ramosedb 0.0.0-stage → 0.4.0

package/dist/internal/authorization/read-tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-tables.js","sourceRoot":"","sources":["../../../src/internal/authorization/read-tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAkB,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAkB,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAqB,MAAM,qBAAqB,CAAC;AAE9E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAiB,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAOvF,MAAM,OAAO,GAAG,CAAC,OAAe,EAAa,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAE3E,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAC1D,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3C,MAAM,QAAQ,GAAG,CAAC,IAAwB,EAAE,IAAY,EAAY,EAAE,CAAC,CAAC;IACtE,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,KAAmB,EACG,EAAE;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAA6B,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,OAAkB,EAClB,KAAmB,EACC,EAAE,CACtB,kBAAkB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAC1C,CAAC;AAEJ,MAAM,SAAS,GAAG,CAChB,OAAkB,EAClB,KAAe,EACC,EAAE;IAClB,IAAI,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IAC7C,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,OAAkB,EAClB,IAAwB,EACxB,KAA2B,EACE,EAAE;IAC/B,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,SAAS;QACtD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,CAAC,2BAA2B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,OAAO,CAAC,UAAU,KAAK,CAAC,KAAK,6BAA6B,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;YACzE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;SACvD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK;YACnC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YACvE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAA0B,EAAa,EAAE;IACtE,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,QAAiB;QACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAAkB,EAClB,MAAiB,EACjB,UAA2C,EACxB,EAAE;IACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACnE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAC/B,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACrE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAC/B,CAAC;IACF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAsB,CAAC;YACrD,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,KAAgC,CAAC;YAC/D,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG;QACb,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;KACjE,CAAC;IACF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,kBAAkB,CAAC,MAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAiC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3E,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YACrD,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YACjD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;SAC/E,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,EAAE,EAAE,OAAO;QACX,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,gBAAgB;QACxB,MAAM;QACN,UAAU;QACV,gBAAgB;KACjB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,UAA0B,EACP,EAAE,CACrB,gBAAgB,CACd,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC9B,cAAc,CAAC,UAAU,CAAC,EAC1B,EAAE,CACH,CAAC"}

package/dist/internal/authorization/reads.d.ts

@@ -0,0 +1,36 @@
+import * as Effect from "effect/Effect";
+import type { EntityRef } from "../core/db.ts";
+import type { Db } from "../core/db.ts";
+import { type QueryOptions } from "../core/query/engine.ts";
+import { type AuthorizedRequestInput } from "./request.ts";
+declare const OneShotReadError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "OneShotReadError";
+} & Readonly<A>;
+export declare class OneShotReadError extends OneShotReadError_base<{
+    readonly cause: unknown;
+}> {
+}
+export type OneShotQueryRead = {
+    readonly kind: "query";
+    readonly query: string | object;
+    readonly inputs?: readonly unknown[];
+};
+export type OneShotPullRead = {
+    readonly kind: "pull";
+    readonly eid: EntityRef;
+    readonly pattern: string | unknown[];
+};
+export type OneShotEntityRead = {
+    readonly kind: "entity";
+    readonly ref: EntityRef;
+};
+export type OneShotLookupRead = {
+    readonly kind: "lookup";
+    readonly ref: readonly [string, unknown];
+};
+export type OneShotRead = OneShotQueryRead | OneShotPullRead | OneShotEntityRead | OneShotLookupRead;
+export type OneShotReadOptions = Pick<QueryOptions, "maxCells">;
+export declare const runOneShotRead: (db: Db, read: OneShotRead, opts?: OneShotReadOptions) => Promise<unknown>;
+export declare const executeAuthorizedRead: <R, EDb = unknown>(input: AuthorizedRequestInput<R, EDb>, read: OneShotRead, opts?: OneShotReadOptions) => Effect.Effect<unknown, EDb | OneShotReadError | import("../../db/Errors.ts").Unauthorized, R>;
+export {};
+//# sourceMappingURL=reads.d.ts.map

package/dist/internal/authorization/reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reads.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/reads.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;;;;AAEtB,qBAAa,gBAAiB,SAAQ,sBAAqC;IACzE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;CAAG;AAEL,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,WAAW,GACnB,gBAAgB,GAChB,eAAe,GACf,iBAAiB,GACjB,iBAAiB,CAAC;AAEtB,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAKhE,eAAO,MAAM,cAAc,OACrB,EAAE,QACA,WAAW,SACX,kBAAkB,KACvB,OAAO,CAAC,OAAO,CAmBjB,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAAI,CAAC,EAAE,GAAG,GAAG,OAAO,SAC7C,sBAAsB,CAAC,CAAC,EAAE,GAAG,CAAC,QAC/B,WAAW,SACX,kBAAkB,kGAOvB,CAAC"}

package/dist/internal/authorization/reads.js

@@ -0,0 +1,35 @@
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import { query } from "../core/query/engine.js";
+import { pull } from "../core/query/pull.js";
+import { executeAuthorizedRequest, } from "./request.js";
+export class OneShotReadError extends Data.TaggedError("OneShotReadError") {
+}
+const resolveEid = (db, ref) => typeof ref === "number" ? Promise.resolve(ref) : db.entid(ref);
+export const runOneShotRead = async (db, read, opts = {}) => {
+    switch (read.kind) {
+        case "query":
+            return query(db, read.query, read.inputs === undefined ? [] : [...read.inputs], {
+                ...(opts.maxCells === undefined ? {} : { maxCells: opts.maxCells }),
+            });
+        case "pull": {
+            const eid = await resolveEid(db, read.eid);
+            if (eid === undefined)
+                return null;
+            return pull(db, eid, read.pattern);
+        }
+        case "entity": {
+            const eid = await resolveEid(db, read.ref);
+            if (eid === undefined)
+                return null;
+            return (await db.entity(eid)) ?? null;
+        }
+        case "lookup":
+            return (await db.entid([read.ref[0], read.ref[1]])) ?? null;
+    }
+};
+export const executeAuthorizedRead = (input, read, opts = {}) => executeAuthorizedRequest(input, (filteredDb) => Effect.tryPromise({
+    try: () => runOneShotRead(filteredDb, read, opts),
+    catch: (cause) => new OneShotReadError({ cause }),
+}));
+//# sourceMappingURL=reads.js.map

package/dist/internal/authorization/reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reads.js","sourceRoot":"","sources":["../../../src/internal/authorization/reads.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,KAAK,EAAqB,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EACL,wBAAwB,GAEzB,MAAM,cAAc,CAAC;AAEtB,MAAM,OAAO,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAEvE;CAAG;AAgCL,MAAM,UAAU,GAAG,CAAC,EAAM,EAAE,GAAc,EAA+B,EAAE,CACzE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,EAAM,EACN,IAAiB,EACjB,IAAI,GAAuB,EAAE,EACX,EAAE;IACpB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC9E,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;aACpE,CAAC,CAAC;QACL,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACnC,OAAO,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACnC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QACxC,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAqC,EACrC,IAAiB,EACjB,IAAI,GAAuB,EAAE,EAC7B,EAAE,CACF,wBAAwB,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE,CAC7C,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC;IACjD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC;CAClD,CAAC,CACH,CAAC"}

package/dist/internal/authorization/request.d.ts

@@ -0,0 +1,64 @@
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import { Unauthorized } from "../../db/Errors.ts";
+import type { Db } from "../core/db.ts";
+import type { InstalledCatalogUnitV2 } from "./catalog-unit.ts";
+import { type DatabaseCatalogBindings, type ResolvedDatabaseRoute } from "./database-bindings.ts";
+import { type DeployedCatalogs } from "./deployed.ts";
+import { type CatalogId, type CatalogUnitHash, type DatabaseId } from "./identities.ts";
+import type { JsonValue } from "./json.ts";
+import type { AuthorizationPrincipal } from "./principal.ts";
+export type AuthenticatedCaller = {
+    readonly claims: Readonly<Record<string, JsonValue>>;
+    readonly classes: readonly string[];
+    readonly exp: number;
+};
+export type AuthorizedRequestView = {
+    readonly asOf?: number;
+    readonly history?: boolean;
+};
+export type AuthorizedRequestContext = {
+    readonly unit: InstalledCatalogUnitV2;
+    readonly principal: AuthorizationPrincipal;
+    readonly currentDb: Db;
+    readonly filteredDb: Db;
+};
+export type AuthorizedRequestInput<R = never, EDb = unknown> = {
+    readonly authenticate: Effect.Effect<AuthenticatedCaller, Unauthorized, R>;
+    readonly catalogs: DeployedCatalogs;
+    readonly routeDatabase: DatabaseId;
+    readonly catalogKey: CatalogId;
+    readonly unitHash: CatalogUnitHash;
+    readonly currentDb: (database: DatabaseId) => Effect.Effect<Db, EDb, R>;
+    readonly view?: AuthorizedRequestView;
+    readonly interruptAfter?: Duration.Input;
+};
+export type AuthorizedResolvedRequestInput<R = never, EDb = unknown> = {
+    readonly authenticate: Effect.Effect<AuthenticatedCaller, Unauthorized, R>;
+    readonly bindings: DatabaseCatalogBindings;
+    readonly route: ResolvedDatabaseRoute;
+    readonly currentDb: (database: DatabaseId) => Effect.Effect<Db, EDb, R>;
+    readonly view?: AuthorizedRequestView;
+    readonly interruptAfter?: Duration.Input;
+};
+export declare const callerFromVerified: (verified: {
+    readonly exp: number;
+    readonly principal: {
+        readonly sub?: string;
+        readonly class: string;
+        readonly classes?: readonly string[];
+        readonly claims: {
+            readonly attrs?: Record<string, unknown>;
+        };
+    };
+}) => AuthenticatedCaller;
+export declare const constructAuthorizedRequestContext: <R, EDb>(input: AuthorizedRequestInput<R, EDb>, caller: AuthenticatedCaller) => Effect.Effect<AuthorizedRequestContext, Unauthorized | EDb, R>;
+export declare const constructAuthorizedResolvedRequestContext: <R, EDb>(input: AuthorizedResolvedRequestInput<R, EDb>, caller: AuthenticatedCaller) => Effect.Effect<AuthorizedRequestContext, Unauthorized | EDb, R>;
+export type AuthorizedLeaseInput<R> = {
+    readonly authenticate: Effect.Effect<AuthenticatedCaller, Unauthorized, R>;
+    readonly interruptAfter?: Duration.Input;
+};
+export declare const executeWithinAuthorizedLease: <A, E, R>(input: AuthorizedLeaseInput<R>, execute: (caller: AuthenticatedCaller) => Effect.Effect<A, E, R>) => Effect.Effect<A, Unauthorized | E, R>;
+export declare const executeAuthorizedRequest: <A, E, R, EDb = unknown>(input: AuthorizedRequestInput<R, EDb>, execute: (filteredDb: Db) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | EDb | Unauthorized, R>;
+export declare const executeAuthorizedResolvedRequest: <A, E, R, EDb = unknown>(input: AuthorizedResolvedRequestInput<R, EDb>, execute: (filteredDb: Db) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | EDb | Unauthorized, R>;
+//# sourceMappingURL=request.d.ts.map

package/dist/internal/authorization/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/request.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAY,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EACV,sBAAsB,EAIvB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,GAAG,OAAO,IAAI;IAC7D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC3E,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,8BAA8B,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,GAAG,OAAO,IAAI;IACrE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC3E,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;CAC1C,CAAC;AAIF,eAAO,MAAM,kBAAkB,aAAc;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;KAC/D,CAAC;CACH,KAAG,mBAeH,CAAC;AAyMF,eAAO,MAAM,iCAAiC,GAAI,CAAC,EAAE,GAAG,SAC/C,sBAAsB,CAAC,CAAC,EAAE,GAAG,CAAC,UAC7B,mBAAmB,KAC1B,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,YAAY,GAAG,GAAG,EAAE,CAAC,CAK5D,CAAC;AAEL,eAAO,MAAM,yCAAyC,GAAI,CAAC,EAAE,GAAG,SACvD,8BAA8B,CAAC,CAAC,EAAE,GAAG,CAAC,UACrC,mBAAmB,KAC1B,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,YAAY,GAAG,GAAG,EAAE,CAAC,CAgB5D,CAAC;AAEL,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAAI;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;CAC1C,CAAC;AAEF,eAAO,MAAM,4BAA4B,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAC3C,oBAAoB,CAAC,CAAC,CAAC,WACrB,CAAC,MAAM,EAAE,mBAAmB,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,EAAE,CAAC,CAsBtC,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACxB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,yEAEC,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,gDAQtD,CAAC;AAEF,eAAO,MAAM,gCAAgC,GAEhC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,iFAED,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,gDAOnD,CAAC"}

package/dist/internal/authorization/request.js

@@ -0,0 +1,210 @@
+import * as Cause from "effect/Cause";
+import * as Clock from "effect/Clock";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { Unauthorized } from "../../db/Errors.js";
+import { Index } from "../core/datom.js";
+import { RAMOSE_TYPE } from "../core/schema.js";
+import { MAX_READ_LEASE_MS } from "./bounds.js";
+import { compositionFromUnit } from "./composition.js";
+import { InvalidResolvedDatabaseRoute, acquireResolvedDatabase, opaqueDatabaseBindingDenial, resolveBoundCatalogDefinition, } from "./database-bindings.js";
+import { opaqueCatalogDenial, resolveDeployedCatalog, } from "./deployed.js";
+import { EntityId } from "./identities.js";
+import { compileReadFilter, uniqueCanonicalTypeName } from "./read-filter.js";
+import { prepareAuthorizationCatalog } from "./validation/catalog.js";
+const deny = () => new Unauthorized({});
+export const callerFromVerified = (verified) => {
+    const sub = verified.principal.sub;
+    const attrs = verified.principal.claims.attrs;
+    const claims = {};
+    if (attrs !== undefined) {
+        for (const [key, value] of Object.entries(attrs)) {
+            claims[key] = value;
+        }
+    }
+    if (sub !== undefined && sub.length > 0)
+        claims.sub = sub;
+    return {
+        claims,
+        classes: verified.principal.classes ?? [verified.principal.class],
+        exp: verified.exp,
+    };
+};
+const leaseDuration = (exp, nowMs, limit) => {
+    if (!Number.isSafeInteger(exp))
+        return Result.fail(deny());
+    const remainingMs = exp * 1_000 - nowMs;
+    if (remainingMs <= 0)
+        return Result.fail(deny());
+    return Result.succeed(Duration.min(limit, Duration.millis(remainingMs)));
+};
+const selectSubject = (caller, unit) => {
+    const value = caller.claims[unit.policy.principal.subjectClaim];
+    if (typeof value !== "string" || value.trim().length === 0)
+        return Result.fail(deny());
+    return Result.succeed(value);
+};
+const matchesScalar = (value, valueType) => {
+    switch (valueType) {
+        case "string":
+            return typeof value === "string";
+        case "long":
+            return typeof value === "number" && Number.isSafeInteger(value);
+        case "double":
+            return typeof value === "number" && Number.isFinite(value);
+        case "boolean":
+            return typeof value === "boolean";
+    }
+};
+const matchesClaimShape = (value, shape) => {
+    if (shape._tag === "scalar")
+        return matchesScalar(value, shape.valueType);
+    return Array.isArray(value) && value.every((item) => matchesScalar(item, shape.items.valueType));
+};
+const validateCallerClaims = (claims, vocabulary) => {
+    for (const descriptor of vocabulary) {
+        if (!Object.hasOwn(claims, descriptor.key)) {
+            if (!descriptor.optional)
+                return Result.fail(deny());
+            continue;
+        }
+        if (!matchesClaimShape(claims[descriptor.key], descriptor.shape)) {
+            return Result.fail(deny());
+        }
+    }
+    return Result.succeed(undefined);
+};
+const resolveMe = async (unit, subject, caller, currentDb) => {
+    const principal = {
+        subject,
+        claims: caller.claims,
+        classes: [...caller.classes],
+    };
+    const field = unit.policy.principal.entity;
+    if (field === undefined)
+        return Result.succeed(principal);
+    const eid = await currentDb.entid([`:${field.owner.name}/${field.localName}`, subject]);
+    if (eid === undefined)
+        return Result.succeed(principal);
+    const typeDatoms = await currentDb.datomsArray(Index.EAVT, { e: eid, a: RAMOSE_TYPE });
+    const name = uniqueCanonicalTypeName(typeDatoms);
+    if (name === undefined || name !== field.owner.name)
+        return Result.fail(deny());
+    const catalogEntity = unit.catalog.entities.find((entity) => entity.id.name === name);
+    if (catalogEntity === undefined || catalogEntity.id.catalog !== field.catalog) {
+        return Result.fail(deny());
+    }
+    return Result.succeed({
+        ...principal,
+        me: {
+            entity: EntityId.make({ catalog: field.catalog, name }),
+            eid,
+        },
+    });
+};
+const requestedView = (current, view) => {
+    let db = current;
+    if (typeof view?.asOf === "number")
+        db = db.asOf(view.asOf);
+    if (view?.history === true)
+        db = db.history();
+    return db;
+};
+const catalogTargetOf = (unit) => ({
+    database: unit.catalog.database,
+    catalog: unit.catalog.id,
+    catalogVersion: unit.catalog.version,
+    schemaFingerprint: unit.catalog.fingerprint,
+});
+const requirePreparedUnit = (unit) => {
+    try {
+        if (unit.policy == null)
+            return Result.fail(deny());
+        const prepared = prepareAuthorizationCatalog(catalogTargetOf(unit), unit.catalog);
+        if (Result.isFailure(prepared))
+            return Result.fail(deny());
+        return Result.succeed(undefined);
+    }
+    catch {
+        return Result.fail(deny());
+    }
+};
+const compilePredicate = (unit, principal, currentDb) => {
+    try {
+        return Result.succeed(compileReadFilter({ unit, principal, currentDb }));
+    }
+    catch {
+        return Result.fail(deny());
+    }
+};
+const admitCatalogCaller = (unit, caller) => Effect.gen(function* () {
+    yield* Effect.fromResult(requirePreparedUnit(unit));
+    const subject = yield* Effect.fromResult(selectSubject(caller, unit));
+    yield* Effect.fromResult(validateCallerClaims(caller.claims, unit.policy.claims));
+    return { unit, subject };
+}).pipe(Effect.catchCause(() => Effect.fail(deny())));
+const admitDeployedCaller = (input, caller) => Effect.gen(function* () {
+    const deployed = yield* Effect.fromResult(resolveDeployedCatalog(input.catalogs, {
+        database: input.routeDatabase,
+        catalogKey: input.catalogKey,
+        unitHash: input.unitHash,
+    })).pipe(Effect.mapError(opaqueCatalogDenial));
+    return yield* admitCatalogCaller(deployed.unit, caller);
+}).pipe(Effect.catchCause(() => Effect.fail(deny())));
+const bindReadPredicate = (unit, subject, caller, current) => Effect.gen(function* () {
+    const resolved = yield* Effect.tryPromise({
+        try: () => resolveMe(unit, subject, caller, current),
+        catch: () => deny(),
+    });
+    const principal = yield* Effect.fromResult(resolved);
+    const predicate = yield* Effect.fromResult(compilePredicate(unit, principal, current));
+    return { principal, predicate };
+}).pipe(Effect.catchCause(() => Effect.fail(deny())));
+const constructFilteredContext = (admitted, caller, currentDb, view) => Effect.gen(function* () {
+    const composition = yield* Effect.fromResult(compositionFromUnit(admitted.unit)).pipe(Effect.mapError(() => deny()));
+    const current = currentDb.withComposition(composition);
+    const bound = yield* bindReadPredicate(admitted.unit, admitted.subject, caller, current);
+    return {
+        unit: admitted.unit,
+        principal: bound.principal,
+        currentDb: current,
+        filteredDb: requestedView(current, view).filter(bound.predicate),
+    };
+});
+export const constructAuthorizedRequestContext = (input, caller) => Effect.gen(function* () {
+    const admitted = yield* admitDeployedCaller(input, caller);
+    const current = yield* input.currentDb(input.routeDatabase);
+    return yield* constructFilteredContext(admitted, caller, current, input.view);
+});
+export const constructAuthorizedResolvedRequestContext = (input, caller) => Effect.gen(function* () {
+    const resolved = yield* Effect.fromResult(resolveBoundCatalogDefinition(input.bindings, input.route)).pipe(Effect.mapError(opaqueDatabaseBindingDenial));
+    const admitted = yield* admitCatalogCaller(resolved.definition.unit, caller);
+    const current = yield* acquireResolvedDatabase(input.bindings, input.route, input.currentDb).pipe(Effect.mapError((error) => error instanceof InvalidResolvedDatabaseRoute
+        ? opaqueDatabaseBindingDenial(error)
+        : error));
+    return yield* constructFilteredContext(admitted, caller, current, input.view);
+});
+export const executeWithinAuthorizedLease = (input, execute) => {
+    const limit = Duration.fromInputUnsafe(input.interruptAfter ?? MAX_READ_LEASE_MS);
+    const program = Effect.gen(function* () {
+        const caller = yield* input.authenticate.pipe(Effect.mapError(() => deny()));
+        const nowMs = yield* Clock.currentTimeMillis;
+        const duration = yield* Effect.fromResult(leaseDuration(caller.exp, nowMs, limit));
+        return yield* execute(caller).pipe(Effect.timeoutOrElse({
+            duration,
+            orElse: () => Effect.fail(deny()),
+        }));
+    });
+    return program.pipe(Effect.timeoutOrElse({
+        duration: limit,
+        orElse: () => Effect.fail(deny()),
+    }), Effect.catchCause((cause) => Cause.hasInterrupts(cause) ? Effect.fail(deny()) : Effect.failCause(cause)));
+};
+export const executeAuthorizedRequest = Effect.fn("Authorization.executeAuthorizedRequest")(function* (input, execute) {
+    return yield* executeWithinAuthorizedLease(input, (caller) => constructAuthorizedRequestContext(input, caller).pipe(Effect.flatMap((context) => execute(context.filteredDb))));
+});
+export const executeAuthorizedResolvedRequest = Effect.fn("Authorization.executeAuthorizedResolvedRequest")(function* (input, execute) {
+    return yield* executeWithinAuthorizedLease(input, (caller) => constructAuthorizedResolvedRequestContext(input, caller).pipe(Effect.flatMap((context) => execute(context.filteredDb))));
+});
+//# sourceMappingURL=request.js.map

package/dist/internal/authorization/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../../src/internal/authorization/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,GAG9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GAEvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAyD,MAAM,iBAAiB,CAAC;AAQlG,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAwCtE,MAAM,IAAI,GAAG,GAAiB,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAQlC,EAAuB,EAAE;IACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;IAC9C,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAkB,CAAC;QACnC,CAAC;IACH,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IAC1D,OAAO;QACL,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;QACjE,GAAG,EAAE,QAAQ,CAAC,GAAG;KAClB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,GAAW,EACX,KAAa,EACb,KAAwB,EACwB,EAAE;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC;IACxC,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,MAA2B,EAC3B,IAA4B,EACS,EAAE;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,SAA0B,EAAW,EAAE;IAC5E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,MAAM;YACT,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClE,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7D,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;IACtC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAE,KAAiB,EAAW,EAAE;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AACnG,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,MAA2C,EAC3C,UAAsC,EACH,EAAE;IACrC,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,KAAK,EACrB,IAA4B,EAC5B,OAAe,EACf,MAA2B,EAC3B,SAAa,EACiD,EAAE;IAChE,MAAM,SAAS,GAA2B;QACxC,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;KAC7B,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtF,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;QACpB,GAAG,SAAS;QACZ,EAAE,EAAE;YACF,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;YACvD,GAAG;SACJ;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,OAAW,EAAE,IAAuC,EAAM,EAAE;IACjF,IAAI,EAAE,GAAG,OAAO,CAAC;IACjB,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ;QAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI;QAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,IAA4B,EAAE,EAAE,CAAC,CAAC;IACzD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;IAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;IACxB,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;IACpC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;CAC5C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAC1B,IAA4B,EACO,EAAE;IACrC,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,IAA4B,EAC5B,SAAiC,EACjC,SAAa,EACsD,EAAE;IACrE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC;AAOF,MAAM,kBAAkB,GAAG,CACzB,IAA4B,EAC5B,MAA2B,EACkB,EAAE,CAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACtE,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAExD,MAAM,mBAAmB,GAAG,CAC1B,KAAqC,EACrC,MAA2B,EACqB,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACvC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,KAAK,CAAC,aAAa;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAExD,MAAM,iBAAiB,GAAG,CACxB,IAA4B,EAC5B,OAAe,EACf,MAA2B,EAC3B,OAAW,EAII,EAAE,CACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;QACpD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;KACpB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAExD,MAAM,wBAAwB,GAAG,CAC/B,QAAwB,EACxB,MAA2B,EAC3B,SAAa,EACb,IAAuC,EACgB,EAAE,CACzD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACnF,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAC9B,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACpC,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,MAAM,EACN,OAAO,CACR,CAAC;IACF,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;KACjE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAC/C,KAAqC,EACrC,MAA2B,EACqC,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yCAAyC,GAAG,CACvD,KAA6C,EAC7C,MAA2B,EACqC,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACvC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAC3D,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAC5C,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,SAAS,CAChB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/B,KAAK,YAAY,4BAA4B;QAC3C,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC;QACpC,CAAC,CAAC,KAAK,CACV,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAOL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,KAA8B,EAC9B,OAAgE,EACzB,EAAE;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,IAAI,iBAAiB,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAChC,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ;YACR,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAClC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,IAAI,CACjB,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAClC,CAAC,EACF,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1B,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAC3E,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CACzF,QAAQ,CAAC,EACP,KAAqC,EACrC,OAAmD;IAEnD,OAAO,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3D,iCAAiC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CACzD,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,EAAE,CACvD,gDAAgD,CACjD,CAAC,QAAQ,CAAC,EACT,KAA6C,EAC7C,OAAmD;IAEnD,OAAO,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3D,yCAAyC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CACzD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/internal/authorization/truth.d.ts

@@ -0,0 +1,51 @@
+import type { IncompleteReason } from "./failures.ts";
+export type True = {
+    readonly _tag: "True";
+};
+export type False = {
+    readonly _tag: "False";
+};
+export type Incomplete = {
+    readonly _tag: "Incomplete";
+    readonly reason: IncompleteReason;
+};
+export type Truth = True | False | Incomplete;
+export declare const True: True;
+export declare const False: False;
+export declare const Incomplete: (reason: IncompleteReason) => Incomplete;
+export type ProjectedScalar = string | number | boolean | null;
+export type ProjectedAtom = string | number | boolean | Date | Uint8Array;
+export type ProjectedValue = ProjectedAtom | readonly ProjectedAtom[];
+export type Present<T = ProjectedValue> = [undefined] extends [T] ? never : {
+    readonly _tag: "Present";
+    readonly value: T;
+};
+export type FieldAbsent = {
+    readonly _tag: "FieldAbsent";
+};
+export type EntityAbsent = {
+    readonly _tag: "EntityAbsent";
+};
+export type NotLoadedProjection = {
+    readonly _tag: "NotLoaded";
+};
+export type InvalidTraversalProjection = {
+    readonly _tag: "InvalidTraversal";
+};
+export type BudgetExhaustedProjection = {
+    readonly _tag: "BudgetExhausted";
+};
+export type MissingMeProjection = {
+    readonly _tag: "MissingMe";
+};
+export type Projected<T = ProjectedValue> = Present<T> | FieldAbsent | EntityAbsent | NotLoadedProjection | InvalidTraversalProjection | BudgetExhaustedProjection | MissingMeProjection;
+export type CompleteProjected<T = ProjectedValue> = Present<T> | FieldAbsent | EntityAbsent;
+export type IncompleteProjected = NotLoadedProjection | InvalidTraversalProjection | BudgetExhaustedProjection | MissingMeProjection;
+export declare const Present: <T = ProjectedValue>(value: [undefined] extends [T] ? never : T) => Present<T>;
+export declare const FieldAbsent: FieldAbsent;
+export declare const EntityAbsent: EntityAbsent;
+export declare const NotLoadedProjection: NotLoadedProjection;
+export declare const InvalidTraversalProjection: InvalidTraversalProjection;
+export declare const BudgetExhaustedProjection: BudgetExhaustedProjection;
+export declare const MissingMeProjection: MissingMeProjection;
+//# sourceMappingURL=truth.d.ts.map

package/dist/internal/authorization/truth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"truth.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/truth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,MAAM,MAAM,IAAI,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7C,MAAM,MAAM,KAAK,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAC/C,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,UAAU,CAAC;AAE9C,eAAO,MAAM,IAAI,EAAE,IAAuB,CAAC;AAC3C,eAAO,MAAM,KAAK,EAAE,KAAyB,CAAC;AAC9C,eAAO,MAAM,UAAU,WAAY,gBAAgB,KAAG,UAGpD,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE/D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,UAAU,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,aAAa,EAAE,CAAC;AAEtE,MAAM,MAAM,OAAO,CAAC,CAAC,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,GAC7D,KAAK,GACL;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;CACnB,CAAC;AAEN,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE3D,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,mBAAmB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,0BAA0B,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,yBAAyB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE7E,MAAM,MAAM,mBAAmB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,SAAS,CAAC,CAAC,GAAG,cAAc,IACpC,OAAO,CAAC,CAAC,CAAC,GACV,WAAW,GACX,YAAY,GACZ,mBAAmB,GACnB,0BAA0B,GAC1B,yBAAyB,GACzB,mBAAmB,CAAC;AAExB,MAAM,MAAM,iBAAiB,CAAC,CAAC,GAAG,cAAc,IAC5C,OAAO,CAAC,CAAC,CAAC,GACV,WAAW,GACX,YAAY,CAAC;AAEjB,MAAM,MAAM,mBAAmB,GAC3B,mBAAmB,GACnB,0BAA0B,GAC1B,yBAAyB,GACzB,mBAAmB,CAAC;AAExB,eAAO,MAAM,OAAO,GAAI,CAAC,GAAG,cAAc,SACjC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,KACzC,OAAO,CAAC,CAAC,CAKX,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,WAAqC,CAAC;AAChE,eAAO,MAAM,YAAY,EAAE,YAAuC,CAAC;AACnE,eAAO,MAAM,mBAAmB,EAAE,mBAA2C,CAAC;AAC9E,eAAO,MAAM,0BAA0B,EAAE,0BAExC,CAAC;AACF,eAAO,MAAM,yBAAyB,EAAE,yBAEvC,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,mBAA2C,CAAC"}

package/dist/internal/authorization/truth.js

@@ -0,0 +1,23 @@
+export const True = { _tag: "True" };
+export const False = { _tag: "False" };
+export const Incomplete = (reason) => ({
+    _tag: "Incomplete",
+    reason,
+});
+export const Present = (value) => {
+    if (value === undefined) {
+        throw new TypeError("ramose/authorization: Present cannot hold undefined");
+    }
+    return { _tag: "Present", value };
+};
+export const FieldAbsent = { _tag: "FieldAbsent" };
+export const EntityAbsent = { _tag: "EntityAbsent" };
+export const NotLoadedProjection = { _tag: "NotLoaded" };
+export const InvalidTraversalProjection = {
+    _tag: "InvalidTraversal",
+};
+export const BudgetExhaustedProjection = {
+    _tag: "BudgetExhausted",
+};
+export const MissingMeProjection = { _tag: "MissingMe" };
+//# sourceMappingURL=truth.js.map

package/dist/internal/authorization/truth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"truth.js","sourceRoot":"","sources":["../../../src/internal/authorization/truth.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,IAAI,GAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,KAAK,GAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAwB,EAAc,EAAE,CAAC,CAAC;IACnE,IAAI,EAAE,YAAY;IAClB,MAAM;CACP,CAAC,CAAC;AA8CH,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,KAA0C,EAC9B,EAAE;IACd,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAgB,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAChE,MAAM,CAAC,MAAM,YAAY,GAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAwB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAA+B;IACpE,IAAI,EAAE,kBAAkB;CACzB,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAA8B;IAClE,IAAI,EAAE,iBAAiB;CACxB,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAwB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC"}

package/dist/internal/authorization/validate.d.ts

@@ -0,0 +1,3 @@
+export { defaultValidationLimits, validateBoundAuthorization, validateBoundAuthorizationResult, validateBoundAuthorizationResultForTest, type ValidateFailure, type ValidationLimits, } from "./validation/validate.ts";
+export { prepareAuthorizationCatalog, type PreparedAuthorizationCatalog, } from "./validation/catalog.ts";
+//# sourceMappingURL=validate.d.ts.map

package/dist/internal/authorization/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,gCAAgC,EAChC,uCAAuC,EACvC,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,2BAA2B,EAC3B,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC"}

package/dist/internal/authorization/validate.js

@@ -0,0 +1,3 @@
+export { defaultValidationLimits, validateBoundAuthorization, validateBoundAuthorizationResult, validateBoundAuthorizationResultForTest, } from "./validation/validate.js";
+export { prepareAuthorizationCatalog, } from "./validation/catalog.js";
+//# sourceMappingURL=validate.js.map

package/dist/internal/authorization/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/internal/authorization/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,gCAAgC,EAChC,uCAAuC,GAGxC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,2BAA2B,GAE5B,MAAM,yBAAyB,CAAC"}

package/dist/internal/authorization/validation/catalog.d.ts

@@ -0,0 +1,32 @@
+import * as Result from "effect/Result";
+import type { CatalogDescriptor, FieldDescriptor, OperationDescriptor } from "../catalog.ts";
+import type { EntityId, FieldId, OperationId, OwnerRef, TraitId } from "../identities.ts";
+import type { CatalogBindingTarget } from "../ir.ts";
+import { type ValidateFailure } from "./common.ts";
+export type RowFocus = {
+    readonly _tag: "entity";
+    readonly entity: EntityId;
+} | {
+    readonly _tag: "trait";
+    readonly trait: TraitId;
+};
+export type PreparedAuthorizationCatalog = {
+    readonly target: CatalogBindingTarget;
+    readonly entities: ReadonlyMap<string, EntityId>;
+    readonly traits: ReadonlyMap<string, TraitId>;
+    readonly fields: ReadonlyMap<string, FieldDescriptor>;
+    readonly operations: ReadonlyMap<string, OperationDescriptor>;
+    readonly entityTraits: ReadonlyMap<string, ReadonlySet<string>>;
+    readonly traitTraits: ReadonlyMap<string, ReadonlySet<string>>;
+};
+export declare const prepareAuthorizationCatalog: (target: CatalogBindingTarget, descriptor: CatalogDescriptor) => Result.Result<PreparedAuthorizationCatalog, ValidateFailure>;
+export declare const requireEntity: (index: PreparedAuthorizationCatalog, id: EntityId, label: string) => Result.Result<EntityId, ValidateFailure>;
+export declare const requireTrait: (index: PreparedAuthorizationCatalog, id: TraitId, label: string) => Result.Result<TraitId, ValidateFailure>;
+export declare const requireField: (index: PreparedAuthorizationCatalog, id: FieldId, label: string) => Result.Result<FieldDescriptor, ValidateFailure>;
+export declare const requireOperation: (index: PreparedAuthorizationCatalog, id: OperationId, label: string) => Result.Result<OperationDescriptor, ValidateFailure>;
+export declare const entityComposes: (index: PreparedAuthorizationCatalog, entity: EntityId, traitName: string) => boolean;
+export declare const traitComposes: (index: PreparedAuthorizationCatalog, trait: TraitId, otherName: string) => boolean;
+export declare const fieldAccessibleFrom: (index: PreparedAuthorizationCatalog, focus: RowFocus, field: FieldDescriptor) => boolean;
+export declare const ownerFocus: (index: PreparedAuthorizationCatalog, owner: OwnerRef) => Result.Result<RowFocus, ValidateFailure>;
+export declare const sameRow: (index: PreparedAuthorizationCatalog, left: RowFocus, right: RowFocus) => boolean;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/internal/authorization/validation/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../../src/internal/authorization/validation/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EAEf,mBAAmB,EAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAQL,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAKrB,MAAM,MAAM,QAAQ,GAChB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC9D,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;CAChE,CAAC;AA+KF,eAAO,MAAM,2BAA2B,WAC9B,oBAAoB,cAChB,iBAAiB,KAC5B,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE,eAAe,CAsQ1D,CAAC;AAEL,eAAO,MAAM,aAAa,UACjB,4BAA4B,MAC/B,QAAQ,SACL,MAAM,KACZ,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAMtC,CAAC;AAEL,eAAO,MAAM,YAAY,UAChB,4BAA4B,MAC/B,OAAO,SACJ,MAAM,KACZ,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAMrC,CAAC;AAEL,eAAO,MAAM,YAAY,UAChB,4BAA4B,MAC/B,OAAO,SACJ,MAAM,KACZ,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,eAAe,CAU7C,CAAC;AAEL,eAAO,MAAM,gBAAgB,UACpB,4BAA4B,MAC/B,WAAW,SACR,MAAM,KACZ,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,eAAe,CAUjD,CAAC;AAEL,eAAO,MAAM,cAAc,UAClB,4BAA4B,UAC3B,QAAQ,aACL,MAAM,KAChB,OAAuE,CAAC;AAE3E,eAAO,MAAM,aAAa,UACjB,4BAA4B,SAC5B,OAAO,aACH,MAAM,KAChB,OAAiG,CAAC;AAErG,eAAO,MAAM,mBAAmB,UACvB,4BAA4B,SAC5B,QAAQ,SACR,eAAe,KACrB,OAQF,CAAC;AAEF,eAAO,MAAM,UAAU,UACd,4BAA4B,SAC5B,QAAQ,KACd,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CASzC,CAAC;AAEF,eAAO,MAAM,OAAO,UACX,4BAA4B,QAC7B,QAAQ,SACP,QAAQ,KACd,OAkBF,CAAC"}