@ghostlytools/cli 1.3.9 → 1.4.0

package/dist/assets/{backup-CTpFFQ-4.js.map → backup-BmBtta66.js.map}

@@ -1 +1 @@
-{"version":3,"file":"backup-CTpFFQ-4.js","names":["join","openEnvelope"],"sources":["../../../browser/src/backup/stream.ts","../../../browser/src/backup/light.ts","../../src/backup.ts"],"sourcesContent":["import { fromBase64Url, toBase64Url } from \"./codec\";\n\n/**\n * A backup written and read a piece at a time (WISP 05, envelope version 2), so a profile with years of files never\n * has to fit in memory. The file is one line of clear JSON (the header), then frames:\n *\n *   header line:  {\"format\":\"ghostly-backup\",\"version\":2,\"protection\":\"passphrase\"|\"none\",...}\\n\n *   frame:        kind (1 byte) | length (4 bytes, big endian) | body\n *\n * A frame carries one record: a piece of JSON (gzip or plain) or a piece of a file's bytes, at most `FRAME_BYTES`\n * of them. The last frame is the final marker; a file that ends without it was cut short and is refused.\n *\n * - `passphrase`: the key comes from the passphrase as in version 1 (PBKDF2-SHA256, 600 000 rounds, 16 byte salt).\n *   Every frame is sealed alone with AES-256-GCM: its nonce is the header's 7 random bytes, the frame's number\n *   (4 bytes) and its kind (1 byte), and the SHA-256 of the header line is its associated data. A frame changed,\n *   moved, dropped or retyped, a changed header, or a missing final marker fails to open.\n * - `none`: nothing is encrypted. A SHA-256 chain runs over the header line and every frame, and the final marker\n *   holds its last value, so a damaged or cut file is refused. It proves nothing about who made the file.\n */\nexport const FRAME_BYTES = 1024 * 1024;\n/** No frame is larger than this: a reader refuses one that says it is, before reading it. */\nconst MAX_FRAME_BYTES = 64 * 1024 * 1024;\n/** One piece of JSON, decompressed: past it the backup is refused, not read. */\nconst MAX_JSON_BYTES = 256 * 1024 * 1024;\nconst MAX_HEADER_BYTES = 4096;\nconst ITERATIONS = 600_000;\nconst TAG_BYTES = 16;\n\nconst KIND = { gzipJson: 1, json: 2, bytes: 3, final: 255 } as const;\n\n/**\n * The envelope version of a bundle that carries a device set (WISP 06 § Compatibility and rollout): an app from before\n * WISP 06 refuses it with \"This backup comes from a newer Ghostly\", rather than restoring a copy that stops nothing.\n * WISP 06 names it version 2, but WISP 05's streamed bundle took 2 first; every other bundle is still 2.\n */\nexport const DEVICE_SET_BACKUP_VERSION = 3;\n\nexport interface BackupHeader {\n  format: \"ghostly-backup\";\n  version: 2 | 3;\n  protection: \"passphrase\" | \"none\";\n  kdf?: { name: \"PBKDF2-SHA256\"; iterations: number; salt: string };\n  cipher?: { name: \"AES-256-GCM\"; nonce: string };\n  check?: { name: \"SHA-256-chain\" };\n}\n\n/** Where a backup is written: in order, a piece at a time. */\nexport interface BackupSink { write(bytes: Uint8Array): Promise<void> }\n/** Where a backup is read from: any range, so nothing is read before it is needed. */\nexport interface BackupSource { readonly size: number; read(offset: number, length: number): Promise<Uint8Array> }\n/** One record of a backup: JSON text, or a piece of the bytes of the file the JSON before it announced. */\nexport type BackupRecord = { json: string; bytes?: undefined } | { bytes: Uint8Array; json?: undefined };\n\n/** Thrown when the work was cancelled (`AbortSignal`): nothing is wrong with the backup. */\nexport class BackupCancelled extends Error {\n  constructor() { super(\"Cancelled\"); this.name = \"AbortError\"; }\n}\nexport const isCancelled = (error: unknown) => (error as { name?: string })?.name === \"AbortError\";\nconst check = (signal?: AbortSignal) => { if (signal?.aborted) throw new BackupCancelled(); };\n\n/** A Blob (a picked file) as a source, read in slices: never `stream()`, which WebKit fails on for some stored Blobs. */\nexport const blobSource = (blob: Blob): BackupSource => ({ size: blob.size, read: async (offset, length) => new Uint8Array(await blob.slice(offset, offset + length).arrayBuffer()) });\nexport const bytesSource = (bytes: Uint8Array): BackupSource => ({ size: bytes.length, read: async (offset, length) => bytes.subarray(offset, offset + length) });\n/** A sink that keeps what is written (tests, and a backup small enough to hand over whole). */\nexport function memorySink(): BackupSink & { bytes(): Uint8Array } {\n  const parts: Uint8Array[] = [];\n  return {\n    write: async (bytes) => { parts.push(bytes.slice()); },\n    bytes: () => { const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0)); let at = 0; for (const p of parts) { out.set(p, at); at += p.length; } return out; },\n  };\n}\n\nconst canCompress = () => typeof CompressionStream !== \"undefined\";\nasync function through(bytes: Uint8Array, stream: CompressionStream | DecompressionStream, limit = Infinity): Promise<Uint8Array> {\n  const reader = new Blob([bytes as BlobPart]).stream().pipeThrough(stream).getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (let next = await reader.read(); !next.done; next = await reader.read()) {\n    size += next.value.length;\n    if (size > limit) { await reader.cancel(); throw new Error(\"This backup is too large to restore\"); }\n    chunks.push(next.value);\n  }\n  if (chunks.length === 1) return chunks[0];\n  const out = new Uint8Array(size);\n  let at = 0;\n  for (const chunk of chunks) { out.set(chunk, at); at += chunk.length; }\n  return out;\n}\n\nasync function keyFrom(passphrase: string, salt: Uint8Array, iterations: number): Promise<CryptoKey> {\n  const material = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(passphrase), \"PBKDF2\", false, [\"deriveKey\"]);\n  return crypto.subtle.deriveKey({ name: \"PBKDF2\", hash: \"SHA-256\", salt: salt as BufferSource, iterations }, material, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nconst sha256 = async (...parts: Uint8Array[]) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", join(parts) as BufferSource));\nfunction join(parts: Uint8Array[]): Uint8Array {\n  if (parts.length === 1) return parts[0];\n  const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));\n  let at = 0;\n  for (const part of parts) { out.set(part, at); at += part.length; }\n  return out;\n}\nfunction prefix(kind: number, length: number): Uint8Array {\n  const out = new Uint8Array(5);\n  out[0] = kind;\n  new DataView(out.buffer).setUint32(1, length);\n  return out;\n}\nfunction nonce(base: Uint8Array, frame: number, kind: number): Uint8Array {\n  const out = new Uint8Array(12);\n  out.set(base, 0);\n  new DataView(out.buffer).setUint32(7, frame);\n  out[11] = kind;\n  return out;\n}\n\n/** Writes a backup: `json` and `bytes` in the order they are to be read, then `finish`. */\nexport class BackupWriter {\n  private frame = 0;\n  /** Bytes handed to the sink so far. */\n  written = 0;\n  private finished = false;\n  /** Set once the sink refused a frame: the error it gave, thrown again at every later write. */\n  private failed: { error: unknown } | null = null;\n\n  private constructor(private readonly sink: BackupSink, private readonly key: CryptoKey | null, private readonly base: Uint8Array, private chain: Uint8Array, private readonly signal?: AbortSignal) {}\n\n  /** `passphrase` null: a backup anyone can read (the caller has made sure that is what the person chose). */\n  static async start(sink: BackupSink, passphrase: string | null, signal?: AbortSignal, version: 2 | 3 = 2): Promise<BackupWriter> {\n    if (passphrase !== null && passphrase.length < 12) throw new Error(\"Use at least 12 characters for the backup passphrase\");\n    check(signal);\n    const salt = crypto.getRandomValues(new Uint8Array(16)), base = crypto.getRandomValues(new Uint8Array(7));\n    const header: BackupHeader = passphrase === null\n      ? { format: \"ghostly-backup\", version, protection: \"none\", check: { name: \"SHA-256-chain\" } }\n      : { format: \"ghostly-backup\", version, protection: \"passphrase\", kdf: { name: \"PBKDF2-SHA256\", iterations: ITERATIONS, salt: toBase64Url(salt) }, cipher: { name: \"AES-256-GCM\", nonce: toBase64Url(base) } };\n    const line = new TextEncoder().encode(`${JSON.stringify(header)}\\n`);\n    const key = passphrase === null ? null : await keyFrom(passphrase, salt, ITERATIONS);\n    const writer = new BackupWriter(sink, key, base, await sha256(line), signal);\n    await sink.write(line);\n    writer.written = line.length;\n    return writer;\n  }\n\n  private async put(kind: number, plain: Uint8Array): Promise<void> {\n    check(this.signal);\n    if (this.failed) throw this.failed.error;\n    if (this.finished) throw new Error(\"This backup is already finished\");\n    if (this.frame >= 0xffffffff) throw new Error(\"This backup is too large\");\n    // What a reader refuses is not written: found out now, not when the backup is needed.\n    if (plain.length > MAX_FRAME_BYTES) throw new Error(\"A record of this profile is too large for a backup\");\n    let out: Uint8Array;\n    if (this.key) {\n      // The header's digest is every frame's associated data: a frame of another backup, or under a changed header, fails.\n      const sealed = new Uint8Array(await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: nonce(this.base, this.frame, kind) as BufferSource, additionalData: this.chain as BufferSource }, this.key, plain as BufferSource));\n      out = join([prefix(kind, sealed.length), sealed]);\n    } else {\n      const head = prefix(kind, kind === KIND.final ? 32 : plain.length);\n      if (kind === KIND.final) out = join([head, this.chain]);\n      else { out = join([head, plain]); this.chain = await sha256(this.chain, out); }\n    }\n    this.frame += 1;\n    // A frame the sink did not take (no room left, say) is the end of this backup: every frame after it would be\n    // numbered past a gap, and the file would never open. Nothing more is written, whatever the caller does next.\n    try { await this.sink.write(out); } catch (error) { this.failed = { error }; throw error; }\n    this.written += out.length;\n  }\n\n  /** One piece of JSON, compressed where the platform can. */\n  async json(text: string): Promise<void> {\n    const plain = new TextEncoder().encode(text);\n    if (plain.length > MAX_JSON_BYTES) throw new Error(\"A record of this profile is too large for a backup\");\n    if (canCompress()) await this.put(KIND.gzipJson, await through(plain, new CompressionStream(\"gzip\")));\n    else await this.put(KIND.json, plain);\n  }\n\n  /** Bytes of the file the last JSON announced, cut into frames. */\n  async bytes(chunk: Uint8Array): Promise<void> {\n    for (let at = 0; at < chunk.length; at += FRAME_BYTES) await this.put(KIND.bytes, chunk.subarray(at, Math.min(chunk.length, at + FRAME_BYTES)));\n  }\n\n  /** The final marker: without it a reader refuses the backup. Resolves to the size of the whole backup. */\n  async finish(): Promise<number> {\n    await this.put(KIND.final, new Uint8Array());\n    this.finished = true;\n    return this.written;\n  }\n}\n\n/** The first line of a version 2 backup, or null when this is not one (version 1 is one JSON object with no line end). */\nexport async function readBackupHeader(source: BackupSource): Promise<{ header: BackupHeader; line: Uint8Array } | null> {\n  const start = await source.read(0, Math.min(MAX_HEADER_BYTES, source.size));\n  const end = start.indexOf(10);\n  if (end < 0) return null;\n  let header: BackupHeader;\n  try { header = JSON.parse(new TextDecoder().decode(start.subarray(0, end))) as BackupHeader; } catch { return null; }\n  if (header?.format !== \"ghostly-backup\" || typeof header.version !== \"number\" || header.version < 2) return null;\n  if (header.version !== 2 && header.version !== DEVICE_SET_BACKUP_VERSION) throw new Error(\"This backup comes from a newer Ghostly; update to restore it\");\n  if (header.protection === \"none\") {\n    if (header.check?.name !== \"SHA-256-chain\") throw new Error(\"Unsupported backup format\");\n  } else if (header.protection === \"passphrase\") {\n    if (header.kdf?.name !== \"PBKDF2-SHA256\" || !(header.kdf.iterations >= ITERATIONS) || header.kdf.iterations > 10_000_000 || header.cipher?.name !== \"AES-256-GCM\") throw new Error(\"Unsupported backup encryption\");\n  } else throw new Error(\"Unsupported backup format\");\n  return { header, line: start.slice(0, end + 1) };\n}\n\n/** How a backup is protected, read from its clear header without opening it: version 1 is always sealed. */\nexport async function backupProtection(source: BackupSource): Promise<\"passphrase\" | \"none\"> {\n  return (await readBackupHeader(source))?.header.protection ?? \"passphrase\";\n}\n\nconst DAMAGED = \"This backup is damaged: it was changed or cut short\";\n\n/** Reads a version 2 backup record by record. Nothing of a frame is handed out before it passed its check. */\nexport class BackupReader {\n  private frame = 0;\n  private at: number;\n  private block: Uint8Array = new Uint8Array();\n  private blockAt = 0;\n  private done = false;\n\n  private constructor(private readonly source: BackupSource, private readonly key: CryptoKey | null, private readonly base: Uint8Array, private chain: Uint8Array, start: number, private readonly signal?: AbortSignal) { this.at = start; }\n\n  get protection(): \"passphrase\" | \"none\" { return this.key ? \"passphrase\" : \"none\"; }\n\n  /** Null when `source` is not a version 2 backup. `passphrase` is needed, and used, only for a sealed one. */\n  static async open(source: BackupSource, passphrase?: string, signal?: AbortSignal): Promise<BackupReader | null> {\n    const found = await readBackupHeader(source);\n    if (!found) return null;\n    check(signal);\n    const { header, line } = found;\n    if (header.protection === \"none\") return new BackupReader(source, null, new Uint8Array(), await sha256(line), line.length, signal);\n    let key: CryptoKey, base: Uint8Array;\n    try {\n      base = fromBase64Url(header.cipher!.nonce);\n      if (base.length !== 7) throw new Error(\"nonce\");\n      key = await keyFrom(passphrase ?? \"\", fromBase64Url(header.kdf!.salt), header.kdf!.iterations);\n    } catch { throw new Error(\"Unsupported backup encryption\"); }\n    return new BackupReader(source, key, base, await sha256(line), line.length, signal);\n  }\n\n  /** Bytes of the source read so far (for progress). */\n  get position(): number { return this.at; }\n\n  /** `length` bytes at the reading point, through a read-ahead block so a source is asked a few times per megabyte, not per frame. */\n  private async take(length: number): Promise<Uint8Array> {\n    if (this.at + length > this.source.size) throw new Error(DAMAGED);\n    const from = this.at - this.blockAt;\n    if (from < 0 || from + length > this.block.length) {\n      this.block = await this.source.read(this.at, Math.min(this.source.size - this.at, Math.max(length, 4 * FRAME_BYTES)));\n      this.blockAt = this.at;\n      if (this.block.length < length) throw new Error(DAMAGED);\n    }\n    const out = this.block.subarray(this.at - this.blockAt, this.at - this.blockAt + length);\n    this.at += length;\n    return out;\n  }\n\n  /** The next record, or null at the end: only then is the backup known to be whole. */\n  async next(): Promise<BackupRecord | null> {\n    check(this.signal);\n    if (this.done) return null;\n    const head = await this.take(5);\n    const kind = head[0], length = new DataView(head.buffer, head.byteOffset, 5).getUint32(1);\n    if (length > MAX_FRAME_BYTES + TAG_BYTES || !Object.values(KIND).includes(kind as never)) throw new Error(DAMAGED);\n    const headCopy = head.slice();\n    const body = await this.take(length);\n    let plain: Uint8Array;\n    if (this.key) {\n      try {\n        plain = new Uint8Array(await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: nonce(this.base, this.frame, kind) as BufferSource, additionalData: this.chain as BufferSource }, this.key, body as BufferSource));\n      } catch { throw new Error(this.frame === 0 ? \"Wrong passphrase, or the backup was changed\" : DAMAGED); }\n    } else if (kind === KIND.final) {\n      if (body.length !== 32 || body.some((byte, i) => byte !== this.chain[i])) throw new Error(DAMAGED);\n      plain = new Uint8Array();\n    } else {\n      this.chain = await sha256(this.chain, headCopy, body);\n      plain = body.slice();\n    }\n    this.frame += 1;\n    if (kind === KIND.final) {\n      if (plain.length || this.at !== this.source.size) throw new Error(DAMAGED);\n      this.done = true;\n      return null;\n    }\n    if (kind === KIND.bytes) return { bytes: plain };\n    const text = kind === KIND.gzipJson ? await through(plain, new DecompressionStream(\"gzip\"), MAX_JSON_BYTES).catch((error: unknown) => { throw error instanceof Error && error.message.startsWith(\"This backup is too large\") ? error : new Error(DAMAGED); }) : plain;\n    return { json: new TextDecoder().decode(text) };\n  }\n}\n","/**\n * A light backup (WISP 05 § Light backups): everything of a profile but the bytes of its larger files. Their messages\n * and records stay; after a restore they show as not in this backup.\n *\n * The cut: a file of at most 1 MiB keeps its bytes (a short clip, a sticker, a screenshot, a document), and so does a\n * voice message of at most 4 MiB. Voice messages are part of the conversation, and the longest one the apps record\n * (15 minutes at 32 kbit/s, `VOICE_LIMITS`) is about 3.6 MB, so every recorded one stays. Photos from a camera\n * (usually 2 to 8 MB), videos and large files are what is left out.\n */\nexport const LIGHT_FILE_BYTES = 1024 * 1024;\nexport const LIGHT_VOICE_BYTES = 4 * 1024 * 1024;\n\n/** What a light bundle says of itself in its first record: its cut, and what it left out. */\nexport interface LightMark {\n  maxFileBytes: number;\n  maxVoiceBytes: number;\n  /** How many files were left out, and their bytes. */\n  files: number;\n  bytes: number;\n}\n\n/** Whether a file of this size keeps its bytes in a light backup. */\nexport const keptInLight = (size: number, voice: boolean): boolean => size <= (voice ? LIGHT_VOICE_BYTES : LIGHT_FILE_BYTES);\n","import { existsSync } from \"node:fs\";\nimport { link, mkdir, open, readdir, readFile, rename, rm, stat, writeFile, type FileHandle } from \"node:fs/promises\";\nimport { basename, dirname, join, relative, resolve, sep } from \"node:path\";\nimport { open as openEnvelope } from \"@ghostly/browser/backup/envelope\";\nimport { BackupReader, BackupWriter, FRAME_BYTES, readBackupHeader, type BackupSource } from \"@ghostly/browser/backup/stream\";\nimport { LIGHT_FILE_BYTES, LIGHT_VOICE_BYTES, keptInLight, type LightMark } from \"@ghostly/browser/backup/light\";\nimport { fileStore } from \"@ghostly/browser/shared/idb\";\nimport { bool, str, type Method } from \"./apiKit\";\nimport { CliError } from \"./errors\";\nimport { RESTORED_MARK, profileExists, profilePaths, type ProfilePaths } from \"./profiles\";\n\n/**\n * A headless profile's backup: the WISP 05 envelope around the profile itself, its store and its files, written and\n * read a piece at a time (envelope version 2), so a profile with large files never has to fit in memory. It restores\n * into a new headless profile; the app's own backups are made from its page's storage and are not this format\n * (WISP 1100 § Parity). A backup an older CLI made (version 1: everything in one sealed JSON document) still restores.\n */\nconst FORMAT = \"ghostly-cli-profile/2\";\nconst FORMAT_1 = \"ghostly-cli-profile/1\";\n\n/** Version 1: the store and every file as base64 in one document. */\ninterface Payload1 { format: typeof FORMAT_1; createdAt: number; store: string; files: { path: string; data: string }[] }\n/** Version 2, in order: the head, then each file (the store first) followed by its bytes, then the end. */\n/**\n * `light`: a light backup (WISP 05 § Light backups) left the bytes of these files out. Their records are in the store;\n * the restored profile marks them when it first starts (`markLeftOutFiles`).\n */\ntype BackupRecord =\n  | { t: \"profile\"; format: typeof FORMAT; createdAt: number; files: number; bytes: number; light?: LightMark & { ids: string[] } }\n  | { t: \"file\"; kind: \"store\" | \"file\"; path?: string; size: number }\n  | { t: \"end\"; files: number; bytes: number };\n\nasync function walk(root: string, dir = root, out: string[] = []): Promise<string[]> {\n  let names: string[];\n  try { names = await readdir(dir); } catch { return out; }\n  for (const name of names) {\n    const path = join(dir, name);\n    if ((await stat(path)).isDirectory()) await walk(root, path, out);\n    else out.push(relative(root, path));\n  }\n  return out;\n}\n\n/** A file's first `size` bytes into the backup, a frame at a time. One that got shorter meanwhile stops the backup. */\nasync function copyIn(writer: BackupWriter, path: string, size: number): Promise<void> {\n  const handle = await open(path, \"r\");\n  try {\n    const buffer = new Uint8Array(FRAME_BYTES);\n    for (let at = 0; at < size;) {\n      const { bytesRead } = await handle.read(buffer, 0, Math.min(FRAME_BYTES, size - at), at);\n      if (!bytesRead) throw new CliError(\"unavailable\", `${path} changed while it was backed up: try again`);\n      await writer.bytes(buffer.subarray(0, bytesRead));\n      at += bytesRead;\n    }\n  } finally { await handle.close(); }\n}\n\nexport const BACKUP_METHODS: Record<string, Method> = {\n  /**\n   * Writes the backup to `path` (resolved by the command), sealed with `passphrase`, or not encrypted when\n   * `noPassphrase` is true: one of the two, never a guess. The store is written whole for it, every value inline. It is\n   * written beside `path` and only takes its name once it is complete: a backup that fails leaves no file. `light`:\n   * the files over the cut (`keptInLight`) are left out, their records kept.\n   */\n  async \"profile.backup\"(ctx, params) {\n    const path = resolve(str(params, \"path\", true));\n    // `refused`, not `confirm` (exit 5, \"pass --force\"): backup takes no flag that writes over a file.\n    if (existsSync(path)) throw new CliError(\"refused\", `${path} exists: choose another name`);\n    const passphrase = str(params, \"passphrase\"), unsealed = bool(params, \"noPassphrase\");\n    if (!passphrase && !unsealed) throw new CliError(\"bad_request\", \"passphrase is required (or noPassphrase: true for a backup anyone can read)\");\n    if (passphrase && unsealed) throw new CliError(\"bad_request\", \"Give a passphrase or noPassphrase, not both\");\n    // The folder it goes in, checked first: a missing one is named, not the file written beside `path`.\n    const folder = dirname(path);\n    if (!(await stat(folder)).isDirectory()) throw new CliError(\"not_found\", `No such file or folder: ${folder}`);\n    const paths = ctx.runtime.paths;\n    // The store as one snapshot with every value in it (the messages too, which the profile keeps in rows.db): a backup\n    // any ghostly restores, this one or an older one.\n    const store = join(paths.db, `backup-store-${process.pid}.bin`);\n    await ctx.runtime.store.exportSnapshot(store);\n    const light = bool(params, \"light\");\n    const all = await Promise.all((await walk(paths.files)).map(async (name) => ({ name, size: (await stat(join(paths.files, name))).size })));\n    // A file's name is its id: only one that could be a voice message under its larger cut is looked up.\n    const kept = async (file: { name: string; size: number }) => keptInLight(file.size, false) || (file.size <= LIGHT_VOICE_BYTES && !!(await fileStore.get(basename(file.name)).catch(() => undefined))?.metadata?.voice);\n    const files: typeof all = [], leftOut: typeof all = [];\n    for (const file of all) (!light || (await kept(file)) ? files : leftOut).push(file);\n    const storeSize = (await stat(store)).size, bytes = files.reduce((sum, file) => sum + file.size, 0);\n    const leftOutBytes = leftOut.reduce((sum, file) => sum + file.size, 0);\n\n    const partial = `${path}.partial-${process.pid}`;\n    let out: FileHandle | null = null;\n    try {\n      out = await openFile(partial);\n      const handle = out;\n      let writer: BackupWriter;\n      try { writer = await BackupWriter.start({ write: async (chunk) => { await handle.write(chunk); } }, unsealed ? null : passphrase!); } catch (error) { throw new CliError(\"bad_request\", error instanceof Error ? error.message : String(error)); }\n      const put = (record: BackupRecord) => writer.json(JSON.stringify(record));\n      await put({ t: \"profile\", format: FORMAT, createdAt: Date.now(), files: files.length, bytes, ...(light && { light: { maxFileBytes: LIGHT_FILE_BYTES, maxVoiceBytes: LIGHT_VOICE_BYTES, files: leftOut.length, bytes: leftOutBytes, ids: leftOut.map((file) => basename(file.name)) } }) });\n      await put({ t: \"file\", kind: \"store\", size: storeSize });\n      await copyIn(writer, store, storeSize);\n      for (const file of files) {\n        await put({ t: \"file\", kind: \"file\", path: file.name.split(sep).join(\"/\"), size: file.size });\n        await copyIn(writer, join(paths.files, file.name), file.size);\n      }\n      await put({ t: \"end\", files: files.length, bytes });\n      const written = await writer.finish();\n      await handle.sync();\n      await handle.close();\n      out = null;\n      // Its name only now, and never over a file that appeared meanwhile.\n      try { await link(partial, path); } catch (error) { throw (error as NodeJS.ErrnoException).code === \"EEXIST\" ? new CliError(\"refused\", `${path} exists: choose another name`) : error; }\n      return { path, bytes: written, files: files.length, protection: unsealed ? \"none\" : \"passphrase\", ...(light && { light: true, leftOut: leftOut.length, leftOutBytes }) };\n    } finally {\n      await out?.close().catch(() => {});\n      await rm(partial, { force: true });\n      await rm(store, { force: true });\n    }\n  },\n};\n\nasync function openFile(path: string): Promise<FileHandle> {\n  try { return await open(path, \"wx\", 0o600); } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"EEXIST\") { await rm(path, { force: true }); return open(path, \"wx\", 0o600); }\n    throw error;\n  }\n}\n\n/** A file on disk as a backup's source: read in ranges, never whole. A folder opens, and is refused as one here. */\nasync function fileSource(path: string): Promise<BackupSource & { close(): Promise<void> }> {\n  const handle = await open(path, \"r\");\n  const found = await handle.stat();\n  if (found.isDirectory()) { await handle.close(); throw new CliError(\"bad_request\", `${path} is a folder: name a file`); }\n  const { size } = found;\n  return {\n    size,\n    read: async (offset, length) => {\n      const buffer = new Uint8Array(Math.max(0, Math.min(length, size - offset)));\n      let got = 0;\n      while (got < buffer.length) { const { bytesRead } = await handle.read(buffer, got, buffer.length - got, offset + got); if (!bytesRead) break; got += bytesRead; }\n      return buffer.subarray(0, got);\n    },\n    close: () => handle.close(),\n  };\n}\n\n/** A version 1 backup is one JSON object, and `seal` writes its format first. */\nconst VERSION_1_START = /^\\s*\\{\\s*\"format\"\\s*:\\s*\"ghostly-backup\"/;\n\n/**\n * Whether the backup at `file` is sealed with a passphrase or was made without one, read from its clear header.\n * A file that is neither version is refused here, before any passphrase is asked for: the path is what is wrong.\n */\nexport async function backupFileProtection(file: string): Promise<\"passphrase\" | \"none\"> {\n  const source = await fileSource(file);\n  try {\n    let found: Awaited<ReturnType<typeof readBackupHeader>>;\n    try { found = await readBackupHeader(source); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n    if (found) return found.header.protection;\n    if (!VERSION_1_START.test(new TextDecoder().decode(await source.read(0, 256)))) throw new CliError(\"refused\", \"This is not a Ghostly backup\");\n    return \"passphrase\";\n  } finally { await source.close(); }\n}\n\n/** Where a path named by a backup lands inside the new profile's files folder; never outside it. */\nfunction inside(root: string, path: unknown): string {\n  const target = typeof path === \"string\" && path ? resolve(root, path) : \"\";\n  if (!target.startsWith(resolve(root) + sep)) throw new CliError(\"refused\", \"The backup names a file outside its folder\");\n  return target;\n}\n\n/** While a restore writes it, the profile's folder is not a profile: no profile name starts with a dot (`listProfiles`). */\nconst RESTORING = /^\\.restoring-(.+)-(\\d+)$/;\n\n/**\n * The folder a restore writes into, beside the profiles: it takes the profile's name only once everything is in it,\n * so a restore that is stopped at any moment (Ctrl-C, a kill, the power) leaves no profile, whole or half-made.\n * What an earlier restore that was stopped left behind is removed here, once the process that made it is gone.\n */\nasync function restoringFolder(home: string, name: string): Promise<ProfilePaths> {\n  const root = join(home, \"profiles\");\n  await mkdir(root, { recursive: true, mode: 0o700 });\n  for (const entry of await readdir(root)) {\n    const pid = Number(RESTORING.exec(entry)?.[2]);\n    if (!pid) continue;\n    let alive = pid === process.pid;\n    if (!alive) try { process.kill(pid, 0); alive = true; } catch (error) { alive = (error as NodeJS.ErrnoException).code === \"EPERM\"; }\n    if (!alive) await rm(join(root, entry), { recursive: true, force: true });\n  }\n  const dir = join(root, `.restoring-${name}-${process.pid}`);\n  await rm(dir, { recursive: true, force: true });\n  await mkdir(dir, { mode: 0o700 });\n  return { ...profilePaths(home, name), dir, db: join(dir, \"db\"), files: join(dir, \"files\") };\n}\n\n/**\n * The folder is whole: marked as a restored copy (`RESTORED_MARK`, which names the files a light backup left out),\n * then given the profile's name. Never over a profile.\n */\nasync function finishRestore(home: string, name: string, work: ProfilePaths, leftOut: string[] = []): Promise<ProfilePaths> {\n  const paths = profilePaths(home, name);\n  await writeFile(join(work.dir, RESTORED_MARK), leftOut.length ? JSON.stringify({ leftOut }) : \"\", { mode: 0o600 });\n  if (existsSync(paths.dir)) throw new CliError(\"refused\", `Profile ${name} exists: restore into a new name`);\n  await rename(work.dir, paths.dir);\n  return paths;\n}\n\n/**\n * Opens the backup at `file` into a new profile (never over an existing one), with its passphrase when it has one.\n * Runs with no engine: nothing is open yet. A backup that is refused, damaged or cut short leaves no profile behind,\n * and neither does a restore that is stopped while it runs (`restoringFolder`). The profile is marked as a restored\n * copy: its engine, the first time it starts, treats the money in it as a restore does (`RESTORED_MARK`).\n */\nexport async function restoreProfile(home: string, name: string, file: string, passphrase?: string): Promise<ProfilePaths> {\n  if (profileExists(home, name)) throw new CliError(\"refused\", `Profile ${name} exists: restore into a new name`);\n  const source = await fileSource(file);\n  let work: ProfilePaths | null = null;\n  try {\n    let reader: BackupReader | null;\n    try { reader = await BackupReader.open(source, passphrase); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n    if (!reader) {\n      const payload = await readWhole(file, passphrase ?? \"\");\n      work = await restoringFolder(home, name);\n      await writeWhole(work, payload);\n      return await finishRestore(home, name, work);\n    }\n    const next = async () => { try { return await reader.next(); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); } };\n    const parse = (json: string) => { try { return JSON.parse(json) as BackupRecord; } catch { throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); } };\n\n    // The first record is read (and with it the passphrase checked) before any folder is made.\n    const first = await next();\n    const head = first?.json === undefined ? null : parse(first.json);\n    if (head?.t !== \"profile\" || head.format !== FORMAT) throw new CliError(\"refused\", \"This backup is not a headless Ghostly profile\");\n    const leftOut = Array.isArray(head.light?.ids) ? head.light.ids.filter((id): id is string => typeof id === \"string\") : [];\n    work = await restoringFolder(home, name);\n    const paths = work;\n    await mkdir(paths.db, { recursive: true, mode: 0o700 });\n    let out: { handle: FileHandle; left: number } | null = null, files = 0, bytes = 0, ended = false, stored = false;\n    try {\n      for (let record = await next(); record; record = await next()) {\n        if (ended) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n        if (record.bytes) {\n          if (!out || record.bytes.length > out.left) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n          await out.handle.write(record.bytes);\n          out.left -= record.bytes.length;\n          continue;\n        }\n        if (out) { if (out.left) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); await out.handle.close(); out = null; }\n        const value = parse(record.json);\n        if (value.t === \"end\") { ended = value.files === files && value.bytes === bytes; if (!ended) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); continue; }\n        if (value.t !== \"file\" || !Number.isSafeInteger(value.size) || value.size < 0) continue;\n        let target: string;\n        if (value.kind === \"store\") { target = join(paths.db, \"snapshot.bin\"); stored = true; }\n        else { target = inside(paths.files, value.path); await mkdir(dirname(target), { recursive: true, mode: 0o700 }); files += 1; bytes += value.size; }\n        out = { handle: await open(target, \"wx\", 0o600), left: value.size };\n      }\n      if (out || !ended || !stored) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n    } finally { await out?.handle.close().catch(() => {}); }\n    return await finishRestore(home, name, work, leftOut);\n  } catch (error) {\n    if (work) await rm(work.dir, { recursive: true, force: true });\n    throw error;\n  } finally {\n    await source.close();\n  }\n}\n\n/** A version 1 backup: one sealed JSON document, read whole. */\nasync function readWhole(file: string, passphrase: string): Promise<Payload1> {\n  let payload: Payload1;\n  try { payload = JSON.parse(await openEnvelope(await readFile(file, \"utf8\"), passphrase)) as Payload1; } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n  if (payload?.format !== FORMAT_1 || typeof payload.store !== \"string\" || !Array.isArray(payload.files)) throw new CliError(\"refused\", \"This backup is not a headless Ghostly profile\");\n  return payload;\n}\n\nasync function writeWhole(paths: ProfilePaths, payload: Payload1): Promise<void> {\n  await mkdir(paths.db, { recursive: true, mode: 0o700 });\n  await writeFile(join(paths.db, \"snapshot.bin\"), Buffer.from(payload.store, \"base64\"), { mode: 0o600 });\n  for (const entry of payload.files) {\n    const target = inside(paths.files, entry.path);\n    await mkdir(dirname(target), { recursive: true, mode: 0o700 });\n    await writeFile(target, Buffer.from(entry.data, \"base64\"), { mode: 0o600 });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,IAAa,cAAc;;AAE3B,IAAM,kBAAkB;;AAExB,IAAM,iBAAiB;AACvB,IAAM,mBAAmB;AACzB,IAAM,aAAa;AAGnB,IAAM,OAAO;CAAE,UAAU;CAAG,MAAM;CAAG,OAAO;CAAG,OAAO;AAAI;;AA0B1D,IAAa,kBAAb,cAAqC,MAAM;CACzC,cAAc;EAAE,MAAM,WAAW;EAAG,KAAK,OAAO;CAAc;AAChE;AAEA,IAAM,SAAS,WAAyB;CAAE,IAAI,QAAQ,SAAS,MAAM,IAAI,gBAAgB;AAAG;AAc5F,IAAM,oBAAoB,OAAO,sBAAsB;AACvD,eAAe,QAAQ,OAAmB,QAAiD,QAAQ,UAA+B;CAChI,MAAM,SAAS,IAAI,KAAK,CAAC,KAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU;CACpF,MAAM,SAAuB,CAAC;CAC9B,IAAI,OAAO;CACX,KAAK,IAAI,OAAO,MAAM,OAAO,KAAK,GAAG,CAAC,KAAK,MAAM,OAAO,MAAM,OAAO,KAAK,GAAG;EAC3E,QAAQ,KAAK,MAAM;EACnB,IAAI,OAAO,OAAO;GAAE,MAAM,OAAO,OAAO;GAAG,MAAM,IAAI,MAAM,qCAAqC;EAAG;EACnG,OAAO,KAAK,KAAK,KAAK;CACxB;CACA,IAAI,OAAO,WAAW,GAAG,OAAO,OAAO;CACvC,MAAM,MAAM,IAAI,WAAW,IAAI;CAC/B,IAAI,KAAK;CACT,KAAK,MAAM,SAAS,QAAQ;EAAE,IAAI,IAAI,OAAO,EAAE;EAAG,MAAM,MAAM;CAAQ;CACtE,OAAO;AACT;AAEA,eAAe,QAAQ,YAAoB,MAAkB,YAAwC;CACnG,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;CAC1H,OAAO,OAAO,OAAO,UAAU;EAAE,MAAM;EAAU,MAAM;EAAiB;EAAsB;CAAW,GAAG,UAAU;EAAE,MAAM;EAAW,QAAQ;CAAI,GAAG,OAAO,CAAC,WAAW,SAAS,CAAC;AACvL;AACA,IAAM,SAAS,OAAO,GAAG,UAAwB,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,WAAWA,OAAK,KAAK,CAAiB,CAAC;AAClI,SAASA,OAAK,OAAiC;CAC7C,IAAI,MAAM,WAAW,GAAG,OAAO,MAAM;CACrC,MAAM,MAAM,IAAI,WAAW,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC,CAAC;CAClE,IAAI,KAAK;CACT,KAAK,MAAM,QAAQ,OAAO;EAAE,IAAI,IAAI,MAAM,EAAE;EAAG,MAAM,KAAK;CAAQ;CAClE,OAAO;AACT;AACA,SAAS,OAAO,MAAc,QAA4B;CACxD,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,KAAK;CACT,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,MAAM;CAC5C,OAAO;AACT;AACA,SAAS,MAAM,MAAkB,OAAe,MAA0B;CACxE,MAAM,sBAAM,IAAI,WAAW,EAAE;CAC7B,IAAI,IAAI,MAAM,CAAC;CACf,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK;CAC3C,IAAI,MAAM;CACV,OAAO;AACT;;AAGA,IAAa,eAAb,MAAa,aAAa;CAQa;CAAmC;CAAwC;CAA0B;CAAoC;CAP9K,QAAgB;;CAEhB,UAAU;CACV,WAAmB;;CAEnB,SAA4C;CAE5C,YAAoB,MAAmC,KAAwC,MAAmC,OAA2B,QAAuC;EAA/J,KAAA,OAAA;EAAmC,KAAA,MAAA;EAAwC,KAAA,OAAA;EAA0B,KAAA,QAAA;EAAoC,KAAA,SAAA;CAAuB;;CAGrM,aAAa,MAAM,MAAkB,YAA2B,QAAsB,UAAiB,GAA0B;EAC/H,IAAI,eAAe,QAAQ,WAAW,SAAS,IAAI,MAAM,IAAI,MAAM,sDAAsD;EACzH,MAAM,MAAM;EACZ,MAAM,OAAO,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC,GAAG,OAAO,OAAO,gCAAgB,IAAI,WAAW,CAAC,CAAC;EACxG,MAAM,SAAuB,eAAe,OACxC;GAAE,QAAQ;GAAkB;GAAS,YAAY;GAAQ,OAAO,EAAE,MAAM,gBAAgB;EAAE,IAC1F;GAAE,QAAQ;GAAkB;GAAS,YAAY;GAAc,KAAK;IAAE,MAAM;IAAiB,YAAY;IAAY,MAAM,YAAY,IAAI;GAAE;GAAG,QAAQ;IAAE,MAAM;IAAe,OAAO,YAAY,IAAI;GAAE;EAAE;EAC9M,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;EACnE,MAAM,MAAM,eAAe,OAAO,OAAO,MAAM,QAAQ,YAAY,MAAM,UAAU;EACnF,MAAM,SAAS,IAAI,aAAa,MAAM,KAAK,MAAM,MAAM,OAAO,IAAI,GAAG,MAAM;EAC3E,MAAM,KAAK,MAAM,IAAI;EACrB,OAAO,UAAU,KAAK;EACtB,OAAO;CACT;CAEA,MAAc,IAAI,MAAc,OAAkC;EAChE,MAAM,KAAK,MAAM;EACjB,IAAI,KAAK,QAAQ,MAAM,KAAK,OAAO;EACnC,IAAI,KAAK,UAAU,MAAM,IAAI,MAAM,iCAAiC;EACpE,IAAI,KAAK,SAAS,YAAY,MAAM,IAAI,MAAM,0BAA0B;EAExE,IAAI,MAAM,SAAS,iBAAiB,MAAM,IAAI,MAAM,oDAAoD;EACxG,IAAI;EACJ,IAAI,KAAK,KAAK;GAEZ,MAAM,SAAS,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;IAAE,MAAM;IAAW,IAAI,MAAM,KAAK,MAAM,KAAK,OAAO,IAAI;IAAmB,gBAAgB,KAAK;GAAsB,GAAG,KAAK,KAAK,KAAqB,CAAC;GACnN,MAAMA,OAAK,CAAC,OAAO,MAAM,OAAO,MAAM,GAAG,MAAM,CAAC;EAClD,OAAO;GACL,MAAM,OAAO,OAAO,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,MAAM;GACjE,IAAI,SAAS,KAAK,OAAO,MAAMA,OAAK,CAAC,MAAM,KAAK,KAAK,CAAC;QACjD;IAAE,MAAMA,OAAK,CAAC,MAAM,KAAK,CAAC;IAAG,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,GAAG;GAAG;EAChF;EACA,KAAK,SAAS;EAGd,IAAI;GAAE,MAAM,KAAK,KAAK,MAAM,GAAG;EAAG,SAAS,OAAO;GAAE,KAAK,SAAS,EAAE,MAAM;GAAG,MAAM;EAAO;EAC1F,KAAK,WAAW,IAAI;CACtB;;CAGA,MAAM,KAAK,MAA6B;EACtC,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI;EAC3C,IAAI,MAAM,SAAS,gBAAgB,MAAM,IAAI,MAAM,oDAAoD;EACvG,IAAI,YAAY,GAAG,MAAM,KAAK,IAAI,KAAK,UAAU,MAAM,QAAQ,OAAO,IAAI,kBAAkB,MAAM,CAAC,CAAC;OAC/F,MAAM,KAAK,IAAI,KAAK,MAAM,KAAK;CACtC;;CAGA,MAAM,MAAM,OAAkC;EAC5C,KAAK,IAAI,KAAK,GAAG,KAAK,MAAM,QAAQ,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,OAAO,MAAM,SAAS,IAAI,KAAK,IAAI,MAAM,QAAQ,KAAK,WAAW,CAAC,CAAC;CAChJ;;CAGA,MAAM,SAA0B;EAC9B,MAAM,KAAK,IAAI,KAAK,uBAAO,IAAI,WAAW,CAAC;EAC3C,KAAK,WAAW;EAChB,OAAO,KAAK;CACd;AACF;;AAGA,eAAsB,iBAAiB,QAAkF;CACvH,MAAM,QAAQ,MAAM,OAAO,KAAK,GAAG,KAAK,IAAI,kBAAkB,OAAO,IAAI,CAAC;CAC1E,MAAM,MAAM,MAAM,QAAQ,EAAE;CAC5B,IAAI,MAAM,GAAG,OAAO;CACpB,IAAI;CACJ,IAAI;EAAE,SAAS,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC;CAAmB,QAAQ;EAAE,OAAO;CAAM;CACpH,IAAI,QAAQ,WAAW,oBAAoB,OAAO,OAAO,YAAY,YAAY,OAAO,UAAU,GAAG,OAAO;CAC5G,IAAI,OAAO,YAAY,KAAK,OAAO,YAAA,GAAuC,MAAM,IAAI,MAAM,8DAA8D;CACxJ,IAAI,OAAO,eAAe,QACpB;MAAA,OAAO,OAAO,SAAS,iBAAiB,MAAM,IAAI,MAAM,2BAA2B;CAAA,OAClF,IAAI,OAAO,eAAe,cAC3B;MAAA,OAAO,KAAK,SAAS,mBAAmB,EAAE,OAAO,IAAI,cAAc,eAAe,OAAO,IAAI,aAAa,OAAc,OAAO,QAAQ,SAAS,eAAe,MAAM,IAAI,MAAM,+BAA+B;CAAA,OAC7M,MAAM,IAAI,MAAM,2BAA2B;CAClD,OAAO;EAAE;EAAQ,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;CAAE;AACjD;AAOA,IAAM,UAAU;;AAGhB,IAAa,eAAb,MAAa,aAAa;CAOa;CAAuC;CAAwC;CAA0B;CAAmD;CANjM,QAAgB;CAChB;CACA,wBAA4B,IAAI,WAAW;CAC3C,UAAkB;CAClB,OAAe;CAEf,YAAoB,QAAuC,KAAwC,MAAmC,OAA2B,OAAe,QAAuC;EAAlL,KAAA,SAAA;EAAuC,KAAA,MAAA;EAAwC,KAAA,OAAA;EAA0B,KAAA,QAAA;EAAmD,KAAA,SAAA;EAAwB,KAAK,KAAK;CAAO;CAE1O,IAAI,aAAoC;EAAE,OAAO,KAAK,MAAM,eAAe;CAAQ;;CAGnF,aAAa,KAAK,QAAsB,YAAqB,QAAoD;EAC/G,MAAM,QAAQ,MAAM,iBAAiB,MAAM;EAC3C,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,MAAM;EACZ,MAAM,EAAE,QAAQ,SAAS;EACzB,IAAI,OAAO,eAAe,QAAQ,OAAO,IAAI,aAAa,QAAQ,sBAAM,IAAI,WAAW,GAAG,MAAM,OAAO,IAAI,GAAG,KAAK,QAAQ,MAAM;EACjI,IAAI,KAAgB;EACpB,IAAI;GACF,OAAO,cAAc,OAAO,OAAQ,KAAK;GACzC,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,OAAO;GAC9C,MAAM,MAAM,QAAQ,cAAc,IAAI,cAAc,OAAO,IAAK,IAAI,GAAG,OAAO,IAAK,UAAU;EAC/F,QAAQ;GAAE,MAAM,IAAI,MAAM,+BAA+B;EAAG;EAC5D,OAAO,IAAI,aAAa,QAAQ,KAAK,MAAM,MAAM,OAAO,IAAI,GAAG,KAAK,QAAQ,MAAM;CACpF;;CAGA,IAAI,WAAmB;EAAE,OAAO,KAAK;CAAI;;CAGzC,MAAc,KAAK,QAAqC;EACtD,IAAI,KAAK,KAAK,SAAS,KAAK,OAAO,MAAM,MAAM,IAAI,MAAM,OAAO;EAChE,MAAM,OAAO,KAAK,KAAK,KAAK;EAC5B,IAAI,OAAO,KAAK,OAAO,SAAS,KAAK,MAAM,QAAQ;GACjD,KAAK,QAAQ,MAAM,KAAK,OAAO,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,OAAO,OAAO,KAAK,IAAI,KAAK,IAAI,QAAQ,IAAI,WAAW,CAAC,CAAC;GACpH,KAAK,UAAU,KAAK;GACpB,IAAI,KAAK,MAAM,SAAS,QAAQ,MAAM,IAAI,MAAM,OAAO;EACzD;EACA,MAAM,MAAM,KAAK,MAAM,SAAS,KAAK,KAAK,KAAK,SAAS,KAAK,KAAK,KAAK,UAAU,MAAM;EACvF,KAAK,MAAM;EACX,OAAO;CACT;;CAGA,MAAM,OAAqC;EACzC,MAAM,KAAK,MAAM;EACjB,IAAI,KAAK,MAAM,OAAO;EACtB,MAAM,OAAO,MAAM,KAAK,KAAK,CAAC;EAC9B,MAAM,OAAO,KAAK,IAAI,SAAS,IAAI,SAAS,KAAK,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;EACxF,IAAI,SAAS,YAA+B,CAAC,OAAO,OAAO,IAAI,CAAC,CAAC,SAAS,IAAa,GAAG,MAAM,IAAI,MAAM,OAAO;EACjH,MAAM,WAAW,KAAK,MAAM;EAC5B,MAAM,OAAO,MAAM,KAAK,KAAK,MAAM;EACnC,IAAI;EACJ,IAAI,KAAK,KACP,IAAI;GACF,QAAQ,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;IAAE,MAAM;IAAW,IAAI,MAAM,KAAK,MAAM,KAAK,OAAO,IAAI;IAAmB,gBAAgB,KAAK;GAAsB,GAAG,KAAK,KAAK,IAAoB,CAAC;EAC7M,QAAQ;GAAE,MAAM,IAAI,MAAM,KAAK,UAAU,IAAI,gDAAgD,OAAO;EAAG;OAClG,IAAI,SAAS,KAAK,OAAO;GAC9B,IAAI,KAAK,WAAW,MAAM,KAAK,MAAM,MAAM,MAAM,SAAS,KAAK,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,OAAO;GACjG,wBAAQ,IAAI,WAAW;EACzB,OAAO;GACL,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,UAAU,IAAI;GACpD,QAAQ,KAAK,MAAM;EACrB;EACA,KAAK,SAAS;EACd,IAAI,SAAS,KAAK,OAAO;GACvB,IAAI,MAAM,UAAU,KAAK,OAAO,KAAK,OAAO,MAAM,MAAM,IAAI,MAAM,OAAO;GACzE,KAAK,OAAO;GACZ,OAAO;EACT;EACA,IAAI,SAAS,KAAK,OAAO,OAAO,EAAE,OAAO,MAAM;EAC/C,MAAM,OAAO,SAAS,KAAK,WAAW,MAAM,QAAQ,OAAO,IAAI,oBAAoB,MAAM,GAAG,cAAc,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,iBAAiB,SAAS,MAAM,QAAQ,WAAW,0BAA0B,IAAI,wBAAQ,IAAI,MAAM,OAAO;EAAG,CAAC,IAAI;EAChQ,OAAO,EAAE,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,EAAE;CAChD;AACF;;;;;;;;;;;;ACtRA,IAAa,mBAAmB;AAChC,IAAa,oBAAoB;;AAYjC,IAAa,eAAe,MAAc,UAA4B,SAAS,QAAQ,oBAAoB;;;;;;;;;ACL3G,IAAM,SAAS;AACf,IAAM,WAAW;AAcjB,eAAe,KAAK,MAAc,MAAM,MAAM,MAAgB,CAAC,GAAsB;CACnF,IAAI;CACJ,IAAI;EAAE,QAAQ,MAAM,QAAQ,GAAG;CAAG,QAAQ;EAAE,OAAO;CAAK;CACxD,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,KAAK,KAAK,IAAI;EAC3B,KAAK,MAAM,KAAK,IAAI,EAAA,CAAG,YAAY,GAAG,MAAM,KAAK,MAAM,MAAM,GAAG;OAC3D,IAAI,KAAK,SAAS,MAAM,IAAI,CAAC;CACpC;CACA,OAAO;AACT;;AAGA,eAAe,OAAO,QAAsB,MAAc,MAA6B;CACrF,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG;CACnC,IAAI;EACF,MAAM,SAAS,IAAI,WAAW,WAAW;EACzC,KAAK,IAAI,KAAK,GAAG,KAAK,OAAO;GAC3B,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,QAAQ,GAAG,KAAK,IAAI,aAAa,OAAO,EAAE,GAAG,EAAE;GACvF,IAAI,CAAC,WAAW,MAAM,IAAI,SAAS,eAAe,GAAG,KAAK,2CAA2C;GACrG,MAAM,OAAO,MAAM,OAAO,SAAS,GAAG,SAAS,CAAC;GAChD,MAAM;EACR;CACF,UAAU;EAAE,MAAM,OAAO,MAAM;CAAG;AACpC;AAEA,IAAa,iBAAyC;;;;;;;AAOpD,MAAM,iBAAiB,KAAK,QAAQ;CAClC,MAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,CAAC;CAE9C,IAAI,WAAW,IAAI,GAAG,MAAM,IAAI,SAAS,WAAW,GAAG,KAAK,6BAA6B;CACzF,MAAM,aAAa,IAAI,QAAQ,YAAY,GAAG,WAAW,KAAK,QAAQ,cAAc;CACpF,IAAI,CAAC,cAAc,CAAC,UAAU,MAAM,IAAI,SAAS,eAAe,6EAA6E;CAC7I,IAAI,cAAc,UAAU,MAAM,IAAI,SAAS,eAAe,6CAA6C;CAE3G,MAAM,SAAS,QAAQ,IAAI;CAC3B,IAAI,EAAE,MAAM,KAAK,MAAM,EAAA,CAAG,YAAY,GAAG,MAAM,IAAI,SAAS,aAAa,2BAA2B,QAAQ;CAC5G,MAAM,QAAQ,IAAI,QAAQ;CAG1B,MAAM,QAAQ,KAAK,MAAM,IAAI,gBAAgB,QAAQ,IAAI,KAAK;CAC9D,MAAM,IAAI,QAAQ,MAAM,eAAe,KAAK;CAC5C,MAAM,QAAQ,KAAK,QAAQ,OAAO;CAClC,MAAM,MAAM,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,KAAK,EAAA,CAAG,IAAI,OAAO,UAAU;EAAE;EAAM,OAAO,MAAM,KAAK,KAAK,MAAM,OAAO,IAAI,CAAC,EAAA,CAAG;CAAK,EAAE,CAAC;CAEzI,MAAM,OAAO,OAAO,SAAyC,YAAY,KAAK,MAAM,KAAK,KAAM,KAAK,QAAA,WAA6B,CAAC,EAAE,MAAM,UAAU,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS,EAAA,EAAI,UAAU;CAChN,MAAM,QAAoB,CAAC,GAAG,UAAsB,CAAC;CACrD,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC,SAAU,MAAM,KAAK,IAAI,IAAK,QAAQ,QAAA,CAAS,KAAK,IAAI;CAClF,MAAM,aAAa,MAAM,KAAK,KAAK,EAAA,CAAG,MAAM,QAAQ,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;CAClG,MAAM,eAAe,QAAQ,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;CAErE,MAAM,UAAU,GAAG,KAAK,WAAW,QAAQ;CAC3C,IAAI,MAAyB;CAC7B,IAAI;EACF,MAAM,MAAM,SAAS,OAAO;EAC5B,MAAM,SAAS;EACf,IAAI;EACJ,IAAI;GAAE,SAAS,MAAM,aAAa,MAAM,EAAE,OAAO,OAAO,UAAU;IAAE,MAAM,OAAO,MAAM,KAAK;GAAG,EAAE,GAAG,WAAW,OAAO,UAAW;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACjP,MAAM,OAAO,WAAyB,OAAO,KAAK,KAAK,UAAU,MAAM,CAAC;EACxE,MAAM,IAAI;GAAE,GAAG;GAAW,QAAQ;GAAQ,WAAW,KAAK,IAAI;GAAG,OAAO,MAAM;GAAQ;GAAO,GAAI,SAAS,EAAE,OAAO;IAAE,cAAA;IAAgC,eAAA;IAAkC,OAAO,QAAQ;IAAQ,OAAO;IAAc,KAAK,QAAQ,KAAK,SAAS,SAAS,KAAK,IAAI,CAAC;GAAE,EAAE;EAAG,CAAC;EACzR,MAAM,IAAI;GAAE,GAAG;GAAQ,MAAM;GAAS,MAAM;EAAU,CAAC;EACvD,MAAM,OAAO,QAAQ,OAAO,SAAS;EACrC,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,IAAI;IAAE,GAAG;IAAQ,MAAM;IAAQ,MAAM,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;IAAG,MAAM,KAAK;GAAK,CAAC;GAC5F,MAAM,OAAO,QAAQ,KAAK,MAAM,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI;EAC9D;EACA,MAAM,IAAI;GAAE,GAAG;GAAO,OAAO,MAAM;GAAQ;EAAM,CAAC;EAClD,MAAM,UAAU,MAAM,OAAO,OAAO;EACpC,MAAM,OAAO,KAAK;EAClB,MAAM,OAAO,MAAM;EACnB,MAAM;EAEN,IAAI;GAAE,MAAM,KAAK,SAAS,IAAI;EAAG,SAAS,OAAO;GAAE,MAAO,MAAgC,SAAS,WAAW,IAAI,SAAS,WAAW,GAAG,KAAK,6BAA6B,IAAI;EAAO;EACtL,OAAO;GAAE;GAAM,OAAO;GAAS,OAAO,MAAM;GAAQ,YAAY,WAAW,SAAS;GAAc,GAAI,SAAS;IAAE,OAAO;IAAM,SAAS,QAAQ;IAAQ;GAAa;EAAG;CACzK,UAAU;EACR,MAAM,KAAK,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;EACjC,MAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC;EACjC,MAAM,GAAG,OAAO,EAAE,OAAO,KAAK,CAAC;CACjC;AACF,EACF;AAEA,eAAe,SAAS,MAAmC;CACzD,IAAI;EAAE,OAAO,MAAM,KAAK,MAAM,MAAM,GAAK;CAAG,SAAS,OAAO;EAC1D,IAAK,MAAgC,SAAS,UAAU;GAAE,MAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;GAAG,OAAO,KAAK,MAAM,MAAM,GAAK;EAAG;EAC3H,MAAM;CACR;AACF;;AAGA,eAAe,WAAW,MAAkE;CAC1F,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG;CACnC,MAAM,QAAQ,MAAM,OAAO,KAAK;CAChC,IAAI,MAAM,YAAY,GAAG;EAAE,MAAM,OAAO,MAAM;EAAG,MAAM,IAAI,SAAS,eAAe,GAAG,KAAK,0BAA0B;CAAG;CACxH,MAAM,EAAE,SAAS;CACjB,OAAO;EACL;EACA,MAAM,OAAO,QAAQ,WAAW;GAC9B,MAAM,SAAS,IAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,QAAQ,OAAO,MAAM,CAAC,CAAC;GAC1E,IAAI,MAAM;GACV,OAAO,MAAM,OAAO,QAAQ;IAAE,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,QAAQ,KAAK,OAAO,SAAS,KAAK,SAAS,GAAG;IAAG,IAAI,CAAC,WAAW;IAAO,OAAO;GAAW;GAChK,OAAO,OAAO,SAAS,GAAG,GAAG;EAC/B;EACA,aAAa,OAAO,MAAM;CAC5B;AACF;;AAGA,IAAM,kBAAkB;;;;;AAMxB,eAAsB,qBAAqB,MAA8C;CACvF,MAAM,SAAS,MAAM,WAAW,IAAI;CACpC,IAAI;EACF,IAAI;EACJ,IAAI;GAAE,QAAQ,MAAM,iBAAiB,MAAM;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACvJ,IAAI,OAAO,OAAO,MAAM,OAAO;EAC/B,IAAI,CAAC,gBAAgB,KAAK,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,OAAO,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,MAAM,IAAI,SAAS,WAAW,8BAA8B;EAC5I,OAAO;CACT,UAAU;EAAE,MAAM,OAAO,MAAM;CAAG;AACpC;;AAGA,SAAS,OAAO,MAAc,MAAuB;CACnD,MAAM,SAAS,OAAO,SAAS,YAAY,OAAO,QAAQ,MAAM,IAAI,IAAI;CACxE,IAAI,CAAC,OAAO,WAAW,QAAQ,IAAI,IAAI,GAAG,GAAG,MAAM,IAAI,SAAS,WAAW,4CAA4C;CACvH,OAAO;AACT;;AAGA,IAAM,YAAY;;;;;;AAOlB,eAAe,gBAAgB,MAAc,MAAqC;CAChF,MAAM,OAAO,KAAK,MAAM,UAAU;CAClC,MAAM,MAAM,MAAM;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAClD,KAAK,MAAM,SAAS,MAAM,QAAQ,IAAI,GAAG;EACvC,MAAM,MAAM,OAAO,UAAU,KAAK,KAAK,CAAC,GAAG,EAAE;EAC7C,IAAI,CAAC,KAAK;EACV,IAAI,QAAQ,QAAQ,QAAQ;EAC5B,IAAI,CAAC,OAAO,IAAI;GAAE,QAAQ,KAAK,KAAK,CAAC;GAAG,QAAQ;EAAM,SAAS,OAAO;GAAE,QAAS,MAAgC,SAAS;EAAS;EACnI,IAAI,CAAC,OAAO,MAAM,GAAG,KAAK,MAAM,KAAK,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAC1E;CACA,MAAM,MAAM,KAAK,MAAM,cAAc,KAAK,GAAG,QAAQ,KAAK;CAC1D,MAAM,GAAG,KAAK;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAC9C,MAAM,MAAM,KAAK,EAAE,MAAM,IAAM,CAAC;CAChC,OAAO;EAAE,GAAG,aAAa,MAAM,IAAI;EAAG;EAAK,IAAI,KAAK,KAAK,IAAI;EAAG,OAAO,KAAK,KAAK,OAAO;CAAE;AAC5F;;;;;AAMA,eAAe,cAAc,MAAc,MAAc,MAAoB,UAAoB,CAAC,GAA0B;CAC1H,MAAM,QAAQ,aAAa,MAAM,IAAI;CACrC,MAAM,UAAU,KAAK,KAAK,KAAK,aAAa,GAAG,QAAQ,SAAS,KAAK,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,MAAM,IAAM,CAAC;CACjH,IAAI,WAAW,MAAM,GAAG,GAAG,MAAM,IAAI,SAAS,WAAW,WAAW,KAAK,iCAAiC;CAC1G,MAAM,OAAO,KAAK,KAAK,MAAM,GAAG;CAChC,OAAO;AACT;;;;;;;AAQA,eAAsB,eAAe,MAAc,MAAc,MAAc,YAA4C;CACzH,IAAI,cAAc,MAAM,IAAI,GAAG,MAAM,IAAI,SAAS,WAAW,WAAW,KAAK,iCAAiC;CAC9G,MAAM,SAAS,MAAM,WAAW,IAAI;CACpC,IAAI,OAA4B;CAChC,IAAI;EACF,IAAI;EACJ,IAAI;GAAE,SAAS,MAAM,aAAa,KAAK,QAAQ,UAAU;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACrK,IAAI,CAAC,QAAQ;GACX,MAAM,UAAU,MAAM,UAAU,MAAM,cAAc,EAAE;GACtD,OAAO,MAAM,gBAAgB,MAAM,IAAI;GACvC,MAAM,WAAW,MAAM,OAAO;GAC9B,OAAO,MAAM,cAAc,MAAM,MAAM,IAAI;EAC7C;EACA,MAAM,OAAO,YAAY;GAAE,IAAI;IAAE,OAAO,MAAM,OAAO,KAAK;GAAG,SAAS,OAAO;IAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;GAAG;EAAE;EACxK,MAAM,SAAS,SAAiB;GAAE,IAAI;IAAE,OAAO,KAAK,MAAM,IAAI;GAAmB,QAAQ;IAAE,MAAM,IAAI,SAAS,WAAW,qDAAqD;GAAG;EAAE;EAGnL,MAAM,QAAQ,MAAM,KAAK;EACzB,MAAM,OAAO,OAAO,SAAS,KAAA,IAAY,OAAO,MAAM,MAAM,IAAI;EAChE,IAAI,MAAM,MAAM,aAAa,KAAK,WAAW,QAAQ,MAAM,IAAI,SAAS,WAAW,+CAA+C;EAClI,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,GAAG,IAAI,KAAK,MAAM,IAAI,QAAQ,OAAqB,OAAO,OAAO,QAAQ,IAAI,CAAC;EACxH,OAAO,MAAM,gBAAgB,MAAM,IAAI;EACvC,MAAM,QAAQ;EACd,MAAM,MAAM,MAAM,IAAI;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACtD,IAAI,MAAmD,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,OAAO,SAAS;EAC3G,IAAI;GACF,KAAK,IAAI,SAAS,MAAM,KAAK,GAAG,QAAQ,SAAS,MAAM,KAAK,GAAG;IAC7D,IAAI,OAAO,MAAM,IAAI,SAAS,WAAW,qDAAqD;IAC9F,IAAI,OAAO,OAAO;KAChB,IAAI,CAAC,OAAO,OAAO,MAAM,SAAS,IAAI,MAAM,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAC/H,MAAM,IAAI,OAAO,MAAM,OAAO,KAAK;KACnC,IAAI,QAAQ,OAAO,MAAM;KACzB;IACF;IACA,IAAI,KAAK;KAAE,IAAI,IAAI,MAAM,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAAG,MAAM,IAAI,OAAO,MAAM;KAAG,MAAM;IAAM;IACrJ,MAAM,QAAQ,MAAM,OAAO,IAAI;IAC/B,IAAI,MAAM,MAAM,OAAO;KAAE,QAAQ,MAAM,UAAU,SAAS,MAAM,UAAU;KAAO,IAAI,CAAC,OAAO,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAAG;IAAU;IAC7L,IAAI,MAAM,MAAM,UAAU,CAAC,OAAO,cAAc,MAAM,IAAI,KAAK,MAAM,OAAO,GAAG;IAC/E,IAAI;IACJ,IAAI,MAAM,SAAS,SAAS;KAAE,SAAS,KAAK,MAAM,IAAI,cAAc;KAAG,SAAS;IAAM,OACjF;KAAE,SAAS,OAAO,MAAM,OAAO,MAAM,IAAI;KAAG,MAAM,MAAM,QAAQ,MAAM,GAAG;MAAE,WAAW;MAAM,MAAM;KAAM,CAAC;KAAG,SAAS;KAAG,SAAS,MAAM;IAAM;IAClJ,MAAM;KAAE,QAAQ,MAAM,KAAK,QAAQ,MAAM,GAAK;KAAG,MAAM,MAAM;IAAK;GACpE;GACA,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,MAAM,IAAI,SAAS,WAAW,qDAAqD;EACnH,UAAU;GAAE,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;EAAG;EACvD,OAAO,MAAM,cAAc,MAAM,MAAM,MAAM,OAAO;CACtD,SAAS,OAAO;EACd,IAAI,MAAM,MAAM,GAAG,KAAK,KAAK;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC7D,MAAM;CACR,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;;AAGA,eAAe,UAAU,MAAc,YAAuC;CAC5E,IAAI;CACJ,IAAI;EAAE,UAAU,KAAK,MAAM,MAAMC,OAAa,MAAM,SAAS,MAAM,MAAM,GAAG,UAAU,CAAC;CAAe,SAAS,OAAO;EAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CAAG;CAC/M,IAAI,SAAS,WAAW,YAAY,OAAO,QAAQ,UAAU,YAAY,CAAC,MAAM,QAAQ,QAAQ,KAAK,GAAG,MAAM,IAAI,SAAS,WAAW,+CAA+C;CACrL,OAAO;AACT;AAEA,eAAe,WAAW,OAAqB,SAAkC;CAC/E,MAAM,MAAM,MAAM,IAAI;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACtD,MAAM,UAAU,KAAK,MAAM,IAAI,cAAc,GAAG,OAAO,KAAK,QAAQ,OAAO,QAAQ,GAAG,EAAE,MAAM,IAAM,CAAC;CACrG,KAAK,MAAM,SAAS,QAAQ,OAAO;EACjC,MAAM,SAAS,OAAO,MAAM,OAAO,MAAM,IAAI;EAC7C,MAAM,MAAM,QAAQ,MAAM,GAAG;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC7D,MAAM,UAAU,QAAQ,OAAO,KAAK,MAAM,MAAM,QAAQ,GAAG,EAAE,MAAM,IAAM,CAAC;CAC5E;AACF"}
+{"version":3,"file":"backup-BmBtta66.js","names":["join","openEnvelope"],"sources":["../../../browser/src/backup/stream.ts","../../../browser/src/backup/light.ts","../../src/backup.ts"],"sourcesContent":["import { fromBase64Url, toBase64Url } from \"./codec\";\n\n/**\n * A backup written and read a piece at a time (WISP 05, envelope version 2), so a profile with years of files never\n * has to fit in memory. The file is one line of clear JSON (the header), then frames:\n *\n *   header line:  {\"format\":\"ghostly-backup\",\"version\":2,\"protection\":\"passphrase\"|\"none\",...}\\n\n *   frame:        kind (1 byte) | length (4 bytes, big endian) | body\n *\n * A frame carries one record: a piece of JSON (gzip or plain) or a piece of a file's bytes, at most `FRAME_BYTES`\n * of them. The last frame is the final marker; a file that ends without it was cut short and is refused.\n *\n * - `passphrase`: the key comes from the passphrase as in version 1 (PBKDF2-SHA256, 600 000 rounds, 16 byte salt).\n *   Every frame is sealed alone with AES-256-GCM: its nonce is the header's 7 random bytes, the frame's number\n *   (4 bytes) and its kind (1 byte), and the SHA-256 of the header line is its associated data. A frame changed,\n *   moved, dropped or retyped, a changed header, or a missing final marker fails to open.\n * - `none`: nothing is encrypted. A SHA-256 chain runs over the header line and every frame, and the final marker\n *   holds its last value, so a damaged or cut file is refused. It proves nothing about who made the file.\n */\nexport const FRAME_BYTES = 1024 * 1024;\n/** No frame is larger than this: a reader refuses one that says it is, before reading it. */\nconst MAX_FRAME_BYTES = 64 * 1024 * 1024;\n/** One piece of JSON, decompressed: past it the backup is refused, not read. */\nconst MAX_JSON_BYTES = 256 * 1024 * 1024;\nconst MAX_HEADER_BYTES = 4096;\nconst ITERATIONS = 600_000;\nconst TAG_BYTES = 16;\n\nconst KIND = { gzipJson: 1, json: 2, bytes: 3, final: 255 } as const;\n\n/**\n * The envelope version of a bundle that carries a device set (WISP 06 § Compatibility and rollout): an app from before\n * WISP 06 refuses it with \"This backup comes from a newer Ghostly\", rather than restoring a copy that stops nothing.\n * WISP 06 names it version 2, but WISP 05's streamed bundle took 2 first; every other bundle is still 2.\n */\nexport const DEVICE_SET_BACKUP_VERSION = 3;\n\nexport interface BackupHeader {\n  format: \"ghostly-backup\";\n  version: 2 | 3;\n  protection: \"passphrase\" | \"none\";\n  kdf?: { name: \"PBKDF2-SHA256\"; iterations: number; salt: string };\n  cipher?: { name: \"AES-256-GCM\"; nonce: string };\n  check?: { name: \"SHA-256-chain\" };\n}\n\n/** Where a backup is written: in order, a piece at a time. */\nexport interface BackupSink { write(bytes: Uint8Array): Promise<void> }\n/** Where a backup is read from: any range, so nothing is read before it is needed. */\nexport interface BackupSource { readonly size: number; read(offset: number, length: number): Promise<Uint8Array> }\n/** One record of a backup: JSON text, or a piece of the bytes of the file the JSON before it announced. */\nexport type BackupRecord = { json: string; bytes?: undefined } | { bytes: Uint8Array; json?: undefined };\n\n/** Thrown when the work was cancelled (`AbortSignal`): nothing is wrong with the backup. */\nexport class BackupCancelled extends Error {\n  constructor() { super(\"Cancelled\"); this.name = \"AbortError\"; }\n}\nexport const isCancelled = (error: unknown) => (error as { name?: string })?.name === \"AbortError\";\nconst check = (signal?: AbortSignal) => { if (signal?.aborted) throw new BackupCancelled(); };\n\n/** A Blob (a picked file) as a source, read in slices: never `stream()`, which WebKit fails on for some stored Blobs. */\nexport const blobSource = (blob: Blob): BackupSource => ({ size: blob.size, read: async (offset, length) => new Uint8Array(await blob.slice(offset, offset + length).arrayBuffer()) });\nexport const bytesSource = (bytes: Uint8Array): BackupSource => ({ size: bytes.length, read: async (offset, length) => bytes.subarray(offset, offset + length) });\n/** A sink that keeps what is written (tests, and a backup small enough to hand over whole). */\nexport function memorySink(): BackupSink & { bytes(): Uint8Array } {\n  const parts: Uint8Array[] = [];\n  return {\n    write: async (bytes) => { parts.push(bytes.slice()); },\n    bytes: () => { const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0)); let at = 0; for (const p of parts) { out.set(p, at); at += p.length; } return out; },\n  };\n}\n\nconst canCompress = () => typeof CompressionStream !== \"undefined\";\nasync function through(bytes: Uint8Array, stream: CompressionStream | DecompressionStream, limit = Infinity): Promise<Uint8Array> {\n  const reader = new Blob([bytes as BlobPart]).stream().pipeThrough(stream).getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (let next = await reader.read(); !next.done; next = await reader.read()) {\n    size += next.value.length;\n    if (size > limit) { await reader.cancel(); throw new Error(\"This backup is too large to restore\"); }\n    chunks.push(next.value);\n  }\n  if (chunks.length === 1) return chunks[0];\n  const out = new Uint8Array(size);\n  let at = 0;\n  for (const chunk of chunks) { out.set(chunk, at); at += chunk.length; }\n  return out;\n}\n\nasync function keyFrom(passphrase: string, salt: Uint8Array, iterations: number): Promise<CryptoKey> {\n  const material = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(passphrase), \"PBKDF2\", false, [\"deriveKey\"]);\n  return crypto.subtle.deriveKey({ name: \"PBKDF2\", hash: \"SHA-256\", salt: salt as BufferSource, iterations }, material, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nconst sha256 = async (...parts: Uint8Array[]) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", join(parts) as BufferSource));\nfunction join(parts: Uint8Array[]): Uint8Array {\n  if (parts.length === 1) return parts[0];\n  const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));\n  let at = 0;\n  for (const part of parts) { out.set(part, at); at += part.length; }\n  return out;\n}\nfunction prefix(kind: number, length: number): Uint8Array {\n  const out = new Uint8Array(5);\n  out[0] = kind;\n  new DataView(out.buffer).setUint32(1, length);\n  return out;\n}\nfunction nonce(base: Uint8Array, frame: number, kind: number): Uint8Array {\n  const out = new Uint8Array(12);\n  out.set(base, 0);\n  new DataView(out.buffer).setUint32(7, frame);\n  out[11] = kind;\n  return out;\n}\n\n/** Writes a backup: `json` and `bytes` in the order they are to be read, then `finish`. */\nexport class BackupWriter {\n  private frame = 0;\n  /** Bytes handed to the sink so far. */\n  written = 0;\n  private finished = false;\n  /** Set once the sink refused a frame: the error it gave, thrown again at every later write. */\n  private failed: { error: unknown } | null = null;\n\n  private constructor(private readonly sink: BackupSink, private readonly key: CryptoKey | null, private readonly base: Uint8Array, private chain: Uint8Array, private readonly signal?: AbortSignal) {}\n\n  /** `passphrase` null: a backup anyone can read (the caller has made sure that is what the person chose). */\n  static async start(sink: BackupSink, passphrase: string | null, signal?: AbortSignal, version: 2 | 3 = 2): Promise<BackupWriter> {\n    if (passphrase !== null && passphrase.length < 12) throw new Error(\"Use at least 12 characters for the backup passphrase\");\n    check(signal);\n    const salt = crypto.getRandomValues(new Uint8Array(16)), base = crypto.getRandomValues(new Uint8Array(7));\n    const header: BackupHeader = passphrase === null\n      ? { format: \"ghostly-backup\", version, protection: \"none\", check: { name: \"SHA-256-chain\" } }\n      : { format: \"ghostly-backup\", version, protection: \"passphrase\", kdf: { name: \"PBKDF2-SHA256\", iterations: ITERATIONS, salt: toBase64Url(salt) }, cipher: { name: \"AES-256-GCM\", nonce: toBase64Url(base) } };\n    const line = new TextEncoder().encode(`${JSON.stringify(header)}\\n`);\n    const key = passphrase === null ? null : await keyFrom(passphrase, salt, ITERATIONS);\n    const writer = new BackupWriter(sink, key, base, await sha256(line), signal);\n    await sink.write(line);\n    writer.written = line.length;\n    return writer;\n  }\n\n  private async put(kind: number, plain: Uint8Array): Promise<void> {\n    check(this.signal);\n    if (this.failed) throw this.failed.error;\n    if (this.finished) throw new Error(\"This backup is already finished\");\n    if (this.frame >= 0xffffffff) throw new Error(\"This backup is too large\");\n    // What a reader refuses is not written: found out now, not when the backup is needed.\n    if (plain.length > MAX_FRAME_BYTES) throw new Error(\"A record of this profile is too large for a backup\");\n    let out: Uint8Array;\n    if (this.key) {\n      // The header's digest is every frame's associated data: a frame of another backup, or under a changed header, fails.\n      const sealed = new Uint8Array(await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: nonce(this.base, this.frame, kind) as BufferSource, additionalData: this.chain as BufferSource }, this.key, plain as BufferSource));\n      out = join([prefix(kind, sealed.length), sealed]);\n    } else {\n      const head = prefix(kind, kind === KIND.final ? 32 : plain.length);\n      if (kind === KIND.final) out = join([head, this.chain]);\n      else { out = join([head, plain]); this.chain = await sha256(this.chain, out); }\n    }\n    this.frame += 1;\n    // A frame the sink did not take (no room left, say) is the end of this backup: every frame after it would be\n    // numbered past a gap, and the file would never open. Nothing more is written, whatever the caller does next.\n    try { await this.sink.write(out); } catch (error) { this.failed = { error }; throw error; }\n    this.written += out.length;\n  }\n\n  /** One piece of JSON, compressed where the platform can. */\n  async json(text: string): Promise<void> {\n    const plain = new TextEncoder().encode(text);\n    if (plain.length > MAX_JSON_BYTES) throw new Error(\"A record of this profile is too large for a backup\");\n    if (canCompress()) await this.put(KIND.gzipJson, await through(plain, new CompressionStream(\"gzip\")));\n    else await this.put(KIND.json, plain);\n  }\n\n  /** Bytes of the file the last JSON announced, cut into frames. */\n  async bytes(chunk: Uint8Array): Promise<void> {\n    for (let at = 0; at < chunk.length; at += FRAME_BYTES) await this.put(KIND.bytes, chunk.subarray(at, Math.min(chunk.length, at + FRAME_BYTES)));\n  }\n\n  /** The final marker: without it a reader refuses the backup. Resolves to the size of the whole backup. */\n  async finish(): Promise<number> {\n    await this.put(KIND.final, new Uint8Array());\n    this.finished = true;\n    return this.written;\n  }\n}\n\n/** The first line of a version 2 backup, or null when this is not one (version 1 is one JSON object with no line end). */\nexport async function readBackupHeader(source: BackupSource): Promise<{ header: BackupHeader; line: Uint8Array } | null> {\n  const start = await source.read(0, Math.min(MAX_HEADER_BYTES, source.size));\n  const end = start.indexOf(10);\n  if (end < 0) return null;\n  let header: BackupHeader;\n  try { header = JSON.parse(new TextDecoder().decode(start.subarray(0, end))) as BackupHeader; } catch { return null; }\n  if (header?.format !== \"ghostly-backup\" || typeof header.version !== \"number\" || header.version < 2) return null;\n  if (header.version !== 2 && header.version !== DEVICE_SET_BACKUP_VERSION) throw new Error(\"This backup comes from a newer Ghostly; update to restore it\");\n  if (header.protection === \"none\") {\n    if (header.check?.name !== \"SHA-256-chain\") throw new Error(\"Unsupported backup format\");\n  } else if (header.protection === \"passphrase\") {\n    if (header.kdf?.name !== \"PBKDF2-SHA256\" || !(header.kdf.iterations >= ITERATIONS) || header.kdf.iterations > 10_000_000 || header.cipher?.name !== \"AES-256-GCM\") throw new Error(\"Unsupported backup encryption\");\n  } else throw new Error(\"Unsupported backup format\");\n  return { header, line: start.slice(0, end + 1) };\n}\n\n/** How a backup is protected, read from its clear header without opening it: version 1 is always sealed. */\nexport async function backupProtection(source: BackupSource): Promise<\"passphrase\" | \"none\"> {\n  return (await readBackupHeader(source))?.header.protection ?? \"passphrase\";\n}\n\nconst DAMAGED = \"This backup is damaged: it was changed or cut short\";\n\n/** Reads a version 2 backup record by record. Nothing of a frame is handed out before it passed its check. */\nexport class BackupReader {\n  private frame = 0;\n  private at: number;\n  private block: Uint8Array = new Uint8Array();\n  private blockAt = 0;\n  private done = false;\n\n  private constructor(private readonly source: BackupSource, private readonly key: CryptoKey | null, private readonly base: Uint8Array, private chain: Uint8Array, start: number, private readonly signal?: AbortSignal) { this.at = start; }\n\n  get protection(): \"passphrase\" | \"none\" { return this.key ? \"passphrase\" : \"none\"; }\n\n  /** Null when `source` is not a version 2 backup. `passphrase` is needed, and used, only for a sealed one. */\n  static async open(source: BackupSource, passphrase?: string, signal?: AbortSignal): Promise<BackupReader | null> {\n    const found = await readBackupHeader(source);\n    if (!found) return null;\n    check(signal);\n    const { header, line } = found;\n    if (header.protection === \"none\") return new BackupReader(source, null, new Uint8Array(), await sha256(line), line.length, signal);\n    let key: CryptoKey, base: Uint8Array;\n    try {\n      base = fromBase64Url(header.cipher!.nonce);\n      if (base.length !== 7) throw new Error(\"nonce\");\n      key = await keyFrom(passphrase ?? \"\", fromBase64Url(header.kdf!.salt), header.kdf!.iterations);\n    } catch { throw new Error(\"Unsupported backup encryption\"); }\n    return new BackupReader(source, key, base, await sha256(line), line.length, signal);\n  }\n\n  /** Bytes of the source read so far (for progress). */\n  get position(): number { return this.at; }\n\n  /** `length` bytes at the reading point, through a read-ahead block so a source is asked a few times per megabyte, not per frame. */\n  private async take(length: number): Promise<Uint8Array> {\n    if (this.at + length > this.source.size) throw new Error(DAMAGED);\n    const from = this.at - this.blockAt;\n    if (from < 0 || from + length > this.block.length) {\n      this.block = await this.source.read(this.at, Math.min(this.source.size - this.at, Math.max(length, 4 * FRAME_BYTES)));\n      this.blockAt = this.at;\n      if (this.block.length < length) throw new Error(DAMAGED);\n    }\n    const out = this.block.subarray(this.at - this.blockAt, this.at - this.blockAt + length);\n    this.at += length;\n    return out;\n  }\n\n  /** The next record, or null at the end: only then is the backup known to be whole. */\n  async next(): Promise<BackupRecord | null> {\n    check(this.signal);\n    if (this.done) return null;\n    const head = await this.take(5);\n    const kind = head[0], length = new DataView(head.buffer, head.byteOffset, 5).getUint32(1);\n    if (length > MAX_FRAME_BYTES + TAG_BYTES || !Object.values(KIND).includes(kind as never)) throw new Error(DAMAGED);\n    const headCopy = head.slice();\n    const body = await this.take(length);\n    let plain: Uint8Array;\n    if (this.key) {\n      try {\n        plain = new Uint8Array(await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: nonce(this.base, this.frame, kind) as BufferSource, additionalData: this.chain as BufferSource }, this.key, body as BufferSource));\n      } catch { throw new Error(this.frame === 0 ? \"Wrong passphrase, or the backup was changed\" : DAMAGED); }\n    } else if (kind === KIND.final) {\n      if (body.length !== 32 || body.some((byte, i) => byte !== this.chain[i])) throw new Error(DAMAGED);\n      plain = new Uint8Array();\n    } else {\n      this.chain = await sha256(this.chain, headCopy, body);\n      plain = body.slice();\n    }\n    this.frame += 1;\n    if (kind === KIND.final) {\n      if (plain.length || this.at !== this.source.size) throw new Error(DAMAGED);\n      this.done = true;\n      return null;\n    }\n    if (kind === KIND.bytes) return { bytes: plain };\n    const text = kind === KIND.gzipJson ? await through(plain, new DecompressionStream(\"gzip\"), MAX_JSON_BYTES).catch((error: unknown) => { throw error instanceof Error && error.message.startsWith(\"This backup is too large\") ? error : new Error(DAMAGED); }) : plain;\n    return { json: new TextDecoder().decode(text) };\n  }\n}\n","/**\n * A light backup (WISP 05 § Light backups): everything of a profile but the bytes of its larger files. Their messages\n * and records stay; after a restore they show as not in this backup.\n *\n * The cut: a file of at most 1 MiB keeps its bytes (a short clip, a sticker, a screenshot, a document), and so does a\n * voice message of at most 4 MiB. Voice messages are part of the conversation, and the longest one the apps record\n * (15 minutes at 32 kbit/s, `VOICE_LIMITS`) is about 3.6 MB, so every recorded one stays. Photos from a camera\n * (usually 2 to 8 MB), videos and large files are what is left out.\n */\nexport const LIGHT_FILE_BYTES = 1024 * 1024;\nexport const LIGHT_VOICE_BYTES = 4 * 1024 * 1024;\n\n/** What a light bundle says of itself in its first record: its cut, and what it left out. */\nexport interface LightMark {\n  maxFileBytes: number;\n  maxVoiceBytes: number;\n  /** How many files were left out, and their bytes. */\n  files: number;\n  bytes: number;\n}\n\n/** Whether a file of this size keeps its bytes in a light backup. */\nexport const keptInLight = (size: number, voice: boolean): boolean => size <= (voice ? LIGHT_VOICE_BYTES : LIGHT_FILE_BYTES);\n","import { existsSync } from \"node:fs\";\nimport { link, mkdir, open, readdir, readFile, rename, rm, stat, writeFile, type FileHandle } from \"node:fs/promises\";\nimport { basename, dirname, join, relative, resolve, sep } from \"node:path\";\nimport { open as openEnvelope } from \"@ghostly/browser/backup/envelope\";\nimport { BackupReader, BackupWriter, FRAME_BYTES, readBackupHeader, type BackupSource } from \"@ghostly/browser/backup/stream\";\nimport { LIGHT_FILE_BYTES, LIGHT_VOICE_BYTES, keptInLight, type LightMark } from \"@ghostly/browser/backup/light\";\nimport { fileStore } from \"@ghostly/browser/shared/idb\";\nimport { bool, str, type Method } from \"./apiKit\";\nimport { CliError } from \"./errors\";\nimport { RESTORED_MARK, profileExists, profilePaths, type ProfilePaths } from \"./profiles\";\n\n/**\n * A headless profile's backup: the WISP 05 envelope around the profile itself, its store and its files, written and\n * read a piece at a time (envelope version 2), so a profile with large files never has to fit in memory. It restores\n * into a new headless profile; the app's own backups are made from its page's storage and are not this format\n * (WISP 1100 § Parity). A backup an older CLI made (version 1: everything in one sealed JSON document) still restores.\n */\nconst FORMAT = \"ghostly-cli-profile/2\";\nconst FORMAT_1 = \"ghostly-cli-profile/1\";\n\n/** Version 1: the store and every file as base64 in one document. */\ninterface Payload1 { format: typeof FORMAT_1; createdAt: number; store: string; files: { path: string; data: string }[] }\n/** Version 2, in order: the head, then each file (the store first) followed by its bytes, then the end. */\n/**\n * `light`: a light backup (WISP 05 § Light backups) left the bytes of these files out. Their records are in the store;\n * the restored profile marks them when it first starts (`markLeftOutFiles`).\n */\ntype BackupRecord =\n  | { t: \"profile\"; format: typeof FORMAT; createdAt: number; files: number; bytes: number; light?: LightMark & { ids: string[] } }\n  | { t: \"file\"; kind: \"store\" | \"file\"; path?: string; size: number }\n  | { t: \"end\"; files: number; bytes: number };\n\nasync function walk(root: string, dir = root, out: string[] = []): Promise<string[]> {\n  let names: string[];\n  try { names = await readdir(dir); } catch { return out; }\n  for (const name of names) {\n    const path = join(dir, name);\n    if ((await stat(path)).isDirectory()) await walk(root, path, out);\n    else out.push(relative(root, path));\n  }\n  return out;\n}\n\n/** A file's first `size` bytes into the backup, a frame at a time. One that got shorter meanwhile stops the backup. */\nasync function copyIn(writer: BackupWriter, path: string, size: number): Promise<void> {\n  const handle = await open(path, \"r\");\n  try {\n    const buffer = new Uint8Array(FRAME_BYTES);\n    for (let at = 0; at < size;) {\n      const { bytesRead } = await handle.read(buffer, 0, Math.min(FRAME_BYTES, size - at), at);\n      if (!bytesRead) throw new CliError(\"unavailable\", `${path} changed while it was backed up: try again`);\n      await writer.bytes(buffer.subarray(0, bytesRead));\n      at += bytesRead;\n    }\n  } finally { await handle.close(); }\n}\n\nexport const BACKUP_METHODS: Record<string, Method> = {\n  /**\n   * Writes the backup to `path` (resolved by the command), sealed with `passphrase`, or not encrypted when\n   * `noPassphrase` is true: one of the two, never a guess. The store is written whole for it, every value inline. It is\n   * written beside `path` and only takes its name once it is complete: a backup that fails leaves no file. `light`:\n   * the files over the cut (`keptInLight`) are left out, their records kept.\n   */\n  async \"profile.backup\"(ctx, params) {\n    const path = resolve(str(params, \"path\", true));\n    // `refused`, not `confirm` (exit 5, \"pass --force\"): backup takes no flag that writes over a file.\n    if (existsSync(path)) throw new CliError(\"refused\", `${path} exists: choose another name`);\n    const passphrase = str(params, \"passphrase\"), unsealed = bool(params, \"noPassphrase\");\n    if (!passphrase && !unsealed) throw new CliError(\"bad_request\", \"passphrase is required (or noPassphrase: true for a backup anyone can read)\");\n    if (passphrase && unsealed) throw new CliError(\"bad_request\", \"Give a passphrase or noPassphrase, not both\");\n    // The folder it goes in, checked first: a missing one is named, not the file written beside `path`.\n    const folder = dirname(path);\n    if (!(await stat(folder)).isDirectory()) throw new CliError(\"not_found\", `No such file or folder: ${folder}`);\n    const paths = ctx.runtime.paths;\n    // The store as one snapshot with every value in it (the messages too, which the profile keeps in rows.db): a backup\n    // any ghostly restores, this one or an older one.\n    const store = join(paths.db, `backup-store-${process.pid}.bin`);\n    await ctx.runtime.store.exportSnapshot(store);\n    const light = bool(params, \"light\");\n    const all = await Promise.all((await walk(paths.files)).map(async (name) => ({ name, size: (await stat(join(paths.files, name))).size })));\n    // A file's name is its id: only one that could be a voice message under its larger cut is looked up.\n    const kept = async (file: { name: string; size: number }) => keptInLight(file.size, false) || (file.size <= LIGHT_VOICE_BYTES && !!(await fileStore.get(basename(file.name)).catch(() => undefined))?.metadata?.voice);\n    const files: typeof all = [], leftOut: typeof all = [];\n    for (const file of all) (!light || (await kept(file)) ? files : leftOut).push(file);\n    const storeSize = (await stat(store)).size, bytes = files.reduce((sum, file) => sum + file.size, 0);\n    const leftOutBytes = leftOut.reduce((sum, file) => sum + file.size, 0);\n\n    const partial = `${path}.partial-${process.pid}`;\n    let out: FileHandle | null = null;\n    try {\n      out = await openFile(partial);\n      const handle = out;\n      let writer: BackupWriter;\n      try { writer = await BackupWriter.start({ write: async (chunk) => { await handle.write(chunk); } }, unsealed ? null : passphrase!); } catch (error) { throw new CliError(\"bad_request\", error instanceof Error ? error.message : String(error)); }\n      const put = (record: BackupRecord) => writer.json(JSON.stringify(record));\n      await put({ t: \"profile\", format: FORMAT, createdAt: Date.now(), files: files.length, bytes, ...(light && { light: { maxFileBytes: LIGHT_FILE_BYTES, maxVoiceBytes: LIGHT_VOICE_BYTES, files: leftOut.length, bytes: leftOutBytes, ids: leftOut.map((file) => basename(file.name)) } }) });\n      await put({ t: \"file\", kind: \"store\", size: storeSize });\n      await copyIn(writer, store, storeSize);\n      for (const file of files) {\n        await put({ t: \"file\", kind: \"file\", path: file.name.split(sep).join(\"/\"), size: file.size });\n        await copyIn(writer, join(paths.files, file.name), file.size);\n      }\n      await put({ t: \"end\", files: files.length, bytes });\n      const written = await writer.finish();\n      await handle.sync();\n      await handle.close();\n      out = null;\n      // Its name only now, and never over a file that appeared meanwhile.\n      try { await link(partial, path); } catch (error) { throw (error as NodeJS.ErrnoException).code === \"EEXIST\" ? new CliError(\"refused\", `${path} exists: choose another name`) : error; }\n      return { path, bytes: written, files: files.length, protection: unsealed ? \"none\" : \"passphrase\", ...(light && { light: true, leftOut: leftOut.length, leftOutBytes }) };\n    } finally {\n      await out?.close().catch(() => {});\n      await rm(partial, { force: true });\n      await rm(store, { force: true });\n    }\n  },\n};\n\nasync function openFile(path: string): Promise<FileHandle> {\n  try { return await open(path, \"wx\", 0o600); } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"EEXIST\") { await rm(path, { force: true }); return open(path, \"wx\", 0o600); }\n    throw error;\n  }\n}\n\n/** A file on disk as a backup's source: read in ranges, never whole. A folder opens, and is refused as one here. */\nasync function fileSource(path: string): Promise<BackupSource & { close(): Promise<void> }> {\n  const handle = await open(path, \"r\");\n  const found = await handle.stat();\n  if (found.isDirectory()) { await handle.close(); throw new CliError(\"bad_request\", `${path} is a folder: name a file`); }\n  const { size } = found;\n  return {\n    size,\n    read: async (offset, length) => {\n      const buffer = new Uint8Array(Math.max(0, Math.min(length, size - offset)));\n      let got = 0;\n      while (got < buffer.length) { const { bytesRead } = await handle.read(buffer, got, buffer.length - got, offset + got); if (!bytesRead) break; got += bytesRead; }\n      return buffer.subarray(0, got);\n    },\n    close: () => handle.close(),\n  };\n}\n\n/** A version 1 backup is one JSON object, and `seal` writes its format first. */\nconst VERSION_1_START = /^\\s*\\{\\s*\"format\"\\s*:\\s*\"ghostly-backup\"/;\n\n/**\n * Whether the backup at `file` is sealed with a passphrase or was made without one, read from its clear header.\n * A file that is neither version is refused here, before any passphrase is asked for: the path is what is wrong.\n */\nexport async function backupFileProtection(file: string): Promise<\"passphrase\" | \"none\"> {\n  const source = await fileSource(file);\n  try {\n    let found: Awaited<ReturnType<typeof readBackupHeader>>;\n    try { found = await readBackupHeader(source); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n    if (found) return found.header.protection;\n    if (!VERSION_1_START.test(new TextDecoder().decode(await source.read(0, 256)))) throw new CliError(\"refused\", \"This is not a Ghostly backup\");\n    return \"passphrase\";\n  } finally { await source.close(); }\n}\n\n/** Where a path named by a backup lands inside the new profile's files folder; never outside it. */\nfunction inside(root: string, path: unknown): string {\n  const target = typeof path === \"string\" && path ? resolve(root, path) : \"\";\n  if (!target.startsWith(resolve(root) + sep)) throw new CliError(\"refused\", \"The backup names a file outside its folder\");\n  return target;\n}\n\n/** While a restore writes it, the profile's folder is not a profile: no profile name starts with a dot (`listProfiles`). */\nconst RESTORING = /^\\.restoring-(.+)-(\\d+)$/;\n\n/**\n * The folder a restore writes into, beside the profiles: it takes the profile's name only once everything is in it,\n * so a restore that is stopped at any moment (Ctrl-C, a kill, the power) leaves no profile, whole or half-made.\n * What an earlier restore that was stopped left behind is removed here, once the process that made it is gone.\n */\nasync function restoringFolder(home: string, name: string): Promise<ProfilePaths> {\n  const root = join(home, \"profiles\");\n  await mkdir(root, { recursive: true, mode: 0o700 });\n  for (const entry of await readdir(root)) {\n    const pid = Number(RESTORING.exec(entry)?.[2]);\n    if (!pid) continue;\n    let alive = pid === process.pid;\n    if (!alive) try { process.kill(pid, 0); alive = true; } catch (error) { alive = (error as NodeJS.ErrnoException).code === \"EPERM\"; }\n    if (!alive) await rm(join(root, entry), { recursive: true, force: true });\n  }\n  const dir = join(root, `.restoring-${name}-${process.pid}`);\n  await rm(dir, { recursive: true, force: true });\n  await mkdir(dir, { mode: 0o700 });\n  return { ...profilePaths(home, name), dir, db: join(dir, \"db\"), files: join(dir, \"files\") };\n}\n\n/**\n * The folder is whole: marked as a restored copy (`RESTORED_MARK`, which names the files a light backup left out),\n * then given the profile's name. Never over a profile.\n */\nasync function finishRestore(home: string, name: string, work: ProfilePaths, leftOut: string[] = []): Promise<ProfilePaths> {\n  const paths = profilePaths(home, name);\n  await writeFile(join(work.dir, RESTORED_MARK), leftOut.length ? JSON.stringify({ leftOut }) : \"\", { mode: 0o600 });\n  if (existsSync(paths.dir)) throw new CliError(\"refused\", `Profile ${name} exists: restore into a new name`);\n  await rename(work.dir, paths.dir);\n  return paths;\n}\n\n/**\n * Opens the backup at `file` into a new profile (never over an existing one), with its passphrase when it has one.\n * Runs with no engine: nothing is open yet. A backup that is refused, damaged or cut short leaves no profile behind,\n * and neither does a restore that is stopped while it runs (`restoringFolder`). The profile is marked as a restored\n * copy: its engine, the first time it starts, treats the money in it as a restore does (`RESTORED_MARK`).\n */\nexport async function restoreProfile(home: string, name: string, file: string, passphrase?: string): Promise<ProfilePaths> {\n  if (profileExists(home, name)) throw new CliError(\"refused\", `Profile ${name} exists: restore into a new name`);\n  const source = await fileSource(file);\n  let work: ProfilePaths | null = null;\n  try {\n    let reader: BackupReader | null;\n    try { reader = await BackupReader.open(source, passphrase); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n    if (!reader) {\n      const payload = await readWhole(file, passphrase ?? \"\");\n      work = await restoringFolder(home, name);\n      await writeWhole(work, payload);\n      return await finishRestore(home, name, work);\n    }\n    const next = async () => { try { return await reader.next(); } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); } };\n    const parse = (json: string) => { try { return JSON.parse(json) as BackupRecord; } catch { throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); } };\n\n    // The first record is read (and with it the passphrase checked) before any folder is made.\n    const first = await next();\n    const head = first?.json === undefined ? null : parse(first.json);\n    if (head?.t !== \"profile\" || head.format !== FORMAT) throw new CliError(\"refused\", \"This backup is not a headless Ghostly profile\");\n    const leftOut = Array.isArray(head.light?.ids) ? head.light.ids.filter((id): id is string => typeof id === \"string\") : [];\n    work = await restoringFolder(home, name);\n    const paths = work;\n    await mkdir(paths.db, { recursive: true, mode: 0o700 });\n    let out: { handle: FileHandle; left: number } | null = null, files = 0, bytes = 0, ended = false, stored = false;\n    try {\n      for (let record = await next(); record; record = await next()) {\n        if (ended) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n        if (record.bytes) {\n          if (!out || record.bytes.length > out.left) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n          await out.handle.write(record.bytes);\n          out.left -= record.bytes.length;\n          continue;\n        }\n        if (out) { if (out.left) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); await out.handle.close(); out = null; }\n        const value = parse(record.json);\n        if (value.t === \"end\") { ended = value.files === files && value.bytes === bytes; if (!ended) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\"); continue; }\n        if (value.t !== \"file\" || !Number.isSafeInteger(value.size) || value.size < 0) continue;\n        let target: string;\n        if (value.kind === \"store\") { target = join(paths.db, \"snapshot.bin\"); stored = true; }\n        else { target = inside(paths.files, value.path); await mkdir(dirname(target), { recursive: true, mode: 0o700 }); files += 1; bytes += value.size; }\n        out = { handle: await open(target, \"wx\", 0o600), left: value.size };\n      }\n      if (out || !ended || !stored) throw new CliError(\"refused\", \"This backup is damaged: it was changed or cut short\");\n    } finally { await out?.handle.close().catch(() => {}); }\n    return await finishRestore(home, name, work, leftOut);\n  } catch (error) {\n    if (work) await rm(work.dir, { recursive: true, force: true });\n    throw error;\n  } finally {\n    await source.close();\n  }\n}\n\n/** A version 1 backup: one sealed JSON document, read whole. */\nasync function readWhole(file: string, passphrase: string): Promise<Payload1> {\n  let payload: Payload1;\n  try { payload = JSON.parse(await openEnvelope(await readFile(file, \"utf8\"), passphrase)) as Payload1; } catch (error) { throw new CliError(\"refused\", error instanceof Error ? error.message : String(error)); }\n  if (payload?.format !== FORMAT_1 || typeof payload.store !== \"string\" || !Array.isArray(payload.files)) throw new CliError(\"refused\", \"This backup is not a headless Ghostly profile\");\n  return payload;\n}\n\nasync function writeWhole(paths: ProfilePaths, payload: Payload1): Promise<void> {\n  await mkdir(paths.db, { recursive: true, mode: 0o700 });\n  await writeFile(join(paths.db, \"snapshot.bin\"), Buffer.from(payload.store, \"base64\"), { mode: 0o600 });\n  for (const entry of payload.files) {\n    const target = inside(paths.files, entry.path);\n    await mkdir(dirname(target), { recursive: true, mode: 0o700 });\n    await writeFile(target, Buffer.from(entry.data, \"base64\"), { mode: 0o600 });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,IAAa,cAAc;;AAE3B,IAAM,kBAAkB;;AAExB,IAAM,iBAAiB;AACvB,IAAM,mBAAmB;AACzB,IAAM,aAAa;AAGnB,IAAM,OAAO;CAAE,UAAU;CAAG,MAAM;CAAG,OAAO;CAAG,OAAO;AAAI;;AA0B1D,IAAa,kBAAb,cAAqC,MAAM;CACzC,cAAc;EAAE,MAAM,WAAW;EAAG,KAAK,OAAO;CAAc;AAChE;AAEA,IAAM,SAAS,WAAyB;CAAE,IAAI,QAAQ,SAAS,MAAM,IAAI,gBAAgB;AAAG;AAc5F,IAAM,oBAAoB,OAAO,sBAAsB;AACvD,eAAe,QAAQ,OAAmB,QAAiD,QAAQ,UAA+B;CAChI,MAAM,SAAS,IAAI,KAAK,CAAC,KAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU;CACpF,MAAM,SAAuB,CAAC;CAC9B,IAAI,OAAO;CACX,KAAK,IAAI,OAAO,MAAM,OAAO,KAAK,GAAG,CAAC,KAAK,MAAM,OAAO,MAAM,OAAO,KAAK,GAAG;EAC3E,QAAQ,KAAK,MAAM;EACnB,IAAI,OAAO,OAAO;GAAE,MAAM,OAAO,OAAO;GAAG,MAAM,IAAI,MAAM,qCAAqC;EAAG;EACnG,OAAO,KAAK,KAAK,KAAK;CACxB;CACA,IAAI,OAAO,WAAW,GAAG,OAAO,OAAO;CACvC,MAAM,MAAM,IAAI,WAAW,IAAI;CAC/B,IAAI,KAAK;CACT,KAAK,MAAM,SAAS,QAAQ;EAAE,IAAI,IAAI,OAAO,EAAE;EAAG,MAAM,MAAM;CAAQ;CACtE,OAAO;AACT;AAEA,eAAe,QAAQ,YAAoB,MAAkB,YAAwC;CACnG,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;CAC1H,OAAO,OAAO,OAAO,UAAU;EAAE,MAAM;EAAU,MAAM;EAAiB;EAAsB;CAAW,GAAG,UAAU;EAAE,MAAM;EAAW,QAAQ;CAAI,GAAG,OAAO,CAAC,WAAW,SAAS,CAAC;AACvL;AACA,IAAM,SAAS,OAAO,GAAG,UAAwB,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,WAAWA,OAAK,KAAK,CAAiB,CAAC;AAClI,SAASA,OAAK,OAAiC;CAC7C,IAAI,MAAM,WAAW,GAAG,OAAO,MAAM;CACrC,MAAM,MAAM,IAAI,WAAW,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC,CAAC;CAClE,IAAI,KAAK;CACT,KAAK,MAAM,QAAQ,OAAO;EAAE,IAAI,IAAI,MAAM,EAAE;EAAG,MAAM,KAAK;CAAQ;CAClE,OAAO;AACT;AACA,SAAS,OAAO,MAAc,QAA4B;CACxD,MAAM,sBAAM,IAAI,WAAW,CAAC;CAC5B,IAAI,KAAK;CACT,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,MAAM;CAC5C,OAAO;AACT;AACA,SAAS,MAAM,MAAkB,OAAe,MAA0B;CACxE,MAAM,sBAAM,IAAI,WAAW,EAAE;CAC7B,IAAI,IAAI,MAAM,CAAC;CACf,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,UAAU,GAAG,KAAK;CAC3C,IAAI,MAAM;CACV,OAAO;AACT;;AAGA,IAAa,eAAb,MAAa,aAAa;CAQa;CAAmC;CAAwC;CAA0B;CAAoC;CAP9K,QAAgB;;CAEhB,UAAU;CACV,WAAmB;;CAEnB,SAA4C;CAE5C,YAAoB,MAAmC,KAAwC,MAAmC,OAA2B,QAAuC;EAA/J,KAAA,OAAA;EAAmC,KAAA,MAAA;EAAwC,KAAA,OAAA;EAA0B,KAAA,QAAA;EAAoC,KAAA,SAAA;CAAuB;;CAGrM,aAAa,MAAM,MAAkB,YAA2B,QAAsB,UAAiB,GAA0B;EAC/H,IAAI,eAAe,QAAQ,WAAW,SAAS,IAAI,MAAM,IAAI,MAAM,sDAAsD;EACzH,MAAM,MAAM;EACZ,MAAM,OAAO,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC,GAAG,OAAO,OAAO,gCAAgB,IAAI,WAAW,CAAC,CAAC;EACxG,MAAM,SAAuB,eAAe,OACxC;GAAE,QAAQ;GAAkB;GAAS,YAAY;GAAQ,OAAO,EAAE,MAAM,gBAAgB;EAAE,IAC1F;GAAE,QAAQ;GAAkB;GAAS,YAAY;GAAc,KAAK;IAAE,MAAM;IAAiB,YAAY;IAAY,MAAM,YAAY,IAAI;GAAE;GAAG,QAAQ;IAAE,MAAM;IAAe,OAAO,YAAY,IAAI;GAAE;EAAE;EAC9M,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,GAAG,KAAK,UAAU,MAAM,EAAE,GAAG;EACnE,MAAM,MAAM,eAAe,OAAO,OAAO,MAAM,QAAQ,YAAY,MAAM,UAAU;EACnF,MAAM,SAAS,IAAI,aAAa,MAAM,KAAK,MAAM,MAAM,OAAO,IAAI,GAAG,MAAM;EAC3E,MAAM,KAAK,MAAM,IAAI;EACrB,OAAO,UAAU,KAAK;EACtB,OAAO;CACT;CAEA,MAAc,IAAI,MAAc,OAAkC;EAChE,MAAM,KAAK,MAAM;EACjB,IAAI,KAAK,QAAQ,MAAM,KAAK,OAAO;EACnC,IAAI,KAAK,UAAU,MAAM,IAAI,MAAM,iCAAiC;EACpE,IAAI,KAAK,SAAS,YAAY,MAAM,IAAI,MAAM,0BAA0B;EAExE,IAAI,MAAM,SAAS,iBAAiB,MAAM,IAAI,MAAM,oDAAoD;EACxG,IAAI;EACJ,IAAI,KAAK,KAAK;GAEZ,MAAM,SAAS,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;IAAE,MAAM;IAAW,IAAI,MAAM,KAAK,MAAM,KAAK,OAAO,IAAI;IAAmB,gBAAgB,KAAK;GAAsB,GAAG,KAAK,KAAK,KAAqB,CAAC;GACnN,MAAMA,OAAK,CAAC,OAAO,MAAM,OAAO,MAAM,GAAG,MAAM,CAAC;EAClD,OAAO;GACL,MAAM,OAAO,OAAO,MAAM,SAAS,KAAK,QAAQ,KAAK,MAAM,MAAM;GACjE,IAAI,SAAS,KAAK,OAAO,MAAMA,OAAK,CAAC,MAAM,KAAK,KAAK,CAAC;QACjD;IAAE,MAAMA,OAAK,CAAC,MAAM,KAAK,CAAC;IAAG,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,GAAG;GAAG;EAChF;EACA,KAAK,SAAS;EAGd,IAAI;GAAE,MAAM,KAAK,KAAK,MAAM,GAAG;EAAG,SAAS,OAAO;GAAE,KAAK,SAAS,EAAE,MAAM;GAAG,MAAM;EAAO;EAC1F,KAAK,WAAW,IAAI;CACtB;;CAGA,MAAM,KAAK,MAA6B;EACtC,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI;EAC3C,IAAI,MAAM,SAAS,gBAAgB,MAAM,IAAI,MAAM,oDAAoD;EACvG,IAAI,YAAY,GAAG,MAAM,KAAK,IAAI,KAAK,UAAU,MAAM,QAAQ,OAAO,IAAI,kBAAkB,MAAM,CAAC,CAAC;OAC/F,MAAM,KAAK,IAAI,KAAK,MAAM,KAAK;CACtC;;CAGA,MAAM,MAAM,OAAkC;EAC5C,KAAK,IAAI,KAAK,GAAG,KAAK,MAAM,QAAQ,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,OAAO,MAAM,SAAS,IAAI,KAAK,IAAI,MAAM,QAAQ,KAAK,WAAW,CAAC,CAAC;CAChJ;;CAGA,MAAM,SAA0B;EAC9B,MAAM,KAAK,IAAI,KAAK,uBAAO,IAAI,WAAW,CAAC;EAC3C,KAAK,WAAW;EAChB,OAAO,KAAK;CACd;AACF;;AAGA,eAAsB,iBAAiB,QAAkF;CACvH,MAAM,QAAQ,MAAM,OAAO,KAAK,GAAG,KAAK,IAAI,kBAAkB,OAAO,IAAI,CAAC;CAC1E,MAAM,MAAM,MAAM,QAAQ,EAAE;CAC5B,IAAI,MAAM,GAAG,OAAO;CACpB,IAAI;CACJ,IAAI;EAAE,SAAS,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC;CAAmB,QAAQ;EAAE,OAAO;CAAM;CACpH,IAAI,QAAQ,WAAW,oBAAoB,OAAO,OAAO,YAAY,YAAY,OAAO,UAAU,GAAG,OAAO;CAC5G,IAAI,OAAO,YAAY,KAAK,OAAO,YAAA,GAAuC,MAAM,IAAI,MAAM,8DAA8D;CACxJ,IAAI,OAAO,eAAe,QACpB;MAAA,OAAO,OAAO,SAAS,iBAAiB,MAAM,IAAI,MAAM,2BAA2B;CAAA,OAClF,IAAI,OAAO,eAAe,cAC3B;MAAA,OAAO,KAAK,SAAS,mBAAmB,EAAE,OAAO,IAAI,cAAc,eAAe,OAAO,IAAI,aAAa,OAAc,OAAO,QAAQ,SAAS,eAAe,MAAM,IAAI,MAAM,+BAA+B;CAAA,OAC7M,MAAM,IAAI,MAAM,2BAA2B;CAClD,OAAO;EAAE;EAAQ,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;CAAE;AACjD;AAOA,IAAM,UAAU;;AAGhB,IAAa,eAAb,MAAa,aAAa;CAOa;CAAuC;CAAwC;CAA0B;CAAmD;CANjM,QAAgB;CAChB;CACA,wBAA4B,IAAI,WAAW;CAC3C,UAAkB;CAClB,OAAe;CAEf,YAAoB,QAAuC,KAAwC,MAAmC,OAA2B,OAAe,QAAuC;EAAlL,KAAA,SAAA;EAAuC,KAAA,MAAA;EAAwC,KAAA,OAAA;EAA0B,KAAA,QAAA;EAAmD,KAAA,SAAA;EAAwB,KAAK,KAAK;CAAO;CAE1O,IAAI,aAAoC;EAAE,OAAO,KAAK,MAAM,eAAe;CAAQ;;CAGnF,aAAa,KAAK,QAAsB,YAAqB,QAAoD;EAC/G,MAAM,QAAQ,MAAM,iBAAiB,MAAM;EAC3C,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,MAAM;EACZ,MAAM,EAAE,QAAQ,SAAS;EACzB,IAAI,OAAO,eAAe,QAAQ,OAAO,IAAI,aAAa,QAAQ,sBAAM,IAAI,WAAW,GAAG,MAAM,OAAO,IAAI,GAAG,KAAK,QAAQ,MAAM;EACjI,IAAI,KAAgB;EACpB,IAAI;GACF,OAAO,cAAc,OAAO,OAAQ,KAAK;GACzC,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,OAAO;GAC9C,MAAM,MAAM,QAAQ,cAAc,IAAI,cAAc,OAAO,IAAK,IAAI,GAAG,OAAO,IAAK,UAAU;EAC/F,QAAQ;GAAE,MAAM,IAAI,MAAM,+BAA+B;EAAG;EAC5D,OAAO,IAAI,aAAa,QAAQ,KAAK,MAAM,MAAM,OAAO,IAAI,GAAG,KAAK,QAAQ,MAAM;CACpF;;CAGA,IAAI,WAAmB;EAAE,OAAO,KAAK;CAAI;;CAGzC,MAAc,KAAK,QAAqC;EACtD,IAAI,KAAK,KAAK,SAAS,KAAK,OAAO,MAAM,MAAM,IAAI,MAAM,OAAO;EAChE,MAAM,OAAO,KAAK,KAAK,KAAK;EAC5B,IAAI,OAAO,KAAK,OAAO,SAAS,KAAK,MAAM,QAAQ;GACjD,KAAK,QAAQ,MAAM,KAAK,OAAO,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,OAAO,OAAO,KAAK,IAAI,KAAK,IAAI,QAAQ,IAAI,WAAW,CAAC,CAAC;GACpH,KAAK,UAAU,KAAK;GACpB,IAAI,KAAK,MAAM,SAAS,QAAQ,MAAM,IAAI,MAAM,OAAO;EACzD;EACA,MAAM,MAAM,KAAK,MAAM,SAAS,KAAK,KAAK,KAAK,SAAS,KAAK,KAAK,KAAK,UAAU,MAAM;EACvF,KAAK,MAAM;EACX,OAAO;CACT;;CAGA,MAAM,OAAqC;EACzC,MAAM,KAAK,MAAM;EACjB,IAAI,KAAK,MAAM,OAAO;EACtB,MAAM,OAAO,MAAM,KAAK,KAAK,CAAC;EAC9B,MAAM,OAAO,KAAK,IAAI,SAAS,IAAI,SAAS,KAAK,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;EACxF,IAAI,SAAS,YAA+B,CAAC,OAAO,OAAO,IAAI,CAAC,CAAC,SAAS,IAAa,GAAG,MAAM,IAAI,MAAM,OAAO;EACjH,MAAM,WAAW,KAAK,MAAM;EAC5B,MAAM,OAAO,MAAM,KAAK,KAAK,MAAM;EACnC,IAAI;EACJ,IAAI,KAAK,KACP,IAAI;GACF,QAAQ,IAAI,WAAW,MAAM,OAAO,OAAO,QAAQ;IAAE,MAAM;IAAW,IAAI,MAAM,KAAK,MAAM,KAAK,OAAO,IAAI;IAAmB,gBAAgB,KAAK;GAAsB,GAAG,KAAK,KAAK,IAAoB,CAAC;EAC7M,QAAQ;GAAE,MAAM,IAAI,MAAM,KAAK,UAAU,IAAI,gDAAgD,OAAO;EAAG;OAClG,IAAI,SAAS,KAAK,OAAO;GAC9B,IAAI,KAAK,WAAW,MAAM,KAAK,MAAM,MAAM,MAAM,SAAS,KAAK,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,OAAO;GACjG,wBAAQ,IAAI,WAAW;EACzB,OAAO;GACL,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,UAAU,IAAI;GACpD,QAAQ,KAAK,MAAM;EACrB;EACA,KAAK,SAAS;EACd,IAAI,SAAS,KAAK,OAAO;GACvB,IAAI,MAAM,UAAU,KAAK,OAAO,KAAK,OAAO,MAAM,MAAM,IAAI,MAAM,OAAO;GACzE,KAAK,OAAO;GACZ,OAAO;EACT;EACA,IAAI,SAAS,KAAK,OAAO,OAAO,EAAE,OAAO,MAAM;EAC/C,MAAM,OAAO,SAAS,KAAK,WAAW,MAAM,QAAQ,OAAO,IAAI,oBAAoB,MAAM,GAAG,cAAc,CAAC,CAAC,OAAO,UAAmB;GAAE,MAAM,iBAAiB,SAAS,MAAM,QAAQ,WAAW,0BAA0B,IAAI,wBAAQ,IAAI,MAAM,OAAO;EAAG,CAAC,IAAI;EAChQ,OAAO,EAAE,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,EAAE;CAChD;AACF;;;;;;;;;;;;ACtRA,IAAa,mBAAmB;AAChC,IAAa,oBAAoB;;AAYjC,IAAa,eAAe,MAAc,UAA4B,SAAS,QAAQ,oBAAoB;;;;;;;;;ACL3G,IAAM,SAAS;AACf,IAAM,WAAW;AAcjB,eAAe,KAAK,MAAc,MAAM,MAAM,MAAgB,CAAC,GAAsB;CACnF,IAAI;CACJ,IAAI;EAAE,QAAQ,MAAM,QAAQ,GAAG;CAAG,QAAQ;EAAE,OAAO;CAAK;CACxD,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,KAAK,KAAK,IAAI;EAC3B,KAAK,MAAM,KAAK,IAAI,EAAA,CAAG,YAAY,GAAG,MAAM,KAAK,MAAM,MAAM,GAAG;OAC3D,IAAI,KAAK,SAAS,MAAM,IAAI,CAAC;CACpC;CACA,OAAO;AACT;;AAGA,eAAe,OAAO,QAAsB,MAAc,MAA6B;CACrF,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG;CACnC,IAAI;EACF,MAAM,SAAS,IAAI,WAAW,WAAW;EACzC,KAAK,IAAI,KAAK,GAAG,KAAK,OAAO;GAC3B,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,QAAQ,GAAG,KAAK,IAAI,aAAa,OAAO,EAAE,GAAG,EAAE;GACvF,IAAI,CAAC,WAAW,MAAM,IAAI,SAAS,eAAe,GAAG,KAAK,2CAA2C;GACrG,MAAM,OAAO,MAAM,OAAO,SAAS,GAAG,SAAS,CAAC;GAChD,MAAM;EACR;CACF,UAAU;EAAE,MAAM,OAAO,MAAM;CAAG;AACpC;AAEA,IAAa,iBAAyC;;;;;;;AAOpD,MAAM,iBAAiB,KAAK,QAAQ;CAClC,MAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,CAAC;CAE9C,IAAI,WAAW,IAAI,GAAG,MAAM,IAAI,SAAS,WAAW,GAAG,KAAK,6BAA6B;CACzF,MAAM,aAAa,IAAI,QAAQ,YAAY,GAAG,WAAW,KAAK,QAAQ,cAAc;CACpF,IAAI,CAAC,cAAc,CAAC,UAAU,MAAM,IAAI,SAAS,eAAe,6EAA6E;CAC7I,IAAI,cAAc,UAAU,MAAM,IAAI,SAAS,eAAe,6CAA6C;CAE3G,MAAM,SAAS,QAAQ,IAAI;CAC3B,IAAI,EAAE,MAAM,KAAK,MAAM,EAAA,CAAG,YAAY,GAAG,MAAM,IAAI,SAAS,aAAa,2BAA2B,QAAQ;CAC5G,MAAM,QAAQ,IAAI,QAAQ;CAG1B,MAAM,QAAQ,KAAK,MAAM,IAAI,gBAAgB,QAAQ,IAAI,KAAK;CAC9D,MAAM,IAAI,QAAQ,MAAM,eAAe,KAAK;CAC5C,MAAM,QAAQ,KAAK,QAAQ,OAAO;CAClC,MAAM,MAAM,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM,KAAK,EAAA,CAAG,IAAI,OAAO,UAAU;EAAE;EAAM,OAAO,MAAM,KAAK,KAAK,MAAM,OAAO,IAAI,CAAC,EAAA,CAAG;CAAK,EAAE,CAAC;CAEzI,MAAM,OAAO,OAAO,SAAyC,YAAY,KAAK,MAAM,KAAK,KAAM,KAAK,QAAA,WAA6B,CAAC,EAAE,MAAM,UAAU,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS,EAAA,EAAI,UAAU;CAChN,MAAM,QAAoB,CAAC,GAAG,UAAsB,CAAC;CACrD,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC,SAAU,MAAM,KAAK,IAAI,IAAK,QAAQ,QAAA,CAAS,KAAK,IAAI;CAClF,MAAM,aAAa,MAAM,KAAK,KAAK,EAAA,CAAG,MAAM,QAAQ,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;CAClG,MAAM,eAAe,QAAQ,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;CAErE,MAAM,UAAU,GAAG,KAAK,WAAW,QAAQ;CAC3C,IAAI,MAAyB;CAC7B,IAAI;EACF,MAAM,MAAM,SAAS,OAAO;EAC5B,MAAM,SAAS;EACf,IAAI;EACJ,IAAI;GAAE,SAAS,MAAM,aAAa,MAAM,EAAE,OAAO,OAAO,UAAU;IAAE,MAAM,OAAO,MAAM,KAAK;GAAG,EAAE,GAAG,WAAW,OAAO,UAAW;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACjP,MAAM,OAAO,WAAyB,OAAO,KAAK,KAAK,UAAU,MAAM,CAAC;EACxE,MAAM,IAAI;GAAE,GAAG;GAAW,QAAQ;GAAQ,WAAW,KAAK,IAAI;GAAG,OAAO,MAAM;GAAQ;GAAO,GAAI,SAAS,EAAE,OAAO;IAAE,cAAA;IAAgC,eAAA;IAAkC,OAAO,QAAQ;IAAQ,OAAO;IAAc,KAAK,QAAQ,KAAK,SAAS,SAAS,KAAK,IAAI,CAAC;GAAE,EAAE;EAAG,CAAC;EACzR,MAAM,IAAI;GAAE,GAAG;GAAQ,MAAM;GAAS,MAAM;EAAU,CAAC;EACvD,MAAM,OAAO,QAAQ,OAAO,SAAS;EACrC,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,IAAI;IAAE,GAAG;IAAQ,MAAM;IAAQ,MAAM,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;IAAG,MAAM,KAAK;GAAK,CAAC;GAC5F,MAAM,OAAO,QAAQ,KAAK,MAAM,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI;EAC9D;EACA,MAAM,IAAI;GAAE,GAAG;GAAO,OAAO,MAAM;GAAQ;EAAM,CAAC;EAClD,MAAM,UAAU,MAAM,OAAO,OAAO;EACpC,MAAM,OAAO,KAAK;EAClB,MAAM,OAAO,MAAM;EACnB,MAAM;EAEN,IAAI;GAAE,MAAM,KAAK,SAAS,IAAI;EAAG,SAAS,OAAO;GAAE,MAAO,MAAgC,SAAS,WAAW,IAAI,SAAS,WAAW,GAAG,KAAK,6BAA6B,IAAI;EAAO;EACtL,OAAO;GAAE;GAAM,OAAO;GAAS,OAAO,MAAM;GAAQ,YAAY,WAAW,SAAS;GAAc,GAAI,SAAS;IAAE,OAAO;IAAM,SAAS,QAAQ;IAAQ;GAAa;EAAG;CACzK,UAAU;EACR,MAAM,KAAK,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;EACjC,MAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC;EACjC,MAAM,GAAG,OAAO,EAAE,OAAO,KAAK,CAAC;CACjC;AACF,EACF;AAEA,eAAe,SAAS,MAAmC;CACzD,IAAI;EAAE,OAAO,MAAM,KAAK,MAAM,MAAM,GAAK;CAAG,SAAS,OAAO;EAC1D,IAAK,MAAgC,SAAS,UAAU;GAAE,MAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;GAAG,OAAO,KAAK,MAAM,MAAM,GAAK;EAAG;EAC3H,MAAM;CACR;AACF;;AAGA,eAAe,WAAW,MAAkE;CAC1F,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG;CACnC,MAAM,QAAQ,MAAM,OAAO,KAAK;CAChC,IAAI,MAAM,YAAY,GAAG;EAAE,MAAM,OAAO,MAAM;EAAG,MAAM,IAAI,SAAS,eAAe,GAAG,KAAK,0BAA0B;CAAG;CACxH,MAAM,EAAE,SAAS;CACjB,OAAO;EACL;EACA,MAAM,OAAO,QAAQ,WAAW;GAC9B,MAAM,SAAS,IAAI,WAAW,KAAK,IAAI,GAAG,KAAK,IAAI,QAAQ,OAAO,MAAM,CAAC,CAAC;GAC1E,IAAI,MAAM;GACV,OAAO,MAAM,OAAO,QAAQ;IAAE,MAAM,EAAE,cAAc,MAAM,OAAO,KAAK,QAAQ,KAAK,OAAO,SAAS,KAAK,SAAS,GAAG;IAAG,IAAI,CAAC,WAAW;IAAO,OAAO;GAAW;GAChK,OAAO,OAAO,SAAS,GAAG,GAAG;EAC/B;EACA,aAAa,OAAO,MAAM;CAC5B;AACF;;AAGA,IAAM,kBAAkB;;;;;AAMxB,eAAsB,qBAAqB,MAA8C;CACvF,MAAM,SAAS,MAAM,WAAW,IAAI;CACpC,IAAI;EACF,IAAI;EACJ,IAAI;GAAE,QAAQ,MAAM,iBAAiB,MAAM;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACvJ,IAAI,OAAO,OAAO,MAAM,OAAO;EAC/B,IAAI,CAAC,gBAAgB,KAAK,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,OAAO,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,MAAM,IAAI,SAAS,WAAW,8BAA8B;EAC5I,OAAO;CACT,UAAU;EAAE,MAAM,OAAO,MAAM;CAAG;AACpC;;AAGA,SAAS,OAAO,MAAc,MAAuB;CACnD,MAAM,SAAS,OAAO,SAAS,YAAY,OAAO,QAAQ,MAAM,IAAI,IAAI;CACxE,IAAI,CAAC,OAAO,WAAW,QAAQ,IAAI,IAAI,GAAG,GAAG,MAAM,IAAI,SAAS,WAAW,4CAA4C;CACvH,OAAO;AACT;;AAGA,IAAM,YAAY;;;;;;AAOlB,eAAe,gBAAgB,MAAc,MAAqC;CAChF,MAAM,OAAO,KAAK,MAAM,UAAU;CAClC,MAAM,MAAM,MAAM;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAClD,KAAK,MAAM,SAAS,MAAM,QAAQ,IAAI,GAAG;EACvC,MAAM,MAAM,OAAO,UAAU,KAAK,KAAK,CAAC,GAAG,EAAE;EAC7C,IAAI,CAAC,KAAK;EACV,IAAI,QAAQ,QAAQ,QAAQ;EAC5B,IAAI,CAAC,OAAO,IAAI;GAAE,QAAQ,KAAK,KAAK,CAAC;GAAG,QAAQ;EAAM,SAAS,OAAO;GAAE,QAAS,MAAgC,SAAS;EAAS;EACnI,IAAI,CAAC,OAAO,MAAM,GAAG,KAAK,MAAM,KAAK,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAC1E;CACA,MAAM,MAAM,KAAK,MAAM,cAAc,KAAK,GAAG,QAAQ,KAAK;CAC1D,MAAM,GAAG,KAAK;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAC9C,MAAM,MAAM,KAAK,EAAE,MAAM,IAAM,CAAC;CAChC,OAAO;EAAE,GAAG,aAAa,MAAM,IAAI;EAAG;EAAK,IAAI,KAAK,KAAK,IAAI;EAAG,OAAO,KAAK,KAAK,OAAO;CAAE;AAC5F;;;;;AAMA,eAAe,cAAc,MAAc,MAAc,MAAoB,UAAoB,CAAC,GAA0B;CAC1H,MAAM,QAAQ,aAAa,MAAM,IAAI;CACrC,MAAM,UAAU,KAAK,KAAK,KAAK,aAAa,GAAG,QAAQ,SAAS,KAAK,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,MAAM,IAAM,CAAC;CACjH,IAAI,WAAW,MAAM,GAAG,GAAG,MAAM,IAAI,SAAS,WAAW,WAAW,KAAK,iCAAiC;CAC1G,MAAM,OAAO,KAAK,KAAK,MAAM,GAAG;CAChC,OAAO;AACT;;;;;;;AAQA,eAAsB,eAAe,MAAc,MAAc,MAAc,YAA4C;CACzH,IAAI,cAAc,MAAM,IAAI,GAAG,MAAM,IAAI,SAAS,WAAW,WAAW,KAAK,iCAAiC;CAC9G,MAAM,SAAS,MAAM,WAAW,IAAI;CACpC,IAAI,OAA4B;CAChC,IAAI;EACF,IAAI;EACJ,IAAI;GAAE,SAAS,MAAM,aAAa,KAAK,QAAQ,UAAU;EAAG,SAAS,OAAO;GAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EAAG;EACrK,IAAI,CAAC,QAAQ;GACX,MAAM,UAAU,MAAM,UAAU,MAAM,cAAc,EAAE;GACtD,OAAO,MAAM,gBAAgB,MAAM,IAAI;GACvC,MAAM,WAAW,MAAM,OAAO;GAC9B,OAAO,MAAM,cAAc,MAAM,MAAM,IAAI;EAC7C;EACA,MAAM,OAAO,YAAY;GAAE,IAAI;IAAE,OAAO,MAAM,OAAO,KAAK;GAAG,SAAS,OAAO;IAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;GAAG;EAAE;EACxK,MAAM,SAAS,SAAiB;GAAE,IAAI;IAAE,OAAO,KAAK,MAAM,IAAI;GAAmB,QAAQ;IAAE,MAAM,IAAI,SAAS,WAAW,qDAAqD;GAAG;EAAE;EAGnL,MAAM,QAAQ,MAAM,KAAK;EACzB,MAAM,OAAO,OAAO,SAAS,KAAA,IAAY,OAAO,MAAM,MAAM,IAAI;EAChE,IAAI,MAAM,MAAM,aAAa,KAAK,WAAW,QAAQ,MAAM,IAAI,SAAS,WAAW,+CAA+C;EAClI,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,GAAG,IAAI,KAAK,MAAM,IAAI,QAAQ,OAAqB,OAAO,OAAO,QAAQ,IAAI,CAAC;EACxH,OAAO,MAAM,gBAAgB,MAAM,IAAI;EACvC,MAAM,QAAQ;EACd,MAAM,MAAM,MAAM,IAAI;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACtD,IAAI,MAAmD,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,OAAO,SAAS;EAC3G,IAAI;GACF,KAAK,IAAI,SAAS,MAAM,KAAK,GAAG,QAAQ,SAAS,MAAM,KAAK,GAAG;IAC7D,IAAI,OAAO,MAAM,IAAI,SAAS,WAAW,qDAAqD;IAC9F,IAAI,OAAO,OAAO;KAChB,IAAI,CAAC,OAAO,OAAO,MAAM,SAAS,IAAI,MAAM,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAC/H,MAAM,IAAI,OAAO,MAAM,OAAO,KAAK;KACnC,IAAI,QAAQ,OAAO,MAAM;KACzB;IACF;IACA,IAAI,KAAK;KAAE,IAAI,IAAI,MAAM,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAAG,MAAM,IAAI,OAAO,MAAM;KAAG,MAAM;IAAM;IACrJ,MAAM,QAAQ,MAAM,OAAO,IAAI;IAC/B,IAAI,MAAM,MAAM,OAAO;KAAE,QAAQ,MAAM,UAAU,SAAS,MAAM,UAAU;KAAO,IAAI,CAAC,OAAO,MAAM,IAAI,SAAS,WAAW,qDAAqD;KAAG;IAAU;IAC7L,IAAI,MAAM,MAAM,UAAU,CAAC,OAAO,cAAc,MAAM,IAAI,KAAK,MAAM,OAAO,GAAG;IAC/E,IAAI;IACJ,IAAI,MAAM,SAAS,SAAS;KAAE,SAAS,KAAK,MAAM,IAAI,cAAc;KAAG,SAAS;IAAM,OACjF;KAAE,SAAS,OAAO,MAAM,OAAO,MAAM,IAAI;KAAG,MAAM,MAAM,QAAQ,MAAM,GAAG;MAAE,WAAW;MAAM,MAAM;KAAM,CAAC;KAAG,SAAS;KAAG,SAAS,MAAM;IAAM;IAClJ,MAAM;KAAE,QAAQ,MAAM,KAAK,QAAQ,MAAM,GAAK;KAAG,MAAM,MAAM;IAAK;GACpE;GACA,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,MAAM,IAAI,SAAS,WAAW,qDAAqD;EACnH,UAAU;GAAE,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;EAAG;EACvD,OAAO,MAAM,cAAc,MAAM,MAAM,MAAM,OAAO;CACtD,SAAS,OAAO;EACd,IAAI,MAAM,MAAM,GAAG,KAAK,KAAK;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC7D,MAAM;CACR,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;;AAGA,eAAe,UAAU,MAAc,YAAuC;CAC5E,IAAI;CACJ,IAAI;EAAE,UAAU,KAAK,MAAM,MAAMC,OAAa,MAAM,SAAS,MAAM,MAAM,GAAG,UAAU,CAAC;CAAe,SAAS,OAAO;EAAE,MAAM,IAAI,SAAS,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CAAG;CAC/M,IAAI,SAAS,WAAW,YAAY,OAAO,QAAQ,UAAU,YAAY,CAAC,MAAM,QAAQ,QAAQ,KAAK,GAAG,MAAM,IAAI,SAAS,WAAW,+CAA+C;CACrL,OAAO;AACT;AAEA,eAAe,WAAW,OAAqB,SAAkC;CAC/E,MAAM,MAAM,MAAM,IAAI;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACtD,MAAM,UAAU,KAAK,MAAM,IAAI,cAAc,GAAG,OAAO,KAAK,QAAQ,OAAO,QAAQ,GAAG,EAAE,MAAM,IAAM,CAAC;CACrG,KAAK,MAAM,SAAS,QAAQ,OAAO;EACjC,MAAM,SAAS,OAAO,MAAM,OAAO,MAAM,IAAI;EAC7C,MAAM,MAAM,QAAQ,MAAM,GAAG;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAC7D,MAAM,UAAU,QAAQ,OAAO,KAAK,MAAM,MAAM,QAAQ,GAAG,EAAE,MAAM,IAAM,CAAC;CAC5E;AACF"}

package/dist/assets/blobFiles-B0rNnHlO.js

@@ -0,0 +1,35 @@
+import { l as fileStore } from "./idb-CMVgtn2k.js";
+import { o as fileBytes } from "./fileBytes-B-fqGdEd.js";
+//#region src/runtime/blobFiles.ts
+/** Files moved at once: their Blobs are in memory already, and each one is read and written a step at a time. */
+var AT_ONCE = 4;
+/**
+* Files a profile took before every received file went to file storage (held files, hold/1, up to 1.3.0): their bytes
+* are a Blob in their record, which the store keeps in memory and writes whole into `snapshot.bin` (100 MB for 24
+* pictures), read back at every start and one-shot. Each one goes to the profile's files folder, then its record says so
+* and drops the Blob. Called before the engine starts; a file that fails stays as it was, and goes at the next start.
+* Resolves to how many moved: the caller folds the store's journal into a small snapshot then.
+*/
+async function moveBlobFiles() {
+	const ids = await fileStore.blobIds();
+	if (!ids.length) return 0;
+	const storage = await fileBytes();
+	let moved = 0;
+	const move = async (id) => {
+		const file = await fileStore.get(id);
+		if (!file?.blob || file.metadata?.size !== file.blob.size) return;
+		try {
+			await storage.stage(id, file.blob);
+			if (await fileStore.movedToBytes(id, storage.kind)) moved++;
+			else await storage.remove(id);
+		} catch {
+			await storage.remove(id).catch(() => {});
+		}
+	};
+	for (let i = 0; i < ids.length; i += AT_ONCE) await Promise.all(ids.slice(i, i + AT_ONCE).map(move));
+	return moved;
+}
+//#endregion
+export { moveBlobFiles };
+
+//# sourceMappingURL=blobFiles-B0rNnHlO.js.map

package/dist/assets/blobFiles-B0rNnHlO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobFiles-B0rNnHlO.js","names":[],"sources":["../../src/runtime/blobFiles.ts"],"sourcesContent":["import { fileBytes } from \"@ghostly/browser/shared/fileBytes\";\nimport { fileStore } from \"@ghostly/browser/shared/idb\";\n\n/** Files moved at once: their Blobs are in memory already, and each one is read and written a step at a time. */\nconst AT_ONCE = 4;\n\n/**\n * Files a profile took before every received file went to file storage (held files, hold/1, up to 1.3.0): their bytes\n * are a Blob in their record, which the store keeps in memory and writes whole into `snapshot.bin` (100 MB for 24\n * pictures), read back at every start and one-shot. Each one goes to the profile's files folder, then its record says so\n * and drops the Blob. Called before the engine starts; a file that fails stays as it was, and goes at the next start.\n * Resolves to how many moved: the caller folds the store's journal into a small snapshot then.\n */\nexport async function moveBlobFiles(): Promise<number> {\n  const ids = await fileStore.blobIds();\n  if (!ids.length) return 0;\n  const storage = await fileBytes();\n  let moved = 0;\n  const move = async (id: string) => {\n    const file = await fileStore.get(id);\n    // Its size is read off its metadata once the Blob is gone (`storedSize`): one without stays as it is.\n    if (!file?.blob || file.metadata?.size !== file.blob.size) return;\n    try {\n      await storage.stage(id, file.blob);\n      if (await fileStore.movedToBytes(id, storage.kind)) moved++;\n      else await storage.remove(id);\n    } catch {\n      await storage.remove(id).catch(() => {});\n    }\n  };\n  for (let i = 0; i < ids.length; i += AT_ONCE) await Promise.all(ids.slice(i, i + AT_ONCE).map(move));\n  return moved;\n}\n"],"mappings":";;;;AAIA,IAAM,UAAU;;;;;;;;AAShB,eAAsB,gBAAiC;CACrD,MAAM,MAAM,MAAM,UAAU,QAAQ;CACpC,IAAI,CAAC,IAAI,QAAQ,OAAO;CACxB,MAAM,UAAU,MAAM,UAAU;CAChC,IAAI,QAAQ;CACZ,MAAM,OAAO,OAAO,OAAe;EACjC,MAAM,OAAO,MAAM,UAAU,IAAI,EAAE;EAEnC,IAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,SAAS,KAAK,KAAK,MAAM;EAC3D,IAAI;GACF,MAAM,QAAQ,MAAM,IAAI,KAAK,IAAI;GACjC,IAAI,MAAM,UAAU,aAAa,IAAI,QAAQ,IAAI,GAAG;QAC/C,MAAM,QAAQ,OAAO,EAAE;EAC9B,QAAQ;GACN,MAAM,QAAQ,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;EACzC;CACF;CACA,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,SAAS,MAAM,QAAQ,IAAI,IAAI,MAAM,GAAG,IAAI,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;CACnG,OAAO;AACT"}

package/dist/assets/{buttons-BtxwyM2l.js → buttons-YgijrprJ.js}

@@ -1,6 +1,6 @@
-import { $a as buttonLabelClash, Cl as randomBytes, Za as STATUS_CARD_LIMITS, fi as BUTTONS_CAPABILITY, no as checkStatusCard, wl as toBase64Url } from "./src-Dg1bvMNv.js";
-import { t as CliError } from "./errors-B-zMxbcd.js";
-import { _ as str, d as messageOf, f as node, i as chatOrGroup, m as oneOf, n as bool, p as num } from "./apiKit-B4qhnLQT.js";
+import { $l as randomBytes, Va as buttonLabelClash, Wa as checkStatusCard, eu as toBase64Url, ni as BUTTONS_CAPABILITY, za as STATUS_CARD_LIMITS } from "./src-DzXL-GYu.js";
+import { t as CliError } from "./errors-BLSPp0tK.js";
+import { _ as str, d as messageOf, f as node, i as chatOrGroup, m as oneOf, n as bool, p as num } from "./apiKit-BpIUCwa-.js";
 import { sha256 } from "@noble/hashes/sha2.js";
 import { createBase58check } from "@scure/base";
 import { wordlist } from "@scure/bip39/wordlists/english.js";
@@ -493,4 +493,4 @@ var BUTTON_METHODS = {
 //#endregion
 export { waitForEdit as a, findSecret as c, pressable as i, buttonsCard as n, waitForGroupFrame as o, buttonsOf as r, waitForMessage as s, BUTTON_METHODS as t };
 
-//# sourceMappingURL=buttons-BtxwyM2l.js.map
+//# sourceMappingURL=buttons-YgijrprJ.js.map

package/dist/assets/{buttons-BtxwyM2l.js.map → buttons-YgijrprJ.js.map}

@@ -1 +1 @@
-{"version":3,"file":"buttons-BtxwyM2l.js","names":[],"sources":["../../../../apps/ui/src/lib/parse/secrets.ts","../../src/waits.ts","../../src/buttons.ts"],"sourcesContent":["import { sha256 } from \"@noble/hashes/sha2.js\";\nimport { createBase58check } from \"@scure/base\";\nimport { wordlist } from \"@scure/bip39/wordlists/english.js\";\n\n/**\n * What the composer asks about before a message goes: text that looks like a secret someone could take funds or an\n * identity with, or a Cashu token (bearer money: the text box would hand it to whoever reads the chat).\n *\n * Detection is local and synchronous, and a finding never carries the text it found: only what kind it is and, for\n * ecash, the amount decoded here. Ark, Spark and Fedimint wallets are BIP39 seeds or raw keys, caught by the rules\n * below; Fedimint ecash notes are plain base64 with no prefix, so they are not recognised.\n */\nexport type SecretFinding =\n  | { kind: \"mnemonic\" | \"nsec\" | \"bitcoin-key\" | \"hex-key\" }\n  | { kind: \"cashu\"; amount: number | null; unit: string };\n\nexport type SecretKind = SecretFinding[\"kind\"];\n\nconst WORD_INDEX = new Map(wordlist.map((word, index) => [word, index]));\nconst MNEMONIC_LENGTHS = [12, 15, 18, 21, 24];\n/** Checksums tried per message at most: a 16 KiB run of seed words stays a few milliseconds. */\nconst CHECKSUM_BUDGET = 4096;\n\nconst NSEC = /\\bnsec1[02-9ac-hj-np-z]{58}(?![02-9ac-hj-np-z])/i;\nconst EXTENDED_PRIVATE = /\\b[xtyzuvYZUV]prv[1-9A-HJ-NP-Za-km-z]{100,}/;\nconst WIF = /\\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\\b/g;\nconst HEX_SECRET = /\\b(?:0x)?(?:[0-9a-fA-F]{128}|[0-9a-fA-F]{64})\\b/g;\nconst SECRET_CONTEXT = /priv(?:ate)?[\\s_-]*key|secret|seed|mnemonic|nsec|xprv|\\bwif\\b|recovery|passphrase/i;\n/** How far from a 64-hex string a word like \"seed\" still counts as saying what it is. */\nconst CONTEXT_REACH = 48;\nconst CASHU_TOKEN = /\\bcashu([AB])([A-Za-z0-9_\\-+/]{20,}={0,2})/g;\n\n/**\n * Characters that take no room on screen: format characters (zero-width space, soft hyphen, word joiner, the joiners,\n * direction marks), control characters that are not white space, variation selectors, the grapheme joiner and the\n * Hangul fillers. A page, a PDF or a terminal puts some of them into long strings as places to break a line.\n */\nconst INVISIBLE = /(?![\\t\\n\\v\\f\\r\\x85])[\\p{Cc}\\p{Cf}]|\\u034f|[\\u115f\\u1160\\u3164\\uffa0]|[\\ufe00-\\ufe0f]|[\\u{e0100}-\\u{e01ef}]/gu;\n\nconst base58check = createBase58check(sha256);\n\n/**\n * The first secret in `text`, keys and seeds before ecash; null for anything else. The text is read as it is and as\n * it reads without its invisible characters: a key with one inside is whole again once the reader takes it out.\n */\nexport function findSecret(text: string): SecretFinding | null {\n  const visible = text.replace(INVISIBLE, \"\");\n  const readings = visible === text ? [text] : [text, visible];\n  if (readings.some(hasMnemonic)) return { kind: \"mnemonic\" };\n  if (readings.some((reading) => NSEC.test(reading))) return { kind: \"nsec\" };\n  if (readings.some((reading) => EXTENDED_PRIVATE.test(reading) || hasWif(reading))) return { kind: \"bitcoin-key\" };\n  if (readings.some(hasHexSecret)) return { kind: \"hex-key\" };\n  const tokens = readings.map(findCashu);\n  return tokens.find((found) => found?.kind === \"cashu\" && found.amount !== null) ?? tokens.find((found) => found) ?? null;\n}\n\n/**\n * 12 to 24 words in a row from the English BIP39 list whose checksum holds, anywhere in the text; or a message that\n * is nothing but 12, 15, 18, 21 or 24 of those words (a seed with one word mistyped is still most of a seed). Prose\n * breaks a run at once: \"the\", \"a\", \"is\", \"to\", \"and\", \"of\" and \"I\" are not on the list.\n *\n * One word said over and over is not a seed, though one in 16 such runs passes a 12-word checksum (\"word\" does): a\n * window of a single word never counts, and a window mostly of one word (\"abandon … about\") counts only when that\n * word does not go on past it on either side.\n */\nfunction hasMnemonic(text: string): boolean {\n  const tokens = text.toLowerCase().match(/[a-z]+/g);\n  if (!tokens || tokens.length < 12) return false;\n  let budget = CHECKSUM_BUDGET;\n  let run: number[] = [];\n  const seedLike = (start: number, length: number) => {\n    const window = run.slice(start, start + length);\n    const counts = new Map<number, number>();\n    for (const word of window) counts.set(word, (counts.get(word) ?? 0) + 1);\n    if (counts.size === 1) return false;\n    const [most, times] = [...counts].reduce((a, b) => (b[1] > a[1] ? b : a));\n    if (times > length / 2 && (run[start - 1] === most || run[start + length] === most)) return false;\n    return checksumHolds(window);\n  };\n  const check = () => {\n    if (run.length >= 12) {\n      for (const length of MNEMONIC_LENGTHS) {\n        for (let start = 0; start + length <= run.length && budget > 0; start++, budget--) {\n          if (seedLike(start, length)) return true;\n        }\n      }\n      if (run.length === tokens.length && MNEMONIC_LENGTHS.includes(run.length) && new Set(run).size > 1) return true;\n    }\n    run = [];\n    return false;\n  };\n  for (const token of tokens) {\n    const index = WORD_INDEX.get(token);\n    if (index !== undefined) run.push(index);\n    else if (check()) return true;\n  }\n  return check();\n}\n\n/** BIP39: the words' 11-bit indices are the entropy followed by the first bits of its SHA-256. */\nfunction checksumHolds(indices: number[]): boolean {\n  const bits = indices.length * 11, checksumBits = bits / 33, entropyBytes = (bits - checksumBits) / 8;\n  const bytes = new Uint8Array(Math.ceil(bits / 8));\n  indices.forEach((index, i) => {\n    for (let b = 0; b < 11; b++) if (index & (1 << (10 - b))) { const at = i * 11 + b; bytes[at >> 3] |= 0x80 >> (at & 7); }\n  });\n  const expected = sha256(bytes.subarray(0, entropyBytes))[0] >> (8 - checksumBits);\n  const got = bytes[entropyBytes] >> (8 - checksumBits);\n  return expected === got;\n}\n\n/** A WIF private key: base58check with version 0x80 (mainnet) or 0xef (testnet), 32 bytes and an optional 0x01. */\nfunction hasWif(text: string): boolean {\n  for (const [candidate] of text.matchAll(WIF)) {\n    try {\n      const payload = base58check.decode(candidate);\n      if ((payload[0] === 0x80 || payload[0] === 0xef) && (payload.length === 33 || (payload.length === 34 && payload[33] === 1))) return true;\n    } catch { /* not base58check: an ordinary word */ }\n  }\n  return false;\n}\n\n/** 64 or 128 hex digits with \"private key\", \"secret\", \"seed\" or the like close by. A bare hash is not asked about. */\nfunction hasHexSecret(text: string): boolean {\n  for (const match of text.matchAll(HEX_SECRET)) {\n    const before = text.slice(Math.max(0, match.index - CONTEXT_REACH), match.index);\n    const after = text.slice(match.index + match[0].length, match.index + match[0].length + CONTEXT_REACH);\n    if (SECRET_CONTEXT.test(before) || SECRET_CONTEXT.test(after)) return true;\n  }\n  return false;\n}\n\n/** Every Cashu token in the text, with their amounts added up when all of them decode and share one unit. */\nfunction findCashu(text: string): SecretFinding | null {\n  const tokens = [...text.matchAll(CASHU_TOKEN)].map(([, version, body]) => decodeCashu(version as \"A\" | \"B\", body));\n  if (!tokens.length) return null;\n  const unit = tokens.find((token) => token)?.unit ?? \"sat\";\n  const readable = tokens.every((token) => token && token.unit === unit);\n  return { kind: \"cashu\", amount: readable ? tokens.reduce((sum, token) => sum + token!.amount, 0) : null, unit };\n}\n\n/** What a Cashu token is worth, read from the token itself (NUT-00): nothing is asked of the mint. */\nexport function decodeCashu(version: \"A\" | \"B\", body: string): { amount: number; unit: string } | null {\n  try {\n    const bytes = fromBase64(body);\n    if (version === \"A\") {\n      const token = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes)) as { token?: { proofs?: { amount?: unknown }[] }[]; unit?: unknown };\n      return total(token.token?.flatMap((entry) => entry.proofs ?? []).map((proof) => proof.amount), token.unit);\n    }\n    const token = decodeCbor(bytes) as { t?: { p?: { a?: unknown }[] }[]; u?: unknown } | null;\n    return total(token?.t?.flatMap((entry) => entry.p ?? []).map((proof) => proof.a), token?.u);\n  } catch {\n    return null;\n  }\n}\n\nfunction total(amounts: unknown[] | undefined, unit: unknown): { amount: number; unit: string } | null {\n  if (!amounts?.length || !amounts.every((a): a is number => Number.isSafeInteger(a) && (a as number) >= 0)) return null;\n  const amount = amounts.reduce((sum, a) => sum + a, 0);\n  return Number.isSafeInteger(amount) ? { amount, unit: typeof unit === \"string\" && unit ? unit : \"sat\" } : null;\n}\n\nfunction fromBase64(text: string): Uint8Array {\n  const standard = text.replace(/-/g, \"+\").replace(/_/g, \"/\").replace(/=+$/, \"\");\n  const binary = atob(standard + \"=\".repeat((4 - (standard.length % 4)) % 4));\n  return Uint8Array.from(binary, (c) => c.charCodeAt(0));\n}\n\n/** Enough CBOR (RFC 8949) for a cashuB token: definite lengths, integers, bytes, text, arrays, maps, tags, simple values. */\nfunction decodeCbor(bytes: Uint8Array): unknown {\n  let at = 0, depth = 0;\n  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);\n  const length = (info: number): number => {\n    if (info < 24) return info;\n    const size = info === 24 ? 1 : info === 25 ? 2 : info === 26 ? 4 : info === 27 ? 8 : 0;\n    if (!size || at + size > bytes.length) throw new Error(\"cbor\");\n    let value = 0;\n    for (let i = 0; i < size; i++) value = value * 256 + bytes[at + i];\n    at += size;\n    return value;\n  };\n  const item = (): unknown => {\n    if (at >= bytes.length || ++depth > 32) throw new Error(\"cbor\");\n    const head = bytes[at++], major = head >> 5, info = head & 31;\n    try {\n      if (major === 7) {\n        if (info === 20) return false;\n        if (info === 21) return true;\n        if (info === 22 || info === 23) return null;\n        if (info === 25) { at += 2; return NaN; } // a half float: never in a token\n        if (info === 26) { at += 4; return view.getFloat32(at - 4); }\n        if (info === 27) { at += 8; return view.getFloat64(at - 8); }\n        throw new Error(\"cbor\");\n      }\n      const n = length(info);\n      switch (major) {\n        case 0: return n;\n        case 1: return -1 - n;\n        case 2: case 3: {\n          if (at + n > bytes.length) throw new Error(\"cbor\");\n          const slice = bytes.subarray(at, (at += n));\n          return major === 2 ? slice : new TextDecoder(\"utf-8\", { fatal: true }).decode(slice);\n        }\n        case 4: {\n          if (n > bytes.length - at) throw new Error(\"cbor\");\n          return Array.from({ length: n }, item);\n        }\n        case 5: {\n          if (n > bytes.length - at) throw new Error(\"cbor\");\n          const map: Record<string, unknown> = Object.create(null);\n          for (let i = 0; i < n; i++) { const key = item(); map[String(key)] = item(); }\n          return map;\n        }\n        default: return item(); // a tag: the value it tags\n      }\n    } finally { depth--; }\n  };\n  return item();\n}\n","import type { StoredMessage } from \"@ghostly/browser/shared/types\";\nimport { node, type ApiContext } from \"./apiKit\";\nimport { CliError } from \"./errors\";\nimport type { GhostlyEvent } from \"./events\";\n\n/*\n * Waiting on what a command sent (WISP 1100): a message's delivery, an edit's confirmation, a group frame taken by an\n * edge. Shared by the chat, group and status card methods.\n */\n\nconst DELIVERY_RANK: Record<string, number> = { sending: 0, waiting: 1, queued: 1, held: 2, sent: 2, delivered: 3 };\n\n/** Waits until the contact confirmed the latest edit of one of my messages (it is no longer pending). */\nexport async function waitForEdit(ctx: ApiContext, chat: string, messageId: string, ms: number): Promise<StoredMessage> {\n  const until = Date.now() + ms;\n  for (;;) {\n    const message = await node(ctx).getMessage(chat, messageId);\n    if (!message) throw new CliError(\"not_found\", `No message ${messageId} in this chat`);\n    if (!message.edit?.pending) return message;\n    if (Date.now() >= until) throw new CliError(\"timeout\", `Timed out after ${Math.round(ms / 1000)} s: the contact has not confirmed the edit yet. It goes by itself once the chat is live and the contact's app shows edits, while this profile is online`, { messageId, edits: message.edit.seq });\n    await new Promise((resolve) => setTimeout(resolve, 250));\n  }\n}\n\n/**\n * Waits until an edge took my group message, or its edit number `edit` (WISP 902: a group has no receipts, so this is\n * as far as the author sees): a member's edge in a private group, an edge to one of my hubs in a community.\n */\nexport async function waitForGroupFrame(ctx: ApiContext, groupId: string, messageId: string, edit: number | undefined, ms: number): Promise<number> {\n  const until = Date.now() + ms;\n  for (;;) {\n    const taken = node(ctx).groupTaken({ groupId, messageId, ...(edit ? { edit } : {}) });\n    if (taken > 0) return taken;\n    if (Date.now() >= until) throw new CliError(\"timeout\", `Timed out after ${Math.round(ms / 1000)} s: no member's edge took it yet. It stays in the group and goes when one opens, while this profile is online`, { messageId, ...(edit ? { edits: edit } : {}) });\n    await new Promise((resolve) => setTimeout(resolve, 250));\n  }\n}\n\n/** Waits until a message of mine reached `target` (`sent`: on its way to the contact; `delivered`: acknowledged). */\nexport async function waitForMessage(ctx: ApiContext, chat: string, messageId: string, target: \"sent\" | \"delivered\", ms: number): Promise<StoredMessage> {\n  const want = DELIVERY_RANK[target];\n  const look = (message: StoredMessage | undefined) => {\n    if (!message) return undefined;\n    const delivery = message.delivery ?? \"sent\";\n    if (delivery === \"failed\") throw new CliError(\"engine\", message.deliveryError ?? \"The message could not be sent\", { messageId, delivery });\n    return (DELIVERY_RANK[delivery] ?? 0) >= want ? message : undefined;\n  };\n  return new Promise<StoredMessage>((resolve, reject) => {\n    let settled = false;\n    const finish = (error: unknown, message?: StoredMessage) => {\n      if (settled) return;\n      settled = true; clearTimeout(timer); off();\n      if (error) reject(error); else resolve(message!);\n    };\n    const check = (last = false) => void node(ctx).getMessage(chat, messageId).then((message) => {\n      try {\n        const done = look(message);\n        if (done) finish(null, done);\n        else if (last) finish(new CliError(\"timeout\", `Timed out after ${Math.round(ms / 1000)} s: the message is ${message?.delivery ?? \"not sent yet\"} and still goes by itself while this profile is online`, { messageId, delivery: message?.delivery ?? null }));\n      } catch (error) { finish(error); }\n    }, finish);\n    const timer = setTimeout(() => check(true), ms);\n    // Any event naming the message: a message first seen already delivered comes as `message.sent`, never as\n    // `message.delivery`. Listening before the first read leaves no gap for a change to slip through.\n    const off = ctx.hub.onEvent((event: GhostlyEvent) => {\n      if (event.chat === chat && (event.messageId === messageId || (event.message as { id?: string } | undefined)?.id === messageId)) check();\n    });\n    check();\n  });\n}\n","import { BUTTONS_CAPABILITY, STATUS_CARD_LIMITS, buttonLabelClash, checkStatusCard, randomBytes, toBase64Url, type ButtonsCard } from \"@ghostly/core\";\nimport type { LinkView, StoredMessage } from \"@ghostly/browser/shared/types\";\nimport type { Parsed } from \"./args\";\nimport { bool, chatOrGroup, messageOf, node, num, oneOf, str, type Method, type Params } from \"./apiKit\";\nimport { CliError } from \"./errors\";\nimport { findSecret } from \"../../../apps/ui/src/lib/parse/secrets\";\nimport { waitForEdit, waitForGroupFrame, waitForMessage } from \"./waits\";\n\n/*\n * Message buttons (WISP 406 · Message Buttons), the bot's side: a message whose text is the question, with up to six\n * buttons under it (`send --button yes:Yes`). A press comes back as a reply whose text is the button's label; the\n * engine marks it (`press`) and `listen` says `button.pressed`. `button update` then shows the answer (`chosen`) and\n * closes the buttons, by editing the message with the same buttons.\n */\n\n/**\n * `--button id:Label` (again for each, 1 to 6), `--style id=primary|neutral|danger`, `--once` and `--id`, as the\n * method's parameters: `buttons` and `buttonsId`. Nothing when no `--button` is given. The label may hold colons: the\n * id ends at the first one. Two labels that read the same (ignoring case and spaces at the ends), or a label that is\n * another button's id, are a usage error here; other bounds (ids, labels, how many) are the card's, checked when it is sent.\n */\nexport function buttonsOf(options: Parsed[\"options\"]): { buttons: Record<string, unknown>[]; buttonsId?: string } | undefined {\n  const given = Array.isArray(options.button) ? options.button as string[] : [];\n  if (!given.length) {\n    for (const flag of [\"style\", \"once\", \"id\"] as const)\n      if (options[flag] !== undefined) throw new CliError(\"usage\", `--${flag} goes with --button id:Label`);\n    return undefined;\n  }\n  const buttons: Record<string, unknown>[] = given.map((value) => {\n    const colon = value.indexOf(\":\");\n    if (colon < 1 || colon === value.length - 1) throw new CliError(\"usage\", `--button takes id:Label, like yes:Yes, not ${JSON.stringify(value)}`);\n    return { id: value.slice(0, colon), label: value.slice(colon + 1).trim() };\n  });\n  // Two buttons a typed answer could not tell apart: the same label, or a label that is another's id (ignoring case).\n  const clash = buttonLabelClash(buttons);\n  if (clash) {\n    const [at, other] = [JSON.stringify(given[clash.at]), JSON.stringify(given[clash.with])];\n    throw new CliError(\"usage\", clash.kind === \"label\"\n      ? `--button ${at} repeats the label of --button ${other} (ignoring case and spaces): a typed answer could not tell them apart`\n      : `--button ${at} has a label that is the id of --button ${other}: a typed answer could not tell them apart`);\n  }\n  for (const value of Array.isArray(options.style) ? options.style as string[] : []) {\n    const eq = value.indexOf(\"=\");\n    const button = eq > 0 ? buttons.find((b) => b.id === value.slice(0, eq)) : undefined;\n    if (!button) throw new CliError(\"usage\", `--style takes id=primary|neutral|danger for one of the buttons, not ${JSON.stringify(value)}`);\n    button.style = value.slice(eq + 1);\n  }\n  if (options.once === true) for (const button of buttons) button.once = true;\n  return { buttons, ...(options.id !== undefined && { buttonsId: String(options.id) }) };\n}\n\n/** A buttons card checked by the sender's rule, or a `bad_request` that says what is wrong. */\nfunction checked(card: Record<string, unknown>): ButtonsCard {\n  const result = checkStatusCard(card);\n  if (\"error\" in result) throw new CliError(\"bad_request\", `Buttons: ${result.error}`, { card });\n  return result.card as ButtonsCard;\n}\n\n/**\n * The card a send's `buttons` (and `buttonsId`) make, or undefined when it names none. `buttons` is a list of\n * `{id, label, style?, once?}`; the id of the question is made up (`ask-…`) unless given.\n */\nexport function buttonsCard(params: Params): ButtonsCard | undefined {\n  const buttons = params.buttons;\n  if (buttons === undefined || buttons === null) {\n    if (params.buttonsId !== undefined) throw new CliError(\"bad_request\", \"buttonsId goes with buttons\");\n    return undefined;\n  }\n  if (!Array.isArray(buttons)) throw new CliError(\"bad_request\", \"buttons must be a list of {id, label, style?, once?}\");\n  const id = str(params, \"buttonsId\") ?? `ask-${toBase64Url(randomBytes(6))}`;\n  return checked({ kind: \"buttons\", id, buttons });\n}\n\n/** Whether a 1:1 contact's app shows and presses buttons: null until its app said what it offers. */\nexport function pressable(link: LinkView): boolean | null {\n  const peer = link.sessionOffers?.peer;\n  return peer ? peer.includes(BUTTONS_CAPABILITY) : null;\n}\n\n/** The message of mine with buttons that `button update` names, by its id here (or the id both sides know). */\nfunction buttonsMessage(message: StoredMessage | undefined, ref: string, group: boolean): StoredMessage & { card: ButtonsCard } {\n  if (!message) throw new CliError(\"not_found\", `No message ${JSON.stringify(ref)} of yours in this ${group ? \"group\" : \"chat\"}: the messageId send gave`);\n  if (message.card?.kind !== \"buttons\") throw new CliError(\"bad_request\", \"That message has no buttons: send one with send --button id:Label\");\n  return message as StoredMessage & { card: ButtonsCard };\n}\n\n/**\n * `button update`: the answer shown on a question's buttons (`chosen`), the buttons closed (`close`), or a new text\n * (`text`), by editing the message with the same buttons. What is not given stays as it was.\n */\nasync function updateButtons(ctx: Parameters<Method>[0], params: Params): Promise<Record<string, unknown>> {\n  const target = chatOrGroup(ctx, str(params, \"chat\", true));\n  const ref = str(params, \"message\", true);\n  const chosen = str(params, \"chosen\");\n  const close = bool(params, \"close\");\n  const newText = str(params, \"text\");\n  if (chosen === undefined && !close && newText === undefined) throw new CliError(\"bad_request\", \"Nothing to update: give chosen, close or text\");\n  // A new text is a message like any other: the same guard as `send` and `edit`.\n  if (newText !== undefined && !bool(params, \"force\")) {\n    const secret = findSecret(newText);\n    if (secret) throw new CliError(\"confirm\", `The text looks like ${secret.kind === \"cashu\" ? \"a Cashu token (money anyone who reads it can take)\" : \"a secret (a seed or a private key)\"}; update with --force if you mean to`, { kind: secret.kind });\n  }\n  const message = buttonsMessage(await messageOf(ctx, target.linkId, ref, (m) => m.sender === \"me\"), ref, target.group);\n  if ((message.edit?.seq ?? 0) >= STATUS_CARD_LIMITS.edits)\n    throw new CliError(\"refused\", `This message took ${STATUS_CARD_LIMITS.edits} updates, the most one takes: ask again with a new send`, { messageId: message.id, edits: message.edit!.seq });\n  const before = message.card;\n  // Said here, with the buttons it has, as a press says it: the card's own check names only the field.\n  if (chosen !== undefined && !before.buttons.some((b) => b.id === chosen))\n    throw new CliError(\"bad_request\", `That message has no button ${JSON.stringify(chosen)}; its buttons: ${before.buttons.map((b) => b.id).join(\", \")}`, { card: before });\n  const card = checked({ ...before, ...(chosen !== undefined && { chosen }), ...((close || before.closed) && { closed: true }) });\n  const text = newText ?? message.text;\n  const wait = oneOf(params, \"wait\", target.group ? [\"none\", \"sent\"] as const : [\"none\", \"confirmed\"] as const, \"none\");\n  const ms = num(params, \"timeout\", 30, { min: 1, max: 3600 }) * 1000;\n  const result = await node(ctx).editMessage({ linkId: target.linkId, messageId: message.id, text, card });\n  if (result.error) throw new CliError(result.refused ? \"refused\" : \"unavailable\", result.error);\n  let edited = await node(ctx).getMessage(target.linkId, message.id);\n  if (wait === \"confirmed\" && edited?.edit?.pending) edited = await waitForEdit(ctx, target.linkId, message.id, ms);\n  const edges = wait === \"sent\" && edited?.edit ? await waitForGroupFrame(ctx, target.id, message.id, edited.edit.seq, ms) : undefined;\n  return {\n    [target.group ? \"group\" : \"chat\"]: target.id, buttons: card.id, messageId: message.id, card, edits: edited?.edit?.seq ?? 0,\n    ...(target.group ? { ...(edges !== undefined && { edges }) } : { confirmed: !!edited && !edited.edit?.pending }),\n  };\n}\n\n/**\n * `button press`: the other side of a question, as the app's tap: a press on a button of someone else's message, by\n * its id here (or the id both sides know). The engine sends a reply whose text is the button's label, and refuses what\n * an app would: a button the message does not have, closed buttons, a second answer past `once`, a second press\n * within a second. A one-shot in a chat waits until the press went out, as `send` does.\n */\nasync function pressButton(ctx: Parameters<Method>[0], params: Params): Promise<Record<string, unknown>> {\n  const target = chatOrGroup(ctx, str(params, \"chat\", true));\n  const ref = str(params, \"message\", true);\n  const buttonId = str(params, \"button\", true);\n  const where = target.group ? \"group\" : \"chat\";\n  const message = await messageOf(ctx, target.linkId, ref, (m) => m.sender !== \"me\");\n  if (!message) throw new CliError(\"not_found\", `No message ${JSON.stringify(ref)} from someone else in this ${where}: the id its event or history gave`);\n  if (message.card?.kind !== \"buttons\") throw new CliError(\"bad_request\", \"That message has no buttons\");\n  const button = message.card.buttons.find((b) => b.id === buttonId);\n  if (!button) throw new CliError(\"not_found\", `That message has no button ${JSON.stringify(buttonId)}; its buttons: ${message.card.buttons.map((b) => b.id).join(\", \")}`);\n  const wait = target.group\n    ? oneOf(params, \"wait\", [\"none\", \"sent\"] as const, \"none\")\n    : oneOf(params, \"wait\", [\"none\", \"sent\", \"delivered\"] as const, ctx.mode === \"one-shot\" ? \"sent\" : \"none\");\n  const ms = num(params, \"timeout\", 30, { min: 1, max: 3600 }) * 1000;\n  const result = await node(ctx).pressButton({ linkId: target.linkId, messageId: message.id, buttonId });\n  if (result.error) throw new CliError(result.refused ? \"refused\" : \"unavailable\", result.error, result.paced ? { paced: true } : undefined);\n  const replyId = result.messageId ?? null;\n  const answer = { [where]: target.id, messageId: message.id, button: button.id, label: button.label, replyId };\n  if (!replyId) return answer;\n  if (target.group) {\n    const edges = wait === \"sent\" ? await waitForGroupFrame(ctx, target.id, replyId, undefined, ms) : node(ctx).groupTaken({ groupId: target.id, messageId: replyId });\n    return { ...answer, edges };\n  }\n  const reply = wait === \"none\" ? await node(ctx).getMessage(target.linkId, replyId) : await waitForMessage(ctx, target.linkId, replyId, wait, ms);\n  return { ...answer, delivery: reply?.delivery ?? null };\n}\n\nexport const BUTTON_METHODS: Record<string, Method> = {\n  /** WISP 406 · Message Buttons: a press on a button of someone else's message, as the app's tap. */\n  \"button.press\": pressButton,\n  /** WISP 406 · Message Buttons: the answer chosen on a question of mine, its buttons closed, or its text changed. */\n  \"button.update\": updateButtons,\n};\n"],"mappings":";;;;;;;AAkBA,IAAM,aAAa,IAAI,IAAI,SAAS,KAAK,MAAM,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;AACvE,IAAM,mBAAmB;CAAC;CAAI;CAAI;CAAI;CAAI;AAAE;;AAE5C,IAAM,kBAAkB;AAExB,IAAM,OAAO;AACb,IAAM,mBAAmB;AACzB,IAAM,MAAM;AACZ,IAAM,aAAa;AACnB,IAAM,iBAAiB;;AAEvB,IAAM,gBAAgB;AACtB,IAAM,cAAc;;;;;;AAOpB,IAAM,YAAY;AAElB,IAAM,cAAc,kBAAkB,MAAM;;;;;AAM5C,SAAgB,WAAW,MAAoC;CAC7D,MAAM,UAAU,KAAK,QAAQ,WAAW,EAAE;CAC1C,MAAM,WAAW,YAAY,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,OAAO;CAC3D,IAAI,SAAS,KAAK,WAAW,GAAG,OAAO,EAAE,MAAM,WAAW;CAC1D,IAAI,SAAS,MAAM,YAAY,KAAK,KAAK,OAAO,CAAC,GAAG,OAAO,EAAE,MAAM,OAAO;CAC1E,IAAI,SAAS,MAAM,YAAY,iBAAiB,KAAK,OAAO,KAAK,OAAO,OAAO,CAAC,GAAG,OAAO,EAAE,MAAM,cAAc;CAChH,IAAI,SAAS,KAAK,YAAY,GAAG,OAAO,EAAE,MAAM,UAAU;CAC1D,MAAM,SAAS,SAAS,IAAI,SAAS;CACrC,OAAO,OAAO,MAAM,UAAU,OAAO,SAAS,WAAW,MAAM,WAAW,IAAI,KAAK,OAAO,MAAM,UAAU,KAAK,KAAK;AACtH;;;;;;;;;;AAWA,SAAS,YAAY,MAAuB;CAC1C,MAAM,SAAS,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS;CACjD,IAAI,CAAC,UAAU,OAAO,SAAS,IAAI,OAAO;CAC1C,IAAI,SAAS;CACb,IAAI,MAAgB,CAAC;CACrB,MAAM,YAAY,OAAe,WAAmB;EAClD,MAAM,SAAS,IAAI,MAAM,OAAO,QAAQ,MAAM;EAC9C,MAAM,yBAAS,IAAI,IAAoB;EACvC,KAAK,MAAM,QAAQ,QAAQ,OAAO,IAAI,OAAO,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;EACvE,IAAI,OAAO,SAAS,GAAG,OAAO;EAC9B,MAAM,CAAC,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,GAAG,MAAO,EAAE,KAAK,EAAE,KAAK,IAAI,CAAE;EACxE,IAAI,QAAQ,SAAS,MAAM,IAAI,QAAQ,OAAO,QAAQ,IAAI,QAAQ,YAAY,OAAO,OAAO;EAC5F,OAAO,cAAc,MAAM;CAC7B;CACA,MAAM,cAAc;EAClB,IAAI,IAAI,UAAU,IAAI;GACpB,KAAK,MAAM,UAAU,kBACnB,KAAK,IAAI,QAAQ,GAAG,QAAQ,UAAU,IAAI,UAAU,SAAS,GAAG,SAAS,UACvE,IAAI,SAAS,OAAO,MAAM,GAAG,OAAO;GAGxC,IAAI,IAAI,WAAW,OAAO,UAAU,iBAAiB,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,GAAG,OAAO;EAC7G;EACA,MAAM,CAAC;EACP,OAAO;CACT;CACA,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,QAAQ,WAAW,IAAI,KAAK;EAClC,IAAI,UAAU,KAAA,GAAW,IAAI,KAAK,KAAK;OAClC,IAAI,MAAM,GAAG,OAAO;CAC3B;CACA,OAAO,MAAM;AACf;;AAGA,SAAS,cAAc,SAA4B;CACjD,MAAM,OAAO,QAAQ,SAAS,IAAI,eAAe,OAAO,IAAI,gBAAgB,OAAO,gBAAgB;CACnG,MAAM,QAAQ,IAAI,WAAW,KAAK,KAAK,OAAO,CAAC,CAAC;CAChD,QAAQ,SAAS,OAAO,MAAM;EAC5B,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,IAAI,QAAS,KAAM,KAAK,GAAK;GAAE,MAAM,KAAK,IAAI,KAAK;GAAG,MAAM,MAAM,MAAM,QAAS,KAAK;EAAI;CACzH,CAAC;CAGD,OAFiB,OAAO,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,MAAO,IAAI,iBACxD,MAAM,iBAAkB,IAAI;AAE1C;;AAGA,SAAS,OAAO,MAAuB;CACrC,KAAK,MAAM,CAAC,cAAc,KAAK,SAAS,GAAG,GACzC,IAAI;EACF,MAAM,UAAU,YAAY,OAAO,SAAS;EAC5C,KAAK,QAAQ,OAAO,OAAQ,QAAQ,OAAO,SAAU,QAAQ,WAAW,MAAO,QAAQ,WAAW,MAAM,QAAQ,QAAQ,IAAK,OAAO;CACtI,QAAQ,CAA0C;CAEpD,OAAO;AACT;;AAGA,SAAS,aAAa,MAAuB;CAC3C,KAAK,MAAM,SAAS,KAAK,SAAS,UAAU,GAAG;EAC7C,MAAM,SAAS,KAAK,MAAM,KAAK,IAAI,GAAG,MAAM,QAAQ,aAAa,GAAG,MAAM,KAAK;EAC/E,MAAM,QAAQ,KAAK,MAAM,MAAM,QAAQ,MAAM,EAAE,CAAC,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC,SAAS,aAAa;EACrG,IAAI,eAAe,KAAK,MAAM,KAAK,eAAe,KAAK,KAAK,GAAG,OAAO;CACxE;CACA,OAAO;AACT;;AAGA,SAAS,UAAU,MAAoC;CACrD,MAAM,SAAS,CAAC,GAAG,KAAK,SAAS,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,SAAS,UAAU,YAAY,SAAsB,IAAI,CAAC;CACjH,IAAI,CAAC,OAAO,QAAQ,OAAO;CAC3B,MAAM,OAAO,OAAO,MAAM,UAAU,KAAK,CAAC,EAAE,QAAQ;CAEpD,OAAO;EAAE,MAAM;EAAS,QADP,OAAO,OAAO,UAAU,SAAS,MAAM,SAAS,IACjC,IAAW,OAAO,QAAQ,KAAK,UAAU,MAAM,MAAO,QAAQ,CAAC,IAAI;EAAM;CAAK;AAChH;;AAGA,SAAgB,YAAY,SAAoB,MAAuD;CACrG,IAAI;EACF,MAAM,QAAQ,WAAW,IAAI;EAC7B,IAAI,YAAY,KAAK;GACnB,MAAM,QAAQ,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;GAChF,OAAO,MAAM,MAAM,OAAO,SAAS,UAAU,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,MAAM,GAAG,MAAM,IAAI;EAC3G;EACA,MAAM,QAAQ,WAAW,KAAK;EAC9B,OAAO,MAAM,OAAO,GAAG,SAAS,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,CAAC,GAAG,OAAO,CAAC;CAC5F,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,MAAM,SAAgC,MAAwD;CACrG,IAAI,CAAC,SAAS,UAAU,CAAC,QAAQ,OAAO,MAAmB,OAAO,cAAc,CAAC,KAAM,KAAgB,CAAC,GAAG,OAAO;CAClH,MAAM,SAAS,QAAQ,QAAQ,KAAK,MAAM,MAAM,GAAG,CAAC;CACpD,OAAO,OAAO,cAAc,MAAM,IAAI;EAAE;EAAQ,MAAM,OAAO,SAAS,YAAY,OAAO,OAAO;CAAM,IAAI;AAC5G;AAEA,SAAS,WAAW,MAA0B;CAC5C,MAAM,WAAW,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE;CAC7E,MAAM,SAAS,KAAK,WAAW,IAAI,QAAQ,IAAK,SAAS,SAAS,KAAM,CAAC,CAAC;CAC1E,OAAO,WAAW,KAAK,SAAS,MAAM,EAAE,WAAW,CAAC,CAAC;AACvD;;AAGA,SAAS,WAAW,OAA4B;CAC9C,IAAI,KAAK,GAAG,QAAQ;CACpB,MAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;CAC1E,MAAM,UAAU,SAAyB;EACvC,IAAI,OAAO,IAAI,OAAO;EACtB,MAAM,OAAO,SAAS,KAAK,IAAI,SAAS,KAAK,IAAI,SAAS,KAAK,IAAI,SAAS,KAAK,IAAI;EACrF,IAAI,CAAC,QAAQ,KAAK,OAAO,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM;EAC7D,IAAI,QAAQ;EACZ,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,KAAK,QAAQ,QAAQ,MAAM,MAAM,KAAK;EAChE,MAAM;EACN,OAAO;CACT;CACA,MAAM,aAAsB;EAC1B,IAAI,MAAM,MAAM,UAAU,EAAE,QAAQ,IAAI,MAAM,IAAI,MAAM,MAAM;EAC9D,MAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,GAAG,OAAO,OAAO;EAC3D,IAAI;GACF,IAAI,UAAU,GAAG;IACf,IAAI,SAAS,IAAI,OAAO;IACxB,IAAI,SAAS,IAAI,OAAO;IACxB,IAAI,SAAS,MAAM,SAAS,IAAI,OAAO;IACvC,IAAI,SAAS,IAAI;KAAE,MAAM;KAAG,OAAO;IAAK;IACxC,IAAI,SAAS,IAAI;KAAE,MAAM;KAAG,OAAO,KAAK,WAAW,KAAK,CAAC;IAAG;IAC5D,IAAI,SAAS,IAAI;KAAE,MAAM;KAAG,OAAO,KAAK,WAAW,KAAK,CAAC;IAAG;IAC5D,MAAM,IAAI,MAAM,MAAM;GACxB;GACA,MAAM,IAAI,OAAO,IAAI;GACrB,QAAQ,OAAR;IACE,KAAK,GAAG,OAAO;IACf,KAAK,GAAG,OAAO,KAAK;IACpB,KAAK;IAAG,KAAK,GAAG;KACd,IAAI,KAAK,IAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM;KACjD,MAAM,QAAQ,MAAM,SAAS,IAAK,MAAM,CAAE;KAC1C,OAAO,UAAU,IAAI,QAAQ,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;IACrF;IACA,KAAK;KACH,IAAI,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI,MAAM,MAAM;KACjD,OAAO,MAAM,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI;IAEvC,KAAK,GAAG;KACN,IAAI,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI,MAAM,MAAM;KACjD,MAAM,MAA+B,OAAO,OAAO,IAAI;KACvD,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;MAAE,MAAM,MAAM,KAAK;MAAG,IAAI,OAAO,GAAG,KAAK,KAAK;KAAG;KAC7E,OAAO;IACT;IACA,SAAS,OAAO,KAAK;GACvB;EACF,UAAU;GAAE;EAAS;CACvB;CACA,OAAO,KAAK;AACd;;;AChNA,IAAM,gBAAwC;CAAE,SAAS;CAAG,SAAS;CAAG,QAAQ;CAAG,MAAM;CAAG,MAAM;CAAG,WAAW;AAAE;;AAGlH,eAAsB,YAAY,KAAiB,MAAc,WAAmB,IAAoC;CACtH,MAAM,QAAQ,KAAK,IAAI,IAAI;CAC3B,SAAS;EACP,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,MAAM,SAAS;EAC1D,IAAI,CAAC,SAAS,MAAM,IAAI,SAAS,aAAa,cAAc,UAAU,cAAc;EACpF,IAAI,CAAC,QAAQ,MAAM,SAAS,OAAO;EACnC,IAAI,KAAK,IAAI,KAAK,OAAO,MAAM,IAAI,SAAS,WAAW,mBAAmB,KAAK,MAAM,KAAK,GAAI,EAAE,0JAA0J;GAAE;GAAW,OAAO,QAAQ,KAAK;EAAI,CAAC;EAChS,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;CACzD;AACF;;;;;AAMA,eAAsB,kBAAkB,KAAiB,SAAiB,WAAmB,MAA0B,IAA6B;CAClJ,MAAM,QAAQ,KAAK,IAAI,IAAI;CAC3B,SAAS;EACP,MAAM,QAAQ,KAAK,GAAG,CAAC,CAAC,WAAW;GAAE;GAAS;GAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAG,CAAC;EACpF,IAAI,QAAQ,GAAG,OAAO;EACtB,IAAI,KAAK,IAAI,KAAK,OAAO,MAAM,IAAI,SAAS,WAAW,mBAAmB,KAAK,MAAM,KAAK,GAAI,EAAE,gHAAgH;GAAE;GAAW,GAAI,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;EAAG,CAAC;EAC/P,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;CACzD;AACF;;AAGA,eAAsB,eAAe,KAAiB,MAAc,WAAmB,QAA8B,IAAoC;CACvJ,MAAM,OAAO,cAAc;CAC3B,MAAM,QAAQ,YAAuC;EACnD,IAAI,CAAC,SAAS,OAAO,KAAA;EACrB,MAAM,WAAW,QAAQ,YAAY;EACrC,IAAI,aAAa,UAAU,MAAM,IAAI,SAAS,UAAU,QAAQ,iBAAiB,iCAAiC;GAAE;GAAW;EAAS,CAAC;EACzI,QAAQ,cAAc,aAAa,MAAM,OAAO,UAAU,KAAA;CAC5D;CACA,OAAO,IAAI,SAAwB,SAAS,WAAW;EACrD,IAAI,UAAU;EACd,MAAM,UAAU,OAAgB,YAA4B;GAC1D,IAAI,SAAS;GACb,UAAU;GAAM,aAAa,KAAK;GAAG,IAAI;GACzC,IAAI,OAAO,OAAO,KAAK;QAAQ,QAAQ,OAAQ;EACjD;EACA,MAAM,SAAS,OAAO,UAAU,KAAK,KAAK,GAAG,CAAC,CAAC,WAAW,MAAM,SAAS,CAAC,CAAC,MAAM,YAAY;GAC3F,IAAI;IACF,MAAM,OAAO,KAAK,OAAO;IACzB,IAAI,MAAM,OAAO,MAAM,IAAI;SACtB,IAAI,MAAM,OAAO,IAAI,SAAS,WAAW,mBAAmB,KAAK,MAAM,KAAK,GAAI,EAAE,qBAAqB,SAAS,YAAY,eAAe,yDAAyD;KAAE;KAAW,UAAU,SAAS,YAAY;IAAK,CAAC,CAAC;GAC9P,SAAS,OAAO;IAAE,OAAO,KAAK;GAAG;EACnC,GAAG,MAAM;EACT,MAAM,QAAQ,iBAAiB,MAAM,IAAI,GAAG,EAAE;EAG9C,MAAM,MAAM,IAAI,IAAI,SAAS,UAAwB;GACnD,IAAI,MAAM,SAAS,SAAS,MAAM,cAAc,aAAc,MAAM,SAAyC,OAAO,YAAY,MAAM;EACxI,CAAC;EACD,MAAM;CACR,CAAC;AACH;;;;;;;;;AChDA,SAAgB,UAAU,SAAoG;CAC5H,MAAM,QAAQ,MAAM,QAAQ,QAAQ,MAAM,IAAI,QAAQ,SAAqB,CAAC;CAC5E,IAAI,CAAC,MAAM,QAAQ;EACjB,KAAK,MAAM,QAAQ;GAAC;GAAS;GAAQ;EAAI,GACvC,IAAI,QAAQ,UAAU,KAAA,GAAW,MAAM,IAAI,SAAS,SAAS,KAAK,KAAK,6BAA6B;EACtG;CACF;CACA,MAAM,UAAqC,MAAM,KAAK,UAAU;EAC9D,MAAM,QAAQ,MAAM,QAAQ,GAAG;EAC/B,IAAI,QAAQ,KAAK,UAAU,MAAM,SAAS,GAAG,MAAM,IAAI,SAAS,SAAS,8CAA8C,KAAK,UAAU,KAAK,GAAG;EAC9I,OAAO;GAAE,IAAI,MAAM,MAAM,GAAG,KAAK;GAAG,OAAO,MAAM,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK;EAAE;CAC3E,CAAC;CAED,MAAM,QAAQ,iBAAiB,OAAO;CACtC,IAAI,OAAO;EACT,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,UAAU,MAAM,MAAM,GAAG,GAAG,KAAK,UAAU,MAAM,MAAM,KAAK,CAAC;EACvF,MAAM,IAAI,SAAS,SAAS,MAAM,SAAS,UACvC,YAAY,GAAG,iCAAiC,MAAM,yEACtD,YAAY,GAAG,0CAA0C,MAAM,2CAA2C;CAChH;CACA,KAAK,MAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAoB,CAAC,GAAG;EACjF,MAAM,KAAK,MAAM,QAAQ,GAAG;EAC5B,MAAM,SAAS,KAAK,IAAI,QAAQ,MAAM,MAAM,EAAE,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,KAAA;EAC3E,IAAI,CAAC,QAAQ,MAAM,IAAI,SAAS,SAAS,uEAAuE,KAAK,UAAU,KAAK,GAAG;EACvI,OAAO,QAAQ,MAAM,MAAM,KAAK,CAAC;CACnC;CACA,IAAI,QAAQ,SAAS,MAAM,KAAK,MAAM,UAAU,SAAS,OAAO,OAAO;CACvE,OAAO;EAAE;EAAS,GAAI,QAAQ,OAAO,KAAA,KAAa,EAAE,WAAW,OAAO,QAAQ,EAAE,EAAE;CAAG;AACvF;;AAGA,SAAS,QAAQ,MAA4C;CAC3D,MAAM,SAAS,gBAAgB,IAAI;CACnC,IAAI,WAAW,QAAQ,MAAM,IAAI,SAAS,eAAe,YAAY,OAAO,SAAS,EAAE,KAAK,CAAC;CAC7F,OAAO,OAAO;AAChB;;;;;AAMA,SAAgB,YAAY,QAAyC;CACnE,MAAM,UAAU,OAAO;CACvB,IAAI,YAAY,KAAA,KAAa,YAAY,MAAM;EAC7C,IAAI,OAAO,cAAc,KAAA,GAAW,MAAM,IAAI,SAAS,eAAe,6BAA6B;EACnG;CACF;CACA,IAAI,CAAC,MAAM,QAAQ,OAAO,GAAG,MAAM,IAAI,SAAS,eAAe,sDAAsD;CAErH,OAAO,QAAQ;EAAE,MAAM;EAAW,IADvB,IAAI,QAAQ,WAAW,KAAK,OAAO,YAAY,YAAY,CAAC,CAAC;EAClC;CAAQ,CAAC;AACjD;;AAGA,SAAgB,UAAU,MAAgC;CACxD,MAAM,OAAO,KAAK,eAAe;CACjC,OAAO,OAAO,KAAK,SAAS,kBAAkB,IAAI;AACpD;;AAGA,SAAS,eAAe,SAAoC,KAAa,OAAuD;CAC9H,IAAI,CAAC,SAAS,MAAM,IAAI,SAAS,aAAa,cAAc,KAAK,UAAU,GAAG,EAAE,oBAAoB,QAAQ,UAAU,OAAO,0BAA0B;CACvJ,IAAI,QAAQ,MAAM,SAAS,WAAW,MAAM,IAAI,SAAS,eAAe,mEAAmE;CAC3I,OAAO;AACT;;;;;AAMA,eAAe,cAAc,KAA4B,QAAkD;CACzG,MAAM,SAAS,YAAY,KAAK,IAAI,QAAQ,QAAQ,IAAI,CAAC;CACzD,MAAM,MAAM,IAAI,QAAQ,WAAW,IAAI;CACvC,MAAM,SAAS,IAAI,QAAQ,QAAQ;CACnC,MAAM,QAAQ,KAAK,QAAQ,OAAO;CAClC,MAAM,UAAU,IAAI,QAAQ,MAAM;CAClC,IAAI,WAAW,KAAA,KAAa,CAAC,SAAS,YAAY,KAAA,GAAW,MAAM,IAAI,SAAS,eAAe,+CAA+C;CAE9I,IAAI,YAAY,KAAA,KAAa,CAAC,KAAK,QAAQ,OAAO,GAAG;EACnD,MAAM,SAAS,WAAW,OAAO;EACjC,IAAI,QAAQ,MAAM,IAAI,SAAS,WAAW,uBAAuB,OAAO,SAAS,UAAU,uDAAuD,qCAAqC,uCAAuC,EAAE,MAAM,OAAO,KAAK,CAAC;CACrP;CACA,MAAM,UAAU,eAAe,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,MAAM,EAAE,WAAW,IAAI,GAAG,KAAK,OAAO,KAAK;CACpH,KAAK,QAAQ,MAAM,OAAO,MAAM,mBAAmB,OACjD,MAAM,IAAI,SAAS,WAAW,qBAAqB,mBAAmB,MAAM,0DAA0D;EAAE,WAAW,QAAQ;EAAI,OAAO,QAAQ,KAAM;CAAI,CAAC;CAC3L,MAAM,SAAS,QAAQ;CAEvB,IAAI,WAAW,KAAA,KAAa,CAAC,OAAO,QAAQ,MAAM,MAAM,EAAE,OAAO,MAAM,GACrE,MAAM,IAAI,SAAS,eAAe,8BAA8B,KAAK,UAAU,MAAM,EAAE,iBAAiB,OAAO,QAAQ,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC;CACxK,MAAM,OAAO,QAAQ;EAAE,GAAG;EAAQ,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;EAAI,IAAK,SAAS,OAAO,WAAW,EAAE,QAAQ,KAAK;CAAG,CAAC;CAC9H,MAAM,OAAO,WAAW,QAAQ;CAChC,MAAM,OAAO,MAAM,QAAQ,QAAQ,OAAO,QAAQ,CAAC,QAAQ,MAAM,IAAa,CAAC,QAAQ,WAAW,GAAY,MAAM;CACpH,MAAM,KAAK,IAAI,QAAQ,WAAW,IAAI;EAAE,KAAK;EAAG,KAAK;CAAK,CAAC,IAAI;CAC/D,MAAM,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY;EAAE,QAAQ,OAAO;EAAQ,WAAW,QAAQ;EAAI;EAAM;CAAK,CAAC;CACvG,IAAI,OAAO,OAAO,MAAM,IAAI,SAAS,OAAO,UAAU,YAAY,eAAe,OAAO,KAAK;CAC7F,IAAI,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,OAAO,QAAQ,QAAQ,EAAE;CACjE,IAAI,SAAS,eAAe,QAAQ,MAAM,SAAS,SAAS,MAAM,YAAY,KAAK,OAAO,QAAQ,QAAQ,IAAI,EAAE;CAChH,MAAM,QAAQ,SAAS,UAAU,QAAQ,OAAO,MAAM,kBAAkB,KAAK,OAAO,IAAI,QAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,IAAI,KAAA;CAC3H,OAAO;GACJ,OAAO,QAAQ,UAAU,SAAS,OAAO;EAAI,SAAS,KAAK;EAAI,WAAW,QAAQ;EAAI;EAAM,OAAO,QAAQ,MAAM,OAAO;EACzH,GAAI,OAAO,QAAQ,EAAE,GAAI,UAAU,KAAA,KAAa,EAAE,MAAM,EAAG,IAAI,EAAE,WAAW,CAAC,CAAC,UAAU,CAAC,OAAO,MAAM,QAAQ;CAChH;AACF;;;;;;;AAQA,eAAe,YAAY,KAA4B,QAAkD;CACvG,MAAM,SAAS,YAAY,KAAK,IAAI,QAAQ,QAAQ,IAAI,CAAC;CACzD,MAAM,MAAM,IAAI,QAAQ,WAAW,IAAI;CACvC,MAAM,WAAW,IAAI,QAAQ,UAAU,IAAI;CAC3C,MAAM,QAAQ,OAAO,QAAQ,UAAU;CACvC,MAAM,UAAU,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,MAAM,EAAE,WAAW,IAAI;CACjF,IAAI,CAAC,SAAS,MAAM,IAAI,SAAS,aAAa,cAAc,KAAK,UAAU,GAAG,EAAE,6BAA6B,MAAM,mCAAmC;CACtJ,IAAI,QAAQ,MAAM,SAAS,WAAW,MAAM,IAAI,SAAS,eAAe,6BAA6B;CACrG,MAAM,SAAS,QAAQ,KAAK,QAAQ,MAAM,MAAM,EAAE,OAAO,QAAQ;CACjE,IAAI,CAAC,QAAQ,MAAM,IAAI,SAAS,aAAa,8BAA8B,KAAK,UAAU,QAAQ,EAAE,iBAAiB,QAAQ,KAAK,QAAQ,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,GAAG;CACvK,MAAM,OAAO,OAAO,QAChB,MAAM,QAAQ,QAAQ,CAAC,QAAQ,MAAM,GAAY,MAAM,IACvD,MAAM,QAAQ,QAAQ;EAAC;EAAQ;EAAQ;CAAW,GAAY,IAAI,SAAS,aAAa,SAAS,MAAM;CAC3G,MAAM,KAAK,IAAI,QAAQ,WAAW,IAAI;EAAE,KAAK;EAAG,KAAK;CAAK,CAAC,IAAI;CAC/D,MAAM,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY;EAAE,QAAQ,OAAO;EAAQ,WAAW,QAAQ;EAAI;CAAS,CAAC;CACrG,IAAI,OAAO,OAAO,MAAM,IAAI,SAAS,OAAO,UAAU,YAAY,eAAe,OAAO,OAAO,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,KAAA,CAAS;CACzI,MAAM,UAAU,OAAO,aAAa;CACpC,MAAM,SAAS;GAAG,QAAQ,OAAO;EAAI,WAAW,QAAQ;EAAI,QAAQ,OAAO;EAAI,OAAO,OAAO;EAAO;CAAQ;CAC5G,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,OAAO,OAAO;EAChB,MAAM,QAAQ,SAAS,SAAS,MAAM,kBAAkB,KAAK,OAAO,IAAI,SAAS,KAAA,GAAW,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC,WAAW;GAAE,SAAS,OAAO;GAAI,WAAW;EAAQ,CAAC;EACjK,OAAO;GAAE,GAAG;GAAQ;EAAM;CAC5B;CACA,MAAM,QAAQ,SAAS,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,OAAO,QAAQ,OAAO,IAAI,MAAM,eAAe,KAAK,OAAO,QAAQ,SAAS,MAAM,EAAE;CAC/I,OAAO;EAAE,GAAG;EAAQ,UAAU,OAAO,YAAY;CAAK;AACxD;AAEA,IAAa,iBAAyC;;CAEpD,gBAAgB;;CAEhB,iBAAiB;AACnB"}
+{"version":3,"file":"buttons-YgijrprJ.js","names":[],"sources":["../../../../apps/ui/src/lib/parse/secrets.ts","../../src/waits.ts","../../src/buttons.ts"],"sourcesContent":["import { sha256 } from \"@noble/hashes/sha2.js\";\nimport { createBase58check } from \"@scure/base\";\nimport { wordlist } from \"@scure/bip39/wordlists/english.js\";\n\n/**\n * What the composer asks about before a message goes: text that looks like a secret someone could take funds or an\n * identity with, or a Cashu token (bearer money: the text box would hand it to whoever reads the chat).\n *\n * Detection is local and synchronous, and a finding never carries the text it found: only what kind it is and, for\n * ecash, the amount decoded here. Ark, Spark and Fedimint wallets are BIP39 seeds or raw keys, caught by the rules\n * below; Fedimint ecash notes are plain base64 with no prefix, so they are not recognised.\n */\nexport type SecretFinding =\n  | { kind: \"mnemonic\" | \"nsec\" | \"bitcoin-key\" | \"hex-key\" }\n  | { kind: \"cashu\"; amount: number | null; unit: string };\n\nexport type SecretKind = SecretFinding[\"kind\"];\n\nconst WORD_INDEX = new Map(wordlist.map((word, index) => [word, index]));\nconst MNEMONIC_LENGTHS = [12, 15, 18, 21, 24];\n/** Checksums tried per message at most: a 16 KiB run of seed words stays a few milliseconds. */\nconst CHECKSUM_BUDGET = 4096;\n\nconst NSEC = /\\bnsec1[02-9ac-hj-np-z]{58}(?![02-9ac-hj-np-z])/i;\nconst EXTENDED_PRIVATE = /\\b[xtyzuvYZUV]prv[1-9A-HJ-NP-Za-km-z]{100,}/;\nconst WIF = /\\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\\b/g;\nconst HEX_SECRET = /\\b(?:0x)?(?:[0-9a-fA-F]{128}|[0-9a-fA-F]{64})\\b/g;\nconst SECRET_CONTEXT = /priv(?:ate)?[\\s_-]*key|secret|seed|mnemonic|nsec|xprv|\\bwif\\b|recovery|passphrase/i;\n/** How far from a 64-hex string a word like \"seed\" still counts as saying what it is. */\nconst CONTEXT_REACH = 48;\nconst CASHU_TOKEN = /\\bcashu([AB])([A-Za-z0-9_\\-+/]{20,}={0,2})/g;\n\n/**\n * Characters that take no room on screen: format characters (zero-width space, soft hyphen, word joiner, the joiners,\n * direction marks), control characters that are not white space, variation selectors, the grapheme joiner and the\n * Hangul fillers. A page, a PDF or a terminal puts some of them into long strings as places to break a line.\n */\nconst INVISIBLE = /(?![\\t\\n\\v\\f\\r\\x85])[\\p{Cc}\\p{Cf}]|\\u034f|[\\u115f\\u1160\\u3164\\uffa0]|[\\ufe00-\\ufe0f]|[\\u{e0100}-\\u{e01ef}]/gu;\n\nconst base58check = createBase58check(sha256);\n\n/**\n * The first secret in `text`, keys and seeds before ecash; null for anything else. The text is read as it is and as\n * it reads without its invisible characters: a key with one inside is whole again once the reader takes it out.\n */\nexport function findSecret(text: string): SecretFinding | null {\n  const visible = text.replace(INVISIBLE, \"\");\n  const readings = visible === text ? [text] : [text, visible];\n  if (readings.some(hasMnemonic)) return { kind: \"mnemonic\" };\n  if (readings.some((reading) => NSEC.test(reading))) return { kind: \"nsec\" };\n  if (readings.some((reading) => EXTENDED_PRIVATE.test(reading) || hasWif(reading))) return { kind: \"bitcoin-key\" };\n  if (readings.some(hasHexSecret)) return { kind: \"hex-key\" };\n  const tokens = readings.map(findCashu);\n  return tokens.find((found) => found?.kind === \"cashu\" && found.amount !== null) ?? tokens.find((found) => found) ?? null;\n}\n\n/**\n * 12 to 24 words in a row from the English BIP39 list whose checksum holds, anywhere in the text; or a message that\n * is nothing but 12, 15, 18, 21 or 24 of those words (a seed with one word mistyped is still most of a seed). Prose\n * breaks a run at once: \"the\", \"a\", \"is\", \"to\", \"and\", \"of\" and \"I\" are not on the list.\n *\n * One word said over and over is not a seed, though one in 16 such runs passes a 12-word checksum (\"word\" does): a\n * window of a single word never counts, and a window mostly of one word (\"abandon … about\") counts only when that\n * word does not go on past it on either side.\n */\nfunction hasMnemonic(text: string): boolean {\n  const tokens = text.toLowerCase().match(/[a-z]+/g);\n  if (!tokens || tokens.length < 12) return false;\n  let budget = CHECKSUM_BUDGET;\n  let run: number[] = [];\n  const seedLike = (start: number, length: number) => {\n    const window = run.slice(start, start + length);\n    const counts = new Map<number, number>();\n    for (const word of window) counts.set(word, (counts.get(word) ?? 0) + 1);\n    if (counts.size === 1) return false;\n    const [most, times] = [...counts].reduce((a, b) => (b[1] > a[1] ? b : a));\n    if (times > length / 2 && (run[start - 1] === most || run[start + length] === most)) return false;\n    return checksumHolds(window);\n  };\n  const check = () => {\n    if (run.length >= 12) {\n      for (const length of MNEMONIC_LENGTHS) {\n        for (let start = 0; start + length <= run.length && budget > 0; start++, budget--) {\n          if (seedLike(start, length)) return true;\n        }\n      }\n      if (run.length === tokens.length && MNEMONIC_LENGTHS.includes(run.length) && new Set(run).size > 1) return true;\n    }\n    run = [];\n    return false;\n  };\n  for (const token of tokens) {\n    const index = WORD_INDEX.get(token);\n    if (index !== undefined) run.push(index);\n    else if (check()) return true;\n  }\n  return check();\n}\n\n/** BIP39: the words' 11-bit indices are the entropy followed by the first bits of its SHA-256. */\nfunction checksumHolds(indices: number[]): boolean {\n  const bits = indices.length * 11, checksumBits = bits / 33, entropyBytes = (bits - checksumBits) / 8;\n  const bytes = new Uint8Array(Math.ceil(bits / 8));\n  indices.forEach((index, i) => {\n    for (let b = 0; b < 11; b++) if (index & (1 << (10 - b))) { const at = i * 11 + b; bytes[at >> 3] |= 0x80 >> (at & 7); }\n  });\n  const expected = sha256(bytes.subarray(0, entropyBytes))[0] >> (8 - checksumBits);\n  const got = bytes[entropyBytes] >> (8 - checksumBits);\n  return expected === got;\n}\n\n/** A WIF private key: base58check with version 0x80 (mainnet) or 0xef (testnet), 32 bytes and an optional 0x01. */\nfunction hasWif(text: string): boolean {\n  for (const [candidate] of text.matchAll(WIF)) {\n    try {\n      const payload = base58check.decode(candidate);\n      if ((payload[0] === 0x80 || payload[0] === 0xef) && (payload.length === 33 || (payload.length === 34 && payload[33] === 1))) return true;\n    } catch { /* not base58check: an ordinary word */ }\n  }\n  return false;\n}\n\n/** 64 or 128 hex digits with \"private key\", \"secret\", \"seed\" or the like close by. A bare hash is not asked about. */\nfunction hasHexSecret(text: string): boolean {\n  for (const match of text.matchAll(HEX_SECRET)) {\n    const before = text.slice(Math.max(0, match.index - CONTEXT_REACH), match.index);\n    const after = text.slice(match.index + match[0].length, match.index + match[0].length + CONTEXT_REACH);\n    if (SECRET_CONTEXT.test(before) || SECRET_CONTEXT.test(after)) return true;\n  }\n  return false;\n}\n\n/** Every Cashu token in the text, with their amounts added up when all of them decode and share one unit. */\nfunction findCashu(text: string): SecretFinding | null {\n  const tokens = [...text.matchAll(CASHU_TOKEN)].map(([, version, body]) => decodeCashu(version as \"A\" | \"B\", body));\n  if (!tokens.length) return null;\n  const unit = tokens.find((token) => token)?.unit ?? \"sat\";\n  const readable = tokens.every((token) => token && token.unit === unit);\n  return { kind: \"cashu\", amount: readable ? tokens.reduce((sum, token) => sum + token!.amount, 0) : null, unit };\n}\n\n/** What a Cashu token is worth, read from the token itself (NUT-00): nothing is asked of the mint. */\nexport function decodeCashu(version: \"A\" | \"B\", body: string): { amount: number; unit: string } | null {\n  try {\n    const bytes = fromBase64(body);\n    if (version === \"A\") {\n      const token = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes)) as { token?: { proofs?: { amount?: unknown }[] }[]; unit?: unknown };\n      return total(token.token?.flatMap((entry) => entry.proofs ?? []).map((proof) => proof.amount), token.unit);\n    }\n    const token = decodeCbor(bytes) as { t?: { p?: { a?: unknown }[] }[]; u?: unknown } | null;\n    return total(token?.t?.flatMap((entry) => entry.p ?? []).map((proof) => proof.a), token?.u);\n  } catch {\n    return null;\n  }\n}\n\nfunction total(amounts: unknown[] | undefined, unit: unknown): { amount: number; unit: string } | null {\n  if (!amounts?.length || !amounts.every((a): a is number => Number.isSafeInteger(a) && (a as number) >= 0)) return null;\n  const amount = amounts.reduce((sum, a) => sum + a, 0);\n  return Number.isSafeInteger(amount) ? { amount, unit: typeof unit === \"string\" && unit ? unit : \"sat\" } : null;\n}\n\nfunction fromBase64(text: string): Uint8Array {\n  const standard = text.replace(/-/g, \"+\").replace(/_/g, \"/\").replace(/=+$/, \"\");\n  const binary = atob(standard + \"=\".repeat((4 - (standard.length % 4)) % 4));\n  return Uint8Array.from(binary, (c) => c.charCodeAt(0));\n}\n\n/** Enough CBOR (RFC 8949) for a cashuB token: definite lengths, integers, bytes, text, arrays, maps, tags, simple values. */\nfunction decodeCbor(bytes: Uint8Array): unknown {\n  let at = 0, depth = 0;\n  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);\n  const length = (info: number): number => {\n    if (info < 24) return info;\n    const size = info === 24 ? 1 : info === 25 ? 2 : info === 26 ? 4 : info === 27 ? 8 : 0;\n    if (!size || at + size > bytes.length) throw new Error(\"cbor\");\n    let value = 0;\n    for (let i = 0; i < size; i++) value = value * 256 + bytes[at + i];\n    at += size;\n    return value;\n  };\n  const item = (): unknown => {\n    if (at >= bytes.length || ++depth > 32) throw new Error(\"cbor\");\n    const head = bytes[at++], major = head >> 5, info = head & 31;\n    try {\n      if (major === 7) {\n        if (info === 20) return false;\n        if (info === 21) return true;\n        if (info === 22 || info === 23) return null;\n        if (info === 25) { at += 2; return NaN; } // a half float: never in a token\n        if (info === 26) { at += 4; return view.getFloat32(at - 4); }\n        if (info === 27) { at += 8; return view.getFloat64(at - 8); }\n        throw new Error(\"cbor\");\n      }\n      const n = length(info);\n      switch (major) {\n        case 0: return n;\n        case 1: return -1 - n;\n        case 2: case 3: {\n          if (at + n > bytes.length) throw new Error(\"cbor\");\n          const slice = bytes.subarray(at, (at += n));\n          return major === 2 ? slice : new TextDecoder(\"utf-8\", { fatal: true }).decode(slice);\n        }\n        case 4: {\n          if (n > bytes.length - at) throw new Error(\"cbor\");\n          return Array.from({ length: n }, item);\n        }\n        case 5: {\n          if (n > bytes.length - at) throw new Error(\"cbor\");\n          const map: Record<string, unknown> = Object.create(null);\n          for (let i = 0; i < n; i++) { const key = item(); map[String(key)] = item(); }\n          return map;\n        }\n        default: return item(); // a tag: the value it tags\n      }\n    } finally { depth--; }\n  };\n  return item();\n}\n","import type { StoredMessage } from \"@ghostly/browser/shared/types\";\nimport { node, type ApiContext } from \"./apiKit\";\nimport { CliError } from \"./errors\";\nimport type { GhostlyEvent } from \"./events\";\n\n/*\n * Waiting on what a command sent (WISP 1100): a message's delivery, an edit's confirmation, a group frame taken by an\n * edge. Shared by the chat, group and status card methods.\n */\n\nconst DELIVERY_RANK: Record<string, number> = { sending: 0, waiting: 1, queued: 1, held: 2, sent: 2, delivered: 3 };\n\n/** Waits until the contact confirmed the latest edit of one of my messages (it is no longer pending). */\nexport async function waitForEdit(ctx: ApiContext, chat: string, messageId: string, ms: number): Promise<StoredMessage> {\n  const until = Date.now() + ms;\n  for (;;) {\n    const message = await node(ctx).getMessage(chat, messageId);\n    if (!message) throw new CliError(\"not_found\", `No message ${messageId} in this chat`);\n    if (!message.edit?.pending) return message;\n    if (Date.now() >= until) throw new CliError(\"timeout\", `Timed out after ${Math.round(ms / 1000)} s: the contact has not confirmed the edit yet. It goes by itself once the chat is live and the contact's app shows edits, while this profile is online`, { messageId, edits: message.edit.seq });\n    await new Promise((resolve) => setTimeout(resolve, 250));\n  }\n}\n\n/**\n * Waits until an edge took my group message, or its edit number `edit` (WISP 902: a group has no receipts, so this is\n * as far as the author sees): a member's edge in a private group, an edge to one of my hubs in a community.\n */\nexport async function waitForGroupFrame(ctx: ApiContext, groupId: string, messageId: string, edit: number | undefined, ms: number): Promise<number> {\n  const until = Date.now() + ms;\n  for (;;) {\n    const taken = node(ctx).groupTaken({ groupId, messageId, ...(edit ? { edit } : {}) });\n    if (taken > 0) return taken;\n    if (Date.now() >= until) throw new CliError(\"timeout\", `Timed out after ${Math.round(ms / 1000)} s: no member's edge took it yet. It stays in the group and goes when one opens, while this profile is online`, { messageId, ...(edit ? { edits: edit } : {}) });\n    await new Promise((resolve) => setTimeout(resolve, 250));\n  }\n}\n\n/** Waits until a message of mine reached `target` (`sent`: on its way to the contact; `delivered`: acknowledged). */\nexport async function waitForMessage(ctx: ApiContext, chat: string, messageId: string, target: \"sent\" | \"delivered\", ms: number): Promise<StoredMessage> {\n  const want = DELIVERY_RANK[target];\n  const look = (message: StoredMessage | undefined) => {\n    if (!message) return undefined;\n    const delivery = message.delivery ?? \"sent\";\n    if (delivery === \"failed\") throw new CliError(\"engine\", message.deliveryError ?? \"The message could not be sent\", { messageId, delivery });\n    return (DELIVERY_RANK[delivery] ?? 0) >= want ? message : undefined;\n  };\n  return new Promise<StoredMessage>((resolve, reject) => {\n    let settled = false;\n    const finish = (error: unknown, message?: StoredMessage) => {\n      if (settled) return;\n      settled = true; clearTimeout(timer); off();\n      if (error) reject(error); else resolve(message!);\n    };\n    const check = (last = false) => void node(ctx).getMessage(chat, messageId).then((message) => {\n      try {\n        const done = look(message);\n        if (done) finish(null, done);\n        else if (last) finish(new CliError(\"timeout\", `Timed out after ${Math.round(ms / 1000)} s: the message is ${message?.delivery ?? \"not sent yet\"} and still goes by itself while this profile is online`, { messageId, delivery: message?.delivery ?? null }));\n      } catch (error) { finish(error); }\n    }, finish);\n    const timer = setTimeout(() => check(true), ms);\n    // Any event naming the message: a message first seen already delivered comes as `message.sent`, never as\n    // `message.delivery`. Listening before the first read leaves no gap for a change to slip through.\n    const off = ctx.hub.onEvent((event: GhostlyEvent) => {\n      if (event.chat === chat && (event.messageId === messageId || (event.message as { id?: string } | undefined)?.id === messageId)) check();\n    });\n    check();\n  });\n}\n","import { BUTTONS_CAPABILITY, STATUS_CARD_LIMITS, buttonLabelClash, checkStatusCard, randomBytes, toBase64Url, type ButtonsCard } from \"@ghostly/core\";\nimport type { LinkView, StoredMessage } from \"@ghostly/browser/shared/types\";\nimport type { Parsed } from \"./args\";\nimport { bool, chatOrGroup, messageOf, node, num, oneOf, str, type Method, type Params } from \"./apiKit\";\nimport { CliError } from \"./errors\";\nimport { findSecret } from \"../../../apps/ui/src/lib/parse/secrets\";\nimport { waitForEdit, waitForGroupFrame, waitForMessage } from \"./waits\";\n\n/*\n * Message buttons (WISP 406 · Message Buttons), the bot's side: a message whose text is the question, with up to six\n * buttons under it (`send --button yes:Yes`). A press comes back as a reply whose text is the button's label; the\n * engine marks it (`press`) and `listen` says `button.pressed`. `button update` then shows the answer (`chosen`) and\n * closes the buttons, by editing the message with the same buttons.\n */\n\n/**\n * `--button id:Label` (again for each, 1 to 6), `--style id=primary|neutral|danger`, `--once` and `--id`, as the\n * method's parameters: `buttons` and `buttonsId`. Nothing when no `--button` is given. The label may hold colons: the\n * id ends at the first one. Two labels that read the same (ignoring case and spaces at the ends), or a label that is\n * another button's id, are a usage error here; other bounds (ids, labels, how many) are the card's, checked when it is sent.\n */\nexport function buttonsOf(options: Parsed[\"options\"]): { buttons: Record<string, unknown>[]; buttonsId?: string } | undefined {\n  const given = Array.isArray(options.button) ? options.button as string[] : [];\n  if (!given.length) {\n    for (const flag of [\"style\", \"once\", \"id\"] as const)\n      if (options[flag] !== undefined) throw new CliError(\"usage\", `--${flag} goes with --button id:Label`);\n    return undefined;\n  }\n  const buttons: Record<string, unknown>[] = given.map((value) => {\n    const colon = value.indexOf(\":\");\n    if (colon < 1 || colon === value.length - 1) throw new CliError(\"usage\", `--button takes id:Label, like yes:Yes, not ${JSON.stringify(value)}`);\n    return { id: value.slice(0, colon), label: value.slice(colon + 1).trim() };\n  });\n  // Two buttons a typed answer could not tell apart: the same label, or a label that is another's id (ignoring case).\n  const clash = buttonLabelClash(buttons);\n  if (clash) {\n    const [at, other] = [JSON.stringify(given[clash.at]), JSON.stringify(given[clash.with])];\n    throw new CliError(\"usage\", clash.kind === \"label\"\n      ? `--button ${at} repeats the label of --button ${other} (ignoring case and spaces): a typed answer could not tell them apart`\n      : `--button ${at} has a label that is the id of --button ${other}: a typed answer could not tell them apart`);\n  }\n  for (const value of Array.isArray(options.style) ? options.style as string[] : []) {\n    const eq = value.indexOf(\"=\");\n    const button = eq > 0 ? buttons.find((b) => b.id === value.slice(0, eq)) : undefined;\n    if (!button) throw new CliError(\"usage\", `--style takes id=primary|neutral|danger for one of the buttons, not ${JSON.stringify(value)}`);\n    button.style = value.slice(eq + 1);\n  }\n  if (options.once === true) for (const button of buttons) button.once = true;\n  return { buttons, ...(options.id !== undefined && { buttonsId: String(options.id) }) };\n}\n\n/** A buttons card checked by the sender's rule, or a `bad_request` that says what is wrong. */\nfunction checked(card: Record<string, unknown>): ButtonsCard {\n  const result = checkStatusCard(card);\n  if (\"error\" in result) throw new CliError(\"bad_request\", `Buttons: ${result.error}`, { card });\n  return result.card as ButtonsCard;\n}\n\n/**\n * The card a send's `buttons` (and `buttonsId`) make, or undefined when it names none. `buttons` is a list of\n * `{id, label, style?, once?}`; the id of the question is made up (`ask-…`) unless given.\n */\nexport function buttonsCard(params: Params): ButtonsCard | undefined {\n  const buttons = params.buttons;\n  if (buttons === undefined || buttons === null) {\n    if (params.buttonsId !== undefined) throw new CliError(\"bad_request\", \"buttonsId goes with buttons\");\n    return undefined;\n  }\n  if (!Array.isArray(buttons)) throw new CliError(\"bad_request\", \"buttons must be a list of {id, label, style?, once?}\");\n  const id = str(params, \"buttonsId\") ?? `ask-${toBase64Url(randomBytes(6))}`;\n  return checked({ kind: \"buttons\", id, buttons });\n}\n\n/** Whether a 1:1 contact's app shows and presses buttons: null until its app said what it offers. */\nexport function pressable(link: LinkView): boolean | null {\n  const peer = link.sessionOffers?.peer;\n  return peer ? peer.includes(BUTTONS_CAPABILITY) : null;\n}\n\n/** The message of mine with buttons that `button update` names, by its id here (or the id both sides know). */\nfunction buttonsMessage(message: StoredMessage | undefined, ref: string, group: boolean): StoredMessage & { card: ButtonsCard } {\n  if (!message) throw new CliError(\"not_found\", `No message ${JSON.stringify(ref)} of yours in this ${group ? \"group\" : \"chat\"}: the messageId send gave`);\n  if (message.card?.kind !== \"buttons\") throw new CliError(\"bad_request\", \"That message has no buttons: send one with send --button id:Label\");\n  return message as StoredMessage & { card: ButtonsCard };\n}\n\n/**\n * `button update`: the answer shown on a question's buttons (`chosen`), the buttons closed (`close`), or a new text\n * (`text`), by editing the message with the same buttons. What is not given stays as it was.\n */\nasync function updateButtons(ctx: Parameters<Method>[0], params: Params): Promise<Record<string, unknown>> {\n  const target = chatOrGroup(ctx, str(params, \"chat\", true));\n  const ref = str(params, \"message\", true);\n  const chosen = str(params, \"chosen\");\n  const close = bool(params, \"close\");\n  const newText = str(params, \"text\");\n  if (chosen === undefined && !close && newText === undefined) throw new CliError(\"bad_request\", \"Nothing to update: give chosen, close or text\");\n  // A new text is a message like any other: the same guard as `send` and `edit`.\n  if (newText !== undefined && !bool(params, \"force\")) {\n    const secret = findSecret(newText);\n    if (secret) throw new CliError(\"confirm\", `The text looks like ${secret.kind === \"cashu\" ? \"a Cashu token (money anyone who reads it can take)\" : \"a secret (a seed or a private key)\"}; update with --force if you mean to`, { kind: secret.kind });\n  }\n  const message = buttonsMessage(await messageOf(ctx, target.linkId, ref, (m) => m.sender === \"me\"), ref, target.group);\n  if ((message.edit?.seq ?? 0) >= STATUS_CARD_LIMITS.edits)\n    throw new CliError(\"refused\", `This message took ${STATUS_CARD_LIMITS.edits} updates, the most one takes: ask again with a new send`, { messageId: message.id, edits: message.edit!.seq });\n  const before = message.card;\n  // Said here, with the buttons it has, as a press says it: the card's own check names only the field.\n  if (chosen !== undefined && !before.buttons.some((b) => b.id === chosen))\n    throw new CliError(\"bad_request\", `That message has no button ${JSON.stringify(chosen)}; its buttons: ${before.buttons.map((b) => b.id).join(\", \")}`, { card: before });\n  const card = checked({ ...before, ...(chosen !== undefined && { chosen }), ...((close || before.closed) && { closed: true }) });\n  const text = newText ?? message.text;\n  const wait = oneOf(params, \"wait\", target.group ? [\"none\", \"sent\"] as const : [\"none\", \"confirmed\"] as const, \"none\");\n  const ms = num(params, \"timeout\", 30, { min: 1, max: 3600 }) * 1000;\n  const result = await node(ctx).editMessage({ linkId: target.linkId, messageId: message.id, text, card });\n  if (result.error) throw new CliError(result.refused ? \"refused\" : \"unavailable\", result.error);\n  let edited = await node(ctx).getMessage(target.linkId, message.id);\n  if (wait === \"confirmed\" && edited?.edit?.pending) edited = await waitForEdit(ctx, target.linkId, message.id, ms);\n  const edges = wait === \"sent\" && edited?.edit ? await waitForGroupFrame(ctx, target.id, message.id, edited.edit.seq, ms) : undefined;\n  return {\n    [target.group ? \"group\" : \"chat\"]: target.id, buttons: card.id, messageId: message.id, card, edits: edited?.edit?.seq ?? 0,\n    ...(target.group ? { ...(edges !== undefined && { edges }) } : { confirmed: !!edited && !edited.edit?.pending }),\n  };\n}\n\n/**\n * `button press`: the other side of a question, as the app's tap: a press on a button of someone else's message, by\n * its id here (or the id both sides know). The engine sends a reply whose text is the button's label, and refuses what\n * an app would: a button the message does not have, closed buttons, a second answer past `once`, a second press\n * within a second. A one-shot in a chat waits until the press went out, as `send` does.\n */\nasync function pressButton(ctx: Parameters<Method>[0], params: Params): Promise<Record<string, unknown>> {\n  const target = chatOrGroup(ctx, str(params, \"chat\", true));\n  const ref = str(params, \"message\", true);\n  const buttonId = str(params, \"button\", true);\n  const where = target.group ? \"group\" : \"chat\";\n  const message = await messageOf(ctx, target.linkId, ref, (m) => m.sender !== \"me\");\n  if (!message) throw new CliError(\"not_found\", `No message ${JSON.stringify(ref)} from someone else in this ${where}: the id its event or history gave`);\n  if (message.card?.kind !== \"buttons\") throw new CliError(\"bad_request\", \"That message has no buttons\");\n  const button = message.card.buttons.find((b) => b.id === buttonId);\n  if (!button) throw new CliError(\"not_found\", `That message has no button ${JSON.stringify(buttonId)}; its buttons: ${message.card.buttons.map((b) => b.id).join(\", \")}`);\n  const wait = target.group\n    ? oneOf(params, \"wait\", [\"none\", \"sent\"] as const, \"none\")\n    : oneOf(params, \"wait\", [\"none\", \"sent\", \"delivered\"] as const, ctx.mode === \"one-shot\" ? \"sent\" : \"none\");\n  const ms = num(params, \"timeout\", 30, { min: 1, max: 3600 }) * 1000;\n  const result = await node(ctx).pressButton({ linkId: target.linkId, messageId: message.id, buttonId });\n  if (result.error) throw new CliError(result.refused ? \"refused\" : \"unavailable\", result.error, result.paced ? { paced: true } : undefined);\n  const replyId = result.messageId ?? null;\n  const answer = { [where]: target.id, messageId: message.id, button: button.id, label: button.label, replyId };\n  if (!replyId) return answer;\n  if (target.group) {\n    const edges = wait === \"sent\" ? await waitForGroupFrame(ctx, target.id, replyId, undefined, ms) : node(ctx).groupTaken({ groupId: target.id, messageId: replyId });\n    return { ...answer, edges };\n  }\n  const reply = wait === \"none\" ? await node(ctx).getMessage(target.linkId, replyId) : await waitForMessage(ctx, target.linkId, replyId, wait, ms);\n  return { ...answer, delivery: reply?.delivery ?? null };\n}\n\nexport const BUTTON_METHODS: Record<string, Method> = {\n  /** WISP 406 · Message Buttons: a press on a button of someone else's message, as the app's tap. */\n  \"button.press\": pressButton,\n  /** WISP 406 · Message Buttons: the answer chosen on a question of mine, its buttons closed, or its text changed. */\n  \"button.update\": updateButtons,\n};\n"],"mappings":";;;;;;;AAkBA,IAAM,aAAa,IAAI,IAAI,SAAS,KAAK,MAAM,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;AACvE,IAAM,mBAAmB;CAAC;CAAI;CAAI;CAAI;CAAI;AAAE;;AAE5C,IAAM,kBAAkB;AAExB,IAAM,OAAO;AACb,IAAM,mBAAmB;AACzB,IAAM,MAAM;AACZ,IAAM,aAAa;AACnB,IAAM,iBAAiB;;AAEvB,IAAM,gBAAgB;AACtB,IAAM,cAAc;;;;;;AAOpB,IAAM,YAAY;AAElB,IAAM,cAAc,kBAAkB,MAAM;;;;;AAM5C,SAAgB,WAAW,MAAoC;CAC7D,MAAM,UAAU,KAAK,QAAQ,WAAW,EAAE;CAC1C,MAAM,WAAW,YAAY,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,OAAO;CAC3D,IAAI,SAAS,KAAK,WAAW,GAAG,OAAO,EAAE,MAAM,WAAW;CAC1D,IAAI,SAAS,MAAM,YAAY,KAAK,KAAK,OAAO,CAAC,GAAG,OAAO,EAAE,MAAM,OAAO;CAC1E,IAAI,SAAS,MAAM,YAAY,iBAAiB,KAAK,OAAO,KAAK,OAAO,OAAO,CAAC,GAAG,OAAO,EAAE,MAAM,cAAc;CAChH,IAAI,SAAS,KAAK,YAAY,GAAG,OAAO,EAAE,MAAM,UAAU;CAC1D,MAAM,SAAS,SAAS,IAAI,SAAS;CACrC,OAAO,OAAO,MAAM,UAAU,OAAO,SAAS,WAAW,MAAM,WAAW,IAAI,KAAK,OAAO,MAAM,UAAU,KAAK,KAAK;AACtH;;;;;;;;;;AAWA,SAAS,YAAY,MAAuB;CAC1C,MAAM,SAAS,KAAK,YAAY,CAAC,CAAC,MAAM,SAAS;CACjD,IAAI,CAAC,UAAU,OAAO,SAAS,IAAI,OAAO;CAC1C,IAAI,SAAS;CACb,IAAI,MAAgB,CAAC;CACrB,MAAM,YAAY,OAAe,WAAmB;EAClD,MAAM,SAAS,IAAI,MAAM,OAAO,QAAQ,MAAM;EAC9C,MAAM,yBAAS,IAAI,IAAoB;EACvC,KAAK,MAAM,QAAQ,QAAQ,OAAO,IAAI,OAAO,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;EACvE,IAAI,OAAO,SAAS,GAAG,OAAO;EAC9B,MAAM,CAAC,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,GAAG,MAAO,EAAE,KAAK,EAAE,KAAK,IAAI,CAAE;EACxE,IAAI,QAAQ,SAAS,MAAM,IAAI,QAAQ,OAAO,QAAQ,IAAI,QAAQ,YAAY,OAAO,OAAO;EAC5F,OAAO,cAAc,MAAM;CAC7B;CACA,MAAM,cAAc;EAClB,IAAI,IAAI,UAAU,IAAI;GACpB,KAAK,MAAM,UAAU,kBACnB,KAAK,IAAI,QAAQ,GAAG,QAAQ,UAAU,IAAI,UAAU,SAAS,GAAG,SAAS,UACvE,IAAI,SAAS,OAAO,MAAM,GAAG,OAAO;GAGxC,IAAI,IAAI,WAAW,OAAO,UAAU,iBAAiB,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,GAAG,OAAO;EAC7G;EACA,MAAM,CAAC;EACP,OAAO;CACT;CACA,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,QAAQ,WAAW,IAAI,KAAK;EAClC,IAAI,UAAU,KAAA,GAAW,IAAI,KAAK,KAAK;OAClC,IAAI,MAAM,GAAG,OAAO;CAC3B;CACA,OAAO,MAAM;AACf;;AAGA,SAAS,cAAc,SAA4B;CACjD,MAAM,OAAO,QAAQ,SAAS,IAAI,eAAe,OAAO,IAAI,gBAAgB,OAAO,gBAAgB;CACnG,MAAM,QAAQ,IAAI,WAAW,KAAK,KAAK,OAAO,CAAC,CAAC;CAChD,QAAQ,SAAS,OAAO,MAAM;EAC5B,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,IAAI,QAAS,KAAM,KAAK,GAAK;GAAE,MAAM,KAAK,IAAI,KAAK;GAAG,MAAM,MAAM,MAAM,QAAS,KAAK;EAAI;CACzH,CAAC;CAGD,OAFiB,OAAO,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,MAAO,IAAI,iBACxD,MAAM,iBAAkB,IAAI;AAE1C;;AAGA,SAAS,OAAO,MAAuB;CACrC,KAAK,MAAM,CAAC,cAAc,KAAK,SAAS,GAAG,GACzC,IAAI;EACF,MAAM,UAAU,YAAY,OAAO,SAAS;EAC5C,KAAK,QAAQ,OAAO,OAAQ,QAAQ,OAAO,SAAU,QAAQ,WAAW,MAAO,QAAQ,WAAW,MAAM,QAAQ,QAAQ,IAAK,OAAO;CACtI,QAAQ,CAA0C;CAEpD,OAAO;AACT;;AAGA,SAAS,aAAa,MAAuB;CAC3C,KAAK,MAAM,SAAS,KAAK,SAAS,UAAU,GAAG;EAC7C,MAAM,SAAS,KAAK,MAAM,KAAK,IAAI,GAAG,MAAM,QAAQ,aAAa,GAAG,MAAM,KAAK;EAC/E,MAAM,QAAQ,KAAK,MAAM,MAAM,QAAQ,MAAM,EAAE,CAAC,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC,SAAS,aAAa;EACrG,IAAI,eAAe,KAAK,MAAM,KAAK,eAAe,KAAK,KAAK,GAAG,OAAO;CACxE;CACA,OAAO;AACT;;AAGA,SAAS,UAAU,MAAoC;CACrD,MAAM,SAAS,CAAC,GAAG,KAAK,SAAS,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,SAAS,UAAU,YAAY,SAAsB,IAAI,CAAC;CACjH,IAAI,CAAC,OAAO,QAAQ,OAAO;CAC3B,MAAM,OAAO,OAAO,MAAM,UAAU,KAAK,CAAC,EAAE,QAAQ;CAEpD,OAAO;EAAE,MAAM;EAAS,QADP,OAAO,OAAO,UAAU,SAAS,MAAM,SAAS,IACjC,IAAW,OAAO,QAAQ,KAAK,UAAU,MAAM,MAAO,QAAQ,CAAC,IAAI;EAAM;CAAK;AAChH;;AAGA,SAAgB,YAAY,SAAoB,MAAuD;CACrG,IAAI;EACF,MAAM,QAAQ,WAAW,IAAI;EAC7B,IAAI,YAAY,KAAK;GACnB,MAAM,QAAQ,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;GAChF,OAAO,MAAM,MAAM,OAAO,SAAS,UAAU,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,MAAM,GAAG,MAAM,IAAI;EAC3G;EACA,MAAM,QAAQ,WAAW,KAAK;EAC9B,OAAO,MAAM,OAAO,GAAG,SAAS,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,CAAC,GAAG,OAAO,CAAC;CAC5F,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,MAAM,SAAgC,MAAwD;CACrG,IAAI,CAAC,SAAS,UAAU,CAAC,QAAQ,OAAO,MAAmB,OAAO,cAAc,CAAC,KAAM,KAAgB,CAAC,GAAG,OAAO;CAClH,MAAM,SAAS,QAAQ,QAAQ,KAAK,MAAM,MAAM,GAAG,CAAC;CACpD,OAAO,OAAO,cAAc,MAAM,IAAI;EAAE;EAAQ,MAAM,OAAO,SAAS,YAAY,OAAO,OAAO;CAAM,IAAI;AAC5G;AAEA,SAAS,WAAW,MAA0B;CAC5C,MAAM,WAAW,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE;CAC7E,MAAM,SAAS,KAAK,WAAW,IAAI,QAAQ,IAAK,SAAS,SAAS,KAAM,CAAC,CAAC;CAC1E,OAAO,WAAW,KAAK,SAAS,MAAM,EAAE,WAAW,CAAC,CAAC;AACvD;;AAGA,SAAS,WAAW,OAA4B;CAC9C,IAAI,KAAK,GAAG,QAAQ;CACpB,MAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;CAC1E,MAAM,UAAU,SAAyB;EACvC,IAAI,OAAO,IAAI,OAAO;EACtB,MAAM,OAAO,SAAS,KAAK,IAAI,SAAS,KAAK,IAAI,SAAS,KAAK,IAAI,SAAS,KAAK,IAAI;EACrF,IAAI,CAAC,QAAQ,KAAK,OAAO,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM;EAC7D,IAAI,QAAQ;EACZ,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,KAAK,QAAQ,QAAQ,MAAM,MAAM,KAAK;EAChE,MAAM;EACN,OAAO;CACT;CACA,MAAM,aAAsB;EAC1B,IAAI,MAAM,MAAM,UAAU,EAAE,QAAQ,IAAI,MAAM,IAAI,MAAM,MAAM;EAC9D,MAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,GAAG,OAAO,OAAO;EAC3D,IAAI;GACF,IAAI,UAAU,GAAG;IACf,IAAI,SAAS,IAAI,OAAO;IACxB,IAAI,SAAS,IAAI,OAAO;IACxB,IAAI,SAAS,MAAM,SAAS,IAAI,OAAO;IACvC,IAAI,SAAS,IAAI;KAAE,MAAM;KAAG,OAAO;IAAK;IACxC,IAAI,SAAS,IAAI;KAAE,MAAM;KAAG,OAAO,KAAK,WAAW,KAAK,CAAC;IAAG;IAC5D,IAAI,SAAS,IAAI;KAAE,MAAM;KAAG,OAAO,KAAK,WAAW,KAAK,CAAC;IAAG;IAC5D,MAAM,IAAI,MAAM,MAAM;GACxB;GACA,MAAM,IAAI,OAAO,IAAI;GACrB,QAAQ,OAAR;IACE,KAAK,GAAG,OAAO;IACf,KAAK,GAAG,OAAO,KAAK;IACpB,KAAK;IAAG,KAAK,GAAG;KACd,IAAI,KAAK,IAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM;KACjD,MAAM,QAAQ,MAAM,SAAS,IAAK,MAAM,CAAE;KAC1C,OAAO,UAAU,IAAI,QAAQ,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;IACrF;IACA,KAAK;KACH,IAAI,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI,MAAM,MAAM;KACjD,OAAO,MAAM,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI;IAEvC,KAAK,GAAG;KACN,IAAI,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI,MAAM,MAAM;KACjD,MAAM,MAA+B,OAAO,OAAO,IAAI;KACvD,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;MAAE,MAAM,MAAM,KAAK;MAAG,IAAI,OAAO,GAAG,KAAK,KAAK;KAAG;KAC7E,OAAO;IACT;IACA,SAAS,OAAO,KAAK;GACvB;EACF,UAAU;GAAE;EAAS;CACvB;CACA,OAAO,KAAK;AACd;;;AChNA,IAAM,gBAAwC;CAAE,SAAS;CAAG,SAAS;CAAG,QAAQ;CAAG,MAAM;CAAG,MAAM;CAAG,WAAW;AAAE;;AAGlH,eAAsB,YAAY,KAAiB,MAAc,WAAmB,IAAoC;CACtH,MAAM,QAAQ,KAAK,IAAI,IAAI;CAC3B,SAAS;EACP,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,MAAM,SAAS;EAC1D,IAAI,CAAC,SAAS,MAAM,IAAI,SAAS,aAAa,cAAc,UAAU,cAAc;EACpF,IAAI,CAAC,QAAQ,MAAM,SAAS,OAAO;EACnC,IAAI,KAAK,IAAI,KAAK,OAAO,MAAM,IAAI,SAAS,WAAW,mBAAmB,KAAK,MAAM,KAAK,GAAI,EAAE,0JAA0J;GAAE;GAAW,OAAO,QAAQ,KAAK;EAAI,CAAC;EAChS,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;CACzD;AACF;;;;;AAMA,eAAsB,kBAAkB,KAAiB,SAAiB,WAAmB,MAA0B,IAA6B;CAClJ,MAAM,QAAQ,KAAK,IAAI,IAAI;CAC3B,SAAS;EACP,MAAM,QAAQ,KAAK,GAAG,CAAC,CAAC,WAAW;GAAE;GAAS;GAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAG,CAAC;EACpF,IAAI,QAAQ,GAAG,OAAO;EACtB,IAAI,KAAK,IAAI,KAAK,OAAO,MAAM,IAAI,SAAS,WAAW,mBAAmB,KAAK,MAAM,KAAK,GAAI,EAAE,gHAAgH;GAAE;GAAW,GAAI,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;EAAG,CAAC;EAC/P,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;CACzD;AACF;;AAGA,eAAsB,eAAe,KAAiB,MAAc,WAAmB,QAA8B,IAAoC;CACvJ,MAAM,OAAO,cAAc;CAC3B,MAAM,QAAQ,YAAuC;EACnD,IAAI,CAAC,SAAS,OAAO,KAAA;EACrB,MAAM,WAAW,QAAQ,YAAY;EACrC,IAAI,aAAa,UAAU,MAAM,IAAI,SAAS,UAAU,QAAQ,iBAAiB,iCAAiC;GAAE;GAAW;EAAS,CAAC;EACzI,QAAQ,cAAc,aAAa,MAAM,OAAO,UAAU,KAAA;CAC5D;CACA,OAAO,IAAI,SAAwB,SAAS,WAAW;EACrD,IAAI,UAAU;EACd,MAAM,UAAU,OAAgB,YAA4B;GAC1D,IAAI,SAAS;GACb,UAAU;GAAM,aAAa,KAAK;GAAG,IAAI;GACzC,IAAI,OAAO,OAAO,KAAK;QAAQ,QAAQ,OAAQ;EACjD;EACA,MAAM,SAAS,OAAO,UAAU,KAAK,KAAK,GAAG,CAAC,CAAC,WAAW,MAAM,SAAS,CAAC,CAAC,MAAM,YAAY;GAC3F,IAAI;IACF,MAAM,OAAO,KAAK,OAAO;IACzB,IAAI,MAAM,OAAO,MAAM,IAAI;SACtB,IAAI,MAAM,OAAO,IAAI,SAAS,WAAW,mBAAmB,KAAK,MAAM,KAAK,GAAI,EAAE,qBAAqB,SAAS,YAAY,eAAe,yDAAyD;KAAE;KAAW,UAAU,SAAS,YAAY;IAAK,CAAC,CAAC;GAC9P,SAAS,OAAO;IAAE,OAAO,KAAK;GAAG;EACnC,GAAG,MAAM;EACT,MAAM,QAAQ,iBAAiB,MAAM,IAAI,GAAG,EAAE;EAG9C,MAAM,MAAM,IAAI,IAAI,SAAS,UAAwB;GACnD,IAAI,MAAM,SAAS,SAAS,MAAM,cAAc,aAAc,MAAM,SAAyC,OAAO,YAAY,MAAM;EACxI,CAAC;EACD,MAAM;CACR,CAAC;AACH;;;;;;;;;AChDA,SAAgB,UAAU,SAAoG;CAC5H,MAAM,QAAQ,MAAM,QAAQ,QAAQ,MAAM,IAAI,QAAQ,SAAqB,CAAC;CAC5E,IAAI,CAAC,MAAM,QAAQ;EACjB,KAAK,MAAM,QAAQ;GAAC;GAAS;GAAQ;EAAI,GACvC,IAAI,QAAQ,UAAU,KAAA,GAAW,MAAM,IAAI,SAAS,SAAS,KAAK,KAAK,6BAA6B;EACtG;CACF;CACA,MAAM,UAAqC,MAAM,KAAK,UAAU;EAC9D,MAAM,QAAQ,MAAM,QAAQ,GAAG;EAC/B,IAAI,QAAQ,KAAK,UAAU,MAAM,SAAS,GAAG,MAAM,IAAI,SAAS,SAAS,8CAA8C,KAAK,UAAU,KAAK,GAAG;EAC9I,OAAO;GAAE,IAAI,MAAM,MAAM,GAAG,KAAK;GAAG,OAAO,MAAM,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK;EAAE;CAC3E,CAAC;CAED,MAAM,QAAQ,iBAAiB,OAAO;CACtC,IAAI,OAAO;EACT,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,UAAU,MAAM,MAAM,GAAG,GAAG,KAAK,UAAU,MAAM,MAAM,KAAK,CAAC;EACvF,MAAM,IAAI,SAAS,SAAS,MAAM,SAAS,UACvC,YAAY,GAAG,iCAAiC,MAAM,yEACtD,YAAY,GAAG,0CAA0C,MAAM,2CAA2C;CAChH;CACA,KAAK,MAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAoB,CAAC,GAAG;EACjF,MAAM,KAAK,MAAM,QAAQ,GAAG;EAC5B,MAAM,SAAS,KAAK,IAAI,QAAQ,MAAM,MAAM,EAAE,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,KAAA;EAC3E,IAAI,CAAC,QAAQ,MAAM,IAAI,SAAS,SAAS,uEAAuE,KAAK,UAAU,KAAK,GAAG;EACvI,OAAO,QAAQ,MAAM,MAAM,KAAK,CAAC;CACnC;CACA,IAAI,QAAQ,SAAS,MAAM,KAAK,MAAM,UAAU,SAAS,OAAO,OAAO;CACvE,OAAO;EAAE;EAAS,GAAI,QAAQ,OAAO,KAAA,KAAa,EAAE,WAAW,OAAO,QAAQ,EAAE,EAAE;CAAG;AACvF;;AAGA,SAAS,QAAQ,MAA4C;CAC3D,MAAM,SAAS,gBAAgB,IAAI;CACnC,IAAI,WAAW,QAAQ,MAAM,IAAI,SAAS,eAAe,YAAY,OAAO,SAAS,EAAE,KAAK,CAAC;CAC7F,OAAO,OAAO;AAChB;;;;;AAMA,SAAgB,YAAY,QAAyC;CACnE,MAAM,UAAU,OAAO;CACvB,IAAI,YAAY,KAAA,KAAa,YAAY,MAAM;EAC7C,IAAI,OAAO,cAAc,KAAA,GAAW,MAAM,IAAI,SAAS,eAAe,6BAA6B;EACnG;CACF;CACA,IAAI,CAAC,MAAM,QAAQ,OAAO,GAAG,MAAM,IAAI,SAAS,eAAe,sDAAsD;CAErH,OAAO,QAAQ;EAAE,MAAM;EAAW,IADvB,IAAI,QAAQ,WAAW,KAAK,OAAO,YAAY,YAAY,CAAC,CAAC;EAClC;CAAQ,CAAC;AACjD;;AAGA,SAAgB,UAAU,MAAgC;CACxD,MAAM,OAAO,KAAK,eAAe;CACjC,OAAO,OAAO,KAAK,SAAS,kBAAkB,IAAI;AACpD;;AAGA,SAAS,eAAe,SAAoC,KAAa,OAAuD;CAC9H,IAAI,CAAC,SAAS,MAAM,IAAI,SAAS,aAAa,cAAc,KAAK,UAAU,GAAG,EAAE,oBAAoB,QAAQ,UAAU,OAAO,0BAA0B;CACvJ,IAAI,QAAQ,MAAM,SAAS,WAAW,MAAM,IAAI,SAAS,eAAe,mEAAmE;CAC3I,OAAO;AACT;;;;;AAMA,eAAe,cAAc,KAA4B,QAAkD;CACzG,MAAM,SAAS,YAAY,KAAK,IAAI,QAAQ,QAAQ,IAAI,CAAC;CACzD,MAAM,MAAM,IAAI,QAAQ,WAAW,IAAI;CACvC,MAAM,SAAS,IAAI,QAAQ,QAAQ;CACnC,MAAM,QAAQ,KAAK,QAAQ,OAAO;CAClC,MAAM,UAAU,IAAI,QAAQ,MAAM;CAClC,IAAI,WAAW,KAAA,KAAa,CAAC,SAAS,YAAY,KAAA,GAAW,MAAM,IAAI,SAAS,eAAe,+CAA+C;CAE9I,IAAI,YAAY,KAAA,KAAa,CAAC,KAAK,QAAQ,OAAO,GAAG;EACnD,MAAM,SAAS,WAAW,OAAO;EACjC,IAAI,QAAQ,MAAM,IAAI,SAAS,WAAW,uBAAuB,OAAO,SAAS,UAAU,uDAAuD,qCAAqC,uCAAuC,EAAE,MAAM,OAAO,KAAK,CAAC;CACrP;CACA,MAAM,UAAU,eAAe,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,MAAM,EAAE,WAAW,IAAI,GAAG,KAAK,OAAO,KAAK;CACpH,KAAK,QAAQ,MAAM,OAAO,MAAM,mBAAmB,OACjD,MAAM,IAAI,SAAS,WAAW,qBAAqB,mBAAmB,MAAM,0DAA0D;EAAE,WAAW,QAAQ;EAAI,OAAO,QAAQ,KAAM;CAAI,CAAC;CAC3L,MAAM,SAAS,QAAQ;CAEvB,IAAI,WAAW,KAAA,KAAa,CAAC,OAAO,QAAQ,MAAM,MAAM,EAAE,OAAO,MAAM,GACrE,MAAM,IAAI,SAAS,eAAe,8BAA8B,KAAK,UAAU,MAAM,EAAE,iBAAiB,OAAO,QAAQ,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC;CACxK,MAAM,OAAO,QAAQ;EAAE,GAAG;EAAQ,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;EAAI,IAAK,SAAS,OAAO,WAAW,EAAE,QAAQ,KAAK;CAAG,CAAC;CAC9H,MAAM,OAAO,WAAW,QAAQ;CAChC,MAAM,OAAO,MAAM,QAAQ,QAAQ,OAAO,QAAQ,CAAC,QAAQ,MAAM,IAAa,CAAC,QAAQ,WAAW,GAAY,MAAM;CACpH,MAAM,KAAK,IAAI,QAAQ,WAAW,IAAI;EAAE,KAAK;EAAG,KAAK;CAAK,CAAC,IAAI;CAC/D,MAAM,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY;EAAE,QAAQ,OAAO;EAAQ,WAAW,QAAQ;EAAI;EAAM;CAAK,CAAC;CACvG,IAAI,OAAO,OAAO,MAAM,IAAI,SAAS,OAAO,UAAU,YAAY,eAAe,OAAO,KAAK;CAC7F,IAAI,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,OAAO,QAAQ,QAAQ,EAAE;CACjE,IAAI,SAAS,eAAe,QAAQ,MAAM,SAAS,SAAS,MAAM,YAAY,KAAK,OAAO,QAAQ,QAAQ,IAAI,EAAE;CAChH,MAAM,QAAQ,SAAS,UAAU,QAAQ,OAAO,MAAM,kBAAkB,KAAK,OAAO,IAAI,QAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,IAAI,KAAA;CAC3H,OAAO;GACJ,OAAO,QAAQ,UAAU,SAAS,OAAO;EAAI,SAAS,KAAK;EAAI,WAAW,QAAQ;EAAI;EAAM,OAAO,QAAQ,MAAM,OAAO;EACzH,GAAI,OAAO,QAAQ,EAAE,GAAI,UAAU,KAAA,KAAa,EAAE,MAAM,EAAG,IAAI,EAAE,WAAW,CAAC,CAAC,UAAU,CAAC,OAAO,MAAM,QAAQ;CAChH;AACF;;;;;;;AAQA,eAAe,YAAY,KAA4B,QAAkD;CACvG,MAAM,SAAS,YAAY,KAAK,IAAI,QAAQ,QAAQ,IAAI,CAAC;CACzD,MAAM,MAAM,IAAI,QAAQ,WAAW,IAAI;CACvC,MAAM,WAAW,IAAI,QAAQ,UAAU,IAAI;CAC3C,MAAM,QAAQ,OAAO,QAAQ,UAAU;CACvC,MAAM,UAAU,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,MAAM,EAAE,WAAW,IAAI;CACjF,IAAI,CAAC,SAAS,MAAM,IAAI,SAAS,aAAa,cAAc,KAAK,UAAU,GAAG,EAAE,6BAA6B,MAAM,mCAAmC;CACtJ,IAAI,QAAQ,MAAM,SAAS,WAAW,MAAM,IAAI,SAAS,eAAe,6BAA6B;CACrG,MAAM,SAAS,QAAQ,KAAK,QAAQ,MAAM,MAAM,EAAE,OAAO,QAAQ;CACjE,IAAI,CAAC,QAAQ,MAAM,IAAI,SAAS,aAAa,8BAA8B,KAAK,UAAU,QAAQ,EAAE,iBAAiB,QAAQ,KAAK,QAAQ,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,GAAG;CACvK,MAAM,OAAO,OAAO,QAChB,MAAM,QAAQ,QAAQ,CAAC,QAAQ,MAAM,GAAY,MAAM,IACvD,MAAM,QAAQ,QAAQ;EAAC;EAAQ;EAAQ;CAAW,GAAY,IAAI,SAAS,aAAa,SAAS,MAAM;CAC3G,MAAM,KAAK,IAAI,QAAQ,WAAW,IAAI;EAAE,KAAK;EAAG,KAAK;CAAK,CAAC,IAAI;CAC/D,MAAM,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY;EAAE,QAAQ,OAAO;EAAQ,WAAW,QAAQ;EAAI;CAAS,CAAC;CACrG,IAAI,OAAO,OAAO,MAAM,IAAI,SAAS,OAAO,UAAU,YAAY,eAAe,OAAO,OAAO,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,KAAA,CAAS;CACzI,MAAM,UAAU,OAAO,aAAa;CACpC,MAAM,SAAS;GAAG,QAAQ,OAAO;EAAI,WAAW,QAAQ;EAAI,QAAQ,OAAO;EAAI,OAAO,OAAO;EAAO;CAAQ;CAC5G,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,OAAO,OAAO;EAChB,MAAM,QAAQ,SAAS,SAAS,MAAM,kBAAkB,KAAK,OAAO,IAAI,SAAS,KAAA,GAAW,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC,WAAW;GAAE,SAAS,OAAO;GAAI,WAAW;EAAQ,CAAC;EACjK,OAAO;GAAE,GAAG;GAAQ;EAAM;CAC5B;CACA,MAAM,QAAQ,SAAS,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,OAAO,QAAQ,OAAO,IAAI,MAAM,eAAe,KAAK,OAAO,QAAQ,SAAS,MAAM,EAAE;CAC/I,OAAO;EAAE,GAAG;EAAQ,UAAU,OAAO,YAAY;CAAK;AACxD;AAEA,IAAa,iBAAyC;;CAEpD,gBAAgB;;CAEhB,iBAAiB;AACnB"}

package/dist/assets/buttons-_GBlxAti.js

@@ -0,0 +1,2 @@
+import { r as buttonsOf } from "./buttons-YgijrprJ.js";
+export { buttonsOf };

package/dist/assets/{endpoint-BOTFMpfS.js → endpoint-Cl3cgAYl.js}

@@ -118,7 +118,8 @@ async function createHyperEndpoint(seed, options = {}) {
 	const keyPair = DHT.keyPair(Buffer.from(seed));
 	const node = new DHT({
 		...options,
-		keyPair
+		keyPair,
+		ephemeral: true
 	});
 	const channels = /* @__PURE__ */ new Set();
 	let stopped = false;
@@ -330,4 +331,4 @@ async function createHyperEndpoint(seed, options = {}) {
 //#endregion
 export { MAX_FRAME, createHyperEndpoint };
 
-//# sourceMappingURL=endpoint-BOTFMpfS.js.map
+//# sourceMappingURL=endpoint-Cl3cgAYl.js.map

package/dist/assets/endpoint-Cl3cgAYl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-Cl3cgAYl.js","names":[],"sources":["../../../../native/transports/hyperdht/redial.mjs","../../../../native/transports/hyperdht/endpoint.mjs"],"sourcesContent":["/**\n * How long a HyperDHT dial whose stream opened may go without the contact's preface before it is dialled again.\n *\n * The first connection a freshly started process makes sometimes opens (the handshake went through the DHT and the\n * stream is connected to the right address) and then carries nothing: the contact never sees it, and UDX gives up\n * only after 13 s. A connection made again at once goes through in milliseconds. Found as a chat moved to HyperDHT\n * right after the contact's app restarted taking about 28 s in CI (the move's 8 s, then its 20 s retry), 1 run in 6;\n * reproduced with hyperdht alone under load (bug hunt r11h). On loopback the preface comes within milliseconds of\n * the stream opening, one round trip on the internet.\n */\nexport const PREFACE_WAIT_MS = 2000\n\n/**\n * The longest a stream that opened waits for the preface on a slow path: the 8 s a chat's move gives its dial. Past\n * it nobody is waiting for the dial made again, and UDX gives a silent stream up at 13 s anyway.\n */\nexport const PREFACE_MAX_WAIT_MS = 8000\n\n/**\n * How many of the stream's smoothed round trips the preface may take. A contact that waits for our first packet\n * before its side of the stream connects (we are behind a firewall) writes its preface one round trip after our\n * stream opened; a lost packet adds a retransmission timeout (at least one round trip more). Three keep a slow path's\n * preface from being dialled again for nothing (a fixed 2 s on a 3 s path made three dials) and leave every path\n * under 667 ms on the 2 s.\n */\nexport const RTT_FACTOR = 3\n\n/**\n * Before the stream has its first RTT sample, how many times the dial's own opening (from the dial to the stream\n * open) the preface may take. The opening is the DHT lookup plus the handshake through a DHT node, so it took at\n * least two round trips of the path, and the preface comes one round trip after the stream opened: once covers it\n * (on a 3 s path the first sample comes only 3 s after the stream opened, past the 2 s). It is not more because a\n * stalled stream never gets a sample, and its opening is mostly the lookup (1-3 s on the public DHT even for a near\n * contact): twice a 2.5 s opening would dial again only 7.5 s after the dial, past the move's 8 s once the second\n * dial's own opening is added. A dial that opened in milliseconds (loopback, a near contact) stays on the 2 s.\n */\nexport const OPENING_FACTOR = 1\n\n/**\n * The preface wait for a stream whose smoothed RTT is `rtt` ms and whose dial took `opening` ms to open: three round\n * trips once there is a sample, the opening itself before, between `floor` and `ceiling`.\n */\nexport function prefaceWait(rtt, opening = 0, floor = PREFACE_WAIT_MS, ceiling = PREFACE_MAX_WAIT_MS) {\n  const wait = rtt > 0 ? RTT_FACTOR * rtt : OPENING_FACTOR * (opening || 0)\n  return Math.min(ceiling, Math.max(floor, wait))\n}\n\n/**\n * At most this many dials for one `connect`: the first, and two more if they stalled, 2 s apart, all within the 8 s a\n * chat's move gives its dial. Under load a dial made again stalled too about once in 20 (bug hunt r11h).\n */\nexport const MAX_DIALS = 3\n\n/**\n * Dials with `dialOnce` until one brings the contact's preface. `dialOnce()` starts a connection and returns\n * `{ opened, ready, close }`: `opened` resolves true once the stream is open (the handshake is done), `ready` with the\n * bound channel once the contact's preface came, and `close()` drops it; `rtt()`, if given, is the stream's smoothed\n * RTT in ms so far, 0 before its first sample (UDX's `rawStream.rtt`). A dial that opened and brought no preface\n * within `waitMs`, or longer on a slow path (`prefaceWait`, at most `maxWaitMs`), is closed and made again, up to\n * `maxDials` in all. The RTT is read again whenever the wait would end, so a sample taken after the stream opened\n * counts. A dial that fails before it opened (the contact not found, refused) fails the whole connect at once, as\n * before: there is nothing to wait for.\n */\nexport function redial(dialOnce, { waitMs = PREFACE_WAIT_MS, maxWaitMs = PREFACE_MAX_WAIT_MS, maxDials = MAX_DIALS } = {}) {\n  return new Promise((resolve, reject) => {\n    let settled = false\n    let dials = 0\n    const attempt = () => {\n      dials++\n      const dialledAt = Date.now()\n      const dial = dialOnce()\n      let timer = null\n      let stalled = false\n      dial.opened.then(open => {\n        if (!open || settled) return\n        const openedAt = Date.now()\n        const check = () => {\n          if (settled) return\n          const left = openedAt + prefaceWait(dial.rtt?.(), openedAt - dialledAt, waitMs, maxWaitMs) - Date.now()\n          if (left > 0) { timer = setTimeout(check, left); return }\n          if (dials >= maxDials) return\n          stalled = true\n          dial.close()\n          attempt()\n        }\n        timer = setTimeout(check, waitMs)\n      }, () => {})\n      dial.ready.then(bound => {\n        clearTimeout(timer)\n        if (settled || stalled) { bound.channel.close(); return }\n        settled = true\n        resolve(bound)\n      }, error => {\n        clearTimeout(timer)\n        // A dial closed here for stalling ends as closed: the next one carries the connect.\n        if (settled || stalled) return\n        settled = true\n        reject(error)\n      })\n    }\n    attempt()\n  })\n}\n","import DHT from 'hyperdht'\nimport { redial } from './redial.mjs'\n\nexport const MAX_FRAME = 60 * 1024\n/** The top bit of a frame's length word: the frame is a binary message, not UTF-8 text (WISP 103). */\nconst BINARY = 0x80000000\nconst PREFACE = 'ghostly/paired-chat/1'\n/** How long a closing channel waits for what it sent last to go out before the stream is destroyed anyway. */\nconst CLOSE_FLUSH_MS = 300\n/**\n * Bytes a channel may hold before `send` throws: above what every sender here lets itself queue (the CLI's 1 MiB high\n * water mark and an app's quarter above it; the Desktop page's send budget over the sidecar's `SEND_ROOM`), so it\n * trips only for one that ignores its own line.\n */\nconst MAX_BUFFERED = 2 * 1024 * 1024\n/**\n * `drained()` resolves once a channel holds no more than this: no more than the sidecar's `SEND_ROOM`, so its wait for\n * room never spins on a `drained()` that resolves at once.\n */\nconst DRAINED_AT = 64 * 1024\n/**\n * How often a wait in `drained()` looks again. Each stream says `drain` only once its own queue is empty, which on a fast\n * link comes first; on a slow one this finds the queue at `DRAINED_AT` before it runs dry.\n */\nconst DRAIN_POLL_MS = 10\n\n/**\n * What a connection's stream still holds: secret-stream's queue and the UDX stream's under it. Both are streamx\n * streams, which count it in `_writableState.buffered` (hyperdht is pinned; hyperdhtEndpointBuffered.test.ts reads it).\n * secret-stream has no `writableLength`: read from there, it was always 0.\n */\nfunction held(socket) {\n  return (socket._writableState?.buffered ?? 0) + (socket.rawStream?._writableState?.buffered ?? 0)\n}\n\n/** Native UDP + NoiseSecretStream. The binding comes from the authenticated\n * stream itself, never from an application frame supplied by the other peer. */\nexport async function createHyperEndpoint(seed, options = {}) {\n  if (!(seed instanceof Uint8Array) || seed.length !== 32) throw new Error('Invalid HyperDHT seed')\n  const keyPair = DHT.keyPair(Buffer.from(seed))\n  // A chat's listener is a DHT client for good: an adaptive node turns persistent after ~20 min wherever its UDP port is\n  // reachable, and then joins the routing table and keeps strangers' records and values. Ephemeral, it still listens\n  // (announced through other nodes) and holepunches.\n  const node = new DHT({ ...options, keyPair, ephemeral: true })\n  const channels = new Set()\n  let stopped = false\n  let incomingHandler = null\n  const waiting = []\n  const descriptor = { publicKey: keyPair.publicKey.toString('hex') }\n\n  /** `onChannel`: hears the channel as soon as it counts against the limit (a dial that stalls is dropped from it). */\n  async function attach(socket, onChannel) {\n    if (stopped || channels.size >= 2) { socket.destroy(); throw new Error('Native connection limit reached') }\n    let reader = null\n    let closeHandler = null\n    let closed = false\n    let ending = null\n    let pending = []\n    let buffer = Buffer.alloc(0)\n    let preface = false\n    let resolveOpen, rejectOpen\n    const ready = new Promise((resolve, reject) => { resolveOpen = resolve; rejectOpen = reject })\n    const timer = setTimeout(() => { socket.destroy(new Error('HyperDHT handshake timed out')) }, 20000)\n    const channel = {\n      // It carries binary messages (WISP 100 § Text and binary messages): a capability that needs them may be offered.\n      binary: true,\n      get bufferedAmount() { return held(socket) },\n      get onMessage() { return reader },\n      set onMessage(value) { reader = value; if (value) for (const text of pending.splice(0)) value(text) },\n      get onClose() { return closeHandler },\n      set onClose(value) { closeHandler = value; if (closed) value?.() },\n      send(data) {\n        const binary = data instanceof Uint8Array\n        if (closed || !(binary || typeof data === 'string') || !data.length || (binary ? data.length : Buffer.byteLength(data)) > MAX_FRAME || this.bufferedAmount > MAX_BUFFERED)\n          throw new Error('Native channel is closed or exceeds its frame budget')\n        const payload = binary ? Buffer.from(data.buffer, data.byteOffset, data.byteLength) : Buffer.from(data)\n        const header = Buffer.alloc(4); header.writeUInt32BE((binary ? BINARY : 0) + payload.length)\n        socket.write(Buffer.concat([header, payload]))\n      },\n      drained() {\n        if (this.bufferedAmount <= DRAINED_AT) return Promise.resolve()\n        if (closed) return Promise.reject(new Error('Native channel closed'))\n        return new Promise((resolve, reject) => {\n          const raw = socket.rawStream\n          const check = () => { if (this.bufferedAmount <= DRAINED_AT) finish(resolve) }\n          const gone = () => finish(() => reject(new Error('Native channel closed')))\n          const poll = setInterval(check, DRAIN_POLL_MS)\n          poll.unref?.()\n          function finish(settle) {\n            clearInterval(poll); socket.off('drain', check); raw?.off('drain', check); socket.off('close', gone); settle()\n          }\n          socket.on('drain', check); raw?.on('drain', check); socket.once('close', gone)\n        })\n      },\n      // What was sent last (a goodbye, as an app stops) goes out before the stream ends: destroyed at once, it was\n      // dropped unsent. A contact that never finishes the stream has CLOSE_FLUSH_MS.\n      close() {\n        if (closed || ending) return ending ?? Promise.resolve()\n        ending = new Promise(resolve => { socket.once('close', resolve) })\n        const timer = setTimeout(() => socket.destroy(), CLOSE_FLUSH_MS)\n        timer.unref?.()\n        socket.end()\n        return ending\n      },\n    }\n    channels.add(channel)\n    onChannel?.(channel)\n    socket.on('error', error => rejectOpen(error))\n    // The contact ended its side (its channel closed): this one ends too, so the stream closes now, not on its timer.\n    socket.on('end', () => socket.end())\n    socket.on('close', () => {\n      closed = true; pending = []; clearTimeout(timer); channels.delete(channel)\n      rejectOpen(new Error('Native channel closed')); closeHandler?.()\n    })\n    const opened = () => {\n      if (socket.handshakeHash?.length !== 64 || socket.publicKey?.length !== 32 || socket.remotePublicKey?.length !== 32) {\n        socket.destroy(new Error('Noise session binding unavailable')); return\n      }\n      channel.send(PREFACE)\n    }\n    socket.on('data', chunk => {\n      // Secretstream chunks are bounded by its record layer. Process all frames\n      // before retaining a partial one; never allocate based on an unchecked size.\n      buffer = Buffer.concat([buffer, chunk])\n      while (buffer.length >= 4) {\n        const word = buffer.readUInt32BE(0)\n        const binary = word >= BINARY, length = word % BINARY\n        // A binary frame before the preface is another protocol.\n        if (length === 0 || length > MAX_FRAME || (binary && !preface)) { socket.destroy(new Error('Invalid frame length')); return }\n        if (buffer.length < 4 + length) break\n        let text\n        if (binary) text = new Uint8Array(buffer.subarray(4, 4 + length))\n        else {\n          try { text = new TextDecoder('utf-8', { fatal: true }).decode(buffer.subarray(4, 4 + length)) }\n          catch { socket.destroy(new Error('Invalid UTF-8 frame')); return }\n        }\n        buffer = buffer.subarray(4 + length)\n        if (!preface) {\n          if (text !== PREFACE) { socket.destroy(new Error('Unexpected application protocol')); return }\n          preface = true; clearTimeout(timer)\n          resolveOpen({ channel, binding: { transport: 'hyperdht/1', context: socket.handshakeHash.toString('hex'),\n            identities: [socket.publicKey.toString('hex'), socket.remotePublicKey.toString('hex')].sort() } })\n        } else if (reader) reader(text)\n        else if (pending.length < 64) pending.push(text)\n        else { socket.destroy(new Error('Receive queue exceeded')); return }\n      }\n    })\n    void socket.opened.then(ok => { if (ok) opened(); else rejectOpen(new Error('Noise handshake failed')) })\n    return ready\n  }\n\n  const server = node.createServer(socket => {\n    void attach(socket).then(bound => {\n      if (stopped) bound.channel.close()\n      else if (incomingHandler) incomingHandler(bound)\n      else waiting.push(bound)\n    }).catch(() => {})\n  })\n  try { await server.listen(keyPair) }\n  catch (error) { await node.destroy(); throw error }\n  return {\n    transport: 'hyperdht/1', descriptor, onDescriptor: null,\n    get onConnection() { return incomingHandler },\n    set onConnection(value) { incomingHandler = value; if (value) for (const bound of waiting.splice(0)) value(bound) },\n    async connect(address) {\n      if (stopped || !address || !/^[a-f0-9]{64}$/.test(address.publicKey)) throw new Error('Invalid HyperDHT endpoint')\n      const remote = Buffer.from(address.publicKey, 'hex')\n      // A dial whose stream opened and carried nothing is made again (`redial.mjs`): it is dropped from the limit at\n      // once, so the next one has its place even while another channel is live. The wait follows the stream's RTT.\n      return redial(() => {\n        const socket = node.connect(remote, { keyPair })\n        let counted = null\n        const ready = attach(socket, channel => { counted = channel })\n        return { opened: socket.opened, ready, rtt: () => socket.rawStream?.rtt ?? 0,\n          close() { if (counted) channels.delete(counted); socket.destroy() } }\n      })\n    },\n    // The channels end first (their last frames out, CLOSE_FLUSH_MS at most): the node's socket goes with it.\n    async close() { stopped = true; const ended = [...channels].map(channel => channel.close()); waiting.length = 0; await Promise.all(ended); await server.close(); await node.destroy() },\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAUA,IAAa,kBAAkB;;;;;AAM/B,IAAa,sBAAsB;;;;;AA0BnC,SAAgB,YAAY,KAAK,UAAU,GAAG,QAAQ,iBAAiB,UAAU,qBAAqB;CACpG,MAAM,OAAO,MAAM,IAAA,IAAiB,MAAA,KAAwB,WAAW;CACvE,OAAO,KAAK,IAAI,SAAS,KAAK,IAAI,OAAO,IAAI,CAAC;AAChD;;;;;;;;;;;AAkBA,SAAgB,OAAO,UAAU,EAAE,SAAS,iBAAiB,YAAY,qBAAqB,WAAA,MAAyB,CAAC,GAAG;CACzH,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI,UAAU;EACd,IAAI,QAAQ;EACZ,MAAM,gBAAgB;GACpB;GACA,MAAM,YAAY,KAAK,IAAI;GAC3B,MAAM,OAAO,SAAS;GACtB,IAAI,QAAQ;GACZ,IAAI,UAAU;GACd,KAAK,OAAO,MAAK,SAAQ;IACvB,IAAI,CAAC,QAAQ,SAAS;IACtB,MAAM,WAAW,KAAK,IAAI;IAC1B,MAAM,cAAc;KAClB,IAAI,SAAS;KACb,MAAM,OAAO,WAAW,YAAY,KAAK,MAAM,GAAG,WAAW,WAAW,QAAQ,SAAS,IAAI,KAAK,IAAI;KACtG,IAAI,OAAO,GAAG;MAAE,QAAQ,WAAW,OAAO,IAAI;MAAG;KAAO;KACxD,IAAI,SAAS,UAAU;KACvB,UAAU;KACV,KAAK,MAAM;KACX,QAAQ;IACV;IACA,QAAQ,WAAW,OAAO,MAAM;GAClC,SAAS,CAAC,CAAC;GACX,KAAK,MAAM,MAAK,UAAS;IACvB,aAAa,KAAK;IAClB,IAAI,WAAW,SAAS;KAAE,MAAM,QAAQ,MAAM;KAAG;IAAO;IACxD,UAAU;IACV,QAAQ,KAAK;GACf,IAAG,UAAS;IACV,aAAa,KAAK;IAElB,IAAI,WAAW,SAAS;IACxB,UAAU;IACV,OAAO,KAAK;GACd,CAAC;EACH;EACA,QAAQ;CACV,CAAC;AACH;;;ACnGA,IAAa,YAAY;;AAEzB,IAAM,SAAS;AACf,IAAM,UAAU;;AAEhB,IAAM,iBAAiB;;;;;;AAMvB,IAAM,eAAe;;;;;AAKrB,IAAM,aAAa;;;;;AAKnB,IAAM,gBAAgB;;;;;;AAOtB,SAAS,KAAK,QAAQ;CACpB,QAAQ,OAAO,gBAAgB,YAAY,MAAM,OAAO,WAAW,gBAAgB,YAAY;AACjG;;;AAIA,eAAsB,oBAAoB,MAAM,UAAU,CAAC,GAAG;CAC5D,IAAI,EAAE,gBAAgB,eAAe,KAAK,WAAW,IAAI,MAAM,IAAI,MAAM,uBAAuB;CAChG,MAAM,UAAU,IAAI,QAAQ,OAAO,KAAK,IAAI,CAAC;CAI7C,MAAM,OAAO,IAAI,IAAI;EAAE,GAAG;EAAS;EAAS,WAAW;CAAK,CAAC;CAC7D,MAAM,2BAAW,IAAI,IAAI;CACzB,IAAI,UAAU;CACd,IAAI,kBAAkB;CACtB,MAAM,UAAU,CAAC;CACjB,MAAM,aAAa,EAAE,WAAW,QAAQ,UAAU,SAAS,KAAK,EAAE;;CAGlE,eAAe,OAAO,QAAQ,WAAW;EACvC,IAAI,WAAW,SAAS,QAAQ,GAAG;GAAE,OAAO,QAAQ;GAAG,MAAM,IAAI,MAAM,iCAAiC;EAAE;EAC1G,IAAI,SAAS;EACb,IAAI,eAAe;EACnB,IAAI,SAAS;EACb,IAAI,SAAS;EACb,IAAI,UAAU,CAAC;EACf,IAAI,SAAS,OAAO,MAAM,CAAC;EAC3B,IAAI,UAAU;EACd,IAAI,aAAa;EACjB,MAAM,QAAQ,IAAI,SAAS,SAAS,WAAW;GAAE,cAAc;GAAS,aAAa;EAAO,CAAC;EAC7F,MAAM,QAAQ,iBAAiB;GAAE,OAAO,wBAAQ,IAAI,MAAM,8BAA8B,CAAC;EAAE,GAAG,GAAK;EACnG,MAAM,UAAU;GAEd,QAAQ;GACR,IAAI,iBAAiB;IAAE,OAAO,KAAK,MAAM;GAAE;GAC3C,IAAI,YAAY;IAAE,OAAO;GAAO;GAChC,IAAI,UAAU,OAAO;IAAE,SAAS;IAAO,IAAI,OAAO,KAAK,MAAM,QAAQ,QAAQ,OAAO,CAAC,GAAG,MAAM,IAAI;GAAE;GACpG,IAAI,UAAU;IAAE,OAAO;GAAa;GACpC,IAAI,QAAQ,OAAO;IAAE,eAAe;IAAO,IAAI,QAAQ,QAAQ;GAAE;GACjE,KAAK,MAAM;IACT,MAAM,SAAS,gBAAgB;IAC/B,IAAI,UAAU,EAAE,UAAU,OAAO,SAAS,aAAa,CAAC,KAAK,WAAW,SAAS,KAAK,SAAS,OAAO,WAAW,IAAI,KAAA,SAAkB,KAAK,iBAAiB,cAC3J,MAAM,IAAI,MAAM,sDAAsD;IACxE,MAAM,UAAU,SAAS,OAAO,KAAK,KAAK,QAAQ,KAAK,YAAY,KAAK,UAAU,IAAI,OAAO,KAAK,IAAI;IACtG,MAAM,SAAS,OAAO,MAAM,CAAC;IAAG,OAAO,eAAe,SAAS,SAAS,KAAK,QAAQ,MAAM;IAC3F,OAAO,MAAM,OAAO,OAAO,CAAC,QAAQ,OAAO,CAAC,CAAC;GAC/C;GACA,UAAU;IACR,IAAI,KAAK,kBAAkB,YAAY,OAAO,QAAQ,QAAQ;IAC9D,IAAI,QAAQ,OAAO,QAAQ,uBAAO,IAAI,MAAM,uBAAuB,CAAC;IACpE,OAAO,IAAI,SAAS,SAAS,WAAW;KACtC,MAAM,MAAM,OAAO;KACnB,MAAM,cAAc;MAAE,IAAI,KAAK,kBAAkB,YAAY,OAAO,OAAO;KAAE;KAC7E,MAAM,aAAa,aAAa,uBAAO,IAAI,MAAM,uBAAuB,CAAC,CAAC;KAC1E,MAAM,OAAO,YAAY,OAAO,aAAa;KAC7C,KAAK,QAAQ;KACb,SAAS,OAAO,QAAQ;MACtB,cAAc,IAAI;MAAG,OAAO,IAAI,SAAS,KAAK;MAAG,KAAK,IAAI,SAAS,KAAK;MAAG,OAAO,IAAI,SAAS,IAAI;MAAG,OAAO;KAC/G;KACA,OAAO,GAAG,SAAS,KAAK;KAAG,KAAK,GAAG,SAAS,KAAK;KAAG,OAAO,KAAK,SAAS,IAAI;IAC/E,CAAC;GACH;GAGA,QAAQ;IACN,IAAI,UAAU,QAAQ,OAAO,UAAU,QAAQ,QAAQ;IACvD,SAAS,IAAI,SAAQ,YAAW;KAAE,OAAO,KAAK,SAAS,OAAO;IAAE,CAAC;IAEjE,iBAD+B,OAAO,QAAQ,GAAG,cAC7C,CAAC,CAAC,QAAQ;IACd,OAAO,IAAI;IACX,OAAO;GACT;EACF;EACA,SAAS,IAAI,OAAO;EACpB,YAAY,OAAO;EACnB,OAAO,GAAG,UAAS,UAAS,WAAW,KAAK,CAAC;EAE7C,OAAO,GAAG,aAAa,OAAO,IAAI,CAAC;EACnC,OAAO,GAAG,eAAe;GACvB,SAAS;GAAM,UAAU,CAAC;GAAG,aAAa,KAAK;GAAG,SAAS,OAAO,OAAO;GACzE,2BAAW,IAAI,MAAM,uBAAuB,CAAC;GAAG,eAAe;EACjE,CAAC;EACD,MAAM,eAAe;GACnB,IAAI,OAAO,eAAe,WAAW,MAAM,OAAO,WAAW,WAAW,MAAM,OAAO,iBAAiB,WAAW,IAAI;IACnH,OAAO,wBAAQ,IAAI,MAAM,mCAAmC,CAAC;IAAG;GAClE;GACA,QAAQ,KAAK,OAAO;EACtB;EACA,OAAO,GAAG,SAAQ,UAAS;GAGzB,SAAS,OAAO,OAAO,CAAC,QAAQ,KAAK,CAAC;GACtC,OAAO,OAAO,UAAU,GAAG;IACzB,MAAM,OAAO,OAAO,aAAa,CAAC;IAClC,MAAM,SAAS,QAAQ,QAAQ,SAAS,OAAO;IAE/C,IAAI,WAAW,KAAK,SAAA,SAAuB,UAAU,CAAC,SAAU;KAAE,OAAO,wBAAQ,IAAI,MAAM,sBAAsB,CAAC;KAAG;IAAO;IAC5H,IAAI,OAAO,SAAS,IAAI,QAAQ;IAChC,IAAI;IACJ,IAAI,QAAQ,OAAO,IAAI,WAAW,OAAO,SAAS,GAAG,IAAI,MAAM,CAAC;SAE9D,IAAI;KAAE,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,SAAS,GAAG,IAAI,MAAM,CAAC;IAAE,QACxF;KAAE,OAAO,wBAAQ,IAAI,MAAM,qBAAqB,CAAC;KAAG;IAAO;IAEnE,SAAS,OAAO,SAAS,IAAI,MAAM;IACnC,IAAI,CAAC,SAAS;KACZ,IAAI,SAAS,SAAS;MAAE,OAAO,wBAAQ,IAAI,MAAM,iCAAiC,CAAC;MAAG;KAAO;KAC7F,UAAU;KAAM,aAAa,KAAK;KAClC,YAAY;MAAE;MAAS,SAAS;OAAE,WAAW;OAAc,SAAS,OAAO,cAAc,SAAS,KAAK;OACrG,YAAY,CAAC,OAAO,UAAU,SAAS,KAAK,GAAG,OAAO,gBAAgB,SAAS,KAAK,CAAC,CAAC,CAAC,KAAK;MAAE;KAAE,CAAC;IACrG,OAAO,IAAI,QAAQ,OAAO,IAAI;SACzB,IAAI,QAAQ,SAAS,IAAI,QAAQ,KAAK,IAAI;SAC1C;KAAE,OAAO,wBAAQ,IAAI,MAAM,wBAAwB,CAAC;KAAG;IAAO;GACrE;EACF,CAAC;EACD,OAAY,OAAO,MAAK,OAAM;GAAE,IAAI,IAAI,OAAO;QAAQ,2BAAW,IAAI,MAAM,wBAAwB,CAAC;EAAE,CAAC;EACxG,OAAO;CACT;CAEA,MAAM,SAAS,KAAK,cAAa,WAAU;EACzC,OAAY,MAAM,CAAC,CAAC,MAAK,UAAS;GAChC,IAAI,SAAS,MAAM,QAAQ,MAAM;QAC5B,IAAI,iBAAiB,gBAAgB,KAAK;QAC1C,QAAQ,KAAK,KAAK;EACzB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;CACnB,CAAC;CACD,IAAI;EAAE,MAAM,OAAO,OAAO,OAAO;CAAE,SAC5B,OAAO;EAAE,MAAM,KAAK,QAAQ;EAAG,MAAM;CAAM;CAClD,OAAO;EACL,WAAW;EAAc;EAAY,cAAc;EACnD,IAAI,eAAe;GAAE,OAAO;EAAgB;EAC5C,IAAI,aAAa,OAAO;GAAE,kBAAkB;GAAO,IAAI,OAAO,KAAK,MAAM,SAAS,QAAQ,OAAO,CAAC,GAAG,MAAM,KAAK;EAAE;EAClH,MAAM,QAAQ,SAAS;GACrB,IAAI,WAAW,CAAC,WAAW,CAAC,iBAAiB,KAAK,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,2BAA2B;GACjH,MAAM,SAAS,OAAO,KAAK,QAAQ,WAAW,KAAK;GAGnD,OAAO,aAAa;IAClB,MAAM,SAAS,KAAK,QAAQ,QAAQ,EAAE,QAAQ,CAAC;IAC/C,IAAI,UAAU;IACd,MAAM,QAAQ,OAAO,SAAQ,YAAW;KAAE,UAAU;IAAQ,CAAC;IAC7D,OAAO;KAAE,QAAQ,OAAO;KAAQ;KAAO,WAAW,OAAO,WAAW,OAAO;KACzE,QAAQ;MAAE,IAAI,SAAS,SAAS,OAAO,OAAO;MAAG,OAAO,QAAQ;KAAE;IAAE;GACxE,CAAC;EACH;EAEA,MAAM,QAAQ;GAAE,UAAU;GAAM,MAAM,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAI,YAAW,QAAQ,MAAM,CAAC;GAAG,QAAQ,SAAS;GAAG,MAAM,QAAQ,IAAI,KAAK;GAAG,MAAM,OAAO,MAAM;GAAG,MAAM,KAAK,QAAQ;EAAE;CACxL;AACF"}