@chipmobilesdk/rn-local-db 0.3.0 → 0.5.0

package/lib/commonjs/migration/executor.js

@@ -0,0 +1,136 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.runMigrations = runMigrations;
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+var _faults = require("../diagnostics/faults.js");
+var _collection = require("../adapter/collection.js");
+var _ledger = require("./ledger.js");
+var _validateChain = require("./validate-chain.js");
+/**
+ * The migration executor.
+ *
+ * Four rules, each of which exists because the alternative loses data:
+ *
+ * - **Ascending, and pending only.** A migration whose version is at or below
+ *   the recorded one has already run against this scope (FR-047, FR-049).
+ * - **One transaction per migration.** A failure unwinds that migration and
+ *   nothing else, so the recorded version and the data always agree.
+ * - **The recorded version moves only on success**, inside the same
+ *   transaction as the migration's own writes. Writing it separately would
+ *   leave a window where a crash records a migration that did not happen.
+ * - **A failure returns no handle** (FR-050). Half-migrated data behind a
+ *   working handle is the failure this whole design exists to prevent, and it
+ *   is worse than being unable to open at all: the app writes to it.
+ *
+ * A retry starts from the same version rather than skipping ahead (FR-051),
+ * which is what makes a transient failure — a locked keychain, a full disk
+ * mid-migration — recoverable on the next launch instead of permanent.
+ */
+
+function migrationContextFor(context, executor) {
+  return {
+    collection(name) {
+      return (0, _collection.createSqlCollection)({
+        executor: () => executor,
+        schema: context.schemaFor(name),
+        now: context.now,
+        // Inside a migration the handle does not exist yet, so there is
+        // no closed-handle or deleted-scope state to guard against.
+        assertUsable: () => {}
+      });
+    },
+    async abort() {
+      // A migration that wants to give up should throw; aborting the
+      // transaction from inside while the executor still believes it is
+      // running would record an outcome that never happened.
+      (0, _errors2.raise)(_errors.DiagnosticCodes.TRANSACTION_STATE, {
+        message: 'a migration cannot abort its own transaction'
+      });
+    },
+    async execute(sql, params) {
+      await executor.execute(sql, params);
+    }
+  };
+}
+async function runMigrations(context) {
+  const {
+    config,
+    connection
+  } = context;
+  (0, _validateChain.validateMigrationChain)(config);
+  // Skipped when the open already found its bookkeeping tables in place.
+  if (context.ledgerReady !== true) {
+    await (0, _ledger.ensureLedger)(connection);
+  }
+  const {
+    schema: recorded,
+    format
+  } = await (0, _ledger.readVersions)(connection);
+  if (format > _ledger.FORMAT_VERSION) {
+    // A file laid out by a newer release of this package. Reading it with
+    // older code is the same hazard as a schema downgrade, one layer down.
+    await context.closeOnFailure();
+    (0, _errors2.raise)(_errors.DiagnosticCodes.SCHEMA_DOWNGRADE, {
+      message: 'database was written by a newer version of this package',
+      detail: {
+        recordedVersion: format,
+        version: _ledger.FORMAT_VERSION
+      }
+    });
+  }
+  if (recorded > config.schemaVersion) {
+    // Opening anyway would mean newer data read by older code, which drops
+    // whatever the newer schema added — silently, and on write (FR-052).
+    await context.closeOnFailure();
+    (0, _errors2.raise)(_errors.DiagnosticCodes.SCHEMA_DOWNGRADE, {
+      message: 'recorded schema version is newer than the declared one',
+      detail: {
+        recordedVersion: recorded,
+        version: config.schemaVersion
+      }
+    });
+  }
+  let current = recorded;
+  for (const migration of (0, _validateChain.pendingMigrations)(config, recorded)) {
+    try {
+      await connection.transaction(async tx => {
+        (0, _faults.throwIfFaulted)('migration');
+        await migration.migrate(migrationContextFor(context, tx));
+        await (0, _ledger.writeSchemaVersion)(tx, migration.version);
+        await (0, _ledger.recordAttempt)(tx, {
+          version: migration.version,
+          attemptedAt: context.now(),
+          outcome: 'applied'
+        });
+      });
+      current = migration.version;
+    } catch (error) {
+      // Recorded outside the rolled-back transaction, or it would vanish
+      // with the migration it describes.
+      await (0, _ledger.recordAttempt)(connection, {
+        version: migration.version,
+        attemptedAt: context.now(),
+        outcome: 'failed',
+        failureCode: error.code ?? _errors.DiagnosticCodes.MIGRATION_FAILED
+      });
+      await context.closeOnFailure();
+      (0, _errors2.raise)(_errors.DiagnosticCodes.MIGRATION_FAILED, {
+        message: 'migration failed',
+        migration: {
+          // Unchanged: the next open retries from here rather than
+          // skipping the migration that failed.
+          recordedVersion: current,
+          failingVersion: migration.version,
+          outcome: 'failed'
+        },
+        cause: error
+      });
+    }
+  }
+  return current;
+}
+//# sourceMappingURL=executor.js.map

package/lib/commonjs/migration/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_errors2","_faults","_collection","_ledger","_validateChain","migrationContextFor","context","executor","collection","name","createSqlCollection","schema","schemaFor","now","assertUsable","abort","raise","DiagnosticCodes","TRANSACTION_STATE","message","execute","sql","params","runMigrations","config","connection","validateMigrationChain","ledgerReady","ensureLedger","recorded","format","readVersions","FORMAT_VERSION","closeOnFailure","SCHEMA_DOWNGRADE","detail","recordedVersion","version","schemaVersion","current","migration","pendingMigrations","transaction","tx","throwIfFaulted","migrate","writeSchemaVersion","recordAttempt","attemptedAt","outcome","error","failureCode","code","MIGRATION_FAILED","failingVersion","cause"],"sourceRoot":"../../../src","sources":["migration/executor.ts"],"mappings":";;;;;;AAsBA,IAAAA,OAAA,GAAAC,OAAA;AAKA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAJ,OAAA;AAOA,IAAAK,cAAA,GAAAL,OAAA;AAtCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAqCA,SAASM,mBAAmBA,CAACC,OAA4B,EAAEC,QAAkB,EAAoB;EAChG,OAAO;IACNC,UAAUA,CAA+BC,IAAY,EAAoB;MACxE,OAAO,IAAAC,+BAAmB,EAAI;QAC7BH,QAAQ,EAAEA,CAAA,KAAMA,QAAQ;QACxBI,MAAM,EAAEL,OAAO,CAACM,SAAS,CAACH,IAAI,CAAC;QAC/BI,GAAG,EAAEP,OAAO,CAACO,GAAG;QAChB;QACA;QACAC,YAAY,EAAEA,CAAA,KAAM,CAAC;MACtB,CAAC,CAAC;IACH,CAAC;IACD,MAAMC,KAAKA,CAAA,EAAkB;MAC5B;MACA;MACA;MACA,IAAAC,cAAK,EAACC,uBAAe,CAACC,iBAAiB,EAAE;QACxCC,OAAO,EAAE;MACV,CAAC,CAAC;IACH,CAAC;IACD,MAAMC,OAAOA,CAACC,GAAW,EAAEC,MAAuB,EAAiB;MAClE,MAAMf,QAAQ,CAACa,OAAO,CAACC,GAAG,EAAEC,MAAM,CAAC;IACpC;EACD,CAAC;AACF;AAEO,eAAeC,aAAaA,CAACjB,OAA4B,EAAmB;EAClF,MAAM;IAAEkB,MAAM;IAAEC;EAAW,CAAC,GAAGnB,OAAO;EACtC,IAAAoB,qCAAsB,EAACF,MAAM,CAAC;EAC9B;EACA,IAAIlB,OAAO,CAACqB,WAAW,KAAK,IAAI,EAAE;IACjC,MAAM,IAAAC,oBAAY,EAACH,UAAU,CAAC;EAC/B;EAEA,MAAM;IAAEd,MAAM,EAAEkB,QAAQ;IAAEC;EAAO,CAAC,GAAG,MAAM,IAAAC,oBAAY,EAACN,UAAU,CAAC;EAEnE,IAAIK,MAAM,GAAGE,sBAAc,EAAE;IAC5B;IACA;IACA,MAAM1B,OAAO,CAAC2B,cAAc,CAAC,CAAC;IAC9B,IAAAjB,cAAK,EAACC,uBAAe,CAACiB,gBAAgB,EAAE;MACvCf,OAAO,EAAE,yDAAyD;MAClEgB,MAAM,EAAE;QAAEC,eAAe,EAAEN,MAAM;QAAEO,OAAO,EAAEL;MAAe;IAC5D,CAAC,CAAC;EACH;EAEA,IAAIH,QAAQ,GAAGL,MAAM,CAACc,aAAa,EAAE;IACpC;IACA;IACA,MAAMhC,OAAO,CAAC2B,cAAc,CAAC,CAAC;IAC9B,IAAAjB,cAAK,EAACC,uBAAe,CAACiB,gBAAgB,EAAE;MACvCf,OAAO,EAAE,wDAAwD;MACjEgB,MAAM,EAAE;QAAEC,eAAe,EAAEP,QAAQ;QAAEQ,OAAO,EAAEb,MAAM,CAACc;MAAc;IACpE,CAAC,CAAC;EACH;EAEA,IAAIC,OAAO,GAAGV,QAAQ;EAEtB,KAAK,MAAMW,SAAS,IAAI,IAAAC,gCAAiB,EAACjB,MAAM,EAAEK,QAAQ,CAAC,EAAE;IAC5D,IAAI;MACH,MAAMJ,UAAU,CAACiB,WAAW,CAAC,MAAMC,EAAE,IAAI;QACxC,IAAAC,sBAAc,EAAC,WAAW,CAAC;QAC3B,MAAMJ,SAAS,CAACK,OAAO,CAACxC,mBAAmB,CAACC,OAAO,EAAEqC,EAAE,CAAC,CAAC;QACzD,MAAM,IAAAG,0BAAkB,EAACH,EAAE,EAAEH,SAAS,CAACH,OAAO,CAAC;QAC/C,MAAM,IAAAU,qBAAa,EAACJ,EAAE,EAAE;UACvBN,OAAO,EAAEG,SAAS,CAACH,OAAO;UAC1BW,WAAW,EAAE1C,OAAO,CAACO,GAAG,CAAC,CAAC;UAC1BoC,OAAO,EAAE;QACV,CAAC,CAAC;MACH,CAAC,CAAC;MACFV,OAAO,GAAGC,SAAS,CAACH,OAAO;IAC5B,CAAC,CAAC,OAAOa,KAAK,EAAE;MACf;MACA;MACA,MAAM,IAAAH,qBAAa,EAACtB,UAAU,EAAE;QAC/BY,OAAO,EAAEG,SAAS,CAACH,OAAO;QAC1BW,WAAW,EAAE1C,OAAO,CAACO,GAAG,CAAC,CAAC;QAC1BoC,OAAO,EAAE,QAAQ;QACjBE,WAAW,EAAGD,KAAK,CAAuBE,IAAI,IAAInC,uBAAe,CAACoC;MACnE,CAAC,CAAC;MACF,MAAM/C,OAAO,CAAC2B,cAAc,CAAC,CAAC;MAC9B,IAAAjB,cAAK,EAACC,uBAAe,CAACoC,gBAAgB,EAAE;QACvClC,OAAO,EAAE,kBAAkB;QAC3BqB,SAAS,EAAE;UACV;UACA;UACAJ,eAAe,EAAEG,OAAO;UACxBe,cAAc,EAAEd,SAAS,CAACH,OAAO;UACjCY,OAAO,EAAE;QACV,CAAC;QACDM,KAAK,EAAEL;MACR,CAAC,CAAC;IACH;EACD;EAEA,OAAOX,OAAO;AACf","ignoreList":[]}

package/lib/commonjs/migration/ledger.js

@@ -0,0 +1,64 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.FORMAT_VERSION = void 0;
+exports.ensureLedger = ensureLedger;
+exports.readVersions = readVersions;
+exports.recordAttempt = recordAttempt;
+exports.writeSchemaVersion = writeSchemaVersion;
+var _values = require("../sqlite/values.js");
+/**
+ * The per-scope migration ledger.
+ *
+ * Per scope, not per database, and that is the whole reason FR-054 works: a
+ * scope created after a migration shipped starts at version 0 and is migrated
+ * on first open, rather than being assumed current because some other scope
+ * already ran the chain.
+ *
+ * The ledger records a **code**, never a message (FR-079). A migration that
+ * failed because a domain constraint was violated could otherwise write the
+ * offending value into a table that outlives the failure — a payload leak
+ * with a long half-life, sitting in a file the next crash report might carry.
+ */
+
+/** Physical layout version, independent of the app's schema version. */
+const FORMAT_VERSION = exports.FORMAT_VERSION = 1;
+const CREATE_META = `CREATE TABLE IF NOT EXISTS _meta (
+  key   TEXT PRIMARY KEY,
+  value TEXT NOT NULL
+)`;
+const CREATE_MIGRATIONS = `CREATE TABLE IF NOT EXISTS _migrations (
+  version      INTEGER PRIMARY KEY,
+  attempted_at INTEGER NOT NULL,
+  outcome      TEXT NOT NULL,
+  failure_code TEXT
+)`;
+async function ensureLedger(executor) {
+  await executor.execute(CREATE_META);
+  await executor.execute(CREATE_MIGRATIONS);
+  await executor.execute('INSERT INTO _meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO NOTHING', ['format_version', String(FORMAT_VERSION)]);
+  await executor.execute('INSERT INTO _meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO NOTHING', ['schema_version', '0']);
+}
+/** Both versions in one read: every open asks for them. */
+async function readVersions(executor) {
+  const result = await executor.execute("SELECT key, value FROM _meta WHERE key IN ('schema_version', 'format_version')");
+  const values = new Map(result.rows.map(row => [(0, _values.text)(row.key), Number((0, _values.text)(row.value))]));
+  return {
+    schema: values.get('schema_version') ?? 0,
+    format: values.get('format_version') ?? FORMAT_VERSION
+  };
+}
+async function writeSchemaVersion(executor, version) {
+  await executor.execute('INSERT INTO _meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value', ['schema_version', String(version)]);
+}
+async function recordAttempt(executor, entry) {
+  await executor.execute(`INSERT INTO _migrations (version, attempted_at, outcome, failure_code)
+		 VALUES (?, ?, ?, ?)
+		 ON CONFLICT(version) DO UPDATE SET
+		   attempted_at = excluded.attempted_at,
+		   outcome = excluded.outcome,
+		   failure_code = excluded.failure_code`, [entry.version, entry.attemptedAt, entry.outcome, entry.failureCode ?? null]);
+}
+//# sourceMappingURL=ledger.js.map

package/lib/commonjs/migration/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_values","require","FORMAT_VERSION","exports","CREATE_META","CREATE_MIGRATIONS","ensureLedger","executor","execute","String","readVersions","result","values","Map","rows","map","row","text","key","Number","value","schema","get","format","writeSchemaVersion","version","recordAttempt","entry","attemptedAt","outcome","failureCode"],"sourceRoot":"../../../src","sources":["migration/ledger.ts"],"mappings":";;;;;;;;;;AAgBA,IAAAA,OAAA,GAAAC,OAAA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACO,MAAMC,cAAc,GAAAC,OAAA,CAAAD,cAAA,GAAG,CAAC;AAE/B,MAAME,WAAW,GAAG;AACpB;AACA;AACA,EAAE;AAEF,MAAMC,iBAAiB,GAAG;AAC1B;AACA;AACA;AACA;AACA,EAAE;AAEK,eAAeC,YAAYA,CAACC,QAAkB,EAAiB;EACrE,MAAMA,QAAQ,CAACC,OAAO,CAACJ,WAAW,CAAC;EACnC,MAAMG,QAAQ,CAACC,OAAO,CAACH,iBAAiB,CAAC;EACzC,MAAME,QAAQ,CAACC,OAAO,CACrB,0EAA0E,EAC1E,CAAC,gBAAgB,EAAEC,MAAM,CAACP,cAAc,CAAC,CAC1C,CAAC;EACD,MAAMK,QAAQ,CAACC,OAAO,CACrB,0EAA0E,EAC1E,CAAC,gBAAgB,EAAE,GAAG,CACvB,CAAC;AACF;AASA;AACO,eAAeE,YAAYA,CAACH,QAAkB,EAA6B;EACjF,MAAMI,MAAM,GAAG,MAAMJ,QAAQ,CAACC,OAAO,CACpC,gFACD,CAAC;EACD,MAAMI,MAAM,GAAG,IAAIC,GAAG,CAACF,MAAM,CAACG,IAAI,CAACC,GAAG,CAACC,GAAG,IAAI,CAAC,IAAAC,YAAI,EAACD,GAAG,CAACE,GAAG,CAAC,EAAEC,MAAM,CAAC,IAAAF,YAAI,EAACD,GAAG,CAACI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;EACxF,OAAO;IACNC,MAAM,EAAET,MAAM,CAACU,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACzCC,MAAM,EAAEX,MAAM,CAACU,GAAG,CAAC,gBAAgB,CAAC,IAAIpB;EACzC,CAAC;AACF;AAEO,eAAesB,kBAAkBA,CAACjB,QAAkB,EAAEkB,OAAe,EAAiB;EAC5F,MAAMlB,QAAQ,CAACC,OAAO,CACrB,oGAAoG,EACpG,CAAC,gBAAgB,EAAEC,MAAM,CAACgB,OAAO,CAAC,CACnC,CAAC;AACF;AAEO,eAAeC,aAAaA,CAClCnB,QAAkB,EAClBoB,KAAgG,EAChF;EAChB,MAAMpB,QAAQ,CAACC,OAAO,CACrB;AACF;AACA;AACA;AACA;AACA,0CAA0C,EACxC,CAACmB,KAAK,CAACF,OAAO,EAAEE,KAAK,CAACC,WAAW,EAAED,KAAK,CAACE,OAAO,EAAEF,KAAK,CAACG,WAAW,IAAI,IAAI,CAC5E,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/migration/validate-chain.js

@@ -0,0 +1,76 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.orderedMigrations = orderedMigrations;
+exports.pendingMigrations = pendingMigrations;
+exports.validateMigrationChain = validateMigrationChain;
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+/**
+ * Migration chain validation, run before any migration executes (FR-053).
+ *
+ * Validating first is what stops a half-run chain from being the thing that
+ * discovers the problem. A duplicate version, a gap, or a chain that does not
+ * reach the declared `schemaVersion` are all configuration errors the
+ * developer can fix; discovering them after migration 3 of 5 has already
+ * rewritten a user's data is not.
+ *
+ * A gap is refused rather than skipped over deliberately. A user upgrading
+ * from the version inside the gap has no path across it, and opening anyway
+ * would hand them a database the code believes is current and is not.
+ */
+
+function invalid(message, detail) {
+  (0, _errors2.raise)(_errors.DiagnosticCodes.MIGRATION_CONFIG_INVALID, {
+    message,
+    detail
+  });
+}
+function validateMigrationChain(config) {
+  const migrations = config.migrations ?? [];
+  if (!Number.isInteger(config.schemaVersion) || config.schemaVersion < 1) {
+    invalid('schemaVersion must be a positive integer');
+  }
+  const versions = new Set();
+  for (const migration of migrations) {
+    if (!Number.isInteger(migration.version) || migration.version < 1) {
+      invalid('migration version must be a positive integer');
+    }
+    if (versions.has(migration.version)) {
+      invalid('duplicate migration version', {
+        version: migration.version
+      });
+    }
+    versions.add(migration.version);
+    if (typeof migration.migrate !== 'function') {
+      invalid('migration has no migrate function', {
+        version: migration.version
+      });
+    }
+  }
+  for (let version = 1; version <= config.schemaVersion; version += 1) {
+    if (!versions.has(version)) {
+      invalid('migration chain has a gap', {
+        version
+      });
+    }
+  }
+  for (const version of versions) {
+    if (version > config.schemaVersion) {
+      invalid('migration version exceeds the declared schemaVersion', {
+        version
+      });
+    }
+  }
+}
+
+/** Ascending, because the order a consumer declared them in is not a contract. */
+function orderedMigrations(config) {
+  return [...(config.migrations ?? [])].sort((a, b) => a.version - b.version);
+}
+function pendingMigrations(config, recordedVersion) {
+  return orderedMigrations(config).filter(migration => migration.version > recordedVersion);
+}
+//# sourceMappingURL=validate-chain.js.map

package/lib/commonjs/migration/validate-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_errors2","invalid","message","detail","raise","DiagnosticCodes","MIGRATION_CONFIG_INVALID","validateMigrationChain","config","migrations","Number","isInteger","schemaVersion","versions","Set","migration","version","has","add","migrate","orderedMigrations","sort","a","b","pendingMigrations","recordedVersion","filter"],"sourceRoot":"../../../src","sources":["migration/validate-chain.ts"],"mappings":";;;;;;;;AAeA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,QAAA,GAAAD,OAAA;AAjBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA,SAASE,OAAOA,CAACC,OAAe,EAAEC,MAAgC,EAAS;EAC1E,IAAAC,cAAK,EAACC,uBAAe,CAACC,wBAAwB,EAAE;IAAEJ,OAAO;IAAEC;EAAO,CAAC,CAAC;AACrE;AAEO,SAASI,sBAAsBA,CAACC,MAAsB,EAAQ;EACpE,MAAMC,UAAU,GAAGD,MAAM,CAACC,UAAU,IAAI,EAAE;EAE1C,IAAI,CAACC,MAAM,CAACC,SAAS,CAACH,MAAM,CAACI,aAAa,CAAC,IAAIJ,MAAM,CAACI,aAAa,GAAG,CAAC,EAAE;IACxEX,OAAO,CAAC,0CAA0C,CAAC;EACpD;EAEA,MAAMY,QAAQ,GAAG,IAAIC,GAAG,CAAS,CAAC;EAClC,KAAK,MAAMC,SAAS,IAAIN,UAAU,EAAE;IACnC,IAAI,CAACC,MAAM,CAACC,SAAS,CAACI,SAAS,CAACC,OAAO,CAAC,IAAID,SAAS,CAACC,OAAO,GAAG,CAAC,EAAE;MAClEf,OAAO,CAAC,8CAA8C,CAAC;IACxD;IACA,IAAIY,QAAQ,CAACI,GAAG,CAACF,SAAS,CAACC,OAAO,CAAC,EAAE;MACpCf,OAAO,CAAC,6BAA6B,EAAE;QAAEe,OAAO,EAAED,SAAS,CAACC;MAAQ,CAAC,CAAC;IACvE;IACAH,QAAQ,CAACK,GAAG,CAACH,SAAS,CAACC,OAAO,CAAC;IAC/B,IAAI,OAAOD,SAAS,CAACI,OAAO,KAAK,UAAU,EAAE;MAC5ClB,OAAO,CAAC,mCAAmC,EAAE;QAAEe,OAAO,EAAED,SAAS,CAACC;MAAQ,CAAC,CAAC;IAC7E;EACD;EAEA,KAAK,IAAIA,OAAO,GAAG,CAAC,EAAEA,OAAO,IAAIR,MAAM,CAACI,aAAa,EAAEI,OAAO,IAAI,CAAC,EAAE;IACpE,IAAI,CAACH,QAAQ,CAACI,GAAG,CAACD,OAAO,CAAC,EAAE;MAC3Bf,OAAO,CAAC,2BAA2B,EAAE;QAAEe;MAAQ,CAAC,CAAC;IAClD;EACD;EAEA,KAAK,MAAMA,OAAO,IAAIH,QAAQ,EAAE;IAC/B,IAAIG,OAAO,GAAGR,MAAM,CAACI,aAAa,EAAE;MACnCX,OAAO,CAAC,sDAAsD,EAAE;QAAEe;MAAQ,CAAC,CAAC;IAC7E;EACD;AACD;;AAEA;AACO,SAASI,iBAAiBA,CAACZ,MAAsB,EAAe;EACtE,OAAO,CAAC,IAAIA,MAAM,CAACC,UAAU,IAAI,EAAE,CAAC,CAAC,CAACY,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKD,CAAC,CAACN,OAAO,GAAGO,CAAC,CAACP,OAAO,CAAC;AAC5E;AAEO,SAASQ,iBAAiBA,CAAChB,MAAsB,EAAEiB,eAAuB,EAAe;EAC/F,OAAOL,iBAAiB,CAACZ,MAAM,CAAC,CAACkB,MAAM,CAACX,SAAS,IAAIA,SAAS,CAACC,OAAO,GAAGS,eAAe,CAAC;AAC1F","ignoreList":[]}

package/lib/commonjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/lib/commonjs/platform/backup-android-verify.js

@@ -0,0 +1,76 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.androidPosture = androidPosture;
+exports.coveragePathFor = coveragePathFor;
+exports.effectivePostureFor = effectivePostureFor;
+exports.isAndroid = isAndroid;
+var _reactNative = require("react-native");
+var _location = require("./location.js");
+/**
+ * Android backup posture: verified and reported, never enforced.
+ *
+ * Android decides backup participation from `android:dataExtractionRules` in
+ * the app's manifest. That is build-time and app-owned, and this package
+ * authors no native code, so it cannot contribute an entry and cannot change
+ * the answer at runtime (research.md R5).
+ *
+ * What it can do is check the one thing that silently breaks the documented
+ * fix: the rule the README tells an app to ship addresses the `file` domain,
+ * which is the app's `files/` directory. If the managed root did not land
+ * under that directory, the app can ship the XML exactly as documented and
+ * still have an unprotected database. That mismatch is detectable here, and
+ * an app learning it from this report is the whole point of FR-111 — the
+ * alternative is learning it from an incident.
+ */
+
+function isAndroid() {
+  return _reactNative.Platform.OS === 'android';
+}
+
+/** The `path` an app's exclusion rule must name for the root it actually got. */
+function coveragePathFor(layout) {
+  const root = (0, _location.normalizePath)(layout.root);
+  const marker = `/files/`;
+  const index = root.indexOf(marker);
+  if (index === -1) {
+    return null;
+  }
+  return root.slice(index + marker.length);
+}
+function androidPosture(layout, includeInPlatformBackup) {
+  const requested = includeInPlatformBackup ? 'included' : 'excluded';
+  const coverage = coveragePathFor(layout);
+  if (coverage === null) {
+    return {
+      requested,
+      // Not "excluded" and not "included": the package genuinely does not
+      // know, and saying either would be a claim it cannot support.
+      observed: 'unknown',
+      enforcedBy: 'app-manifest',
+      warning: 'The managed storage area is not under the Android file domain, so the ' + 'documented data_extraction_rules.xml entry will not cover it. Backup ' + 'posture cannot be honoured on this platform until the app supplies a ' + 'rule matching the actual storage location.'
+    };
+  }
+  return {
+    requested,
+    observed: 'unknown',
+    enforcedBy: 'app-manifest',
+    warning: `Android backup participation is declared by the app, not this package. ` + `Confirm android/app/src/main/res/xml/data_extraction_rules.xml contains an ` + `entry for domain="file" path="${_location.MANAGED_ROOT_NAME}/" and that ` + `AndroidManifest.xml references it; the observed posture cannot be verified ` + `from JavaScript.`
+  };
+}
+
+/**
+ * The posture the handle reports (FR-111).
+ *
+ * Split by platform rather than smoothed over, because a consumer writing a
+ * privacy disclosure needs to know which of the two answers it is holding.
+ */
+function effectivePostureFor(layout, includeInPlatformBackup, iosPostureFor) {
+  if (isAndroid()) {
+    return androidPosture(layout, includeInPlatformBackup);
+  }
+  return iosPostureFor(includeInPlatformBackup);
+}
+//# sourceMappingURL=backup-android-verify.js.map

package/lib/commonjs/platform/backup-android-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNative","require","_location","isAndroid","Platform","OS","coveragePathFor","layout","root","normalizePath","marker","index","indexOf","slice","length","androidPosture","includeInPlatformBackup","requested","coverage","observed","enforcedBy","warning","MANAGED_ROOT_NAME","effectivePostureFor","iosPostureFor"],"sourceRoot":"../../../src","sources":["platform/backup-android-verify.ts"],"mappings":";;;;;;;;;AAiBA,IAAAA,YAAA,GAAAC,OAAA;AAGA,IAAAC,SAAA,GAAAD,OAAA;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOO,SAASE,SAASA,CAAA,EAAY;EACpC,OAAOC,qBAAQ,CAACC,EAAE,KAAK,SAAS;AACjC;;AAEA;AACO,SAASC,eAAeA,CAACC,MAAqB,EAAiB;EACrE,MAAMC,IAAI,GAAG,IAAAC,uBAAa,EAACF,MAAM,CAACC,IAAI,CAAC;EACvC,MAAME,MAAM,GAAG,SAAS;EACxB,MAAMC,KAAK,GAAGH,IAAI,CAACI,OAAO,CAACF,MAAM,CAAC;EAClC,IAAIC,KAAK,KAAK,CAAC,CAAC,EAAE;IACjB,OAAO,IAAI;EACZ;EACA,OAAOH,IAAI,CAACK,KAAK,CAACF,KAAK,GAAGD,MAAM,CAACI,MAAM,CAAC;AACzC;AAEO,SAASC,cAAcA,CAC7BR,MAAqB,EACrBS,uBAAgC,EACb;EACnB,MAAMC,SAAS,GAAGD,uBAAuB,GAAG,UAAU,GAAG,UAAU;EACnE,MAAME,QAAQ,GAAGZ,eAAe,CAACC,MAAM,CAAC;EAExC,IAAIW,QAAQ,KAAK,IAAI,EAAE;IACtB,OAAO;MACND,SAAS;MACT;MACA;MACAE,QAAQ,EAAE,SAAS;MACnBC,UAAU,EAAE,cAAc;MAC1BC,OAAO,EACN,wEAAwE,GACxE,uEAAuE,GACvE,uEAAuE,GACvE;IACF,CAAC;EACF;EAEA,OAAO;IACNJ,SAAS;IACTE,QAAQ,EAAE,SAAS;IACnBC,UAAU,EAAE,cAAc;IAC1BC,OAAO,EACN,yEAAyE,GACzE,6EAA6E,GAC7E,iCAAiCC,2BAAiB,cAAc,GAChE,6EAA6E,GAC7E;EACF,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAClChB,MAAqB,EACrBS,uBAAgC,EAChCQ,aAAqD,EAClC;EACnB,IAAIrB,SAAS,CAAC,CAAC,EAAE;IAChB,OAAOY,cAAc,CAACR,MAAM,EAAES,uBAAuB,CAAC;EACvD;EACA,OAAOQ,aAAa,CAACR,uBAAuB,CAAC;AAC9C","ignoreList":[]}

package/lib/commonjs/platform/backup-ios.js

@@ -0,0 +1,50 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ensureManagedRoot = ensureManagedRoot;
+exports.iosPosture = iosPosture;
+exports.isIos = isIos;
+var _reactNative = require("react-native");
+var _fs = require("./fs.js");
+/**
+ * iOS backup exclusion.
+ *
+ * `NSURLIsExcludedFromBackupKey` is set on the managed root at creation, and
+ * the attribute is inherited by everything beneath it — so one call covers
+ * the catalog, every scope database, and every artifact, including ones
+ * created years later. Setting it per file would leave a window in which a
+ * freshly written artifact is backed up before the attribute lands.
+ *
+ * This is the half of FR-109 the package can actually enforce. Android is
+ * manifest-owned; see backup-android-verify.ts and research.md R5.
+ */
+
+function isIos() {
+  return _reactNative.Platform.OS === 'ios';
+}
+
+/**
+ * Create the managed root with the exclusion attribute already on it.
+ *
+ * Idempotent: `mkdir` on an existing directory re-applies the attribute,
+ * which matters because an app that flips the posture between launches must
+ * get the new one without a reinstall.
+ */
+async function ensureManagedRoot(layout, includeInPlatformBackup) {
+  await (0, _fs.fileSystem)().mkdir(layout.root, isIos() ? {
+    NSURLIsExcludedFromBackupKey: !includeInPlatformBackup
+  } : {});
+}
+
+/** What the package can state about iOS, where it enforces rather than reports. */
+function iosPosture(includeInPlatformBackup) {
+  const requested = includeInPlatformBackup ? 'included' : 'excluded';
+  return {
+    requested,
+    observed: requested,
+    enforcedBy: 'package'
+  };
+}
+//# sourceMappingURL=backup-ios.js.map

package/lib/commonjs/platform/backup-ios.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNative","require","_fs","isIos","Platform","OS","ensureManagedRoot","layout","includeInPlatformBackup","fileSystem","mkdir","root","NSURLIsExcludedFromBackupKey","iosPosture","requested","observed","enforcedBy"],"sourceRoot":"../../../src","sources":["platform/backup-ios.ts"],"mappings":";;;;;;;;AAaA,IAAAA,YAAA,GAAAC,OAAA;AAGA,IAAAC,GAAA,GAAAD,OAAA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAQO,SAASE,KAAKA,CAAA,EAAY;EAChC,OAAOC,qBAAQ,CAACC,EAAE,KAAK,KAAK;AAC7B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,iBAAiBA,CACtCC,MAAqB,EACrBC,uBAAgC,EAChB;EAChB,MAAM,IAAAC,cAAU,EAAC,CAAC,CAACC,KAAK,CACvBH,MAAM,CAACI,IAAI,EACXR,KAAK,CAAC,CAAC,GAAG;IAAES,4BAA4B,EAAE,CAACJ;EAAwB,CAAC,GAAG,CAAC,CACzE,CAAC;AACF;;AAEA;AACO,SAASK,UAAUA,CAACL,uBAAgC,EAAoB;EAC9E,MAAMM,SAAS,GAAGN,uBAAuB,GAAG,UAAU,GAAG,UAAU;EACnE,OAAO;IACNM,SAAS;IACTC,QAAQ,EAAED,SAAS;IACnBE,UAAU,EAAE;EACb,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/platform/bytes.js

@@ -0,0 +1,158 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.asciiAt = asciiAt;
+exports.base64ToBytes = base64ToBytes;
+exports.bytesToBase64 = bytesToBase64;
+exports.concatBytes = concatBytes;
+exports.host = void 0;
+exports.utf8Bytes = utf8Bytes;
+exports.utf8String = utf8String;
+/**
+ * Byte handling without Node's `Buffer`.
+ *
+ * Hermes has no global `Buffer`, and `react-native-quick-crypto` installs one
+ * only when the app calls its `install()` — which nothing in this package or its
+ * documentation asked for. Until 0.2.0 attachment writes and reads used the
+ * global anyway, so on a device every attachment operation threw. Everything
+ * here is plain `Uint8Array` and a self-contained base64 codec, identical on
+ * Hermes and in Node.
+ */
+
+const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+const LOOKUP = (() => {
+  const table = new Int16Array(128).fill(-1);
+  for (let index = 0; index < ALPHABET.length; index += 1) {
+    table[ALPHABET.charCodeAt(index)] = index;
+  }
+  // The URL-safe variants decode too, since some file APIs return them.
+  table['-'.charCodeAt(0)] = 62;
+  table['_'.charCodeAt(0)] = 63;
+  return table;
+})();
+
+/**
+ * Codecs Hermes and Node provide but React Native's type declarations omit.
+ * Read through this view so the package type-checks without DOM or Node types.
+ */
+
+const host = exports.host = globalThis;
+
+/* eslint-disable no-bitwise -- base64 is bit packing; there is no clearer way to write it. */
+
+/** Characters per `String.fromCharCode` call; large spreads overflow the stack. */
+const CHUNK = 0x8000;
+function base64ToBytes(base64) {
+  if (host.atob) {
+    let binary;
+    try {
+      binary = host.atob(base64.replace(/-/g, '+').replace(/_/g, '/'));
+    } catch {
+      // atob is strict where Buffer was lenient; fall through to the
+      // tolerant decoder rather than turn stray characters into a crash.
+    }
+    if (binary !== undefined) {
+      const bytes = new Uint8Array(binary.length);
+      for (let index = 0; index < binary.length; index += 1) {
+        bytes[index] = binary.charCodeAt(index);
+      }
+      return bytes;
+    }
+  }
+  // Decode directly, skipping padding and anything outside the alphabet.
+  const bytes = new Uint8Array(Math.ceil(base64.length * 3 / 4));
+  let out = 0;
+  let buffer = 0;
+  let bits = 0;
+  for (let index = 0; index < base64.length; index += 1) {
+    const code = base64.charCodeAt(index);
+    const value = code < 128 ? LOOKUP[code] : -1;
+    if (value < 0) continue;
+    buffer = buffer << 6 | value;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      bytes[out++] = buffer >> bits & 0xff;
+    }
+  }
+  return bytes.subarray(0, out);
+}
+function bytesToBase64(bytes) {
+  if (host.btoa) {
+    const parts = [];
+    for (let index = 0; index < bytes.length; index += CHUNK) {
+      parts.push(String.fromCharCode(...bytes.subarray(index, index + CHUNK)));
+    }
+    return host.btoa(parts.join(''));
+  }
+  const parts = [];
+  for (let start = 0; start < bytes.length; start += CHUNK * 3) {
+    let piece = '';
+    const end = Math.min(bytes.length, start + CHUNK * 3);
+    let index = start;
+    for (; index + 2 < end; index += 3) {
+      const triple = bytes[index] << 16 | bytes[index + 1] << 8 | bytes[index + 2];
+      piece += ALPHABET[triple >> 18] + ALPHABET[triple >> 12 & 63] + ALPHABET[triple >> 6 & 63] + ALPHABET[triple & 63];
+    }
+    const remaining = end - index;
+    if (remaining === 1) {
+      const value = bytes[index];
+      piece += `${ALPHABET[value >> 2]}${ALPHABET[(value & 3) << 4]}==`;
+    } else if (remaining === 2) {
+      const value = bytes[index] << 8 | bytes[index + 1];
+      piece += `${ALPHABET[value >> 10]}${ALPHABET[value >> 4 & 63]}${ALPHABET[(value & 15) << 2]}=`;
+    }
+    parts.push(piece);
+  }
+  return parts.join('');
+}
+
+/** UTF-8 encoding. `TextEncoder` is in Hermes and Node; the loop is the fallback. */
+function utf8Bytes(value) {
+  if (host.TextEncoder) {
+    return new host.TextEncoder().encode(value);
+  }
+  const encoded = unescape(encodeURIComponent(value));
+  const bytes = new Uint8Array(encoded.length);
+  for (let index = 0; index < encoded.length; index += 1) {
+    bytes[index] = encoded.charCodeAt(index);
+  }
+  return bytes;
+}
+
+/** UTF-8 decoding, the inverse of `utf8Bytes`. */
+function utf8String(bytes) {
+  if (host.TextDecoder) {
+    return new host.TextDecoder().decode(bytes);
+  }
+  let binary = '';
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return decodeURIComponent(escape(binary));
+}
+
+/* eslint-enable no-bitwise */
+
+function concatBytes(parts) {
+  const total = parts.reduce((sum, part) => sum + part.length, 0);
+  const joined = new Uint8Array(total);
+  let offset = 0;
+  for (const part of parts) {
+    joined.set(part, offset);
+    offset += part.length;
+  }
+  return joined;
+}
+
+/** The ASCII text of `length` bytes from `start`, for magic numbers. */
+function asciiAt(bytes, start, length) {
+  let text = '';
+  for (let index = start; index < start + length && index < bytes.length; index += 1) {
+    text += String.fromCharCode(bytes[index]);
+  }
+  return text;
+}
+//# sourceMappingURL=bytes.js.map

package/lib/commonjs/platform/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ALPHABET","LOOKUP","table","Int16Array","fill","index","length","charCodeAt","host","exports","globalThis","CHUNK","base64ToBytes","base64","atob","binary","replace","undefined","bytes","Uint8Array","Math","ceil","out","buffer","bits","code","value","subarray","bytesToBase64","btoa","parts","push","String","fromCharCode","join","start","piece","end","min","triple","remaining","utf8Bytes","TextEncoder","encode","encoded","unescape","encodeURIComponent","utf8String","TextDecoder","decode","byte","decodeURIComponent","escape","concatBytes","total","reduce","sum","part","joined","offset","set","asciiAt","text"],"sourceRoot":"../../../src","sources":["platform/bytes.ts"],"mappings":";;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,MAAMA,QAAQ,GAAG,kEAAkE;AACnF,MAAMC,MAAM,GAAG,CAAC,MAAM;EACrB,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAAC,GAAG,CAAC,CAACC,IAAI,CAAC,CAAC,CAAC,CAAC;EAC1C,KAAK,IAAIC,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGL,QAAQ,CAACM,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACxDH,KAAK,CAACF,QAAQ,CAACO,UAAU,CAACF,KAAK,CAAC,CAAC,GAAGA,KAAK;EAC1C;EACA;EACAH,KAAK,CAAC,GAAG,CAACK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;EAC7BL,KAAK,CAAC,GAAG,CAACK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;EAC7B,OAAOL,KAAK;AACb,CAAC,EAAE,CAAC;;AAEJ;AACA;AACA;AACA;;AAQO,MAAMM,IAAI,GAAAC,OAAA,CAAAD,IAAA,GAAGE,UAAmC;;AAEvD;;AAEA;AACA,MAAMC,KAAK,GAAG,MAAM;AAEb,SAASC,aAAaA,CAACC,MAAc,EAAc;EACzD,IAAIL,IAAI,CAACM,IAAI,EAAE;IACd,IAAIC,MAA0B;IAC9B,IAAI;MACHA,MAAM,GAAGP,IAAI,CAACM,IAAI,CAACD,MAAM,CAACG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,MAAM;MACP;MACA;IAAA;IAED,IAAID,MAAM,KAAKE,SAAS,EAAE;MACzB,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAACJ,MAAM,CAACT,MAAM,CAAC;MAC3C,KAAK,IAAID,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGU,MAAM,CAACT,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;QACtDa,KAAK,CAACb,KAAK,CAAC,GAAGU,MAAM,CAACR,UAAU,CAACF,KAAK,CAAC;MACxC;MACA,OAAOa,KAAK;IACb;EACD;EACA;EACA,MAAMA,KAAK,GAAG,IAAIC,UAAU,CAACC,IAAI,CAACC,IAAI,CAAER,MAAM,CAACP,MAAM,GAAG,CAAC,GAAI,CAAC,CAAC,CAAC;EAChE,IAAIgB,GAAG,GAAG,CAAC;EACX,IAAIC,MAAM,GAAG,CAAC;EACd,IAAIC,IAAI,GAAG,CAAC;EACZ,KAAK,IAAInB,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGQ,MAAM,CAACP,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACtD,MAAMoB,IAAI,GAAGZ,MAAM,CAACN,UAAU,CAACF,KAAK,CAAC;IACrC,MAAMqB,KAAK,GAAGD,IAAI,GAAG,GAAG,GAAGxB,MAAM,CAACwB,IAAI,CAAC,GAAI,CAAC,CAAC;IAC7C,IAAIC,KAAK,GAAG,CAAC,EAAE;IACfH,MAAM,GAAIA,MAAM,IAAI,CAAC,GAAIG,KAAK;IAC9BF,IAAI,IAAI,CAAC;IACT,IAAIA,IAAI,IAAI,CAAC,EAAE;MACdA,IAAI,IAAI,CAAC;MACTN,KAAK,CAACI,GAAG,EAAE,CAAC,GAAIC,MAAM,IAAIC,IAAI,GAAI,IAAI;IACvC;EACD;EACA,OAAON,KAAK,CAACS,QAAQ,CAAC,CAAC,EAAEL,GAAG,CAAC;AAC9B;AAEO,SAASM,aAAaA,CAACV,KAAiB,EAAU;EACxD,IAAIV,IAAI,CAACqB,IAAI,EAAE;IACd,MAAMC,KAAe,GAAG,EAAE;IAC1B,KAAK,IAAIzB,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGa,KAAK,CAACZ,MAAM,EAAED,KAAK,IAAIM,KAAK,EAAE;MACzDmB,KAAK,CAACC,IAAI,CAACC,MAAM,CAACC,YAAY,CAAC,GAAGf,KAAK,CAACS,QAAQ,CAACtB,KAAK,EAAEA,KAAK,GAAGM,KAAK,CAAC,CAAC,CAAC;IACzE;IACA,OAAOH,IAAI,CAACqB,IAAI,CAACC,KAAK,CAACI,IAAI,CAAC,EAAE,CAAC,CAAC;EACjC;EACA,MAAMJ,KAAe,GAAG,EAAE;EAC1B,KAAK,IAAIK,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGjB,KAAK,CAACZ,MAAM,EAAE6B,KAAK,IAAIxB,KAAK,GAAG,CAAC,EAAE;IAC7D,IAAIyB,KAAK,GAAG,EAAE;IACd,MAAMC,GAAG,GAAGjB,IAAI,CAACkB,GAAG,CAACpB,KAAK,CAACZ,MAAM,EAAE6B,KAAK,GAAGxB,KAAK,GAAG,CAAC,CAAC;IACrD,IAAIN,KAAK,GAAG8B,KAAK;IACjB,OAAO9B,KAAK,GAAG,CAAC,GAAGgC,GAAG,EAAEhC,KAAK,IAAI,CAAC,EAAE;MACnC,MAAMkC,MAAM,GAAIrB,KAAK,CAACb,KAAK,CAAC,IAAK,EAAE,GAAKa,KAAK,CAACb,KAAK,GAAG,CAAC,CAAC,IAAK,CAAE,GAAGa,KAAK,CAACb,KAAK,GAAG,CAAC,CAAE;MACnF+B,KAAK,IACJpC,QAAQ,CAACuC,MAAM,IAAI,EAAE,CAAC,GACtBvC,QAAQ,CAAEuC,MAAM,IAAI,EAAE,GAAI,EAAE,CAAE,GAC9BvC,QAAQ,CAAEuC,MAAM,IAAI,CAAC,GAAI,EAAE,CAAE,GAC7BvC,QAAQ,CAACuC,MAAM,GAAG,EAAE,CAAE;IACxB;IACA,MAAMC,SAAS,GAAGH,GAAG,GAAGhC,KAAK;IAC7B,IAAImC,SAAS,KAAK,CAAC,EAAE;MACpB,MAAMd,KAAK,GAAGR,KAAK,CAACb,KAAK,CAAE;MAC3B+B,KAAK,IAAI,GAAGpC,QAAQ,CAAC0B,KAAK,IAAI,CAAC,CAAC,GAAG1B,QAAQ,CAAC,CAAC0B,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI;IAClE,CAAC,MAAM,IAAIc,SAAS,KAAK,CAAC,EAAE;MAC3B,MAAMd,KAAK,GAAIR,KAAK,CAACb,KAAK,CAAC,IAAK,CAAC,GAAIa,KAAK,CAACb,KAAK,GAAG,CAAC,CAAE;MACtD+B,KAAK,IAAI,GAAGpC,QAAQ,CAAC0B,KAAK,IAAI,EAAE,CAAC,GAAG1B,QAAQ,CAAE0B,KAAK,IAAI,CAAC,GAAI,EAAE,CAAC,GAAG1B,QAAQ,CAAC,CAAC0B,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,GAAG;IACjG;IACAI,KAAK,CAACC,IAAI,CAACK,KAAK,CAAC;EAClB;EACA,OAAON,KAAK,CAACI,IAAI,CAAC,EAAE,CAAC;AACtB;;AAEA;AACO,SAASO,SAASA,CAACf,KAAa,EAAc;EACpD,IAAIlB,IAAI,CAACkC,WAAW,EAAE;IACrB,OAAO,IAAIlC,IAAI,CAACkC,WAAW,CAAC,CAAC,CAACC,MAAM,CAACjB,KAAK,CAAC;EAC5C;EACA,MAAMkB,OAAO,GAAGC,QAAQ,CAACC,kBAAkB,CAACpB,KAAK,CAAC,CAAC;EACnD,MAAMR,KAAK,GAAG,IAAIC,UAAU,CAACyB,OAAO,CAACtC,MAAM,CAAC;EAC5C,KAAK,IAAID,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGuC,OAAO,CAACtC,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACvDa,KAAK,CAACb,KAAK,CAAC,GAAGuC,OAAO,CAACrC,UAAU,CAACF,KAAK,CAAC;EACzC;EACA,OAAOa,KAAK;AACb;;AAEA;AACO,SAAS6B,UAAUA,CAAC7B,KAAiB,EAAU;EACrD,IAAIV,IAAI,CAACwC,WAAW,EAAE;IACrB,OAAO,IAAIxC,IAAI,CAACwC,WAAW,CAAC,CAAC,CAACC,MAAM,CAAC/B,KAAK,CAAC;EAC5C;EACA,IAAIH,MAAM,GAAG,EAAE;EACf,KAAK,MAAMmC,IAAI,IAAIhC,KAAK,EAAE;IACzBH,MAAM,IAAIiB,MAAM,CAACC,YAAY,CAACiB,IAAI,CAAC;EACpC;EACA,OAAOC,kBAAkB,CAACC,MAAM,CAACrC,MAAM,CAAC,CAAC;AAC1C;;AAEA;;AAEO,SAASsC,WAAWA,CAACvB,KAA4B,EAAc;EACrE,MAAMwB,KAAK,GAAGxB,KAAK,CAACyB,MAAM,CAAC,CAACC,GAAG,EAAEC,IAAI,KAAKD,GAAG,GAAGC,IAAI,CAACnD,MAAM,EAAE,CAAC,CAAC;EAC/D,MAAMoD,MAAM,GAAG,IAAIvC,UAAU,CAACmC,KAAK,CAAC;EACpC,IAAIK,MAAM,GAAG,CAAC;EACd,KAAK,MAAMF,IAAI,IAAI3B,KAAK,EAAE;IACzB4B,MAAM,CAACE,GAAG,CAACH,IAAI,EAAEE,MAAM,CAAC;IACxBA,MAAM,IAAIF,IAAI,CAACnD,MAAM;EACtB;EACA,OAAOoD,MAAM;AACd;;AAEA;AACO,SAASG,OAAOA,CAAC3C,KAAiB,EAAEiB,KAAa,EAAE7B,MAAc,EAAU;EACjF,IAAIwD,IAAI,GAAG,EAAE;EACb,KAAK,IAAIzD,KAAK,GAAG8B,KAAK,EAAE9B,KAAK,GAAG8B,KAAK,GAAG7B,MAAM,IAAID,KAAK,GAAGa,KAAK,CAACZ,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACnFyD,IAAI,IAAI9B,MAAM,CAACC,YAAY,CAACf,KAAK,CAACb,KAAK,CAAE,CAAC;EAC3C;EACA,OAAOyD,IAAI;AACZ","ignoreList":[]}