ramosedb 0.0.1 → 0.4.0

package/dist/internal/authorization/read-filter.js

@@ -0,0 +1,496 @@
+import * as Result from "effect/Result";
+import { InvalidTraversal, MissingMe } from "./failures.js";
+import { EntityAbsent, False, FieldAbsent, Incomplete, InvalidTraversalProjection, MissingMeProjection, Present, True, } from "./truth.js";
+import { entityComposes, fieldAccessibleFrom, prepareAuthorizationCatalog, } from "./validation/catalog.js";
+import { fieldKey } from "./validation/common.js";
+import { Index, ValueTag } from "../core/datom.js";
+import { toWireDatom } from "../core/log.js";
+import { RAMOSE_TYPE } from "../core/schema.js";
+const denyAll = () => false;
+const entityNameFromTypeIdent = (ident) => {
+    if (!ident.startsWith(":") || ident.length < 2)
+        return undefined;
+    const name = ident.slice(1);
+    if (name.length === 0 || name.includes("/"))
+        return undefined;
+    return name;
+};
+const fieldIdent = (field) => `:${field.id.owner.name}/${field.id.localName}`;
+const isIncompleteProjected = (value) => value._tag === "NotLoaded" ||
+    value._tag === "InvalidTraversal" ||
+    value._tag === "BudgetExhausted" ||
+    value._tag === "MissingMe";
+const incompleteOf = (value) => {
+    switch (value._tag) {
+        case "MissingMe":
+            return Incomplete(MissingMe);
+        case "InvalidTraversal":
+        case "NotLoaded":
+        case "BudgetExhausted":
+            return Incomplete({ _tag: value._tag });
+        default:
+            return Incomplete(InvalidTraversal);
+    }
+};
+const atomsEqual = (left, right) => {
+    if (left === right)
+        return true;
+    if (left instanceof Date && right instanceof Date)
+        return left.getTime() === right.getTime();
+    if (left instanceof Uint8Array && right instanceof Uint8Array) {
+        if (left.length !== right.length)
+            return false;
+        for (let i = 0; i < left.length; i++) {
+            if (left[i] !== right[i])
+                return false;
+        }
+        return true;
+    }
+    return false;
+};
+const projectedEqual = (left, right) => {
+    if (Array.isArray(left) || Array.isArray(right)) {
+        if (!Array.isArray(left) || !Array.isArray(right) || left.length !== right.length) {
+            return false;
+        }
+        for (let i = 0; i < left.length; i++) {
+            if (!atomsEqual(left[i], right[i]))
+                return false;
+        }
+        return true;
+    }
+    return atomsEqual(left, right);
+};
+const atomValue = (datom) => datom.vt === ValueTag.Inst ? new Date(datom.v) : datom.v;
+const andTruth = (parts) => {
+    let incomplete;
+    for (const part of parts) {
+        if (part._tag === "False")
+            return False;
+        if (part._tag === "Incomplete")
+            incomplete = part;
+    }
+    return incomplete ?? True;
+};
+const orTruth = (parts) => {
+    let incomplete;
+    for (const part of parts) {
+        if (part._tag === "True")
+            return True;
+        if (part._tag === "Incomplete")
+            incomplete = part;
+    }
+    return incomplete ?? False;
+};
+const notTruth = (value) => {
+    if (value._tag === "True")
+        return False;
+    if (value._tag === "False")
+        return True;
+    return value;
+};
+const eqTruth = (left, right) => {
+    if (isIncompleteProjected(left))
+        return incompleteOf(left);
+    if (isIncompleteProjected(right))
+        return incompleteOf(right);
+    if (left._tag !== "Present" || right._tag !== "Present")
+        return False;
+    return projectedEqual(left.value, right.value) ? True : False;
+};
+const hasTruth = (term) => {
+    if (term._tag === "Present")
+        return True;
+    if (term._tag === "FieldAbsent" || term._tag === "EntityAbsent")
+        return False;
+    return incompleteOf(term);
+};
+const inTruth = (value, collection) => {
+    if (isIncompleteProjected(value))
+        return incompleteOf(value);
+    if (isIncompleteProjected(collection))
+        return incompleteOf(collection);
+    if (value._tag !== "Present" || collection._tag !== "Present")
+        return False;
+    if (!Array.isArray(collection.value))
+        return Incomplete(InvalidTraversal);
+    for (const item of collection.value) {
+        if (atomsEqual(value.value, item))
+            return True;
+    }
+    return False;
+};
+const authorized = (truth) => truth._tag === "True";
+export const uniqueCanonicalTypeName = (typeDatoms) => {
+    let name;
+    for (const datom of typeDatoms) {
+        if (typeof datom.v !== "string")
+            return undefined;
+        const next = entityNameFromTypeIdent(datom.v);
+        if (next === undefined)
+            return undefined;
+        if (name !== undefined && name !== next)
+            return undefined;
+        name = next;
+    }
+    return name;
+};
+const viewKey = (db) => `${db.basisT}:${db.asOfT ?? ""}:${db.isHistory ? 1 : 0}`;
+const deniedAccess = { row: async () => false, field: denyAll, reference: denyAll };
+export const compileReadAccess = (input) => {
+    try {
+        return compileAccess(input);
+    }
+    catch {
+        return deniedAccess;
+    }
+};
+export const compileReadFilter = (input) => {
+    const access = compileReadAccess(input);
+    return async (db, fact) => await access.field(db, fact) && await access.reference(db, fact);
+};
+const compileAccess = (input) => {
+    const { unit, principal, currentDb, observe } = input;
+    const prepared = prepareAuthorizationCatalog({
+        database: unit.catalog.database,
+        catalog: unit.catalog.id,
+        catalogVersion: unit.catalog.version,
+        schemaFingerprint: unit.catalog.fingerprint,
+    }, unit.catalog);
+    if (Result.isFailure(prepared))
+        return deniedAccess;
+    const index = prepared.success;
+    const attrFields = new Map();
+    for (const field of unit.catalog.fields) {
+        const attr = currentDb.schema.attr(fieldIdent(field));
+        if (attr !== undefined)
+            attrFields.set(attr.id, field);
+    }
+    const rules = new Map();
+    for (const rule of unit.policy.rules) {
+        rules.set(rule.id, rule.expr);
+    }
+    const entityDecisions = new Map();
+    for (const entry of unit.policy.decisions.entities) {
+        entityDecisions.set(entry.target.name, entry.decision);
+    }
+    const traitDecisions = new Map();
+    for (const entry of unit.policy.decisions.traits) {
+        traitDecisions.set(entry.target.name, entry.decision);
+    }
+    const fieldDecisions = new Map();
+    for (const entry of unit.policy.decisions.fields) {
+        fieldDecisions.set(fieldKey(entry.target), entry.decision);
+    }
+    const typeMemo = new Map();
+    const rowMemo = new Map();
+    const observeExists = async (db, eid) => {
+        const value = await db.exists(eid);
+        observe?.({ _tag: "exists", eid, value });
+        return value;
+    };
+    const classifyFrom = (db, eid) => {
+        const key = `${viewKey(db)}:${eid}`;
+        const cached = typeMemo.get(key);
+        if (cached !== undefined)
+            return cached;
+        const pending = (async () => {
+            const typeDatoms = await db.datomsArray(Index.EAVT, { e: eid, a: RAMOSE_TYPE });
+            observe?.({
+                _tag: "type",
+                eid,
+                datoms: typeDatoms.map(toWireDatom),
+            });
+            const name = uniqueCanonicalTypeName(typeDatoms);
+            if (name === undefined)
+                return undefined;
+            return index.entities.get(name);
+        })();
+        typeMemo.set(key, pending);
+        return pending;
+    };
+    const classifyCurrent = (eid) => classifyFrom(currentDb, eid);
+    const focusOf = (entity) => ({ _tag: "entity", entity });
+    const lookupField = async (eid, field) => {
+        const ident = fieldIdent(field);
+        const attr = currentDb.schema.attr(ident);
+        if (attr === undefined) {
+            observe?.({
+                _tag: "field",
+                eid,
+                ident,
+                attributeId: null,
+                datoms: [],
+            });
+            return InvalidTraversalProjection;
+        }
+        if (field.cardinality === "many") {
+            const datoms = await currentDb.datomsArray(Index.EAVT, { e: eid, a: attr.id });
+            observe?.({
+                _tag: "field",
+                eid,
+                ident,
+                attributeId: attr.id,
+                datoms: datoms.map(toWireDatom),
+            });
+            if (datoms.length === 0) {
+                return (await observeExists(currentDb, eid)) ? FieldAbsent : EntityAbsent;
+            }
+            return Present(datoms.map(atomValue));
+        }
+        const datom = await currentDb.first(Index.EAVT, { e: eid, a: attr.id });
+        observe?.({
+            _tag: "field",
+            eid,
+            ident,
+            attributeId: attr.id,
+            datoms: datom === undefined ? [] : [toWireDatom(datom)],
+        });
+        if (datom === undefined) {
+            return (await observeExists(currentDb, eid)) ? FieldAbsent : EntityAbsent;
+        }
+        return Present(atomValue(datom));
+    };
+    const catalogField = (id) => index.fields.get(fieldKey(id));
+    const projectRef = async (term, resourceEid, resourceEntity) => {
+        let eid;
+        let focus;
+        if (term.root._tag === "resource") {
+            eid = resourceEid;
+            focus = focusOf(resourceEntity);
+        }
+        else if (term.root._tag === "me") {
+            if (principal.me === undefined)
+                return MissingMeProjection;
+            eid = principal.me.eid;
+            const meEntity = await classifyCurrent(eid);
+            if (meEntity === undefined)
+                return EntityAbsent;
+            focus = focusOf(meEntity);
+        }
+        else {
+            return InvalidTraversalProjection;
+        }
+        if (term.steps.length === 0) {
+            return (await observeExists(currentDb, eid)) ? Present(eid) : EntityAbsent;
+        }
+        for (let i = 0; i < term.steps.length; i++) {
+            const step = term.steps[i];
+            const field = catalogField(step.field);
+            if (field === undefined)
+                return InvalidTraversalProjection;
+            if (!fieldAccessibleFrom(index, focus, field))
+                return InvalidTraversalProjection;
+            const isLast = i === term.steps.length - 1;
+            if (!isLast) {
+                if (field.cardinality === "many" || field.valueType !== "ref") {
+                    return InvalidTraversalProjection;
+                }
+                const hop = await lookupField(eid, field);
+                if (hop._tag !== "Present")
+                    return hop;
+                if (typeof hop.value !== "number")
+                    return InvalidTraversalProjection;
+                eid = hop.value;
+                const next = await classifyCurrent(eid);
+                if (next === undefined)
+                    return EntityAbsent;
+                focus = focusOf(next);
+                continue;
+            }
+            return lookupField(eid, field);
+        }
+        return InvalidTraversalProjection;
+    };
+    const projectTerm = async (term, resourceEid, resourceEntity) => {
+        switch (term._tag) {
+            case "lit":
+                return Present(term.value);
+            case "subject":
+                return Present(principal.subject);
+            case "me":
+                return principal.me === undefined ? MissingMeProjection : Present(principal.me.eid);
+            case "claim": {
+                if (!Object.hasOwn(principal.claims, term.key))
+                    return FieldAbsent;
+                const value = principal.claims[term.key];
+                if (value === undefined)
+                    return FieldAbsent;
+                return Present(value);
+            }
+            case "ref":
+                return projectRef(term, resourceEid, resourceEntity);
+            default:
+                return InvalidTraversalProjection;
+        }
+    };
+    const evalExpr = async (expr, resourceEid, resourceEntity) => {
+        switch (expr._tag) {
+            case "const":
+                return expr.value ? True : False;
+            case "hasClass":
+                return principal.classes.includes(expr.class) ? True : False;
+            case "and": {
+                const parts = [];
+                for (const child of expr.exprs) {
+                    const part = await evalExpr(child, resourceEid, resourceEntity);
+                    if (part._tag === "False")
+                        return False;
+                    parts.push(part);
+                }
+                return andTruth(parts);
+            }
+            case "or": {
+                const parts = [];
+                for (const child of expr.exprs) {
+                    const part = await evalExpr(child, resourceEid, resourceEntity);
+                    if (part._tag === "True")
+                        return True;
+                    parts.push(part);
+                }
+                return orTruth(parts);
+            }
+            case "not":
+                return notTruth(await evalExpr(expr.expr, resourceEid, resourceEntity));
+            case "eq":
+                return eqTruth(await projectTerm(expr.left, resourceEid, resourceEntity), await projectTerm(expr.right, resourceEid, resourceEntity));
+            case "has":
+                return hasTruth(await projectTerm(expr.term, resourceEid, resourceEntity));
+            case "in":
+                return inTruth(await projectTerm(expr.value, resourceEid, resourceEntity), await projectTerm(expr.collection, resourceEid, resourceEntity));
+            default:
+                return Incomplete(InvalidTraversal);
+        }
+    };
+    const evaluateDecision = async (decision, resourceEid, resourceEntity) => {
+        for (const id of decision.deny) {
+            const expr = rules.get(id);
+            if (expr === undefined)
+                return false;
+            if ((await evalExpr(expr, resourceEid, resourceEntity))._tag !== "False")
+                return false;
+        }
+        for (const id of decision.allow) {
+            const expr = rules.get(id);
+            if (expr === undefined)
+                continue;
+            if (authorized(await evalExpr(expr, resourceEid, resourceEntity)))
+                return true;
+        }
+        return false;
+    };
+    const isRowReadable = (db, eid) => {
+        const key = `${viewKey(db)}:${eid}`;
+        const cached = rowMemo.get(key);
+        if (cached !== undefined)
+            return cached;
+        const pending = (async () => {
+            const entity = await classifyFrom(db, eid);
+            if (entity === undefined)
+                return false;
+            const decision = entityDecisions.get(entity.name);
+            if (decision === undefined)
+                return false;
+            return evaluateDecision(decision, eid, entity);
+        })();
+        rowMemo.set(key, pending);
+        return pending;
+    };
+    const isTraitReadable = async (eid, entity, traitName) => {
+        if (!entityComposes(index, entity, traitName))
+            return false;
+        const decision = traitDecisions.get(traitName);
+        if (decision === undefined)
+            return false;
+        return evaluateDecision(decision, eid, entity);
+    };
+    const isFieldReadable = async (db, eid, entity, field) => {
+        if (!fieldAccessibleFrom(index, focusOf(entity), field))
+            return false;
+        if (!(await isRowReadable(db, eid)))
+            return false;
+        if (field.id.owner.kind === "trait") {
+            if (!(await isTraitReadable(eid, entity, field.id.owner.name)))
+                return false;
+        }
+        const fieldDecision = fieldDecisions.get(fieldKey(field.id));
+        if (fieldDecision !== undefined) {
+            return evaluateDecision(fieldDecision, eid, entity);
+        }
+        return true;
+    };
+    const refTargetMatches = (field, target) => {
+        switch (field.refTarget._tag) {
+            case "untargeted":
+                return true;
+            case "entity":
+                return field.refTarget.entity.name === target.name;
+            case "trait":
+                return entityComposes(index, target, field.refTarget.trait.name);
+            case "self":
+                return field.id.owner.kind === "entity"
+                    ? field.id.owner.name === target.name
+                    : entityComposes(index, target, field.id.owner.name);
+        }
+    };
+    const field = async (db, datom) => {
+        try {
+            const entity = await classifyFrom(db, datom.e);
+            if (entity === undefined)
+                return false;
+            if (datom.a === RAMOSE_TYPE)
+                return isRowReadable(db, datom.e);
+            const descriptor = attrFields.get(datom.a);
+            return descriptor !== undefined && await isFieldReadable(db, datom.e, entity, descriptor);
+        }
+        catch {
+            return false;
+        }
+    };
+    const reference = async (db, datom) => {
+        try {
+            if (datom.vt !== ValueTag.Ref)
+                return true;
+            if (typeof datom.v !== "number")
+                return false;
+            const descriptor = attrFields.get(datom.a);
+            if (descriptor?.valueType !== "ref")
+                return false;
+            const target = await classifyFrom(db, datom.v);
+            return target !== undefined && refTargetMatches(descriptor, target) && await isRowReadable(db, datom.v);
+        }
+        catch {
+            return false;
+        }
+    };
+    return { field, reference, row: async (db, eid) => {
+            try {
+                return await isRowReadable(db, eid);
+            }
+            catch {
+                return false;
+            }
+        } };
+};
+export const proposedReadView = (before, after, current = before) => {
+    const live = compileReadAccess(current);
+    const proposed = compileReadAccess(after);
+    const existing = new Map();
+    const exists = (eid) => {
+        let found = existing.get(eid);
+        if (found === undefined) {
+            found = before.currentDb.first(Index.EAVT, { e: eid, a: RAMOSE_TYPE }).then((fact) => fact !== undefined);
+            existing.set(eid, found);
+        }
+        return found;
+    };
+    return after.currentDb.filter(async (db, fact) => {
+        if (!(await proposed.field(db, fact)) || !(await proposed.reference(db, fact)))
+            return false;
+        if (await exists(fact.e) && !(await live.field(current.currentDb, fact)))
+            return false;
+        return fact.vt !== ValueTag.Ref || typeof fact.v !== "number" || !(await exists(fact.v)) ||
+            await live.row(current.currentDb, fact.v);
+    });
+};
+//# sourceMappingURL=read-filter.js.map

package/dist/internal/authorization/read-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-filter.js","sourceRoot":"","sources":["../../../src/internal/authorization/read-filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAQxC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAyB,MAAM,eAAe,CAAC;AAInF,OAAO,EACL,YAAY,EACZ,KAAK,EACL,WAAW,EACX,UAAU,EACV,0BAA0B,EAC1B,mBAAmB,EACnB,OAAO,EACP,IAAI,GAKL,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,2BAA2B,GAE5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAkB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA4BhD,MAAM,OAAO,GAAmB,GAAG,EAAE,CAAC,KAAK,CAAC;AAE5C,MAAM,uBAAuB,GAAG,CAAC,KAAa,EAAsB,EAAE;IACpE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAsB,EAAU,EAAE,CACpD,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;AAElD,MAAM,qBAAqB,GAAG,CAC5B,KAAgB,EACwE,EAAE,CAC1F,KAAK,CAAC,IAAI,KAAK,WAAW;IAC1B,KAAK,CAAC,IAAI,KAAK,kBAAkB;IACjC,KAAK,CAAC,IAAI,KAAK,iBAAiB;IAChC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;AAE7B,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAS,EAAE;IAC/C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,kBAAkB,CAAC;QACxB,KAAK,WAAW,CAAC;QACjB,KAAK,iBAAiB;YACpB,OAAO,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C;YACE,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,KAAc,EAAW,EAAE;IAC5D,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,IAAI,YAAY,IAAI,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7F,IAAI,IAAI,YAAY,UAAU,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAoB,EAAE,KAAqB,EAAW,EAAE;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAClF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAY,EAAiB,EAAE,CAChD,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAW,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAmB,CAAC;AAExF,MAAM,QAAQ,GAAG,CAAC,KAAuB,EAAS,EAAE;IAClD,IAAI,UAA6B,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,UAAU,GAAG,IAAI,CAAC;IACpD,CAAC;IACD,OAAO,UAAU,IAAI,IAAI,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,KAAuB,EAAS,EAAE;IACjD,IAAI,UAA6B,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,UAAU,GAAG,IAAI,CAAC;IACpD,CAAC;IACD,OAAO,UAAU,IAAI,KAAK,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAS,EAAE;IACvC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAAe,EAAE,KAAgB,EAAS,EAAE;IAC3D,IAAI,qBAAqB,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,qBAAqB,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,IAAe,EAAS,EAAE;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAE,UAAqB,EAAS,EAAE;IACjE,IAAI,qBAAqB,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,qBAAqB,CAAC,UAAU,CAAC;QAAE,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;AAEpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,UAA4B,EACR,EAAE;IACtB,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC1D,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,EAAM,EAAU,EAAE,CACjC,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAQ3D,MAAM,YAAY,GAAe,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAEhG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAA6B,EAAc,EAAE;IAC7E,IAAI,CAAC;QAAC,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,YAAY,CAAC;IAAC,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAA6B,EAAkB,EAAE;IACjF,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAC9F,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAA6B,EAAc,EAAE;IAClE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACtD,MAAM,QAAQ,GAAG,2BAA2B,CAC1C;QACE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;QACxB,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;QACpC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;KAC5C,EACD,IAAI,CAAC,OAAO,CACb,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAoB,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QACnD,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACjD,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACjD,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEpD,MAAM,aAAa,GAAG,KAAK,EAAE,EAAM,EAAE,GAAW,EAAoB,EAAE;QACpE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,EAAM,EAAE,GAAW,EAAiC,EAAE;QAC1E,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;YAChF,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,GAAG;gBACH,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YACjD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,EAAE,CAAC;QACL,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,GAAW,EAAiC,EAAE,CACrE,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAE/B,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7E,MAAM,WAAW,GAAG,KAAK,EACvB,GAAW,EACX,KAAsB,EACF,EAAE;QACtB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,OAAO;gBACb,GAAG;gBACH,KAAK;gBACL,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;YACH,OAAO,0BAA0B,CAAC;QACpC,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,OAAO;gBACb,GAAG;gBACH,KAAK;gBACL,WAAW,EAAE,IAAI,CAAC,EAAE;gBACpB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;aAChC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;YAC5E,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,CAAC;YACR,IAAI,EAAE,OAAO;YACb,GAAG;YACH,KAAK;YACL,WAAW,EAAE,IAAI,CAAC,EAAE;YACpB,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;QAC5E,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,EAAW,EAA+B,EAAE,CAChE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjC,MAAM,UAAU,GAAG,KAAK,EACtB,IAAsB,EACtB,WAAmB,EACnB,cAAwB,EACJ,EAAE;QACtB,IAAI,GAAW,CAAC;QAChB,IAAI,KAAe,CAAC;QACpB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAClC,GAAG,GAAG,WAAW,CAAC;YAClB,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,mBAAmB,CAAC;YAC3D,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,YAAY,CAAC;YAChD,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,OAAO,0BAA0B,CAAC;QACpC,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC7E,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,0BAA0B,CAAC;YAC3D,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAAE,OAAO,0BAA0B,CAAC;YACjF,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;oBAC9D,OAAO,0BAA0B,CAAC;gBACpC,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;oBAAE,OAAO,GAAG,CAAC;gBACvC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,0BAA0B,CAAC;gBACrE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,YAAY,CAAC;gBAC5C,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,OAAO,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,0BAA0B,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EACvB,IAAwB,EACxB,WAAmB,EACnB,cAAwB,EACJ,EAAE;QACtB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,KAAK;gBACR,OAAO,OAAO,CAAC,IAAI,CAAC,KAAuB,CAAC,CAAC;YAC/C,KAAK,SAAS;gBACZ,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACpC,KAAK,IAAI;gBACP,OAAO,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YACtF,KAAK,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;oBAAE,OAAO,WAAW,CAAC;gBACnE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzC,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,WAAW,CAAC;gBAC5C,OAAO,OAAO,CAAC,KAAuB,CAAC,CAAC;YAC1C,CAAC;YACD,KAAK,KAAK;gBACR,OAAO,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;YACvD;gBACE,OAAO,0BAA0B,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EACpB,IAAgC,EAChC,WAAmB,EACnB,cAAwB,EACR,EAAE;QAClB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YACnC,KAAK,UAAU;gBACb,OAAO,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAC/D,KAAK,KAAK,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;oBAChE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;wBAAE,OAAO,KAAK,CAAC;oBACxC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;gBACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,KAAK,IAAI,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;oBAChE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;wBAAE,OAAO,IAAI,CAAC;oBACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;gBACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YACD,KAAK,KAAK;gBACR,OAAO,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;YAC1E,KAAK,IAAI;gBACP,OAAO,OAAO,CACZ,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,EACzD,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,CAC3D,CAAC;YACJ,KAAK,KAAK;gBACR,OAAO,QAAQ,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;YAC7E,KAAK,IAAI;gBACP,OAAO,OAAO,CACZ,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,EAC1D,MAAM,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAChE,CAAC;YACJ;gBACE,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAC5B,QAAkB,EAClB,WAAmB,EACnB,cAAwB,EACN,EAAE;QACpB,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACrC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;QACzF,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACjF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,EAAM,EAAE,GAAW,EAAoB,EAAE;QAC9D,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAsB,EAAE;YAC5C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3C,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACzC,OAAO,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAC3B,GAAW,EACX,MAAgB,EAChB,SAAiB,EACC,EAAE;QACpB,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAC3B,EAAM,EACN,GAAW,EACX,MAAgB,EAChB,KAAsB,EACJ,EAAE;QACpB,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC/E,CAAC;QACD,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CACvB,KAA8D,EAC9D,MAAgB,EACP,EAAE;QACX,QAAQ,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC7B,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC;YACd,KAAK,QAAQ;gBACX,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;YACrD,KAAK,OAAO;gBACV,OAAO,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnE,KAAK,MAAM;gBACT,OAAO,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;oBACrC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;oBACrC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAmB,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvC,IAAI,KAAK,CAAC,CAAC,KAAK,WAAW;gBAAE,OAAO,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO,UAAU,KAAK,SAAS,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,SAAS,GAAmB,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;QACpD,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC3C,IAAI,OAAO,KAAK,CAAC,CAAC,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC9C,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,UAAU,EAAE,SAAS,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1G,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;YAChD,IAAI,CAAC;gBAAC,OAAO,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACtE,CAAC,EAAE,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAIhC,EAAE,KAIF,EAAE,OAAO,GAAG,MAAM,EAAM,EAAE;IACzB,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAoB,EAAE;QAC/C,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAC1G,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QAC/C,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7F,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACvF,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtF,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/internal/authorization/read-tables.d.ts

@@ -0,0 +1,9 @@
+import type { CodeDefinition } from "../../db/Binding.ts";
+import { type AnySchema } from "../../db/Schema.ts";
+import type { CatalogDescriptor } from "./catalog.ts";
+import { CatalogId } from "./identities.ts";
+export type CatalogReadTables = Omit<CatalogDescriptor, "database" | "version" | "fingerprint">;
+export declare const completeSchema: (definition: CodeDefinition) => AnySchema;
+export declare const descriptorTables: (catalog: CatalogId, schema: AnySchema, operations: CatalogDescriptor["operations"]) => CatalogReadTables;
+export declare const catalogReadTables: (definition: CodeDefinition) => CatalogReadTables;
+//# sourceMappingURL=read-tables.d.ts.map

package/dist/internal/authorization/read-tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-tables.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/read-tables.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAK1D,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAIlE,OAAO,KAAK,EAAE,iBAAiB,EAAkB,MAAM,cAAc,CAAC;AAEtE,OAAO,EAAE,SAAS,EAA6C,MAAM,iBAAiB,CAAC;AAEvF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,iBAAiB,EACjB,UAAU,GAAG,SAAS,GAAG,aAAa,CACvC,CAAC;AAiFF,eAAO,MAAM,cAAc,eAAgB,cAAc,KAAG,SAS3D,CAAC;AAEF,eAAO,MAAM,gBAAgB,YAClB,SAAS,UACV,SAAS,cACL,iBAAiB,CAAC,YAAY,CAAC,KAC1C,iBA8CF,CAAC;AAEF,eAAO,MAAM,iBAAiB,eAChB,cAAc,KACzB,iBAKA,CAAC"}

package/dist/internal/authorization/read-tables.js

@@ -0,0 +1,120 @@
+import { traitDefinitionOf } from "../../db/Binding.js";
+import { documentationOf } from "../../db/documentation.js";
+import { collectDefinitionEntities } from "../../db/reachability.js";
+import { schemaTraits } from "../../db/Schema.js";
+import { traitsOf, walkTraits } from "../../db/compose.js";
+import { isSelfRefSchema, refTargetOf } from "../../db/valueTypes.js";
+import { InvalidIR } from "./failures.js";
+import { CatalogId, EntityId, FieldId, TraitId } from "./identities.js";
+const invalid = (message) => new InvalidIR({ message });
+const compareText = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+const ownerRef = (kind, name) => ({
+    kind,
+    name,
+});
+const stableDirectTraits = (owner) => {
+    const seen = new Set();
+    const out = [];
+    for (const trait of traitsOf(owner)) {
+        const stable = traitDefinitionOf(trait);
+        if (seen.has(stable.ns))
+            continue;
+        seen.add(stable.ns);
+        out.push(stable);
+    }
+    return out;
+};
+const directTraits = (catalog, owner) => stableDirectTraits(owner).map((trait) => TraitId.make({ catalog, name: trait.ns }));
+const refTarget = (catalog, field) => {
+    if (isSelfRefSchema(field.schema))
+        return { _tag: "self" };
+    const target = refTargetOf(field.schema)?.();
+    if (target?._tag === "Entity" && target.ns !== undefined) {
+        return { _tag: "entity", entity: EntityId.make({ catalog, name: target.ns }) };
+    }
+    if (target?._tag === "Trait" && target.ns !== undefined) {
+        return { _tag: "trait", trait: TraitId.make({ catalog, name: target.ns }) };
+    }
+    return { _tag: "untargeted" };
+};
+const ownFields = (catalog, kind, owner) => {
+    const fields = [];
+    const expectedPrefix = `:${owner.ns}/`;
+    for (const field of Object.values(owner.fields)) {
+        if (!field.ident.startsWith(expectedPrefix))
+            continue;
+        const localName = field.ident.slice(expectedPrefix.length);
+        if (localName.length === 0 || localName.includes("/")) {
+            throw invalid(`invalid field identity '${field.ident}'`);
+        }
+        if (field.valueType === undefined) {
+            throw invalid(`field '${field.ident}' has no storage value type`);
+        }
+        const common = {
+            id: FieldId.make({ catalog, owner: ownerRef(kind, owner.ns), localName }),
+            cardinality: field.cardinality,
+            ...(field.unique === undefined ? {} : { unique: field.unique }),
+            index: field.index,
+            optional: field.isOptional,
+            owned: field.owned,
+            ...(field.doc === undefined ? {} : { doc: field.doc }),
+        };
+        fields.push(field.valueType === "ref"
+            ? { ...common, valueType: "ref", refTarget: refTarget(catalog, field) }
+            : { ...common, valueType: field.valueType });
+    }
+    return fields;
+};
+export const completeSchema = (definition) => {
+    const entities = {};
+    for (const reachable of collectDefinitionEntities(definition)) {
+        entities[reachable.entity.ns] = reachable.entity;
+    }
+    return Object.freeze({
+        _tag: "Schema",
+        entities: Object.freeze(entities),
+    });
+};
+export const descriptorTables = (catalog, schema, operations) => {
+    const entities = Object.values(schema.entities).sort((left, right) => compareText(left.ns, right.ns));
+    const traits = [...schemaTraits(schema).values()].sort((left, right) => compareText(left.ns, right.ns));
+    const entityDescriptors = entities.map((entity) => {
+        const doc = documentationOf(entity);
+        return {
+            id: EntityId.make({ catalog, name: entity.ns }),
+            traits: directTraits(catalog, entity),
+            ...(doc === undefined ? {} : { doc }),
+        };
+    });
+    const traitDescriptors = traits.map((trait) => {
+        const doc = documentationOf(trait);
+        return {
+            id: TraitId.make({ catalog, name: trait.ns }),
+            traits: directTraits(catalog, trait),
+            ...(doc === undefined ? {} : { doc }),
+        };
+    });
+    const fields = [
+        ...entities.flatMap((entity) => ownFields(catalog, "entity", entity)),
+        ...traits.flatMap((trait) => ownFields(catalog, "trait", trait)),
+    ];
+    const traitComposition = entities.flatMap((entity) => stableDirectTraits(entity).map((stable) => {
+        const nested = walkTraits(traitsOf(stable)).all;
+        const names = [stable.ns, ...nested.map((trait) => trait.ns)];
+        return {
+            composer: EntityId.make({ catalog, name: entity.ns }),
+            trait: TraitId.make({ catalog, name: stable.ns }),
+            transitive: [...new Set(names)].map((name) => TraitId.make({ catalog, name })),
+        };
+    }));
+    return {
+        id: catalog,
+        entities: entityDescriptors,
+        traits: traitDescriptors,
+        fields,
+        operations,
+        traitComposition,
+    };
+};
+export const catalogReadTables = (definition) => descriptorTables(CatalogId.make(definition.key), completeSchema(definition), []);
+//# sourceMappingURL=read-tables.js.map