From 3aeeafe79eceb85c47086c75c62cc99029f4c323 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <evgeniy@nspcc.ru>
Date: Fri, 21 May 2021 18:12:32 +0300
Subject: [PATCH 1/5] [#3] policy: use ANTLRv4 parser generator

Signed-off-by: Evgenii Stratonikov <evgeniy@nspcc.ru>
---
 .gitattributes                           |   4 +
 go.mod                                   |   2 +-
 go.sum                                   |   5 +-
 pkg/policy/doc.go                        |   2 +-
 pkg/policy/grammar.ebnf                  |  55 ----
 pkg/policy/grammar.go                    |  60 ----
 pkg/policy/parser/Query.g4               |  45 +++
 pkg/policy/parser/Query.interp           | Bin 0 -> 4174 bytes
 pkg/policy/parser/Query.tokens           | Bin 0 -> 331 bytes
 pkg/policy/parser/QueryLexer.g4          |  41 +++
 pkg/policy/parser/QueryLexer.interp      | Bin 0 -> 7060 bytes
 pkg/policy/parser/QueryLexer.tokens      | Bin 0 -> 331 bytes
 pkg/policy/parser/generate.go            |   3 +
 pkg/policy/parser/query_base_listener.go | Bin 0 -> 4408 bytes
 pkg/policy/parser/query_base_visitor.go  | Bin 0 -> 1712 bytes
 pkg/policy/parser/query_lexer.go         | Bin 0 -> 9729 bytes
 pkg/policy/parser/query_listener.go      | Bin 0 -> 3058 bytes
 pkg/policy/parser/query_parser.go        | Bin 0 -> 59362 bytes
 pkg/policy/parser/query_visitor.go       | Bin 0 -> 1645 bytes
 pkg/policy/query.go                      | 363 +++++++++++++++--------
 pkg/policy/query_test.go                 |  35 ++-
 21 files changed, 374 insertions(+), 241 deletions(-)
 create mode 100644 .gitattributes
 delete mode 100644 pkg/policy/grammar.ebnf
 delete mode 100644 pkg/policy/grammar.go
 create mode 100644 pkg/policy/parser/Query.g4
 create mode 100644 pkg/policy/parser/Query.interp
 create mode 100644 pkg/policy/parser/Query.tokens
 create mode 100644 pkg/policy/parser/QueryLexer.g4
 create mode 100644 pkg/policy/parser/QueryLexer.interp
 create mode 100644 pkg/policy/parser/QueryLexer.tokens
 create mode 100644 pkg/policy/parser/generate.go
 create mode 100644 pkg/policy/parser/query_base_listener.go
 create mode 100644 pkg/policy/parser/query_base_visitor.go
 create mode 100644 pkg/policy/parser/query_lexer.go
 create mode 100644 pkg/policy/parser/query_listener.go
 create mode 100644 pkg/policy/parser/query_parser.go
 create mode 100644 pkg/policy/parser/query_visitor.go

diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..b371347
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,4 @@
+/pkg/policy/parser/*.go -diff
+/pkg/policy/parser/generate.go diff
+**/*.interp -diff
+**/*.tokens -diff
diff --git a/go.mod b/go.mod
index f7f1829..25c51c6 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/nspcc-dev/neofs-sdk-go
 go 1.16
 
 require (
-	github.com/alecthomas/participle v0.7.1
+	github.com/antlr/antlr4/runtime/Go/antlr v0.0.0-20210521073959-f0d4d129b7f1
 	github.com/nspcc-dev/neofs-api-go v1.27.0
 	github.com/stretchr/testify v1.6.1
 	go.uber.org/zap v1.10.0
diff --git a/go.sum b/go.sum
index 799b7f7..ed17a36 100644
--- a/go.sum
+++ b/go.sum
@@ -10,15 +10,14 @@ github.com/Workiva/go-datastructures v1.0.50/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3
 github.com/abiosoft/ishell v2.0.0+incompatible/go.mod h1:HQR9AqF2R3P4XXpMpI0NAzgHf/aS6+zVXRj14cVk9qg=
 github.com/abiosoft/readline v0.0.0-20180607040430-155bce2042db/go.mod h1:rB3B4rKii8V21ydCbIzH5hZiCQE7f5E9SzUb/ZZx530=
 github.com/aead/siphash v1.0.1/go.mod h1:Nywa3cDsYNNK3gaciGTWPwHt0wlpNV15vwmswBAUSII=
-github.com/alecthomas/participle v0.7.1 h1:2bN7reTw//5f0cugJcTOnY/NYZcWQOaajW+BwZB5xWs=
-github.com/alecthomas/participle v0.7.1/go.mod h1:HfdmEuwvr12HXQN44HPWXR0lHmVolVYe4dyL6lQ3duY=
-github.com/alecthomas/repr v0.0.0-20181024024818-d37bc2a10ba1/go.mod h1:xTS7Pm1pD1mvyM075QCDSRqH6qRLXylzS24ZTpRiSzQ=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
 github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
 github.com/alicebob/gopher-json v0.0.0-20180125190556-5a6b3ba71ee6/go.mod h1:SGnFV6hVsYE877CKEZ6tDNTjaSXYUk6QqoIK6PrAtcc=
 github.com/alicebob/miniredis v2.5.0+incompatible/go.mod h1:8HZjEj4yU0dwhYHky+DxYx+6BMjkBbe5ONFIF1MXffk=
+github.com/antlr/antlr4/runtime/Go/antlr v0.0.0-20210521073959-f0d4d129b7f1 h1:zFRi26YWd7NIorBXe8UkevRl0dIvk/AnXHWaAiZG+Yk=
+github.com/antlr/antlr4/runtime/Go/antlr v0.0.0-20210521073959-f0d4d129b7f1/go.mod h1:F7bn7fEU90QkQ3tnmaTx3LTKLEDqnwWODIYppRQ5hnY=
 github.com/armon/consul-api v0.0.0-20180202201655-eb2c6b5be1b6/go.mod h1:grANhF5doyWs3UAsr3K4I6qtAmlQcZDesFNEHPZAzj8=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
diff --git a/pkg/policy/doc.go b/pkg/policy/doc.go
index e2f94bb..10394fa 100644
--- a/pkg/policy/doc.go
+++ b/pkg/policy/doc.go
@@ -1,5 +1,5 @@
 // Package policy provides facilities for creating policy from SQL-like language.
-//   eBNF grammar is provided in `grammar.ebnf` for illustration.
+//   ANTLRv4 grammar is provided in `parser/Query.g4` and `parser/QueryLexer.g4`.
 //
 // Current limitations:
 // 1. Grouping filter expressions in parenthesis is not supported right now.
diff --git a/pkg/policy/grammar.ebnf b/pkg/policy/grammar.ebnf
deleted file mode 100644
index 2bcd3a2..0000000
--- a/pkg/policy/grammar.ebnf
+++ /dev/null
@@ -1,55 +0,0 @@
-Policy ::=
-    RepStmt, [RepStmt],
-    CbtStmt?,
-    [SelectStmt],
-    [FilterStmt],
-;
-
-RepStmt ::=
-    'REP', Number1, (* number of object replicas *)
-    ('AS', Ident)?  (* optional selector name *)
-;
-
-CbtStmt ::= 'CBF', Number1 (* container backup factor *)
-;
-
-SelectStmt ::=
-    'SELECT', Number1,    (* number of nodes to select without container backup factor *)
-    ('IN', Clause?, Ident)?, (* bucket name *)
-    FROM, (Ident | '*'),  (* filter reference or whole netmap *)
-    ('AS', Ident)?        (* optional selector name *)
-;
-
-Clause ::=
-      'SAME'     (* nodes from the same bucket *)
-    | 'DISTINCT' (* nodes from distinct buckets *)
-;
-
-FilterStmt ::=
-    'FILTER', AndChain, ['OR', AndChain],
-    'AS', Ident (* obligatory filter name *)
-;
-
-AndChain ::=
-    Expr, ['AND', Expr]
-;
-
-Expr ::=
-      '@' Ident		   (* filter reference *)
-    | Key, Op, Value (* attribute filter *)
-;
-
-Op ::= 'EQ' | 'NE' | 'GE' | 'GT' | 'LT' | 'LE'
-;
-
-Key ::= Ident | String
-;
-
-Value ::= Ident | Number | String
-;
-
-Number1 ::= Digit1 [Digit];
-Number ::= Digit [Digit];
-
-Digit1 ::= '1' | '2' | '3' | '4' | '5' | '6' | '7' | '8' | '9' ;
-Digit ::= '0' | Digit1;
diff --git a/pkg/policy/grammar.go b/pkg/policy/grammar.go
deleted file mode 100644
index 6fd228e..0000000
--- a/pkg/policy/grammar.go
+++ /dev/null
@@ -1,60 +0,0 @@
-//nolint:govet,golint // fails on struct tags here, but participle needs this syntax
-package policy
-
-import (
-	"github.com/alecthomas/participle"
-)
-
-var parser *participle.Parser
-
-func init() {
-	p, err := participle.Build(&query{})
-	if err != nil {
-		panic(err)
-	}
-	parser = p
-}
-
-type query struct {
-	Replicas  []*replicaStmt  `@@+`
-	CBF       uint32          `("CBF" @Int)?`
-	Selectors []*selectorStmt `@@*`
-	Filters   []*filterStmt   `@@*`
-}
-
-type replicaStmt struct {
-	Count    int    `"REP" @Int`
-	Selector string `("IN" @Ident)?`
-}
-
-type selectorStmt struct {
-	Count  uint32   `"SELECT" @Int`
-	Bucket []string `("IN" @(("SAME" | "DISTINCT")? Ident))?`
-	Filter string   `"FROM" @(Ident | "*")`
-	Name   string   `("AS" @Ident)?`
-}
-
-type filterStmt struct {
-	Value *orChain `"FILTER" @@`
-	Name  string   `"AS" @Ident`
-}
-
-type filterOrExpr struct {
-	Reference string      `"@"@Ident`
-	Expr      *simpleExpr `| @@`
-}
-
-type orChain struct {
-	Clauses []*andChain `@@ ("OR" @@)*`
-}
-
-type andChain struct {
-	Clauses []*filterOrExpr `@@ ("AND" @@)*`
-}
-
-type simpleExpr struct {
-	Key string `@(Ident | String)`
-	// We don't use literals here to improve error messages.
-	Op    string `@Ident`
-	Value string `@(Ident | String | Int)`
-}
diff --git a/pkg/policy/parser/Query.g4 b/pkg/policy/parser/Query.g4
new file mode 100644
index 0000000..0cad576
--- /dev/null
+++ b/pkg/policy/parser/Query.g4
@@ -0,0 +1,45 @@
+parser grammar Query;
+
+options {
+    tokenVocab = QueryLexer;
+}
+
+policy: repStmt+ cbfStmt? selectStmt* filterStmt*;
+
+repStmt:
+    REP Count = NUMBER1     // number of object replicas
+    (IN Selector = ident)?; // optional selector name
+
+cbfStmt: CBF BackupFactor = NUMBER1; // container backup factor
+
+selectStmt:
+    SELECT Count = NUMBER1       // number of nodes to select without container backup factor *)
+    (IN clause? Bucket = ident)? // bucket name
+    FROM Filter = identWC        // filter reference or whole netmap
+    (AS Name = ident)?           // optional selector name
+    ;
+
+clause: CLAUSE_SAME | CLAUSE_DISTINCT; // nodes from distinct buckets
+
+filterExpr:
+    F1 = filterExpr Op = AND_OP F2 = filterExpr
+    | F1 = filterExpr Op = OR_OP F2 = filterExpr
+    | expr
+    ;
+
+filterStmt:
+    FILTER Expr = filterExpr
+    AS Name = ident // obligatory filter name
+    ;
+
+expr:
+    AT Filter = ident                               // reference to named filter
+    | Key = filterKey SIMPLE_OP Value = filterValue // attribute comparison
+    ;
+
+filterKey : ident | STRING;
+filterValue : ident | number | STRING;
+number : ZERO | NUMBER1;
+keyword : REP | IN | AS | SELECT | FROM | FILTER;
+ident : keyword | IDENT;
+identWC : ident | WILDCARD;
diff --git a/pkg/policy/parser/Query.interp b/pkg/policy/parser/Query.interp
new file mode 100644
index 0000000000000000000000000000000000000000..63f74d9a5f7db8596c48f2d0c52c4bffcbc36599
GIT binary patch
literal 4174
zcmb7`TW=dT5QX3QEA-~J@WWDf<*ACT6hdv;kdzu|Q5d$f0gT8O$TC|0`+jGJS}o}y
zK!FuGb9iRv47u9f-P5=Fv9r0~)!Um*=keyDe)$j{UpJd@G+mq?g`<n*QSz6wOZ@qQ
zVY*^C`S^)(H9MP~tT8?<FU~d1&(<?yj(*YN^nAv2I$y2l3uFC+`!l~^Q&ulkwY{)2
zO)qZ`w@;h<yG#_Ct}iab#Zu#Hetvm2lZCV}Uxeu@AS$?|AVI<9gsb`4>B)3?8cxop
zpI5VM3ESIyb>Zy#a=M%?!ZOX%b(o*d7VEJ1eExB^jN#AO@*=F(%lYEBaJ33y`?{(3
z@}8yjEo|%O)$U;z?ry)@{8De~yPZRuo7a~*e7)bW*|UG2x5>1{`r!XwzonHwZZ@wq
zyZ>-oZ^O6x?VqRZmvH~3e%$$ZbrM3j**$&;fAx+#-To*JjywJCXwpCK^m^4u-e@ox
z9e3hzGz5%;UJtNW4JKm(y5q5!So~sFbnN5K#71AjW)YhU+YOl5&L5i1$P$&n8L=sV
z&FF#HT-dQPOOw3l9+NyTu1Ow+iP0pFpFAdcE<qE^@Dae+<EPA;92Z{;cn%ODUz_4Y
zhw*{?K>K)Ht`y&gC9MjzG4Uz;eZHhNd_vw|E`7kH48D$7jP{sVhBr0_mz^k~C7fDo
zU@{gqF4u?!mG(tC!S|62*#B#U%r#E?fvH2(L^E1Q`+-Sj?us9bP+9%Kh+w6wbUf&H
zX4=HmkfvBAHTxybgTy+PG?7SNv_TPR$xm4wh{&%s`QfN7MKi@{V%!nY_fwM?`q}?W
z`43Bn5)qYnWWr!)Ogez&RtI2Rg1cZ{SY7dj?N4sc_2goSO)DaoSw*%CH09kYz%J+m
zB59$4C^g{MhNwL79dB4tJR-VHv*Ry9)zPG=pzdQ;C{fF?I`rd;h>Yndo6_2pm=5Xy
zQYWfdTacQLN}Pczq#SLqCy8LxZ*tgP71G5yJXgHB`9(K|HJK7mez86FXyy+>T~;6{
zzc|H480LQ@PbMCIzpP7hdY}=G#VDSRuGj=|^n7dYf#oWWSy*2=S~rONexXIVN-cfb
z>C+1;bTBATAf6VoglfGktmfcmJYi)c?q@VomHKp(59oyq6hjA>`~gzH?BC;{7RUxD
z+%bGTv$^b!B1SBx0du>wVTI}xnbEW>UIDGC2>yU(R28uabRdf*Vh91A{us^^FeGUf
zJfy!Np@72e8Zzk}f<{IAUWlZHb{WGUW*Gjk=uZBS^h~Y2krtKDqJ_cCF#KV0qVk6{
z$&#MUNw)w@m0?{ERlJe*0S;6^XPQrqT##bLZWlKUAj5Ddl|gi^&njTApj7zj#c{y2
z|E@&RT_Dy7X`-|2DFlpJ$cnHuMxP#QQf`-kvA5T7<?D^Bj1t0L0bq@x2tjR%2GF-2
zlmmv9N0VpFZ&WlbOj(<{s-Q|GkL==RJYn>hVfg8#>gtqFJ;QDD^s1P6%WB3i0TWE>
zq@HmEObAu6hKR2ZVTi4pQAm0Vdp<=%na~f>_O7)I0_+Q;h=-(aXO&kQNK^*Q2_3K~
zx?}jUVqFMRx_=F_#O+q?4JaM&L2~9G>Ek;Pihb^=n3Ve|$4c$$Gl&5DelThFYK;{!
zd1itwB1e_3IO$lC&%T<<dfF3pDqKQ+FJh(55T5JM_F1m1qN8N`4q6JaT_tZ$Rb|~_
zZMFgW5X-6BAl(p9ea|db^7-XdZG?70iwg7AsKYQ^Gs~%EyFK(r&y&~&!OT&Gm7v`;
z60CZv?fRm=?CgtD^_n#H6%!THK<dN~q1+&4?NT$Nsy=|eF6>Q@uUD8o{K52uv?qbe
Q>VwViB0DVWwcGvsKMaQe`v3p{

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/Query.tokens b/pkg/policy/parser/Query.tokens
new file mode 100644
index 0000000000000000000000000000000000000000..7f5aee960e912a0eb93d1254eb0be4dcdb88ee23
GIT binary patch
literal 331
zcmXw!!D_=m3`Fnx5w$&8cACToK{sBxEUb5p)*;Y~|Nk#KCipZXghp>diF;jDsQRHj
zwY03+4nL6FsuxN{zbQ1m()5`1M$NKKo8D>my68xA%A2`LN3WFQ6g;X3O*uT9?JX>(
z(w}2YZA%5$GEm;v;8s*F<fp|W?5>oe6_^{9=khQYl{@{JSCx_4=BfN@kAF>jAr2)n
z8gO++0R}Y#n^R$cb7%~720H_u-}DT8KKL00_}u^*9q|_gSqC>9;!b2t1Mvq0*`E+(
L|3Hx4K}Pxq{%=e0

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/QueryLexer.g4 b/pkg/policy/parser/QueryLexer.g4
new file mode 100644
index 0000000..6c245b6
--- /dev/null
+++ b/pkg/policy/parser/QueryLexer.g4
@@ -0,0 +1,41 @@
+lexer grammar QueryLexer;
+
+AND_OP     : 'AND';
+OR_OP      : 'OR';
+SIMPLE_OP  : 'EQ' | 'NE' | 'GE' | 'GT' | 'LT' | 'LE';
+
+REP      : 'REP';
+IN       : 'IN';
+AS       : 'AS';
+CBF      : 'CBF';
+SELECT   : 'SELECT';
+FROM     : 'FROM';
+FILTER   : 'FILTER';
+WILDCARD : '*';
+
+CLAUSE_SAME     : 'SAME';
+CLAUSE_DISTINCT : 'DISTINCT';
+
+L_PAREN : '(';
+R_PAREN : ')';
+AT      : '@';
+
+IDENT             : Nondigit (Digit | Nondigit)* ;
+fragment Digit    : [0-9] ;
+fragment Nondigit : [a-zA-Z_] ;
+
+NUMBER1 : [1-9] Digit* ;
+ZERO    : '0' ;
+
+// Taken from antlr4 json grammar with minor corrections.
+// https://github.com/antlr/grammars-v4/blob/master/json/JSON.g4
+STRING : '"'  (ESC | SAFECODEPOINTDOUBLE)* '"'
+       | '\'' (ESC | SAFECODEPOINTSINGLE)* '\'' ;
+
+fragment ESC : '\\' (['"\\/bfnrt] | UNICODE) ;
+fragment UNICODE : 'u' HEX HEX HEX HEX ;
+fragment HEX : [0-9a-fA-F] ;
+fragment SAFECODEPOINTSINGLE : ~ ['\\\u0000-\u001F] ;
+fragment SAFECODEPOINTDOUBLE : ~ ["\\\u0000-\u001F] ;
+
+WS : [ \t\n\r] + -> skip ;
diff --git a/pkg/policy/parser/QueryLexer.interp b/pkg/policy/parser/QueryLexer.interp
new file mode 100644
index 0000000000000000000000000000000000000000..d453ff6e05930c0ed8b54aaca3ea4cceb2712edd
GIT binary patch
literal 7060
zcmc(jO>ZMb5QgvbD|`!}99;1?C%o}2YvI_D?Fa-y(XvFaBAb;U9QgOVPgT!H_bdyD
z1JZc9>z(SVx2k)(YyABFmxrg(<J;$lUtd3to?gFu`0exR>G#LS>SDd$TvQi_<3*B>
z^{wRXUbpp0x9b-#bwAa+`ueQS%j4mOX1hDr8gua(57#%fn$7lf-tJxN6N#Vd_eHWA
zuEu?-dUj5~{qgRH_m6MiWTeFD{%~6zj@(b%o7-JYPt>aIzFMCuk*b1H1)(bFR9|m*
zo9p#)Q(f=Ycc=OuVokqcSMBa^*T;Ha9aFnLSKCd!KUe#^n-}%bs&DJ#p*o$9+x?f-
z*Qcub_4mhzhTi|fZ1eV~x6jr7{nL-p`2f-SbY0!;x7UYFUA?NmsZQ&cHNx#-yFZ^4
z%C63_&Ef8aFamt@^XsRlhjv|T>X+-g-TD4}_^RIDU%y)K_w}xNwcRL7RrT)uk8L&@
z%^SQ{ub-bjufCgHj;^K)n_Z5kSBus3ax|HY7f6fQYH>NT`C=~6W|N7)$#}L}YQWWU
zDey`c!^h*xkx<hh2UmW_)a6Kh-PPBnesp9>eVkm5=HAy`efblvyZSPyzV7O)6PNlX
zXA)?T<P<4<n;0Rf;aRw+LDG+BYLJ40hb<{c(C{p1&>#g78YG#(ihh!=f(s2&aG^m8
zE;LBNg$7AKS)f4*E;LBNg$60O&>#gD8l>PtBeU}J!MniX(oiA)@g8Is@||WvCWU?Q
zu26*c?+Qmq|E`dP4DS)#Ke@w0CO+C|YEb#-O=Oh?#W?-`u8Fj=%Fz7RO{9=z$?!;7
z(?q&hmOP78^%~(wHc4~hf{1%7BGCdUd<3jSVpGF97T7eAC6=>H)7VT3<ktmR@>Ztf
zA@-z&fR)Hu(+C0V8f;3kd1Dg+o3z;UhupBKR@YxPt+5ol4=#-@1Qf=UXIEvz^T3jy
zm^a=}ysAM_jV&9t=}}A+uP%xoYho^Wt<e<WUK5kSYYnIvq(x&ZS#(|q>6s_TA0}Js
zr$<CAK^z6>(rEFNFLk6Ped3plE!IllEGfLO44N5irvlTkkRezz#Hrz2#(X(S#}^cO
zu#p}-)KxQO{$zcMCH1FR01vHcXwA?PQIyo6qXrcr0YWi7R&S<pp*5G*O4=M({?ij{
z=1xkojIu{23lP^2TK>}`IB@jwGfuN~bCDa_NH<TS-$)=~C$5PTY*=Y4T#hw39t)X>
zeB-t8mOX5!<qzTQ{-x_1gKSRplf|ns36kg+KyyhqQq>~TED#Ya5L}gz<PsVhPn%Nf
zOr2&=X&CWrXug}>ZtT!}^SbnH4cW6C3#z2NgofssltPQeT0+Bttk1rd`mD4*q(O7Z
zeTW5;UiBs*4Ps~MYcUrTSs5l_S@`sKxEw1T7Ev}<K5Se@D%r-o5e*ZjL4u{TE}Iqe
z<=5AgA8U?_7ROOnl!OJ}D#{6BcC4Ht%1rZGvo$DsI4bAF4?1>}K6&QS*jh3WN3$X!
zjI>1w;%HGMgzdqWMe5jAtegzCFI!5z@14!eR^@OUm2<@6;XKqcwvk93z+9sRutpLn
zV6LvfMF$Ef;$iJkzcW}v(qI8|kpfgVfdY!S=aPLplWI2@m*UCbHp;oy^E`na9e@D4
z;jl%*N;}+vfhOTeCD#N<j>ImgGl`twXo^Sz0S1~Hvp_A=L>hP}q9Pv{C(@QT3?&oO
z0MoMpCY}SV^dTaJ3uc|k6U}bA0G9aI)y@q7lY*wYaRGEkXTro}nKGs(f$A+ukeYT9
z0XTj7yjk^2;*RB!Mhjr&^Q<!|AQi!(rTa>@c^eq5$AJTIh6Bn_0@03eI8hTwI7QO@
zz>IJ@-_%a42&c;s05t+v=SLEswSa9d0XV}2_Gl6h1%gmA6O^J_kbXZ&zSr7V8klYA
zJ7VLAs+&$nyj;L?OTrNwM`*0k#vvINjohIK85Kd{P@;`fc#QMQ5gSK<T`C+gmJ2+(
z2)#VyNWykU&ubHw2iomc;+0ZU__q!@QH;eP-Dyvku6|i495lu(W4GfBV$>SCx((71
zuf%xLCCNW{C_{jIoY9b>%pu7%>JxO;Pe}qXA_4ArfEdT5;2u3cIEe+g%bkBXP(v3+
zh!G-a_goSq1&^+7;W=V_A)wu}Eu{Hw=vXU4<10YA(})DZ{#_t63p@_yh|nu^w_+0^
z{%ef70gW_DPpEYqK>U~K65UkZ)cS`&L}=8w{)q}MJIs&UrjKH&uK;~e&e~B8$x-4a
z;0%R?O*CMLmW7`=Acnar{IHUvl8kj60Z7Ny$i={y=R#(s+S;(GfT2~=KxrXWnQE*O
zE+5}T(!4O4mhSv3ol2zj1v9T#7%)U<dY+>K26^<_1}nL$SQ-_Mh~qdh1|d1QE_0ts
z8P-9gOUzU`j8UKWMUQMo)Cu<wLdlLR2rEl(^G`g6WG)$QWdZISd_b<t%T7_1qqwAm
z%27#fCPzs|sziDLQfrwPJ_=AyWYLX!IuuM1H#?j0>I?VpVR8cG`Ou);r=wEIQF6qo
zlc8{MGeeXOGDpb<^;eEUq^x&bt%<uAAa$9|O2UqklH4#!7^sq=RGM+d%eng}L2Q|k
zqXs1rpjgrqc3ju?RFnzAs&VdREEqm`pE!;!)moPJD+~h})s-CaUa*%pkZ~H8IO*WH
zC~?Wgo?hZWB9t@q*u`7?!=JkpFnEip#*At!9p_R+7o_|a^3M~a07F;C8eO%638W<R
zf2L$#SEEXFJj&?$A6OJ!IVxcA@nfhN#aXUPz!YOSD!?eu;Myah?qCmyg~MF?G2mNy
ZY=^#Qupz~}<*$b?PhTC0HXd|+|0k~h`(OY7

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/QueryLexer.tokens b/pkg/policy/parser/QueryLexer.tokens
new file mode 100644
index 0000000000000000000000000000000000000000..7f5aee960e912a0eb93d1254eb0be4dcdb88ee23
GIT binary patch
literal 331
zcmXw!!D_=m3`Fnx5w$&8cACToK{sBxEUb5p)*;Y~|Nk#KCipZXghp>diF;jDsQRHj
zwY03+4nL6FsuxN{zbQ1m()5`1M$NKKo8D>my68xA%A2`LN3WFQ6g;X3O*uT9?JX>(
z(w}2YZA%5$GEm;v;8s*F<fp|W?5>oe6_^{9=khQYl{@{JSCx_4=BfN@kAF>jAr2)n
z8gO++0R}Y#n^R$cb7%~720H_u-}DT8KKL00_}u^*9q|_gSqC>9;!b2t1Mvq0*`E+(
L|3Hx4K}Pxq{%=e0

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/generate.go b/pkg/policy/parser/generate.go
new file mode 100644
index 0000000..850f362
--- /dev/null
+++ b/pkg/policy/parser/generate.go
@@ -0,0 +1,3 @@
+package parser
+
+//go:generate antlr4 -Dlanguage=Go -visitor QueryLexer.g4 Query.g4
diff --git a/pkg/policy/parser/query_base_listener.go b/pkg/policy/parser/query_base_listener.go
new file mode 100644
index 0000000000000000000000000000000000000000..d872ae1da61b8c0f331f306fba2f297e90dca5f2
GIT binary patch
literal 4408
zcmb7{KX2PG5XE<WibICN$shrRmku3T#VvvcPMR3WSjaN%2+==KRAQs(cQ474NI9m(
z(_)C!@!tDAo$MrvAg(qHcC2JP5o`lnUKQ}WW&9BC=CD4%x8>^g0p{VC@N)>)cd)!$
z!Q%R66$U|_q_4@2L7ni1afl*37z9~SS6slwE)y^9I!vn~N=lJ){G3O;Ek#za=x2pH
z7eOEoe@_~wm2a~~C_|7nkbpd0=S(oj`|WMT<-S%0!I?C`t4*6q_tGzV55%Enj*gAs
zZ7Tl$3xc<V!yl|RdSBtwi3wFJ%{^sJCRU6WS()U@SeoRyRD6G7r8Fb@JEe+K-hNZ{
zY!e3CwoGBxz|~3T%j2dqeN^WZ_Cib9?GlC-7MxdHZJ&53fvI~i-GS*jv|u)k{-TtW
zi#ItM4{h$yKLGFcnX2@`AGe#OVh;#^ug6Jg#FcEc7uLZ(6Ep*|(5pXeMw3@q_f?*y
zhmYyw1d6OGp*98d7_g}}afR0|^eNKB00_bg`hnGtq7Wn0+*Z)BySB*PEnMK!<ca7c
zaRnc*w;uS^R?y+Qwg}%XT=3K6iSQ(G1^>u$mI@Dlb5ul+z&6Je?AjHCy*o08AFL4L
zu&upD^hD%I+njs@4!#3YQ$P<R)@QnL(ATaIuxccLfiw}GAgrK&WV!rY>}&nIJpB0^
zfNzhA=<v2V24L5&5bWKNAU;?jhGAQKjo45;uLnBmi>8L6&JDe&_4!bGmC@(Z7qLm9
zkc_BMJTt<&5uyj78e#<M$^}oABm#Q`?UVn-#{Lw*2jA7uad8IavEgHvOBcAQ^}Y$c
z4PpeQvCo7J<0;A8v2R6;!&FTTL?0Zw(HrMOF+!v7f~lJJG7!zEaF%Vc#(!qc7%5Ew
zJrZn+Y2dXhh$+&<xgZEDXgO`~72k|Z<*TirV|Q(lyIZ)xr^yr1N#Y9rW+RD4(6jzN
p9bC6WY<=m1rppq6y`l#8IriaV#YEuec!2yIpM@sNPXQkh{|`?tAiMwo

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/query_base_visitor.go b/pkg/policy/parser/query_base_visitor.go
new file mode 100644
index 0000000000000000000000000000000000000000..69c59f7d3a61b13f94f9ad1fe3801e4b255cec5e
GIT binary patch
literal 1712
zcmcK4L2JS=6bJD0@+lsk)I$ry%Z^)hLpIcDapyFBtzm6aUK6K?-+i_TE9^7|xis$|
zlKe=THjW|DIYNmFi5twJAYH?|MLI|246-vkuF|(H%%X?rK7#ogR_hcN^JN+_)^PF3
zON53~iv)4(CNd`LMw5Y2Db2xVk<fL_m8r-*XE9l2WR3BQc0D7;%(+2$;w|>}UbfO`
zg4U1~1}^Mw+Ak1wBQ_nE5~3f)u8b8{2^b$?`g@59^rJSqlHxoT<^)q$Ct4XinF+{S
zO9dBrxpoktv83P__4AU0ta3ut&7AxN+G4XawQ-UUfv6-a2Fiy()D9~YX3&Nl2uvz&
zTXd)B>Oj!5tZuJ=acan6Lk<cKN9n*W2Lgw^byXn5?cx>vC-xJAa(iA`e@7hHcLX9=
pw$9LB5?2R;Zio1#DR<Y=hd|UaN9BK2eHoJZNZgKk=p*?b^$inkU?Ttk

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/query_lexer.go b/pkg/policy/parser/query_lexer.go
new file mode 100644
index 0000000000000000000000000000000000000000..05d8f2127798eb0410eaced61092b8717f11e241
GIT binary patch
literal 9729
zcmbtaZExE+68;?j3L;;c7Cy&J{F3Y;z`3#0HP*3nv4cHaQ3S57q`I}GK$hF)4*TEl
zd1gq7QgX!}Hn2tVnc=)~M2@T+ADhc`9ht`{iLzxLt<6K0Zq48KQT9BEzDHT>v12|z
zo56H3xiy{EdF!NQhBGsrEzD>*UbGsGr{(Im<zr-?mf0@K8jX1SlxDd(Y8)IsZ1Y1j
z`y^gL$zcQi$2kA8|J+)o+v8=DZ!*1hj<bD|$J^-mL#oJO<87mHd~D|Xr>891?aV&e
z?_i#j9%WgYHNGx0b8jvT^t5iWILRLh$mwj2catd3X&0GcV7%PK|Blw;+#pXd`{SoQ
zrrO?r8V9FMbJFSCZqsy5`sbadIX!LnIqG-M`%Pne{T@KuJv{|@+U}m8VZzDT8Nd^K
zIKAC&HVyz=%o6lmu9Vd@=;Mk$KIm%)qR^+7rs+u^SM>W31OoJ80Ey`1iat8}LEpAz
zz=k7e1&Iwuu!*A+2;xu;V8ao<B%<L+jS$Z<QZv|)1`Eh3hBOYWn!<)eP)NiVqZ74;
z4M%DX8;;Z(HXNO*cZ?Z__(B95j?@}99H}*II8tlaa3sbw4%l+2*06zGXnOSuu=c@J
zARU+_jSl|rtD4(~ax9009MS;3dWAQ@!z(-j5?<jH!z2yY9%Q|$e}Cl4#K1H$NLx1y
z8!QlMf3!gkXlQ+d$(;YAMkCB@BWKY_z{_Ek7>+cI%umkOu=z$p2BS1|Oic2W4RDU^
zsjiF;;DLZJMOy-h00wH5Mwf{VY0T)L(MU0|A)Afuf`PG?0Ypj5gi<OE0viVuqv7)n
z5Q1exp%~eo7s@PPumy$1N+k=0mJ`u?IVz;7`!I<U>(crFYSIvFVdV}ezBxs@dbn5J
zhABzTTi2d>gB^=57w=<Q_P-n0q)X}>*vuKO(WT@)P7rQ@nT<X7mT{mo1d0I?s*{Pn
zn@6WHfRzC7!E`V~3p(HeKSO{qgy}A>1f~`vz-;jASVWMrX$RGk4}DQj?U07Kh!dEY
zW;{0}rNBr_AP-H4s|fKOibB6b5yX|Nqg-7JK|s6YLPI7r<N=}}jdW!6x|pb3J#d|a
zo2MAQI9TWj*UWK4E4jrvfV3T78YW+mXa$c%el1QpxggqY8S}!3xQj$mF1+#RxwF<;
zMSGZWVg@8M4wMdvq4IjYz6#MBS0&PN7yyI7Ec*mZI>i?vPudI;hVmicKj75>6bLv4
zkx(lN$7@VfR);XILn1v81aWSYD%25rDc|oC-b}JHBWnu$9Tl>9`%530jMa${^wI&w
zy~-xpT7$SU0VK{bZ3B#&nZY%Pi5f!aGvhp@sf~LOfX65av-<AF_ikbqH=2-(3&JXl
zL1M7v!yVzQrj?m-UY`seCR0V=Ia8@!^;UQFHg68EgPJg~?(i#g%Z?yv7+NIzgFj0O
z5%9;>7fE)G+A6tiq`pwHr$|9sNQ8m#$<`M}4nQnTHIcZamRn8e6sOv5Eht=7+Ydlp
zeyZx%g2LUxp4GyK9SmSi6Sp&a#&C!Fxx3l(`h04tuN0Gr2PJ6SRk#IU6^QgO9SCzp
z*M&e2U4Z=(1Q57HR^}iI{l)=jV~(2*t{%)Hh^_+x)LidjEc+W+WwIJXr7)GV3rBm%
z?4AQlg9s?7^QnsVVk9Q@i}|F#WF<RTsIcTD;55NL7bUJGPj|Ay6m>~}kX7_!QlD%U
zPL8;8Y>PNi5@S&4rai>)tz&d6z#s`sJQxB{CWl!k_K>fx1V(!uejDK8a|vN#xo8B=
zXcaz%*#x*U<V06L0JsfQ?V+GE7d14F6TLGA2@Uui2!N-ecvF}}7MibV;y3}|CXnf+
zOaQJpRxVtzdExX{kC-}2Ai(pTG9k%<WLJ+EQU?NXg|kZna=|0kQnaklPT*WUDx*Yz
zMFc;kBB?0UrGOOx&v)8X8cLT~Jx~>7sZm-_fWNwbbNjVzuuz+F;wp%3yQM1bL_wq)
zp=eht2|HM9TfO5gpn?RcZ^f2-yJfWyYGejrY}?MmB0_@Lw)$9xLlDcXp(Ul0Kp=`o
z6{VwbmPqNsG$DKG4-x-}Q1Wv5kP~vxbpmE~@da6>;%cQ7;$l;9X*ChcLIfXdR6Z{S
zl3I<VGEnk(#3F@oU^O`)DbNV-7*Wgeh0Mi$Ac&<igiA|^Se~DN0|TYjk?NFq89;f)
z;K^E(0>si3atAu;CQe)lRhfZ=fa_X@!h!fl3?D=}mMxzbFsD=AF9Ny8h%(%IW~-A@
z%8M9#3PiqMD&<&tB4B+A$=oefj3pvpj{vuF!gpW=9F<1~b<&~|rX(x`33N+W%}U?n
z#QX&K$XVf{0T7gd3f2-ZCR#XMWu_T2qrxj_Q5zN+B}iQzMOsd%O2Ei6q16Qm2b?29
z`>MQL@DAjHw;%}cQY@n)Pfp;4ERl=JbeYfWwZKW)LSiA7#>&Gz>y+yDB;^ceRGE?d
zwu@<16hIhD2@!rsRO@QIu+y>tg6&l8Y$hV%@Q9cuDc~v{uB>OK-z<VS34Pu=!cWH?
zE>Dmc3oi9;y+*h4OxUf*gY#{@P`5OK6KZKBFsrUgJP26+m|8^{4^9xYNF({t)zvA1
zk1WQl6h`n7lOR&0A_|uGd+EAHn?;!?$U`*aLP%m#Pg6y~5?F|Yq+naGP{az66ELf7
zmRn{O<=JFenpI(%QmcmmfX6!510Puq*)G?<DuXb?Qbievx_d01tg8rd{1>rikte_7
zXaHSIdAJEmQJ`=W7JDTcL69`klxsPsVh8u;7xxxxG3$yk>-H~7281ZFAcHF2Y24t2
z0Lb!~tmE{Zhe#dg^N!_4UndZPNmU!geOL|;RH5hufLpp2ZPsg+50mbw2Pc_{)SsN>
zQO2@DBQJkq^vr0nj#VRAw8?K<P=JqTrGq2|2E#M?4UA=30D}*}i$^7g2Fs-ebL+Q!
zmr)e~z_Nft%g0l12D&eH1egXgRvd!lIFSQEHb~h*bQ7RJX1F{<O7e+C&`K5jG=A3?
zH5<Nry8N<Cl4vtsZlj&Nr`hFr$@7T!G>5~{)!=TjxL?eE8BOmme;!Pyqsd{@9R55W
z4oB0&s-SDUefp7<>)CKrn=*;<(rEdrZmM}Rm=51aXLc*C^lwKu3XZ4R4(8fkzQ5AW
zd^8zdF3^V$Z?0}<*9u>aCyS8^dh^b44z5Sq8;<9T@l<9(@sWaWwfP$wh@y6}pv`d@
z!};^}bGnIFuer||@Z)}V!`|%Hb>`#io5{!x;1Y>rgcQtkUf~QIbw$+E5kl$)d%un+
z!^^?#Q1~Z<yZPvT4u^uF_lnTu{$_A1t9EdB>-$i*AaRWKl+N_-`u*tE68q=qcE)zT
zxE)VFu=guWt2lnU-@Ll!f8JsEDgGkvf7)SF`U`P2hlerVmeRRtnyicdkD@S|U&?~q
zO~;p#)3_l<|By%xu117zX5;B%j-X9sG3FsWoZY=w*he#eeu{#Z!3H<rew7>Cf$!w)
zZR`DV7s;#C#=$DQTR(o%d$n<}E$%&I@T%3rc(uEj4QD@@(d>$1abI)!08gWD<?Cnj
zl%?za3itogB+)k``+|v+UA|0Kk$FfnlYfa!`jp3MvfP03w9k#&hV3Jp=UKGewjh_H
z7hruC2ruL~Eo-w~KAX>x$s&2#j2GXl<z@rhM9VzN$CR%^%{I!vq-)9+!EqAjc)9FM
zT&2lF{J6(Ebr@#ior%6bMaeGy8ksybpu%T_vI$$)>cZ!LMF=f8lQahcyVrl&Egz!4
zQo)z>Tl6)`nkIfQV%j&nM~@Rk<wLqz!oJ;evTEI=>82^t3I)`@N_U9K7H{S8=6h$p
zMVpOROWCPt-oe#`zUymtiVloGV6YWut;WMXSyh+l==GSttwb6bvoSwia1D>j1$YaT
z8~rdUUd(6Y()B|k3>MRnc9g^$KZoz`!TMr;E0}PF|7Exv^WFYYp`dv4?*$E`RlGx(
z7U}S6K#|+!Z_&}mPcFj&HlZas5>3zw1%ARj$G=Rxg&^i(oUEhoO|#xnMus(s)VNos
z@CNdpds)!)QAB*gQC9>2=+SzIWv6f``W+D~Z@Q4PxD$0f=v@o0M;ZQo0@sjr!k8np
z^LV@8Eb}xwLe_ZqT(5Le0#F!qlSS)z#iYJWA^m%Pxm<mTjt~SYtn2}9al%uaJmrSq
z7>d)G)NtDtlL~;;+NmrIAx571i6=}IkX#?K<#xNwu3|kU5T3&_FY!+=_`en2*Rn-z
zTHK`ksw~pqq67dOMr8L{Vm5B)Dh1#k2h*<Ako%DT3schc0K#VI{w|CS$#M*P8rlnU
z5|WF<xtM(#l5t!Ib2+;clE>2u736M69?a|HUP#8lU!h-^en{4WpyaqPXCaw~W=W)J
z=M}P)KqUjh(hljqqVOD`SK@YARvE$qdL?j<?#m9Sx0T4b8pMkyy%IWCmxT0c>=p&d
w>#qb)%9wx!@+;AE)lI<xdL?`;c?u#rpjYCjrBKO%ys5_T#oC@&{EyXt0ZxMhtpET3

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/query_listener.go b/pkg/policy/parser/query_listener.go
new file mode 100644
index 0000000000000000000000000000000000000000..3e77af59b061a7ed45da069c32f73ba837d7b35f
GIT binary patch
literal 3058
zcma)+PmkI#5XH~<Q&@Xydq|{;OOI8StyW#J+g()7Aq)_ae=?31RQ0=e#tv~<kCR@&
zj^DhW$4*`x%cS0d+(QK_)v%R2RhRNt3+fW>=W=tA-<PYWS2>TqMPDO%|16i!E4jFT
zTtz}OX?9HaAe&U3K*>0^g+k<IQ!6d+_PIW^n<%TxIIVP{?C(5QZKd-P;vcnrawo*K
z_$fbW+KkLkGL=}_6re#C*T=hB;d4WjS^>gUy=^nxIquc&Tj)yzcI@0L4QiKWApeM&
z*-P|7yI!HiRV2g=cd;PlOI_sIh4zr8MS<q;2dE^_QeN$)J|NdhEMDhz6^YrP_ERRm
zSeK;6va|j?uz!W-O_zGqUv(NE&{Y$m8#0JwvztU@oyJFW)r9DV4B`z6$n+%T<YYd`
zc@WFZ7+g}M?FmNDEVB|HV{1)2M#9)X<OSaD;@p^5FL>=cC-X7RgHUc3#7!Qa#Ti)$
zM~e<eGX^)=7f|Cqg6hbe{ux`_;!ha=RBRKZ@&UbrYXOBp)bF%t$KL@9v$_z@tU92X
zGRS3HZfp_-Ux&&{e2}drh8;2X*ynq#wxe(KvD5f~u9^tlkU>0dF|$Sixl#D`rjpFf
zAY{Exrp-|kuwN%VV4ZwGoO2xrVO$x_;J%W~*$75OD1is&d;q&zvgh*`HKF(&`19%O
zYRR7uU(~py^e$k42uAOX1A&~Me-DA+9dOv(#r28UMTPzR*>oEC+i%*aZeOJv2kOK5
z`F+?mHgY`{lej%=GH_8j)e-n{+f`8)R2|wse(YmcZjXvYfs?`|cThM9armV54vGuf
z{-pjRXHgr7*#U}8*}jt6VM7)b*dUv+1M?#rv96ZvI~)J3_<$X_bNPzPqw#uOXVUef
Rvlp(emiBEhgKYgP{sGV$F9!es

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/query_parser.go b/pkg/policy/parser/query_parser.go
new file mode 100644
index 0000000000000000000000000000000000000000..fb94f3a2573c6d6ebacf2689b0f89022a44144b7
GIT binary patch
literal 59362
zcmeHwYjYbplI>^dSJe2!4CU3ZMOiP;tRt>kmU|iNmVG7lIAS|G95hvGb4`&9lJa9`
z`oG_EG67TqReaN;?}j_vVpRf2WF`_oX5vvl{E(gXZ}RN-yq6DK<NPMO9ro|C|9hVg
zztn#}$liU)PA{%sUS<dNr}h1M_WV_L@#;D|f8M;VZ*LD;?GLTr^K8%>j`Csl!w*_;
zd%JTt=nuzPZF}p{?cMkheunvNH*d@1XgqB9dmkTd1N?hu{Qmx3z1_e2q179Ahx+&6
zhv9v1+_}qt_^GduN83Bw+rWQyKNt-2(I~s`-H$-6t0*51`@_-p$JQ`=n?1`=XZ`iC
z(;MFgkgLCb)*pNcKu1ZvIqtW%1*)8!US9yqufN>`MdRq7+gnd|v;BkP#^G*uuz&pY
zU^jd6Wbc@7$A?dkceBRP@ezQH!zWJwe6n}=^aKU=PfnN<Px!yFf4IB7h4=m4?5X_K
zG&~~}&-jODeE<?X6aQ{@B+vMZXH*6Fu_8hhc)?#SiD&%7b7N1Q_`|n`zTt;&T04LE
z_5_$v2*2_Q5Z~~_L?wbhWI+hQ-zWH=sQIIC=HCaRCwNr|iZCYyqd66fcYqH7@(A!s
zJc1xQKrT?by~VPU;0l2E>H;Jdd})3ZiT_EfDfNf=Aqvfa>hNIyx?BPe&v?K;wCna3
z%cgM0T>t}R@{CvfJ4S+*7lObH0Qwgw@VwApWM=c9IGK<Lu+JaxgP#*86FdSnlw-=@
zr))H7@=1R|KJo3bksty*Bc~IjlL>zsdq+-4J`JtHoW&0?@vR|$Si~i1+mQ$6$NyAG
z{S}r71!pXdpGHH-(HABG?tYkq|4UzE1?+Avt*E2{x#10{@Brxu^#BNR$`r7Dl->ty
zAG!9K{{)!uu66m$;Z3rG8|F^YGP9rnnZmFj0u=v{{}45SM199!RCb8}EeP}+s@Ov=
z(tJ#<wE08}lCos#X;K9R(AZPqdyEjch@xOgX+qJ4Yfzt61k-TMRRB>@1GU8@k?{sG
zTRI_3hy*1q@Ck_o3<LlZHGmmNWI{bN6~hc({Cmuh=1J*!LfnanWVl9OLCr`(1|nph
zSQcQ6K<!joEi>Z%AgvkvafCy8JmD|%u>nO6w)v5XBc7FmAWK@Cumd8|Hj%%0$5fI~
zLu4s62jJ)cl!Fc`184xI1H3UoFnWrZ>maR~{2_BxHDSUFQRzQ@j~k!3QVOZ=hhPUN
zP@9(J`yq${Oga+b+gpc7JVdpCGC}_Fo#QzEiDsb?bK!@%EsX*bx;=Nys70fEl#EsZ
zYF#aOKLmfQ7UVi0M*u*g!YFct900SAXhs5#fHf+81Qw4_6hIE$E+>9yGJq-;S9vhk
z5fW@Y0z<|KM%6wN4qe5>hW8`Xfgd9uQbPiw;)Efmzyd)493>6Q_apF$B#zgPasu$k
zdXUaR7jMUV6cI8ZFQA%L-cd_T5(^`HM3TUeGa`vICn^(|#|TN#?gCh=ATGSS>7;<M
z5oDsoFOro;JRO5L=102XAm9WEQ7uS10fijrNV~QgAt%aV$jo=n#Y9O`ATI#$bb>5|
zfL{D{0GNZKM+Fd1ad99z!T-kz--HousF*adB<Fhr6jqqI1OuB94DWurRRT#P`A%fP
z3FN7AO@8zr0Z;LWiX7XdhmfbJ1Q>wb<-|MfW#lwkNr;=fH5*GJ%TsW~R+DL1P!J;a
zM}h!#(8eYK<OD<#1s<P*2P85(5D^GKV-Fb!!jIEr0SRU+7MU7JNeTpaiD1+!DgjZD
z=1{_LV~-q*nS>HzT?oaEJ#w&zLUDxxMUfavS@`z${kE|Ogkn~aKjuI&u-(|BT*xfp
z1mJ&xQyzpXAps9%D9EBZ6$(@pP)`ccQrLoZADH93tdy!|vkQQxTAY<a62lF7l?^FO
z4)A}Rm#k76Ok_DtZ8St2fb*9Yt`LW;A`TRau?Q4dV<?L6$3So=%0rr2qY*SY7PFHz
z20UWqNSOd4FK7v(N`*wU`=~X_O9}v>=^<7C-Z{0&i~tzMOpE~_hFw+^SG7r+OxR^*
ze~4S#?Tq2xcQ0CZ`A9rlc)p$9@9=CNJ=)D4{pIxH`CsJW)usH(^X2(#1vW4A_w-7C
z&whNN4_D_e&(E&$3_O2%arx?J1;1#%ygpY%e|hY3p8kBUPtTiI*Ubwlg^Ftm+|i%^
zgC9qdP_V~$<zV#X?p?pzX-{GS9K3z?nx$S{x`(Ug&#zyeyB9FS#O4M6o?h`U*x-*c
zAr+Gaf|LP1y=lIDes+5KT=Ks>{pITX?G;!tubv-*UcP;OdU=j2z{I70Ms?RrY(77~
zkcW$3e*W?NvO(B?onOA<@748X^WrByy#Z-pSz2v)-_5J|9Z(Qon0uHHuEq$k;IaMg
z)<2GNhFbhvyW2vjgjsGoU8uqN=fSXe(_El8kHG(#3w|x}k5>0y5cKZv-sMvGL;mGc
ze|SSYotwNT6v)GyGo^q0Wsqw$D1)xux5pWj?Xkpo>OZzd`D+OokyAu<F7i(jamoh6
z{>^<GI@-#5`6nM&>hwnAR<E6BxBX!@exGOk!MM}!wYpiSH@F{XiuJnxA@5y{hk5I+
z4y43;jl7Q)bHL%MxXJEXU$S?3Hq0fEgg{rj)$O8FNDWu{xJlfKFT2af@B24ID>ys7
z&bWi>UEB-NtlQ4-_lTc?s;o20Aj`Zr>U_+zaX&+<N?;d+-YEU={u>R%oW1@S5YT+{
z*HP;>|2u1V-~W_<%!j*K=Qb1CJ|Rff=|Ltx^}8()IQr6S*I)Ph-Ce;JDq!vH{s;oO
zL-eilKak_6yxaBF5_ex}9)Z^$nb#N^Q5zy4nI58n_3hjHUOTi+ZGx<KyoAxdAaj)c
z?HSvyCSu>&-nz*V8icSw&X8%^SZHws*`AxUTCdZMv)?cbhY}V;-4uC&NaZh0M(AoG
zY$q7noe@NF-GBb#l;!VQAM)C-zd7Xta5wAby_!MGnt<7tyBZ@Bx&u_yw@&XS|Gb;s
z2xCKtKeq%`m87PFZI2BV{whd*!^j)B2efuGLK_o3s`^8vXZnWCUGx}j1_VPz*mba<
z4-pZ?Uz=Zh7r46W+}(Fu<NmP5wgDT3#7Q~<hE8fIg0OY8&g)@*(`i$o&-$q2^Z2aQ
zexKJU6=JGinz1R2Q!edgJlojG$K|+6M)PQNcX@sqw(jm)!xtSL1i{`TAC_k57(Cw(
zd(hj?$c-Y}(Z?JHM)hs!6^uX&`25w2%>L(FLIw>ax@<a&6d9jo4VNObN|69+_FYPt
zW?bsC?1@XkoMTF4D0ARanio+5QVw0p=~bF?<WewQMM=-HW0#^cSdsWFJ8>zT&<Z#y
zc<NJRjxN%`>7GmSbDmE`l9$3+F$GF0lDrsPlAjJyRm01{O^Y5Mle{3@ENPR1B(4M0
z*X2baQ>jS>LN5z9xrRg}d0}v}4RAal$xB1$-y#vM8>CTcko|^Rj8KK6_LubS@)uYh
zI!`OsXPHMRNp9knG|=HBFG+49cS&Bnl2lCWq~42HOUW$n>k8r}8O5~EQeM1LN|R^<
zFv*Kol4uVoIwpDXno=+kkY4DTNfLtrNnX5?q{f4%Fld{kIdei1A&y8MVpcdxkQNEV
znH;{{6W1`!*J2^Lk&E*zraP?V<ipz*%m_@%BdjBFh3e)@uXWdHXE&YEpfzs4uWyUt
zk|GF2F|_LtsUs{$L01cgB+Rcr<zr2OUBU5bBr~*5PxbAskX+kwL#^i4!p%`k_f6;a
zHXp*e>R>(^>B?Lm_75i|#|sp1D=Ajn;dm%)#OS8jVU~|Ar8cGy7`-)cem59@i7<ni
z#}R-tAlKps&;i;4Q6grLftlt^)yN&@pJK){8E7NyW`Au63c{P5JyA@0qG-}UT0Tq<
z1Ij`uuf-(pWF@g>|MYn||5*)k_C+L;U0Q!=n+RxV<<$PM{{aT2m=kQW1;w<2oRqYL
z1R4#4x@+BM&UhtgswAsKIZE1lr_lREv9o`=j*yLf&0fg0GM3YB_fkC?p!xN;rhD=I
z*lE?6F6^j|zH|*I<HpE*RP)QcOnG%%t36I|?1-7UQ$O$KcVf&?O~){qgPE8VP+M_4
zg5l%rK^Wb%D%BJOEwuJvsgJWiLD@T9dEWxcUpqAT#`Ri)5z0$z4`K*5%xGMwX;~^>
zBpubE1fB0|WT8?hwZ&utr6H@r(X)ahXKsPPnDh$vrZn)GI;m*grh81=b^$J83~|fu
zW_t^AkzkwFAW+k*;9{$$7VjxT3n^;}P0STkr>w7~GV4&;64HgWw!l#Hid%qEAuZ7A
zB_y$k7FXXg!WnH3j|8(XjV5jT;yq<+p|&rfi5aVG`%;;8w0#Nb!fjt*2yI`0QXwtS
z_9Y~-h!$`AGQw$Xj~T~IHfVgcRt$`Tu^TDHD^<&*JfvUu5m<t0a6QcP+Az4%zy1ar
z4d7i&n(hAY9zUOZjGyc<mc|fOQH_#7JR^e=o_@gUkcm||iJo)XljNh;?Tp6U3uet4
zVt?u2JFFX%gU@%poAp0%KJ<XPMt(y6zcZb4q|b0&m)g|8s*Rvre@qkl`R9&E{b49W
zW%Ckt+HU8AaqT05O^C0g^7@B@cM4PepMOvcBLwr>@708GMe8*h>mt}TBBN@|y7GU6
z;C!T`F0g_;#@23I_uX+h)7kq@_XgH!D&Bz$*6m~t%}!S9_7V7Ok3VOz(<AhRv}cS1
zY8lsmYXexoG{Rm>B-eC;+Kx*R!&j`VfwsA7n5z#{^lr&;cca|fZi|A09Re1ijMQ87
zH>wd(d5xgzz}u<F1O>&GKrz$Mc@Rvk?fhLJ)<#37k6wF`yIynMS-TrUU+16M#CSky
zr^V1?M}HkL;*g>Ck%J_ugGA1`8}UC7?CrARI_x*NngXQIrsh;)L#{uvybFyW-@x7K
zb=oyhDpkRR6f;r;;N<)29^Lq~I}UA%g&|}fkW_7q{ipI?Ch`g~<=Oy=6g`{+F|Uh=
zI@ox5S_3jQg0;&duAfsdBAjQLl=QwBLSLj>D7W>W2=VYayqzy>;E&1lghW@0GEg~-
zOp3;0JXo1+Xp3c#(YPuGpFD9422<BDm=Ls{cCZw=C}1T~M~<k%)`8kke`3KOtX=R2
zhbs%7L3qojF3wd7|6t$oS<LIzd>%7jRbO31!NOGUM+8n|hykSz+7jWX#PJQ`9&)Xt
zRB6;jQ?43+!l-c8$Hwa@cBK%Bs%rpC0Kxc?0J_$VK}Iu=a=67@r;E$_bT`gQNe(DV
zwyGxD+6K-FAZ!z^q;VyJF)xtn(?CkI$u&qfF$H3LhAhw%AT*9FI*{hmY7sI=UvreS
z$lRg1xE!<*IwG;TIAPi%shL_asOeVw%-S2n?Jbow;-JnR<jB3f<#|d3<Q;TO=@QI~
zNr5~c#}I0r4d=zF(!ndkb(lw#98^@9VUBp-Q0Ixz*K9y9p#u@U7($D|@R}q#N!sqT
zTud*<J4;xcmnwxZTUwwPYQ9=jZ|LM%B~bV&F)vHU^(xR*3>!8$s0!>`i?P8JM;Jan
zS|vvlBkZN6pJgAjX&9yq8kUsMYo_6{BgV(Le<?`;%Pgv}N?44h`S7lTjSUw(lY?I8
zeaT>rsdI%Q65yIfpj!xA6tych6MgeyQOr%OHX|rEjb<6ffj1h0eTP~kz-i}$G)Ay!
zU@*cpm3-)z8LNYQ49vFaR8$)e5Tw0t0}%p8Lh8d-3=P2}^f3lIJFY!?LHE;nFXiY(
zDz^<q2@HWNg$X>KC{B>_h=IzRz?j4^*~b~y5Glac$zq9bsKSTcL8FAO!S_%Be7UuR
z3ec3+Z$1!reNg|IYvW<=f#l)Mrdi?9qOdf{okS2!Avdc?4zDWpS~|stY5eV-)L<O=
zLwa^o9X4?hr^PK22Oe8+$N~Si93NtO5Qw3^c|jNhE~VTO5pi5|A$m}Ea~Ne2dPN1R
z#yoiYS+JAkFynh6agv}*8Lv()v!fx!;CB#E3f2ZTvz2;MnAOzTj65^7p4Ai6<S^gq
zYbg994hi26UbNbbl3M33N-z$lg$JaupJ}rc?p*}+2w|vMc!l%X93`@u+qsL&8Rsre
zSlqeeh8Ei>+gp|gYySo-!aH+u)sWxg7~;(-zc(XJm0q@_dop`-Mq8JEgO*!oE};X?
zTnqsx)|pEZRUIRlE$7U|cxMS~!_HjW$+JqJFq2|lmUiYU&{%DZyQp=fY_7;LOEIQ>
zw8F!SaHTF)iVwlrf~xskDikTXCn?%ByHqLq72Jmu)yCb2l%Nf`4~~Qi_n}0bUr>4|
z_hEk0Hsn4S0#|Y$Jf6sXNW~8W#G5<nKExT;;6C8gRN+3fb<m_O`h9V6^~FV+#MV&f
zN*e&ie8$iUSlMGZ#M%(@F61%9s<DGesxdCH1SyU~m=3*Kc`I6tZtmRin^2Zmo2fwZ
zV79czIjs?`5O3^a3K2jt`^iFptg-m`X<;wNWqo>ug$%Sm-nT#G@yd_~C2J`mGl+-+
zdBG#l)w#$Q@Srj-O$oT(oJGq#sEjA%B3ue6V<J4@iLlWAQ2s`K>1qOVA!p?>5mFr^
z0nY@+LQaP#u*EI`hY#t(M!-|al*?5~OLJ6K)VUp-Qc>gEl+qS;Z(_$rl`wK?ww&-|
z?b&joRA>;`_LhhyOLWbLnY~+7q8gg;xCBh?{ZfXn>mQB6uF^1sSr@5H4ZNfh5R6$z
zshqwxU#Wz84)JZ+V;U6_t`aevrV>+2`%TrDD#mB)Gii75+RJsY3N+~Vil)L*QUs}o
zRDopTIBm&sJ#hv-Ks9NYw#Zxuo{g+(q_&8p$In0m87c9#%H=u7*c@^KBFCIZ6viH1
z>2qw&he}xUh}<NkXoRVGkjSBX^l}|Xujlh`b$3w7#jVf_o*7&eJIl<2d(9qn1@#hs
zeRBo|l6k_9O$#q07Ofqf9T9f77da>4Nb`*zB6kxy`C3+3D<pJ!wP@>}Ud_|CI2GYy
z-#oe_kB-$K`i1txTMY3UE+%0*4e_xZn|&R-;4MD7H1J<A;`kML)IGEPxF;#>f4As@
zJmBumdt}F!kEOBruJ;JnEH=*MU@7~PKBaBC01pv@l!--`<zr;CxWEi$7B)f$FfcZX
z-)=Dr+s4Cd72SFR5w?PgiXdB&=m)&)!I$X^8s;N#L(#UF%#{Le22~VuE8w9uN@2HB
zo;5_?a8FSYc^d`e+l}Dg*Y5Q&z*kwjKXjX%O(af@KnTAg7>AYqMT2oAh1r?1f`7F3
zE%=jG@VT`<2|*Ss_$E|&wEAv$RFrHhus3A<>tE5v_4I}eMox7{feoM@=>`OV{LIU2
zG(FgAr5y-IIB&oV5=EW51EHd|f)ix6AV>{XN^*7}3h2_>uT-KVs2qq%X`wkzxDUr-
zJ46LB!Hps@VAarYOqr~8_Xn<7q4=c<Ohrfjc#7#Xr&rXcO4;j{mlD6q?F@FEyJsXH
z><=#|njy0JLrgGlcr6jKj%=mkL>fh4gK@?hLUZZ1eBI0u#aA_cG;`|*7Vsmw=MFwb
z#Z2Hag0B>G^q~VE9E>o-ID8xdyty8BOjx!=F~8o138^Y5h7ATrB*Hq6r41%*5HQNT
zzS}G!v@^uC;lN*8C0Qj(?v#j{blKZ15-esa2oA@b(Hc{<<a$@v;_qErvL;`AR&6Wz
zQ3>4}_n{JcHsC)g1r@GIO4@_(Pmt~~o3IV}ONHE4@|7H#$WKZnj|tLG#%^nZ9Vph|
zAL0Jl!ar&Ya?B`VKz-lWOuOsr>}x)jgQ7FH4AZ#(Q%$nDbIoR8&Ze99n1D%smDPHw
zXVRNJTsNA_q3ejt>LNTtu2$(l<O2Ty7mMC=Nn6cR6P@%r>kUXXt$Fe53PxlFk_X%O
z@M;iQpm;Sq9$pQKNiW*&fNUebo^Og^K?g<L>In<bIZ<o(MI)+*ujPFNFB+(?SrSKq
zWIslN*9s*2Q;=}UsZr2gL5Ae0m5FeyFnQk~D3c&LCL?H$O8nuDyg9F<D-|_Hd?{@u
zLw*aQ;eTa8Y;U2(`JZX$?JWp}|5ap9U4jywXs*X4U~2Q0GN5lRecW^Qe(KwBp>vg8
zTPBxoLWx8$W?hAH`r7sjlu*whz7^yLy0HSY+HqMU;VKcsbto~l^nQVAOzG%m*TJFU
zUT?XGSb+fD90)4537}}Y)?87X3;Wfhoh1XEa0VH~Q$65Cc=l)E(P0nE=M}W_955)E
zgDV~TreN8h2MecDj^TD%#gs2AlPEv$!k#I<>XMj66)j;^NDHgA1r%&x$+md+R)S||
zp>^95nwTw&h$5os&c#xhb*$i)kd_UlbQ!l?Br8B+Ew=!rf?A;6OGsidExxK-MmSRk
z<eLd-{DpRs=pEUmKtZ|sOzzBH6ulIh2m1=4hzeRa9*(G>X#*jNf{F_7zesd?zw_`*
zx&;mM5xAicMNH;OVG4sP3RM*F&>9%8-4=#H{WjQ!HLRY5`MJ0O&SZEy;G)1B*d;Kb
zb`@`oo3MC*QBZu?*X5hxaKD%q*GrLcZ=mFKH^rsVmJ*B8BQ6%Tn`YkP+Xx@!a=Q{P
zP#OGWjkrwVC*Xmfc>U`6tG{K}eSED1-|4`0N$y*;5KgD{4i^i3Y7Kk1r4cJ6Z%5<S
zP_JI&Wpups++T&4x9^AiOa&KR?0s#~rFcaf?PhP`_g5ZS`K34P^WtQO&}qY{=EMQ+
zA&l=A<;kj?C~&KbZ?DMhg46HKV*tl24j%I^Gq#@?e!3lOlAi00d;LL8GRWa&T+fM5
z)9@m_>l&^w2QGvAWcEF2q}p|tCIc_})eqo1y=mc+!jHN8WJg7n^6{-nq*ANojx|<*
z`w{oEKmR#<>t3{n<4YmU-bZ}H<>s_IzL1XqNpy>A-$E8tTf<#|6!rK!Ku53v?8S><
z{Ce2={dazgNH6z1XFrlamMpYlkZ|4B_R**@PW(N4FawhN7K=OF{B4^;(&9oxaJFDZ
zu19r!3wK&7yK-M=gZFP1tJ`QKtSgp=8xCDXj||T;@=>n}1Xvy~mEKX;#>++W59+V)
zNAFQr+V#zFVg?`^X)eYUt=eefv9957Y3vhq;3`_Q#*L~~#gL9KlzDNWh2)M()f!5n
zg|D~VsAA$92E}!m5XPf9aq}BfkJw%CA6Mc1o(bE1j&=76(xiiz?w?Sbm731~{IFjw
zXz`4BkPQD#tk13dM|&L#q1Le1WuB@Kj>4HWUjM+V_#+Cn|G!G1PGEirhZ0PmtI_wr
zqC)NO%%e~z?qZKg3MF33e2qMhKAm7aLKQ~zSNHK4eR7+8W~pvjpG2#u#ioa!%yavt
z4C^}lEk1DKONJ8%PMtTMnd*CDyil>?0Zkn|BP0*DP(j-uivBC09RF7%q9Tw5J<zoX
z*&t+(dMcodig3)Z(UyC~f<TwlKk};}mDIRglNSS!LFx`@Dk*WfCLBgAH_C#`38p<u
z%LyiJwdDknPv!c+e5VXcT%ujvWNvA6aW%i8s8kA*-B({VAU%b<SU8Afa*I_1!vh#A
zuNv5NxOw>SU*u9PcOy$lI@PNNrf!a<OUqB)({-#Gh=i*|976S$=4Ce>mBb_K4-<zM
z8*dkF50Qb1R8@^H7LAMsGtl@kW^&M7h^Y?VM`H5B%=~BQDkP+LNJEDgihOFR39-qD
z$hDlYs-n9H>Y!I@1`5vkCBA1Ya>lKMB#lFh`3Bn!Nay+-P#Iw{xK!(yoJUG$uw{6O
z4mPdhw4RTw&EjC?SahU4-$*PvqG@BXXi_mT)Ekrd(A(sS4mux!8;wPKIj$iVEvPD@
z#Zha(#_`s@jfj{$(}TI<K)ATD*h5AG!xu#OQTt;5+->+U6D@%6m;0>!a-S199uc1f
zk?+W&f#75&@zN7>BWTH^)u4dakPwM6>Vc2+(V5Z!Ng4Z7V4z!@p46zwslL4NtlfkI
zB?&rOO@Wv;o`PV?d8)nFYG>djPG>~LAIwwL!7K7rJ*ezrYDzjqtCNYjkDr3Io~pc;
zu>edIiVQDqb`5Csv#}PDgOpK8LV-+PBXlqm9XliM{7zsm<gD~ukxFg?k}B3TkN2Mo
z#yASWmq)Vl5s*}~<@0$&mMMp-IkL(!w+C$s8Q<AJSM!>kVB-M979~~ewJW5uy`}7X
zMX+oJJIkNUF*KsJADdTiA9^R+Bz;}?Imf6Jh5~yc$5McecIFkNTW8s(tj$d}NT-Ts
z!>(~o=~amju7P1;=}mMg4%JPL6xKPg?yJ*Y>%gW+puELcQ)sfqLT#UhLbSX<VwK*a
z(XKHO5rzoIP^J6pSV_I;h#jCHJHZhz*nyH_*BTj_g+Q4JC@eFIMA?{%=JXoUSjhc8
z#kU4A=}#1no7K~nUVKZQ)s$7e;Rx4c+OL{Fzs9H9UoHG8kWg^CY*aJY@D&rVA1@XU
z8yMwT(cKONR=V7g25VN;!N85x!R7g}SXOO$L*{IrRtO+Ove|g(Afm>&Y!CHWQPyAK
zjmKm?bf91!qBay9@T9F277!#+Kp>KLDHLE**AWDWuJ_HM0N>sJ`EL|~J)lvRr@S{q
zqAnBm(}a)LN~UB_6F&~hakuz_?ddhQF-+fKRl0!Tso&OP-TG^K`dq|jfB_f_lHERw
zYS-TS_D18dl}6%3e(MG72}8AfT1!Go{9ctj@cJ`(@OS9Ri(YxBj}ilMnVQefFJP!>
zf$PiW#ZS}4ASV$^jOo?Lx|>B~Ct-q=eQZ(SB4SSMH+QW>g~<G;K#hQd4KY#9ZcmVr
zvzgsy5aeyaaMOkPYH_k%=%W7**+Ge2X3<t5ISEz%!%abKy{VfC3KM0Sucid4yD9wP
zF3%{{Jh!)>mNYJZnzWMN?+tP9tEb3eYP!W_(+1FVYLWNa(=svyeYNW}Zl&XcnxHe*
ze=pGzPRkYagD30Br$yFxwML5B+q9Dfw_(S=kZqN4!@^%7%B5ZWR5b7b<f_GzkN>TD
zeq{!(WTIHqA=XkQ$FGcj1@EGaY~wCQnWPQ)8G(ojXCtI}zi(5=WYF2>B5y;!N01YV
zT*(0`FhyQS0EdRa^y61=?5bojDy_pGi7q|7^>fa5r(_AIq_IbbV2xhMdhGk@CcWG%
zn40vBJpqFkH(QBMV_gp&&ZncU^cEU>0tRYp)XS8j7JbyW9>C_dVYKC~?ikC%ER6d5
z5u&;mw7hNElI?91zk>B`(HHi&g;pDqHpfHQ;8I_eq3Aq@h@N1FTWF;v9%WeD(wa^q
z7WX_t{3h&iA-Zspjk^;pa?96>HhGNd|4XYpW<k%oLDic2<f8!2i(O>FBto$2+Cq#h
zT2?A6>rVC++>2OFD?1o5x^KkAh>6;mlObeGwBr*ZA9`uSsN0+*Zq(TbvW!e37eE}>
z|IrzB#%J$4-5XpTl=4#?owrO^I2>`4OmI1Drgb<S(M^K4;&ezA-`$R-+z#$^{NLer
z$f@-yZio9Ok6W_%uk*`SOSvF^UBOS8OSw0)`cw9t<iO&$;NC>@?lPWDg5aT?nz-7z
z{h6qkab+U-TD_PEGaZ-+kec05;@5RsdUESQrN<Ie0cRxwBz{Vqwl)_fLOVlD8+J^3
zD#<EQ!Y7FsS=t>*uy9aAJ1n%@jAcrp^#t#lKWCO;U%{wOFm2qPPUzWyDXkQwCS6(K
z{EZ~Fhx!)yyo7DYY%a)K$zpbBB4b%$lSA`S`Wj5+{pf0?o(w~nG-Ol5_sg~+32d^-
z^6uJC4K*5aRA-6Xw%z!e-n7l3SvDJSGZ03}WWUmbU$2eTqfh<ejSmhjaReyE@KAPP
zQt#Y`VO-8whH=7LO~V*9ZNnInT0L><*R>8ms0LKoGzpamC5~ds5(6<wT$_a$<DDg}
z4cmxbo>c<HoE`JBw3V2m!P?-WR-!B?CWjJIv}^g0Yl?I&Hw>gmb%W!gGVt3XXNX~K
z-xW@&Uh8EJDe@JJ@D$a?t?-nf4VdAMgbF*nMBGD1vgaplL#DVPa3x#Z<B5#%RQ#o=
zb(~=x=6G~=|AWq;-|g{_`H;f>iXR4TG-SKToc4H)-@n=U^IvOwpBuOThI>nS4a^?z
z2(8r`|NigyxJXrU?EG2YW#2ny#hrgKRo?LN&Ef@LQ!HNG_ecwXd|A@G>g58c6W53C
zeM=_4J=V8O95^ojQ09JA>)gh^EoDr73tp?CZxPeXx9_RlYSX^1iQnNK<0^YJqL1di
zr71D)qolQ&_7>}O0d3f<R~c3b5k|e`Vri2;MpDdl&3O9qQd(pKM~q?B9UKX^XbVTo
zgd8YZ)FyYQkP?$TM!bS)8zb7dVH=aP0kc*Js4!|1!XDbBosX;ynX`eom5f=%5}C5G
z&`XA_O<so?8=XGwaF+PK<zoIgayZM`XmAHXRXo?<=f2?i)8%)1Pv8Ggy}P@Cqo{H?
zHOx7s4G=OWPsd%oy}RMJaG34gf{a!20OUiRsFber=4^#PcZ%UbE#HFj#cbbDF13C`
z!usvsfI3*f0pg7pe-tp5=>u57Z_cVrI5pq`mBA7YkSbfaNL;Tq9PrK(*0*30L!MOv
z^)_+fWi_kVpb?Ehb0l{neXHjs69v!SG+#bHJH33qs8Q_8m9}-H6|8C*8&Q87wy_~-
zQ`YgDvq|=`C2k`Y@?4~C(n?kWqj`SOEz3^D(PhHdVO;k&;;*)qLxy!&%hB1$4z1-k
zXW#ARW$fjB?yC4E>}7lN$#na6g6%BV%7PbBQW#lk)fQLD_<?&m@(IQ>ueC`oiuL$>
zO%Gu|-`@AyS*<ujaFyT5XO+TnWZj*}&%rtSdRM+1-t67vpYi1ce1b_H^-F#4`u#3V
zo6)Dvxc$D!NSMg&kh0>|rm??-!`u>sqtCca1sQOyd#K-jp^I@bpAc@wH3(F2TmI&i
zfxA+NIo^84#)fFu!&~>=v9zIlCF;?Id_wQ0)5fQvGBENUyn)%jWskCd%Wm(+^{c^<
z%M1K`y6~<SzW94bj4<^;MpV5g-|hO0<T_oLMXDF(9*K4%?pz-*!ajD_4)SrZMT$a;
Rqk&$J>&`8!K)jdL{{#CX9$EkZ

literal 0
HcmV?d00001

diff --git a/pkg/policy/parser/query_visitor.go b/pkg/policy/parser/query_visitor.go
new file mode 100644
index 0000000000000000000000000000000000000000..b6128a568b159afe615ceacbf2a9247a419c1433
GIT binary patch
literal 1645
zcmb`H!EVAZ42I9-DJ*u`c4(!E%Z{k932g!fXq-dpvWT{+LaI?A-hFA@mL4WeQ#iEp
zZzca{yJ^A@A{8U-F-Oe}#*k>0!AFU@3icz|RWP1!-d8XRo`a_VCJUG^HZYycHUVP=
z7YDvaD7ZeNhA^a!jLED}+Q4ux%~!b#gvvsmn^e<#6zVcJGQ;pyQD(@P-8=@nut?D$
ze9EIVN<(5FPX1stT9j6CDQum#GOCi9sz8d{T{1VQ6D|<WY~aAbvMzCB9hx<a4J^@#
zKLB@yN~Nd*HgKz#PTdQ0f=7xYWpO9-03G&x`G>v6Vr??h`mab5pb?$~u}k`dh$Imj
z;Ym1Rio*0E>n=l_tM){Rl$S?rrxiKXwBlk<`$VSp>`YIEZV@kChA>xs6I6d_WL;<a
zs9JlXu-8xB8`;;9r!kG|4ZGiiTCj<J2UgyM^U2e)`}9O|sXogkJZX8E?XWulbEk+w
xv8Vk3t8b;__JG;x)RF*=@Fd6>^X^8O)q>nzcnj}s)K>2-w^7f38~sYSupdo8KNtW2

literal 0
HcmV?d00001

diff --git a/pkg/policy/query.go b/pkg/policy/query.go
index 1b6447e..7fbdae5 100644
--- a/pkg/policy/query.go
+++ b/pkg/policy/query.go
@@ -3,9 +3,12 @@ package policy
 import (
 	"errors"
 	"fmt"
+	"strconv"
 	"strings"
 
+	"github.com/antlr/antlr4/runtime/Go/antlr"
 	"github.com/nspcc-dev/neofs-api-go/pkg/netmap"
+	"github.com/nspcc-dev/neofs-sdk-go/pkg/policy/parser"
 )
 
 var (
@@ -19,83 +22,252 @@ var (
 	ErrUnknownFilter = errors.New("policy: filter not found")
 	// ErrUnknownSelector is returned when a value of IN is unknown.
 	ErrUnknownSelector = errors.New("policy: selector not found")
+	// ErrSyntaxError is returned for errors found by ANTLR parser.
+	ErrSyntaxError = errors.New("policy: syntax error")
 )
 
-func parse(s string) (*query, error) {
-	q := new(query)
-	err := parser.Parse(strings.NewReader(s), q)
-	if err != nil {
-		return nil, err
-	}
-	return q, nil
+type policyVisitor struct {
+	errors []error
+	parser.BaseQueryVisitor
+	antlr.DefaultErrorListener
 }
 
 // Parse parses s into a placement policy.
 func Parse(s string) (*netmap.PlacementPolicy, error) {
-	q, err := parse(s)
-	if err != nil {
+	return parse(s)
+}
+
+func newPolicyVisitor() *policyVisitor {
+	return &policyVisitor{}
+}
+
+func parse(s string) (*netmap.PlacementPolicy, error) {
+	input := antlr.NewInputStream(s)
+	lexer := parser.NewQueryLexer(input)
+	stream := antlr.NewCommonTokenStream(lexer, 0)
+
+	p := parser.NewQuery(stream)
+	p.BuildParseTrees = true
+
+	v := newPolicyVisitor()
+	p.RemoveErrorListeners()
+	p.AddErrorListener(v)
+	pl := p.Policy().Accept(v)
+
+	if len(v.errors) != 0 {
+		return nil, v.errors[0]
+	}
+	if err := validatePolicy(pl.(*netmap.PlacementPolicy)); err != nil {
 		return nil, err
 	}
+	return pl.(*netmap.PlacementPolicy), nil
+}
 
-	seenFilters := map[string]bool{}
-	fs := make([]*netmap.Filter, 0, len(q.Filters))
-	for _, qf := range q.Filters {
-		f, err := filterFromOrChain(qf.Value, seenFilters)
-		if err != nil {
-			return nil, err
+func (p *policyVisitor) SyntaxError(recognizer antlr.Recognizer, offendingSymbol interface{}, line, column int, msg string, e antlr.RecognitionException) {
+	p.reportError(fmt.Errorf("%w: line %d:%d %s", ErrSyntaxError, line, column, msg))
+}
+
+func (p *policyVisitor) reportError(err error) interface{} {
+	p.errors = append(p.errors, err)
+	return nil
+}
+
+// VisitPolicy implements parser.QueryVisitor interface.
+func (p *policyVisitor) VisitPolicy(ctx *parser.PolicyContext) interface{} {
+	if len(p.errors) != 0 {
+		return nil
+	}
+
+	pl := new(netmap.PlacementPolicy)
+
+	repStmts := ctx.AllRepStmt()
+	rs := make([]*netmap.Replica, 0, len(repStmts))
+	for _, r := range repStmts {
+		res, ok := r.Accept(p).(*netmap.Replica)
+		if !ok {
+			return nil
 		}
-		f.SetName(qf.Name)
-		fs = append(fs, f)
-		seenFilters[qf.Name] = true
+
+		rs = append(rs, res)
+	}
+	pl.SetReplicas(rs...)
+
+	if cbfStmt := ctx.CbfStmt(); cbfStmt != nil {
+		cbf, ok := cbfStmt.(*parser.CbfStmtContext).Accept(p).(uint32)
+		if !ok {
+			return nil
+		}
+		pl.SetContainerBackupFactor(cbf)
+	}
+
+	selStmts := ctx.AllSelectStmt()
+	ss := make([]*netmap.Selector, 0, len(selStmts))
+	for _, s := range selStmts {
+		res, ok := s.Accept(p).(*netmap.Selector)
+		if !ok {
+			return nil
+		}
+
+		ss = append(ss, res)
+	}
+	pl.SetSelectors(ss...)
+
+	filtStmts := ctx.AllFilterStmt()
+	fs := make([]*netmap.Filter, 0, len(filtStmts))
+	for _, f := range filtStmts {
+		fs = append(fs, f.Accept(p).(*netmap.Filter))
+	}
+	pl.SetFilters(fs...)
+
+	return pl
+}
+
+func (p *policyVisitor) VisitCbfStmt(ctx *parser.CbfStmtContext) interface{} {
+	cbf, err := strconv.ParseUint(ctx.GetBackupFactor().GetText(), 10, 32)
+	if err != nil {
+		return p.reportError(ErrInvalidNumber)
+	}
+
+	return uint32(cbf)
+}
+
+// VisitRepStmt implements parser.QueryVisitor interface.
+func (p *policyVisitor) VisitRepStmt(ctx *parser.RepStmtContext) interface{} {
+	num, err := strconv.ParseUint(ctx.GetCount().GetText(), 10, 32)
+	if err != nil {
+		return p.reportError(ErrInvalidNumber)
+	}
+
+	rs := new(netmap.Replica)
+	rs.SetCount(uint32(num))
+
+	if sel := ctx.GetSelector(); sel != nil {
+		rs.SetSelector(sel.GetText())
+	}
+
+	return rs
+}
+
+// VisitSelectStmt implements parser.QueryVisitor interface.
+func (p *policyVisitor) VisitSelectStmt(ctx *parser.SelectStmtContext) interface{} {
+	res, err := strconv.ParseUint(ctx.GetCount().GetText(), 10, 32)
+	if err != nil {
+		return p.reportError(ErrInvalidNumber)
+	}
+
+	s := new(netmap.Selector)
+	s.SetCount(uint32(res))
+
+	if clStmt := ctx.Clause(); clStmt != nil {
+		s.SetClause(clauseFromString(clStmt.GetText()))
+	}
+
+	if bStmt := ctx.GetBucket(); bStmt != nil {
+		s.SetAttribute(ctx.GetBucket().GetText())
+	}
+
+	s.SetFilter(ctx.GetFilter().GetText()) // either ident or wildcard
+
+	if ctx.AS() != nil {
+		s.SetName(ctx.GetName().GetText())
+	}
+	return s
+}
+
+// VisitFilterStmt implements parser.QueryVisitor interface.
+func (p *policyVisitor) VisitFilterStmt(ctx *parser.FilterStmtContext) interface{} {
+	f := p.VisitFilterExpr(ctx.GetExpr().(*parser.FilterExprContext)).(*netmap.Filter)
+	f.SetName(ctx.GetName().GetText())
+	return f
+}
+
+func (p *policyVisitor) VisitFilterExpr(ctx *parser.FilterExprContext) interface{} {
+	if eCtx := ctx.Expr(); eCtx != nil {
+		return eCtx.Accept(p)
+	}
+
+	f := new(netmap.Filter)
+	op := operationFromString(ctx.GetOp().GetText())
+	f.SetOperation(op)
+
+	f1 := ctx.GetF1().Accept(p).(*netmap.Filter)
+	f2 := ctx.GetF2().Accept(p).(*netmap.Filter)
+
+	// Consider f1=(.. AND ..) AND f2. This can be merged because our AND operation
+	// is of arbitrary arity. ANTLR generates left-associative parse-tree by default.
+	if f1.Operation() == op {
+		f.SetInnerFilters(append(f1.InnerFilters(), f2)...)
+		return f
+	}
+
+	f.SetInnerFilters(f1, f2)
+	return f
+}
+
+// VisitFilterKey implements parser.QueryVisitor interface.
+func (p *policyVisitor) VisitFilterKey(ctx *parser.FilterKeyContext) interface{} {
+	if id := ctx.Ident(); id != nil {
+		return id.GetText()
+	}
+
+	str := ctx.STRING().GetText()
+	return str[1 : len(str)-1]
+}
+
+func (p *policyVisitor) VisitFilterValue(ctx *parser.FilterValueContext) interface{} {
+	if id := ctx.Ident(); id != nil {
+		return id.GetText()
+	}
+
+	if num := ctx.Number(); num != nil {
+		return num.GetText()
+	}
+
+	str := ctx.STRING().GetText()
+	return str[1 : len(str)-1]
+}
+
+// VisitExpr implements parser.QueryVisitor interface.
+func (p *policyVisitor) VisitExpr(ctx *parser.ExprContext) interface{} {
+	f := new(netmap.Filter)
+	if flt := ctx.GetFilter(); flt != nil {
+		f.SetName(flt.GetText())
+		return f
+	}
+
+	key := ctx.GetKey().Accept(p)
+	opStr := ctx.SIMPLE_OP().GetText()
+	value := ctx.GetValue().Accept(p)
+
+	f.SetKey(key.(string))
+	f.SetOperation(operationFromString(opStr))
+	f.SetValue(value.(string))
+	return f
+}
+
+// validatePolicy checks high-level constraints such as filter link in SELECT
+// being actually defined in FILTER section.
+func validatePolicy(p *netmap.PlacementPolicy) error {
+	seenFilters := map[string]bool{}
+	for _, f := range p.Filters() {
+		seenFilters[f.Name()] = true
 	}
 
 	seenSelectors := map[string]bool{}
-	ss := make([]*netmap.Selector, 0, len(q.Selectors))
-	for _, qs := range q.Selectors {
-		if qs.Filter != netmap.MainFilterName && !seenFilters[qs.Filter] {
-			return nil, fmt.Errorf("%w: '%s'", ErrUnknownFilter, qs.Filter)
+	for _, s := range p.Selectors() {
+		if flt := s.Filter(); flt != netmap.MainFilterName && !seenFilters[flt] {
+			return fmt.Errorf("%w: '%s'", ErrUnknownFilter, flt)
 		}
-		s := netmap.NewSelector()
-		switch len(qs.Bucket) {
-		case 1: // only bucket
-			s.SetAttribute(qs.Bucket[0])
-		case 2: // clause + bucket
-			s.SetClause(clauseFromString(qs.Bucket[0]))
-			s.SetAttribute(qs.Bucket[1])
-		}
-		s.SetName(qs.Name)
-		seenSelectors[qs.Name] = true
-		s.SetFilter(qs.Filter)
-		if qs.Count == 0 {
-			return nil, fmt.Errorf("%w: SELECT", ErrInvalidNumber)
-		}
-		s.SetCount(qs.Count)
-		ss = append(ss, s)
+		seenSelectors[s.Name()] = true
 	}
 
-	rs := make([]*netmap.Replica, 0, len(q.Replicas))
-	for _, qr := range q.Replicas {
-		r := netmap.NewReplica()
-		if qr.Selector != "" {
-			if !seenSelectors[qr.Selector] {
-				return nil, fmt.Errorf("%w: '%s'", ErrUnknownSelector, qr.Selector)
-			}
-			r.SetSelector(qr.Selector)
+	for _, r := range p.Replicas() {
+		if sel := r.Selector(); sel != "" && !seenSelectors[sel] {
+			return fmt.Errorf("%w: '%s'", ErrUnknownSelector, sel)
 		}
-		if qr.Count == 0 {
-			return nil, fmt.Errorf("%w: REP", ErrInvalidNumber)
-		}
-		r.SetCount(uint32(qr.Count))
-		rs = append(rs, r)
 	}
 
-	p := new(netmap.PlacementPolicy)
-	p.SetFilters(fs...)
-	p.SetSelectors(ss...)
-	p.SetReplicas(rs...)
-	p.SetContainerBackupFactor(q.CBF)
-
-	return p, nil
+	return nil
 }
 
 func clauseFromString(s string) netmap.Clause {
@@ -105,74 +277,31 @@ func clauseFromString(s string) netmap.Clause {
 	case "DISTINCT":
 		return netmap.ClauseDistinct
 	default:
-		return 0
+		// Such errors should be handled by ANTLR code thus this panic.
+		panic(fmt.Errorf("BUG: invalid clause: %s", s))
 	}
 }
 
-func filterFromOrChain(expr *orChain, seen map[string]bool) (*netmap.Filter, error) {
-	var fs []*netmap.Filter
-	for _, ac := range expr.Clauses {
-		f, err := filterFromAndChain(ac, seen)
-		if err != nil {
-			return nil, err
-		}
-		fs = append(fs, f)
-	}
-	if len(fs) == 1 {
-		return fs[0], nil
-	}
-
-	f := netmap.NewFilter()
-	f.SetOperation(netmap.OpOR)
-	f.SetInnerFilters(fs...)
-	return f, nil
-}
-
-func filterFromAndChain(expr *andChain, seen map[string]bool) (*netmap.Filter, error) {
-	var fs []*netmap.Filter
-	for _, fe := range expr.Clauses {
-		var f *netmap.Filter
-		var err error
-		if fe.Expr != nil {
-			f, err = filterFromSimpleExpr(fe.Expr, seen)
-		} else {
-			f = netmap.NewFilter()
-			f.SetName(fe.Reference)
-		}
-		if err != nil {
-			return nil, err
-		}
-		fs = append(fs, f)
-	}
-	if len(fs) == 1 {
-		return fs[0], nil
-	}
-
-	f := netmap.NewFilter()
-	f.SetOperation(netmap.OpAND)
-	f.SetInnerFilters(fs...)
-	return f, nil
-}
-
-func filterFromSimpleExpr(se *simpleExpr, seen map[string]bool) (*netmap.Filter, error) {
-	f := netmap.NewFilter()
-	f.SetKey(se.Key)
-	switch se.Op {
+func operationFromString(op string) netmap.Operation {
+	switch strings.ToUpper(op) {
+	case "AND":
+		return netmap.OpAND
+	case "OR":
+		return netmap.OpOR
 	case "EQ":
-		f.SetOperation(netmap.OpEQ)
+		return netmap.OpEQ
 	case "NE":
-		f.SetOperation(netmap.OpNE)
+		return netmap.OpNE
 	case "GE":
-		f.SetOperation(netmap.OpGE)
+		return netmap.OpGE
 	case "GT":
-		f.SetOperation(netmap.OpGT)
+		return netmap.OpGT
 	case "LE":
-		f.SetOperation(netmap.OpLE)
+		return netmap.OpLE
 	case "LT":
-		f.SetOperation(netmap.OpLT)
+		return netmap.OpLT
 	default:
-		return nil, fmt.Errorf("%w: '%s'", ErrUnknownOp, se.Op)
+		// Such errors should be handled by ANTLR code thus this panic.
+		panic(fmt.Errorf("BUG: invalid operation: %s", op))
 	}
-	f.SetValue(se.Value)
-	return f, nil
 }
diff --git a/pkg/policy/query_test.go b/pkg/policy/query_test.go
index ebe2be2..2493edc 100644
--- a/pkg/policy/query_test.go
+++ b/pkg/policy/query_test.go
@@ -2,6 +2,7 @@ package policy
 
 import (
 	"errors"
+	"fmt"
 	"testing"
 
 	"github.com/nspcc-dev/neofs-api-go/v2/netmap"
@@ -80,6 +81,32 @@ func TestFromSelectNoAttribute(t *testing.T) {
 	})
 }
 
+func TestString(t *testing.T) {
+	qTemplate := `REP 1
+SELECT 1 IN City FROM Filt
+FILTER Property EQ %s AND Something NE 7 AS Filt`
+
+	testCases := []string{
+		`"double-quoted"`,
+		`"with ' single"`,
+		`'single-quoted'`,
+		`'with " double'`,
+	}
+
+	for _, s := range testCases {
+		t.Run(s, func(t *testing.T) {
+			q := fmt.Sprintf(qTemplate, s)
+			r, err := Parse(q)
+			require.NoError(t, err)
+
+			expected := newFilter("Filt", "", "", netmap.AND,
+				newFilter("", "Property", s[1:len(s)-1], netmap.EQ),
+				newFilter("", "Something", "7", netmap.NE))
+			require.EqualValues(t, []*netmap.Filter{expected}, r.Filters())
+		})
+	}
+}
+
 func TestFromSelectClause(t *testing.T) {
 	q := `REP 4
 SELECT 3 IN Country FROM *
@@ -205,12 +232,12 @@ func TestValidation(t *testing.T) {
               SELECT 1 IN City FROM F
 			  FILTER Country KEK RU AS F`
 		_, err := Parse(q)
-		require.True(t, errors.Is(err, ErrUnknownOp), "got: %v", err)
+		require.True(t, errors.Is(err, ErrSyntaxError), "got: %v", err)
 	})
 	t.Run("TypoInREP", func(t *testing.T) {
 		q := `REK 3`
 		_, err := Parse(q)
-		require.Error(t, err)
+		require.True(t, errors.Is(err, ErrSyntaxError))
 	})
 	t.Run("InvalidFilterName", func(t *testing.T) {
 		q := `REP 3
@@ -223,13 +250,13 @@ func TestValidation(t *testing.T) {
 	t.Run("InvalidNumberInREP", func(t *testing.T) {
 		q := `REP 0`
 		_, err := Parse(q)
-		require.True(t, errors.Is(err, ErrInvalidNumber), "got: %v", err)
+		require.True(t, errors.Is(err, ErrSyntaxError), "got: %v", err)
 	})
 	t.Run("InvalidNumberInREP", func(t *testing.T) {
 		q := `REP 1 IN Good
 			  SELECT 0 IN City FROM *`
 		_, err := Parse(q)
-		require.True(t, errors.Is(err, ErrInvalidNumber), "got: %v", err)
+		require.True(t, errors.Is(err, ErrSyntaxError), "got: %v", err)
 	})
 }
 

From 0f5ce2e8bb3debc613dd190dee7438b589ccf5a9 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <evgeniy@nspcc.ru>
Date: Fri, 21 May 2021 18:12:27 +0300
Subject: [PATCH 2/5] [#3] policy: allow to use brackets in filters

Signed-off-by: Evgenii Stratonikov <evgeniy@nspcc.ru>
---
 pkg/policy/doc.go                 |   5 +----
 pkg/policy/parser/Query.g4        |   1 +
 pkg/policy/parser/Query.interp    | Bin 4174 -> 4346 bytes
 pkg/policy/parser/query_parser.go | Bin 59362 -> 60564 bytes
 pkg/policy/query.go               |   4 ++++
 pkg/policy/query_test.go          |  24 ++++++++++++++++++++++++
 6 files changed, 30 insertions(+), 4 deletions(-)

diff --git a/pkg/policy/doc.go b/pkg/policy/doc.go
index 10394fa..4e10a1b 100644
--- a/pkg/policy/doc.go
+++ b/pkg/policy/doc.go
@@ -2,10 +2,7 @@
 //   ANTLRv4 grammar is provided in `parser/Query.g4` and `parser/QueryLexer.g4`.
 //
 // Current limitations:
-// 1. Grouping filter expressions in parenthesis is not supported right now.
-//    Requiring this will make query too verbose, making it optional makes
-//    our grammar not LL(1). This can be supported in future.
-// 2. Filters must be defined before they are used.
+// 1. Filters must be defined before they are used.
 // 	This requirement may be relaxed in future.
 //
 // Example query:
diff --git a/pkg/policy/parser/Query.g4 b/pkg/policy/parser/Query.g4
index 0cad576..fc74c6f 100644
--- a/pkg/policy/parser/Query.g4
+++ b/pkg/policy/parser/Query.g4
@@ -24,6 +24,7 @@ clause: CLAUSE_SAME | CLAUSE_DISTINCT; // nodes from distinct buckets
 filterExpr:
     F1 = filterExpr Op = AND_OP F2 = filterExpr
     | F1 = filterExpr Op = OR_OP F2 = filterExpr
+    | '(' Inner = filterExpr ')'
     | expr
     ;
 
diff --git a/pkg/policy/parser/Query.interp b/pkg/policy/parser/Query.interp
index 63f74d9a5f7db8596c48f2d0c52c4bffcbc36599..9512ecb628462c54d2fb7c893a4d88015cbb1ffc 100644
GIT binary patch
literal 4346
zcmaKv-A)@x5QXpiDSXH7ii>I6<DXou1J24?FvxZmX;&*ml8J<3NCZZ^ynVh?)gDhb
z2x;8ib^27*shXi@*nR)j-1oM(yXN6$+q=KHYaZW)`={+T9L<)eN8#vVb(HMY{1SVy
zWSFfPPTqfDT+h$uCmR+YRu|`*7H69|K1aW4b9O#wI$f+ci>0xC!Tgoq?<uOMs=8L#
znWo3*yHDS@x1TdnXu7_*3>Pbn>&5xy*<356g~c+=)&Wt$B?SozE+<?q&Q4EetJ83D
zHv71qUrX42y;m2`t}kb+`7*51JlllD>3q2f%a7;p=c^e0p06&#db3(A{|Hy>5FVbk
z&0gLQX?+e4&5!l&ZWlg(`fBrIvu!@_9NOMIJvQO%?UrWG|NrrjmbTd(>_405wDZ@^
z_Nk%!cb}Sv@U40N@B71-aQmgX-}!iT5<<Ay-M<U}432yK;W*aEy<vYm9Uk`vgK8{m
zTu;Zxy*L_=0AoEE01m2pI>DhonTW}XUmR4>Ss(YNHu@H8Hd%AA_60FmEBtY9WNSv&
zWCCYoO#;@8tXcTQI+6xMldR|#lPpiJNfwF4^!yP-7L)c|f+n`%BY<(hPmwh_F1|Lf
z9Kb`in&L!<v4Mv`dw)!><UfQZt#Y+7@k#qSUs78>E-x>aUNb3z?<1B)cT6n9+cgU=
zyQ8?4a4M~ZiCC;LxyEcLwQo`hwvR+${l+M7Zf*+j2C*9k8rPJrC@V|dXHC?r4JNgW
zC0;x@Z;W)8-8V)A>JC&2PcmnwKBt;BMJ2Qa1`%cE6M>8q)1BTk{6SC!;`8fFe*aXK
zyj50TgYu;<aPgVM(63Ly#yD&pQYbkV&Mfvs0E;bQV12^(!IY{mzOenx-E%#-SYlJG
z$YoTK^@qeY@P4?#2)*`BwGgRlew5QfWUjsAEu_-Mcz0=P-h^L<!I>UZT2OC&kwYa%
zMeTa4s(3gPQg)^o{i#X_VaXF?AyRFNIt#OyO4KjhbyliHC~b?fUKN7GIUGHn-Rz>T
zhP9CrPj*qYo!)36FFOzvU!0<4hLxJJhh<)h)0v06ZkoqaSFpNG5JyK~hACFjLB$_R
zlST46WDg51idAYEQqGWCP@(4<1#-mFMix+|mx)yz+>9rzEX3`MMyOJs9`c%6h(I#0
zLw1c6F#GE<yk@T^8lZ5;uyw3+*%O72SWIGfQyW&OPM#S}UGWTPO-Zn8icwa?CeVS*
z7mpDHc=~H`o`4ZSGv^WYjc^4NZr6xOuNgGT+j}9BHo9pHgP391qoO+5Bf>LvdLu1L
zpLq*|nPJ$Y;*QE5Q6yVBo0Dz<ER}|R9SK-t^#Kl4Kxdjwj$Dv@#qK6I3?RcWNR>fU
ztuHTN&!AA)>BVut)PGkZ=`N7f7-<5$*K!s>G{unVOn`~X0d#~d0eUBQ<xGeyOx}ca
zRXTOYSQ$|PAZHlH6g<PIZ<4gM8U;+SkkWEx>t%n?&F(}$-4UX)!KkzV6O^$>@PuLK
z-U_Dzp|m;R8rID#jI{O<ypJX<aWh|G02zjn-skN4rC4Pj^p=`>$torhB@!`*n!yF=
zdz*<d5m`+sQ9Zy%2cDQ9<?Aa}6dfxn!rxx>Mm5B~Z}JeaB2KI*LK?`D{^|{i6?t5q
z%P=5TP!&aq$YTNIt*@tUYhop-((?+6SB^^VivSX&97=bnJ60-OI1cs^<0_;*R`_I*
z9mOL@@h)HJQFkWlxi9kR2Di94{ESL}3@>!38{*^{4F!4yB~Ff_LEl?Bs21rSb!#!8
z{0Om6m8cs8)t?np4bVqL7FB8NgHtuD9^Z}XtKrH@7)(RhjxVIye}wYLLn}4zIjA=1
zlvTdYJ+-xP<!e3cQ!2g`Es{K1qG`js-))XSF#BABY@Zu=>OE?2ATS-%I^T3I=x^2^
OT6<>vLz@hU`1dDLSRRG|

delta 1342
zcmZXU!EO^V6h)O$GAy7`k%ExAX`*ggIzscDOlFK&@DHd<BvzHWV8IuRSfj4YhamL_
zkk})Bf!|=oxptJ=gEY?A_uY5jeYPimH^0{3pH`LY9!{!PRrol6#;7-av*sE0&Dz>H
zHJ4ty6!77G{(k1dpZR&!?nAY>oLRVDysgZKyTxX<4PO`cmD`82`u1Iq%(hvhkRC(C
zBU@mxluf`v^}Fz+UfoRi4k?qVT*M)4QZGO$8%hNzW#=BQo_v~*9dk%N`s;}d^q#YO
zLIVa=4|3{4z<}YLtF<;wim(W=7?=&n3BlVT8(?4sWqbsgmFWl#3>nA`36pGrsnnE*
zytoBVSiT*j{AoX66-0FnImdKtJ~gd&(j&k#rO=^k76Lq}s&*u@_VftR;Z`RFs}^Kk
zXim<?N2=m&63w_CIS)ytWEnfE!_?!JprjMV+FIg5co`;%L?{a9ZCR@px@IhzP3U9?
zVy^uMqGm0g%hs$_Yr;v;l}!(KS}-}KiSAl3DJ86}m>jINefYe5`CNOT&Qw<2x$tFq
zQ73od+wx82Ec{-+7!k}BOlR#FMIoJs8B$Q09=r;0jFKu(GNqu>Qq;6D5!ajWLF08i
zEPZ69O0=KcCZ>AeFQh$PjXE<~R0UN_j?B?*#8u&_#<wh(oFf#0_(MjCYL#z?SaJcr
drPPjuUHEyrI;Xb2fOrwoq3OoOe-kQx_y_Et^5Osh

diff --git a/pkg/policy/parser/query_parser.go b/pkg/policy/parser/query_parser.go
index fb94f3a2573c6d6ebacf2689b0f89022a44144b7..c78c0f443566f1d8ef4734fa5fa7d662e82e9dc0 100644
GIT binary patch
delta 2975
zcmZWrU2GIp6wc26&hXO~S}cF<6l&SU73R(^-5KyFJb;pdDPTec4QXHlZE$JJq7>UM
z@<8OJp&XR(()LA+ltj!#sl;gXMdO3UH>*U75a5M`#5YXT@7z1n?zTyHXYO~-`Mz_`
zz4vVY`Xzj6Dtx0mq-8AcSjg7uH>J&7+H^8$Q&{p9Z@ILg)0uDs-3UipOjpd<ge_e}
zRz6%j1dP)CZg?d<3CAcLSy>GVH*JF11(C3Fv@X&ZVNYs{tStc&t%{N{Rt9a^1FyXD
z9}wXc9w6k0u=&ekYTpI}yWqht{IMPBA{V|X(4fbW8V&XR7g-lFDH&}_8ajAjMp8i-
zR`?Sc^~|U=sW-ZYBQHf;N-U_1?1ztoPZ_3?b5&-uj<Rlim3f+iMY;LqppCUaDTZEw
zvY5brQKD+0E&CwQ=?WK?uz>`ip|d<|*g1MP)_|ff#~QefFJs(+JF!OD4!KCirR9}4
zTYBOqTSnyKmRkG~f412#JPW1l9Q7=6%W~G#oM-{X&V(dCmPlgpQ9_b`kw{@NEiD&y
zHmuiIv(T%0vdQOeMb53*72Zp90!j>In0Q3z+-~WTYf4X=K?tN<QD#uLjBq%j$ykqw
zU51P}X2?_wS=vp5xu%WU5`y_qa;p%M15ZvJVgJa(z<{If2ycOOl>lF!a#aV%g)!~}
zlOhhzd_ZzoRd_PahpQCuF#r!2&kDyZxEy)1gKn@V00)%FX2zM<d}DoInDFQDM;-x{
z6=FFYh=b%{EU6p7Ab`qvCPdkex@;;G-@uR(VrQfogffqX3QRfA$KVwBHOf=!V(DM|
zSsAdoHVrJSFUfnR3@#_db7!_pRzWr{ZymA?8p>-IHNnwF5RVM@1j2(N(3kSU;!9_t
z1Q778R9X_j6vG}>k_Zb9!U6|p0e?A^0!&zt0ujf^KM4p6Ylc_~O46IdEw~2R0L96%
zI9*Q3hxhs35=LB^w+iP|SqXAZP?2pat6o@KKFcG*re%wt!%$X9az1RBJ5~hW139-j
z`PoJa-me*4=B<c?9MydMS)+`ci}eToELxINyL|7}jwpD}fs%4IlB_6}s~5ZrsBOl;
z0GP0zfn*(AKW_n^@<5d2MlfO{zY1R#l0P|oo#n_?X2C^C0}F#lRU>Dwn3o-=AR}aO
z&}|uRBfeBA$vxtcJ*U^Q?~JqJED;7f`_D^UqS$~+ZiL(AE#fMiFlwW*s>WtHrue$^
z1X4$k2QdE>K>|z=^X^oge4}nhp^)!0`|`z;eT5Td@o3%zLNynb#ib>gqTX{$=|WeG
zc6Xg$qP$P!i{-9M6MOSTX`$U8)RB2M;r-qf3dNK&$9q%VBjE}{x3Dn6_KW9g=}GS*
zI#L*sYbu;u6;)in7P{j*54LaJv+Xsyo3R%7?`hLY(RW2NzNgIQzx%c(@9FWdMq7@5
z>;2o?7_aKtfCTpzJB#_GW2FoV9av52(Txe8aWjofE?t@1lrnT(@7b`cvv}xea`(x6
zUw<IKc)UKAYfTyGZs%|V9UN>lRB<nw2TxJe_%o|=x%tt4QmKn$d$g^uQ`^{Tx-?n6
zIOqDV+fMcLC24wMUkE>L9re`FZ$(^{Ujtq1e@PP-eg4i03ZK478;7GrN9w5hd4v8u
z{W3l3Uq$YFQ<`H_en^C}bb06izW*L-iDx)ZU8ncA*VDs+_Jou5fzILj&?b63&_Y9l
z5AcRS+BR@D;mFGT2&dE@M=g>80km(>rRh?whT&bEUQ5f*ycncqUvKt4Jac7{=4Qwm
zPSZD|aXK{I0phQRQ=wLBf3wc}XSlj5iitVX^gLC+RZAa_t_ZobbxV>SjeZu!bfha|
z9n?Kx(9^Lr*0z@%KW)(Rn?Hf)?TP(#b@IH|e*H%yB2b;&zuWh&g)G<_DLlDd6N1_%
z_lE@iFmc}7_*G7i@NQDg`Zd&WWQjNWeaC_b?~sqgyfr^}84+9fWY>QiMLum)`!(D0
zKAEaBs1yI3-M;s!W@n_v)%!1KcGkOp|AdAvcRbvzWpFXZYiZy?s-~wee|SgXaQ;*Z
J3WLU=@jrdjp5_1m

delta 2407
zcmZWpU2GIp6wb`fc4ww6t=j4$wmWU1?KZ2-o!!})K_C)-j1rTY8ZBrE&!vIlPeM?;
zK&y!+BH>gYG-^rfgHM!9YSfef@qt7Wh{hL6mP8X0i9Be0B#7U+v%BnUli9s9-#zF1
zzH{!+?DfPS*Ak24it4!GgyN`lHPKT2wf38aU&>p;&RZS^CmM=!@B<)1zS8|fpK2P^
zrF9!_-r@<{p*>nQX_xZA4{3cGVg-Gw^=vQ=QOH|(1bC_glK4vqnVPrghPHkU&p}wY
zOraz##iG9C0PE~Y_Tb}CGSlY39b6UQqrhRa$zIHSm+T)g4di1gdZcy4#xN)b5Qt&2
zTFF*VhGCzrxMa6<yxf%FfL}0sBa0(zDZ)?;Wp1X5flTc<^m$7+SN20oH~g=(4D`lx
z3*4(F|J0X?x{>0XgQ<Z&)2J6*gwG;`8nue3i<Y9KN{ah=KedrnH|jm)=nvCgy^}u=
z>sid5)(83Hd!5;@>p3{8v%6R@JdNZo+|dR@=Dc8ZA!ouE?5X9HkXk|wywGrlSO$<!
zONK0>VzA6TW6-LnV8@l3y2anL%N$~3lO|`JHY1lNmvh4$C}YP)yHrYeAn^dOE<~}t
zpv!=diAMV#rhGW#r9`lUwZj`DezeEy!TimKf+?9yR^xLpLPQxas1yHH#OG~*pa&q{
z;`w0m@nZ{h70zZHV*?f)M?QHCpsa<187tSdq3NU0SRlTm!&hrE%W&mQ-QZ&pM0InG
z(ZfK1S145r=Pof4K!oM$`V0ioa`Or0v&~@`aGGP50(=Ju@j%6AqbkKocBIuv0FeMe
z?0`#wOQywZfFdyI=6iw2;usM&A`t9g;HwJ3fasTWXPIkhvLbB3^)$6Y+7PQi6ew`H
zN%jX73Y$xmmmV_sZipUS9*iRi4?}4=RN*3BN_QNnEoyCPgbfN@nyWRq^cv13)ik)`
z>WvKPI*+_WZI8s-PO{goFIPQrgba5eQMDDhVnV_Dq-IGrjsXY1cqrE^Z)n6ut1Oeb
z>CNrs1Be?QJCtWRF`^ROU3vBM7&I7{g(531DN%&RQRq8y5ar2*XVa`$U8V!FWvE&3
z1WVS5a1k?%-BO1nAX~MnO`PsDwuocFN6)usaq-FH%k<b*_=5u>S3>Sw#|b}be`_xd
zkG~&U2NfmUGVyVO)=i$Ge<yd)e{Wn2?;c60;qseSivHf+*5SE1(=aBV+I4jD^+CM8
zYvKmHHku)A%2s`s=7xIcm8q@tQ~3!xKlQCz$kEv=nKSR`^g(&M;*&W0INd6*sGdic
zj|<u{eNy-Q97qg<Ha(l6*%QOM7gT{Z%Fs(Q0c}0`n__dk;?U0NSMfhL-JcQ-X}6|_
z>C$nX+UYT+K%brHr?+SNHQ&pb^y216S^meFXV_F|y|<iJeV=Zg$*X=qYiJDA<CN2w
zj{X_Tgy+a?Qv&*G$fEs~O=QlOK)HSXNu@|fUK=F+>of&pX*xgui5j@{+`_0DlxSh0
zpax#JvT)2q^xROEPW}0fY75FP?o*ub*y3<2jhy>gaRFp$X?ZtwEgGa<7@?z!ABMkQ
z@C?mHJL%$3Z@BHsc&p~rzOMdy*i=PHa_+Bu2^aS&`&8l5<)<GBCvK`H{MYn^FX=~b
cZ=t&tBmCm_gbFw2oy}<3y1%y3^qq(P2Tghn!T<mO

diff --git a/pkg/policy/query.go b/pkg/policy/query.go
index 7fbdae5..9bf08ac 100644
--- a/pkg/policy/query.go
+++ b/pkg/policy/query.go
@@ -186,6 +186,10 @@ func (p *policyVisitor) VisitFilterExpr(ctx *parser.FilterExprContext) interface
 		return eCtx.Accept(p)
 	}
 
+	if inner := ctx.GetInner(); inner != nil {
+		return inner.Accept(p)
+	}
+
 	f := new(netmap.Filter)
 	op := operationFromString(ctx.GetOp().GetText())
 	f.SetOperation(op)
diff --git a/pkg/policy/query_test.go b/pkg/policy/query_test.go
index 2493edc..b7278d4 100644
--- a/pkg/policy/query_test.go
+++ b/pkg/policy/query_test.go
@@ -215,6 +215,30 @@ FILTER City EQ "SPB" AND SSD EQ true OR City EQ "SPB" AND Rating GE 5 AS SPBSSD`
 	require.EqualValues(t, expected, r)
 }
 
+func TestBrackets(t *testing.T) {
+	q := `REP 7 IN SPB
+SELECT 1 IN City FROM SPBSSD AS SPB
+FILTER ( City EQ "SPB" OR SSD EQ true ) AND (City EQ "SPB" OR Rating GE 5) AS SPBSSD`
+
+	expected := new(netmap.PlacementPolicy)
+	expected.SetReplicas([]*netmap.Replica{newReplica("SPB", 7)})
+	expected.SetSelectors([]*netmap.Selector{
+		newSelector(1, netmap.UnspecifiedClause, "City", "SPBSSD", "SPB"),
+	})
+	expected.SetFilters([]*netmap.Filter{
+		newFilter("SPBSSD", "", "", netmap.AND,
+			newFilter("", "", "", netmap.OR,
+				newFilter("", "City", "SPB", netmap.EQ),
+				newFilter("", "SSD", "true", netmap.EQ)),
+			newFilter("", "", "", netmap.OR,
+				newFilter("", "City", "SPB", netmap.EQ),
+				newFilter("", "Rating", "5", netmap.GE)))})
+
+	r, err := Parse(q)
+	require.NoError(t, err)
+	require.EqualValues(t, expected, r)
+}
+
 func TestValidation(t *testing.T) {
 	t.Run("MissingSelector", func(t *testing.T) {
 		q := `REP 3 IN RU`

From e78eb268a9ef41c41b541aec9972e254d40c5ca3 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <evgeniy@nspcc.ru>
Date: Fri, 21 May 2021 18:21:11 +0300
Subject: [PATCH 3/5] [#3] policy/test: remove debug print

---
 pkg/policy/encode_test.go | 2 --
 1 file changed, 2 deletions(-)

diff --git a/pkg/policy/encode_test.go b/pkg/policy/encode_test.go
index 10de5fe..d2bb716 100644
--- a/pkg/policy/encode_test.go
+++ b/pkg/policy/encode_test.go
@@ -1,7 +1,6 @@
 package policy_test
 
 import (
-	"fmt"
 	"strings"
 	"testing"
 
@@ -30,7 +29,6 @@ FILTER City EQ SPB AND SSD EQ true OR City EQ SPB AND Rating GE 5 AS SPBSSD`,
 		require.NoError(t, err)
 
 		got := policy.Encode(q)
-		fmt.Println(strings.Join(got, "\n"))
 		require.Equal(t, testCase, strings.Join(got, "\n"))
 	}
 }

From f5413e94b56e71801d03d88bb1502ac3cccb232d Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <evgeniy@nspcc.ru>
Date: Fri, 21 May 2021 18:29:44 +0300
Subject: [PATCH 4/5] [#3] policy/test: increase test coverage

Signed-off-by: Evgenii Stratonikov <evgeniy@nspcc.ru>
---
 pkg/policy/query_test.go | 34 +++++++++++++++++++++++-----------
 1 file changed, 23 insertions(+), 11 deletions(-)

diff --git a/pkg/policy/query_test.go b/pkg/policy/query_test.go
index b7278d4..9e27e67 100644
--- a/pkg/policy/query_test.go
+++ b/pkg/policy/query_test.go
@@ -3,6 +3,7 @@ package policy
 import (
 	"errors"
 	"fmt"
+	"math"
 	"testing"
 
 	"github.com/nspcc-dev/neofs-api-go/v2/netmap"
@@ -271,17 +272,28 @@ func TestValidation(t *testing.T) {
 		_, err := Parse(q)
 		require.Error(t, err)
 	})
-	t.Run("InvalidNumberInREP", func(t *testing.T) {
-		q := `REP 0`
-		_, err := Parse(q)
-		require.True(t, errors.Is(err, ErrSyntaxError), "got: %v", err)
-	})
-	t.Run("InvalidNumberInREP", func(t *testing.T) {
-		q := `REP 1 IN Good
-			  SELECT 0 IN City FROM *`
-		_, err := Parse(q)
-		require.True(t, errors.Is(err, ErrSyntaxError), "got: %v", err)
-	})
+}
+
+// Checks that an error is returned in cases when positive 32-bit integer is expected.
+func TestInvalidNumbers(t *testing.T) {
+	tmpls := []string{
+		"REP %d",
+		"REP 1 CBF %d",
+		"REP 1 SELECT %d FROM *",
+	}
+	for i := range tmpls {
+		zero := fmt.Sprintf(tmpls[i], 0)
+		t.Run(zero, func(t *testing.T) {
+			_, err := Parse(zero)
+			require.Error(t, err)
+		})
+
+		big := fmt.Sprintf(tmpls[i], int64(math.MaxUint32)+1)
+		t.Run(big, func(t *testing.T) {
+			_, err := Parse(big)
+			require.Error(t, err)
+		})
+	}
 }
 
 func TestFilterStringSymbols(t *testing.T) {

From 4a0ed2f6ea1c629e518cccee19b01a2962820234 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <evgeniy@nspcc.ru>
Date: Fri, 21 May 2021 19:04:15 +0300
Subject: [PATCH 5/5] [#3] policy: update doc.go

Signed-off-by: Evgenii Stratonikov <evgeniy@nspcc.ru>
---
 pkg/policy/doc.go | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/pkg/policy/doc.go b/pkg/policy/doc.go
index 4e10a1b..cceebca 100644
--- a/pkg/policy/doc.go
+++ b/pkg/policy/doc.go
@@ -3,15 +3,17 @@
 //
 // Current limitations:
 // 1. Filters must be defined before they are used.
-// 	This requirement may be relaxed in future.
+//    This requirement may be relaxed in future.
+// 2. Keywords are key-sensitive. This can be changed if necessary
+//    https://github.com/antlr/antlr4/blob/master/doc/case-insensitive-lexing.md .
 //
 // Example query:
-// REP 1 in SPB
-// REP 2 in Americas
+// REP 1 IN SPB
+// REP 2 IN Americas
 // CBF 4
-// SELECT 1 Node IN City FROM SPBSSD AS SPB
-// SELECT 2 Node IN SAME City FROM Americas AS Americas
+// SELECT 1 IN City FROM SPBSSD AS SPB
+// SELECT 2 IN SAME City FROM Americas AS Americas
 // FILTER SSD EQ true AS IsSSD
-// FILTER @IsSSD AND Country eq "RU" AND City eq "St.Petersburg" AS SPBSSD
-// FILTER 'Continent' == 'North America' OR Continent == 'South America' AS Americas
+// FILTER @IsSSD AND Country EQ "RU" AND City EQ "St.Petersburg" AS SPBSSD
+// FILTER 'Continent' EQ 'North America' OR Continent EQ 'South America' AS Americas
 package policy