@zenstackhq/runtime 0.6.0-pre.11 → 0.6.0-pre.12

package/lib/policy/policy-utils.js

@@ -1,503 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateModelPayload = exports.preprocessWritePayload = exports.injectTransactionId = exports.checkPolicyForFilter = exports.checkPolicyForIds = exports.preUpdateCheck = exports.readWithCheck = exports.ensureAuthGuard = exports.getAuthGuard = exports.queryIds = exports.ensureArray = exports.or = exports.and = void 0;
-/* eslint-disable @typescript-eslint/explicit-module-boundary-types */
-/* eslint-disable @typescript-eslint/no-explicit-any */
-const bcryptjs_1 = require("bcryptjs");
-const deepcopy_1 = __importDefault(require("deepcopy"));
-const superjson_1 = __importDefault(require("superjson"));
-const constants_1 = require("../constants");
-const nested_write_vistor_1 = require("./nested-write-vistor");
-const runtime_1 = require("@prisma/client/runtime");
-const version_1 = require("../version");
-const change_case_1 = require("change-case");
-//#region General helpers
-/**
- * Creates a conjunction of a list of query conditions.
- */
-function and(...conditions) {
-    const filtered = conditions.filter((c) => !!c);
-    if (filtered.length === 0) {
-        return undefined;
-    }
-    else if (filtered.length === 1) {
-        return filtered[0];
-    }
-    else {
-        return { AND: filtered };
-    }
-}
-exports.and = and;
-/**
- * Creates a disjunction of a list of query conditions.
- */
-function or(...conditions) {
-    const filtered = conditions.filter((c) => !!c);
-    if (filtered.length === 0) {
-        return undefined;
-    }
-    else if (filtered.length === 1) {
-        return filtered[0];
-    }
-    else {
-        return { OR: filtered };
-    }
-}
-exports.or = or;
-/**
- * Wraps a value into array if it's not already one
- */
-function ensureArray(value) {
-    return Array.isArray(value) ? value : [value];
-}
-exports.ensureArray = ensureArray;
-/**
- * Given a where condition, queries db and returns IDs of result entities
- */
-function queryIds(model, db, where) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const r = yield db[model].findMany({ select: { id: true }, where });
-        return r.map((item) => item.id);
-    });
-}
-exports.queryIds = queryIds;
-//#endregion
-//#region Policy enforcement helpers
-function getAuthGuard(policy, model, operation, user) {
-    var _a;
-    return __awaiter(this, void 0, void 0, function* () {
-        // const metaModule = await loadMetaModule();
-        const provider = (_a = policy.guard[(0, change_case_1.camelCase)(model)]) === null || _a === void 0 ? void 0 : _a[operation];
-        if (!provider) {
-            throw new runtime_1.PrismaClientUnknownRequestError(`zenstack: unable to load authorization query function for ${model}`, { clientVersion: (0, version_1.getVersion)() });
-        }
-        return provider({ user });
-    });
-}
-exports.getAuthGuard = getAuthGuard;
-function resolveField(policy, model, field) {
-    var _a;
-    return __awaiter(this, void 0, void 0, function* () {
-        return (_a = policy.fieldMapping[(0, change_case_1.camelCase)(model)]) === null || _a === void 0 ? void 0 : _a[field];
-    });
-}
-function ensureAuthGuard(args, model, operation, user, policy) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const guard = yield getAuthGuard(policy, model, operation, user);
-        return Object.assign(Object.assign({}, args), { where: and(args.where, guard) });
-    });
-}
-exports.ensureAuthGuard = ensureAuthGuard;
-/**
- * Read model entities w.r.t the given query args. The result list
- * are guaranteed to fully satisfy 'read' policy rules recursively.
- *
- * For to-many relations involved, items not satisfying policy are
- * silently trimmed. For to-one relation, if relation data fails policy
- * an CRUDError is thrown.
- *
- * @param model the model to query for
- * @param queryArgs the Prisma query args
- * @param service the ZenStack service
- * @param context the query context
- * @param db the db (or transaction)
- * @returns
- */
-function readWithCheck(model, queryArgs, user, db, policy, logger) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const args = queryArgs ? (0, deepcopy_1.default)(queryArgs) : {};
-        args.where = and(args.where, yield getAuthGuard(policy, model, 'read', user));
-        // recursively inject read guard conditions into the query args
-        yield injectNestedReadConditions(policy, model, args, user);
-        logger.info(`Reading with validation for ${model}: ${superjson_1.default.stringify(args)}`);
-        const result = yield db[model].findMany(args);
-        yield Promise.all(result.map((item) => postProcessForRead(item, model, args, user, db, policy, 'read', logger)));
-        return result;
-    });
-}
-exports.readWithCheck = readWithCheck;
-function injectNestedReadConditions(policy, model, args, user) {
-    var _a, _b, _c, _d;
-    return __awaiter(this, void 0, void 0, function* () {
-        const injectTarget = (_a = args.select) !== null && _a !== void 0 ? _a : args.include;
-        if (!injectTarget) {
-            return;
-        }
-        for (const field of getModelFields(injectTarget)) {
-            const fieldInfo = yield resolveField(policy, model, field);
-            if (!fieldInfo || !fieldInfo.isDataModel) {
-                // only care about relation fields
-                continue;
-            }
-            if (fieldInfo.isArray) {
-                if (typeof injectTarget[field] !== 'object') {
-                    injectTarget[field] = {};
-                }
-                // inject extra condition for to-many relation
-                injectTarget[field].where = and(injectTarget.where, yield getAuthGuard(policy, fieldInfo.type, 'read', user));
-            }
-            else {
-                // there's no way of injecting condition for to-one relation, so we
-                // make sure 'id' field is selected and check them against query result
-                if (((_b = injectTarget[field]) === null || _b === void 0 ? void 0 : _b.select) &&
-                    ((_d = (_c = injectTarget[field]) === null || _c === void 0 ? void 0 : _c.select) === null || _d === void 0 ? void 0 : _d.id) !== true) {
-                    injectTarget[field].select.id = true;
-                }
-            }
-            // recurse
-            yield injectNestedReadConditions(policy, fieldInfo.type, injectTarget[field], user);
-        }
-    });
-}
-function getModelFields(data) {
-    return Object.keys(data).filter((f) => !constants_1.AUXILIARY_FIELDS.includes(f));
-}
-/**
- * Post processing checks for read model entities.
- * Validates to-one relations (which can't be trimmed
- * at query time) and removes fields that should be
- * omitted.
- */
-function postProcessForRead(entityData, model, args, user, db, policy, operation, logger) {
-    var _a, _b;
-    return __awaiter(this, void 0, void 0, function* () {
-        if (!(entityData === null || entityData === void 0 ? void 0 : entityData.id)) {
-            return;
-        }
-        for (const field of Object.keys(entityData)) {
-            if (yield shouldOmit(policy, model, field)) {
-                delete entityData[field];
-            }
-        }
-        const injectTarget = (_a = args.select) !== null && _a !== void 0 ? _a : args.include;
-        if (!injectTarget) {
-            return;
-        }
-        // to-one relation data cannot be trimmed by injected guards, we have to
-        // post-check them
-        for (const field of getModelFields(injectTarget)) {
-            const fieldInfo = yield resolveField(policy, model, field);
-            if (!fieldInfo ||
-                !fieldInfo.isDataModel ||
-                fieldInfo.isArray ||
-                !((_b = entityData === null || entityData === void 0 ? void 0 : entityData[field]) === null || _b === void 0 ? void 0 : _b.id)) {
-                continue;
-            }
-            logger.info(`Validating read of to-one relation: ${fieldInfo.type}#${entityData[field].id}`);
-            yield checkPolicyForIds(fieldInfo.type, [entityData[field].id], operation, user, db, policy, logger);
-            // recurse
-            yield postProcessForRead(entityData[field], fieldInfo.type, injectTarget[field], user, db, policy, operation, logger);
-        }
-    });
-}
-/**
- * Validates that a model entity satisfies 'update' policy rules
- * before conducting an update
- *
- * @param model model under update
- * @param updateArgs Prisma update args
- * @param service the ZenStack service
- * @param context the query context
- * @param transaction the db transaction context
- */
-function preUpdateCheck(model, updateArgs, user, transaction, policy, logger) {
-    return __awaiter(this, void 0, void 0, function* () {
-        // check the entity directly under update first
-        yield checkPolicyForFilter(model, updateArgs.where, 'update', user, transaction, policy, logger);
-        // We need to ensure that all nested updates respect policy rules of
-        // the corresponding model.
-        //
-        // Here we use a visitor to collect all necessary
-        // checkes. During visiting, for every update we meet against a relation,
-        // we collect its path (starting from the root object). If the relation
-        // is a to-many one, it can carry filter condition that we collect as well.
-        //
-        // After the visiting, we validate that each collected path satisfies
-        // corresponding policy rules by making separate queries.
-        const visitor = new nested_write_vistor_1.NestedWriteVisitor((model, field) => resolveField(policy, model, field));
-        const state = [];
-        const checks = [];
-        const visitAction = (fieldInfo, action, fieldData, _parentData, state) => __awaiter(this, void 0, void 0, function* () {
-            if (!fieldInfo.isDataModel) {
-                return state;
-            }
-            if (![
-                'update',
-                'updateMany',
-                'upsert',
-                'delete',
-                'deleteMany',
-            ].includes(action)) {
-                // no more nested writes inside, stop recursion
-                return undefined;
-            }
-            // for to-many relation, a filter condition can be attached
-            let condition = undefined;
-            if (fieldInfo.isArray) {
-                switch (action) {
-                    case 'update':
-                    case 'updateMany':
-                    case 'upsert':
-                        // condition is wrapped in 'where'
-                        condition = or(...ensureArray(fieldData).map((d) => d.where));
-                        break;
-                    case 'delete':
-                    case 'deleteMany':
-                        // condition is not wrapped
-                        condition = or(...ensureArray(fieldData));
-                        break;
-                }
-            }
-            // build up a new segment of path
-            const selectionPath = [
-                ...state,
-                { field: fieldInfo, where: condition },
-            ];
-            const operation = [
-                'update',
-                'updateMany',
-                'upsert',
-            ].includes(action)
-                ? 'update'
-                : 'delete';
-            // collect an asynchronous check action
-            checks.push(checkPolicyForSelectionPath(model, updateArgs.where, selectionPath, operation, transaction, policy, user, logger));
-            // recurse down with the current path as the new state
-            return selectionPath;
-        });
-        yield visitor.visit(model, updateArgs.data, undefined, state, visitAction);
-        yield Promise.all(checks);
-    });
-}
-exports.preUpdateCheck = preUpdateCheck;
-/**
- * Given a list of ids for a model, check if they all match policy rules, and if not,
- * throw a CRUDError.
- *
- * @param model the model
- * @param ids the entity ids
- * @param operation the operation to check for
- * @param service the ZenStack service
- * @param context the query context
- * @param db the db or transaction
- */
-function checkPolicyForIds(model, ids, operation, user, db, policy, logger) {
-    return __awaiter(this, void 0, void 0, function* () {
-        logger.info(`Checking policy for ${model}#[${ids.join(', ')}] for ${operation}`);
-        // build a query condition with policy injected
-        const idCondition = ids.length > 1 ? { id: { in: ids } } : { id: ids[0] };
-        const query = {
-            where: and(idCondition, yield getAuthGuard(policy, model, operation, user)),
-            select: { id: true },
-        };
-        // query with policy injected
-        const filteredResult = (yield db[model].findMany(query));
-        // see if we get fewer items with policy, if so, reject with an throw
-        const filteredIds = filteredResult.map((item) => item.id);
-        if (filteredIds.length < ids.length) {
-            const gap = ids.filter((id) => !filteredIds.includes(id));
-            throw new runtime_1.PrismaClientKnownRequestError(`denied by policy: entities failed '${operation}' check, ${model}#[${gap.join(', ')}]`, { clientVersion: (0, version_1.getVersion)(), code: 'P2004' });
-        }
-    });
-}
-exports.checkPolicyForIds = checkPolicyForIds;
-function checkPolicyForFilter(model, filter, operation, user, db, policy, logger) {
-    return __awaiter(this, void 0, void 0, function* () {
-        logger.info(`Checking policy for ${model}#${JSON.stringify(filter)} for ${operation}`);
-        const count = yield db[model].count({ where: filter });
-        // build a query condition with policy injected
-        const guardedQuery = {
-            where: and(filter, yield getAuthGuard(policy, model, operation, user)),
-        };
-        // query with policy injected
-        const guardedCount = yield db[model].count(guardedQuery);
-        // see if we get fewer items with policy, if so, reject with an throw
-        if (guardedCount < count) {
-            throw new runtime_1.PrismaClientKnownRequestError(`denied by policy: entities of ${model} failed '${operation}' check, ${count - guardedCount} entities failed policy check`, { clientVersion: (0, version_1.getVersion)(), code: 'P2004' });
-        }
-    });
-}
-exports.checkPolicyForFilter = checkPolicyForFilter;
-/**
- * Given a selection path, check if the entities at the end of path satisfy
- * policy rules. If not, throw an error.
- */
-function checkPolicyForSelectionPath(model, rootFilter, selectionPath, operation, db, policy, user, logger) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const targetField = selectionPath[selectionPath.length - 1].field;
-        // build a Prisma query for the path
-        const query = buildChainedSelectQuery(rootFilter, selectionPath);
-        logger.info(`Query for selection path: model ${model}, path ${superjson_1.default.stringify(selectionPath)}, query ${superjson_1.default.stringify(query)}`);
-        const r = yield db[model].findUnique(query);
-        // collect ids at the end of the path
-        const ids = collectTerminalEntityIds(selectionPath, r);
-        logger.info(`Collected leaf ids: ${superjson_1.default.stringify(ids)}`);
-        if (ids.length === 0) {
-            return;
-        }
-        // check policies for the collected ids
-        yield checkPolicyForIds(targetField.type, ids, operation, user, db, policy, logger);
-    });
-}
-/**
- * Builds a Prisma query for the given selection path
- */
-function buildChainedSelectQuery(rootFilter, selectionPath) {
-    const query = { where: rootFilter, select: { id: true } };
-    let currSelect = query.select;
-    for (const path of selectionPath) {
-        const nextSelect = { select: { id: true } };
-        currSelect[path.field.name] = nextSelect;
-        if (path.where) {
-            currSelect[path.field.name].where = path.where;
-        }
-        currSelect = nextSelect.select;
-    }
-    return query;
-}
-function collectTerminalEntityIds(selectionPath, data) {
-    let curr = data;
-    for (const path of selectionPath) {
-        curr = curr[path.field.name];
-    }
-    if (!curr) {
-        throw new Error('an unexpected error occurred');
-    }
-    return Array.isArray(curr)
-        ? curr.map((item) => item.id)
-        : [curr.id];
-}
-/**
- * Injects assignment of zenstack_transaction field for all nested
- * update/create in a Prisma update args recursively.
- *
- * @return a tuple containing all model types that are involved in
- * creation or updating, respectively
- */
-function injectTransactionId(model, args, operation, transactionId, policy) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const updatedModels = new Set();
-        const createdModels = new Set();
-        // if (args.data) {
-        //     args.data[TRANSACTION_FIELD_NAME] = `${transactionId}:${operation}`;
-        //     updatedModels.add(model);
-        // }
-        args[constants_1.TRANSACTION_FIELD_NAME] = `${transactionId}:${operation}`;
-        if (operation === 'create') {
-            createdModels.add(model);
-        }
-        else {
-            updatedModels.add(model);
-        }
-        const visitAction = (fieldInfo, action, fieldData) => __awaiter(this, void 0, void 0, function* () {
-            if (fieldInfo.isDataModel && fieldData) {
-                switch (action) {
-                    case 'update':
-                    case 'updateMany':
-                        ensureArray(fieldData).forEach((item) => {
-                            if (fieldInfo.isArray && item.data) {
-                                item.data[constants_1.TRANSACTION_FIELD_NAME] = `${transactionId}:update`;
-                            }
-                            else {
-                                item[constants_1.TRANSACTION_FIELD_NAME] = `${transactionId}:update`;
-                            }
-                            updatedModels.add(fieldInfo.type);
-                        });
-                        break;
-                    case 'upsert':
-                        ensureArray(fieldData).forEach((item) => {
-                            item.create[constants_1.TRANSACTION_FIELD_NAME] = `${transactionId}:create`;
-                            createdModels.add(fieldInfo.type);
-                            item.update[constants_1.TRANSACTION_FIELD_NAME] = `${transactionId}:update`;
-                            updatedModels.add(fieldInfo.type);
-                        });
-                        break;
-                    case 'create':
-                    case 'createMany':
-                        ensureArray(fieldData).forEach((item) => {
-                            item[constants_1.TRANSACTION_FIELD_NAME] = `${transactionId}:create`;
-                            createdModels.add(fieldInfo.type);
-                        });
-                        break;
-                    case 'connectOrCreate':
-                        ensureArray(fieldData).forEach((item) => {
-                            item.create[constants_1.TRANSACTION_FIELD_NAME] = `${transactionId}:create`;
-                            createdModels.add(fieldInfo.type);
-                        });
-                        break;
-                }
-            }
-            return true;
-        });
-        const visitor = new nested_write_vistor_1.NestedWriteVisitor((model, field) => resolveField(policy, model, field));
-        yield visitor.visit(model, args, undefined, undefined, visitAction);
-        return {
-            createdModels: Array.from(createdModels),
-            updatedModels: Array.from(updatedModels),
-        };
-    });
-}
-exports.injectTransactionId = injectTransactionId;
-/**
- * Preprocesses the given write args to modify field values (in place) based on
- * attributes like @password
- */
-function preprocessWritePayload(policy, model, args) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const visitAction = (fieldInfo, _action, fieldData, parentData) => __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
-            // process @password field
-            const pwdAttr = (_a = fieldInfo.attributes) === null || _a === void 0 ? void 0 : _a.find((attr) => attr.name === '@password');
-            if (pwdAttr && fieldInfo.type === 'String') {
-                // hash password value
-                let salt = (_b = pwdAttr.args.find((arg) => arg.name === 'salt')) === null || _b === void 0 ? void 0 : _b.value;
-                if (!salt) {
-                    salt = (_c = pwdAttr.args.find((arg) => arg.name === 'saltLength')) === null || _c === void 0 ? void 0 : _c.value;
-                }
-                if (!salt) {
-                    salt = constants_1.DEFAULT_PASSWORD_SALT_LENGTH;
-                }
-                parentData[fieldInfo.name] = (0, bcryptjs_1.hashSync)(fieldData, salt);
-            }
-            return true;
-        });
-        const visitor = new nested_write_vistor_1.NestedWriteVisitor((model, field) => resolveField(policy, model, field));
-        yield visitor.visit(model, args, undefined, undefined, visitAction);
-    });
-}
-exports.preprocessWritePayload = preprocessWritePayload;
-function shouldOmit(policy, model, field) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if ([constants_1.TRANSACTION_FIELD_NAME, constants_1.GUARD_FIELD_NAME].includes(field)) {
-            return true;
-        }
-        const fieldInfo = yield resolveField(policy, model, field);
-        return !!(fieldInfo && fieldInfo.attributes.find((attr) => attr.name === '@omit'));
-    });
-}
-function validateModelPayload(
-// eslint-disable-next-line @typescript-eslint/no-unused-vars
-model, 
-// eslint-disable-next-line @typescript-eslint/no-unused-vars
-mode, 
-// eslint-disable-next-line @typescript-eslint/no-unused-vars
-payload) {
-    return __awaiter(this, void 0, void 0, function* () {
-        return;
-    });
-}
-exports.validateModelPayload = validateModelPayload;
-//#endregion
-//# sourceMappingURL=policy-utils.js.map

package/lib/policy/policy-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-utils.js","sourceRoot":"","sources":["../../../src/policy/policy-utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sEAAsE;AACtE,uDAAuD;AACvD,uCAAoC;AACpC,wDAAgC;AAChC,0DAAkC;AAClC,4CAKsB;AAStB,+DAA2D;AAC3D,oDAGgC;AAChC,wCAAwC;AAExC,6CAAwC;AAGxC,yBAAyB;AAEzB;;GAEG;AACH,SAAgB,GAAG,CAAC,GAAG,UAAqB;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;QACvB,OAAO,SAAS,CAAC;KACpB;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;QAC9B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;KACtB;SAAM;QACH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;KAC5B;AACL,CAAC;AATD,kBASC;AAED;;GAEG;AACH,SAAgB,EAAE,CAAC,GAAG,UAAqB;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;QACvB,OAAO,SAAS,CAAC;KACpB;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;QAC9B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;KACtB;SAAM;QACH,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;KAC3B;AACL,CAAC;AATD,gBASC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAI,KAAQ;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAFD,kCAEC;AAED;;GAEG;AACH,SAAsB,QAAQ,CAC1B,KAAa,EACb,EAAgC,EAChC,KAAc;;QAEd,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,OAAQ,CAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;CAAA;AAPD,4BAOC;AAED,YAAY;AAEZ,oCAAoC;AAEpC,SAAsB,YAAY,CAC9B,MAAiB,EACjB,KAAa,EACb,SAA8B,EAC9B,IAA0B;;;QAE1B,6CAA6C;QAC7C,MAAM,QAAQ,GACV,MAAA,MAAM,CAAC,KAAK,CAAC,IAAA,uBAAS,EAAC,KAAK,CAAC,CAAC,0CAAG,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAI,yCAA+B,CACrC,6DAA6D,KAAK,EAAE,EACpE,EAAE,aAAa,EAAE,IAAA,oBAAU,GAAE,EAAE,CAClC,CAAC;SACL;QACD,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;;CAC7B;AAhBD,oCAgBC;AAED,SAAe,YAAY,CAAC,MAAiB,EAAE,KAAa,EAAE,KAAa;;;QACvE,OAAO,MAAA,MAAM,CAAC,YAAY,CAAC,IAAA,uBAAS,EAAC,KAAK,CAAC,CAAC,0CAAG,KAAK,CAAC,CAAC;;CACzD;AAED,SAAsB,eAAe,CACjC,IAAS,EACT,KAAa,EACb,SAA8B,EAC9B,IAA0B,EAC1B,MAAiB;;QAEjB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACjE,uCAAY,IAAI,KAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAG;IACtD,CAAC;CAAA;AATD,0CASC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAsB,aAAa,CAC/B,KAAa,EACb,SAAc,EACd,IAA0B,EAC1B,EAAgC,EAChC,MAAiB,EACjB,MAAc;;QAEd,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAA,kBAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,GAAG,CACZ,IAAI,CAAC,KAAK,EACV,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAClD,CAAC;QAEF,+DAA+D;QAC/D,MAAM,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE5D,MAAM,CAAC,IAAI,CACP,+BAA+B,KAAK,KAAK,mBAAS,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;QACF,MAAM,MAAM,GAAU,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,OAAO,CAAC,GAAG,CACb,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,kBAAkB,CACd,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,EAAE,EACF,MAAM,EACN,MAAM,EACN,MAAM,CACT,CACJ,CACJ,CAAC;QAEF,OAAO,MAAM,CAAC;IAClB,CAAC;CAAA;AAtCD,sCAsCC;AAED,SAAe,0BAA0B,CACrC,MAAiB,EACjB,KAAa,EACb,IAAS,EACT,IAA0B;;;QAE1B,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,IAAI,CAAC,OAAO,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE;YACf,OAAO;SACV;QAED,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE;YAC9C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;gBACtC,kCAAkC;gBAClC,SAAS;aACZ;YAED,IAAI,SAAS,CAAC,OAAO,EAAE;gBACnB,IAAI,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE;oBACzC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;iBAC5B;gBACD,8CAA8C;gBAC9C,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,CAC3B,YAAY,CAAC,KAAK,EAClB,MAAM,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAC3D,CAAC;aACL;iBAAM;gBACH,mEAAmE;gBACnE,uEAAuE;gBACvE,IACI,CAAA,MAAA,YAAY,CAAC,KAAK,CAAC,0CAAE,MAAM;oBAC3B,CAAA,MAAA,MAAA,YAAY,CAAC,KAAK,CAAC,0CAAE,MAAM,0CAAE,EAAE,MAAK,IAAI,EAC1C;oBACE,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;iBACxC;aACJ;YAED,UAAU;YACV,MAAM,0BAA0B,CAC5B,MAAM,EACN,SAAS,CAAC,IAAI,EACd,YAAY,CAAC,KAAK,CAAC,EACnB,IAAI,CACP,CAAC;SACL;;CACJ;AAED,SAAS,cAAc,CAAC,IAAS;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4BAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,SAAe,kBAAkB,CAC7B,UAAe,EACf,KAAa,EACb,IAAS,EACT,IAA0B,EAC1B,EAAgC,EAChC,MAAiB,EACjB,SAA8B,EAC9B,MAAc;;;QAEd,IAAI,CAAC,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,EAAE,CAAA,EAAE;YACjB,OAAO;SACV;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACzC,IAAI,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;gBACxC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;aAC5B;SACJ;QAED,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,IAAI,CAAC,OAAO,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE;YACf,OAAO;SACV;QAED,wEAAwE;QACxE,kBAAkB;QAClB,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE;YAC9C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3D,IACI,CAAC,SAAS;gBACV,CAAC,SAAS,CAAC,WAAW;gBACtB,SAAS,CAAC,OAAO;gBACjB,CAAC,CAAA,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAG,KAAK,CAAC,0CAAE,EAAE,CAAA,EAC1B;gBACE,SAAS;aACZ;YAED,MAAM,CAAC,IAAI,CACP,uCAAuC,SAAS,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAClF,CAAC;YAEF,MAAM,iBAAiB,CACnB,SAAS,CAAC,IAAI,EACd,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EACtB,SAAS,EACT,IAAI,EACJ,EAAE,EACF,MAAM,EACN,MAAM,CACT,CAAC;YAEF,UAAU;YACV,MAAM,kBAAkB,CACpB,UAAU,CAAC,KAAK,CAAC,EACjB,SAAS,CAAC,IAAI,EACd,YAAY,CAAC,KAAK,CAAC,EACnB,IAAI,EACJ,EAAE,EACF,MAAM,EACN,SAAS,EACT,MAAM,CACT,CAAC;SACL;;CACJ;AAID;;;;;;;;;GASG;AACH,SAAsB,cAAc,CAChC,KAAa,EACb,UAAe,EACf,IAA0B,EAC1B,WAAyC,EACzC,MAAiB,EACjB,MAAc;;QAEd,+CAA+C;QAC/C,MAAM,oBAAoB,CACtB,KAAK,EACL,UAAU,CAAC,KAAK,EAChB,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,MAAM,EACN,MAAM,CACT,CAAC;QAEF,oEAAoE;QACpE,2BAA2B;QAC3B,EAAE;QACF,iDAAiD;QACjD,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,EAAE;QACF,qEAAqE;QACrE,yDAAyD;QAEzD,MAAM,OAAO,GAAG,IAAI,wCAAkB,CAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACnE,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CACrC,CAAC;QACF,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,MAAM,MAAM,GAAyB,EAAE,CAAC;QAExC,MAAM,WAAW,GAAG,CAChB,SAAoB,EACpB,MAA6B,EAC7B,SAAc,EACd,WAAgB,EAChB,KAAoB,EACtB,EAAE;YACA,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxB,OAAO,KAAK,CAAC;aAChB;YAED,IACI,CAAC;gBACG,QAAQ;gBACR,YAAY;gBACZ,QAAQ;gBACR,QAAQ;gBACR,YAAY;aACf,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpB;gBACE,+CAA+C;gBAC/C,OAAO,SAAS,CAAC;aACpB;YAED,2DAA2D;YAC3D,IAAI,SAAS,GAAQ,SAAS,CAAC;YAC/B,IAAI,SAAS,CAAC,OAAO,EAAE;gBACnB,QAAQ,MAAM,EAAE;oBACZ,KAAK,QAAQ,CAAC;oBACd,KAAK,YAAY,CAAC;oBAClB,KAAK,QAAQ;wBACT,kCAAkC;wBAClC,SAAS,GAAG,EAAE,CACV,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAChD,CAAC;wBACF,MAAM;oBACV,KAAK,QAAQ,CAAC;oBACd,KAAK,YAAY;wBACb,2BAA2B;wBAC3B,SAAS,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;wBAC1C,MAAM;iBACb;aACJ;YAED,iCAAiC;YACjC,MAAM,aAAa,GAAG;gBAClB,GAAG,KAAK;gBACR,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;aACzC,CAAC;YAEF,MAAM,SAAS,GAAwB;gBACnC,QAAQ;gBACR,YAAY;gBACZ,QAAQ;aACX,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACd,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ,CAAC;YAEf,uCAAuC;YACvC,MAAM,CAAC,IAAI,CACP,2BAA2B,CACvB,KAAK,EACL,UAAU,CAAC,KAAK,EAChB,aAAa,EACb,SAAS,EACT,WAAW,EACX,MAAM,EACN,IAAI,EACJ,MAAM,CACT,CACJ,CAAC;YAEF,sDAAsD;YACtD,OAAO,aAAa,CAAC;QACzB,CAAC,CAAA,CAAC;QAEF,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAE3E,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;CAAA;AAnHD,wCAmHC;AAED;;;;;;;;;;GAUG;AACH,SAAsB,iBAAiB,CACnC,KAAa,EACb,GAAa,EACb,SAA8B,EAC9B,IAA0B,EAC1B,EAAgC,EAChC,MAAiB,EACjB,MAAc;;QAEd,MAAM,CAAC,IAAI,CACP,uBAAuB,KAAK,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,SAAS,EAAE,CACtE,CAAC;QAEF,+CAA+C;QAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG;YACV,KAAK,EAAE,GAAG,CACN,WAAW,EACX,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CACrD;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACvB,CAAC;QAEF,6BAA6B;QAC7B,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAErD,CAAC;QAEH,qEAAqE;QACrE,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE;YACjC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1D,MAAM,IAAI,uCAA6B,CACnC,sCAAsC,SAAS,YAAY,KAAK,KAAK,GAAG,CAAC,IAAI,CACzE,IAAI,CACP,GAAG,EACJ,EAAE,aAAa,EAAE,IAAA,oBAAU,GAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CACjD,CAAC;SACL;IACL,CAAC;CAAA;AAvCD,8CAuCC;AAED,SAAsB,oBAAoB,CACtC,KAAa,EACb,MAAW,EACX,SAA8B,EAC9B,IAA0B,EAC1B,EAAgC,EAChC,MAAiB,EACjB,MAAc;;QAEd,MAAM,CAAC,IAAI,CACP,uBAAuB,KAAK,IAAI,IAAI,CAAC,SAAS,CAC1C,MAAM,CACT,QAAQ,SAAS,EAAE,CACvB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvD,+CAA+C;QAC/C,MAAM,YAAY,GAAG;YACjB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;SACzE,CAAC;QAEF,6BAA6B;QAC7B,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEzD,qEAAqE;QACrE,IAAI,YAAY,GAAG,KAAK,EAAE;YACtB,MAAM,IAAI,uCAA6B,CACnC,iCAAiC,KAAK,YAAY,SAAS,YACvD,KAAK,GAAG,YACZ,+BAA+B,EAC/B,EAAE,aAAa,EAAE,IAAA,oBAAU,GAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CACjD,CAAC;SACL;IACL,CAAC;CAAA;AAlCD,oDAkCC;AAED;;;GAGG;AACH,SAAe,2BAA2B,CACtC,KAAa,EACb,UAAe,EACf,aAA4B,EAC5B,SAA8B,EAC9B,EAAgC,EAChC,MAAiB,EACjB,IAA0B,EAC1B,MAAc;;QAEd,MAAM,WAAW,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,oCAAoC;QACpC,MAAM,KAAK,GAAG,uBAAuB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAEjE,MAAM,CAAC,IAAI,CACP,mCAAmC,KAAK,UAAU,mBAAS,CAAC,SAAS,CACjE,aAAa,CAChB,WAAW,mBAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC3C,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAE5C,qCAAqC;QACrC,MAAM,GAAG,GAAa,wBAAwB,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,uBAAuB,mBAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE/D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;YAClB,OAAO;SACV;QAED,uCAAuC;QACvC,MAAM,iBAAiB,CACnB,WAAW,CAAC,IAAI,EAChB,GAAG,EACH,SAAS,EACT,IAAI,EACJ,EAAE,EACF,MAAM,EACN,MAAM,CACT,CAAC;IACN,CAAC;CAAA;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC5B,UAAe,EACf,aAA4B;IAE5B,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1D,IAAI,UAAU,GAAQ,KAAK,CAAC,MAAM,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE;QAC9B,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;QACzC,IAAI,IAAI,CAAC,KAAK,EAAE;YACZ,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;SAClD;QACD,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;KAClC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,wBAAwB,CAC7B,aAA4B,EAC5B,IAAS;IAET,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE;QAC9B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;KAChC;IAED,IAAI,CAAC,IAAI,EAAE;QACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;KACnD;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAY,CAAC;QACvC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAY,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAsB,mBAAmB,CACrC,KAAa,EACb,IAAS,EACT,SAA8B,EAC9B,aAAqB,EACrB,MAAiB;;QAEjB,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QAExC,mBAAmB;QACnB,2EAA2E;QAC3E,gCAAgC;QAChC,IAAI;QAEJ,IAAI,CAAC,kCAAsB,CAAC,GAAG,GAAG,aAAa,IAAI,SAAS,EAAE,CAAC;QAC/D,IAAI,SAAS,KAAK,QAAQ,EAAE;YACxB,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;SAC5B;aAAM;YACH,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;SAC5B;QAED,MAAM,WAAW,GAAG,CAChB,SAAoB,EACpB,MAA6B,EAC7B,SAAc,EAChB,EAAE;YACA,IAAI,SAAS,CAAC,WAAW,IAAI,SAAS,EAAE;gBACpC,QAAQ,MAAM,EAAE;oBACZ,KAAK,QAAQ,CAAC;oBACd,KAAK,YAAY;wBACb,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;4BACpC,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE;gCAChC,IAAI,CAAC,IAAI,CACL,kCAAsB,CACzB,GAAG,GAAG,aAAa,SAAS,CAAC;6BACjC;iCAAM;gCACH,IAAI,CACA,kCAAsB,CACzB,GAAG,GAAG,aAAa,SAAS,CAAC;6BACjC;4BACD,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBACtC,CAAC,CAAC,CAAC;wBACH,MAAM;oBAEV,KAAK,QAAQ;wBACT,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;4BACpC,IAAI,CAAC,MAAM,CACP,kCAAsB,CACzB,GAAG,GAAG,aAAa,SAAS,CAAC;4BAC9B,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;4BAClC,IAAI,CAAC,MAAM,CACP,kCAAsB,CACzB,GAAG,GAAG,aAAa,SAAS,CAAC;4BAC9B,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBACtC,CAAC,CAAC,CAAC;wBACH,MAAM;oBAEV,KAAK,QAAQ,CAAC;oBACd,KAAK,YAAY;wBACb,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;4BACpC,IAAI,CACA,kCAAsB,CACzB,GAAG,GAAG,aAAa,SAAS,CAAC;4BAC9B,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBACtC,CAAC,CAAC,CAAC;wBACH,MAAM;oBAEV,KAAK,iBAAiB;wBAClB,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;4BACpC,IAAI,CAAC,MAAM,CACP,kCAAsB,CACzB,GAAG,GAAG,aAAa,SAAS,CAAC;4BAC9B,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBACtC,CAAC,CAAC,CAAC;wBACH,MAAM;iBACb;aACJ;YACD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAA,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,wCAAkB,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACpD,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CACrC,CAAC;QACF,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAEpE,OAAO;YACH,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;YACxC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;SAC3C,CAAC;IACN,CAAC;CAAA;AA1FD,kDA0FC;AAED;;;GAGG;AACH,SAAsB,sBAAsB,CACxC,MAAiB,EACjB,KAAa,EACb,IAAS;;QAET,MAAM,WAAW,GAAG,CAChB,SAAoB,EACpB,OAA8B,EAC9B,SAAc,EACd,UAAe,EACjB,EAAE;;YACA,0BAA0B;YAC1B,MAAM,OAAO,GAAG,MAAA,SAAS,CAAC,UAAU,0CAAE,IAAI,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CACtC,CAAC;YACF,IAAI,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE;gBACxC,sBAAsB;gBACtB,IAAI,IAAI,GAAgC,MAAA,OAAO,CAAC,IAAI,CAAC,IAAI,CACrD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAC/B,0CAAE,KAAe,CAAC;gBACnB,IAAI,CAAC,IAAI,EAAE;oBACP,IAAI,GAAG,MAAA,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,0CACtD,KAAe,CAAC;iBACzB;gBACD,IAAI,CAAC,IAAI,EAAE;oBACP,IAAI,GAAG,wCAA4B,CAAC;iBACvC;gBACD,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAA,mBAAQ,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;aAC1D;YACD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAA,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,wCAAkB,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACpD,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CACrC,CAAC;QAEF,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;CAAA;AArCD,wDAqCC;AAED,SAAe,UAAU,CAAC,MAAiB,EAAE,KAAa,EAAE,KAAa;;QACrE,IAAI,CAAC,kCAAsB,EAAE,4BAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAC5D,OAAO,IAAI,CAAC;SACf;QACD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,CACL,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAC1E,CAAC;IACN,CAAC;CAAA;AAED,SAAsB,oBAAoB;AACtC,6DAA6D;AAC7D,KAAa;AACb,6DAA6D;AAC7D,IAAoC;AACpC,6DAA6D;AAC7D,OAAgB;;QAEhB,OAAO;IACX,CAAC;CAAA;AATD,oDASC;AAED,YAAY"}

package/lib/request-handler.d.ts

@@ -1,21 +0,0 @@
-import { NextApiRequest, NextApiResponse } from 'next';
-import { AuthUser, Service } from './types';
-/**
- * Options for initializing a Next.js API endpoint request handler. This type is re-exported in @zenstackhq/runtime/server.
- * @see requestHandler
- */
-export type RequestHandlerOptions = {
-    /**
-     * Hook method for providing current login user from session.
-     */
-    getServerUser: (req: NextApiRequest, res: NextApiResponse) => Promise<AuthUser | undefined>;
-};
-/**
- * Creates a Next.js API endpoint request handler which encapsulates RESTful APIs generated by ZenStack.
- * The created handler should be mounted at /api/zenstack endpoint.
- *
- * @param service ZenStack service which wraps a Prisma db client inside
- * @param options Options for initialization
- * @returns An API endpoint request handler
- */
-export declare function requestHandler<DbClient>(service: Service<DbClient>, options: RequestHandlerOptions): (req: NextApiRequest, res: NextApiResponse) => Promise<void>;

package/lib/request-handler.js

@@ -1,37 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requestHandler = void 0;
-const handler_1 = require("./handler");
-/**
- * Creates a Next.js API endpoint request handler which encapsulates RESTful APIs generated by ZenStack.
- * The created handler should be mounted at /api/zenstack endpoint.
- *
- * @param service ZenStack service which wraps a Prisma db client inside
- * @param options Options for initialization
- * @returns An API endpoint request handler
- */
-function requestHandler(service, options) {
-    const dataHandler = new handler_1.DataHandler(service, options);
-    return (req, res) => __awaiter(this, void 0, void 0, function* () {
-        const [route, ...rest] = req.query.path;
-        switch (route) {
-            // "/data" route is for handling data-access requests
-            case 'data':
-                return dataHandler.handle(req, res, rest);
-            default:
-                service.warn(`Unknown route: ${route}`);
-                res.status(404).json({ error: `Unknown route: ${route}` });
-        }
-    });
-}
-exports.requestHandler = requestHandler;
-//# sourceMappingURL=request-handler.js.map

package/lib/request-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"request-handler.js","sourceRoot":"","sources":["../../src/request-handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,uCAAwC;AAiBxC;;;;;;;GAOG;AACH,SAAgB,cAAc,CAC1B,OAA0B,EAC1B,OAA8B;IAE9B,MAAM,WAAW,GAAG,IAAI,qBAAW,CAC/B,OAAoC,EACpC,OAAO,CACV,CAAC;IACF,OAAO,CAAO,GAAmB,EAAE,GAAoB,EAAE,EAAE;QACvD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAgB,CAAC;QACpD,QAAQ,KAAK,EAAE;YACX,qDAAqD;YACrD,KAAK,MAAM;gBACP,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE9C;gBACI,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,KAAK,EAAE,EAAE,CAAC,CAAC;SAClE;IACL,CAAC,CAAA,CAAC;AACN,CAAC;AApBD,wCAoBC"}

package/lib/request.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/request.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0DAAkC;AAClC,2CAA2C;AAM3C,+DAA4D;AAG5D,wCAAwC;AACxC,IAAA,yCAAmB,GAAE,CAAC;AAEtB,MAAM,OAAO,GAAG,CAAO,GAAW,EAAE,OAAqB,EAAE,EAAE;IACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACT,MAAM,KAAK,GAAgD,IAAI,KAAK,CAChE,4CAA4C,CAC/C,CAAC;QACF,KAAK,CAAC,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,CAAC;KACf;IAED,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI;QACA,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;KAChC;IAAC,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,GAAG,CAAC;KACb;AACL,CAAC,CAAA,CAAC;AAEF,SAAS,OAAO,CAAC,KAAc;IAC3B,OAAO,mBAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC5B,8DAA8D;IAC9D,OAAO,mBAAS,CAAC,KAAK,CAAM,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAa;IACvC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,8DAA8D;AAC9D,SAAgB,GAAG,CACf,GAAkB,EAClB,IAAc,EACd,OAA8B;IAE9B,MAAM,MAAM,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,OAAO,IAAA,aAAM,EAAc,MAAM,EAAE,OAAO,EAAE;QACxC,YAAY,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW;KACrC,CAAC,CAAC;AACP,CAAC;AATD,kBASC;AAED;;;;;;GAMG;AACH,SAAsB,IAAI,CACtB,GAAW,EACX,IAAU,EACV,MAAe;;QAEf,MAAM,CAAC,GAAW,MAAM,OAAO,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;aACrC;YACD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC;IACb,CAAC;CAAA;AAdD,oBAcC;AAED;;;;;;GAMG;AACH,SAAsB,GAAG,CACrB,GAAW,EACX,IAAU,EACV,MAAe;;QAEf,MAAM,CAAC,GAAW,MAAM,OAAO,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;aACrC;YACD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC;IACb,CAAC;CAAA;AAdD,kBAcC;AAED;;;;;;GAMG;AACH,SAAsB,GAAG,CACrB,GAAW,EACX,IAAa,EACb,MAAe;;QAEf,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,GAAW,MAAM,OAAO,CAAC,MAAM,EAAE;YACpC,MAAM,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACb,CAAC;CAAA;AAbD,kBAaC;AASD,SAAgB,SAAS;IACrB,6EAA6E;IAC7E,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,kBAAY,GAAE,CAAC;IACzC,OAAO,CACH,GAAW,EACX,MAAe,EACf,IAAmD,EACnD,IAA+B,EACjC,EAAE;QACA,IAAI,CAAC,MAAM,EAAE;YACT,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;SAClC;QAED,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,EAAE;YACzB,MAAM,IAAI,KAAK,CACX,yDAAyD,CAC5D,CAAC;SACL;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CACxC,CAAC;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC;AACN,CAAC;AAzBD,8BAyBC"}

package/lib/serialization-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serialization-utils.js","sourceRoot":"","sources":["../../src/serialization-utils.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAiC;AACjC,0DAAkC;AAElC,SAAgB,mBAAmB;IAC/B,mBAAS,CAAC,cAAc,CACpB;QACI,YAAY,EAAE,CAAC,CAAC,EAAe,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QACjD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACjD,EACD,QAAQ,CACX,CAAC;IACF,mBAAS,CAAC,cAAc,CACpB;QACI,YAAY,EAAE,CAAC,CAAC,EAAgB,EAAE,CAAC,oBAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;QAC5B,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,oBAAO,CAAC,CAAC,CAAC;KACrC,EACD,YAAY,CACf,CAAC;AACN,CAAC;AAjBD,kDAiBC"}

package/lib/service.d.ts

@@ -1,32 +0,0 @@
-/// <reference types="node" />
-import { EventEmitter } from 'stream';
-import { ServiceConfig } from './config';
-import { FieldInfo, LogEvent, LogLevel, PolicyOperationKind, QueryContext, Service } from './types';
-export declare abstract class DefaultService<DbClient extends {
-    $on: (eventType: any, handler: (event: any) => void) => void;
-}> implements Service<DbClient> {
-    protected config: ServiceConfig;
-    private prisma;
-    protected readonly logEmitter: EventEmitter;
-    private readonly logSettings;
-    private guardModule;
-    private fieldConstraintModule;
-    private readonly prismaLogLevels;
-    constructor();
-    private initialize;
-    $on(level: LogLevel, callback: (event: LogEvent) => void): void;
-    private handleLog;
-    private loadConfig;
-    get db(): DbClient;
-    resolveField(model: string, field: string): Promise<FieldInfo | undefined>;
-    buildQueryGuard(model: string, operation: PolicyOperationKind, context: QueryContext): Promise<unknown>;
-    validateModelPayload(model: string, mode: 'create' | 'update', payload: unknown): Promise<void>;
-    verbose(message: string): void;
-    info(message: string): void;
-    warn(message: string): void;
-    error(message: string): void;
-    reinitialize(): void;
-    protected abstract initializePrisma(): DbClient;
-    protected abstract loadGuardModule(): Promise<any>;
-    protected abstract loadFieldConstraintModule(): Promise<any>;
-}