@ixo/flow-work 0.5.0 → 0.7.0

package/dist/bounded-contracts.js

@@ -0,0 +1,311 @@
+import { BoundedContractError, decodeBoundedJson, encodeBoundedJson, } from './bounded-codec.js';
+export const BOUNDED_PROTOCOL = 'bounded-v1';
+export const RESOURCE_PROFILE = Object.freeze({
+    id: 'bounded-v1-60mib',
+    recordBytes: 16_384,
+    pageRecords: 128,
+    pageBytes: 256 * 1024,
+    artifactReferenceBytes: 2048,
+    proofBytes: 8192,
+    cursorBytes: 2048,
+    taskBytes: 8 * 1024 * 1024,
+    baselineBytes: 24 * 1024 * 1024,
+    cacheBytes: 4 * 1024 * 1024,
+    taskSlots: 4,
+    ordinarySlots: 3,
+    peakBytes: 60 * 1024 * 1024,
+    pendingRows: 100_000,
+    pendingBytes: 64 * 1024 * 1024,
+    retryAttempts: 32,
+});
+function invalid(detail) {
+    throw new BoundedContractError('INVALID_RECORD', detail);
+}
+function object(value, keys) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        invalid('Expected record');
+    const actual = Object.keys(value);
+    if (actual.length !== keys.length ||
+        actual.some((key) => !keys.includes(key)))
+        invalid('Unexpected record members');
+    return value;
+}
+function text(value, field, maximum = 512) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > maximum)
+        invalid(field);
+    for (let index = 0; index < value.length; index++)
+        if (value.charCodeAt(index) < 32)
+            invalid(field);
+    return value;
+}
+function integer(value, field, minimum = 0, maximum = Number.MAX_SAFE_INTEGER) {
+    if (typeof value !== 'number' ||
+        !Number.isSafeInteger(value) ||
+        value < minimum ||
+        value > maximum)
+        invalid(field);
+    return value;
+}
+export function contentDigest(value) {
+    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value))
+        invalid('Content digest');
+    return value;
+}
+export async function recordDigest(bytes) {
+    if (bytes.byteLength > RESOURCE_PROFILE.recordBytes)
+        throw new BoundedContractError('RESOURCE_LIMIT', 'Record bytes');
+    const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', Uint8Array.from(bytes)));
+    let hex = '';
+    for (const byte of digest)
+        hex += byte.toString(16).padStart(2, '0');
+    return `sha256:${hex}`;
+}
+function context(value) {
+    const result = {
+        issuer: text(value.issuer, 'Issuer'),
+        keyId: text(value.keyId, 'Key id'),
+        audience: text(value.audience, 'Audience'),
+        flowId: text(value.flowId, 'Flow id'),
+        epoch: integer(value.epoch, 'Epoch', 1),
+        issuedAt: integer(value.issuedAt, 'Issue time'),
+        expiresAt: integer(value.expiresAt, 'Expiry time'),
+    };
+    if (result.expiresAt <= result.issuedAt)
+        invalid('Signature lifetime');
+    return result;
+}
+const HEADER_KEYS = [
+    'kind',
+    'protocol',
+    'resourceProfile',
+    'digest',
+    'bytes',
+    'issuer',
+    'keyId',
+    'audience',
+    'flowId',
+    'epoch',
+    'issuedAt',
+    'expiresAt',
+    'signature',
+];
+export function decodeSignedHeader(bytes) {
+    if (bytes.byteLength > RESOURCE_PROFILE.proofBytes)
+        throw new BoundedContractError('RESOURCE_LIMIT', 'Signature header bytes');
+    const value = object(decodeBoundedJson(bytes), HEADER_KEYS);
+    if (value.kind !== 'qi.flow.signed-record')
+        invalid('Signed record kind');
+    if (value.protocol !== BOUNDED_PROTOCOL ||
+        value.resourceProfile !== RESOURCE_PROFILE.id)
+        throw new BoundedContractError('UNSUPPORTED_PROTOCOL', 'Protocol or resource profile');
+    const signature = text(value.signature, 'Signature', 86);
+    if (!/^[A-Za-z0-9_-]{86}$/u.test(signature))
+        invalid('Ed25519 signature encoding');
+    return {
+        kind: 'qi.flow.signed-record',
+        protocol: BOUNDED_PROTOCOL,
+        resourceProfile: RESOURCE_PROFILE.id,
+        digest: contentDigest(value.digest),
+        bytes: integer(value.bytes, 'Record bytes', 1, RESOURCE_PROFILE.recordBytes),
+        ...context(value),
+        signature,
+    };
+}
+function unsigned(header) {
+    return encodeBoundedJson({
+        kind: header.kind,
+        protocol: header.protocol,
+        resourceProfile: header.resourceProfile,
+        digest: header.digest,
+        bytes: header.bytes,
+        ...context(header),
+    });
+}
+function base64url(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary)
+        .replace(/\+/gu, '-')
+        .replace(/\//gu, '_')
+        .replace(/=+$/u, '');
+}
+function signatureBytes(signature) {
+    const binary = atob(signature.replace(/-/gu, '+').replace(/_/gu, '/') + '==');
+    const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    if (bytes.length !== 64 || base64url(bytes) !== signature)
+        invalid('Non-canonical signature');
+    return bytes;
+}
+/** Node emits alg=Ed25519; older workerd expects EdDSA for JWK import. Validate the key, then import its raw public bytes. */
+export async function importBoundedPublicKey(bytes) {
+    if (bytes.byteLength > 4096)
+        throw new BoundedContractError('RESOURCE_LIMIT', 'Public key bytes');
+    const decoded = decodeBoundedJson(bytes);
+    if (!decoded || typeof decoded !== 'object' || Array.isArray(decoded))
+        invalid('Public key record');
+    const allowed = ['kty', 'crv', 'x', 'alg', 'key_ops', 'ext', 'kid', 'use'];
+    if (Object.keys(decoded).some((key) => !allowed.includes(key)))
+        invalid('Unexpected public key field');
+    if (decoded.kty !== 'OKP' || decoded.crv !== 'Ed25519')
+        invalid('Ed25519 public key required');
+    if (decoded.alg !== undefined &&
+        decoded.alg !== 'Ed25519' &&
+        decoded.alg !== 'EdDSA')
+        invalid('Public key algorithm');
+    if (decoded.use !== undefined && decoded.use !== 'sig')
+        invalid('Public key use');
+    if (decoded.ext !== undefined && typeof decoded.ext !== 'boolean')
+        invalid('Public key extractability');
+    if (decoded.kid !== undefined)
+        text(decoded.kid, 'Public key identifier');
+    if (decoded.key_ops !== undefined &&
+        (!Array.isArray(decoded.key_ops) ||
+            decoded.key_ops.length !== 1 ||
+            decoded.key_ops[0] !== 'verify'))
+        invalid('Public key operations');
+    const x = text(decoded.x, 'Public key coordinate', 43);
+    if (!/^[A-Za-z0-9_-]{43}$/u.test(x))
+        invalid('Public key encoding');
+    const binary = atob(x.replace(/-/gu, '+').replace(/_/gu, '/') + '=');
+    const raw = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    if (raw.length !== 32 || base64url(raw) !== x)
+        invalid('Non-canonical public key');
+    return crypto.subtle.importKey('raw', raw, 'Ed25519', false, ['verify']);
+}
+export async function signBoundedRecord(payload, scope, key) {
+    const opaque = 'sign' in key;
+    if (!opaque && (key.algorithm.name !== 'Ed25519' || key.type !== 'private'))
+        invalid('Ed25519 private key required');
+    const bytes = encodeBoundedJson(payload);
+    const header = {
+        kind: 'qi.flow.signed-record',
+        protocol: BOUNDED_PROTOCOL,
+        resourceProfile: RESOURCE_PROFILE.id,
+        ...context(scope),
+        digest: await recordDigest(bytes),
+        bytes: bytes.byteLength,
+    };
+    const signingBytes = Uint8Array.from(unsigned(header));
+    const signed = opaque
+        ? Uint8Array.from(await key.sign(signingBytes))
+        : new Uint8Array(await crypto.subtle.sign('Ed25519', key, signingBytes));
+    if (signed.byteLength !== 64)
+        invalid('Ed25519 signature required');
+    return {
+        header: { ...header, signature: base64url(signed) },
+        payload: bytes,
+    };
+}
+/** The host resolves an authorized issuer key. This signature check does not replace a UCAN grant check. */
+export async function verifyBoundedRecord(headerBytes, payloadBytes, key, expected) {
+    const header = decodeSignedHeader(headerBytes);
+    if (payloadBytes.byteLength !== header.bytes)
+        throw new BoundedContractError('INVALID_SIGNATURE', 'Payload bytes');
+    const payload = Uint8Array.from(payloadBytes);
+    if (key.algorithm.name !== 'Ed25519' || key.type !== 'public')
+        invalid('Ed25519 public key required');
+    integer(expected.now, 'Current time');
+    if (header.issuer !== expected.issuer ||
+        header.keyId !== expected.keyId ||
+        header.audience !== expected.audience ||
+        header.flowId !== expected.flowId ||
+        header.epoch !== expected.epoch ||
+        header.issuedAt > expected.now ||
+        header.expiresAt <= expected.now)
+        throw new BoundedContractError('INVALID_SIGNATURE', 'Signature scope or lifetime');
+    if ((await recordDigest(payload)) !== header.digest)
+        throw new BoundedContractError('INVALID_SIGNATURE', 'Payload digest');
+    const valid = await crypto.subtle.verify('Ed25519', key, Uint8Array.from(signatureBytes(header.signature)), Uint8Array.from(unsigned(header)));
+    if (!valid)
+        throw new BoundedContractError('INVALID_SIGNATURE', 'Signature verification');
+    const record = decodeBoundedJson(payload);
+    const canonical = encodeBoundedJson(record);
+    if (canonical.length !== payload.length ||
+        canonical.some((byte, index) => byte !== payload[index]))
+        invalid('Non-canonical record bytes');
+    return record;
+}
+export function decodeArtifactReference(bytes) {
+    if (bytes.byteLength > RESOURCE_PROFILE.artifactReferenceBytes)
+        throw new BoundedContractError('RESOURCE_LIMIT', 'Artifact reference bytes');
+    const value = object(decodeBoundedJson(bytes), [
+        'kind',
+        'digest',
+        'bytes',
+        'mediaType',
+        'resource',
+        'authorityDigest',
+    ]);
+    if (value.kind !== 'artifact')
+        invalid('Artifact kind');
+    return {
+        kind: 'artifact',
+        digest: contentDigest(value.digest),
+        bytes: integer(value.bytes, 'Artifact bytes'),
+        mediaType: text(value.mediaType, 'Media type', 128),
+        resource: text(value.resource, 'Artifact resource'),
+        authorityDigest: contentDigest(value.authorityDigest),
+    };
+}
+export function decodeManifestNode(bytes) {
+    const value = object(decodeBoundedJson(bytes), [
+        'kind',
+        'protocol',
+        'level',
+        'count',
+        'children',
+    ]);
+    if (value.kind !== 'manifest' || value.protocol !== BOUNDED_PROTOCOL)
+        invalid('Manifest protocol');
+    if (!Array.isArray(value.children) ||
+        value.children.length > RESOURCE_PROFILE.pageRecords)
+        invalid('Manifest children');
+    if (value.children.length === 0 && (value.level !== 0 || value.count !== 0))
+        invalid('Empty manifest');
+    const children = value.children.map((child) => {
+        const ref = object(child, ['digest', 'bytes']);
+        return {
+            digest: contentDigest(ref.digest),
+            bytes: integer(ref.bytes, 'Child bytes', 1, RESOURCE_PROFILE.recordBytes),
+        };
+    });
+    const unique = new Set(children.map((child) => child.digest));
+    if (unique.size !== children.length)
+        invalid('Duplicate manifest child');
+    return {
+        kind: 'manifest',
+        protocol: BOUNDED_PROTOCOL,
+        level: integer(value.level, 'Manifest level', 0, 16),
+        count: integer(value.count, 'Manifest record count', children.length),
+        children,
+    };
+}
+export function negotiateCapabilities(bytes, requiredRecords) {
+    const value = object(decodeBoundedJson(bytes), [
+        'protocol',
+        'resourceProfile',
+        'recordBytes',
+        'pageBytes',
+        'supportedRecords',
+    ]);
+    if (value.protocol !== BOUNDED_PROTOCOL ||
+        value.resourceProfile !== RESOURCE_PROFILE.id)
+        throw new BoundedContractError('UNSUPPORTED_PROTOCOL', 'Protocol or resource profile');
+    if (!Array.isArray(value.supportedRecords))
+        invalid('Record capabilities');
+    const supportedRecords = value.supportedRecords.map((item) => text(item, 'Record capability', 128));
+    const recordBytes = integer(value.recordBytes, 'Record capability', RESOURCE_PROFILE.recordBytes, RESOURCE_PROFILE.recordBytes);
+    const pageBytes = integer(value.pageBytes, 'Page capability', RESOURCE_PROFILE.pageBytes, RESOURCE_PROFILE.pageBytes);
+    if (new Set(supportedRecords).size !== supportedRecords.length ||
+        requiredRecords.some((kind) => !supportedRecords.includes(kind)))
+        throw new BoundedContractError('UNSUPPORTED_PROTOCOL', 'Required record capability');
+    return {
+        protocol: BOUNDED_PROTOCOL,
+        resourceProfile: RESOURCE_PROFILE.id,
+        recordBytes,
+        pageBytes,
+        supportedRecords,
+    };
+}
+//# sourceMappingURL=bounded-contracts.js.map

package/dist/bounded-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-contracts.js","sourceRoot":"","sources":["../src/bounded-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAqB,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,kBAAkB;IACtB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,GAAG;IAChB,SAAS,EAAE,GAAG,GAAG,IAAI;IACrB,sBAAsB,EAAE,IAAI;IAC5B,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC1B,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC3B,SAAS,EAAE,CAAC;IACZ,aAAa,EAAE,CAAC;IAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC3B,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC9B,aAAa,EAAE,EAAE;CAClB,CAAC,CAAC;AA8EH,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AACD,SAAS,MAAM,CACb,KAA8B,EAC9B,IAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,IACE,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEzC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,IAAI,CACX,KAA8B,EAC9B,KAAa,EACb,OAAO,GAAG,GAAG;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAC3E,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;QAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,OAAO,CACd,KAA8B,EAC9B,KAAa,EACb,OAAO,GAAG,CAAC,EACX,OAAO,GAAG,MAAM,CAAC,gBAAgB;IAEjC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC5B,KAAK,GAAG,OAAO;QACf,KAAK,GAAG,OAAO;QAEf,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAA8B;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QACpE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5B,OAAO,KAAsB,CAAC;AAChC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAiB;IAClD,IAAI,KAAK,CAAC,UAAU,GAAG,gBAAgB,CAAC,WAAW;QACjD,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC9D,CAAC;IACF,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC;AACD,SAAS,OAAO,CAAC,KAAuB;IACtC,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;QACpC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;QAClC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC1C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;QACrC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC;KACnD,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,WAAW,GAAG;IAClB,MAAM;IACN,UAAU;IACV,iBAAiB;IACjB,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,UAAU;IACV,WAAW;IACX,WAAW;CACZ,CAAC;AACF,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,IAAI,KAAK,CAAC,UAAU,GAAG,gBAAgB,CAAC,UAAU;QAChD,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1E,IACE,KAAK,CAAC,QAAQ,KAAK,gBAAgB;QACnC,KAAK,CAAC,eAAe,KAAK,gBAAgB,CAAC,EAAE;QAE7C,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,EACtB,8BAA8B,CAC/B,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,gBAAgB;QAC1B,eAAe,EAAE,gBAAgB,CAAC,EAAE;QACpC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QACnC,KAAK,EAAE,OAAO,CACZ,KAAK,CAAC,KAAK,EACX,cAAc,EACd,CAAC,EACD,gBAAgB,CAAC,WAAW,CAC7B;QACD,GAAG,OAAO,CAAC,KAAoC,CAAC;QAChD,SAAS;KACV,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,MAA6C;IAC7D,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,OAAO,CAAC,MAAM,CAAC;KACnB,CAAC,CAAC;AACL,CAAC;AACD,SAAS,SAAS,CAAC,KAAiB;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC;SAChB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS;QACvD,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8HAA8H;AAC9H,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAiB;IAEjB,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI;QACzB,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACnE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QACpD,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACzC,IACE,OAAO,CAAC,GAAG,KAAK,SAAS;QACzB,OAAO,CAAC,GAAG,KAAK,SAAS;QACzB,OAAO,CAAC,GAAG,KAAK,OAAO;QAEvB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK;QACpD,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,SAAS;QAC/D,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAC1E,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAC9B,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC5B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;QAElC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3C,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3E,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAoB,EACpB,KAAuB,EACvB,GAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,IAAI,GAAG,CAAC;IAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;QACzE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAA0C;QACpD,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,gBAAgB;QAC1B,eAAe,EAAE,gBAAgB,CAAC,EAAE;QACpC,GAAG,OAAO,CAAC,KAAK,CAAC;QACjB,MAAM,EAAE,MAAM,YAAY,CAAC,KAAK,CAAC;QACjC,KAAK,EAAE,KAAK,CAAC,UAAU;KACxB,CAAC;IACF,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM;QACnB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE;QAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACpE,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE;QACnD,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AACD,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAuB,EACvB,YAAwB,EACxB,GAAc,EACd,QAOC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,YAAY,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK;QAC1C,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAC3D,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACtC,IACE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACjC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC/B,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QACrC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACjC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC/B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG;QAC9B,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,GAAG;QAEhC,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,6BAA6B,CAC9B,CAAC;IACJ,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM;QACjD,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACtC,SAAS,EACT,GAAG,EACH,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EACjD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAClC,CAAC;IACF,IAAI,CAAC,KAAK;QACR,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,wBAAwB,CACzB,CAAC;IACJ,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,IACE,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QACnC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;QAExD,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAAiB;IACvD,IAAI,KAAK,CAAC,UAAU,GAAG,gBAAgB,CAAC,sBAAsB;QAC5D,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,0BAA0B,CAC3B,CAAC;IACJ,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE;QAC7C,MAAM;QACN,QAAQ;QACR,OAAO;QACP,WAAW;QACX,UAAU;QACV,iBAAiB;KAClB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QACnC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAC7C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC;QACnD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,CAAC;QACnD,eAAe,EAAE,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC;KACtD,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE;QAC7C,MAAM;QACN,UAAU;QACV,OAAO;QACP,OAAO;QACP,UAAU;KACX,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB;QAClE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC9B,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,WAAW;QAEpD,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;QACzE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;YACjC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC;SAC1E,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACzE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC;QACrE,QAAQ;KACT,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,qBAAqB,CACnC,KAAiB,EACjB,eAAkC;IAElC,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE;QAC7C,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,WAAW;QACX,kBAAkB;KACnB,CAAC,CAAC;IACH,IACE,KAAK,CAAC,QAAQ,KAAK,gBAAgB;QACnC,KAAK,CAAC,eAAe,KAAK,gBAAgB,CAAC,EAAE;QAE7C,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,EACtB,8BAA8B,CAC/B,CAAC;IACJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3D,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,CAAC,CACrC,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,CACzB,KAAK,CAAC,WAAW,EACjB,mBAAmB,EACnB,gBAAgB,CAAC,WAAW,EAC5B,gBAAgB,CAAC,WAAW,CAC7B,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,KAAK,CAAC,SAAS,EACf,iBAAiB,EACjB,gBAAgB,CAAC,SAAS,EAC1B,gBAAgB,CAAC,SAAS,CAC3B,CAAC;IACF,IACE,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,MAAM;QAC1D,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEhE,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,EACtB,4BAA4B,CAC7B,CAAC;IACJ,OAAO;QACL,QAAQ,EAAE,gBAAgB;QAC1B,eAAe,EAAE,gBAAgB,CAAC,EAAE;QACpC,WAAW;QACX,SAAS;QACT,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/bounded-definitions.d.ts

@@ -0,0 +1,44 @@
+import { type BoundedJson } from './bounded-codec.js';
+import { BOUNDED_PROTOCOL, signBoundedRecord, type ContentDigest, type RecordReference, type SignatureContext, type SignedRecordHeader } from './bounded-contracts.js';
+type JsonObject = {
+    [key: string]: BoundedJson;
+};
+export interface DefinitionRoot {
+    kind: 'qi.flow.definition-root';
+    protocol: typeof BOUNDED_PROTOCOL;
+    flowId: string;
+    epoch: number;
+    publishedAt: number;
+    parent: ContentDigest | null;
+    title: string;
+    goal: string | null;
+    actionManifestDigest: ContentDigest;
+    records: RecordReference;
+    count: number;
+}
+export interface DefinitionRecord {
+    kind: 'qi.flow.definition-record';
+    protocol: typeof BOUNDED_PROTOCOL;
+    category: 'step' | 'block' | 'participant' | 'connection';
+    id: string;
+    value: JsonObject;
+}
+export declare function validateDefinitionTrigger(value: BoundedJson | undefined): void;
+export declare function decodeDefinitionRoot(bytes: Uint8Array): DefinitionRoot;
+export declare function decodeDefinitionRecord(bytes: Uint8Array): DefinitionRecord;
+/** References to authored blocks and action outputs use the same block namespace. */
+export declare function definitionRecordIdentity(record: DefinitionRecord): {
+    id: string;
+    dependencies: string[];
+};
+export interface DefinitionUploadPort {
+    put(bytes: Uint8Array): Promise<RecordReference>;
+}
+/** Constant-size frontier; never collects the graph or a full list of leaf references. */
+export declare function uploadDefinition(records: AsyncIterable<DefinitionRecord> | Iterable<DefinitionRecord>, metadata: Omit<DefinitionRoot, 'kind' | 'protocol' | 'records' | 'count' | 'epoch' | 'publishedAt'>, scope: SignatureContext, signingKey: Parameters<typeof signBoundedRecord>[2], port: DefinitionUploadPort): Promise<{
+    root: DefinitionRoot;
+    header: SignedRecordHeader;
+    payload: Uint8Array;
+}>;
+export {};
+//# sourceMappingURL=bounded-definitions.d.ts.map

package/dist/bounded-definitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-definitions.d.ts","sourceRoot":"","sources":["../src/bounded-definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,EAIhB,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAEhC,KAAK,UAAU,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,CAAC;AACjD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,yBAAyB,CAAC;IAChC,QAAQ,EAAE,OAAO,gBAAgB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,oBAAoB,EAAE,aAAa,CAAC;IACpC,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,2BAA2B,CAAC;IAClC,QAAQ,EAAE,OAAO,gBAAgB,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;IAC1D,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,UAAU,CAAC;CACnB;AAsDD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,WAAW,GAAG,SAAS,GAC7B,IAAI,CAsDN;AACD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAiCtE;AACD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,gBAAgB,CA8E1E;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAkDA;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAClD;AACD,0FAA0F;AAC1F,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAAG,QAAQ,CAAC,gBAAgB,CAAC,EACrE,QAAQ,EAAE,IAAI,CACZ,cAAc,EACd,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CACpE,EACD,KAAK,EAAE,gBAAgB,EACvB,UAAU,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,EACnD,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC;IACT,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,UAAU,CAAC;CACrB,CAAC,CA0GD"}