@enbox/agent 0.1.5 → 0.1.7

package/dist/esm/dwn-key-delivery.js

@@ -0,0 +1,256 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { ContentEncryptionAlgorithm, DataStream, KeyDerivationScheme, Message, Protocols, Records, } from '@enbox/dwn-sdk-js';
+import { getDwnServiceEndpointUrls } from './utils.js';
+import { KeyDeliveryProtocolDefinition } from './store-data-protocols.js';
+import { buildEncryptionInput, encryptAndComputeCid, getEncryptionKeyDeriver, getKeyDecrypter, ivLength } from './dwn-encryption.js';
+import { DwnInterface, dwnMessageConstructors } from './types/dwn.js';
+/**
+ * Ensures the key delivery protocol is installed on the given tenant's DWN,
+ * with `$encryption` keys injected. Uses the same lazy initialization pattern
+ * as `DwnDataStore.initialize()`.
+ *
+ * @param agent - The platform agent
+ * @param tenantDid - The DID of the DWN owner
+ * @param processRequest - The agent's processRequest method (bound)
+ * @param getProtocolDefinition - Function to get a protocol definition
+ * @param installedCache - Cache for installation status
+ */
+export function ensureKeyDeliveryProtocol(agent, tenantDid, processRequest, getProtocolDefinition, installedCache, protocolDefinitionCache) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (installedCache.get(tenantDid)) {
+            return;
+        }
+        const protocolUri = KeyDeliveryProtocolDefinition.protocol;
+        const existing = yield getProtocolDefinition(tenantDid, protocolUri);
+        if (!existing) {
+            // Derive and inject $encryption keys for each type path
+            const keyDeriver = yield getEncryptionKeyDeriver(agent, tenantDid);
+            const definitionWithKeys = yield Protocols.deriveAndInjectPublicEncryptionKeys(KeyDeliveryProtocolDefinition, keyDeriver);
+            const { reply: { status } } = yield processRequest({
+                author: tenantDid,
+                target: tenantDid,
+                messageType: DwnInterface.ProtocolsConfigure,
+                messageParams: { definition: definitionWithKeys },
+            });
+            if (status.code !== 202) {
+                throw new Error(`AgentDwnApi: Failed to install key delivery protocol: ${status.code} - ${status.detail}`);
+            }
+            // Invalidate protocol definition cache so subsequent reads pick up the new definition
+            protocolDefinitionCache.delete(`${tenantDid}~${protocolUri}`);
+        }
+        installedCache.set(tenantDid, true);
+    });
+}
+/**
+ * Writes a `contextKey` record to the owner's DWN, delivering an encrypted
+ * context key to a participant.
+ *
+ * The payload is encrypted to the **recipient's** ProtocolPath-derived public
+ * key on the key-delivery protocol, so only the recipient can decrypt it.
+ *
+ * @param agent - The platform agent
+ * @param params - The write parameters
+ * @param processRequest - The agent's processRequest method (bound)
+ * @param ensureProtocol - Function to ensure key delivery protocol is installed
+ * @param eagerSend - Function to eagerly send the record to the remote DWN
+ * @returns The recordId of the written contextKey record
+ */
+export function writeContextKeyRecord(agent, params, processRequest, ensureProtocol, eagerSend) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { tenantDid, recipientDid, contextKeyData, sourceProtocol, sourceContextId, recipientKeyDeliveryPublicKey } = params;
+        // Ensure the key delivery protocol is installed on the owner's DWN
+        yield ensureProtocol(tenantDid);
+        const protocolUri = KeyDeliveryProtocolDefinition.protocol;
+        // Serialize the payload to JSON bytes
+        const plaintextBytes = new TextEncoder().encode(JSON.stringify(contextKeyData));
+        // Common contextKey record parameters
+        const contextKeyParams = {
+            protocol: protocolUri,
+            protocolPath: 'contextKey',
+            dataFormat: 'application/json',
+            recipient: recipientDid,
+            tags: { protocol: sourceProtocol, contextId: sourceContextId },
+        };
+        let message;
+        let status;
+        if (recipientKeyDeliveryPublicKey) {
+            // --- Encrypt to the recipient's ProtocolPath key (cross-DWN delivery) ---
+            // Manually build encryption input targeting the recipient's key so the
+            // record is decryptable only by the recipient.
+            const algorithm = ContentEncryptionAlgorithm.A256GCM;
+            const dataEncryptionKey = crypto.getRandomValues(new Uint8Array(32));
+            const dataEncryptionIV = crypto.getRandomValues(new Uint8Array(ivLength(algorithm)));
+            const { encryptedBytes, dataCid, dataSize, authenticationTag } = yield encryptAndComputeCid(plaintextBytes, dataEncryptionKey, dataEncryptionIV, algorithm);
+            const encryptionInput = Object.assign(Object.assign({}, buildEncryptionInput(dataEncryptionKey, dataEncryptionIV, recipientKeyDeliveryPublicKey.rootKeyId, recipientKeyDeliveryPublicKey.publicKeyJwk, KeyDerivationScheme.ProtocolPath)), { authenticationTag });
+            ({ message, reply: { status } } = yield processRequest({
+                author: tenantDid,
+                target: tenantDid,
+                messageType: DwnInterface.RecordsWrite,
+                messageParams: Object.assign(Object.assign({}, contextKeyParams), { dataCid, dataSize, encryptionInput }),
+                dataStream: new Blob([encryptedBytes]),
+            }));
+        }
+        else {
+            // --- Fallback: encrypt to the owner's key (local self-delivery) ---
+            // When no recipient key is provided, use the generic processRequest
+            // encryption path which encrypts to the DWN owner's ProtocolPath key.
+            ({ message, reply: { status } } = yield processRequest({
+                author: tenantDid,
+                target: tenantDid,
+                messageType: DwnInterface.RecordsWrite,
+                messageParams: contextKeyParams,
+                dataStream: new Blob([plaintextBytes], { type: 'application/json' }),
+                encryption: true,
+            }));
+        }
+        if (!(message && status.code === 202)) {
+            throw new Error(`AgentDwnApi: Failed to write contextKey record for ${recipientDid}: ${status.code} - ${status.detail}`);
+        }
+        // Eagerly send the contextKey record to the tenant's remote DWN so that
+        // participants can fetch it immediately without waiting for sync.
+        // This is fire-and-forget — sync will guarantee eventual consistency.
+        eagerSend(tenantDid, message).catch((err) => {
+            console.warn(`AgentDwnApi: Eager send of contextKey record '${message.recordId}' ` +
+                `to remote DWN failed: ${err.message}. Sync will deliver it later.`);
+        });
+        return message.recordId;
+    });
+}
+/**
+ * Eagerly sends a contextKey record to the tenant's remote DWN.
+ * This is best-effort — sync guarantees eventual consistency regardless.
+ *
+ * @param agent - The platform agent
+ * @param tenantDid - The DWN owner's DID
+ * @param contextKeyMessage - The context key message to send
+ * @param getDwnMessage - Function to read a full message from local DWN
+ * @param sendDwnRpcRequest - Function to send a DWN RPC request
+ */
+export function eagerSendContextKeyRecord(agent, tenantDid, contextKeyMessage, getDwnMessage, sendDwnRpcRequest) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let dwnEndpointUrls;
+        try {
+            dwnEndpointUrls = yield getDwnServiceEndpointUrls(tenantDid, agent.did);
+        }
+        catch (_a) {
+            // DID resolution or endpoint lookup failed — not fatal, sync will handle it.
+            return;
+        }
+        if (dwnEndpointUrls.length === 0) {
+            return;
+        }
+        // Read the full message (including data blob) from the local DWN
+        const { data } = yield getDwnMessage({
+            author: tenantDid,
+            messageType: DwnInterface.RecordsWrite,
+            messageCid: yield Message.getCid(contextKeyMessage),
+        });
+        yield sendDwnRpcRequest({
+            targetDid: tenantDid,
+            dwnEndpointUrls,
+            message: contextKeyMessage,
+            data,
+        });
+    });
+}
+/**
+ * Fetches and decrypts a `contextKey` record from a DWN, returning the
+ * `DerivedPrivateJwk` payload.
+ *
+ * Supports both local reads (tenant queries own DWN) and remote reads
+ * (participant queries the context owner's DWN).
+ *
+ * @param agent - The platform agent
+ * @param params - The fetch parameters
+ * @param processRequest - The agent's processRequest method (bound)
+ * @param getSigner - Function to get a signer for a DID
+ * @param sendDwnRpcRequest - Function to send a DWN RPC request
+ * @returns The decrypted `DerivedPrivateJwk`, or `undefined` if no matching record found
+ */
+export function fetchContextKeyRecord(agent, params, processRequest, getSigner, sendDwnRpcRequest) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e;
+        const { ownerDid, requesterDid, sourceProtocol, sourceContextId } = params;
+        const protocolUri = KeyDeliveryProtocolDefinition.protocol;
+        const isLocal = ownerDid === requesterDid;
+        // Shared query filter for both local and remote paths
+        const contextKeyFilter = {
+            protocol: protocolUri,
+            protocolPath: 'contextKey',
+            recipient: requesterDid,
+            tags: { protocol: sourceProtocol, contextId: sourceContextId },
+        };
+        /** Parse decrypted bytes into a DerivedPrivateJwk. */
+        const parsePayload = (bytes) => JSON.parse(new TextDecoder().decode(bytes));
+        if (isLocal) {
+            // Local query: owner queries their own DWN
+            const { reply } = yield processRequest({
+                author: requesterDid,
+                target: ownerDid,
+                messageType: DwnInterface.RecordsQuery,
+                messageParams: { filter: contextKeyFilter },
+            });
+            if (reply.status.code !== 200 || !((_a = reply.entries) === null || _a === void 0 ? void 0 : _a.length)) {
+                return undefined;
+            }
+            // Read the full record to get the data (auto-decrypted by processRequest)
+            const recordId = reply.entries[0].recordId;
+            const { reply: readReply } = yield processRequest({
+                author: requesterDid,
+                target: ownerDid,
+                messageType: DwnInterface.RecordsRead,
+                messageParams: { filter: { recordId } },
+                encryption: true,
+            });
+            const readResult = readReply;
+            if (!((_b = readResult.entry) === null || _b === void 0 ? void 0 : _b.data)) {
+                return undefined;
+            }
+            return parsePayload(yield DataStream.toBytes(readResult.entry.data));
+        }
+        else {
+            // Remote query: participant queries the context owner's DWN
+            const signer = yield getSigner(requesterDid);
+            const dwnEndpointUrls = yield getDwnServiceEndpointUrls(ownerDid, agent.did);
+            const recordsQuery = yield dwnMessageConstructors[DwnInterface.RecordsQuery].create({
+                signer,
+                filter: contextKeyFilter,
+            });
+            const queryReply = yield sendDwnRpcRequest({
+                targetDid: ownerDid,
+                dwnEndpointUrls,
+                message: recordsQuery.message,
+            });
+            if (queryReply.status.code !== 200 || !((_c = queryReply.entries) === null || _c === void 0 ? void 0 : _c.length)) {
+                return undefined;
+            }
+            // Read the full record remotely
+            const recordId = queryReply.entries[0].recordId;
+            const recordsRead = yield dwnMessageConstructors[DwnInterface.RecordsRead].create({
+                signer,
+                filter: { recordId },
+            });
+            const readReply = yield sendDwnRpcRequest({
+                targetDid: ownerDid,
+                dwnEndpointUrls,
+                message: recordsRead.message,
+            });
+            if (!((_d = readReply.entry) === null || _d === void 0 ? void 0 : _d.data) || !((_e = readReply.entry) === null || _e === void 0 ? void 0 : _e.recordsWrite)) {
+                return undefined;
+            }
+            // Decrypt the contextKey payload using the requester's key-delivery protocol path key
+            const keyDecrypter = yield getKeyDecrypter(agent, requesterDid);
+            const decryptedStream = yield Records.decrypt(readReply.entry.recordsWrite, keyDecrypter, readReply.entry.data);
+            return parsePayload(yield DataStream.toBytes(decryptedStream));
+        }
+    });
+}
+//# sourceMappingURL=dwn-key-delivery.js.map

package/dist/esm/dwn-key-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dwn-key-delivery.js","sourceRoot":"","sources":["../../src/dwn-key-delivery.ts"],"names":[],"mappings":";;;;;;;;;AAeA,OAAO,EACL,0BAA0B,EAC1B,UAAU,EACV,mBAAmB,EACnB,OAAO,EACP,SAAS,EACT,OAAO,GACR,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACrI,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AA6BtE;;;;;;;;;;GAUG;AACH,MAAM,UAAgB,yBAAyB,CAC7C,KAAwB,EACxB,SAAiB,EACjB,cAAgC,EAChC,qBAA+E,EAC/E,cAA4H,EAC5H,uBAAsD;;QAEtD,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,6BAA6B,CAAC,QAAQ,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAErE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,wDAAwD;YACxD,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACnE,MAAM,kBAAkB,GAAG,MAAM,SAAS,CAAC,mCAAmC,CAC5E,6BAA6B,EAC7B,UAAU,CACX,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,cAAc,CAAC;gBACjD,MAAM,EAAU,SAAS;gBACzB,MAAM,EAAU,SAAS;gBACzB,WAAW,EAAK,YAAY,CAAC,kBAAkB;gBAC/C,aAAa,EAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE;aACnD,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,yDAAyD,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7G,CAAC;YAED,sFAAsF;YACtF,uBAAuB,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAgB,qBAAqB,CACzC,KAAwB,EACxB,MAA6B,EAC7B,cAAgC,EAChC,cAAoD,EACpD,SAA+F;;QAE/F,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,6BAA6B,EAAE,GAAG,MAAM,CAAC;QAE3H,mEAAmE;QACnE,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,WAAW,GAAG,6BAA6B,CAAC,QAAQ,CAAC;QAE3D,sCAAsC;QACtC,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QAEhF,sCAAsC;QACtC,MAAM,gBAAgB,GAAG;YACvB,QAAQ,EAAO,WAAW;YAC1B,YAAY,EAAG,YAAY;YAC3B,UAAU,EAAK,kBAAkB;YACjC,SAAS,EAAM,YAAY;YAC3B,IAAI,EAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE;SACxE,CAAC;QAEF,IAAI,OAAY,CAAC;QACjB,IAAI,MAAwC,CAAC;QAE7C,IAAI,6BAA6B,EAAE,CAAC;YAClC,2EAA2E;YAC3E,uEAAuE;YACvE,+CAA+C;YAC/C,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC;YACrD,MAAM,iBAAiB,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,MAAM,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAErF,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAC5D,MAAM,oBAAoB,CAAC,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;YAE7F,MAAM,eAAe,GAAG,gCACnB,oBAAoB,CACrB,iBAAiB,EAAE,gBAAgB,EACnC,6BAA6B,CAAC,SAAS,EACvC,6BAA6B,CAAC,YAAY,EAC1C,mBAAmB,CAAC,YAAY,CACjC,KACD,iBAAiB,GACC,CAAC;YAErB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,cAAc,CAAC;gBACrD,MAAM,EAAU,SAAS;gBACzB,MAAM,EAAU,SAAS;gBACzB,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,kCAAQ,gBAAgB,KAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,GAAE;gBAC3E,UAAU,EAAM,IAAI,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;aAC3C,CAAC,CAAC,CAAC;QACN,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,oEAAoE;YACpE,sEAAsE;YACtE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,cAAc,CAAC;gBACrD,MAAM,EAAU,SAAS;gBACzB,MAAM,EAAU,SAAS;gBACzB,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,EAAG,gBAAgB;gBAChC,UAAU,EAAM,IAAI,IAAI,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;gBACxE,UAAU,EAAM,IAAI;aACrB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,sDAAsD,YAAY,KAAK,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,CACxG,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,kEAAkE;QAClE,sEAAsE;QACtE,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YACjD,OAAO,CAAC,IAAI,CACV,iDAAiD,OAAO,CAAC,QAAQ,IAAI;gBACrE,yBAAyB,GAAG,CAAC,OAAO,+BAA+B,CACpE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,QAAQ,CAAC;IAC1B,CAAC;CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,UAAgB,yBAAyB,CAC7C,KAAwB,EACxB,SAAiB,EACjB,iBAAwD,EACxD,aAAoI,EACpI,iBAAwH;;QAExH,IAAI,eAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QAAC,WAAM,CAAC;YACP,6EAA6E;YAC7E,OAAO;QACT,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC;YACnC,MAAM,EAAQ,SAAS;YACvB,WAAW,EAAG,YAAY,CAAC,YAAY;YACvC,UAAU,EAAI,MAAM,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;SACtD,CAAC,CAAC;QAEH,MAAM,iBAAiB,CAAC;YACtB,SAAS,EAAG,SAAS;YACrB,eAAe;YACf,OAAO,EAAK,iBAAiB;YAC7B,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAgB,qBAAqB,CACzC,KAAwB,EACxB,MAA6B,EAC7B,cAAgC,EAChC,SAA2C,EAC3C,iBAAwH;;;QAExH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;QAC3E,MAAM,WAAW,GAAG,6BAA6B,CAAC,QAAQ,CAAC;QAC3D,MAAM,OAAO,GAAG,QAAQ,KAAK,YAAY,CAAC;QAE1C,sDAAsD;QACtD,MAAM,gBAAgB,GAAG;YACvB,QAAQ,EAAO,WAAW;YAC1B,YAAY,EAAG,YAAY;YAC3B,SAAS,EAAM,YAAY;YAC3B,IAAI,EAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE;SACxE,CAAC;QAEF,sDAAsD;QACtD,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAqB,EAAE,CAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAsB,CAAC;QAEnE,IAAI,OAAO,EAAE,CAAC;YACZ,2CAA2C;YAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;gBACrC,MAAM,EAAU,YAAY;gBAC5B,MAAM,EAAU,QAAQ;gBACxB,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,EAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE;aAC7C,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAA,MAAA,KAAK,CAAC,OAAO,0CAAE,MAAM,CAAA,EAAE,CAAC;gBACxD,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC;gBAChD,MAAM,EAAU,YAAY;gBAC5B,MAAM,EAAU,QAAQ;gBACxB,WAAW,EAAK,YAAY,CAAC,WAAW;gBACxC,aAAa,EAAG,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE;gBACxC,UAAU,EAAM,IAAI;aACrB,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,SAA6B,CAAC;YACjD,IAAI,CAAC,CAAA,MAAA,UAAU,CAAC,KAAK,0CAAE,IAAI,CAAA,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,YAAY,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAE7E,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;gBAClF,MAAM;gBACN,MAAM,EAAE,gBAAgB;aACzB,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;gBACzC,SAAS,EAAG,QAAQ;gBACpB,eAAe;gBACf,OAAO,EAAK,YAAY,CAAC,OAAO;aACjC,CAAsB,CAAC;YAExB,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAA,MAAA,UAAU,CAAC,OAAO,0CAAE,MAAM,CAAA,EAAE,CAAC;gBAClE,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,gCAAgC;YAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;gBAChF,MAAM;gBACN,MAAM,EAAE,EAAE,QAAQ,EAAE;aACrB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC;gBACxC,SAAS,EAAG,QAAQ;gBACpB,eAAe;gBACf,OAAO,EAAK,WAAW,CAAC,OAAO;aAChC,CAAqB,CAAC;YAEvB,IAAI,CAAC,CAAA,MAAA,SAAS,CAAC,KAAK,0CAAE,IAAI,CAAA,IAAI,CAAC,CAAA,MAAA,SAAS,CAAC,KAAK,0CAAE,YAAY,CAAA,EAAE,CAAC;gBAC7D,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,sFAAsF;YACtF,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAChE,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAC3C,SAAS,CAAC,KAAK,CAAC,YAAY,EAC5B,YAAY,EACZ,SAAS,CAAC,KAAK,CAAC,IAAkC,CACnD,CAAC;YAEF,OAAO,YAAY,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;CAAA"}

package/dist/esm/dwn-record-upgrade.js

@@ -0,0 +1,119 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Encoder, KeyDerivationScheme, Message, Records, } from '@enbox/dwn-sdk-js';
+import { deriveContextEncryptionInput, getKeyDecrypter } from './dwn-encryption.js';
+import { DwnInterface, dwnMessageConstructors } from './types/dwn.js';
+/**
+ * Reactively upgrades an externally-authored root record that has only
+ * ProtocolPath encryption by appending a ProtocolContext recipient entry.
+ *
+ * After the upgrade, both the owner (ProtocolPath) and context key holders —
+ * including the external author (ProtocolContext) — can decrypt the record.
+ *
+ * Steps:
+ *   1. Decrypt the DEK using the owner's ProtocolPath-derived private key
+ *   2. Derive the context public key from the owner's #enc key
+ *   3. ECIES-encrypt the same DEK to the context public key
+ *   4. Append the ProtocolContext recipient entry (using PR 0b append mode)
+ *   5. Re-sign the record as owner
+ *
+ * @param agent - The platform agent
+ * @param tenantDid - The DWN owner's DID
+ * @param recordsWrite - The RecordsWrite message to upgrade
+ * @param dwn - The DWN instance
+ * @param getSigner - Function to get a DWN signer
+ * @param contextKeyCache - Cache for context key info
+ */
+export function upgradeExternalRootRecord(agent, tenantDid, recordsWrite, dwn, getSigner, contextKeyCache) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { encryption } = recordsWrite;
+        if (!encryption) {
+            return;
+        }
+        // Verify: has ProtocolPath but NOT ProtocolContext
+        const hasProtocolPath = encryption.recipients.some((r) => r.header.derivationScheme === KeyDerivationScheme.ProtocolPath);
+        const hasProtocolContext = encryption.recipients.some((r) => r.header.derivationScheme === KeyDerivationScheme.ProtocolContext);
+        if (!hasProtocolPath || hasProtocolContext) {
+            return;
+        }
+        // 1. Decrypt the DEK using the owner's ProtocolPath key
+        const keyDecrypter = yield getKeyDecrypter(agent, tenantDid);
+        // Find the ProtocolPath recipient entry
+        const pathRecipient = encryption.recipients.find((r) => r.header.derivationScheme === KeyDerivationScheme.ProtocolPath);
+        const fullDerivationPath = Records.constructKeyDerivationPathUsingProtocolPathScheme(recordsWrite.descriptor);
+        const dataEncryptionKey = yield keyDecrypter.decrypt(fullDerivationPath, {
+            encryptedKey: Encoder.base64UrlToBytes(pathRecipient.encrypted_key),
+            ephemeralPublicKey: pathRecipient.header.epk,
+        });
+        // 2. Derive the context public key — contextId = recordId for root records
+        const contextId = recordsWrite.recordId;
+        const encryptionIV = Encoder.base64UrlToBytes(encryption.iv);
+        // 3 & 4. Append the ProtocolContext recipient entry using append mode.
+        // Append mode preserves the author's identity and authorization so that
+        // signAsOwner() can be called in step 5.
+        const { encryptionInput: contextEncryptionInput, keyId, keyUri, contextDerivationPath } = yield deriveContextEncryptionInput(agent, tenantDid, contextId, dataEncryptionKey, encryptionIV);
+        // Set the authentication tag from the existing JWE encryption property
+        const fullContextInput = Object.assign(Object.assign({}, contextEncryptionInput), { authenticationTag: Encoder.base64UrlToBytes(encryption.tag) });
+        // Parse the message to get a RecordsWrite instance we can mutate
+        const recordsWriteInstance = yield dwnMessageConstructors[DwnInterface.RecordsWrite].parse(recordsWrite);
+        yield recordsWriteInstance.encryptSymmetricEncryptionKey(fullContextInput, { append: true });
+        // 5. Re-sign as owner — the author's signature is preserved but its
+        // encryptionCid is now stale; the owner's signature vouches for the
+        // updated encryption property.
+        const signer = yield getSigner(tenantDid);
+        yield recordsWriteInstance.signAsOwner(signer);
+        // Store the upgraded message directly via the message store, bypassing
+        // the handler's conflict resolution which doesn't support same-timestamp
+        // owner-augmented replacements. The data is unchanged — only the encryption
+        // metadata and authorization are updated.
+        //
+        // We must also update the state index and event stream to keep sync and
+        // real-time subscribers consistent — without this, the upgraded record
+        // would never propagate to remote DWNs or notify subscribers.
+        const { messageStore, stateIndex, eventStream } = dwn.storage;
+        // Validate the upgrade only changed encryption and authorization fields.
+        // The descriptor, recordId, contextId, and data must remain identical.
+        // Note: parse() may produce a new descriptor object, so we compare by value.
+        const upgradedMessage = recordsWriteInstance.message;
+        if (JSON.stringify(upgradedMessage.descriptor) !== JSON.stringify(recordsWrite.descriptor)) {
+            throw new Error('AgentDwnApi: upgradeExternalRootRecord() must not modify the descriptor.');
+        }
+        if (upgradedMessage.recordId !== recordsWrite.recordId) {
+            throw new Error('AgentDwnApi: upgradeExternalRootRecord() must not modify the recordId.');
+        }
+        // Fetch the stored original (which carries encodedData for small payloads)
+        const originalCid = yield Message.getCid(recordsWrite);
+        const storedOriginal = yield messageStore.get(tenantDid, originalCid);
+        // Build indexes for the upgraded message (mark as latest base state)
+        const isLatestBaseState = true;
+        const upgradedIndexes = yield recordsWriteInstance.constructIndexes(isLatestBaseState);
+        // Carry over the encoded data from the stored original (the handler
+        // base64url-encodes small payloads into encodedData during processMessage)
+        if (storedOriginal === null || storedOriginal === void 0 ? void 0 : storedOriginal.encodedData) {
+            upgradedMessage.encodedData = storedOriginal.encodedData;
+        }
+        // Use put-before-delete ordering: if a crash occurs after the put but
+        // before the delete, we end up with a duplicate (recoverable via the
+        // isLatestBaseState index) rather than data loss (unrecoverable).
+        const upgradedCid = yield Message.getCid(upgradedMessage);
+        yield messageStore.put(tenantDid, upgradedMessage, upgradedIndexes);
+        yield stateIndex.insert(tenantDid, upgradedCid, upgradedIndexes);
+        // Now remove the original message and its state index entry.
+        yield messageStore.delete(tenantDid, originalCid);
+        yield stateIndex.delete(tenantDid, [originalCid]);
+        // Notify real-time subscribers (mirrors handler behavior)
+        if (eventStream !== undefined) {
+            eventStream.emit(tenantDid, { message: upgradedMessage }, upgradedIndexes);
+        }
+        // Cache context key info for subsequent writes in this context
+        contextKeyCache.set(contextId, { keyId, keyUri, contextDerivationPath });
+    });
+}
+//# sourceMappingURL=dwn-record-upgrade.js.map

package/dist/esm/dwn-record-upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dwn-record-upgrade.js","sourceRoot":"","sources":["../../src/dwn-record-upgrade.ts"],"names":[],"mappings":";;;;;;;;;AAYA,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,OAAO,EACP,OAAO,GACR,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,4BAA4B,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAgB,yBAAyB,CAC7C,KAAwB,EACxB,SAAiB,EACjB,YAAiC,EACjC,GAAQ,EACR,SAAiD,EACjD,eAA6H;;QAE7H,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAE5B,mDAAmD;QACnD,MAAM,eAAe,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAChD,CAAC,CAA2C,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,KAAK,mBAAmB,CAAC,YAAY,CAChH,CAAC;QACF,MAAM,kBAAkB,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CACnD,CAAC,CAA2C,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,KAAK,mBAAmB,CAAC,eAAe,CACnH,CAAC;QACF,IAAI,CAAC,eAAe,IAAI,kBAAkB,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEvD,wDAAwD;QACxD,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAE7D,wCAAwC;QACxC,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAC9C,CAAC,CAA2C,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,KAAK,mBAAmB,CAAC,YAAY,CAC/G,CAAC;QAEH,MAAM,kBAAkB,GAAG,OAAO,CAAC,iDAAiD,CAClF,YAAY,CAAC,UAAU,CACxB,CAAC;QAEF,MAAM,iBAAiB,GAAG,MAAM,YAAY,CAAC,OAAO,CAClD,kBAAkB,EAClB;YACE,YAAY,EAAS,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,aAAa,CAAC;YAC1E,kBAAkB,EAAG,aAAa,CAAC,MAAM,CAAC,GAAG;SAC9C,CACF,CAAC;QAEF,2EAA2E;QAC3E,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE7D,uEAAuE;QACvE,wEAAwE;QACxE,yCAAyC;QACzC,MAAM,EAAE,eAAe,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,GACrF,MAAM,4BAA4B,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAEnG,uEAAuE;QACvE,MAAM,gBAAgB,mCAAQ,sBAAsB,KAAE,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,GAAE,CAAC;QAEpH,iEAAiE;QACjE,MAAM,oBAAoB,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,KAAK,CACxF,YAAY,CACc,CAAC;QAE7B,MAAM,oBAAoB,CAAC,6BAA6B,CACtD,gBAAmC,EACnC,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;QAEF,oEAAoE;QACpE,oEAAoE;QACpE,+BAA+B;QAC/B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE/C,uEAAuE;QACvE,yEAAyE;QACzE,4EAA4E;QAC5E,0CAA0C;QAC1C,EAAE;QACF,wEAAwE;QACxE,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;QAE9D,yEAAyE;QACzE,uEAAuE;QACvE,6EAA6E;QAC7E,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAiC,CAAC;QAC/E,IAAI,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,eAAe,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QAED,2EAA2E;QAC3E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAuC,CAAC;QAE5G,qEAAqE;QACrE,MAAM,iBAAiB,GAAG,IAAI,CAAC;QAC/B,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAEvF,oEAAoE;QACpE,2EAA2E;QAC3E,IAAI,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,WAAW,EAAE,CAAC;YAChC,eAAe,CAAC,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;QAC3D,CAAC;QAED,sEAAsE;QACtE,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QACpE,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QAEjE,6DAA6D;QAC7D,MAAM,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAElD,0DAA0D;QAC1D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,eAAe,CAAC,CAAC;QAC7E,CAAC;QAED,+DAA+D;QAC/D,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC3E,CAAC;CAAA"}

package/dist/esm/dwn-type-guards.js

@@ -0,0 +1,23 @@
+import { DwnInterfaceName } from '@enbox/dwn-sdk-js';
+import { DwnInterface } from './types/dwn.js';
+export function isDwnRequest(dwnRequest, messageType) {
+    return dwnRequest.messageType === messageType;
+}
+export function isDwnMessage(messageType, message) {
+    const incomingMessageInterfaceName = message.descriptor.interface + message.descriptor.method;
+    return incomingMessageInterfaceName === messageType;
+}
+export function isRecordsType(messageType) {
+    return messageType === DwnInterface.RecordsDelete ||
+        messageType === DwnInterface.RecordsQuery ||
+        messageType === DwnInterface.RecordsRead ||
+        messageType === DwnInterface.RecordsSubscribe ||
+        messageType === DwnInterface.RecordsWrite;
+}
+export function isRecordPermissionScope(scope) {
+    return scope.interface === DwnInterfaceName.Records;
+}
+export function isMessagesPermissionScope(scope) {
+    return scope.interface === DwnInterfaceName.Messages;
+}
+//# sourceMappingURL=dwn-type-guards.js.map

package/dist/esm/dwn-type-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dwn-type-guards.js","sourceRoot":"","sources":["../../src/dwn-type-guards.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,UAAU,YAAY,CAC1B,UAA2C,EAAE,WAAc;IAE3D,OAAO,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,WAAc,EAAE,OAAuB;IAEvC,MAAM,4BAA4B,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;IAC9F,OAAO,4BAA4B,KAAK,WAAW,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,WAAyB;IACrD,OAAO,WAAW,KAAK,YAAY,CAAC,aAAa;QAC/C,WAAW,KAAK,YAAY,CAAC,YAAY;QACzC,WAAW,KAAK,YAAY,CAAC,WAAW;QACxC,WAAW,KAAK,YAAY,CAAC,gBAAgB;QAC7C,WAAW,KAAK,YAAY,CAAC,YAAY,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAyB;IAC/D,OAAO,KAAK,CAAC,SAAS,KAAK,gBAAgB,CAAC,OAAO,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAyB;IACjE,OAAO,KAAK,CAAC,SAAS,KAAK,gBAAgB,CAAC,QAAQ,CAAC;AACvD,CAAC"}

package/dist/esm/index.js

@@ -1,9 +1,15 @@
 export * from './types/dwn.js';
 export * from './agent-did-resolver-cache.js';
+export * from './anonymous-dwn-api.js';
 export * from './bearer-identity.js';
 export * from './crypto-api.js';
 export * from './did-api.js';
 export * from './dwn-api.js';
+export * from './dwn-encryption.js';
+export * from './dwn-key-delivery.js';
+export * from './dwn-record-upgrade.js';
+export * from './dwn-type-guards.js';
+export * from './protocol-utils.js';
 export * from './hd-identity-vault.js';
 export * from './identity-api.js';
 export * from './local-key-manager.js';

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,cAAc,gBAAgB,CAAC;AAQ/B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,cAAc,gBAAgB,CAAC;AAQ/B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,sBAAsB,CAAC"}

package/dist/esm/permissions-api.js

@@ -62,7 +62,7 @@ export class AgentPermissionsApi {
         });
     }
     fetchGrants(_a) {
-        return __awaiter(this, arguments, void 0, function* ({ author, target, grantee, grantor, protocol, remote = false }) {
+        return __awaiter(this, arguments, void 0, function* ({ author, target, grantee, grantor, protocol, remote = false, checkRevoked = true, }) {
             // filter by a protocol using tags if provided
             const tags = protocol ? { protocol } : undefined;
             const params = {
@@ -83,15 +83,56 @@ export class AgentPermissionsApi {
             if (reply.status.code !== 200) {
                 throw new Error(`PermissionsApi: Failed to fetch grants: ${reply.status.detail}`);
             }
+            // Build a set of revoked grant IDs so that revoked grants can be filtered out.
+            // Uses a single batch query for all revocations rather than N individual reads.
+            const revokedGrantIds = checkRevoked
+                ? yield this.fetchRevokedGrantIds({ author, target, grantor, remote, tags })
+                : new Set();
             const grants = [];
             for (const entry of reply.entries) {
-                // TODO: Check for revocation status based on a request parameter and filter out revoked grants
+                if (revokedGrantIds.has(entry.recordId)) {
+                    continue;
+                }
                 const grant = yield DwnPermissionGrant.parse(entry);
                 grants.push({ grant, message: entry });
             }
             return grants;
         });
     }
+    /**
+     * Fetch all revocation record IDs for grants, returned as a Set of parent grant record IDs.
+     * Issues a single RecordsQuery for all revocation records, optionally scoped to a grantor and protocol.
+     */
+    fetchRevokedGrantIds(_a) {
+        return __awaiter(this, arguments, void 0, function* ({ author, target, grantor, remote, tags }) {
+            const revocationParams = {
+                author,
+                target,
+                messageType: DwnInterface.RecordsQuery,
+                messageParams: {
+                    filter: {
+                        author: grantor, // revocations are authored by the same grantor
+                        protocol: PermissionsProtocol.uri,
+                        protocolPath: PermissionsProtocol.revocationPath,
+                        tags,
+                    }
+                }
+            };
+            const { reply: revocationReply } = remote
+                ? yield this.agent.sendDwnRequest(revocationParams)
+                : yield this.agent.processDwnRequest(revocationParams);
+            if (revocationReply.status.code !== 200) {
+                throw new Error(`PermissionsApi: Failed to fetch revocations: ${revocationReply.status.detail}`);
+            }
+            const revokedGrantIds = new Set();
+            for (const entry of revocationReply.entries) {
+                if (entry.descriptor.parentId !== undefined) {
+                    revokedGrantIds.add(entry.descriptor.parentId);
+                }
+            }
+            return revokedGrantIds;
+        });
+    }
     fetchRequests(_a) {
         return __awaiter(this, arguments, void 0, function* ({ author, target, protocol, remote = false }) {
             // filter by a protocol using tags if provided

package/dist/esm/permissions-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-api.js","sourceRoot":"","sources":["../../src/permissions-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAExF,MAAM,OAAO,mBAAmB;IAO9B,IAAI,KAAK;QACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,KAAe;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,YAAY,EAAE,KAAK,KAA4B,EAAE;QAhBjD,4GAA4G;QACpG,uBAAkB,GAA2C,IAAI,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAgBpG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAEK,uBAAuB;6DAAC,EAC5B,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,MAAM,GAAG,KAAK,EACM;YACpB,8DAA8D;YAC9D,gHAAgH;YAChH,MAAM,QAAQ,GAAG,CAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChF,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBAC9C,MAAM,EAAI,WAAW;gBACrB,MAAM,EAAI,WAAW;gBACrB,OAAO,EAAG,YAAY;gBACtB,OAAO,EAAG,WAAW;aACtB,CAAC,CAAC;YAEH,+GAA+G;YAC/G,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,mBAAmB,CACzD,YAAY,EACZ,WAAW,EACX,EAAE,WAAW,EAAE,QAAQ,EAAE,EACzB,gBAAgB,EAChB,QAAQ,CACT,CAAC;YAEF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,WAAW,KAAK,QAAQ,EAAE,CAAC,CAAC;YAC7F,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;KAAA;IAEK,WAAW;6DAAC,EAChB,MAAM,EACN,MAAM,EACN,OAAO,EACP,OAAO,EACP,QAAQ,EACR,MAAM,GAAG,KAAK,EACS;YAEvB,8CAA8C;YAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAEjD,MAAM,MAAM,GAAiD;gBAC3D,MAAM,EAAU,MAAM;gBACtB,MAAM,EAAU,MAAM;gBACtB,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,EAAG;oBACd,MAAM,EAAE;wBACN,MAAM,EAAS,OAAO,EAAE,+CAA+C;wBACvE,SAAS,EAAM,OAAO,EAAE,kDAAkD;wBAC1E,QAAQ,EAAO,mBAAmB,CAAC,GAAG;wBACtC,YAAY,EAAG,mBAAmB,CAAC,SAAS;wBAC5C,IAAI;qBACL;iBACF;aACF,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAChH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,MAAM,GAA0B,EAAE,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAA+C,EAAE,CAAC;gBAC1E,+FAA+F;gBAC/F,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAEK,aAAa;6DAAC,EAClB,MAAM,EACN,MAAM,EACN,QAAQ,EACR,MAAM,GAAG,KAAK,EACc;YAC5B,8CAA8C;YAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAEjD,MAAM,MAAM,GAAiD;gBAC3D,MAAM,EAAU,MAAM;gBACtB,MAAM,EAAU,MAAM;gBACtB,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,EAAG;oBACd,MAAM,EAAE;wBACN,QAAQ,EAAO,mBAAmB,CAAC,GAAG;wBACtC,YAAY,EAAG,mBAAmB,CAAC,WAAW;wBAC9C,IAAI;qBACL;iBACF;aACF,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAChH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,QAAQ,GAA6B,EAAE,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAA+C,EAAE,CAAC;gBAC1E,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;IAEK,cAAc;6DAAC,EACnB,MAAM,EACN,MAAM,EACN,aAAa,EACb,MAAM,GAAG,KAAK,EACO;YACrB,MAAM,MAAM,GAAgD;gBAC1D,MAAM;gBACN,MAAM;gBACN,WAAW,EAAK,YAAY,CAAC,WAAW;gBACxC,aAAa,EAAG;oBACd,MAAM,EAAE;wBACN,QAAQ,EAAO,aAAa;wBAC5B,QAAQ,EAAO,mBAAmB,CAAC,GAAG;wBACtC,YAAY,EAAG,mBAAmB,CAAC,cAAc;qBAClD;iBACF;aACF,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjI,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxC,gDAAgD;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;iBAAM,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/C,+CAA+C;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,wDAAwD,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3G,CAAC;KAAA;IAEK,WAAW,CAAC,MAAyB;;YACzC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,KAA2B,MAAM,EAA5B,iBAAiB,UAAK,MAAM,EAA3E,gCAAkE,CAAS,CAAC;YAElF,IAAI,IAAI,GAAG,SAAS,CAAC;YACrB,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClE,IAAI,GAAG,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxD,CAAC;YAED,MAAM,mBAAmB,GAAwB;gBAC/C,WAAW,EAAG,iBAAiB,CAAC,WAAW;gBAC3C,SAAS,EAAK,iBAAiB,CAAC,SAAS;gBACzC,WAAW,EAAG,iBAAiB,CAAC,WAAW;gBAC3C,SAAS;gBACT,KAAK,EAAS,iBAAiB,CAAC,KAAK;aACtC,CAAC;YAEF,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,YAAY,EAAE,CAAC;YAEjF,MAAM,aAAa,GAAgD;gBACjE,SAAS,EAAM,iBAAiB,CAAC,SAAS;gBAC1C,QAAQ,EAAO,mBAAmB,CAAC,GAAG;gBACtC,YAAY,EAAG,mBAAmB,CAAC,SAAS;gBAC5C,UAAU,EAAK,kBAAkB;gBACjC,IAAI;aACL,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC5D,KAAK;gBACL,MAAM;gBACN,MAAM,EAAQ,MAAM;gBACpB,WAAW,EAAG,YAAY,CAAC,YAAY;gBACvC,aAAa;gBACb,UAAU,EAAI,IAAI,IAAI,CAAC,CAAE,qBAAqB,CAAE,CAAC;aAClD,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,kBAAkB,mCACnB,OAAQ,KACX,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,WAAW,EAAE,GACrE,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAEjE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAChD,CAAC;KAAA;IAEK,aAAa,CAAC,MAA2B;;YAC7C,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,KAA2B,MAAM,EAA5B,iBAAiB,UAAK,MAAM,EAA3E,gCAAkE,CAAS,CAAC;YAElF,IAAI,IAAI,GAAG,SAAS,CAAC;YACrB,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClE,IAAI,GAAG,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxD,CAAC;YAED,MAAM,qBAAqB,GAA0B;gBACnD,WAAW,EAAG,iBAAiB,CAAC,WAAW;gBAC3C,SAAS;gBACT,KAAK,EAAS,iBAAiB,CAAC,KAAK;aACtC,CAAC;YAEF,MAAM,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,YAAY,EAAE,CAAC;YAEpF,MAAM,aAAa,GAAgD;gBACjE,QAAQ,EAAO,mBAAmB,CAAC,GAAG;gBACtC,YAAY,EAAG,mBAAmB,CAAC,WAAW;gBAC9C,UAAU,EAAK,kBAAkB;gBACjC,IAAI;aACL,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC5D,KAAK;gBACL,MAAM;gBACN,MAAM,EAAQ,MAAM;gBACpB,WAAW,EAAG,YAAY,CAAC,YAAY;gBACvC,aAAa;gBACb,UAAU,EAAI,IAAI,IAAI,CAAC,CAAE,sBAAsB,CAAE,CAAC;aACnD,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,kBAAkB,mCACnB,OAAQ,KACX,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,WAAW,EAAE,GACtE,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAErE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAClD,CAAC;KAAA;IAEK,gBAAgB,CAAC,MAA8B;;YACnD,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;YAE7D,MAAM,UAAU,GAA6B,EAAE,WAAW,EAAE,CAAC;YAE7D,MAAM,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,EAAE,CAAC;YAE5E,IAAI,IAAI,GAAG,SAAS,CAAC;YACrB,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,IAAI,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,aAAa,GAAgD;gBACjE,eAAe,EAAG,KAAK,CAAC,EAAE;gBAC1B,QAAQ,EAAU,mBAAmB,CAAC,GAAG;gBACzC,YAAY,EAAM,mBAAmB,CAAC,cAAc;gBACpD,UAAU,EAAQ,kBAAkB;gBACpC,IAAI;aACL,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC5D,KAAK;gBACL,MAAM;gBACN,MAAM,EAAQ,MAAM;gBACpB,WAAW,EAAG,YAAY,CAAC,YAAY;gBACvC,aAAa;gBACb,UAAU,EAAI,IAAI,IAAI,CAAC,CAAE,yBAAyB,CAAE,CAAC;aACtD,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,kBAAkB,mCACnB,OAAQ,KACX,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,WAAW,EAAE,GACzE,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACzC,CAAC;KAAA;IAEK,KAAK;;YACT,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;KAAA;IAED;;;;OAIG;IACH,MAAM,CAAO,mBAAmB;6DAC9B,OAAe,EACf,OAAe,EACf,aAKC,EACD,MAA8B,EAC9B,YAAqB,KAAK;YAE1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBACjC,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;oBACnD,SAAS;gBACX,CAAC;gBACD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;gBAEzE,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;oBACtG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAEO,MAAM,CAAC,mBAAmB,CAChC,OAAe,EACf,OAAe,EACf,WAAc,EACd,KAAsB,EACtB,QAAiB,EACjB,YAAqB,EACrB,SAAkB;QAEpB,qDAAqD;QACnD,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QACxD,IAAI,gBAAgB,KAAK,WAAW,EAAE,CAAC;YACrC,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,KAAkC,CAAC;gBACvD,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACtC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,kHAAkH;gBAClH,IAAI,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC;oBAClD,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,oDAAoD;gBACpD,mHAAmH;gBACnH,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS,IAAI,WAAW,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBACxF,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,yHAAyH;gBACzH,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,KAAI,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA,EAAE,CAAC;oBACxF,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,KAAgE,CAAC;gBACvF,oGAAoG;gBACpG,IAAI,aAAa,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACzC,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,aAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACxC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,OAAO,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,2BAA2B,CAAC,KAAyE;QAClH,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;IAC3E,CAAC;CACF"}
+{"version":3,"file":"permissions-api.js","sourceRoot":"","sources":["../../src/permissions-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAExF,MAAM,OAAO,mBAAmB;IAO9B,IAAI,KAAK;QACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,KAAe;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,YAAY,EAAE,KAAK,KAA4B,EAAE;QAhBjD,4GAA4G;QACpG,uBAAkB,GAA2C,IAAI,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAgBpG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAEK,uBAAuB;6DAAC,EAC5B,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,MAAM,GAAG,KAAK,EACM;YACpB,8DAA8D;YAC9D,gHAAgH;YAChH,MAAM,QAAQ,GAAG,CAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChF,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBAC9C,MAAM,EAAI,WAAW;gBACrB,MAAM,EAAI,WAAW;gBACrB,OAAO,EAAG,YAAY;gBACtB,OAAO,EAAG,WAAW;aACtB,CAAC,CAAC;YAEH,+GAA+G;YAC/G,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,mBAAmB,CACzD,YAAY,EACZ,WAAW,EACX,EAAE,WAAW,EAAE,QAAQ,EAAE,EACzB,gBAAgB,EAChB,QAAQ,CACT,CAAC;YAEF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,WAAW,KAAK,QAAQ,EAAE,CAAC,CAAC;YAC7F,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;KAAA;IAEK,WAAW;6DAAC,EAChB,MAAM,EACN,MAAM,EACN,OAAO,EACP,OAAO,EACP,QAAQ,EACR,MAAM,GAAG,KAAK,EACd,YAAY,GAAG,IAAI,GACI;YAEvB,8CAA8C;YAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAEjD,MAAM,MAAM,GAAiD;gBAC3D,MAAM,EAAU,MAAM;gBACtB,MAAM,EAAU,MAAM;gBACtB,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,EAAG;oBACd,MAAM,EAAE;wBACN,MAAM,EAAS,OAAO,EAAE,+CAA+C;wBACvE,SAAS,EAAM,OAAO,EAAE,kDAAkD;wBAC1E,QAAQ,EAAO,mBAAmB,CAAC,GAAG;wBACtC,YAAY,EAAG,mBAAmB,CAAC,SAAS;wBAC5C,IAAI;qBACL;iBACF;aACF,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAChH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YAED,+EAA+E;YAC/E,gFAAgF;YAChF,MAAM,eAAe,GAAG,YAAY;gBAClC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBAC5E,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;YAEtB,MAAM,MAAM,GAA0B,EAAE,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAA+C,EAAE,CAAC;gBAC1E,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;IAED;;;OAGG;IACW,oBAAoB;6DAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAMzE;YACC,MAAM,gBAAgB,GAAiD;gBACrE,MAAM;gBACN,MAAM;gBACN,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,EAAG;oBACd,MAAM,EAAE;wBACN,MAAM,EAAS,OAAO,EAAE,+CAA+C;wBACvE,QAAQ,EAAO,mBAAmB,CAAC,GAAG;wBACtC,YAAY,EAAG,mBAAmB,CAAC,cAAc;wBACjD,IAAI;qBACL;iBACF;aACF,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,MAAM;gBACvC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC;gBACnD,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YAEzD,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,gDAAgD,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACnG,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;YAC1C,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,OAA+C,EAAE,CAAC;gBACpF,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC5C,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;YAED,OAAO,eAAe,CAAC;QACzB,CAAC;KAAA;IAEK,aAAa;6DAAC,EAClB,MAAM,EACN,MAAM,EACN,QAAQ,EACR,MAAM,GAAG,KAAK,EACc;YAC5B,8CAA8C;YAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAEjD,MAAM,MAAM,GAAiD;gBAC3D,MAAM,EAAU,MAAM;gBACtB,MAAM,EAAU,MAAM;gBACtB,WAAW,EAAK,YAAY,CAAC,YAAY;gBACzC,aAAa,EAAG;oBACd,MAAM,EAAE;wBACN,QAAQ,EAAO,mBAAmB,CAAC,GAAG;wBACtC,YAAY,EAAG,mBAAmB,CAAC,WAAW;wBAC9C,IAAI;qBACL;iBACF;aACF,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAChH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,QAAQ,GAA6B,EAAE,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAA+C,EAAE,CAAC;gBAC1E,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;IAEK,cAAc;6DAAC,EACnB,MAAM,EACN,MAAM,EACN,aAAa,EACb,MAAM,GAAG,KAAK,EACO;YACrB,MAAM,MAAM,GAAgD;gBAC1D,MAAM;gBACN,MAAM;gBACN,WAAW,EAAK,YAAY,CAAC,WAAW;gBACxC,aAAa,EAAG;oBACd,MAAM,EAAE;wBACN,QAAQ,EAAO,aAAa;wBAC5B,QAAQ,EAAO,mBAAmB,CAAC,GAAG;wBACtC,YAAY,EAAG,mBAAmB,CAAC,cAAc;qBAClD;iBACF;aACF,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjI,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxC,gDAAgD;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;iBAAM,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/C,+CAA+C;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,wDAAwD,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3G,CAAC;KAAA;IAEK,WAAW,CAAC,MAAyB;;YACzC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,KAA2B,MAAM,EAA5B,iBAAiB,UAAK,MAAM,EAA3E,gCAAkE,CAAS,CAAC;YAElF,IAAI,IAAI,GAAG,SAAS,CAAC;YACrB,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClE,IAAI,GAAG,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxD,CAAC;YAED,MAAM,mBAAmB,GAAwB;gBAC/C,WAAW,EAAG,iBAAiB,CAAC,WAAW;gBAC3C,SAAS,EAAK,iBAAiB,CAAC,SAAS;gBACzC,WAAW,EAAG,iBAAiB,CAAC,WAAW;gBAC3C,SAAS;gBACT,KAAK,EAAS,iBAAiB,CAAC,KAAK;aACtC,CAAC;YAEF,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,YAAY,EAAE,CAAC;YAEjF,MAAM,aAAa,GAAgD;gBACjE,SAAS,EAAM,iBAAiB,CAAC,SAAS;gBAC1C,QAAQ,EAAO,mBAAmB,CAAC,GAAG;gBACtC,YAAY,EAAG,mBAAmB,CAAC,SAAS;gBAC5C,UAAU,EAAK,kBAAkB;gBACjC,IAAI;aACL,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC5D,KAAK;gBACL,MAAM;gBACN,MAAM,EAAQ,MAAM;gBACpB,WAAW,EAAG,YAAY,CAAC,YAAY;gBACvC,aAAa;gBACb,UAAU,EAAI,IAAI,IAAI,CAAC,CAAE,qBAAqB,CAAE,CAAC;aAClD,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,kBAAkB,mCACnB,OAAQ,KACX,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,WAAW,EAAE,GACrE,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAEjE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAChD,CAAC;KAAA;IAEK,aAAa,CAAC,MAA2B;;YAC7C,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,KAA2B,MAAM,EAA5B,iBAAiB,UAAK,MAAM,EAA3E,gCAAkE,CAAS,CAAC;YAElF,IAAI,IAAI,GAAG,SAAS,CAAC;YACrB,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClE,IAAI,GAAG,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxD,CAAC;YAED,MAAM,qBAAqB,GAA0B;gBACnD,WAAW,EAAG,iBAAiB,CAAC,WAAW;gBAC3C,SAAS;gBACT,KAAK,EAAS,iBAAiB,CAAC,KAAK;aACtC,CAAC;YAEF,MAAM,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,YAAY,EAAE,CAAC;YAEpF,MAAM,aAAa,GAAgD;gBACjE,QAAQ,EAAO,mBAAmB,CAAC,GAAG;gBACtC,YAAY,EAAG,mBAAmB,CAAC,WAAW;gBAC9C,UAAU,EAAK,kBAAkB;gBACjC,IAAI;aACL,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC5D,KAAK;gBACL,MAAM;gBACN,MAAM,EAAQ,MAAM;gBACpB,WAAW,EAAG,YAAY,CAAC,YAAY;gBACvC,aAAa;gBACb,UAAU,EAAI,IAAI,IAAI,CAAC,CAAE,sBAAsB,CAAE,CAAC;aACnD,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,kBAAkB,mCACnB,OAAQ,KACX,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,WAAW,EAAE,GACtE,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAErE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAClD,CAAC;KAAA;IAEK,gBAAgB,CAAC,MAA8B;;YACnD,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;YAE7D,MAAM,UAAU,GAA6B,EAAE,WAAW,EAAE,CAAC;YAE7D,MAAM,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,EAAE,CAAC;YAE5E,IAAI,IAAI,GAAG,SAAS,CAAC;YACrB,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,IAAI,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,aAAa,GAAgD;gBACjE,eAAe,EAAG,KAAK,CAAC,EAAE;gBAC1B,QAAQ,EAAU,mBAAmB,CAAC,GAAG;gBACzC,YAAY,EAAM,mBAAmB,CAAC,cAAc;gBACpD,UAAU,EAAQ,kBAAkB;gBACpC,IAAI;aACL,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC5D,KAAK;gBACL,MAAM;gBACN,MAAM,EAAQ,MAAM;gBACpB,WAAW,EAAG,YAAY,CAAC,YAAY;gBACvC,aAAa;gBACb,UAAU,EAAI,IAAI,IAAI,CAAC,CAAE,yBAAyB,CAAE,CAAC;aACtD,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,kBAAkB,mCACnB,OAAQ,KACX,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,WAAW,EAAE,GACzE,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACzC,CAAC;KAAA;IAEK,KAAK;;YACT,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;KAAA;IAED;;;;OAIG;IACH,MAAM,CAAO,mBAAmB;6DAC9B,OAAe,EACf,OAAe,EACf,aAKC,EACD,MAA8B,EAC9B,YAAqB,KAAK;YAE1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBACjC,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;oBACnD,SAAS;gBACX,CAAC;gBACD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;gBAEzE,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;oBACtG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAEO,MAAM,CAAC,mBAAmB,CAChC,OAAe,EACf,OAAe,EACf,WAAc,EACd,KAAsB,EACtB,QAAiB,EACjB,YAAqB,EACrB,SAAkB;QAEpB,qDAAqD;QACnD,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QACxD,IAAI,gBAAgB,KAAK,WAAW,EAAE,CAAC;YACrC,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,KAAkC,CAAC;gBACvD,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACtC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,kHAAkH;gBAClH,IAAI,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC;oBAClD,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,oDAAoD;gBACpD,mHAAmH;gBACnH,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS,IAAI,WAAW,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;oBACxF,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,yHAAyH;gBACzH,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,KAAI,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA,EAAE,CAAC;oBACxF,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,KAAgE,CAAC;gBACvF,oGAAoG;gBACpG,IAAI,aAAa,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACzC,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,aAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACxC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,OAAO,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,2BAA2B,CAAC,KAAyE;QAClH,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;IAC3E,CAAC;CACF"}