@interop/wallet-core 0.94.0 → 0.95.0

package/dist/connections/store.d.ts

@@ -0,0 +1,103 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The directory's storage seam, and its WAS-backed adapter over the
+ * `connections` collection.
+ *
+ * One resource per party keeps every write off any shared document. Every
+ * write the directory logic makes is conditional: a read-modify-write under
+ * `ifMatch`, or a create under `ifNoneMatch`. A lost race surfaces as an error
+ * named `PreconditionFailedError`, which the logic matches by name, since the
+ * seam may raise from a second copy of was-client.
+ *
+ * The seam reports what it could not read instead of hiding it. A listing
+ * names a resource it could not decrypt, an unknown epoch included, and a
+ * `get` that cannot decrypt throws. A reader that turned either into an
+ * absent body could evict a party at the next rotation or write over a body
+ * it never saw.
+ */
+import type { Collection } from '@interop/was-client';
+import type { DocCipher } from '@interop/was-client/edv/cipher';
+/**
+ * One resource as a listing read it: its body when it opened, or the error
+ * that kept it from opening, and its ETag.
+ */
+export interface StoredConnection {
+    resourceId: string;
+    etag?: string;
+    /**
+     * The decrypted body. Absent when `readError` is set.
+     */
+    body?: unknown;
+    /**
+     * Why the body could not be read or opened (an unknown epoch, a key this
+     * reader does not hold, an envelope bound to another id). Set only when
+     * `body` is absent.
+     */
+    readError?: unknown;
+}
+/**
+ * The Space-side seam of the directory.
+ */
+export interface ConnectionsStore {
+    /**
+     * Every resource in the collection, or `null` when the collection is
+     * absent or not visible under this authority. A resource that fails to
+     * open is listed with its `readError` rather than failing the list.
+     */
+    list(): Promise<StoredConnection[] | null>;
+    /**
+     * One resource, or `undefined` when it does not exist. A resource that
+     * exists and cannot be opened throws.
+     */
+    get(options: {
+        resourceId: string;
+    }): Promise<{
+        body: unknown;
+        etag?: string;
+    } | undefined>;
+    /**
+     * Writes one body: conditional on `ifMatch`, or create-only under
+     * `ifNoneMatch`.
+     */
+    put(options: {
+        resourceId: string;
+        body: Record<string, unknown>;
+        ifMatch?: string;
+        ifNoneMatch?: boolean;
+    }): Promise<{
+        etag?: string;
+    }>;
+    /**
+     * Deletes one resource, conditional on `ifMatch` when given.
+     */
+    delete(options: {
+        resourceId: string;
+        ifMatch?: string;
+    }): Promise<void>;
+}
+/**
+ * Builds the directory store over the `connections` collection handle.
+ *
+ * A listing reads the collection's documents feed, bodies and ETags, one
+ * request per page, and opens each envelope with `cipher` under the resource
+ * id the feed served it at. A `get`, a `put`, and a `delete` go through the
+ * handle, whose encryption provider opens a read and seals a write. A `put`
+ * at an id with no resource yet creates the resource there, sealed under the
+ * collection's current epoch.
+ *
+ * @param options {object}
+ * @param options.collection {Collection}   the account data Space's
+ *   `connections` collection, opened through a storage client whose
+ *   encryption provider seals and opens it like any other encrypted wallet
+ *   collection (and carrying the invocation capability, if any)
+ * @param options.cipher {object}   the collection's document cipher; only its
+ *   `decrypt` is used, to open the envelopes the documents feed serves
+ * @returns {ConnectionsStore}
+ */
+export declare function wasConnectionsStore({ collection, cipher }: {
+    collection: Collection;
+    cipher: Pick<DocCipher, 'decrypt'>;
+}): ConnectionsStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/connections/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/connections/store.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,qBAAqB,CAAA;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAE/D;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,CAAA;IAC1C;;;OAGG;IACH,GAAG,CAAC,OAAO,EAAE;QACX,UAAU,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAA;IACzD;;;OAGG;IACH,GAAG,CAAC,OAAO,EAAE;QACX,UAAU,EAAE,MAAM,CAAA;QAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9B;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,UAAU,EACV,MAAM,EACP,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;CACnC,GAAG,gBAAgB,CA+CnB"}

package/dist/connections/store.js

@@ -0,0 +1,67 @@
+/**
+ * Builds the directory store over the `connections` collection handle.
+ *
+ * A listing reads the collection's documents feed, bodies and ETags, one
+ * request per page, and opens each envelope with `cipher` under the resource
+ * id the feed served it at. A `get`, a `put`, and a `delete` go through the
+ * handle, whose encryption provider opens a read and seals a write. A `put`
+ * at an id with no resource yet creates the resource there, sealed under the
+ * collection's current epoch.
+ *
+ * @param options {object}
+ * @param options.collection {Collection}   the account data Space's
+ *   `connections` collection, opened through a storage client whose
+ *   encryption provider seals and opens it like any other encrypted wallet
+ *   collection (and carrying the invocation capability, if any)
+ * @param options.cipher {object}   the collection's document cipher; only its
+ *   `decrypt` is used, to open the envelopes the documents feed serves
+ * @returns {ConnectionsStore}
+ */
+export function wasConnectionsStore({ collection, cipher }) {
+    return {
+        async list() {
+            const documents = await collection.documents();
+            if (documents === null) {
+                return null;
+            }
+            const context = collection.codecContext();
+            return Promise.all(documents.map(async (doc) => {
+                const etag = doc.etag !== undefined ? { etag: doc.etag } : {};
+                try {
+                    const body = await cipher.decrypt({
+                        id: doc.id,
+                        envelope: doc.data,
+                        context
+                    });
+                    return { resourceId: doc.id, ...etag, body };
+                }
+                catch (err) {
+                    return { resourceId: doc.id, ...etag, readError: err };
+                }
+            }));
+        },
+        async get({ resourceId }) {
+            const result = await collection.resource(resourceId).getWithEtag();
+            if (result === null) {
+                return undefined;
+            }
+            return {
+                body: result.data,
+                ...(result.etag !== undefined && { etag: result.etag })
+            };
+        },
+        async put({ resourceId, body, ifMatch, ifNoneMatch }) {
+            return collection.put(resourceId, body, {
+                contentType: 'application/json',
+                ...(ifMatch !== undefined && { ifMatch }),
+                ...(ifNoneMatch === true && { ifNoneMatch })
+            });
+        },
+        async delete({ resourceId, ifMatch }) {
+            await collection
+                .resource(resourceId)
+                .delete(ifMatch !== undefined ? { ifMatch } : {});
+        }
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/connections/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/connections/store.ts"],"names":[],"mappings":"AA0EA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,UAAU,EACV,MAAM,EAIP;IACC,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAA;YAC9C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,CAAA;YACzC,OAAO,OAAO,CAAC,GAAG,CAChB,SAAS,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;gBACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC7D,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;wBAChC,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,QAAQ,EAAE,GAAG,CAAC,IAAY;wBAC1B,OAAO;qBACR,CAAC,CAAA;oBACF,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAA;gBAC9C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;gBACxD,CAAC;YACH,CAAC,CAAC,CACH,CAAA;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;YAClE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;aACxD,CAAA;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE;YAClD,OAAO,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,IAAkB,EAAE;gBACpD,WAAW,EAAE,kBAAkB;gBAC/B,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;gBACzC,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;aAC7C,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE;YAClC,MAAM,UAAU;iBACb,QAAQ,CAAC,UAAU,CAAC;iBACpB,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACrD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/connections/upsert.d.ts

@@ -0,0 +1,214 @@
+import type { ConnectionEntry, ConnectionKind, GrantKind } from './entry.js';
+import type { ConnectionIdKey } from './resourceId.js';
+import type { ConnectionsStore } from './store.js';
+/**
+ * What one helper call did at the party's id.
+ *
+ * - `created` -- no entry stood there, and one was written.
+ * - `updated` -- the entry was rewritten.
+ * - `unchanged` -- the entry already said what the helper would write.
+ * - `absent` -- no entry stood there, and the helper creates none.
+ */
+export type ConnectionWriteOutcome = 'created' | 'updated' | 'unchanged' | 'absent';
+/**
+ * A helper's result: where it wrote, and what it did there.
+ */
+export interface ConnectionWriteResult {
+    resourceId: string;
+    outcome: ConnectionWriteOutcome;
+}
+/**
+ * An entry a helper may write over: the members the codec read, and the
+ * stored body the write starts from.
+ */
+export interface WritableConnection {
+    entry: ConnectionEntry;
+    body: Record<string, unknown>;
+    etag?: string;
+}
+/**
+ * Whether a store write lost a race. Matched by name, since the store is an
+ * injected seam that may raise from a second copy of was-client.
+ *
+ * @param err {unknown}
+ * @returns {boolean}
+ */
+export declare function isLostConnectionRace(err: unknown): boolean;
+/**
+ * What a `change` callback asks {@link writeConnection} to do on one
+ * attempt: write `body` at the id, or stop with the given outcome and write
+ * nothing.
+ */
+export type ConnectionChange<Stop> = {
+    body: Record<string, unknown>;
+} | {
+    stop: Stop;
+};
+/**
+ * The bounded compare-and-swap loop every directory write runs at one
+ * resource id: the upsert helpers here and the writer arm in `writers.ts`.
+ * Each attempt reads the resource, hands `change` the writable entry (or
+ * `undefined` when none stands), and writes the body it returns under
+ * `ifMatch` (or creates it under `ifNoneMatch`). A `stop` ends the loop with
+ * that outcome and no write. A lost race re-reads and re-applies, and after
+ * the last attempt the last `PreconditionFailedError` is thrown. `change`
+ * may throw a refusal, which ends the loop the same way.
+ *
+ * A stored body this build cannot write over (unparseable, misplaced, or
+ * from a newer build) throws, unless `unwritable` names the outcome to
+ * resolve with instead.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.resourceId {string}
+ * @param options.change {Function}
+ * @param [options.unwritable] {Stop}   the outcome for a body this build
+ *   cannot write over; omitted, such a body throws
+ * @returns {Promise<object>}   the id and the outcome: `created`, `updated`,
+ *   or the `stop` the callback returned
+ */
+export declare function writeConnection<Stop>({ store, hmacKey, resourceId, change, unwritable }: {
+    store: ConnectionsStore;
+    hmacKey: ConnectionIdKey;
+    resourceId: string;
+    change: (current: WritableConnection | undefined) => ConnectionChange<Stop>;
+    unwritable?: Stop;
+}): Promise<{
+    resourceId: string;
+    outcome: 'created' | 'updated' | Stop;
+}>;
+/**
+ * Records a consent on the party's entry: creates the entry, or merges into
+ * it. Each new grant is added by its capability id (one already recorded is
+ * left as stored), `name` is set when it passes the display-name rule (left
+ * as it was otherwise), `origin`, `url`, and `appKey` are set when given,
+ * `retired` is cleared, and `lastSeen` moves to `now`. `firstSeen` is set
+ * only on create, and `label` is never touched. A zero-grant consent writes
+ * too, so an App Connect app with no grants is indexed by its key.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * and a grant delegated to another party or targeting another Space with a
+ * `TypeError`, before anything is written.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID, every grant's controller
+ * @param options.kind {ConnectionKind}   the kind this flow writes
+ * @param options.spaceUrl {string}   this Space's container URL, every
+ *   grant's target prefix
+ * @param options.grants {Array<object>}   `{ zcap, grantKind }` per grant
+ * @param [options.name] {string}   the party's self-declared name
+ * @param [options.origin] {string}   the attested Web origin (App Connect)
+ * @param [options.url] {string}   the canonical app URL (App Connect)
+ * @param [options.appKey] {string}   the app-key Resource id (App Connect)
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export declare function recordGrants({ store, hmacKey, did, kind, spaceUrl, grants, name, origin, url, appKey, now }: {
+    store: ConnectionsStore;
+    hmacKey: ConnectionIdKey;
+    did: string;
+    kind: ConnectionKind;
+    spaceUrl: string;
+    grants: Array<{
+        zcap: object;
+        grantKind: GrantKind;
+    }>;
+    name?: string;
+    origin?: string;
+    url?: string;
+    appKey?: string;
+    now?: Date;
+}): Promise<ConnectionWriteResult>;
+/**
+ * Removes grants from the party's entry by capability id, whatever the
+ * entry's kind. Used by an unshare after its revocation, and by a torn
+ * consent's rollback. An absent entry, or one holding none of the ids,
+ * writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.zcapIds {Iterable<string>}   the capability ids to remove
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export declare function removeGrants({ store, hmacKey, did, zcapIds }: {
+    store: ConnectionsStore;
+    hmacKey: ConnectionIdKey;
+    did: string;
+    zcapIds: Iterable<string>;
+}): Promise<ConnectionWriteResult>;
+/**
+ * Retires the party's entry, of any kind, once a revocation has handled its
+ * grants: empties `grants`, drops `appKey`, and stamps `retired`. `name`,
+ * `label`, `origin`, `url`, `firstSeen`, `lastSeen`, and `writers` stay, so a
+ * departed party keeps resolving. An entry already retired with nothing left
+ * to empty writes nothing, and an absent entry writes nothing.
+ *
+ * Throws when a read finds a grant that passes the reader checks and is not
+ * among `handledZcapIds`: a concurrent consent merged it, and the revocation
+ * must run again before the entry may retire. A grant that fails the reader
+ * checks (another party's controller, a target outside this Space) is not
+ * the party's, and the retirement empties it with the rest.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.handledZcapIds {Iterable<string>}   the capability ids the
+ *   revocation POSTed
+ * @param options.spaceUrl {string}   this Space's container URL
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export declare function retireConnection({ store, hmacKey, did, handledZcapIds, spaceUrl, now }: {
+    store: ConnectionsStore;
+    hmacKey: ConnectionIdKey;
+    did: string;
+    handledZcapIds: Iterable<string>;
+    spaceUrl: string;
+    now?: Date;
+}): Promise<ConnectionWriteResult>;
+/**
+ * Sets the user's `label` on the party's entry, and its `name` when given.
+ * A blank `label` removes the member; an omitted one leaves it, and one
+ * outside the display-name rule is refused with a `TypeError`, since the
+ * user typed it and can shorten it. A `name` outside the rule is ignored. The enrollment approval writes
+ * the code's suggested label as `name` and passes `label` only when the
+ * approver edited it.
+ *
+ * Creates an absent entry only for a wallet client the verified account
+ * document lists (`kind: 'wallet-client'`, its did:key's signing-key
+ * multibase in `enrolledSigningKeys`), and throws for any other absent
+ * party. Refuses an entry of another kind with
+ * {@link ConnectionKindMismatchError}.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.kind {ConnectionKind}   the kind the calling surface lists
+ *   the party as
+ * @param [options.label] {string}   the user's name for the party
+ * @param [options.name] {string}   the party's name (a client's default
+ *   platform label, or an enrollee's suggested label)
+ * @param [options.enrolledSigningKeys] {ReadonlySet<string>}   the enrolled
+ *   clients' signing-key multibases in the verified account document; needed
+ *   to create a wallet client's entry
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export declare function setConnectionLabel({ store, hmacKey, did, kind, label, name, enrolledSigningKeys, now }: {
+    store: ConnectionsStore;
+    hmacKey: ConnectionIdKey;
+    did: string;
+    kind: ConnectionKind;
+    label?: string;
+    name?: string;
+    enrolledSigningKeys?: ReadonlySet<string>;
+    now?: Date;
+}): Promise<ConnectionWriteResult>;
+//# sourceMappingURL=upsert.d.ts.map

package/dist/connections/upsert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upsert.d.ts","sourceRoot":"","sources":["../../src/connections/upsert.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EACV,eAAe,EAEf,cAAc,EAEd,SAAS,EACV,MAAM,YAAY,CAAA;AAKnB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAKlD;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEhD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,sBAAsB,CAAA;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE1D;AAsED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,IAAI,IAC/B;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAA;AAEpD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,EAC1C,KAAK,EACL,OAAO,EACP,UAAU,EACV,MAAM,EACN,UAAU,EACX,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,KAAK,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC3E,UAAU,CAAC,EAAE,IAAI,CAAA;CAClB,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,CAAA;CAAE,CAAC,CAsCzE;AAwGD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,MAAM,EACN,GAAG,EACH,MAAM,EACN,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAgDjC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,OAAO,EACR,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAC1B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmBjC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,cAAc,EACd,QAAQ,EACR,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAsCjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,mBAAmB,EACnB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4DjC"}