@arcadiasystems/morse-sdk 0.3.0 → 0.4.0

package/dist/read/recipient-files-reader.js

@@ -0,0 +1,170 @@
+/**
+ * Live object read for `RecipientFile`. Parses the shared object's JSON
+ * representation into the typed `RecipientFile` record.
+ *
+ * RecipientFile was introduced in the v3 contract upgrade; both the type
+ * filter and the move-call target paths use `config.packageId` (current
+ * published-at), not `originalPackageId` (publication-modules genesis).
+ */
+import { toBlobObjectId, toRecipientFileId, toSuiAddress, toWalrusBlobId, } from "../codecs.js";
+import { NotFoundError, TransportError, ValidationError } from "../errors.js";
+/** RPC-backed implementation. */
+export class RpcRecipientFilesReader {
+    client;
+    packageId;
+    constructor(client, packageId) {
+        this.client = client;
+        this.packageId = packageId;
+    }
+    static fromConfig(client, config) {
+        return new RpcRecipientFilesReader(client, config.packageId);
+    }
+    async getRecipientFile(id, signal) {
+        const validated = toRecipientFileId(id);
+        let response;
+        try {
+            response = await callClient("getObject", () => this.client.getObject({
+                objectId: validated,
+                include: { json: true },
+                ...(signal === undefined ? {} : { signal }),
+            }));
+        }
+        catch (error) {
+            if (error instanceof TransportError &&
+                isObjectNotFoundError(error.cause, validated)) {
+                throw new NotFoundError("recipient-file", validated, {
+                    cause: error.cause,
+                });
+            }
+            throw error;
+        }
+        const object = response.object;
+        if (!object) {
+            throw new NotFoundError("recipient-file", validated);
+        }
+        return parseRecipientFile(object, this.packageId);
+    }
+}
+function parseRecipientFile(object, _expectedPackageId) {
+    const json = object.json;
+    if (!json) {
+        throw new NotFoundError("recipient-file", object.objectId);
+    }
+    return {
+        id: toRecipientFileId(object.objectId),
+        owner: toSuiAddress(readString(json, "owner", "recipient_file.owner")),
+        blobId: parseWalrusBlobIdField(json.blob_id, "recipient_file.blob_id"),
+        blobObjectId: parseOptionalBlobObjectId(json.blob_object_id),
+        name: readString(json, "name", "recipient_file.name"),
+        contentType: readString(json, "content_type", "recipient_file.content_type"),
+        size: readSafeInteger(json, "size", "recipient_file.size"),
+        members: parseVecSetAddresses(json.members, "recipient_file.members"),
+        createdAtMs: readSafeInteger(json, "created_at_ms", "recipient_file.created_at_ms"),
+    };
+}
+/**
+ * The Move contract stores `blob_id` as `vector<u8>` (raw 32 bytes). Sui
+ * gRPC serializes byte vectors as either a base64 string OR a number array,
+ * depending on the codepath. Accept both and re-encode to the canonical
+ * 43-char URL-safe-base64 Walrus blob id.
+ */
+function parseWalrusBlobIdField(value, field) {
+    const bytes = parseByteVector(value, field);
+    if (bytes.length !== 32) {
+        throw new ValidationError(`Field ${field} must decode to 32 bytes, got ${bytes.length}`, field);
+    }
+    let binary = "";
+    for (const b of bytes)
+        binary += String.fromCharCode(b);
+    const standardBase64 = btoa(binary);
+    const urlSafe = standardBase64
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/, "");
+    return toWalrusBlobId(urlSafe);
+}
+function parseByteVector(value, field) {
+    if (typeof value === "string") {
+        const binary = atob(value);
+        const out = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i += 1)
+            out[i] = binary.charCodeAt(i);
+        return out;
+    }
+    if (Array.isArray(value)) {
+        const out = new Uint8Array(value.length);
+        for (let i = 0; i < value.length; i += 1) {
+            const n = typeof value[i] === "string" ? Number(value[i]) : value[i];
+            if (!Number.isInteger(n) || n < 0 || n > 255) {
+                throw new ValidationError(`Field ${field}[${i}] is not a valid u8`, field);
+            }
+            out[i] = n;
+        }
+        return out;
+    }
+    throw new ValidationError(`Field ${field} is missing or not a byte vector`, field);
+}
+function parseOptionalBlobObjectId(value) {
+    // `Option<ID>` JSON shape: { vec: [] } for none, { vec: ["0x..."] } for some.
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value === "object" &&
+        "vec" in value) {
+        const vec = value.vec;
+        if (Array.isArray(vec) && vec.length === 0)
+            return null;
+        if (Array.isArray(vec) && vec.length === 1 && typeof vec[0] === "string") {
+            return toBlobObjectId(vec[0]);
+        }
+    }
+    throw new ValidationError(`Field recipient_file.blob_object_id has unexpected shape: ${JSON.stringify(value)}`, "recipient_file.blob_object_id");
+}
+function parseVecSetAddresses(value, field) {
+    // `VecSet<address>` JSON shape: { contents: ["0x...", "0x..."] }.
+    if (value === null || typeof value !== "object") {
+        throw new ValidationError(`Field ${field} is missing or not an object`, field);
+    }
+    const contents = value.contents;
+    if (!Array.isArray(contents)) {
+        throw new ValidationError(`Field ${field}.contents is not an array`, `${field}.contents`);
+    }
+    return contents.map((entry, index) => {
+        if (typeof entry !== "string") {
+            throw new ValidationError(`Field ${field}.contents[${index}] is not a string`, `${field}.contents[${index}]`);
+        }
+        return toSuiAddress(entry);
+    });
+}
+function readString(json, key, field) {
+    const value = json[key];
+    if (typeof value !== "string") {
+        throw new ValidationError(`Field ${field} is missing or not a string`, field);
+    }
+    return value;
+}
+function readSafeInteger(json, key, field) {
+    const raw = json[key];
+    const value = typeof raw === "string" ? Number(raw) : raw;
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+        throw new ValidationError(`Field ${field} is not a non-negative safe integer: ${JSON.stringify(raw)}`, field);
+    }
+    return value;
+}
+async function callClient(operation, call) {
+    try {
+        return await call();
+    }
+    catch (cause) {
+        throw new TransportError(`${operation} failed`, {
+            cause,
+            operation: `sui.${operation}`,
+        });
+    }
+}
+function isObjectNotFoundError(cause, objectId) {
+    if (!(cause instanceof Error))
+        return false;
+    const escaped = objectId.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    return new RegExp(`^Object ${escaped} not found(\\b|$)`).test(cause.message);
+}
+//# sourceMappingURL=recipient-files-reader.js.map

package/dist/read/recipient-files-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-files-reader.js","sourceRoot":"","sources":["../../src/read/recipient-files-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EACN,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAuB9E,iCAAiC;AACjC,MAAM,OAAO,uBAAuB;IAClB,MAAM,CAAe;IACrB,SAAS,CAAY;IAEtC,YAAoB,MAAoB,EAAE,SAAoB;QAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,UAAU,CAChB,MAAoB,EACpB,MAAqC;QAErC,OAAO,IAAI,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,EAAmB,EACnB,MAAoB;QAEpB,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC3C,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,KAAK,YAAY,cAAc;gBAC/B,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,EAC5C,CAAC;gBACF,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,SAAS,EAAE;oBACpD,KAAK,EAAE,KAAK,CAAC,KAAK;iBAClB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;CACD;AAED,SAAS,kBAAkB,CAC1B,MAA6C,EAC7C,kBAA6B;IAE7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACN,EAAE,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACtE,MAAM,EAAE,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC;QACtE,YAAY,EAAE,yBAAyB,CAAC,IAAI,CAAC,cAAc,CAAC;QAC5D,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,qBAAqB,CAAC;QACrD,WAAW,EAAE,UAAU,CACtB,IAAI,EACJ,cAAc,EACd,6BAA6B,CAC7B;QACD,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,qBAAqB,CAAC;QAC1D,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC;QACrE,WAAW,EAAE,eAAe,CAC3B,IAAI,EACJ,eAAe,EACf,8BAA8B,CAC9B;KACD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC5D,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,iCAAiC,KAAK,CAAC,MAAM,EAAE,EAC7D,KAAK,CACL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,cAAc;SAC5B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,GACN,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,IAAI,CAAC,qBAAqB,EACxC,KAAK,CACL,CAAC;YACH,CAAC;YACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,kCAAkC,EAChD,KAAK,CACL,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAChD,8EAA8E;IAC9E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,IAAK,KAAiC,EAC1C,CAAC;QACF,MAAM,GAAG,GAAI,KAA0B,CAAC,GAAG,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1E,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,MAAM,IAAI,eAAe,CACxB,6DAA6D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EACpF,+BAA+B,CAC/B,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC5B,KAAc,EACd,KAAa;IAEb,kEAAkE;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,8BAA8B,EAC5C,KAAK,CACL,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,2BAA2B,EACzC,GAAG,KAAK,WAAW,CACnB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,aAAa,KAAK,mBAAmB,EACnD,GAAG,KAAK,aAAa,KAAK,GAAG,CAC7B,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAClB,IAA6B,EAC7B,GAAW,EACX,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,6BAA6B,EAC3C,KAAK,CACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACvB,IAA6B,EAC7B,GAAW,EACX,KAAa;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,eAAe,CACxB,SAAS,KAAK,wCAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAC3E,KAAK,CACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CACxB,SAAiB,EACjB,IAAsB;IAEtB,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,cAAc,CAAC,GAAG,SAAS,SAAS,EAAE;YAC/C,KAAK;YACL,SAAS,EAAE,OAAO,SAAS,EAAE;SAC7B,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,QAAgB;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,IAAI,MAAM,CAAC,WAAW,OAAO,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC"}

package/dist/seal/adapter.d.ts

@@ -1,10 +1,16 @@
 /**
- * Seal adapter interface: encrypt content under a publisher Seal identity
- * and decrypt with a consumer-supplied `SessionKey`. Configuration
- * (key servers, threshold, package id) is bound at construction time.
+ * Seal adapter interface: encrypt content under a Seal identity and decrypt
+ * with a consumer-supplied `SessionKey`. Configuration (key servers,
+ * threshold, package id) is bound at construction time.
+ *
+ * Two policies coexist on the same adapter:
+ *   - Publisher policy (`decrypt`) gates content via a `PublisherCap` against
+ *     a publication's revoked-cap denylist.
+ *   - Recipient-file policy (`decryptUnderRecipientFile`) gates content via
+ *     the per-file recipient set embedded on a `RecipientFile`.
  */
 import type { SessionKey } from "@mysten/seal";
-import type { AllowlistId, PublisherCapId, SealId } from "../types.js";
+import type { PublisherCapId, RecipientFileId, SealId } from "../types.js";
 export interface SealEncryptOptions {
     readonly sealId: SealId;
     /** Optional additional authenticated data bound into the ciphertext. */
@@ -22,11 +28,11 @@ export interface SealDecryptOptions {
     readonly sealId: SealId;
     readonly publisherCapId: PublisherCapId;
 }
-/** Options for decrypting content gated by the allowlist policy. */
-export interface SealDecryptUnderAllowlistOptions {
+/** Options for decrypting content gated by the recipient-file policy. */
+export interface SealDecryptUnderRecipientFileOptions {
     readonly sessionKey: SessionKey;
     readonly sealId: SealId;
-    readonly allowlistId: AllowlistId;
+    readonly fileId: RecipientFileId;
 }
 /**
  * Combined Seal adapter. Implementations bundle a `SealClient`, the morse
@@ -52,26 +58,21 @@ export interface SealAdapter {
      * a revoked cap surfaces as `SealError("no-access")`.
      *
      * @throws {SealError} On Seal authorization failure (`no-access`),
-     *   decryption failure (`decrypt-failed` — also raised when `sealId` is
-     *   malformed), session-key expiry (`session-expired`), or rate
-     *   limiting (`rate-limited`).
+     *   decryption failure (`decrypt-failed`, also raised when `sealId` is
+     *   malformed), session-key expiry (`session-expired`), or rate limiting.
      * @throws {TransportError} On network or PTB build failure.
      */
     decrypt(ciphertext: Uint8Array, options: SealDecryptOptions): Promise<Uint8Array>;
     /**
-     * Decrypt content gated by the allowlist policy. The Seal key servers
-     * verify that `sessionKey.getAddress()` is a current member of `allowlistId`
-     * by dry-running `allowlist::seal_approve(sealId, allowlist)`; non-members
-     * surface as `SealError("no-access")`.
-     *
-     * Distinct from `decrypt`, which targets the publisher policy. Both can
-     * coexist on the same adapter instance since policy targeting is decided
-     * by the seal_approve PTB the adapter constructs internally.
+     * Decrypt content gated by the recipient-file policy. The Seal key
+     * servers verify that `sessionKey.getAddress()` is a current recipient
+     * of `fileId` by dry-running `recipient_file::seal_approve(sealId, file)`;
+     * non-recipients surface as `SealError("no-access")`.
      *
      * @throws {SealError} On Seal authorization failure (`no-access`),
      *   decryption failure (`decrypt-failed`), session-key expiry, or rate limiting.
      * @throws {TransportError} On network or PTB build failure.
      */
-    decryptUnderAllowlist(ciphertext: Uint8Array, options: SealDecryptUnderAllowlistOptions): Promise<Uint8Array>;
+    decryptUnderRecipientFile(ciphertext: Uint8Array, options: SealDecryptUnderRecipientFileOptions): Promise<Uint8Array>;
 }
 //# sourceMappingURL=adapter.d.ts.map

package/dist/seal/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACxC;AAED,oEAAoE;AACpE,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B;;;;;;;;OAQG;IACH,OAAO,CACN,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,OAAO,CACN,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CACpB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,UAAU,CAAC,CAAC;CACvB"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACxC;AAED,yEAAyE;AACzE,MAAM,WAAW,oCAAoC;IACpD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B;;;;;;;;OAQG;IACH,OAAO,CACN,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,OAAO,CACN,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB;;;;;;;;;OASG;IACH,yBAAyB,CACxB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,oCAAoC,GAC3C,OAAO,CAAC,UAAU,CAAC,CAAC;CACvB"}

package/dist/seal/adapter.js

@@ -1,7 +1,13 @@
 /**
- * Seal adapter interface: encrypt content under a publisher Seal identity
- * and decrypt with a consumer-supplied `SessionKey`. Configuration
- * (key servers, threshold, package id) is bound at construction time.
+ * Seal adapter interface: encrypt content under a Seal identity and decrypt
+ * with a consumer-supplied `SessionKey`. Configuration (key servers,
+ * threshold, package id) is bound at construction time.
+ *
+ * Two policies coexist on the same adapter:
+ *   - Publisher policy (`decrypt`) gates content via a `PublisherCap` against
+ *     a publication's revoked-cap denylist.
+ *   - Recipient-file policy (`decryptUnderRecipientFile`) gates content via
+ *     the per-file recipient set embedded on a `RecipientFile`.
  */
 export {};
 //# sourceMappingURL=adapter.js.map

package/dist/seal/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/seal/default-adapter.d.ts

@@ -8,7 +8,7 @@
  */
 import { type KeyServerConfig, type SealCompatibleClient, type SessionKey } from "@mysten/seal";
 import type { PackageId } from "../types.js";
-import type { SealAdapter, SealDecryptOptions, SealDecryptUnderAllowlistOptions, SealEncryptOptions, SealEncryptResult } from "./adapter.js";
+import type { SealAdapter, SealDecryptOptions, SealDecryptUnderRecipientFileOptions, SealEncryptOptions, SealEncryptResult } from "./adapter.js";
 /**
  * Configuration for `DefaultSealAdapter`. `packageId` MUST be the deployment's
  * `originalPackageId`: Seal binds the package address into ciphertext
@@ -21,8 +21,8 @@ export interface SealAdapterConfig {
      * Package id used as the target of `seal_approve*` PTBs. Defaults to
      * `packageId` when omitted. Must be set explicitly when the seal_approve
      * function lives in a module added in a package upgrade (e.g.
-     * `allowlist::seal_approve` was introduced in v2 and only exists at the
-     * v2 published-at address; calling it at the original-id fails because
+     * `recipient_file::seal_approve` was introduced in v3 and only exists at
+     * the v3 published-at address; calling it at the original-id fails because
      * that address only has v1 bytecode). For backwards compat with the
      * publisher policy (introduced in v1, present at all upgrade addresses),
      * omit this field.
@@ -97,9 +97,9 @@ export declare class DefaultSealAdapter implements SealAdapter {
     static fromConfig(config: SealAdapterConfig, suiClient: SealCompatibleClient): DefaultSealAdapter;
     encrypt(plaintext: Uint8Array, options: SealEncryptOptions): Promise<SealEncryptResult>;
     decrypt(ciphertext: Uint8Array, options: SealDecryptOptions): Promise<Uint8Array>;
-    decryptUnderAllowlist(ciphertext: Uint8Array, options: SealDecryptUnderAllowlistOptions): Promise<Uint8Array>;
+    decryptUnderRecipientFile(ciphertext: Uint8Array, options: SealDecryptUnderRecipientFileOptions): Promise<Uint8Array>;
     private buildSealApproveTxBytes;
-    private buildAllowlistApproveTxBytes;
+    private buildRecipientFileApproveTxBytes;
 }
 export {};
 //# sourceMappingURL=default-adapter.d.ts.map

package/dist/seal/default-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-adapter.d.ts","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAIN,KAAK,eAAe,EAGpB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EAEf,MAAM,cAAc,CAAC;AAUtB,OAAO,KAAK,EAEX,SAAS,EAIT,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACX,WAAW,EACX,kBAAkB,EAClB,gCAAgC,EAChC,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,cAAc,CAAC;AAItB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,4EAA4E;AAC5E,UAAU,cAAc;IACvB,OAAO,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,UAAU,CAAC;QACjB,GAAG,CAAC,EAAE,UAAU,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,OAAO,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB;AAED,UAAU,yBAAyB;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,6DAA6D;AAC7D,qBAAa,kBAAmB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,yBAAyB;IAQ9C;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAAW,EAAE;QACZ,SAAS,EAAE,SAAS,CAAC;QACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC;QAC9B,cAAc,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;KAC5C,EACD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,EACnD,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAiCrB;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAkCf,OAAO,CACZ,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAgBvB,OAAO,CACZ,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC;IAkChB,qBAAqB,CAC1B,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,UAAU,CAAC;YAmCR,uBAAuB;YA6BvB,4BAA4B;CA0B1C"}
+{"version":3,"file":"default-adapter.d.ts","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAIN,KAAK,eAAe,EAGpB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EAEf,MAAM,cAAc,CAAC;AAUtB,OAAO,KAAK,EACX,SAAS,EAKT,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACX,WAAW,EACX,kBAAkB,EAClB,oCAAoC,EACpC,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,cAAc,CAAC;AAGtB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,4EAA4E;AAC5E,UAAU,cAAc;IACvB,OAAO,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,UAAU,CAAC;QACjB,GAAG,CAAC,EAAE,UAAU,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,OAAO,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB;AAED,UAAU,yBAAyB;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,6DAA6D;AAC7D,qBAAa,kBAAmB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,yBAAyB;IAQ9C;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAAW,EAAE;QACZ,SAAS,EAAE,SAAS,CAAC;QACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC;QAC9B,cAAc,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;KAC5C,EACD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,EACnD,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAiCrB;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAkCf,OAAO,CACZ,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAgBvB,OAAO,CACZ,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC;IAkChB,yBAAyB,CAC9B,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,oCAAoC,GAC3C,OAAO,CAAC,UAAU,CAAC;YAsBR,uBAAuB;YA6BvB,gCAAgC;CA0B9C"}

package/dist/seal/default-adapter.js

@@ -9,7 +9,6 @@
 import { DecryptionError, ExpiredSessionKeyError, InvalidCiphertextError, NoAccessError, SealClient, TooManyFailedFetchKeyRequestsError, } from "@mysten/seal";
 import { Transaction } from "@mysten/sui/transactions";
 import { ConfigurationError, SealError, TransportError, ValidationError, } from "../errors.js";
-import { decodeAllowlistSealId } from "./allowlist-identity.js";
 import { decodePublisherSealId } from "./identity.js";
 /** `SealAdapter` implementation backed by `@mysten/seal`. */
 export class DefaultSealAdapter {
@@ -131,23 +130,18 @@ export class DefaultSealAdapter {
             txBytes,
         }), "seal.decrypt");
     }
-    async decryptUnderAllowlist(ciphertext, options) {
-        let allowlistIdFromSealId;
-        try {
-            ({ allowlistId: allowlistIdFromSealId } = decodeAllowlistSealId(options.sealId));
-        }
-        catch (cause) {
-            throw new SealError("decrypt-failed", `Seal identity is malformed or uses an unsupported policy tag for the allowlist policy: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
-        }
-        if (allowlistIdFromSealId !== options.allowlistId) {
-            throw new SealError("decrypt-failed", `sealId's embedded allowlistId (${allowlistIdFromSealId}) does not match the supplied allowlistId (${options.allowlistId})`);
-        }
-        const txBytes = await this.buildAllowlistApproveTxBytes(options.allowlistId, options.sealId, options.sessionKey);
+    async decryptUnderRecipientFile(ciphertext, options) {
+        // Unlike the publisher policy, the recipient-file seal identity is not
+        // self-validating client-side: the prefix is an opaque caller-chosen
+        // byte string bound to the file on chain via a dynamic field. The
+        // `seal_approve_with_prefix` PTB dry-run is the only authoritative
+        // check; we just forward the bytes and let Move (and Seal) verify.
+        const txBytes = await this.buildRecipientFileApproveTxBytes(options.fileId, options.sealId, options.sessionKey);
         return runSealCall(() => this.client.decrypt({
             data: ciphertext,
             sessionKey: options.sessionKey,
             txBytes,
-        }), "seal.decryptUnderAllowlist");
+        }), "seal.decryptUnderRecipientFile");
     }
     async buildSealApproveTxBytes(publicationId, publisherCapId, sealId, sessionKey) {
         const tx = new Transaction();
@@ -173,14 +167,11 @@ export class DefaultSealAdapter {
             });
         }
     }
-    async buildAllowlistApproveTxBytes(allowlistId, sealId, sessionKey) {
+    async buildRecipientFileApproveTxBytes(fileId, sealId, sessionKey) {
         const tx = new Transaction();
         tx.moveCall({
-            target: `${this.targetPackageId}::allowlist::seal_approve`,
-            arguments: [
-                tx.pure.vector("u8", Array.from(sealId)),
-                tx.object(allowlistId),
-            ],
+            target: `${this.targetPackageId}::recipient_file::seal_approve_with_prefix`,
+            arguments: [tx.pure.vector("u8", Array.from(sealId)), tx.object(fileId)],
         });
         tx.setSender(sessionKey.getAddress());
         try {
@@ -190,9 +181,9 @@ export class DefaultSealAdapter {
             });
         }
         catch (cause) {
-            throw new TransportError("Failed to build allowlist seal_approve PTB", {
+            throw new TransportError("Failed to build recipient_file seal_approve_with_prefix PTB", {
                 cause,
-                operation: "seal.buildAllowlistApproveTx",
+                operation: "seal.buildRecipientFileApproveTx",
             });
         }
     }

package/dist/seal/default-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-adapter.js","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EAEtB,aAAa,EACb,UAAU,EAGV,kCAAkC,GAClC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EACN,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,eAAe,GACf,MAAM,cAAc,CAAC;AAetB,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAmDtD,6DAA6D;AAC7D,MAAM,OAAO,kBAAkB;IACb,MAAM,CAAiB;IACvB,SAAS,CAAuB;IAChC,SAAS,CAAY;IACrB,eAAe,CAAY;IAC3B,SAAS,CAAS;IAEnC,YAAY,OAAkC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAIC,EACD,IAAmD,EACnD,SAA+B;QAE/B,MAAM,aAAa,GAClB,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,cAAc,IAAI,EAAE,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,kBAAkB,CAC3B,kLAAkL,CAClL,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,kBAAkB,CAAC,UAAU,CACnC;YACC,oEAAoE;YACpE,+DAA+D;YAC/D,sCAAsC;YACtC,SAAS,EAAE,WAAW,CAAC,iBAAiB,IAAI,WAAW,CAAC,SAAS;YACjE,gEAAgE;YAChE,+DAA+D;YAC/D,qDAAqD;YACrD,gEAAgE;YAChE,6DAA6D;YAC7D,uBAAuB;YACvB,eAAe,EAAE,WAAW,CAAC,SAAS;YACtC,aAAa;YACb,SAAS;YACT,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;SAChE,EACD,SAAS,CACT,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAyB,EACzB,SAA+B;QAE/B,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CACxB,iEAAiE,EACjE,eAAe,CACf,CAAC;QACH,CAAC;QACD,IACC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,CAAC,SAAS,GAAG,CAAC;YACpB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,EAC7C,CAAC;YACF,MAAM,IAAI,eAAe,CACxB,yDAAyD,MAAM,CAAC,aAAa,CAAC,MAAM,UAAU,MAAM,CAAC,SAAS,EAAE,EAChH,WAAW,CACX,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;YAC7B,SAAS;YACT,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,OAAO,IAAI,kBAAkB,CAAC;YAC7B,MAAM;YACN,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,SAAS;YAC3D,SAAS,EAAE,MAAM,CAAC,SAAS;SAC3B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,SAAqB,EACrB,OAA2B;QAE3B,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAC/B,GAAG,EAAE,CACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,EAAE;YACF,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC1D,CAAC,EACH,cAAc,CACd,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,UAAsB,EACtB,OAA2B;QAE3B,qEAAqE;QACrE,6DAA6D;QAC7D,oEAAoE;QACpE,mEAAmE;QACnE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,aAA4B,CAAC;QACjC,IAAI,CAAC;YACJ,CAAC,EAAE,aAAa,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAClB,gBAAgB,EAChB,iEAAiE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACzH,EAAE,KAAK,EAAE,CACT,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACjD,aAAa,EACb,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,CAClB,CAAC;QACF,OAAO,WAAW,CACjB,GAAG,EAAE,CACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO;SACP,CAAC,EACH,cAAc,CACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAC1B,UAAsB,EACtB,OAAyC;QAEzC,IAAI,qBAAkC,CAAC;QACvC,IAAI,CAAC;YACJ,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,qBAAqB,CAC9D,OAAO,CAAC,MAAM,CACd,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAClB,gBAAgB,EAChB,0FAA0F,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAClJ,EAAE,KAAK,EAAE,CACT,CAAC;QACH,CAAC;QACD,IAAK,qBAAgC,KAAM,OAAO,CAAC,WAAsB,EAAE,CAAC;YAC3E,MAAM,IAAI,SAAS,CAClB,gBAAgB,EAChB,kCAAkC,qBAAqB,8CAA8C,OAAO,CAAC,WAAW,GAAG,CAC3H,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,4BAA4B,CACtD,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,CAClB,CAAC;QACF,OAAO,WAAW,CACjB,GAAG,EAAE,CACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO;SACP,CAAC,EACH,4BAA4B,CAC5B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACpC,aAA4B,EAC5B,cAA8B,EAC9B,MAAc,EACd,UAAsB;QAEtB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAC7B,EAAE,CAAC,QAAQ,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,uCAAuC;YACtE,SAAS,EAAE;gBACV,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;gBACxB,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;aACzB;SACD,CAAC,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,SAAyC;gBACtD,mBAAmB,EAAE,IAAI;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,kCAAkC,EAAE;gBAC5D,KAAK;gBACL,SAAS,EAAE,qBAAqB;aAChC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACzC,WAAwB,EACxB,MAAc,EACd,UAAsB;QAEtB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAC7B,EAAE,CAAC,QAAQ,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,2BAA2B;YAC1D,SAAS,EAAE;gBACV,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;aACtB;SACD,CAAC,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,SAAyC;gBACtD,mBAAmB,EAAE,IAAI;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,4CAA4C,EAAE;gBACtE,KAAK;gBACL,SAAS,EAAE,8BAA8B;aACzC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD;AAED,KAAK,UAAU,WAAW,CACzB,IAAsB,EACtB,SAAS,GAAG,WAAW;IAEvB,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,CAAC;QACd,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACpC,OAAO,IAAI,SAAS,CAAC,WAAW,EAAE,uBAAuB,KAAK,CAAC,OAAO,EAAE,EAAE;YACzE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC7C,OAAO,IAAI,SAAS,CAAC,iBAAiB,EAAE,0BAA0B,EAAE;YACnE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,kCAAkC,EAAE,CAAC;QACzD,OAAO,IAAI,SAAS,CACnB,cAAc,EACd,6CAA6C,EAC7C,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IACD,IACC,KAAK,YAAY,eAAe;QAChC,KAAK,YAAY,sBAAsB,EACtC,CAAC;QACF,OAAO,IAAI,SAAS,CACnB,gBAAgB,EAChB,2BAA2B,KAAK,CAAC,OAAO,EAAE,EAC1C,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACpC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}
+{"version":3,"file":"default-adapter.js","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EAEtB,aAAa,EACb,UAAU,EAGV,kCAAkC,GAClC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EACN,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,eAAe,GACf,MAAM,cAAc,CAAC;AAetB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAmDtD,6DAA6D;AAC7D,MAAM,OAAO,kBAAkB;IACb,MAAM,CAAiB;IACvB,SAAS,CAAuB;IAChC,SAAS,CAAY;IACrB,eAAe,CAAY;IAC3B,SAAS,CAAS;IAEnC,YAAY,OAAkC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAIC,EACD,IAAmD,EACnD,SAA+B;QAE/B,MAAM,aAAa,GAClB,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,cAAc,IAAI,EAAE,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,kBAAkB,CAC3B,kLAAkL,CAClL,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,kBAAkB,CAAC,UAAU,CACnC;YACC,oEAAoE;YACpE,+DAA+D;YAC/D,sCAAsC;YACtC,SAAS,EAAE,WAAW,CAAC,iBAAiB,IAAI,WAAW,CAAC,SAAS;YACjE,gEAAgE;YAChE,+DAA+D;YAC/D,qDAAqD;YACrD,gEAAgE;YAChE,6DAA6D;YAC7D,uBAAuB;YACvB,eAAe,EAAE,WAAW,CAAC,SAAS;YACtC,aAAa;YACb,SAAS;YACT,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;SAChE,EACD,SAAS,CACT,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAyB,EACzB,SAA+B;QAE/B,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CACxB,iEAAiE,EACjE,eAAe,CACf,CAAC;QACH,CAAC;QACD,IACC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,CAAC,SAAS,GAAG,CAAC;YACpB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,EAC7C,CAAC;YACF,MAAM,IAAI,eAAe,CACxB,yDAAyD,MAAM,CAAC,aAAa,CAAC,MAAM,UAAU,MAAM,CAAC,SAAS,EAAE,EAChH,WAAW,CACX,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;YAC7B,SAAS;YACT,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,OAAO,IAAI,kBAAkB,CAAC;YAC7B,MAAM;YACN,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,SAAS;YAC3D,SAAS,EAAE,MAAM,CAAC,SAAS;SAC3B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,SAAqB,EACrB,OAA2B;QAE3B,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAC/B,GAAG,EAAE,CACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,EAAE;YACF,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC1D,CAAC,EACH,cAAc,CACd,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,UAAsB,EACtB,OAA2B;QAE3B,qEAAqE;QACrE,6DAA6D;QAC7D,oEAAoE;QACpE,mEAAmE;QACnE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,aAA4B,CAAC;QACjC,IAAI,CAAC;YACJ,CAAC,EAAE,aAAa,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAClB,gBAAgB,EAChB,iEAAiE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACzH,EAAE,KAAK,EAAE,CACT,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACjD,aAAa,EACb,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,CAClB,CAAC;QACF,OAAO,WAAW,CACjB,GAAG,EAAE,CACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO;SACP,CAAC,EACH,cAAc,CACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC9B,UAAsB,EACtB,OAA6C;QAE7C,uEAAuE;QACvE,qEAAqE;QACrE,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gCAAgC,CAC1D,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,CAClB,CAAC;QACF,OAAO,WAAW,CACjB,GAAG,EAAE,CACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO;SACP,CAAC,EACH,gCAAgC,CAChC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACpC,aAA4B,EAC5B,cAA8B,EAC9B,MAAc,EACd,UAAsB;QAEtB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAC7B,EAAE,CAAC,QAAQ,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,uCAAuC;YACtE,SAAS,EAAE;gBACV,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;gBACxB,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;aACzB;SACD,CAAC,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,SAAyC;gBACtD,mBAAmB,EAAE,IAAI;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,kCAAkC,EAAE;gBAC5D,KAAK;gBACL,SAAS,EAAE,qBAAqB;aAChC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,gCAAgC,CAC7C,MAAuB,EACvB,MAAc,EACd,UAAsB;QAEtB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAC7B,EAAE,CAAC,QAAQ,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,4CAA4C;YAC3E,SAAS,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACxE,CAAC,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,SAAyC;gBACtD,mBAAmB,EAAE,IAAI;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CACvB,6DAA6D,EAC7D;gBACC,KAAK;gBACL,SAAS,EAAE,kCAAkC;aAC7C,CACD,CAAC;QACH,CAAC;IACF,CAAC;CACD;AAED,KAAK,UAAU,WAAW,CACzB,IAAsB,EACtB,SAAS,GAAG,WAAW;IAEvB,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,CAAC;QACd,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACpC,OAAO,IAAI,SAAS,CAAC,WAAW,EAAE,uBAAuB,KAAK,CAAC,OAAO,EAAE,EAAE;YACzE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC7C,OAAO,IAAI,SAAS,CAAC,iBAAiB,EAAE,0BAA0B,EAAE;YACnE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,kCAAkC,EAAE,CAAC;QACzD,OAAO,IAAI,SAAS,CACnB,cAAc,EACd,6CAA6C,EAC7C,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IACD,IACC,KAAK,YAAY,eAAe;QAChC,KAAK,YAAY,sBAAsB,EACtC,CAAC;QACF,OAAO,IAAI,SAAS,CACnB,gBAAgB,EAChB,2BAA2B,KAAK,CAAC,OAAO,EAAE,EAC1C,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACpC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/seal/index.d.ts

@@ -2,8 +2,8 @@
  * Seal subpackage barrel: identity construction, the adapter interface, and
  * the default adapter wrapping `@mysten/seal`.
  */
-export type { SealAdapter, SealDecryptOptions, SealDecryptUnderAllowlistOptions, SealEncryptOptions, SealEncryptResult, } from "./adapter.js";
-export { type AllowlistSealIdParts, buildAllowlistSealId, decodeAllowlistSealId, } from "./allowlist-identity.js";
+export type { SealAdapter, SealDecryptOptions, SealDecryptUnderRecipientFileOptions, SealEncryptOptions, SealEncryptResult, } from "./adapter.js";
 export { DefaultSealAdapter, type SealAdapterConfig, } from "./default-adapter.js";
 export { buildPublisherSealId, decodePublisherSealId, type SealIdParts, } from "./identity.js";
+export { buildRecipientFileSealId, decodeRecipientFileSealId, RECOMMENDED_SEAL_NONCE_BYTES, RECOMMENDED_SEAL_PREFIX_BYTES, type RecipientFileSealIdParts, randomSealNonce, randomSealPrefix, } from "./recipient-file-identity.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/seal/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/seal/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EACX,WAAW,EACX,kBAAkB,EAClB,gCAAgC,EAChC,kBAAkB,EAClB,iBAAiB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,qBAAqB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,kBAAkB,EAClB,KAAK,iBAAiB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,WAAW,GAChB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/seal/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EACX,WAAW,EACX,kBAAkB,EAClB,oCAAoC,EACpC,kBAAkB,EAClB,iBAAiB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,kBAAkB,EAClB,KAAK,iBAAiB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,WAAW,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,eAAe,EACf,gBAAgB,GAChB,MAAM,8BAA8B,CAAC"}

package/dist/seal/index.js

@@ -2,7 +2,7 @@
  * Seal subpackage barrel: identity construction, the adapter interface, and
  * the default adapter wrapping `@mysten/seal`.
  */
-export { buildAllowlistSealId, decodeAllowlistSealId, } from "./allowlist-identity.js";
 export { DefaultSealAdapter, } from "./default-adapter.js";
 export { buildPublisherSealId, decodePublisherSealId, } from "./identity.js";
+export { buildRecipientFileSealId, decodeRecipientFileSealId, RECOMMENDED_SEAL_NONCE_BYTES, RECOMMENDED_SEAL_PREFIX_BYTES, randomSealNonce, randomSealPrefix, } from "./recipient-file-identity.js";
 //# sourceMappingURL=index.js.map

package/dist/seal/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/seal/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,EAEN,oBAAoB,EACpB,qBAAqB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,kBAAkB,GAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,oBAAoB,EACpB,qBAAqB,GAErB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/seal/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,EACN,kBAAkB,GAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,oBAAoB,EACpB,qBAAqB,GAErB,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,6BAA6B,EAE7B,eAAe,EACf,gBAAgB,GAChB,MAAM,8BAA8B,CAAC"}

package/dist/seal/recipient-file-identity.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Seal identity (`SealId`) construction and inspection for the recipient-file
+ * policy. The Move layer (`recipient_file::seal_approve_with_prefix`) enforces
+ * the byte format against a caller-supplied prefix stored on the file as a
+ * dynamic field, so the prefix bytes used at encrypt time and the bytes
+ * bound on chain at file creation must match exactly.
+ *
+ * Layout: `seal_id_prefix(>=1) || policy_tag(u8=3) || nonce(>=1)`. Both the
+ * prefix and the nonce must be at least 1 byte (Move contract's
+ * `id.length() > prefix_len + 1` invariant); 32 random prefix bytes + 16
+ * random nonce bytes is the recommended default.
+ *
+ * The prefix is no longer derived from the file's Sui object id (that scheme
+ * required knowing the id before signing the transaction that creates it, an
+ * impossible ordering for single-PTB encrypted upload). Callers pick a fresh
+ * random prefix per file; the file is created with the prefix attached.
+ */
+import { type SealId, SealPolicyTag } from "../types.js";
+/** Recommended prefix length: 32 random bytes. Long enough to collision-avoid across files. */
+export declare const RECOMMENDED_SEAL_PREFIX_BYTES = 32;
+/** Recommended nonce length: 16 random bytes. Distinct envelopes per encrypt. */
+export declare const RECOMMENDED_SEAL_NONCE_BYTES = 16;
+/** Structured view of a recipient-file Seal identity built around a custom prefix. */
+export interface RecipientFileSealIdParts {
+    readonly prefix: Uint8Array;
+    readonly policyTag: SealPolicyTag;
+    readonly nonce: Uint8Array;
+}
+/**
+ * Build a recipient-file Seal identity. The prefix is the bytes the on-chain
+ * file must carry (attached via `new_recipient_file_with_seal_prefix`); the
+ * nonce is per-encryption.
+ *
+ * @throws {ValidationError} If `prefix` or `nonce` is empty.
+ */
+export declare function buildRecipientFileSealId(prefix: Uint8Array, nonce: Uint8Array): SealId;
+/**
+ * Decode a recipient-file Seal identity into prefix + tag + nonce. Requires
+ * the caller to provide `prefixLength` because the layout is not
+ * self-delimiting (the prefix is arbitrary-length). Throws `ValidationError`
+ * if the bytes carry a different policy tag or the length is insufficient.
+ */
+export declare function decodeRecipientFileSealId(id: SealId, prefixLength: number): RecipientFileSealIdParts;
+/**
+ * Convenience: 32 random bytes suitable for `buildRecipientFileSealId`'s
+ * `prefix` argument. Uses Web Crypto; throws on environments without
+ * `crypto.getRandomValues`. The same value must be passed to
+ * `new_recipient_file_with_seal_prefix` so the on-chain prefix matches.
+ */
+export declare function randomSealPrefix(): Uint8Array;
+/** Convenience: 16 random bytes suitable for `buildRecipientFileSealId`'s `nonce` argument. */
+export declare function randomSealNonce(): Uint8Array;
+//# sourceMappingURL=recipient-file-identity.d.ts.map

package/dist/seal/recipient-file-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-file-identity.d.ts","sourceRoot":"","sources":["../../src/seal/recipient-file-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,KAAK,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKzD,+FAA+F;AAC/F,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C,sFAAsF;AACtF,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACvC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,UAAU,GACf,MAAM,CAkBR;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACxC,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GAClB,wBAAwB,CAyB1B;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,UAAU,CAI7C;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,IAAI,UAAU,CAI5C"}

package/dist/seal/recipient-file-identity.js

@@ -0,0 +1,87 @@
+/**
+ * Seal identity (`SealId`) construction and inspection for the recipient-file
+ * policy. The Move layer (`recipient_file::seal_approve_with_prefix`) enforces
+ * the byte format against a caller-supplied prefix stored on the file as a
+ * dynamic field, so the prefix bytes used at encrypt time and the bytes
+ * bound on chain at file creation must match exactly.
+ *
+ * Layout: `seal_id_prefix(>=1) || policy_tag(u8=3) || nonce(>=1)`. Both the
+ * prefix and the nonce must be at least 1 byte (Move contract's
+ * `id.length() > prefix_len + 1` invariant); 32 random prefix bytes + 16
+ * random nonce bytes is the recommended default.
+ *
+ * The prefix is no longer derived from the file's Sui object id (that scheme
+ * required knowing the id before signing the transaction that creates it, an
+ * impossible ordering for single-PTB encrypted upload). Callers pick a fresh
+ * random prefix per file; the file is created with the prefix attached.
+ */
+import { ValidationError } from "../errors.js";
+import { SealPolicyTag } from "../types.js";
+const POLICY_TAG_BYTES = 1;
+const MIN_PREFIX_BYTES = 1;
+const MIN_NONCE_BYTES = 1;
+/** Recommended prefix length: 32 random bytes. Long enough to collision-avoid across files. */
+export const RECOMMENDED_SEAL_PREFIX_BYTES = 32;
+/** Recommended nonce length: 16 random bytes. Distinct envelopes per encrypt. */
+export const RECOMMENDED_SEAL_NONCE_BYTES = 16;
+/**
+ * Build a recipient-file Seal identity. The prefix is the bytes the on-chain
+ * file must carry (attached via `new_recipient_file_with_seal_prefix`); the
+ * nonce is per-encryption.
+ *
+ * @throws {ValidationError} If `prefix` or `nonce` is empty.
+ */
+export function buildRecipientFileSealId(prefix, nonce) {
+    if (prefix.length < MIN_PREFIX_BYTES) {
+        throw new ValidationError(`Seal prefix must be at least ${MIN_PREFIX_BYTES} byte(s), got ${prefix.length}`, "prefix");
+    }
+    if (nonce.length < MIN_NONCE_BYTES) {
+        throw new ValidationError(`Seal nonce must be at least ${MIN_NONCE_BYTES} byte(s), got ${nonce.length}`, "nonce");
+    }
+    const out = new Uint8Array(prefix.length + POLICY_TAG_BYTES + nonce.length);
+    out.set(prefix, 0);
+    out[prefix.length] = SealPolicyTag.RecipientFile;
+    out.set(nonce, prefix.length + POLICY_TAG_BYTES);
+    return out;
+}
+/**
+ * Decode a recipient-file Seal identity into prefix + tag + nonce. Requires
+ * the caller to provide `prefixLength` because the layout is not
+ * self-delimiting (the prefix is arbitrary-length). Throws `ValidationError`
+ * if the bytes carry a different policy tag or the length is insufficient.
+ */
+export function decodeRecipientFileSealId(id, prefixLength) {
+    if (prefixLength < MIN_PREFIX_BYTES) {
+        throw new ValidationError(`prefixLength must be at least ${MIN_PREFIX_BYTES}, got ${prefixLength}`, "prefixLength");
+    }
+    if (id.length < prefixLength + POLICY_TAG_BYTES + MIN_NONCE_BYTES) {
+        throw new ValidationError(`Seal identity is shorter than prefix(${prefixLength}) + tag(1) + nonce(>=1)`, "id");
+    }
+    const tagByte = id[prefixLength] ?? 0;
+    if (tagByte !== SealPolicyTag.RecipientFile) {
+        throw new ValidationError(`Seal identity has policy tag ${tagByte}, expected ${SealPolicyTag.RecipientFile} (RecipientFile). Use decodePublisherSealId for publisher-policy identities.`, "policyTag");
+    }
+    return {
+        prefix: id.slice(0, prefixLength),
+        policyTag: SealPolicyTag.RecipientFile,
+        nonce: id.slice(prefixLength + POLICY_TAG_BYTES),
+    };
+}
+/**
+ * Convenience: 32 random bytes suitable for `buildRecipientFileSealId`'s
+ * `prefix` argument. Uses Web Crypto; throws on environments without
+ * `crypto.getRandomValues`. The same value must be passed to
+ * `new_recipient_file_with_seal_prefix` so the on-chain prefix matches.
+ */
+export function randomSealPrefix() {
+    const bytes = new Uint8Array(RECOMMENDED_SEAL_PREFIX_BYTES);
+    crypto.getRandomValues(bytes);
+    return bytes;
+}
+/** Convenience: 16 random bytes suitable for `buildRecipientFileSealId`'s `nonce` argument. */
+export function randomSealNonce() {
+    const bytes = new Uint8Array(RECOMMENDED_SEAL_NONCE_BYTES);
+    crypto.getRandomValues(bytes);
+    return bytes;
+}
+//# sourceMappingURL=recipient-file-identity.js.map

package/dist/seal/recipient-file-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-file-identity.js","sourceRoot":"","sources":["../../src/seal/recipient-file-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAe,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAS/C;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACvC,MAAkB,EAClB,KAAiB;IAEjB,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CACxB,gCAAgC,gBAAgB,iBAAiB,MAAM,CAAC,MAAM,EAAE,EAChF,QAAQ,CACR,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACxB,+BAA+B,eAAe,iBAAiB,KAAK,CAAC,MAAM,EAAE,EAC7E,OAAO,CACP,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,aAAa,CAAC;IACjD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC;IACjD,OAAO,GAAa,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACxC,EAAU,EACV,YAAoB;IAEpB,IAAI,YAAY,GAAG,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,eAAe,CACxB,iCAAiC,gBAAgB,SAAS,YAAY,EAAE,EACxE,cAAc,CACd,CAAC;IACH,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,GAAG,YAAY,GAAG,gBAAgB,GAAG,eAAe,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CACxB,wCAAwC,YAAY,yBAAyB,EAC7E,IAAI,CACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,aAAa,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CACxB,gCAAgC,OAAO,cAAc,aAAa,CAAC,aAAa,8EAA8E,EAC9J,WAAW,CACX,CAAC;IACH,CAAC;IACD,OAAO;QACN,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;QACjC,SAAS,EAAE,aAAa,CAAC,aAAa;QACtC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,GAAG,gBAAgB,CAAC;KAChD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB;IAC/B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;IAC5D,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe;IAC9B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC;AACd,CAAC"}