@interop/wallet-core 0.94.0 → 0.96.0

package/dist/connections/upsert.js

@@ -0,0 +1,478 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The upsert helpers every flow writes a party's entry through:
+ * `recordGrants` at consent, `removeGrants` at an unshare or a torn
+ * consent's rollback, `retireConnection` when a relationship ends, and
+ * `setConnectionLabel` for the user's rename and the enrollment-time name.
+ *
+ * Each runs `writeConnection`, the one bounded compare-and-swap loop at a
+ * party's resource id, which the writer arm (`writers.ts`) runs too. It reads
+ * the entry, applies its change to the stored body, and writes under
+ * `ifMatch` (or creates under `ifNoneMatch`). A lost race re-reads and
+ * re-applies, up to three attempts, after which the last
+ * `PreconditionFailedError` is thrown. A helper changes only the members it
+ * owns, so a member a newer build added, on the entry or on a grant wrapper,
+ * is written back verbatim. A helper that finds a body it cannot parse, one
+ * whose `version` is above this build's, or one that does not belong at the
+ * id refuses to write, rather than treating the body as absent: overwriting
+ * it would wipe a newer build's grants.
+ */
+import { NotSupportedError } from '@interop/was-client';
+import { errorNameOf } from '../errorName.js';
+import { normalizeDisplayName } from '../labelText.js';
+import { signingKeyMultibaseOfDid } from './didKey.js';
+import { CONNECTION_ENTRY_VERSION, GRANT_KINDS, isWritableConnectionEntry, newConnectionEntry, parseConnectionEntry, parseConnectionZcap } from './entry.js';
+import { ConnectionKindMismatchError } from './errors.js';
+import { connectionGrants, isTargetInSpace } from './grants.js';
+import { claimedResourceId } from './read.js';
+import { connectionResourceId } from './resourceId.js';
+const PRECONDITION_FAILED_ERROR_NAME = 'PreconditionFailedError';
+const WRITE_ATTEMPTS = 3;
+/**
+ * Whether a store write lost a race. Matched by name, since the store is an
+ * injected seam that may raise from a second copy of was-client.
+ *
+ * @param err {unknown}
+ * @returns {boolean}
+ */
+export function isLostConnectionRace(err) {
+    return errorNameOf(err) === PRECONDITION_FAILED_ERROR_NAME;
+}
+/**
+ * The ETag a write over an existing resource pins to. A read that carried
+ * none would send the write unconditionally, so it is refused instead.
+ *
+ * @param options {object}
+ * @param options.resourceId {string}
+ * @param [options.etag] {string}
+ * @returns {string}
+ */
+function requireConnectionEtag({ resourceId, etag }) {
+    if (etag === undefined) {
+        throw new NotSupportedError(`Cannot update connections entry "${resourceId}": its read returned ` +
+            'no ETag, so the write would go out unconditionally. A browser ' +
+            "client needs `ETag` in the server's `Access-Control-Expose-Headers`.");
+    }
+    return etag;
+}
+/**
+ * Reads a stored body as an entry this build may write over, or throws. The
+ * body must sit at the id its own members derive to, parse, and carry this
+ * build's `version`.
+ *
+ * @param options {object}
+ * @param options.resourceId {string}
+ * @param options.stored {object}   the store's `get` result
+ * @param options.hmacKey {ConnectionIdKey}
+ * @returns {Promise<WritableConnection>}
+ */
+async function writableConnection({ resourceId, stored, hmacKey }) {
+    const claimed = await claimedResourceId({ body: stored.body, hmacKey });
+    const entry = parseConnectionEntry(stored.body);
+    if (claimed !== resourceId || entry === undefined) {
+        throw new Error(`The connections entry at "${resourceId}" cannot be parsed as the ` +
+            'entry for this id; this build refuses to write over it.');
+    }
+    if (!isWritableConnectionEntry(entry)) {
+        throw new Error(`The connections entry at "${resourceId}" carries version ` +
+            `${entry.version}, newer than this build's ` +
+            `${CONNECTION_ENTRY_VERSION}; this build refuses to write over it.`);
+    }
+    return {
+        entry,
+        body: stored.body,
+        ...(stored.etag !== undefined && { etag: stored.etag })
+    };
+}
+/**
+ * The bounded compare-and-swap loop every directory write runs at one
+ * resource id: the upsert helpers here and the writer arm in `writers.ts`.
+ * Each attempt reads the resource, hands `change` the writable entry (or
+ * `undefined` when none stands), and writes the body it returns under
+ * `ifMatch` (or creates it under `ifNoneMatch`). A `stop` ends the loop with
+ * that outcome and no write. A lost race re-reads and re-applies, and after
+ * the last attempt the last `PreconditionFailedError` is thrown. `change`
+ * may throw a refusal, which ends the loop the same way.
+ *
+ * A stored body this build cannot write over (unparseable, misplaced, or
+ * from a newer build) throws, unless `unwritable` names the outcome to
+ * resolve with instead.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.resourceId {string}
+ * @param options.change {Function}
+ * @param [options.unwritable] {Stop}   the outcome for a body this build
+ *   cannot write over; omitted, such a body throws
+ * @returns {Promise<object>}   the id and the outcome: `created`, `updated`,
+ *   or the `stop` the callback returned
+ */
+export async function writeConnection({ store, hmacKey, resourceId, change, unwritable }) {
+    let lastRace;
+    for (let attempt = 0; attempt < WRITE_ATTEMPTS; attempt++) {
+        const stored = await store.get({ resourceId });
+        let current;
+        if (stored !== undefined) {
+            try {
+                current = await writableConnection({ resourceId, stored, hmacKey });
+            }
+            catch (err) {
+                if (unwritable === undefined) {
+                    throw err;
+                }
+                return { resourceId, outcome: unwritable };
+            }
+        }
+        const next = change(current);
+        if ('stop' in next) {
+            return { resourceId, outcome: next.stop };
+        }
+        try {
+            if (current === undefined) {
+                await store.put({ resourceId, body: next.body, ifNoneMatch: true });
+                return { resourceId, outcome: 'created' };
+            }
+            await store.put({
+                resourceId,
+                body: next.body,
+                ifMatch: requireConnectionEtag({ resourceId, etag: current.etag })
+            });
+            return { resourceId, outcome: 'updated' };
+        }
+        catch (err) {
+            if (!isLostConnectionRace(err)) {
+                throw err;
+            }
+            lastRace = err;
+        }
+    }
+    throw lastRace;
+}
+/**
+ * {@link writeConnection} for the helpers here, keyed by the party's DID. A
+ * helper with nothing to write stops with `absent` (no entry at the id) or
+ * `unchanged`.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.change {Function}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+async function writePartyConnection({ store, hmacKey, did, change }) {
+    return writeConnection({
+        store,
+        hmacKey,
+        resourceId: await connectionResourceId({ hmacKey, did }),
+        change
+    });
+}
+/**
+ * Refuses a stored entry of another kind than the writing flow's.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.kind {string}
+ */
+function assertKind({ entry, kind }) {
+    if (entry.kind !== kind) {
+        throw new ConnectionKindMismatchError({
+            expectedKind: kind,
+            foundKind: entry.kind
+        });
+    }
+}
+/**
+ * The capability of one grant to record, checked strictly: its known members
+ * well-formed, its `controller` the party's DID, its `invocationTarget` under
+ * this Space, its kind one this build writes. The target check is the same
+ * one every reader applies, so a grant that is stored is a grant the
+ * revocation index will see.
+ *
+ * @param options {object}
+ * @param options.did {string}
+ * @param options.spaceUrl {string}
+ * @param options.grant {object}
+ * @returns {ConnectionZcap}
+ */
+function checkedGrant({ did, spaceUrl, grant }) {
+    const zcap = parseConnectionZcap(grant.zcap);
+    if (zcap === undefined) {
+        throw new TypeError('A grant to record must carry a capability with an id, a controller, ' +
+            'and an invocation target.');
+    }
+    if (zcap.controller !== did) {
+        throw new TypeError(`A grant to record must be delegated to the party "${did}"; its ` +
+            `controller is "${zcap.controller}".`);
+    }
+    if (!isTargetInSpace({ target: zcap.invocationTarget, spaceUrl })) {
+        throw new TypeError('A grant to record must target this Space; its invocation target is ' +
+            `"${zcap.invocationTarget}".`);
+    }
+    if (!GRANT_KINDS.includes(grant.grantKind)) {
+        throw new TypeError(`Unknown grant kind "${grant.grantKind}".`);
+    }
+    return zcap;
+}
+/**
+ * Records a consent on the party's entry: creates the entry, or merges into
+ * it. Each new grant is added by its capability id (one already recorded is
+ * left as stored), `name` is set when it passes the display-name rule (left
+ * as it was otherwise), `origin`, `url`, and `appKey` are set when given,
+ * `retired` is cleared, and `lastSeen` moves to `now`. `firstSeen` is set
+ * only on create, and `label` is never touched. A zero-grant consent writes
+ * too, so an App Connect app with no grants is indexed by its key.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * and a grant delegated to another party or targeting another Space with a
+ * `TypeError`, before anything is written. Without `spaceUrl` (a session with
+ * no Space, which delegates nothing) only a zero-grant write proceeds, and a
+ * call carrying any grant throws a `TypeError`.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID, every grant's controller
+ * @param options.kind {ConnectionKind}   the kind this flow writes
+ * @param [options.spaceUrl] {string}   this Space's container URL, every
+ *   grant's target prefix; absent on a session with no Space
+ * @param options.grants {Array<object>}   `{ zcap, grantKind }` per grant
+ * @param [options.name] {string}   the party's self-declared name
+ * @param [options.origin] {string}   the attested Web origin (App Connect)
+ * @param [options.url] {string}   the canonical app URL (App Connect)
+ * @param [options.appKey] {string}   the app-key Resource id (App Connect)
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function recordGrants({ store, hmacKey, did, kind, spaceUrl, grants, name, origin, url, appKey, now = new Date() }) {
+    const stamp = now.toISOString();
+    const recorded = [];
+    const seen = new Set();
+    for (const grant of grants) {
+        if (spaceUrl === undefined) {
+            throw new TypeError("A grant to record needs this Space's container URL; a write with " +
+                'no Space records no grants.');
+        }
+        const zcap = checkedGrant({ did, spaceUrl, grant });
+        if (!seen.has(zcap.id)) {
+            seen.add(zcap.id);
+            recorded.push({ zcap, grantKind: grant.grantKind, grantedAt: stamp });
+        }
+    }
+    const normalizedName = name === undefined ? undefined : normalizeDisplayName({ value: name });
+    const declared = {
+        ...(normalizedName !== undefined && { name: normalizedName }),
+        ...(origin !== undefined && { origin }),
+        ...(url !== undefined && { url }),
+        ...(appKey !== undefined && { appKey })
+    };
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return {
+                    body: {
+                        ...newConnectionEntry({ kind, did, now }),
+                        ...declared,
+                        grants: recorded
+                    }
+                };
+            }
+            assertKind({ entry: current.entry, kind });
+            const held = new Set(current.entry.grants.map(grant => grant.zcap.id));
+            const body = {
+                ...current.body,
+                ...declared,
+                lastSeen: stamp,
+                grants: [
+                    ...current.entry.grants,
+                    ...recorded.filter(grant => !held.has(grant.zcap.id))
+                ]
+            };
+            delete body.retired;
+            return { body };
+        }
+    });
+}
+/**
+ * Removes grants from the party's entry by capability id, whatever the
+ * entry's kind. Used by an unshare after its revocation, and by a torn
+ * consent's rollback. An absent entry, or one holding none of the ids,
+ * writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.zcapIds {Iterable<string>}   the capability ids to remove
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function removeGrants({ store, hmacKey, did, zcapIds }) {
+    const removing = new Set(zcapIds);
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return { stop: 'absent' };
+            }
+            const kept = current.entry.grants.filter(grant => !removing.has(grant.zcap.id));
+            if (kept.length === current.entry.grants.length) {
+                return { stop: 'unchanged' };
+            }
+            return { body: { ...current.body, grants: kept } };
+        }
+    });
+}
+/**
+ * Retires the party's entry, of any kind, once a revocation has handled its
+ * grants: empties `grants`, drops `appKey`, and stamps `retired`. `name`,
+ * `label`, `origin`, `url`, `firstSeen`, `lastSeen`, and `writers` stay, so a
+ * departed party keeps resolving. An entry already retired with nothing left
+ * to empty writes nothing, and an absent entry writes nothing.
+ *
+ * Throws when a read finds a grant that passes the reader checks and is not
+ * among `handledZcapIds`: a concurrent consent merged it, and the revocation
+ * must run again before the entry may retire. A grant that fails the reader
+ * checks (another party's controller, a target outside this Space) is not
+ * the party's, and the retirement empties it with the rest. Without
+ * `spaceUrl` (a session with no Space, which delegates nothing) no grant can
+ * be the party's, so none counts as unhandled and the retirement empties
+ * them all.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.handledZcapIds {Iterable<string>}   the capability ids the
+ *   revocation POSTed
+ * @param [options.spaceUrl] {string}   this Space's container URL, every
+ *   session with a Space passes it
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function retireConnection({ store, hmacKey, did, handledZcapIds, spaceUrl, now = new Date() }) {
+    const handled = new Set(handledZcapIds);
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return { stop: 'absent' };
+            }
+            const partyGrants = spaceUrl === undefined
+                ? []
+                : connectionGrants({ entry: current.entry, spaceUrl });
+            const unhandled = partyGrants.filter(grant => !handled.has(grant.zcapId));
+            if (unhandled.length > 0) {
+                throw new Error(`The connections entry carries ${unhandled.length} grant(s) this ` +
+                    'revocation did not handle (a consent merged them since); the ' +
+                    'revocation must run again before the entry retires.');
+            }
+            const { entry } = current;
+            if (entry.retired !== undefined &&
+                entry.grants.length === 0 &&
+                entry.appKey === undefined) {
+                return { stop: 'unchanged' };
+            }
+            const body = {
+                ...current.body,
+                grants: [],
+                retired: entry.retired ?? now.toISOString()
+            };
+            delete body.appKey;
+            return { body };
+        }
+    });
+}
+/**
+ * Sets the user's `label` on the party's entry, and its `name` when given.
+ * A blank `label` removes the member; an omitted one leaves it, and one
+ * outside the display-name rule is refused with a `TypeError`, since the
+ * user typed it and can shorten it. A `name` outside the rule is ignored. The enrollment approval writes
+ * the code's suggested label as `name` and passes `label` only when the
+ * approver edited it.
+ *
+ * Creates an absent entry only for a wallet client the verified account
+ * document lists (`kind: 'wallet-client'`, its did:key's signing-key
+ * multibase in `enrolledSigningKeys`), and throws for any other absent
+ * party. Refuses an entry of another kind with
+ * {@link ConnectionKindMismatchError}.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.kind {ConnectionKind}   the kind the calling surface lists
+ *   the party as
+ * @param [options.label] {string}   the user's name for the party
+ * @param [options.name] {string}   the party's name (a client's default
+ *   platform label, or an enrollee's suggested label)
+ * @param [options.enrolledSigningKeys] {ReadonlySet<string>}   the enrolled
+ *   clients' signing-key multibases in the verified account document; needed
+ *   to create a wallet client's entry
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function setConnectionLabel({ store, hmacKey, did, kind, label, name, enrolledSigningKeys, now = new Date() }) {
+    const trimmedLabel = label?.trim();
+    const normalizedLabel = trimmedLabel
+        ? normalizeDisplayName({ value: trimmedLabel })
+        : undefined;
+    if (trimmedLabel && normalizedLabel === undefined) {
+        throw new TypeError('A label is 1 to 64 code points once control and bidi characters are ' +
+            'stripped.');
+    }
+    const normalizedName = name === undefined ? undefined : normalizeDisplayName({ value: name });
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                const multibase = signingKeyMultibaseOfDid({ did });
+                if (kind !== 'wallet-client' ||
+                    multibase === undefined ||
+                    enrolledSigningKeys?.has(multibase) !== true) {
+                    throw new Error('No connections entry stands for this party, and one is created ' +
+                        'here only for a wallet client the verified account document ' +
+                        'lists.');
+                }
+                return {
+                    body: {
+                        ...newConnectionEntry({ kind, did, now }),
+                        ...(normalizedName !== undefined && { name: normalizedName }),
+                        ...(normalizedLabel !== undefined && { label: normalizedLabel })
+                    }
+                };
+            }
+            assertKind({ entry: current.entry, kind });
+            const body = { ...current.body };
+            if (trimmedLabel !== undefined) {
+                if (normalizedLabel !== undefined) {
+                    body.label = normalizedLabel;
+                }
+                else {
+                    delete body.label;
+                }
+            }
+            if (normalizedName !== undefined) {
+                body.name = normalizedName;
+            }
+            if (body.label === current.body.label &&
+                body.name === current.body.name) {
+                return { stop: 'unchanged' };
+            }
+            return { body };
+        }
+    });
+}
+//# sourceMappingURL=upsert.js.map

package/dist/connections/upsert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upsert.js","sourceRoot":"","sources":["../../src/connections/upsert.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EACL,wBAAwB,EACxB,WAAW,EACX,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,YAAY,CAAA;AAQnB,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAItD,MAAM,8BAA8B,GAAG,yBAAyB,CAAA;AAChE,MAAM,cAAc,GAAG,CAAC,CAAA;AA+BxB;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,8BAA8B,CAAA;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,EAC7B,UAAU,EACV,IAAI,EAIL;IACC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,oCAAoC,UAAU,uBAAuB;YACnE,gEAAgE;YAChE,sEAAsE,CACzE,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,kBAAkB,CAAC,EAChC,UAAU,EACV,MAAM,EACN,OAAO,EAKR;IACC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,OAAO,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,6BAA6B,UAAU,4BAA4B;YACjE,yDAAyD,CAC5D,CAAA;IACH,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,6BAA6B,UAAU,oBAAoB;YACzD,GAAG,KAAK,CAAC,OAAO,4BAA4B;YAC5C,GAAG,wBAAwB,wCAAwC,CACtE,CAAA;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,IAAI,EAAE,MAAM,CAAC,IAA+B;QAC5C,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;KACxD,CAAA;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAO,EAC1C,KAAK,EACL,OAAO,EACP,UAAU,EACV,MAAM,EACN,UAAU,EAOX;IACC,IAAI,QAAiB,CAAA;IACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QAC9C,IAAI,OAAuC,CAAA;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YACrE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QAC5B,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3C,CAAC;QACD,IAAI,CAAC;YACH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;gBACnE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;YAC3C,CAAC;YACD,MAAM,KAAK,CAAC,GAAG,CAAC;gBACd,UAAU;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,qBAAqB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;aACnE,CAAC,CAAA;YACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,GAAG,CAAA;YACX,CAAC;YACD,QAAQ,GAAG,GAAG,CAAA;QAChB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB,CAAC,EAClC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EAQP;IACC,OAAO,eAAe,CAAC;QACrB,KAAK;QACL,OAAO;QACP,UAAU,EAAE,MAAM,oBAAoB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACxD,MAAM;KACP,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,EAClB,KAAK,EACL,IAAI,EAIL;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,2BAA2B,CAAC;YACpC,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,KAAK,CAAC,IAAI;SACtB,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,EACpB,GAAG,EACH,QAAQ,EACR,KAAK,EAKN;IACC,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CACjB,sEAAsE;YACpE,2BAA2B,CAC9B,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,qDAAqD,GAAG,SAAS;YAC/D,kBAAkB,IAAI,CAAC,UAAU,IAAI,CACxC,CAAA;IACH,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CACjB,qEAAqE;YACnE,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAChC,CAAA;IACH,CAAC;IACD,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,uBAAuB,KAAK,CAAC,SAAS,IAAI,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,MAAM,EACN,GAAG,EACH,MAAM,EACN,GAAG,GAAG,IAAI,IAAI,EAAE,EAajB;IACC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CACjB,mEAAmE;gBACjE,6BAA6B,CAChC,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAClB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAA;IACD,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO;oBACL,IAAI,EAAE;wBACJ,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;wBACzC,GAAG,QAAQ;wBACX,MAAM,EAAE,QAAQ;qBACjB;iBACF,CAAA;YACH,CAAC;YACD,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YACtE,MAAM,IAAI,GAA4B;gBACpC,GAAG,OAAO,CAAC,IAAI;gBACf,GAAG,QAAQ;gBACX,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE;oBACN,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM;oBACvB,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;iBACtD;aACF,CAAA;YACD,OAAO,IAAI,CAAC,OAAO,CAAA;YACnB,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,OAAO,EAMR;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IACjC,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CACtC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAA;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAA;QACpD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,cAAc,EACd,QAAQ,EACR,GAAG,GAAG,IAAI,IAAI,EAAE,EAQjB;IACC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAA;IACvC,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,WAAW,GACf,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;YACzE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,iCAAiC,SAAS,CAAC,MAAM,iBAAiB;oBAChE,+DAA+D;oBAC/D,qDAAqD,CACxD,CAAA;YACH,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;gBAC3B,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBACzB,KAAK,CAAC,MAAM,KAAK,SAAS,EAC1B,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,MAAM,IAAI,GAA4B;gBACpC,GAAG,OAAO,CAAC,IAAI;gBACf,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE;aAC5C,CAAA;YACD,OAAO,IAAI,CAAC,MAAM,CAAA;YAClB,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,mBAAmB,EACnB,GAAG,GAAG,IAAI,IAAI,EAAE,EAUjB;IACC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAI,EAAE,CAAA;IAClC,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,YAAY,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,sEAAsE;YACpE,WAAW,CACd,CAAA;IACH,CAAC;IACD,MAAM,cAAc,GAClB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxE,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;gBACnD,IACE,IAAI,KAAK,eAAe;oBACxB,SAAS,KAAK,SAAS;oBACvB,mBAAmB,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAC5C,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,iEAAiE;wBAC/D,8DAA8D;wBAC9D,QAAQ,CACX,CAAA;gBACH,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE;wBACJ,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;wBACzC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;wBAC7D,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;qBACjE;iBACF,CAAA;YACH,CAAC;YACD,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1C,MAAM,IAAI,GAA4B,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;YACzD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;oBAClC,IAAI,CAAC,KAAK,GAAG,eAAe,CAAA;gBAC9B,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAC,KAAK,CAAA;gBACnB,CAAC;YACH,CAAC;YACD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;YAC5B,CAAC;YACD,IACE,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK;gBACjC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,EAC/B,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}