@intentic/keyring 1.344.0 → 1.345.0

package/dist/passwords/capture.js

@@ -0,0 +1,306 @@
+import { entryNameFor, findCaptureTarget, originKey, rememberSwitchFor, REMEMBER_NOTHING, rulesForOrigin, titleForOrigin } from "@intentic/sandbox-contract/policy/keyring-origins";
+import { seal, unseal } from "@intentic/sandbox-contract/keyring-seal";
+import { NOT_SET_UP, refuse } from "./access.js";
+import { candidateOf, entryInfoOf, liveEntries, settingsOf, titleOf, withEntry } from "./entries.js";
+import { HISTORY_MAX, PENDING_CAPTURES_MAX, UNDO_MAX, VALUE_MAX_BYTES } from "../vault.js";
+const RELAYED_SOURCES = new Set(["phone", "terminal"]);
+const BATCH_ONLY = new Set(["import", "agent"]);
+const UNVERIFIED_SOURCES = new Set(["browser", "askpass", "app", "phone", "terminal"]);
+const RATE_PER_MINUTE = 60;
+export const UNDO_WINDOW_MS = 10 * 60_000;
+const skipped = (doc) => ({ doc, outcome: "skipped" });
+const withUndo = (doc, record, now) => ({
+    ...doc,
+    undo: [...(doc.undo ?? []).filter((kept) => now - kept.doneAt < UNDO_WINDOW_MS && !(kept.name === record.name && kept.at === record.at)), record].slice(-UNDO_MAX),
+});
+const capturedOf = (item) => ({ source: item.source, via: item.via, at: item.at });
+const capturedFields = (item, now) => {
+    const fields = { captured: capturedOf(item), fresh: true, updatedAt: now };
+    return UNVERIFIED_SOURCES.has(item.source) ? { ...fields, unverified: true } : fields;
+};
+const withoutFlags = (entry) => {
+    const { unverified: _unverified, failed: _failed, ...rest } = entry;
+    return rest;
+};
+const historyOf = (entry, value) => {
+    const item = { value, at: entry.updatedAt };
+    if (entry.captured !== undefined) {
+        item.captured = entry.captured;
+    }
+    return item;
+};
+const updatedEntry = (entry, item, value, revision, now) => {
+    const replace = item.failed === true || entry.failed === true;
+    const earlier = entry.value === undefined || replace ? (entry.history ?? []) : [historyOf(entry, entry.value), ...(entry.history ?? [])];
+    const username = entry.rules.username ?? item.username;
+    const rules = username === undefined ? entry.rules : { ...entry.rules, username };
+    return { ...withoutFlags(entry), rules, value, history: earlier.slice(0, HISTORY_MAX), revision, ...capturedFields(item, now) };
+};
+const newEntry = (doc, item, value, now) => {
+    const title = titleForOrigin(item.origin, item.title);
+    const username = item.username?.trim() === "" ? undefined : item.username;
+    const taken = new Set(liveEntries(doc).map((entry) => entry.name));
+    const name = entryNameFor(title, username, (candidate) => taken.has(candidate));
+    const placed = rulesForOrigin(item.origin);
+    const rules = {
+        kind: item.kind,
+        programs: [...placed.programs],
+        packages: [...placed.packages],
+        hosts: [...placed.hosts],
+        askpass: [...placed.askpass],
+        anyField: false,
+        askpassRememberMinutes: 0,
+        title,
+    };
+    if (username !== undefined) {
+        rules.username = username;
+    }
+    return {
+        name,
+        rules,
+        source: "keyring",
+        value,
+        shares: [],
+        createdAt: now,
+        revision: doc.revision + 1,
+        ...capturedFields(item, now),
+    };
+};
+export const applyCapture = (doc, item, value, facts) => {
+    const settings = settingsOf(doc);
+    const toggle = rememberSwitchFor(item.source);
+    if ((facts.deliberate !== true && toggle !== undefined && !settings.remember[toggle]) || settings.neverSave.some((origin) => originKey(origin) === originKey(item.origin))) {
+        return skipped(doc);
+    }
+    const live = liveEntries(doc);
+    const target = findCaptureTarget(live.map((entry) => candidateOf(entryInfoOf(entry))), item.origin, item.username);
+    const entry = target === undefined ? undefined : doc.entries[target.name];
+    if (entry === undefined) {
+        const made = newEntry(doc, item, value, facts.now);
+        return { doc: withUndo(withEntry(doc, made), { name: made.name, at: item.at, doneAt: facts.now }, facts.now), outcome: "saved", name: made.name, title: made.rules.title };
+    }
+    const title = titleOf(entryInfoOf(entry));
+    if (entry.backend !== undefined) {
+        return { doc, outcome: "skipped", name: entry.name, title };
+    }
+    if (entry.value === value) {
+        const proved = item.source === "git" && (entry.unverified === true || entry.failed === true);
+        return { doc: proved ? withEntry(doc, withoutFlags(entry)) : doc, outcome: "unchanged", name: entry.name, title };
+    }
+    const changed = updatedEntry(entry, item, value, doc.revision + 1, facts.now);
+    const settled = item.source === "git" ? withoutFlags(changed) : changed;
+    return { doc: withUndo(withEntry(doc, settled), { name: entry.name, at: item.at, doneAt: facts.now, before: entry }, facts.now), outcome: "updated", name: entry.name, title };
+};
+const undoCapture = (doc, name, at, now) => {
+    const record = (doc.undo ?? []).find((kept) => kept.name === name && kept.at === at && now - kept.doneAt <= UNDO_WINDOW_MS);
+    const entry = doc.entries[name];
+    if (record === undefined || entry === undefined) {
+        return undefined;
+    }
+    const revision = doc.revision + 1;
+    const back = record.before === undefined
+        ? { name, rules: entry.rules, source: entry.source, shares: [], createdAt: entry.createdAt, updatedAt: now, revision, deleted: true }
+        : { ...record.before, updatedAt: now, revision };
+    return { ...withEntry(doc, back), undo: (doc.undo ?? []).filter((kept) => kept !== record) };
+};
+export const openedValue = (doc, item) => {
+    let value;
+    try {
+        value = unseal(doc.inbox, item.sealed, { kind: "capture", via: item.via, at: item.at });
+    }
+    catch {
+        return refuse("bad-grant", "The value was not sealed to this keyring's inbox for this capture.");
+    }
+    return Buffer.byteLength(value, "utf8") > VALUE_MAX_BYTES ? refuse("bad-grant", `A value holds at most ${String(VALUE_MAX_BYTES / 1024)} KiB.`) : { ok: true, value };
+};
+const answerOf = (applied) => {
+    const answer = { ok: true, outcome: applied.outcome };
+    if (applied.name !== undefined) {
+        answer.name = applied.name;
+    }
+    if (applied.title !== undefined) {
+        answer.title = applied.title;
+    }
+    return answer;
+};
+export class Captures {
+    vault;
+    #times = [];
+    constructor(vault) {
+        this.vault = vault;
+    }
+    #limited(now) {
+        while (this.#times.length > 0 && now - (this.#times[0] ?? now) >= 60_000) {
+            this.#times.shift();
+        }
+        if (this.#times.length >= RATE_PER_MINUTE) {
+            return true;
+        }
+        this.#times.push(now);
+        return false;
+    }
+    async capture(asked, sandbox) {
+        const file = this.vault.file();
+        if (file === undefined) {
+            return refuse("locked", NOT_SET_UP);
+        }
+        if (sandbox !== undefined && !RELAYED_SOURCES.has(asked.source)) {
+            return refuse("bad-grant", `A sandbox sends captures only from a phone or a terminal, not as ${asked.source}.`);
+        }
+        if (sandbox === undefined && BATCH_ONLY.has(asked.source)) {
+            return refuse("bad-grant", `A capture from ${asked.source} comes as an import or an agent's need, not on its own.`);
+        }
+        const now = this.vault.deps.now();
+        if (this.#limited(now)) {
+            return refuse("busy", "Too many passwords arrived in the last minute: the rest wait for the next.");
+        }
+        const item = asked.origin.kind === "prompt" && sandbox !== undefined ? { ...asked, origin: { ...asked.origin, sandbox } } : asked;
+        const held = this.vault.held();
+        if (held !== undefined) {
+            return await this.#into(held, item, sandbox, false);
+        }
+        if (item.source === "manual") {
+            const opened = await this.vault.open(file, { title: `Save ${titleForOrigin(item.origin, item.title)}?`, message: "Passwords is locked: unlock it to save this password.", person: true });
+            return "ok" in opened ? opened : await this.#into(opened, item, sandbox, false);
+        }
+        const toggle = rememberSwitchFor(item.source);
+        if (toggle !== undefined && !(file.open.settings?.remember ?? REMEMBER_NOTHING)[toggle]) {
+            await this.vault.record({ op: "capture", outcome: "skipped", program: item.via, sandbox });
+            return { ok: true, outcome: "skipped" };
+        }
+        const pending = { item, receivedAt: now };
+        if (sandbox !== undefined) {
+            pending.sandbox = sandbox;
+        }
+        await this.#wait(pending);
+        return { ok: true, outcome: "pending" };
+    }
+    async #wait(pending) {
+        const file = this.vault.file();
+        if (file !== undefined) {
+            await this.vault.writeOpen({ ...file.open, pendingCaptures: [...(file.open.pendingCaptures ?? []), pending].slice(-PENDING_CAPTURES_MAX) });
+            await this.vault.record({ op: "capture", outcome: "pending", program: pending.item.via, sandbox: pending.sandbox });
+        }
+    }
+    async #into(opened, item, sandbox, deliberate) {
+        const value = openedValue(opened.doc, item);
+        if (!value.ok) {
+            return value;
+        }
+        const applied = applyCapture(opened.doc, item, value.value, { now: this.vault.deps.now(), deliberate });
+        if (applied.doc !== opened.doc) {
+            await this.vault.commit({ doc: applied.doc, key: opened.key });
+        }
+        await this.vault.record({ op: "capture", outcome: applied.outcome, secret: applied.name, program: item.via, sandbox });
+        return answerOf(applied);
+    }
+    async keep(draft, value, deliberate) {
+        const held = this.vault.held();
+        if (held !== undefined) {
+            const applied = applyCapture(held.doc, draft, value, { now: this.vault.deps.now(), deliberate });
+            if (applied.doc !== held.doc) {
+                await this.vault.commit({ doc: applied.doc, key: held.key });
+            }
+            await this.vault.record({ op: "capture", outcome: applied.outcome, secret: applied.name, program: draft.via });
+            return applied;
+        }
+        const inbox = (await this.vault.keys()).inbox;
+        if (inbox === undefined) {
+            return { outcome: "skipped" };
+        }
+        const sealed = seal(inbox, value, { kind: "capture", via: draft.via, at: draft.at });
+        const pending = { item: { ...draft, sealed }, receivedAt: this.vault.deps.now() };
+        if (deliberate) {
+            pending.deliberate = true;
+        }
+        await this.#wait(pending);
+        const title = titleForOrigin(draft.origin, draft.title);
+        const taken = new Set(this.vault.file()?.open.entries.map((entry) => entry.name));
+        return { outcome: "pending", title, name: entryNameFor(title, draft.username, (candidate) => taken.has(candidate)) };
+    }
+    takeIn(doc, pending) {
+        let next = doc;
+        const now = this.vault.deps.now();
+        for (const waiting of pending) {
+            const value = openedValue(next, waiting.item);
+            if (value.ok) {
+                next = applyCapture(next, waiting.item, value.value, { now, deliberate: waiting.deliberate }).doc;
+            }
+        }
+        return next;
+    }
+    async batch(items, from) {
+        const file = this.vault.file();
+        if (file === undefined) {
+            return refuse("locked", NOT_SET_UP);
+        }
+        const opened = await this.vault.open(file, {
+            title: `Import ${String(items.length)} passwords from ${from}?`,
+            message: `Passwords keeps each one, updating the entry for the same site and account and keeping its old value in its history. None is shared with a sandbox.`,
+            person: true,
+        });
+        if ("ok" in opened) {
+            return opened;
+        }
+        const counts = { saved: 0, updated: 0, unchanged: 0, skipped: 0 };
+        let doc = opened.doc;
+        const now = this.vault.deps.now();
+        for (const asked of items) {
+            const item = { ...asked, source: "import" };
+            const value = openedValue(doc, item);
+            const applied = value.ok ? applyCapture(doc, item, value.value, { now }) : skipped(doc);
+            doc = applied.doc;
+            counts[applied.outcome === "pending" ? "skipped" : applied.outcome]++;
+        }
+        await this.vault.commit({ doc, key: opened.key });
+        await this.vault.record({ op: "capture-batch", outcome: "done", target: from, asked: true, reason: `${String(counts.saved)} saved, ${String(counts.updated)} updated` });
+        return { ok: true, ...counts };
+    }
+    async undo(name, at) {
+        const file = this.vault.file();
+        if (file === undefined) {
+            return refuse("locked", NOT_SET_UP);
+        }
+        const opened = await this.vault.open(file, { title: `Undo saving ${name}?`, message: "Passwords is locked: unlock it to take back what it just saved.", person: false });
+        if ("ok" in opened) {
+            return opened;
+        }
+        const undone = undoCapture(opened.doc, name, at, this.vault.deps.now());
+        if (undone === undefined) {
+            return refuse("unknown", `There is nothing to undo for ${name}: an Undo lasts ten minutes.`);
+        }
+        await this.vault.commit({ doc: undone, key: opened.key });
+        await this.vault.record({ op: "undo-capture", outcome: "done", secret: name });
+        return { ok: true };
+    }
+    async seen(names) {
+        const file = this.vault.file();
+        if (file === undefined) {
+            return refuse("locked", NOT_SET_UP);
+        }
+        const looked = new Set(names);
+        const held = this.vault.held();
+        if (held === undefined) {
+            const entries = file.open.entries.map((entry) => (looked.has(entry.name) ? { ...entry, fresh: false } : entry));
+            await this.vault.writeOpen({ ...file.open, entries, pendingSeen: [...new Set([...(file.open.pendingSeen ?? []), ...names])].slice(-5000) });
+            return { ok: true };
+        }
+        const doc = seenIn(held.doc, looked);
+        if (doc !== held.doc) {
+            await this.vault.commit({ doc, key: held.key });
+        }
+        return { ok: true };
+    }
+}
+export const seenIn = (doc, names) => {
+    let next = doc;
+    for (const name of names) {
+        const entry = next.entries[name];
+        if (entry?.fresh === true) {
+            const { fresh: _fresh, ...rest } = entry;
+            next = withEntry(next, rest);
+        }
+    }
+    return next;
+};
+//# sourceMappingURL=capture.js.map

package/dist/passwords/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../src/passwords/capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AAEpL,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,yCAAyC,CAAC;AACvE,OAAO,EAAe,UAAU,EAAe,MAAM,EAAoC,MAAM,aAAa,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAErG,OAAO,EAAoB,WAAW,EAAuB,oBAAoB,EAAoB,QAAQ,EAAmB,eAAe,EAAsB,MAAM,aAAa,CAAC;AAWzL,MAAM,eAAe,GAAG,IAAI,GAAG,CAA+B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AACrF,MAAM,UAAU,GAAG,IAAI,GAAG,CAA+B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAA+B,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAGrH,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAe1C,MAAM,OAAO,GAAG,CAAC,GAAkB,EAAW,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AAE/E,MAAM,QAAQ,GAAG,CAAC,GAAkB,EAAE,MAAkB,EAAE,GAAW,EAAiB,EAAE,CAAC,CAAC;IACtF,GAAG,GAAG;IACN,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;CACrK,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,IAAkB,EAAgB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAG/G,MAAM,cAAc,GAAG,CAAC,IAAkB,EAAE,GAAW,EAAiF,EAAE;IACtI,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC3E,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1F,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAkB,EAAe,EAAE;IACrD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACpE,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAE,KAAa,EAAe,EAAE;IACjE,MAAM,IAAI,GAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IACzD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAkB,EAAE,IAAkB,EAAE,KAAa,EAAE,QAAgB,EAAE,GAAW,EAAe,EAAE;IACvH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACzI,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;IACvD,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClF,OAAO,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AACpI,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,GAAkB,EAAE,IAAkB,EAAE,KAAa,EAAE,GAAW,EAAe,EAAE;IACjG,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAe;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAC5B,QAAQ,EAAE,KAAK;QACf,sBAAsB,EAAE,CAAC;QACzB,KAAK;KACR,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC;IACD,OAAO;QACH,IAAI;QACJ,KAAK;QACL,MAAM,EAAE,SAAS;QACjB,KAAK;QACL,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;QAC1B,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC;KAC/B,CAAC;AACN,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAkB,EAAE,IAAkB,EAAE,KAAa,EAAE,KAAmB,EAAW,EAAE;IAChH,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACzK,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnH,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC/K,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAE1C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;QAC7F,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACtH,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AACnL,CAAC,CAAC;AAGF,MAAM,WAAW,GAAG,CAAC,GAAkB,EAAE,IAAY,EAAE,EAAU,EAAE,GAAW,EAA6B,EAAE;IACzG,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GACN,MAAM,CAAC,MAAM,KAAK,SAAS;QACvB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;QACrI,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACzD,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;AACjG,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAkB,EAAE,IAAuD,EAAa,EAAE;IAClH,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACD,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,WAAW,EAAE,oEAAoE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,yBAAyB,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1K,CAAC,CAAC;AAGF,MAAM,QAAQ,GAAG,CAAC,OAAa,EAAwB,EAAE;IACrD,MAAM,MAAM,GAAgD,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACnG,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC;AAUF,MAAM,OAAO,QAAQ;IAGY,KAAK;IAFzB,MAAM,GAAa,EAAE,CAAC;IAE/B,YAA6B,KAAkB;qBAAlB,KAAK;IAAgB,CAAC;IAEnD,QAAQ,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACjB,CAAC;IAID,KAAK,CAAC,OAAO,CAAC,KAAyB,EAAE,OAA2B;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,OAAO,MAAM,CAAC,WAAW,EAAE,oEAAoE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,WAAW,EAAE,kBAAkB,KAAK,CAAC,MAAM,yDAAyD,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,MAAM,EAAE,4EAA4E,CAAC,CAAC;QACxG,CAAC;QAED,MAAM,IAAI,GAAuB,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACtJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,uDAAuD,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1L,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC1D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC9B,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAuB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;YAC5I,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACxH,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAmC,EAAE,IAAwB,EAAE,OAA2B,EAAE,UAAmB;QACvH,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACxG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACvH,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAMD,KAAK,CAAC,IAAI,CAAC,KAAmB,EAAE,KAAa,EAAE,UAAmB;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YACjG,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/G,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;QAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,OAAO,GAAmB,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClG,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IACzH,CAAC;IAGD,MAAM,CAAC,GAAkB,EAAE,OAAkC;QACzD,IAAI,IAAI,GAAG,GAAG,CAAC;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;gBACX,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC;YACtG,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAID,KAAK,CAAC,KAAK,CAAC,KAAoC,EAAE,IAAY;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YACvC,KAAK,EAAE,UAAU,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,GAAG;YAC/D,OAAO,EAAE,qJAAqJ;YAC9J,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;QACH,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAuB,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxF,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACzK,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,EAAU;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,IAAI,GAAG,EAAE,OAAO,EAAE,iEAAiE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzK,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,SAAS,EAAE,gCAAgC,IAAI,8BAA8B,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAGD,KAAK,CAAC,IAAI,CAAC,KAAwB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAChH,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5I,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;CACJ;AAGD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,KAA0B,EAAiB,EAAE;IACpF,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;YACzC,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC"}

package/dist/passwords/entries.d.ts

@@ -0,0 +1,20 @@
+import { type CaptureCandidate } from "@intentic/sandbox-contract/policy/keyring-origins";
+import type { KeyringOrigin } from "@intentic/sandbox-contract/schemas/keyring";
+import type { EntryInfo, KeyringSettings } from "../protocol.js";
+import type { StoredEntry, VaultDocument } from "../vault.js";
+export declare const DEFAULT_SETTINGS: KeyringSettings;
+export declare const settingsOf: (doc: VaultDocument) => KeyringSettings;
+export declare const liveEntries: (doc: VaultDocument) => StoredEntry[];
+export declare const withEntry: (doc: VaultDocument, entry: StoredEntry) => VaultDocument;
+export declare const entryInfoOf: (entry: StoredEntry) => EntryInfo;
+export declare const candidateOf: (entry: EntryInfo) => CaptureCandidate & {
+    readonly name: string;
+};
+export declare const titleOf: (entry: EntryInfo) => string;
+export declare const placeWords: (origin: KeyringOrigin) => string;
+export declare const usedEntry: (entry: StoredEntry, now: number) => StoredEntry;
+export declare const healthOf: (entries: readonly StoredEntry[]) => Map<string, {
+    weak: boolean;
+    reused: boolean;
+}>;
+//# sourceMappingURL=entries.d.ts.map

package/dist/passwords/entries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entries.d.ts","sourceRoot":"","sources":["../../src/passwords/entries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAC5H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAK9D,eAAO,MAAM,gBAAgB,EAAE,eAAuG,CAAC;AAEvI,eAAO,MAAM,UAAU,QAAS,aAAa,KAAG,eAAmD,CAAC;AAEpG,eAAO,MAAM,WAAW,QAAS,aAAa,KAAG,WAAW,EAA0E,CAAC;AAEvI,eAAO,MAAM,SAAS,QAAS,aAAa,SAAS,WAAW,KAAG,aAA+E,CAAC;AAEnJ,eAAO,MAAM,WAAW,UAAW,WAAW,KAAG,SAqBhD,CAAC;AAGF,eAAO,MAAM,WAAW,UAAW,SAAS,KAAG,gBAAgB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAKvF,CAAC;AAEH,eAAO,MAAM,OAAO,UAAW,SAAS,KAAG,MAAmC,CAAC;AAG/E,eAAO,MAAM,UAAU,WAAY,aAAa,KAAG,MAAgC,CAAC;AAGpF,eAAO,MAAM,SAAS,UAAW,WAAW,OAAO,MAAM,KAAG,WAG3D,CAAC;AAMF,eAAO,MAAM,QAAQ,YAAa,SAAS,WAAW,EAAE,KAAG,GAAG,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAcxG,CAAC"}

package/dist/passwords/entries.js

@@ -0,0 +1,57 @@
+import { REMEMBER_NOTHING, titleForOrigin } from "@intentic/sandbox-contract/policy/keyring-origins";
+export const DEFAULT_SETTINGS = { remember: REMEMBER_NOTHING, neverSave: [], autoLockMinutes: 60, lockOnSleep: true };
+export const settingsOf = (doc) => doc.settings ?? DEFAULT_SETTINGS;
+export const liveEntries = (doc) => Object.values(doc.entries).filter((entry) => entry.deleted !== true);
+export const withEntry = (doc, entry) => ({ ...doc, entries: { ...doc.entries, [entry.name]: entry } });
+export const entryInfoOf = (entry) => {
+    const info = { name: entry.name, ...entry.rules, source: entry.source, shares: entry.shares, createdAt: entry.createdAt, updatedAt: entry.updatedAt };
+    if (entry.backend !== undefined) {
+        info.backend = entry.backend;
+    }
+    if (entry.captured !== undefined) {
+        info.captured = entry.captured;
+    }
+    if (entry.fresh === true) {
+        info.fresh = true;
+    }
+    if (entry.unverified === true) {
+        info.unverified = true;
+    }
+    if (entry.lastUsedAt !== undefined) {
+        info.lastUsedAt = entry.lastUsedAt;
+    }
+    if ((entry.history?.length ?? 0) > 0) {
+        info.versions = entry.history?.length;
+    }
+    return info;
+};
+export const candidateOf = (entry) => ({
+    name: entry.name,
+    rules: { programs: entry.programs, packages: entry.packages, hosts: entry.hosts, askpass: entry.askpass },
+    username: entry.username,
+    title: entry.title,
+});
+export const titleOf = (entry) => entry.title ?? entry.name;
+export const placeWords = (origin) => titleForOrigin(origin);
+export const usedEntry = (entry, now) => {
+    const { unverified: _unverified, failed: _failed, ...rest } = entry;
+    return { ...rest, lastUsedAt: now };
+};
+const CHARSETS = [/[a-z]/u, /[A-Z]/u, /[0-9]/u, /[^A-Za-z0-9]/u];
+const isWeak = (value) => value.length < 12 || CHARSETS.filter((set) => set.test(value)).length < 2;
+export const healthOf = (entries) => {
+    const counts = new Map();
+    for (const entry of entries) {
+        if (entry.value !== undefined) {
+            counts.set(entry.value, (counts.get(entry.value) ?? 0) + 1);
+        }
+    }
+    const health = new Map();
+    for (const entry of entries) {
+        if (entry.value !== undefined && entry.rules.kind === "password") {
+            health.set(entry.name, { weak: isWeak(entry.value), reused: (counts.get(entry.value) ?? 0) > 1 });
+        }
+    }
+    return health;
+};
+//# sourceMappingURL=entries.js.map

package/dist/passwords/entries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entries.js","sourceRoot":"","sources":["../../src/passwords/entries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAyB,MAAM,mDAAmD,CAAC;AAQ5H,MAAM,CAAC,MAAM,gBAAgB,GAAoB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAEvI,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAkB,EAAmB,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,gBAAgB,CAAC;AAEpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAkB,EAAiB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;AAEvI,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAkB,EAAE,KAAkB,EAAiB,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAEnJ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAkB,EAAa,EAAE;IACzD,MAAM,IAAI,GAAc,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IACjK,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAgB,EAAgD,EAAE,CAAC,CAAC;IAC5F,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACzG,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,KAAK,EAAE,KAAK,CAAC,KAAK;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAU,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;AAG/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAU,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;AAGpF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAE,GAAW,EAAe,EAAE;IACtE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACpE,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACxC,CAAC,CAAC;AAGF,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AACjE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAErH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAA+B,EAAmD,EAAE;IACzG,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8C,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC"}

package/dist/passwords/fills.d.ts

@@ -0,0 +1,10 @@
+import { type Answer, type VaultAccess } from "./access.js";
+import type { Captures } from "./capture.js";
+export declare class Fills {
+    #private;
+    private readonly vault;
+    private readonly captures;
+    constructor(vault: VaultAccess, captures: Captures);
+    fillWindow(name: string | undefined): Answer<"fill-window">;
+}
+//# sourceMappingURL=fills.d.ts.map

package/dist/passwords/fills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fills.d.ts","sourceRoot":"","sources":["../../src/passwords/fills.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,MAAM,EAAsB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAe7C,qBAAa,KAAK;;IAEV,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAF7B,YACqB,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,QAAQ,EACnC;IAOE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,CAahE;CA0DJ"}

package/dist/passwords/fills.js

@@ -0,0 +1,87 @@
+import { entriesFor, entryNameFor, titleForOrigin } from "@intentic/sandbox-contract/policy/keyring-origins";
+import { NOT_SET_UP, refuse } from "./access.js";
+import { candidateOf, DEFAULT_SETTINGS, entryInfoOf, liveEntries, settingsOf, titleOf, usedEntry, withEntry } from "./entries.js";
+import { typingDecision } from "../policy.js";
+const PLACE = { kind: "window" };
+const OWN_TARGET = { kind: "window", programs: [], anyField: false };
+export class Fills {
+    vault;
+    captures;
+    constructor(vault, captures) {
+        this.vault = vault;
+        this.captures = captures;
+    }
+    #shown() {
+        const held = this.vault.held();
+        return held === undefined ? (this.vault.file()?.open.entries ?? []) : liveEntries(held.doc).map(entryInfoOf);
+    }
+    async fillWindow(name) {
+        const file = this.vault.file();
+        if (file === undefined) {
+            return refuse("locked", NOT_SET_UP);
+        }
+        const looked = await this.vault.deps.typist.inspect(PLACE);
+        if (!looked.ok) {
+            return refuse("unavailable", looked.reason);
+        }
+        const program = { kind: "program", program: looked.seen.focus.program === "" ? "unknown" : looked.seen.focus.program };
+        const shown = name === undefined ? entriesFor(this.#shown().map(candidateOf), program)[0] : this.#shown().find((entry) => entry.name === name);
+        const entry = shown === undefined ? undefined : this.#shown().find((candidate) => candidate.name === shown.name);
+        return entry === undefined ? await this.#typeOnce(looked.seen, program) : await this.#fillWith(entry, looked.seen);
+    }
+    async #fillWith(shown, seen) {
+        const file = this.vault.file();
+        if (file === undefined) {
+            return refuse("locked", NOT_SET_UP);
+        }
+        const first = typingDecision({ target: OWN_TARGET, focus: seen.focus, rules: shown });
+        if (first.verdict === "refuse") {
+            return refuse(first.code, first.reason);
+        }
+        const reasons = first.verdict === "ask" ? ` Note: ${first.reasons.join(" and ")}.` : "";
+        const opened = await this.vault.open(file, { title: `Fill ${titleOf(shown)} into ${seen.focus.program}?`, message: `Passwords types ${titleOf(shown)} into ${seen.focus.program}.${reasons}`, person: true });
+        if ("ok" in opened) {
+            return opened;
+        }
+        const entry = opened.doc.entries[shown.name];
+        if (entry === undefined || entry.deleted === true) {
+            return refuse("unknown", `There is no password named ${shown.name}.`);
+        }
+        const value = await this.vault.valueOf(opened.doc, entry);
+        if (!value.ok) {
+            return value;
+        }
+        const typed = await this.vault.typeInto(PLACE, seen, value.value, true);
+        await this.vault.record({ op: "fill", outcome: typed.ok ? "granted" : "refused", secret: entry.name, program: seen.focus.program, asked: true, how: opened.how });
+        if (!typed.ok) {
+            return typed;
+        }
+        await this.vault.commit({ doc: withEntry(opened.doc, usedEntry(entry, this.vault.deps.now())), key: opened.key });
+        return { ok: true, name: entry.name, program: typed.program, saved: false };
+    }
+    async #typeOnce(seen, program) {
+        const box = this.vault.deps.consent.askValue;
+        if (box === undefined) {
+            return refuse("unavailable", "Nothing is saved for this program, and this computer cannot show Passwords' own box to type it once.");
+        }
+        const held = this.vault.held();
+        const remember = (held === undefined ? (this.vault.file()?.open.settings ?? DEFAULT_SETTINGS) : settingsOf(held.doc)).remember.apps;
+        const place = titleForOrigin(program);
+        const answer = await box({ title: `Save a password for ${place}`, message: `Type the password for ${place} once. Passwords types it there for you.`, remember });
+        if (answer.kind === "cancelled") {
+            return refuse("declined", "The person at the computer closed the box.");
+        }
+        if (answer.kind === "unavailable") {
+            return refuse("unavailable", answer.reason);
+        }
+        const typed = await this.vault.typeInto(PLACE, seen, answer.value, true);
+        if (!typed.ok) {
+            return typed;
+        }
+        const now = this.vault.deps.now();
+        const kept = answer.remember ? await this.captures.keep({ origin: program, username: answer.username, source: "app", via: seen.focus.program, kind: "password", at: now }, answer.value, true) : undefined;
+        await this.vault.record({ op: "fill", outcome: "granted", secret: kept?.name, program: seen.focus.program, asked: true, how: "box" });
+        return { ok: true, name: kept?.name ?? entryNameFor(place, answer.username, () => false), program: typed.program, saved: kept !== undefined && kept.outcome !== "skipped" };
+    }
+}
+//# sourceMappingURL=fills.js.map

package/dist/passwords/fills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fills.js","sourceRoot":"","sources":["../../src/passwords/fills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AAE7G,OAAO,EAAe,UAAU,EAAE,MAAM,EAAoB,MAAM,aAAa,CAAC;AAEhF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClI,OAAO,EAAE,cAAc,EAAmB,MAAM,cAAc,CAAC;AAS/D,MAAM,KAAK,GAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAExC,MAAM,UAAU,GAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAEjF,MAAM,OAAO,KAAK;IAEO,KAAK;IACL,QAAQ;IAF7B,YACqB,KAAkB,EAClB,QAAkB;qBADlB,KAAK;wBACL,QAAQ;IAC1B,CAAC;IAEJ,MAAM;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACjH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAwB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,OAAO,GAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACtI,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/I,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;QACjH,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACvH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAgB,EAAE,IAAU;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,mBAAmB,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9M,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,SAAS,EAAE,8BAA8B,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAClK,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAClH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAU,EAAE,OAAsB;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,aAAa,EAAE,sGAAsG,CAAC,CAAC;QACzI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpI,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,uBAAuB,KAAK,EAAE,EAAE,OAAO,EAAE,yBAAyB,KAAK,0CAA0C,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjK,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,UAAU,EAAE,4CAA4C,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3M,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACtI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;IAChL,CAAC;CACJ"}

package/dist/passwords/needs.d.ts

@@ -0,0 +1,11 @@
+import { type KeyringNeed, type KeyringNeedAnswer, type SealedBox } from "@intentic/sandbox-contract/schemas/keyring";
+import { type Answer, type VaultAccess } from "./access.js";
+export declare class Needs {
+    #private;
+    private readonly vault;
+    constructor(vault: VaultAccess);
+    need(asked: string, need: KeyringNeed): Answer<"need">;
+    needs(): Awaited<Answer<"needs">>;
+    answerNeed(id: string, answer: KeyringNeedAnswer, name: string | undefined, sealed: SealedBox | undefined, at: number | undefined): Answer<"answer-need">;
+}
+//# sourceMappingURL=needs.d.ts.map

package/dist/passwords/needs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"needs.d.ts","sourceRoot":"","sources":["../../src/passwords/needs.ts"],"names":[],"mappings":"AAEA,OAAO,EAEH,KAAK,WAAW,EAChB,KAAK,iBAAiB,EAItB,KAAK,SAAS,EACjB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,KAAK,MAAM,EAAmC,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AA6D7F,qBAAa,KAAK;;IAGF,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAlC,YAA6B,KAAK,EAAE,WAAW,EAAI;IAsB7C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAkC3D;IA0FD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAEhC;IAaK,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,CAuC9J;CACJ"}