openxiangda-contracts 2.19.0 → 2.21.0

package/dist/native-compiler/index.js

@@ -1,8 +1,8 @@
-import{createHash as Kn}from"node:crypto";function Hn(e){if(!e||typeof e!="object")return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function ot(e,t){if(e===null)return"null";if(typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`JSON number must be finite: ${t}`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map((o,s)=>ot(o,`${t}[${s}]`)).join(",")}]`;if(Hn(e))return`{${Object.keys(e).filter(s=>e[s]!==void 0).sort((s,r)=>s===r?0:s<r?-1:1).map(s=>`${JSON.stringify(s)}:${ot(e[s],`${t}.${s}`)}`).join(",")}}`;let n=e instanceof Date?"Date":e?.constructor?.name||typeof e;throw new TypeError(`Value is not JSON serializable: ${t} (${n})`)}function Q(e){return ot(e,"$")}function ee(e){return Kn("sha256").update(Q(e)).digest("hex")}var Ut=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,it=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,Xn=["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","date-range","datetime-range","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","image","signature","address","location","uuid","json","file","serial-number","subtable"],Qn=new Set(Xn),Mt=new Set(["option.multiple","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","subtable"]),Lt=new Set(["option.single","option.multiple","cascade.single","cascade.multiple"]),vt=new Set(["resource-ref.single","resource-ref.multiple"]),rt=[{code:"id",type:"uuid",nullable:!1},{code:"revision",type:"number.integer",nullable:!1},{code:"created_by",type:"text.short",nullable:!1},{code:"updated_by",type:"text.short",nullable:!1},{code:"created_at",type:"datetime",nullable:!1},{code:"updated_at",type:"datetime",nullable:!1}],Ei=new Map(rt.map(e=>[e.code,e])),_e=class extends Error{constructor(n,o){super(n);this.code=n;this.pointer=o;this.name="NativeDataFieldContractV2Error"}code;pointer};function Je(e){return Mt.has(e)}function We(e,t={}){return e.type!=="serial-number"&&t.system!==!0&&e.nullable===!1&&(!Je(e.type)||t.requiredHint===!0)}function at(e,t,n=500){Array.isArray(e)||S("NATIVE_ARRAY_REQUIRED",t),e.length===0&&S("NATIVE_DATA_FIELDS_REQUIRED",t),e.length>n&&S("NATIVE_ARRAY_LIMIT_EXCEEDED",t);let o=new Set;return e.map((s,r)=>{let a=`${t}/${r}`,i=ie(s,a);ae(i,["code","type","nullable","indexed","options","source","maxLength","precision","scale","min","max","rangeBoundary","timePrecision","file","serial","subtable"],a);let c=ce(i.code,`${a}/code`,63);Ut.test(c)||S("NATIVE_FIELD_CODE_INVALID",`${a}/code`),o.has(c)&&S("NATIVE_DATA_FIELD_DUPLICATE",`${a}/code`),o.add(c);let u=ce(i.type,`${a}/type`,32);Qn.has(u)||S("NATIVE_DATA_FIELD_TYPE_INVALID",`${a}/type`);let E=u,d=kt(i.nullable,`${a}/nullable`),f=kt(i.indexed,`${a}/indexed`);d===!0&&Mt.has(E)&&S("NATIVE_DATA_MULTI_FIELD_NULLABLE_INVALID",`${a}/nullable`);let p=to(i.options,E,a),_=no(i.source,E,a),A=so(i,E,a),N=Zn(i.rangeBoundary,E,a),m=io(i.file,E,a),T=ro(i.serial,E,a),C=ao(i.subtable,E,a);return{code:c,type:E,...d===void 0?{}:{nullable:d},...f===void 0?{}:{indexed:f},...p?{options:p}:{},..._?{source:_}:{},...A,...N?{rangeBoundary:N}:{},...m?{file:m}:{},...T?{serial:T}:{},...C?{subtable:C}:{}}})}function Zn(e,t,n){let o=`${n}/rangeBoundary`;if(!(t==="date-range"||t==="datetime-range")){e!==void 0&&S("NATIVE_DATA_FIELD_RANGE_BOUNDARY_TYPE_INVALID",o);return}return e!=="closed"&&e!=="half-open"&&S("NATIVE_DATA_FIELD_RANGE_BOUNDARY_REQUIRED",o),e}function jt(e,t){Array.isArray(e)||S("NATIVE_ARRAY_REQUIRED",t);let n=new Map;e.forEach((o,s)=>{let r=`${t}/${s}`,a=ie(o,r),i=ce(a.code,`${r}/code`,64);(!it.test(i)||n.has(i))&&S("NATIVE_RESOURCE_CODE_INVALID",`${r}/code`);let c=ie(a.schema,`${r}/schema`);n.set(i,{pointer:r,fields:at(c.fields,`${r}/schema/fields`)})});for(let[o,s]of n){let r=new Map(s.fields.map(i=>[i.code,i]));s.fields.filter(i=>i.type==="subtable").reduce((i,c)=>i+(c.subtable?.maxRows??20),0)>49&&S("NATIVE_DATA_FIELD_SUBTABLE_AGGREGATE_MAX_ROWS_EXCEEDED",`${s.pointer}/schema/fields`),s.fields.forEach((i,c)=>{let u=`${s.pointer}/schema/fields/${c}`;if(i.source&&eo(i.source,r,n,`${u}/source`),i.subtable){let E=n.get(i.subtable.resourceCode);(!E||i.subtable.resourceCode===o)&&S("NATIVE_DATA_FIELD_SUBTABLE_TARGET_MISSING",`${u}/subtable/resourceCode`);let d=E.fields.find(p=>p.code===i.subtable?.foreignKey);(!d||d.type!=="uuid"||d.nullable!==!1)&&S("NATIVE_DATA_FIELD_SUBTABLE_FOREIGN_KEY_INVALID",`${u}/subtable/foreignKey`);let f=E.fields.find(p=>p.code===i.subtable?.orderField);(!f||f.type!=="number.integer"||f.nullable!==!1)&&S("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${u}/subtable/orderField`)}})}}function Bt(e,t,n){if(e===void 0)return[];(!Array.isArray(e)||e.length>20)&&S("NATIVE_DATA_RESOURCE_INVARIANTS_INVALID",n);let o=new Map(t.map(r=>[r.code,r])),s=new Set;return e.map((r,a)=>{let i=`${n}/${a}`,c=ie(r,i);ae(c,["code","message","expression"],i);let u=ce(c.code,`${i}/code`,128);(!/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/.test(u)||s.has(u))&&S("NATIVE_DATA_RESOURCE_INVARIANT_CODE_INVALID",`${i}/code`),s.add(u);let E=Be(c.message,`${i}/message`,500);E!==void 0&&E.length===0&&S("NATIVE_DATA_RESOURCE_INVARIANT_MESSAGE_INVALID",`${i}/message`);let d=ie(c.expression,`${i}/expression`);if(d.kind==="nonBlankTextWhenOption"){ae(d,["kind","optionField","optionValue","textField"],`${i}/expression`);let T=fe(d.optionField,`${i}/expression/optionField`),C=fe(d.textField,`${i}/expression/textField`),$=ce(d.optionValue,`${i}/expression/optionValue`,128),b=o.get(T),g=o.get(C);return(!b||!g)&&S("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${i}/expression`),(b.type!=="option.single"||!["text.short","text.long"].includes(g.type)||!b.options?.some(D=>D.value===$))&&S("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${i}/expression`),{code:u,...E===void 0?{}:{message:E},expression:{kind:"nonBlankTextWhenOption",optionField:T,optionValue:$,textField:C}}}ae(d,["leftField","operator","rightField"],`${i}/expression`);let f=fe(d.leftField,`${i}/expression/leftField`),p=fe(d.rightField,`${i}/expression/rightField`),_=o.get(f),A=o.get(p);(!_||!A)&&S("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${i}/expression`),_.type===A.type||["number.integer","number.decimal"].includes(_.type)&&["number.integer","number.decimal"].includes(A.type)||S("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${i}/expression`);let m=String(d.operator);return["eq","neq","gt","gte","lt","lte"].includes(m)||S("NATIVE_DATA_RESOURCE_INVARIANT_OPERATOR_INVALID",`${i}/expression/operator`),!["eq","neq"].includes(m)&&!["number.integer","number.decimal","date","time","datetime","text.short","text.long","text.rich","serial-number","uuid"].includes(_.type)&&S("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${i}/expression`),{code:u,...E===void 0?{}:{message:E},expression:{leftField:f,operator:m,rightField:p}}})}function eo(e,t,n,o){let s=n.get(e.resourceCode);s||S("NATIVE_DATA_FIELD_SOURCE_TARGET_MISSING",`${o}/resourceCode`);let r=new Map(s.fields.map(i=>[i.code,i])),a=r.get(e.labelField);(!a||!["text.short","text.long"].includes(a.type))&&S("NATIVE_DATA_FIELD_SOURCE_LABEL_INVALID",`${o}/labelField`);for(let i of["searchFields","descriptionFields","snapshotFields"])for(let c of e[i]||[])r.has(c)||S("NATIVE_DATA_FIELD_SOURCE_FIELD_MISSING",`${o}/${i}`);for(let[i,c]of(e.filters||[]).entries())r.has(c.field)||S("NATIVE_DATA_FIELD_SOURCE_FILTER_FIELD_MISSING",`${o}/filters/${i}/field`),"binding"in c&&!t.has(c.binding.field)&&S("NATIVE_DATA_FIELD_SOURCE_BINDING_FIELD_MISSING",`${o}/filters/${i}/binding/field`)}function to(e,t,n){let o=`${n}/options`;if(e===void 0){Lt.has(t)&&S("NATIVE_DATA_FIELD_OPTIONS_REQUIRED",o);return}(!Lt.has(t)||!Array.isArray(e))&&S("NATIVE_DATA_FIELD_OPTIONS_TYPE_INVALID",o),(e.length<1||e.length>100)&&S("NATIVE_DATA_FIELD_OPTIONS_INVALID",o);let s=0,r=(a,i,c)=>{c>5&&S("NATIVE_DATA_FIELD_OPTIONS_DEPTH_EXCEEDED",i);let u=new Set;return a.map((E,d)=>{s+=1,s>1e3&&S("NATIVE_DATA_FIELD_OPTIONS_COUNT_EXCEEDED",o);let f=`${i}/${d}`,p=ie(E,f);ae(p,["label","value","description","color","children"],f);let _=ce(p.label,`${f}/label`,500),A=ce(p.value,`${f}/value`,500);u.has(A)&&S("NATIVE_DATA_FIELD_OPTION_VALUE_DUPLICATE",`${f}/value`),u.add(A);let N=Be(p.description,`${f}/description`,2e3),m=Be(p.color,`${f}/color`,64),T;return p.children!==void 0&&((!t.startsWith("cascade.")||!Array.isArray(p.children))&&S("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${f}/children`),(p.children.length<1||p.children.length>100)&&S("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${f}/children`),T=r(p.children,`${f}/children`,c+1)),{label:_,value:A,...N===void 0?{}:{description:N},...m===void 0?{}:{color:m},...T?{children:T}:{}}})};return r(e,o,1)}function no(e,t,n){let o=`${n}/source`;if(e===void 0){vt.has(t)&&S("NATIVE_DATA_FIELD_SOURCE_REQUIRED",o);return}vt.has(t)||S("NATIVE_DATA_FIELD_SOURCE_TYPE_INVALID",o);let s=ie(e,o);ae(s,["kind","resourceCode","labelField","searchFields","descriptionFields","snapshotFields","filters","pageSize","loadMode"],o),s.kind!=="resource"&&S("NATIVE_DATA_FIELD_SOURCE_KIND_INVALID",`${o}/kind`);let r=ce(s.resourceCode,`${o}/resourceCode`,64);it.test(r)||S("NATIVE_RESOURCE_CODE_INVALID",`${o}/resourceCode`);let a=fe(s.labelField,`${o}/labelField`),i=st(s.searchFields,`${o}/searchFields`,10),c=st(s.descriptionFields,`${o}/descriptionFields`,10),u=st(s.snapshotFields,`${o}/snapshotFields`,50),E=$e(s.pageSize,`${o}/pageSize`,1,100),d;s.loadMode!==void 0&&(["search","all"].includes(String(s.loadMode))||S("NATIVE_DATA_FIELD_SOURCE_LOAD_MODE_INVALID",`${o}/loadMode`),d=s.loadMode);let f=oo(s.filters,`${o}/filters`);return{kind:"resource",resourceCode:r,labelField:a,...i?{searchFields:i}:{},...c?{descriptionFields:c}:{},...u?{snapshotFields:u}:{},...f?{filters:f}:{},...E===void 0?{}:{pageSize:E},...d?{loadMode:d}:{}}}function oo(e,t){if(e!==void 0)return(!Array.isArray(e)||e.length>20)&&S("NATIVE_DATA_FIELD_SOURCE_FILTERS_INVALID",t),e.map((n,o)=>{let s=`${t}/${o}`,r=ie(n,s),a=Object.prototype.hasOwnProperty.call(r,"value"),i=Object.prototype.hasOwnProperty.call(r,"binding");ae(r,a?["field","operator","value"]:["field","operator","binding"],s),a===i&&S("NATIVE_DATA_FIELD_SOURCE_FILTER_VALUE_INVALID",s);let c=fe(r.field,`${s}/field`);["eq","in"].includes(String(r.operator))||S("NATIVE_DATA_FIELD_SOURCE_FILTER_OPERATOR_INVALID",`${s}/operator`);let u=r.operator;if(a)return{field:c,operator:u,value:r.value};let E=ie(r.binding,`${s}/binding`);return ae(E,["kind","field"],`${s}/binding`),E.kind!=="field"&&S("NATIVE_DATA_FIELD_SOURCE_BINDING_KIND_INVALID",`${s}/binding/kind`),{field:c,operator:u,binding:{kind:"field",field:fe(E.field,`${s}/binding/field`)}}})}function so(e,t,n){let o={};if(e.maxLength!==void 0&&(["text.short","text.long","text.rich"].includes(t)||S("NATIVE_DATA_FIELD_MAX_LENGTH_TYPE_INVALID",`${n}/maxLength`),o.maxLength=je(e.maxLength,`${n}/maxLength`,1,1e6)),(e.precision!==void 0||e.scale!==void 0)&&((t!=="number.decimal"||e.precision===void 0)&&S("NATIVE_DATA_FIELD_DECIMAL_CONFIG_INVALID",n),o.precision=je(e.precision,`${n}/precision`,1,1e3),o.scale=e.scale===void 0?0:je(e.scale,`${n}/scale`,0,o.precision)),e.min!==void 0||e.max!==void 0){["number.integer","number.decimal"].includes(t)||S("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_TYPE_INVALID",n);let s=xt(e.min,`${n}/min`),r=xt(e.max,`${n}/max`);t==="number.integer"&&[s,r].some(a=>a!==void 0&&!Number.isSafeInteger(a))&&S("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",n),s!==void 0&&r!==void 0&&s>r&&S("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",n),s!==void 0&&(o.min=s),r!==void 0&&(o.max=r)}return e.timePrecision!==void 0&&((t!=="time"||!["minute","second"].includes(e.timePrecision))&&S("NATIVE_DATA_FIELD_TIME_PRECISION_INVALID",`${n}/timePrecision`),o.timePrecision=e.timePrecision),o}function io(e,t,n){if(e===void 0)return;let o=`${n}/file`;["file","image","signature"].includes(t)||S("NATIVE_DATA_FIELD_FILE_TYPE_INVALID",o);let s=ie(e,o);ae(s,["maxCount","maxSizeMb","accept"],o);let r=$e(s.maxCount,`${o}/maxCount`,1,100);t==="signature"&&r!==void 0&&r!==1&&S("NATIVE_DATA_FIELD_SIGNATURE_COUNT_INVALID",`${o}/maxCount`);let a=$e(s.maxSizeMb,`${o}/maxSizeMb`,1,1024),i;return s.accept!==void 0&&((!Array.isArray(s.accept)||s.accept.length>50)&&S("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${o}/accept`),i=s.accept.map((c,u)=>ce(c,`${o}/accept/${u}`,255)),new Set(i).size!==i.length&&S("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${o}/accept`)),{...r===void 0?{}:{maxCount:r},...a===void 0?{}:{maxSizeMb:a},...i===void 0?{}:{accept:i}}}function ro(e,t,n){let o=`${n}/serial`;if(e===void 0){t==="serial-number"&&S("NATIVE_DATA_FIELD_SERIAL_REQUIRED",o);return}t!=="serial-number"&&S("NATIVE_DATA_FIELD_SERIAL_TYPE_INVALID",o);let s=ie(e,o);ae(s,["prefix","digits","start"],o);let r=Be(s.prefix,`${o}/prefix`,64),a=$e(s.digits,`${o}/digits`,1,32),i=$e(s.start,`${o}/start`,0,Number.MAX_SAFE_INTEGER);return{...r===void 0?{}:{prefix:r},...a===void 0?{}:{digits:a},...i===void 0?{}:{start:i}}}function ao(e,t,n){let o=`${n}/subtable`;if(e===void 0){t==="subtable"&&S("NATIVE_DATA_FIELD_SUBTABLE_REQUIRED",o);return}t!=="subtable"&&S("NATIVE_DATA_FIELD_SUBTABLE_TYPE_INVALID",o);let s=ie(e,o);ae(s,["resourceCode","foreignKey","orderField","maxRows"],o);let r=ce(s.resourceCode,`${o}/resourceCode`,64);it.test(r)||S("NATIVE_RESOURCE_CODE_INVALID",`${o}/resourceCode`);let a=fe(s.foreignKey,`${o}/foreignKey`),i=fe(s.orderField,`${o}/orderField`);i===a&&S("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${o}/orderField`);let c=$e(s.maxRows,`${o}/maxRows`,1,49);return{resourceCode:r,foreignKey:a,orderField:i,...c===void 0?{}:{maxRows:c}}}function st(e,t,n){if(e===void 0)return;(!Array.isArray(e)||e.length>n)&&S("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t);let o=e.map((s,r)=>fe(s,`${t}/${r}`));return new Set(o).size!==o.length&&S("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t),o}function fe(e,t){let n=ce(e,t,63);return Ut.test(n)||S("NATIVE_FIELD_CODE_INVALID",t),n}function ie(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&S("NATIVE_OBJECT_REQUIRED",t),e}function ae(e,t,n){let o=new Set(t);for(let s of Object.keys(e))o.has(s)||S("NATIVE_PROPERTY_UNKNOWN",`${n}/${s}`)}function ce(e,t,n){return(typeof e!="string"||e.length===0||e.length>n)&&S("NATIVE_STRING_INVALID",t),e}function Be(e,t,n){if(e!==void 0)return(typeof e!="string"||e.length>n)&&S("NATIVE_STRING_INVALID",t),e}function kt(e,t){if(e!==void 0)return typeof e!="boolean"&&S("NATIVE_BOOLEAN_REQUIRED",t),e}function $e(e,t,n,o){if(e!==void 0)return je(e,t,n,o)}function xt(e,t){if(e!==void 0)return(typeof e!="number"||!Number.isFinite(e))&&S("NATIVE_NUMBER_REQUIRED",t),e}function je(e,t,n,o){return(!Number.isSafeInteger(e)||Number(e)<n||Number(e)>o)&&S("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function S(e,t){throw new _e(e,t)}var Jt=["created_by","updated_by","created_at","updated_at"];function Ve(e){return Jt.includes(e)}function Wt(e){return Jt.some(t=>Object.prototype.hasOwnProperty.call(e.fieldPolicies||{},t))}var co=rt.map(e=>e.code);function Gt(e){return co.includes(e)}var lo=["eq","neq","gt","gte","lt","lte","contains","startsWith","endsWith","in","between","has","hasAny","hasAll","overlaps","containedBy","jsonContains","isEmpty","isNotEmpty"],uo=new Set(lo);function mi(e){return uo.has(String(e))}var ct=["eq","neq","contains","startsWith","endsWith","in","isEmpty","isNotEmpty"],Fe=["eq","neq","gt","gte","lt","lte","between","in","isEmpty"],fo=["eq","neq","in","isEmpty"],Ge=["eq","neq","in","isEmpty","isNotEmpty"],Re=["has","hasAny","hasAll","isEmpty","isNotEmpty"],zt=["overlaps","contains","containedBy","isEmpty"],dt=["jsonContains","isEmpty","isNotEmpty"],lt=["isEmpty","isNotEmpty"],_o={"text.short":ct,"text.long":ct,"text.rich":ct,"number.integer":Fe,"number.decimal":Fe,boolean:fo,date:Fe,time:Fe,datetime:Fe,"date-range":zt,"datetime-range":zt,"option.single":Ge,"option.multiple":Re,"cascade.single":Re,"cascade.multiple":Re,"user.single":Ge,"user.multiple":Re,"department.single":Ge,"department.multiple":Re,"resource-ref.single":Ge,"resource-ref.multiple":Re,file:lt,image:lt,signature:lt,address:dt,location:dt,uuid:["eq","neq","in","isEmpty"],json:dt,"serial-number":["eq","neq","in","contains","startsWith"],subtable:[]},Eo=new Set(["text.short","text.long","text.rich","option.single","user.single","department.single","resource-ref.single","serial-number"]),po=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","signature","address","location","json","subtable"]);function qt(e){return _o[e]}function Ni(e,t){return qt(e).includes(t)}function ut(e){return Eo.has(e)}function we(e){return!po.has(e)}function Kt(e){return qt(e).length>0}var Yt=new Set(["number.integer","number.decimal"]),Ht=new Set(["text.short","text.long","number.integer","number.decimal","date","time","datetime","serial-number"]),Ao=new Set([...Ht,"boolean","uuid"]),Io=new Set(["option.single","user.single","department.single","resource-ref.single"]);function Ti(e,t){return t==="sum"||t==="avg"?Yt.has(e)?{valueExpression:"column",numericResult:!0}:null:t==="min"||t==="max"?Ht.has(e)?{valueExpression:"column",numericResult:Yt.has(e)}:null:Io.has(e)?{valueExpression:"snapshot-value",numericResult:!0}:Ao.has(e)?{valueExpression:"column",numericResult:!0}:null}var _t=["version","maxBytes","fields"];function Qt(e,t){if(e===void 0)return;let n=ft(e,t);Xt(n,_t,t);let o=ze(n.version,`${t}/version`,1,1e6),s=ze(n.maxBytes,`${t}/maxBytes`,2,196608);(!o||!s)&&ne("NATIVE_DATA_DRAFT_STATE_SCHEMA_INVALID",t);let r=ft(n.fields,`${t}/fields`),a=Object.entries(r);(!a.length||a.length>50)&&ne("NATIVE_DATA_DRAFT_STATE_FIELDS_INVALID",`${t}/fields`);for(let[i,c]of a){let u=`${t}/fields/${i}`;/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(i)||ne("NATIVE_DATA_DRAFT_STATE_FIELD_CODE_INVALID",u);let E=ft(c,u),d=Zt(E.type,`${u}/type`,32),f=d==="string"?["type","required","maxLength","enum"]:d==="json.object"?["type","required","maxBytes"]:["type","required"];if(["string","number","integer","boolean","json.object"].includes(d)||ne("NATIVE_DATA_DRAFT_STATE_FIELD_TYPE_INVALID",`${u}/type`),Xt(E,f,u),No(E.required,`${u}/required`),d==="string"){let p=ze(E.maxLength,`${u}/maxLength`,1,196608);p||ne("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",u),E.enum!==void 0&&mo(E.enum,`${u}/enum`,100,!1).some(A=>A.length>p)&&ne("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",`${u}/enum`)}else if(d==="json.object"){let p=ze(E.maxBytes,`${u}/maxBytes`,2,65536);(!p||p>s)&&ne("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",u)}}}function mo(e,t,n,o){(!Array.isArray(e)||!o&&e.length===0||e.length>n)&&ne("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let s=e.map((r,a)=>Zt(r,`${t}/${a}`,255));return new Set(s).size!==s.length&&ne("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),s}function ft(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&ne("NATIVE_OBJECT_REQUIRED",t),e}function Xt(e,t,n){let o=new Set(t);for(let s of Object.keys(e))o.has(s)||ne("NATIVE_PROPERTY_UNKNOWN",`${n}/${s}`)}function Zt(e,t,n){return(typeof e!="string"||e.length===0||e.length>n)&&ne("NATIVE_STRING_INVALID",t),e}function No(e,t){e!==void 0&&typeof e!="boolean"&&ne("NATIVE_BOOLEAN_REQUIRED",t)}function ze(e,t,n,o){return(!Number.isSafeInteger(e)||Number(e)<n||Number(e)>o)&&ne("NATIVE_INTEGER_INVALID",t),Number(e)}function ne(e,t){throw new _e(e,t)}var To=500,Ne={surface:["mutationOwner","generated","fields","list","form","detail","mobile","views"],generated:["list","detail","create","update","delete"],field:["label","type","widget","section","requiredHint","system","hidden","readCapabilities","createCapabilities","updateCapabilities","maxLength","precision","scale","min","max","rangeBoundary","maxCount","maxSizeMb","accept","options","list","searchable","sortable","source","timePrecision","serial","subtable"],list:["actions","fieldOrder","defaultPageSize","searchableFields","filterFields","defaultSort"],defaultSort:["field","order"],form:["layout","fieldOrder","draftState"],detail:["layout","fieldOrder"],layout:["layout","fieldOrder","draftState"],draftState:_t,mobile:["enabled"]},go={"text.short":["text","email","phone"],"text.long":["textarea"],"text.rich":["rich-text"],"number.integer":["number","rating"],"number.decimal":["number","money","percent"],boolean:["switch"],date:["date"],time:["time"],datetime:["datetime"],"date-range":["date-range"],"datetime-range":["datetime-range"],"option.single":["select","radio"],"option.multiple":["multi-select","checkbox"],"cascade.single":["cascade"],"cascade.multiple":["cascade"],"user.single":["directory-user"],"user.multiple":["directory-user"],"department.single":["directory-department","scope"],"department.multiple":["directory-department","scope"],"resource-ref.single":["select","radio","resource"],"resource-ref.multiple":["multi-select","checkbox","resource"],file:["attachment"],image:["image"],signature:["signature"],address:["address"],location:["location"],uuid:["readonly"],json:["json"],"serial-number":["readonly"],subtable:["subtable"]};function At(e,t,n){if(e===void 0)return;let o=te(e,n);Ee(o,Ne.surface,n);let s=o.mutationOwner===void 0?"native":Ie(o.mutationOwner,`${n}/mutationOwner`,16);["native","action","readonly","workflow"].includes(s)||L("NATIVE_DATA_SURFACE_MUTATION_OWNER_INVALID",`${n}/mutationOwner`);let r=o.generated===void 0?{}:te(o.generated,`${n}/generated`);Ee(r,Ne.generated,`${n}/generated`);for(let c of Ne.generated)pt(r[c],`${n}/generated/${c}`);if(s!=="native")for(let c of["create","update","delete"])r[c]===!0&&L("NATIVE_DATA_SURFACE_MUTATION_OWNER_CONFLICT",`${n}/generated/${c}`);let a=new Map(t.map(c=>[c.code,c])),i=te(o.fields,`${n}/fields`);for(let c of Object.keys(i))a.has(c)||L("NATIVE_DATA_SURFACE_FIELD_MISSING",`${n}/fields/${c}`);for(let c of t)Object.prototype.hasOwnProperty.call(i,c.code)||L("NATIVE_DATA_SURFACE_FIELD_REQUIRED",`${n}/fields/${c.code}`),Co(i[c.code],c,`${n}/fields/${c.code}`);for(let c of["create","update"]){let u=r[c]??s==="native",E=t.some(d=>{let f=te(i[d.code],`${n}/fields/${d.code}`);return tn(d,f,c)});u&&!E&&L("NATIVE_DATA_SURFACE_WRITABLE_FIELDS_REQUIRED",`${n}/generated/${c}`)}if(Oo(o.list,a,`${n}/list`),en(o.form,a,`${n}/form`,"form"),en(o.detail,a,`${n}/detail`,"detail"),o.mobile!==void 0){let c=te(o.mobile,`${n}/mobile`);Ee(c,Ne.mobile,`${n}/mobile`),pt(c.enabled,`${n}/mobile/enabled`)}bo(o,t,n)}function It(e,t){let n=e.views?.find(s=>s.code===t);n||L("NATIVE_DATA_VIEW_NOT_FOUND",`/surface/views/${t}`);let o=new Map((n.sections||[]).flatMap(s=>s.fields.map(r=>[r,s.title])));return{mutationOwner:e.mutationOwner||"native",generated:n.generated,list:n.list,form:n.form,detail:n.detail,mobile:n.mobile,fields:Object.fromEntries(Object.entries(e.fields).map(([s,r])=>{let a={...r};delete a.section;let i=o.get(s);return[s,{...a,...i?{section:i}:{},list:n.list.fieldOrder.includes(s)}]}))}}function bo(e,t,n){if(e.views===void 0)return;(!Array.isArray(e.views)||e.views.length>20)&&L("NATIVE_DATA_VIEWS_LIMIT_INVALID",`${n}/views`);let o=new Set;e.views.forEach((s,r)=>{let a=`${n}/views/${r}`,i=te(s,a);Ee(i,["code","name","generated","list","form","detail","mobile","sections"],a);let c=Ie(i.code,`${a}/code`,64);(!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(c)||o.has(c))&&L("NATIVE_DATA_VIEW_CODE_INVALID",`${a}/code`),o.add(c),Ie(i.name,`${a}/name`,255),te(i.generated,`${a}/generated`),te(i.mobile,`${a}/mobile`);for(let E of["list","detail","create","update","delete"])typeof i.generated[E]!="boolean"&&L("NATIVE_DATA_VIEW_OPERATION_INVALID",`${a}/generated/${E}`);typeof i.mobile.enabled!="boolean"&&L("NATIVE_DATA_VIEW_MOBILE_INVALID",`${a}/mobile/enabled`);for(let E of["list","form","detail"]){let d=te(i[E],`${a}/${E}`),f=he(d.fieldOrder,`${a}/${E}/fieldOrder`,500,!0);for(let p of f){let _=e.fields[p];(!_||(_.hidden??_.system)===!0)&&L("NATIVE_DATA_VIEW_FIELD_INVALID",`${a}/${E}/fieldOrder`)}}if(i.sections!==void 0){(!Array.isArray(i.sections)||i.sections.length>100)&&L("NATIVE_DATA_VIEW_SECTIONS_INVALID",`${a}/sections`);let E=new Set;i.sections.forEach((d,f)=>{let p=`${a}/sections/${f}`,_=te(d,p);Ee(_,["title","fields"],p),Ie(_.title,`${p}/title`,255);for(let A of he(_.fields,`${p}/fields`,100,!0)){let N=e.fields[A];(!N||(N.hidden??N.system)===!0||E.has(A))&&L("NATIVE_DATA_VIEW_FIELD_INVALID",`${p}/fields`),E.add(A)}})}let u=It(e,c);if(At(u,t,a),i.generated.create!==!1&&(e.mutationOwner||"native")==="native")for(let E of t)We(E,e.fields[E.code])&&tn(E,e.fields[E.code],"create")&&!i.form.fieldOrder.includes(E.code)&&L("NATIVE_DATA_VIEW_CREATE_REQUIRED_FIELD_MISSING",`${a}/form/fieldOrder`)})}function tn(e,t,n){if(e.type==="serial-number"||t.system===!0)return!1;let o=t[`${n}Capabilities`];return Array.isArray(o)&&o.length>0}function Co(e,t,n){let o=te(e,n);Ee(o,Ne.field,n),Ie(o.label,`${n}/label`,500),o.type!==t.type&&L("NATIVE_DATA_SURFACE_FIELD_TYPE_MISMATCH",`${n}/type`);let s=Ie(o.widget,`${n}/widget`,64);go[t.type].includes(s)||L("NATIVE_DATA_SURFACE_WIDGET_INCOMPATIBLE",`${n}/widget`),ho(o.section,`${n}/section`,255);for(let r of["requiredHint","system","hidden","list","searchable","sortable"])pt(o[r],`${n}/${r}`);o.searchable===!0&&!ut(t.type)&&L("NATIVE_DATA_SURFACE_SEARCH_UNSUPPORTED",`${n}/searchable`),o.sortable===!0&&!we(t.type)&&L("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${n}/sortable`);for(let r of["readCapabilities","createCapabilities","updateCapabilities"])he(o[r],`${n}/${r}`,100,!0);if(o.maxCount!==void 0&&(!Number.isSafeInteger(o.maxCount)||Number(o.maxCount)<1||Number(o.maxCount)>100)&&L("NATIVE_DATA_SURFACE_MAX_COUNT_INVALID",`${n}/maxCount`),o.maxSizeMb!==void 0&&(!Number.isSafeInteger(o.maxSizeMb)||Number(o.maxSizeMb)<1||Number(o.maxSizeMb)>1024)&&L("NATIVE_DATA_SURFACE_MAX_SIZE_INVALID",`${n}/maxSizeMb`),o.accept!==void 0){let r=Array.isArray(o.accept)?o.accept:[o.accept];he(r,`${n}/accept`,50,!1)}for(let r of["maxLength","precision","scale","min","max","rangeBoundary","options","source","timePrecision","serial","subtable"])$o(o,t,r,n);Ro(o,t,n)}function Oo(e,t,n){if(e===void 0)return;let o=te(e,n);if(Ee(o,Ne.list,n),o.actions!==void 0){let s=te(o.actions,`${n}/actions`);Ee(s,["import","export"],`${n}/actions`);for(let r of["import","export"])s[r]!==void 0&&typeof s[r]!="boolean"&&L("NATIVE_DATA_SURFACE_LIST_ACTION_INVALID",`${n}/actions/${r}`)}if(o.fieldOrder!==void 0)for(let s of he(o.fieldOrder,`${n}/fieldOrder`,500,!0))t.has(s)||L("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${n}/fieldOrder`);o.defaultPageSize!==void 0&&(!Number.isSafeInteger(o.defaultPageSize)||Number(o.defaultPageSize)<1||Number(o.defaultPageSize)>200)&&L("NATIVE_DATA_SURFACE_PAGE_SIZE_INVALID",`${n}/defaultPageSize`);for(let[s,r]of[["searchableFields",ut],["filterFields",Kt]]){if(o[s]===void 0)continue;let a=he(o[s],`${n}/${s}`,100,!0);for(let i of a){let c=t.get(i);(!c||!r(c.type))&&L("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${n}/${s}`)}}if(o.defaultSort!==void 0){let s=te(o.defaultSort,`${n}/defaultSort`);Ee(s,Ne.defaultSort,`${n}/defaultSort`);let r=Ie(s.field,`${n}/defaultSort/field`,63),a=t.get(r);!Gt(r)&&(!a||!we(a.type))&&L("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${n}/defaultSort/field`),s.order!==void 0&&!["asc","desc"].includes(s.order)&&L("NATIVE_DATA_SURFACE_SORT_ORDER_INVALID",`${n}/defaultSort/order`)}}function en(e,t,n,o){if(e===void 0)return;let s=te(e,n);if(Ee(s,Ne[o],n),s.layout!==void 0&&!["flat","sections"].includes(s.layout)&&L("NATIVE_DATA_SURFACE_LAYOUT_INVALID",`${n}/layout`),s.fieldOrder!==void 0){let r=`${n}/fieldOrder`;(!Array.isArray(s.fieldOrder)||s.fieldOrder.length>t.size||s.fieldOrder.length>To)&&L("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",r);let a=s.fieldOrder.map((i,c)=>Ie(i,`${r}/${c}`,63));new Set(a).size!==a.length&&L("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",r),a.forEach((i,c)=>{t.has(i)||L("NATIVE_DATA_SURFACE_FIELD_ORDER_FIELD_MISSING",`${r}/${c}`)})}o==="form"&&Qt(s.draftState,`${n}/draftState`)}function $o(e,t,n,o){e[n]===void 0&&t[n]===void 0||((e[n]===void 0||t[n]===void 0)&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${n}`),Q(e[n])!==Q(t[n])&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${n}`))}function Ro(e,t,n){let o=t.file||{},s={...e.maxCount===void 0?{}:{maxCount:e.maxCount},...e.maxSizeMb===void 0?{}:{maxSizeMb:e.maxSizeMb},...e.accept===void 0?{}:{accept:Et(e.accept)}};for(let r of["maxCount","maxSizeMb","accept"]){if(s[r]===void 0&&o[r]===void 0)continue;(s[r]===void 0||o[r]===void 0)&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${r}`);let a=r==="accept"?Et(s[r]):s[r],i=r==="accept"?Et(o[r]):o[r];Q(a)!==Q(i)&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${r}`)}}function Et(e){return(Array.isArray(e)?[...e]:[e]).sort((t,n)=>{let o=String(t),s=String(n);return o===s?0:o<s?-1:1})}function he(e,t,n,o){(!Array.isArray(e)||!o&&e.length===0||e.length>n)&&L("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let s=e.map((r,a)=>Ie(r,`${t}/${a}`,255));return new Set(s).size!==s.length&&L("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),s}function te(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&L("NATIVE_OBJECT_REQUIRED",t),e}function Ee(e,t,n){let o=new Set(t);for(let s of Object.keys(e))o.has(s)||L("NATIVE_PROPERTY_UNKNOWN",`${n}/${s}`)}function Ie(e,t,n){return(typeof e!="string"||e.length===0||e.length>n)&&L("NATIVE_STRING_INVALID",t),e}function ho(e,t,n){e!==void 0&&(typeof e!="string"||e.length>n)&&L("NATIVE_STRING_INVALID",t)}function pt(e,t){e!==void 0&&typeof e!="boolean"&&L("NATIVE_BOOLEAN_REQUIRED",t)}function L(e,t){throw new _e(e,t)}import{createHash as So}from"crypto";var mt=new Set(["option.single","user.single","department.single","resource-ref.single"]),Do=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","address","location","json"]),on=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image"]),yo=new Set(["option.single","user.single","department.single","resource-ref.single","signature","address","location"]),Vo=new Set([...mt,...on,"signature","address","location","json"]);function vi(e,t){let n=new Set([...Array.isArray(t?.list?.searchableFields)?t.list.searchableFields:[],...Object.entries(t?.fields||{}).filter(([,o])=>o?.searchable===!0).map(([o])=>o)]);return e.map(o=>Fo(o,n.has(o.code))).sort((o,s)=>o.code.localeCompare(s.code))}function Fo(e,t=!1){let n=e.type==="date-range"||e.type==="datetime-range";if(n&&e.rangeBoundary!=="closed"&&e.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");return{code:e.code,type:e.type,nullable:!0,indexed:e.indexed===!0,storage:Lo(e),index:Po(e,t),...n?{rangeBoundary:e.rangeBoundary}:{},...e.type==="serial-number"?{serial:{prefix:e.serial?.prefix||"",digits:e.serial?.digits??6,start:e.serial?.start??1}}:{},...e.type==="subtable"&&e.subtable?{subtable:{resourceCode:e.subtable.resourceCode,foreignKey:e.subtable.foreignKey,orderField:e.subtable.orderField,maxRows:e.subtable.maxRows??20}}:{}}}function ki(e,t){if(t.type==="subtable")return null;let n=oe(t.code),o=sn(e,t),s=[o?` DEFAULT ${o}`:"",vo(n,t),wo(n,t)].join("");return`${n} ${t.storage}${s}`}function xi(e,t){return sn(e,t)}function wo(e,t){if(t.type!=="date-range"&&t.type!=="datetime-range")return"";if(t.rangeBoundary!=="closed"&&t.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");let n=t.type==="datetime-range"&&t.rangeBoundary==="closed";return` CHECK (${e} IS NULL OR (NOT isempty(${e}) AND lower(${e}) IS NOT NULL AND upper(${e}) IS NOT NULL AND lower_inc(${e}) AND ${n?"":"NOT "}upper_inc(${e})))`}function Ui(e){return e.type==="serial-number"||Je(e.type)&&e.type!=="subtable"}function Mi(e,t){return t.filter(n=>n.type==="serial-number").map(n=>{let o=qe(e,n.code),s=n.serial?.start??1;return`CREATE SEQUENCE IF NOT EXISTS ${o} AS bigint MINVALUE ${s} START WITH ${s} CACHE 1`})}function ji(e,t){let n=Ye(e);return t.filter(o=>o.type==="serial-number").map(o=>`ALTER SEQUENCE ${qe(e,o.code)} OWNED BY ${n}.${oe(o.code)}`)}function Bi(e,t){return t.filter(n=>n.type==="serial-number").map(n=>`GRANT USAGE, SELECT ON SEQUENCE ${qe(e,n.code)} TO "openxiangda_data_api"`)}function Ji(e,t){let n=Ye(e),o=[];for(let s of t){if(s.type==="subtable")continue;let r=oe(s.code),a=oe(Te("idx",e,s.code,s.index));switch(s.index){case"btree":o.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${n} (${r})`);break;case"btree-snapshot-expressions":{let i=oe(Te("idx",e,s.code,"snapshot-value")),c=oe(Te("idx",e,s.code,"snapshot-label"));o.push(`CREATE INDEX IF NOT EXISTS ${i} ON ${n} ((${r} ->> 'value'))`,`CREATE INDEX IF NOT EXISTS ${c} ON ${n} ((${r} ->> 'label'))`);break}case"gin-jsonb-path":o.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${n} USING GIN (${r} jsonb_path_ops)`);break;case"gist-range":o.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${n} USING GIST (${r})`);break;case"gin-trigram":{let i=mt.has(s.type)?`((${r} ->> 'label')) gin_trgm_ops`:`${r} gin_trgm_ops`;o.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${n} USING GIN (${i})`);break}case"none":break}if(s.type==="serial-number"){let i=oe(Te("uidx",e,s.code,"serial"));o.push(`CREATE UNIQUE INDEX IF NOT EXISTS ${i} ON ${n} (${r})`)}}return o}function Wi(e,t,n,o){let s=Ye(e),r=Ye(t),a=oe(Te("uidx",e,"environment_id","subtable-parent")),i=oe(Te("idx",t,n,o,"subtable-child")),c=oe(Te("fk",t,n,e)),u=oe(n),E=oe(o);return[`CREATE UNIQUE INDEX IF NOT EXISTS ${a} ON ${s} ("tenant_id", "app_code", "environment_key", "id")`,`CREATE INDEX IF NOT EXISTS ${i} ON ${r} ("tenant_id", "app_code", "environment_key", ${u}, ${E}, "id")`,`DO $native_subtable$ BEGIN
+import{createHash as Kn}from"node:crypto";function Hn(e){if(!e||typeof e!="object")return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function ot(e,t){if(e===null)return"null";if(typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`JSON number must be finite: ${t}`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map((n,s)=>ot(n,`${t}[${s}]`)).join(",")}]`;if(Hn(e))return`{${Object.keys(e).filter(s=>e[s]!==void 0).sort((s,r)=>s===r?0:s<r?-1:1).map(s=>`${JSON.stringify(s)}:${ot(e[s],`${t}.${s}`)}`).join(",")}}`;let o=e instanceof Date?"Date":e?.constructor?.name||typeof e;throw new TypeError(`Value is not JSON serializable: ${t} (${o})`)}function Q(e){return ot(e,"$")}function ee(e){return Kn("sha256").update(Q(e)).digest("hex")}var Ut=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,rt=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,Xn=["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","date-range","datetime-range","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","image","signature","address","location","uuid","json","file","serial-number","subtable"],Qn=new Set(Xn),Mt=new Set(["option.multiple","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","subtable"]),vt=new Set(["option.single","option.multiple","cascade.single","cascade.multiple"]),kt=new Set(["resource-ref.single","resource-ref.multiple"]),at=[{code:"id",type:"uuid",nullable:!1},{code:"revision",type:"number.integer",nullable:!1},{code:"created_by",type:"text.short",nullable:!1},{code:"updated_by",type:"text.short",nullable:!1},{code:"created_at",type:"datetime",nullable:!1},{code:"updated_at",type:"datetime",nullable:!1}],Ei=new Map(at.map(e=>[e.code,e])),_e=class extends Error{constructor(o,n){super(o);this.code=o;this.pointer=n;this.name="NativeDataFieldContractV2Error"}code;pointer};function Je(e){return Mt.has(e)}function We(e,t={}){return e.type!=="serial-number"&&t.system!==!0&&e.nullable===!1&&(!Je(e.type)||t.requiredHint===!0)}function ct(e,t,o=500){Array.isArray(e)||h("NATIVE_ARRAY_REQUIRED",t),e.length===0&&h("NATIVE_DATA_FIELDS_REQUIRED",t),e.length>o&&h("NATIVE_ARRAY_LIMIT_EXCEEDED",t);let n=new Set;return e.map((s,r)=>{let c=`${t}/${r}`,i=ie(s,c);ae(i,["code","type","nullable","indexed","options","source","maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","timePrecision","file","serial","subtable"],c);let a=ce(i.code,`${c}/code`,63);Ut.test(a)||h("NATIVE_FIELD_CODE_INVALID",`${c}/code`),n.has(a)&&h("NATIVE_DATA_FIELD_DUPLICATE",`${c}/code`),n.add(a);let u=ce(i.type,`${c}/type`,32);Qn.has(u)||h("NATIVE_DATA_FIELD_TYPE_INVALID",`${c}/type`);let E=u,l=it(i.nullable,`${c}/nullable`),f=it(i.indexed,`${c}/indexed`);l===!0&&Mt.has(E)&&h("NATIVE_DATA_MULTI_FIELD_NULLABLE_INVALID",`${c}/nullable`);let p=to(i.options,E,c),_=no(i.source,E,c),A=so(i,E,c),m=it(i.exactDecimal,`${c}/exactDecimal`);m!==void 0&&E!=="number.decimal"&&h("NATIVE_DATA_FIELD_EXACT_DECIMAL_TYPE_INVALID",`${c}/exactDecimal`);let N=Zn(i.rangeBoundary,E,c),T=io(i.file,E,c),b=ro(i.serial,E,c),$=ao(i.subtable,E,c);return{code:a,type:E,...l===void 0?{}:{nullable:l},...f===void 0?{}:{indexed:f},...p?{options:p}:{},..._?{source:_}:{},...A,...m===void 0?{}:{exactDecimal:m},...N?{rangeBoundary:N}:{},...T?{file:T}:{},...b?{serial:b}:{},...$?{subtable:$}:{}}})}function Zn(e,t,o){let n=`${o}/rangeBoundary`;if(!(t==="date-range"||t==="datetime-range")){e!==void 0&&h("NATIVE_DATA_FIELD_RANGE_BOUNDARY_TYPE_INVALID",n);return}return e!=="closed"&&e!=="half-open"&&h("NATIVE_DATA_FIELD_RANGE_BOUNDARY_REQUIRED",n),e}function jt(e,t){Array.isArray(e)||h("NATIVE_ARRAY_REQUIRED",t);let o=new Map;e.forEach((n,s)=>{let r=`${t}/${s}`,c=ie(n,r),i=ce(c.code,`${r}/code`,64);(!rt.test(i)||o.has(i))&&h("NATIVE_RESOURCE_CODE_INVALID",`${r}/code`);let a=ie(c.schema,`${r}/schema`);o.set(i,{pointer:r,fields:ct(a.fields,`${r}/schema/fields`)})});for(let[n,s]of o){let r=new Map(s.fields.map(i=>[i.code,i]));s.fields.filter(i=>i.type==="subtable").reduce((i,a)=>i+(a.subtable?.maxRows??20),0)>49&&h("NATIVE_DATA_FIELD_SUBTABLE_AGGREGATE_MAX_ROWS_EXCEEDED",`${s.pointer}/schema/fields`),s.fields.forEach((i,a)=>{let u=`${s.pointer}/schema/fields/${a}`;if(i.source&&eo(i.source,r,o,`${u}/source`),i.subtable){let E=o.get(i.subtable.resourceCode);(!E||i.subtable.resourceCode===n)&&h("NATIVE_DATA_FIELD_SUBTABLE_TARGET_MISSING",`${u}/subtable/resourceCode`);let l=E.fields.find(p=>p.code===i.subtable?.foreignKey);(!l||l.type!=="uuid"||l.nullable!==!1)&&h("NATIVE_DATA_FIELD_SUBTABLE_FOREIGN_KEY_INVALID",`${u}/subtable/foreignKey`);let f=E.fields.find(p=>p.code===i.subtable?.orderField);(!f||f.type!=="number.integer"||f.nullable!==!1)&&h("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${u}/subtable/orderField`)}})}}function Bt(e,t,o){if(e===void 0)return[];(!Array.isArray(e)||e.length>20)&&h("NATIVE_DATA_RESOURCE_INVARIANTS_INVALID",o);let n=new Map(t.map(r=>[r.code,r])),s=new Set;return e.map((r,c)=>{let i=`${o}/${c}`,a=ie(r,i);ae(a,["code","message","expression"],i);let u=ce(a.code,`${i}/code`,128);(!/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/.test(u)||s.has(u))&&h("NATIVE_DATA_RESOURCE_INVARIANT_CODE_INVALID",`${i}/code`),s.add(u);let E=Be(a.message,`${i}/message`,500);E!==void 0&&E.length===0&&h("NATIVE_DATA_RESOURCE_INVARIANT_MESSAGE_INVALID",`${i}/message`);let l=ie(a.expression,`${i}/expression`);if(l.kind==="nonBlankTextWhenOption"){ae(l,["kind","optionField","optionValue","textField"],`${i}/expression`);let T=fe(l.optionField,`${i}/expression/optionField`),b=fe(l.textField,`${i}/expression/textField`),$=ce(l.optionValue,`${i}/expression/optionValue`,128),g=n.get(T),C=n.get(b);return(!g||!C)&&h("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${i}/expression`),(g.type!=="option.single"||!["text.short","text.long"].includes(C.type)||!g.options?.some(D=>D.value===$))&&h("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${i}/expression`),{code:u,...E===void 0?{}:{message:E},expression:{kind:"nonBlankTextWhenOption",optionField:T,optionValue:$,textField:b}}}ae(l,["leftField","operator","rightField"],`${i}/expression`);let f=fe(l.leftField,`${i}/expression/leftField`),p=fe(l.rightField,`${i}/expression/rightField`),_=n.get(f),A=n.get(p);(!_||!A)&&h("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${i}/expression`),_.type===A.type||["number.integer","number.decimal"].includes(_.type)&&["number.integer","number.decimal"].includes(A.type)||h("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${i}/expression`);let N=String(l.operator);return["eq","neq","gt","gte","lt","lte"].includes(N)||h("NATIVE_DATA_RESOURCE_INVARIANT_OPERATOR_INVALID",`${i}/expression/operator`),!["eq","neq"].includes(N)&&!["number.integer","number.decimal","date","time","datetime","text.short","text.long","text.rich","serial-number","uuid"].includes(_.type)&&h("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${i}/expression`),{code:u,...E===void 0?{}:{message:E},expression:{leftField:f,operator:N,rightField:p}}})}function eo(e,t,o,n){let s=o.get(e.resourceCode);s||h("NATIVE_DATA_FIELD_SOURCE_TARGET_MISSING",`${n}/resourceCode`);let r=new Map(s.fields.map(i=>[i.code,i])),c=r.get(e.labelField);(!c||!["text.short","text.long"].includes(c.type))&&h("NATIVE_DATA_FIELD_SOURCE_LABEL_INVALID",`${n}/labelField`);for(let i of["searchFields","descriptionFields","snapshotFields"])for(let a of e[i]||[])r.has(a)||h("NATIVE_DATA_FIELD_SOURCE_FIELD_MISSING",`${n}/${i}`);for(let[i,a]of(e.filters||[]).entries())r.has(a.field)||h("NATIVE_DATA_FIELD_SOURCE_FILTER_FIELD_MISSING",`${n}/filters/${i}/field`),"binding"in a&&!t.has(a.binding.field)&&h("NATIVE_DATA_FIELD_SOURCE_BINDING_FIELD_MISSING",`${n}/filters/${i}/binding/field`)}function to(e,t,o){let n=`${o}/options`;if(e===void 0){vt.has(t)&&h("NATIVE_DATA_FIELD_OPTIONS_REQUIRED",n);return}(!vt.has(t)||!Array.isArray(e))&&h("NATIVE_DATA_FIELD_OPTIONS_TYPE_INVALID",n),(e.length<1||e.length>100)&&h("NATIVE_DATA_FIELD_OPTIONS_INVALID",n);let s=0,r=(c,i,a)=>{a>5&&h("NATIVE_DATA_FIELD_OPTIONS_DEPTH_EXCEEDED",i);let u=new Set;return c.map((E,l)=>{s+=1,s>1e3&&h("NATIVE_DATA_FIELD_OPTIONS_COUNT_EXCEEDED",n);let f=`${i}/${l}`,p=ie(E,f);ae(p,["label","value","description","color","children"],f);let _=ce(p.label,`${f}/label`,500),A=ce(p.value,`${f}/value`,500);u.has(A)&&h("NATIVE_DATA_FIELD_OPTION_VALUE_DUPLICATE",`${f}/value`),u.add(A);let m=Be(p.description,`${f}/description`,2e3),N=Be(p.color,`${f}/color`,64),T;return p.children!==void 0&&((!t.startsWith("cascade.")||!Array.isArray(p.children))&&h("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${f}/children`),(p.children.length<1||p.children.length>100)&&h("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${f}/children`),T=r(p.children,`${f}/children`,a+1)),{label:_,value:A,...m===void 0?{}:{description:m},...N===void 0?{}:{color:N},...T?{children:T}:{}}})};return r(e,n,1)}function no(e,t,o){let n=`${o}/source`;if(e===void 0){kt.has(t)&&h("NATIVE_DATA_FIELD_SOURCE_REQUIRED",n);return}kt.has(t)||h("NATIVE_DATA_FIELD_SOURCE_TYPE_INVALID",n);let s=ie(e,n);ae(s,["kind","resourceCode","labelField","searchFields","descriptionFields","snapshotFields","filters","pageSize","loadMode"],n),s.kind!=="resource"&&h("NATIVE_DATA_FIELD_SOURCE_KIND_INVALID",`${n}/kind`);let r=ce(s.resourceCode,`${n}/resourceCode`,64);rt.test(r)||h("NATIVE_RESOURCE_CODE_INVALID",`${n}/resourceCode`);let c=fe(s.labelField,`${n}/labelField`),i=st(s.searchFields,`${n}/searchFields`,10),a=st(s.descriptionFields,`${n}/descriptionFields`,10),u=st(s.snapshotFields,`${n}/snapshotFields`,50),E=$e(s.pageSize,`${n}/pageSize`,1,100),l;s.loadMode!==void 0&&(["search","all"].includes(String(s.loadMode))||h("NATIVE_DATA_FIELD_SOURCE_LOAD_MODE_INVALID",`${n}/loadMode`),l=s.loadMode);let f=oo(s.filters,`${n}/filters`);return{kind:"resource",resourceCode:r,labelField:c,...i?{searchFields:i}:{},...a?{descriptionFields:a}:{},...u?{snapshotFields:u}:{},...f?{filters:f}:{},...E===void 0?{}:{pageSize:E},...l?{loadMode:l}:{}}}function oo(e,t){if(e!==void 0)return(!Array.isArray(e)||e.length>20)&&h("NATIVE_DATA_FIELD_SOURCE_FILTERS_INVALID",t),e.map((o,n)=>{let s=`${t}/${n}`,r=ie(o,s),c=Object.prototype.hasOwnProperty.call(r,"value"),i=Object.prototype.hasOwnProperty.call(r,"binding");ae(r,c?["field","operator","value"]:["field","operator","binding"],s),c===i&&h("NATIVE_DATA_FIELD_SOURCE_FILTER_VALUE_INVALID",s);let a=fe(r.field,`${s}/field`);["eq","in"].includes(String(r.operator))||h("NATIVE_DATA_FIELD_SOURCE_FILTER_OPERATOR_INVALID",`${s}/operator`);let u=r.operator;if(c)return{field:a,operator:u,value:r.value};let E=ie(r.binding,`${s}/binding`);return ae(E,["kind","field"],`${s}/binding`),E.kind!=="field"&&h("NATIVE_DATA_FIELD_SOURCE_BINDING_KIND_INVALID",`${s}/binding/kind`),{field:a,operator:u,binding:{kind:"field",field:fe(E.field,`${s}/binding/field`)}}})}function so(e,t,o){let n={};if(e.maxLength!==void 0&&(["text.short","text.long","text.rich"].includes(t)||h("NATIVE_DATA_FIELD_MAX_LENGTH_TYPE_INVALID",`${o}/maxLength`),n.maxLength=je(e.maxLength,`${o}/maxLength`,1,1e6)),(e.precision!==void 0||e.scale!==void 0)&&((t!=="number.decimal"||e.precision===void 0)&&h("NATIVE_DATA_FIELD_DECIMAL_CONFIG_INVALID",o),n.precision=je(e.precision,`${o}/precision`,1,1e3),n.scale=e.scale===void 0?0:je(e.scale,`${o}/scale`,0,n.precision)),e.min!==void 0||e.max!==void 0){["number.integer","number.decimal"].includes(t)||h("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_TYPE_INVALID",o);let s=xt(e.min,`${o}/min`),r=xt(e.max,`${o}/max`);t==="number.integer"&&[s,r].some(c=>c!==void 0&&!Number.isSafeInteger(c))&&h("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",o),s!==void 0&&r!==void 0&&s>r&&h("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",o),s!==void 0&&(n.min=s),r!==void 0&&(n.max=r)}return e.timePrecision!==void 0&&((t!=="time"||!["minute","second"].includes(e.timePrecision))&&h("NATIVE_DATA_FIELD_TIME_PRECISION_INVALID",`${o}/timePrecision`),n.timePrecision=e.timePrecision),n}function io(e,t,o){if(e===void 0)return;let n=`${o}/file`;["file","image","signature"].includes(t)||h("NATIVE_DATA_FIELD_FILE_TYPE_INVALID",n);let s=ie(e,n);ae(s,["maxCount","maxSizeMb","accept"],n);let r=$e(s.maxCount,`${n}/maxCount`,1,100);t==="signature"&&r!==void 0&&r!==1&&h("NATIVE_DATA_FIELD_SIGNATURE_COUNT_INVALID",`${n}/maxCount`);let c=$e(s.maxSizeMb,`${n}/maxSizeMb`,1,1024),i;return s.accept!==void 0&&((!Array.isArray(s.accept)||s.accept.length>50)&&h("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${n}/accept`),i=s.accept.map((a,u)=>ce(a,`${n}/accept/${u}`,255)),new Set(i).size!==i.length&&h("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${n}/accept`)),{...r===void 0?{}:{maxCount:r},...c===void 0?{}:{maxSizeMb:c},...i===void 0?{}:{accept:i}}}function ro(e,t,o){let n=`${o}/serial`;if(e===void 0){t==="serial-number"&&h("NATIVE_DATA_FIELD_SERIAL_REQUIRED",n);return}t!=="serial-number"&&h("NATIVE_DATA_FIELD_SERIAL_TYPE_INVALID",n);let s=ie(e,n);ae(s,["prefix","digits","start"],n);let r=Be(s.prefix,`${n}/prefix`,64),c=$e(s.digits,`${n}/digits`,1,32),i=$e(s.start,`${n}/start`,0,Number.MAX_SAFE_INTEGER);return{...r===void 0?{}:{prefix:r},...c===void 0?{}:{digits:c},...i===void 0?{}:{start:i}}}function ao(e,t,o){let n=`${o}/subtable`;if(e===void 0){t==="subtable"&&h("NATIVE_DATA_FIELD_SUBTABLE_REQUIRED",n);return}t!=="subtable"&&h("NATIVE_DATA_FIELD_SUBTABLE_TYPE_INVALID",n);let s=ie(e,n);ae(s,["resourceCode","foreignKey","orderField","maxRows"],n);let r=ce(s.resourceCode,`${n}/resourceCode`,64);rt.test(r)||h("NATIVE_RESOURCE_CODE_INVALID",`${n}/resourceCode`);let c=fe(s.foreignKey,`${n}/foreignKey`),i=fe(s.orderField,`${n}/orderField`);i===c&&h("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${n}/orderField`);let a=$e(s.maxRows,`${n}/maxRows`,1,49);return{resourceCode:r,foreignKey:c,orderField:i,...a===void 0?{}:{maxRows:a}}}function st(e,t,o){if(e===void 0)return;(!Array.isArray(e)||e.length>o)&&h("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t);let n=e.map((s,r)=>fe(s,`${t}/${r}`));return new Set(n).size!==n.length&&h("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t),n}function fe(e,t){let o=ce(e,t,63);return Ut.test(o)||h("NATIVE_FIELD_CODE_INVALID",t),o}function ie(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&h("NATIVE_OBJECT_REQUIRED",t),e}function ae(e,t,o){let n=new Set(t);for(let s of Object.keys(e))n.has(s)||h("NATIVE_PROPERTY_UNKNOWN",`${o}/${s}`)}function ce(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&h("NATIVE_STRING_INVALID",t),e}function Be(e,t,o){if(e!==void 0)return(typeof e!="string"||e.length>o)&&h("NATIVE_STRING_INVALID",t),e}function it(e,t){if(e!==void 0)return typeof e!="boolean"&&h("NATIVE_BOOLEAN_REQUIRED",t),e}function $e(e,t,o,n){if(e!==void 0)return je(e,t,o,n)}function xt(e,t){if(e!==void 0)return(typeof e!="number"||!Number.isFinite(e))&&h("NATIVE_NUMBER_REQUIRED",t),e}function je(e,t,o,n){return(!Number.isSafeInteger(e)||Number(e)<o||Number(e)>n)&&h("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function h(e,t){throw new _e(e,t)}var Jt=["created_by","updated_by","created_at","updated_at"];function Ve(e){return Jt.includes(e)}function Wt(e){return Jt.some(t=>Object.prototype.hasOwnProperty.call(e.fieldPolicies||{},t))}var co=at.map(e=>e.code);function Gt(e){return co.includes(e)}var lo=["eq","neq","gt","gte","lt","lte","contains","startsWith","endsWith","in","between","has","hasAny","hasAll","overlaps","containedBy","jsonContains","isEmpty","isNotEmpty"],uo=new Set(lo);function mi(e){return uo.has(String(e))}var dt=["eq","neq","contains","startsWith","endsWith","in","isEmpty","isNotEmpty"],Fe=["eq","neq","gt","gte","lt","lte","between","in","isEmpty"],fo=["eq","neq","in","isEmpty"],Ge=["eq","neq","in","isEmpty","isNotEmpty"],Re=["has","hasAny","hasAll","isEmpty","isNotEmpty"],zt=["overlaps","contains","containedBy","isEmpty"],lt=["jsonContains","isEmpty","isNotEmpty"],ut=["isEmpty","isNotEmpty"],_o={"text.short":dt,"text.long":dt,"text.rich":dt,"number.integer":Fe,"number.decimal":Fe,boolean:fo,date:Fe,time:Fe,datetime:Fe,"date-range":zt,"datetime-range":zt,"option.single":Ge,"option.multiple":Re,"cascade.single":Re,"cascade.multiple":Re,"user.single":Ge,"user.multiple":Re,"department.single":Ge,"department.multiple":Re,"resource-ref.single":Ge,"resource-ref.multiple":Re,file:ut,image:ut,signature:ut,address:lt,location:lt,uuid:["eq","neq","in","isEmpty"],json:lt,"serial-number":["eq","neq","in","contains","startsWith"],subtable:[]},Eo=new Set(["text.short","text.long","text.rich","option.single","user.single","department.single","resource-ref.single","serial-number"]),po=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","signature","address","location","json","subtable"]);function qt(e){return _o[e]}function Ni(e,t){return qt(e).includes(t)}function ft(e){return Eo.has(e)}function we(e){return!po.has(e)}function Kt(e){return qt(e).length>0}var Yt=new Set(["number.integer","number.decimal"]),Ht=new Set(["text.short","text.long","number.integer","number.decimal","date","time","datetime","serial-number"]),Ao=new Set([...Ht,"boolean","uuid"]),Io=new Set(["option.single","user.single","department.single","resource-ref.single"]);function Ti(e,t){return t==="sum"||t==="avg"?Yt.has(e)?{valueExpression:"column",numericResult:!0}:null:t==="min"||t==="max"?Ht.has(e)?{valueExpression:"column",numericResult:Yt.has(e)}:null:Io.has(e)?{valueExpression:"snapshot-value",numericResult:!0}:Ao.has(e)?{valueExpression:"column",numericResult:!0}:null}var Et=["version","maxBytes","fields"];function Qt(e,t){if(e===void 0)return;let o=_t(e,t);Xt(o,Et,t);let n=ze(o.version,`${t}/version`,1,1e6),s=ze(o.maxBytes,`${t}/maxBytes`,2,196608);(!n||!s)&&ne("NATIVE_DATA_DRAFT_STATE_SCHEMA_INVALID",t);let r=_t(o.fields,`${t}/fields`),c=Object.entries(r);(!c.length||c.length>50)&&ne("NATIVE_DATA_DRAFT_STATE_FIELDS_INVALID",`${t}/fields`);for(let[i,a]of c){let u=`${t}/fields/${i}`;/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(i)||ne("NATIVE_DATA_DRAFT_STATE_FIELD_CODE_INVALID",u);let E=_t(a,u),l=Zt(E.type,`${u}/type`,32),f=l==="string"?["type","required","maxLength","enum"]:l==="json.object"?["type","required","maxBytes"]:["type","required"];if(["string","number","integer","boolean","json.object"].includes(l)||ne("NATIVE_DATA_DRAFT_STATE_FIELD_TYPE_INVALID",`${u}/type`),Xt(E,f,u),No(E.required,`${u}/required`),l==="string"){let p=ze(E.maxLength,`${u}/maxLength`,1,196608);p||ne("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",u),E.enum!==void 0&&mo(E.enum,`${u}/enum`,100,!1).some(A=>A.length>p)&&ne("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",`${u}/enum`)}else if(l==="json.object"){let p=ze(E.maxBytes,`${u}/maxBytes`,2,65536);(!p||p>s)&&ne("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",u)}}}function mo(e,t,o,n){(!Array.isArray(e)||!n&&e.length===0||e.length>o)&&ne("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let s=e.map((r,c)=>Zt(r,`${t}/${c}`,255));return new Set(s).size!==s.length&&ne("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),s}function _t(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&ne("NATIVE_OBJECT_REQUIRED",t),e}function Xt(e,t,o){let n=new Set(t);for(let s of Object.keys(e))n.has(s)||ne("NATIVE_PROPERTY_UNKNOWN",`${o}/${s}`)}function Zt(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&ne("NATIVE_STRING_INVALID",t),e}function No(e,t){e!==void 0&&typeof e!="boolean"&&ne("NATIVE_BOOLEAN_REQUIRED",t)}function ze(e,t,o,n){return(!Number.isSafeInteger(e)||Number(e)<o||Number(e)>n)&&ne("NATIVE_INTEGER_INVALID",t),Number(e)}function ne(e,t){throw new _e(e,t)}var To=500,Ne={surface:["mutationOwner","generated","fields","list","form","detail","mobile","views"],generated:["list","detail","create","update","delete"],field:["label","type","widget","section","requiredHint","system","hidden","readCapabilities","createCapabilities","updateCapabilities","maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","maxCount","maxSizeMb","accept","options","list","searchable","sortable","source","timePrecision","serial","subtable"],list:["actions","fieldOrder","defaultPageSize","searchableFields","filterFields","defaultSort"],defaultSort:["field","order"],form:["layout","fieldOrder","draftState"],detail:["layout","fieldOrder"],layout:["layout","fieldOrder","draftState"],draftState:Et,mobile:["enabled"]},go={"text.short":["text","email","phone"],"text.long":["textarea"],"text.rich":["rich-text"],"number.integer":["number","rating"],"number.decimal":["number","money","percent"],boolean:["switch"],date:["date"],time:["time"],datetime:["datetime"],"date-range":["date-range"],"datetime-range":["datetime-range"],"option.single":["select","radio"],"option.multiple":["multi-select","checkbox"],"cascade.single":["cascade"],"cascade.multiple":["cascade"],"user.single":["directory-user"],"user.multiple":["directory-user"],"department.single":["directory-department","scope"],"department.multiple":["directory-department","scope"],"resource-ref.single":["select","radio","resource"],"resource-ref.multiple":["multi-select","checkbox","resource"],file:["attachment"],image:["image"],signature:["signature"],address:["address"],location:["location"],uuid:["readonly"],json:["json"],"serial-number":["readonly"],subtable:["subtable"]};function It(e,t,o){if(e===void 0)return;let n=te(e,o);Ee(n,Ne.surface,o);let s=n.mutationOwner===void 0?"native":Ie(n.mutationOwner,`${o}/mutationOwner`,16);["native","action","readonly","workflow"].includes(s)||L("NATIVE_DATA_SURFACE_MUTATION_OWNER_INVALID",`${o}/mutationOwner`);let r=n.generated===void 0?{}:te(n.generated,`${o}/generated`);Ee(r,Ne.generated,`${o}/generated`);for(let a of Ne.generated)At(r[a],`${o}/generated/${a}`);if(s!=="native")for(let a of["create","update","delete"])r[a]===!0&&L("NATIVE_DATA_SURFACE_MUTATION_OWNER_CONFLICT",`${o}/generated/${a}`);let c=new Map(t.map(a=>[a.code,a])),i=te(n.fields,`${o}/fields`);for(let a of Object.keys(i))c.has(a)||L("NATIVE_DATA_SURFACE_FIELD_MISSING",`${o}/fields/${a}`);for(let a of t)Object.prototype.hasOwnProperty.call(i,a.code)||L("NATIVE_DATA_SURFACE_FIELD_REQUIRED",`${o}/fields/${a.code}`),bo(i[a.code],a,`${o}/fields/${a.code}`);for(let a of["create","update"]){let u=r[a]??s==="native",E=t.some(l=>{let f=te(i[l.code],`${o}/fields/${l.code}`);return tn(l,f,a)});u&&!E&&L("NATIVE_DATA_SURFACE_WRITABLE_FIELDS_REQUIRED",`${o}/generated/${a}`)}if(Oo(n.list,c,`${o}/list`),en(n.form,c,`${o}/form`,"form"),en(n.detail,c,`${o}/detail`,"detail"),n.mobile!==void 0){let a=te(n.mobile,`${o}/mobile`);Ee(a,Ne.mobile,`${o}/mobile`),At(a.enabled,`${o}/mobile/enabled`)}Co(n,t,o)}function mt(e,t){let o=e.views?.find(s=>s.code===t);o||L("NATIVE_DATA_VIEW_NOT_FOUND",`/surface/views/${t}`);let n=new Map((o.sections||[]).flatMap(s=>s.fields.map(r=>[r,s.title])));return{mutationOwner:e.mutationOwner||"native",generated:o.generated,list:o.list,form:o.form,detail:o.detail,mobile:o.mobile,fields:Object.fromEntries(Object.entries(e.fields).map(([s,r])=>{let c={...r};delete c.section;let i=n.get(s);return[s,{...c,...i?{section:i}:{},list:o.list.fieldOrder.includes(s)}]}))}}function Co(e,t,o){if(e.views===void 0)return;(!Array.isArray(e.views)||e.views.length>20)&&L("NATIVE_DATA_VIEWS_LIMIT_INVALID",`${o}/views`);let n=new Set;e.views.forEach((s,r)=>{let c=`${o}/views/${r}`,i=te(s,c);Ee(i,["code","name","generated","list","form","detail","mobile","sections"],c);let a=Ie(i.code,`${c}/code`,64);(!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(a)||n.has(a))&&L("NATIVE_DATA_VIEW_CODE_INVALID",`${c}/code`),n.add(a),Ie(i.name,`${c}/name`,255),te(i.generated,`${c}/generated`),te(i.mobile,`${c}/mobile`);for(let E of["list","detail","create","update","delete"])typeof i.generated[E]!="boolean"&&L("NATIVE_DATA_VIEW_OPERATION_INVALID",`${c}/generated/${E}`);typeof i.mobile.enabled!="boolean"&&L("NATIVE_DATA_VIEW_MOBILE_INVALID",`${c}/mobile/enabled`);for(let E of["list","form","detail"]){let l=te(i[E],`${c}/${E}`),f=Se(l.fieldOrder,`${c}/${E}/fieldOrder`,500,!0);for(let p of f){let _=e.fields[p];(!_||(_.hidden??_.system)===!0)&&L("NATIVE_DATA_VIEW_FIELD_INVALID",`${c}/${E}/fieldOrder`)}}if(i.sections!==void 0){(!Array.isArray(i.sections)||i.sections.length>100)&&L("NATIVE_DATA_VIEW_SECTIONS_INVALID",`${c}/sections`);let E=new Set;i.sections.forEach((l,f)=>{let p=`${c}/sections/${f}`,_=te(l,p);Ee(_,["title","fields"],p),Ie(_.title,`${p}/title`,255);for(let A of Se(_.fields,`${p}/fields`,100,!0)){let m=e.fields[A];(!m||(m.hidden??m.system)===!0||E.has(A))&&L("NATIVE_DATA_VIEW_FIELD_INVALID",`${p}/fields`),E.add(A)}})}let u=mt(e,a);if(It(u,t,c),i.generated.create!==!1&&(e.mutationOwner||"native")==="native")for(let E of t)We(E,e.fields[E.code])&&tn(E,e.fields[E.code],"create")&&!i.form.fieldOrder.includes(E.code)&&L("NATIVE_DATA_VIEW_CREATE_REQUIRED_FIELD_MISSING",`${c}/form/fieldOrder`)})}function tn(e,t,o){if(e.type==="serial-number"||t.system===!0)return!1;let n=t[`${o}Capabilities`];return Array.isArray(n)&&n.length>0}function bo(e,t,o){let n=te(e,o);Ee(n,Ne.field,o),Ie(n.label,`${o}/label`,500),n.type!==t.type&&L("NATIVE_DATA_SURFACE_FIELD_TYPE_MISMATCH",`${o}/type`);let s=Ie(n.widget,`${o}/widget`,64);go[t.type].includes(s)||L("NATIVE_DATA_SURFACE_WIDGET_INCOMPATIBLE",`${o}/widget`),So(n.section,`${o}/section`,255);for(let r of["requiredHint","system","hidden","list","searchable","sortable"])At(n[r],`${o}/${r}`);n.searchable===!0&&!ft(t.type)&&L("NATIVE_DATA_SURFACE_SEARCH_UNSUPPORTED",`${o}/searchable`),n.sortable===!0&&!we(t.type)&&L("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${o}/sortable`);for(let r of["readCapabilities","createCapabilities","updateCapabilities"])Se(n[r],`${o}/${r}`,100,!0);if(n.maxCount!==void 0&&(!Number.isSafeInteger(n.maxCount)||Number(n.maxCount)<1||Number(n.maxCount)>100)&&L("NATIVE_DATA_SURFACE_MAX_COUNT_INVALID",`${o}/maxCount`),n.maxSizeMb!==void 0&&(!Number.isSafeInteger(n.maxSizeMb)||Number(n.maxSizeMb)<1||Number(n.maxSizeMb)>1024)&&L("NATIVE_DATA_SURFACE_MAX_SIZE_INVALID",`${o}/maxSizeMb`),n.accept!==void 0){let r=Array.isArray(n.accept)?n.accept:[n.accept];Se(r,`${o}/accept`,50,!1)}for(let r of["maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","options","source","timePrecision","serial","subtable"])$o(n,t,r,o);Ro(n,t,o)}function Oo(e,t,o){if(e===void 0)return;let n=te(e,o);if(Ee(n,Ne.list,o),n.actions!==void 0){let s=te(n.actions,`${o}/actions`);Ee(s,["import","export"],`${o}/actions`);for(let r of["import","export"])s[r]!==void 0&&typeof s[r]!="boolean"&&L("NATIVE_DATA_SURFACE_LIST_ACTION_INVALID",`${o}/actions/${r}`)}if(n.fieldOrder!==void 0)for(let s of Se(n.fieldOrder,`${o}/fieldOrder`,500,!0))t.has(s)||L("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${o}/fieldOrder`);n.defaultPageSize!==void 0&&(!Number.isSafeInteger(n.defaultPageSize)||Number(n.defaultPageSize)<1||Number(n.defaultPageSize)>200)&&L("NATIVE_DATA_SURFACE_PAGE_SIZE_INVALID",`${o}/defaultPageSize`);for(let[s,r]of[["searchableFields",ft],["filterFields",Kt]]){if(n[s]===void 0)continue;let c=Se(n[s],`${o}/${s}`,100,!0);for(let i of c){let a=t.get(i);(!a||!r(a.type))&&L("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${o}/${s}`)}}if(n.defaultSort!==void 0){let s=te(n.defaultSort,`${o}/defaultSort`);Ee(s,Ne.defaultSort,`${o}/defaultSort`);let r=Ie(s.field,`${o}/defaultSort/field`,63),c=t.get(r);!Gt(r)&&(!c||!we(c.type))&&L("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${o}/defaultSort/field`),s.order!==void 0&&!["asc","desc"].includes(s.order)&&L("NATIVE_DATA_SURFACE_SORT_ORDER_INVALID",`${o}/defaultSort/order`)}}function en(e,t,o,n){if(e===void 0)return;let s=te(e,o);if(Ee(s,Ne[n],o),s.layout!==void 0&&!["flat","sections"].includes(s.layout)&&L("NATIVE_DATA_SURFACE_LAYOUT_INVALID",`${o}/layout`),s.fieldOrder!==void 0){let r=`${o}/fieldOrder`;(!Array.isArray(s.fieldOrder)||s.fieldOrder.length>t.size||s.fieldOrder.length>To)&&L("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",r);let c=s.fieldOrder.map((i,a)=>Ie(i,`${r}/${a}`,63));new Set(c).size!==c.length&&L("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",r),c.forEach((i,a)=>{t.has(i)||L("NATIVE_DATA_SURFACE_FIELD_ORDER_FIELD_MISSING",`${r}/${a}`)})}n==="form"&&Qt(s.draftState,`${o}/draftState`)}function $o(e,t,o,n){e[o]===void 0&&t[o]===void 0||((e[o]===void 0||t[o]===void 0)&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${o}`),Q(e[o])!==Q(t[o])&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${o}`))}function Ro(e,t,o){let n=t.file||{},s={...e.maxCount===void 0?{}:{maxCount:e.maxCount},...e.maxSizeMb===void 0?{}:{maxSizeMb:e.maxSizeMb},...e.accept===void 0?{}:{accept:pt(e.accept)}};for(let r of["maxCount","maxSizeMb","accept"]){if(s[r]===void 0&&n[r]===void 0)continue;(s[r]===void 0||n[r]===void 0)&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${r}`);let c=r==="accept"?pt(s[r]):s[r],i=r==="accept"?pt(n[r]):n[r];Q(c)!==Q(i)&&L("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${r}`)}}function pt(e){return(Array.isArray(e)?[...e]:[e]).sort((t,o)=>{let n=String(t),s=String(o);return n===s?0:n<s?-1:1})}function Se(e,t,o,n){(!Array.isArray(e)||!n&&e.length===0||e.length>o)&&L("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let s=e.map((r,c)=>Ie(r,`${t}/${c}`,255));return new Set(s).size!==s.length&&L("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),s}function te(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&L("NATIVE_OBJECT_REQUIRED",t),e}function Ee(e,t,o){let n=new Set(t);for(let s of Object.keys(e))n.has(s)||L("NATIVE_PROPERTY_UNKNOWN",`${o}/${s}`)}function Ie(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&L("NATIVE_STRING_INVALID",t),e}function So(e,t,o){e!==void 0&&(typeof e!="string"||e.length>o)&&L("NATIVE_STRING_INVALID",t)}function At(e,t){e!==void 0&&typeof e!="boolean"&&L("NATIVE_BOOLEAN_REQUIRED",t)}function L(e,t){throw new _e(e,t)}import{createHash as ho}from"crypto";var Nt=new Set(["option.single","user.single","department.single","resource-ref.single"]),Do=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","address","location","json"]),on=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image"]),yo=new Set(["option.single","user.single","department.single","resource-ref.single","signature","address","location"]),Vo=new Set([...Nt,...on,"signature","address","location","json"]);function vi(e,t){let o=new Set([...Array.isArray(t?.list?.searchableFields)?t.list.searchableFields:[],...Object.entries(t?.fields||{}).filter(([,n])=>n?.searchable===!0).map(([n])=>n)]);return e.map(n=>Fo(n,o.has(n.code))).sort((n,s)=>n.code.localeCompare(s.code))}function Fo(e,t=!1){let o=e.type==="date-range"||e.type==="datetime-range";if(o&&e.rangeBoundary!=="closed"&&e.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");return{code:e.code,type:e.type,nullable:!0,indexed:e.indexed===!0,storage:Lo(e),index:Po(e,t),...o?{rangeBoundary:e.rangeBoundary}:{},...e.type==="serial-number"?{serial:{prefix:e.serial?.prefix||"",digits:e.serial?.digits??6,start:e.serial?.start??1}}:{},...e.type==="subtable"&&e.subtable?{subtable:{resourceCode:e.subtable.resourceCode,foreignKey:e.subtable.foreignKey,orderField:e.subtable.orderField,maxRows:e.subtable.maxRows??20}}:{}}}function ki(e,t){if(t.type==="subtable")return null;let o=oe(t.code),n=sn(e,t),s=[n?` DEFAULT ${n}`:"",vo(o,t),wo(o,t)].join("");return`${o} ${t.storage}${s}`}function xi(e,t){return sn(e,t)}function wo(e,t){if(t.type!=="date-range"&&t.type!=="datetime-range")return"";if(t.rangeBoundary!=="closed"&&t.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");let o=t.type==="datetime-range"&&t.rangeBoundary==="closed";return` CHECK (${e} IS NULL OR (NOT isempty(${e}) AND lower(${e}) IS NOT NULL AND upper(${e}) IS NOT NULL AND lower_inc(${e}) AND ${o?"":"NOT "}upper_inc(${e})))`}function Ui(e){return e.type==="serial-number"||Je(e.type)&&e.type!=="subtable"}function Mi(e,t){return t.filter(o=>o.type==="serial-number").map(o=>{let n=qe(e,o.code),s=o.serial?.start??1;return`CREATE SEQUENCE IF NOT EXISTS ${n} AS bigint MINVALUE ${s} START WITH ${s} CACHE 1`})}function ji(e,t){let o=Ye(e);return t.filter(n=>n.type==="serial-number").map(n=>`ALTER SEQUENCE ${qe(e,n.code)} OWNED BY ${o}.${oe(n.code)}`)}function Bi(e,t){return t.filter(o=>o.type==="serial-number").map(o=>`GRANT USAGE, SELECT ON SEQUENCE ${qe(e,o.code)} TO "openxiangda_data_api"`)}function Ji(e,t){let o=Ye(e),n=[];for(let s of t){if(s.type==="subtable")continue;let r=oe(s.code),c=oe(Te("idx",e,s.code,s.index));switch(s.index){case"btree":n.push(`CREATE INDEX IF NOT EXISTS ${c} ON ${o} (${r})`);break;case"btree-snapshot-expressions":{let i=oe(Te("idx",e,s.code,"snapshot-value")),a=oe(Te("idx",e,s.code,"snapshot-label"));n.push(`CREATE INDEX IF NOT EXISTS ${i} ON ${o} ((${r} ->> 'value'))`,`CREATE INDEX IF NOT EXISTS ${a} ON ${o} ((${r} ->> 'label'))`);break}case"gin-jsonb-path":n.push(`CREATE INDEX IF NOT EXISTS ${c} ON ${o} USING GIN (${r} jsonb_path_ops)`);break;case"gist-range":n.push(`CREATE INDEX IF NOT EXISTS ${c} ON ${o} USING GIST (${r})`);break;case"gin-trigram":{let i=Nt.has(s.type)?`((${r} ->> 'label')) gin_trgm_ops`:`${r} gin_trgm_ops`;n.push(`CREATE INDEX IF NOT EXISTS ${c} ON ${o} USING GIN (${i})`);break}case"none":break}if(s.type==="serial-number"){let i=oe(Te("uidx",e,s.code,"serial"));n.push(`CREATE UNIQUE INDEX IF NOT EXISTS ${i} ON ${o} (${r})`)}}return n}function Wi(e,t,o,n){let s=Ye(e),r=Ye(t),c=oe(Te("uidx",e,"environment_id","subtable-parent")),i=oe(Te("idx",t,o,n,"subtable-child")),a=oe(Te("fk",t,o,e)),u=oe(o),E=oe(n);return[`CREATE UNIQUE INDEX IF NOT EXISTS ${c} ON ${s} ("tenant_id", "app_code", "environment_key", "id")`,`CREATE INDEX IF NOT EXISTS ${i} ON ${r} ("tenant_id", "app_code", "environment_key", ${u}, ${E}, "id")`,`DO $native_subtable$ BEGIN
        ALTER TABLE ${r}
-       ADD CONSTRAINT ${c}
+       ADD CONSTRAINT ${a}
        FOREIGN KEY ("tenant_id", "app_code", "environment_key", ${u})
        REFERENCES ${s} ("tenant_id", "app_code", "environment_key", "id")
        ON DELETE CASCADE;
      EXCEPTION WHEN duplicate_object THEN NULL;
-     END $native_subtable$`]}function Te(e,...t){return`${e}_${So("sha256").update(t.join(":")).digest("hex").slice(0,32)}`}function oe(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,62}$/.test(e))throw new Error("OPENXIANGDA_NATIVE_IDENTIFIER_INVALID");return`"${e}"`}function Po(e,t){return e.type==="subtable"?"none":t?"gin-trigram":e.indexed?["date-range","datetime-range"].includes(e.type)?"gist-range":mt.has(e.type)?"btree-snapshot-expressions":Do.has(e.type)?"gin-jsonb-path":"btree":"none"}function Lo(e){switch(e.type){case"text.short":return`varchar(${e.maxLength??255})`;case"text.long":case"text.rich":return"text";case"number.integer":return"bigint";case"number.decimal":return`numeric(${e.precision??38},${e.scale??10})`;case"boolean":return"boolean";case"date":return"date";case"time":return"time(0)";case"datetime":return"timestamptz";case"date-range":return"daterange";case"datetime-range":return"tstzrange";case"uuid":return"uuid";case"serial-number":return"varchar(255)";case"subtable":return"child-resource";default:return Vo.has(e.type),"jsonb"}}function sn(e,t){if(Je(t.type)&&t.type!=="subtable")return"'[]'::jsonb";if(t.type!=="serial-number")return"";let n=nn(t.serial?.prefix||""),o=t.serial?.digits??6;return`(${n} || lpad(nextval(${nn(qe(e,t.code))})::text, ${o}, '0'))`}function vo(e,t){return on.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'array')`:yo.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'object')`:""}function Ye(e){return`"app_data".${oe(e)}`}function qe(e,t){let n=Te("seq",e,t);return`"app_data".${oe(n)}`}function nn(e){return`'${e.replace(/'/g,"''")}'`}var rn=new Set(["option.single","option.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple"]),ko=new Set([...rn,"cascade.single","cascade.multiple","file","image","signature","address","location","json"]),an=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,xo=new Set(["__proto__","prototype","constructor"]),Nt=class extends Error{constructor(n){super("OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID");this.path=n;this.name="NativeScopeSourceFieldPathV2Error"}path;code="OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID"};function Pe(e,t){let n=dn(e);if(!n)return null;let o=t.get(n[0]);if(!o)return null;let s=n.slice(1).join(".")||void 0;return{field:o,...s?{valuePath:s}:{}}}function Tt(e){return!!(e&&e.field.type==="user.single"&&e.valuePath==="value")}function cn(e,t,n){if(!e||!t||!Uo(e))return!1;let{field:o,valuePath:s}=e;if(!s)return t.valueType==="uuid"?o.type==="uuid":["text.short","text.long","serial-number"].includes(o.type);if(s==="value")return!(t.valueSourceResourceCode&&o.type.startsWith("resource-ref.")&&o.source?.resourceCode!==t.valueSourceResourceCode);let r=s.slice(9),i=n.get(o.source?.resourceCode||"")?.get(r)?.type;return t.valueType==="uuid"?i==="uuid":["text.short","text.long","serial-number"].includes(i||"")}function zi(e,t){let n=dn(t);if(!n)throw new Nt(String(t||""));let o=e;for(let s of n){if(!o||typeof o!="object"||!Object.prototype.hasOwnProperty.call(o,s))return;o=o[s]}return o}function Uo(e){let{field:t,valuePath:n}=e;if(!n)return!ko.has(t.type);if(n==="value")return rn.has(t.type);if(!n.startsWith("snapshot."))return!1;let o=n.slice(9);return an.test(o)&&t.type.startsWith("resource-ref.")&&!!t.source?.snapshotFields?.includes(o)}function dn(e){if(typeof e!="string"||e.length===0||e.length>192)return null;let t=e.split(".");return![1,2,3].includes(t.length)||t.some(n=>!an.test(n)||xo.has(n))||t.length===2&&t[1]!=="value"||t.length===3&&t[1]!=="snapshot"?null:t}var Mo=new Set(["option.single","user.single","department.single","resource-ref.single"]),jo=new Set(["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","uuid","serial-number"]),Bo=new Set(["value","label","description","color"]),Jo=new Set(["avatarUrl","employeeNo","title","mobile","email"]),Wo=new Set(["fullPath","parent.value","parent.label"]),Go=new Set(["country.value","country.label","province.value","province.label","city.value","city.label","district.value","district.label","street.value","street.label","detail","fullAddress"]),zo=new Set(["longitude","latitude","accuracy"]),Yo=new Set(["address","name","province","city","district","source"]);function qi(e){let t=new Map(e.map(n=>[n.code,new Map(n.schema.fields.map(o=>[o.code,o]))]));return e.map(n=>({...n,schema:{...n.schema,fields:n.schema.fields.map(o=>{let s=qo(o,t);if(!Object.keys(s).length)return o;let r={...o};return Object.defineProperty(r,"queryPathTypes",{configurable:!1,enumerable:!1,writable:!1,value:Object.freeze(s)}),r})}}))}function Ki(e,t){if(Mo.has(e.type)&&Bo.has(t)||e.type==="user.single"&&Jo.has(t)||e.type==="department.single"&&Wo.has(t))return Le(t);if(e.type==="resource-ref.single"){let n=e.queryPathTypes?.[t];return n?{parts:t.split("."),type:n}:null}if(e.type==="address"&&Go.has(t))return Le(t);if(e.type==="location"){if(zo.has(t))return{parts:[t],type:"number.decimal"};if(Yo.has(t))return Le(t);if(t==="capturedAt")return{parts:[t],type:"datetime"}}return null}function qo(e,t){if(e.type!=="resource-ref.single"||!e.source)return{};let n=t.get(e.source.resourceCode);return n?Object.fromEntries((e.source.snapshotFields||[]).flatMap(o=>{let s=n.get(o);return s?[[`snapshot.${o}`,jo.has(s.type)?s.type:"json"]]:[]})):{}}function Le(e){return{parts:e.split("."),type:"text.short"}}var gt=class extends Error{constructor(n,o){super(o);this.pointer=n}pointer;code="NATIVE_EVENT_ACTION_INVALID"};function ln(e,t,n="/events/subscriptions"){if(e.execution===void 0)return;let o=(A,N)=>{throw new gt(`${n}${A}`,N)},s=(A,N,m)=>((!A||typeof A!="object"||Array.isArray(A)||Object.keys(A).some(T=>!m.includes(T)))&&o(N,"Invalid action object or unsupported property"),A),r=s(e.execution,"/execution",["kind","version","operations"]);(r.kind!=="native-data"||r.version!==1)&&o("/execution","Expected native-data version 1"),e.platformAccess&&o("/platformAccess","Native actions do not use application runtime capabilities"),(!Array.isArray(e.eventTypes)||!e.eventTypes.length||e.eventTypes.some(A=>!/^openxiangda\.data\.record\.(created|updated|deleted)\.v2$/.test(A)))&&o("/eventTypes","Native data actions require declared data events");let a=e.filter?.resourceCodes;(!Array.isArray(a)||!a.length||a.length>20)&&o("/filter/resourceCodes","Native actions require explicit source resources");let i=new Map(t.map(A=>[A.code,A])),c=a.map(A=>{let N=i.get(A);return N||o("/filter/resourceCodes","Unknown source resource"),new Set((N.schema?.fields||[]).map(m=>m.code))}),u=new Set(e.payload?.fields||[]),E=e.payload?.includeChanges===!0,d=(A,N)=>{let m=s(A,N,["source","path","value"]);if(m.source==="literal"){(!Object.hasOwn(m,"value")||Object.hasOwn(m,"path"))&&o(N,"Literal binding requires only value");let b;try{b=JSON.stringify(m.value)}catch{o(N,"Literal must be JSON")}return(b===void 0||Buffer.byteLength(b)>65536)&&o(N,"Literal is too large or not JSON"),{source:"literal",value:JSON.parse(b)}}(m.source!=="event"||typeof m.path!="string"||Object.hasOwn(m,"value"))&&o(N,"Expected a literal or event binding");let T=m.path.split(".");(T.length>8||T.some(b=>!/^[A-Za-z0-9_-]+$/.test(b)||["__proto__","prototype","constructor"].includes(b)))&&o(N,"Invalid event path");let C=/^data\.projection\.([A-Za-z][A-Za-z0-9_]{0,62})$/.exec(m.path),$=/^data\.changes\.([A-Za-z][A-Za-z0-9_]{0,62})\.(before|after)$/.exec(m.path);if(C||$){let b=(C||$)[1];c.some(g=>!g.has(b))&&o(N,"Source field must exist on every filtered resource"),u.add(b),$&&(E=!0)}else["id","time","type","subject","data.recordId","data.revision","data.operation","data.resourceCode"].includes(m.path)||o(N,"Event path is not part of the data event contract");return{source:"event",path:m.path}};(!Array.isArray(r.operations)||r.operations.length<1||r.operations.length>16)&&o("/execution/operations","Expected 1 to 16 operations");let f={},p=r.operations.map((A,N)=>{let m=`/execution/operations/${N}`,T=s(A,m,["operation","resourceCode","data","id","expectedRevision"]);["create","update","delete"].includes(T.operation)||o(m,"Unsupported Native operation");let C=i.get(T.resourceCode);C||o(m,"Unknown action target resource");let $=new Map((C.schema?.fields||[]).map(g=>[g.code,g])),b=T.data===void 0?{}:s(T.data,`${m}/data`,[...$.keys()]);return Object.keys(b).length>32&&o(m,"Maximum 32 mapped fields per operation"),T.operation==="create"&&(T.id!==void 0||T.expectedRevision!==void 0)&&o(m,"Create does not accept id or expectedRevision"),T.operation==="delete"&&T.data!==void 0&&o(m,"Delete does not accept data"),Object.keys(b).some(g=>$.get(g)?.type==="serial-number")&&o(m,"Generated fields cannot be assigned"),f[T.resourceCode]=ee(C),{operation:T.operation,resourceCode:T.resourceCode,...T.operation==="create"?{}:{id:d(T.id,`${m}/id`),expectedRevision:d(T.expectedRevision,`${m}/expectedRevision`)},...T.operation==="delete"?{}:{data:Object.fromEntries(Object.entries(b).map(([g,D])=>[g,d(D,`${m}/data/${g}`)]))}}});(u.size>32||[...u].some(A=>c.some(N=>!N.has(A))))&&o("/payload/fields","Payload must contain at most 32 declared source fields");let _={kind:"native-data",version:1,operations:p,resourceDigests:f};return Buffer.byteLength(JSON.stringify(_))>65536&&o("/execution","Action plan exceeds 64 KiB"),{execution:{..._,digest:ee(_)},payload:{includeChanges:E,fields:[...u].sort()}}}function ge(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function fn(e,t){if(e?.instanceCommands===void 0)return[];let n=ge(e.instanceCommands);if(!n||!Object.keys(n).length||Object.keys(n).some(s=>!["withdraw","terminate"].includes(s)))return["WORKFLOW_INSTANCE_COMMAND_POLICIES_INVALID"];let o=[];for(let[s,r]of Object.entries(n)){let a=ge(r),i=s==="withdraw"?["beforeFact"]:["beforeFact","capability"];if(!a||Object.keys(a).some(c=>!i.includes(c))){o.push(`WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID:${s}`);continue}if(s==="terminate"){let c=a.capability;(typeof c!="string"||c.length>255||!/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(c)||t&&(!c.startsWith(`app:${t.appCode}:`)||!t.capabilities.includes(c)))&&o.push("WORKFLOW_INSTANCE_TERMINATE_CAPABILITY_INVALID")}if(s==="withdraw"||a.beforeFact!==void 0){let c=a.beforeFact,u=ge(e.inputSchema),E=ge(ge(u?.properties)?.[c]),d=ge(ge(e.subject)?.factProjection)?.[c],f=t?.fields.get(d);(typeof c!="string"||!/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(c)||!Array.isArray(u?.required)||!u.required.includes(c)||E?.type!=="string"||E?.format!=="date-time"||typeof d!="string"||t&&(f?.type!=="datetime"||f.nullable===!0))&&o.push(`WORKFLOW_INSTANCE_COMMAND_DEADLINE_FACT_INVALID:${s}`)}}return o}function Zi(e,t){let n=e?.terminate?.capability;return typeof n=="string"&&/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(n)&&t.includes(n)}function un(e){if(typeof e!="string")return null;let t=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,3}))?(Z|[+-]\d{2}:\d{2})$/.exec(e);if(!t)return null;let[,n,o,s,r,a,i]=t,c=t[8],u=new Date(Date.UTC(Number(n),Number(o),0)).getUTCDate();if(Number(o)<1||Number(o)>12||Number(s)<1||Number(s)>u||Number(r)>23||Number(a)>59||Number(i)>59||c!=="Z"&&(Number(c.slice(1,3))>23||Number(c.slice(4))>59))return null;let E=Date.parse(e);return Number.isFinite(E)?E:null}function er(e,t,n,o){let s=e?.[t];if(!s||t==="terminate"&&s.beforeFact===void 0)return null;let r=s.beforeFact,a=ge(n),i=r&&a&&Object.hasOwn(a,r)?un(a[r]):null,c=o instanceof Date?o.getTime():un(o);return i===null||c===null||!Number.isFinite(c)?"WORKFLOW_V2_CANCELLATION_DEADLINE_INVALID":c<i?null:"WORKFLOW_V2_CANCELLATION_DEADLINE_PASSED"}import*as Qe from"crypto";var _n="native-4",En={"application-native-2":"1.0.0","authz.native-batch-explain":"1.0.0","authz.native-management":"1.0.0","deployment.durable-runs":"1.0.0","deployment.platform-executor":"1.0.0","environment.on-demand-production":"1.0.0","environment.runtime-lifecycle":"1.0.0","data-api-v2":"1.1.0","data.native-golden-crud":"1.0.0","data.audit-read-access":"1.0.0","data.managed-files":"1.1.0","workflow.named-input-sources":"1.0.0","directory-v2":"1.0.0","events-v2":"1.0.0","events.durable-receipts":"1.0.0","events.capture-policy":"1.0.0","events.native-data-actions":"1.0.0","workflow-kernel-v2":"1.0.0","workflow.instance-cancellation-policy":"1.0.0","business-process.durable-command":"1.1.0","workflow.fresh-command-token":"1.0.0","notification-hub-v2":"1.0.0","authentication.application-login-surface":"1.0.0","public-access.anonymous-owner-records":"1.0.0"};var or=5,sr=20,ir=50,rr=50,ar=100,ke=class extends Error{constructor(n,o){super(n);this.code=n;this.pointer=o;this.name="NativeDataPolicyExpressionV2Error"}code;pointer};function Ke(e,t){let n=[],o=(s,r,a)=>{a>5&&ve("NATIVE_DATA_POLICY_EXPRESSION_DEPTH_EXCEEDED",r);let i=An(s,r),c=["allOf","anyOf"].filter(d=>d in i);if(c.length===0){n.push({rule:i,pointer:r}),n.length>50&&ve("NATIVE_DATA_POLICY_EXPRESSION_LEAVES_EXCEEDED",r);return}let u=c[0],E=i[u];(c.length!==1||Object.keys(i).length!==1||!Array.isArray(E)||E.length<1||E.length>20)&&ve("NATIVE_DATA_POLICY_EXPRESSION_GROUP_INVALID",r),E.forEach((d,f)=>o(d,`${r}/${u}/${f}`,a+1))};return o(e,t,1),n}function pn(e,t){Ke(e,t);let n=(o,s)=>{let r=An(o,s);if(Array.isArray(r.allOf))return bt(r.allOf.flatMap((a,i)=>n(a,`${s}/allOf/${i}`)),s);if(Array.isArray(r.anyOf)){let a=[[]];return r.anyOf.forEach((i,c)=>{let u=n(i,`${s}/anyOf/${c}`);a=bt(a.flatMap(E=>u.map(d=>[...E,...d])),s)}),a}return[[r]]};return bt(n(e,t),t)}function bt(e,t){let n=e.reduce((o,s)=>o+s.length,0);return(e.length>50||n>100)&&ve("NATIVE_DATA_POLICY_EXPRESSION_EXPANSION_EXCEEDED",t),e}function An(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&ve("NATIVE_DATA_POLICY_EXPRESSION_NODE_INVALID",t),e}function ve(e,t){throw new ke(e,t)}var Ko="openxiangda.config-bundle/v3",Pn="openxiangda.contract-bundle/v3",In="openxiangda.native-configuration-projection/v1",Ue=_n,Ho=/^[a-f0-9]{64}$/,Xo=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,Qo=/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._*-]+$/,Zo=/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/,es=/^[a-z][a-z0-9]*(?:[-.][a-z0-9]+)*$/,ts=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,ns=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,mn=/^[A-Za-z][A-Za-z0-9_]{0,127}$/,os=/^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$/,ss=/^[A-Z][A-Z0-9_]*$/,is=/^[a-z][a-z0-9-]{2,63}$/,rs=/^[A-Za-z][A-Za-z0-9_-]{0,127}$/,as=/^[A-Za-z][A-Za-z0-9_.]{0,127}$/,cs=16,ds=2*1024,ls=new Set(["text.short","text.long","number.integer","number.decimal","boolean","date","time","datetime","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","uuid","serial-number"]),us=new Set(["overview","database","operations","workflow","members","calendar","document","folder","settings"]),fs=new Set(["approve","reject","return","transfer","delegate","add_assignee","resubmit","withdraw","terminate","admin_reassign","admin_override","retry_resolution"]),_s=4*1024*1024,Es=8*1024*1024,ps=40,As=1e5,Ot=1024*1024,Is="openxiangda.event-handler-manifest/v2",Ln="openxiangda.application-route-manifest/v3",Nn=64,vn=new Set(["id","revision","created_by","updated_by","created_at","updated_at"]),q=Object.freeze({perspectives:100,resources:100,subjectReadSurfaces:50,capabilities:2e3,operations:500,eventConsumers:100,eventProducers:1e3,eventSchemas:100,eventTypes:500,workflows:100,routes:500,adminPages:500,adminNavigationGroups:100,adminNavigationItems:500}),$t=["openxiangda.data.record.created.v2","openxiangda.data.record.updated.v2","openxiangda.data.record.deleted.v2"],Rt=["openxiangda.workflow.instance.started.v2","openxiangda.workflow.instance.cc_added.v2","openxiangda.workflow.instance.completed.v2","openxiangda.workflow.instance.rejected.v2","openxiangda.workflow.instance.returned.v2","openxiangda.workflow.instance.resumed.v2","openxiangda.workflow.instance.withdrawn.v2","openxiangda.workflow.instance.terminated.v2","openxiangda.workflow.task.created.v2","openxiangda.workflow.task.assigned.v2","openxiangda.workflow.task.assignment_pending.v2","openxiangda.workflow.task.assignment_resolution_failed.v2","openxiangda.workflow.task.approved.v2","openxiangda.workflow.task.completed.v2","openxiangda.workflow.task.rejected.v2","openxiangda.workflow.task.returned.v2","openxiangda.workflow.task.resubmitted.v2","openxiangda.workflow.task.transferred.v2","openxiangda.workflow.task.reassigned.v2","openxiangda.workflow.task.delegated.v2","openxiangda.workflow.task.assignee_added.v2","openxiangda.workflow.task.cancelled.v2","openxiangda.workflow.participant.activated.v2","openxiangda.workflow.participant.completed.v2","openxiangda.workflow.participant.rejected.v2","openxiangda.workflow.participant.returned.v2","openxiangda.workflow.participant.transferred.v2","openxiangda.workflow.participant.reassigned.v2","openxiangda.workflow.participant.delegated.v2","openxiangda.workflow.participant.added.v2","openxiangda.workflow.participant.suspended.v2","openxiangda.workflow.participant.resumed.v2","openxiangda.workflow.participant.cancelled.v2"],ms=new Set(Rt),ht=class extends Error{code;pointer;identifiers;constructor(t,n,o={}){super(t),this.name="NativeConfigurationCompilerError",this.code=t,this.pointer=n,this.identifiers=Object.fromEntries(Object.entries(o).slice(0,8).map(([s,r])=>[s,String(r).slice(0,128)]))}};function br(e){let t=h(e.appCode,"/appCode",128);Xo.test(t)||l("NATIVE_CONFIG_APP_CODE_INVALID","/appCode");let n=Dt(e.expectedConfigDigest,"/expectedConfigDigest"),o=Dt(e.expectedContractDigest,"/expectedContractDigest"),s=Vn(e.configBytes,_s,"/configBytes","NATIVE_CONFIG_ARTIFACT_TOO_LARGE"),r=Vn(e.contractBytes,Es,"/contractBytes","NATIVE_CONTRACT_ARTIFACT_TOO_LARGE");Fn(s,n,"/configBytes","NATIVE_CONFIG_DIGEST_MISMATCH"),Fn(r,o,"/contractBytes","NATIVE_CONTRACT_DIGEST_MISMATCH");let a=Dn(s,"/configBytes","NATIVE_CONFIG_JSON_INVALID","NATIVE_CONFIG_NOT_CANONICAL"),i=Dn(r,"/contractBytes","NATIVE_CONTRACT_JSON_INVALID","NATIVE_CONTRACT_NOT_CANONICAL");yn(a,"/config"),yn(i,"/contracts");let c=a,u=i;bs(c,t),Cs(u,t,n);let E=Os(c,n,u.generatorVersion);li(E,u,c),Q(E)!==Q(u)&&l("NATIVE_CONTRACT_CLOSURE_MISMATCH",yt(E,u,"/contracts"));let d={authz:{appCode:t,...c.authz,perspectives:c.perspectives,capabilityCatalog:E.capabilities},data:{appCode:t,resources:c.data.resources,resourceContracts:E.resources,...E.subjectReadSurfaces?{subjectReadSurfaces:E.subjectReadSurfaces}:{}},events:{appCode:t,...c.events,consumers:E.eventConsumers,producers:E.eventProducers,handlerManifest:E.eventHandlerManifest,eventTypes:E.eventTypes,capturePlans:Ts({resources:c.data.resources,dataPolicies:c.authz.dataPolicies,subscriptions:E.eventConsumers,capturePolicies:c.events.capturePolicies})},workflows:{appCode:t,...c.workflows,contracts:E.workflows},runtime:{appCode:t,requirements:c.runtime,backend:c.backend,frontend:c.frontend},contracts:E},f={authz:Se(d.authz),data:Se(d.data),events:Se(d.events),workflows:Se(d.workflows),runtime:Se(d.runtime),contracts:Se(d.contracts)},p={configDigest:n,contractDigest:o,generatorVersion:u.generatorVersion},_=Ns(c),A={schemaVersion:In,compilerContractVersion:Ue,appCode:t,source:p,projections:f,requiredPlatformCapabilities:_,aggregateDigest:ee({schemaVersion:In,compilerContractVersion:Ue,appCode:t,source:p,requiredPlatformCapabilities:_,projectionDigests:Object.fromEntries(Object.entries(f).map(([N,m])=>[N,m.digest]))})};return qn(A)}function Ns(e){let t=e.authz.roles,n=e.data.resources,o=e.backend.operations,s=t.some(_=>_.capabilities.some(A=>A.endsWith(":directory:read")))||n.some(_=>_.schema.fields.some(A=>["user.single","user.multiple","department.single","department.multiple"].includes(A.type)))||o.some(_=>_.platformAccess?.directory),r=!!(e.events.subscriptions.length||e.events.timers.length||e.events.dateTriggers.length||e.events.schemas.length),a=o.some(_=>_.platformAccess?.managedFiles||_.platformAccess?.managedFileCopies)||e.events.subscriptions.some(_=>_.platformAccess?.managedFileCopies),i=o.some(_=>_.platformAccess?.notification)||e.events.subscriptions.some(_=>_.platformAccess?.notification),c=e.workflows.definitions.filter(_=>_.launch.mode==="standalone"||_.launch.mode==="hidden-handoff"),u=o.some(_=>_.platformAccess?.workflow)||c.length>0,E={resources:n},d={perspectives:e.perspectives,authz:e.authz},f={schemaVersion:e.schemaVersion,appCode:e.appCode,frontend:{routes:e.frontend.routes,user:e.frontend.user,admin:e.frontend.admin,devicePolicy:e.frontend.devicePolicy},backend:{operations:o.map(_=>({code:_.code,method:_.method,path:_.path,capability:_.capability,platformAccess:_.platformAccess||null,..._.browser?{browser:_.browser}:{},ai:_.ai||null}))}};return[{code:"application-native-2",declaration:f},{code:"authz.native-batch-explain",declaration:d},{code:"authz.native-management",declaration:d},{code:"deployment.durable-runs",declaration:f.backend},{code:"deployment.platform-executor",declaration:f.backend},{code:"environment.on-demand-production",declaration:{environments:["preproduction","production"]}},{code:"environment.runtime-lifecycle",declaration:{environments:["preproduction","production"]}},...n.length?[{code:"data-api-v2",declaration:E},{code:"data.native-golden-crud",declaration:E}]:[],...n.some(Wt)?[{code:"data.audit-read-access",declaration:E}]:[],...s?[{code:"directory-v2",declaration:{roles:t.map(_=>({code:_.code,capabilities:_.capabilities.filter(A=>A.endsWith(":directory:read"))})),resources:n.map(_=>({code:_.code,fields:_.schema.fields.filter(A=>["user.single","user.multiple","department.single","department.multiple"].includes(A.type))})),operations:o.filter(_=>_.platformAccess?.directory).map(_=>({code:_.code,directory:_.platformAccess.directory}))}}]:[],...a?[{code:"data.managed-files",declaration:{operations:o.filter(_=>_.platformAccess?.managedFiles||_.platformAccess?.managedFileCopies).map(_=>({code:_.code,..._.platformAccess?.managedFiles?{managedFiles:_.platformAccess.managedFiles}:{},..._.platformAccess?.managedFileCopies?{managedFileCopies:_.platformAccess.managedFileCopies}:{}})),subscriptions:e.events.subscriptions.filter(_=>_.platformAccess?.managedFileCopies).map(_=>({code:_.code,managedFileCopies:_.platformAccess.managedFileCopies}))}}]:[],...e.events.subscriptions.some(_=>_.execution)?[{code:"events.native-data-actions",declaration:e.events.subscriptions.filter(_=>_.execution)}]:[],...e.events.capturePolicies?.length?[{code:"events.capture-policy",declaration:e.events.capturePolicies}]:[],...r?[{code:"events-v2",declaration:e.events},{code:"events.durable-receipts",declaration:e.events}]:[],...e.workflows.activations.length?[{code:"workflow-kernel-v2",declaration:e.workflows},{code:"workflow.fresh-command-token",declaration:e.workflows}]:[],...e.workflows.definitions.some(_=>_.definition.instanceCommands!==void 0)?[{code:"workflow.instance-cancellation-policy",declaration:e.workflows.definitions.filter(_=>_.definition.instanceCommands!==void 0)}]:[],...u?[{code:"business-process.durable-command",declaration:{operations:o.filter(_=>_.platformAccess?.workflow).map(_=>({code:_.code,workflow:_.platformAccess.workflow})),definitions:c,activations:e.workflows.activations.filter(_=>c.some(A=>A.definition.code===_.workflowCode))}}]:[],...i?[{code:"notification-hub-v2",declaration:{operations:o.filter(_=>_.platformAccess?.notification).map(_=>({code:_.code,notification:_.platformAccess.notification})),subscriptions:e.events.subscriptions.filter(_=>_.platformAccess?.notification).map(_=>({code:_.code,notification:_.platformAccess.notification}))}}]:[],...e.frontend.authentication?[{code:"authentication.application-login-surface",declaration:e.frontend.authentication}]:[],...e.frontend.publicAccess?[{code:"public-access.anonymous-owner-records",declaration:e.frontend.publicAccess}]:[]].map(({code:_,declaration:A})=>({code:_,contractVersion:En[_],usageDigest:`sha256:${ee(A)}`})).sort((_,A)=>_.code===A.code?0:_.code<A.code?-1:1)}function Ts(e){let t=new Map,n=new Set(e.resources.map(r=>String(r.code)));for(let[r,a]of R(e.capturePolicies===void 0?[]:e.capturePolicies,"/capturePlan/capturePolicies",100).entries()){let i=`/capturePlan/capturePolicies/${r}`,c=I(a,i);O(c,["resourceCode","mode"],i);let u=z(c.resourceCode,`${i}/resourceCode`);n.has(u)||l("NATIVE_EVENT_CAPTURE_RESOURCE_NOT_FOUND",i,{resourceCode:u}),t.has(u)&&l("NATIVE_EVENT_CAPTURE_POLICY_DUPLICATE",i,{resourceCode:u}),c.mode!=="all"&&c.mode!=="subscribed"&&l("NATIVE_EVENT_CAPTURE_MODE_INVALID",`${i}/mode`),t.set(u,c.mode)}let o=new Map(e.dataPolicies.map((r,a)=>{let i=I(r,`/capturePlan/dataPolicies/${a}`);return[String(i.code),i]})),s=e.subscriptions.map((r,a)=>I(r,`/capturePlan/subscriptions/${a}`));return e.resources.map((r,a)=>{let i=`/capturePlan/resources/${a}`,c=I(r,i),u=z(c.code,`${i}/code`),E=c.schema?I(c.schema,`${i}/schema`):c,d=new Set(R(E.fields||[],`${i}/schema/fields`,500).map((g,D)=>W(I(g,`${i}/schema/fields/${D}`).code,`${i}/schema/fields/${D}/code`))),f=c.dataPolicyCode?F(c.dataPolicyCode,`${i}/dataPolicyCode`):null,p=f?o.get(f):void 0;f&&!p&&l("NATIVE_EVENT_CAPTURE_AUTHZ_POLICY_NOT_FOUND",i,{resourceCode:u,dataPolicyCode:f});let _=new Set;for(let g of p?.rules||[])_.add(String(g.field));if(p?.readExpression)for(let g of Ke(p.readExpression,`${i}/readExpression`))_.add(String(g.rule.field));let A=new Set,N=new Set,m=new Set;for(let[g,D]of s.entries()){let V=R(D.eventTypes,`/capturePlan/subscriptions/${g}/eventTypes`,20).map(String);if(!V.some(M=>M.startsWith("openxiangda.data.")))continue;let U=I(D.filter||{},`/capturePlan/subscriptions/${g}/filter`),k=Array.isArray(U.resourceCodes)?U.resourceCodes.map(String):[];if(k.length&&!k.includes(u))continue;for(let M of V)$t.includes(M)&&m.add(M);for(let M of gs(U,`/capturePlan/subscriptions/${g}/filter`))A.add(M);let Y=I(D.payload||{},`/capturePlan/subscriptions/${g}/payload`);for(let M of R(Y.fields||[],`/capturePlan/subscriptions/${g}/payload/fields`,32))N.add(W(M,`/capturePlan/subscriptions/${g}/payload/fields`))}let T=new Set([...A,...N]),C=new Set([...T,..._]);C.size>Nn&&l("NATIVE_EVENT_CAPTURE_FIELDS_LIMIT",i,{resourceCode:u,maximum:Nn});for(let g of C)!d.has(g)&&!(_.has(g)&&vn.has(g))&&l("NATIVE_EVENT_CAPTURE_FIELD_NOT_FOUND",i,{resourceCode:u,field:g});let $=I(c.fieldPolicies||{},`${i}/fieldPolicies`);for(let g of T)$[g]?.mask==="omit"&&l("NATIVE_EVENT_CAPTURE_FIELD_SENSITIVE",i,{resourceCode:u,field:g});let b={resourceCode:u,...t.get(u)==="subscribed"?{capturedEventTypes:[...m].sort()}:{},filterFields:[...A].sort(),projectionFields:[...N].sort(),authorizationFields:[..._].sort(),captureFields:[...C].sort()};return{...b,digest:ee(b)}}).sort((r,a)=>r.resourceCode.localeCompare(a.resourceCode))}function gs(e,t){let n=new Set;for(let[a,i]of R(e.changes||[],`${t}/changes`,16).entries()){let c=I(i,`${t}/changes/${a}`);n.add(W(c.field,`${t}/changes/${a}/field`))}let o=I(e.changedFields||{},`${t}/changedFields`);for(let a of["anyOf","allOf","noneOf"])for(let[i,c]of R(o[a]||[],`${t}/changedFields/${a}`,32).entries())n.add(W(c,`${t}/changedFields/${a}/${i}`));let s=0,r=(a,i,c)=>{c>3&&l("NATIVE_EVENT_FILTER_DEPTH_LIMIT",i);let u=I(a,i);if(u.change){let d=I(u.change,`${i}/change`);n.add(W(d.field,`${i}/change/field`)),s+=1;return}if(u.not){r(u.not,`${i}/not`,c+1);return}let E=u.all?"all":u.any?"any":null;E||l("NATIVE_EVENT_FILTER_CONDITION_INVALID",i);for(let[d,f]of R(u[E],`${i}/${E}`,16).entries())r(f,`${i}/${E}/${d}`,c+1)};return e.where&&r(e.where,`${t}/where`,1),s+=Array.isArray(e.changes)?e.changes.length:0,s>16&&l("NATIVE_EVENT_FILTER_ATOM_LIMIT",t),[...n].sort()}function bs(e,t){O(e,["schemaVersion","compilerContractVersion","appCode","perspectives","authz","backend","data","events","workflows","frontend","runtime"],"/config"),v(e.schemaVersion,Ko,"/config/schemaVersion"),v(e.compilerContractVersion,Ue,"/config/compilerContractVersion"),v(e.appCode,t,"/config/appCode"),R(e.perspectives,"/config/perspectives",100);let n=I(e.authz,"/config/authz");O(n,["capabilities","roles","scopeDimensions","scopeSources","roleMembershipSources","relationshipGrantSources","dataPolicies","authorizationTransitions"],"/config/authz",["authenticatedUserRoleCode"]),R(n.capabilities,"/config/authz/capabilities",2e3),R(n.roles,"/config/authz/roles",100),R(n.scopeDimensions,"/config/authz/scopeDimensions",100),R(n.scopeSources,"/config/authz/scopeSources",100),R(n.roleMembershipSources,"/config/authz/roleMembershipSources",100),R(n.relationshipGrantSources,"/config/authz/relationshipGrantSources",100),R(n.dataPolicies,"/config/authz/dataPolicies",100),R(n.authorizationTransitions,"/config/authz/authorizationTransitions",100);let o=I(e.backend,"/config/backend");O(o,["secrets","operations"],"/config/backend"),R(o.secrets,"/config/backend/secrets",100),R(o.operations,"/config/backend/operations",500),si(o.secrets);let s=I(e.data,"/config/data");O(s,["resources"],"/config/data",["resourceDetailRoutes","subjectReadSurfaces"]),R(s.resources,"/config/data/resources",100),s.subjectReadSurfaces!==void 0&&R(s.subjectReadSurfaces,"/config/data/subjectReadSurfaces",q.subjectReadSurfaces),s.resourceDetailRoutes!==void 0&&R(s.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100);let r=I(e.events,"/config/events");O(r,["schemas","subscriptions","timers","dateTriggers"],"/config/events",["capturePolicies"]),R(r.schemas,"/config/events/schemas",100),R(r.subscriptions,"/config/events/subscriptions",100),R(r.timers,"/config/events/timers",100),R(r.dateTriggers,"/config/events/dateTriggers",100);let a=I(e.workflows,"/config/workflows");O(a,["definitions","bindings","activations","providers","editableParameters"],"/config/workflows"),R(a.definitions,"/config/workflows/definitions",100),R(a.bindings,"/config/workflows/bindings",100),R(a.activations,"/config/workflows/activations",100),R(a.providers,"/config/workflows/providers",100),R(a.editableParameters,"/config/workflows/editableParameters",100);let i=I(e.frontend,"/config/frontend");O(i,["routes","user","admin","devicePolicy"],"/config/frontend",["authentication","publicAccess"]),R(i.routes,"/config/frontend/routes",500);let c=I(i.user,"/config/frontend/user");O(c,["applicationTodoCenter"],"/config/frontend/user"),ye(c.applicationTodoCenter,"/config/frontend/user/applicationTodoCenter"),Vt(i.devicePolicy,"/config/frontend/devicePolicy"),Object.prototype.hasOwnProperty.call(i,"authentication")&&xn(i.authentication,i.routes,e,"/config/frontend/authentication"),Object.prototype.hasOwnProperty.call(i,"publicAccess")&&Us(i.publicAccess,e,"/config/frontend/publicAccess");let u=I(i.admin,"/config/frontend/admin");O(u,["navigation"],"/config/frontend/admin",["access"]),u.access!==void 0&&et(u.access,"/config/frontend/admin/access",e.appCode),Js(u.navigation,"/config/frontend/admin/navigation");let E=I(e.runtime,"/config/runtime");O(E,["protocolCapabilities","health"],"/config/runtime"),w(E.protocolCapabilities,"/config/runtime/protocolCapabilities",100),O(I(E.health,"/config/runtime/health"),["livePath","readyPath","versionPath"],"/config/runtime/health"),v(E.health.livePath,"/__platform/health","/config/runtime/health/livePath"),v(E.health.readyPath,"/__platform/ready","/config/runtime/health/readyPath"),v(E.health.versionPath,"/__platform/version","/config/runtime/health/versionPath")}function Cs(e,t,n){O(e,["schemaVersion","compilerContractVersion","generatorVersion","appCode","configDigest","perspectives","resources","capabilities","operations","eventConsumers","eventProducers","eventSchemas","eventHandlerManifest","eventTypes","workflows","routes","routeManifest","adminPages","adminNavigation"],"/contracts",["authentication","publicAccess","adminAccess","subjectReadSurfaces"]),v(e.schemaVersion,Pn,"/contracts/schemaVersion"),v(e.compilerContractVersion,Ue,"/contracts/compilerContractVersion"),h(e.generatorVersion,"/contracts/generatorVersion",128),v(e.appCode,t,"/contracts/appCode"),v(e.configDigest,n,"/contracts/configDigest"),R(e.perspectives,"/contracts/perspectives",q.perspectives),R(e.resources,"/contracts/resources",q.resources),e.subjectReadSurfaces!==void 0&&R(e.subjectReadSurfaces,"/contracts/subjectReadSurfaces",q.subjectReadSurfaces),R(e.capabilities,"/contracts/capabilities",q.capabilities),R(e.operations,"/contracts/operations",q.operations),R(e.eventConsumers,"/contracts/eventConsumers",q.eventConsumers),R(e.eventProducers,"/contracts/eventProducers",q.eventProducers),R(e.eventSchemas,"/contracts/eventSchemas",q.eventSchemas),I(e.eventHandlerManifest,"/contracts/eventHandlerManifest"),w(e.eventTypes,"/contracts/eventTypes",q.eventTypes),R(e.workflows,"/contracts/workflows",q.workflows),R(e.routes,"/contracts/routes",q.routes),Object.prototype.hasOwnProperty.call(e,"authentication")&&vs(e.authentication,"/contracts/authentication"),Object.prototype.hasOwnProperty.call(e,"publicAccess")&&Ms(e.publicAccess,"/contracts/publicAccess"),Object.prototype.hasOwnProperty.call(e,"adminAccess")&&et(e.adminAccess,"/contracts/adminAccess",t),Ks(e.routeManifest,"/contracts/routeManifest",t),zs(e.adminPages,"/contracts/adminPages"),Ys(e.adminNavigation,"/contracts/adminNavigation")}function Os(e,t,n){let o=hs(e);ei(e,o),ni(e),ti(e),ii(e);let s=e.events.schemas.map((p,_)=>{let A=`/config/events/schemas/${_}`,N=I(p,A),m=h(N.eventType,`${A}/eventType`,255);return m.startsWith("openxiangda.")&&l("NATIVE_EVENT_SCHEMA_RESERVED",`${A}/eventType`,{eventType:m}),v(N.schemaDigest,ee(I(N.jsonSchema,`${A}/jsonSchema`)),`${A}/schemaDigest`),N}),r=new Set([...$t,...Rt,...s.map(p=>String(p.eventType))]),a=new Map(e.data.resources.map(p=>[String(p.code),new Map(p.schema.fields.map(_=>[String(_.code),String(_.type)]))])),i=X(e.events.subscriptions.map((p,_)=>{let A=`/config/events/subscriptions/${_}`,N=I(p,A),m=w(N.eventTypes,`${A}/eventTypes`,20);m.forEach((b,g)=>{r.has(b)||l("NATIVE_EVENT_TYPE_NOT_REGISTERED",`${A}/eventTypes/${g}`,{eventType:b})});let T=ln(N,e.data.resources,A),C=Rs(N.delivery,m,`${A}/delivery`),$=$s(N.platformAccess,`${A}/platformAccess`,a);return{code:F(N.code,`${A}/code`),endpointPath:de(N.endpointPath,`${A}/endpointPath`),eventTypes:m,filter:I(N.filter,`${A}/filter`),payload:T?.payload||I(N.payload,`${A}/payload`),...T?{execution:T.execution}:{},...$?{platformAccess:$}:{},delivery:C}}),p=>p.code),c=new Map(s.map(p=>[String(p.eventType),String(p.dataSchemaVersion)])),u=X([...e.data.resources.flatMap(p=>$t.map(_=>({code:`data:${p.code}:${_}`,source:"data",eventType:_,dataSchemaVersion:"2.0.0",resourceCode:p.code}))),...s.map(p=>({code:`app:${p.eventType}`,source:"app",eventType:p.eventType,dataSchemaVersion:p.dataSchemaVersion})),...e.events.timers.map(p=>({code:p.code,source:"timer",eventType:p.eventType,dataSchemaVersion:c.get(String(p.eventType))||"2.0.0"})),...e.events.dateTriggers.map(p=>({code:p.code,source:"date",eventType:p.eventType,dataSchemaVersion:c.get(String(p.eventType))||"2.0.0",resourceCode:p.resourceCode,field:p.field})),...e.workflows.activations.length?Rt.map(p=>({code:`workflow:${p}`,source:"workflow",eventType:p,dataSchemaVersion:"2.0.0"})):[]],p=>`${p.source}:${p.code}:${p.eventType}`),E=j([...i.flatMap(p=>p.eventTypes),...u.map(p=>String(p.eventType))]);Gs(e);let d=jn(e),f=Ds(e,o);return{schemaVersion:Pn,compilerContractVersion:Ue,generatorVersion:n,appCode:e.appCode,configDigest:t,perspectives:e.perspectives,resources:Ss(e),...f.length?{subjectReadSurfaces:f}:{},capabilities:X(o,p=>p.code),operations:kn(e),eventConsumers:i,eventProducers:u,eventSchemas:s,eventHandlerManifest:{schemaVersion:Is,appCode:e.appCode,handlers:i.filter(p=>!p.execution).map(p=>({code:p.code,endpointPath:p.endpointPath,eventTypes:p.eventTypes,dataSchemaVersions:j(p.eventTypes.map(_=>_.startsWith("openxiangda.")?"2.0.0":c.get(_)||"2.0.0")),maxBodyBytes:65536,receiptProtocolVersion:2}))},eventTypes:E,workflows:Wn(e),routes:Ze(e),...Object.prototype.hasOwnProperty.call(e.frontend,"authentication")?{authentication:ks(e)}:{},...Object.prototype.hasOwnProperty.call(e.frontend,"publicAccess")?{publicAccess:js(e)}:{},...e.frontend.admin.access?{adminAccess:e.frontend.admin.access}:{},routeManifest:Qs(e),adminPages:d,adminNavigation:Bs(e)}}function $s(e,t,n){if(e===void 0)return;let o=I(e,t);O(o,["notification","managedFileCopies"],t,!0);let s={};if(o.notification!==void 0){let r=I(o.notification,`${t}/notification`);O(r,["mode"],`${t}/notification`),v(r.mode,"business-standard",`${t}/notification/mode`),s.notification={mode:"business-standard"}}if(o.managedFileCopies!==void 0){let r=R(o.managedFileCopies,`${t}/managedFileCopies`,16);r.length||l("NATIVE_EVENT_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let a=new Set;s.managedFileCopies=X(r.map((i,c)=>{let u=`${t}/managedFileCopies/${c}`,E=I(i,u);O(E,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],u),v(E.mode,"copy",`${u}/mode`);let d=z(E.sourceResourceCode,`${u}/sourceResourceCode`),f=z(E.targetResourceCode,`${u}/targetResourceCode`),p=n.get(d),_=n.get(f);(!p||!_)&&l("NATIVE_EVENT_MANAGED_FILE_COPY_RESOURCE_INVALID",u);let A=w(E.sourceFieldCodes,`${u}/sourceFieldCodes`,16),N=w(E.targetFieldCodes,`${u}/targetFieldCodes`,16);(!A.length||A.length!==N.length)&&l("NATIVE_EVENT_MANAGED_FILE_COPY_FIELDS_INVALID",u),A.forEach((T,C)=>{let $=p.get(T),b=_.get(N[C]);(!["file","image"].includes(String($))||$!==b)&&l("NATIVE_EVENT_MANAGED_FILE_COPY_FIELD_INVALID",`${u}/sourceFieldCodes/${C}`)});let m=`${d}:${A.join(",")}=>${f}:${N.join(",")}`;return a.has(m)&&l("NATIVE_EVENT_MANAGED_FILE_COPY_DUPLICATE",u),a.add(m),{mode:"copy",sourceResourceCode:d,sourceFieldCodes:j(A),targetResourceCode:f,targetFieldCodes:j(N)}}),i=>`${i.sourceResourceCode}:${i.sourceFieldCodes.join(",")}=>${i.targetResourceCode}:${i.targetFieldCodes.join(",")}`)}return Object.keys(s).length||l("NATIVE_EVENT_PLATFORM_ACCESS_EMPTY",t),s}function Rs(e,t,n){let o=I(e,n);O(o,["timeoutMs","maxAttempts","initialBackoffMs","maxBackoffMs","ordering","concurrency"],n),Z(o.timeoutMs,`${n}/timeoutMs`,1e3,3e4),Z(o.maxAttempts,`${n}/maxAttempts`,1,12);let s=Z(o.initialBackoffMs,`${n}/initialBackoffMs`,1e3,3e5);Z(o.maxBackoffMs,`${n}/maxBackoffMs`,s,18e5),Z(o.concurrency,`${n}/concurrency`,1,50);let r=h(o.ordering,`${n}/ordering`,32);return["none","record","workflow-instance"].includes(r)||l("NATIVE_EVENT_DELIVERY_ORDERING_INVALID",`${n}/ordering`),r==="workflow-instance"&&t.some(a=>!ms.has(a))&&l("NATIVE_EVENT_WORKFLOW_ORDERING_REQUIRES_WORKFLOW_FACTS",`${n}/ordering`),o}function hs(e){let t=new Map;for(let n of Yn(e.appCode))t.set(n.code,n);for(let[n,o]of e.authz.capabilities.entries()){let s=`/config/authz/capabilities/${n}`,r=I(o,s);O(r,["code","kind","name","description"],s,!0);let a=me(r.code,`${s}/code`,e.appCode);t.has(a)&&l("NATIVE_CAPABILITY_DUPLICATE",`${s}/code`),["backend","ui"].includes(r.kind)||l("NATIVE_CAPABILITY_KIND_INVALID",`${s}/kind`);let i={code:a,kind:r.kind,name:h(r.name,`${s}/name`,255),source:"explicit",...r.description===void 0?{}:{description:wt(r.description,`${s}/description`,2e3)}};t.set(a,i)}for(let[n,o]of e.data.resources.entries()){let s=`/config/data/resources/${n}`,r=Ce(o,s,e.appCode),a={read:`\u8BFB\u53D6${r.name}`,create:`\u65B0\u5EFA${r.name}`,update:`\u66F4\u65B0${r.name}`,delete:`\u5220\u9664${r.name}`};for(let i of["read","create","update","delete"]){let c=me(r.capabilities[i],`${s}/capabilities/${i}`,e.appCode);t.has(c)&&l("NATIVE_CAPABILITY_DUPLICATE",`${s}/capabilities/${i}`),t.set(c,{code:c,kind:"data",name:a[i],source:"data"})}for(let[i,c]of Object.entries(r.fieldPolicies)){if(Ve(i))continue;let u=I(c,`${s}/fieldPolicies/${i}`);for(let E of["read","create","update"])if(Array.isArray(u[E]))for(let d of w(u[E],`${s}/fieldPolicies/${i}/${E}`,2e3))me(d,`${s}/fieldPolicies/${i}/${E}`,e.appCode),!t.has(d)&&t.set(d,{code:d,kind:"data",name:`${r.name}.${i}.${E}`,source:"data"})}}return[...t.values()]}function Ss(e){let t=ys(e);return X(e.data.resources.map((n,o)=>{let s=Ce(n,`/config/data/resources/${o}`,e.appCode),r=t.get(s.code);return{code:s.code,schemaDigest:ee(s.schema),fields:X(s.schema.fields.map(a=>({code:a.code,type:a.type})),a=>a.code),...r?{detailRouteCode:r}:{}}}),n=>n.code)}function Ds(e,t){if(e.data.subjectReadSurfaces===void 0)return[];let n=R(e.data.subjectReadSurfaces,"/config/data/subjectReadSurfaces",q.subjectReadSurfaces),o=new Set(t.map(a=>String(a.code))),s=new Map(e.data.resources.map((a,i)=>{let c=`/config/data/resources/${i}`,u=Ce(a,c,e.appCode);return[String(u.code),{resource:u,fields:new Map(R(I(u.schema,`${c}/schema`).fields,`${c}/schema/fields`,500).map(E=>{let d=I(E,`${c}/schema/fields`);return[String(d.code),d]}))}]})),r=new Set;return X(n.map((a,i)=>{let c=`/config/data/subjectReadSurfaces/${i}`,u=I(a,c);O(u,["code","name","capability","subject","relations"],c);let E=F(u.code,`${c}/code`);r.has(E)&&l("NATIVE_SUBJECT_READ_SURFACE_CODE_DUPLICATE",`${c}/code`),r.add(E);let d=me(u.capability,`${c}/capability`,e.appCode);o.has(d)||l("NATIVE_SUBJECT_READ_SURFACE_CAPABILITY_NOT_DECLARED",`${c}/capability`);let f=I(u.subject,`${c}/subject`);O(f,["resourceCode","fields"],`${c}/subject`);let p=z(f.resourceCode,`${c}/subject/resourceCode`),_=s.get(p);_||l("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${c}/subject/resourceCode`);let A=w(f.fields,`${c}/subject/fields`,100).map(($,b)=>W($,`${c}/subject/fields/${b}`));A.length||l("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${c}/subject/fields`);for(let[$,b]of A.entries()){let g=_.fields.get(b);(!g||g.type==="subtable")&&l("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${c}/subject/fields/${$}`)}let N=R(u.relations,`${c}/relations`,8);N.length||l("NATIVE_SUBJECT_READ_SURFACE_RELATIONS_REQUIRED",`${c}/relations`);let m=new Set,T=0,C=X(N.map(($,b)=>{let g=`${c}/relations/${b}`,D=I($,g);O(D,["code","resourceCode","foreignKeyField","fields","limit"],g,["order"]);let V=F(D.code,`${g}/code`);m.has(V)&&l("NATIVE_SUBJECT_READ_SURFACE_RELATION_CODE_DUPLICATE",`${g}/code`),m.add(V);let U=z(D.resourceCode,`${g}/resourceCode`),k=s.get(U);k||l("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${g}/resourceCode`);let Y=W(D.foreignKeyField,`${g}/foreignKeyField`),M=k.fields.get(Y),le=I(M?.source||{},`${g}/foreignKeyField/source`);(!M||!["uuid","resource-ref.single"].includes(String(M.type))||M.type==="resource-ref.single"&&(le.kind!=="resource"||le.resourceCode!==p))&&l("NATIVE_SUBJECT_READ_SURFACE_RELATION_INVALID",`${g}/foreignKeyField`);let ue=w(D.fields,`${g}/fields`,100).map((se,y)=>W(se,`${g}/fields/${y}`));ue.length||l("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${g}/fields`);for(let[se,y]of ue.entries()){let x=k.fields.get(y);(!x||x.type==="subtable")&&l("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${g}/fields/${se}`)}let K=R(D.order||[],`${g}/order`,10).map((se,y)=>{let x=`${g}/order/${y}`,P=I(se,x);O(P,["field","direction"],x);let B=W(P.field,`${x}/field`),J=k.fields.get(B);return(!vn.has(B)&&!J||J?.type==="subtable"||J&&!we(J.type))&&l("NATIVE_SUBJECT_READ_SURFACE_ORDER_FIELD_INVALID",`${x}/field`),["asc","desc"].includes(String(P.direction))||l("NATIVE_SUBJECT_READ_SURFACE_ORDER_DIRECTION_INVALID",`${x}/direction`),{field:B,direction:P.direction}}),pe=Z(D.limit,`${g}/limit`,1,100);return T+=pe,{code:V,resourceCode:U,foreignKeyField:Y,fields:j(ue),...K.length?{order:K}:{},limit:pe}}),$=>$.code);return T>400&&l("NATIVE_SUBJECT_READ_SURFACE_ROW_LIMIT_EXCEEDED",`${c}/relations`),{code:E,name:h(u.name,`${c}/name`,255),capability:d,subject:{resourceCode:p,fields:j(A)},relations:C}}),a=>a.code)}function ys(e){let t=e.data.resourceDetailRoutes===void 0?[]:R(e.data.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100),n=new Map(e.data.resources.map((r,a)=>{let i=`/config/data/resources/${a}`,c=Ce(r,i,e.appCode);return[c.code,c]})),o=new Map(Ze(e).map(r=>[String(r.code),r])),s=new Map;for(let[r,a]of t.entries()){let i=`/config/data/resourceDetailRoutes/${r}`,c=I(a,i);O(c,["resourceCode","desktop","mobile"],i);let u=z(c.resourceCode,`${i}/resourceCode`);s.has(u)&&l("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_DUPLICATE",`${i}/resourceCode`);let E=n.get(u);E||l("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_RESOURCE_MISSING",`${i}/resourceCode`);let d=F(c.desktop,`${i}/desktop`),f=F(c.mobile,`${i}/mobile`);d===f&&l("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_INVALID",i);let p=String(E.capabilities.read);for(let[_,A]of[["desktop",d],["mobile",f]]){let N=`${i}/${_}`,m=o.get(A);m||l("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_REFERENCE_MISSING",N),m.surface!=="user"&&l("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_SURFACE_INVALID",N);let T=de(m.path,`${N}/path`),C=[...T.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)],$=_==="mobile"?!T.startsWith("/m/"):T==="/m"||T.startsWith("/m/");(T.includes("*")||T.includes("?")||T.includes("#")||T.split("/").includes("..")||C.length!==1||$)&&l("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_PATH_INVALID",N);let b=Array.isArray(m.access?.allOf)?m.access.allOf:[];m.capability!==p&&!b.includes(p)&&l("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_CAPABILITY_INVALID",N)}s.set(u,{desktop:d,mobile:f})}return s}function kn(e){let t=new Map(e.data.resources.map((r,a)=>{let i=`/config/data/resources/${a}`,c=Ce(r,i,e.appCode);return[c.code,new Map(c.schema.fields.map(u=>[String(u.code),u]))]})),n=new Map(e.data.resources.map((r,a)=>{let i=`/config/data/resources/${a}`,c=Ce(r,i,e.appCode);return[c.code,new Map(c.schema.fields.map(u=>[String(u.code),String(u.type)]))]})),o=new Set(n.keys()),s=new Set(e.workflows.activations.map((r,a)=>tt(I(r,`/config/workflows/activations/${a}`).workflowCode,`/config/workflows/activations/${a}/workflowCode`)));return X(e.backend.operations.map((r,a)=>{let i=`/config/backend/operations/${a}`,c=I(r,i);O(c,["code","method","path","capability","requestSchema","responseSchema","description","platformAccess","browser","ai"],i,!0);let u=h(c.method,`${i}/method`,16);["GET","POST","PUT","PATCH","DELETE"].includes(u)||l("NATIVE_OPERATION_METHOD_INVALID",`${i}/method`);let E=F(c.code,`${i}/code`);Ps(c.ai,i,E,u,o);let d=ws(c.platformAccess,`${i}/platformAccess`,n,s,new Set(e.authz.roles.map(p=>String(p.code)))),f=Vs(c.browser,`${i}/browser`,u,c.requestSchema,c.responseSchema,n,t,e.data.subjectReadSurfaces||[]);return{code:E,method:u,path:de(c.path,`${i}/path`),requiredCapability:me(c.capability,`${i}/capability`,e.appCode),requestSchemaDigest:ee(I(c.requestSchema,`${i}/requestSchema`)),responseSchemaDigest:ee(I(c.responseSchema,`${i}/responseSchema`)),...c.description===void 0?{}:{description:wt(c.description,`${i}/description`,2e3)},...d?{platformAccess:d}:{},...f?{browser:f}:{}}}),r=>r.code)}function Vs(e,t,n,o,s,r,a,i){if(e===void 0)return null;let c=I(e,t);O(c,["exposure","behavior","idempotency","subject"],t,["refreshTargets","fileIntent"]),v(c.exposure,"authenticated",`${t}/exposure`);let u=h(c.behavior,`${t}/behavior`,32);["read","controlled"].includes(u)||l("NATIVE_OPERATION_BROWSER_BEHAVIOR_INVALID",`${t}/behavior`);let E=h(c.idempotency,`${t}/idempotency`,32);(!["none","required"].includes(E)||u==="controlled"&&E!=="required"||u==="read"&&E!=="none")&&l("NATIVE_OPERATION_BROWSER_IDEMPOTENCY_INVALID",`${t}/idempotency`);let d=I(c.subject,`${t}/subject`);O(d,["resourceCode","inputField"],`${t}/subject`);let f=z(d.resourceCode,`${t}/subject/resourceCode`);r.has(f)||l("NATIVE_OPERATION_BROWSER_SUBJECT_RESOURCE_NOT_DECLARED",`${t}/subject/resourceCode`);let p=W(d.inputField,`${t}/subject/inputField`),_=I(o,`${t}/requestSchema`),A=I(s,`${t}/responseSchema`);(_.type!=="object"||_.additionalProperties!==!1||A.type!=="object"||A.additionalProperties!==!1)&&l("NATIVE_OPERATION_BROWSER_SCHEMA_ROOT_INVALID",`${t}/requestSchema`);let N=I(_.properties,`${t}/requestSchema/properties`),m=new Set(_.required===void 0?[]:w(_.required,`${t}/requestSchema/required`,200));(!(p in N)||!m.has(p))&&l("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let T=I(N[p],`${t}/requestSchema/properties/${p}`);(T.type!=="string"||T.format!=="uuid")&&l("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let C=new Map((Array.isArray(i)?i:[]).map((V,U)=>{let k=I(V,`/config/data/subjectReadSurfaces/${U}`);return[String(k.code),String(I(k.subject,`/config/data/subjectReadSurfaces/${U}/subject`).resourceCode)]})),$=c.refreshTargets===void 0?[]:R(c.refreshTargets,`${t}/refreshTargets`,16),b=new Set,g=X($.map((V,U)=>{let k=`${t}/refreshTargets/${U}`,Y=I(V,k);O(Y,["kind","code"],k),v(Y.kind,"subject-surface",`${k}/kind`);let M=F(Y.code,`${k}/code`);return(b.has(M)||!C.has(M)||C.get(M)!==f)&&l("NATIVE_OPERATION_BROWSER_REFRESH_TARGET_INVALID",`${k}/code`),b.add(M),{kind:"subject-surface",code:M}}),V=>`${V.kind}:${V.code}`),D=Fs(c.fileIntent,`${t}/fileIntent`,n,u,E,f,N,m,a);return{exposure:"authenticated",behavior:u,idempotency:E,subject:{resourceCode:f,inputField:p},...g.length?{refreshTargets:g}:{},...D?{fileIntent:D}:{}}}function Fs(e,t,n,o,s,r,a,i,c){if(e===void 0)return null;let u=I(e,t);O(u,["recordResourceCode","recordIdInputField","relationField","fileNameField","contentTypeField","sizeField","purposes","maxTtlSeconds","maxBytes"],t),(n!=="GET"||o!=="read"||s!=="none")&&l("NATIVE_OPERATION_FILE_INTENT_BEHAVIOR_INVALID",t);let E=z(u.recordResourceCode,`${t}/recordResourceCode`),d=c.get(E);d||l("NATIVE_OPERATION_FILE_INTENT_RESOURCE_NOT_DECLARED",`${t}/recordResourceCode`);let f=W(u.recordIdInputField,`${t}/recordIdInputField`),p=I(a[f],`${t}/recordIdInputField`);(!i.has(f)||p.type!=="string"||p.format!=="uuid")&&l("NATIVE_OPERATION_FILE_INTENT_RECORD_INPUT_INVALID",`${t}/recordIdInputField`);let _=W(u.relationField,`${t}/relationField`),A=d.get(_);(!A||!["uuid","resource-ref.single"].includes(String(A.type))||String(A.type)==="resource-ref.single"&&(String(I(A.source,`${t}/relationField`).kind||"")!=="resource"||String(I(A.source,`${t}/relationField`).resourceCode||"")!==r))&&l("NATIVE_OPERATION_FILE_INTENT_RELATION_INVALID",`${t}/relationField`);let N=[["fileNameField",["text.short","text.long"]],["contentTypeField",["text.short","text.long"]],["sizeField",["number.integer"]]],m={};for(let[b,g]of N){let D=W(u[b],`${t}/${b}`);g.includes(String(d.get(D)?.type))||l("NATIVE_OPERATION_FILE_INTENT_METADATA_INVALID",`${t}/${b}`),m[b]=D}let T=X(w(u.purposes,`${t}/purposes`,2),b=>b);(!T.length||T.some(b=>!["preview","download"].includes(b)))&&l("NATIVE_OPERATION_FILE_INTENT_PURPOSE_INVALID",`${t}/purposes`);let C=Number(u.maxTtlSeconds);(!Number.isSafeInteger(C)||C<1||C>300)&&l("NATIVE_OPERATION_FILE_INTENT_TTL_INVALID",`${t}/maxTtlSeconds`);let $=Number(u.maxBytes);return(!Number.isSafeInteger($)||$<1||$>104857600)&&l("NATIVE_OPERATION_FILE_INTENT_SIZE_INVALID",`${t}/maxBytes`),{recordResourceCode:E,recordIdInputField:f,relationField:_,fileNameField:m.fileNameField,contentTypeField:m.contentTypeField,sizeField:m.sizeField,purposes:T,maxTtlSeconds:C,maxBytes:$}}function ws(e,t,n,o,s){if(e===void 0)return null;let r=I(e,t);O(r,["directory","managedFiles","managedFileCopies","notification","workflow","roleAssertions"],t,!0),Object.keys(r).length===0&&l("NATIVE_OPERATION_PLATFORM_ACCESS_EMPTY",t);let a={};if(r.roleAssertions!==void 0){let i=I(r.roleAssertions,`${t}/roleAssertions`);O(i,["roleCodes"],`${t}/roleAssertions`);let c=w(i.roleCodes,`${t}/roleAssertions/roleCodes`,20);c.length||l("NATIVE_OPERATION_ROLE_ASSERTIONS_REQUIRED",`${t}/roleAssertions/roleCodes`),c.forEach((u,E)=>{s.has(u)||l("NATIVE_ROLE_REFERENCE_MISSING",`${t}/roleAssertions/roleCodes/${E}`)}),a.roleAssertions={roleCodes:j(c)}}if(r.directory!==void 0){let i=I(r.directory,`${t}/directory`);O(i,["mode","fields"],`${t}/directory`),i.mode!=="current-initiator"&&l("NATIVE_OPERATION_DIRECTORY_MODE_INVALID",`${t}/directory/mode`);let c=new Set(["displayName","employeeNumber","primaryDepartment","departments"]),u=w(i.fields,`${t}/directory/fields`,4);(!u.length||u.some(E=>!c.has(E)))&&l("NATIVE_OPERATION_DIRECTORY_FIELDS_INVALID",`${t}/directory/fields`),a.directory={mode:"current-initiator",fields:j(u)}}if(r.managedFiles!==void 0){let i=R(r.managedFiles,`${t}/managedFiles`,16);i.length||l("NATIVE_OPERATION_MANAGED_FILES_REQUIRED",`${t}/managedFiles`);let c=new Set;a.managedFiles=X(i.map((u,E)=>{let d=`${t}/managedFiles/${E}`,f=I(u,d);O(f,["resourceCode","fieldCodes","intents"],d);let p=z(f.resourceCode,`${d}/resourceCode`);(c.has(p)||!n.has(p))&&l("NATIVE_OPERATION_MANAGED_FILE_RESOURCE_INVALID",`${d}/resourceCode`),c.add(p);let _=w(f.fieldCodes,`${d}/fieldCodes`,16);(!_.length||_.some(N=>!["file","image","signature"].includes(String(n.get(p)?.get(N)||""))))&&l("NATIVE_OPERATION_MANAGED_FILE_FIELD_INVALID",`${d}/fieldCodes`);let A=w(f.intents,`${d}/intents`,2);return(!A.length||A.some(N=>!["create","update"].includes(N)))&&l("NATIVE_OPERATION_MANAGED_FILE_INTENT_INVALID",`${d}/intents`),{resourceCode:p,fieldCodes:j(_),intents:j(A)}}),u=>u.resourceCode)}if(r.managedFileCopies!==void 0){let i=R(r.managedFileCopies,`${t}/managedFileCopies`,16);i.length||l("NATIVE_OPERATION_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let c=new Set;a.managedFileCopies=X(i.map((u,E)=>{let d=`${t}/managedFileCopies/${E}`,f=I(u,d);O(f,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],d),v(f.mode,"copy",`${d}/mode`);let p=z(f.sourceResourceCode,`${d}/sourceResourceCode`),_=z(f.targetResourceCode,`${d}/targetResourceCode`),A=n.get(p),N=n.get(_);(!A||!N)&&l("NATIVE_OPERATION_MANAGED_FILE_COPY_RESOURCE_INVALID",d);let m=w(f.sourceFieldCodes,`${d}/sourceFieldCodes`,16),T=w(f.targetFieldCodes,`${d}/targetFieldCodes`,16);(!m.length||m.length!==T.length)&&l("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELDS_INVALID",d),m.forEach(($,b)=>{let g=A.get($),D=N.get(T[b]);(!["file","image"].includes(String(g))||g!==D)&&l("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELD_INVALID",`${d}/sourceFieldCodes/${b}`)});let C=`${p}:${m.join(",")}=>${_}:${T.join(",")}`;return c.has(C)&&l("NATIVE_OPERATION_MANAGED_FILE_COPY_DUPLICATE",d),c.add(C),{mode:"copy",sourceResourceCode:p,sourceFieldCodes:j(m),targetResourceCode:_,targetFieldCodes:j(T)}}),u=>`${u.sourceResourceCode}:${u.sourceFieldCodes.join(",")}=>${u.targetResourceCode}:${u.targetFieldCodes.join(",")}`)}if(r.notification!==void 0){let i=I(r.notification,`${t}/notification`);O(i,["mode"],`${t}/notification`),i.mode!=="business-standard"&&l("NATIVE_OPERATION_NOTIFICATION_MODE_INVALID",`${t}/notification/mode`),a.notification={mode:"business-standard"}}if(r.workflow!==void 0){let i=I(r.workflow,`${t}/workflow`);O(i,["codes"],`${t}/workflow`);let c=w(i.codes,`${t}/workflow/codes`,16);(!c.length||c.some(u=>!o.has(u)))&&l("NATIVE_OPERATION_WORKFLOW_CODE_INVALID",`${t}/workflow/codes`),a.workflow={codes:j(c)}}return a}function Ps(e,t,n,o,s){if(e===void 0)return;let r=`${t}/ai`,a=I(e,r);es.test(n)||l("NATIVE_OPERATION_AI_CODE_INVALID",`${t}/code`),O(a,["name","description","risk","resources","sideEffects","concurrency","timeoutMs"],r,!0),h(a.name,`${r}/name`,Ot),h(a.description,`${r}/description`,Ot);let i=h(a.risk,`${r}/risk`,16);["read","write","destructive","external"].includes(i)||l("NATIVE_OPERATION_AI_RISK_INVALID",`${r}/risk`),i==="read"!=(o==="GET")&&l("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${r}/risk`),o==="DELETE"&&!["destructive","external"].includes(i)&&l("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${r}/risk`);let c=w(a.resources,`${r}/resources`,16);c.length===0&&l("NATIVE_OPERATION_AI_RESOURCE_REQUIRED",`${r}/resources`),c.forEach((E,d)=>{let f=z(E,`${r}/resources/${d}`);s.has(f)||l("NATIVE_OPERATION_AI_RESOURCE_MISSING",`${r}/resources/${d}`)});let u=w(a.sideEffects,`${r}/sideEffects`,20);(i==="read"&&u.length!==0||i!=="read"&&u.length===0)&&l("NATIVE_OPERATION_AI_SIDE_EFFECT_INVALID",`${r}/sideEffects`),a.concurrency!==void 0&&!["none","revision"].includes(h(a.concurrency,`${r}/concurrency`,16))&&l("NATIVE_OPERATION_AI_CONCURRENCY_INVALID",`${r}/concurrency`),a.timeoutMs!==void 0&&Z(a.timeoutMs,`${r}/timeoutMs`,100,3e4)}function He(e){return(e.replace(/\/{2,}/g,"/").replace(/\/$/,"")||"/").split("/").map(n=>n.startsWith(":")?":":n.includes("*")?"*":n).join("/")}function Ls(e,t){let n=I(e,t),o=h(n.type,`${t}/type`,32),s=["code","type","label","presentation","required"],r=o==="sso"?[...s,"provider"]:o==="dingtalk"?[...s,"flow"]:s;O(n,r,t);let a=F(n.code,`${t}/code`),i=h(n.label,`${t}/label`,255),c=h(n.presentation,`${t}/presentation`,16);["primary","secondary"].includes(c)||l("NATIVE_APPLICATION_AUTH_METHOD_PRESENTATION_INVALID",`${t}/presentation`);let u=ye(n.required,`${t}/required`);return["sso","password","dingtalk"].includes(o)||l("NATIVE_APPLICATION_AUTH_METHOD_TYPE_INVALID",`${t}/type`),o==="sso"&&n.provider!=="tenant-default"&&l("NATIVE_APPLICATION_AUTH_SSO_PROVIDER_INVALID",`${t}/provider`),o==="dingtalk"&&!["auto","jsapi","oauth"].includes(h(n.flow,`${t}/flow`,16))&&l("NATIVE_APPLICATION_AUTH_DINGTALK_FLOW_INVALID",`${t}/flow`),{code:a,type:o,label:i,presentation:c,required:u,...o==="sso"?{provider:"tenant-default"}:{},...o==="dingtalk"?{flow:n.flow}:{}}}function Tn(e,t,n){let o=I(e,n);O(o,["routeCode","path","defaultRouteCode"],n);let s=F(o.routeCode,`${n}/routeCode`),r=de(o.path,`${n}/path`),a=t==="desktop"?"/login":"/m/login";return(r!==a||/[:*?#\\]/.test(r))&&l("NATIVE_APPLICATION_AUTH_SURFACE_PATH_INVALID",`${n}/path`,{device:t,expectedPath:a}),{routeCode:s,path:r,defaultRouteCode:F(o.defaultRouteCode,`${n}/defaultRouteCode`)}}function xn(e,t,n,o){if(e===null)return;let s=I(e,o);O(s,["accountMode","registration","methods","surfaces"],o),v(s.accountMode,"existing-platform-users-only",`${o}/accountMode`);let r=I(s.registration,`${o}/registration`);O(r,["mode"],`${o}/registration`),v(r.mode,"reject",`${o}/registration/mode`);let a=R(s.methods,`${o}/methods`,8);a.length===0&&l("NATIVE_APPLICATION_AUTH_METHOD_REQUIRED",`${o}/methods`);let i=a.map((m,T)=>Ls(m,`${o}/methods/${T}`)),c=new Set,u=new Set;for(let[m,T]of i.entries())c.has(T.code)&&l("NATIVE_APPLICATION_AUTH_METHOD_CODE_DUPLICATE",`${o}/methods/${m}/code`),u.has(T.type)&&l("NATIVE_APPLICATION_AUTH_METHOD_TYPE_DUPLICATE",`${o}/methods/${m}/type`),c.add(T.code),u.add(T.type);i.filter(m=>m.presentation==="primary").length!==1&&l("NATIVE_APPLICATION_AUTH_PRIMARY_METHOD_INVALID",`${o}/methods`);let E=I(s.surfaces,`${o}/surfaces`);O(E,["desktop","mobile"],`${o}/surfaces`);let d=Tn(E.desktop,"desktop",`${o}/surfaces/desktop`),f=Tn(E.mobile,"mobile",`${o}/surfaces/mobile`);d.routeCode===f.routeCode&&l("NATIVE_APPLICATION_AUTH_SURFACE_CODE_DUPLICATE",`${o}/surfaces/mobile/routeCode`);let p=R(t,"/config/frontend/routes",500),_=new Map;for(let[m,T]of p.entries()){let C=I(T,`/config/frontend/routes/${m}`);_.set(String(C.code||""),C)}let A=new Set((Array.isArray(n.data?.resources)?n.data.resources:[]).map(m=>String(m.code||"")).filter(m=>/^[a-z][a-z0-9-]{0,62}$/.test(m)));for(let[m,T]of[["desktop",d],["mobile",f]]){_.has(T.routeCode)&&l("NATIVE_APPLICATION_AUTH_SURFACE_CODE_CONFLICT",`${o}/surfaces/${m}/routeCode`);let C=/^user\.([a-z][a-z0-9-]{0,62})\.(records|submit)$/.exec(String(T.defaultRouteCode||"")),$=_.get(T.defaultRouteCode),b=String($?.path||"");if(C&&A.has(C[1])){let D=C[2]==="records"?`/my/${C[1]}`:`/my/${C[1]}/submit`;$={surface:"user",path:m==="mobile"?`/m${D}`:D},b=String($.path)}let g=m==="desktop"?b==="/m"||b.startsWith("/m/"):!(b==="/m"||b.startsWith("/m/"));(!$||$.surface!=="user"||/[:*]/.test(b)||g)&&l("NATIVE_APPLICATION_AUTH_DEFAULT_ROUTE_INVALID",`${o}/surfaces/${m}/defaultRouteCode`)}let N=Un(n).filter(m=>!m.owner.startsWith("authentication:"));for(let[m,T]of[["desktop",d],["mobile",f]]){let C=N.find($=>He($.path)===He(T.path));C&&l("NATIVE_APPLICATION_AUTH_SURFACE_PATH_CONFLICT",`${o}/surfaces/${m}/path`,{owner:C.owner})}}function vs(e,t){if(e===null)return;let n={data:{resources:[]},workflows:{definitions:[]},frontend:{routes:[{code:"auth-desktop-default",path:"/auth-desktop-default",surface:"user"},{code:"auth-mobile-default",path:"/m/auth-mobile-default",surface:"user"}],user:{applicationTodoCenter:!1},admin:{navigation:[]},authentication:e}},o=I(e,t),s=I(o.surfaces,`${t}/surfaces`),r={...o,surfaces:{...s,desktop:{...I(s.desktop,`${t}/surfaces/desktop`),defaultRouteCode:"auth-desktop-default"},mobile:{...I(s.mobile,`${t}/surfaces/mobile`),defaultRouteCode:"auth-mobile-default"}}};xn(r,n.frontend.routes,{...n,frontend:{...n.frontend,authentication:r}},t)}function ks(e){let t=e.frontend.authentication;return t===null?null:{accountMode:t.accountMode,registration:{mode:t.registration.mode},methods:t.methods.map(n=>({...n})),surfaces:{desktop:{...t.surfaces.desktop},mobile:{...t.surfaces.mobile}}}}var xs=new Set(["draft.read","draft.update","validate","create","own.list","own.read","public.list","public.read"]);function Us(e,t,n){let o=I(e,n);O(o,["policies"],n);let s=R(o.policies,`${n}/policies`,16);s.length<1&&l("NATIVE_PUBLIC_POLICY_REQUIRED",n);let r=new Map(t.frontend.routes.map(u=>[u.code,u])),a=new Map(t.data.resources.map(u=>[u.code,u])),i=new Set,c=new Set(s.map(u=>String(u?.code||"")));s.forEach((u,E)=>{let d=`${n}/policies/${E}`,f=I(u,d);O(f,["code","routeCode","mode","resourceCode","operations","fields"],d,["requiredFields","ownRecordFields","publicRecordFields","publicFilters","serverGeneratedFields","schedule","publicSubtableFields","draft","validations"]);let p=F(f.code,`${d}/code`);i.has(p)&&l("NATIVE_PUBLIC_POLICY_DUPLICATE",`${d}/code`);let _=F(f.routeCode,`${d}/routeCode`),A=r.get(_);(!A||A.surface!=="user"||A.capability!==void 0||A.access!==void 0||/[:*]/.test(String(A.path)))&&l("NATIVE_PUBLIC_ROUTE_INVALID",`${d}/routeCode`),v(f.mode,"anonymous",`${d}/mode`);let N=z(f.resourceCode,`${d}/resourceCode`),m=a.get(N);m||l("NATIVE_PUBLIC_RESOURCE_MISSING",`${d}/resourceCode`);let T=new Map(m.schema.fields.map(y=>[String(y.code),String(y.type)])),C=w(f.operations,`${d}/operations`,8);(C.length<1||C.some(y=>!xs.has(y)))&&l("NATIVE_PUBLIC_OPERATION_INVALID",`${d}/operations`),C.includes("draft.read")!==C.includes("draft.update")&&l("NATIVE_PUBLIC_DRAFT_OPERATION_INCOMPLETE",`${d}/operations`);let $=w(f.fields,`${d}/fields`,64);($.length<1||$.some(y=>!T.has(y)))&&l("NATIVE_PUBLIC_FIELD_INVALID",`${d}/fields`);for(let y of["requiredFields","ownRecordFields","publicRecordFields"]){if(!Object.prototype.hasOwnProperty.call(f,y))continue;w(f[y],`${d}/${y}`,64).some(P=>!$.includes(P))&&l("NATIVE_PUBLIC_FIELD_SCOPE_INVALID",`${d}/${y}`)}let b=Object.prototype.hasOwnProperty.call(f,"serverGeneratedFields")?R(f.serverGeneratedFields,`${d}/serverGeneratedFields`,16):[],g=new Set;b.forEach((y,x)=>{let P=`${d}/serverGeneratedFields/${x}`,B=I(y,P);O(B,["field","kind"],P);let J=W(B.field,`${P}/field`);(g.has(J)||!T.has(J)||$.includes(J)||T.get(J)!=="text.short"&&T.get(J)!=="text.long")&&l("NATIVE_PUBLIC_SERVER_GENERATED_FIELD_INVALID",`${P}/field`),v(B.kind,"random-token",`${P}/kind`),g.add(J)});let D=Object.prototype.hasOwnProperty.call(f,"schedule")?I(f.schedule,`${d}/schedule`):null;if(D){let y=["campusPolicyCode","rulePolicyCode","campusField","ruleCampusField","ruleWeekdaysField","ruleOpenAtField","ruleCloseAtField","ruleSlotMinutesField","ruleAdvanceHoursField","ruleAdvanceDaysField","campusEnabledField","ruleEnabledField","dateField","timeField"];O(D,y,`${d}/schedule`);for(let x of["campusPolicyCode","rulePolicyCode"])F(D[x],`${d}/schedule/${x}`);for(let x of y.filter(P=>!["campusPolicyCode","rulePolicyCode"].includes(P)))W(D[x],`${d}/schedule/${x}`);for(let x of[D.campusField,D.dateField,D.timeField])$.includes(String(x))||l("NATIVE_PUBLIC_SCHEDULE_FIELD_INVALID",`${d}/schedule`);(!c.has(String(D.campusPolicyCode))||!c.has(String(D.rulePolicyCode)))&&l("NATIVE_PUBLIC_SCHEDULE_POLICY_INVALID",`${d}/schedule`)}let V=Object.prototype.hasOwnProperty.call(f,"publicFilters")?R(f.publicFilters,`${d}/publicFilters`,16):[],U=new Set;V.forEach((y,x)=>{let P=`${d}/publicFilters/${x}`,B=I(y,P);O(B,["field","operator","value"],P);let J=W(B.field,`${P}/field`);U.has(J)&&l("NATIVE_PUBLIC_FILTER_DUPLICATE",`${P}/field`),$.includes(J)||l("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${P}/field`),v(B.operator,"eq",`${P}/operator`),["boolean","text.short","text.long","number.integer","number.decimal","date","time"].includes(T.get(J)||"")||l("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${P}/field`),B.value!==null&&typeof B.value!="string"&&typeof B.value!="number"&&typeof B.value!="boolean"&&l("NATIVE_PUBLIC_FILTER_VALUE_INVALID",`${P}/value`),U.add(J)});let k=Object.prototype.hasOwnProperty.call(f,"publicSubtableFields")?I(f.publicSubtableFields,`${d}/publicSubtableFields`):null;if(k){Object.keys(k).length>64&&l("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${d}/publicSubtableFields`);for(let[y,x]of Object.entries(k)){let P=m.schema.fields.find(H=>String(H.code)===y),B=String(P?.subtable?.resourceCode||""),J=a.get(B),Ae=new Map((J?.schema?.fields||[]).map(H=>[String(H.code),String(H.type)])),G=w(x,`${d}/publicSubtableFields/${y}`,64);(!$.includes(y)||T.get(y)!=="subtable"||!J||G.length<1||G.some(H=>!Ae.has(H))||G.some(H=>Ae.get(H)==="subtable")||G.some(H=>Ae.get(H)==="signature"))&&l("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${d}/publicSubtableFields/${y}`)}}if(C.some(y=>y.startsWith("public."))){Object.prototype.hasOwnProperty.call(f,"publicRecordFields")||l("NATIVE_PUBLIC_RECORD_FIELDS_REQUIRED",`${d}/publicRecordFields`);let y=w(f.publicRecordFields,`${d}/publicRecordFields`,64);(y.length<1||y.some(x=>!$.includes(x))||y.some(x=>T.get(x)==="signature"||T.get(x)==="subtable"&&!k?.[x]))&&l("NATIVE_PUBLIC_RECORD_FIELDS_INVALID",`${d}/publicRecordFields`)}let Y=Object.prototype.hasOwnProperty.call(f,"requiredFields")?w(f.requiredFields,`${d}/requiredFields`,64):[],M=m.surface||{},le=M.fields||{},ue=String(M.mutationOwner||"native")==="native"&&M.generated?.create!==!1,K=m.schema.fields.filter(y=>We(y,le[y.code])).map(y=>String(y.code));if(C.includes("create")&&!ue&&l("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${d}/fields`),C.includes("create")&&!Object.prototype.hasOwnProperty.call(f,"draft")&&l("NATIVE_PUBLIC_DRAFT_REQUIRED",`${d}/draft`),C.includes("create"))for(let y of K){let x=$.includes(y)?Y.includes(y)?null:"requiredFields":"fields";x&&l("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${d}/${x}`,{resourceCode:z,fieldCode:y})}if(Object.prototype.hasOwnProperty.call(f,"draft")){let y=I(f.draft,`${d}/draft`);O(y,["enabled","inactivityTtlSeconds","maxBytes"],`${d}/draft`),v(y.enabled,!0,`${d}/draft/enabled`),Z(y.inactivityTtlSeconds,`${d}/draft/inactivityTtlSeconds`,3600,7776e3),Z(y.maxBytes,`${d}/draft/maxBytes`,4096,262144)}else C.includes("draft.read")&&l("NATIVE_PUBLIC_DRAFT_REQUIRED",`${d}/draft`);let pe=Object.prototype.hasOwnProperty.call(f,"validations")?R(f.validations,`${d}/validations`,16):[],se=new Set;pe.forEach((y,x)=>{let P=`${d}/validations/${x}`,B=I(y,P);O(B,["code","kind","fields","result"],P);let J=F(B.code,`${P}/code`);se.has(J)&&l("NATIVE_PUBLIC_VALIDATION_DUPLICATE",`${P}/code`),v(B.kind,"duplicate",`${P}/kind`),v(B.result,"availability",`${P}/result`);let Ae=w(B.fields,`${P}/fields`,8);(Ae.length<1||Ae.some(G=>!$.includes(G))||Ae.some(G=>["file","subtable"].includes(T.get(G)||"")))&&l("NATIVE_PUBLIC_VALIDATION_FIELD_INVALID",`${P}/fields`),se.add(J)}),i.add(p)})}function Ms(e,t){let n=I(e,t);O(n,["policies"],t),R(n.policies,`${t}/policies`,16).length<1&&l("NATIVE_PUBLIC_POLICY_REQUIRED",t)}function js(e){return{policies:X(e.frontend.publicAccess.policies.map(t=>({code:t.code,routeCode:t.routeCode,mode:t.mode,resourceCode:t.resourceCode,operations:j(t.operations),fields:j(t.fields),...t.requiredFields?{requiredFields:j(t.requiredFields)}:{},...t.ownRecordFields?{ownRecordFields:j(t.ownRecordFields)}:{},...t.publicRecordFields?{publicRecordFields:j(t.publicRecordFields)}:{},...t.publicFilters?{publicFilters:t.publicFilters.map(n=>({field:n.field,operator:n.operator,value:n.value})).sort((n,o)=>re(n.field,o.field))}:{},...t.publicSubtableFields?{publicSubtableFields:Object.fromEntries(Object.entries(t.publicSubtableFields).sort(([n],[o])=>n.localeCompare(o)).map(([n,o])=>[n,j(Array.isArray(o)?o.map(String):[])]))}:{},...t.serverGeneratedFields?{serverGeneratedFields:t.serverGeneratedFields.map(n=>({field:n.field,kind:n.kind})).sort((n,o)=>re(n.field,o.field))}:{},...t.schedule?{schedule:{campusPolicyCode:t.schedule.campusPolicyCode,rulePolicyCode:t.schedule.rulePolicyCode,campusField:t.schedule.campusField,ruleCampusField:t.schedule.ruleCampusField,ruleWeekdaysField:t.schedule.ruleWeekdaysField,ruleOpenAtField:t.schedule.ruleOpenAtField,ruleCloseAtField:t.schedule.ruleCloseAtField,ruleSlotMinutesField:t.schedule.ruleSlotMinutesField,ruleAdvanceHoursField:t.schedule.ruleAdvanceHoursField,ruleAdvanceDaysField:t.schedule.ruleAdvanceDaysField,campusEnabledField:t.schedule.campusEnabledField,ruleEnabledField:t.schedule.ruleEnabledField,dateField:t.schedule.dateField,timeField:t.schedule.timeField}}:{},...t.draft?{draft:{...t.draft}}:{},...t.validations?{validations:X(t.validations.map(n=>({code:n.code,kind:n.kind,fields:j(n.fields),result:n.result})),n=>n.code)}:{}})),t=>t.code)}}function Un(e){let t=[{owner:"platform:admin-entry",path:"/"},{owner:"platform:admin-entry",path:"/admin"},{owner:"platform:file-preview",path:"/files/:resourceCode/:fileId/preview"}];e.frontend.authentication&&t.push({owner:"authentication:desktop",path:e.frontend.authentication.surfaces.desktop.path},{owner:"authentication:mobile",path:e.frontend.authentication.surfaces.mobile.path});for(let n of e.data.resources){let o=Mn(n),s=`/admin/resources/${n.code}`,r=[["list",s],["detail",`${s}/:id`],["create",`${s}/new`],["update",`${s}/:id/edit`]];for(let[a,i]of r)o[a]&&t.push({owner:`resource:${n.code}:${a}`,path:i},{owner:`resource:${n.code}:${a}:mobile`,path:`/m${i}`})}if(e.frontend.user.applicationTodoCenter===!0&&t.push({owner:"application:todo-center",path:"/todos"},{owner:"application:todo-center:mobile",path:"/m/todos"}),e.workflows.definitions.length>0){t.push({owner:"workflow:work-center",path:"/work-center"},{owner:"workflow:work-center:mobile",path:"/m/work-center"},{owner:"workflow:task",path:"/tasks/:taskId"},{owner:"workflow:task:mobile",path:"/m/tasks/:taskId"},{owner:"workflow:instance",path:"/workflows/:instanceId"},{owner:"workflow:instance:mobile",path:"/m/workflows/:instanceId"});let n=!1;for(let o of e.workflows.definitions)["standalone","hidden-handoff"].includes(o.launch.mode)&&(n=!0);n&&t.push({owner:"workflow:launch",path:"/workflows/:workflowCode/start"},{owner:"workflow:launch:mobile",path:"/m/workflows/:workflowCode/start"})}return t}function Ze(e){let t=new Map(Un(e).map(n=>[He(n.path),n]));return X(e.frontend.routes.map((n,o)=>{let s=`/config/frontend/routes/${o}`,r=I(n,s);O(r,["code","path","label","surface","parentCode","capability","access","pinned","tabPersistence","keepAlive"],s,!0),["admin","user"].includes(r.surface)||l("NATIVE_ROUTE_SURFACE_INVALID",`${s}/surface`);let a=de(r.path,`${s}/path`);r.surface==="admin"&&a!=="/admin"&&!a.startsWith("/admin/")&&l("NATIVE_ADMIN_ROUTE_PATH_INVALID",`${s}/path`),r.surface==="user"&&(a==="/admin"||a.startsWith("/admin/"))&&l("NATIVE_USER_ROUTE_PATH_RESERVED",`${s}/path`);let i=He(a),c=t.get(i);c&&l("NATIVE_ROUTE_PATH_CONFLICT",`${s}/path`,{path:a,owner:c.owner}),t.set(i,{owner:`frontend:${String(r.code||o)}`,path:a});let u=/[:*]/.test(a),E=Ft(r,s,e.appCode),d=r.pinned===void 0?void 0:ye(r.pinned,`${s}/pinned`),f=r.tabPersistence===void 0?u?"none":"session":h(r.tabPersistence,`${s}/tabPersistence`,16),p=r.keepAlive===void 0?"none":h(r.keepAlive,`${s}/keepAlive`,16);return["session","none"].includes(f)||l("NATIVE_ROUTE_TAB_PERSISTENCE_INVALID",`${s}/tabPersistence`),["none","memory"].includes(p)||l("NATIVE_ROUTE_KEEP_ALIVE_INVALID",`${s}/keepAlive`),u&&d===!0&&l("NATIVE_DYNAMIC_ROUTE_PINNED_FORBIDDEN",`${s}/pinned`),u&&f==="session"&&l("NATIVE_DYNAMIC_ROUTE_TAB_PERSISTENCE_FORBIDDEN",`${s}/tabPersistence`),u&&p==="memory"&&l("NATIVE_DYNAMIC_ROUTE_KEEP_ALIVE_FORBIDDEN",`${s}/keepAlive`),{code:F(r.code,`${s}/code`),path:a,label:h(r.label,`${s}/label`,255),surface:r.surface,...r.parentCode===void 0?{}:{parentCode:F(r.parentCode,`${s}/parentCode`)},...E,...d===void 0?{}:{pinned:d},tabPersistence:f,keepAlive:p}}),n=>n.code)}function Mn(e){let t=e.surface===void 0?{}:I(e.surface,"/surface"),n=t.mutationOwner||"native",o=t.generated===void 0?{}:I(t.generated,"/surface/generated"),s=n==="native";return{list:o.list??!0,detail:o.detail??!0,create:o.create??s,update:o.update??s,delete:o.delete??s}}function jn(e){let t=[];for(let n of X(e.data.resources,o=>o.code).flatMap(o=>[{resource:o,viewCode:void 0},...(o.surface?.views||[]).map(s=>({viewCode:s.code,resource:{...o,name:s.name,surface:It(o.surface,s.code)}}))])){let{resource:o,viewCode:s}=n,r=`/admin/resources/${o.code}${s?`/views/${s}`:""}`,a=Mn(o),i=[{operation:"list",kind:"resource-list",path:`${r}`,label:o.name,capability:o.capabilities.read,navigationEligible:!0},{operation:"detail",kind:"resource-detail",path:`${r}/:id`,label:`${o.name}\u8BE6\u60C5`,capability:o.capabilities.read,navigationEligible:!1},{operation:"create",kind:"resource-create",path:`${r}/new`,label:`\u65B0\u589E${o.name}`,capability:o.capabilities.create,navigationEligible:!1},{operation:"update",kind:"resource-update",path:`${r}/:id/edit`,label:`\u7F16\u8F91${o.name}`,capability:o.capabilities.update,navigationEligible:!1}];for(let c of i)a[c.operation]&&t.push({code:`resource:${o.code}${s?`:view:${s}`:""}:${c.operation}`,kind:c.kind,path:c.path,label:c.label,navigationEligible:c.navigationEligible,capability:c.capability,resourceCode:o.code,...s?{viewCode:s}:{}})}for(let n of Ze(e))n.surface==="admin"&&t.push({code:`operation:${n.code}`,kind:"operation",path:n.path,label:n.label,navigationEligible:!/[:*]/.test(n.path),routeCode:n.code});return t.sort((n,o)=>re(n.code,o.code))}function Bn(e){return e.kind==="resource"?`resource:${e.resourceCode}${e.viewCode?`:view:${e.viewCode}`:""}:list`:`operation:${e.routeCode}`}function Bs(e){return e.frontend.admin.navigation.map((t,n)=>({code:t.code,label:t.label,...t.icon===void 0?{}:{icon:t.icon},order:t.order??n,items:t.items.map((o,s)=>({pageCode:Bn(o.page),...o.label===void 0?{}:{label:o.label},...o.icon===void 0?{}:{icon:o.icon},order:o.order??s})).sort((o,s)=>o.order-s.order||re(o.pageCode,s.pageCode))})).sort((t,n)=>t.order-n.order||re(t.code,n.code))}function Js(e,t){let n=R(e,t,q.adminNavigationGroups),o=0;n.forEach((s,r)=>{let a=`${t}/${r}`,i=I(s,a);O(i,["code","label","icon","order","items"],a,!0),F(i.code,`${a}/code`),h(i.label,`${a}/label`,255),Xe(i.icon,`${a}/icon`),$n(i.order,`${a}/order`);let c=R(i.items,`${a}/items`,500);c.length===0&&l("NATIVE_ADMIN_GROUP_ORPHANED",`${a}/items`),o+=c.length,o>q.adminNavigationItems&&l("NATIVE_ARRAY_LIMIT_EXCEEDED",t),c.forEach((u,E)=>{let d=`${a}/items/${E}`,f=I(u,d);O(f,["page","label","icon","order"],d,!0),Ws(f.page,`${d}/page`),f.label!==void 0&&h(f.label,`${d}/label`,255),Xe(f.icon,`${d}/icon`),$n(f.order,`${d}/order`)})})}function Ws(e,t){let n=I(e,t),o=h(n.kind,`${t}/kind`,64);if(o==="resource"){O(n,["kind","resourceCode"],t,["viewCode"]),n.viewCode!==void 0&&F(n.viewCode,`${t}/viewCode`),z(n.resourceCode,`${t}/resourceCode`);return}if(o==="operation"){O(n,["kind","routeCode"],t),F(n.routeCode,`${t}/routeCode`);return}l("NATIVE_ADMIN_PAGE_REFERENCE_KIND_INVALID",`${t}/kind`)}function Gs(e){let t=new Map(jn(e).map(s=>[String(s.code),s])),n=new Set,o=new Set;e.frontend.admin.navigation.forEach((s,r)=>{let a=`/config/frontend/admin/navigation/${r}`;n.has(s.code)&&l("NATIVE_ADMIN_GROUP_DUPLICATE",`${a}/code`),n.add(s.code),s.label===s.code&&l("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${a}/label`),s.items.forEach((i,c)=>{let u=`${a}/items/${c}`,E=Bn(i.page),d=t.get(E);(!d||d.navigationEligible!==!0)&&l("NATIVE_ADMIN_PAGE_NOT_FOUND",`${u}/page`),o.has(E)&&l("NATIVE_ADMIN_PAGE_DUPLICATE",`${u}/page`),o.add(E);let f=i.page.resourceCode||i.page.routeCode||i.page.workflowCode||E,p=i.label||d.label;(!p||p===f||p===E)&&l("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${u}/label`)})})}function zs(e,t){let n=R(e,t,q.adminPages),o=new Set;n.forEach((s,r)=>{let a=`${t}/${r}`,i=I(s,a);O(i,["code","kind","path","label","navigationEligible","capability","access","resourceCode","viewCode","routeCode"],a,!0);let c=h(i.code,`${a}/code`,255);o.has(c)&&l("NATIVE_ADMIN_PAGE_DUPLICATE",`${a}/code`),o.add(c);let u=h(i.kind,`${a}/kind`,64);if(["resource-list","resource-detail","resource-create","resource-update","operation"].includes(u)||l("NATIVE_ADMIN_PAGE_KIND_INVALID",`${a}/kind`),de(i.path,`${a}/path`),h(i.label,`${a}/label`,255),ye(i.navigationEligible,`${a}/navigationEligible`),i.capability!==void 0&&i.access!==void 0&&l("NATIVE_ROUTE_ACCESS_CONFLICT",`${a}/access`),i.capability!==void 0&&h(i.capability,`${a}/capability`,255),i.access!==void 0){let E=I(i.access,`${a}/access`);O(E,["allOf","anyOf"],`${a}/access`,!0);for(let d of["allOf","anyOf"])E[d]!==void 0&&w(E[d],`${a}/access/${d}`,50)}for(let E of["resourceCode","viewCode","routeCode"])i[E]!==void 0&&F(i[E],`${a}/${E}`)})}function Ys(e,t){let n=R(e,t,q.adminNavigationGroups),o=0;n.forEach((s,r)=>{let a=`${t}/${r}`,i=I(s,a);O(i,["code","label","icon","order","items"],a,!0),F(i.code,`${a}/code`),h(i.label,`${a}/label`,255),Xe(i.icon,`${a}/icon`),Z(i.order,`${a}/order`,-1e4,1e4);let c=R(i.items,`${a}/items`,500);c.length===0&&l("NATIVE_ADMIN_GROUP_ORPHANED",`${a}/items`),o+=c.length,o>q.adminNavigationItems&&l("NATIVE_ARRAY_LIMIT_EXCEEDED",t),c.forEach((u,E)=>{let d=`${a}/items/${E}`,f=I(u,d);O(f,["pageCode","label","icon","order"],d,!0),h(f.pageCode,`${d}/pageCode`,255),f.label!==void 0&&h(f.label,`${d}/label`,255),Xe(f.icon,`${d}/icon`),Z(f.order,`${d}/order`,-1e4,1e4)})})}var qs=new Set(["application-todo-center","workflow-work-center","workflow-launch","workflow-task","workflow-instance","resource-records","resource-submit"]);function Ks(e,t,n){let o=I(e,t);O(o,["schemaVersion","appCode","devicePolicy","rootEntry","authentication","routes","digest"],t),v(o.schemaVersion,Ln,`${t}/schemaVersion`),v(o.appCode,n,`${t}/appCode`),Vt(o.devicePolicy,`${t}/devicePolicy`),Hs(o.rootEntry,`${t}/rootEntry`),Xs(o.authentication,`${t}/authentication`),Dt(o.digest,`${t}/digest`);let s=R(o.routes,`${t}/routes`,q.routes),r=new Set;s.forEach((a,i)=>{let c=`${t}/routes/${i}`,u=I(a,c),E=u.kind==="resource-records"||u.kind==="resource-submit";O(u,["code","kind","desktop","mobile"],c,["workflowCode",...E?["resourceCode"]:[]]);let d=h(u.code,`${c}/code`,255);r.has(d)&&l("NATIVE_ROUTE_MANIFEST_DUPLICATE",`${c}/code`),r.add(d);let f=h(u.kind,`${c}/kind`,64);if(qs.has(f)||l("NATIVE_ROUTE_MANIFEST_KIND_INVALID",`${c}/kind`),u.workflowCode!==void 0&&F(u.workflowCode,`${c}/workflowCode`),E){let A=z(u.resourceCode,`${c}/resourceCode`);v(d,`user.${A}.${u.kind==="resource-records"?"records":"submit"}`,`${c}/code`)}else u.resourceCode!==void 0&&l("NATIVE_PROPERTY_UNKNOWN",`${c}/resourceCode`);let p=bn(u.desktop,`${c}/desktop`,n),_=bn(u.mobile,`${c}/mobile`,n);p.surface!=="user"&&l("NATIVE_ROUTE_MANIFEST_DESKTOP_SURFACE_INVALID",`${c}/desktop/surface`),_.surface!=="user"&&l("NATIVE_ROUTE_MANIFEST_MOBILE_SURFACE_INVALID",`${c}/mobile/surface`),p.routeCode===_.routeCode&&l("NATIVE_ROUTE_MANIFEST_PAIR_DUPLICATE",c)}),v(o.digest,ee({schemaVersion:o.schemaVersion,appCode:o.appCode,devicePolicy:o.devicePolicy,rootEntry:o.rootEntry,authentication:o.authentication,routes:o.routes}),`${t}/digest`)}function Vt(e,t){let n=I(e,t);O(n,["kind","mobileMaxWidthPx","desktopMinWidthPx"],t),v(n.kind,"viewport-family",`${t}/kind`);let o=Z(n.mobileMaxWidthPx,`${t}/mobileMaxWidthPx`,320,1600),s=Z(n.desktopMinWidthPx,`${t}/desktopMinWidthPx`,320,1600);return s!==o+1&&l("NATIVE_FRONTEND_DEVICE_POLICY_INVALID",t),{kind:"viewport-family",mobileMaxWidthPx:o,desktopMinWidthPx:s}}function Hs(e,t){let n=I(e,t);O(n,["code","desktop","mobile"],t);let o=F(n.code,`${t}/code`),s=St(n.desktop,`${t}/desktop`),r=St(n.mobile,`${t}/mobile`);return(s===r||r==="/"||!r.startsWith("/m/"))&&l("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",t),s.startsWith("/m/")&&l("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",`${t}/desktop`),{code:o,desktop:s,mobile:r}}function Xs(e,t){let n=I(e,t);O(n,["desktop","mobile"],t);let o=gn(n.desktop,`${t}/desktop`,!1),s=gn(n.mobile,`${t}/mobile`,!0);return(o.routeCode===s.routeCode||o.path===s.path)&&l("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_DUPLICATE",t),{desktop:o,mobile:s}}function gn(e,t,n){let o=I(e,t);O(o,["routeCode","path"],t);let s=F(o.routeCode,`${t}/routeCode`),r=St(o.path,`${t}/path`);return(n?!r.startsWith("/m/"):r.startsWith("/m/"))&&l("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_PATH_INVALID",`${t}/path`),{routeCode:s,path:r}}function St(e,t){let n=de(e,t);return/[:*?#\\\\]/.test(n)&&l("NATIVE_ROUTE_MANIFEST_STATIC_PATH_INVALID",t),n}function bn(e,t,n){let o=I(e,t);O(o,["routeCode","path","surface","pathParams","requiresAuthentication"],t,["capability","access"]),F(o.routeCode,`${t}/routeCode`);let s=de(o.path,`${t}/path`),r=h(o.surface,`${t}/surface`,16);["admin","user"].includes(r)||l("NATIVE_ROUTE_SURFACE_INVALID",`${t}/surface`);let a=w(o.pathParams,`${t}/pathParams`,8);return a.forEach((i,c)=>{(!/^[A-Za-z][A-Za-z0-9_]*$/.test(i)||i.length>64)&&l("NATIVE_ROUTE_PATH_PARAM_INVALID",`${t}/pathParams/${c}`)}),Q(a)!==Q(Jn(s))&&l("NATIVE_ROUTE_PATH_PARAMS_MISMATCH",`${t}/pathParams`),Ft(o,t,n),o.requiresAuthentication!==!0&&l("NATIVE_ROUTE_AUTHENTICATION_REQUIRED",`${t}/requiresAuthentication`),o}function Jn(e){return j([...e.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(t=>t[1]))}function Cn(e,t,n,o){return{routeCode:e,path:t,surface:n,pathParams:Jn(t),...o?.capability?{capability:o.capability}:{},...o?.access?{access:o.access}:{},requiresAuthentication:!0}}function On(e,t,n,o){return e==="workflow-launch"?`workflow.${n}.launch.${t}`:e==="application-todo-center"?`application.todo-center.${t}`:e==="resource-records"?`user.${o}.records.${t}`:e==="resource-submit"?`user.${o}.submit.${t}`:`${e.replace(/-/g,".")}.${t}`}function Qs(e){let t=e.appCode,n=[],o=(p,_,A,N,m,T,C)=>{n.push({code:p,kind:_,...m?{workflowCode:m}:{},...C?{resourceCode:C}:{},desktop:Cn(On(_,"desktop",m,C),A,"user",T),mobile:Cn(On(_,"mobile",m,C),N,"user",T)})};e.frontend.user.applicationTodoCenter===!0&&o("application:todo-center","application-todo-center","/todos","/m/todos");let s=Wn(e);s.length>0&&(o("workflow:work-center","workflow-work-center","/work-center","/m/work-center"),o("workflow:task","workflow-task","/tasks/:taskId","/m/tasks/:taskId"),o("workflow:instance","workflow-instance","/workflows/:instanceId","/m/workflows/:instanceId"));for(let p of s){if(!["standalone","hidden-handoff"].includes(p.launch.mode))continue;let _=j([p.launch.submission?.create?.requiredCapability,p.launch.submission?.existing?.requiredCapability].filter(A=>!!A));o(`workflow:${p.code}:launch`,"workflow-launch","/workflows/:workflowCode/start","/m/workflows/:workflowCode/start",p.code,_.length===1?{capability:_[0]}:_.length>1?{access:{anyOf:_}}:void 0)}let r=n.sort((p,_)=>re(String(p.code),String(_.code))),a=Ze(e),i=p=>{let _=p==="mobile"?"/m/":"/",A=a.filter(m=>m.surface==="user"&&!/[:*?#\\\\]/.test(m.path)&&m.path===_).sort((m,T)=>re(m.code,T.code))[0];if(A)return{code:A.code,path:A.path};let N=a.filter(m=>m.surface==="user"&&!/[:*?#\\\\]/.test(m.path)&&(p==="mobile"?m.path.startsWith("/m/"):!m.path.startsWith("/m/"))).sort((m,T)=>re(m.code,T.code))[0];return N?{code:N.code,path:N.path}:{code:p==="mobile"?"application-root-mobile":"application-root",path:_}},c=e.frontend.authentication?{desktop:{routeCode:e.frontend.authentication.surfaces.desktop.routeCode,path:e.frontend.authentication.surfaces.desktop.path},mobile:{routeCode:e.frontend.authentication.surfaces.mobile.routeCode,path:e.frontend.authentication.surfaces.mobile.path}}:{desktop:{routeCode:"application-login",path:"/login"},mobile:{routeCode:"application-login-mobile",path:"/m/login"}},u=Vt(e.frontend.devicePolicy,"/config/frontend/devicePolicy"),E=i("desktop"),d=i("mobile"),f={schemaVersion:Ln,appCode:t,devicePolicy:u,rootEntry:{code:E.code,desktop:E.path,mobile:d.path},authentication:c,routes:r};return{...f,digest:ee(f)}}function Xe(e,t){if(e===void 0)return;let n=h(e,t,32);us.has(n)||l("NATIVE_ADMIN_ICON_INVALID",t)}function $n(e,t){e!==void 0&&Z(e,t,-1e4,1e4)}function Ft(e,t,n){return e.capability!==void 0&&e.access!==void 0&&l("NATIVE_ROUTE_ACCESS_CONFLICT",`${t}/access`),e.capability!==void 0?{capability:me(e.capability,`${t}/capability`,n)}:e.access===void 0?{}:{access:et(e.access,`${t}/access`,n)}}function et(e,t,n){let o=I(e,t);O(o,["allOf","anyOf"],t,!0);let s=o.allOf===void 0?void 0:j(w(o.allOf,`${t}/allOf`,50).map((a,i)=>me(a,`${t}/allOf/${i}`,n))),r=o.anyOf===void 0?void 0:j(w(o.anyOf,`${t}/anyOf`,50).map((a,i)=>me(a,`${t}/anyOf/${i}`,n)));return(s?.length||0)+(r?.length||0)===0&&l("NATIVE_ROUTE_ACCESS_EMPTY",t),{...s===void 0?{}:{allOf:s},...r===void 0?{}:{anyOf:r}}}function Wn(e){let t=new Map(kn(e).map(s=>[String(s.code),s])),n=e.workflows.definitions.map((s,r)=>{let a=`/config/workflows/definitions/${r}`,i=I(s,a);O(i,["version","definition","launch"],a,["detailRouteCode"]);let c=I(i.definition,`${a}/definition`),u=i.detailRouteCode===void 0?void 0:zn(i.detailRouteCode,`${a}/detailRouteCode`);return{code:F(c.code,`${a}/definition/code`),title:h(c.title,`${a}/definition/title`,255),version:De(i.version,`${a}/version`),launch:Zs(e,c,i.launch,`${a}/launch`,t),...u?{detailRouteCode:u}:{},definition:c}});return j(n.map(s=>s.code)).map(s=>{let r=n.filter(u=>u.code===s),a=e.workflows.activations.find(u=>u.workflowCode===s)?.definitionVersion,i=r.find(u=>u.version===a)||[...r].sort((u,E)=>E.version-u.version)[0],c=new Set;for(let u of r){let E=I(u.definition.nodes,"/config/workflows/definitions/nodes");for(let d of Object.values(E)){let f=I(d,"/config/workflows/definitions/nodes/*");if(f.kind==="approval")for(let p of w(f.allowedOperations||[],"/config/workflows/definitions/nodes/*/allowedOperations",20))c.add(p)}}return{code:s,title:i.title,acceptedCommandDeactivationPolicy:i.definition.acceptedCommandDeactivationPolicy,subject:i.definition.subject,launch:i.launch,...["standalone","hidden-handoff"].includes(i.launch.mode)&&!i.launch.submission?{processOperationCode:`openxiangda.workflow.${s}.submit`}:{},...i.detailRouteCode?{detailRouteCode:i.detailRouteCode}:{},definitionVersions:wn(r.map(u=>u.version)),bindingVersions:wn(e.workflows.bindings.map((u,E)=>{let d=`/config/workflows/bindings/${E}`,f=I(u,d),p=I(f.binding,`${d}/binding`);return{code:F(p.workflowCode,`${d}/binding/workflowCode`),version:De(f.version,`${d}/version`)}}).filter(u=>u.code===s).map(u=>u.version)),providerCodes:j(e.workflows.providers.map((u,E)=>F(I(u,`/config/workflows/providers/${E}`).code,`/config/workflows/providers/${E}/code`))),allowedOperations:[...c].sort(re),editableParameterCodes:j(e.workflows.editableParameters.map((u,E)=>{let d=`/config/workflows/editableParameters/${E}`,f=I(u,d);return{code:F(f.code,`${d}/code`),workflowCode:F(f.workflowCode,`${d}/workflowCode`)}}).filter(u=>u.workflowCode===s).map(u=>u.code))}})}function Gn(e,t){let n=I(e,t);O(n,["mode"],t,["submission"]);let o=h(n.mode,`${t}/mode`,32);return["standalone","custom-page","hidden-handoff","work-center-only"].includes(o)||l("NATIVE_WORKFLOW_LAUNCH_MODE_INVALID",`${t}/mode`),{mode:o,...n.submission===void 0?{}:{submission:I(n.submission,`${t}/submission`)}}}function Zs(e,t,n,o,s){let r=Gn(n,o);if(!r.submission)return{mode:r.mode};["standalone","hidden-handoff"].includes(r.mode)||l("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${o}/submission`);let a=I(r.submission,`${o}/submission`);O(a,["kind"],`${o}/submission`,["create","existing","context"]),v(a.kind,"named-operation",`${o}/submission/kind`);let i=o.endsWith("/launch")?o.slice(0,-7):o,c=I(t.subject,`${i}/definition/subject`),u=z(c.resourceCode,`${i}/definition/subject/resourceCode`),E=e.data.resources.findIndex(g=>g.code===u),d=e.data.resources[E];(E<0||!d)&&l("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${i}/definition/subject/resourceCode`);let f=new Set(I(d.schema,`/config/data/resources/${E}/schema`).fields.map(g=>String(g.code))),p=new Map(e.backend.operations.map(g=>[String(g.code),g])),_=(g,D)=>{let V=`${o}/submission/${D}`,U=I(g,V);O(U,["operationCode","inputs","output"],V);let k=F(U.operationCode,`${V}/operationCode`),Y=p.get(k),M=s.get(k),le=M?.platformAccess?.workflow?.codes;(!Y||!M||M.method!=="POST"||!Array.isArray(le)||!le.includes(t.code))&&l("NATIVE_WORKFLOW_NAMED_OPERATION_INVALID",V);let ue=I(Y.requestSchema,`${V}/operation/requestSchema`),K=I(ue.properties,`${V}/operation/requestSchema/properties`),pe=new Set(ue.required===void 0?[]:w(ue.required,`${V}/operation/requestSchema/required`,64)),se=I(U.inputs,`${V}/inputs`),y=Object.entries(se);(!y.length||y.length>64)&&l("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${V}/inputs`);let x=new Set,P=new Map,B={};for(let[G,H]of y){(!mn.test(G)||!Object.prototype.hasOwnProperty.call(K,G))&&l("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${V}/inputs/${G}`);let Oe=`${V}/inputs/${G}`,nt=I(H,Oe),be=h(nt.source,`${Oe}/source`,32);if(["field","idempotency-key","current-user-reference","subject-id","subject-revision","requested-at"].includes(be)||l("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",Oe),O(nt,["source"],Oe,be==="field"?["fieldCode"]:!1),P.set(be,(P.get(be)||0)+1),be==="field"){let Me=W(nt.fieldCode,`${Oe}/fieldCode`);(x.has(Me)||!f.has(Me))&&l("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${Oe}/fieldCode`),x.add(Me),B[G]={source:be,fieldCode:Me}}else B[G]={source:be}}([...pe].some(G=>!(G in se))||(P.get("idempotency-key")||0)!==1||!y.some(([G,H])=>I(H,`${V}/inputs/${G}`).source==="idempotency-key"&&pe.has(G))||D==="create"&&((P.get("subject-id")||0)>0||(P.get("subject-revision")||0)>0)||D==="existing"&&((P.get("subject-id")||0)!==1||(P.get("subject-revision")||0)!==1))&&l("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${V}/inputs`);let J=I(U.output,`${V}/output`);O(J,["subjectId"],`${V}/output`,["subjectRevision","processCommand"]);let Ae=I(I(Y.responseSchema,`${V}/operation/responseSchema`).properties,`${V}/operation/responseSchema/properties`);for(let G of["subjectId","subjectRevision","processCommand"]){if(J[G]===void 0)continue;let H=h(J[G],`${V}/output/${G}`,128);(!mn.test(H)||!Object.prototype.hasOwnProperty.call(Ae,H))&&l("NATIVE_WORKFLOW_NAMED_OPERATION_OUTPUT_INVALID",`${V}/output/${G}`)}return{operationCode:k,method:"POST",path:M.path,requiredCapability:M.requiredCapability,requestSchemaDigest:M.requestSchemaDigest,responseSchemaDigest:M.responseSchemaDigest,inputs:B,output:{...J},fieldCodes:x}},A=a.create===void 0?void 0:_(a.create,"create"),N=a.existing===void 0?void 0:_(a.existing,"existing");!A&&!N&&l("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${o}/submission`);let m=new Set([...A?.fieldCodes||[],...N?.fieldCodes||[]]),T=a.context===void 0?[]:R(a.context,`${o}/submission/context`,16),C=new Set,$=T.map((g,D)=>{let V=`${o}/submission/context/${D}`,U=I(g,V);O(U,["queryParameter","fieldCode"],V);let k=h(U.queryParameter,`${V}/queryParameter`,64),Y=W(U.fieldCode,`${V}/fieldCode`);return(!/^[A-Za-z][A-Za-z0-9]{0,63}$/.test(k)||C.has(k)||!m.has(Y))&&l("NATIVE_WORKFLOW_LAUNCH_CONTEXT_INVALID",V),C.add(k),{queryParameter:k,fieldCode:Y}}),b=g=>{let{fieldCodes:D,...V}=g;return V};return{mode:r.mode,submission:{kind:"named-operation",...A?{create:b(A)}:{},...N?{existing:b(N)}:{},context:$}}}function zn(e,t){let n=I(e,t);O(n,["desktop","mobile"],t);let o=F(n.desktop,`${t}/desktop`),s=F(n.mobile,`${t}/mobile`);return o===s&&l("NATIVE_WORKFLOW_DETAIL_ROUTE_DUPLICATE",t),{desktop:o,mobile:s}}function ei(e,t){let n=new Set(t.map(E=>E.code)),o=new Map;e.data.resources.forEach((E,d)=>{let f=`/config/data/resources/${d}`,p=I(E,f);for(let[N,m]of Object.entries(p.fieldPolicies||{})){if(!Ve(N))continue;let T=`${f}/fieldPolicies/${N}/read`,C=I(m,`${f}/fieldPolicies/${N}`);for(let $ of w(C.read||[],T,2e3))n.has($)||l("NATIVE_CAPABILITY_REFERENCE_MISSING",T)}if(((p.surface===void 0?{}:I(p.surface,`${f}/surface`)).mutationOwner||"native")==="native")return;let A=I(p.capabilities,`${f}/capabilities`);for(let N of["create","update","delete"])o.set(String(A[N]),N)});let s=new Set;for(let[E,d]of e.authz.roles.entries()){let f=`/config/authz/roles/${E}`,p=I(d,f);O(p,["code","name","description","capabilities"],f,!0);let _=F(p.code,`${f}/code`);s.has(_)&&l("NATIVE_ROLE_DUPLICATE",`${f}/code`),s.add(_),h(p.name,`${f}/name`,255);let A=w(p.capabilities,`${f}/capabilities`,2e3);for(let[N,m]of A.entries())o.has(m)&&l("NATIVE_DATA_SURFACE_MUTATION_GRANT_FORBIDDEN",`${f}/capabilities/${N}`,{operation:o.get(m)}),n.has(m)||l("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/capabilities`)}let r=e.authz.authenticatedUserRoleCode===void 0?"":F(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode");r&&!s.has(r)&&l("NATIVE_AUTHENTICATED_USER_ROLE_REFERENCE_MISSING","/config/authz/authenticatedUserRoleCode");let a=new Set,i=0;for(let[E,d]of e.perspectives.entries()){let f=`/config/perspectives/${E}`,p=I(d,f);O(p,["code","name","description","roleCodes","capabilityCodes","default"],f,!0);let _=F(p.code,`${f}/code`);a.has(_)&&l("NATIVE_PERSPECTIVE_DUPLICATE",`${f}/code`),a.add(_),h(p.name,`${f}/name`,255);let A=w(p.roleCodes,`${f}/roleCodes`,20);A.length<1&&l("NATIVE_PERSPECTIVE_ROLE_REQUIRED",`${f}/roleCodes`),A.forEach((T,C)=>{s.has(T)||l("NATIVE_PERSPECTIVE_ROLE_MISSING",`${f}/roleCodes/${C}`)});let N=j(e.authz.roles.filter(T=>A.includes(T.code)).flatMap(T=>T.capabilities)),m=w(p.capabilityCodes,`${f}/capabilityCodes`,2e3);Q(N)!==Q(m)&&l("NATIVE_PERSPECTIVE_CAPABILITY_PROJECTION_MISMATCH",`${f}/capabilityCodes`),p.default===!0?i+=1:p.default!==void 0&&l("NATIVE_PERSPECTIVE_DEFAULT_INVALID",`${f}/default`)}i>1&&l("NATIVE_PERSPECTIVE_DEFAULT_DUPLICATE","/config/perspectives");for(let[E,d]of e.backend.operations.entries()){let f=I(d,`/config/backend/operations/${E}`);n.has(f.capability)||l("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/backend/operations/${E}/capability`)}let c=new Set,u=new Set;for(let[E,d]of e.frontend.routes.entries()){let f=`/config/frontend/routes/${E}`,p=I(d,f),_=F(p.code,`${f}/code`);c.has(_)&&l("NATIVE_ROUTE_DUPLICATE",`${f}/code`),c.add(_);let A=de(p.path,`${f}/path`);u.has(A)&&l("NATIVE_ROUTE_PATH_DUPLICATE",`${f}/path`),u.add(A);let N=Ft(p,f,e.appCode);N.capability&&!n.has(N.capability)&&l("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/capability`);let m=p.access===void 0?void 0:I(p.access,`${f}/access`);for(let T of["allOf","anyOf"]){let C=m?.[T]===void 0?[]:R(m[T],`${f}/access/${T}`,50);for(let[$,b]of C.entries()){let g=me(b,`${f}/access/${T}/${$}`,e.appCode);n.has(g)||l("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/access/${T}/${$}`)}}}if(e.frontend.admin.access!==void 0){let E=et(e.frontend.admin.access,"/config/frontend/admin/access",e.appCode);for(let d of["allOf","anyOf"])for(let[f,p]of(E[d]||[]).entries())n.has(p)||l("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/frontend/admin/access/${d}/${f}`)}for(let[E,d]of e.frontend.routes.entries()){let f=I(d,`/config/frontend/routes/${E}`);f.parentCode&&!c.has(f.parentCode)&&l("NATIVE_ROUTE_PARENT_MISSING",`/config/frontend/routes/${E}/parentCode`)}}function ti(e){let t=new Set(e.authz.roles.map(u=>String(u.code))),n=e.authz.authenticatedUserRoleCode===void 0?"":F(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode"),o=new Map(e.authz.scopeDimensions.map(u=>[String(u.code),{valueType:u.valueType==="uuid"?"uuid":"string",...u.valueSource?.resourceCode?{valueSourceResourceCode:String(u.valueSource.resourceCode)}:{}}])),s=new Set(o.keys()),r=new Map(e.data.resources.map((u,E)=>{let d=Ce(u,`/config/data/resources/${E}`,e.appCode);return[d.code,new Map(d.schema.fields.map(f=>[String(f.code),f]))]}));for(let[u,E]of e.authz.scopeDimensions.entries()){let d=`/config/authz/scopeDimensions/${u}`,f=I(E,d);if(O(f,["code","name","resourceCode","valueType","hierarchyMode","valueSource"],d,!0),f.valueSource===void 0)continue;let p=I(f.valueSource,`${d}/valueSource`);O(p,["kind","resourceCode","labelField","enabledField"],`${d}/valueSource`,!0),p.kind!=="native_resource"&&l("NATIVE_SCOPE_VALUE_SOURCE_KIND_INVALID",`${d}/valueSource/kind`),f.valueType!=="uuid"&&l("NATIVE_SCOPE_VALUE_SOURCE_TYPE_INVALID",`${d}/valueType`);let _=z(p.resourceCode,`${d}/valueSource/resourceCode`),A=r.get(_);A||l("NATIVE_SCOPE_VALUE_SOURCE_RESOURCE_MISSING",`${d}/valueSource/resourceCode`);let N=W(p.labelField,`${d}/valueSource/labelField`);if(["text.short","text.long"].includes(String(A.get(N)?.type||""))||l("NATIVE_SCOPE_VALUE_SOURCE_LABEL_FIELD_INVALID",`${d}/valueSource/labelField`),p.enabledField!==void 0){let m=W(p.enabledField,`${d}/valueSource/enabledField`);A.get(m)?.type!=="boolean"&&l("NATIVE_SCOPE_VALUE_SOURCE_ENABLED_FIELD_INVALID",`${d}/valueSource/enabledField`)}}let a=new Set,i=new Set;for(let[u,E]of e.authz.scopeSources.entries()){let d=`/config/authz/scopeSources/${u}`,f=I(E,d);O(f,["code","name","resourceCode","subject","grants","operationField","enabledField","effectiveFromField","effectiveToField","failureMode"],d,!0);let p=F(f.code,`${d}/code`);a.has(p)&&l("NATIVE_SCOPE_SOURCE_DUPLICATE",`${d}/code`),a.add(p),h(f.name,`${d}/name`,255);let _=z(f.resourceCode,`${d}/resourceCode`),A=r.get(_);A||l("NATIVE_SCOPE_SOURCE_RESOURCE_MISSING",`${d}/resourceCode`);let N=I(f.subject,`${d}/subject`),m=h(N.type,`${d}/subject/type`,32);O(N,m==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${d}/subject`),["user","role_membership"].includes(m)||l("NATIVE_SCOPE_SOURCE_SUBJECT_INVALID",`${d}/subject/type`);let T=Pe(N.userIdField,A);Tt(T)||l("NATIVE_SCOPE_SOURCE_SUBJECT_PATH_INVALID",`${d}/subject/userIdField`),m==="role_membership"&&!t.has(String(N.roleCode))&&l("NATIVE_ROLE_REFERENCE_MISSING",`${d}/subject/roleCode`);let C=new Set;for(let[$,b]of R(f.grants,`${d}/grants`,100).entries()){let g=`${d}/grants/${$}`,D=I(b,g);O(D,["dimensionCode","valueField","parentValueField"],g,!0);let V=F(D.dimensionCode,`${g}/dimensionCode`);(!s.has(V)||C.has(V))&&l("NATIVE_SCOPE_SOURCE_DIMENSION_INVALID",`${g}/dimensionCode`),C.add(V),f.failureMode==="last_known_good"&&i.add(V);for(let U of["valueField","parentValueField"]){if(D[U]===void 0)continue;let k=Pe(D[U],A);cn(k,o.get(V),r)||l("NATIVE_SCOPE_SOURCE_GRANT_PATH_INVALID",`${g}/${U}`)}}C.size===0&&l("NATIVE_SCOPE_SOURCE_GRANT_REQUIRED",`${d}/grants`),["strict","last_known_good"].includes(f.failureMode)||l("NATIVE_SCOPE_SOURCE_FAILURE_MODE_INVALID",`${d}/failureMode`);for(let $ of["operationField","enabledField","effectiveFromField","effectiveToField"]){if(f[$]===void 0)continue;let b=W(f[$],`${d}/${$}`);A.has(b)||l("NATIVE_SCOPE_SOURCE_FIELD_MISSING",`${d}/${$}`)}}oi(e,t,r,n);let c=new Set;for(let[u,E]of e.authz.dataPolicies.entries()){let d=`/config/authz/dataPolicies/${u}`,f=I(E,d);O(f,["code","name","resourceCode","unrestrictedRoleCodes","operations","matchMode","rules","readExpression","writeBoundary"],d,!0);let p=F(f.code,`${d}/code`);c.has(p)&&l("NATIVE_DATA_POLICY_DUPLICATE",`${d}/code`),c.add(p);let _=f.readExpression!==void 0,A=w(f.operations||[],`${d}/operations`,4);f.operations!==void 0&&(A.length===0||A.some(b=>!["read","create","update","delete"].includes(b)))&&l("NATIVE_DATA_POLICY_OPERATIONS_INVALID",`${d}/operations`),["AND","OR"].includes(f.matchMode)||l("NATIVE_DATA_POLICY_MATCH_MODE_INVALID",`${d}/matchMode`),_&&f.operations!==void 0&&l("NATIVE_DATA_POLICY_READ_EXPRESSION_OPERATIONS_FORBIDDEN",`${d}/operations`);let N=e.data.resources.find(b=>b.dataPolicyCode===p),m=f.resourceCode||N?.code,T=m?r.get(z(m,`${d}/resourceCode`)):void 0;_&&!T&&l("NATIVE_DATA_POLICY_RESOURCE_MISSING",`${d}/resourceCode`);let C=w(f.unrestrictedRoleCodes||[],`${d}/unrestrictedRoleCodes`,100);f.unrestrictedRoleCodes!==void 0&&C.length===0&&l("NATIVE_DATA_POLICY_UNRESTRICTED_ROLES_INVALID",`${d}/unrestrictedRoleCodes`);for(let b of C)t.has(b)||l("NATIVE_ROLE_REFERENCE_MISSING",`${d}/unrestrictedRoleCodes`);let $;try{let b=R(f.rules,`${d}/rules`,100).map((g,D)=>({rule:I(g,`${d}/rules/${D}`),pointer:`${d}/rules/${D}`}));b.length===0?(!_||f.matchMode!=="AND"||f.writeBoundary!=="capability_only")&&l("NATIVE_DATA_POLICY_WRITE_BOUNDARY_REQUIRED",d):f.writeBoundary!==void 0&&l("NATIVE_DATA_POLICY_WRITE_BOUNDARY_INVALID",`${d}/writeBoundary`),$=[...b],_&&($.push(...Ke(f.readExpression,`${d}/readExpression`)),pn(f.readExpression,`${d}/readExpression`))}catch(b){throw b instanceof ke&&l(b.code,b.pointer),b}for(let{rule:b,pointer:g}of $){O(b,["subject","dimensionCode","relationCode","resourceCode","field","roleCodes","operation","valuePath","emptyMatchesAll","operator","value","operand"],g,!0);let D=W(b.field,`${g}/field`),V=T?.get(D);_&&!V&&l("NATIVE_DATA_POLICY_FIELD_MISSING",`${g}/field`);for(let K of w(b.roleCodes||[],`${g}/roleCodes`,100))t.has(K)||l("NATIVE_ROLE_REFERENCE_MISSING",`${g}/roleCodes`);let U=String(b.operator||""),k=b.operand==="db_now",Y=["is_null","is_not_null"].includes(U),M=["eq","not_eq","in","not_in"].includes(U),le=!k&&(b.operator!==void 0||b.value!==void 0);if([b.subject==="current_user"?"current_user":"",typeof b.dimensionCode=="string"?"dimension":"",typeof b.relationCode=="string"?"relationship":"",le?"constant":"",k?"db_now":""].filter(Boolean).length!==1&&l("NATIVE_DATA_POLICY_RULE_SOURCE_INVALID",g),b.subject!==void 0&&b.subject!=="current_user"&&l("NATIVE_DATA_POLICY_SUBJECT_INVALID",`${g}/subject`),le){if(!M&&!Y&&l("NATIVE_DATA_POLICY_OPERATOR_INVALID",`${g}/operator`),["in","not_in"].includes(U)){let K=R(b.value,`${g}/value`,100).map((pe,se)=>h(pe,`${g}/value/${se}`,2048));(K.length===0||new Set(K).size!==K.length)&&l("NATIVE_DATA_POLICY_VALUE_INVALID",`${g}/value`)}else["eq","not_eq"].includes(U)?h(b.value,`${g}/value`,2048):(b.value!==void 0||b.operand!==void 0)&&l("NATIVE_DATA_POLICY_VALUE_INVALID",`${g}/value`);for(let K of["operation","valuePath","emptyMatchesAll","resourceCode","operand"])b[K]!==void 0&&l("NATIVE_DATA_POLICY_CONSTANT_RULE_INVALID",`${g}/${K}`)}if(k){(!["lt","lte","gt","gte"].includes(U)||b.value!==void 0||V?.type!=="datetime")&&l("NATIVE_DATA_POLICY_DB_NOW_INVALID",g);for(let K of["operation","valuePath","emptyMatchesAll","resourceCode","value"])b[K]!==void 0&&l("NATIVE_DATA_POLICY_DB_NOW_INVALID",`${g}/${K}`)}b.dimensionCode&&!s.has(b.dimensionCode)&&l("NATIVE_SCOPE_DIMENSION_MISSING",`${g}/dimensionCode`),i.has(String(b.dimensionCode||""))&&b.operation!=="read"&&l("NATIVE_SCOPE_SOURCE_LAST_KNOWN_GOOD_UNSAFE",`${g}/operation`)}}for(let[u,E]of e.data.resources.entries()){let d=I(E,`/config/data/resources/${u}`);d.dataPolicyCode&&!c.has(d.dataPolicyCode)&&l("NATIVE_DATA_POLICY_REFERENCE_MISSING",`/config/data/resources/${u}/dataPolicyCode`)}}function ni(e){try{jt(e.data.resources,"/config/data/resources")}catch(t){throw t instanceof _e&&l(t.code,t.pointer),t}}function oi(e,t,n,o){let s=new Set;for(let[r,a]of e.authz.roleMembershipSources.entries()){let i=`/config/authz/roleMembershipSources/${r}`,c=I(a,i);O(c,["code","name","resourceCode","userIdField","roleCode","enabledField","effectiveFromField","effectiveToField","failureMode"],i,!0);let u=F(c.code,`${i}/code`);u.length>100&&l("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${i}/code`),s.has(u)&&l("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${i}/code`),s.add(u),h(c.name,`${i}/name`,255);let E=Rn(c.resourceCode,`${i}/resourceCode`,n);hn(c.userIdField,`${i}/userIdField`,E),t.has(String(c.roleCode||""))||l("NATIVE_ROLE_REFERENCE_MISSING",`${i}/roleCode`),o&&c.roleCode===o&&l("NATIVE_AUTHENTICATED_USER_ROLE_SOURCE_CONFLICT",`${i}/roleCode`),Sn(c,i,E)}for(let[r,a]of e.authz.relationshipGrantSources.entries()){let i=`/config/authz/relationshipGrantSources/${r}`,c=I(a,i);O(c,["code","name","resourceCode","subject","relationCode","targetResourceCode","resourceIdField","operations","enabledField","effectiveFromField","effectiveToField","failureMode"],i,!0);let u=F(c.code,`${i}/code`);u.length>100&&l("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${i}/code`),s.has(u)&&l("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${i}/code`),s.add(u),h(c.name,`${i}/name`,255);let E=Rn(c.resourceCode,`${i}/resourceCode`,n),d=I(c.subject,`${i}/subject`),f=h(d.type,`${i}/subject/type`,32);O(d,f==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${i}/subject`),["user","role_membership"].includes(f)||l("NATIVE_AUTHORIZATION_PROJECTION_SUBJECT_INVALID",`${i}/subject/type`),hn(d.userIdField,`${i}/subject/userIdField`,E),f==="role_membership"&&!t.has(String(d.roleCode||""))&&l("NATIVE_ROLE_REFERENCE_MISSING",`${i}/subject/roleCode`),F(c.relationCode,`${i}/relationCode`);let p=z(c.targetResourceCode,`${i}/targetResourceCode`);n.has(p)||l("NATIVE_AUTHORIZATION_PROJECTION_TARGET_RESOURCE_MISSING",`${i}/targetResourceCode`);let _=Pe(c.resourceIdField,E),A=_?.field.type==="resource-ref.single"&&_.valuePath==="value"&&_.field.source?.resourceCode===p;(c.resourceIdField==="id"?p!==String(c.resourceCode):!A)&&l("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_ID_FIELD_INVALID",`${i}/resourceIdField`);let N=w(c.operations,`${i}/operations`,20);(N.length===0||N.some(m=>m.length>64||!/^[A-Za-z0-9][A-Za-z0-9:._*-]{0,63}$/.test(m)))&&l("NATIVE_AUTHORIZATION_PROJECTION_OPERATIONS_INVALID",`${i}/operations`),Sn(c,i,E)}}function Rn(e,t,n){let o=z(e,t),s=n.get(o);return s||l("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_MISSING",t),s}function hn(e,t,n){let o=Pe(e,n);Tt(o)||l("NATIVE_AUTHORIZATION_PROJECTION_USER_FIELD_INVALID",t)}function Sn(e,t,n){if(e.failureMode!=="strict"&&l("NATIVE_AUTHORIZATION_PROJECTION_FAILURE_MODE_INVALID",`${t}/failureMode`),e.enabledField!==void 0){let o=W(e.enabledField,`${t}/enabledField`);n.get(o)?.type!=="boolean"&&l("NATIVE_AUTHORIZATION_PROJECTION_ENABLED_FIELD_INVALID",`${t}/enabledField`)}for(let o of["effectiveFromField","effectiveToField"]){if(e[o]===void 0)continue;let s=W(e[o],`${t}/${o}`);["date","datetime"].includes(String(n.get(s)?.type))||l("NATIVE_AUTHORIZATION_PROJECTION_EFFECTIVE_FIELD_INVALID",`${t}/${o}`)}}function si(e){let t=new Set,n=new Set;e.forEach((o,s)=>{let r=`/config/backend/secrets/${s}`,a=I(o,r);O(a,["name","env","description","required","exposure"],r,!0);let i=h(a.name,`${r}/name`,128),c=h(a.env,`${r}/env`,128);os.test(i)||l("NATIVE_SECRET_NAME_INVALID",`${r}/name`),(!ss.test(c)||c.startsWith("OPENXIANGDA_")||["NODE_ENV","PORT"].includes(c))&&l("NATIVE_SECRET_ENV_INVALID",`${r}/env`),t.has(i)&&l("NATIVE_SECRET_NAME_DUPLICATE",`${r}/name`),n.has(c)&&l("NATIVE_SECRET_ENV_DUPLICATE",`${r}/env`),t.add(i),n.add(c),v(a.exposure,"active_only",`${r}/exposure`),a.required!==void 0&&ye(a.required,`${r}/required`),a.description!==void 0&&wt(a.description,`${r}/description`,2e3)})}function ii(e){let t=new Set,n=new Map,o=new Map(e.data.resources.map(f=>[String(f.code),f])),s=new Map(e.frontend.routes.map((f,p)=>{let _=I(f,`/config/frontend/routes/${p}`);return[F(_.code,`/config/frontend/routes/${p}/code`),_]}));for(let[f,p]of e.workflows.definitions.entries()){let _=`/config/workflows/definitions/${f}`,A=I(p,_);if(O(A,["version","definition","launch"],_,["detailRouteCode"]),Gn(A.launch,`${_}/launch`),A.detailRouteCode!==void 0){let C=zn(A.detailRouteCode,`${_}/detailRouteCode`);for(let[$,b,g]of[["desktop",C.desktop,["admin","user"]],["mobile",C.mobile,["user"]]]){let D=`${_}/detailRouteCode/${$}`,V=s.get(b);V||l("NATIVE_WORKFLOW_DETAIL_ROUTE_MISSING",D),g.some(Y=>Y===V.surface)||l("NATIVE_WORKFLOW_DETAIL_ROUTE_SURFACE_INVALID",D);let U=de(V.path,D),k=[...U.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(Y=>Y[1]);(U.includes("*")||k.length!==1||k[0]!=="instanceId")&&l("NATIVE_WORKFLOW_DETAIL_ROUTE_PATH_INVALID",D)}}let N=I(A.definition,`${_}/definition`),m=`${N.code}:${De(A.version,`${_}/version`)}`;t.has(m)&&l("NATIVE_WORKFLOW_DEFINITION_DUPLICATE",_),t.add(m),ai(N,`${_}/definition`),ri(N.subject,o,`${_}/definition/subject`);let T=fn(N,{appCode:e.appCode,capabilities:e.authz.capabilities.map(C=>C.code),fields:new Map((o.get(N.subject.resourceCode)?.schema.fields||[]).map(C=>[C.code,C]))});T.length&&l("NATIVE_WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID",`${_}/definition/instanceCommands`,{errors:T}),N.title===N.code&&l("NATIVE_WORKFLOW_USER_TITLE_REQUIRED",`${_}/definition/title`),n.set(m,N)}let r=new Set,a=new Map;for(let[f,p]of e.workflows.bindings.entries()){let _=I(p,`/config/workflows/bindings/${f}`),A=I(_.binding,`/config/workflows/bindings/${f}/binding`),N=`${A.workflowCode}:${De(_.version,`/config/workflows/bindings/${f}/version`)}`;r.has(N)&&l("NATIVE_WORKFLOW_BINDING_DUPLICATE",`/config/workflows/bindings/${f}`),r.add(N),ci(A,`/config/workflows/bindings/${f}/binding`),a.set(N,A)}let i=new Set,c=new Map;for(let[f,p]of e.workflows.activations.entries()){let _=`/config/workflows/activations/${f}`,A=I(p,_);O(A,["workflowCode","definitionVersion","bindingVersion","acceptedCommandDeactivationPolicy"],_,["environmentKey"]);let N=F(A.workflowCode,`${_}/workflowCode`);i.has(N)&&l("NATIVE_WORKFLOW_ACTIVATION_DUPLICATE",_),i.add(N);let m=`${N}:${De(A.definitionVersion,`${_}/definitionVersion`)}`,T=`${N}:${De(A.bindingVersion,`${_}/bindingVersion`)}`;t.has(m)||l("NATIVE_WORKFLOW_DEFINITION_REFERENCE_MISSING",`${_}/definitionVersion`),r.has(T)||l("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${_}/bindingVersion`);let C=n.get(m),$=a.get(T);(!["finish-pinned","cancel-on-deactivate"].includes(A.acceptedCommandDeactivationPolicy)||A.acceptedCommandDeactivationPolicy!==C.acceptedCommandDeactivationPolicy)&&l("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_MISMATCH",`${_}/acceptedCommandDeactivationPolicy`),di(C,$,`/config/workflows/activations/${f}`),c.set(N,$)}let u=new Set;e.workflows.providers.forEach((f,p)=>{let _=`/config/workflows/providers/${p}`,A=I(f,_);O(A,["code","endpointPath","timeoutMs"],_,!0);let N=F(A.code,`${_}/code`);u.has(N)&&l("NATIVE_WORKFLOW_PROVIDER_DUPLICATE",`${_}/code`),u.add(N),de(A.endpointPath,`${_}/endpointPath`),A.timeoutMs!==void 0&&Z(A.timeoutMs,`${_}/timeoutMs`,100,1e4)});for(let[f,p]of c.entries())for(let[_,A]of Object.entries(I(p.bindings,"/config/workflows/bindings/*/binding/bindings"))){let N=I(A,`/config/workflows/${f}/bindings/${_}`);N.provider==="application_provider"&&!u.has(N.providerCode)&&l("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`/config/workflows/${f}/bindings/${_}/providerCode`)}let E=new Set(e.authz.roles.map(f=>f.code)),d=new Set;e.workflows.editableParameters.forEach((f,p)=>{let _=`/config/workflows/editableParameters/${p}`,A=I(f,_);O(A,["code","workflowCode","bindingKey","label","valueType","required","allowedRoleCodes","allowedProviderCodes","maxItems"],_,!0);let N=F(A.code,`${_}/code`);d.has(N)&&l("NATIVE_WORKFLOW_EDITABLE_PARAMETER_DUPLICATE",`${_}/code`),d.add(N);let m=tt(A.workflowCode,`${_}/workflowCode`),T=Pt(A.bindingKey,`${_}/bindingKey`),C=c.get(m);(!C||!I(C.bindings,`${_}/bindingKey`)[T])&&l("NATIVE_WORKFLOW_EDITABLE_BINDING_MISSING",`${_}/bindingKey`),h(A.label,`${_}/label`,255),["role_code","user_ids","provider_code"].includes(A.valueType)||l("NATIVE_WORKFLOW_EDITABLE_VALUE_TYPE_INVALID",`${_}/valueType`);for(let $ of w(A.allowedRoleCodes||[],`${_}/allowedRoleCodes`,100))E.has($)||l("NATIVE_ROLE_REFERENCE_MISSING",`${_}/allowedRoleCodes`);for(let $ of w(A.allowedProviderCodes||[],`${_}/allowedProviderCodes`,100))u.has($)||l("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`${_}/allowedProviderCodes`);A.required!==void 0&&ye(A.required,`${_}/required`),A.maxItems!==void 0&&Z(A.maxItems,`${_}/maxItems`,1,200)})}function ri(e,t,n){let o=I(e,n);O(o,["resourceCode","factProjection"],n,["summaryFields"]);let s=z(o.resourceCode,`${n}/resourceCode`),r=t.get(s);r||l("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${n}/resourceCode`);let a=new Set(R(I(r.schema,`${n}/resourceCode`).fields,`${n}/resourceCode`,500).map((u,E)=>W(I(u,`${n}/resourceCode/${E}`).code,`${n}/resourceCode/${E}`))),i=I(o.factProjection,`${n}/factProjection`),c=Object.entries(i);(c.length<1||c.length>64)&&l("NATIVE_WORKFLOW_SUBJECT_FACT_PROJECTION_INVALID",`${n}/factProjection`);for(let[u,E]of c){as.test(u)||l("NATIVE_WORKFLOW_SUBJECT_FACT_KEY_INVALID",`${n}/factProjection/${u}`);let d=W(E,`${n}/factProjection/${u}`);a.has(d)||l("NATIVE_WORKFLOW_SUBJECT_FIELD_MISSING",`${n}/factProjection/${u}`)}if(o.summaryFields!==void 0){let u=w(o.summaryFields,`${n}/summaryFields`,cs).map((_,A)=>W(_,`${n}/summaryFields/${A}`)),E=t.get(s),d=E.surface&&typeof E.surface=="object"&&!Array.isArray(E.surface)?E.surface:{},f=d.fields&&typeof d.fields=="object"&&!Array.isArray(d.fields)?d.fields:{},p=new Map(R(I(E.schema,`${n}/resourceCode`).fields,`${n}/resourceCode`,500).map((_,A)=>{let N=I(_,`${n}/resourceCode/${A}`);return[String(N.code),N]}));for(let[_,A]of u.entries()){let N=p.get(A),m=f[A],T=String(N?.type||""),C=N?.maxLength;(!N||N.system===!0||m&&typeof m=="object"&&!Array.isArray(m)&&m.system===!0||["id","revision","created_by","updated_by","created_at","updated_at"].includes(A)||!ls.has(T)||T==="text.long"&&typeof C=="number"&&Number.isFinite(C)&&C>ds)&&l("NATIVE_WORKFLOW_SUBJECT_SUMMARY_FIELDS_INVALID",`${n}/summaryFields/${_}`)}}}function ai(e,t){O(e,["schemaVersion","code","title","subject","acceptedCommandDeactivationPolicy","startAt","inputSchema","nodes"],t,["organizationContext","instanceCommands"]),v(e.schemaVersion,"openxiangda.workflow-definition/v2",`${t}/schemaVersion`),tt(e.code,`${t}/code`),h(e.title,`${t}/title`,255),["finish-pinned","cancel-on-deactivate"].includes(e.acceptedCommandDeactivationPolicy)||l("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_REQUIRED",`${t}/acceptedCommandDeactivationPolicy`);let n=I(e.nodes,`${t}/nodes`),o=Object.keys(n);(o.length===0||o.length>200)&&l("NATIVE_WORKFLOW_NODE_COUNT_INVALID",`${t}/nodes`);let s=h(e.startAt,`${t}/startAt`,128);n[s]||l("NATIVE_WORKFLOW_START_NODE_MISSING",`${t}/startAt`);let r=new Map;for(let[u,E]of Object.entries(n)){let d=`${t}/nodes/${u}`,f=I(E,d);v(f.id,u,`${d}/id`),["approval","condition","end"].includes(f.kind)||l("NATIVE_WORKFLOW_NODE_KIND_INVALID",`${d}/kind`);let p=[];if(f.kind==="approval"){h(f.title,`${d}/title`,255),Pt(f.binding,`${d}/binding`),["single","any","all","sequence"].includes(f.mode)||l("NATIVE_WORKFLOW_APPROVAL_MODE_INVALID",`${d}/mode`),p.push(h(f.onApprove,`${d}/onApprove`,128),h(f.onReject,`${d}/onReject`,128));for(let _ of w(f.returnTargets||[],`${d}/returnTargets`,200))n[_]||l("NATIVE_WORKFLOW_TARGET_MISSING",`${d}/returnTargets`);for(let _ of w(f.allowedOperations||[],`${d}/allowedOperations`,20))fs.has(_)||l("NATIVE_WORKFLOW_OPERATION_INVALID",`${d}/allowedOperations`)}else if(f.kind==="condition"){let _=R(f.branches,`${d}/branches`,100);_.length===0&&l("NATIVE_WORKFLOW_BRANCH_REQUIRED",`${d}/branches`),_.forEach((A,N)=>{let m=I(A,`${d}/branches/${N}`);xe(m.when,`${d}/branches/${N}/when`,0),p.push(h(m.target,`${d}/branches/${N}/target`,128))}),p.push(h(f.otherwise,`${d}/otherwise`,128))}else h(f.title,`${d}/title`,255),h(f.outcome,`${d}/outcome`,128);for(let _ of p)n[_]||l("NATIVE_WORKFLOW_TARGET_MISSING",d);r.set(u,p)}let a=new Set,i=new Set,c=u=>{if(i.has(u)&&l("NATIVE_WORKFLOW_CYCLE_FORBIDDEN",`${t}/nodes/${u}`),!a.has(u)){a.add(u),i.add(u);for(let E of r.get(u)||[])c(E);i.delete(u)}};c(s),a.size!==o.length&&l("NATIVE_WORKFLOW_NODE_UNREACHABLE",`${t}/nodes`)}function xe(e,t,n){n>20&&l("NATIVE_WORKFLOW_EXPRESSION_DEPTH_EXCEEDED",t);let o=I(e,t),s=h(o.op,`${t}/op`,16);if(s!=="literal"){if(s==="path"){let r=h(o.path,`${t}/path`,255);/^[A-Za-z][A-Za-z0-9_.]{0,254}$/.test(r)||l("NATIVE_WORKFLOW_EXPRESSION_PATH_INVALID",`${t}/path`);return}if(["eq","neq","gt","gte","lt","lte","in","contains"].includes(s)){xe(o.left,`${t}/left`,n+1),xe(o.right,`${t}/right`,n+1);return}if(["and","or"].includes(s)){let r=R(o.values,`${t}/values`,100);r.length===0&&l("NATIVE_WORKFLOW_EXPRESSION_EMPTY",`${t}/values`),r.forEach((a,i)=>xe(a,`${t}/values/${i}`,n+1));return}if(["not","exists"].includes(s)){xe(o.value,`${t}/value`,n+1);return}l("NATIVE_WORKFLOW_EXPRESSION_OPERATOR_INVALID",`${t}/op`)}}function ci(e,t){v(e.schemaVersion,"openxiangda.workflow-binding/v2",`${t}/schemaVersion`),tt(e.workflowCode,`${t}/workflowCode`);let n=I(e.bindings,`${t}/bindings`);Object.keys(n).length>200&&l("NATIVE_WORKFLOW_BINDING_LIMIT_EXCEEDED",`${t}/bindings`);for(let[o,s]of Object.entries(n)){Pt(o,`${t}/bindings/${o}`);let r=I(s,`${t}/bindings/${o}`),a=h(r.provider,`${t}/bindings/${o}/provider`,64);["fixed_users","initiator","input_users","form_field_users","department_supervisor","app_role","app_role_in_scope","business_relation","previous_node_actor","initiator_select","application_provider"].includes(a)||l("NATIVE_WORKFLOW_BINDING_PROVIDER_INVALID",`${t}/bindings/${o}/provider`),a==="fixed_users"&&R(r.users,`${t}/bindings/${o}/users`,200).length===0&&l("NATIVE_WORKFLOW_BINDING_USERS_REQUIRED",`${t}/bindings/${o}/users`),["input_users","form_field_users"].includes(a)&&h(r.inputPath,`${t}/bindings/${o}/inputPath`,255),["app_role","app_role_in_scope","initiator_select"].includes(a)&&F(r.roleCode,`${t}/bindings/${o}/roleCode`),a==="department_supervisor"&&h(r.departmentIdFrom,`${t}/bindings/${o}/departmentIdFrom`,255),a==="application_provider"&&F(r.providerCode,`${t}/bindings/${o}/providerCode`)}}function di(e,t,n){v(t.workflowCode,e.code,`${n}/workflowCode`);let o=I(t.bindings,`${n}/bindings`);for(let[s,r]of Object.entries(I(e.nodes,`${n}/nodes`))){let a=I(r,`${n}/nodes/${s}`);a.kind==="approval"&&!o[a.binding]&&l("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${n}/nodes/${s}/binding`)}}function li(e,t,n){let o=I(t.routeManifest,"/contracts/routeManifest"),s=I(e.routeManifest,"/contracts/routeManifest"),r=new Map;for(let E of R(n.data?.resources,"/config/data/resources",100)){let d=I(E,"/config/data/resources");r.set(String(d.code||""),d)}let a=new Set(R(s.routes,"/contracts/routeManifest/routes",1e3).map(E=>String(I(E,"/contracts/routeManifest/routes").code||""))),i=[];for(let E of R(o.routes,"/contracts/routeManifest/routes",1e3)){let d=I(E,"/contracts/routeManifest/routes"),f=String(d.kind||"");if(f!=="resource-records"&&f!=="resource-submit")continue;let p=String(d.resourceCode||""),_=r.get(p);_||l("NATIVE_ROUTE_MANIFEST_RESOURCE_UNKNOWN","/contracts/routeManifest/routes");let N=`user.${p}.${f==="resource-records"?"records":"submit"}`;v(String(d.code||""),N,"/contracts/routeManifest/routes/code");let m=f==="resource-records"?"read":"create",T=String(I(_.capabilities,"/config/data/resources/capabilities")[m]||"");for(let C of["desktop","mobile"]){let $=I(d[C],`/contracts/routeManifest/routes/${C}`),b=C==="mobile"?"/m/my/":"/my/",g=f==="resource-records"?`${b}${p}`:`${b}${p}/submit`;v(String($.path||""),g,`/contracts/routeManifest/routes/${C}/path`),v(String($.capability||""),T,`/contracts/routeManifest/routes/${C}/capability`),v(String($.routeCode||""),`${N}.${C}`,`/contracts/routeManifest/routes/${C}/routeCode`)}(a.has(N)||i.some(C=>String(C.code)===N))&&l("NATIVE_ROUTE_MANIFEST_DUPLICATE","/contracts/routeManifest/routes/code"),i.push(d)}if(!i.length)return;s.routes=R([...s.routes,...i],"/contracts/routeManifest/routes",1e3).sort((E,d)=>re(String(I(E,"x").code||""),String(I(d,"x").code||"")));let c=String(I(o.rootEntry,"x").code||"");if(i.find(E=>String(E.code)===c&&E.kind==="resource-records")){let E=I(o.rootEntry,"x");s.rootEntry={code:c,desktop:String(E.desktop||""),mobile:String(E.mobile||"")}}s.digest=ee({schemaVersion:s.schemaVersion,appCode:s.appCode,devicePolicy:s.devicePolicy,rootEntry:s.rootEntry,authentication:s.authentication,routes:s.routes})}function Ce(e,t,n){let o=I(e,t);O(o,["schemaVersion","appCode","code","name","schema","surface","invariants","capabilities","dataPolicyCode","fieldPolicies"],t,!0),v(o.schemaVersion,"openxiangda.data-resource/v2",`${t}/schemaVersion`),v(o.appCode,n,`${t}/appCode`);let s=z(o.code,`${t}/code`),r=h(o.name,`${t}/name`,255),a=I(o.schema,`${t}/schema`);O(a,["fields"],`${t}/schema`);let i,c;try{i=at(a.fields,`${t}/schema/fields`),c=Bt(o.invariants,i,`${t}/invariants`),At(o.surface,i,`${t}/surface`)}catch(f){throw f instanceof _e&&l(f.code,f.pointer),f}let u=new Set(i.map(f=>f.code)),E=I(o.capabilities,`${t}/capabilities`);O(E,["read","create","update","delete"],`${t}/capabilities`);let d=I(o.fieldPolicies,`${t}/fieldPolicies`);for(let[f,p]of Object.entries(d)){!u.has(f)&&!Ve(f)&&l("NATIVE_DATA_FIELD_POLICY_FIELD_MISSING",`${t}/fieldPolicies/${f}`);let _=`${t}/fieldPolicies/${f}`,A=I(p,_);Ve(f)&&(O(A,["read"],_,!0),(!Array.isArray(A.read)||A.read.length>20||A.read.some(N=>typeof N!="string"||!N.trim())||new Set(A.read).size!==A.read.length)&&l("NATIVE_DATA_AUDIT_READ_POLICY_INVALID",`${_}/read`)),O(A,["read","create","update","mask"],_,!0),A.mask!==void 0&&!["omit","null"].includes(A.mask)&&l("NATIVE_DATA_FIELD_POLICY_MASK_INVALID",`${_}/mask`)}return{...o,code:s,name:r,schema:{fields:i},...o.invariants===void 0?{}:{invariants:c},capabilities:E,fieldPolicies:d}}function Yn(e){return[{code:`app:${e}:directory:read`,kind:"platform",name:"\u8BFB\u53D6\u53D7\u9650\u7EC4\u7EC7\u76EE\u5F55",source:"platform"},...[["app:role:read","\u67E5\u770B\u89D2\u8272\u4E0E\u6388\u6743"],["app:role:define","\u5B9A\u4E49\u624B\u5DE5\u89D2\u8272"],["app:role:assign","\u5206\u914D\u89D2\u8272\u6210\u5458"],["app:role:grant-capability","\u6388\u4E88\u89D2\u8272\u80FD\u529B"],["app:scope-grant:manage","\u7BA1\u7406\u6570\u636E\u8303\u56F4"],["app:super-admin:manage","\u7BA1\u7406\u5E94\u7528\u6700\u9AD8\u7BA1\u7406\u5458"]].map(([t,n])=>({code:t,kind:"platform",name:n,source:"platform"}))]}function Dn(e,t,n,o){let s=e.toString("utf8"),r;try{r=JSON.parse(s)}catch{l(n,t)}let a=I(r,t);return Q(a)!==s&&l(o,t),a}function yn(e,t){let n=0,o=(s,r,a)=>{if(n+=1,n>As&&l("NATIVE_ARTIFACT_NODE_LIMIT_EXCEEDED",r),a>ps&&l("NATIVE_ARTIFACT_DEPTH_LIMIT_EXCEEDED",r),typeof s=="string"){Buffer.byteLength(s)>Ot&&l("NATIVE_ARTIFACT_STRING_LIMIT_EXCEEDED",r);return}if(Array.isArray(s)){s.forEach((i,c)=>o(i,`${r}/${c}`,a+1));return}if(!(!s||typeof s!="object"))for(let[i,c]of Object.entries(s))["__proto__","prototype","constructor"].includes(i)&&l("NATIVE_ARTIFACT_DANGEROUS_KEY",`${r}/${i}`),ui(i)&&l("NATIVE_ARTIFACT_RUNTIME_FIELD_FORBIDDEN",`${r}/${i}`),o(c,`${r}/${i}`,a+1)};o(e,t,0)}function ui(e){return["environmentKey","environmentId","secretValue","ciphertext","oauthClient","oauthClientId","oauthClientSecret","signingSecret","kubernetesNamespace","nodePort","productionUrl"].includes(e)}function Se(e){return{value:e,digest:ee(e)}}function Vn(e,t,n,o){typeof e!="string"&&!Buffer.isBuffer(e)&&!(e instanceof Uint8Array)&&l("NATIVE_ARTIFACT_BYTES_REQUIRED",n);let s=Buffer.isBuffer(e)?e:Buffer.from(e);return s.byteLength===0&&l("NATIVE_ARTIFACT_EMPTY",n),s.byteLength>t&&l(o,n),s}function Fn(e,t,n,o){let s=Qe.createHash("sha256").update(e).digest("hex");Qe.timingSafeEqual(Buffer.from(s),Buffer.from(t))||l(o,n)}function I(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&l("NATIVE_OBJECT_REQUIRED",t),e}function R(e,t,n){return Array.isArray(e)||l("NATIVE_ARRAY_REQUIRED",t),e.length>n&&l("NATIVE_ARRAY_LIMIT_EXCEEDED",t),e}function w(e,t,n){let o=R(e,t,n).map((s,r)=>h(s,`${t}/${r}`,255));return new Set(o).size!==o.length&&l("NATIVE_ARRAY_DUPLICATE",t),o}function h(e,t,n){return(typeof e!="string"||e.length===0||e.length>n)&&l("NATIVE_STRING_INVALID",t),e}function wt(e,t,n){return(typeof e!="string"||e.length>n)&&l("NATIVE_STRING_INVALID",t),e}function F(e,t){let n=h(e,t,128);return Zo.test(n)||l("NATIVE_CODE_INVALID",t),n}function z(e,t){let n=h(e,t,64);return ts.test(n)||l("NATIVE_RESOURCE_CODE_INVALID",t),n}function W(e,t){let n=h(e,t,63);return ns.test(n)||l("NATIVE_FIELD_CODE_INVALID",t),n}function tt(e,t){let n=h(e,t,128);return is.test(n)||l("NATIVE_WORKFLOW_CODE_INVALID",t),n}function Pt(e,t){let n=h(e,t,128);return rs.test(n)||l("NATIVE_WORKFLOW_BINDING_CODE_INVALID",t),n}function me(e,t,n){let o=h(e,t,255);return Qo.test(o)||l("NATIVE_CAPABILITY_CODE_INVALID",t),!o.startsWith(`app:${n}:`)&&!Yn(n).some(s=>s.code===o)&&l("NATIVE_CAPABILITY_APP_MISMATCH",t),o}function de(e,t){let n=h(e,t,2048);return(!n.startsWith("/")||n.startsWith("//")||n.includes("..")||n.includes("?")||n.includes("#"))&&l("NATIVE_ABSOLUTE_PATH_INVALID",t),n}function De(e,t){return(!Number.isInteger(e)||Number(e)<1)&&l("NATIVE_POSITIVE_INTEGER_REQUIRED",t),Number(e)}function Z(e,t,n,o){return(!Number.isInteger(e)||Number(e)<n||Number(e)>o)&&l("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function ye(e,t){return typeof e!="boolean"&&l("NATIVE_BOOLEAN_REQUIRED",t),e}function Dt(e,t){let n=h(e,t,64).toLowerCase();return Ho.test(n)||l("NATIVE_DIGEST_INVALID",t),n}function v(e,t,n){e!==t&&l("NATIVE_VALUE_MISMATCH",n)}function O(e,t,n,o=!1){let s=new Set([...t,...Array.isArray(o)?o:[]]);for(let r of Object.keys(e))s.has(r)||l("NATIVE_PROPERTY_UNKNOWN",`${n}/${r}`);if(o!==!0)for(let r of t)Object.prototype.hasOwnProperty.call(e,r)||l("NATIVE_PROPERTY_REQUIRED",`${n}/${r}`)}function X(e,t){return[...e].sort((n,o)=>re(t(n),t(o)))}function j(e){return[...new Set(e)].sort(re)}function wn(e){return[...new Set(e)].sort((t,n)=>t-n)}function re(e,t){return e===t?0:e<t?-1:1}function qn(e){return!e||typeof e!="object"||Object.isFrozen(e)||(Object.freeze(e),Object.values(e).forEach(t=>qn(t))),e}function yt(e,t,n){if(Ct(e,t))return n;if(Array.isArray(e)&&Array.isArray(t)){let o=Math.max(e.length,t.length);for(let s=0;s<o;s+=1)if(!Ct(e[s],t[s]))return yt(e[s],t[s],`${n}/${s}`)}if(e&&t&&typeof e=="object"&&typeof t=="object"&&!Array.isArray(e)&&!Array.isArray(t)){let o=j([...Object.keys(e),...Object.keys(t)]);for(let s of o){let r=e[s],a=t[s];if(!Ct(r,a))return yt(r,a,`${n}/${s}`)}}return n}function Ct(e,t){return e===void 0||t===void 0?e===t:Q(e)===Q(t)}function l(e,t,n={}){throw new ht(e,t,n)}var Or="da9817eeab8fed05a961296065186952855f159b425924d038720104686ff585";export{Jt as DATA_AUDIT_METADATA_FIELDS,$t as DATA_EVENT_TYPES_V2,co as DATA_SYSTEM_SORT_FIELD_CODES,Or as NATIVE_CONFIGURATION_VALIDATOR_DIGEST,q as NATIVE_CONTRACT_CAPACITY_V2,rr as NATIVE_DATA_POLICY_EXPRESSION_MAX_CLAUSES,or as NATIVE_DATA_POLICY_EXPRESSION_MAX_DEPTH,sr as NATIVE_DATA_POLICY_EXPRESSION_MAX_GROUP_ITEMS,ir as NATIVE_DATA_POLICY_EXPRESSION_MAX_LEAVES,ar as NATIVE_DATA_POLICY_EXPRESSION_MAX_OCCURRENCES,lo as NATIVE_DATA_QUERY_OPERATORS_V2,ht as NativeConfigurationCompilerError,_e as NativeDataFieldContractV2Error,ke as NativeDataPolicyExpressionV2Error,gt as NativeEventActionContractError,Nt as NativeScopeSourceFieldPathV2Error,Xn as OPENXIANGDA_NATIVE_DATA_FIELD_TYPES_V2,Ne as OPENXIANGDA_NATIVE_DATA_SURFACE_KEYS_V2,_t as OPENXIANGDA_NATIVE_DRAFT_STATE_KEYS_V2,rt as OPENXIANGDA_NATIVE_SYSTEM_FIELDS_V2,Ei as OPENXIANGDA_NATIVE_SYSTEM_FIELD_MAP_V2,Rt as WORKFLOW_EVENT_TYPES_V2,br as compileNativeApplicationConfiguration,ln as compileNativeEventAction,Ts as compileNativeEventCapturePlansV2,Ns as compileRequiredPlatformCapabilitiesV3,Wt as hasDataAuditReadPolicy,Ve as isDataAuditMetadataField,Gt as isDataSystemSortField,mi as isNativeDataQueryOperatorV2,Je as isNativeMultiValueFieldV2,qi as materializeNativeDataQueryPathTypesV2,Ke as nativeDataPolicyExpressionLeavesV2,pn as nativeDataPolicyExpressionToCnfV2,Ki as nativeDataQueryPathPlanV2,Ti as nativeFieldAggregatePlanV2,ki as nativeFieldColumnDefinitionV2,xi as nativeFieldDefaultSqlV2,Ui as nativeFieldHasDefaultV2,Ji as nativeFieldIndexStatementsV2,We as nativeFieldRequiresCreateInputV2,Bi as nativeFieldSequenceGrantStatementsV2,ji as nativeFieldSequenceOwnershipStatementsV2,Mi as nativeFieldSequenceStatementsV2,Kt as nativeFieldSupportsFilterV2,Ni as nativeFieldSupportsOperatorV2,ut as nativeFieldSupportsSearchV2,we as nativeFieldSupportsSortV2,qt as nativeOperatorsForFieldV2,Fo as nativePhysicalFieldV2,vi as nativePhysicalFieldsV2,Te as nativePhysicalObjectNameV2,zi as nativeScopeSourceFieldValueV2,cn as nativeScopeSourceGrantPathSupportedV2,Tt as nativeScopeSourceSubjectPathSupportedV2,Wi as nativeSubtableConstraintStatementsV2,at as parseNativeDataFieldsV2,Bt as parseNativeDataResourceInvariantsV2,It as projectNativeDataResourceViewV2,oe as quoteNativeIdentifierV2,Pe as resolveNativeScopeSourceFieldPathV2,Qt as validateNativeDataDraftStateV2,jt as validateNativeDataResourceReferencesV2,At as validateNativeDataResourceSurfaceV2,fn as validateWorkflowInstanceCommandPolicies,er as workflowInstanceCommandDeadlineError,Zi as workflowInstanceTerminateCapabilityAllowed,un as workflowPolicyTimestamp};
+     END $native_subtable$`]}function Te(e,...t){return`${e}_${ho("sha256").update(t.join(":")).digest("hex").slice(0,32)}`}function oe(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,62}$/.test(e))throw new Error("OPENXIANGDA_NATIVE_IDENTIFIER_INVALID");return`"${e}"`}function Po(e,t){return e.type==="subtable"?"none":t?"gin-trigram":e.indexed?["date-range","datetime-range"].includes(e.type)?"gist-range":Nt.has(e.type)?"btree-snapshot-expressions":Do.has(e.type)?"gin-jsonb-path":"btree":"none"}function Lo(e){switch(e.type){case"text.short":return`varchar(${e.maxLength??255})`;case"text.long":case"text.rich":return"text";case"number.integer":return"bigint";case"number.decimal":return`numeric(${e.precision??38},${e.scale??10})`;case"boolean":return"boolean";case"date":return"date";case"time":return"time(0)";case"datetime":return"timestamptz";case"date-range":return"daterange";case"datetime-range":return"tstzrange";case"uuid":return"uuid";case"serial-number":return"varchar(255)";case"subtable":return"child-resource";default:return Vo.has(e.type),"jsonb"}}function sn(e,t){if(Je(t.type)&&t.type!=="subtable")return"'[]'::jsonb";if(t.type!=="serial-number")return"";let o=nn(t.serial?.prefix||""),n=t.serial?.digits??6;return`(${o} || lpad(nextval(${nn(qe(e,t.code))})::text, ${n}, '0'))`}function vo(e,t){return on.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'array')`:yo.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'object')`:""}function Ye(e){return`"app_data".${oe(e)}`}function qe(e,t){let o=Te("seq",e,t);return`"app_data".${oe(o)}`}function nn(e){return`'${e.replace(/'/g,"''")}'`}var rn=new Set(["option.single","option.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple"]),ko=new Set([...rn,"cascade.single","cascade.multiple","file","image","signature","address","location","json"]),an=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,xo=new Set(["__proto__","prototype","constructor"]),Tt=class extends Error{constructor(o){super("OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID");this.path=o;this.name="NativeScopeSourceFieldPathV2Error"}path;code="OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID"};function Pe(e,t){let o=dn(e);if(!o)return null;let n=t.get(o[0]);if(!n)return null;let s=o.slice(1).join(".")||void 0;return{field:n,...s?{valuePath:s}:{}}}function gt(e){return!!(e&&e.field.type==="user.single"&&e.valuePath==="value")}function cn(e,t,o){if(!e||!t||!Uo(e))return!1;let{field:n,valuePath:s}=e;if(!s)return t.valueType==="uuid"?n.type==="uuid":["text.short","text.long","serial-number"].includes(n.type);if(s==="value")return!(t.valueSourceResourceCode&&n.type.startsWith("resource-ref.")&&n.source?.resourceCode!==t.valueSourceResourceCode);let r=s.slice(9),i=o.get(n.source?.resourceCode||"")?.get(r)?.type;return t.valueType==="uuid"?i==="uuid":["text.short","text.long","serial-number"].includes(i||"")}function zi(e,t){let o=dn(t);if(!o)throw new Tt(String(t||""));let n=e;for(let s of o){if(!n||typeof n!="object"||!Object.prototype.hasOwnProperty.call(n,s))return;n=n[s]}return n}function Uo(e){let{field:t,valuePath:o}=e;if(!o)return!ko.has(t.type);if(o==="value")return rn.has(t.type);if(!o.startsWith("snapshot."))return!1;let n=o.slice(9);return an.test(n)&&t.type.startsWith("resource-ref.")&&!!t.source?.snapshotFields?.includes(n)}function dn(e){if(typeof e!="string"||e.length===0||e.length>192)return null;let t=e.split(".");return![1,2,3].includes(t.length)||t.some(o=>!an.test(o)||xo.has(o))||t.length===2&&t[1]!=="value"||t.length===3&&t[1]!=="snapshot"?null:t}var Mo=new Set(["option.single","user.single","department.single","resource-ref.single"]),jo=new Set(["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","uuid","serial-number"]),Bo=new Set(["value","label","description","color"]),Jo=new Set(["avatarUrl","employeeNo","title","mobile","email"]),Wo=new Set(["fullPath","parent.value","parent.label"]),Go=new Set(["country.value","country.label","province.value","province.label","city.value","city.label","district.value","district.label","street.value","street.label","detail","fullAddress"]),zo=new Set(["longitude","latitude","accuracy"]),Yo=new Set(["address","name","province","city","district","source"]);function qi(e){let t=new Map(e.map(o=>[o.code,new Map(o.schema.fields.map(n=>[n.code,n]))]));return e.map(o=>({...o,schema:{...o.schema,fields:o.schema.fields.map(n=>{let s=qo(n,t);if(!Object.keys(s).length)return n;let r={...n};return Object.defineProperty(r,"queryPathTypes",{configurable:!1,enumerable:!1,writable:!1,value:Object.freeze(s)}),r})}}))}function Ki(e,t){if(Mo.has(e.type)&&Bo.has(t)||e.type==="user.single"&&Jo.has(t)||e.type==="department.single"&&Wo.has(t))return Le(t);if(e.type==="resource-ref.single"){let o=e.queryPathTypes?.[t];return o?{parts:t.split("."),type:o}:null}if(e.type==="address"&&Go.has(t))return Le(t);if(e.type==="location"){if(zo.has(t))return{parts:[t],type:"number.decimal"};if(Yo.has(t))return Le(t);if(t==="capturedAt")return{parts:[t],type:"datetime"}}return null}function qo(e,t){if(e.type!=="resource-ref.single"||!e.source)return{};let o=t.get(e.source.resourceCode);return o?Object.fromEntries((e.source.snapshotFields||[]).flatMap(n=>{let s=o.get(n);return s?[[`snapshot.${n}`,jo.has(s.type)?s.type:"json"]]:[]})):{}}function Le(e){return{parts:e.split("."),type:"text.short"}}var Ct=class extends Error{constructor(o,n){super(n);this.pointer=o}pointer;code="NATIVE_EVENT_ACTION_INVALID"};function ln(e,t,o="/events/subscriptions"){if(e.execution===void 0)return;let n=(A,m)=>{throw new Ct(`${o}${A}`,m)},s=(A,m,N)=>((!A||typeof A!="object"||Array.isArray(A)||Object.keys(A).some(T=>!N.includes(T)))&&n(m,"Invalid action object or unsupported property"),A),r=s(e.execution,"/execution",["kind","version","operations"]);(r.kind!=="native-data"||r.version!==1)&&n("/execution","Expected native-data version 1"),e.platformAccess&&n("/platformAccess","Native actions do not use application runtime capabilities"),(!Array.isArray(e.eventTypes)||!e.eventTypes.length||e.eventTypes.some(A=>!/^openxiangda\.data\.record\.(created|updated|deleted)\.v2$/.test(A)))&&n("/eventTypes","Native data actions require declared data events");let c=e.filter?.resourceCodes;(!Array.isArray(c)||!c.length||c.length>20)&&n("/filter/resourceCodes","Native actions require explicit source resources");let i=new Map(t.map(A=>[A.code,A])),a=c.map(A=>{let m=i.get(A);return m||n("/filter/resourceCodes","Unknown source resource"),new Set((m.schema?.fields||[]).map(N=>N.code))}),u=new Set(e.payload?.fields||[]),E=e.payload?.includeChanges===!0,l=(A,m)=>{let N=s(A,m,["source","path","value"]);if(N.source==="literal"){(!Object.hasOwn(N,"value")||Object.hasOwn(N,"path"))&&n(m,"Literal binding requires only value");let g;try{g=JSON.stringify(N.value)}catch{n(m,"Literal must be JSON")}return(g===void 0||Buffer.byteLength(g)>65536)&&n(m,"Literal is too large or not JSON"),{source:"literal",value:JSON.parse(g)}}(N.source!=="event"||typeof N.path!="string"||Object.hasOwn(N,"value"))&&n(m,"Expected a literal or event binding");let T=N.path.split(".");(T.length>8||T.some(g=>!/^[A-Za-z0-9_-]+$/.test(g)||["__proto__","prototype","constructor"].includes(g)))&&n(m,"Invalid event path");let b=/^data\.projection\.([A-Za-z][A-Za-z0-9_]{0,62})$/.exec(N.path),$=/^data\.changes\.([A-Za-z][A-Za-z0-9_]{0,62})\.(before|after)$/.exec(N.path);if(b||$){let g=(b||$)[1];a.some(C=>!C.has(g))&&n(m,"Source field must exist on every filtered resource"),u.add(g),$&&(E=!0)}else["id","time","type","subject","data.recordId","data.revision","data.operation","data.resourceCode"].includes(N.path)||n(m,"Event path is not part of the data event contract");return{source:"event",path:N.path}};(!Array.isArray(r.operations)||r.operations.length<1||r.operations.length>16)&&n("/execution/operations","Expected 1 to 16 operations");let f={},p=r.operations.map((A,m)=>{let N=`/execution/operations/${m}`,T=s(A,N,["operation","resourceCode","data","id","expectedRevision"]);["create","update","delete"].includes(T.operation)||n(N,"Unsupported Native operation");let b=i.get(T.resourceCode);b||n(N,"Unknown action target resource");let $=new Map((b.schema?.fields||[]).map(C=>[C.code,C])),g=T.data===void 0?{}:s(T.data,`${N}/data`,[...$.keys()]);return Object.keys(g).length>32&&n(N,"Maximum 32 mapped fields per operation"),T.operation==="create"&&(T.id!==void 0||T.expectedRevision!==void 0)&&n(N,"Create does not accept id or expectedRevision"),T.operation==="delete"&&T.data!==void 0&&n(N,"Delete does not accept data"),Object.keys(g).some(C=>$.get(C)?.type==="serial-number")&&n(N,"Generated fields cannot be assigned"),f[T.resourceCode]=ee(b),{operation:T.operation,resourceCode:T.resourceCode,...T.operation==="create"?{}:{id:l(T.id,`${N}/id`),expectedRevision:l(T.expectedRevision,`${N}/expectedRevision`)},...T.operation==="delete"?{}:{data:Object.fromEntries(Object.entries(g).map(([C,D])=>[C,l(D,`${N}/data/${C}`)]))}}});(u.size>32||[...u].some(A=>a.some(m=>!m.has(A))))&&n("/payload/fields","Payload must contain at most 32 declared source fields");let _={kind:"native-data",version:1,operations:p,resourceDigests:f};return Buffer.byteLength(JSON.stringify(_))>65536&&n("/execution","Action plan exceeds 64 KiB"),{execution:{..._,digest:ee(_)},payload:{includeChanges:E,fields:[...u].sort()}}}function ge(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function fn(e,t){if(e?.instanceCommands===void 0)return[];let o=ge(e.instanceCommands);if(!o||!Object.keys(o).length||Object.keys(o).some(s=>!["withdraw","terminate"].includes(s)))return["WORKFLOW_INSTANCE_COMMAND_POLICIES_INVALID"];let n=[];for(let[s,r]of Object.entries(o)){let c=ge(r),i=s==="withdraw"?["beforeFact"]:["beforeFact","capability"];if(!c||Object.keys(c).some(a=>!i.includes(a))){n.push(`WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID:${s}`);continue}if(s==="terminate"){let a=c.capability;(typeof a!="string"||a.length>255||!/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(a)||t&&(!a.startsWith(`app:${t.appCode}:`)||!t.capabilities.includes(a)))&&n.push("WORKFLOW_INSTANCE_TERMINATE_CAPABILITY_INVALID")}if(s==="withdraw"||c.beforeFact!==void 0){let a=c.beforeFact,u=ge(e.inputSchema),E=ge(ge(u?.properties)?.[a]),l=ge(ge(e.subject)?.factProjection)?.[a],f=t?.fields.get(l);(typeof a!="string"||!/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(a)||!Array.isArray(u?.required)||!u.required.includes(a)||E?.type!=="string"||E?.format!=="date-time"||typeof l!="string"||t&&(f?.type!=="datetime"||f.nullable===!0))&&n.push(`WORKFLOW_INSTANCE_COMMAND_DEADLINE_FACT_INVALID:${s}`)}}return n}function Zi(e,t){let o=e?.terminate?.capability;return typeof o=="string"&&/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(o)&&t.includes(o)}function un(e){if(typeof e!="string")return null;let t=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,3}))?(Z|[+-]\d{2}:\d{2})$/.exec(e);if(!t)return null;let[,o,n,s,r,c,i]=t,a=t[8],u=new Date(Date.UTC(Number(o),Number(n),0)).getUTCDate();if(Number(n)<1||Number(n)>12||Number(s)<1||Number(s)>u||Number(r)>23||Number(c)>59||Number(i)>59||a!=="Z"&&(Number(a.slice(1,3))>23||Number(a.slice(4))>59))return null;let E=Date.parse(e);return Number.isFinite(E)?E:null}function er(e,t,o,n){let s=e?.[t];if(!s||t==="terminate"&&s.beforeFact===void 0)return null;let r=s.beforeFact,c=ge(o),i=r&&c&&Object.hasOwn(c,r)?un(c[r]):null,a=n instanceof Date?n.getTime():un(n);return i===null||a===null||!Number.isFinite(a)?"WORKFLOW_V2_CANCELLATION_DEADLINE_INVALID":a<i?null:"WORKFLOW_V2_CANCELLATION_DEADLINE_PASSED"}import*as Qe from"crypto";var _n="native-4",En={"application-native-2":"1.0.0","authz.native-batch-explain":"1.0.0","authz.native-management":"1.0.0","deployment.durable-runs":"1.0.0","deployment.platform-executor":"1.0.0","environment.on-demand-production":"1.0.0","environment.runtime-lifecycle":"1.0.0","data-api-v2":"1.1.0","data.native-golden-crud":"1.0.0","data.audit-read-access":"1.0.0","data.managed-files":"1.1.0","data.decimal-reservations":"1.0.0","workflow.named-input-sources":"1.0.0","directory-v2":"1.0.0","events-v2":"1.0.0","events.durable-receipts":"1.0.0","events.capture-policy":"1.0.0","events.native-data-actions":"1.0.0","workflow-kernel-v2":"1.0.0","workflow.instance-cancellation-policy":"1.0.0","business-process.durable-command":"1.1.0","workflow.fresh-command-token":"1.0.0","notification-hub-v2":"1.0.0","authentication.application-login-surface":"1.0.0","public-access.anonymous-owner-records":"1.0.0"};var or=5,sr=20,ir=50,rr=50,ar=100,ke=class extends Error{constructor(o,n){super(o);this.code=o;this.pointer=n;this.name="NativeDataPolicyExpressionV2Error"}code;pointer};function Ke(e,t){let o=[],n=(s,r,c)=>{c>5&&ve("NATIVE_DATA_POLICY_EXPRESSION_DEPTH_EXCEEDED",r);let i=An(s,r),a=["allOf","anyOf"].filter(l=>l in i);if(a.length===0){o.push({rule:i,pointer:r}),o.length>50&&ve("NATIVE_DATA_POLICY_EXPRESSION_LEAVES_EXCEEDED",r);return}let u=a[0],E=i[u];(a.length!==1||Object.keys(i).length!==1||!Array.isArray(E)||E.length<1||E.length>20)&&ve("NATIVE_DATA_POLICY_EXPRESSION_GROUP_INVALID",r),E.forEach((l,f)=>n(l,`${r}/${u}/${f}`,c+1))};return n(e,t,1),o}function pn(e,t){Ke(e,t);let o=(n,s)=>{let r=An(n,s);if(Array.isArray(r.allOf))return bt(r.allOf.flatMap((c,i)=>o(c,`${s}/allOf/${i}`)),s);if(Array.isArray(r.anyOf)){let c=[[]];return r.anyOf.forEach((i,a)=>{let u=o(i,`${s}/anyOf/${a}`);c=bt(c.flatMap(E=>u.map(l=>[...E,...l])),s)}),c}return[[r]]};return bt(o(e,t),t)}function bt(e,t){let o=e.reduce((n,s)=>n+s.length,0);return(e.length>50||o>100)&&ve("NATIVE_DATA_POLICY_EXPRESSION_EXPANSION_EXCEEDED",t),e}function An(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&ve("NATIVE_DATA_POLICY_EXPRESSION_NODE_INVALID",t),e}function ve(e,t){throw new ke(e,t)}var Ko="openxiangda.config-bundle/v3",Pn="openxiangda.contract-bundle/v3",In="openxiangda.native-configuration-projection/v1",Ue=_n,Ho=/^[a-f0-9]{64}$/,Xo=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,Qo=/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._*-]+$/,Zo=/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/,es=/^[a-z][a-z0-9]*(?:[-.][a-z0-9]+)*$/,ts=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,ns=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,mn=/^[A-Za-z][A-Za-z0-9_]{0,127}$/,os=/^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$/,ss=/^[A-Z][A-Z0-9_]*$/,is=/^[a-z][a-z0-9-]{2,63}$/,rs=/^[A-Za-z][A-Za-z0-9_-]{0,127}$/,as=/^[A-Za-z][A-Za-z0-9_.]{0,127}$/,cs=16,ds=2*1024,ls=new Set(["text.short","text.long","number.integer","number.decimal","boolean","date","time","datetime","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","uuid","serial-number"]),us=new Set(["overview","database","operations","workflow","members","calendar","document","folder","settings"]),fs=new Set(["approve","reject","return","transfer","delegate","add_assignee","resubmit","withdraw","terminate","admin_reassign","admin_override","retry_resolution"]),_s=4*1024*1024,Es=8*1024*1024,ps=40,As=1e5,$t=1024*1024,Is="openxiangda.event-handler-manifest/v2",Ln="openxiangda.application-route-manifest/v3",Nn=64,vn=new Set(["id","revision","created_by","updated_by","created_at","updated_at"]),q=Object.freeze({perspectives:100,resources:100,subjectReadSurfaces:50,capabilities:2e3,operations:500,eventConsumers:100,eventProducers:1e3,eventSchemas:100,eventTypes:500,workflows:100,routes:500,adminPages:500,adminNavigationGroups:100,adminNavigationItems:500}),Rt=["openxiangda.data.record.created.v2","openxiangda.data.record.updated.v2","openxiangda.data.record.deleted.v2"],St=["openxiangda.workflow.instance.started.v2","openxiangda.workflow.instance.cc_added.v2","openxiangda.workflow.instance.completed.v2","openxiangda.workflow.instance.rejected.v2","openxiangda.workflow.instance.returned.v2","openxiangda.workflow.instance.resumed.v2","openxiangda.workflow.instance.withdrawn.v2","openxiangda.workflow.instance.terminated.v2","openxiangda.workflow.task.created.v2","openxiangda.workflow.task.assigned.v2","openxiangda.workflow.task.assignment_pending.v2","openxiangda.workflow.task.assignment_resolution_failed.v2","openxiangda.workflow.task.approved.v2","openxiangda.workflow.task.completed.v2","openxiangda.workflow.task.rejected.v2","openxiangda.workflow.task.returned.v2","openxiangda.workflow.task.resubmitted.v2","openxiangda.workflow.task.transferred.v2","openxiangda.workflow.task.reassigned.v2","openxiangda.workflow.task.delegated.v2","openxiangda.workflow.task.assignee_added.v2","openxiangda.workflow.task.cancelled.v2","openxiangda.workflow.participant.activated.v2","openxiangda.workflow.participant.completed.v2","openxiangda.workflow.participant.rejected.v2","openxiangda.workflow.participant.returned.v2","openxiangda.workflow.participant.transferred.v2","openxiangda.workflow.participant.reassigned.v2","openxiangda.workflow.participant.delegated.v2","openxiangda.workflow.participant.added.v2","openxiangda.workflow.participant.suspended.v2","openxiangda.workflow.participant.resumed.v2","openxiangda.workflow.participant.cancelled.v2"],ms=new Set(St),ht=class extends Error{code;pointer;identifiers;constructor(t,o,n={}){super(t),this.name="NativeConfigurationCompilerError",this.code=t,this.pointer=o,this.identifiers=Object.fromEntries(Object.entries(n).slice(0,8).map(([s,r])=>[s,String(r).slice(0,128)]))}};function Cr(e){let t=S(e.appCode,"/appCode",128);Xo.test(t)||d("NATIVE_CONFIG_APP_CODE_INVALID","/appCode");let o=yt(e.expectedConfigDigest,"/expectedConfigDigest"),n=yt(e.expectedContractDigest,"/expectedContractDigest"),s=Vn(e.configBytes,_s,"/configBytes","NATIVE_CONFIG_ARTIFACT_TOO_LARGE"),r=Vn(e.contractBytes,Es,"/contractBytes","NATIVE_CONTRACT_ARTIFACT_TOO_LARGE");Fn(s,o,"/configBytes","NATIVE_CONFIG_DIGEST_MISMATCH"),Fn(r,n,"/contractBytes","NATIVE_CONTRACT_DIGEST_MISMATCH");let c=Dn(s,"/configBytes","NATIVE_CONFIG_JSON_INVALID","NATIVE_CONFIG_NOT_CANONICAL"),i=Dn(r,"/contractBytes","NATIVE_CONTRACT_JSON_INVALID","NATIVE_CONTRACT_NOT_CANONICAL");yn(c,"/config"),yn(i,"/contracts");let a=c,u=i;Cs(a,t),bs(u,t,o);let E=Os(a,o,u.generatorVersion);li(E,u,a),Q(E)!==Q(u)&&d("NATIVE_CONTRACT_CLOSURE_MISMATCH",Vt(E,u,"/contracts"));let l={authz:{appCode:t,...a.authz,perspectives:a.perspectives,capabilityCatalog:E.capabilities},data:{appCode:t,resources:a.data.resources,resourceContracts:E.resources,...E.subjectReadSurfaces?{subjectReadSurfaces:E.subjectReadSurfaces}:{}},events:{appCode:t,...a.events,consumers:E.eventConsumers,producers:E.eventProducers,handlerManifest:E.eventHandlerManifest,eventTypes:E.eventTypes,capturePlans:Ts({resources:a.data.resources,dataPolicies:a.authz.dataPolicies,subscriptions:E.eventConsumers,capturePolicies:a.events.capturePolicies})},workflows:{appCode:t,...a.workflows,contracts:E.workflows},runtime:{appCode:t,requirements:a.runtime,backend:a.backend,frontend:a.frontend},contracts:E},f={authz:he(l.authz),data:he(l.data),events:he(l.events),workflows:he(l.workflows),runtime:he(l.runtime),contracts:he(l.contracts)},p={configDigest:o,contractDigest:n,generatorVersion:u.generatorVersion},_=Ns(a),A={schemaVersion:In,compilerContractVersion:Ue,appCode:t,source:p,projections:f,requiredPlatformCapabilities:_,aggregateDigest:ee({schemaVersion:In,compilerContractVersion:Ue,appCode:t,source:p,requiredPlatformCapabilities:_,projectionDigests:Object.fromEntries(Object.entries(f).map(([m,N])=>[m,N.digest]))})};return qn(A)}function Ns(e){let t=e.authz.roles,o=e.data.resources,n=e.backend.operations,s=t.some(_=>_.capabilities.some(A=>A.endsWith(":directory:read")))||o.some(_=>_.schema.fields.some(A=>["user.single","user.multiple","department.single","department.multiple"].includes(A.type)))||n.some(_=>_.platformAccess?.directory),r=!!(e.events.subscriptions.length||e.events.timers.length||e.events.dateTriggers.length||e.events.schemas.length),c=n.some(_=>_.platformAccess?.managedFiles||_.platformAccess?.managedFileCopies)||e.events.subscriptions.some(_=>_.platformAccess?.managedFileCopies),i=n.some(_=>_.platformAccess?.notification)||e.events.subscriptions.some(_=>_.platformAccess?.notification),a=e.workflows.definitions.filter(_=>_.launch.mode==="standalone"||_.launch.mode==="hidden-handoff"),u=n.some(_=>_.platformAccess?.workflow)||a.length>0,E={resources:o},l={perspectives:e.perspectives,authz:e.authz},f={schemaVersion:e.schemaVersion,appCode:e.appCode,frontend:{routes:e.frontend.routes,user:e.frontend.user,admin:e.frontend.admin,devicePolicy:e.frontend.devicePolicy},backend:{operations:n.map(_=>({code:_.code,method:_.method,path:_.path,capability:_.capability,platformAccess:_.platformAccess||null,..._.browser?{browser:_.browser}:{},ai:_.ai||null}))}};return[...n.some(_=>_.platformAccess?.decimalReservation)?[{code:"data.decimal-reservations",declaration:n.filter(_=>_.platformAccess?.decimalReservation).map(_=>({code:_.code,decimalReservation:_.platformAccess.decimalReservation}))}]:[],{code:"application-native-2",declaration:f},{code:"authz.native-batch-explain",declaration:l},{code:"authz.native-management",declaration:l},{code:"deployment.durable-runs",declaration:f.backend},{code:"deployment.platform-executor",declaration:f.backend},{code:"environment.on-demand-production",declaration:{environments:["preproduction","production"]}},{code:"environment.runtime-lifecycle",declaration:{environments:["preproduction","production"]}},...o.length?[{code:"data-api-v2",declaration:E},{code:"data.native-golden-crud",declaration:E}]:[],...o.some(Wt)?[{code:"data.audit-read-access",declaration:E}]:[],...s?[{code:"directory-v2",declaration:{roles:t.map(_=>({code:_.code,capabilities:_.capabilities.filter(A=>A.endsWith(":directory:read"))})),resources:o.map(_=>({code:_.code,fields:_.schema.fields.filter(A=>["user.single","user.multiple","department.single","department.multiple"].includes(A.type))})),operations:n.filter(_=>_.platformAccess?.directory).map(_=>({code:_.code,directory:_.platformAccess.directory}))}}]:[],...c?[{code:"data.managed-files",declaration:{operations:n.filter(_=>_.platformAccess?.managedFiles||_.platformAccess?.managedFileCopies).map(_=>({code:_.code,..._.platformAccess?.managedFiles?{managedFiles:_.platformAccess.managedFiles}:{},..._.platformAccess?.managedFileCopies?{managedFileCopies:_.platformAccess.managedFileCopies}:{}})),subscriptions:e.events.subscriptions.filter(_=>_.platformAccess?.managedFileCopies).map(_=>({code:_.code,managedFileCopies:_.platformAccess.managedFileCopies}))}}]:[],...e.events.subscriptions.some(_=>_.execution)?[{code:"events.native-data-actions",declaration:e.events.subscriptions.filter(_=>_.execution)}]:[],...e.events.capturePolicies?.length?[{code:"events.capture-policy",declaration:e.events.capturePolicies}]:[],...r?[{code:"events-v2",declaration:e.events},{code:"events.durable-receipts",declaration:e.events}]:[],...e.workflows.activations.length?[{code:"workflow-kernel-v2",declaration:e.workflows},{code:"workflow.fresh-command-token",declaration:e.workflows}]:[],...e.workflows.definitions.some(_=>_.definition.instanceCommands!==void 0)?[{code:"workflow.instance-cancellation-policy",declaration:e.workflows.definitions.filter(_=>_.definition.instanceCommands!==void 0)}]:[],...u?[{code:"business-process.durable-command",declaration:{operations:n.filter(_=>_.platformAccess?.workflow).map(_=>({code:_.code,workflow:_.platformAccess.workflow})),definitions:a,activations:e.workflows.activations.filter(_=>a.some(A=>A.definition.code===_.workflowCode))}}]:[],...i?[{code:"notification-hub-v2",declaration:{operations:n.filter(_=>_.platformAccess?.notification).map(_=>({code:_.code,notification:_.platformAccess.notification})),subscriptions:e.events.subscriptions.filter(_=>_.platformAccess?.notification).map(_=>({code:_.code,notification:_.platformAccess.notification}))}}]:[],...e.frontend.authentication?[{code:"authentication.application-login-surface",declaration:e.frontend.authentication}]:[],...e.frontend.publicAccess?[{code:"public-access.anonymous-owner-records",declaration:e.frontend.publicAccess}]:[]].map(({code:_,declaration:A})=>({code:_,contractVersion:En[_],usageDigest:`sha256:${ee(A)}`})).sort((_,A)=>_.code===A.code?0:_.code<A.code?-1:1)}function Ts(e){let t=new Map,o=new Set(e.resources.map(r=>String(r.code)));for(let[r,c]of R(e.capturePolicies===void 0?[]:e.capturePolicies,"/capturePlan/capturePolicies",100).entries()){let i=`/capturePlan/capturePolicies/${r}`,a=I(c,i);O(a,["resourceCode","mode"],i);let u=G(a.resourceCode,`${i}/resourceCode`);o.has(u)||d("NATIVE_EVENT_CAPTURE_RESOURCE_NOT_FOUND",i,{resourceCode:u}),t.has(u)&&d("NATIVE_EVENT_CAPTURE_POLICY_DUPLICATE",i,{resourceCode:u}),a.mode!=="all"&&a.mode!=="subscribed"&&d("NATIVE_EVENT_CAPTURE_MODE_INVALID",`${i}/mode`),t.set(u,a.mode)}let n=new Map(e.dataPolicies.map((r,c)=>{let i=I(r,`/capturePlan/dataPolicies/${c}`);return[String(i.code),i]})),s=e.subscriptions.map((r,c)=>I(r,`/capturePlan/subscriptions/${c}`));return e.resources.map((r,c)=>{let i=`/capturePlan/resources/${c}`,a=I(r,i),u=G(a.code,`${i}/code`),E=a.schema?I(a.schema,`${i}/schema`):a,l=new Set(R(E.fields||[],`${i}/schema/fields`,500).map((C,D)=>B(I(C,`${i}/schema/fields/${D}`).code,`${i}/schema/fields/${D}/code`))),f=a.dataPolicyCode?F(a.dataPolicyCode,`${i}/dataPolicyCode`):null,p=f?n.get(f):void 0;f&&!p&&d("NATIVE_EVENT_CAPTURE_AUTHZ_POLICY_NOT_FOUND",i,{resourceCode:u,dataPolicyCode:f});let _=new Set;for(let C of p?.rules||[])_.add(String(C.field));if(p?.readExpression)for(let C of Ke(p.readExpression,`${i}/readExpression`))_.add(String(C.rule.field));let A=new Set,m=new Set,N=new Set;for(let[C,D]of s.entries()){let y=R(D.eventTypes,`/capturePlan/subscriptions/${C}/eventTypes`,20).map(String);if(!y.some(M=>M.startsWith("openxiangda.data.")))continue;let U=I(D.filter||{},`/capturePlan/subscriptions/${C}/filter`),k=Array.isArray(U.resourceCodes)?U.resourceCodes.map(String):[];if(k.length&&!k.includes(u))continue;for(let M of y)Rt.includes(M)&&N.add(M);for(let M of gs(U,`/capturePlan/subscriptions/${C}/filter`))A.add(M);let Y=I(D.payload||{},`/capturePlan/subscriptions/${C}/payload`);for(let M of R(Y.fields||[],`/capturePlan/subscriptions/${C}/payload/fields`,32))m.add(B(M,`/capturePlan/subscriptions/${C}/payload/fields`))}let T=new Set([...A,...m]),b=new Set([...T,..._]);b.size>Nn&&d("NATIVE_EVENT_CAPTURE_FIELDS_LIMIT",i,{resourceCode:u,maximum:Nn});for(let C of b)!l.has(C)&&!(_.has(C)&&vn.has(C))&&d("NATIVE_EVENT_CAPTURE_FIELD_NOT_FOUND",i,{resourceCode:u,field:C});let $=I(a.fieldPolicies||{},`${i}/fieldPolicies`);for(let C of T)$[C]?.mask==="omit"&&d("NATIVE_EVENT_CAPTURE_FIELD_SENSITIVE",i,{resourceCode:u,field:C});let g={resourceCode:u,...t.get(u)==="subscribed"?{capturedEventTypes:[...N].sort()}:{},filterFields:[...A].sort(),projectionFields:[...m].sort(),authorizationFields:[..._].sort(),captureFields:[...b].sort()};return{...g,digest:ee(g)}}).sort((r,c)=>r.resourceCode.localeCompare(c.resourceCode))}function gs(e,t){let o=new Set;for(let[c,i]of R(e.changes||[],`${t}/changes`,16).entries()){let a=I(i,`${t}/changes/${c}`);o.add(B(a.field,`${t}/changes/${c}/field`))}let n=I(e.changedFields||{},`${t}/changedFields`);for(let c of["anyOf","allOf","noneOf"])for(let[i,a]of R(n[c]||[],`${t}/changedFields/${c}`,32).entries())o.add(B(a,`${t}/changedFields/${c}/${i}`));let s=0,r=(c,i,a)=>{a>3&&d("NATIVE_EVENT_FILTER_DEPTH_LIMIT",i);let u=I(c,i);if(u.change){let l=I(u.change,`${i}/change`);o.add(B(l.field,`${i}/change/field`)),s+=1;return}if(u.not){r(u.not,`${i}/not`,a+1);return}let E=u.all?"all":u.any?"any":null;E||d("NATIVE_EVENT_FILTER_CONDITION_INVALID",i);for(let[l,f]of R(u[E],`${i}/${E}`,16).entries())r(f,`${i}/${E}/${l}`,a+1)};return e.where&&r(e.where,`${t}/where`,1),s+=Array.isArray(e.changes)?e.changes.length:0,s>16&&d("NATIVE_EVENT_FILTER_ATOM_LIMIT",t),[...o].sort()}function Cs(e,t){O(e,["schemaVersion","compilerContractVersion","appCode","perspectives","authz","backend","data","events","workflows","frontend","runtime"],"/config"),v(e.schemaVersion,Ko,"/config/schemaVersion"),v(e.compilerContractVersion,Ue,"/config/compilerContractVersion"),v(e.appCode,t,"/config/appCode"),R(e.perspectives,"/config/perspectives",100);let o=I(e.authz,"/config/authz");O(o,["capabilities","roles","scopeDimensions","scopeSources","roleMembershipSources","relationshipGrantSources","dataPolicies","authorizationTransitions"],"/config/authz",["authenticatedUserRoleCode"]),R(o.capabilities,"/config/authz/capabilities",2e3),R(o.roles,"/config/authz/roles",100),R(o.scopeDimensions,"/config/authz/scopeDimensions",100),R(o.scopeSources,"/config/authz/scopeSources",100),R(o.roleMembershipSources,"/config/authz/roleMembershipSources",100),R(o.relationshipGrantSources,"/config/authz/relationshipGrantSources",100),R(o.dataPolicies,"/config/authz/dataPolicies",100),R(o.authorizationTransitions,"/config/authz/authorizationTransitions",100);let n=I(e.backend,"/config/backend");O(n,["secrets","operations"],"/config/backend"),R(n.secrets,"/config/backend/secrets",100),R(n.operations,"/config/backend/operations",500),si(n.secrets);let s=I(e.data,"/config/data");O(s,["resources"],"/config/data",["resourceDetailRoutes","subjectReadSurfaces"]),R(s.resources,"/config/data/resources",100),s.subjectReadSurfaces!==void 0&&R(s.subjectReadSurfaces,"/config/data/subjectReadSurfaces",q.subjectReadSurfaces),s.resourceDetailRoutes!==void 0&&R(s.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100);let r=I(e.events,"/config/events");O(r,["schemas","subscriptions","timers","dateTriggers"],"/config/events",["capturePolicies"]),R(r.schemas,"/config/events/schemas",100),R(r.subscriptions,"/config/events/subscriptions",100),R(r.timers,"/config/events/timers",100),R(r.dateTriggers,"/config/events/dateTriggers",100);let c=I(e.workflows,"/config/workflows");O(c,["definitions","bindings","activations","providers","editableParameters"],"/config/workflows"),R(c.definitions,"/config/workflows/definitions",100),R(c.bindings,"/config/workflows/bindings",100),R(c.activations,"/config/workflows/activations",100),R(c.providers,"/config/workflows/providers",100),R(c.editableParameters,"/config/workflows/editableParameters",100);let i=I(e.frontend,"/config/frontend");O(i,["routes","user","admin","devicePolicy"],"/config/frontend",["authentication","publicAccess"]),R(i.routes,"/config/frontend/routes",500);let a=I(i.user,"/config/frontend/user");O(a,["applicationTodoCenter"],"/config/frontend/user"),ye(a.applicationTodoCenter,"/config/frontend/user/applicationTodoCenter"),Ft(i.devicePolicy,"/config/frontend/devicePolicy"),Object.prototype.hasOwnProperty.call(i,"authentication")&&xn(i.authentication,i.routes,e,"/config/frontend/authentication"),Object.prototype.hasOwnProperty.call(i,"publicAccess")&&Us(i.publicAccess,e,"/config/frontend/publicAccess");let u=I(i.admin,"/config/frontend/admin");O(u,["navigation"],"/config/frontend/admin",["access"]),u.access!==void 0&&et(u.access,"/config/frontend/admin/access",e.appCode),Js(u.navigation,"/config/frontend/admin/navigation");let E=I(e.runtime,"/config/runtime");O(E,["protocolCapabilities","health"],"/config/runtime"),w(E.protocolCapabilities,"/config/runtime/protocolCapabilities",100),O(I(E.health,"/config/runtime/health"),["livePath","readyPath","versionPath"],"/config/runtime/health"),v(E.health.livePath,"/__platform/health","/config/runtime/health/livePath"),v(E.health.readyPath,"/__platform/ready","/config/runtime/health/readyPath"),v(E.health.versionPath,"/__platform/version","/config/runtime/health/versionPath")}function bs(e,t,o){O(e,["schemaVersion","compilerContractVersion","generatorVersion","appCode","configDigest","perspectives","resources","capabilities","operations","eventConsumers","eventProducers","eventSchemas","eventHandlerManifest","eventTypes","workflows","routes","routeManifest","adminPages","adminNavigation"],"/contracts",["authentication","publicAccess","adminAccess","subjectReadSurfaces"]),v(e.schemaVersion,Pn,"/contracts/schemaVersion"),v(e.compilerContractVersion,Ue,"/contracts/compilerContractVersion"),S(e.generatorVersion,"/contracts/generatorVersion",128),v(e.appCode,t,"/contracts/appCode"),v(e.configDigest,o,"/contracts/configDigest"),R(e.perspectives,"/contracts/perspectives",q.perspectives),R(e.resources,"/contracts/resources",q.resources),e.subjectReadSurfaces!==void 0&&R(e.subjectReadSurfaces,"/contracts/subjectReadSurfaces",q.subjectReadSurfaces),R(e.capabilities,"/contracts/capabilities",q.capabilities),R(e.operations,"/contracts/operations",q.operations),R(e.eventConsumers,"/contracts/eventConsumers",q.eventConsumers),R(e.eventProducers,"/contracts/eventProducers",q.eventProducers),R(e.eventSchemas,"/contracts/eventSchemas",q.eventSchemas),I(e.eventHandlerManifest,"/contracts/eventHandlerManifest"),w(e.eventTypes,"/contracts/eventTypes",q.eventTypes),R(e.workflows,"/contracts/workflows",q.workflows),R(e.routes,"/contracts/routes",q.routes),Object.prototype.hasOwnProperty.call(e,"authentication")&&vs(e.authentication,"/contracts/authentication"),Object.prototype.hasOwnProperty.call(e,"publicAccess")&&Ms(e.publicAccess,"/contracts/publicAccess"),Object.prototype.hasOwnProperty.call(e,"adminAccess")&&et(e.adminAccess,"/contracts/adminAccess",t),Ks(e.routeManifest,"/contracts/routeManifest",t),zs(e.adminPages,"/contracts/adminPages"),Ys(e.adminNavigation,"/contracts/adminNavigation")}function Os(e,t,o){let n=Ss(e);ei(e,n),ni(e),ti(e),ii(e);let s=e.events.schemas.map((p,_)=>{let A=`/config/events/schemas/${_}`,m=I(p,A),N=S(m.eventType,`${A}/eventType`,255);return N.startsWith("openxiangda.")&&d("NATIVE_EVENT_SCHEMA_RESERVED",`${A}/eventType`,{eventType:N}),v(m.schemaDigest,ee(I(m.jsonSchema,`${A}/jsonSchema`)),`${A}/schemaDigest`),m}),r=new Set([...Rt,...St,...s.map(p=>String(p.eventType))]),c=new Map(e.data.resources.map(p=>[String(p.code),new Map(p.schema.fields.map(_=>[String(_.code),String(_.type)]))])),i=X(e.events.subscriptions.map((p,_)=>{let A=`/config/events/subscriptions/${_}`,m=I(p,A),N=w(m.eventTypes,`${A}/eventTypes`,20);N.forEach((g,C)=>{r.has(g)||d("NATIVE_EVENT_TYPE_NOT_REGISTERED",`${A}/eventTypes/${C}`,{eventType:g})});let T=ln(m,e.data.resources,A),b=Rs(m.delivery,N,`${A}/delivery`),$=$s(m.platformAccess,`${A}/platformAccess`,c);return{code:F(m.code,`${A}/code`),endpointPath:de(m.endpointPath,`${A}/endpointPath`),eventTypes:N,filter:I(m.filter,`${A}/filter`),payload:T?.payload||I(m.payload,`${A}/payload`),...T?{execution:T.execution}:{},...$?{platformAccess:$}:{},delivery:b}}),p=>p.code),a=new Map(s.map(p=>[String(p.eventType),String(p.dataSchemaVersion)])),u=X([...e.data.resources.flatMap(p=>Rt.map(_=>({code:`data:${p.code}:${_}`,source:"data",eventType:_,dataSchemaVersion:"2.0.0",resourceCode:p.code}))),...s.map(p=>({code:`app:${p.eventType}`,source:"app",eventType:p.eventType,dataSchemaVersion:p.dataSchemaVersion})),...e.events.timers.map(p=>({code:p.code,source:"timer",eventType:p.eventType,dataSchemaVersion:a.get(String(p.eventType))||"2.0.0"})),...e.events.dateTriggers.map(p=>({code:p.code,source:"date",eventType:p.eventType,dataSchemaVersion:a.get(String(p.eventType))||"2.0.0",resourceCode:p.resourceCode,field:p.field})),...e.workflows.activations.length?St.map(p=>({code:`workflow:${p}`,source:"workflow",eventType:p,dataSchemaVersion:"2.0.0"})):[]],p=>`${p.source}:${p.code}:${p.eventType}`),E=j([...i.flatMap(p=>p.eventTypes),...u.map(p=>String(p.eventType))]);Gs(e);let l=jn(e),f=Ds(e,n);return{schemaVersion:Pn,compilerContractVersion:Ue,generatorVersion:o,appCode:e.appCode,configDigest:t,perspectives:e.perspectives,resources:hs(e),...f.length?{subjectReadSurfaces:f}:{},capabilities:X(n,p=>p.code),operations:kn(e),eventConsumers:i,eventProducers:u,eventSchemas:s,eventHandlerManifest:{schemaVersion:Is,appCode:e.appCode,handlers:i.filter(p=>!p.execution).map(p=>({code:p.code,endpointPath:p.endpointPath,eventTypes:p.eventTypes,dataSchemaVersions:j(p.eventTypes.map(_=>_.startsWith("openxiangda.")?"2.0.0":a.get(_)||"2.0.0")),maxBodyBytes:65536,receiptProtocolVersion:2}))},eventTypes:E,workflows:Wn(e),routes:Ze(e),...Object.prototype.hasOwnProperty.call(e.frontend,"authentication")?{authentication:ks(e)}:{},...Object.prototype.hasOwnProperty.call(e.frontend,"publicAccess")?{publicAccess:js(e)}:{},...e.frontend.admin.access?{adminAccess:e.frontend.admin.access}:{},routeManifest:Qs(e),adminPages:l,adminNavigation:Bs(e)}}function $s(e,t,o){if(e===void 0)return;let n=I(e,t);O(n,["notification","managedFileCopies"],t,!0);let s={};if(n.notification!==void 0){let r=I(n.notification,`${t}/notification`);O(r,["mode"],`${t}/notification`),v(r.mode,"business-standard",`${t}/notification/mode`),s.notification={mode:"business-standard"}}if(n.managedFileCopies!==void 0){let r=R(n.managedFileCopies,`${t}/managedFileCopies`,16);r.length||d("NATIVE_EVENT_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let c=new Set;s.managedFileCopies=X(r.map((i,a)=>{let u=`${t}/managedFileCopies/${a}`,E=I(i,u);O(E,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],u),v(E.mode,"copy",`${u}/mode`);let l=G(E.sourceResourceCode,`${u}/sourceResourceCode`),f=G(E.targetResourceCode,`${u}/targetResourceCode`),p=o.get(l),_=o.get(f);(!p||!_)&&d("NATIVE_EVENT_MANAGED_FILE_COPY_RESOURCE_INVALID",u);let A=w(E.sourceFieldCodes,`${u}/sourceFieldCodes`,16),m=w(E.targetFieldCodes,`${u}/targetFieldCodes`,16);(!A.length||A.length!==m.length)&&d("NATIVE_EVENT_MANAGED_FILE_COPY_FIELDS_INVALID",u),A.forEach((T,b)=>{let $=p.get(T),g=_.get(m[b]);(!["file","image"].includes(String($))||$!==g)&&d("NATIVE_EVENT_MANAGED_FILE_COPY_FIELD_INVALID",`${u}/sourceFieldCodes/${b}`)});let N=`${l}:${A.join(",")}=>${f}:${m.join(",")}`;return c.has(N)&&d("NATIVE_EVENT_MANAGED_FILE_COPY_DUPLICATE",u),c.add(N),{mode:"copy",sourceResourceCode:l,sourceFieldCodes:j(A),targetResourceCode:f,targetFieldCodes:j(m)}}),i=>`${i.sourceResourceCode}:${i.sourceFieldCodes.join(",")}=>${i.targetResourceCode}:${i.targetFieldCodes.join(",")}`)}return Object.keys(s).length||d("NATIVE_EVENT_PLATFORM_ACCESS_EMPTY",t),s}function Rs(e,t,o){let n=I(e,o);O(n,["timeoutMs","maxAttempts","initialBackoffMs","maxBackoffMs","ordering","concurrency"],o),Z(n.timeoutMs,`${o}/timeoutMs`,1e3,3e4),Z(n.maxAttempts,`${o}/maxAttempts`,1,12);let s=Z(n.initialBackoffMs,`${o}/initialBackoffMs`,1e3,3e5);Z(n.maxBackoffMs,`${o}/maxBackoffMs`,s,18e5),Z(n.concurrency,`${o}/concurrency`,1,50);let r=S(n.ordering,`${o}/ordering`,32);return["none","record","workflow-instance"].includes(r)||d("NATIVE_EVENT_DELIVERY_ORDERING_INVALID",`${o}/ordering`),r==="workflow-instance"&&t.some(c=>!ms.has(c))&&d("NATIVE_EVENT_WORKFLOW_ORDERING_REQUIRES_WORKFLOW_FACTS",`${o}/ordering`),n}function Ss(e){let t=new Map;for(let o of Yn(e.appCode))t.set(o.code,o);for(let[o,n]of e.authz.capabilities.entries()){let s=`/config/authz/capabilities/${o}`,r=I(n,s);O(r,["code","kind","name","description"],s,!0);let c=me(r.code,`${s}/code`,e.appCode);t.has(c)&&d("NATIVE_CAPABILITY_DUPLICATE",`${s}/code`),["backend","ui"].includes(r.kind)||d("NATIVE_CAPABILITY_KIND_INVALID",`${s}/kind`);let i={code:c,kind:r.kind,name:S(r.name,`${s}/name`,255),source:"explicit",...r.description===void 0?{}:{description:Pt(r.description,`${s}/description`,2e3)}};t.set(c,i)}for(let[o,n]of e.data.resources.entries()){let s=`/config/data/resources/${o}`,r=be(n,s,e.appCode),c={read:`\u8BFB\u53D6${r.name}`,create:`\u65B0\u5EFA${r.name}`,update:`\u66F4\u65B0${r.name}`,delete:`\u5220\u9664${r.name}`};for(let i of["read","create","update","delete"]){let a=me(r.capabilities[i],`${s}/capabilities/${i}`,e.appCode);t.has(a)&&d("NATIVE_CAPABILITY_DUPLICATE",`${s}/capabilities/${i}`),t.set(a,{code:a,kind:"data",name:c[i],source:"data"})}for(let[i,a]of Object.entries(r.fieldPolicies)){if(Ve(i))continue;let u=I(a,`${s}/fieldPolicies/${i}`);for(let E of["read","create","update"])if(Array.isArray(u[E]))for(let l of w(u[E],`${s}/fieldPolicies/${i}/${E}`,2e3))me(l,`${s}/fieldPolicies/${i}/${E}`,e.appCode),!t.has(l)&&t.set(l,{code:l,kind:"data",name:`${r.name}.${i}.${E}`,source:"data"})}}return[...t.values()]}function hs(e){let t=ys(e);return X(e.data.resources.map((o,n)=>{let s=be(o,`/config/data/resources/${n}`,e.appCode),r=t.get(s.code);return{code:s.code,schemaDigest:ee(s.schema),fields:X(s.schema.fields.map(c=>({code:c.code,type:c.type})),c=>c.code),...r?{detailRouteCode:r}:{}}}),o=>o.code)}function Ds(e,t){if(e.data.subjectReadSurfaces===void 0)return[];let o=R(e.data.subjectReadSurfaces,"/config/data/subjectReadSurfaces",q.subjectReadSurfaces),n=new Set(t.map(c=>String(c.code))),s=new Map(e.data.resources.map((c,i)=>{let a=`/config/data/resources/${i}`,u=be(c,a,e.appCode);return[String(u.code),{resource:u,fields:new Map(R(I(u.schema,`${a}/schema`).fields,`${a}/schema/fields`,500).map(E=>{let l=I(E,`${a}/schema/fields`);return[String(l.code),l]}))}]})),r=new Set;return X(o.map((c,i)=>{let a=`/config/data/subjectReadSurfaces/${i}`,u=I(c,a);O(u,["code","name","capability","subject","relations"],a);let E=F(u.code,`${a}/code`);r.has(E)&&d("NATIVE_SUBJECT_READ_SURFACE_CODE_DUPLICATE",`${a}/code`),r.add(E);let l=me(u.capability,`${a}/capability`,e.appCode);n.has(l)||d("NATIVE_SUBJECT_READ_SURFACE_CAPABILITY_NOT_DECLARED",`${a}/capability`);let f=I(u.subject,`${a}/subject`);O(f,["resourceCode","fields"],`${a}/subject`);let p=G(f.resourceCode,`${a}/subject/resourceCode`),_=s.get(p);_||d("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${a}/subject/resourceCode`);let A=w(f.fields,`${a}/subject/fields`,100).map(($,g)=>B($,`${a}/subject/fields/${g}`));A.length||d("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${a}/subject/fields`);for(let[$,g]of A.entries()){let C=_.fields.get(g);(!C||C.type==="subtable")&&d("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${a}/subject/fields/${$}`)}let m=R(u.relations,`${a}/relations`,8);m.length||d("NATIVE_SUBJECT_READ_SURFACE_RELATIONS_REQUIRED",`${a}/relations`);let N=new Set,T=0,b=X(m.map(($,g)=>{let C=`${a}/relations/${g}`,D=I($,C);O(D,["code","resourceCode","foreignKeyField","fields","limit"],C,["order"]);let y=F(D.code,`${C}/code`);N.has(y)&&d("NATIVE_SUBJECT_READ_SURFACE_RELATION_CODE_DUPLICATE",`${C}/code`),N.add(y);let U=G(D.resourceCode,`${C}/resourceCode`),k=s.get(U);k||d("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${C}/resourceCode`);let Y=B(D.foreignKeyField,`${C}/foreignKeyField`),M=k.fields.get(Y),le=I(M?.source||{},`${C}/foreignKeyField/source`);(!M||!["uuid","resource-ref.single"].includes(String(M.type))||M.type==="resource-ref.single"&&(le.kind!=="resource"||le.resourceCode!==p))&&d("NATIVE_SUBJECT_READ_SURFACE_RELATION_INVALID",`${C}/foreignKeyField`);let ue=w(D.fields,`${C}/fields`,100).map((se,V)=>B(se,`${C}/fields/${V}`));ue.length||d("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${C}/fields`);for(let[se,V]of ue.entries()){let x=k.fields.get(V);(!x||x.type==="subtable")&&d("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${C}/fields/${se}`)}let K=R(D.order||[],`${C}/order`,10).map((se,V)=>{let x=`${C}/order/${V}`,P=I(se,x);O(P,["field","direction"],x);let J=B(P.field,`${x}/field`),W=k.fields.get(J);return(!vn.has(J)&&!W||W?.type==="subtable"||W&&!we(W.type))&&d("NATIVE_SUBJECT_READ_SURFACE_ORDER_FIELD_INVALID",`${x}/field`),["asc","desc"].includes(String(P.direction))||d("NATIVE_SUBJECT_READ_SURFACE_ORDER_DIRECTION_INVALID",`${x}/direction`),{field:J,direction:P.direction}}),pe=Z(D.limit,`${C}/limit`,1,100);return T+=pe,{code:y,resourceCode:U,foreignKeyField:Y,fields:j(ue),...K.length?{order:K}:{},limit:pe}}),$=>$.code);return T>400&&d("NATIVE_SUBJECT_READ_SURFACE_ROW_LIMIT_EXCEEDED",`${a}/relations`),{code:E,name:S(u.name,`${a}/name`,255),capability:l,subject:{resourceCode:p,fields:j(A)},relations:b}}),c=>c.code)}function ys(e){let t=e.data.resourceDetailRoutes===void 0?[]:R(e.data.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100),o=new Map(e.data.resources.map((r,c)=>{let i=`/config/data/resources/${c}`,a=be(r,i,e.appCode);return[a.code,a]})),n=new Map(Ze(e).map(r=>[String(r.code),r])),s=new Map;for(let[r,c]of t.entries()){let i=`/config/data/resourceDetailRoutes/${r}`,a=I(c,i);O(a,["resourceCode","desktop","mobile"],i);let u=G(a.resourceCode,`${i}/resourceCode`);s.has(u)&&d("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_DUPLICATE",`${i}/resourceCode`);let E=o.get(u);E||d("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_RESOURCE_MISSING",`${i}/resourceCode`);let l=F(a.desktop,`${i}/desktop`),f=F(a.mobile,`${i}/mobile`);l===f&&d("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_INVALID",i);let p=String(E.capabilities.read);for(let[_,A]of[["desktop",l],["mobile",f]]){let m=`${i}/${_}`,N=n.get(A);N||d("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_REFERENCE_MISSING",m),N.surface!=="user"&&d("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_SURFACE_INVALID",m);let T=de(N.path,`${m}/path`),b=[...T.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)],$=_==="mobile"?!T.startsWith("/m/"):T==="/m"||T.startsWith("/m/");(T.includes("*")||T.includes("?")||T.includes("#")||T.split("/").includes("..")||b.length!==1||$)&&d("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_PATH_INVALID",m);let g=Array.isArray(N.access?.allOf)?N.access.allOf:[];N.capability!==p&&!g.includes(p)&&d("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_CAPABILITY_INVALID",m)}s.set(u,{desktop:l,mobile:f})}return s}function kn(e){let t=new Map(e.data.resources.map((c,i)=>{let a=`/config/data/resources/${i}`,u=be(c,a,e.appCode);return[u.code,new Map(u.schema.fields.map(E=>[String(E.code),E]))]})),o=new Map(e.data.resources.map((c,i)=>{let a=`/config/data/resources/${i}`,u=be(c,a,e.appCode);return[u.code,new Map(u.schema.fields.map(E=>[String(E.code),String(E.type)]))]})),n=new Set(o.keys()),s=new Set(e.workflows.activations.map((c,i)=>tt(I(c,`/config/workflows/activations/${i}`).workflowCode,`/config/workflows/activations/${i}/workflowCode`))),r=new Map;return X(e.backend.operations.map((c,i)=>{let a=`/config/backend/operations/${i}`,u=I(c,a);O(u,["code","method","path","capability","requestSchema","responseSchema","description","platformAccess","browser","ai"],a,!0);let E=S(u.method,`${a}/method`,16);["GET","POST","PUT","PATCH","DELETE"].includes(E)||d("NATIVE_OPERATION_METHOD_INVALID",`${a}/method`);let l=F(u.code,`${a}/code`);Ps(u.ai,a,l,E,n);let f=ws(u.platformAccess,`${a}/platformAccess`,o,t,s,new Set(e.authz.roles.map(_=>String(_.code))));if(f?.decimalReservation){let _=f.decimalReservation,A=String(_.resourceCode),m=JSON.stringify([_.amountFieldCode,_.currencyFieldCode,_.relationFieldCode,_.parentFieldCode,_.rootFieldCode,_.statusFieldCode,_.parentRelationValue,_.childRelationValue]),N=r.get(A);N&&N!==m&&d("NATIVE_DECIMAL_RESERVATION_MAPPING_CONFLICT",`${a}/platformAccess/decimalReservation`),r.set(A,m)}let p=Vs(u.browser,`${a}/browser`,E,u.requestSchema,u.responseSchema,o,t,e.data.subjectReadSurfaces||[]);return{code:l,method:E,path:de(u.path,`${a}/path`),requiredCapability:me(u.capability,`${a}/capability`,e.appCode),requestSchemaDigest:ee(I(u.requestSchema,`${a}/requestSchema`)),responseSchemaDigest:ee(I(u.responseSchema,`${a}/responseSchema`)),...u.description===void 0?{}:{description:Pt(u.description,`${a}/description`,2e3)},...f?{platformAccess:f}:{},...p?{browser:p}:{}}}),c=>c.code)}function Vs(e,t,o,n,s,r,c,i){if(e===void 0)return null;let a=I(e,t);O(a,["exposure","behavior","idempotency","subject"],t,["refreshTargets","fileIntent"]),v(a.exposure,"authenticated",`${t}/exposure`);let u=S(a.behavior,`${t}/behavior`,32);["read","controlled"].includes(u)||d("NATIVE_OPERATION_BROWSER_BEHAVIOR_INVALID",`${t}/behavior`);let E=S(a.idempotency,`${t}/idempotency`,32);(!["none","required"].includes(E)||u==="controlled"&&E!=="required"||u==="read"&&E!=="none")&&d("NATIVE_OPERATION_BROWSER_IDEMPOTENCY_INVALID",`${t}/idempotency`);let l=I(a.subject,`${t}/subject`);O(l,["resourceCode","inputField"],`${t}/subject`);let f=G(l.resourceCode,`${t}/subject/resourceCode`);r.has(f)||d("NATIVE_OPERATION_BROWSER_SUBJECT_RESOURCE_NOT_DECLARED",`${t}/subject/resourceCode`);let p=B(l.inputField,`${t}/subject/inputField`),_=I(n,`${t}/requestSchema`),A=I(s,`${t}/responseSchema`);(_.type!=="object"||_.additionalProperties!==!1||A.type!=="object"||A.additionalProperties!==!1)&&d("NATIVE_OPERATION_BROWSER_SCHEMA_ROOT_INVALID",`${t}/requestSchema`);let m=I(_.properties,`${t}/requestSchema/properties`),N=new Set(_.required===void 0?[]:w(_.required,`${t}/requestSchema/required`,200));(!(p in m)||!N.has(p))&&d("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let T=I(m[p],`${t}/requestSchema/properties/${p}`);(T.type!=="string"||T.format!=="uuid")&&d("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let b=new Map((Array.isArray(i)?i:[]).map((y,U)=>{let k=I(y,`/config/data/subjectReadSurfaces/${U}`);return[String(k.code),String(I(k.subject,`/config/data/subjectReadSurfaces/${U}/subject`).resourceCode)]})),$=a.refreshTargets===void 0?[]:R(a.refreshTargets,`${t}/refreshTargets`,16),g=new Set,C=X($.map((y,U)=>{let k=`${t}/refreshTargets/${U}`,Y=I(y,k);O(Y,["kind","code"],k),v(Y.kind,"subject-surface",`${k}/kind`);let M=F(Y.code,`${k}/code`);return(g.has(M)||!b.has(M)||b.get(M)!==f)&&d("NATIVE_OPERATION_BROWSER_REFRESH_TARGET_INVALID",`${k}/code`),g.add(M),{kind:"subject-surface",code:M}}),y=>`${y.kind}:${y.code}`),D=Fs(a.fileIntent,`${t}/fileIntent`,o,u,E,f,m,N,c);return{exposure:"authenticated",behavior:u,idempotency:E,subject:{resourceCode:f,inputField:p},...C.length?{refreshTargets:C}:{},...D?{fileIntent:D}:{}}}function Fs(e,t,o,n,s,r,c,i,a){if(e===void 0)return null;let u=I(e,t);O(u,["recordResourceCode","recordIdInputField","relationField","fileNameField","contentTypeField","sizeField","purposes","maxTtlSeconds","maxBytes"],t),(o!=="GET"||n!=="read"||s!=="none")&&d("NATIVE_OPERATION_FILE_INTENT_BEHAVIOR_INVALID",t);let E=G(u.recordResourceCode,`${t}/recordResourceCode`),l=a.get(E);l||d("NATIVE_OPERATION_FILE_INTENT_RESOURCE_NOT_DECLARED",`${t}/recordResourceCode`);let f=B(u.recordIdInputField,`${t}/recordIdInputField`),p=I(c[f],`${t}/recordIdInputField`);(!i.has(f)||p.type!=="string"||p.format!=="uuid")&&d("NATIVE_OPERATION_FILE_INTENT_RECORD_INPUT_INVALID",`${t}/recordIdInputField`);let _=B(u.relationField,`${t}/relationField`),A=l.get(_);(!A||!["uuid","resource-ref.single"].includes(String(A.type))||String(A.type)==="resource-ref.single"&&(String(I(A.source,`${t}/relationField`).kind||"")!=="resource"||String(I(A.source,`${t}/relationField`).resourceCode||"")!==r))&&d("NATIVE_OPERATION_FILE_INTENT_RELATION_INVALID",`${t}/relationField`);let m=[["fileNameField",["text.short","text.long"]],["contentTypeField",["text.short","text.long"]],["sizeField",["number.integer"]]],N={};for(let[g,C]of m){let D=B(u[g],`${t}/${g}`);C.includes(String(l.get(D)?.type))||d("NATIVE_OPERATION_FILE_INTENT_METADATA_INVALID",`${t}/${g}`),N[g]=D}let T=X(w(u.purposes,`${t}/purposes`,2),g=>g);(!T.length||T.some(g=>!["preview","download"].includes(g)))&&d("NATIVE_OPERATION_FILE_INTENT_PURPOSE_INVALID",`${t}/purposes`);let b=Number(u.maxTtlSeconds);(!Number.isSafeInteger(b)||b<1||b>300)&&d("NATIVE_OPERATION_FILE_INTENT_TTL_INVALID",`${t}/maxTtlSeconds`);let $=Number(u.maxBytes);return(!Number.isSafeInteger($)||$<1||$>104857600)&&d("NATIVE_OPERATION_FILE_INTENT_SIZE_INVALID",`${t}/maxBytes`),{recordResourceCode:E,recordIdInputField:f,relationField:_,fileNameField:N.fileNameField,contentTypeField:N.contentTypeField,sizeField:N.sizeField,purposes:T,maxTtlSeconds:b,maxBytes:$}}function ws(e,t,o,n,s,r){if(e===void 0)return null;let c=I(e,t);O(c,["directory","managedFiles","managedFileCopies","notification","workflow","roleAssertions","decimalReservation"],t,!0),Object.keys(c).length===0&&d("NATIVE_OPERATION_PLATFORM_ACCESS_EMPTY",t);let i={};if(c.roleAssertions!==void 0){let a=I(c.roleAssertions,`${t}/roleAssertions`);O(a,["roleCodes"],`${t}/roleAssertions`);let u=w(a.roleCodes,`${t}/roleAssertions/roleCodes`,20);u.length||d("NATIVE_OPERATION_ROLE_ASSERTIONS_REQUIRED",`${t}/roleAssertions/roleCodes`),u.forEach((E,l)=>{r.has(E)||d("NATIVE_ROLE_REFERENCE_MISSING",`${t}/roleAssertions/roleCodes/${l}`)}),i.roleAssertions={roleCodes:j(u)}}if(c.directory!==void 0){let a=I(c.directory,`${t}/directory`);O(a,["mode","fields"],`${t}/directory`),a.mode!=="current-initiator"&&d("NATIVE_OPERATION_DIRECTORY_MODE_INVALID",`${t}/directory/mode`);let u=new Set(["displayName","employeeNumber","primaryDepartment","departments"]),E=w(a.fields,`${t}/directory/fields`,4);(!E.length||E.some(l=>!u.has(l)))&&d("NATIVE_OPERATION_DIRECTORY_FIELDS_INVALID",`${t}/directory/fields`),i.directory={mode:"current-initiator",fields:j(E)}}if(c.managedFiles!==void 0){let a=R(c.managedFiles,`${t}/managedFiles`,16);a.length||d("NATIVE_OPERATION_MANAGED_FILES_REQUIRED",`${t}/managedFiles`);let u=new Set;i.managedFiles=X(a.map((E,l)=>{let f=`${t}/managedFiles/${l}`,p=I(E,f);O(p,["resourceCode","fieldCodes","intents"],f);let _=G(p.resourceCode,`${f}/resourceCode`);(u.has(_)||!o.has(_))&&d("NATIVE_OPERATION_MANAGED_FILE_RESOURCE_INVALID",`${f}/resourceCode`),u.add(_);let A=w(p.fieldCodes,`${f}/fieldCodes`,16);(!A.length||A.some(N=>!["file","image","signature"].includes(String(o.get(_)?.get(N)||""))))&&d("NATIVE_OPERATION_MANAGED_FILE_FIELD_INVALID",`${f}/fieldCodes`);let m=w(p.intents,`${f}/intents`,2);return(!m.length||m.some(N=>!["create","update"].includes(N)))&&d("NATIVE_OPERATION_MANAGED_FILE_INTENT_INVALID",`${f}/intents`),{resourceCode:_,fieldCodes:j(A),intents:j(m)}}),E=>E.resourceCode)}if(c.managedFileCopies!==void 0){let a=R(c.managedFileCopies,`${t}/managedFileCopies`,16);a.length||d("NATIVE_OPERATION_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let u=new Set;i.managedFileCopies=X(a.map((E,l)=>{let f=`${t}/managedFileCopies/${l}`,p=I(E,f);O(p,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],f),v(p.mode,"copy",`${f}/mode`);let _=G(p.sourceResourceCode,`${f}/sourceResourceCode`),A=G(p.targetResourceCode,`${f}/targetResourceCode`),m=o.get(_),N=o.get(A);(!m||!N)&&d("NATIVE_OPERATION_MANAGED_FILE_COPY_RESOURCE_INVALID",f);let T=w(p.sourceFieldCodes,`${f}/sourceFieldCodes`,16),b=w(p.targetFieldCodes,`${f}/targetFieldCodes`,16);(!T.length||T.length!==b.length)&&d("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELDS_INVALID",f),T.forEach((g,C)=>{let D=m.get(g),y=N.get(b[C]);(!["file","image"].includes(String(D))||D!==y)&&d("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELD_INVALID",`${f}/sourceFieldCodes/${C}`)});let $=`${_}:${T.join(",")}=>${A}:${b.join(",")}`;return u.has($)&&d("NATIVE_OPERATION_MANAGED_FILE_COPY_DUPLICATE",f),u.add($),{mode:"copy",sourceResourceCode:_,sourceFieldCodes:j(T),targetResourceCode:A,targetFieldCodes:j(b)}}),E=>`${E.sourceResourceCode}:${E.sourceFieldCodes.join(",")}=>${E.targetResourceCode}:${E.targetFieldCodes.join(",")}`)}if(c.notification!==void 0){let a=I(c.notification,`${t}/notification`);O(a,["mode"],`${t}/notification`),a.mode!=="business-standard"&&d("NATIVE_OPERATION_NOTIFICATION_MODE_INVALID",`${t}/notification/mode`),i.notification={mode:"business-standard"}}if(c.workflow!==void 0){let a=I(c.workflow,`${t}/workflow`);O(a,["codes"],`${t}/workflow`);let u=w(a.codes,`${t}/workflow/codes`,16);(!u.length||u.some(E=>!s.has(E)))&&d("NATIVE_OPERATION_WORKFLOW_CODE_INVALID",`${t}/workflow/codes`),i.workflow={codes:j(u)}}if(c.decimalReservation!==void 0){let a=`${t}/decimalReservation`,u=I(c.decimalReservation,a);O(u,["mode","resourceCode","amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode","parentRelationValue","childRelationValue","eligibleParentStatuses","eligibleChildStatuses"],a);let E=S(u.mode,`${a}/mode`,16);["reserve","commit","release"].includes(E)||d("NATIVE_DECIMAL_RESERVATION_MODE_INVALID",`${a}/mode`);let l=G(u.resourceCode,`${a}/resourceCode`),f=n.get(l);f||d("NATIVE_DECIMAL_RESERVATION_RESOURCE_MISSING",`${a}/resourceCode`);let _=Object.fromEntries(["amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode"].map(g=>[g,B(u[g],`${a}/${g}`)])),A=g=>f.get(_[g]),m=g=>new Set((A(g)?.options||[]).map(C=>String(C.value))),N=F(u.parentRelationValue,`${a}/parentRelationValue`),T=F(u.childRelationValue,`${a}/childRelationValue`),b=w(u.eligibleParentStatuses,`${a}/eligibleParentStatuses`,16),$=w(u.eligibleChildStatuses,`${a}/eligibleChildStatuses`,16);(A("amountFieldCode")?.type!=="number.decimal"||A("amountFieldCode")?.exactDecimal!==!0||A("amountFieldCode")?.precision!==18||A("amountFieldCode")?.scale!==2||A("currencyFieldCode")?.type!=="option.single"||A("relationFieldCode")?.type!=="option.single"||A("parentFieldCode")?.type!=="resource-ref.single"||A("parentFieldCode")?.source?.resourceCode!==l||A("rootFieldCode")?.type!=="uuid"||A("statusFieldCode")?.type!=="option.single"||N===T||!m("relationFieldCode").has(N)||!m("relationFieldCode").has(T)||!b.length||!$.length||b.some(g=>!m("statusFieldCode").has(g))||$.some(g=>!m("statusFieldCode").has(g)))&&d("NATIVE_DECIMAL_RESERVATION_FIELD_INVALID",a),i.decimalReservation={mode:E,resourceCode:l,..._,parentRelationValue:N,childRelationValue:T,eligibleParentStatuses:j(b),eligibleChildStatuses:j($)}}return i}function Ps(e,t,o,n,s){if(e===void 0)return;let r=`${t}/ai`,c=I(e,r);es.test(o)||d("NATIVE_OPERATION_AI_CODE_INVALID",`${t}/code`),O(c,["name","description","risk","resources","sideEffects","concurrency","timeoutMs"],r,!0),S(c.name,`${r}/name`,$t),S(c.description,`${r}/description`,$t);let i=S(c.risk,`${r}/risk`,16);["read","write","destructive","external"].includes(i)||d("NATIVE_OPERATION_AI_RISK_INVALID",`${r}/risk`),i==="read"!=(n==="GET")&&d("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${r}/risk`),n==="DELETE"&&!["destructive","external"].includes(i)&&d("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${r}/risk`);let a=w(c.resources,`${r}/resources`,16);a.length===0&&d("NATIVE_OPERATION_AI_RESOURCE_REQUIRED",`${r}/resources`),a.forEach((E,l)=>{let f=G(E,`${r}/resources/${l}`);s.has(f)||d("NATIVE_OPERATION_AI_RESOURCE_MISSING",`${r}/resources/${l}`)});let u=w(c.sideEffects,`${r}/sideEffects`,20);(i==="read"&&u.length!==0||i!=="read"&&u.length===0)&&d("NATIVE_OPERATION_AI_SIDE_EFFECT_INVALID",`${r}/sideEffects`),c.concurrency!==void 0&&!["none","revision"].includes(S(c.concurrency,`${r}/concurrency`,16))&&d("NATIVE_OPERATION_AI_CONCURRENCY_INVALID",`${r}/concurrency`),c.timeoutMs!==void 0&&Z(c.timeoutMs,`${r}/timeoutMs`,100,3e4)}function He(e){return(e.replace(/\/{2,}/g,"/").replace(/\/$/,"")||"/").split("/").map(o=>o.startsWith(":")?":":o.includes("*")?"*":o).join("/")}function Ls(e,t){let o=I(e,t),n=S(o.type,`${t}/type`,32),s=["code","type","label","presentation","required"],r=n==="sso"?[...s,"provider"]:n==="dingtalk"?[...s,"flow"]:s;O(o,r,t);let c=F(o.code,`${t}/code`),i=S(o.label,`${t}/label`,255),a=S(o.presentation,`${t}/presentation`,16);["primary","secondary"].includes(a)||d("NATIVE_APPLICATION_AUTH_METHOD_PRESENTATION_INVALID",`${t}/presentation`);let u=ye(o.required,`${t}/required`);return["sso","password","dingtalk"].includes(n)||d("NATIVE_APPLICATION_AUTH_METHOD_TYPE_INVALID",`${t}/type`),n==="sso"&&o.provider!=="tenant-default"&&d("NATIVE_APPLICATION_AUTH_SSO_PROVIDER_INVALID",`${t}/provider`),n==="dingtalk"&&!["auto","jsapi","oauth"].includes(S(o.flow,`${t}/flow`,16))&&d("NATIVE_APPLICATION_AUTH_DINGTALK_FLOW_INVALID",`${t}/flow`),{code:c,type:n,label:i,presentation:a,required:u,...n==="sso"?{provider:"tenant-default"}:{},...n==="dingtalk"?{flow:o.flow}:{}}}function Tn(e,t,o){let n=I(e,o);O(n,["routeCode","path","defaultRouteCode"],o);let s=F(n.routeCode,`${o}/routeCode`),r=de(n.path,`${o}/path`),c=t==="desktop"?"/login":"/m/login";return(r!==c||/[:*?#\\]/.test(r))&&d("NATIVE_APPLICATION_AUTH_SURFACE_PATH_INVALID",`${o}/path`,{device:t,expectedPath:c}),{routeCode:s,path:r,defaultRouteCode:F(n.defaultRouteCode,`${o}/defaultRouteCode`)}}function xn(e,t,o,n){if(e===null)return;let s=I(e,n);O(s,["accountMode","registration","methods","surfaces"],n),v(s.accountMode,"existing-platform-users-only",`${n}/accountMode`);let r=I(s.registration,`${n}/registration`);O(r,["mode"],`${n}/registration`),v(r.mode,"reject",`${n}/registration/mode`);let c=R(s.methods,`${n}/methods`,8);c.length===0&&d("NATIVE_APPLICATION_AUTH_METHOD_REQUIRED",`${n}/methods`);let i=c.map((N,T)=>Ls(N,`${n}/methods/${T}`)),a=new Set,u=new Set;for(let[N,T]of i.entries())a.has(T.code)&&d("NATIVE_APPLICATION_AUTH_METHOD_CODE_DUPLICATE",`${n}/methods/${N}/code`),u.has(T.type)&&d("NATIVE_APPLICATION_AUTH_METHOD_TYPE_DUPLICATE",`${n}/methods/${N}/type`),a.add(T.code),u.add(T.type);i.filter(N=>N.presentation==="primary").length!==1&&d("NATIVE_APPLICATION_AUTH_PRIMARY_METHOD_INVALID",`${n}/methods`);let E=I(s.surfaces,`${n}/surfaces`);O(E,["desktop","mobile"],`${n}/surfaces`);let l=Tn(E.desktop,"desktop",`${n}/surfaces/desktop`),f=Tn(E.mobile,"mobile",`${n}/surfaces/mobile`);l.routeCode===f.routeCode&&d("NATIVE_APPLICATION_AUTH_SURFACE_CODE_DUPLICATE",`${n}/surfaces/mobile/routeCode`);let p=R(t,"/config/frontend/routes",500),_=new Map;for(let[N,T]of p.entries()){let b=I(T,`/config/frontend/routes/${N}`);_.set(String(b.code||""),b)}let A=new Set((Array.isArray(o.data?.resources)?o.data.resources:[]).map(N=>String(N.code||"")).filter(N=>/^[a-z][a-z0-9-]{0,62}$/.test(N)));for(let[N,T]of[["desktop",l],["mobile",f]]){_.has(T.routeCode)&&d("NATIVE_APPLICATION_AUTH_SURFACE_CODE_CONFLICT",`${n}/surfaces/${N}/routeCode`);let b=/^user\.([a-z][a-z0-9-]{0,62})\.(records|submit)$/.exec(String(T.defaultRouteCode||"")),$=_.get(T.defaultRouteCode),g=String($?.path||"");if(b&&A.has(b[1])){let D=b[2]==="records"?`/my/${b[1]}`:`/my/${b[1]}/submit`;$={surface:"user",path:N==="mobile"?`/m${D}`:D},g=String($.path)}let C=N==="desktop"?g==="/m"||g.startsWith("/m/"):!(g==="/m"||g.startsWith("/m/"));(!$||$.surface!=="user"||/[:*]/.test(g)||C)&&d("NATIVE_APPLICATION_AUTH_DEFAULT_ROUTE_INVALID",`${n}/surfaces/${N}/defaultRouteCode`)}let m=Un(o).filter(N=>!N.owner.startsWith("authentication:"));for(let[N,T]of[["desktop",l],["mobile",f]]){let b=m.find($=>He($.path)===He(T.path));b&&d("NATIVE_APPLICATION_AUTH_SURFACE_PATH_CONFLICT",`${n}/surfaces/${N}/path`,{owner:b.owner})}}function vs(e,t){if(e===null)return;let o={data:{resources:[]},workflows:{definitions:[]},frontend:{routes:[{code:"auth-desktop-default",path:"/auth-desktop-default",surface:"user"},{code:"auth-mobile-default",path:"/m/auth-mobile-default",surface:"user"}],user:{applicationTodoCenter:!1},admin:{navigation:[]},authentication:e}},n=I(e,t),s=I(n.surfaces,`${t}/surfaces`),r={...n,surfaces:{...s,desktop:{...I(s.desktop,`${t}/surfaces/desktop`),defaultRouteCode:"auth-desktop-default"},mobile:{...I(s.mobile,`${t}/surfaces/mobile`),defaultRouteCode:"auth-mobile-default"}}};xn(r,o.frontend.routes,{...o,frontend:{...o.frontend,authentication:r}},t)}function ks(e){let t=e.frontend.authentication;return t===null?null:{accountMode:t.accountMode,registration:{mode:t.registration.mode},methods:t.methods.map(o=>({...o})),surfaces:{desktop:{...t.surfaces.desktop},mobile:{...t.surfaces.mobile}}}}var xs=new Set(["draft.read","draft.update","validate","create","own.list","own.read","public.list","public.read"]);function Us(e,t,o){let n=I(e,o);O(n,["policies"],o);let s=R(n.policies,`${o}/policies`,16);s.length<1&&d("NATIVE_PUBLIC_POLICY_REQUIRED",o);let r=new Map(t.frontend.routes.map(u=>[u.code,u])),c=new Map(t.data.resources.map(u=>[u.code,u])),i=new Set,a=new Set(s.map(u=>String(u?.code||"")));s.forEach((u,E)=>{let l=`${o}/policies/${E}`,f=I(u,l);O(f,["code","routeCode","mode","resourceCode","operations","fields"],l,["requiredFields","ownRecordFields","publicRecordFields","publicFilters","serverGeneratedFields","schedule","publicSubtableFields","draft","validations"]);let p=F(f.code,`${l}/code`);i.has(p)&&d("NATIVE_PUBLIC_POLICY_DUPLICATE",`${l}/code`);let _=F(f.routeCode,`${l}/routeCode`),A=r.get(_);(!A||A.surface!=="user"||A.capability!==void 0||A.access!==void 0||/[:*]/.test(String(A.path)))&&d("NATIVE_PUBLIC_ROUTE_INVALID",`${l}/routeCode`),v(f.mode,"anonymous",`${l}/mode`);let m=G(f.resourceCode,`${l}/resourceCode`),N=c.get(m);N||d("NATIVE_PUBLIC_RESOURCE_MISSING",`${l}/resourceCode`);let T=new Map(N.schema.fields.map(V=>[String(V.code),String(V.type)])),b=w(f.operations,`${l}/operations`,8);(b.length<1||b.some(V=>!xs.has(V)))&&d("NATIVE_PUBLIC_OPERATION_INVALID",`${l}/operations`),b.includes("draft.read")!==b.includes("draft.update")&&d("NATIVE_PUBLIC_DRAFT_OPERATION_INCOMPLETE",`${l}/operations`);let $=w(f.fields,`${l}/fields`,64);($.length<1||$.some(V=>!T.has(V)))&&d("NATIVE_PUBLIC_FIELD_INVALID",`${l}/fields`);for(let V of["requiredFields","ownRecordFields","publicRecordFields"]){if(!Object.prototype.hasOwnProperty.call(f,V))continue;w(f[V],`${l}/${V}`,64).some(P=>!$.includes(P))&&d("NATIVE_PUBLIC_FIELD_SCOPE_INVALID",`${l}/${V}`)}let g=Object.prototype.hasOwnProperty.call(f,"serverGeneratedFields")?R(f.serverGeneratedFields,`${l}/serverGeneratedFields`,16):[],C=new Set;g.forEach((V,x)=>{let P=`${l}/serverGeneratedFields/${x}`,J=I(V,P);O(J,["field","kind"],P);let W=B(J.field,`${P}/field`);(C.has(W)||!T.has(W)||$.includes(W)||T.get(W)!=="text.short"&&T.get(W)!=="text.long")&&d("NATIVE_PUBLIC_SERVER_GENERATED_FIELD_INVALID",`${P}/field`),v(J.kind,"random-token",`${P}/kind`),C.add(W)});let D=Object.prototype.hasOwnProperty.call(f,"schedule")?I(f.schedule,`${l}/schedule`):null;if(D){let V=["campusPolicyCode","rulePolicyCode","campusField","ruleCampusField","ruleWeekdaysField","ruleOpenAtField","ruleCloseAtField","ruleSlotMinutesField","ruleAdvanceHoursField","ruleAdvanceDaysField","campusEnabledField","ruleEnabledField","dateField","timeField"];O(D,V,`${l}/schedule`);for(let x of["campusPolicyCode","rulePolicyCode"])F(D[x],`${l}/schedule/${x}`);for(let x of V.filter(P=>!["campusPolicyCode","rulePolicyCode"].includes(P)))B(D[x],`${l}/schedule/${x}`);for(let x of[D.campusField,D.dateField,D.timeField])$.includes(String(x))||d("NATIVE_PUBLIC_SCHEDULE_FIELD_INVALID",`${l}/schedule`);(!a.has(String(D.campusPolicyCode))||!a.has(String(D.rulePolicyCode)))&&d("NATIVE_PUBLIC_SCHEDULE_POLICY_INVALID",`${l}/schedule`)}let y=Object.prototype.hasOwnProperty.call(f,"publicFilters")?R(f.publicFilters,`${l}/publicFilters`,16):[],U=new Set;y.forEach((V,x)=>{let P=`${l}/publicFilters/${x}`,J=I(V,P);O(J,["field","operator","value"],P);let W=B(J.field,`${P}/field`);U.has(W)&&d("NATIVE_PUBLIC_FILTER_DUPLICATE",`${P}/field`),$.includes(W)||d("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${P}/field`),v(J.operator,"eq",`${P}/operator`),["boolean","text.short","text.long","number.integer","number.decimal","date","time"].includes(T.get(W)||"")||d("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${P}/field`),J.value!==null&&typeof J.value!="string"&&typeof J.value!="number"&&typeof J.value!="boolean"&&d("NATIVE_PUBLIC_FILTER_VALUE_INVALID",`${P}/value`),U.add(W)});let k=Object.prototype.hasOwnProperty.call(f,"publicSubtableFields")?I(f.publicSubtableFields,`${l}/publicSubtableFields`):null;if(k){Object.keys(k).length>64&&d("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${l}/publicSubtableFields`);for(let[V,x]of Object.entries(k)){let P=N.schema.fields.find(H=>String(H.code)===V),J=String(P?.subtable?.resourceCode||""),W=c.get(J),Ae=new Map((W?.schema?.fields||[]).map(H=>[String(H.code),String(H.type)])),z=w(x,`${l}/publicSubtableFields/${V}`,64);(!$.includes(V)||T.get(V)!=="subtable"||!W||z.length<1||z.some(H=>!Ae.has(H))||z.some(H=>Ae.get(H)==="subtable")||z.some(H=>Ae.get(H)==="signature"))&&d("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${l}/publicSubtableFields/${V}`)}}if(b.some(V=>V.startsWith("public."))){Object.prototype.hasOwnProperty.call(f,"publicRecordFields")||d("NATIVE_PUBLIC_RECORD_FIELDS_REQUIRED",`${l}/publicRecordFields`);let V=w(f.publicRecordFields,`${l}/publicRecordFields`,64);(V.length<1||V.some(x=>!$.includes(x))||V.some(x=>T.get(x)==="signature"||T.get(x)==="subtable"&&!k?.[x]))&&d("NATIVE_PUBLIC_RECORD_FIELDS_INVALID",`${l}/publicRecordFields`)}let Y=Object.prototype.hasOwnProperty.call(f,"requiredFields")?w(f.requiredFields,`${l}/requiredFields`,64):[],M=N.surface||{},le=M.fields||{},ue=String(M.mutationOwner||"native")==="native"&&M.generated?.create!==!1,K=N.schema.fields.filter(V=>We(V,le[V.code])).map(V=>String(V.code));if(b.includes("create")&&!ue&&d("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${l}/fields`),b.includes("create")&&!Object.prototype.hasOwnProperty.call(f,"draft")&&d("NATIVE_PUBLIC_DRAFT_REQUIRED",`${l}/draft`),b.includes("create"))for(let V of K){let x=$.includes(V)?Y.includes(V)?null:"requiredFields":"fields";x&&d("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${l}/${x}`,{resourceCode:G,fieldCode:V})}if(Object.prototype.hasOwnProperty.call(f,"draft")){let V=I(f.draft,`${l}/draft`);O(V,["enabled","inactivityTtlSeconds","maxBytes"],`${l}/draft`),v(V.enabled,!0,`${l}/draft/enabled`),Z(V.inactivityTtlSeconds,`${l}/draft/inactivityTtlSeconds`,3600,7776e3),Z(V.maxBytes,`${l}/draft/maxBytes`,4096,262144)}else b.includes("draft.read")&&d("NATIVE_PUBLIC_DRAFT_REQUIRED",`${l}/draft`);let pe=Object.prototype.hasOwnProperty.call(f,"validations")?R(f.validations,`${l}/validations`,16):[],se=new Set;pe.forEach((V,x)=>{let P=`${l}/validations/${x}`,J=I(V,P);O(J,["code","kind","fields","result"],P);let W=F(J.code,`${P}/code`);se.has(W)&&d("NATIVE_PUBLIC_VALIDATION_DUPLICATE",`${P}/code`),v(J.kind,"duplicate",`${P}/kind`),v(J.result,"availability",`${P}/result`);let Ae=w(J.fields,`${P}/fields`,8);(Ae.length<1||Ae.some(z=>!$.includes(z))||Ae.some(z=>["file","subtable"].includes(T.get(z)||"")))&&d("NATIVE_PUBLIC_VALIDATION_FIELD_INVALID",`${P}/fields`),se.add(W)}),i.add(p)})}function Ms(e,t){let o=I(e,t);O(o,["policies"],t),R(o.policies,`${t}/policies`,16).length<1&&d("NATIVE_PUBLIC_POLICY_REQUIRED",t)}function js(e){return{policies:X(e.frontend.publicAccess.policies.map(t=>({code:t.code,routeCode:t.routeCode,mode:t.mode,resourceCode:t.resourceCode,operations:j(t.operations),fields:j(t.fields),...t.requiredFields?{requiredFields:j(t.requiredFields)}:{},...t.ownRecordFields?{ownRecordFields:j(t.ownRecordFields)}:{},...t.publicRecordFields?{publicRecordFields:j(t.publicRecordFields)}:{},...t.publicFilters?{publicFilters:t.publicFilters.map(o=>({field:o.field,operator:o.operator,value:o.value})).sort((o,n)=>re(o.field,n.field))}:{},...t.publicSubtableFields?{publicSubtableFields:Object.fromEntries(Object.entries(t.publicSubtableFields).sort(([o],[n])=>o.localeCompare(n)).map(([o,n])=>[o,j(Array.isArray(n)?n.map(String):[])]))}:{},...t.serverGeneratedFields?{serverGeneratedFields:t.serverGeneratedFields.map(o=>({field:o.field,kind:o.kind})).sort((o,n)=>re(o.field,n.field))}:{},...t.schedule?{schedule:{campusPolicyCode:t.schedule.campusPolicyCode,rulePolicyCode:t.schedule.rulePolicyCode,campusField:t.schedule.campusField,ruleCampusField:t.schedule.ruleCampusField,ruleWeekdaysField:t.schedule.ruleWeekdaysField,ruleOpenAtField:t.schedule.ruleOpenAtField,ruleCloseAtField:t.schedule.ruleCloseAtField,ruleSlotMinutesField:t.schedule.ruleSlotMinutesField,ruleAdvanceHoursField:t.schedule.ruleAdvanceHoursField,ruleAdvanceDaysField:t.schedule.ruleAdvanceDaysField,campusEnabledField:t.schedule.campusEnabledField,ruleEnabledField:t.schedule.ruleEnabledField,dateField:t.schedule.dateField,timeField:t.schedule.timeField}}:{},...t.draft?{draft:{...t.draft}}:{},...t.validations?{validations:X(t.validations.map(o=>({code:o.code,kind:o.kind,fields:j(o.fields),result:o.result})),o=>o.code)}:{}})),t=>t.code)}}function Un(e){let t=[{owner:"platform:admin-entry",path:"/"},{owner:"platform:admin-entry",path:"/admin"},{owner:"platform:file-preview",path:"/files/:resourceCode/:fileId/preview"}];e.frontend.authentication&&t.push({owner:"authentication:desktop",path:e.frontend.authentication.surfaces.desktop.path},{owner:"authentication:mobile",path:e.frontend.authentication.surfaces.mobile.path});for(let o of e.data.resources){let n=Mn(o),s=`/admin/resources/${o.code}`,r=[["list",s],["detail",`${s}/:id`],["create",`${s}/new`],["update",`${s}/:id/edit`]];for(let[c,i]of r)n[c]&&t.push({owner:`resource:${o.code}:${c}`,path:i},{owner:`resource:${o.code}:${c}:mobile`,path:`/m${i}`})}if(e.frontend.user.applicationTodoCenter===!0&&t.push({owner:"application:todo-center",path:"/todos"},{owner:"application:todo-center:mobile",path:"/m/todos"}),e.workflows.definitions.length>0){t.push({owner:"workflow:work-center",path:"/work-center"},{owner:"workflow:work-center:mobile",path:"/m/work-center"},{owner:"workflow:task",path:"/tasks/:taskId"},{owner:"workflow:task:mobile",path:"/m/tasks/:taskId"},{owner:"workflow:instance",path:"/workflows/:instanceId"},{owner:"workflow:instance:mobile",path:"/m/workflows/:instanceId"});let o=!1;for(let n of e.workflows.definitions)["standalone","hidden-handoff"].includes(n.launch.mode)&&(o=!0);o&&t.push({owner:"workflow:launch",path:"/workflows/:workflowCode/start"},{owner:"workflow:launch:mobile",path:"/m/workflows/:workflowCode/start"})}return t}function Ze(e){let t=new Map(Un(e).map(o=>[He(o.path),o]));return X(e.frontend.routes.map((o,n)=>{let s=`/config/frontend/routes/${n}`,r=I(o,s);O(r,["code","path","label","surface","parentCode","capability","access","pinned","tabPersistence","keepAlive"],s,!0),["admin","user"].includes(r.surface)||d("NATIVE_ROUTE_SURFACE_INVALID",`${s}/surface`);let c=de(r.path,`${s}/path`);r.surface==="admin"&&c!=="/admin"&&!c.startsWith("/admin/")&&d("NATIVE_ADMIN_ROUTE_PATH_INVALID",`${s}/path`),r.surface==="user"&&(c==="/admin"||c.startsWith("/admin/"))&&d("NATIVE_USER_ROUTE_PATH_RESERVED",`${s}/path`);let i=He(c),a=t.get(i);a&&d("NATIVE_ROUTE_PATH_CONFLICT",`${s}/path`,{path:c,owner:a.owner}),t.set(i,{owner:`frontend:${String(r.code||n)}`,path:c});let u=/[:*]/.test(c),E=wt(r,s,e.appCode),l=r.pinned===void 0?void 0:ye(r.pinned,`${s}/pinned`),f=r.tabPersistence===void 0?u?"none":"session":S(r.tabPersistence,`${s}/tabPersistence`,16),p=r.keepAlive===void 0?"none":S(r.keepAlive,`${s}/keepAlive`,16);return["session","none"].includes(f)||d("NATIVE_ROUTE_TAB_PERSISTENCE_INVALID",`${s}/tabPersistence`),["none","memory"].includes(p)||d("NATIVE_ROUTE_KEEP_ALIVE_INVALID",`${s}/keepAlive`),u&&l===!0&&d("NATIVE_DYNAMIC_ROUTE_PINNED_FORBIDDEN",`${s}/pinned`),u&&f==="session"&&d("NATIVE_DYNAMIC_ROUTE_TAB_PERSISTENCE_FORBIDDEN",`${s}/tabPersistence`),u&&p==="memory"&&d("NATIVE_DYNAMIC_ROUTE_KEEP_ALIVE_FORBIDDEN",`${s}/keepAlive`),{code:F(r.code,`${s}/code`),path:c,label:S(r.label,`${s}/label`,255),surface:r.surface,...r.parentCode===void 0?{}:{parentCode:F(r.parentCode,`${s}/parentCode`)},...E,...l===void 0?{}:{pinned:l},tabPersistence:f,keepAlive:p}}),o=>o.code)}function Mn(e){let t=e.surface===void 0?{}:I(e.surface,"/surface"),o=t.mutationOwner||"native",n=t.generated===void 0?{}:I(t.generated,"/surface/generated"),s=o==="native";return{list:n.list??!0,detail:n.detail??!0,create:n.create??s,update:n.update??s,delete:n.delete??s}}function jn(e){let t=[];for(let o of X(e.data.resources,n=>n.code).flatMap(n=>[{resource:n,viewCode:void 0},...(n.surface?.views||[]).map(s=>({viewCode:s.code,resource:{...n,name:s.name,surface:mt(n.surface,s.code)}}))])){let{resource:n,viewCode:s}=o,r=`/admin/resources/${n.code}${s?`/views/${s}`:""}`,c=Mn(n),i=[{operation:"list",kind:"resource-list",path:`${r}`,label:n.name,capability:n.capabilities.read,navigationEligible:!0},{operation:"detail",kind:"resource-detail",path:`${r}/:id`,label:`${n.name}\u8BE6\u60C5`,capability:n.capabilities.read,navigationEligible:!1},{operation:"create",kind:"resource-create",path:`${r}/new`,label:`\u65B0\u589E${n.name}`,capability:n.capabilities.create,navigationEligible:!1},{operation:"update",kind:"resource-update",path:`${r}/:id/edit`,label:`\u7F16\u8F91${n.name}`,capability:n.capabilities.update,navigationEligible:!1}];for(let a of i)c[a.operation]&&t.push({code:`resource:${n.code}${s?`:view:${s}`:""}:${a.operation}`,kind:a.kind,path:a.path,label:a.label,navigationEligible:a.navigationEligible,capability:a.capability,resourceCode:n.code,...s?{viewCode:s}:{}})}for(let o of Ze(e))o.surface==="admin"&&t.push({code:`operation:${o.code}`,kind:"operation",path:o.path,label:o.label,navigationEligible:!/[:*]/.test(o.path),routeCode:o.code});return t.sort((o,n)=>re(o.code,n.code))}function Bn(e){return e.kind==="resource"?`resource:${e.resourceCode}${e.viewCode?`:view:${e.viewCode}`:""}:list`:`operation:${e.routeCode}`}function Bs(e){return e.frontend.admin.navigation.map((t,o)=>({code:t.code,label:t.label,...t.icon===void 0?{}:{icon:t.icon},order:t.order??o,items:t.items.map((n,s)=>({pageCode:Bn(n.page),...n.label===void 0?{}:{label:n.label},...n.icon===void 0?{}:{icon:n.icon},order:n.order??s})).sort((n,s)=>n.order-s.order||re(n.pageCode,s.pageCode))})).sort((t,o)=>t.order-o.order||re(t.code,o.code))}function Js(e,t){let o=R(e,t,q.adminNavigationGroups),n=0;o.forEach((s,r)=>{let c=`${t}/${r}`,i=I(s,c);O(i,["code","label","icon","order","items"],c,!0),F(i.code,`${c}/code`),S(i.label,`${c}/label`,255),Xe(i.icon,`${c}/icon`),$n(i.order,`${c}/order`);let a=R(i.items,`${c}/items`,500);a.length===0&&d("NATIVE_ADMIN_GROUP_ORPHANED",`${c}/items`),n+=a.length,n>q.adminNavigationItems&&d("NATIVE_ARRAY_LIMIT_EXCEEDED",t),a.forEach((u,E)=>{let l=`${c}/items/${E}`,f=I(u,l);O(f,["page","label","icon","order"],l,!0),Ws(f.page,`${l}/page`),f.label!==void 0&&S(f.label,`${l}/label`,255),Xe(f.icon,`${l}/icon`),$n(f.order,`${l}/order`)})})}function Ws(e,t){let o=I(e,t),n=S(o.kind,`${t}/kind`,64);if(n==="resource"){O(o,["kind","resourceCode"],t,["viewCode"]),o.viewCode!==void 0&&F(o.viewCode,`${t}/viewCode`),G(o.resourceCode,`${t}/resourceCode`);return}if(n==="operation"){O(o,["kind","routeCode"],t),F(o.routeCode,`${t}/routeCode`);return}d("NATIVE_ADMIN_PAGE_REFERENCE_KIND_INVALID",`${t}/kind`)}function Gs(e){let t=new Map(jn(e).map(s=>[String(s.code),s])),o=new Set,n=new Set;e.frontend.admin.navigation.forEach((s,r)=>{let c=`/config/frontend/admin/navigation/${r}`;o.has(s.code)&&d("NATIVE_ADMIN_GROUP_DUPLICATE",`${c}/code`),o.add(s.code),s.label===s.code&&d("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${c}/label`),s.items.forEach((i,a)=>{let u=`${c}/items/${a}`,E=Bn(i.page),l=t.get(E);(!l||l.navigationEligible!==!0)&&d("NATIVE_ADMIN_PAGE_NOT_FOUND",`${u}/page`),n.has(E)&&d("NATIVE_ADMIN_PAGE_DUPLICATE",`${u}/page`),n.add(E);let f=i.page.resourceCode||i.page.routeCode||i.page.workflowCode||E,p=i.label||l.label;(!p||p===f||p===E)&&d("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${u}/label`)})})}function zs(e,t){let o=R(e,t,q.adminPages),n=new Set;o.forEach((s,r)=>{let c=`${t}/${r}`,i=I(s,c);O(i,["code","kind","path","label","navigationEligible","capability","access","resourceCode","viewCode","routeCode"],c,!0);let a=S(i.code,`${c}/code`,255);n.has(a)&&d("NATIVE_ADMIN_PAGE_DUPLICATE",`${c}/code`),n.add(a);let u=S(i.kind,`${c}/kind`,64);if(["resource-list","resource-detail","resource-create","resource-update","operation"].includes(u)||d("NATIVE_ADMIN_PAGE_KIND_INVALID",`${c}/kind`),de(i.path,`${c}/path`),S(i.label,`${c}/label`,255),ye(i.navigationEligible,`${c}/navigationEligible`),i.capability!==void 0&&i.access!==void 0&&d("NATIVE_ROUTE_ACCESS_CONFLICT",`${c}/access`),i.capability!==void 0&&S(i.capability,`${c}/capability`,255),i.access!==void 0){let E=I(i.access,`${c}/access`);O(E,["allOf","anyOf"],`${c}/access`,!0);for(let l of["allOf","anyOf"])E[l]!==void 0&&w(E[l],`${c}/access/${l}`,50)}for(let E of["resourceCode","viewCode","routeCode"])i[E]!==void 0&&F(i[E],`${c}/${E}`)})}function Ys(e,t){let o=R(e,t,q.adminNavigationGroups),n=0;o.forEach((s,r)=>{let c=`${t}/${r}`,i=I(s,c);O(i,["code","label","icon","order","items"],c,!0),F(i.code,`${c}/code`),S(i.label,`${c}/label`,255),Xe(i.icon,`${c}/icon`),Z(i.order,`${c}/order`,-1e4,1e4);let a=R(i.items,`${c}/items`,500);a.length===0&&d("NATIVE_ADMIN_GROUP_ORPHANED",`${c}/items`),n+=a.length,n>q.adminNavigationItems&&d("NATIVE_ARRAY_LIMIT_EXCEEDED",t),a.forEach((u,E)=>{let l=`${c}/items/${E}`,f=I(u,l);O(f,["pageCode","label","icon","order"],l,!0),S(f.pageCode,`${l}/pageCode`,255),f.label!==void 0&&S(f.label,`${l}/label`,255),Xe(f.icon,`${l}/icon`),Z(f.order,`${l}/order`,-1e4,1e4)})})}var qs=new Set(["application-todo-center","workflow-work-center","workflow-launch","workflow-task","workflow-instance","resource-records","resource-submit"]);function Ks(e,t,o){let n=I(e,t);O(n,["schemaVersion","appCode","devicePolicy","rootEntry","authentication","routes","digest"],t),v(n.schemaVersion,Ln,`${t}/schemaVersion`),v(n.appCode,o,`${t}/appCode`),Ft(n.devicePolicy,`${t}/devicePolicy`),Hs(n.rootEntry,`${t}/rootEntry`),Xs(n.authentication,`${t}/authentication`),yt(n.digest,`${t}/digest`);let s=R(n.routes,`${t}/routes`,q.routes),r=new Set;s.forEach((c,i)=>{let a=`${t}/routes/${i}`,u=I(c,a),E=u.kind==="resource-records"||u.kind==="resource-submit";O(u,["code","kind","desktop","mobile"],a,["workflowCode",...E?["resourceCode"]:[]]);let l=S(u.code,`${a}/code`,255);r.has(l)&&d("NATIVE_ROUTE_MANIFEST_DUPLICATE",`${a}/code`),r.add(l);let f=S(u.kind,`${a}/kind`,64);if(qs.has(f)||d("NATIVE_ROUTE_MANIFEST_KIND_INVALID",`${a}/kind`),u.workflowCode!==void 0&&F(u.workflowCode,`${a}/workflowCode`),E){let A=G(u.resourceCode,`${a}/resourceCode`);v(l,`user.${A}.${u.kind==="resource-records"?"records":"submit"}`,`${a}/code`)}else u.resourceCode!==void 0&&d("NATIVE_PROPERTY_UNKNOWN",`${a}/resourceCode`);let p=Cn(u.desktop,`${a}/desktop`,o),_=Cn(u.mobile,`${a}/mobile`,o);p.surface!=="user"&&d("NATIVE_ROUTE_MANIFEST_DESKTOP_SURFACE_INVALID",`${a}/desktop/surface`),_.surface!=="user"&&d("NATIVE_ROUTE_MANIFEST_MOBILE_SURFACE_INVALID",`${a}/mobile/surface`),p.routeCode===_.routeCode&&d("NATIVE_ROUTE_MANIFEST_PAIR_DUPLICATE",a)}),v(n.digest,ee({schemaVersion:n.schemaVersion,appCode:n.appCode,devicePolicy:n.devicePolicy,rootEntry:n.rootEntry,authentication:n.authentication,routes:n.routes}),`${t}/digest`)}function Ft(e,t){let o=I(e,t);O(o,["kind","mobileMaxWidthPx","desktopMinWidthPx"],t),v(o.kind,"viewport-family",`${t}/kind`);let n=Z(o.mobileMaxWidthPx,`${t}/mobileMaxWidthPx`,320,1600),s=Z(o.desktopMinWidthPx,`${t}/desktopMinWidthPx`,320,1600);return s!==n+1&&d("NATIVE_FRONTEND_DEVICE_POLICY_INVALID",t),{kind:"viewport-family",mobileMaxWidthPx:n,desktopMinWidthPx:s}}function Hs(e,t){let o=I(e,t);O(o,["code","desktop","mobile"],t);let n=F(o.code,`${t}/code`),s=Dt(o.desktop,`${t}/desktop`),r=Dt(o.mobile,`${t}/mobile`);return(s===r||r==="/"||!r.startsWith("/m/"))&&d("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",t),s.startsWith("/m/")&&d("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",`${t}/desktop`),{code:n,desktop:s,mobile:r}}function Xs(e,t){let o=I(e,t);O(o,["desktop","mobile"],t);let n=gn(o.desktop,`${t}/desktop`,!1),s=gn(o.mobile,`${t}/mobile`,!0);return(n.routeCode===s.routeCode||n.path===s.path)&&d("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_DUPLICATE",t),{desktop:n,mobile:s}}function gn(e,t,o){let n=I(e,t);O(n,["routeCode","path"],t);let s=F(n.routeCode,`${t}/routeCode`),r=Dt(n.path,`${t}/path`);return(o?!r.startsWith("/m/"):r.startsWith("/m/"))&&d("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_PATH_INVALID",`${t}/path`),{routeCode:s,path:r}}function Dt(e,t){let o=de(e,t);return/[:*?#\\\\]/.test(o)&&d("NATIVE_ROUTE_MANIFEST_STATIC_PATH_INVALID",t),o}function Cn(e,t,o){let n=I(e,t);O(n,["routeCode","path","surface","pathParams","requiresAuthentication"],t,["capability","access"]),F(n.routeCode,`${t}/routeCode`);let s=de(n.path,`${t}/path`),r=S(n.surface,`${t}/surface`,16);["admin","user"].includes(r)||d("NATIVE_ROUTE_SURFACE_INVALID",`${t}/surface`);let c=w(n.pathParams,`${t}/pathParams`,8);return c.forEach((i,a)=>{(!/^[A-Za-z][A-Za-z0-9_]*$/.test(i)||i.length>64)&&d("NATIVE_ROUTE_PATH_PARAM_INVALID",`${t}/pathParams/${a}`)}),Q(c)!==Q(Jn(s))&&d("NATIVE_ROUTE_PATH_PARAMS_MISMATCH",`${t}/pathParams`),wt(n,t,o),n.requiresAuthentication!==!0&&d("NATIVE_ROUTE_AUTHENTICATION_REQUIRED",`${t}/requiresAuthentication`),n}function Jn(e){return j([...e.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(t=>t[1]))}function bn(e,t,o,n){return{routeCode:e,path:t,surface:o,pathParams:Jn(t),...n?.capability?{capability:n.capability}:{},...n?.access?{access:n.access}:{},requiresAuthentication:!0}}function On(e,t,o,n){return e==="workflow-launch"?`workflow.${o}.launch.${t}`:e==="application-todo-center"?`application.todo-center.${t}`:e==="resource-records"?`user.${n}.records.${t}`:e==="resource-submit"?`user.${n}.submit.${t}`:`${e.replace(/-/g,".")}.${t}`}function Qs(e){let t=e.appCode,o=[],n=(p,_,A,m,N,T,b)=>{o.push({code:p,kind:_,...N?{workflowCode:N}:{},...b?{resourceCode:b}:{},desktop:bn(On(_,"desktop",N,b),A,"user",T),mobile:bn(On(_,"mobile",N,b),m,"user",T)})};e.frontend.user.applicationTodoCenter===!0&&n("application:todo-center","application-todo-center","/todos","/m/todos");let s=Wn(e);s.length>0&&(n("workflow:work-center","workflow-work-center","/work-center","/m/work-center"),n("workflow:task","workflow-task","/tasks/:taskId","/m/tasks/:taskId"),n("workflow:instance","workflow-instance","/workflows/:instanceId","/m/workflows/:instanceId"));for(let p of s){if(!["standalone","hidden-handoff"].includes(p.launch.mode))continue;let _=j([p.launch.submission?.create?.requiredCapability,p.launch.submission?.existing?.requiredCapability].filter(A=>!!A));n(`workflow:${p.code}:launch`,"workflow-launch","/workflows/:workflowCode/start","/m/workflows/:workflowCode/start",p.code,_.length===1?{capability:_[0]}:_.length>1?{access:{anyOf:_}}:void 0)}let r=o.sort((p,_)=>re(String(p.code),String(_.code))),c=Ze(e),i=p=>{let _=p==="mobile"?"/m/":"/",A=c.filter(N=>N.surface==="user"&&!/[:*?#\\\\]/.test(N.path)&&N.path===_).sort((N,T)=>re(N.code,T.code))[0];if(A)return{code:A.code,path:A.path};let m=c.filter(N=>N.surface==="user"&&!/[:*?#\\\\]/.test(N.path)&&(p==="mobile"?N.path.startsWith("/m/"):!N.path.startsWith("/m/"))).sort((N,T)=>re(N.code,T.code))[0];return m?{code:m.code,path:m.path}:{code:p==="mobile"?"application-root-mobile":"application-root",path:_}},a=e.frontend.authentication?{desktop:{routeCode:e.frontend.authentication.surfaces.desktop.routeCode,path:e.frontend.authentication.surfaces.desktop.path},mobile:{routeCode:e.frontend.authentication.surfaces.mobile.routeCode,path:e.frontend.authentication.surfaces.mobile.path}}:{desktop:{routeCode:"application-login",path:"/login"},mobile:{routeCode:"application-login-mobile",path:"/m/login"}},u=Ft(e.frontend.devicePolicy,"/config/frontend/devicePolicy"),E=i("desktop"),l=i("mobile"),f={schemaVersion:Ln,appCode:t,devicePolicy:u,rootEntry:{code:E.code,desktop:E.path,mobile:l.path},authentication:a,routes:r};return{...f,digest:ee(f)}}function Xe(e,t){if(e===void 0)return;let o=S(e,t,32);us.has(o)||d("NATIVE_ADMIN_ICON_INVALID",t)}function $n(e,t){e!==void 0&&Z(e,t,-1e4,1e4)}function wt(e,t,o){return e.capability!==void 0&&e.access!==void 0&&d("NATIVE_ROUTE_ACCESS_CONFLICT",`${t}/access`),e.capability!==void 0?{capability:me(e.capability,`${t}/capability`,o)}:e.access===void 0?{}:{access:et(e.access,`${t}/access`,o)}}function et(e,t,o){let n=I(e,t);O(n,["allOf","anyOf"],t,!0);let s=n.allOf===void 0?void 0:j(w(n.allOf,`${t}/allOf`,50).map((c,i)=>me(c,`${t}/allOf/${i}`,o))),r=n.anyOf===void 0?void 0:j(w(n.anyOf,`${t}/anyOf`,50).map((c,i)=>me(c,`${t}/anyOf/${i}`,o)));return(s?.length||0)+(r?.length||0)===0&&d("NATIVE_ROUTE_ACCESS_EMPTY",t),{...s===void 0?{}:{allOf:s},...r===void 0?{}:{anyOf:r}}}function Wn(e){let t=new Map(kn(e).map(s=>[String(s.code),s])),o=e.workflows.definitions.map((s,r)=>{let c=`/config/workflows/definitions/${r}`,i=I(s,c);O(i,["version","definition","launch"],c,["detailRouteCode"]);let a=I(i.definition,`${c}/definition`),u=i.detailRouteCode===void 0?void 0:zn(i.detailRouteCode,`${c}/detailRouteCode`);return{code:F(a.code,`${c}/definition/code`),title:S(a.title,`${c}/definition/title`,255),version:De(i.version,`${c}/version`),launch:Zs(e,a,i.launch,`${c}/launch`,t),...u?{detailRouteCode:u}:{},definition:a}});return j(o.map(s=>s.code)).map(s=>{let r=o.filter(u=>u.code===s),c=e.workflows.activations.find(u=>u.workflowCode===s)?.definitionVersion,i=r.find(u=>u.version===c)||[...r].sort((u,E)=>E.version-u.version)[0],a=new Set;for(let u of r){let E=I(u.definition.nodes,"/config/workflows/definitions/nodes");for(let l of Object.values(E)){let f=I(l,"/config/workflows/definitions/nodes/*");if(f.kind==="approval")for(let p of w(f.allowedOperations||[],"/config/workflows/definitions/nodes/*/allowedOperations",20))a.add(p)}}return{code:s,title:i.title,acceptedCommandDeactivationPolicy:i.definition.acceptedCommandDeactivationPolicy,subject:i.definition.subject,launch:i.launch,...["standalone","hidden-handoff"].includes(i.launch.mode)&&!i.launch.submission?{processOperationCode:`openxiangda.workflow.${s}.submit`}:{},...i.detailRouteCode?{detailRouteCode:i.detailRouteCode}:{},definitionVersions:wn(r.map(u=>u.version)),bindingVersions:wn(e.workflows.bindings.map((u,E)=>{let l=`/config/workflows/bindings/${E}`,f=I(u,l),p=I(f.binding,`${l}/binding`);return{code:F(p.workflowCode,`${l}/binding/workflowCode`),version:De(f.version,`${l}/version`)}}).filter(u=>u.code===s).map(u=>u.version)),providerCodes:j(e.workflows.providers.map((u,E)=>F(I(u,`/config/workflows/providers/${E}`).code,`/config/workflows/providers/${E}/code`))),allowedOperations:[...a].sort(re),editableParameterCodes:j(e.workflows.editableParameters.map((u,E)=>{let l=`/config/workflows/editableParameters/${E}`,f=I(u,l);return{code:F(f.code,`${l}/code`),workflowCode:F(f.workflowCode,`${l}/workflowCode`)}}).filter(u=>u.workflowCode===s).map(u=>u.code))}})}function Gn(e,t){let o=I(e,t);O(o,["mode"],t,["submission"]);let n=S(o.mode,`${t}/mode`,32);return["standalone","custom-page","hidden-handoff","work-center-only"].includes(n)||d("NATIVE_WORKFLOW_LAUNCH_MODE_INVALID",`${t}/mode`),{mode:n,...o.submission===void 0?{}:{submission:I(o.submission,`${t}/submission`)}}}function Zs(e,t,o,n,s){let r=Gn(o,n);if(!r.submission)return{mode:r.mode};["standalone","hidden-handoff"].includes(r.mode)||d("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${n}/submission`);let c=I(r.submission,`${n}/submission`);O(c,["kind"],`${n}/submission`,["create","existing","context"]),v(c.kind,"named-operation",`${n}/submission/kind`);let i=n.endsWith("/launch")?n.slice(0,-7):n,a=I(t.subject,`${i}/definition/subject`),u=G(a.resourceCode,`${i}/definition/subject/resourceCode`),E=e.data.resources.findIndex(C=>C.code===u),l=e.data.resources[E];(E<0||!l)&&d("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${i}/definition/subject/resourceCode`);let f=new Set(I(l.schema,`/config/data/resources/${E}/schema`).fields.map(C=>String(C.code))),p=new Map(e.backend.operations.map(C=>[String(C.code),C])),_=(C,D)=>{let y=`${n}/submission/${D}`,U=I(C,y);O(U,["operationCode","inputs","output"],y);let k=F(U.operationCode,`${y}/operationCode`),Y=p.get(k),M=s.get(k),le=M?.platformAccess?.workflow?.codes;(!Y||!M||M.method!=="POST"||!Array.isArray(le)||!le.includes(t.code))&&d("NATIVE_WORKFLOW_NAMED_OPERATION_INVALID",y);let ue=I(Y.requestSchema,`${y}/operation/requestSchema`),K=I(ue.properties,`${y}/operation/requestSchema/properties`),pe=new Set(ue.required===void 0?[]:w(ue.required,`${y}/operation/requestSchema/required`,64)),se=I(U.inputs,`${y}/inputs`),V=Object.entries(se);(!V.length||V.length>64)&&d("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${y}/inputs`);let x=new Set,P=new Map,J={};for(let[z,H]of V){(!mn.test(z)||!Object.prototype.hasOwnProperty.call(K,z))&&d("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${y}/inputs/${z}`);let Oe=`${y}/inputs/${z}`,nt=I(H,Oe),Ce=S(nt.source,`${Oe}/source`,32);if(["field","idempotency-key","current-user-reference","subject-id","subject-revision","requested-at"].includes(Ce)||d("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",Oe),O(nt,["source"],Oe,Ce==="field"?["fieldCode"]:!1),P.set(Ce,(P.get(Ce)||0)+1),Ce==="field"){let Me=B(nt.fieldCode,`${Oe}/fieldCode`);(x.has(Me)||!f.has(Me))&&d("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${Oe}/fieldCode`),x.add(Me),J[z]={source:Ce,fieldCode:Me}}else J[z]={source:Ce}}([...pe].some(z=>!(z in se))||(P.get("idempotency-key")||0)!==1||!V.some(([z,H])=>I(H,`${y}/inputs/${z}`).source==="idempotency-key"&&pe.has(z))||D==="create"&&((P.get("subject-id")||0)>0||(P.get("subject-revision")||0)>0)||D==="existing"&&((P.get("subject-id")||0)!==1||(P.get("subject-revision")||0)!==1))&&d("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${y}/inputs`);let W=I(U.output,`${y}/output`);O(W,["subjectId"],`${y}/output`,["subjectRevision","processCommand"]);let Ae=I(I(Y.responseSchema,`${y}/operation/responseSchema`).properties,`${y}/operation/responseSchema/properties`);for(let z of["subjectId","subjectRevision","processCommand"]){if(W[z]===void 0)continue;let H=S(W[z],`${y}/output/${z}`,128);(!mn.test(H)||!Object.prototype.hasOwnProperty.call(Ae,H))&&d("NATIVE_WORKFLOW_NAMED_OPERATION_OUTPUT_INVALID",`${y}/output/${z}`)}return{operationCode:k,method:"POST",path:M.path,requiredCapability:M.requiredCapability,requestSchemaDigest:M.requestSchemaDigest,responseSchemaDigest:M.responseSchemaDigest,inputs:J,output:{...W},fieldCodes:x}},A=c.create===void 0?void 0:_(c.create,"create"),m=c.existing===void 0?void 0:_(c.existing,"existing");!A&&!m&&d("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${n}/submission`);let N=new Set([...A?.fieldCodes||[],...m?.fieldCodes||[]]),T=c.context===void 0?[]:R(c.context,`${n}/submission/context`,16),b=new Set,$=T.map((C,D)=>{let y=`${n}/submission/context/${D}`,U=I(C,y);O(U,["queryParameter","fieldCode"],y);let k=S(U.queryParameter,`${y}/queryParameter`,64),Y=B(U.fieldCode,`${y}/fieldCode`);return(!/^[A-Za-z][A-Za-z0-9]{0,63}$/.test(k)||b.has(k)||!N.has(Y))&&d("NATIVE_WORKFLOW_LAUNCH_CONTEXT_INVALID",y),b.add(k),{queryParameter:k,fieldCode:Y}}),g=C=>{let{fieldCodes:D,...y}=C;return y};return{mode:r.mode,submission:{kind:"named-operation",...A?{create:g(A)}:{},...m?{existing:g(m)}:{},context:$}}}function zn(e,t){let o=I(e,t);O(o,["desktop","mobile"],t);let n=F(o.desktop,`${t}/desktop`),s=F(o.mobile,`${t}/mobile`);return n===s&&d("NATIVE_WORKFLOW_DETAIL_ROUTE_DUPLICATE",t),{desktop:n,mobile:s}}function ei(e,t){let o=new Set(t.map(E=>E.code)),n=new Map;e.data.resources.forEach((E,l)=>{let f=`/config/data/resources/${l}`,p=I(E,f);for(let[m,N]of Object.entries(p.fieldPolicies||{})){if(!Ve(m))continue;let T=`${f}/fieldPolicies/${m}/read`,b=I(N,`${f}/fieldPolicies/${m}`);for(let $ of w(b.read||[],T,2e3))o.has($)||d("NATIVE_CAPABILITY_REFERENCE_MISSING",T)}if(((p.surface===void 0?{}:I(p.surface,`${f}/surface`)).mutationOwner||"native")==="native")return;let A=I(p.capabilities,`${f}/capabilities`);for(let m of["create","update","delete"])n.set(String(A[m]),m)});let s=new Set;for(let[E,l]of e.authz.roles.entries()){let f=`/config/authz/roles/${E}`,p=I(l,f);O(p,["code","name","description","capabilities"],f,!0);let _=F(p.code,`${f}/code`);s.has(_)&&d("NATIVE_ROLE_DUPLICATE",`${f}/code`),s.add(_),S(p.name,`${f}/name`,255);let A=w(p.capabilities,`${f}/capabilities`,2e3);for(let[m,N]of A.entries())n.has(N)&&d("NATIVE_DATA_SURFACE_MUTATION_GRANT_FORBIDDEN",`${f}/capabilities/${m}`,{operation:n.get(N)}),o.has(N)||d("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/capabilities`)}let r=e.authz.authenticatedUserRoleCode===void 0?"":F(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode");r&&!s.has(r)&&d("NATIVE_AUTHENTICATED_USER_ROLE_REFERENCE_MISSING","/config/authz/authenticatedUserRoleCode");let c=new Set,i=0;for(let[E,l]of e.perspectives.entries()){let f=`/config/perspectives/${E}`,p=I(l,f);O(p,["code","name","description","roleCodes","capabilityCodes","default"],f,!0);let _=F(p.code,`${f}/code`);c.has(_)&&d("NATIVE_PERSPECTIVE_DUPLICATE",`${f}/code`),c.add(_),S(p.name,`${f}/name`,255);let A=w(p.roleCodes,`${f}/roleCodes`,20);A.length<1&&d("NATIVE_PERSPECTIVE_ROLE_REQUIRED",`${f}/roleCodes`),A.forEach((T,b)=>{s.has(T)||d("NATIVE_PERSPECTIVE_ROLE_MISSING",`${f}/roleCodes/${b}`)});let m=j(e.authz.roles.filter(T=>A.includes(T.code)).flatMap(T=>T.capabilities)),N=w(p.capabilityCodes,`${f}/capabilityCodes`,2e3);Q(m)!==Q(N)&&d("NATIVE_PERSPECTIVE_CAPABILITY_PROJECTION_MISMATCH",`${f}/capabilityCodes`),p.default===!0?i+=1:p.default!==void 0&&d("NATIVE_PERSPECTIVE_DEFAULT_INVALID",`${f}/default`)}i>1&&d("NATIVE_PERSPECTIVE_DEFAULT_DUPLICATE","/config/perspectives");for(let[E,l]of e.backend.operations.entries()){let f=I(l,`/config/backend/operations/${E}`);o.has(f.capability)||d("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/backend/operations/${E}/capability`)}let a=new Set,u=new Set;for(let[E,l]of e.frontend.routes.entries()){let f=`/config/frontend/routes/${E}`,p=I(l,f),_=F(p.code,`${f}/code`);a.has(_)&&d("NATIVE_ROUTE_DUPLICATE",`${f}/code`),a.add(_);let A=de(p.path,`${f}/path`);u.has(A)&&d("NATIVE_ROUTE_PATH_DUPLICATE",`${f}/path`),u.add(A);let m=wt(p,f,e.appCode);m.capability&&!o.has(m.capability)&&d("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/capability`);let N=p.access===void 0?void 0:I(p.access,`${f}/access`);for(let T of["allOf","anyOf"]){let b=N?.[T]===void 0?[]:R(N[T],`${f}/access/${T}`,50);for(let[$,g]of b.entries()){let C=me(g,`${f}/access/${T}/${$}`,e.appCode);o.has(C)||d("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/access/${T}/${$}`)}}}if(e.frontend.admin.access!==void 0){let E=et(e.frontend.admin.access,"/config/frontend/admin/access",e.appCode);for(let l of["allOf","anyOf"])for(let[f,p]of(E[l]||[]).entries())o.has(p)||d("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/frontend/admin/access/${l}/${f}`)}for(let[E,l]of e.frontend.routes.entries()){let f=I(l,`/config/frontend/routes/${E}`);f.parentCode&&!a.has(f.parentCode)&&d("NATIVE_ROUTE_PARENT_MISSING",`/config/frontend/routes/${E}/parentCode`)}}function ti(e){let t=new Set(e.authz.roles.map(u=>String(u.code))),o=e.authz.authenticatedUserRoleCode===void 0?"":F(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode"),n=new Map(e.authz.scopeDimensions.map(u=>[String(u.code),{valueType:u.valueType==="uuid"?"uuid":"string",...u.valueSource?.resourceCode?{valueSourceResourceCode:String(u.valueSource.resourceCode)}:{}}])),s=new Set(n.keys()),r=new Map(e.data.resources.map((u,E)=>{let l=be(u,`/config/data/resources/${E}`,e.appCode);return[l.code,new Map(l.schema.fields.map(f=>[String(f.code),f]))]}));for(let[u,E]of e.authz.scopeDimensions.entries()){let l=`/config/authz/scopeDimensions/${u}`,f=I(E,l);if(O(f,["code","name","resourceCode","valueType","hierarchyMode","valueSource"],l,!0),f.valueSource===void 0)continue;let p=I(f.valueSource,`${l}/valueSource`);O(p,["kind","resourceCode","labelField","enabledField"],`${l}/valueSource`,!0),p.kind!=="native_resource"&&d("NATIVE_SCOPE_VALUE_SOURCE_KIND_INVALID",`${l}/valueSource/kind`),f.valueType!=="uuid"&&d("NATIVE_SCOPE_VALUE_SOURCE_TYPE_INVALID",`${l}/valueType`);let _=G(p.resourceCode,`${l}/valueSource/resourceCode`),A=r.get(_);A||d("NATIVE_SCOPE_VALUE_SOURCE_RESOURCE_MISSING",`${l}/valueSource/resourceCode`);let m=B(p.labelField,`${l}/valueSource/labelField`);if(["text.short","text.long"].includes(String(A.get(m)?.type||""))||d("NATIVE_SCOPE_VALUE_SOURCE_LABEL_FIELD_INVALID",`${l}/valueSource/labelField`),p.enabledField!==void 0){let N=B(p.enabledField,`${l}/valueSource/enabledField`);A.get(N)?.type!=="boolean"&&d("NATIVE_SCOPE_VALUE_SOURCE_ENABLED_FIELD_INVALID",`${l}/valueSource/enabledField`)}}let c=new Set,i=new Set;for(let[u,E]of e.authz.scopeSources.entries()){let l=`/config/authz/scopeSources/${u}`,f=I(E,l);O(f,["code","name","resourceCode","subject","grants","operationField","enabledField","effectiveFromField","effectiveToField","failureMode"],l,!0);let p=F(f.code,`${l}/code`);c.has(p)&&d("NATIVE_SCOPE_SOURCE_DUPLICATE",`${l}/code`),c.add(p),S(f.name,`${l}/name`,255);let _=G(f.resourceCode,`${l}/resourceCode`),A=r.get(_);A||d("NATIVE_SCOPE_SOURCE_RESOURCE_MISSING",`${l}/resourceCode`);let m=I(f.subject,`${l}/subject`),N=S(m.type,`${l}/subject/type`,32);O(m,N==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${l}/subject`),["user","role_membership"].includes(N)||d("NATIVE_SCOPE_SOURCE_SUBJECT_INVALID",`${l}/subject/type`);let T=Pe(m.userIdField,A);gt(T)||d("NATIVE_SCOPE_SOURCE_SUBJECT_PATH_INVALID",`${l}/subject/userIdField`),N==="role_membership"&&!t.has(String(m.roleCode))&&d("NATIVE_ROLE_REFERENCE_MISSING",`${l}/subject/roleCode`);let b=new Set;for(let[$,g]of R(f.grants,`${l}/grants`,100).entries()){let C=`${l}/grants/${$}`,D=I(g,C);O(D,["dimensionCode","valueField","parentValueField"],C,!0);let y=F(D.dimensionCode,`${C}/dimensionCode`);(!s.has(y)||b.has(y))&&d("NATIVE_SCOPE_SOURCE_DIMENSION_INVALID",`${C}/dimensionCode`),b.add(y),f.failureMode==="last_known_good"&&i.add(y);for(let U of["valueField","parentValueField"]){if(D[U]===void 0)continue;let k=Pe(D[U],A);cn(k,n.get(y),r)||d("NATIVE_SCOPE_SOURCE_GRANT_PATH_INVALID",`${C}/${U}`)}}b.size===0&&d("NATIVE_SCOPE_SOURCE_GRANT_REQUIRED",`${l}/grants`),["strict","last_known_good"].includes(f.failureMode)||d("NATIVE_SCOPE_SOURCE_FAILURE_MODE_INVALID",`${l}/failureMode`);for(let $ of["operationField","enabledField","effectiveFromField","effectiveToField"]){if(f[$]===void 0)continue;let g=B(f[$],`${l}/${$}`);A.has(g)||d("NATIVE_SCOPE_SOURCE_FIELD_MISSING",`${l}/${$}`)}}oi(e,t,r,o);let a=new Set;for(let[u,E]of e.authz.dataPolicies.entries()){let l=`/config/authz/dataPolicies/${u}`,f=I(E,l);O(f,["code","name","resourceCode","unrestrictedRoleCodes","operations","matchMode","rules","readExpression","writeBoundary"],l,!0);let p=F(f.code,`${l}/code`);a.has(p)&&d("NATIVE_DATA_POLICY_DUPLICATE",`${l}/code`),a.add(p);let _=f.readExpression!==void 0,A=w(f.operations||[],`${l}/operations`,4);f.operations!==void 0&&(A.length===0||A.some(g=>!["read","create","update","delete"].includes(g)))&&d("NATIVE_DATA_POLICY_OPERATIONS_INVALID",`${l}/operations`),["AND","OR"].includes(f.matchMode)||d("NATIVE_DATA_POLICY_MATCH_MODE_INVALID",`${l}/matchMode`),_&&f.operations!==void 0&&d("NATIVE_DATA_POLICY_READ_EXPRESSION_OPERATIONS_FORBIDDEN",`${l}/operations`);let m=e.data.resources.find(g=>g.dataPolicyCode===p),N=f.resourceCode||m?.code,T=N?r.get(G(N,`${l}/resourceCode`)):void 0;_&&!T&&d("NATIVE_DATA_POLICY_RESOURCE_MISSING",`${l}/resourceCode`);let b=w(f.unrestrictedRoleCodes||[],`${l}/unrestrictedRoleCodes`,100);f.unrestrictedRoleCodes!==void 0&&b.length===0&&d("NATIVE_DATA_POLICY_UNRESTRICTED_ROLES_INVALID",`${l}/unrestrictedRoleCodes`);for(let g of b)t.has(g)||d("NATIVE_ROLE_REFERENCE_MISSING",`${l}/unrestrictedRoleCodes`);let $;try{let g=R(f.rules,`${l}/rules`,100).map((C,D)=>({rule:I(C,`${l}/rules/${D}`),pointer:`${l}/rules/${D}`}));g.length===0?(!_||f.matchMode!=="AND"||f.writeBoundary!=="capability_only")&&d("NATIVE_DATA_POLICY_WRITE_BOUNDARY_REQUIRED",l):f.writeBoundary!==void 0&&d("NATIVE_DATA_POLICY_WRITE_BOUNDARY_INVALID",`${l}/writeBoundary`),$=[...g],_&&($.push(...Ke(f.readExpression,`${l}/readExpression`)),pn(f.readExpression,`${l}/readExpression`))}catch(g){throw g instanceof ke&&d(g.code,g.pointer),g}for(let{rule:g,pointer:C}of $){O(g,["subject","dimensionCode","relationCode","resourceCode","field","roleCodes","operation","valuePath","emptyMatchesAll","operator","value","operand"],C,!0);let D=B(g.field,`${C}/field`),y=T?.get(D);_&&!y&&d("NATIVE_DATA_POLICY_FIELD_MISSING",`${C}/field`);for(let K of w(g.roleCodes||[],`${C}/roleCodes`,100))t.has(K)||d("NATIVE_ROLE_REFERENCE_MISSING",`${C}/roleCodes`);let U=String(g.operator||""),k=g.operand==="db_now",Y=["is_null","is_not_null"].includes(U),M=["eq","not_eq","in","not_in"].includes(U),le=!k&&(g.operator!==void 0||g.value!==void 0);if([g.subject==="current_user"?"current_user":"",typeof g.dimensionCode=="string"?"dimension":"",typeof g.relationCode=="string"?"relationship":"",le?"constant":"",k?"db_now":""].filter(Boolean).length!==1&&d("NATIVE_DATA_POLICY_RULE_SOURCE_INVALID",C),g.subject!==void 0&&g.subject!=="current_user"&&d("NATIVE_DATA_POLICY_SUBJECT_INVALID",`${C}/subject`),le){if(!M&&!Y&&d("NATIVE_DATA_POLICY_OPERATOR_INVALID",`${C}/operator`),["in","not_in"].includes(U)){let K=R(g.value,`${C}/value`,100).map((pe,se)=>S(pe,`${C}/value/${se}`,2048));(K.length===0||new Set(K).size!==K.length)&&d("NATIVE_DATA_POLICY_VALUE_INVALID",`${C}/value`)}else["eq","not_eq"].includes(U)?S(g.value,`${C}/value`,2048):(g.value!==void 0||g.operand!==void 0)&&d("NATIVE_DATA_POLICY_VALUE_INVALID",`${C}/value`);for(let K of["operation","valuePath","emptyMatchesAll","resourceCode","operand"])g[K]!==void 0&&d("NATIVE_DATA_POLICY_CONSTANT_RULE_INVALID",`${C}/${K}`)}if(k){(!["lt","lte","gt","gte"].includes(U)||g.value!==void 0||y?.type!=="datetime")&&d("NATIVE_DATA_POLICY_DB_NOW_INVALID",C);for(let K of["operation","valuePath","emptyMatchesAll","resourceCode","value"])g[K]!==void 0&&d("NATIVE_DATA_POLICY_DB_NOW_INVALID",`${C}/${K}`)}g.dimensionCode&&!s.has(g.dimensionCode)&&d("NATIVE_SCOPE_DIMENSION_MISSING",`${C}/dimensionCode`),i.has(String(g.dimensionCode||""))&&g.operation!=="read"&&d("NATIVE_SCOPE_SOURCE_LAST_KNOWN_GOOD_UNSAFE",`${C}/operation`)}}for(let[u,E]of e.data.resources.entries()){let l=I(E,`/config/data/resources/${u}`);l.dataPolicyCode&&!a.has(l.dataPolicyCode)&&d("NATIVE_DATA_POLICY_REFERENCE_MISSING",`/config/data/resources/${u}/dataPolicyCode`)}}function ni(e){try{jt(e.data.resources,"/config/data/resources")}catch(t){throw t instanceof _e&&d(t.code,t.pointer),t}}function oi(e,t,o,n){let s=new Set;for(let[r,c]of e.authz.roleMembershipSources.entries()){let i=`/config/authz/roleMembershipSources/${r}`,a=I(c,i);O(a,["code","name","resourceCode","userIdField","roleCode","enabledField","effectiveFromField","effectiveToField","failureMode"],i,!0);let u=F(a.code,`${i}/code`);u.length>100&&d("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${i}/code`),s.has(u)&&d("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${i}/code`),s.add(u),S(a.name,`${i}/name`,255);let E=Rn(a.resourceCode,`${i}/resourceCode`,o);Sn(a.userIdField,`${i}/userIdField`,E),t.has(String(a.roleCode||""))||d("NATIVE_ROLE_REFERENCE_MISSING",`${i}/roleCode`),n&&a.roleCode===n&&d("NATIVE_AUTHENTICATED_USER_ROLE_SOURCE_CONFLICT",`${i}/roleCode`),hn(a,i,E)}for(let[r,c]of e.authz.relationshipGrantSources.entries()){let i=`/config/authz/relationshipGrantSources/${r}`,a=I(c,i);O(a,["code","name","resourceCode","subject","relationCode","targetResourceCode","resourceIdField","operations","enabledField","effectiveFromField","effectiveToField","failureMode"],i,!0);let u=F(a.code,`${i}/code`);u.length>100&&d("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${i}/code`),s.has(u)&&d("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${i}/code`),s.add(u),S(a.name,`${i}/name`,255);let E=Rn(a.resourceCode,`${i}/resourceCode`,o),l=I(a.subject,`${i}/subject`),f=S(l.type,`${i}/subject/type`,32);O(l,f==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${i}/subject`),["user","role_membership"].includes(f)||d("NATIVE_AUTHORIZATION_PROJECTION_SUBJECT_INVALID",`${i}/subject/type`),Sn(l.userIdField,`${i}/subject/userIdField`,E),f==="role_membership"&&!t.has(String(l.roleCode||""))&&d("NATIVE_ROLE_REFERENCE_MISSING",`${i}/subject/roleCode`),F(a.relationCode,`${i}/relationCode`);let p=G(a.targetResourceCode,`${i}/targetResourceCode`);o.has(p)||d("NATIVE_AUTHORIZATION_PROJECTION_TARGET_RESOURCE_MISSING",`${i}/targetResourceCode`);let _=Pe(a.resourceIdField,E),A=_?.field.type==="resource-ref.single"&&_.valuePath==="value"&&_.field.source?.resourceCode===p;(a.resourceIdField==="id"?p!==String(a.resourceCode):!A)&&d("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_ID_FIELD_INVALID",`${i}/resourceIdField`);let m=w(a.operations,`${i}/operations`,20);(m.length===0||m.some(N=>N.length>64||!/^[A-Za-z0-9][A-Za-z0-9:._*-]{0,63}$/.test(N)))&&d("NATIVE_AUTHORIZATION_PROJECTION_OPERATIONS_INVALID",`${i}/operations`),hn(a,i,E)}}function Rn(e,t,o){let n=G(e,t),s=o.get(n);return s||d("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_MISSING",t),s}function Sn(e,t,o){let n=Pe(e,o);gt(n)||d("NATIVE_AUTHORIZATION_PROJECTION_USER_FIELD_INVALID",t)}function hn(e,t,o){if(e.failureMode!=="strict"&&d("NATIVE_AUTHORIZATION_PROJECTION_FAILURE_MODE_INVALID",`${t}/failureMode`),e.enabledField!==void 0){let n=B(e.enabledField,`${t}/enabledField`);o.get(n)?.type!=="boolean"&&d("NATIVE_AUTHORIZATION_PROJECTION_ENABLED_FIELD_INVALID",`${t}/enabledField`)}for(let n of["effectiveFromField","effectiveToField"]){if(e[n]===void 0)continue;let s=B(e[n],`${t}/${n}`);["date","datetime"].includes(String(o.get(s)?.type))||d("NATIVE_AUTHORIZATION_PROJECTION_EFFECTIVE_FIELD_INVALID",`${t}/${n}`)}}function si(e){let t=new Set,o=new Set;e.forEach((n,s)=>{let r=`/config/backend/secrets/${s}`,c=I(n,r);O(c,["name","env","description","required","exposure"],r,!0);let i=S(c.name,`${r}/name`,128),a=S(c.env,`${r}/env`,128);os.test(i)||d("NATIVE_SECRET_NAME_INVALID",`${r}/name`),(!ss.test(a)||a.startsWith("OPENXIANGDA_")||["NODE_ENV","PORT"].includes(a))&&d("NATIVE_SECRET_ENV_INVALID",`${r}/env`),t.has(i)&&d("NATIVE_SECRET_NAME_DUPLICATE",`${r}/name`),o.has(a)&&d("NATIVE_SECRET_ENV_DUPLICATE",`${r}/env`),t.add(i),o.add(a),v(c.exposure,"active_only",`${r}/exposure`),c.required!==void 0&&ye(c.required,`${r}/required`),c.description!==void 0&&Pt(c.description,`${r}/description`,2e3)})}function ii(e){let t=new Set,o=new Map,n=new Map(e.data.resources.map(f=>[String(f.code),f])),s=new Map(e.frontend.routes.map((f,p)=>{let _=I(f,`/config/frontend/routes/${p}`);return[F(_.code,`/config/frontend/routes/${p}/code`),_]}));for(let[f,p]of e.workflows.definitions.entries()){let _=`/config/workflows/definitions/${f}`,A=I(p,_);if(O(A,["version","definition","launch"],_,["detailRouteCode"]),Gn(A.launch,`${_}/launch`),A.detailRouteCode!==void 0){let b=zn(A.detailRouteCode,`${_}/detailRouteCode`);for(let[$,g,C]of[["desktop",b.desktop,["admin","user"]],["mobile",b.mobile,["user"]]]){let D=`${_}/detailRouteCode/${$}`,y=s.get(g);y||d("NATIVE_WORKFLOW_DETAIL_ROUTE_MISSING",D),C.some(Y=>Y===y.surface)||d("NATIVE_WORKFLOW_DETAIL_ROUTE_SURFACE_INVALID",D);let U=de(y.path,D),k=[...U.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(Y=>Y[1]);(U.includes("*")||k.length!==1||k[0]!=="instanceId")&&d("NATIVE_WORKFLOW_DETAIL_ROUTE_PATH_INVALID",D)}}let m=I(A.definition,`${_}/definition`),N=`${m.code}:${De(A.version,`${_}/version`)}`;t.has(N)&&d("NATIVE_WORKFLOW_DEFINITION_DUPLICATE",_),t.add(N),ai(m,`${_}/definition`),ri(m.subject,n,`${_}/definition/subject`);let T=fn(m,{appCode:e.appCode,capabilities:e.authz.capabilities.map(b=>b.code),fields:new Map((n.get(m.subject.resourceCode)?.schema.fields||[]).map(b=>[b.code,b]))});T.length&&d("NATIVE_WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID",`${_}/definition/instanceCommands`,{errors:T}),m.title===m.code&&d("NATIVE_WORKFLOW_USER_TITLE_REQUIRED",`${_}/definition/title`),o.set(N,m)}let r=new Set,c=new Map;for(let[f,p]of e.workflows.bindings.entries()){let _=I(p,`/config/workflows/bindings/${f}`),A=I(_.binding,`/config/workflows/bindings/${f}/binding`),m=`${A.workflowCode}:${De(_.version,`/config/workflows/bindings/${f}/version`)}`;r.has(m)&&d("NATIVE_WORKFLOW_BINDING_DUPLICATE",`/config/workflows/bindings/${f}`),r.add(m),ci(A,`/config/workflows/bindings/${f}/binding`),c.set(m,A)}let i=new Set,a=new Map;for(let[f,p]of e.workflows.activations.entries()){let _=`/config/workflows/activations/${f}`,A=I(p,_);O(A,["workflowCode","definitionVersion","bindingVersion","acceptedCommandDeactivationPolicy"],_,["environmentKey"]);let m=F(A.workflowCode,`${_}/workflowCode`);i.has(m)&&d("NATIVE_WORKFLOW_ACTIVATION_DUPLICATE",_),i.add(m);let N=`${m}:${De(A.definitionVersion,`${_}/definitionVersion`)}`,T=`${m}:${De(A.bindingVersion,`${_}/bindingVersion`)}`;t.has(N)||d("NATIVE_WORKFLOW_DEFINITION_REFERENCE_MISSING",`${_}/definitionVersion`),r.has(T)||d("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${_}/bindingVersion`);let b=o.get(N),$=c.get(T);(!["finish-pinned","cancel-on-deactivate"].includes(A.acceptedCommandDeactivationPolicy)||A.acceptedCommandDeactivationPolicy!==b.acceptedCommandDeactivationPolicy)&&d("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_MISMATCH",`${_}/acceptedCommandDeactivationPolicy`),di(b,$,`/config/workflows/activations/${f}`),a.set(m,$)}let u=new Set;e.workflows.providers.forEach((f,p)=>{let _=`/config/workflows/providers/${p}`,A=I(f,_);O(A,["code","endpointPath","timeoutMs"],_,!0);let m=F(A.code,`${_}/code`);u.has(m)&&d("NATIVE_WORKFLOW_PROVIDER_DUPLICATE",`${_}/code`),u.add(m),de(A.endpointPath,`${_}/endpointPath`),A.timeoutMs!==void 0&&Z(A.timeoutMs,`${_}/timeoutMs`,100,1e4)});for(let[f,p]of a.entries())for(let[_,A]of Object.entries(I(p.bindings,"/config/workflows/bindings/*/binding/bindings"))){let m=I(A,`/config/workflows/${f}/bindings/${_}`);m.provider==="application_provider"&&!u.has(m.providerCode)&&d("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`/config/workflows/${f}/bindings/${_}/providerCode`)}let E=new Set(e.authz.roles.map(f=>f.code)),l=new Set;e.workflows.editableParameters.forEach((f,p)=>{let _=`/config/workflows/editableParameters/${p}`,A=I(f,_);O(A,["code","workflowCode","bindingKey","label","valueType","required","allowedRoleCodes","allowedProviderCodes","maxItems"],_,!0);let m=F(A.code,`${_}/code`);l.has(m)&&d("NATIVE_WORKFLOW_EDITABLE_PARAMETER_DUPLICATE",`${_}/code`),l.add(m);let N=tt(A.workflowCode,`${_}/workflowCode`),T=Lt(A.bindingKey,`${_}/bindingKey`),b=a.get(N);(!b||!I(b.bindings,`${_}/bindingKey`)[T])&&d("NATIVE_WORKFLOW_EDITABLE_BINDING_MISSING",`${_}/bindingKey`),S(A.label,`${_}/label`,255),["role_code","user_ids","provider_code"].includes(A.valueType)||d("NATIVE_WORKFLOW_EDITABLE_VALUE_TYPE_INVALID",`${_}/valueType`);for(let $ of w(A.allowedRoleCodes||[],`${_}/allowedRoleCodes`,100))E.has($)||d("NATIVE_ROLE_REFERENCE_MISSING",`${_}/allowedRoleCodes`);for(let $ of w(A.allowedProviderCodes||[],`${_}/allowedProviderCodes`,100))u.has($)||d("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`${_}/allowedProviderCodes`);A.required!==void 0&&ye(A.required,`${_}/required`),A.maxItems!==void 0&&Z(A.maxItems,`${_}/maxItems`,1,200)})}function ri(e,t,o){let n=I(e,o);O(n,["resourceCode","factProjection"],o,["summaryFields"]);let s=G(n.resourceCode,`${o}/resourceCode`),r=t.get(s);r||d("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${o}/resourceCode`);let c=new Set(R(I(r.schema,`${o}/resourceCode`).fields,`${o}/resourceCode`,500).map((u,E)=>B(I(u,`${o}/resourceCode/${E}`).code,`${o}/resourceCode/${E}`))),i=I(n.factProjection,`${o}/factProjection`),a=Object.entries(i);(a.length<1||a.length>64)&&d("NATIVE_WORKFLOW_SUBJECT_FACT_PROJECTION_INVALID",`${o}/factProjection`);for(let[u,E]of a){as.test(u)||d("NATIVE_WORKFLOW_SUBJECT_FACT_KEY_INVALID",`${o}/factProjection/${u}`);let l=B(E,`${o}/factProjection/${u}`);c.has(l)||d("NATIVE_WORKFLOW_SUBJECT_FIELD_MISSING",`${o}/factProjection/${u}`)}if(n.summaryFields!==void 0){let u=w(n.summaryFields,`${o}/summaryFields`,cs).map((_,A)=>B(_,`${o}/summaryFields/${A}`)),E=t.get(s),l=E.surface&&typeof E.surface=="object"&&!Array.isArray(E.surface)?E.surface:{},f=l.fields&&typeof l.fields=="object"&&!Array.isArray(l.fields)?l.fields:{},p=new Map(R(I(E.schema,`${o}/resourceCode`).fields,`${o}/resourceCode`,500).map((_,A)=>{let m=I(_,`${o}/resourceCode/${A}`);return[String(m.code),m]}));for(let[_,A]of u.entries()){let m=p.get(A),N=f[A],T=String(m?.type||""),b=m?.maxLength;(!m||m.system===!0||N&&typeof N=="object"&&!Array.isArray(N)&&N.system===!0||["id","revision","created_by","updated_by","created_at","updated_at"].includes(A)||!ls.has(T)||T==="text.long"&&typeof b=="number"&&Number.isFinite(b)&&b>ds)&&d("NATIVE_WORKFLOW_SUBJECT_SUMMARY_FIELDS_INVALID",`${o}/summaryFields/${_}`)}}}function ai(e,t){O(e,["schemaVersion","code","title","subject","acceptedCommandDeactivationPolicy","startAt","inputSchema","nodes"],t,["organizationContext","instanceCommands"]),v(e.schemaVersion,"openxiangda.workflow-definition/v2",`${t}/schemaVersion`),tt(e.code,`${t}/code`),S(e.title,`${t}/title`,255),["finish-pinned","cancel-on-deactivate"].includes(e.acceptedCommandDeactivationPolicy)||d("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_REQUIRED",`${t}/acceptedCommandDeactivationPolicy`);let o=I(e.nodes,`${t}/nodes`),n=Object.keys(o);(n.length===0||n.length>200)&&d("NATIVE_WORKFLOW_NODE_COUNT_INVALID",`${t}/nodes`);let s=S(e.startAt,`${t}/startAt`,128);o[s]||d("NATIVE_WORKFLOW_START_NODE_MISSING",`${t}/startAt`);let r=new Map;for(let[u,E]of Object.entries(o)){let l=`${t}/nodes/${u}`,f=I(E,l);v(f.id,u,`${l}/id`),["approval","condition","end"].includes(f.kind)||d("NATIVE_WORKFLOW_NODE_KIND_INVALID",`${l}/kind`);let p=[];if(f.kind==="approval"){S(f.title,`${l}/title`,255),Lt(f.binding,`${l}/binding`),["single","any","all","sequence"].includes(f.mode)||d("NATIVE_WORKFLOW_APPROVAL_MODE_INVALID",`${l}/mode`),p.push(S(f.onApprove,`${l}/onApprove`,128),S(f.onReject,`${l}/onReject`,128));for(let _ of w(f.returnTargets||[],`${l}/returnTargets`,200))o[_]||d("NATIVE_WORKFLOW_TARGET_MISSING",`${l}/returnTargets`);for(let _ of w(f.allowedOperations||[],`${l}/allowedOperations`,20))fs.has(_)||d("NATIVE_WORKFLOW_OPERATION_INVALID",`${l}/allowedOperations`)}else if(f.kind==="condition"){let _=R(f.branches,`${l}/branches`,100);_.length===0&&d("NATIVE_WORKFLOW_BRANCH_REQUIRED",`${l}/branches`),_.forEach((A,m)=>{let N=I(A,`${l}/branches/${m}`);xe(N.when,`${l}/branches/${m}/when`,0),p.push(S(N.target,`${l}/branches/${m}/target`,128))}),p.push(S(f.otherwise,`${l}/otherwise`,128))}else S(f.title,`${l}/title`,255),S(f.outcome,`${l}/outcome`,128);for(let _ of p)o[_]||d("NATIVE_WORKFLOW_TARGET_MISSING",l);r.set(u,p)}let c=new Set,i=new Set,a=u=>{if(i.has(u)&&d("NATIVE_WORKFLOW_CYCLE_FORBIDDEN",`${t}/nodes/${u}`),!c.has(u)){c.add(u),i.add(u);for(let E of r.get(u)||[])a(E);i.delete(u)}};a(s),c.size!==n.length&&d("NATIVE_WORKFLOW_NODE_UNREACHABLE",`${t}/nodes`)}function xe(e,t,o){o>20&&d("NATIVE_WORKFLOW_EXPRESSION_DEPTH_EXCEEDED",t);let n=I(e,t),s=S(n.op,`${t}/op`,16);if(s!=="literal"){if(s==="path"){let r=S(n.path,`${t}/path`,255);/^[A-Za-z][A-Za-z0-9_.]{0,254}$/.test(r)||d("NATIVE_WORKFLOW_EXPRESSION_PATH_INVALID",`${t}/path`);return}if(["eq","neq","gt","gte","lt","lte","in","contains"].includes(s)){xe(n.left,`${t}/left`,o+1),xe(n.right,`${t}/right`,o+1);return}if(["and","or"].includes(s)){let r=R(n.values,`${t}/values`,100);r.length===0&&d("NATIVE_WORKFLOW_EXPRESSION_EMPTY",`${t}/values`),r.forEach((c,i)=>xe(c,`${t}/values/${i}`,o+1));return}if(["not","exists"].includes(s)){xe(n.value,`${t}/value`,o+1);return}d("NATIVE_WORKFLOW_EXPRESSION_OPERATOR_INVALID",`${t}/op`)}}function ci(e,t){v(e.schemaVersion,"openxiangda.workflow-binding/v2",`${t}/schemaVersion`),tt(e.workflowCode,`${t}/workflowCode`);let o=I(e.bindings,`${t}/bindings`);Object.keys(o).length>200&&d("NATIVE_WORKFLOW_BINDING_LIMIT_EXCEEDED",`${t}/bindings`);for(let[n,s]of Object.entries(o)){Lt(n,`${t}/bindings/${n}`);let r=I(s,`${t}/bindings/${n}`),c=S(r.provider,`${t}/bindings/${n}/provider`,64);["fixed_users","initiator","input_users","form_field_users","department_supervisor","app_role","app_role_in_scope","business_relation","previous_node_actor","initiator_select","application_provider"].includes(c)||d("NATIVE_WORKFLOW_BINDING_PROVIDER_INVALID",`${t}/bindings/${n}/provider`),c==="fixed_users"&&R(r.users,`${t}/bindings/${n}/users`,200).length===0&&d("NATIVE_WORKFLOW_BINDING_USERS_REQUIRED",`${t}/bindings/${n}/users`),["input_users","form_field_users"].includes(c)&&S(r.inputPath,`${t}/bindings/${n}/inputPath`,255),["app_role","app_role_in_scope","initiator_select"].includes(c)&&F(r.roleCode,`${t}/bindings/${n}/roleCode`),c==="department_supervisor"&&S(r.departmentIdFrom,`${t}/bindings/${n}/departmentIdFrom`,255),c==="application_provider"&&F(r.providerCode,`${t}/bindings/${n}/providerCode`)}}function di(e,t,o){v(t.workflowCode,e.code,`${o}/workflowCode`);let n=I(t.bindings,`${o}/bindings`);for(let[s,r]of Object.entries(I(e.nodes,`${o}/nodes`))){let c=I(r,`${o}/nodes/${s}`);c.kind==="approval"&&!n[c.binding]&&d("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${o}/nodes/${s}/binding`)}}function li(e,t,o){let n=I(t.routeManifest,"/contracts/routeManifest"),s=I(e.routeManifest,"/contracts/routeManifest"),r=new Map;for(let E of R(o.data?.resources,"/config/data/resources",100)){let l=I(E,"/config/data/resources");r.set(String(l.code||""),l)}let c=new Set(R(s.routes,"/contracts/routeManifest/routes",1e3).map(E=>String(I(E,"/contracts/routeManifest/routes").code||""))),i=[];for(let E of R(n.routes,"/contracts/routeManifest/routes",1e3)){let l=I(E,"/contracts/routeManifest/routes"),f=String(l.kind||"");if(f!=="resource-records"&&f!=="resource-submit")continue;let p=String(l.resourceCode||""),_=r.get(p);_||d("NATIVE_ROUTE_MANIFEST_RESOURCE_UNKNOWN","/contracts/routeManifest/routes");let m=`user.${p}.${f==="resource-records"?"records":"submit"}`;v(String(l.code||""),m,"/contracts/routeManifest/routes/code");let N=f==="resource-records"?"read":"create",T=String(I(_.capabilities,"/config/data/resources/capabilities")[N]||"");for(let b of["desktop","mobile"]){let $=I(l[b],`/contracts/routeManifest/routes/${b}`),g=b==="mobile"?"/m/my/":"/my/",C=f==="resource-records"?`${g}${p}`:`${g}${p}/submit`;v(String($.path||""),C,`/contracts/routeManifest/routes/${b}/path`),v(String($.capability||""),T,`/contracts/routeManifest/routes/${b}/capability`),v(String($.routeCode||""),`${m}.${b}`,`/contracts/routeManifest/routes/${b}/routeCode`)}(c.has(m)||i.some(b=>String(b.code)===m))&&d("NATIVE_ROUTE_MANIFEST_DUPLICATE","/contracts/routeManifest/routes/code"),i.push(l)}if(!i.length)return;s.routes=R([...s.routes,...i],"/contracts/routeManifest/routes",1e3).sort((E,l)=>re(String(I(E,"x").code||""),String(I(l,"x").code||"")));let a=String(I(n.rootEntry,"x").code||"");if(i.find(E=>String(E.code)===a&&E.kind==="resource-records")){let E=I(n.rootEntry,"x");s.rootEntry={code:a,desktop:String(E.desktop||""),mobile:String(E.mobile||"")}}s.digest=ee({schemaVersion:s.schemaVersion,appCode:s.appCode,devicePolicy:s.devicePolicy,rootEntry:s.rootEntry,authentication:s.authentication,routes:s.routes})}function be(e,t,o){let n=I(e,t);O(n,["schemaVersion","appCode","code","name","schema","surface","invariants","capabilities","dataPolicyCode","fieldPolicies"],t,!0),v(n.schemaVersion,"openxiangda.data-resource/v2",`${t}/schemaVersion`),v(n.appCode,o,`${t}/appCode`);let s=G(n.code,`${t}/code`),r=S(n.name,`${t}/name`,255),c=I(n.schema,`${t}/schema`);O(c,["fields"],`${t}/schema`);let i,a;try{i=ct(c.fields,`${t}/schema/fields`),a=Bt(n.invariants,i,`${t}/invariants`),It(n.surface,i,`${t}/surface`)}catch(f){throw f instanceof _e&&d(f.code,f.pointer),f}let u=new Set(i.map(f=>f.code)),E=I(n.capabilities,`${t}/capabilities`);O(E,["read","create","update","delete"],`${t}/capabilities`);let l=I(n.fieldPolicies,`${t}/fieldPolicies`);for(let[f,p]of Object.entries(l)){!u.has(f)&&!Ve(f)&&d("NATIVE_DATA_FIELD_POLICY_FIELD_MISSING",`${t}/fieldPolicies/${f}`);let _=`${t}/fieldPolicies/${f}`,A=I(p,_);Ve(f)&&(O(A,["read"],_,!0),(!Array.isArray(A.read)||A.read.length>20||A.read.some(m=>typeof m!="string"||!m.trim())||new Set(A.read).size!==A.read.length)&&d("NATIVE_DATA_AUDIT_READ_POLICY_INVALID",`${_}/read`)),O(A,["read","create","update","mask"],_,!0),A.mask!==void 0&&!["omit","null"].includes(A.mask)&&d("NATIVE_DATA_FIELD_POLICY_MASK_INVALID",`${_}/mask`)}return{...n,code:s,name:r,schema:{fields:i},...n.invariants===void 0?{}:{invariants:a},capabilities:E,fieldPolicies:l}}function Yn(e){return[{code:`app:${e}:directory:read`,kind:"platform",name:"\u8BFB\u53D6\u53D7\u9650\u7EC4\u7EC7\u76EE\u5F55",source:"platform"},...[["app:role:read","\u67E5\u770B\u89D2\u8272\u4E0E\u6388\u6743"],["app:role:define","\u5B9A\u4E49\u624B\u5DE5\u89D2\u8272"],["app:role:assign","\u5206\u914D\u89D2\u8272\u6210\u5458"],["app:role:grant-capability","\u6388\u4E88\u89D2\u8272\u80FD\u529B"],["app:scope-grant:manage","\u7BA1\u7406\u6570\u636E\u8303\u56F4"],["app:super-admin:manage","\u7BA1\u7406\u5E94\u7528\u6700\u9AD8\u7BA1\u7406\u5458"]].map(([t,o])=>({code:t,kind:"platform",name:o,source:"platform"}))]}function Dn(e,t,o,n){let s=e.toString("utf8"),r;try{r=JSON.parse(s)}catch{d(o,t)}let c=I(r,t);return Q(c)!==s&&d(n,t),c}function yn(e,t){let o=0,n=(s,r,c)=>{if(o+=1,o>As&&d("NATIVE_ARTIFACT_NODE_LIMIT_EXCEEDED",r),c>ps&&d("NATIVE_ARTIFACT_DEPTH_LIMIT_EXCEEDED",r),typeof s=="string"){Buffer.byteLength(s)>$t&&d("NATIVE_ARTIFACT_STRING_LIMIT_EXCEEDED",r);return}if(Array.isArray(s)){s.forEach((i,a)=>n(i,`${r}/${a}`,c+1));return}if(!(!s||typeof s!="object"))for(let[i,a]of Object.entries(s))["__proto__","prototype","constructor"].includes(i)&&d("NATIVE_ARTIFACT_DANGEROUS_KEY",`${r}/${i}`),ui(i)&&d("NATIVE_ARTIFACT_RUNTIME_FIELD_FORBIDDEN",`${r}/${i}`),n(a,`${r}/${i}`,c+1)};n(e,t,0)}function ui(e){return["environmentKey","environmentId","secretValue","ciphertext","oauthClient","oauthClientId","oauthClientSecret","signingSecret","kubernetesNamespace","nodePort","productionUrl"].includes(e)}function he(e){return{value:e,digest:ee(e)}}function Vn(e,t,o,n){typeof e!="string"&&!Buffer.isBuffer(e)&&!(e instanceof Uint8Array)&&d("NATIVE_ARTIFACT_BYTES_REQUIRED",o);let s=Buffer.isBuffer(e)?e:Buffer.from(e);return s.byteLength===0&&d("NATIVE_ARTIFACT_EMPTY",o),s.byteLength>t&&d(n,o),s}function Fn(e,t,o,n){let s=Qe.createHash("sha256").update(e).digest("hex");Qe.timingSafeEqual(Buffer.from(s),Buffer.from(t))||d(n,o)}function I(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&d("NATIVE_OBJECT_REQUIRED",t),e}function R(e,t,o){return Array.isArray(e)||d("NATIVE_ARRAY_REQUIRED",t),e.length>o&&d("NATIVE_ARRAY_LIMIT_EXCEEDED",t),e}function w(e,t,o){let n=R(e,t,o).map((s,r)=>S(s,`${t}/${r}`,255));return new Set(n).size!==n.length&&d("NATIVE_ARRAY_DUPLICATE",t),n}function S(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&d("NATIVE_STRING_INVALID",t),e}function Pt(e,t,o){return(typeof e!="string"||e.length>o)&&d("NATIVE_STRING_INVALID",t),e}function F(e,t){let o=S(e,t,128);return Zo.test(o)||d("NATIVE_CODE_INVALID",t),o}function G(e,t){let o=S(e,t,64);return ts.test(o)||d("NATIVE_RESOURCE_CODE_INVALID",t),o}function B(e,t){let o=S(e,t,63);return ns.test(o)||d("NATIVE_FIELD_CODE_INVALID",t),o}function tt(e,t){let o=S(e,t,128);return is.test(o)||d("NATIVE_WORKFLOW_CODE_INVALID",t),o}function Lt(e,t){let o=S(e,t,128);return rs.test(o)||d("NATIVE_WORKFLOW_BINDING_CODE_INVALID",t),o}function me(e,t,o){let n=S(e,t,255);return Qo.test(n)||d("NATIVE_CAPABILITY_CODE_INVALID",t),!n.startsWith(`app:${o}:`)&&!Yn(o).some(s=>s.code===n)&&d("NATIVE_CAPABILITY_APP_MISMATCH",t),n}function de(e,t){let o=S(e,t,2048);return(!o.startsWith("/")||o.startsWith("//")||o.includes("..")||o.includes("?")||o.includes("#"))&&d("NATIVE_ABSOLUTE_PATH_INVALID",t),o}function De(e,t){return(!Number.isInteger(e)||Number(e)<1)&&d("NATIVE_POSITIVE_INTEGER_REQUIRED",t),Number(e)}function Z(e,t,o,n){return(!Number.isInteger(e)||Number(e)<o||Number(e)>n)&&d("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function ye(e,t){return typeof e!="boolean"&&d("NATIVE_BOOLEAN_REQUIRED",t),e}function yt(e,t){let o=S(e,t,64).toLowerCase();return Ho.test(o)||d("NATIVE_DIGEST_INVALID",t),o}function v(e,t,o){e!==t&&d("NATIVE_VALUE_MISMATCH",o)}function O(e,t,o,n=!1){let s=new Set([...t,...Array.isArray(n)?n:[]]);for(let r of Object.keys(e))s.has(r)||d("NATIVE_PROPERTY_UNKNOWN",`${o}/${r}`);if(n!==!0)for(let r of t)Object.prototype.hasOwnProperty.call(e,r)||d("NATIVE_PROPERTY_REQUIRED",`${o}/${r}`)}function X(e,t){return[...e].sort((o,n)=>re(t(o),t(n)))}function j(e){return[...new Set(e)].sort(re)}function wn(e){return[...new Set(e)].sort((t,o)=>t-o)}function re(e,t){return e===t?0:e<t?-1:1}function qn(e){return!e||typeof e!="object"||Object.isFrozen(e)||(Object.freeze(e),Object.values(e).forEach(t=>qn(t))),e}function Vt(e,t,o){if(Ot(e,t))return o;if(Array.isArray(e)&&Array.isArray(t)){let n=Math.max(e.length,t.length);for(let s=0;s<n;s+=1)if(!Ot(e[s],t[s]))return Vt(e[s],t[s],`${o}/${s}`)}if(e&&t&&typeof e=="object"&&typeof t=="object"&&!Array.isArray(e)&&!Array.isArray(t)){let n=j([...Object.keys(e),...Object.keys(t)]);for(let s of n){let r=e[s],c=t[s];if(!Ot(r,c))return Vt(r,c,`${o}/${s}`)}}return o}function Ot(e,t){return e===void 0||t===void 0?e===t:Q(e)===Q(t)}function d(e,t,o={}){throw new ht(e,t,o)}var Or="a1dd6aa6a411fde591f1be893fd2f89a4870abe3f455063f6806191790c9d452";export{Jt as DATA_AUDIT_METADATA_FIELDS,Rt as DATA_EVENT_TYPES_V2,co as DATA_SYSTEM_SORT_FIELD_CODES,Or as NATIVE_CONFIGURATION_VALIDATOR_DIGEST,q as NATIVE_CONTRACT_CAPACITY_V2,rr as NATIVE_DATA_POLICY_EXPRESSION_MAX_CLAUSES,or as NATIVE_DATA_POLICY_EXPRESSION_MAX_DEPTH,sr as NATIVE_DATA_POLICY_EXPRESSION_MAX_GROUP_ITEMS,ir as NATIVE_DATA_POLICY_EXPRESSION_MAX_LEAVES,ar as NATIVE_DATA_POLICY_EXPRESSION_MAX_OCCURRENCES,lo as NATIVE_DATA_QUERY_OPERATORS_V2,ht as NativeConfigurationCompilerError,_e as NativeDataFieldContractV2Error,ke as NativeDataPolicyExpressionV2Error,Ct as NativeEventActionContractError,Tt as NativeScopeSourceFieldPathV2Error,Xn as OPENXIANGDA_NATIVE_DATA_FIELD_TYPES_V2,Ne as OPENXIANGDA_NATIVE_DATA_SURFACE_KEYS_V2,Et as OPENXIANGDA_NATIVE_DRAFT_STATE_KEYS_V2,at as OPENXIANGDA_NATIVE_SYSTEM_FIELDS_V2,Ei as OPENXIANGDA_NATIVE_SYSTEM_FIELD_MAP_V2,St as WORKFLOW_EVENT_TYPES_V2,Cr as compileNativeApplicationConfiguration,ln as compileNativeEventAction,Ts as compileNativeEventCapturePlansV2,Ns as compileRequiredPlatformCapabilitiesV3,Wt as hasDataAuditReadPolicy,Ve as isDataAuditMetadataField,Gt as isDataSystemSortField,mi as isNativeDataQueryOperatorV2,Je as isNativeMultiValueFieldV2,qi as materializeNativeDataQueryPathTypesV2,Ke as nativeDataPolicyExpressionLeavesV2,pn as nativeDataPolicyExpressionToCnfV2,Ki as nativeDataQueryPathPlanV2,Ti as nativeFieldAggregatePlanV2,ki as nativeFieldColumnDefinitionV2,xi as nativeFieldDefaultSqlV2,Ui as nativeFieldHasDefaultV2,Ji as nativeFieldIndexStatementsV2,We as nativeFieldRequiresCreateInputV2,Bi as nativeFieldSequenceGrantStatementsV2,ji as nativeFieldSequenceOwnershipStatementsV2,Mi as nativeFieldSequenceStatementsV2,Kt as nativeFieldSupportsFilterV2,Ni as nativeFieldSupportsOperatorV2,ft as nativeFieldSupportsSearchV2,we as nativeFieldSupportsSortV2,qt as nativeOperatorsForFieldV2,Fo as nativePhysicalFieldV2,vi as nativePhysicalFieldsV2,Te as nativePhysicalObjectNameV2,zi as nativeScopeSourceFieldValueV2,cn as nativeScopeSourceGrantPathSupportedV2,gt as nativeScopeSourceSubjectPathSupportedV2,Wi as nativeSubtableConstraintStatementsV2,ct as parseNativeDataFieldsV2,Bt as parseNativeDataResourceInvariantsV2,mt as projectNativeDataResourceViewV2,oe as quoteNativeIdentifierV2,Pe as resolveNativeScopeSourceFieldPathV2,Qt as validateNativeDataDraftStateV2,jt as validateNativeDataResourceReferencesV2,It as validateNativeDataResourceSurfaceV2,fn as validateWorkflowInstanceCommandPolicies,er as workflowInstanceCommandDeadlineError,Zi as workflowInstanceTerminateCapabilityAllowed,un as workflowPolicyTimestamp};