@bounded-sh/client 0.0.44 → 0.0.50

package/dist/injected-evm-wallet-provider-BLQzWiBP.js

@@ -0,0 +1,343 @@
+'use strict';
+
+var core = require('@bounded-sh/core');
+var index = require('./index-m42Be5Oj.js');
+require('react');
+
+const STORED_AUTH_METHOD_KEY = 'bounded_last_auth_method';
+// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,
+// so clearIncompatibleSession() keeps (not wipes) this session on the next init().
+const INJECTED_EVM_AUTH_METHOD = 'evm-wallet';
+// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.
+const SIWE_SESSION_METHOD = 'siwe';
+const NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +
+    'or pass config.evmWalletConfig.getProvider to point at your wallet.';
+const NO_SOL_TX_ERR = 'EVM wallet login signs+submits transactions in one step (eth_sendTransaction) and has no Solana ' +
+    'transaction surface. Use an onchain WRITE (setMany) — the worker returns a pre-built EVM tx that ' +
+    'runTransaction submits — instead of signTransaction/signAndSubmitTransaction.';
+// Bounded polling for the tx receipt: ~60s at 2s cadence (L2 blocks are seconds).
+const RECEIPT_POLL_ATTEMPTS = 30;
+const RECEIPT_POLL_INTERVAL_MS = 2000;
+function normalizeConfig(config) {
+    var _a;
+    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {
+        throw new Error('EVM wallet chainId must be a positive safe integer');
+    }
+    let runtimeAddress;
+    if (config.runtimeAddress !== undefined) {
+        runtimeAddress = (_a = core.normalizeEvmAddress(config.runtimeAddress)) !== null && _a !== void 0 ? _a : undefined;
+        if (!runtimeAddress)
+            throw new Error('EVM wallet runtimeAddress is invalid');
+        if (config.chainId === undefined)
+            throw new Error('EVM wallet runtimeAddress requires an explicit chainId');
+    }
+    let runtimeAddresses;
+    if (config.runtimeAddresses !== undefined) {
+        runtimeAddresses = {};
+        for (const [rawChainId, rawAddress] of Object.entries(config.runtimeAddresses)) {
+            const chainId = Number(rawChainId);
+            const address = core.normalizeEvmAddress(rawAddress);
+            if (!Number.isSafeInteger(chainId) || chainId <= 0 || String(chainId) !== rawChainId || !address) {
+                throw new Error(`Invalid EVM runtime allowlist entry for chain ${rawChainId}`);
+            }
+            runtimeAddresses[rawChainId] = address;
+        }
+    }
+    return Object.assign(Object.assign({}, config), { runtimeAddress, runtimeAddresses });
+}
+class InjectedEvmWalletProvider {
+    constructor(config = {}) {
+        this.authenticatedAddress = null;
+        if (typeof window === 'undefined') {
+            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');
+        }
+        const normalized = normalizeConfig(config);
+        // Singleton so the SDK reuses one instance (mirrors the other providers).
+        if (InjectedEvmWalletProvider.instance) {
+            InjectedEvmWalletProvider.instance.config = normalized;
+            InjectedEvmWalletProvider.instance.authenticatedAddress = null;
+            return InjectedEvmWalletProvider.instance;
+        }
+        this.config = normalized;
+        InjectedEvmWalletProvider.instance = this;
+    }
+    // @user.address (the Solana wallet) is null for an EVM-wallet login. User.address
+    // is typed `string` for legacy reasons — email logins cast the same null the same
+    // way (email-auth-provider.ts) — so the null is cast here in one place.
+    evmUser(address) {
+        return { id: address, address: null, evmAddress: address, provider: this };
+    }
+    resolveProvider() {
+        var _a;
+        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : index.defaultInjectedEvmProvider();
+        if (!provider)
+            throw new Error(NO_WALLET_ERR);
+        return provider;
+    }
+    /** Connect the injected wallet and return its canonical lowercase EVM address. */
+    async connectAddress(provider) {
+        const accounts = await provider.request({ method: 'eth_requestAccounts' });
+        const raw = Array.isArray(accounts) ? accounts[0] : undefined;
+        const address = core.normalizeEvmAddress(raw);
+        if (!address)
+            throw new Error('Wallet did not return a valid EVM address on connect');
+        return address;
+    }
+    /** Current chain id the wallet is connected to (EIP-155 number), or null. */
+    async currentChainId(provider) {
+        try {
+            const hex = await provider.request({ method: 'eth_chainId' });
+            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))
+                return null;
+            const n = Number(BigInt(hex));
+            return Number.isSafeInteger(n) && n > 0 ? n : null;
+        }
+        catch (_a) {
+            return null;
+        }
+    }
+    async login() {
+        var _a;
+        index.setAuthLoading(true);
+        try {
+            const provider = this.resolveProvider();
+            const address = await this.connectAddress(provider);
+            // Reuse a still-valid session for THIS wallet.
+            const existing = await core.getActiveSessionManager().getSession();
+            if (existing && existing.address === address) {
+                const user = this.evmUser(address);
+                this.authenticatedAddress = address;
+                index.setCurrentUser(user);
+                this.markAuthMethod();
+                return user;
+            }
+            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.
+            const nonce = await core.genAuthNonce();
+            const appId = (await core.getConfig()).appId;
+            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);
+            if (chainId === null)
+                throw new Error('Could not verify the EVM wallet chain for SIWE login');
+            const message = core.genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });
+            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the
+            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8
+            // message is signed under the EIP-191 envelope the verifier hashes.
+            const signature = await provider.request({
+                method: 'personal_sign',
+                params: [message, address],
+            });
+            const result = await core.createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);
+            await core.getActiveSessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);
+            this.markAuthMethod();
+            const user = this.evmUser(address);
+            this.authenticatedAddress = address;
+            index.setCurrentUser(user);
+            return user;
+        }
+        finally {
+            index.setAuthLoading(false);
+        }
+    }
+    resolveDomain() {
+        const actual = window.location.host.toLowerCase();
+        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {
+            throw new Error('SIWE domain override must match the current browser origin');
+        }
+        return actual;
+    }
+    resolveUri() {
+        const actual = window.location.origin.toLowerCase();
+        if (this.config.uri) {
+            let configured;
+            try {
+                configured = new URL(this.config.uri).origin.toLowerCase();
+            }
+            catch (_a) {
+                throw new Error('SIWE URI override must be an absolute URL');
+            }
+            if (configured !== actual)
+                throw new Error('SIWE URI override must match the current browser origin');
+        }
+        return actual;
+    }
+    markAuthMethod() {
+        try {
+            index.getPlatform().storage.setItem(STORED_AUTH_METHOD_KEY, INJECTED_EVM_AUTH_METHOD);
+        }
+        catch ( /* no storage */_a) { /* no storage */ }
+    }
+    async restoreSession() {
+        const session = await core.getActiveSessionManager().getSession();
+        if (!session)
+            return null;
+        // An EVM-wallet session stores the EVM address as its address; @user.address
+        // (the Solana wallet) is null for this login.
+        const address = core.normalizeEvmAddress(session.address);
+        if (!address) {
+            core.getActiveSessionManager().clearSession();
+            return null;
+        }
+        this.authenticatedAddress = address;
+        const user = this.evmUser(address);
+        index.setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        // EIP-1193 has no standard disconnect; clearing the Bounded session is the
+        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)
+        core.getActiveSessionManager().clearSession();
+        this.authenticatedAddress = null;
+        index.setCurrentUser(null);
+    }
+    // --- Signing surface -------------------------------------------------------
+    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */
+    async signMessage(message) {
+        const provider = this.resolveProvider();
+        const address = await this.connectAddress(provider);
+        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {
+            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');
+        }
+        return provider.request({ method: 'personal_sign', params: [message, address] });
+    }
+    // Solana-typed methods are structurally unsupported on an EVM wallet — the
+    // EVM onchain write goes through runTransaction (eth_sendTransaction).
+    async signTransaction(_transaction) {
+        throw new Error(NO_SOL_TX_ERR);
+    }
+    async signAndSubmitTransaction(_transaction, _feePayer) {
+        throw new Error(NO_SOL_TX_ERR);
+    }
+    /**
+     * Onchain write path: submit the worker's PRE-BUILT EIP-1559 tx via
+     * eth_sendTransaction (the injected wallet signs + submits in one step), then
+     * poll for the receipt. The EVM branch of operations.ts's 202 dispatch calls
+     * this with the pre-built payload in the EVM slot and the Solana slot undefined.
+     */
+    async runTransaction(evmTransactionData, solTransactionData, options) {
+        var _a, _b, _c;
+        const evmTx = evmTransactionData;
+        if (evmTx && solTransactionData) {
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        }
+        if (!evmTx || !core.normalizeEvmAddress(evmTx.to) || typeof evmTx.data !== 'string' || !/^0x(?:[0-9a-fA-F]{2})+$/.test(evmTx.data)) {
+            throw new Error('EVM transaction data (pre-built { to, data, chainId }) is required for an EVM onchain write');
+        }
+        // Exact decode, rather than a four-byte prefix check: permits the
+        // ordinary and attested document-write entrypoints while rejecting
+        // malformed/trailing calldata before the wallet sees a signing prompt.
+        core.assertCanonicalBoundedRuntimeWriteCalldata(evmTx.data);
+        if (!Number.isSafeInteger(evmTx.chainId) || evmTx.chainId <= 0) {
+            throw new Error('EVM transaction chainId is required and must be a positive safe integer');
+        }
+        const chainId = evmTx.chainId;
+        const trustedRuntime = (_b = (_a = this.config.runtimeAddresses) === null || _a === void 0 ? void 0 : _a[String(chainId)]) !== null && _b !== void 0 ? _b : (this.config.chainId === chainId ? this.config.runtimeAddress : undefined);
+        if (!trustedRuntime)
+            throw new Error(`No trusted BoundedRuntime address configured for EVM chain ${chainId}`);
+        if (core.normalizeEvmAddress(evmTx.to) !== trustedRuntime) {
+            throw new Error('EVM transaction target is not the configured BoundedRuntime');
+        }
+        if (evmTx.nonce !== undefined) {
+            throw new Error('Server-supplied EVM nonces are not accepted');
+        }
+        try {
+            if (BigInt((_c = evmTx.value) !== null && _c !== void 0 ? _c : '0') !== BigInt(0)) {
+                throw new Error('BoundedRuntime.setDocuments cannot transfer native value');
+            }
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('cannot transfer'))
+                throw error;
+            throw new Error('Invalid EVM transaction value');
+        }
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false) {
+            // Injected EVM wallets sign+submit atomically; eth_signTransaction is not
+            // broadly supported (MetaMask removed it), so we cannot return a signed-
+            // but-unsubmitted tx here. Fail clearly instead of silently submitting.
+            throw new Error('shouldSubmitTx:false is unsupported for injected EVM wallets (they sign and submit atomically).');
+        }
+        const provider = this.resolveProvider();
+        const from = await this.connectAddress(provider);
+        if (!this.authenticatedAddress || from !== this.authenticatedAddress) {
+            throw new Error('The connected EVM wallet account changed after login. Sign in again before submitting this write.');
+        }
+        // Chain-switch guard: the pre-built tx names the chain it MUST execute on.
+        if (typeof evmTx.chainId === 'number') {
+            const current = await this.currentChainId(provider);
+            if (current === null)
+                throw new Error('Could not verify the EVM wallet chain; refusing to submit the transaction.');
+            if (current !== evmTx.chainId) {
+                const targetHex = '0x' + evmTx.chainId.toString(16);
+                try {
+                    await provider.request({
+                        method: 'wallet_switchEthereumChain',
+                        params: [{ chainId: targetHex }],
+                    });
+                }
+                catch (err) {
+                    throw new Error(`EVM wallet is on chain ${current} but this write targets chain ${evmTx.chainId}, ` +
+                        `and the chain switch was rejected or failed${(err === null || err === void 0 ? void 0 : err.message) ? `: ${err.message}` : ''}. ` +
+                        `Switch your wallet to chain ${evmTx.chainId} and retry.`);
+                }
+                const switched = await this.currentChainId(provider);
+                if (switched !== evmTx.chainId) {
+                    throw new Error(`EVM wallet did not switch to required chain ${evmTx.chainId}; refusing to submit.`);
+                }
+            }
+        }
+        const txParams = { from, to: core.normalizeEvmAddress(evmTx.to), data: evmTx.data.toLowerCase() };
+        txParams.value = '0x0';
+        // Gas, fee and nonce hints come from the server and are not part of the
+        // governed action. Deliberately omit them: the wallet estimates locally,
+        // preventing a compromised response from forcing an abusive fee/nonce.
+        const txHash = await provider.request({
+            method: 'eth_sendTransaction',
+            params: [txParams],
+        });
+        if (typeof txHash !== 'string' || !/^0x[0-9a-fA-F]{64}$/.test(txHash)) {
+            throw new Error('EVM wallet returned an invalid transaction hash');
+        }
+        const receipt = await this.waitForReceipt(provider, txHash);
+        if (!receipt || typeof receipt.status !== 'string' || !/^0x[0-9a-fA-F]+$/.test(receipt.status)) {
+            throw new Error(`EVM transaction ${txHash} returned an invalid receipt status`);
+        }
+        if (BigInt(receipt.status) !== BigInt(1)) {
+            throw new Error(`EVM transaction ${txHash} reverted on-chain`);
+        }
+        if (typeof receipt.blockNumber !== 'string' || !/^0x[0-9a-fA-F]+$/.test(receipt.blockNumber)) {
+            throw new Error(`EVM transaction ${txHash} returned an invalid block number`);
+        }
+        const blockNumber = BigInt(receipt.blockNumber);
+        if (blockNumber > BigInt(Number.MAX_SAFE_INTEGER))
+            throw new Error('EVM receipt block number exceeds the SDK safe-integer range');
+        if (typeof receipt.gasUsed !== 'string' || !/^0x[0-9a-fA-F]+$/.test(receipt.gasUsed)) {
+            throw new Error(`EVM transaction ${txHash} returned invalid gas usage`);
+        }
+        return {
+            transactionSignature: txHash,
+            blockNumber: Number(blockNumber),
+            gasUsed: BigInt(receipt.gasUsed).toString(),
+            data: receipt,
+        };
+    }
+    /** Poll eth_getTransactionReceipt until it lands (bounded retries) or throw. */
+    async waitForReceipt(provider, txHash) {
+        for (let attempt = 0; attempt < RECEIPT_POLL_ATTEMPTS; attempt++) {
+            const receipt = await provider.request({
+                method: 'eth_getTransactionReceipt',
+                params: [txHash],
+            });
+            if (receipt)
+                return receipt;
+            await new Promise((r) => setTimeout(r, RECEIPT_POLL_INTERVAL_MS));
+        }
+        throw new Error(`EVM transaction ${txHash} was submitted but no receipt confirmed within ` +
+            `${(RECEIPT_POLL_ATTEMPTS * RECEIPT_POLL_INTERVAL_MS) / 1000}s. It may still land; check the explorer.`);
+    }
+    async getNativeMethods() {
+        return this.resolveProvider();
+    }
+}
+InjectedEvmWalletProvider.instance = null;
+
+exports.defaultInjectedEvmProvider = index.defaultInjectedEvmProvider;
+exports.InjectedEvmWalletProvider = InjectedEvmWalletProvider;
+//# sourceMappingURL=injected-evm-wallet-provider-BLQzWiBP.js.map

package/dist/injected-evm-wallet-provider-BLQzWiBP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injected-evm-wallet-provider-BLQzWiBP.js","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, assertCanonicalBoundedRuntimeWriteCalldata, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\nconst STORED_AUTH_METHOD_KEY = 'bounded_last_auth_method';\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login signs+submits transactions in one step (eth_sendTransaction) and has no Solana ' +\n    'transaction surface. Use an onchain WRITE (setMany) — the worker returns a pre-built EVM tx that ' +\n    'runTransaction submits — instead of signTransaction/signAndSubmitTransaction.';\n// Bounded polling for the tx receipt: ~60s at 2s cadence (L2 blocks are seconds).\nconst RECEIPT_POLL_ATTEMPTS = 30;\nconst RECEIPT_POLL_INTERVAL_MS = 2000;\nfunction normalizeConfig(config) {\n    var _a;\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    let runtimeAddress;\n    if (config.runtimeAddress !== undefined) {\n        runtimeAddress = (_a = normalizeEvmAddress(config.runtimeAddress)) !== null && _a !== void 0 ? _a : undefined;\n        if (!runtimeAddress)\n            throw new Error('EVM wallet runtimeAddress is invalid');\n        if (config.chainId === undefined)\n            throw new Error('EVM wallet runtimeAddress requires an explicit chainId');\n    }\n    let runtimeAddresses;\n    if (config.runtimeAddresses !== undefined) {\n        runtimeAddresses = {};\n        for (const [rawChainId, rawAddress] of Object.entries(config.runtimeAddresses)) {\n            const chainId = Number(rawChainId);\n            const address = normalizeEvmAddress(rawAddress);\n            if (!Number.isSafeInteger(chainId) || chainId <= 0 || String(chainId) !== rawChainId || !address) {\n                throw new Error(`Invalid EVM runtime allowlist entry for chain ${rawChainId}`);\n            }\n            runtimeAddresses[rawChainId] = address;\n        }\n    }\n    return Object.assign(Object.assign({}, config), { runtimeAddress, runtimeAddresses });\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login. User.address\n    // is typed `string` for legacy reasons — email logins cast the same null the same\n    // way (email-auth-provider.ts) — so the null is cast here in one place.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        try {\n            getPlatform().storage.setItem(STORED_AUTH_METHOD_KEY, INJECTED_EVM_AUTH_METHOD);\n        }\n        catch ( /* no storage */_a) { /* no storage */ }\n    }\n    async restoreSession() {\n        const session = await SessionManager().getSession();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet — the\n    // EVM onchain write goes through runTransaction (eth_sendTransaction).\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    /**\n     * Onchain write path: submit the worker's PRE-BUILT EIP-1559 tx via\n     * eth_sendTransaction (the injected wallet signs + submits in one step), then\n     * poll for the receipt. The EVM branch of operations.ts's 202 dispatch calls\n     * this with the pre-built payload in the EVM slot and the Solana slot undefined.\n     */\n    async runTransaction(evmTransactionData, solTransactionData, options) {\n        var _a, _b, _c;\n        const evmTx = evmTransactionData;\n        if (evmTx && solTransactionData) {\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        }\n        if (!evmTx || !normalizeEvmAddress(evmTx.to) || typeof evmTx.data !== 'string' || !/^0x(?:[0-9a-fA-F]{2})+$/.test(evmTx.data)) {\n            throw new Error('EVM transaction data (pre-built { to, data, chainId }) is required for an EVM onchain write');\n        }\n        // Exact decode, rather than a four-byte prefix check: permits the\n        // ordinary and attested document-write entrypoints while rejecting\n        // malformed/trailing calldata before the wallet sees a signing prompt.\n        assertCanonicalBoundedRuntimeWriteCalldata(evmTx.data);\n        if (!Number.isSafeInteger(evmTx.chainId) || evmTx.chainId <= 0) {\n            throw new Error('EVM transaction chainId is required and must be a positive safe integer');\n        }\n        const chainId = evmTx.chainId;\n        const trustedRuntime = (_b = (_a = this.config.runtimeAddresses) === null || _a === void 0 ? void 0 : _a[String(chainId)]) !== null && _b !== void 0 ? _b : (this.config.chainId === chainId ? this.config.runtimeAddress : undefined);\n        if (!trustedRuntime)\n            throw new Error(`No trusted BoundedRuntime address configured for EVM chain ${chainId}`);\n        if (normalizeEvmAddress(evmTx.to) !== trustedRuntime) {\n            throw new Error('EVM transaction target is not the configured BoundedRuntime');\n        }\n        if (evmTx.nonce !== undefined) {\n            throw new Error('Server-supplied EVM nonces are not accepted');\n        }\n        try {\n            if (BigInt((_c = evmTx.value) !== null && _c !== void 0 ? _c : '0') !== BigInt(0)) {\n                throw new Error('BoundedRuntime.setDocuments cannot transfer native value');\n            }\n        }\n        catch (error) {\n            if (error instanceof Error && error.message.includes('cannot transfer'))\n                throw error;\n            throw new Error('Invalid EVM transaction value');\n        }\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false) {\n            // Injected EVM wallets sign+submit atomically; eth_signTransaction is not\n            // broadly supported (MetaMask removed it), so we cannot return a signed-\n            // but-unsubmitted tx here. Fail clearly instead of silently submitting.\n            throw new Error('shouldSubmitTx:false is unsupported for injected EVM wallets (they sign and submit atomically).');\n        }\n        const provider = this.resolveProvider();\n        const from = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || from !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before submitting this write.');\n        }\n        // Chain-switch guard: the pre-built tx names the chain it MUST execute on.\n        if (typeof evmTx.chainId === 'number') {\n            const current = await this.currentChainId(provider);\n            if (current === null)\n                throw new Error('Could not verify the EVM wallet chain; refusing to submit the transaction.');\n            if (current !== evmTx.chainId) {\n                const targetHex = '0x' + evmTx.chainId.toString(16);\n                try {\n                    await provider.request({\n                        method: 'wallet_switchEthereumChain',\n                        params: [{ chainId: targetHex }],\n                    });\n                }\n                catch (err) {\n                    throw new Error(`EVM wallet is on chain ${current} but this write targets chain ${evmTx.chainId}, ` +\n                        `and the chain switch was rejected or failed${(err === null || err === void 0 ? void 0 : err.message) ? `: ${err.message}` : ''}. ` +\n                        `Switch your wallet to chain ${evmTx.chainId} and retry.`);\n                }\n                const switched = await this.currentChainId(provider);\n                if (switched !== evmTx.chainId) {\n                    throw new Error(`EVM wallet did not switch to required chain ${evmTx.chainId}; refusing to submit.`);\n                }\n            }\n        }\n        const txParams = { from, to: normalizeEvmAddress(evmTx.to), data: evmTx.data.toLowerCase() };\n        txParams.value = '0x0';\n        // Gas, fee and nonce hints come from the server and are not part of the\n        // governed action. Deliberately omit them: the wallet estimates locally,\n        // preventing a compromised response from forcing an abusive fee/nonce.\n        const txHash = await provider.request({\n            method: 'eth_sendTransaction',\n            params: [txParams],\n        });\n        if (typeof txHash !== 'string' || !/^0x[0-9a-fA-F]{64}$/.test(txHash)) {\n            throw new Error('EVM wallet returned an invalid transaction hash');\n        }\n        const receipt = await this.waitForReceipt(provider, txHash);\n        if (!receipt || typeof receipt.status !== 'string' || !/^0x[0-9a-fA-F]+$/.test(receipt.status)) {\n            throw new Error(`EVM transaction ${txHash} returned an invalid receipt status`);\n        }\n        if (BigInt(receipt.status) !== BigInt(1)) {\n            throw new Error(`EVM transaction ${txHash} reverted on-chain`);\n        }\n        if (typeof receipt.blockNumber !== 'string' || !/^0x[0-9a-fA-F]+$/.test(receipt.blockNumber)) {\n            throw new Error(`EVM transaction ${txHash} returned an invalid block number`);\n        }\n        const blockNumber = BigInt(receipt.blockNumber);\n        if (blockNumber > BigInt(Number.MAX_SAFE_INTEGER))\n            throw new Error('EVM receipt block number exceeds the SDK safe-integer range');\n        if (typeof receipt.gasUsed !== 'string' || !/^0x[0-9a-fA-F]+$/.test(receipt.gasUsed)) {\n            throw new Error(`EVM transaction ${txHash} returned invalid gas usage`);\n        }\n        return {\n            transactionSignature: txHash,\n            blockNumber: Number(blockNumber),\n            gasUsed: BigInt(receipt.gasUsed).toString(),\n            data: receipt,\n        };\n    }\n    /** Poll eth_getTransactionReceipt until it lands (bounded retries) or throw. */\n    async waitForReceipt(provider, txHash) {\n        for (let attempt = 0; attempt < RECEIPT_POLL_ATTEMPTS; attempt++) {\n            const receipt = await provider.request({\n                method: 'eth_getTransactionReceipt',\n                params: [txHash],\n            });\n            if (receipt)\n                return receipt;\n            await new Promise((r) => setTimeout(r, RECEIPT_POLL_INTERVAL_MS));\n        }\n        throw new Error(`EVM transaction ${txHash} was submitted but no receipt confirmed within ` +\n            `${(RECEIPT_POLL_ATTEMPTS * RECEIPT_POLL_INTERVAL_MS) / 1000}s. It may still land; check the explorer.`);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["normalizeEvmAddress","defaultInjectedEvmProvider","setAuthLoading","SessionManager","setCurrentUser","genAuthNonce","getConfig","genSiweMessage","createSessionWithSignature","getPlatform","assertCanonicalBoundedRuntimeWriteCalldata"],"mappings":";;;;;;AAOA,MAAM,sBAAsB,GAAG,0BAA0B;AACzD;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,kGAAkG;AACxH,IAAI,mGAAmG;AACvG,IAAI,+EAA+E;AACnF;AACA,MAAM,qBAAqB,GAAG,EAAE;AAChC,MAAM,wBAAwB,GAAG,IAAI;AACrC,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,EAAE;AACV,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,IAAI,cAAc;AACtB,IAAI,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE;AAC7C,QAAQ,cAAc,GAAG,CAAC,EAAE,GAAGA,wBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,SAAS;AACrH,QAAQ,IAAI,CAAC,cAAc;AAC3B,YAAY,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AACnE,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;AACxC,YAAY,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC;AACrF,IAAI;AACJ,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE;AAC/C,QAAQ,gBAAgB,GAAG,EAAE;AAC7B,QAAQ,KAAK,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE;AACxF,YAAY,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;AAC9C,YAAY,MAAM,OAAO,GAAGA,wBAAmB,CAAC,UAAU,CAAC;AAC3D,YAAY,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,OAAO,EAAE;AAC9G,gBAAgB,MAAM,IAAI,KAAK,CAAC,CAAC,8CAA8C,EAAE,UAAU,CAAC,CAAC,CAAC;AAC9F,YAAY;AACZ,YAAY,gBAAgB,CAAC,UAAU,CAAC,GAAG,OAAO;AAClD,QAAQ;AACR,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AACzF;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAGC,gCAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAGD,wBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQE,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMC,4BAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgBC,oBAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAMC,iBAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAMC,cAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAGC,mBAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAMC,+BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAML,4BAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAYC,oBAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAYF,oBAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQ,IAAI;AACZ,YAAYO,iBAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;AAC3F,QAAQ;AACR,QAAQ,wBAAwB,EAAE,EAAE,mBAAmB;AACvD,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,OAAO,GAAG,MAAMN,4BAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAGH,wBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAYG,4BAAc,EAAE,CAAC,YAAY,EAAE;AAC3C,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQD,4BAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,OAAO,EAAE;AAC1E,QAAQ,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE;AACtB,QAAQ,MAAM,KAAK,GAAG,kBAAkB;AACxC,QAAQ,IAAI,KAAK,IAAI,kBAAkB,EAAE;AACzC,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ;AACR,QAAQ,IAAI,CAAC,KAAK,IAAI,CAACJ,wBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;AACvI,YAAY,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC;AAC1H,QAAQ;AACR;AACA;AACA;AACA,QAAQU,+CAA0C,CAAC,KAAK,CAAC,IAAI,CAAC;AAC9D,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE;AACxE,YAAY,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC;AACtG,QAAQ;AACR,QAAQ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;AACrC,QAAQ,MAAM,cAAc,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;AAC9O,QAAQ,IAAI,CAAC,cAAc;AAC3B,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,2DAA2D,EAAE,OAAO,CAAC,CAAC,CAAC;AACpG,QAAQ,IAAIV,wBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,cAAc,EAAE;AAC9D,YAAY,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;AAC1F,QAAQ;AACR,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE;AACvC,YAAY,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC;AAC1E,QAAQ;AACR,QAAQ,IAAI;AACZ,YAAY,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE;AAC/F,gBAAgB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC;AAC3F,YAAY;AACZ,QAAQ;AACR,QAAQ,OAAO,KAAK,EAAE;AACtB,YAAY,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;AACnF,gBAAgB,MAAM,KAAK;AAC3B,YAAY,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC;AAC5D,QAAQ;AACR,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK,EAAE;AAClG;AACA;AACA;AACA,YAAY,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC;AAC9H,QAAQ;AACR,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AACxD,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,IAAI,KAAK,IAAI,CAAC,oBAAoB,EAAE;AAC9E,YAAY,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC;AAChI,QAAQ;AACR;AACA,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE;AAC/C,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC;AAC7G,YAAY,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;AAC3C,gBAAgB,MAAM,SAAS,GAAG,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;AACnE,gBAAgB,IAAI;AACpB,oBAAoB,MAAM,QAAQ,CAAC,OAAO,CAAC;AAC3C,wBAAwB,MAAM,EAAE,4BAA4B;AAC5D,wBAAwB,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACxD,qBAAqB,CAAC;AACtB,gBAAgB;AAChB,gBAAgB,OAAO,GAAG,EAAE;AAC5B,oBAAoB,MAAM,IAAI,KAAK,CAAC,CAAC,uBAAuB,EAAE,OAAO,CAAC,8BAA8B,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACvH,wBAAwB,CAAC,2CAA2C,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;AAC3J,wBAAwB,CAAC,4BAA4B,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAClF,gBAAgB;AAChB,gBAAgB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AACpE,gBAAgB,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE;AAChD,oBAAoB,MAAM,IAAI,KAAK,CAAC,CAAC,4CAA4C,EAAE,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AACxH,gBAAgB;AAChB,YAAY;AACZ,QAAQ;AACR,QAAQ,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,EAAE,EAAEA,wBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE;AACpG,QAAQ,QAAQ,CAAC,KAAK,GAAG,KAAK;AAC9B;AACA;AACA;AACA,QAAQ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AAC9C,YAAY,MAAM,EAAE,qBAAqB;AACzC,YAAY,MAAM,EAAE,CAAC,QAAQ,CAAC;AAC9B,SAAS,CAAC;AACV,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC;AAC9E,QAAQ;AACR,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC;AACnE,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;AACxG,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,mCAAmC,CAAC,CAAC;AAC3F,QAAQ;AACR,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE;AAClD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAC1E,QAAQ;AACR,QAAQ,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;AACtG,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,iCAAiC,CAAC,CAAC;AACzF,QAAQ;AACR,QAAQ,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;AACvD,QAAQ,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;AACzD,YAAY,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;AAC1F,QAAQ,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;AAC9F,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC;AACnF,QAAQ;AACR,QAAQ,OAAO;AACf,YAAY,oBAAoB,EAAE,MAAM;AACxC,YAAY,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC;AAC5C,YAAY,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;AACvD,YAAY,IAAI,EAAE,OAAO;AACzB,SAAS;AACT,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE;AAC3C,QAAQ,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,qBAAqB,EAAE,OAAO,EAAE,EAAE;AAC1E,YAAY,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACnD,gBAAgB,MAAM,EAAE,2BAA2B;AACnD,gBAAgB,MAAM,EAAE,CAAC,MAAM,CAAC;AAChC,aAAa,CAAC;AACd,YAAY,IAAI,OAAO;AACvB,gBAAgB,OAAO,OAAO;AAC9B,YAAY,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAC7E,QAAQ;AACR,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,+CAA+C,CAAC;AAClG,YAAY,CAAC,EAAE,CAAC,qBAAqB,GAAG,wBAAwB,IAAI,IAAI,CAAC,yCAAyC,CAAC,CAAC;AACpH,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;;"}