@rytass/bpm-core-nestjs-module 0.18.1 → 0.20.0

package/src/lib/condition/condition.service.d.ts

@@ -1,16 +1,101 @@
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { ExpressionLintIssue } from '@rytass/bpm-core-shared';
+import { ExpressionBudget } from './expression-budget';
+import { JsonValue } from './expression-result.walker';
+import { type BPMExpressionFunctionRegistry } from '../expression-function/expression-function.types';
+import { ExpressionDialect } from './expression-dialect';
+import { ExpressionLintContext } from './expression-ast';
 interface ConditionExpression {
     readonly expression: string | null | undefined;
     readonly label: string;
 }
-interface ConditionLintOptions {
-    readonly allowedRootIdentifiers?: readonly string[];
+/**
+ * Lint options. Everything beyond `dialect` and `maxExpressionLength` is the
+ * cel-v2 lint context (`ExpressionLintContext`): the use point, the bound
+ * form, the function registry and the field a `SET_FORM_FIELD` writes.
+ * cel-legacy reads only the roots from it (docs/24 §1: the old dialect's lint
+ * does not change).
+ */
+export interface ConditionLintOptions extends ExpressionLintContext {
+    /**
+     * The engine whose parser decides syntax. Absent means `cel-legacy`; one
+     * this version does not know is reported as `EXPRESSION_SYNTAX_ERROR`.
+     */
+    readonly dialect?: ExpressionDialect;
     readonly maxExpressionLength?: number;
 }
+/**
+ * Options for one evaluation. Both fields are optional: without them a
+ * evaluation uses the operation's budget if it runs inside one
+ * (see `runExpressionOperation`), or a fresh single-expression budget.
+ */
+export interface ExpressionCallOptions {
+    /**
+     * Roots the expression may read. Checked at evaluation time, so a dry run
+     * cannot read a root that the published definition would be refused for.
+     */
+    readonly allowedRootIdentifiers?: readonly string[];
+    readonly budget?: ExpressionBudget;
+    /**
+     * The dialect of the definition or rule the expression belongs to. Absent
+     * means `cel-legacy`, which is what every expression saved before the
+     * dialect existed was written for (ADR 22 §3.3). One this version does not
+     * know is refused as `EXPRESSION_SYNTAX_ERROR`.
+     */
+    readonly dialect?: ExpressionDialect;
+}
 export type CelEvaluationContext = Readonly<Record<string, unknown>>;
-export declare class ConditionService {
+/** How long each dialect's warm-up took, in milliseconds; `null` if it failed. */
+export type ExpressionWarmUpResult = Readonly<Record<ExpressionDialect, number | null>>;
+export declare class ConditionService implements OnApplicationBootstrap {
+    private readonly logger;
+    private readonly functionRegistry;
+    private readonly runtime;
+    /**
+     * Evaluates and lints with the expression function registry
+     * (`BPM_EXPRESSION_FUNCTION_REGISTRY`, ADR 22 §3.5): both dialects call its
+     * functions and the cel-v2 lint checks against it. The injection is
+     * optional and `ConditionService` is also built with `new` in hosts and
+     * tests, so `new ConditionService()` still works: only the nine built-ins.
+     */
+    constructor(functionRegistry?: BPMExpressionFunctionRegistry | null);
+    /**
+     * Warms both engines at boot so the first case does not pay for it (Phase 23
+     * P3 live finding: the first evaluation after a restart took about 90 ms of
+     * its 100 ms budget, against about 1 ms warm).
+     *
+     * A warm-up that succeeded for any dialect writes one `log` line with each
+     * dialect's time (a failed one reads `failed` and has already warned with
+     * `EXPRESSION_WARM_UP_FAILED`), so a deployment can see it ran. The line
+     * holds only fixed words and milliseconds: no expression, no data. It is
+     * written here, not in `warmUp()`, so calling `warmUp()` stays silent.
+     */
+    onApplicationBootstrap(): void;
+    /**
+     * Loads each dialect's engine and this registry's environment, then parses,
+     * lints and evaluates one expression per dialect under a generous budget of
+     * its own, so module loading, the cel-v2 environment clone and the `vm`
+     * context are paid here. Never throws: a dialect that fails (a host
+     * registry that cannot be read, say) is logged with a fixed code and left
+     * cold, and the evaluations it serves fail closed as before.
+     */
+    warmUp(): ExpressionWarmUpResult;
+    /**
+     * Loads the dialect's engine and builds this registry's function
+     * environment now, outside any budget. Callers that are about to start a
+     * budgeted run (the dry run) call this first so an interrupt cannot land
+     * halfway through module loading or function registration.
+     */
+    prepareEngine(dialect?: ExpressionDialect): void;
     lintExpressions(expressions: readonly ConditionExpression[], options?: ConditionLintOptions): readonly string[];
+    /**
+     * The lint as structured findings, warnings included (docs/24 §2.2): what
+     * the designer's preview and the publish lint read. `lintExpression` is the
+     * error half of it, as the lines publish has always returned.
+     */
+    lintExpressionIssues(expression: string | null | undefined, label: string, options?: ConditionLintOptions): readonly ExpressionLintIssue[];
     lintExpression(expression: string | null | undefined, label: string, options?: ConditionLintOptions): readonly string[];
-    evaluateBoolean(expression: string | null | undefined, context: CelEvaluationContext, label: string): boolean;
-    evaluateValue(expression: string, context: CelEvaluationContext, label: string): unknown;
+    evaluateBoolean(expression: string | null | undefined, context: CelEvaluationContext, label: string, options?: ExpressionCallOptions): boolean;
+    evaluateValue(expression: string, context: CelEvaluationContext, label: string, options?: ExpressionCallOptions): JsonValue;
 }
 export {};

package/src/lib/condition/condition.service.js

@@ -1,62 +1,181 @@
 "use strict";
+var ConditionService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ConditionService = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
-let celEngine = null;
+const bpm_core_shared_1 = require("@rytass/bpm-core-shared");
+const expression_errors_1 = require("./expression-errors");
+const expression_budget_1 = require("./expression-budget");
+const expression_engine_failure_1 = require("./expression-engine-failure");
+const expression_runtime_1 = require("./expression-runtime");
+const cel_legacy_adapter_1 = require("./adapters/cel-legacy.adapter");
+const cel_v2_adapter_1 = require("./adapters/cel-v2.adapter");
+const expression_function_registry_1 = require("../expression-function/expression-function.registry");
+const expression_function_types_1 = require("../expression-function/expression-function.types");
+const expression_dialect_1 = require("./expression-dialect");
+const expression_ast_1 = require("./expression-ast");
 /**
- * Loads `cel-js` on first use rather than when this module is imported.
- *
- * `cel-js` is ESM-only and its `chevrotain` dependency ships an exports map
- * that `jest-resolve` cannot follow. While the import sat at the top of this
- * file, the package root pulled it in through
- * `index → bpm-root → delegation → condition`, so *any* consumer test that
- * imported anything from `@rytass/bpm-core-nestjs-module` failed to load with
- * `Cannot find module 'chevrotain'` — pointing deep into `node_modules`, far
- * from the code under test. Hosts had to stub `cel-js` before they could write
- * a single test.
- *
- * Deferring the load means a host that never evaluates a CEL expression never
- * resolves the package at all. `require` (not `await import`) keeps every
- * caller in this file synchronous.
+ * The warm-up expression: a root read, a comparison and arithmetic, so the
+ * engine's parser, interpreter, member access and the budget's `vm` timeout
+ * all run once. It calls no function, so a host registry is only read (to
+ * build the environment), never invoked.
  */
-function loadCelEngine() {
-    if (celEngine === null) {
+const WARM_UP_EXPRESSION = 'form.warmUp + 1 == 2';
+const WARM_UP_CONTEXT = { form: { warmUp: 1 } };
+const WARM_UP_LABEL = 'warmUp';
+// Generous on purpose: the cold first evaluation is exactly what is slow
+// (Phase 23 P3 measured about 90 ms against the 100 ms budget).
+const WARM_UP_BUDGET = { cumulativeMs: 5_000, perExpressionMs: 5_000 };
+const WARM_UP_DIALECTS = ['cel-legacy', 'cel-v2'];
+/** `code=EXPRESSION_WARM_UP_DONE cel-legacy=1.2ms cel-v2=3.4ms`. */
+const formatWarmUpLine = (result) => [
+    'code=EXPRESSION_WARM_UP_DONE',
+    ...WARM_UP_DIALECTS.map((dialect) => {
+        const elapsed = result[dialect];
+        return `${dialect}=${elapsed === null ? 'failed' : `${elapsed.toFixed(1)}ms`}`;
+    }),
+].join(' ');
+const DEFAULT_MAX_EXPRESSION_LENGTH = 2000;
+// `has` and `size` are CEL macros, not context identifiers; the root-identifier
+// lint must not report them as unknown. `size` is required by the table field
+// IS_FILLED / IS_EMPTY expressions (ADR 16 §3.8).
+const CEL_KEYWORDS = new Set(['false', 'has', 'in', 'null', 'size', 'true']);
+let ConditionService = ConditionService_1 = class ConditionService {
+    /**
+     * Evaluates and lints with the expression function registry
+     * (`BPM_EXPRESSION_FUNCTION_REGISTRY`, ADR 22 §3.5): both dialects call its
+     * functions and the cel-v2 lint checks against it. The injection is
+     * optional and `ConditionService` is also built with `new` in hosts and
+     * tests, so `new ConditionService()` still works: only the nine built-ins.
+     */
+    constructor(functionRegistry) {
+        this.logger = new common_1.Logger(ConditionService_1.name);
+        this.functionRegistry =
+            functionRegistry ?? expression_function_registry_1.BUILT_IN_EXPRESSION_FUNCTION_REGISTRY;
+        // The built-ins-only registry gets the shared default adapters.
+        this.runtime = expression_runtime_1.ExpressionRuntime.withFunctions(this.functionRegistry);
+    }
+    /**
+     * Warms both engines at boot so the first case does not pay for it (Phase 23
+     * P3 live finding: the first evaluation after a restart took about 90 ms of
+     * its 100 ms budget, against about 1 ms warm).
+     *
+     * A warm-up that succeeded for any dialect writes one `log` line with each
+     * dialect's time (a failed one reads `failed` and has already warned with
+     * `EXPRESSION_WARM_UP_FAILED`), so a deployment can see it ran. The line
+     * holds only fixed words and milliseconds: no expression, no data. It is
+     * written here, not in `warmUp()`, so calling `warmUp()` stays silent.
+     */
+    onApplicationBootstrap() {
+        const result = this.warmUp();
+        if (WARM_UP_DIALECTS.some((dialect) => result[dialect] !== null)) {
+            this.logger.log(formatWarmUpLine(result));
+        }
+    }
+    /**
+     * Loads each dialect's engine and this registry's environment, then parses,
+     * lints and evaluates one expression per dialect under a generous budget of
+     * its own, so module loading, the cel-v2 environment clone and the `vm`
+     * context are paid here. Never throws: a dialect that fails (a host
+     * registry that cannot be read, say) is logged with a fixed code and left
+     * cold, and the evaluations it serves fail closed as before.
+     */
+    warmUp() {
+        const entries = WARM_UP_DIALECTS.map((dialect) => {
+            const startedAt = performance.now();
+            try {
+                this.prepareEngine(dialect);
+                this.lintExpressionIssues(WARM_UP_EXPRESSION, WARM_UP_LABEL, {
+                    dialect,
+                });
+                this.evaluateValue(WARM_UP_EXPRESSION, WARM_UP_CONTEXT, WARM_UP_LABEL, {
+                    budget: (0, expression_budget_1.createExpressionBudget)(WARM_UP_BUDGET),
+                    dialect,
+                });
+                return [dialect, performance.now() - startedAt];
+            }
+            catch {
+                // The error may carry host text; only a fixed code is written.
+                this.logger.warn(`code=EXPRESSION_WARM_UP_FAILED dialect=${dialect}`);
+                return [dialect, null];
+            }
+        });
+        return Object.fromEntries(entries);
+    }
+    /**
+     * Loads the dialect's engine and builds this registry's function
+     * environment now, outside any budget. Callers that are about to start a
+     * budgeted run (the dry run) call this first so an interrupt cannot land
+     * halfway through module loading or function registration.
+     */
+    prepareEngine(dialect = expression_dialect_1.DEFAULT_EXPRESSION_DIALECT) {
+        const readDialect = (0, expression_dialect_1.readExpressionDialect)(dialect, 'expressionDialect');
         try {
-            celEngine = require('cel-js');
+            if (readDialect === 'cel-v2') {
+                (0, cel_v2_adapter_1.loadCelV2Environment)(this.functionRegistry);
+                return;
+            }
+            (0, cel_legacy_adapter_1.loadCelEngine)();
+            (0, cel_legacy_adapter_1.readCelLegacyFunctions)(this.functionRegistry);
         }
         catch (error) {
-            // Deferring the load also defers this failure: it used to surface at
-            // boot as a bare ERR_REQUIRE_ESM, and would now surface as a 500 on
-            // whichever request first evaluated a condition. Name the cause where it
-            // is thrown.
-            if (isRequireEsmError(error)) {
-                throw new Error(`[@rytass/bpm-core-nestjs-module] This Node version cannot require the ESM-only 'cel-js'. BPM needs Node >=20.19 or >=22.12 to evaluate CEL conditions. Original error: ${error instanceof Error ? error.message : String(error)}`);
+            // A registry that throws or answers out of shape is
+            // `EXPRESSION_FUNCTION_FAILED`, never the host's own error. An engine
+            // that fails to load is a configuration error and passes through.
+            if (error instanceof expression_engine_failure_1.ExpressionEngineFailure) {
+                throw (0, expression_errors_1.toExpressionRuntimeError)(error, 'expressionFunctions');
             }
             throw error;
         }
     }
-    return celEngine;
-}
-function isRequireEsmError(error) {
-    return (typeof error === 'object' &&
-        error !== null &&
-        'code' in error &&
-        error.code === 'ERR_REQUIRE_ESM');
-}
-const DEFAULT_MAX_EXPRESSION_LENGTH = 2000;
-// `has` and `size` are CEL macros, not context identifiers; the root-identifier
-// lint must not report them as unknown. `size` is required by the table field
-// IS_FILLED / IS_EMPTY expressions (ADR 16 §3.8).
-const CEL_KEYWORDS = new Set(['false', 'has', 'in', 'null', 'size', 'true']);
-let ConditionService = class ConditionService {
     lintExpressions(expressions, options = {}) {
         return expressions.flatMap(({ expression, label }) => this.lintExpression(expression, label, options));
     }
+    /**
+     * The lint as structured findings, warnings included (docs/24 §2.2): what
+     * the designer's preview and the publish lint read. `lintExpression` is the
+     * error half of it, as the lines publish has always returned.
+     */
+    lintExpressionIssues(expression, label, options = {}) {
+        if (typeof expression === 'undefined' || expression === null) {
+            return [];
+        }
+        const trimmedExpression = expression.trim();
+        const maxExpressionLength = options.maxExpressionLength ?? DEFAULT_MAX_EXPRESSION_LENGTH;
+        if (!trimmedExpression) {
+            return [lintIssue('EXPR_PARSE_FAILED', label)];
+        }
+        if (trimmedExpression.length > maxExpressionLength) {
+            return [lintIssue('EXPR_COMPLEXITY_EXCEEDED', label)];
+        }
+        if (options.dialect !== undefined &&
+            !(0, expression_dialect_1.isExpressionDialect)(options.dialect)) {
+            return [lintIssue('EXPR_PARSE_FAILED', label)];
+        }
+        if (options.dialect === 'cel-v2') {
+            return (0, expression_ast_1.lintCelV2Expression)(trimmedExpression, label, {
+                ...options,
+                functionRegistry: options.functionRegistry ?? this.functionRegistry,
+            }, this.functionRegistry);
+        }
+        if ((0, cel_legacy_adapter_1.parseCelLegacy)(trimmedExpression) === null) {
+            return [lintIssue('EXPR_PARSE_FAILED', label)];
+        }
+        return readUnsupportedRootIdentifiers(trimmedExpression, readLintRoots(options), 'cel-legacy').map((identifier) => lintIssue('EXPR_ROOT_NOT_ALLOWED', label, identifier));
+    }
     lintExpression(expression, label, options = {}) {
         if (typeof expression === 'undefined' || expression === null) {
             return [];
         }
+        // cel-v2 is linted on its AST (ADR 22 §3.4) and answers with the codes
+        // the preview reads (docs/24 §2.2), blank and over-long included; only
+        // the errors refuse, each as one `<label>: <code>` line.
+        if (options.dialect === 'cel-v2') {
+            return this.lintExpressionIssues(expression, label, options)
+                .filter((finding) => finding.severity === 'ERROR')
+                .map(bpm_core_shared_1.formatExpressionLintIssue);
+        }
         const trimmedExpression = expression.trim();
         const maxExpressionLength = options.maxExpressionLength ?? DEFAULT_MAX_EXPRESSION_LENGTH;
         if (!trimmedExpression) {
@@ -65,60 +184,157 @@ let ConditionService = class ConditionService {
         if (trimmedExpression.length > maxExpressionLength) {
             return [`${label} must be ${maxExpressionLength} characters or fewer`];
         }
-        const parseResult = loadCelEngine().parse(trimmedExpression);
-        if (isParseFailure(parseResult)) {
-            return parseResult.errors.map((error) => `${label}: ${error}`);
+        // A dialect this version does not know is not guessed at: parsing with
+        // the wrong engine could pass what the right one refuses.
+        if (options.dialect !== undefined &&
+            !(0, expression_dialect_1.isExpressionDialect)(options.dialect)) {
+            return [`${label}: EXPRESSION_SYNTAX_ERROR`];
         }
-        return lintRootIdentifiers(trimmedExpression, label, options);
+        // The engine's parse message is not returned: it can echo the expression,
+        // and the lint result reaches GraphQL clients (ADR 22 §3.2).
+        if ((0, cel_legacy_adapter_1.parseCelLegacy)(trimmedExpression) === null) {
+            return [`${label}: EXPRESSION_SYNTAX_ERROR`];
+        }
+        return lintRootIdentifiers(trimmedExpression, label, readLintRoots(options), 'cel-legacy');
     }
-    evaluateBoolean(expression, context, label) {
+    evaluateBoolean(expression, context, label, options = {}) {
         if (typeof expression !== 'string' || !expression.trim()) {
             return true;
         }
-        const value = this.evaluateValue(expression, context, label);
+        const value = this.evaluateValue(expression, context, label, options);
         if (typeof value === 'boolean') {
             return value;
         }
-        throw new common_1.BadRequestException(`${label} must evaluate to a boolean`);
+        throw new expression_errors_1.ExpressionRuntimeError('EXPRESSION_TYPE_ERROR', label, {
+            detail: 'must evaluate to a boolean',
+        });
     }
-    evaluateValue(expression, context, label) {
+    evaluateValue(expression, context, label, options = {}) {
         const trimmedExpression = expression.trim();
-        const lengthErrors = this.lintExpression(trimmedExpression, label);
-        if (lengthErrors.length) {
-            throw new common_1.BadRequestException(lengthErrors.join('; '));
-        }
-        const engine = loadCelEngine();
-        const parseResult = engine.parse(trimmedExpression);
-        if (isParseFailure(parseResult)) {
-            throw new common_1.BadRequestException(parseResult.errors.map((error) => `${label}: ${error}`).join('; '));
-        }
-        try {
-            return engine.evaluate(parseResult.cst, { ...context });
-        }
-        catch (error) {
-            throw new common_1.BadRequestException(error instanceof Error ? `${label}: ${error.message}` : label);
-        }
+        const dialect = (0, expression_dialect_1.readExpressionDialect)(options.dialect, label);
+        assertEvaluable(trimmedExpression, label, options.allowedRootIdentifiers, dialect);
+        return this.runtime.evaluate({
+            budget: options.budget ??
+                (0, expression_budget_1.currentExpressionBudget)() ??
+                (0, expression_budget_1.createExpressionBudget)(expression_budget_1.DEFAULT_EXPRESSION_BUDGET),
+            dialect,
+            expression: trimmedExpression,
+            label,
+            roots: pickAllowedRoots(context, options.allowedRootIdentifiers),
+        });
     }
 };
 exports.ConditionService = ConditionService;
-exports.ConditionService = ConditionService = tslib_1.__decorate([
-    (0, common_1.Injectable)()
+exports.ConditionService = ConditionService = ConditionService_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Optional)()),
+    tslib_1.__param(0, (0, common_1.Inject)(expression_function_types_1.BPM_EXPRESSION_FUNCTION_REGISTRY)),
+    tslib_1.__metadata("design:paramtypes", [Object])
 ], ConditionService);
-function isParseFailure(parseResult) {
-    return !parseResult.isSuccess;
+/**
+ * The roots handed to the engine: only the allowed ones when the use point has
+ * an allowlist. The textual root check cannot see a macro variable's scope (it
+ * skips the bound name everywhere in the expression), so this is what keeps a
+ * root the use point may not read out of reach, whatever else the caller's
+ * context holds. Without an allowlist the context is passed as given.
+ */
+function pickAllowedRoots(context, allowedRootIdentifiers) {
+    if (!allowedRootIdentifiers?.length) {
+        return context;
+    }
+    return Object.fromEntries(allowedRootIdentifiers
+        .filter((identifier) => Object.prototype.hasOwnProperty.call(context, identifier))
+        .map((identifier) => [
+        identifier,
+        context[identifier],
+    ]));
 }
-function lintRootIdentifiers(expression, label, options) {
-    const allowedRootIdentifiers = options.allowedRootIdentifiers;
+/**
+ * Guards that run before anything is parsed or evaluated. A refusal is an
+ * `EXPRESSION_SYNTAX_ERROR`: the expression is not one this runtime will run.
+ */
+function assertEvaluable(expression, label, allowedRootIdentifiers, dialect) {
+    if (!expression || expression.length > DEFAULT_MAX_EXPRESSION_LENGTH) {
+        throw new expression_errors_1.ExpressionRuntimeError('EXPRESSION_SYNTAX_ERROR', label);
+    }
+    if (lintRootIdentifiers(expression, label, allowedRootIdentifiers, dialect)
+        .length > 0) {
+        throw new expression_errors_1.ExpressionRuntimeError('EXPRESSION_SYNTAX_ERROR', label);
+    }
+}
+function lintIssue(code, label, subject) {
+    return {
+        code,
+        label,
+        severity: (0, bpm_core_shared_1.readExpressionLintSeverity)(code),
+        ...(subject === undefined ? {} : { subject }),
+    };
+}
+/**
+ * The cel-legacy lint's roots. A use point that is set but is not one (a
+ * client may send `toString`) is never used as an index: it allows nothing
+ * beyond the keywords the scan always skips, so every root is reported. An
+ * empty list would not do that: `readUnsupportedRootIdentifiers` reads it as
+ * "do not check".
+ */
+function readLintRoots(options) {
+    if (options.allowedRootIdentifiers?.length) {
+        return options.allowedRootIdentifiers;
+    }
+    if (options.usagePoint !== undefined &&
+        options.usagePoint !== null &&
+        !(0, bpm_core_shared_1.isExpressionUsagePoint)(options.usagePoint)) {
+        return [...CEL_KEYWORDS];
+    }
+    return options.usagePoint
+        ? bpm_core_shared_1.EXPRESSION_ROOT_IDENTIFIERS_BY_USAGE_POINT[options.usagePoint]
+        : options.allowedRootIdentifiers;
+}
+// cel-v2 macros that bind a variable as their first argument
+// (`list.map(x, ...)`, `list.exists(x, ...)` ...).
+const CEL_V2_BINDING_MACRO_PATTERN = /\.\s*(?:all|exists|exists_one|filter|map)\s*\(\s*([A-Za-z_][A-Za-z0-9_]*)\s*,/gu;
+/**
+ * Root identifiers the expression reads that its use point does not allow,
+ * found by a textual scan.
+ *
+ * The lint uses this for cel-legacy only, which has no AST to read (docs/24
+ * §1); cel-v2 is linted on its AST (`lintCelV2Expression`), where a name a
+ * macro binds is in scope only inside that macro.
+ *
+ * Evaluation still runs this scan before handing an expression to either
+ * engine (`assertEvaluable`). For cel-v2 it skips what that dialect adds and
+ * is not a root: names a macro binds (`a` in `form.l.map(a, a.qty)`) and
+ * global function calls (`int(form.x)`). A bound name is skipped everywhere in
+ * the expression, not only inside its macro, so
+ * `[1].exists(lastDecision, true) && lastDecision.d == ""` passes the scan
+ * where `lastDecision` is not allowed. The publish lint refuses that on the
+ * AST; at evaluation `evaluateValue` hands the engine only the allowed roots
+ * (`pickAllowedRoots`), so the name outside the macro is a missing key.
+ */
+function readUnsupportedRootIdentifiers(expression, allowedRootIdentifiers, dialect = expression_dialect_1.DEFAULT_EXPRESSION_DIALECT) {
     if (!allowedRootIdentifiers?.length) {
         return [];
     }
-    const allowed = new Set([...allowedRootIdentifiers, ...CEL_KEYWORDS]);
     const sanitizedExpression = stripStringLiterals(expression);
-    const identifiers = Array.from(sanitizedExpression.matchAll(/(^|[^A-Za-z0-9_.])([A-Za-z_][A-Za-z0-9_]*)/gu)).map((match) => match[2]);
-    const unknownIdentifiers = [
+    const isV2 = dialect === 'cel-v2';
+    const boundNames = isV2
+        ? Array.from(sanitizedExpression.matchAll(CEL_V2_BINDING_MACRO_PATTERN)).map((match) => match[1])
+        : [];
+    const allowed = new Set([
+        ...allowedRootIdentifiers,
+        ...CEL_KEYWORDS,
+        ...boundNames,
+    ]);
+    const identifiers = Array.from(sanitizedExpression.matchAll(/(^|[^A-Za-z0-9_.])([A-Za-z_][A-Za-z0-9_]*)/gu))
+        .filter((match) => !isV2 ||
+        !/^\s*\(/u.test(sanitizedExpression.slice((match.index ?? 0) + match[0].length)))
+        .map((match) => match[2]);
+    return [
         ...new Set(identifiers.filter((identifier) => !allowed.has(identifier))),
     ];
-    return unknownIdentifiers.map((identifier) => `${label} references unsupported identifier ${identifier}`);
+}
+function lintRootIdentifiers(expression, label, allowedRootIdentifiers, dialect = expression_dialect_1.DEFAULT_EXPRESSION_DIALECT) {
+    return readUnsupportedRootIdentifiers(expression, allowedRootIdentifiers, dialect).map((identifier) => `${label} references unsupported identifier ${identifier}`);
 }
 function stripStringLiterals(expression) {
     return expression.replace(/"([^"\\]|\\.)*"|'([^'\\]|\\.)*'/gu, '""');

package/src/lib/condition/condition.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"condition.service.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/condition/condition.service.ts"],"names":[],"mappings":";;;;AAAA,2CAAiE;AAcjE,IAAI,SAAS,GAAqB,IAAI,CAAC;AAEvC;;;;;;;;;;;;;;;GAeG;AACH,SAAS,aAAa;IACpB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAc,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,qEAAqE;YACrE,oEAAoE;YACpE,yEAAyE;YACzE,aAAa;YACb,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,0KACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAAqC,CAAC,IAAI,KAAK,iBAAiB,CAClE,CAAC;AACJ,CAAC;AAcD,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAC3C,gFAAgF;AAChF,8EAA8E;AAC9E,kDAAkD;AAClD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAGtE,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,eAAe,CACb,WAA2C,EAC3C,UAAgC,EAAE;QAElC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CACnD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAChD,CAAC;IACJ,CAAC;IAED,cAAc,CACZ,UAAqC,EACrC,KAAa,EACb,UAAgC,EAAE;QAElC,IAAI,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QAE/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,KAAK,YAAY,mBAAmB,sBAAsB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE7D,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,mBAAmB,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,eAAe,CACb,UAAqC,EACrC,OAA6B,EAC7B,KAAa;QAEb,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,4BAAmB,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACvE,CAAC;IAED,aAAa,CACX,UAAkB,EAClB,OAA6B,EAC7B,KAAa;QAEb,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAEnE,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,4BAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAEpD,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,4BAAmB,CAC3B,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,4BAAmB,CAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAvFY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;GACA,gBAAgB,CAuF5B;AAED,SAAS,cAAc,CAAC,WAAwB;IAC9C,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,KAAa,EACb,OAA6B;IAE7B,MAAM,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAE9D,IAAI,CAAC,sBAAsB,EAAE,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACtE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC5B,mBAAmB,CAAC,QAAQ,CAC1B,8CAA8C,CAC/C,CACF,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,kBAAkB,GAAG;QACzB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;KACzE,CAAC;IAEF,OAAO,kBAAkB,CAAC,GAAG,CAC3B,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,KAAK,sCAAsC,UAAU,EAAE,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,OAAO,UAAU,CAAC,OAAO,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"condition.service.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/condition/condition.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AACxB,6DAMiC;AACjC,2DAG6B;AAC7B,2DAK6B;AAC7B,2EAAsE;AACtE,6DAAyD;AAEzD,sEAIuC;AACvC,8DAAiE;AACjE,sGAA4G;AAC5G,gGAG0D;AAC1D,6DAK8B;AAC9B,qDAA8E;AAmD9E;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,eAAe,GAAyB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;AACtE,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,yEAAyE;AACzE,gEAAgE;AAChE,MAAM,cAAc,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AACvE,MAAM,gBAAgB,GAAiC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEhF,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,CAAC,MAA8B,EAAU,EAAE,CAClE;IACE,8BAA8B;IAC9B,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAU,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAEhC,OAAO,GAAG,OAAO,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC,CAAC;CACH,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEd,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAC3C,gFAAgF;AAChF,8EAA8E;AAC9E,kDAAkD;AAClD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAGtE,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAK3B;;;;;;OAMG;IACH,YAGE,gBAAuD;QAdxC,WAAM,GAAG,IAAI,eAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;QAgB1D,IAAI,CAAC,gBAAgB;YACnB,gBAAgB,IAAI,oEAAqC,CAAC;QAC5D,gEAAgE;QAChE,IAAI,CAAC,OAAO,GAAG,sCAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;;OAUG;IACH,sBAAsB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAE7B,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,MAAM;QACJ,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAClC,CAAC,OAAO,EAA+C,EAAE;YACvD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAEpC,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAC5B,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,aAAa,EAAE;oBAC3D,OAAO;iBACR,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE;oBACrE,MAAM,EAAE,IAAA,0CAAsB,EAAC,cAAc,CAAC;oBAC9C,OAAO;iBACR,CAAC,CAAC;gBAEH,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;gBAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0CAA0C,OAAO,EAAE,CACpD,CAAC;gBAEF,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC,CACF,CAAC;QAEF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAA2B,CAAC;IAC/D,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,UAA6B,+CAA0B;QACnE,MAAM,WAAW,GAAG,IAAA,0CAAqB,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAA,qCAAoB,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAE5C,OAAO;YACT,CAAC;YAED,IAAA,kCAAa,GAAE,CAAC;YAChB,IAAA,2CAAsB,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,oDAAoD;YACpD,sEAAsE;YACtE,kEAAkE;YAClE,IAAI,KAAK,YAAY,mDAAuB,EAAE,CAAC;gBAC7C,MAAM,IAAA,4CAAwB,EAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,eAAe,CACb,WAA2C,EAC3C,UAAgC,EAAE;QAElC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CACnD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAChD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAClB,UAAqC,EACrC,KAAa,EACb,UAAgC,EAAE;QAElC,IAAI,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QAE/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACnD,OAAO,CAAC,SAAS,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;YAC7B,CAAC,IAAA,wCAAmB,EAAC,OAAO,CAAC,OAAO,CAAC,EACrC,CAAC;YACD,OAAO,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,IAAA,oCAAmB,EACxB,iBAAiB,EACjB,KAAK,EACL;gBACE,GAAG,OAAO;gBACV,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB;aACpE,EACD,IAAI,CAAC,gBAAgB,CACtB,CAAC;QACJ,CAAC;QAED,IAAI,IAAA,mCAAc,EAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,8BAA8B,CACnC,iBAAiB,EACjB,aAAa,CAAC,OAAO,CAAC,EACtB,YAAY,CACb,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACnB,SAAS,CAAC,uBAAuB,EAAE,KAAK,EAAE,UAAU,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,cAAc,CACZ,UAAqC,EACrC,KAAa,EACb,UAAgC,EAAE;QAElC,IAAI,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,yDAAyD;QACzD,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC;iBACzD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;iBACjD,GAAG,CAAC,2CAAyB,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QAE/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,KAAK,YAAY,mBAAmB,sBAAsB,CAAC,CAAC;QACzE,CAAC;QAED,uEAAuE;QACvE,0DAA0D;QAC1D,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;YAC7B,CAAC,IAAA,wCAAmB,EAAC,OAAO,CAAC,OAAO,CAAC,EACrC,CAAC;YACD,OAAO,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,0EAA0E;QAC1E,6DAA6D;QAC7D,IAAI,IAAA,mCAAc,EAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,mBAAmB,CACxB,iBAAiB,EACjB,KAAK,EACL,aAAa,CAAC,OAAO,CAAC,EACtB,YAAY,CACb,CAAC;IACJ,CAAC;IAED,eAAe,CACb,UAAqC,EACrC,OAA6B,EAC7B,KAAa,EACb,UAAiC,EAAE;QAEnC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAEtE,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,0CAAsB,CAAC,uBAAuB,EAAE,KAAK,EAAE;YAC/D,MAAM,EAAE,4BAA4B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CACX,UAAkB,EAClB,OAA6B,EAC7B,KAAa,EACb,UAAiC,EAAE;QAEnC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAA,0CAAqB,EAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE9D,eAAe,CACb,iBAAiB,EACjB,KAAK,EACL,OAAO,CAAC,sBAAsB,EAC9B,OAAO,CACR,CAAC;QAEF,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,MAAM,EACJ,OAAO,CAAC,MAAM;gBACd,IAAA,2CAAuB,GAAE;gBACzB,IAAA,0CAAsB,EAAC,6CAAyB,CAAC;YACnD,OAAO;YACP,UAAU,EAAE,iBAAiB;YAC7B,KAAK;YACL,KAAK,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAtRY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAcR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,mBAAA,IAAA,eAAM,EAAC,4DAAgC,CAAC,CAAA;;GAdhC,gBAAgB,CAsR5B;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,OAA6B,EAC7B,sBAAqD;IAErD,IAAI,CAAC,sBAAsB,EAAE,MAAM,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,sBAAsB;SACnB,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAC1D;SACA,GAAG,CAAC,CAAC,UAAU,EAA8B,EAAE,CAAC;QAC/C,UAAU;QACV,OAAO,CAAC,UAAU,CAAC;KACpB,CAAC,CACL,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,UAAkB,EAClB,KAAa,EACb,sBAAqD,EACrD,OAAsC;IAEtC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,6BAA6B,EAAE,CAAC;QACrE,MAAM,IAAI,0CAAsB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,IACE,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,CAAC;SACpE,MAAM,GAAG,CAAC,EACb,CAAC;QACD,MAAM,IAAI,0CAAsB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,IAAiC,EACjC,KAAa,EACb,OAAgB;IAEhB,OAAO;QACL,IAAI;QACJ,KAAK;QACL,QAAQ,EAAE,IAAA,4CAA0B,EAAC,IAAI,CAAC;QAC1C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,OAA6B;IAE7B,IAAI,OAAO,CAAC,sBAAsB,EAAE,MAAM,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,sBAAsB,CAAC;IACxC,CAAC;IAED,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,OAAO,CAAC,UAAU,KAAK,IAAI;QAC3B,CAAC,IAAA,wCAAsB,EAAC,OAAO,CAAC,UAAU,CAAC,EAC3C,CAAC;QACD,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,OAAO,CAAC,UAAU;QACvB,CAAC,CAAC,4DAA0C,CAAC,OAAO,CAAC,UAAU,CAAC;QAChE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;AACrC,CAAC;AAED,6DAA6D;AAC7D,mDAAmD;AACnD,MAAM,4BAA4B,GAChC,iFAAiF,CAAC;AAEpF;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,8BAA8B,CACrC,UAAkB,EAClB,sBAAqD,EACrD,UAA6B,+CAA0B;IAEvD,IAAI,CAAC,sBAAsB,EAAE,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,KAAK,QAAQ,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI;QACrB,CAAC,CAAC,KAAK,CAAC,IAAI,CACR,mBAAmB,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAC3D,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,sBAAsB;QACzB,GAAG,YAAY;QACf,GAAG,UAAU;KACd,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC5B,mBAAmB,CAAC,QAAQ,CAC1B,8CAA8C,CAC/C,CACF;SACE,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,IAAI;QACL,CAAC,SAAS,CAAC,IAAI,CACb,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAChE,CACJ;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5B,OAAO;QACL,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,KAAa,EACb,sBAAqD,EACrD,UAA6B,+CAA0B;IAEvD,OAAO,8BAA8B,CACnC,UAAU,EACV,sBAAsB,EACtB,OAAO,CACR,CAAC,GAAG,CACH,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,KAAK,sCAAsC,UAAU,EAAE,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,OAAO,UAAU,CAAC,OAAO,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC"}