voice-notes.js +17 -0
- package/dist/agent-voice-notes.js.map +1 -0
- package/dist/agent-wakes.d.ts +213 -0
- package/dist/agent-wakes.d.ts.map +1 -0
- package/dist/agent-wakes.js +534 -0
- package/dist/agent-wakes.js.map +1 -0
- package/dist/agent.d.ts +1780 -0
- package/dist/agent.d.ts.map +1 -0
- package/dist/agent.js +3123 -0
- package/dist/agent.js.map +1 -0
- package/dist/ai.d.ts +583 -0
- package/dist/ai.d.ts.map +1 -0
- package/dist/ai.js +1858 -0
- package/dist/ai.js.map +1 -0
- package/dist/app-manifest.d.ts +255 -0
- package/dist/app-manifest.d.ts.map +1 -0
- package/dist/app-manifest.js +372 -0
- package/dist/app-manifest.js.map +1 -0
- package/dist/app-users.d.ts +30 -0
- package/dist/app-users.d.ts.map +1 -0
- package/dist/app-users.js +91 -0
- package/dist/app-users.js.map +1 -0
- package/dist/audit-archive.d.ts +85 -0
- package/dist/audit-archive.d.ts.map +1 -0
- package/dist/audit-archive.js +178 -0
- package/dist/audit-archive.js.map +1 -0
- package/dist/audit.d.ts +54 -0
- package/dist/audit.d.ts.map +1 -0
- package/dist/audit.js +95 -0
- package/dist/audit.js.map +1 -0
- package/dist/auth-logger.d.ts +28 -0
- package/dist/auth-logger.d.ts.map +1 -0
- package/dist/auth-logger.js +53 -0
- package/dist/auth-logger.js.map +1 -0
- package/dist/auth-password-secret.d.ts +59 -0
- package/dist/auth-password-secret.d.ts.map +1 -0
- package/dist/auth-password-secret.js +409 -0
- package/dist/auth-password-secret.js.map +1 -0
- package/dist/auth-schema.d.ts +120 -0
- package/dist/auth-schema.d.ts.map +1 -0
- package/dist/auth-schema.js +285 -0
- package/dist/auth-schema.js.map +1 -0
- package/dist/auth.d.ts +321 -0
- package/dist/auth.d.ts.map +1 -0
- package/dist/auth.js +1562 -0
- package/dist/auth.js.map +1 -0
- package/dist/backup-archive.d.ts +257 -0
- package/dist/backup-archive.d.ts.map +1 -0
- package/dist/backup-archive.js +2068 -0
- package/dist/backup-archive.js.map +1 -0
- package/dist/backup-crypto.d.ts +313 -0
- package/dist/backup-crypto.d.ts.map +1 -0
- package/dist/backup-crypto.js +693 -0
- package/dist/backup-crypto.js.map +1 -0
- package/dist/backup-format.d.ts +200 -0
- package/dist/backup-format.d.ts.map +1 -0
- package/dist/backup-format.js +1247 -0
- package/dist/backup-format.js.map +1 -0
- package/dist/cli.d.ts +9 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +15 -0
- package/dist/cli.js.map +1 -0
- package/dist/clock.d.ts +35 -0
- package/dist/clock.d.ts.map +1 -0
- package/dist/clock.js +83 -0
- package/dist/clock.js.map +1 -0
- package/dist/data-client.d.ts +187 -0
- package/dist/data-client.d.ts.map +1 -0
- package/dist/data-client.js +590 -0
- package/dist/data-client.js.map +1 -0
- package/dist/data-secrets.d.ts +164 -0
- package/dist/data-secrets.d.ts.map +1 -0
- package/dist/data-secrets.js +383 -0
- package/dist/data-secrets.js.map +1 -0
- package/dist/db.d.ts +453 -0
- package/dist/db.d.ts.map +1 -0
- package/dist/db.js +324 -0
- package/dist/db.js.map +1 -0
- package/dist/dev-activity.d.ts +48 -0
- package/dist/dev-activity.d.ts.map +1 -0
- package/dist/dev-activity.js +50 -0
- package/dist/dev-activity.js.map +1 -0
- package/dist/do.d.ts +429 -0
- package/dist/do.d.ts.map +1 -0
- package/dist/do.js +4526 -0
- package/dist/do.js.map +1 -0
- package/dist/email.d.ts +137 -0
- package/dist/email.d.ts.map +1 -0
- package/dist/email.js +527 -0
- package/dist/email.js.map +1 -0
- package/dist/generated/admin-assets.d.ts +16 -0
- package/dist/generated/admin-assets.d.ts.map +1 -0
- package/dist/generated/admin-assets.js +16 -0
- package/dist/generated/admin-assets.js.map +1 -0
- package/dist/generated/admin-docs-assets.d.ts +3 -0
- package/dist/generated/admin-docs-assets.d.ts.map +1 -0
- package/dist/generated/admin-docs-assets.js +3 -0
- package/dist/generated/admin-docs-assets.js.map +1 -0
- package/dist/handoff-consumer.d.ts +79 -0
- package/dist/handoff-consumer.d.ts.map +1 -0
- package/dist/handoff-consumer.js +300 -0
- package/dist/handoff-consumer.js.map +1 -0
- package/dist/handoff.d.ts +70 -0
- package/dist/handoff.d.ts.map +1 -0
- package/dist/handoff.js +228 -0
- package/dist/handoff.js.map +1 -0
- package/dist/host-auth.d.ts +47 -0
- package/dist/host-auth.d.ts.map +1 -0
- package/dist/host-auth.js +59 -0
- package/dist/host-auth.js.map +1 -0
- package/dist/host-user.d.ts +15 -0
- package/dist/host-user.d.ts.map +1 -0
- package/dist/host-user.js +23 -0
- package/dist/host-user.js.map +1 -0
- package/dist/html.d.ts +35 -0
- package/dist/html.d.ts.map +1 -0
- package/dist/html.js +634 -0
- package/dist/html.js.map +1 -0
- package/dist/http-error.d.ts +13 -0
- package/dist/http-error.d.ts.map +1 -0
- package/dist/http-error.js +15 -0
- package/dist/http-error.js.map +1 -0
- package/dist/imports.d.ts +219 -0
- package/dist/imports.d.ts.map +1 -0
- package/dist/imports.js +571 -0
- package/dist/imports.js.map +1 -0
- package/dist/index.d.ts +78 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +76 -0
- package/dist/index.js.map +1 -0
- package/dist/inference-tape.d.ts +64 -0
- package/dist/inference-tape.d.ts.map +1 -0
- package/dist/inference-tape.js +278 -0
- package/dist/inference-tape.js.map +1 -0
- package/dist/internal.d.ts +15 -0
- package/dist/internal.d.ts.map +1 -0
- package/dist/internal.js +48 -0
- package/dist/internal.js.map +1 -0
- package/dist/jobs.d.ts +796 -0
- package/dist/jobs.d.ts.map +1 -0
- package/dist/jobs.js +538 -0
- package/dist/jobs.js.map +1 -0
- package/dist/json-schema.d.ts +91 -0
- package/dist/json-schema.d.ts.map +1 -0
- package/dist/json-schema.js +884 -0
- package/dist/json-schema.js.map +1 -0
- package/dist/knowledge.d.ts +33 -0
- package/dist/knowledge.d.ts.map +1 -0
- package/dist/knowledge.js +348 -0
- package/dist/knowledge.js.map +1 -0
- package/dist/local-dev-chrome.d.ts +29 -0
- package/dist/local-dev-chrome.d.ts.map +1 -0
- package/dist/local-dev-chrome.js +514 -0
- package/dist/local-dev-chrome.js.map +1 -0
- package/dist/local-dev-personas.d.ts +15 -0
- package/dist/local-dev-personas.d.ts.map +1 -0
- package/dist/local-dev-personas.js +46 -0
- package/dist/local-dev-personas.js.map +1 -0
- package/dist/mcp.d.ts +567 -0
- package/dist/mcp.d.ts.map +1 -0
- package/dist/mcp.js +2480 -0
- package/dist/mcp.js.map +1 -0
- package/dist/modules.d.ts +145 -0
- package/dist/modules.d.ts.map +1 -0
- package/dist/modules.js +164 -0
- package/dist/modules.js.map +1 -0
- package/dist/notification-client.d.ts +94 -0
- package/dist/notification-client.d.ts.map +1 -0
- package/dist/notification-client.js +127 -0
- package/dist/notification-client.js.map +1 -0
- package/dist/notifications.d.ts +447 -0
- package/dist/notifications.d.ts.map +1 -0
- package/dist/notifications.js +1625 -0
- package/dist/notifications.js.map +1 -0
- package/dist/operator-data-query.d.ts +117 -0
- package/dist/operator-data-query.d.ts.map +1 -0
- package/dist/operator-data-query.js +431 -0
- package/dist/operator-data-query.js.map +1 -0
- package/dist/operator-mcp.d.ts +63 -0
- package/dist/operator-mcp.d.ts.map +1 -0
- package/dist/operator-mcp.js +2828 -0
- package/dist/operator-mcp.js.map +1 -0
- package/dist/outbound-https.d.ts +24 -0
- package/dist/outbound-https.d.ts.map +1 -0
- package/dist/outbound-https.js +172 -0
- package/dist/outbound-https.js.map +1 -0
- package/dist/pitr.d.ts +60 -0
- package/dist/pitr.d.ts.map +1 -0
- package/dist/pitr.js +94 -0
- package/dist/pitr.js.map +1 -0
- package/dist/platform.d.ts +199 -0
- package/dist/platform.d.ts.map +1 -0
- package/dist/platform.js +196 -0
- package/dist/platform.js.map +1 -0
- package/dist/policies.d.ts +115 -0
- package/dist/policies.d.ts.map +1 -0
- package/dist/policies.js +158 -0
- package/dist/policies.js.map +1 -0
- package/dist/principal.d.ts +143 -0
- package/dist/principal.d.ts.map +1 -0
- package/dist/principal.js +174 -0
- package/dist/principal.js.map +1 -0
- package/dist/realtime.d.ts +280 -0
- package/dist/realtime.d.ts.map +1 -0
- package/dist/realtime.js +578 -0
- package/dist/realtime.js.map +1 -0
- package/dist/retrieval.d.ts +263 -0
- package/dist/retrieval.d.ts.map +1 -0
- package/dist/retrieval.js +602 -0
- package/dist/retrieval.js.map +1 -0
- package/dist/runtime-error-client.d.ts +10 -0
- package/dist/runtime-error-client.d.ts.map +1 -0
- package/dist/runtime-error-client.js +70 -0
- package/dist/runtime-error-client.js.map +1 -0
- package/dist/runtime-errors.d.ts +180 -0
- package/dist/runtime-errors.d.ts.map +1 -0
- package/dist/runtime-errors.js +572 -0
- package/dist/runtime-errors.js.map +1 -0
- package/dist/schema.d.ts +434 -0
- package/dist/schema.d.ts.map +1 -0
- package/dist/schema.js +232 -0
- package/dist/schema.js.map +1 -0
- package/dist/search.d.ts +216 -0
- package/dist/search.d.ts.map +1 -0
- package/dist/search.js +785 -0
- package/dist/search.js.map +1 -0
- package/dist/settings.d.ts +191 -0
- package/dist/settings.d.ts.map +1 -0
- package/dist/settings.js +478 -0
- package/dist/settings.js.map +1 -0
- package/dist/sql.d.ts +7 -0
- package/dist/sql.d.ts.map +1 -0
- package/dist/sql.js +30 -0
- package/dist/sql.js.map +1 -0
- package/dist/storage-client.d.ts +69 -0
- package/dist/storage-client.d.ts.map +1 -0
- package/dist/storage-client.js +469 -0
- package/dist/storage-client.js.map +1 -0
- package/dist/storage.d.ts +21 -0
- package/dist/storage.d.ts.map +1 -0
- package/dist/storage.js +82 -0
- package/dist/storage.js.map +1 -0
- package/dist/subject-domains.d.ts +15 -0
- package/dist/subject-domains.d.ts.map +1 -0
- package/dist/subject-domains.js +38 -0
- package/dist/subject-domains.js.map +1 -0
- package/dist/support.d.ts +132 -0
- package/dist/support.d.ts.map +1 -0
- package/dist/support.js +483 -0
- package/dist/support.js.map +1 -0
- package/dist/system-tables.d.ts +12 -0
- package/dist/system-tables.d.ts.map +1 -0
- package/dist/system-tables.js +225 -0
- package/dist/system-tables.js.map +1 -0
- package/dist/test.d.ts +57 -0
- package/dist/test.d.ts.map +1 -0
- package/dist/test.js +454 -0
- package/dist/test.js.map +1 -0
- package/dist/vite.d.ts +82 -0
- package/dist/vite.d.ts.map +1 -0
- package/dist/vite.js +82 -0
- package/dist/vite.js.map +1 -0
- package/dist/webpush-crypto.d.ts +39 -0
- package/dist/webpush-crypto.d.ts.map +1 -0
- package/dist/webpush-crypto.js +213 -0
- package/dist/webpush-crypto.js.map +1 -0
- package/dist/webpush-private.d.ts +11 -0
- package/dist/webpush-private.d.ts.map +1 -0
- package/dist/webpush-private.js +11 -0
- package/dist/webpush-private.js.map +1 -0
- package/dist/webpush.d.ts +86 -0
- package/dist/webpush.d.ts.map +1 -0
- package/dist/webpush.js +375 -0
- package/dist/webpush.js.map +1 -0
- package/dist/worker.d.ts +185 -0
- package/dist/worker.d.ts.map +1 -0
- package/dist/worker.js +13021 -0
- package/dist/worker.js.map +1 -0
- package/package.json +161 -8
- package/README.md +0 -3
|
@@ -0,0 +1,590 @@
|
|
|
1
|
+
import { classifyReadPolicy, evaluatePolicy, policySubjectId } from "./policies.js";
|
|
2
|
+
import { principalId as resolvePrincipalId } from "./principal.js";
|
|
3
|
+
import { RaybaseHttpError } from "./http-error.js";
|
|
4
|
+
import { RaybaseDataSecretError, dataSecretLimits, raybaseSecretRedacted, redactSecretValue, secretColumnNames } from "./data-secrets.js";
|
|
5
|
+
import { nowIso, q, randomId, toSqlValue } from "./sql.js";
|
|
6
|
+
import { z } from "zod";
|
|
7
|
+
export class RaybaseDataReadDeniedError extends RaybaseHttpError {
|
|
8
|
+
action = "read";
|
|
9
|
+
table;
|
|
10
|
+
principalKind;
|
|
11
|
+
principalId;
|
|
12
|
+
constructor(input) {
|
|
13
|
+
const principalKind = input.context.principal?.kind ?? "user";
|
|
14
|
+
const rawPrincipalId = input.context.principal
|
|
15
|
+
? resolvePrincipalId(input.context.principal)
|
|
16
|
+
: policySubjectId(input.context.user);
|
|
17
|
+
const principalId = String(rawPrincipalId ?? policySubjectId(input.context.user)).slice(0, 256);
|
|
18
|
+
super({
|
|
19
|
+
status: 403,
|
|
20
|
+
code: "data_read_denied",
|
|
21
|
+
message: `Read access to table ${input.table} is denied for ${principalKind} principal ${principalId}.`
|
|
22
|
+
});
|
|
23
|
+
this.name = "RaybaseDataReadDeniedError";
|
|
24
|
+
this.table = input.table;
|
|
25
|
+
this.principalKind = principalKind;
|
|
26
|
+
this.principalId = principalId;
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
export class RaybaseInvariantError extends Error {
|
|
30
|
+
table;
|
|
31
|
+
invariant;
|
|
32
|
+
constructor(input) {
|
|
33
|
+
super(input.message);
|
|
34
|
+
this.name = "RaybaseInvariantError";
|
|
35
|
+
this.table = input.table;
|
|
36
|
+
this.invariant = input.invariant;
|
|
37
|
+
}
|
|
38
|
+
}
|
|
39
|
+
function getTable(schema, tableName) {
|
|
40
|
+
const table = schema.tables[tableName];
|
|
41
|
+
if (!table)
|
|
42
|
+
throw new Error(`Unknown table: ${tableName}`);
|
|
43
|
+
return table;
|
|
44
|
+
}
|
|
45
|
+
function assertColumn(table, column) {
|
|
46
|
+
if (!table.columns[column]) {
|
|
47
|
+
throw new Error(`Unknown column ${column} on table ${table.name}`);
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
/** Ciphertext order and content carry no meaning, so a secret column only answers "is it set?". */
|
|
51
|
+
export function assertSecretColumnFilter(table, column, condition) {
|
|
52
|
+
if (table.columns[column]?.kind !== "secret")
|
|
53
|
+
return;
|
|
54
|
+
const nullCheck = (condition.op === "eq" || condition.op === "neq") && (condition.value === null || condition.value === undefined);
|
|
55
|
+
if (nullCheck || condition.op === "isEmpty" || condition.op === "notEmpty")
|
|
56
|
+
return;
|
|
57
|
+
throw new RaybaseDataSecretError("data_secret_invalid", `${table.name}.${column} is a secret column; filter it only with isEmpty or notEmpty`);
|
|
58
|
+
}
|
|
59
|
+
export function assertSortableColumn(table, column) {
|
|
60
|
+
if (table.columns[column]?.kind === "secret") {
|
|
61
|
+
throw new RaybaseDataSecretError("data_secret_invalid", `${table.name}.${column} is a secret column and cannot be sorted`);
|
|
62
|
+
}
|
|
63
|
+
}
|
|
64
|
+
function isFilterCondition(value) {
|
|
65
|
+
return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.op === "string";
|
|
66
|
+
}
|
|
67
|
+
function normalizeColumnFilter(raw) {
|
|
68
|
+
if (Array.isArray(raw))
|
|
69
|
+
return raw;
|
|
70
|
+
if (isFilterCondition(raw))
|
|
71
|
+
return [raw];
|
|
72
|
+
return [{ op: "eq", value: raw }];
|
|
73
|
+
}
|
|
74
|
+
function escapeLike(value) {
|
|
75
|
+
return value.replace(/[\\%_]/g, (char) => `\\${char}`);
|
|
76
|
+
}
|
|
77
|
+
const comparisonSql = { gt: ">", gte: ">=", lt: "<", lte: "<=" };
|
|
78
|
+
function conditionSql(column, condition, params) {
|
|
79
|
+
const name = q(column);
|
|
80
|
+
const value = toSqlValue(condition.value);
|
|
81
|
+
const likePattern = () => escapeLike(typeof condition.value === "string" || typeof condition.value === "number" ? String(condition.value) : "");
|
|
82
|
+
switch (condition.op) {
|
|
83
|
+
case "eq":
|
|
84
|
+
if (value === null)
|
|
85
|
+
return `${name} IS NULL`;
|
|
86
|
+
params.push(value);
|
|
87
|
+
return `${name} = ?`;
|
|
88
|
+
case "neq":
|
|
89
|
+
// IS NOT is null-safe: "status is not active" keeps rows with null status.
|
|
90
|
+
if (value === null)
|
|
91
|
+
return `${name} IS NOT NULL`;
|
|
92
|
+
params.push(value);
|
|
93
|
+
return `${name} IS NOT ?`;
|
|
94
|
+
case "gt":
|
|
95
|
+
case "gte":
|
|
96
|
+
case "lt":
|
|
97
|
+
case "lte":
|
|
98
|
+
if (value === null)
|
|
99
|
+
throw new Error(`Filter ${condition.op} on ${column} requires a value`);
|
|
100
|
+
params.push(value);
|
|
101
|
+
return `${name} ${comparisonSql[condition.op]} ?`;
|
|
102
|
+
case "contains":
|
|
103
|
+
params.push(`%${likePattern()}%`);
|
|
104
|
+
return `${name} LIKE ? ESCAPE '\\'`;
|
|
105
|
+
case "notContains":
|
|
106
|
+
params.push(`%${likePattern()}%`);
|
|
107
|
+
return `(${name} IS NULL OR ${name} NOT LIKE ? ESCAPE '\\')`;
|
|
108
|
+
case "startsWith":
|
|
109
|
+
params.push(`${likePattern()}%`);
|
|
110
|
+
return `${name} LIKE ? ESCAPE '\\'`;
|
|
111
|
+
case "endsWith":
|
|
112
|
+
params.push(`%${likePattern()}`);
|
|
113
|
+
return `${name} LIKE ? ESCAPE '\\'`;
|
|
114
|
+
case "isEmpty":
|
|
115
|
+
return `(${name} IS NULL OR ${name} = '')`;
|
|
116
|
+
case "notEmpty":
|
|
117
|
+
return `(${name} IS NOT NULL AND ${name} != '')`;
|
|
118
|
+
default:
|
|
119
|
+
throw new Error(`Unknown filter operator: ${String(condition.op)}`);
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
const searchableKinds = new Set(["id", "text", "longText", "json"]);
|
|
123
|
+
/** Compile filter/search options into WHERE clauses and bind params. */
|
|
124
|
+
export function compileListFilters(table, options) {
|
|
125
|
+
const where = [];
|
|
126
|
+
const params = [];
|
|
127
|
+
for (const [column, raw] of Object.entries(options.filter ?? {})) {
|
|
128
|
+
assertColumn(table, column);
|
|
129
|
+
for (const condition of normalizeColumnFilter(raw)) {
|
|
130
|
+
assertSecretColumnFilter(table, column, condition);
|
|
131
|
+
where.push(conditionSql(column, condition, params));
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
const search = options.search?.trim();
|
|
135
|
+
if (search) {
|
|
136
|
+
const columns = Object.entries(table.columns)
|
|
137
|
+
.filter(([, column]) => searchableKinds.has(column.kind))
|
|
138
|
+
.map(([name]) => name);
|
|
139
|
+
if (columns.length) {
|
|
140
|
+
const pattern = `%${escapeLike(search)}%`;
|
|
141
|
+
where.push(`(${columns.map((name) => `${q(name)} LIKE ? ESCAPE '\\'`).join(" OR ")})`);
|
|
142
|
+
params.push(...columns.map(() => pattern));
|
|
143
|
+
}
|
|
144
|
+
}
|
|
145
|
+
return { where, params };
|
|
146
|
+
}
|
|
147
|
+
function parseStoredValue(value, kind) {
|
|
148
|
+
if (value === null || value === undefined)
|
|
149
|
+
return null;
|
|
150
|
+
if (kind === "secret")
|
|
151
|
+
return redactSecretValue(value);
|
|
152
|
+
if (kind === "boolean")
|
|
153
|
+
return Boolean(value);
|
|
154
|
+
if (kind === "json" && typeof value === "string") {
|
|
155
|
+
try {
|
|
156
|
+
return JSON.parse(value);
|
|
157
|
+
}
|
|
158
|
+
catch {
|
|
159
|
+
return value;
|
|
160
|
+
}
|
|
161
|
+
}
|
|
162
|
+
return value;
|
|
163
|
+
}
|
|
164
|
+
function normalizeRow(table, row) {
|
|
165
|
+
const output = {};
|
|
166
|
+
for (const [columnName, column] of Object.entries(table.columns)) {
|
|
167
|
+
output[columnName] = parseStoredValue(row[columnName], column.kind);
|
|
168
|
+
}
|
|
169
|
+
return output;
|
|
170
|
+
}
|
|
171
|
+
function coerceBoolean(value) {
|
|
172
|
+
if (value === "true" || value === "1" || value === 1)
|
|
173
|
+
return true;
|
|
174
|
+
if (value === "false" || value === "0" || value === 0)
|
|
175
|
+
return false;
|
|
176
|
+
return value;
|
|
177
|
+
}
|
|
178
|
+
function columnZod(table, key) {
|
|
179
|
+
const column = table.columns[key];
|
|
180
|
+
if (!column)
|
|
181
|
+
throw new Error(`Unknown column ${key} on table ${table.name}`);
|
|
182
|
+
if (column.enumValues?.length) {
|
|
183
|
+
return z.enum(column.enumValues);
|
|
184
|
+
}
|
|
185
|
+
switch (column.kind) {
|
|
186
|
+
case "integer":
|
|
187
|
+
return z.coerce.number().int();
|
|
188
|
+
case "real":
|
|
189
|
+
return z.coerce.number();
|
|
190
|
+
case "boolean":
|
|
191
|
+
return z.preprocess(coerceBoolean, z.boolean());
|
|
192
|
+
case "json":
|
|
193
|
+
return z.unknown();
|
|
194
|
+
case "date":
|
|
195
|
+
return z.string().regex(/^\d{4}-\d{2}-\d{2}/, `${key} must be an ISO date`);
|
|
196
|
+
case "datetime":
|
|
197
|
+
return z.string().min(1, `${key} is required`);
|
|
198
|
+
case "secret":
|
|
199
|
+
return z
|
|
200
|
+
.string()
|
|
201
|
+
.max(dataSecretLimits.maxPlaintextBytes, `${key} exceeds ${dataSecretLimits.maxPlaintextBytes} bytes`)
|
|
202
|
+
.refine((value) => value.trim().length > 0, `${key} must not be empty; write null to clear a secret`)
|
|
203
|
+
.describe(`Write-only secret. Reads return "${raybaseSecretRedacted}" when set; send the full new value to replace it, or null to clear it.`);
|
|
204
|
+
default:
|
|
205
|
+
return z.string();
|
|
206
|
+
}
|
|
207
|
+
}
|
|
208
|
+
export function inputSchemaForTable(table, mode) {
|
|
209
|
+
const shape = {};
|
|
210
|
+
for (const [key, column] of Object.entries(table.columns)) {
|
|
211
|
+
if (column.primaryKey || column.auto)
|
|
212
|
+
continue;
|
|
213
|
+
const valueSchema = columnZod(table, key).nullable();
|
|
214
|
+
shape[key] = mode === "create" && column.required ? valueSchema : valueSchema.optional();
|
|
215
|
+
}
|
|
216
|
+
return z.object(shape).strict();
|
|
217
|
+
}
|
|
218
|
+
function validateInput(table, input, mode) {
|
|
219
|
+
const schema = mode === "update" ? inputSchemaForTable(table, mode).partial() : inputSchemaForTable(table, mode);
|
|
220
|
+
const parsed = schema.parse(input);
|
|
221
|
+
const values = {};
|
|
222
|
+
for (const [key, value] of Object.entries(parsed)) {
|
|
223
|
+
if (value !== undefined)
|
|
224
|
+
values[key] = toSqlValue(value);
|
|
225
|
+
}
|
|
226
|
+
return values;
|
|
227
|
+
}
|
|
228
|
+
function can(table, action, ctx, row, newRow) {
|
|
229
|
+
return evaluatePolicy(table.policies?.[action], {
|
|
230
|
+
user: ctx.user,
|
|
231
|
+
principal: ctx.principal,
|
|
232
|
+
row,
|
|
233
|
+
newRow,
|
|
234
|
+
action,
|
|
235
|
+
adminOverride: ctx.adminOverride
|
|
236
|
+
});
|
|
237
|
+
}
|
|
238
|
+
/**
|
|
239
|
+
* Compile today's complete table-policy vocabulary into a SQL predicate.
|
|
240
|
+
* Returning null is intentionally reserved for future policy primitives: the
|
|
241
|
+
* list path then performs a correctness-preserving post-filter over all rows.
|
|
242
|
+
*/
|
|
243
|
+
export function compilePolicyPredicate(table, policy, ctx) {
|
|
244
|
+
if (ctx.adminOverride)
|
|
245
|
+
return { sql: "1 = 1", params: [] };
|
|
246
|
+
if (!policy)
|
|
247
|
+
return { sql: "0 = 1", params: [] };
|
|
248
|
+
switch (policy.kind) {
|
|
249
|
+
case "allowAll":
|
|
250
|
+
return { sql: "1 = 1", params: [] };
|
|
251
|
+
case "denyAll":
|
|
252
|
+
return { sql: "0 = 1", params: [] };
|
|
253
|
+
case "role":
|
|
254
|
+
case "servicePrincipal":
|
|
255
|
+
case "operator":
|
|
256
|
+
return {
|
|
257
|
+
sql: evaluatePolicy(policy, {
|
|
258
|
+
user: ctx.user,
|
|
259
|
+
principal: ctx.principal,
|
|
260
|
+
action: "read",
|
|
261
|
+
adminOverride: ctx.adminOverride
|
|
262
|
+
}) ? "1 = 1" : "0 = 1",
|
|
263
|
+
params: []
|
|
264
|
+
};
|
|
265
|
+
case "owns":
|
|
266
|
+
assertColumn(table, policy.column);
|
|
267
|
+
// evaluatePolicy() treats a missing/null owner as false. SQLite's `=`
|
|
268
|
+
// instead yields NULL, which would make `not(owns(...))` incorrectly
|
|
269
|
+
// exclude nullable rows unless the primitive is normalized to 0/1.
|
|
270
|
+
return { sql: `COALESCE(${q(policy.column)} = ?, 0)`, params: [policySubjectId(ctx.user)] };
|
|
271
|
+
case "anyOf":
|
|
272
|
+
case "allOf": {
|
|
273
|
+
const compiled = policy.policies.map((candidate) => compilePolicyPredicate(table, candidate, ctx));
|
|
274
|
+
if (compiled.some((candidate) => candidate === null))
|
|
275
|
+
return null;
|
|
276
|
+
const predicates = compiled;
|
|
277
|
+
const emptyValue = policy.kind === "anyOf" ? "0 = 1" : "1 = 1";
|
|
278
|
+
if (!predicates.length)
|
|
279
|
+
return { sql: emptyValue, params: [] };
|
|
280
|
+
return {
|
|
281
|
+
sql: `(${predicates.map((candidate) => candidate.sql).join(policy.kind === "anyOf" ? " OR " : " AND ")})`,
|
|
282
|
+
params: predicates.flatMap((candidate) => candidate.params)
|
|
283
|
+
};
|
|
284
|
+
}
|
|
285
|
+
case "not": {
|
|
286
|
+
const compiled = compilePolicyPredicate(table, policy.policy, ctx);
|
|
287
|
+
return compiled ? { sql: `NOT (${compiled.sql})`, params: compiled.params } : null;
|
|
288
|
+
}
|
|
289
|
+
default:
|
|
290
|
+
return null;
|
|
291
|
+
}
|
|
292
|
+
}
|
|
293
|
+
async function enforceInvariants(table, action, ctx, row, previous) {
|
|
294
|
+
for (const invariant of table.invariants ?? []) {
|
|
295
|
+
if (invariant.on && !invariant.on.includes(action))
|
|
296
|
+
continue;
|
|
297
|
+
let result;
|
|
298
|
+
try {
|
|
299
|
+
result = await invariant.check({
|
|
300
|
+
table: table.name,
|
|
301
|
+
action,
|
|
302
|
+
row,
|
|
303
|
+
previous,
|
|
304
|
+
user: ctx.user,
|
|
305
|
+
source: ctx.source
|
|
306
|
+
});
|
|
307
|
+
}
|
|
308
|
+
catch (error) {
|
|
309
|
+
throw new RaybaseInvariantError({
|
|
310
|
+
table: table.name,
|
|
311
|
+
invariant: invariant.name,
|
|
312
|
+
message: error instanceof Error ? error.message : invariant.message ?? `Invariant ${invariant.name} failed`
|
|
313
|
+
});
|
|
314
|
+
}
|
|
315
|
+
if (result === false || typeof result === "string") {
|
|
316
|
+
const message = typeof result === "string" && result.trim() ? result : invariant.message ?? `Invariant ${invariant.name} failed`;
|
|
317
|
+
throw new RaybaseInvariantError({ table: table.name, invariant: invariant.name, message });
|
|
318
|
+
}
|
|
319
|
+
}
|
|
320
|
+
}
|
|
321
|
+
function executorFor(db, tableName, ctx) {
|
|
322
|
+
return "executorFor" in db ? db.executorFor(tableName, ctx) : db;
|
|
323
|
+
}
|
|
324
|
+
/**
|
|
325
|
+
* The redaction marker comes back from every read, so a client that writes a
|
|
326
|
+
* row it read must not overwrite the secret with it: the marker means "no new
|
|
327
|
+
* plaintext" — the stored secret stays on update, and stays unset on create.
|
|
328
|
+
*/
|
|
329
|
+
function dropRedactionMarkers(table, values) {
|
|
330
|
+
for (const column of secretColumnNames(table)) {
|
|
331
|
+
if (values[column] === raybaseSecretRedacted)
|
|
332
|
+
delete values[column];
|
|
333
|
+
}
|
|
334
|
+
}
|
|
335
|
+
function redactedAuditValues(table, values) {
|
|
336
|
+
const output = { ...values };
|
|
337
|
+
for (const column of secretColumnNames(table)) {
|
|
338
|
+
if (column in output)
|
|
339
|
+
output[column] = redactSecretValue(output[column]);
|
|
340
|
+
}
|
|
341
|
+
return output;
|
|
342
|
+
}
|
|
343
|
+
export function createDataClient(db, schema, ctx) {
|
|
344
|
+
function requireSecrets() {
|
|
345
|
+
if (!ctx.secrets) {
|
|
346
|
+
throw new RaybaseDataSecretError("data_secrets_key_missing", "This data client was built without the deployment data-secrets cipher");
|
|
347
|
+
}
|
|
348
|
+
return ctx.secrets;
|
|
349
|
+
}
|
|
350
|
+
async function sealSecretValues(table, values, rowId) {
|
|
351
|
+
const columns = secretColumnNames(table).filter((column) => values[column] !== undefined && values[column] !== null);
|
|
352
|
+
if (!columns.length)
|
|
353
|
+
return values;
|
|
354
|
+
const secrets = requireSecrets();
|
|
355
|
+
const sealed = { ...values };
|
|
356
|
+
for (const column of columns) {
|
|
357
|
+
sealed[column] = await secrets.seal({ table: table.name, column, rowId }, values[column]);
|
|
358
|
+
}
|
|
359
|
+
return sealed;
|
|
360
|
+
}
|
|
361
|
+
async function runMutation(executor, sql, params, change) {
|
|
362
|
+
if (!ctx.notify) {
|
|
363
|
+
await executor.run(sql, params);
|
|
364
|
+
return change;
|
|
365
|
+
}
|
|
366
|
+
const committed = executor.runWithChange && ctx.realtime?.enabled
|
|
367
|
+
? await executor.runWithChange({ sql, params, change, realtime: ctx.realtime })
|
|
368
|
+
: (await executor.run(sql, params), change);
|
|
369
|
+
await ctx.notify(committed);
|
|
370
|
+
return committed;
|
|
371
|
+
}
|
|
372
|
+
function assertTableReadable(table) {
|
|
373
|
+
if (classifyReadPolicy(table.policies?.read, ctx) === "denied") {
|
|
374
|
+
throw new RaybaseDataReadDeniedError({ table: table.name, context: ctx });
|
|
375
|
+
}
|
|
376
|
+
}
|
|
377
|
+
async function assertReadable(tableName) {
|
|
378
|
+
assertTableReadable(getTable(schema, tableName));
|
|
379
|
+
}
|
|
380
|
+
async function list(tableName, options = {}) {
|
|
381
|
+
const table = getTable(schema, tableName);
|
|
382
|
+
assertTableReadable(table);
|
|
383
|
+
const executor = executorFor(db, tableName, ctx);
|
|
384
|
+
const { where, params: filterParams } = compileListFilters(table, options);
|
|
385
|
+
const policy = compilePolicyPredicate(table, table.policies?.read, ctx);
|
|
386
|
+
const limit = Math.min(Math.max(options.limit ?? 100, 1), 500);
|
|
387
|
+
const offset = Math.max(options.offset ?? 0, 0);
|
|
388
|
+
if (!policy) {
|
|
389
|
+
console.warn(`Raybase could not compile the read policy for ${table.name}; ` +
|
|
390
|
+
"falling back to correctness-preserving post-filter pagination");
|
|
391
|
+
let fallbackSql = `SELECT * FROM ${q(table.name)}`;
|
|
392
|
+
if (where.length)
|
|
393
|
+
fallbackSql += ` WHERE ${where.join(" AND ")}`;
|
|
394
|
+
if (options.sort) {
|
|
395
|
+
assertColumn(table, options.sort.column);
|
|
396
|
+
assertSortableColumn(table, options.sort.column);
|
|
397
|
+
fallbackSql += ` ORDER BY ${q(options.sort.column)} ${options.sort.direction === "desc" ? "DESC" : "ASC"}`;
|
|
398
|
+
}
|
|
399
|
+
const filtered = (await executor.all(fallbackSql, filterParams))
|
|
400
|
+
.map((row) => normalizeRow(table, row))
|
|
401
|
+
.filter((row) => can(table, "read", ctx, row));
|
|
402
|
+
return {
|
|
403
|
+
rows: filtered.slice(offset, offset + limit),
|
|
404
|
+
total: filtered.length
|
|
405
|
+
};
|
|
406
|
+
}
|
|
407
|
+
let sql = `SELECT * FROM ${q(table.name)}`;
|
|
408
|
+
const policyWhere = [...where, policy.sql];
|
|
409
|
+
if (policyWhere.length)
|
|
410
|
+
sql += ` WHERE ${policyWhere.join(" AND ")}`;
|
|
411
|
+
if (options.sort) {
|
|
412
|
+
assertColumn(table, options.sort.column);
|
|
413
|
+
assertSortableColumn(table, options.sort.column);
|
|
414
|
+
sql += ` ORDER BY ${q(options.sort.column)} ${options.sort.direction === "desc" ? "DESC" : "ASC"}`;
|
|
415
|
+
}
|
|
416
|
+
sql += " LIMIT ? OFFSET ?";
|
|
417
|
+
const predicateParams = [...filterParams, ...policy.params];
|
|
418
|
+
const rawRows = await executor.all(sql, [...predicateParams, limit, offset]);
|
|
419
|
+
const totalRow = await executor.first(`SELECT COUNT(*) AS "count" FROM ${q(table.name)}${policyWhere.length ? ` WHERE ${policyWhere.join(" AND ")}` : ""}`, predicateParams);
|
|
420
|
+
const rows = rawRows.map((row) => normalizeRow(table, row));
|
|
421
|
+
return { rows, total: Number(totalRow?.count ?? 0) };
|
|
422
|
+
}
|
|
423
|
+
async function loadVisibleRow(tableName, id) {
|
|
424
|
+
const table = getTable(schema, tableName);
|
|
425
|
+
const executor = executorFor(db, tableName, ctx);
|
|
426
|
+
const row = await executor.first(`SELECT * FROM ${q(table.name)} WHERE "id" = ?`, [id]);
|
|
427
|
+
if (!row)
|
|
428
|
+
return null;
|
|
429
|
+
const normalized = normalizeRow(table, row);
|
|
430
|
+
return can(table, "read", ctx, normalized) ? normalized : null;
|
|
431
|
+
}
|
|
432
|
+
async function get(tableName, id) {
|
|
433
|
+
const table = getTable(schema, tableName);
|
|
434
|
+
assertTableReadable(table);
|
|
435
|
+
return loadVisibleRow(tableName, id);
|
|
436
|
+
}
|
|
437
|
+
async function authorize(tableName, action, id, newRow) {
|
|
438
|
+
const table = getTable(schema, tableName);
|
|
439
|
+
const executor = executorFor(db, tableName, ctx);
|
|
440
|
+
if (action === "create") {
|
|
441
|
+
return can(table, "create", ctx, undefined, newRow);
|
|
442
|
+
}
|
|
443
|
+
if (!id)
|
|
444
|
+
return false;
|
|
445
|
+
const row = await executor.first(`SELECT * FROM ${q(table.name)} WHERE "id" = ?`, [id]);
|
|
446
|
+
if (!row)
|
|
447
|
+
return false;
|
|
448
|
+
const currentRow = normalizeRow(table, row);
|
|
449
|
+
if (action === "read")
|
|
450
|
+
return can(table, "read", ctx, currentRow);
|
|
451
|
+
if (action === "update")
|
|
452
|
+
return can(table, "update", ctx, currentRow, newRow ?? currentRow);
|
|
453
|
+
return can(table, "delete", ctx, currentRow);
|
|
454
|
+
}
|
|
455
|
+
async function create(tableName, input) {
|
|
456
|
+
const table = getTable(schema, tableName);
|
|
457
|
+
const executor = executorFor(db, tableName, ctx);
|
|
458
|
+
const now = nowIso();
|
|
459
|
+
const values = validateInput(table, input, "create");
|
|
460
|
+
dropRedactionMarkers(table, values);
|
|
461
|
+
for (const [columnName, column] of Object.entries(table.columns)) {
|
|
462
|
+
if (column.primaryKey && values[columnName] === undefined)
|
|
463
|
+
values[columnName] = randomId(table.name);
|
|
464
|
+
if (column.auto === "createdBy")
|
|
465
|
+
values[columnName] = policySubjectId(ctx.user);
|
|
466
|
+
if (column.auto === "createdAt" || column.auto === "updatedAt")
|
|
467
|
+
values[columnName] = now;
|
|
468
|
+
}
|
|
469
|
+
const newRow = normalizeRow(table, { ...values });
|
|
470
|
+
if (!can(table, "create", ctx, undefined, newRow)) {
|
|
471
|
+
throw new Error(`Policy denied create on ${table.name}`);
|
|
472
|
+
}
|
|
473
|
+
await enforceInvariants(table, "create", ctx, newRow);
|
|
474
|
+
const stored = await sealSecretValues(table, values, String(values.id));
|
|
475
|
+
const columns = Object.keys(stored);
|
|
476
|
+
const change = await runMutation(executor, `INSERT INTO ${q(table.name)} (${columns.map(q).join(", ")}) VALUES (${columns.map(() => "?").join(", ")})`, columns.map((column) => stored[column]), {
|
|
477
|
+
tableName: table.name,
|
|
478
|
+
op: "create",
|
|
479
|
+
rowId: String(values.id),
|
|
480
|
+
newRow,
|
|
481
|
+
actorId: policySubjectId(ctx.user),
|
|
482
|
+
adminOverride: ctx.adminOverride === true
|
|
483
|
+
});
|
|
484
|
+
await ctx.afterMutation?.(change);
|
|
485
|
+
await ctx.audit?.({
|
|
486
|
+
action: ctx.adminOverride ? "admin.create" : "data.create",
|
|
487
|
+
target: { type: table.name, id: String(values.id) },
|
|
488
|
+
metadata: redactedAuditValues(table, values)
|
|
489
|
+
});
|
|
490
|
+
return (await loadVisibleRow(tableName, String(values.id))) ?? newRow;
|
|
491
|
+
}
|
|
492
|
+
async function update(tableName, id, input) {
|
|
493
|
+
const table = getTable(schema, tableName);
|
|
494
|
+
const executor = executorFor(db, tableName, ctx);
|
|
495
|
+
const current = await executor.first(`SELECT * FROM ${q(table.name)} WHERE "id" = ?`, [id]);
|
|
496
|
+
if (!current)
|
|
497
|
+
throw new Error(`No ${table.name} row found for id ${id}`);
|
|
498
|
+
const currentRow = normalizeRow(table, current);
|
|
499
|
+
const values = validateInput(table, input, "update");
|
|
500
|
+
dropRedactionMarkers(table, values);
|
|
501
|
+
for (const [columnName, column] of Object.entries(table.columns)) {
|
|
502
|
+
if (column.auto === "updatedAt")
|
|
503
|
+
values[columnName] = nowIso();
|
|
504
|
+
}
|
|
505
|
+
const newRow = normalizeRow(table, { ...currentRow, ...values });
|
|
506
|
+
if (!can(table, "update", ctx, currentRow, newRow)) {
|
|
507
|
+
throw new Error(`Policy denied update on ${table.name}`);
|
|
508
|
+
}
|
|
509
|
+
await enforceInvariants(table, "update", ctx, newRow, currentRow);
|
|
510
|
+
const stored = await sealSecretValues(table, values, id);
|
|
511
|
+
const columns = Object.keys(stored);
|
|
512
|
+
if (columns.length) {
|
|
513
|
+
const change = await runMutation(executor, `UPDATE ${q(table.name)} SET ${columns.map((column) => `${q(column)} = ?`).join(", ")} WHERE "id" = ?`, [...columns.map((column) => stored[column]), id], {
|
|
514
|
+
tableName: table.name,
|
|
515
|
+
op: "update",
|
|
516
|
+
rowId: id,
|
|
517
|
+
oldRow: currentRow,
|
|
518
|
+
newRow,
|
|
519
|
+
actorId: policySubjectId(ctx.user),
|
|
520
|
+
adminOverride: ctx.adminOverride === true
|
|
521
|
+
});
|
|
522
|
+
await ctx.afterMutation?.(change);
|
|
523
|
+
}
|
|
524
|
+
await ctx.audit?.({
|
|
525
|
+
action: ctx.adminOverride ? "admin.update" : "data.update",
|
|
526
|
+
target: { type: table.name, id },
|
|
527
|
+
metadata: redactedAuditValues(table, values)
|
|
528
|
+
});
|
|
529
|
+
return (await loadVisibleRow(tableName, id)) ?? newRow;
|
|
530
|
+
}
|
|
531
|
+
async function remove(tableName, id) {
|
|
532
|
+
const table = getTable(schema, tableName);
|
|
533
|
+
const executor = executorFor(db, tableName, ctx);
|
|
534
|
+
const current = await executor.first(`SELECT * FROM ${q(table.name)} WHERE "id" = ?`, [id]);
|
|
535
|
+
if (!current)
|
|
536
|
+
throw new Error(`No ${table.name} row found for id ${id}`);
|
|
537
|
+
const currentRow = normalizeRow(table, current);
|
|
538
|
+
if (!can(table, "delete", ctx, currentRow)) {
|
|
539
|
+
throw new Error(`Policy denied delete on ${table.name}`);
|
|
540
|
+
}
|
|
541
|
+
const change = await runMutation(executor, `DELETE FROM ${q(table.name)} WHERE "id" = ?`, [id], {
|
|
542
|
+
tableName: table.name,
|
|
543
|
+
op: "delete",
|
|
544
|
+
rowId: id,
|
|
545
|
+
oldRow: currentRow,
|
|
546
|
+
actorId: policySubjectId(ctx.user),
|
|
547
|
+
adminOverride: ctx.adminOverride === true
|
|
548
|
+
});
|
|
549
|
+
await ctx.afterMutation?.(change);
|
|
550
|
+
await ctx.audit?.({
|
|
551
|
+
action: ctx.adminOverride ? "admin.delete" : "data.delete",
|
|
552
|
+
target: { type: table.name, id }
|
|
553
|
+
});
|
|
554
|
+
return { ok: true };
|
|
555
|
+
}
|
|
556
|
+
async function revealSecret(tableName, id, column) {
|
|
557
|
+
const table = getTable(schema, tableName);
|
|
558
|
+
const columnName = String(column);
|
|
559
|
+
if (table.columns[columnName]?.kind !== "secret") {
|
|
560
|
+
throw new RaybaseDataSecretError("data_secret_invalid", `${table.name}.${columnName} is not a secret column`);
|
|
561
|
+
}
|
|
562
|
+
assertTableReadable(table);
|
|
563
|
+
const row = await executorFor(db, tableName, ctx).first(`SELECT * FROM ${q(table.name)} WHERE "id" = ?`, [id]);
|
|
564
|
+
if (!row || !can(table, "read", ctx, normalizeRow(table, row)))
|
|
565
|
+
return null;
|
|
566
|
+
const stored = row[columnName];
|
|
567
|
+
if (stored === null || stored === undefined || stored === "")
|
|
568
|
+
return null;
|
|
569
|
+
if (!ctx.audit) {
|
|
570
|
+
throw new RaybaseDataSecretError("data_secret_unaudited", "revealSecret() requires an audited data context; it is available on action and job contexts");
|
|
571
|
+
}
|
|
572
|
+
const opened = await requireSecrets().open({ table: table.name, column: columnName, rowId: id }, String(stored));
|
|
573
|
+
await ctx.audit({
|
|
574
|
+
action: "data.secret.reveal",
|
|
575
|
+
target: { type: table.name, id },
|
|
576
|
+
metadata: {
|
|
577
|
+
column: columnName,
|
|
578
|
+
keyId: opened.keyId,
|
|
579
|
+
...(opened.legacyPlaintext ? { legacyPlaintext: true } : {}),
|
|
580
|
+
...(ctx.adminOverride ? { adminOverride: true } : {}),
|
|
581
|
+
...(ctx.source?.surface ? { surface: ctx.source.surface } : {}),
|
|
582
|
+
...(ctx.source?.actionName ? { actionName: ctx.source.actionName } : {})
|
|
583
|
+
},
|
|
584
|
+
...(ctx.source ? { source: ctx.source } : {})
|
|
585
|
+
});
|
|
586
|
+
return opened.value;
|
|
587
|
+
}
|
|
588
|
+
return { assertReadable, list, get, authorize, create, update, delete: remove, revealSecret };
|
|
589
|
+
}
|
|
590
|
+
//# sourceMappingURL=data-client.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"data-client.js","sourceRoot":"","sources":["../src/data-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAA2C,MAAM,eAAe,CAAC;AAC7H,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAyB,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAGlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAiB,MAAM,UAAU,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgLxB,MAAM,OAAO,0BAA2B,SAAQ,gBAAoC;IACzE,MAAM,GAAG,MAAe,CAAC;IACzB,KAAK,CAAS;IACd,aAAa,CAA2B;IACxC,WAAW,CAAS;IAE7B,YAAY,KAA0E;QACpF,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,IAAI,MAAM,CAAC;QAC9D,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS;YAC5C,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChG,KAAK,CAAC;YACJ,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,wBAAwB,KAAK,CAAC,KAAK,kBAAkB,aAAa,cAAc,WAAW,GAAG;SACxG,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,YAAY,KAA4D;QACtE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IACnC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,MAAqB,EAAE,SAAiB;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB,EAAE,MAAc;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAID,mGAAmG;AACnG,MAAM,UAAU,wBAAwB,CAAC,KAAuB,EAAE,MAAc,EAAE,SAA0B;IAC1G,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO;IACrD,MAAM,SAAS,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACnI,IAAI,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO;IACnF,MAAM,IAAI,sBAAsB,CAC9B,qBAAqB,EACrB,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,8DAA8D,CACtF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAuB,EAAE,MAAc;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,sBAAsB,CAAC,qBAAqB,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,0CAA0C,CAAC,CAAC;IAC7H,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAQ,KAAyB,CAAC,EAAE,KAAK,QAAQ,CAAC;AACnI,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAiB;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,aAAa,GAAsC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAEpG,SAAS,YAAY,CAAC,MAAc,EAAE,SAA0B,EAAE,MAAkB;IAClF,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChJ,QAAQ,SAAS,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,IAAI;YACP,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,UAAU,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,GAAG,IAAI,MAAM,CAAC;QACvB,KAAK,KAAK;YACR,2EAA2E;YAC3E,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,cAAc,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,GAAG,IAAI,WAAW,CAAC;QAC5B,KAAK,IAAI,CAAC;QACV,KAAK,KAAK,CAAC;QACX,KAAK,IAAI,CAAC;QACV,KAAK,KAAK;YACR,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,CAAC,EAAE,OAAO,MAAM,mBAAmB,CAAC,CAAC;YAC5F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,GAAG,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC;QACpD,KAAK,UAAU;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC;YAClC,OAAO,GAAG,IAAI,qBAAqB,CAAC;QACtC,KAAK,aAAa;YAChB,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC;YAClC,OAAO,IAAI,IAAI,eAAe,IAAI,0BAA0B,CAAC;QAC/D,KAAK,YAAY;YACf,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,EAAE,GAAG,CAAC,CAAC;YACjC,OAAO,GAAG,IAAI,qBAAqB,CAAC;QACtC,KAAK,UAAU;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,EAAE,CAAC,CAAC;YACjC,OAAO,GAAG,IAAI,qBAAqB,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,IAAI,IAAI,eAAe,IAAI,QAAQ,CAAC;QAC7C,KAAK,UAAU;YACb,OAAO,IAAI,IAAI,oBAAoB,IAAI,SAAS,CAAC;QACnD;YACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAE,SAA8B,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpE,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,KAAmB,EAAE,OAA+C;IACrG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,MAAM,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvF,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB,EAAE,GAA4B;IACrE,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,UAAU,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB,EAAE,GAAW;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAmC,CAAC,CAAC;IAC5D,CAAC;IAED,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;QACjC,KAAK,MAAM;YACT,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM;YACT,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,GAAG,sBAAsB,CAAC,CAAC;QAC9E,KAAK,UAAU;YACb,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,cAAc,CAAC,CAAC;QACjD,KAAK,QAAQ;YACX,OAAO,CAAC;iBACL,MAAM,EAAE;iBACR,GAAG,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,GAAG,GAAG,YAAY,gBAAgB,CAAC,iBAAiB,QAAQ,CAAC;iBACrG,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,GAAG,kDAAkD,CAAC;iBACpG,QAAQ,CAAC,oCAAoC,qBAAqB,yEAAyE,CAAC,CAAC;QAClJ;YACE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAmB,EAAE,IAAyB;IAChF,MAAM,KAAK,GAAiC,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI;YAAE,SAAS;QAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB,EAAE,KAA8B,EAAE,IAAyB;IACnG,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,GAAG,CAAC,KAAmB,EAAE,MAA+C,EAAE,GAAgB,EAAE,GAA6B,EAAE,MAAgC;IAClK,OAAO,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;QAC9C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG;QACH,MAAM;QACN,MAAM;QACN,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC,CAAC;AACL,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAmB,EACnB,MAAoC,EACpC,GAAgB;IAEhB,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC;QACZ,KAAK,kBAAkB,CAAC;QACxB,KAAK,UAAU;YACb,OAAO;gBACL,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE;oBAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,MAAM,EAAE,MAAM;oBACd,aAAa,EAAE,GAAG,CAAC,aAAa;iBACjC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;gBACtB,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,KAAK,MAAM;YACT,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9F,KAAK,OAAO,CAAC;QACb,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;YACnG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClE,MAAM,UAAU,GAAG,QAAqC,CAAC;YACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,IAAI,CAAC,UAAU,CAAC,MAAM;gBAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC/D,OAAO;gBACL,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;gBACzG,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;aAC5D,CAAC;QACJ,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACnE,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,QAAQ,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAmB,EACnB,MAAmC,EACnC,GAAgB,EAChB,GAA4B,EAC5B,QAAkC;IAElC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7D,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC;gBAC7B,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,MAAM;gBACN,GAAG;gBACH,QAAQ;gBACR,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,qBAAqB,CAAC;gBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,SAAS,EAAE,SAAS,CAAC,IAAI;gBACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,IAAI,aAAa,SAAS,CAAC,IAAI,SAAS;aAC5G,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,IAAI,aAAa,SAAS,CAAC,IAAI,SAAS,CAAC;YACjI,MAAM,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAA6B,EAAE,SAAiB,EAAE,GAAgB;IACrF,OAAO,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAmB,EAAE,MAAgC;IACjF,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,qBAAqB;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAmB,EAAE,MAAgC;IAChF,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,IAAI,MAAM,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAqC,EAA6B,EAAE,MAAc,EAAE,GAAgB;IAClI,SAAS,cAAc;QACrB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,EAAE,uEAAuE,CAAC,CAAC;QACxI,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,KAAmB,EAAE,MAAgC,EAAE,KAAa;QAClG,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACrH,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,MAAM,CAAW,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,QAAqB,EAAE,GAAW,EAAE,MAAkB,EAAE,MAAuB;QACxG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO;YAC/D,CAAC,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/E,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,mBAAmB,CAAC,KAAmB;QAC9C,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/D,MAAM,IAAI,0BAA0B,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,KAAK,UAAU,cAAc,CAA6C,SAAoB;QAC5F,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,UAAU,IAAI,CAA6C,SAAoB,EAAE,UAA+C,EAAE;QACrI,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAsB,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CACV,iDAAiD,KAAK,CAAC,IAAI,IAAI;gBAC/D,+DAA+D,CAChE,CAAC;YACF,IAAI,WAAW,GAAG,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,MAAM;gBAAE,WAAW,IAAI,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjD,WAAW,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAC7G,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAA0B,WAAW,EAAE,YAAY,CAAC,CAAC;iBACtF,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;iBACtC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACjD,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;gBAC5C,KAAK,EAAE,QAAQ,CAAC,MAAM;aACsB,CAAC;QACjD,CAAC;QAED,IAAI,GAAG,GAAG,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,WAAW,CAAC,MAAM;YAAE,GAAG,IAAI,UAAU,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACrG,CAAC;QAED,GAAG,IAAI,mBAAmB,CAAC;QAC3B,MAAM,eAAe,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAA0B,GAAG,EAAE,CAAC,GAAG,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,mCAAmC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACpH,eAAe,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,EAA+C,CAAC;IACpG,CAAC;IAED,KAAK,UAAU,cAAc,CAA6C,SAAoB,EAAE,EAAU;QACxG,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAA0B,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAA2C,CAAC,CAAC,CAAC,IAAI,CAAC;IAClG,CAAC;IAED,KAAK,UAAU,GAAG,CAA6C,SAAoB,EAAE,EAAU;QAC7F,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,SAAoB,EACpB,MAA+C,EAC/C,EAAW,EACX,MAA+C;QAE/C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAA6C,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAA0B,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAClE,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAA6C,IAAI,UAAU,CAAC,CAAC;QACnI,OAAO,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,UAAU,MAAM,CAA6C,SAAoB,EAAE,KAAuC;QAC7H,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAA6B,aAAa,CAAC,KAAK,EAAE,KAAgC,EAAE,QAAQ,CAAC,CAAC;QAC1G,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEpC,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrG,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,MAAM,CAAC,UAAU,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAC3F,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,QAAQ,EACR,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC3G,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EACvC;YACE,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM;YACN,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,aAAa,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI;SAC1C,CACF,CAAC;QACF,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;QAElC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa;YAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YACnD,QAAQ,EAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC;SAC7C,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAuC,CAAC;IACzG,CAAC;IAED,KAAK,UAAU,MAAM,CAA6C,SAAoB,EAAE,EAAU,EAAE,KAAuC;QACzI,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAA0B,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAgC,EAAE,QAAQ,CAAC,CAAC;QAChF,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC;QACjE,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,QAAQ,EACR,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EACtG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,EAChD;gBACE,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,EAAE,EAAE,QAAQ;gBACZ,KAAK,EAAE,EAAE;gBACT,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;gBAClC,aAAa,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI;aAC1C,CACF,CAAC;YACF,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa;YAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE;YAChC,QAAQ,EAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC;SAC7C,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,MAAuC,CAAC;IAC1F,CAAC;IAED,KAAK,UAAU,MAAM,CAA6C,SAAoB,EAAE,EAAU;QAChG,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAA0B,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,EAAE;YAC9F,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,aAAa,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI;SAC1C,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa;YAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,SAAoB,EACpB,EAAU,EACV,MAAkD;QAElD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,sBAAsB,CAAC,qBAAqB,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,UAAU,yBAAyB,CAAC,CAAC;QAChH,CAAC;QACD,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,CAA0B,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxI,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAsB,CAAC,uBAAuB,EAAE,6FAA6F,CAAC,CAAC;QAC3J,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjH,MAAM,GAAG,CAAC,KAAK,CAAC;YACd,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE;YAChC,QAAQ,EAAE;gBACR,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE;YACD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAChG,CAAC"}
|