@interop/wallet-core 0.51.0 → 0.53.0

package/dist/clientAnnex/ladderAnchored.d.ts

@@ -1,6 +1,6 @@
 import type { DIDDoc, DIDLog } from '@interop/did-method-webvh';
 import type { ClientWebvhUpdateKeys, WebvhEnrollmentKeys, WebvhIdStore } from '../webvh/didWebvh.js';
-import type { ResourceLogPinStore } from '../resourceLog/index.js';
+import type { ResourceLogPinStore } from '@interop/vh-resource-log';
 import { type RevokedClientKeys } from '../webvh/revokeClient.js';
 import { type UnlockKeyAgreementPublication, type UnlockLogStore } from '../unlock/standingWebvh.js';
 /**
@@ -12,7 +12,7 @@ import { type UnlockKeyAgreementPublication, type UnlockLogStore } from '../unlo
  * what the first durable self-enrollment's reveal-and-commit entry,
  * re-stating `updateKeys` containing rung 0, requires --
  * and the ladder VM (the stable sibling) is published under `assertionMethod`
- * and `capabilityDelegation` only. The credential's `keyAgreement` posture
+ * and `capabilityDelegation` only. The credential's `keyAgreement`
  * entry is FOLDED INTO GENESIS -- no enrolled client exists to run the
  * separate bind entry ({@link publishUnlockKey}) -- so the genesis
  * `keyAgreement` array holds only the credential's entry.
@@ -106,22 +106,139 @@ export declare function ensureLadderAnchoredDidWebvh(options: {
  * @param options.newClientUpdateSeeds {ClientWebvhUpdateKeys}   the new
  *   client's update-key seeds (minted by the self-enrolling flow, which
  *   therefore holds them and can sign the add entry)
+ * @param options.onCommitted {function}
+ *   `(committed: { builtOnHead: { scid, versionId } }) => Promise<void>` --
+ *   the REQUIRED persist-before-publish seam. It runs once per attempt, after
+ *   the reveal-and-commit entry stands (published here, or standing from a
+ *   torn earlier run) and BEFORE the add entry -- the ceremony's pivot -- is
+ *   built. The caller durably writes the pending client-key record there (the
+ *   `pending` codec group of `keys/clientKeyRecord.ts`: ceremony
+ *   `'self-enrollment'`, the handed-back `builtOnHead`), so the add entry can
+ *   never publish a client whose seed nothing can re-derive, per the
+ *   post-pivot derivability rule (`decisions/0010`). A throw propagates and
+ *   the add entry is withheld. What a throw leaves behind is inert: the
+ *   standing reveal entry's committed hashes for the unpersisted client stay
+ *   in `nextKeyHashes` forever as orphans, but they commit keys of a lost
+ *   random seed -- nothing can reveal them, so they are no re-seizure
+ *   credential, and the per-entry staged-hash attribution passes over them.
+ *   The seam must be idempotent: the conflict retry and a resumed run invoke
+ *   it again. `builtOnHead` is the head of the log snapshot the add entry is
+ *   about to be built on -- the SCID from the log's parameters and the latest
+ *   entry's `versionId` -- which a resume hands back as this call's
+ *   `builtOnHead` marker. The caveat to hold on to: the idempotent COMPLETED
+ *   branch (the new client's update key already authorized) returns without
+ *   ever entering the seam, so a caller resuming across processes must be
+ *   able to treat an already-complete continuation as success on its own
+ * @param [options.builtOnHead] {object}   `{ scid, versionId }` -- the resume
+ *   marker a pending record recorded, from an earlier run's `onCommitted`.
+ *   Supplied, the attempt's first read is refused with
+ *   {@link BuiltOnHeadNotReachedError} unless the served log carries that
+ *   SCID and an entry with that `versionId`. The chain-head pin cannot stand
+ *   in for it: the pin is written non-atomically after the add entry
+ *   publishes, and the continuity check accepts a log served at exactly the
+ *   pinned length -- so only this marker stops a resume rebuilding the add
+ *   entry over a log that never reached the head the pending record was
+ *   written against. The marker covers the pre-pivot half of that gap only:
+ *   a served log CONTAINING the recorded head but truncated behind the torn
+ *   run's own add entry still passes it and is resumed onto, and the menders
+ *   for that residual half are the ordinary ones -- this client's own
+ *   chain-head pin once the add publish wrote it, and any other enrolled
+ *   client's pinned read of the same log. Both members must be non-empty
+ *   strings; a malformed marker is refused with a `TypeError` before any
+ *   read, since a resume with an uncomparable marker is a resume with no
+ *   fork guard
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the credential-authenticated pointer
- * @returns {Promise<{ did: string, webDoc?: object }>}   the account DID and,
- *   when the add entry ran here, the final `did.json` projection for the
- *   enrolled session to republish
+ * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
+ *   pins; every read both entries are built on is checked against the pinned
+ *   head (a served prefix is refused before the reveal entry lands, not only
+ *   by a verify that follows both entries), and the pin advances to each
+ *   entry as it publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
+ * @returns {Promise<{ did: string, webDoc?: object, committed: boolean }>}
+ *   the account DID, the final `did.json` projection when the add entry ran
+ *   here, and `committed` -- whether THIS call published the pivot entry
+ *   (`false` exactly on the idempotent completed branch, where a torn earlier
+ *   run had already published it). It is an observability signal, not a
+ *   success flag: a returning call means the continuation stands either way,
+ *   so a caller clears its pending record on the RETURN, whatever `committed`
+ *   says. Its absence from a return value is a build skew, which is why it is
+ *   stated rather than inferred
  */
 export declare function selfEnrollWebvhClient(options: {
     store: UnlockLogStore;
     ladderSeed: Uint8Array;
     newClientKeys: WebvhEnrollmentKeys;
     newClientUpdateSeeds: ClientWebvhUpdateKeys;
+    onCommitted: (committed: {
+        builtOnHead: {
+            scid: string;
+            versionId: string;
+        };
+    }) => Promise<void>;
+    builtOnHead?: {
+        scid: string;
+        versionId: string;
+    };
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     webDoc?: object;
+    committed: boolean;
 }>;
+/**
+ * Refuses a malformed resume marker before any read. A marker whose members
+ * are missing or empty could not be compared against anything, so accepting
+ * one would hand a resume the mint-skip WITHOUT the fork guard the marker
+ * exists to apply -- fail-open exactly where the guard matters.
+ *
+ * @param options {object}
+ * @param options.builtOnHead {unknown}   the supplied marker
+ * @returns {void}
+ */
+export declare function assertBuiltOnHeadShape({ builtOnHead }: {
+    builtOnHead: unknown;
+}): void;
+/**
+ * Thrown when a resumed self-enrollment is served an account log that has not
+ * reached the head its pending record was written against -- a different SCID,
+ * or no entry carrying the recorded `versionId`. Rebuilding the add entry over
+ * such a log would fork the account off a head the ceremony already committed
+ * to, which the chain-head pin alone does not catch: the pin is written
+ * non-atomically after the add entry publishes, so a run torn between the two
+ * leaves a pin one entry behind, and the continuity check accepts a served log
+ * at exactly the pinned length.
+ *
+ * **`name` is a stable contract.** It is always the string
+ * `'BuiltOnHeadNotReachedError'`, and a consumer should match on that rather
+ * than on `instanceof`: a wallet app that links this package (or holds two
+ * copies of it through a dependency tree) gets a different class object for
+ * the same error, so `instanceof` silently fails there while the name does
+ * not.
+ */
+export declare class BuiltOnHeadNotReachedError extends Error {
+    /**
+     * The head the pending record recorded, which the served log did not reach.
+     */
+    builtOnHead: {
+        scid: string;
+        versionId: string;
+    };
+    /**
+     * @param options {object}
+     * @param options.builtOnHead {object}   the recorded `{ scid, versionId }`
+     */
+    constructor({ builtOnHead }: {
+        builtOnHead: {
+            scid: string;
+            versionId: string;
+        };
+    });
+}
 /**
  * Thrown when the client being forgotten is the account's LAST enrolled
  * durable client. Removing it through this entry would leave the document
@@ -147,7 +264,7 @@ export declare class LastDurableClientForgetError extends Error {
  * reverse, collapsed to a single entry because a removal reveals no new key.
  * The signer is the credential's current ladder rung, recovered from the log
  * itself ({@link attributeLadderRung}): its hash stands committed by the
- * credential's posture (or the rung is already revealed), which is exactly
+ * credential's inventory (or the rung is already revealed), which is exactly
  * what lets it reveal itself in the entry it signs under prerotation. The
  * entry's members are the revocation removal's, verbatim
  * (`clientRemovalTarget` / `clientRemovalFields`, shared with
@@ -161,10 +278,10 @@ export declare class LastDurableClientForgetError extends Error {
  * the rung is revealed and the client still stands. The honest residue is the
  * acting rung itself -- no entry can remove its own signing key, so the rung
  * stands REVEALED in `updateKeys` afterwards (the same standing state the
- * ladder-anchored postures live in). That is credential-held authority, not
+ * ladder-anchored accounts live in). That is credential-held authority, not
  * the forgotten client's: only the ladder seed derives it, the credential's
  * next self-enrollment consumes and retires it, and retiring the credential
- * itself strikes it (`attributeLadderPosture`).
+ * itself strikes it (`attributeLadderInventory`).
  *
  * Forgetting the LAST enrolled durable client is refused
  * ({@link LastDurableClientForgetError}): that transition -- to the
@@ -187,6 +304,13 @@ export declare class LastDurableClientForgetError extends Error {
  *   excluded from the staged-hash attribution
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
+ *   pins: the read inside each attempt is checked against the pinned head
+ *   (a served truncated prefix is refused as a `rollback` before anything is
+ *   built on it), and the pin advances to the head this entry publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   the account
  *   DID and the document and log as the removal entry leaves them (unchanged
  *   on the idempotent no-op path)
@@ -197,6 +321,8 @@ export declare function forgetWebvhClient(options: {
     forgottenClient: RevokedClientKeys;
     knownLatentHashes?: string[];
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;
@@ -223,6 +349,8 @@ export declare function forgetLastWebvhClient(options: {
     forgottenClient: RevokedClientKeys;
     knownLatentHashes?: string[];
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;
@@ -232,14 +360,14 @@ export declare function forgetLastWebvhClient(options: {
  * THE LADDER-VM INSTALL ENTRY (the two-entry transition ceremony's first
  * entry): publishes the credential's ladder VM -- the stable sibling, under
  * `assertionMethod` and `capabilityDelegation` only -- while the last durable
- * client's whole footprint stays untouched: the both-present transitional
+ * client's whole inventory stays untouched: the both-present transitional
  * state the no-neither invariant permits. The entry is ladder-signed by the
  * attributed rung, which reveals itself into `updateKeys` with its own hash
  * kept committed (the carry-over convention), exactly the removal entry's
  * rung math -- so a torn ceremony's re-run re-attributes the now-revealed
  * rung and carries on.
  *
- * This entry is what makes the transition's document version POSTURE-CHANGING
+ * This entry is what makes the transition's document version INVENTORY-CHANGING
  * under the ceremony-tail license (the ladder-VM set gains a member), so the
  * ceremony's ONE ladder-signed roster append anchors here -- and it is what
  * lets the delegation revocations that follow verify their ladder-signed
@@ -258,6 +386,12 @@ export declare function forgetLastWebvhClient(options: {
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
+ *   pins: the read inside each attempt is checked against the pinned head,
+ *   and the pin advances to the head this entry publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, installed: boolean }>}
  *   the account DID and the document and log as the install entry leaves them
  *   (unchanged on the idempotent no-op path); `installed` says whether the
@@ -267,6 +401,8 @@ export declare function installLadderVmWebvh(options: {
     store: UnlockLogStore;
     ladderSeed: Uint8Array;
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;

package/dist/clientAnnex/ladderAnchored.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAEP,MAAM,2BAA2B,CAAA;AAiBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAElE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAGL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AA4FD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C;AAiJD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;;CAStD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AA8GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE"}
+{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAEP,MAAM,2BAA2B,CAAA;AAmBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAGL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AA4FD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,EAAE,CAAC,SAAS,EAAE;QACvB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAsBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,IAAI,CAmBP;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD;;OAEG;IACH,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAEhD;;;OAGG;gBACS,EACV,WAAW,EACZ,EAAE;QACD,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD;CAUF;AAyMD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;;CAStD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AA2HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE"}