@webiny/app-admin 0.0.0-unstable.e6f0dc8ca7 → 0.0.0-unstable.eb81deee7e

package/permissions/usePermissionForm.js

@@ -1,256 +1,157 @@
-import { useMemo, useCallback } from "react";
+import { useCallback, useMemo } from "react";
 function hasAction(entity, name) {
-  return entity.actions?.some(a => a.name === name) ?? false;
+    return entity.actions?.some((a)=>a.name === name) ?? false;
 }
-
-/** Resolve fullAccess config into a concrete Permission object. */
 function resolveFullAccess(schema) {
-  const name = `${schema.prefix}.*`;
-  if (schema.fullAccess === true) {
+    const name = `${schema.prefix}.*`;
+    if (true === schema.fullAccess) return {
+        name
+    };
     return {
-      name
+        name,
+        ...schema.fullAccess
     };
-  }
-  return {
-    name,
-    ...schema.fullAccess
-  };
 }
-
-/** Resolve readOnlyAccess config into a concrete Permission[]. */
 function resolveReadOnlyAccess(schema) {
-  if (!schema.readOnlyAccess) {
-    return undefined;
-  }
-  if (schema.readOnlyAccess === true) {
-    return [{
-      name: `${schema.prefix}.*`,
-      rwd: "r"
-    }];
-  }
-  return schema.readOnlyAccess;
+    if (!schema.readOnlyAccess) return;
+    if (true === schema.readOnlyAccess) return [
+        {
+            name: `${schema.prefix}.*`,
+            rwd: "r"
+        }
+    ];
+    return schema.readOnlyAccess;
 }
-
-/**
- * Deserialize Permission[] into form data based on the schema.
- */
 function deserializePermissions(schema, value) {
-  if (!Array.isArray(value)) {
-    return {
-      accessLevel: "no"
+    if (!Array.isArray(value)) return {
+        accessLevel: "no"
     };
-  }
-
-  // Check for read-only access by looking for the synthetic marker permission.
-  if (value.some(p => p.name === `$${schema.prefix}.readonly`)) {
-    return {
-      accessLevel: "read-only"
+    if (value.some((p)=>p.name === `$${schema.prefix}.readonly`)) return {
+        accessLevel: "read-only"
     };
-  }
-
-  // Check for full access: either wildcard or the schema's fullAccess permission.
-  const fullAccessName = `${schema.prefix}.*`;
-  const hasFullAccess = value.some(p => p.name === "*" || p.name === fullAccessName);
-  if (hasFullAccess) {
-    return {
-      accessLevel: "full"
+    const fullAccessName = `${schema.prefix}.*`;
+    const hasFullAccess = value.some((p)=>"*" === p.name || p.name === fullAccessName);
+    if (hasFullAccess) return {
+        accessLevel: "full"
     };
-  }
-
-  // Filter permissions that belong to this schema's prefix.
-  const ownPermissions = value.filter(p => p.name.startsWith(schema.prefix));
-  if (ownPermissions.length === 0) {
-    return {
-      accessLevel: "no"
+    const ownPermissions = value.filter((p)=>p.name.startsWith(schema.prefix));
+    if (0 === ownPermissions.length) return {
+        accessLevel: "no"
     };
-  }
-
-  // Custom access level — extract per-entity form fields.
-  const data = {
-    accessLevel: "custom"
-  };
-  const entities = schema.entities || [];
-  for (const entity of entities) {
-    const perm = ownPermissions.find(p => p.name === entity.permission);
-    if (!perm) {
-      continue;
-    }
-
-    // Access scope: "own" if perm.own === true, else "full".
-    if (perm.own === true) {
-      data[`${entity.id}AccessScope`] = "own";
-    } else {
-      data[`${entity.id}AccessScope`] = "full";
-    }
-
-    // Process actions.
-    for (const action of entity.actions ?? []) {
-      if (action.name === "rwd") {
-        data[`${entity.id}RWD`] = perm.rwd || "r";
-      } else if (action.name === "pw") {
-        data[`${entity.id}PW`] = perm.pw ? perm.pw.split("") : [];
-      } else {
-        // Custom boolean action.
-        data[`${entity.id}Action_${action.name}`] = perm[action.name] === true;
-      }
+    const data = {
+        accessLevel: "custom"
+    };
+    const entities = schema.entities || [];
+    for (const entity of entities){
+        const perm = ownPermissions.find((p)=>p.name === entity.permission);
+        if (perm) {
+            if (true === perm.own) data[`${entity.id}AccessScope`] = "own";
+            else data[`${entity.id}AccessScope`] = "full";
+            for (const action of entity.actions ?? [])if ("rwd" === action.name) data[`${entity.id}RWD`] = perm.rwd || "r";
+            else if ("pw" === action.name) data[`${entity.id}PW`] = perm.pw ? perm.pw.split("") : [];
+            else data[`${entity.id}Action_${action.name}`] = true === perm[action.name];
+        }
     }
-  }
-  return data;
+    return data;
 }
-
-/**
- * Serialize form data into Permission[] based on the schema.
- */
 function serializePermissions(schema, formData, currentValue) {
-  // Start by filtering out all permissions belonging to this schema's prefix.
-  const filtered = Array.isArray(currentValue) ? currentValue.filter(p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
-  if (formData.accessLevel === "no" || !formData.accessLevel) {
-    return filtered;
-  }
-  if (formData.accessLevel === "full") {
-    return [...filtered, resolveFullAccess(schema)];
-  }
-  const readOnlyPermissions = resolveReadOnlyAccess(schema);
-  if (formData.accessLevel === "read-only" && readOnlyPermissions) {
-    return [...filtered, {
-      name: `$${schema.prefix}.readonly`
-    }, ...readOnlyPermissions];
-  }
-  const entities = schema.entities || [];
-
-  // Custom access — build entity permissions.
-  // First, build a map of entity definitions by ID for dependency lookups.
-  const entityMap = new Map();
-  for (const entity of entities) {
-    entityMap.set(entity.id, entity);
-  }
-
-  // Resolve cascading "own" scopes: if a parent is "own", children must be "own" too.
-  const resolvedScopes = new Map();
-  for (const entity of entities) {
-    const scope = formData[`${entity.id}AccessScope`];
-    if (!scope || scope === "no") {
-      continue;
-    }
-    let resolvedScope = scope;
-
-    // If this entity depends on a parent and the parent scope is "own",
-    // force this entity's scope to "own" as well.
-    if (entity.dependsOn) {
-      const parentScope = resolvedScopes.get(entity.dependsOn.entity);
-      if (parentScope === "own") {
-        resolvedScope = "own";
-      }
-    }
-    resolvedScopes.set(entity.id, resolvedScope);
-  }
-
-  // Prune resolved scopes based on dependencies (must run before building permissions
-  // so that transitive dependencies are properly pruned).
-  for (const entity of entities) {
-    if (!entity.dependsOn || !resolvedScopes.has(entity.id)) {
-      continue;
-    }
-    const parentScope = resolvedScopes.get(entity.dependsOn.entity);
-    if (!parentScope) {
-      // Parent entity is not enabled — prune child.
-      resolvedScopes.delete(entity.id);
-      continue;
-    }
-    const parentEntity = entityMap.get(entity.dependsOn.entity);
-    if (parentEntity && hasAction(parentEntity, "rwd")) {
-      const parentRwd = parentScope === "own" ? "rwd" : formData[`${entity.dependsOn.entity}RWD`] || "r";
-      if (!parentRwd.includes(entity.dependsOn.requires)) {
-        // Parent doesn't have the required action — prune child.
-        resolvedScopes.delete(entity.id);
-      }
-    }
-  }
-
-  // Build permissions from the pruned resolved scopes.
-  const permissions = [];
-  for (const entity of entities) {
-    const scope = resolvedScopes.get(entity.id);
-    if (!scope) {
-      continue;
-    }
-    const perm = {
-      name: entity.permission
-    };
-    if (scope === "own") {
-      perm.own = true;
-      if (hasAction(entity, "rwd")) {
-        perm.rwd = "rwd";
-      }
-    } else if (hasAction(entity, "rwd")) {
-      perm.rwd = formData[`${entity.id}RWD`] || "r";
+    const filtered = Array.isArray(currentValue) ? currentValue.filter((p)=>!p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
+    if ("no" === formData.accessLevel || !formData.accessLevel) return filtered;
+    if ("full" === formData.accessLevel) return [
+        ...filtered,
+        resolveFullAccess(schema)
+    ];
+    const readOnlyPermissions = resolveReadOnlyAccess(schema);
+    if ("read-only" === formData.accessLevel && readOnlyPermissions) return [
+        ...filtered,
+        {
+            name: `$${schema.prefix}.readonly`
+        },
+        ...readOnlyPermissions
+    ];
+    const entities = schema.entities || [];
+    const entityMap = new Map();
+    for (const entity of entities)entityMap.set(entity.id, entity);
+    const resolvedScopes = new Map();
+    for (const entity of entities){
+        const scope = formData[`${entity.id}AccessScope`];
+        if (!scope || "no" === scope) continue;
+        let resolvedScope = scope;
+        if (entity.dependsOn) {
+            const parentScope = resolvedScopes.get(entity.dependsOn.entity);
+            if ("own" === parentScope) resolvedScope = "own";
+        }
+        resolvedScopes.set(entity.id, resolvedScope);
     }
-
-    // Process non-rwd actions.
-    for (const action of entity.actions ?? []) {
-      if (action.name === "rwd") {
-        continue; // Already handled above.
-      }
-      if (action.name === "pw") {
-        const pw = formData[`${entity.id}PW`] || [];
-        if (pw.length > 0) {
-          perm.pw = pw.join("");
+    for (const entity of entities){
+        if (!entity.dependsOn || !resolvedScopes.has(entity.id)) continue;
+        const parentScope = resolvedScopes.get(entity.dependsOn.entity);
+        if (!parentScope) {
+            resolvedScopes.delete(entity.id);
+            continue;
         }
-      } else {
-        // Custom boolean action.
-        if (formData[`${entity.id}Action_${action.name}`]) {
-          perm[action.name] = true;
+        const parentEntity = entityMap.get(entity.dependsOn.entity);
+        if (parentEntity && hasAction(parentEntity, "rwd")) {
+            const parentRwd = "own" === parentScope ? "rwd" : formData[`${entity.dependsOn.entity}RWD`] || "r";
+            if (!parentRwd.includes(entity.dependsOn.requires)) resolvedScopes.delete(entity.id);
         }
-      }
-    }
-    permissions.push(perm);
-  }
-  return [...filtered, ...permissions];
-}
-
-/**
- * Hook that bridges a permission schema with a Form component.
- *
- * Handles bidirectional transformation between Permission[] and form data,
- * with optional custom serialize/deserialize callbacks for app-specific needs.
- */
-export function usePermissionForm(schema, options) {
-  const {
-    value,
-    onChange
-  } = options;
-  const formData = useMemo(() => {
-    let data = deserializePermissions(schema, value);
-
-    // Merge custom deserialized data if provided.
-    if (options.deserialize) {
-      const extra = options.deserialize(Array.isArray(value) ? value : []);
-      data = {
-        ...data,
-        ...extra
-      };
     }
-    return data;
-  }, []);
-  const onFormChange = useCallback(data => {
-    let result = serializePermissions(schema, data, value);
-
-    // Apply custom serializer if provided.
-    if (options.serialize) {
-      result = options.serialize(data, result.filter(p => p.name.startsWith(schema.prefix)));
-      // Re-add non-schema permissions that were filtered out.
-      const nonSchemaPermissions = Array.isArray(value) ? value.filter(p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
-      result = [...nonSchemaPermissions, ...result];
+    const permissions = [];
+    for (const entity of entities){
+        const scope = resolvedScopes.get(entity.id);
+        if (!scope) continue;
+        const perm = {
+            name: entity.permission
+        };
+        if ("own" === scope) {
+            perm.own = true;
+            if (hasAction(entity, "rwd")) perm.rwd = "rwd";
+        } else if (hasAction(entity, "rwd")) perm.rwd = formData[`${entity.id}RWD`] || "r";
+        for (const action of entity.actions ?? [])if ("rwd" !== action.name) {
+            if ("pw" === action.name) {
+                const pw = formData[`${entity.id}PW`] || [];
+                if (pw.length > 0) perm.pw = pw.join("");
+            } else if (formData[`${entity.id}Action_${action.name}`]) perm[action.name] = true;
+        }
+        permissions.push(perm);
     }
-    onChange(result);
-  }, [value]);
-  return {
-    formData,
-    onFormChange
-  };
+    return [
+        ...filtered,
+        ...permissions
+    ];
 }
-
-// Export the pure functions for unit testing.
-export { deserializePermissions, serializePermissions };
+function usePermissionForm(schema, options) {
+    const { value, onChange } = options;
+    const formData = useMemo(()=>{
+        let data = deserializePermissions(schema, value);
+        if (options.deserialize) {
+            const extra = options.deserialize(Array.isArray(value) ? value : []);
+            data = {
+                ...data,
+                ...extra
+            };
+        }
+        return data;
+    }, []);
+    const onFormChange = useCallback((data)=>{
+        let result = serializePermissions(schema, data, value);
+        if (options.serialize) {
+            result = options.serialize(data, result.filter((p)=>p.name.startsWith(schema.prefix)));
+            const nonSchemaPermissions = Array.isArray(value) ? value.filter((p)=>!p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
+            result = [
+                ...nonSchemaPermissions,
+                ...result
+            ];
+        }
+        onChange(result);
+    }, [
+        value
+    ]);
+    return {
+        formData,
+        onFormChange
+    };
+}
+export { deserializePermissions, serializePermissions, usePermissionForm };
 
 //# sourceMappingURL=usePermissionForm.js.map

package/permissions/usePermissionForm.js.map

@@ -1 +1 @@
-{"version":3,"names":["useMemo","useCallback","hasAction","entity","name","actions","some","a","resolveFullAccess","schema","prefix","fullAccess","resolveReadOnlyAccess","readOnlyAccess","undefined","rwd","deserializePermissions","value","Array","isArray","accessLevel","p","fullAccessName","hasFullAccess","ownPermissions","filter","startsWith","length","data","entities","perm","find","permission","own","id","action","pw","split","serializePermissions","formData","currentValue","filtered","readOnlyPermissions","entityMap","Map","set","resolvedScopes","scope","resolvedScope","dependsOn","parentScope","get","has","delete","parentEntity","parentRwd","includes","requires","permissions","join","push","usePermissionForm","options","onChange","deserialize","extra","onFormChange","result","serialize","nonSchemaPermissions"],"sources":["usePermissionForm.ts"],"sourcesContent":["import { useMemo, useCallback } from \"react\";\nimport type {\n    Permission,\n    PermissionSchema,\n    EntityDefinition,\n    UsePermissionFormOptions,\n    UsePermissionFormResult\n} from \"./types.js\";\n\nfunction hasAction(entity: EntityDefinition, name: string): boolean {\n    return entity.actions?.some(a => a.name === name) ?? false;\n}\n\n/** Resolve fullAccess config into a concrete Permission object. */\nfunction resolveFullAccess(schema: PermissionSchema): Permission {\n    const name = `${schema.prefix}.*`;\n    if (schema.fullAccess === true) {\n        return { name };\n    }\n    return { name, ...schema.fullAccess };\n}\n\n/** Resolve readOnlyAccess config into a concrete Permission[]. */\nfunction resolveReadOnlyAccess(schema: PermissionSchema): Permission[] | undefined {\n    if (!schema.readOnlyAccess) {\n        return undefined;\n    }\n    if (schema.readOnlyAccess === true) {\n        return [{ name: `${schema.prefix}.*`, rwd: \"r\" }];\n    }\n    return schema.readOnlyAccess;\n}\n\n/**\n * Deserialize Permission[] into form data based on the schema.\n */\nfunction deserializePermissions(\n    schema: PermissionSchema,\n    value: Permission[]\n): Record<string, any> {\n    if (!Array.isArray(value)) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Check for read-only access by looking for the synthetic marker permission.\n    if (value.some(p => p.name === `$${schema.prefix}.readonly`)) {\n        return { accessLevel: \"read-only\" };\n    }\n\n    // Check for full access: either wildcard or the schema's fullAccess permission.\n    const fullAccessName = `${schema.prefix}.*`;\n    const hasFullAccess = value.some(p => p.name === \"*\" || p.name === fullAccessName);\n    if (hasFullAccess) {\n        return { accessLevel: \"full\" };\n    }\n\n    // Filter permissions that belong to this schema's prefix.\n    const ownPermissions = value.filter(p => p.name.startsWith(schema.prefix));\n    if (ownPermissions.length === 0) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Custom access level — extract per-entity form fields.\n    const data: Record<string, any> = { accessLevel: \"custom\" };\n    const entities = schema.entities || [];\n\n    for (const entity of entities) {\n        const perm = ownPermissions.find(p => p.name === entity.permission);\n        if (!perm) {\n            continue;\n        }\n\n        // Access scope: \"own\" if perm.own === true, else \"full\".\n        if (perm.own === true) {\n            data[`${entity.id}AccessScope`] = \"own\";\n        } else {\n            data[`${entity.id}AccessScope`] = \"full\";\n        }\n\n        // Process actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                data[`${entity.id}RWD`] = perm.rwd || \"r\";\n            } else if (action.name === \"pw\") {\n                data[`${entity.id}PW`] = perm.pw ? perm.pw.split(\"\") : [];\n            } else {\n                // Custom boolean action.\n                data[`${entity.id}Action_${action.name}`] = perm[action.name] === true;\n            }\n        }\n    }\n\n    return data;\n}\n\n/**\n * Serialize form data into Permission[] based on the schema.\n */\nfunction serializePermissions(\n    schema: PermissionSchema,\n    formData: Record<string, any>,\n    currentValue: Permission[]\n): Permission[] {\n    // Start by filtering out all permissions belonging to this schema's prefix.\n    const filtered = Array.isArray(currentValue)\n        ? currentValue.filter(\n              p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)\n          )\n        : [];\n\n    if (formData.accessLevel === \"no\" || !formData.accessLevel) {\n        return filtered;\n    }\n\n    if (formData.accessLevel === \"full\") {\n        return [...filtered, resolveFullAccess(schema)];\n    }\n\n    const readOnlyPermissions = resolveReadOnlyAccess(schema);\n    if (formData.accessLevel === \"read-only\" && readOnlyPermissions) {\n        return [...filtered, { name: `$${schema.prefix}.readonly` }, ...readOnlyPermissions];\n    }\n\n    const entities = schema.entities || [];\n\n    // Custom access — build entity permissions.\n    // First, build a map of entity definitions by ID for dependency lookups.\n    const entityMap = new Map<string, EntityDefinition>();\n    for (const entity of entities) {\n        entityMap.set(entity.id, entity);\n    }\n\n    // Resolve cascading \"own\" scopes: if a parent is \"own\", children must be \"own\" too.\n    const resolvedScopes = new Map<string, string>();\n    for (const entity of entities) {\n        const scope = formData[`${entity.id}AccessScope`];\n        if (!scope || scope === \"no\") {\n            continue;\n        }\n\n        let resolvedScope = scope;\n\n        // If this entity depends on a parent and the parent scope is \"own\",\n        // force this entity's scope to \"own\" as well.\n        if (entity.dependsOn) {\n            const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n            if (parentScope === \"own\") {\n                resolvedScope = \"own\";\n            }\n        }\n\n        resolvedScopes.set(entity.id, resolvedScope);\n    }\n\n    // Prune resolved scopes based on dependencies (must run before building permissions\n    // so that transitive dependencies are properly pruned).\n    for (const entity of entities) {\n        if (!entity.dependsOn || !resolvedScopes.has(entity.id)) {\n            continue;\n        }\n\n        const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n        if (!parentScope) {\n            // Parent entity is not enabled — prune child.\n            resolvedScopes.delete(entity.id);\n            continue;\n        }\n\n        const parentEntity = entityMap.get(entity.dependsOn.entity);\n        if (parentEntity && hasAction(parentEntity, \"rwd\")) {\n            const parentRwd =\n                parentScope === \"own\" ? \"rwd\" : formData[`${entity.dependsOn.entity}RWD`] || \"r\";\n            if (!parentRwd.includes(entity.dependsOn.requires)) {\n                // Parent doesn't have the required action — prune child.\n                resolvedScopes.delete(entity.id);\n            }\n        }\n    }\n\n    // Build permissions from the pruned resolved scopes.\n    const permissions: Permission[] = [];\n\n    for (const entity of entities) {\n        const scope = resolvedScopes.get(entity.id);\n        if (!scope) {\n            continue;\n        }\n\n        const perm: Permission = {\n            name: entity.permission\n        };\n\n        if (scope === \"own\") {\n            perm.own = true;\n            if (hasAction(entity, \"rwd\")) {\n                perm.rwd = \"rwd\";\n            }\n        } else if (hasAction(entity, \"rwd\")) {\n            perm.rwd = formData[`${entity.id}RWD`] || \"r\";\n        }\n\n        // Process non-rwd actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                continue; // Already handled above.\n            }\n\n            if (action.name === \"pw\") {\n                const pw: string[] = formData[`${entity.id}PW`] || [];\n                if (pw.length > 0) {\n                    perm.pw = pw.join(\"\");\n                }\n            } else {\n                // Custom boolean action.\n                if (formData[`${entity.id}Action_${action.name}`]) {\n                    perm[action.name] = true;\n                }\n            }\n        }\n\n        permissions.push(perm);\n    }\n\n    return [...filtered, ...permissions];\n}\n\n/**\n * Hook that bridges a permission schema with a Form component.\n *\n * Handles bidirectional transformation between Permission[] and form data,\n * with optional custom serialize/deserialize callbacks for app-specific needs.\n */\nexport function usePermissionForm(\n    schema: PermissionSchema,\n    options: UsePermissionFormOptions\n): UsePermissionFormResult {\n    const { value, onChange } = options;\n\n    const formData = useMemo(() => {\n        let data = deserializePermissions(schema, value);\n\n        // Merge custom deserialized data if provided.\n        if (options.deserialize) {\n            const extra = options.deserialize(Array.isArray(value) ? value : []);\n            data = { ...data, ...extra };\n        }\n\n        return data;\n    }, []);\n\n    const onFormChange = useCallback(\n        (data: Record<string, any>) => {\n            let result = serializePermissions(schema, data, value);\n\n            // Apply custom serializer if provided.\n            if (options.serialize) {\n                result = options.serialize(\n                    data,\n                    result.filter(p => p.name.startsWith(schema.prefix))\n                );\n                // Re-add non-schema permissions that were filtered out.\n                const nonSchemaPermissions = Array.isArray(value)\n                    ? value.filter(\n                          p =>\n                              !p.name.startsWith(schema.prefix) &&\n                              !p.name.startsWith(`$${schema.prefix}`)\n                      )\n                    : [];\n                result = [...nonSchemaPermissions, ...result];\n            }\n\n            onChange(result);\n        },\n        [value]\n    );\n\n    return { formData, onFormChange };\n}\n\n// Export the pure functions for unit testing.\nexport { deserializePermissions, serializePermissions };\n"],"mappings":"AAAA,SAASA,OAAO,EAAEC,WAAW,QAAQ,OAAO;AAS5C,SAASC,SAASA,CAACC,MAAwB,EAAEC,IAAY,EAAW;EAChE,OAAOD,MAAM,CAACE,OAAO,EAAEC,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACH,IAAI,KAAKA,IAAI,CAAC,IAAI,KAAK;AAC9D;;AAEA;AACA,SAASI,iBAAiBA,CAACC,MAAwB,EAAc;EAC7D,MAAML,IAAI,GAAG,GAAGK,MAAM,CAACC,MAAM,IAAI;EACjC,IAAID,MAAM,CAACE,UAAU,KAAK,IAAI,EAAE;IAC5B,OAAO;MAAEP;IAAK,CAAC;EACnB;EACA,OAAO;IAAEA,IAAI;IAAE,GAAGK,MAAM,CAACE;EAAW,CAAC;AACzC;;AAEA;AACA,SAASC,qBAAqBA,CAACH,MAAwB,EAA4B;EAC/E,IAAI,CAACA,MAAM,CAACI,cAAc,EAAE;IACxB,OAAOC,SAAS;EACpB;EACA,IAAIL,MAAM,CAACI,cAAc,KAAK,IAAI,EAAE;IAChC,OAAO,CAAC;MAAET,IAAI,EAAE,GAAGK,MAAM,CAACC,MAAM,IAAI;MAAEK,GAAG,EAAE;IAAI,CAAC,CAAC;EACrD;EACA,OAAON,MAAM,CAACI,cAAc;AAChC;;AAEA;AACA;AACA;AACA,SAASG,sBAAsBA,CAC3BP,MAAwB,EACxBQ,KAAmB,EACA;EACnB,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,EAAE;IACvB,OAAO;MAAEG,WAAW,EAAE;IAAK,CAAC;EAChC;;EAEA;EACA,IAAIH,KAAK,CAACX,IAAI,CAACe,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAK,IAAIK,MAAM,CAACC,MAAM,WAAW,CAAC,EAAE;IAC1D,OAAO;MAAEU,WAAW,EAAE;IAAY,CAAC;EACvC;;EAEA;EACA,MAAME,cAAc,GAAG,GAAGb,MAAM,CAACC,MAAM,IAAI;EAC3C,MAAMa,aAAa,GAAGN,KAAK,CAACX,IAAI,CAACe,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAK,GAAG,IAAIiB,CAAC,CAACjB,IAAI,KAAKkB,cAAc,CAAC;EAClF,IAAIC,aAAa,EAAE;IACf,OAAO;MAAEH,WAAW,EAAE;IAAO,CAAC;EAClC;;EAEA;EACA,MAAMI,cAAc,GAAGP,KAAK,CAACQ,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,CAAC;EAC1E,IAAIc,cAAc,CAACG,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO;MAAEP,WAAW,EAAE;IAAK,CAAC;EAChC;;EAEA;EACA,MAAMQ,IAAyB,GAAG;IAAER,WAAW,EAAE;EAAS,CAAC;EAC3D,MAAMS,QAAQ,GAAGpB,MAAM,CAACoB,QAAQ,IAAI,EAAE;EAEtC,KAAK,MAAM1B,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMC,IAAI,GAAGN,cAAc,CAACO,IAAI,CAACV,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAKD,MAAM,CAAC6B,UAAU,CAAC;IACnE,IAAI,CAACF,IAAI,EAAE;MACP;IACJ;;IAEA;IACA,IAAIA,IAAI,CAACG,GAAG,KAAK,IAAI,EAAE;MACnBL,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,aAAa,CAAC,GAAG,KAAK;IAC3C,CAAC,MAAM;MACHN,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,aAAa,CAAC,GAAG,MAAM;IAC5C;;IAEA;IACA,KAAK,MAAMC,MAAM,IAAIhC,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvC,IAAI8B,MAAM,CAAC/B,IAAI,KAAK,KAAK,EAAE;QACvBwB,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,KAAK,CAAC,GAAGJ,IAAI,CAACf,GAAG,IAAI,GAAG;MAC7C,CAAC,MAAM,IAAIoB,MAAM,CAAC/B,IAAI,KAAK,IAAI,EAAE;QAC7BwB,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,IAAI,CAAC,GAAGJ,IAAI,CAACM,EAAE,GAAGN,IAAI,CAACM,EAAE,CAACC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;MAC7D,CAAC,MAAM;QACH;QACAT,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,UAAUC,MAAM,CAAC/B,IAAI,EAAE,CAAC,GAAG0B,IAAI,CAACK,MAAM,CAAC/B,IAAI,CAAC,KAAK,IAAI;MAC1E;IACJ;EACJ;EAEA,OAAOwB,IAAI;AACf;;AAEA;AACA;AACA;AACA,SAASU,oBAAoBA,CACzB7B,MAAwB,EACxB8B,QAA6B,EAC7BC,YAA0B,EACd;EACZ;EACA,MAAMC,QAAQ,GAAGvB,KAAK,CAACC,OAAO,CAACqB,YAAY,CAAC,GACtCA,YAAY,CAACf,MAAM,CACfJ,CAAC,IAAI,CAACA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,IAAI,CAACW,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAAC,IAAIjB,MAAM,CAACC,MAAM,EAAE,CACpF,CAAC,GACD,EAAE;EAER,IAAI6B,QAAQ,CAACnB,WAAW,KAAK,IAAI,IAAI,CAACmB,QAAQ,CAACnB,WAAW,EAAE;IACxD,OAAOqB,QAAQ;EACnB;EAEA,IAAIF,QAAQ,CAACnB,WAAW,KAAK,MAAM,EAAE;IACjC,OAAO,CAAC,GAAGqB,QAAQ,EAAEjC,iBAAiB,CAACC,MAAM,CAAC,CAAC;EACnD;EAEA,MAAMiC,mBAAmB,GAAG9B,qBAAqB,CAACH,MAAM,CAAC;EACzD,IAAI8B,QAAQ,CAACnB,WAAW,KAAK,WAAW,IAAIsB,mBAAmB,EAAE;IAC7D,OAAO,CAAC,GAAGD,QAAQ,EAAE;MAAErC,IAAI,EAAE,IAAIK,MAAM,CAACC,MAAM;IAAY,CAAC,EAAE,GAAGgC,mBAAmB,CAAC;EACxF;EAEA,MAAMb,QAAQ,GAAGpB,MAAM,CAACoB,QAAQ,IAAI,EAAE;;EAEtC;EACA;EACA,MAAMc,SAAS,GAAG,IAAIC,GAAG,CAA2B,CAAC;EACrD,KAAK,MAAMzC,MAAM,IAAI0B,QAAQ,EAAE;IAC3Bc,SAAS,CAACE,GAAG,CAAC1C,MAAM,CAAC+B,EAAE,EAAE/B,MAAM,CAAC;EACpC;;EAEA;EACA,MAAM2C,cAAc,GAAG,IAAIF,GAAG,CAAiB,CAAC;EAChD,KAAK,MAAMzC,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMkB,KAAK,GAAGR,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,aAAa,CAAC;IACjD,IAAI,CAACa,KAAK,IAAIA,KAAK,KAAK,IAAI,EAAE;MAC1B;IACJ;IAEA,IAAIC,aAAa,GAAGD,KAAK;;IAEzB;IACA;IACA,IAAI5C,MAAM,CAAC8C,SAAS,EAAE;MAClB,MAAMC,WAAW,GAAGJ,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;MAC/D,IAAI+C,WAAW,KAAK,KAAK,EAAE;QACvBF,aAAa,GAAG,KAAK;MACzB;IACJ;IAEAF,cAAc,CAACD,GAAG,CAAC1C,MAAM,CAAC+B,EAAE,EAAEc,aAAa,CAAC;EAChD;;EAEA;EACA;EACA,KAAK,MAAM7C,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,IAAI,CAAC1B,MAAM,CAAC8C,SAAS,IAAI,CAACH,cAAc,CAACM,GAAG,CAACjD,MAAM,CAAC+B,EAAE,CAAC,EAAE;MACrD;IACJ;IAEA,MAAMgB,WAAW,GAAGJ,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;IAC/D,IAAI,CAAC+C,WAAW,EAAE;MACd;MACAJ,cAAc,CAACO,MAAM,CAAClD,MAAM,CAAC+B,EAAE,CAAC;MAChC;IACJ;IAEA,MAAMoB,YAAY,GAAGX,SAAS,CAACQ,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;IAC3D,IAAImD,YAAY,IAAIpD,SAAS,CAACoD,YAAY,EAAE,KAAK,CAAC,EAAE;MAChD,MAAMC,SAAS,GACXL,WAAW,KAAK,KAAK,GAAG,KAAK,GAAGX,QAAQ,CAAC,GAAGpC,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,KAAK,CAAC,IAAI,GAAG;MACpF,IAAI,CAACoD,SAAS,CAACC,QAAQ,CAACrD,MAAM,CAAC8C,SAAS,CAACQ,QAAQ,CAAC,EAAE;QAChD;QACAX,cAAc,CAACO,MAAM,CAAClD,MAAM,CAAC+B,EAAE,CAAC;MACpC;IACJ;EACJ;;EAEA;EACA,MAAMwB,WAAyB,GAAG,EAAE;EAEpC,KAAK,MAAMvD,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMkB,KAAK,GAAGD,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC+B,EAAE,CAAC;IAC3C,IAAI,CAACa,KAAK,EAAE;MACR;IACJ;IAEA,MAAMjB,IAAgB,GAAG;MACrB1B,IAAI,EAAED,MAAM,CAAC6B;IACjB,CAAC;IAED,IAAIe,KAAK,KAAK,KAAK,EAAE;MACjBjB,IAAI,CAACG,GAAG,GAAG,IAAI;MACf,IAAI/B,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;QAC1B2B,IAAI,CAACf,GAAG,GAAG,KAAK;MACpB;IACJ,CAAC,MAAM,IAAIb,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;MACjC2B,IAAI,CAACf,GAAG,GAAGwB,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,KAAK,CAAC,IAAI,GAAG;IACjD;;IAEA;IACA,KAAK,MAAMC,MAAM,IAAIhC,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvC,IAAI8B,MAAM,CAAC/B,IAAI,KAAK,KAAK,EAAE;QACvB,SAAS,CAAC;MACd;MAEA,IAAI+B,MAAM,CAAC/B,IAAI,KAAK,IAAI,EAAE;QACtB,MAAMgC,EAAY,GAAGG,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,IAAI,CAAC,IAAI,EAAE;QACrD,IAAIE,EAAE,CAACT,MAAM,GAAG,CAAC,EAAE;UACfG,IAAI,CAACM,EAAE,GAAGA,EAAE,CAACuB,IAAI,CAAC,EAAE,CAAC;QACzB;MACJ,CAAC,MAAM;QACH;QACA,IAAIpB,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,UAAUC,MAAM,CAAC/B,IAAI,EAAE,CAAC,EAAE;UAC/C0B,IAAI,CAACK,MAAM,CAAC/B,IAAI,CAAC,GAAG,IAAI;QAC5B;MACJ;IACJ;IAEAsD,WAAW,CAACE,IAAI,CAAC9B,IAAI,CAAC;EAC1B;EAEA,OAAO,CAAC,GAAGW,QAAQ,EAAE,GAAGiB,WAAW,CAAC;AACxC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASG,iBAAiBA,CAC7BpD,MAAwB,EACxBqD,OAAiC,EACV;EACvB,MAAM;IAAE7C,KAAK;IAAE8C;EAAS,CAAC,GAAGD,OAAO;EAEnC,MAAMvB,QAAQ,GAAGvC,OAAO,CAAC,MAAM;IAC3B,IAAI4B,IAAI,GAAGZ,sBAAsB,CAACP,MAAM,EAAEQ,KAAK,CAAC;;IAEhD;IACA,IAAI6C,OAAO,CAACE,WAAW,EAAE;MACrB,MAAMC,KAAK,GAAGH,OAAO,CAACE,WAAW,CAAC9C,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,GAAGA,KAAK,GAAG,EAAE,CAAC;MACpEW,IAAI,GAAG;QAAE,GAAGA,IAAI;QAAE,GAAGqC;MAAM,CAAC;IAChC;IAEA,OAAOrC,IAAI;EACf,CAAC,EAAE,EAAE,CAAC;EAEN,MAAMsC,YAAY,GAAGjE,WAAW,CAC3B2B,IAAyB,IAAK;IAC3B,IAAIuC,MAAM,GAAG7B,oBAAoB,CAAC7B,MAAM,EAAEmB,IAAI,EAAEX,KAAK,CAAC;;IAEtD;IACA,IAAI6C,OAAO,CAACM,SAAS,EAAE;MACnBD,MAAM,GAAGL,OAAO,CAACM,SAAS,CACtBxC,IAAI,EACJuC,MAAM,CAAC1C,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,CACvD,CAAC;MACD;MACA,MAAM2D,oBAAoB,GAAGnD,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,GAC3CA,KAAK,CAACQ,MAAM,CACRJ,CAAC,IACG,CAACA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,IACjC,CAACW,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAAC,IAAIjB,MAAM,CAACC,MAAM,EAAE,CAC9C,CAAC,GACD,EAAE;MACRyD,MAAM,GAAG,CAAC,GAAGE,oBAAoB,EAAE,GAAGF,MAAM,CAAC;IACjD;IAEAJ,QAAQ,CAACI,MAAM,CAAC;EACpB,CAAC,EACD,CAAClD,KAAK,CACV,CAAC;EAED,OAAO;IAAEsB,QAAQ;IAAE2B;EAAa,CAAC;AACrC;;AAEA;AACA,SAASlD,sBAAsB,EAAEsB,oBAAoB","ignoreList":[]}
+{"version":3,"file":"permissions/usePermissionForm.js","sources":["../../src/permissions/usePermissionForm.ts"],"sourcesContent":["import { useMemo, useCallback } from \"react\";\nimport type {\n    Permission,\n    PermissionSchema,\n    EntityDefinition,\n    UsePermissionFormOptions,\n    UsePermissionFormResult\n} from \"./types.js\";\n\nfunction hasAction(entity: EntityDefinition, name: string): boolean {\n    return entity.actions?.some(a => a.name === name) ?? false;\n}\n\n/** Resolve fullAccess config into a concrete Permission object. */\nfunction resolveFullAccess(schema: PermissionSchema): Permission {\n    const name = `${schema.prefix}.*`;\n    if (schema.fullAccess === true) {\n        return { name };\n    }\n    return { name, ...schema.fullAccess };\n}\n\n/** Resolve readOnlyAccess config into a concrete Permission[]. */\nfunction resolveReadOnlyAccess(schema: PermissionSchema): Permission[] | undefined {\n    if (!schema.readOnlyAccess) {\n        return undefined;\n    }\n    if (schema.readOnlyAccess === true) {\n        return [{ name: `${schema.prefix}.*`, rwd: \"r\" }];\n    }\n    return schema.readOnlyAccess;\n}\n\n/**\n * Deserialize Permission[] into form data based on the schema.\n */\nfunction deserializePermissions(\n    schema: PermissionSchema,\n    value: Permission[]\n): Record<string, any> {\n    if (!Array.isArray(value)) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Check for read-only access by looking for the synthetic marker permission.\n    if (value.some(p => p.name === `$${schema.prefix}.readonly`)) {\n        return { accessLevel: \"read-only\" };\n    }\n\n    // Check for full access: either wildcard or the schema's fullAccess permission.\n    const fullAccessName = `${schema.prefix}.*`;\n    const hasFullAccess = value.some(p => p.name === \"*\" || p.name === fullAccessName);\n    if (hasFullAccess) {\n        return { accessLevel: \"full\" };\n    }\n\n    // Filter permissions that belong to this schema's prefix.\n    const ownPermissions = value.filter(p => p.name.startsWith(schema.prefix));\n    if (ownPermissions.length === 0) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Custom access level — extract per-entity form fields.\n    const data: Record<string, any> = { accessLevel: \"custom\" };\n    const entities = schema.entities || [];\n\n    for (const entity of entities) {\n        const perm = ownPermissions.find(p => p.name === entity.permission);\n        if (!perm) {\n            continue;\n        }\n\n        // Access scope: \"own\" if perm.own === true, else \"full\".\n        if (perm.own === true) {\n            data[`${entity.id}AccessScope`] = \"own\";\n        } else {\n            data[`${entity.id}AccessScope`] = \"full\";\n        }\n\n        // Process actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                data[`${entity.id}RWD`] = perm.rwd || \"r\";\n            } else if (action.name === \"pw\") {\n                data[`${entity.id}PW`] = perm.pw ? perm.pw.split(\"\") : [];\n            } else {\n                // Custom boolean action.\n                data[`${entity.id}Action_${action.name}`] = perm[action.name] === true;\n            }\n        }\n    }\n\n    return data;\n}\n\n/**\n * Serialize form data into Permission[] based on the schema.\n */\nfunction serializePermissions(\n    schema: PermissionSchema,\n    formData: Record<string, any>,\n    currentValue: Permission[]\n): Permission[] {\n    // Start by filtering out all permissions belonging to this schema's prefix.\n    const filtered = Array.isArray(currentValue)\n        ? currentValue.filter(\n              p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)\n          )\n        : [];\n\n    if (formData.accessLevel === \"no\" || !formData.accessLevel) {\n        return filtered;\n    }\n\n    if (formData.accessLevel === \"full\") {\n        return [...filtered, resolveFullAccess(schema)];\n    }\n\n    const readOnlyPermissions = resolveReadOnlyAccess(schema);\n    if (formData.accessLevel === \"read-only\" && readOnlyPermissions) {\n        return [...filtered, { name: `$${schema.prefix}.readonly` }, ...readOnlyPermissions];\n    }\n\n    const entities = schema.entities || [];\n\n    // Custom access — build entity permissions.\n    // First, build a map of entity definitions by ID for dependency lookups.\n    const entityMap = new Map<string, EntityDefinition>();\n    for (const entity of entities) {\n        entityMap.set(entity.id, entity);\n    }\n\n    // Resolve cascading \"own\" scopes: if a parent is \"own\", children must be \"own\" too.\n    const resolvedScopes = new Map<string, string>();\n    for (const entity of entities) {\n        const scope = formData[`${entity.id}AccessScope`];\n        if (!scope || scope === \"no\") {\n            continue;\n        }\n\n        let resolvedScope = scope;\n\n        // If this entity depends on a parent and the parent scope is \"own\",\n        // force this entity's scope to \"own\" as well.\n        if (entity.dependsOn) {\n            const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n            if (parentScope === \"own\") {\n                resolvedScope = \"own\";\n            }\n        }\n\n        resolvedScopes.set(entity.id, resolvedScope);\n    }\n\n    // Prune resolved scopes based on dependencies (must run before building permissions\n    // so that transitive dependencies are properly pruned).\n    for (const entity of entities) {\n        if (!entity.dependsOn || !resolvedScopes.has(entity.id)) {\n            continue;\n        }\n\n        const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n        if (!parentScope) {\n            // Parent entity is not enabled — prune child.\n            resolvedScopes.delete(entity.id);\n            continue;\n        }\n\n        const parentEntity = entityMap.get(entity.dependsOn.entity);\n        if (parentEntity && hasAction(parentEntity, \"rwd\")) {\n            const parentRwd =\n                parentScope === \"own\" ? \"rwd\" : formData[`${entity.dependsOn.entity}RWD`] || \"r\";\n            if (!parentRwd.includes(entity.dependsOn.requires)) {\n                // Parent doesn't have the required action — prune child.\n                resolvedScopes.delete(entity.id);\n            }\n        }\n    }\n\n    // Build permissions from the pruned resolved scopes.\n    const permissions: Permission[] = [];\n\n    for (const entity of entities) {\n        const scope = resolvedScopes.get(entity.id);\n        if (!scope) {\n            continue;\n        }\n\n        const perm: Permission = {\n            name: entity.permission\n        };\n\n        if (scope === \"own\") {\n            perm.own = true;\n            if (hasAction(entity, \"rwd\")) {\n                perm.rwd = \"rwd\";\n            }\n        } else if (hasAction(entity, \"rwd\")) {\n            perm.rwd = formData[`${entity.id}RWD`] || \"r\";\n        }\n\n        // Process non-rwd actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                continue; // Already handled above.\n            }\n\n            if (action.name === \"pw\") {\n                const pw: string[] = formData[`${entity.id}PW`] || [];\n                if (pw.length > 0) {\n                    perm.pw = pw.join(\"\");\n                }\n            } else {\n                // Custom boolean action.\n                if (formData[`${entity.id}Action_${action.name}`]) {\n                    perm[action.name] = true;\n                }\n            }\n        }\n\n        permissions.push(perm);\n    }\n\n    return [...filtered, ...permissions];\n}\n\n/**\n * Hook that bridges a permission schema with a Form component.\n *\n * Handles bidirectional transformation between Permission[] and form data,\n * with optional custom serialize/deserialize callbacks for app-specific needs.\n */\nexport function usePermissionForm(\n    schema: PermissionSchema,\n    options: UsePermissionFormOptions\n): UsePermissionFormResult {\n    const { value, onChange } = options;\n\n    const formData = useMemo(() => {\n        let data = deserializePermissions(schema, value);\n\n        // Merge custom deserialized data if provided.\n        if (options.deserialize) {\n            const extra = options.deserialize(Array.isArray(value) ? value : []);\n            data = { ...data, ...extra };\n        }\n\n        return data;\n    }, []);\n\n    const onFormChange = useCallback(\n        (data: Record<string, any>) => {\n            let result = serializePermissions(schema, data, value);\n\n            // Apply custom serializer if provided.\n            if (options.serialize) {\n                result = options.serialize(\n                    data,\n                    result.filter(p => p.name.startsWith(schema.prefix))\n                );\n                // Re-add non-schema permissions that were filtered out.\n                const nonSchemaPermissions = Array.isArray(value)\n                    ? value.filter(\n                          p =>\n                              !p.name.startsWith(schema.prefix) &&\n                              !p.name.startsWith(`$${schema.prefix}`)\n                      )\n                    : [];\n                result = [...nonSchemaPermissions, ...result];\n            }\n\n            onChange(result);\n        },\n        [value]\n    );\n\n    return { formData, onFormChange };\n}\n\n// Export the pure functions for unit testing.\nexport { deserializePermissions, serializePermissions };\n"],"names":["hasAction","entity","name","a","resolveFullAccess","schema","resolveReadOnlyAccess","deserializePermissions","value","Array","p","fullAccessName","hasFullAccess","ownPermissions","data","entities","perm","action","serializePermissions","formData","currentValue","filtered","readOnlyPermissions","entityMap","Map","resolvedScopes","scope","resolvedScope","parentScope","parentEntity","parentRwd","permissions","pw","usePermissionForm","options","onChange","useMemo","extra","onFormChange","useCallback","result","nonSchemaPermissions"],"mappings":";AASA,SAASA,UAAUC,MAAwB,EAAEC,IAAY;IACrD,OAAOD,OAAO,OAAO,EAAE,KAAKE,CAAAA,IAAKA,EAAE,IAAI,KAAKD,SAAS;AACzD;AAGA,SAASE,kBAAkBC,MAAwB;IAC/C,MAAMH,OAAO,GAAGG,OAAO,MAAM,CAAC,EAAE,CAAC;IACjC,IAAIA,AAAsB,SAAtBA,OAAO,UAAU,EACjB,OAAO;QAAEH;IAAK;IAElB,OAAO;QAAEA;QAAM,GAAGG,OAAO,UAAU;IAAC;AACxC;AAGA,SAASC,sBAAsBD,MAAwB;IACnD,IAAI,CAACA,OAAO,cAAc,EACtB;IAEJ,IAAIA,AAA0B,SAA1BA,OAAO,cAAc,EACrB,OAAO;QAAC;YAAE,MAAM,GAAGA,OAAO,MAAM,CAAC,EAAE,CAAC;YAAE,KAAK;QAAI;KAAE;IAErD,OAAOA,OAAO,cAAc;AAChC;AAKA,SAASE,uBACLF,MAAwB,EACxBG,KAAmB;IAEnB,IAAI,CAACC,MAAM,OAAO,CAACD,QACf,OAAO;QAAE,aAAa;IAAK;IAI/B,IAAIA,MAAM,IAAI,CAACE,CAAAA,IAAKA,EAAE,IAAI,KAAK,CAAC,CAAC,EAAEL,OAAO,MAAM,CAAC,SAAS,CAAC,GACvD,OAAO;QAAE,aAAa;IAAY;IAItC,MAAMM,iBAAiB,GAAGN,OAAO,MAAM,CAAC,EAAE,CAAC;IAC3C,MAAMO,gBAAgBJ,MAAM,IAAI,CAACE,CAAAA,IAAKA,AAAW,QAAXA,EAAE,IAAI,IAAYA,EAAE,IAAI,KAAKC;IACnE,IAAIC,eACA,OAAO;QAAE,aAAa;IAAO;IAIjC,MAAMC,iBAAiBL,MAAM,MAAM,CAACE,CAAAA,IAAKA,EAAE,IAAI,CAAC,UAAU,CAACL,OAAO,MAAM;IACxE,IAAIQ,AAA0B,MAA1BA,eAAe,MAAM,EACrB,OAAO;QAAE,aAAa;IAAK;IAI/B,MAAMC,OAA4B;QAAE,aAAa;IAAS;IAC1D,MAAMC,WAAWV,OAAO,QAAQ,IAAI,EAAE;IAEtC,KAAK,MAAMJ,UAAUc,SAAU;QAC3B,MAAMC,OAAOH,eAAe,IAAI,CAACH,CAAAA,IAAKA,EAAE,IAAI,KAAKT,OAAO,UAAU;QAClE,IAAKe;YAKL,IAAIA,AAAa,SAAbA,KAAK,GAAG,EACRF,IAAI,CAAC,GAAGb,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG;iBAElCa,IAAI,CAAC,GAAGb,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG;YAItC,KAAK,MAAMgB,UAAUhB,OAAO,OAAO,IAAI,EAAE,CACrC,IAAIgB,AAAgB,UAAhBA,OAAO,IAAI,EACXH,IAAI,CAAC,GAAGb,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,GAAGe,KAAK,GAAG,IAAI;iBACnC,IAAIC,AAAgB,SAAhBA,OAAO,IAAI,EAClBH,IAAI,CAAC,GAAGb,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,GAAGe,KAAK,EAAE,GAAGA,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE;iBAGzDF,IAAI,CAAC,GAAGb,OAAO,EAAE,CAAC,OAAO,EAAEgB,OAAO,IAAI,EAAE,CAAC,GAAGD,AAAsB,SAAtBA,IAAI,CAACC,OAAO,IAAI,CAAC;;IAGzE;IAEA,OAAOH;AACX;AAKA,SAASI,qBACLb,MAAwB,EACxBc,QAA6B,EAC7BC,YAA0B;IAG1B,MAAMC,WAAWZ,MAAM,OAAO,CAACW,gBACzBA,aAAa,MAAM,CACfV,CAAAA,IAAK,CAACA,EAAE,IAAI,CAAC,UAAU,CAACL,OAAO,MAAM,KAAK,CAACK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAEL,OAAO,MAAM,EAAE,KAEpF,EAAE;IAER,IAAIc,AAAyB,SAAzBA,SAAS,WAAW,IAAa,CAACA,SAAS,WAAW,EACtD,OAAOE;IAGX,IAAIF,AAAyB,WAAzBA,SAAS,WAAW,EACpB,OAAO;WAAIE;QAAUjB,kBAAkBC;KAAQ;IAGnD,MAAMiB,sBAAsBhB,sBAAsBD;IAClD,IAAIc,AAAyB,gBAAzBA,SAAS,WAAW,IAAoBG,qBACxC,OAAO;WAAID;QAAU;YAAE,MAAM,CAAC,CAAC,EAAEhB,OAAO,MAAM,CAAC,SAAS,CAAC;QAAC;WAAMiB;KAAoB;IAGxF,MAAMP,WAAWV,OAAO,QAAQ,IAAI,EAAE;IAItC,MAAMkB,YAAY,IAAIC;IACtB,KAAK,MAAMvB,UAAUc,SACjBQ,UAAU,GAAG,CAACtB,OAAO,EAAE,EAAEA;IAI7B,MAAMwB,iBAAiB,IAAID;IAC3B,KAAK,MAAMvB,UAAUc,SAAU;QAC3B,MAAMW,QAAQP,QAAQ,CAAC,GAAGlB,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAACyB,SAASA,AAAU,SAAVA,OACV;QAGJ,IAAIC,gBAAgBD;QAIpB,IAAIzB,OAAO,SAAS,EAAE;YAClB,MAAM2B,cAAcH,eAAe,GAAG,CAACxB,OAAO,SAAS,CAAC,MAAM;YAC9D,IAAI2B,AAAgB,UAAhBA,aACAD,gBAAgB;QAExB;QAEAF,eAAe,GAAG,CAACxB,OAAO,EAAE,EAAE0B;IAClC;IAIA,KAAK,MAAM1B,UAAUc,SAAU;QAC3B,IAAI,CAACd,OAAO,SAAS,IAAI,CAACwB,eAAe,GAAG,CAACxB,OAAO,EAAE,GAClD;QAGJ,MAAM2B,cAAcH,eAAe,GAAG,CAACxB,OAAO,SAAS,CAAC,MAAM;QAC9D,IAAI,CAAC2B,aAAa;YAEdH,eAAe,MAAM,CAACxB,OAAO,EAAE;YAC/B;QACJ;QAEA,MAAM4B,eAAeN,UAAU,GAAG,CAACtB,OAAO,SAAS,CAAC,MAAM;QAC1D,IAAI4B,gBAAgB7B,UAAU6B,cAAc,QAAQ;YAChD,MAAMC,YACFF,AAAgB,UAAhBA,cAAwB,QAAQT,QAAQ,CAAC,GAAGlB,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI;YACjF,IAAI,CAAC6B,UAAU,QAAQ,CAAC7B,OAAO,SAAS,CAAC,QAAQ,GAE7CwB,eAAe,MAAM,CAACxB,OAAO,EAAE;QAEvC;IACJ;IAGA,MAAM8B,cAA4B,EAAE;IAEpC,KAAK,MAAM9B,UAAUc,SAAU;QAC3B,MAAMW,QAAQD,eAAe,GAAG,CAACxB,OAAO,EAAE;QAC1C,IAAI,CAACyB,OACD;QAGJ,MAAMV,OAAmB;YACrB,MAAMf,OAAO,UAAU;QAC3B;QAEA,IAAIyB,AAAU,UAAVA,OAAiB;YACjBV,KAAK,GAAG,GAAG;YACX,IAAIhB,UAAUC,QAAQ,QAClBe,KAAK,GAAG,GAAG;QAEnB,OAAO,IAAIhB,UAAUC,QAAQ,QACzBe,KAAK,GAAG,GAAGG,QAAQ,CAAC,GAAGlB,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI;QAI9C,KAAK,MAAMgB,UAAUhB,OAAO,OAAO,IAAI,EAAE,CACrC,IAAIgB,AAAgB,UAAhBA,OAAO,IAAI,EAIf;YAAA,IAAIA,AAAgB,SAAhBA,OAAO,IAAI,EAAW;gBACtB,MAAMe,KAAeb,QAAQ,CAAC,GAAGlB,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;gBACrD,IAAI+B,GAAG,MAAM,GAAG,GACZhB,KAAK,EAAE,GAAGgB,GAAG,IAAI,CAAC;YAE1B,OAEI,IAAIb,QAAQ,CAAC,GAAGlB,OAAO,EAAE,CAAC,OAAO,EAAEgB,OAAO,IAAI,EAAE,CAAC,EAC7CD,IAAI,CAACC,OAAO,IAAI,CAAC,GAAG;QAE5B;QAGJc,YAAY,IAAI,CAACf;IACrB;IAEA,OAAO;WAAIK;WAAaU;KAAY;AACxC;AAQO,SAASE,kBACZ5B,MAAwB,EACxB6B,OAAiC;IAEjC,MAAM,EAAE1B,KAAK,EAAE2B,QAAQ,EAAE,GAAGD;IAE5B,MAAMf,WAAWiB,QAAQ;QACrB,IAAItB,OAAOP,uBAAuBF,QAAQG;QAG1C,IAAI0B,QAAQ,WAAW,EAAE;YACrB,MAAMG,QAAQH,QAAQ,WAAW,CAACzB,MAAM,OAAO,CAACD,SAASA,QAAQ,EAAE;YACnEM,OAAO;gBAAE,GAAGA,IAAI;gBAAE,GAAGuB,KAAK;YAAC;QAC/B;QAEA,OAAOvB;IACX,GAAG,EAAE;IAEL,MAAMwB,eAAeC,YACjB,CAACzB;QACG,IAAI0B,SAAStB,qBAAqBb,QAAQS,MAAMN;QAGhD,IAAI0B,QAAQ,SAAS,EAAE;YACnBM,SAASN,QAAQ,SAAS,CACtBpB,MACA0B,OAAO,MAAM,CAAC9B,CAAAA,IAAKA,EAAE,IAAI,CAAC,UAAU,CAACL,OAAO,MAAM;YAGtD,MAAMoC,uBAAuBhC,MAAM,OAAO,CAACD,SACrCA,MAAM,MAAM,CACRE,CAAAA,IACI,CAACA,EAAE,IAAI,CAAC,UAAU,CAACL,OAAO,MAAM,KAChC,CAACK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAEL,OAAO,MAAM,EAAE,KAE9C,EAAE;YACRmC,SAAS;mBAAIC;mBAAyBD;aAAO;QACjD;QAEAL,SAASK;IACb,GACA;QAAChC;KAAM;IAGX,OAAO;QAAEW;QAAUmB;IAAa;AACpC"}

package/permissions/usePermissions.js

@@ -1,9 +1,10 @@
 import { useContainer } from "@webiny/app";
-export function createUsePermissions(abstraction) {
-  return function usePermissions() {
-    const container = useContainer();
-    return container.resolve(abstraction);
-  };
+function createUsePermissions(abstraction) {
+    return function() {
+        const container = useContainer();
+        return container.resolve(abstraction);
+    };
 }
+export { createUsePermissions };
 
 //# sourceMappingURL=usePermissions.js.map

package/permissions/usePermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["useContainer","createUsePermissions","abstraction","usePermissions","container","resolve"],"sources":["usePermissions.ts"],"sourcesContent":["import { useContainer } from \"@webiny/app\";\nimport type { Abstraction } from \"@webiny/di\";\nimport type { PermissionSchemaConfig } from \"./types.js\";\nimport type { UsePermissionsResult } from \"./types.js\";\n\nexport function createUsePermissions<const S extends PermissionSchemaConfig>(\n    abstraction: Abstraction<UsePermissionsResult<S>>\n): () => UsePermissionsResult<S> {\n    return function usePermissions(): UsePermissionsResult<S> {\n        const container = useContainer();\n        return container.resolve(abstraction);\n    };\n}\n"],"mappings":"AAAA,SAASA,YAAY,QAAQ,aAAa;AAK1C,OAAO,SAASC,oBAAoBA,CAChCC,WAAiD,EACpB;EAC7B,OAAO,SAASC,cAAcA,CAAA,EAA4B;IACtD,MAAMC,SAAS,GAAGJ,YAAY,CAAC,CAAC;IAChC,OAAOI,SAAS,CAACC,OAAO,CAACH,WAAW,CAAC;EACzC,CAAC;AACL","ignoreList":[]}
+{"version":3,"file":"permissions/usePermissions.js","sources":["../../src/permissions/usePermissions.ts"],"sourcesContent":["import { useContainer } from \"@webiny/app\";\nimport type { Abstraction } from \"@webiny/di\";\nimport type { PermissionSchemaConfig } from \"./types.js\";\nimport type { UsePermissionsResult } from \"./types.js\";\n\nexport function createUsePermissions<const S extends PermissionSchemaConfig>(\n    abstraction: Abstraction<UsePermissionsResult<S>>\n): () => UsePermissionsResult<S> {\n    return function usePermissions(): UsePermissionsResult<S> {\n        const container = useContainer();\n        return container.resolve(abstraction);\n    };\n}\n"],"names":["createUsePermissions","abstraction","container","useContainer"],"mappings":";AAKO,SAASA,qBACZC,WAAiD;IAEjD,OAAO;QACH,MAAMC,YAAYC;QAClB,OAAOD,UAAU,OAAO,CAACD;IAC7B;AACJ"}

package/presentation/accessManagement/SecurityPermissions.d.ts

@@ -0,0 +1,2 @@
+import React from "react";
+export declare const SecurityPermissions: () => React.JSX.Element;

package/presentation/accessManagement/SecurityPermissions.js

@@ -0,0 +1,54 @@
+import react, { useMemo } from "react";
+import { AdminConfig } from "../../config/AdminConfig.js";
+import { useFeatureFlags } from "../featureFlags/useFeatureFlags.js";
+import { ReactComponent } from "@webiny/icons/security.svg";
+const { Security: Security } = AdminConfig;
+const SecurityPermissions = ()=>{
+    const featureFlags = useFeatureFlags();
+    const teams = featureFlags.isEnabled("advancedAccessControlLayer.teams");
+    const schema = useMemo(()=>{
+        const entities = [
+            {
+                id: "apiKey",
+                title: "API Keys",
+                permission: "security.apiKey",
+                scopes: [
+                    "full"
+                ]
+            },
+            {
+                id: "group",
+                title: "Roles",
+                permission: "security.group",
+                scopes: [
+                    "full"
+                ]
+            }
+        ];
+        if (teams) entities.push({
+            id: "team",
+            title: "Teams",
+            permission: "security.team",
+            scopes: [
+                "full"
+            ]
+        });
+        return {
+            prefix: "security",
+            fullAccess: true,
+            entities
+        };
+    }, [
+        teams
+    ]);
+    return /*#__PURE__*/ react.createElement(AdminConfig, null, /*#__PURE__*/ react.createElement(Security.Permissions, {
+        name: "security",
+        title: "Security",
+        description: "Manage Security permissions.",
+        icon: /*#__PURE__*/ react.createElement(ReactComponent, null),
+        schema: schema
+    }));
+};
+export { SecurityPermissions };
+
+//# sourceMappingURL=SecurityPermissions.js.map

package/presentation/accessManagement/SecurityPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/accessManagement/SecurityPermissions.js","sources":["../../../src/presentation/accessManagement/SecurityPermissions.tsx"],"sourcesContent":["import React, { useMemo } from \"react\";\nimport { AdminConfig } from \"~/config/AdminConfig.js\";\nimport { useFeatureFlags } from \"~/presentation/featureFlags/useFeatureFlags.js\";\nimport type { EntityDefinition } from \"~/permissions/types.js\";\nimport { ReactComponent as PermissionsIcon } from \"@webiny/icons/security.svg\";\n\nconst { Security } = AdminConfig;\n\nexport const SecurityPermissions = () => {\n    const featureFlags = useFeatureFlags();\n    const teams = featureFlags.isEnabled(\"advancedAccessControlLayer.teams\");\n\n    const schema = useMemo(() => {\n        const entities: EntityDefinition[] = [\n            {\n                id: \"apiKey\",\n                title: \"API Keys\",\n                permission: \"security.apiKey\",\n                scopes: [\"full\"]\n            },\n            {\n                id: \"group\",\n                title: \"Roles\",\n                permission: \"security.group\",\n                scopes: [\"full\"]\n            }\n        ];\n\n        if (teams) {\n            entities.push({\n                id: \"team\",\n                title: \"Teams\",\n                permission: \"security.team\",\n                scopes: [\"full\"]\n            });\n        }\n\n        return {\n            prefix: \"security\",\n            fullAccess: true,\n            entities\n        };\n    }, [teams]);\n\n    return (\n        <AdminConfig>\n            <Security.Permissions\n                name=\"security\"\n                title=\"Security\"\n                description=\"Manage Security permissions.\"\n                icon={<PermissionsIcon />}\n                schema={schema}\n            />\n        </AdminConfig>\n    );\n};\n"],"names":["Security","AdminConfig","SecurityPermissions","featureFlags","useFeatureFlags","teams","schema","useMemo","entities","PermissionsIcon"],"mappings":";;;;AAMA,MAAM,EAAEA,UAAAA,QAAQ,EAAE,GAAGC;AAEd,MAAMC,sBAAsB;IAC/B,MAAMC,eAAeC;IACrB,MAAMC,QAAQF,aAAa,SAAS,CAAC;IAErC,MAAMG,SAASC,QAAQ;QACnB,MAAMC,WAA+B;YACjC;gBACI,IAAI;gBACJ,OAAO;gBACP,YAAY;gBACZ,QAAQ;oBAAC;iBAAO;YACpB;YACA;gBACI,IAAI;gBACJ,OAAO;gBACP,YAAY;gBACZ,QAAQ;oBAAC;iBAAO;YACpB;SACH;QAED,IAAIH,OACAG,SAAS,IAAI,CAAC;YACV,IAAI;YACJ,OAAO;YACP,YAAY;YACZ,QAAQ;gBAAC;aAAO;QACpB;QAGJ,OAAO;YACH,QAAQ;YACR,YAAY;YACZA;QACJ;IACJ,GAAG;QAACH;KAAM;IAEV,OAAO,WAAP,GACI,oBAACJ,aAAWA,MAAAA,WAAAA,GACR,oBAACD,SAAS,WAAW;QACjB,MAAK;QACL,OAAM;QACN,aAAY;QACZ,oBAAM,oBAACS,gBAAeA;QACtB,QAAQH;;AAIxB"}

package/presentation/accessManagement/apiKeys/ApiKeysDataSource.d.ts

@@ -0,0 +1,13 @@
+import { SimpleDataSource } from "../../../presentation/listPresenter/SimpleDataSource.js";
+import type { IDataSourceQuery } from "../../../presentation/listPresenter/abstractions.js";
+import type { FetchResult } from "../../../presentation/listPresenter/FolderAwareDataSource.js";
+import type { ApiKey } from "../../../features/accessManagement/types.js";
+import type { IListApiKeysUseCase } from "../../../features/accessManagement/apiKeys/listApiKeys/abstractions.js";
+import type { IListCache } from "../../../features/listCache/index.js";
+export declare class ApiKeysDataSource extends SimpleDataSource<ApiKey> {
+    private listApiKeysUseCase;
+    private cache;
+    constructor(listApiKeysUseCase: IListApiKeysUseCase, cache: IListCache<ApiKey>);
+    get rows(): ApiKey[];
+    fetch(_params: IDataSourceQuery): Promise<FetchResult<ApiKey>>;
+}

package/presentation/accessManagement/apiKeys/ApiKeysDataSource.js

@@ -0,0 +1,23 @@
+import { SimpleDataSource } from "../../listPresenter/SimpleDataSource.js";
+class ApiKeysDataSource extends SimpleDataSource {
+    constructor(listApiKeysUseCase, cache){
+        super(), this.listApiKeysUseCase = listApiKeysUseCase, this.cache = cache;
+    }
+    get rows() {
+        return this.cache.getItems();
+    }
+    async fetch(_params) {
+        const result = await this.listApiKeysUseCase.execute();
+        return {
+            data: result.data,
+            meta: {
+                cursor: null,
+                hasMoreItems: false,
+                totalCount: result.data.length
+            }
+        };
+    }
+}
+export { ApiKeysDataSource };
+
+//# sourceMappingURL=ApiKeysDataSource.js.map

package/presentation/accessManagement/apiKeys/ApiKeysDataSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation/accessManagement/apiKeys/ApiKeysDataSource.js","sources":["../../../../src/presentation/accessManagement/apiKeys/ApiKeysDataSource.ts"],"sourcesContent":["import { SimpleDataSource } from \"~/presentation/listPresenter/SimpleDataSource.js\";\nimport type { IDataSourceQuery } from \"~/presentation/listPresenter/abstractions.js\";\nimport type { FetchResult } from \"~/presentation/listPresenter/FolderAwareDataSource.js\";\nimport type { ApiKey } from \"~/features/accessManagement/types.js\";\nimport type { IListApiKeysUseCase } from \"~/features/accessManagement/apiKeys/listApiKeys/abstractions.js\";\nimport type { IListCache } from \"~/features/listCache/index.js\";\n\nexport class ApiKeysDataSource extends SimpleDataSource<ApiKey> {\n    constructor(\n        private listApiKeysUseCase: IListApiKeysUseCase,\n        private cache: IListCache<ApiKey>\n    ) {\n        super();\n    }\n\n    get rows(): ApiKey[] {\n        return this.cache.getItems();\n    }\n\n    async fetch(_params: IDataSourceQuery): Promise<FetchResult<ApiKey>> {\n        const result = await this.listApiKeysUseCase.execute();\n        return {\n            data: result.data,\n            meta: { cursor: null, hasMoreItems: false, totalCount: result.data.length }\n        };\n    }\n}\n"],"names":["ApiKeysDataSource","SimpleDataSource","listApiKeysUseCase","cache","_params","result"],"mappings":";AAOO,MAAMA,0BAA0BC;IACnC,YACYC,kBAAuC,EACvCC,KAAyB,CACnC;QACE,KAAK,SAHGD,kBAAkB,GAAlBA,oBAAAA,IAAAA,CACAC,KAAK,GAALA;IAGZ;IAEA,IAAI,OAAiB;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ;IAC9B;IAEA,MAAM,MAAMC,OAAyB,EAAgC;QACjE,MAAMC,SAAS,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO;QACpD,OAAO;YACH,MAAMA,OAAO,IAAI;YACjB,MAAM;gBAAE,QAAQ;gBAAM,cAAc;gBAAO,YAAYA,OAAO,IAAI,CAAC,MAAM;YAAC;QAC9E;IACJ;AACJ"}