@arcadiasystems/morse-sdk 0.1.0

package/dist/wallets/wallet-standard-signer.js

@@ -0,0 +1,207 @@
+/**
+ * `Signer` subclass that delegates signing to a wallet-standard wallet
+ * (Suiet, Sui Wallet, Slush, etc.) via the dapp-kit hooks `useSignTransaction`
+ * and `useSignPersonalMessage`. The user's private key never leaves the
+ * wallet.
+ *
+ * Use this when passing a signer to libraries that accept the Sui
+ * `@mysten/sui/cryptography` `Signer` abstract — `@mysten/walrus`'s
+ * `WalrusClient.writeBlob({ signer })` and `@mysten/seal`'s
+ * `SessionKey.create({ signer })`.
+ *
+ * Methods called by Walrus on the signer: `toSuiAddress`,
+ * `signAndExecuteTransaction({ transaction, client })`. Methods called by
+ * Seal: `getPublicKey().toSuiAddress()`, `signPersonalMessage(bytes)`. The
+ * `sign(bytes)` raw-byte primitive is intentionally not implemented;
+ * wallets do not expose raw signing for security reasons. If a future
+ * library version invokes `sign(bytes)` or `signTransaction(bytes)`
+ * directly (raw-byte form, not the override), this signer throws.
+ */
+import { Signer, } from "@mysten/sui/cryptography";
+import { Ed25519PublicKey } from "@mysten/sui/keypairs/ed25519";
+import { PasskeyPublicKey } from "@mysten/sui/keypairs/passkey";
+import { Secp256k1PublicKey } from "@mysten/sui/keypairs/secp256k1";
+import { Secp256r1PublicKey } from "@mysten/sui/keypairs/secp256r1";
+import { normalizeSuiAddress } from "@mysten/sui/utils";
+import { ZkLoginPublicIdentifier } from "@mysten/sui/zklogin";
+import { ConfigurationError } from "../errors.js";
+/**
+ * `Signer` backed by wallet-standard callbacks. Supplies methods Walrus and
+ * Seal call; throws on raw-byte signing, which wallets do not expose.
+ */
+export class WalletStandardSigner extends Signer {
+    #publicKey;
+    #keyScheme;
+    #signTransaction;
+    #signPersonalMessage;
+    constructor(options) {
+        super();
+        this.#publicKey = options.publicKey;
+        this.#keyScheme = options.keyScheme;
+        this.#signTransaction = options.signTransaction;
+        this.#signPersonalMessage = options.signPersonalMessage;
+    }
+    /**
+     * Build a signer from a wallet-standard `WalletAccount` plus the wallet's
+     * `signTransaction` / `signPersonalMessage` callbacks. Tries every plausible
+     * interpretation of `account.publicKey` and returns the one whose derived
+     * address matches `account.address`.
+     *
+     * Wallet-standard does not mandate a single encoding for `publicKey`:
+     * Suiet emits raw bytes (e.g. 32 for Ed25519), Slush emits Sui's canonical
+     * with-flag form (e.g. `0x00 || 32-byte raw` for Ed25519). Both are
+     * accepted; address-match disambiguates.
+     *
+     * Supported schemes: ED25519, Secp256k1, Secp256r1, Passkey (raw or
+     * flag-prefixed), and ZkLogin (variable-length identifier of the form
+     * `[1 byte iss-len][iss bytes][32 byte addressSeed]`). MultiSig is
+     * refused.
+     *
+     * Caveat for ZkLogin: the dispatch is structurally correct but
+     * end-to-end behavior against `@mysten/walrus`'s `register_blob` /
+     * `certify_blob` and `@mysten/seal`'s `SessionKey` verification has
+     * not been smoke-tested. If your users see Seal `decrypt-failed` or
+     * Walrus signature errors on zkLogin accounts, fall back to a
+     * keypair account.
+     *
+     * @throws {ConfigurationError} If the account uses multisig, or if no
+     *   candidate scheme produces an address matching `account.address`.
+     */
+    static fromAccount(account, callbacks) {
+        const { publicKey, keyScheme } = decodeAccountPublicKey(account);
+        return new WalletStandardSigner({
+            publicKey,
+            keyScheme,
+            signTransaction: callbacks.signTransaction,
+            signPersonalMessage: callbacks.signPersonalMessage,
+        });
+    }
+    getKeyScheme() {
+        return this.#keyScheme;
+    }
+    getPublicKey() {
+        return this.#publicKey;
+    }
+    sign(_bytes) {
+        throw new ConfigurationError("WalletStandardSigner does not support raw-byte signing. Wallet-standard wallets only sign transactions and personal messages.");
+    }
+    async signPersonalMessage(message) {
+        return this.#signPersonalMessage({ message });
+    }
+    /**
+     * Sign and submit a transaction. The wallet pops up to confirm; on approval
+     * it returns canonical BCS bytes plus signature. Those bytes (not any
+     * locally-built bytes) are submitted via the supplied client so the
+     * signature validates against what the wallet actually signed.
+     */
+    async signAndExecuteTransaction({ transaction, client, }) {
+        transaction.setSenderIfNotSet(this.toSuiAddress());
+        const { bytes, signature } = await this.#signTransaction({ transaction });
+        return client.core.executeTransaction({
+            transaction: fromBase64(bytes),
+            signatures: [signature],
+            include: { transaction: true, effects: true },
+        });
+    }
+}
+function fromBase64(value) {
+    const binary = atob(value);
+    const out = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1) {
+        out[i] = binary.charCodeAt(i);
+    }
+    return out;
+}
+/**
+ * Pick the `PublicKey` subclass whose Sui address matches `account.address`.
+ * Wallet-standard does not mandate a single encoding for `account.publicKey`:
+ * Suiet emits the raw key bytes; Slush emits Sui's canonical "with-flag" form
+ * (`flagByte || rawKey`). Both are valid, so the decoder tries every plausible
+ * (length, leading-byte) interpretation and picks the one whose address
+ * derivation matches the wallet-reported address. Address-match is the only
+ * reliable disambiguator because the scheme flag folds into the address hash.
+ */
+function decodeAccountPublicKey(account) {
+    const bytes = new Uint8Array(Array.from(account.publicKey));
+    const expected = normalizeSuiAddress(account.address);
+    const candidates = candidateInterpretations(bytes);
+    for (const { scheme, build } of candidates) {
+        let publicKey;
+        try {
+            publicKey = build();
+        }
+        catch {
+            continue;
+        }
+        if (normalizeSuiAddress(publicKey.toSuiAddress()) === expected) {
+            return { publicKey, keyScheme: scheme };
+        }
+    }
+    // ZkLogin pub identifier is `[1 byte iss-len][iss bytes][32 byte addressSeed]`,
+    // always > 33 bytes. `fromBytes({ address })` auto-tries non-legacy then
+    // legacy address derivation and throws on mismatch; treat throw as
+    // "not zkLogin" and fall through to refusal so multisig and garbage
+    // bytes don't get silently labeled as zkLogin.
+    if (bytes.length > 33) {
+        try {
+            const publicKey = ZkLoginPublicIdentifier.fromBytes(bytes, {
+                address: account.address,
+            });
+            return { publicKey, keyScheme: "ZkLogin" };
+        }
+        catch {
+            // Fall through.
+        }
+    }
+    throw new ConfigurationError(`WalletStandardSigner: account.publicKey is ${bytes.length} bytes and matches neither a raw nor a flag-prefixed (Sui canonical) form of Ed25519, Secp256k1, Secp256r1, or Passkey, nor a zkLogin identifier, for address ${account.address}. This suggests a multisig or unknown signature scheme; implement a custom Signer.`);
+}
+/**
+ * Build the list of (scheme, public-key-constructor) pairs to try against
+ * `account.address`. Covers raw bytes (Suiet-style) and flag-prefixed bytes
+ * (Sui canonical / Slush-style). Order is stable but irrelevant for
+ * correctness — address-match disambiguates.
+ */
+function candidateInterpretations(bytes) {
+    const list = [];
+    if (bytes.length === 32) {
+        list.push({
+            scheme: "ED25519",
+            build: () => new Ed25519PublicKey(bytes),
+        });
+    }
+    if (bytes.length === 33) {
+        list.push({ scheme: "Secp256k1", build: () => new Secp256k1PublicKey(bytes) }, { scheme: "Secp256r1", build: () => new Secp256r1PublicKey(bytes) }, { scheme: "Passkey", build: () => new PasskeyPublicKey(bytes) });
+        // Sui canonical Ed25519 with-flag: 0x00 || 32-byte raw key.
+        if (bytes[0] === 0x00) {
+            const inner = bytes.slice(1);
+            list.push({
+                scheme: "ED25519",
+                build: () => new Ed25519PublicKey(inner),
+            });
+        }
+    }
+    if (bytes.length === 34) {
+        const inner = bytes.slice(1);
+        // Sui canonical with-flag forms: flag || 33-byte compressed point.
+        if (bytes[0] === 0x01) {
+            list.push({
+                scheme: "Secp256k1",
+                build: () => new Secp256k1PublicKey(inner),
+            });
+        }
+        if (bytes[0] === 0x02) {
+            list.push({
+                scheme: "Secp256r1",
+                build: () => new Secp256r1PublicKey(inner),
+            });
+        }
+        if (bytes[0] === 0x06) {
+            list.push({
+                scheme: "Passkey",
+                build: () => new PasskeyPublicKey(inner),
+            });
+        }
+    }
+    return list;
+}
+//# sourceMappingURL=wallet-standard-signer.js.map

package/dist/wallets/wallet-standard-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-standard-signer.js","sourceRoot":"","sources":["../../src/wallets/wallet-standard-signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAIN,MAAM,GACN,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AA4ClD;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,MAAM;IACtC,UAAU,CAAY;IACtB,UAAU,CAAkB;IAC5B,gBAAgB,CAAwB;IACxC,oBAAoB,CAA4B;IAEzD,YAAY,OAAoC;QAC/C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;QAChD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,MAAM,CAAC,WAAW,CACjB,OAA8B,EAC9B,SAAwC;QAExC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACjE,OAAO,IAAI,oBAAoB,CAAC;YAC/B,SAAS;YACT,SAAS;YACT,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;SAClD,CAAC,CAAC;IACJ,CAAC;IAEQ,YAAY;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAEQ,YAAY;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAEQ,IAAI,CAAC,MAAkB;QAC/B,MAAM,IAAI,kBAAkB,CAC3B,+HAA+H,CAC/H,CAAC;IACH,CAAC;IAEQ,KAAK,CAAC,mBAAmB,CACjC,OAAmB;QAEnB,OAAO,IAAI,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACM,KAAK,CAAC,yBAAyB,CAAC,EACxC,WAAW,EACX,MAAM,GAIN;QAMA,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACrC,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC;YAC9B,UAAU,EAAE,CAAC,SAAS,CAAC;YACvB,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SAC7C,CAAC,CAAC;IACJ,CAAC;CACD;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAOD;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAC9B,OAA8B;IAE9B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACnD,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,SAAoB,CAAC;QACzB,IAAI,CAAC;YACJ,SAAS,GAAG,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACR,SAAS;QACV,CAAC;QACD,IAAI,mBAAmB,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;IACF,CAAC;IAED,gFAAgF;IAChF,yEAAyE;IACzE,mEAAmE;IACnE,oEAAoE;IACpE,+CAA+C;IAC/C,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,EAAE;gBAC1D,OAAO,EAAE,OAAO,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACR,gBAAgB;QACjB,CAAC;IACF,CAAC;IAED,MAAM,IAAI,kBAAkB,CAC3B,8CAA8C,KAAK,CAAC,MAAM,iKAAiK,OAAO,CAAC,OAAO,oFAAoF,CAC9T,CAAC;AACH,CAAC;AAOD;;;;;GAKG;AACH,SAAS,wBAAwB,CAChC,KAAiB;IAEjB,MAAM,IAAI,GAAsB,EAAE,CAAC;IAEnC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACnE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACnE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAC/D,CAAC;QACF,4DAA4D;QAC5D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC;aACxC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,mEAAmE;QACnE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC;aACxC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/walrus/adapter.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Write-only Walrus adapter interface. Reads are deferred to entry-fetch in
+ * a later phase; this surface intentionally exposes only what entry-write
+ * paths need.
+ */
+import type { Transaction } from "@mysten/sui/transactions";
+import type { BlobObjectId, QuiltPatchId, WalrusBlobId } from "../types.js";
+/** Storage parameters shared by blob and quilt uploads. */
+export interface WalrusUploadCommonOptions {
+    /** Number of Walrus epochs the blob should be stored for. */
+    readonly epochs: number;
+    /** Whether the resulting blob object is deletable. The Move layer rejects non-deletable blobs. */
+    readonly deletable: boolean;
+    /** Address that will own the resulting Sui blob object; defaults to the signer. */
+    readonly owner?: string;
+    /** Cancellation signal forwarded to the underlying network layer. */
+    readonly signal?: AbortSignal;
+}
+/** Options for `uploadBlob`. */
+export type UploadBlobOptions = WalrusUploadCommonOptions;
+/** One blob to include in a quilt upload. */
+export interface QuiltPatchInput {
+    /** Bytes for this patch. */
+    readonly contents: Uint8Array;
+    /** Identifier unique within the quilt; surfaced back in `UploadQuiltResult.patches[].identifier`. */
+    readonly identifier: string;
+    /** Optional key-value tags attached to the patch. */
+    readonly tags?: Readonly<Record<string, string>>;
+}
+/** Options for `uploadQuilt`. */
+export type UploadQuiltOptions = WalrusUploadCommonOptions;
+/** Result of `uploadBlob`. */
+export interface UploadBlobResult {
+    readonly blobId: WalrusBlobId;
+    readonly blobObjectId: BlobObjectId;
+}
+/** One patch in `UploadQuiltResult`. */
+export interface UploadQuiltPatch {
+    readonly identifier: string;
+    readonly patchId: QuiltPatchId;
+    readonly startIndex: number;
+    readonly endIndex: number;
+}
+/** Result of `uploadQuilt`. */
+export interface UploadQuiltResult {
+    readonly blobId: WalrusBlobId;
+    readonly blobObjectId: BlobObjectId;
+    readonly patches: readonly UploadQuiltPatch[];
+}
+/**
+ * Write-only Walrus client. Implementations: `DefaultWalrusWriteAdapter`
+ * (wraps `@mysten/walrus`); user-supplied adapters can substitute for tests
+ * or alternative storage backends. Errors at the boundary normalize to
+ * `TransportError` (network, IO) or `ValidationError` (malformed input).
+ */
+export interface WalrusWriteAdapter {
+    uploadBlob(data: Uint8Array, options: UploadBlobOptions): Promise<UploadBlobResult>;
+    uploadQuilt(patches: readonly QuiltPatchInput[], options: UploadQuiltOptions): Promise<UploadQuiltResult>;
+}
+/** Result of `WalrusFlowCapable.startBlobUpload`. */
+export interface StartBlobUploadResult {
+    readonly blobObjectId: BlobObjectId;
+    readonly blobId: WalrusBlobId;
+    /**
+     * `Transaction` already containing the `walrus::blob::certify_blob` move
+     * call. Append your downstream calls (e.g. `add_entry_to_collection`) and
+     * submit the same `Transaction`.
+     */
+    readonly certifyTransaction: Transaction;
+}
+/**
+ * Optional capability layered on top of `WalrusWriteAdapter`. Adapters that
+ * support driving Walrus's `writeBlobFlow` step-by-step can implement this
+ * to enable single-PTB ops like `addEntryFromBytes` / `addEncryptedEntryFromBytes`,
+ * which combine `certify_blob` with downstream contract calls in one wallet
+ * popup. Adapters without this capability fall back to the standard 2- or
+ * 3-popup paths via `uploadBlob` + downstream ops.
+ */
+export interface WalrusFlowCapable {
+    /**
+     * Register and upload a blob without certifying it on-chain. Returns
+     * the blob's Sui object id, content id, and the certify `Transaction`.
+     * The caller appends further move calls to `certifyTransaction` and
+     * submits once, combining certify + downstream ops into a single
+     * wallet popup.
+     */
+    startBlobUpload(data: Uint8Array, options: UploadBlobOptions): Promise<StartBlobUploadResult>;
+}
+/** Type guard for the optional flow capability. */
+export declare function isWalrusFlowCapable(walrus: WalrusWriteAdapter): walrus is WalrusWriteAdapter & WalrusFlowCapable;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/walrus/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/walrus/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE5E,2DAA2D;AAC3D,MAAM,WAAW,yBAAyB;IACzC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kGAAkG;IAClG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,gCAAgC;AAChC,MAAM,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC/B,4BAA4B;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,qGAAqG;IACrG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED,iCAAiC;AACjC,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAE3D,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC;AAED,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AAED,+BAA+B;AAC/B,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,UAAU,CACT,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,iBAAiB,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,WAAW,CACV,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC9B;AAED,qDAAqD;AACrD,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IACjC;;;;;;OAMG;IACH,eAAe,CACd,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,iBAAiB,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAClC;AAED,mDAAmD;AACnD,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,kBAAkB,GACxB,MAAM,IAAI,kBAAkB,GAAG,iBAAiB,CAKlD"}

package/dist/walrus/adapter.js

@@ -0,0 +1,11 @@
+/**
+ * Write-only Walrus adapter interface. Reads are deferred to entry-fetch in
+ * a later phase; this surface intentionally exposes only what entry-write
+ * paths need.
+ */
+/** Type guard for the optional flow capability. */
+export function isWalrusFlowCapable(walrus) {
+    return (typeof walrus
+        .startBlobUpload === "function");
+}
+//# sourceMappingURL=adapter.js.map

package/dist/walrus/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/walrus/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA0GH,mDAAmD;AACnD,MAAM,UAAU,mBAAmB,CAClC,MAA0B;IAE1B,OAAO,CACN,OAAQ,MAA0D;SAChE,eAAe,KAAK,UAAU,CAChC,CAAC;AACH,CAAC"}

package/dist/walrus/default-adapter.d.ts

@@ -0,0 +1,104 @@
+/**
+ * `WalrusWriteAdapter` implementation backed by `@mysten/walrus`. Bind a
+ * `WalrusClient` to a Sui `Signer` once, then call `uploadBlob` /
+ * `uploadQuilt` per write. Read paths live elsewhere.
+ */
+import type { Signer } from "@mysten/sui/cryptography";
+import { type WalrusClientConfig, type WriteBlobFlow } from "@mysten/walrus";
+import type { QuiltPatchInput, StartBlobUploadResult, UploadBlobOptions, UploadBlobResult, UploadQuiltOptions, UploadQuiltResult, WalrusFlowCapable, WalrusWriteAdapter } from "./adapter.js";
+/**
+ * Narrow structural slice of `WalrusClient` used by the adapter. Internal
+ * to the SDK; consumers should pass a real `WalrusClient` (or a structural
+ * mock in tests) without importing this name. Mutable arrays match the
+ * upstream `@mysten/walrus` types so the constructor cast is single-step.
+ */
+interface WalrusWriteClient {
+    writeBlob(args: {
+        blob: Uint8Array;
+        deletable: boolean;
+        epochs: number;
+        signer: Signer;
+        owner?: string;
+        signal?: AbortSignal;
+    }): Promise<{
+        blobId: string;
+        blobObject: {
+            id: string;
+        };
+    }>;
+    writeQuilt(args: {
+        blobs: Array<{
+            contents: Uint8Array;
+            identifier: string;
+            tags?: Record<string, string>;
+        }>;
+        deletable: boolean;
+        epochs: number;
+        signer: Signer;
+        owner?: string;
+        signal?: AbortSignal;
+    }): Promise<{
+        blobId: string;
+        blobObject: {
+            id: string;
+        };
+        index: {
+            patches: Array<{
+                patchId: string;
+                startIndex: number;
+                endIndex: number;
+                identifier: string;
+            }>;
+        };
+    }>;
+    writeBlobFlow(options: {
+        blob: Uint8Array;
+    }): WriteBlobFlow;
+}
+/** Construction options for `DefaultWalrusWriteAdapter`. */
+export interface DefaultWalrusWriteAdapterOptions {
+    readonly client: WalrusWriteClient;
+    readonly signer: Signer;
+}
+/** Convenience options for `DefaultWalrusWriteAdapter.fromConfig`. */
+export type WalrusAdapterConfig = WalrusClientConfig;
+/** Default `WalrusWriteAdapter` wrapping `@mysten/walrus`. */
+export declare class DefaultWalrusWriteAdapter implements WalrusWriteAdapter, WalrusFlowCapable {
+    private readonly client;
+    private readonly signer;
+    constructor(options: DefaultWalrusWriteAdapterOptions);
+    /**
+     * Build an adapter from a `WalrusClientConfig` and a signer. Equivalent
+     * to constructing the `WalrusClient` yourself and passing it in.
+     */
+    static fromConfig(config: WalrusAdapterConfig, signer: Signer): DefaultWalrusWriteAdapter;
+    /**
+     * Upload a blob to Walrus end-to-end (register + upload + certify) in 2
+     * wallet popups, returning the certified blob's content id and Sui object
+     * id. For the common "upload then add as a new entry" flow, prefer
+     * `addEntryFromBytes`, which composes upload with `add_entry` into the
+     * same 2 popups. Use this when reusing a blob across multiple entries,
+     * pre-uploading on a server, or otherwise decoupling upload from entry
+     * creation.
+     */
+    uploadBlob(data: Uint8Array, options: UploadBlobOptions): Promise<UploadBlobResult>;
+    /**
+     * Register and upload a blob without certifying it on-chain. Returns the
+     * blob's Sui object id, content id, and the certify `Transaction`. The
+     * caller is expected to append further move calls (e.g.
+     * `add_entry_to_collection`) to `certifyTransaction` and submit once,
+     * combining certify + downstream ops into a single wallet popup.
+     *
+     * The first wallet popup (register_blob) happens inside this call. The
+     * second popup is whoever submits `certifyTransaction`.
+     *
+     * Failure modes:
+     *   - register fails -> throws `TransportError` with the underlying cause; nothing was uploaded
+     *   - off-chain upload fails after register -> throws `TransportError`; the blob is registered but unuploaded (will eventually expire)
+     *   - caller decides not to submit `certifyTransaction` -> blob remains registered+uploaded but uncertified; storage releases on registration expiry
+     */
+    startBlobUpload(data: Uint8Array, options: UploadBlobOptions): Promise<StartBlobUploadResult>;
+    uploadQuilt(patches: readonly QuiltPatchInput[], options: UploadQuiltOptions): Promise<UploadQuiltResult>;
+}
+export {};
+//# sourceMappingURL=default-adapter.d.ts.map

package/dist/walrus/default-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-adapter.d.ts","sourceRoot":"","sources":["../../src/walrus/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAGN,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAElB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EACX,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAElB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,cAAc,CAAC;AAGtB;;;;;GAKG;AACH,UAAU,iBAAiB;IAC1B,SAAS,CAAC,IAAI,EAAE;QACf,IAAI,EAAE,UAAU,CAAC;QACjB,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;KACrB,GAAG,OAAO,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,EAAE;QAChB,KAAK,EAAE,KAAK,CAAC;YACZ,QAAQ,EAAE,UAAU,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC;YACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC9B,CAAC,CAAC;QACH,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;KACrB,GAAG,OAAO,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,KAAK,EAAE;YACN,OAAO,EAAE,KAAK,CAAC;gBACd,OAAO,EAAE,MAAM,CAAC;gBAChB,UAAU,EAAE,MAAM,CAAC;gBACnB,QAAQ,EAAE,MAAM,CAAC;gBACjB,UAAU,EAAE,MAAM,CAAC;aACnB,CAAC,CAAC;SACH,CAAC;KACF,CAAC,CAAC;IACH,aAAa,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,aAAa,CAAC;CAC5D;AAED,4DAA4D;AAC5D,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,sEAAsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAErD,8DAA8D;AAC9D,qBAAa,yBACZ,YAAW,kBAAkB,EAAE,iBAAiB;IAEhD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,OAAO,EAAE,gCAAgC;IAKrD;;;OAGG;IACH,MAAM,CAAC,UAAU,CAChB,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,MAAM,GACZ,yBAAyB;IAO5B;;;;;;;;OAQG;IACG,UAAU,CACf,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,iBAAiB,GACxB,OAAO,CAAC,gBAAgB,CAAC;IAkB5B;;;;;;;;;;;;;;OAcG;IACG,eAAe,CACpB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,iBAAiB,GACxB,OAAO,CAAC,qBAAqB,CAAC;IA4B3B,WAAW,CAChB,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC;CAuC7B"}

package/dist/walrus/default-adapter.js

@@ -0,0 +1,146 @@
+/**
+ * `WalrusWriteAdapter` implementation backed by `@mysten/walrus`. Bind a
+ * `WalrusClient` to a Sui `Signer` once, then call `uploadBlob` /
+ * `uploadQuilt` per write. Read paths live elsewhere.
+ */
+import { UserAbortError, WalrusClient, } from "@mysten/walrus";
+import { toBlobObjectId, toWalrusBlobId } from "../codecs.js";
+import { TransportError, ValidationError } from "../errors.js";
+import { quiltPatchIdFromString } from "./quilt-patch-id.js";
+/** Default `WalrusWriteAdapter` wrapping `@mysten/walrus`. */
+export class DefaultWalrusWriteAdapter {
+    client;
+    signer;
+    constructor(options) {
+        this.client = options.client;
+        this.signer = options.signer;
+    }
+    /**
+     * Build an adapter from a `WalrusClientConfig` and a signer. Equivalent
+     * to constructing the `WalrusClient` yourself and passing it in.
+     */
+    static fromConfig(config, signer) {
+        return new DefaultWalrusWriteAdapter({
+            client: new WalrusClient(config),
+            signer,
+        });
+    }
+    /**
+     * Upload a blob to Walrus end-to-end (register + upload + certify) in 2
+     * wallet popups, returning the certified blob's content id and Sui object
+     * id. For the common "upload then add as a new entry" flow, prefer
+     * `addEntryFromBytes`, which composes upload with `add_entry` into the
+     * same 2 popups. Use this when reusing a blob across multiple entries,
+     * pre-uploading on a server, or otherwise decoupling upload from entry
+     * creation.
+     */
+    async uploadBlob(data, options) {
+        const result = await runWalrusCall(() => this.client.writeBlob({
+            blob: data,
+            deletable: options.deletable,
+            epochs: options.epochs,
+            signer: this.signer,
+            ...(options.owner === undefined ? {} : { owner: options.owner }),
+            ...(options.signal === undefined ? {} : { signal: options.signal }),
+        }));
+        return {
+            blobId: toWalrusBlobId(result.blobId),
+            blobObjectId: toBlobObjectId(result.blobObject.id),
+        };
+    }
+    /**
+     * Register and upload a blob without certifying it on-chain. Returns the
+     * blob's Sui object id, content id, and the certify `Transaction`. The
+     * caller is expected to append further move calls (e.g.
+     * `add_entry_to_collection`) to `certifyTransaction` and submit once,
+     * combining certify + downstream ops into a single wallet popup.
+     *
+     * The first wallet popup (register_blob) happens inside this call. The
+     * second popup is whoever submits `certifyTransaction`.
+     *
+     * Failure modes:
+     *   - register fails -> throws `TransportError` with the underlying cause; nothing was uploaded
+     *   - off-chain upload fails after register -> throws `TransportError`; the blob is registered but unuploaded (will eventually expire)
+     *   - caller decides not to submit `certifyTransaction` -> blob remains registered+uploaded but uncertified; storage releases on registration expiry
+     */
+    async startBlobUpload(data, options) {
+        return runWalrusCall(async () => {
+            const flow = this.client.writeBlobFlow({ blob: data });
+            await flow.encode();
+            const registered = await flow.executeRegister({
+                epochs: options.epochs,
+                deletable: options.deletable,
+                signer: this.signer,
+                owner: options.owner ?? this.signer.toSuiAddress(),
+            });
+            // Walrus's writeBlobFlow.upload() requires the register tx digest
+            // (or a resume.blobObjectId from a previous session) to know which
+            // on-chain blob the off-chain bytes belong to. Mirrors Walrus's own
+            // `run()` implementation; without this `upload()` throws
+            // "Either resume.blobObjectId or upload digest must be provided".
+            await flow.upload({
+                digest: registered.txDigest,
+                ...(options.signal === undefined ? {} : { signal: options.signal }),
+            });
+            const certifyTransaction = flow.certify();
+            return {
+                blobObjectId: toBlobObjectId(registered.blobObjectId),
+                blobId: toWalrusBlobId(registered.blobId),
+                certifyTransaction,
+            };
+        });
+    }
+    async uploadQuilt(patches, options) {
+        if (patches.length === 0) {
+            throw new ValidationError("uploadQuilt requires at least one patch", "patches");
+        }
+        const result = await runWalrusCall(() => this.client.writeQuilt({
+            blobs: patches.map((p) => ({
+                contents: p.contents,
+                identifier: p.identifier,
+                ...(p.tags === undefined ? {} : { tags: { ...p.tags } }),
+            })),
+            deletable: options.deletable,
+            epochs: options.epochs,
+            signer: this.signer,
+            ...(options.owner === undefined ? {} : { owner: options.owner }),
+            ...(options.signal === undefined ? {} : { signal: options.signal }),
+        }));
+        const blobId = toWalrusBlobId(result.blobId);
+        const decoded = result.index.patches.map((p) => {
+            const patchId = quiltPatchIdFromString(p.patchId);
+            return {
+                identifier: p.identifier,
+                patchId,
+                startIndex: p.startIndex,
+                endIndex: p.endIndex,
+            };
+        });
+        return {
+            blobId,
+            blobObjectId: toBlobObjectId(result.blobObject.id),
+            patches: decoded,
+        };
+    }
+}
+async function runWalrusCall(call) {
+    try {
+        return await call();
+    }
+    catch (cause) {
+        if (cause instanceof ValidationError || cause instanceof TransportError) {
+            throw cause;
+        }
+        if (cause instanceof UserAbortError) {
+            throw new TransportError("Walrus call aborted by caller", { cause });
+        }
+        throw new TransportError(walrusErrorMessage(cause), { cause });
+    }
+}
+function walrusErrorMessage(cause) {
+    if (cause instanceof Error) {
+        return `Walrus call failed: ${cause.message}`;
+    }
+    return "Walrus call failed";
+}
+//# sourceMappingURL=default-adapter.js.map

package/dist/walrus/default-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-adapter.js","sourceRoot":"","sources":["../../src/walrus/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACN,cAAc,EACd,YAAY,GAIZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAa/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAuD7D,8DAA8D;AAC9D,MAAM,OAAO,yBAAyB;IAGpB,MAAM,CAAoB;IAC1B,MAAM,CAAS;IAEhC,YAAY,OAAyC;QACpD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,UAAU,CAChB,MAA2B,EAC3B,MAAc;QAEd,OAAO,IAAI,yBAAyB,CAAC;YACpC,MAAM,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC;YAChC,MAAM;SACN,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CACf,IAAgB,EAChB,OAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,CACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YACrB,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACnE,CAAC,CACF,CAAC;QAEF,OAAO;YACN,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;SAClD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,eAAe,CACpB,IAAgB,EAChB,OAA0B;QAE1B,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,UAAU,GAA4B,MAAM,IAAI,CAAC,eAAe,CAAC;gBACtE,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;aAClD,CAAC,CAAC;YACH,kEAAkE;YAClE,mEAAmE;YACnE,oEAAoE;YACpE,yDAAyD;YACzD,kEAAkE;YAClE,MAAM,IAAI,CAAC,MAAM,CAAC;gBACjB,MAAM,EAAE,UAAU,CAAC,QAAQ;gBAC3B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,OAAO;gBACN,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC;gBACrD,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC;gBACzC,kBAAkB;aAClB,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,OAAmC,EACnC,OAA2B;QAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CACxB,yCAAyC,EACzC,SAAS,CACT,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,CACvC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YACtB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACnE,CAAC,CACF,CAAC;QAEF,MAAM,MAAM,GAAiB,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAuB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAClE,MAAM,OAAO,GAAiB,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO;gBACN,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,OAAO;gBACP,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACpB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO;YACN,MAAM;YACN,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,OAAO;SAChB,CAAC;IACH,CAAC;CACD;AAED,KAAK,UAAU,aAAa,CAAI,IAAsB;IACrD,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACzE,MAAM,KAAK,CAAC;QACb,CAAC;QACD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACrC,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC7B,CAAC"}