@interop/edv-client 17.0.0

package/dist/EdvClient.js

@@ -0,0 +1,663 @@
+/*!
+ * Copyright (c) 2018-2025 Digital Bazaar, Inc. All rights reserved.
+ */
+import { assert, assertInvocationSigner } from './assert.js';
+import { DEFAULT_HEADERS } from '@interop/http-client';
+import { EdvClientCore } from './EdvClientCore.js';
+import { HttpsTransport } from './HttpsTransport.js';
+/**
+ * Note: An Encrypted Data Vault (EDV) server MUST expose an HTTPS API with a
+ * URL structure that is partitioned like so:
+ *
+ * <edvID>/documents/<documentID> .
+ *
+ * The <edvID> must take the form:
+ *
+ * <authority>/edvs/<multibase base58 multihash encoded random ID> .
+ */
+export class EdvClient extends EdvClientCore {
+    capability;
+    invocationSigner;
+    httpsAgent;
+    defaultHeaders;
+    /**
+     * Creates a new EdvClient for connecting to an Encrypted Data Vault (EDV).
+     *
+     * @param {object} options - The options to use.
+     * @param {object} [options.capability] - An authorization capability
+     *   (zcap) to use that will work with every method called on the client
+     *   with the exception of `revokeCapability`, where a capability must be
+     *   passed to that function if the root zcap is not to be invoked.
+     * @param {object} [options.defaultHeaders] - Default HTTP headers to use
+     *   with HTTPS requests.
+     * @param {HttpsAgent} [options.httpsAgent] - A HttpsAgent to use to handle
+     *   HTTPS requests.
+     * @param {object} [options.hmac] - A default HMAC API for blinding
+     *   indexable attributes.
+     * @param {object} [options.invocationSigner] - An object with an
+     *   `id` property and a `sign` function for signing capability invocations.
+     * @param {string} [options.id] - The ID of the EDV that must be a
+     *   URL that refers to the EDV's root storage location; if not given, then
+     *   a separate capability must be given here that can be used for each
+     *   method to be called -- or a separate capability must be given to each
+     *   called method directly.
+     * @param {object} [options.keyAgreementKey] - A default KeyAgreementKey
+     *   API for deriving shared KEKs for wrapping content encryption keys.
+     * @param {Function} [options.keyResolver] - A default function that returns
+     *   a Promise that resolves a key ID to a DH public key.
+     * @param {string} [options.cipherVersion='recommended'] - Sets the cipher
+     *   version to either "recommended" or "fips".
+     * @param {string} [options._attributeVersion] - Sets the blinded attribute
+     *   version to use; for internal use only.
+     *
+     * @returns {EdvClient} An EdvClient instance.
+     */
+    constructor({ capability, defaultHeaders, hmac, id, invocationSigner, httpsAgent, keyAgreementKey, keyResolver, cipherVersion = 'recommended', _attributeVersion } = {}) {
+        if (capability !== undefined) {
+            assert(capability, 'capability', 'object');
+            if (!id) {
+                // parse EDV ID from `capability`
+                id = EdvClient._parseEdvId({ capability });
+            }
+        }
+        if (invocationSigner !== undefined) {
+            assertInvocationSigner(invocationSigner);
+        }
+        super({
+            hmac,
+            id,
+            keyAgreementKey,
+            keyResolver,
+            cipherVersion,
+            _attributeVersion
+        });
+        // a future version could set a default transport here to wrap this, but
+        // it would be a breaking change
+        this.capability = capability;
+        this.invocationSigner = invocationSigner;
+        this.httpsAgent = httpsAgent;
+        this.defaultHeaders = { ...DEFAULT_HEADERS, ...defaultHeaders };
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object} options.doc - The document to insert.
+     * @param {ReadableStream} [options.stream] - A WHATWG Readable stream to read
+     *   from to associate chunked data with this document.
+     * @param {number} [options.chunkSize=1048576] - The size, in bytes, of the
+     *   chunks to break the incoming stream data into.
+     * @param {object[]} [options.recipients=[]] - A set of JWE recipients
+     *   to encrypt the document for; if not present, a default recipient will
+     *   be added using `this.keyAgreementKey` and if no `keyAgreementKey` is
+     *   set, an error will be thrown.
+     * @param {Function} [options.keyResolver=this.keyResolver] - A function that
+     *   returns a Promise that resolves a key ID to a DH public key.
+     * @param {object} [options.keyAgreementKey=this.keyAgreementKey] - A
+     *   KeyAgreementKey API for deriving shared KEKs for wrapping content
+     *   encryption keys.
+     * @param {object} [options.hmac=this.hmac] - An HMAC API for blinding
+     *   indexable attributes.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise<object>} - Resolves to the inserted document.
+     */
+    async insert({ doc, stream, chunkSize, recipients = [], keyResolver = this.keyResolver, keyAgreementKey = this.keyAgreementKey, hmac = this.hmac, capability = this.capability, invocationSigner = this.invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.insert({
+            doc,
+            stream,
+            chunkSize,
+            recipients,
+            keyResolver,
+            keyAgreementKey,
+            hmac,
+            transport
+        });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object} options.doc - The document to insert.
+     * @param {ReadableStream} [options.stream] - A WHATWG Readable stream to read
+     *   from to associate chunked data with this document.
+     * @param {number} [options.chunkSize=1048576] - The size, in bytes, of the
+     *   chunks to break the incoming stream data into.
+     * @param {object} [options.recipients=[]] - A set of JWE recipients to
+     *   encrypt the document for; if present, recipients will be added to any
+     *   existing recipients; to remove existing recipients, modify the
+     *   `encryptedDoc.jwe.recipients` field.
+     * @param {Function} [options.keyResolver=this.keyResolver] - A function that
+     *   returns a Promise that resolves a key ID to a DH public key.
+     * @param {object} [options.keyAgreementKey=this.keyAgreementKey] - A
+     *   KeyAgreementKey API for deriving shared KEKs for wrapping content
+     *   encryption keys.
+     * @param {object} [options.hmac=this.hmac] - An HMAC API for blinding
+     *   indexable attributes.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise<object>} - Resolves to the updated document.
+     */
+    async update({ doc, stream, chunkSize, recipients = [], keyResolver = this.keyResolver, keyAgreementKey = this.keyAgreementKey, hmac = this.hmac, capability = this.capability, invocationSigner = this.invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.update({
+            doc,
+            stream,
+            chunkSize,
+            recipients,
+            keyResolver,
+            keyAgreementKey,
+            hmac,
+            transport
+        });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object} options.doc - The document to create or update an index
+     *   for.
+     * @param {object} [options.hmac=this.hmac] - An HMAC API for blinding
+     *   indexable attributes.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise} - Resolves once the operation completes.
+     */
+    async updateIndex({ doc, hmac = this.hmac, capability = this.capability, invocationSigner = this.invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.updateIndex({ doc, hmac, transport });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object} options.doc - The document to delete.
+     * @param {object} [options.recipients=[]] - A set of JWE recipients to
+     *   encrypt the document for; if present, recipients will be added to
+     *   any existing recipients; to remove existing recipients, modify
+     *   the `encryptedDoc.jwe.recipients` field.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     * @param {Function} [options.keyResolver=this.keyResolver] - A function that
+     *   returns a Promise that resolves a key ID to a DH public key.
+     * @param {object} [options.keyAgreementKey=this.keyAgreementKey] - A
+     *   KeyAgreementKey API for deriving shared KEKs for wrapping content
+     *   encryption keys.
+     *
+     * @returns {Promise<boolean>} - Resolves to `true` if the document was
+     *   deleted.
+     */
+    async delete({ doc, recipients = [], capability = this.capability, invocationSigner = this.invocationSigner, keyResolver = this.keyResolver, keyAgreementKey = this.keyAgreementKey } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.delete({
+            doc,
+            recipients,
+            keyResolver,
+            keyAgreementKey,
+            transport
+        });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {string} options.id - The ID of the document to get.
+     * @param {object} [options.keyAgreementKey=this.keyAgreementKey] - A
+     *   KeyAgreementKey API for deriving a shared KEK to unwrap the content
+     *   encryption key.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise<object>} - Resolves to the document.
+     */
+    async get({ id, keyAgreementKey = this.keyAgreementKey, capability = this.capability, invocationSigner = this.invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.get({ id, keyAgreementKey, transport });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object} options.doc - The document to get a stream for.
+     * @param {object} [options.keyAgreementKey=this.keyAgreementKey] - A
+     *   KeyAgreementKey API for deriving a shared KEK to unwrap the content
+     *   encryption key.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise<ReadableStream>} - Resolves to a `ReadableStream` to read
+     *   the chunked data from.
+     */
+    async getStream({ doc, keyAgreementKey = this.keyAgreementKey, capability = this.capability, invocationSigner = this.invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.getStream({ doc, keyAgreementKey, transport });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @see find - For more detailed documentation on the search options.
+     *
+     * @param {object} options - The options to use.
+     * @param {object} [options.keyAgreementKey=this.keyAgreementKey] - A
+     *   KeyAgreementKey API for deriving a shared KEK to unwrap the content
+     *   encryption key.
+     * @param {object} [options.hmac=this.hmac] - An HMAC API for blinding
+     *   indexable attributes.
+     * @param {object|Array} [options.equals] - An object with key-value
+     *   attribute pairs to match or an array of such objects.
+     * @param {string|Array} [options.has] - A string with an attribute name to
+     *   match or an array of such strings.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise<number>} - Resolves to the number of matching documents.
+     */
+    async count({ keyAgreementKey = this.keyAgreementKey, hmac = this.hmac, equals, has, capability = this.capability, invocationSigner = this.invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.count({ keyAgreementKey, hmac, equals, has, transport });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object} [options.keyAgreementKey=this.keyAgreementKey] - A
+     *   KeyAgreementKey API for deriving a shared KEK to unwrap the content
+     *   encryption key.
+     * @param {object} [options.hmac=this.hmac] - An HMAC API for blinding
+     *   indexable attributes.
+     * @param {object|Array} [options.equals] - An object with key-value
+     *   attribute pairs to match or an array of such objects.
+     * @param {string|Array} [options.has] - A string with an attribute name to
+     *   match or an array of such strings.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     * @param {boolean} [options.returnDocuments] - Set to `false` to
+     *   request only document IDs from the server (not full documents); note
+     *   that a server that does not accept this option will return full
+     *   documents, so either return value is possible.
+     * @param {boolean} [options.count] - Set to `false` to find all documents
+     *   that match a query or to `true` to give a count of documents.
+     * @param {number} [options.limit] - Set to limit the number of documents
+     *   to be returned from a query (min=1, max=1000).
+     *
+     * @returns {Promise<object>} - Resolves to the matching documents:
+     *   {documents: [...]} OR to the matching document IDs, if requested
+     *   and supported by the server: {documentIds: [...]}.
+     */
+    async find({ keyAgreementKey = this.keyAgreementKey, hmac = this.hmac, equals, has, capability = this.capability, invocationSigner = this.invocationSigner, returnDocuments, count = false, limit } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.find({
+            keyAgreementKey,
+            hmac,
+            equals,
+            has,
+            returnDocuments,
+            count,
+            limit,
+            transport
+        });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.headers] - An optional
+     *   headers object to use when making requests.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise<object>} - Resolves to the configuration for the EDV.
+     */
+    async getConfig({ capability = this.capability, headers, invocationSigner = this.invocationSigner } = {}) {
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders: { ...defaultHeaders, ...headers },
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.getConfig({ transport });
+    }
+    /**
+     * @inheritdoc
+     *
+     * @param {object} options - The options to use.
+     * @param {object} options.config - The new EDV config.
+     * @param {object|string} [options.capability=this.capability] - The
+     *   authorization capability (zcap) to use to authorize the operation.
+     * @param {object} [options.headers] - An optional headers object to use when
+     *   making requests.
+     * @param {object} [options.invocationSigner=this.invocationSigner] - An API
+     *   with an `id` property and a `sign` function for signing a capability
+     *   invocation.
+     *
+     * @returns {Promise<void>} - Resolves once the operation completes.
+     */
+    async updateConfig({ config, capability = this.capability, headers, invocationSigner = this.invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders: { ...defaultHeaders, ...headers },
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        return super.updateConfig({ config, transport });
+    }
+    /**
+     * Revoke an authorization capability (zcap). If no `capability` is passed,
+     * then the root zcap for the revocation endpoint will be invoked.
+     *
+     * @param {object} options - The options to use.
+     * @param {object} options.capabilityToRevoke - The capability to revoke.
+     * @param {object|string} [options.capability] - The authorization capability
+     *   (zcap) to use to authorize the operation.
+     * @param {object} options.invocationSigner - An API with an
+     *   `id` property and a `sign` function for signing a capability invocation.
+     *
+     * @returns {Promise<object>} Resolves once the operation completes.
+     */
+    async revokeCapability({ capabilityToRevoke, capability, invocationSigner } = {}) {
+        assertInvocationSigner(invocationSigner);
+        const { defaultHeaders, httpsAgent, id: edvId } = this;
+        const transport = new HttpsTransport({
+            capability,
+            defaultHeaders,
+            edvId,
+            httpsAgent,
+            invocationSigner
+        });
+        // no `super` method for revoking a zcap, call on `transport`
+        return transport.revokeCapability({ capabilityToRevoke });
+    }
+    /**
+     * Parses an EDV ID from a capability's invocation target.
+     *
+     * @param {object} options - The options to use.
+     * @param {object|string} options.capability - The authorization capability
+     *   (zcap) to parse the EDV ID from.
+     *
+     * @returns {string} - The ID of the EDV.
+     */
+    parseEdvId({ capability } = {}) {
+        return EdvClient._parseEdvId({ capability });
+    }
+    /**
+     * Creates a new EDV using the given configuration.
+     *
+     * @param {object} options - The options to use.
+     * @param {string} options.url - The url to post the configuration to.
+     * @param {string} options.config - The EDV's configuration.
+     * @param {object|string} [options.capability] - The authorization capability
+     *   (zcap) to use to authorize the operation.
+     * @param {object} [options.headers=undefined] - An optional
+     *   headers object to use when making requests.
+     * @param {HttpsAgent} [options.httpsAgent=undefined] - An optional
+     *   node.js `https.Agent` instance to use when making requests.
+     * @param {object} [options.invocationSigner] - An object with an
+     *   `id` property and a `sign` function for signing a capability invocation.
+     *
+     * @returns {Promise<object>} - Resolves to the configuration for the newly
+     *   created EDV.
+     */
+    static async createEdv({ url, config, capability, httpsAgent, headers, invocationSigner } = {}) {
+        const transport = new HttpsTransport({
+            url,
+            capability,
+            defaultHeaders: headers,
+            httpsAgent,
+            invocationSigner
+        });
+        return transport.createEdv({ config });
+    }
+    /**
+     * Gets the EDV config for the given controller and reference ID.
+     *
+     * @param {object} options - The options to use.
+     * @param {string} options.url - The url to query.
+     * @param {string} options.controller - The ID of the controller.
+     * @param {string} options.referenceId - A controller-unique reference ID.
+     * @param {HttpsAgent} [options.httpsAgent] - An optional
+     *   node.js `https.Agent` instance to use when making requests.
+     * @param {object} [options.headers] - An optional
+     *   headers object to use when making requests.
+     * @param {object} [options.invocationSigner] - An object with an
+     *   `id` property and a `sign` function for signing a capability invocation.
+     * @param {object|string} [options.capability] - The authorization capability
+     *   (zcap) to use to authorize the operation.
+     *
+     * @returns {Promise<object>} - Resolves to the EDV configuration
+     *   containing the given controller and reference ID.
+     */
+    static async findConfig({ url, controller, referenceId, httpsAgent, invocationSigner, headers, capability } = {}) {
+        const results = await this.findConfigs({
+            url,
+            controller,
+            referenceId,
+            httpsAgent,
+            headers,
+            invocationSigner,
+            capability
+        });
+        return results[0] || null;
+    }
+    /**
+     * Get all EDV configurations matching a query.
+     *
+     * @param {object} options - The options to use.
+     * @param {string} options.url - The url to query.
+     * @param {string} options.controller - The EDV's controller.
+     * @param {string} [options.referenceId] - A controller-unique reference ID.
+     * @param {string} [options.after] - An EDV's ID.
+     * @param {number} [options.limit] - How many EDV configs to return.
+     * @param {HttpsAgent} [options.httpsAgent=undefined] - An optional
+     *   node.js `https.Agent` instance to use when making requests.
+     * @param {object} [options.headers=undefined] - An optional
+     *   headers object to use when making requests.
+     * @param {object} [options.invocationSigner] - An object with an
+     *   `id` property and a `sign` function for signing a capability invocation.
+     * @param {object|string} [options.capability] - The authorization capability
+     *   (zcap) to use to authorize the operation.
+     *
+     * @returns {Promise<Array>} - Resolves to the matching EDV configurations.
+     */
+    static async findConfigs({ url, controller, referenceId, after, limit, httpsAgent, headers, capability, invocationSigner } = {}) {
+        const transport = new HttpsTransport({
+            url,
+            capability,
+            defaultHeaders: headers,
+            httpsAgent,
+            invocationSigner
+        });
+        return transport.findConfigs({ controller, referenceId, after, limit });
+    }
+    /**
+     * Generates a multibase encoded random 128-bit identifier for a document.
+     *
+     * @returns {Promise<string>} - Resolves to the identifier.
+     */
+    static async generateId() {
+        return EdvClientCore.generateId();
+    }
+    /**
+     * Migrates all documents that match the given `equals` or `has` query
+     * from the attribute version configured for the `from` EdvClient instance
+     * to the attribute version configured for the `to` EdvClient instance.
+     *
+     * This method should be used with caution. It is not exposed as a public
+     * API (it is marked private by `_` convention).
+     *
+     * WARNING: Concurrent writes to an EDV store should be prevented while it is
+     * running if the operating environment cannot guarantee that uniqueness
+     * constraints will not be violated.
+     *
+     * WARNING: At present, this method will fail if the number of documents to
+     * be migrated exceeds a maximum of `999`.
+     *
+     * A more robust implementation may be provided in the future if further
+     * migrations are needed.
+     *
+     * @param {object} options - The options to use.
+     * @param {EdvClient} options.from - The EDV client instance configured to
+     *   use the attribute version to convert from.
+     * @param {EdvClient} options.to - The EDV client instance configured to
+     *   use the attribute version to convert to.
+     * @param {object|Array} [options.equals] - An object with key-value
+     *   attribute pairs to match or an array of such objects.
+     * @param {string|Array} [options.has] - A string with an attribute name to
+     *   match or an array of such strings.
+     *
+     * @returns {Promise} Resolves once the operation completes.
+     */
+    static async _migrate({ from, to, equals, has } = {}) {
+        assert(from, 'from', 'object');
+        assert(to, 'to', 'object');
+        const { documents: docs } = await from.find({ equals, has, limit: 1000 });
+        if (docs.length >= 1000) {
+            throw new Error('Too many documents to migrate; limit is 999.');
+        }
+        // update docs in parallel chunks
+        const chunkSize = 5;
+        while (docs.length > 0) {
+            const chunk = docs.splice(0, chunkSize);
+            await Promise.all(chunk.map(async (doc) => to.update({ doc })));
+        }
+    }
+    // not used internally, but provided as a temporary backwards compatibility
+    // helper
+    _getDocUrl(id, capability) {
+        return new HttpsTransport({ edvId: this.id })._getDocUrl(id, capability);
+    }
+    /**
+     * Parses an EDV ID from a capability's invocation target.
+     *
+     * @param {object} options - The options to use.
+     * @param {object|string} options.capability - The authorization capability
+     *   (zcap) to parse the EDV ID from.
+     *
+     * @returns {string} - The ID of the EDV.
+     */
+    static _parseEdvId({ capability } = {}) {
+        const invocationTarget = EdvClient._getInvocationTarget({ capability });
+        const start = invocationTarget.lastIndexOf('/edvs/');
+        if (start === -1) {
+            throw new Error(`Invalid EDV invocation target (${invocationTarget}).`);
+        }
+        const end = invocationTarget.indexOf('/', start + '/edvs/'.length + 1);
+        if (end === -1) {
+            // form: https://example.com/edvs/z1238121237
+            return invocationTarget;
+        }
+        // form: https://example.com/edvs/z1238121237/...
+        return invocationTarget.slice(0, end);
+    }
+    // provided temporarily for backwards compatibility; should be moved to
+    // a separate helpers file
+    static _getInvocationTarget({ capability }) {
+        return HttpsTransport._getInvocationTarget({ capability });
+    }
+}
+/**
+ * A node.js HTTPS agent.
+ *
+ * @typedef {object} HttpsAgent
+ * @see https://nodejs.org/api/https.html#https_class_https_agent
+ */
+//# sourceMappingURL=EdvClient.js.map

package/dist/EdvClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EdvClient.js","sourceRoot":"","sources":["../src/EdvClient.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD;;;;;;;;;GASG;AAEH,MAAM,OAAO,SAAU,SAAQ,aAAa;IAC1C,UAAU,CAAK;IACf,gBAAgB,CAAU;IAC1B,UAAU,CAAK;IACf,cAAc,CAAK;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,YAAY,EACV,UAAU,EACV,cAAc,EACd,IAAI,EACJ,EAAE,EACF,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,WAAW,EACX,aAAa,GAAG,aAAa,EAC7B,iBAAiB,KACV,EAAE;QACT,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;YAC1C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,iCAAiC;gBACjC,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QAC1C,CAAC;QAED,KAAK,CAAC;YACJ,IAAI;YACJ,EAAE;YACF,eAAe;YACf,WAAW;YACX,aAAa;YACb,iBAAiB;SAClB,CAAC,CAAA;QAEF,wEAAwE;QACxE,gCAAgC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAA;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,cAAc,EAAE,CAAA;IACjE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,MAAM,CAAC,EACX,GAAG,EACH,MAAM,EACN,SAAS,EACT,UAAU,GAAG,EAAE,EACf,WAAW,GAAG,IAAI,CAAC,WAAW,EAC9B,eAAe,GAAG,IAAI,CAAC,eAAe,EACtC,IAAI,GAAG,IAAI,CAAC,IAAI,EAChB,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,GAAG;YACH,MAAM;YACN,SAAS;YACT,UAAU;YACV,WAAW;YACX,eAAe;YACf,IAAI;YACJ,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,MAAM,CAAC,EACX,GAAG,EACH,MAAM,EACN,SAAS,EACT,UAAU,GAAG,EAAE,EACf,WAAW,GAAG,IAAI,CAAC,WAAW,EAC9B,eAAe,GAAG,IAAI,CAAC,eAAe,EACtC,IAAI,GAAG,IAAI,CAAC,IAAI,EAChB,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,GAAG;YACH,MAAM;YACN,SAAS;YACT,UAAU;YACV,WAAW;YACX,eAAe;YACf,IAAI;YACJ,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,WAAW,CAAC,EAChB,GAAG,EACH,IAAI,GAAG,IAAI,CAAC,IAAI,EAChB,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IACpD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,MAAM,CAAC,EACX,GAAG,EACH,UAAU,GAAG,EAAE,EACf,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,EACxC,WAAW,GAAG,IAAI,CAAC,WAAW,EAC9B,eAAe,GAAG,IAAI,CAAC,eAAe,KAC/B,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,GAAG;YACH,UAAU;YACV,WAAW;YACX,eAAe;YACf,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,GAAG,CAAC,EACR,EAAE,EACF,eAAe,GAAG,IAAI,CAAC,eAAe,EACtC,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAA;IACtD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,SAAS,CAAC,EACd,GAAG,EACH,eAAe,GAAG,IAAI,CAAC,eAAe,EACtC,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,KAAK,CAAC,EACV,eAAe,GAAG,IAAI,CAAC,eAAe,EACtC,IAAI,GAAG,IAAI,CAAC,IAAI,EAChB,MAAM,EACN,GAAG,EACH,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAA;IACvE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,KAAK,CAAC,IAAI,CAAC,EACT,eAAe,GAAG,IAAI,CAAC,eAAe,EACtC,IAAI,GAAG,IAAI,CAAC,IAAI,EAChB,MAAM,EACN,GAAG,EACH,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,EACxC,eAAe,EACf,KAAK,GAAG,KAAK,EACb,KAAK,KACE,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,eAAe;YACf,IAAI;YACJ,MAAM;YACN,GAAG;YACH,eAAe;YACf,KAAK;YACL,KAAK;YACL,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,SAAS,CAAC,EACd,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,OAAO,EACP,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE;YACjD,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,YAAY,CAAC,EACjB,MAAM,EACN,UAAU,GAAG,IAAI,CAAC,UAAU,EAC5B,OAAO,EACP,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KACjC,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE;YACjD,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IAClD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,kBAAkB,EAClB,UAAU,EACV,gBAAgB,KACT,EAAE;QACT,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;QACtD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,UAAU;YACV,cAAc;YACd,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,6DAA6D;QAC7D,OAAO,SAAS,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,UAAU,KAAU,EAAE;QACjC,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACrB,GAAG,EACH,MAAM,EACN,UAAU,EACV,UAAU,EACV,OAAO,EACP,gBAAgB,KACT,EAAE;QACT,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,GAAG;YACH,UAAU;YACV,cAAc,EAAE,OAAO;YACvB,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EACtB,GAAG,EACH,UAAU,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,OAAO,EACP,UAAU,KACH,EAAE;QACT,MAAM,OAAO,GAAQ,MAAM,IAAI,CAAC,WAAW,CAAC;YAC1C,GAAG;YACH,UAAU;YACV,WAAW;YACX,UAAU;YACV,OAAO;YACP,gBAAgB;YAChB,UAAU;SACX,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IAC3B,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EACvB,GAAG,EACH,UAAU,EACV,WAAW,EACX,KAAK,EACL,KAAK,EACL,UAAU,EACV,OAAO,EACP,UAAU,EACV,gBAAgB,KACT,EAAE;QACT,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;YACnC,GAAG;YACH,UAAU;YACV,cAAc,EAAE,OAAO;YACvB,UAAU;YACV,gBAAgB;SACjB,CAAC,CAAA;QACF,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACzE,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,OAAO,aAAa,CAAC,UAAU,EAAE,CAAA;IACnC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAU,EAAE;QACvD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC9B,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAE1B,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACzE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QAED,iCAAiC;QACjC,MAAM,SAAS,GAAG,CAAC,CAAA;QACnB,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YACvC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,SAAS;IACT,UAAU,CAAC,EAAO,EAAE,UAAe;QACjC,OAAO,IAAI,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IAC1E,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,WAAW,CAAC,EAAE,UAAU,KAAU,EAAE;QACzC,MAAM,gBAAgB,GAAQ,SAAS,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QAC5E,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QACpD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,gBAAgB,IAAI,CAAC,CAAA;QACzE,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACtE,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,6CAA6C;YAC7C,OAAO,gBAAgB,CAAA;QACzB,CAAC;QACD,iDAAiD;QACjD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACvC,CAAC;IAED,uEAAuE;IACvE,0BAA0B;IAC1B,MAAM,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAO;QAC7C,OAAO,cAAc,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC5D,CAAC;CACF;AAED;;;;;GAKG"}