rbac 4.0.2 → 6.0.0

package/HISTORY.md

@@ -1,4 +1,22 @@
-# Change/History Log
+# v6.0.0
 
-This project adheres to [Semantic Versioning](http://semver.org/).
-Every release, along with the migration instructions, is documented on the Github [Releases](https://github.com/seeden/rbac/releases) page.
+- Zero production dependencies (removed lodash, keymirror)
+- Minimum Node.js version: 18.0.0
+- Updated build toolchain (Babel 7.26, Jest 29)
+- Cleaned up development dependencies (48 to 7)
+- Fixed LICENSE copyright
+- Removed deprecated API usage (String.prototype.substr)
+- Removed dead references to Mongoose, DynamoDB, Express middleware
+
+# v5.0.3
+
+- Added DynamoDB support via dynamoose
+
+# v5.0.2
+
+- Bug fix
+
+# v5.0.1
+
+- Async RBAC
+- Updated tests

package/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2014-2026 Zlatko Fedor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/README.md

@@ -1,38 +1,9 @@
 # RBAC
-(Hierarchical Role Based Access Control)
 
-[![NPM version][npm-image]][npm-url]
-[![build status][travis-image]][travis-url]
-[![Test coverage][coveralls-image]][coveralls-url]
-[![Gitter chat](https://badges.gitter.im/seeden/rbac.png)](https://gitter.im/seeden/rbac)
-[![Gittip](https://img.shields.io/gittip/seeden.svg?style=flat)](https://gratipay.com/seeden/)
+Hierarchical Role Based Access Control for Node.js
 
-[npm-image]: https://img.shields.io/npm/v/rbac.svg?style=flat-square
-[npm-url]: https://www.npmjs.com/rbac
-[travis-image]: https://img.shields.io/travis/seeden/rbac/master.svg?style=flat-square
-[travis-url]: https://travis-ci.org/seeden/rbac
-[coveralls-image]: https://img.shields.io/coveralls/seeden/rbac/master.svg?style=flat-square
-[coveralls-url]: https://coveralls.io/r/seeden/rbac?branch=master
-[github-url]: https://github.com/seeden/rbac
-
-RBAC is the authorization library for NodeJS.
-
-## Motivation
-
-I needed hierarchical role based access control for my projects based on ExpressJS.
-I had one requirement. This structure must be permanently stored in various storages.
-For example in memory or Mongoose.
-Because there is a lot of options for storing of data and many of them are asynchronous.
-I created asynchronous API.
-Please, if you found any bug or you need custom API, create an issue or pull request.
-
-## Documentation
-
-[Read more about API in documentation](http://cherryprojects.github.io/rbac/RBAC.html)
-
-# Support us
-
-Star this project on [GitHub][github-url].
+[![NPM version](https://img.shields.io/npm/v/rbac.svg)](https://www.npmjs.com/package/rbac)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
 ## Install
 
@@ -43,113 +14,81 @@ npm install rbac
 ## Usage
 
 ```js
-import RBAC from 'rbac'; // ES5 var RBAC = require('rbac').default;
+import { RBAC } from 'rbac';
+
 const rbac = new RBAC({
   roles: ['superadmin', 'admin', 'user', 'guest'],
   permissions: {
     user: ['create', 'delete'],
     password: ['change', 'forgot'],
     article: ['create'],
-    rbac: ['update']
+    rbac: ['update'],
   },
   grants: {
     guest: ['create_user', 'forgot_password'],
     user: ['change_password'],
     admin: ['user', 'delete_user', 'update_rbac'],
-    superadmin: ['admin']
-  }
-}, function(err, rbacInstance) {
-  if (err) {
-    throw err;
-  }
+    superadmin: ['admin'],
+  },
 });
+
+await rbac.init();
 ```
 
-## Usage with express
+## Check permissions
 
 ```js
-import express from 'express';
-import RBAC from 'rbac';
-import secure from 'rbac/controllers/express';
-
-// your custom controller for express
-function adminController(req, res, next) {
-  res.send('Hello admin');
+const can = await rbac.can('admin', 'create', 'article');
+if (can) {
+  console.log('Admin is able to create article');
 }
+```
 
-const app = express();
-const rbac = new RBAC({
-  roles: ['admin', 'user']  
-}, (err, rbac) => {
-  if (err) throw err;
-
-  // setup express routes
-  app.use('/admin', secure.hasRole(rbac, 'admin'), adminController);
-});
-```    
-
-## Check permissions
+Or use a role instance:
 
 ```js
-rbac.can('admin', 'create', 'article', (err, can) => {
-  if (err) {
-    throw err; // process error
-  }
-
+const admin = await rbac.getRole('admin');
+if (!admin) {
+  console.log('Role does not exist');
+} else {
+  const can = await admin.can('create', 'article');
   if (can) {
-    console.log('Admin is able create article');
-  }
-});
-
-// or you can use instance of admin role
-
-rbac.getRole('admin', (err, admin) => {
-  if (err) {
-    throw err; // process error
+    console.log('Admin is able to create article');
   }
-
-  if (!admin) {
-    return console.log('Role does not exists');
-  }
-
-  admin.can('create', 'article', (err2, can) => {
-    if (err2) throw err2; // process error
-
-    if (can) {
-      console.log('Admin is able create article');    
-    }
-  });
-});
+}
 ```
 
-## Mongoose user model
-
-Please take a look on plugin [mongoose-hrbac](http://github.com/seeden/mongoose-hrbac)
+## Custom storage
 
-## Build documentation
+RBAC uses in-memory storage by default. You can implement custom storage by extending the `Storage` class:
 
-```sh
-npm run doc
-```  
-
-## Running Tests
+```js
+import { Storage } from 'rbac';
+
+class MyStorage extends Storage {
+  async add(item) { /* ... */ }
+  async remove(item) { /* ... */ }
+  async grant(role, child) { /* ... */ }
+  async revoke(role, child) { /* ... */ }
+  async get(name) { /* ... */ }
+  async getRoles() { /* ... */ }
+  async getPermissions() { /* ... */ }
+  async getGrants(role) { /* ... */ }
+}
 
-```sh
-npm run test
+const rbac = new RBAC({ storage: new MyStorage() });
 ```
 
-## Build
+## Running Tests
 
 ```sh
-npm run build
+npm test
 ```
 
 ## Credits
 
-  - [Zlatko Fedor](http://github.com/seeden)
+[Zlatko Fedor](https://github.com/seeden)
 
 ## License
 
-The MIT License (MIT)
-
-Copyright (c) 2016 Zlatko Fedor zlatkofedor@cherrysro.com
+MIT

package/dist/Base.js

@@ -1,82 +1,48 @@
-'use strict';
+"use strict";
 
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-
-var _createClass = function () { function defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if ("value" in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } } return function (Constructor, protoProps, staticProps) { if (protoProps) defineProperties(Constructor.prototype, protoProps); if (staticProps) defineProperties(Constructor, staticProps); return Constructor; }; }();
-
-function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
-
-var Base = function () {
+exports.default = void 0;
+class Base {
   /**
    * Base constructor
    * @constructor Base
    * @param  {RBAC}     rbac     Instance of the RBAC
    * @param  {String}   name     Name of the grant
-   * @param  {Boolean}  add      True if you need to save it to storage
    * @param  {Function} cb       Callback function after add
    */
-  function Base(rbac, name, add, cb) {
-    var _this = this;
-
-    _classCallCheck(this, Base);
-
-    if (!rbac || !name || typeof cb !== 'function') {
-      return cb(new Error('One of parameters is undefined'));
-    }
-
-    this._name = name;
-    this._rbac = rbac;
-
-    if (!add) {
-      return cb(null, this);
+  constructor(rbac, name) {
+    if (!rbac || !name) {
+      throw new Error('One of parameters is undefined');
     }
-
-    rbac.add(this, function (err) {
-      return cb(err, _this);
-    });
+    this.name = name;
+    this.rbac = rbac;
   }
 
   /**
-   * Get name of actual instance
-   * @member Base#name {String}
+   * Add this to RBAC (storage)
+   * @method Base#remove
+   * @return {boolean}
    */
+  async add() {
+    const {
+      rbac
+    } = this;
+    return rbac.add(this);
+  }
 
-
-  _createClass(Base, [{
-    key: 'remove',
-
-
-    /**
-     * Remove this from RBAC (storage)
-     * @method Base#remove
-     * @param  {Function} cb Callback function
-     * @return {Base}
-     */
-    value: function remove(cb) {
-      this.rbac.remove(this, cb);
-      return this;
-    }
-  }, {
-    key: 'name',
-    get: function get() {
-      return this._name;
-    }
-
-    /**
-     * Get instance of RBAC
-     * @member Base#rbac {RBAC|null} Instance of RBAC
-     */
-
-  }, {
-    key: 'rbac',
-    get: function get() {
-      return this._rbac;
-    }
-  }]);
-
-  return Base;
-}();
-
-exports.default = Base;
+  /**
+   * Remove this from RBAC (storage)
+   * @method Base#remove
+   * @return {boolean}
+   */
+  async remove() {
+    const {
+      rbac
+    } = this;
+    return rbac.remove(this);
+  }
+}
+exports.default = Base;
+//# sourceMappingURL=Base.js.map

package/dist/Base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Base.js","names":["Base","constructor","rbac","name","Error","add","remove","exports","default"],"sources":["../src/Base.js"],"sourcesContent":["// @flow\nimport type RBAC from './RBAC';\n\nexport default class Base {\n  /**\n   * Base constructor\n   * @constructor Base\n   * @param  {RBAC}     rbac     Instance of the RBAC\n   * @param  {String}   name     Name of the grant\n   * @param  {Function} cb       Callback function after add\n   */\n  constructor(rbac: RBAC, name: string) {\n    if (!rbac || !name) {\n      throw new Error('One of parameters is undefined');\n    }\n\n    this.name = name;\n    this.rbac = rbac;\n  }\n\n  /**\n   * Add this to RBAC (storage)\n   * @method Base#remove\n   * @return {boolean}\n   */\n  async add(): boolean {\n    const { rbac } = this;\n    return rbac.add(this);\n  }\n\n  /**\n   * Remove this from RBAC (storage)\n   * @method Base#remove\n   * @return {boolean}\n   */\n  async remove(): boolean {\n    const { rbac } = this;\n    return rbac.remove(this);\n  }\n}\n"],"mappings":";;;;;;AAGe,MAAMA,IAAI,CAAC;EACxB;AACF;AACA;AACA;AACA;AACA;AACA;EACEC,WAAWA,CAACC,IAAU,EAAEC,IAAY,EAAE;IACpC,IAAI,CAACD,IAAI,IAAI,CAACC,IAAI,EAAE;MAClB,MAAM,IAAIC,KAAK,CAAC,gCAAgC,CAAC;IACnD;IAEA,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACD,IAAI,GAAGA,IAAI;EAClB;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMG,GAAGA,CAAA,EAAY;IACnB,MAAM;MAAEH;IAAK,CAAC,GAAG,IAAI;IACrB,OAAOA,IAAI,CAACG,GAAG,CAAC,IAAI,CAAC;EACvB;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAMC,MAAMA,CAAA,EAAY;IACtB,MAAM;MAAEJ;IAAK,CAAC,GAAG,IAAI;IACrB,OAAOA,IAAI,CAACI,MAAM,CAAC,IAAI,CAAC;EAC1B;AACF;AAACC,OAAA,CAAAC,OAAA,GAAAR,IAAA","ignoreList":[]}

package/dist/Memory.js

@@ -0,0 +1,139 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+var _Storage = _interopRequireDefault(require("./Storage"));
+var _Permission = _interopRequireDefault(require("./Permission"));
+var _Role = _interopRequireDefault(require("./Role"));
+var _Base = _interopRequireDefault(require("./Base"));
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+class Memory extends _Storage.default {
+  items = {};
+  async add(item) {
+    const {
+      name
+    } = item;
+    if (this.items[name]) {
+      throw new Error(`Item ${name} already exists`);
+    }
+    this.items[name] = {
+      instance: item,
+      grants: []
+    };
+    return true;
+  }
+  async remove(item) {
+    const {
+      items
+    } = this;
+    const {
+      name
+    } = item;
+    if (!items[name]) {
+      throw new Error(`Item ${name} is not presented in storage`);
+    }
+
+    // revoke from all instances
+    Object.keys(items).forEach(itemName => {
+      const {
+        grants
+      } = items[itemName];
+      items[itemName].grants = grants.filter(grant => grant !== name);
+    });
+
+    // delete from items
+    delete this.items[name];
+    return true;
+  }
+  async grant(role, child) {
+    const {
+      name
+    } = role;
+    const {
+      name: childName
+    } = child;
+    if (!this.items[name]) {
+      throw new Error(`Role ${name} is not exist`);
+    }
+    if (!this.items[childName]) {
+      throw new Error(`Base ${childName} is not exist`);
+    }
+    if (!(role instanceof _Role.default)) {
+      throw new Error('Role is not instance of Role');
+    }
+    if (name === childName) {
+      throw new Error(`You can grant yourself ${name}`);
+    }
+    const {
+      grants
+    } = this.items[name];
+    if (!grants.includes(childName)) {
+      grants.push(childName);
+    }
+    return true;
+  }
+  async revoke(role, child) {
+    const {
+      name
+    } = role;
+    const {
+      name: childName
+    } = child;
+    if (!this.items[name] || !this.items[childName]) {
+      throw new Error('Role is not exist');
+    }
+    const {
+      grants
+    } = this.items[name];
+    if (!grants.includes(childName)) {
+      throw new Error('Item is not associated to this item');
+    }
+    this.items[name].grants = grants.filter(grant => grant !== childName);
+    return true;
+  }
+  async get(name) {
+    if (name && this.items[name]) {
+      return this.items[name].instance;
+    }
+    return undefined;
+  }
+  async getRoles() {
+    return this.items.reduce((filtered, item) => {
+      const {
+        instance
+      } = item;
+      if (instance instanceof _Role.default) {
+        filtered.push(instance);
+      }
+      return filtered;
+    }, []);
+  }
+  async getPermissions() {
+    return this.items.reduce((filtered, item) => {
+      const {
+        instance
+      } = item;
+      if (instance instanceof _Permission.default) {
+        filtered.push(instance);
+      }
+      return filtered;
+    }, []);
+  }
+  async getGrants(role) {
+    if (role && this.items[role]) {
+      const currentGrants = this.items[role].grants;
+      return currentGrants.reduce((filtered, grantName) => {
+        const grant = this.items[grantName];
+        if (grant) {
+          filtered.push(grant.instance);
+        }
+        return filtered;
+      }, []);
+    }
+    return [];
+  }
+}
+exports.default = Memory;
+//# sourceMappingURL=Memory.js.map

package/dist/Memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Memory.js","names":["_Storage","_interopRequireDefault","require","_Permission","_Role","_Base","e","__esModule","default","Memory","Storage","items","add","item","name","Error","instance","grants","remove","Object","keys","forEach","itemName","filter","grant","role","child","childName","Role","includes","push","revoke","get","undefined","getRoles","reduce","filtered","getPermissions","Permission","getGrants","currentGrants","grantName","exports"],"sources":["../src/Memory.js"],"sourcesContent":["// @flow\nimport Storage from './Storage';\nimport Permission from './Permission';\nimport Role from './Role';\nimport Base from './Base';\n\nexport default class Memory extends Storage {\n  items: Object[] = {};\n\n  async add(item: Base): boolean {\n    const { name } = item;\n    if (this.items[name]) {\n      throw new Error(`Item ${name} already exists`);\n    }\n\n    this.items[name] = {\n      instance: item,\n      grants: [],\n    };\n\n    return true;\n  }\n\n  async remove(item: Base): boolean {\n    const { items } = this;\n    const { name } = item;\n    if (!items[name]) {\n      throw new Error(`Item ${name} is not presented in storage`);\n    }\n\n    // revoke from all instances\n    Object.keys(items).forEach((itemName: string) => {\n      const { grants } = items[itemName];\n      items[itemName].grants = grants.filter(grant => grant !== name);\n    });\n\n    // delete from items\n    delete this.items[name];\n    return true;\n  }\n\n  async grant(role: Role, child: Base): boolean {\n    const { name } = role;\n    const { name: childName } = child;\n\n    if (!this.items[name]) {\n      throw new Error(`Role ${name} is not exist`);\n    }\n\n    if (!this.items[childName]) {\n      throw new Error(`Base ${childName} is not exist`);\n    }\n\n    if (!(role instanceof Role)) {\n      throw new Error('Role is not instance of Role');\n    }\n\n    if (name === childName) {\n      throw new Error(`You can grant yourself ${name}`);\n    }\n\n    const { grants } = this.items[name];\n    if (!grants.includes(childName)) {\n      grants.push(childName);\n    }\n\n    return true;\n  }\n\n  async revoke(role: Role, child: Base): boolean {\n    const { name } = role;\n    const { name: childName } = child;\n\n    if (!this.items[name] || !this.items[childName]) {\n      throw new Error('Role is not exist');\n    }\n\n    const { grants } = this.items[name];\n    if (!grants.includes(childName)) {\n      throw new Error('Item is not associated to this item');\n    }\n\n    this.items[name].grants = grants.filter(grant => grant !== childName);\n\n    return true;\n  }\n\n  async get(name: string): ?Base {\n    if (name && this.items[name]) {\n      return this.items[name].instance;\n    }\n\n    return undefined;\n  }\n\n  async getRoles(): Role[] {\n    return this.items\n      .reduce((filtered: Role[], item: Object) => {\n        const { instance } = item;\n\n        if (instance instanceof Role) {\n          filtered.push(instance);\n        }\n\n        return filtered;\n      }, []);\n  }\n\n  async getPermissions(): Permission[] {\n    return this.items\n      .reduce((filtered: Permission[], item: Object) => {\n        const { instance } = item;\n\n        if (instance instanceof Permission) {\n          filtered.push(instance);\n        }\n\n        return filtered;\n      }, []);\n  }\n\n  async getGrants(role: string): Base[] {\n    if (role && this.items[role]) {\n      const currentGrants = this.items[role].grants;\n\n      return currentGrants.reduce((filtered: Object[], grantName: string) => {\n        const grant = this.items[grantName];\n        if (grant) {\n          filtered.push(grant.instance);\n        }\n\n        return filtered;\n      }, []);\n    }\n\n    return [];\n  }\n}\n"],"mappings":";;;;;;AACA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,WAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,KAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,KAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAA0B,SAAAD,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEX,MAAMG,MAAM,SAASC,gBAAO,CAAC;EAC1CC,KAAK,GAAa,CAAC,CAAC;EAEpB,MAAMC,GAAGA,CAACC,IAAU,EAAW;IAC7B,MAAM;MAAEC;IAAK,CAAC,GAAGD,IAAI;IACrB,IAAI,IAAI,CAACF,KAAK,CAACG,IAAI,CAAC,EAAE;MACpB,MAAM,IAAIC,KAAK,CAAC,QAAQD,IAAI,iBAAiB,CAAC;IAChD;IAEA,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC,GAAG;MACjBE,QAAQ,EAAEH,IAAI;MACdI,MAAM,EAAE;IACV,CAAC;IAED,OAAO,IAAI;EACb;EAEA,MAAMC,MAAMA,CAACL,IAAU,EAAW;IAChC,MAAM;MAAEF;IAAM,CAAC,GAAG,IAAI;IACtB,MAAM;MAAEG;IAAK,CAAC,GAAGD,IAAI;IACrB,IAAI,CAACF,KAAK,CAACG,IAAI,CAAC,EAAE;MAChB,MAAM,IAAIC,KAAK,CAAC,QAAQD,IAAI,8BAA8B,CAAC;IAC7D;;IAEA;IACAK,MAAM,CAACC,IAAI,CAACT,KAAK,CAAC,CAACU,OAAO,CAAEC,QAAgB,IAAK;MAC/C,MAAM;QAAEL;MAAO,CAAC,GAAGN,KAAK,CAACW,QAAQ,CAAC;MAClCX,KAAK,CAACW,QAAQ,CAAC,CAACL,MAAM,GAAGA,MAAM,CAACM,MAAM,CAACC,KAAK,IAAIA,KAAK,KAAKV,IAAI,CAAC;IACjE,CAAC,CAAC;;IAEF;IACA,OAAO,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC;IACvB,OAAO,IAAI;EACb;EAEA,MAAMU,KAAKA,CAACC,IAAU,EAAEC,KAAW,EAAW;IAC5C,MAAM;MAAEZ;IAAK,CAAC,GAAGW,IAAI;IACrB,MAAM;MAAEX,IAAI,EAAEa;IAAU,CAAC,GAAGD,KAAK;IAEjC,IAAI,CAAC,IAAI,CAACf,KAAK,CAACG,IAAI,CAAC,EAAE;MACrB,MAAM,IAAIC,KAAK,CAAC,QAAQD,IAAI,eAAe,CAAC;IAC9C;IAEA,IAAI,CAAC,IAAI,CAACH,KAAK,CAACgB,SAAS,CAAC,EAAE;MAC1B,MAAM,IAAIZ,KAAK,CAAC,QAAQY,SAAS,eAAe,CAAC;IACnD;IAEA,IAAI,EAAEF,IAAI,YAAYG,aAAI,CAAC,EAAE;MAC3B,MAAM,IAAIb,KAAK,CAAC,8BAA8B,CAAC;IACjD;IAEA,IAAID,IAAI,KAAKa,SAAS,EAAE;MACtB,MAAM,IAAIZ,KAAK,CAAC,0BAA0BD,IAAI,EAAE,CAAC;IACnD;IAEA,MAAM;MAAEG;IAAO,CAAC,GAAG,IAAI,CAACN,KAAK,CAACG,IAAI,CAAC;IACnC,IAAI,CAACG,MAAM,CAACY,QAAQ,CAACF,SAAS,CAAC,EAAE;MAC/BV,MAAM,CAACa,IAAI,CAACH,SAAS,CAAC;IACxB;IAEA,OAAO,IAAI;EACb;EAEA,MAAMI,MAAMA,CAACN,IAAU,EAAEC,KAAW,EAAW;IAC7C,MAAM;MAAEZ;IAAK,CAAC,GAAGW,IAAI;IACrB,MAAM;MAAEX,IAAI,EAAEa;IAAU,CAAC,GAAGD,KAAK;IAEjC,IAAI,CAAC,IAAI,CAACf,KAAK,CAACG,IAAI,CAAC,IAAI,CAAC,IAAI,CAACH,KAAK,CAACgB,SAAS,CAAC,EAAE;MAC/C,MAAM,IAAIZ,KAAK,CAAC,mBAAmB,CAAC;IACtC;IAEA,MAAM;MAAEE;IAAO,CAAC,GAAG,IAAI,CAACN,KAAK,CAACG,IAAI,CAAC;IACnC,IAAI,CAACG,MAAM,CAACY,QAAQ,CAACF,SAAS,CAAC,EAAE;MAC/B,MAAM,IAAIZ,KAAK,CAAC,qCAAqC,CAAC;IACxD;IAEA,IAAI,CAACJ,KAAK,CAACG,IAAI,CAAC,CAACG,MAAM,GAAGA,MAAM,CAACM,MAAM,CAACC,KAAK,IAAIA,KAAK,KAAKG,SAAS,CAAC;IAErE,OAAO,IAAI;EACb;EAEA,MAAMK,GAAGA,CAAClB,IAAY,EAAS;IAC7B,IAAIA,IAAI,IAAI,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC,EAAE;MAC5B,OAAO,IAAI,CAACH,KAAK,CAACG,IAAI,CAAC,CAACE,QAAQ;IAClC;IAEA,OAAOiB,SAAS;EAClB;EAEA,MAAMC,QAAQA,CAAA,EAAW;IACvB,OAAO,IAAI,CAACvB,KAAK,CACdwB,MAAM,CAAC,CAACC,QAAgB,EAAEvB,IAAY,KAAK;MAC1C,MAAM;QAAEG;MAAS,CAAC,GAAGH,IAAI;MAEzB,IAAIG,QAAQ,YAAYY,aAAI,EAAE;QAC5BQ,QAAQ,CAACN,IAAI,CAACd,QAAQ,CAAC;MACzB;MAEA,OAAOoB,QAAQ;IACjB,CAAC,EAAE,EAAE,CAAC;EACV;EAEA,MAAMC,cAAcA,CAAA,EAAiB;IACnC,OAAO,IAAI,CAAC1B,KAAK,CACdwB,MAAM,CAAC,CAACC,QAAsB,EAAEvB,IAAY,KAAK;MAChD,MAAM;QAAEG;MAAS,CAAC,GAAGH,IAAI;MAEzB,IAAIG,QAAQ,YAAYsB,mBAAU,EAAE;QAClCF,QAAQ,CAACN,IAAI,CAACd,QAAQ,CAAC;MACzB;MAEA,OAAOoB,QAAQ;IACjB,CAAC,EAAE,EAAE,CAAC;EACV;EAEA,MAAMG,SAASA,CAACd,IAAY,EAAU;IACpC,IAAIA,IAAI,IAAI,IAAI,CAACd,KAAK,CAACc,IAAI,CAAC,EAAE;MAC5B,MAAMe,aAAa,GAAG,IAAI,CAAC7B,KAAK,CAACc,IAAI,CAAC,CAACR,MAAM;MAE7C,OAAOuB,aAAa,CAACL,MAAM,CAAC,CAACC,QAAkB,EAAEK,SAAiB,KAAK;QACrE,MAAMjB,KAAK,GAAG,IAAI,CAACb,KAAK,CAAC8B,SAAS,CAAC;QACnC,IAAIjB,KAAK,EAAE;UACTY,QAAQ,CAACN,IAAI,CAACN,KAAK,CAACR,QAAQ,CAAC;QAC/B;QAEA,OAAOoB,QAAQ;MACjB,CAAC,EAAE,EAAE,CAAC;IACR;IAEA,OAAO,EAAE;EACX;AACF;AAACM,OAAA,CAAAlC,OAAA,GAAAC,MAAA","ignoreList":[]}