openxiangda-contracts 2.47.0 → 2.63.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (102) hide show
  1. package/dist/browser.d.ts +7 -0
  2. package/dist/browser.d.ts.map +1 -1
  3. package/dist/browser.js +7 -0
  4. package/dist/browser.js.map +1 -1
  5. package/dist/concurrency.d.ts +2 -2
  6. package/dist/concurrency.d.ts.map +1 -1
  7. package/dist/data-field-validation.d.ts.map +1 -1
  8. package/dist/data-field-validation.js +10 -0
  9. package/dist/data-field-validation.js.map +1 -1
  10. package/dist/index.d.ts +7 -0
  11. package/dist/index.d.ts.map +1 -1
  12. package/dist/index.js +7 -0
  13. package/dist/index.js.map +1 -1
  14. package/dist/native-compiler/compiler.d.ts +1 -1
  15. package/dist/native-compiler/compiler.d.ts.map +1 -1
  16. package/dist/native-compiler/compiler.js +243 -18
  17. package/dist/native-compiler/compiler.js.map +1 -1
  18. package/dist/native-compiler/data-business-command.d.ts +42 -0
  19. package/dist/native-compiler/data-business-command.d.ts.map +1 -0
  20. package/dist/native-compiler/data-business-command.js +88 -0
  21. package/dist/native-compiler/data-business-command.js.map +1 -0
  22. package/dist/native-compiler/data-field.d.ts +2 -0
  23. package/dist/native-compiler/data-field.d.ts.map +1 -1
  24. package/dist/native-compiler/data-field.js +4 -0
  25. package/dist/native-compiler/data-field.js.map +1 -1
  26. package/dist/native-compiler/data-surface.d.ts +1 -1
  27. package/dist/native-compiler/data-surface.d.ts.map +1 -1
  28. package/dist/native-compiler/data-surface.js +2 -0
  29. package/dist/native-compiler/data-surface.js.map +1 -1
  30. package/dist/native-compiler/index.cjs +3 -3
  31. package/dist/native-compiler/index.d.ts +9 -0
  32. package/dist/native-compiler/index.d.ts.map +1 -1
  33. package/dist/native-compiler/index.js +3 -3
  34. package/dist/native-compiler/managed-concurrency.js +2 -2
  35. package/dist/native-compiler/managed-concurrency.js.map +1 -1
  36. package/dist/native-compiler/resource-view.d.ts +4 -0
  37. package/dist/native-compiler/resource-view.d.ts.map +1 -0
  38. package/dist/native-compiler/resource-view.js +20 -0
  39. package/dist/native-compiler/resource-view.js.map +1 -0
  40. package/dist/native-compiler/unique-keys.d.ts +21 -0
  41. package/dist/native-compiler/unique-keys.d.ts.map +1 -1
  42. package/dist/native-compiler/unique-keys.js +17 -3
  43. package/dist/native-compiler/unique-keys.js.map +1 -1
  44. package/dist/native-compiler/user-candidates.d.ts +72 -0
  45. package/dist/native-compiler/user-candidates.d.ts.map +1 -0
  46. package/dist/native-compiler/user-candidates.js +184 -0
  47. package/dist/native-compiler/user-candidates.js.map +1 -0
  48. package/dist/native-compiler/workflow-approval-empty.d.ts +28 -0
  49. package/dist/native-compiler/workflow-approval-empty.d.ts.map +1 -0
  50. package/dist/native-compiler/workflow-approval-empty.js +34 -0
  51. package/dist/native-compiler/workflow-approval-empty.js.map +1 -0
  52. package/dist/native-compiler/workflow-business-command.d.ts +108 -0
  53. package/dist/native-compiler/workflow-business-command.d.ts.map +1 -0
  54. package/dist/native-compiler/workflow-business-command.js +58 -0
  55. package/dist/native-compiler/workflow-business-command.js.map +1 -0
  56. package/dist/native-compiler/workflow-graph.d.ts +8 -0
  57. package/dist/native-compiler/workflow-graph.d.ts.map +1 -1
  58. package/dist/native-compiler/workflow-graph.js +1 -0
  59. package/dist/native-compiler/workflow-graph.js.map +1 -1
  60. package/dist/native-compiler/workflow-initiator-approval.d.ts +28 -0
  61. package/dist/native-compiler/workflow-initiator-approval.d.ts.map +1 -0
  62. package/dist/native-compiler/workflow-initiator-approval.js +30 -0
  63. package/dist/native-compiler/workflow-initiator-approval.js.map +1 -0
  64. package/dist/native-compiler/workflow-instance-policy.d.ts +2 -0
  65. package/dist/native-compiler/workflow-instance-policy.d.ts.map +1 -1
  66. package/dist/native-compiler/workflow-instance-policy.js +9 -4
  67. package/dist/native-compiler/workflow-instance-policy.js.map +1 -1
  68. package/dist/native-compiler/workflow-launch-preflight.d.ts +22 -0
  69. package/dist/native-compiler/workflow-launch-preflight.d.ts.map +1 -0
  70. package/dist/native-compiler/workflow-launch-preflight.js +30 -0
  71. package/dist/native-compiler/workflow-launch-preflight.js.map +1 -0
  72. package/dist/native-compiler/workflow-node-administration.d.ts +6 -0
  73. package/dist/native-compiler/workflow-node-administration.d.ts.map +1 -1
  74. package/dist/native-compiler/workflow-node-administration.js +9 -2
  75. package/dist/native-compiler/workflow-node-administration.js.map +1 -1
  76. package/dist/native-compiler/workflow-rejection-notification.d.ts +31 -0
  77. package/dist/native-compiler/workflow-rejection-notification.d.ts.map +1 -0
  78. package/dist/native-compiler/workflow-rejection-notification.js +47 -0
  79. package/dist/native-compiler/workflow-rejection-notification.js.map +1 -0
  80. package/dist/native-version.d.ts +16 -1
  81. package/dist/native-version.d.ts.map +1 -1
  82. package/dist/native-version.js +16 -1
  83. package/dist/native-version.js.map +1 -1
  84. package/dist/native.d.ts +15 -2
  85. package/dist/native.d.ts.map +1 -1
  86. package/dist/native.js.map +1 -1
  87. package/dist/schemas.d.ts +3028 -194
  88. package/dist/schemas.d.ts.map +1 -1
  89. package/dist/schemas.js +244 -2
  90. package/dist/schemas.js.map +1 -1
  91. package/dist/surface.d.ts +3 -2
  92. package/dist/surface.d.ts.map +1 -1
  93. package/dist/surface.js +1 -19
  94. package/dist/surface.js.map +1 -1
  95. package/dist/types.d.ts +286 -8
  96. package/dist/types.d.ts.map +1 -1
  97. package/dist/types.js +4 -0
  98. package/dist/types.js.map +1 -1
  99. package/dist/validation.d.ts.map +1 -1
  100. package/dist/validation.js +35 -2
  101. package/dist/validation.js.map +1 -1
  102. package/package.json +1 -1
@@ -1,9 +1,9 @@
1
- "use strict";var ms=Object.create;var wt=Object.defineProperty;var gs=Object.getOwnPropertyDescriptor;var As=Object.getOwnPropertyNames;var Es=Object.getPrototypeOf,Is=Object.prototype.hasOwnProperty;var bs=(e,t)=>{for(var o in t)wt(e,o,{get:t[o],enumerable:!0})},So=(e,t,o,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of As(t))!Is.call(e,i)&&i!==o&&wt(e,i,{get:()=>t[i],enumerable:!(n=gs(t,i))||n.enumerable});return e};var ys=(e,t,o)=>(o=e!=null?ms(Es(e)):{},So(t||!e||!e.__esModule?wt(o,"default",{value:e,enumerable:!0}):o,e)),Ns=e=>So(wt({},"__esModule",{value:!0}),e);var Tc={};bs(Tc,{DATA_AUDIT_METADATA_FIELDS:()=>wn,DATA_EVENT_TYPES_V2:()=>dn,DATA_FORM_DRAFT_MAX_BYTES:()=>Sc,DATA_SUBTABLE_MAX_ROWS:()=>Dt,DATA_SUBTABLE_MAX_TOTAL_ROWS:()=>$t,DATA_SYSTEM_SORT_FIELD_CODES:()=>Po,DATA_TRANSACTION_MAX_BYTES:()=>Cc,DATA_TRANSACTION_MAX_OPERATIONS:()=>Rc,ManagedConcurrencyContractError:()=>Ye,NATIVE_CONFIGURATION_VALIDATOR_DIGEST:()=>Nc,NATIVE_CONTRACT_CAPACITY_V2:()=>Y,NATIVE_DATA_POLICY_EXPRESSION_MAX_CLAUSES:()=>Nd,NATIVE_DATA_POLICY_EXPRESSION_MAX_DEPTH:()=>Id,NATIVE_DATA_POLICY_EXPRESSION_MAX_GROUP_ITEMS:()=>bd,NATIVE_DATA_POLICY_EXPRESSION_MAX_LEAVES:()=>yd,NATIVE_DATA_POLICY_EXPRESSION_MAX_OCCURRENCES:()=>Td,NATIVE_DATA_QUERY_OPERATORS_V2:()=>jo,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_BYTES:()=>Hd,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_ITEMS:()=>Yd,NATIVE_UNIQUE_KEY_MAX_BYTES:()=>ed,NATIVE_UNIQUE_KEY_NORMALIZERS:()=>Hn,NativeConfigurationCompilerError:()=>un,NativeDataFieldContractV2Error:()=>_e,NativeDataPolicyExpressionV2Error:()=>nt,NativeDecimalLifecycleContractError:()=>Pe,NativeEventActionContractError:()=>Xt,NativeRoleMembershipBatchInputError:()=>In,NativeScopeSourceFieldPathV2Error:()=>Jt,NativeUniqueKeyContractError:()=>Xe,OPENXIANGDA_NATIVE_DATA_FIELD_TYPES_V2:()=>Fo,OPENXIANGDA_NATIVE_DATA_SURFACE_KEYS_V2:()=>he,OPENXIANGDA_NATIVE_DRAFT_STATE_KEYS_V2:()=>jt,OPENXIANGDA_NATIVE_SYSTEM_FIELDS_V2:()=>Ft,OPENXIANGDA_NATIVE_SYSTEM_FIELD_MAP_V2:()=>Rn,WORKFLOW_AUTOMATIC_CC_MAX_RECIPIENTS:()=>ld,WORKFLOW_AUTOMATIC_CC_PROVIDERS:()=>fi,WORKFLOW_BUSINESS_STEP_EVENT:()=>Qe,WORKFLOW_BUSINESS_STEP_EVENTS:()=>oo,WORKFLOW_BUSINESS_STEP_FACTS_KEY:()=>vr,WORKFLOW_BUSINESS_STEP_MAX_BYTES:()=>Qt,WORKFLOW_BUSINESS_STEP_MAX_RECEIPT_BYTES:()=>si,WORKFLOW_CONFIGURABLE_OPERATIONS:()=>nn,WORKFLOW_CONFIGURABLE_PROVIDERS:()=>on,WORKFLOW_EVENT_TYPES_V2:()=>ln,WORKFLOW_ROUTING_MAX_BYTES:()=>gd,WORKFLOW_ROUTING_MAX_MATCHED_RULES:()=>md,WORKFLOW_ROUTING_MAX_RULES:()=>_d,WORKFLOW_TASK_PAGE_DEFINITION_MAX_BYTES:()=>mi,WORKFLOW_TASK_PAGE_MAX_BYTES:()=>an,WORKFLOW_TASK_PAGE_MAX_FIELDS:()=>_i,WORKFLOW_TASK_SUBTABLE_MAX_ROWS:()=>uo,WORKFLOW_TASK_SUBTABLE_MAX_TOTAL_ROWS:()=>gi,WorkflowTaskPageError:()=>ge,applyWorkflowTaskPageValues:()=>Ii,applyWorkflowTaskSubtableRows:()=>Gr,assertNativeRoleMembershipBatchInput:()=>Ac,compileNativeApplicationConfiguration:()=>ha,compileNativeEventAction:()=>Qn,compileNativeEventCapturePlansV2:()=>zi,compileRequiredPlatformCapabilitiesV3:()=>Ji,compileWorkflowBusinessStepHandlers:()=>Zt,evaluateWorkflowTaskPageExpression:()=>Se,formatWorkflowExpression:()=>mt,hasDataAuditReadPolicy:()=>Dn,isDataAuditMetadataField:()=>Ge,isDataSystemSortField:()=>$n,isNativeDataQueryOperatorV2:()=>Ps,isNativeMultiValueFieldV2:()=>at,materializeNativeDataQueryPathTypesV2:()=>wr,nativeDataPolicyExpressionLeavesV2:()=>Ot,nativeDataPolicyExpressionToCnfV2:()=>go,nativeDataQueryPathPlanV2:()=>Dr,nativeFieldAggregatePlanV2:()=>Ks,nativeFieldColumnDefinitionV2:()=>sr,nativeFieldDefaultSqlV2:()=>rr,nativeFieldHasDefaultV2:()=>cr,nativeFieldIndexStatementsV2:()=>fr,nativeFieldRequiresCreateInputV2:()=>ct,nativeFieldSequenceGrantStatementsV2:()=>ur,nativeFieldSequenceOwnershipStatementsV2:()=>lr,nativeFieldSequenceStatementsV2:()=>dr,nativeFieldSupportsFilterV2:()=>Pn,nativeFieldSupportsOperatorV2:()=>Ms,nativeFieldSupportsSearchV2:()=>Lt,nativeFieldSupportsSortV2:()=>Je,nativeOperatorsForFieldV2:()=>vn,nativePhysicalFieldV2:()=>Yo,nativePhysicalFieldsV2:()=>ir,nativePhysicalObjectNameV2:()=>Ce,nativeScopeSourceFieldValueV2:()=>Ir,nativeScopeSourceGrantPathSupportedV2:()=>Jn,nativeScopeSourceSubjectPathSupportedV2:()=>zt,nativeSubtableConstraintStatementsV2:()=>pr,nativeUniqueKeysJsonSchema:()=>kr,parseDecimalReservationLifecycle:()=>Kt,parseNativeDataFieldsV2:()=>vt,parseNativeDataResourceInvariantsV2:()=>Sn,parseNativeUniqueKeys:()=>Xn,projectNativeDataResourceViewV2:()=>Mt,projectWorkflowGraph:()=>Wr,projectWorkflowNodePolicy:()=>Br,quoteNativeIdentifierV2:()=>oe,refreshWorkflowTaskPageFacts:()=>qr,resolveNativeScopeSourceFieldPathV2:()=>He,selectWorkflowAssignmentRoutingRules:()=>ea,serializedDataBytes:()=>Os,validateDecimalReservationLifecycles:()=>Gn,validateManagedConcurrency:()=>Mn,validateNativeDataDraftStateV2:()=>xn,validateNativeDataResourceReferencesV2:()=>Cn,validateNativeDataResourceSurfaceV2:()=>Wt,validateWorkflowAdministration:()=>sn,validateWorkflowAssignmentRoutingBindings:()=>_o,validateWorkflowAssignmentRoutingPolicy:()=>Nt,validateWorkflowAssignmentRoutingRules:()=>Qr,validateWorkflowAutomaticCc:()=>rn,validateWorkflowBusinessStepHandlerContract:()=>Lr,validateWorkflowBusinessStepRequest:()=>Pr,validateWorkflowBusinessStepResult:()=>ci,validateWorkflowBusinessStepSchema:()=>ft,validateWorkflowBusinessStepSubscriptions:()=>so,validateWorkflowBusinessSteps:()=>_t,validateWorkflowInstanceCommandPolicies:()=>eo,validateWorkflowNodeConfigurationPatch:()=>Ur,validateWorkflowReadability:()=>co,validateWorkflowTaskPages:()=>It,workflowAssignmentRoutingFacts:()=>Zr,workflowAssignmentRoutingPolicySchema:()=>Xr,workflowAssignmentRoutingSemantic:()=>Ti,workflowBusinessStepFactSchema:()=>pt,workflowBusinessStepHandlerDigest:()=>yc,workflowBusinessStepInput:()=>xr,workflowBusinessStepPath:()=>di,workflowBusinessStepReceiptSignatureSuffix:()=>bc,workflowBusinessStepValueMatches:()=>ut,workflowDelegationMutationRequestSchema:()=>_s,workflowExpressionPaths:()=>ao,workflowInstanceCommandDeadlineError:()=>Fr,workflowInstanceTerminateCapabilityAllowed:()=>Vr,workflowNodeAllowedOperations:()=>tt,workflowPolicyTimestamp:()=>Zn,workflowTaskPageFieldState:()=>fo,workflowTaskPageReplayCoversInvalidation:()=>Jr,workflowTaskSubtableRows:()=>Kr});module.exports=Ns(Tc);var wo=require("node:crypto");function Ts(e){if(!e||typeof e!="object")return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function Nn(e,t){if(e===null)return"null";if(typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`JSON number must be finite: ${t}`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map((n,i)=>Nn(n,`${t}[${i}]`)).join(",")}]`;if(Ts(e))return`{${Object.keys(e).filter(i=>e[i]!==void 0).sort((i,s)=>i===s?0:i<s?-1:1).map(i=>`${JSON.stringify(i)}:${Nn(e[i],`${t}.${i}`)}`).join(",")}}`;let o=e instanceof Date?"Date":e?.constructor?.name||typeof e;throw new TypeError(`Value is not JSON serializable: ${t} (${o})`)}function ee(e){return Nn(e,"$")}function X(e){return(0,wo.createHash)("sha256").update(ee(e)).digest("hex")}var Dt=100,$t=400,Rc=1e3,Cc=2097152,Sc=2097152;function Os(e){try{return new TextEncoder().encode(JSON.stringify(e)).byteLength}catch{return 1/0}}var Vo=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,hn=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,Fo=["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","date-range","datetime-range","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","image","signature","address","location","uuid","json","file","serial-number","subtable"],hs=new Set(Fo),vo=new Set(["option.multiple","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","subtable"]),Do=new Set(["option.single","option.multiple","cascade.single","cascade.multiple"]),$o=new Set(["resource-ref.single","resource-ref.multiple"]),Ft=[{code:"id",type:"uuid",nullable:!1},{code:"revision",type:"number.integer",nullable:!1},{code:"created_by",type:"text.short",nullable:!1},{code:"updated_by",type:"text.short",nullable:!1},{code:"created_at",type:"datetime",nullable:!1},{code:"updated_at",type:"datetime",nullable:!1}],Rn=new Map(Ft.map(e=>[e.code,e])),_e=class extends Error{constructor(o,n){super(o);this.code=o;this.pointer=n;this.name="NativeDataFieldContractV2Error"}code;pointer};function at(e){return vo.has(e)}function ct(e,t={}){return e.type!=="serial-number"&&t.system!==!0&&e.nullable===!1&&(!at(e.type)||t.requiredHint===!0)}function vt(e,t,o=500){Array.isArray(e)||D("NATIVE_ARRAY_REQUIRED",t),e.length===0&&D("NATIVE_DATA_FIELDS_REQUIRED",t),e.length>o&&D("NATIVE_ARRAY_LIMIT_EXCEEDED",t);let n=new Set;return e.map((i,s)=>{let a=`${t}/${s}`,r=le(i,a);pe(r,["code","type","nullable","indexed","options","source","maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","timePrecision","file","serial","subtable"],a);let c=me(r.code,`${a}/code`,63);Vo.test(c)||D("NATIVE_FIELD_CODE_INVALID",`${a}/code`),n.has(c)&&D("NATIVE_DATA_FIELD_DUPLICATE",`${a}/code`),n.add(c);let l=me(r.type,`${a}/type`,32);hs.has(l)||D("NATIVE_DATA_FIELD_TYPE_INVALID",`${a}/type`);let p=l,d=On(r.nullable,`${a}/nullable`),f=On(r.indexed,`${a}/indexed`);d===!0&&vo.has(p)&&D("NATIVE_DATA_MULTI_FIELD_NULLABLE_INVALID",`${a}/nullable`);let g=Ss(r.options,p,a),E=ws(r.source,p,a),A=$s(r,p,a),b=On(r.exactDecimal,`${a}/exactDecimal`);b!==void 0&&p!=="number.decimal"&&D("NATIVE_DATA_FIELD_EXACT_DECIMAL_TYPE_INVALID",`${a}/exactDecimal`);let I=Rs(r.rangeBoundary,p,a),_=ks(r.file,p,a),u=Vs(r.serial,p,a),N=Fs(r.subtable,p,a);return{code:c,type:p,...d===void 0?{}:{nullable:d},...f===void 0?{}:{indexed:f},...g?{options:g}:{},...E?{source:E}:{},...A,...b===void 0?{}:{exactDecimal:b},...I?{rangeBoundary:I}:{},..._?{file:_}:{},...u?{serial:u}:{},...N?{subtable:N}:{}}})}function Rs(e,t,o){let n=`${o}/rangeBoundary`;if(!(t==="date-range"||t==="datetime-range")){e!==void 0&&D("NATIVE_DATA_FIELD_RANGE_BOUNDARY_TYPE_INVALID",n);return}return e!=="closed"&&e!=="half-open"&&D("NATIVE_DATA_FIELD_RANGE_BOUNDARY_REQUIRED",n),e}function Cn(e,t){Array.isArray(e)||D("NATIVE_ARRAY_REQUIRED",t);let o=new Map;e.forEach((n,i)=>{let s=`${t}/${i}`,a=le(n,s),r=me(a.code,`${s}/code`,64);(!hn.test(r)||o.has(r))&&D("NATIVE_RESOURCE_CODE_INVALID",`${s}/code`);let c=le(a.schema,`${s}/schema`);o.set(r,{pointer:s,fields:vt(c.fields,`${s}/schema/fields`)})});for(let[n,i]of o){let s=new Map(i.fields.map(r=>[r.code,r]));i.fields.filter(r=>r.type==="subtable").reduce((r,c)=>r+(c.subtable?.maxRows??20),0)>400&&D("NATIVE_DATA_FIELD_SUBTABLE_AGGREGATE_MAX_ROWS_EXCEEDED",`${i.pointer}/schema/fields`),i.fields.forEach((r,c)=>{let l=`${i.pointer}/schema/fields/${c}`;if(r.source&&Cs(r.source,s,o,`${l}/source`),r.subtable){let p=o.get(r.subtable.resourceCode);(!p||r.subtable.resourceCode===n)&&D("NATIVE_DATA_FIELD_SUBTABLE_TARGET_MISSING",`${l}/subtable/resourceCode`);let d=p.fields.find(g=>g.code===r.subtable?.foreignKey);(!d||d.type!=="uuid"||d.nullable!==!1)&&D("NATIVE_DATA_FIELD_SUBTABLE_FOREIGN_KEY_INVALID",`${l}/subtable/foreignKey`);let f=p.fields.find(g=>g.code===r.subtable?.orderField);(!f||f.type!=="number.integer"||f.nullable!==!1)&&D("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${l}/subtable/orderField`)}})}}function Sn(e,t,o){if(e===void 0)return[];(!Array.isArray(e)||e.length>20)&&D("NATIVE_DATA_RESOURCE_INVARIANTS_INVALID",o);let n=new Map(t.map(s=>[s.code,s])),i=new Set;return e.map((s,a)=>{let r=`${o}/${a}`,c=le(s,r);pe(c,["code","message","expression"],r);let l=me(c.code,`${r}/code`,128);(!/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/.test(l)||i.has(l))&&D("NATIVE_DATA_RESOURCE_INVARIANT_CODE_INVALID",`${r}/code`),i.add(l);let p=Vt(c.message,`${r}/message`,500);p!==void 0&&p.length===0&&D("NATIVE_DATA_RESOURCE_INVARIANT_MESSAGE_INVALID",`${r}/message`);let d=le(c.expression,`${r}/expression`);if(d.kind==="nonBlankTextWhenOption"){pe(d,["kind","optionField","optionValue","textField"],`${r}/expression`);let _=Ie(d.optionField,`${r}/expression/optionField`),u=Ie(d.textField,`${r}/expression/textField`),N=me(d.optionValue,`${r}/expression/optionValue`,128),y=n.get(_),O=n.get(u);return(!y||!O)&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${r}/expression`),(y.type!=="option.single"||!["text.short","text.long"].includes(O.type)||!y.options?.some(h=>h.value===N))&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${r}/expression`),{code:l,...p===void 0?{}:{message:p},expression:{kind:"nonBlankTextWhenOption",optionField:_,optionValue:N,textField:u}}}pe(d,["leftField","operator","rightField"],`${r}/expression`);let f=Ie(d.leftField,`${r}/expression/leftField`),g=Ie(d.rightField,`${r}/expression/rightField`),E=n.get(f),A=n.get(g);(!E||!A)&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${r}/expression`),E.type===A.type||["number.integer","number.decimal"].includes(E.type)&&["number.integer","number.decimal"].includes(A.type)||D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${r}/expression`);let I=String(d.operator);return["eq","neq","gt","gte","lt","lte"].includes(I)||D("NATIVE_DATA_RESOURCE_INVARIANT_OPERATOR_INVALID",`${r}/expression/operator`),!["eq","neq"].includes(I)&&!["number.integer","number.decimal","date","time","datetime","text.short","text.long","text.rich","serial-number","uuid"].includes(E.type)&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${r}/expression`),{code:l,...p===void 0?{}:{message:p},expression:{leftField:f,operator:I,rightField:g}}})}function Cs(e,t,o,n){let i=o.get(e.resourceCode);i||D("NATIVE_DATA_FIELD_SOURCE_TARGET_MISSING",`${n}/resourceCode`);let s=new Map(i.fields.map(r=>[r.code,r])),a=s.get(e.labelField);(!a||!["text.short","text.long"].includes(a.type))&&D("NATIVE_DATA_FIELD_SOURCE_LABEL_INVALID",`${n}/labelField`);for(let r of["searchFields","descriptionFields","snapshotFields"])for(let c of e[r]||[])s.has(c)||D("NATIVE_DATA_FIELD_SOURCE_FIELD_MISSING",`${n}/${r}`);for(let[r,c]of(e.filters||[]).entries())s.has(c.field)||D("NATIVE_DATA_FIELD_SOURCE_FILTER_FIELD_MISSING",`${n}/filters/${r}/field`),"binding"in c&&!t.has(c.binding.field)&&D("NATIVE_DATA_FIELD_SOURCE_BINDING_FIELD_MISSING",`${n}/filters/${r}/binding/field`)}function Ss(e,t,o){let n=`${o}/options`;if(e===void 0){Do.has(t)&&D("NATIVE_DATA_FIELD_OPTIONS_REQUIRED",n);return}(!Do.has(t)||!Array.isArray(e))&&D("NATIVE_DATA_FIELD_OPTIONS_TYPE_INVALID",n),(e.length<1||e.length>100)&&D("NATIVE_DATA_FIELD_OPTIONS_INVALID",n);let i=0,s=(a,r,c)=>{c>5&&D("NATIVE_DATA_FIELD_OPTIONS_DEPTH_EXCEEDED",r);let l=new Set;return a.map((p,d)=>{i+=1,i>1e3&&D("NATIVE_DATA_FIELD_OPTIONS_COUNT_EXCEEDED",n);let f=`${r}/${d}`,g=le(p,f);pe(g,["label","value","description","color","children"],f);let E=me(g.label,`${f}/label`,500),A=me(g.value,`${f}/value`,500);l.has(A)&&D("NATIVE_DATA_FIELD_OPTION_VALUE_DUPLICATE",`${f}/value`),l.add(A);let b=Vt(g.description,`${f}/description`,2e3),I=Vt(g.color,`${f}/color`,64),_;return g.children!==void 0&&((!t.startsWith("cascade.")||!Array.isArray(g.children))&&D("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${f}/children`),(g.children.length<1||g.children.length>100)&&D("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${f}/children`),_=s(g.children,`${f}/children`,c+1)),{label:E,value:A,...b===void 0?{}:{description:b},...I===void 0?{}:{color:I},..._?{children:_}:{}}})};return s(e,n,1)}function ws(e,t,o){let n=`${o}/source`;if(e===void 0){$o.has(t)&&D("NATIVE_DATA_FIELD_SOURCE_REQUIRED",n);return}$o.has(t)||D("NATIVE_DATA_FIELD_SOURCE_TYPE_INVALID",n);let i=le(e,n);pe(i,["kind","resourceCode","labelField","searchFields","descriptionFields","snapshotFields","filters","pageSize","loadMode"],n),i.kind!=="resource"&&D("NATIVE_DATA_FIELD_SOURCE_KIND_INVALID",`${n}/kind`);let s=me(i.resourceCode,`${n}/resourceCode`,64);hn.test(s)||D("NATIVE_RESOURCE_CODE_INVALID",`${n}/resourceCode`);let a=Ie(i.labelField,`${n}/labelField`),r=Tn(i.searchFields,`${n}/searchFields`,10),c=Tn(i.descriptionFields,`${n}/descriptionFields`,10),l=Tn(i.snapshotFields,`${n}/snapshotFields`,50),p=Ke(i.pageSize,`${n}/pageSize`,1,100),d;i.loadMode!==void 0&&(["search","all"].includes(String(i.loadMode))||D("NATIVE_DATA_FIELD_SOURCE_LOAD_MODE_INVALID",`${n}/loadMode`),d=i.loadMode);let f=Ds(i.filters,`${n}/filters`);return{kind:"resource",resourceCode:s,labelField:a,...r?{searchFields:r}:{},...c?{descriptionFields:c}:{},...l?{snapshotFields:l}:{},...f?{filters:f}:{},...p===void 0?{}:{pageSize:p},...d?{loadMode:d}:{}}}function Ds(e,t){if(e!==void 0)return(!Array.isArray(e)||e.length>20)&&D("NATIVE_DATA_FIELD_SOURCE_FILTERS_INVALID",t),e.map((o,n)=>{let i=`${t}/${n}`,s=le(o,i),a=Object.prototype.hasOwnProperty.call(s,"value"),r=Object.prototype.hasOwnProperty.call(s,"binding");pe(s,a?["field","operator","value"]:["field","operator","binding"],i),a===r&&D("NATIVE_DATA_FIELD_SOURCE_FILTER_VALUE_INVALID",i);let c=Ie(s.field,`${i}/field`);["eq","in"].includes(String(s.operator))||D("NATIVE_DATA_FIELD_SOURCE_FILTER_OPERATOR_INVALID",`${i}/operator`);let l=s.operator;if(a)return{field:c,operator:l,value:s.value};let p=le(s.binding,`${i}/binding`);return pe(p,["kind","field"],`${i}/binding`),p.kind!=="field"&&D("NATIVE_DATA_FIELD_SOURCE_BINDING_KIND_INVALID",`${i}/binding/kind`),{field:c,operator:l,binding:{kind:"field",field:Ie(p.field,`${i}/binding/field`)}}})}function $s(e,t,o){let n={};if(e.maxLength!==void 0&&(["text.short","text.long","text.rich"].includes(t)||D("NATIVE_DATA_FIELD_MAX_LENGTH_TYPE_INVALID",`${o}/maxLength`),n.maxLength=kt(e.maxLength,`${o}/maxLength`,1,1e6)),(e.precision!==void 0||e.scale!==void 0)&&((t!=="number.decimal"||e.precision===void 0)&&D("NATIVE_DATA_FIELD_DECIMAL_CONFIG_INVALID",o),n.precision=kt(e.precision,`${o}/precision`,1,1e3),n.scale=e.scale===void 0?0:kt(e.scale,`${o}/scale`,0,n.precision)),e.min!==void 0||e.max!==void 0){["number.integer","number.decimal"].includes(t)||D("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_TYPE_INVALID",o);let i=ko(e.min,`${o}/min`),s=ko(e.max,`${o}/max`);t==="number.integer"&&[i,s].some(a=>a!==void 0&&!Number.isSafeInteger(a))&&D("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",o),i!==void 0&&s!==void 0&&i>s&&D("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",o),i!==void 0&&(n.min=i),s!==void 0&&(n.max=s)}return e.timePrecision!==void 0&&((t!=="time"||!["minute","second"].includes(e.timePrecision))&&D("NATIVE_DATA_FIELD_TIME_PRECISION_INVALID",`${o}/timePrecision`),n.timePrecision=e.timePrecision),n}function ks(e,t,o){if(e===void 0)return;let n=`${o}/file`;["file","image","signature"].includes(t)||D("NATIVE_DATA_FIELD_FILE_TYPE_INVALID",n);let i=le(e,n);pe(i,["maxCount","maxSizeMb","accept"],n);let s=Ke(i.maxCount,`${n}/maxCount`,1,100);t==="signature"&&s!==void 0&&s!==1&&D("NATIVE_DATA_FIELD_SIGNATURE_COUNT_INVALID",`${n}/maxCount`);let a=Ke(i.maxSizeMb,`${n}/maxSizeMb`,1,1024),r;return i.accept!==void 0&&((!Array.isArray(i.accept)||i.accept.length>50)&&D("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${n}/accept`),r=i.accept.map((c,l)=>me(c,`${n}/accept/${l}`,255)),new Set(r).size!==r.length&&D("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${n}/accept`)),{...s===void 0?{}:{maxCount:s},...a===void 0?{}:{maxSizeMb:a},...r===void 0?{}:{accept:r}}}function Vs(e,t,o){let n=`${o}/serial`;if(e===void 0){t==="serial-number"&&D("NATIVE_DATA_FIELD_SERIAL_REQUIRED",n);return}t!=="serial-number"&&D("NATIVE_DATA_FIELD_SERIAL_TYPE_INVALID",n);let i=le(e,n);pe(i,["prefix","digits","start"],n);let s=Vt(i.prefix,`${n}/prefix`,64),a=Ke(i.digits,`${n}/digits`,1,32),r=Ke(i.start,`${n}/start`,0,Number.MAX_SAFE_INTEGER);return{...s===void 0?{}:{prefix:s},...a===void 0?{}:{digits:a},...r===void 0?{}:{start:r}}}function Fs(e,t,o){let n=`${o}/subtable`;if(e===void 0){t==="subtable"&&D("NATIVE_DATA_FIELD_SUBTABLE_REQUIRED",n);return}t!=="subtable"&&D("NATIVE_DATA_FIELD_SUBTABLE_TYPE_INVALID",n);let i=le(e,n);pe(i,["resourceCode","foreignKey","orderField","maxRows"],n);let s=me(i.resourceCode,`${n}/resourceCode`,64);hn.test(s)||D("NATIVE_RESOURCE_CODE_INVALID",`${n}/resourceCode`);let a=Ie(i.foreignKey,`${n}/foreignKey`),r=Ie(i.orderField,`${n}/orderField`);r===a&&D("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${n}/orderField`);let c=Ke(i.maxRows,`${n}/maxRows`,1,100);return{resourceCode:s,foreignKey:a,orderField:r,...c===void 0?{}:{maxRows:c}}}function Tn(e,t,o){if(e===void 0)return;(!Array.isArray(e)||e.length>o)&&D("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t);let n=e.map((i,s)=>Ie(i,`${t}/${s}`));return new Set(n).size!==n.length&&D("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t),n}function Ie(e,t){let o=me(e,t,63);return Vo.test(o)||D("NATIVE_FIELD_CODE_INVALID",t),o}function le(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&D("NATIVE_OBJECT_REQUIRED",t),e}function pe(e,t,o){let n=new Set(t);for(let i of Object.keys(e))n.has(i)||D("NATIVE_PROPERTY_UNKNOWN",`${o}/${i}`)}function me(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&D("NATIVE_STRING_INVALID",t),e}function Vt(e,t,o){if(e!==void 0)return(typeof e!="string"||e.length>o)&&D("NATIVE_STRING_INVALID",t),e}function On(e,t){if(e!==void 0)return typeof e!="boolean"&&D("NATIVE_BOOLEAN_REQUIRED",t),e}function Ke(e,t,o,n){if(e!==void 0)return kt(e,t,o,n)}function ko(e,t){if(e!==void 0)return(typeof e!="number"||!Number.isFinite(e))&&D("NATIVE_NUMBER_REQUIRED",t),e}function kt(e,t,o,n){return(!Number.isSafeInteger(e)||Number(e)<o||Number(e)>n)&&D("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function D(e,t){throw new _e(e,t)}var wn=["created_by","updated_by","created_at","updated_at"];function Ge(e){return wn.includes(e)}function Dn(e){return wn.some(t=>Object.prototype.hasOwnProperty.call(e.fieldPolicies||{},t))}var Po=Ft.map(e=>e.code);function $n(e){return Po.includes(e)}var jo=["eq","neq","gt","gte","lt","lte","contains","startsWith","endsWith","in","between","has","hasAny","hasAll","overlaps","containedBy","jsonContains","isEmpty","isNotEmpty"],vs=new Set(jo);function Ps(e){return vs.has(String(e))}var kn=["eq","neq","contains","startsWith","endsWith","in","isEmpty","isNotEmpty"],dt=["eq","neq","gt","gte","lt","lte","between","in","isEmpty"],Ls=["eq","neq","in","isEmpty"],Pt=["eq","neq","in","isEmpty","isNotEmpty"],qe=["has","hasAny","hasAll","isEmpty","isNotEmpty"],Lo=["overlaps","contains","containedBy","isEmpty"],Vn=["jsonContains","isEmpty","isNotEmpty"],Fn=["isEmpty","isNotEmpty"],xs={"text.short":kn,"text.long":kn,"text.rich":kn,"number.integer":dt,"number.decimal":dt,boolean:Ls,date:dt,time:dt,datetime:dt,"date-range":Lo,"datetime-range":Lo,"option.single":Pt,"option.multiple":qe,"cascade.single":qe,"cascade.multiple":qe,"user.single":Pt,"user.multiple":qe,"department.single":Pt,"department.multiple":qe,"resource-ref.single":Pt,"resource-ref.multiple":qe,file:Fn,image:Fn,signature:Fn,address:Vn,location:Vn,uuid:["eq","neq","in","isEmpty"],json:Vn,"serial-number":["eq","neq","in","contains","startsWith"],subtable:[]},js=new Set(["text.short","text.long","text.rich","option.single","user.single","department.single","resource-ref.single","serial-number"]),Ws=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","signature","address","location","json","subtable"]);function vn(e){return xs[e]}function Ms(e,t){return vn(e).includes(t)}function Lt(e){return js.has(e)}function Je(e){return!Ws.has(e)}function Pn(e){return vn(e).length>0}var xo=new Set(["number.integer","number.decimal"]),Wo=new Set(["text.short","text.long","number.integer","number.decimal","date","time","datetime","serial-number"]),Us=new Set([...Wo,"boolean","uuid"]),Bs=new Set(["option.single","user.single","department.single","resource-ref.single"]);function Ks(e,t){return t==="sum"||t==="avg"?xo.has(e)?{valueExpression:"column",numericResult:!0}:null:t==="min"||t==="max"?Wo.has(e)?{valueExpression:"column",numericResult:xo.has(e)}:null:Bs.has(e)?{valueExpression:"snapshot-value",numericResult:!0}:Us.has(e)?{valueExpression:"column",numericResult:!0}:null}var jt=["version","maxBytes","fields"];function xn(e,t){if(e===void 0)return;let o=Ln(e,t);Mo(o,jt,t);let n=xt(o.version,`${t}/version`,1,1e6),i=xt(o.maxBytes,`${t}/maxBytes`,2,196608);(!n||!i)&&ae("NATIVE_DATA_DRAFT_STATE_SCHEMA_INVALID",t);let s=Ln(o.fields,`${t}/fields`),a=Object.entries(s);(!a.length||a.length>50)&&ae("NATIVE_DATA_DRAFT_STATE_FIELDS_INVALID",`${t}/fields`);for(let[r,c]of a){let l=`${t}/fields/${r}`;/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(r)||ae("NATIVE_DATA_DRAFT_STATE_FIELD_CODE_INVALID",l);let p=Ln(c,l),d=Uo(p.type,`${l}/type`,32),f=d==="string"?["type","required","maxLength","enum"]:d==="json.object"?["type","required","maxBytes"]:["type","required"];if(["string","number","integer","boolean","json.object"].includes(d)||ae("NATIVE_DATA_DRAFT_STATE_FIELD_TYPE_INVALID",`${l}/type`),Mo(p,f,l),qs(p.required,`${l}/required`),d==="string"){let g=xt(p.maxLength,`${l}/maxLength`,1,196608);g||ae("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",l),p.enum!==void 0&&Gs(p.enum,`${l}/enum`,100,!1).some(A=>A.length>g)&&ae("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",`${l}/enum`)}else if(d==="json.object"){let g=xt(p.maxBytes,`${l}/maxBytes`,2,65536);(!g||g>i)&&ae("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",l)}}}function Gs(e,t,o,n){(!Array.isArray(e)||!n&&e.length===0||e.length>o)&&ae("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let i=e.map((s,a)=>Uo(s,`${t}/${a}`,255));return new Set(i).size!==i.length&&ae("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),i}function Ln(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&ae("NATIVE_OBJECT_REQUIRED",t),e}function Mo(e,t,o){let n=new Set(t);for(let i of Object.keys(e))n.has(i)||ae("NATIVE_PROPERTY_UNKNOWN",`${o}/${i}`)}function Uo(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&ae("NATIVE_STRING_INVALID",t),e}function qs(e,t){e!==void 0&&typeof e!="boolean"&&ae("NATIVE_BOOLEAN_REQUIRED",t)}function xt(e,t,o,n){return(!Number.isSafeInteger(e)||Number(e)<o||Number(e)>n)&&ae("NATIVE_INTEGER_INVALID",t),Number(e)}function ae(e,t){throw new _e(e,t)}var Js=500,he={surface:["mutationOwner","generated","fields","list","form","detail","mobile","views"],generated:["list","detail","create","update","delete"],field:["label","type","widget","section","requiredHint","system","hidden","readCapabilities","createCapabilities","updateCapabilities","maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","maxCount","maxSizeMb","accept","options","list","searchable","sortable","source","timePrecision","serial","subtable"],list:["actions","fieldOrder","defaultPageSize","searchableFields","filterFields","defaultSort"],defaultSort:["field","order"],form:["layout","fieldOrder","draftState"],detail:["layout","fieldOrder"],layout:["layout","fieldOrder","draftState"],draftState:jt,mobile:["enabled"]},zs={"text.short":["text","email","phone"],"text.long":["textarea"],"text.rich":["rich-text"],"number.integer":["number","rating"],"number.decimal":["number","money","percent"],boolean:["switch"],date:["date"],time:["time"],datetime:["datetime"],"date-range":["date-range"],"datetime-range":["datetime-range"],"option.single":["select","radio"],"option.multiple":["multi-select","checkbox"],"cascade.single":["cascade"],"cascade.multiple":["cascade"],"user.single":["directory-user"],"user.multiple":["directory-user"],"department.single":["directory-department","scope"],"department.multiple":["directory-department","scope"],"resource-ref.single":["select","radio","resource"],"resource-ref.multiple":["multi-select","checkbox","resource"],file:["attachment"],image:["image"],signature:["signature"],address:["address"],location:["location"],uuid:["readonly"],json:["json"],"serial-number":["readonly"],subtable:["subtable"]};function Wt(e,t,o){if(e===void 0)return;let n=ne(e,o);be(n,he.surface,o);let i=n.mutationOwner===void 0?"native":Re(n.mutationOwner,`${o}/mutationOwner`,16);["native","action","readonly","workflow","queued-command"].includes(i)||x("NATIVE_DATA_SURFACE_MUTATION_OWNER_INVALID",`${o}/mutationOwner`);let s=n.generated===void 0?{}:ne(n.generated,`${o}/generated`);be(s,he.generated,`${o}/generated`);for(let c of he.generated)Wn(s[c],`${o}/generated/${c}`);if(i!=="native")for(let c of["create","update","delete"])s[c]===!0&&x("NATIVE_DATA_SURFACE_MUTATION_OWNER_CONFLICT",`${o}/generated/${c}`);let a=new Map(t.map(c=>[c.code,c])),r=ne(n.fields,`${o}/fields`);for(let c of Object.keys(r))a.has(c)||x("NATIVE_DATA_SURFACE_FIELD_MISSING",`${o}/fields/${c}`);for(let c of t)Object.prototype.hasOwnProperty.call(r,c.code)||x("NATIVE_DATA_SURFACE_FIELD_REQUIRED",`${o}/fields/${c.code}`),Hs(r[c.code],c,`${o}/fields/${c.code}`);for(let c of["create","update"]){let l=s[c]??i==="native",p=t.some(d=>{let f=ne(r[d.code],`${o}/fields/${d.code}`);return Ko(d,f,c)});l&&!p&&x("NATIVE_DATA_SURFACE_WRITABLE_FIELDS_REQUIRED",`${o}/generated/${c}`)}if(Xs(n.list,a,`${o}/list`),Bo(n.form,a,`${o}/form`,"form"),Bo(n.detail,a,`${o}/detail`,"detail"),n.mobile!==void 0){let c=ne(n.mobile,`${o}/mobile`);be(c,he.mobile,`${o}/mobile`),Wn(c.enabled,`${o}/mobile/enabled`)}Ys(n,t,o)}function Mt(e,t){let o=e.views?.find(i=>i.code===t);o||x("NATIVE_DATA_VIEW_NOT_FOUND",`/surface/views/${t}`);let n=new Map((o.sections||[]).flatMap(i=>i.fields.map(s=>[s,i.title])));return{mutationOwner:e.mutationOwner||"native",generated:o.generated,list:o.list,form:o.form,detail:o.detail,mobile:o.mobile,fields:Object.fromEntries(Object.entries(e.fields).map(([i,s])=>{let a={...s};delete a.section;let r=n.get(i);return[i,{...a,...r?{section:r}:{},list:o.list.fieldOrder.includes(i)}]}))}}function Ys(e,t,o){if(e.views===void 0)return;(!Array.isArray(e.views)||e.views.length>20)&&x("NATIVE_DATA_VIEWS_LIMIT_INVALID",`${o}/views`);let n=new Set;e.views.forEach((i,s)=>{let a=`${o}/views/${s}`,r=ne(i,a);be(r,["code","name","generated","list","form","detail","mobile","sections"],a);let c=Re(r.code,`${a}/code`,64);(!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(c)||n.has(c))&&x("NATIVE_DATA_VIEW_CODE_INVALID",`${a}/code`),n.add(c),Re(r.name,`${a}/name`,255),ne(r.generated,`${a}/generated`),ne(r.mobile,`${a}/mobile`);for(let p of["list","detail","create","update","delete"])typeof r.generated[p]!="boolean"&&x("NATIVE_DATA_VIEW_OPERATION_INVALID",`${a}/generated/${p}`);typeof r.mobile.enabled!="boolean"&&x("NATIVE_DATA_VIEW_MOBILE_INVALID",`${a}/mobile/enabled`);for(let p of["list","form","detail"]){let d=ne(r[p],`${a}/${p}`),f=ze(d.fieldOrder,`${a}/${p}/fieldOrder`,500,!0);for(let g of f){let E=e.fields[g];(!E||(E.hidden??E.system)===!0)&&x("NATIVE_DATA_VIEW_FIELD_INVALID",`${a}/${p}/fieldOrder`)}}if(r.sections!==void 0){(!Array.isArray(r.sections)||r.sections.length>100)&&x("NATIVE_DATA_VIEW_SECTIONS_INVALID",`${a}/sections`);let p=new Set;r.sections.forEach((d,f)=>{let g=`${a}/sections/${f}`,E=ne(d,g);be(E,["title","fields"],g),Re(E.title,`${g}/title`,255);for(let A of ze(E.fields,`${g}/fields`,100,!0)){let b=e.fields[A];(!b||(b.hidden??b.system)===!0||p.has(A))&&x("NATIVE_DATA_VIEW_FIELD_INVALID",`${g}/fields`),p.add(A)}})}let l=Mt(e,c);if(Wt(l,t,a),r.generated.create!==!1&&(e.mutationOwner||"native")==="native")for(let p of t)ct(p,e.fields[p.code])&&Ko(p,e.fields[p.code],"create")&&!r.form.fieldOrder.includes(p.code)&&x("NATIVE_DATA_VIEW_CREATE_REQUIRED_FIELD_MISSING",`${a}/form/fieldOrder`)})}function Ko(e,t,o){if(e.type==="serial-number"||t.system===!0)return!1;let n=t[`${o}Capabilities`];return Array.isArray(n)&&n.length>0}function Hs(e,t,o){let n=ne(e,o);be(n,he.field,o),Re(n.label,`${o}/label`,500),n.type!==t.type&&x("NATIVE_DATA_SURFACE_FIELD_TYPE_MISMATCH",`${o}/type`);let i=Re(n.widget,`${o}/widget`,64);zs[t.type].includes(i)||x("NATIVE_DATA_SURFACE_WIDGET_INCOMPATIBLE",`${o}/widget`),er(n.section,`${o}/section`,255);for(let s of["requiredHint","system","hidden","list","searchable","sortable"])Wn(n[s],`${o}/${s}`);n.searchable===!0&&!Lt(t.type)&&x("NATIVE_DATA_SURFACE_SEARCH_UNSUPPORTED",`${o}/searchable`),n.sortable===!0&&!Je(t.type)&&x("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${o}/sortable`);for(let s of["readCapabilities","createCapabilities","updateCapabilities"])ze(n[s],`${o}/${s}`,100,!0);if(n.maxCount!==void 0&&(!Number.isSafeInteger(n.maxCount)||Number(n.maxCount)<1||Number(n.maxCount)>100)&&x("NATIVE_DATA_SURFACE_MAX_COUNT_INVALID",`${o}/maxCount`),n.maxSizeMb!==void 0&&(!Number.isSafeInteger(n.maxSizeMb)||Number(n.maxSizeMb)<1||Number(n.maxSizeMb)>1024)&&x("NATIVE_DATA_SURFACE_MAX_SIZE_INVALID",`${o}/maxSizeMb`),n.accept!==void 0){let s=Array.isArray(n.accept)?n.accept:[n.accept];ze(s,`${o}/accept`,50,!1)}for(let s of["maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","options","source","timePrecision","serial","subtable"])Qs(n,t,s,o);Zs(n,t,o)}function Xs(e,t,o){if(e===void 0)return;let n=ne(e,o);if(be(n,he.list,o),n.actions!==void 0){let i=ne(n.actions,`${o}/actions`);be(i,["import","export"],`${o}/actions`);for(let s of["import","export"])i[s]!==void 0&&typeof i[s]!="boolean"&&x("NATIVE_DATA_SURFACE_LIST_ACTION_INVALID",`${o}/actions/${s}`)}if(n.fieldOrder!==void 0)for(let i of ze(n.fieldOrder,`${o}/fieldOrder`,500,!0))t.has(i)||x("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${o}/fieldOrder`);n.defaultPageSize!==void 0&&(!Number.isSafeInteger(n.defaultPageSize)||Number(n.defaultPageSize)<1||Number(n.defaultPageSize)>200)&&x("NATIVE_DATA_SURFACE_PAGE_SIZE_INVALID",`${o}/defaultPageSize`);for(let[i,s]of[["searchableFields",Lt],["filterFields",Pn]]){if(n[i]===void 0)continue;let a=ze(n[i],`${o}/${i}`,100,!0);for(let r of a){let c=t.get(r);(!c||!s(c.type))&&x("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${o}/${i}`)}}if(n.defaultSort!==void 0){let i=ne(n.defaultSort,`${o}/defaultSort`);be(i,he.defaultSort,`${o}/defaultSort`);let s=Re(i.field,`${o}/defaultSort/field`,63),a=t.get(s);!$n(s)&&(!a||!Je(a.type))&&x("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${o}/defaultSort/field`),i.order!==void 0&&!["asc","desc"].includes(i.order)&&x("NATIVE_DATA_SURFACE_SORT_ORDER_INVALID",`${o}/defaultSort/order`)}}function Bo(e,t,o,n){if(e===void 0)return;let i=ne(e,o);if(be(i,he[n],o),i.layout!==void 0&&!["flat","sections"].includes(i.layout)&&x("NATIVE_DATA_SURFACE_LAYOUT_INVALID",`${o}/layout`),i.fieldOrder!==void 0){let s=`${o}/fieldOrder`;(!Array.isArray(i.fieldOrder)||i.fieldOrder.length>t.size||i.fieldOrder.length>Js)&&x("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",s);let a=i.fieldOrder.map((r,c)=>Re(r,`${s}/${c}`,63));new Set(a).size!==a.length&&x("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",s),a.forEach((r,c)=>{t.has(r)||x("NATIVE_DATA_SURFACE_FIELD_ORDER_FIELD_MISSING",`${s}/${c}`)})}n==="form"&&xn(i.draftState,`${o}/draftState`)}function Qs(e,t,o,n){e[o]===void 0&&t[o]===void 0||((e[o]===void 0||t[o]===void 0)&&x("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${o}`),ee(e[o])!==ee(t[o])&&x("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${o}`))}function Zs(e,t,o){let n=t.file||{},i={...e.maxCount===void 0?{}:{maxCount:e.maxCount},...e.maxSizeMb===void 0?{}:{maxSizeMb:e.maxSizeMb},...e.accept===void 0?{}:{accept:jn(e.accept)}};for(let s of["maxCount","maxSizeMb","accept"]){if(i[s]===void 0&&n[s]===void 0)continue;(i[s]===void 0||n[s]===void 0)&&x("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${s}`);let a=s==="accept"?jn(i[s]):i[s],r=s==="accept"?jn(n[s]):n[s];ee(a)!==ee(r)&&x("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${s}`)}}function jn(e){return(Array.isArray(e)?[...e]:[e]).sort((t,o)=>{let n=String(t),i=String(o);return n===i?0:n<i?-1:1})}function ze(e,t,o,n){(!Array.isArray(e)||!n&&e.length===0||e.length>o)&&x("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let i=e.map((s,a)=>Re(s,`${t}/${a}`,255));return new Set(i).size!==i.length&&x("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),i}function ne(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&x("NATIVE_OBJECT_REQUIRED",t),e}function be(e,t,o){let n=new Set(t);for(let i of Object.keys(e))n.has(i)||x("NATIVE_PROPERTY_UNKNOWN",`${o}/${i}`)}function Re(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&x("NATIVE_STRING_INVALID",t),e}function er(e,t,o){e!==void 0&&(typeof e!="string"||e.length>o)&&x("NATIVE_STRING_INVALID",t)}function Wn(e,t){e!==void 0&&typeof e!="boolean"&&x("NATIVE_BOOLEAN_REQUIRED",t)}function x(e,t){throw new _e(e,t)}var Ye=class extends Error{constructor(o,n){super(`${o}: ${n}`);this.pointer=o;this.reason=n}pointer;reason;code="NATIVE_MANAGED_CONCURRENCY_INVALID"};function Mn(e,t,o){if(e===void 0)return;let n=(_,u)=>{throw new Ye(_,u)},i=(_,u,N)=>((!_||typeof _!="object"||Array.isArray(_)||Object.keys(_).some(y=>!N.includes(y)))&&n(u,"object contains unsupported properties"),_),s=(_,u,N,y)=>{(!Number.isSafeInteger(_)||_<u||_>N)&&n(y,`expected integer ${u}..${N}`)},a=(_,u)=>{(typeof _!="string"||!/^[a-z][a-z0-9_-]{0,63}$/.test(_))&&n(u,"invalid code")},r=(_,u,N)=>((!Array.isArray(_)||_.length>u)&&n(N,"array exceeds bound"),_),c=(_,u)=>{let N=t.find(y=>y.code===_);return N||n(u,"unknown resource"),N},l=(_,u,N)=>{let y=_.schema.fields.find(O=>O.code===u);return!y&&u!=="id"&&n(N,"unknown field"),y},p=(_,u,N=!1)=>{i(_,u,Object.keys(_||{})),Object.keys(_).length>8&&n(u,"at most eight parameters");for(let[y,O]of Object.entries(_))if(a(y,u),i(O,u,["type","values","minimum","maximum","minLength","maxLength"]),O.type==="uuid")Object.keys(O).length!==1&&n(u,"uuid has no options");else if(N&&O.type==="boolean")i(O,u,["type"]);else if(N&&O.type==="string"&&O.values===void 0)i(O,u,["type","minLength","maxLength"]),s(O.maxLength,1,256,u),O.minLength!==void 0&&s(O.minLength,0,O.maxLength,u);else if(O.type==="string"){i(O,u,["type","values"]);let h=r(O.values,100,u);(!h.length||h.some(C=>typeof C!="string"||C.length>128)||new Set(h).size!==h.length)&&n(u,"finite string values required")}else O.type==="integer"?(i(O,u,["type","minimum","maximum"]),s(O.minimum,0,1e6,u),s(O.maximum,O.minimum,O.minimum+1e3,u)):n(u,"unsupported parameter type")},d=(_,u,N,y=!1)=>{i(_,N,["from","key","value"]),!(_.from==="input"&&Object.keys(_).length===2&&Object.hasOwn(u,_.key))&&((_.from==="actor"||y&&_.from==="allocation")&&Object.keys(_).length===1||_.from==="literal"&&Object.keys(_).length===2&&Object.hasOwn(_,"value")&&(_.value===null||["string","boolean"].includes(typeof _.value)||typeof _.value=="number"&&Number.isFinite(_.value))&&JSON.stringify(_.value).length<=512||n(N,"invalid binding"))},f=(_,u,N)=>{d(_,u,N),!(_.from==="input"&&u[_.key].type==="uuid")&&(_.from==="literal"&&typeof _.value=="string"&&/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(_.value)||n(N,"record and allocation identifiers require a UUID binding"))},g=(_,u,N)=>{d(_,u,N),!(_.from==="input"&&u[_.key].type==="integer"&&u[_.key].minimum>=1)&&(_.from==="literal"&&Number.isSafeInteger(_.value)&&_.value>=1||n(N,"expectedRevision requires a positive integer binding"))},E="/data/concurrency";JSON.stringify(e).length>131072&&n(E,"declaration exceeds 128 KiB");let A=i(e,E,["version","admission","reads","quotas","commands"]);A.version!==1&&n(E,"unsupported version"),i(A.admission,E,["perSecond","burst","maxInFlight"]),s(A.admission.perSecond,1,1e3,E),s(A.admission.burst,1,1e3,E),s(A.admission.maxInFlight,1,1e3,E);let b=(_,u)=>{let N=new Set;for(let y of _)a(y?.code,u),N.has(y.code)&&n(u,"duplicate code"),N.add(y.code)};b(r(A.reads,32,E),E),b(r(A.quotas,16,E),E),b(r(A.commands,32,E),E);for(let _ of A.reads){let u=`${E}/reads/${_.code}`;i(_,u,["code","resourceCode","parameters","select","where","limit","scope","freshSeconds","staleSeconds","maxKeys","sourcePerSecond","dependencies"]);let N=c(_.resourceCode,u);p(_.parameters,u),["subject","application"].includes(_.scope)||n(u,"invalid cache scope"),_.scope==="application"&&N.dataPolicyCode&&n(u,"shared cache cannot bypass a row policy");let y=r(_.select,32,u);y.length||n(u,"select required"),y.forEach(h=>l(N,h,u));let O=r(_.dependencies,64,u);O.forEach(h=>l(N,h,u));for(let h of r(_.where||[],8,u))i(h,u,["field","value"]),l(N,h.field,u),d(h.value,_.parameters,u),_.scope==="application"&&h.value.from==="actor"&&n(u,"actor requires subject cache"),O.includes(h.field)||n(u,"filter dependency missing");y.some(h=>!O.includes(h))&&n(u,"selected field dependency missing"),s(_.limit,1,100,u),s(_.freshSeconds,1,300,u),s(_.staleSeconds,0,300,u),s(_.maxKeys,1,1e4,u),s(_.sourcePerSecond,1,20,u)}for(let _ of A.quotas){let u=`${E}/quotas/${_.code}`;i(_,u,["code","sourceResource","capacityField","allocationResource","allocationField","reservationSeconds"]);let N=c(_.sourceResource,u),y=c(_.allocationResource,u);l(N,_.capacityField,u)?.type!=="number.integer"&&n(u,"capacity must be an integer"),(l(y,_.allocationField,u)?.type!=="uuid"||l(y,_.allocationField,u)?.nullable!==!1)&&n(u,"allocation reference must be a uuid"),y.surface?.mutationOwner!=="queued-command"&&n(u,"allocation model must be command owned"),_.reservationSeconds!==void 0&&s(_.reservationSeconds,10,86400,u)}new Set(A.quotas.map(_=>_.allocationResource)).size!==A.quotas.length&&n(E,"an allocation model has exactly one pool owner");for(let _ of A.commands){let u=`${E}/commands/${_.code}`;i(_,u,["code","mode","intake","execution","capability","parameters","resourceKey","admission","deadlineSeconds","guards","operations","quota"]),_.mode!==void 0&&!["permit","durable"].includes(_.mode)&&n(u,"unsupported mode");let N=_.mode==="durable";if(p(_.parameters,u,N),d(_.resourceKey,_.parameters,u),o.some(y=>y.code===_.capability)||n(u,"command capability must be declared"),i(_.admission,u,["perSecond","burst","maxInFlight","maxQueue","maxWaitSeconds","permitSeconds"]),s(_.admission.perSecond,1,A.admission.perSecond,u),s(_.admission.burst,1,A.admission.burst,u),s(_.admission.maxInFlight,1,A.admission.maxInFlight,u),s(_.admission.maxQueue,1,1e4,u),s(_.admission.maxWaitSeconds,1,3600,u),(!N||_.admission.permitSeconds!==void 0)&&s(_.admission.permitSeconds,5,60,u),s(_.deadlineSeconds,10,3600,u),N){(_.operations!==void 0||_.guards!==void 0||_.quota!==void 0)&&n(u,"backend-plan does not accept static operations, guards or quota"),i(_.intake,u,["perSecond","burst","maxInFlight"]);for(let h of["perSecond","burst","maxInFlight"])s(_.intake[h],1,1e3,u);let y=i(_.execution,u,["kind","handlerCode","timeoutMs","resources","directory"]);y.kind!=="backend-plan"&&n(u,"durable requires backend-plan"),a(y.handlerCode,u),s(y.timeoutMs,100,3e4,u);let O=r(y.resources,32,u);O.length||n(u,"execution resources required"),new Set(O.map(h=>h.resourceCode)).size!==O.length&&n(u,"duplicate execution resource");for(let h of O){i(h,u,["resourceCode","readFields","writeOperations","writeFields"]);let C=c(h.resourceCode,u);for(let V of["readFields","writeFields"]){let M=r(h[V],64,u);new Set(M).size!==M.length&&n(u,"duplicate field"),M.forEach(P=>{V==="readFields"&&Rn.has(P)||l(C,P,u)})}let k=r(h.writeOperations,3,u);(new Set(k).size!==k.length||k.some(V=>!["create","update","increment"].includes(V)))&&n(u,"unsupported execution operation"),h.writeFields.some(V=>["id","revision","created_by","updated_by","created_at","updated_at"].includes(V))&&n(u,"record metadata is platform owned"),!k.length&&h.writeFields.length&&n(u,"write fields require an operation"),k.length&&!h.writeFields.length&&n(u,"write operations require fields"),A.quotas.some(V=>V.allocationResource===h.resourceCode)&&k.length&&n(u,"allocation references remain owned by their pool command")}if(y.directory!==void 0){i(y.directory,u,["mode","fields"]),y.directory.mode!=="current-initiator"&&n(u,"only current initiator allowed");let h=r(y.directory.fields,4,u);(!h.length||new Set(h).size!==h.length||h.some(C=>!["displayName","employeeNumber","primaryDepartment","departments"].includes(C)))&&n(u,"unsupported directory fields")}continue}(_.execution!==void 0||_.intake!==void 0)&&n(u,"execution and intake require durable mode");for(let y of r(_.guards||[],8,u)){i(y,u,["resourceCode","id","conditions"]);let O=c(y.resourceCode,u);f(y.id,_.parameters,u);for(let h of r(y.conditions,16,u)){i(h,u,["kind","field","operator","value"]);let C=l(O,h.field,u);["eq","neq","lt","lte","gt","gte"].includes(h.operator)||n(u,"unsupported guard"),h.kind==="database-now"?(C?.type!=="datetime"||!["lt","lte","gt","gte"].includes(h.operator)||h.value!==void 0)&&n(u,"database-now requires datetime and an ordering operator"):(h.kind!==void 0&&h.kind!=="value"&&n(u,"unsupported condition kind"),d(h.value,_.parameters,u))}}for(let y of r(_.operations,8,u)){i(y,u,["operation","resourceCode","id","expectedRevision","data"]);let O=c(y.resourceCode,u);O.surface?.mutationOwner!=="queued-command"&&n(u,"command mutations require command owned models");let h=A.quotas.find(C=>C.allocationResource===y.resourceCode);h&&(y.operation==="create"?_.quota?.action!=="allocate"||_.quota.pool!==h.code:Object.hasOwn(y.data||{},h.allocationField))&&n(u,"allocation references are owned by their pool command"),["create","update"].includes(y.operation)||n(u,"unsupported operation"),y.operation==="update"?(f(y.id,_.parameters,u),g(y.expectedRevision,_.parameters,u)):(y.id!==void 0||y.expectedRevision!==void 0)&&n(u,"create has no caller supplied id/revision"),i(y.data,u,Object.keys(y.data||{})),Object.keys(y.data).length>32&&n(u,"too many fields");for(let[C,k]of Object.entries(y.data))C==="id"&&n(u,"record identifiers are platform owned"),l(O,C,u),d(k,_.parameters,u,_.quota?.action==="allocate")}if(_.quota){let y=i(_.quota,u,["pool","action","units","mode","allocation"]),O=A.quotas.find(h=>h.code===y.pool);O||n(u,"unknown quota pool"),f(_.resourceKey,_.parameters,u),y.action==="allocate"?(i(y,u,["pool","action","units","mode"]),s(y.units,1,1e3,u),(!["committed","reserved"].includes(y.mode)||y.mode==="reserved"&&!O.reservationSeconds)&&n(u,"invalid allocation mode"),(_.operations.length!==1||_.operations[0].operation!=="create"||_.operations[0].resourceCode!==O.allocationResource||_.operations[0].data[O.allocationField]?.from!=="allocation")&&n(u,"allocation must atomically create its bound business record")):["confirm","release"].includes(y.action)?(i(y,u,["pool","action","allocation"]),f(y.allocation,_.parameters,u),_.operations.length&&n(u,"lifecycle owns allocation state; business reference remains immutable")):n(u,"invalid quota action")}else _.operations.length||n(u,"operations required")}let I=A.commands.filter(_=>_.mode==="durable").map(_=>_.execution.handlerCode);return new Set(I).size!==I.length&&n(E,"handler code must be unique"),JSON.parse(JSON.stringify(A))}var Pe=class extends Error{constructor(o,n){super(`\u91D1\u989D\u751F\u547D\u5468\u671F\u58F0\u660E\u65E0\u6548\uFF1A${n}\uFF08${o}\uFF09`);this.pointer=o;this.reason=n}pointer;reason;code="NATIVE_DECIMAL_LIFECYCLE_INVALID"},Kn=["parentTransitions","childTransitions","fulfilledChildStatuses","lockedParentStatuses"],Go=["amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode","parentRelationValue","childRelationValue"],Bt=e=>!!(e&&typeof e=="object"&&!Array.isArray(e)),Ut=e=>Array.isArray(e)?e.filter(Bt):[],ye=(e,t)=>{throw new Pe(e,t)},Un=e=>typeof e=="string"&&/^[A-Za-z0-9._:-]{1,128}$/.test(e),Bn=(e,t)=>e<t?-1:e>t?1:0;function Kt(e,t="/decimalReservationLifecycle"){if(e===void 0)return;if(!Bt(e)||Object.keys(e).some(i=>!Kn.includes(i))||Kn.some(i=>!Object.prototype.hasOwnProperty.call(e,i)))return ye(t,"\u5FC5\u987B\u5B8C\u6574\u58F0\u660E\u56DB\u9879\u89C4\u5219\uFF0C\u4E0D\u80FD\u5305\u542B\u672A\u77E5\u5C5E\u6027");let o=i=>{let s=e[i];if(!Array.isArray(s)||s.length>64)return ye(`${t}/${i}`,"\u72B6\u6001\u8FB9\u6700\u591A 64 \u6761");let a=new Set;return s.map((r,c)=>{let l=`${t}/${i}/${c}`;if(!Bt(r)||Object.keys(r).some(d=>d!=="from"&&d!=="to")||!Un(r.from)||!Un(r.to)||r.from===r.to)return ye(l,"\u72B6\u6001\u8FB9\u5FC5\u987B\u5305\u542B\u4E0D\u540C\u7684\u6709\u6548 from/to");let p=JSON.stringify([r.from,r.to]);return a.has(p)?ye(l,"\u72B6\u6001\u8FB9\u4E0D\u80FD\u91CD\u590D"):(a.add(p),{from:r.from,to:r.to})}).sort((r,c)=>Bn(r.from,c.from)||Bn(r.to,c.to))},n=i=>{let s=e[i];return!Array.isArray(s)||s.length<1||s.length>16||s.some(a=>!Un(a))||new Set(s).size!==s.length?ye(`${t}/${i}`,"\u72B6\u6001\u96C6\u5408\u5FC5\u987B\u5305\u542B 1 \u5230 16 \u4E2A\u4E0D\u91CD\u590D\u7684\u6709\u6548\u72B6\u6001"):[...s].sort(Bn)};return{parentTransitions:o("parentTransitions"),childTransitions:o("childTransitions"),fulfilledChildStatuses:n("fulfilledChildStatuses"),lockedParentStatuses:n("lockedParentStatuses")}}function Gn(e,t,o="/config/data/resources"){Ut(e).forEach((n,i)=>{let s=`${o}/${i}/decimalReservationLifecycle`,a=Kt(n.decimalReservationLifecycle,s);if(!a)return;let r=Ut(t).map(d=>d.platformAccess?.decimalReservation).filter(d=>Bt(d)&&d.resourceCode===n.code),c=r.find(d=>d.mode==="reserve");if(!c)return ye(s,"\u9700\u8981\u540C\u8D44\u6E90\u5DF2\u58F0\u660E\u7684 reserve \u52A8\u4F5C\u6620\u5C04");if(Go.some(d=>typeof c[d]!="string")||r.some(d=>Go.some(f=>d[f]!==c[f])))return ye(s,"\u540C\u8D44\u6E90\u989D\u5EA6\u52A8\u4F5C\u7684\u5B57\u6BB5\u6620\u5C04\u5FC5\u987B\u4E00\u81F4");let l=Ut(n.schema?.fields).find(d=>d.code===c.statusFieldCode);if(l?.type!=="option.single")return ye(s,"\u989D\u5EA6\u72B6\u6001\u5B57\u6BB5\u5FC5\u987B\u4E3A option.single");let p=new Set(Ut(l.options).map(d=>d.value));for(let d of Kn)if((d==="parentTransitions"||d==="childTransitions"?a[d].flatMap(g=>[g.from,g.to]):a[d]).some(g=>!p.has(g)))return ye(`${s}/${d}`,"\u72B6\u6001\u5FC5\u987B\u6765\u81EA\u989D\u5EA6\u72B6\u6001\u5B57\u6BB5\u7684\u9009\u9879");if(r.some(d=>d.mode==="reserve"&&Array.isArray(d.eligibleParentStatuses)&&d.eligibleParentStatuses.some(f=>a.lockedParentStatuses.includes(String(f)))))return ye(`${s}/lockedParentStatuses`,"\u9501\u5B9A\u7236\u72B6\u6001\u4E0D\u80FD\u5141\u8BB8\u65B0\u9884\u7559")})}var Jo=require("crypto");var qn=new Set(["option.single","user.single","department.single","resource-ref.single"]),tr=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","address","location","json"]),zo=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image"]),nr=new Set(["option.single","user.single","department.single","resource-ref.single","signature","address","location"]),or=new Set([...qn,...zo,"signature","address","location","json"]);function ir(e,t){let o=new Set([...Array.isArray(t?.list?.searchableFields)?t.list.searchableFields:[],...Object.entries(t?.fields||{}).filter(([,n])=>n?.searchable===!0).map(([n])=>n)]);return e.map(n=>Yo(n,o.has(n.code))).sort((n,i)=>n.code.localeCompare(i.code))}function Yo(e,t=!1){let o=e.type==="date-range"||e.type==="datetime-range";if(o&&e.rangeBoundary!=="closed"&&e.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");return{code:e.code,type:e.type,nullable:!0,indexed:e.indexed===!0,storage:mr(e),index:_r(e,t),...o?{rangeBoundary:e.rangeBoundary}:{},...e.type==="serial-number"?{serial:{prefix:e.serial?.prefix||"",digits:e.serial?.digits??6,start:e.serial?.start??1}}:{},...e.type==="subtable"&&e.subtable?{subtable:{resourceCode:e.subtable.resourceCode,foreignKey:e.subtable.foreignKey,orderField:e.subtable.orderField,maxRows:e.subtable.maxRows??20}}:{}}}function sr(e,t){if(t.type==="subtable")return null;let o=oe(t.code),n=Ho(e,t),i=[n?` DEFAULT ${n}`:"",gr(o,t),ar(o,t)].join("");return`${o} ${t.storage}${i}`}function rr(e,t){return Ho(e,t)}function ar(e,t){if(t.type!=="date-range"&&t.type!=="datetime-range")return"";if(t.rangeBoundary!=="closed"&&t.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");let o=t.type==="datetime-range"&&t.rangeBoundary==="closed";return` CHECK (${e} IS NULL OR (NOT isempty(${e}) AND lower(${e}) IS NOT NULL AND upper(${e}) IS NOT NULL AND lower_inc(${e}) AND ${o?"":"NOT "}upper_inc(${e})))`}function cr(e){return e.type==="serial-number"||at(e.type)&&e.type!=="subtable"}function dr(e,t){return t.filter(o=>o.type==="serial-number").map(o=>{let n=qt(e,o.code),i=o.serial?.start??1;return`CREATE SEQUENCE IF NOT EXISTS ${n} AS bigint MINVALUE ${i} START WITH ${i} CACHE 1`})}function lr(e,t){let o=Gt(e);return t.filter(n=>n.type==="serial-number").map(n=>`ALTER SEQUENCE ${qt(e,n.code)} OWNED BY ${o}.${oe(n.code)}`)}function ur(e,t){return t.filter(o=>o.type==="serial-number").map(o=>`GRANT USAGE, SELECT ON SEQUENCE ${qt(e,o.code)} TO "openxiangda_data_api"`)}function fr(e,t){let o=Gt(e),n=[];for(let i of t){if(i.type==="subtable")continue;let s=oe(i.code),a=oe(Ce("idx",e,i.code,i.index));switch(i.index){case"btree":n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} (${s})`);break;case"btree-snapshot-expressions":{let r=oe(Ce("idx",e,i.code,"snapshot-value")),c=oe(Ce("idx",e,i.code,"snapshot-label"));n.push(`CREATE INDEX IF NOT EXISTS ${r} ON ${o} ((${s} ->> 'value'))`,`CREATE INDEX IF NOT EXISTS ${c} ON ${o} ((${s} ->> 'label'))`);break}case"gin-jsonb-path":n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} USING GIN (${s} jsonb_path_ops)`);break;case"gist-range":n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} USING GIST (${s})`);break;case"gin-trigram":{let r=qn.has(i.type)?`((${s} ->> 'label')) gin_trgm_ops`:`${s} gin_trgm_ops`;n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} USING GIN (${r})`);break}case"none":break}if(i.type==="serial-number"){let r=oe(Ce("uidx",e,i.code,"serial"));n.push(`CREATE UNIQUE INDEX IF NOT EXISTS ${r} ON ${o} (${s})`)}}return n}function pr(e,t,o,n){let i=Gt(e),s=Gt(t),a=oe(Ce("uidx",e,"environment_id","subtable-parent")),r=oe(Ce("idx",t,o,n,"subtable-child")),c=oe(Ce("fk",t,o,e)),l=oe(o),p=oe(n);return[`CREATE UNIQUE INDEX IF NOT EXISTS ${a} ON ${i} ("tenant_id", "app_code", "environment_key", "id")`,`CREATE INDEX IF NOT EXISTS ${r} ON ${s} ("tenant_id", "app_code", "environment_key", ${l}, ${p}, "id")`,`DO $native_subtable$ BEGIN
1
+ "use strict";var qs=Object.create;var vt=Object.defineProperty;var Js=Object.getOwnPropertyDescriptor;var Gs=Object.getOwnPropertyNames;var zs=Object.getPrototypeOf,Hs=Object.prototype.hasOwnProperty;var Ys=(e,t)=>{for(var o in t)vt(e,o,{get:t[o],enumerable:!0})},Jo=(e,t,o,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of Gs(t))!Hs.call(e,i)&&i!==o&&vt(e,i,{get:()=>t[i],enumerable:!(n=Js(t,i))||n.enumerable});return e};var Xs=(e,t,o)=>(o=e!=null?qs(zs(e)):{},Jo(t||!e||!e.__esModule?vt(o,"default",{value:e,enumerable:!0}):o,e)),Qs=e=>Jo(vt({},"__esModule",{value:!0}),e);var cd={};Ys(cd,{DATA_AUDIT_METADATA_FIELDS:()=>Mn,DATA_BUSINESS_COMMAND_INTENT_MAX_BYTES:()=>iu,DATA_BUSINESS_COMMAND_RESOLUTION_SCHEMA:()=>Bs,DATA_BUSINESS_COMMAND_SCHEMA:()=>id,DATA_EVENT_TYPES_V2:()=>En,DATA_FORM_DRAFT_MAX_BYTES:()=>_d,DATA_SUBTABLE_MAX_ROWS:()=>Lt,DATA_SUBTABLE_MAX_TOTAL_ROWS:()=>xt,DATA_SYSTEM_SORT_FIELD_CODES:()=>si,DATA_TRANSACTION_MAX_BYTES:()=>md,DATA_TRANSACTION_MAX_OPERATIONS:()=>pd,ManagedConcurrencyContractError:()=>Qe,NATIVE_CONFIGURATION_VALIDATOR_DIGEST:()=>ad,NATIVE_CONTRACT_CAPACITY_V2:()=>X,NATIVE_DATA_POLICY_EXPRESSION_MAX_CLAUSES:()=>Al,NATIVE_DATA_POLICY_EXPRESSION_MAX_DEPTH:()=>ml,NATIVE_DATA_POLICY_EXPRESSION_MAX_GROUP_ITEMS:()=>_l,NATIVE_DATA_POLICY_EXPRESSION_MAX_LEAVES:()=>gl,NATIVE_DATA_POLICY_EXPRESSION_MAX_OCCURRENCES:()=>El,NATIVE_DATA_QUERY_OPERATORS_V2:()=>ci,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_BYTES:()=>Xl,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_ITEMS:()=>Yl,NATIVE_UNIQUE_KEY_MAX_BYTES:()=>Md,NATIVE_UNIQUE_KEY_NORMALIZERS:()=>co,NativeConfigurationCompilerError:()=>yn,NativeDataFieldContractV2Error:()=>Ae,NativeDataPolicyExpressionV2Error:()=>at,NativeDecimalLifecycleContractError:()=>xe,NativeEventActionContractError:()=>sn,NativeRoleMembershipBatchInputError:()=>Sn,NativeScopeSourceFieldPathV2Error:()=>en,NativeUniqueKeyContractError:()=>et,OPENXIANGDA_NATIVE_DATA_FIELD_TYPES_V2:()=>oi,OPENXIANGDA_NATIVE_DATA_SURFACE_KEYS_V2:()=>Ce,OPENXIANGDA_NATIVE_DRAFT_STATE_KEYS_V2:()=>Jt,OPENXIANGDA_NATIVE_SYSTEM_FIELDS_V2:()=>Ut,OPENXIANGDA_NATIVE_SYSTEM_FIELD_MAP_V2:()=>jn,USER_CANDIDATE_MAX_SELECTIONS:()=>ud,USER_CANDIDATE_SCOPE_FIELD_TYPES:()=>Ho,UserCandidateContractError:()=>Ve,WORKFLOW_APPROVAL_EMPTY_PROVIDERS:()=>Oo,WORKFLOW_AUTOMATIC_CC_MAX_RECIPIENTS:()=>el,WORKFLOW_AUTOMATIC_CC_PROVIDERS:()=>Li,WORKFLOW_BUSINESS_STEP_EVENT:()=>tt,WORKFLOW_BUSINESS_STEP_EVENTS:()=>Ao,WORKFLOW_BUSINESS_STEP_FACTS_KEY:()=>pa,WORKFLOW_BUSINESS_STEP_MAX_BYTES:()=>rn,WORKFLOW_BUSINESS_STEP_MAX_RECEIPT_BYTES:()=>Si,WORKFLOW_CONFIGURABLE_OPERATIONS:()=>ln,WORKFLOW_CONFIGURABLE_PROVIDERS:()=>un,WORKFLOW_EVENT_TYPES_V2:()=>In,WORKFLOW_LAUNCH_PREFLIGHT_PROVIDERS:()=>Wi,WORKFLOW_REJECTION_NOTIFICATION_MAX_BYTES:()=>ol,WORKFLOW_REJECTION_NOTIFICATION_SCHEMA:()=>xi,WORKFLOW_ROUTING_MAX_BYTES:()=>ul,WORKFLOW_ROUTING_MAX_MATCHED_RULES:()=>ll,WORKFLOW_ROUTING_MAX_RULES:()=>dl,WORKFLOW_TASK_PAGE_DEFINITION_MAX_BYTES:()=>Bi,WORKFLOW_TASK_PAGE_MAX_BYTES:()=>gn,WORKFLOW_TASK_PAGE_MAX_FIELDS:()=>Mi,WORKFLOW_TASK_SUBTABLE_MAX_ROWS:()=>wo,WORKFLOW_TASK_SUBTABLE_MAX_TOTAL_ROWS:()=>Ki,WorkflowTaskPageError:()=>Ie,applyWorkflowTaskPageValues:()=>Gi,applyWorkflowTaskSubtableRows:()=>Ca,assertNativeRoleMembershipBatchInput:()=>Zc,canonicalDataBusinessIntent:()=>sd,compileNativeApplicationConfiguration:()=>ac,compileNativeEventAction:()=>fo,compileNativeEventCapturePlansV2:()=>Ns,compileRequiredPlatformCapabilitiesV3:()=>bs,compileWorkflowBusinessStepHandlers:()=>an,evaluateWorkflowTaskPageExpression:()=>De,formatWorkflowExpression:()=>Nt,hasDataAuditReadPolicy:()=>Bn,isDataAuditMetadataField:()=>ze,isDataSystemSortField:()=>Kn,isNativeDataQueryOperatorV2:()=>pr,isNativeMultiValueFieldV2:()=>pt,isWorkflowRejectionNotificationSnapshot:()=>Oa,materializeNativeDataQueryPathTypesV2:()=>ra,nativeDataPolicyExpressionLeavesV2:()=>$t,nativeDataPolicyExpressionToCnfV2:()=>Po,nativeDataQueryPathPlanV2:()=>aa,nativeFieldAggregatePlanV2:()=>br,nativeFieldColumnDefinitionV2:()=>vr,nativeFieldDefaultSqlV2:()=>Lr,nativeFieldHasDefaultV2:()=>jr,nativeFieldIndexStatementsV2:()=>Br,nativeFieldRequiresCreateInputV2:()=>mt,nativeFieldSequenceGrantStatementsV2:()=>Mr,nativeFieldSequenceOwnershipStatementsV2:()=>Ur,nativeFieldSequenceStatementsV2:()=>Wr,nativeFieldSupportsFilterV2:()=>Hn,nativeFieldSupportsOperatorV2:()=>Er,nativeFieldSupportsSearchV2:()=>Kt,nativeFieldSupportsSortV2:()=>Ye,nativeOperatorsForFieldV2:()=>zn,nativePhysicalFieldV2:()=>Ei,nativePhysicalFieldsV2:()=>Fr,nativePhysicalObjectNameV2:()=>we,nativeScopeSourceFieldValueV2:()=>Yr,nativeScopeSourceGrantPathSupportedV2:()=>ro,nativeScopeSourceSubjectPathSupportedV2:()=>tn,nativeSubtableConstraintStatementsV2:()=>Kr,nativeUniqueKeysContractVersion:()=>uo,nativeUniqueKeysJsonSchema:()=>da,parseDataBusinessCommandResolution:()=>rd,parseDataFieldUserCandidates:()=>ft,parseDecimalReservationLifecycle:()=>Xt,parseNativeDataFieldsV2:()=>Mt,parseNativeDataResourceInvariantsV2:()=>Un,parseNativeUniqueKeys:()=>lo,projectDataResourceView:()=>Ks,projectNativeDataResourceViewV2:()=>zt,projectWorkflowGraph:()=>Ea,projectWorkflowNodePolicy:()=>vi,quoteNativeIdentifierV2:()=>ae,refreshWorkflowTaskPageFacts:()=>Sa,resolveNativeScopeSourceFieldPathV2:()=>Ze,resolveWorkflowUserCandidates:()=>Qo,selectWorkflowAssignmentRoutingRules:()=>va,serializedDataBytes:()=>tr,userCandidateScopeValue:()=>er,validateDecimalReservationLifecycles:()=>io,validateManagedConcurrency:()=>eo,validateNativeDataDraftStateV2:()=>Xn,validateNativeDataResourceReferencesV2:()=>Wn,validateNativeDataResourceSurfaceV2:()=>Gt,validateUserCandidateReferences:()=>Pn,validateWorkflowAdministration:()=>fn,validateWorkflowApprovalEmptyPolicy:()=>mn,validateWorkflowAssignmentRoutingBindings:()=>ko,validateWorkflowAssignmentRoutingPolicy:()=>wt,validateWorkflowAssignmentRoutingRules:()=>Pa,validateWorkflowAutomaticCc:()=>pn,validateWorkflowBusinessStepHandlerContract:()=>_a,validateWorkflowBusinessStepRequest:()=>ma,validateWorkflowBusinessStepResult:()=>$i,validateWorkflowBusinessStepSchema:()=>It,validateWorkflowBusinessStepSubscriptions:()=>Io,validateWorkflowBusinessSteps:()=>bt,validateWorkflowCommandHandlers:()=>Co,validateWorkflowInitiatorApprovalPolicy:()=>ot,validateWorkflowInstanceCommandPolicies:()=>mo,validateWorkflowLaunchPreflight:()=>_n,validateWorkflowNodeConfigurationPatch:()=>ba,validateWorkflowReadability:()=>No,validateWorkflowRejectionNotification:()=>Ro,validateWorkflowTaskPages:()=>Rt,validateWorkflowUserCandidateBindings:()=>Fn,workflowApprovalCanSkip:()=>Na,workflowAssignmentRoutingFacts:()=>Fa,workflowAssignmentRoutingPolicySchema:()=>Va,workflowAssignmentRoutingSemantic:()=>Xi,workflowBindingAllowsEmptyUsers:()=>To,workflowBusinessCommandInvocationSchema:()=>Ta,workflowBusinessStepFactSchema:()=>yt,workflowBusinessStepHandlerDigest:()=>od,workflowBusinessStepInput:()=>ga,workflowBusinessStepPath:()=>ki,workflowBusinessStepReceiptSignatureSuffix:()=>nd,workflowBusinessStepValueMatches:()=>Et,workflowDelegationMutationRequestSchema:()=>Ms,workflowExpressionPaths:()=>bo,workflowInitiatorApprovalCanComplete:()=>Ia,workflowInstanceCommandDeadlineError:()=>fa,workflowInstanceTerminateCapabilityAllowed:()=>la,workflowInstanceWithdrawalReasonRequired:()=>ua,workflowNodeAllowedOperations:()=>st,workflowOperationCommentRequired:()=>Pi,workflowPolicyTimestamp:()=>po,workflowTaskPageFieldState:()=>Do,workflowTaskPageReplayCoversInvalidation:()=>wa,workflowTaskSubtableRows:()=>Ra});module.exports=Qs(cd);var Go=require("node:crypto");function Zs(e){if(!e||typeof e!="object")return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function $n(e,t){if(e===null)return"null";if(typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`JSON number must be finite: ${t}`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map((n,i)=>$n(n,`${t}[${i}]`)).join(",")}]`;if(Zs(e))return`{${Object.keys(e).filter(i=>e[i]!==void 0).sort((i,s)=>i===s?0:i<s?-1:1).map(i=>`${JSON.stringify(i)}:${$n(e[i],`${t}.${i}`)}`).join(",")}}`;let o=e instanceof Date?"Date":e?.constructor?.name||typeof e;throw new TypeError(`Value is not JSON serializable: ${t} (${o})`)}function ne(e){return $n(e,"$")}function Q(e){return(0,Go.createHash)("sha256").update(ne(e)).digest("hex")}var ud=200,Ho=["text.short","uuid","option.single"],kn=/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/,Yo=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,Xo=new Set(["__proto__","prototype","constructor"]),Vn=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&[Object.prototype,null].includes(Object.getPrototypeOf(e)),zo=(e,t)=>Object.keys(e).every(o=>t.includes(o)),Je=(e,t)=>typeof e=="string"&&e.length>0&&e.trim()===e&&e.length<=t,Ve=class extends Error{constructor(o,n){super(`${o}: ${n}`);this.code=o;this.pointer=n}code;pointer};function oe(e,t){throw new Ve(e,t)}function ft(e,t,o){if(e===void 0)return;["user.single","user.multiple"].includes(t)||oe("DATA_USER_CANDIDATES_FIELD_TYPE_INVALID",o),(!Vn(e)||!zo(e,["kind","roleCode","scope","pageSize"])||e.kind!=="app-role"||!Je(e.roleCode,128)||!kn.test(String(e.roleCode)))&&oe("DATA_USER_CANDIDATES_SOURCE_INVALID",o),e.pageSize!==void 0&&(!Number.isSafeInteger(e.pageSize)||Number(e.pageSize)<1||Number(e.pageSize)>50)&&oe("DATA_USER_CANDIDATES_PAGE_SIZE_INVALID",`${o}/pageSize`);let n;if(e.scope!==void 0){let i=e.scope;(!Vn(i)||!zo(i,["dimensionCode","operation","field","value"])||!Je(i.dimensionCode,128)||!kn.test(String(i.dimensionCode))||!Je(i.operation,64)||!kn.test(String(i.operation))||Object.hasOwn(i,"field")===Object.hasOwn(i,"value"))&&oe("DATA_USER_CANDIDATES_SCOPE_INVALID",`${o}/scope`),Object.hasOwn(i,"field")?((!Je(i.field,63)||!Yo.test(String(i.field))||Xo.has(String(i.field)))&&oe("DATA_USER_CANDIDATES_SCOPE_FIELD_INVALID",`${o}/scope/field`),n={dimensionCode:String(i.dimensionCode),operation:String(i.operation),field:String(i.field)}):(Je(i.value,255)||oe("DATA_USER_CANDIDATES_SCOPE_VALUE_INVALID",`${o}/scope/value`),n={dimensionCode:String(i.dimensionCode),operation:String(i.operation),value:String(i.value)})}return{kind:"app-role",roleCode:String(e.roleCode),...n?{scope:n}:{},...e.pageSize===void 0?{}:{pageSize:Number(e.pageSize)}}}function Pn(e,t,o,n){for(let[i,s]of e.entries()){let a=`${n}/${i}/userCandidates`,r=ft(s.userCandidates,s.type,a);if(r&&(t.has(r.roleCode)||oe("DATA_USER_CANDIDATES_ROLE_UNDECLARED",`${a}/roleCode`),r.scope&&!o.has(r.scope.dimensionCode)&&oe("DATA_USER_CANDIDATES_DIMENSION_UNDECLARED",`${a}/scope/dimensionCode`),r.scope?.field)){let c=e.find(l=>l.code===r.scope.field);(!c||!Ho.some(l=>l===c.type))&&oe("DATA_USER_CANDIDATES_SCOPE_FIELD_INVALID",`${a}/scope/field`)}}}function Qo(e,t,o,n){let i=e.subject.factProjection,s=typeof t.inputPath=="string"&&Object.entries(i).some(([l,p])=>(t.inputPath===l||t.inputPath.startsWith(`${l}.`))&&o.get(p)?.userCandidates!==void 0);if(t.candidateField===void 0&&!s)return;(t.provider!=="form_field_users"||!t.candidateField||!Yo.test(t.candidateField)||Xo.has(t.candidateField)||!t.inputPath||i[t.inputPath]!==t.candidateField)&&oe("WORKFLOW_USER_CANDIDATES_FIELD_BINDING_REQUIRED",n),(t.roleCode!==void 0||t.scope!==void 0||t.routing!==void 0)&&oe("WORKFLOW_USER_CANDIDATES_SOURCE_OVERRIDE_FORBIDDEN",n);let a=o.get(t.candidateField),r=a&&ft(a.userCandidates,a.type,`${n}/candidateField`);r||oe("WORKFLOW_USER_CANDIDATES_FIELD_UNDECLARED",`${n}/candidateField`);let c;if(r.scope?.field){let l=Object.entries(i).filter(([,p])=>p===r.scope.field).map(([p])=>p);l.length!==1&&oe("WORKFLOW_USER_CANDIDATES_SCOPE_PROJECTION_REQUIRED",n),c=l[0]}return{fieldCode:a.code,inputPath:t.inputPath,source:r,...c?{scopeInputPath:c}:{}}}function Fn(e,t,o,n,i=new Map){for(let[s,a]of Object.entries(t.bindings))Qo(e,a,o,`${n}/${s}`);for(let[s,a]of Object.entries(e.taskPages||{})){let r=new Set(a.fields.filter(c=>c.readonly!==!0).map(c=>c.code));for(let c of a.fields){let l=o.get(c.code)?.userCandidates?.scope;if(r.has(c.code)&&l?.field&&r.has(l.field)&&oe("WORKFLOW_USER_CANDIDATES_SCOPE_WRITE_FORBIDDEN",`${n}/taskPages/${s}/${c.code}`),!r.has(c.code)||!c.subtable)continue;let p=o.get(c.code)?.subtable?.resourceCode,d=p?i.get(p):void 0;c.subtable.fields.some(u=>u.readonly!==!0&&d?.get(u.code)?.userCandidates)&&oe("WORKFLOW_USER_CANDIDATES_OWNED_FIELD_UNSUPPORTED",`${n}/taskPages/${s}/${c.code}`)}}}function er(e,t){if(!e.scope)return;let o=e.scope.field?t[e.scope.field]:e.scope.value,n=Vn(o)?o.value:o;return Je(n,255)||oe("DATA_USER_CANDIDATES_SCOPE_VALUE_REQUIRED",e.scope.field||"scope"),String(n)}var Lt=100,xt=400,pd=1e3,md=2097152,_d=2097152;function tr(e){try{return new TextEncoder().encode(JSON.stringify(e)).byteLength}catch{return 1/0}}var ni=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,xn=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,oi=["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","date-range","datetime-range","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","image","signature","address","location","uuid","json","file","serial-number","subtable"],nr=new Set(oi),ii=new Set(["option.multiple","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","subtable"]),Zo=new Set(["option.single","option.multiple","cascade.single","cascade.multiple"]),ei=new Set(["resource-ref.single","resource-ref.multiple"]),Ut=[{code:"id",type:"uuid",nullable:!1},{code:"revision",type:"number.integer",nullable:!1},{code:"created_by",type:"text.short",nullable:!1},{code:"updated_by",type:"text.short",nullable:!1},{code:"created_at",type:"datetime",nullable:!1},{code:"updated_at",type:"datetime",nullable:!1}],jn=new Map(Ut.map(e=>[e.code,e])),Ae=class extends Error{constructor(o,n){super(o);this.code=o;this.pointer=n;this.name="NativeDataFieldContractV2Error"}code;pointer};function pt(e){return ii.has(e)}function mt(e,t={}){return e.type!=="serial-number"&&t.system!==!0&&e.nullable===!1&&(!pt(e.type)||t.requiredHint===!0)}function Mt(e,t,o=500){Array.isArray(e)||D("NATIVE_ARRAY_REQUIRED",t),e.length===0&&D("NATIVE_DATA_FIELDS_REQUIRED",t),e.length>o&&D("NATIVE_ARRAY_LIMIT_EXCEEDED",t);let n=new Set;return e.map((i,s)=>{let a=`${t}/${s}`,r=pe(i,a);ge(r,["code","type","nullable","indexed","options","source","userCandidates","maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","timePrecision","file","serial","subtable"],a);let c=Ee(r.code,`${a}/code`,63);ni.test(c)||D("NATIVE_FIELD_CODE_INVALID",`${a}/code`),n.has(c)&&D("NATIVE_DATA_FIELD_DUPLICATE",`${a}/code`),n.add(c);let l=Ee(r.type,`${a}/type`,32);nr.has(l)||D("NATIVE_DATA_FIELD_TYPE_INVALID",`${a}/type`);let p=l,d=Ln(r.nullable,`${a}/nullable`),u=Ln(r.indexed,`${a}/indexed`);d===!0&&ii.has(p)&&D("NATIVE_DATA_MULTI_FIELD_NULLABLE_INVALID",`${a}/nullable`);let g=sr(r.options,p,a),I=rr(r.source,p,a),E=ft(r.userCandidates,p,`${a}/userCandidates`),N=cr(r,p,a),y=Ln(r.exactDecimal,`${a}/exactDecimal`);y!==void 0&&p!=="number.decimal"&&D("NATIVE_DATA_FIELD_EXACT_DECIMAL_TYPE_INVALID",`${a}/exactDecimal`);let _=or(r.rangeBoundary,p,a),A=dr(r.file,p,a),T=lr(r.serial,p,a),f=ur(r.subtable,p,a);return{code:c,type:p,...d===void 0?{}:{nullable:d},...u===void 0?{}:{indexed:u},...g?{options:g}:{},...I?{source:I}:{},...E?{userCandidates:E}:{},...N,...y===void 0?{}:{exactDecimal:y},..._?{rangeBoundary:_}:{},...A?{file:A}:{},...T?{serial:T}:{},...f?{subtable:f}:{}}})}function or(e,t,o){let n=`${o}/rangeBoundary`;if(!(t==="date-range"||t==="datetime-range")){e!==void 0&&D("NATIVE_DATA_FIELD_RANGE_BOUNDARY_TYPE_INVALID",n);return}return e!=="closed"&&e!=="half-open"&&D("NATIVE_DATA_FIELD_RANGE_BOUNDARY_REQUIRED",n),e}function Wn(e,t){Array.isArray(e)||D("NATIVE_ARRAY_REQUIRED",t);let o=new Map;e.forEach((n,i)=>{let s=`${t}/${i}`,a=pe(n,s),r=Ee(a.code,`${s}/code`,64);(!xn.test(r)||o.has(r))&&D("NATIVE_RESOURCE_CODE_INVALID",`${s}/code`);let c=pe(a.schema,`${s}/schema`);o.set(r,{pointer:s,fields:Mt(c.fields,`${s}/schema/fields`)})});for(let[n,i]of o){let s=new Map(i.fields.map(r=>[r.code,r]));i.fields.filter(r=>r.type==="subtable").reduce((r,c)=>r+(c.subtable?.maxRows??20),0)>400&&D("NATIVE_DATA_FIELD_SUBTABLE_AGGREGATE_MAX_ROWS_EXCEEDED",`${i.pointer}/schema/fields`),i.fields.forEach((r,c)=>{let l=`${i.pointer}/schema/fields/${c}`;if(r.source&&ir(r.source,s,o,`${l}/source`),r.subtable){let p=o.get(r.subtable.resourceCode);(!p||r.subtable.resourceCode===n)&&D("NATIVE_DATA_FIELD_SUBTABLE_TARGET_MISSING",`${l}/subtable/resourceCode`);let d=p.fields.find(g=>g.code===r.subtable?.foreignKey);(!d||d.type!=="uuid"||d.nullable!==!1)&&D("NATIVE_DATA_FIELD_SUBTABLE_FOREIGN_KEY_INVALID",`${l}/subtable/foreignKey`);let u=p.fields.find(g=>g.code===r.subtable?.orderField);(!u||u.type!=="number.integer"||u.nullable!==!1)&&D("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${l}/subtable/orderField`)}})}}function Un(e,t,o){if(e===void 0)return[];(!Array.isArray(e)||e.length>20)&&D("NATIVE_DATA_RESOURCE_INVARIANTS_INVALID",o);let n=new Map(t.map(s=>[s.code,s])),i=new Set;return e.map((s,a)=>{let r=`${o}/${a}`,c=pe(s,r);ge(c,["code","message","expression"],r);let l=Ee(c.code,`${r}/code`,128);(!/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/.test(l)||i.has(l))&&D("NATIVE_DATA_RESOURCE_INVARIANT_CODE_INVALID",`${r}/code`),i.add(l);let p=Wt(c.message,`${r}/message`,500);p!==void 0&&p.length===0&&D("NATIVE_DATA_RESOURCE_INVARIANT_MESSAGE_INVALID",`${r}/message`);let d=pe(c.expression,`${r}/expression`);if(d.kind==="nonBlankTextWhenOption"){ge(d,["kind","optionField","optionValue","textField"],`${r}/expression`);let _=be(d.optionField,`${r}/expression/optionField`),A=be(d.textField,`${r}/expression/textField`),T=Ee(d.optionValue,`${r}/expression/optionValue`,128),f=n.get(_),b=n.get(A);return(!f||!b)&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${r}/expression`),(f.type!=="option.single"||!["text.short","text.long"].includes(b.type)||!f.options?.some(h=>h.value===T))&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${r}/expression`),{code:l,...p===void 0?{}:{message:p},expression:{kind:"nonBlankTextWhenOption",optionField:_,optionValue:T,textField:A}}}ge(d,["leftField","operator","rightField"],`${r}/expression`);let u=be(d.leftField,`${r}/expression/leftField`),g=be(d.rightField,`${r}/expression/rightField`),I=n.get(u),E=n.get(g);(!I||!E)&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_UNKNOWN",`${r}/expression`),I.type===E.type||["number.integer","number.decimal"].includes(I.type)&&["number.integer","number.decimal"].includes(E.type)||D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${r}/expression`);let y=String(d.operator);return["eq","neq","gt","gte","lt","lte"].includes(y)||D("NATIVE_DATA_RESOURCE_INVARIANT_OPERATOR_INVALID",`${r}/expression/operator`),!["eq","neq"].includes(y)&&!["number.integer","number.decimal","date","time","datetime","text.short","text.long","text.rich","serial-number","uuid"].includes(I.type)&&D("NATIVE_DATA_RESOURCE_INVARIANT_FIELD_TYPES_INVALID",`${r}/expression`),{code:l,...p===void 0?{}:{message:p},expression:{leftField:u,operator:y,rightField:g}}})}function ir(e,t,o,n){let i=o.get(e.resourceCode);i||D("NATIVE_DATA_FIELD_SOURCE_TARGET_MISSING",`${n}/resourceCode`);let s=new Map(i.fields.map(r=>[r.code,r])),a=s.get(e.labelField);(!a||!["text.short","text.long"].includes(a.type))&&D("NATIVE_DATA_FIELD_SOURCE_LABEL_INVALID",`${n}/labelField`);for(let r of["searchFields","descriptionFields","snapshotFields"])for(let c of e[r]||[])s.has(c)||D("NATIVE_DATA_FIELD_SOURCE_FIELD_MISSING",`${n}/${r}`);for(let[r,c]of(e.filters||[]).entries())s.has(c.field)||D("NATIVE_DATA_FIELD_SOURCE_FILTER_FIELD_MISSING",`${n}/filters/${r}/field`),"binding"in c&&!t.has(c.binding.field)&&D("NATIVE_DATA_FIELD_SOURCE_BINDING_FIELD_MISSING",`${n}/filters/${r}/binding/field`)}function sr(e,t,o){let n=`${o}/options`;if(e===void 0){Zo.has(t)&&D("NATIVE_DATA_FIELD_OPTIONS_REQUIRED",n);return}(!Zo.has(t)||!Array.isArray(e))&&D("NATIVE_DATA_FIELD_OPTIONS_TYPE_INVALID",n),(e.length<1||e.length>100)&&D("NATIVE_DATA_FIELD_OPTIONS_INVALID",n);let i=0,s=(a,r,c)=>{c>5&&D("NATIVE_DATA_FIELD_OPTIONS_DEPTH_EXCEEDED",r);let l=new Set;return a.map((p,d)=>{i+=1,i>1e3&&D("NATIVE_DATA_FIELD_OPTIONS_COUNT_EXCEEDED",n);let u=`${r}/${d}`,g=pe(p,u);ge(g,["label","value","description","color","children"],u);let I=Ee(g.label,`${u}/label`,500),E=Ee(g.value,`${u}/value`,500);l.has(E)&&D("NATIVE_DATA_FIELD_OPTION_VALUE_DUPLICATE",`${u}/value`),l.add(E);let N=Wt(g.description,`${u}/description`,2e3),y=Wt(g.color,`${u}/color`,64),_;return g.children!==void 0&&((!t.startsWith("cascade.")||!Array.isArray(g.children))&&D("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${u}/children`),(g.children.length<1||g.children.length>100)&&D("NATIVE_DATA_FIELD_OPTION_CHILDREN_INVALID",`${u}/children`),_=s(g.children,`${u}/children`,c+1)),{label:I,value:E,...N===void 0?{}:{description:N},...y===void 0?{}:{color:y},..._?{children:_}:{}}})};return s(e,n,1)}function rr(e,t,o){let n=`${o}/source`;if(e===void 0){ei.has(t)&&D("NATIVE_DATA_FIELD_SOURCE_REQUIRED",n);return}ei.has(t)||D("NATIVE_DATA_FIELD_SOURCE_TYPE_INVALID",n);let i=pe(e,n);ge(i,["kind","resourceCode","labelField","searchFields","descriptionFields","snapshotFields","filters","pageSize","loadMode"],n),i.kind!=="resource"&&D("NATIVE_DATA_FIELD_SOURCE_KIND_INVALID",`${n}/kind`);let s=Ee(i.resourceCode,`${n}/resourceCode`,64);xn.test(s)||D("NATIVE_RESOURCE_CODE_INVALID",`${n}/resourceCode`);let a=be(i.labelField,`${n}/labelField`),r=vn(i.searchFields,`${n}/searchFields`,10),c=vn(i.descriptionFields,`${n}/descriptionFields`,10),l=vn(i.snapshotFields,`${n}/snapshotFields`,50),p=Ge(i.pageSize,`${n}/pageSize`,1,100),d;i.loadMode!==void 0&&(["search","all"].includes(String(i.loadMode))||D("NATIVE_DATA_FIELD_SOURCE_LOAD_MODE_INVALID",`${n}/loadMode`),d=i.loadMode);let u=ar(i.filters,`${n}/filters`);return{kind:"resource",resourceCode:s,labelField:a,...r?{searchFields:r}:{},...c?{descriptionFields:c}:{},...l?{snapshotFields:l}:{},...u?{filters:u}:{},...p===void 0?{}:{pageSize:p},...d?{loadMode:d}:{}}}function ar(e,t){if(e!==void 0)return(!Array.isArray(e)||e.length>20)&&D("NATIVE_DATA_FIELD_SOURCE_FILTERS_INVALID",t),e.map((o,n)=>{let i=`${t}/${n}`,s=pe(o,i),a=Object.prototype.hasOwnProperty.call(s,"value"),r=Object.prototype.hasOwnProperty.call(s,"binding");ge(s,a?["field","operator","value"]:["field","operator","binding"],i),a===r&&D("NATIVE_DATA_FIELD_SOURCE_FILTER_VALUE_INVALID",i);let c=be(s.field,`${i}/field`);["eq","in"].includes(String(s.operator))||D("NATIVE_DATA_FIELD_SOURCE_FILTER_OPERATOR_INVALID",`${i}/operator`);let l=s.operator;if(a)return{field:c,operator:l,value:s.value};let p=pe(s.binding,`${i}/binding`);return ge(p,["kind","field"],`${i}/binding`),p.kind!=="field"&&D("NATIVE_DATA_FIELD_SOURCE_BINDING_KIND_INVALID",`${i}/binding/kind`),{field:c,operator:l,binding:{kind:"field",field:be(p.field,`${i}/binding/field`)}}})}function cr(e,t,o){let n={};if(e.maxLength!==void 0&&(["text.short","text.long","text.rich"].includes(t)||D("NATIVE_DATA_FIELD_MAX_LENGTH_TYPE_INVALID",`${o}/maxLength`),n.maxLength=jt(e.maxLength,`${o}/maxLength`,1,1e6)),(e.precision!==void 0||e.scale!==void 0)&&((t!=="number.decimal"||e.precision===void 0)&&D("NATIVE_DATA_FIELD_DECIMAL_CONFIG_INVALID",o),n.precision=jt(e.precision,`${o}/precision`,1,1e3),n.scale=e.scale===void 0?0:jt(e.scale,`${o}/scale`,0,n.precision)),e.min!==void 0||e.max!==void 0){["number.integer","number.decimal"].includes(t)||D("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_TYPE_INVALID",o);let i=ti(e.min,`${o}/min`),s=ti(e.max,`${o}/max`);t==="number.integer"&&[i,s].some(a=>a!==void 0&&!Number.isSafeInteger(a))&&D("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",o),i!==void 0&&s!==void 0&&i>s&&D("NATIVE_DATA_FIELD_NUMERIC_BOUNDS_INVALID",o),i!==void 0&&(n.min=i),s!==void 0&&(n.max=s)}return e.timePrecision!==void 0&&((t!=="time"||!["minute","second"].includes(e.timePrecision))&&D("NATIVE_DATA_FIELD_TIME_PRECISION_INVALID",`${o}/timePrecision`),n.timePrecision=e.timePrecision),n}function dr(e,t,o){if(e===void 0)return;let n=`${o}/file`;["file","image","signature"].includes(t)||D("NATIVE_DATA_FIELD_FILE_TYPE_INVALID",n);let i=pe(e,n);ge(i,["maxCount","maxSizeMb","accept"],n);let s=Ge(i.maxCount,`${n}/maxCount`,1,100);t==="signature"&&s!==void 0&&s!==1&&D("NATIVE_DATA_FIELD_SIGNATURE_COUNT_INVALID",`${n}/maxCount`);let a=Ge(i.maxSizeMb,`${n}/maxSizeMb`,1,1024),r;return i.accept!==void 0&&((!Array.isArray(i.accept)||i.accept.length>50)&&D("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${n}/accept`),r=i.accept.map((c,l)=>Ee(c,`${n}/accept/${l}`,255)),new Set(r).size!==r.length&&D("NATIVE_DATA_FIELD_FILE_ACCEPT_INVALID",`${n}/accept`)),{...s===void 0?{}:{maxCount:s},...a===void 0?{}:{maxSizeMb:a},...r===void 0?{}:{accept:r}}}function lr(e,t,o){let n=`${o}/serial`;if(e===void 0){t==="serial-number"&&D("NATIVE_DATA_FIELD_SERIAL_REQUIRED",n);return}t!=="serial-number"&&D("NATIVE_DATA_FIELD_SERIAL_TYPE_INVALID",n);let i=pe(e,n);ge(i,["prefix","digits","start"],n);let s=Wt(i.prefix,`${n}/prefix`,64),a=Ge(i.digits,`${n}/digits`,1,32),r=Ge(i.start,`${n}/start`,0,Number.MAX_SAFE_INTEGER);return{...s===void 0?{}:{prefix:s},...a===void 0?{}:{digits:a},...r===void 0?{}:{start:r}}}function ur(e,t,o){let n=`${o}/subtable`;if(e===void 0){t==="subtable"&&D("NATIVE_DATA_FIELD_SUBTABLE_REQUIRED",n);return}t!=="subtable"&&D("NATIVE_DATA_FIELD_SUBTABLE_TYPE_INVALID",n);let i=pe(e,n);ge(i,["resourceCode","foreignKey","orderField","maxRows"],n);let s=Ee(i.resourceCode,`${n}/resourceCode`,64);xn.test(s)||D("NATIVE_RESOURCE_CODE_INVALID",`${n}/resourceCode`);let a=be(i.foreignKey,`${n}/foreignKey`),r=be(i.orderField,`${n}/orderField`);r===a&&D("NATIVE_DATA_FIELD_SUBTABLE_ORDER_FIELD_INVALID",`${n}/orderField`);let c=Ge(i.maxRows,`${n}/maxRows`,1,100);return{resourceCode:s,foreignKey:a,orderField:r,...c===void 0?{}:{maxRows:c}}}function vn(e,t,o){if(e===void 0)return;(!Array.isArray(e)||e.length>o)&&D("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t);let n=e.map((i,s)=>be(i,`${t}/${s}`));return new Set(n).size!==n.length&&D("NATIVE_DATA_FIELD_SOURCE_FIELDS_INVALID",t),n}function be(e,t){let o=Ee(e,t,63);return ni.test(o)||D("NATIVE_FIELD_CODE_INVALID",t),o}function pe(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&D("NATIVE_OBJECT_REQUIRED",t),e}function ge(e,t,o){let n=new Set(t);for(let i of Object.keys(e))n.has(i)||D("NATIVE_PROPERTY_UNKNOWN",`${o}/${i}`)}function Ee(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&D("NATIVE_STRING_INVALID",t),e}function Wt(e,t,o){if(e!==void 0)return(typeof e!="string"||e.length>o)&&D("NATIVE_STRING_INVALID",t),e}function Ln(e,t){if(e!==void 0)return typeof e!="boolean"&&D("NATIVE_BOOLEAN_REQUIRED",t),e}function Ge(e,t,o,n){if(e!==void 0)return jt(e,t,o,n)}function ti(e,t){if(e!==void 0)return(typeof e!="number"||!Number.isFinite(e))&&D("NATIVE_NUMBER_REQUIRED",t),e}function jt(e,t,o,n){return(!Number.isSafeInteger(e)||Number(e)<o||Number(e)>n)&&D("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function D(e,t){throw new Ae(e,t)}var Mn=["created_by","updated_by","created_at","updated_at"];function ze(e){return Mn.includes(e)}function Bn(e){return Mn.some(t=>Object.prototype.hasOwnProperty.call(e.fieldPolicies||{},t))}var si=Ut.map(e=>e.code);function Kn(e){return si.includes(e)}var ci=["eq","neq","gt","gte","lt","lte","contains","startsWith","endsWith","in","between","has","hasAny","hasAll","overlaps","containedBy","jsonContains","isEmpty","isNotEmpty"],fr=new Set(ci);function pr(e){return fr.has(String(e))}var qn=["eq","neq","contains","startsWith","endsWith","in","isEmpty","isNotEmpty"],_t=["eq","neq","gt","gte","lt","lte","between","in","isEmpty"],mr=["eq","neq","in","isEmpty"],Bt=["eq","neq","in","isEmpty","isNotEmpty"],He=["has","hasAny","hasAll","isEmpty","isNotEmpty"],ri=["overlaps","contains","containedBy","isEmpty"],Jn=["jsonContains","isEmpty","isNotEmpty"],Gn=["isEmpty","isNotEmpty"],_r={"text.short":qn,"text.long":qn,"text.rich":qn,"number.integer":_t,"number.decimal":_t,boolean:mr,date:_t,time:_t,datetime:_t,"date-range":ri,"datetime-range":ri,"option.single":Bt,"option.multiple":He,"cascade.single":He,"cascade.multiple":He,"user.single":Bt,"user.multiple":He,"department.single":Bt,"department.multiple":He,"resource-ref.single":Bt,"resource-ref.multiple":He,file:Gn,image:Gn,signature:Gn,address:Jn,location:Jn,uuid:["eq","neq","in","isEmpty"],json:Jn,"serial-number":["eq","neq","in","contains","startsWith"],subtable:[]},gr=new Set(["text.short","text.long","text.rich","option.single","user.single","department.single","resource-ref.single","serial-number"]),Ar=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image","signature","address","location","json","subtable"]);function zn(e){return _r[e]}function Er(e,t){return zn(e).includes(t)}function Kt(e){return gr.has(e)}function Ye(e){return!Ar.has(e)}function Hn(e){return zn(e).length>0}var ai=new Set(["number.integer","number.decimal"]),di=new Set(["text.short","text.long","number.integer","number.decimal","date","time","datetime","serial-number"]),Ir=new Set([...di,"boolean","uuid"]),yr=new Set(["option.single","user.single","department.single","resource-ref.single"]);function br(e,t){return t==="sum"||t==="avg"?ai.has(e)?{valueExpression:"column",numericResult:!0}:null:t==="min"||t==="max"?di.has(e)?{valueExpression:"column",numericResult:ai.has(e)}:null:yr.has(e)?{valueExpression:"snapshot-value",numericResult:!0}:Ir.has(e)?{valueExpression:"column",numericResult:!0}:null}var Jt=["version","maxBytes","fields"];function Xn(e,t){if(e===void 0)return;let o=Yn(e,t);li(o,Jt,t);let n=qt(o.version,`${t}/version`,1,1e6),i=qt(o.maxBytes,`${t}/maxBytes`,2,196608);(!n||!i)&&de("NATIVE_DATA_DRAFT_STATE_SCHEMA_INVALID",t);let s=Yn(o.fields,`${t}/fields`),a=Object.entries(s);(!a.length||a.length>50)&&de("NATIVE_DATA_DRAFT_STATE_FIELDS_INVALID",`${t}/fields`);for(let[r,c]of a){let l=`${t}/fields/${r}`;/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(r)||de("NATIVE_DATA_DRAFT_STATE_FIELD_CODE_INVALID",l);let p=Yn(c,l),d=ui(p.type,`${l}/type`,32),u=d==="string"?["type","required","maxLength","enum"]:d==="json.object"?["type","required","maxBytes"]:["type","required"];if(["string","number","integer","boolean","json.object"].includes(d)||de("NATIVE_DATA_DRAFT_STATE_FIELD_TYPE_INVALID",`${l}/type`),li(p,u,l),Or(p.required,`${l}/required`),d==="string"){let g=qt(p.maxLength,`${l}/maxLength`,1,196608);g||de("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",l),p.enum!==void 0&&Nr(p.enum,`${l}/enum`,100,!1).some(E=>E.length>g)&&de("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",`${l}/enum`)}else if(d==="json.object"){let g=qt(p.maxBytes,`${l}/maxBytes`,2,65536);(!g||g>i)&&de("NATIVE_DATA_DRAFT_STATE_FIELD_INVALID",l)}}}function Nr(e,t,o,n){(!Array.isArray(e)||!n&&e.length===0||e.length>o)&&de("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let i=e.map((s,a)=>ui(s,`${t}/${a}`,255));return new Set(i).size!==i.length&&de("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),i}function Yn(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&de("NATIVE_OBJECT_REQUIRED",t),e}function li(e,t,o){let n=new Set(t);for(let i of Object.keys(e))n.has(i)||de("NATIVE_PROPERTY_UNKNOWN",`${o}/${i}`)}function ui(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&de("NATIVE_STRING_INVALID",t),e}function Or(e,t){e!==void 0&&typeof e!="boolean"&&de("NATIVE_BOOLEAN_REQUIRED",t)}function qt(e,t,o,n){return(!Number.isSafeInteger(e)||Number(e)<o||Number(e)>n)&&de("NATIVE_INTEGER_INVALID",t),Number(e)}function de(e,t){throw new Ae(e,t)}var Tr=500,Ce={surface:["mutationOwner","generated","fields","list","form","detail","mobile","views"],generated:["list","detail","create","update","delete"],field:["label","type","widget","section","requiredHint","system","hidden","readCapabilities","createCapabilities","updateCapabilities","maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","maxCount","maxSizeMb","accept","options","list","searchable","sortable","source","userCandidates","timePrecision","serial","subtable"],list:["actions","fieldOrder","defaultPageSize","searchableFields","filterFields","defaultSort"],defaultSort:["field","order"],form:["layout","fieldOrder","draftState"],detail:["layout","fieldOrder"],layout:["layout","fieldOrder","draftState"],draftState:Jt,mobile:["enabled"]},hr={"text.short":["text","email","phone"],"text.long":["textarea"],"text.rich":["rich-text"],"number.integer":["number","rating"],"number.decimal":["number","money","percent"],boolean:["switch"],date:["date"],time:["time"],datetime:["datetime"],"date-range":["date-range"],"datetime-range":["datetime-range"],"option.single":["select","radio"],"option.multiple":["multi-select","checkbox"],"cascade.single":["cascade"],"cascade.multiple":["cascade"],"user.single":["directory-user"],"user.multiple":["directory-user"],"department.single":["directory-department","scope"],"department.multiple":["directory-department","scope"],"resource-ref.single":["select","radio","resource"],"resource-ref.multiple":["multi-select","checkbox","resource"],file:["attachment"],image:["image"],signature:["signature"],address:["address"],location:["location"],uuid:["readonly"],json:["json"],"serial-number":["readonly"],subtable:["subtable"]};function Gt(e,t,o){if(e===void 0)return;let n=re(e,o);Ne(n,Ce.surface,o);let i=n.mutationOwner===void 0?"native":Se(n.mutationOwner,`${o}/mutationOwner`,16);["native","action","readonly","workflow","queued-command"].includes(i)||j("NATIVE_DATA_SURFACE_MUTATION_OWNER_INVALID",`${o}/mutationOwner`);let s=n.generated===void 0?{}:re(n.generated,`${o}/generated`);Ne(s,Ce.generated,`${o}/generated`);for(let c of Ce.generated)Zn(s[c],`${o}/generated/${c}`);if(i!=="native")for(let c of["create","update","delete"])s[c]===!0&&j("NATIVE_DATA_SURFACE_MUTATION_OWNER_CONFLICT",`${o}/generated/${c}`);let a=new Map(t.map(c=>[c.code,c])),r=re(n.fields,`${o}/fields`);for(let c of Object.keys(r))a.has(c)||j("NATIVE_DATA_SURFACE_FIELD_MISSING",`${o}/fields/${c}`);for(let c of t)Object.prototype.hasOwnProperty.call(r,c.code)||j("NATIVE_DATA_SURFACE_FIELD_REQUIRED",`${o}/fields/${c.code}`),Cr(r[c.code],c,`${o}/fields/${c.code}`);for(let c of["create","update"]){let l=s[c]??i==="native",p=t.some(d=>{let u=re(r[d.code],`${o}/fields/${d.code}`);return pi(d,u,c)});l&&!p&&j("NATIVE_DATA_SURFACE_WRITABLE_FIELDS_REQUIRED",`${o}/generated/${c}`)}if(Sr(n.list,a,`${o}/list`),fi(n.form,a,`${o}/form`,"form"),fi(n.detail,a,`${o}/detail`,"detail"),n.mobile!==void 0){let c=re(n.mobile,`${o}/mobile`);Ne(c,Ce.mobile,`${o}/mobile`),Zn(c.enabled,`${o}/mobile/enabled`)}Rr(n,t,o)}function zt(e,t){let o=e.views?.find(i=>i.code===t);o||j("NATIVE_DATA_VIEW_NOT_FOUND",`/surface/views/${t}`);let n=new Map((o.sections||[]).flatMap(i=>i.fields.map(s=>[s,i.title])));return{mutationOwner:e.mutationOwner||"native",generated:o.generated,list:o.list,form:o.form,detail:o.detail,mobile:o.mobile,fields:Object.fromEntries(Object.entries(e.fields).map(([i,s])=>{let a={...s};delete a.section;let r=n.get(i);return[i,{...a,...r?{section:r}:{},list:o.list.fieldOrder.includes(i)}]}))}}function Rr(e,t,o){if(e.views===void 0)return;(!Array.isArray(e.views)||e.views.length>20)&&j("NATIVE_DATA_VIEWS_LIMIT_INVALID",`${o}/views`);let n=new Set;e.views.forEach((i,s)=>{let a=`${o}/views/${s}`,r=re(i,a);Ne(r,["code","name","generated","list","form","detail","mobile","sections"],a);let c=Se(r.code,`${a}/code`,64);(!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(c)||n.has(c))&&j("NATIVE_DATA_VIEW_CODE_INVALID",`${a}/code`),n.add(c),Se(r.name,`${a}/name`,255),re(r.generated,`${a}/generated`),re(r.mobile,`${a}/mobile`);for(let p of["list","detail","create","update","delete"])typeof r.generated[p]!="boolean"&&j("NATIVE_DATA_VIEW_OPERATION_INVALID",`${a}/generated/${p}`);typeof r.mobile.enabled!="boolean"&&j("NATIVE_DATA_VIEW_MOBILE_INVALID",`${a}/mobile/enabled`);for(let p of["list","form","detail"]){let d=re(r[p],`${a}/${p}`),u=Xe(d.fieldOrder,`${a}/${p}/fieldOrder`,500,!0);for(let g of u){let I=e.fields[g];(!I||(I.hidden??I.system)===!0)&&j("NATIVE_DATA_VIEW_FIELD_INVALID",`${a}/${p}/fieldOrder`)}}if(r.sections!==void 0){(!Array.isArray(r.sections)||r.sections.length>100)&&j("NATIVE_DATA_VIEW_SECTIONS_INVALID",`${a}/sections`);let p=new Set;r.sections.forEach((d,u)=>{let g=`${a}/sections/${u}`,I=re(d,g);Ne(I,["title","fields"],g),Se(I.title,`${g}/title`,255);for(let E of Xe(I.fields,`${g}/fields`,100,!0)){let N=e.fields[E];(!N||(N.hidden??N.system)===!0||p.has(E))&&j("NATIVE_DATA_VIEW_FIELD_INVALID",`${g}/fields`),p.add(E)}})}let l=zt(e,c);if(Gt(l,t,a),r.generated.create!==!1&&(e.mutationOwner||"native")==="native")for(let p of t)mt(p,e.fields[p.code])&&pi(p,e.fields[p.code],"create")&&!r.form.fieldOrder.includes(p.code)&&j("NATIVE_DATA_VIEW_CREATE_REQUIRED_FIELD_MISSING",`${a}/form/fieldOrder`)})}function pi(e,t,o){if(e.type==="serial-number"||t.system===!0)return!1;let n=t[`${o}Capabilities`];return Array.isArray(n)&&n.length>0}function Cr(e,t,o){let n=re(e,o);Ne(n,Ce.field,o),Se(n.label,`${o}/label`,500),n.type!==t.type&&j("NATIVE_DATA_SURFACE_FIELD_TYPE_MISMATCH",`${o}/type`);let i=Se(n.widget,`${o}/widget`,64);hr[t.type].includes(i)||j("NATIVE_DATA_SURFACE_WIDGET_INCOMPATIBLE",`${o}/widget`),$r(n.section,`${o}/section`,255);for(let s of["requiredHint","system","hidden","list","searchable","sortable"])Zn(n[s],`${o}/${s}`);n.searchable===!0&&!Kt(t.type)&&j("NATIVE_DATA_SURFACE_SEARCH_UNSUPPORTED",`${o}/searchable`),n.sortable===!0&&!Ye(t.type)&&j("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${o}/sortable`);for(let s of["readCapabilities","createCapabilities","updateCapabilities"])Xe(n[s],`${o}/${s}`,100,!0);if(n.maxCount!==void 0&&(!Number.isSafeInteger(n.maxCount)||Number(n.maxCount)<1||Number(n.maxCount)>100)&&j("NATIVE_DATA_SURFACE_MAX_COUNT_INVALID",`${o}/maxCount`),n.maxSizeMb!==void 0&&(!Number.isSafeInteger(n.maxSizeMb)||Number(n.maxSizeMb)<1||Number(n.maxSizeMb)>1024)&&j("NATIVE_DATA_SURFACE_MAX_SIZE_INVALID",`${o}/maxSizeMb`),n.accept!==void 0){let s=Array.isArray(n.accept)?n.accept:[n.accept];Xe(s,`${o}/accept`,50,!1)}for(let s of["maxLength","precision","scale","exactDecimal","min","max","rangeBoundary","options","source","userCandidates","timePrecision","serial","subtable"])wr(n,t,s,o);Dr(n,t,o)}function Sr(e,t,o){if(e===void 0)return;let n=re(e,o);if(Ne(n,Ce.list,o),n.actions!==void 0){let i=re(n.actions,`${o}/actions`);Ne(i,["import","export"],`${o}/actions`);for(let s of["import","export"])i[s]!==void 0&&typeof i[s]!="boolean"&&j("NATIVE_DATA_SURFACE_LIST_ACTION_INVALID",`${o}/actions/${s}`)}if(n.fieldOrder!==void 0)for(let i of Xe(n.fieldOrder,`${o}/fieldOrder`,500,!0))t.has(i)||j("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${o}/fieldOrder`);n.defaultPageSize!==void 0&&(!Number.isSafeInteger(n.defaultPageSize)||Number(n.defaultPageSize)<1||Number(n.defaultPageSize)>200)&&j("NATIVE_DATA_SURFACE_PAGE_SIZE_INVALID",`${o}/defaultPageSize`);for(let[i,s]of[["searchableFields",Kt],["filterFields",Hn]]){if(n[i]===void 0)continue;let a=Xe(n[i],`${o}/${i}`,100,!0);for(let r of a){let c=t.get(r);(!c||!s(c.type))&&j("NATIVE_DATA_SURFACE_LIST_FIELD_INVALID",`${o}/${i}`)}}if(n.defaultSort!==void 0){let i=re(n.defaultSort,`${o}/defaultSort`);Ne(i,Ce.defaultSort,`${o}/defaultSort`);let s=Se(i.field,`${o}/defaultSort/field`,63),a=t.get(s);!Kn(s)&&(!a||!Ye(a.type))&&j("NATIVE_DATA_SURFACE_SORT_UNSUPPORTED",`${o}/defaultSort/field`),i.order!==void 0&&!["asc","desc"].includes(i.order)&&j("NATIVE_DATA_SURFACE_SORT_ORDER_INVALID",`${o}/defaultSort/order`)}}function fi(e,t,o,n){if(e===void 0)return;let i=re(e,o);if(Ne(i,Ce[n],o),i.layout!==void 0&&!["flat","sections"].includes(i.layout)&&j("NATIVE_DATA_SURFACE_LAYOUT_INVALID",`${o}/layout`),i.fieldOrder!==void 0){let s=`${o}/fieldOrder`;(!Array.isArray(i.fieldOrder)||i.fieldOrder.length>t.size||i.fieldOrder.length>Tr)&&j("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",s);let a=i.fieldOrder.map((r,c)=>Se(r,`${s}/${c}`,63));new Set(a).size!==a.length&&j("NATIVE_DATA_SURFACE_FIELD_ORDER_INVALID",s),a.forEach((r,c)=>{t.has(r)||j("NATIVE_DATA_SURFACE_FIELD_ORDER_FIELD_MISSING",`${s}/${c}`)})}n==="form"&&Xn(i.draftState,`${o}/draftState`)}function wr(e,t,o,n){e[o]===void 0&&t[o]===void 0||((e[o]===void 0||t[o]===void 0)&&j("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${o}`),ne(e[o])!==ne(t[o])&&j("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${n}/${o}`))}function Dr(e,t,o){let n=t.file||{},i={...e.maxCount===void 0?{}:{maxCount:e.maxCount},...e.maxSizeMb===void 0?{}:{maxSizeMb:e.maxSizeMb},...e.accept===void 0?{}:{accept:Qn(e.accept)}};for(let s of["maxCount","maxSizeMb","accept"]){if(i[s]===void 0&&n[s]===void 0)continue;(i[s]===void 0||n[s]===void 0)&&j("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${s}`);let a=s==="accept"?Qn(i[s]):i[s],r=s==="accept"?Qn(n[s]):n[s];ne(a)!==ne(r)&&j("NATIVE_DATA_SURFACE_FIELD_PROJECTION_MISMATCH",`${o}/${s}`)}}function Qn(e){return(Array.isArray(e)?[...e]:[e]).sort((t,o)=>{let n=String(t),i=String(o);return n===i?0:n<i?-1:1})}function Xe(e,t,o,n){(!Array.isArray(e)||!n&&e.length===0||e.length>o)&&j("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t);let i=e.map((s,a)=>Se(s,`${t}/${a}`,255));return new Set(i).size!==i.length&&j("NATIVE_DATA_SURFACE_STRING_ARRAY_INVALID",t),i}function re(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&j("NATIVE_OBJECT_REQUIRED",t),e}function Ne(e,t,o){let n=new Set(t);for(let i of Object.keys(e))n.has(i)||j("NATIVE_PROPERTY_UNKNOWN",`${o}/${i}`)}function Se(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&j("NATIVE_STRING_INVALID",t),e}function $r(e,t,o){e!==void 0&&(typeof e!="string"||e.length>o)&&j("NATIVE_STRING_INVALID",t)}function Zn(e,t){e!==void 0&&typeof e!="boolean"&&j("NATIVE_BOOLEAN_REQUIRED",t)}function j(e,t){throw new Ae(e,t)}var Qe=class extends Error{constructor(o,n){super(`${o}: ${n}`);this.pointer=o;this.reason=n}pointer;reason;code="NATIVE_MANAGED_CONCURRENCY_INVALID"};function eo(e,t,o){if(e===void 0)return;let n=(_,A)=>{throw new Qe(_,A)},i=(_,A,T)=>((!_||typeof _!="object"||Array.isArray(_)||Object.keys(_).some(f=>!T.includes(f)))&&n(A,"object contains unsupported properties"),_),s=(_,A,T,f)=>{(!Number.isSafeInteger(_)||_<A||_>T)&&n(f,`expected integer ${A}..${T}`)},a=(_,A)=>{(typeof _!="string"||!/^[a-z][a-z0-9_-]{0,63}$/.test(_))&&n(A,"invalid code")},r=(_,A,T)=>((!Array.isArray(_)||_.length>A)&&n(T,"array exceeds bound"),_),c=(_,A)=>{let T=t.find(f=>f.code===_);return T||n(A,"unknown resource"),T},l=(_,A,T)=>{let f=_.schema.fields.find(b=>b.code===A);return!f&&A!=="id"&&n(T,"unknown field"),f},p=(_,A,T=!1)=>{i(_,A,Object.keys(_||{})),Object.keys(_).length>8&&n(A,"at most eight parameters");for(let[f,b]of Object.entries(_))if(a(f,A),i(b,A,["type","values","minimum","maximum","minLength","maxLength"]),b.type==="uuid")Object.keys(b).length!==1&&n(A,"uuid has no options");else if(T&&b.type==="boolean")i(b,A,["type"]);else if(T&&b.type==="string"&&b.values===void 0)i(b,A,["type","minLength","maxLength"]),s(b.maxLength,1,256,A),b.minLength!==void 0&&s(b.minLength,0,b.maxLength,A);else if(b.type==="string"){i(b,A,["type","values"]);let h=r(b.values,100,A);(!h.length||h.some(C=>typeof C!="string"||C.length>128)||new Set(h).size!==h.length)&&n(A,"finite string values required")}else b.type==="integer"?(i(b,A,["type","minimum","maximum"]),s(b.minimum,0,1e6,A),s(b.maximum,b.minimum,b.minimum+1e3,A)):n(A,"unsupported parameter type")},d=(_,A,T,f=!1)=>{i(_,T,["from","key","value"]),!(_.from==="input"&&Object.keys(_).length===2&&Object.hasOwn(A,_.key))&&((_.from==="actor"||f&&_.from==="allocation")&&Object.keys(_).length===1||_.from==="literal"&&Object.keys(_).length===2&&Object.hasOwn(_,"value")&&(_.value===null||["string","boolean"].includes(typeof _.value)||typeof _.value=="number"&&Number.isFinite(_.value))&&JSON.stringify(_.value).length<=512||n(T,"invalid binding"))},u=(_,A,T)=>{d(_,A,T),!(_.from==="input"&&A[_.key].type==="uuid")&&(_.from==="literal"&&typeof _.value=="string"&&/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(_.value)||n(T,"record and allocation identifiers require a UUID binding"))},g=(_,A,T)=>{d(_,A,T),!(_.from==="input"&&A[_.key].type==="integer"&&A[_.key].minimum>=1)&&(_.from==="literal"&&Number.isSafeInteger(_.value)&&_.value>=1||n(T,"expectedRevision requires a positive integer binding"))},I="/data/concurrency";JSON.stringify(e).length>131072&&n(I,"declaration exceeds 128 KiB");let E=i(e,I,["version","admission","reads","quotas","commands"]);E.version!==1&&n(I,"unsupported version"),i(E.admission,I,["perSecond","burst","maxInFlight"]),s(E.admission.perSecond,1,1e3,I),s(E.admission.burst,1,1e3,I),s(E.admission.maxInFlight,1,1e3,I);let N=(_,A)=>{let T=new Set;for(let f of _)a(f?.code,A),T.has(f.code)&&n(A,"duplicate code"),T.add(f.code)};N(r(E.reads,32,I),I),N(r(E.quotas,16,I),I),N(r(E.commands,32,I),I);for(let _ of E.reads){let A=`${I}/reads/${_.code}`;i(_,A,["code","resourceCode","parameters","select","where","limit","scope","freshSeconds","staleSeconds","maxKeys","sourcePerSecond","dependencies"]);let T=c(_.resourceCode,A);p(_.parameters,A),["subject","application"].includes(_.scope)||n(A,"invalid cache scope"),_.scope==="application"&&T.dataPolicyCode&&n(A,"shared cache cannot bypass a row policy");let f=r(_.select,32,A);f.length||n(A,"select required"),f.forEach(h=>l(T,h,A));let b=r(_.dependencies,64,A);b.forEach(h=>l(T,h,A));for(let h of r(_.where||[],8,A))i(h,A,["field","value"]),l(T,h.field,A),d(h.value,_.parameters,A),_.scope==="application"&&h.value.from==="actor"&&n(A,"actor requires subject cache"),b.includes(h.field)||n(A,"filter dependency missing");f.some(h=>!b.includes(h))&&n(A,"selected field dependency missing"),s(_.limit,1,100,A),s(_.freshSeconds,1,300,A),s(_.staleSeconds,0,300,A),s(_.maxKeys,1,1e4,A),s(_.sourcePerSecond,1,20,A)}for(let _ of E.quotas){let A=`${I}/quotas/${_.code}`;i(_,A,["code","sourceResource","capacityField","allocationResource","allocationField","reservationSeconds"]);let T=c(_.sourceResource,A),f=c(_.allocationResource,A);l(T,_.capacityField,A)?.type!=="number.integer"&&n(A,"capacity must be an integer"),(l(f,_.allocationField,A)?.type!=="uuid"||l(f,_.allocationField,A)?.nullable!==!1)&&n(A,"allocation reference must be a uuid"),f.surface?.mutationOwner!=="queued-command"&&n(A,"allocation model must be command owned"),_.reservationSeconds!==void 0&&s(_.reservationSeconds,10,86400,A)}new Set(E.quotas.map(_=>_.allocationResource)).size!==E.quotas.length&&n(I,"an allocation model has exactly one pool owner");for(let _ of E.commands){let A=`${I}/commands/${_.code}`;i(_,A,["code","mode","intake","execution","capability","parameters","resourceKey","admission","deadlineSeconds","guards","operations","quota"]),_.mode!==void 0&&!["permit","durable"].includes(_.mode)&&n(A,"unsupported mode");let T=_.mode==="durable";if(p(_.parameters,A,T),d(_.resourceKey,_.parameters,A),o.some(f=>f.code===_.capability)||n(A,"command capability must be declared"),i(_.admission,A,["perSecond","burst","maxInFlight","maxQueue","maxWaitSeconds","permitSeconds"]),s(_.admission.perSecond,1,E.admission.perSecond,A),s(_.admission.burst,1,E.admission.burst,A),s(_.admission.maxInFlight,1,E.admission.maxInFlight,A),s(_.admission.maxQueue,1,1e4,A),s(_.admission.maxWaitSeconds,1,3600,A),(!T||_.admission.permitSeconds!==void 0)&&s(_.admission.permitSeconds,5,60,A),s(_.deadlineSeconds,10,3600,A),T){(_.operations!==void 0||_.guards!==void 0||_.quota!==void 0)&&n(A,"backend-plan does not accept static operations, guards or quota"),i(_.intake,A,["perSecond","burst","maxInFlight"]);for(let h of["perSecond","burst","maxInFlight"])s(_.intake[h],1,1e3,A);let f=i(_.execution,A,["kind","handlerCode","timeoutMs","resources","directory"]);f.kind!=="backend-plan"&&n(A,"durable requires backend-plan"),a(f.handlerCode,A),s(f.timeoutMs,100,3e4,A);let b=r(f.resources,32,A);b.length||n(A,"execution resources required"),new Set(b.map(h=>h.resourceCode)).size!==b.length&&n(A,"duplicate execution resource");for(let h of b){i(h,A,["resourceCode","readFields","writeOperations","writeFields"]);let C=c(h.resourceCode,A);for(let k of["readFields","writeFields"]){let W=r(h[k],64,A);new Set(W).size!==W.length&&n(A,"duplicate field"),W.forEach(v=>{k==="readFields"&&jn.has(v)||l(C,v,A)})}let $=r(h.writeOperations,3,A);(new Set($).size!==$.length||$.some(k=>!["create","update","increment"].includes(k)))&&n(A,"unsupported execution operation"),h.writeFields.some(k=>["id","revision","created_by","updated_by","created_at","updated_at"].includes(k))&&n(A,"record metadata is platform owned"),!$.length&&h.writeFields.length&&n(A,"write fields require an operation"),$.length&&!h.writeFields.length&&n(A,"write operations require fields"),E.quotas.some(k=>k.allocationResource===h.resourceCode)&&$.length&&n(A,"allocation references remain owned by their pool command")}if(f.directory!==void 0){i(f.directory,A,["mode","fields"]),f.directory.mode!=="current-initiator"&&n(A,"only current initiator allowed");let h=r(f.directory.fields,5,A);(!h.length||new Set(h).size!==h.length||h.some(C=>!["displayName","employeeNumber","primaryDepartment","departments","phone"].includes(C)))&&n(A,"unsupported directory fields")}continue}(_.execution!==void 0||_.intake!==void 0)&&n(A,"execution and intake require durable mode");for(let f of r(_.guards||[],8,A)){i(f,A,["resourceCode","id","conditions"]);let b=c(f.resourceCode,A);u(f.id,_.parameters,A);for(let h of r(f.conditions,16,A)){i(h,A,["kind","field","operator","value"]);let C=l(b,h.field,A);["eq","neq","lt","lte","gt","gte"].includes(h.operator)||n(A,"unsupported guard"),h.kind==="database-now"?(C?.type!=="datetime"||!["lt","lte","gt","gte"].includes(h.operator)||h.value!==void 0)&&n(A,"database-now requires datetime and an ordering operator"):(h.kind!==void 0&&h.kind!=="value"&&n(A,"unsupported condition kind"),d(h.value,_.parameters,A))}}for(let f of r(_.operations,8,A)){i(f,A,["operation","resourceCode","id","expectedRevision","data"]);let b=c(f.resourceCode,A);b.surface?.mutationOwner!=="queued-command"&&n(A,"command mutations require command owned models");let h=E.quotas.find(C=>C.allocationResource===f.resourceCode);h&&(f.operation==="create"?_.quota?.action!=="allocate"||_.quota.pool!==h.code:Object.hasOwn(f.data||{},h.allocationField))&&n(A,"allocation references are owned by their pool command"),["create","update"].includes(f.operation)||n(A,"unsupported operation"),f.operation==="update"?(u(f.id,_.parameters,A),g(f.expectedRevision,_.parameters,A)):(f.id!==void 0||f.expectedRevision!==void 0)&&n(A,"create has no caller supplied id/revision"),i(f.data,A,Object.keys(f.data||{})),Object.keys(f.data).length>32&&n(A,"too many fields");for(let[C,$]of Object.entries(f.data))C==="id"&&n(A,"record identifiers are platform owned"),l(b,C,A),d($,_.parameters,A,_.quota?.action==="allocate")}if(_.quota){let f=i(_.quota,A,["pool","action","units","mode","allocation"]),b=E.quotas.find(h=>h.code===f.pool);b||n(A,"unknown quota pool"),u(_.resourceKey,_.parameters,A),f.action==="allocate"?(i(f,A,["pool","action","units","mode"]),s(f.units,1,1e3,A),(!["committed","reserved"].includes(f.mode)||f.mode==="reserved"&&!b.reservationSeconds)&&n(A,"invalid allocation mode"),(_.operations.length!==1||_.operations[0].operation!=="create"||_.operations[0].resourceCode!==b.allocationResource||_.operations[0].data[b.allocationField]?.from!=="allocation")&&n(A,"allocation must atomically create its bound business record")):["confirm","release"].includes(f.action)?(i(f,A,["pool","action","allocation"]),u(f.allocation,_.parameters,A),_.operations.length&&n(A,"lifecycle owns allocation state; business reference remains immutable")):n(A,"invalid quota action")}else _.operations.length||n(A,"operations required")}let y=E.commands.filter(_=>_.mode==="durable").map(_=>_.execution.handlerCode);return new Set(y).size!==y.length&&n(I,"handler code must be unique"),JSON.parse(JSON.stringify(E))}var xe=class extends Error{constructor(o,n){super(`\u91D1\u989D\u751F\u547D\u5468\u671F\u58F0\u660E\u65E0\u6548\uFF1A${n}\uFF08${o}\uFF09`);this.pointer=o;this.reason=n}pointer;reason;code="NATIVE_DECIMAL_LIFECYCLE_INVALID"},oo=["parentTransitions","childTransitions","fulfilledChildStatuses","lockedParentStatuses"],mi=["amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode","parentRelationValue","childRelationValue"],Yt=e=>!!(e&&typeof e=="object"&&!Array.isArray(e)),Ht=e=>Array.isArray(e)?e.filter(Yt):[],Oe=(e,t)=>{throw new xe(e,t)},to=e=>typeof e=="string"&&/^[A-Za-z0-9._:-]{1,128}$/.test(e),no=(e,t)=>e<t?-1:e>t?1:0;function Xt(e,t="/decimalReservationLifecycle"){if(e===void 0)return;if(!Yt(e)||Object.keys(e).some(i=>!oo.includes(i))||oo.some(i=>!Object.prototype.hasOwnProperty.call(e,i)))return Oe(t,"\u5FC5\u987B\u5B8C\u6574\u58F0\u660E\u56DB\u9879\u89C4\u5219\uFF0C\u4E0D\u80FD\u5305\u542B\u672A\u77E5\u5C5E\u6027");let o=i=>{let s=e[i];if(!Array.isArray(s)||s.length>64)return Oe(`${t}/${i}`,"\u72B6\u6001\u8FB9\u6700\u591A 64 \u6761");let a=new Set;return s.map((r,c)=>{let l=`${t}/${i}/${c}`;if(!Yt(r)||Object.keys(r).some(d=>d!=="from"&&d!=="to")||!to(r.from)||!to(r.to)||r.from===r.to)return Oe(l,"\u72B6\u6001\u8FB9\u5FC5\u987B\u5305\u542B\u4E0D\u540C\u7684\u6709\u6548 from/to");let p=JSON.stringify([r.from,r.to]);return a.has(p)?Oe(l,"\u72B6\u6001\u8FB9\u4E0D\u80FD\u91CD\u590D"):(a.add(p),{from:r.from,to:r.to})}).sort((r,c)=>no(r.from,c.from)||no(r.to,c.to))},n=i=>{let s=e[i];return!Array.isArray(s)||s.length<1||s.length>16||s.some(a=>!to(a))||new Set(s).size!==s.length?Oe(`${t}/${i}`,"\u72B6\u6001\u96C6\u5408\u5FC5\u987B\u5305\u542B 1 \u5230 16 \u4E2A\u4E0D\u91CD\u590D\u7684\u6709\u6548\u72B6\u6001"):[...s].sort(no)};return{parentTransitions:o("parentTransitions"),childTransitions:o("childTransitions"),fulfilledChildStatuses:n("fulfilledChildStatuses"),lockedParentStatuses:n("lockedParentStatuses")}}function io(e,t,o="/config/data/resources"){Ht(e).forEach((n,i)=>{let s=`${o}/${i}/decimalReservationLifecycle`,a=Xt(n.decimalReservationLifecycle,s);if(!a)return;let r=Ht(t).map(d=>d.platformAccess?.decimalReservation).filter(d=>Yt(d)&&d.resourceCode===n.code),c=r.find(d=>d.mode==="reserve");if(!c)return Oe(s,"\u9700\u8981\u540C\u8D44\u6E90\u5DF2\u58F0\u660E\u7684 reserve \u52A8\u4F5C\u6620\u5C04");if(mi.some(d=>typeof c[d]!="string")||r.some(d=>mi.some(u=>d[u]!==c[u])))return Oe(s,"\u540C\u8D44\u6E90\u989D\u5EA6\u52A8\u4F5C\u7684\u5B57\u6BB5\u6620\u5C04\u5FC5\u987B\u4E00\u81F4");let l=Ht(n.schema?.fields).find(d=>d.code===c.statusFieldCode);if(l?.type!=="option.single")return Oe(s,"\u989D\u5EA6\u72B6\u6001\u5B57\u6BB5\u5FC5\u987B\u4E3A option.single");let p=new Set(Ht(l.options).map(d=>d.value));for(let d of oo)if((d==="parentTransitions"||d==="childTransitions"?a[d].flatMap(g=>[g.from,g.to]):a[d]).some(g=>!p.has(g)))return Oe(`${s}/${d}`,"\u72B6\u6001\u5FC5\u987B\u6765\u81EA\u989D\u5EA6\u72B6\u6001\u5B57\u6BB5\u7684\u9009\u9879");if(r.some(d=>d.mode==="reserve"&&Array.isArray(d.eligibleParentStatuses)&&d.eligibleParentStatuses.some(u=>a.lockedParentStatuses.includes(String(u)))))return Oe(`${s}/lockedParentStatuses`,"\u9501\u5B9A\u7236\u72B6\u6001\u4E0D\u80FD\u5141\u8BB8\u65B0\u9884\u7559")})}var gi=require("crypto");var so=new Set(["option.single","user.single","department.single","resource-ref.single"]),kr=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","address","location","json"]),Ai=new Set(["option.multiple","cascade.single","cascade.multiple","user.multiple","department.multiple","resource-ref.multiple","file","image"]),Vr=new Set(["option.single","user.single","department.single","resource-ref.single","signature","address","location"]),Pr=new Set([...so,...Ai,"signature","address","location","json"]);function Fr(e,t){let o=new Set([...Array.isArray(t?.list?.searchableFields)?t.list.searchableFields:[],...Object.entries(t?.fields||{}).filter(([,n])=>n?.searchable===!0).map(([n])=>n)]);return e.map(n=>Ei(n,o.has(n.code))).sort((n,i)=>n.code.localeCompare(i.code))}function Ei(e,t=!1){let o=e.type==="date-range"||e.type==="datetime-range";if(o&&e.rangeBoundary!=="closed"&&e.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");return{code:e.code,type:e.type,nullable:!0,indexed:e.indexed===!0,storage:Jr(e),index:qr(e,t),...o?{rangeBoundary:e.rangeBoundary}:{},...e.type==="serial-number"?{serial:{prefix:e.serial?.prefix||"",digits:e.serial?.digits??6,start:e.serial?.start??1}}:{},...e.type==="subtable"&&e.subtable?{subtable:{resourceCode:e.subtable.resourceCode,foreignKey:e.subtable.foreignKey,orderField:e.subtable.orderField,maxRows:e.subtable.maxRows??20}}:{}}}function vr(e,t){if(t.type==="subtable")return null;let o=ae(t.code),n=Ii(e,t),i=[n?` DEFAULT ${n}`:"",Gr(o,t),xr(o,t)].join("");return`${o} ${t.storage}${i}`}function Lr(e,t){return Ii(e,t)}function xr(e,t){if(t.type!=="date-range"&&t.type!=="datetime-range")return"";if(t.rangeBoundary!=="closed"&&t.rangeBoundary!=="half-open")throw new Error("OPENXIANGDA_NATIVE_DATA_RANGE_BOUNDARY_INVALID");let o=t.type==="datetime-range"&&t.rangeBoundary==="closed";return` CHECK (${e} IS NULL OR (NOT isempty(${e}) AND lower(${e}) IS NOT NULL AND upper(${e}) IS NOT NULL AND lower_inc(${e}) AND ${o?"":"NOT "}upper_inc(${e})))`}function jr(e){return e.type==="serial-number"||pt(e.type)&&e.type!=="subtable"}function Wr(e,t){return t.filter(o=>o.type==="serial-number").map(o=>{let n=Zt(e,o.code),i=o.serial?.start??1;return`CREATE SEQUENCE IF NOT EXISTS ${n} AS bigint MINVALUE ${i} START WITH ${i} CACHE 1`})}function Ur(e,t){let o=Qt(e);return t.filter(n=>n.type==="serial-number").map(n=>`ALTER SEQUENCE ${Zt(e,n.code)} OWNED BY ${o}.${ae(n.code)}`)}function Mr(e,t){return t.filter(o=>o.type==="serial-number").map(o=>`GRANT USAGE, SELECT ON SEQUENCE ${Zt(e,o.code)} TO "openxiangda_data_api"`)}function Br(e,t){let o=Qt(e),n=[];for(let i of t){if(i.type==="subtable")continue;let s=ae(i.code),a=ae(we("idx",e,i.code,i.index));switch(i.index){case"btree":n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} (${s})`);break;case"btree-snapshot-expressions":{let r=ae(we("idx",e,i.code,"snapshot-value")),c=ae(we("idx",e,i.code,"snapshot-label"));n.push(`CREATE INDEX IF NOT EXISTS ${r} ON ${o} ((${s} ->> 'value'))`,`CREATE INDEX IF NOT EXISTS ${c} ON ${o} ((${s} ->> 'label'))`);break}case"gin-jsonb-path":n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} USING GIN (${s} jsonb_path_ops)`);break;case"gist-range":n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} USING GIST (${s})`);break;case"gin-trigram":{let r=so.has(i.type)?`((${s} ->> 'label')) gin_trgm_ops`:`${s} gin_trgm_ops`;n.push(`CREATE INDEX IF NOT EXISTS ${a} ON ${o} USING GIN (${r})`);break}case"none":break}if(i.type==="serial-number"){let r=ae(we("uidx",e,i.code,"serial"));n.push(`CREATE UNIQUE INDEX IF NOT EXISTS ${r} ON ${o} (${s})`)}}return n}function Kr(e,t,o,n){let i=Qt(e),s=Qt(t),a=ae(we("uidx",e,"environment_id","subtable-parent")),r=ae(we("idx",t,o,n,"subtable-child")),c=ae(we("fk",t,o,e)),l=ae(o),p=ae(n);return[`CREATE UNIQUE INDEX IF NOT EXISTS ${a} ON ${i} ("tenant_id", "app_code", "environment_key", "id")`,`CREATE INDEX IF NOT EXISTS ${r} ON ${s} ("tenant_id", "app_code", "environment_key", ${l}, ${p}, "id")`,`DO $native_subtable$ BEGIN
2
2
  ALTER TABLE ${s}
3
3
  ADD CONSTRAINT ${c}
4
4
  FOREIGN KEY ("tenant_id", "app_code", "environment_key", ${l})
5
5
  REFERENCES ${i} ("tenant_id", "app_code", "environment_key", "id")
6
6
  ON DELETE CASCADE;
7
7
  EXCEPTION WHEN duplicate_object THEN NULL;
8
- END $native_subtable$`]}function Ce(e,...t){return`${e}_${(0,Jo.createHash)("sha256").update(t.join(":")).digest("hex").slice(0,32)}`}function oe(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,62}$/.test(e))throw new Error("OPENXIANGDA_NATIVE_IDENTIFIER_INVALID");return`"${e}"`}function _r(e,t){return e.type==="subtable"?"none":t?"gin-trigram":e.indexed?["date-range","datetime-range"].includes(e.type)?"gist-range":qn.has(e.type)?"btree-snapshot-expressions":tr.has(e.type)?"gin-jsonb-path":"btree":"none"}function mr(e){switch(e.type){case"text.short":return`varchar(${e.maxLength??255})`;case"text.long":case"text.rich":return"text";case"number.integer":return"bigint";case"number.decimal":return`numeric(${e.precision??38},${e.scale??10})`;case"boolean":return"boolean";case"date":return"date";case"time":return"time(0)";case"datetime":return"timestamptz";case"date-range":return"daterange";case"datetime-range":return"tstzrange";case"uuid":return"uuid";case"serial-number":return"varchar(255)";case"subtable":return"child-resource";default:return or.has(e.type),"jsonb"}}function Ho(e,t){if(at(t.type)&&t.type!=="subtable")return"'[]'::jsonb";if(t.type!=="serial-number")return"";let o=qo(t.serial?.prefix||""),n=t.serial?.digits??6;return`(${o} || lpad(nextval(${qo(qt(e,t.code))})::text, ${n}, '0'))`}function gr(e,t){return zo.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'array')`:nr.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'object')`:""}function Gt(e){return`"app_data".${oe(e)}`}function qt(e,t){let o=Ce("seq",e,t);return`"app_data".${oe(o)}`}function qo(e){return`'${e.replace(/'/g,"''")}'`}var Xo=new Set(["option.single","option.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple"]),Ar=new Set([...Xo,"cascade.single","cascade.multiple","file","image","signature","address","location","json"]),Qo=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,Er=new Set(["__proto__","prototype","constructor"]),Jt=class extends Error{constructor(o){super("OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID");this.path=o;this.name="NativeScopeSourceFieldPathV2Error"}path;code="OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID"};function He(e,t){let o=Zo(e);if(!o)return null;let n=t.get(o[0]);if(!n)return null;let i=o.slice(1).join(".")||void 0;return{field:n,...i?{valuePath:i}:{}}}function zt(e){return!!(e&&e.field.type==="user.single"&&e.valuePath==="value")}function Jn(e,t,o){if(!e||!t||!br(e))return!1;let{field:n,valuePath:i}=e;if(!i)return t.valueType==="uuid"?n.type==="uuid":["text.short","text.long","serial-number"].includes(n.type);if(i==="value")return!(t.valueSourceResourceCode&&n.type.startsWith("resource-ref.")&&n.source?.resourceCode!==t.valueSourceResourceCode);let s=i.slice(9),r=o.get(n.source?.resourceCode||"")?.get(s)?.type;return t.valueType==="uuid"?r==="uuid":["text.short","text.long","serial-number"].includes(r||"")}function Ir(e,t){let o=Zo(t);if(!o)throw new Jt(String(t||""));let n=e;for(let i of o){if(!n||typeof n!="object"||!Object.prototype.hasOwnProperty.call(n,i))return;n=n[i]}return n}function br(e){let{field:t,valuePath:o}=e;if(!o)return!Ar.has(t.type);if(o==="value")return Xo.has(t.type);if(!o.startsWith("snapshot."))return!1;let n=o.slice(9);return Qo.test(n)&&t.type.startsWith("resource-ref.")&&!!t.source?.snapshotFields?.includes(n)}function Zo(e){if(typeof e!="string"||e.length===0||e.length>192)return null;let t=e.split(".");return![1,2,3].includes(t.length)||t.some(o=>!Qo.test(o)||Er.has(o))||t.length===2&&t[1]!=="value"||t.length===3&&t[1]!=="snapshot"?null:t}var yr=new Set(["option.single","user.single","department.single","resource-ref.single"]),Nr=new Set(["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","uuid","serial-number"]),Tr=new Set(["value","label","description","color"]),Or=new Set(["avatarUrl","employeeNo","title","mobile","email"]),hr=new Set(["fullPath","parent.value","parent.label"]),Rr=new Set(["country.value","country.label","province.value","province.label","city.value","city.label","district.value","district.label","street.value","street.label","detail","fullAddress"]),Cr=new Set(["longitude","latitude","accuracy"]),Sr=new Set(["address","name","province","city","district","source"]);function wr(e){let t=new Map(e.map(o=>[o.code,new Map(o.schema.fields.map(n=>[n.code,n]))]));return e.map(o=>({...o,schema:{...o.schema,fields:o.schema.fields.map(n=>{let i=$r(n,t);if(!Object.keys(i).length)return n;let s={...n};return Object.defineProperty(s,"queryPathTypes",{configurable:!1,enumerable:!1,writable:!1,value:Object.freeze(i)}),s})}}))}function Dr(e,t){if(yr.has(e.type)&&Tr.has(t)||e.type==="user.single"&&Or.has(t)||e.type==="department.single"&&hr.has(t))return lt(t);if(e.type==="resource-ref.single"){let o=e.queryPathTypes?.[t];return o?{parts:t.split("."),type:o}:null}if(e.type==="address"&&Rr.has(t))return lt(t);if(e.type==="location"){if(Cr.has(t))return{parts:[t],type:"number.decimal"};if(Sr.has(t))return lt(t);if(t==="capturedAt")return{parts:[t],type:"datetime"}}return null}function $r(e,t){if(e.type!=="resource-ref.single"||!e.source)return{};let o=t.get(e.source.resourceCode);return o?Object.fromEntries((e.source.snapshotFields||[]).flatMap(n=>{let i=o.get(n);return i?[[`snapshot.${n}`,Nr.has(i.type)?i.type:"json"]]:[]})):{}}function lt(e){return{parts:e.split("."),type:"text.short"}}var Hn=["exact-v1","nfkc-space-v1","nfkc-upper-ascii-v1"],ed=256,Xe=class extends Error{constructor(o,n){super(`\u6761\u4EF6\u552F\u4E00\u952E\u58F0\u660E\u65E0\u6548\uFF1A${n}\uFF08${o}\uFF09`);this.pointer=o;this.reason=n}pointer;reason;code="NATIVE_UNIQUE_KEY_INVALID"},zn=e=>!!(e&&typeof e=="object"&&!Array.isArray(e)),ie=(e,t)=>{throw new Xe(e,t)},Yt=(e,t)=>e<t?-1:e>t?1:0,Ht=(e,t,o)=>{Object.keys(e).some(n=>!t.includes(n))&&ie(o,"\u4E0D\u652F\u6301\u672A\u77E5\u5C5E\u6027")};function Xn(e,t,o="/uniqueKeys"){if(e===void 0)return;if(!Array.isArray(e)||e.length>8)return ie(o,"\u6BCF\u8D44\u6E90\u6700\u591A 8 \u6761\u89C4\u5219");let n=new Map(t.map(s=>[s.code,s])),i=new Set;return e.map((s,a)=>{let r=`${o}/${a}`;if(!zn(s))return ie(r,"\u89C4\u5219\u5FC5\u987B\u662F\u5BF9\u8C61");if(Ht(s,["code","fields","when"],r),typeof s.code!="string"||!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(s.code)||s.code.length>20||i.has(s.code))return ie(`${r}/code`,"\u9700\u8981\u4E0D\u91CD\u590D\u4E14\u4E0D\u8D85\u8FC7 20 \u5B57\u7B26\u7684 lower-kebab-case \u6807\u8BC6");if(i.add(s.code),!Array.isArray(s.fields)||s.fields.length<1||s.fields.length>4)return ie(`${r}/fields`,"\u5FC5\u987B\u9009\u62E9 1 \u5230 4 \u4E2A\u5B57\u6BB5");let c=new Set,l=s.fields.map((g,E)=>{let A=`${r}/fields/${E}`;if(!zn(g))return ie(A,"\u5B57\u6BB5\u5FC5\u987B\u662F\u5BF9\u8C61");Ht(g,["fieldCode","normalizer"],A);let b=n.get(g.fieldCode);if(!b||!["text.short","uuid","option.single","resource-ref.single"].includes(b.type)||c.has(g.fieldCode))return ie(`${A}/fieldCode`,"\u9700\u8981\u4E0D\u91CD\u590D\u7684\u77ED\u6587\u672C\u3001UUID\u3001\u5355\u9009\u6216\u5355\u8BB0\u5F55\u5F15\u7528\u5B57\u6BB5");c.add(g.fieldCode);let I=g.normalizer===void 0?"exact-v1":g.normalizer;return!Hn.includes(I)||b.type!=="text.short"&&I!=="exact-v1"?ie(`${A}/normalizer`,"\u5F52\u4E00\u5316\u65B9\u5F0F\u4E0D\u652F\u6301\u6216\u4E0E\u5B57\u6BB5\u7C7B\u578B\u4E0D\u7B26"):{fieldCode:b.code,normalizer:I}}).sort((g,E)=>Yt(g.fieldCode,E.fieldCode)),p=s.when===void 0?[]:s.when;if(!Array.isArray(p)||p.length>4)return ie(`${r}/when`,"\u6700\u591A 4 \u4E2A\u5408\u53D6\u6761\u4EF6");let d=new Set,f=p.map((g,E)=>{let A=`${r}/when/${E}`;if(!zn(g))return ie(A,"\u6761\u4EF6\u5FC5\u987B\u662F\u5BF9\u8C61");let b=n.get(g.fieldCode);if(!b)return ie(`${A}/fieldCode`,"\u5B57\u6BB5\u4E0D\u5B58\u5728");let I;if(g.operator==="empty"||g.operator==="nonempty"){if(Ht(g,["fieldCode","operator"],A),b.type!=="text.short")return ie(A,"\u7A7A\u503C\u6761\u4EF6\u4EC5\u652F\u6301\u77ED\u6587\u672C");I={fieldCode:b.code,operator:g.operator}}else if(g.operator==="in"||g.operator==="notIn"){Ht(g,["fieldCode","operator","values"],A);let u=new Set((b.options??[]).map(N=>N.value));if(b.type!=="option.single"||!Array.isArray(g.values)||g.values.length<1||g.values.length>16||g.values.some(N=>typeof N!="string"||N.length<1||N.length>128||!u.has(N))||new Set(g.values).size!==g.values.length)return ie(A,"\u96C6\u5408\u6761\u4EF6\u9700\u8981 1 \u5230 16 \u4E2A\u4E0D\u91CD\u590D\u7684\u5DF2\u58F0\u660E\u5355\u9009\u503C");I={fieldCode:b.code,operator:g.operator,values:[...g.values].sort(Yt)}}else return ie(`${A}/operator`,"\u53EA\u652F\u6301 empty\u3001nonempty\u3001in \u548C notIn");let _=JSON.stringify(I);return d.has(_)?ie(A,"\u6761\u4EF6\u4E0D\u80FD\u91CD\u590D"):(d.add(_),I)}).sort((g,E)=>Yt(JSON.stringify(g),JSON.stringify(E)));return{code:s.code,fields:l,when:f}}).sort((s,a)=>Yt(s.code,a.code))}var Yn={type:"string",pattern:"^[A-Za-z_][A-Za-z0-9_]{0,62}$"},kr={type:"array",maxItems:8,items:{type:"object",additionalProperties:!1,required:["code","fields"],properties:{code:{type:"string",maxLength:20,pattern:"^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"},fields:{type:"array",minItems:1,maxItems:4,uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["fieldCode"],properties:{fieldCode:Yn,normalizer:{enum:[...Hn]}}}},when:{type:"array",maxItems:4,uniqueItems:!0,items:{oneOf:[{type:"object",additionalProperties:!1,required:["fieldCode","operator"],properties:{fieldCode:Yn,operator:{enum:["empty","nonempty"]}}},{type:"object",additionalProperties:!1,required:["fieldCode","operator","values"],properties:{fieldCode:Yn,operator:{enum:["in","notIn"]},values:{type:"array",minItems:1,maxItems:16,uniqueItems:!0,items:{type:"string",minLength:1,maxLength:128}}}}]}}}}};var ei={"openxiangda.workflow.instance.completed.v2":"commit","openxiangda.workflow.instance.rejected.v2":"release","openxiangda.workflow.instance.withdrawn.v2":"release"};function ti(e,t){let o=()=>{throw new Error("NATIVE_EVENT_DECIMAL_RESERVATION_INVALID")},n=f=>!f||typeof f!="object"||Array.isArray(f)?o():f,i=n(e);if(Object.keys(i).some(f=>!["resourceCode","workflowCode","outcomes"].includes(f))||typeof i.resourceCode!="string"||!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(i.resourceCode)||typeof i.workflowCode!="string"||!/^[A-Za-z0-9._:-]{1,128}$/.test(i.workflowCode)||t.execution!==void 0||!Array.isArray(i.outcomes)||!i.outcomes.length||i.outcomes.length>3)return o();let s=t.resources.find(f=>f.code===i.resourceCode),a=t.reservations.find(f=>f.mode==="reserve"&&f.resourceCode===i.resourceCode),r=t.workflows.find(f=>f.code===i.workflowCode);if(!s||!a||!r||r.resourceCode!==s.code)return o();let c=s.fields.find(f=>f.code===a.statusFieldCode);if(c?.type!=="option.single")return o();let l=new Set(c.options?.map(f=>f.value)),p=new Set,d=i.outcomes.map(f=>{let g=n(f),E=g.eventType;return Object.keys(g).some(A=>!["eventType","mode","eligibleChildStatuses"].includes(A))||typeof E!="string"||!Object.prototype.hasOwnProperty.call(ei,E)||!t.eventTypes.includes(E)||p.has(E)||g.mode!==ei[E]||!Array.isArray(g.eligibleChildStatuses)||!g.eligibleChildStatuses.length||g.eligibleChildStatuses.length>16||new Set(g.eligibleChildStatuses).size!==g.eligibleChildStatuses.length||g.eligibleChildStatuses.some(A=>typeof A!="string"||!/^[A-Za-z0-9._:-]{1,128}$/.test(A)||!l.has(A))?o():(p.add(E),{eventType:E,mode:g.mode,eligibleChildStatuses:[...g.eligibleChildStatuses].sort()})}).sort((f,g)=>f.eventType.localeCompare(g.eventType));return{resourceCode:i.resourceCode,workflowCode:i.workflowCode,outcomes:d}}function ni(e,t){let o=n=>Array.isArray(n)?n.filter(i=>i&&typeof i=="object"&&!Array.isArray(i)):[];return{eventTypes:Array.isArray(t.eventTypes)?t.eventTypes:[],execution:t.execution,resources:o(e.data?.resources).map(n=>({code:n.code,fields:o(n.schema?.fields).map(i=>({code:i.code,type:i.type,options:o(i.options).map(s=>({value:s.value}))}))})),reservations:o(e.backend?.operations).flatMap(n=>n.platformAccess?.decimalReservation?[n.platformAccess.decimalReservation]:[]),workflows:o(e.workflows?.definitions).map(n=>({code:n.definition?.code,resourceCode:n.definition?.subject?.resourceCode}))}}var Xt=class extends Error{constructor(o,n){super(n);this.pointer=o}pointer;code="NATIVE_EVENT_ACTION_INVALID"};function Qn(e,t,o="/events/subscriptions"){if(e.execution===void 0)return;let n=(A,b)=>{throw new Xt(`${o}${A}`,b)},i=(A,b,I)=>((!A||typeof A!="object"||Array.isArray(A)||Object.keys(A).some(_=>!I.includes(_)))&&n(b,"Invalid action object or unsupported property"),A),s=i(e.execution,"/execution",["kind","version","operations"]);(s.kind!=="native-data"||s.version!==1)&&n("/execution","Expected native-data version 1"),e.platformAccess&&n("/platformAccess","Native actions do not use application runtime capabilities"),(!Array.isArray(e.eventTypes)||!e.eventTypes.length||e.eventTypes.some(A=>!/^openxiangda\.data\.record\.(created|updated|deleted)\.v2$/.test(A)))&&n("/eventTypes","Native data actions require declared data events");let a=e.filter?.resourceCodes;(!Array.isArray(a)||!a.length||a.length>20)&&n("/filter/resourceCodes","Native actions require explicit source resources");let r=new Map(t.map(A=>[A.code,A])),c=a.map(A=>{let b=r.get(A);return b||n("/filter/resourceCodes","Unknown source resource"),new Set((b.schema?.fields||[]).map(I=>I.code))}),l=new Set(e.payload?.fields||[]),p=e.payload?.includeChanges===!0,d=(A,b)=>{let I=i(A,b,["source","path","value"]);if(I.source==="literal"){(!Object.hasOwn(I,"value")||Object.hasOwn(I,"path"))&&n(b,"Literal binding requires only value");let y;try{y=JSON.stringify(I.value)}catch{n(b,"Literal must be JSON")}return(y===void 0||Buffer.byteLength(y)>65536)&&n(b,"Literal is too large or not JSON"),{source:"literal",value:JSON.parse(y)}}(I.source!=="event"||typeof I.path!="string"||Object.hasOwn(I,"value"))&&n(b,"Expected a literal or event binding");let _=I.path.split(".");(_.length>8||_.some(y=>!/^[A-Za-z0-9_-]+$/.test(y)||["__proto__","prototype","constructor"].includes(y)))&&n(b,"Invalid event path");let u=/^data\.projection\.([A-Za-z][A-Za-z0-9_]{0,62})$/.exec(I.path),N=/^data\.changes\.([A-Za-z][A-Za-z0-9_]{0,62})\.(before|after)$/.exec(I.path);if(u||N){let y=(u||N)[1];c.some(O=>!O.has(y))&&n(b,"Source field must exist on every filtered resource"),l.add(y),N&&(p=!0)}else["id","time","type","subject","data.recordId","data.revision","data.operation","data.resourceCode"].includes(I.path)||n(b,"Event path is not part of the data event contract");return{source:"event",path:I.path}};(!Array.isArray(s.operations)||s.operations.length<1||s.operations.length>16)&&n("/execution/operations","Expected 1 to 16 operations");let f={},g=s.operations.map((A,b)=>{let I=`/execution/operations/${b}`,_=i(A,I,["operation","resourceCode","data","id","expectedRevision"]);["create","update","delete"].includes(_.operation)||n(I,"Unsupported Native operation");let u=r.get(_.resourceCode);u||n(I,"Unknown action target resource");let N=new Map((u.schema?.fields||[]).map(O=>[O.code,O])),y=_.data===void 0?{}:i(_.data,`${I}/data`,[...N.keys()]);return Object.keys(y).length>32&&n(I,"Maximum 32 mapped fields per operation"),_.operation==="create"&&(_.id!==void 0||_.expectedRevision!==void 0)&&n(I,"Create does not accept id or expectedRevision"),_.operation==="delete"&&_.data!==void 0&&n(I,"Delete does not accept data"),Object.keys(y).some(O=>N.get(O)?.type==="serial-number")&&n(I,"Generated fields cannot be assigned"),f[_.resourceCode]=X(u),{operation:_.operation,resourceCode:_.resourceCode,..._.operation==="create"?{}:{id:d(_.id,`${I}/id`),expectedRevision:d(_.expectedRevision,`${I}/expectedRevision`)},..._.operation==="delete"?{}:{data:Object.fromEntries(Object.entries(y).map(([O,h])=>[O,d(h,`${I}/data/${O}`)]))}}});(l.size>32||[...l].some(A=>c.some(b=>!b.has(A))))&&n("/payload/fields","Payload must contain at most 32 declared source fields");let E={kind:"native-data",version:1,operations:g,resourceDigests:f};return Buffer.byteLength(JSON.stringify(E))>65536&&n("/execution","Action plan exceeds 64 KiB"),{execution:{...E,digest:X(E)},payload:{includeChanges:p,fields:[...l].sort()}}}function ke(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function eo(e,t){if(e?.instanceCommands===void 0)return[];let o=ke(e.instanceCommands);if(!o||!Object.keys(o).length||Object.keys(o).some(i=>!["withdraw","terminate"].includes(i)))return["WORKFLOW_INSTANCE_COMMAND_POLICIES_INVALID"];let n=[];for(let[i,s]of Object.entries(o)){let a=ke(s),r=i==="withdraw"?["beforeFact"]:["beforeFact","capability"];if(!a||Object.keys(a).some(c=>!r.includes(c))){n.push(`WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID:${i}`);continue}if(i==="terminate"){let c=a.capability;(typeof c!="string"||c.length>255||!/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(c)||t&&(!c.startsWith(`app:${t.appCode}:`)||!t.capabilities.includes(c)))&&n.push("WORKFLOW_INSTANCE_TERMINATE_CAPABILITY_INVALID")}if(i==="withdraw"||a.beforeFact!==void 0){let c=a.beforeFact,l=ke(e.inputSchema),p=ke(ke(l?.properties)?.[c]),d=ke(ke(e.subject)?.factProjection)?.[c],f=t?.fields.get(d);(typeof c!="string"||!/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(c)||!Array.isArray(l?.required)||!l.required.includes(c)||p?.type!=="string"||p?.format!=="date-time"||typeof d!="string"||t&&(f?.type!=="datetime"||f.nullable===!0))&&n.push(`WORKFLOW_INSTANCE_COMMAND_DEADLINE_FACT_INVALID:${i}`)}}return n}function Vr(e,t){let o=e?.terminate?.capability;return typeof o=="string"&&/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(o)&&t.includes(o)}function Zn(e){if(typeof e!="string")return null;let t=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,3}))?(Z|[+-]\d{2}:\d{2})$/.exec(e);if(!t)return null;let[,o,n,i,s,a,r]=t,c=t[8],l=new Date(Date.UTC(Number(o),Number(n),0)).getUTCDate();if(Number(n)<1||Number(n)>12||Number(i)<1||Number(i)>l||Number(s)>23||Number(a)>59||Number(r)>59||c!=="Z"&&(Number(c.slice(1,3))>23||Number(c.slice(4))>59))return null;let p=Date.parse(e);return Number.isFinite(p)?p:null}function Fr(e,t,o,n){let i=e?.[t];if(!i||t==="terminate"&&i.beforeFact===void 0)return null;let s=i.beforeFact,a=ke(o),r=s&&a&&Object.hasOwn(a,s)?Zn(a[s]):null,c=n instanceof Date?n.getTime():Zn(n);return r===null||c===null||!Number.isFinite(c)?"WORKFLOW_V2_CANCELLATION_DEADLINE_INVALID":c<r?null:"WORKFLOW_V2_CANCELLATION_DEADLINE_PASSED"}var Qe="openxiangda.workflow.step.requested.v2",oo=[Qe,"openxiangda.workflow.step.result_received.v2","openxiangda.workflow.step.completed.v2","openxiangda.workflow.step.continuation_failed.v2"],Qt=16384,si=2048,vr="steps",io=/^[A-Za-z][A-Za-z0-9_-]{0,127}$/,ri=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,Le=new Set(["__proto__","prototype","constructor"]),B=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&[Object.prototype,null].includes(Object.getPrototypeOf(e)),ai=e=>{try{let t=JSON.stringify(e);return t===void 0?1/0:new TextEncoder().encode(t).length}catch{return 1/0}},Ze=(e,t,o=0)=>{if(o>32)return!1;if(e===t)return!0;if(Array.isArray(e)&&Array.isArray(t))return e.length===t.length&&e.every((s,a)=>Ze(s,t[a],o+1));if(!B(e)||!B(t))return!1;let n=Object.keys(e).filter(s=>e[s]!==void 0),i=Object.keys(t).filter(s=>t[s]!==void 0);return n.length===i.length&&n.every(s=>Object.hasOwn(t,s)&&Ze(e[s],t[s],o+1))};function to(e,t){let o=0,n=(i,s)=>++o>1e4||s>8?!1:i===null||typeof i=="boolean"||typeof i=="string"?!0:typeof i=="number"?Number.isFinite(i):Array.isArray(i)?i.length<=200&&i.every(a=>n(a,s+1)):B(i)&&Object.keys(i).length<=32&&Object.keys(i).every(a=>!Le.has(a))&&Object.values(i).every(a=>n(a,s+1));return ai(e)<=t&&n(e,0)}function ci(e){return!B(e)||Object.keys(e).some(t=>!["executionId","handlerVersion","inputDigest","expectedFactRevision","output","receipt"].includes(t))?!1:/^[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i.test(e.executionId||"")&&Number.isSafeInteger(e.handlerVersion)&&e.handlerVersion>=1&&e.handlerVersion<=1e6&&/^[a-f0-9]{64}$/.test(e.inputDigest||"")&&Number.isSafeInteger(e.expectedFactRevision)&&e.expectedFactRevision>=0&&B(e.output)&&to(e.output,Qt)&&(e.receipt===void 0||B(e.receipt)&&to(e.receipt,si))}function Pr(e){return B(e)&&Object.keys(e).every(t=>["executionId","nodeId","handlerCode","handlerVersion","mode","input","inputDigest","expectedFactRevision"].includes(t))&&typeof e.nodeId=="string"&&io.test(e.nodeId)&&!Le.has(e.nodeId)&&typeof e.handlerCode=="string"&&/^[a-z][a-z0-9-]{0,100}$/.test(e.handlerCode)&&e.handlerCode.endsWith(`-v${e.handlerVersion}`)&&["pure","reconciled-effect"].includes(e.mode)&&ci({executionId:e.executionId,handlerVersion:e.handlerVersion,inputDigest:e.inputDigest,expectedFactRevision:e.expectedFactRevision,output:e.input})}function ut(e,t,o=Qt){if(!to(t,o))return!1;let n=1e4,i=(s,a,r)=>{if(--n<0||r>8||!B(s))return!1;let c=a===null?"null":Array.isArray(a)?"array":typeof a=="number"&&Number.isSafeInteger(a)?"integer":typeof a,l=Array.isArray(s.type)?s.type:[s.type];if(!l.includes(c)&&!(c==="integer"&&l.includes("number"))||s.enum!==void 0&&(!Array.isArray(s.enum)||!s.enum.some(p=>Ze(p,a)))||Object.hasOwn(s,"const")&&!Ze(s.const,a))return!1;if(typeof a=="number")return Number.isFinite(a)&&(s.minimum===void 0||a>=s.minimum)&&(s.maximum===void 0||a<=s.maximum);if(typeof a=="string"){let p=Array.from(a).length;return(s.minLength===void 0||p>=s.minLength)&&(s.maxLength===void 0||p<=s.maxLength)}return Array.isArray(a)?a.length<=s.maxItems&&(s.minItems===void 0||a.length>=s.minItems)&&a.every(p=>i(s.items,p,r+1)):B(a)?!B(s.properties)||Object.keys(a).some(p=>Le.has(p)||!Object.hasOwn(s.properties,p))||(Array.isArray(s.required)?s.required:[]).some(p=>!Object.hasOwn(a,p))||s.minProperties!==void 0&&Object.keys(a).length<s.minProperties||s.maxProperties!==void 0&&Object.keys(a).length>s.maxProperties?!1:Object.entries(a).every(([p,d])=>i(s.properties[p],d,r+1)):a===null||typeof a=="boolean"};return i(e,t,0)}function di(e){return typeof e=="string"&&e.length<=256&&e.split(".").length<=8&&e.split(".").every(t=>io.test(t)&&!Le.has(t))}function ft(e){let t=0,o=(n,i)=>{if(!B(n)||i>6||++t>256||Object.keys(n).some(r=>!["type","title","description","properties","required","additionalProperties","items","maxItems","minItems","maxLength","minLength","minimum","maximum","enum","const","maxProperties","minProperties"].includes(r)))return!1;let s=Array.isArray(n.type)?n.type:[n.type];if(!s.length||s.length>2||s.some(r=>!["object","array","string","integer","number","boolean","null"].includes(r))||s.length>1&&(!s.includes("null")||new Set(s).size!==s.length))return!1;for(let r of["title","description"])if(n[r]!==void 0&&(typeof n[r]!="string"||n[r].length>2e3))return!1;for(let r of["minimum","maximum"])if(n[r]!==void 0&&(typeof n[r]!="number"||!Number.isFinite(n[r])))return!1;for(let[r,c]of[["maxItems",200],["minItems",200],["maxLength",16384],["minLength",16384],["maxProperties",32],["minProperties",32]])if(n[r]!==void 0&&(!Number.isSafeInteger(n[r])||n[r]<0||n[r]>c))return!1;for(let[r,c]of[["minimum","maximum"],["minItems","maxItems"],["minLength","maxLength"],["minProperties","maxProperties"]])if(n[r]!==void 0&&n[c]!==void 0&&n[r]>n[c])return!1;if(["properties","required","additionalProperties","maxProperties","minProperties"].some(r=>n[r]!==void 0)&&!s.includes("object")||["items","maxItems","minItems"].some(r=>n[r]!==void 0)&&!s.includes("array")||["maxLength","minLength"].some(r=>n[r]!==void 0)&&!s.includes("string")||["minimum","maximum"].some(r=>n[r]!==void 0)&&!s.some(r=>r==="integer"||r==="number")||n.enum!==void 0&&(!Array.isArray(n.enum)||!n.enum.length||n.enum.length>100)||s.includes("object")&&(!B(n.properties)||n.additionalProperties!==!1||Object.keys(n.properties).length>32||Object.keys(n.properties).some(r=>!ri.test(r)||Le.has(r))||n.required!==void 0&&(!Array.isArray(n.required)||new Set(n.required).size!==n.required.length||n.required.some(r=>typeof r!="string"||!Object.hasOwn(n.properties,r)))||n.minProperties!==void 0&&n.minProperties>Object.keys(n.properties).length||n.maxProperties!==void 0&&n.maxProperties<(n.required?.length||0)||!Object.values(n.properties).every(r=>o(r,i+1)))||s.includes("array")&&(!Number.isSafeInteger(n.maxItems)||!o(n.items,i+1)))return!1;let a={...n};return delete a.enum,delete a.const,!(n.enum!==void 0&&(!n.enum.every(r=>ut(a,r))||n.enum.some((r,c)=>n.enum.slice(0,c).some(l=>Ze(r,l))))||Object.hasOwn(n,"const")&&!ut(a,n.const))};return B(e)&&e.type==="object"&&ai(e)<=Qt&&o(e,0)}function pt(e){let t=Object.fromEntries(Object.values(e.nodes||{}).filter(o=>o?.kind==="action").map(o=>[o.id,o.outputSchema]));return Object.keys(t).length?{...e.inputSchema,properties:{...e.inputSchema?.properties,steps:{type:"object",additionalProperties:!1,properties:t}}}:e.inputSchema||{}}function li(e,t){let o=e;for(let n of t.split(".")){if(!B(o?.properties)||!Object.hasOwn(o.properties,n))return;o=o.properties[n]}return B(o)?o:void 0}var oi=(e,t)=>!!li(e,t);function Lr(e){return B(e)&&Object.keys(e).every(t=>["version","mode","inputSchema","outputSchema"].includes(t))&&Number.isSafeInteger(e.version)&&e.version>=1&&e.version<=1e6&&["pure","reconciled-effect"].includes(e.mode)&&ft(e.inputSchema)&&ft(e.outputSchema)}function ii(e){return e.kind==="approval"?[e.onApprove,e.onReject]:e.kind==="condition"?[...Array.isArray(e.branches)?e.branches.map(t=>t.target):[],e.otherwise]:e.kind==="cc"||e.kind==="action"?[e.next]:[]}function no(e,t=0){return!B(e)||t>16?[]:e.op==="path"?typeof e.path=="string"?[e.path]:[]:["left","right","value"].flatMap(o=>no(e[o],t+1)).concat(Array.isArray(e.values)?e.values.flatMap(o=>no(o,t+1)):[])}function _t(e,t){if(!B(e)||!B(e.nodes))return["WORKFLOW_STEP_DEFINITION_INVALID"];let o=e.nodes,n=Object.entries(o).filter(([,r])=>r?.kind==="action");if(!n.length)return[];let i=[];Object.hasOwn(e.inputSchema?.properties||{},"steps")&&i.push("WORKFLOW_STEP_FACT_NAMESPACE_RESERVED");let s=pt(e);for(let[r,c]of n){(Object.keys(c).some(d=>!["id","kind","title","next","handler","inputSchema","outputSchema","inputs"].includes(d))||c.id!==r||!io.test(r)||Le.has(r)||typeof c.title!="string"||!c.title.trim()||c.title.length>255||typeof c.next!="string"||!Object.hasOwn(o,c.next))&&i.push(`WORKFLOW_STEP_NODE_INVALID:${r}`);let l=c.handler;(!B(l)||Object.keys(l).some(d=>!["code","version","mode"].includes(d))||!Number.isSafeInteger(l.version)||l.version<1||l.version>1e6||!/^[a-z][a-z0-9-]{0,100}$/.test(l.code||"")||!String(l.code).endsWith(`-v${l.version}`)||!["pure","reconciled-effect"].includes(l.mode))&&i.push(`WORKFLOW_STEP_HANDLER_INVALID:${r}`);let p=ft(c.inputSchema);if((!p||!ft(c.outputSchema))&&i.push(`WORKFLOW_STEP_SCHEMA_INVALID:${r}`),!B(c.inputs)||Object.keys(c.inputs).length>32){i.push(`WORKFLOW_STEP_INPUTS_INVALID:${r}`);continue}for(let d of Array.isArray(c.inputSchema?.required)?c.inputSchema.required:[])Object.hasOwn(c.inputs,d)||i.push(`WORKFLOW_STEP_INPUT_REQUIRED:${r}:${d}`);for(let[d,f]of Object.entries(c.inputs)){if(!ri.test(d)||Le.has(d)||!Object.hasOwn(c.inputSchema?.properties||{},d)||!B(f)){i.push(`WORKFLOW_STEP_INPUT_INVALID:${r}:${d}`);continue}if(f.source==="literal")(!p||Object.keys(f).some(g=>!["source","value"].includes(g))||!Object.hasOwn(f,"value")||!ut(c.inputSchema.properties[d],f.value))&&i.push(`WORKFLOW_STEP_LITERAL_INVALID:${r}:${d}`);else if(f.source!=="fact"||Object.keys(f).some(g=>!["source","path"].includes(g))||!di(f.path)||!oi(s,f.path))i.push(`WORKFLOW_STEP_FACT_PATH_INVALID:${r}:${d}`);else if(p){let g=li(s,f.path),E=c.inputSchema.properties[d],A=Array.isArray(g.type)?g.type:[g.type],b=Array.isArray(E.type)?E.type:[E.type];A.some(I=>!b.includes(I)&&!(I==="integer"&&b.includes("number")))&&i.push(`WORKFLOW_STEP_FACT_TYPE_MISMATCH:${r}:${d}`)}}}let a=(r,c)=>{let l=new Set,p=[e.startAt||""];for(;p.length&&l.size<=200;){let d=p.shift();if(!(d===c||l.has(d)||!o[d])){if(d===r)return!0;l.add(d),p.push(...ii(o[d]))}}return!1};for(let[r,c]of Object.entries(o)){if(!B(c))continue;let l=c.kind==="action"?Object.values(c.inputs||{}).flatMap(d=>d?.source==="fact"?[d.path]:[]):(Array.isArray(c.branches)?c.branches:[]).flatMap(d=>no(d?.when)),p=t?.bindings?.[c.binding];p&&l.push(...[p.inputPath,p.departmentIdFrom,p.resourceIdFrom,p.scope?.valueFrom].filter(d=>typeof d=="string"));for(let d of l.filter(f=>typeof f=="string"&&f.startsWith("steps."))){let f=d.split(".")[1];(o[f]?.kind!=="action"||f===r||!oi(s,d)||a(r,f))&&i.push(`WORKFLOW_STEP_OUTPUT_NOT_AVAILABLE:${r}:${d}`)}}if(t)for(let[,r]of n){let c=new Set,l=[r.next];for(;l.length&&c.size<=200;){let p=l.shift();if(c.has(p)||!B(o[p]))continue;c.add(p);let d=o[p];if(!(d.kind==="action"||d.kind==="end")){if(d.kind==="approval"){let f=t.bindings?.[d.binding];f&&["application_provider","initiator_select"].includes(f.provider)&&i.push(`WORKFLOW_STEP_NEXT_PROVIDER_REQUIRES_PREPARED_RESULT:${p}`);continue}l.push(...ii(d))}}}return[...new Set(i)]}function xr(e,t){let o={};for(let[n,i]of Object.entries(e.inputs)){let s=i.source==="literal"?i.value:i.path.split(".").reduce((a,r)=>B(a)&&Object.hasOwn(a,r)?a[r]:void 0,t);s!==void 0&&(o[n]=s)}if(!ut(e.inputSchema,o))throw new Error("WORKFLOW_STEP_INPUT_SCHEMA_INVALID");return o}function so(e,t,o){let n=Zt(e),i=[];Object.keys(n).length&&!o&&i.push("WORKFLOW_STEP_BACKEND_REQUIRED");for(let s of Object.keys(n)){let a=t.find(r=>r.code===s);(!a||a.execution||a.action||!Array.isArray(a.eventTypes)||a.eventTypes.length!==1||a.eventTypes[0]!==Qe||!B(a.filter)||Object.keys(a.filter).length!==1||!B(a.filter.workflowStep)||Object.keys(a.filter.workflowStep).length!==1||a.filter.workflowStep.handlerCode!==s||!B(a.payload)||a.payload.includeChanges!==!1||!Array.isArray(a.payload.fields)||a.payload.fields.length)&&i.push(`WORKFLOW_STEP_SUBSCRIPTION_INVALID:${s}`)}for(let s of t)(s.eventTypes?.includes(Qe)&&!n[s.code]||s.filter?.workflowStep&&!n[s.code])&&i.push(`WORKFLOW_STEP_HANDLER_NOT_DECLARED:${s.code}`);return i}function Zt(e){let t={};for(let o of e){let n=_t(o);if(n.length)throw new Error(n.join("; "));for(let i of Object.values(o.nodes||{})){if(i.kind!=="action")continue;let s={version:i.handler.version,mode:i.handler.mode,inputSchema:i.inputSchema,outputSchema:i.outputSchema},a=t[i.handler.code];if(a&&!Ze(a,s))throw new Error(`WORKFLOW_STEP_HANDLER_CONTRACT_CONFLICT:${i.handler.code}`);t[i.handler.code]=s}}return t}var de=e=>e&&typeof e=="object"&&!Array.isArray(e)?e:{},xe=(e,t)=>typeof e=="string"&&!!e.trim()&&e.length<=t,jr=/^[A-Za-z][A-Za-z0-9_-]*(?:\.[A-Za-z][A-Za-z0-9_-]*){0,15}$/,ro=e=>typeof e=="string"&&e.length<=256&&jr.test(e)&&!e.split(".").some(t=>["__proto__","prototype","constructor"].includes(t));function en(e,t){let o=de(e),n=!0;for(let i of t.split(".")){n&&=Array.isArray(o.required)&&o.required.includes(i);let s=de(o.properties)[i];if(!s||typeof s!="object")return null;o=de(s)}return{schema:o,required:n}}function ao(e){let t=new Set,o=[],n=2048,i=(s,a)=>{if(--n<0||a>20){o.push("WORKFLOW_EXPRESSION_BUDGET_EXCEEDED");return}let r=de(s);if(r.op==="path")ro(r.path)?t.add(r.path):o.push("WORKFLOW_EXPRESSION_PATH_INVALID");else{if(r.op==="literal")return;if(r.op==="and"||r.op==="or")if(!Array.isArray(r.values)||!r.values.length||r.values.length>128)o.push("WORKFLOW_EXPRESSION_GROUP_INVALID");else for(let c of r.values){if(n<0)break;i(c,a+1)}else r.op==="not"||r.op==="exists"?i(r.value,a+1):["eq","neq","gt","gte","lt","lte","in","contains"].includes(String(r.op))?(i(r.left,a+1),i(r.right,a+1)):o.push("WORKFLOW_EXPRESSION_OPERATOR_INVALID")}};return i(e,0),{paths:[...t],errors:[...new Set(o)]}}function co(e){if(e?.readability===void 0)return[];let t=[],o=pt(e),n=de(e.readability);(Object.keys(n).some(r=>!["variables","logic"].includes(r))||!Object.keys(n).length)&&t.push("WORKFLOW_READABILITY_INVALID");let i=de(n.variables);n.variables!==void 0&&(typeof n.variables!="object"||Array.isArray(n.variables)||n.variables===null)&&t.push("WORKFLOW_VARIABLES_INVALID"),Object.keys(i).length>128&&t.push("WORKFLOW_VARIABLE_LIMIT_EXCEEDED");for(let[r,c]of Object.entries(i)){let l=de(c);(!ro(r)||!en(o,r))&&t.push(`WORKFLOW_VARIABLE_SOURCE_UNKNOWN:${r}`),(!xe(l.label,160)||Object.keys(l).some(p=>!["label","unit","description"].includes(p))||l.unit!==void 0&&!xe(l.unit,32)||l.description!==void 0&&!xe(l.description,2e3))&&t.push(`WORKFLOW_VARIABLE_METADATA_INVALID:${r}`)}let s=n.logic===void 0?[]:n.logic;(!Array.isArray(s)||s.length>32)&&t.push("WORKFLOW_LOGIC_LIMIT_INVALID");let a=new Set;for(let r of Array.isArray(s)?s.slice(0,32):[]){let c=de(r),l=String(c.code||"");(!/^[a-z][a-z0-9-]{2,63}$/.test(l)||a.has(l)||!xe(c.title,160)||!xe(c.description,4e3)||Object.keys(c).some(p=>!["code","title","description","phase","nodeId","inputPaths","outputPaths","source"].includes(p)))&&t.push(`WORKFLOW_LOGIC_METADATA_INVALID:${l}`),a.add(l),(!["submission","node_input","completion"].includes(String(c.phase))||c.phase==="node_input"&&!de(e.nodes)[String(c.nodeId)]||c.phase!=="node_input"&&c.nodeId!==void 0)&&t.push(`WORKFLOW_LOGIC_ANCHOR_INVALID:${l}`);for(let p of["inputPaths","outputPaths"]){let d=c[p];if(!(p==="outputPaths"&&d===void 0))if(!Array.isArray(d)||d.length>32||new Set(d).size!==d.length)t.push(`WORKFLOW_LOGIC_PATHS_INVALID:${l}:${p}`);else for(let f of d)(!ro(f)||!en(o,f))&&t.push(`WORKFLOW_LOGIC_SOURCE_UNKNOWN:${l}:${String(f)}`)}if(c.source!==void 0){let p=de(c.source);(!xe(p.path,256)||String(p.path).startsWith("/")||String(p.path).includes("..")||String(p.path).includes("://")||!/^sha256:[a-f0-9]{64}$/.test(String(p.digest))||p.symbol!==void 0&&!xe(p.symbol,160)||Object.keys(p).some(d=>!["path","symbol","digest"].includes(d)))&&t.push(`WORKFLOW_LOGIC_SOURCE_REFERENCE_INVALID:${l}`)}}for(let r of Object.values(de(e.nodes))){let c=de(r),l=Array.isArray(c.branches)?c.branches:[];for(let p of l){let d=ao(p.when);t.push(...d.errors.map(f=>`${f}:${c.id}`));for(let f of d.paths)en(o,f)||t.push(`WORKFLOW_VARIABLE_SOURCE_UNKNOWN:${c.id}:${f}`)}}return[...new Set(t)]}function Wr(e,t){let o=pt(e),n=[],i=new Map,s=[];for(let c of Object.values(e.nodes)){if(c.kind==="approval")for(let[l,p,d]of[["approve",c.onApprove,"\u540C\u610F"],["reject",c.onReject,"\u62D2\u7EDD"]])p&&n.push({id:`${c.id}:${l}`,from:c.id,to:p,kind:l,label:d,variablePaths:[]});if(c.kind==="cc"&&c.next&&n.push({id:`${c.id}:next`,from:c.id,to:c.next,kind:"next",label:"\u6284\u9001\u540E\u7EE7\u7EED",variablePaths:[]}),c.kind==="action"&&c.next){let l=Object.values(c.inputs||{}).flatMap(p=>p.source==="fact"?[p.path]:[]);for(let p of l)i.has(p)||i.set(p,new Set),i.get(p).add(c.id);n.push({id:`${c.id}:next`,from:c.id,to:c.next,kind:"next",label:"\u6210\u529F\u56DE\u6267\u540E\u7EE7\u7EED",variablePaths:l})}if(c.kind==="condition"){for(let[l,p]of(c.branches||[]).entries()){let d=ao(p.when);for(let f of d.paths)i.has(f)||i.set(f,new Set),i.get(f).add(c.id);n.push({id:`${c.id}:branch:${l}`,from:c.id,to:p.target,kind:"branch",label:p.label||`\u6761\u4EF6 ${l+1}`,priority:l+1,expression:p.when,variablePaths:d.paths}),s.push(...d.errors.map(f=>({code:f,path:c.id})))}c.otherwise&&n.push({id:`${c.id}:default`,from:c.id,to:c.otherwise,kind:"default",label:"\u5747\u4E0D\u6EE1\u8DB3\u65F6",variablePaths:[]})}}let r=[...new Set([...i.keys(),...Object.keys(e.readability?.variables||{}),...(e.readability?.logic||[]).flatMap(c=>[...c.inputPaths,...c.outputPaths||[]])])].slice(0,128).map(c=>{let l=en(o,c),p=e.readability?.variables?.[c],d=c.split("."),f=e.subject?.factProjection[d[0]],g=d[0]==="steps"?e.nodes[d[1]]:void 0;return l||s.push({code:"WORKFLOW_VARIABLE_SOURCE_UNKNOWN",path:c}),{path:c,label:p?.label||String(l?.schema.title||c),type:String(l?.schema.type||"unknown"),...p,required:l?.required||!1,usedBy:[...i.get(c)||[]],source:l&&g?.handler?{kind:"step_output",nodeId:g.id,handlerCode:g.handler.code,handlerVersion:g.handler.version}:l&&f&&e.subject?{kind:"subject_field",resourceCode:e.subject.resourceCode,fieldPath:[f,...d.slice(1)].join(".")}:{kind:l?"input":"unknown"}}});return{schemaVersion:"openxiangda.workflow-graph/v2",workflowCode:e.code,definitionDigest:t,startAt:e.startAt,fixedTopology:!0,branchStrategy:"first_match",nodes:Object.values(e.nodes).map(c=>({id:c.id,kind:c.kind,title:c.title||c.id,...c.binding?{binding:c.binding}:{},...c.mode?{mode:c.mode}:{},...c.outcome?{outcome:c.outcome}:{},...c.kind==="cc"?{emptyPolicy:c.emptyPolicy,notify:c.notify!==!1}:{},...c.kind==="action"&&c.handler?{businessStep:{handler:c.handler,inputs:c.inputs||{},outputPaths:Object.keys(de(c.outputSchema).properties||{}).map(l=>`steps.${c.id}.${l}`)}}:{}})),edges:n,variables:r,logic:e.readability?.logic||[],diagnostics:s}}function mt(e,t=[],o=0){if(!e||o>20)return"\u65E0\u6CD5\u8BC6\u522B\u7684\u6761\u4EF6";if(e.op==="path")return t.find(a=>a.path===e.path)?.label||e.path;if(e.op==="literal")return JSON.stringify(e.value)??"\u7F3A\u503C";if(e.op==="and"||e.op==="or")return e.values.slice(0,128).map(a=>`\uFF08${mt(a,t,o+1)}\uFF09`).join(e.op==="and"?" \u4E14 ":" \u6216 ");if(e.op==="not"||e.op==="exists")return`${e.op==="not"?"\u4E0D\u6EE1\u8DB3":"\u5B58\u5728"}\uFF08${mt(e.value,t,o+1)}\uFF09`;if(!("left"in e))return"\u65E0\u6CD5\u8BC6\u522B\u7684\u6761\u4EF6";let n={eq:"=",neq:"\u2260",gt:">",gte:"\u2265",lt:"<",lte:"\u2264",in:"\u5C5E\u4E8E",contains:"\u5305\u542B"},i=e.left.op==="path"?e.left.path:void 0,s=i&&e.right.op==="literal"&&typeof e.right.value=="number"?t.find(a=>a.path===i)?.unit:void 0;return`${mt(e.left,t,o+1)} ${n[e.op]} ${mt(e.right,t,o+1)}${s?` ${s}`:""}`}var nn=["approve","reject","return","transfer","delegate","add_assignee"],on=["fixed_users","app_role","app_role_in_scope"],Mr=["single","any","all","sequence"],Ve=e=>!!e&&typeof e=="object"&&!Array.isArray(e),et=(e,t)=>Object.keys(e).every(o=>t.includes(o)),tn=(e,t,o)=>Array.isArray(e)&&e.length>0&&e.length<=o&&new Set(e).size===e.length&&e.every(n=>typeof n=="string"&&t.includes(n));function tt(e){return e.allowedOperations||[...nn]}function ui(e,t,o={},n=!1){return!(!Ve(e)||!Object.keys(e).length||!et(e,n?["enabled","label","commentRequired"]:["label","commentRequired"])||e.label!==void 0&&(typeof e.label!="string"||!e.label.trim()||e.label.length>40||/[\u0000-\u001f\u007f]/.test(e.label))||e.enabled!==void 0&&(typeof e.enabled!="boolean"||["approve","reject"].includes(t)&&!e.enabled)||e.commentRequired!==void 0&&(typeof e.commentRequired!="boolean"||!["approve","reject"].includes(t)||(t==="reject"||o.commentRequired)&&!e.commentRequired))}function sn(e,t){let o=[];for(let[n,i]of Object.entries(e?.nodes||{})){if(!Ve(i))continue;let s=i.administration,a=i.operationPolicy;if(i.kind==="cc"){(a!==void 0||s!==void 0&&(!Ve(s)||!et(s,["assigneeProviders"])))&&o.push(`WORKFLOW_NODE_ADMINISTRATION_INVALID:${n}`),s?.assigneeProviders!==void 0&&!tn(s.assigneeProviders,on,3)&&o.push(`WORKFLOW_NODE_ADMINISTRATION_PROVIDERS_INVALID:${n}`),s?.assigneeProviders?.includes("app_role_in_scope")&&t&&!t.bindings[i.binding||""]?.scope&&o.push(`WORKFLOW_NODE_ADMINISTRATION_SCOPE_REQUIRED:${n}`);continue}if(i.kind!=="approval"){(s!==void 0||a!==void 0)&&o.push(`WORKFLOW_NODE_ADMINISTRATION_APPROVAL_REQUIRED:${n}`);continue}if(a!==void 0&&(!Ve(a)||Object.keys(a).length>8||Object.entries(a).some(([c,l])=>!nn.includes(c)||!tt(i).includes(c)||!ui(l,c)))&&o.push(`WORKFLOW_NODE_OPERATION_POLICY_INVALID:${n}`),s===void 0)continue;if(!Ve(s)||!et(s,["modes","assigneeProviders","operations"])){o.push(`WORKFLOW_NODE_ADMINISTRATION_INVALID:${n}`);continue}s.modes!==void 0&&(!tn(s.modes,Mr,4)||!s.modes.includes(i.mode))&&o.push(`WORKFLOW_NODE_ADMINISTRATION_MODES_INVALID:${n}`),s.assigneeProviders!==void 0&&!tn(s.assigneeProviders,on,3)&&o.push(`WORKFLOW_NODE_ADMINISTRATION_PROVIDERS_INVALID:${n}`);let r=t?.bindings[i.binding||""];r&&Array.isArray(s.assigneeProviders)&&s.assigneeProviders.includes("app_role_in_scope")&&!r.scope&&o.push(`WORKFLOW_NODE_ADMINISTRATION_SCOPE_REQUIRED:${n}`),s.operations!==void 0&&(!tn(s.operations,nn,8)||s.operations.some(c=>!tt(i).includes(c)))&&o.push(`WORKFLOW_NODE_ADMINISTRATION_OPERATIONS_INVALID:${n}`)}return o}function Ur(e,t,o){let n=[];if(!e||!Ve(o)||!Object.keys(o).length||!et(o,["title","description","assignee","mode","operations"]))return["WORKFLOW_V2_NODE_CONFIGURATION_PATCH_INVALID"];let i=o;for(let a of["title","description"])i[a]!==void 0&&(typeof i[a]!="string"||i[a].length>(a==="title"?255:1e3)||a==="title"&&!i[a].trim())&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_PATCH_INVALID");let s=e.administration;if(i.mode!==void 0&&(e.kind!=="approval"||!s?.modes?.includes(i.mode))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_MODE_READONLY"),i.operations!==void 0&&(e.kind!=="approval"||!Ve(i.operations)||!Object.keys(i.operations).length||Object.keys(i.operations).length>8||Object.entries(i.operations).some(([a,r])=>!s?.operations?.includes(a)||!tt(e).includes(a)||!ui(r,a,e.operationPolicy?.[a],!0)))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_OPERATION_INVALID"),i.assignee!==void 0){let a=i.assignee,r=s?.assigneeProviders||(e.kind==="approval"&&t&&on.includes(t.provider)?[t.provider]:[]);!Ve(a)||!["approval","cc"].includes(e.kind)||!r.includes(a.provider)||a.provider==="app_role_in_scope"&&!t?.scope?n.push("WORKFLOW_V2_NODE_CONFIGURATION_PROVIDER_READONLY"):a.provider==="fixed_users"?(!et(a,["provider","users"])||!Array.isArray(a.users)||a.users.length<1||a.users.length>(e.kind==="cc"?20:200)||new Set(a.users).size!==a.users.length||a.users.some(c=>typeof c!="string"||!c.trim()||c.length>255))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_USERS_INVALID"):(!et(a,["provider","roleCode"])||typeof a.roleCode!="string"||!/^[a-z][a-z0-9_-]{0,127}$/.test(a.roleCode))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_ROLE_INVALID")}return n}function Br(e,t){let o=Object.fromEntries(tt(e).flatMap(n=>{let i=n,s=t?.operations?.[i],a={...e.operationPolicy?.[i],...s?.label!==void 0?{label:s.label}:{},...s?.commentRequired!==void 0?{commentRequired:s.commentRequired}:{}};return Object.keys(a).length?[[i,a]]:[]}));return{mode:t?.mode||e.mode,allowedOperations:tt(e).filter(n=>t?.operations?.[n]?.enabled!==!1),operationPolicy:o,fieldPolicy:{default:e.fieldPolicy?.default||"readonly",fields:{...e.fieldPolicy?.fields}}}}var ld=20,fi=["fixed_users","initiator","input_users","form_field_users","app_role","app_role_in_scope","previous_node_actor"];function rn(e,t){let o=[];for(let[n,i]of Object.entries(e?.nodes||{})){if(i?.kind!=="cc"||((Object.keys(i).some(c=>!["id","kind","title","binding","next","emptyPolicy","notify","administration"].includes(c))||typeof i.title!="string"||!i.title.trim()||i.title.length>255||typeof i.binding!="string"||!i.binding.trim()||i.binding.length>255||typeof i.next!="string"||!i.next.trim()||!e.nodes?.[i.next]||!["block","skip"].includes(i.emptyPolicy)||i.notify!==void 0&&typeof i.notify!="boolean")&&o.push(`WORKFLOW_CC_NODE_INVALID:${n}`),!t))continue;let s=t.bindings?.[i.binding];if(!s){o.push(`WORKFLOW_CC_BINDING_NOT_FOUND:${n}`);continue}fi.includes(s.provider)||o.push(`WORKFLOW_CC_PROVIDER_INVALID:${n}`);let a=s.min??1,r=s.max??20;(!Number.isSafeInteger(a)||!Number.isSafeInteger(r)||a<1||r<a||r>20||s.provider==="fixed_users"&&(!Array.isArray(s.users)||!s.users.length||s.users.length>r))&&o.push(`WORKFLOW_CC_RECIPIENT_LIMIT_INVALID:${n}`)}return[...new Set(o)]}var _i=64,an=1024*1024,mi=65536,uo=100,gi=400,je=new Set(["__proto__","prototype","constructor"]),Ai=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,At=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,pi=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/,se=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&[null,Object.prototype].includes(Object.getPrototypeOf(e)),we=(e,t)=>se(e)&&Object.keys(e).every(o=>t.includes(o)&&!je.has(o)),cn=e=>{try{return new TextEncoder().encode(JSON.stringify(e)).length}catch{return 1/0}},Ei=e=>e==null||typeof e=="string"&&!e.trim()||Array.isArray(e)&&e.length===0;function Fe(e,t){if(e===t)return!0;if(Array.isArray(e)&&Array.isArray(t))return e.length===t.length&&e.every((n,i)=>Fe(n,t[i]));if(!se(e)||!se(t))return!1;let o=Object.keys(e);return o.length===Object.keys(t).length&&o.every(n=>Object.hasOwn(t,n)&&Fe(e[n],t[n]))}function lo(e,t){let o=t.split(".");if(!(o.some(n=>!Ai.test(n)||je.has(n))||o.length>12))return o.reduce((n,i)=>se(n)&&Object.hasOwn(n,i)?n[i]:void 0,e)}function Se(e,t){switch(e.op){case"literal":return e.value;case"path":return lo({values:t},e.path);case"and":return e.values.every(o=>!!Se(o,t));case"or":return e.values.some(o=>!!Se(o,t));case"not":return!Se(e.value,t);case"exists":return!Ei(Se(e.value,t));default:{let o=Se(e.left,t),n=Se(e.right,t);return e.op==="eq"?Fe(o,n):e.op==="neq"?!Fe(o,n):e.op==="in"?Array.isArray(n)&&n.some(i=>Fe(i,o)):e.op==="contains"?Array.isArray(o)?o.some(i=>Fe(i,n)):typeof o=="string"&&typeof n=="string"&&o.includes(n):typeof o!="number"||typeof n!="number"||!Number.isFinite(o)||!Number.isFinite(n)?!1:e.op==="gt"?o>n:e.op==="gte"?o>=n:e.op==="lt"?o<n:o<=n}}}function gt(e,t,o=0,n={nodes:0}){if(o>8||++n.nodes>64||!se(e))return!1;if(e.op==="literal")return we(e,["op","value"])&&Object.hasOwn(e,"value")&&cn(e.value)<=4096&&Et(e.value);if(e.op==="path"){if(!we(e,["op","path"])||typeof e.path!="string")return!1;let i=e.path.split(".");return i[0]==="values"&&i.length>=2&&i.length<=8&&t.has(i[1])&&i.every(s=>At.test(s)&&!je.has(s))}return["not","exists"].includes(e.op)?we(e,["op","value"])&&gt(e.value,t,o+1,n):["and","or"].includes(e.op)?we(e,["op","values"])&&Array.isArray(e.values)&&e.values.length>0&&e.values.length<=16&&e.values.every(i=>gt(i,t,o+1,n)):["eq","neq","gt","gte","lt","lte","in","contains"].includes(e.op)&&we(e,["op","left","right"])&&gt(e.left,t,o+1,n)&&gt(e.right,t,o+1,n)}function It(e,t,o){let n=[],i=e.taskPages;if(i!==void 0&&(!se(i)||Object.keys(i).length===0||Object.keys(i).length>16||cn(i)>mi))return["WORKFLOW_TASK_PAGES_INVALID"];for(let[s,a]of Object.entries(i||{})){let r=`taskPages.${s}`;if(!Ai.test(s)||je.has(s)||!we(a,["title","fields"])||typeof a.title!="string"||!a.title.trim()||a.title.length>160||!Array.isArray(a.fields)||!a.fields.length||a.fields.length>_i){n.push(`WORKFLOW_TASK_PAGE_INVALID:${r}`);continue}let c=new Set(a.fields.map(d=>d?.code));c.size!==a.fields.length&&n.push(`WORKFLOW_TASK_PAGE_DUPLICATE_FIELD:${r}`);let l=0,p=new Set;for(let d of a.fields){if(!we(d,["code","readonly","required","visibleWhen","requiredWhen","subtable"])||!At.test(d.code)||je.has(d.code)||["readonly","required"].some(f=>d[f]!==void 0&&typeof d[f]!="boolean")||d.readonly&&(d.required||d.requiredWhen)){n.push(`WORKFLOW_TASK_PAGE_FIELD_INVALID:${r}`);continue}for(let f of["visibleWhen","requiredWhen"])d[f]!==void 0&&!gt(d[f],c)&&n.push(`WORKFLOW_TASK_PAGE_EXPRESSION_INVALID:${r}.${d.code}.${f}`);if(t){let f=t.get(d.code);if((!f||f.system||f.hidden||f.type==="serial-number"||!d.readonly&&f.widget==="readonly"||!d.readonly&&f.type==="subtable"&&!d.subtable||d.subtable&&f.type!=="subtable")&&n.push(`WORKFLOW_TASK_PAGE_RESOURCE_FIELD_INVALID:${r}.${d.code}`),d.subtable&&f?.subtable){let g=f.subtable;l+=g.maxRows??20,(p.has(g.resourceCode)||!Number.isSafeInteger(g.maxRows??20)||(g.maxRows??20)<1||(g.maxRows??20)>uo||!At.test(g.foreignKey)||!At.test(g.orderField)||g.foreignKey===g.orderField)&&n.push(`WORKFLOW_TASK_SUBTABLE_RELATION_INVALID:${r}.${d.code}`),p.add(g.resourceCode);let E=o?.get(g.resourceCode);o&&(!E||!["uuid","resource-ref.single"].includes(E.get(g.foreignKey)?.type||"")||E.get(g.orderField)?.type!=="number.integer")&&n.push(`WORKFLOW_TASK_SUBTABLE_RELATION_INVALID:${r}.${d.code}`);for(let A of Array.isArray(d.subtable.fields)?d.subtable.fields:[]){if(!A||typeof A.code!="string")continue;let b=E?.get(A.code);(A.code===g.foreignKey||A.code===g.orderField||E&&(!b||b.system||b.hidden||b.type==="subtable"||!A.readonly&&(b.widget==="readonly"||b.type==="serial-number")))&&n.push(`WORKFLOW_TASK_SUBTABLE_FIELD_UNSUPPORTED:${r}.${d.code}.${A.code}`)}}else d.subtable&&t&&n.push(`WORKFLOW_TASK_SUBTABLE_RELATION_INVALID:${r}.${d.code}`)}d.subtable&&(d.readonly||!we(d.subtable,["fields","create","delete","reorder"])||["create","delete","reorder"].some(f=>d.subtable?.[f]!==void 0&&typeof d.subtable[f]!="boolean")||!Array.isArray(d.subtable.fields)||d.subtable.fields.some(f=>f?.subtable)?n.push(`WORKFLOW_TASK_SUBTABLE_PAGE_INVALID:${r}.${d.code}`):n.push(...It({taskPages:{child:{title:"\u5B50\u884C",fields:d.subtable.fields}}},o?.get(t?.get(d.code)?.subtable?.resourceCode||"")).map(f=>`${f}:${r}.${d.code}`)))}(l>gi||l<0||!Number.isSafeInteger(l))&&n.push(`WORKFLOW_TASK_SUBTABLE_BUDGET_EXCEEDED:${r}`)}for(let[s,a]of Object.entries(e.nodes||{}))se(a)&&a.taskPageCode!==void 0&&(a.kind!=="approval"||typeof a.taskPageCode!="string"||!se(i)||!Object.hasOwn(i,a.taskPageCode)?n.push(`WORKFLOW_TASK_PAGE_NOT_FOUND:${s}`):Array.isArray(i[a.taskPageCode]?.fields)&&i[a.taskPageCode].fields.some(r=>r&&(a.fieldPolicy?.fields?.[r.code]||a.fieldPolicy?.default)==="hidden")&&n.push(`WORKFLOW_TASK_PAGE_FIELD_HIDDEN:${s}`));return n}function fo(e,t){return e.fields.map(o=>({code:o.code,visible:o.visibleWhen===void 0||!!Se(o.visibleWhen,t),readonly:o.readonly===!0,required:o.required===!0||o.requiredWhen!==void 0&&!!Se(o.requiredWhen,t)}))}var ge=class extends Error{constructor(o,n){super(o);this.code=o;this.field=n}code;field;rowIndex;childField};function Kr(e,t){return t.map(o=>({key:String(o.id),id:String(o.id),revision:Number(o.revision),state:"persisted",values:Object.fromEntries(fo({title:"\u5B50\u884C",fields:e.fields},o).filter(n=>n.visible&&!n.readonly).map(n=>[n.code,o[n.code]??null]))}))}function Gr(e,t,o,n,i,s=!0){let a=e.subtable,r=f=>{throw new ge(f,e.code)};if(!a||!Number.isSafeInteger(t)||t<1||t>uo||!Array.isArray(n)||n.length>2*t||cn(n)>an||!Et(n))return r("WORKFLOW_TASK_SUBTABLE_VALUES_INVALID");let c=new Map(o.map(f=>[String(f.id),f])),l=new Set,p=new Set,d=[];for(let f of n){if(!we(f,["key","state","id","revision","values"])||typeof f.key!="string"||!pi.test(f.key)||l.has(f.key)||!["created","persisted","deleted"].includes(f.state)||!se(f.values))return r("WORKFLOW_TASK_SUBTABLE_ROW_INVALID");if(l.add(f.key),f.state==="created"){if(!a.create||f.id!==void 0||f.revision!==void 0||c.has(f.key))return r("WORKFLOW_TASK_SUBTABLE_CREATE_FORBIDDEN")}else{if(typeof f.id!="string"||f.id!==f.key||!pi.test(f.id)||p.has(f.id)||!Number.isSafeInteger(f.revision)||f.revision<1||!c.has(f.id))return r("WORKFLOW_TASK_SUBTABLE_SCOPE_CONFLICT");if(p.add(f.id),s&&Number(c.get(f.id).revision)!==f.revision)return r("WORKFLOW_TASK_SUBTABLE_REVISION_CONFLICT")}if(f.state==="deleted"){if(!a.delete||Object.keys(f.values).length)return r("WORKFLOW_TASK_SUBTABLE_DELETE_FORBIDDEN");continue}try{Ii({title:e.code,fields:a.fields},f.id?c.get(f.id):{},f.values,i)}catch(g){if(!(g instanceof ge))throw g;let E=new ge(g.code,e.code);throw E.rowIndex=d.length,g.field!==void 0&&(E.childField=g.field),E}d.push(f)}if(p.size!==c.size)return r("WORKFLOW_TASK_SUBTABLE_SCOPE_CONFLICT");if(d.length>t)return r("WORKFLOW_TASK_SUBTABLE_MAX_ROWS_EXCEEDED");if(!a.reorder){let f=o.filter(E=>d.some(A=>A.id===String(E.id))).map(E=>String(E.id)),g=d.filter(E=>E.state==="persisted").map(E=>E.id);if(!Fe(f,g)||d.some((E,A)=>E.state==="created"&&d.slice(A+1).some(b=>b.state==="persisted")))return r("WORKFLOW_TASK_SUBTABLE_REORDER_FORBIDDEN")}return n}function Et(e,t={members:0},o=0){return++t.members>5e4||o>12?!1:e===null||typeof e=="boolean"?!0:typeof e=="string"?e.length<=an:typeof e=="number"?Number.isFinite(e):Array.isArray(e)?e.length<=1e3&&e.every(n=>Et(n,t,o+1)):se(e)&&Object.entries(e).every(([n,i])=>!je.has(n)&&Et(i,t,o+1))}function Ii(e,t,o,n){if(!se(o)||cn(o)>an||!Et(o))throw new ge("WORKFLOW_TASK_FORM_VALUES_INVALID");let i={...t,...o},s=new Map(fo(e,i).map(a=>[a.code,a]));for(let a of Object.keys(o)){let r=s.get(a);if(!r||r.readonly||!r.visible)throw new ge("WORKFLOW_TASK_FORM_FIELD_NOT_EDITABLE",a)}if(n)for(let a of s.values()){let r=i[a.code],c=e.fields.find(l=>l.code===a.code)?.subtable&&Array.isArray(r)?r.every(l=>se(l)&&l.state==="deleted"):Ei(r);if(a.visible&&!a.readonly&&a.required&&c)throw new ge("WORKFLOW_TASK_FORM_REQUIRED",a.code)}return i}function qr(e,t,o){let n=JSON.parse(JSON.stringify(t));for(let[a,r]of Object.entries(e.subject?.factProjection||{})){let c=a.split(".");if(!c.length||c.length>12||a.length>128||c[0]==="steps"||c.some(p=>!At.test(p)||je.has(p)))throw new ge("WORKFLOW_TASK_FORM_FACT_PROJECTION_INVALID");if(!Object.hasOwn(o,r))throw new ge("WORKFLOW_TASK_FORM_FACT_FIELD_MISSING",r);let l=n;for(let p of c.slice(0,-1))l=l[p]=se(l[p])?l[p]:{};l[c.at(-1)]=o[r]===void 0?void 0:JSON.parse(JSON.stringify(o[r]))}let i=new Set,s=Object.values(e.nodes||{}).filter(a=>a.kind==="action");for(let a=0;a<=s.length;a++){let r=!1;for(let c of s)se(n.steps)&&Object.hasOwn(n.steps,c.id)&&Object.values(c.inputs||{}).some(l=>l.source==="fact"&&!Fe(lo(t,l.path),lo(n,l.path)))&&(delete n.steps[c.id],i.add(c.id),r=!0);if(!r)break}return{facts:n,invalidatedNodeIds:[...i].sort()}}function Jr(e,t,o){let n=e.nodes||{};for(let i of o){let s=new Set,a=new Map,r=c=>{if(c===i)return!0;if(a.has(c))return a.get(c);if(s.has(c)||s.size>200)return!1;let l=n[c];if(!se(l)||l.kind==="end")return!1;s.add(c);let p=l.kind==="approval"?[l.onApprove]:l.kind==="condition"?[...(l.branches||[]).map(f=>f.target),l.otherwise]:[l.next],d=p.length>0&&p.every(f=>typeof f=="string"&&r(f));return s.delete(c),a.set(c,d),d};if(!r(t))return!1}return!0}var _d=256,md=64,gd=262144,zr=/^[a-z][a-z0-9_-]{0,127}$/,Yr=/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)*$/,yi=new Set(["__proto__","prototype","constructor"]),Ne=e=>!!e&&typeof e=="object"&&!Array.isArray(e),yt=(e,t)=>Object.keys(e).every(o=>t.includes(o)),We=(e,t)=>typeof e=="string"&&e.trim().length>0&&e.length<=t&&!/[\u0000-\u001f\u007f]/.test(e),De=e=>typeof e=="string"&&zr.test(e)&&!yi.has(e),Ni=e=>typeof e=="string"&&e.length<=255&&Yr.test(e)&&!e.split(".").some(t=>yi.has(t)),Hr=e=>Ne(e)&&yt(e,["dimension","valueFrom","value"])&&De(e.dimension)&&(We(e.value,255)&&e.valueFrom===void 0||Ni(e.valueFrom)&&e.value===void 0),bi=e=>typeof e=="string"&&/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/.test(e)&&Number.isFinite(Date.parse(e)),bt={type:"string",pattern:"^[a-z][a-z0-9_-]{0,127}$"},po={type:"string",minLength:1,maxLength:128},Xr={type:"object",additionalProperties:!1,required:["policyCode","title","strategy","dimensions","sources"],properties:{policyCode:bt,title:po,strategy:{enum:["replace_then_append","replace_only"]},dimensions:{type:"object",maxProperties:8,propertyNames:bt,additionalProperties:{type:"object",additionalProperties:!1,required:["title","valueFrom"],properties:{title:po,valueFrom:{type:"string",minLength:1,maxLength:255}}}},sources:{type:"object",minProperties:1,maxProperties:16,propertyNames:bt,additionalProperties:{type:"object",additionalProperties:!1,required:["title","provider","roleCode"],properties:{title:po,provider:{enum:["app_role","app_role_in_scope"]},roleCode:bt,scope:{type:"object",additionalProperties:!1,required:["dimension"],properties:{dimension:bt,value:{type:"string",minLength:1,maxLength:255},valueFrom:{type:"string",minLength:1,maxLength:255}}}}}}}};function Nt(e){if(!Ne(e)||!yt(e,["policyCode","title","strategy","dimensions","sources"])||!De(e.policyCode)||!We(e.title,128)||!["replace_then_append","replace_only"].includes(e.strategy))return["WORKFLOW_V2_ROUTING_POLICY_INVALID"];let t=[];return(!Ne(e.dimensions)||Object.keys(e.dimensions).length>8||Object.entries(e.dimensions).some(([o,n])=>!De(o)||!Ne(n)||!yt(n,["title","valueFrom"])||!We(n.title,128)||!Ni(n.valueFrom)))&&t.push("WORKFLOW_V2_ROUTING_DIMENSIONS_INVALID"),(!Ne(e.sources)||Object.keys(e.sources).length<1||Object.keys(e.sources).length>16||Object.entries(e.sources).some(([o,n])=>!De(o)||!Ne(n)||!yt(n,["title","provider","roleCode","scope"])||!We(n.title,128)||!De(n.roleCode)||!["app_role","app_role_in_scope"].includes(n.provider)||(n.provider==="app_role_in_scope"?!Hr(n.scope):n.scope!==void 0)))&&t.push("WORKFLOW_V2_ROUTING_SOURCES_INVALID"),t}function Qr(e,t){if(Nt(e).length)return["WORKFLOW_V2_ROUTING_POLICY_INVALID"];if(!Array.isArray(t)||t.length>256||new TextEncoder().encode(JSON.stringify(t)).length>262144)return["WORKFLOW_V2_ROUTING_RULE_LIMIT_EXCEEDED"];let o=[],n=new Set;for(let i of t){if(!Ne(i)||!yt(i,["ruleCode","title","enabled","workflowCode","nodeId","matches","sourceCode","effect","priority","validFrom","validTo"])||!De(i.ruleCode)||!We(i.title,128)||typeof i.enabled!="boolean"||!De(i.sourceCode)||!Object.hasOwn(e.sources,i.sourceCode)||!["append","replace"].includes(i.effect)||!Number.isSafeInteger(i.priority)||i.priority<-1e3||i.priority>1e3||i.workflowCode!==void 0&&!De(i.workflowCode)||i.nodeId!==void 0&&(!De(i.nodeId)||i.workflowCode===void 0)||i.validFrom!==void 0&&!bi(i.validFrom)||i.validTo!==void 0&&!bi(i.validTo)||i.validFrom&&i.validTo&&Date.parse(i.validFrom)>=Date.parse(i.validTo)){o.push("WORKFLOW_V2_ROUTING_RULE_INVALID");continue}n.has(i.ruleCode)&&o.push(`WORKFLOW_V2_ROUTING_RULE_DUPLICATE:${i.ruleCode}`),n.add(i.ruleCode),(!Ne(i.matches)||Object.entries(i.matches).some(([s,a])=>!Object.hasOwn(e.dimensions,s)||!Array.isArray(a)||a.length<1||a.length>64||new Set(a).size!==a.length||a.some(r=>!We(r,255))))&&o.push(`WORKFLOW_V2_ROUTING_MATCH_INVALID:${i.ruleCode}`)}return[...new Set(o)]}function Ti(e){return JSON.stringify({policyCode:e.policyCode,strategy:e.strategy,dimensions:Object.entries(e.dimensions).sort(([t],[o])=>t<o?-1:t>o?1:0).map(([t,o])=>[t,o.valueFrom]),sources:Object.entries(e.sources).sort(([t],[o])=>t<o?-1:t>o?1:0).map(([t,o])=>[t,o.provider,o.roleCode,o.scope?.dimension??null,o.scope?.valueFrom??null,o.scope?.value??null])})}function _o(e){let t=[],o=new Map;for(let n of e)for(let[i,s]of Object.entries(n.bindings||{})){if(!Ne(s)||s.routing===void 0)continue;let a=Nt(s.routing);if(a.length){t.push(...a.map(l=>`${l}:${i}`));continue}let r=Ti(s.routing),c=o.get(s.routing.policyCode);c&&c!==r&&t.push(`WORKFLOW_V2_ROUTING_POLICY_CONFLICT:${s.routing.policyCode}`),o.set(s.routing.policyCode,r)}return[...new Set(t)]}function Zr(e,t){let o={};for(let[n,i]of Object.entries(e.dimensions)){let s=t;for(let a of i.valueFrom.split("."))s=Ne(s)&&Object.hasOwn(s,a)?s[a]:void 0;if(!(typeof s=="string"&&We(s,255)||typeof s=="number"&&Number.isFinite(s)||typeof s=="boolean"))throw new Error(`WORKFLOW_V2_ROUTING_FACT_REQUIRED:${n}`);o[n]=String(s)}return o}function ea(e,t,o){let n=t.filter(l=>l.enabled&&(!l.validFrom||Date.parse(l.validFrom)<=o.at)&&(!l.validTo||Date.parse(l.validTo)>o.at)&&(!l.workflowCode||l.workflowCode===o.workflowCode)&&(!l.nodeId||l.nodeId===o.nodeId)&&Object.entries(l.matches).every(([p,d])=>d.includes(o.facts[p])));if(n.length>64)throw new Error("WORKFLOW_V2_ROUTING_MATCH_LIMIT_EXCEEDED");let i=(l,p)=>p.priority-l.priority||+!!l.workflowCode-+!!p.workflowCode||+!!l.nodeId-+!!p.nodeId||(l.ruleCode<p.ruleCode?-1:l.ruleCode>p.ruleCode?1:0),s=n.filter(l=>l.effect==="replace").sort(i);if(s.length>1&&s[0].priority===s[1].priority)throw new Error("WORKFLOW_V2_ROUTING_REPLACE_CONFLICT");let a=s[0],r=a&&e.strategy==="replace_only"?[]:n.filter(l=>l.effect==="append").sort(i),c=[...a?[a]:[],...r];return{matched:n.sort(i),replacement:a,applied:c,ignored:n.filter(l=>!c.includes(l))}}var mn=ys(require("crypto"),1);var Oi="native-4",hi={"application-native-2":"1.0.0","authz.native-batch-explain":"1.0.0","authz.native-management":"1.0.0","authz.native-membership-batch":"1.0.0","deployment.durable-runs":"1.0.0","deployment.platform-executor":"1.0.0","environment.on-demand-production":"1.0.0","environment.runtime-lifecycle":"1.0.0","data-api-v2":"1.1.0","data.native-golden-crud":"1.0.0","data.audit-read-access":"1.0.0","data.managed-files":"1.1.0","data.decimal-reservations":"1.1.0","data.decimal-reservation-lifecycle":"1.0.0","data.unique-keys":"1.0.0","data.managed-concurrency":"1.0.0","data.managed-concurrency.durable":"1.0.0","workflow.named-input-sources":"1.0.0","directory-v2":"1.0.0","directory.selected-user":"1.0.0","events-v2":"1.0.0","events.durable-receipts":"1.0.0","events.capture-policy":"1.0.0","events.native-data-actions":"1.0.0","workflow-kernel-v2":"1.0.0","workflow.instance-cancellation-policy":"1.0.0","workflow.node-administration":"1.0.0","workflow.assignment-routing":"1.0.0","workflow.role-references":"1.0.0","workflow.delegation-management":"1.0.0","workflow.automatic-cc":"1.0.0","workflow.task-page-submit":"1.0.0","workflow.task-private-drafts":"1.0.0","workflow.task-managed-files":"1.0.0","workflow.task-rich-fields":"1.0.0","workflow.task-owned-subtables":"1.0.0","workflow.task-owned-files":"1.0.0","workflow.durable-business-step":"1.0.0","business-process.durable-command":"1.1.0","workflow.fresh-command-token":"1.0.0","notification-hub-v2":"1.0.0","authentication.application-login-surface":"1.0.0","public-access.anonymous-owner-records":"1.0.0"};var Id=5,bd=20,yd=50,Nd=50,Td=100,nt=class extends Error{constructor(o,n){super(o);this.code=o;this.pointer=n;this.name="NativeDataPolicyExpressionV2Error"}code;pointer};function Ot(e,t){let o=[],n=(i,s,a)=>{a>5&&Tt("NATIVE_DATA_POLICY_EXPRESSION_DEPTH_EXCEEDED",s);let r=Ri(i,s),c=["allOf","anyOf"].filter(d=>d in r);if(c.length===0){o.push({rule:r,pointer:s}),o.length>50&&Tt("NATIVE_DATA_POLICY_EXPRESSION_LEAVES_EXCEEDED",s);return}let l=c[0],p=r[l];(c.length!==1||Object.keys(r).length!==1||!Array.isArray(p)||p.length<1||p.length>20)&&Tt("NATIVE_DATA_POLICY_EXPRESSION_GROUP_INVALID",s),p.forEach((d,f)=>n(d,`${s}/${l}/${f}`,a+1))};return n(e,t,1),o}function go(e,t){Ot(e,t);let o=(n,i)=>{let s=Ri(n,i);if(Array.isArray(s.allOf))return mo(s.allOf.flatMap((a,r)=>o(a,`${i}/allOf/${r}`)),i);if(Array.isArray(s.anyOf)){let a=[[]];return s.anyOf.forEach((r,c)=>{let l=o(r,`${i}/anyOf/${c}`);a=mo(a.flatMap(p=>l.map(d=>[...p,...d])),i)}),a}return[[s]]};return mo(o(e,t),t)}function mo(e,t){let o=e.reduce((n,i)=>n+i.length,0);return(e.length>50||o>100)&&Tt("NATIVE_DATA_POLICY_EXPRESSION_EXPANSION_EXCEEDED",t),e}function Ri(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&Tt("NATIVE_DATA_POLICY_EXPRESSION_NODE_INVALID",t),e}function Tt(e,t){throw new nt(e,t)}var ta="openxiangda.config-bundle/v3",Ki="openxiangda.contract-bundle/v3",Ci="openxiangda.native-configuration-projection/v1",Rt=Oi,na=/^[a-f0-9]{64}$/,oa=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,ia=/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._*-]+$/,sa=/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/,ra=/^[a-z][a-z0-9]*(?:[-.][a-z0-9]+)*$/,aa=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,ca=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,Si=/^[A-Za-z][A-Za-z0-9_]{0,127}$/,da=/^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$/,la=/^[A-Z][A-Z0-9_]*$/,ua=/^[a-z][a-z0-9-]{2,63}$/,fa=/^[A-Za-z][A-Za-z0-9_-]{0,127}$/,pa=/^[A-Za-z][A-Za-z0-9_.]{0,127}$/,_a=16,ma=2*1024,ga=new Set(["text.short","text.long","number.integer","number.decimal","boolean","date","time","datetime","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","uuid","serial-number"]),Aa=new Set(["overview","database","operations","workflow","members","calendar","document","folder","settings"]),Ea=new Set(["approve","reject","return","transfer","delegate","add_assignee","resubmit","withdraw","terminate","admin_reassign","admin_override","retry_resolution"]),Ia=4*1024*1024,ba=8*1024*1024,ya=40,Na=1e5,Eo=1024*1024,Ta="openxiangda.event-handler-manifest/v2",Gi="openxiangda.application-route-manifest/v3",wi=64,qi=new Set(["id","revision","created_by","updated_by","created_at","updated_at"]),Y=Object.freeze({perspectives:100,resources:100,subjectReadSurfaces:50,capabilities:2e3,operations:500,eventConsumers:100,eventProducers:1e3,eventSchemas:100,eventTypes:500,workflows:100,routes:500,adminPages:500,adminNavigationGroups:100,adminNavigationItems:500}),dn=["openxiangda.data.record.created.v2","openxiangda.data.record.updated.v2","openxiangda.data.record.deleted.v2"],ln=[Qe,"openxiangda.workflow.step.result_received.v2","openxiangda.workflow.step.completed.v2","openxiangda.workflow.step.continuation_failed.v2","openxiangda.workflow.instance.started.v2","openxiangda.workflow.instance.cc_added.v2","openxiangda.workflow.instance.completed.v2","openxiangda.workflow.instance.rejected.v2","openxiangda.workflow.instance.returned.v2","openxiangda.workflow.instance.resumed.v2","openxiangda.workflow.instance.withdrawn.v2","openxiangda.workflow.instance.terminated.v2","openxiangda.workflow.task.created.v2","openxiangda.workflow.task.assigned.v2","openxiangda.workflow.task.assignment_pending.v2","openxiangda.workflow.task.assignment_resolution_failed.v2","openxiangda.workflow.task.approved.v2","openxiangda.workflow.task.completed.v2","openxiangda.workflow.task.rejected.v2","openxiangda.workflow.task.returned.v2","openxiangda.workflow.task.resubmitted.v2","openxiangda.workflow.task.transferred.v2","openxiangda.workflow.task.reassigned.v2","openxiangda.workflow.task.delegated.v2","openxiangda.workflow.task.assignee_added.v2","openxiangda.workflow.task.cancelled.v2","openxiangda.workflow.participant.activated.v2","openxiangda.workflow.participant.completed.v2","openxiangda.workflow.participant.rejected.v2","openxiangda.workflow.participant.returned.v2","openxiangda.workflow.participant.transferred.v2","openxiangda.workflow.participant.reassigned.v2","openxiangda.workflow.participant.delegated.v2","openxiangda.workflow.participant.added.v2","openxiangda.workflow.participant.suspended.v2","openxiangda.workflow.participant.resumed.v2","openxiangda.workflow.participant.cancelled.v2"],Oa=new Set(ln),un=class extends Error{code;pointer;identifiers;constructor(t,o,n={}){super(t),this.name="NativeConfigurationCompilerError",this.code=t,this.pointer=o,this.identifiers=Object.fromEntries(Object.entries(n).slice(0,8).map(([i,s])=>[i,String(s).slice(0,128)]))}};function ha(e){let t=S(e.appCode,"/appCode",128);oa.test(t)||m("NATIVE_CONFIG_APP_CODE_INVALID","/appCode");let o=bo(e.expectedConfigDigest,"/expectedConfigDigest"),n=bo(e.expectedContractDigest,"/expectedContractDigest"),i=Mi(e.configBytes,Ia,"/configBytes","NATIVE_CONFIG_ARTIFACT_TOO_LARGE"),s=Mi(e.contractBytes,ba,"/contractBytes","NATIVE_CONTRACT_ARTIFACT_TOO_LARGE");Ui(i,o,"/configBytes","NATIVE_CONFIG_DIGEST_MISMATCH"),Ui(s,n,"/contractBytes","NATIVE_CONTRACT_DIGEST_MISMATCH");let a=ji(i,"/configBytes","NATIVE_CONFIG_JSON_INVALID","NATIVE_CONFIG_NOT_CANONICAL"),r=ji(s,"/contractBytes","NATIVE_CONTRACT_JSON_INVALID","NATIVE_CONTRACT_NOT_CANONICAL");Wi(a,"/config"),Wi(r,"/contracts");let c=a,l=r;Ca(c,t),Sa(l,t,o);let p=wa(c,o,l.generatorVersion);mc(p,l,c),ee(p)!==ee(l)&&m("NATIVE_CONTRACT_CLOSURE_MISMATCH",yo(p,l,"/contracts"));let d={authz:{appCode:t,...c.authz,perspectives:c.perspectives,capabilityCatalog:p.capabilities},data:{appCode:t,resources:c.data.resources,resourceContracts:p.resources,...p.concurrency?{concurrency:p.concurrency}:{},...p.subjectReadSurfaces?{subjectReadSurfaces:p.subjectReadSurfaces}:{}},events:{appCode:t,...c.events,consumers:p.eventConsumers,producers:p.eventProducers,handlerManifest:p.eventHandlerManifest,eventTypes:p.eventTypes,capturePlans:zi({resources:c.data.resources,dataPolicies:c.authz.dataPolicies,subscriptions:p.eventConsumers,capturePolicies:c.events.capturePolicies})},workflows:{appCode:t,...c.workflows,contracts:p.workflows},runtime:{appCode:t,requirements:c.runtime,backend:c.backend,frontend:c.frontend},contracts:p},f={authz:ot(d.authz),data:ot(d.data),events:ot(d.events),workflows:ot(d.workflows),runtime:ot(d.runtime),contracts:ot(d.contracts)},g={configDigest:o,contractDigest:n,generatorVersion:l.generatorVersion},E=Ji(c),A={schemaVersion:Ci,compilerContractVersion:Rt,appCode:t,source:g,projections:f,requiredPlatformCapabilities:E,aggregateDigest:X({schemaVersion:Ci,compilerContractVersion:Rt,appCode:t,source:g,requiredPlatformCapabilities:E,projectionDigests:Object.fromEntries(Object.entries(f).map(([b,I])=>[b,I.digest]))})};return rs(A)}function Ji(e){let t=e.authz.roles,o=e.data.resources,n=e.backend.operations,i=t.some(u=>u.capabilities.some(N=>N.endsWith(":directory:read")))||o.some(u=>u.schema.fields.some(N=>["user.single","user.multiple","department.single","department.multiple"].includes(N.type)))||n.some(u=>u.platformAccess?.directory),s=!!(e.events.subscriptions.length||e.events.timers.length||e.events.dateTriggers.length||e.events.schemas.length),a=n.some(u=>u.platformAccess?.managedFiles||u.platformAccess?.managedFileCopies)||e.events.subscriptions.some(u=>u.platformAccess?.managedFileCopies),r=n.some(u=>u.platformAccess?.notification)||e.events.subscriptions.some(u=>u.platformAccess?.notification),c=(u,N,y=!1)=>{let O=o.find(h=>h.code===u.definition.subject?.resourceCode)?.schema.fields||[];return Object.values(u.definition.taskPages||{}).some(h=>h.fields.some(C=>{if(C.readonly)return!1;let k=O.find(M=>M.code===C.code);if(!y&&k&&N.includes(k.type))return!0;if(!C.subtable||!k?.subtable)return!1;let V=o.find(M=>M.code===k.subtable.resourceCode)?.schema.fields||[];return C.subtable.fields.some(M=>!M.readonly&&V.some(P=>P.code===M.code&&N.includes(P.type)))}))},l=e.workflows.definitions.filter(u=>c(u,["file","image","signature","text.rich"])),p=e.workflows.definitions.filter(u=>c(u,["signature","text.rich"])),d=e.workflows.definitions.filter(u=>c(u,["file","image","signature","text.rich"],!0)),f=e.workflows.definitions.filter(u=>u.launch.mode==="standalone"||u.launch.mode==="hidden-handoff"),g=n.some(u=>u.platformAccess?.workflow)||f.length>0,E=f.filter(u=>{let N=u.launch.submission;if(!N)return!1;let y=o.find(O=>O.code===u.definition.subject.resourceCode);return[N.create,N.existing].some(O=>O&&Object.values(O.inputs).some(h=>h.source==="field"&&y?.schema.fields.some(C=>C.code===h.fieldCode&&C.type.startsWith("resource-ref.")&&C.source)))}),A={resources:o},b={perspectives:e.perspectives,authz:e.authz},I={schemaVersion:e.schemaVersion,appCode:e.appCode,frontend:{routes:e.frontend.routes,user:e.frontend.user,admin:e.frontend.admin,devicePolicy:e.frontend.devicePolicy},backend:{operations:n.map(u=>({code:u.code,method:u.method,path:u.path,capability:u.capability,platformAccess:u.platformAccess||null,...u.browser?{browser:u.browser}:{},ai:u.ai||null}))}};return[...o.some(u=>u.uniqueKeys?.length)?[{code:"data.unique-keys",declaration:o.filter(u=>u.uniqueKeys?.length).map(u=>({code:u.code,uniqueKeys:u.uniqueKeys}))}]:[],...e.data.concurrency?[{code:"data.managed-concurrency",declaration:e.data.concurrency}]:[],...e.data.concurrency?.commands.some(u=>u.mode==="durable")?[{code:"data.managed-concurrency.durable",declaration:e.data.concurrency}]:[],...o.some(u=>u.decimalReservationLifecycle)?[{code:"data.decimal-reservation-lifecycle",declaration:o.filter(u=>u.decimalReservationLifecycle).map(u=>({code:u.code,decimalReservationLifecycle:u.decimalReservationLifecycle}))}]:[],...n.some(u=>u.platformAccess?.decimalReservation)||e.events.subscriptions.some(u=>u.platformAccess?.decimalReservation)?[{code:"data.decimal-reservations",declaration:[...n.filter(u=>u.platformAccess?.decimalReservation).map(u=>({code:u.code,decimalReservation:u.platformAccess.decimalReservation})),...e.events.subscriptions.filter(u=>u.platformAccess?.decimalReservation).map(u=>({subscriptionCode:u.code,decimalReservation:u.platformAccess.decimalReservation}))]}]:[],{code:"application-native-2",declaration:I},{code:"authz.native-batch-explain",declaration:b},{code:"authz.native-management",declaration:b},{code:"deployment.durable-runs",declaration:I.backend},{code:"deployment.platform-executor",declaration:I.backend},{code:"environment.on-demand-production",declaration:{environments:["preproduction","production"]}},{code:"environment.runtime-lifecycle",declaration:{environments:["preproduction","production"]}},...o.length?[{code:"data-api-v2",declaration:A},{code:"data.native-golden-crud",declaration:A}]:[],...o.some(Dn)?[{code:"data.audit-read-access",declaration:A}]:[],...i?[{code:"directory-v2",declaration:{roles:t.map(u=>({code:u.code,capabilities:u.capabilities.filter(N=>N.endsWith(":directory:read"))})),resources:o.map(u=>({code:u.code,fields:u.schema.fields.filter(N=>["user.single","user.multiple","department.single","department.multiple"].includes(N.type))})),operations:n.filter(u=>u.platformAccess?.directory).map(u=>({code:u.code,directory:u.platformAccess.directory}))}}]:[],...n.some(u=>u.platformAccess?.directory?.mode==="selected-user")?[{code:"directory.selected-user",declaration:n.filter(u=>u.platformAccess?.directory?.mode==="selected-user").map(u=>({code:u.code,directory:u.platformAccess.directory}))}]:[],...a?[{code:"data.managed-files",declaration:{operations:n.filter(u=>u.platformAccess?.managedFiles||u.platformAccess?.managedFileCopies).map(u=>({code:u.code,...u.platformAccess?.managedFiles?{managedFiles:u.platformAccess.managedFiles}:{},...u.platformAccess?.managedFileCopies?{managedFileCopies:u.platformAccess.managedFileCopies}:{}})),subscriptions:e.events.subscriptions.filter(u=>u.platformAccess?.managedFileCopies).map(u=>({code:u.code,managedFileCopies:u.platformAccess.managedFileCopies}))}}]:[],...e.events.subscriptions.some(u=>u.execution)?[{code:"events.native-data-actions",declaration:e.events.subscriptions.filter(u=>u.execution)}]:[],...e.events.capturePolicies?.length?[{code:"events.capture-policy",declaration:e.events.capturePolicies}]:[],...s?[{code:"events-v2",declaration:e.events},{code:"events.durable-receipts",declaration:e.events}]:[],...e.workflows.activations.length?[{code:"workflow-kernel-v2",declaration:e.workflows},{code:"workflow.fresh-command-token",declaration:e.workflows}]:[],...e.workflows.definitions.some(u=>u.definition.instanceCommands!==void 0)?[{code:"workflow.instance-cancellation-policy",declaration:e.workflows.definitions.filter(u=>u.definition.instanceCommands!==void 0)}]:[],...E.length?[{code:"workflow.named-input-sources",declaration:E}]:[],...e.workflows.definitions.some(u=>Object.values(u.definition.nodes).some(N=>N.administration!==void 0||N.operationPolicy!==void 0))?[{code:"workflow.node-administration",declaration:e.workflows.definitions.filter(u=>Object.values(u.definition.nodes).some(N=>N.administration!==void 0||N.operationPolicy!==void 0))}]:[],...e.workflows.definitions.some(u=>Object.values(u.definition.nodes).some(N=>N.kind==="cc"))?[{code:"workflow.automatic-cc",declaration:e.workflows.definitions.filter(u=>Object.values(u.definition.nodes).some(N=>N.kind==="cc"))}]:[],...e.workflows.definitions.some(u=>u.definition.taskPages!==void 0)?["workflow.task-page-submit","workflow.task-private-drafts"].map(u=>({code:u,declaration:e.workflows.definitions.filter(N=>N.definition.taskPages!==void 0)})):[],...l.length?[{code:"workflow.task-managed-files",declaration:l}]:[],...d.length?[{code:"workflow.task-owned-files",declaration:d}]:[],...p.length?[{code:"workflow.task-rich-fields",declaration:p}]:[],...e.workflows.definitions.some(u=>Object.values(u.definition.taskPages||{}).some(N=>N.fields.some(y=>y.subtable)))?[{code:"workflow.task-owned-subtables",declaration:e.workflows.definitions.filter(u=>Object.values(u.definition.taskPages||{}).some(N=>N.fields.some(y=>y.subtable)))}]:[],...e.workflows.definitions.some(u=>Object.values(u.definition.nodes).some(N=>N.kind==="action"))?[{code:"workflow.durable-business-step",declaration:e.workflows.definitions.filter(u=>Object.values(u.definition.nodes).some(N=>N.kind==="action"))}]:[],...e.workflows.bindings.some(u=>Object.values(u.binding.bindings).some(N=>N.routing!==void 0))?[{code:"workflow.assignment-routing",declaration:e.workflows.bindings.filter(u=>Object.values(u.binding.bindings).some(N=>N.routing!==void 0))}]:[],...g?[{code:"business-process.durable-command",declaration:{operations:n.filter(u=>u.platformAccess?.workflow).map(u=>({code:u.code,workflow:u.platformAccess.workflow})),definitions:f,activations:e.workflows.activations.filter(u=>f.some(N=>N.definition.code===u.workflowCode))}}]:[],...r?[{code:"notification-hub-v2",declaration:{operations:n.filter(u=>u.platformAccess?.notification).map(u=>({code:u.code,notification:u.platformAccess.notification})),subscriptions:e.events.subscriptions.filter(u=>u.platformAccess?.notification).map(u=>({code:u.code,notification:u.platformAccess.notification}))}}]:[],...e.frontend.authentication?[{code:"authentication.application-login-surface",declaration:e.frontend.authentication}]:[],...e.frontend.publicAccess?[{code:"public-access.anonymous-owner-records",declaration:e.frontend.publicAccess}]:[]].map(({code:u,declaration:N})=>({code:u,contractVersion:hi[u],usageDigest:`sha256:${X(N)}`})).sort((u,N)=>u.code===N.code?0:u.code<N.code?-1:1)}function zi(e){let t=new Map,o=new Set(e.resources.map(s=>String(s.code)));for(let[s,a]of w(e.capturePolicies===void 0?[]:e.capturePolicies,"/capturePlan/capturePolicies",100).entries()){let r=`/capturePlan/capturePolicies/${s}`,c=T(a,r);R(c,["resourceCode","mode"],r);let l=J(c.resourceCode,`${r}/resourceCode`);o.has(l)||m("NATIVE_EVENT_CAPTURE_RESOURCE_NOT_FOUND",r,{resourceCode:l}),t.has(l)&&m("NATIVE_EVENT_CAPTURE_POLICY_DUPLICATE",r,{resourceCode:l}),c.mode!=="all"&&c.mode!=="subscribed"&&m("NATIVE_EVENT_CAPTURE_MODE_INVALID",`${r}/mode`),t.set(l,c.mode)}let n=new Map(e.dataPolicies.map((s,a)=>{let r=T(s,`/capturePlan/dataPolicies/${a}`);return[String(r.code),r]})),i=e.subscriptions.map((s,a)=>T(s,`/capturePlan/subscriptions/${a}`));return e.resources.map((s,a)=>{let r=`/capturePlan/resources/${a}`,c=T(s,r),l=J(c.code,`${r}/code`),p=c.schema?T(c.schema,`${r}/schema`):c,d=new Set(w(p.fields||[],`${r}/schema/fields`,500).map((O,h)=>K(T(O,`${r}/schema/fields/${h}`).code,`${r}/schema/fields/${h}/code`))),f=c.dataPolicyCode?F(c.dataPolicyCode,`${r}/dataPolicyCode`):null,g=f?n.get(f):void 0;f&&!g&&m("NATIVE_EVENT_CAPTURE_AUTHZ_POLICY_NOT_FOUND",r,{resourceCode:l,dataPolicyCode:f});let E=new Set;for(let O of g?.rules||[])E.add(String(O.field));if(g?.readExpression)for(let O of Ot(g.readExpression,`${r}/readExpression`))E.add(String(O.rule.field));let A=new Set,b=new Set,I=new Set;for(let[O,h]of i.entries()){let C=w(h.eventTypes,`/capturePlan/subscriptions/${O}/eventTypes`,20).map(String);if(!C.some(P=>P.startsWith("openxiangda.data.")))continue;let k=T(h.filter||{},`/capturePlan/subscriptions/${O}/filter`),V=Array.isArray(k.resourceCodes)?k.resourceCodes.map(String):[];if(V.length&&!V.includes(l))continue;for(let P of C)dn.includes(P)&&I.add(P);for(let P of Ra(k,`/capturePlan/subscriptions/${O}/filter`))A.add(P);let M=T(h.payload||{},`/capturePlan/subscriptions/${O}/payload`);for(let P of w(M.fields||[],`/capturePlan/subscriptions/${O}/payload/fields`,32))b.add(K(P,`/capturePlan/subscriptions/${O}/payload/fields`))}let _=new Set([...A,...b]),u=new Set([..._,...E]);u.size>wi&&m("NATIVE_EVENT_CAPTURE_FIELDS_LIMIT",r,{resourceCode:l,maximum:wi});for(let O of u)!d.has(O)&&!(E.has(O)&&qi.has(O))&&m("NATIVE_EVENT_CAPTURE_FIELD_NOT_FOUND",r,{resourceCode:l,field:O});let N=T(c.fieldPolicies||{},`${r}/fieldPolicies`);for(let O of _)N[O]?.mask==="omit"&&m("NATIVE_EVENT_CAPTURE_FIELD_SENSITIVE",r,{resourceCode:l,field:O});let y={resourceCode:l,...t.get(l)==="subscribed"?{capturedEventTypes:[...I].sort()}:{},filterFields:[...A].sort(),projectionFields:[...b].sort(),authorizationFields:[...E].sort(),captureFields:[...u].sort()};return{...y,digest:X(y)}}).sort((s,a)=>s.resourceCode.localeCompare(a.resourceCode))}function Ra(e,t){let o=new Set;for(let[a,r]of w(e.changes||[],`${t}/changes`,16).entries()){let c=T(r,`${t}/changes/${a}`);o.add(K(c.field,`${t}/changes/${a}/field`))}let n=T(e.changedFields||{},`${t}/changedFields`);for(let a of["anyOf","allOf","noneOf"])for(let[r,c]of w(n[a]||[],`${t}/changedFields/${a}`,32).entries())o.add(K(c,`${t}/changedFields/${a}/${r}`));let i=0,s=(a,r,c)=>{c>3&&m("NATIVE_EVENT_FILTER_DEPTH_LIMIT",r);let l=T(a,r);if(l.change){let d=T(l.change,`${r}/change`);o.add(K(d.field,`${r}/change/field`)),i+=1;return}if(l.not){s(l.not,`${r}/not`,c+1);return}let p=l.all?"all":l.any?"any":null;p||m("NATIVE_EVENT_FILTER_CONDITION_INVALID",r);for(let[d,f]of w(l[p],`${r}/${p}`,16).entries())s(f,`${r}/${p}/${d}`,c+1)};return e.where&&s(e.where,`${t}/where`,1),i+=Array.isArray(e.changes)?e.changes.length:0,i>16&&m("NATIVE_EVENT_FILTER_ATOM_LIMIT",t),[...o].sort()}function Ca(e,t){R(e,["schemaVersion","compilerContractVersion","appCode","perspectives","authz","backend","data","events","workflows","frontend","runtime"],"/config"),j(e.schemaVersion,ta,"/config/schemaVersion"),j(e.compilerContractVersion,Rt,"/config/compilerContractVersion"),j(e.appCode,t,"/config/appCode"),w(e.perspectives,"/config/perspectives",100);let o=T(e.authz,"/config/authz");R(o,["capabilities","roles","scopeDimensions","scopeSources","roleMembershipSources","relationshipGrantSources","dataPolicies","authorizationTransitions"],"/config/authz",["authenticatedUserRoleCode"]),w(o.capabilities,"/config/authz/capabilities",2e3),w(o.roles,"/config/authz/roles",100),w(o.scopeDimensions,"/config/authz/scopeDimensions",100),w(o.scopeSources,"/config/authz/scopeSources",100),w(o.roleMembershipSources,"/config/authz/roleMembershipSources",100),w(o.relationshipGrantSources,"/config/authz/relationshipGrantSources",100),w(o.dataPolicies,"/config/authz/dataPolicies",100),w(o.authorizationTransitions,"/config/authz/authorizationTransitions",100);let n=T(e.backend,"/config/backend");R(n,["secrets","operations"],"/config/backend"),w(n.secrets,"/config/backend/secrets",100),w(n.operations,"/config/backend/operations",500),dc(n.secrets);let i=T(e.data,"/config/data");R(i,["resources"],"/config/data",["resourceDetailRoutes","subjectReadSurfaces","concurrency"]),w(i.resources,"/config/data/resources",100),i.subjectReadSurfaces!==void 0&&w(i.subjectReadSurfaces,"/config/data/subjectReadSurfaces",Y.subjectReadSurfaces),i.resourceDetailRoutes!==void 0&&w(i.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100);let s=T(e.events,"/config/events");R(s,["schemas","subscriptions","timers","dateTriggers"],"/config/events",["capturePolicies"]),w(s.schemas,"/config/events/schemas",100),w(s.subscriptions,"/config/events/subscriptions",100),w(s.timers,"/config/events/timers",100),w(s.dateTriggers,"/config/events/dateTriggers",100);let a=T(e.workflows,"/config/workflows");R(a,["definitions","bindings","activations","providers","editableParameters"],"/config/workflows"),w(a.definitions,"/config/workflows/definitions",100),w(a.bindings,"/config/workflows/bindings",100),w(a.activations,"/config/workflows/activations",100),w(a.providers,"/config/workflows/providers",100),w(a.editableParameters,"/config/workflows/editableParameters",100);let r=T(e.frontend,"/config/frontend");R(r,["routes","user","admin","devicePolicy"],"/config/frontend",["authentication","publicAccess"]),w(r.routes,"/config/frontend/routes",500);let c=T(r.user,"/config/frontend/user");R(c,["applicationTodoCenter"],"/config/frontend/user"),st(c.applicationTodoCenter,"/config/frontend/user/applicationTodoCenter"),No(r.devicePolicy,"/config/frontend/devicePolicy"),Object.prototype.hasOwnProperty.call(r,"authentication")&&Hi(r.authentication,r.routes,e,"/config/frontend/authentication"),Object.prototype.hasOwnProperty.call(r,"publicAccess")&&Ka(r.publicAccess,e,"/config/frontend/publicAccess");let l=T(r.admin,"/config/frontend/admin");R(l,["navigation"],"/config/frontend/admin",["access"]),l.access!==void 0&&An(l.access,"/config/frontend/admin/access",e.appCode),za(l.navigation,"/config/frontend/admin/navigation");let p=T(e.runtime,"/config/runtime");R(p,["protocolCapabilities","health"],"/config/runtime"),v(p.protocolCapabilities,"/config/runtime/protocolCapabilities",100),R(T(p.health,"/config/runtime/health"),["livePath","readyPath","versionPath"],"/config/runtime/health"),j(p.health.livePath,"/__platform/health","/config/runtime/health/livePath"),j(p.health.readyPath,"/__platform/ready","/config/runtime/health/readyPath"),j(p.health.versionPath,"/__platform/version","/config/runtime/health/versionPath")}function Sa(e,t,o){R(e,["schemaVersion","compilerContractVersion","generatorVersion","appCode","configDigest","perspectives","resources","capabilities","operations","eventConsumers","eventProducers","eventSchemas","eventHandlerManifest","eventTypes","workflows","routes","routeManifest","adminPages","adminNavigation"],"/contracts",["authentication","publicAccess","adminAccess","subjectReadSurfaces","concurrency"]),j(e.schemaVersion,Ki,"/contracts/schemaVersion"),j(e.compilerContractVersion,Rt,"/contracts/compilerContractVersion"),S(e.generatorVersion,"/contracts/generatorVersion",128),j(e.appCode,t,"/contracts/appCode"),j(e.configDigest,o,"/contracts/configDigest"),w(e.perspectives,"/contracts/perspectives",Y.perspectives),w(e.resources,"/contracts/resources",Y.resources),e.subjectReadSurfaces!==void 0&&w(e.subjectReadSurfaces,"/contracts/subjectReadSurfaces",Y.subjectReadSurfaces),w(e.capabilities,"/contracts/capabilities",Y.capabilities),w(e.operations,"/contracts/operations",Y.operations),w(e.eventConsumers,"/contracts/eventConsumers",Y.eventConsumers),w(e.eventProducers,"/contracts/eventProducers",Y.eventProducers),w(e.eventSchemas,"/contracts/eventSchemas",Y.eventSchemas),T(e.eventHandlerManifest,"/contracts/eventHandlerManifest"),v(e.eventTypes,"/contracts/eventTypes",Y.eventTypes),w(e.workflows,"/contracts/workflows",Y.workflows),w(e.routes,"/contracts/routes",Y.routes),Object.prototype.hasOwnProperty.call(e,"authentication")&&Ma(e.authentication,"/contracts/authentication"),Object.prototype.hasOwnProperty.call(e,"publicAccess")&&Ga(e.publicAccess,"/contracts/publicAccess"),Object.prototype.hasOwnProperty.call(e,"adminAccess")&&An(e.adminAccess,"/contracts/adminAccess",t),ec(e.routeManifest,"/contracts/routeManifest",t),Xa(e.adminPages,"/contracts/adminPages"),Qa(e.adminNavigation,"/contracts/adminNavigation")}function wa(e,t,o){let n=ka(e);sc(e,n),ac(e),rc(e),lc(e);let i=e.events.schemas.map((_,u)=>{let N=`/config/events/schemas/${u}`,y=T(_,N),O=S(y.eventType,`${N}/eventType`,255);return O.startsWith("openxiangda.")&&m("NATIVE_EVENT_SCHEMA_RESERVED",`${N}/eventType`,{eventType:O}),j(y.schemaDigest,X(T(y.jsonSchema,`${N}/jsonSchema`)),`${N}/schemaDigest`),y}),s=new Set([...dn,...ln,...i.map(_=>String(_.eventType))]),a=new Map(e.data.resources.map(_=>[String(_.code),new Map(_.schema.fields.map(u=>[String(u.code),String(u.type)]))])),r=Z(e.events.subscriptions.map((_,u)=>{let N=`/config/events/subscriptions/${u}`,y=T(_,N),O=v(y.eventTypes,`${N}/eventTypes`,20);O.forEach((V,M)=>{s.has(V)||m("NATIVE_EVENT_TYPE_NOT_REGISTERED",`${N}/eventTypes/${M}`,{eventType:V})});let h=Qn(y,e.data.resources,N),C=$a(y.delivery,O,`${N}/delivery`),k=Da(y.platformAccess,`${N}/platformAccess`,a,e,y);return{code:F(y.code,`${N}/code`),endpointPath:Ae(y.endpointPath,`${N}/endpointPath`),eventTypes:O,filter:T(y.filter,`${N}/filter`),payload:h?.payload||T(y.payload,`${N}/payload`),...h?{execution:h.execution}:{},...k?{platformAccess:k}:{},delivery:C}}),_=>_.code),c=new Map(i.map(_=>[String(_.eventType),String(_.dataSchemaVersion)])),l=Z([...e.data.resources.flatMap(_=>dn.map(u=>({code:`data:${_.code}:${u}`,source:"data",eventType:u,dataSchemaVersion:"2.0.0",resourceCode:_.code}))),...i.map(_=>({code:`app:${_.eventType}`,source:"app",eventType:_.eventType,dataSchemaVersion:_.dataSchemaVersion})),...e.events.timers.map(_=>({code:_.code,source:"timer",eventType:_.eventType,dataSchemaVersion:c.get(String(_.eventType))||"2.0.0"})),...e.events.dateTriggers.map(_=>({code:_.code,source:"date",eventType:_.eventType,dataSchemaVersion:c.get(String(_.eventType))||"2.0.0",resourceCode:_.resourceCode,field:_.field})),...e.workflows.activations.length?ln.filter(_=>!oo.includes(_)||e.workflows.definitions.some(u=>Object.values(u.definition.nodes).some(N=>N.kind==="action"))).map(_=>({code:`workflow:${_}`,source:"workflow",eventType:_,dataSchemaVersion:"2.0.0"})):[]],_=>`${_.source}:${_.code}:${_.eventType}`),p=U([...r.flatMap(_=>_.eventTypes),...l.map(_=>String(_.eventType))]);Ha(e);let d=Zi(e),f;try{f=Mn(e.data.concurrency,e.data.resources,n)}catch(_){throw _ instanceof Ye&&m(_.code,_.pointer,{reason:_.reason}),_}f?.commands.some(_=>_.mode==="durable")&&e.backend?.enabled===!1&&m("NATIVE_MANAGED_CONCURRENCY_INVALID","/data/concurrency",{reason:"durable commands require backend runtime"});let g=Fa(e,n),E=Yi(e),A=e.workflows.definitions.map(_=>_.definition),b=Zt(A),I=so(A,r,!0);I.length&&m(I[0],"/config/events/subscriptions");try{Gn(e.data.resources,E)}catch(_){throw _ instanceof Pe&&m(_.code,_.pointer,{reason:_.reason}),_}return{schemaVersion:Ki,compilerContractVersion:Rt,generatorVersion:o,appCode:e.appCode,configDigest:t,perspectives:e.perspectives,resources:Va(e),...g.length?{subjectReadSurfaces:g}:{},...f?{concurrency:f}:{},capabilities:Z(n,_=>_.code),operations:E,eventConsumers:r,eventProducers:l,eventSchemas:i,eventHandlerManifest:{schemaVersion:Ta,appCode:e.appCode,handlers:r.filter(_=>!_.execution).map(_=>({code:_.code,endpointPath:_.endpointPath,eventTypes:_.eventTypes,dataSchemaVersions:U(_.eventTypes.map(u=>u.startsWith("openxiangda.")?"2.0.0":c.get(u)||"2.0.0")),maxBodyBytes:65536,receiptProtocolVersion:2,...b[_.code]?{workflowStep:b[_.code]}:{}}))},eventTypes:p,workflows:ns(e),routes:gn(e),...Object.prototype.hasOwnProperty.call(e.frontend,"authentication")?{authentication:Ua(e)}:{},...Object.prototype.hasOwnProperty.call(e.frontend,"publicAccess")?{publicAccess:qa(e)}:{},...e.frontend.admin.access?{adminAccess:e.frontend.admin.access}:{},routeManifest:oc(e),adminPages:d,adminNavigation:Ja(e)}}function Da(e,t,o,n,i){if(e===void 0)return;let s=T(e,t);R(s,["notification","managedFileCopies","decimalReservation"],t,!0);let a={};if(s.decimalReservation!==void 0)try{a.decimalReservation=ti(s.decimalReservation,ni(n,i))}catch{m("NATIVE_EVENT_DECIMAL_RESERVATION_INVALID",`${t}/decimalReservation`)}if(s.notification!==void 0){let r=T(s.notification,`${t}/notification`);R(r,["mode"],`${t}/notification`),j(r.mode,"business-standard",`${t}/notification/mode`),a.notification={mode:"business-standard"}}if(s.managedFileCopies!==void 0){let r=w(s.managedFileCopies,`${t}/managedFileCopies`,16);r.length||m("NATIVE_EVENT_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let c=new Set;a.managedFileCopies=Z(r.map((l,p)=>{let d=`${t}/managedFileCopies/${p}`,f=T(l,d);R(f,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],d),j(f.mode,"copy",`${d}/mode`);let g=J(f.sourceResourceCode,`${d}/sourceResourceCode`),E=J(f.targetResourceCode,`${d}/targetResourceCode`),A=o.get(g),b=o.get(E);(!A||!b)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_RESOURCE_INVALID",d);let I=v(f.sourceFieldCodes,`${d}/sourceFieldCodes`,16),_=v(f.targetFieldCodes,`${d}/targetFieldCodes`,16);(!I.length||I.length!==_.length)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_FIELDS_INVALID",d),I.forEach((N,y)=>{let O=A.get(N),h=b.get(_[y]);(!["file","image"].includes(String(O))||O!==h)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_FIELD_INVALID",`${d}/sourceFieldCodes/${y}`)});let u=`${g}:${I.join(",")}=>${E}:${_.join(",")}`;return c.has(u)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_DUPLICATE",d),c.add(u),{mode:"copy",sourceResourceCode:g,sourceFieldCodes:U(I),targetResourceCode:E,targetFieldCodes:U(_)}}),l=>`${l.sourceResourceCode}:${l.sourceFieldCodes.join(",")}=>${l.targetResourceCode}:${l.targetFieldCodes.join(",")}`)}return Object.keys(a).length||m("NATIVE_EVENT_PLATFORM_ACCESS_EMPTY",t),a}function $a(e,t,o){let n=T(e,o);R(n,["timeoutMs","maxAttempts","initialBackoffMs","maxBackoffMs","ordering","concurrency"],o),te(n.timeoutMs,`${o}/timeoutMs`,1e3,3e4),te(n.maxAttempts,`${o}/maxAttempts`,1,12);let i=te(n.initialBackoffMs,`${o}/initialBackoffMs`,1e3,3e5);te(n.maxBackoffMs,`${o}/maxBackoffMs`,i,18e5),te(n.concurrency,`${o}/concurrency`,1,50);let s=S(n.ordering,`${o}/ordering`,32);return["none","record","workflow-instance"].includes(s)||m("NATIVE_EVENT_DELIVERY_ORDERING_INVALID",`${o}/ordering`),s==="workflow-instance"&&t.some(a=>!Oa.has(a))&&m("NATIVE_EVENT_WORKFLOW_ORDERING_REQUIRES_WORKFLOW_FACTS",`${o}/ordering`),n}function ka(e){let t=new Map;for(let o of ss(e.appCode))t.set(o.code,o);for(let[o,n]of e.authz.capabilities.entries()){let i=`/config/authz/capabilities/${o}`,s=T(n,i);R(s,["code","kind","name","description"],i,!0);let a=$e(s.code,`${i}/code`,e.appCode);t.has(a)&&m("NATIVE_CAPABILITY_DUPLICATE",`${i}/code`),["backend","ui"].includes(s.kind)||m("NATIVE_CAPABILITY_KIND_INVALID",`${i}/kind`);let r={code:a,kind:s.kind,name:S(s.name,`${i}/name`,255),source:"explicit",...s.description===void 0?{}:{description:Oo(s.description,`${i}/description`,2e3)}};t.set(a,r)}for(let[o,n]of e.data.resources.entries()){let i=`/config/data/resources/${o}`,s=Me(n,i,e.appCode),a={read:`\u8BFB\u53D6${s.name}`,create:`\u65B0\u5EFA${s.name}`,update:`\u66F4\u65B0${s.name}`,delete:`\u5220\u9664${s.name}`};for(let r of["read","create","update","delete"]){let c=$e(s.capabilities[r],`${i}/capabilities/${r}`,e.appCode);t.has(c)&&m("NATIVE_CAPABILITY_DUPLICATE",`${i}/capabilities/${r}`),t.set(c,{code:c,kind:"data",name:a[r],source:"data"})}for(let[r,c]of Object.entries(s.fieldPolicies)){if(Ge(r))continue;let l=T(c,`${i}/fieldPolicies/${r}`);for(let p of["read","create","update"])if(Array.isArray(l[p]))for(let d of v(l[p],`${i}/fieldPolicies/${r}/${p}`,2e3))$e(d,`${i}/fieldPolicies/${r}/${p}`,e.appCode),!t.has(d)&&t.set(d,{code:d,kind:"data",name:`${s.name}.${r}.${p}`,source:"data"})}}return[...t.values()]}function Va(e){let t=va(e);return Z(e.data.resources.map((o,n)=>{let i=Me(o,`/config/data/resources/${n}`,e.appCode),s=t.get(i.code);return{code:i.code,schemaDigest:X(i.schema),fields:Z(i.schema.fields.map(a=>({code:a.code,type:a.type})),a=>a.code),...s?{detailRouteCode:s}:{}}}),o=>o.code)}function Fa(e,t){if(e.data.subjectReadSurfaces===void 0)return[];let o=w(e.data.subjectReadSurfaces,"/config/data/subjectReadSurfaces",Y.subjectReadSurfaces),n=new Set(t.map(a=>String(a.code))),i=new Map(e.data.resources.map((a,r)=>{let c=`/config/data/resources/${r}`,l=Me(a,c,e.appCode);return[String(l.code),{resource:l,fields:new Map(w(T(l.schema,`${c}/schema`).fields,`${c}/schema/fields`,500).map(p=>{let d=T(p,`${c}/schema/fields`);return[String(d.code),d]}))}]})),s=new Set;return Z(o.map((a,r)=>{let c=`/config/data/subjectReadSurfaces/${r}`,l=T(a,c);R(l,["code","name","capability","subject","relations"],c);let p=F(l.code,`${c}/code`);s.has(p)&&m("NATIVE_SUBJECT_READ_SURFACE_CODE_DUPLICATE",`${c}/code`),s.add(p);let d=$e(l.capability,`${c}/capability`,e.appCode);n.has(d)||m("NATIVE_SUBJECT_READ_SURFACE_CAPABILITY_NOT_DECLARED",`${c}/capability`);let f=T(l.subject,`${c}/subject`);R(f,["resourceCode","fields"],`${c}/subject`);let g=J(f.resourceCode,`${c}/subject/resourceCode`),E=i.get(g);E||m("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${c}/subject/resourceCode`);let A=v(f.fields,`${c}/subject/fields`,100).map((N,y)=>K(N,`${c}/subject/fields/${y}`));A.length||m("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${c}/subject/fields`);for(let[N,y]of A.entries()){let O=E.fields.get(y);(!O||O.type==="subtable")&&m("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${c}/subject/fields/${N}`)}let b=w(l.relations,`${c}/relations`,8);b.length||m("NATIVE_SUBJECT_READ_SURFACE_RELATIONS_REQUIRED",`${c}/relations`);let I=new Set,_=0,u=Z(b.map((N,y)=>{let O=`${c}/relations/${y}`,h=T(N,O);R(h,["code","resourceCode","foreignKeyField","fields","limit"],O,["order"]);let C=F(h.code,`${O}/code`);I.has(C)&&m("NATIVE_SUBJECT_READ_SURFACE_RELATION_CODE_DUPLICATE",`${O}/code`),I.add(C);let k=J(h.resourceCode,`${O}/resourceCode`),V=i.get(k);V||m("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${O}/resourceCode`);let M=K(h.foreignKeyField,`${O}/foreignKeyField`),P=V.fields.get(M),re=T(P?.source||{},`${O}/foreignKeyField/source`);(!P||!["uuid","resource-ref.single"].includes(String(P.type))||P.type==="resource-ref.single"&&(re.kind!=="resource"||re.resourceCode!==g))&&m("NATIVE_SUBJECT_READ_SURFACE_RELATION_INVALID",`${O}/foreignKeyField`);let Ee=v(h.fields,`${O}/fields`,100).map((ce,$)=>K(ce,`${O}/fields/${$}`));Ee.length||m("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${O}/fields`);for(let[ce,$]of Ee.entries()){let W=V.fields.get($);(!W||W.type==="subtable")&&m("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${O}/fields/${ce}`)}let H=w(h.order||[],`${O}/order`,10).map((ce,$)=>{let W=`${O}/order/${$}`,L=T(ce,W);R(L,["field","direction"],W);let G=K(L.field,`${W}/field`),q=V.fields.get(G);return(!qi.has(G)&&!q||q?.type==="subtable"||q&&!Je(q.type))&&m("NATIVE_SUBJECT_READ_SURFACE_ORDER_FIELD_INVALID",`${W}/field`),["asc","desc"].includes(String(L.direction))||m("NATIVE_SUBJECT_READ_SURFACE_ORDER_DIRECTION_INVALID",`${W}/direction`),{field:G,direction:L.direction}}),Te=te(h.limit,`${O}/limit`,1,100);return _+=Te,{code:C,resourceCode:k,foreignKeyField:M,fields:U(Ee),...H.length?{order:H}:{},limit:Te}}),N=>N.code);return _>400&&m("NATIVE_SUBJECT_READ_SURFACE_ROW_LIMIT_EXCEEDED",`${c}/relations`),{code:p,name:S(l.name,`${c}/name`,255),capability:d,subject:{resourceCode:g,fields:U(A)},relations:u}}),a=>a.code)}function va(e){let t=e.data.resourceDetailRoutes===void 0?[]:w(e.data.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100),o=new Map(e.data.resources.map((s,a)=>{let r=`/config/data/resources/${a}`,c=Me(s,r,e.appCode);return[c.code,c]})),n=new Map(gn(e).map(s=>[String(s.code),s])),i=new Map;for(let[s,a]of t.entries()){let r=`/config/data/resourceDetailRoutes/${s}`,c=T(a,r);R(c,["resourceCode","desktop","mobile"],r);let l=J(c.resourceCode,`${r}/resourceCode`);i.has(l)&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_DUPLICATE",`${r}/resourceCode`);let p=o.get(l);p||m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_RESOURCE_MISSING",`${r}/resourceCode`);let d=F(c.desktop,`${r}/desktop`),f=F(c.mobile,`${r}/mobile`);d===f&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_INVALID",r);let g=String(p.capabilities.read);for(let[E,A]of[["desktop",d],["mobile",f]]){let b=`${r}/${E}`,I=n.get(A);I||m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_REFERENCE_MISSING",b),I.surface!=="user"&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_SURFACE_INVALID",b);let _=Ae(I.path,`${b}/path`),u=[..._.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)],N=E==="mobile"?!_.startsWith("/m/"):_==="/m"||_.startsWith("/m/");(_.includes("*")||_.includes("?")||_.includes("#")||_.split("/").includes("..")||u.length!==1||N)&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_PATH_INVALID",b);let y=Array.isArray(I.access?.allOf)?I.access.allOf:[];I.capability!==g&&!y.includes(g)&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_CAPABILITY_INVALID",b)}i.set(l,{desktop:d,mobile:f})}return i}function Yi(e){let t=new Map(e.data.resources.map((a,r)=>{let c=`/config/data/resources/${r}`,l=Me(a,c,e.appCode);return[l.code,new Map(l.schema.fields.map(p=>[String(p.code),p]))]})),o=new Map(e.data.resources.map((a,r)=>{let c=`/config/data/resources/${r}`,l=Me(a,c,e.appCode);return[l.code,new Map(l.schema.fields.map(p=>[String(p.code),String(p.type)]))]})),n=new Set(o.keys()),i=new Set(e.workflows.activations.map((a,r)=>En(T(a,`/config/workflows/activations/${r}`).workflowCode,`/config/workflows/activations/${r}/workflowCode`))),s=new Map;return Z(e.backend.operations.map((a,r)=>{let c=`/config/backend/operations/${r}`,l=T(a,c);R(l,["code","method","path","capability","requestSchema","responseSchema","description","platformAccess","browser","ai"],c,!0);let p=S(l.method,`${c}/method`,16);["GET","POST","PUT","PATCH","DELETE"].includes(p)||m("NATIVE_OPERATION_METHOD_INVALID",`${c}/method`);let d=F(l.code,`${c}/code`);ja(l.ai,c,d,p,n);let f=xa(l.platformAccess,`${c}/platformAccess`,o,t,i,new Set(e.authz.roles.map(E=>String(E.code))));if(f?.decimalReservation){let E=f.decimalReservation,A=String(E.resourceCode),b=JSON.stringify([E.amountFieldCode,E.currencyFieldCode,E.relationFieldCode,E.parentFieldCode,E.rootFieldCode,E.statusFieldCode,E.parentRelationValue,E.childRelationValue]),I=s.get(A);I&&I!==b&&m("NATIVE_DECIMAL_RESERVATION_MAPPING_CONFLICT",`${c}/platformAccess/decimalReservation`),s.set(A,b)}let g=Pa(l.browser,`${c}/browser`,p,l.requestSchema,l.responseSchema,o,t,e.data.subjectReadSurfaces||[]);return{code:d,method:p,path:Ae(l.path,`${c}/path`),requiredCapability:$e(l.capability,`${c}/capability`,e.appCode),requestSchemaDigest:X(T(l.requestSchema,`${c}/requestSchema`)),responseSchemaDigest:X(T(l.responseSchema,`${c}/responseSchema`)),...l.description===void 0?{}:{description:Oo(l.description,`${c}/description`,2e3)},...f?{platformAccess:f}:{},...g?{browser:g}:{}}}),a=>a.code)}function Pa(e,t,o,n,i,s,a,r){if(e===void 0)return null;let c=T(e,t);R(c,["exposure","behavior","idempotency","subject"],t,["refreshTargets","fileIntent"]),j(c.exposure,"authenticated",`${t}/exposure`);let l=S(c.behavior,`${t}/behavior`,32);["read","controlled"].includes(l)||m("NATIVE_OPERATION_BROWSER_BEHAVIOR_INVALID",`${t}/behavior`);let p=S(c.idempotency,`${t}/idempotency`,32);(!["none","required"].includes(p)||l==="controlled"&&p!=="required"||l==="read"&&p!=="none")&&m("NATIVE_OPERATION_BROWSER_IDEMPOTENCY_INVALID",`${t}/idempotency`);let d=T(c.subject,`${t}/subject`);R(d,["resourceCode","inputField"],`${t}/subject`);let f=J(d.resourceCode,`${t}/subject/resourceCode`);s.has(f)||m("NATIVE_OPERATION_BROWSER_SUBJECT_RESOURCE_NOT_DECLARED",`${t}/subject/resourceCode`);let g=K(d.inputField,`${t}/subject/inputField`),E=T(n,`${t}/requestSchema`),A=T(i,`${t}/responseSchema`);(E.type!=="object"||E.additionalProperties!==!1||A.type!=="object"||A.additionalProperties!==!1)&&m("NATIVE_OPERATION_BROWSER_SCHEMA_ROOT_INVALID",`${t}/requestSchema`);let b=T(E.properties,`${t}/requestSchema/properties`),I=new Set(E.required===void 0?[]:v(E.required,`${t}/requestSchema/required`,200));(!(g in b)||!I.has(g))&&m("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let _=T(b[g],`${t}/requestSchema/properties/${g}`);(_.type!=="string"||_.format!=="uuid")&&m("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let u=new Map((Array.isArray(r)?r:[]).map((C,k)=>{let V=T(C,`/config/data/subjectReadSurfaces/${k}`);return[String(V.code),String(T(V.subject,`/config/data/subjectReadSurfaces/${k}/subject`).resourceCode)]})),N=c.refreshTargets===void 0?[]:w(c.refreshTargets,`${t}/refreshTargets`,16),y=new Set,O=Z(N.map((C,k)=>{let V=`${t}/refreshTargets/${k}`,M=T(C,V);R(M,["kind","code"],V),j(M.kind,"subject-surface",`${V}/kind`);let P=F(M.code,`${V}/code`);return(y.has(P)||!u.has(P)||u.get(P)!==f)&&m("NATIVE_OPERATION_BROWSER_REFRESH_TARGET_INVALID",`${V}/code`),y.add(P),{kind:"subject-surface",code:P}}),C=>`${C.kind}:${C.code}`),h=La(c.fileIntent,`${t}/fileIntent`,o,l,p,f,b,I,a);return{exposure:"authenticated",behavior:l,idempotency:p,subject:{resourceCode:f,inputField:g},...O.length?{refreshTargets:O}:{},...h?{fileIntent:h}:{}}}function La(e,t,o,n,i,s,a,r,c){if(e===void 0)return null;let l=T(e,t);R(l,["recordResourceCode","recordIdInputField","relationField","fileNameField","contentTypeField","sizeField","purposes","maxTtlSeconds","maxBytes"],t),(o!=="GET"||n!=="read"||i!=="none")&&m("NATIVE_OPERATION_FILE_INTENT_BEHAVIOR_INVALID",t);let p=J(l.recordResourceCode,`${t}/recordResourceCode`),d=c.get(p);d||m("NATIVE_OPERATION_FILE_INTENT_RESOURCE_NOT_DECLARED",`${t}/recordResourceCode`);let f=K(l.recordIdInputField,`${t}/recordIdInputField`),g=T(a[f],`${t}/recordIdInputField`);(!r.has(f)||g.type!=="string"||g.format!=="uuid")&&m("NATIVE_OPERATION_FILE_INTENT_RECORD_INPUT_INVALID",`${t}/recordIdInputField`);let E=K(l.relationField,`${t}/relationField`),A=d.get(E);(!A||!["uuid","resource-ref.single"].includes(String(A.type))||String(A.type)==="resource-ref.single"&&(String(T(A.source,`${t}/relationField`).kind||"")!=="resource"||String(T(A.source,`${t}/relationField`).resourceCode||"")!==s))&&m("NATIVE_OPERATION_FILE_INTENT_RELATION_INVALID",`${t}/relationField`);let b=[["fileNameField",["text.short","text.long"]],["contentTypeField",["text.short","text.long"]],["sizeField",["number.integer"]]],I={};for(let[y,O]of b){let h=K(l[y],`${t}/${y}`);O.includes(String(d.get(h)?.type))||m("NATIVE_OPERATION_FILE_INTENT_METADATA_INVALID",`${t}/${y}`),I[y]=h}let _=Z(v(l.purposes,`${t}/purposes`,2),y=>y);(!_.length||_.some(y=>!["preview","download"].includes(y)))&&m("NATIVE_OPERATION_FILE_INTENT_PURPOSE_INVALID",`${t}/purposes`);let u=Number(l.maxTtlSeconds);(!Number.isSafeInteger(u)||u<1||u>300)&&m("NATIVE_OPERATION_FILE_INTENT_TTL_INVALID",`${t}/maxTtlSeconds`);let N=Number(l.maxBytes);return(!Number.isSafeInteger(N)||N<1||N>104857600)&&m("NATIVE_OPERATION_FILE_INTENT_SIZE_INVALID",`${t}/maxBytes`),{recordResourceCode:p,recordIdInputField:f,relationField:E,fileNameField:I.fileNameField,contentTypeField:I.contentTypeField,sizeField:I.sizeField,purposes:_,maxTtlSeconds:u,maxBytes:N}}function xa(e,t,o,n,i,s){if(e===void 0)return null;let a=T(e,t);R(a,["directory","managedFiles","managedFileCopies","notification","workflow","roleAssertions","decimalReservation"],t,!0),Object.keys(a).length===0&&m("NATIVE_OPERATION_PLATFORM_ACCESS_EMPTY",t);let r={};if(a.roleAssertions!==void 0){let c=T(a.roleAssertions,`${t}/roleAssertions`);R(c,["roleCodes"],`${t}/roleAssertions`);let l=v(c.roleCodes,`${t}/roleAssertions/roleCodes`,20);l.length||m("NATIVE_OPERATION_ROLE_ASSERTIONS_REQUIRED",`${t}/roleAssertions/roleCodes`),l.forEach((p,d)=>{s.has(p)||m("NATIVE_ROLE_REFERENCE_MISSING",`${t}/roleAssertions/roleCodes/${d}`)}),r.roleAssertions={roleCodes:U(l)}}if(a.directory!==void 0){let c=T(a.directory,`${t}/directory`);R(c,["mode","fields"],`${t}/directory`),["current-initiator","selected-user"].includes(String(c.mode))||m("NATIVE_OPERATION_DIRECTORY_MODE_INVALID",`${t}/directory/mode`);let l=new Set(["displayName","employeeNumber","primaryDepartment","departments"]),p=v(c.fields,`${t}/directory/fields`,4);(!p.length||p.some(d=>!l.has(d)))&&m("NATIVE_OPERATION_DIRECTORY_FIELDS_INVALID",`${t}/directory/fields`),r.directory={mode:String(c.mode),fields:U(p)}}if(a.managedFiles!==void 0){let c=w(a.managedFiles,`${t}/managedFiles`,16);c.length||m("NATIVE_OPERATION_MANAGED_FILES_REQUIRED",`${t}/managedFiles`);let l=new Set;r.managedFiles=Z(c.map((p,d)=>{let f=`${t}/managedFiles/${d}`,g=T(p,f);R(g,["resourceCode","fieldCodes","intents"],f);let E=J(g.resourceCode,`${f}/resourceCode`);(l.has(E)||!o.has(E))&&m("NATIVE_OPERATION_MANAGED_FILE_RESOURCE_INVALID",`${f}/resourceCode`),l.add(E);let A=v(g.fieldCodes,`${f}/fieldCodes`,16);(!A.length||A.some(I=>!["file","image","signature","text.rich"].includes(String(o.get(E)?.get(I)||""))))&&m("NATIVE_OPERATION_MANAGED_FILE_FIELD_INVALID",`${f}/fieldCodes`);let b=v(g.intents,`${f}/intents`,2);return(!b.length||b.some(I=>!["create","update"].includes(I)))&&m("NATIVE_OPERATION_MANAGED_FILE_INTENT_INVALID",`${f}/intents`),{resourceCode:E,fieldCodes:U(A),intents:U(b)}}),p=>p.resourceCode)}if(a.managedFileCopies!==void 0){let c=w(a.managedFileCopies,`${t}/managedFileCopies`,16);c.length||m("NATIVE_OPERATION_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let l=new Set;r.managedFileCopies=Z(c.map((p,d)=>{let f=`${t}/managedFileCopies/${d}`,g=T(p,f);R(g,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],f),j(g.mode,"copy",`${f}/mode`);let E=J(g.sourceResourceCode,`${f}/sourceResourceCode`),A=J(g.targetResourceCode,`${f}/targetResourceCode`),b=o.get(E),I=o.get(A);(!b||!I)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_RESOURCE_INVALID",f);let _=v(g.sourceFieldCodes,`${f}/sourceFieldCodes`,16),u=v(g.targetFieldCodes,`${f}/targetFieldCodes`,16);(!_.length||_.length!==u.length)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELDS_INVALID",f),_.forEach((y,O)=>{let h=b.get(y),C=I.get(u[O]);(!["file","image"].includes(String(h))||h!==C)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELD_INVALID",`${f}/sourceFieldCodes/${O}`)});let N=`${E}:${_.join(",")}=>${A}:${u.join(",")}`;return l.has(N)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_DUPLICATE",f),l.add(N),{mode:"copy",sourceResourceCode:E,sourceFieldCodes:U(_),targetResourceCode:A,targetFieldCodes:U(u)}}),p=>`${p.sourceResourceCode}:${p.sourceFieldCodes.join(",")}=>${p.targetResourceCode}:${p.targetFieldCodes.join(",")}`)}if(a.notification!==void 0){let c=T(a.notification,`${t}/notification`);R(c,["mode"],`${t}/notification`),c.mode!=="business-standard"&&m("NATIVE_OPERATION_NOTIFICATION_MODE_INVALID",`${t}/notification/mode`),r.notification={mode:"business-standard"}}if(a.workflow!==void 0){let c=T(a.workflow,`${t}/workflow`);R(c,["codes"],`${t}/workflow`);let l=v(c.codes,`${t}/workflow/codes`,16);(!l.length||l.some(p=>!i.has(p)))&&m("NATIVE_OPERATION_WORKFLOW_CODE_INVALID",`${t}/workflow/codes`),r.workflow={codes:U(l)}}if(a.decimalReservation!==void 0){let c=`${t}/decimalReservation`,l=T(a.decimalReservation,c);R(l,["mode","resourceCode","amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode","parentRelationValue","childRelationValue","eligibleParentStatuses","eligibleChildStatuses"],c);let p=S(l.mode,`${c}/mode`,16);["reserve","commit","release"].includes(p)||m("NATIVE_DECIMAL_RESERVATION_MODE_INVALID",`${c}/mode`);let d=J(l.resourceCode,`${c}/resourceCode`),f=n.get(d);f||m("NATIVE_DECIMAL_RESERVATION_RESOURCE_MISSING",`${c}/resourceCode`);let E=Object.fromEntries(["amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode"].map(y=>[y,K(l[y],`${c}/${y}`)])),A=y=>f.get(E[y]),b=y=>new Set((A(y)?.options||[]).map(O=>String(O.value))),I=F(l.parentRelationValue,`${c}/parentRelationValue`),_=F(l.childRelationValue,`${c}/childRelationValue`),u=v(l.eligibleParentStatuses,`${c}/eligibleParentStatuses`,16),N=v(l.eligibleChildStatuses,`${c}/eligibleChildStatuses`,16);(A("amountFieldCode")?.type!=="number.decimal"||A("amountFieldCode")?.exactDecimal!==!0||A("amountFieldCode")?.precision!==18||A("amountFieldCode")?.scale!==2||A("currencyFieldCode")?.type!=="option.single"||A("relationFieldCode")?.type!=="option.single"||A("parentFieldCode")?.type!=="resource-ref.single"||A("parentFieldCode")?.source?.resourceCode!==d||A("rootFieldCode")?.type!=="uuid"||A("statusFieldCode")?.type!=="option.single"||I===_||!b("relationFieldCode").has(I)||!b("relationFieldCode").has(_)||!u.length||!N.length||u.some(y=>!b("statusFieldCode").has(y))||N.some(y=>!b("statusFieldCode").has(y)))&&m("NATIVE_DECIMAL_RESERVATION_FIELD_INVALID",c),r.decimalReservation={mode:p,resourceCode:d,...E,parentRelationValue:I,childRelationValue:_,eligibleParentStatuses:U(u),eligibleChildStatuses:U(N)}}return r}function ja(e,t,o,n,i){if(e===void 0)return;let s=`${t}/ai`,a=T(e,s);ra.test(o)||m("NATIVE_OPERATION_AI_CODE_INVALID",`${t}/code`),R(a,["name","description","risk","resources","sideEffects","concurrency","timeoutMs"],s,!0),S(a.name,`${s}/name`,Eo),S(a.description,`${s}/description`,Eo);let r=S(a.risk,`${s}/risk`,16);["read","write","destructive","external"].includes(r)||m("NATIVE_OPERATION_AI_RISK_INVALID",`${s}/risk`),r==="read"!=(n==="GET")&&m("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${s}/risk`),n==="DELETE"&&!["destructive","external"].includes(r)&&m("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${s}/risk`);let c=v(a.resources,`${s}/resources`,16);c.length===0&&m("NATIVE_OPERATION_AI_RESOURCE_REQUIRED",`${s}/resources`),c.forEach((p,d)=>{let f=J(p,`${s}/resources/${d}`);i.has(f)||m("NATIVE_OPERATION_AI_RESOURCE_MISSING",`${s}/resources/${d}`)});let l=v(a.sideEffects,`${s}/sideEffects`,20);(r==="read"&&l.length!==0||r!=="read"&&l.length===0)&&m("NATIVE_OPERATION_AI_SIDE_EFFECT_INVALID",`${s}/sideEffects`),a.concurrency!==void 0&&!["none","revision"].includes(S(a.concurrency,`${s}/concurrency`,16))&&m("NATIVE_OPERATION_AI_CONCURRENCY_INVALID",`${s}/concurrency`),a.timeoutMs!==void 0&&te(a.timeoutMs,`${s}/timeoutMs`,100,3e4)}function fn(e){return(e.replace(/\/{2,}/g,"/").replace(/\/$/,"")||"/").split("/").map(o=>o.startsWith(":")?":":o.includes("*")?"*":o).join("/")}function Wa(e,t){let o=T(e,t),n=S(o.type,`${t}/type`,32),i=["code","type","label","presentation","required"],s=n==="sso"?[...i,"provider"]:n==="dingtalk"?[...i,"flow"]:i;R(o,s,t);let a=F(o.code,`${t}/code`),r=S(o.label,`${t}/label`,255),c=S(o.presentation,`${t}/presentation`,16);["primary","secondary"].includes(c)||m("NATIVE_APPLICATION_AUTH_METHOD_PRESENTATION_INVALID",`${t}/presentation`);let l=st(o.required,`${t}/required`);return["sso","password","dingtalk"].includes(n)||m("NATIVE_APPLICATION_AUTH_METHOD_TYPE_INVALID",`${t}/type`),n==="sso"&&o.provider!=="tenant-default"&&m("NATIVE_APPLICATION_AUTH_SSO_PROVIDER_INVALID",`${t}/provider`),n==="dingtalk"&&!["auto","jsapi","oauth"].includes(S(o.flow,`${t}/flow`,16))&&m("NATIVE_APPLICATION_AUTH_DINGTALK_FLOW_INVALID",`${t}/flow`),{code:a,type:n,label:r,presentation:c,required:l,...n==="sso"?{provider:"tenant-default"}:{},...n==="dingtalk"?{flow:o.flow}:{}}}function Di(e,t,o){let n=T(e,o);R(n,["routeCode","path","defaultRouteCode"],o);let i=F(n.routeCode,`${o}/routeCode`),s=Ae(n.path,`${o}/path`),a=t==="desktop"?"/login":"/m/login";return(s!==a||/[:*?#\\]/.test(s))&&m("NATIVE_APPLICATION_AUTH_SURFACE_PATH_INVALID",`${o}/path`,{device:t,expectedPath:a}),{routeCode:i,path:s,defaultRouteCode:F(n.defaultRouteCode,`${o}/defaultRouteCode`)}}function Hi(e,t,o,n){if(e===null)return;let i=T(e,n);R(i,["accountMode","registration","methods","surfaces"],n),j(i.accountMode,"existing-platform-users-only",`${n}/accountMode`);let s=T(i.registration,`${n}/registration`);R(s,["mode"],`${n}/registration`),j(s.mode,"reject",`${n}/registration/mode`);let a=w(i.methods,`${n}/methods`,8);a.length===0&&m("NATIVE_APPLICATION_AUTH_METHOD_REQUIRED",`${n}/methods`);let r=a.map((I,_)=>Wa(I,`${n}/methods/${_}`)),c=new Set,l=new Set;for(let[I,_]of r.entries())c.has(_.code)&&m("NATIVE_APPLICATION_AUTH_METHOD_CODE_DUPLICATE",`${n}/methods/${I}/code`),l.has(_.type)&&m("NATIVE_APPLICATION_AUTH_METHOD_TYPE_DUPLICATE",`${n}/methods/${I}/type`),c.add(_.code),l.add(_.type);r.filter(I=>I.presentation==="primary").length!==1&&m("NATIVE_APPLICATION_AUTH_PRIMARY_METHOD_INVALID",`${n}/methods`);let p=T(i.surfaces,`${n}/surfaces`);R(p,["desktop","mobile"],`${n}/surfaces`);let d=Di(p.desktop,"desktop",`${n}/surfaces/desktop`),f=Di(p.mobile,"mobile",`${n}/surfaces/mobile`);d.routeCode===f.routeCode&&m("NATIVE_APPLICATION_AUTH_SURFACE_CODE_DUPLICATE",`${n}/surfaces/mobile/routeCode`);let g=w(t,"/config/frontend/routes",500),E=new Map;for(let[I,_]of g.entries()){let u=T(_,`/config/frontend/routes/${I}`);E.set(String(u.code||""),u)}let A=new Set((Array.isArray(o.data?.resources)?o.data.resources:[]).map(I=>String(I.code||"")).filter(I=>/^[a-z][a-z0-9-]{0,62}$/.test(I)));for(let[I,_]of[["desktop",d],["mobile",f]]){E.has(_.routeCode)&&m("NATIVE_APPLICATION_AUTH_SURFACE_CODE_CONFLICT",`${n}/surfaces/${I}/routeCode`);let u=/^user\.([a-z][a-z0-9-]{0,62})\.(records|submit)$/.exec(String(_.defaultRouteCode||"")),N=E.get(_.defaultRouteCode),y=String(N?.path||"");if(u&&A.has(u[1])){let h=u[2]==="records"?`/my/${u[1]}`:`/my/${u[1]}/submit`;N={surface:"user",path:I==="mobile"?`/m${h}`:h},y=String(N.path)}let O=I==="desktop"?y==="/m"||y.startsWith("/m/"):!(y==="/m"||y.startsWith("/m/"));(!N||N.surface!=="user"||/[:*]/.test(y)||O)&&m("NATIVE_APPLICATION_AUTH_DEFAULT_ROUTE_INVALID",`${n}/surfaces/${I}/defaultRouteCode`)}let b=Xi(o).filter(I=>!I.owner.startsWith("authentication:"));for(let[I,_]of[["desktop",d],["mobile",f]]){let u=b.find(N=>fn(N.path)===fn(_.path));u&&m("NATIVE_APPLICATION_AUTH_SURFACE_PATH_CONFLICT",`${n}/surfaces/${I}/path`,{owner:u.owner})}}function Ma(e,t){if(e===null)return;let o={data:{resources:[]},workflows:{definitions:[]},frontend:{routes:[{code:"auth-desktop-default",path:"/auth-desktop-default",surface:"user"},{code:"auth-mobile-default",path:"/m/auth-mobile-default",surface:"user"}],user:{applicationTodoCenter:!1},admin:{navigation:[]},authentication:e}},n=T(e,t),i=T(n.surfaces,`${t}/surfaces`),s={...n,surfaces:{...i,desktop:{...T(i.desktop,`${t}/surfaces/desktop`),defaultRouteCode:"auth-desktop-default"},mobile:{...T(i.mobile,`${t}/surfaces/mobile`),defaultRouteCode:"auth-mobile-default"}}};Hi(s,o.frontend.routes,{...o,frontend:{...o.frontend,authentication:s}},t)}function Ua(e){let t=e.frontend.authentication;return t===null?null:{accountMode:t.accountMode,registration:{mode:t.registration.mode},methods:t.methods.map(o=>({...o})),surfaces:{desktop:{...t.surfaces.desktop},mobile:{...t.surfaces.mobile}}}}var Ba=new Set(["draft.read","draft.update","validate","create","own.list","own.read","public.list","public.read"]);function Ka(e,t,o){let n=T(e,o);R(n,["policies"],o);let i=w(n.policies,`${o}/policies`,16);i.length<1&&m("NATIVE_PUBLIC_POLICY_REQUIRED",o);let s=new Map(t.frontend.routes.map(l=>[l.code,l])),a=new Map(t.data.resources.map(l=>[l.code,l])),r=new Set,c=new Set(i.map(l=>String(l?.code||"")));i.forEach((l,p)=>{let d=`${o}/policies/${p}`,f=T(l,d);R(f,["code","routeCode","mode","resourceCode","operations","fields"],d,["requiredFields","ownRecordFields","publicRecordFields","publicFilters","serverGeneratedFields","schedule","publicSubtableFields","draft","validations"]);let g=F(f.code,`${d}/code`);r.has(g)&&m("NATIVE_PUBLIC_POLICY_DUPLICATE",`${d}/code`);let E=F(f.routeCode,`${d}/routeCode`),A=s.get(E);(!A||A.surface!=="user"||A.capability!==void 0||A.access!==void 0||/[:*]/.test(String(A.path)))&&m("NATIVE_PUBLIC_ROUTE_INVALID",`${d}/routeCode`),j(f.mode,"anonymous",`${d}/mode`);let b=J(f.resourceCode,`${d}/resourceCode`),I=a.get(b);I||m("NATIVE_PUBLIC_RESOURCE_MISSING",`${d}/resourceCode`);let _=new Map(I.schema.fields.map($=>[String($.code),String($.type)])),u=v(f.operations,`${d}/operations`,8);(u.length<1||u.some($=>!Ba.has($)))&&m("NATIVE_PUBLIC_OPERATION_INVALID",`${d}/operations`),u.includes("draft.read")!==u.includes("draft.update")&&m("NATIVE_PUBLIC_DRAFT_OPERATION_INCOMPLETE",`${d}/operations`);let N=v(f.fields,`${d}/fields`,64);(N.length<1||N.some($=>!_.has($)))&&m("NATIVE_PUBLIC_FIELD_INVALID",`${d}/fields`);for(let $ of["requiredFields","ownRecordFields","publicRecordFields"]){if(!Object.prototype.hasOwnProperty.call(f,$))continue;v(f[$],`${d}/${$}`,64).some(L=>!N.includes(L))&&m("NATIVE_PUBLIC_FIELD_SCOPE_INVALID",`${d}/${$}`)}let y=Object.prototype.hasOwnProperty.call(f,"serverGeneratedFields")?w(f.serverGeneratedFields,`${d}/serverGeneratedFields`,16):[],O=new Set;y.forEach(($,W)=>{let L=`${d}/serverGeneratedFields/${W}`,G=T($,L);R(G,["field","kind"],L);let q=K(G.field,`${L}/field`);(O.has(q)||!_.has(q)||N.includes(q)||_.get(q)!=="text.short"&&_.get(q)!=="text.long")&&m("NATIVE_PUBLIC_SERVER_GENERATED_FIELD_INVALID",`${L}/field`),j(G.kind,"random-token",`${L}/kind`),O.add(q)});let h=Object.prototype.hasOwnProperty.call(f,"schedule")?T(f.schedule,`${d}/schedule`):null;if(h){let $=["campusPolicyCode","rulePolicyCode","campusField","ruleCampusField","ruleWeekdaysField","ruleOpenAtField","ruleCloseAtField","ruleSlotMinutesField","ruleAdvanceHoursField","ruleAdvanceDaysField","campusEnabledField","ruleEnabledField","dateField","timeField"];R(h,$,`${d}/schedule`);for(let W of["campusPolicyCode","rulePolicyCode"])F(h[W],`${d}/schedule/${W}`);for(let W of $.filter(L=>!["campusPolicyCode","rulePolicyCode"].includes(L)))K(h[W],`${d}/schedule/${W}`);for(let W of[h.campusField,h.dateField,h.timeField])N.includes(String(W))||m("NATIVE_PUBLIC_SCHEDULE_FIELD_INVALID",`${d}/schedule`);(!c.has(String(h.campusPolicyCode))||!c.has(String(h.rulePolicyCode)))&&m("NATIVE_PUBLIC_SCHEDULE_POLICY_INVALID",`${d}/schedule`)}let C=Object.prototype.hasOwnProperty.call(f,"publicFilters")?w(f.publicFilters,`${d}/publicFilters`,16):[],k=new Set;C.forEach(($,W)=>{let L=`${d}/publicFilters/${W}`,G=T($,L);R(G,["field","operator","value"],L);let q=K(G.field,`${L}/field`);k.has(q)&&m("NATIVE_PUBLIC_FILTER_DUPLICATE",`${L}/field`),N.includes(q)||m("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${L}/field`),j(G.operator,"eq",`${L}/operator`),["boolean","text.short","text.long","number.integer","number.decimal","date","time"].includes(_.get(q)||"")||m("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${L}/field`),G.value!==null&&typeof G.value!="string"&&typeof G.value!="number"&&typeof G.value!="boolean"&&m("NATIVE_PUBLIC_FILTER_VALUE_INVALID",`${L}/value`),k.add(q)});let V=Object.prototype.hasOwnProperty.call(f,"publicSubtableFields")?T(f.publicSubtableFields,`${d}/publicSubtableFields`):null;if(V){Object.keys(V).length>64&&m("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${d}/publicSubtableFields`);for(let[$,W]of Object.entries(V)){let L=I.schema.fields.find(Q=>String(Q.code)===$),G=String(L?.subtable?.resourceCode||""),q=a.get(G),Oe=new Map((q?.schema?.fields||[]).map(Q=>[String(Q.code),String(Q.type)])),z=v(W,`${d}/publicSubtableFields/${$}`,64);(!N.includes($)||_.get($)!=="subtable"||!q||z.length<1||z.some(Q=>!Oe.has(Q))||z.some(Q=>Oe.get(Q)==="subtable")||z.some(Q=>Oe.get(Q)==="signature"))&&m("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${d}/publicSubtableFields/${$}`)}}if(u.some($=>$.startsWith("public."))){Object.prototype.hasOwnProperty.call(f,"publicRecordFields")||m("NATIVE_PUBLIC_RECORD_FIELDS_REQUIRED",`${d}/publicRecordFields`);let $=v(f.publicRecordFields,`${d}/publicRecordFields`,64);($.length<1||$.some(W=>!N.includes(W))||$.some(W=>_.get(W)==="signature"||_.get(W)==="subtable"&&!V?.[W]))&&m("NATIVE_PUBLIC_RECORD_FIELDS_INVALID",`${d}/publicRecordFields`)}let M=Object.prototype.hasOwnProperty.call(f,"requiredFields")?v(f.requiredFields,`${d}/requiredFields`,64):[],P=I.surface||{},re=P.fields||{},Ee=String(P.mutationOwner||"native")==="native"&&P.generated?.create!==!1,H=I.schema.fields.filter($=>ct($,re[$.code])).map($=>String($.code));if(u.includes("create")&&!Ee&&m("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${d}/fields`),u.includes("create")&&!Object.prototype.hasOwnProperty.call(f,"draft")&&m("NATIVE_PUBLIC_DRAFT_REQUIRED",`${d}/draft`),u.includes("create"))for(let $ of H){let W=N.includes($)?M.includes($)?null:"requiredFields":"fields";W&&m("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${d}/${W}`,{resourceCode:J,fieldCode:$})}if(Object.prototype.hasOwnProperty.call(f,"draft")){let $=T(f.draft,`${d}/draft`);R($,["enabled","inactivityTtlSeconds","maxBytes"],`${d}/draft`),j($.enabled,!0,`${d}/draft/enabled`),te($.inactivityTtlSeconds,`${d}/draft/inactivityTtlSeconds`,3600,7776e3),te($.maxBytes,`${d}/draft/maxBytes`,4096,262144)}else u.includes("draft.read")&&m("NATIVE_PUBLIC_DRAFT_REQUIRED",`${d}/draft`);let Te=Object.prototype.hasOwnProperty.call(f,"validations")?w(f.validations,`${d}/validations`,16):[],ce=new Set;Te.forEach(($,W)=>{let L=`${d}/validations/${W}`,G=T($,L);R(G,["code","kind","fields","result"],L);let q=F(G.code,`${L}/code`);ce.has(q)&&m("NATIVE_PUBLIC_VALIDATION_DUPLICATE",`${L}/code`),j(G.kind,"duplicate",`${L}/kind`),j(G.result,"availability",`${L}/result`);let Oe=v(G.fields,`${L}/fields`,8);(Oe.length<1||Oe.some(z=>!N.includes(z))||Oe.some(z=>["file","subtable"].includes(_.get(z)||"")))&&m("NATIVE_PUBLIC_VALIDATION_FIELD_INVALID",`${L}/fields`),ce.add(q)}),r.add(g)})}function Ga(e,t){let o=T(e,t);R(o,["policies"],t),w(o.policies,`${t}/policies`,16).length<1&&m("NATIVE_PUBLIC_POLICY_REQUIRED",t)}function qa(e){return{policies:Z(e.frontend.publicAccess.policies.map(t=>({code:t.code,routeCode:t.routeCode,mode:t.mode,resourceCode:t.resourceCode,operations:U(t.operations),fields:U(t.fields),...t.requiredFields?{requiredFields:U(t.requiredFields)}:{},...t.ownRecordFields?{ownRecordFields:U(t.ownRecordFields)}:{},...t.publicRecordFields?{publicRecordFields:U(t.publicRecordFields)}:{},...t.publicFilters?{publicFilters:t.publicFilters.map(o=>({field:o.field,operator:o.operator,value:o.value})).sort((o,n)=>ue(o.field,n.field))}:{},...t.publicSubtableFields?{publicSubtableFields:Object.fromEntries(Object.entries(t.publicSubtableFields).sort(([o],[n])=>o.localeCompare(n)).map(([o,n])=>[o,U(Array.isArray(n)?n.map(String):[])]))}:{},...t.serverGeneratedFields?{serverGeneratedFields:t.serverGeneratedFields.map(o=>({field:o.field,kind:o.kind})).sort((o,n)=>ue(o.field,n.field))}:{},...t.schedule?{schedule:{campusPolicyCode:t.schedule.campusPolicyCode,rulePolicyCode:t.schedule.rulePolicyCode,campusField:t.schedule.campusField,ruleCampusField:t.schedule.ruleCampusField,ruleWeekdaysField:t.schedule.ruleWeekdaysField,ruleOpenAtField:t.schedule.ruleOpenAtField,ruleCloseAtField:t.schedule.ruleCloseAtField,ruleSlotMinutesField:t.schedule.ruleSlotMinutesField,ruleAdvanceHoursField:t.schedule.ruleAdvanceHoursField,ruleAdvanceDaysField:t.schedule.ruleAdvanceDaysField,campusEnabledField:t.schedule.campusEnabledField,ruleEnabledField:t.schedule.ruleEnabledField,dateField:t.schedule.dateField,timeField:t.schedule.timeField}}:{},...t.draft?{draft:{...t.draft}}:{},...t.validations?{validations:Z(t.validations.map(o=>({code:o.code,kind:o.kind,fields:U(o.fields),result:o.result})),o=>o.code)}:{}})),t=>t.code)}}function Xi(e){let t=[{owner:"platform:admin-entry",path:"/"},{owner:"platform:admin-entry",path:"/admin"},{owner:"platform:file-preview",path:"/files/:resourceCode/:fileId/preview"}];e.frontend.authentication&&t.push({owner:"authentication:desktop",path:e.frontend.authentication.surfaces.desktop.path},{owner:"authentication:mobile",path:e.frontend.authentication.surfaces.mobile.path});for(let o of e.data.resources){let n=Qi(o),i=`/admin/resources/${o.code}`,s=[["list",i],["detail",`${i}/:id`],["create",`${i}/new`],["update",`${i}/:id/edit`]];for(let[a,r]of s)n[a]&&t.push({owner:`resource:${o.code}:${a}`,path:r},{owner:`resource:${o.code}:${a}:mobile`,path:`/m${r}`})}if(e.frontend.user.applicationTodoCenter===!0&&t.push({owner:"application:todo-center",path:"/todos"},{owner:"application:todo-center:mobile",path:"/m/todos"}),e.workflows.definitions.length>0){t.push({owner:"workflow:work-center",path:"/work-center"},{owner:"workflow:work-center:mobile",path:"/m/work-center"},{owner:"workflow:task",path:"/tasks/:taskId"},{owner:"workflow:task:mobile",path:"/m/tasks/:taskId"},{owner:"workflow:instance",path:"/workflows/:instanceId"},{owner:"workflow:instance:mobile",path:"/m/workflows/:instanceId"});let o=!1;for(let n of e.workflows.definitions)["standalone","hidden-handoff"].includes(n.launch.mode)&&(o=!0);o&&t.push({owner:"workflow:launch",path:"/workflows/:workflowCode/start"},{owner:"workflow:launch:mobile",path:"/m/workflows/:workflowCode/start"})}return t}function gn(e){let t=new Map(Xi(e).map(o=>[fn(o.path),o]));return Z(e.frontend.routes.map((o,n)=>{let i=`/config/frontend/routes/${n}`,s=T(o,i);R(s,["code","path","label","surface","parentCode","capability","access","pinned","tabPersistence","keepAlive"],i,!0),["admin","user"].includes(s.surface)||m("NATIVE_ROUTE_SURFACE_INVALID",`${i}/surface`);let a=Ae(s.path,`${i}/path`);s.surface==="admin"&&a!=="/admin"&&!a.startsWith("/admin/")&&m("NATIVE_ADMIN_ROUTE_PATH_INVALID",`${i}/path`),s.surface==="user"&&(a==="/admin"||a.startsWith("/admin/"))&&m("NATIVE_USER_ROUTE_PATH_RESERVED",`${i}/path`);let r=fn(a),c=t.get(r);c&&m("NATIVE_ROUTE_PATH_CONFLICT",`${i}/path`,{path:a,owner:c.owner}),t.set(r,{owner:`frontend:${String(s.code||n)}`,path:a});let l=/[:*]/.test(a),p=To(s,i,e.appCode),d=s.pinned===void 0?void 0:st(s.pinned,`${i}/pinned`),f=s.tabPersistence===void 0?l?"none":"session":S(s.tabPersistence,`${i}/tabPersistence`,16),g=s.keepAlive===void 0?"none":S(s.keepAlive,`${i}/keepAlive`,16);return["session","none"].includes(f)||m("NATIVE_ROUTE_TAB_PERSISTENCE_INVALID",`${i}/tabPersistence`),["none","memory"].includes(g)||m("NATIVE_ROUTE_KEEP_ALIVE_INVALID",`${i}/keepAlive`),l&&d===!0&&m("NATIVE_DYNAMIC_ROUTE_PINNED_FORBIDDEN",`${i}/pinned`),l&&f==="session"&&m("NATIVE_DYNAMIC_ROUTE_TAB_PERSISTENCE_FORBIDDEN",`${i}/tabPersistence`),l&&g==="memory"&&m("NATIVE_DYNAMIC_ROUTE_KEEP_ALIVE_FORBIDDEN",`${i}/keepAlive`),{code:F(s.code,`${i}/code`),path:a,label:S(s.label,`${i}/label`,255),surface:s.surface,...s.parentCode===void 0?{}:{parentCode:F(s.parentCode,`${i}/parentCode`)},...p,...d===void 0?{}:{pinned:d},tabPersistence:f,keepAlive:g}}),o=>o.code)}function Qi(e){let t=e.surface===void 0?{}:T(e.surface,"/surface"),o=t.mutationOwner||"native",n=t.generated===void 0?{}:T(t.generated,"/surface/generated"),i=o==="native";return{list:n.list??!0,detail:n.detail??!0,create:n.create??i,update:n.update??i,delete:n.delete??i}}function Zi(e){let t=[];for(let o of Z(e.data.resources,n=>n.code).flatMap(n=>[{resource:n,viewCode:void 0},...(n.surface?.views||[]).map(i=>({viewCode:i.code,resource:{...n,name:i.name,surface:Mt(n.surface,i.code)}}))])){let{resource:n,viewCode:i}=o,s=`/admin/resources/${n.code}${i?`/views/${i}`:""}`,a=Qi(n),r=[{operation:"list",kind:"resource-list",path:`${s}`,label:n.name,capability:n.capabilities.read,navigationEligible:!0},{operation:"detail",kind:"resource-detail",path:`${s}/:id`,label:`${n.name}\u8BE6\u60C5`,capability:n.capabilities.read,navigationEligible:!1},{operation:"create",kind:"resource-create",path:`${s}/new`,label:`\u65B0\u589E${n.name}`,capability:n.capabilities.create,navigationEligible:!1},{operation:"update",kind:"resource-update",path:`${s}/:id/edit`,label:`\u7F16\u8F91${n.name}`,capability:n.capabilities.update,navigationEligible:!1}];for(let c of r)a[c.operation]&&t.push({code:`resource:${n.code}${i?`:view:${i}`:""}:${c.operation}`,kind:c.kind,path:c.path,label:c.label,navigationEligible:c.navigationEligible,capability:c.capability,resourceCode:n.code,...i?{viewCode:i}:{}})}for(let o of gn(e))o.surface==="admin"&&t.push({code:`operation:${o.code}`,kind:"operation",path:o.path,label:o.label,navigationEligible:!/[:*]/.test(o.path),routeCode:o.code});return t.sort((o,n)=>ue(o.code,n.code))}function es(e){return e.kind==="resource"?`resource:${e.resourceCode}${e.viewCode?`:view:${e.viewCode}`:""}:list`:`operation:${e.routeCode}`}function Ja(e){return e.frontend.admin.navigation.map((t,o)=>({code:t.code,label:t.label,...t.icon===void 0?{}:{icon:t.icon},order:t.order??o,items:t.items.map((n,i)=>({pageCode:es(n.page),...n.label===void 0?{}:{label:n.label},...n.icon===void 0?{}:{icon:n.icon},order:n.order??i})).sort((n,i)=>n.order-i.order||ue(n.pageCode,i.pageCode))})).sort((t,o)=>t.order-o.order||ue(t.code,o.code))}function za(e,t){let o=w(e,t,Y.adminNavigationGroups),n=0;o.forEach((i,s)=>{let a=`${t}/${s}`,r=T(i,a);R(r,["code","label","icon","order","items"],a,!0),F(r.code,`${a}/code`),S(r.label,`${a}/label`,255),pn(r.icon,`${a}/icon`),vi(r.order,`${a}/order`);let c=w(r.items,`${a}/items`,500);c.length===0&&m("NATIVE_ADMIN_GROUP_ORPHANED",`${a}/items`),n+=c.length,n>Y.adminNavigationItems&&m("NATIVE_ARRAY_LIMIT_EXCEEDED",t),c.forEach((l,p)=>{let d=`${a}/items/${p}`,f=T(l,d);R(f,["page","label","icon","order"],d,!0),Ya(f.page,`${d}/page`),f.label!==void 0&&S(f.label,`${d}/label`,255),pn(f.icon,`${d}/icon`),vi(f.order,`${d}/order`)})})}function Ya(e,t){let o=T(e,t),n=S(o.kind,`${t}/kind`,64);if(n==="resource"){R(o,["kind","resourceCode"],t,["viewCode"]),o.viewCode!==void 0&&F(o.viewCode,`${t}/viewCode`),J(o.resourceCode,`${t}/resourceCode`);return}if(n==="operation"){R(o,["kind","routeCode"],t),F(o.routeCode,`${t}/routeCode`);return}m("NATIVE_ADMIN_PAGE_REFERENCE_KIND_INVALID",`${t}/kind`)}function Ha(e){let t=new Map(Zi(e).map(i=>[String(i.code),i])),o=new Set,n=new Set;e.frontend.admin.navigation.forEach((i,s)=>{let a=`/config/frontend/admin/navigation/${s}`;o.has(i.code)&&m("NATIVE_ADMIN_GROUP_DUPLICATE",`${a}/code`),o.add(i.code),i.label===i.code&&m("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${a}/label`),i.items.forEach((r,c)=>{let l=`${a}/items/${c}`,p=es(r.page),d=t.get(p);(!d||d.navigationEligible!==!0)&&m("NATIVE_ADMIN_PAGE_NOT_FOUND",`${l}/page`),n.has(p)&&m("NATIVE_ADMIN_PAGE_DUPLICATE",`${l}/page`),n.add(p);let f=r.page.resourceCode||r.page.routeCode||r.page.workflowCode||p,g=r.label||d.label;(!g||g===f||g===p)&&m("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${l}/label`)})})}function Xa(e,t){let o=w(e,t,Y.adminPages),n=new Set;o.forEach((i,s)=>{let a=`${t}/${s}`,r=T(i,a);R(r,["code","kind","path","label","navigationEligible","capability","access","resourceCode","viewCode","routeCode"],a,!0);let c=S(r.code,`${a}/code`,255);n.has(c)&&m("NATIVE_ADMIN_PAGE_DUPLICATE",`${a}/code`),n.add(c);let l=S(r.kind,`${a}/kind`,64);if(["resource-list","resource-detail","resource-create","resource-update","operation"].includes(l)||m("NATIVE_ADMIN_PAGE_KIND_INVALID",`${a}/kind`),Ae(r.path,`${a}/path`),S(r.label,`${a}/label`,255),st(r.navigationEligible,`${a}/navigationEligible`),r.capability!==void 0&&r.access!==void 0&&m("NATIVE_ROUTE_ACCESS_CONFLICT",`${a}/access`),r.capability!==void 0&&S(r.capability,`${a}/capability`,255),r.access!==void 0){let p=T(r.access,`${a}/access`);R(p,["allOf","anyOf"],`${a}/access`,!0);for(let d of["allOf","anyOf"])p[d]!==void 0&&v(p[d],`${a}/access/${d}`,50)}for(let p of["resourceCode","viewCode","routeCode"])r[p]!==void 0&&F(r[p],`${a}/${p}`)})}function Qa(e,t){let o=w(e,t,Y.adminNavigationGroups),n=0;o.forEach((i,s)=>{let a=`${t}/${s}`,r=T(i,a);R(r,["code","label","icon","order","items"],a,!0),F(r.code,`${a}/code`),S(r.label,`${a}/label`,255),pn(r.icon,`${a}/icon`),te(r.order,`${a}/order`,-1e4,1e4);let c=w(r.items,`${a}/items`,500);c.length===0&&m("NATIVE_ADMIN_GROUP_ORPHANED",`${a}/items`),n+=c.length,n>Y.adminNavigationItems&&m("NATIVE_ARRAY_LIMIT_EXCEEDED",t),c.forEach((l,p)=>{let d=`${a}/items/${p}`,f=T(l,d);R(f,["pageCode","label","icon","order"],d,!0),S(f.pageCode,`${d}/pageCode`,255),f.label!==void 0&&S(f.label,`${d}/label`,255),pn(f.icon,`${d}/icon`),te(f.order,`${d}/order`,-1e4,1e4)})})}var Za=new Set(["application-todo-center","workflow-work-center","workflow-launch","workflow-task","workflow-instance","resource-records","resource-submit"]);function ec(e,t,o){let n=T(e,t);R(n,["schemaVersion","appCode","devicePolicy","rootEntry","authentication","routes","digest"],t),j(n.schemaVersion,Gi,`${t}/schemaVersion`),j(n.appCode,o,`${t}/appCode`),No(n.devicePolicy,`${t}/devicePolicy`),tc(n.rootEntry,`${t}/rootEntry`),nc(n.authentication,`${t}/authentication`),bo(n.digest,`${t}/digest`);let i=w(n.routes,`${t}/routes`,Y.routes),s=new Set;i.forEach((a,r)=>{let c=`${t}/routes/${r}`,l=T(a,c),p=l.kind==="resource-records"||l.kind==="resource-submit";R(l,["code","kind","desktop","mobile"],c,["workflowCode",...p?["resourceCode"]:[]]);let d=S(l.code,`${c}/code`,255);s.has(d)&&m("NATIVE_ROUTE_MANIFEST_DUPLICATE",`${c}/code`),s.add(d);let f=S(l.kind,`${c}/kind`,64);if(Za.has(f)||m("NATIVE_ROUTE_MANIFEST_KIND_INVALID",`${c}/kind`),l.workflowCode!==void 0&&F(l.workflowCode,`${c}/workflowCode`),p){let A=J(l.resourceCode,`${c}/resourceCode`);j(d,`user.${A}.${l.kind==="resource-records"?"records":"submit"}`,`${c}/code`)}else l.resourceCode!==void 0&&m("NATIVE_PROPERTY_UNKNOWN",`${c}/resourceCode`);let g=ki(l.desktop,`${c}/desktop`,o),E=ki(l.mobile,`${c}/mobile`,o);g.surface!=="user"&&m("NATIVE_ROUTE_MANIFEST_DESKTOP_SURFACE_INVALID",`${c}/desktop/surface`),E.surface!=="user"&&m("NATIVE_ROUTE_MANIFEST_MOBILE_SURFACE_INVALID",`${c}/mobile/surface`),g.routeCode===E.routeCode&&m("NATIVE_ROUTE_MANIFEST_PAIR_DUPLICATE",c)}),j(n.digest,X({schemaVersion:n.schemaVersion,appCode:n.appCode,devicePolicy:n.devicePolicy,rootEntry:n.rootEntry,authentication:n.authentication,routes:n.routes}),`${t}/digest`)}function No(e,t){let o=T(e,t);R(o,["kind","mobileMaxWidthPx","desktopMinWidthPx"],t),j(o.kind,"viewport-family",`${t}/kind`);let n=te(o.mobileMaxWidthPx,`${t}/mobileMaxWidthPx`,320,1600),i=te(o.desktopMinWidthPx,`${t}/desktopMinWidthPx`,320,1600);return i!==n+1&&m("NATIVE_FRONTEND_DEVICE_POLICY_INVALID",t),{kind:"viewport-family",mobileMaxWidthPx:n,desktopMinWidthPx:i}}function tc(e,t){let o=T(e,t);R(o,["code","desktop","mobile"],t);let n=F(o.code,`${t}/code`),i=Io(o.desktop,`${t}/desktop`),s=Io(o.mobile,`${t}/mobile`);return(i===s||s==="/"||!s.startsWith("/m/"))&&m("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",t),i.startsWith("/m/")&&m("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",`${t}/desktop`),{code:n,desktop:i,mobile:s}}function nc(e,t){let o=T(e,t);R(o,["desktop","mobile"],t);let n=$i(o.desktop,`${t}/desktop`,!1),i=$i(o.mobile,`${t}/mobile`,!0);return(n.routeCode===i.routeCode||n.path===i.path)&&m("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_DUPLICATE",t),{desktop:n,mobile:i}}function $i(e,t,o){let n=T(e,t);R(n,["routeCode","path"],t);let i=F(n.routeCode,`${t}/routeCode`),s=Io(n.path,`${t}/path`);return(o?!s.startsWith("/m/"):s.startsWith("/m/"))&&m("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_PATH_INVALID",`${t}/path`),{routeCode:i,path:s}}function Io(e,t){let o=Ae(e,t);return/[:*?#\\\\]/.test(o)&&m("NATIVE_ROUTE_MANIFEST_STATIC_PATH_INVALID",t),o}function ki(e,t,o){let n=T(e,t);R(n,["routeCode","path","surface","pathParams","requiresAuthentication"],t,["capability","access"]),F(n.routeCode,`${t}/routeCode`);let i=Ae(n.path,`${t}/path`),s=S(n.surface,`${t}/surface`,16);["admin","user"].includes(s)||m("NATIVE_ROUTE_SURFACE_INVALID",`${t}/surface`);let a=v(n.pathParams,`${t}/pathParams`,8);return a.forEach((r,c)=>{(!/^[A-Za-z][A-Za-z0-9_]*$/.test(r)||r.length>64)&&m("NATIVE_ROUTE_PATH_PARAM_INVALID",`${t}/pathParams/${c}`)}),ee(a)!==ee(ts(i))&&m("NATIVE_ROUTE_PATH_PARAMS_MISMATCH",`${t}/pathParams`),To(n,t,o),n.requiresAuthentication!==!0&&m("NATIVE_ROUTE_AUTHENTICATION_REQUIRED",`${t}/requiresAuthentication`),n}function ts(e){return U([...e.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(t=>t[1]))}function Vi(e,t,o,n){return{routeCode:e,path:t,surface:o,pathParams:ts(t),...n?.capability?{capability:n.capability}:{},...n?.access?{access:n.access}:{},requiresAuthentication:!0}}function Fi(e,t,o,n){return e==="workflow-launch"?`workflow.${o}.launch.${t}`:e==="application-todo-center"?`application.todo-center.${t}`:e==="resource-records"?`user.${n}.records.${t}`:e==="resource-submit"?`user.${n}.submit.${t}`:`${e.replace(/-/g,".")}.${t}`}function oc(e){let t=e.appCode,o=[],n=(g,E,A,b,I,_,u)=>{o.push({code:g,kind:E,...I?{workflowCode:I}:{},...u?{resourceCode:u}:{},desktop:Vi(Fi(E,"desktop",I,u),A,"user",_),mobile:Vi(Fi(E,"mobile",I,u),b,"user",_)})};e.frontend.user.applicationTodoCenter===!0&&n("application:todo-center","application-todo-center","/todos","/m/todos");let i=ns(e);i.length>0&&(n("workflow:work-center","workflow-work-center","/work-center","/m/work-center"),n("workflow:task","workflow-task","/tasks/:taskId","/m/tasks/:taskId"),n("workflow:instance","workflow-instance","/workflows/:instanceId","/m/workflows/:instanceId"));for(let g of i){if(!["standalone","hidden-handoff"].includes(g.launch.mode))continue;let E=U([g.launch.submission?.create?.requiredCapability,g.launch.submission?.existing?.requiredCapability].filter(A=>!!A));n(`workflow:${g.code}:launch`,"workflow-launch","/workflows/:workflowCode/start","/m/workflows/:workflowCode/start",g.code,E.length===1?{capability:E[0]}:E.length>1?{access:{anyOf:E}}:void 0)}let s=o.sort((g,E)=>ue(String(g.code),String(E.code))),a=gn(e),r=g=>{let E=g==="mobile"?"/m/":"/",A=a.filter(I=>I.surface==="user"&&!/[:*?#\\\\]/.test(I.path)&&I.path===E).sort((I,_)=>ue(I.code,_.code))[0];if(A)return{code:A.code,path:A.path};let b=a.filter(I=>I.surface==="user"&&!/[:*?#\\\\]/.test(I.path)&&(g==="mobile"?I.path.startsWith("/m/"):!I.path.startsWith("/m/"))).sort((I,_)=>ue(I.code,_.code))[0];return b?{code:b.code,path:b.path}:{code:g==="mobile"?"application-root-mobile":"application-root",path:E}},c=e.frontend.authentication?{desktop:{routeCode:e.frontend.authentication.surfaces.desktop.routeCode,path:e.frontend.authentication.surfaces.desktop.path},mobile:{routeCode:e.frontend.authentication.surfaces.mobile.routeCode,path:e.frontend.authentication.surfaces.mobile.path}}:{desktop:{routeCode:"application-login",path:"/login"},mobile:{routeCode:"application-login-mobile",path:"/m/login"}},l=No(e.frontend.devicePolicy,"/config/frontend/devicePolicy"),p=r("desktop"),d=r("mobile"),f={schemaVersion:Gi,appCode:t,devicePolicy:l,rootEntry:{code:p.code,desktop:p.path,mobile:d.path},authentication:c,routes:s};return{...f,digest:X(f)}}function pn(e,t){if(e===void 0)return;let o=S(e,t,32);Aa.has(o)||m("NATIVE_ADMIN_ICON_INVALID",t)}function vi(e,t){e!==void 0&&te(e,t,-1e4,1e4)}function To(e,t,o){return e.capability!==void 0&&e.access!==void 0&&m("NATIVE_ROUTE_ACCESS_CONFLICT",`${t}/access`),e.capability!==void 0?{capability:$e(e.capability,`${t}/capability`,o)}:e.access===void 0?{}:{access:An(e.access,`${t}/access`,o)}}function An(e,t,o){let n=T(e,t);R(n,["allOf","anyOf"],t,!0);let i=n.allOf===void 0?void 0:U(v(n.allOf,`${t}/allOf`,50).map((a,r)=>$e(a,`${t}/allOf/${r}`,o))),s=n.anyOf===void 0?void 0:U(v(n.anyOf,`${t}/anyOf`,50).map((a,r)=>$e(a,`${t}/anyOf/${r}`,o)));return(i?.length||0)+(s?.length||0)===0&&m("NATIVE_ROUTE_ACCESS_EMPTY",t),{...i===void 0?{}:{allOf:i},...s===void 0?{}:{anyOf:s}}}function ns(e){let t=new Map(Yi(e).map(i=>[String(i.code),i])),o=e.workflows.definitions.map((i,s)=>{let a=`/config/workflows/definitions/${s}`,r=T(i,a);R(r,["version","definition","launch"],a,["detailRouteCode"]);let c=T(r.definition,`${a}/definition`),l=r.detailRouteCode===void 0?void 0:is(r.detailRouteCode,`${a}/detailRouteCode`);return{code:F(c.code,`${a}/definition/code`),title:S(c.title,`${a}/definition/title`,255),version:it(r.version,`${a}/version`),launch:ic(e,c,r.launch,`${a}/launch`,t),...l?{detailRouteCode:l}:{},definition:c}});return U(o.map(i=>i.code)).map(i=>{let s=o.filter(l=>l.code===i),a=e.workflows.activations.find(l=>l.workflowCode===i)?.definitionVersion,r=s.find(l=>l.version===a)||[...s].sort((l,p)=>p.version-l.version)[0],c=new Set;for(let l of s){let p=T(l.definition.nodes,"/config/workflows/definitions/nodes");for(let d of Object.values(p)){let f=T(d,"/config/workflows/definitions/nodes/*");if(f.kind==="approval")for(let g of v(f.allowedOperations||[],"/config/workflows/definitions/nodes/*/allowedOperations",20))c.add(g)}}return{code:i,title:r.title,acceptedCommandDeactivationPolicy:r.definition.acceptedCommandDeactivationPolicy,subject:r.definition.subject,launch:r.launch,...["standalone","hidden-handoff"].includes(r.launch.mode)&&!r.launch.submission?{processOperationCode:`openxiangda.workflow.${i}.submit`}:{},...r.detailRouteCode?{detailRouteCode:r.detailRouteCode}:{},definitionVersions:Bi(s.map(l=>l.version)),bindingVersions:Bi(e.workflows.bindings.map((l,p)=>{let d=`/config/workflows/bindings/${p}`,f=T(l,d),g=T(f.binding,`${d}/binding`);return{code:F(g.workflowCode,`${d}/binding/workflowCode`),version:it(f.version,`${d}/version`)}}).filter(l=>l.code===i).map(l=>l.version)),providerCodes:U(e.workflows.providers.map((l,p)=>F(T(l,`/config/workflows/providers/${p}`).code,`/config/workflows/providers/${p}/code`))),allowedOperations:[...c].sort(ue),editableParameterCodes:U(e.workflows.editableParameters.map((l,p)=>{let d=`/config/workflows/editableParameters/${p}`,f=T(l,d);return{code:F(f.code,`${d}/code`),workflowCode:F(f.workflowCode,`${d}/workflowCode`)}}).filter(l=>l.workflowCode===i).map(l=>l.code))}})}function os(e,t){let o=T(e,t);R(o,["mode"],t,["submission"]);let n=S(o.mode,`${t}/mode`,32);return["standalone","custom-page","hidden-handoff","work-center-only"].includes(n)||m("NATIVE_WORKFLOW_LAUNCH_MODE_INVALID",`${t}/mode`),{mode:n,...o.submission===void 0?{}:{submission:T(o.submission,`${t}/submission`)}}}function ic(e,t,o,n,i){let s=os(o,n);if(!s.submission)return{mode:s.mode};["standalone","hidden-handoff"].includes(s.mode)||m("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${n}/submission`);let a=T(s.submission,`${n}/submission`);R(a,["kind"],`${n}/submission`,["create","existing","context"]),j(a.kind,"named-operation",`${n}/submission/kind`);let r=n.endsWith("/launch")?n.slice(0,-7):n,c=T(t.subject,`${r}/definition/subject`),l=J(c.resourceCode,`${r}/definition/subject/resourceCode`),p=e.data.resources.findIndex(O=>O.code===l),d=e.data.resources[p];(p<0||!d)&&m("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${r}/definition/subject/resourceCode`);let f=new Set(T(d.schema,`/config/data/resources/${p}/schema`).fields.map(O=>String(O.code))),g=new Map(e.backend.operations.map(O=>[String(O.code),O])),E=(O,h)=>{let C=`${n}/submission/${h}`,k=T(O,C);R(k,["operationCode","inputs","output"],C);let V=F(k.operationCode,`${C}/operationCode`),M=g.get(V),P=i.get(V),re=P?.platformAccess?.workflow?.codes;(!M||!P||P.method!=="POST"||!Array.isArray(re)||!re.includes(t.code))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INVALID",C);let Ee=T(M.requestSchema,`${C}/operation/requestSchema`),H=T(Ee.properties,`${C}/operation/requestSchema/properties`),Te=new Set(Ee.required===void 0?[]:v(Ee.required,`${C}/operation/requestSchema/required`,64)),ce=T(k.inputs,`${C}/inputs`),$=Object.entries(ce);(!$.length||$.length>64)&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${C}/inputs`);let W=new Set,L=new Map,G={};for(let[z,Q]of $){(!Si.test(z)||!Object.prototype.hasOwnProperty.call(H,z))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${C}/inputs/${z}`);let Be=`${C}/inputs/${z}`,yn=T(Q,Be),ve=S(yn.source,`${Be}/source`,32);if(["field","idempotency-key","current-user-reference","subject-id","subject-revision","requested-at"].includes(ve)||m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",Be),R(yn,["source"],Be,ve==="field"?["fieldCode"]:!1),L.set(ve,(L.get(ve)||0)+1),ve==="field"){let St=K(yn.fieldCode,`${Be}/fieldCode`);(W.has(St)||!f.has(St))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${Be}/fieldCode`),W.add(St),G[z]={source:ve,fieldCode:St}}else G[z]={source:ve}}([...Te].some(z=>!(z in ce))||(L.get("idempotency-key")||0)!==1||!$.some(([z,Q])=>T(Q,`${C}/inputs/${z}`).source==="idempotency-key"&&Te.has(z))||h==="create"&&((L.get("subject-id")||0)>0||(L.get("subject-revision")||0)>0)||h==="existing"&&((L.get("subject-id")||0)!==1||(L.get("subject-revision")||0)!==1))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${C}/inputs`);let q=T(k.output,`${C}/output`);R(q,["subjectId"],`${C}/output`,["subjectRevision","processCommand"]);let Oe=T(T(M.responseSchema,`${C}/operation/responseSchema`).properties,`${C}/operation/responseSchema/properties`);for(let z of["subjectId","subjectRevision","processCommand"]){if(q[z]===void 0)continue;let Q=S(q[z],`${C}/output/${z}`,128);(!Si.test(Q)||!Object.prototype.hasOwnProperty.call(Oe,Q))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_OUTPUT_INVALID",`${C}/output/${z}`)}return{operationCode:V,method:"POST",path:P.path,requiredCapability:P.requiredCapability,requestSchemaDigest:P.requestSchemaDigest,responseSchemaDigest:P.responseSchemaDigest,inputs:G,output:{...q},fieldCodes:W}},A=a.create===void 0?void 0:E(a.create,"create"),b=a.existing===void 0?void 0:E(a.existing,"existing");!A&&!b&&m("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${n}/submission`);let I=new Set([...A?.fieldCodes||[],...b?.fieldCodes||[]]),_=a.context===void 0?[]:w(a.context,`${n}/submission/context`,16),u=new Set,N=_.map((O,h)=>{let C=`${n}/submission/context/${h}`,k=T(O,C);R(k,["queryParameter","fieldCode"],C);let V=S(k.queryParameter,`${C}/queryParameter`,64),M=K(k.fieldCode,`${C}/fieldCode`);return(!/^[A-Za-z][A-Za-z0-9]{0,63}$/.test(V)||u.has(V)||!I.has(M))&&m("NATIVE_WORKFLOW_LAUNCH_CONTEXT_INVALID",C),u.add(V),{queryParameter:V,fieldCode:M}}),y=O=>{let{fieldCodes:h,...C}=O;return C};return{mode:s.mode,submission:{kind:"named-operation",...A?{create:y(A)}:{},...b?{existing:y(b)}:{},context:N}}}function is(e,t){let o=T(e,t);R(o,["desktop","mobile"],t);let n=F(o.desktop,`${t}/desktop`),i=F(o.mobile,`${t}/mobile`);return n===i&&m("NATIVE_WORKFLOW_DETAIL_ROUTE_DUPLICATE",t),{desktop:n,mobile:i}}function sc(e,t){let o=new Set(t.map(p=>p.code)),n=new Map;e.data.resources.forEach((p,d)=>{let f=`/config/data/resources/${d}`,g=T(p,f);for(let[b,I]of Object.entries(g.fieldPolicies||{})){if(!Ge(b))continue;let _=`${f}/fieldPolicies/${b}/read`,u=T(I,`${f}/fieldPolicies/${b}`);for(let N of v(u.read||[],_,2e3))o.has(N)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",_)}let E=g.surface===void 0?{}:T(g.surface,`${f}/surface`);if(["native","queued-command"].includes(E.mutationOwner||"native"))return;let A=T(g.capabilities,`${f}/capabilities`);for(let b of["create","update","delete"])n.set(String(A[b]),b)});let i=new Set;for(let[p,d]of e.authz.roles.entries()){let f=`/config/authz/roles/${p}`,g=T(d,f);R(g,["code","name","description","capabilities"],f,!0);let E=F(g.code,`${f}/code`);i.has(E)&&m("NATIVE_ROLE_DUPLICATE",`${f}/code`),i.add(E),S(g.name,`${f}/name`,255);let A=v(g.capabilities,`${f}/capabilities`,2e3);for(let[b,I]of A.entries())n.has(I)&&m("NATIVE_DATA_SURFACE_MUTATION_GRANT_FORBIDDEN",`${f}/capabilities/${b}`,{operation:n.get(I)}),o.has(I)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/capabilities`)}let s=e.authz.authenticatedUserRoleCode===void 0?"":F(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode");s&&!i.has(s)&&m("NATIVE_AUTHENTICATED_USER_ROLE_REFERENCE_MISSING","/config/authz/authenticatedUserRoleCode");let a=new Set,r=0;for(let[p,d]of e.perspectives.entries()){let f=`/config/perspectives/${p}`,g=T(d,f);R(g,["code","name","description","roleCodes","capabilityCodes","default"],f,!0);let E=F(g.code,`${f}/code`);a.has(E)&&m("NATIVE_PERSPECTIVE_DUPLICATE",`${f}/code`),a.add(E),S(g.name,`${f}/name`,255);let A=v(g.roleCodes,`${f}/roleCodes`,20);A.length<1&&m("NATIVE_PERSPECTIVE_ROLE_REQUIRED",`${f}/roleCodes`),A.forEach((_,u)=>{i.has(_)||m("NATIVE_PERSPECTIVE_ROLE_MISSING",`${f}/roleCodes/${u}`)});let b=U(e.authz.roles.filter(_=>A.includes(_.code)).flatMap(_=>_.capabilities)),I=v(g.capabilityCodes,`${f}/capabilityCodes`,2e3);ee(b)!==ee(I)&&m("NATIVE_PERSPECTIVE_CAPABILITY_PROJECTION_MISMATCH",`${f}/capabilityCodes`),g.default===!0?r+=1:g.default!==void 0&&m("NATIVE_PERSPECTIVE_DEFAULT_INVALID",`${f}/default`)}r>1&&m("NATIVE_PERSPECTIVE_DEFAULT_DUPLICATE","/config/perspectives");for(let[p,d]of e.backend.operations.entries()){let f=T(d,`/config/backend/operations/${p}`);o.has(f.capability)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/backend/operations/${p}/capability`)}let c=new Set,l=new Set;for(let[p,d]of e.frontend.routes.entries()){let f=`/config/frontend/routes/${p}`,g=T(d,f),E=F(g.code,`${f}/code`);c.has(E)&&m("NATIVE_ROUTE_DUPLICATE",`${f}/code`),c.add(E);let A=Ae(g.path,`${f}/path`);l.has(A)&&m("NATIVE_ROUTE_PATH_DUPLICATE",`${f}/path`),l.add(A);let b=To(g,f,e.appCode);b.capability&&!o.has(b.capability)&&m("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/capability`);let I=g.access===void 0?void 0:T(g.access,`${f}/access`);for(let _ of["allOf","anyOf"]){let u=I?.[_]===void 0?[]:w(I[_],`${f}/access/${_}`,50);for(let[N,y]of u.entries()){let O=$e(y,`${f}/access/${_}/${N}`,e.appCode);o.has(O)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`${f}/access/${_}/${N}`)}}}if(e.frontend.admin.access!==void 0){let p=An(e.frontend.admin.access,"/config/frontend/admin/access",e.appCode);for(let d of["allOf","anyOf"])for(let[f,g]of(p[d]||[]).entries())o.has(g)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/frontend/admin/access/${d}/${f}`)}for(let[p,d]of e.frontend.routes.entries()){let f=T(d,`/config/frontend/routes/${p}`);f.parentCode&&!c.has(f.parentCode)&&m("NATIVE_ROUTE_PARENT_MISSING",`/config/frontend/routes/${p}/parentCode`)}}function rc(e){let t=new Set(e.authz.roles.map(l=>String(l.code))),o=e.authz.authenticatedUserRoleCode===void 0?"":F(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode"),n=new Map(e.authz.scopeDimensions.map(l=>[String(l.code),{valueType:l.valueType==="uuid"?"uuid":"string",...l.valueSource?.resourceCode?{valueSourceResourceCode:String(l.valueSource.resourceCode)}:{}}])),i=new Set(n.keys()),s=new Map(e.data.resources.map((l,p)=>{let d=Me(l,`/config/data/resources/${p}`,e.appCode);return[d.code,new Map(d.schema.fields.map(f=>[String(f.code),f]))]}));for(let[l,p]of e.authz.scopeDimensions.entries()){let d=`/config/authz/scopeDimensions/${l}`,f=T(p,d);if(R(f,["code","name","resourceCode","valueType","hierarchyMode","valueSource"],d,!0),f.valueSource===void 0)continue;let g=T(f.valueSource,`${d}/valueSource`);R(g,["kind","resourceCode","labelField","enabledField"],`${d}/valueSource`,!0),g.kind!=="native_resource"&&m("NATIVE_SCOPE_VALUE_SOURCE_KIND_INVALID",`${d}/valueSource/kind`),f.valueType!=="uuid"&&m("NATIVE_SCOPE_VALUE_SOURCE_TYPE_INVALID",`${d}/valueType`);let E=J(g.resourceCode,`${d}/valueSource/resourceCode`),A=s.get(E);A||m("NATIVE_SCOPE_VALUE_SOURCE_RESOURCE_MISSING",`${d}/valueSource/resourceCode`);let b=K(g.labelField,`${d}/valueSource/labelField`);if(["text.short","text.long"].includes(String(A.get(b)?.type||""))||m("NATIVE_SCOPE_VALUE_SOURCE_LABEL_FIELD_INVALID",`${d}/valueSource/labelField`),g.enabledField!==void 0){let I=K(g.enabledField,`${d}/valueSource/enabledField`);A.get(I)?.type!=="boolean"&&m("NATIVE_SCOPE_VALUE_SOURCE_ENABLED_FIELD_INVALID",`${d}/valueSource/enabledField`)}}let a=new Set,r=new Set;for(let[l,p]of e.authz.scopeSources.entries()){let d=`/config/authz/scopeSources/${l}`,f=T(p,d);R(f,["code","name","resourceCode","subject","grants","operationField","enabledField","effectiveFromField","effectiveToField","failureMode"],d,!0);let g=F(f.code,`${d}/code`);a.has(g)&&m("NATIVE_SCOPE_SOURCE_DUPLICATE",`${d}/code`),a.add(g),S(f.name,`${d}/name`,255);let E=J(f.resourceCode,`${d}/resourceCode`),A=s.get(E);A||m("NATIVE_SCOPE_SOURCE_RESOURCE_MISSING",`${d}/resourceCode`);let b=T(f.subject,`${d}/subject`),I=S(b.type,`${d}/subject/type`,32);R(b,I==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${d}/subject`),["user","role_membership"].includes(I)||m("NATIVE_SCOPE_SOURCE_SUBJECT_INVALID",`${d}/subject/type`);let _=He(b.userIdField,A);zt(_)||m("NATIVE_SCOPE_SOURCE_SUBJECT_PATH_INVALID",`${d}/subject/userIdField`),I==="role_membership"&&!t.has(String(b.roleCode))&&m("NATIVE_ROLE_REFERENCE_MISSING",`${d}/subject/roleCode`);let u=new Set;for(let[N,y]of w(f.grants,`${d}/grants`,100).entries()){let O=`${d}/grants/${N}`,h=T(y,O);R(h,["dimensionCode","valueField","parentValueField"],O,!0);let C=F(h.dimensionCode,`${O}/dimensionCode`);(!i.has(C)||u.has(C))&&m("NATIVE_SCOPE_SOURCE_DIMENSION_INVALID",`${O}/dimensionCode`),u.add(C),f.failureMode==="last_known_good"&&r.add(C);for(let k of["valueField","parentValueField"]){if(h[k]===void 0)continue;let V=He(h[k],A);Jn(V,n.get(C),s)||m("NATIVE_SCOPE_SOURCE_GRANT_PATH_INVALID",`${O}/${k}`)}}u.size===0&&m("NATIVE_SCOPE_SOURCE_GRANT_REQUIRED",`${d}/grants`),["strict","last_known_good"].includes(f.failureMode)||m("NATIVE_SCOPE_SOURCE_FAILURE_MODE_INVALID",`${d}/failureMode`);for(let N of["operationField","enabledField","effectiveFromField","effectiveToField"]){if(f[N]===void 0)continue;let y=K(f[N],`${d}/${N}`);A.has(y)||m("NATIVE_SCOPE_SOURCE_FIELD_MISSING",`${d}/${N}`)}}cc(e,t,s,o);let c=new Set;for(let[l,p]of e.authz.dataPolicies.entries()){let d=`/config/authz/dataPolicies/${l}`,f=T(p,d);R(f,["code","name","resourceCode","unrestrictedRoleCodes","operations","matchMode","rules","readExpression","writeBoundary"],d,!0);let g=F(f.code,`${d}/code`);c.has(g)&&m("NATIVE_DATA_POLICY_DUPLICATE",`${d}/code`),c.add(g);let E=f.readExpression!==void 0,A=v(f.operations||[],`${d}/operations`,4);f.operations!==void 0&&(A.length===0||A.some(y=>!["read","create","update","delete"].includes(y)))&&m("NATIVE_DATA_POLICY_OPERATIONS_INVALID",`${d}/operations`),["AND","OR"].includes(f.matchMode)||m("NATIVE_DATA_POLICY_MATCH_MODE_INVALID",`${d}/matchMode`),E&&f.operations!==void 0&&m("NATIVE_DATA_POLICY_READ_EXPRESSION_OPERATIONS_FORBIDDEN",`${d}/operations`);let b=e.data.resources.find(y=>y.dataPolicyCode===g),I=f.resourceCode||b?.code,_=I?s.get(J(I,`${d}/resourceCode`)):void 0;E&&!_&&m("NATIVE_DATA_POLICY_RESOURCE_MISSING",`${d}/resourceCode`);let u=v(f.unrestrictedRoleCodes||[],`${d}/unrestrictedRoleCodes`,100);f.unrestrictedRoleCodes!==void 0&&u.length===0&&m("NATIVE_DATA_POLICY_UNRESTRICTED_ROLES_INVALID",`${d}/unrestrictedRoleCodes`);for(let y of u)t.has(y)||m("NATIVE_ROLE_REFERENCE_MISSING",`${d}/unrestrictedRoleCodes`);let N;try{let y=w(f.rules,`${d}/rules`,100).map((O,h)=>({rule:T(O,`${d}/rules/${h}`),pointer:`${d}/rules/${h}`}));y.length===0?(!E||f.matchMode!=="AND"||f.writeBoundary!=="capability_only")&&m("NATIVE_DATA_POLICY_WRITE_BOUNDARY_REQUIRED",d):f.writeBoundary!==void 0&&m("NATIVE_DATA_POLICY_WRITE_BOUNDARY_INVALID",`${d}/writeBoundary`),N=[...y],E&&(N.push(...Ot(f.readExpression,`${d}/readExpression`)),go(f.readExpression,`${d}/readExpression`))}catch(y){throw y instanceof nt&&m(y.code,y.pointer),y}for(let{rule:y,pointer:O}of N){R(y,["subject","dimensionCode","relationCode","resourceCode","field","roleCodes","operation","valuePath","emptyMatchesAll","operator","value","operand"],O,!0);let h=K(y.field,`${O}/field`),C=_?.get(h);E&&!C&&m("NATIVE_DATA_POLICY_FIELD_MISSING",`${O}/field`);for(let H of v(y.roleCodes||[],`${O}/roleCodes`,100))t.has(H)||m("NATIVE_ROLE_REFERENCE_MISSING",`${O}/roleCodes`);let k=String(y.operator||""),V=y.operand==="db_now",M=["is_null","is_not_null"].includes(k),P=["eq","not_eq","in","not_in"].includes(k),re=!V&&(y.operator!==void 0||y.value!==void 0);if([y.subject==="current_user"?"current_user":"",typeof y.dimensionCode=="string"?"dimension":"",typeof y.relationCode=="string"?"relationship":"",re?"constant":"",V?"db_now":""].filter(Boolean).length!==1&&m("NATIVE_DATA_POLICY_RULE_SOURCE_INVALID",O),y.subject!==void 0&&y.subject!=="current_user"&&m("NATIVE_DATA_POLICY_SUBJECT_INVALID",`${O}/subject`),re){if(!P&&!M&&m("NATIVE_DATA_POLICY_OPERATOR_INVALID",`${O}/operator`),["in","not_in"].includes(k)){let H=w(y.value,`${O}/value`,100).map((Te,ce)=>S(Te,`${O}/value/${ce}`,2048));(H.length===0||new Set(H).size!==H.length)&&m("NATIVE_DATA_POLICY_VALUE_INVALID",`${O}/value`)}else["eq","not_eq"].includes(k)?S(y.value,`${O}/value`,2048):(y.value!==void 0||y.operand!==void 0)&&m("NATIVE_DATA_POLICY_VALUE_INVALID",`${O}/value`);for(let H of["operation","valuePath","emptyMatchesAll","resourceCode","operand"])y[H]!==void 0&&m("NATIVE_DATA_POLICY_CONSTANT_RULE_INVALID",`${O}/${H}`)}if(V){(!["lt","lte","gt","gte"].includes(k)||y.value!==void 0||C?.type!=="datetime")&&m("NATIVE_DATA_POLICY_DB_NOW_INVALID",O);for(let H of["operation","valuePath","emptyMatchesAll","resourceCode","value"])y[H]!==void 0&&m("NATIVE_DATA_POLICY_DB_NOW_INVALID",`${O}/${H}`)}y.dimensionCode&&!i.has(y.dimensionCode)&&m("NATIVE_SCOPE_DIMENSION_MISSING",`${O}/dimensionCode`),r.has(String(y.dimensionCode||""))&&y.operation!=="read"&&m("NATIVE_SCOPE_SOURCE_LAST_KNOWN_GOOD_UNSAFE",`${O}/operation`)}}for(let[l,p]of e.data.resources.entries()){let d=T(p,`/config/data/resources/${l}`);d.dataPolicyCode&&!c.has(d.dataPolicyCode)&&m("NATIVE_DATA_POLICY_REFERENCE_MISSING",`/config/data/resources/${l}/dataPolicyCode`)}}function ac(e){try{Cn(e.data.resources,"/config/data/resources")}catch(t){throw t instanceof _e&&m(t.code,t.pointer),t}}function cc(e,t,o,n){let i=new Set;for(let[s,a]of e.authz.roleMembershipSources.entries()){let r=`/config/authz/roleMembershipSources/${s}`,c=T(a,r);R(c,["code","name","resourceCode","userIdField","roleCode","enabledField","effectiveFromField","effectiveToField","failureMode"],r,!0);let l=F(c.code,`${r}/code`);l.length>100&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${r}/code`),i.has(l)&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${r}/code`),i.add(l),S(c.name,`${r}/name`,255);let p=Pi(c.resourceCode,`${r}/resourceCode`,o);Li(c.userIdField,`${r}/userIdField`,p),t.has(String(c.roleCode||""))||m("NATIVE_ROLE_REFERENCE_MISSING",`${r}/roleCode`),n&&c.roleCode===n&&m("NATIVE_AUTHENTICATED_USER_ROLE_SOURCE_CONFLICT",`${r}/roleCode`),xi(c,r,p)}for(let[s,a]of e.authz.relationshipGrantSources.entries()){let r=`/config/authz/relationshipGrantSources/${s}`,c=T(a,r);R(c,["code","name","resourceCode","subject","relationCode","targetResourceCode","resourceIdField","operations","enabledField","effectiveFromField","effectiveToField","failureMode"],r,!0);let l=F(c.code,`${r}/code`);l.length>100&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${r}/code`),i.has(l)&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${r}/code`),i.add(l),S(c.name,`${r}/name`,255);let p=Pi(c.resourceCode,`${r}/resourceCode`,o),d=T(c.subject,`${r}/subject`),f=S(d.type,`${r}/subject/type`,32);R(d,f==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${r}/subject`),["user","role_membership"].includes(f)||m("NATIVE_AUTHORIZATION_PROJECTION_SUBJECT_INVALID",`${r}/subject/type`),Li(d.userIdField,`${r}/subject/userIdField`,p),f==="role_membership"&&!t.has(String(d.roleCode||""))&&m("NATIVE_ROLE_REFERENCE_MISSING",`${r}/subject/roleCode`),F(c.relationCode,`${r}/relationCode`);let g=J(c.targetResourceCode,`${r}/targetResourceCode`);o.has(g)||m("NATIVE_AUTHORIZATION_PROJECTION_TARGET_RESOURCE_MISSING",`${r}/targetResourceCode`);let E=He(c.resourceIdField,p),A=E?.field.type==="resource-ref.single"&&E.valuePath==="value"&&E.field.source?.resourceCode===g;(c.resourceIdField==="id"?g!==String(c.resourceCode):!A)&&m("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_ID_FIELD_INVALID",`${r}/resourceIdField`);let b=v(c.operations,`${r}/operations`,20);(b.length===0||b.some(I=>I.length>64||!/^[A-Za-z0-9][A-Za-z0-9:._*-]{0,63}$/.test(I)))&&m("NATIVE_AUTHORIZATION_PROJECTION_OPERATIONS_INVALID",`${r}/operations`),xi(c,r,p)}}function Pi(e,t,o){let n=J(e,t),i=o.get(n);return i||m("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_MISSING",t),i}function Li(e,t,o){let n=He(e,o);zt(n)||m("NATIVE_AUTHORIZATION_PROJECTION_USER_FIELD_INVALID",t)}function xi(e,t,o){if(e.failureMode!=="strict"&&m("NATIVE_AUTHORIZATION_PROJECTION_FAILURE_MODE_INVALID",`${t}/failureMode`),e.enabledField!==void 0){let n=K(e.enabledField,`${t}/enabledField`);o.get(n)?.type!=="boolean"&&m("NATIVE_AUTHORIZATION_PROJECTION_ENABLED_FIELD_INVALID",`${t}/enabledField`)}for(let n of["effectiveFromField","effectiveToField"]){if(e[n]===void 0)continue;let i=K(e[n],`${t}/${n}`);["date","datetime"].includes(String(o.get(i)?.type))||m("NATIVE_AUTHORIZATION_PROJECTION_EFFECTIVE_FIELD_INVALID",`${t}/${n}`)}}function dc(e){let t=new Set,o=new Set;e.forEach((n,i)=>{let s=`/config/backend/secrets/${i}`,a=T(n,s);R(a,["name","env","description","required","exposure"],s,!0);let r=S(a.name,`${s}/name`,128),c=S(a.env,`${s}/env`,128);da.test(r)||m("NATIVE_SECRET_NAME_INVALID",`${s}/name`),(!la.test(c)||c.startsWith("OPENXIANGDA_")||["NODE_ENV","PORT"].includes(c))&&m("NATIVE_SECRET_ENV_INVALID",`${s}/env`),t.has(r)&&m("NATIVE_SECRET_NAME_DUPLICATE",`${s}/name`),o.has(c)&&m("NATIVE_SECRET_ENV_DUPLICATE",`${s}/env`),t.add(r),o.add(c),j(a.exposure,"active_only",`${s}/exposure`),a.required!==void 0&&st(a.required,`${s}/required`),a.description!==void 0&&Oo(a.description,`${s}/description`,2e3)})}function lc(e){let t=new Set,o=new Map,n=new Map(e.data.resources.map(g=>[String(g.code),g])),i=new Map(e.frontend.routes.map((g,E)=>{let A=T(g,`/config/frontend/routes/${E}`);return[F(A.code,`/config/frontend/routes/${E}/code`),A]}));for(let[g,E]of e.workflows.definitions.entries()){let A=`/config/workflows/definitions/${g}`,b=T(E,A);if(R(b,["version","definition","launch"],A,["detailRouteCode"]),os(b.launch,`${A}/launch`),b.detailRouteCode!==void 0){let y=is(b.detailRouteCode,`${A}/detailRouteCode`);for(let[O,h,C]of[["desktop",y.desktop,["admin","user"]],["mobile",y.mobile,["user"]]]){let k=`${A}/detailRouteCode/${O}`,V=i.get(h);V||m("NATIVE_WORKFLOW_DETAIL_ROUTE_MISSING",k),C.some(re=>re===V.surface)||m("NATIVE_WORKFLOW_DETAIL_ROUTE_SURFACE_INVALID",k);let M=Ae(V.path,k),P=[...M.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(re=>re[1]);(M.includes("*")||P.length!==1||P[0]!=="instanceId")&&m("NATIVE_WORKFLOW_DETAIL_ROUTE_PATH_INVALID",k)}}let I=T(b.definition,`${A}/definition`),_=`${I.code}:${it(b.version,`${A}/version`)}`;t.has(_)&&m("NATIVE_WORKFLOW_DEFINITION_DUPLICATE",A),t.add(_),fc(I,`${A}/definition`),uc(I.subject,n,`${A}/definition/subject`);let u=It(I,new Map((n.get(I.subject.resourceCode)?.schema.fields||[]).map(y=>[y.code,{...n.get(I.subject.resourceCode)?.surface?.fields?.[y.code],...y,system:["id","revision","createdAt","updatedAt","createdBy","updatedBy"].includes(y.code)}])),new Map([...n].map(([y,O])=>[y,new Map(O.schema.fields.map(h=>[h.code,{...O.surface?.fields?.[h.code],...h,system:["id","revision","createdAt","updatedAt","createdBy","updatedBy"].includes(h.code)}]))])));u.length&&m(u[0],`${A}/definition/taskPages`);let N=eo(I,{appCode:e.appCode,capabilities:e.authz.capabilities.map(y=>y.code),fields:new Map((n.get(I.subject.resourceCode)?.schema.fields||[]).map(y=>[y.code,y]))});N.length&&m("NATIVE_WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID",`${A}/definition/instanceCommands`,{errors:N}),I.title===I.code&&m("NATIVE_WORKFLOW_USER_TITLE_REQUIRED",`${A}/definition/title`),o.set(_,I)}let s=new Set,a=new Map;for(let[g,E]of e.workflows.bindings.entries()){let A=T(E,`/config/workflows/bindings/${g}`),b=T(A.binding,`/config/workflows/bindings/${g}/binding`),I=`${b.workflowCode}:${it(A.version,`/config/workflows/bindings/${g}/version`)}`;s.has(I)&&m("NATIVE_WORKFLOW_BINDING_DUPLICATE",`/config/workflows/bindings/${g}`),s.add(I),pc(b,`/config/workflows/bindings/${g}/binding`),a.set(I,b)}let r=new Set,c=new Map;for(let[g,E]of e.workflows.activations.entries()){let A=`/config/workflows/activations/${g}`,b=T(E,A);R(b,["workflowCode","definitionVersion","bindingVersion","acceptedCommandDeactivationPolicy"],A,["environmentKey"]);let I=F(b.workflowCode,`${A}/workflowCode`);r.has(I)&&m("NATIVE_WORKFLOW_ACTIVATION_DUPLICATE",A),r.add(I);let _=`${I}:${it(b.definitionVersion,`${A}/definitionVersion`)}`,u=`${I}:${it(b.bindingVersion,`${A}/bindingVersion`)}`;t.has(_)||m("NATIVE_WORKFLOW_DEFINITION_REFERENCE_MISSING",`${A}/definitionVersion`),s.has(u)||m("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${A}/bindingVersion`);let N=o.get(_),y=a.get(u),O=sn(N,y);O.length&&m(O[0],A),(!["finish-pinned","cancel-on-deactivate"].includes(b.acceptedCommandDeactivationPolicy)||b.acceptedCommandDeactivationPolicy!==N.acceptedCommandDeactivationPolicy)&&m("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_MISMATCH",`${A}/acceptedCommandDeactivationPolicy`),_c(N,y,`/config/workflows/activations/${g}`),c.set(I,y)}let l=_o([...c.values()]);l.length&&m(l[0],"/config/workflows/activations");let p=new Set;e.workflows.providers.forEach((g,E)=>{let A=`/config/workflows/providers/${E}`,b=T(g,A);R(b,["code","endpointPath","timeoutMs"],A,!0);let I=F(b.code,`${A}/code`);p.has(I)&&m("NATIVE_WORKFLOW_PROVIDER_DUPLICATE",`${A}/code`),p.add(I),Ae(b.endpointPath,`${A}/endpointPath`),b.timeoutMs!==void 0&&te(b.timeoutMs,`${A}/timeoutMs`,100,1e4)});for(let[g,E]of c.entries())for(let[A,b]of Object.entries(T(E.bindings,"/config/workflows/bindings/*/binding/bindings"))){let I=T(b,`/config/workflows/${g}/bindings/${A}`);I.provider==="application_provider"&&!p.has(I.providerCode)&&m("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`/config/workflows/${g}/bindings/${A}/providerCode`)}let d=new Set(e.authz.roles.map(g=>g.code)),f=new Set;e.workflows.editableParameters.forEach((g,E)=>{let A=`/config/workflows/editableParameters/${E}`,b=T(g,A);R(b,["code","workflowCode","bindingKey","label","valueType","required","allowedRoleCodes","allowedProviderCodes","maxItems"],A,!0);let I=F(b.code,`${A}/code`);f.has(I)&&m("NATIVE_WORKFLOW_EDITABLE_PARAMETER_DUPLICATE",`${A}/code`),f.add(I);let _=En(b.workflowCode,`${A}/workflowCode`),u=_n(b.bindingKey,`${A}/bindingKey`),N=c.get(_);(!N||!T(N.bindings,`${A}/bindingKey`)[u])&&m("NATIVE_WORKFLOW_EDITABLE_BINDING_MISSING",`${A}/bindingKey`),S(b.label,`${A}/label`,255),["role_code","user_ids","provider_code"].includes(b.valueType)||m("NATIVE_WORKFLOW_EDITABLE_VALUE_TYPE_INVALID",`${A}/valueType`);for(let y of v(b.allowedRoleCodes||[],`${A}/allowedRoleCodes`,100))d.has(y)||m("NATIVE_ROLE_REFERENCE_MISSING",`${A}/allowedRoleCodes`);for(let y of v(b.allowedProviderCodes||[],`${A}/allowedProviderCodes`,100))p.has(y)||m("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`${A}/allowedProviderCodes`);b.required!==void 0&&st(b.required,`${A}/required`),b.maxItems!==void 0&&te(b.maxItems,`${A}/maxItems`,1,200)})}function uc(e,t,o){let n=T(e,o);R(n,["resourceCode","factProjection"],o,["summaryFields"]);let i=J(n.resourceCode,`${o}/resourceCode`),s=t.get(i);s||m("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${o}/resourceCode`);let a=new Set(w(T(s.schema,`${o}/resourceCode`).fields,`${o}/resourceCode`,500).map((l,p)=>K(T(l,`${o}/resourceCode/${p}`).code,`${o}/resourceCode/${p}`))),r=T(n.factProjection,`${o}/factProjection`),c=Object.entries(r);(c.length<1||c.length>64)&&m("NATIVE_WORKFLOW_SUBJECT_FACT_PROJECTION_INVALID",`${o}/factProjection`);for(let[l,p]of c){pa.test(l)||m("NATIVE_WORKFLOW_SUBJECT_FACT_KEY_INVALID",`${o}/factProjection/${l}`);let d=K(p,`${o}/factProjection/${l}`);a.has(d)||m("NATIVE_WORKFLOW_SUBJECT_FIELD_MISSING",`${o}/factProjection/${l}`)}if(n.summaryFields!==void 0){let l=v(n.summaryFields,`${o}/summaryFields`,_a).map((E,A)=>K(E,`${o}/summaryFields/${A}`)),p=t.get(i),d=p.surface&&typeof p.surface=="object"&&!Array.isArray(p.surface)?p.surface:{},f=d.fields&&typeof d.fields=="object"&&!Array.isArray(d.fields)?d.fields:{},g=new Map(w(T(p.schema,`${o}/resourceCode`).fields,`${o}/resourceCode`,500).map((E,A)=>{let b=T(E,`${o}/resourceCode/${A}`);return[String(b.code),b]}));for(let[E,A]of l.entries()){let b=g.get(A),I=f[A],_=String(b?.type||""),u=b?.maxLength;(!b||b.system===!0||I&&typeof I=="object"&&!Array.isArray(I)&&I.system===!0||["id","revision","created_by","updated_by","created_at","updated_at"].includes(A)||!ga.has(_)||_==="text.long"&&typeof u=="number"&&Number.isFinite(u)&&u>ma)&&m("NATIVE_WORKFLOW_SUBJECT_SUMMARY_FIELDS_INVALID",`${o}/summaryFields/${E}`)}}}function fc(e,t){R(e,["schemaVersion","code","title","subject","acceptedCommandDeactivationPolicy","startAt","inputSchema","nodes"],t,["organizationContext","instanceCommands","readability","taskPages"]),j(e.schemaVersion,"openxiangda.workflow-definition/v2",`${t}/schemaVersion`),En(e.code,`${t}/code`),S(e.title,`${t}/title`,255),["finish-pinned","cancel-on-deactivate"].includes(e.acceptedCommandDeactivationPolicy)||m("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_REQUIRED",`${t}/acceptedCommandDeactivationPolicy`);let o=T(e.nodes,`${t}/nodes`),n=Object.keys(o);(n.length===0||n.length>200)&&m("NATIVE_WORKFLOW_NODE_COUNT_INVALID",`${t}/nodes`);let i=S(e.startAt,`${t}/startAt`,128),s=co(e);s.length&&m(s[0],`${t}/readability`);let a=sn(e);a.length&&m(a[0],`${t}/nodes`);let r=rn(e);r.length&&m(r[0],`${t}/nodes`);let c=It(e);c.length&&m(c[0],`${t}/taskPages`);let l=_t(e);l.length&&m(l[0],`${t}/nodes`),o[i]||m("NATIVE_WORKFLOW_START_NODE_MISSING",`${t}/startAt`);let p=new Map;for(let[E,A]of Object.entries(o)){let b=`${t}/nodes/${E}`,I=T(A,b);j(I.id,E,`${b}/id`),["approval","condition","end","cc","action"].includes(I.kind)||m("NATIVE_WORKFLOW_NODE_KIND_INVALID",`${b}/kind`);let _=[];if(I.kind==="approval"){S(I.title,`${b}/title`,255),_n(I.binding,`${b}/binding`),["single","any","all","sequence"].includes(I.mode)||m("NATIVE_WORKFLOW_APPROVAL_MODE_INVALID",`${b}/mode`),_.push(S(I.onApprove,`${b}/onApprove`,128),S(I.onReject,`${b}/onReject`,128));for(let u of v(I.returnTargets||[],`${b}/returnTargets`,200))o[u]||m("NATIVE_WORKFLOW_TARGET_MISSING",`${b}/returnTargets`);for(let u of v(I.allowedOperations||[],`${b}/allowedOperations`,20))Ea.has(u)||m("NATIVE_WORKFLOW_OPERATION_INVALID",`${b}/allowedOperations`)}else if(I.kind==="action")_.push(S(I.next,`${b}/next`,128));else if(I.kind==="cc")S(I.title,`${b}/title`,255),_n(I.binding,`${b}/binding`),_.push(S(I.next,`${b}/next`,128));else if(I.kind==="condition"){let u=w(I.branches,`${b}/branches`,100);u.length===0&&m("NATIVE_WORKFLOW_BRANCH_REQUIRED",`${b}/branches`),u.forEach((N,y)=>{let O=T(N,`${b}/branches/${y}`);ht(O.when,`${b}/branches/${y}/when`,0),_.push(S(O.target,`${b}/branches/${y}/target`,128))}),_.push(S(I.otherwise,`${b}/otherwise`,128))}else S(I.title,`${b}/title`,255),S(I.outcome,`${b}/outcome`,128);for(let u of _)o[u]||m("NATIVE_WORKFLOW_TARGET_MISSING",b);p.set(E,_)}let d=new Set,f=new Set,g=E=>{if(f.has(E)&&m("NATIVE_WORKFLOW_CYCLE_FORBIDDEN",`${t}/nodes/${E}`),!d.has(E)){d.add(E),f.add(E);for(let A of p.get(E)||[])g(A);f.delete(E)}};g(i),d.size!==n.length&&m("NATIVE_WORKFLOW_NODE_UNREACHABLE",`${t}/nodes`)}function ht(e,t,o){o>20&&m("NATIVE_WORKFLOW_EXPRESSION_DEPTH_EXCEEDED",t);let n=T(e,t),i=S(n.op,`${t}/op`,16);if(i!=="literal"){if(i==="path"){let s=S(n.path,`${t}/path`,255);(!/^[A-Za-z][A-Za-z0-9_.-]{0,254}$/.test(s)||s.split(".").some(a=>["__proto__","constructor","prototype"].includes(a)))&&m("NATIVE_WORKFLOW_EXPRESSION_PATH_INVALID",`${t}/path`);return}if(["eq","neq","gt","gte","lt","lte","in","contains"].includes(i)){ht(n.left,`${t}/left`,o+1),ht(n.right,`${t}/right`,o+1);return}if(["and","or"].includes(i)){let s=w(n.values,`${t}/values`,100);s.length===0&&m("NATIVE_WORKFLOW_EXPRESSION_EMPTY",`${t}/values`),s.forEach((a,r)=>ht(a,`${t}/values/${r}`,o+1));return}if(["not","exists"].includes(i)){ht(n.value,`${t}/value`,o+1);return}m("NATIVE_WORKFLOW_EXPRESSION_OPERATOR_INVALID",`${t}/op`)}}function pc(e,t){j(e.schemaVersion,"openxiangda.workflow-binding/v2",`${t}/schemaVersion`),En(e.workflowCode,`${t}/workflowCode`);let o=T(e.bindings,`${t}/bindings`);Object.keys(o).length>200&&m("NATIVE_WORKFLOW_BINDING_LIMIT_EXCEEDED",`${t}/bindings`);for(let[n,i]of Object.entries(o)){_n(n,`${t}/bindings/${n}`);let s=T(i,`${t}/bindings/${n}`),a=S(s.provider,`${t}/bindings/${n}/provider`,64);if(["fixed_users","initiator","input_users","form_field_users","department_supervisor","app_role","app_role_in_scope","business_relation","previous_node_actor","initiator_select","application_provider"].includes(a)||m("NATIVE_WORKFLOW_BINDING_PROVIDER_INVALID",`${t}/bindings/${n}/provider`),a==="fixed_users"&&w(s.users,`${t}/bindings/${n}/users`,200).length===0&&m("NATIVE_WORKFLOW_BINDING_USERS_REQUIRED",`${t}/bindings/${n}/users`),["input_users","form_field_users"].includes(a)&&S(s.inputPath,`${t}/bindings/${n}/inputPath`,255),["app_role","app_role_in_scope","initiator_select"].includes(a)&&F(s.roleCode,`${t}/bindings/${n}/roleCode`),a==="department_supervisor"&&S(s.departmentIdFrom,`${t}/bindings/${n}/departmentIdFrom`,255),a==="application_provider"&&F(s.providerCode,`${t}/bindings/${n}/providerCode`),s.routing!==void 0){let r=Nt(s.routing);r.length&&m(r[0],`${t}/bindings/${n}/routing`)}}}function _c(e,t,o){j(t.workflowCode,e.code,`${o}/workflowCode`);let n=T(t.bindings,`${o}/bindings`),i=rn(e,t);i.length&&m(i[0],o);let s=_t(e,t);s.length&&m(s[0],o);for(let[a,r]of Object.entries(T(e.nodes,`${o}/nodes`))){let c=T(r,`${o}/nodes/${a}`);["approval","cc"].includes(c.kind)&&!n[c.binding]&&m("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${o}/nodes/${a}/binding`)}}function mc(e,t,o){let n=T(t.routeManifest,"/contracts/routeManifest"),i=T(e.routeManifest,"/contracts/routeManifest"),s=new Map;for(let p of w(o.data?.resources,"/config/data/resources",100)){let d=T(p,"/config/data/resources");s.set(String(d.code||""),d)}let a=new Set(w(i.routes,"/contracts/routeManifest/routes",1e3).map(p=>String(T(p,"/contracts/routeManifest/routes").code||""))),r=[];for(let p of w(n.routes,"/contracts/routeManifest/routes",1e3)){let d=T(p,"/contracts/routeManifest/routes"),f=String(d.kind||"");if(f!=="resource-records"&&f!=="resource-submit")continue;let g=String(d.resourceCode||""),E=s.get(g);E||m("NATIVE_ROUTE_MANIFEST_RESOURCE_UNKNOWN","/contracts/routeManifest/routes");let b=`user.${g}.${f==="resource-records"?"records":"submit"}`;j(String(d.code||""),b,"/contracts/routeManifest/routes/code");let I=f==="resource-records"?"read":"create",_=String(T(E.capabilities,"/config/data/resources/capabilities")[I]||"");for(let u of["desktop","mobile"]){let N=T(d[u],`/contracts/routeManifest/routes/${u}`),y=u==="mobile"?"/m/my/":"/my/",O=f==="resource-records"?`${y}${g}`:`${y}${g}/submit`;j(String(N.path||""),O,`/contracts/routeManifest/routes/${u}/path`),j(String(N.capability||""),_,`/contracts/routeManifest/routes/${u}/capability`),j(String(N.routeCode||""),`${b}.${u}`,`/contracts/routeManifest/routes/${u}/routeCode`)}(a.has(b)||r.some(u=>String(u.code)===b))&&m("NATIVE_ROUTE_MANIFEST_DUPLICATE","/contracts/routeManifest/routes/code"),r.push(d)}if(!r.length)return;i.routes=w([...i.routes,...r],"/contracts/routeManifest/routes",1e3).sort((p,d)=>ue(String(T(p,"x").code||""),String(T(d,"x").code||"")));let c=String(T(n.rootEntry,"x").code||"");if(r.find(p=>String(p.code)===c&&p.kind==="resource-records")){let p=T(n.rootEntry,"x");i.rootEntry={code:c,desktop:String(p.desktop||""),mobile:String(p.mobile||"")}}i.digest=X({schemaVersion:i.schemaVersion,appCode:i.appCode,devicePolicy:i.devicePolicy,rootEntry:i.rootEntry,authentication:i.authentication,routes:i.routes})}function Me(e,t,o){let n=T(e,t);R(n,["schemaVersion","appCode","code","name","schema","surface","invariants","decimalReservationLifecycle","uniqueKeys","capabilities","dataPolicyCode","fieldPolicies"],t,!0),j(n.schemaVersion,"openxiangda.data-resource/v2",`${t}/schemaVersion`),j(n.appCode,o,`${t}/appCode`);let i=J(n.code,`${t}/code`),s=S(n.name,`${t}/name`,255),a=T(n.schema,`${t}/schema`);R(a,["fields"],`${t}/schema`);let r,c,l,p;try{l=Kt(n.decimalReservationLifecycle,`${t}/decimalReservationLifecycle`),r=vt(a.fields,`${t}/schema/fields`),p=Xn(n.uniqueKeys,r,`${t}/uniqueKeys`),c=Sn(n.invariants,r,`${t}/invariants`),Wt(n.surface,r,`${t}/surface`)}catch(E){throw(E instanceof _e||E instanceof Pe||E instanceof Xe)&&m(E.code,E.pointer),E}let d=new Set(r.map(E=>E.code)),f=T(n.capabilities,`${t}/capabilities`);R(f,["read","create","update","delete"],`${t}/capabilities`);let g=T(n.fieldPolicies,`${t}/fieldPolicies`);for(let[E,A]of Object.entries(g)){!d.has(E)&&!Ge(E)&&m("NATIVE_DATA_FIELD_POLICY_FIELD_MISSING",`${t}/fieldPolicies/${E}`);let b=`${t}/fieldPolicies/${E}`,I=T(A,b);Ge(E)&&(R(I,["read"],b,!0),(!Array.isArray(I.read)||I.read.length>20||I.read.some(_=>typeof _!="string"||!_.trim())||new Set(I.read).size!==I.read.length)&&m("NATIVE_DATA_AUDIT_READ_POLICY_INVALID",`${b}/read`)),R(I,["read","create","update","mask"],b,!0),I.mask!==void 0&&!["omit","null"].includes(I.mask)&&m("NATIVE_DATA_FIELD_POLICY_MASK_INVALID",`${b}/mask`)}return{...n,code:i,name:s,schema:{fields:r},...n.invariants===void 0?{}:{invariants:c},...l?{decimalReservationLifecycle:l}:{},...p!==void 0?{uniqueKeys:p}:{},capabilities:f,fieldPolicies:g}}function ss(e){return[{code:`app:${e}:directory:read`,kind:"platform",name:"\u8BFB\u53D6\u53D7\u9650\u7EC4\u7EC7\u76EE\u5F55",source:"platform"},...[["app:role:read","\u67E5\u770B\u89D2\u8272\u4E0E\u6388\u6743"],["app:role:define","\u5B9A\u4E49\u624B\u5DE5\u89D2\u8272"],["app:role:assign","\u5206\u914D\u89D2\u8272\u6210\u5458"],["app:role:grant-capability","\u6388\u4E88\u89D2\u8272\u80FD\u529B"],["app:scope-grant:manage","\u7BA1\u7406\u6570\u636E\u8303\u56F4"],["app:super-admin:manage","\u7BA1\u7406\u5E94\u7528\u6700\u9AD8\u7BA1\u7406\u5458"]].map(([t,o])=>({code:t,kind:"platform",name:o,source:"platform"}))]}function ji(e,t,o,n){let i=e.toString("utf8"),s;try{s=JSON.parse(i)}catch{m(o,t)}let a=T(s,t);return ee(a)!==i&&m(n,t),a}function Wi(e,t){let o=0,n=(i,s,a)=>{if(o+=1,o>Na&&m("NATIVE_ARTIFACT_NODE_LIMIT_EXCEEDED",s),a>ya&&m("NATIVE_ARTIFACT_DEPTH_LIMIT_EXCEEDED",s),typeof i=="string"){Buffer.byteLength(i)>Eo&&m("NATIVE_ARTIFACT_STRING_LIMIT_EXCEEDED",s);return}if(Array.isArray(i)){i.forEach((r,c)=>n(r,`${s}/${c}`,a+1));return}if(!(!i||typeof i!="object"))for(let[r,c]of Object.entries(i))["__proto__","prototype","constructor"].includes(r)&&m("NATIVE_ARTIFACT_DANGEROUS_KEY",`${s}/${r}`),gc(r)&&m("NATIVE_ARTIFACT_RUNTIME_FIELD_FORBIDDEN",`${s}/${r}`),n(c,`${s}/${r}`,a+1)};n(e,t,0)}function gc(e){return["environmentKey","environmentId","secretValue","ciphertext","oauthClient","oauthClientId","oauthClientSecret","signingSecret","kubernetesNamespace","nodePort","productionUrl"].includes(e)}function ot(e){return{value:e,digest:X(e)}}function Mi(e,t,o,n){typeof e!="string"&&!Buffer.isBuffer(e)&&!(e instanceof Uint8Array)&&m("NATIVE_ARTIFACT_BYTES_REQUIRED",o);let i=Buffer.isBuffer(e)?e:Buffer.from(e);return i.byteLength===0&&m("NATIVE_ARTIFACT_EMPTY",o),i.byteLength>t&&m(n,o),i}function Ui(e,t,o,n){let i=mn.createHash("sha256").update(e).digest("hex");mn.timingSafeEqual(Buffer.from(i),Buffer.from(t))||m(n,o)}function T(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&m("NATIVE_OBJECT_REQUIRED",t),e}function w(e,t,o){return Array.isArray(e)||m("NATIVE_ARRAY_REQUIRED",t),e.length>o&&m("NATIVE_ARRAY_LIMIT_EXCEEDED",t),e}function v(e,t,o){let n=w(e,t,o).map((i,s)=>S(i,`${t}/${s}`,255));return new Set(n).size!==n.length&&m("NATIVE_ARRAY_DUPLICATE",t),n}function S(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&m("NATIVE_STRING_INVALID",t),e}function Oo(e,t,o){return(typeof e!="string"||e.length>o)&&m("NATIVE_STRING_INVALID",t),e}function F(e,t){let o=S(e,t,128);return sa.test(o)||m("NATIVE_CODE_INVALID",t),o}function J(e,t){let o=S(e,t,64);return aa.test(o)||m("NATIVE_RESOURCE_CODE_INVALID",t),o}function K(e,t){let o=S(e,t,63);return ca.test(o)||m("NATIVE_FIELD_CODE_INVALID",t),o}function En(e,t){let o=S(e,t,128);return ua.test(o)||m("NATIVE_WORKFLOW_CODE_INVALID",t),o}function _n(e,t){let o=S(e,t,128);return fa.test(o)||m("NATIVE_WORKFLOW_BINDING_CODE_INVALID",t),o}function $e(e,t,o){let n=S(e,t,255);return ia.test(n)||m("NATIVE_CAPABILITY_CODE_INVALID",t),!n.startsWith(`app:${o}:`)&&!ss(o).some(i=>i.code===n)&&m("NATIVE_CAPABILITY_APP_MISMATCH",t),n}function Ae(e,t){let o=S(e,t,2048);return(!o.startsWith("/")||o.startsWith("//")||o.includes("..")||o.includes("?")||o.includes("#"))&&m("NATIVE_ABSOLUTE_PATH_INVALID",t),o}function it(e,t){return(!Number.isInteger(e)||Number(e)<1)&&m("NATIVE_POSITIVE_INTEGER_REQUIRED",t),Number(e)}function te(e,t,o,n){return(!Number.isInteger(e)||Number(e)<o||Number(e)>n)&&m("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function st(e,t){return typeof e!="boolean"&&m("NATIVE_BOOLEAN_REQUIRED",t),e}function bo(e,t){let o=S(e,t,64).toLowerCase();return na.test(o)||m("NATIVE_DIGEST_INVALID",t),o}function j(e,t,o){e!==t&&m("NATIVE_VALUE_MISMATCH",o)}function R(e,t,o,n=!1){let i=new Set([...t,...Array.isArray(n)?n:[]]);for(let s of Object.keys(e))i.has(s)||m("NATIVE_PROPERTY_UNKNOWN",`${o}/${s}`);if(n!==!0)for(let s of t)Object.prototype.hasOwnProperty.call(e,s)||m("NATIVE_PROPERTY_REQUIRED",`${o}/${s}`)}function Z(e,t){return[...e].sort((o,n)=>ue(t(o),t(n)))}function U(e){return[...new Set(e)].sort(ue)}function Bi(e){return[...new Set(e)].sort((t,o)=>t-o)}function ue(e,t){return e===t?0:e<t?-1:1}function rs(e){return!e||typeof e!="object"||Object.isFrozen(e)||(Object.freeze(e),Object.values(e).forEach(t=>rs(t))),e}function yo(e,t,o){if(Ao(e,t))return o;if(Array.isArray(e)&&Array.isArray(t)){let n=Math.max(e.length,t.length);for(let i=0;i<n;i+=1)if(!Ao(e[i],t[i]))return yo(e[i],t[i],`${o}/${i}`)}if(e&&t&&typeof e=="object"&&typeof t=="object"&&!Array.isArray(e)&&!Array.isArray(t)){let n=U([...Object.keys(e),...Object.keys(t)]);for(let i of n){let s=e[i],a=t[i];if(!Ao(s,a))return yo(s,a,`${o}/${i}`)}}return o}function Ao(e,t){return e===void 0||t===void 0?e===t:ee(e)===ee(t)}function m(e,t,o={}){throw new un(e,t,o)}var Yd=50,Hd=131072,In=class extends Error{constructor(o){super("OPENXIANGDA_NATIVE_AUTHZ_BATCH_INPUT_INVALID");this.pointer=o}pointer;code="OPENXIANGDA_NATIVE_AUTHZ_BATCH_INPUT_INVALID";status=400};function Ac(e){let t=d=>{throw new In(d)},o=(d,f)=>((!d||typeof d!="object"||Array.isArray(d))&&t(f),d),n=(d,f,g)=>{for(let E of Object.keys(d))f.includes(E)||t(`${g}/${E}`)},i=(d,f,g)=>((typeof d!="string"||!d.trim()||d.length>f)&&t(g),d),s=(d,f)=>{let g=i(d,36,f);return/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(g)||t(f),g.toLowerCase()},a=o(e,""),r;try{r=new TextEncoder().encode(JSON.stringify(a)).byteLength}catch{t("")}r>131072&&t(""),n(a,["schemaVersion","environmentKey","items"],""),a.schemaVersion!=="openxiangda.native-role-membership-batch-request/v2"&&t("/schemaVersion"),a.environmentKey!==void 0&&!["preproduction","production"].includes(String(a.environmentKey))&&t("/environmentKey"),(!Array.isArray(a.items)||a.items.length<1||a.items.length>50)&&t("/items");let c=new Set,l=new Set,p;for(let[d,f]of a.items.entries()){let g=`/items/${d}`,E=o(f,g);["create","update","revoke"].includes(String(E.operation))||t(`${g}/operation`),p??=E.operation,p!==E.operation&&t(`${g}/operation`),n(E,["operation","operationId","reason",...p==="create"?["userId","roleCode"]:["membershipId","expectedRevision"],...p!=="revoke"?["scopeGrants","validFrom","validTo"]:[]],g);let A=s(E.operationId,`${g}/operationId`);c.has(A)&&t(`${g}/operationId`),c.add(A),i(E.reason,1e3,`${g}/reason`);let b;if(p==="create"){let I=i(E.userId,255,`${g}/userId`),_=i(E.roleCode,128,`${g}/roleCode`);/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/.test(_)||t(`${g}/roleCode`),b=JSON.stringify([I,_])}else b=s(E.membershipId,`${g}/membershipId`),(!Number.isSafeInteger(E.expectedRevision)||Number(E.expectedRevision)<1)&&t(`${g}/expectedRevision`);l.has(b)&&t(g),l.add(b),E.scopeGrants!==void 0&&(!Array.isArray(E.scopeGrants)||E.scopeGrants.length>100)&&t(`${g}/scopeGrants`);for(let I of["validFrom","validTo"])E[I]!==void 0&&E[I]!==null&&i(E[I],64,`${g}/${I}`)}}var ls="openxiangda.workflow-delegation-administration/v2",us="openxiangda.workflow-delegation-mutation/v2",as="openxiangda.workflow-delegation-preview/v2";var Ct={type:"string",format:"uuid",pattern:"^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"},fe={type:"string",minLength:1,maxLength:255},Ue={type:"string",format:"date-time"},rt={type:"integer",minimum:1},Ec={anyOf:[Ue,{type:"null"}]},ho={anyOf:[fe,{type:"null"}]},bn={type:"string",pattern:"^membership:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"},fs={const:"future-assignments-only"},Ro={schemaVersion:{const:ls},id:Ct,appCode:fe,environmentKey:fe,workflowCode:ho,delegatorUserId:fe,delegateUserId:fe,delegatorRoleSubjectKey:bn,delegateRoleSubjectKey:bn,validFrom:Ue,validTo:Ue,status:{enum:["active","revoked","expired"]},reason:{type:"string",minLength:1,maxLength:4e3},createdBy:fe,createdAt:Ue,revokedAt:Ec,revision:rt,roleCode:fe,roleName:fe,delegatorDisplayName:fe,delegateDisplayName:fe,delegatorRoleSubjectRevision:rt,delegateRoleSubjectRevision:rt,effectiveState:{enum:["active","scheduled","expired","revoked","ineligible"]},evaluatedAt:Ue,issues:{type:"array",maxItems:20,uniqueItems:!0,items:fe},canRevoke:{type:"boolean"},revokedBy:ho,revokeReason:{type:["string","null"],maxLength:4e3},taskPolicy:fs},Co={type:"object",additionalProperties:!1,required:Object.keys(Ro),properties:Ro},Qd={$id:ls,...Co},ps={schemaVersion:{const:us},operationId:Ct,environmentKey:{enum:["preproduction","production"]},reason:{type:"string",minLength:1,maxLength:2e3,pattern:"\\S"}},cs={...ps,operation:{const:"create"},workflowCode:ho,delegatorRoleSubjectKey:bn,expectedDelegatorRevision:rt,delegateUserId:fe,delegateRoleSubjectKey:bn,expectedDelegateRevision:rt,validFrom:Ue,validTo:Ue},ds={...ps,operation:{const:"revoke"},delegationId:Ct,expectedRevision:rt},_s={$id:us,type:"object",oneOf:[{type:"object",additionalProperties:!1,required:Object.keys(cs),properties:cs},{type:"object",additionalProperties:!1,required:Object.keys(ds),properties:ds}]},Ic={type:"string",pattern:"^[0-9a-f]{64}$"},Zd={$id:as,type:"object",additionalProperties:!1,required:["schemaVersion","operationId","operation","requestDigest","before","after","taskPolicy"],properties:{schemaVersion:{const:as},operationId:Ct,operation:{enum:["create","revoke"]},requestDigest:Ic,before:{anyOf:[Co,{type:"null"}]},after:{...Co,properties:{...Ro,id:{anyOf:[Ct,{type:"null"}]}}},taskPolicy:fs}};function bc(e){return e===void 0?"":`
9
- ${X(e)}`}function yc(e,t){let o=e.handlers.find(n=>n.code===t);return X(o?.workflowStep?o:e)}var Nc="67e2e7393d022709e99cdfe556814891b1777c2b09343ecaf45d57a6dc031299";0&&(module.exports={DATA_AUDIT_METADATA_FIELDS,DATA_EVENT_TYPES_V2,DATA_FORM_DRAFT_MAX_BYTES,DATA_SUBTABLE_MAX_ROWS,DATA_SUBTABLE_MAX_TOTAL_ROWS,DATA_SYSTEM_SORT_FIELD_CODES,DATA_TRANSACTION_MAX_BYTES,DATA_TRANSACTION_MAX_OPERATIONS,ManagedConcurrencyContractError,NATIVE_CONFIGURATION_VALIDATOR_DIGEST,NATIVE_CONTRACT_CAPACITY_V2,NATIVE_DATA_POLICY_EXPRESSION_MAX_CLAUSES,NATIVE_DATA_POLICY_EXPRESSION_MAX_DEPTH,NATIVE_DATA_POLICY_EXPRESSION_MAX_GROUP_ITEMS,NATIVE_DATA_POLICY_EXPRESSION_MAX_LEAVES,NATIVE_DATA_POLICY_EXPRESSION_MAX_OCCURRENCES,NATIVE_DATA_QUERY_OPERATORS_V2,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_BYTES,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_ITEMS,NATIVE_UNIQUE_KEY_MAX_BYTES,NATIVE_UNIQUE_KEY_NORMALIZERS,NativeConfigurationCompilerError,NativeDataFieldContractV2Error,NativeDataPolicyExpressionV2Error,NativeDecimalLifecycleContractError,NativeEventActionContractError,NativeRoleMembershipBatchInputError,NativeScopeSourceFieldPathV2Error,NativeUniqueKeyContractError,OPENXIANGDA_NATIVE_DATA_FIELD_TYPES_V2,OPENXIANGDA_NATIVE_DATA_SURFACE_KEYS_V2,OPENXIANGDA_NATIVE_DRAFT_STATE_KEYS_V2,OPENXIANGDA_NATIVE_SYSTEM_FIELDS_V2,OPENXIANGDA_NATIVE_SYSTEM_FIELD_MAP_V2,WORKFLOW_AUTOMATIC_CC_MAX_RECIPIENTS,WORKFLOW_AUTOMATIC_CC_PROVIDERS,WORKFLOW_BUSINESS_STEP_EVENT,WORKFLOW_BUSINESS_STEP_EVENTS,WORKFLOW_BUSINESS_STEP_FACTS_KEY,WORKFLOW_BUSINESS_STEP_MAX_BYTES,WORKFLOW_BUSINESS_STEP_MAX_RECEIPT_BYTES,WORKFLOW_CONFIGURABLE_OPERATIONS,WORKFLOW_CONFIGURABLE_PROVIDERS,WORKFLOW_EVENT_TYPES_V2,WORKFLOW_ROUTING_MAX_BYTES,WORKFLOW_ROUTING_MAX_MATCHED_RULES,WORKFLOW_ROUTING_MAX_RULES,WORKFLOW_TASK_PAGE_DEFINITION_MAX_BYTES,WORKFLOW_TASK_PAGE_MAX_BYTES,WORKFLOW_TASK_PAGE_MAX_FIELDS,WORKFLOW_TASK_SUBTABLE_MAX_ROWS,WORKFLOW_TASK_SUBTABLE_MAX_TOTAL_ROWS,WorkflowTaskPageError,applyWorkflowTaskPageValues,applyWorkflowTaskSubtableRows,assertNativeRoleMembershipBatchInput,compileNativeApplicationConfiguration,compileNativeEventAction,compileNativeEventCapturePlansV2,compileRequiredPlatformCapabilitiesV3,compileWorkflowBusinessStepHandlers,evaluateWorkflowTaskPageExpression,formatWorkflowExpression,hasDataAuditReadPolicy,isDataAuditMetadataField,isDataSystemSortField,isNativeDataQueryOperatorV2,isNativeMultiValueFieldV2,materializeNativeDataQueryPathTypesV2,nativeDataPolicyExpressionLeavesV2,nativeDataPolicyExpressionToCnfV2,nativeDataQueryPathPlanV2,nativeFieldAggregatePlanV2,nativeFieldColumnDefinitionV2,nativeFieldDefaultSqlV2,nativeFieldHasDefaultV2,nativeFieldIndexStatementsV2,nativeFieldRequiresCreateInputV2,nativeFieldSequenceGrantStatementsV2,nativeFieldSequenceOwnershipStatementsV2,nativeFieldSequenceStatementsV2,nativeFieldSupportsFilterV2,nativeFieldSupportsOperatorV2,nativeFieldSupportsSearchV2,nativeFieldSupportsSortV2,nativeOperatorsForFieldV2,nativePhysicalFieldV2,nativePhysicalFieldsV2,nativePhysicalObjectNameV2,nativeScopeSourceFieldValueV2,nativeScopeSourceGrantPathSupportedV2,nativeScopeSourceSubjectPathSupportedV2,nativeSubtableConstraintStatementsV2,nativeUniqueKeysJsonSchema,parseDecimalReservationLifecycle,parseNativeDataFieldsV2,parseNativeDataResourceInvariantsV2,parseNativeUniqueKeys,projectNativeDataResourceViewV2,projectWorkflowGraph,projectWorkflowNodePolicy,quoteNativeIdentifierV2,refreshWorkflowTaskPageFacts,resolveNativeScopeSourceFieldPathV2,selectWorkflowAssignmentRoutingRules,serializedDataBytes,validateDecimalReservationLifecycles,validateManagedConcurrency,validateNativeDataDraftStateV2,validateNativeDataResourceReferencesV2,validateNativeDataResourceSurfaceV2,validateWorkflowAdministration,validateWorkflowAssignmentRoutingBindings,validateWorkflowAssignmentRoutingPolicy,validateWorkflowAssignmentRoutingRules,validateWorkflowAutomaticCc,validateWorkflowBusinessStepHandlerContract,validateWorkflowBusinessStepRequest,validateWorkflowBusinessStepResult,validateWorkflowBusinessStepSchema,validateWorkflowBusinessStepSubscriptions,validateWorkflowBusinessSteps,validateWorkflowInstanceCommandPolicies,validateWorkflowNodeConfigurationPatch,validateWorkflowReadability,validateWorkflowTaskPages,workflowAssignmentRoutingFacts,workflowAssignmentRoutingPolicySchema,workflowAssignmentRoutingSemantic,workflowBusinessStepFactSchema,workflowBusinessStepHandlerDigest,workflowBusinessStepInput,workflowBusinessStepPath,workflowBusinessStepReceiptSignatureSuffix,workflowBusinessStepValueMatches,workflowDelegationMutationRequestSchema,workflowExpressionPaths,workflowInstanceCommandDeadlineError,workflowInstanceTerminateCapabilityAllowed,workflowNodeAllowedOperations,workflowPolicyTimestamp,workflowTaskPageFieldState,workflowTaskPageReplayCoversInvalidation,workflowTaskSubtableRows});
8
+ END $native_subtable$`]}function we(e,...t){return`${e}_${(0,gi.createHash)("sha256").update(t.join(":")).digest("hex").slice(0,32)}`}function ae(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,62}$/.test(e))throw new Error("OPENXIANGDA_NATIVE_IDENTIFIER_INVALID");return`"${e}"`}function qr(e,t){return e.type==="subtable"?"none":t?"gin-trigram":e.indexed?["date-range","datetime-range"].includes(e.type)?"gist-range":so.has(e.type)?"btree-snapshot-expressions":kr.has(e.type)?"gin-jsonb-path":"btree":"none"}function Jr(e){switch(e.type){case"text.short":return`varchar(${e.maxLength??255})`;case"text.long":case"text.rich":return"text";case"number.integer":return"bigint";case"number.decimal":return`numeric(${e.precision??38},${e.scale??10})`;case"boolean":return"boolean";case"date":return"date";case"time":return"time(0)";case"datetime":return"timestamptz";case"date-range":return"daterange";case"datetime-range":return"tstzrange";case"uuid":return"uuid";case"serial-number":return"varchar(255)";case"subtable":return"child-resource";default:return Pr.has(e.type),"jsonb"}}function Ii(e,t){if(pt(t.type)&&t.type!=="subtable")return"'[]'::jsonb";if(t.type!=="serial-number")return"";let o=_i(t.serial?.prefix||""),n=t.serial?.digits??6;return`(${o} || lpad(nextval(${_i(Zt(e,t.code))})::text, ${n}, '0'))`}function Gr(e,t){return Ai.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'array')`:Vr.has(t.type)?` CHECK (${e} IS NULL OR jsonb_typeof(${e}) = 'object')`:""}function Qt(e){return`"app_data".${ae(e)}`}function Zt(e,t){let o=we("seq",e,t);return`"app_data".${ae(o)}`}function _i(e){return`'${e.replace(/'/g,"''")}'`}var yi=new Set(["option.single","option.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple"]),zr=new Set([...yi,"cascade.single","cascade.multiple","file","image","signature","address","location","json"]),bi=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,Hr=new Set(["__proto__","prototype","constructor"]),en=class extends Error{constructor(o){super("OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID");this.path=o;this.name="NativeScopeSourceFieldPathV2Error"}path;code="OPENXIANGDA_SCOPE_PROJECTION_FIELD_PATH_INVALID"};function Ze(e,t){let o=Ni(e);if(!o)return null;let n=t.get(o[0]);if(!n)return null;let i=o.slice(1).join(".")||void 0;return{field:n,...i?{valuePath:i}:{}}}function tn(e){return!!(e&&e.field.type==="user.single"&&e.valuePath==="value")}function ro(e,t,o){if(!e||!t||!Xr(e))return!1;let{field:n,valuePath:i}=e;if(!i)return t.valueType==="uuid"?n.type==="uuid":["text.short","text.long","serial-number"].includes(n.type);if(i==="value")return!(t.valueSourceResourceCode&&n.type.startsWith("resource-ref.")&&n.source?.resourceCode!==t.valueSourceResourceCode);let s=i.slice(9),r=o.get(n.source?.resourceCode||"")?.get(s)?.type;return t.valueType==="uuid"?r==="uuid":["text.short","text.long","serial-number"].includes(r||"")}function Yr(e,t){let o=Ni(t);if(!o)throw new en(String(t||""));let n=e;for(let i of o){if(!n||typeof n!="object"||!Object.prototype.hasOwnProperty.call(n,i))return;n=n[i]}return n}function Xr(e){let{field:t,valuePath:o}=e;if(!o)return!zr.has(t.type);if(o==="value")return yi.has(t.type);if(!o.startsWith("snapshot."))return!1;let n=o.slice(9);return bi.test(n)&&t.type.startsWith("resource-ref.")&&!!t.source?.snapshotFields?.includes(n)}function Ni(e){if(typeof e!="string"||e.length===0||e.length>192)return null;let t=e.split(".");return![1,2,3].includes(t.length)||t.some(o=>!bi.test(o)||Hr.has(o))||t.length===2&&t[1]!=="value"||t.length===3&&t[1]!=="snapshot"?null:t}var Qr=new Set(["option.single","user.single","department.single","resource-ref.single"]),Zr=new Set(["text.short","text.long","text.rich","number.integer","number.decimal","boolean","date","time","datetime","uuid","serial-number"]),ea=new Set(["value","label","description","color"]),ta=new Set(["avatarUrl","employeeNo","title","mobile","email"]),na=new Set(["fullPath","parent.value","parent.label"]),oa=new Set(["country.value","country.label","province.value","province.label","city.value","city.label","district.value","district.label","street.value","street.label","detail","fullAddress"]),ia=new Set(["longitude","latitude","accuracy"]),sa=new Set(["address","name","province","city","district","source"]);function ra(e){let t=new Map(e.map(o=>[o.code,new Map(o.schema.fields.map(n=>[n.code,n]))]));return e.map(o=>({...o,schema:{...o.schema,fields:o.schema.fields.map(n=>{let i=ca(n,t);if(!Object.keys(i).length)return n;let s={...n};return Object.defineProperty(s,"queryPathTypes",{configurable:!1,enumerable:!1,writable:!1,value:Object.freeze(i)}),s})}}))}function aa(e,t){if(Qr.has(e.type)&&ea.has(t)||e.type==="user.single"&&ta.has(t)||e.type==="department.single"&&na.has(t))return gt(t);if(e.type==="resource-ref.single"){let o=e.queryPathTypes?.[t];return o?{parts:t.split("."),type:o}:null}if(e.type==="address"&&oa.has(t))return gt(t);if(e.type==="location"){if(ia.has(t))return{parts:[t],type:"number.decimal"};if(sa.has(t))return gt(t);if(t==="capturedAt")return{parts:[t],type:"datetime"}}return null}function ca(e,t){if(e.type!=="resource-ref.single"||!e.source)return{};let o=t.get(e.source.resourceCode);return o?Object.fromEntries((e.source.snapshotFields||[]).flatMap(n=>{let i=o.get(n);return i?[[`snapshot.${n}`,Zr.has(i.type)?i.type:"json"]]:[]})):{}}function gt(e){return{parts:e.split("."),type:"text.short"}}var co=["exact-v1","nfkc-space-v1","nfkc-upper-ascii-v1"],Md=256,et=class extends Error{constructor(o,n){super(`\u6761\u4EF6\u552F\u4E00\u952E\u58F0\u660E\u65E0\u6548\uFF1A${n}\uFF08${o}\uFF09`);this.pointer=o;this.reason=n}pointer;reason;code="NATIVE_UNIQUE_KEY_INVALID"},ao=e=>!!(e&&typeof e=="object"&&!Array.isArray(e)),ie=(e,t)=>{throw new et(e,t)},nn=(e,t)=>e<t?-1:e>t?1:0,At=(e,t,o)=>{Object.keys(e).some(n=>!t.includes(n))&&ie(o,"\u4E0D\u652F\u6301\u672A\u77E5\u5C5E\u6027")};function lo(e,t,o="/uniqueKeys"){if(e===void 0)return;if(!Array.isArray(e)||e.length>8)return ie(o,"\u6BCF\u8D44\u6E90\u6700\u591A 8 \u6761\u89C4\u5219");let n=new Map(t.map(s=>[s.code,s])),i=new Set;return e.map((s,a)=>{let r=`${o}/${a}`;if(!ao(s))return ie(r,"\u89C4\u5219\u5FC5\u987B\u662F\u5BF9\u8C61");if(At(s,["code","fields","when"],r),typeof s.code!="string"||!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(s.code)||s.code.length>20||i.has(s.code))return ie(`${r}/code`,"\u9700\u8981\u4E0D\u91CD\u590D\u4E14\u4E0D\u8D85\u8FC7 20 \u5B57\u7B26\u7684 lower-kebab-case \u6807\u8BC6");if(i.add(s.code),!Array.isArray(s.fields)||s.fields.length<1||s.fields.length>4)return ie(`${r}/fields`,"\u5FC5\u987B\u9009\u62E9 1 \u5230 4 \u4E2A\u5B57\u6BB5");let c=new Set,l=s.fields.map((g,I)=>{let E=`${r}/fields/${I}`;if(!ao(g))return ie(E,"\u5B57\u6BB5\u5FC5\u987B\u662F\u5BF9\u8C61");At(g,["fieldCode","normalizer"],E);let N=n.get(g.fieldCode);if(!N||!["text.short","uuid","option.single","resource-ref.single","user.single"].includes(N.type)||c.has(g.fieldCode))return ie(`${E}/fieldCode`,"\u9700\u8981\u4E0D\u91CD\u590D\u7684\u77ED\u6587\u672C\u3001UUID\u3001\u5355\u9009\u3001\u5355\u8BB0\u5F55\u5F15\u7528\u6216\u5355\u4EBA\u5B57\u6BB5");c.add(g.fieldCode);let y=g.normalizer===void 0?"exact-v1":g.normalizer;return!co.includes(y)||N.type!=="text.short"&&y!=="exact-v1"?ie(`${E}/normalizer`,"\u5F52\u4E00\u5316\u65B9\u5F0F\u4E0D\u652F\u6301\u6216\u4E0E\u5B57\u6BB5\u7C7B\u578B\u4E0D\u7B26"):{fieldCode:N.code,normalizer:y}}).sort((g,I)=>nn(g.fieldCode,I.fieldCode)),p=s.when===void 0?[]:s.when;if(!Array.isArray(p)||p.length>4)return ie(`${r}/when`,"\u6700\u591A 4 \u4E2A\u5408\u53D6\u6761\u4EF6");let d=new Set,u=p.map((g,I)=>{let E=`${r}/when/${I}`;if(!ao(g))return ie(E,"\u6761\u4EF6\u5FC5\u987B\u662F\u5BF9\u8C61");let N=n.get(g.fieldCode);if(!N)return ie(`${E}/fieldCode`,"\u5B57\u6BB5\u4E0D\u5B58\u5728");let y;if(g.operator==="empty"||g.operator==="nonempty"){if(At(g,["fieldCode","operator"],E),N.type!=="text.short")return ie(E,"\u7A7A\u503C\u6761\u4EF6\u4EC5\u652F\u6301\u77ED\u6587\u672C");y={fieldCode:N.code,operator:g.operator}}else if(g.operator==="in"||g.operator==="notIn"){At(g,["fieldCode","operator","values"],E);let A=new Set((N.options??[]).map(T=>T.value));if(N.type!=="option.single"||!Array.isArray(g.values)||g.values.length<1||g.values.length>16||g.values.some(T=>typeof T!="string"||T.length<1||T.length>128||!A.has(T))||new Set(g.values).size!==g.values.length)return ie(E,"\u96C6\u5408\u6761\u4EF6\u9700\u8981 1 \u5230 16 \u4E2A\u4E0D\u91CD\u590D\u7684\u5DF2\u58F0\u660E\u5355\u9009\u503C");y={fieldCode:N.code,operator:g.operator,values:[...g.values].sort(nn)}}else if(g.operator==="eq"||g.operator==="ne"){if(At(g,["fieldCode","operator","value"],E),N.type!=="boolean"||typeof g.value!="boolean")return ie(E,"\u7B49\u503C\u6761\u4EF6\u4EC5\u652F\u6301\u5E03\u5C14\u5B57\u6BB5\u548C\u5E03\u5C14\u503C");y={fieldCode:N.code,operator:g.operator,value:g.value}}else return ie(`${E}/operator`,"\u53EA\u652F\u6301 empty\u3001nonempty\u3001in\u3001notIn \u548C\u5E03\u5C14 eq\u3001ne");let _=JSON.stringify(y);return d.has(_)?ie(E,"\u6761\u4EF6\u4E0D\u80FD\u91CD\u590D"):(d.add(_),y)}).sort((g,I)=>nn(JSON.stringify(g),JSON.stringify(I)));return{code:s.code,fields:l,when:u}}).sort((s,a)=>nn(s.code,a.code))}function uo(e,t){let o=new Set(e.filter(n=>n.type==="user.single").map(n=>n.code));return t?.some(n=>n.fields.some(i=>o.has(i.fieldCode))||n.when?.some(i=>i.operator==="eq"||i.operator==="ne"))?"1.1.0":"1.0.0"}var on={type:"string",pattern:"^[A-Za-z_][A-Za-z0-9_]{0,62}$"},da={type:"array",maxItems:8,items:{type:"object",additionalProperties:!1,required:["code","fields"],properties:{code:{type:"string",maxLength:20,pattern:"^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"},fields:{type:"array",minItems:1,maxItems:4,uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["fieldCode"],properties:{fieldCode:on,normalizer:{enum:[...co]}}}},when:{type:"array",maxItems:4,uniqueItems:!0,items:{oneOf:[{type:"object",additionalProperties:!1,required:["fieldCode","operator"],properties:{fieldCode:on,operator:{enum:["empty","nonempty"]}}},{type:"object",additionalProperties:!1,required:["fieldCode","operator","values"],properties:{fieldCode:on,operator:{enum:["in","notIn"]},values:{type:"array",minItems:1,maxItems:16,uniqueItems:!0,items:{type:"string",minLength:1,maxLength:128}}}},{type:"object",additionalProperties:!1,required:["fieldCode","operator","value"],properties:{fieldCode:on,operator:{enum:["eq","ne"]},value:{type:"boolean"}}}]}}}}};var Oi={"openxiangda.workflow.instance.completed.v2":"commit","openxiangda.workflow.instance.rejected.v2":"release","openxiangda.workflow.instance.withdrawn.v2":"release"};function Ti(e,t){let o=()=>{throw new Error("NATIVE_EVENT_DECIMAL_RESERVATION_INVALID")},n=u=>!u||typeof u!="object"||Array.isArray(u)?o():u,i=n(e);if(Object.keys(i).some(u=>!["resourceCode","workflowCode","outcomes"].includes(u))||typeof i.resourceCode!="string"||!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(i.resourceCode)||typeof i.workflowCode!="string"||!/^[A-Za-z0-9._:-]{1,128}$/.test(i.workflowCode)||t.execution!==void 0||!Array.isArray(i.outcomes)||!i.outcomes.length||i.outcomes.length>3)return o();let s=t.resources.find(u=>u.code===i.resourceCode),a=t.reservations.find(u=>u.mode==="reserve"&&u.resourceCode===i.resourceCode),r=t.workflows.find(u=>u.code===i.workflowCode);if(!s||!a||!r||r.resourceCode!==s.code)return o();let c=s.fields.find(u=>u.code===a.statusFieldCode);if(c?.type!=="option.single")return o();let l=new Set(c.options?.map(u=>u.value)),p=new Set,d=i.outcomes.map(u=>{let g=n(u),I=g.eventType;return Object.keys(g).some(E=>!["eventType","mode","eligibleChildStatuses"].includes(E))||typeof I!="string"||!Object.prototype.hasOwnProperty.call(Oi,I)||!t.eventTypes.includes(I)||p.has(I)||g.mode!==Oi[I]||!Array.isArray(g.eligibleChildStatuses)||!g.eligibleChildStatuses.length||g.eligibleChildStatuses.length>16||new Set(g.eligibleChildStatuses).size!==g.eligibleChildStatuses.length||g.eligibleChildStatuses.some(E=>typeof E!="string"||!/^[A-Za-z0-9._:-]{1,128}$/.test(E)||!l.has(E))?o():(p.add(I),{eventType:I,mode:g.mode,eligibleChildStatuses:[...g.eligibleChildStatuses].sort()})}).sort((u,g)=>u.eventType.localeCompare(g.eventType));return{resourceCode:i.resourceCode,workflowCode:i.workflowCode,outcomes:d}}function hi(e,t){let o=n=>Array.isArray(n)?n.filter(i=>i&&typeof i=="object"&&!Array.isArray(i)):[];return{eventTypes:Array.isArray(t.eventTypes)?t.eventTypes:[],execution:t.execution,resources:o(e.data?.resources).map(n=>({code:n.code,fields:o(n.schema?.fields).map(i=>({code:i.code,type:i.type,options:o(i.options).map(s=>({value:s.value}))}))})),reservations:o(e.backend?.operations).flatMap(n=>n.platformAccess?.decimalReservation?[n.platformAccess.decimalReservation]:[]),workflows:o(e.workflows?.definitions).map(n=>({code:n.definition?.code,resourceCode:n.definition?.subject?.resourceCode}))}}var sn=class extends Error{constructor(o,n){super(n);this.pointer=o}pointer;code="NATIVE_EVENT_ACTION_INVALID"};function fo(e,t,o="/events/subscriptions"){if(e.execution===void 0)return;let n=(E,N)=>{throw new sn(`${o}${E}`,N)},i=(E,N,y)=>((!E||typeof E!="object"||Array.isArray(E)||Object.keys(E).some(_=>!y.includes(_)))&&n(N,"Invalid action object or unsupported property"),E),s=i(e.execution,"/execution",["kind","version","operations"]);(s.kind!=="native-data"||s.version!==1)&&n("/execution","Expected native-data version 1"),e.platformAccess&&n("/platformAccess","Native actions do not use application runtime capabilities"),(!Array.isArray(e.eventTypes)||!e.eventTypes.length||e.eventTypes.some(E=>!/^openxiangda\.data\.record\.(created|updated|deleted)\.v2$/.test(E)))&&n("/eventTypes","Native data actions require declared data events");let a=e.filter?.resourceCodes;(!Array.isArray(a)||!a.length||a.length>20)&&n("/filter/resourceCodes","Native actions require explicit source resources");let r=new Map(t.map(E=>[E.code,E])),c=a.map(E=>{let N=r.get(E);return N||n("/filter/resourceCodes","Unknown source resource"),new Set((N.schema?.fields||[]).map(y=>y.code))}),l=new Set(e.payload?.fields||[]),p=e.payload?.includeChanges===!0,d=(E,N)=>{let y=i(E,N,["source","path","value"]);if(y.source==="literal"){(!Object.hasOwn(y,"value")||Object.hasOwn(y,"path"))&&n(N,"Literal binding requires only value");let f;try{f=JSON.stringify(y.value)}catch{n(N,"Literal must be JSON")}return(f===void 0||Buffer.byteLength(f)>65536)&&n(N,"Literal is too large or not JSON"),{source:"literal",value:JSON.parse(f)}}(y.source!=="event"||typeof y.path!="string"||Object.hasOwn(y,"value"))&&n(N,"Expected a literal or event binding");let _=y.path.split(".");(_.length>8||_.some(f=>!/^[A-Za-z0-9_-]+$/.test(f)||["__proto__","prototype","constructor"].includes(f)))&&n(N,"Invalid event path");let A=/^data\.projection\.([A-Za-z][A-Za-z0-9_]{0,62})$/.exec(y.path),T=/^data\.changes\.([A-Za-z][A-Za-z0-9_]{0,62})\.(before|after)$/.exec(y.path);if(A||T){let f=(A||T)[1];c.some(b=>!b.has(f))&&n(N,"Source field must exist on every filtered resource"),l.add(f),T&&(p=!0)}else["id","time","type","subject","data.recordId","data.revision","data.operation","data.resourceCode"].includes(y.path)||n(N,"Event path is not part of the data event contract");return{source:"event",path:y.path}};(!Array.isArray(s.operations)||s.operations.length<1||s.operations.length>16)&&n("/execution/operations","Expected 1 to 16 operations");let u={},g=s.operations.map((E,N)=>{let y=`/execution/operations/${N}`,_=i(E,y,["operation","resourceCode","data","id","expectedRevision"]);["create","update","delete"].includes(_.operation)||n(y,"Unsupported Native operation");let A=r.get(_.resourceCode);A||n(y,"Unknown action target resource");let T=new Map((A.schema?.fields||[]).map(b=>[b.code,b])),f=_.data===void 0?{}:i(_.data,`${y}/data`,[...T.keys()]);return Object.keys(f).length>32&&n(y,"Maximum 32 mapped fields per operation"),_.operation==="create"&&(_.id!==void 0||_.expectedRevision!==void 0)&&n(y,"Create does not accept id or expectedRevision"),_.operation==="delete"&&_.data!==void 0&&n(y,"Delete does not accept data"),Object.keys(f).some(b=>T.get(b)?.type==="serial-number")&&n(y,"Generated fields cannot be assigned"),u[_.resourceCode]=Q(A),{operation:_.operation,resourceCode:_.resourceCode,..._.operation==="create"?{}:{id:d(_.id,`${y}/id`),expectedRevision:d(_.expectedRevision,`${y}/expectedRevision`)},..._.operation==="delete"?{}:{data:Object.fromEntries(Object.entries(f).map(([b,h])=>[b,d(h,`${y}/data/${b}`)]))}}});(l.size>32||[...l].some(E=>c.some(N=>!N.has(E))))&&n("/payload/fields","Payload must contain at most 32 declared source fields");let I={kind:"native-data",version:1,operations:g,resourceDigests:u};return Buffer.byteLength(JSON.stringify(I))>65536&&n("/execution","Action plan exceeds 64 KiB"),{execution:{...I,digest:Q(I)},payload:{includeChanges:p,fields:[...l].sort()}}}function Pe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function mo(e,t){if(e?.instanceCommands===void 0)return[];let o=Pe(e.instanceCommands);if(!o||!Object.keys(o).length||Object.keys(o).some(i=>!["withdraw","terminate"].includes(i)))return["WORKFLOW_INSTANCE_COMMAND_POLICIES_INVALID"];let n=[];for(let[i,s]of Object.entries(o)){let a=Pe(s),r=i==="withdraw"?["beforeFact","reasonRequired"]:["beforeFact","capability"];if(!a||!Object.keys(a).length||Object.keys(a).some(c=>!r.includes(c))||Object.hasOwn(a,"reasonRequired")&&typeof a.reasonRequired!="boolean"){n.push(`WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID:${i}`);continue}if(i==="terminate"){let c=a.capability;(typeof c!="string"||c.length>255||!/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(c)||t&&(!c.startsWith(`app:${t.appCode}:`)||!t.capabilities.includes(c)))&&n.push("WORKFLOW_INSTANCE_TERMINATE_CAPABILITY_INVALID")}if(Object.hasOwn(a,"beforeFact")){let c=a.beforeFact,l=Pe(e.inputSchema),p=Pe(Pe(l?.properties)?.[c]),d=Pe(Pe(e.subject)?.factProjection)?.[c],u=t?.fields.get(d);(typeof c!="string"||!/^[A-Za-z][A-Za-z0-9_]{0,62}$/.test(c)||!Array.isArray(l?.required)||!l.required.includes(c)||p?.type!=="string"||p?.format!=="date-time"||typeof d!="string"||t&&(u?.type!=="datetime"||u.nullable===!0))&&n.push(`WORKFLOW_INSTANCE_COMMAND_DEADLINE_FACT_INVALID:${i}`)}}return n}function la(e,t){let o=e?.terminate?.capability;return typeof o=="string"&&/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._-]+$/.test(o)&&t.includes(o)}function ua(e){return e?.withdraw?.reasonRequired!==!1}function po(e){if(typeof e!="string")return null;let t=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,3}))?(Z|[+-]\d{2}:\d{2})$/.exec(e);if(!t)return null;let[,o,n,i,s,a,r]=t,c=t[8],l=new Date(Date.UTC(Number(o),Number(n),0)).getUTCDate();if(Number(n)<1||Number(n)>12||Number(i)<1||Number(i)>l||Number(s)>23||Number(a)>59||Number(r)>59||c!=="Z"&&(Number(c.slice(1,3))>23||Number(c.slice(4))>59))return null;let p=Date.parse(e);return Number.isFinite(p)?p:null}function fa(e,t,o,n){let i=e?.[t];if(!i||i.beforeFact===void 0)return null;let s=i.beforeFact,a=Pe(o),r=s&&a&&Object.hasOwn(a,s)?po(a[s]):null,c=n instanceof Date?n.getTime():po(n);return r===null||c===null||!Number.isFinite(c)?"WORKFLOW_V2_CANCELLATION_DEADLINE_INVALID":c<r?null:"WORKFLOW_V2_CANCELLATION_DEADLINE_PASSED"}var tt="openxiangda.workflow.step.requested.v2",Ao=[tt,"openxiangda.workflow.step.result_received.v2","openxiangda.workflow.step.completed.v2","openxiangda.workflow.step.continuation_failed.v2"],rn=16384,Si=2048,pa="steps",Eo=/^[A-Za-z][A-Za-z0-9_-]{0,127}$/,wi=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,je=new Set(["__proto__","prototype","constructor"]),B=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&[Object.prototype,null].includes(Object.getPrototypeOf(e)),Di=e=>{try{let t=JSON.stringify(e);return t===void 0?1/0:new TextEncoder().encode(t).length}catch{return 1/0}},nt=(e,t,o=0)=>{if(o>32)return!1;if(e===t)return!0;if(Array.isArray(e)&&Array.isArray(t))return e.length===t.length&&e.every((s,a)=>nt(s,t[a],o+1));if(!B(e)||!B(t))return!1;let n=Object.keys(e).filter(s=>e[s]!==void 0),i=Object.keys(t).filter(s=>t[s]!==void 0);return n.length===i.length&&n.every(s=>Object.hasOwn(t,s)&&nt(e[s],t[s],o+1))};function _o(e,t){let o=0,n=(i,s)=>++o>1e4||s>8?!1:i===null||typeof i=="boolean"||typeof i=="string"?!0:typeof i=="number"?Number.isFinite(i):Array.isArray(i)?i.length<=200&&i.every(a=>n(a,s+1)):B(i)&&Object.keys(i).length<=32&&Object.keys(i).every(a=>!je.has(a))&&Object.values(i).every(a=>n(a,s+1));return Di(e)<=t&&n(e,0)}function $i(e){return!B(e)||Object.keys(e).some(t=>!["executionId","handlerVersion","inputDigest","expectedFactRevision","output","receipt"].includes(t))?!1:/^[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i.test(e.executionId||"")&&Number.isSafeInteger(e.handlerVersion)&&e.handlerVersion>=1&&e.handlerVersion<=1e6&&/^[a-f0-9]{64}$/.test(e.inputDigest||"")&&Number.isSafeInteger(e.expectedFactRevision)&&e.expectedFactRevision>=0&&B(e.output)&&_o(e.output,rn)&&(e.receipt===void 0||B(e.receipt)&&_o(e.receipt,Si))}function ma(e){return B(e)&&Object.keys(e).every(t=>["executionId","nodeId","handlerCode","handlerVersion","mode","input","inputDigest","expectedFactRevision"].includes(t))&&typeof e.nodeId=="string"&&Eo.test(e.nodeId)&&!je.has(e.nodeId)&&typeof e.handlerCode=="string"&&/^[a-z][a-z0-9-]{0,100}$/.test(e.handlerCode)&&e.handlerCode.endsWith(`-v${e.handlerVersion}`)&&["pure","reconciled-effect"].includes(e.mode)&&$i({executionId:e.executionId,handlerVersion:e.handlerVersion,inputDigest:e.inputDigest,expectedFactRevision:e.expectedFactRevision,output:e.input})}function Et(e,t,o=rn){if(!_o(t,o))return!1;let n=1e4,i=(s,a,r)=>{if(--n<0||r>8||!B(s))return!1;let c=a===null?"null":Array.isArray(a)?"array":typeof a=="number"&&Number.isSafeInteger(a)?"integer":typeof a,l=Array.isArray(s.type)?s.type:[s.type];if(!l.includes(c)&&!(c==="integer"&&l.includes("number"))||s.enum!==void 0&&(!Array.isArray(s.enum)||!s.enum.some(p=>nt(p,a)))||Object.hasOwn(s,"const")&&!nt(s.const,a))return!1;if(typeof a=="number")return Number.isFinite(a)&&(s.minimum===void 0||a>=s.minimum)&&(s.maximum===void 0||a<=s.maximum);if(typeof a=="string"){let p=Array.from(a).length;return(s.minLength===void 0||p>=s.minLength)&&(s.maxLength===void 0||p<=s.maxLength)}return Array.isArray(a)?a.length<=s.maxItems&&(s.minItems===void 0||a.length>=s.minItems)&&a.every(p=>i(s.items,p,r+1)):B(a)?!B(s.properties)||Object.keys(a).some(p=>je.has(p)||!Object.hasOwn(s.properties,p))||(Array.isArray(s.required)?s.required:[]).some(p=>!Object.hasOwn(a,p))||s.minProperties!==void 0&&Object.keys(a).length<s.minProperties||s.maxProperties!==void 0&&Object.keys(a).length>s.maxProperties?!1:Object.entries(a).every(([p,d])=>i(s.properties[p],d,r+1)):a===null||typeof a=="boolean"};return i(e,t,0)}function ki(e){return typeof e=="string"&&e.length<=256&&e.split(".").length<=8&&e.split(".").every(t=>Eo.test(t)&&!je.has(t))}function It(e){let t=0,o=(n,i)=>{if(!B(n)||i>6||++t>256||Object.keys(n).some(r=>!["type","title","description","properties","required","additionalProperties","items","maxItems","minItems","maxLength","minLength","minimum","maximum","enum","const","maxProperties","minProperties"].includes(r)))return!1;let s=Array.isArray(n.type)?n.type:[n.type];if(!s.length||s.length>2||s.some(r=>!["object","array","string","integer","number","boolean","null"].includes(r))||s.length>1&&(!s.includes("null")||new Set(s).size!==s.length))return!1;for(let r of["title","description"])if(n[r]!==void 0&&(typeof n[r]!="string"||n[r].length>2e3))return!1;for(let r of["minimum","maximum"])if(n[r]!==void 0&&(typeof n[r]!="number"||!Number.isFinite(n[r])))return!1;for(let[r,c]of[["maxItems",200],["minItems",200],["maxLength",16384],["minLength",16384],["maxProperties",32],["minProperties",32]])if(n[r]!==void 0&&(!Number.isSafeInteger(n[r])||n[r]<0||n[r]>c))return!1;for(let[r,c]of[["minimum","maximum"],["minItems","maxItems"],["minLength","maxLength"],["minProperties","maxProperties"]])if(n[r]!==void 0&&n[c]!==void 0&&n[r]>n[c])return!1;if(["properties","required","additionalProperties","maxProperties","minProperties"].some(r=>n[r]!==void 0)&&!s.includes("object")||["items","maxItems","minItems"].some(r=>n[r]!==void 0)&&!s.includes("array")||["maxLength","minLength"].some(r=>n[r]!==void 0)&&!s.includes("string")||["minimum","maximum"].some(r=>n[r]!==void 0)&&!s.some(r=>r==="integer"||r==="number")||n.enum!==void 0&&(!Array.isArray(n.enum)||!n.enum.length||n.enum.length>100)||s.includes("object")&&(!B(n.properties)||n.additionalProperties!==!1||Object.keys(n.properties).length>32||Object.keys(n.properties).some(r=>!wi.test(r)||je.has(r))||n.required!==void 0&&(!Array.isArray(n.required)||new Set(n.required).size!==n.required.length||n.required.some(r=>typeof r!="string"||!Object.hasOwn(n.properties,r)))||n.minProperties!==void 0&&n.minProperties>Object.keys(n.properties).length||n.maxProperties!==void 0&&n.maxProperties<(n.required?.length||0)||!Object.values(n.properties).every(r=>o(r,i+1)))||s.includes("array")&&(!Number.isSafeInteger(n.maxItems)||!o(n.items,i+1)))return!1;let a={...n};return delete a.enum,delete a.const,!(n.enum!==void 0&&(!n.enum.every(r=>Et(a,r))||n.enum.some((r,c)=>n.enum.slice(0,c).some(l=>nt(r,l))))||Object.hasOwn(n,"const")&&!Et(a,n.const))};return B(e)&&e.type==="object"&&Di(e)<=rn&&o(e,0)}function yt(e){let t=Object.fromEntries(Object.values(e.nodes||{}).filter(o=>o?.kind==="action").map(o=>[o.id,o.outputSchema]));return Object.keys(t).length?{...e.inputSchema,properties:{...e.inputSchema?.properties,steps:{type:"object",additionalProperties:!1,properties:t}}}:e.inputSchema||{}}function Vi(e,t){let o=e;for(let n of t.split(".")){if(!B(o?.properties)||!Object.hasOwn(o.properties,n))return;o=o.properties[n]}return B(o)?o:void 0}var Ri=(e,t)=>!!Vi(e,t);function _a(e){return B(e)&&Object.keys(e).every(t=>["version","mode","inputSchema","outputSchema"].includes(t))&&Number.isSafeInteger(e.version)&&e.version>=1&&e.version<=1e6&&["pure","reconciled-effect"].includes(e.mode)&&It(e.inputSchema)&&It(e.outputSchema)}function Ci(e){return e.kind==="approval"?[e.onApprove,e.onReject]:e.kind==="condition"?[...Array.isArray(e.branches)?e.branches.map(t=>t.target):[],e.otherwise]:e.kind==="cc"||e.kind==="action"?[e.next]:[]}function go(e,t=0){return!B(e)||t>16?[]:e.op==="path"?typeof e.path=="string"?[e.path]:[]:["left","right","value"].flatMap(o=>go(e[o],t+1)).concat(Array.isArray(e.values)?e.values.flatMap(o=>go(o,t+1)):[])}function bt(e,t){if(!B(e)||!B(e.nodes))return["WORKFLOW_STEP_DEFINITION_INVALID"];let o=e.nodes,n=Object.entries(o).filter(([,r])=>r?.kind==="action");if(!n.length)return[];let i=[];Object.hasOwn(e.inputSchema?.properties||{},"steps")&&i.push("WORKFLOW_STEP_FACT_NAMESPACE_RESERVED");let s=yt(e);for(let[r,c]of n){(Object.keys(c).some(d=>!["id","kind","title","next","handler","inputSchema","outputSchema","inputs"].includes(d))||c.id!==r||!Eo.test(r)||je.has(r)||typeof c.title!="string"||!c.title.trim()||c.title.length>255||typeof c.next!="string"||!Object.hasOwn(o,c.next))&&i.push(`WORKFLOW_STEP_NODE_INVALID:${r}`);let l=c.handler;(!B(l)||Object.keys(l).some(d=>!["code","version","mode"].includes(d))||!Number.isSafeInteger(l.version)||l.version<1||l.version>1e6||!/^[a-z][a-z0-9-]{0,100}$/.test(l.code||"")||!String(l.code).endsWith(`-v${l.version}`)||!["pure","reconciled-effect"].includes(l.mode))&&i.push(`WORKFLOW_STEP_HANDLER_INVALID:${r}`);let p=It(c.inputSchema);if((!p||!It(c.outputSchema))&&i.push(`WORKFLOW_STEP_SCHEMA_INVALID:${r}`),!B(c.inputs)||Object.keys(c.inputs).length>32){i.push(`WORKFLOW_STEP_INPUTS_INVALID:${r}`);continue}for(let d of Array.isArray(c.inputSchema?.required)?c.inputSchema.required:[])Object.hasOwn(c.inputs,d)||i.push(`WORKFLOW_STEP_INPUT_REQUIRED:${r}:${d}`);for(let[d,u]of Object.entries(c.inputs)){if(!wi.test(d)||je.has(d)||!Object.hasOwn(c.inputSchema?.properties||{},d)||!B(u)){i.push(`WORKFLOW_STEP_INPUT_INVALID:${r}:${d}`);continue}if(u.source==="literal")(!p||Object.keys(u).some(g=>!["source","value"].includes(g))||!Object.hasOwn(u,"value")||!Et(c.inputSchema.properties[d],u.value))&&i.push(`WORKFLOW_STEP_LITERAL_INVALID:${r}:${d}`);else if(u.source!=="fact"||Object.keys(u).some(g=>!["source","path"].includes(g))||!ki(u.path)||!Ri(s,u.path))i.push(`WORKFLOW_STEP_FACT_PATH_INVALID:${r}:${d}`);else if(p){let g=Vi(s,u.path),I=c.inputSchema.properties[d],E=Array.isArray(g.type)?g.type:[g.type],N=Array.isArray(I.type)?I.type:[I.type];E.some(y=>!N.includes(y)&&!(y==="integer"&&N.includes("number")))&&i.push(`WORKFLOW_STEP_FACT_TYPE_MISMATCH:${r}:${d}`)}}}let a=(r,c)=>{let l=new Set,p=[e.startAt||""];for(;p.length&&l.size<=200;){let d=p.shift();if(!(d===c||l.has(d)||!o[d])){if(d===r)return!0;l.add(d),p.push(...Ci(o[d]))}}return!1};for(let[r,c]of Object.entries(o)){if(!B(c))continue;let l=c.kind==="action"?Object.values(c.inputs||{}).flatMap(d=>d?.source==="fact"?[d.path]:[]):(Array.isArray(c.branches)?c.branches:[]).flatMap(d=>go(d?.when)),p=t?.bindings?.[c.binding];p&&l.push(...[p.inputPath,p.departmentIdFrom,p.resourceIdFrom,p.scope?.valueFrom].filter(d=>typeof d=="string"));for(let d of l.filter(u=>typeof u=="string"&&u.startsWith("steps."))){let u=d.split(".")[1];(o[u]?.kind!=="action"||u===r||!Ri(s,d)||a(r,u))&&i.push(`WORKFLOW_STEP_OUTPUT_NOT_AVAILABLE:${r}:${d}`)}}if(t)for(let[,r]of n){let c=new Set,l=[r.next];for(;l.length&&c.size<=200;){let p=l.shift();if(c.has(p)||!B(o[p]))continue;c.add(p);let d=o[p];if(!(d.kind==="action"||d.kind==="end")){if(d.kind==="approval"){let u=t.bindings?.[d.binding];u&&["application_provider","initiator_select"].includes(u.provider)&&i.push(`WORKFLOW_STEP_NEXT_PROVIDER_REQUIRES_PREPARED_RESULT:${p}`);continue}l.push(...Ci(d))}}}return[...new Set(i)]}function ga(e,t){let o={};for(let[n,i]of Object.entries(e.inputs)){let s=i.source==="literal"?i.value:i.path.split(".").reduce((a,r)=>B(a)&&Object.hasOwn(a,r)?a[r]:void 0,t);s!==void 0&&(o[n]=s)}if(!Et(e.inputSchema,o))throw new Error("WORKFLOW_STEP_INPUT_SCHEMA_INVALID");return o}function Io(e,t,o){let n=an(e),i=[];Object.keys(n).length&&!o&&i.push("WORKFLOW_STEP_BACKEND_REQUIRED");for(let s of Object.keys(n)){let a=t.find(r=>r.code===s);(!a||a.execution||a.action||!Array.isArray(a.eventTypes)||a.eventTypes.length!==1||a.eventTypes[0]!==tt||!B(a.filter)||Object.keys(a.filter).length!==1||!B(a.filter.workflowStep)||Object.keys(a.filter.workflowStep).length!==1||a.filter.workflowStep.handlerCode!==s||!B(a.payload)||a.payload.includeChanges!==!1||!Array.isArray(a.payload.fields)||a.payload.fields.length)&&i.push(`WORKFLOW_STEP_SUBSCRIPTION_INVALID:${s}`)}for(let s of t)(s.eventTypes?.includes(tt)&&!n[s.code]||s.filter?.workflowStep&&!n[s.code])&&i.push(`WORKFLOW_STEP_HANDLER_NOT_DECLARED:${s.code}`);return i}function an(e){let t={};for(let o of e){let n=bt(o);if(n.length)throw new Error(n.join("; "));for(let i of Object.values(o.nodes||{})){if(i.kind!=="action")continue;let s={version:i.handler.version,mode:i.handler.mode,inputSchema:i.inputSchema,outputSchema:i.outputSchema},a=t[i.handler.code];if(a&&!nt(a,s))throw new Error(`WORKFLOW_STEP_HANDLER_CONTRACT_CONFLICT:${i.handler.code}`);t[i.handler.code]=s}}return t}var ue=e=>e&&typeof e=="object"&&!Array.isArray(e)?e:{},We=(e,t)=>typeof e=="string"&&!!e.trim()&&e.length<=t,Aa=/^[A-Za-z][A-Za-z0-9_-]*(?:\.[A-Za-z][A-Za-z0-9_-]*){0,15}$/,yo=e=>typeof e=="string"&&e.length<=256&&Aa.test(e)&&!e.split(".").some(t=>["__proto__","prototype","constructor"].includes(t));function cn(e,t){let o=ue(e),n=!0;for(let i of t.split(".")){n&&=Array.isArray(o.required)&&o.required.includes(i);let s=ue(o.properties)[i];if(!s||typeof s!="object")return null;o=ue(s)}return{schema:o,required:n}}function bo(e){let t=new Set,o=[],n=2048,i=(s,a)=>{if(--n<0||a>20){o.push("WORKFLOW_EXPRESSION_BUDGET_EXCEEDED");return}let r=ue(s);if(r.op==="path")yo(r.path)?t.add(r.path):o.push("WORKFLOW_EXPRESSION_PATH_INVALID");else{if(r.op==="literal")return;if(r.op==="and"||r.op==="or")if(!Array.isArray(r.values)||!r.values.length||r.values.length>128)o.push("WORKFLOW_EXPRESSION_GROUP_INVALID");else for(let c of r.values){if(n<0)break;i(c,a+1)}else r.op==="not"||r.op==="exists"?i(r.value,a+1):["eq","neq","gt","gte","lt","lte","in","contains"].includes(String(r.op))?(i(r.left,a+1),i(r.right,a+1)):o.push("WORKFLOW_EXPRESSION_OPERATOR_INVALID")}};return i(e,0),{paths:[...t],errors:[...new Set(o)]}}function No(e){if(e?.readability===void 0)return[];let t=[],o=yt(e),n=ue(e.readability);(Object.keys(n).some(r=>!["variables","logic"].includes(r))||!Object.keys(n).length)&&t.push("WORKFLOW_READABILITY_INVALID");let i=ue(n.variables);n.variables!==void 0&&(typeof n.variables!="object"||Array.isArray(n.variables)||n.variables===null)&&t.push("WORKFLOW_VARIABLES_INVALID"),Object.keys(i).length>128&&t.push("WORKFLOW_VARIABLE_LIMIT_EXCEEDED");for(let[r,c]of Object.entries(i)){let l=ue(c);(!yo(r)||!cn(o,r))&&t.push(`WORKFLOW_VARIABLE_SOURCE_UNKNOWN:${r}`),(!We(l.label,160)||Object.keys(l).some(p=>!["label","unit","description"].includes(p))||l.unit!==void 0&&!We(l.unit,32)||l.description!==void 0&&!We(l.description,2e3))&&t.push(`WORKFLOW_VARIABLE_METADATA_INVALID:${r}`)}let s=n.logic===void 0?[]:n.logic;(!Array.isArray(s)||s.length>32)&&t.push("WORKFLOW_LOGIC_LIMIT_INVALID");let a=new Set;for(let r of Array.isArray(s)?s.slice(0,32):[]){let c=ue(r),l=String(c.code||"");(!/^[a-z][a-z0-9-]{2,63}$/.test(l)||a.has(l)||!We(c.title,160)||!We(c.description,4e3)||Object.keys(c).some(p=>!["code","title","description","phase","nodeId","inputPaths","outputPaths","source"].includes(p)))&&t.push(`WORKFLOW_LOGIC_METADATA_INVALID:${l}`),a.add(l),(!["submission","node_input","completion"].includes(String(c.phase))||c.phase==="node_input"&&!ue(e.nodes)[String(c.nodeId)]||c.phase!=="node_input"&&c.nodeId!==void 0)&&t.push(`WORKFLOW_LOGIC_ANCHOR_INVALID:${l}`);for(let p of["inputPaths","outputPaths"]){let d=c[p];if(!(p==="outputPaths"&&d===void 0))if(!Array.isArray(d)||d.length>32||new Set(d).size!==d.length)t.push(`WORKFLOW_LOGIC_PATHS_INVALID:${l}:${p}`);else for(let u of d)(!yo(u)||!cn(o,u))&&t.push(`WORKFLOW_LOGIC_SOURCE_UNKNOWN:${l}:${String(u)}`)}if(c.source!==void 0){let p=ue(c.source);(!We(p.path,256)||String(p.path).startsWith("/")||String(p.path).includes("..")||String(p.path).includes("://")||!/^sha256:[a-f0-9]{64}$/.test(String(p.digest))||p.symbol!==void 0&&!We(p.symbol,160)||Object.keys(p).some(d=>!["path","symbol","digest"].includes(d)))&&t.push(`WORKFLOW_LOGIC_SOURCE_REFERENCE_INVALID:${l}`)}}for(let r of Object.values(ue(e.nodes))){let c=ue(r),l=Array.isArray(c.branches)?c.branches:[];for(let p of l){let d=bo(p.when);t.push(...d.errors.map(u=>`${u}:${c.id}`));for(let u of d.paths)cn(o,u)||t.push(`WORKFLOW_VARIABLE_SOURCE_UNKNOWN:${c.id}:${u}`)}}return[...new Set(t)]}function Ea(e,t){let o=yt(e),n=[],i=new Map,s=[];for(let c of Object.values(e.nodes)){if(c.kind==="approval")for(let[l,p,d]of[["approve",c.onApprove,"\u540C\u610F"],["reject",c.onReject,"\u62D2\u7EDD"]])p&&n.push({id:`${c.id}:${l}`,from:c.id,to:p,kind:l,label:d,variablePaths:[]});if(c.kind==="cc"&&c.next&&n.push({id:`${c.id}:next`,from:c.id,to:c.next,kind:"next",label:"\u6284\u9001\u540E\u7EE7\u7EED",variablePaths:[]}),c.kind==="action"&&c.next){let l=Object.values(c.inputs||{}).flatMap(p=>p.source==="fact"?[p.path]:[]);for(let p of l)i.has(p)||i.set(p,new Set),i.get(p).add(c.id);n.push({id:`${c.id}:next`,from:c.id,to:c.next,kind:"next",label:"\u6210\u529F\u56DE\u6267\u540E\u7EE7\u7EED",variablePaths:l})}if(c.kind==="condition"){for(let[l,p]of(c.branches||[]).entries()){let d=bo(p.when);for(let u of d.paths)i.has(u)||i.set(u,new Set),i.get(u).add(c.id);n.push({id:`${c.id}:branch:${l}`,from:c.id,to:p.target,kind:"branch",label:p.label||`\u6761\u4EF6 ${l+1}`,priority:l+1,expression:p.when,variablePaths:d.paths}),s.push(...d.errors.map(u=>({code:u,path:c.id})))}c.otherwise&&n.push({id:`${c.id}:default`,from:c.id,to:c.otherwise,kind:"default",label:"\u5747\u4E0D\u6EE1\u8DB3\u65F6",variablePaths:[]})}}let r=[...new Set([...i.keys(),...Object.keys(e.readability?.variables||{}),...(e.readability?.logic||[]).flatMap(c=>[...c.inputPaths,...c.outputPaths||[]])])].slice(0,128).map(c=>{let l=cn(o,c),p=e.readability?.variables?.[c],d=c.split("."),u=e.subject?.factProjection[d[0]],g=d[0]==="steps"?e.nodes[d[1]]:void 0;return l||s.push({code:"WORKFLOW_VARIABLE_SOURCE_UNKNOWN",path:c}),{path:c,label:p?.label||String(l?.schema.title||c),type:String(l?.schema.type||"unknown"),...p,required:l?.required||!1,usedBy:[...i.get(c)||[]],source:l&&g?.handler?{kind:"step_output",nodeId:g.id,handlerCode:g.handler.code,handlerVersion:g.handler.version}:l&&u&&e.subject?{kind:"subject_field",resourceCode:e.subject.resourceCode,fieldPath:[u,...d.slice(1)].join(".")}:{kind:l?"input":"unknown"}}});return{schemaVersion:"openxiangda.workflow-graph/v2",workflowCode:e.code,definitionDigest:t,startAt:e.startAt,fixedTopology:!0,branchStrategy:"first_match",nodes:Object.values(e.nodes).map(c=>({id:c.id,kind:c.kind,title:c.title||c.id,...c.binding?{binding:c.binding}:{},...c.mode?{mode:c.mode}:{},...c.outcome?{outcome:c.outcome}:{},...c.kind==="cc"?{emptyPolicy:c.emptyPolicy,notify:c.notify!==!1}:{},...c.kind==="approval"?{emptyPolicy:c.emptyPolicy||"block",initiatorApprovalPolicy:c.initiatorApprovalPolicy||"manual"}:{},...c.kind==="action"&&c.handler?{businessStep:{handler:c.handler,inputs:c.inputs||{},outputPaths:Object.keys(ue(c.outputSchema).properties||{}).map(l=>`steps.${c.id}.${l}`)}}:{}})),edges:n,variables:r,logic:e.readability?.logic||[],diagnostics:s}}function Nt(e,t=[],o=0){if(!e||o>20)return"\u65E0\u6CD5\u8BC6\u522B\u7684\u6761\u4EF6";if(e.op==="path")return t.find(a=>a.path===e.path)?.label||e.path;if(e.op==="literal")return JSON.stringify(e.value)??"\u7F3A\u503C";if(e.op==="and"||e.op==="or")return e.values.slice(0,128).map(a=>`\uFF08${Nt(a,t,o+1)}\uFF09`).join(e.op==="and"?" \u4E14 ":" \u6216 ");if(e.op==="not"||e.op==="exists")return`${e.op==="not"?"\u4E0D\u6EE1\u8DB3":"\u5B58\u5728"}\uFF08${Nt(e.value,t,o+1)}\uFF09`;if(!("left"in e))return"\u65E0\u6CD5\u8BC6\u522B\u7684\u6761\u4EF6";let n={eq:"=",neq:"\u2260",gt:">",gte:"\u2265",lt:"<",lte:"\u2264",in:"\u5C5E\u4E8E",contains:"\u5305\u542B"},i=e.left.op==="path"?e.left.path:void 0,s=i&&e.right.op==="literal"&&typeof e.right.value=="number"?t.find(a=>a.path===i)?.unit:void 0;return`${Nt(e.left,t,o+1)} ${n[e.op]} ${Nt(e.right,t,o+1)}${s?` ${s}`:""}`}function ot(e){let t=[];for(let[o,n]of Object.entries(e?.nodes||{}))if(n.initiatorApprovalPolicy!==void 0){if(n.kind!=="approval"||!["manual","auto_approve"].includes(n.initiatorApprovalPolicy)){t.push(`WORKFLOW_INITIATOR_APPROVAL_POLICY_INVALID:${o}`);continue}n.initiatorApprovalPolicy==="auto_approve"&&((n.taskPageCode!==void 0||[n.fieldPolicy?.default,...Object.values(n.fieldPolicy?.fields||{})].some(i=>i==="edit"||i==="edit_required"))&&t.push(`WORKFLOW_INITIATOR_APPROVAL_INPUT_REQUIRED:${o}`),n.operationPolicy?.approve?.commentRequired===!0&&t.push(`WORKFLOW_INITIATOR_APPROVAL_COMMENT_REQUIRED:${o}`))}return t}function Ia(e,t,o,n){return e.kind==="approval"&&e.initiatorApprovalPolicy==="auto_approve"&&ot({nodes:{node:e}}).length===0&&t!=="return_review"&&!!o&&n.user_id===o&&n.status==="active"&&n.participant_kind==="primary"&&["resolution","resolution_retry"].includes(n.source||"")&&!n.source_participant_id&&!n.delegate_authorization_id}var ln=["approve","reject","return","transfer","delegate","add_assignee"],un=["fixed_users","app_role","app_role_in_scope"],ya=["single","any","all","sequence"],Fe=e=>!!e&&typeof e=="object"&&!Array.isArray(e),it=(e,t)=>Object.keys(e).every(o=>t.includes(o)),dn=(e,t,o)=>Array.isArray(e)&&e.length>0&&e.length<=o&&new Set(e).size===e.length&&e.every(n=>typeof n=="string"&&t.includes(n));function st(e){return e.allowedOperations||[...ln]}function Pi(e,t){return t?.commentRequired??e==="reject"}function Fi(e,t,o={},n=!1){return!(!Fe(e)||!Object.keys(e).length||!it(e,n?["enabled","label","commentRequired"]:["label","commentRequired"])||e.label!==void 0&&(typeof e.label!="string"||!e.label.trim()||e.label.length>40||/[\u0000-\u001f\u007f]/.test(e.label))||e.enabled!==void 0&&(typeof e.enabled!="boolean"||["approve","reject"].includes(t)&&!e.enabled)||e.commentRequired!==void 0&&(typeof e.commentRequired!="boolean"||!["approve","reject"].includes(t)||n&&Pi(t,o)&&!e.commentRequired))}function fn(e,t){let o=[];for(let[n,i]of Object.entries(e?.nodes||{})){if(!Fe(i))continue;let s=i.administration,a=i.operationPolicy;if(i.kind==="cc"){(a!==void 0||s!==void 0&&(!Fe(s)||!it(s,["assigneeProviders"])))&&o.push(`WORKFLOW_NODE_ADMINISTRATION_INVALID:${n}`),s?.assigneeProviders!==void 0&&!dn(s.assigneeProviders,un,3)&&o.push(`WORKFLOW_NODE_ADMINISTRATION_PROVIDERS_INVALID:${n}`),s?.assigneeProviders?.includes("app_role_in_scope")&&t&&!t.bindings[i.binding||""]?.scope&&o.push(`WORKFLOW_NODE_ADMINISTRATION_SCOPE_REQUIRED:${n}`);continue}if(i.kind!=="approval"){(s!==void 0||a!==void 0)&&o.push(`WORKFLOW_NODE_ADMINISTRATION_APPROVAL_REQUIRED:${n}`);continue}if(a!==void 0&&(!Fe(a)||Object.keys(a).length>8||Object.entries(a).some(([c,l])=>!ln.includes(c)||!st(i).includes(c)||!Fi(l,c)))&&o.push(`WORKFLOW_NODE_OPERATION_POLICY_INVALID:${n}`),s===void 0)continue;if(!Fe(s)||!it(s,["modes","assigneeProviders","operations"])){o.push(`WORKFLOW_NODE_ADMINISTRATION_INVALID:${n}`);continue}s.modes!==void 0&&(!dn(s.modes,ya,4)||!s.modes.includes(i.mode))&&o.push(`WORKFLOW_NODE_ADMINISTRATION_MODES_INVALID:${n}`),s.assigneeProviders!==void 0&&!dn(s.assigneeProviders,un,3)&&o.push(`WORKFLOW_NODE_ADMINISTRATION_PROVIDERS_INVALID:${n}`);let r=t?.bindings[i.binding||""];r&&Array.isArray(s.assigneeProviders)&&s.assigneeProviders.includes("app_role_in_scope")&&!r.scope&&o.push(`WORKFLOW_NODE_ADMINISTRATION_SCOPE_REQUIRED:${n}`),s.operations!==void 0&&(!dn(s.operations,ln,8)||s.operations.some(c=>!st(i).includes(c)))&&o.push(`WORKFLOW_NODE_ADMINISTRATION_OPERATIONS_INVALID:${n}`)}return o}function ba(e,t,o){let n=[];if(!e||!Fe(o)||!Object.keys(o).length||!it(o,["title","description","assignee","mode","operations"]))return["WORKFLOW_V2_NODE_CONFIGURATION_PATCH_INVALID"];let i=o;for(let a of["title","description"])i[a]!==void 0&&(typeof i[a]!="string"||i[a].length>(a==="title"?255:1e3)||a==="title"&&!i[a].trim())&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_PATCH_INVALID");let s=e.administration;if(i.mode!==void 0&&(e.kind!=="approval"||!s?.modes?.includes(i.mode))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_MODE_READONLY"),i.operations!==void 0&&(e.kind!=="approval"||!Fe(i.operations)||!Object.keys(i.operations).length||Object.keys(i.operations).length>8||Object.entries(i.operations).some(([a,r])=>!s?.operations?.includes(a)||!st(e).includes(a)||!Fi(r,a,e.operationPolicy?.[a],!0)))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_OPERATION_INVALID"),i.assignee!==void 0){let a=i.assignee,r=s?.assigneeProviders||(e.kind==="approval"&&t&&un.includes(t.provider)?[t.provider]:[]);!Fe(a)||!["approval","cc"].includes(e.kind)||!r.includes(a.provider)||a.provider==="app_role_in_scope"&&!t?.scope?n.push("WORKFLOW_V2_NODE_CONFIGURATION_PROVIDER_READONLY"):a.provider==="fixed_users"?(!it(a,["provider","users"])||!Array.isArray(a.users)||a.users.length<1&&!(e.kind==="approval"&&e.emptyPolicy==="skip")||a.users.length>(e.kind==="cc"?20:200)||new Set(a.users).size!==a.users.length||a.users.some(c=>typeof c!="string"||!c.trim()||c.length>255))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_USERS_INVALID"):(!it(a,["provider","roleCode"])||typeof a.roleCode!="string"||!/^[a-z][a-z0-9_-]{0,127}$/.test(a.roleCode))&&n.push("WORKFLOW_V2_NODE_CONFIGURATION_ROLE_INVALID")}return n.push(...ot({nodes:{node:{...e,operationPolicy:vi(e,i).operationPolicy}}})),n}function vi(e,t){let o=Object.fromEntries(st(e).flatMap(n=>{let i=n,s=t?.operations?.[i],a={...e.operationPolicy?.[i],...s?.label!==void 0?{label:s.label}:{},...s?.commentRequired!==void 0?{commentRequired:s.commentRequired}:{}};return Object.keys(a).length?[[i,a]]:[]}));return{mode:t?.mode||e.mode,initiatorApprovalPolicy:e.initiatorApprovalPolicy||"manual",allowedOperations:st(e).filter(n=>t?.operations?.[n]?.enabled!==!1),operationPolicy:o,fieldPolicy:{default:e.fieldPolicy?.default||"readonly",fields:{...e.fieldPolicy?.fields}}}}var el=20,Li=["fixed_users","initiator","input_users","form_field_users","app_role","app_role_in_scope","previous_node_actor"];function pn(e,t){let o=[];for(let[n,i]of Object.entries(e?.nodes||{})){if(i?.kind!=="cc"||((Object.keys(i).some(c=>!["id","kind","title","binding","next","emptyPolicy","notify","administration"].includes(c))||typeof i.title!="string"||!i.title.trim()||i.title.length>255||typeof i.binding!="string"||!i.binding.trim()||i.binding.length>255||typeof i.next!="string"||!i.next.trim()||!e.nodes?.[i.next]||!["block","skip"].includes(i.emptyPolicy)||i.notify!==void 0&&typeof i.notify!="boolean")&&o.push(`WORKFLOW_CC_NODE_INVALID:${n}`),!t))continue;let s=t.bindings?.[i.binding];if(!s){o.push(`WORKFLOW_CC_BINDING_NOT_FOUND:${n}`);continue}Li.includes(s.provider)||o.push(`WORKFLOW_CC_PROVIDER_INVALID:${n}`);let a=s.min??1,r=s.max??20;(!Number.isSafeInteger(a)||!Number.isSafeInteger(r)||a<1||r<a||r>20||s.provider==="fixed_users"&&(!Array.isArray(s.users)||!s.users.length||s.users.length>r))&&o.push(`WORKFLOW_CC_RECIPIENT_LIMIT_INVALID:${n}`)}return[...new Set(o)]}var Oo=["fixed_users","input_users","form_field_users","app_role","app_role_in_scope"];function mn(e,t){let o=[];for(let[n,i]of Object.entries(e?.nodes||{}))i.kind==="cc"||i.emptyPolicy===void 0||(i.kind!=="approval"||!["block","skip"].includes(i.emptyPolicy)?o.push(`WORKFLOW_APPROVAL_EMPTY_POLICY_INVALID:${n}`):i.emptyPolicy==="skip"&&t&&!Oo.includes(t.bindings?.[i.binding||""]?.provider)&&o.push(`WORKFLOW_APPROVAL_EMPTY_PROVIDER_UNSUPPORTED:${n}`));return o}function Na(e,t){return e.kind==="approval"&&e.emptyPolicy==="skip"&&t?.emptyResult==="no_candidates"&&Oo.includes(t.provider)&&Array.isArray(t.candidates)&&t.candidates.length===0&&Array.isArray(t.selected)&&t.selected.length===0&&Array.isArray(t.warnings)&&t.warnings.length===0}function To(e,t){let o=Object.values(e.nodes||{}).filter(n=>n.binding===t);return o.length>0&&o.every(n=>n.kind==="approval"&&n.emptyPolicy==="skip")}var xi="openxiangda.workflow-rejection-notification/v1",ol=4096;function ji(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function rt(e,t){return typeof e=="string"&&e.trim().length>0&&e.length<=t}function ho(e,t){return Object.keys(e).sort().join(",")===t.sort().join(",")}function Ro(e){let t=e?.rejectionNotification;return t===void 0?[]:!ji(t)||!ho(t,["recipient","title","summary"])||t.recipient!=="record_last_modifier"||!rt(t.title,160)||!rt(t.summary,500)?["WORKFLOW_REJECTION_NOTIFICATION_INVALID"]:rt(e.subject?.resourceCode,63)?[]:["WORKFLOW_REJECTION_NOTIFICATION_SUBJECT_REQUIRED"]}function Oa(e){if(!ji(e)||e.schemaVersion!==xi||e.recipient!=="record_last_modifier"||!rt(e.title,160)||!rt(e.summary,500))return!1;let t=["schemaVersion","recipient","title","summary","status","sourceRevision"];if(e.status==="ready"){if(!ho(e,[...t,"userId"])||!rt(e.userId,255)||!Number.isSafeInteger(e.sourceRevision)||Number(e.sourceRevision)<1)return!1}else if(e.status==="skipped"){if(!ho(e,[...t,"reason"])||!["record_missing","modifier_missing","modifier_ineligible"].includes(String(e.reason))||(e.reason==="record_missing"?e.sourceRevision!==null:!Number.isSafeInteger(e.sourceRevision)||Number(e.sourceRevision)<1))return!1}else return!1;return new TextEncoder().encode(JSON.stringify(e)).byteLength<=4096}function Co(e,t){let o=e.commandHandlers;if(o===void 0)return[];if(!o||typeof o!="object"||Array.isArray(o)||!Object.keys(o).length||Object.keys(o).some(i=>!["approve","reject","withdraw"].includes(i)))return["WORKFLOW_BUSINESS_COMMAND_HANDLERS_INVALID"];let n=[];for(let[i,s]of Object.entries(o)){if(!s||typeof s!="object"||Array.isArray(s)||Object.keys(s).join(",")!=="operationCode"||!/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/.test(s.operationCode||"")){n.push("WORKFLOW_BUSINESS_COMMAND_HANDLER_INVALID");continue}if(!t)continue;let a=t.find(r=>r.code===s.operationCode);if(!a){n.push("WORKFLOW_BUSINESS_COMMAND_OPERATION_MISSING");continue}(a.method!=="POST"||a.browser?.exposure!=="authenticated"||a.browser.behavior!=="controlled"||a.browser.idempotency!=="required"||a.browser.fileIntent||a.browser.subject?.resourceCode!==e.subject?.resourceCode||a.browser.subject?.inputField!=="recordId"||!a.platformAccess?.workflow?.codes?.includes(e.code)||!a.platformAccess.workflow.businessCommands?.includes(i))&&n.push("WORKFLOW_BUSINESS_COMMAND_OPERATION_INVALID")}return Object.values(e.nodes||{}).some(i=>i.kind==="approval"&&(i.emptyPolicy==="skip"||i.initiatorApprovalPolicy==="auto_approve"))&&n.push("WORKFLOW_BUSINESS_COMMAND_AUTOMATIC_DECISION_FORBIDDEN"),[...new Set(n)]}var Ta={type:"object",additionalProperties:!1,required:["workflowCode","target","recordId","expectedRevision","commandToken","idempotencyKey","input"],properties:{workflowCode:{type:"string",pattern:"^[A-Za-z][A-Za-z0-9_-]{0,127}$"},target:{oneOf:[{type:"object",additionalProperties:!1,required:["kind","id","command"],properties:{kind:{const:"task"},id:{type:"string",format:"uuid"},command:{enum:["approve","reject"]}}},{type:"object",additionalProperties:!1,required:["kind","id","command"],properties:{kind:{const:"instance"},id:{type:"string",format:"uuid"},command:{const:"withdraw"}}}]},recordId:{type:"string",format:"uuid"},expectedRevision:{type:"integer",minimum:1},commandToken:{type:"string",pattern:"^[A-Za-z0-9_-]{43}$"},idempotencyKey:{type:"string",minLength:1,maxLength:128},input:{type:"object",maxProperties:64}}};var Wi=["fixed_users","initiator","app_role","app_role_in_scope"],ha=e=>!!e&&typeof e=="object"&&!Array.isArray(e);function _n(e,t){let o=e?.launchPreflight;if(o===void 0)return[];if(!ha(o)||Object.keys(o).join(",")!=="requiredApprovalNodes"||!Array.isArray(o.requiredApprovalNodes)||o.requiredApprovalNodes.length<1||o.requiredApprovalNodes.length>20||new Set(o.requiredApprovalNodes).size!==o.requiredApprovalNodes.length||o.requiredApprovalNodes.some(i=>typeof i!="string"||!/^[A-Za-z][A-Za-z0-9_-]{0,127}$/.test(i)))return["WORKFLOW_LAUNCH_PREFLIGHT_INVALID"];let n=[];for(let i of o.requiredApprovalNodes){let s=e.nodes?.[i];if(!s||s.kind!=="approval"){n.push(`WORKFLOW_LAUNCH_PREFLIGHT_NODE_INVALID:${i}`);continue}if(!t)continue;let a=t.bindings?.[s.binding||""];(!a||!Wi.includes(a.provider)||a.candidateField!==void 0)&&n.push(`WORKFLOW_LAUNCH_PREFLIGHT_PROVIDER_UNSUPPORTED:${i}`)}return n}var Mi=64,gn=1024*1024,Bi=65536,wo=100,Ki=400,Ue=new Set(["__proto__","prototype","constructor"]),qi=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Tt=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,Ui=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/,ce=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&[null,Object.prototype].includes(Object.getPrototypeOf(e)),$e=(e,t)=>ce(e)&&Object.keys(e).every(o=>t.includes(o)&&!Ue.has(o)),An=e=>{try{return new TextEncoder().encode(JSON.stringify(e)).length}catch{return 1/0}},Ji=e=>e==null||typeof e=="string"&&!e.trim()||Array.isArray(e)&&e.length===0;function ve(e,t){if(e===t)return!0;if(Array.isArray(e)&&Array.isArray(t))return e.length===t.length&&e.every((n,i)=>ve(n,t[i]));if(!ce(e)||!ce(t))return!1;let o=Object.keys(e);return o.length===Object.keys(t).length&&o.every(n=>Object.hasOwn(t,n)&&ve(e[n],t[n]))}function So(e,t){let o=t.split(".");if(!(o.some(n=>!qi.test(n)||Ue.has(n))||o.length>12))return o.reduce((n,i)=>ce(n)&&Object.hasOwn(n,i)?n[i]:void 0,e)}function De(e,t){switch(e.op){case"literal":return e.value;case"path":return So({values:t},e.path);case"and":return e.values.every(o=>!!De(o,t));case"or":return e.values.some(o=>!!De(o,t));case"not":return!De(e.value,t);case"exists":return!Ji(De(e.value,t));default:{let o=De(e.left,t),n=De(e.right,t);return e.op==="eq"?ve(o,n):e.op==="neq"?!ve(o,n):e.op==="in"?Array.isArray(n)&&n.some(i=>ve(i,o)):e.op==="contains"?Array.isArray(o)?o.some(i=>ve(i,n)):typeof o=="string"&&typeof n=="string"&&o.includes(n):typeof o!="number"||typeof n!="number"||!Number.isFinite(o)||!Number.isFinite(n)?!1:e.op==="gt"?o>n:e.op==="gte"?o>=n:e.op==="lt"?o<n:o<=n}}}function Ot(e,t,o=0,n={nodes:0}){if(o>8||++n.nodes>64||!ce(e))return!1;if(e.op==="literal")return $e(e,["op","value"])&&Object.hasOwn(e,"value")&&An(e.value)<=4096&&ht(e.value);if(e.op==="path"){if(!$e(e,["op","path"])||typeof e.path!="string")return!1;let i=e.path.split(".");return i[0]==="values"&&i.length>=2&&i.length<=8&&t.has(i[1])&&i.every(s=>Tt.test(s)&&!Ue.has(s))}return["not","exists"].includes(e.op)?$e(e,["op","value"])&&Ot(e.value,t,o+1,n):["and","or"].includes(e.op)?$e(e,["op","values"])&&Array.isArray(e.values)&&e.values.length>0&&e.values.length<=16&&e.values.every(i=>Ot(i,t,o+1,n)):["eq","neq","gt","gte","lt","lte","in","contains"].includes(e.op)&&$e(e,["op","left","right"])&&Ot(e.left,t,o+1,n)&&Ot(e.right,t,o+1,n)}function Rt(e,t,o){let n=[],i=e.taskPages;if(i!==void 0&&(!ce(i)||Object.keys(i).length===0||Object.keys(i).length>16||An(i)>Bi))return["WORKFLOW_TASK_PAGES_INVALID"];for(let[s,a]of Object.entries(i||{})){let r=`taskPages.${s}`;if(!qi.test(s)||Ue.has(s)||!$e(a,["title","fields"])||typeof a.title!="string"||!a.title.trim()||a.title.length>160||!Array.isArray(a.fields)||!a.fields.length||a.fields.length>Mi){n.push(`WORKFLOW_TASK_PAGE_INVALID:${r}`);continue}let c=new Set(a.fields.map(d=>d?.code));c.size!==a.fields.length&&n.push(`WORKFLOW_TASK_PAGE_DUPLICATE_FIELD:${r}`);let l=0,p=new Set;for(let d of a.fields){if(!$e(d,["code","readonly","required","visibleWhen","requiredWhen","subtable"])||!Tt.test(d.code)||Ue.has(d.code)||["readonly","required"].some(u=>d[u]!==void 0&&typeof d[u]!="boolean")||d.readonly&&(d.required||d.requiredWhen)){n.push(`WORKFLOW_TASK_PAGE_FIELD_INVALID:${r}`);continue}for(let u of["visibleWhen","requiredWhen"])d[u]!==void 0&&!Ot(d[u],c)&&n.push(`WORKFLOW_TASK_PAGE_EXPRESSION_INVALID:${r}.${d.code}.${u}`);if(t){let u=t.get(d.code);if((!u||u.system||u.hidden||u.type==="serial-number"||!d.readonly&&u.widget==="readonly"||!d.readonly&&u.type==="subtable"&&!d.subtable||d.subtable&&u.type!=="subtable")&&n.push(`WORKFLOW_TASK_PAGE_RESOURCE_FIELD_INVALID:${r}.${d.code}`),d.subtable&&u?.subtable){let g=u.subtable;l+=g.maxRows??20,(p.has(g.resourceCode)||!Number.isSafeInteger(g.maxRows??20)||(g.maxRows??20)<1||(g.maxRows??20)>wo||!Tt.test(g.foreignKey)||!Tt.test(g.orderField)||g.foreignKey===g.orderField)&&n.push(`WORKFLOW_TASK_SUBTABLE_RELATION_INVALID:${r}.${d.code}`),p.add(g.resourceCode);let I=o?.get(g.resourceCode);o&&(!I||!["uuid","resource-ref.single"].includes(I.get(g.foreignKey)?.type||"")||I.get(g.orderField)?.type!=="number.integer")&&n.push(`WORKFLOW_TASK_SUBTABLE_RELATION_INVALID:${r}.${d.code}`);for(let E of Array.isArray(d.subtable.fields)?d.subtable.fields:[]){if(!E||typeof E.code!="string")continue;let N=I?.get(E.code);(E.code===g.foreignKey||E.code===g.orderField||I&&(!N||N.system||N.hidden||N.type==="subtable"||!E.readonly&&(N.widget==="readonly"||N.type==="serial-number")))&&n.push(`WORKFLOW_TASK_SUBTABLE_FIELD_UNSUPPORTED:${r}.${d.code}.${E.code}`)}}else d.subtable&&t&&n.push(`WORKFLOW_TASK_SUBTABLE_RELATION_INVALID:${r}.${d.code}`)}d.subtable&&(d.readonly||!$e(d.subtable,["fields","create","delete","reorder"])||["create","delete","reorder"].some(u=>d.subtable?.[u]!==void 0&&typeof d.subtable[u]!="boolean")||!Array.isArray(d.subtable.fields)||d.subtable.fields.some(u=>u?.subtable)?n.push(`WORKFLOW_TASK_SUBTABLE_PAGE_INVALID:${r}.${d.code}`):n.push(...Rt({taskPages:{child:{title:"\u5B50\u884C",fields:d.subtable.fields}}},o?.get(t?.get(d.code)?.subtable?.resourceCode||"")).map(u=>`${u}:${r}.${d.code}`)))}(l>Ki||l<0||!Number.isSafeInteger(l))&&n.push(`WORKFLOW_TASK_SUBTABLE_BUDGET_EXCEEDED:${r}`)}for(let[s,a]of Object.entries(e.nodes||{}))ce(a)&&a.taskPageCode!==void 0&&(a.kind!=="approval"||typeof a.taskPageCode!="string"||!ce(i)||!Object.hasOwn(i,a.taskPageCode)?n.push(`WORKFLOW_TASK_PAGE_NOT_FOUND:${s}`):Array.isArray(i[a.taskPageCode]?.fields)&&i[a.taskPageCode].fields.some(r=>r&&(a.fieldPolicy?.fields?.[r.code]||a.fieldPolicy?.default)==="hidden")&&n.push(`WORKFLOW_TASK_PAGE_FIELD_HIDDEN:${s}`));return n}function Do(e,t){return e.fields.map(o=>({code:o.code,visible:o.visibleWhen===void 0||!!De(o.visibleWhen,t),readonly:o.readonly===!0,required:o.required===!0||o.requiredWhen!==void 0&&!!De(o.requiredWhen,t)}))}var Ie=class extends Error{constructor(o,n){super(o);this.code=o;this.field=n}code;field;rowIndex;childField};function Ra(e,t){return t.map(o=>({key:String(o.id),id:String(o.id),revision:Number(o.revision),state:"persisted",values:Object.fromEntries(Do({title:"\u5B50\u884C",fields:e.fields},o).filter(n=>n.visible&&!n.readonly).map(n=>[n.code,o[n.code]??null]))}))}function Ca(e,t,o,n,i,s=!0){let a=e.subtable,r=u=>{throw new Ie(u,e.code)};if(!a||!Number.isSafeInteger(t)||t<1||t>wo||!Array.isArray(n)||n.length>2*t||An(n)>gn||!ht(n))return r("WORKFLOW_TASK_SUBTABLE_VALUES_INVALID");let c=new Map(o.map(u=>[String(u.id),u])),l=new Set,p=new Set,d=[];for(let u of n){if(!$e(u,["key","state","id","revision","values"])||typeof u.key!="string"||!Ui.test(u.key)||l.has(u.key)||!["created","persisted","deleted"].includes(u.state)||!ce(u.values))return r("WORKFLOW_TASK_SUBTABLE_ROW_INVALID");if(l.add(u.key),u.state==="created"){if(!a.create||u.id!==void 0||u.revision!==void 0||c.has(u.key))return r("WORKFLOW_TASK_SUBTABLE_CREATE_FORBIDDEN")}else{if(typeof u.id!="string"||u.id!==u.key||!Ui.test(u.id)||p.has(u.id)||!Number.isSafeInteger(u.revision)||u.revision<1||!c.has(u.id))return r("WORKFLOW_TASK_SUBTABLE_SCOPE_CONFLICT");if(p.add(u.id),s&&Number(c.get(u.id).revision)!==u.revision)return r("WORKFLOW_TASK_SUBTABLE_REVISION_CONFLICT")}if(u.state==="deleted"){if(!a.delete||Object.keys(u.values).length)return r("WORKFLOW_TASK_SUBTABLE_DELETE_FORBIDDEN");continue}try{Gi({title:e.code,fields:a.fields},u.id?c.get(u.id):{},u.values,i)}catch(g){if(!(g instanceof Ie))throw g;let I=new Ie(g.code,e.code);throw I.rowIndex=d.length,g.field!==void 0&&(I.childField=g.field),I}d.push(u)}if(p.size!==c.size)return r("WORKFLOW_TASK_SUBTABLE_SCOPE_CONFLICT");if(d.length>t)return r("WORKFLOW_TASK_SUBTABLE_MAX_ROWS_EXCEEDED");if(!a.reorder){let u=o.filter(I=>d.some(E=>E.id===String(I.id))).map(I=>String(I.id)),g=d.filter(I=>I.state==="persisted").map(I=>I.id);if(!ve(u,g)||d.some((I,E)=>I.state==="created"&&d.slice(E+1).some(N=>N.state==="persisted")))return r("WORKFLOW_TASK_SUBTABLE_REORDER_FORBIDDEN")}return n}function ht(e,t={members:0},o=0){return++t.members>5e4||o>12?!1:e===null||typeof e=="boolean"?!0:typeof e=="string"?e.length<=gn:typeof e=="number"?Number.isFinite(e):Array.isArray(e)?e.length<=1e3&&e.every(n=>ht(n,t,o+1)):ce(e)&&Object.entries(e).every(([n,i])=>!Ue.has(n)&&ht(i,t,o+1))}function Gi(e,t,o,n){if(!ce(o)||An(o)>gn||!ht(o))throw new Ie("WORKFLOW_TASK_FORM_VALUES_INVALID");let i={...t,...o},s=new Map(Do(e,i).map(a=>[a.code,a]));for(let a of Object.keys(o)){let r=s.get(a);if(!r||r.readonly||!r.visible)throw new Ie("WORKFLOW_TASK_FORM_FIELD_NOT_EDITABLE",a)}if(n)for(let a of s.values()){let r=i[a.code],c=e.fields.find(l=>l.code===a.code)?.subtable&&Array.isArray(r)?r.every(l=>ce(l)&&l.state==="deleted"):Ji(r);if(a.visible&&!a.readonly&&a.required&&c)throw new Ie("WORKFLOW_TASK_FORM_REQUIRED",a.code)}return i}function Sa(e,t,o){let n=JSON.parse(JSON.stringify(t));for(let[a,r]of Object.entries(e.subject?.factProjection||{})){let c=a.split(".");if(!c.length||c.length>12||a.length>128||c[0]==="steps"||c.some(p=>!Tt.test(p)||Ue.has(p)))throw new Ie("WORKFLOW_TASK_FORM_FACT_PROJECTION_INVALID");if(!Object.hasOwn(o,r))throw new Ie("WORKFLOW_TASK_FORM_FACT_FIELD_MISSING",r);let l=n;for(let p of c.slice(0,-1))l=l[p]=ce(l[p])?l[p]:{};l[c.at(-1)]=o[r]===void 0?void 0:JSON.parse(JSON.stringify(o[r]))}let i=new Set,s=Object.values(e.nodes||{}).filter(a=>a.kind==="action");for(let a=0;a<=s.length;a++){let r=!1;for(let c of s)ce(n.steps)&&Object.hasOwn(n.steps,c.id)&&Object.values(c.inputs||{}).some(l=>l.source==="fact"&&!ve(So(t,l.path),So(n,l.path)))&&(delete n.steps[c.id],i.add(c.id),r=!0);if(!r)break}return{facts:n,invalidatedNodeIds:[...i].sort()}}function wa(e,t,o){let n=e.nodes||{};for(let i of o){let s=new Set,a=new Map,r=c=>{if(c===i)return!0;if(a.has(c))return a.get(c);if(s.has(c)||s.size>200)return!1;let l=n[c];if(!ce(l)||l.kind==="end")return!1;s.add(c);let p=l.kind==="approval"?[l.onApprove]:l.kind==="condition"?[...(l.branches||[]).map(u=>u.target),l.otherwise]:[l.next],d=p.length>0&&p.every(u=>typeof u=="string"&&r(u));return s.delete(c),a.set(c,d),d};if(!r(t))return!1}return!0}var dl=256,ll=64,ul=262144,Da=/^[a-z][a-z0-9_-]{0,127}$/,$a=/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)*$/,Hi=new Set(["__proto__","prototype","constructor"]),Te=e=>!!e&&typeof e=="object"&&!Array.isArray(e),St=(e,t)=>Object.keys(e).every(o=>t.includes(o)),Me=(e,t)=>typeof e=="string"&&e.trim().length>0&&e.length<=t&&!/[\u0000-\u001f\u007f]/.test(e),ke=e=>typeof e=="string"&&Da.test(e)&&!Hi.has(e),Yi=e=>typeof e=="string"&&e.length<=255&&$a.test(e)&&!e.split(".").some(t=>Hi.has(t)),ka=e=>Te(e)&&St(e,["dimension","valueFrom","value"])&&ke(e.dimension)&&(Me(e.value,255)&&e.valueFrom===void 0||Yi(e.valueFrom)&&e.value===void 0),zi=e=>typeof e=="string"&&/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/.test(e)&&Number.isFinite(Date.parse(e)),Ct={type:"string",pattern:"^[a-z][a-z0-9_-]{0,127}$"},$o={type:"string",minLength:1,maxLength:128},Va={type:"object",additionalProperties:!1,required:["policyCode","title","strategy","dimensions","sources"],properties:{policyCode:Ct,title:$o,strategy:{enum:["replace_then_append","replace_only"]},dimensions:{type:"object",maxProperties:8,propertyNames:Ct,additionalProperties:{type:"object",additionalProperties:!1,required:["title","valueFrom"],properties:{title:$o,valueFrom:{type:"string",minLength:1,maxLength:255}}}},sources:{type:"object",minProperties:1,maxProperties:16,propertyNames:Ct,additionalProperties:{type:"object",additionalProperties:!1,required:["title","provider","roleCode"],properties:{title:$o,provider:{enum:["app_role","app_role_in_scope"]},roleCode:Ct,scope:{type:"object",additionalProperties:!1,required:["dimension"],properties:{dimension:Ct,value:{type:"string",minLength:1,maxLength:255},valueFrom:{type:"string",minLength:1,maxLength:255}}}}}}}};function wt(e){if(!Te(e)||!St(e,["policyCode","title","strategy","dimensions","sources"])||!ke(e.policyCode)||!Me(e.title,128)||!["replace_then_append","replace_only"].includes(e.strategy))return["WORKFLOW_V2_ROUTING_POLICY_INVALID"];let t=[];return(!Te(e.dimensions)||Object.keys(e.dimensions).length>8||Object.entries(e.dimensions).some(([o,n])=>!ke(o)||!Te(n)||!St(n,["title","valueFrom"])||!Me(n.title,128)||!Yi(n.valueFrom)))&&t.push("WORKFLOW_V2_ROUTING_DIMENSIONS_INVALID"),(!Te(e.sources)||Object.keys(e.sources).length<1||Object.keys(e.sources).length>16||Object.entries(e.sources).some(([o,n])=>!ke(o)||!Te(n)||!St(n,["title","provider","roleCode","scope"])||!Me(n.title,128)||!ke(n.roleCode)||!["app_role","app_role_in_scope"].includes(n.provider)||(n.provider==="app_role_in_scope"?!ka(n.scope):n.scope!==void 0)))&&t.push("WORKFLOW_V2_ROUTING_SOURCES_INVALID"),t}function Pa(e,t){if(wt(e).length)return["WORKFLOW_V2_ROUTING_POLICY_INVALID"];if(!Array.isArray(t)||t.length>256||new TextEncoder().encode(JSON.stringify(t)).length>262144)return["WORKFLOW_V2_ROUTING_RULE_LIMIT_EXCEEDED"];let o=[],n=new Set;for(let i of t){if(!Te(i)||!St(i,["ruleCode","title","enabled","workflowCode","nodeId","matches","sourceCode","effect","priority","validFrom","validTo"])||!ke(i.ruleCode)||!Me(i.title,128)||typeof i.enabled!="boolean"||!ke(i.sourceCode)||!Object.hasOwn(e.sources,i.sourceCode)||!["append","replace"].includes(i.effect)||!Number.isSafeInteger(i.priority)||i.priority<-1e3||i.priority>1e3||i.workflowCode!==void 0&&!ke(i.workflowCode)||i.nodeId!==void 0&&(!ke(i.nodeId)||i.workflowCode===void 0)||i.validFrom!==void 0&&!zi(i.validFrom)||i.validTo!==void 0&&!zi(i.validTo)||i.validFrom&&i.validTo&&Date.parse(i.validFrom)>=Date.parse(i.validTo)){o.push("WORKFLOW_V2_ROUTING_RULE_INVALID");continue}n.has(i.ruleCode)&&o.push(`WORKFLOW_V2_ROUTING_RULE_DUPLICATE:${i.ruleCode}`),n.add(i.ruleCode),(!Te(i.matches)||Object.entries(i.matches).some(([s,a])=>!Object.hasOwn(e.dimensions,s)||!Array.isArray(a)||a.length<1||a.length>64||new Set(a).size!==a.length||a.some(r=>!Me(r,255))))&&o.push(`WORKFLOW_V2_ROUTING_MATCH_INVALID:${i.ruleCode}`)}return[...new Set(o)]}function Xi(e){return JSON.stringify({policyCode:e.policyCode,strategy:e.strategy,dimensions:Object.entries(e.dimensions).sort(([t],[o])=>t<o?-1:t>o?1:0).map(([t,o])=>[t,o.valueFrom]),sources:Object.entries(e.sources).sort(([t],[o])=>t<o?-1:t>o?1:0).map(([t,o])=>[t,o.provider,o.roleCode,o.scope?.dimension??null,o.scope?.valueFrom??null,o.scope?.value??null])})}function ko(e){let t=[],o=new Map;for(let n of e)for(let[i,s]of Object.entries(n.bindings||{})){if(!Te(s)||s.routing===void 0)continue;let a=wt(s.routing);if(a.length){t.push(...a.map(l=>`${l}:${i}`));continue}let r=Xi(s.routing),c=o.get(s.routing.policyCode);c&&c!==r&&t.push(`WORKFLOW_V2_ROUTING_POLICY_CONFLICT:${s.routing.policyCode}`),o.set(s.routing.policyCode,r)}return[...new Set(t)]}function Fa(e,t){let o={};for(let[n,i]of Object.entries(e.dimensions)){let s=t;for(let a of i.valueFrom.split("."))s=Te(s)&&Object.hasOwn(s,a)?s[a]:void 0;if(!(typeof s=="string"&&Me(s,255)||typeof s=="number"&&Number.isFinite(s)||typeof s=="boolean"))throw new Error(`WORKFLOW_V2_ROUTING_FACT_REQUIRED:${n}`);o[n]=String(s)}return o}function va(e,t,o){let n=t.filter(l=>l.enabled&&(!l.validFrom||Date.parse(l.validFrom)<=o.at)&&(!l.validTo||Date.parse(l.validTo)>o.at)&&(!l.workflowCode||l.workflowCode===o.workflowCode)&&(!l.nodeId||l.nodeId===o.nodeId)&&Object.entries(l.matches).every(([p,d])=>d.includes(o.facts[p])));if(n.length>64)throw new Error("WORKFLOW_V2_ROUTING_MATCH_LIMIT_EXCEEDED");let i=(l,p)=>p.priority-l.priority||+!!l.workflowCode-+!!p.workflowCode||+!!l.nodeId-+!!p.nodeId||(l.ruleCode<p.ruleCode?-1:l.ruleCode>p.ruleCode?1:0),s=n.filter(l=>l.effect==="replace").sort(i);if(s.length>1&&s[0].priority===s[1].priority)throw new Error("WORKFLOW_V2_ROUTING_REPLACE_CONFLICT");let a=s[0],r=a&&e.strategy==="replace_only"?[]:n.filter(l=>l.effect==="append").sort(i),c=[...a?[a]:[],...r];return{matched:n.sort(i),replacement:a,applied:c,ignored:n.filter(l=>!c.includes(l))}}var Tn=Xs(require("crypto"),1);var Qi="native-4",Zi={"application-native-2":"1.0.0","authz.native-batch-explain":"1.0.0","authz.native-management":"1.0.0","authz.native-membership-batch":"1.0.0","deployment.durable-runs":"1.0.0","deployment.platform-executor":"1.0.0","environment.on-demand-production":"1.0.0","environment.runtime-lifecycle":"1.0.0","data-api-v2":"1.1.0","data.business-commands":"1.0.0","data.record-edit":"1.0.0","data.native-golden-crud":"1.0.0","data.audit-read-access":"1.0.0","data.managed-files":"1.1.0","data.decimal-reservations":"1.1.0","data.decimal-reservation-lifecycle":"1.0.0","data.unique-keys":"1.1.0","data.user-candidates":"1.0.0","data.managed-concurrency":"1.0.0","data.managed-concurrency.durable":"1.0.0","workflow.named-input-sources":"1.0.0","directory-v2":"1.0.0","directory.selected-user":"1.0.0","directory.current-initiator-phone":"1.0.0","events-v2":"1.0.0","events.durable-receipts":"1.0.0","events.capture-policy":"1.0.0","events.native-data-actions":"1.0.0","workflow-kernel-v2":"1.0.0","workflow.business-data-command":"1.0.0","workflow.launch-preflight":"1.0.0","workflow.optional-rejection-comment":"1.0.0","workflow.optional-withdrawal-reason":"1.0.0","data.record-print":"1.0.0","data.workflow-record-deletion":"1.0.0","data.record-comments":"1.0.0","workflow.record-history-read":"1.0.0","workflow.rejection-notification":"1.0.0","workflow.instance-cancellation-policy":"1.0.0","workflow.node-administration":"1.0.0","workflow.assignment-routing":"1.0.0","workflow.role-references":"1.0.0","workflow.delegation-management":"1.0.0","workflow.automatic-cc":"1.0.0","workflow.approval-empty-policy":"1.0.0","workflow.initiator-approval-policy":"1.0.0","workflow.task-page-submit":"1.0.0","workflow.task-private-drafts":"1.0.0","workflow.task-managed-files":"1.0.0","workflow.task-rich-fields":"1.0.0","workflow.task-owned-subtables":"1.0.0","workflow.task-owned-files":"1.0.0","workflow.durable-business-step":"1.0.0","business-process.durable-command":"1.1.0","workflow.fresh-command-token":"1.0.0","notification-hub-v2":"1.0.0","authentication.application-login-surface":"1.0.0","public-access.anonymous-owner-records":"1.0.0"};var ml=5,_l=20,gl=50,Al=50,El=100,at=class extends Error{constructor(o,n){super(o);this.code=o;this.pointer=n;this.name="NativeDataPolicyExpressionV2Error"}code;pointer};function $t(e,t){let o=[],n=(i,s,a)=>{a>5&&Dt("NATIVE_DATA_POLICY_EXPRESSION_DEPTH_EXCEEDED",s);let r=es(i,s),c=["allOf","anyOf"].filter(d=>d in r);if(c.length===0){o.push({rule:r,pointer:s}),o.length>50&&Dt("NATIVE_DATA_POLICY_EXPRESSION_LEAVES_EXCEEDED",s);return}let l=c[0],p=r[l];(c.length!==1||Object.keys(r).length!==1||!Array.isArray(p)||p.length<1||p.length>20)&&Dt("NATIVE_DATA_POLICY_EXPRESSION_GROUP_INVALID",s),p.forEach((d,u)=>n(d,`${s}/${l}/${u}`,a+1))};return n(e,t,1),o}function Po(e,t){$t(e,t);let o=(n,i)=>{let s=es(n,i);if(Array.isArray(s.allOf))return Vo(s.allOf.flatMap((a,r)=>o(a,`${i}/allOf/${r}`)),i);if(Array.isArray(s.anyOf)){let a=[[]];return s.anyOf.forEach((r,c)=>{let l=o(r,`${i}/anyOf/${c}`);a=Vo(a.flatMap(p=>l.map(d=>[...p,...d])),i)}),a}return[[s]]};return Vo(o(e,t),t)}function Vo(e,t){let o=e.reduce((n,i)=>n+i.length,0);return(e.length>50||o>100)&&Dt("NATIVE_DATA_POLICY_EXPRESSION_EXPANSION_EXCEEDED",t),e}function es(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&Dt("NATIVE_DATA_POLICY_EXPRESSION_NODE_INVALID",t),e}function Dt(e,t){throw new at(e,t)}var La="openxiangda.config-bundle/v3",Es="openxiangda.contract-bundle/v3",ts="openxiangda.native-configuration-projection/v1",Vt=Qi,xa=/^[a-f0-9]{64}$/,ja=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,Wa=/^app:[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[A-Za-z0-9:._*-]+$/,Ua=/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/,Ma=/^[a-z][a-z0-9]*(?:[-.][a-z0-9]+)*$/,Ba=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,Ka=/^[A-Za-z][A-Za-z0-9_]{0,62}$/,ns=/^[A-Za-z][A-Za-z0-9_]{0,127}$/,qa=/^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$/,Ja=/^[A-Z][A-Z0-9_]*$/,Ga=/^[a-z][a-z0-9-]{2,63}$/,za=/^[A-Za-z][A-Za-z0-9_-]{0,127}$/,Ha=/^[A-Za-z][A-Za-z0-9_.]{0,127}$/,Ya=16,Xa=2*1024,Qa=new Set(["text.short","text.long","number.integer","number.decimal","boolean","date","time","datetime","option.single","option.multiple","cascade.single","cascade.multiple","user.single","user.multiple","department.single","department.multiple","resource-ref.single","resource-ref.multiple","uuid","serial-number"]),Za=new Set(["overview","database","operations","workflow","members","calendar","document","folder","settings"]),ec=new Set(["approve","reject","return","transfer","delegate","add_assignee","resubmit","withdraw","terminate","admin_reassign","admin_override","retry_resolution"]),tc=4*1024*1024,nc=8*1024*1024,oc=40,ic=1e5,vo=1024*1024,sc="openxiangda.event-handler-manifest/v2",Is="openxiangda.application-route-manifest/v3",os=64,ys=new Set(["id","revision","created_by","updated_by","created_at","updated_at"]),X=Object.freeze({perspectives:100,resources:100,subjectReadSurfaces:50,capabilities:2e3,operations:500,eventConsumers:100,eventProducers:1e3,eventSchemas:100,eventTypes:500,workflows:100,routes:500,adminPages:500,adminNavigationGroups:100,adminNavigationItems:500}),En=["openxiangda.data.record.created.v2","openxiangda.data.record.updated.v2","openxiangda.data.record.deleted.v2"],In=["openxiangda.workflow.node.skipped.v2",tt,"openxiangda.workflow.step.result_received.v2","openxiangda.workflow.step.completed.v2","openxiangda.workflow.step.continuation_failed.v2","openxiangda.workflow.instance.started.v2","openxiangda.workflow.instance.cc_added.v2","openxiangda.workflow.instance.completed.v2","openxiangda.workflow.instance.rejected.v2","openxiangda.workflow.instance.returned.v2","openxiangda.workflow.instance.resumed.v2","openxiangda.workflow.instance.withdrawn.v2","openxiangda.workflow.instance.terminated.v2","openxiangda.workflow.task.created.v2","openxiangda.workflow.task.assigned.v2","openxiangda.workflow.task.assignment_pending.v2","openxiangda.workflow.task.assignment_resolution_failed.v2","openxiangda.workflow.task.approved.v2","openxiangda.workflow.task.completed.v2","openxiangda.workflow.task.rejected.v2","openxiangda.workflow.task.returned.v2","openxiangda.workflow.task.resubmitted.v2","openxiangda.workflow.task.transferred.v2","openxiangda.workflow.task.reassigned.v2","openxiangda.workflow.task.delegated.v2","openxiangda.workflow.task.assignee_added.v2","openxiangda.workflow.task.cancelled.v2","openxiangda.workflow.participant.activated.v2","openxiangda.workflow.participant.completed.v2","openxiangda.workflow.participant.rejected.v2","openxiangda.workflow.participant.returned.v2","openxiangda.workflow.participant.transferred.v2","openxiangda.workflow.participant.reassigned.v2","openxiangda.workflow.participant.delegated.v2","openxiangda.workflow.participant.added.v2","openxiangda.workflow.participant.suspended.v2","openxiangda.workflow.participant.resumed.v2","openxiangda.workflow.participant.cancelled.v2"],rc=new Set(In),yn=class extends Error{code;pointer;identifiers;constructor(t,o,n={}){super(t),this.name="NativeConfigurationCompilerError",this.code=t,this.pointer=o,this.identifiers=Object.fromEntries(Object.entries(n).slice(0,8).map(([i,s])=>[i,String(s).slice(0,128)]))}};function ac(e){let t=S(e.appCode,"/appCode",128);ja.test(t)||m("NATIVE_CONFIG_APP_CODE_INVALID","/appCode");let o=xo(e.expectedConfigDigest,"/expectedConfigDigest"),n=xo(e.expectedContractDigest,"/expectedContractDigest"),i=_s(e.configBytes,tc,"/configBytes","NATIVE_CONFIG_ARTIFACT_TOO_LARGE"),s=_s(e.contractBytes,nc,"/contractBytes","NATIVE_CONTRACT_ARTIFACT_TOO_LARGE");gs(i,o,"/configBytes","NATIVE_CONFIG_DIGEST_MISMATCH"),gs(s,n,"/contractBytes","NATIVE_CONTRACT_DIGEST_MISMATCH");let a=ps(i,"/configBytes","NATIVE_CONFIG_JSON_INVALID","NATIVE_CONFIG_NOT_CANONICAL"),r=ps(s,"/contractBytes","NATIVE_CONTRACT_JSON_INVALID","NATIVE_CONTRACT_NOT_CANONICAL");ms(a,"/config"),ms(r,"/contracts");let c=a,l=r;dc(c,t),lc(l,t,o);let p=uc(c,o,l.generatorVersion);Xc(p,l,c),ne(p)!==ne(l)&&m("NATIVE_CONTRACT_CLOSURE_MISMATCH",jo(p,l,"/contracts"));let d={authz:{appCode:t,...c.authz,perspectives:c.perspectives,capabilityCatalog:p.capabilities},data:{appCode:t,resources:c.data.resources,resourceContracts:p.resources,...p.concurrency?{concurrency:p.concurrency}:{},...p.subjectReadSurfaces?{subjectReadSurfaces:p.subjectReadSurfaces}:{}},events:{appCode:t,...c.events,consumers:p.eventConsumers,producers:p.eventProducers,handlerManifest:p.eventHandlerManifest,eventTypes:p.eventTypes,capturePlans:Ns({resources:c.data.resources,dataPolicies:c.authz.dataPolicies,subscriptions:p.eventConsumers,capturePolicies:c.events.capturePolicies})},workflows:{appCode:t,...c.workflows,contracts:p.workflows},runtime:{appCode:t,requirements:c.runtime,backend:c.backend,frontend:c.frontend},contracts:p},u={authz:ct(d.authz),data:ct(d.data),events:ct(d.events),workflows:ct(d.workflows),runtime:ct(d.runtime),contracts:ct(d.contracts)},g={configDigest:o,contractDigest:n,generatorVersion:l.generatorVersion},I=bs(c),E={schemaVersion:ts,compilerContractVersion:Vt,appCode:t,source:g,projections:u,requiredPlatformCapabilities:I,aggregateDigest:Q({schemaVersion:ts,compilerContractVersion:Vt,appCode:t,source:g,requiredPlatformCapabilities:I,projectionDigests:Object.fromEntries(Object.entries(u).map(([N,y])=>[N,y.digest]))})};return Ps(E)}function bs(e){let t=e.authz.roles,o=e.data.resources,n=e.backend.operations,i=n.filter(f=>f.platformAccess?.directory?.mode==="current-initiator"&&f.platformAccess.directory.fields.includes("phone")),s=(e.data.concurrency?.commands||[]).filter(f=>f.execution?.directory?.mode==="current-initiator"&&f.execution.directory.fields.includes("phone")),a=t.some(f=>f.capabilities.some(b=>b.endsWith(":directory:read")))||o.some(f=>f.schema.fields.some(b=>["user.single","user.multiple","department.single","department.multiple"].includes(b.type)))||n.some(f=>f.platformAccess?.directory),r=!!(e.events.subscriptions.length||e.events.timers.length||e.events.dateTriggers.length||e.events.schemas.length),c=n.some(f=>f.platformAccess?.managedFiles||f.platformAccess?.managedFileCopies)||e.events.subscriptions.some(f=>f.platformAccess?.managedFileCopies),l=e.workflows.definitions.some(f=>f.definition.rejectionNotification!==void 0)||n.some(f=>f.platformAccess?.notification)||e.events.subscriptions.some(f=>f.platformAccess?.notification),p=(f,b,h=!1)=>{let C=o.find($=>$.code===f.definition.subject?.resourceCode)?.schema.fields||[];return Object.values(f.definition.taskPages||{}).some($=>$.fields.some(k=>{if(k.readonly)return!1;let W=C.find(Y=>Y.code===k.code);if(!h&&W&&b.includes(W.type))return!0;if(!k.subtable||!W?.subtable)return!1;let v=o.find(Y=>Y.code===W.subtable.resourceCode)?.schema.fields||[];return k.subtable.fields.some(Y=>!Y.readonly&&v.some(te=>te.code===Y.code&&b.includes(te.type)))}))},d=e.workflows.definitions.filter(f=>p(f,["file","image","signature","text.rich"])),u=e.workflows.definitions.filter(f=>p(f,["signature","text.rich"])),g=e.workflows.definitions.filter(f=>p(f,["file","image","signature","text.rich"],!0)),I=e.workflows.definitions.filter(f=>f.launch.mode==="standalone"||f.launch.mode==="hidden-handoff"),E=n.some(f=>f.platformAccess?.workflow)||I.length>0,N=I.filter(f=>{let b=f.launch.submission;if(!b)return!1;let h=o.find(C=>C.code===f.definition.subject.resourceCode);return[b.create,b.existing].some(C=>C&&Object.values(C.inputs).some($=>$.source==="field"&&h?.schema.fields.some(k=>k.code===$.fieldCode&&k.type.startsWith("resource-ref.")&&k.source)))}),y={resources:o},_={perspectives:e.perspectives,authz:e.authz},A={schemaVersion:e.schemaVersion,appCode:e.appCode,frontend:{routes:e.frontend.routes,user:e.frontend.user,admin:e.frontend.admin,devicePolicy:e.frontend.devicePolicy},backend:{operations:n.map(f=>({code:f.code,method:f.method,path:f.path,capability:f.capability,platformAccess:f.platformAccess||null,...f.browser?{browser:f.browser}:{},ai:f.ai||null}))}};return[...o.some(f=>f.uniqueKeys?.length)?[{code:"data.unique-keys",declaration:o.filter(f=>f.uniqueKeys?.length).map(f=>({code:f.code,uniqueKeys:f.uniqueKeys}))}]:[],...e.data.concurrency?[{code:"data.managed-concurrency",declaration:e.data.concurrency}]:[],...e.data.concurrency?.commands.some(f=>f.mode==="durable")?[{code:"data.managed-concurrency.durable",declaration:e.data.concurrency}]:[],...o.some(f=>f.decimalReservationLifecycle)?[{code:"data.decimal-reservation-lifecycle",declaration:o.filter(f=>f.decimalReservationLifecycle).map(f=>({code:f.code,decimalReservationLifecycle:f.decimalReservationLifecycle}))}]:[],...n.some(f=>f.platformAccess?.dataCommands)?[{code:"data.business-commands",declaration:n.filter(f=>f.platformAccess?.dataCommands)}]:[],...n.some(f=>f.platformAccess?.recordEdit)?[{code:"data.record-edit",declaration:n.filter(f=>f.platformAccess?.recordEdit)}]:[],...n.some(f=>f.platformAccess?.decimalReservation)||e.events.subscriptions.some(f=>f.platformAccess?.decimalReservation)?[{code:"data.decimal-reservations",declaration:[...n.filter(f=>f.platformAccess?.decimalReservation).map(f=>({code:f.code,decimalReservation:f.platformAccess.decimalReservation})),...e.events.subscriptions.filter(f=>f.platformAccess?.decimalReservation).map(f=>({subscriptionCode:f.code,decimalReservation:f.platformAccess.decimalReservation}))]}]:[],{code:"application-native-2",declaration:A},{code:"authz.native-batch-explain",declaration:_},{code:"authz.native-management",declaration:_},{code:"deployment.durable-runs",declaration:A.backend},{code:"deployment.platform-executor",declaration:A.backend},{code:"environment.on-demand-production",declaration:{environments:["preproduction","production"]}},{code:"environment.runtime-lifecycle",declaration:{environments:["preproduction","production"]}},...o.length?[{code:"data-api-v2",declaration:y},{code:"data.native-golden-crud",declaration:y}]:[],...o.some(f=>f.recordComments!==void 0)?[{code:"data.record-comments",declaration:y}]:[],...o.some(f=>f.recordDeletion!==void 0)?[{code:"data.workflow-record-deletion",declaration:y}]:[],...o.some(f=>f.recordPrint!==void 0)?[{code:"data.record-print",declaration:y}]:[],...o.some(f=>f.workflowHistory!==void 0)?[{code:"workflow.record-history-read",declaration:y}]:[],...o.some(Bn)?[{code:"data.audit-read-access",declaration:y}]:[],...a?[{code:"directory-v2",declaration:{roles:t.map(f=>({code:f.code,capabilities:f.capabilities.filter(b=>b.endsWith(":directory:read"))})),resources:o.map(f=>({code:f.code,fields:f.schema.fields.filter(b=>["user.single","user.multiple","department.single","department.multiple"].includes(b.type))})),operations:n.filter(f=>f.platformAccess?.directory).map(f=>({code:f.code,directory:f.platformAccess.directory}))}}]:[],...n.some(f=>f.platformAccess?.directory?.mode==="selected-user")?[{code:"directory.selected-user",declaration:n.filter(f=>f.platformAccess?.directory?.mode==="selected-user").map(f=>({code:f.code,directory:f.platformAccess.directory}))}]:[],...i.length||s.length?[{code:"directory.current-initiator-phone",declaration:{operations:i.map(f=>({code:f.code,directory:f.platformAccess.directory})),commands:s.map(f=>({code:f.code,directory:f.execution.directory}))}}]:[],...c?[{code:"data.managed-files",declaration:{operations:n.filter(f=>f.platformAccess?.managedFiles||f.platformAccess?.managedFileCopies).map(f=>({code:f.code,...f.platformAccess?.managedFiles?{managedFiles:f.platformAccess.managedFiles}:{},...f.platformAccess?.managedFileCopies?{managedFileCopies:f.platformAccess.managedFileCopies}:{}})),subscriptions:e.events.subscriptions.filter(f=>f.platformAccess?.managedFileCopies).map(f=>({code:f.code,managedFileCopies:f.platformAccess.managedFileCopies}))}}]:[],...e.events.subscriptions.some(f=>f.execution)?[{code:"events.native-data-actions",declaration:e.events.subscriptions.filter(f=>f.execution)}]:[],...e.events.capturePolicies?.length?[{code:"events.capture-policy",declaration:e.events.capturePolicies}]:[],...r?[{code:"events-v2",declaration:e.events},{code:"events.durable-receipts",declaration:e.events}]:[],...e.data.resources.some(f=>f.schema.fields.some(b=>b.userCandidates!==void 0))?[{code:"data.user-candidates",declaration:e.data.resources.filter(f=>f.schema.fields.some(b=>b.userCandidates!==void 0))}]:[],...e.workflows.activations.length?[{code:"workflow-kernel-v2",declaration:e.workflows},{code:"workflow.fresh-command-token",declaration:e.workflows}]:[],...e.workflows.definitions.some(f=>f.definition.instanceCommands!==void 0)?[{code:"workflow.instance-cancellation-policy",declaration:e.workflows.definitions.filter(f=>f.definition.instanceCommands!==void 0)}]:[],...e.workflows.definitions.some(f=>f.definition.instanceCommands?.withdraw?.reasonRequired===!1)?[{code:"workflow.optional-withdrawal-reason",declaration:e.workflows.definitions.filter(f=>f.definition.instanceCommands?.withdraw?.reasonRequired===!1)}]:[],...e.workflows.definitions.some(f=>f.definition.rejectionNotification!==void 0)?[{code:"workflow.rejection-notification",declaration:e.workflows.definitions.filter(f=>f.definition.rejectionNotification!==void 0)}]:[],...e.workflows.definitions.some(f=>f.definition.commandHandlers!==void 0)||n.some(f=>f.platformAccess?.workflow?.businessCommands)?[{code:"workflow.business-data-command",declaration:{definitions:e.workflows.definitions.filter(f=>f.definition.commandHandlers!==void 0),operations:n.filter(f=>f.platformAccess?.workflow?.businessCommands)}}]:[],...e.workflows.definitions.some(f=>f.definition.launchPreflight!==void 0)?[{code:"workflow.launch-preflight",declaration:e.workflows.definitions.filter(f=>f.definition.launchPreflight!==void 0)}]:[],...e.workflows.definitions.some(f=>Object.values(f.definition.nodes).some(b=>b.operationPolicy?.reject?.commentRequired===!1))?[{code:"workflow.optional-rejection-comment",declaration:e.workflows.definitions.filter(f=>Object.values(f.definition.nodes).some(b=>b.operationPolicy?.reject?.commentRequired===!1))}]:[],...N.length?[{code:"workflow.named-input-sources",declaration:N}]:[],...e.workflows.definitions.some(f=>Object.values(f.definition.nodes).some(b=>b.administration!==void 0||b.operationPolicy!==void 0))?[{code:"workflow.node-administration",declaration:e.workflows.definitions.filter(f=>Object.values(f.definition.nodes).some(b=>b.administration!==void 0||b.operationPolicy!==void 0))}]:[],...e.workflows.definitions.some(f=>Object.values(f.definition.nodes).some(b=>b.kind==="approval"&&b.emptyPolicy!==void 0))?[{code:"workflow.approval-empty-policy",declaration:e.workflows.definitions.filter(f=>Object.values(f.definition.nodes).some(b=>b.kind==="approval"&&b.emptyPolicy!==void 0))}]:[],...e.workflows.definitions.some(f=>Object.values(f.definition.nodes).some(b=>b.initiatorApprovalPolicy!==void 0))?[{code:"workflow.initiator-approval-policy",declaration:e.workflows.definitions.filter(f=>Object.values(f.definition.nodes).some(b=>b.initiatorApprovalPolicy!==void 0))}]:[],...e.workflows.definitions.some(f=>Object.values(f.definition.nodes).some(b=>b.kind==="cc"))?[{code:"workflow.automatic-cc",declaration:e.workflows.definitions.filter(f=>Object.values(f.definition.nodes).some(b=>b.kind==="cc"))}]:[],...e.workflows.definitions.some(f=>f.definition.taskPages!==void 0)?["workflow.task-page-submit","workflow.task-private-drafts"].map(f=>({code:f,declaration:e.workflows.definitions.filter(b=>b.definition.taskPages!==void 0)})):[],...d.length?[{code:"workflow.task-managed-files",declaration:d}]:[],...g.length?[{code:"workflow.task-owned-files",declaration:g}]:[],...u.length?[{code:"workflow.task-rich-fields",declaration:u}]:[],...e.workflows.definitions.some(f=>Object.values(f.definition.taskPages||{}).some(b=>b.fields.some(h=>h.subtable)))?[{code:"workflow.task-owned-subtables",declaration:e.workflows.definitions.filter(f=>Object.values(f.definition.taskPages||{}).some(b=>b.fields.some(h=>h.subtable)))}]:[],...e.workflows.definitions.some(f=>Object.values(f.definition.nodes).some(b=>b.kind==="action"))?[{code:"workflow.durable-business-step",declaration:e.workflows.definitions.filter(f=>Object.values(f.definition.nodes).some(b=>b.kind==="action"))}]:[],...e.workflows.bindings.some(f=>Object.values(f.binding.bindings).some(b=>b.routing!==void 0))?[{code:"workflow.assignment-routing",declaration:e.workflows.bindings.filter(f=>Object.values(f.binding.bindings).some(b=>b.routing!==void 0))}]:[],...E?[{code:"business-process.durable-command",declaration:{operations:n.filter(f=>f.platformAccess?.workflow).map(f=>({code:f.code,workflow:f.platformAccess.workflow})),definitions:I,activations:e.workflows.activations.filter(f=>I.some(b=>b.definition.code===f.workflowCode))}}]:[],...l?[{code:"notification-hub-v2",declaration:{...e.workflows.definitions.some(f=>f.definition.rejectionNotification!==void 0)?{rejectionNotifications:e.workflows.definitions.filter(f=>f.definition.rejectionNotification!==void 0)}:{},operations:n.filter(f=>f.platformAccess?.notification).map(f=>({code:f.code,notification:f.platformAccess.notification})),subscriptions:e.events.subscriptions.filter(f=>f.platformAccess?.notification).map(f=>({code:f.code,notification:f.platformAccess.notification}))}}]:[],...e.frontend.authentication?[{code:"authentication.application-login-surface",declaration:e.frontend.authentication}]:[],...e.frontend.publicAccess?[{code:"public-access.anonymous-owner-records",declaration:e.frontend.publicAccess}]:[]].map(({code:f,declaration:b})=>({code:f,contractVersion:f==="data.unique-keys"?o.some(h=>uo(h.schema.fields,h.uniqueKeys)==="1.1.0")?"1.1.0":"1.0.0":Zi[f],usageDigest:`sha256:${Q(b)}`})).sort((f,b)=>f.code===b.code?0:f.code<b.code?-1:1)}function Ns(e){let t=new Map,o=new Set(e.resources.map(s=>String(s.code)));for(let[s,a]of w(e.capturePolicies===void 0?[]:e.capturePolicies,"/capturePlan/capturePolicies",100).entries()){let r=`/capturePlan/capturePolicies/${s}`,c=O(a,r);R(c,["resourceCode","mode"],r);let l=G(c.resourceCode,`${r}/resourceCode`);o.has(l)||m("NATIVE_EVENT_CAPTURE_RESOURCE_NOT_FOUND",r,{resourceCode:l}),t.has(l)&&m("NATIVE_EVENT_CAPTURE_POLICY_DUPLICATE",r,{resourceCode:l}),c.mode!=="all"&&c.mode!=="subscribed"&&m("NATIVE_EVENT_CAPTURE_MODE_INVALID",`${r}/mode`),t.set(l,c.mode)}let n=new Map(e.dataPolicies.map((s,a)=>{let r=O(s,`/capturePlan/dataPolicies/${a}`);return[String(r.code),r]})),i=e.subscriptions.map((s,a)=>O(s,`/capturePlan/subscriptions/${a}`));return e.resources.map((s,a)=>{let r=`/capturePlan/resources/${a}`,c=O(s,r),l=G(c.code,`${r}/code`),p=c.schema?O(c.schema,`${r}/schema`):c,d=new Set(w(p.fields||[],`${r}/schema/fields`,500).map((b,h)=>K(O(b,`${r}/schema/fields/${h}`).code,`${r}/schema/fields/${h}/code`))),u=c.dataPolicyCode?P(c.dataPolicyCode,`${r}/dataPolicyCode`):null,g=u?n.get(u):void 0;u&&!g&&m("NATIVE_EVENT_CAPTURE_AUTHZ_POLICY_NOT_FOUND",r,{resourceCode:l,dataPolicyCode:u});let I=new Set;for(let b of g?.rules||[])I.add(String(b.field));if(g?.readExpression)for(let b of $t(g.readExpression,`${r}/readExpression`))I.add(String(b.rule.field));let E=new Set,N=new Set,y=new Set;for(let[b,h]of i.entries()){let C=w(h.eventTypes,`/capturePlan/subscriptions/${b}/eventTypes`,20).map(String);if(!C.some(v=>v.startsWith("openxiangda.data.")))continue;let $=O(h.filter||{},`/capturePlan/subscriptions/${b}/filter`),k=Array.isArray($.resourceCodes)?$.resourceCodes.map(String):[];if(k.length&&!k.includes(l))continue;for(let v of C)En.includes(v)&&y.add(v);for(let v of cc($,`/capturePlan/subscriptions/${b}/filter`))E.add(v);let W=O(h.payload||{},`/capturePlan/subscriptions/${b}/payload`);for(let v of w(W.fields||[],`/capturePlan/subscriptions/${b}/payload/fields`,32))N.add(K(v,`/capturePlan/subscriptions/${b}/payload/fields`))}let _=new Set([...E,...N]),A=new Set([..._,...I]);A.size>os&&m("NATIVE_EVENT_CAPTURE_FIELDS_LIMIT",r,{resourceCode:l,maximum:os});for(let b of A)!d.has(b)&&!(I.has(b)&&ys.has(b))&&m("NATIVE_EVENT_CAPTURE_FIELD_NOT_FOUND",r,{resourceCode:l,field:b});let T=O(c.fieldPolicies||{},`${r}/fieldPolicies`);for(let b of _)T[b]?.mask==="omit"&&m("NATIVE_EVENT_CAPTURE_FIELD_SENSITIVE",r,{resourceCode:l,field:b});let f={resourceCode:l,...t.get(l)==="subscribed"?{capturedEventTypes:[...y].sort()}:{},filterFields:[...E].sort(),projectionFields:[...N].sort(),authorizationFields:[...I].sort(),captureFields:[...A].sort()};return{...f,digest:Q(f)}}).sort((s,a)=>s.resourceCode.localeCompare(a.resourceCode))}function cc(e,t){let o=new Set;for(let[a,r]of w(e.changes||[],`${t}/changes`,16).entries()){let c=O(r,`${t}/changes/${a}`);o.add(K(c.field,`${t}/changes/${a}/field`))}let n=O(e.changedFields||{},`${t}/changedFields`);for(let a of["anyOf","allOf","noneOf"])for(let[r,c]of w(n[a]||[],`${t}/changedFields/${a}`,32).entries())o.add(K(c,`${t}/changedFields/${a}/${r}`));let i=0,s=(a,r,c)=>{c>3&&m("NATIVE_EVENT_FILTER_DEPTH_LIMIT",r);let l=O(a,r);if(l.change){let d=O(l.change,`${r}/change`);o.add(K(d.field,`${r}/change/field`)),i+=1;return}if(l.not){s(l.not,`${r}/not`,c+1);return}let p=l.all?"all":l.any?"any":null;p||m("NATIVE_EVENT_FILTER_CONDITION_INVALID",r);for(let[d,u]of w(l[p],`${r}/${p}`,16).entries())s(u,`${r}/${p}/${d}`,c+1)};return e.where&&s(e.where,`${t}/where`,1),i+=Array.isArray(e.changes)?e.changes.length:0,i>16&&m("NATIVE_EVENT_FILTER_ATOM_LIMIT",t),[...o].sort()}function dc(e,t){R(e,["schemaVersion","compilerContractVersion","appCode","perspectives","authz","backend","data","events","workflows","frontend","runtime"],"/config"),x(e.schemaVersion,La,"/config/schemaVersion"),x(e.compilerContractVersion,Vt,"/config/compilerContractVersion"),x(e.appCode,t,"/config/appCode"),w(e.perspectives,"/config/perspectives",100);let o=O(e.authz,"/config/authz");R(o,["capabilities","roles","scopeDimensions","scopeSources","roleMembershipSources","relationshipGrantSources","dataPolicies","authorizationTransitions"],"/config/authz",["authenticatedUserRoleCode"]),w(o.capabilities,"/config/authz/capabilities",2e3),w(o.roles,"/config/authz/roles",100),w(o.scopeDimensions,"/config/authz/scopeDimensions",100),w(o.scopeSources,"/config/authz/scopeSources",100),w(o.roleMembershipSources,"/config/authz/roleMembershipSources",100),w(o.relationshipGrantSources,"/config/authz/relationshipGrantSources",100),w(o.dataPolicies,"/config/authz/dataPolicies",100),w(o.authorizationTransitions,"/config/authz/authorizationTransitions",100);let n=O(e.backend,"/config/backend");R(n,["secrets","operations"],"/config/backend"),w(n.secrets,"/config/backend/secrets",100),w(n.operations,"/config/backend/operations",500),qc(n.secrets);let i=O(e.data,"/config/data");R(i,["resources"],"/config/data",["resourceDetailRoutes","subjectReadSurfaces","concurrency"]),w(i.resources,"/config/data/resources",100),i.subjectReadSurfaces!==void 0&&w(i.subjectReadSurfaces,"/config/data/subjectReadSurfaces",X.subjectReadSurfaces),i.resourceDetailRoutes!==void 0&&w(i.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100);let s=O(e.events,"/config/events");R(s,["schemas","subscriptions","timers","dateTriggers"],"/config/events",["capturePolicies"]),w(s.schemas,"/config/events/schemas",100),w(s.subscriptions,"/config/events/subscriptions",100),w(s.timers,"/config/events/timers",100),w(s.dateTriggers,"/config/events/dateTriggers",100);let a=O(e.workflows,"/config/workflows");R(a,["definitions","bindings","activations","providers","editableParameters"],"/config/workflows"),w(a.definitions,"/config/workflows/definitions",100),w(a.bindings,"/config/workflows/bindings",100),w(a.activations,"/config/workflows/activations",100),w(a.providers,"/config/workflows/providers",100),w(a.editableParameters,"/config/workflows/editableParameters",100);let r=O(e.frontend,"/config/frontend");R(r,["routes","user","admin","devicePolicy"],"/config/frontend",["authentication","publicAccess"]),w(r.routes,"/config/frontend/routes",500);let c=O(r.user,"/config/frontend/user");R(c,["applicationTodoCenter"],"/config/frontend/user"),lt(c.applicationTodoCenter,"/config/frontend/user/applicationTodoCenter"),Wo(r.devicePolicy,"/config/frontend/devicePolicy"),Object.prototype.hasOwnProperty.call(r,"authentication")&&Ts(r.authentication,r.routes,e,"/config/frontend/authentication"),Object.prototype.hasOwnProperty.call(r,"publicAccess")&&Rc(r.publicAccess,e,"/config/frontend/publicAccess");let l=O(r.admin,"/config/frontend/admin");R(l,["navigation"],"/config/frontend/admin",["access"]),l.access!==void 0&&Rn(l.access,"/config/frontend/admin/access",e.appCode),Dc(l.navigation,"/config/frontend/admin/navigation");let p=O(e.runtime,"/config/runtime");R(p,["protocolCapabilities","health"],"/config/runtime"),F(p.protocolCapabilities,"/config/runtime/protocolCapabilities",100),R(O(p.health,"/config/runtime/health"),["livePath","readyPath","versionPath"],"/config/runtime/health"),x(p.health.livePath,"/__platform/health","/config/runtime/health/livePath"),x(p.health.readyPath,"/__platform/ready","/config/runtime/health/readyPath"),x(p.health.versionPath,"/__platform/version","/config/runtime/health/versionPath")}function lc(e,t,o){R(e,["schemaVersion","compilerContractVersion","generatorVersion","appCode","configDigest","perspectives","resources","capabilities","operations","eventConsumers","eventProducers","eventSchemas","eventHandlerManifest","eventTypes","workflows","routes","routeManifest","adminPages","adminNavigation"],"/contracts",["authentication","publicAccess","adminAccess","subjectReadSurfaces","concurrency"]),x(e.schemaVersion,Es,"/contracts/schemaVersion"),x(e.compilerContractVersion,Vt,"/contracts/compilerContractVersion"),S(e.generatorVersion,"/contracts/generatorVersion",128),x(e.appCode,t,"/contracts/appCode"),x(e.configDigest,o,"/contracts/configDigest"),w(e.perspectives,"/contracts/perspectives",X.perspectives),w(e.resources,"/contracts/resources",X.resources),e.subjectReadSurfaces!==void 0&&w(e.subjectReadSurfaces,"/contracts/subjectReadSurfaces",X.subjectReadSurfaces),w(e.capabilities,"/contracts/capabilities",X.capabilities),w(e.operations,"/contracts/operations",X.operations),w(e.eventConsumers,"/contracts/eventConsumers",X.eventConsumers),w(e.eventProducers,"/contracts/eventProducers",X.eventProducers),w(e.eventSchemas,"/contracts/eventSchemas",X.eventSchemas),O(e.eventHandlerManifest,"/contracts/eventHandlerManifest"),F(e.eventTypes,"/contracts/eventTypes",X.eventTypes),w(e.workflows,"/contracts/workflows",X.workflows),w(e.routes,"/contracts/routes",X.routes),Object.prototype.hasOwnProperty.call(e,"authentication")&&Oc(e.authentication,"/contracts/authentication"),Object.prototype.hasOwnProperty.call(e,"publicAccess")&&Cc(e.publicAccess,"/contracts/publicAccess"),Object.prototype.hasOwnProperty.call(e,"adminAccess")&&Rn(e.adminAccess,"/contracts/adminAccess",t),vc(e.routeManifest,"/contracts/routeManifest",t),Vc(e.adminPages,"/contracts/adminPages"),Pc(e.adminNavigation,"/contracts/adminNavigation")}function uc(e,t,o){let n=mc(e);Uc(e,n),Bc(e),Mc(e),Jc(e);let i=e.events.schemas.map((_,A)=>{let T=`/config/events/schemas/${A}`,f=O(_,T),b=S(f.eventType,`${T}/eventType`,255);return b.startsWith("openxiangda.")&&m("NATIVE_EVENT_SCHEMA_RESERVED",`${T}/eventType`,{eventType:b}),x(f.schemaDigest,Q(O(f.jsonSchema,`${T}/jsonSchema`)),`${T}/schemaDigest`),f}),s=new Set([...En,...In,...i.map(_=>String(_.eventType))]),a=new Map(e.data.resources.map(_=>[String(_.code),new Map(_.schema.fields.map(A=>[String(A.code),String(A.type)]))])),r=ee(e.events.subscriptions.map((_,A)=>{let T=`/config/events/subscriptions/${A}`,f=O(_,T),b=F(f.eventTypes,`${T}/eventTypes`,20);b.forEach((k,W)=>{s.has(k)||m("NATIVE_EVENT_TYPE_NOT_REGISTERED",`${T}/eventTypes/${W}`,{eventType:k})});let h=fo(f,e.data.resources,T),C=pc(f.delivery,b,`${T}/delivery`),$=fc(f.platformAccess,`${T}/platformAccess`,a,e,f);return{code:P(f.code,`${T}/code`),endpointPath:ye(f.endpointPath,`${T}/endpointPath`),eventTypes:b,filter:O(f.filter,`${T}/filter`),payload:h?.payload||O(f.payload,`${T}/payload`),...h?{execution:h.execution}:{},...$?{platformAccess:$}:{},delivery:C}}),_=>_.code),c=new Map(i.map(_=>[String(_.eventType),String(_.dataSchemaVersion)])),l=ee([...e.data.resources.flatMap(_=>En.map(A=>({code:`data:${_.code}:${A}`,source:"data",eventType:A,dataSchemaVersion:"2.0.0",resourceCode:_.code}))),...i.map(_=>({code:`app:${_.eventType}`,source:"app",eventType:_.eventType,dataSchemaVersion:_.dataSchemaVersion})),...e.events.timers.map(_=>({code:_.code,source:"timer",eventType:_.eventType,dataSchemaVersion:c.get(String(_.eventType))||"2.0.0"})),...e.events.dateTriggers.map(_=>({code:_.code,source:"date",eventType:_.eventType,dataSchemaVersion:c.get(String(_.eventType))||"2.0.0",resourceCode:_.resourceCode,field:_.field})),...e.workflows.activations.length?In.filter(_=>!Ao.includes(_)||e.workflows.definitions.some(A=>Object.values(A.definition.nodes).some(T=>T.kind==="action"))).filter(_=>_!=="openxiangda.workflow.node.skipped.v2"||e.workflows.definitions.some(A=>Object.values(A.definition.nodes).some(T=>T.kind==="approval"&&T.emptyPolicy==="skip"))).map(_=>({code:`workflow:${_}`,source:"workflow",eventType:_,dataSchemaVersion:"2.0.0"})):[]],_=>`${_.source}:${_.code}:${_.eventType}`),p=M([...r.flatMap(_=>_.eventTypes),...l.map(_=>String(_.eventType))]);kc(e);let d=Cs(e),u;try{u=eo(e.data.concurrency,e.data.resources,n)}catch(_){throw _ instanceof Qe&&m(_.code,_.pointer,{reason:_.reason}),_}u?.commands.some(_=>_.mode==="durable")&&e.backend?.enabled===!1&&m("NATIVE_MANAGED_CONCURRENCY_INVALID","/data/concurrency",{reason:"durable commands require backend runtime"});let g=gc(e,n),I=Os(e),E=e.workflows.definitions.map(_=>_.definition),N=an(E),y=Io(E,r,!0);y.length&&m(y[0],"/config/events/subscriptions");try{io(e.data.resources,I)}catch(_){throw _ instanceof xe&&m(_.code,_.pointer,{reason:_.reason}),_}return{schemaVersion:Es,compilerContractVersion:Vt,generatorVersion:o,appCode:e.appCode,configDigest:t,perspectives:e.perspectives,resources:_c(e),...g.length?{subjectReadSurfaces:g}:{},...u?{concurrency:u}:{},capabilities:ee(n,_=>_.code),operations:I,eventConsumers:r,eventProducers:l,eventSchemas:i,eventHandlerManifest:{schemaVersion:sc,appCode:e.appCode,handlers:r.filter(_=>!_.execution).map(_=>({code:_.code,endpointPath:_.endpointPath,eventTypes:_.eventTypes,dataSchemaVersions:M(_.eventTypes.map(A=>A.startsWith("openxiangda.")?"2.0.0":c.get(A)||"2.0.0")),maxBodyBytes:65536,receiptProtocolVersion:2,...N[_.code]?{workflowStep:N[_.code]}:{}}))},eventTypes:p,workflows:Ds(e),routes:hn(e),...Object.prototype.hasOwnProperty.call(e.frontend,"authentication")?{authentication:Tc(e)}:{},...Object.prototype.hasOwnProperty.call(e.frontend,"publicAccess")?{publicAccess:Sc(e)}:{},...e.frontend.admin.access?{adminAccess:e.frontend.admin.access}:{},routeManifest:jc(e),adminPages:d,adminNavigation:wc(e)}}function fc(e,t,o,n,i){if(e===void 0)return;let s=O(e,t);R(s,["notification","managedFileCopies","decimalReservation"],t,!0);let a={};if(s.decimalReservation!==void 0)try{a.decimalReservation=Ti(s.decimalReservation,hi(n,i))}catch{m("NATIVE_EVENT_DECIMAL_RESERVATION_INVALID",`${t}/decimalReservation`)}if(s.notification!==void 0){let r=O(s.notification,`${t}/notification`);R(r,["mode"],`${t}/notification`),x(r.mode,"business-standard",`${t}/notification/mode`),a.notification={mode:"business-standard"}}if(s.managedFileCopies!==void 0){let r=w(s.managedFileCopies,`${t}/managedFileCopies`,16);r.length||m("NATIVE_EVENT_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let c=new Set;a.managedFileCopies=ee(r.map((l,p)=>{let d=`${t}/managedFileCopies/${p}`,u=O(l,d);R(u,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],d),x(u.mode,"copy",`${d}/mode`);let g=G(u.sourceResourceCode,`${d}/sourceResourceCode`),I=G(u.targetResourceCode,`${d}/targetResourceCode`),E=o.get(g),N=o.get(I);(!E||!N)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_RESOURCE_INVALID",d);let y=F(u.sourceFieldCodes,`${d}/sourceFieldCodes`,16),_=F(u.targetFieldCodes,`${d}/targetFieldCodes`,16);(!y.length||y.length!==_.length)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_FIELDS_INVALID",d),y.forEach((T,f)=>{let b=E.get(T),h=N.get(_[f]);(!["file","image"].includes(String(b))||b!==h)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_FIELD_INVALID",`${d}/sourceFieldCodes/${f}`)});let A=`${g}:${y.join(",")}=>${I}:${_.join(",")}`;return c.has(A)&&m("NATIVE_EVENT_MANAGED_FILE_COPY_DUPLICATE",d),c.add(A),{mode:"copy",sourceResourceCode:g,sourceFieldCodes:M(y),targetResourceCode:I,targetFieldCodes:M(_)}}),l=>`${l.sourceResourceCode}:${l.sourceFieldCodes.join(",")}=>${l.targetResourceCode}:${l.targetFieldCodes.join(",")}`)}return Object.keys(a).length||m("NATIVE_EVENT_PLATFORM_ACCESS_EMPTY",t),a}function pc(e,t,o){let n=O(e,o);R(n,["timeoutMs","maxAttempts","initialBackoffMs","maxBackoffMs","ordering","concurrency"],o),se(n.timeoutMs,`${o}/timeoutMs`,1e3,3e4),se(n.maxAttempts,`${o}/maxAttempts`,1,12);let i=se(n.initialBackoffMs,`${o}/initialBackoffMs`,1e3,3e5);se(n.maxBackoffMs,`${o}/maxBackoffMs`,i,18e5),se(n.concurrency,`${o}/concurrency`,1,50);let s=S(n.ordering,`${o}/ordering`,32);return["none","record","workflow-instance"].includes(s)||m("NATIVE_EVENT_DELIVERY_ORDERING_INVALID",`${o}/ordering`),s==="workflow-instance"&&t.some(a=>!rc.has(a))&&m("NATIVE_EVENT_WORKFLOW_ORDERING_REQUIRES_WORKFLOW_FACTS",`${o}/ordering`),n}function mc(e){let t=new Map;for(let s of Vs(e.appCode))t.set(s.code,s);for(let[s,a]of e.authz.capabilities.entries()){let r=`/config/authz/capabilities/${s}`,c=O(a,r);R(c,["code","kind","name","description"],r,!0);let l=fe(c.code,`${r}/code`,e.appCode);t.has(l)&&m("NATIVE_CAPABILITY_DUPLICATE",`${r}/code`),["backend","ui"].includes(c.kind)||m("NATIVE_CAPABILITY_KIND_INVALID",`${r}/kind`);let p={code:l,kind:c.kind,name:S(c.name,`${r}/name`,255),source:"explicit",...c.description===void 0?{}:{description:Mo(c.description,`${r}/description`,2e3)}};t.set(l,p)}let o=e.data.resources.map((s,a)=>({pointer:`/config/data/resources/${a}`,resource:Be(s,`/config/data/resources/${a}`,e.appCode)}));for(let{pointer:s,resource:a}of o){let r={read:`\u8BFB\u53D6${a.name}`,create:`\u65B0\u5EFA${a.name}`,update:`\u66F4\u65B0${a.name}`,delete:`\u5220\u9664${a.name}`};for(let c of["read","create","update","delete"]){let l=fe(a.capabilities[c],`${s}/capabilities/${c}`,e.appCode);t.has(l)&&m("NATIVE_CAPABILITY_DUPLICATE",`${s}/capabilities/${c}`),t.set(l,{code:l,kind:"data",name:r[c],source:"data"})}}let n=new Set(t.keys()),i=new Map;for(let{pointer:s,resource:a}of o)for(let[r,c]of Object.entries(a.fieldPolicies)){if(ze(r))continue;let l=O(c,`${s}/fieldPolicies/${r}`);for(let p of["read","create","update"])if(Array.isArray(l[p]))for(let d of F(l[p],`${s}/fieldPolicies/${r}/${p}`,2e3)){if(fe(d,`${s}/fieldPolicies/${r}/${p}`,e.appCode),n.has(d))continue;let u=i.get(d);u&&u!==a.code&&m("NATIVE_CAPABILITY_DUPLICATE",`${s}/fieldPolicies/${r}/${p}`),i.set(d,a.code),!t.has(d)&&t.set(d,{code:d,kind:"data",name:`${a.name}.${r}.${p}`,source:"data"})}}return[...t.values()]}function _c(e){let t=Ac(e);return ee(e.data.resources.map((o,n)=>{let i=Be(o,`/config/data/resources/${n}`,e.appCode),s=t.get(i.code);return{code:i.code,schemaDigest:Q(i.schema),fields:ee(i.schema.fields.map(a=>({code:a.code,type:a.type})),a=>a.code),...s?{detailRouteCode:s}:{}}}),o=>o.code)}function gc(e,t){if(e.data.subjectReadSurfaces===void 0)return[];let o=w(e.data.subjectReadSurfaces,"/config/data/subjectReadSurfaces",X.subjectReadSurfaces),n=new Set(t.map(a=>String(a.code))),i=new Map(e.data.resources.map((a,r)=>{let c=`/config/data/resources/${r}`,l=Be(a,c,e.appCode);return[String(l.code),{resource:l,fields:new Map(w(O(l.schema,`${c}/schema`).fields,`${c}/schema/fields`,500).map(p=>{let d=O(p,`${c}/schema/fields`);return[String(d.code),d]}))}]})),s=new Set;return ee(o.map((a,r)=>{let c=`/config/data/subjectReadSurfaces/${r}`,l=O(a,c);R(l,["code","name","capability","subject","relations"],c);let p=P(l.code,`${c}/code`);s.has(p)&&m("NATIVE_SUBJECT_READ_SURFACE_CODE_DUPLICATE",`${c}/code`),s.add(p);let d=fe(l.capability,`${c}/capability`,e.appCode);n.has(d)||m("NATIVE_SUBJECT_READ_SURFACE_CAPABILITY_NOT_DECLARED",`${c}/capability`);let u=O(l.subject,`${c}/subject`);R(u,["resourceCode","fields"],`${c}/subject`);let g=G(u.resourceCode,`${c}/subject/resourceCode`),I=i.get(g);I||m("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${c}/subject/resourceCode`);let E=F(u.fields,`${c}/subject/fields`,100).map((T,f)=>K(T,`${c}/subject/fields/${f}`));E.length||m("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${c}/subject/fields`);for(let[T,f]of E.entries()){let b=I.fields.get(f);(!b||b.type==="subtable")&&m("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${c}/subject/fields/${T}`)}let N=w(l.relations,`${c}/relations`,8);N.length||m("NATIVE_SUBJECT_READ_SURFACE_RELATIONS_REQUIRED",`${c}/relations`);let y=new Set,_=0,A=ee(N.map((T,f)=>{let b=`${c}/relations/${f}`,h=O(T,b);R(h,["code","resourceCode","foreignKeyField","fields","limit"],b,["order"]);let C=P(h.code,`${b}/code`);y.has(C)&&m("NATIVE_SUBJECT_READ_SURFACE_RELATION_CODE_DUPLICATE",`${b}/code`),y.add(C);let $=G(h.resourceCode,`${b}/resourceCode`),k=i.get($);k||m("NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED",`${b}/resourceCode`);let W=K(h.foreignKeyField,`${b}/foreignKeyField`),v=k.fields.get(W),Y=O(v?.source||{},`${b}/foreignKeyField/source`);(!v||!["uuid","resource-ref.single"].includes(String(v.type))||v.type==="resource-ref.single"&&(Y.kind!=="resource"||Y.resourceCode!==g))&&m("NATIVE_SUBJECT_READ_SURFACE_RELATION_INVALID",`${b}/foreignKeyField`);let te=F(h.fields,`${b}/fields`,100).map((le,V)=>K(le,`${b}/fields/${V}`));te.length||m("NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED",`${b}/fields`);for(let[le,V]of te.entries()){let U=k.fields.get(V);(!U||U.type==="subtable")&&m("NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID",`${b}/fields/${le}`)}let H=w(h.order||[],`${b}/order`,10).map((le,V)=>{let U=`${b}/order/${V}`,L=O(le,U);R(L,["field","direction"],U);let q=K(L.field,`${U}/field`),J=k.fields.get(q);return(!ys.has(q)&&!J||J?.type==="subtable"||J&&!Ye(J.type))&&m("NATIVE_SUBJECT_READ_SURFACE_ORDER_FIELD_INVALID",`${U}/field`),["asc","desc"].includes(String(L.direction))||m("NATIVE_SUBJECT_READ_SURFACE_ORDER_DIRECTION_INVALID",`${U}/direction`),{field:q,direction:L.direction}}),he=se(h.limit,`${b}/limit`,1,100);return _+=he,{code:C,resourceCode:$,foreignKeyField:W,fields:M(te),...H.length?{order:H}:{},limit:he}}),T=>T.code);return _>400&&m("NATIVE_SUBJECT_READ_SURFACE_ROW_LIMIT_EXCEEDED",`${c}/relations`),{code:p,name:S(l.name,`${c}/name`,255),capability:d,subject:{resourceCode:g,fields:M(E)},relations:A}}),a=>a.code)}function Ac(e){let t=e.data.resourceDetailRoutes===void 0?[]:w(e.data.resourceDetailRoutes,"/config/data/resourceDetailRoutes",100),o=new Map(e.data.resources.map((s,a)=>{let r=`/config/data/resources/${a}`,c=Be(s,r,e.appCode);return[c.code,c]})),n=new Map(hn(e).map(s=>[String(s.code),s])),i=new Map;for(let[s,a]of t.entries()){let r=`/config/data/resourceDetailRoutes/${s}`,c=O(a,r);R(c,["resourceCode","desktop","mobile"],r);let l=G(c.resourceCode,`${r}/resourceCode`);i.has(l)&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_DUPLICATE",`${r}/resourceCode`);let p=o.get(l);p||m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_RESOURCE_MISSING",`${r}/resourceCode`);let d=P(c.desktop,`${r}/desktop`),u=P(c.mobile,`${r}/mobile`);d===u&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_INVALID",r);let g=String(p.capabilities.read);for(let[I,E]of[["desktop",d],["mobile",u]]){let N=`${r}/${I}`,y=n.get(E);y||m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_REFERENCE_MISSING",N),y.surface!=="user"&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_SURFACE_INVALID",N);let _=ye(y.path,`${N}/path`),A=[..._.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)],T=I==="mobile"?!_.startsWith("/m/"):_==="/m"||_.startsWith("/m/");(_.includes("*")||_.includes("?")||_.includes("#")||_.split("/").includes("..")||A.length!==1||T)&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_PATH_INVALID",N);let f=Array.isArray(y.access?.allOf)?y.access.allOf:[];y.capability!==g&&!f.includes(g)&&m("NATIVE_DATA_RESOURCE_DETAIL_ROUTE_CAPABILITY_INVALID",N)}i.set(l,{desktop:d,mobile:u})}return i}function Os(e){let t=new Map(e.data.resources.map((a,r)=>{let c=`/config/data/resources/${r}`,l=Be(a,c,e.appCode);return[l.code,new Map(l.schema.fields.map(p=>[String(p.code),p]))]})),o=new Map(e.data.resources.map((a,r)=>{let c=`/config/data/resources/${r}`,l=Be(a,c,e.appCode);return[l.code,new Map(l.schema.fields.map(p=>[String(p.code),String(p.type)]))]})),n=new Set(o.keys()),i=new Set(e.workflows.activations.map((a,r)=>Cn(O(a,`/config/workflows/activations/${r}`).workflowCode,`/config/workflows/activations/${r}/workflowCode`))),s=new Map;return ee(e.backend.operations.map((a,r)=>{let c=`/config/backend/operations/${r}`,l=O(a,c);R(l,["code","method","path","capability","requestSchema","responseSchema","description","platformAccess","browser","ai"],c,!0);let p=S(l.method,`${c}/method`,16);["GET","POST","PUT","PATCH","DELETE"].includes(p)||m("NATIVE_OPERATION_METHOD_INVALID",`${c}/method`);let d=P(l.code,`${c}/code`);bc(l.ai,c,d,p,n);let u=yc(l.platformAccess,`${c}/platformAccess`,o,t,i,new Set(e.authz.roles.map(I=>String(I.code))));if(u?.recordEdit){let I=e.data.resources.find(E=>E.code===u.recordEdit.resourceCode);I?.surface?.mutationOwner!=="action"&&m("NATIVE_RECORD_EDIT_ACTION_OWNER_REQUIRED",`${c}/platformAccess/recordEdit`);for(let E of u.recordEdit.fieldCodes)(!I.fieldPolicies?.[E]?.update?.length||I.surface?.fields?.[E]?.system===!0)&&m("NATIVE_RECORD_EDIT_FIELD_INVALID",`${c}/platformAccess/recordEdit/fieldCodes`)}if(u?.decimalReservation){let I=u.decimalReservation,E=String(I.resourceCode),N=JSON.stringify([I.amountFieldCode,I.currencyFieldCode,I.relationFieldCode,I.parentFieldCode,I.rootFieldCode,I.statusFieldCode,I.parentRelationValue,I.childRelationValue]),y=s.get(E);y&&y!==N&&m("NATIVE_DECIMAL_RESERVATION_MAPPING_CONFLICT",`${c}/platformAccess/decimalReservation`),s.set(E,N)}let g=Ec(l.browser,`${c}/browser`,p,l.requestSchema,l.responseSchema,o,t,e.data.subjectReadSurfaces||[]);return{code:d,method:p,path:ye(l.path,`${c}/path`),requiredCapability:fe(l.capability,`${c}/capability`,e.appCode),requestSchemaDigest:Q(O(l.requestSchema,`${c}/requestSchema`)),responseSchemaDigest:Q(O(l.responseSchema,`${c}/responseSchema`)),...l.description===void 0?{}:{description:Mo(l.description,`${c}/description`,2e3)},...u?{platformAccess:u}:{},...g?{browser:g}:{}}}),a=>a.code)}function Ec(e,t,o,n,i,s,a,r){if(e===void 0)return null;let c=O(e,t);R(c,["exposure","behavior","idempotency","subject"],t,["refreshTargets","fileIntent"]),x(c.exposure,"authenticated",`${t}/exposure`);let l=S(c.behavior,`${t}/behavior`,32);["read","controlled"].includes(l)||m("NATIVE_OPERATION_BROWSER_BEHAVIOR_INVALID",`${t}/behavior`);let p=S(c.idempotency,`${t}/idempotency`,32);(!["none","required"].includes(p)||l==="controlled"&&p!=="required"||l==="read"&&p!=="none")&&m("NATIVE_OPERATION_BROWSER_IDEMPOTENCY_INVALID",`${t}/idempotency`);let d=O(c.subject,`${t}/subject`);R(d,["resourceCode","inputField"],`${t}/subject`);let u=G(d.resourceCode,`${t}/subject/resourceCode`);s.has(u)||m("NATIVE_OPERATION_BROWSER_SUBJECT_RESOURCE_NOT_DECLARED",`${t}/subject/resourceCode`);let g=K(d.inputField,`${t}/subject/inputField`),I=O(n,`${t}/requestSchema`),E=O(i,`${t}/responseSchema`);(I.type!=="object"||I.additionalProperties!==!1||E.type!=="object"||E.additionalProperties!==!1)&&m("NATIVE_OPERATION_BROWSER_SCHEMA_ROOT_INVALID",`${t}/requestSchema`);let N=O(I.properties,`${t}/requestSchema/properties`),y=new Set(I.required===void 0?[]:F(I.required,`${t}/requestSchema/required`,200));(!(g in N)||!y.has(g))&&m("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let _=O(N[g],`${t}/requestSchema/properties/${g}`);(_.type!=="string"||_.format!=="uuid")&&m("NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID",`${t}/subject/inputField`);let A=new Map((Array.isArray(r)?r:[]).map((C,$)=>{let k=O(C,`/config/data/subjectReadSurfaces/${$}`);return[String(k.code),String(O(k.subject,`/config/data/subjectReadSurfaces/${$}/subject`).resourceCode)]})),T=c.refreshTargets===void 0?[]:w(c.refreshTargets,`${t}/refreshTargets`,16),f=new Set,b=ee(T.map((C,$)=>{let k=`${t}/refreshTargets/${$}`,W=O(C,k);R(W,["kind","code"],k),x(W.kind,"subject-surface",`${k}/kind`);let v=P(W.code,`${k}/code`);return(f.has(v)||!A.has(v)||A.get(v)!==u)&&m("NATIVE_OPERATION_BROWSER_REFRESH_TARGET_INVALID",`${k}/code`),f.add(v),{kind:"subject-surface",code:v}}),C=>`${C.kind}:${C.code}`),h=Ic(c.fileIntent,`${t}/fileIntent`,o,l,p,u,N,y,a);return{exposure:"authenticated",behavior:l,idempotency:p,subject:{resourceCode:u,inputField:g},...b.length?{refreshTargets:b}:{},...h?{fileIntent:h}:{}}}function Ic(e,t,o,n,i,s,a,r,c){if(e===void 0)return null;let l=O(e,t);R(l,["recordResourceCode","recordIdInputField","relationField","fileNameField","contentTypeField","sizeField","purposes","maxTtlSeconds","maxBytes"],t),(o!=="GET"||n!=="read"||i!=="none")&&m("NATIVE_OPERATION_FILE_INTENT_BEHAVIOR_INVALID",t);let p=G(l.recordResourceCode,`${t}/recordResourceCode`),d=c.get(p);d||m("NATIVE_OPERATION_FILE_INTENT_RESOURCE_NOT_DECLARED",`${t}/recordResourceCode`);let u=K(l.recordIdInputField,`${t}/recordIdInputField`),g=O(a[u],`${t}/recordIdInputField`);(!r.has(u)||g.type!=="string"||g.format!=="uuid")&&m("NATIVE_OPERATION_FILE_INTENT_RECORD_INPUT_INVALID",`${t}/recordIdInputField`);let I=K(l.relationField,`${t}/relationField`),E=d.get(I);(!E||!["uuid","resource-ref.single"].includes(String(E.type))||String(E.type)==="resource-ref.single"&&(String(O(E.source,`${t}/relationField`).kind||"")!=="resource"||String(O(E.source,`${t}/relationField`).resourceCode||"")!==s))&&m("NATIVE_OPERATION_FILE_INTENT_RELATION_INVALID",`${t}/relationField`);let N=[["fileNameField",["text.short","text.long"]],["contentTypeField",["text.short","text.long"]],["sizeField",["number.integer"]]],y={};for(let[f,b]of N){let h=K(l[f],`${t}/${f}`);b.includes(String(d.get(h)?.type))||m("NATIVE_OPERATION_FILE_INTENT_METADATA_INVALID",`${t}/${f}`),y[f]=h}let _=ee(F(l.purposes,`${t}/purposes`,2),f=>f);(!_.length||_.some(f=>!["preview","download"].includes(f)))&&m("NATIVE_OPERATION_FILE_INTENT_PURPOSE_INVALID",`${t}/purposes`);let A=Number(l.maxTtlSeconds);(!Number.isSafeInteger(A)||A<1||A>300)&&m("NATIVE_OPERATION_FILE_INTENT_TTL_INVALID",`${t}/maxTtlSeconds`);let T=Number(l.maxBytes);return(!Number.isSafeInteger(T)||T<1||T>104857600)&&m("NATIVE_OPERATION_FILE_INTENT_SIZE_INVALID",`${t}/maxBytes`),{recordResourceCode:p,recordIdInputField:u,relationField:I,fileNameField:y.fileNameField,contentTypeField:y.contentTypeField,sizeField:y.sizeField,purposes:_,maxTtlSeconds:A,maxBytes:T}}function yc(e,t,o,n,i,s){if(e===void 0)return null;let a=O(e,t);R(a,["directory","managedFiles","managedFileCopies","notification","workflow","roleAssertions","decimalReservation","dataCommands","recordEdit"],t,!0),Object.keys(a).length===0&&m("NATIVE_OPERATION_PLATFORM_ACCESS_EMPTY",t);let r={};if(a.dataCommands!==void 0){let c=O(a.dataCommands,`${t}/dataCommands`);R(c,["mode"],`${t}/dataCommands`),x(c.mode,"recoverable-native",`${t}/dataCommands/mode`),r.dataCommands={mode:"recoverable-native"}}if(a.recordEdit!==void 0){let c=`${t}/recordEdit`,l=O(a.recordEdit,c);R(l,["resourceCode","fieldCodes"],c);let p=G(l.resourceCode,`${c}/resourceCode`),d=n.get(p),u=F(l.fieldCodes,`${c}/fieldCodes`,200);(!d||!u.length||!r.dataCommands)&&m("NATIVE_RECORD_EDIT_DECLARATION_INVALID",c);for(let g of u){let I=d.get(g);(!I||I.type==="serial-number"||I.type==="subtable")&&m("NATIVE_RECORD_EDIT_FIELD_INVALID",`${c}/fieldCodes`)}r.recordEdit={resourceCode:p,fieldCodes:M(u)}}if(a.roleAssertions!==void 0){let c=O(a.roleAssertions,`${t}/roleAssertions`);R(c,["roleCodes"],`${t}/roleAssertions`);let l=F(c.roleCodes,`${t}/roleAssertions/roleCodes`,20);l.length||m("NATIVE_OPERATION_ROLE_ASSERTIONS_REQUIRED",`${t}/roleAssertions/roleCodes`),l.forEach((p,d)=>{s.has(p)||m("NATIVE_ROLE_REFERENCE_MISSING",`${t}/roleAssertions/roleCodes/${d}`)}),r.roleAssertions={roleCodes:M(l)}}if(a.directory!==void 0){let c=O(a.directory,`${t}/directory`);R(c,["mode","fields"],`${t}/directory`),["current-initiator","selected-user"].includes(String(c.mode))||m("NATIVE_OPERATION_DIRECTORY_MODE_INVALID",`${t}/directory/mode`);let l=new Set(["displayName","employeeNumber","primaryDepartment","departments",...c.mode==="current-initiator"?["phone"]:[]]),p=F(c.fields,`${t}/directory/fields`,l.size);(!p.length||p.some(d=>!l.has(d)))&&m("NATIVE_OPERATION_DIRECTORY_FIELDS_INVALID",`${t}/directory/fields`),r.directory={mode:String(c.mode),fields:M(p)}}if(a.managedFiles!==void 0){let c=w(a.managedFiles,`${t}/managedFiles`,16);c.length||m("NATIVE_OPERATION_MANAGED_FILES_REQUIRED",`${t}/managedFiles`);let l=new Set;r.managedFiles=ee(c.map((p,d)=>{let u=`${t}/managedFiles/${d}`,g=O(p,u);R(g,["resourceCode","fieldCodes","intents"],u);let I=G(g.resourceCode,`${u}/resourceCode`);(l.has(I)||!o.has(I))&&m("NATIVE_OPERATION_MANAGED_FILE_RESOURCE_INVALID",`${u}/resourceCode`),l.add(I);let E=F(g.fieldCodes,`${u}/fieldCodes`,16);(!E.length||E.some(y=>!["file","image","signature","text.rich"].includes(String(o.get(I)?.get(y)||""))))&&m("NATIVE_OPERATION_MANAGED_FILE_FIELD_INVALID",`${u}/fieldCodes`);let N=F(g.intents,`${u}/intents`,2);return(!N.length||N.some(y=>!["create","update"].includes(y)))&&m("NATIVE_OPERATION_MANAGED_FILE_INTENT_INVALID",`${u}/intents`),{resourceCode:I,fieldCodes:M(E),intents:M(N)}}),p=>p.resourceCode)}if(a.managedFileCopies!==void 0){let c=w(a.managedFileCopies,`${t}/managedFileCopies`,16);c.length||m("NATIVE_OPERATION_MANAGED_FILE_COPIES_REQUIRED",`${t}/managedFileCopies`);let l=new Set;r.managedFileCopies=ee(c.map((p,d)=>{let u=`${t}/managedFileCopies/${d}`,g=O(p,u);R(g,["mode","sourceResourceCode","sourceFieldCodes","targetResourceCode","targetFieldCodes"],u),x(g.mode,"copy",`${u}/mode`);let I=G(g.sourceResourceCode,`${u}/sourceResourceCode`),E=G(g.targetResourceCode,`${u}/targetResourceCode`),N=o.get(I),y=o.get(E);(!N||!y)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_RESOURCE_INVALID",u);let _=F(g.sourceFieldCodes,`${u}/sourceFieldCodes`,16),A=F(g.targetFieldCodes,`${u}/targetFieldCodes`,16);(!_.length||_.length!==A.length)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELDS_INVALID",u),_.forEach((f,b)=>{let h=N.get(f),C=y.get(A[b]);(!["file","image"].includes(String(h))||h!==C)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_FIELD_INVALID",`${u}/sourceFieldCodes/${b}`)});let T=`${I}:${_.join(",")}=>${E}:${A.join(",")}`;return l.has(T)&&m("NATIVE_OPERATION_MANAGED_FILE_COPY_DUPLICATE",u),l.add(T),{mode:"copy",sourceResourceCode:I,sourceFieldCodes:M(_),targetResourceCode:E,targetFieldCodes:M(A)}}),p=>`${p.sourceResourceCode}:${p.sourceFieldCodes.join(",")}=>${p.targetResourceCode}:${p.targetFieldCodes.join(",")}`)}if(a.notification!==void 0){let c=O(a.notification,`${t}/notification`);R(c,["mode"],`${t}/notification`),c.mode!=="business-standard"&&m("NATIVE_OPERATION_NOTIFICATION_MODE_INVALID",`${t}/notification/mode`),r.notification={mode:"business-standard"}}if(a.workflow!==void 0){let c=O(a.workflow,`${t}/workflow`);R(c,["codes"],`${t}/workflow`,["businessCommands"]);let l=F(c.codes,`${t}/workflow/codes`,16);(!l.length||l.some(d=>!i.has(d)))&&m("NATIVE_OPERATION_WORKFLOW_CODE_INVALID",`${t}/workflow/codes`);let p=c.businessCommands===void 0?void 0:F(c.businessCommands,`${t}/workflow/businessCommands`,3);p&&(!p.length||p.some(d=>!["approve","reject","withdraw"].includes(d)))&&m("NATIVE_OPERATION_WORKFLOW_BUSINESS_COMMAND_INVALID",`${t}/workflow/businessCommands`),r.workflow={codes:M(l),...p?{businessCommands:M(p)}:{}}}if(a.decimalReservation!==void 0){let c=`${t}/decimalReservation`,l=O(a.decimalReservation,c);R(l,["mode","resourceCode","amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode","parentRelationValue","childRelationValue","eligibleParentStatuses","eligibleChildStatuses"],c);let p=S(l.mode,`${c}/mode`,16);["reserve","commit","release"].includes(p)||m("NATIVE_DECIMAL_RESERVATION_MODE_INVALID",`${c}/mode`);let d=G(l.resourceCode,`${c}/resourceCode`),u=n.get(d);u||m("NATIVE_DECIMAL_RESERVATION_RESOURCE_MISSING",`${c}/resourceCode`);let I=Object.fromEntries(["amountFieldCode","currencyFieldCode","relationFieldCode","parentFieldCode","rootFieldCode","statusFieldCode"].map(f=>[f,K(l[f],`${c}/${f}`)])),E=f=>u.get(I[f]),N=f=>new Set((E(f)?.options||[]).map(b=>String(b.value))),y=P(l.parentRelationValue,`${c}/parentRelationValue`),_=P(l.childRelationValue,`${c}/childRelationValue`),A=F(l.eligibleParentStatuses,`${c}/eligibleParentStatuses`,16),T=F(l.eligibleChildStatuses,`${c}/eligibleChildStatuses`,16);(E("amountFieldCode")?.type!=="number.decimal"||E("amountFieldCode")?.exactDecimal!==!0||E("amountFieldCode")?.precision!==18||E("amountFieldCode")?.scale!==2||E("currencyFieldCode")?.type!=="option.single"||E("relationFieldCode")?.type!=="option.single"||E("parentFieldCode")?.type!=="resource-ref.single"||E("parentFieldCode")?.source?.resourceCode!==d||E("rootFieldCode")?.type!=="uuid"||E("statusFieldCode")?.type!=="option.single"||y===_||!N("relationFieldCode").has(y)||!N("relationFieldCode").has(_)||!A.length||!T.length||A.some(f=>!N("statusFieldCode").has(f))||T.some(f=>!N("statusFieldCode").has(f)))&&m("NATIVE_DECIMAL_RESERVATION_FIELD_INVALID",c),r.decimalReservation={mode:p,resourceCode:d,...I,parentRelationValue:y,childRelationValue:_,eligibleParentStatuses:M(A),eligibleChildStatuses:M(T)}}return r}function bc(e,t,o,n,i){if(e===void 0)return;let s=`${t}/ai`,a=O(e,s);Ma.test(o)||m("NATIVE_OPERATION_AI_CODE_INVALID",`${t}/code`),R(a,["name","description","risk","resources","sideEffects","concurrency","timeoutMs"],s,!0),S(a.name,`${s}/name`,vo),S(a.description,`${s}/description`,vo);let r=S(a.risk,`${s}/risk`,16);["read","write","destructive","external"].includes(r)||m("NATIVE_OPERATION_AI_RISK_INVALID",`${s}/risk`),r==="read"!=(n==="GET")&&m("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${s}/risk`),n==="DELETE"&&!["destructive","external"].includes(r)&&m("NATIVE_OPERATION_AI_METHOD_RISK_MISMATCH",`${s}/risk`);let c=F(a.resources,`${s}/resources`,16);c.length===0&&m("NATIVE_OPERATION_AI_RESOURCE_REQUIRED",`${s}/resources`),c.forEach((p,d)=>{let u=G(p,`${s}/resources/${d}`);i.has(u)||m("NATIVE_OPERATION_AI_RESOURCE_MISSING",`${s}/resources/${d}`)});let l=F(a.sideEffects,`${s}/sideEffects`,20);(r==="read"&&l.length!==0||r!=="read"&&l.length===0)&&m("NATIVE_OPERATION_AI_SIDE_EFFECT_INVALID",`${s}/sideEffects`),a.concurrency!==void 0&&!["none","revision"].includes(S(a.concurrency,`${s}/concurrency`,16))&&m("NATIVE_OPERATION_AI_CONCURRENCY_INVALID",`${s}/concurrency`),a.timeoutMs!==void 0&&se(a.timeoutMs,`${s}/timeoutMs`,100,3e4)}function bn(e){return(e.replace(/\/{2,}/g,"/").replace(/\/$/,"")||"/").split("/").map(o=>o.startsWith(":")?":":o.includes("*")?"*":o).join("/")}function Nc(e,t){let o=O(e,t),n=S(o.type,`${t}/type`,32),i=["code","type","label","presentation","required"],s=n==="sso"?[...i,"provider"]:n==="dingtalk"?[...i,"flow"]:i;R(o,s,t);let a=P(o.code,`${t}/code`),r=S(o.label,`${t}/label`,255),c=S(o.presentation,`${t}/presentation`,16);["primary","secondary"].includes(c)||m("NATIVE_APPLICATION_AUTH_METHOD_PRESENTATION_INVALID",`${t}/presentation`);let l=lt(o.required,`${t}/required`);return["sso","password","dingtalk"].includes(n)||m("NATIVE_APPLICATION_AUTH_METHOD_TYPE_INVALID",`${t}/type`),n==="sso"&&o.provider!=="tenant-default"&&m("NATIVE_APPLICATION_AUTH_SSO_PROVIDER_INVALID",`${t}/provider`),n==="dingtalk"&&!["auto","jsapi","oauth"].includes(S(o.flow,`${t}/flow`,16))&&m("NATIVE_APPLICATION_AUTH_DINGTALK_FLOW_INVALID",`${t}/flow`),{code:a,type:n,label:r,presentation:c,required:l,...n==="sso"?{provider:"tenant-default"}:{},...n==="dingtalk"?{flow:o.flow}:{}}}function is(e,t,o){let n=O(e,o);R(n,["routeCode","path","defaultRouteCode"],o);let i=P(n.routeCode,`${o}/routeCode`),s=ye(n.path,`${o}/path`),a=t==="desktop"?"/login":"/m/login";return(s!==a||/[:*?#\\]/.test(s))&&m("NATIVE_APPLICATION_AUTH_SURFACE_PATH_INVALID",`${o}/path`,{device:t,expectedPath:a}),{routeCode:i,path:s,defaultRouteCode:P(n.defaultRouteCode,`${o}/defaultRouteCode`)}}function Ts(e,t,o,n){if(e===null)return;let i=O(e,n);R(i,["accountMode","registration","methods","surfaces"],n),x(i.accountMode,"existing-platform-users-only",`${n}/accountMode`);let s=O(i.registration,`${n}/registration`);R(s,["mode"],`${n}/registration`),x(s.mode,"reject",`${n}/registration/mode`);let a=w(i.methods,`${n}/methods`,8);a.length===0&&m("NATIVE_APPLICATION_AUTH_METHOD_REQUIRED",`${n}/methods`);let r=a.map((y,_)=>Nc(y,`${n}/methods/${_}`)),c=new Set,l=new Set;for(let[y,_]of r.entries())c.has(_.code)&&m("NATIVE_APPLICATION_AUTH_METHOD_CODE_DUPLICATE",`${n}/methods/${y}/code`),l.has(_.type)&&m("NATIVE_APPLICATION_AUTH_METHOD_TYPE_DUPLICATE",`${n}/methods/${y}/type`),c.add(_.code),l.add(_.type);r.filter(y=>y.presentation==="primary").length!==1&&m("NATIVE_APPLICATION_AUTH_PRIMARY_METHOD_INVALID",`${n}/methods`);let p=O(i.surfaces,`${n}/surfaces`);R(p,["desktop","mobile"],`${n}/surfaces`);let d=is(p.desktop,"desktop",`${n}/surfaces/desktop`),u=is(p.mobile,"mobile",`${n}/surfaces/mobile`);d.routeCode===u.routeCode&&m("NATIVE_APPLICATION_AUTH_SURFACE_CODE_DUPLICATE",`${n}/surfaces/mobile/routeCode`);let g=w(t,"/config/frontend/routes",500),I=new Map;for(let[y,_]of g.entries()){let A=O(_,`/config/frontend/routes/${y}`);I.set(String(A.code||""),A)}let E=new Set((Array.isArray(o.data?.resources)?o.data.resources:[]).map(y=>String(y.code||"")).filter(y=>/^[a-z][a-z0-9-]{0,62}$/.test(y)));for(let[y,_]of[["desktop",d],["mobile",u]]){I.has(_.routeCode)&&m("NATIVE_APPLICATION_AUTH_SURFACE_CODE_CONFLICT",`${n}/surfaces/${y}/routeCode`);let A=/^user\.([a-z][a-z0-9-]{0,62})\.(records|submit)$/.exec(String(_.defaultRouteCode||"")),T=I.get(_.defaultRouteCode),f=String(T?.path||"");if(A&&E.has(A[1])){let h=A[2]==="records"?`/my/${A[1]}`:`/my/${A[1]}/submit`;T={surface:"user",path:y==="mobile"?`/m${h}`:h},f=String(T.path)}let b=y==="desktop"?f==="/m"||f.startsWith("/m/"):!(f==="/m"||f.startsWith("/m/"));(!T||T.surface!=="user"||/[:*]/.test(f)||b)&&m("NATIVE_APPLICATION_AUTH_DEFAULT_ROUTE_INVALID",`${n}/surfaces/${y}/defaultRouteCode`)}let N=hs(o).filter(y=>!y.owner.startsWith("authentication:"));for(let[y,_]of[["desktop",d],["mobile",u]]){let A=N.find(T=>bn(T.path)===bn(_.path));A&&m("NATIVE_APPLICATION_AUTH_SURFACE_PATH_CONFLICT",`${n}/surfaces/${y}/path`,{owner:A.owner})}}function Oc(e,t){if(e===null)return;let o={data:{resources:[]},workflows:{definitions:[]},frontend:{routes:[{code:"auth-desktop-default",path:"/auth-desktop-default",surface:"user"},{code:"auth-mobile-default",path:"/m/auth-mobile-default",surface:"user"}],user:{applicationTodoCenter:!1},admin:{navigation:[]},authentication:e}},n=O(e,t),i=O(n.surfaces,`${t}/surfaces`),s={...n,surfaces:{...i,desktop:{...O(i.desktop,`${t}/surfaces/desktop`),defaultRouteCode:"auth-desktop-default"},mobile:{...O(i.mobile,`${t}/surfaces/mobile`),defaultRouteCode:"auth-mobile-default"}}};Ts(s,o.frontend.routes,{...o,frontend:{...o.frontend,authentication:s}},t)}function Tc(e){let t=e.frontend.authentication;return t===null?null:{accountMode:t.accountMode,registration:{mode:t.registration.mode},methods:t.methods.map(o=>({...o})),surfaces:{desktop:{...t.surfaces.desktop},mobile:{...t.surfaces.mobile}}}}var hc=new Set(["draft.read","draft.update","validate","create","own.list","own.read","public.list","public.read"]);function Rc(e,t,o){let n=O(e,o);R(n,["policies"],o);let i=w(n.policies,`${o}/policies`,16);i.length<1&&m("NATIVE_PUBLIC_POLICY_REQUIRED",o);let s=new Map(t.frontend.routes.map(l=>[l.code,l])),a=new Map(t.data.resources.map(l=>[l.code,l])),r=new Set,c=new Set(i.map(l=>String(l?.code||"")));i.forEach((l,p)=>{let d=`${o}/policies/${p}`,u=O(l,d);R(u,["code","routeCode","mode","resourceCode","operations","fields"],d,["requiredFields","ownRecordFields","publicRecordFields","publicFilters","serverGeneratedFields","schedule","publicSubtableFields","draft","validations"]);let g=P(u.code,`${d}/code`);r.has(g)&&m("NATIVE_PUBLIC_POLICY_DUPLICATE",`${d}/code`);let I=P(u.routeCode,`${d}/routeCode`),E=s.get(I);(!E||E.surface!=="user"||E.capability!==void 0||E.access!==void 0||/[:*]/.test(String(E.path)))&&m("NATIVE_PUBLIC_ROUTE_INVALID",`${d}/routeCode`),x(u.mode,"anonymous",`${d}/mode`);let N=G(u.resourceCode,`${d}/resourceCode`),y=a.get(N);y||m("NATIVE_PUBLIC_RESOURCE_MISSING",`${d}/resourceCode`);let _=new Map(y.schema.fields.map(V=>[String(V.code),String(V.type)])),A=F(u.operations,`${d}/operations`,8);(A.length<1||A.some(V=>!hc.has(V)))&&m("NATIVE_PUBLIC_OPERATION_INVALID",`${d}/operations`),A.includes("draft.read")!==A.includes("draft.update")&&m("NATIVE_PUBLIC_DRAFT_OPERATION_INCOMPLETE",`${d}/operations`);let T=F(u.fields,`${d}/fields`,64);(T.length<1||T.some(V=>!_.has(V)))&&m("NATIVE_PUBLIC_FIELD_INVALID",`${d}/fields`);for(let V of["requiredFields","ownRecordFields","publicRecordFields"]){if(!Object.prototype.hasOwnProperty.call(u,V))continue;F(u[V],`${d}/${V}`,64).some(L=>!T.includes(L))&&m("NATIVE_PUBLIC_FIELD_SCOPE_INVALID",`${d}/${V}`)}let f=Object.prototype.hasOwnProperty.call(u,"serverGeneratedFields")?w(u.serverGeneratedFields,`${d}/serverGeneratedFields`,16):[],b=new Set;f.forEach((V,U)=>{let L=`${d}/serverGeneratedFields/${U}`,q=O(V,L);R(q,["field","kind"],L);let J=K(q.field,`${L}/field`);(b.has(J)||!_.has(J)||T.includes(J)||_.get(J)!=="text.short"&&_.get(J)!=="text.long")&&m("NATIVE_PUBLIC_SERVER_GENERATED_FIELD_INVALID",`${L}/field`),x(q.kind,"random-token",`${L}/kind`),b.add(J)});let h=Object.prototype.hasOwnProperty.call(u,"schedule")?O(u.schedule,`${d}/schedule`):null;if(h){let V=["campusPolicyCode","rulePolicyCode","campusField","ruleCampusField","ruleWeekdaysField","ruleOpenAtField","ruleCloseAtField","ruleSlotMinutesField","ruleAdvanceHoursField","ruleAdvanceDaysField","campusEnabledField","ruleEnabledField","dateField","timeField"];R(h,V,`${d}/schedule`);for(let U of["campusPolicyCode","rulePolicyCode"])P(h[U],`${d}/schedule/${U}`);for(let U of V.filter(L=>!["campusPolicyCode","rulePolicyCode"].includes(L)))K(h[U],`${d}/schedule/${U}`);for(let U of[h.campusField,h.dateField,h.timeField])T.includes(String(U))||m("NATIVE_PUBLIC_SCHEDULE_FIELD_INVALID",`${d}/schedule`);(!c.has(String(h.campusPolicyCode))||!c.has(String(h.rulePolicyCode)))&&m("NATIVE_PUBLIC_SCHEDULE_POLICY_INVALID",`${d}/schedule`)}let C=Object.prototype.hasOwnProperty.call(u,"publicFilters")?w(u.publicFilters,`${d}/publicFilters`,16):[],$=new Set;C.forEach((V,U)=>{let L=`${d}/publicFilters/${U}`,q=O(V,L);R(q,["field","operator","value"],L);let J=K(q.field,`${L}/field`);$.has(J)&&m("NATIVE_PUBLIC_FILTER_DUPLICATE",`${L}/field`),T.includes(J)||m("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${L}/field`),x(q.operator,"eq",`${L}/operator`),["boolean","text.short","text.long","number.integer","number.decimal","date","time"].includes(_.get(J)||"")||m("NATIVE_PUBLIC_FILTER_FIELD_INVALID",`${L}/field`),q.value!==null&&typeof q.value!="string"&&typeof q.value!="number"&&typeof q.value!="boolean"&&m("NATIVE_PUBLIC_FILTER_VALUE_INVALID",`${L}/value`),$.add(J)});let k=Object.prototype.hasOwnProperty.call(u,"publicSubtableFields")?O(u.publicSubtableFields,`${d}/publicSubtableFields`):null;if(k){Object.keys(k).length>64&&m("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${d}/publicSubtableFields`);for(let[V,U]of Object.entries(k)){let L=y.schema.fields.find(Z=>String(Z.code)===V),q=String(L?.subtable?.resourceCode||""),J=a.get(q),Re=new Map((J?.schema?.fields||[]).map(Z=>[String(Z.code),String(Z.type)])),z=F(U,`${d}/publicSubtableFields/${V}`,64);(!T.includes(V)||_.get(V)!=="subtable"||!J||z.length<1||z.some(Z=>!Re.has(Z))||z.some(Z=>Re.get(Z)==="subtable")||z.some(Z=>Re.get(Z)==="signature"))&&m("NATIVE_PUBLIC_SUBTABLE_FIELDS_INVALID",`${d}/publicSubtableFields/${V}`)}}if(A.some(V=>V.startsWith("public."))){Object.prototype.hasOwnProperty.call(u,"publicRecordFields")||m("NATIVE_PUBLIC_RECORD_FIELDS_REQUIRED",`${d}/publicRecordFields`);let V=F(u.publicRecordFields,`${d}/publicRecordFields`,64);(V.length<1||V.some(U=>!T.includes(U))||V.some(U=>_.get(U)==="signature"||_.get(U)==="subtable"&&!k?.[U]))&&m("NATIVE_PUBLIC_RECORD_FIELDS_INVALID",`${d}/publicRecordFields`)}let W=Object.prototype.hasOwnProperty.call(u,"requiredFields")?F(u.requiredFields,`${d}/requiredFields`,64):[],v=y.surface||{},Y=v.fields||{},te=String(v.mutationOwner||"native")==="native"&&v.generated?.create!==!1,H=y.schema.fields.filter(V=>mt(V,Y[V.code])).map(V=>String(V.code));if(A.includes("create")&&!te&&m("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${d}/fields`),A.includes("create")&&!Object.prototype.hasOwnProperty.call(u,"draft")&&m("NATIVE_PUBLIC_DRAFT_REQUIRED",`${d}/draft`),A.includes("create"))for(let V of H){let U=T.includes(V)?W.includes(V)?null:"requiredFields":"fields";U&&m("NATIVE_PUBLIC_CREATE_FIELDS_INCOMPLETE",`${d}/${U}`,{resourceCode:G,fieldCode:V})}if(Object.prototype.hasOwnProperty.call(u,"draft")){let V=O(u.draft,`${d}/draft`);R(V,["enabled","inactivityTtlSeconds","maxBytes"],`${d}/draft`),x(V.enabled,!0,`${d}/draft/enabled`),se(V.inactivityTtlSeconds,`${d}/draft/inactivityTtlSeconds`,3600,7776e3),se(V.maxBytes,`${d}/draft/maxBytes`,4096,262144)}else A.includes("draft.read")&&m("NATIVE_PUBLIC_DRAFT_REQUIRED",`${d}/draft`);let he=Object.prototype.hasOwnProperty.call(u,"validations")?w(u.validations,`${d}/validations`,16):[],le=new Set;he.forEach((V,U)=>{let L=`${d}/validations/${U}`,q=O(V,L);R(q,["code","kind","fields","result"],L);let J=P(q.code,`${L}/code`);le.has(J)&&m("NATIVE_PUBLIC_VALIDATION_DUPLICATE",`${L}/code`),x(q.kind,"duplicate",`${L}/kind`),x(q.result,"availability",`${L}/result`);let Re=F(q.fields,`${L}/fields`,8);(Re.length<1||Re.some(z=>!T.includes(z))||Re.some(z=>["file","subtable"].includes(_.get(z)||"")))&&m("NATIVE_PUBLIC_VALIDATION_FIELD_INVALID",`${L}/fields`),le.add(J)}),r.add(g)})}function Cc(e,t){let o=O(e,t);R(o,["policies"],t),w(o.policies,`${t}/policies`,16).length<1&&m("NATIVE_PUBLIC_POLICY_REQUIRED",t)}function Sc(e){return{policies:ee(e.frontend.publicAccess.policies.map(t=>({code:t.code,routeCode:t.routeCode,mode:t.mode,resourceCode:t.resourceCode,operations:M(t.operations),fields:M(t.fields),...t.requiredFields?{requiredFields:M(t.requiredFields)}:{},...t.ownRecordFields?{ownRecordFields:M(t.ownRecordFields)}:{},...t.publicRecordFields?{publicRecordFields:M(t.publicRecordFields)}:{},...t.publicFilters?{publicFilters:t.publicFilters.map(o=>({field:o.field,operator:o.operator,value:o.value})).sort((o,n)=>me(o.field,n.field))}:{},...t.publicSubtableFields?{publicSubtableFields:Object.fromEntries(Object.entries(t.publicSubtableFields).sort(([o],[n])=>o.localeCompare(n)).map(([o,n])=>[o,M(Array.isArray(n)?n.map(String):[])]))}:{},...t.serverGeneratedFields?{serverGeneratedFields:t.serverGeneratedFields.map(o=>({field:o.field,kind:o.kind})).sort((o,n)=>me(o.field,n.field))}:{},...t.schedule?{schedule:{campusPolicyCode:t.schedule.campusPolicyCode,rulePolicyCode:t.schedule.rulePolicyCode,campusField:t.schedule.campusField,ruleCampusField:t.schedule.ruleCampusField,ruleWeekdaysField:t.schedule.ruleWeekdaysField,ruleOpenAtField:t.schedule.ruleOpenAtField,ruleCloseAtField:t.schedule.ruleCloseAtField,ruleSlotMinutesField:t.schedule.ruleSlotMinutesField,ruleAdvanceHoursField:t.schedule.ruleAdvanceHoursField,ruleAdvanceDaysField:t.schedule.ruleAdvanceDaysField,campusEnabledField:t.schedule.campusEnabledField,ruleEnabledField:t.schedule.ruleEnabledField,dateField:t.schedule.dateField,timeField:t.schedule.timeField}}:{},...t.draft?{draft:{...t.draft}}:{},...t.validations?{validations:ee(t.validations.map(o=>({code:o.code,kind:o.kind,fields:M(o.fields),result:o.result})),o=>o.code)}:{}})),t=>t.code)}}function hs(e){let t=[{owner:"platform:admin-entry",path:"/"},{owner:"platform:admin-entry",path:"/admin"},{owner:"platform:file-preview",path:"/files/:resourceCode/:fileId/preview"}];e.frontend.authentication&&t.push({owner:"authentication:desktop",path:e.frontend.authentication.surfaces.desktop.path},{owner:"authentication:mobile",path:e.frontend.authentication.surfaces.mobile.path});for(let o of e.data.resources){let n=Rs(o),i=`/admin/resources/${o.code}`,s=[["list",i],["detail",`${i}/:id`],["create",`${i}/new`],["update",`${i}/:id/edit`]];for(let[a,r]of s)n[a]&&t.push({owner:`resource:${o.code}:${a}`,path:r},{owner:`resource:${o.code}:${a}:mobile`,path:`/m${r}`})}if(e.frontend.user.applicationTodoCenter===!0&&t.push({owner:"application:todo-center",path:"/todos"},{owner:"application:todo-center:mobile",path:"/m/todos"}),e.workflows.definitions.length>0){t.push({owner:"workflow:work-center",path:"/work-center"},{owner:"workflow:work-center:mobile",path:"/m/work-center"},{owner:"workflow:task",path:"/tasks/:taskId"},{owner:"workflow:task:mobile",path:"/m/tasks/:taskId"},{owner:"workflow:instance",path:"/workflows/:instanceId"},{owner:"workflow:instance:mobile",path:"/m/workflows/:instanceId"});let o=!1;for(let n of e.workflows.definitions)["standalone","hidden-handoff"].includes(n.launch.mode)&&(o=!0);o&&t.push({owner:"workflow:launch",path:"/workflows/:workflowCode/start"},{owner:"workflow:launch:mobile",path:"/m/workflows/:workflowCode/start"})}return t}function hn(e){let t=new Map(hs(e).map(o=>[bn(o.path),o]));return ee(e.frontend.routes.map((o,n)=>{let i=`/config/frontend/routes/${n}`,s=O(o,i);R(s,["code","path","label","surface","parentCode","capability","access","pinned","tabPersistence","keepAlive"],i,!0),["admin","user"].includes(s.surface)||m("NATIVE_ROUTE_SURFACE_INVALID",`${i}/surface`);let a=ye(s.path,`${i}/path`);s.surface==="admin"&&a!=="/admin"&&!a.startsWith("/admin/")&&m("NATIVE_ADMIN_ROUTE_PATH_INVALID",`${i}/path`),s.surface==="user"&&(a==="/admin"||a.startsWith("/admin/"))&&m("NATIVE_USER_ROUTE_PATH_RESERVED",`${i}/path`);let r=bn(a),c=t.get(r);c&&m("NATIVE_ROUTE_PATH_CONFLICT",`${i}/path`,{path:a,owner:c.owner}),t.set(r,{owner:`frontend:${String(s.code||n)}`,path:a});let l=/[:*]/.test(a),p=Uo(s,i,e.appCode),d=s.pinned===void 0?void 0:lt(s.pinned,`${i}/pinned`),u=s.tabPersistence===void 0?l?"none":"session":S(s.tabPersistence,`${i}/tabPersistence`,16),g=s.keepAlive===void 0?"none":S(s.keepAlive,`${i}/keepAlive`,16);return["session","none"].includes(u)||m("NATIVE_ROUTE_TAB_PERSISTENCE_INVALID",`${i}/tabPersistence`),["none","memory"].includes(g)||m("NATIVE_ROUTE_KEEP_ALIVE_INVALID",`${i}/keepAlive`),l&&d===!0&&m("NATIVE_DYNAMIC_ROUTE_PINNED_FORBIDDEN",`${i}/pinned`),l&&u==="session"&&m("NATIVE_DYNAMIC_ROUTE_TAB_PERSISTENCE_FORBIDDEN",`${i}/tabPersistence`),l&&g==="memory"&&m("NATIVE_DYNAMIC_ROUTE_KEEP_ALIVE_FORBIDDEN",`${i}/keepAlive`),{code:P(s.code,`${i}/code`),path:a,label:S(s.label,`${i}/label`,255),surface:s.surface,...s.parentCode===void 0?{}:{parentCode:P(s.parentCode,`${i}/parentCode`)},...p,...d===void 0?{}:{pinned:d},tabPersistence:u,keepAlive:g}}),o=>o.code)}function Rs(e){let t=e.surface===void 0?{}:O(e.surface,"/surface"),o=t.mutationOwner||"native",n=t.generated===void 0?{}:O(t.generated,"/surface/generated"),i=o==="native";return{list:n.list??!0,detail:n.detail??!0,create:n.create??i,update:n.update??i,delete:n.delete??i}}function Cs(e){let t=[];for(let o of ee(e.data.resources,n=>n.code).flatMap(n=>[{resource:n,viewCode:void 0},...(n.surface?.views||[]).map(i=>({viewCode:i.code,resource:{...n,name:i.name,surface:zt(n.surface,i.code)}}))])){let{resource:n,viewCode:i}=o,s=`/admin/resources/${n.code}${i?`/views/${i}`:""}`,a=Rs(n),r=[{operation:"list",kind:"resource-list",path:`${s}`,label:n.name,capability:n.capabilities.read,navigationEligible:!0},{operation:"detail",kind:"resource-detail",path:`${s}/:id`,label:`${n.name}\u8BE6\u60C5`,capability:n.capabilities.read,navigationEligible:!1},{operation:"create",kind:"resource-create",path:`${s}/new`,label:`\u65B0\u589E${n.name}`,capability:n.capabilities.create,navigationEligible:!1},{operation:"update",kind:"resource-update",path:`${s}/:id/edit`,label:`\u7F16\u8F91${n.name}`,capability:n.capabilities.update,navigationEligible:!1}];for(let c of r)a[c.operation]&&t.push({code:`resource:${n.code}${i?`:view:${i}`:""}:${c.operation}`,kind:c.kind,path:c.path,label:c.label,navigationEligible:c.navigationEligible,capability:c.capability,resourceCode:n.code,...i?{viewCode:i}:{}})}for(let o of hn(e))o.surface==="admin"&&t.push({code:`operation:${o.code}`,kind:"operation",path:o.path,label:o.label,navigationEligible:!/[:*]/.test(o.path),routeCode:o.code});return t.sort((o,n)=>me(o.code,n.code))}function Ss(e){return e.kind==="resource"?`resource:${e.resourceCode}${e.viewCode?`:view:${e.viewCode}`:""}:list`:`operation:${e.routeCode}`}function wc(e){return e.frontend.admin.navigation.map((t,o)=>({code:t.code,label:t.label,...t.icon===void 0?{}:{icon:t.icon},order:t.order??o,items:t.items.map((n,i)=>({pageCode:Ss(n.page),...n.label===void 0?{}:{label:n.label},...n.icon===void 0?{}:{icon:n.icon},order:n.order??i})).sort((n,i)=>n.order-i.order||me(n.pageCode,i.pageCode))})).sort((t,o)=>t.order-o.order||me(t.code,o.code))}function Dc(e,t){let o=w(e,t,X.adminNavigationGroups),n=0;o.forEach((i,s)=>{let a=`${t}/${s}`,r=O(i,a);R(r,["code","label","icon","order","items"],a,!0),P(r.code,`${a}/code`),S(r.label,`${a}/label`,255),Nn(r.icon,`${a}/icon`),ds(r.order,`${a}/order`);let c=w(r.items,`${a}/items`,500);c.length===0&&m("NATIVE_ADMIN_GROUP_ORPHANED",`${a}/items`),n+=c.length,n>X.adminNavigationItems&&m("NATIVE_ARRAY_LIMIT_EXCEEDED",t),c.forEach((l,p)=>{let d=`${a}/items/${p}`,u=O(l,d);R(u,["page","label","icon","order"],d,!0),$c(u.page,`${d}/page`),u.label!==void 0&&S(u.label,`${d}/label`,255),Nn(u.icon,`${d}/icon`),ds(u.order,`${d}/order`)})})}function $c(e,t){let o=O(e,t),n=S(o.kind,`${t}/kind`,64);if(n==="resource"){R(o,["kind","resourceCode"],t,["viewCode"]),o.viewCode!==void 0&&P(o.viewCode,`${t}/viewCode`),G(o.resourceCode,`${t}/resourceCode`);return}if(n==="operation"){R(o,["kind","routeCode"],t),P(o.routeCode,`${t}/routeCode`);return}m("NATIVE_ADMIN_PAGE_REFERENCE_KIND_INVALID",`${t}/kind`)}function kc(e){let t=new Map(Cs(e).map(i=>[String(i.code),i])),o=new Set,n=new Set;e.frontend.admin.navigation.forEach((i,s)=>{let a=`/config/frontend/admin/navigation/${s}`;o.has(i.code)&&m("NATIVE_ADMIN_GROUP_DUPLICATE",`${a}/code`),o.add(i.code),i.label===i.code&&m("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${a}/label`),i.items.forEach((r,c)=>{let l=`${a}/items/${c}`,p=Ss(r.page),d=t.get(p);(!d||d.navigationEligible!==!0)&&m("NATIVE_ADMIN_PAGE_NOT_FOUND",`${l}/page`),n.has(p)&&m("NATIVE_ADMIN_PAGE_DUPLICATE",`${l}/page`),n.add(p);let u=r.page.resourceCode||r.page.routeCode||r.page.workflowCode||p,g=r.label||d.label;(!g||g===u||g===p)&&m("NATIVE_ADMIN_USER_LABEL_REQUIRED",`${l}/label`)})})}function Vc(e,t){let o=w(e,t,X.adminPages),n=new Set;o.forEach((i,s)=>{let a=`${t}/${s}`,r=O(i,a);R(r,["code","kind","path","label","navigationEligible","capability","access","resourceCode","viewCode","routeCode"],a,!0);let c=S(r.code,`${a}/code`,255);n.has(c)&&m("NATIVE_ADMIN_PAGE_DUPLICATE",`${a}/code`),n.add(c);let l=S(r.kind,`${a}/kind`,64);if(["resource-list","resource-detail","resource-create","resource-update","operation"].includes(l)||m("NATIVE_ADMIN_PAGE_KIND_INVALID",`${a}/kind`),ye(r.path,`${a}/path`),S(r.label,`${a}/label`,255),lt(r.navigationEligible,`${a}/navigationEligible`),r.capability!==void 0&&r.access!==void 0&&m("NATIVE_ROUTE_ACCESS_CONFLICT",`${a}/access`),r.capability!==void 0&&S(r.capability,`${a}/capability`,255),r.access!==void 0){let p=O(r.access,`${a}/access`);R(p,["allOf","anyOf"],`${a}/access`,!0);for(let d of["allOf","anyOf"])p[d]!==void 0&&F(p[d],`${a}/access/${d}`,50)}for(let p of["resourceCode","viewCode","routeCode"])r[p]!==void 0&&P(r[p],`${a}/${p}`)})}function Pc(e,t){let o=w(e,t,X.adminNavigationGroups),n=0;o.forEach((i,s)=>{let a=`${t}/${s}`,r=O(i,a);R(r,["code","label","icon","order","items"],a,!0),P(r.code,`${a}/code`),S(r.label,`${a}/label`,255),Nn(r.icon,`${a}/icon`),se(r.order,`${a}/order`,-1e4,1e4);let c=w(r.items,`${a}/items`,500);c.length===0&&m("NATIVE_ADMIN_GROUP_ORPHANED",`${a}/items`),n+=c.length,n>X.adminNavigationItems&&m("NATIVE_ARRAY_LIMIT_EXCEEDED",t),c.forEach((l,p)=>{let d=`${a}/items/${p}`,u=O(l,d);R(u,["pageCode","label","icon","order"],d,!0),S(u.pageCode,`${d}/pageCode`,255),u.label!==void 0&&S(u.label,`${d}/label`,255),Nn(u.icon,`${d}/icon`),se(u.order,`${d}/order`,-1e4,1e4)})})}var Fc=new Set(["application-todo-center","workflow-work-center","workflow-launch","workflow-task","workflow-instance","resource-records","resource-submit"]);function vc(e,t,o){let n=O(e,t);R(n,["schemaVersion","appCode","devicePolicy","rootEntry","authentication","routes","digest"],t),x(n.schemaVersion,Is,`${t}/schemaVersion`),x(n.appCode,o,`${t}/appCode`),Wo(n.devicePolicy,`${t}/devicePolicy`),Lc(n.rootEntry,`${t}/rootEntry`),xc(n.authentication,`${t}/authentication`),xo(n.digest,`${t}/digest`);let i=w(n.routes,`${t}/routes`,X.routes),s=new Set;i.forEach((a,r)=>{let c=`${t}/routes/${r}`,l=O(a,c),p=l.kind==="resource-records"||l.kind==="resource-submit";R(l,["code","kind","desktop","mobile"],c,["workflowCode",...p?["resourceCode"]:[]]);let d=S(l.code,`${c}/code`,255);s.has(d)&&m("NATIVE_ROUTE_MANIFEST_DUPLICATE",`${c}/code`),s.add(d);let u=S(l.kind,`${c}/kind`,64);if(Fc.has(u)||m("NATIVE_ROUTE_MANIFEST_KIND_INVALID",`${c}/kind`),l.workflowCode!==void 0&&P(l.workflowCode,`${c}/workflowCode`),p){let E=G(l.resourceCode,`${c}/resourceCode`);x(d,`user.${E}.${l.kind==="resource-records"?"records":"submit"}`,`${c}/code`)}else l.resourceCode!==void 0&&m("NATIVE_PROPERTY_UNKNOWN",`${c}/resourceCode`);let g=rs(l.desktop,`${c}/desktop`,o),I=rs(l.mobile,`${c}/mobile`,o);g.surface!=="user"&&m("NATIVE_ROUTE_MANIFEST_DESKTOP_SURFACE_INVALID",`${c}/desktop/surface`),I.surface!=="user"&&m("NATIVE_ROUTE_MANIFEST_MOBILE_SURFACE_INVALID",`${c}/mobile/surface`),g.routeCode===I.routeCode&&m("NATIVE_ROUTE_MANIFEST_PAIR_DUPLICATE",c)}),x(n.digest,Q({schemaVersion:n.schemaVersion,appCode:n.appCode,devicePolicy:n.devicePolicy,rootEntry:n.rootEntry,authentication:n.authentication,routes:n.routes}),`${t}/digest`)}function Wo(e,t){let o=O(e,t);R(o,["kind","mobileMaxWidthPx","desktopMinWidthPx"],t),x(o.kind,"viewport-family",`${t}/kind`);let n=se(o.mobileMaxWidthPx,`${t}/mobileMaxWidthPx`,320,1600),i=se(o.desktopMinWidthPx,`${t}/desktopMinWidthPx`,320,1600);return i!==n+1&&m("NATIVE_FRONTEND_DEVICE_POLICY_INVALID",t),{kind:"viewport-family",mobileMaxWidthPx:n,desktopMinWidthPx:i}}function Lc(e,t){let o=O(e,t);R(o,["code","desktop","mobile"],t);let n=P(o.code,`${t}/code`),i=Lo(o.desktop,`${t}/desktop`),s=Lo(o.mobile,`${t}/mobile`);return(i===s||s==="/"||!s.startsWith("/m/"))&&m("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",t),i.startsWith("/m/")&&m("NATIVE_ROUTE_MANIFEST_ROOT_ENTRY_INVALID",`${t}/desktop`),{code:n,desktop:i,mobile:s}}function xc(e,t){let o=O(e,t);R(o,["desktop","mobile"],t);let n=ss(o.desktop,`${t}/desktop`,!1),i=ss(o.mobile,`${t}/mobile`,!0);return(n.routeCode===i.routeCode||n.path===i.path)&&m("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_DUPLICATE",t),{desktop:n,mobile:i}}function ss(e,t,o){let n=O(e,t);R(n,["routeCode","path"],t);let i=P(n.routeCode,`${t}/routeCode`),s=Lo(n.path,`${t}/path`);return(o?!s.startsWith("/m/"):s.startsWith("/m/"))&&m("NATIVE_ROUTE_MANIFEST_AUTHENTICATION_PATH_INVALID",`${t}/path`),{routeCode:i,path:s}}function Lo(e,t){let o=ye(e,t);return/[:*?#\\\\]/.test(o)&&m("NATIVE_ROUTE_MANIFEST_STATIC_PATH_INVALID",t),o}function rs(e,t,o){let n=O(e,t);R(n,["routeCode","path","surface","pathParams","requiresAuthentication"],t,["capability","access"]),P(n.routeCode,`${t}/routeCode`);let i=ye(n.path,`${t}/path`),s=S(n.surface,`${t}/surface`,16);["admin","user"].includes(s)||m("NATIVE_ROUTE_SURFACE_INVALID",`${t}/surface`);let a=F(n.pathParams,`${t}/pathParams`,8);return a.forEach((r,c)=>{(!/^[A-Za-z][A-Za-z0-9_]*$/.test(r)||r.length>64)&&m("NATIVE_ROUTE_PATH_PARAM_INVALID",`${t}/pathParams/${c}`)}),ne(a)!==ne(ws(i))&&m("NATIVE_ROUTE_PATH_PARAMS_MISMATCH",`${t}/pathParams`),Uo(n,t,o),n.requiresAuthentication!==!0&&m("NATIVE_ROUTE_AUTHENTICATION_REQUIRED",`${t}/requiresAuthentication`),n}function ws(e){return M([...e.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(t=>t[1]))}function as(e,t,o,n){return{routeCode:e,path:t,surface:o,pathParams:ws(t),...n?.capability?{capability:n.capability}:{},...n?.access?{access:n.access}:{},requiresAuthentication:!0}}function cs(e,t,o,n){return e==="workflow-launch"?`workflow.${o}.launch.${t}`:e==="application-todo-center"?`application.todo-center.${t}`:e==="resource-records"?`user.${n}.records.${t}`:e==="resource-submit"?`user.${n}.submit.${t}`:`${e.replace(/-/g,".")}.${t}`}function jc(e){let t=e.appCode,o=[],n=(g,I,E,N,y,_,A)=>{o.push({code:g,kind:I,...y?{workflowCode:y}:{},...A?{resourceCode:A}:{},desktop:as(cs(I,"desktop",y,A),E,"user",_),mobile:as(cs(I,"mobile",y,A),N,"user",_)})};e.frontend.user.applicationTodoCenter===!0&&n("application:todo-center","application-todo-center","/todos","/m/todos");let i=Ds(e);i.length>0&&(n("workflow:work-center","workflow-work-center","/work-center","/m/work-center"),n("workflow:task","workflow-task","/tasks/:taskId","/m/tasks/:taskId"),n("workflow:instance","workflow-instance","/workflows/:instanceId","/m/workflows/:instanceId"));for(let g of i){if(!["standalone","hidden-handoff"].includes(g.launch.mode))continue;let I=M([g.launch.submission?.create?.requiredCapability,g.launch.submission?.existing?.requiredCapability].filter(E=>!!E));n(`workflow:${g.code}:launch`,"workflow-launch","/workflows/:workflowCode/start","/m/workflows/:workflowCode/start",g.code,I.length===1?{capability:I[0]}:I.length>1?{access:{anyOf:I}}:void 0)}let s=o.sort((g,I)=>me(String(g.code),String(I.code))),a=hn(e),r=g=>{let I=g==="mobile"?"/m/":"/",E=a.filter(y=>y.surface==="user"&&!/[:*?#\\\\]/.test(y.path)&&y.path===I).sort((y,_)=>me(y.code,_.code))[0];if(E)return{code:E.code,path:E.path};let N=a.filter(y=>y.surface==="user"&&!/[:*?#\\\\]/.test(y.path)&&(g==="mobile"?y.path.startsWith("/m/"):!y.path.startsWith("/m/"))).sort((y,_)=>me(y.code,_.code))[0];return N?{code:N.code,path:N.path}:{code:g==="mobile"?"application-root-mobile":"application-root",path:I}},c=e.frontend.authentication?{desktop:{routeCode:e.frontend.authentication.surfaces.desktop.routeCode,path:e.frontend.authentication.surfaces.desktop.path},mobile:{routeCode:e.frontend.authentication.surfaces.mobile.routeCode,path:e.frontend.authentication.surfaces.mobile.path}}:{desktop:{routeCode:"application-login",path:"/login"},mobile:{routeCode:"application-login-mobile",path:"/m/login"}},l=Wo(e.frontend.devicePolicy,"/config/frontend/devicePolicy"),p=r("desktop"),d=r("mobile"),u={schemaVersion:Is,appCode:t,devicePolicy:l,rootEntry:{code:p.code,desktop:p.path,mobile:d.path},authentication:c,routes:s};return{...u,digest:Q(u)}}function Nn(e,t){if(e===void 0)return;let o=S(e,t,32);Za.has(o)||m("NATIVE_ADMIN_ICON_INVALID",t)}function ds(e,t){e!==void 0&&se(e,t,-1e4,1e4)}function Uo(e,t,o){return e.capability!==void 0&&e.access!==void 0&&m("NATIVE_ROUTE_ACCESS_CONFLICT",`${t}/access`),e.capability!==void 0?{capability:fe(e.capability,`${t}/capability`,o)}:e.access===void 0?{}:{access:Rn(e.access,`${t}/access`,o)}}function Rn(e,t,o){let n=O(e,t);R(n,["allOf","anyOf"],t,!0);let i=n.allOf===void 0?void 0:M(F(n.allOf,`${t}/allOf`,50).map((a,r)=>fe(a,`${t}/allOf/${r}`,o))),s=n.anyOf===void 0?void 0:M(F(n.anyOf,`${t}/anyOf`,50).map((a,r)=>fe(a,`${t}/anyOf/${r}`,o)));return(i?.length||0)+(s?.length||0)===0&&m("NATIVE_ROUTE_ACCESS_EMPTY",t),{...i===void 0?{}:{allOf:i},...s===void 0?{}:{anyOf:s}}}function Ds(e){let t=new Map(Os(e).map(i=>[String(i.code),i])),o=e.workflows.definitions.map((i,s)=>{let a=`/config/workflows/definitions/${s}`,r=O(i,a);R(r,["version","definition","launch"],a,["detailRouteCode"]);let c=O(r.definition,`${a}/definition`),l=r.detailRouteCode===void 0?void 0:ks(r.detailRouteCode,`${a}/detailRouteCode`);return{code:P(c.code,`${a}/definition/code`),title:S(c.title,`${a}/definition/title`,255),version:dt(r.version,`${a}/version`),launch:Wc(e,c,r.launch,`${a}/launch`,t),...l?{detailRouteCode:l}:{},definition:c}});return M(o.map(i=>i.code)).map(i=>{let s=o.filter(l=>l.code===i),a=e.workflows.activations.find(l=>l.workflowCode===i)?.definitionVersion,r=s.find(l=>l.version===a)||[...s].sort((l,p)=>p.version-l.version)[0],c=new Set;for(let l of s){let p=O(l.definition.nodes,"/config/workflows/definitions/nodes");for(let d of Object.values(p)){let u=O(d,"/config/workflows/definitions/nodes/*");if(u.kind==="approval")for(let g of F(u.allowedOperations||[],"/config/workflows/definitions/nodes/*/allowedOperations",20))c.add(g)}}return{code:i,title:r.title,acceptedCommandDeactivationPolicy:r.definition.acceptedCommandDeactivationPolicy,subject:r.definition.subject,launch:r.launch,...["standalone","hidden-handoff"].includes(r.launch.mode)&&!r.launch.submission?{processOperationCode:`openxiangda.workflow.${i}.submit`}:{},...r.detailRouteCode?{detailRouteCode:r.detailRouteCode}:{},definitionVersions:As(s.map(l=>l.version)),bindingVersions:As(e.workflows.bindings.map((l,p)=>{let d=`/config/workflows/bindings/${p}`,u=O(l,d),g=O(u.binding,`${d}/binding`);return{code:P(g.workflowCode,`${d}/binding/workflowCode`),version:dt(u.version,`${d}/version`)}}).filter(l=>l.code===i).map(l=>l.version)),providerCodes:M(e.workflows.providers.map((l,p)=>P(O(l,`/config/workflows/providers/${p}`).code,`/config/workflows/providers/${p}/code`))),allowedOperations:[...c].sort(me),editableParameterCodes:M(e.workflows.editableParameters.map((l,p)=>{let d=`/config/workflows/editableParameters/${p}`,u=O(l,d);return{code:P(u.code,`${d}/code`),workflowCode:P(u.workflowCode,`${d}/workflowCode`)}}).filter(l=>l.workflowCode===i).map(l=>l.code))}})}function $s(e,t){let o=O(e,t);R(o,["mode"],t,["submission"]);let n=S(o.mode,`${t}/mode`,32);return["standalone","custom-page","hidden-handoff","work-center-only"].includes(n)||m("NATIVE_WORKFLOW_LAUNCH_MODE_INVALID",`${t}/mode`),{mode:n,...o.submission===void 0?{}:{submission:O(o.submission,`${t}/submission`)}}}function Wc(e,t,o,n,i){let s=$s(o,n);if(!s.submission)return{mode:s.mode};["standalone","hidden-handoff"].includes(s.mode)||m("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${n}/submission`);let a=O(s.submission,`${n}/submission`);R(a,["kind"],`${n}/submission`,["create","existing","context"]),x(a.kind,"named-operation",`${n}/submission/kind`);let r=n.endsWith("/launch")?n.slice(0,-7):n,c=O(t.subject,`${r}/definition/subject`),l=G(c.resourceCode,`${r}/definition/subject/resourceCode`),p=e.data.resources.findIndex(b=>b.code===l),d=e.data.resources[p];(p<0||!d)&&m("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${r}/definition/subject/resourceCode`);let u=new Set(O(d.schema,`/config/data/resources/${p}/schema`).fields.map(b=>String(b.code))),g=new Map(e.backend.operations.map(b=>[String(b.code),b])),I=(b,h)=>{let C=`${n}/submission/${h}`,$=O(b,C);R($,["operationCode","inputs","output"],C);let k=P($.operationCode,`${C}/operationCode`),W=g.get(k),v=i.get(k),Y=v?.platformAccess?.workflow?.codes;(!W||!v||v.method!=="POST"||!Array.isArray(Y)||!Y.includes(t.code))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INVALID",C);let te=O(W.requestSchema,`${C}/operation/requestSchema`),H=O(te.properties,`${C}/operation/requestSchema/properties`),he=new Set(te.required===void 0?[]:F(te.required,`${C}/operation/requestSchema/required`,64)),le=O($.inputs,`${C}/inputs`),V=Object.entries(le);(!V.length||V.length>64)&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${C}/inputs`);let U=new Set,L=new Map,q={};for(let[z,Z]of V){(!ns.test(z)||!Object.prototype.hasOwnProperty.call(H,z))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${C}/inputs/${z}`);let qe=`${C}/inputs/${z}`,Dn=O(Z,qe),Le=S(Dn.source,`${qe}/source`,32);if(["field","idempotency-key","current-user-reference","subject-id","subject-revision","requested-at"].includes(Le)||m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",qe),R(Dn,["source"],qe,Le==="field"?["fieldCode"]:!1),L.set(Le,(L.get(Le)||0)+1),Le==="field"){let Ft=K(Dn.fieldCode,`${qe}/fieldCode`);(U.has(Ft)||!u.has(Ft))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${qe}/fieldCode`),U.add(Ft),q[z]={source:Le,fieldCode:Ft}}else q[z]={source:Le}}([...he].some(z=>!(z in le))||(L.get("idempotency-key")||0)!==1||!V.some(([z,Z])=>O(Z,`${C}/inputs/${z}`).source==="idempotency-key"&&he.has(z))||h==="create"&&((L.get("subject-id")||0)>0||(L.get("subject-revision")||0)>0)||h==="existing"&&((L.get("subject-id")||0)!==1||(L.get("subject-revision")||0)!==1))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_INPUT_INVALID",`${C}/inputs`);let J=O($.output,`${C}/output`);R(J,["subjectId"],`${C}/output`,["subjectRevision","processCommand"]);let Re=O(O(W.responseSchema,`${C}/operation/responseSchema`).properties,`${C}/operation/responseSchema/properties`);for(let z of["subjectId","subjectRevision","processCommand"]){if(J[z]===void 0)continue;let Z=S(J[z],`${C}/output/${z}`,128);(!ns.test(Z)||!Object.prototype.hasOwnProperty.call(Re,Z))&&m("NATIVE_WORKFLOW_NAMED_OPERATION_OUTPUT_INVALID",`${C}/output/${z}`)}return{operationCode:k,method:"POST",path:v.path,requiredCapability:v.requiredCapability,requestSchemaDigest:v.requestSchemaDigest,responseSchemaDigest:v.responseSchemaDigest,inputs:q,output:{...J},fieldCodes:U}},E=a.create===void 0?void 0:I(a.create,"create"),N=a.existing===void 0?void 0:I(a.existing,"existing");!E&&!N&&m("NATIVE_WORKFLOW_NAMED_OPERATION_SUBMISSION_INVALID",`${n}/submission`);let y=new Set([...E?.fieldCodes||[],...N?.fieldCodes||[]]),_=a.context===void 0?[]:w(a.context,`${n}/submission/context`,16),A=new Set,T=_.map((b,h)=>{let C=`${n}/submission/context/${h}`,$=O(b,C);R($,["queryParameter","fieldCode"],C);let k=S($.queryParameter,`${C}/queryParameter`,64),W=K($.fieldCode,`${C}/fieldCode`);return(!/^[A-Za-z][A-Za-z0-9]{0,63}$/.test(k)||A.has(k)||!y.has(W))&&m("NATIVE_WORKFLOW_LAUNCH_CONTEXT_INVALID",C),A.add(k),{queryParameter:k,fieldCode:W}}),f=b=>{let{fieldCodes:h,...C}=b;return C};return{mode:s.mode,submission:{kind:"named-operation",...E?{create:f(E)}:{},...N?{existing:f(N)}:{},context:T}}}function ks(e,t){let o=O(e,t);R(o,["desktop","mobile"],t);let n=P(o.desktop,`${t}/desktop`),i=P(o.mobile,`${t}/mobile`);return n===i&&m("NATIVE_WORKFLOW_DETAIL_ROUTE_DUPLICATE",t),{desktop:n,mobile:i}}function Uc(e,t){let o=new Set(t.map(p=>p.code)),n=new Map;e.data.resources.forEach((p,d)=>{let u=`/config/data/resources/${d}`,g=O(p,u);if(g.recordDeletion!==void 0){let N=`${u}/recordDeletion/delete`;for(let y of g.recordDeletion.delete)fe(y,N,e.appCode),o.has(y)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",N)}if(g.recordComments!==void 0)for(let N of["read","create"]){let y=`${u}/recordComments/${N}`;for(let _ of g.recordComments[N])fe(_,y,e.appCode),o.has(_)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",y)}if(g.recordPrint!==void 0){let N=`${u}/recordPrint/read`;for(let y of g.recordPrint.read)fe(y,N,e.appCode),o.has(y)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",N)}if(g.workflowHistory!==void 0){let N=`${u}/workflowHistory/read`;for(let y of g.workflowHistory.read)fe(y,N,e.appCode),o.has(y)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",N)}for(let[N,y]of Object.entries(g.fieldPolicies||{})){if(!ze(N))continue;let _=`${u}/fieldPolicies/${N}/read`,A=O(y,`${u}/fieldPolicies/${N}`);for(let T of F(A.read||[],_,2e3))o.has(T)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",_)}let I=g.surface===void 0?{}:O(g.surface,`${u}/surface`);if(["native","queued-command"].includes(I.mutationOwner||"native"))return;let E=O(g.capabilities,`${u}/capabilities`);for(let N of["create","update","delete"])N==="delete"&&Array.isArray(g.recordDeletion?.delete)&&g.recordDeletion.delete.length>0||n.set(String(E[N]),N)});let i=new Set;for(let[p,d]of e.authz.roles.entries()){let u=`/config/authz/roles/${p}`,g=O(d,u);R(g,["code","name","description","capabilities"],u,!0);let I=P(g.code,`${u}/code`);i.has(I)&&m("NATIVE_ROLE_DUPLICATE",`${u}/code`),i.add(I),S(g.name,`${u}/name`,255);let E=F(g.capabilities,`${u}/capabilities`,2e3);for(let[N,y]of E.entries())n.has(y)&&m("NATIVE_DATA_SURFACE_MUTATION_GRANT_FORBIDDEN",`${u}/capabilities/${N}`,{operation:n.get(y)}),o.has(y)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`${u}/capabilities`)}let s=e.authz.authenticatedUserRoleCode===void 0?"":P(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode");s&&!i.has(s)&&m("NATIVE_AUTHENTICATED_USER_ROLE_REFERENCE_MISSING","/config/authz/authenticatedUserRoleCode");let a=new Set,r=0;for(let[p,d]of e.perspectives.entries()){let u=`/config/perspectives/${p}`,g=O(d,u);R(g,["code","name","description","roleCodes","capabilityCodes","default"],u,!0);let I=P(g.code,`${u}/code`);a.has(I)&&m("NATIVE_PERSPECTIVE_DUPLICATE",`${u}/code`),a.add(I),S(g.name,`${u}/name`,255);let E=F(g.roleCodes,`${u}/roleCodes`,20);E.length<1&&m("NATIVE_PERSPECTIVE_ROLE_REQUIRED",`${u}/roleCodes`),E.forEach((_,A)=>{i.has(_)||m("NATIVE_PERSPECTIVE_ROLE_MISSING",`${u}/roleCodes/${A}`)});let N=M(e.authz.roles.filter(_=>E.includes(_.code)).flatMap(_=>_.capabilities)),y=F(g.capabilityCodes,`${u}/capabilityCodes`,2e3);ne(N)!==ne(y)&&m("NATIVE_PERSPECTIVE_CAPABILITY_PROJECTION_MISMATCH",`${u}/capabilityCodes`),g.default===!0?r+=1:g.default!==void 0&&m("NATIVE_PERSPECTIVE_DEFAULT_INVALID",`${u}/default`)}r>1&&m("NATIVE_PERSPECTIVE_DEFAULT_DUPLICATE","/config/perspectives");for(let[p,d]of e.backend.operations.entries()){let u=O(d,`/config/backend/operations/${p}`);o.has(u.capability)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/backend/operations/${p}/capability`)}let c=new Set,l=new Set;for(let[p,d]of e.frontend.routes.entries()){let u=`/config/frontend/routes/${p}`,g=O(d,u),I=P(g.code,`${u}/code`);c.has(I)&&m("NATIVE_ROUTE_DUPLICATE",`${u}/code`),c.add(I);let E=ye(g.path,`${u}/path`);l.has(E)&&m("NATIVE_ROUTE_PATH_DUPLICATE",`${u}/path`),l.add(E);let N=Uo(g,u,e.appCode);N.capability&&!o.has(N.capability)&&m("NATIVE_CAPABILITY_REFERENCE_MISSING",`${u}/capability`);let y=g.access===void 0?void 0:O(g.access,`${u}/access`);for(let _ of["allOf","anyOf"]){let A=y?.[_]===void 0?[]:w(y[_],`${u}/access/${_}`,50);for(let[T,f]of A.entries()){let b=fe(f,`${u}/access/${_}/${T}`,e.appCode);o.has(b)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`${u}/access/${_}/${T}`)}}}if(e.frontend.admin.access!==void 0){let p=Rn(e.frontend.admin.access,"/config/frontend/admin/access",e.appCode);for(let d of["allOf","anyOf"])for(let[u,g]of(p[d]||[]).entries())o.has(g)||m("NATIVE_CAPABILITY_REFERENCE_MISSING",`/config/frontend/admin/access/${d}/${u}`)}for(let[p,d]of e.frontend.routes.entries()){let u=O(d,`/config/frontend/routes/${p}`);u.parentCode&&!c.has(u.parentCode)&&m("NATIVE_ROUTE_PARENT_MISSING",`/config/frontend/routes/${p}/parentCode`)}}function Mc(e){let t=new Set(e.authz.roles.map(l=>String(l.code))),o=e.authz.authenticatedUserRoleCode===void 0?"":P(e.authz.authenticatedUserRoleCode,"/config/authz/authenticatedUserRoleCode"),n=new Map(e.authz.scopeDimensions.map(l=>[String(l.code),{valueType:l.valueType==="uuid"?"uuid":"string",...l.valueSource?.resourceCode?{valueSourceResourceCode:String(l.valueSource.resourceCode)}:{}}])),i=new Set(n.keys()),s=new Map(e.data.resources.map((l,p)=>{let d=Be(l,`/config/data/resources/${p}`,e.appCode);return[d.code,new Map(d.schema.fields.map(u=>[String(u.code),u]))]}));for(let[l,p]of e.authz.scopeDimensions.entries()){let d=`/config/authz/scopeDimensions/${l}`,u=O(p,d);if(R(u,["code","name","resourceCode","valueType","hierarchyMode","valueSource"],d,!0),u.valueSource===void 0)continue;let g=O(u.valueSource,`${d}/valueSource`);R(g,["kind","resourceCode","labelField","enabledField"],`${d}/valueSource`,!0),g.kind!=="native_resource"&&m("NATIVE_SCOPE_VALUE_SOURCE_KIND_INVALID",`${d}/valueSource/kind`),u.valueType!=="uuid"&&m("NATIVE_SCOPE_VALUE_SOURCE_TYPE_INVALID",`${d}/valueType`);let I=G(g.resourceCode,`${d}/valueSource/resourceCode`),E=s.get(I);E||m("NATIVE_SCOPE_VALUE_SOURCE_RESOURCE_MISSING",`${d}/valueSource/resourceCode`);let N=K(g.labelField,`${d}/valueSource/labelField`);if(["text.short","text.long"].includes(String(E.get(N)?.type||""))||m("NATIVE_SCOPE_VALUE_SOURCE_LABEL_FIELD_INVALID",`${d}/valueSource/labelField`),g.enabledField!==void 0){let y=K(g.enabledField,`${d}/valueSource/enabledField`);E.get(y)?.type!=="boolean"&&m("NATIVE_SCOPE_VALUE_SOURCE_ENABLED_FIELD_INVALID",`${d}/valueSource/enabledField`)}}let a=new Set,r=new Set;for(let[l,p]of e.authz.scopeSources.entries()){let d=`/config/authz/scopeSources/${l}`,u=O(p,d);R(u,["code","name","resourceCode","subject","grants","operationField","enabledField","effectiveFromField","effectiveToField","failureMode"],d,!0);let g=P(u.code,`${d}/code`);a.has(g)&&m("NATIVE_SCOPE_SOURCE_DUPLICATE",`${d}/code`),a.add(g),S(u.name,`${d}/name`,255);let I=G(u.resourceCode,`${d}/resourceCode`),E=s.get(I);E||m("NATIVE_SCOPE_SOURCE_RESOURCE_MISSING",`${d}/resourceCode`);let N=O(u.subject,`${d}/subject`),y=S(N.type,`${d}/subject/type`,32);R(N,y==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${d}/subject`),["user","role_membership"].includes(y)||m("NATIVE_SCOPE_SOURCE_SUBJECT_INVALID",`${d}/subject/type`);let _=Ze(N.userIdField,E);tn(_)||m("NATIVE_SCOPE_SOURCE_SUBJECT_PATH_INVALID",`${d}/subject/userIdField`),y==="role_membership"&&!t.has(String(N.roleCode))&&m("NATIVE_ROLE_REFERENCE_MISSING",`${d}/subject/roleCode`);let A=new Set;for(let[T,f]of w(u.grants,`${d}/grants`,100).entries()){let b=`${d}/grants/${T}`,h=O(f,b);R(h,["dimensionCode","valueField","parentValueField"],b,!0);let C=P(h.dimensionCode,`${b}/dimensionCode`);(!i.has(C)||A.has(C))&&m("NATIVE_SCOPE_SOURCE_DIMENSION_INVALID",`${b}/dimensionCode`),A.add(C),u.failureMode==="last_known_good"&&r.add(C);for(let $ of["valueField","parentValueField"]){if(h[$]===void 0)continue;let k=Ze(h[$],E);ro(k,n.get(C),s)||m("NATIVE_SCOPE_SOURCE_GRANT_PATH_INVALID",`${b}/${$}`)}}A.size===0&&m("NATIVE_SCOPE_SOURCE_GRANT_REQUIRED",`${d}/grants`),["strict","last_known_good"].includes(u.failureMode)||m("NATIVE_SCOPE_SOURCE_FAILURE_MODE_INVALID",`${d}/failureMode`);for(let T of["operationField","enabledField","effectiveFromField","effectiveToField"]){if(u[T]===void 0)continue;let f=K(u[T],`${d}/${T}`);E.has(f)||m("NATIVE_SCOPE_SOURCE_FIELD_MISSING",`${d}/${T}`)}}Kc(e,t,s,o);let c=new Set;for(let[l,p]of e.authz.dataPolicies.entries()){let d=`/config/authz/dataPolicies/${l}`,u=O(p,d);R(u,["code","name","resourceCode","unrestrictedRoleCodes","operations","matchMode","rules","readExpression","writeBoundary"],d,!0);let g=P(u.code,`${d}/code`);c.has(g)&&m("NATIVE_DATA_POLICY_DUPLICATE",`${d}/code`),c.add(g);let I=u.readExpression!==void 0,E=F(u.operations||[],`${d}/operations`,4);u.operations!==void 0&&(E.length===0||E.some(f=>!["read","create","update","delete"].includes(f)))&&m("NATIVE_DATA_POLICY_OPERATIONS_INVALID",`${d}/operations`),["AND","OR"].includes(u.matchMode)||m("NATIVE_DATA_POLICY_MATCH_MODE_INVALID",`${d}/matchMode`),I&&u.operations!==void 0&&m("NATIVE_DATA_POLICY_READ_EXPRESSION_OPERATIONS_FORBIDDEN",`${d}/operations`);let N=e.data.resources.find(f=>f.dataPolicyCode===g),y=u.resourceCode||N?.code,_=y?s.get(G(y,`${d}/resourceCode`)):void 0;I&&!_&&m("NATIVE_DATA_POLICY_RESOURCE_MISSING",`${d}/resourceCode`);let A=F(u.unrestrictedRoleCodes||[],`${d}/unrestrictedRoleCodes`,100);u.unrestrictedRoleCodes!==void 0&&A.length===0&&m("NATIVE_DATA_POLICY_UNRESTRICTED_ROLES_INVALID",`${d}/unrestrictedRoleCodes`);for(let f of A)t.has(f)||m("NATIVE_ROLE_REFERENCE_MISSING",`${d}/unrestrictedRoleCodes`);let T;try{let f=w(u.rules,`${d}/rules`,100).map((b,h)=>({rule:O(b,`${d}/rules/${h}`),pointer:`${d}/rules/${h}`}));f.length===0?(!I||u.matchMode!=="AND"||u.writeBoundary!=="capability_only")&&m("NATIVE_DATA_POLICY_WRITE_BOUNDARY_REQUIRED",d):u.writeBoundary!==void 0&&m("NATIVE_DATA_POLICY_WRITE_BOUNDARY_INVALID",`${d}/writeBoundary`),T=[...f],I&&(T.push(...$t(u.readExpression,`${d}/readExpression`)),Po(u.readExpression,`${d}/readExpression`))}catch(f){throw f instanceof at&&m(f.code,f.pointer),f}for(let{rule:f,pointer:b}of T){R(f,["subject","dimensionCode","relationCode","resourceCode","field","roleCodes","operation","valuePath","emptyMatchesAll","operator","value","operand"],b,!0);let h=K(f.field,`${b}/field`),C=_?.get(h);I&&!C&&m("NATIVE_DATA_POLICY_FIELD_MISSING",`${b}/field`);for(let H of F(f.roleCodes||[],`${b}/roleCodes`,100))t.has(H)||m("NATIVE_ROLE_REFERENCE_MISSING",`${b}/roleCodes`);let $=String(f.operator||""),k=f.operand==="db_now",W=["is_null","is_not_null"].includes($),v=["eq","not_eq","in","not_in"].includes($),Y=!k&&(f.operator!==void 0||f.value!==void 0);if([f.subject==="current_user"?"current_user":"",typeof f.dimensionCode=="string"?"dimension":"",typeof f.relationCode=="string"?"relationship":"",Y?"constant":"",k?"db_now":""].filter(Boolean).length!==1&&m("NATIVE_DATA_POLICY_RULE_SOURCE_INVALID",b),f.subject!==void 0&&f.subject!=="current_user"&&m("NATIVE_DATA_POLICY_SUBJECT_INVALID",`${b}/subject`),Y){if(!v&&!W&&m("NATIVE_DATA_POLICY_OPERATOR_INVALID",`${b}/operator`),["in","not_in"].includes($)){let H=w(f.value,`${b}/value`,100).map((he,le)=>S(he,`${b}/value/${le}`,2048));(H.length===0||new Set(H).size!==H.length)&&m("NATIVE_DATA_POLICY_VALUE_INVALID",`${b}/value`)}else["eq","not_eq"].includes($)?S(f.value,`${b}/value`,2048):(f.value!==void 0||f.operand!==void 0)&&m("NATIVE_DATA_POLICY_VALUE_INVALID",`${b}/value`);for(let H of["operation","valuePath","emptyMatchesAll","resourceCode","operand"])f[H]!==void 0&&m("NATIVE_DATA_POLICY_CONSTANT_RULE_INVALID",`${b}/${H}`)}if(k){(!["lt","lte","gt","gte"].includes($)||f.value!==void 0||C?.type!=="datetime")&&m("NATIVE_DATA_POLICY_DB_NOW_INVALID",b);for(let H of["operation","valuePath","emptyMatchesAll","resourceCode","value"])f[H]!==void 0&&m("NATIVE_DATA_POLICY_DB_NOW_INVALID",`${b}/${H}`)}f.dimensionCode&&!i.has(f.dimensionCode)&&m("NATIVE_SCOPE_DIMENSION_MISSING",`${b}/dimensionCode`),r.has(String(f.dimensionCode||""))&&f.operation!=="read"&&m("NATIVE_SCOPE_SOURCE_LAST_KNOWN_GOOD_UNSAFE",`${b}/operation`)}}for(let[l,p]of e.data.resources.entries()){let d=O(p,`/config/data/resources/${l}`);d.dataPolicyCode&&!c.has(d.dataPolicyCode)&&m("NATIVE_DATA_POLICY_REFERENCE_MISSING",`/config/data/resources/${l}/dataPolicyCode`)}}function Bc(e){try{Wn(e.data.resources,"/config/data/resources"),e.data.resources.forEach((t,o)=>Pn(t.schema.fields,new Set(e.authz.roles.map(n=>n.code)),new Set(e.authz.scopeDimensions.map(n=>n.code)),`/config/data/resources/${o}/schema/fields`))}catch(t){throw(t instanceof Ae||t instanceof Ve)&&m(t.code,t.pointer),t}}function Kc(e,t,o,n){let i=new Set;for(let[s,a]of e.authz.roleMembershipSources.entries()){let r=`/config/authz/roleMembershipSources/${s}`,c=O(a,r);R(c,["code","name","resourceCode","userIdField","roleCode","enabledField","effectiveFromField","effectiveToField","failureMode"],r,!0);let l=P(c.code,`${r}/code`);l.length>100&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${r}/code`),i.has(l)&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${r}/code`),i.add(l),S(c.name,`${r}/name`,255);let p=ls(c.resourceCode,`${r}/resourceCode`,o);us(c.userIdField,`${r}/userIdField`,p),t.has(String(c.roleCode||""))||m("NATIVE_ROLE_REFERENCE_MISSING",`${r}/roleCode`),n&&c.roleCode===n&&m("NATIVE_AUTHENTICATED_USER_ROLE_SOURCE_CONFLICT",`${r}/roleCode`),fs(c,r,p)}for(let[s,a]of e.authz.relationshipGrantSources.entries()){let r=`/config/authz/relationshipGrantSources/${s}`,c=O(a,r);R(c,["code","name","resourceCode","subject","relationCode","targetResourceCode","resourceIdField","operations","enabledField","effectiveFromField","effectiveToField","failureMode"],r,!0);let l=P(c.code,`${r}/code`);l.length>100&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_CODE_INVALID",`${r}/code`),i.has(l)&&m("NATIVE_AUTHORIZATION_PROJECTION_SOURCE_DUPLICATE",`${r}/code`),i.add(l),S(c.name,`${r}/name`,255);let p=ls(c.resourceCode,`${r}/resourceCode`,o),d=O(c.subject,`${r}/subject`),u=S(d.type,`${r}/subject/type`,32);R(d,u==="role_membership"?["type","userIdField","roleCode"]:["type","userIdField"],`${r}/subject`),["user","role_membership"].includes(u)||m("NATIVE_AUTHORIZATION_PROJECTION_SUBJECT_INVALID",`${r}/subject/type`),us(d.userIdField,`${r}/subject/userIdField`,p),u==="role_membership"&&!t.has(String(d.roleCode||""))&&m("NATIVE_ROLE_REFERENCE_MISSING",`${r}/subject/roleCode`),P(c.relationCode,`${r}/relationCode`);let g=G(c.targetResourceCode,`${r}/targetResourceCode`);o.has(g)||m("NATIVE_AUTHORIZATION_PROJECTION_TARGET_RESOURCE_MISSING",`${r}/targetResourceCode`);let I=Ze(c.resourceIdField,p),E=I?.field.type==="resource-ref.single"&&I.valuePath==="value"&&I.field.source?.resourceCode===g;(c.resourceIdField==="id"?g!==String(c.resourceCode):!E)&&m("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_ID_FIELD_INVALID",`${r}/resourceIdField`);let N=F(c.operations,`${r}/operations`,20);(N.length===0||N.some(y=>y.length>64||!/^[A-Za-z0-9][A-Za-z0-9:._*-]{0,63}$/.test(y)))&&m("NATIVE_AUTHORIZATION_PROJECTION_OPERATIONS_INVALID",`${r}/operations`),fs(c,r,p)}}function ls(e,t,o){let n=G(e,t),i=o.get(n);return i||m("NATIVE_AUTHORIZATION_PROJECTION_RESOURCE_MISSING",t),i}function us(e,t,o){let n=Ze(e,o);tn(n)||m("NATIVE_AUTHORIZATION_PROJECTION_USER_FIELD_INVALID",t)}function fs(e,t,o){if(e.failureMode!=="strict"&&m("NATIVE_AUTHORIZATION_PROJECTION_FAILURE_MODE_INVALID",`${t}/failureMode`),e.enabledField!==void 0){let n=K(e.enabledField,`${t}/enabledField`);o.get(n)?.type!=="boolean"&&m("NATIVE_AUTHORIZATION_PROJECTION_ENABLED_FIELD_INVALID",`${t}/enabledField`)}for(let n of["effectiveFromField","effectiveToField"]){if(e[n]===void 0)continue;let i=K(e[n],`${t}/${n}`);["date","datetime"].includes(String(o.get(i)?.type))||m("NATIVE_AUTHORIZATION_PROJECTION_EFFECTIVE_FIELD_INVALID",`${t}/${n}`)}}function qc(e){let t=new Set,o=new Set;e.forEach((n,i)=>{let s=`/config/backend/secrets/${i}`,a=O(n,s);R(a,["name","env","description","required","exposure"],s,!0);let r=S(a.name,`${s}/name`,128),c=S(a.env,`${s}/env`,128);qa.test(r)||m("NATIVE_SECRET_NAME_INVALID",`${s}/name`),(!Ja.test(c)||c.startsWith("OPENXIANGDA_")||["NODE_ENV","PORT"].includes(c))&&m("NATIVE_SECRET_ENV_INVALID",`${s}/env`),t.has(r)&&m("NATIVE_SECRET_NAME_DUPLICATE",`${s}/name`),o.has(c)&&m("NATIVE_SECRET_ENV_DUPLICATE",`${s}/env`),t.add(r),o.add(c),x(a.exposure,"active_only",`${s}/exposure`),a.required!==void 0&&lt(a.required,`${s}/required`),a.description!==void 0&&Mo(a.description,`${s}/description`,2e3)})}function Jc(e){let t=new Set,o=new Map,n=new Map(e.data.resources.map(g=>[String(g.code),g])),i=new Map(e.frontend.routes.map((g,I)=>{let E=O(g,`/config/frontend/routes/${I}`);return[P(E.code,`/config/frontend/routes/${I}/code`),E]}));for(let[g,I]of e.workflows.definitions.entries()){let E=`/config/workflows/definitions/${g}`,N=O(I,E);if(R(N,["version","definition","launch"],E,["detailRouteCode"]),$s(N.launch,`${E}/launch`),N.detailRouteCode!==void 0){let h=ks(N.detailRouteCode,`${E}/detailRouteCode`);for(let[C,$,k]of[["desktop",h.desktop,["admin","user"]],["mobile",h.mobile,["user"]]]){let W=`${E}/detailRouteCode/${C}`,v=i.get($);v||m("NATIVE_WORKFLOW_DETAIL_ROUTE_MISSING",W),k.some(H=>H===v.surface)||m("NATIVE_WORKFLOW_DETAIL_ROUTE_SURFACE_INVALID",W);let Y=ye(v.path,W),te=[...Y.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map(H=>H[1]);(Y.includes("*")||te.length!==1||te[0]!=="instanceId")&&m("NATIVE_WORKFLOW_DETAIL_ROUTE_PATH_INVALID",W)}}let y=O(N.definition,`${E}/definition`),_=`${y.code}:${dt(N.version,`${E}/version`)}`;t.has(_)&&m("NATIVE_WORKFLOW_DEFINITION_DUPLICATE",E),t.add(_),zc(y,`${E}/definition`);let A=_n(y);A.length&&m(A[0],`${E}/definition/launchPreflight`);let T=Co(y,e.backend.operations);T.length&&m(T[0],`${E}/definition/commandHandlers`),Gc(y.subject,n,`${E}/definition/subject`);let f=Rt(y,new Map((n.get(y.subject.resourceCode)?.schema.fields||[]).map(h=>[h.code,{...n.get(y.subject.resourceCode)?.surface?.fields?.[h.code],...h,system:["id","revision","createdAt","updatedAt","createdBy","updatedBy"].includes(h.code)}])),new Map([...n].map(([h,C])=>[h,new Map(C.schema.fields.map($=>[$.code,{...C.surface?.fields?.[$.code],...$,system:["id","revision","createdAt","updatedAt","createdBy","updatedBy"].includes($.code)}]))])));f.length&&m(f[0],`${E}/definition/taskPages`);let b=mo(y,{appCode:e.appCode,capabilities:e.authz.capabilities.map(h=>h.code),fields:new Map((n.get(y.subject.resourceCode)?.schema.fields||[]).map(h=>[h.code,h]))});b.length&&m("NATIVE_WORKFLOW_INSTANCE_COMMAND_POLICY_INVALID",`${E}/definition/instanceCommands`,{errors:b}),y.title===y.code&&m("NATIVE_WORKFLOW_USER_TITLE_REQUIRED",`${E}/definition/title`),o.set(_,y)}let s=new Set,a=new Map;for(let[g,I]of e.workflows.bindings.entries()){let E=O(I,`/config/workflows/bindings/${g}`),N=O(E.binding,`/config/workflows/bindings/${g}/binding`),y=`${N.workflowCode}:${dt(E.version,`/config/workflows/bindings/${g}/version`)}`;s.has(y)&&m("NATIVE_WORKFLOW_BINDING_DUPLICATE",`/config/workflows/bindings/${g}`),s.add(y),Hc(N,`/config/workflows/bindings/${g}/binding`),a.set(y,N)}let r=new Set,c=new Map;for(let[g,I]of e.workflows.activations.entries()){let E=`/config/workflows/activations/${g}`,N=O(I,E);R(N,["workflowCode","definitionVersion","bindingVersion","acceptedCommandDeactivationPolicy"],E,["environmentKey"]);let y=P(N.workflowCode,`${E}/workflowCode`);r.has(y)&&m("NATIVE_WORKFLOW_ACTIVATION_DUPLICATE",E),r.add(y);let _=`${y}:${dt(N.definitionVersion,`${E}/definitionVersion`)}`,A=`${y}:${dt(N.bindingVersion,`${E}/bindingVersion`)}`;t.has(_)||m("NATIVE_WORKFLOW_DEFINITION_REFERENCE_MISSING",`${E}/definitionVersion`),s.has(A)||m("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${E}/bindingVersion`);let T=o.get(_),f=a.get(A),b=_n(T,f);b.length&&m(b[0],E);let h=fn(T,f);h.length&&m(h[0],E),(!["finish-pinned","cancel-on-deactivate"].includes(N.acceptedCommandDeactivationPolicy)||N.acceptedCommandDeactivationPolicy!==T.acceptedCommandDeactivationPolicy)&&m("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_MISMATCH",`${E}/acceptedCommandDeactivationPolicy`),Yc(T,f,`/config/workflows/activations/${g}`);try{let C=n.get(T.subject.resourceCode)?.schema.fields||[];Fn(T,f,new Map(C.map($=>[$.code,$])),`${E}/bindings`,new Map([...n].map(([$,k])=>[$,new Map(k.schema.fields.map(W=>[W.code,W]))])))}catch(C){throw C instanceof Ve&&m(C.code,C.pointer),C}c.set(y,f)}let l=ko([...c.values()]);l.length&&m(l[0],"/config/workflows/activations");let p=new Set;e.workflows.providers.forEach((g,I)=>{let E=`/config/workflows/providers/${I}`,N=O(g,E);R(N,["code","endpointPath","timeoutMs"],E,!0);let y=P(N.code,`${E}/code`);p.has(y)&&m("NATIVE_WORKFLOW_PROVIDER_DUPLICATE",`${E}/code`),p.add(y),ye(N.endpointPath,`${E}/endpointPath`),N.timeoutMs!==void 0&&se(N.timeoutMs,`${E}/timeoutMs`,100,1e4)});for(let[g,I]of c.entries())for(let[E,N]of Object.entries(O(I.bindings,"/config/workflows/bindings/*/binding/bindings"))){let y=O(N,`/config/workflows/${g}/bindings/${E}`);y.provider==="application_provider"&&!p.has(y.providerCode)&&m("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`/config/workflows/${g}/bindings/${E}/providerCode`)}let d=new Set(e.authz.roles.map(g=>g.code)),u=new Set;e.workflows.editableParameters.forEach((g,I)=>{let E=`/config/workflows/editableParameters/${I}`,N=O(g,E);R(N,["code","workflowCode","bindingKey","label","valueType","required","allowedRoleCodes","allowedProviderCodes","maxItems"],E,!0);let y=P(N.code,`${E}/code`);u.has(y)&&m("NATIVE_WORKFLOW_EDITABLE_PARAMETER_DUPLICATE",`${E}/code`),u.add(y);let _=Cn(N.workflowCode,`${E}/workflowCode`),A=On(N.bindingKey,`${E}/bindingKey`),T=c.get(_);(!T||!O(T.bindings,`${E}/bindingKey`)[A])&&m("NATIVE_WORKFLOW_EDITABLE_BINDING_MISSING",`${E}/bindingKey`),S(N.label,`${E}/label`,255),["role_code","user_ids","provider_code"].includes(N.valueType)||m("NATIVE_WORKFLOW_EDITABLE_VALUE_TYPE_INVALID",`${E}/valueType`);for(let f of F(N.allowedRoleCodes||[],`${E}/allowedRoleCodes`,100))d.has(f)||m("NATIVE_ROLE_REFERENCE_MISSING",`${E}/allowedRoleCodes`);for(let f of F(N.allowedProviderCodes||[],`${E}/allowedProviderCodes`,100))p.has(f)||m("NATIVE_WORKFLOW_PROVIDER_REFERENCE_MISSING",`${E}/allowedProviderCodes`);N.required!==void 0&&lt(N.required,`${E}/required`),N.maxItems!==void 0&&se(N.maxItems,`${E}/maxItems`,1,200)})}function Gc(e,t,o){let n=O(e,o);R(n,["resourceCode","factProjection"],o,["summaryFields"]);let i=G(n.resourceCode,`${o}/resourceCode`),s=t.get(i);s||m("NATIVE_WORKFLOW_SUBJECT_RESOURCE_MISSING",`${o}/resourceCode`);let a=new Set(w(O(s.schema,`${o}/resourceCode`).fields,`${o}/resourceCode`,500).map((l,p)=>K(O(l,`${o}/resourceCode/${p}`).code,`${o}/resourceCode/${p}`))),r=O(n.factProjection,`${o}/factProjection`),c=Object.entries(r);(c.length<1||c.length>64)&&m("NATIVE_WORKFLOW_SUBJECT_FACT_PROJECTION_INVALID",`${o}/factProjection`);for(let[l,p]of c){Ha.test(l)||m("NATIVE_WORKFLOW_SUBJECT_FACT_KEY_INVALID",`${o}/factProjection/${l}`);let d=K(p,`${o}/factProjection/${l}`);a.has(d)||m("NATIVE_WORKFLOW_SUBJECT_FIELD_MISSING",`${o}/factProjection/${l}`)}if(n.summaryFields!==void 0){let l=F(n.summaryFields,`${o}/summaryFields`,Ya).map((I,E)=>K(I,`${o}/summaryFields/${E}`)),p=t.get(i),d=p.surface&&typeof p.surface=="object"&&!Array.isArray(p.surface)?p.surface:{},u=d.fields&&typeof d.fields=="object"&&!Array.isArray(d.fields)?d.fields:{},g=new Map(w(O(p.schema,`${o}/resourceCode`).fields,`${o}/resourceCode`,500).map((I,E)=>{let N=O(I,`${o}/resourceCode/${E}`);return[String(N.code),N]}));for(let[I,E]of l.entries()){let N=g.get(E),y=u[E],_=String(N?.type||""),A=N?.maxLength;(!N||N.system===!0||y&&typeof y=="object"&&!Array.isArray(y)&&y.system===!0||["id","revision","created_by","updated_by","created_at","updated_at"].includes(E)||!Qa.has(_)||_==="text.long"&&typeof A=="number"&&Number.isFinite(A)&&A>Xa)&&m("NATIVE_WORKFLOW_SUBJECT_SUMMARY_FIELDS_INVALID",`${o}/summaryFields/${I}`)}}}function zc(e,t){R(e,["schemaVersion","code","title","subject","acceptedCommandDeactivationPolicy","startAt","inputSchema","nodes"],t,["organizationContext","instanceCommands","readability","taskPages","rejectionNotification","commandHandlers","launchPreflight"]),x(e.schemaVersion,"openxiangda.workflow-definition/v2",`${t}/schemaVersion`),Cn(e.code,`${t}/code`),S(e.title,`${t}/title`,255),["finish-pinned","cancel-on-deactivate"].includes(e.acceptedCommandDeactivationPolicy)||m("NATIVE_WORKFLOW_COMMAND_DEACTIVATION_POLICY_REQUIRED",`${t}/acceptedCommandDeactivationPolicy`);let o=O(e.nodes,`${t}/nodes`),n=Object.keys(o);(n.length===0||n.length>200)&&m("NATIVE_WORKFLOW_NODE_COUNT_INVALID",`${t}/nodes`);let i=S(e.startAt,`${t}/startAt`,128),s=No(e);s.length&&m(s[0],`${t}/readability`);let a=fn(e);a.length&&m(a[0],`${t}/nodes`);let r=mn(e);r.length&&m(r[0],`${t}/nodes`);let c=ot(e);c.length&&m(c[0],`${t}/nodes`);let l=Ro(e);l.length&&m(l[0],`${t}/rejectionNotification`);let p=pn(e);p.length&&m(p[0],`${t}/nodes`);let d=Rt(e);d.length&&m(d[0],`${t}/taskPages`);let u=bt(e);u.length&&m(u[0],`${t}/nodes`),o[i]||m("NATIVE_WORKFLOW_START_NODE_MISSING",`${t}/startAt`);let g=new Map;for(let[y,_]of Object.entries(o)){let A=`${t}/nodes/${y}`,T=O(_,A);x(T.id,y,`${A}/id`),["approval","condition","end","cc","action"].includes(T.kind)||m("NATIVE_WORKFLOW_NODE_KIND_INVALID",`${A}/kind`);let f=[];if(T.kind==="approval"){S(T.title,`${A}/title`,255),On(T.binding,`${A}/binding`),["single","any","all","sequence"].includes(T.mode)||m("NATIVE_WORKFLOW_APPROVAL_MODE_INVALID",`${A}/mode`),f.push(S(T.onApprove,`${A}/onApprove`,128),S(T.onReject,`${A}/onReject`,128));for(let b of F(T.returnTargets||[],`${A}/returnTargets`,200))o[b]||m("NATIVE_WORKFLOW_TARGET_MISSING",`${A}/returnTargets`);for(let b of F(T.allowedOperations||[],`${A}/allowedOperations`,20))ec.has(b)||m("NATIVE_WORKFLOW_OPERATION_INVALID",`${A}/allowedOperations`)}else if(T.kind==="action")f.push(S(T.next,`${A}/next`,128));else if(T.kind==="cc")S(T.title,`${A}/title`,255),On(T.binding,`${A}/binding`),f.push(S(T.next,`${A}/next`,128));else if(T.kind==="condition"){let b=w(T.branches,`${A}/branches`,100);b.length===0&&m("NATIVE_WORKFLOW_BRANCH_REQUIRED",`${A}/branches`),b.forEach((h,C)=>{let $=O(h,`${A}/branches/${C}`);kt($.when,`${A}/branches/${C}/when`,0),f.push(S($.target,`${A}/branches/${C}/target`,128))}),f.push(S(T.otherwise,`${A}/otherwise`,128))}else S(T.title,`${A}/title`,255),S(T.outcome,`${A}/outcome`,128);for(let b of f)o[b]||m("NATIVE_WORKFLOW_TARGET_MISSING",A);g.set(y,f)}let I=new Set,E=new Set,N=y=>{if(E.has(y)&&m("NATIVE_WORKFLOW_CYCLE_FORBIDDEN",`${t}/nodes/${y}`),!I.has(y)){I.add(y),E.add(y);for(let _ of g.get(y)||[])N(_);E.delete(y)}};N(i),I.size!==n.length&&m("NATIVE_WORKFLOW_NODE_UNREACHABLE",`${t}/nodes`)}function kt(e,t,o){o>20&&m("NATIVE_WORKFLOW_EXPRESSION_DEPTH_EXCEEDED",t);let n=O(e,t),i=S(n.op,`${t}/op`,16);if(i!=="literal"){if(i==="path"){let s=S(n.path,`${t}/path`,255);(!/^[A-Za-z][A-Za-z0-9_.-]{0,254}$/.test(s)||s.split(".").some(a=>["__proto__","constructor","prototype"].includes(a)))&&m("NATIVE_WORKFLOW_EXPRESSION_PATH_INVALID",`${t}/path`);return}if(["eq","neq","gt","gte","lt","lte","in","contains"].includes(i)){kt(n.left,`${t}/left`,o+1),kt(n.right,`${t}/right`,o+1);return}if(["and","or"].includes(i)){let s=w(n.values,`${t}/values`,100);s.length===0&&m("NATIVE_WORKFLOW_EXPRESSION_EMPTY",`${t}/values`),s.forEach((a,r)=>kt(a,`${t}/values/${r}`,o+1));return}if(["not","exists"].includes(i)){kt(n.value,`${t}/value`,o+1);return}m("NATIVE_WORKFLOW_EXPRESSION_OPERATOR_INVALID",`${t}/op`)}}function Hc(e,t){x(e.schemaVersion,"openxiangda.workflow-binding/v2",`${t}/schemaVersion`),Cn(e.workflowCode,`${t}/workflowCode`);let o=O(e.bindings,`${t}/bindings`);Object.keys(o).length>200&&m("NATIVE_WORKFLOW_BINDING_LIMIT_EXCEEDED",`${t}/bindings`);for(let[n,i]of Object.entries(o)){On(n,`${t}/bindings/${n}`);let s=O(i,`${t}/bindings/${n}`),a=S(s.provider,`${t}/bindings/${n}/provider`,64);if(["fixed_users","initiator","input_users","form_field_users","department_supervisor","app_role","app_role_in_scope","business_relation","previous_node_actor","initiator_select","application_provider"].includes(a)||m("NATIVE_WORKFLOW_BINDING_PROVIDER_INVALID",`${t}/bindings/${n}/provider`),a==="fixed_users"&&(Array.isArray(s.users)||m("NATIVE_WORKFLOW_BINDING_USERS_REQUIRED",`${t}/bindings/${n}/users`),w(s.users,`${t}/bindings/${n}/users`,200)),["input_users","form_field_users"].includes(a)&&S(s.inputPath,`${t}/bindings/${n}/inputPath`,255),["app_role","app_role_in_scope","initiator_select"].includes(a)&&P(s.roleCode,`${t}/bindings/${n}/roleCode`),a==="department_supervisor"&&S(s.departmentIdFrom,`${t}/bindings/${n}/departmentIdFrom`,255),a==="application_provider"&&P(s.providerCode,`${t}/bindings/${n}/providerCode`),s.routing!==void 0){let r=wt(s.routing);r.length&&m(r[0],`${t}/bindings/${n}/routing`)}}}function Yc(e,t,o){x(t.workflowCode,e.code,`${o}/workflowCode`);let n=O(t.bindings,`${o}/bindings`);for(let[r,c]of Object.entries(n))c.provider==="fixed_users"&&!c.users.length&&!To(e,r)&&m("NATIVE_WORKFLOW_BINDING_USERS_REQUIRED",`${o}/bindings/${r}/users`);let i=mn(e,t);i.length&&m(i[0],o);let s=pn(e,t);s.length&&m(s[0],o);let a=bt(e,t);a.length&&m(a[0],o);for(let[r,c]of Object.entries(O(e.nodes,`${o}/nodes`))){let l=O(c,`${o}/nodes/${r}`);["approval","cc"].includes(l.kind)&&!n[l.binding]&&m("NATIVE_WORKFLOW_BINDING_REFERENCE_MISSING",`${o}/nodes/${r}/binding`)}}function Xc(e,t,o){let n=O(t.routeManifest,"/contracts/routeManifest"),i=O(e.routeManifest,"/contracts/routeManifest"),s=new Map;for(let p of w(o.data?.resources,"/config/data/resources",100)){let d=O(p,"/config/data/resources");s.set(String(d.code||""),d)}let a=new Set(w(i.routes,"/contracts/routeManifest/routes",1e3).map(p=>String(O(p,"/contracts/routeManifest/routes").code||""))),r=[];for(let p of w(n.routes,"/contracts/routeManifest/routes",1e3)){let d=O(p,"/contracts/routeManifest/routes"),u=String(d.kind||"");if(u!=="resource-records"&&u!=="resource-submit")continue;let g=String(d.resourceCode||""),I=s.get(g);I||m("NATIVE_ROUTE_MANIFEST_RESOURCE_UNKNOWN","/contracts/routeManifest/routes");let N=`user.${g}.${u==="resource-records"?"records":"submit"}`;x(String(d.code||""),N,"/contracts/routeManifest/routes/code");let y=u==="resource-records"?"read":"create",_=String(O(I.capabilities,"/config/data/resources/capabilities")[y]||"");for(let A of["desktop","mobile"]){let T=O(d[A],`/contracts/routeManifest/routes/${A}`),f=A==="mobile"?"/m/my/":"/my/",b=u==="resource-records"?`${f}${g}`:`${f}${g}/submit`;x(String(T.path||""),b,`/contracts/routeManifest/routes/${A}/path`),x(String(T.capability||""),_,`/contracts/routeManifest/routes/${A}/capability`),x(String(T.routeCode||""),`${N}.${A}`,`/contracts/routeManifest/routes/${A}/routeCode`)}(a.has(N)||r.some(A=>String(A.code)===N))&&m("NATIVE_ROUTE_MANIFEST_DUPLICATE","/contracts/routeManifest/routes/code"),r.push(d)}if(!r.length)return;i.routes=w([...i.routes,...r],"/contracts/routeManifest/routes",1e3).sort((p,d)=>me(String(O(p,"x").code||""),String(O(d,"x").code||"")));let c=String(O(n.rootEntry,"x").code||"");if(r.find(p=>String(p.code)===c&&p.kind==="resource-records")){let p=O(n.rootEntry,"x");i.rootEntry={code:c,desktop:String(p.desktop||""),mobile:String(p.mobile||"")}}i.digest=Q({schemaVersion:i.schemaVersion,appCode:i.appCode,devicePolicy:i.devicePolicy,rootEntry:i.rootEntry,authentication:i.authentication,routes:i.routes})}function Be(e,t,o){let n=O(e,t);R(n,["schemaVersion","appCode","code","name","schema","surface","invariants","decimalReservationLifecycle","uniqueKeys","workflowHistory","recordPrint","recordComments","recordDeletion","capabilities","dataPolicyCode","fieldPolicies"],t,!0),x(n.schemaVersion,"openxiangda.data-resource/v2",`${t}/schemaVersion`),x(n.appCode,o,`${t}/appCode`);let i=G(n.code,`${t}/code`),s=S(n.name,`${t}/name`,255),a=O(n.schema,`${t}/schema`);R(a,["fields"],`${t}/schema`);let r,c,l,p;try{l=Xt(n.decimalReservationLifecycle,`${t}/decimalReservationLifecycle`),r=Mt(a.fields,`${t}/schema/fields`),p=lo(n.uniqueKeys,r,`${t}/uniqueKeys`),c=Un(n.invariants,r,`${t}/invariants`),Gt(n.surface,r,`${t}/surface`)}catch(I){throw(I instanceof Ae||I instanceof Ve||I instanceof xe||I instanceof et)&&m(I.code,I.pointer),I}if(n.recordComments!==void 0){let I=O(n.recordComments,`${t}/recordComments`);R(I,["read","create"],`${t}/recordComments`);for(let E of["read","create"]){let N=I[E];(!Array.isArray(N)||N.length>20||N.some(y=>typeof y!="string"||!y.trim())||new Set(N).size!==N.length)&&m("NATIVE_RECORD_COMMENTS_POLICY_INVALID",`${t}/recordComments/${E}`)}}if(n.recordDeletion!==void 0){let I=O(n.recordDeletion,`${t}/recordDeletion`);R(I,["delete"],`${t}/recordDeletion`);let E=I.delete;(!Array.isArray(E)||E.length>20||E.some(N=>typeof N!="string"||!N.trim())||new Set(E).size!==E.length)&&m("NATIVE_RECORD_DELETION_DELETE_INVALID",`${t}/recordDeletion/delete`)}if(n.recordPrint!==void 0){let I=O(n.recordPrint,`${t}/recordPrint`);R(I,["read"],`${t}/recordPrint`);let E=I.read;(!Array.isArray(E)||E.length>20||E.some(N=>typeof N!="string"||!N.trim())||new Set(E).size!==E.length)&&m("NATIVE_RECORD_PRINT_READ_INVALID",`${t}/recordPrint/read`)}if(n.workflowHistory!==void 0){let I=O(n.workflowHistory,`${t}/workflowHistory`);R(I,["read"],`${t}/workflowHistory`);let E=I.read;(!Array.isArray(E)||E.length>20||E.some(N=>typeof N!="string"||!N.trim())||new Set(E).size!==E.length)&&m("NATIVE_WORKFLOW_HISTORY_READ_INVALID",`${t}/workflowHistory/read`)}let d=new Set(r.map(I=>I.code)),u=O(n.capabilities,`${t}/capabilities`);R(u,["read","create","update","delete"],`${t}/capabilities`);let g=O(n.fieldPolicies,`${t}/fieldPolicies`);for(let[I,E]of Object.entries(g)){!d.has(I)&&!ze(I)&&m("NATIVE_DATA_FIELD_POLICY_FIELD_MISSING",`${t}/fieldPolicies/${I}`);let N=`${t}/fieldPolicies/${I}`,y=O(E,N);ze(I)&&(R(y,["read"],N,!0),(!Array.isArray(y.read)||y.read.length>20||y.read.some(_=>typeof _!="string"||!_.trim())||new Set(y.read).size!==y.read.length)&&m("NATIVE_DATA_AUDIT_READ_POLICY_INVALID",`${N}/read`)),R(y,["read","create","update","mask"],N,!0),y.mask!==void 0&&!["omit","null"].includes(y.mask)&&m("NATIVE_DATA_FIELD_POLICY_MASK_INVALID",`${N}/mask`)}return{...n,code:i,name:s,schema:{fields:r},...n.invariants===void 0?{}:{invariants:c},...l?{decimalReservationLifecycle:l}:{},...p!==void 0?{uniqueKeys:p}:{},capabilities:u,fieldPolicies:g}}function Vs(e){return[{code:`app:${e}:directory:read`,kind:"platform",name:"\u8BFB\u53D6\u53D7\u9650\u7EC4\u7EC7\u76EE\u5F55",source:"platform"},...[["app:role:read","\u67E5\u770B\u89D2\u8272\u4E0E\u6388\u6743"],["app:role:define","\u5B9A\u4E49\u624B\u5DE5\u89D2\u8272"],["app:role:assign","\u5206\u914D\u89D2\u8272\u6210\u5458"],["app:role:grant-capability","\u6388\u4E88\u89D2\u8272\u80FD\u529B"],["app:scope-grant:manage","\u7BA1\u7406\u6570\u636E\u8303\u56F4"],["app:super-admin:manage","\u7BA1\u7406\u5E94\u7528\u6700\u9AD8\u7BA1\u7406\u5458"]].map(([t,o])=>({code:t,kind:"platform",name:o,source:"platform"}))]}function ps(e,t,o,n){let i=e.toString("utf8"),s;try{s=JSON.parse(i)}catch{m(o,t)}let a=O(s,t);return ne(a)!==i&&m(n,t),a}function ms(e,t){let o=0,n=(i,s,a)=>{if(o+=1,o>ic&&m("NATIVE_ARTIFACT_NODE_LIMIT_EXCEEDED",s),a>oc&&m("NATIVE_ARTIFACT_DEPTH_LIMIT_EXCEEDED",s),typeof i=="string"){Buffer.byteLength(i)>vo&&m("NATIVE_ARTIFACT_STRING_LIMIT_EXCEEDED",s);return}if(Array.isArray(i)){i.forEach((r,c)=>n(r,`${s}/${c}`,a+1));return}if(!(!i||typeof i!="object"))for(let[r,c]of Object.entries(i))["__proto__","prototype","constructor"].includes(r)&&m("NATIVE_ARTIFACT_DANGEROUS_KEY",`${s}/${r}`),Qc(r)&&m("NATIVE_ARTIFACT_RUNTIME_FIELD_FORBIDDEN",`${s}/${r}`),n(c,`${s}/${r}`,a+1)};n(e,t,0)}function Qc(e){return["environmentKey","environmentId","secretValue","ciphertext","oauthClient","oauthClientId","oauthClientSecret","signingSecret","kubernetesNamespace","nodePort","productionUrl"].includes(e)}function ct(e){return{value:e,digest:Q(e)}}function _s(e,t,o,n){typeof e!="string"&&!Buffer.isBuffer(e)&&!(e instanceof Uint8Array)&&m("NATIVE_ARTIFACT_BYTES_REQUIRED",o);let i=Buffer.isBuffer(e)?e:Buffer.from(e);return i.byteLength===0&&m("NATIVE_ARTIFACT_EMPTY",o),i.byteLength>t&&m(n,o),i}function gs(e,t,o,n){let i=Tn.createHash("sha256").update(e).digest("hex");Tn.timingSafeEqual(Buffer.from(i),Buffer.from(t))||m(n,o)}function O(e,t){return(!e||typeof e!="object"||Array.isArray(e))&&m("NATIVE_OBJECT_REQUIRED",t),e}function w(e,t,o){return Array.isArray(e)||m("NATIVE_ARRAY_REQUIRED",t),e.length>o&&m("NATIVE_ARRAY_LIMIT_EXCEEDED",t),e}function F(e,t,o){let n=w(e,t,o).map((i,s)=>S(i,`${t}/${s}`,255));return new Set(n).size!==n.length&&m("NATIVE_ARRAY_DUPLICATE",t),n}function S(e,t,o){return(typeof e!="string"||e.length===0||e.length>o)&&m("NATIVE_STRING_INVALID",t),e}function Mo(e,t,o){return(typeof e!="string"||e.length>o)&&m("NATIVE_STRING_INVALID",t),e}function P(e,t){let o=S(e,t,128);return Ua.test(o)||m("NATIVE_CODE_INVALID",t),o}function G(e,t){let o=S(e,t,64);return Ba.test(o)||m("NATIVE_RESOURCE_CODE_INVALID",t),o}function K(e,t){let o=S(e,t,63);return Ka.test(o)||m("NATIVE_FIELD_CODE_INVALID",t),o}function Cn(e,t){let o=S(e,t,128);return Ga.test(o)||m("NATIVE_WORKFLOW_CODE_INVALID",t),o}function On(e,t){let o=S(e,t,128);return za.test(o)||m("NATIVE_WORKFLOW_BINDING_CODE_INVALID",t),o}function fe(e,t,o){let n=S(e,t,255);return Wa.test(n)||m("NATIVE_CAPABILITY_CODE_INVALID",t),!n.startsWith(`app:${o}:`)&&!Vs(o).some(i=>i.code===n)&&m("NATIVE_CAPABILITY_APP_MISMATCH",t),n}function ye(e,t){let o=S(e,t,2048);return(!o.startsWith("/")||o.startsWith("//")||o.includes("..")||o.includes("?")||o.includes("#"))&&m("NATIVE_ABSOLUTE_PATH_INVALID",t),o}function dt(e,t){return(!Number.isInteger(e)||Number(e)<1)&&m("NATIVE_POSITIVE_INTEGER_REQUIRED",t),Number(e)}function se(e,t,o,n){return(!Number.isInteger(e)||Number(e)<o||Number(e)>n)&&m("NATIVE_INTEGER_OUT_OF_RANGE",t),Number(e)}function lt(e,t){return typeof e!="boolean"&&m("NATIVE_BOOLEAN_REQUIRED",t),e}function xo(e,t){let o=S(e,t,64).toLowerCase();return xa.test(o)||m("NATIVE_DIGEST_INVALID",t),o}function x(e,t,o){e!==t&&m("NATIVE_VALUE_MISMATCH",o)}function R(e,t,o,n=!1){let i=new Set([...t,...Array.isArray(n)?n:[]]);for(let s of Object.keys(e))i.has(s)||m("NATIVE_PROPERTY_UNKNOWN",`${o}/${s}`);if(n!==!0)for(let s of t)Object.prototype.hasOwnProperty.call(e,s)||m("NATIVE_PROPERTY_REQUIRED",`${o}/${s}`)}function ee(e,t){return[...e].sort((o,n)=>me(t(o),t(n)))}function M(e){return[...new Set(e)].sort(me)}function As(e){return[...new Set(e)].sort((t,o)=>t-o)}function me(e,t){return e===t?0:e<t?-1:1}function Ps(e){return!e||typeof e!="object"||Object.isFrozen(e)||(Object.freeze(e),Object.values(e).forEach(t=>Ps(t))),e}function jo(e,t,o){if(Fo(e,t))return o;if(Array.isArray(e)&&Array.isArray(t)){let n=Math.max(e.length,t.length);for(let i=0;i<n;i+=1)if(!Fo(e[i],t[i]))return jo(e[i],t[i],`${o}/${i}`)}if(e&&t&&typeof e=="object"&&typeof t=="object"&&!Array.isArray(e)&&!Array.isArray(t)){let n=M([...Object.keys(e),...Object.keys(t)]);for(let i of n){let s=e[i],a=t[i];if(!Fo(s,a))return jo(s,a,`${o}/${i}`)}}return o}function Fo(e,t){return e===void 0||t===void 0?e===t:ne(e)===ne(t)}function m(e,t,o={}){throw new yn(e,t,o)}var Yl=50,Xl=131072,Sn=class extends Error{constructor(o){super("OPENXIANGDA_NATIVE_AUTHZ_BATCH_INPUT_INVALID");this.pointer=o}pointer;code="OPENXIANGDA_NATIVE_AUTHZ_BATCH_INPUT_INVALID";status=400};function Zc(e){let t=d=>{throw new Sn(d)},o=(d,u)=>((!d||typeof d!="object"||Array.isArray(d))&&t(u),d),n=(d,u,g)=>{for(let I of Object.keys(d))u.includes(I)||t(`${g}/${I}`)},i=(d,u,g)=>((typeof d!="string"||!d.trim()||d.length>u)&&t(g),d),s=(d,u)=>{let g=i(d,36,u);return/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(g)||t(u),g.toLowerCase()},a=o(e,""),r;try{r=new TextEncoder().encode(JSON.stringify(a)).byteLength}catch{t("")}r>131072&&t(""),n(a,["schemaVersion","environmentKey","items"],""),a.schemaVersion!=="openxiangda.native-role-membership-batch-request/v2"&&t("/schemaVersion"),a.environmentKey!==void 0&&!["preproduction","production"].includes(String(a.environmentKey))&&t("/environmentKey"),(!Array.isArray(a.items)||a.items.length<1||a.items.length>50)&&t("/items");let c=new Set,l=new Set,p;for(let[d,u]of a.items.entries()){let g=`/items/${d}`,I=o(u,g);["create","update","revoke"].includes(String(I.operation))||t(`${g}/operation`),p??=I.operation,p!==I.operation&&t(`${g}/operation`),n(I,["operation","operationId","reason",...p==="create"?["userId","roleCode"]:["membershipId","expectedRevision"],...p!=="revoke"?["scopeGrants","validFrom","validTo"]:[]],g);let E=s(I.operationId,`${g}/operationId`);c.has(E)&&t(`${g}/operationId`),c.add(E),i(I.reason,1e3,`${g}/reason`);let N;if(p==="create"){let y=i(I.userId,255,`${g}/userId`),_=i(I.roleCode,128,`${g}/roleCode`);/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/.test(_)||t(`${g}/roleCode`),N=JSON.stringify([y,_])}else N=s(I.membershipId,`${g}/membershipId`),(!Number.isSafeInteger(I.expectedRevision)||Number(I.expectedRevision)<1)&&t(`${g}/expectedRevision`);l.has(N)&&t(g),l.add(N),I.scopeGrants!==void 0&&(!Array.isArray(I.scopeGrants)||I.scopeGrants.length>100)&&t(`${g}/scopeGrants`);for(let y of["validFrom","validTo"])I[y]!==void 0&&I[y]!==null&&i(I[y],64,`${g}/${y}`)}}var xs="openxiangda.workflow-delegation-administration/v2",js="openxiangda.workflow-delegation-mutation/v2",Fs="openxiangda.workflow-delegation-preview/v2";var Pt={type:"string",format:"uuid",pattern:"^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"},_e={type:"string",minLength:1,maxLength:255},Ke={type:"string",format:"date-time"},ut={type:"integer",minimum:1},ed={anyOf:[Ke,{type:"null"}]},Bo={anyOf:[_e,{type:"null"}]},wn={type:"string",pattern:"^membership:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"},Ws={const:"future-assignments-only"},Ko={schemaVersion:{const:xs},id:Pt,appCode:_e,environmentKey:_e,workflowCode:Bo,delegatorUserId:_e,delegateUserId:_e,delegatorRoleSubjectKey:wn,delegateRoleSubjectKey:wn,validFrom:Ke,validTo:Ke,status:{enum:["active","revoked","expired"]},reason:{type:"string",minLength:1,maxLength:4e3},createdBy:_e,createdAt:Ke,revokedAt:ed,revision:ut,roleCode:_e,roleName:_e,delegatorDisplayName:_e,delegateDisplayName:_e,delegatorRoleSubjectRevision:ut,delegateRoleSubjectRevision:ut,effectiveState:{enum:["active","scheduled","expired","revoked","ineligible"]},evaluatedAt:Ke,issues:{type:"array",maxItems:20,uniqueItems:!0,items:_e},canRevoke:{type:"boolean"},revokedBy:Bo,revokeReason:{type:["string","null"],maxLength:4e3},taskPolicy:Ws},qo={type:"object",additionalProperties:!1,required:Object.keys(Ko),properties:Ko},Zl={$id:xs,...qo},Us={schemaVersion:{const:js},operationId:Pt,environmentKey:{enum:["preproduction","production"]},reason:{type:"string",minLength:1,maxLength:2e3,pattern:"\\S"}},vs={...Us,operation:{const:"create"},workflowCode:Bo,delegatorRoleSubjectKey:wn,expectedDelegatorRevision:ut,delegateUserId:_e,delegateRoleSubjectKey:wn,expectedDelegateRevision:ut,validFrom:Ke,validTo:Ke},Ls={...Us,operation:{const:"revoke"},delegationId:Pt,expectedRevision:ut},Ms={$id:js,type:"object",oneOf:[{type:"object",additionalProperties:!1,required:Object.keys(vs),properties:vs},{type:"object",additionalProperties:!1,required:Object.keys(Ls),properties:Ls}]},td={type:"string",pattern:"^[0-9a-f]{64}$"},eu={$id:Fs,type:"object",additionalProperties:!1,required:["schemaVersion","operationId","operation","requestDigest","before","after","taskPolicy"],properties:{schemaVersion:{const:Fs},operationId:Pt,operation:{enum:["create","revoke"]},requestDigest:td,before:{anyOf:[qo,{type:"null"}]},after:{...qo,properties:{...Ko,id:{anyOf:[Pt,{type:"null"}]}}},taskPolicy:Ws}};function nd(e){return e===void 0?"":`
9
+ ${Q(e)}`}function od(e,t){let o=e.handlers.find(n=>n.code===t);return Q(o?.workflowStep?o:e)}var id="openxiangda.data-business-command/v1",Bs="openxiangda.data-business-command-resolution/v1",iu=65536;function sd(e){let t=0,o=0,n=new Set,i=new TextEncoder,s=()=>{throw new Error("OPENXIANGDA_DATA_COMMAND_INTENT_INVALID")},a=c=>(o+=i.encode(c).byteLength,o>65536&&s(),c),r=(c,l)=>{if(++t>1e4||l>32)return s();if(c===null||typeof c=="string"||typeof c=="boolean")return a(JSON.stringify(c));if(typeof c=="number")return Number.isFinite(c)?a(JSON.stringify(c)):s();if(!c||typeof c!="object"||n.has(c)||Object.getOwnPropertySymbols(c).length)return s();n.add(c);let p;if(Array.isArray(c))return Object.keys(c).length!==c.length?s():(p=a("[")+c.map((u,g)=>(g?a(","):"")+r(u,l+1)).join("")+a("]"),n.delete(c),p);let d=Object.getPrototypeOf(c);return d!==Object.prototype&&d!==null?s():(p=a("{")+Object.keys(c).sort().map((u,g)=>(g?a(","):"")+a(JSON.stringify(u))+a(":")+r(c[u],l+1)).join("")+a("}"),n.delete(c),p)};return!e||typeof e!="object"||Array.isArray(e)?s():r(e,0)}function rd(e,t,o=!1){let n=e,i=()=>{throw new Error("OPENXIANGDA_DATA_COMMAND_RESPONSE_INVALID")};if(!n||typeof n!="object"||n.schemaVersion!==Bs)return i();for(let c of["appCode","environmentKey","operationCode","idempotencyKey","intentDigest"])if(n[c]!==t[c])return i();if(typeof n.observedAt!="string"||!Number.isFinite(Date.parse(n.observedAt)))return i();if(n.outcome==="not_observed"&&n.receipt===null&&!o)return n;if(n.outcome!=="committed"||!n.receipt)return i();let s=n.receipt,a=c=>typeof c=="string"&&/^[a-f0-9]{8}(-[a-f0-9]{4}){3}-[a-f0-9]{12}$/i.test(c);if(!a(s.id)||!a(s.appVersionId)||!Number.isSafeInteger(s.environmentHeadRevision)||s.environmentHeadRevision<1||typeof s.completedAt!="string"||!Number.isFinite(Date.parse(s.completedAt)))return i();let r=s.transaction;if(!r||r.schemaVersion!=="openxiangda.data-transaction-result/v2"||r.idempotencyKey!==t.idempotencyKey||typeof r.replayed!="boolean"||!Array.isArray(r.items)||!r.items.length||r.items.length>1e3)return i();for(let[c,l]of r.items.entries()){if(!l||l.index!==c)return i();if(l.operation==="emitEvent"){if(!a(l.eventId)||typeof l.eventType!="string"||!l.eventType)return i()}else if(!["create","update","delete","increment"].includes(l.operation)||!a(l.id)||typeof l.resourceCode!="string"||!l.resourceCode||!Number.isSafeInteger(l.revision)||l.revision<1)return i()}return n}function Ks(e,t){if(t===void 0)return e;let o=e.views?.find(a=>a.code===t);if(!o)throw new Error(`DATA_RESOURCE_VIEW_NOT_FOUND: ${t}`);let n=new Map(o.sections?.flatMap(a=>a.fields.map(r=>[r,a.title]))),{views:i,...s}=e;return{...s,generated:o.generated,list:o.list,form:o.form,detail:o.detail,mobile:o.mobile,fields:Object.fromEntries(Object.entries(e.fields).map(([a,r])=>{let{section:c,...l}=r,p=n.get(a);return[a,{...l,...p?{section:p}:{},list:o.list.fieldOrder?.includes(a)??!1}]}))}}var ad="4ac94b73641338f07a5a6c7ff5009ba37f9f7a005031a24c0ae740d0b54bfa59";0&&(module.exports={DATA_AUDIT_METADATA_FIELDS,DATA_BUSINESS_COMMAND_INTENT_MAX_BYTES,DATA_BUSINESS_COMMAND_RESOLUTION_SCHEMA,DATA_BUSINESS_COMMAND_SCHEMA,DATA_EVENT_TYPES_V2,DATA_FORM_DRAFT_MAX_BYTES,DATA_SUBTABLE_MAX_ROWS,DATA_SUBTABLE_MAX_TOTAL_ROWS,DATA_SYSTEM_SORT_FIELD_CODES,DATA_TRANSACTION_MAX_BYTES,DATA_TRANSACTION_MAX_OPERATIONS,ManagedConcurrencyContractError,NATIVE_CONFIGURATION_VALIDATOR_DIGEST,NATIVE_CONTRACT_CAPACITY_V2,NATIVE_DATA_POLICY_EXPRESSION_MAX_CLAUSES,NATIVE_DATA_POLICY_EXPRESSION_MAX_DEPTH,NATIVE_DATA_POLICY_EXPRESSION_MAX_GROUP_ITEMS,NATIVE_DATA_POLICY_EXPRESSION_MAX_LEAVES,NATIVE_DATA_POLICY_EXPRESSION_MAX_OCCURRENCES,NATIVE_DATA_QUERY_OPERATORS_V2,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_BYTES,NATIVE_ROLE_MEMBERSHIP_BATCH_MAX_ITEMS,NATIVE_UNIQUE_KEY_MAX_BYTES,NATIVE_UNIQUE_KEY_NORMALIZERS,NativeConfigurationCompilerError,NativeDataFieldContractV2Error,NativeDataPolicyExpressionV2Error,NativeDecimalLifecycleContractError,NativeEventActionContractError,NativeRoleMembershipBatchInputError,NativeScopeSourceFieldPathV2Error,NativeUniqueKeyContractError,OPENXIANGDA_NATIVE_DATA_FIELD_TYPES_V2,OPENXIANGDA_NATIVE_DATA_SURFACE_KEYS_V2,OPENXIANGDA_NATIVE_DRAFT_STATE_KEYS_V2,OPENXIANGDA_NATIVE_SYSTEM_FIELDS_V2,OPENXIANGDA_NATIVE_SYSTEM_FIELD_MAP_V2,USER_CANDIDATE_MAX_SELECTIONS,USER_CANDIDATE_SCOPE_FIELD_TYPES,UserCandidateContractError,WORKFLOW_APPROVAL_EMPTY_PROVIDERS,WORKFLOW_AUTOMATIC_CC_MAX_RECIPIENTS,WORKFLOW_AUTOMATIC_CC_PROVIDERS,WORKFLOW_BUSINESS_STEP_EVENT,WORKFLOW_BUSINESS_STEP_EVENTS,WORKFLOW_BUSINESS_STEP_FACTS_KEY,WORKFLOW_BUSINESS_STEP_MAX_BYTES,WORKFLOW_BUSINESS_STEP_MAX_RECEIPT_BYTES,WORKFLOW_CONFIGURABLE_OPERATIONS,WORKFLOW_CONFIGURABLE_PROVIDERS,WORKFLOW_EVENT_TYPES_V2,WORKFLOW_LAUNCH_PREFLIGHT_PROVIDERS,WORKFLOW_REJECTION_NOTIFICATION_MAX_BYTES,WORKFLOW_REJECTION_NOTIFICATION_SCHEMA,WORKFLOW_ROUTING_MAX_BYTES,WORKFLOW_ROUTING_MAX_MATCHED_RULES,WORKFLOW_ROUTING_MAX_RULES,WORKFLOW_TASK_PAGE_DEFINITION_MAX_BYTES,WORKFLOW_TASK_PAGE_MAX_BYTES,WORKFLOW_TASK_PAGE_MAX_FIELDS,WORKFLOW_TASK_SUBTABLE_MAX_ROWS,WORKFLOW_TASK_SUBTABLE_MAX_TOTAL_ROWS,WorkflowTaskPageError,applyWorkflowTaskPageValues,applyWorkflowTaskSubtableRows,assertNativeRoleMembershipBatchInput,canonicalDataBusinessIntent,compileNativeApplicationConfiguration,compileNativeEventAction,compileNativeEventCapturePlansV2,compileRequiredPlatformCapabilitiesV3,compileWorkflowBusinessStepHandlers,evaluateWorkflowTaskPageExpression,formatWorkflowExpression,hasDataAuditReadPolicy,isDataAuditMetadataField,isDataSystemSortField,isNativeDataQueryOperatorV2,isNativeMultiValueFieldV2,isWorkflowRejectionNotificationSnapshot,materializeNativeDataQueryPathTypesV2,nativeDataPolicyExpressionLeavesV2,nativeDataPolicyExpressionToCnfV2,nativeDataQueryPathPlanV2,nativeFieldAggregatePlanV2,nativeFieldColumnDefinitionV2,nativeFieldDefaultSqlV2,nativeFieldHasDefaultV2,nativeFieldIndexStatementsV2,nativeFieldRequiresCreateInputV2,nativeFieldSequenceGrantStatementsV2,nativeFieldSequenceOwnershipStatementsV2,nativeFieldSequenceStatementsV2,nativeFieldSupportsFilterV2,nativeFieldSupportsOperatorV2,nativeFieldSupportsSearchV2,nativeFieldSupportsSortV2,nativeOperatorsForFieldV2,nativePhysicalFieldV2,nativePhysicalFieldsV2,nativePhysicalObjectNameV2,nativeScopeSourceFieldValueV2,nativeScopeSourceGrantPathSupportedV2,nativeScopeSourceSubjectPathSupportedV2,nativeSubtableConstraintStatementsV2,nativeUniqueKeysContractVersion,nativeUniqueKeysJsonSchema,parseDataBusinessCommandResolution,parseDataFieldUserCandidates,parseDecimalReservationLifecycle,parseNativeDataFieldsV2,parseNativeDataResourceInvariantsV2,parseNativeUniqueKeys,projectDataResourceView,projectNativeDataResourceViewV2,projectWorkflowGraph,projectWorkflowNodePolicy,quoteNativeIdentifierV2,refreshWorkflowTaskPageFacts,resolveNativeScopeSourceFieldPathV2,resolveWorkflowUserCandidates,selectWorkflowAssignmentRoutingRules,serializedDataBytes,userCandidateScopeValue,validateDecimalReservationLifecycles,validateManagedConcurrency,validateNativeDataDraftStateV2,validateNativeDataResourceReferencesV2,validateNativeDataResourceSurfaceV2,validateUserCandidateReferences,validateWorkflowAdministration,validateWorkflowApprovalEmptyPolicy,validateWorkflowAssignmentRoutingBindings,validateWorkflowAssignmentRoutingPolicy,validateWorkflowAssignmentRoutingRules,validateWorkflowAutomaticCc,validateWorkflowBusinessStepHandlerContract,validateWorkflowBusinessStepRequest,validateWorkflowBusinessStepResult,validateWorkflowBusinessStepSchema,validateWorkflowBusinessStepSubscriptions,validateWorkflowBusinessSteps,validateWorkflowCommandHandlers,validateWorkflowInitiatorApprovalPolicy,validateWorkflowInstanceCommandPolicies,validateWorkflowLaunchPreflight,validateWorkflowNodeConfigurationPatch,validateWorkflowReadability,validateWorkflowRejectionNotification,validateWorkflowTaskPages,validateWorkflowUserCandidateBindings,workflowApprovalCanSkip,workflowAssignmentRoutingFacts,workflowAssignmentRoutingPolicySchema,workflowAssignmentRoutingSemantic,workflowBindingAllowsEmptyUsers,workflowBusinessCommandInvocationSchema,workflowBusinessStepFactSchema,workflowBusinessStepHandlerDigest,workflowBusinessStepInput,workflowBusinessStepPath,workflowBusinessStepReceiptSignatureSuffix,workflowBusinessStepValueMatches,workflowDelegationMutationRequestSchema,workflowExpressionPaths,workflowInitiatorApprovalCanComplete,workflowInstanceCommandDeadlineError,workflowInstanceTerminateCapabilityAllowed,workflowInstanceWithdrawalReasonRequired,workflowNodeAllowedOperations,workflowOperationCommentRequired,workflowPolicyTimestamp,workflowTaskPageFieldState,workflowTaskPageReplayCoversInvalidation,workflowTaskSubtableRows});