@rytass/bpm-core-shared 0.17.6 → 0.17.7

package/CHANGELOG.md

@@ -1,3 +1,33 @@
+## 0.17.7 (2026-10-22)
+
+### 🚀 Features
+
+- **bpm-core-react:** add the field access overview to the template designer ([1de7665](https://github.com/Rytass/BPMCore/commit/1de7665))
+- **shared:** add the field access matrix and its commands ([b0a9aa3](https://github.com/Rytass/BPMCore/commit/b0a9aa3))
+- **bpm-core-react:** let the fill node's approver fill in fields on the case page ([9cd9eb2](https://github.com/Rytass/BPMCore/commit/9cd9eb2))
+- **bpm-core:** flag tasks whose node lets the approver fill in fields ([57f1d61](https://github.com/Rytass/BPMCore/commit/57f1d61))
+- **bpm-core-react:** resolve per-field access for the instance viewer ([7cd040c](https://github.com/Rytass/BPMCore/commit/7cd040c))
+- **bpm-core:** adopt fieldAccess node model per ADR 20 ([b25cf71](https://github.com/Rytass/BPMCore/commit/b25cf71))
+- **bpm-core-client:** send approver-filled data and keep it off launch and resubmit forms ([a33d7f9](https://github.com/Rytass/BPMCore/commit/a33d7f9))
+- **bpm-core:** refuse conditions that read approver-filled fields too early ([5ad995f](https://github.com/Rytass/BPMCore/commit/5ad995f))
+- **bpm-core:** refuse form rules that clash with approver-filled fields ([a55253e](https://github.com/Rytass/BPMCore/commit/a55253e))
+- **bpm-core:** refuse to publish field permissions the engine cannot honour ([7361a9e](https://github.com/Rytass/BPMCore/commit/7361a9e))
+- **bpm-core:** flag task notifications that need the form opened ([77fd492](https://github.com/Rytass/BPMCore/commit/77fd492))
+- **bpm-core:** let the filling node write approver-filled fields on approval ([502500c](https://github.com/Rytass/BPMCore/commit/502500c))
+- **shared:** add field permission helpers for approver-filled fields ([6386b1c](https://github.com/Rytass/BPMCore/commit/6386b1c))
+
+### 🩹 Fixes
+
+- **shared:** read a SET_FORM_FIELD path the way the engine writes it ([3ba2962](https://github.com/Rytass/BPMCore/commit/3ba2962))
+- **bpm-core-react:** send only the fill fields the approver changed ([1250eac](https://github.com/Rytass/BPMCore/commit/1250eac))
+- **template:** stop rethrowing designer save and publish errors ([af93e67](https://github.com/Rytass/BPMCore/commit/af93e67))
+- **bpm-core-client:** update launch mocks for the template version definition ([452d600](https://github.com/Rytass/BPMCore/commit/452d600))
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+- Kai-Chieh Yang
+
 ## 0.17.6 (2026-10-20)
 
 This was a version bump only for shared to align it with other projects, there were no code changes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rytass/bpm-core-shared",
-  "version": "0.17.6",
+  "version": "0.17.7",
   "description": "Shared TypeScript contracts for the Rytass BPM approval workflow stack (workflow, form, condition, identity, organization, status types).",
   "keywords": [
     "bpm",

package/src/index.d.ts

@@ -1,4 +1,7 @@
 export * from './lib/condition';
+export * from './lib/field-access';
+export * from './lib/field-access-lint';
+export * from './lib/field-access-matrix';
 export * from './lib/form';
 export * from './lib/identity';
 export * from './lib/organization';

package/src/index.js

@@ -2,6 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./lib/condition"), exports);
+tslib_1.__exportStar(require("./lib/field-access"), exports);
+tslib_1.__exportStar(require("./lib/field-access-lint"), exports);
+tslib_1.__exportStar(require("./lib/field-access-matrix"), exports);
 tslib_1.__exportStar(require("./lib/form"), exports);
 tslib_1.__exportStar(require("./lib/identity"), exports);
 tslib_1.__exportStar(require("./lib/organization"), exports);

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/shared/src/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC;AAChC,qDAA2B;AAC3B,yDAA+B;AAC/B,6DAAmC;AACnC,uDAA6B;AAC7B,yDAA+B;AAC/B,+DAAqC;AACrC,iEAAuC;AACvC,iEAAuC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/shared/src/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC;AAChC,6DAAmC;AACnC,kEAAwC;AACxC,oEAA0C;AAC1C,qDAA2B;AAC3B,yDAA+B;AAC/B,6DAAmC;AACnC,uDAA6B;AAC7B,yDAA+B;AAC/B,+DAAqC;AACrC,iEAAuC;AACvC,iEAAuC"}

package/src/lib/field-access-lint.d.ts

@@ -0,0 +1,119 @@
+import { FormDefinitionSchema, FormFieldDefinition } from './form';
+import type { FieldAccessDisplay, FieldAccessEntry, FieldAccessFill, UserTaskNode, WorkflowDefinition, WorkflowEdge } from './workflow';
+/**
+ * The field access rules (ADR 20 §4) as structured issues. The publish lint
+ * turns each into its `message` line, and the designer's field access matrix
+ * places it on the fields and nodes it names, so the two read one rule set.
+ * `lintApproverFilledFieldReads` (a condition reading a field before anybody
+ * filled it in) stays in the backend: it needs the expression sources of
+ * every node, which the matrix does not show.
+ */
+export type FieldAccessIssueCode = 'applicantRuleReadsApproverFilled' | 'approverFilledFieldDataSource' | 'approverFilledFieldFileUpload' | 'approverFilledFieldFormRule' | 'approverFilledMultipleFillNodesOnPath' | 'approverFilledRequiredBoolean' | 'approverFilledTableDataSourceColumn' | 'fieldAccessAutoApprove' | 'fieldAccessDuplicate' | 'fieldAccessFillHidden' | 'fieldAccessGroupPolicy' | 'fieldAccessInvalid' | 'fieldAccessSkipNode' | 'fieldAccessUnknownField' | 'legacyFieldPermissions' | 'setFormFieldApproverFilled';
+export interface FieldAccessIssue {
+    readonly code: FieldAccessIssueCode;
+    /** The top-level fields the issue is about, the offending one first. */
+    readonly fieldKeys: readonly string[];
+    /** The publish-lint line, from `WORKFLOW_LINT_MESSAGES`. */
+    readonly message: string;
+    /** The nodes the issue is about, in definition order where there are two. */
+    readonly nodeIds: readonly string[];
+}
+/**
+ * Why a user task node cannot let its approver fill fields in: a decision
+ * shared by several approvers (`PARALLEL_ALL` / `QUORUM`) has no single
+ * filler, and a node that can approve or skip itself would pass without
+ * anybody filling anything in.
+ */
+export type UserTaskFillConflict = 'autoApprove' | 'groupPolicy' | 'skipNode';
+export declare function readUserTaskFillConflicts(node: UserTaskNode): readonly UserTaskFillConflict[];
+export declare const FIELD_ACCESS_DISPLAYS: readonly FieldAccessDisplay[];
+export declare const FIELD_ACCESS_FILLS: readonly FieldAccessFill[];
+/**
+ * Whether a stored entry is one the publish lint accepts. Stricter than
+ * `readNodeFieldAccess`, which the engine reads with: a blank `fieldKey`
+ * passes there and fails here, so writers check with this one.
+ */
+export declare function isFieldAccessEntryValid(entry: unknown): entry is FieldAccessEntry;
+/**
+ * One user task node's issues, in publish-lint order: the deprecated
+ * `fieldPermissions` key first, then its `fieldAccess`.
+ *
+ * `fieldPermissions` was reserved and never enforced, so whatever a draft
+ * holds there means nothing. Rather than read it as `fieldAccess` (which would
+ * suddenly enforce a shape nobody tested) or drop it silently, a draft that
+ * still carries the key cannot be published until it is removed.
+ *
+ * The shape and duplicate checks read the raw `fieldAccess`:
+ * `readNodeFieldAccess` tolerates a bad draft by skipping malformed entries
+ * and keeping the first entry per `fieldKey`, which is exactly what these two
+ * checks have to see. Once the shape is reported, the node's other field
+ * access rules are skipped, since they would read a list the engine is not
+ * going to honour anyway. Whether each `fieldKey` names a top-level field of
+ * the form is checked against the form (`readFormFieldAccessIssues`).
+ */
+export declare function readNodeFieldAccessIssues(node: UserTaskNode): readonly FieldAccessIssue[];
+/**
+ * The nodes reachable from `startNodeIds` along `edges` without entering one
+ * of `blockedNodeIds`, the start nodes included unless blocked. Walks the
+ * graph one frontier at a time and drops every node it has already seen, so a
+ * cycle ends the walk instead of feeding it.
+ */
+export declare function readReachableWorkflowNodeIds(edges: readonly WorkflowEdge[], startNodeIds: readonly string[], blockedNodeIds?: ReadonlySet<string>): ReadonlySet<string>;
+/**
+ * Whether two nodes can both run in one case: one reaches the other, or a
+ * parallel split sends each down a branch of its own (reachable from one
+ * outgoing edge of the split but not from another, and the other way round).
+ * Nodes on mutually exclusive branches never both run, and neither do two
+ * nodes that both lie after the join, which every branch reaches alike. The
+ * graph may hold a cycle, which the reachability walk copes with.
+ */
+export declare function createWorkflowCoRunReader(definition: WorkflowDefinition): (nodeId: string, otherNodeId: string) => boolean;
+/**
+ * The issues read from the whole definition, in publish-lint order: a system
+ * node writing an approver-filled field, then two fill nodes of one field
+ * that can both run in one case.
+ *
+ * A field an approver fills in is empty until then, and the approver's value
+ * is the one the case keeps. A system node writing it would either be
+ * overwritten or overwrite the approver, so the two are kept apart.
+ *
+ * One field, one filler per run: when two nodes that fill the same field in
+ * can both run in one case (`createWorkflowCoRunReader`), the later one
+ * overwrites the earlier and the signed value no longer tells who answered.
+ * Fill nodes on mutually exclusive branches (one per region, say) stay
+ * allowed. Reported once per field and pair, in node order.
+ */
+export declare function readDefinitionFieldAccessIssues(definition: WorkflowDefinition): readonly FieldAccessIssue[];
+/**
+ * Why a form field cannot be one an approver fills in, as the issues the
+ * publish lint reports once it is: a form-level rule (`required` / `hidden`
+ * set to `true`, the others set at all — `required: false` and
+ * `hidden: false`, what the form editor writes for "off", are not rules), a
+ * data source, a file upload, or a table with a data-source column. Empty
+ * when the field can be filled in.
+ */
+export declare function readFormFieldFillIssues(field: FormFieldDefinition): readonly FieldAccessIssue[];
+/**
+ * True when a CEL expression reads the top-level form field `fieldKey` —
+ * `form.x`, `formData.x`, `form["x"]`, or any of those with `form . x` spacing
+ * or a deeper step after it (`form.x.y`, `form.x[0]`). `has(form.x)` counts.
+ *
+ * The root has to be a bare `form` / `formData`: `myform.x` and `a.form.x` are
+ * somebody else's `x`. The key has to end there: `form.xy` is another field.
+ * `form` and `formData` are the two allowed root identifiers that carry the
+ * form data (`WORKFLOW_EXPRESSION_ROOT_IDENTIFIERS`). A string literal that
+ * merely spells `form.x` counts too: a false hit only makes the publish lint
+ * stricter.
+ */
+export declare function referencesFormField(expression: string, fieldKey: string): boolean;
+/**
+ * The issues read against the form the definition is bound to, in
+ * publish-lint order: a `fieldKey` that is not a top-level field of the form,
+ * an approver-filled field the form will not let anybody fill in
+ * (`readFormFieldFillIssues`, once per field however many nodes fill it in),
+ * `fill: 'REQUIRED'` on a boolean (`false` is an answer, so required can never
+ * fail), and an applicant's rule that reads an approver-filled field — the
+ * rule is evaluated against the submitted form, where that field is still
+ * empty, and the evaluation silently compares against nothing.
+ */
+export declare function readFormFieldAccessIssues(definition: WorkflowDefinition, schema: FormDefinitionSchema | null): readonly FieldAccessIssue[];

package/src/lib/field-access-lint.js

@@ -0,0 +1,379 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FIELD_ACCESS_FILLS = exports.FIELD_ACCESS_DISPLAYS = void 0;
+exports.readUserTaskFillConflicts = readUserTaskFillConflicts;
+exports.isFieldAccessEntryValid = isFieldAccessEntryValid;
+exports.readNodeFieldAccessIssues = readNodeFieldAccessIssues;
+exports.readReachableWorkflowNodeIds = readReachableWorkflowNodeIds;
+exports.createWorkflowCoRunReader = createWorkflowCoRunReader;
+exports.readDefinitionFieldAccessIssues = readDefinitionFieldAccessIssues;
+exports.readFormFieldFillIssues = readFormFieldFillIssues;
+exports.referencesFormField = referencesFormField;
+exports.readFormFieldAccessIssues = readFormFieldAccessIssues;
+const form_1 = require("./form");
+const field_access_1 = require("./field-access");
+const workflow_graph_1 = require("./workflow-graph");
+function readUserTaskFillConflicts(node) {
+    var _a, _b, _c, _d;
+    return [
+        ...(((_a = node.data.decisionPolicy) === null || _a === void 0 ? void 0 : _a.type) === 'PARALLEL_ALL' ||
+            ((_b = node.data.decisionPolicy) === null || _b === void 0 ? void 0 : _b.type) === 'QUORUM'
+            ? ['groupPolicy']
+            : []),
+        ...(((_c = node.data.sla) === null || _c === void 0 ? void 0 : _c.onTimeout) === 'AUTO_APPROVE'
+            ? ['autoApprove']
+            : []),
+        ...(((_d = node.data.excludeInitiator) === null || _d === void 0 ? void 0 : _d.whenEmpty) === 'SKIP_NODE'
+            ? ['skipNode']
+            : []),
+    ];
+}
+const FILL_CONFLICT_ISSUES = {
+    autoApprove: {
+        code: 'fieldAccessAutoApprove',
+        message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.fieldAccessAutoApprove,
+    },
+    groupPolicy: {
+        code: 'fieldAccessGroupPolicy',
+        message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.fieldAccessGroupPolicy,
+    },
+    skipNode: {
+        code: 'fieldAccessSkipNode',
+        message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.fieldAccessSkipNode,
+    },
+};
+function isPlainRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+exports.FIELD_ACCESS_DISPLAYS = [
+    'SHOW',
+    'HIDE',
+];
+exports.FIELD_ACCESS_FILLS = [
+    'NONE',
+    'OPTIONAL',
+    'REQUIRED',
+];
+/**
+ * Whether a stored entry is one the publish lint accepts. Stricter than
+ * `readNodeFieldAccess`, which the engine reads with: a blank `fieldKey`
+ * passes there and fails here, so writers check with this one.
+ */
+function isFieldAccessEntryValid(entry) {
+    return (isPlainRecord(entry) &&
+        typeof entry['fieldKey'] === 'string' &&
+        entry['fieldKey'].trim() !== '' &&
+        exports.FIELD_ACCESS_DISPLAYS.some((display) => display === entry['display']) &&
+        exports.FIELD_ACCESS_FILLS.some((fill) => fill === entry['fill']));
+}
+/**
+ * One user task node's issues, in publish-lint order: the deprecated
+ * `fieldPermissions` key first, then its `fieldAccess`.
+ *
+ * `fieldPermissions` was reserved and never enforced, so whatever a draft
+ * holds there means nothing. Rather than read it as `fieldAccess` (which would
+ * suddenly enforce a shape nobody tested) or drop it silently, a draft that
+ * still carries the key cannot be published until it is removed.
+ *
+ * The shape and duplicate checks read the raw `fieldAccess`:
+ * `readNodeFieldAccess` tolerates a bad draft by skipping malformed entries
+ * and keeping the first entry per `fieldKey`, which is exactly what these two
+ * checks have to see. Once the shape is reported, the node's other field
+ * access rules are skipped, since they would read a list the engine is not
+ * going to honour anyway. Whether each `fieldKey` names a top-level field of
+ * the form is checked against the form (`readFormFieldAccessIssues`).
+ */
+function readNodeFieldAccessIssues(node) {
+    const nodeId = node.id;
+    const legacy = node.data.fieldPermissions;
+    const legacyIssues = legacy === undefined
+        ? []
+        : [
+            {
+                code: 'legacyFieldPermissions',
+                fieldKeys: [],
+                message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.legacyFieldPermissions(nodeId),
+                nodeIds: [nodeId],
+            },
+        ];
+    const raw = node.data.fieldAccess;
+    if (raw === undefined) {
+        return legacyIssues;
+    }
+    const entries = Array.isArray(raw)
+        ? raw
+        : undefined;
+    if (entries === undefined || !entries.every(isFieldAccessEntryValid)) {
+        return [
+            ...legacyIssues,
+            {
+                code: 'fieldAccessInvalid',
+                fieldKeys: [],
+                message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.fieldAccessInvalid(nodeId),
+                nodeIds: [nodeId],
+            },
+        ];
+    }
+    const fieldKeys = entries.map((entry) => entry.fieldKey);
+    const hasFillableField = (0, field_access_1.readNodeFillableFieldKeys)(node).size > 0;
+    return [
+        ...legacyIssues,
+        ...fieldKeys
+            .filter((fieldKey, index) => fieldKeys.indexOf(fieldKey) !== index)
+            .filter((fieldKey, index, repeated) => repeated.indexOf(fieldKey) === index)
+            .map((fieldKey) => ({
+            code: 'fieldAccessDuplicate',
+            fieldKeys: [fieldKey],
+            message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.fieldAccessDuplicate(nodeId, fieldKey),
+            nodeIds: [nodeId],
+        })),
+        ...(0, field_access_1.readNodeFieldAccess)(node)
+            .filter((entry) => entry.fill !== 'NONE' && entry.display === 'HIDE')
+            .map((entry) => ({
+            code: 'fieldAccessFillHidden',
+            fieldKeys: [entry.fieldKey],
+            message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.fieldAccessFillHidden(nodeId, entry.fieldKey),
+            nodeIds: [nodeId],
+        })),
+        ...(hasFillableField ? readUserTaskFillConflicts(node) : []).map((conflict) => ({
+            code: FILL_CONFLICT_ISSUES[conflict].code,
+            fieldKeys: [],
+            message: FILL_CONFLICT_ISSUES[conflict].message(nodeId),
+            nodeIds: [nodeId],
+        })),
+    ];
+}
+/**
+ * The nodes reachable from `startNodeIds` along `edges` without entering one
+ * of `blockedNodeIds`, the start nodes included unless blocked. Walks the
+ * graph one frontier at a time and drops every node it has already seen, so a
+ * cycle ends the walk instead of feeding it.
+ */
+function readReachableWorkflowNodeIds(edges, startNodeIds, blockedNodeIds = new Set()) {
+    const walk = (frontier, visited) => {
+        const fresh = [...new Set(frontier)].filter((nodeId) => !visited.has(nodeId) && !blockedNodeIds.has(nodeId));
+        return fresh.length
+            ? walk(edges
+                .filter((edge) => fresh.includes(edge.source))
+                .map((edge) => edge.target), new Set([...visited, ...fresh]))
+            : visited;
+    };
+    return walk(startNodeIds, new Set());
+}
+/**
+ * Whether two nodes can both run in one case: one reaches the other, or a
+ * parallel split sends each down a branch of its own (reachable from one
+ * outgoing edge of the split but not from another, and the other way round).
+ * Nodes on mutually exclusive branches never both run, and neither do two
+ * nodes that both lie after the join, which every branch reaches alike. The
+ * graph may hold a cycle, which the reachability walk copes with.
+ */
+function createWorkflowCoRunReader(definition) {
+    const reachableCache = new Map();
+    const readReachable = (nodeId) => {
+        const cached = reachableCache.get(nodeId);
+        if (cached !== undefined) {
+            return cached;
+        }
+        const reachable = readReachableWorkflowNodeIds(definition.edges, [nodeId]);
+        reachableCache.set(nodeId, reachable);
+        return reachable;
+    };
+    const parallelBranches = definition.nodes
+        .filter((node) => node.type === 'parallelGateway')
+        .map((node) => definition.edges
+        .filter((edge) => edge.source === node.id)
+        .map((edge) => readReachable(edge.target)))
+        .filter((branches) => branches.length >= 2);
+    const isOnOwnBranch = (branches, nodeId, otherNodeId) => branches.some((branch, index) => branch.has(nodeId) &&
+        !branch.has(otherNodeId) &&
+        branches.some((other, otherIndex) => otherIndex !== index &&
+            other.has(otherNodeId) &&
+            !other.has(nodeId)));
+    return (nodeId, otherNodeId) => readReachable(nodeId).has(otherNodeId) ||
+        readReachable(otherNodeId).has(nodeId) ||
+        parallelBranches.some((branches) => isOnOwnBranch(branches, nodeId, otherNodeId));
+}
+/**
+ * The issues read from the whole definition, in publish-lint order: a system
+ * node writing an approver-filled field, then two fill nodes of one field
+ * that can both run in one case.
+ *
+ * A field an approver fills in is empty until then, and the approver's value
+ * is the one the case keeps. A system node writing it would either be
+ * overwritten or overwrite the approver, so the two are kept apart.
+ *
+ * One field, one filler per run: when two nodes that fill the same field in
+ * can both run in one case (`createWorkflowCoRunReader`), the later one
+ * overwrites the earlier and the signed value no longer tells who answered.
+ * Fill nodes on mutually exclusive branches (one per region, say) stay
+ * allowed. Reported once per field and pair, in node order.
+ */
+function readDefinitionFieldAccessIssues(definition) {
+    const approverFilled = (0, field_access_1.readApproverFilledFieldKeys)(definition);
+    const writeIssues = definition.nodes
+        .filter((node) => node.type === 'serviceTask')
+        .flatMap((node) => {
+        const action = node.data.action;
+        const fieldPath = isPlainRecord(action) ? action['fieldPath'] : undefined;
+        const fieldKey = isPlainRecord(action) &&
+            action['type'] === 'SET_FORM_FIELD' &&
+            typeof fieldPath === 'string'
+            ? (0, field_access_1.readFormFieldPathTopLevelKey)(fieldPath)
+            : undefined;
+        return fieldKey !== undefined && approverFilled.has(fieldKey)
+            ? [
+                {
+                    code: 'setFormFieldApproverFilled',
+                    fieldKeys: [fieldKey],
+                    message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.setFormFieldApproverFilled(node.id, fieldKey),
+                    nodeIds: [node.id],
+                },
+            ]
+            : [];
+    });
+    const userTasks = definition.nodes.filter((node) => node.type === 'userTask');
+    const canBothRun = createWorkflowCoRunReader(definition);
+    const pathIssues = [...approverFilled].flatMap((fieldKey) => {
+        const fillNodeIds = [
+            ...new Set(userTasks
+                .filter((node) => (0, field_access_1.readNodeFillableFieldKeys)(node).has(fieldKey))
+                .map((node) => node.id)),
+        ];
+        return fillNodeIds.flatMap((nodeId, index) => fillNodeIds
+            .slice(index + 1)
+            .filter((otherNodeId) => canBothRun(nodeId, otherNodeId))
+            .map((otherNodeId) => ({
+            code: 'approverFilledMultipleFillNodesOnPath',
+            fieldKeys: [fieldKey],
+            message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.approverFilledMultipleFillNodesOnPath(fieldKey, nodeId, otherNodeId),
+            nodeIds: [nodeId, otherNodeId],
+        })));
+    });
+    return [...writeIssues, ...pathIssues];
+}
+/**
+ * Why a form field cannot be one an approver fills in, as the issues the
+ * publish lint reports once it is: a form-level rule (`required` / `hidden`
+ * set to `true`, the others set at all — `required: false` and
+ * `hidden: false`, what the form editor writes for "off", are not rules), a
+ * data source, a file upload, or a table with a data-source column. Empty
+ * when the field can be filled in.
+ */
+function readFormFieldFillIssues(field) {
+    const { fieldKey } = field;
+    const issue = (code, message) => ({
+        code,
+        fieldKeys: [fieldKey],
+        message,
+        nodeIds: [],
+    });
+    return [
+        ...workflow_graph_1.APPROVER_FILLED_FORM_RULES.filter((rule) => rule === 'required' || rule === 'hidden'
+            ? field[rule] === true
+            : field[rule] !== undefined).map((rule) => issue('approverFilledFieldFormRule', workflow_graph_1.WORKFLOW_LINT_MESSAGES.approverFilledFieldFormRule(fieldKey, rule))),
+        ...((0, form_1.isFormDataSourceFieldDefinition)(field)
+            ? [
+                issue('approverFilledFieldDataSource', workflow_graph_1.WORKFLOW_LINT_MESSAGES.approverFilledFieldDataSource(fieldKey)),
+            ]
+            : []),
+        ...(field.type === 'file_upload'
+            ? [
+                issue('approverFilledFieldFileUpload', workflow_graph_1.WORKFLOW_LINT_MESSAGES.approverFilledFieldFileUpload(fieldKey)),
+            ]
+            : []),
+        ...((0, form_1.isTableFieldDefinition)(field) &&
+            field.columns.some(form_1.isFormDataSourceFieldDefinition)
+            ? [
+                issue('approverFilledTableDataSourceColumn', workflow_graph_1.WORKFLOW_LINT_MESSAGES.approverFilledTableDataSourceColumn(fieldKey)),
+            ]
+            : []),
+    ];
+}
+/**
+ * True when a CEL expression reads the top-level form field `fieldKey` —
+ * `form.x`, `formData.x`, `form["x"]`, or any of those with `form . x` spacing
+ * or a deeper step after it (`form.x.y`, `form.x[0]`). `has(form.x)` counts.
+ *
+ * The root has to be a bare `form` / `formData`: `myform.x` and `a.form.x` are
+ * somebody else's `x`. The key has to end there: `form.xy` is another field.
+ * `form` and `formData` are the two allowed root identifiers that carry the
+ * form data (`WORKFLOW_EXPRESSION_ROOT_IDENTIFIERS`). A string literal that
+ * merely spells `form.x` counts too: a false hit only makes the publish lint
+ * stricter.
+ */
+function referencesFormField(expression, fieldKey) {
+    const escapedKey = fieldKey.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+    // Not preceded by an identifier character or a dot, so `myform` and
+    // `a.form` do not pass for the root.
+    const root = '(?<![\\p{L}\\p{N}_.])(?:formData|form)\\s*';
+    return [
+        new RegExp(`${root}\\.\\s*${escapedKey}(?![\\p{L}\\p{N}_])`, 'u'),
+        new RegExp(`${root}\\[\\s*["']${escapedKey}["']\\s*\\]`, 'u'),
+    ].some((pattern) => pattern.test(expression));
+}
+/**
+ * The issues read against the form the definition is bound to, in
+ * publish-lint order: a `fieldKey` that is not a top-level field of the form,
+ * an approver-filled field the form will not let anybody fill in
+ * (`readFormFieldFillIssues`, once per field however many nodes fill it in),
+ * `fill: 'REQUIRED'` on a boolean (`false` is an answer, so required can never
+ * fail), and an applicant's rule that reads an approver-filled field — the
+ * rule is evaluated against the submitted form, where that field is still
+ * empty, and the evaluation silently compares against nothing.
+ */
+function readFormFieldAccessIssues(definition, schema) {
+    var _a, _b;
+    const fieldsByKey = new Map(((_a = schema === null || schema === void 0 ? void 0 : schema.fields) !== null && _a !== void 0 ? _a : []).map((field) => [
+        field.fieldKey,
+        field,
+    ]));
+    const userTasks = definition.nodes.filter((node) => node.type === 'userTask');
+    const unknownFieldIssues = userTasks.flatMap((node) => (0, field_access_1.readNodeFieldAccess)(node)
+        .filter(({ fieldKey }) => !fieldsByKey.has(fieldKey))
+        .map(({ fieldKey }) => ({
+        code: 'fieldAccessUnknownField',
+        fieldKeys: [fieldKey],
+        message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.fieldAccessUnknownField(node.id, fieldKey),
+        nodeIds: [node.id],
+    })));
+    const requiredBooleanIssues = userTasks.flatMap((node) => (0, field_access_1.readNodeFieldAccess)(node)
+        .filter(({ fieldKey, fill }) => {
+        var _a;
+        return fill === 'REQUIRED' &&
+            ((_a = fieldsByKey.get(fieldKey)) === null || _a === void 0 ? void 0 : _a.type) === 'boolean';
+    })
+        .map(({ fieldKey }) => ({
+        code: 'approverFilledRequiredBoolean',
+        fieldKeys: [fieldKey],
+        message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.approverFilledRequiredBoolean(node.id, fieldKey),
+        nodeIds: [node.id],
+    })));
+    const approverFilled = (0, field_access_1.readApproverFilledFieldKeys)(definition);
+    const applicantRuleIssues = ((_b = schema === null || schema === void 0 ? void 0 : schema.fields) !== null && _b !== void 0 ? _b : [])
+        .filter((field) => !approverFilled.has(field.fieldKey))
+        .flatMap((field) => workflow_graph_1.APPLICANT_FIELD_CONDITION_RULES.flatMap((rule) => {
+        const expression = field[rule];
+        return typeof expression === 'string'
+            ? [...approverFilled]
+                .filter((fieldKey) => referencesFormField(expression, fieldKey))
+                .map((fieldKey) => ({
+                code: 'applicantRuleReadsApproverFilled',
+                fieldKeys: [field.fieldKey, fieldKey],
+                message: workflow_graph_1.WORKFLOW_LINT_MESSAGES.applicantRuleReadsApproverFilled(field.fieldKey, rule, fieldKey),
+                nodeIds: [],
+            }))
+            : [];
+    }));
+    const fieldIssues = [...approverFilled].flatMap((fieldKey) => {
+        const field = fieldsByKey.get(fieldKey);
+        return field === undefined ? [] : readFormFieldFillIssues(field);
+    });
+    return [
+        ...unknownFieldIssues,
+        ...fieldIssues,
+        ...requiredBooleanIssues,
+        ...applicantRuleIssues,
+    ];
+}
+//# sourceMappingURL=field-access-lint.js.map

package/src/lib/field-access-lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-access-lint.js","sourceRoot":"","sources":["../../../../../libs/shared/src/lib/field-access-lint.ts"],"names":[],"mappings":";;;AAsEA,8DAeC;AA+CD,0DAUC;AAmBD,8DA0EC;AAQD,oEAwBC;AAUD,8DAgDC;AAiBD,0EA6DC;AAUD,0DAqDC;AAcD,kDAaC;AAYD,8DAyFC;AAllBD,iCAKgB;AAChB,iDAKwB;AASxB,qDAI0B;AA8C1B,SAAgB,yBAAyB,CACvC,IAAkB;;IAElB,OAAO;QACL,GAAG,CAAC,CAAA,MAAA,IAAI,CAAC,IAAI,CAAC,cAAc,0CAAE,IAAI,MAAK,cAAc;YACrD,CAAA,MAAA,IAAI,CAAC,IAAI,CAAC,cAAc,0CAAE,IAAI,MAAK,QAAQ;YACzC,CAAC,CAAE,CAAC,aAAa,CAAW;YAC5B,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAA,MAAA,IAAI,CAAC,IAAI,CAAC,GAAG,0CAAE,SAAS,MAAK,cAAc;YAC7C,CAAC,CAAE,CAAC,aAAa,CAAW;YAC5B,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAA,MAAA,IAAI,CAAC,IAAI,CAAC,gBAAgB,0CAAE,SAAS,MAAK,WAAW;YACvD,CAAC,CAAE,CAAC,UAAU,CAAW;YACzB,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,oBAAoB,GAQtB;IACF,WAAW,EAAE;QACX,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,uCAAsB,CAAC,sBAAsB;KACvD;IACD,WAAW,EAAE;QACX,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,uCAAsB,CAAC,sBAAsB;KACvD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,uCAAsB,CAAC,mBAAmB;KACpD;CACF,CAAC;AAEF,SAAS,aAAa,CACpB,KAAc;IAEd,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAEY,QAAA,qBAAqB,GAAkC;IAClE,MAAM;IACN,MAAM;CACP,CAAC;AAEW,QAAA,kBAAkB,GAA+B;IAC5D,MAAM;IACN,UAAU;IACV,UAAU;CACX,CAAC;AAEF;;;;GAIG;AACH,SAAgB,uBAAuB,CACrC,KAAc;IAEd,OAAO,CACL,aAAa,CAAC,KAAK,CAAC;QACpB,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QACrC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAC/B,6BAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QACrE,0BAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,yBAAyB,CACvC,IAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACvB,MAAM,MAAM,GAAY,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACnD,MAAM,YAAY,GAChB,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,uCAAsB,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAC9D,OAAO,EAAE,CAAC,MAAM,CAAC;aAClB;SACF,CAAC;IACR,MAAM,GAAG,GAAY,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;IAE3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAmC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAChE,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,GAAG,YAAY;YACf;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,uCAAsB,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAC1D,OAAO,EAAE,CAAC,MAAM,CAAC;aAClB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,IAAA,wCAAyB,EAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAElE,OAAO;QACL,GAAG,YAAY;QACf,GAAG,SAAS;aACT,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;aAClE,MAAM,CACL,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,CACpE;aACA,GAAG,CAAC,CAAC,QAAQ,EAAoB,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,sBAAsB;YAC5B,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,OAAO,EAAE,uCAAsB,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC;YACtE,OAAO,EAAE,CAAC,MAAM,CAAC;SAClB,CAAC,CAAC;QACL,GAAG,IAAA,kCAAmB,EAAC,IAAI,CAAC;aACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC;aACpE,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC3B,OAAO,EAAE,uCAAsB,CAAC,qBAAqB,CACnD,MAAM,EACN,KAAK,CAAC,QAAQ,CACf;YACD,OAAO,EAAE,CAAC,MAAM,CAAC;SAClB,CAAC,CAAC;QACL,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAC9D,CAAC,QAAQ,EAAoB,EAAE,CAAC,CAAC;YAC/B,IAAI,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,IAAI;YACzC,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YACvD,OAAO,EAAE,CAAC,MAAM,CAAC;SAClB,CAAC,CACH;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CAC1C,KAA8B,EAC9B,YAA+B,EAC/B,iBAAsC,IAAI,GAAG,EAAE;IAE/C,MAAM,IAAI,GAAG,CACX,QAA2B,EAC3B,OAA4B,EACP,EAAE;QACvB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAChE,CAAC;QAEF,OAAO,KAAK,CAAC,MAAM;YACjB,CAAC,CAAC,IAAI,CACF,KAAK;iBACF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;iBAC7C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAC7B,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,CAChC;YACH,CAAC,CAAC,OAAO,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,yBAAyB,CACvC,UAA8B;IAE9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC9D,MAAM,aAAa,GAAG,CAAC,MAAc,EAAuB,EAAE;QAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,4BAA4B,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAE3E,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEtC,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK;SACtC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,iBAAiB,CAAC;SACjD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,UAAU,CAAC,KAAK;SACb,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;SACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAC7C;SACA,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,CACpB,QAAwC,EACxC,MAAc,EACd,WAAmB,EACV,EAAE,CACX,QAAQ,CAAC,IAAI,CACX,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAClB,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACxB,QAAQ,CAAC,IAAI,CACX,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CACpB,UAAU,KAAK,KAAK;YACpB,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;YACtB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CACrB,CACJ,CAAC;IAEJ,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAC7B,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;QACtC,aAAa,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACtC,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACjC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAC7C,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,+BAA+B,CAC7C,UAA8B;IAE9B,MAAM,cAAc,GAAG,IAAA,0CAA2B,EAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK;SACjC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC;SAC7C,OAAO,CAAC,CAAC,IAAI,EAA+B,EAAE;QAC7C,MAAM,MAAM,GAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,QAAQ,GACZ,aAAa,CAAC,MAAM,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,KAAK,gBAAgB;YACnC,OAAO,SAAS,KAAK,QAAQ;YAC3B,CAAC,CAAC,IAAA,2CAA4B,EAAC,SAAS,CAAC;YACzC,CAAC,CAAC,SAAS,CAAC;QAEhB,OAAO,QAAQ,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC3D,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,4BAA4B;oBAClC,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,OAAO,EAAE,uCAAsB,CAAC,0BAA0B,CACxD,IAAI,CAAC,EAAE,EACP,QAAQ,CACT;oBACD,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;iBACnB;aACF;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACL,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CACvC,CAAC,IAAI,EAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CACzD,CAAC;IACF,MAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC1D,MAAM,WAAW,GAAG;YAClB,GAAG,IAAI,GAAG,CACR,SAAS;iBACN,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,wCAAyB,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;iBAC/D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAC1B;SACF,CAAC;QAEF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC3C,WAAW;aACR,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;aAChB,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,WAAW,EAAoB,EAAE,CAAC,CAAC;YACvC,IAAI,EAAE,uCAAuC;YAC7C,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,OAAO,EAAE,uCAAsB,CAAC,qCAAqC,CACnE,QAAQ,EACR,MAAM,EACN,WAAW,CACZ;YACD,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;SAC/B,CAAC,CAAC,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CACrC,KAA0B;IAE1B,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,CACZ,IAA0B,EAC1B,OAAe,EACG,EAAE,CAAC,CAAC;QACtB,IAAI;QACJ,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,OAAO;QACP,OAAO,EAAE,EAAE;KACZ,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,2CAA0B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAW,EAAE,CACrD,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ;YACtC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI;YACtB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAC9B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACb,KAAK,CACH,6BAA6B,EAC7B,uCAAsB,CAAC,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC,CACnE,CACF;QACD,GAAG,CAAC,IAAA,sCAA+B,EAAC,KAAK,CAAC;YACxC,CAAC,CAAC;gBACE,KAAK,CACH,+BAA+B,EAC/B,uCAAsB,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAC/D;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa;YAC9B,CAAC,CAAC;gBACE,KAAK,CACH,+BAA+B,EAC/B,uCAAsB,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAC/D;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,IAAA,6BAAsB,EAAC,KAAK,CAAC;YACjC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sCAA+B,CAAC;YACjD,CAAC,CAAC;gBACE,KAAK,CACH,qCAAqC,EACrC,uCAAsB,CAAC,mCAAmC,CACxD,QAAQ,CACT,CACF;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,mBAAmB,CACjC,UAAkB,EAClB,QAAgB;IAEhB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACpE,oEAAoE;IACpE,qCAAqC;IACrC,MAAM,IAAI,GAAG,4CAA4C,CAAC;IAE1D,OAAO;QACL,IAAI,MAAM,CAAC,GAAG,IAAI,UAAU,UAAU,qBAAqB,EAAE,GAAG,CAAC;QACjE,IAAI,MAAM,CAAC,GAAG,IAAI,cAAc,UAAU,aAAa,EAAE,GAAG,CAAC;KAC9D,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,yBAAyB,CACvC,UAA8B,EAC9B,MAAmC;;IAEnC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,CAAC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,mCAAI,EAAE,CAAC,CAAC,GAAG,CACxB,CAAC,KAAK,EAA0C,EAAE,CAAC;QACjD,KAAK,CAAC,QAAQ;QACd,KAAK;KACN,CACF,CACF,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CACvC,CAAC,IAAI,EAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CACzD,CAAC;IACF,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAC1C,CAAC,IAAI,EAA+B,EAAE,CACpC,IAAA,kCAAmB,EAAC,IAAI,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAW,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;SAC7D,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,OAAO,EAAE,uCAAsB,CAAC,uBAAuB,CACrD,IAAI,CAAC,EAAE,EACP,QAAQ,CACT;QACD,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;KACnB,CAAC,CAAC,CACR,CAAC;IACF,MAAM,qBAAqB,GAAG,SAAS,CAAC,OAAO,CAC7C,CAAC,IAAI,EAA+B,EAAE,CACpC,IAAA,kCAAmB,EAAC,IAAI,CAAC;SACtB,MAAM,CACL,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAW,EAAE;;QAC9B,OAAA,IAAI,KAAK,UAAU;YACnB,CAAA,MAAA,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,0CAAE,IAAI,MAAK,SAAS,CAAA;KAAA,CAChD;SACA,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,+BAA+B;QACrC,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,OAAO,EAAE,uCAAsB,CAAC,6BAA6B,CAC3D,IAAI,CAAC,EAAE,EACP,QAAQ,CACT;QACD,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;KACnB,CAAC,CAAC,CACR,CAAC;IACF,MAAM,cAAc,GAAG,IAAA,0CAA2B,EAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,mBAAmB,GAAG,CAAC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,mCAAI,EAAE,CAAC;SAC/C,MAAM,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SAC/D,OAAO,CAAC,CAAC,KAAK,EAA+B,EAAE,CAC9C,gDAA+B,CAAC,OAAO,CACrC,CAAC,IAAI,EAA+B,EAAE;QACpC,MAAM,UAAU,GAAY,KAAK,CAAC,IAAI,CAAC,CAAC;QAExC,OAAO,OAAO,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC;iBAChB,MAAM,CAAC,CAAC,QAAQ,EAAW,EAAE,CAC5B,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAC1C;iBACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAClB,IAAI,EAAE,kCAAkC;gBACxC,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBACrC,OAAO,EACL,uCAAsB,CAAC,gCAAgC,CACrD,KAAK,CAAC,QAAQ,EACd,IAAI,EACJ,QAAQ,CACT;gBACH,OAAO,EAAE,EAAE;aACZ,CAAC,CAAC;YACP,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CACF,CACF,CAAC;IACJ,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,OAAO,CAC7C,CAAC,QAAQ,EAA+B,EAAE;QACxC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CACF,CAAC;IAEF,OAAO;QACL,GAAG,kBAAkB;QACrB,GAAG,WAAW;QACd,GAAG,qBAAqB;QACxB,GAAG,mBAAmB;KACvB,CAAC;AACJ,CAAC"}