@ghostlytools/cli 1.2.4 → 1.3.1

package/dist/assets/backup-CnMN2oUK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-CnMN2oUK.js","names":["join","openEnvelope"],"sources":["../../../browser/src/backup/stream.ts","../../../browser/src/backup/light.ts","../../src/backup.ts"],"sourcesContent":["import { fromBase64Url, toBase64Url } from \"./codec\";\n\n/**\n * A backup written and read a piece at a time (WISP 05, envelope version 2), so a profile with years of files never\n * has to fit in memory. The file is one line of clear JSON (the header), then frames:\n *\n *   header line:  {\"format\":\"ghostly-backup\",\"version\":2,\"protection\":\"passphrase\"|\"none\",...}\\n\n *   frame:        kind (1 byte) | length (4 bytes, big endian) | body\n *\n * A frame carries one record: a piece of JSON (gzip or plain) or a piece of a file's bytes, at most `FRAME_BYTES`\n * of them. The last frame is the final marker; a file that ends without it was cut short and is refused.\n *\n * - `passphrase`: the key comes from the passphrase as in version 1 (PBKDF2-SHA256, 600 000 rounds, 16 byte salt).\n *   Every frame is sealed alone with AES-256-GCM: its nonce is the header's 7 random bytes, the frame's number\n *   (4 bytes) and its kind (1 byte), and the SHA-256 of the header line is its associated data. A frame changed,\n *   moved, dropped or retyped, a changed header, or a missing final marker fails to open.\n * - `none`: nothing is encrypted. A SHA-256 chain runs over the header line and every frame, and the final marker\n *   holds its last value, so a damaged or cut file is refused. It proves nothing about who made the file.\n */\nexport const FRAME_BYTES = 1024 * 1024;\n/** No frame is larger than this: a reader refuses one that says it is, before reading it. */\nconst MAX_FRAME_BYTES = 64 * 1024 * 1024;\n/** One piece of JSON, decompressed: past it the backup is refused, not read. */\nconst MAX_JSON_BYTES = 256 * 1024 * 1024;\nconst MAX_HEADER_BYTES = 4096;\nconst ITERATIONS = 600_000;\nconst TAG_BYTES = 16;\n\nconst KIND = { gzipJson: 1, json: 2, bytes: 3, final: 255 } as const;\n\n/**\n * The envelope version of a bundle that carries a device set (WISP 06 § Compatibility and rollout): an app from before\n * WISP 06 refuses it with \"This backup comes from a newer Ghostly\", rather than restoring a copy that stops nothing.\n * WISP 06 names it version 2, but WISP 05's streamed bundle took 2 first; every other bundle is still 2.\n */\nexport const DEVICE_SET_BACKUP_VERSION = 3;\n\nexport interface BackupHeader {\n  format: \"ghostly-backup\";\n  version: 2 | 3;\n  protection: \"passphrase\" | \"none\";\n  kdf?: { name: \"PBKDF2-SHA256\"; iterations: number; salt: string };\n  cipher?: { name: \"AES-256-GCM\"; nonce: string };\n  check?: { name: \"SHA-256-chain\" };\n}\n\n/** Where a backup is written: in order, a piece at a time. */\nexport interface BackupSink { write(bytes: Uint8Array): Promise<void> }\n/** Where a backup is read from: any range, so nothing is read before it is needed. */\nexport interface BackupSource { readonly size: number; read(offset: number, length: number): Promise<Uint8Array> }\n/** One record of a backup: JSON text, or a piece of the bytes of the file the JSON before it announced. */\nexport type BackupRecord = { json: string; bytes?: undefined } | { bytes: Uint8Array; json?: undefined };\n\n/** Thrown when the work was cancelled (`AbortSignal`): nothing is wrong with the backup. */\nexport class BackupCancelled extends Error {\n  constructor() { super(\"Cancelled\"); this.name = \"AbortError\"; }\n}\nexport const isCancelled = (error: unknown) => (error as { name?: string })?.name === \"AbortError\";\nconst check = (signal?: AbortSignal) => { if (signal?.aborted) throw new BackupCancelled(); };\n\n/** A Blob (a picked file) as a source, read in slices: never `stream()`, which WebKit fails on for some stored Blobs. */\nexport const blobSource = (blob: Blob): BackupSource => ({ size: blob.size, read: async (offset, length) => new Uint8Array(await blob.slice(offset, offset + length).arrayBuffer()) });\nexport const bytesSource = (bytes: Uint8Array): BackupSource => ({ size: bytes.length, read: async (offset, length) => bytes.subarray(offset, offset + length) });\n/** A sink that keeps what is written (tests, and a backup small enough to hand over whole). */\nexport function memorySink(): BackupSink & { bytes(): Uint8Array } {\n  const parts: Uint8Array[] = [];\n  return {\n    write: async (bytes) => { parts.push(bytes.slice()); },\n    bytes: () => { const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0)); let at = 0; for (const p of parts) { out.set(p, at); at += p.length; } return out; },\n  };\n}\n\nconst canCompress = () => typeof CompressionStream !== \"undefined\";\nasync function through(bytes: Uint8Array, stream: CompressionStream | DecompressionStream, limit = Infinity): Promise<Uint8Array> {\n  const reader = new Blob([bytes as BlobPart]).stream().pipeThrough(stream).getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (let next = await reader.read(); !next.done; next = await reader.read()) {\n    size += next.value.length;\n    if (size > limit) { await reader.cancel(); throw new Error(\"This backup is too large to restore\"); }\n    chunks.push(next.value);\n  }\n  if (chunks.length === 1) return chunks[0];\n  const out = new Uint8Array(size);\n  let at = 0;\n  for (const chunk of chunks) { out.set(chunk, at); at += chunk.length; }\n  return out;\n}\n\nasync function keyFrom(passphrase: string, salt: Uint8Array, iterations: number): Promise<CryptoKey> {\n  const material = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(passphrase), \"PBKDF2\", false, [\"deriveKey\"]);\n  return crypto.subtle.deriveKey({ name: \"PBKDF2\", hash: \"SHA-256\", salt: salt as BufferSource, iterations }, material, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nconst sha256 = async (...parts: Uint8Array[]) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", join(parts) as BufferSource));\nfunction join(parts: Uint8Array[]): Uint8Array {\n  if (parts.length === 1) return parts[0];\n  const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));\n  let at = 0;\n  for (const part of parts) { out.set(part, at); at += part.length; }\n  return out;\n}\nfunction prefix(kind: number, length: number): Uint8Array {\n  const out = new Uint8Array(5);\n  out[0] = kind;\n  new DataView(out.buffer).setUint32(1, length);\n  return out;\n}\nfunction nonce(base: Uint8Array, frame: number, kind: number): Uint8Array {\n  const out = new Uint8Array(12);\n  out.set(base, 0);\n  new DataView(out.buffer).setUint32(7, frame);\n  out[11] = kind;\n  return out;\n}\n\n/** Writes a backup: `json` and `bytes` in the order they are to be read, then `finish`. */\nexport class BackupWriter {\n  private frame = 0;\n  /** Bytes handed to the sink so far. */\n  written = 0;\n  private finished = false;\n  /** Set once the sink refused a frame: the error it gave, thrown again at every later write. */\n  private failed: { error: unknown } | null = null;\n\n  private constructor(private readonly sink: BackupSink, private readonly key: CryptoKey | null, private readonly base: Uint8Array, private chain: Uint8Array, private readonly signal?: AbortSignal) {}\n\n  /** `passphrase` null: a backup anyone can read (the caller has made sure that is what the person chose). */\n  static async start(sink: BackupSink, passphrase: string | null, signal?: AbortSignal, version: 2 | 3 = 2): Promise<BackupWriter> {\n    if (passphrase !== null && passphrase.length < 12) throw new Error(\"Use at least 12 characters for the backup passphrase\");\n    check(signal);\n    const salt = crypto.getRandomValues(new Uint8Array(16)), base = crypto.getRandomValues(new Uint8Array(7));\n    const header: BackupHeader = passphrase === null\n      ? { format: \"ghostly-backup\", version, protection: \"none\", check: { name: \"SHA-256-chain\" } }\n      : { format: \"ghostly-backup\", version, protection: \"passphrase\", kdf: { name: \"PBKDF2-SHA256\", iterations: ITERATIONS, salt: toBase64Url(salt) }, cipher: { name: \"AES-256-GCM\", nonce: toBase64Url(base) } };\n    const line = new TextEncoder().encode(`${JSON.stringify(header)}\\n`);\n    const key = passphrase === null ? null : await keyFrom(passphrase, salt, ITERATIONS);\n    const writer = new BackupWriter(sink, key, base, await sha256(line), signal);\n    await sink.write(line);\n    writer.written = line.length;\n    return writer;\n  }\n\n  private async put(kind: number, plain: Uint8Array): Promise<void> {\n    check(this.signal);\n    if (this.failed) throw this.failed.error;\n    if (this.finished) throw new Error(\"This backup is already finished\");\n    if (this.frame >= 0xffffffff) throw new Error(\"This backup is too large\");\n    // What a reader refuses is not written: found out now, not when the backup is needed.\n    if (plain.length > MAX_FRAME_BYTES) throw new Error(\"A record of this profile is too large for a backup\");\n    let out: Uint8Array;\n    if (this.key) {\n      // The header's digest is every frame's associated data: a frame of another backup, or under a changed header, fails.\n      const sealed = new Uint8Array(await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: nonce(this.base, this.frame, kind) as BufferSource, additionalData: this.chain as BufferSource }, this.key, plain as BufferSource));\n      out = join([prefix(kind, sealed.length), sealed]);\n    } else {\n      const head = prefix(kind, kind === KIND.final ? 32 : plain.length);\n      if (kind === KIND.final) out = join([head, this.chain]);\n      else { out = join([head, plain]); this.chain = await sha256(this.chain, out); }\n    }\n    this.frame += 1;\n    // A frame the sink did not take (no room left, say) is the end of this backup: every frame after it would be\n    // numbered past a gap, and the file would never open. Nothing more is written, whatever the caller does next.\n    try { await this.sink.write(out); } catch (error) { this.failed = { error }; throw error; }\n    this.written += out.length;\n  }\n\n  /** One piece of JSON, compressed where the platform can. */\n  async json(text: string): Promise<void> {\n    const plain = new TextEncoder().encode(text);\n    if (plain.length > MAX_JSON_BYTES) throw new Error(\"A record of this profile is too large for a backup\");\n    if (canCompress()) await this.put(KIND.gzipJson, await through(plain, new CompressionStream(\"gzip\")));\n    else await this.put(KIND.json, plain);\n  }\n\n  /** Bytes of the file the last JSON announced, cut into frames. */\n  async bytes(chunk: Uint8Array): Promise<void> {\n    for (let at = 0; at < chunk.length; at += FRAME_BYTES) await this.put(KIND.bytes, chunk.subarray(at, Math.min(chunk.length, at + FRAME_BYTES)));\n  }\n\n  /** The final marker: without it a reader refuses the backup. Resolves to the size of the whole backup. */\n  async finish(): Promise<number> {\n    await this.put(KIND.final, new Uint8Array());\n    this.finished = true;\n    return this.written;\n  }\n}\n\n/** The first line of a version 2 backup, or null when this is not one (version 1 is one JSON object with no line end). */\nexport async function readBackupHeader(source: BackupSource): Promise<{ header: BackupHeader; line: Uint8Array } | null> {\n  const start = await source.read(0, Math.min(MAX_HEADER_BYTES, source.size));\n  const end = start.indexOf(10);\n  if (end < 0) return null;\n  let header: BackupHeader;\n  try { header = JSON.parse(new TextDecoder().decode(start.subarray(0, end))) as BackupHeader; } catch { return null; }\n  if (header?.format !== \"ghostly-backup\" || typeof header.version !== \"number\" || header.version < 2) return null;\n  if (header.version !== 2 && header.version !== DEVICE_SET_BACKUP_VERSION) throw new Error(\"This backup comes from a newer Ghostly; update to restore it\");\n  if (header.protection === \"none\") {\n    if (header.check?.name !== \"SHA-256-chain\") throw new Error(\"Unsupported backup format\");\n  } else if (header.protection === \"passphrase\") {\n    if (header.kdf?.name !== \"PBKDF2-SHA256\" || !(header.kdf.iterations >= ITERATIONS) || header.kdf.iterations > 10_000_000 || header.cipher?.name !== \"AES-256-GCM\") throw new Error(\"Unsupported backup encryption\");\n  } else throw new Error(\"Unsupported backup format\");\n  return { header, line: start.slice(0, end + 1) };\n}\n\n/** How a backup is protected, read from its clear header without opening it: version 1 is always sealed. */\nexport async function backupProtection(source: BackupSource): Promise<\"passphrase\" | \"none\"> {\n  return (await readBackupHeader(source))?.header.protection ?? \"passphrase\";\n}\n\nconst DAMAGED = \"This backup is damaged: it was changed or cut short\";\n\n/** Reads a version 2 backup record by record. Nothing of a frame is handed out before it passed its check. */\nexport class BackupReader {\n  private frame = 0;\n  private at: number;\n  private block: Uint8Array = new Uint8Array();\n  private blockAt = 0;\n  private done = false;\n\n  private constructor(private readonly source: BackupSource, private readonly key: CryptoKey | null, private readonly base: Uint8Array, private chain: Uint8Array, start: number, private readonly signal?: AbortSignal) { this.at = start; }\n\n  get protection(): \"passphrase\" | \"none\" { return this.key ? \"passphrase\" : \"none\"; }\n\n  /** Null when `source` is not a version 2 backup. `passphrase` is needed, and used, only for a sealed one. */\n  static async open(source: BackupSource, passphrase?: string, signal?: AbortSignal): Promise<BackupReader | null> {\n    const found = await readBackupHeader(source);\n    if (!found) return null;\n    check(signal);\n    const { header, line } = found;\n    if (header.protection === \"none\") return new BackupReader(source, null, new Uint8Array(), await sha256(line), line.length, signal);\n    let key: CryptoKey, base: Uint8Array;\n    try {\n      base = fromBase64Url(header.cipher!.nonce);\n      if (base.length !== 7) throw new Error(\"nonce\");\n      key = await keyFrom(passphrase ?? \"\", fromBase64Url(header.kdf!.salt), header.kdf!.iterations);\n    } catch { throw new Error(\"Unsupported backup encryption\"); }\n    return new BackupReader(source, key, base, await sha256(line), line.length, signal);\n  }\n\n  /** Bytes of the source read so far (for progress). */\n  get position(): number { return this.at; }\n\n  /** `length` bytes at the reading point, through a read-ahead block so a source is asked a few times per megabyte, not per frame. */\n  private async take(length: number): Promise<Uint8Array> {\n    if (this.at + length > this.source.size) throw new Error(DAMAGED);\n    const from = this.at - this.blockAt;\n    if (from < 0 || from + length > this.block.length) {\n      this.block = await this.source.read(this.at, Math.min(this.source.size - this.at, Math.max(length, 4 * FRAME_BYTES)));\n      this.blockAt = this.at;\n      if (this.block.length < length) throw new Error(DAMAGED);\n    }\n    const out = this.block.subarray(this.at - this.blockAt, this.at - this.blockAt + length);\n    this.at += length;\n    return out;\n  }\n\n  /** The next record, or null at the end: only then is the backup known to be whole. */\n  async next(): Promise<BackupRecord | null> {\n    check(this.signal);\n    if (this.done) return null;\n    const head = await this.take(5);\n    const kind = head[0], length = new DataView(head.buffer, head.byteOffset, 5).getUint32(1);\n    if (length > MAX_FRAME_BYTES + TAG_BYTES || !Object.values(KIND).includes(kind as never)) throw new Error(DAMAGED);\n    const headCopy = head.slice();\n    const body = await this.take(length);\n    let plain: Uint8Array;\n    if (this.key) {\n      try {\n        plain = new Uint8Array(await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: nonce(this.base, this.frame, kind) as BufferSource, additionalData: this.chain as BufferSource }, this.key, body as BufferSource));\n      } catch { throw new Error(this.frame === 0 ? \"Wrong passphrase, or the backup was changed\" : DAMAGED); }\n    } else if (kind === KIND.final) {\n      if (body.length !== 32 || body.some((byte, i) => byte !== this.chain[i])) throw new Error(DAMAGED);\n      plain = new Uint8Array();\n    } else {\n      this.chain = await sha256(this.chain, headCopy, body);\n      plain = body.slice();\n    }\n    this.frame += 1;\n    if (kind === KIND.final) {\n      if (plain.length || this.at !== this.source.size) throw new Error(DAMAGED);\n      this.done = true;\n      return null;\n    }\n    if (kind === KIND.bytes) return { bytes: plain };\n    const text = kind === KIND.gzipJson ? await through(plain, new DecompressionStream(\"gzip\"), MAX_JSON_BYTES).catch((error: unknown) => { throw error instanceof Error && error.message.startsWith(\"This backup is too large\") ? error : new Error(DAMAGED); }) : plain;\n    return { json: new TextDecoder().decode(text) };\n  }\n}\n","/**\n * A light backup (WISP 05 § Light backups): everything of a profile but the bytes of its larger files. Their messages\n * and records stay; after a restore they show as not in this backup.\n *\n * The cut: a file of at most 1 MiB keeps its bytes (a short clip, a sticker, a screenshot, a document), and so does a\n * voice message of at most 4 MiB. Voice messages are part of the conversation, and the longest one the apps record\n * (15 minutes at 32 kbit/s, `VOICE_LIMITS`) is about 3.6 MB, so every recorded one stays. Photos from a camera\n * (usually 2 to 8 MB), videos and large files are what is left out.\n */\nexport const LIGHT_FILE_BYTES = 1024 * 1024;\nexport const LIGHT_VOICE_BYTES = 4 * 1024 * 1024;\n\n/** What a light bundle says of itself in its first record: its cut, and what it left out. */\nexport interface LightMark {\n  maxFileBytes: number;\n  maxVoiceBytes: number;\n  /** How many files were left out, and their bytes. */\n  files: number;\n  bytes: number;\n}\n\n/** Whether a file of this size keeps its bytes in a light backup. */\nexport const keptInLight = (size: number, voice: boolean): boolean => size <= (voice ? LIGHT_VOICE_BYTES : LIGHT_FILE_BYTES);\n","import { existsSync } from \"node:fs\";\nimport { link, mkdir, open, readdir, readFile, rename, rm, stat, writeFile, type FileHandle } from \"node:fs/promises\";\nimport { basename, dirname, join, relative, resolve, sep } from \"node:path\";\nimport { open as openEnvelope } from \"@ghostly/browser/backup/envelope\";\nimport { BackupReader, BackupWriter, FRAME_BYTES, readBackupHeader, type BackupSource } from \"@ghostly/browser/backup/stream\";\nimport { LIGHT_FILE_BYTES, LIGHT_VOICE_BYTES, keptInLight, type LightMark } from \"@ghostly/browser/backup/light\";\nimport { fileStore } from \"@ghostly/browser/shared/idb\";\nimport { bool, str, type Method } from \"./apiKit\";\nimport { CliError } from \"./errors\";\nimport { RESTORED_MARK, profileExists, profilePaths, type ProfilePaths } from \"./profiles\";\n\n/**\n * A headless profile's backup: the WISP 05 envelope around the profile itself, its store and its files, written and\n * read a piece at a time (envelope version 2), so a profile with large files never has to fit in memory. It restores\n * into a new headless profile; the app's own backups are made from its page's storage and are not this format\n * (WISP 1100 § Parity). A backup an older CLI made (version 1: everything in one sealed JSON document) still restores.\n */\nconst FORMAT = \"ghostly-cli-profile/2\";\nconst FORMAT_1 = \"ghostly-cli-profile/1\";\n\n/** Version 1: the store and every file as base64 in one document. */\ninterface Payload1 { format: typeof FORMAT_1; createdAt: number; store: string; files: { path: string; data: string }[] }\n/** Version 2, in order: the head, then each file (the store first) followed by its bytes, then the end. */\n/**\n * `light`: a light backup (WISP 05 § Light backups) left the bytes of these files out. Their records are in the store;\n * the restored profile marks them when it first starts (`markLeftOutFiles`).\n */\ntype BackupRecord =\n  | { t: \"profile\"; format: typeof FORMAT; createdAt: number; files: number; bytes: number; light?: LightMark & { ids: string[] } }\n  | { t: \"file\"; kind: \"store\" | \"file\"; path?: string; size: number }\n  | { t: \"end\"; files: number; bytes: number };\n\nasync function walk(root: string, dir = root, out: string[] = []): Promise<string[]> {\n  let names: string[];\n  try { names = await readdir(dir); } catch { return out; }\n  for (const name of names) {\n    const path = join(dir, name);\n    if ((await stat(path)).isDirectory()) await walk(root, path, out);\n    else out.push(relative(root, path));\n  }\n  return out;\n}\n\n/** A file's first `size` bytes into the backup, a frame at a time. One that got shorter meanwhile stops the backup. */\nasync function copyIn(writer: BackupWriter, path: string, size: number): Promise<void> {\n  const handle = await open(path, \"r\");\n  try {\n    const buffer = new Uint8Array(FRAME_BYTES);\n    for (let at = 0; at < size;) {\n      const { bytesRead } = await handle.read(buffer, 0, Math.min(FRAME_BYTES, size - at), at);\n      if (!bytesRead) throw new CliError(\"unavailable\", `${path} changed while it was backed up: try again`);\n      await writer.bytes(buffer.subarray(0, bytesRead));\n      at += bytesRead;\n    }\n  } finally { await handle.close(); }\n}\n\nexport const BACKUP_METHODS: Record<string, Method> = {\n  /**\n   * Writes the backup to `path` (resolved by the command), sealed with `passphrase`, or not encrypted when\n   * `noPassphrase` is true: one of the two, never a guess. The store is written whole for it, every value inline. It is\n   * written beside `path` and only takes its name once it is complete: a backup that fails leaves no file. `light`:\n   * the files over the cut (`keptInLight`) are left out, their records kept.\n   */\n  async \"profile.backup\"(ctx, params) {\n    const path = resolve(str(params, \"path\", true));\n    // `refused`, not `confirm` (exit 5, \"pass --force\"): backup takes no flag that writes over a file.\n    if (existsSync(path)) throw new CliError(\"refused\", `${path} exists: choose another name`);\n    const passphrase = str(params, \"passphrase\"), unsealed = bool(params, \"noPassphrase\");\n    if (!passphrase && !unsealed) throw new CliError(\"bad_request\", \"passphrase is required (or noPassphrase: true for a backup anyone can read)\");\n    if (passphrase && unsealed) throw new CliError(\"bad_request\", \"Give a passphrase or noPassphrase, not both\");\n    // The folder it goes in, checked first: a missing one is named, not the file written beside `path`.\n    const folder = dirname(path);\n    if (!(await stat(folder)).isDirectory()) throw new CliError(\"not_found\", `No such file or folder: ${folder}`);\n    const paths = ctx.runtime.paths;\n    // The store as one snapshot with every value in it (the messages too, which the profile keeps in rows.db): a backup\n    // any ghostly restores, this one or an older one.\n    const store = join(paths.db, `backup-store-${process.pid}.bin`);\n    await ctx.runtime.store.exportSnapshot(store);\n    const light = bool(params, \"light\");\n    const all = await Promise.all((await walk(paths.files)).map(async (name) => ({ name, size: (await stat(join(paths.files, name))).size })));\n    // A file's name is its id: only one that could be a voice message under its larger cut is looked up.\n    const kept = async (file: { name: string; size: number }) => keptInLight(file.size, false) || (file.size <= LIGHT_VOICE_BYTES && !!(await fileStore.get(basename(file.name)).catch(() => undefined))?.metadata?.voice);\n    const files: typeof all = [], leftOut: typeof all = [];\n    for (const file of all) (!light || (await kept(file)) ? files : leftOut).push(file);\n    const storeSize = (await stat(store)).size, bytes = files.reduce((sum, file) => sum + file.size, 0);\n    const leftOutBytes = leftOut.reduce((sum, file) => sum + file.size, 0);\n\n    const partial = `${path}.partial-${process.pid}`;\n    let out: FileHandle | null = null;\n    try {\n      out = await openFile(partial);\n      const handle = out;\n      let writer: BackupWriter;\n      try { writer = await BackupWriter.start({ write: async (chunk) => { await handle.write(chunk); } }, unsealed ? null : passphrase!); } catch (error) { throw new CliError(\"bad_request\", error instanceof Error ? error.message : String(error)); }\n      const put = (record: BackupRecord) => writer.json(JSON.stringify(record));\n      await put({ t: \"profile\", format: FORMAT, createdAt: Date.now(), files: files.length, bytes, ...(light && { light: { maxFileBytes: LIGHT_FILE_BYTES, maxVoiceBytes: LIGHT_VOICE_BYTES, files: leftOut.length, bytes: leftOutBytes, ids: leftOut.map((file) => basename(file.name)) } }) });\n      await put({ t: \"file\", kind: \"store\", size: storeSize });\n      await copyIn(writer, store, storeSize);\n      for (const file of files) {\n        await put({ t: \"file\", kind: \"file\", path: file.name.split(sep).join(\"/\"), size: file.size });\n        await copyIn(writer, join(paths.files, file.name), file.size);\n      }\n      await put({ t: \"end\", files: files.length, bytes });\n      const written = await writer.finish();\n      await handle.sync();\n      await handle.close();\n      out = null;\n      // Its name only now, and never over a file that appeared meanwhile.\n      try { await link(partial, path); } catch (error) { throw (error as NodeJS.ErrnoException).code === \"EEXIST\" ? new CliError(\"refused\", `${path} exists: choose another name`) : error; }\n      return { path, bytes: written, files: files.length, protection: unsealed ? \"none\" : \"passphrase\", ...(light && { light: true, leftOut: leftOut.length, leftOutBytes }) };\n    } finally {\n      await out?.close().catch(() => {});\n      await rm(partial, { force: true });\n      await rm(store, { force: true });\n    }\n  },\n};\n\nasync function openFile(path: string): Promise<FileHandle> {\n  try { return await open(path, \"wx\", 0o600); } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"EEXIST\") { await rm(path, { force: true }); return open(path, \"wx\", 0o600); }\n    throw error;\n  }\n}\n\n/** A file on disk as a backup's source: read in ranges, never whole. A folder opens, and is refused as one here. */\nasync function fileSource(path: string): Promise<BackupSource & { close(): Promise<void> }> {\n  const handle = await open(path, \"r\");\n  const found = await handle.stat();\n  if (found.isDirectory()) { await handle.close(); throw new CliError(\"bad_request\", `${path} is a folder: name a file`); }\n  const { size } = found;\n  return {\n    size,\n    read: async (offset, length) => {\n      const buffer = new Uint8Array(Math.max(0, Math.min(length, size - offset)));\n      let got = 0;\n      while (got < buffer.length) { const { bytesRead } = await handle.read(buffer, got, buffer.length - got, offset + got); if (!bytesRead) break; got += bytesRead; }\n      return buffer.subarray(0, got);\n    },\n    close: () => handle.close(),\n  };\n}\n\n/** A version 1 backup is one JSON object, and `seal` writes its format first. */\nconst VERSION_1_START = /^\\s*\\{\\s*\"format\"\\s*:\\s*\"ghostly-backup\"/;\n\n/**\n * Whether the backup at `file` is sealed with a passphrase or was made without one, read from its clear header.\n * A file that is neither version is refused here, before any passphrase is asked for: the path is what is wrong.\n */\nexport async function backupFileProtection(file: string): Promise<\"passphrase\" | \"none\"> {\n  const source = await fileSource(file);\n  try {\n    let found: Awaited<ReturnType<typeof readBackupHeader>>;\n    try { found = await readBackupHeader(source); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n    if (found) return found.header.protection;\n    if (!VERSION_1_START.test(new TextDecoder().decode(await source.read(0, 256)))) throw new CliError(\"refused\", \"This is not a Ghostly backup\");\n    return \"passphrase\";\n  } finally { await source.close(); }\n}\n\n/** Where a path named by a backup lands inside the new profile's files folder; never outside it. */\nfunction inside(root: string, path: unknown): string {\n  const target = typeof path === \"string\" && path ? resolve(root, path) : \"\";\n  if (!target.startsWith(resolve(root) + sep)) throw new CliError(\"refused\", \"The backup names a file outside its folder\");\n  return target;\n}\n\n/** While a restore writes it, the profile's folder is not a profile: no profile name starts with a dot (`listProfiles`). */\nconst RESTORING = /^\\.restoring-(.+)-(\\d+)$/;\n\n/**\n * The folder a restore writes into, beside the profiles: it takes the profile's name only once everything is in it,\n * so a restore that is stopped at any moment (Ctrl-C, a kill, the power) leaves no profile, whole or half-made.\n * What an earlier restore that was stopped left behind is removed here, once the process that made it is gone.\n */\nasync function restoringFolder(home: string, name: string): Promise<ProfilePaths> {\n  const root = join(home, \"profiles\");\n  await mkdir(root, { recursive: true, mode: 0o700 });\n  for (const entry of await readdir(root)) {\n    const pid = Number(RESTORING.exec(entry)?.[2]);\n    if (!pid) continue;\n    let alive = pid === process.pid;\n    if (!alive) try { process.kill(pid, 0); alive = true; } catch (error) { alive = (error as NodeJS.ErrnoException).code === \"EPERM\"; }\n    if (!alive) await rm(join(root, entry), { recursive: true, force: true });\n  }\n  const dir = join(root, `.restoring-${name}-${process.pid}`);\n  await rm(dir, { recursive: true, force: true });\n  await mkdir(dir, { mode: 0o700 });\n  return { ...profilePaths(home, name), dir, db: join(dir, \"db\"), files: join(dir, \"files\") };\n}\n\n/**\n * The folder is whole: marked as a restored copy (`RESTORED_MARK`, which names the files a light backup left out),\n * then given the profile's name. Never over a profile.\n */\nasync function finishRestore(home: string, name: string, work: ProfilePaths, leftOut: string[] = []): Promise<ProfilePaths> {\n  const paths = profilePaths(home, name);\n  await writeFile(join(work.dir, RESTORED_MARK), leftOut.length ? JSON.stringify({ leftOut }) : \"\", { mode: 0o600 });\n  if (existsSync(paths.dir)) throw new CliError(\"refused\", `Profile ${name} exists: restore into a new name`);\n  await rename(work.dir, paths.dir);\n  return paths;\n}\n\n/**\n * Opens the backup at `file` into a new profile (never over an existing one), with its passphrase when it has one.\n * Runs with no engine: nothing is open yet. A backup that is refused, damaged or cut short leaves no profile behind,\n * and neither does a restore that is stopped while it runs (`restoringFolder`). The profile is marked as a restored\n * copy: its engine, the first time it starts, treats the money in it as a restore does (`RESTORED_MARK`).\n */\nexport async function restoreProfile(home: string, name: string, file: string, passphrase?: string): Promise<ProfilePaths> {\n  if (profileExists(home, name)) throw new CliError(\"refused\", `Profile ${name} exists: restore into a new name`);\n  const source = await fileSource(file);\n  let work: ProfilePaths | null = null;\n  try {\n    let reader: BackupReader | null;\n    try { reader = await BackupReader.open(source, passphrase); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n    if (!reader) {\n      const payload = await readWhole(file, passphrase ?? \"\");\n      work = await restoringFolder(home, name);\n      await writeWhole(work, payload);\n      return await finishRestore(home, name, work);\n    }\n    const next = async () => { try { return await reader.next(); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); } };\n    const parse = (json: string) => { try { return JSON.parse(json) as BackupRecord; } catch { throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); } };\n\n    // The first record is read (and with it the passphrase checked) before any folder is made.\n    const first = await next();\n    const head = first?.json === undefined ? null : parse(first.json);\n    if (head?.t !== \"profile\" || head.format !== FORMAT) throw new CliError(\"refused\", \"This backup is not a headless Ghostly profile\");\n    const leftOut = Array.isArray(head.light?.ids) ? head.light.ids.filter((id): id is string => typeof id === \"string\") : [];\n    work = await restoringFolder(home, name);\n    const paths = work;\n    await mkdir(paths.db, { recursive: true, mode: 0o700 });\n    let out: { handle: FileHandle; left: number } | null = null, files = 0, bytes = 0, ended = false, stored = false;\n    try {\n      for (let record = await next(); record; record = await next()) {\n        if (ended) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n        if (record.bytes) {\n          if (!out || record.bytes.length > out.left) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n          await out.handle.write(record.bytes);\n          out.left -= record.bytes.length;\n          continue;\n        }\n        if (out) { if (out.left) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); await out.handle.close(); out = null; }\n        const value = parse(record.json);\n        if (value.t === \"end\") { ended = value.files === files && value.bytes === bytes; if (!ended) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); continue; }\n        if (value.t !== \"file\" || !Number.isSafeInteger(value.size) || value.size < 0) continue;\n        let target: string;\n        if (value.kind === \"store\") { target = join(paths.db, \"snapshot.bin\"); stored = true; }\n        else { target = inside(paths.files, value.path); await mkdir(dirname(target), { recursive: true, mode: 0o700 }); files += 1; bytes += value.size; }\n        out = { handle: await open(target, \"wx\", 0o600), left: value.size };\n      }\n      if (out || !ended || !stored) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n    } finally { await out?.handle.close().catch(() => {}); }\n    return await finishRestore(home, name, work, leftOut);\n  } catch (error) {\n    if (work) await rm(work.dir, { recursive: true, force: true });\n    throw error;\n  } finally {\n    await source.close();\n  }\n}\n\n/** A version 1 backup: one sealed JSON document, read whole. */\nasync function readWhole(file: string, passphrase: string): Promise<Payload1> {\n  let payload: Payload1;\n  try { payload = JSON.parse(await openEnvelope(await readFile(file, \"utf8\"), passphrase)) as Payload1; } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n  if (payload?.format !== FORMAT_1 || typeof payload.store !== \"string\" || !Array.isArray(payload.files)) throw new CliError(\"refused\", \"This backup is not a headless Ghostly profile\");\n  return payload;\n}\n\nasync function writeWhole(paths: ProfilePaths, payload: Payload1): Promise<void> {\n  await mkdir(paths.db, { recursive: true, mode: 0o700 });\n  await writeFile(join(paths.db, \"snapshot.bin\"), Buffer.from(payload.store, \"base64\"), { mode: 0o600 });\n  for (const entry of payload.files) {\n    const target = inside(paths.files, entry.path);\n    await mkdir(dirname(target), { recursive: true, mode: 0o700 });\n    await writeFile(target, Buffer.from(entry.data, \"base64\"), { mode: 0o600 });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,IAAa,cAAc;;AAE3B,IAAM,kBAAkB;;AAExB,IAAM,iBAAiB;AACvB,IAAM,mBAAmB;AACzB,IAAM,aAAa;AAGnB,IAAM,OAAO;CAAE,UAAU;CAAG,MAAM;CAAG,OAAO;CAAG,OAAO;AAAI;;AA0B1D,IAAa,kBAAb,cAAqC,MAAM;CACzC,cAAc;EAAE,MAAM,WAAW;EAAG,KAAK,OAAO;CAAc;AAChE;AAEA,IAAM,SAAS,WAAyB;CAAE,IAAI,QAAQ,SAAS,MAAM,IAAI,gBAAgB;AAAG;AAc5F,IAAM,oBAAoB,OAAO,sBAAsB;AACvD,eAAe,QAAQ,OAAmB,QAAiD,QAAQ,UAA+B;CAChI,MAAM,SAAS,IAAI,KAAK,CAAC,KAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU;CACpF,MAAM,SAAuB,CAAC;CAC9B,IAAI,OAAO;CACX,KAAK,IAAI,OAAO,MAAM,OAAO,KAAK,GAAG,CAAC,KAAK,MAAM,OAAO,MAAM,OAAO,KAAK,GAAG;EAC3E,QAAQ,KAAK,MAAM;EACnB,IAAI,OAAO,OAAO;GAAE,MAAM,OAAO,OAAO;GAAG,MAAM,IAAI,MAAM,qCAAqC;EAAG;EACnG,OAAO,KAAK,KAAK,KAAK;CACxB;CACA,IAAI,OAAO,WAAW,GAAG,OAAO,OAAO;CACvC,MAAM,MAAM,IAAI,WAAW,IAAI;CAC/B,IAAI,KAAK;CACT,KAAK,MAAM,SAAS,QAAQ;EAAE,IAAI,IAAI,OAAO,EAAE;EAAG,MAAM,MAAM;CAAQ;CACtE,OAAO;AACT;AAEA,eAAe,QAAQ,YAAoB,MAAkB,YAAwC;CACnG,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;CAC1H,OAAO,OAAO,OAAO,UAAU;EAAE,MAAM;EAAU,MAAM;EAAiB;EAAsB;CAAW,GAAG,UAAU;EAAE,MAAM;EAAW,QAAQ;CAAI,GAAG,OAAO,CAAC,WAAW,SAAS,CAAC;AACvL;AACA,IAAM,SAAS,OAAO,GAAG,UAAwB,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,WAAWA,OAAK,KAAK,CAAiB,CAAC;AAClI,SAASA,OAAK,OAAiC;CAC7C,IAAI,MAAM,WAAW,GAAG,OAAO,MAAM;CACrC,MAAM,MAAM,IAAI,WAAW,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC,CAAC;CAClE,IAAI,KAAK;CACT,KAAK,MAAM,QAAQ,OAAO;EAAE,IAAI,IAAI,MAAM,EAAE;EAAG,MAAM,KAAK;CAAQ;CAClE,OAAO;AACT;AACA,SAAS,OAAO,MAAc,QAA4B;CACxD,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,KAAK;CACT,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,MAAM;CAC5C,OAAO;AACT;AACA,SAAS,MAAM,MAAkB,OAAe,MAA0B;CACxE,MAAM,sBAAM,IAAI,WAAW,EAAE;CAC7B,IAAI,IAAI,MAAM,CAAC;CACf,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK;CAC3C,IAAI,MAAM;CACV,OAAO;AACT;;AAGA,IAAa,eAAb,MAAa,aAAa;CAQa;CAAmC;CAAwC;CAA0B;CAAoC;CAP9K,QAAgB;;CAEhB,UAAU;CACV,WAAmB;;CAEnB,SAA4C;CAE5C,YAAoB,MAAmC,KAAwC,MAAmC,OAA2B,QAAuC;EAA/J,KAAA,OAAA;EAAmC,KAAA,MAAA;EAAwC,KAAA,OAAA;EAA0B,KAAA,QAAA;EAAoC,KAAA,SAAA;CAAuB;;CAGrM,aAAa,MAAM,MAAkB,YAA2B,QAAsB,UAAiB,GAA0B;EAC/H,IAAI,eAAe,QAAQ,WAAW,SAAS,IAAI,MAAM,IAAI,MAAM,sDAAsD;EACzH,MAAM,MAAM;EACZ,MAAM,OAAO,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC,GAAG,OAAO,OAAO,gCAAgB,IAAI,WAAW,CAAC,CAAC;EACxG,MAAM,SAAuB,eAAe,OACxC;GAAE,QAAQ;GAAkB;GAAS,YAAY;GAAQ,OAAO,EAAE,MAAM,gBAAgB;EAAE,IAC1F;GAAE,QAAQ;GAAkB;GAAS,YAAY;GAAc,KAAK;IAAE,MAAM;IAAiB,YAAY;IAAY,MAAM,YAAY,IAAI;GAAE;GAAG,QAAQ;IAAE,MAAM;IAAe,OAAO,YAAY,IAAI;GAAE;EAAE;EAC9M,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;EACnE,MAAM,MAAM,eAAe,OAAO,OAAO,MAAM,QAAQ,YAAY,MAAM,UAAU;EACnF,MAAM,SAAS,IAAI,aAAa,MAAM,KAAK,MAAM,MAAM,OAAO,IAAI,GAAG,MAAM;EAC3E,MAAM,KAAK,MAAM,IAAI;EACrB,OAAO,UAAU,KAAK;EACtB,OAAO;CACT;CAEA,MAAc,IAAI,MAAc,OAAkC;EAChE,MAAM,KAAK,MAAM;EACjB,IAAI,KAAK,QAAQ,MAAM,KAAK,OAAO;EACnC,IAAI,KAAK,UAAU,MAAM,IAAI,MAAM,iCAAiC;EACpE,IAAI,KAAK,SAAS,YAAY,MAAM,IAAI,MAAM,0BAA0B;EAExE,IAAI,MAAM,SAAS,iBAAiB,MAAM,IAAI,MAAM,oDAAoD;EACxG,IAAI;EACJ,IAAI,KAAK,KAAK;GAEZ,MAAM,SAAS,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;IAAE,MAAM;IAAW,IAAI,MAAM,KAAK,MAAM,KAAK,OAAO,IAAI;IAAmB,gBAAgB,KAAK;GAAsB,GAAG,KAAK,KAAK,KAAqB,CAAC;GACnN,MAAMA,OAAK,CAAC,OAAO,MAAM,OAAO,MAAM,GAAG,MAAM,CAAC;EAClD,OAAO;GACL,MAAM,OAAO,OAAO,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,MAAM;GACjE,IAAI,SAAS,KAAK,OAAO,MAAMA,OAAK,CAAC,MAAM,KAAK,KAAK,CAAC;QACjD;IAAE,MAAMA,OAAK,CAAC,MAAM,KAAK,CAAC;IAAG,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,GAAG;GAAG;EAChF;EACA,KAAK,SAAS;EAGd,IAAI;GAAE,MAAM,KAAK,KAAK,MAAM,GAAG;EAAG,SAAS,OAAO;GAAE,KAAK,SAAS,EAAE,MAAM;GAAG,MAAM;EAAO;EAC1F,KAAK,WAAW,IAAI;CACtB;;CAGA,MAAM,KAAK,MAA6B;EACtC,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI;EAC3C,IAAI,MAAM,SAAS,gBAAgB,MAAM,IAAI,MAAM,oDAAoD;EACvG,IAAI,YAAY,GAAG,MAAM,KAAK,IAAI,KAAK,UAAU,MAAM,QAAQ,OAAO,IAAI,kBAAkB,MAAM,CAAC,CAAC;OAC/F,MAAM,KAAK,IAAI,KAAK,MAAM,KAAK;CACtC;;CAGA,MAAM,MAAM,OAAkC;EAC5C,KAAK,IAAI,KAAK,GAAG,KAAK,MAAM,QAAQ,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,OAAO,MAAM,SAAS,IAAI,KAAK,IAAI,MAAM,QAAQ,KAAK,WAAW,CAAC,CAAC;CAChJ;;CAGA,MAAM,SAA0B;EAC9B,MAAM,KAAK,IAAI,KAAK,uBAAO,IAAI,WAAW,CAAC;EAC3C,KAAK,WAAW;EAChB,OAAO,KAAK;CACd;AACF;;AAGA,eAAsB,iBAAiB,QAAkF;CACvH,MAAM,QAAQ,MAAM,OAAO,KAAK,GAAG,KAAK,IAAI,kBAAkB,OAAO,IAAI,CAAC;CAC1E,MAAM,MAAM,MAAM,QAAQ,EAAE;CAC5B,IAAI,MAAM,GAAG,OAAO;CACpB,IAAI;CACJ,IAAI;EAAE,SAAS,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC;CAAmB,QAAQ;EAAE,OAAO;CAAM;CACpH,IAAI,QAAQ,WAAW,oBAAoB,OAAO,OAAO,YAAY,YAAY,OAAO,UAAU,GAAG,OAAO;CAC5G,IAAI,OAAO,YAAY,KAAK,OAAO,YAAA,GAAuC,MAAM,IAAI,MAAM,8DAA8D;CACxJ,IAAI,OAAO,eAAe,QACpB;MAAA,OAAO,OAAO,SAAS,iBAAiB,MAAM,IAAI,MAAM,2BAA2B;CAAA,OAClF,IAAI,OAAO,eAAe,cAC3B;MAAA,OAAO,KAAK,SAAS,mBAAmB,EAAE,OAAO,IAAI,cAAc,eAAe,OAAO,IAAI,aAAa,OAAc,OAAO,QAAQ,SAAS,eAAe,MAAM,IAAI,MAAM,+BAA+B;CAAA,OAC7M,MAAM,IAAI,MAAM,2BAA2B;CAClD,OAAO;EAAE;EAAQ,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;CAAE;AACjD;AAOA,IAAM,UAAU;;AAGhB,IAAa,eAAb,MAAa,aAAa;CAOa;CAAuC;CAAwC;CAA0B;CAAmD;CANjM,QAAgB;CAChB;CACA,wBAA4B,IAAI,WAAW;CAC3C,UAAkB;CAClB,OAAe;CAEf,YAAoB,QAAuC,KAAwC,MAAmC,OAA2B,OAAe,QAAuC;EAAlL,KAAA,SAAA;EAAuC,KAAA,MAAA;EAAwC,KAAA,OAAA;EAA0B,KAAA,QAAA;EAAmD,KAAA,SAAA;EAAwB,KAAK,KAAK;CAAO;CAE1O,IAAI,aAAoC;EAAE,OAAO,KAAK,MAAM,eAAe;CAAQ;;CAGnF,aAAa,KAAK,QAAsB,YAAqB,QAAoD;EAC/G,MAAM,QAAQ,MAAM,iBAAiB,MAAM;EAC3C,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,MAAM;EACZ,MAAM,EAAE,QAAQ,SAAS;EACzB,IAAI,OAAO,eAAe,QAAQ,OAAO,IAAI,aAAa,QAAQ,sBAAM,IAAI,WAAW,GAAG,MAAM,OAAO,IAAI,GAAG,KAAK,QAAQ,MAAM;EACjI,IAAI,KAAgB;EACpB,IAAI;GACF,OAAO,cAAc,OAAO,OAAQ,KAAK;GACzC,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,OAAO;GAC9C,MAAM,MAAM,QAAQ,cAAc,IAAI,cAAc,OAAO,IAAK,IAAI,GAAG,OAAO,IAAK,UAAU;EAC/F,QAAQ;GAAE,MAAM,IAAI,MAAM,+BAA+B;EAAG;EAC5D,OAAO,IAAI,aAAa,QAAQ,KAAK,MAAM,MAAM,OAAO,IAAI,GAAG,KAAK,QAAQ,MAAM;CACpF;;CAGA,IAAI,WAAmB;EAAE,OAAO,KAAK;CAAI;;CAGzC,MAAc,KAAK,QAAqC;EACtD,IAAI,KAAK,KAAK,SAAS,KAAK,OAAO,MAAM,MAAM,IAAI,MAAM,OAAO;EAChE,MAAM,OAAO,KAAK,KAAK,KAAK;EAC5B,IAAI,OAAO,KAAK,OAAO,SAAS,KAAK,MAAM,QAAQ;GACjD,KAAK,QAAQ,MAAM,KAAK,OAAO,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,OAAO,OAAO,KAAK,IAAI,KAAK,IAAI,QAAQ,IAAI,WAAW,CAAC,CAAC;GACpH,KAAK,UAAU,KAAK;GACpB,IAAI,KAAK,MAAM,SAAS,QAAQ,MAAM,IAAI,MAAM,OAAO;EACzD;EACA,MAAM,MAAM,KAAK,MAAM,SAAS,KAAK,KAAK,KAAK,SAAS,KAAK,KAAK,KAAK,UAAU,MAAM;EACvF,KAAK,MAAM;EACX,OAAO;CACT;;CAGA,MAAM,OAAqC;EACzC,MAAM,KAAK,MAAM;EACjB,IAAI,KAAK,MAAM,OAAO;EACtB,MAAM,OAAO,MAAM,KAAK,KAAK,CAAC;EAC9B,MAAM,OAAO,KAAK,IAAI,SAAS,IAAI,SAAS,KAAK,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;EACxF,IAAI,SAAS,YAA+B,CAAC,OAAO,OAAO,IAAI,CAAC,CAAC,SAAS,IAAa,GAAG,MAAM,IAAI,MAAM,OAAO;EACjH,MAAM,WAAW,KAAK,MAAM;EAC5B,MAAM,OAAO,MAAM,KAAK,KAAK,MAAM;EACnC,IAAI;EACJ,IAAI,KAAK,KACP,IAAI;GACF,QAAQ,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;IAAE,MAAM;IAAW,IAAI,MAAM,KAAK,MAAM,KAAK,OAAO,IAAI;IAAmB,gBAAgB,KAAK;GAAsB,GAAG,KAAK,KAAK,IAAoB,CAAC;EAC7M,QAAQ;GAAE,MAAM,IAAI,MAAM,KAAK,UAAU,IAAI,gDAAgD,OAAO;EAAG;OAClG,IAAI,SAAS,KAAK,OAAO;GAC9B,IAAI,KAAK,WAAW,MAAM,KAAK,MAAM,MAAM,MAAM,SAAS,KAAK,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,OAAO;GACjG,wBAAQ,IAAI,WAAW;EACzB,OAAO;GACL,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,UAAU,IAAI;GACpD,QAAQ,KAAK,MAAM;EACrB;EACA,KAAK,SAAS;EACd,IAAI,SAAS,KAAK,OAAO;GACvB,IAAI,MAAM,UAAU,KAAK,OAAO,KAAK,OAAO,MAAM,MAAM,IAAI,MAAM,OAAO;GACzE,KAAK,OAAO;GACZ,OAAO;EACT;EACA,IAAI,SAAS,KAAK,OAAO,OAAO,EAAE,OAAO,MAAM;EAC/C,MAAM,OAAO,SAAS,KAAK,WAAW,MAAM,QAAQ,OAAO,IAAI,oBAAoB,MAAM,GAAG,cAAc,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,iBAAiB,SAAS,MAAM,QAAQ,WAAW,0BAA0B,IAAI,wBAAQ,IAAI,MAAM,OAAO;EAAG,CAAC,IAAI;EAChQ,OAAO,EAAE,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,EAAE;CAChD;AACF;;;;;;;;;;;;ACtRA,IAAa,mBAAmB;AAChC,IAAa,oBAAoB;;AAYjC,IAAa,eAAe,MAAc,UAA4B,SAAS,QAAQ,oBAAoB;;;;;;;;;ACL3G,IAAM,SAAS;AACf,IAAM,WAAW;AAcjB,eAAe,KAAK,MAAc,MAAM,MAAM,MAAgB,CAAC,GAAsB;CACnF,IAAI;CACJ,IAAI;EAAE,QAAQ,MAAM,QAAQ,GAAG;CAAG,QAAQ;EAAE,OAAO;CAAK;CACxD,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,KAAK,KAAK,IAAI;EAC3B,KAAK,MAAM,KAAK,IAAI,EAAA,CAAG,YAAY,GAAG,MAAM,KAAK,MAAM,MAAM,GAAG;OAC3D,IAAI,KAAK,SAAS,MAAM,IAAI,CAAC;CACpC;CACA,OAAO;AACT;;AAGA,eAAe,OAAO,QAAsB,MAAc,MAA6B;CACrF,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG;CACnC,IAAI;EACF,MAAM,SAAS,IAAI,WAAW,WAAW;EACzC,KAAK,IAAI,KAAK,GAAG,KAAK,OAAO;GAC3B,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,QAAQ,GAAG,KAAK,IAAI,aAAa,OAAO,EAAE,GAAG,EAAE;GACvF,IAAI,CAAC,WAAW,MAAM,IAAI,SAAS,eAAe,GAAG,KAAK,2CAA2C;GACrG,MAAM,OAAO,MAAM,OAAO,SAAS,GAAG,SAAS,CAAC;GAChD,MAAM;EACR;CACF,UAAU;EAAE,MAAM,OAAO,MAAM;CAAG;AACpC;AAEA,IAAa,iBAAyC;;;;;;;AAOpD,MAAM,iBAAiB,KAAK,QAAQ;CAClC,MAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,CAAC;CAE9C,IAAI,WAAW,IAAI,GAAG,MAAM,IAAI,SAAS,WAAW,GAAG,KAAK,6BAA6B;CACzF,MAAM,aAAa,IAAI,QAAQ,YAAY,GAAG,WAAW,KAAK,QAAQ,cAAc;CACpF,IAAI,CAAC,cAAc,CAAC,UAAU,MAAM,IAAI,SAAS,eAAe,6EAA6E;CAC7I,IAAI,cAAc,UAAU,MAAM,IAAI,SAAS,eAAe,6CAA6C;CAE3G,MAAM,SAAS,QAAQ,IAAI;CAC3B,IAAI,EAAE,MAAM,KAAK,MAAM,EAAA,CAAG,YAAY,GAAG,MAAM,IAAI,SAAS,aAAa,2BAA2B,QAAQ;CAC5G,MAAM,QAAQ,IAAI,QAAQ;CAG1B,MAAM,QAAQ,KAAK,MAAM,IAAI,gBAAgB,QAAQ,IAAI,KAAK;CAC9D,MAAM,IAAI,QAAQ,MAAM,eAAe,KAAK;CAC5C,MAAM,QAAQ,KAAK,QAAQ,OAAO;CAClC,MAAM,MAAM,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,KAAK,EAAA,CAAG,IAAI,OAAO,UAAU;EAAE;EAAM,OAAO,MAAM,KAAK,KAAK,MAAM,OAAO,IAAI,CAAC,EAAA,CAAG;CAAK,EAAE,CAAC;CAEzI,MAAM,OAAO,OAAO,SAAyC,YAAY,KAAK,MAAM,KAAK,KAAM,KAAK,QAAA,WAA6B,CAAC,EAAE,MAAM,UAAU,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS,EAAA,EAAI,UAAU;CAChN,MAAM,QAAoB,CAAC,GAAG,UAAsB,CAAC;CACrD,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC,SAAU,MAAM,KAAK,IAAI,IAAK,QAAQ,QAAA,CAAS,KAAK,IAAI;CAClF,MAAM,aAAa,MAAM,KAAK,KAAK,EAAA,CAAG,MAAM,QAAQ,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;CAClG,MAAM,eAAe,QAAQ,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;CAErE,MAAM,UAAU,GAAG,KAAK,WAAW,QAAQ;CAC3C,IAAI,MAAyB;CAC7B,IAAI;EACF,MAAM,MAAM,SAAS,OAAO;EAC5B,MAAM,SAAS;EACf,IAAI;EACJ,IAAI;GAAE,SAAS,MAAM,aAAa,MAAM,EAAE,OAAO,OAAO,UAAU;IAAE,MAAM,OAAO,MAAM,KAAK;GAAG,EAAE,GAAG,WAAW,OAAO,UAAW;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACjP,MAAM,OAAO,WAAyB,OAAO,KAAK,KAAK,UAAU,MAAM,CAAC;EACxE,MAAM,IAAI;GAAE,GAAG;GAAW,QAAQ;GAAQ,WAAW,KAAK,IAAI;GAAG,OAAO,MAAM;GAAQ;GAAO,GAAI,SAAS,EAAE,OAAO;IAAE,cAAA;IAAgC,eAAA;IAAkC,OAAO,QAAQ;IAAQ,OAAO;IAAc,KAAK,QAAQ,KAAK,SAAS,SAAS,KAAK,IAAI,CAAC;GAAE,EAAE;EAAG,CAAC;EACzR,MAAM,IAAI;GAAE,GAAG;GAAQ,MAAM;GAAS,MAAM;EAAU,CAAC;EACvD,MAAM,OAAO,QAAQ,OAAO,SAAS;EACrC,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,IAAI;IAAE,GAAG;IAAQ,MAAM;IAAQ,MAAM,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;IAAG,MAAM,KAAK;GAAK,CAAC;GAC5F,MAAM,OAAO,QAAQ,KAAK,MAAM,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI;EAC9D;EACA,MAAM,IAAI;GAAE,GAAG;GAAO,OAAO,MAAM;GAAQ;EAAM,CAAC;EAClD,MAAM,UAAU,MAAM,OAAO,OAAO;EACpC,MAAM,OAAO,KAAK;EAClB,MAAM,OAAO,MAAM;EACnB,MAAM;EAEN,IAAI;GAAE,MAAM,KAAK,SAAS,IAAI;EAAG,SAAS,OAAO;GAAE,MAAO,MAAgC,SAAS,WAAW,IAAI,SAAS,WAAW,GAAG,KAAK,6BAA6B,IAAI;EAAO;EACtL,OAAO;GAAE;GAAM,OAAO;GAAS,OAAO,MAAM;GAAQ,YAAY,WAAW,SAAS;GAAc,GAAI,SAAS;IAAE,OAAO;IAAM,SAAS,QAAQ;IAAQ;GAAa;EAAG;CACzK,UAAU;EACR,MAAM,KAAK,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;EACjC,MAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC;EACjC,MAAM,GAAG,OAAO,EAAE,OAAO,KAAK,CAAC;CACjC;AACF,EACF;AAEA,eAAe,SAAS,MAAmC;CACzD,IAAI;EAAE,OAAO,MAAM,KAAK,MAAM,MAAM,GAAK;CAAG,SAAS,OAAO;EAC1D,IAAK,MAAgC,SAAS,UAAU;GAAE,MAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;GAAG,OAAO,KAAK,MAAM,MAAM,GAAK;EAAG;EAC3H,MAAM;CACR;AACF;;AAGA,eAAe,WAAW,MAAkE;CAC1F,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG;CACnC,MAAM,QAAQ,MAAM,OAAO,KAAK;CAChC,IAAI,MAAM,YAAY,GAAG;EAAE,MAAM,OAAO,MAAM;EAAG,MAAM,IAAI,SAAS,eAAe,GAAG,KAAK,0BAA0B;CAAG;CACxH,MAAM,EAAE,SAAS;CACjB,OAAO;EACL;EACA,MAAM,OAAO,QAAQ,WAAW;GAC9B,MAAM,SAAS,IAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,QAAQ,OAAO,MAAM,CAAC,CAAC;GAC1E,IAAI,MAAM;GACV,OAAO,MAAM,OAAO,QAAQ;IAAE,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,QAAQ,KAAK,OAAO,SAAS,KAAK,SAAS,GAAG;IAAG,IAAI,CAAC,WAAW;IAAO,OAAO;GAAW;GAChK,OAAO,OAAO,SAAS,GAAG,GAAG;EAC/B;EACA,aAAa,OAAO,MAAM;CAC5B;AACF;;AAGA,IAAM,kBAAkB;;;;;AAMxB,eAAsB,qBAAqB,MAA8C;CACvF,MAAM,SAAS,MAAM,WAAW,IAAI;CACpC,IAAI;EACF,IAAI;EACJ,IAAI;GAAE,QAAQ,MAAM,iBAAiB,MAAM;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACvJ,IAAI,OAAO,OAAO,MAAM,OAAO;EAC/B,IAAI,CAAC,gBAAgB,KAAK,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,OAAO,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,MAAM,IAAI,SAAS,WAAW,8BAA8B;EAC5I,OAAO;CACT,UAAU;EAAE,MAAM,OAAO,MAAM;CAAG;AACpC;;AAGA,SAAS,OAAO,MAAc,MAAuB;CACnD,MAAM,SAAS,OAAO,SAAS,YAAY,OAAO,QAAQ,MAAM,IAAI,IAAI;CACxE,IAAI,CAAC,OAAO,WAAW,QAAQ,IAAI,IAAI,GAAG,GAAG,MAAM,IAAI,SAAS,WAAW,4CAA4C;CACvH,OAAO;AACT;;AAGA,IAAM,YAAY;;;;;;AAOlB,eAAe,gBAAgB,MAAc,MAAqC;CAChF,MAAM,OAAO,KAAK,MAAM,UAAU;CAClC,MAAM,MAAM,MAAM;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAClD,KAAK,MAAM,SAAS,MAAM,QAAQ,IAAI,GAAG;EACvC,MAAM,MAAM,OAAO,UAAU,KAAK,KAAK,CAAC,GAAG,EAAE;EAC7C,IAAI,CAAC,KAAK;EACV,IAAI,QAAQ,QAAQ,QAAQ;EAC5B,IAAI,CAAC,OAAO,IAAI;GAAE,QAAQ,KAAK,KAAK,CAAC;GAAG,QAAQ;EAAM,SAAS,OAAO;GAAE,QAAS,MAAgC,SAAS;EAAS;EACnI,IAAI,CAAC,OAAO,MAAM,GAAG,KAAK,MAAM,KAAK,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAC1E;CACA,MAAM,MAAM,KAAK,MAAM,cAAc,KAAK,GAAG,QAAQ,KAAK;CAC1D,MAAM,GAAG,KAAK;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAC9C,MAAM,MAAM,KAAK,EAAE,MAAM,IAAM,CAAC;CAChC,OAAO;EAAE,GAAG,aAAa,MAAM,IAAI;EAAG;EAAK,IAAI,KAAK,KAAK,IAAI;EAAG,OAAO,KAAK,KAAK,OAAO;CAAE;AAC5F;;;;;AAMA,eAAe,cAAc,MAAc,MAAc,MAAoB,UAAoB,CAAC,GAA0B;CAC1H,MAAM,QAAQ,aAAa,MAAM,IAAI;CACrC,MAAM,UAAU,KAAK,KAAK,KAAK,aAAa,GAAG,QAAQ,SAAS,KAAK,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,MAAM,IAAM,CAAC;CACjH,IAAI,WAAW,MAAM,GAAG,GAAG,MAAM,IAAI,SAAS,WAAW,WAAW,KAAK,iCAAiC;CAC1G,MAAM,OAAO,KAAK,KAAK,MAAM,GAAG;CAChC,OAAO;AACT;;;;;;;AAQA,eAAsB,eAAe,MAAc,MAAc,MAAc,YAA4C;CACzH,IAAI,cAAc,MAAM,IAAI,GAAG,MAAM,IAAI,SAAS,WAAW,WAAW,KAAK,iCAAiC;CAC9G,MAAM,SAAS,MAAM,WAAW,IAAI;CACpC,IAAI,OAA4B;CAChC,IAAI;EACF,IAAI;EACJ,IAAI;GAAE,SAAS,MAAM,aAAa,KAAK,QAAQ,UAAU;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACrK,IAAI,CAAC,QAAQ;GACX,MAAM,UAAU,MAAM,UAAU,MAAM,cAAc,EAAE;GACtD,OAAO,MAAM,gBAAgB,MAAM,IAAI;GACvC,MAAM,WAAW,MAAM,OAAO;GAC9B,OAAO,MAAM,cAAc,MAAM,MAAM,IAAI;EAC7C;EACA,MAAM,OAAO,YAAY;GAAE,IAAI;IAAE,OAAO,MAAM,OAAO,KAAK;GAAG,SAAS,OAAO;IAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;GAAG;EAAE;EACxK,MAAM,SAAS,SAAiB;GAAE,IAAI;IAAE,OAAO,KAAK,MAAM,IAAI;GAAmB,QAAQ;IAAE,MAAM,IAAI,SAAS,WAAW,qDAAqD;GAAG;EAAE;EAGnL,MAAM,QAAQ,MAAM,KAAK;EACzB,MAAM,OAAO,OAAO,SAAS,KAAA,IAAY,OAAO,MAAM,MAAM,IAAI;EAChE,IAAI,MAAM,MAAM,aAAa,KAAK,WAAW,QAAQ,MAAM,IAAI,SAAS,WAAW,+CAA+C;EAClI,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,GAAG,IAAI,KAAK,MAAM,IAAI,QAAQ,OAAqB,OAAO,OAAO,QAAQ,IAAI,CAAC;EACxH,OAAO,MAAM,gBAAgB,MAAM,IAAI;EACvC,MAAM,QAAQ;EACd,MAAM,MAAM,MAAM,IAAI;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACtD,IAAI,MAAmD,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,OAAO,SAAS;EAC3G,IAAI;GACF,KAAK,IAAI,SAAS,MAAM,KAAK,GAAG,QAAQ,SAAS,MAAM,KAAK,GAAG;IAC7D,IAAI,OAAO,MAAM,IAAI,SAAS,WAAW,qDAAqD;IAC9F,IAAI,OAAO,OAAO;KAChB,IAAI,CAAC,OAAO,OAAO,MAAM,SAAS,IAAI,MAAM,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAC/H,MAAM,IAAI,OAAO,MAAM,OAAO,KAAK;KACnC,IAAI,QAAQ,OAAO,MAAM;KACzB;IACF;IACA,IAAI,KAAK;KAAE,IAAI,IAAI,MAAM,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAAG,MAAM,IAAI,OAAO,MAAM;KAAG,MAAM;IAAM;IACrJ,MAAM,QAAQ,MAAM,OAAO,IAAI;IAC/B,IAAI,MAAM,MAAM,OAAO;KAAE,QAAQ,MAAM,UAAU,SAAS,MAAM,UAAU;KAAO,IAAI,CAAC,OAAO,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAAG;IAAU;IAC7L,IAAI,MAAM,MAAM,UAAU,CAAC,OAAO,cAAc,MAAM,IAAI,KAAK,MAAM,OAAO,GAAG;IAC/E,IAAI;IACJ,IAAI,MAAM,SAAS,SAAS;KAAE,SAAS,KAAK,MAAM,IAAI,cAAc;KAAG,SAAS;IAAM,OACjF;KAAE,SAAS,OAAO,MAAM,OAAO,MAAM,IAAI;KAAG,MAAM,MAAM,QAAQ,MAAM,GAAG;MAAE,WAAW;MAAM,MAAM;KAAM,CAAC;KAAG,SAAS;KAAG,SAAS,MAAM;IAAM;IAClJ,MAAM;KAAE,QAAQ,MAAM,KAAK,QAAQ,MAAM,GAAK;KAAG,MAAM,MAAM;IAAK;GACpE;GACA,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,MAAM,IAAI,SAAS,WAAW,qDAAqD;EACnH,UAAU;GAAE,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;EAAG;EACvD,OAAO,MAAM,cAAc,MAAM,MAAM,MAAM,OAAO;CACtD,SAAS,OAAO;EACd,IAAI,MAAM,MAAM,GAAG,KAAK,KAAK;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC7D,MAAM;CACR,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;;AAGA,eAAe,UAAU,MAAc,YAAuC;CAC5E,IAAI;CACJ,IAAI;EAAE,UAAU,KAAK,MAAM,MAAMC,OAAa,MAAM,SAAS,MAAM,MAAM,GAAG,UAAU,CAAC;CAAe,SAAS,OAAO;EAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CAAG;CAC/M,IAAI,SAAS,WAAW,YAAY,OAAO,QAAQ,UAAU,YAAY,CAAC,MAAM,QAAQ,QAAQ,KAAK,GAAG,MAAM,IAAI,SAAS,WAAW,+CAA+C;CACrL,OAAO;AACT;AAEA,eAAe,WAAW,OAAqB,SAAkC;CAC/E,MAAM,MAAM,MAAM,IAAI;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACtD,MAAM,UAAU,KAAK,MAAM,IAAI,cAAc,GAAG,OAAO,KAAK,QAAQ,OAAO,QAAQ,GAAG,EAAE,MAAM,IAAM,CAAC;CACrG,KAAK,MAAM,SAAS,QAAQ,OAAO;EACjC,MAAM,SAAS,OAAO,MAAM,OAAO,MAAM,IAAI;EAC7C,MAAM,MAAM,QAAQ,MAAM,GAAG;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC7D,MAAM,UAAU,QAAQ,OAAO,KAAK,MAAM,MAAM,QAAQ,GAAG,EAAE,MAAM,IAAM,CAAC;CAC5E;AACF"}

package/dist/assets/bark_ffi_wasm_bg-EY2uc0Bx.js.map

@@ -1 +1 @@
-{"version":3,"file":"bark_ffi_wasm_bg-EY2uc0Bx.js","names":["import.meta.ROLLDOWN_FILE_URL_VRAku6fjghkApIISiBWPzg"],"sources":["../../../../node_modules/@secondts/bark/web/bark_ffi_wasm_bg.wasm?url"],"sourcesContent":["export default import.meta.ROLLDOWN_FILE_URL_VRAku6fjghkApIISiBWPzg"],"ignoreList":[0],"mappings":";AAAA,IAAA,2BAAe,IAAA,IAAA,oCAAA,YAAA,GAAmD,CAAA,CAAnDA"}
+{"version":3,"file":"bark_ffi_wasm_bg-EY2uc0Bx.js","names":["import.meta.ROLLDOWN_FILE_URL_WPGYjwIlzWVNM1bYhOc83w"],"sources":["../../../../node_modules/@secondts/bark/web/bark_ffi_wasm_bg.wasm?url"],"sourcesContent":["export default import.meta.ROLLDOWN_FILE_URL_WPGYjwIlzWVNM1bYhOc83w"],"ignoreList":[0],"mappings":";AAAA,IAAA,2BAAe,IAAA,IAAA,oCAAA,YAAA,GAAmD,CAAA,CAAnDA"}

package/dist/assets/bitcoind-CZchoh43.js

@@ -0,0 +1,349 @@
+import { s as networkMode, t as NothingSpentError } from "./types-C4_KafL_.js";
+import "./bitcoindProvider-DGw3xBSa.js";
+import { base64, hex } from "@scure/base";
+import { Address, OutScript, Transaction } from "@scure/btc-signer";
+//#region ../browser/src/engine/paymentAdapters/providers/bitcoind.ts
+var BitcoindRpcError = class extends Error {
+	kind;
+	code;
+	constructor(kind, message, code) {
+		super(message);
+		this.kind = kind;
+		this.code = code;
+		this.name = "BitcoindRpcError";
+	}
+	/** The node never ran the call: it was not sent, could not connect, or the credentials were refused. */
+	get neverRan() {
+		return this.kind === "refused" || this.kind === "connect" || this.kind === "auth";
+	}
+};
+/** The Tauri command, through the Desktop host. */
+function tauriTransport(invoke) {
+	if (!invoke) throw new Error("Bitcoin Core needs the Ghostly desktop app: a browser cannot reach its RPC");
+	return (call) => invoke("bitcoind_rpc", { ...call });
+}
+/** Bitcoin Core's JSON-RPC error codes this module acts on (src/rpc/protocol.h). */
+var RPC = {
+	INVALID_ADDRESS_OR_KEY: -5,
+	VERIFY_ERROR: -25,
+	VERIFY_REJECTED: -26,
+	VERIFY_ALREADY_IN_CHAIN: -27,
+	DESERIALIZATION_ERROR: -22
+};
+var CHAINS = {
+	main: "bitcoin",
+	test: "testnet",
+	testnet4: "testnet",
+	signet: "signet",
+	regtest: "regtest"
+};
+/** A fee rate for the test networks when the node has too few blocks to estimate one (regtest always). */
+var TEST_FALLBACK_FEE_RATE = 2;
+var TXID = /^[0-9a-f]{64}$/;
+/** Address encodings, for btc-signer to read the outputs back as addresses. */
+var TESTNET_ENCODING = {
+	bech32: "tb",
+	pubKeyHash: 111,
+	scriptHash: 196,
+	wif: 239
+};
+var BTC_NETWORKS = {
+	bitcoin: {
+		bech32: "bc",
+		pubKeyHash: 0,
+		scriptHash: 5,
+		wif: 128
+	},
+	testnet: TESTNET_ENCODING,
+	signet: TESTNET_ENCODING,
+	mutinynet: TESTNET_ENCODING,
+	regtest: {
+		...TESTNET_ENCODING,
+		bech32: "bcrt"
+	}
+};
+var TX_OPTS = {
+	allowUnknownOutputs: true,
+	allowUnknownInputs: true,
+	disableScriptCheck: true,
+	allowLegacyWitnessUtxo: true
+};
+/** Whole sats as the exact decimal string bitcoind reads as BTC (never a float). */
+var satsToBtc = (sats) => {
+	if (!Number.isSafeInteger(sats) || sats < 0) throw new Error("Amounts are whole sats");
+	const digits = sats.toString().padStart(9, "0");
+	return `${digits.slice(0, -8)}.${digits.slice(-8)}`;
+};
+/** A BTC amount from bitcoind (a JSON number with at most 8 decimals) as whole sats. */
+var btcToSats = (btc) => {
+	if (typeof btc !== "number" || !Number.isFinite(btc)) throw new Error("The node returned an amount that is not a number");
+	return Math.round(btc * 1e8);
+};
+var object = (value, what) => {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`The node returned no ${what}`);
+	return value;
+};
+var text = (value, what) => {
+	if (typeof value !== "string" || !value) throw new Error(`The node returned no ${what}`);
+	return value;
+};
+var BitcoindOnchain = class BitcoindOnchain {
+	config;
+	transport;
+	closed = false;
+	network;
+	constructor(config, transport) {
+		this.config = config;
+		this.transport = transport;
+	}
+	/** Connects and checks the wallet is there and the node is on a network of `mode`. */
+	static async connect(config, mode, transport, signal) {
+		const provider = new BitcoindOnchain(config, transport);
+		signal?.addEventListener("abort", () => void provider.close(), { once: true });
+		const { network } = await provider.info();
+		if (networkMode(network) !== mode) throw new Error(mode === "mainnet" ? `This node is on ${network}, not Bitcoin mainnet` : "This node is on Bitcoin mainnet: set it up as a Mainnet wallet instead");
+		if (object(await provider.call("getwalletinfo"), "wallet information").private_keys_enabled === false) throw new Error("This wallet has no private keys: it cannot sign a payment");
+		return provider;
+	}
+	async call(method, ...params) {
+		if (this.closed) throw new BitcoindRpcError("refused", "This Bitcoin Core source is closed");
+		try {
+			return await this.transport({
+				...this.config,
+				method,
+				params
+			});
+		} catch (error) {
+			if (error instanceof BitcoindRpcError) throw error;
+			const failure = error;
+			if (failure && typeof failure === "object" && typeof failure.kind === "string" && typeof failure.message === "string") throw new BitcoindRpcError(failure.kind, failure.message, failure.code);
+			throw new BitcoindRpcError("transport", error instanceof Error ? error.message : String(error));
+		}
+	}
+	async info() {
+		const chain = object(await this.call("getblockchaininfo"), "chain information").chain;
+		const network = typeof chain === "string" ? CHAINS[chain] : void 0;
+		if (!network) throw new Error(`Ghostly does not know the chain "${String(chain).slice(0, 20)}"`);
+		this.network = network;
+		return {
+			network,
+			alias: this.config.wallet || "Bitcoin Core"
+		};
+	}
+	async receiveAddress() {
+		return text(await this.call("getnewaddress", "Ghostly"), "address");
+	}
+	async balance() {
+		const mine = object(object(await this.call("getbalances"), "balances").mine, "balances");
+		return {
+			confirmed: btcToSats(mine.trusted),
+			unconfirmed: btcToSats(mine.untrusted_pending)
+		};
+	}
+	async feeRate(request) {
+		if (request.feeRate !== void 0) {
+			if (!Number.isFinite(request.feeRate) || request.feeRate < 1 || request.feeRate > 1e4) throw new Error("The fee rate must be between 1 and 10,000 sat/vB");
+			return request.feeRate;
+		}
+		const estimate = object(await this.call("estimatesmartfee", 6), "fee estimate");
+		if (typeof estimate.feerate === "number" && estimate.feerate > 0) return Math.max(1, Math.ceil(estimate.feerate * 1e5 * 1e3) / 1e3);
+		if ((this.network ?? (await this.info()).network) === "bitcoin") throw new Error("Your node cannot estimate a fee yet. Nothing was sent.");
+		return TEST_FALLBACK_FEE_RATE;
+	}
+	async prepareSend(request) {
+		if (!Number.isSafeInteger(request.amount) || request.amount <= 0) throw new Error("Amounts are whole sats");
+		const network = this.network ?? (await this.info()).network;
+		const feeRate = await this.feeRate(request);
+		const funded = object(await this.call("walletcreatefundedpsbt", [], [{ [request.address]: satsToBtc(request.amount) }], 0, {
+			fee_rate: feeRate,
+			lockUnspents: true,
+			replaceable: true
+		}), "funded transaction");
+		const inputs = this.outpoints(Transaction.fromPSBT(base64.decode(text(funded.psbt, "funded transaction")), TX_OPTS));
+		try {
+			const fee = btcToSats(funded.fee);
+			if (fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);
+			const signed = object(await this.call("walletprocesspsbt", funded.psbt, true, "ALL"), "signed transaction");
+			if (signed.complete !== true) throw new Error("The wallet could not sign this payment (is it locked, or watch-only?)");
+			const final = object(await this.call("finalizepsbt", signed.psbt, false), "finalized transaction");
+			if (final.complete !== true) throw new Error("The wallet could not finalize this payment");
+			return this.check(Transaction.fromPSBT(base64.decode(text(final.psbt, "finalized transaction")), TX_OPTS), request, inputs, feeRate, network);
+		} catch (error) {
+			await this.unlock(inputs).catch(() => {});
+			throw error;
+		}
+	}
+	/** The transaction the node signed is exactly the one asked for, before anyone reviews it. */
+	check(tx, request, funded, feeRate, network) {
+		const same = (a, b) => a.length === b.length && a.every((o, i) => o.txid === b[i].txid && o.vout === b[i].vout);
+		if (!same(this.outpoints(tx), funded)) throw new Error("The node signed other coins than it funded the payment with");
+		const script = (() => {
+			try {
+				return hex.encode(OutScript.encode(Address(BTC_NETWORKS[network]).decode(request.address)));
+			} catch {
+				return;
+			}
+		})();
+		let paid = 0;
+		for (let i = 0; i < tx.outputsLength; i++) {
+			const output = tx.getOutput(i);
+			if (script !== void 0 && output.script && hex.encode(output.script) === script) paid += Number(output.amount ?? 0n);
+		}
+		if (paid !== request.amount) throw new Error("The node built a transaction that does not pay the address and amount asked for");
+		const fee = Number(tx.fee);
+		if (!Number.isSafeInteger(fee) || fee < 0 || fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);
+		const txid = tx.id;
+		if (!TXID.test(txid)) throw new Error("The node returned a transaction without a valid id");
+		return {
+			txid,
+			address: request.address,
+			amount: request.amount,
+			fee,
+			feeRate,
+			signed: hex.encode(tx.extract())
+		};
+	}
+	outpoints(tx) {
+		const out = [];
+		for (let i = 0; i < tx.inputsLength; i++) {
+			const input = tx.getInput(i);
+			if (!input.txid || input.index === void 0) throw new Error("The node returned a transaction with an unreadable input");
+			out.push({
+				txid: hex.encode(input.txid),
+				vout: input.index
+			});
+		}
+		return out;
+	}
+	async unlock(outpoints) {
+		if (outpoints.length) await this.call("lockunspent", true, outpoints);
+	}
+	signedTx(prepared) {
+		if (!/^[0-9a-f]+$/.test(prepared.signed)) throw new Error("This prepared payment has no signed transaction");
+		const tx = Transaction.fromRaw(hex.decode(prepared.signed), TX_OPTS);
+		if (tx.id !== prepared.txid) throw new Error("This prepared payment's transaction is not the one reviewed");
+		return tx;
+	}
+	async broadcast(prepared) {
+		const tx = this.signedTx(prepared);
+		let txid;
+		try {
+			txid = await this.call("sendrawtransaction", prepared.signed);
+		} catch (error) {
+			if (!(error instanceof BitcoindRpcError)) throw error;
+			if (error.kind === "rpc" && error.code === RPC.VERIFY_ALREADY_IN_CHAIN) return prepared.txid;
+			const rejected = error.kind === "rpc" && [
+				RPC.VERIFY_ERROR,
+				RPC.VERIFY_REJECTED,
+				RPC.DESERIALIZATION_ERROR
+			].includes(error.code ?? 0);
+			if (!error.neverRan && !rejected) throw error;
+			const seen = rejected ? await this.known(prepared.txid) : await this.known(prepared.txid).catch(() => void 0);
+			if (seen) {
+				if (["mempool", "confirmed"].includes((await this.status(prepared)).state)) return prepared.txid;
+				throw error;
+			}
+			if (seen === false) await this.unlock(this.outpoints(tx)).catch(() => {});
+			throw new NothingSpentError(`Your node did not send it: ${error.message}`);
+		}
+		if (txid !== prepared.txid) throw new Error("The node broadcast a different transaction than the one reviewed");
+		return prepared.txid;
+	}
+	/** Whether the wallet knows this transaction (it does once its node accepted it, even if it was dropped since). */
+	async known(txid) {
+		try {
+			await this.call("gettransaction", txid);
+			return true;
+		} catch (error) {
+			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return false;
+			throw error;
+		}
+	}
+	async status(prepared) {
+		if (!TXID.test(prepared.txid)) throw new Error("Not a transaction id");
+		let tx;
+		try {
+			tx = object(await this.call("gettransaction", prepared.txid), "transaction");
+		} catch (error) {
+			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return {
+				state: "missing",
+				confirmations: 0
+			};
+			throw error;
+		}
+		const confirmations = typeof tx.confirmations === "number" ? tx.confirmations : 0;
+		if (confirmations > 0) return {
+			state: "confirmed",
+			confirmations
+		};
+		if (confirmations < 0) return {
+			state: "conflicted",
+			confirmations: 0
+		};
+		if (Array.isArray(tx.mempoolconflicts) && tx.mempoolconflicts.length > 0) return {
+			state: "conflicted",
+			confirmations: 0
+		};
+		try {
+			await this.call("getmempoolentry", prepared.txid);
+			return {
+				state: "mempool",
+				confirmations: 0
+			};
+		} catch (error) {
+			if (error instanceof BitcoindRpcError && error.kind === "rpc" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return {
+				state: "missing",
+				confirmations: 0
+			};
+			throw error;
+		}
+	}
+	async release(prepared) {
+		await this.unlock(this.outpoints(this.signedTx(prepared)));
+	}
+	async history(limit) {
+		const count = Math.max(1, Math.min(200, Math.floor(limit) * 3));
+		const entries = await this.call("listtransactions", "*", count, 0, true);
+		if (!Array.isArray(entries)) throw new Error("The node returned no transaction list");
+		const byTxid = /* @__PURE__ */ new Map();
+		for (const raw of entries) {
+			if (!raw || typeof raw.txid !== "string" || !TXID.test(raw.txid) || raw.category === "orphan") continue;
+			const tx = byTxid.get(raw.txid) ?? {
+				txid: raw.txid,
+				amount: 0,
+				confirmations: typeof raw.confirmations === "number" ? Math.max(0, raw.confirmations) : 0
+			};
+			tx.amount += btcToSats(raw.amount);
+			if (raw.category === "send" && typeof raw.fee === "number" && tx.fee === void 0) tx.fee = Math.abs(btcToSats(raw.fee));
+			if (typeof raw.time === "number") tx.timestamp = raw.time * 1e3;
+			byTxid.delete(raw.txid);
+			byTxid.set(raw.txid, tx);
+		}
+		return [...byTxid.values()].reverse().slice(0, Math.max(0, limit));
+	}
+	/** The wallet's receives on this address, newest first: only `receive` entries paying exactly it count. */
+	async received(address) {
+		const entries = await this.call("listtransactions", "*", 200, 0, true);
+		if (!Array.isArray(entries)) throw new Error("The node returned no transaction list");
+		const byTxid = /* @__PURE__ */ new Map();
+		for (const raw of entries) {
+			if (!raw || raw.category !== "receive" || raw.address !== address || typeof raw.txid !== "string" || !TXID.test(raw.txid)) continue;
+			const tx = byTxid.get(raw.txid) ?? {
+				txid: raw.txid,
+				amount: 0,
+				confirmations: typeof raw.confirmations === "number" ? Math.max(0, raw.confirmations) : 0
+			};
+			tx.amount += btcToSats(raw.amount);
+			byTxid.delete(raw.txid);
+			byTxid.set(raw.txid, tx);
+		}
+		return [...byTxid.values()].reverse();
+	}
+	async close() {
+		this.closed = true;
+	}
+};
+//#endregion
+export { BitcoindOnchain, tauriTransport };
+
+//# sourceMappingURL=bitcoind-CZchoh43.js.map

package/dist/assets/bitcoind-CZchoh43.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitcoind-CZchoh43.js","names":[],"sources":["../../../browser/src/engine/paymentAdapters/providers/bitcoind.ts"],"sourcesContent":["import { base64, hex } from \"@scure/base\";\nimport { Address, OutScript, Transaction } from \"@scure/btc-signer\";\nimport type { WalletMode } from \"../../../shared/mints\";\nimport type { OnchainBalance, OnchainInfo, OnchainPrepared, OnchainProvider, OnchainSendRequest, OnchainTx, OnchainTxStatus } from \"./onchain\";\nimport { NothingSpentError, networkMode, type ProviderHost, type ProviderNetwork } from \"./types\";\n\nexport { bitcoindRpc, credentials } from \"./bitcoindProvider\";\n\n/**\n * On-chain Bitcoin from a wallet of the person's own Bitcoin Core node, over its JSON-RPC.\n *\n * bitcoind answers no CORS preflight, so a page cannot call it: this runs on Desktop only, where the\n * `bitcoind_rpc` Tauri command (apps/desktop/src/bitcoind_rpc.rs, reached through `ProviderHost.invoke`)\n * makes the call. That command forwards only the methods below, to the URL configured here, and says\n * whether a failed call could have reached the node (`kind`), which is what lets `broadcast` tell\n * \"nothing spent\" from \"unknown\".\n *\n * A payment: `walletcreatefundedpsbt` picks and locks the coins, `walletprocesspsbt` signs, `finalizepsbt`\n * finalizes, and the result is checked here (outputs, fee, txid) before it is shown for review. Nothing is\n * broadcast until approval (`sendrawtransaction`); a cancelled review unlocks the coins (`lockunspent`).\n */\n\nexport interface BitcoindCall {\n  url: string;\n  /** Empty: the node's default wallet. */\n  wallet: string;\n  user: string;\n  password: string;\n  method: string;\n  params: unknown[];\n}\n/** Resolves with the JSON-RPC `result`; rejects with a `BitcoindRpcError`-shaped object. */\nexport type BitcoindTransport = (call: BitcoindCall) => Promise<unknown>;\n\n/** What the Tauri command rejects with. See `RpcError` in bitcoind_rpc.rs for what each `kind` proves. */\nexport interface BitcoindRpcFailure { kind: \"refused\" | \"connect\" | \"auth\" | \"rpc\" | \"transport\"; code?: number; message: string }\n\nexport class BitcoindRpcError extends Error {\n  constructor(readonly kind: BitcoindRpcFailure[\"kind\"], message: string, readonly code?: number) { super(message); this.name = \"BitcoindRpcError\"; }\n  /** The node never ran the call: it was not sent, could not connect, or the credentials were refused. */\n  get neverRan() { return this.kind === \"refused\" || this.kind === \"connect\" || this.kind === \"auth\"; }\n}\n\n/** The Tauri command, through the Desktop host. */\nexport function tauriTransport(invoke: ProviderHost[\"invoke\"]): BitcoindTransport {\n  if (!invoke) throw new Error(\"Bitcoin Core needs the Ghostly desktop app: a browser cannot reach its RPC\");\n  return (call) => invoke(\"bitcoind_rpc\", { ...call });\n}\n\n/** Bitcoin Core's JSON-RPC error codes this module acts on (src/rpc/protocol.h). */\nconst RPC = { INVALID_ADDRESS_OR_KEY: -5, VERIFY_ERROR: -25, VERIFY_REJECTED: -26, VERIFY_ALREADY_IN_CHAIN: -27, DESERIALIZATION_ERROR: -22 } as const;\n\nconst CHAINS: Record<string, ProviderNetwork> = { main: \"bitcoin\", test: \"testnet\", testnet4: \"testnet\", signet: \"signet\", regtest: \"regtest\" };\n/** A fee rate for the test networks when the node has too few blocks to estimate one (regtest always). */\nconst TEST_FALLBACK_FEE_RATE = 2;\nconst TXID = /^[0-9a-f]{64}$/;\n/** Address encodings, for btc-signer to read the outputs back as addresses. */\nconst TESTNET_ENCODING = { bech32: \"tb\", pubKeyHash: 0x6f, scriptHash: 0xc4, wif: 0xef };\nconst BTC_NETWORKS: Record<ProviderNetwork, typeof TESTNET_ENCODING> = {\n  bitcoin: { bech32: \"bc\", pubKeyHash: 0x00, scriptHash: 0x05, wif: 0x80 },\n  testnet: TESTNET_ENCODING, signet: TESTNET_ENCODING, mutinynet: TESTNET_ENCODING,\n  regtest: { ...TESTNET_ENCODING, bech32: \"bcrt\" },\n};\nconst TX_OPTS = { allowUnknownOutputs: true, allowUnknownInputs: true, disableScriptCheck: true, allowLegacyWitnessUtxo: true };\n\n/** Whole sats as the exact decimal string bitcoind reads as BTC (never a float). */\nexport const satsToBtc = (sats: number) => {\n  if (!Number.isSafeInteger(sats) || sats < 0) throw new Error(\"Amounts are whole sats\");\n  const digits = sats.toString().padStart(9, \"0\");\n  return `${digits.slice(0, -8)}.${digits.slice(-8)}`;\n};\n/** A BTC amount from bitcoind (a JSON number with at most 8 decimals) as whole sats. */\nexport const btcToSats = (btc: unknown) => {\n  if (typeof btc !== \"number\" || !Number.isFinite(btc)) throw new Error(\"The node returned an amount that is not a number\");\n  return Math.round(btc * 1e8);\n};\n\nconst object = (value: unknown, what: string): Record<string, unknown> => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) throw new Error(`The node returned no ${what}`);\n  return value as Record<string, unknown>;\n};\nconst text = (value: unknown, what: string) => { if (typeof value !== \"string\" || !value) throw new Error(`The node returned no ${what}`); return value; };\n\ninterface Outpoint { txid: string; vout: number }\n\nexport interface BitcoindConfig { url: string; wallet: string; user: string; password: string }\n\nexport class BitcoindOnchain implements OnchainProvider {\n  private closed = false;\n  private network?: ProviderNetwork;\n\n  constructor(private readonly config: BitcoindConfig, private readonly transport: BitcoindTransport) {}\n\n  /** Connects and checks the wallet is there and the node is on a network of `mode`. */\n  static async connect(config: BitcoindConfig, mode: WalletMode, transport: BitcoindTransport, signal?: AbortSignal): Promise<BitcoindOnchain> {\n    const provider = new BitcoindOnchain(config, transport);\n    signal?.addEventListener(\"abort\", () => void provider.close(), { once: true });\n    const { network } = await provider.info();\n    if (networkMode(network) !== mode) throw new Error(mode === \"mainnet\" ? `This node is on ${network}, not Bitcoin mainnet` : \"This node is on Bitcoin mainnet: set it up as a Mainnet wallet instead\");\n    const wallet = object(await provider.call(\"getwalletinfo\"), \"wallet information\");\n    if (wallet.private_keys_enabled === false) throw new Error(\"This wallet has no private keys: it cannot sign a payment\");\n    return provider;\n  }\n\n  private async call(method: string, ...params: unknown[]): Promise<unknown> {\n    if (this.closed) throw new BitcoindRpcError(\"refused\", \"This Bitcoin Core source is closed\");\n    try {\n      return await this.transport({ ...this.config, method, params });\n    } catch (error) {\n      if (error instanceof BitcoindRpcError) throw error;\n      const failure = error as Partial<BitcoindRpcFailure> | null;\n      if (failure && typeof failure === \"object\" && typeof failure.kind === \"string\" && typeof failure.message === \"string\") throw new BitcoindRpcError(failure.kind, failure.message, failure.code);\n      // Something that is not the command's answer (no Tauri, a crash): nothing proves the node did not run it.\n      throw new BitcoindRpcError(\"transport\", error instanceof Error ? error.message : String(error));\n    }\n  }\n\n  async info(): Promise<OnchainInfo> {\n    const chain = object(await this.call(\"getblockchaininfo\"), \"chain information\").chain;\n    const network = typeof chain === \"string\" ? CHAINS[chain] : undefined;\n    if (!network) throw new Error(`Ghostly does not know the chain \"${String(chain).slice(0, 20)}\"`);\n    this.network = network;\n    return { network, alias: this.config.wallet || \"Bitcoin Core\" };\n  }\n\n  async receiveAddress(): Promise<string> {\n    return text(await this.call(\"getnewaddress\", \"Ghostly\"), \"address\");\n  }\n\n  async balance(): Promise<OnchainBalance> {\n    const mine = object(object(await this.call(\"getbalances\"), \"balances\").mine, \"balances\");\n    // `trusted` is spendable: confirmed coins plus the change of our own transactions.\n    return { confirmed: btcToSats(mine.trusted), unconfirmed: btcToSats(mine.untrusted_pending) };\n  }\n\n  private async feeRate(request: OnchainSendRequest): Promise<number> {\n    if (request.feeRate !== undefined) {\n      if (!Number.isFinite(request.feeRate) || request.feeRate < 1 || request.feeRate > 10_000) throw new Error(\"The fee rate must be between 1 and 10,000 sat/vB\");\n      return request.feeRate;\n    }\n    const estimate = object(await this.call(\"estimatesmartfee\", 6), \"fee estimate\");\n    if (typeof estimate.feerate === \"number\" && estimate.feerate > 0) return Math.max(1, Math.ceil(estimate.feerate * 1e5 * 1000) / 1000);\n    if ((this.network ?? (await this.info()).network) === \"bitcoin\") throw new Error(\"Your node cannot estimate a fee yet. Nothing was sent.\");\n    return TEST_FALLBACK_FEE_RATE;\n  }\n\n  async prepareSend(request: OnchainSendRequest): Promise<OnchainPrepared> {\n    if (!Number.isSafeInteger(request.amount) || request.amount <= 0) throw new Error(\"Amounts are whole sats\");\n    const network = this.network ?? (await this.info()).network;\n    const feeRate = await this.feeRate(request);\n    const funded = object(await this.call(\"walletcreatefundedpsbt\", [], [{ [request.address]: satsToBtc(request.amount) }], 0, { fee_rate: feeRate, lockUnspents: true, replaceable: true }), \"funded transaction\");\n    const inputs = this.outpoints(Transaction.fromPSBT(base64.decode(text(funded.psbt, \"funded transaction\")), TX_OPTS));\n    try {\n      const fee = btcToSats(funded.fee);\n      if (fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);\n      const signed = object(await this.call(\"walletprocesspsbt\", funded.psbt, true, \"ALL\"), \"signed transaction\");\n      if (signed.complete !== true) throw new Error(\"The wallet could not sign this payment (is it locked, or watch-only?)\");\n      const final = object(await this.call(\"finalizepsbt\", signed.psbt, false), \"finalized transaction\");\n      if (final.complete !== true) throw new Error(\"The wallet could not finalize this payment\");\n      return this.check(Transaction.fromPSBT(base64.decode(text(final.psbt, \"finalized transaction\")), TX_OPTS), request, inputs, feeRate, network);\n    } catch (error) {\n      // Nothing was broadcast: what the node locked for this payment goes back.\n      await this.unlock(inputs).catch(() => {});\n      throw error;\n    }\n  }\n\n  /** The transaction the node signed is exactly the one asked for, before anyone reviews it. */\n  private check(tx: Transaction, request: OnchainSendRequest, funded: Outpoint[], feeRate: number, network: ProviderNetwork): OnchainPrepared {\n    const same = (a: Outpoint[], b: Outpoint[]) => a.length === b.length && a.every((o, i) => o.txid === b[i].txid && o.vout === b[i].vout);\n    if (!same(this.outpoints(tx), funded)) throw new Error(\"The node signed other coins than it funded the payment with\");\n    // Scripts, not address strings: a bech32 address is the same one in upper case (the QR form of a bitcoin: link).\n    const script = (() => { try { return hex.encode(OutScript.encode(Address(BTC_NETWORKS[network]).decode(request.address))); } catch { return undefined; } })();\n    let paid = 0;\n    for (let i = 0; i < tx.outputsLength; i++) {\n      const output = tx.getOutput(i);\n      if (script !== undefined && output.script && hex.encode(output.script) === script) paid += Number(output.amount ?? 0n);\n    }\n    if (paid !== request.amount) throw new Error(\"The node built a transaction that does not pay the address and amount asked for\");\n    const fee = Number(tx.fee);\n    if (!Number.isSafeInteger(fee) || fee < 0 || fee > request.feeCap) throw new Error(`The fee (${fee} sats) is above your limit of ${request.feeCap}`);\n    const txid = tx.id;\n    if (!TXID.test(txid)) throw new Error(\"The node returned a transaction without a valid id\");\n    return { txid, address: request.address, amount: request.amount, fee, feeRate, signed: hex.encode(tx.extract()) };\n  }\n\n  private outpoints(tx: Transaction): Outpoint[] {\n    const out: Outpoint[] = [];\n    for (let i = 0; i < tx.inputsLength; i++) {\n      const input = tx.getInput(i);\n      if (!input.txid || input.index === undefined) throw new Error(\"The node returned a transaction with an unreadable input\");\n      out.push({ txid: hex.encode(input.txid), vout: input.index });\n    }\n    return out;\n  }\n\n  private async unlock(outpoints: Outpoint[]) {\n    if (outpoints.length) await this.call(\"lockunspent\", true, outpoints);\n  }\n\n  private signedTx(prepared: OnchainPrepared) {\n    if (!/^[0-9a-f]+$/.test(prepared.signed)) throw new Error(\"This prepared payment has no signed transaction\");\n    const tx = Transaction.fromRaw(hex.decode(prepared.signed), TX_OPTS);\n    if (tx.id !== prepared.txid) throw new Error(\"This prepared payment's transaction is not the one reviewed\");\n    return tx;\n  }\n\n  async broadcast(prepared: OnchainPrepared): Promise<string> {\n    const tx = this.signedTx(prepared);\n    let txid: unknown;\n    try {\n      txid = await this.call(\"sendrawtransaction\", prepared.signed);\n    } catch (error) {\n      if (!(error instanceof BitcoindRpcError)) throw error;\n      if (error.kind === \"rpc\" && error.code === RPC.VERIFY_ALREADY_IN_CHAIN) return prepared.txid;\n      const rejected = error.kind === \"rpc\" && ([RPC.VERIFY_ERROR, RPC.VERIFY_REJECTED, RPC.DESERIALIZATION_ERROR] as number[]).includes(error.code ?? 0);\n      if (!error.neverRan && !rejected) throw error; // A time-out, a cut connection: it may have gone out.\n      // Refused, or never sent. The wallet learns of a transaction only once its node accepted it: if it has\n      // never seen this one, nobody has, and nothing was spent. If it has (this is a re-broadcast of one that\n      // went out before), other nodes may still hold it: the outcome stays unknown and its coins locked.\n      const seen = rejected ? await this.known(prepared.txid) : await this.known(prepared.txid).catch(() => undefined);\n      if (seen) {\n        if ([\"mempool\", \"confirmed\"].includes((await this.status(prepared)).state)) return prepared.txid;\n        throw error; // Not a NothingSpentError: an unknown outcome, reconciled by txid.\n      }\n      if (seen === false) await this.unlock(this.outpoints(tx)).catch(() => {});\n      throw new NothingSpentError(`Your node did not send it: ${error.message}`);\n    }\n    if (txid !== prepared.txid) throw new Error(\"The node broadcast a different transaction than the one reviewed\");\n    return prepared.txid;\n  }\n\n  /** Whether the wallet knows this transaction (it does once its node accepted it, even if it was dropped since). */\n  private async known(txid: string): Promise<boolean> {\n    try { await this.call(\"gettransaction\", txid); return true; }\n    catch (error) { if (error instanceof BitcoindRpcError && error.kind === \"rpc\" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return false; throw error; }\n  }\n\n  async status(prepared: OnchainPrepared): Promise<OnchainTxStatus> {\n    if (!TXID.test(prepared.txid)) throw new Error(\"Not a transaction id\");\n    let tx: Record<string, unknown>;\n    try {\n      tx = object(await this.call(\"gettransaction\", prepared.txid), \"transaction\");\n    } catch (error) {\n      if (error instanceof BitcoindRpcError && error.kind === \"rpc\" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return { state: \"missing\", confirmations: 0 };\n      throw error;\n    }\n    const confirmations = typeof tx.confirmations === \"number\" ? tx.confirmations : 0;\n    if (confirmations > 0) return { state: \"confirmed\", confirmations };\n    // Negative: a transaction in a block spent the same coins.\n    if (confirmations < 0) return { state: \"conflicted\", confirmations: 0 };\n    if (Array.isArray(tx.mempoolconflicts) && tx.mempoolconflicts.length > 0) return { state: \"conflicted\", confirmations: 0 };\n    try {\n      await this.call(\"getmempoolentry\", prepared.txid);\n      return { state: \"mempool\", confirmations: 0 };\n    } catch (error) {\n      if (error instanceof BitcoindRpcError && error.kind === \"rpc\" && error.code === RPC.INVALID_ADDRESS_OR_KEY) return { state: \"missing\", confirmations: 0 };\n      throw error;\n    }\n  }\n\n  async release(prepared: OnchainPrepared): Promise<void> {\n    await this.unlock(this.outpoints(this.signedTx(prepared)));\n  }\n\n  async history(limit: number): Promise<OnchainTx[]> {\n    const count = Math.max(1, Math.min(200, Math.floor(limit) * 3));\n    const entries = await this.call(\"listtransactions\", \"*\", count, 0, true);\n    if (!Array.isArray(entries)) throw new Error(\"The node returned no transaction list\");\n    const byTxid = new Map<string, OnchainTx>();\n    // Oldest first: one entry per output of ours, so a payment with change or to ourselves has several.\n    for (const raw of entries as Record<string, unknown>[]) {\n      if (!raw || typeof raw.txid !== \"string\" || !TXID.test(raw.txid) || raw.category === \"orphan\") continue;\n      const tx = byTxid.get(raw.txid) ?? { txid: raw.txid, amount: 0, confirmations: typeof raw.confirmations === \"number\" ? Math.max(0, raw.confirmations) : 0 };\n      tx.amount += btcToSats(raw.amount);\n      if (raw.category === \"send\" && typeof raw.fee === \"number\" && tx.fee === undefined) tx.fee = Math.abs(btcToSats(raw.fee));\n      if (typeof raw.time === \"number\") tx.timestamp = raw.time * 1000;\n      byTxid.delete(raw.txid);\n      byTxid.set(raw.txid, tx);\n    }\n    return [...byTxid.values()].reverse().slice(0, Math.max(0, limit));\n  }\n\n  /** The wallet's receives on this address, newest first: only `receive` entries paying exactly it count. */\n  async received(address: string): Promise<OnchainTx[]> {\n    const entries = await this.call(\"listtransactions\", \"*\", 200, 0, true);\n    if (!Array.isArray(entries)) throw new Error(\"The node returned no transaction list\");\n    const byTxid = new Map<string, OnchainTx>();\n    for (const raw of entries as Record<string, unknown>[]) {\n      if (!raw || raw.category !== \"receive\" || raw.address !== address || typeof raw.txid !== \"string\" || !TXID.test(raw.txid)) continue;\n      const tx = byTxid.get(raw.txid) ?? { txid: raw.txid, amount: 0, confirmations: typeof raw.confirmations === \"number\" ? Math.max(0, raw.confirmations) : 0 };\n      tx.amount += btcToSats(raw.amount);\n      byTxid.delete(raw.txid);\n      byTxid.set(raw.txid, tx);\n    }\n    return [...byTxid.values()].reverse();\n  }\n\n  async close(): Promise<void> { this.closed = true; }\n}\n"],"mappings":";;;;;AAqCA,IAAa,mBAAb,cAAsC,MAAM;CACrB;CAA4D;CAAjF,YAAY,MAA2C,SAAiB,MAAwB;EAAE,MAAM,OAAO;EAA1F,KAAA,OAAA;EAA4D,KAAA,OAAA;EAAiC,KAAK,OAAO;CAAoB;;CAElJ,IAAI,WAAW;EAAE,OAAO,KAAK,SAAS,aAAa,KAAK,SAAS,aAAa,KAAK,SAAS;CAAQ;AACtG;;AAGA,SAAgB,eAAe,QAAmD;CAChF,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,4EAA4E;CACzG,QAAQ,SAAS,OAAO,gBAAgB,EAAE,GAAG,KAAK,CAAC;AACrD;;AAGA,IAAM,MAAM;CAAE,wBAAwB;CAAI,cAAc;CAAK,iBAAiB;CAAK,yBAAyB;CAAK,uBAAuB;AAAI;AAE5I,IAAM,SAA0C;CAAE,MAAM;CAAW,MAAM;CAAW,UAAU;CAAW,QAAQ;CAAU,SAAS;AAAU;;AAE9I,IAAM,yBAAyB;AAC/B,IAAM,OAAO;;AAEb,IAAM,mBAAmB;CAAE,QAAQ;CAAM,YAAY;CAAM,YAAY;CAAM,KAAK;AAAK;AACvF,IAAM,eAAiE;CACrE,SAAS;EAAE,QAAQ;EAAM,YAAY;EAAM,YAAY;EAAM,KAAK;CAAK;CACvE,SAAS;CAAkB,QAAQ;CAAkB,WAAW;CAChE,SAAS;EAAE,GAAG;EAAkB,QAAQ;CAAO;AACjD;AACA,IAAM,UAAU;CAAE,qBAAqB;CAAM,oBAAoB;CAAM,oBAAoB;CAAM,wBAAwB;AAAK;;AAG9H,IAAa,aAAa,SAAiB;CACzC,IAAI,CAAC,OAAO,cAAc,IAAI,KAAK,OAAO,GAAG,MAAM,IAAI,MAAM,wBAAwB;CACrF,MAAM,SAAS,KAAK,SAAS,CAAC,CAAC,SAAS,GAAG,GAAG;CAC9C,OAAO,GAAG,OAAO,MAAM,GAAG,EAAE,EAAE,GAAG,OAAO,MAAM,EAAE;AAClD;;AAEA,IAAa,aAAa,QAAiB;CACzC,IAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,kDAAkD;CACxH,OAAO,KAAK,MAAM,MAAM,GAAG;AAC7B;AAEA,IAAM,UAAU,OAAgB,SAA0C;CACxE,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,wBAAwB,MAAM;CAC/G,OAAO;AACT;AACA,IAAM,QAAQ,OAAgB,SAAiB;CAAE,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,MAAM,IAAI,MAAM,wBAAwB,MAAM;CAAG,OAAO;AAAO;AAMzJ,IAAa,kBAAb,MAAa,gBAA2C;CAIzB;CAAyC;CAHtE,SAAiB;CACjB;CAEA,YAAY,QAAyC,WAA+C;EAAvE,KAAA,SAAA;EAAyC,KAAA,YAAA;CAA+B;;CAGrG,aAAa,QAAQ,QAAwB,MAAkB,WAA8B,QAAgD;EAC3I,MAAM,WAAW,IAAI,gBAAgB,QAAQ,SAAS;EACtD,QAAQ,iBAAiB,eAAe,KAAK,SAAS,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC;EAC7E,MAAM,EAAE,YAAY,MAAM,SAAS,KAAK;EACxC,IAAI,YAAY,OAAO,MAAM,MAAM,MAAM,IAAI,MAAM,SAAS,YAAY,mBAAmB,QAAQ,yBAAyB,wEAAwE;EAEpM,IADe,OAAO,MAAM,SAAS,KAAK,eAAe,GAAG,oBACxD,CAAA,CAAO,yBAAyB,OAAO,MAAM,IAAI,MAAM,2DAA2D;EACtH,OAAO;CACT;CAEA,MAAc,KAAK,QAAgB,GAAG,QAAqC;EACzE,IAAI,KAAK,QAAQ,MAAM,IAAI,iBAAiB,WAAW,oCAAoC;EAC3F,IAAI;GACF,OAAO,MAAM,KAAK,UAAU;IAAE,GAAG,KAAK;IAAQ;IAAQ;GAAO,CAAC;EAChE,SAAS,OAAO;GACd,IAAI,iBAAiB,kBAAkB,MAAM;GAC7C,MAAM,UAAU;GAChB,IAAI,WAAW,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,YAAY,OAAO,QAAQ,YAAY,UAAU,MAAM,IAAI,iBAAiB,QAAQ,MAAM,QAAQ,SAAS,QAAQ,IAAI;GAE7L,MAAM,IAAI,iBAAiB,aAAa,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAChG;CACF;CAEA,MAAM,OAA6B;EACjC,MAAM,QAAQ,OAAO,MAAM,KAAK,KAAK,mBAAmB,GAAG,mBAAmB,CAAC,CAAC;EAChF,MAAM,UAAU,OAAO,UAAU,WAAW,OAAO,SAAS,KAAA;EAC5D,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,oCAAoC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE;EAC/F,KAAK,UAAU;EACf,OAAO;GAAE;GAAS,OAAO,KAAK,OAAO,UAAU;EAAe;CAChE;CAEA,MAAM,iBAAkC;EACtC,OAAO,KAAK,MAAM,KAAK,KAAK,iBAAiB,SAAS,GAAG,SAAS;CACpE;CAEA,MAAM,UAAmC;EACvC,MAAM,OAAO,OAAO,OAAO,MAAM,KAAK,KAAK,aAAa,GAAG,UAAU,CAAC,CAAC,MAAM,UAAU;EAEvF,OAAO;GAAE,WAAW,UAAU,KAAK,OAAO;GAAG,aAAa,UAAU,KAAK,iBAAiB;EAAE;CAC9F;CAEA,MAAc,QAAQ,SAA8C;EAClE,IAAI,QAAQ,YAAY,KAAA,GAAW;GACjC,IAAI,CAAC,OAAO,SAAS,QAAQ,OAAO,KAAK,QAAQ,UAAU,KAAK,QAAQ,UAAU,KAAQ,MAAM,IAAI,MAAM,kDAAkD;GAC5J,OAAO,QAAQ;EACjB;EACA,MAAM,WAAW,OAAO,MAAM,KAAK,KAAK,oBAAoB,CAAC,GAAG,cAAc;EAC9E,IAAI,OAAO,SAAS,YAAY,YAAY,SAAS,UAAU,GAAG,OAAO,KAAK,IAAI,GAAG,KAAK,KAAK,SAAS,UAAU,MAAM,GAAI,IAAI,GAAI;EACpI,KAAK,KAAK,YAAY,MAAM,KAAK,KAAK,EAAA,CAAG,aAAa,WAAW,MAAM,IAAI,MAAM,wDAAwD;EACzI,OAAO;CACT;CAEA,MAAM,YAAY,SAAuD;EACvE,IAAI,CAAC,OAAO,cAAc,QAAQ,MAAM,KAAK,QAAQ,UAAU,GAAG,MAAM,IAAI,MAAM,wBAAwB;EAC1G,MAAM,UAAU,KAAK,YAAY,MAAM,KAAK,KAAK,EAAA,CAAG;EACpD,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO;EAC1C,MAAM,SAAS,OAAO,MAAM,KAAK,KAAK,0BAA0B,CAAC,GAAG,CAAC,GAAG,QAAQ,UAAU,UAAU,QAAQ,MAAM,EAAE,CAAC,GAAG,GAAG;GAAE,UAAU;GAAS,cAAc;GAAM,aAAa;EAAK,CAAC,GAAG,oBAAoB;EAC9M,MAAM,SAAS,KAAK,UAAU,YAAY,SAAS,OAAO,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC,GAAG,OAAO,CAAC;EACnH,IAAI;GACF,MAAM,MAAM,UAAU,OAAO,GAAG;GAChC,IAAI,MAAM,QAAQ,QAAQ,MAAM,IAAI,MAAM,YAAY,IAAI,gCAAgC,QAAQ,QAAQ;GAC1G,MAAM,SAAS,OAAO,MAAM,KAAK,KAAK,qBAAqB,OAAO,MAAM,MAAM,KAAK,GAAG,oBAAoB;GAC1G,IAAI,OAAO,aAAa,MAAM,MAAM,IAAI,MAAM,uEAAuE;GACrH,MAAM,QAAQ,OAAO,MAAM,KAAK,KAAK,gBAAgB,OAAO,MAAM,KAAK,GAAG,uBAAuB;GACjG,IAAI,MAAM,aAAa,MAAM,MAAM,IAAI,MAAM,4CAA4C;GACzF,OAAO,KAAK,MAAM,YAAY,SAAS,OAAO,OAAO,KAAK,MAAM,MAAM,uBAAuB,CAAC,GAAG,OAAO,GAAG,SAAS,QAAQ,SAAS,OAAO;EAC9I,SAAS,OAAO;GAEd,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;GACxC,MAAM;EACR;CACF;;CAGA,MAAc,IAAiB,SAA6B,QAAoB,SAAiB,SAA2C;EAC1I,MAAM,QAAQ,GAAe,MAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI;EACtI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,GAAG,MAAM,GAAG,MAAM,IAAI,MAAM,6DAA6D;EAEpH,MAAM,gBAAgB;GAAE,IAAI;IAAE,OAAO,IAAI,OAAO,UAAU,OAAO,QAAQ,aAAa,QAAQ,CAAC,CAAC,OAAO,QAAQ,OAAO,CAAC,CAAC;GAAG,QAAQ;IAAE;GAAkB;EAAE,EAAA,CAAG;EAC5J,IAAI,OAAO;EACX,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,eAAe,KAAK;GACzC,MAAM,SAAS,GAAG,UAAU,CAAC;GAC7B,IAAI,WAAW,KAAA,KAAa,OAAO,UAAU,IAAI,OAAO,OAAO,MAAM,MAAM,QAAQ,QAAQ,OAAO,OAAO,UAAU,EAAE;EACvH;EACA,IAAI,SAAS,QAAQ,QAAQ,MAAM,IAAI,MAAM,iFAAiF;EAC9H,MAAM,MAAM,OAAO,GAAG,GAAG;EACzB,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,KAAK,MAAM,QAAQ,QAAQ,MAAM,IAAI,MAAM,YAAY,IAAI,gCAAgC,QAAQ,QAAQ;EACnJ,MAAM,OAAO,GAAG;EAChB,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG,MAAM,IAAI,MAAM,oDAAoD;EAC1F,OAAO;GAAE;GAAM,SAAS,QAAQ;GAAS,QAAQ,QAAQ;GAAQ;GAAK;GAAS,QAAQ,IAAI,OAAO,GAAG,QAAQ,CAAC;EAAE;CAClH;CAEA,UAAkB,IAA6B;EAC7C,MAAM,MAAkB,CAAC;EACzB,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,cAAc,KAAK;GACxC,MAAM,QAAQ,GAAG,SAAS,CAAC;GAC3B,IAAI,CAAC,MAAM,QAAQ,MAAM,UAAU,KAAA,GAAW,MAAM,IAAI,MAAM,0DAA0D;GACxH,IAAI,KAAK;IAAE,MAAM,IAAI,OAAO,MAAM,IAAI;IAAG,MAAM,MAAM;GAAM,CAAC;EAC9D;EACA,OAAO;CACT;CAEA,MAAc,OAAO,WAAuB;EAC1C,IAAI,UAAU,QAAQ,MAAM,KAAK,KAAK,eAAe,MAAM,SAAS;CACtE;CAEA,SAAiB,UAA2B;EAC1C,IAAI,CAAC,cAAc,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,iDAAiD;EAC3G,MAAM,KAAK,YAAY,QAAQ,IAAI,OAAO,SAAS,MAAM,GAAG,OAAO;EACnE,IAAI,GAAG,OAAO,SAAS,MAAM,MAAM,IAAI,MAAM,6DAA6D;EAC1G,OAAO;CACT;CAEA,MAAM,UAAU,UAA4C;EAC1D,MAAM,KAAK,KAAK,SAAS,QAAQ;EACjC,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,KAAK,KAAK,sBAAsB,SAAS,MAAM;EAC9D,SAAS,OAAO;GACd,IAAI,EAAE,iBAAiB,mBAAmB,MAAM;GAChD,IAAI,MAAM,SAAS,SAAS,MAAM,SAAS,IAAI,yBAAyB,OAAO,SAAS;GACxF,MAAM,WAAW,MAAM,SAAS,SAAU;IAAC,IAAI;IAAc,IAAI;IAAiB,IAAI;GAAqB,CAAC,CAAc,SAAS,MAAM,QAAQ,CAAC;GAClJ,IAAI,CAAC,MAAM,YAAY,CAAC,UAAU,MAAM;GAIxC,MAAM,OAAO,WAAW,MAAM,KAAK,MAAM,SAAS,IAAI,IAAI,MAAM,KAAK,MAAM,SAAS,IAAI,CAAC,CAAC,YAAY,KAAA,CAAS;GAC/G,IAAI,MAAM;IACR,IAAI,CAAC,WAAW,WAAW,CAAC,CAAC,UAAU,MAAM,KAAK,OAAO,QAAQ,EAAA,CAAG,KAAK,GAAG,OAAO,SAAS;IAC5F,MAAM;GACR;GACA,IAAI,SAAS,OAAO,MAAM,KAAK,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;GACxE,MAAM,IAAI,kBAAkB,8BAA8B,MAAM,SAAS;EAC3E;EACA,IAAI,SAAS,SAAS,MAAM,MAAM,IAAI,MAAM,kEAAkE;EAC9G,OAAO,SAAS;CAClB;;CAGA,MAAc,MAAM,MAAgC;EAClD,IAAI;GAAE,MAAM,KAAK,KAAK,kBAAkB,IAAI;GAAG,OAAO;EAAM,SACrD,OAAO;GAAE,IAAI,iBAAiB,oBAAoB,MAAM,SAAS,SAAS,MAAM,SAAS,IAAI,wBAAwB,OAAO;GAAO,MAAM;EAAO;CACzJ;CAEA,MAAM,OAAO,UAAqD;EAChE,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,MAAM,IAAI,MAAM,sBAAsB;EACrE,IAAI;EACJ,IAAI;GACF,KAAK,OAAO,MAAM,KAAK,KAAK,kBAAkB,SAAS,IAAI,GAAG,aAAa;EAC7E,SAAS,OAAO;GACd,IAAI,iBAAiB,oBAAoB,MAAM,SAAS,SAAS,MAAM,SAAS,IAAI,wBAAwB,OAAO;IAAE,OAAO;IAAW,eAAe;GAAE;GACxJ,MAAM;EACR;EACA,MAAM,gBAAgB,OAAO,GAAG,kBAAkB,WAAW,GAAG,gBAAgB;EAChF,IAAI,gBAAgB,GAAG,OAAO;GAAE,OAAO;GAAa;EAAc;EAElE,IAAI,gBAAgB,GAAG,OAAO;GAAE,OAAO;GAAc,eAAe;EAAE;EACtE,IAAI,MAAM,QAAQ,GAAG,gBAAgB,KAAK,GAAG,iBAAiB,SAAS,GAAG,OAAO;GAAE,OAAO;GAAc,eAAe;EAAE;EACzH,IAAI;GACF,MAAM,KAAK,KAAK,mBAAmB,SAAS,IAAI;GAChD,OAAO;IAAE,OAAO;IAAW,eAAe;GAAE;EAC9C,SAAS,OAAO;GACd,IAAI,iBAAiB,oBAAoB,MAAM,SAAS,SAAS,MAAM,SAAS,IAAI,wBAAwB,OAAO;IAAE,OAAO;IAAW,eAAe;GAAE;GACxJ,MAAM;EACR;CACF;CAEA,MAAM,QAAQ,UAA0C;EACtD,MAAM,KAAK,OAAO,KAAK,UAAU,KAAK,SAAS,QAAQ,CAAC,CAAC;CAC3D;CAEA,MAAM,QAAQ,OAAqC;EACjD,MAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC;EAC9D,MAAM,UAAU,MAAM,KAAK,KAAK,oBAAoB,KAAK,OAAO,GAAG,IAAI;EACvE,IAAI,CAAC,MAAM,QAAQ,OAAO,GAAG,MAAM,IAAI,MAAM,uCAAuC;EACpF,MAAM,yBAAS,IAAI,IAAuB;EAE1C,KAAK,MAAM,OAAO,SAAsC;GACtD,IAAI,CAAC,OAAO,OAAO,IAAI,SAAS,YAAY,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,aAAa,UAAU;GAC/F,MAAM,KAAK,OAAO,IAAI,IAAI,IAAI,KAAK;IAAE,MAAM,IAAI;IAAM,QAAQ;IAAG,eAAe,OAAO,IAAI,kBAAkB,WAAW,KAAK,IAAI,GAAG,IAAI,aAAa,IAAI;GAAE;GAC1J,GAAG,UAAU,UAAU,IAAI,MAAM;GACjC,IAAI,IAAI,aAAa,UAAU,OAAO,IAAI,QAAQ,YAAY,GAAG,QAAQ,KAAA,GAAW,GAAG,MAAM,KAAK,IAAI,UAAU,IAAI,GAAG,CAAC;GACxH,IAAI,OAAO,IAAI,SAAS,UAAU,GAAG,YAAY,IAAI,OAAO;GAC5D,OAAO,OAAO,IAAI,IAAI;GACtB,OAAO,IAAI,IAAI,MAAM,EAAE;EACzB;EACA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,KAAK,IAAI,GAAG,KAAK,CAAC;CACnE;;CAGA,MAAM,SAAS,SAAuC;EACpD,MAAM,UAAU,MAAM,KAAK,KAAK,oBAAoB,KAAK,KAAK,GAAG,IAAI;EACrE,IAAI,CAAC,MAAM,QAAQ,OAAO,GAAG,MAAM,IAAI,MAAM,uCAAuC;EACpF,MAAM,yBAAS,IAAI,IAAuB;EAC1C,KAAK,MAAM,OAAO,SAAsC;GACtD,IAAI,CAAC,OAAO,IAAI,aAAa,aAAa,IAAI,YAAY,WAAW,OAAO,IAAI,SAAS,YAAY,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG;GAC3H,MAAM,KAAK,OAAO,IAAI,IAAI,IAAI,KAAK;IAAE,MAAM,IAAI;IAAM,QAAQ;IAAG,eAAe,OAAO,IAAI,kBAAkB,WAAW,KAAK,IAAI,GAAG,IAAI,aAAa,IAAI;GAAE;GAC1J,GAAG,UAAU,UAAU,IAAI,MAAM;GACjC,OAAO,OAAO,IAAI,IAAI;GACtB,OAAO,IAAI,IAAI,MAAM,EAAE;EACzB;EACA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ;CACtC;CAEA,MAAM,QAAuB;EAAE,KAAK,SAAS;CAAM;AACrD"}

package/dist/assets/bitcoindProvider-DGw3xBSa.js

@@ -0,0 +1,97 @@
+//#region ../browser/src/engine/paymentAdapters/providers/bitcoindProvider.ts
+/**
+* Bitcoin Core as the source picker lists it, and its settings. The client (`./bitcoind`) and btc-signer's
+* transaction code load when a wallet connects, not with the app.
+*/
+var WALLET_NAME = /^[A-Za-z0-9._-]{0,64}$/;
+/** `user:password` in the password field (the .cookie file's contents) when no user is given. */
+function credentials({ config, secrets }) {
+	const password = secrets.password ?? "";
+	const user = config.user?.trim() ?? "";
+	if (!user && password.includes(":")) {
+		const at = password.indexOf(":");
+		return {
+			user: password.slice(0, at),
+			password: password.slice(at + 1)
+		};
+	}
+	return {
+		user,
+		password
+	};
+}
+var bitcoindRpc = {
+	id: "bitcoind",
+	label: "Bitcoin Core",
+	kind: "onchain",
+	description: "A wallet on your own Bitcoin Core node, over its RPC. Your node holds the keys and signs. Needs the desktop app.",
+	networks: [
+		"bitcoin",
+		"testnet",
+		"signet",
+		"regtest"
+	],
+	platforms: ["desktop"],
+	experimental: true,
+	fields: [
+		{
+			name: "url",
+			label: "RPC address",
+			kind: "url",
+			placeholder: "http://127.0.0.1:8332",
+			defaults: {
+				mainnet: "http://127.0.0.1:8332",
+				testnet: "http://127.0.0.1:38332"
+			},
+			help: "Your node's rpcbind and rpcport: 8332 mainnet, 38332 signet, 48332 testnet4, 18443 regtest."
+		},
+		{
+			name: "wallet",
+			label: "Wallet name",
+			kind: "text",
+			optional: true,
+			placeholder: "ghostly",
+			help: "A wallet loaded in the node (bitcoin-cli listwallets). Empty: its default wallet."
+		},
+		{
+			name: "user",
+			label: "RPC user",
+			kind: "text",
+			optional: true,
+			help: "Leave empty to paste the .cookie file below."
+		},
+		{
+			name: "password",
+			label: "RPC password or cookie",
+			kind: "secret",
+			help: "rpcpassword, or the contents of the node's .cookie file (it changes when bitcoind restarts)."
+		}
+	],
+	validate(settings) {
+		const url = (() => {
+			try {
+				return new URL(settings.config.url?.trim() ?? "");
+			} catch {
+				return;
+			}
+		})();
+		if (!url || !["http:", "https:"].includes(url.protocol)) throw new Error("Enter the node's RPC address, like http://127.0.0.1:8332");
+		if (url.username || url.password) throw new Error("Put the RPC user and password in their own fields, not in the address");
+		if (url.search || url.hash) throw new Error("The RPC address cannot have a query or fragment");
+		if (!WALLET_NAME.test(settings.config.wallet?.trim() ?? "") || [".", ".."].includes(settings.config.wallet?.trim() ?? "")) throw new Error("A wallet name has only letters, digits, '-', '_' and '.'");
+		const { user, password } = credentials(settings);
+		if (!user || !password) throw new Error("Enter the RPC user and password, or paste the .cookie file");
+	},
+	async create(settings, host) {
+		const { BitcoindOnchain, tauriTransport } = await import("./bitcoind-CZchoh43.js");
+		return BitcoindOnchain.connect({
+			url: settings.config.url.trim(),
+			wallet: settings.config.wallet?.trim() ?? "",
+			...credentials(settings)
+		}, host.mode, tauriTransport(host.invoke), host.signal);
+	}
+};
+//#endregion
+export { credentials as n, bitcoindRpc as t };
+
+//# sourceMappingURL=bitcoindProvider-DGw3xBSa.js.map