@xemahq/contracts 0.31.0 → 0.33.0

package/dist/authorization-module/server/compose-authorization-base.js

@@ -0,0 +1,511 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FGA_MOD_FILE_NAME = exports.DEFAULT_AUTHORIZATION_COMPOSITION_GOVERNANCE = exports.DEFAULT_AUTHORIZATION_COMPOSITION_BUDGETS = void 0;
+exports.authorizationModuleInputFromContribution = authorizationModuleInputFromContribution;
+exports.composeAuthorizationBase = composeAuthorizationBase;
+const syntax_transformer_1 = require("@openfga/syntax-transformer");
+const biome_1 = require("../../biome");
+const server_1 = require("../../content-address/server");
+const platform_generation_1 = require("../../platform-generation");
+const authorization_composition_error_1 = require("../lib/authorization-composition-error");
+const authorization_module_contribution_1 = require("../lib/authorization-module-contribution");
+const authorization_namespace_1 = require("../lib/authorization-namespace");
+const platform_authorization_modules_1 = require("../lib/platform-authorization-modules");
+const authorization_compatibility_1 = require("./authorization-compatibility");
+const authorization_model_json_1 = require("./authorization-model-json");
+const platform_module_files_1 = require("./platform-module-files");
+function authorizationModuleInputFromContribution(contribution) {
+    return {
+        signedBiomeId: contribution.owner.id,
+        signedBiomeVersion: contribution.owner.version,
+        manifest: authorization_module_contribution_1.AuthorizationModuleContributionManifestSchema.parse(contribution.manifest),
+    };
+}
+exports.DEFAULT_AUTHORIZATION_COMPOSITION_BUDGETS = Object.freeze({ maxModelBytes: 262_144, maxTypeDefinitions: 1_000 });
+exports.DEFAULT_AUTHORIZATION_COMPOSITION_GOVERNANCE = Object.freeze({ admitUnconditionedPublicWildcards: false });
+exports.FGA_MOD_FILE_NAME = 'fga.mod';
+const MODULE_DECLARATION = /^\s*module\s+(\S+)\s*$/m;
+const DECLARED_TYPE = /^\s*(extend\s+)?type\s+(\S+)\s*$/gm;
+const DECLARED_CONDITION = /^\s*condition\s+([^\s(]+)\s*\(/gm;
+class Violations {
+    list = [];
+    add(code, owner, message) {
+        this.list.push({ code, owner, message });
+    }
+    throwIfAny() {
+        if (this.list.length > 0) {
+            throw new authorization_composition_error_1.AuthorizationCompositionError(this.list);
+        }
+    }
+}
+function tightenedBudgets(overrides) {
+    const result = { ...exports.DEFAULT_AUTHORIZATION_COMPOSITION_BUDGETS };
+    for (const key of Object.keys(result)) {
+        const value = overrides?.[key];
+        if (value === undefined)
+            continue;
+        if (!Number.isInteger(value) || value <= 0 || value > result[key]) {
+            throw new Error(`composeAuthorizationBase: budget ${key}=${value} must be a positive integer no greater than the default ${result[key]} — budgets only TIGHTEN.`);
+        }
+        result[key] = value;
+    }
+    return result;
+}
+function parseModules(input, violations) {
+    const parsed = [];
+    const seen = new Set();
+    for (const moduleInput of input.modules) {
+        const owner = moduleInput.signedBiomeId;
+        const namespaceRefusal = (0, authorization_namespace_1.authorizationNamespaceRefusal)(owner);
+        if (namespaceRefusal !== null) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.InvalidBiomeId, owner, new authorization_namespace_1.AuthorizationNamespaceError(namespaceRefusal, owner).message);
+            continue;
+        }
+        const { moduleName, prefix } = (0, authorization_namespace_1.deriveAuthorizationNamespace)(owner);
+        if (seen.has(moduleName)) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.NamespaceCollision, owner, `two installed modules derive the namespace "${moduleName}".`);
+            continue;
+        }
+        seen.add(moduleName);
+        const manifestResult = authorization_module_contribution_1.AuthorizationModuleContributionManifestSchema.safeParse(moduleInput.manifest);
+        if (!manifestResult.success) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ModuleFileMismatch, owner, `the contribution manifest does not parse: ${manifestResult.error.issues
+                .map((i) => `${i.path.join('.')}: ${i.message}`)
+                .join('; ')}`);
+            continue;
+        }
+        const manifest = manifestResult.data;
+        const { envelope } = manifest;
+        if (envelope.namespace !== undefined && envelope.namespace !== moduleName) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.NamespaceMismatch, owner, `the envelope names namespace "${envelope.namespace}" but the signed biome id derives "${moduleName}".`);
+        }
+        try {
+            if (!(0, platform_generation_1.isPlatformGenerationAdmissible)(envelope.platformGeneration, input.currentPlatformGeneration)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.PlatformGenerationRefused, owner, `the module was built for generation "${envelope.platformGeneration}", which does not admit the current "${input.currentPlatformGeneration}".`);
+            }
+        }
+        catch (error) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.PlatformGenerationRefused, owner, error instanceof Error ? error.message : String(error));
+        }
+        for (const file of manifest.moduleFiles) {
+            const declared = MODULE_DECLARATION.exec(file.contents)?.[1];
+            if (declared !== moduleName) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ModuleNameMismatch, owner, `file "${file.name}" declares module "${declared ?? '(none)'}"; it must declare "${moduleName}".`);
+            }
+        }
+        for (const file of manifest.moduleFiles) {
+            for (const match of file.contents.matchAll(DECLARED_TYPE)) {
+                const [, extend, type] = match;
+                if (extend !== undefined && !type.startsWith(prefix)) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ExtendsForeignType, owner, `file "${file.name}" extends type "${type}", which it does not own; a module may never extend a type it does not own.`);
+                }
+                else if (extend === undefined && !type.startsWith(prefix)) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.TypeOutsideNamespace, owner, `file "${file.name}" defines type "${type}", which is outside the derived prefix "${prefix}".`);
+                }
+            }
+            for (const match of file.contents.matchAll(DECLARED_CONDITION)) {
+                const condition = match[1];
+                if (!condition.startsWith(prefix)) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ConditionOutsideNamespace, owner, `file "${file.name}" defines condition "${condition}", which is outside the derived prefix "${prefix}".`);
+                }
+            }
+        }
+        for (const type of envelope.resourceTypes) {
+            if (!type.startsWith(prefix)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.TypeOutsideNamespace, owner, `resourceTypes names "${type}", which is outside the derived prefix "${prefix}".`);
+            }
+        }
+        for (const type of Object.keys(envelope.implements)) {
+            if (!envelope.resourceTypes.includes(type)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ImplementsForeignType, owner, `implements names "${type}", which is not one of the module's resourceTypes.`);
+            }
+        }
+        const contentHash = (0, server_1.canonicalJsonSha256)({
+            envelope: manifest.envelope,
+            moduleFiles: [...manifest.moduleFiles].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0),
+            testFile: manifest.testFile,
+            signedBiome: manifest.signedBiome,
+        });
+        const adopted = input.adopted?.modules[moduleName];
+        if (adopted !== undefined) {
+            if (envelope.moduleVersion < adopted.moduleVersion) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ModuleVersionDowngrade, owner, `moduleVersion ${envelope.moduleVersion} is below the adopted ${adopted.moduleVersion}; there is no downgrade.`);
+            }
+            else if (envelope.moduleVersion === adopted.moduleVersion &&
+                contentHash !== adopted.contentHash) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ModuleVersionReused, owner, `moduleVersion ${envelope.moduleVersion} is already adopted with different content; an artifact version is immutable.`);
+            }
+        }
+        parsed.push({ namespace: moduleName, prefix, input: moduleInput, envelope, manifest, contentHash });
+    }
+    checkDependencies(parsed, violations);
+    return parsed;
+}
+function checkDependencies(parsed, violations) {
+    const byNamespace = new Map(parsed.map((m) => [m.namespace, m]));
+    for (const module of parsed) {
+        for (const dependency of module.envelope.dependsOn) {
+            if (!module.manifest.signedBiome.declaredBiomeDependencies.includes(dependency.biome)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.DependencyNotDeclaredByBiome, module.namespace, `dependsOn names "${dependency.biome}", which the biome's signed manifest does not declare as a dependency.`);
+                continue;
+            }
+            const target = byNamespace.get(dependency.biome);
+            if (target === undefined) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.DependencyMissing, module.namespace, `dependsOn names "${dependency.biome}", which has no authorization module in this composition.`);
+                continue;
+            }
+            if (target.envelope.moduleVersion < dependency.minModuleVersion) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.DependencyVersionTooLow, module.namespace, `dependsOn requires "${dependency.biome}" module version ≥ ${dependency.minModuleVersion}; ${target.envelope.moduleVersion} is installed.`);
+            }
+            if (biome_1.BIOME_TIER_RANK[target.manifest.signedBiome.tier] > biome_1.BIOME_TIER_RANK[module.manifest.signedBiome.tier]) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.DependencyTierViolation, module.namespace, `a ${module.manifest.signedBiome.tier} biome may not depend on the higher-tier ${target.manifest.signedBiome.tier} biome "${dependency.biome}".`);
+            }
+        }
+    }
+    const state = new Map();
+    const visit = (namespace, path) => {
+        const current = state.get(namespace);
+        if (current === 'done')
+            return;
+        if (current === 'visiting') {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.DependencyCycle, namespace, `dependsOn cycle: ${[...path, namespace].join(' → ')}.`);
+            return;
+        }
+        state.set(namespace, 'visiting');
+        for (const dependency of byNamespace.get(namespace)?.envelope.dependsOn ?? []) {
+            if (byNamespace.has(dependency.biome)) {
+                visit(dependency.biome, [...path, namespace]);
+            }
+        }
+        state.set(namespace, 'done');
+    };
+    for (const namespace of [...byNamespace.keys()].sort()) {
+        visit(namespace, []);
+    }
+}
+function moduleFileName(namespace, file) {
+    return `${namespace}/${file}`;
+}
+function relationsReferencedThroughEdges(userset, out) {
+    if (userset.computedUserset?.relation !== undefined) {
+        out.computed.push(userset.computedUserset.relation);
+    }
+    if (userset.tupleToUserset !== undefined) {
+        const tupleset = userset.tupleToUserset.tupleset.relation;
+        const relation = userset.tupleToUserset.computedUserset.relation;
+        if (tupleset !== undefined && relation !== undefined) {
+            out.tupleToUserset.push({ tupleset, relation });
+        }
+    }
+    for (const child of [
+        ...(userset.union?.child ?? []),
+        ...(userset.intersection?.child ?? []),
+    ]) {
+        relationsReferencedThroughEdges(child, out);
+    }
+    if (userset.difference !== undefined) {
+        relationsReferencedThroughEdges(userset.difference.base, out);
+        relationsReferencedThroughEdges(userset.difference.subtract, out);
+    }
+}
+function governParsedModel(model, index, modules, governance, violations) {
+    const byNamespace = new Map(modules.map((m) => [m.namespace, m]));
+    const typeDefinitions = new Map(model.type_definitions.map((t) => [t.type, t]));
+    const definedByBiome = new Map();
+    const checkTypeReference = (module, type, relation, where) => {
+        const owner = index.typeOwner.get(type);
+        if (owner === module.namespace)
+            return;
+        const platformModule = index.platformTypeModule.get(type);
+        if (platformModule !== undefined) {
+            if (!module.envelope.imports.includes(platformModule)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ReferenceNotImported, module.namespace, `${where} references platform type "${type}" of module "${platformModule}", which the envelope does not import.`);
+                return;
+            }
+            const exported = platform_authorization_modules_1.PLATFORM_AUTHORIZATION_EXPORTS[platformModule][type];
+            if (exported === undefined) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ReferenceNotExported, module.namespace, `${where} references platform type "${type}", which "${platformModule}" does not export.`);
+                return;
+            }
+            if (relation !== undefined && !exported.includes(relation)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ReferenceNotExported, module.namespace, `${where} references "${type}#${relation}"; "${platformModule}" exports only [${exported.join(', ')}] on "${type}".`);
+            }
+            return;
+        }
+        if (owner === undefined || !module.envelope.dependsOn.some((d) => d.biome === owner)) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ReferenceNotDependedOn, module.namespace, `${where} references "${type}" of "${owner ?? 'an unknown owner'}", which the envelope does not declare in dependsOn.`);
+        }
+    };
+    for (const typeDefinition of model.type_definitions) {
+        const typeOwner = index.typeOwner.get(typeDefinition.type);
+        const ownerModule = byNamespace.get(typeOwner);
+        if (ownerModule !== undefined) {
+            definedByBiome.set(typeOwner, [...(definedByBiome.get(typeOwner) ?? []), typeDefinition.type]);
+            if (!typeDefinition.type.startsWith(ownerModule.prefix)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.TypeOutsideNamespace, typeOwner, `defines type "${typeDefinition.type}", which is outside its derived prefix "${ownerModule.prefix}".`);
+            }
+            if (typeDefinition.metadata?.module !== ownerModule.namespace) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ModuleNameMismatch, typeOwner, `type "${typeDefinition.type}" carries module "${typeDefinition.metadata?.module ?? '(none)'}".`);
+            }
+        }
+        for (const relation of Object.keys(typeDefinition.relations ?? {})) {
+            const relationFile = typeDefinition.metadata?.relations?.[relation]?.source_info?.file ??
+                typeDefinition.metadata?.source_info?.file;
+            const relationOwner = relationFile === undefined ? typeOwner : (index.fileOwner.get(relationFile) ?? typeOwner);
+            if (relationOwner !== typeOwner) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ExtendsForeignType, relationOwner, `adds relation "${relation}" to type "${typeDefinition.type}", owned by "${typeOwner}"; a module may never extend a type it does not own.`);
+                continue;
+            }
+            const module = byNamespace.get(relationOwner);
+            if (module === undefined)
+                continue;
+            const where = `relation "${typeDefinition.type}#${relation}"`;
+            for (const ref of (0, authorization_model_json_1.directlyRelatedTypes)(typeDefinition, relation)) {
+                checkTypeReference(module, ref.type, ref.relation, where);
+                if (ref.condition !== undefined && ref.condition !== '') {
+                    const conditionOwner = index.conditionOwner.get(ref.condition);
+                    if (conditionOwner !== module.namespace &&
+                        !module.envelope.dependsOn.some((d) => d.biome === conditionOwner)) {
+                        violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ConditionOutsideNamespace, module.namespace, `${where} uses condition "${ref.condition}" owned by "${conditionOwner ?? 'unknown'}".`);
+                    }
+                }
+                if (ref.wildcard !== undefined) {
+                    const declared = module.envelope.publicWildcards[typeDefinition.type] ?? [];
+                    if (!declared.includes(relation)) {
+                        violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.UndeclaredWildcard, module.namespace, `${where} admits "${ref.type}:*", which the envelope does not declare in publicWildcards (D5).`);
+                    }
+                    else if ((ref.condition === undefined || ref.condition === '') &&
+                        !governance.admitUnconditionedPublicWildcards) {
+                        violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.UnconditionedWildcardNotAllowed, module.namespace, `${where} admits an UNconditioned "${ref.type}:*"; governance admits only conditioned public wildcards.`);
+                    }
+                }
+            }
+            const referenced = { computed: [], tupleToUserset: [] };
+            relationsReferencedThroughEdges(typeDefinition.relations?.[relation] ?? {}, referenced);
+            for (const { tupleset, relation: target } of referenced.tupleToUserset) {
+                for (const edge of (0, authorization_model_json_1.directlyRelatedTypes)(typeDefinition, tupleset)) {
+                    const edgeType = typeDefinitions.get(edge.type);
+                    if (edgeType?.relations?.[target] === undefined)
+                        continue;
+                    checkTypeReference(module, edge.type, target, `${where} ("${target} from ${tupleset}")`);
+                }
+            }
+        }
+    }
+    for (const [condition, owner] of index.conditionOwner) {
+        const module = byNamespace.get(owner);
+        if (module !== undefined && !condition.startsWith(module.prefix)) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ConditionOutsideNamespace, owner, `defines condition "${condition}", which is outside its derived prefix "${module.prefix}".`);
+        }
+    }
+    for (const module of modules) {
+        const defined = new Set(definedByBiome.get(module.namespace) ?? []);
+        const declared = new Set(module.envelope.resourceTypes);
+        const missing = [...declared].filter((t) => !defined.has(t)).sort();
+        const undeclared = [...defined].filter((t) => !declared.has(t)).sort();
+        if (missing.length > 0 || undeclared.length > 0) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.ResourceTypesMismatch, module.namespace, `resourceTypes must name every defined type and nothing else (declared-not-defined: [${missing.join(', ')}]; defined-not-declared: [${undeclared.join(', ')}]).`);
+        }
+        for (const [type, interfaces] of Object.entries(module.envelope.implements)) {
+            const definition = typeDefinitions.get(type);
+            for (const iface of interfaces) {
+                const missingRelations = platform_authorization_modules_1.XEMA_AUTHORIZATION_INTERFACE_RELATIONS[iface].filter((r) => definition?.relations?.[r] === undefined);
+                if (missingRelations.length > 0) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.InterfaceNotImplemented, module.namespace, `"${type}" declares ${iface} but does not define [${missingRelations.join(', ')}]; a partial implementer is refused, never silently skipped.`);
+                }
+            }
+        }
+        for (const [type, relations] of Object.entries(module.envelope.writableRelations)) {
+            const definition = typeDefinitions.get(type);
+            if (!declared.has(type) || definition === undefined) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.WritableRelationInvalid, module.namespace, `writableRelations names "${type}", which is not one of the module's own types.`);
+                continue;
+            }
+            for (const relation of relations) {
+                if ((0, authorization_model_json_1.directlyRelatedTypes)(definition, relation).length === 0) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.WritableRelationInvalid, module.namespace, `writableRelations names "${type}#${relation}", which is not a directly assignable relation.`);
+                }
+            }
+        }
+        for (const [type, searchable] of Object.entries(module.envelope.searchable)) {
+            if (!declared.has(type)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.SearchableInvalid, module.namespace, `searchable names "${type}", which is not one of the module's own types.`);
+            }
+            if (searchable.anchor !== undefined) {
+                const anchorOwner = index.typeOwner.get(searchable.anchor);
+                if (anchorOwner === undefined ||
+                    (anchorOwner !== module.namespace &&
+                        !module.envelope.dependsOn.some((d) => d.biome === anchorOwner))) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.SearchableInvalid, module.namespace, `searchable "${type}" anchors on "${searchable.anchor}", which is neither its own type nor a dependsOn type.`);
+                }
+            }
+        }
+        for (const type of Object.keys(module.envelope.publicWildcards)) {
+            if (!declared.has(type)) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.UndeclaredWildcard, module.namespace, `publicWildcards names "${type}", which is not one of the module's own types.`);
+            }
+        }
+    }
+}
+function buildFgaMod(fileNames) {
+    return [
+        `schema: '${authorization_model_json_1.FGA_MODULAR_SCHEMA_VERSION}'`,
+        'contents:',
+        ...fileNames.map((name) => `  - ${name}`),
+        '',
+    ].join('\n');
+}
+function composeAuthorizationBase(input) {
+    const budgets = tightenedBudgets(input.budgets);
+    const governance = input.governance ?? exports.DEFAULT_AUTHORIZATION_COMPOSITION_GOVERNANCE;
+    const platformModules = input.platformModules ?? (0, platform_module_files_1.loadPlatformAuthorizationModuleFiles)();
+    const violations = new Violations();
+    const modules = parseModules(input, violations).sort((a, b) => a.namespace < b.namespace ? -1 : a.namespace > b.namespace ? 1 : 0);
+    const parentImplementers = modules
+        .flatMap((m) => Object.entries(m.envelope.implements)
+        .filter(([, ifaces]) => ifaces.includes(platform_authorization_modules_1.XemaAuthorizationInterface.Parent))
+        .map(([type]) => type))
+        .sort();
+    const fileOwner = new Map();
+    const files = [];
+    for (const platform of platformModules) {
+        let contents = platform.moduleFile.contents;
+        if (platform.module === platform_authorization_modules_1.PlatformAuthorizationModule.Core) {
+            const filled = (0, platform_module_files_1.fillXemaCoreParentSlots)(contents, parentImplementers);
+            if (filled === null) {
+                violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.PlatformTemplateInvalid, platform.module, 'the xema_core template must carry the parent slot exactly once per inheriting type.');
+                continue;
+            }
+            contents = filled;
+        }
+        fileOwner.set(platform.moduleFile.name, platform.module);
+        files.push({ name: platform.moduleFile.name, contents });
+    }
+    for (const module of modules) {
+        for (const file of [...module.manifest.moduleFiles].sort((a, b) => (a.name < b.name ? -1 : 1))) {
+            const name = moduleFileName(module.namespace, file.name);
+            fileOwner.set(name, module.namespace);
+            files.push({ name, contents: file.contents });
+        }
+    }
+    violations.throwIfAny();
+    let model;
+    try {
+        model = syntax_transformer_1.transformer.transformModuleFilesToModel(files.map((f) => ({ name: f.name, contents: f.contents })), authorization_model_json_1.FGA_MODULAR_SCHEMA_VERSION);
+    }
+    catch (error) {
+        const nested = error.errors;
+        const messages = Array.isArray(nested) && nested.length > 0
+            ? nested.map((e) => (e instanceof Error ? e.message : String(e)))
+            : [error instanceof Error ? error.message : String(error)];
+        for (const message of messages) {
+            const file = /([a-z0-9][a-z0-9-]*)\/[^\s:]+\.fga/.exec(message)?.[1];
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.TransformerRefused, file ?? 'composition', message);
+        }
+        violations.throwIfAny();
+        throw error;
+    }
+    const typeOwner = new Map();
+    const platformTypeModule = new Map();
+    for (const typeDefinition of model.type_definitions) {
+        const file = typeDefinition.metadata?.source_info?.file;
+        const owner = file === undefined ? undefined : fileOwner.get(file);
+        if (owner === undefined) {
+            violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.TransformerRefused, 'composition', `type "${typeDefinition.type}" carries no source file.`);
+            continue;
+        }
+        typeOwner.set(typeDefinition.type, owner);
+        if (Object.values(platform_authorization_modules_1.PlatformAuthorizationModule).includes(owner)) {
+            platformTypeModule.set(typeDefinition.type, owner);
+        }
+    }
+    const conditionOwner = new Map();
+    for (const [name, condition] of Object.entries(model.conditions ?? {})) {
+        const file = condition.metadata?.source_info?.file;
+        conditionOwner.set(name, (file === undefined ? undefined : fileOwner.get(file)) ?? 'composition');
+    }
+    governParsedModel(model, { fileOwner, typeOwner, platformTypeModule, conditionOwner }, modules, governance, violations);
+    const serialized = JSON.stringify(model);
+    const modelBytes = Buffer.byteLength(serialized, 'utf8');
+    if (modelBytes > budgets.maxModelBytes) {
+        violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.BudgetExceeded, 'composition', `the composed model is ${modelBytes} bytes; the budget is ${budgets.maxModelBytes}.`);
+    }
+    if (model.type_definitions.length > budgets.maxTypeDefinitions) {
+        violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.BudgetExceeded, 'composition', `the composed model has ${model.type_definitions.length} types; the budget is ${budgets.maxTypeDefinitions}.`);
+    }
+    const migrationHooks = [];
+    const platformSurfaceChanges = [];
+    let removedNamespaces = [];
+    if (input.adopted !== undefined) {
+        const adopted = input.adopted;
+        const present = new Set(modules.map((m) => m.namespace));
+        removedNamespaces = Object.keys(adopted.modules).filter((n) => !present.has(n)).sort();
+        const namespaceOf = (type) => {
+            const namespace = (0, authorization_namespace_1.namespaceOfAuthorizationName)(type);
+            return namespace === null || namespace === authorization_namespace_1.XEMA_PLATFORM_NAMESPACE ? null : namespace;
+        };
+        const changes = (0, authorization_compatibility_1.diffAuthorizationAssignableSurface)(adopted.model, model, namespaceOf);
+        const byModule = new Map();
+        for (const change of changes) {
+            if (change.namespace === null) {
+                platformSurfaceChanges.push(change);
+            }
+            else if (present.has(change.namespace)) {
+                byModule.set(change.namespace, [...(byModule.get(change.namespace) ?? []), change]);
+            }
+        }
+        for (const [namespace, moduleChanges] of byModule) {
+            const module = modules.find((m) => m.namespace === namespace);
+            const adoptedVersion = adopted.modules[namespace]?.moduleVersion;
+            const migration = adoptedVersion === undefined
+                ? undefined
+                : module.envelope.migrations.find((m) => m.from === adoptedVersion);
+            if (migration === undefined) {
+                if (module.envelope.migrations.length > 0) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.MigrationFromWrongVersion, namespace, `the module declares migrations from [${module.envelope.migrations.map((m) => m.from).join(', ')}], none from the adopted version ${adoptedVersion ?? '(none)'}.`);
+                }
+            }
+            for (const change of moduleChanges) {
+                if (!migration?.steps.some((step) => (0, authorization_compatibility_1.migrationStepCovers)(step, change.step))) {
+                    violations.add(authorization_composition_error_1.AuthorizationCompositionViolationCode.IncompatibleChangeUndeclared, namespace, `incompatible change ${JSON.stringify(change.step)} is not covered by a forward migration from the adopted version.`);
+                }
+            }
+            if (migration !== undefined && adoptedVersion !== undefined) {
+                migrationHooks.push({
+                    namespace,
+                    fromModuleVersion: adoptedVersion,
+                    toModuleVersion: module.envelope.moduleVersion,
+                    steps: migration.steps,
+                });
+            }
+        }
+    }
+    violations.throwIfAny();
+    const modelHash = (0, server_1.canonicalJsonSha256)(model);
+    const testFiles = [
+        ...platformModules.map((p) => ({ owner: p.module, name: p.testFile.name, contents: p.testFile.contents })),
+        ...modules.map((m) => ({
+            owner: m.namespace,
+            name: `${m.namespace}.${m.manifest.testFile.name}`,
+            contents: m.manifest.testFile.contents,
+        })),
+    ];
+    return {
+        model,
+        modelHash,
+        modelBytes,
+        files: [...files, { name: exports.FGA_MOD_FILE_NAME, contents: buildFgaMod(files.map((f) => f.name)) }],
+        testFiles,
+        modules: modules.map((m) => ({
+            namespace: m.namespace,
+            moduleVersion: m.envelope.moduleVersion,
+            contentHash: m.contentHash,
+            signedBiomeVersion: m.input.signedBiomeVersion,
+        })),
+        parentImplementers,
+        platformSurfaceChanges,
+        removedNamespaces,
+        migrationHooks,
+    };
+}
+//# sourceMappingURL=compose-authorization-base.js.map

package/dist/authorization-module/server/compose-authorization-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-authorization-base.js","sourceRoot":"","sources":["../../../src/authorization-module/server/compose-authorization-base.ts"],"names":[],"mappings":";;;AA0GA,4FAWC;AAyoBD,4DAkMC;AAh8BD,oEAA0D;AAE1D,uCAA8C;AAC9C,yDAAmE;AACnE,mEAA2E;AAC3E,4FAIgD;AAChD,gGAGkD;AAElD,4EAMwC;AACxC,0FAK+C;AAE/C,+EAKuC;AACvC,yEAKoC;AACpC,mEAIiC;AA6DjC,SAAgB,wCAAwC,CAAC,YAGxD;IACC,OAAO;QACL,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;QACpC,kBAAkB,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO;QAC9C,QAAQ,EAAE,iFAA6C,CAAC,KAAK,CAC3D,YAAY,CAAC,QAAQ,CACtB;KACF,CAAC;AACJ,CAAC;AA0BY,QAAA,yCAAyC,GACpD,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;AAW1D,QAAA,4CAA4C,GACvD,MAAM,CAAC,MAAM,CAAC,EAAE,iCAAiC,EAAE,KAAK,EAAE,CAAC,CAAC;AAkDjD,QAAA,iBAAiB,GAAG,SAAS,CAAC;AAW3C,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AACrD,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAC3D,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAE9D,MAAM,UAAU;IACL,IAAI,GAAwC,EAAE,CAAC;IAExD,GAAG,CAAC,IAAU,EAAE,KAAa,EAAE,OAAe;QAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,+DAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;CACF;AAED,SAAS,gBAAgB,CACvB,SAA+D;IAE/D,MAAM,MAAM,GAAG,EAAE,GAAG,iDAAyC,EAAE,CAAC;IAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAA8C,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,IAAI,KAAK,2DAA2D,MAAM,CAAC,GAAG,CAAC,0BAA0B,CACjJ,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,SAAS,YAAY,CACnB,KAAoC,EACpC,UAAsB;IAEtB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC;QACxC,MAAM,gBAAgB,GAAG,IAAA,uDAA6B,EAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,cAAc,EACnB,KAAK,EACL,IAAI,qDAA2B,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,OAAO,CACjE,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAA,sDAA4B,EAAC,KAAK,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,KAAK,EACL,+CAA+C,UAAU,IAAI,CAC9D,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,MAAM,cAAc,GAAG,iFAA6C,CAAC,SAAS,CAC5E,WAAW,CAAC,QAAQ,CACrB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,KAAK,EACL,6CAA6C,cAAc,CAAC,KAAK,CAAC,MAAM;iBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC9B,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC1E,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,iBAAiB,EACtB,KAAK,EACL,iCAAiC,QAAQ,CAAC,SAAS,sCAAsC,UAAU,IAAI,CACxG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,IACE,CAAC,IAAA,oDAA8B,EAC7B,QAAQ,CAAC,kBAAkB,EAC3B,KAAK,CAAC,yBAAyB,CAChC,EACD,CAAC;gBACD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,yBAAyB,EAC9B,KAAK,EACL,wCAAwC,QAAQ,CAAC,kBAAkB,wCAAwC,KAAK,CAAC,yBAAyB,IAAI,CAC/I,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,yBAAyB,EAC9B,KAAK,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC5B,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,KAAK,EACL,SAAS,IAAI,CAAC,IAAI,sBAAsB,QAAQ,IAAI,QAAQ,uBAAuB,UAAU,IAAI,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;QAKD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAwD,CAAC;gBAClF,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,KAAK,EACL,SAAS,IAAI,CAAC,IAAI,mBAAmB,IAAI,6EAA6E,CACvH,CAAC;gBACJ,CAAC;qBAAM,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5D,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,oBAAoB,EACzB,KAAK,EACL,SAAS,IAAI,CAAC,IAAI,mBAAmB,IAAI,2CAA2C,MAAM,IAAI,CAC/F,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;gBACrC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,yBAAyB,EAC9B,KAAK,EACL,SAAS,IAAI,CAAC,IAAI,wBAAwB,SAAS,2CAA2C,MAAM,IAAI,CACzG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,oBAAoB,EACzB,KAAK,EACL,wBAAwB,IAAI,2CAA2C,MAAM,IAAI,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,qBAAqB,EAC1B,KAAK,EACL,qBAAqB,IAAI,oDAAoD,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,4BAAmB,EAAC;YACtC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnD,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C;YACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;SACzB,CAAC,CAAC;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;gBACnD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,sBAAsB,EAC3B,KAAK,EACL,iBAAiB,QAAQ,CAAC,aAAa,yBAAyB,OAAO,CAAC,aAAa,0BAA0B,CAChH,CAAC;YACJ,CAAC;iBAAM,IACL,QAAQ,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;gBAChD,WAAW,KAAK,OAAO,CAAC,WAAW,EACnC,CAAC;gBACD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,mBAAmB,EACxB,KAAK,EACL,iBAAiB,QAAQ,CAAC,aAAa,+EAA+E,CACvH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA+B,EAAE,UAAsB;IAChF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtF,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,4BAA4B,EACjC,MAAM,CAAC,SAAS,EAChB,oBAAoB,UAAU,CAAC,KAAK,wEAAwE,CAC7G,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,SAAS,EAChB,oBAAoB,UAAU,CAAC,KAAK,2DAA2D,CAChG,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,UAAU,CAAC,gBAAgB,EAAE,CAAC;gBAChE,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,uBAAuB,EAC5B,MAAM,CAAC,SAAS,EAChB,uBAAuB,UAAU,CAAC,KAAK,sBAAsB,UAAU,CAAC,gBAAgB,KAAK,MAAM,CAAC,QAAQ,CAAC,aAAa,gBAAgB,CAC3I,CAAC;YACJ,CAAC;YACD,IAAI,uBAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,uBAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1G,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,uBAAuB,EAC5B,MAAM,CAAC,SAAS,EAChB,KAAK,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,4CAA4C,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,UAAU,CAAC,KAAK,IAAI,CACjJ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,IAAc,EAAQ,EAAE;QACxD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO;QAC/B,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,eAAe,EACpB,SAAS,EACT,oBAAoB,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACxD,CAAC;YACF,OAAO;QACT,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACjC,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC9E,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvD,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,IAAY;IACrD,OAAO,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAmB,EACnB,GAAqF;IAErF,IAAI,OAAO,CAAC,eAAe,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC;QACjE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACrD,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;KACvC,EAAE,CAAC;QACF,+BAA+B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,+BAA+B,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,+BAA+B,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAcD,SAAS,iBAAiB,CACxB,KAA4B,EAC5B,KAAqB,EACrB,OAAgC,EAChC,UAA8C,EAC9C,UAAsB;IAEtB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IAGnD,MAAM,kBAAkB,GAAG,CACzB,MAAoB,EACpB,IAAY,EACZ,QAA4B,EAC5B,KAAa,EACP,EAAE;QACR,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS;YAAE,OAAO;QACvC,MAAM,cAAc,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,oBAAoB,EACzB,MAAM,CAAC,SAAS,EAChB,GAAG,KAAK,8BAA8B,IAAI,gBAAgB,cAAc,wCAAwC,CACjH,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,+DAA8B,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,oBAAoB,EACzB,MAAM,CAAC,SAAS,EAChB,GAAG,KAAK,8BAA8B,IAAI,aAAa,cAAc,oBAAoB,CAC1F,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,oBAAoB,EACzB,MAAM,CAAC,SAAS,EAChB,GAAG,KAAK,gBAAgB,IAAI,IAAI,QAAQ,OAAO,cAAc,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CACrH,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YACrF,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,sBAAsB,EAC3B,MAAM,CAAC,SAAS,EAChB,GAAG,KAAK,gBAAgB,IAAI,SAAS,KAAK,IAAI,kBAAkB,sDAAsD,CACvH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,cAAc,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAW,CAAC;QACrE,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/F,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,oBAAoB,EACzB,SAAS,EACT,iBAAiB,cAAc,CAAC,IAAI,2CAA2C,WAAW,CAAC,MAAM,IAAI,CACtG,CAAC;YACJ,CAAC;YACD,IAAI,cAAc,CAAC,QAAQ,EAAE,MAAM,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC9D,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,SAAS,EACT,SAAS,cAAc,CAAC,IAAI,qBAAqB,cAAc,CAAC,QAAQ,EAAE,MAAM,IAAI,QAAQ,IAAI,CACjG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,MAAM,YAAY,GAChB,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI;gBACjE,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC;YAC7C,MAAM,aAAa,GACjB,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,CAAC;YAC5F,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,aAAa,EACb,kBAAkB,QAAQ,cAAc,cAAc,CAAC,IAAI,gBAAgB,SAAS,sDAAsD,CAC3I,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS;YACnC,MAAM,KAAK,GAAG,aAAa,cAAc,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC;YAC9D,KAAK,MAAM,GAAG,IAAI,IAAA,+CAAoB,EAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACjE,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC1D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;oBACxD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC/D,IACE,cAAc,KAAK,MAAM,CAAC,SAAS;wBACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,EAClE,CAAC;wBACD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,yBAAyB,EAC9B,MAAM,CAAC,SAAS,EAChB,GAAG,KAAK,oBAAoB,GAAG,CAAC,SAAS,eAAe,cAAc,IAAI,SAAS,IAAI,CACxF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjC,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,MAAM,CAAC,SAAS,EAChB,GAAG,KAAK,YAAY,GAAG,CAAC,IAAI,mEAAmE,CAChG,CAAC;oBACJ,CAAC;yBAAM,IACL,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC;wBACrD,CAAC,UAAU,CAAC,iCAAiC,EAC7C,CAAC;wBACD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,+BAA+B,EACpC,MAAM,CAAC,SAAS,EAChB,GAAG,KAAK,6BAA6B,GAAG,CAAC,IAAI,2DAA2D,CACzG,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,EAAc,EAAE,cAAc,EAAE,EAA8C,EAAE,CAAC;YAChH,+BAA+B,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;YACxF,KAAK,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;gBACvE,KAAK,MAAM,IAAI,IAAI,IAAA,+CAAoB,EAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAGlE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChD,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,SAAS;wBAAE,SAAS;oBAC1D,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,MAAM,MAAM,SAAS,QAAQ,IAAI,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,yBAAyB,EAC9B,KAAK,EACL,sBAAsB,SAAS,2CAA2C,MAAM,CAAC,MAAM,IAAI,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,qBAAqB,EAC1B,MAAM,CAAC,SAAS,EAChB,uFAAuF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CACjK,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,gBAAgB,GAAG,uEAAsC,CAAC,KAAK,CAAC,CAAC,MAAM,CAC3E,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAChD,CAAC;gBACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,uBAAuB,EAC5B,MAAM,CAAC,SAAS,EAChB,IAAI,IAAI,cAAc,KAAK,yBAAyB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D,CAC9I,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClF,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBACpD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,uBAAuB,EAC5B,MAAM,CAAC,SAAS,EAChB,4BAA4B,IAAI,gDAAgD,CACjF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,IAAA,+CAAoB,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5D,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,uBAAuB,EAC5B,MAAM,CAAC,SAAS,EAChB,4BAA4B,IAAI,IAAI,QAAQ,iDAAiD,CAC9F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,SAAS,EAChB,qBAAqB,IAAI,gDAAgD,CAC1E,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC3D,IACE,WAAW,KAAK,SAAS;oBACzB,CAAC,WAAW,KAAK,MAAM,CAAC,SAAS;wBAC/B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,EAClE,CAAC;oBACD,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,SAAS,EAChB,eAAe,IAAI,iBAAiB,UAAU,CAAC,MAAM,wDAAwD,CAC9G,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,kBAAkB,EACvB,MAAM,CAAC,SAAS,EAChB,0BAA0B,IAAI,gDAAgD,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,SAA4B;IAC/C,OAAO;QACL,YAAY,qDAA0B,GAAG;QACzC,WAAW;QACX,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAGD,SAAgB,wBAAwB,CACtC,KAAoC;IAEpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,oDAA4C,CAAC;IACpF,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,IAAA,4DAAoC,GAAE,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IAGpC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5D,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACnE,CAAC;IAGF,MAAM,kBAAkB,GAAG,OAAO;SAC/B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACb,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,2DAA0B,CAAC,MAAM,CAAC,CAAC;SAC1E,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CACzB;SACA,IAAI,EAAE,CAAC;IACV,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,IAAI,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,4DAA2B,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAA,+CAAuB,EAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YACrE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,uBAAuB,EAC5B,QAAQ,CAAC,MAAM,EACf,qFAAqF,CACtF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,UAAU,CAAC,UAAU,EAAE,CAAC;IAGxB,IAAI,KAA4B,CAAC;IACjC,IAAI,CAAC;QACH,KAAK,GAAG,gCAAW,CAAC,2BAA2B,CAC7C,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAC1D,qDAA0B,CACS,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,KAAgC,CAAC,MAAM,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACrE,UAAU,CAAC,GAAG,CAAC,uEAAI,CAAC,kBAAkB,EAAE,IAAI,IAAI,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;QACD,UAAU,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC;IACd,CAAC;IAGD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC1E,KAAK,MAAM,cAAc,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,CAAC,uEAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,SAAS,cAAc,CAAC,IAAI,2BAA2B,CAAC,CAAC;YAChH,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,4DAA2B,CAAC,CAAC,QAAQ,CAAC,KAAoC,CAAC,EAAE,CAAC;YAC9F,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,KAAoC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC;QACnD,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC;IACpG,CAAC;IACD,iBAAiB,CACf,KAAK,EACL,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,EAC5D,OAAO,EACP,UAAU,EACV,UAAU,CACX,CAAC;IAGF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;QACvC,UAAU,CAAC,GAAG,CAAC,uEAAI,CAAC,cAAc,EAAE,aAAa,EAAE,yBAAyB,UAAU,yBAAyB,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/D,UAAU,CAAC,GAAG,CAAC,uEAAI,CAAC,cAAc,EAAE,aAAa,EAAE,0BAA0B,KAAK,CAAC,gBAAgB,CAAC,MAAM,yBAAyB,OAAO,CAAC,kBAAkB,GAAG,CAAC,CAAC;IACpK,CAAC;IAGD,MAAM,cAAc,GAAwC,EAAE,CAAC;IAC/D,MAAM,sBAAsB,GAA8B,EAAE,CAAC;IAC7D,IAAI,iBAAiB,GAAa,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACzD,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAiB,EAAE;YAClD,MAAM,SAAS,GAAG,IAAA,sDAA4B,EAAC,IAAI,CAAC,CAAC;YACrD,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,iDAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,IAAA,gEAAkC,EAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;QAC9D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC9B,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YACtF,CAAC;QAEH,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,QAAQ,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAiB,CAAC;YAC9E,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;YACjE,MAAM,SAAS,GACb,cAAc,KAAK,SAAS;gBAC1B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACxE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1C,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,yBAAyB,EAC9B,SAAS,EACT,wCAAwC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,cAAc,IAAI,QAAQ,GAAG,CAClK,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,iDAAmB,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC7E,UAAU,CAAC,GAAG,CACZ,uEAAI,CAAC,4BAA4B,EACjC,SAAS,EACT,uBAAuB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,kEAAkE,CACrH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBAC5D,cAAc,CAAC,IAAI,CAAC;oBAClB,SAAS;oBACT,iBAAiB,EAAE,cAAc;oBACjC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;oBAC9C,KAAK,EAAE,SAAS,CAAC,KAAK;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,UAAU,CAAC,UAAU,EAAE,CAAC;IAGxB,MAAM,SAAS,GAAG,IAAA,4BAAmB,EAAC,KAAc,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG;QAChB,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpH,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,KAAK,EAAE,CAAC,CAAC,SAAS;YAElB,IAAI,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YAClD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ;SACvC,CAAC,CAAC;KACJ,CAAC;IACF,OAAO;QACL,KAAK;QACL,SAAS;QACT,UAAU;QACV,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAiB,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/F,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa;YACvC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB;SAC/C,CAAC,CAAC;QACH,kBAAkB;QAClB,sBAAsB;QACtB,iBAAiB;QACjB,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/authorization-module/server/index.d.ts

@@ -0,0 +1,5 @@
+export * from './authorization-model-json';
+export * from './platform-module-files';
+export * from './authorization-compatibility';
+export * from './compose-authorization-base';
+//# sourceMappingURL=index.d.ts.map

package/dist/authorization-module/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/server/index.ts"],"names":[],"mappings":"AAYA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC"}

package/dist/authorization-module/server/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authorization-model-json"), exports);
+__exportStar(require("./platform-module-files"), exports);
+__exportStar(require("./authorization-compatibility"), exports);
+__exportStar(require("./compose-authorization-base"), exports);
+//# sourceMappingURL=index.js.map

package/dist/authorization-module/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization-module/server/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAYA,6DAA2C;AAC3C,0DAAwC;AACxC,gEAA8C;AAC9C,+DAA6C"}

package/dist/authorization-module/server/platform-module-files.d.ts

@@ -0,0 +1,16 @@
+import { PlatformAuthorizationModule } from '../lib/platform-authorization-modules';
+export interface PlatformAuthorizationModuleFiles {
+    readonly module: PlatformAuthorizationModule;
+    readonly moduleFile: {
+        readonly name: string;
+        readonly contents: string;
+    };
+    readonly testFile: {
+        readonly name: string;
+        readonly contents: string;
+    };
+}
+export declare const PLATFORM_AUTHORIZATION_MODULE_DIRECTORY: string;
+export declare function loadPlatformAuthorizationModuleFiles(): readonly PlatformAuthorizationModuleFiles[];
+export declare function fillXemaCoreParentSlots(template: string, implementers: readonly string[]): string | null;
+//# sourceMappingURL=platform-module-files.d.ts.map

package/dist/authorization-module/server/platform-module-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-module-files.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/server/platform-module-files.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,2BAA2B,EAG5B,MAAM,uCAAuC,CAAC;AAO/C,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAE7C,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAE1E,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAGD,eAAO,MAAM,uCAAuC,QAInD,CAAC;AAGF,wBAAgB,oCAAoC,IAAI,SAAS,gCAAgC,EAAE,CAelG;AAeD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,GAAG,IAAI,CAmBf"}