captify 0.1.18 → 1.1.0

package/dist/permissions/permissions.constants.js

@@ -0,0 +1,513 @@
+/**
+ * Permissions module constants
+ */
+// ============================================================================
+// API Routes
+// ============================================================================
+export const PERMISSIONS_API_ROUTES = {
+    BASE: "/api/permissions",
+    BULK_DELETE: "/api/permissions/bulk-delete",
+    DETAIL: (policyId) => `/api/permissions/${encodeURIComponent(policyId)}`,
+    STATUS: (policyId) => `/api/permissions/${encodeURIComponent(policyId)}/status`,
+    CHECK: "/api/permissions/check",
+    ROLES: "/api/permissions/roles",
+    ROLE_DETAIL: (roleId) => `/api/permissions/roles/${encodeURIComponent(roleId)}`,
+    ROLE_ASSIGNMENTS: (roleId) => `/api/permissions/roles/${encodeURIComponent(roleId)}/assignments`,
+    ROLE_ASSIGNMENT_DETAIL: (roleId, assignmentId) => `/api/permissions/roles/${encodeURIComponent(roleId)}/assignments/${encodeURIComponent(assignmentId)}`,
+    RESOURCES: "/api/permissions/resources",
+};
+// ============================================================================
+// Error Messages
+// ============================================================================
+export const PERMISSIONS_ERROR_MESSAGES = {
+    SELF_LOCKOUT: "Cannot delete: this would lock you out of permissions management",
+};
+// ============================================================================
+// Limits
+// ============================================================================
+export const PERMISSIONS_LIMITS = {
+    /** Default page size for policy listing */
+    PAGE_SIZE: 20,
+    /** Maximum page size allowed */
+    MAX_PAGE_SIZE: 100,
+    /** Maximum policies to load for Casbin enforcer */
+    MAX_POLICIES_LOAD: 10000,
+    /** Debounce delay for search input (ms) */
+    SEARCH_DEBOUNCE_MS: 300,
+    /** Cache TTL for Casbin enforcer (ms) - 5 minutes */
+    ENFORCER_CACHE_TTL_MS: 5 * 60 * 1000,
+    /** Stale time for role assignments queries (ms) - 30 seconds */
+    ROLE_ASSIGNMENTS_STALE_TIME_MS: 30 * 1000,
+};
+// ============================================================================
+// Valid Sort Orders
+// ============================================================================
+export const VALID_SORT_ORDERS = ["asc", "desc"];
+// ============================================================================
+// Valid Policy Sort Columns
+// ============================================================================
+export const VALID_POLICY_SORT_COLUMNS = [
+    "subject",
+    "resource",
+    "action",
+    "effect",
+    "status",
+    "createdAt",
+];
+// ============================================================================
+// Subject Types
+// ============================================================================
+export const SUBJECT_TYPE = {
+    USER: "user",
+    ROLE: "role",
+    GROUP: "group",
+};
+/** Valid subject types derived from SUBJECT_TYPE */
+export const VALID_SUBJECT_TYPES = Object.values(SUBJECT_TYPE);
+// ============================================================================
+// Policy Effects
+// ============================================================================
+export const POLICY_EFFECT = {
+    ALLOW: "allow",
+    DENY: "deny",
+};
+/** Valid policy effects derived from POLICY_EFFECT */
+export const VALID_POLICY_EFFECTS = Object.values(POLICY_EFFECT);
+// ============================================================================
+// Valid Policy Statuses
+// ============================================================================
+export const VALID_POLICY_STATUSES = ["enabled", "disabled"];
+// ============================================================================
+// Default Domain
+// ============================================================================
+export const DEFAULT_DOMAIN = "default";
+// ============================================================================
+// Base Role
+// ============================================================================
+/**
+ * The base role automatically assigned to all authenticated users.
+ * Permissions assigned to this role apply to everyone who is logged in,
+ * without requiring any group assignment.
+ *
+ * Other roles (e.g., "support", "admin") can extend this base role
+ * through role hierarchy: g, support, authenticated, domain
+ */
+export const BASE_AUTHENTICATED_ROLE = "user";
+// ============================================================================
+// Resource Name Constants
+// ============================================================================
+export const RESOURCE = {
+    AGENTS: "agents",
+    DOCUMENTS: "documents",
+    LLM_PROVIDERS: "llm-providers",
+    LLM_BUDGETS: "llm-budgets",
+    LLM_USAGE: "llm-usage",
+    USERS: "users",
+    GROUPS: "groups",
+    PERMISSIONS: "permissions",
+    ONTOLOGY: "ontology",
+    FEEDBACKS: "feedbacks",
+    NOTIFICATIONS: "notifications",
+    SEARCH: "search",
+    SEARCH_INDICES: "search-indices",
+    COLLABORATIVE_DOCS: "collaborative-docs",
+};
+// ============================================================================
+// Action Name Constants
+// ============================================================================
+export const ACTION = {
+    ALL: "*",
+    READ: "read",
+    LIST: "list",
+    CREATE: "create",
+    UPDATE: "update",
+    DELETE: "delete",
+    GENERATE: "generate",
+    CHAT: "chat",
+    UPLOAD: "upload",
+    DOWNLOAD: "download",
+    ENABLE: "enable",
+    DISABLE: "disable",
+    ADD_TO_GROUP: "add-to-group",
+    REMOVE_FROM_GROUP: "remove-from-group",
+    LIST_OTHER_USERS: "list-other-users",
+    SHARE: "share",
+    COMMENT: "comment",
+    MARK_READ: "mark-read",
+    MARK_ALL_READ: "mark-all-read",
+    DISMISS: "dismiss",
+    DISMISS_ALL: "dismiss-all",
+};
+// ============================================================================
+// Standard Actions (uses ACTION constants as keys)
+// ============================================================================
+export const STANDARD_ACTIONS = {
+    [ACTION.ALL]: {
+        displayName: "All Actions",
+        description: "Full access to all actions on the resource",
+    },
+    [ACTION.READ]: {
+        displayName: "Read",
+        description: "View individual resources",
+    },
+    [ACTION.LIST]: {
+        displayName: "List",
+        description: "List and search resources",
+    },
+    [ACTION.CREATE]: {
+        displayName: "Create",
+        description: "Create new resources",
+    },
+    [ACTION.UPDATE]: {
+        displayName: "Update",
+        description: "Modify existing resources",
+    },
+    [ACTION.DELETE]: {
+        displayName: "Delete",
+        description: "Remove resources permanently",
+    },
+    [ACTION.GENERATE]: {
+        displayName: "Generate",
+        description: "Generate or execute AI operations",
+    },
+    [ACTION.CHAT]: {
+        displayName: "Chat",
+        description: "Chat with AI agents",
+    },
+    [ACTION.UPLOAD]: {
+        displayName: "Upload",
+        description: "Upload files to resources",
+    },
+    [ACTION.DOWNLOAD]: {
+        displayName: "Download",
+        description: "Download files from resources",
+    },
+    [ACTION.ENABLE]: {
+        displayName: "Enable",
+        description: "Enable or activate resources",
+    },
+    [ACTION.DISABLE]: {
+        displayName: "Disable",
+        description: "Disable or deactivate resources",
+    },
+    [ACTION.ADD_TO_GROUP]: {
+        displayName: "Add to Group",
+        description: "Add users to groups",
+    },
+    [ACTION.REMOVE_FROM_GROUP]: {
+        displayName: "Remove from Group",
+        description: "Remove users from groups",
+    },
+    [ACTION.LIST_OTHER_USERS]: {
+        displayName: "List Other Users",
+        description: "View files and folders belonging to other users",
+    },
+    [ACTION.SHARE]: {
+        displayName: "Share",
+        description: "Share resources with other users",
+    },
+    [ACTION.COMMENT]: {
+        displayName: "Comment",
+        description: "Add and manage comments on resources",
+    },
+    [ACTION.MARK_READ]: {
+        displayName: "Mark Read",
+        description: "Mark notifications as read",
+    },
+    [ACTION.MARK_ALL_READ]: {
+        displayName: "Mark All Read",
+        description: "Mark all notifications as read",
+    },
+    [ACTION.DISMISS]: {
+        displayName: "Dismiss",
+        description: "Dismiss individual notifications",
+    },
+    [ACTION.DISMISS_ALL]: {
+        displayName: "Dismiss All",
+        description: "Dismiss all notifications",
+    },
+};
+// ============================================================================
+// Protected Resources
+// ============================================================================
+export const PROTECTED_RESOURCES = [
+    {
+        resourceId: RESOURCE.AGENTS,
+        name: RESOURCE.AGENTS,
+        displayName: "Agents",
+        description: "AI agent components and management",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+            Object.assign({ name: ACTION.GENERATE }, STANDARD_ACTIONS[ACTION.GENERATE]),
+            Object.assign({ name: ACTION.CHAT }, STANDARD_ACTIONS[ACTION.CHAT]),
+            Object.assign({ name: ACTION.ENABLE }, STANDARD_ACTIONS[ACTION.ENABLE]),
+            Object.assign({ name: ACTION.DISABLE }, STANDARD_ACTIONS[ACTION.DISABLE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.DOCUMENTS,
+        name: RESOURCE.DOCUMENTS,
+        displayName: "Documents",
+        description: "Document management and file storage",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+            Object.assign({ name: ACTION.UPLOAD }, STANDARD_ACTIONS[ACTION.UPLOAD]),
+            Object.assign({ name: ACTION.DOWNLOAD }, STANDARD_ACTIONS[ACTION.DOWNLOAD]),
+            Object.assign({ name: ACTION.LIST_OTHER_USERS }, STANDARD_ACTIONS[ACTION.LIST_OTHER_USERS]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.LLM_PROVIDERS,
+        name: RESOURCE.LLM_PROVIDERS,
+        displayName: "LLM Providers",
+        description: "LLM provider and model configuration",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+            Object.assign({ name: ACTION.ENABLE }, STANDARD_ACTIONS[ACTION.ENABLE]),
+            Object.assign({ name: ACTION.DISABLE }, STANDARD_ACTIONS[ACTION.DISABLE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.LLM_BUDGETS,
+        name: RESOURCE.LLM_BUDGETS,
+        displayName: "LLM Budgets",
+        description: "LLM usage budget configuration",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.LLM_USAGE,
+        name: RESOURCE.LLM_USAGE,
+        displayName: "LLM Usage",
+        description: "LLM usage tracking and monitoring",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.USERS,
+        name: RESOURCE.USERS,
+        displayName: "Users",
+        description: "User account management",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+            Object.assign({ name: ACTION.ENABLE }, STANDARD_ACTIONS[ACTION.ENABLE]),
+            Object.assign({ name: ACTION.DISABLE }, STANDARD_ACTIONS[ACTION.DISABLE]),
+            Object.assign({ name: ACTION.ADD_TO_GROUP }, STANDARD_ACTIONS[ACTION.ADD_TO_GROUP]),
+            Object.assign({ name: ACTION.REMOVE_FROM_GROUP }, STANDARD_ACTIONS[ACTION.REMOVE_FROM_GROUP]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.GROUPS,
+        name: RESOURCE.GROUPS,
+        displayName: "Groups",
+        description: "User group management",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.PERMISSIONS,
+        name: RESOURCE.PERMISSIONS,
+        displayName: "Permissions",
+        description: "Permission policy management",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+            Object.assign({ name: ACTION.ENABLE }, STANDARD_ACTIONS[ACTION.ENABLE]),
+            Object.assign({ name: ACTION.DISABLE }, STANDARD_ACTIONS[ACTION.DISABLE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.ONTOLOGY,
+        name: RESOURCE.ONTOLOGY,
+        displayName: "Ontology",
+        description: "Knowledge graph and ontology management",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.FEEDBACKS,
+        name: RESOURCE.FEEDBACKS,
+        displayName: "Feedbacks",
+        description: "User feedback collection and management",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+            Object.assign({ name: ACTION.GENERATE }, STANDARD_ACTIONS[ACTION.GENERATE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.SEARCH,
+        name: RESOURCE.SEARCH,
+        displayName: "Search",
+        description: "Search functionality and query execution",
+        actions: [Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ])],
+    },
+    {
+        resourceId: RESOURCE.SEARCH_INDICES,
+        name: RESOURCE.SEARCH_INDICES,
+        displayName: "Search Indices",
+        description: "Search index management and administration",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.COLLABORATIVE_DOCS,
+        name: RESOURCE.COLLABORATIVE_DOCS,
+        displayName: "Collaborative Documents",
+        description: "Real-time collaborative document editing",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.CREATE }, STANDARD_ACTIONS[ACTION.CREATE]),
+            Object.assign({ name: ACTION.UPDATE }, STANDARD_ACTIONS[ACTION.UPDATE]),
+            Object.assign({ name: ACTION.DELETE }, STANDARD_ACTIONS[ACTION.DELETE]),
+            Object.assign({ name: ACTION.SHARE }, STANDARD_ACTIONS[ACTION.SHARE]),
+            Object.assign({ name: ACTION.COMMENT }, STANDARD_ACTIONS[ACTION.COMMENT]),
+            Object.assign({ name: ACTION.GENERATE }, STANDARD_ACTIONS[ACTION.GENERATE]),
+        ],
+    },
+    {
+        resourceId: RESOURCE.NOTIFICATIONS,
+        name: RESOURCE.NOTIFICATIONS,
+        displayName: "Notifications",
+        description: "In-app notification management",
+        actions: [
+            Object.assign({ name: ACTION.READ }, STANDARD_ACTIONS[ACTION.READ]),
+            Object.assign({ name: ACTION.LIST }, STANDARD_ACTIONS[ACTION.LIST]),
+            Object.assign({ name: ACTION.MARK_READ }, STANDARD_ACTIONS[ACTION.MARK_READ]),
+            Object.assign({ name: ACTION.MARK_ALL_READ }, STANDARD_ACTIONS[ACTION.MARK_ALL_READ]),
+            Object.assign({ name: ACTION.DISMISS }, STANDARD_ACTIONS[ACTION.DISMISS]),
+            Object.assign({ name: ACTION.DISMISS_ALL }, STANDARD_ACTIONS[ACTION.DISMISS_ALL]),
+        ],
+    },
+];
+/**
+ * Get resource by name
+ */
+export function getResourceByName(name) {
+    return PROTECTED_RESOURCES.find((r) => r.name === name);
+}
+/**
+ * Get all resource names
+ */
+export function getAllResourceNames() {
+    return PROTECTED_RESOURCES.map((r) => r.name);
+}
+/**
+ * Get actions for a specific resource
+ * Always includes the wildcard "*" action which represents all actions
+ */
+export function getActionsForResource(resourceName) {
+    var _a;
+    const resource = getResourceByName(resourceName);
+    const resourceActions = (_a = resource === null || resource === void 0 ? void 0 : resource.actions.map((a) => a.name)) !== null && _a !== void 0 ? _a : [];
+    // Always include wildcard action at the beginning
+    return [ACTION.ALL, ...resourceActions];
+}
+// ============================================================================
+// System Roles
+// ============================================================================
+export const SYSTEM_ROLES = [
+    {
+        roleName: "admin",
+        description: "Full administrative access to all resources",
+    },
+    {
+        roleName: "editor",
+        description: "Can read and write all resources",
+    },
+    {
+        roleName: "viewer",
+        description: "Read-only access to all resources",
+    },
+];
+// ============================================================================
+// Casbin Model Configuration
+// ============================================================================
+/**
+ * Casbin RBAC model with domains and deny-override effect.
+ * Embedded as a string constant to work when published as an npm package.
+ *
+ * Model explanation:
+ * - request_definition: subject, domain, object (resource), action
+ * - policy_definition: subject, domain, object, action, effect (allow/deny)
+ * - role_definition: role inheritance with domain support (g = _, _, _)
+ * - policy_effect: allow if any allow exists AND no deny exists (deny-override)
+ * - matchers: checks role inheritance, domain, resource, and action (with wildcard support)
+ */
+export const CASBIN_MODEL = `
+[request_definition]
+r = sub, dom, obj, act
+
+[policy_definition]
+p = sub, dom, obj, act, eft
+
+[role_definition]
+g = _, _, _
+
+[policy_effect]
+e = some(where (p.eft == allow)) && !some(where (p.eft == deny))
+
+[matchers]
+m = g(r.sub, p.sub, r.dom) && r.dom == p.dom && r.obj == p.obj && (r.act == p.act || p.act == "*")
+`;
+// ============================================================================
+// Query Keys for TanStack Query
+// ============================================================================
+export const permissionsQueryKeys = {
+    all: ["permissions"],
+    policies: () => [...permissionsQueryKeys.all, "policies"],
+    policyList: (params = {}) => [...permissionsQueryKeys.policies(), "list", params],
+    policyDetail: (policyId) => [...permissionsQueryKeys.policies(), "detail", policyId],
+    roles: () => [...permissionsQueryKeys.all, "roles"],
+    roleList: () => [...permissionsQueryKeys.roles(), "list"],
+    roleDetail: (roleId) => [...permissionsQueryKeys.roles(), "detail", roleId],
+    roleAssignments: (roleId) => [...permissionsQueryKeys.roles(), roleId, "assignments"],
+    resources: () => [...permissionsQueryKeys.all, "resources"],
+    userPermissions: () => [...permissionsQueryKeys.all, "user-permissions"],
+};
+//# sourceMappingURL=permissions.constants.js.map

package/dist/permissions/permissions.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.constants.js","sourceRoot":"","sources":["../../lib/permissions/permissions.constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,8BAA8B;IAC3C,MAAM,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,EAAE;IAChF,MAAM,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,SAAS;IACvF,KAAK,EAAE,wBAAwB;IAC/B,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,EAAE;IACvF,gBAAgB,EAAE,CAAC,MAAc,EAAE,EAAE,CACnC,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,cAAc;IACpE,sBAAsB,EAAE,CAAC,MAAc,EAAE,YAAoB,EAAE,EAAE,CAC/D,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,gBAAgB,kBAAkB,CAAC,YAAY,CAAC,EAAE;IACxG,SAAS,EAAE,4BAA4B;CAC/B,CAAC;AAEX,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,YAAY,EAAE,kEAAkE;CACxE,CAAC;AAEX,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,2CAA2C;IAC3C,SAAS,EAAE,EAAE;IACb,gCAAgC;IAChC,aAAa,EAAE,GAAG;IAClB,mDAAmD;IACnD,iBAAiB,EAAE,KAAK;IACxB,2CAA2C;IAC3C,kBAAkB,EAAE,GAAG;IACvB,qDAAqD;IACrD,qBAAqB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;IACpC,gEAAgE;IAChE,8BAA8B,EAAE,EAAE,GAAG,IAAI;CACjC,CAAC;AAEX,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAG1D,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,WAAW;CACH,CAAC;AAEX,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACgC,CAAC;AAEjD,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE/D,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;CACmC,CAAC;AAElD,sDAAsD;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AAEjE,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;AAEtE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;CACO,CAAC;AAElD,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,cAAc;IAC5B,iBAAiB,EAAE,mBAAmB;IACtC,gBAAgB,EAAE,kBAAkB;IACpC,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;CACmB,CAAC;AAEhD,+EAA+E;AAC/E,mDAAmD;AACnD,+EAA+E;AAE/E,MAAM,CAAC,MAAM,gBAAgB,GAAqE;IAChG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;QACZ,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,4CAA4C;KAC1D;IACD,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACb,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,2BAA2B;KACzC;IACD,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACb,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,2BAA2B;KACzC;IACD,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QACf,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,sBAAsB;KACpC;IACD,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QACf,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,2BAA2B;KACzC;IACD,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QACf,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,8BAA8B;KAC5C;IACD,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACjB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,mCAAmC;KACjD;IACD,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACb,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,qBAAqB;KACnC;IACD,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QACf,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,2BAA2B;KACzC;IACD,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACjB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,+BAA+B;KAC7C;IACD,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QACf,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,8BAA8B;KAC5C;IACD,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAChB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,iCAAiC;KAC/C;IACD,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;QACrB,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,qBAAqB;KACnC;IACD,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE;QAC1B,WAAW,EAAE,mBAAmB;QAChC,WAAW,EAAE,0BAA0B;KACxC;IACD,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE;QACzB,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,iDAAiD;KAC/D;IACD,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACd,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,kCAAkC;KAChD;IACD,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAChB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,sCAAsC;KACpD;IACD,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAClB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,4BAA4B;KAC1C;IACD,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QACtB,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,gCAAgC;KAC9C;IACD,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAChB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,kCAAkC;KAChD;IACD,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;QACpB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,2BAA2B;KACzC;CACF,CAAC;AAEF,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C;QACE,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,IAAI,EAAE,QAAQ,CAAC,MAAM;QACrB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAK,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;4BAC3D,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,OAAO,IAAK,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;SAC5D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAK,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;4BAC3D,IAAI,EAAE,MAAM,CAAC,gBAAgB,IAAK,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC;SAC9E;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,aAAa;QAClC,IAAI,EAAE,QAAQ,CAAC,aAAa;QAC5B,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,OAAO,IAAK,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;SAC5D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,WAAW;QAChC,IAAI,EAAE,QAAQ,CAAC,WAAW;QAC1B,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;SAC1D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;SACtD;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,IAAI,EAAE,QAAQ,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,OAAO,IAAK,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;4BACzD,IAAI,EAAE,MAAM,CAAC,YAAY,IAAK,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC;4BACnE,IAAI,EAAE,MAAM,CAAC,iBAAiB,IAAK,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC;SAChF;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,IAAI,EAAE,QAAQ,CAAC,MAAM;QACrB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;SAC1D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,WAAW;QAChC,IAAI,EAAE,QAAQ,CAAC,WAAW;QAC1B,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,OAAO,IAAK,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;SAC5D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,QAAQ;QAC7B,IAAI,EAAE,QAAQ,CAAC,QAAQ;QACvB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;SAC1D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAK,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC9D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,IAAI,EAAE,QAAQ,CAAC,MAAM;QACrB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE,iBAAG,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAG;KACnE;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,cAAc;QACnC,IAAI,EAAE,QAAQ,CAAC,cAAc;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;SAC1D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,kBAAkB;QACvC,IAAI,EAAE,QAAQ,CAAC,kBAAkB;QACjC,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,MAAM,IAAK,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACvD,IAAI,EAAE,MAAM,CAAC,KAAK,IAAK,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;4BACrD,IAAI,EAAE,MAAM,CAAC,OAAO,IAAK,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;4BACzD,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAK,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC9D;KACF;IACD;QACE,UAAU,EAAE,QAAQ,CAAC,aAAa;QAClC,IAAI,EAAE,QAAQ,CAAC,aAAa;QAC5B,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAK,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;4BACnD,IAAI,EAAE,MAAM,CAAC,SAAS,IAAK,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC;4BAC7D,IAAI,EAAE,MAAM,CAAC,aAAa,IAAK,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC;4BACrE,IAAI,EAAE,MAAM,CAAC,OAAO,IAAK,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;4BACzD,IAAI,EAAE,MAAM,CAAC,WAAW,IAAK,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC;SACpE;KACF;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAA0B;;IAC9D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAI,EAAE,CAAC;IACnE,kDAAkD;IAClD,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B;QACE,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,6CAA6C;KAC3D;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,mCAAmC;KACjD;CACO,CAAC;AAEX,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;CAe3B,CAAC;AAEF,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,GAAG,EAAE,CAAC,aAAa,CAAU;IAC7B,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAU;IAClE,UAAU,EAAE,CAAC,SAAiB,EAAE,EAAE,EAAE,CAClC,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAU;IAC/D,YAAY,EAAE,CAAC,QAAgB,EAAE,EAAE,CACjC,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAU;IACnE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAU;IAC5D,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,EAAE,MAAM,CAAU;IAClE,UAAU,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAU;IAC5F,eAAe,EAAE,CAAC,MAAc,EAAE,EAAE,CAClC,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,CAAU;IACnE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,WAAW,CAAU;IACpE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,kBAAkB,CAAU;CAClF,CAAC"}

package/dist/permissions/permissions.errors.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Permissions module error classes
+ */
+import { ConflictError, NotFoundError, ValidationError, ForbiddenError } from "../shared/services/services.errors";
+/**
+ * Permission-specific error codes
+ */
+export declare const PERMISSIONS_ERROR_CODES: {
+    readonly POLICY_NOT_FOUND: "PolicyNotFound";
+    readonly ROLE_NOT_FOUND: "RoleNotFound";
+    readonly ASSIGNMENT_NOT_FOUND: "AssignmentNotFound";
+    readonly DUPLICATE_POLICY: "DuplicatePolicy";
+    readonly DUPLICATE_ROLE: "DuplicateRole";
+    readonly DUPLICATE_ASSIGNMENT: "DuplicateAssignment";
+    readonly SELF_LOCKOUT: "SelfLockout";
+    readonly SYSTEM_ROLE: "SystemRole";
+    readonly ROLE_IN_USE: "RoleInUse";
+    readonly INVALID_RESOURCE: "InvalidResource";
+    readonly INVALID_ACTION: "InvalidAction";
+};
+/**
+ * Error thrown when a policy is not found
+ */
+export declare class PolicyNotFoundError extends NotFoundError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when a role is not found
+ */
+export declare class RoleNotFoundError extends NotFoundError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when an assignment is not found
+ */
+export declare class AssignmentNotFoundError extends NotFoundError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when trying to create a duplicate policy
+ */
+export declare class DuplicatePolicyError extends ConflictError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when trying to create a role with an existing name
+ */
+export declare class DuplicateRoleError extends ConflictError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when trying to create a duplicate assignment
+ */
+export declare class DuplicateAssignmentError extends ConflictError {
+    constructor(message?: string);
+}
+/**
+ * Generic permission denied error for resource/action checks
+ */
+export declare class PermissionDeniedError extends ForbiddenError {
+    readonly resource: string;
+    readonly action: string;
+    constructor(resource: string, action: string);
+}
+/**
+ * Error thrown when a user would lock themselves out of permissions management
+ */
+export declare class SelfLockoutError extends ForbiddenError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when trying to modify/delete a system role
+ */
+export declare class SystemRoleError extends ForbiddenError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when trying to delete a role that has active assignments
+ */
+export declare class RoleInUseError extends ConflictError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown for invalid resource name
+ */
+export declare class InvalidResourceError extends ValidationError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown for invalid action name
+ */
+export declare class InvalidActionError extends ValidationError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=permissions.errors.d.ts.map

package/dist/permissions/permissions.errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.errors.d.ts","sourceRoot":"","sources":["../../lib/permissions/permissions.errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,EACf,cAAc,EACf,MAAM,uCAAuC,CAAC;AAM/C;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;CAY1B,CAAC;AAMX;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,aAAa;gBACxC,OAAO,SAAqB;CAIzC;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,aAAa;gBACtC,OAAO,SAAmB;CAIvC;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,aAAa;gBAC5C,OAAO,SAA8B;CAIlD;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;gBACzC,OAAO,SAA8C;CAIlE;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;gBACvC,OAAO,SAAyC;CAI7D;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,aAAa;gBAC7C,OAAO,SAA+D;CAInF;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,cAAc;IACvD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,MAAM,EAAE,MAAM,CAAC;gBAEnB,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM7C;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,cAAc;gBACtC,OAAO,SAAoE;CAIxF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,cAAc;gBACrC,OAAO,SAA+C;CAInE;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,aAAa;gBACnC,OAAO,SAAqD;CAIzE;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;gBAC3C,OAAO,SAA0B;CAI9C;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,SAAqC;CAIzD"}