pyric 0.1.0-alpha.21 → 0.1.0-alpha.24

package/dist/storage/sandbox/rules-collection-methods.js

@@ -0,0 +1,149 @@
+import { FirestoreSet } from '../../rules/simulator/firestore-set.js';
+import { MapDiff } from '../../rules/simulator/mapdiff.js';
+import { RuleEvalError } from './rules-evaluation-error.js';
+import { evalArguments, evalValueMethod, expectNoArguments, functionNotFound, } from './rules-method-calls.js';
+import { describeRulesType as describeType, isRuleError as isErr, isRulesMap, rulesEquals, } from './rules-values.js';
+const SET_ALGEBRA = ['difference', 'intersection', 'union'];
+const MAP_DIFF_KEY_SETS = ['addedKeys', 'affectedKeys', 'changedKeys', 'removedKeys', 'unchangedKeys'];
+/**
+ * `.size()` on the sized types: string length, list element count, map
+ * own-key count, Set member count, and the Bytes count the Bytes value
+ * answers for itself.
+ */
+function evalSize(receiver, expr) {
+    expectNoArguments(expr);
+    if (typeof receiver === 'string' || Array.isArray(receiver))
+        return receiver.length;
+    if (isRulesMap(receiver))
+        return Object.keys(receiver).length;
+    if (receiver instanceof FirestoreSet)
+        return receiver.size();
+    return evalValueMethod(receiver, expr);
+}
+/** `Map.keys()` returns the map's own keys and never exposes JS prototypes. */
+function evalMapKeys(receiver, expr) {
+    expectNoArguments(expr);
+    if (!isRulesMap(receiver))
+        throw functionNotFound(expr.method);
+    return Object.keys(receiver);
+}
+/** `Map.get(key, default)` for the production-probed string-key form. */
+function evalMapGet(receiver, expr, ctx) {
+    if (!isRulesMap(receiver))
+        throw functionNotFound(expr.method);
+    if (expr.args.length !== 2) {
+        throw new RuleEvalError(`get() expects a key and default value`);
+    }
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    const [key, fallback] = args;
+    if (typeof key !== 'string') {
+        throw new RuleEvalError(`get() key must be a string`);
+    }
+    return Object.prototype.hasOwnProperty.call(receiver, key) ? receiver[key] : fallback;
+}
+/**
+ * `hasAll`, `hasAny`, and `hasOnly` on a List or Set receiver, with a List
+ * or Set argument, under Rules value equality.
+ */
+function evalMembership(receiver, expr, ctx) {
+    const members = membersOf(receiver);
+    if (members === undefined)
+        throw functionNotFound(expr.method);
+    if (expr.args.length !== 1) {
+        throw new RuleEvalError(`${expr.method}() expects one list or set argument`);
+    }
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    const candidates = membersOf(args[0]);
+    if (candidates === undefined) {
+        throw new RuleEvalError(`${expr.method}() argument must be a list or set`);
+    }
+    const contains = (values, value) => values.some((item) => rulesEquals(item, value));
+    if (expr.method === 'hasAll')
+        return candidates.every((candidate) => contains(members, candidate));
+    if (expr.method === 'hasAny')
+        return candidates.some((candidate) => contains(members, candidate));
+    return members.every((member) => contains(candidates, member));
+}
+/** The members of a List or Set, or undefined for any other value. */
+function membersOf(value) {
+    if (Array.isArray(value))
+        return value;
+    if (value instanceof FirestoreSet)
+        return value.toArray();
+    return undefined;
+}
+/** `List.toSet()`: the list's distinct members as a Set. */
+function evalToSet(receiver, expr) {
+    expectNoArguments(expr);
+    if (!Array.isArray(receiver))
+        throw functionNotFound(expr.method);
+    return new FirestoreSet(receiver);
+}
+/**
+ * `Set.difference`, `Set.union`, and `Set.intersection`. They take a Set
+ * argument; production rejects a List argument with "Unsupported operation
+ * error" and a List receiver with "Function not found error", both captured
+ * by rules-storage-stdlib-sets-and-mapdiff.
+ */
+function evalSetAlgebra(receiver, expr, ctx) {
+    if (!(receiver instanceof FirestoreSet))
+        throw functionNotFound(expr.method);
+    if (expr.args.length !== 1) {
+        throw new RuleEvalError(`${expr.method}() expects one set argument`);
+    }
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    const [other] = args;
+    if (!(other instanceof FirestoreSet)) {
+        throw new RuleEvalError(`Unsupported operation error. Received: set.${expr.method}(${describeType(other)}). Expected: set.${expr.method}(set).`);
+    }
+    return receiver[expr.method](other);
+}
+/**
+ * `Map.diff(other)`: a MapDiff from `other` (the before state) to the
+ * receiver (the after state), as in
+ * `request.resource.metadata.diff(resource.metadata)`.
+ */
+function evalMapDiff(receiver, expr, ctx) {
+    if (!isRulesMap(receiver))
+        throw functionNotFound(expr.method);
+    if (expr.args.length !== 1) {
+        throw new RuleEvalError(`diff() expects one map argument`);
+    }
+    const args = evalArguments(expr, ctx);
+    if (isErr(args))
+        return args;
+    const [before] = args;
+    if (!isRulesMap(before)) {
+        throw new RuleEvalError(`diff() argument must be a map, got ${describeType(before)}`);
+    }
+    return new MapDiff(before, receiver);
+}
+/** The MapDiff key sets `addedKeys()` through `unchangedKeys()`, each a Set. */
+function evalMapDiffKeySet(receiver, expr) {
+    expectNoArguments(expr);
+    if (!(receiver instanceof MapDiff))
+        throw functionNotFound(expr.method);
+    return receiver[expr.method]();
+}
+function methodsNamed(names, method) {
+    return Object.fromEntries(names.map((name) => [name, method]));
+}
+export const collectionMethods = {
+    diff: evalMapDiff,
+    get: evalMapGet,
+    hasAll: evalMembership,
+    hasAny: evalMembership,
+    hasOnly: evalMembership,
+    keys: evalMapKeys,
+    size: evalSize,
+    toSet: evalToSet,
+    ...methodsNamed(SET_ALGEBRA, evalSetAlgebra),
+    ...methodsNamed(MAP_DIFF_KEY_SETS, evalMapDiffKeySet),
+};
+//# sourceMappingURL=rules-collection-methods.js.map

package/dist/storage/sandbox/rules-collection-methods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-collection-methods.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-collection-methods.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,gBAAgB,GAIjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,IAAI,YAAY,EACjC,WAAW,IAAI,KAAK,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,CAAU,CAAC;AAGrE,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,CAAU,CAAC;AAGhH;;;;GAIG;AACH,SAAS,QAAQ,CAAC,QAAiB,EAAE,IAAgB;IACnD,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IACpF,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,QAAQ,YAAY,YAAY;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,QAAiB,EAAE,IAAgB;IACtD,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,QAAiB,EAAE,IAAgB,EAAE,GAAY;IACnE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,QAAiB,EAAE,IAAgB,EAAE,GAAY;IACvE,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,qCAAqC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,mCAAmC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAiB,EAAE,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxG,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACnG,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,SAAS,SAAS,CAAC,QAAiB,EAAE,IAAgB;IACpD,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,QAAiB,EAAE,IAAgB,EAAE,GAAY;IACvE,IAAI,CAAC,CAAC,QAAQ,YAAY,YAAY,CAAC;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,6BAA6B,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CACrB,8CAA8C,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,MAAM,QAAQ,CACxH,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAA0B,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,QAAiB,EAAE,IAAgB,EAAE,GAAY;IACpE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,sCAAsC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,SAAS,iBAAiB,CAAC,QAAiB,EAAE,IAAgB;IAC5D,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,QAAQ,YAAY,OAAO,CAAC;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAuB,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAwB,EAAE,MAAsB;IACpE,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,SAAS;IAChB,GAAG,YAAY,CAAC,WAAW,EAAE,cAAc,CAAC;IAC5C,GAAG,YAAY,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;CACtD,CAAC"}

package/dist/storage/sandbox/rules-evaluator.d.ts

@@ -3,8 +3,8 @@ export declare function evaluateStorageRules(rules: StorageRules, input: Evaluat
 /** Everything an expression needs to evaluate. */
 export interface EvalCtx {
     input: EvaluationInput;
-    /** `request.time` as epoch milliseconds (injected by the caller,
-     *  defaulting to evaluation-time now). */
+    /** The evaluation instant in epoch milliseconds (injected by the caller,
+     *  defaulting to evaluation-time now); `request.time` is its Timestamp. */
     now: number;
     /** Path wildcards from the enclosing match. Empty inside a function
      *  body: caller wildcards do not leak in except via arguments. */

package/dist/storage/sandbox/rules-evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules-evaluator.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-evaluator.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,IAAI,EACT,KAAK,eAAe,EACpB,KAAK,WAAW,EAGhB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAkBpB,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,eAAe,EACtB,GAAG,GAAE,IAAiB,EACtB,eAAe,CAAC,EAAE,eAAe,GAChC,gBAAgB,CAoGlB;AAsCD,kDAAkD;AAClD,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,eAAe,CAAC;IACvB;8CAC0C;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ;sEACkE;IAClE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iDAAiD;IACjD,KAAK,EAAE,WAAW,CAAC;IACnB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd;wEACoE;IACpE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,wEAAwE;IACxE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAChC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAiL1D"}
+{"version":3,"file":"rules-evaluator.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-evaluator.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,IAAI,EACT,KAAK,eAAe,EACpB,KAAK,WAAW,EAGhB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AA2BpB,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,eAAe,EACtB,GAAG,GAAE,IAAiB,EACtB,eAAe,CAAC,EAAE,eAAe,GAChC,gBAAgB,CA+GlB;AA+BD,kDAAkD;AAClD,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,eAAe,CAAC;IACvB;+EAC2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ;sEACkE;IAClE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iDAAiD;IACjD,KAAK,EAAE,WAAW,CAAC;IACnB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd;wEACoE;IACpE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,wEAAwE;IACxE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAChC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CA2L1D"}

package/dist/storage/sandbox/rules-evaluator.js

@@ -1,14 +1,17 @@
+import { FirestoreSet } from '../../rules/simulator/firestore-set.js';
 import { RulesFloat } from '../../rules/simulator/wrappers/float.js';
 import { expandVerb, } from './rules.js';
+import { buildRequestObject, buildResourceObject } from './rules-bindings.js';
 import { evalMethodCall } from './rules-methods.js';
+import { cmp, evalValueOperator, isFloatNum, isValueTypeOperand, numOp, typeMatches, } from './rules-operators.js';
 import { formatPath, matchSegments, splitPath } from './rules-path-match.js';
 import { RuleEvalError, RuleResourceLimitError, RuleUnsupportedError, isAbsorbableEvalError, } from './rules-evaluation-error.js';
 import { RuleError, describeRulesType as describeType, isRuleError as isErr, isRulesMap, numericValue as numVal, rulesEquals, } from './rules-values.js';
 export function evaluateStorageRules(rules, input, now = new Date(), firestoreLookup) {
-    // `request.time` is the request's evaluation moment, modeled internally
-    // as epoch milliseconds so it compares numerically against the
-    // `timestamp.date(...)` / `timestamp.value(...)` constructors. The caller
-    // injects it (deterministic in tests); it defaults to now.
+    // `request.time` is the request's evaluation moment. The caller injects it
+    // (deterministic in tests); it defaults to now. The request binding turns
+    // it into the Timestamp value `timestamp.date(...)` and
+    // `timestamp.value(...)` also build.
     const nowMillis = now.getTime();
     const pathSegments = splitPath(input.request.path);
     const reasons = [];
@@ -43,8 +46,9 @@ export function evaluateStorageRules(rules, input, now = new Date(), firestoreLo
                     continue;
                 let result;
                 try {
-                    const value = rule.condition
-                        ? evalExpr(rule.condition, {
+                    let value = true;
+                    if (rule.condition) {
+                        value = evalExpr(rule.condition, {
                             input,
                             now: nowMillis,
                             params: newParams,
@@ -53,20 +57,32 @@ export function evaluateStorageRules(rules, input, now = new Date(), firestoreLo
                             depth: 0,
                             firestoreLookup,
                             firestoreAccesses,
-                        })
-                        : true;
-                    // An error value reaching the allow boundary DENIES, carrying
-                    // production's own message (e.g. "Property name is undefined on
-                    // object.") into the reason trace.
-                    if (isErr(value)) {
-                        reasons.push(`match ${formatPath(block.segments)} ${input.request.method}: ${value.message}`);
+                        });
+                    }
+                    if (typeof value === 'boolean') {
+                        result = value;
+                    }
+                    else {
+                        // Not a bool. Either the expression already produced an evaluation
+                        // error, or CEL's boolean typing of the allow boundary makes one
+                        // here: the same `RuleError` the ternary condition raises, rather
+                        // than a truthiness coercion. Both DENY this rule with production's
+                        // own message in the reason trace and continue to the next rule.
+                        // Registry rows
+                        // `storage-rules#storage.semantic.strict-boolean-allow-boundary`
+                        // and `storage-rules#storage.semantic.strict-boolean-ternary-condition`
+                        // carry the claim; corpus scenario
+                        // `strict-boolean-allow-and-ternary` is the capture that verifies it.
+                        let failure;
+                        if (isErr(value)) {
+                            failure = value;
+                        }
+                        else {
+                            failure = new RuleError(`Allow condition expected bool, got ${describeType(value)}.`);
+                        }
+                        reasons.push(`match ${formatPath(block.segments)} ${input.request.method}: ${failure.message}`);
                         continue;
                     }
-                    // Unverified: production's behavior for a non-boolean allow
-                    // condition (a CEL type error there, rather than this truthiness
-                    // coercion) has not been captured. The coercion stays as written
-                    // until a production capture settles it.
-                    result = truthy(value);
                 }
                 catch (err) {
                     // Any function-evaluation failure (undefined function, wrong
@@ -111,13 +127,6 @@ function readProperty(obj, name) {
         return new RuleError(`Property ${name} is undefined on object.`);
     return v;
 }
-function truthy(v) {
-    // An error value is never truthy: it denies. (Without this, a `RuleError`
-    // object would be truthy and every absent-property read would FALSE-ALLOW.)
-    if (isErr(v))
-        return false;
-    return v !== false && v !== null && v !== undefined && !(typeof v === 'number' && Number.isNaN(v));
-}
 /**
  * Raised when a user-defined function cannot be evaluated (undefined,
  * wrong arity, call depth exceeded, or an error surfacing from within a
@@ -228,11 +237,15 @@ export function evalExpr(expr, ctx) {
             // through to the alternate branch and potentially allow.
             if (isErr(c))
                 return c;
-            // Unverified: production's behavior for a non-boolean ternary
-            // condition (a CEL type error there, rather than this truthiness
-            // coercion) has not been captured. The coercion stays as written
-            // until a production capture settles it.
-            return truthy(c) ? evalExpr(expr.then, ctx) : evalExpr(expr.else, ctx);
+            // CEL types the condition as bool. A non-boolean condition is an
+            // evaluation error, which `&&` and `||` absorb like any other. Registry
+            // row `storage-rules#storage.semantic.strict-boolean-ternary-condition`
+            // carries the claim; corpus scenario `strict-boolean-allow-and-ternary`
+            // is the capture that would verify it.
+            if (typeof c !== 'boolean') {
+                return new RuleError(`Ternary condition expected bool, got ${describeType(c)}.`);
+            }
+            return c ? evalExpr(expr.then, ctx) : evalExpr(expr.else, ctx);
         }
         case 'in': {
             const el = evalExpr(expr.element, ctx);
@@ -247,9 +260,11 @@ export function evalExpr(expr, ctx) {
             // (which walks the prototype chain) would false-ALLOW here.
             if (Array.isArray(coll))
                 return coll.some((v) => rulesEquals(v, el));
+            if (coll instanceof FirestoreSet)
+                return coll.hasAll([el]);
             if (isRulesMap(coll))
                 return typeof el === 'string' && Object.prototype.hasOwnProperty.call(coll, el);
-            return new RuleError(`'in' applied to ${describeType(coll)} (expected a list or map).`);
+            return new RuleError(`'in' applied to ${describeType(coll)} (expected a list, set, or map).`);
         }
         case 'is': {
             const v = evalExpr(expr.value, ctx);
@@ -321,6 +336,11 @@ export function evalExpr(expr, ctx) {
             const r = evalExpr(expr.right, ctx);
             if (isErr(r))
                 return r;
+            // Timestamp, Duration, and Bytes operands own their comparison and
+            // arithmetic operators; equality stays with rulesEquals below.
+            if (expr.op !== '==' && expr.op !== '!=' && (isValueTypeOperand(l) || isValueTypeOperand(r))) {
+                return evalValueOperator(expr.op, l, r);
+            }
             switch (expr.op) {
                 // Lists and maps compare STRUCTURALLY (production `[a] == [a]` is true;
                 // JS reference identity would make every literal comparison
@@ -462,102 +482,4 @@ function evalCall(expr, ctx) {
     }
     return evalExpr(fn.body, bodyCtx);
 }
-/**
- * `value is <type>` check. Numbers use the RULES-B5 model: a `RulesFloat`
- * wrapper is a FLOAT, a bare number is an INT — so `1.0 is float` and
- * `!(1.0 is int)` type by literal form exactly as production does. A bare
- * NON-integral number (a fractional value that arrived from data rather than
- * a literal, e.g. a Firestore-lookup double) still reads as float. `number`
- * accepts either.
- */
-function typeMatches(v, typeName) {
-    switch (typeName) {
-        case 'string': return typeof v === 'string';
-        case 'bool': return typeof v === 'boolean';
-        case 'int': return typeof v === 'number' && Number.isInteger(v);
-        case 'float': return v instanceof RulesFloat || (typeof v === 'number' && !Number.isInteger(v));
-        case 'number': return v instanceof RulesFloat || typeof v === 'number';
-        case 'list': return Array.isArray(v);
-        case 'map': return isRulesMap(v);
-        default:
-            // timestamp/duration/path/latlng are modeled as plain millis/strings
-            // here — a type test against them cannot answer honestly, so deny
-            // with a reason rather than false-allow.
-            return new RuleError(`'is ${typeName}' is not supported by the storage evaluator.`);
-    }
-}
-/** Raw numeric value of an int (bare number) or float (RulesFloat); undefined
- *  for anything else. */
-function isFloatNum(v) {
-    return v instanceof RulesFloat;
-}
-function cmp(a, b) {
-    const an = numVal(a);
-    const bn = numVal(b);
-    // CEL compares int and float by numeric value (`1 < 1.5` is well-typed).
-    if (an !== undefined && bn !== undefined)
-        return an - bn;
-    if (typeof a === 'string' && typeof b === 'string')
-        return a < b ? -1 : a > b ? 1 : 0;
-    return Number.NaN; // mismatched types → NaN → all comparisons return false
-}
-/** Arithmetic over ints and floats: unwraps, computes, and RE-TAGS the result
- *  as a float when either operand was one (int op float promotes to float). */
-function numOp(a, b, fn) {
-    const an = numVal(a);
-    const bn = numVal(b);
-    if (an === undefined || bn === undefined)
-        return undefined;
-    const result = fn(an, bn);
-    return isFloatNum(a) || isFloatNum(b) ? new RulesFloat(result) : result;
-}
-/**
- * Build the `resource.*` binding from the existing-object record, converting
- * the ISO-8601 time fields to epoch millis so they compare numerically against
- * `request.time` (which {@link buildRequestObject} models the same way) and
- * against each other (`resource.timeCreated == resource.updated`).
- *
- * A field the record does not carry is left `undefined`, which
- * {@link readProperty} reports as production's absent-property ERROR.
- */
-function buildResourceObject(resource) {
-    return {
-        size: resource.size,
-        contentType: resource.contentType,
-        metadata: resource.metadata,
-        name: resource.name,
-        bucket: resource.bucket,
-        generation: resource.generation,
-        metageneration: resource.metageneration,
-        timeCreated: isoToMillis(resource.timeCreated),
-        updated: isoToMillis(resource.updated),
-    };
-}
-/** ISO-8601 → epoch millis. An unparseable or absent value stays `undefined`
- *  (→ absent-property error → deny) rather than becoming `NaN`. */
-function isoToMillis(iso) {
-    if (iso === undefined)
-        return undefined;
-    const ms = Date.parse(iso);
-    return Number.isNaN(ms) ? undefined : ms;
-}
-function buildRequestObject(input, now) {
-    return {
-        // The production Storage engine represents anonymous auth as an absent
-        // property, not a usable null value. Ordinary `request.auth != null`
-        // gates still deny, while conditionals cannot incorrectly select a
-        // fallback branch from the synthetic null.
-        auth: input.request.auth ?? new RuleError('Property auth is undefined on object.'),
-        // Production treats an operation without an incoming object (notably
-        // delete/read) as an absent binding. A direct null comparison errors just
-        // like a property read; neither may turn the missing value into an allow.
-        resource: input.request.resource ?? new RuleError('Property resource is undefined on object.'),
-        method: input.request.method,
-        path: input.request.path,
-        // `request.time` as epoch millis — see the timestamp constructors in
-        // `evalMethodCall`, which produce the same representation so comparisons
-        // like `request.time < timestamp.date(2030, 1, 1)` are plain numerics.
-        time: now,
-    };
-}
 //# sourceMappingURL=rules-evaluator.js.map

package/dist/storage/sandbox/rules-evaluator.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules-evaluator.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACrE,OAAO,EACL,UAAU,GASX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,SAAS,EACT,iBAAiB,IAAI,YAAY,EACjC,WAAW,IAAI,KAAK,EACpB,UAAU,EACV,YAAY,IAAI,MAAM,EACtB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAE3B,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EACnB,KAAsB,EACtB,MAAY,IAAI,IAAI,EAAE,EACtB,eAAiC;IAEjC,wEAAwE;IACxE,+DAA+D;IAC/D,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,8DAA8D;IAC9D,oEAAoE;IACpE,wDAAwD;IACxD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/D;;;;;OAKG;IACH,SAAS,KAAK,CACZ,KAAiB,EACjB,SAAmB,EACnB,MAAyC;QAEzC,gEAAgE;QAChE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAExB,4DAA4D;QAC5D,oDAAoD;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,6DAA6D;gBAC7D,8DAA8D;gBAC9D,kDAAkD;gBAClD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS;wBAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;4BACvB,KAAK;4BACL,GAAG,EAAE,SAAS;4BACd,MAAM,EAAE,SAAS;4BACjB,MAAM,EAAE,EAAE;4BACV,KAAK,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,GAAG,EAAE;4BACtC,KAAK,EAAE,CAAC;4BACR,eAAe;4BACf,iBAAiB;yBAClB,CAAC;wBACJ,CAAC,CAAC,IAAI,CAAC;oBACT,8DAA8D;oBAC9D,gEAAgE;oBAChE,mCAAmC;oBACnC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;wBACjB,OAAO,CAAC,IAAI,CACV,SAAS,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,CAChF,CAAC;wBACF,SAAS;oBACX,CAAC;oBACD,4DAA4D;oBAC5D,iEAAiE;oBACjE,iEAAiE;oBACjE,yCAAyC;oBACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,6DAA6D;oBAC7D,+DAA+D;oBAC/D,+DAA+D;oBAC/D,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,SAAS,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,CAC9E,CAAC;wBACF,SAAS;oBACX,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,IAAI,MAAM;oBAAE,OAAO,IAAI,CAAC;gBACxB,OAAO,CAAC,IAAI,CACV,SAAS,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,gDAAgD;QAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;kCAEkC;AAClC,SAAS,YAAY,CAAC,GAAY,EAAE,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,SAAS,CAAC,YAAY,IAAI,oBAAoB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,SAAS,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAwB,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,SAAS,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IACtF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;GAMG;AACH;;;;GAIG;AACH,MAAM,cAAc,GAAG,EAAE,CAAC;AAwB1B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAU,EAAE,GAAY;IAC/C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,iEAAiE;YACjE,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3E,uEAAuE;YACvE,sEAAsE;YACtE,yDAAyD;YACzD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC7B,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI;oBAChC,CAAC,CAAC,IAAI,SAAS,CAAC,mBAAmB,CAAC;oBACpC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC7E,OAAO,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC3B,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,KAAK,YAAY;YACf,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM;YACT,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,6CAA6C;YAC7C,MAAM,IAAI,oBAAoB,CAAC,mFAAmF,CAAC,CAAC;QACtH,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;gBACpB,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBACb,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,IAAI,aAAa,CAAC,oCAAoC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,UAAU;oBAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,IAAI,SAAS,CAAC,wBAAwB,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5F,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACnC,oEAAoE;YACpE,yDAAyD;YACzD,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,8DAA8D;YAC9D,iEAAiE;YACjE,iEAAiE;YACjE,yCAAyC;YACzC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7B,yEAAyE;YACzE,mEAAmE;YACnE,mEAAmE;YACnE,4DAA4D;YAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACrE,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO,IAAI,SAAS,CAAC,mBAAmB,YAAY,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,OAAO,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAc,EAAE,CAAC;YAC1B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5B,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACvB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACnC,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,IAAI,SAAS,CAAC,sBAAsB,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;gBAC9G,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/G,OAAO,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;YACzD,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC/C,OAAO,IAAI,SAAS,CAAC,iBAAiB,KAAK,IAAI,GAAG,sBAAsB,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClH,CAAC;gBACD,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,IAAI,SAAS,CAAC,oBAAoB,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;gBAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACtF,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;gBAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACrF,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;gBAChB,wEAAwE;gBACxE,4DAA4D;gBAC5D,8CAA8C;gBAC9C,KAAK,IAAI,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,KAAK,GAAG,CAAC,CAAE,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChC,KAAK,GAAG,CAAC,CAAE,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChC,KAAK,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjC,KAAK,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjC,KAAK,GAAG,CAAC,CAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/C,KAAK,GAAG,CAAC,CAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/C,KAAK,GAAG,CAAC,CAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/C,oEAAoE;gBACpE,oEAAoE;gBACpE,kEAAkE;gBAClE,kEAAkE;gBAClE,uDAAuD;gBACvD,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;wBAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;wBACpB,CAAC,CAAC,IAAI,SAAS,CAAC,mBAAmB,CAAC;wBACpC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;wBAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAC5B,IAAU,EACV,KAAW,EACX,WAAoB,EACpB,GAAY;IAEZ,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC,CAAC,qCAAqC;IAChF,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC,CAAC,8CAA8C;IACzF,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAoB,sCAAsC;IACjF,OAAO,CAAC,CAAC,CAAkC,0CAA0C;AACvF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,kBAAkB,CAAC,IAAU,EAAE,GAAY;IAClD,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,qBAAqB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,SAAS,CAAC,6CAA6C,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,IAAqC,EAAE,GAAY;IACnE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,oEAAoE;IACpE,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,oBAAoB,CAC5B,YAAY,IAAI,CAAC,IAAI,wBAAwB,EAAE,CAAC,gBAAgB,oDAAoD,CACrH,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,oBAAoB,CAC5B,YAAY,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,MAAM,CAAC,MAAM,qBAAqB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QAC3B,qEAAqE;QACrE,MAAM,IAAI,sBAAsB,CAC9B,YAAY,IAAI,CAAC,IAAI,8BAA8B,cAAc,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,6BAA6B;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,EAAE,EAAE,+CAA+C;QAC3D,MAAM;QACN,KAAK,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI,GAAG,EAAE;QAChC,KAAK;QACL,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;KACzC,CAAC;IACF,qEAAqE;IACrE,6DAA6D;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,CAAU,EAAE,QAAgB;IAC/C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC;QAC5C,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,SAAS,CAAC;QAC3C,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,KAAK,QAAQ,CAAC,CAAC,OAAO,CAAC,YAAY,UAAU,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;QACvE,KAAK,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrC,KAAK,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC;YACE,qEAAqE;YACrE,kEAAkE;YAClE,yCAAyC;YACzC,OAAO,IAAI,SAAS,CAAC,OAAO,QAAQ,8CAA8C,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;yBACyB;AACzB,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CAAC,YAAY,UAAU,CAAC;AACjC,CAAC;AAED,SAAS,GAAG,CAAC,CAAU,EAAE,CAAU;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,yEAAyE;IACzE,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,wDAAwD;AAC7E,CAAC;AAED;+EAC+E;AAC/E,SAAS,KAAK,CAAC,CAAU,EAAE,CAAU,EAAE,EAAoC;IACzE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,QAAyB;IACpD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9C,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;KACvC,CAAC;AACJ,CAAC;AAED;mEACmE;AACnE,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAsB,EAAE,GAAW;IAC7D,OAAO;QACL,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,SAAS,CAAC,uCAAuC,CAAC;QAClF,qEAAqE;QACrE,0EAA0E;QAC1E,0EAA0E;QAC1E,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,SAAS,CAAC,2CAA2C,CAAC;QAC9F,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QACxB,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,EAAE,GAAG;KACV,CAAC;AACJ,CAAC"}
+{"version":3,"file":"rules-evaluator.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACrE,OAAO,EACL,UAAU,GASX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,GAAG,EACH,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,KAAK,EACL,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,SAAS,EACT,iBAAiB,IAAI,YAAY,EACjC,WAAW,IAAI,KAAK,EACpB,UAAU,EACV,YAAY,IAAI,MAAM,EACtB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAE3B,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EACnB,KAAsB,EACtB,MAAY,IAAI,IAAI,EAAE,EACtB,eAAiC;IAEjC,2EAA2E;IAC3E,0EAA0E;IAC1E,wDAAwD;IACxD,qCAAqC;IACrC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,8DAA8D;IAC9D,oEAAoE;IACpE,wDAAwD;IACxD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/D;;;;;OAKG;IACH,SAAS,KAAK,CACZ,KAAiB,EACjB,SAAmB,EACnB,MAAyC;QAEzC,gEAAgE;QAChE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAExB,4DAA4D;QAC5D,oDAAoD;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,6DAA6D;gBAC7D,8DAA8D;gBAC9D,kDAAkD;gBAClD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,IAAI,KAAK,GAAY,IAAI,CAAC;oBAC1B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACnB,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;4BAC/B,KAAK;4BACL,GAAG,EAAE,SAAS;4BACd,MAAM,EAAE,SAAS;4BACjB,MAAM,EAAE,EAAE;4BACV,KAAK,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,GAAG,EAAE;4BACtC,KAAK,EAAE,CAAC;4BACR,eAAe;4BACf,iBAAiB;yBAClB,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;wBAC/B,MAAM,GAAG,KAAK,CAAC;oBACjB,CAAC;yBAAM,CAAC;wBACN,mEAAmE;wBACnE,iEAAiE;wBACjE,kEAAkE;wBAClE,oEAAoE;wBACpE,iEAAiE;wBACjE,gBAAgB;wBAChB,iEAAiE;wBACjE,wEAAwE;wBACxE,mCAAmC;wBACnC,sEAAsE;wBACtE,IAAI,OAAkB,CAAC;wBACvB,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;4BACjB,OAAO,GAAG,KAAK,CAAC;wBAClB,CAAC;6BAAM,CAAC;4BACN,OAAO,GAAG,IAAI,SAAS,CAAC,sCAAsC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACxF,CAAC;wBACD,OAAO,CAAC,IAAI,CACV,SAAS,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,CAClF,CAAC;wBACF,SAAS;oBACX,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,6DAA6D;oBAC7D,+DAA+D;oBAC/D,+DAA+D;oBAC/D,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,SAAS,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,CAC9E,CAAC;wBACF,SAAS;oBACX,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,IAAI,MAAM;oBAAE,OAAO,IAAI,CAAC;gBACxB,OAAO,CAAC,IAAI,CACV,SAAS,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,gDAAgD;QAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;kCAEkC;AAClC,SAAS,YAAY,CAAC,GAAY,EAAE,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,SAAS,CAAC,YAAY,IAAI,oBAAoB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,SAAS,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAwB,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,SAAS,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IACtF,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;GAMG;AACH;;;;GAIG;AACH,MAAM,cAAc,GAAG,EAAE,CAAC;AAwB1B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAU,EAAE,GAAY;IAC/C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,iEAAiE;YACjE,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3E,uEAAuE;YACvE,sEAAsE;YACtE,yDAAyD;YACzD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC7B,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI;oBAChC,CAAC,CAAC,IAAI,SAAS,CAAC,mBAAmB,CAAC;oBACpC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC7E,OAAO,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC3B,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,KAAK,YAAY;YACf,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM;YACT,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,6CAA6C;YAC7C,MAAM,IAAI,oBAAoB,CAAC,mFAAmF,CAAC,CAAC;QACtH,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;gBACpB,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBACb,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,IAAI,aAAa,CAAC,oCAAoC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,UAAU;oBAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,IAAI,SAAS,CAAC,wBAAwB,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5F,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACnC,oEAAoE;YACpE,yDAAyD;YACzD,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,iEAAiE;YACjE,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,uCAAuC;YACvC,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,IAAI,SAAS,CAAC,wCAAwC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7B,yEAAyE;YACzE,mEAAmE;YACnE,mEAAmE;YACnE,4DAA4D;YAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACrE,IAAI,IAAI,YAAY,YAAY;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3D,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO,IAAI,SAAS,CAAC,mBAAmB,YAAY,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,OAAO,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAc,EAAE,CAAC;YAC1B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5B,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACvB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACnC,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,IAAI,SAAS,CAAC,sBAAsB,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;gBAC9G,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/G,OAAO,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;YACzD,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC/C,OAAO,IAAI,SAAS,CAAC,iBAAiB,KAAK,IAAI,GAAG,sBAAsB,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClH,CAAC;gBACD,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,IAAI,SAAS,CAAC,oBAAoB,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;gBAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACtF,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;gBAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACrF,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACvB,mEAAmE;YACnE,+DAA+D;YAC/D,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7F,OAAO,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;gBAChB,wEAAwE;gBACxE,4DAA4D;gBAC5D,8CAA8C;gBAC9C,KAAK,IAAI,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,KAAK,GAAG,CAAC,CAAE,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChC,KAAK,GAAG,CAAC,CAAE,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChC,KAAK,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjC,KAAK,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjC,KAAK,GAAG,CAAC,CAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/C,KAAK,GAAG,CAAC,CAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/C,KAAK,GAAG,CAAC,CAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/C,oEAAoE;gBACpE,oEAAoE;gBACpE,kEAAkE;gBAClE,kEAAkE;gBAClE,uDAAuD;gBACvD,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;wBAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;wBACpB,CAAC,CAAC,IAAI,SAAS,CAAC,mBAAmB,CAAC;wBACpC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,KAAK,GAAG,CAAC,CAAC,CAAC;oBACT,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;wBAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAC5B,IAAU,EACV,KAAW,EACX,WAAoB,EACpB,GAAY;IAEZ,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC,CAAC,qCAAqC;IAChF,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC,CAAC,8CAA8C;IACzF,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAoB,sCAAsC;IACjF,OAAO,CAAC,CAAC,CAAkC,0CAA0C;AACvF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,kBAAkB,CAAC,IAAU,EAAE,GAAY;IAClD,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,qBAAqB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,SAAS,CAAC,6CAA6C,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,IAAqC,EAAE,GAAY;IACnE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,oEAAoE;IACpE,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,oBAAoB,CAC5B,YAAY,IAAI,CAAC,IAAI,wBAAwB,EAAE,CAAC,gBAAgB,oDAAoD,CACrH,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,oBAAoB,CAC5B,YAAY,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,MAAM,CAAC,MAAM,qBAAqB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QAC3B,qEAAqE;QACrE,MAAM,IAAI,sBAAsB,CAC9B,YAAY,IAAI,CAAC,IAAI,8BAA8B,cAAc,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,6BAA6B;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,EAAE,EAAE,+CAA+C;QAC3D,MAAM;QACN,KAAK,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI,GAAG,EAAE;QAChC,KAAK;QACL,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;KACzC,CAAC;IACF,qEAAqE;IACrE,6DAA6D;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/dist/storage/sandbox/rules-firestore-lookup.d.ts

@@ -0,0 +1,25 @@
+import type { Expr } from './rules.js';
+import { type EvalCtx } from './rules-evaluator.js';
+type MethodCall = Extract<Expr, {
+    kind: 'methodcall';
+}>;
+/**
+ * Evaluate `firestore.get(path)` / `firestore.exists(path)`.
+ *
+ * Requires an injected {@link FirestoreLookup} (the enforcement layer
+ * supplies one from the sandbox's Firestore data). With NO capability —
+ * pure/test usage without a sandbox — this denies with an "unsupported"
+ * reason rather than ever a false allow, preserving the pre-lookup posture.
+ *
+ * Semantics (production-honest, deny-on-error):
+ *   - `firestore.get(path)` → a resource `{ data: <fields> }`. Member access
+ *     `.data.<field>` then reads the doc's fields. On a NONEXISTENT doc,
+ *     production `get()` is itself an error, so this denies with a reason.
+ *   - `firestore.exists(path)` → boolean.
+ *   - Malformed path (missing `/databases/<db>/documents/` prefix, odd
+ *     segment count), a non-string interpolation, wrong arg count, or a
+ *     non-path argument → deny with a reason.
+ */
+export declare function evalFirestoreBuiltin(expr: MethodCall, ctx: EvalCtx): unknown;
+export {};
+//# sourceMappingURL=rules-firestore-lookup.d.ts.map

package/dist/storage/sandbox/rules-firestore-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-firestore-lookup.d.ts","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-firestore-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAY,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAQ9D,KAAK,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CA0C5E"}

package/dist/storage/sandbox/rules-firestore-lookup.js

@@ -0,0 +1,94 @@
+import { evalExpr } from './rules-evaluator.js';
+import { RuleEvalError, RuleResourceLimitError, RuleUnsupportedError, } from './rules-evaluation-error.js';
+import { RuleError, describeRulesType as describeType } from './rules-values.js';
+/**
+ * Evaluate `firestore.get(path)` / `firestore.exists(path)`.
+ *
+ * Requires an injected {@link FirestoreLookup} (the enforcement layer
+ * supplies one from the sandbox's Firestore data). With NO capability —
+ * pure/test usage without a sandbox — this denies with an "unsupported"
+ * reason rather than ever a false allow, preserving the pre-lookup posture.
+ *
+ * Semantics (production-honest, deny-on-error):
+ *   - `firestore.get(path)` → a resource `{ data: <fields> }`. Member access
+ *     `.data.<field>` then reads the doc's fields. On a NONEXISTENT doc,
+ *     production `get()` is itself an error, so this denies with a reason.
+ *   - `firestore.exists(path)` → boolean.
+ *   - Malformed path (missing `/databases/<db>/documents/` prefix, odd
+ *     segment count), a non-string interpolation, wrong arg count, or a
+ *     non-path argument → deny with a reason.
+ */
+export function evalFirestoreBuiltin(expr, ctx) {
+    if (expr.method !== 'get' && expr.method !== 'exists') {
+        // Unknown namespace method, compile-reject class, never absorbed.
+        throw new RuleUnsupportedError(`unsupported method firestore.${expr.method}()`);
+    }
+    if (!ctx.firestoreLookup) {
+        // No sandbox-backed capability injected — keep the deny-with-reason
+        // "unsupported" behavior; never a false allow.
+        throw new RuleEvalError(`firestore.${expr.method}() is unsupported here — no Firestore lookup capability is configured`);
+    }
+    if (expr.args.length !== 1) {
+        // Wrong call shape: production rejects at compile; never absorbed.
+        throw new RuleUnsupportedError(`firestore.${expr.method}() expects a single path argument`);
+    }
+    const arg = expr.args[0];
+    if (arg.kind !== 'path') {
+        throw new RuleUnsupportedError(`firestore.${expr.method}() requires a /databases/.../documents/... path literal`);
+    }
+    const docPath = buildFirestoreDocPath(arg, ctx);
+    if (!ctx.firestoreAccesses.has(docPath)) {
+        if (ctx.firestoreAccesses.size >= 2) {
+            // Resource-limit class, the same posture as the Firestore lookup
+            // budget: production fails the whole evaluation closed, so a
+            // determining &&/|| operand must NOT absorb this into an allow.
+            throw new RuleResourceLimitError('firestore access limit exceeded: at most two distinct documents');
+        }
+        ctx.firestoreAccesses.add(docPath);
+    }
+    if (expr.method === 'exists') {
+        return ctx.firestoreLookup.exists(docPath);
+    }
+    const fields = ctx.firestoreLookup.get(docPath);
+    if (fields === null) {
+        // A missing get is a Rules error VALUE: it denies at the allow boundary,
+        // but participates in COMMUTATIVE CEL error absorption in `&&`/`||`
+        // (`error || true` allows, and `error && false` evaluates to false,
+        // see the tri-state operand handling in rules-evaluator.ts).
+        return new RuleError(`firestore.get() targeted a nonexistent document: ${docPath}`);
+    }
+    return { data: fields };
+}
+/**
+ * Assemble a {@link PathArgSegment} list into the document path the
+ * {@link FirestoreLookup} expects, then validate + strip the required
+ * `/databases/<db>/documents/` prefix. Interpolations must resolve to a
+ * string or number; anything else (e.g. `request.auth.uid` when auth is
+ * null → undefined) throws → deny.
+ */
+function buildFirestoreDocPath(pathExpr, ctx) {
+    const parts = pathExpr.segments.map((seg) => {
+        if (seg.kind === 'literal')
+            return seg.value;
+        const v = evalExpr(seg.expr, ctx);
+        if (typeof v === 'string')
+            return v;
+        if (typeof v === 'number')
+            return String(v);
+        throw new RuleEvalError(`Firestore path interpolation resolved to ${describeType(v)} (expected a string)`);
+    });
+    // Required production shape: databases / <db> / documents / <doc path…>.
+    if (parts.length < 4 || parts[0] !== 'databases' || parts[2] !== 'documents') {
+        throw new RuleEvalError(`malformed Firestore path — expected /databases/<db>/documents/... , got /${parts.join('/')}`);
+    }
+    if (parts[1] !== '(default)') {
+        throw new RuleEvalError(`Storage rules may access only the default Firestore database, got ${parts[1]}`);
+    }
+    const docSegments = parts.slice(3);
+    // A document path is collection/doc pairs — an even, non-zero segment count.
+    if (docSegments.length === 0 || docSegments.length % 2 !== 0) {
+        throw new RuleEvalError(`Firestore path does not point at a document (needs an even segment count): ${docSegments.join('/')}`);
+    }
+    return docSegments.join('/');
+}
+//# sourceMappingURL=rules-firestore-lookup.js.map

package/dist/storage/sandbox/rules-firestore-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-firestore-lookup.js","sourceRoot":"","sources":["../../../src/storage/sandbox/rules-firestore-lookup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAgB,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,iBAAiB,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIjF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAgB,EAAE,GAAY;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtD,kEAAkE;QAClE,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QACzB,oEAAoE;QACpE,+CAA+C;QAC/C,MAAM,IAAI,aAAa,CACrB,aAAa,IAAI,CAAC,MAAM,uEAAuE,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,mEAAmE;QACnE,MAAM,IAAI,oBAAoB,CAAC,aAAa,IAAI,CAAC,MAAM,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,oBAAoB,CAAC,aAAa,IAAI,CAAC,MAAM,yDAAyD,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACpC,iEAAiE;YACjE,6DAA6D;YAC7D,gEAAgE;YAChE,MAAM,IAAI,sBAAsB,CAAC,iEAAiE,CAAC,CAAC;QACtG,CAAC;QACD,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,6DAA6D;QAC7D,OAAO,IAAI,SAAS,CAAC,oDAAoD,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,QAAyC,EACzC,GAAY;IAEZ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC;QAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,aAAa,CACrB,4CAA4C,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,yEAAyE;IACzE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAC7E,MAAM,IAAI,aAAa,CACrB,4EAA4E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CACrB,qEAAqE,KAAK,CAAC,CAAC,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,6EAA6E;IAC7E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,aAAa,CACrB,8EAA8E,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}