@strapi/plugin-users-permissions 0.0.0-experimental.62ebf57bb35846666febb5ee2078fe02fe990f57 → 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282

package/dist/server/controllers/validation/auth.mjs

@@ -0,0 +1,129 @@
+import require$$1 from '@strapi/utils';
+
+var auth;
+var hasRequiredAuth;
+function requireAuth() {
+    if (hasRequiredAuth) return auth;
+    hasRequiredAuth = 1;
+    const { yup, validateYupSchema } = require$$1;
+    const callbackSchema = yup.object({
+        identifier: yup.string().required(),
+        password: yup.string().required()
+    });
+    const createRegisterSchema = (config)=>yup.object({
+            email: yup.string().email().required(),
+            username: yup.string().required(),
+            password: yup.string().required().test(function(value) {
+                if (!value) return true;
+                const isValid = new TextEncoder().encode(value).length <= 72;
+                if (!isValid) {
+                    return this.createError({
+                        message: 'Password must be less than 73 bytes'
+                    });
+                }
+                return true;
+            }).test(async function(value) {
+                if (typeof config?.validatePassword === 'function') {
+                    try {
+                        const isValid = await config.validatePassword(value);
+                        if (!isValid) {
+                            return this.createError({
+                                message: 'Password validation failed.'
+                            });
+                        }
+                    } catch (error) {
+                        return this.createError({
+                            message: error.message || 'An error occurred.'
+                        });
+                    }
+                }
+                return true;
+            })
+        });
+    const sendEmailConfirmationSchema = yup.object({
+        email: yup.string().email().required()
+    });
+    const validateEmailConfirmationSchema = yup.object({
+        confirmation: yup.string().required()
+    });
+    const forgotPasswordSchema = yup.object({
+        email: yup.string().email().required()
+    }).noUnknown();
+    const createResetPasswordSchema = (config)=>yup.object({
+            password: yup.string().required().test(function(value) {
+                if (!value) return true;
+                const isValid = new TextEncoder().encode(value).length <= 72;
+                if (!isValid) {
+                    return this.createError({
+                        message: 'Password must be less than 73 bytes'
+                    });
+                }
+                return true;
+            }).test(async function(value) {
+                if (typeof config?.validatePassword === 'function') {
+                    try {
+                        const isValid = await config.validatePassword(value);
+                        if (!isValid) {
+                            return this.createError({
+                                message: 'Password validation failed.'
+                            });
+                        }
+                    } catch (error) {
+                        return this.createError({
+                            message: error.message || 'An error occurred.'
+                        });
+                    }
+                }
+                return true;
+            }),
+            passwordConfirmation: yup.string().required().oneOf([
+                yup.ref('password')
+            ], 'Passwords do not match'),
+            code: yup.string().required()
+        }).noUnknown();
+    const createChangePasswordSchema = (config)=>yup.object({
+            password: yup.string().required().test(function(value) {
+                if (!value) return true;
+                const isValid = new TextEncoder().encode(value).length <= 72;
+                if (!isValid) {
+                    return this.createError({
+                        message: 'Password must be less than 73 bytes'
+                    });
+                }
+                return true;
+            }).test(async function(value) {
+                if (typeof config?.validatePassword === 'function') {
+                    try {
+                        const isValid = await config.validatePassword(value);
+                        if (!isValid) {
+                            return this.createError({
+                                message: 'Password validation failed.'
+                            });
+                        }
+                    } catch (error) {
+                        return this.createError({
+                            message: error.message || 'An error occurred.'
+                        });
+                    }
+                }
+                return true;
+            }),
+            passwordConfirmation: yup.string().required().oneOf([
+                yup.ref('password')
+            ], 'Passwords do not match'),
+            currentPassword: yup.string().required()
+        }).noUnknown();
+    auth = {
+        validateCallbackBody: validateYupSchema(callbackSchema),
+        validateRegisterBody: (payload, config)=>validateYupSchema(createRegisterSchema(config))(payload),
+        validateSendEmailConfirmationBody: validateYupSchema(sendEmailConfirmationSchema),
+        validateEmailConfirmationBody: validateYupSchema(validateEmailConfirmationSchema),
+        validateForgotPasswordBody: validateYupSchema(forgotPasswordSchema),
+        validateResetPasswordBody: (payload, config)=>validateYupSchema(createResetPasswordSchema(config))(payload),
+        validateChangePasswordBody: (payload, config)=>validateYupSchema(createChangePasswordSchema(config))(payload)
+    };
+    return auth;
+}
+
+export { requireAuth as __require };
+//# sourceMappingURL=auth.mjs.map

package/dist/server/controllers/validation/auth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.mjs","sources":["../../../../server/controllers/validation/auth.js"],"sourcesContent":["'use strict';\n\nconst { yup, validateYupSchema } = require('@strapi/utils');\n\nconst callbackSchema = yup.object({\n  identifier: yup.string().required(),\n  password: yup.string().required(),\n});\n\nconst createRegisterSchema = (config) =>\n  yup.object({\n    email: yup.string().email().required(),\n    username: yup.string().required(),\n    password: yup\n      .string()\n      .required()\n      .test(function (value) {\n        if (!value) return true;\n        const isValid = new TextEncoder().encode(value).length <= 72;\n        if (!isValid) {\n          return this.createError({ message: 'Password must be less than 73 bytes' });\n        }\n        return true;\n      })\n      .test(async function (value) {\n        if (typeof config?.validatePassword === 'function') {\n          try {\n            const isValid = await config.validatePassword(value);\n            if (!isValid) {\n              return this.createError({ message: 'Password validation failed.' });\n            }\n          } catch (error) {\n            return this.createError({ message: error.message || 'An error occurred.' });\n          }\n        }\n        return true;\n      }),\n  });\n\nconst sendEmailConfirmationSchema = yup.object({\n  email: yup.string().email().required(),\n});\n\nconst validateEmailConfirmationSchema = yup.object({\n  confirmation: yup.string().required(),\n});\n\nconst forgotPasswordSchema = yup\n  .object({\n    email: yup.string().email().required(),\n  })\n  .noUnknown();\n\nconst createResetPasswordSchema = (config) =>\n  yup\n    .object({\n      password: yup\n        .string()\n        .required()\n        .test(function (value) {\n          if (!value) return true;\n          const isValid = new TextEncoder().encode(value).length <= 72;\n          if (!isValid) {\n            return this.createError({ message: 'Password must be less than 73 bytes' });\n          }\n          return true;\n        })\n        .test(async function (value) {\n          if (typeof config?.validatePassword === 'function') {\n            try {\n              const isValid = await config.validatePassword(value);\n              if (!isValid) {\n                return this.createError({ message: 'Password validation failed.' });\n              }\n            } catch (error) {\n              return this.createError({ message: error.message || 'An error occurred.' });\n            }\n          }\n          return true;\n        }),\n      passwordConfirmation: yup\n        .string()\n        .required()\n        .oneOf([yup.ref('password')], 'Passwords do not match'),\n\n      code: yup.string().required(),\n    })\n    .noUnknown();\n\nconst createChangePasswordSchema = (config) =>\n  yup\n    .object({\n      password: yup\n        .string()\n        .required()\n        .test(function (value) {\n          if (!value) return true;\n          const isValid = new TextEncoder().encode(value).length <= 72;\n          if (!isValid) {\n            return this.createError({ message: 'Password must be less than 73 bytes' });\n          }\n          return true;\n        })\n        .test(async function (value) {\n          if (typeof config?.validatePassword === 'function') {\n            try {\n              const isValid = await config.validatePassword(value);\n              if (!isValid) {\n                return this.createError({ message: 'Password validation failed.' });\n              }\n            } catch (error) {\n              return this.createError({ message: error.message || 'An error occurred.' });\n            }\n          }\n          return true;\n        }),\n      passwordConfirmation: yup\n        .string()\n        .required()\n        .oneOf([yup.ref('password')], 'Passwords do not match'),\n      currentPassword: yup.string().required(),\n    })\n    .noUnknown();\n\nmodule.exports = {\n  validateCallbackBody: validateYupSchema(callbackSchema),\n  validateRegisterBody: (payload, config) =>\n    validateYupSchema(createRegisterSchema(config))(payload),\n  validateSendEmailConfirmationBody: validateYupSchema(sendEmailConfirmationSchema),\n  validateEmailConfirmationBody: validateYupSchema(validateEmailConfirmationSchema),\n  validateForgotPasswordBody: validateYupSchema(forgotPasswordSchema),\n  validateResetPasswordBody: (payload, config) =>\n    validateYupSchema(createResetPasswordSchema(config))(payload),\n  validateChangePasswordBody: (payload, config) =>\n    validateYupSchema(createChangePasswordSchema(config))(payload),\n};\n"],"names":["yup","validateYupSchema","require$$0","callbackSchema","object","identifier","string","required","password","createRegisterSchema","config","email","username","test","value","isValid","TextEncoder","encode","length","createError","message","validatePassword","error","sendEmailConfirmationSchema","validateEmailConfirmationSchema","confirmation","forgotPasswordSchema","noUnknown","createResetPasswordSchema","passwordConfirmation","oneOf","ref","code","createChangePasswordSchema","currentPassword","auth","validateCallbackBody","validateRegisterBody","payload","validateSendEmailConfirmationBody","validateEmailConfirmationBody","validateForgotPasswordBody","validateResetPasswordBody","validateChangePasswordBody"],"mappings":";;;;;;;AAEA,IAAA,MAAM,EAAEA,GAAG,EAAEC,iBAAiB,EAAE,GAAGC,UAAAA;IAEnC,MAAMC,cAAAA,GAAiBH,GAAAA,CAAII,MAAM,CAAC;QAChCC,UAAAA,EAAYL,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ,EAAA;QACjCC,QAAAA,EAAUR,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACjC,KAAA,CAAA;AAEA,IAAA,MAAME,oBAAAA,GAAuB,CAACC,MAAAA,GAC5BV,GAAAA,CAAII,MAAM,CAAC;AACTO,YAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ,EAAA;YACpCK,QAAAA,EAAUZ,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ,EAAA;YAC/BC,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AAClF,gBAAA;gBACQ,OAAO,IAAA;YACf,CAAA,CAAA,CACOP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAC9E,wBAAA;AACA,oBAAA,CAAA,CAAY,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACpF,oBAAA;AACA,gBAAA;gBACQ,OAAO,IAAA;AACf,YAAA,CAAA;AACA,SAAA,CAAA;IAEA,MAAMG,2BAAAA,GAA8BvB,GAAAA,CAAII,MAAM,CAAC;AAC7CO,QAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ;AACtC,KAAA,CAAA;IAEA,MAAMiB,+BAAAA,GAAkCxB,GAAAA,CAAII,MAAM,CAAC;QACjDqB,YAAAA,EAAczB,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACrC,KAAA,CAAA;IAEA,MAAMmB,oBAAAA,GAAuB1B,GAAAA,CAC1BI,MAAM,CAAC;AACNO,QAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ;AACxC,KAAA,CAAA,CACGoB,SAAS,EAAA;AAEZ,IAAA,MAAMC,yBAAAA,GAA4B,CAAClB,MAAAA,GACjCV,GAAAA,CACGI,MAAM,CAAC;YACNI,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AACpF,gBAAA;gBACU,OAAO,IAAA;YACjB,CAAA,CAAA,CACSP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAChF,wBAAA;AACA,oBAAA,CAAA,CAAc,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACtF,oBAAA;AACA,gBAAA;gBACU,OAAO,IAAA;AACjB,YAAA,CAAA,CAAA;AACMS,YAAAA,oBAAAA,EAAsB7B,IACnBM,MAAM,EAAA,CACNC,QAAQ,EAAA,CACRuB,KAAK,CAAC;AAAC9B,gBAAAA,GAAAA,CAAI+B,GAAG,CAAC,UAAA;aAAY,EAAE,wBAAA,CAAA;YAEhCC,IAAAA,EAAMhC,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACjC,SAAA,CAAA,CACKoB,SAAS,EAAA;AAEd,IAAA,MAAMM,0BAAAA,GAA6B,CAACvB,MAAAA,GAClCV,GAAAA,CACGI,MAAM,CAAC;YACNI,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AACpF,gBAAA;gBACU,OAAO,IAAA;YACjB,CAAA,CAAA,CACSP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAChF,wBAAA;AACA,oBAAA,CAAA,CAAc,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACtF,oBAAA;AACA,gBAAA;gBACU,OAAO,IAAA;AACjB,YAAA,CAAA,CAAA;AACMS,YAAAA,oBAAAA,EAAsB7B,IACnBM,MAAM,EAAA,CACNC,QAAQ,EAAA,CACRuB,KAAK,CAAC;AAAC9B,gBAAAA,GAAAA,CAAI+B,GAAG,CAAC,UAAA;aAAY,EAAE,wBAAA,CAAA;YAChCG,eAAAA,EAAiBlC,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AAC5C,SAAA,CAAA,CACKoB,SAAS,EAAA;IAEdQ,IAAAA,GAAiB;AACfC,QAAAA,oBAAAA,EAAsBnC,iBAAAA,CAAkBE,cAAAA,CAAAA;AACxCkC,QAAAA,oBAAAA,EAAsB,CAACC,OAAAA,EAAS5B,MAAAA,GAC9BT,iBAAAA,CAAkBQ,qBAAqBC,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA,CAAAA;AAClDC,QAAAA,iCAAAA,EAAmCtC,iBAAAA,CAAkBsB,2BAAAA,CAAAA;AACrDiB,QAAAA,6BAAAA,EAA+BvC,iBAAAA,CAAkBuB,+BAAAA,CAAAA;AACjDiB,QAAAA,0BAAAA,EAA4BxC,iBAAAA,CAAkByB,oBAAAA,CAAAA;AAC9CgB,QAAAA,yBAAAA,EAA2B,CAACJ,OAAAA,EAAS5B,MAAAA,GACnCT,iBAAAA,CAAkB2B,0BAA0BlB,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA,CAAAA;AACvDK,QAAAA,0BAAAA,EAA4B,CAACL,OAAAA,EAAS5B,MAAAA,GACpCT,iBAAAA,CAAkBgC,2BAA2BvB,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA;AAC1D,KAAA;;;;;;"}

package/dist/server/controllers/validation/email-template.js

@@ -0,0 +1,77 @@
+'use strict';
+
+var require$$0 = require('lodash/fp');
+var require$$1 = require('@strapi/utils');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
+var emailTemplate;
+var hasRequiredEmailTemplate;
+function requireEmailTemplate() {
+    if (hasRequiredEmailTemplate) return emailTemplate;
+    hasRequiredEmailTemplate = 1;
+    const { trim } = require$$0__default.default;
+    const { template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp } } = require$$1__default.default;
+    const invalidPatternsRegexes = [
+        // Ignore "evaluation" patterns: <% ... %>
+        /<%[^=]([\s\S]*?)%>/m,
+        // Ignore basic string interpolations
+        /\${([^{}]*)}/m
+    ];
+    const authorizedKeys = [
+        'URL',
+        'ADMIN_URL',
+        'SERVER_URL',
+        'CODE',
+        'USER',
+        'USER.email',
+        'USER.username',
+        'TOKEN'
+    ];
+    const matchAll = (pattern, src)=>{
+        const matches = [];
+        let match;
+        const regexPatternWithGlobal = RegExp(pattern, 'g');
+        // eslint-disable-next-line no-cond-assign
+        while(match = regexPatternWithGlobal.exec(src)){
+            const [, group] = match;
+            matches.push(trim(group));
+        }
+        return matches;
+    };
+    const isValidEmailTemplate = (template)=>{
+        // Check for known invalid patterns
+        for (const reg of invalidPatternsRegexes){
+            if (reg.test(template)) {
+                return false;
+            }
+        }
+        const interpolation = {
+            // Strict interpolation pattern to match only valid groups
+            strict: createStrictInterpolationRegExp(authorizedKeys),
+            // Weak interpolation pattern to match as many group as possible.
+            loose: createLooseInterpolationRegExp()
+        };
+        // Compute both strict & loose matches
+        const strictMatches = matchAll(interpolation.strict, template);
+        const looseMatches = matchAll(interpolation.loose, template);
+        // If we have more matches with the loose RegExp than with the strict one,
+        // then it means that at least one of the interpolation group is invalid
+        // Note: In the future, if we wanted to give more details for error formatting
+        // purposes, we could return the difference between the two arrays
+        if (looseMatches.length > strictMatches.length) {
+            return false;
+        }
+        return true;
+    };
+    emailTemplate = {
+        isValidEmailTemplate
+    };
+    return emailTemplate;
+}
+
+exports.__require = requireEmailTemplate;
+//# sourceMappingURL=email-template.js.map

package/dist/server/controllers/validation/email-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-template.js","sources":["../../../../server/controllers/validation/email-template.js"],"sourcesContent":["'use strict';\n\nconst { trim } = require('lodash/fp');\nconst {\n  template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp },\n} = require('@strapi/utils');\n\nconst invalidPatternsRegexes = [\n  // Ignore \"evaluation\" patterns: <% ... %>\n  /<%[^=]([\\s\\S]*?)%>/m,\n  // Ignore basic string interpolations\n  /\\${([^{}]*)}/m,\n];\n\nconst authorizedKeys = [\n  'URL',\n  'ADMIN_URL',\n  'SERVER_URL',\n  'CODE',\n  'USER',\n  'USER.email',\n  'USER.username',\n  'TOKEN',\n];\n\nconst matchAll = (pattern, src) => {\n  const matches = [];\n  let match;\n\n  const regexPatternWithGlobal = RegExp(pattern, 'g');\n\n  // eslint-disable-next-line no-cond-assign\n  while ((match = regexPatternWithGlobal.exec(src))) {\n    const [, group] = match;\n\n    matches.push(trim(group));\n  }\n\n  return matches;\n};\n\nconst isValidEmailTemplate = (template) => {\n  // Check for known invalid patterns\n  for (const reg of invalidPatternsRegexes) {\n    if (reg.test(template)) {\n      return false;\n    }\n  }\n\n  const interpolation = {\n    // Strict interpolation pattern to match only valid groups\n    strict: createStrictInterpolationRegExp(authorizedKeys),\n    // Weak interpolation pattern to match as many group as possible.\n    loose: createLooseInterpolationRegExp(),\n  };\n\n  // Compute both strict & loose matches\n  const strictMatches = matchAll(interpolation.strict, template);\n  const looseMatches = matchAll(interpolation.loose, template);\n\n  // If we have more matches with the loose RegExp than with the strict one,\n  // then it means that at least one of the interpolation group is invalid\n  // Note: In the future, if we wanted to give more details for error formatting\n  // purposes, we could return the difference between the two arrays\n  if (looseMatches.length > strictMatches.length) {\n    return false;\n  }\n\n  return true;\n};\n\nmodule.exports = {\n  isValidEmailTemplate,\n};\n"],"names":["trim","require$$0","template","createLooseInterpolationRegExp","createStrictInterpolationRegExp","require$$1","invalidPatternsRegexes","authorizedKeys","matchAll","pattern","src","matches","match","regexPatternWithGlobal","RegExp","exec","group","push","isValidEmailTemplate","reg","test","interpolation","strict","loose","strictMatches","looseMatches","length","emailTemplate"],"mappings":";;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,IAAI,EAAE,GAAGC,2BAAAA;IACjB,MAAM,EACJC,UAAU,EAAEC,8BAA8B,EAAEC,+BAA+B,EAAE,EAC9E,GAAGC,2BAAAA;AAEJ,IAAA,MAAMC,sBAAAA,GAAyB;;AAE7B,QAAA,qBAAA;;AAEA,QAAA;AACD,KAAA;AAED,IAAA,MAAMC,cAAAA,GAAiB;AACrB,QAAA,KAAA;AACA,QAAA,WAAA;AACA,QAAA,YAAA;AACA,QAAA,MAAA;AACA,QAAA,MAAA;AACA,QAAA,YAAA;AACA,QAAA,eAAA;AACA,QAAA;AACD,KAAA;IAED,MAAMC,QAAAA,GAAW,CAACC,OAAAA,EAASC,GAAAA,GAAAA;AACzB,QAAA,MAAMC,UAAU,EAAE;QAClB,IAAIC,KAAAA;QAEJ,MAAMC,sBAAAA,GAAyBC,OAAOL,OAAAA,EAAS,GAAA,CAAA;;AAG/C,QAAA,MAAQG,KAAAA,GAAQC,sBAAAA,CAAuBE,IAAI,CAACL,GAAAA,CAAAA,CAAO;YACjD,MAAM,GAAGM,MAAM,GAAGJ,KAAAA;YAElBD,OAAAA,CAAQM,IAAI,CAACjB,IAAAA,CAAKgB,KAAAA,CAAAA,CAAAA;AACtB,QAAA;QAEE,OAAOL,OAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMO,uBAAuB,CAAChB,QAAAA,GAAAA;;QAE5B,KAAK,MAAMiB,OAAOb,sBAAAA,CAAwB;YACxC,IAAIa,GAAAA,CAAIC,IAAI,CAAClB,QAAAA,CAAAA,EAAW;gBACtB,OAAO,KAAA;AACb,YAAA;AACA,QAAA;AAEE,QAAA,MAAMmB,aAAAA,GAAgB;;AAEpBC,YAAAA,MAAAA,EAAQlB,+BAAAA,CAAgCG,cAAAA,CAAAA;;YAExCgB,KAAAA,EAAOpB,8BAAAA;AACX,SAAA;;AAGE,QAAA,MAAMqB,aAAAA,GAAgBhB,QAAAA,CAASa,aAAAA,CAAcC,MAAM,EAAEpB,QAAAA,CAAAA;AACrD,QAAA,MAAMuB,YAAAA,GAAejB,QAAAA,CAASa,aAAAA,CAAcE,KAAK,EAAErB,QAAAA,CAAAA;;;;;AAMnD,QAAA,IAAIuB,YAAAA,CAAaC,MAAM,GAAGF,aAAAA,CAAcE,MAAM,EAAE;YAC9C,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,IAAA;AACT,IAAA,CAAA;IAEAC,aAAAA,GAAiB;AACfT,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/controllers/validation/email-template.mjs

@@ -0,0 +1,70 @@
+import require$$0 from 'lodash/fp';
+import require$$1 from '@strapi/utils';
+
+var emailTemplate;
+var hasRequiredEmailTemplate;
+function requireEmailTemplate() {
+    if (hasRequiredEmailTemplate) return emailTemplate;
+    hasRequiredEmailTemplate = 1;
+    const { trim } = require$$0;
+    const { template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp } } = require$$1;
+    const invalidPatternsRegexes = [
+        // Ignore "evaluation" patterns: <% ... %>
+        /<%[^=]([\s\S]*?)%>/m,
+        // Ignore basic string interpolations
+        /\${([^{}]*)}/m
+    ];
+    const authorizedKeys = [
+        'URL',
+        'ADMIN_URL',
+        'SERVER_URL',
+        'CODE',
+        'USER',
+        'USER.email',
+        'USER.username',
+        'TOKEN'
+    ];
+    const matchAll = (pattern, src)=>{
+        const matches = [];
+        let match;
+        const regexPatternWithGlobal = RegExp(pattern, 'g');
+        // eslint-disable-next-line no-cond-assign
+        while(match = regexPatternWithGlobal.exec(src)){
+            const [, group] = match;
+            matches.push(trim(group));
+        }
+        return matches;
+    };
+    const isValidEmailTemplate = (template)=>{
+        // Check for known invalid patterns
+        for (const reg of invalidPatternsRegexes){
+            if (reg.test(template)) {
+                return false;
+            }
+        }
+        const interpolation = {
+            // Strict interpolation pattern to match only valid groups
+            strict: createStrictInterpolationRegExp(authorizedKeys),
+            // Weak interpolation pattern to match as many group as possible.
+            loose: createLooseInterpolationRegExp()
+        };
+        // Compute both strict & loose matches
+        const strictMatches = matchAll(interpolation.strict, template);
+        const looseMatches = matchAll(interpolation.loose, template);
+        // If we have more matches with the loose RegExp than with the strict one,
+        // then it means that at least one of the interpolation group is invalid
+        // Note: In the future, if we wanted to give more details for error formatting
+        // purposes, we could return the difference between the two arrays
+        if (looseMatches.length > strictMatches.length) {
+            return false;
+        }
+        return true;
+    };
+    emailTemplate = {
+        isValidEmailTemplate
+    };
+    return emailTemplate;
+}
+
+export { requireEmailTemplate as __require };
+//# sourceMappingURL=email-template.mjs.map

package/dist/server/controllers/validation/email-template.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-template.mjs","sources":["../../../../server/controllers/validation/email-template.js"],"sourcesContent":["'use strict';\n\nconst { trim } = require('lodash/fp');\nconst {\n  template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp },\n} = require('@strapi/utils');\n\nconst invalidPatternsRegexes = [\n  // Ignore \"evaluation\" patterns: <% ... %>\n  /<%[^=]([\\s\\S]*?)%>/m,\n  // Ignore basic string interpolations\n  /\\${([^{}]*)}/m,\n];\n\nconst authorizedKeys = [\n  'URL',\n  'ADMIN_URL',\n  'SERVER_URL',\n  'CODE',\n  'USER',\n  'USER.email',\n  'USER.username',\n  'TOKEN',\n];\n\nconst matchAll = (pattern, src) => {\n  const matches = [];\n  let match;\n\n  const regexPatternWithGlobal = RegExp(pattern, 'g');\n\n  // eslint-disable-next-line no-cond-assign\n  while ((match = regexPatternWithGlobal.exec(src))) {\n    const [, group] = match;\n\n    matches.push(trim(group));\n  }\n\n  return matches;\n};\n\nconst isValidEmailTemplate = (template) => {\n  // Check for known invalid patterns\n  for (const reg of invalidPatternsRegexes) {\n    if (reg.test(template)) {\n      return false;\n    }\n  }\n\n  const interpolation = {\n    // Strict interpolation pattern to match only valid groups\n    strict: createStrictInterpolationRegExp(authorizedKeys),\n    // Weak interpolation pattern to match as many group as possible.\n    loose: createLooseInterpolationRegExp(),\n  };\n\n  // Compute both strict & loose matches\n  const strictMatches = matchAll(interpolation.strict, template);\n  const looseMatches = matchAll(interpolation.loose, template);\n\n  // If we have more matches with the loose RegExp than with the strict one,\n  // then it means that at least one of the interpolation group is invalid\n  // Note: In the future, if we wanted to give more details for error formatting\n  // purposes, we could return the difference between the two arrays\n  if (looseMatches.length > strictMatches.length) {\n    return false;\n  }\n\n  return true;\n};\n\nmodule.exports = {\n  isValidEmailTemplate,\n};\n"],"names":["trim","require$$0","template","createLooseInterpolationRegExp","createStrictInterpolationRegExp","require$$1","invalidPatternsRegexes","authorizedKeys","matchAll","pattern","src","matches","match","regexPatternWithGlobal","RegExp","exec","group","push","isValidEmailTemplate","reg","test","interpolation","strict","loose","strictMatches","looseMatches","length","emailTemplate"],"mappings":";;;;;;;;IAEA,MAAM,EAAEA,IAAI,EAAE,GAAGC,UAAAA;IACjB,MAAM,EACJC,UAAU,EAAEC,8BAA8B,EAAEC,+BAA+B,EAAE,EAC9E,GAAGC,UAAAA;AAEJ,IAAA,MAAMC,sBAAAA,GAAyB;;AAE7B,QAAA,qBAAA;;AAEA,QAAA;AACD,KAAA;AAED,IAAA,MAAMC,cAAAA,GAAiB;AACrB,QAAA,KAAA;AACA,QAAA,WAAA;AACA,QAAA,YAAA;AACA,QAAA,MAAA;AACA,QAAA,MAAA;AACA,QAAA,YAAA;AACA,QAAA,eAAA;AACA,QAAA;AACD,KAAA;IAED,MAAMC,QAAAA,GAAW,CAACC,OAAAA,EAASC,GAAAA,GAAAA;AACzB,QAAA,MAAMC,UAAU,EAAE;QAClB,IAAIC,KAAAA;QAEJ,MAAMC,sBAAAA,GAAyBC,OAAOL,OAAAA,EAAS,GAAA,CAAA;;AAG/C,QAAA,MAAQG,KAAAA,GAAQC,sBAAAA,CAAuBE,IAAI,CAACL,GAAAA,CAAAA,CAAO;YACjD,MAAM,GAAGM,MAAM,GAAGJ,KAAAA;YAElBD,OAAAA,CAAQM,IAAI,CAACjB,IAAAA,CAAKgB,KAAAA,CAAAA,CAAAA;AACtB,QAAA;QAEE,OAAOL,OAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMO,uBAAuB,CAAChB,QAAAA,GAAAA;;QAE5B,KAAK,MAAMiB,OAAOb,sBAAAA,CAAwB;YACxC,IAAIa,GAAAA,CAAIC,IAAI,CAAClB,QAAAA,CAAAA,EAAW;gBACtB,OAAO,KAAA;AACb,YAAA;AACA,QAAA;AAEE,QAAA,MAAMmB,aAAAA,GAAgB;;AAEpBC,YAAAA,MAAAA,EAAQlB,+BAAAA,CAAgCG,cAAAA,CAAAA;;YAExCgB,KAAAA,EAAOpB,8BAAAA;AACX,SAAA;;AAGE,QAAA,MAAMqB,aAAAA,GAAgBhB,QAAAA,CAASa,aAAAA,CAAcC,MAAM,EAAEpB,QAAAA,CAAAA;AACrD,QAAA,MAAMuB,YAAAA,GAAejB,QAAAA,CAASa,aAAAA,CAAcE,KAAK,EAAErB,QAAAA,CAAAA;;;;;AAMnD,QAAA,IAAIuB,YAAAA,CAAaC,MAAM,GAAGF,aAAAA,CAAcE,MAAM,EAAE;YAC9C,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,IAAA;AACT,IAAA,CAAA;IAEAC,aAAAA,GAAiB;AACfT,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/controllers/validation/user.js

@@ -0,0 +1,65 @@
+'use strict';
+
+var require$$1 = require('@strapi/utils');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
+var user;
+var hasRequiredUser;
+function requireUser() {
+    if (hasRequiredUser) return user;
+    hasRequiredUser = 1;
+    const { yup, validateYupSchema } = require$$1__default.default;
+    const deleteRoleSchema = yup.object().shape({
+        role: yup.strapiID().required()
+    });
+    // A role relation entry may be referenced by numeric `id` (legacy) or by
+    // `documentId` (the v5 default), but must carry at least one of them.
+    const roleRelationEntrySchema = yup.object().shape({
+        id: yup.strapiID(),
+        documentId: yup.strapiID()
+    }).test('id-or-documentId', 'Relation entry must include an id or documentId', (entry)=>!!entry && (entry.id != null || entry.documentId != null));
+    const createUserBodySchema = yup.object().shape({
+        email: yup.string().email().required(),
+        username: yup.string().min(1).required(),
+        password: yup.string().min(1).required(),
+        role: yup.lazy((value)=>typeof value === 'object' ? yup.object().shape({
+                connect: yup.array().of(roleRelationEntrySchema).min(1, 'Users must have a role').required()
+            }).required() : yup.strapiID().required())
+    });
+    const updateUserBodySchema = yup.object().shape({
+        email: yup.string().email().min(1),
+        username: yup.string().min(1),
+        password: yup.mixed().test('password-validation', 'Password must be at least 1 character', function validatePassword(value) {
+            if (value == null || value === '') {
+                return true;
+            }
+            return typeof value === 'string' && value.length >= 1;
+        }),
+        role: yup.lazy((value)=>typeof value === 'object' ? yup.object().shape({
+                // connect/disconnect are each optional (matching core relation inputs),
+                // but a role must remain: reject disconnecting every role without
+                // connecting a replacement.
+                connect: yup.array().of(roleRelationEntrySchema),
+                disconnect: yup.array().of(roleRelationEntrySchema).test('CheckDisconnect', 'Cannot remove role', function test(disconnect) {
+                    const connectValue = value.connect || [];
+                    const disconnectValue = disconnect || [];
+                    if (connectValue.length === 0 && disconnectValue.length > 0) {
+                        return false;
+                    }
+                    return true;
+                })
+            }) : yup.strapiID())
+    });
+    user = {
+        validateCreateUserBody: validateYupSchema(createUserBodySchema),
+        validateUpdateUserBody: validateYupSchema(updateUserBodySchema),
+        validateDeleteRoleBody: validateYupSchema(deleteRoleSchema)
+    };
+    return user;
+}
+
+exports.__require = requireUser;
+//# sourceMappingURL=user.js.map

package/dist/server/controllers/validation/user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.js","sources":["../../../../server/controllers/validation/user.js"],"sourcesContent":["'use strict';\n\nconst { yup, validateYupSchema } = require('@strapi/utils');\n\nconst deleteRoleSchema = yup.object().shape({\n  role: yup.strapiID().required(),\n});\n\n// A role relation entry may be referenced by numeric `id` (legacy) or by\n// `documentId` (the v5 default), but must carry at least one of them.\nconst roleRelationEntrySchema = yup\n  .object()\n  .shape({ id: yup.strapiID(), documentId: yup.strapiID() })\n  .test(\n    'id-or-documentId',\n    'Relation entry must include an id or documentId',\n    (entry) => !!entry && (entry.id != null || entry.documentId != null)\n  );\n\nconst createUserBodySchema = yup.object().shape({\n  email: yup.string().email().required(),\n  username: yup.string().min(1).required(),\n  password: yup.string().min(1).required(),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup\n          .object()\n          .shape({\n            connect: yup\n              .array()\n              .of(roleRelationEntrySchema)\n              .min(1, 'Users must have a role')\n              .required(),\n          })\n          .required()\n      : yup.strapiID().required()\n  ),\n});\n\nconst updateUserBodySchema = yup.object().shape({\n  email: yup.string().email().min(1),\n  username: yup.string().min(1),\n  password: yup\n    .mixed()\n    .test(\n      'password-validation',\n      'Password must be at least 1 character',\n      function validatePassword(value) {\n        if (value == null || value === '') {\n          return true;\n        }\n        return typeof value === 'string' && value.length >= 1;\n      }\n    ),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup.object().shape({\n          // connect/disconnect are each optional (matching core relation inputs),\n          // but a role must remain: reject disconnecting every role without\n          // connecting a replacement.\n          connect: yup.array().of(roleRelationEntrySchema),\n          disconnect: yup\n            .array()\n            .of(roleRelationEntrySchema)\n            .test('CheckDisconnect', 'Cannot remove role', function test(disconnect) {\n              const connectValue = value.connect || [];\n              const disconnectValue = disconnect || [];\n              if (connectValue.length === 0 && disconnectValue.length > 0) {\n                return false;\n              }\n\n              return true;\n            }),\n        })\n      : yup.strapiID()\n  ),\n});\n\nmodule.exports = {\n  validateCreateUserBody: validateYupSchema(createUserBodySchema),\n  validateUpdateUserBody: validateYupSchema(updateUserBodySchema),\n  validateDeleteRoleBody: validateYupSchema(deleteRoleSchema),\n};\n"],"names":["yup","validateYupSchema","require$$0","deleteRoleSchema","object","shape","role","strapiID","required","roleRelationEntrySchema","id","documentId","test","entry","createUserBodySchema","email","string","username","min","password","lazy","value","connect","array","of","updateUserBodySchema","mixed","validatePassword","length","disconnect","connectValue","disconnectValue","user","validateCreateUserBody","validateUpdateUserBody","validateDeleteRoleBody"],"mappings":";;;;;;;;;;;;;AAEA,IAAA,MAAM,EAAEA,GAAG,EAAEC,iBAAiB,EAAE,GAAGC,2BAAAA;AAEnC,IAAA,MAAMC,gBAAAA,GAAmBH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;QAC1CC,IAAAA,EAAMN,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAC/B,KAAA,CAAA;;;AAIA,IAAA,MAAMC,uBAAAA,GAA0BT,GAAAA,CAC7BI,MAAM,EAAA,CACNC,KAAK,CAAC;AAAEK,QAAAA,EAAAA,EAAIV,IAAIO,QAAQ,EAAA;AAAII,QAAAA,UAAAA,EAAYX,IAAIO,QAAQ;OACpDK,IAAI,CACH,kBAAA,EACA,iDAAA,EACA,CAACC,QAAU,CAAC,CAACA,KAAAA,KAAUA,MAAMH,EAAE,IAAI,QAAQG,KAAAA,CAAMF,UAAU,IAAI;AAGnE,IAAA,MAAMG,oBAAAA,GAAuBd,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CU,QAAAA,KAAAA,EAAOf,GAAAA,CAAIgB,MAAM,EAAA,CAAGD,KAAK,GAAGP,QAAQ,EAAA;AACpCS,QAAAA,QAAAA,EAAUjB,IAAIgB,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGV,QAAQ,EAAA;AACtCW,QAAAA,QAAAA,EAAUnB,IAAIgB,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGV,QAAQ,EAAA;AACtCF,QAAAA,IAAAA,EAAMN,GAAAA,CAAIoB,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbrB,GAAAA,CACGI,MAAM,EAAA,CACNC,KAAK,CAAC;gBACLiB,OAAAA,EAAStB,GAAAA,CACNuB,KAAK,EAAA,CACLC,EAAE,CAACf,yBACHS,GAAG,CAAC,CAAA,EAAG,wBAAA,CAAA,CACPV,QAAQ;AACvB,aAAA,CAAA,CACWA,QAAQ,EAAA,GACXR,GAAAA,CAAIO,QAAQ,GAAGC,QAAQ,EAAA;AAE/B,KAAA,CAAA;AAEA,IAAA,MAAMiB,oBAAAA,GAAuBzB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CU,QAAAA,KAAAA,EAAOf,IAAIgB,MAAM,EAAA,CAAGD,KAAK,EAAA,CAAGG,GAAG,CAAC,CAAA,CAAA;AAChCD,QAAAA,QAAAA,EAAUjB,GAAAA,CAAIgB,MAAM,EAAA,CAAGE,GAAG,CAAC,CAAA,CAAA;QAC3BC,QAAAA,EAAUnB,GAAAA,CACP0B,KAAK,EAAA,CACLd,IAAI,CACH,qBAAA,EACA,uCAAA,EACA,SAASe,gBAAAA,CAAiBN,KAAK,EAAA;YAC7B,IAAIA,KAAAA,IAAS,IAAA,IAAQA,KAAAA,KAAU,EAAA,EAAI;gBACjC,OAAO,IAAA;AACjB,YAAA;AACQ,YAAA,OAAO,OAAOA,KAAAA,KAAU,QAAA,IAAYA,KAAAA,CAAMO,MAAM,IAAI,CAAA;AAC5D,QAAA,CAAA,CAAA;AAEEtB,QAAAA,IAAAA,EAAMN,GAAAA,CAAIoB,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbrB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;;;;AAIjBiB,gBAAAA,OAAAA,EAAStB,GAAAA,CAAIuB,KAAK,EAAA,CAAGC,EAAE,CAACf,uBAAAA,CAAAA;AACxBoB,gBAAAA,UAAAA,EAAY7B,GAAAA,CACTuB,KAAK,EAAA,CACLC,EAAE,CAACf,uBAAAA,CAAAA,CACHG,IAAI,CAAC,iBAAA,EAAmB,oBAAA,EAAsB,SAASA,IAAAA,CAAKiB,UAAU,EAAA;AACrE,oBAAA,MAAMC,YAAAA,GAAeT,KAAAA,CAAMC,OAAO,IAAI,EAAE;oBACxC,MAAMS,eAAAA,GAAkBF,cAAc,EAAE;AACxC,oBAAA,IAAIC,aAAaF,MAAM,KAAK,KAAKG,eAAAA,CAAgBH,MAAM,GAAG,CAAA,EAAG;wBAC3D,OAAO,KAAA;AACvB,oBAAA;oBAEc,OAAO,IAAA;AACrB,gBAAA,CAAA;AACA,aAAA,CAAA,GACQ5B,IAAIO,QAAQ,EAAA;AAEpB,KAAA,CAAA;IAEAyB,IAAAA,GAAiB;AACfC,QAAAA,sBAAAA,EAAwBhC,iBAAAA,CAAkBa,oBAAAA,CAAAA;AAC1CoB,QAAAA,sBAAAA,EAAwBjC,iBAAAA,CAAkBwB,oBAAAA,CAAAA;AAC1CU,QAAAA,sBAAAA,EAAwBlC,iBAAAA,CAAkBE,gBAAAA;AAC5C,KAAA;;;;;;"}

package/dist/server/controllers/validation/user.mjs

@@ -0,0 +1,59 @@
+import require$$1 from '@strapi/utils';
+
+var user;
+var hasRequiredUser;
+function requireUser() {
+    if (hasRequiredUser) return user;
+    hasRequiredUser = 1;
+    const { yup, validateYupSchema } = require$$1;
+    const deleteRoleSchema = yup.object().shape({
+        role: yup.strapiID().required()
+    });
+    // A role relation entry may be referenced by numeric `id` (legacy) or by
+    // `documentId` (the v5 default), but must carry at least one of them.
+    const roleRelationEntrySchema = yup.object().shape({
+        id: yup.strapiID(),
+        documentId: yup.strapiID()
+    }).test('id-or-documentId', 'Relation entry must include an id or documentId', (entry)=>!!entry && (entry.id != null || entry.documentId != null));
+    const createUserBodySchema = yup.object().shape({
+        email: yup.string().email().required(),
+        username: yup.string().min(1).required(),
+        password: yup.string().min(1).required(),
+        role: yup.lazy((value)=>typeof value === 'object' ? yup.object().shape({
+                connect: yup.array().of(roleRelationEntrySchema).min(1, 'Users must have a role').required()
+            }).required() : yup.strapiID().required())
+    });
+    const updateUserBodySchema = yup.object().shape({
+        email: yup.string().email().min(1),
+        username: yup.string().min(1),
+        password: yup.mixed().test('password-validation', 'Password must be at least 1 character', function validatePassword(value) {
+            if (value == null || value === '') {
+                return true;
+            }
+            return typeof value === 'string' && value.length >= 1;
+        }),
+        role: yup.lazy((value)=>typeof value === 'object' ? yup.object().shape({
+                // connect/disconnect are each optional (matching core relation inputs),
+                // but a role must remain: reject disconnecting every role without
+                // connecting a replacement.
+                connect: yup.array().of(roleRelationEntrySchema),
+                disconnect: yup.array().of(roleRelationEntrySchema).test('CheckDisconnect', 'Cannot remove role', function test(disconnect) {
+                    const connectValue = value.connect || [];
+                    const disconnectValue = disconnect || [];
+                    if (connectValue.length === 0 && disconnectValue.length > 0) {
+                        return false;
+                    }
+                    return true;
+                })
+            }) : yup.strapiID())
+    });
+    user = {
+        validateCreateUserBody: validateYupSchema(createUserBodySchema),
+        validateUpdateUserBody: validateYupSchema(updateUserBodySchema),
+        validateDeleteRoleBody: validateYupSchema(deleteRoleSchema)
+    };
+    return user;
+}
+
+export { requireUser as __require };
+//# sourceMappingURL=user.mjs.map

package/dist/server/controllers/validation/user.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.mjs","sources":["../../../../server/controllers/validation/user.js"],"sourcesContent":["'use strict';\n\nconst { yup, validateYupSchema } = require('@strapi/utils');\n\nconst deleteRoleSchema = yup.object().shape({\n  role: yup.strapiID().required(),\n});\n\n// A role relation entry may be referenced by numeric `id` (legacy) or by\n// `documentId` (the v5 default), but must carry at least one of them.\nconst roleRelationEntrySchema = yup\n  .object()\n  .shape({ id: yup.strapiID(), documentId: yup.strapiID() })\n  .test(\n    'id-or-documentId',\n    'Relation entry must include an id or documentId',\n    (entry) => !!entry && (entry.id != null || entry.documentId != null)\n  );\n\nconst createUserBodySchema = yup.object().shape({\n  email: yup.string().email().required(),\n  username: yup.string().min(1).required(),\n  password: yup.string().min(1).required(),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup\n          .object()\n          .shape({\n            connect: yup\n              .array()\n              .of(roleRelationEntrySchema)\n              .min(1, 'Users must have a role')\n              .required(),\n          })\n          .required()\n      : yup.strapiID().required()\n  ),\n});\n\nconst updateUserBodySchema = yup.object().shape({\n  email: yup.string().email().min(1),\n  username: yup.string().min(1),\n  password: yup\n    .mixed()\n    .test(\n      'password-validation',\n      'Password must be at least 1 character',\n      function validatePassword(value) {\n        if (value == null || value === '') {\n          return true;\n        }\n        return typeof value === 'string' && value.length >= 1;\n      }\n    ),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup.object().shape({\n          // connect/disconnect are each optional (matching core relation inputs),\n          // but a role must remain: reject disconnecting every role without\n          // connecting a replacement.\n          connect: yup.array().of(roleRelationEntrySchema),\n          disconnect: yup\n            .array()\n            .of(roleRelationEntrySchema)\n            .test('CheckDisconnect', 'Cannot remove role', function test(disconnect) {\n              const connectValue = value.connect || [];\n              const disconnectValue = disconnect || [];\n              if (connectValue.length === 0 && disconnectValue.length > 0) {\n                return false;\n              }\n\n              return true;\n            }),\n        })\n      : yup.strapiID()\n  ),\n});\n\nmodule.exports = {\n  validateCreateUserBody: validateYupSchema(createUserBodySchema),\n  validateUpdateUserBody: validateYupSchema(updateUserBodySchema),\n  validateDeleteRoleBody: validateYupSchema(deleteRoleSchema),\n};\n"],"names":["yup","validateYupSchema","require$$0","deleteRoleSchema","object","shape","role","strapiID","required","roleRelationEntrySchema","id","documentId","test","entry","createUserBodySchema","email","string","username","min","password","lazy","value","connect","array","of","updateUserBodySchema","mixed","validatePassword","length","disconnect","connectValue","disconnectValue","user","validateCreateUserBody","validateUpdateUserBody","validateDeleteRoleBody"],"mappings":";;;;;;;AAEA,IAAA,MAAM,EAAEA,GAAG,EAAEC,iBAAiB,EAAE,GAAGC,UAAAA;AAEnC,IAAA,MAAMC,gBAAAA,GAAmBH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;QAC1CC,IAAAA,EAAMN,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAC/B,KAAA,CAAA;;;AAIA,IAAA,MAAMC,uBAAAA,GAA0BT,GAAAA,CAC7BI,MAAM,EAAA,CACNC,KAAK,CAAC;AAAEK,QAAAA,EAAAA,EAAIV,IAAIO,QAAQ,EAAA;AAAII,QAAAA,UAAAA,EAAYX,IAAIO,QAAQ;OACpDK,IAAI,CACH,kBAAA,EACA,iDAAA,EACA,CAACC,QAAU,CAAC,CAACA,KAAAA,KAAUA,MAAMH,EAAE,IAAI,QAAQG,KAAAA,CAAMF,UAAU,IAAI;AAGnE,IAAA,MAAMG,oBAAAA,GAAuBd,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CU,QAAAA,KAAAA,EAAOf,GAAAA,CAAIgB,MAAM,EAAA,CAAGD,KAAK,GAAGP,QAAQ,EAAA;AACpCS,QAAAA,QAAAA,EAAUjB,IAAIgB,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGV,QAAQ,EAAA;AACtCW,QAAAA,QAAAA,EAAUnB,IAAIgB,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGV,QAAQ,EAAA;AACtCF,QAAAA,IAAAA,EAAMN,GAAAA,CAAIoB,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbrB,GAAAA,CACGI,MAAM,EAAA,CACNC,KAAK,CAAC;gBACLiB,OAAAA,EAAStB,GAAAA,CACNuB,KAAK,EAAA,CACLC,EAAE,CAACf,yBACHS,GAAG,CAAC,CAAA,EAAG,wBAAA,CAAA,CACPV,QAAQ;AACvB,aAAA,CAAA,CACWA,QAAQ,EAAA,GACXR,GAAAA,CAAIO,QAAQ,GAAGC,QAAQ,EAAA;AAE/B,KAAA,CAAA;AAEA,IAAA,MAAMiB,oBAAAA,GAAuBzB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CU,QAAAA,KAAAA,EAAOf,IAAIgB,MAAM,EAAA,CAAGD,KAAK,EAAA,CAAGG,GAAG,CAAC,CAAA,CAAA;AAChCD,QAAAA,QAAAA,EAAUjB,GAAAA,CAAIgB,MAAM,EAAA,CAAGE,GAAG,CAAC,CAAA,CAAA;QAC3BC,QAAAA,EAAUnB,GAAAA,CACP0B,KAAK,EAAA,CACLd,IAAI,CACH,qBAAA,EACA,uCAAA,EACA,SAASe,gBAAAA,CAAiBN,KAAK,EAAA;YAC7B,IAAIA,KAAAA,IAAS,IAAA,IAAQA,KAAAA,KAAU,EAAA,EAAI;gBACjC,OAAO,IAAA;AACjB,YAAA;AACQ,YAAA,OAAO,OAAOA,KAAAA,KAAU,QAAA,IAAYA,KAAAA,CAAMO,MAAM,IAAI,CAAA;AAC5D,QAAA,CAAA,CAAA;AAEEtB,QAAAA,IAAAA,EAAMN,GAAAA,CAAIoB,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbrB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;;;;AAIjBiB,gBAAAA,OAAAA,EAAStB,GAAAA,CAAIuB,KAAK,EAAA,CAAGC,EAAE,CAACf,uBAAAA,CAAAA;AACxBoB,gBAAAA,UAAAA,EAAY7B,GAAAA,CACTuB,KAAK,EAAA,CACLC,EAAE,CAACf,uBAAAA,CAAAA,CACHG,IAAI,CAAC,iBAAA,EAAmB,oBAAA,EAAsB,SAASA,IAAAA,CAAKiB,UAAU,EAAA;AACrE,oBAAA,MAAMC,YAAAA,GAAeT,KAAAA,CAAMC,OAAO,IAAI,EAAE;oBACxC,MAAMS,eAAAA,GAAkBF,cAAc,EAAE;AACxC,oBAAA,IAAIC,aAAaF,MAAM,KAAK,KAAKG,eAAAA,CAAgBH,MAAM,GAAG,CAAA,EAAG;wBAC3D,OAAO,KAAA;AACvB,oBAAA;oBAEc,OAAO,IAAA;AACrB,gBAAA,CAAA;AACA,aAAA,CAAA,GACQ5B,IAAIO,QAAQ,EAAA;AAEpB,KAAA,CAAA;IAEAyB,IAAAA,GAAiB;AACfC,QAAAA,sBAAAA,EAAwBhC,iBAAAA,CAAkBa,oBAAAA,CAAAA;AAC1CoB,QAAAA,sBAAAA,EAAwBjC,iBAAAA,CAAkBwB,oBAAAA,CAAAA;AAC1CU,QAAAA,sBAAAA,EAAwBlC,iBAAAA,CAAkBE,gBAAAA;AAC5C,KAAA;;;;;;"}

package/dist/server/graphql/index.js

@@ -0,0 +1,66 @@
+'use strict';
+
+var index = require('./types/index.js');
+var index$1 = require('./queries/index.js');
+var index$2 = require('./mutations/index.js');
+var resolversConfigs = require('./resolvers-configs.js');
+
+var graphql;
+var hasRequiredGraphql;
+function requireGraphql() {
+    if (hasRequiredGraphql) return graphql;
+    hasRequiredGraphql = 1;
+    const getTypes = index.__require();
+    const getQueries = index$1.__require();
+    const getMutations = index$2.__require();
+    const getResolversConfig = resolversConfigs.__require();
+    graphql = ({ strapi })=>{
+        const { config: graphQLConfig } = strapi.plugin('graphql');
+        const extensionService = strapi.plugin('graphql').service('extension');
+        const isShadowCRUDEnabled = graphQLConfig('shadowCRUD', true);
+        if (!isShadowCRUDEnabled) {
+            return;
+        }
+        // Disable Permissions queries & mutations but allow the
+        // type to be used/selected in filters or nested resolvers
+        extensionService.shadowCRUD('plugin::users-permissions.permission').disableQueries().disableMutations();
+        // Disable User & Role's Create/Update/Delete actions so they can be replaced
+        const actionsToDisable = [
+            'create',
+            'update',
+            'delete'
+        ];
+        extensionService.shadowCRUD('plugin::users-permissions.user').disableActions(actionsToDisable);
+        extensionService.shadowCRUD('plugin::users-permissions.role').disableActions(actionsToDisable);
+        // Register new types & resolvers config
+        extensionService.use(({ nexus })=>{
+            const types = getTypes({
+                strapi,
+                nexus
+            });
+            const queries = getQueries({
+                strapi,
+                nexus
+            });
+            const mutations = getMutations({
+                strapi,
+                nexus
+            });
+            const resolversConfig = getResolversConfig({
+                strapi
+            });
+            return {
+                types: [
+                    types,
+                    queries,
+                    mutations
+                ],
+                resolversConfig
+            };
+        });
+    };
+    return graphql;
+}
+
+exports.__require = requireGraphql;
+//# sourceMappingURL=index.js.map

package/dist/server/graphql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../server/graphql/index.js"],"sourcesContent":["'use strict';\n\nconst getTypes = require('./types');\nconst getQueries = require('./queries');\nconst getMutations = require('./mutations');\nconst getResolversConfig = require('./resolvers-configs');\n\nmodule.exports = ({ strapi }) => {\n  const { config: graphQLConfig } = strapi.plugin('graphql');\n  const extensionService = strapi.plugin('graphql').service('extension');\n\n  const isShadowCRUDEnabled = graphQLConfig('shadowCRUD', true);\n\n  if (!isShadowCRUDEnabled) {\n    return;\n  }\n\n  // Disable Permissions queries & mutations but allow the\n  // type to be used/selected in filters or nested resolvers\n  extensionService\n    .shadowCRUD('plugin::users-permissions.permission')\n    .disableQueries()\n    .disableMutations();\n\n  // Disable User & Role's Create/Update/Delete actions so they can be replaced\n  const actionsToDisable = ['create', 'update', 'delete'];\n\n  extensionService.shadowCRUD('plugin::users-permissions.user').disableActions(actionsToDisable);\n  extensionService.shadowCRUD('plugin::users-permissions.role').disableActions(actionsToDisable);\n\n  // Register new types & resolvers config\n  extensionService.use(({ nexus }) => {\n    const types = getTypes({ strapi, nexus });\n    const queries = getQueries({ strapi, nexus });\n    const mutations = getMutations({ strapi, nexus });\n    const resolversConfig = getResolversConfig({ strapi });\n\n    return {\n      types: [types, queries, mutations],\n\n      resolversConfig,\n    };\n  });\n};\n"],"names":["getTypes","require$$0","getQueries","require$$1","getMutations","require$$2","getResolversConfig","require$$3","graphql","strapi","config","graphQLConfig","plugin","extensionService","service","isShadowCRUDEnabled","shadowCRUD","disableQueries","disableMutations","actionsToDisable","disableActions","use","nexus","types","queries","mutations","resolversConfig"],"mappings":";;;;;;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,UAAAA,GAAaC,iBAAAA,EAAAA;AACnB,IAAA,MAAMC,YAAAA,GAAeC,iBAAAA,EAAAA;AACrB,IAAA,MAAMC,kBAAAA,GAAqBC,0BAAAA,EAAAA;IAE3BC,OAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAE,GAAA;AAC1B,QAAA,MAAM,EAAEC,MAAAA,EAAQC,aAAa,EAAE,GAAGF,MAAAA,CAAOG,MAAM,CAAC,SAAA,CAAA;AAChD,QAAA,MAAMC,mBAAmBJ,MAAAA,CAAOG,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,WAAA,CAAA;QAE1D,MAAMC,mBAAAA,GAAsBJ,cAAc,YAAA,EAAc,IAAA,CAAA;AAExD,QAAA,IAAI,CAACI,mBAAAA,EAAqB;AACxB,YAAA;AACJ,QAAA;;;AAIEF,QAAAA,gBAAAA,CACGG,UAAU,CAAC,sCAAA,CAAA,CACXC,cAAc,GACdC,gBAAgB,EAAA;;AAGnB,QAAA,MAAMC,gBAAAA,GAAmB;AAAC,YAAA,QAAA;AAAU,YAAA,QAAA;AAAU,YAAA;AAAS,SAAA;AAEvDN,QAAAA,gBAAAA,CAAiBG,UAAU,CAAC,gCAAA,CAAA,CAAkCI,cAAc,CAACD,gBAAAA,CAAAA;AAC7EN,QAAAA,gBAAAA,CAAiBG,UAAU,CAAC,gCAAA,CAAA,CAAkCI,cAAc,CAACD,gBAAAA,CAAAA;;AAG7EN,QAAAA,gBAAAA,CAAiBQ,GAAG,CAAC,CAAC,EAAEC,KAAK,EAAE,GAAA;AAC7B,YAAA,MAAMC,QAAQvB,QAAAA,CAAS;AAAES,gBAAAA,MAAAA;AAAQa,gBAAAA;AAAK,aAAA,CAAA;AACtC,YAAA,MAAME,UAAUtB,UAAAA,CAAW;AAAEO,gBAAAA,MAAAA;AAAQa,gBAAAA;AAAK,aAAA,CAAA;AAC1C,YAAA,MAAMG,YAAYrB,YAAAA,CAAa;AAAEK,gBAAAA,MAAAA;AAAQa,gBAAAA;AAAK,aAAA,CAAA;AAC9C,YAAA,MAAMI,kBAAkBpB,kBAAAA,CAAmB;AAAEG,gBAAAA;AAAM,aAAA,CAAA;YAEnD,OAAO;gBACLc,KAAAA,EAAO;AAACA,oBAAAA,KAAAA;AAAOC,oBAAAA,OAAAA;AAASC,oBAAAA;AAAU,iBAAA;AAElCC,gBAAAA;AACN,aAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/index.mjs

@@ -0,0 +1,64 @@
+import { __require as requireTypes } from './types/index.mjs';
+import { __require as requireQueries } from './queries/index.mjs';
+import { __require as requireMutations } from './mutations/index.mjs';
+import { __require as requireResolversConfigs } from './resolvers-configs.mjs';
+
+var graphql;
+var hasRequiredGraphql;
+function requireGraphql() {
+    if (hasRequiredGraphql) return graphql;
+    hasRequiredGraphql = 1;
+    const getTypes = requireTypes();
+    const getQueries = requireQueries();
+    const getMutations = requireMutations();
+    const getResolversConfig = requireResolversConfigs();
+    graphql = ({ strapi })=>{
+        const { config: graphQLConfig } = strapi.plugin('graphql');
+        const extensionService = strapi.plugin('graphql').service('extension');
+        const isShadowCRUDEnabled = graphQLConfig('shadowCRUD', true);
+        if (!isShadowCRUDEnabled) {
+            return;
+        }
+        // Disable Permissions queries & mutations but allow the
+        // type to be used/selected in filters or nested resolvers
+        extensionService.shadowCRUD('plugin::users-permissions.permission').disableQueries().disableMutations();
+        // Disable User & Role's Create/Update/Delete actions so they can be replaced
+        const actionsToDisable = [
+            'create',
+            'update',
+            'delete'
+        ];
+        extensionService.shadowCRUD('plugin::users-permissions.user').disableActions(actionsToDisable);
+        extensionService.shadowCRUD('plugin::users-permissions.role').disableActions(actionsToDisable);
+        // Register new types & resolvers config
+        extensionService.use(({ nexus })=>{
+            const types = getTypes({
+                strapi,
+                nexus
+            });
+            const queries = getQueries({
+                strapi,
+                nexus
+            });
+            const mutations = getMutations({
+                strapi,
+                nexus
+            });
+            const resolversConfig = getResolversConfig({
+                strapi
+            });
+            return {
+                types: [
+                    types,
+                    queries,
+                    mutations
+                ],
+                resolversConfig
+            };
+        });
+    };
+    return graphql;
+}
+
+export { requireGraphql as __require };
+//# sourceMappingURL=index.mjs.map

package/dist/server/graphql/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../server/graphql/index.js"],"sourcesContent":["'use strict';\n\nconst getTypes = require('./types');\nconst getQueries = require('./queries');\nconst getMutations = require('./mutations');\nconst getResolversConfig = require('./resolvers-configs');\n\nmodule.exports = ({ strapi }) => {\n  const { config: graphQLConfig } = strapi.plugin('graphql');\n  const extensionService = strapi.plugin('graphql').service('extension');\n\n  const isShadowCRUDEnabled = graphQLConfig('shadowCRUD', true);\n\n  if (!isShadowCRUDEnabled) {\n    return;\n  }\n\n  // Disable Permissions queries & mutations but allow the\n  // type to be used/selected in filters or nested resolvers\n  extensionService\n    .shadowCRUD('plugin::users-permissions.permission')\n    .disableQueries()\n    .disableMutations();\n\n  // Disable User & Role's Create/Update/Delete actions so they can be replaced\n  const actionsToDisable = ['create', 'update', 'delete'];\n\n  extensionService.shadowCRUD('plugin::users-permissions.user').disableActions(actionsToDisable);\n  extensionService.shadowCRUD('plugin::users-permissions.role').disableActions(actionsToDisable);\n\n  // Register new types & resolvers config\n  extensionService.use(({ nexus }) => {\n    const types = getTypes({ strapi, nexus });\n    const queries = getQueries({ strapi, nexus });\n    const mutations = getMutations({ strapi, nexus });\n    const resolversConfig = getResolversConfig({ strapi });\n\n    return {\n      types: [types, queries, mutations],\n\n      resolversConfig,\n    };\n  });\n};\n"],"names":["getTypes","require$$0","getQueries","require$$1","getMutations","require$$2","getResolversConfig","require$$3","graphql","strapi","config","graphQLConfig","plugin","extensionService","service","isShadowCRUDEnabled","shadowCRUD","disableQueries","disableMutations","actionsToDisable","disableActions","use","nexus","types","queries","mutations","resolversConfig"],"mappings":";;;;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,YAAAA,EAAAA;AACjB,IAAA,MAAMC,UAAAA,GAAaC,cAAAA,EAAAA;AACnB,IAAA,MAAMC,YAAAA,GAAeC,gBAAAA,EAAAA;AACrB,IAAA,MAAMC,kBAAAA,GAAqBC,uBAAAA,EAAAA;IAE3BC,OAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAE,GAAA;AAC1B,QAAA,MAAM,EAAEC,MAAAA,EAAQC,aAAa,EAAE,GAAGF,MAAAA,CAAOG,MAAM,CAAC,SAAA,CAAA;AAChD,QAAA,MAAMC,mBAAmBJ,MAAAA,CAAOG,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,WAAA,CAAA;QAE1D,MAAMC,mBAAAA,GAAsBJ,cAAc,YAAA,EAAc,IAAA,CAAA;AAExD,QAAA,IAAI,CAACI,mBAAAA,EAAqB;AACxB,YAAA;AACJ,QAAA;;;AAIEF,QAAAA,gBAAAA,CACGG,UAAU,CAAC,sCAAA,CAAA,CACXC,cAAc,GACdC,gBAAgB,EAAA;;AAGnB,QAAA,MAAMC,gBAAAA,GAAmB;AAAC,YAAA,QAAA;AAAU,YAAA,QAAA;AAAU,YAAA;AAAS,SAAA;AAEvDN,QAAAA,gBAAAA,CAAiBG,UAAU,CAAC,gCAAA,CAAA,CAAkCI,cAAc,CAACD,gBAAAA,CAAAA;AAC7EN,QAAAA,gBAAAA,CAAiBG,UAAU,CAAC,gCAAA,CAAA,CAAkCI,cAAc,CAACD,gBAAAA,CAAAA;;AAG7EN,QAAAA,gBAAAA,CAAiBQ,GAAG,CAAC,CAAC,EAAEC,KAAK,EAAE,GAAA;AAC7B,YAAA,MAAMC,QAAQvB,QAAAA,CAAS;AAAES,gBAAAA,MAAAA;AAAQa,gBAAAA;AAAK,aAAA,CAAA;AACtC,YAAA,MAAME,UAAUtB,UAAAA,CAAW;AAAEO,gBAAAA,MAAAA;AAAQa,gBAAAA;AAAK,aAAA,CAAA;AAC1C,YAAA,MAAMG,YAAYrB,YAAAA,CAAa;AAAEK,gBAAAA,MAAAA;AAAQa,gBAAAA;AAAK,aAAA,CAAA;AAC9C,YAAA,MAAMI,kBAAkBpB,kBAAAA,CAAmB;AAAEG,gBAAAA;AAAM,aAAA,CAAA;YAEnD,OAAO;gBACLc,KAAAA,EAAO;AAACA,oBAAAA,KAAAA;AAAOC,oBAAAA,OAAAA;AAASC,oBAAAA;AAAU,iBAAA;AAElCC,gBAAAA;AACN,aAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}