@kehto/shell 0.19.2 → 0.20.0

package/README.md

@@ -15,9 +15,11 @@ pnpm add @kehto/shell
 ## Published Napplet Compatibility
 
 `@kehto/shell` publishes against `@napplet/core` and `@napplet/nap`
-`>=0.31.0 <0.32.0`. The installed core/nap 0.31.0 contracts are from source
-`7b675622e13870628ce174833d7b2a33cf32a0ab` and release
-`03ad65b66413e5798536ef48695ffc4c2508f2c3`.
+`>=0.31.0 <0.32.0`. The installed core 0.31.1 / nap 0.31.2 contracts follow
+NAP-INTENT authority `5ac0490461ca6fec2f0d2e45b4835cf9bc08de24`, napplet/web#199
+source `3037200c932488f14f7f369b8583c39c9c16510a` / merge
+`b3f0007867eac109fa4917fac9c285d3b7cc6155`, and Version Packages #198 release
+source `dc1d24153c759152b6ba31a6ec9bea967798f2df`.
 
 ## Overview
 
@@ -28,11 +30,11 @@ The primary entry point is `createShellBridge()` — it owns the postMessage lis
 Current draft behaviors this package enforces:
 
 - The shell does not inject a host-provided nostr object into napplets — NIP-5D explicitly forbids napplet-visible signing. Napplets call `relay.publish` / `relay.publishEncrypted` and the shell mediates the signing flow internally (NIP-44 default, NIP-04 opt-in for encrypted envelopes).
-- `injectNappletNamespacePrelude()` implements the NIP-5D injected-domain bootstrap and mandatory NAP-SHELL shim: hosts prepend it to `srcdoc` outside verified artifact bytes, install the parent-bound `shell.init` receiver, emit one `shell.ready`, and expose callable NAP interfaces before authored scripts run. Optional namespaces are filtered to the bare-domain allowlist; `shell` is always retained. Published core 0.31.0 and shim 0.29.0 omit generic mandatory shell, so Kehto retains this host-owned prelude under NAP-SHELL `5ac0490461ca6fec2f0d2e45b4835cf9bc08de24` until an upstream correction is reviewed.
+- `injectNappletNamespacePrelude()` implements the NIP-5D injected-domain bootstrap and mandatory NAP-SHELL shim: hosts prepend it to `srcdoc` outside verified artifact bytes, install the parent-bound `shell.init` receiver, emit one `shell.ready`, and expose callable NAP interfaces before authored scripts run. Optional namespaces are filtered to the bare-domain allowlist; `shell` is always retained. Published core 0.31.1 and shim 0.29.2 omit generic mandatory shell, so Kehto retains this host-owned prelude under NAP-SHELL `5ac0490461ca6fec2f0d2e45b4835cf9bc08de24` until an upstream correction is reviewed.
 - `window.napplet.shell.supports(domain)` answers synchronously and locally from the cached first `shell.init` environment. It returns `false` before `shell.init`, for unknown values, and for domains that are not live and granted to that napplet; it never sends a support-query message.
 - Five optional per-domain proxies — `createIdentityProxy`, `createThemeProxy`, `createKeysProxy`, `createMediaProxy`, `createNotifyProxy` — can be composed between napplet and runtime to intercept request traffic per NAP. They are NOT wired by default. Identity/theme proxy `emit()` compatibility members fail closed; hosts must deliver automatic changes through `ShellBridge.publishIdentityChanged()` / `publishTheme()`, which enforce live session, granted domain, and current ACL.
 - `keys.forward` is napplet-to-shell only. Active napplets suppress locally-bound keys from `keys.bindings` before forwarding; shell-initiated action triggers use `keys.action`.
-- `buildShellCapabilities()` advertises only live domains (including `dm` when the host adapter provides `hooks.dm`); disabled domains are absent from the delivered `domains` and named services snapshots.
+- `buildShellCapabilities()` advertises only live domains. Registered `dm` and `fs` services are injected only when their handlers exist; disabled domains are absent from the delivered `domains` and named services snapshots.
 
 ### NAP-INC binding and channel contract
 
@@ -54,7 +56,7 @@ dispatch, and does not infer payload kinds. Runtime delivery supplies the
 **runtime-attested dTag**; no caller sender is accepted, topic source exclusion
 is runtime-owned, and IDs and payloads are opaque.
 
-Merged NAP-INC and released `@napplet/nap@0.31.0` both deliver one `IncEvent`
+Merged NAP-INC and released `@napplet/nap@0.31.2` both deliver one `IncEvent`
 to `on(topic, callback)`.
 
 For channels, runtime ACL checks are open-only rather than per-message. The

package/dist/index.js

@@ -999,7 +999,8 @@ var SERVICE_ONLY_DOMAINS = [
   "ble",
   "webrtc",
   "dm",
-  "count"
+  "count",
+  "fs"
 ];
 function buildShellCapabilities(hooks) {
   const disabled = new Set(hooks.capabilities?.disabledDomains ?? []);
@@ -1046,8 +1047,6 @@ function isServiceDomainLive(hooks, domain) {
       return hooks.ble?.isAvailable() === true;
     case "webrtc":
       return hooks.webrtc?.isAvailable() === true;
-    case "dm":
-      return hooks.dm !== void 0;
     default:
       return true;
   }
@@ -2433,6 +2432,30 @@ function nappletNamespacePrelude(domains) {
       }
     };
   }
+  function makeFs() {
+    const withOptions = (payload, options) => {
+      if (options !== void 0) payload.options = options;
+      return payload;
+    };
+    const req = (action, payload, map) => request({ type: `fs.${action}`, ...payload }, `fs.${action}.result`, map);
+    return {
+      info: () => req("info", {}, (msg) => fieldOrThrow(msg, "info", "fs.info.result missing info")),
+      pickFile: (options) => req("pickFile", withOptions({}, options), (msg) => fieldOrThrow(msg, "result", "fs.pickFile.result missing result")),
+      pickFiles: (options) => req("pickFiles", withOptions({}, options), (msg) => fieldOrThrow(msg, "result", "fs.pickFiles.result missing result")),
+      pickDirectory: (options) => req("pickDirectory", withOptions({}, options), (msg) => fieldOrThrow(msg, "result", "fs.pickDirectory.result missing result")),
+      pickSaveFile: (options) => req("pickSaveFile", withOptions({}, options), (msg) => fieldOrThrow(msg, "result", "fs.pickSaveFile.result missing result")),
+      stat: (path) => req("stat", { path }, (msg) => fieldOrThrow(msg, "metadata", "fs.stat.result missing metadata")),
+      list: (path) => req("list", { path }, (msg) => fieldOrThrow(msg, "entries", "fs.list.result missing entries")),
+      read: (path, options) => req("read", withOptions({ path }, options), (msg) => fieldOrThrow(msg, "result", "fs.read.result missing result")),
+      write: (path, data, options) => req("write", withOptions({ path, data }, options), (msg) => fieldOrThrow(msg, "result", "fs.write.result missing result")),
+      mkdir: (path, options) => req("mkdir", withOptions({ path }, options), (msg) => voidResult(msg, "fs mkdir failed")),
+      remove: (path, recursive) => req("remove", { path, ...recursive === void 0 ? {} : { recursive } }, (msg) => voidResult(msg, "fs remove failed")),
+      move: (fromPath, toPath) => req("move", { fromPath, toPath }, (msg) => voidResult(msg, "fs move failed")),
+      watch: (path, options) => req("watch", withOptions({ path }, options), (msg) => fieldOrThrow(msg, "watchId", "fs.watch.result missing watchId")),
+      unwatch: (watchId) => req("unwatch", { watchId }, (msg) => voidResult(msg, "fs unwatch failed")),
+      onChanged: (callback) => domainEventHandle("fs.changed", callback, (msg) => msg.change)
+    };
+  }
   const shell = makeShell();
   let inc;
   let identity;
@@ -2502,6 +2525,8 @@ function nappletNamespacePrelude(domains) {
         return makeSerial();
       case "dm":
         return makeDm();
+      case "fs":
+        return makeFs();
       default:
         return {};
     }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/shell-bridge.ts","../src/hooks-adapter.ts","../src/origin-registry.ts","../src/session-registry.ts","../src/acl-store.ts","../src/manifest-cache.ts","../src/audio-manager.ts","../src/shell-init.ts","../src/shell-ready.ts","../src/napplet-namespace.ts","../src/index.ts","../src/topics.ts","../src/identity-proxy.ts","../src/theme-proxy.ts","../src/keys-proxy.ts","../src/media-proxy.ts","../src/notify-proxy.ts"],"sourcesContent":["\nimport { createRuntime, type ConsentRequest, type Runtime } from '@kehto/runtime';\nimport { adaptHooks } from './hooks-adapter.js';\nimport { originRegistry } from './origin-registry.js';\nimport { nappKeyRegistry } from './session-registry.js';\nimport { aclStore } from './acl-store.js';\nimport { manifestCache } from './manifest-cache.js';\nimport { audioManager } from './audio-manager.js';\nimport type { ShellAdapter, UnroutedMessageInfo } from './types.js';\nimport type { NappletMessage } from '@napplet/core';\nimport type { Theme } from '@napplet/nap/theme/types';\nimport { createShellReadyState, handleShellReady } from './shell-ready.js';\n\n/**\n * Shell-side message bridge that handles NIP-5D communication with napplet iframes.\n *\n * The bridge acts as a browser adapter: it receives raw MessageEvents from\n * window.addEventListener('message', ...), extracts the source Window, resolves\n * it to a windowId via originRegistry, and delegates NIP-5D envelope messages\n * to the runtime engine. The shell.ready/shell.init capability handshake is\n * handled locally within the bridge and never forwarded to the runtime.\n *\n * @example\n * ```ts\n * import { createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * window.addEventListener('message', bridge.handleMessage);\n * ```\n */\nexport interface ShellBridge {\n  /**\n   * Handle an incoming postMessage from a napplet iframe.\n   *\n   * Only NIP-5D envelope objects (plain objects with a `.type` string) are\n   * accepted. NIP-01 arrays and all other message shapes are silently dropped\n   * (clean break — no legacy array fallback).\n   *\n   * shell.ready messages are handled locally: the bridge responds with shell.init\n   * containing the capability set and registered service list. All other envelopes\n   * are delegated to the runtime's NAP domain dispatch.\n   *\n   * @param event - The raw MessageEvent from window.addEventListener('message', ...)\n   * @example\n   * ```ts\n   * window.addEventListener('message', bridge.handleMessage);\n   * ```\n   */\n  handleMessage(event: MessageEvent): void;\n\n  /**\n   * Inject a shell-originated event into subscription delivery. Under NIP-5D,\n   * shell-originated events are forwarded to napplets as inc.event envelope\n   * messages. The runtime's injectEvent() handles the per-session routing.\n   *\n   * v1.10 hard-removed the v1.8 soft-rename compatibility branch for the\n   * old `auth:identity-changed` topic. Use the canonical `identity:changed`\n   * topic for identity-change pushes.\n   *\n   * @param topic - The event topic tag value. Forwarded exactly once.\n   * @param payload - The event content\n   * @example\n   * ```ts\n   * bridge.injectEvent('identity:changed', { pubkey: userPubkey });\n   * ```\n   */\n  injectEvent(topic: string, payload: unknown): void;\n\n  /**\n   * Destroy the bridge instance, cleaning up all internal state.\n   * Persists manifest cache and clears all subscriptions, buffers, and registries.\n   * Call when the shell is shutting down or the bridge is no longer needed.\n   *\n   * @example\n   * ```ts\n   * bridge.destroy();\n   * ```\n   */\n  destroy(): void;\n\n  /**\n   * Register a handler for consent requests on destructive signing kinds.\n   * Called when a napplet requests signing for kinds 0, 3, 5, or 10002.\n   *\n   * @param handler - Callback receiving the consent request with a resolve function\n   * @example\n   * ```ts\n   * bridge.registerConsentHandler((request) => {\n   *   const allowed = confirm(`Allow signing kind ${request.event.kind}?`);\n   *   request.resolve(allowed);\n   * });\n   * ```\n   */\n  registerConsentHandler(handler: (request: ConsentRequest) => void): void;\n\n  /**\n   * Publish a theme update to each eligible napplet.\n   *\n   * Posts a `theme.changed` envelope (shell → napplet push) to every\n   * live authenticated session whose frozen environment grants `theme` and\n   * whose current ACL grants `theme:read`. Stale or ineligible sessions are\n   * skipped before origin-registry delivery; recipient code is not trusted\n   * to enforce host authorization.\n   *\n   * @param theme - The new theme payload to broadcast.\n   * @example\n   * ```ts\n   * bridge.publishTheme({\n   *   colors: { background: '#0a0a0a', text: '#e0e0e0', primary: '#7aa2f7' },\n   *   title: 'Dark',\n   * });\n   * ```\n   */\n  publishTheme(theme: Theme): void;\n\n  /**\n   * Publish the current shell-user identity to every loaded napplet.\n   *\n   * Posts an `identity.changed` envelope (shell → napplet push) with the\n   * current user pubkey. An empty pubkey means no signer/user identity is\n   * currently connected. This is distinct from NIP-5D napplet session identity,\n   * which remains source-bound at iframe creation.\n   *\n   * @param pubkey - Current user's hex pubkey, or empty string when signed out.\n   */\n  publishIdentityChanged(pubkey: string): void;\n\n  /**\n   * Access the underlying runtime instance for advanced use cases.\n   * Provides direct access to the runtime's sessionRegistry, aclState,\n   * and manifestCache.\n   */\n  readonly runtime: Runtime;\n\n}\n\n/**\n * Create a ShellBridge instance with dependency injection via hooks.\n *\n * Internally creates a Runtime from @kehto/runtime and adapts the\n * browser-oriented ShellAdapter into environment-agnostic RuntimeAdapter.\n *\n * @param hooks - Host application provides relay pool, auth, config, etc.\n * @returns A ShellBridge instance ready to handle napplet messages\n * @example\n * ```ts\n * import { createShellBridge, type ShellAdapter } from '@kehto/shell';\n *\n * const hooks: ShellAdapter = {\n *   relayPool: myRelayPoolHooks,\n *   relayConfig: myRelayConfigHooks,\n *   windowManager: myWindowManagerHooks,\n *   auth: myAuthHooks,\n *   config: myConfigHooks,\n *   hotkeys: myHotkeyHooks,\n *   workerRelay: myWorkerRelayHooks,\n *   crypto: myCryptoHooks,\n * };\n * const bridge = createShellBridge(hooks);\n * ```\n */\n/**\n * Fire the optional {@link ShellAdapter.onUnroutedMessage} diagnostic hook for a\n * message the bridge is about to drop. Extracts the envelope `type` defensively\n * (the message-shape guard hasn't run yet at the drop points) and never throws —\n * a misbehaving host hook must not break message handling.\n */\nfunction reportUnrouted(\n  hooks: ShellAdapter,\n  event: MessageEvent,\n  reason: UnroutedMessageInfo['reason'],\n): void {\n  if (!hooks.onUnroutedMessage) return;\n  const data = event.data as { type?: unknown } | null | undefined;\n  const type = typeof data === 'object' && data !== null && typeof data.type === 'string'\n    ? data.type\n    : undefined;\n  try {\n    hooks.onUnroutedMessage({ type, origin: event.origin, reason });\n  } catch {\n    // Observability must never break routing — swallow host hook errors.\n  }\n}\n\nexport function createShellBridge(hooks: ShellAdapter): ShellBridge {\n  const shellReadyState = createShellReadyState();\n  const runtimeHooks = adaptHooks(hooks, {\n    originRegistry,\n    manifestCache,\n    aclStore,\n    audioManager,\n    nappKeyRegistry,\n  });\n\n  const runtime: Runtime = createRuntime({\n    ...runtimeHooks,\n    isDomainAllowed: shellReadyState.isDomainAllowed,\n  });\n\n  function publishToEligibleNapplets(\n    envelope: NappletMessage,\n    domain: 'identity' | 'theme',\n    capability: 'identity:read' | 'theme:read',\n  ): void {\n    // A session exists only after shell.ready. Iterate entries, not a pubkey\n    // lookup, because different live windows may legitimately share pubkey ''.\n    for (const entry of runtime.sessionRegistry.getAllEntries()) {\n      const environment = shellReadyState.environments.get(entry.windowId);\n      if (!environment?.capabilities.domains.includes(domain)) continue;\n      if (!runtime.aclState.check(entry.pubkey, entry.dTag, entry.aggregateHash, capability)) continue;\n\n      const win = originRegistry.getIframeWindow(entry.windowId);\n      if (!win) continue;\n      win.postMessage(envelope, '*');\n    }\n  }\n\n  return {\n    handleMessage(event: MessageEvent): void {\n      const sourceWindow = event.source as Window | null;\n      if (!sourceWindow) {\n        reportUnrouted(hooks, event, 'no-source-window');\n        return;\n      }\n      const windowId = originRegistry.getWindowId(sourceWindow);\n      if (!windowId) {\n        reportUnrouted(hooks, event, 'unregistered-window');\n        return;\n      }\n      const msg = event.data;\n\n      // NIP-5D envelope-only guard (clean break — no legacy array support)\n      if (typeof msg !== 'object' || msg === null || typeof msg.type !== 'string') return;\n\n      // Handle shell.ready handshake locally (not forwarded to runtime)\n      if (msg.type === 'shell.ready') {\n        handleShellReady({\n          hooks,\n          origin: event.origin,\n          runtime,\n          state: shellReadyState,\n          sourceRegistrationId: originRegistry.getRegistrationId(sourceWindow) ?? 0,\n          sourceWindow,\n          windowId,\n        });\n        return;\n      }\n\n      // Delegate to runtime — runtime handles NAP domain dispatch\n      runtime.handleMessage(windowId, msg);\n    },\n\n    injectEvent(topic: string, payload: unknown): void {\n      runtime.injectEvent(topic, payload);\n    },\n\n    destroy(): void {\n      runtime.destroy();\n      shellReadyState.clear();\n    },\n\n    registerConsentHandler(handler: (request: ConsentRequest) => void): void {\n      runtime.registerConsentHandler(handler);\n    },\n\n    publishTheme(theme: Theme): void {\n      const envelope: NappletMessage = { type: 'theme.changed', theme } as NappletMessage;\n      publishToEligibleNapplets(envelope, 'theme', 'theme:read');\n    },\n\n    publishIdentityChanged(pubkey: string): void {\n      const envelope: NappletMessage = { type: 'identity.changed', pubkey } as NappletMessage;\n      publishToEligibleNapplets(envelope, 'identity', 'identity:read');\n    },\n\n    get runtime() {\n      return runtime;\n    },\n  };\n}\n","/**\n * hooks-adapter.ts — Converts ShellAdapter (browser-facing) to RuntimeAdapter (environment-agnostic).\n *\n * The adapter bridges the gap between the shell's browser-oriented ShellAdapter interfaces\n * (Window references, localStorage, postMessage) and the runtime's abstract RuntimeAdapter\n * (windowId strings, persistence interfaces, sendToNapplet callbacks).\n */\n\nimport type { NostrEvent, NostrFilter } from '@napplet/core';\nimport type {\n  RuntimeAdapter,\n  RelayPoolAdapter,\n  CacheAdapter,\n  AuthAdapter,\n  Signer,\n  ConfigAdapter,\n  HotkeyAdapter,\n  AclPersistence,\n  ManifestPersistence,\n  StatePersistence,\n  CryptoAdapter,\n  WindowManagerAdapter,\n  RelayConfigAdapter,\n  DmAdapter,\n  SendToNapplet,\n  RelaySubscriptionHandle,\n  ShellSecretPersistence,\n  GuidPersistence,\n} from '@kehto/runtime';\n\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');\n}\n\nfunction hexToBytes(hex: string): Uint8Array {\n  const bytes = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < hex.length; i += 2) {\n    bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);\n  }\n  return bytes;\n}\nimport type { ShellAdapter } from './types.js';\nimport type { originRegistry as OriginRegistryType } from './origin-registry.js';\nimport type { manifestCache as ManifestCacheType } from './manifest-cache.js';\nimport type { aclStore as AclStoreType } from './acl-store.js';\nimport type { audioManager as AudioManagerType } from './audio-manager.js';\nimport type { sessionRegistry as SessionRegistryType } from './session-registry.js';\n\n/**\n * Browser-specific singletons that the adapter bridges to the runtime.\n * These use browser APIs (Window, localStorage, postMessage, CustomEvent)\n * that the runtime cannot access directly.\n */\nexport interface BrowserDeps {\n  originRegistry: typeof OriginRegistryType;\n  manifestCache: typeof ManifestCacheType;\n  aclStore: typeof AclStoreType;\n  audioManager: typeof AudioManagerType;\n  nappKeyRegistry: typeof SessionRegistryType;\n}\n\nfunction createSendToNapplet(originRegistry: BrowserDeps['originRegistry']): SendToNapplet {\n  return (windowId, msg) => {\n    const win = originRegistry.getIframeWindow(windowId);\n    if (win) win.postMessage(msg, '*');\n  };\n}\n\nfunction createRelayPoolAdapter(\n  shellHooks: ShellAdapter,\n  originRegistry: BrowserDeps['originRegistry'],\n): RelayPoolAdapter {\n  return {\n    subscribe(\n      filters: NostrFilter[],\n      callback: (item: NostrEvent | 'EOSE') => void,\n      relayUrls?: string[],\n    ): RelaySubscriptionHandle {\n      const pool = shellHooks.relayPool.getRelayPool();\n      if (!pool) return { unsubscribe() { /* no-op */ } };\n\n      const urls = relayUrls ?? shellHooks.relayPool.selectRelayTier(filters);\n      const sub = pool.subscription(urls, filters).subscribe((item) => {\n        if (item === 'EOSE') callback('EOSE');\n        else callback(item as NostrEvent);\n      });\n      return { unsubscribe: () => sub.unsubscribe() };\n    },\n\n    publish(event: NostrEvent): void | Promise<void> {\n      const pool = shellHooks.relayPool.getRelayPool();\n      if (!pool) return;\n      const relayUrls = shellHooks.relayPool.selectRelayTier([]);\n      return pool.publish(relayUrls, event);\n    },\n\n    selectRelayTier(filters: NostrFilter[]): string[] {\n      return shellHooks.relayPool.selectRelayTier(filters);\n    },\n\n    trackSubscription(subKey: string, cleanup: () => void): void {\n      shellHooks.relayPool.trackSubscription(subKey, cleanup);\n    },\n\n    untrackSubscription(subKey: string): void {\n      shellHooks.relayPool.untrackSubscription(subKey);\n    },\n\n    openScopedRelay(\n      windowId: string,\n      relayUrl: string,\n      subId: string,\n      filters: NostrFilter[],\n      _sendFn: SendToNapplet,\n    ): void {\n      const win = originRegistry.getIframeWindow(windowId);\n      if (win) shellHooks.relayPool.openScopedRelay(windowId, relayUrl, subId, filters, win);\n    },\n\n    closeScopedRelay(windowId: string): void {\n      shellHooks.relayPool.closeScopedRelay(windowId);\n    },\n\n    publishToScopedRelay(windowId: string, event: NostrEvent): boolean | Promise<boolean> {\n      return shellHooks.relayPool.publishToScopedRelay(windowId, event);\n    },\n\n    isAvailable(): boolean {\n      return shellHooks.relayPool.getRelayPool() !== null;\n    },\n  };\n}\n\nfunction createCacheAdapter(shellHooks: ShellAdapter): CacheAdapter {\n  return {\n    async query(filters: NostrFilter[]): Promise<NostrEvent[]> {\n      const workerRelay = shellHooks.workerRelay.getWorkerRelay();\n      if (!workerRelay) return [];\n      const subId = crypto.randomUUID();\n      return workerRelay.query(['REQ', subId, ...filters]);\n    },\n\n    store(event: NostrEvent): void {\n      const workerRelay = shellHooks.workerRelay.getWorkerRelay();\n      if (!workerRelay) return;\n      try { workerRelay.event(event)?.catch?.(() => { /* best-effort */ }); } catch { /* best-effort */ }\n    },\n\n    isAvailable(): boolean {\n      return shellHooks.workerRelay.getWorkerRelay() !== null;\n    },\n  };\n}\n\nfunction createAuthAdapter(shellHooks: ShellAdapter): AuthAdapter {\n  return {\n    getUserPubkey(): string | null {\n      return shellHooks.auth.getUserPubkey();\n    },\n    getSigner(): Signer | null {\n      return shellHooks.auth.getSigner();\n    },\n  };\n}\n\nfunction createConfigAdapter(shellHooks: ShellAdapter): ConfigAdapter {\n  return {\n    getNappUpdateBehavior(): 'auto-grant' | 'banner' | 'silent-reprompt' {\n      return shellHooks.config.getNappUpdateBehavior();\n    },\n  };\n}\n\nfunction createHotkeyAdapter(shellHooks: ShellAdapter): HotkeyAdapter {\n  return {\n    executeHotkeyFromForward(event): void {\n      shellHooks.hotkeys.executeHotkeyFromForward(event);\n    },\n  };\n}\n\nfunction createCryptoAdapter(shellHooks: ShellAdapter): CryptoAdapter {\n  return {\n    async verifyEvent(event: NostrEvent): Promise<boolean> {\n      return shellHooks.crypto.verifyEvent(event);\n    },\n    randomUUID(): string {\n      return crypto.randomUUID();\n    },\n    randomBytes(length: number): Uint8Array {\n      const bytes = new Uint8Array(length);\n      crypto.getRandomValues(bytes);\n      return bytes;\n    },\n  };\n}\n\nfunction createAclPersistence(): AclPersistence {\n  return {\n    persist(data: string): void {\n      try { localStorage.setItem('napplet:acl', data); } catch { /* best-effort */ }\n    },\n    load(): string | null {\n      try { return localStorage.getItem('napplet:acl'); } catch { return null; }\n    },\n  };\n}\n\nfunction createManifestPersistence(): ManifestPersistence {\n  return {\n    persist(data: string): void {\n      try { localStorage.setItem('napplet:manifest-cache', data); } catch { /* best-effort */ }\n    },\n    load(): string | null {\n      try { return localStorage.getItem('napplet:manifest-cache'); } catch { return null; }\n    },\n  };\n}\n\nfunction createStatePersistence(): StatePersistence {\n  return {\n    get(scopedKey: string): string | null {\n      try { return localStorage.getItem(scopedKey); } catch { return null; }\n    },\n    set(scopedKey: string, value: string): boolean {\n      try { localStorage.setItem(scopedKey, value); return true; } catch { return false; }\n    },\n    remove(scopedKey: string): void {\n      try { localStorage.removeItem(scopedKey); } catch { /* best-effort */ }\n    },\n    clear(prefix: string): void {\n      try {\n        const keysToRemove: string[] = [];\n        for (let i = 0; i < localStorage.length; i++) {\n          const key = localStorage.key(i);\n          if (key?.startsWith(prefix)) keysToRemove.push(key);\n        }\n        for (const key of keysToRemove) localStorage.removeItem(key);\n      } catch { /* best-effort */ }\n    },\n    keys(prefix: string): string[] {\n      try {\n        const result: string[] = [];\n        for (let i = 0; i < localStorage.length; i++) {\n          const key = localStorage.key(i);\n          if (key?.startsWith(prefix)) result.push(key);\n        }\n        return result;\n      } catch { return []; }\n    },\n    calculateBytes(prefix: string, excludeKey?: string): number {\n      try {\n        let total = 0;\n        for (let i = 0; i < localStorage.length; i++) {\n          const key = localStorage.key(i);\n          if (!key?.startsWith(prefix)) continue;\n          if (excludeKey && key === excludeKey) continue;\n          const value = localStorage.getItem(key) ?? '';\n          total += new TextEncoder().encode(key + value).length;\n        }\n        return total;\n      } catch { return 0; }\n    },\n  };\n}\n\nfunction createWindowManagerAdapter(shellHooks: ShellAdapter): WindowManagerAdapter {\n  return {\n    createWindow(options): string | null {\n      return shellHooks.windowManager.createWindow(options);\n    },\n  };\n}\n\nfunction createRelayConfigAdapter(shellHooks: ShellAdapter): RelayConfigAdapter {\n  return {\n    addRelay(tier: string, url: string): void {\n      shellHooks.relayConfig.addRelay(tier, url);\n    },\n    removeRelay(tier: string, url: string): void {\n      shellHooks.relayConfig.removeRelay(tier, url);\n    },\n    getRelayConfig(): { discovery: string[]; super: string[]; outbox: string[] } {\n      return shellHooks.relayConfig.getRelayConfig();\n    },\n    getNip66Suggestions(): unknown {\n      return shellHooks.relayConfig.getNip66Suggestions();\n    },\n  };\n}\n\nfunction createShellSecretPersistence(): ShellSecretPersistence {\n  return {\n    get(): Uint8Array | null {\n      try {\n        const hex = localStorage.getItem('napplet-shell-secret');\n        if (!hex) return null;\n        return hexToBytes(hex);\n      } catch { return null; }\n    },\n    set(secret: Uint8Array): void {\n      try {\n        localStorage.setItem('napplet-shell-secret', bytesToHex(secret));\n      } catch { /* localStorage unavailable */ }\n    },\n  };\n}\n\nfunction createGuidPersistence(): GuidPersistence {\n  return {\n    get(windowId: string): string | null {\n      try {\n        return localStorage.getItem(`napplet-guid:${windowId}`);\n      } catch { return null; }\n    },\n    set(windowId: string, guid: string): void {\n      try {\n        localStorage.setItem(`napplet-guid:${windowId}`, guid);\n      } catch { /* localStorage unavailable */ }\n    },\n    remove(windowId: string): void {\n      try {\n        localStorage.removeItem(`napplet-guid:${windowId}`);\n      } catch { /* localStorage unavailable */ }\n    },\n  };\n}\n\nfunction createDmAdapter(shellHooks: ShellAdapter): DmAdapter | undefined {\n  return shellHooks.dm\n    ? {\n        sendDm(recipientPubkey: string, message: string) {\n          return shellHooks.dm!.sendDm(recipientPubkey, message);\n        },\n      }\n    : undefined;\n}\n\n/**\n * Convert ShellAdapter (browser-facing) into RuntimeAdapter (environment-agnostic).\n *\n * The adapter is the single translation layer between browser APIs and the\n * runtime's abstract interfaces. It:\n * - Converts Window references to windowId strings via originRegistry\n * - Wraps localStorage-backed singletons into persistence interfaces\n * - Translates relay pool API shapes (Observable → callback)\n *\n * @param shellHooks - The browser-oriented ShellAdapter provided by the host app\n * @param deps - Browser-specific singletons (originRegistry, aclStore, etc.)\n * @returns RuntimeAdapter suitable for createRuntime()\n *\n * @example\n * ```ts\n * const runtimeHooks = adaptHooks(shellHooks, {\n *   originRegistry, manifestCache, aclStore, audioManager, nappKeyRegistry,\n * });\n * const runtime = createRuntime(runtimeHooks);\n * ```\n */\nexport function adaptHooks(shellHooks: ShellAdapter, deps: BrowserDeps): RuntimeAdapter {\n  const { originRegistry } = deps;\n\n  return {\n    sendToNapplet: createSendToNapplet(originRegistry),\n    relayPool: createRelayPoolAdapter(shellHooks, originRegistry),\n    cache: createCacheAdapter(shellHooks),\n    auth: createAuthAdapter(shellHooks),\n    config: createConfigAdapter(shellHooks),\n    hotkeys: createHotkeyAdapter(shellHooks),\n    crypto: createCryptoAdapter(shellHooks),\n    aclPersistence: createAclPersistence(),\n    manifestPersistence: createManifestPersistence(),\n    statePersistence: createStatePersistence(),\n    windowManager: createWindowManagerAdapter(shellHooks),\n    relayConfig: createRelayConfigAdapter(shellHooks),\n    dm: createDmAdapter(shellHooks),\n    shellSecretPersistence: createShellSecretPersistence(),\n    guidPersistence: createGuidPersistence(),\n    onAclCheck: shellHooks.onAclCheck,\n    onHashMismatch: shellHooks.onHashMismatch,\n    services: shellHooks.services,\n    getConfigOverrides: shellHooks.getConfigOverrides,\n  };\n}\n","\nimport type { ShellEnvironment } from './types.js';\n\ninterface OriginEntry {\n  windowId: string;\n  dTag?: string;\n  aggregateHash?: string;\n  environment?: ShellEnvironment;\n  registrationId: number;\n}\n\n/** NIP-5D identity metadata associated with a registered iframe window. */\nexport interface OriginIdentity {\n  readonly dTag: string;\n  readonly aggregateHash: string;\n}\n\nconst registry = new Map<Window, OriginEntry>();\nlet nextRegistrationId = 0;\n\n/**\n * Bidirectional registry mapping Window references to windowId strings.\n * Optionally stores NIP-5D identity metadata (dTag and aggregateHash) per window.\n *\n * @example\n * ```ts\n * import { originRegistry } from '@kehto/shell';\n *\n * originRegistry.register(iframe.contentWindow, 'napp-1');\n * const id = originRegistry.getWindowId(iframe.contentWindow); // 'napp-1'\n * ```\n */\nexport interface OriginRegistry {\n  register(win: Window, windowId: string, identity?: OriginIdentity): void;\n  unregister(windowId: string): void;\n  getWindowId(win: Window): string | undefined;\n  getIframeWindow(windowId: string): Window | null;\n  getAllWindowIds(): string[];\n  getIdentity(win: Window): OriginIdentity | undefined;\n  setEnvironment(win: Window, environment: ShellEnvironment): void;\n  getEnvironment(win: Window): ShellEnvironment | undefined;\n  getRegistrationId(win: Window): number | undefined;\n  clear(): void;\n}\n\n/** Shell-wide iframe window registry singleton. */\nexport const originRegistry: OriginRegistry = {\n  /**\n   * Register a window reference with a windowId and optional identity metadata.\n   *\n   * @param win - The iframe's contentWindow reference\n   * @param windowId - The unique identifier for this napplet window\n   * @param identity - Optional NIP-5D identity metadata (dTag and aggregateHash)\n   */\n  register(win: Window, windowId: string, identity?: OriginIdentity): void {\n    for (const [registeredWin, entry] of registry.entries()) {\n      if (registeredWin === win || entry.windowId === windowId) {\n        registry.delete(registeredWin);\n      }\n    }\n\n    registry.set(win, {\n      windowId,\n      dTag: identity?.dTag,\n      aggregateHash: identity?.aggregateHash,\n      registrationId: ++nextRegistrationId,\n    });\n  },\n\n  /**\n   * Unregister a window by its windowId, removing the mapping.\n   *\n   * @param windowId - The window identifier to remove\n   */\n  unregister(windowId: string): void {\n    for (const [win, entry] of registry.entries()) {\n      if (entry.windowId === windowId) {\n        registry.delete(win);\n      }\n    }\n  },\n\n  /**\n   * Look up the windowId for a given Window reference.\n   *\n   * @param win - The Window reference (typically from event.source)\n   * @returns The windowId string, or undefined if not registered\n   */\n  getWindowId(win: Window): string | undefined {\n    return registry.get(win)?.windowId;\n  },\n\n  /**\n   * Look up the Window reference for a given windowId.\n   *\n   * @param windowId - The window identifier to look up\n   * @returns The Window reference, or null if not found\n   */\n  getIframeWindow(windowId: string): Window | null {\n    for (const [win, entry] of registry.entries()) {\n      if (entry.windowId === windowId) return win;\n    }\n    return null;\n  },\n\n  /**\n   * Get all registered windowId strings.\n   *\n   * @returns Array of all registered window identifiers\n   */\n  getAllWindowIds(): string[] {\n    return Array.from(registry.values()).map(entry => entry.windowId);\n  },\n\n  /**\n   * Get identity metadata for a registered Window.\n   *\n   * @param win - The Window reference to look up\n   * @returns Identity metadata, or undefined if not registered or no identity set\n   */\n  getIdentity(win: Window): OriginIdentity | undefined {\n    const entry = registry.get(win);\n    if (!entry?.dTag || !entry?.aggregateHash) return undefined;\n    return { dTag: entry.dTag, aggregateHash: entry.aggregateHash };\n  },\n\n  /** Store the immutable environment captured for this exact frame registration. */\n  setEnvironment(win: Window, environment: ShellEnvironment): void {\n    const entry = registry.get(win);\n    if (!entry) return;\n    entry.environment = Object.freeze({\n      capabilities: Object.freeze({ domains: Object.freeze([...environment.capabilities.domains]) }),\n      services: Object.freeze([...environment.services]),\n    });\n  },\n\n  /** Return the immutable environment captured before this frame executes. */\n  getEnvironment(win: Window): ShellEnvironment | undefined {\n    return registry.get(win)?.environment;\n  },\n\n  /**\n   * Look up the monotonically increasing registration id for a Window.\n   *\n   * @param win - The Window reference to look up\n   * @returns The registration id, or undefined if the Window is not registered\n   */\n  getRegistrationId(win: Window): number | undefined {\n    return registry.get(win)?.registrationId;\n  },\n\n  /** Clear all registrations. */\n  clear(): void {\n    registry.clear();\n  },\n};\n","/**\n * SessionRegistry — windowId to verified napplet pubkey bidirectional mapping.\n *\n * After a successful AUTH handshake, the ShellBridge registers the napplet's\n * verified pubkey here. Both mappings are kept in sync.\n */\n\nimport type { PendingUpdate, SessionEntry } from '@kehto/runtime';\n\n/**\n * A pending napplet update — raised when a napplet reconnects with a different aggregateHash.\n * @example\n * ```ts\n * const update: PendingUpdate = {\n *   windowId: 'win-1', pubkey: 'abc...', dTag: '3chat',\n *   oldHash: 'aaa', newHash: 'bbb',\n *   resolve: (action) => { if (action === 'accept') { // apply } },\n * };\n * ```\n */\nexport type { PendingUpdate } from '@kehto/runtime';\n\nconst byWindowId = new Map<string, string>();\nconst byPubkey = new Map<string, SessionEntry>();\nconst pendingUpdates = new Map<string, PendingUpdate>();\n\nlet _pendingVersion = 0;\n\n/**\n * Bidirectional registry mapping windowIds to verified napplet pubkeys.\n * Maintained by ShellBridge after successful AUTH handshakes.\n *\n * @example\n * ```ts\n * import { sessionRegistry } from '@kehto/shell';\n *\n * const pubkey = sessionRegistry.getPubkey('win-1');\n * const entry = pubkey ? sessionRegistry.getEntry(pubkey) : undefined;\n * ```\n */\nexport interface SessionRegistry {\n  register(windowId: string, entry: SessionEntry): void;\n  unregister(windowId: string): void;\n  getPubkey(windowId: string): string | undefined;\n  getEntry(pubkey: string): SessionEntry | undefined;\n  getWindowId(pubkey: string): string | undefined;\n  isRegistered(windowId: string): boolean;\n  getAllEntries(): SessionEntry[];\n  setPendingUpdate(windowId: string, update: PendingUpdate): void;\n  getPendingUpdate(windowId: string): PendingUpdate | undefined;\n  clearPendingUpdate(windowId: string): void;\n  clear(): void;\n}\n\n/** Shell-wide verified napplet session registry singleton. */\nexport const sessionRegistry: SessionRegistry = {\n  /**\n   * Register a napplet entry, mapping windowId to pubkey and vice versa.\n   *\n   * @param windowId - The window identifier\n   * @param entry - The verified napplet session entry from AUTH handshake\n   */\n  register(windowId: string, entry: SessionEntry): void {\n    byWindowId.set(windowId, entry.pubkey);\n    byPubkey.set(entry.pubkey, entry);\n  },\n\n  /**\n   * Unregister a napplet by windowId, removing both mappings.\n   *\n   * @param windowId - The window identifier to remove\n   */\n  unregister(windowId: string): void {\n    const pubkey = byWindowId.get(windowId);\n    if (pubkey) {\n      byPubkey.delete(pubkey);\n      byWindowId.delete(windowId);\n    }\n    pendingUpdates.delete(windowId);\n  },\n\n  /**\n   * Get the pubkey associated with a windowId.\n   *\n   * @param windowId - The window identifier\n   * @returns The napplet's pubkey, or undefined if not registered\n   */\n  getPubkey(windowId: string): string | undefined {\n    return byWindowId.get(windowId);\n  },\n\n  /**\n   * Get the full entry for a napplet pubkey.\n   *\n   * @param pubkey - The napplet's pubkey\n   * @returns The full SessionEntry, or undefined if not found\n   */\n  getEntry(pubkey: string): SessionEntry | undefined {\n    return byPubkey.get(pubkey);\n  },\n\n  /**\n   * Get the windowId for a napplet pubkey.\n   *\n   * @param pubkey - The napplet's pubkey\n   * @returns The windowId, or undefined if not found\n   */\n  getWindowId(pubkey: string): string | undefined {\n    return byPubkey.get(pubkey)?.windowId;\n  },\n\n  /**\n   * Check if a windowId has a registered napplet.\n   *\n   * @param windowId - The window identifier\n   * @returns True if the windowId has a registered napplet\n   */\n  isRegistered(windowId: string): boolean {\n    return byWindowId.has(windowId);\n  },\n\n  /**\n   * Get all registered napplet entries.\n   *\n   * @returns Array of all SessionEntry objects\n   */\n  getAllEntries(): SessionEntry[] {\n    return Array.from(byPubkey.values());\n  },\n\n  /**\n   * Set a pending update for a window (napplet reconnected with different hash).\n   *\n   * @param windowId - The window identifier\n   * @param update - The pending update details with resolve callback\n   */\n  setPendingUpdate(windowId: string, update: PendingUpdate): void {\n    pendingUpdates.set(windowId, update);\n    _pendingVersion++;\n    if (typeof window !== 'undefined') {\n      window.dispatchEvent(new CustomEvent('napplet:pending-update', { detail: { windowId } }));\n    }\n  },\n\n  /**\n   * Get a pending update for a window.\n   *\n   * @param windowId - The window identifier\n   * @returns The pending update, or undefined if none\n   */\n  getPendingUpdate(windowId: string): PendingUpdate | undefined {\n    return pendingUpdates.get(windowId);\n  },\n\n  /**\n   * Clear a pending update for a window.\n   *\n   * @param windowId - The window identifier\n   */\n  clearPendingUpdate(windowId: string): void {\n    pendingUpdates.delete(windowId);\n    _pendingVersion++;\n    if (typeof window !== 'undefined') {\n      window.dispatchEvent(new CustomEvent('napplet:pending-update', { detail: { windowId } }));\n    }\n  },\n\n  /** Clear all registrations and pending updates. */\n  clear(): void {\n    byWindowId.clear();\n    byPubkey.clear();\n    pendingUpdates.clear();\n  },\n};\n\n/** @deprecated Use sessionRegistry. Will be removed in v0.9.0. */\nexport const nappKeyRegistry: SessionRegistry = sessionRegistry;\n","\nimport { ALL_CAPABILITIES, type Capability } from '@kehto/runtime';\nimport { migrateAclState, type AclState } from '@kehto/acl';\nimport type { AclEntry } from './types.js';\n\nconst STORAGE_KEY = 'napplet:acl';\n\n/** Default state quota in bytes (512 KB) per napplet identity. */\nexport const DEFAULT_STATE_QUOTA = 512 * 1024;\n\ninterface InternalAclEntry {\n  key: string;\n  pubkey: string;\n  dTag: string;\n  aggregateHash: string;\n  capabilities: Set<Capability>;\n  blocked: boolean;\n  stateQuota: number;\n}\n\nfunction aclKey(_pubkey: string, dTag: string, aggregateHash: string): string {\n  return `${dTag}:${aggregateHash}`;\n}\n\nconst store = new Map<string, InternalAclEntry>();\n\n// Capability name to bit position mapping for bitfield conversion.\n// Plan 12-10: signer bit slots (32/64/128) reclaimed by the v1.2\n// identity:read / keys:bind / keys:forward caps. v1.1 persisted ACL\n// state with those bits is reinterpreted under the v1.2 surface —\n// acceptable because the v1.1 signer actions have no napplet-visible\n// surface in NIP-5D.\nconst CAP_BITS: Record<string, number> = {\n  'relay:read': 1, 'relay:write': 2, 'cache:read': 4, 'cache:write': 8,\n  'hotkey:forward': 16,\n  'identity:read': 32, 'keys:bind': 64, 'keys:forward': 128,\n  'state:read': 256, 'state:write': 512,\n  'media:control': 1024, 'notify:send': 2048, 'notify:channel': 4096,\n  'theme:read': 8192,\n  // 65536 RETIRED — was identity:decrypt (removed as a spec violation); left as\n  // a permanent gap, do NOT reuse this bit.\n};\n\nfunction capArrayToBitfield(caps: Capability[]): number {\n  let bits = 0;\n  for (const cap of caps) bits |= (CAP_BITS[cap] ?? 0);\n  return bits;\n}\n\nfunction bitfieldToCapArray(bits: number): Capability[] {\n  return (Object.entries(CAP_BITS)\n    .filter(([, bit]) => (bits & bit) !== 0)\n    .map(([name]) => name)) as Capability[];\n}\n\nfunction getOrCreate(pubkey: string, dTag: string, aggregateHash: string): InternalAclEntry {\n  const key = aclKey(pubkey, dTag, aggregateHash);\n  let entry = store.get(key);\n  if (!entry) {\n    entry = {\n      key,\n      pubkey,\n      dTag,\n      aggregateHash,\n      capabilities: new Set(ALL_CAPABILITIES),\n      blocked: false,\n      stateQuota: DEFAULT_STATE_QUOTA,\n    };\n    store.set(key, entry);\n  }\n  return entry;\n}\n\n/**\n * ACL store — manages capability grants, revocations, and blocks for napp identities.\n * Persists to localStorage and uses a permissive default policy (all capabilities granted).\n *\n * @example\n * ```ts\n * import { aclStore } from '@kehto/shell';\n *\n * aclStore.grant(pubkey, dTag, hash, 'relay:read');\n * const allowed = aclStore.check(pubkey, dTag, hash, 'relay:read'); // true\n * ```\n */\nexport interface AclStore {\n  check(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): boolean;\n  grant(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void;\n  revoke(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void;\n  block(pubkey: string, dTag: string, aggregateHash: string): void;\n  unblock(pubkey: string, dTag: string, aggregateHash: string): void;\n  isBlocked(pubkey: string, dTag: string, aggregateHash: string): boolean;\n  getEntry(pubkey: string, dTag: string, aggregateHash: string): AclEntry | undefined;\n  getAllEntries(): AclEntry[];\n  persist(): void;\n  load(): void;\n  getStateQuota(pubkey: string, dTag: string, aggregateHash: string): number;\n  clear(): void;\n}\n\n/** Shell ACL store singleton. */\nexport const aclStore: AclStore = {\n  /**\n   * Check if a napp identity has a specific capability.\n   * Returns true for unknown identities (permissive default).\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @param capability - The capability to check\n   * @returns True if the capability is granted and the napp is not blocked\n   */\n  check(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): boolean {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    const entry = store.get(key);\n    if (!entry) return true;\n    if (entry.blocked) return false;\n    return entry.capabilities.has(capability);\n  },\n\n  /**\n   * Grant a capability to a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @param capability - The capability to grant\n   */\n  grant(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void {\n    getOrCreate(pubkey, dTag, aggregateHash).capabilities.add(capability);\n  },\n\n  /**\n   * Revoke a capability from a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @param capability - The capability to revoke\n   */\n  revoke(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void {\n    getOrCreate(pubkey, dTag, aggregateHash).capabilities.delete(capability);\n  },\n\n  /**\n   * Block a napp identity entirely (all capabilities denied).\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   */\n  block(pubkey: string, dTag: string, aggregateHash: string): void {\n    getOrCreate(pubkey, dTag, aggregateHash).blocked = true;\n  },\n\n  /**\n   * Unblock a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   */\n  unblock(pubkey: string, dTag: string, aggregateHash: string): void {\n    getOrCreate(pubkey, dTag, aggregateHash).blocked = false;\n  },\n\n  /**\n   * Check if a napp identity is blocked.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @returns True if the identity is blocked\n   */\n  isBlocked(pubkey: string, dTag: string, aggregateHash: string): boolean {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    return store.get(key)?.blocked ?? false;\n  },\n\n  /**\n   * Get the external ACL entry for a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @returns The ACL entry, or undefined if no explicit entry exists\n   */\n  getEntry(pubkey: string, dTag: string, aggregateHash: string): AclEntry | undefined {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    const internal = store.get(key);\n    if (!internal) return undefined;\n    return {\n      pubkey: internal.pubkey,\n      capabilities: Array.from(internal.capabilities),\n      blocked: internal.blocked,\n      stateQuota: internal.stateQuota,\n    };\n  },\n\n  /**\n   * Get all ACL entries.\n   *\n   * @returns Array of all ACL entries\n   */\n  getAllEntries(): AclEntry[] {\n    return Array.from(store.values()).map(e => ({\n      pubkey: e.pubkey,\n      capabilities: Array.from(e.capabilities),\n      blocked: e.blocked,\n      stateQuota: e.stateQuota,\n    }));\n  },\n\n  /** Persist the ACL store to localStorage. */\n  persist(): void {\n    try {\n      const entries = Array.from(store.entries()).map(([key, val]) => [\n        key,\n        {\n          pubkey: val.pubkey,\n          dTag: val.dTag,\n          aggregateHash: val.aggregateHash,\n          capabilities: Array.from(val.capabilities),\n          blocked: val.blocked,\n          stateQuota: val.stateQuota,\n        },\n      ]);\n      localStorage.setItem(STORAGE_KEY, JSON.stringify(entries));\n    } catch {\n      // localStorage unavailable\n    }\n  },\n\n  /** Load the ACL store from localStorage. Migrates old 3-segment keys to 2-segment format. */\n  load(): void {\n    try {\n      const raw = localStorage.getItem(STORAGE_KEY);\n      if (!raw) return;\n      let entries = JSON.parse(raw) as Array<\n        [string, {\n          pubkey: string;\n          dTag?: string;\n          aggregateHash?: string;\n          capabilities: Capability[];\n          blocked: boolean;\n          stateQuota?: number;\n        }]\n      >;\n\n      const hasOldKeys = entries.some(([key]) => key.split(':').length === 3);\n      if (hasOldKeys) {\n        const tempState: AclState = {\n          defaultPolicy: 'permissive',\n          entries: Object.fromEntries(\n            entries.map(([key, val]) => [key, {\n              caps: capArrayToBitfield(val.capabilities),\n              blocked: val.blocked,\n              quota: val.stateQuota ?? DEFAULT_STATE_QUOTA,\n            }])\n          ),\n        };\n        const migrated = migrateAclState(tempState);\n        if (migrated !== tempState) {\n          // Rebuild entries from migrated state\n          entries = Object.entries(migrated.entries).map(([key, entry]) => {\n            const parts = key.split(':');\n            return [key, {\n              pubkey: '',\n              dTag: parts[0] ?? '',\n              aggregateHash: parts[1] ?? '',\n              capabilities: bitfieldToCapArray(entry.caps),\n              blocked: entry.blocked,\n              stateQuota: entry.quota,\n            }] as [string, typeof entries[0][1]];\n          });\n          // Re-persist migrated data immediately\n          localStorage.setItem(STORAGE_KEY, JSON.stringify(entries));\n        }\n      }\n\n      store.clear();\n      for (const [key, val] of entries) {\n        if (val.dTag === undefined || val.aggregateHash === undefined) continue;\n        store.set(key, {\n          key,\n          pubkey: val.pubkey,\n          dTag: val.dTag,\n          aggregateHash: val.aggregateHash,\n          capabilities: new Set(val.capabilities),\n          blocked: val.blocked,\n          stateQuota: val.stateQuota ?? DEFAULT_STATE_QUOTA,\n        });\n      }\n    } catch {\n      /* Corrupted ACL data in localStorage — clear and use defaults */\n      store.clear();\n    }\n  },\n\n  /**\n   * Get the state quota for a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @returns The quota in bytes (defaults to DEFAULT_STATE_QUOTA)\n   */\n  getStateQuota(pubkey: string, dTag: string, aggregateHash: string): number {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    return store.get(key)?.stateQuota ?? DEFAULT_STATE_QUOTA;\n  },\n\n  /** Clear all ACL entries and remove from localStorage. */\n  clear(): void {\n    store.clear();\n    try {\n      localStorage.removeItem(STORAGE_KEY);\n    } catch {\n      /* localStorage unavailable — ACL clear is best-effort */\n    }\n  },\n};\n","/**\n * Manifest cache — persists verified NIP-5A aggregate hashes per napplet identity.\n */\n\n/**\n * A cached manifest entry for a verified napplet build.\n * @example\n * ```ts\n * const entry: ManifestCacheEntry = {\n *   pubkey: 'abc123...', dTag: '3chat',\n *   aggregateHash: 'deadbeef', verifiedAt: Date.now(),\n * };\n * ```\n */\nexport interface ManifestCacheEntry {\n  pubkey: string;\n  dTag: string;\n  aggregateHash: string;\n  verifiedAt: number;\n}\n\nconst STORAGE_KEY = 'napplet:manifest-cache';\nconst cache = new Map<string, ManifestCacheEntry>();\n\nfunction cacheKey(pubkey: string, dTag: string): string {\n  return `${pubkey}:${dTag}`;\n}\n\n/**\n * Cache for verified napplet manifest entries. Persists to localStorage.\n * Used to detect napplet updates (aggregateHash changes) across sessions.\n *\n * @example\n * ```ts\n * import { manifestCache } from '@kehto/shell';\n *\n * manifestCache.set({ pubkey: 'abc...', dTag: 'chat', aggregateHash: 'dead', verifiedAt: Date.now() });\n * const entry = manifestCache.get('abc...', 'chat');\n * ```\n */\nexport interface ManifestCache {\n  get(pubkey: string, dTag: string): ManifestCacheEntry | undefined;\n  set(entry: ManifestCacheEntry): void;\n  has(pubkey: string, dTag: string, hash: string): boolean;\n  remove(pubkey: string, dTag: string): void;\n  load(): void;\n  persist(): void;\n  clear(): void;\n}\n\n/** Shell-wide manifest verification cache singleton. */\nexport const manifestCache: ManifestCache = {\n  /**\n   * Get a cached manifest entry by pubkey and dTag.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @returns The cached entry, or undefined if not found\n   */\n  get(pubkey: string, dTag: string): ManifestCacheEntry | undefined {\n    return cache.get(cacheKey(pubkey, dTag));\n  },\n\n  /**\n   * Set (upsert) a manifest cache entry and persist to localStorage.\n   *\n   * @param entry - The manifest entry to cache\n   */\n  set(entry: ManifestCacheEntry): void {\n    cache.set(cacheKey(entry.pubkey, entry.dTag), entry);\n    manifestCache.persist();\n  },\n\n  /**\n   * Check if a specific hash is cached for a pubkey/dTag combination.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param hash - The aggregateHash to check\n   * @returns True if the exact hash matches the cached entry\n   */\n  has(pubkey: string, dTag: string, hash: string): boolean {\n    const entry = cache.get(cacheKey(pubkey, dTag));\n    return !!entry && entry.aggregateHash === hash;\n  },\n\n  /**\n   * Remove a cached entry for a pubkey/dTag and persist.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   */\n  remove(pubkey: string, dTag: string): void {\n    cache.delete(cacheKey(pubkey, dTag));\n    manifestCache.persist();\n  },\n\n  /** Load the cache from localStorage. */\n  load(): void {\n    try {\n      const raw = localStorage.getItem(STORAGE_KEY);\n      if (!raw) return;\n      const entries = JSON.parse(raw) as Array<[string, ManifestCacheEntry]>;\n      cache.clear();\n      for (const [key, val] of entries) cache.set(key, val);\n    } catch { /* Corrupted cache data — clear and start fresh */ cache.clear(); }\n  },\n\n  /** Persist the cache to localStorage. */\n  persist(): void {\n    try {\n      localStorage.setItem(STORAGE_KEY, JSON.stringify(Array.from(cache.entries())));\n    } catch { /* localStorage unavailable in sandboxed contexts — persist is best-effort */ }\n  },\n\n  /** Clear all cached entries and remove from localStorage. */\n  clear(): void {\n    cache.clear();\n    try { localStorage.removeItem(STORAGE_KEY); } catch { /* localStorage unavailable — cleanup is best-effort */ }\n  },\n};\n","/**\n * audio-manager.ts — Shell-side registry of active audio sources.\n *\n * Tracks which windows are producing audio. UI components read the registry\n * reactively via the version counter and CustomEvent pattern.\n */\n\nimport { originRegistry } from './origin-registry.js';\n\n/**\n * An active audio source registered by a napplet.\n * @example\n * ```ts\n * const source: AudioSource = {\n *   windowId: 'win-1', nappletClass: 'music-player',\n *   title: 'Now Playing', muted: false,\n * };\n * ```\n */\nexport interface AudioSource {\n  windowId: string;\n  nappletClass: string;\n  title: string;\n  muted: boolean;\n}\n\nconst sources: Map<string, AudioSource> = new Map<string, AudioSource>();\nlet version = 0;\n\nfunction bump(): void {\n  version++;\n  if (typeof window !== 'undefined') {\n    window.dispatchEvent(new CustomEvent('napplet:audio-changed'));\n  }\n}\n\n/**\n * Registry of active audio sources across all napplet windows.\n * Emits 'napplet:audio-changed' CustomEvents when the registry changes.\n *\n * @example\n * ```ts\n * import { audioManager } from '@kehto/shell';\n *\n * audioManager.register('win-1', 'music', 'My Song');\n * audioManager.mute('win-1', true);\n * ```\n */\nexport interface AudioManager {\n  register(windowId: string, nappletClass: string, title: string): void;\n  unregister(windowId: string): void;\n  updateState(windowId: string, update: { title?: string }): void;\n  mute(windowId: string, muted: boolean): void;\n  has(windowId: string): boolean;\n  get(windowId: string): AudioSource | undefined;\n  getSources(): Map<string, AudioSource>;\n  readonly version: number;\n  readonly count: number;\n  clear(): void;\n}\n\n/** Shell-wide audio source registry singleton. */\nexport const audioManager: AudioManager = {\n  /**\n   * Register a new audio source for a window.\n   *\n   * @param windowId - The window identifier\n   * @param nappletClass - The napplet class/type (e.g., 'music-player')\n   * @param title - Human-readable title for the audio source\n   */\n  register(windowId: string, nappletClass: string, title: string): void {\n    sources.set(windowId, { windowId, nappletClass, title, muted: false });\n    bump();\n  },\n\n  /**\n   * Unregister an audio source for a window.\n   *\n   * @param windowId - The window identifier to remove\n   */\n  unregister(windowId: string): void {\n    if (sources.delete(windowId)) bump();\n  },\n\n  /**\n   * Update the state of an audio source (e.g., change title).\n   *\n   * @param windowId - The window identifier\n   * @param update - Partial update with optional title\n   */\n  updateState(windowId: string, update: { title?: string }): void {\n    const src = sources.get(windowId);\n    if (!src) return;\n    if (update.title !== undefined) src.title = update.title;\n    bump();\n  },\n\n  /**\n   * Mute or unmute an audio source and notify the napplet via postMessage.\n   *\n   * @param windowId - The window identifier\n   * @param muted - True to mute, false to unmute\n   * @example\n   * ```ts\n   * audioManager.mute('win-1', true); // mute\n   * audioManager.mute('win-1', false); // unmute\n   * ```\n   */\n  mute(windowId: string, muted: boolean): void {\n    const src = sources.get(windowId);\n    if (src) { src.muted = muted; bump(); }\n    const iframeWindow = originRegistry.getIframeWindow(windowId);\n    if (iframeWindow) {\n      const muteEvent = {\n        kind: 29000, // INC_PEER — inlined numeric after Phase 24 DRIFT-01 shim removal\n        created_at: Math.floor(Date.now() / 1000),\n        tags: [['t', 'napplet:audio-muted']],\n        content: JSON.stringify({ muted }),\n        pubkey: '__shell__',\n        id: `audio-mute-${windowId}-${Date.now()}`,\n        sig: '',\n      };\n      iframeWindow.postMessage(['EVENT', '__shell__', muteEvent], '*');\n    }\n  },\n\n  /**\n   * Check if a window has a registered audio source.\n   *\n   * @param windowId - The window identifier\n   * @returns True if the window has an active audio source\n   */\n  has(windowId: string): boolean { return sources.has(windowId); },\n\n  /**\n   * Get the audio source for a window.\n   *\n   * @param windowId - The window identifier\n   * @returns The AudioSource, or undefined if not found\n   */\n  get(windowId: string): AudioSource | undefined { return sources.get(windowId); },\n\n  /**\n   * Get a snapshot of all audio sources.\n   *\n   * @returns A new Map of all active audio sources\n   */\n  getSources(): Map<string, AudioSource> { return new Map(sources); },\n\n  /** Current version counter (incremented on every change). */\n  get version(): number { return version; },\n\n  /** Number of active audio sources. */\n  get count(): number { return sources.size; },\n\n  /** Clear all audio sources and reset version counter. */\n  clear(): void { sources.clear(); version = 0; },\n};\n","import type { OriginIdentity } from './origin-registry.js';\nimport type { ShellAdapter, ShellCapabilities, ShellEnvironment } from './types.js';\n\nconst RUNTIME_NATIVE_DOMAINS = [\n  'relay', 'identity', 'storage', 'inc', 'theme', 'keys', 'media', 'notify',\n] as const;\n\nconst SERVICE_ONLY_DOMAINS = [\n  'outbox', 'config', 'resource', 'cvm', 'upload', 'intent', 'link', 'common',\n  'lists', 'serial', 'ble', 'webrtc', 'dm', 'count',\n] as const;\n\n/**\n * Build the shell's immutable live capability snapshot from adapter wiring.\n *\n * @param hooks - The ShellAdapter provided by the host app.\n * @returns Domain-only ShellCapabilities for the current live wiring.\n * @example\n * ```ts\n * const caps = buildShellCapabilities(hooks);\n * // caps.domains => ['relay', 'identity', 'storage', 'inc', 'theme', 'keys', 'media', 'notify']\n * ```\n */\nexport function buildShellCapabilities(hooks: ShellAdapter): ShellCapabilities {\n  const disabled = new Set(hooks.capabilities?.disabledDomains ?? []);\n  const domains: string[] = RUNTIME_NATIVE_DOMAINS.filter((domain) => !disabled.has(domain));\n\n  for (const domain of SERVICE_ONLY_DOMAINS) {\n    if (!disabled.has(domain) && isServiceDomainLive(hooks, domain)) domains.push(domain);\n  }\n\n  return Object.freeze({ domains: freezeList(domains) });\n}\n\n/**\n * Resolve a trusted creation identity's immutable NAP-SHELL environment.\n *\n * This host-adapter API is intentionally not part of `window.napplet`: it\n * bounds host policy to current runtime wiring before `shell.init` crosses into\n * an untrusted iframe.\n *\n * @param hooks - Shell host wiring and optional per-identity grant policy.\n * @param identity - The source's creation-time identity.\n * @returns A fresh immutable environment whose entries are exact live subsets.\n */\nexport function resolveShellEnvironment(\n  hooks: ShellAdapter,\n  identity: OriginIdentity,\n): ShellEnvironment {\n  const capabilities = buildShellCapabilities(hooks);\n  const disabled = new Set(hooks.capabilities?.disabledDomains ?? []);\n  const services = getLiveServices(hooks, capabilities.domains, disabled);\n  const available = Object.freeze({\n    domains: freezeList(capabilities.domains),\n    services: freezeList(services),\n  });\n  const granted = hooks.capabilities?.resolveEnvironment?.(identity, available) ?? available;\n\n  return Object.freeze({\n    capabilities: Object.freeze({\n      domains: freezeList(intersectInOrder(available.domains, granted.domains)),\n    }),\n    services: freezeList(intersectInOrder(available.services, granted.services)),\n  });\n}\n\nfunction isServiceDomainLive(hooks: ShellAdapter, domain: string): boolean {\n  if (!hooks.services?.[domain]) return false;\n\n  switch (domain) {\n    case 'outbox': return Boolean(hooks.relayPool);\n    case 'upload': return hooks.upload?.getUploader() !== null && hooks.upload?.getUploader() !== undefined;\n    case 'intent': return hooks.intent?.isAvailable() === true;\n    case 'link': return hooks.link?.isAvailable() === true;\n    case 'common': return hooks.common?.isAvailable() === true;\n    case 'lists': return hooks.lists?.isAvailable() === true;\n    case 'serial': return hooks.serial?.isAvailable() === true;\n    case 'ble': return hooks.ble?.isAvailable() === true;\n    case 'webrtc': return hooks.webrtc?.isAvailable() === true;\n    case 'dm': return hooks.dm !== undefined;\n    default: return true;\n  }\n}\n\nfunction getLiveServices(\n  hooks: ShellAdapter,\n  domains: readonly string[],\n  disabled: ReadonlySet<string>,\n): string[] {\n  const liveDomains = new Set(domains);\n  return Object.keys(hooks.services ?? {}).filter((name) => {\n    if (disabled.has(name)) return false;\n    return !SERVICE_ONLY_DOMAINS.includes(name as typeof SERVICE_ONLY_DOMAINS[number]) || liveDomains.has(name);\n  });\n}\n\nfunction intersectInOrder(available: readonly string[], requested: readonly string[]): string[] {\n  const requestedSet = new Set(requested);\n  return available.filter((entry) => requestedSet.has(entry));\n}\n\nfunction freezeList(values: readonly string[]): readonly string[] {\n  return Object.freeze([...values]);\n}\n","import type { Runtime, SessionEntry } from '@kehto/runtime';\nimport { originRegistry, type OriginIdentity } from './origin-registry.js';\nimport { resolveShellEnvironment } from './shell-init.js';\nimport type { ShellAdapter, ShellEnvironment } from './types.js';\n\ninterface ShellReadyOptions {\n  hooks: ShellAdapter;\n  origin: string;\n  runtime: Runtime;\n  state: ShellReadyState;\n  sourceRegistrationId: number;\n  sourceWindow: Window;\n  windowId: string;\n}\n\n/** State owned by one ShellBridge instance for its NAP-SHELL lifecycles. */\nexport interface ShellReadyState {\n  isDomainAllowed(windowId: string, domain: string): boolean;\n  clear(): void;\n  readonly initSent: WeakMap<Window, number>;\n  readonly sessionRegistration: Map<string, number>;\n  readonly environments: Map<string, ShellEnvironment>;\n}\n\n/** Create isolated handshake state for one bridge/runtime pair. */\nexport function createShellReadyState(): ShellReadyState {\n  const initSent = new WeakMap<Window, number>();\n  const sessionRegistration = new Map<string, number>();\n  const environments = new Map<string, ShellEnvironment>();\n  return {\n    initSent,\n    sessionRegistration,\n    environments,\n    isDomainAllowed(windowId, domain): boolean {\n      return environments.get(windowId)?.capabilities.domains.includes(domain) ?? false;\n    },\n    clear(): void {\n      sessionRegistration.clear();\n      environments.clear();\n    },\n  };\n}\n\nexport function handleShellReady({\n  hooks,\n  origin,\n  runtime,\n  state,\n  sourceRegistrationId,\n  sourceWindow,\n  windowId,\n}: ShellReadyOptions): void {\n  // SHELL-01: exactly-once shell.init per registered Window lifecycle.\n  if (state.initSent.get(sourceWindow) === sourceRegistrationId) {\n    return;\n  }\n\n  const identity = resolveNip5dIdentity(hooks, windowId, sourceWindow);\n  if (!identity) return;\n\n  registerNip5dSessionIfNeeded({ origin, runtime, state, sourceRegistrationId, windowId, identity });\n  const environment = originRegistry.getEnvironment(sourceWindow) ?? resolveShellEnvironment(hooks, identity);\n  state.environments.set(windowId, environment);\n  postShellInit(sourceWindow, environment);\n  state.initSent.set(sourceWindow, sourceRegistrationId);\n}\n\nfunction registerNip5dSessionIfNeeded({\n  origin,\n  runtime,\n  state,\n  sourceRegistrationId,\n  windowId,\n  identity,\n}: Pick<ShellReadyOptions, 'origin' | 'runtime' | 'state' | 'sourceRegistrationId' | 'windowId'> & {\n  identity: OriginIdentity;\n}): void {\n  // NIP-5D: register a source-identity session entry in runtime.sessionRegistry\n  // if one does not already exist for this windowId. This wires the originRegistry\n  // identity into the runtime so domain handlers (storage/state, inc, etc.) can\n  // resolve the napplet via getEntryByWindowId(windowId).\n  const existing = runtime.sessionRegistry.getEntryByWindowId(windowId);\n  const previousRegistration = state.sessionRegistration.get(windowId);\n  if (existing && previousRegistration === sourceRegistrationId) {\n    return;\n  }\n  if (existing && previousRegistration !== undefined) {\n    runtime.sessionRegistry.unregister(windowId);\n  }\n  if (existing && previousRegistration === undefined) return;\n\n  const entry: SessionEntry = {\n    pubkey: '',\n    windowId,\n    origin,\n    type: 'nip5d',\n    dTag: identity.dTag,\n    aggregateHash: identity.aggregateHash,\n    registeredAt: Date.now(),\n    instanceId: crypto.randomUUID(),\n    provenance: 'nip-5d',\n  };\n  runtime.sessionRegistry.register(windowId, entry);\n  state.sessionRegistration.set(windowId, sourceRegistrationId);\n}\n\nfunction resolveNip5dIdentity(\n  hooks: ShellAdapter,\n  windowId: string,\n  sourceWindow: Window,\n): { dTag: string; aggregateHash: string } | null {\n  // Identity resolution order:\n  //   1. hooks.onNip5dIframeCreate?.(windowId) — preferred.\n  //   2. originRegistry.getIdentity(win) — fallback for hosts that register\n  //      identity directly via originRegistry.register(win, windowId, identity).\n  const hookIdentity = hooks.onNip5dIframeCreate?.(windowId);\n  if (hookIdentity !== null && hookIdentity !== undefined) {\n    return Object.freeze({\n      dTag: hookIdentity.dTag,\n      aggregateHash: hookIdentity.aggregateHash,\n    });\n  }\n\n  const originIdentity = originRegistry.getIdentity(sourceWindow);\n  if (!originIdentity) {\n    return null;\n  }\n\n  return Object.freeze({\n    dTag: originIdentity.dTag,\n    aggregateHash: originIdentity.aggregateHash,\n  });\n}\n\nfunction postShellInit(\n  win: Window,\n  environment: ShellEnvironment,\n): void {\n  const initMsg = {\n    type: 'shell.init',\n    capabilities: environment.capabilities,\n    services: environment.services,\n  };\n  win.postMessage(initMsg, '*');\n}\n","/**\n * The injected implementation must remain one self-contained function: the\n * renderer serializes it ahead of verified artifact scripts without changing\n * the signed artifact bytes. Splitting it into imported helpers would leave\n * unresolved closures in the generated `srcdoc`.\n *\n * aislop-ignore-file complexity/file-too-large complexity/function-too-long\n */\n\n/**\n * Options for rendering the host-owned NIP-5D `window.napplet` namespace prelude.\n *\n * @example\n * ```ts\n * const options: NappletNamespacePreludeOptions = {\n *   domains: ['shell', 'relay', 'identity'],\n * };\n * ```\n */\nexport interface NappletNamespacePreludeOptions {\n  /**\n   * Optional bare NAP domain names the shell exposes to this napplet.\n   * Mandatory `shell` is injected even when omitted here.\n   */\n  domains: readonly string[];\n}\n\nfunction uniqueBareDomains(domains: readonly string[]): string[] {\n  const seen = new Set<string>();\n  const normalized: string[] = [];\n  for (const domain of domains) {\n    const value = domain.trim();\n    if (!value || value.includes(':') || value.startsWith('perm:') || seen.has(value)) {\n      continue;\n    }\n    seen.add(value);\n    normalized.push(value);\n  }\n  return normalized;\n}\n\nfunction scriptJson(value: unknown): string {\n  return JSON.stringify(value).replace(/</g, '\\\\u003c');\n}\n\n/**\n * Render the host-owned NIP-5D bootstrap that exposes available NAP domains\n * under `window.napplet` before napplet artifact code runs.\n *\n * @param options - Domain availability to inject.\n * @returns An inline script tag suitable for `srcdoc` prelude insertion.\n * @example\n * ```ts\n * const prelude = renderNappletNamespacePrelude({\n *   domains: ['shell', 'relay', 'identity'],\n * });\n * ```\n */\nexport function renderNappletNamespacePrelude(options: NappletNamespacePreludeOptions): string {\n  const domains = uniqueBareDomains(['shell', ...options.domains]);\n  return `<script data-kehto-nip5d-injection>(${nappletNamespacePrelude.toString()})(${scriptJson(domains)});</script>`;\n}\n\n/**\n * Insert the NIP-5D namespace prelude into HTML before authored scripts.\n *\n * @param html - Verified napplet artifact HTML.\n * @param options - Domain availability to inject.\n * @returns HTML with the prelude inside `<head>` when possible.\n * @example\n * ```ts\n * const srcdoc = injectNappletNamespacePrelude(verifiedHtml, {\n *   domains: ['shell', 'relay', 'identity'],\n * });\n * iframe.srcdoc = srcdoc;\n * ```\n */\nexport function injectNappletNamespacePrelude(\n  html: string,\n  options: NappletNamespacePreludeOptions,\n): string {\n  const prelude = renderNappletNamespacePrelude(options);\n  const cspMeta = /(<meta\\s+http-equiv=[\"']Content-Security-Policy[\"'][^>]*>)/i;\n  if (cspMeta.test(html)) {\n    return html.replace(cspMeta, (match) => `${match}${prelude}`);\n  }\n  if (/<head[^>]*>/i.test(html)) {\n    return html.replace(/<head[^>]*>/i, (open) => `${open}${prelude}`);\n  }\n  if (/<html[^>]*>/i.test(html)) {\n    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${prelude}</head>`);\n  }\n  return `${prelude}${html}`;\n}\n\nfunction nappletNamespacePrelude(domains: string[]): void {\n  const target = window as Window & { napplet?: Record<string, unknown> };\n  const allowed = new Set(domains);\n  const requestTimeoutMs = 30_000;\n\n  type RuntimeMessage = { type: string; id?: string; [key: string]: unknown };\n  type Listener = (event: MessageEvent) => void;\n\n  function id(): string {\n    if (target.crypto?.randomUUID) return target.crypto.randomUUID();\n    return `napplet-${Date.now()}-${Math.random().toString(16).slice(2)}`;\n  }\n\n  function post(message: RuntimeMessage): void {\n    target.parent.postMessage(message, '*');\n  }\n\n  function listen(listener: Listener): () => void {\n    target.addEventListener('message', listener);\n    return () => target.removeEventListener('message', listener);\n  }\n\n  function isParentMessage(event: MessageEvent): boolean {\n    return event.source === target.parent;\n  }\n\n  function request<T>(\n    message: RuntimeMessage,\n    resultType: string,\n    map: (message: RuntimeMessage) => T,\n    options: { rejectOnError?: boolean } = {},\n  ): Promise<T> {\n    const requestId = message.id ?? id();\n    const outbound = { ...message, id: requestId };\n    return new Promise<T>((resolve, reject) => {\n      const off = listen((event) => {\n        if (!isParentMessage(event)) return;\n        const incoming = event.data;\n        if (typeof incoming !== 'object' || incoming === null) return;\n        const msg = incoming as RuntimeMessage;\n        if (msg.type !== resultType && msg.type !== `${message.type}.error`) return;\n        if (msg.id !== requestId) return;\n        off();\n        clearTimeout(timer);\n        const error = typeof msg.error === 'string' ? msg.error : '';\n        if (error && options.rejectOnError !== false) {\n          reject(new Error(error));\n          return;\n        }\n        try {\n          resolve(map(msg));\n        } catch (err) {\n          reject(err);\n        }\n      });\n      const timer = setTimeout(() => {\n        off();\n        reject(new Error(`${message.type} timed out`));\n      }, requestTimeoutMs);\n      post(outbound);\n    });\n  }\n\n  function fire(message: RuntimeMessage): void {\n    post(message);\n  }\n\n  function isConventionTopic(topic: string): boolean {\n    const pathEnd = topic.search(/[?#]/);\n    const path = pathEnd === -1 ? topic : topic.slice(0, pathEnd);\n    return /^napplet:[^/?#]+\\/[^/?#]+$/.test(path);\n  }\n\n  function normalizeConventionUri(\n    topic: unknown,\n    hasExplicitPayload: boolean,\n  ): { topic: string; payload?: Record<string, string> } {\n    if (typeof topic !== 'string') throw new TypeError('INC topic must be text');\n    if (!isConventionTopic(topic)) return { topic };\n    if (topic.includes('#')) throw new TypeError('Convention topics cannot contain fragments');\n    const queryStart = topic.indexOf('?');\n    if (queryStart === -1) {\n      return { topic };\n    }\n    if (hasExplicitPayload) {\n      throw new TypeError('Convention queries cannot be combined with an explicit payload');\n    }\n\n    const entries: Array<[string, string]> = [];\n    const names = new Set<string>();\n    const query = topic.slice(queryStart + 1);\n    if (query) {\n      for (const pair of query.split('&')) {\n        const separator = pair.indexOf('=');\n        if (separator < 0) {\n          throw new TypeError('Convention query parameters must use name=value form');\n        }\n        let name: string;\n        let value: string;\n        try {\n          name = decodeURIComponent(pair.slice(0, separator));\n          value = decodeURIComponent(pair.slice(separator + 1));\n        } catch {\n          throw new TypeError('Convention query contains malformed percent encoding');\n        }\n        if (names.has(name)) throw new TypeError('Convention query names must be unique');\n        names.add(name);\n        entries.push([name, value]);\n      }\n    }\n    return { topic: topic.slice(0, queryStart), payload: Object.fromEntries(entries) };\n  }\n\n  function resultOrError(msg: RuntimeMessage): Record<string, unknown> {\n    return msg;\n  }\n\n  function withoutEnvelope(msg: Record<string, unknown>): Record<string, unknown> {\n    const { type: _type, id: _id, ...result } = msg;\n    return result;\n  }\n\n  function fieldOrThrow<T>(msg: RuntimeMessage, field: string, fallback: string): T {\n    if (Object.prototype.hasOwnProperty.call(msg, field)) return msg[field] as T;\n    throw new Error(typeof msg.error === 'string' ? msg.error : fallback);\n  }\n\n  function voidResult(msg: RuntimeMessage, fallback: string): void {\n    if (typeof msg.error === 'string' && msg.error) throw new Error(msg.error);\n    if (msg.ok === false) throw new Error(fallback);\n  }\n\n  function subscriptionHandle(close: () => void): { close(): void } {\n    let closed = false;\n    return {\n      close() {\n        if (closed) return;\n        closed = true;\n        close();\n      },\n    };\n  }\n\n  function makeShell(): Record<string, unknown> {\n    type ShellEnvironment = {\n      capabilities: Readonly<{ domains: readonly string[] }>;\n      services: readonly string[];\n    };\n    type ReadyHandler = (environment: ShellEnvironment) => void;\n\n    const emptyServices = Object.freeze([] as string[]);\n    const readyHandlers = new Set<ReadyHandler>();\n    let environment: ShellEnvironment | undefined;\n    let resolveReady: (environment: ShellEnvironment) => void = () => undefined;\n    const ready = new Promise<ShellEnvironment>((resolve) => {\n      resolveReady = resolve;\n    });\n\n    const off = listen((event) => {\n      if (!isParentMessage(event) || environment) return;\n      const incoming = event.data;\n      if (typeof incoming !== 'object' || incoming === null) return;\n      const message = incoming as RuntimeMessage;\n      if (message.type !== 'shell.init') return;\n\n      const rawCapabilities = message.capabilities;\n      const rawDomains = typeof rawCapabilities === 'object' && rawCapabilities !== null\n        ? (rawCapabilities as Record<string, unknown>).domains\n        : undefined;\n      if (!Array.isArray(rawDomains)) return;\n\n      const domains = freezeStrings(rawDomains);\n      const services = freezeStrings(Array.isArray(message.services) ? message.services : []);\n      environment = Object.freeze({\n        capabilities: Object.freeze({ domains }),\n        services,\n      });\n      off();\n      resolveReady(environment);\n      for (const handler of readyHandlers) handler(environment);\n      readyHandlers.clear();\n    });\n\n    function freezeStrings(values: readonly unknown[]): readonly string[] {\n      const seen = new Set<string>();\n      const strings: string[] = [];\n      for (const value of values) {\n        if (typeof value !== 'string' || value.length === 0 || seen.has(value)) continue;\n        seen.add(value);\n        strings.push(value);\n      }\n      return Object.freeze(strings);\n    }\n\n    function supports(domain: string): boolean {\n      return typeof domain === 'string' && environment?.capabilities.domains.includes(domain) === true;\n    }\n\n    const shell = {\n      ready: () => ready,\n      supports,\n      get services(): readonly string[] {\n        return environment?.services ?? emptyServices;\n      },\n      set services(_services: readonly string[]) {\n        // Ignore napplet/shim reassignment; NAP-SHELL services stay runtime-owned.\n      },\n      onReady(handler: ReadyHandler) {\n        if (environment) {\n          handler(environment);\n          return subscriptionHandle(() => undefined);\n        }\n        readyHandlers.add(handler);\n        return subscriptionHandle(() => readyHandlers.delete(handler));\n      },\n    };\n\n    post({ type: 'shell.ready' });\n    return shell;\n  }\n\n  function domainEventHandle(\n    eventType: string,\n    callback: (event: unknown) => void,\n    select: (message: RuntimeMessage) => unknown = (message) => message.event,\n  ): { close(): void } {\n    const off = listen((event) => {\n      if (!isParentMessage(event)) return;\n      const msg = event.data as RuntimeMessage;\n      if (typeof msg === 'object' && msg !== null && msg.type === eventType) callback(select(msg));\n    });\n    return subscriptionHandle(off);\n  }\n\n  function makeRelay(): Record<string, unknown> {\n    return {\n      subscribe(filters: unknown, onEvent: (result: unknown) => void, onEose: () => void, options?: { relay?: string }) {\n        const subId = id();\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg !== 'object' || msg === null || msg.subId !== subId) return;\n          if (msg.type === 'relay.event') onEvent(msg.result);\n          else if (msg.type === 'relay.eose') onEose();\n          else if (msg.type === 'relay.closed') off();\n        });\n        fire({\n          type: 'relay.subscribe',\n          id: id(),\n          subId,\n          filters: Array.isArray(filters) ? filters : [filters],\n          ...(options?.relay ? { relay: options.relay } : {}),\n        });\n        return subscriptionHandle(() => {\n          fire({ type: 'relay.close', id: id(), subId });\n          off();\n        });\n      },\n      publish(template: unknown) {\n        return request(\n          { type: 'relay.publish', event: template },\n          'relay.publish.result',\n          (msg) => {\n            if (!msg.event) throw new Error('relay.publish.result missing event');\n            return msg.event;\n          },\n        );\n      },\n      publishEncrypted(template: unknown, recipient: string, encryption = 'nip44') {\n        return request(\n          { type: 'relay.publishEncrypted', event: template, recipient, encryption },\n          'relay.publishEncrypted.result',\n          (msg) => {\n            if (!msg.event) throw new Error('relay.publishEncrypted.result missing event');\n            return msg.event;\n          },\n        );\n      },\n      query(filters: unknown) {\n        return request(\n          { type: 'relay.query', filters: Array.isArray(filters) ? filters : [filters] },\n          'relay.query.result',\n          (msg) => Array.isArray(msg.events) ? msg.events : [],\n        );\n      },\n    };\n  }\n\n  function makeInc(): Record<string, unknown> {\n    type IncEvent = { topic: string; sender: string; payload?: unknown };\n    type TopicState = {\n      handlers: Set<(event: IncEvent) => void>;\n      offEvent: () => void;\n      offResult: () => void;\n    };\n    const topicStates = new Map<string, TopicState>();\n    type ChannelEvent = { channelId: string; sender: string; payload?: unknown };\n    type ChannelClosed = { channelId: string; reason?: string };\n    type ChannelState = {\n      channelId: string;\n      peer: string;\n      eventHandlers: Set<(event: ChannelEvent) => void>;\n      closedHandlers: Set<(closed: ChannelClosed) => void>;\n      pendingEvents: ChannelEvent[];\n      closed?: ChannelClosed;\n    };\n    const maxRetainedEvents = 32;\n    const channelStates = new Map<string, ChannelState>();\n    const openedHandlers = new Set<(handle: Record<string, unknown>) => void>();\n    const pendingOpened: ChannelState[] = [];\n    const unopenedEvents = new Map<string, ChannelEvent[]>();\n    const unopenedClosed = new Map<string, ChannelClosed>();\n\n    function stableSubscriptionTopic(topic: unknown): string {\n      if (typeof topic !== 'string') throw new TypeError('INC topic must be text');\n      if (isConventionTopic(topic) && (topic.includes('?') || topic.includes('#'))) {\n        throw new TypeError('INC subscriptions require a queryless topic identity');\n      }\n      return topic;\n    }\n\n    function closeChannelState(state: ChannelState, closed: ChannelClosed, notifyShell: boolean): void {\n      if (state.closed) return;\n      state.closed = closed;\n      if (notifyShell) fire({ type: 'inc.channel.close', channelId: state.channelId });\n      for (const handler of state.closedHandlers) handler(closed);\n    }\n\n    function makeChannelHandle(state: ChannelState): Record<string, unknown> {\n      return {\n        id: state.channelId,\n        peer: state.peer,\n        emit(payload?: unknown) {\n          if (state.closed) return;\n          fire({ type: 'inc.channel.emit', channelId: state.channelId, ...(payload === undefined ? {} : { payload }) });\n        },\n        on(handler: (event: ChannelEvent) => void) {\n          if (typeof handler !== 'function') throw new TypeError('INC channel event handler must be a function');\n          state.eventHandlers.add(handler);\n          const pending = state.pendingEvents.splice(0);\n          for (const event of pending) handler(event);\n          return subscriptionHandle(() => state.eventHandlers.delete(handler));\n        },\n        onClosed(handler: (closed: ChannelClosed) => void) {\n          if (typeof handler !== 'function') throw new TypeError('INC channel close handler must be a function');\n          state.closedHandlers.add(handler);\n          if (state.closed) handler(state.closed);\n          return subscriptionHandle(() => state.closedHandlers.delete(handler));\n        },\n        close() {\n          closeChannelState(state, { channelId: state.channelId }, true);\n        },\n      };\n    }\n\n    function materializeChannel(channelId: string, peer: string): ChannelState {\n      const existing = channelStates.get(channelId);\n      if (existing) return existing;\n      const state: ChannelState = {\n        channelId,\n        peer,\n        eventHandlers: new Set(),\n        closedHandlers: new Set(),\n        pendingEvents: unopenedEvents.get(channelId) ?? [],\n      };\n      unopenedEvents.delete(channelId);\n      channelStates.set(channelId, state);\n      const closed = unopenedClosed.get(channelId);\n      unopenedClosed.delete(channelId);\n      if (closed) closeChannelState(state, closed, false);\n      return state;\n    }\n\n    function deliverOpened(state: ChannelState): void {\n      const handle = makeChannelHandle(state);\n      if (openedHandlers.size > 0) {\n        for (const handler of openedHandlers) handler(handle);\n        return;\n      }\n      pendingOpened.push(state);\n    }\n\n    function receiveChannelEvent(channelId: string, sender: string, payloadPresent: boolean, payload: unknown): void {\n      const event: ChannelEvent = payloadPresent ? { channelId, sender, payload } : { channelId, sender };\n      const state = channelStates.get(channelId);\n      if (!state) {\n        const pending = unopenedEvents.get(channelId) ?? [];\n        if (pending.length >= maxRetainedEvents) {\n          unopenedEvents.delete(channelId);\n          unopenedClosed.set(channelId, { channelId, reason: 'buffer overflow' });\n          fire({ type: 'inc.channel.close', channelId });\n          return;\n        }\n        pending.push(event);\n        unopenedEvents.set(channelId, pending);\n        return;\n      }\n      if (state.closed) return;\n      if (state.eventHandlers.size > 0) {\n        for (const handler of state.eventHandlers) handler(event);\n        return;\n      }\n      if (state.pendingEvents.length >= maxRetainedEvents) {\n        closeChannelState(state, { channelId, reason: 'buffer overflow' }, true);\n        return;\n      }\n      state.pendingEvents.push(event);\n    }\n\n    listen((event) => {\n      if (!isParentMessage(event)) return;\n      const msg = event.data as RuntimeMessage;\n      if (typeof msg !== 'object' || msg === null || typeof msg.type !== 'string') return;\n      if (msg.type === 'inc.channel.opened' && typeof msg.channelId === 'string' && typeof msg.peer === 'string') {\n        deliverOpened(materializeChannel(msg.channelId, msg.peer));\n        return;\n      }\n      if (msg.type === 'inc.channel.event' && typeof msg.channelId === 'string' && typeof msg.sender === 'string') {\n        receiveChannelEvent(msg.channelId, msg.sender, Object.prototype.hasOwnProperty.call(msg, 'payload'), msg.payload);\n        return;\n      }\n      if (msg.type === 'inc.channel.closed' && typeof msg.channelId === 'string') {\n        const closed: ChannelClosed = typeof msg.reason === 'string'\n          ? { channelId: msg.channelId, reason: msg.reason }\n          : { channelId: msg.channelId };\n        const state = channelStates.get(msg.channelId);\n        if (state) closeChannelState(state, closed, false);\n        else unopenedClosed.set(msg.channelId, closed);\n      }\n    });\n\n    return {\n      emit(topic: string, payload?: unknown) {\n        const transposed = normalizeConventionUri(topic, arguments.length > 1);\n        fire({\n          type: 'inc.emit',\n          topic: transposed.topic,\n          ...(transposed.payload === undefined && payload === undefined ? {} : { payload: transposed.payload ?? payload }),\n        });\n      },\n      on(topic: string, callback: (event: IncEvent) => void) {\n        const stableTopic = stableSubscriptionTopic(topic);\n        if (typeof callback !== 'function') throw new TypeError('INC subscription handler must be a function');\n        let state = topicStates.get(stableTopic);\n        if (!state) {\n          const handlers = new Set<(event: IncEvent) => void>();\n          const subscriptionId = id();\n          const offEvent = listen((event) => {\n            if (!isParentMessage(event)) return;\n            const msg = event.data as RuntimeMessage;\n            if (\n              typeof msg !== 'object'\n              || msg === null\n              || msg.type !== 'inc.event'\n              || msg.topic !== stableTopic\n              || typeof msg.sender !== 'string'\n            ) return;\n            const delivered: IncEvent = Object.prototype.hasOwnProperty.call(msg, 'payload')\n              ? { topic: stableTopic, sender: msg.sender, payload: msg.payload }\n              : { topic: stableTopic, sender: msg.sender };\n            for (const handler of handlers) handler(delivered);\n          });\n          const offResult = listen((event) => {\n            if (!isParentMessage(event)) return;\n            const msg = event.data as RuntimeMessage;\n            if (typeof msg !== 'object' || msg === null || msg.type !== 'inc.subscribe.result' || msg.id !== subscriptionId) return;\n            offResult();\n            if (typeof msg.error === 'string' && msg.error) {\n              offEvent();\n              topicStates.delete(stableTopic);\n            }\n          });\n          state = { handlers, offEvent, offResult };\n          topicStates.set(stableTopic, state);\n          fire({ type: 'inc.subscribe', id: subscriptionId, topic: stableTopic });\n        }\n        state.handlers.add(callback);\n        return subscriptionHandle(() => {\n          const current = topicStates.get(stableTopic);\n          if (!current) return;\n          current.handlers.delete(callback);\n          if (current.handlers.size !== 0) return;\n          current.offEvent();\n          current.offResult();\n          topicStates.delete(stableTopic);\n          fire({ type: 'inc.unsubscribe', topic: stableTopic });\n        });\n      },\n      channel: {\n        open(targetDTag: string) {\n          return request(\n            { type: 'inc.channel.open', target: targetDTag },\n            'inc.channel.open.result',\n            (msg) => {\n              if (typeof msg.channelId !== 'string' || typeof msg.peer !== 'string') {\n                throw new Error('inc.channel.open.result missing channel identity');\n              }\n              return makeChannelHandle(materializeChannel(msg.channelId, msg.peer));\n            },\n          );\n        },\n        onOpened(handler: (handle: Record<string, unknown>) => void) {\n          if (typeof handler !== 'function') throw new TypeError('INC opened handler must be a function');\n          openedHandlers.add(handler);\n          const pending = pendingOpened.splice(0);\n          for (const state of pending) handler(makeChannelHandle(state));\n          return subscriptionHandle(() => openedHandlers.delete(handler));\n        },\n        list() {\n          return request(\n            { type: 'inc.channel.list' },\n            'inc.channel.list.result',\n            (msg) => Object.freeze((Array.isArray(msg.channels) ? msg.channels : []).flatMap((channel) => (\n              channel\n              && typeof channel === 'object'\n              && typeof (channel as Record<string, unknown>).id === 'string'\n              && typeof (channel as Record<string, unknown>).peer === 'string'\n                ? [Object.freeze({\n                  id: (channel as Record<string, unknown>).id as string,\n                  peer: (channel as Record<string, unknown>).peer as string,\n                })]\n                : []\n            ))),\n          );\n        },\n        broadcast(payload?: unknown) {\n          fire({ type: 'inc.channel.broadcast', ...(payload === undefined ? {} : { payload }) });\n        },\n      },\n    };\n  }\n\n  function makeStorage(): Record<string, unknown> {\n    const makeScope = (scope?: string) => ({\n      getItem(key: string) {\n        return request(\n          { type: 'storage.get', key, ...(scope ? { scope } : {}) },\n          'storage.get.result',\n          (msg) => msg.value ?? null,\n        );\n      },\n      setItem(key: string, value: string) {\n        return request(\n          { type: 'storage.set', key, value, ...(scope ? { scope } : {}) },\n          'storage.set.result',\n          () => undefined,\n        );\n      },\n      removeItem(key: string) {\n        return request(\n          { type: 'storage.remove', key, ...(scope ? { scope } : {}) },\n          'storage.remove.result',\n          () => undefined,\n        );\n      },\n      keys() {\n        return request(\n          { type: 'storage.keys', ...(scope ? { scope } : {}) },\n          'storage.keys.result',\n          (msg) => Array.isArray(msg.keys) ? msg.keys : [],\n        );\n      },\n    });\n    return { ...makeScope(), instance: makeScope('instance') };\n  }\n\n  function makeIdentity(): Record<string, unknown> {\n    const read = <T>(type: string, field: string, fallback: T, payload: Record<string, unknown> = {}) => request(\n      { type, ...payload },\n      `${type}.result`,\n      (msg) => (Object.prototype.hasOwnProperty.call(msg, field) ? msg[field] : fallback) as T,\n      { rejectOnError: type !== 'identity.getPublicKey' },\n    );\n    return Object.freeze({\n      getPublicKey: () => read('identity.getPublicKey', 'pubkey', ''),\n      getRelays: () => read('identity.getRelays', 'relays', {}),\n      getProfile: () => read('identity.getProfile', 'profile', null),\n      getFollows: () => read('identity.getFollows', 'pubkeys', []),\n      getList: (listType: string) => read('identity.getList', 'entries', [], { listType }),\n      getZaps: () => read('identity.getZaps', 'zaps', []),\n      getMutes: () => read('identity.getMutes', 'pubkeys', []),\n      getBlocked: () => read('identity.getBlocked', 'pubkeys', []),\n      getBadges: () => read('identity.getBadges', 'badges', []),\n      onChanged(handler: (pubkey: string) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg !== 'object' || msg === null || msg.type !== 'identity.changed') return;\n          if (typeof msg.pubkey === 'string') handler(msg.pubkey);\n        });\n        return subscriptionHandle(off);\n      },\n    });\n  }\n\n  function makeTheme(): Record<string, unknown> {\n    return {\n      get: () => request({ type: 'theme.get' }, 'theme.get.result', (msg) => msg.theme),\n      onChanged(handler: (theme: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'theme.changed') handler(msg.theme);\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  const keyActionCallbacks = new Map<string, Set<() => void>>();\n  const keyBindingActions = new Map<string, string>();\n  const modifierKeys = new Set(['Control', 'Alt', 'Shift', 'Meta']);\n  const reservedKeyNames = new Set(['Tab', 'Escape']);\n  const nonTextInputTypes = new Set([\n    'button',\n    'checkbox',\n    'color',\n    'file',\n    'hidden',\n    'image',\n    'radio',\n    'range',\n    'reset',\n    'submit',\n  ]);\n  let keysSmartForwardingInstalled = false;\n\n  function normalizeKeyName(key: unknown): string {\n    if (typeof key !== 'string') return '';\n    return key.length === 1 ? key.toUpperCase() : key;\n  }\n\n  function keyComboKey(value: {\n    ctrl: boolean;\n    alt: boolean;\n    shift: boolean;\n    meta: boolean;\n    key: string;\n  }): string {\n    return `${value.ctrl}|${value.alt}|${value.shift}|${value.meta}|${normalizeKeyName(value.key)}`;\n  }\n\n  function bindingComboKey(binding: unknown): string | null {\n    if (typeof binding !== 'string' || binding.trim() === '') return null;\n    const parts = binding.split('+');\n    const key = parts.pop()?.trim();\n    if (!key) return null;\n    const combo = { ctrl: false, alt: false, shift: false, meta: false, key };\n    for (const raw of parts) {\n      const token = raw.trim().toLowerCase();\n      if (!token) continue;\n      if (token === 'ctrl' || token === 'control') combo.ctrl = true;\n      else if (token === 'alt' || token === 'option') combo.alt = true;\n      else if (token === 'shift') combo.shift = true;\n      else if (token === 'meta' || token === 'cmd' || token === 'command' || token === 'win' || token === 'super') combo.meta = true;\n      else return null;\n    }\n    return keyComboKey(combo);\n  }\n\n  function eventComboKey(event: {\n    key?: unknown;\n    ctrlKey?: unknown;\n    altKey?: unknown;\n    shiftKey?: unknown;\n    metaKey?: unknown;\n  }): string | null {\n    const key = typeof event.key === 'string' ? event.key : '';\n    if (!key) return null;\n    return keyComboKey({\n      ctrl: Boolean(event.ctrlKey),\n      alt: Boolean(event.altKey),\n      shift: Boolean(event.shiftKey),\n      meta: Boolean(event.metaKey),\n      key,\n    });\n  }\n\n  function isTextEntryTarget(value: unknown): boolean {\n    if (!value || typeof value !== 'object') return false;\n    const targetNode = value as {\n      tagName?: unknown;\n      type?: unknown;\n      isContentEditable?: unknown;\n      closest?: (selector: string) => unknown;\n    };\n    if (targetNode.isContentEditable === true) return true;\n    const tagName = typeof targetNode.tagName === 'string' ? targetNode.tagName.toLowerCase() : '';\n    if (tagName === 'textarea' || tagName === 'select') return true;\n    if (tagName === 'input') {\n      const type = typeof targetNode.type === 'string' && targetNode.type ? targetNode.type.toLowerCase() : 'text';\n      return !nonTextInputTypes.has(type);\n    }\n    if (typeof targetNode.closest === 'function') {\n      try {\n        return Boolean(targetNode.closest('[contenteditable=\"\"],[contenteditable=\"true\"],[contenteditable=\"plaintext-only\"]'));\n      } catch {\n        return false;\n      }\n    }\n    return false;\n  }\n\n  function rememberKeyBinding(actionId: unknown, binding: unknown): void {\n    if (typeof actionId !== 'string') return;\n    const combo = bindingComboKey(binding);\n    if (combo) keyBindingActions.set(combo, actionId);\n  }\n\n  function removeKeyBindingsForAction(actionId: string): void {\n    for (const [combo, boundActionId] of keyBindingActions) {\n      if (boundActionId === actionId) keyBindingActions.delete(combo);\n    }\n  }\n\n  function replaceKeyBindings(bindings: unknown): void {\n    keyBindingActions.clear();\n    if (!Array.isArray(bindings)) return;\n    for (const binding of bindings) {\n      if (!binding || typeof binding !== 'object') continue;\n      const entry = binding as { actionId?: unknown; key?: unknown };\n      rememberKeyBinding(entry.actionId, entry.key);\n    }\n  }\n\n  function notifyKeyAction(actionId: string): void {\n    for (const callback of keyActionCallbacks.get(actionId) ?? []) callback();\n  }\n\n  function forwardKeyEvent(event: {\n    key?: unknown;\n    code?: unknown;\n    ctrl?: unknown;\n    alt?: unknown;\n    shift?: unknown;\n    meta?: unknown;\n    ctrlKey?: unknown;\n    altKey?: unknown;\n    shiftKey?: unknown;\n    metaKey?: unknown;\n  } = {}): void {\n    fire({\n      type: 'keys.forward',\n      key: typeof event.key === 'string' ? event.key : '',\n      code: typeof event.code === 'string' ? event.code : '',\n      ctrl: Boolean(event.ctrl ?? event.ctrlKey),\n      alt: Boolean(event.alt ?? event.altKey),\n      shift: Boolean(event.shift ?? event.shiftKey),\n      meta: Boolean(event.meta ?? event.metaKey),\n    });\n  }\n\n  function installKeysSmartForwarding(): void {\n    if (keysSmartForwardingInstalled) return;\n    keysSmartForwardingInstalled = true;\n\n    listen((event) => {\n      if (!isParentMessage(event)) return;\n      const msg = event.data as RuntimeMessage;\n      if (typeof msg === 'object' && msg !== null && msg.type === 'keys.bindings') {\n        replaceKeyBindings(msg.bindings);\n      }\n    });\n\n    const documentLike = target.document as {\n      activeElement?: unknown;\n      addEventListener?: (type: string, listener: (event: Event) => void) => void;\n    } | undefined;\n    const listenerTarget = typeof documentLike?.addEventListener === 'function' ? documentLike : target;\n    if (typeof listenerTarget.addEventListener !== 'function') return;\n\n    listenerTarget.addEventListener('keydown', (event: Event) => {\n      const keyEvent = event as Event & {\n        key?: string;\n        code?: string;\n        ctrlKey?: boolean;\n        altKey?: boolean;\n        shiftKey?: boolean;\n        metaKey?: boolean;\n        isComposing?: boolean;\n        target?: unknown;\n        preventDefault?: () => void;\n      };\n      if (keyEvent.isComposing) return;\n      if (typeof keyEvent.key === 'string' && modifierKeys.has(keyEvent.key)) return;\n      if (isTextEntryTarget(keyEvent.target ?? documentLike?.activeElement)) return;\n\n      const combo = eventComboKey(keyEvent);\n      const actionId = combo ? keyBindingActions.get(combo) : undefined;\n      const isReserved = typeof keyEvent.key === 'string' && reservedKeyNames.has(keyEvent.key);\n      if (actionId && !isReserved) {\n        keyEvent.preventDefault?.();\n        notifyKeyAction(actionId);\n        return;\n      }\n\n      forwardKeyEvent(keyEvent);\n    });\n  }\n\n  function makeKeys(): Record<string, unknown> {\n    installKeysSmartForwarding();\n    return {\n      forward: forwardKeyEvent,\n      registerAction: (action: unknown) => request(\n        { type: 'keys.registerAction', action },\n        'keys.registerAction.result',\n        resultOrError,\n      ).then((result) => {\n        const actionRecord = action && typeof action === 'object' ? action as { id?: unknown } : {};\n        const resultRecord = result as { actionId?: unknown; binding?: unknown };\n        rememberKeyBinding(\n          typeof resultRecord.actionId === 'string' ? resultRecord.actionId : actionRecord.id,\n          resultRecord.binding,\n        );\n        return result;\n      }),\n      unregisterAction: (actionId: string) => {\n        removeKeyBindingsForAction(actionId);\n        fire({ type: 'keys.unregisterAction', actionId });\n      },\n      onAction(actionId: string, callback: () => void) {\n        let callbacks = keyActionCallbacks.get(actionId);\n        if (!callbacks) {\n          callbacks = new Set();\n          keyActionCallbacks.set(actionId, callbacks);\n        }\n        callbacks.add(callback);\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'keys.action' && msg.actionId === actionId) callback();\n        });\n        return subscriptionHandle(() => {\n          off();\n          callbacks.delete(callback);\n          if (callbacks.size === 0) keyActionCallbacks.delete(actionId);\n        });\n      },\n    };\n  }\n\n  function makeMedia(): Record<string, unknown> {\n    const on = (type: string, sessionId: string, callback: (msg: RuntimeMessage) => void) => {\n      const off = listen((event) => {\n        if (!isParentMessage(event)) return;\n        const msg = event.data as RuntimeMessage;\n        if (typeof msg === 'object' && msg !== null && msg.type === type && msg.sessionId === sessionId) callback(msg);\n      });\n      return subscriptionHandle(off);\n    };\n    return {\n      createSession: (options: unknown) => request(\n        { type: 'media.session.create', ...((options && typeof options === 'object') ? options as Record<string, unknown> : {}) },\n        'media.session.create.result',\n        withoutEnvelope,\n        { rejectOnError: false },\n      ),\n      updateSession: (sessionId: string, metadata: unknown) => fire({ type: 'media.session.update', sessionId, metadata }),\n      destroySession: (sessionId: string) => fire({ type: 'media.session.destroy', sessionId }),\n      reportState: (sessionId: string, state: unknown) => fire({ type: 'media.state', sessionId, ...((state && typeof state === 'object') ? state as Record<string, unknown> : {}) }),\n      reportCapabilities: (sessionId: string, actions: unknown) => fire({ type: 'media.capabilities', sessionId, actions }),\n      sendCommand: (sessionId: string, action: string, value?: unknown) => fire({ type: 'media.command', sessionId, action, ...(value === undefined ? {} : { value }) }),\n      onCommand: (sessionId: string, callback: (action: unknown, value?: unknown) => void) => on('media.command', sessionId, (msg) => callback(msg.action, msg.value)),\n      onState: (sessionId: string, callback: (state: Record<string, unknown>) => void) => on('media.state', sessionId, (msg) => callback({\n        status: msg.status,\n        position: msg.position,\n        duration: msg.duration,\n        volume: msg.volume,\n      })),\n      onCapabilities: (sessionId: string, callback: (actions: unknown) => void) => on('media.capabilities', sessionId, (msg) => callback(msg.actions)),\n      onControls: (sessionId: string, callback: (controls: unknown) => void) => on('media.controls', sessionId, (msg) => callback(msg.controls)),\n    };\n  }\n\n  function makeNotify(): Record<string, unknown> {\n    const on = (type: string, callback: (msg: RuntimeMessage) => void) => {\n      const off = listen((event) => {\n        if (!isParentMessage(event)) return;\n        const msg = event.data as RuntimeMessage;\n        if (typeof msg === 'object' && msg !== null && msg.type === type) callback(msg);\n      });\n      return subscriptionHandle(off);\n    };\n    return {\n      send: (notification: Record<string, unknown>) => request(\n        { type: 'notify.send', ...notification },\n        'notify.send.result',\n        (msg) => ({ notificationId: fieldOrThrow(msg, 'notificationId', 'notify.send.result missing notificationId') }),\n      ),\n      dismiss: (notificationId: string) => fire({ type: 'notify.dismiss', notificationId }),\n      badge: (count: number) => fire({ type: 'notify.badge', count }),\n      registerChannel: (channel: Record<string, unknown>) => fire({ type: 'notify.channel.register', ...channel }),\n      requestPermission: (channel?: string) => request(\n        { type: 'notify.permission.request', ...(channel ? { channel } : {}) },\n        'notify.permission.result',\n        (msg) => ({ granted: msg.granted }),\n      ),\n      onAction: (callback: (notificationId: unknown, actionId: unknown) => void) => on('notify.action', (msg) => callback(msg.notificationId, msg.actionId)),\n      onClicked: (callback: (notificationId: unknown) => void) => on('notify.clicked', (msg) => callback(msg.notificationId)),\n      onDismissed: (callback: (notificationId: unknown, reason: unknown) => void) => on('notify.dismissed', (msg) => callback(msg.notificationId, msg.reason)),\n      onControls: (callback: (controls: unknown) => void) => on('notify.controls', (msg) => callback(msg.controls)),\n    };\n  }\n\n  function makeConfig(): Record<string, unknown> {\n    let schema: unknown = null;\n    return {\n      registerSchema: (nextSchema: unknown, version?: number) => request(\n        { type: 'config.registerSchema', schema: nextSchema, ...(version === undefined ? {} : { version }) },\n        'config.registerSchema.result',\n        (msg) => {\n          if (!msg.error) schema = nextSchema;\n          return undefined;\n        },\n      ),\n      get: () => request({ type: 'config.get' }, 'config.values', (msg) => msg.values ?? {}),\n      subscribe(callback: (values: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'config.values') callback(msg.values ?? {});\n        });\n        fire({ type: 'config.subscribe' });\n        return subscriptionHandle(() => {\n          fire({ type: 'config.unsubscribe' });\n          off();\n        });\n      },\n      openSettings: (options?: unknown) => fire({ type: 'config.openSettings', ...((options && typeof options === 'object') ? options as Record<string, unknown> : {}) }),\n      onSchemaError(callback: (error: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'config.schemaError') callback(msg);\n        });\n        return off;\n      },\n      get schema() {\n        return schema;\n      },\n    };\n  }\n\n  function makeResource(): Record<string, unknown> {\n    const objectUrls = new Set<string>();\n    const bytes = (url: string) => request({ type: 'resource.bytes', url }, 'resource.bytes.result', (msg) => msg.blob);\n    return {\n      info: () => request({ type: 'resource.info' }, 'resource.info.result', (msg) => msg.info),\n      bytes,\n      bytesMany: (urls: string[]) => request({ type: 'resource.bytesMany', urls }, 'resource.bytesMany.result', (msg) => Array.isArray(msg.items) ? msg.items : []),\n      bytesAsObjectURL(url: string) {\n        let objectUrl = '';\n        const handle = {\n          get url() {\n            return objectUrl;\n          },\n          revoke() {\n            if (objectUrl) {\n              URL.revokeObjectURL(objectUrl);\n              objectUrls.delete(objectUrl);\n              objectUrl = '';\n            }\n          },\n        };\n        void bytes(url).then((blob) => {\n          objectUrl = URL.createObjectURL(blob as Blob);\n          objectUrls.add(objectUrl);\n        });\n        return handle;\n      },\n      hydrateResourceCache: () => undefined,\n      revokeAllObjectURLs() {\n        for (const url of objectUrls) URL.revokeObjectURL(url);\n        objectUrls.clear();\n      },\n    };\n  }\n\n  function makeCvm(): Record<string, unknown> {\n    const req = <T>(type: string, payload: Record<string, unknown>, map: (msg: RuntimeMessage) => T) => request(\n      { type, ...payload },\n      `${type}.result`,\n      map,\n    );\n    const cvmRequest = (server: unknown, message: unknown, options?: Record<string, unknown>) => req(\n      'cvm.request',\n      { server, message, ...(options === undefined ? {} : { options }) },\n      (msg) => fieldOrThrow(msg, 'message', 'cvm.request.result missing message'),\n    );\n    const mcpCall = async (\n      server: unknown,\n      method: string,\n      params?: Record<string, unknown>,\n      options?: Record<string, unknown>,\n    ) => {\n      const reply = await cvmRequest(server, {\n        jsonrpc: '2.0',\n        id: id(),\n        method,\n        ...(params === undefined ? {} : { params }),\n      }, options) as { result?: unknown; error?: { message?: string } | string };\n      if (reply.error !== undefined) {\n        const error = reply.error;\n        throw new Error(typeof error === 'object' && error !== null && typeof error.message === 'string'\n          ? `${method}: ${error.message}`\n          : `${method} failed`);\n      }\n      return reply.result;\n    };\n    return {\n      discover: (query?: unknown) => req('cvm.discover', query === undefined ? {} : { query }, (msg) => Array.isArray(msg.servers) ? msg.servers : []),\n      request: cvmRequest,\n      listTools: async (server: unknown, options?: Record<string, unknown>) => {\n        const result = await mcpCall(server, 'tools/list', undefined, options) as { tools?: unknown[] } | undefined;\n        return result?.tools ?? [];\n      },\n      callTool: (server: unknown, name: string, args?: unknown, options?: Record<string, unknown>) => mcpCall(\n        server,\n        'tools/call',\n        { name, ...(args === undefined ? {} : { arguments: args }) },\n        options,\n      ),\n      listResources: async (server: unknown, options?: Record<string, unknown>) => {\n        const result = await mcpCall(server, 'resources/list', undefined, options) as { resources?: unknown[] } | undefined;\n        return result?.resources ?? [];\n      },\n      readResource: async (server: unknown, uri: string, options?: Record<string, unknown>) => {\n        const result = await mcpCall(server, 'resources/read', { uri }, options) as { contents?: unknown[] } | undefined;\n        const first = result?.contents?.[0];\n        if (!first) throw new Error(`resources/read returned no contents for ${uri}`);\n        return first;\n      },\n      close: (server: unknown) => req('cvm.close', { server }, (msg) => voidResult(msg, 'cvm close failed')),\n      onEvent(callback: (server: unknown, message: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (\n            typeof msg === 'object'\n            && msg !== null\n            && msg.type === 'cvm.event'\n            && msg.server !== undefined\n            && msg.message !== undefined\n          ) {\n            callback(msg.server, msg.message);\n          }\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  function makeOutbox(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>, resultType = `${type}.result`) => request(\n      { type, ...payload },\n      resultType,\n      resultOrError,\n      { rejectOnError: false },\n    );\n    return {\n      getEvent: (eventId: string, options?: Record<string, unknown>) => req('outbox.getEvent', { eventId, ...(options ? { options } : {}) }),\n      query: (filters: unknown, options?: Record<string, unknown>) => req('outbox.query', { filters: Array.isArray(filters) ? filters : [filters], ...(options ? { options } : {}) }),\n      subscribe(filters: unknown, options?: Record<string, unknown>) {\n        const subId = id();\n        const handlers = { event: new Set<(result: unknown) => void>(), closed: new Set<(reason?: unknown) => void>() };\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg !== 'object' || msg === null || msg.subId !== subId) return;\n          if (msg.type === 'outbox.event') for (const handler of handlers.event) handler(msg.result);\n          if (msg.type === 'outbox.closed') {\n            for (const handler of handlers.closed) handler(msg.reason);\n            off();\n          }\n        });\n        fire({ type: 'outbox.subscribe', id: id(), subId, filters: Array.isArray(filters) ? filters : [filters], ...(options ? { options } : {}) });\n        return {\n          on(event: 'event' | 'closed', handler: (value?: unknown) => void) {\n            handlers[event].add(handler);\n            return { close: () => handlers[event].delete(handler) };\n          },\n          close() {\n            fire({ type: 'outbox.close', id: id(), subId });\n            off();\n            handlers.event.clear();\n            handlers.closed.clear();\n          },\n        };\n      },\n      publish: (event: unknown, options?: Record<string, unknown>) => req('outbox.publish', { event, ...(options ? { options } : {}) }),\n      resolveRelays: (targetValue: unknown) => req('outbox.resolveRelays', { target: targetValue }).then((msg) => msg.plan ?? msg),\n    };\n  }\n\n  function makeUpload(): Record<string, unknown> {\n    return {\n      info: () => request({ type: 'upload.info' }, 'upload.info.result', (msg) => fieldOrThrow(msg, 'info', 'upload info unavailable')),\n      upload: (requestPayload: unknown) => request({ type: 'upload.upload', request: requestPayload }, 'upload.upload.result', (msg) => fieldOrThrow(msg, 'result', 'upload failed')),\n      status: (uploadId: string) => request({ type: 'upload.status', uploadId }, 'upload.status.result', (msg) => fieldOrThrow(msg, 'status', 'upload status unavailable')),\n      onStatus(callback: (status: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'upload.status.changed' && msg.status !== undefined) callback(msg.status);\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  function makeIntent(): Record<string, unknown> {\n    const hasOwn = (value: Record<string, unknown>, key: string): boolean => (\n      Object.prototype.hasOwnProperty.call(value, key)\n    );\n    const normalizeRequest = (value: unknown): Record<string, unknown> => {\n      if (!value || typeof value !== 'object' || Array.isArray(value)) {\n        throw new TypeError('Intent request must be an object');\n      }\n      const supplied = value as Record<string, unknown>;\n      if (hasOwn(supplied, 'sender')) {\n        throw new TypeError('Intent callers cannot supply sender');\n      }\n      const allowed = ['archetype', 'action', 'convention', 'payload', 'handler', 'behavior'];\n      if (Object.keys(supplied).some((field) => !allowed.includes(field))) {\n        throw new TypeError('Intent request contains unsupported fields');\n      }\n      if (typeof supplied.archetype !== 'string' || supplied.archetype.length === 0) {\n        throw new TypeError('Intent request requires an archetype');\n      }\n      const action = supplied.action === undefined ? 'open' : supplied.action;\n      if (typeof action !== 'string' || action.length === 0) {\n        throw new TypeError('Intent action must be a non-empty string');\n      }\n      if (\n        supplied.convention !== undefined\n        && (\n          typeof supplied.convention !== 'string'\n          || !/^napplet:[^/?#\\s]+\\/[^/?#\\s]+$/.test(supplied.convention)\n        )\n      ) {\n        throw new TypeError('Intent convention must be queryless');\n      }\n      if (\n        supplied.handler !== undefined\n        && (typeof supplied.handler !== 'string' || supplied.handler.length === 0)\n      ) {\n        throw new TypeError('Intent handler must be a non-empty string');\n      }\n      const behaviorValue = supplied?.behavior;\n      const behavior = behaviorValue && typeof behaviorValue === 'object'\n        ? behaviorValue as Record<string, unknown>\n        : undefined;\n      if (\n        behaviorValue !== undefined\n        && (\n          !behavior\n          || Array.isArray(behaviorValue)\n          || Object.keys(behavior).some((field) =>\n            field !== 'focus' && field !== 'newWindow' && field !== 'reuse')\n          || (hasOwn(behavior, 'focus') && typeof behavior.focus !== 'boolean')\n          || (hasOwn(behavior, 'newWindow') && typeof behavior.newWindow !== 'boolean')\n          || (hasOwn(behavior, 'reuse') && typeof behavior.reuse !== 'boolean')\n        )\n      ) {\n        throw new TypeError('Intent behavior contains unsupported fields');\n      }\n      const sanitizedBehavior = {\n        ...(typeof behavior?.focus === 'boolean' ? { focus: behavior.focus } : {}),\n        ...(typeof behavior?.newWindow === 'boolean'\n          ? { newWindow: behavior.newWindow }\n          : {}),\n        ...(typeof behavior?.reuse === 'boolean' ? { reuse: behavior.reuse } : {}),\n      };\n      return {\n        archetype: supplied.archetype,\n        action,\n        ...(typeof supplied.convention === 'string'\n          ? { convention: supplied.convention }\n          : {}),\n        ...(hasOwn(supplied, 'payload') ? { payload: supplied.payload } : {}),\n        ...(typeof supplied.handler === 'string' ? { handler: supplied.handler } : {}),\n        ...(Object.keys(sanitizedBehavior).length === 0\n          ? {}\n          : { behavior: sanitizedBehavior }),\n      };\n    };\n    const invoke = (value: unknown) => {\n      const normalized = normalizeRequest(value);\n      return request(\n        {\n          type: 'intent.invoke',\n          request: normalized,\n        },\n        'intent.invoke.result',\n        (msg) => fieldOrThrow(msg, 'result', 'intent.invoke.result missing result'),\n      );\n    };\n    return {\n      invoke,\n      open: (\n        archetype: string,\n        payload?: unknown,\n        opts?: Record<string, unknown>,\n      ) => invoke({\n        archetype,\n        action: 'open',\n        ...(payload === undefined ? {} : { payload }),\n        ...opts,\n      }),\n      available: (archetype: string) => request(\n        { type: 'intent.available', archetype },\n        'intent.available.result',\n        (msg) => fieldOrThrow(msg, 'availability', 'intent.available.result missing availability'),\n      ),\n      handlers: () => request(\n        { type: 'intent.handlers' },\n        'intent.handlers.result',\n        (msg) => fieldOrThrow(msg, 'handlers', 'intent.handlers.result missing handlers'),\n      ),\n      onChanged: (callback: (availability: unknown) => void) => domainEventHandle(\n        'intent.changed',\n        callback,\n        (msg) => msg.availability,\n      ),\n    };\n  }\n\n  function makeWebrtc(): Record<string, unknown> {\n    return {\n      open: (requestPayload?: unknown) => request(\n        { type: 'webrtc.open', request: requestPayload },\n        'webrtc.open.result',\n        (msg) => ({ session: fieldOrThrow(msg, 'session', 'webrtc.open.result missing session') }),\n      ),\n      send: (sessionId: string, payload: unknown) => request(\n        { type: 'webrtc.send', sessionId, payload },\n        'webrtc.send.result',\n        (msg) => voidResult(msg, 'webrtc send failed'),\n      ),\n      close: (sessionId: string, reason?: string) => request(\n        { type: 'webrtc.close', sessionId, ...(reason ? { reason } : {}) },\n        'webrtc.close.result',\n        (msg) => voidResult(msg, 'webrtc close failed'),\n      ),\n      onEvent: (callback: (event: unknown) => void) => domainEventHandle('webrtc.event', callback),\n    };\n  }\n\n  function makeBle(): Record<string, unknown> {\n    const req = (action: string, payload: Record<string, unknown>, map: (msg: RuntimeMessage) => unknown) => request(\n      { type: `ble.${action}`, ...payload },\n      `ble.${action}.result`,\n      map,\n    );\n    return {\n      open: (requestPayload?: unknown) => req('open', { request: requestPayload }, (msg) => ({ session: fieldOrThrow(msg, 'session', 'ble.open.result missing session') })),\n      services: (sessionId: string) => req('services', { sessionId }, (msg) => fieldOrThrow(msg, 'services', 'ble.services.result missing services')),\n      read: (sessionId: string, targetValue: unknown) => req('read', { sessionId, target: targetValue }, (msg) => fieldOrThrow(msg, 'data', 'ble.read.result missing data')),\n      write: (sessionId: string, targetValue: unknown, data: unknown, options?: Record<string, unknown>) => req(\n        'write',\n        { sessionId, target: targetValue, data, ...(options ? { options } : {}) },\n        (msg) => voidResult(msg, 'ble write failed'),\n      ),\n      subscribe: (sessionId: string, targetValue: unknown) => req('subscribe', { sessionId, target: targetValue }, (msg) => voidResult(msg, 'ble subscribe failed')),\n      unsubscribe: (sessionId: string, targetValue: unknown) => req('unsubscribe', { sessionId, target: targetValue }, (msg) => voidResult(msg, 'ble unsubscribe failed')),\n      close: (sessionId: string, reason?: string) => req('close', { sessionId, ...(reason ? { reason } : {}) }, (msg) => voidResult(msg, 'ble close failed')),\n      onEvent: (callback: (event: unknown) => void) => domainEventHandle('ble.event', callback),\n    };\n  }\n\n  function makeSerial(): Record<string, unknown> {\n    return {\n      open: (requestPayload?: unknown) => request(\n        { type: 'serial.open', request: requestPayload },\n        'serial.open.result',\n        (msg) => ({ session: fieldOrThrow(msg, 'session', 'serial.open.result missing session') }),\n      ),\n      write: (sessionId: string, data: Uint8Array | number[]) => request(\n        { type: 'serial.write', sessionId, data: Array.from(data) },\n        'serial.write.result',\n        (msg) => voidResult(msg, 'serial write failed'),\n      ),\n      close: (sessionId: string, reason?: string) => request(\n        { type: 'serial.close', sessionId, ...(reason === undefined ? {} : { reason }) },\n        'serial.close.result',\n        (msg) => voidResult(msg, 'serial close failed'),\n      ),\n      onEvent: (callback: (event: unknown) => void) => domainEventHandle('serial.event', callback),\n    };\n  }\n\n  function makeLink(): Record<string, unknown> {\n    return {\n      open: (url: string, options?: Record<string, unknown>) => request(\n        { type: 'link.open', url, ...(options ? { options } : {}) },\n        'link.open.result',\n        resultOrError,\n        { rejectOnError: false },\n      ),\n    };\n  }\n\n  function makeCount(): Record<string, unknown> {\n    return {\n      query: (filters: unknown, options?: Record<string, unknown>) => request(\n        { type: 'count.query', filters: Array.isArray(filters) ? filters : [filters], ...(options ? { options } : {}) },\n        'count.query.result',\n        resultOrError,\n        { rejectOnError: false },\n      ),\n    };\n  }\n\n  function makeLists(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>) => request({ type, ...payload }, `${type}.result`, resultOrError, { rejectOnError: false });\n    return {\n      supported: () => req('lists.supported', {}),\n      add: (list: unknown, items: unknown, options?: unknown) => req('lists.add', { list, items, ...(options ? { options } : {}) }),\n      remove: (list: unknown, items: unknown, options?: unknown) => req('lists.remove', { list, items, ...(options ? { options } : {}) }),\n    };\n  }\n\n  function makeCommon(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>) => request({ type, ...payload }, `${type}.result`, withoutEnvelope, { rejectOnError: false });\n    return {\n      encodeNip19: (input: unknown) => req('common.encodeNip19', { input }),\n      decodeNip19: (value: string) => req('common.decodeNip19', { value }),\n      getProfile: (targetValue: unknown) => req('common.getProfile', { target: targetValue }),\n      follows: () => req('common.follows', {}),\n      follow: (...pubkeys: string[]) => req('common.follow', { pubkeys }),\n      unfollow: (...pubkeys: string[]) => req('common.unfollow', { pubkeys }),\n      react: (targetEventId: string, reaction?: string, customEmojiHref?: string) => req('common.react', {\n        targetEventId,\n        reaction,\n        ...(customEmojiHref === undefined ? {} : { customEmojiHref }),\n      }),\n      report: (targetValue: unknown, reason?: string, text?: string) => req('common.report', {\n        target: targetValue,\n        reason,\n        text,\n      }),\n    };\n  }\n\n  function makeDm(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>) => request({ type, ...payload }, `${type}.result`, withoutEnvelope, { rejectOnError: false });\n    return {\n      status: () => req('dm.status', {}),\n      conversations: (query?: Record<string, unknown>) => req('dm.conversations', query ?? {}),\n      messages: (query: Record<string, unknown>) => req('dm.messages', query ?? {}),\n      send: (requestPayload: Record<string, unknown>) => req('dm.send', requestPayload ?? {}),\n      subscribe: (requestPayload?: Record<string, unknown>) => req('dm.subscribe', requestPayload ?? {}),\n      unsubscribe: (subscriptionId: string) => req('dm.unsubscribe', { subscriptionId }),\n      onMessage(callback: (message: unknown, subscriptionId: string) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (\n            typeof msg === 'object'\n            && msg !== null\n            && msg.type === 'dm.message'\n            && typeof msg.subscriptionId === 'string'\n          ) {\n            callback(msg.message, msg.subscriptionId);\n          }\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  const shell = makeShell();\n  let inc: Record<string, unknown> | undefined;\n  let identity: Record<string, unknown> | undefined;\n  let theme: Record<string, unknown> | undefined;\n  let intent: Record<string, unknown> | undefined;\n\n  function makeProtectedInc(existing: unknown): Record<string, unknown> {\n    const extensions = existing && typeof existing === 'object'\n      ? existing as Record<string, unknown>\n      : {};\n    inc ??= makeInc();\n    return { ...extensions, ...inc };\n  }\n\n  function makeProtectedIdentity(): Record<string, unknown> {\n    identity ??= makeIdentity();\n    return identity;\n  }\n\n  function makeProtectedTheme(): Record<string, unknown> {\n    theme ??= Object.freeze(makeTheme());\n    return theme;\n  }\n\n  function makeProtectedIntent(): Record<string, unknown> {\n    intent ??= Object.freeze(makeIntent());\n    return intent;\n  }\n\n  function isProtectedDomain(domain: string): boolean {\n    return domain === 'shell'\n      || domain === 'inc'\n      || domain === 'identity'\n      || domain === 'theme'\n      || domain === 'intent';\n  }\n\n  function makeDomain(domain: string, existing: unknown): unknown {\n    if (domain === 'shell') return shell;\n    if (domain === 'inc') return makeProtectedInc(existing);\n    if (domain === 'identity') return makeProtectedIdentity();\n    if (domain === 'theme') return makeProtectedTheme();\n    if (domain === 'intent') return makeProtectedIntent();\n    if (existing && typeof existing === 'object' && Object.keys(existing).length > 0) return existing;\n    switch (domain) {\n      case 'relay': return makeRelay();\n      case 'storage': return makeStorage();\n      case 'keys': return makeKeys();\n      case 'media': return makeMedia();\n      case 'notify': return makeNotify();\n      case 'config': return makeConfig();\n      case 'resource': return makeResource();\n      case 'cvm': return makeCvm();\n      case 'outbox': return makeOutbox();\n      case 'upload': return makeUpload();\n      case 'webrtc': return makeWebrtc();\n      case 'ble': return makeBle();\n      case 'link': return makeLink();\n      case 'count': return makeCount();\n      case 'lists': return makeLists();\n      case 'common': return makeCommon();\n      case 'serial': return makeSerial();\n      case 'dm': return makeDm();\n      default: return {};\n    }\n  }\n\n  function guardNappletNamespace(namespace: Record<string, unknown>): Record<string, unknown> {\n    return new Proxy(namespace, {\n      set(obj, prop, value) {\n        if (typeof prop !== 'string' || !allowed.has(prop)) return true;\n        obj[prop] = makeDomain(prop, value);\n        return true;\n      },\n      defineProperty(obj, prop, descriptor) {\n        if (typeof prop !== 'string' || !allowed.has(prop)) return true;\n        if (isProtectedDomain(prop)) {\n          return Reflect.defineProperty(obj, prop, {\n            value: makeDomain(prop, descriptor.value),\n            enumerable: true,\n            configurable: true,\n            writable: true,\n          });\n        }\n        return Reflect.defineProperty(obj, prop, {\n          ...descriptor,\n          value: makeDomain(prop, descriptor.value),\n        });\n      },\n      deleteProperty(obj, prop) {\n        if (typeof prop === 'string' && allowed.has(prop) && isProtectedDomain(prop)) return true;\n        return Reflect.deleteProperty(obj, prop);\n      },\n    });\n  }\n\n  function buildNappletNamespace(value: unknown): Record<string, unknown> {\n    const candidate = typeof value === 'object' && value !== null\n      ? value as Record<string, unknown>\n      : {};\n    const next: Record<string, unknown> = {};\n    for (const domain of domains) {\n      if (!allowed.has(domain)) continue;\n      Object.defineProperty(next, domain, {\n        value: makeDomain(\n          domain,\n          Object.prototype.hasOwnProperty.call(candidate, domain) ? candidate[domain] : undefined,\n        ),\n        enumerable: true,\n        configurable: true,\n        writable: true,\n      });\n    }\n    return guardNappletNamespace(next);\n  }\n\n  let root = buildNappletNamespace(target.napplet);\n  Object.defineProperty(target, 'napplet', {\n    get() {\n      return root;\n    },\n    set(value) {\n      root = buildNappletNamespace(value);\n    },\n    enumerable: false,\n    configurable: false,\n  });\n}\n","\n// Factory function — main entry point\nexport { createShellBridge } from './shell-bridge.js';\nexport type { ShellBridge } from './shell-bridge.js';\nexport {\n  injectNappletNamespacePrelude,\n  renderNappletNamespacePrelude,\n} from './napplet-namespace.js';\nexport type { NappletNamespacePreludeOptions } from './napplet-namespace.js';\n\n// Hooks adapter — for advanced integrators who need to customize the adapter\nexport { adaptHooks } from './hooks-adapter.js';\nexport type { BrowserDeps } from './hooks-adapter.js';\n\n// Protocol types (re-exported from @napplet/core + @kehto/runtime).\n// Phase 24 DRIFT-01: former @napplet/core compatibility shim deleted; legacy\n// NIP-01 constants no longer re-exported. Shell consumers import Capability +\n// ALL_CAPABILITIES from @kehto/runtime (sourced from @kehto/acl/capabilities).\nexport type { NostrEvent, NostrFilter, NappletMessage } from '@napplet/core';\nexport type { Capability } from '@kehto/runtime';\nexport { ALL_CAPABILITIES } from '@kehto/runtime';\n\n// Types for host app integration (shell-specific)\nexport type {\n  ShellAdapter,\n  ShellCapabilities,\n  ShellEnvironment,\n  RelayPoolHooks,\n  RelayPoolLike,\n  RelayConfigHooks,\n  WindowManagerHooks,\n  AuthHooks,\n  ConfigHooks,\n  HotkeyHooks,\n  WorkerRelayHooks,\n  WorkerRelayLike,\n  CryptoHooks,\n  DmHooks,\n  UploadHooks,\n  UploadBackendLike,\n  IntentHooks,\n  LinkHooks,\n  CommonHooks,\n  ListsHooks,\n  SerialHooks,\n  BleHooks,\n  WebrtcHooks,\n  CapabilityHooks,\n  SessionEntry,\n  NappKeyEntry,  // @deprecated — use SessionEntry\n  AclEntry,\n  AclCheckEvent,\n  UnroutedMessageInfo,\n  ServiceDescriptor,\n  ServiceHandler,\n  ServiceRegistry,\n} from './types.js';\n\n// Shell initialization — capability construction for shell.ready / shell.init handshake\nexport { buildShellCapabilities, resolveShellEnvironment } from './shell-init.js';\n\nexport { sessionRegistry, nappKeyRegistry } from './session-registry.js';\nexport type { PendingUpdate, SessionRegistry } from './session-registry.js';\n\n// Standalone utilities (usable without full shell)\nexport { originRegistry } from './origin-registry.js';\nexport type { OriginIdentity, OriginRegistry } from './origin-registry.js';\nexport { audioManager } from './audio-manager.js';\nexport type { AudioManager, AudioSource } from './audio-manager.js';\nexport { manifestCache } from './manifest-cache.js';\nexport type { ManifestCache, ManifestCacheEntry } from './manifest-cache.js';\nexport type { AclStore } from './acl-store.js';\n\n// Enforcement gate (re-exported from @kehto/runtime for backwards compatibility)\nexport { createEnforceGate, createNapEnforceGate, formatDenialReason } from '@kehto/runtime';\nexport type { EnforceResult, EnforceConfig, NapEnforceConfig, IdentityResolver, AclChecker, NapMessage } from '@kehto/runtime';\n// ConsentRequest canonical definition re-exported from @kehto/runtime\nexport type { ConsentRequest } from '@kehto/runtime';\n\n// Topic constants for shell command routing\nexport { TOPICS } from './topics.js';\nexport type { TopicKey, TopicValue } from './topics.js';\n\nexport { createIdentityProxy } from './identity-proxy.js';\nexport type { IdentityProxy, IdentityProxyDeps, ProxyOriginRegistry } from './identity-proxy.js';\nexport { createThemeProxy } from './theme-proxy.js';\nexport type { ThemeProxy, ThemeProxyDeps } from './theme-proxy.js';\nexport { createKeysProxy } from './keys-proxy.js';\nexport type { KeysProxy, KeysProxyDeps } from './keys-proxy.js';\nexport { createMediaProxy } from './media-proxy.js';\nexport type { MediaProxy, MediaProxyDeps } from './media-proxy.js';\nexport { createNotifyProxy } from './notify-proxy.js';\nexport type { NotifyProxy, NotifyProxyDeps } from './notify-proxy.js';\n\nexport type {\n  ResourceBytesRequest,\n  ResourceInfo,\n  ResourceInfoError,\n  ResourceInfoRequest,\n  ResourceInfoResult,\n  ResourceBytesManyRequest,\n  ResourceBytesManyItem,\n  ResourceCancelRequest,\n  ResourceBytesResult,\n  ResourceBytesManyResult,\n  ResourceBytesError,\n  ResourceBytesManyError,\n  ResourceErrorCode,\n  ResourceRequestId,\n  ResourceInbound,\n  ResourceOutbound,\n} from './types/internal-resource.js';\n","/**\n * topics.ts — Re-exports topic constants from @napplet/core.\n *\n * Shell previously owned these constants. They now live in @napplet/core\n * so all packages share a single source of truth.\n */\nexport { TOPICS } from '@napplet/core';\nexport type { TopicKey, TopicValue } from '@napplet/core';\n","/**\n * identity-proxy.ts — Shell-side per-domain proxy for identity.* envelopes.\n *\n * Establishes the canonical proxy shape for @kehto/shell (Plan 12-11): each\n * per-domain proxy exposes a `dispatch` method that delegates napplet→shell\n * requests to the runtime.\n *\n * By default, `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime already owns identity.* dispatch per Plan\n * 12-03 (see @kehto/services identity-service). This module exists as an\n * optional composition point for host apps that want to intercept or\n * augment identity dispatch (e.g. custom logging, sandboxed rewrites, test\n * doubles).\n *\n * Identity changes are deliberately not emitted through this proxy. Hosts\n * must use `ShellBridge.publishIdentityChanged()`, which enforces the live\n * session, granted-domain, and current recipient-capability checks.\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\n\n/**\n * Minimal origin-registry contract used by per-domain proxies.\n *\n * Accepts the `@kehto/shell` singleton `originRegistry` as well as any test\n * double with a matching `getIframeWindow` method.\n */\nexport interface ProxyOriginRegistry {\n  /** Resolve a registered napplet windowId to its iframe Window, or null. */\n  getIframeWindow(windowId: string): Window | null;\n}\n\n/**\n * Dependencies for `createIdentityProxy`.\n *\n * @example\n * ```ts\n * const proxy = createIdentityProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface IdentityProxyDeps {\n  /** The runtime engine that owns identity.* dispatch (Plan 12-03). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `identity.*` envelopes.\n *\n * `dispatch` routes napplet→shell requests into the runtime. The deprecated\n * `emit` member remains only as a fail-closed compatibility trap.\n */\nexport interface IdentityProxy {\n  /**\n   * Route a napplet-originated identity.* envelope into the runtime.\n   *\n   * Delegation only — the runtime already owns identity.* dispatch after\n   * Plan 12-03. Override by wrapping or replacing this method.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Direct identity delivery is prohibited.\n   *\n   * @deprecated Use `ShellBridge.publishIdentityChanged()` so delivery is\n   * filtered by live session, granted domain, and current ACL.\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical identity-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns An {@link IdentityProxy} ready to route identity.* envelopes\n * @example\n * ```ts\n * import { createIdentityProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const identityProxy = createIdentityProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Optional composition: intercept napplet->shell identity requests\n * const originalDispatch = identityProxy.dispatch;\n * identityProxy.dispatch = (windowId, envelope) => {\n *   console.log('identity dispatch', windowId, envelope.type);\n *   originalDispatch(windowId, envelope);\n * };\n * ```\n */\nexport function createIdentityProxy(deps: IdentityProxyDeps): IdentityProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(_windowId: string, _envelope: NappletMessage): void {\n      throw new Error(\n        'Direct identity proxy emit is prohibited; use ShellBridge.publishIdentityChanged()',\n      );\n    },\n  };\n}\n","/**\n * theme-proxy.ts — Shell-side per-domain proxy for theme.* envelopes.\n *\n * Establishes the shell-side shape that Phase 13 composes into. Phase 13 is\n * expected to add `theme-service.ts` (runtime) + the shell-side `theme.set`\n * API that emits `theme.changed` push envelopes to registered napplets;\n * this proxy is the canonical seam those pieces plug into.\n *\n * `dispatch(windowId, envelope)` routes napplet→shell `theme.get` into the\n * runtime. Theme changes must use `ShellBridge.publishTheme()` so the host\n * projection enforces live-session, granted-domain, and current-ACL checks.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns theme.* dispatch. This module is an\n * optional composition point for host apps or Phase 13 wiring.\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createThemeProxy`.\n *\n * @example\n * ```ts\n * const proxy = createThemeProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface ThemeProxyDeps {\n  /** The runtime engine that will own theme.* dispatch (Phase 13). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `theme.*` envelopes.\n *\n * `dispatch` routes napplet→shell requests into the runtime. The deprecated\n * `emit` member remains only as a fail-closed compatibility trap.\n */\nexport interface ThemeProxy {\n  /**\n   * Route a napplet-originated theme.* envelope (e.g. `theme.get`) into\n   * the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Direct theme delivery is prohibited.\n   *\n   * @deprecated Use `ShellBridge.publishTheme()` so delivery is filtered by\n   * live session, granted domain, and current ACL.\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical theme-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link ThemeProxy} ready to route theme.* envelopes\n * @example\n * ```ts\n * import { createThemeProxy, originRegistry } from '@kehto/shell';\n *\n * const themeProxy = createThemeProxy({\n *   runtime,\n *   originRegistry,\n * });\n * themeProxy.dispatch(windowId, { type: 'theme.get', id: requestId });\n * ```\n */\nexport function createThemeProxy(deps: ThemeProxyDeps): ThemeProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(_windowId: string, _envelope: NappletMessage): void {\n      throw new Error(\n        'Direct theme proxy emit is prohibited; use ShellBridge.publishTheme()',\n      );\n    },\n  };\n}\n","/**\n * keys-proxy.ts — Shell-side per-domain proxy for keys.* envelopes.\n *\n * The runtime already dispatches napplet-originated `keys.*` (forward,\n * registerAction, unregisterAction) to the keys service. This proxy is the\n * shell-side composition point for host apps that want to observe requests or\n * inject shell-originated keys envelopes such as `keys.action` and\n * `keys.bindings`.\n *\n * Shape mirrors identity-proxy (Plan 12-11):\n *\n *   - `dispatch(windowId, envelope)` routes napplet→shell keys requests\n *     into the runtime.\n *   - `emit(windowId, envelope)` posts shell→napplet pushes (`keys.action`,\n *     `keys.bindings`, `keys.registerAction.result`) through the origin\n *     registry.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns keys.* dispatch. This module is an\n * optional composition point for host apps (e.g. global hotkey UIs).\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createKeysProxy`.\n *\n * @example\n * ```ts\n * const proxy = createKeysProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface KeysProxyDeps {\n  /** The runtime engine that owns keys.* dispatch (Plan 12-05). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `keys.*` envelopes.\n *\n * Shape: `dispatch` routes napplet→shell requests into the runtime; `emit`\n * pushes shell→napplet envelopes through the iframe's Window.\n */\nexport interface KeysProxy {\n  /**\n   * Route a napplet-originated keys.* envelope (e.g. `keys.forward`,\n   * `keys.registerAction`) into the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Push a shell-initiated keys-domain envelope (e.g. `keys.action`,\n   * `keys.bindings`) into a napplet iframe.\n   *\n   * No-op when the originRegistry cannot resolve the windowId (unknown or\n   * unregistered napplet). Never throws.\n   *\n   * @param windowId - The target napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope to deliver\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical keys-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link KeysProxy} ready to route keys.* envelopes\n * @example\n * ```ts\n * import { createKeysProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const keysProxy = createKeysProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Host-app-initiated action trigger:\n * keysProxy.emit('win-editor', { type: 'keys.action', actionId: 'editor.save' });\n * ```\n */\nexport function createKeysProxy(deps: KeysProxyDeps): KeysProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(windowId: string, envelope: NappletMessage): void {\n      const win = deps.originRegistry.getIframeWindow(windowId);\n      if (win) win.postMessage(envelope, '*');\n    },\n  };\n}\n","/**\n * media-proxy.ts — Shell-side per-domain proxy for media.* envelopes.\n *\n * Establishes the shell-side composition seam for `@napplet/nap/media`\n * session-control envelopes. Shape mirrors identity-proxy (Plan 12-11):\n *\n *   - `dispatch(windowId, envelope)` routes napplet→shell media requests\n *     (`media.session.create`, `media.session.update`, `media.session.destroy`,\n *     `media.state`, `media.capabilities`) into the runtime (Plan 12-06).\n *   - `emit(windowId, envelope)` posts shell→napplet pushes (`media.command`,\n *     `media.controls`, `media.session.create.result`) through the origin\n *     registry.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns media.* dispatch. This module is an\n * optional composition point for host apps (e.g. shell-rendered playback\n * UIs that want to send `media.command` pushes).\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createMediaProxy`.\n *\n * @example\n * ```ts\n * const proxy = createMediaProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface MediaProxyDeps {\n  /** The runtime engine that owns media.* dispatch (Plan 12-06). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `media.*` envelopes.\n *\n * Shape: `dispatch` routes napplet→shell requests into the runtime; `emit`\n * pushes shell→napplet envelopes through the iframe's Window.\n */\nexport interface MediaProxy {\n  /**\n   * Route a napplet-originated media.* envelope into the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Push a shell-initiated media-domain envelope (e.g. `media.command`,\n   * `media.controls`) into a napplet iframe.\n   *\n   * No-op when the originRegistry cannot resolve the windowId (unknown or\n   * unregistered napplet). Never throws.\n   *\n   * @param windowId - The target napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope to deliver\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical media-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link MediaProxy} ready to route media.* envelopes\n * @example\n * ```ts\n * import { createMediaProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const mediaProxy = createMediaProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Shell-UI-initiated media command:\n * mediaProxy.emit('win-player', {\n *   type: 'media.command',\n *   sessionId: 's1',\n *   action: 'seek',\n *   value: 120,\n * });\n * ```\n */\nexport function createMediaProxy(deps: MediaProxyDeps): MediaProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(windowId: string, envelope: NappletMessage): void {\n      const win = deps.originRegistry.getIframeWindow(windowId);\n      if (win) win.postMessage(envelope, '*');\n    },\n  };\n}\n","/**\n * notify-proxy.ts — Shell-side per-domain proxy for notify.* envelopes.\n *\n * Establishes the shell-side composition seam for `@napplet/nap/notify`\n * notification envelopes. Shape mirrors identity-proxy (Plan 12-11):\n *\n *   - `dispatch(windowId, envelope)` routes napplet→shell notify requests\n *     (`notify.send`, `notify.dismiss`, `notify.badge`,\n *     `notify.channel.register`, `notify.permission.request`) into the\n *     runtime (Plan 12-07).\n *   - `emit(windowId, envelope)` posts shell→napplet pushes\n *     (`notify.send.result`, `notify.permission.result`, `notify.action`,\n *     `notify.clicked`, `notify.dismissed`, `notify.controls`) through the\n *     origin registry.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns notify.* dispatch. This module is an\n * optional composition point for host apps (e.g. custom notification UIs\n * that need to emit `notify.clicked` / `notify.action` pushes).\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createNotifyProxy`.\n *\n * @example\n * ```ts\n * const proxy = createNotifyProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface NotifyProxyDeps {\n  /** The runtime engine that owns notify.* dispatch (Plan 12-07). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `notify.*` envelopes.\n *\n * Shape: `dispatch` routes napplet→shell requests into the runtime; `emit`\n * pushes shell→napplet envelopes through the iframe's Window.\n */\nexport interface NotifyProxy {\n  /**\n   * Route a napplet-originated notify.* envelope into the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Push a shell-initiated notify-domain envelope (e.g. `notify.action`,\n   * `notify.clicked`) into a napplet iframe.\n   *\n   * No-op when the originRegistry cannot resolve the windowId (unknown or\n   * unregistered napplet). Never throws.\n   *\n   * @param windowId - The target napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope to deliver\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical notify-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link NotifyProxy} ready to route notify.* envelopes\n * @example\n * ```ts\n * import { createNotifyProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const notifyProxy = createNotifyProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Shell-UI notifies napplet that user clicked its toast:\n * notifyProxy.emit('win-chat', {\n *   type: 'notify.clicked',\n *   notificationId: 'shell-42',\n * });\n * ```\n */\nexport function createNotifyProxy(deps: NotifyProxyDeps): NotifyProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(windowId: string, envelope: NappletMessage): void {\n      const win = deps.originRegistry.getIframeWindow(windowId);\n      if (win) win.postMessage(envelope, '*');\n    },\n  };\n}\n"],"mappings":";AACA,SAAS,qBAAwD;;;AC6BjE,SAAS,WAAW,OAA2B;AAC7C,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEA,SAAS,WAAW,KAAyB;AAC3C,QAAM,QAAQ,IAAI,WAAW,IAAI,SAAS,CAAC;AAC3C,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,GAAG;AACtC,UAAM,IAAI,CAAC,IAAI,SAAS,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE;AAAA,EACrD;AACA,SAAO;AACT;AAqBA,SAAS,oBAAoBA,iBAA8D;AACzF,SAAO,CAAC,UAAU,QAAQ;AACxB,UAAM,MAAMA,gBAAe,gBAAgB,QAAQ;AACnD,QAAI,IAAK,KAAI,YAAY,KAAK,GAAG;AAAA,EACnC;AACF;AAEA,SAAS,uBACP,YACAA,iBACkB;AAClB,SAAO;AAAA,IACL,UACE,SACA,UACA,WACyB;AACzB,YAAM,OAAO,WAAW,UAAU,aAAa;AAC/C,UAAI,CAAC,KAAM,QAAO,EAAE,cAAc;AAAA,MAAc,EAAE;AAElD,YAAM,OAAO,aAAa,WAAW,UAAU,gBAAgB,OAAO;AACtE,YAAM,MAAM,KAAK,aAAa,MAAM,OAAO,EAAE,UAAU,CAAC,SAAS;AAC/D,YAAI,SAAS,OAAQ,UAAS,MAAM;AAAA,YAC/B,UAAS,IAAkB;AAAA,MAClC,CAAC;AACD,aAAO,EAAE,aAAa,MAAM,IAAI,YAAY,EAAE;AAAA,IAChD;AAAA,IAEA,QAAQ,OAAyC;AAC/C,YAAM,OAAO,WAAW,UAAU,aAAa;AAC/C,UAAI,CAAC,KAAM;AACX,YAAM,YAAY,WAAW,UAAU,gBAAgB,CAAC,CAAC;AACzD,aAAO,KAAK,QAAQ,WAAW,KAAK;AAAA,IACtC;AAAA,IAEA,gBAAgB,SAAkC;AAChD,aAAO,WAAW,UAAU,gBAAgB,OAAO;AAAA,IACrD;AAAA,IAEA,kBAAkB,QAAgB,SAA2B;AAC3D,iBAAW,UAAU,kBAAkB,QAAQ,OAAO;AAAA,IACxD;AAAA,IAEA,oBAAoB,QAAsB;AACxC,iBAAW,UAAU,oBAAoB,MAAM;AAAA,IACjD;AAAA,IAEA,gBACE,UACA,UACA,OACA,SACA,SACM;AACN,YAAM,MAAMA,gBAAe,gBAAgB,QAAQ;AACnD,UAAI,IAAK,YAAW,UAAU,gBAAgB,UAAU,UAAU,OAAO,SAAS,GAAG;AAAA,IACvF;AAAA,IAEA,iBAAiB,UAAwB;AACvC,iBAAW,UAAU,iBAAiB,QAAQ;AAAA,IAChD;AAAA,IAEA,qBAAqB,UAAkB,OAA+C;AACpF,aAAO,WAAW,UAAU,qBAAqB,UAAU,KAAK;AAAA,IAClE;AAAA,IAEA,cAAuB;AACrB,aAAO,WAAW,UAAU,aAAa,MAAM;AAAA,IACjD;AAAA,EACF;AACF;AAEA,SAAS,mBAAmB,YAAwC;AAClE,SAAO;AAAA,IACL,MAAM,MAAM,SAA+C;AACzD,YAAM,cAAc,WAAW,YAAY,eAAe;AAC1D,UAAI,CAAC,YAAa,QAAO,CAAC;AAC1B,YAAM,QAAQ,OAAO,WAAW;AAChC,aAAO,YAAY,MAAM,CAAC,OAAO,OAAO,GAAG,OAAO,CAAC;AAAA,IACrD;AAAA,IAEA,MAAM,OAAyB;AAC7B,YAAM,cAAc,WAAW,YAAY,eAAe;AAC1D,UAAI,CAAC,YAAa;AAClB,UAAI;AAAE,oBAAY,MAAM,KAAK,GAAG,QAAQ,MAAM;AAAA,QAAoB,CAAC;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IACpG;AAAA,IAEA,cAAuB;AACrB,aAAO,WAAW,YAAY,eAAe,MAAM;AAAA,IACrD;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,YAAuC;AAChE,SAAO;AAAA,IACL,gBAA+B;AAC7B,aAAO,WAAW,KAAK,cAAc;AAAA,IACvC;AAAA,IACA,YAA2B;AACzB,aAAO,WAAW,KAAK,UAAU;AAAA,IACnC;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,YAAyC;AACpE,SAAO;AAAA,IACL,wBAAqE;AACnE,aAAO,WAAW,OAAO,sBAAsB;AAAA,IACjD;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,YAAyC;AACpE,SAAO;AAAA,IACL,yBAAyB,OAAa;AACpC,iBAAW,QAAQ,yBAAyB,KAAK;AAAA,IACnD;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,YAAyC;AACpE,SAAO;AAAA,IACL,MAAM,YAAY,OAAqC;AACrD,aAAO,WAAW,OAAO,YAAY,KAAK;AAAA,IAC5C;AAAA,IACA,aAAqB;AACnB,aAAO,OAAO,WAAW;AAAA,IAC3B;AAAA,IACA,YAAY,QAA4B;AACtC,YAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,aAAO,gBAAgB,KAAK;AAC5B,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,uBAAuC;AAC9C,SAAO;AAAA,IACL,QAAQ,MAAoB;AAC1B,UAAI;AAAE,qBAAa,QAAQ,eAAe,IAAI;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IAC/E;AAAA,IACA,OAAsB;AACpB,UAAI;AAAE,eAAO,aAAa,QAAQ,aAAa;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IAC3E;AAAA,EACF;AACF;AAEA,SAAS,4BAAiD;AACxD,SAAO;AAAA,IACL,QAAQ,MAAoB;AAC1B,UAAI;AAAE,qBAAa,QAAQ,0BAA0B,IAAI;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IAC1F;AAAA,IACA,OAAsB;AACpB,UAAI;AAAE,eAAO,aAAa,QAAQ,wBAAwB;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACtF;AAAA,EACF;AACF;AAEA,SAAS,yBAA2C;AAClD,SAAO;AAAA,IACL,IAAI,WAAkC;AACpC,UAAI;AAAE,eAAO,aAAa,QAAQ,SAAS;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACvE;AAAA,IACA,IAAI,WAAmB,OAAwB;AAC7C,UAAI;AAAE,qBAAa,QAAQ,WAAW,KAAK;AAAG,eAAO;AAAA,MAAM,QAAQ;AAAE,eAAO;AAAA,MAAO;AAAA,IACrF;AAAA,IACA,OAAO,WAAyB;AAC9B,UAAI;AAAE,qBAAa,WAAW,SAAS;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IACxE;AAAA,IACA,MAAM,QAAsB;AAC1B,UAAI;AACF,cAAM,eAAyB,CAAC;AAChC,iBAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,gBAAM,MAAM,aAAa,IAAI,CAAC;AAC9B,cAAI,KAAK,WAAW,MAAM,EAAG,cAAa,KAAK,GAAG;AAAA,QACpD;AACA,mBAAW,OAAO,aAAc,cAAa,WAAW,GAAG;AAAA,MAC7D,QAAQ;AAAA,MAAoB;AAAA,IAC9B;AAAA,IACA,KAAK,QAA0B;AAC7B,UAAI;AACF,cAAM,SAAmB,CAAC;AAC1B,iBAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,gBAAM,MAAM,aAAa,IAAI,CAAC;AAC9B,cAAI,KAAK,WAAW,MAAM,EAAG,QAAO,KAAK,GAAG;AAAA,QAC9C;AACA,eAAO;AAAA,MACT,QAAQ;AAAE,eAAO,CAAC;AAAA,MAAG;AAAA,IACvB;AAAA,IACA,eAAe,QAAgB,YAA6B;AAC1D,UAAI;AACF,YAAI,QAAQ;AACZ,iBAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,gBAAM,MAAM,aAAa,IAAI,CAAC;AAC9B,cAAI,CAAC,KAAK,WAAW,MAAM,EAAG;AAC9B,cAAI,cAAc,QAAQ,WAAY;AACtC,gBAAM,QAAQ,aAAa,QAAQ,GAAG,KAAK;AAC3C,mBAAS,IAAI,YAAY,EAAE,OAAO,MAAM,KAAK,EAAE;AAAA,QACjD;AACA,eAAO;AAAA,MACT,QAAQ;AAAE,eAAO;AAAA,MAAG;AAAA,IACtB;AAAA,EACF;AACF;AAEA,SAAS,2BAA2B,YAAgD;AAClF,SAAO;AAAA,IACL,aAAa,SAAwB;AACnC,aAAO,WAAW,cAAc,aAAa,OAAO;AAAA,IACtD;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,YAA8C;AAC9E,SAAO;AAAA,IACL,SAAS,MAAc,KAAmB;AACxC,iBAAW,YAAY,SAAS,MAAM,GAAG;AAAA,IAC3C;AAAA,IACA,YAAY,MAAc,KAAmB;AAC3C,iBAAW,YAAY,YAAY,MAAM,GAAG;AAAA,IAC9C;AAAA,IACA,iBAA6E;AAC3E,aAAO,WAAW,YAAY,eAAe;AAAA,IAC/C;AAAA,IACA,sBAA+B;AAC7B,aAAO,WAAW,YAAY,oBAAoB;AAAA,IACpD;AAAA,EACF;AACF;AAEA,SAAS,+BAAuD;AAC9D,SAAO;AAAA,IACL,MAAyB;AACvB,UAAI;AACF,cAAM,MAAM,aAAa,QAAQ,sBAAsB;AACvD,YAAI,CAAC,IAAK,QAAO;AACjB,eAAO,WAAW,GAAG;AAAA,MACvB,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACzB;AAAA,IACA,IAAI,QAA0B;AAC5B,UAAI;AACF,qBAAa,QAAQ,wBAAwB,WAAW,MAAM,CAAC;AAAA,MACjE,QAAQ;AAAA,MAAiC;AAAA,IAC3C;AAAA,EACF;AACF;AAEA,SAAS,wBAAyC;AAChD,SAAO;AAAA,IACL,IAAI,UAAiC;AACnC,UAAI;AACF,eAAO,aAAa,QAAQ,gBAAgB,QAAQ,EAAE;AAAA,MACxD,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACzB;AAAA,IACA,IAAI,UAAkB,MAAoB;AACxC,UAAI;AACF,qBAAa,QAAQ,gBAAgB,QAAQ,IAAI,IAAI;AAAA,MACvD,QAAQ;AAAA,MAAiC;AAAA,IAC3C;AAAA,IACA,OAAO,UAAwB;AAC7B,UAAI;AACF,qBAAa,WAAW,gBAAgB,QAAQ,EAAE;AAAA,MACpD,QAAQ;AAAA,MAAiC;AAAA,IAC3C;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,YAAiD;AACxE,SAAO,WAAW,KACd;AAAA,IACE,OAAO,iBAAyB,SAAiB;AAC/C,aAAO,WAAW,GAAI,OAAO,iBAAiB,OAAO;AAAA,IACvD;AAAA,EACF,IACA;AACN;AAuBO,SAAS,WAAW,YAA0B,MAAmC;AACtF,QAAM,EAAE,gBAAAA,gBAAe,IAAI;AAE3B,SAAO;AAAA,IACL,eAAe,oBAAoBA,eAAc;AAAA,IACjD,WAAW,uBAAuB,YAAYA,eAAc;AAAA,IAC5D,OAAO,mBAAmB,UAAU;AAAA,IACpC,MAAM,kBAAkB,UAAU;AAAA,IAClC,QAAQ,oBAAoB,UAAU;AAAA,IACtC,SAAS,oBAAoB,UAAU;AAAA,IACvC,QAAQ,oBAAoB,UAAU;AAAA,IACtC,gBAAgB,qBAAqB;AAAA,IACrC,qBAAqB,0BAA0B;AAAA,IAC/C,kBAAkB,uBAAuB;AAAA,IACzC,eAAe,2BAA2B,UAAU;AAAA,IACpD,aAAa,yBAAyB,UAAU;AAAA,IAChD,IAAI,gBAAgB,UAAU;AAAA,IAC9B,wBAAwB,6BAA6B;AAAA,IACrD,iBAAiB,sBAAsB;AAAA,IACvC,YAAY,WAAW;AAAA,IACvB,gBAAgB,WAAW;AAAA,IAC3B,UAAU,WAAW;AAAA,IACrB,oBAAoB,WAAW;AAAA,EACjC;AACF;;;AC9WA,IAAM,WAAW,oBAAI,IAAyB;AAC9C,IAAI,qBAAqB;AA4BlB,IAAM,iBAAiC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ5C,SAAS,KAAa,UAAkB,UAAiC;AACvE,eAAW,CAAC,eAAe,KAAK,KAAK,SAAS,QAAQ,GAAG;AACvD,UAAI,kBAAkB,OAAO,MAAM,aAAa,UAAU;AACxD,iBAAS,OAAO,aAAa;AAAA,MAC/B;AAAA,IACF;AAEA,aAAS,IAAI,KAAK;AAAA,MAChB;AAAA,MACA,MAAM,UAAU;AAAA,MAChB,eAAe,UAAU;AAAA,MACzB,gBAAgB,EAAE;AAAA,IACpB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,UAAwB;AACjC,eAAW,CAAC,KAAK,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC7C,UAAI,MAAM,aAAa,UAAU;AAC/B,iBAAS,OAAO,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,KAAiC;AAC3C,WAAO,SAAS,IAAI,GAAG,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,UAAiC;AAC/C,eAAW,CAAC,KAAK,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC7C,UAAI,MAAM,aAAa,SAAU,QAAO;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,kBAA4B;AAC1B,WAAO,MAAM,KAAK,SAAS,OAAO,CAAC,EAAE,IAAI,WAAS,MAAM,QAAQ;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,KAAyC;AACnD,UAAM,QAAQ,SAAS,IAAI,GAAG;AAC9B,QAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,cAAe,QAAO;AAClD,WAAO,EAAE,MAAM,MAAM,MAAM,eAAe,MAAM,cAAc;AAAA,EAChE;AAAA;AAAA,EAGA,eAAe,KAAa,aAAqC;AAC/D,UAAM,QAAQ,SAAS,IAAI,GAAG;AAC9B,QAAI,CAAC,MAAO;AACZ,UAAM,cAAc,OAAO,OAAO;AAAA,MAChC,cAAc,OAAO,OAAO,EAAE,SAAS,OAAO,OAAO,CAAC,GAAG,YAAY,aAAa,OAAO,CAAC,EAAE,CAAC;AAAA,MAC7F,UAAU,OAAO,OAAO,CAAC,GAAG,YAAY,QAAQ,CAAC;AAAA,IACnD,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,eAAe,KAA2C;AACxD,WAAO,SAAS,IAAI,GAAG,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,kBAAkB,KAAiC;AACjD,WAAO,SAAS,IAAI,GAAG,GAAG;AAAA,EAC5B;AAAA;AAAA,EAGA,QAAc;AACZ,aAAS,MAAM;AAAA,EACjB;AACF;;;ACrIA,IAAM,aAAa,oBAAI,IAAoB;AAC3C,IAAM,WAAW,oBAAI,IAA0B;AAC/C,IAAM,iBAAiB,oBAAI,IAA2B;AAEtD,IAAI,kBAAkB;AA6Bf,IAAM,kBAAmC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO9C,SAAS,UAAkB,OAA2B;AACpD,eAAW,IAAI,UAAU,MAAM,MAAM;AACrC,aAAS,IAAI,MAAM,QAAQ,KAAK;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,UAAwB;AACjC,UAAM,SAAS,WAAW,IAAI,QAAQ;AACtC,QAAI,QAAQ;AACV,eAAS,OAAO,MAAM;AACtB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AACA,mBAAe,OAAO,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,UAAU,UAAsC;AAC9C,WAAO,WAAW,IAAI,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,SAAS,QAA0C;AACjD,WAAO,SAAS,IAAI,MAAM;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,QAAoC;AAC9C,WAAO,SAAS,IAAI,MAAM,GAAG;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAa,UAA2B;AACtC,WAAO,WAAW,IAAI,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgC;AAC9B,WAAO,MAAM,KAAK,SAAS,OAAO,CAAC;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAAkB,QAA6B;AAC9D,mBAAe,IAAI,UAAU,MAAM;AACnC;AACA,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,cAAc,IAAI,YAAY,0BAA0B,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAA6C;AAC5D,WAAO,eAAe,IAAI,QAAQ;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,mBAAmB,UAAwB;AACzC,mBAAe,OAAO,QAAQ;AAC9B;AACA,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,cAAc,IAAI,YAAY,0BAA0B,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA,EAGA,QAAc;AACZ,eAAW,MAAM;AACjB,aAAS,MAAM;AACf,mBAAe,MAAM;AAAA,EACvB;AACF;AAGO,IAAM,kBAAmC;;;AC/KhD,SAAS,wBAAyC;AAClD,SAAS,uBAAsC;AAG/C,IAAM,cAAc;AAGb,IAAM,sBAAsB,MAAM;AAYzC,SAAS,OAAO,SAAiB,MAAc,eAA+B;AAC5E,SAAO,GAAG,IAAI,IAAI,aAAa;AACjC;AAEA,IAAM,QAAQ,oBAAI,IAA8B;AAQhD,IAAM,WAAmC;AAAA,EACvC,cAAc;AAAA,EAAG,eAAe;AAAA,EAAG,cAAc;AAAA,EAAG,eAAe;AAAA,EACnE,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EAAI,aAAa;AAAA,EAAI,gBAAgB;AAAA,EACtD,cAAc;AAAA,EAAK,eAAe;AAAA,EAClC,iBAAiB;AAAA,EAAM,eAAe;AAAA,EAAM,kBAAkB;AAAA,EAC9D,cAAc;AAAA;AAAA;AAGhB;AAEA,SAAS,mBAAmB,MAA4B;AACtD,MAAI,OAAO;AACX,aAAW,OAAO,KAAM,SAAS,SAAS,GAAG,KAAK;AAClD,SAAO;AACT;AAEA,SAAS,mBAAmB,MAA4B;AACtD,SAAQ,OAAO,QAAQ,QAAQ,EAC5B,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,OAAO,SAAS,CAAC,EACtC,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI;AACzB;AAEA,SAAS,YAAY,QAAgB,MAAc,eAAyC;AAC1F,QAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,MAAI,QAAQ,MAAM,IAAI,GAAG;AACzB,MAAI,CAAC,OAAO;AACV,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,IAAI,IAAI,gBAAgB;AAAA,MACtC,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AACA,UAAM,IAAI,KAAK,KAAK;AAAA,EACtB;AACA,SAAO;AACT;AA8BO,IAAM,WAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWhC,MAAM,QAAgB,MAAc,eAAuB,YAAiC;AAC1F,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,UAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,QAAS,QAAO;AAC1B,WAAO,MAAM,aAAa,IAAI,UAAU;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,QAAgB,MAAc,eAAuB,YAA8B;AACvF,gBAAY,QAAQ,MAAM,aAAa,EAAE,aAAa,IAAI,UAAU;AAAA,EACtE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,OAAO,QAAgB,MAAc,eAAuB,YAA8B;AACxF,gBAAY,QAAQ,MAAM,aAAa,EAAE,aAAa,OAAO,UAAU;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,QAAgB,MAAc,eAA6B;AAC/D,gBAAY,QAAQ,MAAM,aAAa,EAAE,UAAU;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,QAAQ,QAAgB,MAAc,eAA6B;AACjE,gBAAY,QAAQ,MAAM,aAAa,EAAE,UAAU;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,UAAU,QAAgB,MAAc,eAAgC;AACtE,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,WAAO,MAAM,IAAI,GAAG,GAAG,WAAW;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,SAAS,QAAgB,MAAc,eAA6C;AAClF,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,UAAM,WAAW,MAAM,IAAI,GAAG;AAC9B,QAAI,CAAC,SAAU,QAAO;AACtB,WAAO;AAAA,MACL,QAAQ,SAAS;AAAA,MACjB,cAAc,MAAM,KAAK,SAAS,YAAY;AAAA,MAC9C,SAAS,SAAS;AAAA,MAClB,YAAY,SAAS;AAAA,IACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAA4B;AAC1B,WAAO,MAAM,KAAK,MAAM,OAAO,CAAC,EAAE,IAAI,QAAM;AAAA,MAC1C,QAAQ,EAAE;AAAA,MACV,cAAc,MAAM,KAAK,EAAE,YAAY;AAAA,MACvC,SAAS,EAAE;AAAA,MACX,YAAY,EAAE;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA;AAAA,EAGA,UAAgB;AACd,QAAI;AACF,YAAM,UAAU,MAAM,KAAK,MAAM,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM;AAAA,QAC9D;AAAA,QACA;AAAA,UACE,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,UACV,eAAe,IAAI;AAAA,UACnB,cAAc,MAAM,KAAK,IAAI,YAAY;AAAA,UACzC,SAAS,IAAI;AAAA,UACb,YAAY,IAAI;AAAA,QAClB;AAAA,MACF,CAAC;AACD,mBAAa,QAAQ,aAAa,KAAK,UAAU,OAAO,CAAC;AAAA,IAC3D,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA,EAGA,OAAa;AACX,QAAI;AACF,YAAM,MAAM,aAAa,QAAQ,WAAW;AAC5C,UAAI,CAAC,IAAK;AACV,UAAI,UAAU,KAAK,MAAM,GAAG;AAW5B,YAAM,aAAa,QAAQ,KAAK,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,GAAG,EAAE,WAAW,CAAC;AACtE,UAAI,YAAY;AACd,cAAM,YAAsB;AAAA,UAC1B,eAAe;AAAA,UACf,SAAS,OAAO;AAAA,YACd,QAAQ,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK;AAAA,cAChC,MAAM,mBAAmB,IAAI,YAAY;AAAA,cACzC,SAAS,IAAI;AAAA,cACb,OAAO,IAAI,cAAc;AAAA,YAC3B,CAAC,CAAC;AAAA,UACJ;AAAA,QACF;AACA,cAAM,WAAW,gBAAgB,SAAS;AAC1C,YAAI,aAAa,WAAW;AAE1B,oBAAU,OAAO,QAAQ,SAAS,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/D,kBAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,mBAAO,CAAC,KAAK;AAAA,cACX,QAAQ;AAAA,cACR,MAAM,MAAM,CAAC,KAAK;AAAA,cAClB,eAAe,MAAM,CAAC,KAAK;AAAA,cAC3B,cAAc,mBAAmB,MAAM,IAAI;AAAA,cAC3C,SAAS,MAAM;AAAA,cACf,YAAY,MAAM;AAAA,YACpB,CAAC;AAAA,UACH,CAAC;AAED,uBAAa,QAAQ,aAAa,KAAK,UAAU,OAAO,CAAC;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,MAAM;AACZ,iBAAW,CAAC,KAAK,GAAG,KAAK,SAAS;AAChC,YAAI,IAAI,SAAS,UAAa,IAAI,kBAAkB,OAAW;AAC/D,cAAM,IAAI,KAAK;AAAA,UACb;AAAA,UACA,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,UACV,eAAe,IAAI;AAAA,UACnB,cAAc,IAAI,IAAI,IAAI,YAAY;AAAA,UACtC,SAAS,IAAI;AAAA,UACb,YAAY,IAAI,cAAc;AAAA,QAChC,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAEN,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,cAAc,QAAgB,MAAc,eAA+B;AACzE,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,WAAO,MAAM,IAAI,GAAG,GAAG,cAAc;AAAA,EACvC;AAAA;AAAA,EAGA,QAAc;AACZ,UAAM,MAAM;AACZ,QAAI;AACF,mBAAa,WAAW,WAAW;AAAA,IACrC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AC5SA,IAAMC,eAAc;AACpB,IAAM,QAAQ,oBAAI,IAAgC;AAElD,SAAS,SAAS,QAAgB,MAAsB;AACtD,SAAO,GAAG,MAAM,IAAI,IAAI;AAC1B;AAyBO,IAAM,gBAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ1C,IAAI,QAAgB,MAA8C;AAChE,WAAO,MAAM,IAAI,SAAS,QAAQ,IAAI,CAAC;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,OAAiC;AACnC,UAAM,IAAI,SAAS,MAAM,QAAQ,MAAM,IAAI,GAAG,KAAK;AACnD,kBAAc,QAAQ;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,IAAI,QAAgB,MAAc,MAAuB;AACvD,UAAM,QAAQ,MAAM,IAAI,SAAS,QAAQ,IAAI,CAAC;AAC9C,WAAO,CAAC,CAAC,SAAS,MAAM,kBAAkB;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,QAAgB,MAAoB;AACzC,UAAM,OAAO,SAAS,QAAQ,IAAI,CAAC;AACnC,kBAAc,QAAQ;AAAA,EACxB;AAAA;AAAA,EAGA,OAAa;AACX,QAAI;AACF,YAAM,MAAM,aAAa,QAAQA,YAAW;AAC5C,UAAI,CAAC,IAAK;AACV,YAAM,UAAU,KAAK,MAAM,GAAG;AAC9B,YAAM,MAAM;AACZ,iBAAW,CAAC,KAAK,GAAG,KAAK,QAAS,OAAM,IAAI,KAAK,GAAG;AAAA,IACtD,QAAQ;AAAqD,YAAM,MAAM;AAAA,IAAG;AAAA,EAC9E;AAAA;AAAA,EAGA,UAAgB;AACd,QAAI;AACF,mBAAa,QAAQA,cAAa,KAAK,UAAU,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC,CAAC;AAAA,IAC/E,QAAQ;AAAA,IAAgF;AAAA,EAC1F;AAAA;AAAA,EAGA,QAAc;AACZ,UAAM,MAAM;AACZ,QAAI;AAAE,mBAAa,WAAWA,YAAW;AAAA,IAAG,QAAQ;AAAA,IAA0D;AAAA,EAChH;AACF;;;AC9FA,IAAM,UAAoC,oBAAI,IAAyB;AACvE,IAAI,UAAU;AAEd,SAAS,OAAa;AACpB;AACA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,cAAc,IAAI,YAAY,uBAAuB,CAAC;AAAA,EAC/D;AACF;AA4BO,IAAM,eAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQxC,SAAS,UAAkB,cAAsB,OAAqB;AACpE,YAAQ,IAAI,UAAU,EAAE,UAAU,cAAc,OAAO,OAAO,MAAM,CAAC;AACrE,SAAK;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,UAAwB;AACjC,QAAI,QAAQ,OAAO,QAAQ,EAAG,MAAK;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,UAAkB,QAAkC;AAC9D,UAAM,MAAM,QAAQ,IAAI,QAAQ;AAChC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,UAAU,OAAW,KAAI,QAAQ,OAAO;AACnD,SAAK;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,KAAK,UAAkB,OAAsB;AAC3C,UAAM,MAAM,QAAQ,IAAI,QAAQ;AAChC,QAAI,KAAK;AAAE,UAAI,QAAQ;AAAO,WAAK;AAAA,IAAG;AACtC,UAAM,eAAe,eAAe,gBAAgB,QAAQ;AAC5D,QAAI,cAAc;AAChB,YAAM,YAAY;AAAA,QAChB,MAAM;AAAA;AAAA,QACN,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,QACxC,MAAM,CAAC,CAAC,KAAK,qBAAqB,CAAC;AAAA,QACnC,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,QACjC,QAAQ;AAAA,QACR,IAAI,cAAc,QAAQ,IAAI,KAAK,IAAI,CAAC;AAAA,QACxC,KAAK;AAAA,MACP;AACA,mBAAa,YAAY,CAAC,SAAS,aAAa,SAAS,GAAG,GAAG;AAAA,IACjE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,IAAI,UAA2B;AAAE,WAAO,QAAQ,IAAI,QAAQ;AAAA,EAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ/D,IAAI,UAA2C;AAAE,WAAO,QAAQ,IAAI,QAAQ;AAAA,EAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO/E,aAAuC;AAAE,WAAO,IAAI,IAAI,OAAO;AAAA,EAAG;AAAA;AAAA,EAGlE,IAAI,UAAkB;AAAE,WAAO;AAAA,EAAS;AAAA;AAAA,EAGxC,IAAI,QAAgB;AAAE,WAAO,QAAQ;AAAA,EAAM;AAAA;AAAA,EAG3C,QAAc;AAAE,YAAQ,MAAM;AAAG,cAAU;AAAA,EAAG;AAChD;;;AC1JA,IAAM,yBAAyB;AAAA,EAC7B;AAAA,EAAS;AAAA,EAAY;AAAA,EAAW;AAAA,EAAO;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAS;AACnE;AAEA,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EAAU;AAAA,EAAU;AAAA,EAAY;AAAA,EAAO;AAAA,EAAU;AAAA,EAAU;AAAA,EAAQ;AAAA,EACnE;AAAA,EAAS;AAAA,EAAU;AAAA,EAAO;AAAA,EAAU;AAAA,EAAM;AAC5C;AAaO,SAAS,uBAAuB,OAAwC;AAC7E,QAAM,WAAW,IAAI,IAAI,MAAM,cAAc,mBAAmB,CAAC,CAAC;AAClE,QAAM,UAAoB,uBAAuB,OAAO,CAAC,WAAW,CAAC,SAAS,IAAI,MAAM,CAAC;AAEzF,aAAW,UAAU,sBAAsB;AACzC,QAAI,CAAC,SAAS,IAAI,MAAM,KAAK,oBAAoB,OAAO,MAAM,EAAG,SAAQ,KAAK,MAAM;AAAA,EACtF;AAEA,SAAO,OAAO,OAAO,EAAE,SAAS,WAAW,OAAO,EAAE,CAAC;AACvD;AAaO,SAAS,wBACd,OACA,UACkB;AAClB,QAAM,eAAe,uBAAuB,KAAK;AACjD,QAAM,WAAW,IAAI,IAAI,MAAM,cAAc,mBAAmB,CAAC,CAAC;AAClE,QAAM,WAAW,gBAAgB,OAAO,aAAa,SAAS,QAAQ;AACtE,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,SAAS,WAAW,aAAa,OAAO;AAAA,IACxC,UAAU,WAAW,QAAQ;AAAA,EAC/B,CAAC;AACD,QAAM,UAAU,MAAM,cAAc,qBAAqB,UAAU,SAAS,KAAK;AAEjF,SAAO,OAAO,OAAO;AAAA,IACnB,cAAc,OAAO,OAAO;AAAA,MAC1B,SAAS,WAAW,iBAAiB,UAAU,SAAS,QAAQ,OAAO,CAAC;AAAA,IAC1E,CAAC;AAAA,IACD,UAAU,WAAW,iBAAiB,UAAU,UAAU,QAAQ,QAAQ,CAAC;AAAA,EAC7E,CAAC;AACH;AAEA,SAAS,oBAAoB,OAAqB,QAAyB;AACzE,MAAI,CAAC,MAAM,WAAW,MAAM,EAAG,QAAO;AAEtC,UAAQ,QAAQ;AAAA,IACd,KAAK;AAAU,aAAO,QAAQ,MAAM,SAAS;AAAA,IAC7C,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM,QAAQ,MAAM,QAAQ,YAAY,MAAM;AAAA,IAC9F,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD,KAAK;AAAQ,aAAO,MAAM,MAAM,YAAY,MAAM;AAAA,IAClD,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD,KAAK;AAAS,aAAO,MAAM,OAAO,YAAY,MAAM;AAAA,IACpD,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD,KAAK;AAAO,aAAO,MAAM,KAAK,YAAY,MAAM;AAAA,IAChD,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD,KAAK;AAAM,aAAO,MAAM,OAAO;AAAA,IAC/B;AAAS,aAAO;AAAA,EAClB;AACF;AAEA,SAAS,gBACP,OACA,SACA,UACU;AACV,QAAM,cAAc,IAAI,IAAI,OAAO;AACnC,SAAO,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS;AACxD,QAAI,SAAS,IAAI,IAAI,EAAG,QAAO;AAC/B,WAAO,CAAC,qBAAqB,SAAS,IAA2C,KAAK,YAAY,IAAI,IAAI;AAAA,EAC5G,CAAC;AACH;AAEA,SAAS,iBAAiB,WAA8B,WAAwC;AAC9F,QAAM,eAAe,IAAI,IAAI,SAAS;AACtC,SAAO,UAAU,OAAO,CAAC,UAAU,aAAa,IAAI,KAAK,CAAC;AAC5D;AAEA,SAAS,WAAW,QAA8C;AAChE,SAAO,OAAO,OAAO,CAAC,GAAG,MAAM,CAAC;AAClC;;;AC9EO,SAAS,wBAAyC;AACvD,QAAM,WAAW,oBAAI,QAAwB;AAC7C,QAAM,sBAAsB,oBAAI,IAAoB;AACpD,QAAM,eAAe,oBAAI,IAA8B;AACvD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,UAAU,QAAiB;AACzC,aAAO,aAAa,IAAI,QAAQ,GAAG,aAAa,QAAQ,SAAS,MAAM,KAAK;AAAA,IAC9E;AAAA,IACA,QAAc;AACZ,0BAAoB,MAAM;AAC1B,mBAAa,MAAM;AAAA,IACrB;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA4B;AAE1B,MAAI,MAAM,SAAS,IAAI,YAAY,MAAM,sBAAsB;AAC7D;AAAA,EACF;AAEA,QAAM,WAAW,qBAAqB,OAAO,UAAU,YAAY;AACnE,MAAI,CAAC,SAAU;AAEf,+BAA6B,EAAE,QAAQ,SAAS,OAAO,sBAAsB,UAAU,SAAS,CAAC;AACjG,QAAM,cAAc,eAAe,eAAe,YAAY,KAAK,wBAAwB,OAAO,QAAQ;AAC1G,QAAM,aAAa,IAAI,UAAU,WAAW;AAC5C,gBAAc,cAAc,WAAW;AACvC,QAAM,SAAS,IAAI,cAAc,oBAAoB;AACvD;AAEA,SAAS,6BAA6B;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAES;AAKP,QAAM,WAAW,QAAQ,gBAAgB,mBAAmB,QAAQ;AACpE,QAAM,uBAAuB,MAAM,oBAAoB,IAAI,QAAQ;AACnE,MAAI,YAAY,yBAAyB,sBAAsB;AAC7D;AAAA,EACF;AACA,MAAI,YAAY,yBAAyB,QAAW;AAClD,YAAQ,gBAAgB,WAAW,QAAQ;AAAA,EAC7C;AACA,MAAI,YAAY,yBAAyB,OAAW;AAEpD,QAAM,QAAsB;AAAA,IAC1B,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,MAAM,SAAS;AAAA,IACf,eAAe,SAAS;AAAA,IACxB,cAAc,KAAK,IAAI;AAAA,IACvB,YAAY,OAAO,WAAW;AAAA,IAC9B,YAAY;AAAA,EACd;AACA,UAAQ,gBAAgB,SAAS,UAAU,KAAK;AAChD,QAAM,oBAAoB,IAAI,UAAU,oBAAoB;AAC9D;AAEA,SAAS,qBACP,OACA,UACA,cACgD;AAKhD,QAAM,eAAe,MAAM,sBAAsB,QAAQ;AACzD,MAAI,iBAAiB,QAAQ,iBAAiB,QAAW;AACvD,WAAO,OAAO,OAAO;AAAA,MACnB,MAAM,aAAa;AAAA,MACnB,eAAe,aAAa;AAAA,IAC9B,CAAC;AAAA,EACH;AAEA,QAAM,iBAAiB,eAAe,YAAY,YAAY;AAC9D,MAAI,CAAC,gBAAgB;AACnB,WAAO;AAAA,EACT;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB,MAAM,eAAe;AAAA,IACrB,eAAe,eAAe;AAAA,EAChC,CAAC;AACH;AAEA,SAAS,cACP,KACA,aACM;AACN,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,cAAc,YAAY;AAAA,IAC1B,UAAU,YAAY;AAAA,EACxB;AACA,MAAI,YAAY,SAAS,GAAG;AAC9B;;;ARuBA,SAAS,eACP,OACA,OACA,QACM;AACN,MAAI,CAAC,MAAM,kBAAmB;AAC9B,QAAM,OAAO,MAAM;AACnB,QAAM,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,OAAO,KAAK,SAAS,WAC3E,KAAK,OACL;AACJ,MAAI;AACF,UAAM,kBAAkB,EAAE,MAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC;AAAA,EAChE,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,kBAAkB,OAAkC;AAClE,QAAM,kBAAkB,sBAAsB;AAC9C,QAAM,eAAe,WAAW,OAAO;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,UAAmB,cAAc;AAAA,IACrC,GAAG;AAAA,IACH,iBAAiB,gBAAgB;AAAA,EACnC,CAAC;AAED,WAAS,0BACP,UACA,QACA,YACM;AAGN,eAAW,SAAS,QAAQ,gBAAgB,cAAc,GAAG;AAC3D,YAAM,cAAc,gBAAgB,aAAa,IAAI,MAAM,QAAQ;AACnE,UAAI,CAAC,aAAa,aAAa,QAAQ,SAAS,MAAM,EAAG;AACzD,UAAI,CAAC,QAAQ,SAAS,MAAM,MAAM,QAAQ,MAAM,MAAM,MAAM,eAAe,UAAU,EAAG;AAExF,YAAM,MAAM,eAAe,gBAAgB,MAAM,QAAQ;AACzD,UAAI,CAAC,IAAK;AACV,UAAI,YAAY,UAAU,GAAG;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,cAAc,OAA2B;AACvC,YAAM,eAAe,MAAM;AAC3B,UAAI,CAAC,cAAc;AACjB,uBAAe,OAAO,OAAO,kBAAkB;AAC/C;AAAA,MACF;AACA,YAAM,WAAW,eAAe,YAAY,YAAY;AACxD,UAAI,CAAC,UAAU;AACb,uBAAe,OAAO,OAAO,qBAAqB;AAClD;AAAA,MACF;AACA,YAAM,MAAM,MAAM;AAGlB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,OAAO,IAAI,SAAS,SAAU;AAG7E,UAAI,IAAI,SAAS,eAAe;AAC9B,yBAAiB;AAAA,UACf;AAAA,UACA,QAAQ,MAAM;AAAA,UACd;AAAA,UACA,OAAO;AAAA,UACP,sBAAsB,eAAe,kBAAkB,YAAY,KAAK;AAAA,UACxE;AAAA,UACA;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAGA,cAAQ,cAAc,UAAU,GAAG;AAAA,IACrC;AAAA,IAEA,YAAY,OAAe,SAAwB;AACjD,cAAQ,YAAY,OAAO,OAAO;AAAA,IACpC;AAAA,IAEA,UAAgB;AACd,cAAQ,QAAQ;AAChB,sBAAgB,MAAM;AAAA,IACxB;AAAA,IAEA,uBAAuB,SAAkD;AACvE,cAAQ,uBAAuB,OAAO;AAAA,IACxC;AAAA,IAEA,aAAa,OAAoB;AAC/B,YAAM,WAA2B,EAAE,MAAM,iBAAiB,MAAM;AAChE,gCAA0B,UAAU,SAAS,YAAY;AAAA,IAC3D;AAAA,IAEA,uBAAuB,QAAsB;AAC3C,YAAM,WAA2B,EAAE,MAAM,oBAAoB,OAAO;AACpE,gCAA0B,UAAU,YAAY,eAAe;AAAA,IACjE;AAAA,IAEA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;AS5PA,SAAS,kBAAkB,SAAsC;AAC/D,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,aAAuB,CAAC;AAC9B,aAAW,UAAU,SAAS;AAC5B,UAAM,QAAQ,OAAO,KAAK;AAC1B,QAAI,CAAC,SAAS,MAAM,SAAS,GAAG,KAAK,MAAM,WAAW,OAAO,KAAK,KAAK,IAAI,KAAK,GAAG;AACjF;AAAA,IACF;AACA,SAAK,IAAI,KAAK;AACd,eAAW,KAAK,KAAK;AAAA,EACvB;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAwB;AAC1C,SAAO,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,SAAS;AACtD;AAeO,SAAS,8BAA8B,SAAiD;AAC7F,QAAM,UAAU,kBAAkB,CAAC,SAAS,GAAG,QAAQ,OAAO,CAAC;AAC/D,SAAO,uCAAuC,wBAAwB,SAAS,CAAC,KAAK,WAAW,OAAO,CAAC;AAC1G;AAgBO,SAAS,8BACd,MACA,SACQ;AACR,QAAM,UAAU,8BAA8B,OAAO;AACrD,QAAM,UAAU;AAChB,MAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,WAAO,KAAK,QAAQ,SAAS,CAAC,UAAU,GAAG,KAAK,GAAG,OAAO,EAAE;AAAA,EAC9D;AACA,MAAI,eAAe,KAAK,IAAI,GAAG;AAC7B,WAAO,KAAK,QAAQ,gBAAgB,CAAC,SAAS,GAAG,IAAI,GAAG,OAAO,EAAE;AAAA,EACnE;AACA,MAAI,eAAe,KAAK,IAAI,GAAG;AAC7B,WAAO,KAAK,QAAQ,gBAAgB,CAAC,SAAS,GAAG,IAAI,SAAS,OAAO,SAAS;AAAA,EAChF;AACA,SAAO,GAAG,OAAO,GAAG,IAAI;AAC1B;AAEA,SAAS,wBAAwB,SAAyB;AACxD,QAAM,SAAS;AACf,QAAM,UAAU,IAAI,IAAI,OAAO;AAC/B,QAAM,mBAAmB;AAKzB,WAAS,KAAa;AACpB,QAAI,OAAO,QAAQ,WAAY,QAAO,OAAO,OAAO,WAAW;AAC/D,WAAO,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAAA,EACrE;AAEA,WAAS,KAAK,SAA+B;AAC3C,WAAO,OAAO,YAAY,SAAS,GAAG;AAAA,EACxC;AAEA,WAAS,OAAO,UAAgC;AAC9C,WAAO,iBAAiB,WAAW,QAAQ;AAC3C,WAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAAA,EAC7D;AAEA,WAAS,gBAAgB,OAA8B;AACrD,WAAO,MAAM,WAAW,OAAO;AAAA,EACjC;AAEA,WAAS,QACP,SACA,YACA,KACA,UAAuC,CAAC,GAC5B;AACZ,UAAM,YAAY,QAAQ,MAAM,GAAG;AACnC,UAAM,WAAW,EAAE,GAAG,SAAS,IAAI,UAAU;AAC7C,WAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,YAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,YAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,cAAM,WAAW,MAAM;AACvB,YAAI,OAAO,aAAa,YAAY,aAAa,KAAM;AACvD,cAAM,MAAM;AACZ,YAAI,IAAI,SAAS,cAAc,IAAI,SAAS,GAAG,QAAQ,IAAI,SAAU;AACrE,YAAI,IAAI,OAAO,UAAW;AAC1B,YAAI;AACJ,qBAAa,KAAK;AAClB,cAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAC1D,YAAI,SAAS,QAAQ,kBAAkB,OAAO;AAC5C,iBAAO,IAAI,MAAM,KAAK,CAAC;AACvB;AAAA,QACF;AACA,YAAI;AACF,kBAAQ,IAAI,GAAG,CAAC;AAAA,QAClB,SAAS,KAAK;AACZ,iBAAO,GAAG;AAAA,QACZ;AAAA,MACF,CAAC;AACD,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI;AACJ,eAAO,IAAI,MAAM,GAAG,QAAQ,IAAI,YAAY,CAAC;AAAA,MAC/C,GAAG,gBAAgB;AACnB,WAAK,QAAQ;AAAA,IACf,CAAC;AAAA,EACH;AAEA,WAAS,KAAK,SAA+B;AAC3C,SAAK,OAAO;AAAA,EACd;AAEA,WAAS,kBAAkB,OAAwB;AACjD,UAAM,UAAU,MAAM,OAAO,MAAM;AACnC,UAAM,OAAO,YAAY,KAAK,QAAQ,MAAM,MAAM,GAAG,OAAO;AAC5D,WAAO,6BAA6B,KAAK,IAAI;AAAA,EAC/C;AAEA,WAAS,uBACP,OACA,oBACqD;AACrD,QAAI,OAAO,UAAU,SAAU,OAAM,IAAI,UAAU,wBAAwB;AAC3E,QAAI,CAAC,kBAAkB,KAAK,EAAG,QAAO,EAAE,MAAM;AAC9C,QAAI,MAAM,SAAS,GAAG,EAAG,OAAM,IAAI,UAAU,4CAA4C;AACzF,UAAM,aAAa,MAAM,QAAQ,GAAG;AACpC,QAAI,eAAe,IAAI;AACrB,aAAO,EAAE,MAAM;AAAA,IACjB;AACA,QAAI,oBAAoB;AACtB,YAAM,IAAI,UAAU,gEAAgE;AAAA,IACtF;AAEA,UAAM,UAAmC,CAAC;AAC1C,UAAM,QAAQ,oBAAI,IAAY;AAC9B,UAAM,QAAQ,MAAM,MAAM,aAAa,CAAC;AACxC,QAAI,OAAO;AACT,iBAAW,QAAQ,MAAM,MAAM,GAAG,GAAG;AACnC,cAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,YAAI,YAAY,GAAG;AACjB,gBAAM,IAAI,UAAU,sDAAsD;AAAA,QAC5E;AACA,YAAI;AACJ,YAAI;AACJ,YAAI;AACF,iBAAO,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;AAClD,kBAAQ,mBAAmB,KAAK,MAAM,YAAY,CAAC,CAAC;AAAA,QACtD,QAAQ;AACN,gBAAM,IAAI,UAAU,sDAAsD;AAAA,QAC5E;AACA,YAAI,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,UAAU,uCAAuC;AAChF,cAAM,IAAI,IAAI;AACd,gBAAQ,KAAK,CAAC,MAAM,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,EAAE,OAAO,MAAM,MAAM,GAAG,UAAU,GAAG,SAAS,OAAO,YAAY,OAAO,EAAE;AAAA,EACnF;AAEA,WAAS,cAAc,KAA8C;AACnE,WAAO;AAAA,EACT;AAEA,WAAS,gBAAgB,KAAuD;AAC9E,UAAM,EAAE,MAAM,OAAO,IAAI,KAAK,GAAG,OAAO,IAAI;AAC5C,WAAO;AAAA,EACT;AAEA,WAAS,aAAgB,KAAqB,OAAe,UAAqB;AAChF,QAAI,OAAO,UAAU,eAAe,KAAK,KAAK,KAAK,EAAG,QAAO,IAAI,KAAK;AACtE,UAAM,IAAI,MAAM,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,QAAQ;AAAA,EACtE;AAEA,WAAS,WAAW,KAAqB,UAAwB;AAC/D,QAAI,OAAO,IAAI,UAAU,YAAY,IAAI,MAAO,OAAM,IAAI,MAAM,IAAI,KAAK;AACzE,QAAI,IAAI,OAAO,MAAO,OAAM,IAAI,MAAM,QAAQ;AAAA,EAChD;AAEA,WAAS,mBAAmB,OAAsC;AAChE,QAAI,SAAS;AACb,WAAO;AAAA,MACL,QAAQ;AACN,YAAI,OAAQ;AACZ,iBAAS;AACT,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAO5C,UAAM,gBAAgB,OAAO,OAAO,CAAC,CAAa;AAClD,UAAM,gBAAgB,oBAAI,IAAkB;AAC5C,QAAI;AACJ,QAAI,eAAwD,MAAM;AAClE,UAAM,QAAQ,IAAI,QAA0B,CAAC,YAAY;AACvD,qBAAe;AAAA,IACjB,CAAC;AAED,UAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,UAAI,CAAC,gBAAgB,KAAK,KAAK,YAAa;AAC5C,YAAM,WAAW,MAAM;AACvB,UAAI,OAAO,aAAa,YAAY,aAAa,KAAM;AACvD,YAAM,UAAU;AAChB,UAAI,QAAQ,SAAS,aAAc;AAEnC,YAAM,kBAAkB,QAAQ;AAChC,YAAM,aAAa,OAAO,oBAAoB,YAAY,oBAAoB,OACzE,gBAA4C,UAC7C;AACJ,UAAI,CAAC,MAAM,QAAQ,UAAU,EAAG;AAEhC,YAAMC,WAAU,cAAc,UAAU;AACxC,YAAM,WAAW,cAAc,MAAM,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,WAAW,CAAC,CAAC;AACtF,oBAAc,OAAO,OAAO;AAAA,QAC1B,cAAc,OAAO,OAAO,EAAE,SAAAA,SAAQ,CAAC;AAAA,QACvC;AAAA,MACF,CAAC;AACD,UAAI;AACJ,mBAAa,WAAW;AACxB,iBAAW,WAAW,cAAe,SAAQ,WAAW;AACxD,oBAAc,MAAM;AAAA,IACtB,CAAC;AAED,aAAS,cAAc,QAA+C;AACpE,YAAM,OAAO,oBAAI,IAAY;AAC7B,YAAM,UAAoB,CAAC;AAC3B,iBAAW,SAAS,QAAQ;AAC1B,YAAI,OAAO,UAAU,YAAY,MAAM,WAAW,KAAK,KAAK,IAAI,KAAK,EAAG;AACxE,aAAK,IAAI,KAAK;AACd,gBAAQ,KAAK,KAAK;AAAA,MACpB;AACA,aAAO,OAAO,OAAO,OAAO;AAAA,IAC9B;AAEA,aAAS,SAAS,QAAyB;AACzC,aAAO,OAAO,WAAW,YAAY,aAAa,aAAa,QAAQ,SAAS,MAAM,MAAM;AAAA,IAC9F;AAEA,UAAMC,SAAQ;AAAA,MACZ,OAAO,MAAM;AAAA,MACb;AAAA,MACA,IAAI,WAA8B;AAChC,eAAO,aAAa,YAAY;AAAA,MAClC;AAAA,MACA,IAAI,SAAS,WAA8B;AAAA,MAE3C;AAAA,MACA,QAAQ,SAAuB;AAC7B,YAAI,aAAa;AACf,kBAAQ,WAAW;AACnB,iBAAO,mBAAmB,MAAM,MAAS;AAAA,QAC3C;AACA,sBAAc,IAAI,OAAO;AACzB,eAAO,mBAAmB,MAAM,cAAc,OAAO,OAAO,CAAC;AAAA,MAC/D;AAAA,IACF;AAEA,SAAK,EAAE,MAAM,cAAc,CAAC;AAC5B,WAAOA;AAAA,EACT;AAEA,WAAS,kBACP,WACA,UACA,SAA+C,CAAC,YAAY,QAAQ,OACjD;AACnB,UAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,UAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,YAAM,MAAM,MAAM;AAClB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,UAAW,UAAS,OAAO,GAAG,CAAC;AAAA,IAC7F,CAAC;AACD,WAAO,mBAAmB,GAAG;AAAA,EAC/B;AAEA,WAAS,YAAqC;AAC5C,WAAO;AAAA,MACL,UAAU,SAAkB,SAAoC,QAAoB,SAA8B;AAChH,cAAM,QAAQ,GAAG;AACjB,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,UAAU,MAAO;AACpE,cAAI,IAAI,SAAS,cAAe,SAAQ,IAAI,MAAM;AAAA,mBACzC,IAAI,SAAS,aAAc,QAAO;AAAA,mBAClC,IAAI,SAAS,eAAgB,KAAI;AAAA,QAC5C,CAAC;AACD,aAAK;AAAA,UACH,MAAM;AAAA,UACN,IAAI,GAAG;AAAA,UACP;AAAA,UACA,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO;AAAA,UACpD,GAAI,SAAS,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QACnD,CAAC;AACD,eAAO,mBAAmB,MAAM;AAC9B,eAAK,EAAE,MAAM,eAAe,IAAI,GAAG,GAAG,MAAM,CAAC;AAC7C,cAAI;AAAA,QACN,CAAC;AAAA,MACH;AAAA,MACA,QAAQ,UAAmB;AACzB,eAAO;AAAA,UACL,EAAE,MAAM,iBAAiB,OAAO,SAAS;AAAA,UACzC;AAAA,UACA,CAAC,QAAQ;AACP,gBAAI,CAAC,IAAI,MAAO,OAAM,IAAI,MAAM,oCAAoC;AACpE,mBAAO,IAAI;AAAA,UACb;AAAA,QACF;AAAA,MACF;AAAA,MACA,iBAAiB,UAAmB,WAAmB,aAAa,SAAS;AAC3E,eAAO;AAAA,UACL,EAAE,MAAM,0BAA0B,OAAO,UAAU,WAAW,WAAW;AAAA,UACzE;AAAA,UACA,CAAC,QAAQ;AACP,gBAAI,CAAC,IAAI,MAAO,OAAM,IAAI,MAAM,6CAA6C;AAC7E,mBAAO,IAAI;AAAA,UACb;AAAA,QACF;AAAA,MACF;AAAA,MACA,MAAM,SAAkB;AACtB,eAAO;AAAA,UACL,EAAE,MAAM,eAAe,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE;AAAA,UAC7E;AAAA,UACA,CAAC,QAAQ,MAAM,QAAQ,IAAI,MAAM,IAAI,IAAI,SAAS,CAAC;AAAA,QACrD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,WAAS,UAAmC;AAO1C,UAAM,cAAc,oBAAI,IAAwB;AAWhD,UAAM,oBAAoB;AAC1B,UAAM,gBAAgB,oBAAI,IAA0B;AACpD,UAAM,iBAAiB,oBAAI,IAA+C;AAC1E,UAAM,gBAAgC,CAAC;AACvC,UAAM,iBAAiB,oBAAI,IAA4B;AACvD,UAAM,iBAAiB,oBAAI,IAA2B;AAEtD,aAAS,wBAAwB,OAAwB;AACvD,UAAI,OAAO,UAAU,SAAU,OAAM,IAAI,UAAU,wBAAwB;AAC3E,UAAI,kBAAkB,KAAK,MAAM,MAAM,SAAS,GAAG,KAAK,MAAM,SAAS,GAAG,IAAI;AAC5E,cAAM,IAAI,UAAU,sDAAsD;AAAA,MAC5E;AACA,aAAO;AAAA,IACT;AAEA,aAAS,kBAAkB,OAAqB,QAAuB,aAA4B;AACjG,UAAI,MAAM,OAAQ;AAClB,YAAM,SAAS;AACf,UAAI,YAAa,MAAK,EAAE,MAAM,qBAAqB,WAAW,MAAM,UAAU,CAAC;AAC/E,iBAAW,WAAW,MAAM,eAAgB,SAAQ,MAAM;AAAA,IAC5D;AAEA,aAAS,kBAAkB,OAA8C;AACvE,aAAO;AAAA,QACL,IAAI,MAAM;AAAA,QACV,MAAM,MAAM;AAAA,QACZ,KAAK,SAAmB;AACtB,cAAI,MAAM,OAAQ;AAClB,eAAK,EAAE,MAAM,oBAAoB,WAAW,MAAM,WAAW,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,EAAG,CAAC;AAAA,QAC9G;AAAA,QACA,GAAG,SAAwC;AACzC,cAAI,OAAO,YAAY,WAAY,OAAM,IAAI,UAAU,8CAA8C;AACrG,gBAAM,cAAc,IAAI,OAAO;AAC/B,gBAAM,UAAU,MAAM,cAAc,OAAO,CAAC;AAC5C,qBAAW,SAAS,QAAS,SAAQ,KAAK;AAC1C,iBAAO,mBAAmB,MAAM,MAAM,cAAc,OAAO,OAAO,CAAC;AAAA,QACrE;AAAA,QACA,SAAS,SAA0C;AACjD,cAAI,OAAO,YAAY,WAAY,OAAM,IAAI,UAAU,8CAA8C;AACrG,gBAAM,eAAe,IAAI,OAAO;AAChC,cAAI,MAAM,OAAQ,SAAQ,MAAM,MAAM;AACtC,iBAAO,mBAAmB,MAAM,MAAM,eAAe,OAAO,OAAO,CAAC;AAAA,QACtE;AAAA,QACA,QAAQ;AACN,4BAAkB,OAAO,EAAE,WAAW,MAAM,UAAU,GAAG,IAAI;AAAA,QAC/D;AAAA,MACF;AAAA,IACF;AAEA,aAAS,mBAAmB,WAAmB,MAA4B;AACzE,YAAM,WAAW,cAAc,IAAI,SAAS;AAC5C,UAAI,SAAU,QAAO;AACrB,YAAM,QAAsB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,eAAe,oBAAI,IAAI;AAAA,QACvB,gBAAgB,oBAAI,IAAI;AAAA,QACxB,eAAe,eAAe,IAAI,SAAS,KAAK,CAAC;AAAA,MACnD;AACA,qBAAe,OAAO,SAAS;AAC/B,oBAAc,IAAI,WAAW,KAAK;AAClC,YAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,qBAAe,OAAO,SAAS;AAC/B,UAAI,OAAQ,mBAAkB,OAAO,QAAQ,KAAK;AAClD,aAAO;AAAA,IACT;AAEA,aAAS,cAAc,OAA2B;AAChD,YAAM,SAAS,kBAAkB,KAAK;AACtC,UAAI,eAAe,OAAO,GAAG;AAC3B,mBAAW,WAAW,eAAgB,SAAQ,MAAM;AACpD;AAAA,MACF;AACA,oBAAc,KAAK,KAAK;AAAA,IAC1B;AAEA,aAAS,oBAAoB,WAAmB,QAAgB,gBAAyB,SAAwB;AAC/G,YAAM,QAAsB,iBAAiB,EAAE,WAAW,QAAQ,QAAQ,IAAI,EAAE,WAAW,OAAO;AAClG,YAAM,QAAQ,cAAc,IAAI,SAAS;AACzC,UAAI,CAAC,OAAO;AACV,cAAM,UAAU,eAAe,IAAI,SAAS,KAAK,CAAC;AAClD,YAAI,QAAQ,UAAU,mBAAmB;AACvC,yBAAe,OAAO,SAAS;AAC/B,yBAAe,IAAI,WAAW,EAAE,WAAW,QAAQ,kBAAkB,CAAC;AACtE,eAAK,EAAE,MAAM,qBAAqB,UAAU,CAAC;AAC7C;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK;AAClB,uBAAe,IAAI,WAAW,OAAO;AACrC;AAAA,MACF;AACA,UAAI,MAAM,OAAQ;AAClB,UAAI,MAAM,cAAc,OAAO,GAAG;AAChC,mBAAW,WAAW,MAAM,cAAe,SAAQ,KAAK;AACxD;AAAA,MACF;AACA,UAAI,MAAM,cAAc,UAAU,mBAAmB;AACnD,0BAAkB,OAAO,EAAE,WAAW,QAAQ,kBAAkB,GAAG,IAAI;AACvE;AAAA,MACF;AACA,YAAM,cAAc,KAAK,KAAK;AAAA,IAChC;AAEA,WAAO,CAAC,UAAU;AAChB,UAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,YAAM,MAAM,MAAM;AAClB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,OAAO,IAAI,SAAS,SAAU;AAC7E,UAAI,IAAI,SAAS,wBAAwB,OAAO,IAAI,cAAc,YAAY,OAAO,IAAI,SAAS,UAAU;AAC1G,sBAAc,mBAAmB,IAAI,WAAW,IAAI,IAAI,CAAC;AACzD;AAAA,MACF;AACA,UAAI,IAAI,SAAS,uBAAuB,OAAO,IAAI,cAAc,YAAY,OAAO,IAAI,WAAW,UAAU;AAC3G,4BAAoB,IAAI,WAAW,IAAI,QAAQ,OAAO,UAAU,eAAe,KAAK,KAAK,SAAS,GAAG,IAAI,OAAO;AAChH;AAAA,MACF;AACA,UAAI,IAAI,SAAS,wBAAwB,OAAO,IAAI,cAAc,UAAU;AAC1E,cAAM,SAAwB,OAAO,IAAI,WAAW,WAChD,EAAE,WAAW,IAAI,WAAW,QAAQ,IAAI,OAAO,IAC/C,EAAE,WAAW,IAAI,UAAU;AAC/B,cAAM,QAAQ,cAAc,IAAI,IAAI,SAAS;AAC7C,YAAI,MAAO,mBAAkB,OAAO,QAAQ,KAAK;AAAA,YAC5C,gBAAe,IAAI,IAAI,WAAW,MAAM;AAAA,MAC/C;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,KAAK,OAAe,SAAmB;AACrC,cAAM,aAAa,uBAAuB,OAAO,UAAU,SAAS,CAAC;AACrE,aAAK;AAAA,UACH,MAAM;AAAA,UACN,OAAO,WAAW;AAAA,UAClB,GAAI,WAAW,YAAY,UAAa,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,WAAW,WAAW,QAAQ;AAAA,QAChH,CAAC;AAAA,MACH;AAAA,MACA,GAAG,OAAe,UAAqC;AACrD,cAAM,cAAc,wBAAwB,KAAK;AACjD,YAAI,OAAO,aAAa,WAAY,OAAM,IAAI,UAAU,6CAA6C;AACrG,YAAI,QAAQ,YAAY,IAAI,WAAW;AACvC,YAAI,CAAC,OAAO;AACV,gBAAM,WAAW,oBAAI,IAA+B;AACpD,gBAAM,iBAAiB,GAAG;AAC1B,gBAAM,WAAW,OAAO,CAAC,UAAU;AACjC,gBAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,kBAAM,MAAM,MAAM;AAClB,gBACE,OAAO,QAAQ,YACZ,QAAQ,QACR,IAAI,SAAS,eACb,IAAI,UAAU,eACd,OAAO,IAAI,WAAW,SACzB;AACF,kBAAM,YAAsB,OAAO,UAAU,eAAe,KAAK,KAAK,SAAS,IAC3E,EAAE,OAAO,aAAa,QAAQ,IAAI,QAAQ,SAAS,IAAI,QAAQ,IAC/D,EAAE,OAAO,aAAa,QAAQ,IAAI,OAAO;AAC7C,uBAAW,WAAW,SAAU,SAAQ,SAAS;AAAA,UACnD,CAAC;AACD,gBAAM,YAAY,OAAO,CAAC,UAAU;AAClC,gBAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,kBAAM,MAAM,MAAM;AAClB,gBAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,0BAA0B,IAAI,OAAO,eAAgB;AACjH,sBAAU;AACV,gBAAI,OAAO,IAAI,UAAU,YAAY,IAAI,OAAO;AAC9C,uBAAS;AACT,0BAAY,OAAO,WAAW;AAAA,YAChC;AAAA,UACF,CAAC;AACD,kBAAQ,EAAE,UAAU,UAAU,UAAU;AACxC,sBAAY,IAAI,aAAa,KAAK;AAClC,eAAK,EAAE,MAAM,iBAAiB,IAAI,gBAAgB,OAAO,YAAY,CAAC;AAAA,QACxE;AACA,cAAM,SAAS,IAAI,QAAQ;AAC3B,eAAO,mBAAmB,MAAM;AAC9B,gBAAM,UAAU,YAAY,IAAI,WAAW;AAC3C,cAAI,CAAC,QAAS;AACd,kBAAQ,SAAS,OAAO,QAAQ;AAChC,cAAI,QAAQ,SAAS,SAAS,EAAG;AACjC,kBAAQ,SAAS;AACjB,kBAAQ,UAAU;AAClB,sBAAY,OAAO,WAAW;AAC9B,eAAK,EAAE,MAAM,mBAAmB,OAAO,YAAY,CAAC;AAAA,QACtD,CAAC;AAAA,MACH;AAAA,MACA,SAAS;AAAA,QACP,KAAK,YAAoB;AACvB,iBAAO;AAAA,YACL,EAAE,MAAM,oBAAoB,QAAQ,WAAW;AAAA,YAC/C;AAAA,YACA,CAAC,QAAQ;AACP,kBAAI,OAAO,IAAI,cAAc,YAAY,OAAO,IAAI,SAAS,UAAU;AACrE,sBAAM,IAAI,MAAM,kDAAkD;AAAA,cACpE;AACA,qBAAO,kBAAkB,mBAAmB,IAAI,WAAW,IAAI,IAAI,CAAC;AAAA,YACtE;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAS,SAAoD;AAC3D,cAAI,OAAO,YAAY,WAAY,OAAM,IAAI,UAAU,uCAAuC;AAC9F,yBAAe,IAAI,OAAO;AAC1B,gBAAM,UAAU,cAAc,OAAO,CAAC;AACtC,qBAAW,SAAS,QAAS,SAAQ,kBAAkB,KAAK,CAAC;AAC7D,iBAAO,mBAAmB,MAAM,eAAe,OAAO,OAAO,CAAC;AAAA,QAChE;AAAA,QACA,OAAO;AACL,iBAAO;AAAA,YACL,EAAE,MAAM,mBAAmB;AAAA,YAC3B;AAAA,YACA,CAAC,QAAQ,OAAO,QAAQ,MAAM,QAAQ,IAAI,QAAQ,IAAI,IAAI,WAAW,CAAC,GAAG,QAAQ,CAAC,YAChF,WACG,OAAO,YAAY,YACnB,OAAQ,QAAoC,OAAO,YACnD,OAAQ,QAAoC,SAAS,WACpD,CAAC,OAAO,OAAO;AAAA,cACf,IAAK,QAAoC;AAAA,cACzC,MAAO,QAAoC;AAAA,YAC7C,CAAC,CAAC,IACA,CAAC,CACN,CAAC;AAAA,UACJ;AAAA,QACF;AAAA,QACA,UAAU,SAAmB;AAC3B,eAAK,EAAE,MAAM,yBAAyB,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,EAAG,CAAC;AAAA,QACvF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,WAAS,cAAuC;AAC9C,UAAM,YAAY,CAAC,WAAoB;AAAA,MACrC,QAAQ,KAAa;AACnB,eAAO;AAAA,UACL,EAAE,MAAM,eAAe,KAAK,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UACxD;AAAA,UACA,CAAC,QAAQ,IAAI,SAAS;AAAA,QACxB;AAAA,MACF;AAAA,MACA,QAAQ,KAAa,OAAe;AAClC,eAAO;AAAA,UACL,EAAE,MAAM,eAAe,KAAK,OAAO,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UAC/D;AAAA,UACA,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,WAAW,KAAa;AACtB,eAAO;AAAA,UACL,EAAE,MAAM,kBAAkB,KAAK,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UAC3D;AAAA,UACA,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,OAAO;AACL,eAAO;AAAA,UACL,EAAE,MAAM,gBAAgB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UACpD;AAAA,UACA,CAAC,QAAQ,MAAM,QAAQ,IAAI,IAAI,IAAI,IAAI,OAAO,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,GAAG,UAAU,GAAG,UAAU,UAAU,UAAU,EAAE;AAAA,EAC3D;AAEA,WAAS,eAAwC;AAC/C,UAAM,OAAO,CAAI,MAAc,OAAe,UAAa,UAAmC,CAAC,MAAM;AAAA,MACnG,EAAE,MAAM,GAAG,QAAQ;AAAA,MACnB,GAAG,IAAI;AAAA,MACP,CAAC,QAAS,OAAO,UAAU,eAAe,KAAK,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;AAAA,MAC1E,EAAE,eAAe,SAAS,wBAAwB;AAAA,IACpD;AACA,WAAO,OAAO,OAAO;AAAA,MACnB,cAAc,MAAM,KAAK,yBAAyB,UAAU,EAAE;AAAA,MAC9D,WAAW,MAAM,KAAK,sBAAsB,UAAU,CAAC,CAAC;AAAA,MACxD,YAAY,MAAM,KAAK,uBAAuB,WAAW,IAAI;AAAA,MAC7D,YAAY,MAAM,KAAK,uBAAuB,WAAW,CAAC,CAAC;AAAA,MAC3D,SAAS,CAAC,aAAqB,KAAK,oBAAoB,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;AAAA,MACnF,SAAS,MAAM,KAAK,oBAAoB,QAAQ,CAAC,CAAC;AAAA,MAClD,UAAU,MAAM,KAAK,qBAAqB,WAAW,CAAC,CAAC;AAAA,MACvD,YAAY,MAAM,KAAK,uBAAuB,WAAW,CAAC,CAAC;AAAA,MAC3D,WAAW,MAAM,KAAK,sBAAsB,UAAU,CAAC,CAAC;AAAA,MACxD,UAAU,SAAmC;AAC3C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,mBAAoB;AAChF,cAAI,OAAO,IAAI,WAAW,SAAU,SAAQ,IAAI,MAAM;AAAA,QACxD,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,YAAqC;AAC5C,WAAO;AAAA,MACL,KAAK,MAAM,QAAQ,EAAE,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,IAAI,KAAK;AAAA,MAChF,UAAU,SAAmC;AAC3C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,gBAAiB,SAAQ,IAAI,KAAK;AAAA,QAChG,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,qBAAqB,oBAAI,IAA6B;AAC5D,QAAM,oBAAoB,oBAAI,IAAoB;AAClD,QAAM,eAAe,oBAAI,IAAI,CAAC,WAAW,OAAO,SAAS,MAAM,CAAC;AAChE,QAAM,mBAAmB,oBAAI,IAAI,CAAC,OAAO,QAAQ,CAAC;AAClD,QAAM,oBAAoB,oBAAI,IAAI;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,+BAA+B;AAEnC,WAAS,iBAAiB,KAAsB;AAC9C,QAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,WAAO,IAAI,WAAW,IAAI,IAAI,YAAY,IAAI;AAAA,EAChD;AAEA,WAAS,YAAY,OAMV;AACT,WAAO,GAAG,MAAM,IAAI,IAAI,MAAM,GAAG,IAAI,MAAM,KAAK,IAAI,MAAM,IAAI,IAAI,iBAAiB,MAAM,GAAG,CAAC;AAAA,EAC/F;AAEA,WAAS,gBAAgB,SAAiC;AACxD,QAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,MAAM,GAAI,QAAO;AACjE,UAAM,QAAQ,QAAQ,MAAM,GAAG;AAC/B,UAAM,MAAM,MAAM,IAAI,GAAG,KAAK;AAC9B,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,QAAQ,EAAE,MAAM,OAAO,KAAK,OAAO,OAAO,OAAO,MAAM,OAAO,IAAI;AACxE,eAAW,OAAO,OAAO;AACvB,YAAM,QAAQ,IAAI,KAAK,EAAE,YAAY;AACrC,UAAI,CAAC,MAAO;AACZ,UAAI,UAAU,UAAU,UAAU,UAAW,OAAM,OAAO;AAAA,eACjD,UAAU,SAAS,UAAU,SAAU,OAAM,MAAM;AAAA,eACnD,UAAU,QAAS,OAAM,QAAQ;AAAA,eACjC,UAAU,UAAU,UAAU,SAAS,UAAU,aAAa,UAAU,SAAS,UAAU,QAAS,OAAM,OAAO;AAAA,UACrH,QAAO;AAAA,IACd;AACA,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,WAAS,cAAc,OAML;AAChB,UAAM,MAAM,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AACxD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,YAAY;AAAA,MACjB,MAAM,QAAQ,MAAM,OAAO;AAAA,MAC3B,KAAK,QAAQ,MAAM,MAAM;AAAA,MACzB,OAAO,QAAQ,MAAM,QAAQ;AAAA,MAC7B,MAAM,QAAQ,MAAM,OAAO;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,kBAAkB,OAAyB;AAClD,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,UAAM,aAAa;AAMnB,QAAI,WAAW,sBAAsB,KAAM,QAAO;AAClD,UAAM,UAAU,OAAO,WAAW,YAAY,WAAW,WAAW,QAAQ,YAAY,IAAI;AAC5F,QAAI,YAAY,cAAc,YAAY,SAAU,QAAO;AAC3D,QAAI,YAAY,SAAS;AACvB,YAAM,OAAO,OAAO,WAAW,SAAS,YAAY,WAAW,OAAO,WAAW,KAAK,YAAY,IAAI;AACtG,aAAO,CAAC,kBAAkB,IAAI,IAAI;AAAA,IACpC;AACA,QAAI,OAAO,WAAW,YAAY,YAAY;AAC5C,UAAI;AACF,eAAO,QAAQ,WAAW,QAAQ,kFAAkF,CAAC;AAAA,MACvH,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,WAAS,mBAAmB,UAAmB,SAAwB;AACrE,QAAI,OAAO,aAAa,SAAU;AAClC,UAAM,QAAQ,gBAAgB,OAAO;AACrC,QAAI,MAAO,mBAAkB,IAAI,OAAO,QAAQ;AAAA,EAClD;AAEA,WAAS,2BAA2B,UAAwB;AAC1D,eAAW,CAAC,OAAO,aAAa,KAAK,mBAAmB;AACtD,UAAI,kBAAkB,SAAU,mBAAkB,OAAO,KAAK;AAAA,IAChE;AAAA,EACF;AAEA,WAAS,mBAAmB,UAAyB;AACnD,sBAAkB,MAAM;AACxB,QAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG;AAC9B,eAAW,WAAW,UAAU;AAC9B,UAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,YAAM,QAAQ;AACd,yBAAmB,MAAM,UAAU,MAAM,GAAG;AAAA,IAC9C;AAAA,EACF;AAEA,WAAS,gBAAgB,UAAwB;AAC/C,eAAW,YAAY,mBAAmB,IAAI,QAAQ,KAAK,CAAC,EAAG,UAAS;AAAA,EAC1E;AAEA,WAAS,gBAAgB,QAWrB,CAAC,GAAS;AACZ,SAAK;AAAA,MACH,MAAM;AAAA,MACN,KAAK,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AAAA,MACjD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,MACpD,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO;AAAA,MACzC,KAAK,QAAQ,MAAM,OAAO,MAAM,MAAM;AAAA,MACtC,OAAO,QAAQ,MAAM,SAAS,MAAM,QAAQ;AAAA,MAC5C,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO;AAAA,IAC3C,CAAC;AAAA,EACH;AAEA,WAAS,6BAAmC;AAC1C,QAAI,6BAA8B;AAClC,mCAA+B;AAE/B,WAAO,CAAC,UAAU;AAChB,UAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,YAAM,MAAM,MAAM;AAClB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,iBAAiB;AAC3E,2BAAmB,IAAI,QAAQ;AAAA,MACjC;AAAA,IACF,CAAC;AAED,UAAM,eAAe,OAAO;AAI5B,UAAM,iBAAiB,OAAO,cAAc,qBAAqB,aAAa,eAAe;AAC7F,QAAI,OAAO,eAAe,qBAAqB,WAAY;AAE3D,mBAAe,iBAAiB,WAAW,CAAC,UAAiB;AAC3D,YAAM,WAAW;AAWjB,UAAI,SAAS,YAAa;AAC1B,UAAI,OAAO,SAAS,QAAQ,YAAY,aAAa,IAAI,SAAS,GAAG,EAAG;AACxE,UAAI,kBAAkB,SAAS,UAAU,cAAc,aAAa,EAAG;AAEvE,YAAM,QAAQ,cAAc,QAAQ;AACpC,YAAM,WAAW,QAAQ,kBAAkB,IAAI,KAAK,IAAI;AACxD,YAAM,aAAa,OAAO,SAAS,QAAQ,YAAY,iBAAiB,IAAI,SAAS,GAAG;AACxF,UAAI,YAAY,CAAC,YAAY;AAC3B,iBAAS,iBAAiB;AAC1B,wBAAgB,QAAQ;AACxB;AAAA,MACF;AAEA,sBAAgB,QAAQ;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,WAAS,WAAoC;AAC3C,+BAA2B;AAC3B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,gBAAgB,CAAC,WAAoB;AAAA,QACnC,EAAE,MAAM,uBAAuB,OAAO;AAAA,QACtC;AAAA,QACA;AAAA,MACF,EAAE,KAAK,CAAC,WAAW;AACjB,cAAM,eAAe,UAAU,OAAO,WAAW,WAAW,SAA6B,CAAC;AAC1F,cAAM,eAAe;AACrB;AAAA,UACE,OAAO,aAAa,aAAa,WAAW,aAAa,WAAW,aAAa;AAAA,UACjF,aAAa;AAAA,QACf;AACA,eAAO;AAAA,MACT,CAAC;AAAA,MACD,kBAAkB,CAAC,aAAqB;AACtC,mCAA2B,QAAQ;AACnC,aAAK,EAAE,MAAM,yBAAyB,SAAS,CAAC;AAAA,MAClD;AAAA,MACA,SAAS,UAAkB,UAAsB;AAC/C,YAAI,YAAY,mBAAmB,IAAI,QAAQ;AAC/C,YAAI,CAAC,WAAW;AACd,sBAAY,oBAAI,IAAI;AACpB,6BAAmB,IAAI,UAAU,SAAS;AAAA,QAC5C;AACA,kBAAU,IAAI,QAAQ;AACtB,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,iBAAiB,IAAI,aAAa,SAAU,UAAS;AAAA,QACnH,CAAC;AACD,eAAO,mBAAmB,MAAM;AAC9B,cAAI;AACJ,oBAAU,OAAO,QAAQ;AACzB,cAAI,UAAU,SAAS,EAAG,oBAAmB,OAAO,QAAQ;AAAA,QAC9D,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAC5C,UAAM,KAAK,CAAC,MAAc,WAAmB,aAA4C;AACvF,YAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,YAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,cAAM,MAAM,MAAM;AAClB,YAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,QAAQ,IAAI,cAAc,UAAW,UAAS,GAAG;AAAA,MAC/G,CAAC;AACD,aAAO,mBAAmB,GAAG;AAAA,IAC/B;AACA,WAAO;AAAA,MACL,eAAe,CAAC,YAAqB;AAAA,QACnC,EAAE,MAAM,wBAAwB,GAAK,WAAW,OAAO,YAAY,WAAY,UAAqC,CAAC,EAAG;AAAA,QACxH;AAAA,QACA;AAAA,QACA,EAAE,eAAe,MAAM;AAAA,MACzB;AAAA,MACA,eAAe,CAAC,WAAmB,aAAsB,KAAK,EAAE,MAAM,wBAAwB,WAAW,SAAS,CAAC;AAAA,MACnH,gBAAgB,CAAC,cAAsB,KAAK,EAAE,MAAM,yBAAyB,UAAU,CAAC;AAAA,MACxF,aAAa,CAAC,WAAmB,UAAmB,KAAK,EAAE,MAAM,eAAe,WAAW,GAAK,SAAS,OAAO,UAAU,WAAY,QAAmC,CAAC,EAAG,CAAC;AAAA,MAC9K,oBAAoB,CAAC,WAAmB,YAAqB,KAAK,EAAE,MAAM,sBAAsB,WAAW,QAAQ,CAAC;AAAA,MACpH,aAAa,CAAC,WAAmB,QAAgB,UAAoB,KAAK,EAAE,MAAM,iBAAiB,WAAW,QAAQ,GAAI,UAAU,SAAY,CAAC,IAAI,EAAE,MAAM,EAAG,CAAC;AAAA,MACjK,WAAW,CAAC,WAAmB,aAAyD,GAAG,iBAAiB,WAAW,CAAC,QAAQ,SAAS,IAAI,QAAQ,IAAI,KAAK,CAAC;AAAA,MAC/J,SAAS,CAAC,WAAmB,aAAuD,GAAG,eAAe,WAAW,CAAC,QAAQ,SAAS;AAAA,QACjI,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,UAAU,IAAI;AAAA,QACd,QAAQ,IAAI;AAAA,MACd,CAAC,CAAC;AAAA,MACF,gBAAgB,CAAC,WAAmB,aAAyC,GAAG,sBAAsB,WAAW,CAAC,QAAQ,SAAS,IAAI,OAAO,CAAC;AAAA,MAC/I,YAAY,CAAC,WAAmB,aAA0C,GAAG,kBAAkB,WAAW,CAAC,QAAQ,SAAS,IAAI,QAAQ,CAAC;AAAA,IAC3I;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,KAAK,CAAC,MAAc,aAA4C;AACpE,YAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,YAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,cAAM,MAAM,MAAM;AAClB,YAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,KAAM,UAAS,GAAG;AAAA,MAChF,CAAC;AACD,aAAO,mBAAmB,GAAG;AAAA,IAC/B;AACA,WAAO;AAAA,MACL,MAAM,CAAC,iBAA0C;AAAA,QAC/C,EAAE,MAAM,eAAe,GAAG,aAAa;AAAA,QACvC;AAAA,QACA,CAAC,SAAS,EAAE,gBAAgB,aAAa,KAAK,kBAAkB,2CAA2C,EAAE;AAAA,MAC/G;AAAA,MACA,SAAS,CAAC,mBAA2B,KAAK,EAAE,MAAM,kBAAkB,eAAe,CAAC;AAAA,MACpF,OAAO,CAAC,UAAkB,KAAK,EAAE,MAAM,gBAAgB,MAAM,CAAC;AAAA,MAC9D,iBAAiB,CAAC,YAAqC,KAAK,EAAE,MAAM,2BAA2B,GAAG,QAAQ,CAAC;AAAA,MAC3G,mBAAmB,CAAC,YAAqB;AAAA,QACvC,EAAE,MAAM,6BAA6B,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QACrE;AAAA,QACA,CAAC,SAAS,EAAE,SAAS,IAAI,QAAQ;AAAA,MACnC;AAAA,MACA,UAAU,CAAC,aAAmE,GAAG,iBAAiB,CAAC,QAAQ,SAAS,IAAI,gBAAgB,IAAI,QAAQ,CAAC;AAAA,MACrJ,WAAW,CAAC,aAAgD,GAAG,kBAAkB,CAAC,QAAQ,SAAS,IAAI,cAAc,CAAC;AAAA,MACtH,aAAa,CAAC,aAAiE,GAAG,oBAAoB,CAAC,QAAQ,SAAS,IAAI,gBAAgB,IAAI,MAAM,CAAC;AAAA,MACvJ,YAAY,CAAC,aAA0C,GAAG,mBAAmB,CAAC,QAAQ,SAAS,IAAI,QAAQ,CAAC;AAAA,IAC9G;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,QAAI,SAAkB;AACtB,WAAO;AAAA,MACL,gBAAgB,CAAC,YAAqBC,aAAqB;AAAA,QACzD,EAAE,MAAM,yBAAyB,QAAQ,YAAY,GAAIA,aAAY,SAAY,CAAC,IAAI,EAAE,SAAAA,SAAQ,EAAG;AAAA,QACnG;AAAA,QACA,CAAC,QAAQ;AACP,cAAI,CAAC,IAAI,MAAO,UAAS;AACzB,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA,KAAK,MAAM,QAAQ,EAAE,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;AAAA,MACrF,UAAU,UAAqC;AAC7C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,gBAAiB,UAAS,IAAI,UAAU,CAAC,CAAC;AAAA,QACxG,CAAC;AACD,aAAK,EAAE,MAAM,mBAAmB,CAAC;AACjC,eAAO,mBAAmB,MAAM;AAC9B,eAAK,EAAE,MAAM,qBAAqB,CAAC;AACnC,cAAI;AAAA,QACN,CAAC;AAAA,MACH;AAAA,MACA,cAAc,CAAC,YAAsB,KAAK,EAAE,MAAM,uBAAuB,GAAK,WAAW,OAAO,YAAY,WAAY,UAAqC,CAAC,EAAG,CAAC;AAAA,MAClK,cAAc,UAAoC;AAChD,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,qBAAsB,UAAS,GAAG;AAAA,QAChG,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MACA,IAAI,SAAS;AACX,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,WAAS,eAAwC;AAC/C,UAAM,aAAa,oBAAI,IAAY;AACnC,UAAM,QAAQ,CAAC,QAAgB,QAAQ,EAAE,MAAM,kBAAkB,IAAI,GAAG,yBAAyB,CAAC,QAAQ,IAAI,IAAI;AAClH,WAAO;AAAA,MACL,MAAM,MAAM,QAAQ,EAAE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,QAAQ,IAAI,IAAI;AAAA,MACxF;AAAA,MACA,WAAW,CAAC,SAAmB,QAAQ,EAAE,MAAM,sBAAsB,KAAK,GAAG,6BAA6B,CAAC,QAAQ,MAAM,QAAQ,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC;AAAA,MAC5J,iBAAiB,KAAa;AAC5B,YAAI,YAAY;AAChB,cAAM,SAAS;AAAA,UACb,IAAI,MAAM;AACR,mBAAO;AAAA,UACT;AAAA,UACA,SAAS;AACP,gBAAI,WAAW;AACb,kBAAI,gBAAgB,SAAS;AAC7B,yBAAW,OAAO,SAAS;AAC3B,0BAAY;AAAA,YACd;AAAA,UACF;AAAA,QACF;AACA,aAAK,MAAM,GAAG,EAAE,KAAK,CAAC,SAAS;AAC7B,sBAAY,IAAI,gBAAgB,IAAY;AAC5C,qBAAW,IAAI,SAAS;AAAA,QAC1B,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MACA,sBAAsB,MAAM;AAAA,MAC5B,sBAAsB;AACpB,mBAAW,OAAO,WAAY,KAAI,gBAAgB,GAAG;AACrD,mBAAW,MAAM;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,UAAmC;AAC1C,UAAM,MAAM,CAAI,MAAc,SAAkC,QAAoC;AAAA,MAClG,EAAE,MAAM,GAAG,QAAQ;AAAA,MACnB,GAAG,IAAI;AAAA,MACP;AAAA,IACF;AACA,UAAM,aAAa,CAAC,QAAiB,SAAkB,YAAsC;AAAA,MAC3F;AAAA,MACA,EAAE,QAAQ,SAAS,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,EAAG;AAAA,MACjE,CAAC,QAAQ,aAAa,KAAK,WAAW,oCAAoC;AAAA,IAC5E;AACA,UAAM,UAAU,OACd,QACA,QACA,QACA,YACG;AACH,YAAM,QAAQ,MAAM,WAAW,QAAQ;AAAA,QACrC,SAAS;AAAA,QACT,IAAI,GAAG;AAAA,QACP;AAAA,QACA,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO;AAAA,MAC3C,GAAG,OAAO;AACV,UAAI,MAAM,UAAU,QAAW;AAC7B,cAAM,QAAQ,MAAM;AACpB,cAAM,IAAI,MAAM,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,MAAM,YAAY,WACpF,GAAG,MAAM,KAAK,MAAM,OAAO,KAC3B,GAAG,MAAM,SAAS;AAAA,MACxB;AACA,aAAO,MAAM;AAAA,IACf;AACA,WAAO;AAAA,MACL,UAAU,CAAC,UAAoB,IAAI,gBAAgB,UAAU,SAAY,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,QAAQ,MAAM,QAAQ,IAAI,OAAO,IAAI,IAAI,UAAU,CAAC,CAAC;AAAA,MAC/I,SAAS;AAAA,MACT,WAAW,OAAO,QAAiB,YAAsC;AACvE,cAAM,SAAS,MAAM,QAAQ,QAAQ,cAAc,QAAW,OAAO;AACrE,eAAO,QAAQ,SAAS,CAAC;AAAA,MAC3B;AAAA,MACA,UAAU,CAAC,QAAiB,MAAc,MAAgB,YAAsC;AAAA,QAC9F;AAAA,QACA;AAAA,QACA,EAAE,MAAM,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,WAAW,KAAK,EAAG;AAAA,QAC3D;AAAA,MACF;AAAA,MACA,eAAe,OAAO,QAAiB,YAAsC;AAC3E,cAAM,SAAS,MAAM,QAAQ,QAAQ,kBAAkB,QAAW,OAAO;AACzE,eAAO,QAAQ,aAAa,CAAC;AAAA,MAC/B;AAAA,MACA,cAAc,OAAO,QAAiB,KAAa,YAAsC;AACvF,cAAM,SAAS,MAAM,QAAQ,QAAQ,kBAAkB,EAAE,IAAI,GAAG,OAAO;AACvE,cAAM,QAAQ,QAAQ,WAAW,CAAC;AAClC,YAAI,CAAC,MAAO,OAAM,IAAI,MAAM,2CAA2C,GAAG,EAAE;AAC5E,eAAO;AAAA,MACT;AAAA,MACA,OAAO,CAAC,WAAoB,IAAI,aAAa,EAAE,OAAO,GAAG,CAAC,QAAQ,WAAW,KAAK,kBAAkB,CAAC;AAAA,MACrG,QAAQ,UAAuD;AAC7D,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cACE,OAAO,QAAQ,YACZ,QAAQ,QACR,IAAI,SAAS,eACb,IAAI,WAAW,UACf,IAAI,YAAY,QACnB;AACA,qBAAS,IAAI,QAAQ,IAAI,OAAO;AAAA,UAClC;AAAA,QACF,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,MAAM,CAAC,MAAc,SAAkC,aAAa,GAAG,IAAI,cAAc;AAAA,MAC7F,EAAE,MAAM,GAAG,QAAQ;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,eAAe,MAAM;AAAA,IACzB;AACA,WAAO;AAAA,MACL,UAAU,CAAC,SAAiB,YAAsC,IAAI,mBAAmB,EAAE,SAAS,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MACrI,OAAO,CAAC,SAAkB,YAAsC,IAAI,gBAAgB,EAAE,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MAC9K,UAAU,SAAkB,SAAmC;AAC7D,cAAM,QAAQ,GAAG;AACjB,cAAM,WAAW,EAAE,OAAO,oBAAI,IAA+B,GAAG,QAAQ,oBAAI,IAAgC,EAAE;AAC9G,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,UAAU,MAAO;AACpE,cAAI,IAAI,SAAS,eAAgB,YAAW,WAAW,SAAS,MAAO,SAAQ,IAAI,MAAM;AACzF,cAAI,IAAI,SAAS,iBAAiB;AAChC,uBAAW,WAAW,SAAS,OAAQ,SAAQ,IAAI,MAAM;AACzD,gBAAI;AAAA,UACN;AAAA,QACF,CAAC;AACD,aAAK,EAAE,MAAM,oBAAoB,IAAI,GAAG,GAAG,OAAO,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAC1I,eAAO;AAAA,UACL,GAAG,OAA2B,SAAoC;AAChE,qBAAS,KAAK,EAAE,IAAI,OAAO;AAC3B,mBAAO,EAAE,OAAO,MAAM,SAAS,KAAK,EAAE,OAAO,OAAO,EAAE;AAAA,UACxD;AAAA,UACA,QAAQ;AACN,iBAAK,EAAE,MAAM,gBAAgB,IAAI,GAAG,GAAG,MAAM,CAAC;AAC9C,gBAAI;AACJ,qBAAS,MAAM,MAAM;AACrB,qBAAS,OAAO,MAAM;AAAA,UACxB;AAAA,QACF;AAAA,MACF;AAAA,MACA,SAAS,CAAC,OAAgB,YAAsC,IAAI,kBAAkB,EAAE,OAAO,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MAChI,eAAe,CAAC,gBAAyB,IAAI,wBAAwB,EAAE,QAAQ,YAAY,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,GAAG;AAAA,IAC7H;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,WAAO;AAAA,MACL,MAAM,MAAM,QAAQ,EAAE,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,aAAa,KAAK,QAAQ,yBAAyB,CAAC;AAAA,MAChI,QAAQ,CAAC,mBAA4B,QAAQ,EAAE,MAAM,iBAAiB,SAAS,eAAe,GAAG,wBAAwB,CAAC,QAAQ,aAAa,KAAK,UAAU,eAAe,CAAC;AAAA,MAC9K,QAAQ,CAAC,aAAqB,QAAQ,EAAE,MAAM,iBAAiB,SAAS,GAAG,wBAAwB,CAAC,QAAQ,aAAa,KAAK,UAAU,2BAA2B,CAAC;AAAA,MACpK,SAAS,UAAqC;AAC5C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,2BAA2B,IAAI,WAAW,OAAW,UAAS,IAAI,MAAM;AAAA,QACtI,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,SAAS,CAAC,OAAgC,QAC9C,OAAO,UAAU,eAAe,KAAK,OAAO,GAAG;AAEjD,UAAM,mBAAmB,CAAC,UAA4C;AACpE,UAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,cAAM,IAAI,UAAU,kCAAkC;AAAA,MACxD;AACA,YAAM,WAAW;AACjB,UAAI,OAAO,UAAU,QAAQ,GAAG;AAC9B,cAAM,IAAI,UAAU,qCAAqC;AAAA,MAC3D;AACA,YAAMC,WAAU,CAAC,aAAa,UAAU,cAAc,WAAW,WAAW,UAAU;AACtF,UAAI,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,UAAU,CAACA,SAAQ,SAAS,KAAK,CAAC,GAAG;AACnE,cAAM,IAAI,UAAU,4CAA4C;AAAA,MAClE;AACA,UAAI,OAAO,SAAS,cAAc,YAAY,SAAS,UAAU,WAAW,GAAG;AAC7E,cAAM,IAAI,UAAU,sCAAsC;AAAA,MAC5D;AACA,YAAM,SAAS,SAAS,WAAW,SAAY,SAAS,SAAS;AACjE,UAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,cAAM,IAAI,UAAU,0CAA0C;AAAA,MAChE;AACA,UACE,SAAS,eAAe,WAEtB,OAAO,SAAS,eAAe,YAC5B,CAAC,iCAAiC,KAAK,SAAS,UAAU,IAE/D;AACA,cAAM,IAAI,UAAU,qCAAqC;AAAA,MAC3D;AACA,UACE,SAAS,YAAY,WACjB,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,WAAW,IACxE;AACA,cAAM,IAAI,UAAU,2CAA2C;AAAA,MACjE;AACA,YAAM,gBAAgB,UAAU;AAChC,YAAM,WAAW,iBAAiB,OAAO,kBAAkB,WACvD,gBACA;AACJ,UACE,kBAAkB,WAEhB,CAAC,YACE,MAAM,QAAQ,aAAa,KAC3B,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,UAC7B,UAAU,WAAW,UAAU,eAAe,UAAU,OAAO,KAC7D,OAAO,UAAU,OAAO,KAAK,OAAO,SAAS,UAAU,aACvD,OAAO,UAAU,WAAW,KAAK,OAAO,SAAS,cAAc,aAC/D,OAAO,UAAU,OAAO,KAAK,OAAO,SAAS,UAAU,YAE7D;AACA,cAAM,IAAI,UAAU,6CAA6C;AAAA,MACnE;AACA,YAAM,oBAAoB;AAAA,QACxB,GAAI,OAAO,UAAU,UAAU,YAAY,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;AAAA,QACxE,GAAI,OAAO,UAAU,cAAc,YAC/B,EAAE,WAAW,SAAS,UAAU,IAChC,CAAC;AAAA,QACL,GAAI,OAAO,UAAU,UAAU,YAAY,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;AAAA,MAC1E;AACA,aAAO;AAAA,QACL,WAAW,SAAS;AAAA,QACpB;AAAA,QACA,GAAI,OAAO,SAAS,eAAe,WAC/B,EAAE,YAAY,SAAS,WAAW,IAClC,CAAC;AAAA,QACL,GAAI,OAAO,UAAU,SAAS,IAAI,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,QACnE,GAAI,OAAO,SAAS,YAAY,WAAW,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,QAC5E,GAAI,OAAO,KAAK,iBAAiB,EAAE,WAAW,IAC1C,CAAC,IACD,EAAE,UAAU,kBAAkB;AAAA,MACpC;AAAA,IACF;AACA,UAAM,SAAS,CAAC,UAAmB;AACjC,YAAM,aAAa,iBAAiB,KAAK;AACzC,aAAO;AAAA,QACL;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,QACX;AAAA,QACA;AAAA,QACA,CAAC,QAAQ,aAAa,KAAK,UAAU,qCAAqC;AAAA,MAC5E;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,CACJ,WACA,SACA,SACG,OAAO;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ;AAAA,QAC3C,GAAG;AAAA,MACL,CAAC;AAAA,MACD,WAAW,CAAC,cAAsB;AAAA,QAChC,EAAE,MAAM,oBAAoB,UAAU;AAAA,QACtC;AAAA,QACA,CAAC,QAAQ,aAAa,KAAK,gBAAgB,8CAA8C;AAAA,MAC3F;AAAA,MACA,UAAU,MAAM;AAAA,QACd,EAAE,MAAM,kBAAkB;AAAA,QAC1B;AAAA,QACA,CAAC,QAAQ,aAAa,KAAK,YAAY,yCAAyC;AAAA,MAClF;AAAA,MACA,WAAW,CAAC,aAA8C;AAAA,QACxD;AAAA,QACA;AAAA,QACA,CAAC,QAAQ,IAAI;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,WAAO;AAAA,MACL,MAAM,CAAC,mBAA6B;AAAA,QAClC,EAAE,MAAM,eAAe,SAAS,eAAe;AAAA,QAC/C;AAAA,QACA,CAAC,SAAS,EAAE,SAAS,aAAa,KAAK,WAAW,oCAAoC,EAAE;AAAA,MAC1F;AAAA,MACA,MAAM,CAAC,WAAmB,YAAqB;AAAA,QAC7C,EAAE,MAAM,eAAe,WAAW,QAAQ;AAAA,QAC1C;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,oBAAoB;AAAA,MAC/C;AAAA,MACA,OAAO,CAAC,WAAmB,WAAoB;AAAA,QAC7C,EAAE,MAAM,gBAAgB,WAAW,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG;AAAA,QACjE;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,qBAAqB;AAAA,MAChD;AAAA,MACA,SAAS,CAAC,aAAuC,kBAAkB,gBAAgB,QAAQ;AAAA,IAC7F;AAAA,EACF;AAEA,WAAS,UAAmC;AAC1C,UAAM,MAAM,CAAC,QAAgB,SAAkC,QAA0C;AAAA,MACvG,EAAE,MAAM,OAAO,MAAM,IAAI,GAAG,QAAQ;AAAA,MACpC,OAAO,MAAM;AAAA,MACb;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM,CAAC,mBAA6B,IAAI,QAAQ,EAAE,SAAS,eAAe,GAAG,CAAC,SAAS,EAAE,SAAS,aAAa,KAAK,WAAW,iCAAiC,EAAE,EAAE;AAAA,MACpK,UAAU,CAAC,cAAsB,IAAI,YAAY,EAAE,UAAU,GAAG,CAAC,QAAQ,aAAa,KAAK,YAAY,sCAAsC,CAAC;AAAA,MAC9I,MAAM,CAAC,WAAmB,gBAAyB,IAAI,QAAQ,EAAE,WAAW,QAAQ,YAAY,GAAG,CAAC,QAAQ,aAAa,KAAK,QAAQ,8BAA8B,CAAC;AAAA,MACrK,OAAO,CAAC,WAAmB,aAAsB,MAAe,YAAsC;AAAA,QACpG;AAAA,QACA,EAAE,WAAW,QAAQ,aAAa,MAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QACxE,CAAC,QAAQ,WAAW,KAAK,kBAAkB;AAAA,MAC7C;AAAA,MACA,WAAW,CAAC,WAAmB,gBAAyB,IAAI,aAAa,EAAE,WAAW,QAAQ,YAAY,GAAG,CAAC,QAAQ,WAAW,KAAK,sBAAsB,CAAC;AAAA,MAC7J,aAAa,CAAC,WAAmB,gBAAyB,IAAI,eAAe,EAAE,WAAW,QAAQ,YAAY,GAAG,CAAC,QAAQ,WAAW,KAAK,wBAAwB,CAAC;AAAA,MACnK,OAAO,CAAC,WAAmB,WAAoB,IAAI,SAAS,EAAE,WAAW,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG,GAAG,CAAC,QAAQ,WAAW,KAAK,kBAAkB,CAAC;AAAA,MACtJ,SAAS,CAAC,aAAuC,kBAAkB,aAAa,QAAQ;AAAA,IAC1F;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,WAAO;AAAA,MACL,MAAM,CAAC,mBAA6B;AAAA,QAClC,EAAE,MAAM,eAAe,SAAS,eAAe;AAAA,QAC/C;AAAA,QACA,CAAC,SAAS,EAAE,SAAS,aAAa,KAAK,WAAW,oCAAoC,EAAE;AAAA,MAC1F;AAAA,MACA,OAAO,CAAC,WAAmB,SAAgC;AAAA,QACzD,EAAE,MAAM,gBAAgB,WAAW,MAAM,MAAM,KAAK,IAAI,EAAE;AAAA,QAC1D;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,qBAAqB;AAAA,MAChD;AAAA,MACA,OAAO,CAAC,WAAmB,WAAoB;AAAA,QAC7C,EAAE,MAAM,gBAAgB,WAAW,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO,EAAG;AAAA,QAC/E;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,qBAAqB;AAAA,MAChD;AAAA,MACA,SAAS,CAAC,aAAuC,kBAAkB,gBAAgB,QAAQ;AAAA,IAC7F;AAAA,EACF;AAEA,WAAS,WAAoC;AAC3C,WAAO;AAAA,MACL,MAAM,CAAC,KAAa,YAAsC;AAAA,QACxD,EAAE,MAAM,aAAa,KAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QAC1D;AAAA,QACA;AAAA,QACA,EAAE,eAAe,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAC5C,WAAO;AAAA,MACL,OAAO,CAAC,SAAkB,YAAsC;AAAA,QAC9D,EAAE,MAAM,eAAe,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QAC9G;AAAA,QACA;AAAA,QACA,EAAE,eAAe,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAC5C,UAAM,MAAM,CAAC,MAAc,YAAqC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,GAAG,IAAI,WAAW,eAAe,EAAE,eAAe,MAAM,CAAC;AACvJ,WAAO;AAAA,MACL,WAAW,MAAM,IAAI,mBAAmB,CAAC,CAAC;AAAA,MAC1C,KAAK,CAAC,MAAe,OAAgB,YAAsB,IAAI,aAAa,EAAE,MAAM,OAAO,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MAC5H,QAAQ,CAAC,MAAe,OAAgB,YAAsB,IAAI,gBAAgB,EAAE,MAAM,OAAO,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,IACpI;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,MAAM,CAAC,MAAc,YAAqC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,GAAG,IAAI,WAAW,iBAAiB,EAAE,eAAe,MAAM,CAAC;AACzJ,WAAO;AAAA,MACL,aAAa,CAAC,UAAmB,IAAI,sBAAsB,EAAE,MAAM,CAAC;AAAA,MACpE,aAAa,CAAC,UAAkB,IAAI,sBAAsB,EAAE,MAAM,CAAC;AAAA,MACnE,YAAY,CAAC,gBAAyB,IAAI,qBAAqB,EAAE,QAAQ,YAAY,CAAC;AAAA,MACtF,SAAS,MAAM,IAAI,kBAAkB,CAAC,CAAC;AAAA,MACvC,QAAQ,IAAI,YAAsB,IAAI,iBAAiB,EAAE,QAAQ,CAAC;AAAA,MAClE,UAAU,IAAI,YAAsB,IAAI,mBAAmB,EAAE,QAAQ,CAAC;AAAA,MACtE,OAAO,CAAC,eAAuB,UAAmB,oBAA6B,IAAI,gBAAgB;AAAA,QACjG;AAAA,QACA;AAAA,QACA,GAAI,oBAAoB,SAAY,CAAC,IAAI,EAAE,gBAAgB;AAAA,MAC7D,CAAC;AAAA,MACD,QAAQ,CAAC,aAAsB,QAAiB,SAAkB,IAAI,iBAAiB;AAAA,QACrF,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,WAAS,SAAkC;AACzC,UAAM,MAAM,CAAC,MAAc,YAAqC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,GAAG,IAAI,WAAW,iBAAiB,EAAE,eAAe,MAAM,CAAC;AACzJ,WAAO;AAAA,MACL,QAAQ,MAAM,IAAI,aAAa,CAAC,CAAC;AAAA,MACjC,eAAe,CAAC,UAAoC,IAAI,oBAAoB,SAAS,CAAC,CAAC;AAAA,MACvF,UAAU,CAAC,UAAmC,IAAI,eAAe,SAAS,CAAC,CAAC;AAAA,MAC5E,MAAM,CAAC,mBAA4C,IAAI,WAAW,kBAAkB,CAAC,CAAC;AAAA,MACtF,WAAW,CAAC,mBAA6C,IAAI,gBAAgB,kBAAkB,CAAC,CAAC;AAAA,MACjG,aAAa,CAAC,mBAA2B,IAAI,kBAAkB,EAAE,eAAe,CAAC;AAAA,MACjF,UAAU,UAA8D;AACtE,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cACE,OAAO,QAAQ,YACZ,QAAQ,QACR,IAAI,SAAS,gBACb,OAAO,IAAI,mBAAmB,UACjC;AACA,qBAAS,IAAI,SAAS,IAAI,cAAc;AAAA,UAC1C;AAAA,QACF,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,UAAU;AACxB,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,WAAS,iBAAiB,UAA4C;AACpE,UAAM,aAAa,YAAY,OAAO,aAAa,WAC/C,WACA,CAAC;AACL,YAAQ,QAAQ;AAChB,WAAO,EAAE,GAAG,YAAY,GAAG,IAAI;AAAA,EACjC;AAEA,WAAS,wBAAiD;AACxD,iBAAa,aAAa;AAC1B,WAAO;AAAA,EACT;AAEA,WAAS,qBAA8C;AACrD,cAAU,OAAO,OAAO,UAAU,CAAC;AACnC,WAAO;AAAA,EACT;AAEA,WAAS,sBAA+C;AACtD,eAAW,OAAO,OAAO,WAAW,CAAC;AACrC,WAAO;AAAA,EACT;AAEA,WAAS,kBAAkB,QAAyB;AAClD,WAAO,WAAW,WACb,WAAW,SACX,WAAW,cACX,WAAW,WACX,WAAW;AAAA,EAClB;AAEA,WAAS,WAAW,QAAgB,UAA4B;AAC9D,QAAI,WAAW,QAAS,QAAO;AAC/B,QAAI,WAAW,MAAO,QAAO,iBAAiB,QAAQ;AACtD,QAAI,WAAW,WAAY,QAAO,sBAAsB;AACxD,QAAI,WAAW,QAAS,QAAO,mBAAmB;AAClD,QAAI,WAAW,SAAU,QAAO,oBAAoB;AACpD,QAAI,YAAY,OAAO,aAAa,YAAY,OAAO,KAAK,QAAQ,EAAE,SAAS,EAAG,QAAO;AACzF,YAAQ,QAAQ;AAAA,MACd,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAW,eAAO,YAAY;AAAA,MACnC,KAAK;AAAQ,eAAO,SAAS;AAAA,MAC7B,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAY,eAAO,aAAa;AAAA,MACrC,KAAK;AAAO,eAAO,QAAQ;AAAA,MAC3B,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAO,eAAO,QAAQ;AAAA,MAC3B,KAAK;AAAQ,eAAO,SAAS;AAAA,MAC7B,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAM,eAAO,OAAO;AAAA,MACzB;AAAS,eAAO,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,WAAS,sBAAsB,WAA6D;AAC1F,WAAO,IAAI,MAAM,WAAW;AAAA,MAC1B,IAAI,KAAK,MAAM,OAAO;AACpB,YAAI,OAAO,SAAS,YAAY,CAAC,QAAQ,IAAI,IAAI,EAAG,QAAO;AAC3D,YAAI,IAAI,IAAI,WAAW,MAAM,KAAK;AAClC,eAAO;AAAA,MACT;AAAA,MACA,eAAe,KAAK,MAAM,YAAY;AACpC,YAAI,OAAO,SAAS,YAAY,CAAC,QAAQ,IAAI,IAAI,EAAG,QAAO;AAC3D,YAAI,kBAAkB,IAAI,GAAG;AAC3B,iBAAO,QAAQ,eAAe,KAAK,MAAM;AAAA,YACvC,OAAO,WAAW,MAAM,WAAW,KAAK;AAAA,YACxC,YAAY;AAAA,YACZ,cAAc;AAAA,YACd,UAAU;AAAA,UACZ,CAAC;AAAA,QACH;AACA,eAAO,QAAQ,eAAe,KAAK,MAAM;AAAA,UACvC,GAAG;AAAA,UACH,OAAO,WAAW,MAAM,WAAW,KAAK;AAAA,QAC1C,CAAC;AAAA,MACH;AAAA,MACA,eAAe,KAAK,MAAM;AACxB,YAAI,OAAO,SAAS,YAAY,QAAQ,IAAI,IAAI,KAAK,kBAAkB,IAAI,EAAG,QAAO;AACrF,eAAO,QAAQ,eAAe,KAAK,IAAI;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,sBAAsB,OAAyC;AACtE,UAAM,YAAY,OAAO,UAAU,YAAY,UAAU,OACrD,QACA,CAAC;AACL,UAAM,OAAgC,CAAC;AACvC,eAAW,UAAU,SAAS;AAC5B,UAAI,CAAC,QAAQ,IAAI,MAAM,EAAG;AAC1B,aAAO,eAAe,MAAM,QAAQ;AAAA,QAClC,OAAO;AAAA,UACL;AAAA,UACA,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,IAAI,UAAU,MAAM,IAAI;AAAA,QAChF;AAAA,QACA,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,WAAO,sBAAsB,IAAI;AAAA,EACnC;AAEA,MAAI,OAAO,sBAAsB,OAAO,OAAO;AAC/C,SAAO,eAAe,QAAQ,WAAW;AAAA,IACvC,MAAM;AACJ,aAAO;AAAA,IACT;AAAA,IACA,IAAI,OAAO;AACT,aAAO,sBAAsB,KAAK;AAAA,IACpC;AAAA,IACA,YAAY;AAAA,IACZ,cAAc;AAAA,EAChB,CAAC;AACH;;;ACtiDA,SAAS,oBAAAC,yBAAwB;AAsDjC,SAAS,mBAAmB,sBAAsB,0BAA0B;;;ACpE5E,SAAS,cAAc;;;AC8FhB,SAAS,oBAAoB,MAAwC;AAC1E,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,WAAmB,WAAiC;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AChCO,SAAS,iBAAiB,MAAkC;AACjE,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,WAAmB,WAAiC;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACCO,SAAS,gBAAgB,MAAgC;AAC9D,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,UAAkB,UAAgC;AACrD,YAAM,MAAM,KAAK,eAAe,gBAAgB,QAAQ;AACxD,UAAI,IAAK,KAAI,YAAY,UAAU,GAAG;AAAA,IACxC;AAAA,EACF;AACF;;;ACTO,SAAS,iBAAiB,MAAkC;AACjE,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,UAAkB,UAAgC;AACrD,YAAM,MAAM,KAAK,eAAe,gBAAgB,QAAQ;AACxD,UAAI,IAAK,KAAI,YAAY,UAAU,GAAG;AAAA,IACxC;AAAA,EACF;AACF;;;ACVO,SAAS,kBAAkB,MAAoC;AACpE,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,UAAkB,UAAgC;AACrD,YAAM,MAAM,KAAK,eAAe,gBAAgB,QAAQ;AACxD,UAAI,IAAK,KAAI,YAAY,UAAU,GAAG;AAAA,IACxC;AAAA,EACF;AACF;","names":["originRegistry","STORAGE_KEY","domains","shell","version","allowed","ALL_CAPABILITIES"]}
+{"version":3,"sources":["../src/shell-bridge.ts","../src/hooks-adapter.ts","../src/origin-registry.ts","../src/session-registry.ts","../src/acl-store.ts","../src/manifest-cache.ts","../src/audio-manager.ts","../src/shell-init.ts","../src/shell-ready.ts","../src/napplet-namespace.ts","../src/index.ts","../src/topics.ts","../src/identity-proxy.ts","../src/theme-proxy.ts","../src/keys-proxy.ts","../src/media-proxy.ts","../src/notify-proxy.ts"],"sourcesContent":["\nimport { createRuntime, type ConsentRequest, type Runtime } from '@kehto/runtime';\nimport { adaptHooks } from './hooks-adapter.js';\nimport { originRegistry } from './origin-registry.js';\nimport { nappKeyRegistry } from './session-registry.js';\nimport { aclStore } from './acl-store.js';\nimport { manifestCache } from './manifest-cache.js';\nimport { audioManager } from './audio-manager.js';\nimport type { ShellAdapter, UnroutedMessageInfo } from './types.js';\nimport type { NappletMessage } from '@napplet/core';\nimport type { Theme } from '@napplet/nap/theme/types';\nimport { createShellReadyState, handleShellReady } from './shell-ready.js';\n\n/**\n * Shell-side message bridge that handles NIP-5D communication with napplet iframes.\n *\n * The bridge acts as a browser adapter: it receives raw MessageEvents from\n * window.addEventListener('message', ...), extracts the source Window, resolves\n * it to a windowId via originRegistry, and delegates NIP-5D envelope messages\n * to the runtime engine. The shell.ready/shell.init capability handshake is\n * handled locally within the bridge and never forwarded to the runtime.\n *\n * @example\n * ```ts\n * import { createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * window.addEventListener('message', bridge.handleMessage);\n * ```\n */\nexport interface ShellBridge {\n  /**\n   * Handle an incoming postMessage from a napplet iframe.\n   *\n   * Only NIP-5D envelope objects (plain objects with a `.type` string) are\n   * accepted. NIP-01 arrays and all other message shapes are silently dropped\n   * (clean break — no legacy array fallback).\n   *\n   * shell.ready messages are handled locally: the bridge responds with shell.init\n   * containing the capability set and registered service list. All other envelopes\n   * are delegated to the runtime's NAP domain dispatch.\n   *\n   * @param event - The raw MessageEvent from window.addEventListener('message', ...)\n   * @example\n   * ```ts\n   * window.addEventListener('message', bridge.handleMessage);\n   * ```\n   */\n  handleMessage(event: MessageEvent): void;\n\n  /**\n   * Inject a shell-originated event into subscription delivery. Under NIP-5D,\n   * shell-originated events are forwarded to napplets as inc.event envelope\n   * messages. The runtime's injectEvent() handles the per-session routing.\n   *\n   * v1.10 hard-removed the v1.8 soft-rename compatibility branch for the\n   * old `auth:identity-changed` topic. Use the canonical `identity:changed`\n   * topic for identity-change pushes.\n   *\n   * @param topic - The event topic tag value. Forwarded exactly once.\n   * @param payload - The event content\n   * @example\n   * ```ts\n   * bridge.injectEvent('identity:changed', { pubkey: userPubkey });\n   * ```\n   */\n  injectEvent(topic: string, payload: unknown): void;\n\n  /**\n   * Destroy the bridge instance, cleaning up all internal state.\n   * Persists manifest cache and clears all subscriptions, buffers, and registries.\n   * Call when the shell is shutting down or the bridge is no longer needed.\n   *\n   * @example\n   * ```ts\n   * bridge.destroy();\n   * ```\n   */\n  destroy(): void;\n\n  /**\n   * Register a handler for consent requests on destructive signing kinds.\n   * Called when a napplet requests signing for kinds 0, 3, 5, or 10002.\n   *\n   * @param handler - Callback receiving the consent request with a resolve function\n   * @example\n   * ```ts\n   * bridge.registerConsentHandler((request) => {\n   *   const allowed = confirm(`Allow signing kind ${request.event.kind}?`);\n   *   request.resolve(allowed);\n   * });\n   * ```\n   */\n  registerConsentHandler(handler: (request: ConsentRequest) => void): void;\n\n  /**\n   * Publish a theme update to each eligible napplet.\n   *\n   * Posts a `theme.changed` envelope (shell → napplet push) to every\n   * live authenticated session whose frozen environment grants `theme` and\n   * whose current ACL grants `theme:read`. Stale or ineligible sessions are\n   * skipped before origin-registry delivery; recipient code is not trusted\n   * to enforce host authorization.\n   *\n   * @param theme - The new theme payload to broadcast.\n   * @example\n   * ```ts\n   * bridge.publishTheme({\n   *   colors: { background: '#0a0a0a', text: '#e0e0e0', primary: '#7aa2f7' },\n   *   title: 'Dark',\n   * });\n   * ```\n   */\n  publishTheme(theme: Theme): void;\n\n  /**\n   * Publish the current shell-user identity to every loaded napplet.\n   *\n   * Posts an `identity.changed` envelope (shell → napplet push) with the\n   * current user pubkey. An empty pubkey means no signer/user identity is\n   * currently connected. This is distinct from NIP-5D napplet session identity,\n   * which remains source-bound at iframe creation.\n   *\n   * @param pubkey - Current user's hex pubkey, or empty string when signed out.\n   */\n  publishIdentityChanged(pubkey: string): void;\n\n  /**\n   * Access the underlying runtime instance for advanced use cases.\n   * Provides direct access to the runtime's sessionRegistry, aclState,\n   * and manifestCache.\n   */\n  readonly runtime: Runtime;\n\n}\n\n/**\n * Create a ShellBridge instance with dependency injection via hooks.\n *\n * Internally creates a Runtime from @kehto/runtime and adapts the\n * browser-oriented ShellAdapter into environment-agnostic RuntimeAdapter.\n *\n * @param hooks - Host application provides relay pool, auth, config, etc.\n * @returns A ShellBridge instance ready to handle napplet messages\n * @example\n * ```ts\n * import { createShellBridge, type ShellAdapter } from '@kehto/shell';\n *\n * const hooks: ShellAdapter = {\n *   relayPool: myRelayPoolHooks,\n *   relayConfig: myRelayConfigHooks,\n *   windowManager: myWindowManagerHooks,\n *   auth: myAuthHooks,\n *   config: myConfigHooks,\n *   hotkeys: myHotkeyHooks,\n *   workerRelay: myWorkerRelayHooks,\n *   crypto: myCryptoHooks,\n * };\n * const bridge = createShellBridge(hooks);\n * ```\n */\n/**\n * Fire the optional {@link ShellAdapter.onUnroutedMessage} diagnostic hook for a\n * message the bridge is about to drop. Extracts the envelope `type` defensively\n * (the message-shape guard hasn't run yet at the drop points) and never throws —\n * a misbehaving host hook must not break message handling.\n */\nfunction reportUnrouted(\n  hooks: ShellAdapter,\n  event: MessageEvent,\n  reason: UnroutedMessageInfo['reason'],\n): void {\n  if (!hooks.onUnroutedMessage) return;\n  const data = event.data as { type?: unknown } | null | undefined;\n  const type = typeof data === 'object' && data !== null && typeof data.type === 'string'\n    ? data.type\n    : undefined;\n  try {\n    hooks.onUnroutedMessage({ type, origin: event.origin, reason });\n  } catch {\n    // Observability must never break routing — swallow host hook errors.\n  }\n}\n\nexport function createShellBridge(hooks: ShellAdapter): ShellBridge {\n  const shellReadyState = createShellReadyState();\n  const runtimeHooks = adaptHooks(hooks, {\n    originRegistry,\n    manifestCache,\n    aclStore,\n    audioManager,\n    nappKeyRegistry,\n  });\n\n  const runtime: Runtime = createRuntime({\n    ...runtimeHooks,\n    isDomainAllowed: shellReadyState.isDomainAllowed,\n  });\n\n  function publishToEligibleNapplets(\n    envelope: NappletMessage,\n    domain: 'identity' | 'theme',\n    capability: 'identity:read' | 'theme:read',\n  ): void {\n    // A session exists only after shell.ready. Iterate entries, not a pubkey\n    // lookup, because different live windows may legitimately share pubkey ''.\n    for (const entry of runtime.sessionRegistry.getAllEntries()) {\n      const environment = shellReadyState.environments.get(entry.windowId);\n      if (!environment?.capabilities.domains.includes(domain)) continue;\n      if (!runtime.aclState.check(entry.pubkey, entry.dTag, entry.aggregateHash, capability)) continue;\n\n      const win = originRegistry.getIframeWindow(entry.windowId);\n      if (!win) continue;\n      win.postMessage(envelope, '*');\n    }\n  }\n\n  return {\n    handleMessage(event: MessageEvent): void {\n      const sourceWindow = event.source as Window | null;\n      if (!sourceWindow) {\n        reportUnrouted(hooks, event, 'no-source-window');\n        return;\n      }\n      const windowId = originRegistry.getWindowId(sourceWindow);\n      if (!windowId) {\n        reportUnrouted(hooks, event, 'unregistered-window');\n        return;\n      }\n      const msg = event.data;\n\n      // NIP-5D envelope-only guard (clean break — no legacy array support)\n      if (typeof msg !== 'object' || msg === null || typeof msg.type !== 'string') return;\n\n      // Handle shell.ready handshake locally (not forwarded to runtime)\n      if (msg.type === 'shell.ready') {\n        handleShellReady({\n          hooks,\n          origin: event.origin,\n          runtime,\n          state: shellReadyState,\n          sourceRegistrationId: originRegistry.getRegistrationId(sourceWindow) ?? 0,\n          sourceWindow,\n          windowId,\n        });\n        return;\n      }\n\n      // Delegate to runtime — runtime handles NAP domain dispatch\n      runtime.handleMessage(windowId, msg);\n    },\n\n    injectEvent(topic: string, payload: unknown): void {\n      runtime.injectEvent(topic, payload);\n    },\n\n    destroy(): void {\n      runtime.destroy();\n      shellReadyState.clear();\n    },\n\n    registerConsentHandler(handler: (request: ConsentRequest) => void): void {\n      runtime.registerConsentHandler(handler);\n    },\n\n    publishTheme(theme: Theme): void {\n      const envelope: NappletMessage = { type: 'theme.changed', theme } as NappletMessage;\n      publishToEligibleNapplets(envelope, 'theme', 'theme:read');\n    },\n\n    publishIdentityChanged(pubkey: string): void {\n      const envelope: NappletMessage = { type: 'identity.changed', pubkey } as NappletMessage;\n      publishToEligibleNapplets(envelope, 'identity', 'identity:read');\n    },\n\n    get runtime() {\n      return runtime;\n    },\n  };\n}\n","/**\n * hooks-adapter.ts — Converts ShellAdapter (browser-facing) to RuntimeAdapter (environment-agnostic).\n *\n * The adapter bridges the gap between the shell's browser-oriented ShellAdapter interfaces\n * (Window references, localStorage, postMessage) and the runtime's abstract RuntimeAdapter\n * (windowId strings, persistence interfaces, sendToNapplet callbacks).\n */\n\nimport type { NostrEvent, NostrFilter } from '@napplet/core';\nimport type {\n  RuntimeAdapter,\n  RelayPoolAdapter,\n  CacheAdapter,\n  AuthAdapter,\n  Signer,\n  ConfigAdapter,\n  HotkeyAdapter,\n  AclPersistence,\n  ManifestPersistence,\n  StatePersistence,\n  CryptoAdapter,\n  WindowManagerAdapter,\n  RelayConfigAdapter,\n  DmAdapter,\n  SendToNapplet,\n  RelaySubscriptionHandle,\n  ShellSecretPersistence,\n  GuidPersistence,\n} from '@kehto/runtime';\n\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');\n}\n\nfunction hexToBytes(hex: string): Uint8Array {\n  const bytes = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < hex.length; i += 2) {\n    bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);\n  }\n  return bytes;\n}\nimport type { ShellAdapter } from './types.js';\nimport type { originRegistry as OriginRegistryType } from './origin-registry.js';\nimport type { manifestCache as ManifestCacheType } from './manifest-cache.js';\nimport type { aclStore as AclStoreType } from './acl-store.js';\nimport type { audioManager as AudioManagerType } from './audio-manager.js';\nimport type { sessionRegistry as SessionRegistryType } from './session-registry.js';\n\n/**\n * Browser-specific singletons that the adapter bridges to the runtime.\n * These use browser APIs (Window, localStorage, postMessage, CustomEvent)\n * that the runtime cannot access directly.\n */\nexport interface BrowserDeps {\n  originRegistry: typeof OriginRegistryType;\n  manifestCache: typeof ManifestCacheType;\n  aclStore: typeof AclStoreType;\n  audioManager: typeof AudioManagerType;\n  nappKeyRegistry: typeof SessionRegistryType;\n}\n\nfunction createSendToNapplet(originRegistry: BrowserDeps['originRegistry']): SendToNapplet {\n  return (windowId, msg) => {\n    const win = originRegistry.getIframeWindow(windowId);\n    if (win) win.postMessage(msg, '*');\n  };\n}\n\nfunction createRelayPoolAdapter(\n  shellHooks: ShellAdapter,\n  originRegistry: BrowserDeps['originRegistry'],\n): RelayPoolAdapter {\n  return {\n    subscribe(\n      filters: NostrFilter[],\n      callback: (item: NostrEvent | 'EOSE') => void,\n      relayUrls?: string[],\n    ): RelaySubscriptionHandle {\n      const pool = shellHooks.relayPool.getRelayPool();\n      if (!pool) return { unsubscribe() { /* no-op */ } };\n\n      const urls = relayUrls ?? shellHooks.relayPool.selectRelayTier(filters);\n      const sub = pool.subscription(urls, filters).subscribe((item) => {\n        if (item === 'EOSE') callback('EOSE');\n        else callback(item as NostrEvent);\n      });\n      return { unsubscribe: () => sub.unsubscribe() };\n    },\n\n    publish(event: NostrEvent): void | Promise<void> {\n      const pool = shellHooks.relayPool.getRelayPool();\n      if (!pool) return;\n      const relayUrls = shellHooks.relayPool.selectRelayTier([]);\n      return pool.publish(relayUrls, event);\n    },\n\n    selectRelayTier(filters: NostrFilter[]): string[] {\n      return shellHooks.relayPool.selectRelayTier(filters);\n    },\n\n    trackSubscription(subKey: string, cleanup: () => void): void {\n      shellHooks.relayPool.trackSubscription(subKey, cleanup);\n    },\n\n    untrackSubscription(subKey: string): void {\n      shellHooks.relayPool.untrackSubscription(subKey);\n    },\n\n    openScopedRelay(\n      windowId: string,\n      relayUrl: string,\n      subId: string,\n      filters: NostrFilter[],\n      _sendFn: SendToNapplet,\n    ): void {\n      const win = originRegistry.getIframeWindow(windowId);\n      if (win) shellHooks.relayPool.openScopedRelay(windowId, relayUrl, subId, filters, win);\n    },\n\n    closeScopedRelay(windowId: string): void {\n      shellHooks.relayPool.closeScopedRelay(windowId);\n    },\n\n    publishToScopedRelay(windowId: string, event: NostrEvent): boolean | Promise<boolean> {\n      return shellHooks.relayPool.publishToScopedRelay(windowId, event);\n    },\n\n    isAvailable(): boolean {\n      return shellHooks.relayPool.getRelayPool() !== null;\n    },\n  };\n}\n\nfunction createCacheAdapter(shellHooks: ShellAdapter): CacheAdapter {\n  return {\n    async query(filters: NostrFilter[]): Promise<NostrEvent[]> {\n      const workerRelay = shellHooks.workerRelay.getWorkerRelay();\n      if (!workerRelay) return [];\n      const subId = crypto.randomUUID();\n      return workerRelay.query(['REQ', subId, ...filters]);\n    },\n\n    store(event: NostrEvent): void {\n      const workerRelay = shellHooks.workerRelay.getWorkerRelay();\n      if (!workerRelay) return;\n      try { workerRelay.event(event)?.catch?.(() => { /* best-effort */ }); } catch { /* best-effort */ }\n    },\n\n    isAvailable(): boolean {\n      return shellHooks.workerRelay.getWorkerRelay() !== null;\n    },\n  };\n}\n\nfunction createAuthAdapter(shellHooks: ShellAdapter): AuthAdapter {\n  return {\n    getUserPubkey(): string | null {\n      return shellHooks.auth.getUserPubkey();\n    },\n    getSigner(): Signer | null {\n      return shellHooks.auth.getSigner();\n    },\n  };\n}\n\nfunction createConfigAdapter(shellHooks: ShellAdapter): ConfigAdapter {\n  return {\n    getNappUpdateBehavior(): 'auto-grant' | 'banner' | 'silent-reprompt' {\n      return shellHooks.config.getNappUpdateBehavior();\n    },\n  };\n}\n\nfunction createHotkeyAdapter(shellHooks: ShellAdapter): HotkeyAdapter {\n  return {\n    executeHotkeyFromForward(event): void {\n      shellHooks.hotkeys.executeHotkeyFromForward(event);\n    },\n  };\n}\n\nfunction createCryptoAdapter(shellHooks: ShellAdapter): CryptoAdapter {\n  return {\n    async verifyEvent(event: NostrEvent): Promise<boolean> {\n      return shellHooks.crypto.verifyEvent(event);\n    },\n    randomUUID(): string {\n      return crypto.randomUUID();\n    },\n    randomBytes(length: number): Uint8Array {\n      const bytes = new Uint8Array(length);\n      crypto.getRandomValues(bytes);\n      return bytes;\n    },\n  };\n}\n\nfunction createAclPersistence(): AclPersistence {\n  return {\n    persist(data: string): void {\n      try { localStorage.setItem('napplet:acl', data); } catch { /* best-effort */ }\n    },\n    load(): string | null {\n      try { return localStorage.getItem('napplet:acl'); } catch { return null; }\n    },\n  };\n}\n\nfunction createManifestPersistence(): ManifestPersistence {\n  return {\n    persist(data: string): void {\n      try { localStorage.setItem('napplet:manifest-cache', data); } catch { /* best-effort */ }\n    },\n    load(): string | null {\n      try { return localStorage.getItem('napplet:manifest-cache'); } catch { return null; }\n    },\n  };\n}\n\nfunction createStatePersistence(): StatePersistence {\n  return {\n    get(scopedKey: string): string | null {\n      try { return localStorage.getItem(scopedKey); } catch { return null; }\n    },\n    set(scopedKey: string, value: string): boolean {\n      try { localStorage.setItem(scopedKey, value); return true; } catch { return false; }\n    },\n    remove(scopedKey: string): void {\n      try { localStorage.removeItem(scopedKey); } catch { /* best-effort */ }\n    },\n    clear(prefix: string): void {\n      try {\n        const keysToRemove: string[] = [];\n        for (let i = 0; i < localStorage.length; i++) {\n          const key = localStorage.key(i);\n          if (key?.startsWith(prefix)) keysToRemove.push(key);\n        }\n        for (const key of keysToRemove) localStorage.removeItem(key);\n      } catch { /* best-effort */ }\n    },\n    keys(prefix: string): string[] {\n      try {\n        const result: string[] = [];\n        for (let i = 0; i < localStorage.length; i++) {\n          const key = localStorage.key(i);\n          if (key?.startsWith(prefix)) result.push(key);\n        }\n        return result;\n      } catch { return []; }\n    },\n    calculateBytes(prefix: string, excludeKey?: string): number {\n      try {\n        let total = 0;\n        for (let i = 0; i < localStorage.length; i++) {\n          const key = localStorage.key(i);\n          if (!key?.startsWith(prefix)) continue;\n          if (excludeKey && key === excludeKey) continue;\n          const value = localStorage.getItem(key) ?? '';\n          total += new TextEncoder().encode(key + value).length;\n        }\n        return total;\n      } catch { return 0; }\n    },\n  };\n}\n\nfunction createWindowManagerAdapter(shellHooks: ShellAdapter): WindowManagerAdapter {\n  return {\n    createWindow(options): string | null {\n      return shellHooks.windowManager.createWindow(options);\n    },\n  };\n}\n\nfunction createRelayConfigAdapter(shellHooks: ShellAdapter): RelayConfigAdapter {\n  return {\n    addRelay(tier: string, url: string): void {\n      shellHooks.relayConfig.addRelay(tier, url);\n    },\n    removeRelay(tier: string, url: string): void {\n      shellHooks.relayConfig.removeRelay(tier, url);\n    },\n    getRelayConfig(): { discovery: string[]; super: string[]; outbox: string[] } {\n      return shellHooks.relayConfig.getRelayConfig();\n    },\n    getNip66Suggestions(): unknown {\n      return shellHooks.relayConfig.getNip66Suggestions();\n    },\n  };\n}\n\nfunction createShellSecretPersistence(): ShellSecretPersistence {\n  return {\n    get(): Uint8Array | null {\n      try {\n        const hex = localStorage.getItem('napplet-shell-secret');\n        if (!hex) return null;\n        return hexToBytes(hex);\n      } catch { return null; }\n    },\n    set(secret: Uint8Array): void {\n      try {\n        localStorage.setItem('napplet-shell-secret', bytesToHex(secret));\n      } catch { /* localStorage unavailable */ }\n    },\n  };\n}\n\nfunction createGuidPersistence(): GuidPersistence {\n  return {\n    get(windowId: string): string | null {\n      try {\n        return localStorage.getItem(`napplet-guid:${windowId}`);\n      } catch { return null; }\n    },\n    set(windowId: string, guid: string): void {\n      try {\n        localStorage.setItem(`napplet-guid:${windowId}`, guid);\n      } catch { /* localStorage unavailable */ }\n    },\n    remove(windowId: string): void {\n      try {\n        localStorage.removeItem(`napplet-guid:${windowId}`);\n      } catch { /* localStorage unavailable */ }\n    },\n  };\n}\n\nfunction createDmAdapter(shellHooks: ShellAdapter): DmAdapter | undefined {\n  return shellHooks.dm\n    ? {\n        sendDm(recipientPubkey: string, message: string) {\n          return shellHooks.dm!.sendDm(recipientPubkey, message);\n        },\n      }\n    : undefined;\n}\n\n/**\n * Convert ShellAdapter (browser-facing) into RuntimeAdapter (environment-agnostic).\n *\n * The adapter is the single translation layer between browser APIs and the\n * runtime's abstract interfaces. It:\n * - Converts Window references to windowId strings via originRegistry\n * - Wraps localStorage-backed singletons into persistence interfaces\n * - Translates relay pool API shapes (Observable → callback)\n *\n * @param shellHooks - The browser-oriented ShellAdapter provided by the host app\n * @param deps - Browser-specific singletons (originRegistry, aclStore, etc.)\n * @returns RuntimeAdapter suitable for createRuntime()\n *\n * @example\n * ```ts\n * const runtimeHooks = adaptHooks(shellHooks, {\n *   originRegistry, manifestCache, aclStore, audioManager, nappKeyRegistry,\n * });\n * const runtime = createRuntime(runtimeHooks);\n * ```\n */\nexport function adaptHooks(shellHooks: ShellAdapter, deps: BrowserDeps): RuntimeAdapter {\n  const { originRegistry } = deps;\n\n  return {\n    sendToNapplet: createSendToNapplet(originRegistry),\n    relayPool: createRelayPoolAdapter(shellHooks, originRegistry),\n    cache: createCacheAdapter(shellHooks),\n    auth: createAuthAdapter(shellHooks),\n    config: createConfigAdapter(shellHooks),\n    hotkeys: createHotkeyAdapter(shellHooks),\n    crypto: createCryptoAdapter(shellHooks),\n    aclPersistence: createAclPersistence(),\n    manifestPersistence: createManifestPersistence(),\n    statePersistence: createStatePersistence(),\n    windowManager: createWindowManagerAdapter(shellHooks),\n    relayConfig: createRelayConfigAdapter(shellHooks),\n    dm: createDmAdapter(shellHooks),\n    shellSecretPersistence: createShellSecretPersistence(),\n    guidPersistence: createGuidPersistence(),\n    onAclCheck: shellHooks.onAclCheck,\n    onHashMismatch: shellHooks.onHashMismatch,\n    services: shellHooks.services,\n    getConfigOverrides: shellHooks.getConfigOverrides,\n  };\n}\n","\nimport type { ShellEnvironment } from './types.js';\n\ninterface OriginEntry {\n  windowId: string;\n  dTag?: string;\n  aggregateHash?: string;\n  environment?: ShellEnvironment;\n  registrationId: number;\n}\n\n/** NIP-5D identity metadata associated with a registered iframe window. */\nexport interface OriginIdentity {\n  readonly dTag: string;\n  readonly aggregateHash: string;\n}\n\nconst registry = new Map<Window, OriginEntry>();\nlet nextRegistrationId = 0;\n\n/**\n * Bidirectional registry mapping Window references to windowId strings.\n * Optionally stores NIP-5D identity metadata (dTag and aggregateHash) per window.\n *\n * @example\n * ```ts\n * import { originRegistry } from '@kehto/shell';\n *\n * originRegistry.register(iframe.contentWindow, 'napp-1');\n * const id = originRegistry.getWindowId(iframe.contentWindow); // 'napp-1'\n * ```\n */\nexport interface OriginRegistry {\n  register(win: Window, windowId: string, identity?: OriginIdentity): void;\n  unregister(windowId: string): void;\n  getWindowId(win: Window): string | undefined;\n  getIframeWindow(windowId: string): Window | null;\n  getAllWindowIds(): string[];\n  getIdentity(win: Window): OriginIdentity | undefined;\n  setEnvironment(win: Window, environment: ShellEnvironment): void;\n  getEnvironment(win: Window): ShellEnvironment | undefined;\n  getRegistrationId(win: Window): number | undefined;\n  clear(): void;\n}\n\n/** Shell-wide iframe window registry singleton. */\nexport const originRegistry: OriginRegistry = {\n  /**\n   * Register a window reference with a windowId and optional identity metadata.\n   *\n   * @param win - The iframe's contentWindow reference\n   * @param windowId - The unique identifier for this napplet window\n   * @param identity - Optional NIP-5D identity metadata (dTag and aggregateHash)\n   */\n  register(win: Window, windowId: string, identity?: OriginIdentity): void {\n    for (const [registeredWin, entry] of registry.entries()) {\n      if (registeredWin === win || entry.windowId === windowId) {\n        registry.delete(registeredWin);\n      }\n    }\n\n    registry.set(win, {\n      windowId,\n      dTag: identity?.dTag,\n      aggregateHash: identity?.aggregateHash,\n      registrationId: ++nextRegistrationId,\n    });\n  },\n\n  /**\n   * Unregister a window by its windowId, removing the mapping.\n   *\n   * @param windowId - The window identifier to remove\n   */\n  unregister(windowId: string): void {\n    for (const [win, entry] of registry.entries()) {\n      if (entry.windowId === windowId) {\n        registry.delete(win);\n      }\n    }\n  },\n\n  /**\n   * Look up the windowId for a given Window reference.\n   *\n   * @param win - The Window reference (typically from event.source)\n   * @returns The windowId string, or undefined if not registered\n   */\n  getWindowId(win: Window): string | undefined {\n    return registry.get(win)?.windowId;\n  },\n\n  /**\n   * Look up the Window reference for a given windowId.\n   *\n   * @param windowId - The window identifier to look up\n   * @returns The Window reference, or null if not found\n   */\n  getIframeWindow(windowId: string): Window | null {\n    for (const [win, entry] of registry.entries()) {\n      if (entry.windowId === windowId) return win;\n    }\n    return null;\n  },\n\n  /**\n   * Get all registered windowId strings.\n   *\n   * @returns Array of all registered window identifiers\n   */\n  getAllWindowIds(): string[] {\n    return Array.from(registry.values()).map(entry => entry.windowId);\n  },\n\n  /**\n   * Get identity metadata for a registered Window.\n   *\n   * @param win - The Window reference to look up\n   * @returns Identity metadata, or undefined if not registered or no identity set\n   */\n  getIdentity(win: Window): OriginIdentity | undefined {\n    const entry = registry.get(win);\n    if (!entry?.dTag || !entry?.aggregateHash) return undefined;\n    return { dTag: entry.dTag, aggregateHash: entry.aggregateHash };\n  },\n\n  /** Store the immutable environment captured for this exact frame registration. */\n  setEnvironment(win: Window, environment: ShellEnvironment): void {\n    const entry = registry.get(win);\n    if (!entry) return;\n    entry.environment = Object.freeze({\n      capabilities: Object.freeze({ domains: Object.freeze([...environment.capabilities.domains]) }),\n      services: Object.freeze([...environment.services]),\n    });\n  },\n\n  /** Return the immutable environment captured before this frame executes. */\n  getEnvironment(win: Window): ShellEnvironment | undefined {\n    return registry.get(win)?.environment;\n  },\n\n  /**\n   * Look up the monotonically increasing registration id for a Window.\n   *\n   * @param win - The Window reference to look up\n   * @returns The registration id, or undefined if the Window is not registered\n   */\n  getRegistrationId(win: Window): number | undefined {\n    return registry.get(win)?.registrationId;\n  },\n\n  /** Clear all registrations. */\n  clear(): void {\n    registry.clear();\n  },\n};\n","/**\n * SessionRegistry — windowId to verified napplet pubkey bidirectional mapping.\n *\n * After a successful AUTH handshake, the ShellBridge registers the napplet's\n * verified pubkey here. Both mappings are kept in sync.\n */\n\nimport type { PendingUpdate, SessionEntry } from '@kehto/runtime';\n\n/**\n * A pending napplet update — raised when a napplet reconnects with a different aggregateHash.\n * @example\n * ```ts\n * const update: PendingUpdate = {\n *   windowId: 'win-1', pubkey: 'abc...', dTag: '3chat',\n *   oldHash: 'aaa', newHash: 'bbb',\n *   resolve: (action) => { if (action === 'accept') { // apply } },\n * };\n * ```\n */\nexport type { PendingUpdate } from '@kehto/runtime';\n\nconst byWindowId = new Map<string, string>();\nconst byPubkey = new Map<string, SessionEntry>();\nconst pendingUpdates = new Map<string, PendingUpdate>();\n\nlet _pendingVersion = 0;\n\n/**\n * Bidirectional registry mapping windowIds to verified napplet pubkeys.\n * Maintained by ShellBridge after successful AUTH handshakes.\n *\n * @example\n * ```ts\n * import { sessionRegistry } from '@kehto/shell';\n *\n * const pubkey = sessionRegistry.getPubkey('win-1');\n * const entry = pubkey ? sessionRegistry.getEntry(pubkey) : undefined;\n * ```\n */\nexport interface SessionRegistry {\n  register(windowId: string, entry: SessionEntry): void;\n  unregister(windowId: string): void;\n  getPubkey(windowId: string): string | undefined;\n  getEntry(pubkey: string): SessionEntry | undefined;\n  getWindowId(pubkey: string): string | undefined;\n  isRegistered(windowId: string): boolean;\n  getAllEntries(): SessionEntry[];\n  setPendingUpdate(windowId: string, update: PendingUpdate): void;\n  getPendingUpdate(windowId: string): PendingUpdate | undefined;\n  clearPendingUpdate(windowId: string): void;\n  clear(): void;\n}\n\n/** Shell-wide verified napplet session registry singleton. */\nexport const sessionRegistry: SessionRegistry = {\n  /**\n   * Register a napplet entry, mapping windowId to pubkey and vice versa.\n   *\n   * @param windowId - The window identifier\n   * @param entry - The verified napplet session entry from AUTH handshake\n   */\n  register(windowId: string, entry: SessionEntry): void {\n    byWindowId.set(windowId, entry.pubkey);\n    byPubkey.set(entry.pubkey, entry);\n  },\n\n  /**\n   * Unregister a napplet by windowId, removing both mappings.\n   *\n   * @param windowId - The window identifier to remove\n   */\n  unregister(windowId: string): void {\n    const pubkey = byWindowId.get(windowId);\n    if (pubkey) {\n      byPubkey.delete(pubkey);\n      byWindowId.delete(windowId);\n    }\n    pendingUpdates.delete(windowId);\n  },\n\n  /**\n   * Get the pubkey associated with a windowId.\n   *\n   * @param windowId - The window identifier\n   * @returns The napplet's pubkey, or undefined if not registered\n   */\n  getPubkey(windowId: string): string | undefined {\n    return byWindowId.get(windowId);\n  },\n\n  /**\n   * Get the full entry for a napplet pubkey.\n   *\n   * @param pubkey - The napplet's pubkey\n   * @returns The full SessionEntry, or undefined if not found\n   */\n  getEntry(pubkey: string): SessionEntry | undefined {\n    return byPubkey.get(pubkey);\n  },\n\n  /**\n   * Get the windowId for a napplet pubkey.\n   *\n   * @param pubkey - The napplet's pubkey\n   * @returns The windowId, or undefined if not found\n   */\n  getWindowId(pubkey: string): string | undefined {\n    return byPubkey.get(pubkey)?.windowId;\n  },\n\n  /**\n   * Check if a windowId has a registered napplet.\n   *\n   * @param windowId - The window identifier\n   * @returns True if the windowId has a registered napplet\n   */\n  isRegistered(windowId: string): boolean {\n    return byWindowId.has(windowId);\n  },\n\n  /**\n   * Get all registered napplet entries.\n   *\n   * @returns Array of all SessionEntry objects\n   */\n  getAllEntries(): SessionEntry[] {\n    return Array.from(byPubkey.values());\n  },\n\n  /**\n   * Set a pending update for a window (napplet reconnected with different hash).\n   *\n   * @param windowId - The window identifier\n   * @param update - The pending update details with resolve callback\n   */\n  setPendingUpdate(windowId: string, update: PendingUpdate): void {\n    pendingUpdates.set(windowId, update);\n    _pendingVersion++;\n    if (typeof window !== 'undefined') {\n      window.dispatchEvent(new CustomEvent('napplet:pending-update', { detail: { windowId } }));\n    }\n  },\n\n  /**\n   * Get a pending update for a window.\n   *\n   * @param windowId - The window identifier\n   * @returns The pending update, or undefined if none\n   */\n  getPendingUpdate(windowId: string): PendingUpdate | undefined {\n    return pendingUpdates.get(windowId);\n  },\n\n  /**\n   * Clear a pending update for a window.\n   *\n   * @param windowId - The window identifier\n   */\n  clearPendingUpdate(windowId: string): void {\n    pendingUpdates.delete(windowId);\n    _pendingVersion++;\n    if (typeof window !== 'undefined') {\n      window.dispatchEvent(new CustomEvent('napplet:pending-update', { detail: { windowId } }));\n    }\n  },\n\n  /** Clear all registrations and pending updates. */\n  clear(): void {\n    byWindowId.clear();\n    byPubkey.clear();\n    pendingUpdates.clear();\n  },\n};\n\n/** @deprecated Use sessionRegistry. Will be removed in v0.9.0. */\nexport const nappKeyRegistry: SessionRegistry = sessionRegistry;\n","\nimport { ALL_CAPABILITIES, type Capability } from '@kehto/runtime';\nimport { migrateAclState, type AclState } from '@kehto/acl';\nimport type { AclEntry } from './types.js';\n\nconst STORAGE_KEY = 'napplet:acl';\n\n/** Default state quota in bytes (512 KB) per napplet identity. */\nexport const DEFAULT_STATE_QUOTA = 512 * 1024;\n\ninterface InternalAclEntry {\n  key: string;\n  pubkey: string;\n  dTag: string;\n  aggregateHash: string;\n  capabilities: Set<Capability>;\n  blocked: boolean;\n  stateQuota: number;\n}\n\nfunction aclKey(_pubkey: string, dTag: string, aggregateHash: string): string {\n  return `${dTag}:${aggregateHash}`;\n}\n\nconst store = new Map<string, InternalAclEntry>();\n\n// Capability name to bit position mapping for bitfield conversion.\n// Plan 12-10: signer bit slots (32/64/128) reclaimed by the v1.2\n// identity:read / keys:bind / keys:forward caps. v1.1 persisted ACL\n// state with those bits is reinterpreted under the v1.2 surface —\n// acceptable because the v1.1 signer actions have no napplet-visible\n// surface in NIP-5D.\nconst CAP_BITS: Record<string, number> = {\n  'relay:read': 1, 'relay:write': 2, 'cache:read': 4, 'cache:write': 8,\n  'hotkey:forward': 16,\n  'identity:read': 32, 'keys:bind': 64, 'keys:forward': 128,\n  'state:read': 256, 'state:write': 512,\n  'media:control': 1024, 'notify:send': 2048, 'notify:channel': 4096,\n  'theme:read': 8192,\n  // 65536 RETIRED — was identity:decrypt (removed as a spec violation); left as\n  // a permanent gap, do NOT reuse this bit.\n};\n\nfunction capArrayToBitfield(caps: Capability[]): number {\n  let bits = 0;\n  for (const cap of caps) bits |= (CAP_BITS[cap] ?? 0);\n  return bits;\n}\n\nfunction bitfieldToCapArray(bits: number): Capability[] {\n  return (Object.entries(CAP_BITS)\n    .filter(([, bit]) => (bits & bit) !== 0)\n    .map(([name]) => name)) as Capability[];\n}\n\nfunction getOrCreate(pubkey: string, dTag: string, aggregateHash: string): InternalAclEntry {\n  const key = aclKey(pubkey, dTag, aggregateHash);\n  let entry = store.get(key);\n  if (!entry) {\n    entry = {\n      key,\n      pubkey,\n      dTag,\n      aggregateHash,\n      capabilities: new Set(ALL_CAPABILITIES),\n      blocked: false,\n      stateQuota: DEFAULT_STATE_QUOTA,\n    };\n    store.set(key, entry);\n  }\n  return entry;\n}\n\n/**\n * ACL store — manages capability grants, revocations, and blocks for napp identities.\n * Persists to localStorage and uses a permissive default policy (all capabilities granted).\n *\n * @example\n * ```ts\n * import { aclStore } from '@kehto/shell';\n *\n * aclStore.grant(pubkey, dTag, hash, 'relay:read');\n * const allowed = aclStore.check(pubkey, dTag, hash, 'relay:read'); // true\n * ```\n */\nexport interface AclStore {\n  check(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): boolean;\n  grant(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void;\n  revoke(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void;\n  block(pubkey: string, dTag: string, aggregateHash: string): void;\n  unblock(pubkey: string, dTag: string, aggregateHash: string): void;\n  isBlocked(pubkey: string, dTag: string, aggregateHash: string): boolean;\n  getEntry(pubkey: string, dTag: string, aggregateHash: string): AclEntry | undefined;\n  getAllEntries(): AclEntry[];\n  persist(): void;\n  load(): void;\n  getStateQuota(pubkey: string, dTag: string, aggregateHash: string): number;\n  clear(): void;\n}\n\n/** Shell ACL store singleton. */\nexport const aclStore: AclStore = {\n  /**\n   * Check if a napp identity has a specific capability.\n   * Returns true for unknown identities (permissive default).\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @param capability - The capability to check\n   * @returns True if the capability is granted and the napp is not blocked\n   */\n  check(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): boolean {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    const entry = store.get(key);\n    if (!entry) return true;\n    if (entry.blocked) return false;\n    return entry.capabilities.has(capability);\n  },\n\n  /**\n   * Grant a capability to a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @param capability - The capability to grant\n   */\n  grant(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void {\n    getOrCreate(pubkey, dTag, aggregateHash).capabilities.add(capability);\n  },\n\n  /**\n   * Revoke a capability from a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @param capability - The capability to revoke\n   */\n  revoke(pubkey: string, dTag: string, aggregateHash: string, capability: Capability): void {\n    getOrCreate(pubkey, dTag, aggregateHash).capabilities.delete(capability);\n  },\n\n  /**\n   * Block a napp identity entirely (all capabilities denied).\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   */\n  block(pubkey: string, dTag: string, aggregateHash: string): void {\n    getOrCreate(pubkey, dTag, aggregateHash).blocked = true;\n  },\n\n  /**\n   * Unblock a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   */\n  unblock(pubkey: string, dTag: string, aggregateHash: string): void {\n    getOrCreate(pubkey, dTag, aggregateHash).blocked = false;\n  },\n\n  /**\n   * Check if a napp identity is blocked.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @returns True if the identity is blocked\n   */\n  isBlocked(pubkey: string, dTag: string, aggregateHash: string): boolean {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    return store.get(key)?.blocked ?? false;\n  },\n\n  /**\n   * Get the external ACL entry for a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @returns The ACL entry, or undefined if no explicit entry exists\n   */\n  getEntry(pubkey: string, dTag: string, aggregateHash: string): AclEntry | undefined {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    const internal = store.get(key);\n    if (!internal) return undefined;\n    return {\n      pubkey: internal.pubkey,\n      capabilities: Array.from(internal.capabilities),\n      blocked: internal.blocked,\n      stateQuota: internal.stateQuota,\n    };\n  },\n\n  /**\n   * Get all ACL entries.\n   *\n   * @returns Array of all ACL entries\n   */\n  getAllEntries(): AclEntry[] {\n    return Array.from(store.values()).map(e => ({\n      pubkey: e.pubkey,\n      capabilities: Array.from(e.capabilities),\n      blocked: e.blocked,\n      stateQuota: e.stateQuota,\n    }));\n  },\n\n  /** Persist the ACL store to localStorage. */\n  persist(): void {\n    try {\n      const entries = Array.from(store.entries()).map(([key, val]) => [\n        key,\n        {\n          pubkey: val.pubkey,\n          dTag: val.dTag,\n          aggregateHash: val.aggregateHash,\n          capabilities: Array.from(val.capabilities),\n          blocked: val.blocked,\n          stateQuota: val.stateQuota,\n        },\n      ]);\n      localStorage.setItem(STORAGE_KEY, JSON.stringify(entries));\n    } catch {\n      // localStorage unavailable\n    }\n  },\n\n  /** Load the ACL store from localStorage. Migrates old 3-segment keys to 2-segment format. */\n  load(): void {\n    try {\n      const raw = localStorage.getItem(STORAGE_KEY);\n      if (!raw) return;\n      let entries = JSON.parse(raw) as Array<\n        [string, {\n          pubkey: string;\n          dTag?: string;\n          aggregateHash?: string;\n          capabilities: Capability[];\n          blocked: boolean;\n          stateQuota?: number;\n        }]\n      >;\n\n      const hasOldKeys = entries.some(([key]) => key.split(':').length === 3);\n      if (hasOldKeys) {\n        const tempState: AclState = {\n          defaultPolicy: 'permissive',\n          entries: Object.fromEntries(\n            entries.map(([key, val]) => [key, {\n              caps: capArrayToBitfield(val.capabilities),\n              blocked: val.blocked,\n              quota: val.stateQuota ?? DEFAULT_STATE_QUOTA,\n            }])\n          ),\n        };\n        const migrated = migrateAclState(tempState);\n        if (migrated !== tempState) {\n          // Rebuild entries from migrated state\n          entries = Object.entries(migrated.entries).map(([key, entry]) => {\n            const parts = key.split(':');\n            return [key, {\n              pubkey: '',\n              dTag: parts[0] ?? '',\n              aggregateHash: parts[1] ?? '',\n              capabilities: bitfieldToCapArray(entry.caps),\n              blocked: entry.blocked,\n              stateQuota: entry.quota,\n            }] as [string, typeof entries[0][1]];\n          });\n          // Re-persist migrated data immediately\n          localStorage.setItem(STORAGE_KEY, JSON.stringify(entries));\n        }\n      }\n\n      store.clear();\n      for (const [key, val] of entries) {\n        if (val.dTag === undefined || val.aggregateHash === undefined) continue;\n        store.set(key, {\n          key,\n          pubkey: val.pubkey,\n          dTag: val.dTag,\n          aggregateHash: val.aggregateHash,\n          capabilities: new Set(val.capabilities),\n          blocked: val.blocked,\n          stateQuota: val.stateQuota ?? DEFAULT_STATE_QUOTA,\n        });\n      }\n    } catch {\n      /* Corrupted ACL data in localStorage — clear and use defaults */\n      store.clear();\n    }\n  },\n\n  /**\n   * Get the state quota for a napp identity.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param aggregateHash - The napp's build hash\n   * @returns The quota in bytes (defaults to DEFAULT_STATE_QUOTA)\n   */\n  getStateQuota(pubkey: string, dTag: string, aggregateHash: string): number {\n    const key = aclKey(pubkey, dTag, aggregateHash);\n    return store.get(key)?.stateQuota ?? DEFAULT_STATE_QUOTA;\n  },\n\n  /** Clear all ACL entries and remove from localStorage. */\n  clear(): void {\n    store.clear();\n    try {\n      localStorage.removeItem(STORAGE_KEY);\n    } catch {\n      /* localStorage unavailable — ACL clear is best-effort */\n    }\n  },\n};\n","/**\n * Manifest cache — persists verified NIP-5A aggregate hashes per napplet identity.\n */\n\n/**\n * A cached manifest entry for a verified napplet build.\n * @example\n * ```ts\n * const entry: ManifestCacheEntry = {\n *   pubkey: 'abc123...', dTag: '3chat',\n *   aggregateHash: 'deadbeef', verifiedAt: Date.now(),\n * };\n * ```\n */\nexport interface ManifestCacheEntry {\n  pubkey: string;\n  dTag: string;\n  aggregateHash: string;\n  verifiedAt: number;\n}\n\nconst STORAGE_KEY = 'napplet:manifest-cache';\nconst cache = new Map<string, ManifestCacheEntry>();\n\nfunction cacheKey(pubkey: string, dTag: string): string {\n  return `${pubkey}:${dTag}`;\n}\n\n/**\n * Cache for verified napplet manifest entries. Persists to localStorage.\n * Used to detect napplet updates (aggregateHash changes) across sessions.\n *\n * @example\n * ```ts\n * import { manifestCache } from '@kehto/shell';\n *\n * manifestCache.set({ pubkey: 'abc...', dTag: 'chat', aggregateHash: 'dead', verifiedAt: Date.now() });\n * const entry = manifestCache.get('abc...', 'chat');\n * ```\n */\nexport interface ManifestCache {\n  get(pubkey: string, dTag: string): ManifestCacheEntry | undefined;\n  set(entry: ManifestCacheEntry): void;\n  has(pubkey: string, dTag: string, hash: string): boolean;\n  remove(pubkey: string, dTag: string): void;\n  load(): void;\n  persist(): void;\n  clear(): void;\n}\n\n/** Shell-wide manifest verification cache singleton. */\nexport const manifestCache: ManifestCache = {\n  /**\n   * Get a cached manifest entry by pubkey and dTag.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @returns The cached entry, or undefined if not found\n   */\n  get(pubkey: string, dTag: string): ManifestCacheEntry | undefined {\n    return cache.get(cacheKey(pubkey, dTag));\n  },\n\n  /**\n   * Set (upsert) a manifest cache entry and persist to localStorage.\n   *\n   * @param entry - The manifest entry to cache\n   */\n  set(entry: ManifestCacheEntry): void {\n    cache.set(cacheKey(entry.pubkey, entry.dTag), entry);\n    manifestCache.persist();\n  },\n\n  /**\n   * Check if a specific hash is cached for a pubkey/dTag combination.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   * @param hash - The aggregateHash to check\n   * @returns True if the exact hash matches the cached entry\n   */\n  has(pubkey: string, dTag: string, hash: string): boolean {\n    const entry = cache.get(cacheKey(pubkey, dTag));\n    return !!entry && entry.aggregateHash === hash;\n  },\n\n  /**\n   * Remove a cached entry for a pubkey/dTag and persist.\n   *\n   * @param pubkey - The napp's pubkey\n   * @param dTag - The napp's dTag\n   */\n  remove(pubkey: string, dTag: string): void {\n    cache.delete(cacheKey(pubkey, dTag));\n    manifestCache.persist();\n  },\n\n  /** Load the cache from localStorage. */\n  load(): void {\n    try {\n      const raw = localStorage.getItem(STORAGE_KEY);\n      if (!raw) return;\n      const entries = JSON.parse(raw) as Array<[string, ManifestCacheEntry]>;\n      cache.clear();\n      for (const [key, val] of entries) cache.set(key, val);\n    } catch { /* Corrupted cache data — clear and start fresh */ cache.clear(); }\n  },\n\n  /** Persist the cache to localStorage. */\n  persist(): void {\n    try {\n      localStorage.setItem(STORAGE_KEY, JSON.stringify(Array.from(cache.entries())));\n    } catch { /* localStorage unavailable in sandboxed contexts — persist is best-effort */ }\n  },\n\n  /** Clear all cached entries and remove from localStorage. */\n  clear(): void {\n    cache.clear();\n    try { localStorage.removeItem(STORAGE_KEY); } catch { /* localStorage unavailable — cleanup is best-effort */ }\n  },\n};\n","/**\n * audio-manager.ts — Shell-side registry of active audio sources.\n *\n * Tracks which windows are producing audio. UI components read the registry\n * reactively via the version counter and CustomEvent pattern.\n */\n\nimport { originRegistry } from './origin-registry.js';\n\n/**\n * An active audio source registered by a napplet.\n * @example\n * ```ts\n * const source: AudioSource = {\n *   windowId: 'win-1', nappletClass: 'music-player',\n *   title: 'Now Playing', muted: false,\n * };\n * ```\n */\nexport interface AudioSource {\n  windowId: string;\n  nappletClass: string;\n  title: string;\n  muted: boolean;\n}\n\nconst sources: Map<string, AudioSource> = new Map<string, AudioSource>();\nlet version = 0;\n\nfunction bump(): void {\n  version++;\n  if (typeof window !== 'undefined') {\n    window.dispatchEvent(new CustomEvent('napplet:audio-changed'));\n  }\n}\n\n/**\n * Registry of active audio sources across all napplet windows.\n * Emits 'napplet:audio-changed' CustomEvents when the registry changes.\n *\n * @example\n * ```ts\n * import { audioManager } from '@kehto/shell';\n *\n * audioManager.register('win-1', 'music', 'My Song');\n * audioManager.mute('win-1', true);\n * ```\n */\nexport interface AudioManager {\n  register(windowId: string, nappletClass: string, title: string): void;\n  unregister(windowId: string): void;\n  updateState(windowId: string, update: { title?: string }): void;\n  mute(windowId: string, muted: boolean): void;\n  has(windowId: string): boolean;\n  get(windowId: string): AudioSource | undefined;\n  getSources(): Map<string, AudioSource>;\n  readonly version: number;\n  readonly count: number;\n  clear(): void;\n}\n\n/** Shell-wide audio source registry singleton. */\nexport const audioManager: AudioManager = {\n  /**\n   * Register a new audio source for a window.\n   *\n   * @param windowId - The window identifier\n   * @param nappletClass - The napplet class/type (e.g., 'music-player')\n   * @param title - Human-readable title for the audio source\n   */\n  register(windowId: string, nappletClass: string, title: string): void {\n    sources.set(windowId, { windowId, nappletClass, title, muted: false });\n    bump();\n  },\n\n  /**\n   * Unregister an audio source for a window.\n   *\n   * @param windowId - The window identifier to remove\n   */\n  unregister(windowId: string): void {\n    if (sources.delete(windowId)) bump();\n  },\n\n  /**\n   * Update the state of an audio source (e.g., change title).\n   *\n   * @param windowId - The window identifier\n   * @param update - Partial update with optional title\n   */\n  updateState(windowId: string, update: { title?: string }): void {\n    const src = sources.get(windowId);\n    if (!src) return;\n    if (update.title !== undefined) src.title = update.title;\n    bump();\n  },\n\n  /**\n   * Mute or unmute an audio source and notify the napplet via postMessage.\n   *\n   * @param windowId - The window identifier\n   * @param muted - True to mute, false to unmute\n   * @example\n   * ```ts\n   * audioManager.mute('win-1', true); // mute\n   * audioManager.mute('win-1', false); // unmute\n   * ```\n   */\n  mute(windowId: string, muted: boolean): void {\n    const src = sources.get(windowId);\n    if (src) { src.muted = muted; bump(); }\n    const iframeWindow = originRegistry.getIframeWindow(windowId);\n    if (iframeWindow) {\n      const muteEvent = {\n        kind: 29000, // INC_PEER — inlined numeric after Phase 24 DRIFT-01 shim removal\n        created_at: Math.floor(Date.now() / 1000),\n        tags: [['t', 'napplet:audio-muted']],\n        content: JSON.stringify({ muted }),\n        pubkey: '__shell__',\n        id: `audio-mute-${windowId}-${Date.now()}`,\n        sig: '',\n      };\n      iframeWindow.postMessage(['EVENT', '__shell__', muteEvent], '*');\n    }\n  },\n\n  /**\n   * Check if a window has a registered audio source.\n   *\n   * @param windowId - The window identifier\n   * @returns True if the window has an active audio source\n   */\n  has(windowId: string): boolean { return sources.has(windowId); },\n\n  /**\n   * Get the audio source for a window.\n   *\n   * @param windowId - The window identifier\n   * @returns The AudioSource, or undefined if not found\n   */\n  get(windowId: string): AudioSource | undefined { return sources.get(windowId); },\n\n  /**\n   * Get a snapshot of all audio sources.\n   *\n   * @returns A new Map of all active audio sources\n   */\n  getSources(): Map<string, AudioSource> { return new Map(sources); },\n\n  /** Current version counter (incremented on every change). */\n  get version(): number { return version; },\n\n  /** Number of active audio sources. */\n  get count(): number { return sources.size; },\n\n  /** Clear all audio sources and reset version counter. */\n  clear(): void { sources.clear(); version = 0; },\n};\n","import type { OriginIdentity } from './origin-registry.js';\nimport type { ShellAdapter, ShellCapabilities, ShellEnvironment } from './types.js';\n\nconst RUNTIME_NATIVE_DOMAINS = [\n  'relay', 'identity', 'storage', 'inc', 'theme', 'keys', 'media', 'notify',\n] as const;\n\nconst SERVICE_ONLY_DOMAINS = [\n  'outbox', 'config', 'resource', 'cvm', 'upload', 'intent', 'link', 'common',\n  'lists', 'serial', 'ble', 'webrtc', 'dm', 'count',\n  'fs',\n] as const;\n\n/**\n * Build the shell's immutable live capability snapshot from adapter wiring.\n *\n * @param hooks - The ShellAdapter provided by the host app.\n * @returns Domain-only ShellCapabilities for the current live wiring.\n * @example\n * ```ts\n * const caps = buildShellCapabilities(hooks);\n * // caps.domains => ['relay', 'identity', 'storage', 'inc', 'theme', 'keys', 'media', 'notify']\n * ```\n */\nexport function buildShellCapabilities(hooks: ShellAdapter): ShellCapabilities {\n  const disabled = new Set(hooks.capabilities?.disabledDomains ?? []);\n  const domains: string[] = RUNTIME_NATIVE_DOMAINS.filter((domain) => !disabled.has(domain));\n\n  for (const domain of SERVICE_ONLY_DOMAINS) {\n    if (!disabled.has(domain) && isServiceDomainLive(hooks, domain)) domains.push(domain);\n  }\n\n  return Object.freeze({ domains: freezeList(domains) });\n}\n\n/**\n * Resolve a trusted creation identity's immutable NAP-SHELL environment.\n *\n * This host-adapter API is intentionally not part of `window.napplet`: it\n * bounds host policy to current runtime wiring before `shell.init` crosses into\n * an untrusted iframe.\n *\n * @param hooks - Shell host wiring and optional per-identity grant policy.\n * @param identity - The source's creation-time identity.\n * @returns A fresh immutable environment whose entries are exact live subsets.\n */\nexport function resolveShellEnvironment(\n  hooks: ShellAdapter,\n  identity: OriginIdentity,\n): ShellEnvironment {\n  const capabilities = buildShellCapabilities(hooks);\n  const disabled = new Set(hooks.capabilities?.disabledDomains ?? []);\n  const services = getLiveServices(hooks, capabilities.domains, disabled);\n  const available = Object.freeze({\n    domains: freezeList(capabilities.domains),\n    services: freezeList(services),\n  });\n  const granted = hooks.capabilities?.resolveEnvironment?.(identity, available) ?? available;\n\n  return Object.freeze({\n    capabilities: Object.freeze({\n      domains: freezeList(intersectInOrder(available.domains, granted.domains)),\n    }),\n    services: freezeList(intersectInOrder(available.services, granted.services)),\n  });\n}\n\nfunction isServiceDomainLive(hooks: ShellAdapter, domain: string): boolean {\n  if (!hooks.services?.[domain]) return false;\n\n  switch (domain) {\n    case 'outbox': return Boolean(hooks.relayPool);\n    case 'upload': return hooks.upload?.getUploader() !== null && hooks.upload?.getUploader() !== undefined;\n    case 'intent': return hooks.intent?.isAvailable() === true;\n    case 'link': return hooks.link?.isAvailable() === true;\n    case 'common': return hooks.common?.isAvailable() === true;\n    case 'lists': return hooks.lists?.isAvailable() === true;\n    case 'serial': return hooks.serial?.isAvailable() === true;\n    case 'ble': return hooks.ble?.isAvailable() === true;\n    case 'webrtc': return hooks.webrtc?.isAvailable() === true;\n    default: return true;\n  }\n}\n\nfunction getLiveServices(\n  hooks: ShellAdapter,\n  domains: readonly string[],\n  disabled: ReadonlySet<string>,\n): string[] {\n  const liveDomains = new Set(domains);\n  return Object.keys(hooks.services ?? {}).filter((name) => {\n    if (disabled.has(name)) return false;\n    return !SERVICE_ONLY_DOMAINS.includes(name as typeof SERVICE_ONLY_DOMAINS[number]) || liveDomains.has(name);\n  });\n}\n\nfunction intersectInOrder(available: readonly string[], requested: readonly string[]): string[] {\n  const requestedSet = new Set(requested);\n  return available.filter((entry) => requestedSet.has(entry));\n}\n\nfunction freezeList(values: readonly string[]): readonly string[] {\n  return Object.freeze([...values]);\n}\n","import type { Runtime, SessionEntry } from '@kehto/runtime';\nimport { originRegistry, type OriginIdentity } from './origin-registry.js';\nimport { resolveShellEnvironment } from './shell-init.js';\nimport type { ShellAdapter, ShellEnvironment } from './types.js';\n\ninterface ShellReadyOptions {\n  hooks: ShellAdapter;\n  origin: string;\n  runtime: Runtime;\n  state: ShellReadyState;\n  sourceRegistrationId: number;\n  sourceWindow: Window;\n  windowId: string;\n}\n\n/** State owned by one ShellBridge instance for its NAP-SHELL lifecycles. */\nexport interface ShellReadyState {\n  isDomainAllowed(windowId: string, domain: string): boolean;\n  clear(): void;\n  readonly initSent: WeakMap<Window, number>;\n  readonly sessionRegistration: Map<string, number>;\n  readonly environments: Map<string, ShellEnvironment>;\n}\n\n/** Create isolated handshake state for one bridge/runtime pair. */\nexport function createShellReadyState(): ShellReadyState {\n  const initSent = new WeakMap<Window, number>();\n  const sessionRegistration = new Map<string, number>();\n  const environments = new Map<string, ShellEnvironment>();\n  return {\n    initSent,\n    sessionRegistration,\n    environments,\n    isDomainAllowed(windowId, domain): boolean {\n      return environments.get(windowId)?.capabilities.domains.includes(domain) ?? false;\n    },\n    clear(): void {\n      sessionRegistration.clear();\n      environments.clear();\n    },\n  };\n}\n\nexport function handleShellReady({\n  hooks,\n  origin,\n  runtime,\n  state,\n  sourceRegistrationId,\n  sourceWindow,\n  windowId,\n}: ShellReadyOptions): void {\n  // SHELL-01: exactly-once shell.init per registered Window lifecycle.\n  if (state.initSent.get(sourceWindow) === sourceRegistrationId) {\n    return;\n  }\n\n  const identity = resolveNip5dIdentity(hooks, windowId, sourceWindow);\n  if (!identity) return;\n\n  registerNip5dSessionIfNeeded({ origin, runtime, state, sourceRegistrationId, windowId, identity });\n  const environment = originRegistry.getEnvironment(sourceWindow) ?? resolveShellEnvironment(hooks, identity);\n  state.environments.set(windowId, environment);\n  postShellInit(sourceWindow, environment);\n  state.initSent.set(sourceWindow, sourceRegistrationId);\n}\n\nfunction registerNip5dSessionIfNeeded({\n  origin,\n  runtime,\n  state,\n  sourceRegistrationId,\n  windowId,\n  identity,\n}: Pick<ShellReadyOptions, 'origin' | 'runtime' | 'state' | 'sourceRegistrationId' | 'windowId'> & {\n  identity: OriginIdentity;\n}): void {\n  // NIP-5D: register a source-identity session entry in runtime.sessionRegistry\n  // if one does not already exist for this windowId. This wires the originRegistry\n  // identity into the runtime so domain handlers (storage/state, inc, etc.) can\n  // resolve the napplet via getEntryByWindowId(windowId).\n  const existing = runtime.sessionRegistry.getEntryByWindowId(windowId);\n  const previousRegistration = state.sessionRegistration.get(windowId);\n  if (existing && previousRegistration === sourceRegistrationId) {\n    return;\n  }\n  if (existing && previousRegistration !== undefined) {\n    runtime.sessionRegistry.unregister(windowId);\n  }\n  if (existing && previousRegistration === undefined) return;\n\n  const entry: SessionEntry = {\n    pubkey: '',\n    windowId,\n    origin,\n    type: 'nip5d',\n    dTag: identity.dTag,\n    aggregateHash: identity.aggregateHash,\n    registeredAt: Date.now(),\n    instanceId: crypto.randomUUID(),\n    provenance: 'nip-5d',\n  };\n  runtime.sessionRegistry.register(windowId, entry);\n  state.sessionRegistration.set(windowId, sourceRegistrationId);\n}\n\nfunction resolveNip5dIdentity(\n  hooks: ShellAdapter,\n  windowId: string,\n  sourceWindow: Window,\n): { dTag: string; aggregateHash: string } | null {\n  // Identity resolution order:\n  //   1. hooks.onNip5dIframeCreate?.(windowId) — preferred.\n  //   2. originRegistry.getIdentity(win) — fallback for hosts that register\n  //      identity directly via originRegistry.register(win, windowId, identity).\n  const hookIdentity = hooks.onNip5dIframeCreate?.(windowId);\n  if (hookIdentity !== null && hookIdentity !== undefined) {\n    return Object.freeze({\n      dTag: hookIdentity.dTag,\n      aggregateHash: hookIdentity.aggregateHash,\n    });\n  }\n\n  const originIdentity = originRegistry.getIdentity(sourceWindow);\n  if (!originIdentity) {\n    return null;\n  }\n\n  return Object.freeze({\n    dTag: originIdentity.dTag,\n    aggregateHash: originIdentity.aggregateHash,\n  });\n}\n\nfunction postShellInit(\n  win: Window,\n  environment: ShellEnvironment,\n): void {\n  const initMsg = {\n    type: 'shell.init',\n    capabilities: environment.capabilities,\n    services: environment.services,\n  };\n  win.postMessage(initMsg, '*');\n}\n","/**\n * The injected implementation must remain one self-contained function: the\n * renderer serializes it ahead of verified artifact scripts without changing\n * the signed artifact bytes. Splitting it into imported helpers would leave\n * unresolved closures in the generated `srcdoc`.\n *\n * aislop-ignore-file complexity/file-too-large complexity/function-too-long\n */\n\n/**\n * Options for rendering the host-owned NIP-5D `window.napplet` namespace prelude.\n *\n * @example\n * ```ts\n * const options: NappletNamespacePreludeOptions = {\n *   domains: ['shell', 'relay', 'identity'],\n * };\n * ```\n */\nexport interface NappletNamespacePreludeOptions {\n  /**\n   * Optional bare NAP domain names the shell exposes to this napplet.\n   * Mandatory `shell` is injected even when omitted here.\n   */\n  domains: readonly string[];\n}\n\nfunction uniqueBareDomains(domains: readonly string[]): string[] {\n  const seen = new Set<string>();\n  const normalized: string[] = [];\n  for (const domain of domains) {\n    const value = domain.trim();\n    if (!value || value.includes(':') || value.startsWith('perm:') || seen.has(value)) {\n      continue;\n    }\n    seen.add(value);\n    normalized.push(value);\n  }\n  return normalized;\n}\n\nfunction scriptJson(value: unknown): string {\n  return JSON.stringify(value).replace(/</g, '\\\\u003c');\n}\n\n/**\n * Render the host-owned NIP-5D bootstrap that exposes available NAP domains\n * under `window.napplet` before napplet artifact code runs.\n *\n * @param options - Domain availability to inject.\n * @returns An inline script tag suitable for `srcdoc` prelude insertion.\n * @example\n * ```ts\n * const prelude = renderNappletNamespacePrelude({\n *   domains: ['shell', 'relay', 'identity'],\n * });\n * ```\n */\nexport function renderNappletNamespacePrelude(options: NappletNamespacePreludeOptions): string {\n  const domains = uniqueBareDomains(['shell', ...options.domains]);\n  return `<script data-kehto-nip5d-injection>(${nappletNamespacePrelude.toString()})(${scriptJson(domains)});</script>`;\n}\n\n/**\n * Insert the NIP-5D namespace prelude into HTML before authored scripts.\n *\n * @param html - Verified napplet artifact HTML.\n * @param options - Domain availability to inject.\n * @returns HTML with the prelude inside `<head>` when possible.\n * @example\n * ```ts\n * const srcdoc = injectNappletNamespacePrelude(verifiedHtml, {\n *   domains: ['shell', 'relay', 'identity'],\n * });\n * iframe.srcdoc = srcdoc;\n * ```\n */\nexport function injectNappletNamespacePrelude(\n  html: string,\n  options: NappletNamespacePreludeOptions,\n): string {\n  const prelude = renderNappletNamespacePrelude(options);\n  const cspMeta = /(<meta\\s+http-equiv=[\"']Content-Security-Policy[\"'][^>]*>)/i;\n  if (cspMeta.test(html)) {\n    return html.replace(cspMeta, (match) => `${match}${prelude}`);\n  }\n  if (/<head[^>]*>/i.test(html)) {\n    return html.replace(/<head[^>]*>/i, (open) => `${open}${prelude}`);\n  }\n  if (/<html[^>]*>/i.test(html)) {\n    return html.replace(/<html[^>]*>/i, (open) => `${open}<head>${prelude}</head>`);\n  }\n  return `${prelude}${html}`;\n}\n\nfunction nappletNamespacePrelude(domains: string[]): void {\n  const target = window as Window & { napplet?: Record<string, unknown> };\n  const allowed = new Set(domains);\n  const requestTimeoutMs = 30_000;\n\n  type RuntimeMessage = { type: string; id?: string; [key: string]: unknown };\n  type Listener = (event: MessageEvent) => void;\n\n  function id(): string {\n    if (target.crypto?.randomUUID) return target.crypto.randomUUID();\n    return `napplet-${Date.now()}-${Math.random().toString(16).slice(2)}`;\n  }\n\n  function post(message: RuntimeMessage): void {\n    target.parent.postMessage(message, '*');\n  }\n\n  function listen(listener: Listener): () => void {\n    target.addEventListener('message', listener);\n    return () => target.removeEventListener('message', listener);\n  }\n\n  function isParentMessage(event: MessageEvent): boolean {\n    return event.source === target.parent;\n  }\n\n  function request<T>(\n    message: RuntimeMessage,\n    resultType: string,\n    map: (message: RuntimeMessage) => T,\n    options: { rejectOnError?: boolean } = {},\n  ): Promise<T> {\n    const requestId = message.id ?? id();\n    const outbound = { ...message, id: requestId };\n    return new Promise<T>((resolve, reject) => {\n      const off = listen((event) => {\n        if (!isParentMessage(event)) return;\n        const incoming = event.data;\n        if (typeof incoming !== 'object' || incoming === null) return;\n        const msg = incoming as RuntimeMessage;\n        if (msg.type !== resultType && msg.type !== `${message.type}.error`) return;\n        if (msg.id !== requestId) return;\n        off();\n        clearTimeout(timer);\n        const error = typeof msg.error === 'string' ? msg.error : '';\n        if (error && options.rejectOnError !== false) {\n          reject(new Error(error));\n          return;\n        }\n        try {\n          resolve(map(msg));\n        } catch (err) {\n          reject(err);\n        }\n      });\n      const timer = setTimeout(() => {\n        off();\n        reject(new Error(`${message.type} timed out`));\n      }, requestTimeoutMs);\n      post(outbound);\n    });\n  }\n\n  function fire(message: RuntimeMessage): void {\n    post(message);\n  }\n\n  function isConventionTopic(topic: string): boolean {\n    const pathEnd = topic.search(/[?#]/);\n    const path = pathEnd === -1 ? topic : topic.slice(0, pathEnd);\n    return /^napplet:[^/?#]+\\/[^/?#]+$/.test(path);\n  }\n\n  function normalizeConventionUri(\n    topic: unknown,\n    hasExplicitPayload: boolean,\n  ): { topic: string; payload?: Record<string, string> } {\n    if (typeof topic !== 'string') throw new TypeError('INC topic must be text');\n    if (!isConventionTopic(topic)) return { topic };\n    if (topic.includes('#')) throw new TypeError('Convention topics cannot contain fragments');\n    const queryStart = topic.indexOf('?');\n    if (queryStart === -1) {\n      return { topic };\n    }\n    if (hasExplicitPayload) {\n      throw new TypeError('Convention queries cannot be combined with an explicit payload');\n    }\n\n    const entries: Array<[string, string]> = [];\n    const names = new Set<string>();\n    const query = topic.slice(queryStart + 1);\n    if (query) {\n      for (const pair of query.split('&')) {\n        const separator = pair.indexOf('=');\n        if (separator < 0) {\n          throw new TypeError('Convention query parameters must use name=value form');\n        }\n        let name: string;\n        let value: string;\n        try {\n          name = decodeURIComponent(pair.slice(0, separator));\n          value = decodeURIComponent(pair.slice(separator + 1));\n        } catch {\n          throw new TypeError('Convention query contains malformed percent encoding');\n        }\n        if (names.has(name)) throw new TypeError('Convention query names must be unique');\n        names.add(name);\n        entries.push([name, value]);\n      }\n    }\n    return { topic: topic.slice(0, queryStart), payload: Object.fromEntries(entries) };\n  }\n\n  function resultOrError(msg: RuntimeMessage): Record<string, unknown> {\n    return msg;\n  }\n\n  function withoutEnvelope(msg: Record<string, unknown>): Record<string, unknown> {\n    const { type: _type, id: _id, ...result } = msg;\n    return result;\n  }\n\n  function fieldOrThrow<T>(msg: RuntimeMessage, field: string, fallback: string): T {\n    if (Object.prototype.hasOwnProperty.call(msg, field)) return msg[field] as T;\n    throw new Error(typeof msg.error === 'string' ? msg.error : fallback);\n  }\n\n  function voidResult(msg: RuntimeMessage, fallback: string): void {\n    if (typeof msg.error === 'string' && msg.error) throw new Error(msg.error);\n    if (msg.ok === false) throw new Error(fallback);\n  }\n\n  function subscriptionHandle(close: () => void): { close(): void } {\n    let closed = false;\n    return {\n      close() {\n        if (closed) return;\n        closed = true;\n        close();\n      },\n    };\n  }\n\n  function makeShell(): Record<string, unknown> {\n    type ShellEnvironment = {\n      capabilities: Readonly<{ domains: readonly string[] }>;\n      services: readonly string[];\n    };\n    type ReadyHandler = (environment: ShellEnvironment) => void;\n\n    const emptyServices = Object.freeze([] as string[]);\n    const readyHandlers = new Set<ReadyHandler>();\n    let environment: ShellEnvironment | undefined;\n    let resolveReady: (environment: ShellEnvironment) => void = () => undefined;\n    const ready = new Promise<ShellEnvironment>((resolve) => {\n      resolveReady = resolve;\n    });\n\n    const off = listen((event) => {\n      if (!isParentMessage(event) || environment) return;\n      const incoming = event.data;\n      if (typeof incoming !== 'object' || incoming === null) return;\n      const message = incoming as RuntimeMessage;\n      if (message.type !== 'shell.init') return;\n\n      const rawCapabilities = message.capabilities;\n      const rawDomains = typeof rawCapabilities === 'object' && rawCapabilities !== null\n        ? (rawCapabilities as Record<string, unknown>).domains\n        : undefined;\n      if (!Array.isArray(rawDomains)) return;\n\n      const domains = freezeStrings(rawDomains);\n      const services = freezeStrings(Array.isArray(message.services) ? message.services : []);\n      environment = Object.freeze({\n        capabilities: Object.freeze({ domains }),\n        services,\n      });\n      off();\n      resolveReady(environment);\n      for (const handler of readyHandlers) handler(environment);\n      readyHandlers.clear();\n    });\n\n    function freezeStrings(values: readonly unknown[]): readonly string[] {\n      const seen = new Set<string>();\n      const strings: string[] = [];\n      for (const value of values) {\n        if (typeof value !== 'string' || value.length === 0 || seen.has(value)) continue;\n        seen.add(value);\n        strings.push(value);\n      }\n      return Object.freeze(strings);\n    }\n\n    function supports(domain: string): boolean {\n      return typeof domain === 'string' && environment?.capabilities.domains.includes(domain) === true;\n    }\n\n    const shell = {\n      ready: () => ready,\n      supports,\n      get services(): readonly string[] {\n        return environment?.services ?? emptyServices;\n      },\n      set services(_services: readonly string[]) {\n        // Ignore napplet/shim reassignment; NAP-SHELL services stay runtime-owned.\n      },\n      onReady(handler: ReadyHandler) {\n        if (environment) {\n          handler(environment);\n          return subscriptionHandle(() => undefined);\n        }\n        readyHandlers.add(handler);\n        return subscriptionHandle(() => readyHandlers.delete(handler));\n      },\n    };\n\n    post({ type: 'shell.ready' });\n    return shell;\n  }\n\n  function domainEventHandle(\n    eventType: string,\n    callback: (event: unknown) => void,\n    select: (message: RuntimeMessage) => unknown = (message) => message.event,\n  ): { close(): void } {\n    const off = listen((event) => {\n      if (!isParentMessage(event)) return;\n      const msg = event.data as RuntimeMessage;\n      if (typeof msg === 'object' && msg !== null && msg.type === eventType) callback(select(msg));\n    });\n    return subscriptionHandle(off);\n  }\n\n  function makeRelay(): Record<string, unknown> {\n    return {\n      subscribe(filters: unknown, onEvent: (result: unknown) => void, onEose: () => void, options?: { relay?: string }) {\n        const subId = id();\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg !== 'object' || msg === null || msg.subId !== subId) return;\n          if (msg.type === 'relay.event') onEvent(msg.result);\n          else if (msg.type === 'relay.eose') onEose();\n          else if (msg.type === 'relay.closed') off();\n        });\n        fire({\n          type: 'relay.subscribe',\n          id: id(),\n          subId,\n          filters: Array.isArray(filters) ? filters : [filters],\n          ...(options?.relay ? { relay: options.relay } : {}),\n        });\n        return subscriptionHandle(() => {\n          fire({ type: 'relay.close', id: id(), subId });\n          off();\n        });\n      },\n      publish(template: unknown) {\n        return request(\n          { type: 'relay.publish', event: template },\n          'relay.publish.result',\n          (msg) => {\n            if (!msg.event) throw new Error('relay.publish.result missing event');\n            return msg.event;\n          },\n        );\n      },\n      publishEncrypted(template: unknown, recipient: string, encryption = 'nip44') {\n        return request(\n          { type: 'relay.publishEncrypted', event: template, recipient, encryption },\n          'relay.publishEncrypted.result',\n          (msg) => {\n            if (!msg.event) throw new Error('relay.publishEncrypted.result missing event');\n            return msg.event;\n          },\n        );\n      },\n      query(filters: unknown) {\n        return request(\n          { type: 'relay.query', filters: Array.isArray(filters) ? filters : [filters] },\n          'relay.query.result',\n          (msg) => Array.isArray(msg.events) ? msg.events : [],\n        );\n      },\n    };\n  }\n\n  function makeInc(): Record<string, unknown> {\n    type IncEvent = { topic: string; sender: string; payload?: unknown };\n    type TopicState = {\n      handlers: Set<(event: IncEvent) => void>;\n      offEvent: () => void;\n      offResult: () => void;\n    };\n    const topicStates = new Map<string, TopicState>();\n    type ChannelEvent = { channelId: string; sender: string; payload?: unknown };\n    type ChannelClosed = { channelId: string; reason?: string };\n    type ChannelState = {\n      channelId: string;\n      peer: string;\n      eventHandlers: Set<(event: ChannelEvent) => void>;\n      closedHandlers: Set<(closed: ChannelClosed) => void>;\n      pendingEvents: ChannelEvent[];\n      closed?: ChannelClosed;\n    };\n    const maxRetainedEvents = 32;\n    const channelStates = new Map<string, ChannelState>();\n    const openedHandlers = new Set<(handle: Record<string, unknown>) => void>();\n    const pendingOpened: ChannelState[] = [];\n    const unopenedEvents = new Map<string, ChannelEvent[]>();\n    const unopenedClosed = new Map<string, ChannelClosed>();\n\n    function stableSubscriptionTopic(topic: unknown): string {\n      if (typeof topic !== 'string') throw new TypeError('INC topic must be text');\n      if (isConventionTopic(topic) && (topic.includes('?') || topic.includes('#'))) {\n        throw new TypeError('INC subscriptions require a queryless topic identity');\n      }\n      return topic;\n    }\n\n    function closeChannelState(state: ChannelState, closed: ChannelClosed, notifyShell: boolean): void {\n      if (state.closed) return;\n      state.closed = closed;\n      if (notifyShell) fire({ type: 'inc.channel.close', channelId: state.channelId });\n      for (const handler of state.closedHandlers) handler(closed);\n    }\n\n    function makeChannelHandle(state: ChannelState): Record<string, unknown> {\n      return {\n        id: state.channelId,\n        peer: state.peer,\n        emit(payload?: unknown) {\n          if (state.closed) return;\n          fire({ type: 'inc.channel.emit', channelId: state.channelId, ...(payload === undefined ? {} : { payload }) });\n        },\n        on(handler: (event: ChannelEvent) => void) {\n          if (typeof handler !== 'function') throw new TypeError('INC channel event handler must be a function');\n          state.eventHandlers.add(handler);\n          const pending = state.pendingEvents.splice(0);\n          for (const event of pending) handler(event);\n          return subscriptionHandle(() => state.eventHandlers.delete(handler));\n        },\n        onClosed(handler: (closed: ChannelClosed) => void) {\n          if (typeof handler !== 'function') throw new TypeError('INC channel close handler must be a function');\n          state.closedHandlers.add(handler);\n          if (state.closed) handler(state.closed);\n          return subscriptionHandle(() => state.closedHandlers.delete(handler));\n        },\n        close() {\n          closeChannelState(state, { channelId: state.channelId }, true);\n        },\n      };\n    }\n\n    function materializeChannel(channelId: string, peer: string): ChannelState {\n      const existing = channelStates.get(channelId);\n      if (existing) return existing;\n      const state: ChannelState = {\n        channelId,\n        peer,\n        eventHandlers: new Set(),\n        closedHandlers: new Set(),\n        pendingEvents: unopenedEvents.get(channelId) ?? [],\n      };\n      unopenedEvents.delete(channelId);\n      channelStates.set(channelId, state);\n      const closed = unopenedClosed.get(channelId);\n      unopenedClosed.delete(channelId);\n      if (closed) closeChannelState(state, closed, false);\n      return state;\n    }\n\n    function deliverOpened(state: ChannelState): void {\n      const handle = makeChannelHandle(state);\n      if (openedHandlers.size > 0) {\n        for (const handler of openedHandlers) handler(handle);\n        return;\n      }\n      pendingOpened.push(state);\n    }\n\n    function receiveChannelEvent(channelId: string, sender: string, payloadPresent: boolean, payload: unknown): void {\n      const event: ChannelEvent = payloadPresent ? { channelId, sender, payload } : { channelId, sender };\n      const state = channelStates.get(channelId);\n      if (!state) {\n        const pending = unopenedEvents.get(channelId) ?? [];\n        if (pending.length >= maxRetainedEvents) {\n          unopenedEvents.delete(channelId);\n          unopenedClosed.set(channelId, { channelId, reason: 'buffer overflow' });\n          fire({ type: 'inc.channel.close', channelId });\n          return;\n        }\n        pending.push(event);\n        unopenedEvents.set(channelId, pending);\n        return;\n      }\n      if (state.closed) return;\n      if (state.eventHandlers.size > 0) {\n        for (const handler of state.eventHandlers) handler(event);\n        return;\n      }\n      if (state.pendingEvents.length >= maxRetainedEvents) {\n        closeChannelState(state, { channelId, reason: 'buffer overflow' }, true);\n        return;\n      }\n      state.pendingEvents.push(event);\n    }\n\n    listen((event) => {\n      if (!isParentMessage(event)) return;\n      const msg = event.data as RuntimeMessage;\n      if (typeof msg !== 'object' || msg === null || typeof msg.type !== 'string') return;\n      if (msg.type === 'inc.channel.opened' && typeof msg.channelId === 'string' && typeof msg.peer === 'string') {\n        deliverOpened(materializeChannel(msg.channelId, msg.peer));\n        return;\n      }\n      if (msg.type === 'inc.channel.event' && typeof msg.channelId === 'string' && typeof msg.sender === 'string') {\n        receiveChannelEvent(msg.channelId, msg.sender, Object.prototype.hasOwnProperty.call(msg, 'payload'), msg.payload);\n        return;\n      }\n      if (msg.type === 'inc.channel.closed' && typeof msg.channelId === 'string') {\n        const closed: ChannelClosed = typeof msg.reason === 'string'\n          ? { channelId: msg.channelId, reason: msg.reason }\n          : { channelId: msg.channelId };\n        const state = channelStates.get(msg.channelId);\n        if (state) closeChannelState(state, closed, false);\n        else unopenedClosed.set(msg.channelId, closed);\n      }\n    });\n\n    return {\n      emit(topic: string, payload?: unknown) {\n        const transposed = normalizeConventionUri(topic, arguments.length > 1);\n        fire({\n          type: 'inc.emit',\n          topic: transposed.topic,\n          ...(transposed.payload === undefined && payload === undefined ? {} : { payload: transposed.payload ?? payload }),\n        });\n      },\n      on(topic: string, callback: (event: IncEvent) => void) {\n        const stableTopic = stableSubscriptionTopic(topic);\n        if (typeof callback !== 'function') throw new TypeError('INC subscription handler must be a function');\n        let state = topicStates.get(stableTopic);\n        if (!state) {\n          const handlers = new Set<(event: IncEvent) => void>();\n          const subscriptionId = id();\n          const offEvent = listen((event) => {\n            if (!isParentMessage(event)) return;\n            const msg = event.data as RuntimeMessage;\n            if (\n              typeof msg !== 'object'\n              || msg === null\n              || msg.type !== 'inc.event'\n              || msg.topic !== stableTopic\n              || typeof msg.sender !== 'string'\n            ) return;\n            const delivered: IncEvent = Object.prototype.hasOwnProperty.call(msg, 'payload')\n              ? { topic: stableTopic, sender: msg.sender, payload: msg.payload }\n              : { topic: stableTopic, sender: msg.sender };\n            for (const handler of handlers) handler(delivered);\n          });\n          const offResult = listen((event) => {\n            if (!isParentMessage(event)) return;\n            const msg = event.data as RuntimeMessage;\n            if (typeof msg !== 'object' || msg === null || msg.type !== 'inc.subscribe.result' || msg.id !== subscriptionId) return;\n            offResult();\n            if (typeof msg.error === 'string' && msg.error) {\n              offEvent();\n              topicStates.delete(stableTopic);\n            }\n          });\n          state = { handlers, offEvent, offResult };\n          topicStates.set(stableTopic, state);\n          fire({ type: 'inc.subscribe', id: subscriptionId, topic: stableTopic });\n        }\n        state.handlers.add(callback);\n        return subscriptionHandle(() => {\n          const current = topicStates.get(stableTopic);\n          if (!current) return;\n          current.handlers.delete(callback);\n          if (current.handlers.size !== 0) return;\n          current.offEvent();\n          current.offResult();\n          topicStates.delete(stableTopic);\n          fire({ type: 'inc.unsubscribe', topic: stableTopic });\n        });\n      },\n      channel: {\n        open(targetDTag: string) {\n          return request(\n            { type: 'inc.channel.open', target: targetDTag },\n            'inc.channel.open.result',\n            (msg) => {\n              if (typeof msg.channelId !== 'string' || typeof msg.peer !== 'string') {\n                throw new Error('inc.channel.open.result missing channel identity');\n              }\n              return makeChannelHandle(materializeChannel(msg.channelId, msg.peer));\n            },\n          );\n        },\n        onOpened(handler: (handle: Record<string, unknown>) => void) {\n          if (typeof handler !== 'function') throw new TypeError('INC opened handler must be a function');\n          openedHandlers.add(handler);\n          const pending = pendingOpened.splice(0);\n          for (const state of pending) handler(makeChannelHandle(state));\n          return subscriptionHandle(() => openedHandlers.delete(handler));\n        },\n        list() {\n          return request(\n            { type: 'inc.channel.list' },\n            'inc.channel.list.result',\n            (msg) => Object.freeze((Array.isArray(msg.channels) ? msg.channels : []).flatMap((channel) => (\n              channel\n              && typeof channel === 'object'\n              && typeof (channel as Record<string, unknown>).id === 'string'\n              && typeof (channel as Record<string, unknown>).peer === 'string'\n                ? [Object.freeze({\n                  id: (channel as Record<string, unknown>).id as string,\n                  peer: (channel as Record<string, unknown>).peer as string,\n                })]\n                : []\n            ))),\n          );\n        },\n        broadcast(payload?: unknown) {\n          fire({ type: 'inc.channel.broadcast', ...(payload === undefined ? {} : { payload }) });\n        },\n      },\n    };\n  }\n\n  function makeStorage(): Record<string, unknown> {\n    const makeScope = (scope?: string) => ({\n      getItem(key: string) {\n        return request(\n          { type: 'storage.get', key, ...(scope ? { scope } : {}) },\n          'storage.get.result',\n          (msg) => msg.value ?? null,\n        );\n      },\n      setItem(key: string, value: string) {\n        return request(\n          { type: 'storage.set', key, value, ...(scope ? { scope } : {}) },\n          'storage.set.result',\n          () => undefined,\n        );\n      },\n      removeItem(key: string) {\n        return request(\n          { type: 'storage.remove', key, ...(scope ? { scope } : {}) },\n          'storage.remove.result',\n          () => undefined,\n        );\n      },\n      keys() {\n        return request(\n          { type: 'storage.keys', ...(scope ? { scope } : {}) },\n          'storage.keys.result',\n          (msg) => Array.isArray(msg.keys) ? msg.keys : [],\n        );\n      },\n    });\n    return { ...makeScope(), instance: makeScope('instance') };\n  }\n\n  function makeIdentity(): Record<string, unknown> {\n    const read = <T>(type: string, field: string, fallback: T, payload: Record<string, unknown> = {}) => request(\n      { type, ...payload },\n      `${type}.result`,\n      (msg) => (Object.prototype.hasOwnProperty.call(msg, field) ? msg[field] : fallback) as T,\n      { rejectOnError: type !== 'identity.getPublicKey' },\n    );\n    return Object.freeze({\n      getPublicKey: () => read('identity.getPublicKey', 'pubkey', ''),\n      getRelays: () => read('identity.getRelays', 'relays', {}),\n      getProfile: () => read('identity.getProfile', 'profile', null),\n      getFollows: () => read('identity.getFollows', 'pubkeys', []),\n      getList: (listType: string) => read('identity.getList', 'entries', [], { listType }),\n      getZaps: () => read('identity.getZaps', 'zaps', []),\n      getMutes: () => read('identity.getMutes', 'pubkeys', []),\n      getBlocked: () => read('identity.getBlocked', 'pubkeys', []),\n      getBadges: () => read('identity.getBadges', 'badges', []),\n      onChanged(handler: (pubkey: string) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg !== 'object' || msg === null || msg.type !== 'identity.changed') return;\n          if (typeof msg.pubkey === 'string') handler(msg.pubkey);\n        });\n        return subscriptionHandle(off);\n      },\n    });\n  }\n\n  function makeTheme(): Record<string, unknown> {\n    return {\n      get: () => request({ type: 'theme.get' }, 'theme.get.result', (msg) => msg.theme),\n      onChanged(handler: (theme: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'theme.changed') handler(msg.theme);\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  const keyActionCallbacks = new Map<string, Set<() => void>>();\n  const keyBindingActions = new Map<string, string>();\n  const modifierKeys = new Set(['Control', 'Alt', 'Shift', 'Meta']);\n  const reservedKeyNames = new Set(['Tab', 'Escape']);\n  const nonTextInputTypes = new Set([\n    'button',\n    'checkbox',\n    'color',\n    'file',\n    'hidden',\n    'image',\n    'radio',\n    'range',\n    'reset',\n    'submit',\n  ]);\n  let keysSmartForwardingInstalled = false;\n\n  function normalizeKeyName(key: unknown): string {\n    if (typeof key !== 'string') return '';\n    return key.length === 1 ? key.toUpperCase() : key;\n  }\n\n  function keyComboKey(value: {\n    ctrl: boolean;\n    alt: boolean;\n    shift: boolean;\n    meta: boolean;\n    key: string;\n  }): string {\n    return `${value.ctrl}|${value.alt}|${value.shift}|${value.meta}|${normalizeKeyName(value.key)}`;\n  }\n\n  function bindingComboKey(binding: unknown): string | null {\n    if (typeof binding !== 'string' || binding.trim() === '') return null;\n    const parts = binding.split('+');\n    const key = parts.pop()?.trim();\n    if (!key) return null;\n    const combo = { ctrl: false, alt: false, shift: false, meta: false, key };\n    for (const raw of parts) {\n      const token = raw.trim().toLowerCase();\n      if (!token) continue;\n      if (token === 'ctrl' || token === 'control') combo.ctrl = true;\n      else if (token === 'alt' || token === 'option') combo.alt = true;\n      else if (token === 'shift') combo.shift = true;\n      else if (token === 'meta' || token === 'cmd' || token === 'command' || token === 'win' || token === 'super') combo.meta = true;\n      else return null;\n    }\n    return keyComboKey(combo);\n  }\n\n  function eventComboKey(event: {\n    key?: unknown;\n    ctrlKey?: unknown;\n    altKey?: unknown;\n    shiftKey?: unknown;\n    metaKey?: unknown;\n  }): string | null {\n    const key = typeof event.key === 'string' ? event.key : '';\n    if (!key) return null;\n    return keyComboKey({\n      ctrl: Boolean(event.ctrlKey),\n      alt: Boolean(event.altKey),\n      shift: Boolean(event.shiftKey),\n      meta: Boolean(event.metaKey),\n      key,\n    });\n  }\n\n  function isTextEntryTarget(value: unknown): boolean {\n    if (!value || typeof value !== 'object') return false;\n    const targetNode = value as {\n      tagName?: unknown;\n      type?: unknown;\n      isContentEditable?: unknown;\n      closest?: (selector: string) => unknown;\n    };\n    if (targetNode.isContentEditable === true) return true;\n    const tagName = typeof targetNode.tagName === 'string' ? targetNode.tagName.toLowerCase() : '';\n    if (tagName === 'textarea' || tagName === 'select') return true;\n    if (tagName === 'input') {\n      const type = typeof targetNode.type === 'string' && targetNode.type ? targetNode.type.toLowerCase() : 'text';\n      return !nonTextInputTypes.has(type);\n    }\n    if (typeof targetNode.closest === 'function') {\n      try {\n        return Boolean(targetNode.closest('[contenteditable=\"\"],[contenteditable=\"true\"],[contenteditable=\"plaintext-only\"]'));\n      } catch {\n        return false;\n      }\n    }\n    return false;\n  }\n\n  function rememberKeyBinding(actionId: unknown, binding: unknown): void {\n    if (typeof actionId !== 'string') return;\n    const combo = bindingComboKey(binding);\n    if (combo) keyBindingActions.set(combo, actionId);\n  }\n\n  function removeKeyBindingsForAction(actionId: string): void {\n    for (const [combo, boundActionId] of keyBindingActions) {\n      if (boundActionId === actionId) keyBindingActions.delete(combo);\n    }\n  }\n\n  function replaceKeyBindings(bindings: unknown): void {\n    keyBindingActions.clear();\n    if (!Array.isArray(bindings)) return;\n    for (const binding of bindings) {\n      if (!binding || typeof binding !== 'object') continue;\n      const entry = binding as { actionId?: unknown; key?: unknown };\n      rememberKeyBinding(entry.actionId, entry.key);\n    }\n  }\n\n  function notifyKeyAction(actionId: string): void {\n    for (const callback of keyActionCallbacks.get(actionId) ?? []) callback();\n  }\n\n  function forwardKeyEvent(event: {\n    key?: unknown;\n    code?: unknown;\n    ctrl?: unknown;\n    alt?: unknown;\n    shift?: unknown;\n    meta?: unknown;\n    ctrlKey?: unknown;\n    altKey?: unknown;\n    shiftKey?: unknown;\n    metaKey?: unknown;\n  } = {}): void {\n    fire({\n      type: 'keys.forward',\n      key: typeof event.key === 'string' ? event.key : '',\n      code: typeof event.code === 'string' ? event.code : '',\n      ctrl: Boolean(event.ctrl ?? event.ctrlKey),\n      alt: Boolean(event.alt ?? event.altKey),\n      shift: Boolean(event.shift ?? event.shiftKey),\n      meta: Boolean(event.meta ?? event.metaKey),\n    });\n  }\n\n  function installKeysSmartForwarding(): void {\n    if (keysSmartForwardingInstalled) return;\n    keysSmartForwardingInstalled = true;\n\n    listen((event) => {\n      if (!isParentMessage(event)) return;\n      const msg = event.data as RuntimeMessage;\n      if (typeof msg === 'object' && msg !== null && msg.type === 'keys.bindings') {\n        replaceKeyBindings(msg.bindings);\n      }\n    });\n\n    const documentLike = target.document as {\n      activeElement?: unknown;\n      addEventListener?: (type: string, listener: (event: Event) => void) => void;\n    } | undefined;\n    const listenerTarget = typeof documentLike?.addEventListener === 'function' ? documentLike : target;\n    if (typeof listenerTarget.addEventListener !== 'function') return;\n\n    listenerTarget.addEventListener('keydown', (event: Event) => {\n      const keyEvent = event as Event & {\n        key?: string;\n        code?: string;\n        ctrlKey?: boolean;\n        altKey?: boolean;\n        shiftKey?: boolean;\n        metaKey?: boolean;\n        isComposing?: boolean;\n        target?: unknown;\n        preventDefault?: () => void;\n      };\n      if (keyEvent.isComposing) return;\n      if (typeof keyEvent.key === 'string' && modifierKeys.has(keyEvent.key)) return;\n      if (isTextEntryTarget(keyEvent.target ?? documentLike?.activeElement)) return;\n\n      const combo = eventComboKey(keyEvent);\n      const actionId = combo ? keyBindingActions.get(combo) : undefined;\n      const isReserved = typeof keyEvent.key === 'string' && reservedKeyNames.has(keyEvent.key);\n      if (actionId && !isReserved) {\n        keyEvent.preventDefault?.();\n        notifyKeyAction(actionId);\n        return;\n      }\n\n      forwardKeyEvent(keyEvent);\n    });\n  }\n\n  function makeKeys(): Record<string, unknown> {\n    installKeysSmartForwarding();\n    return {\n      forward: forwardKeyEvent,\n      registerAction: (action: unknown) => request(\n        { type: 'keys.registerAction', action },\n        'keys.registerAction.result',\n        resultOrError,\n      ).then((result) => {\n        const actionRecord = action && typeof action === 'object' ? action as { id?: unknown } : {};\n        const resultRecord = result as { actionId?: unknown; binding?: unknown };\n        rememberKeyBinding(\n          typeof resultRecord.actionId === 'string' ? resultRecord.actionId : actionRecord.id,\n          resultRecord.binding,\n        );\n        return result;\n      }),\n      unregisterAction: (actionId: string) => {\n        removeKeyBindingsForAction(actionId);\n        fire({ type: 'keys.unregisterAction', actionId });\n      },\n      onAction(actionId: string, callback: () => void) {\n        let callbacks = keyActionCallbacks.get(actionId);\n        if (!callbacks) {\n          callbacks = new Set();\n          keyActionCallbacks.set(actionId, callbacks);\n        }\n        callbacks.add(callback);\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'keys.action' && msg.actionId === actionId) callback();\n        });\n        return subscriptionHandle(() => {\n          off();\n          callbacks.delete(callback);\n          if (callbacks.size === 0) keyActionCallbacks.delete(actionId);\n        });\n      },\n    };\n  }\n\n  function makeMedia(): Record<string, unknown> {\n    const on = (type: string, sessionId: string, callback: (msg: RuntimeMessage) => void) => {\n      const off = listen((event) => {\n        if (!isParentMessage(event)) return;\n        const msg = event.data as RuntimeMessage;\n        if (typeof msg === 'object' && msg !== null && msg.type === type && msg.sessionId === sessionId) callback(msg);\n      });\n      return subscriptionHandle(off);\n    };\n    return {\n      createSession: (options: unknown) => request(\n        { type: 'media.session.create', ...((options && typeof options === 'object') ? options as Record<string, unknown> : {}) },\n        'media.session.create.result',\n        withoutEnvelope,\n        { rejectOnError: false },\n      ),\n      updateSession: (sessionId: string, metadata: unknown) => fire({ type: 'media.session.update', sessionId, metadata }),\n      destroySession: (sessionId: string) => fire({ type: 'media.session.destroy', sessionId }),\n      reportState: (sessionId: string, state: unknown) => fire({ type: 'media.state', sessionId, ...((state && typeof state === 'object') ? state as Record<string, unknown> : {}) }),\n      reportCapabilities: (sessionId: string, actions: unknown) => fire({ type: 'media.capabilities', sessionId, actions }),\n      sendCommand: (sessionId: string, action: string, value?: unknown) => fire({ type: 'media.command', sessionId, action, ...(value === undefined ? {} : { value }) }),\n      onCommand: (sessionId: string, callback: (action: unknown, value?: unknown) => void) => on('media.command', sessionId, (msg) => callback(msg.action, msg.value)),\n      onState: (sessionId: string, callback: (state: Record<string, unknown>) => void) => on('media.state', sessionId, (msg) => callback({\n        status: msg.status,\n        position: msg.position,\n        duration: msg.duration,\n        volume: msg.volume,\n      })),\n      onCapabilities: (sessionId: string, callback: (actions: unknown) => void) => on('media.capabilities', sessionId, (msg) => callback(msg.actions)),\n      onControls: (sessionId: string, callback: (controls: unknown) => void) => on('media.controls', sessionId, (msg) => callback(msg.controls)),\n    };\n  }\n\n  function makeNotify(): Record<string, unknown> {\n    const on = (type: string, callback: (msg: RuntimeMessage) => void) => {\n      const off = listen((event) => {\n        if (!isParentMessage(event)) return;\n        const msg = event.data as RuntimeMessage;\n        if (typeof msg === 'object' && msg !== null && msg.type === type) callback(msg);\n      });\n      return subscriptionHandle(off);\n    };\n    return {\n      send: (notification: Record<string, unknown>) => request(\n        { type: 'notify.send', ...notification },\n        'notify.send.result',\n        (msg) => ({ notificationId: fieldOrThrow(msg, 'notificationId', 'notify.send.result missing notificationId') }),\n      ),\n      dismiss: (notificationId: string) => fire({ type: 'notify.dismiss', notificationId }),\n      badge: (count: number) => fire({ type: 'notify.badge', count }),\n      registerChannel: (channel: Record<string, unknown>) => fire({ type: 'notify.channel.register', ...channel }),\n      requestPermission: (channel?: string) => request(\n        { type: 'notify.permission.request', ...(channel ? { channel } : {}) },\n        'notify.permission.result',\n        (msg) => ({ granted: msg.granted }),\n      ),\n      onAction: (callback: (notificationId: unknown, actionId: unknown) => void) => on('notify.action', (msg) => callback(msg.notificationId, msg.actionId)),\n      onClicked: (callback: (notificationId: unknown) => void) => on('notify.clicked', (msg) => callback(msg.notificationId)),\n      onDismissed: (callback: (notificationId: unknown, reason: unknown) => void) => on('notify.dismissed', (msg) => callback(msg.notificationId, msg.reason)),\n      onControls: (callback: (controls: unknown) => void) => on('notify.controls', (msg) => callback(msg.controls)),\n    };\n  }\n\n  function makeConfig(): Record<string, unknown> {\n    let schema: unknown = null;\n    return {\n      registerSchema: (nextSchema: unknown, version?: number) => request(\n        { type: 'config.registerSchema', schema: nextSchema, ...(version === undefined ? {} : { version }) },\n        'config.registerSchema.result',\n        (msg) => {\n          if (!msg.error) schema = nextSchema;\n          return undefined;\n        },\n      ),\n      get: () => request({ type: 'config.get' }, 'config.values', (msg) => msg.values ?? {}),\n      subscribe(callback: (values: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'config.values') callback(msg.values ?? {});\n        });\n        fire({ type: 'config.subscribe' });\n        return subscriptionHandle(() => {\n          fire({ type: 'config.unsubscribe' });\n          off();\n        });\n      },\n      openSettings: (options?: unknown) => fire({ type: 'config.openSettings', ...((options && typeof options === 'object') ? options as Record<string, unknown> : {}) }),\n      onSchemaError(callback: (error: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'config.schemaError') callback(msg);\n        });\n        return off;\n      },\n      get schema() {\n        return schema;\n      },\n    };\n  }\n\n  function makeResource(): Record<string, unknown> {\n    const objectUrls = new Set<string>();\n    const bytes = (url: string) => request({ type: 'resource.bytes', url }, 'resource.bytes.result', (msg) => msg.blob);\n    return {\n      info: () => request({ type: 'resource.info' }, 'resource.info.result', (msg) => msg.info),\n      bytes,\n      bytesMany: (urls: string[]) => request({ type: 'resource.bytesMany', urls }, 'resource.bytesMany.result', (msg) => Array.isArray(msg.items) ? msg.items : []),\n      bytesAsObjectURL(url: string) {\n        let objectUrl = '';\n        const handle = {\n          get url() {\n            return objectUrl;\n          },\n          revoke() {\n            if (objectUrl) {\n              URL.revokeObjectURL(objectUrl);\n              objectUrls.delete(objectUrl);\n              objectUrl = '';\n            }\n          },\n        };\n        void bytes(url).then((blob) => {\n          objectUrl = URL.createObjectURL(blob as Blob);\n          objectUrls.add(objectUrl);\n        });\n        return handle;\n      },\n      hydrateResourceCache: () => undefined,\n      revokeAllObjectURLs() {\n        for (const url of objectUrls) URL.revokeObjectURL(url);\n        objectUrls.clear();\n      },\n    };\n  }\n\n  function makeCvm(): Record<string, unknown> {\n    const req = <T>(type: string, payload: Record<string, unknown>, map: (msg: RuntimeMessage) => T) => request(\n      { type, ...payload },\n      `${type}.result`,\n      map,\n    );\n    const cvmRequest = (server: unknown, message: unknown, options?: Record<string, unknown>) => req(\n      'cvm.request',\n      { server, message, ...(options === undefined ? {} : { options }) },\n      (msg) => fieldOrThrow(msg, 'message', 'cvm.request.result missing message'),\n    );\n    const mcpCall = async (\n      server: unknown,\n      method: string,\n      params?: Record<string, unknown>,\n      options?: Record<string, unknown>,\n    ) => {\n      const reply = await cvmRequest(server, {\n        jsonrpc: '2.0',\n        id: id(),\n        method,\n        ...(params === undefined ? {} : { params }),\n      }, options) as { result?: unknown; error?: { message?: string } | string };\n      if (reply.error !== undefined) {\n        const error = reply.error;\n        throw new Error(typeof error === 'object' && error !== null && typeof error.message === 'string'\n          ? `${method}: ${error.message}`\n          : `${method} failed`);\n      }\n      return reply.result;\n    };\n    return {\n      discover: (query?: unknown) => req('cvm.discover', query === undefined ? {} : { query }, (msg) => Array.isArray(msg.servers) ? msg.servers : []),\n      request: cvmRequest,\n      listTools: async (server: unknown, options?: Record<string, unknown>) => {\n        const result = await mcpCall(server, 'tools/list', undefined, options) as { tools?: unknown[] } | undefined;\n        return result?.tools ?? [];\n      },\n      callTool: (server: unknown, name: string, args?: unknown, options?: Record<string, unknown>) => mcpCall(\n        server,\n        'tools/call',\n        { name, ...(args === undefined ? {} : { arguments: args }) },\n        options,\n      ),\n      listResources: async (server: unknown, options?: Record<string, unknown>) => {\n        const result = await mcpCall(server, 'resources/list', undefined, options) as { resources?: unknown[] } | undefined;\n        return result?.resources ?? [];\n      },\n      readResource: async (server: unknown, uri: string, options?: Record<string, unknown>) => {\n        const result = await mcpCall(server, 'resources/read', { uri }, options) as { contents?: unknown[] } | undefined;\n        const first = result?.contents?.[0];\n        if (!first) throw new Error(`resources/read returned no contents for ${uri}`);\n        return first;\n      },\n      close: (server: unknown) => req('cvm.close', { server }, (msg) => voidResult(msg, 'cvm close failed')),\n      onEvent(callback: (server: unknown, message: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (\n            typeof msg === 'object'\n            && msg !== null\n            && msg.type === 'cvm.event'\n            && msg.server !== undefined\n            && msg.message !== undefined\n          ) {\n            callback(msg.server, msg.message);\n          }\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  function makeOutbox(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>, resultType = `${type}.result`) => request(\n      { type, ...payload },\n      resultType,\n      resultOrError,\n      { rejectOnError: false },\n    );\n    return {\n      getEvent: (eventId: string, options?: Record<string, unknown>) => req('outbox.getEvent', { eventId, ...(options ? { options } : {}) }),\n      query: (filters: unknown, options?: Record<string, unknown>) => req('outbox.query', { filters: Array.isArray(filters) ? filters : [filters], ...(options ? { options } : {}) }),\n      subscribe(filters: unknown, options?: Record<string, unknown>) {\n        const subId = id();\n        const handlers = { event: new Set<(result: unknown) => void>(), closed: new Set<(reason?: unknown) => void>() };\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg !== 'object' || msg === null || msg.subId !== subId) return;\n          if (msg.type === 'outbox.event') for (const handler of handlers.event) handler(msg.result);\n          if (msg.type === 'outbox.closed') {\n            for (const handler of handlers.closed) handler(msg.reason);\n            off();\n          }\n        });\n        fire({ type: 'outbox.subscribe', id: id(), subId, filters: Array.isArray(filters) ? filters : [filters], ...(options ? { options } : {}) });\n        return {\n          on(event: 'event' | 'closed', handler: (value?: unknown) => void) {\n            handlers[event].add(handler);\n            return { close: () => handlers[event].delete(handler) };\n          },\n          close() {\n            fire({ type: 'outbox.close', id: id(), subId });\n            off();\n            handlers.event.clear();\n            handlers.closed.clear();\n          },\n        };\n      },\n      publish: (event: unknown, options?: Record<string, unknown>) => req('outbox.publish', { event, ...(options ? { options } : {}) }),\n      resolveRelays: (targetValue: unknown) => req('outbox.resolveRelays', { target: targetValue }).then((msg) => msg.plan ?? msg),\n    };\n  }\n\n  function makeUpload(): Record<string, unknown> {\n    return {\n      info: () => request({ type: 'upload.info' }, 'upload.info.result', (msg) => fieldOrThrow(msg, 'info', 'upload info unavailable')),\n      upload: (requestPayload: unknown) => request({ type: 'upload.upload', request: requestPayload }, 'upload.upload.result', (msg) => fieldOrThrow(msg, 'result', 'upload failed')),\n      status: (uploadId: string) => request({ type: 'upload.status', uploadId }, 'upload.status.result', (msg) => fieldOrThrow(msg, 'status', 'upload status unavailable')),\n      onStatus(callback: (status: unknown) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (typeof msg === 'object' && msg !== null && msg.type === 'upload.status.changed' && msg.status !== undefined) callback(msg.status);\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  function makeIntent(): Record<string, unknown> {\n    const hasOwn = (value: Record<string, unknown>, key: string): boolean => (\n      Object.prototype.hasOwnProperty.call(value, key)\n    );\n    const normalizeRequest = (value: unknown): Record<string, unknown> => {\n      if (!value || typeof value !== 'object' || Array.isArray(value)) {\n        throw new TypeError('Intent request must be an object');\n      }\n      const supplied = value as Record<string, unknown>;\n      if (hasOwn(supplied, 'sender')) {\n        throw new TypeError('Intent callers cannot supply sender');\n      }\n      const allowed = ['archetype', 'action', 'convention', 'payload', 'handler', 'behavior'];\n      if (Object.keys(supplied).some((field) => !allowed.includes(field))) {\n        throw new TypeError('Intent request contains unsupported fields');\n      }\n      if (typeof supplied.archetype !== 'string' || supplied.archetype.length === 0) {\n        throw new TypeError('Intent request requires an archetype');\n      }\n      const action = supplied.action === undefined ? 'open' : supplied.action;\n      if (typeof action !== 'string' || action.length === 0) {\n        throw new TypeError('Intent action must be a non-empty string');\n      }\n      if (\n        supplied.convention !== undefined\n        && (\n          typeof supplied.convention !== 'string'\n          || !/^napplet:[^/?#\\s]+\\/[^/?#\\s]+$/.test(supplied.convention)\n        )\n      ) {\n        throw new TypeError('Intent convention must be queryless');\n      }\n      if (\n        supplied.handler !== undefined\n        && (typeof supplied.handler !== 'string' || supplied.handler.length === 0)\n      ) {\n        throw new TypeError('Intent handler must be a non-empty string');\n      }\n      const behaviorValue = supplied?.behavior;\n      const behavior = behaviorValue && typeof behaviorValue === 'object'\n        ? behaviorValue as Record<string, unknown>\n        : undefined;\n      if (\n        behaviorValue !== undefined\n        && (\n          !behavior\n          || Array.isArray(behaviorValue)\n          || Object.keys(behavior).some((field) =>\n            field !== 'focus' && field !== 'newWindow' && field !== 'reuse')\n          || (hasOwn(behavior, 'focus') && typeof behavior.focus !== 'boolean')\n          || (hasOwn(behavior, 'newWindow') && typeof behavior.newWindow !== 'boolean')\n          || (hasOwn(behavior, 'reuse') && typeof behavior.reuse !== 'boolean')\n        )\n      ) {\n        throw new TypeError('Intent behavior contains unsupported fields');\n      }\n      const sanitizedBehavior = {\n        ...(typeof behavior?.focus === 'boolean' ? { focus: behavior.focus } : {}),\n        ...(typeof behavior?.newWindow === 'boolean'\n          ? { newWindow: behavior.newWindow }\n          : {}),\n        ...(typeof behavior?.reuse === 'boolean' ? { reuse: behavior.reuse } : {}),\n      };\n      return {\n        archetype: supplied.archetype,\n        action,\n        ...(typeof supplied.convention === 'string'\n          ? { convention: supplied.convention }\n          : {}),\n        ...(hasOwn(supplied, 'payload') ? { payload: supplied.payload } : {}),\n        ...(typeof supplied.handler === 'string' ? { handler: supplied.handler } : {}),\n        ...(Object.keys(sanitizedBehavior).length === 0\n          ? {}\n          : { behavior: sanitizedBehavior }),\n      };\n    };\n    const invoke = (value: unknown) => {\n      const normalized = normalizeRequest(value);\n      return request(\n        {\n          type: 'intent.invoke',\n          request: normalized,\n        },\n        'intent.invoke.result',\n        (msg) => fieldOrThrow(msg, 'result', 'intent.invoke.result missing result'),\n      );\n    };\n    return {\n      invoke,\n      open: (\n        archetype: string,\n        payload?: unknown,\n        opts?: Record<string, unknown>,\n      ) => invoke({\n        archetype,\n        action: 'open',\n        ...(payload === undefined ? {} : { payload }),\n        ...opts,\n      }),\n      available: (archetype: string) => request(\n        { type: 'intent.available', archetype },\n        'intent.available.result',\n        (msg) => fieldOrThrow(msg, 'availability', 'intent.available.result missing availability'),\n      ),\n      handlers: () => request(\n        { type: 'intent.handlers' },\n        'intent.handlers.result',\n        (msg) => fieldOrThrow(msg, 'handlers', 'intent.handlers.result missing handlers'),\n      ),\n      onChanged: (callback: (availability: unknown) => void) => domainEventHandle(\n        'intent.changed',\n        callback,\n        (msg) => msg.availability,\n      ),\n    };\n  }\n\n  function makeWebrtc(): Record<string, unknown> {\n    return {\n      open: (requestPayload?: unknown) => request(\n        { type: 'webrtc.open', request: requestPayload },\n        'webrtc.open.result',\n        (msg) => ({ session: fieldOrThrow(msg, 'session', 'webrtc.open.result missing session') }),\n      ),\n      send: (sessionId: string, payload: unknown) => request(\n        { type: 'webrtc.send', sessionId, payload },\n        'webrtc.send.result',\n        (msg) => voidResult(msg, 'webrtc send failed'),\n      ),\n      close: (sessionId: string, reason?: string) => request(\n        { type: 'webrtc.close', sessionId, ...(reason ? { reason } : {}) },\n        'webrtc.close.result',\n        (msg) => voidResult(msg, 'webrtc close failed'),\n      ),\n      onEvent: (callback: (event: unknown) => void) => domainEventHandle('webrtc.event', callback),\n    };\n  }\n\n  function makeBle(): Record<string, unknown> {\n    const req = (action: string, payload: Record<string, unknown>, map: (msg: RuntimeMessage) => unknown) => request(\n      { type: `ble.${action}`, ...payload },\n      `ble.${action}.result`,\n      map,\n    );\n    return {\n      open: (requestPayload?: unknown) => req('open', { request: requestPayload }, (msg) => ({ session: fieldOrThrow(msg, 'session', 'ble.open.result missing session') })),\n      services: (sessionId: string) => req('services', { sessionId }, (msg) => fieldOrThrow(msg, 'services', 'ble.services.result missing services')),\n      read: (sessionId: string, targetValue: unknown) => req('read', { sessionId, target: targetValue }, (msg) => fieldOrThrow(msg, 'data', 'ble.read.result missing data')),\n      write: (sessionId: string, targetValue: unknown, data: unknown, options?: Record<string, unknown>) => req(\n        'write',\n        { sessionId, target: targetValue, data, ...(options ? { options } : {}) },\n        (msg) => voidResult(msg, 'ble write failed'),\n      ),\n      subscribe: (sessionId: string, targetValue: unknown) => req('subscribe', { sessionId, target: targetValue }, (msg) => voidResult(msg, 'ble subscribe failed')),\n      unsubscribe: (sessionId: string, targetValue: unknown) => req('unsubscribe', { sessionId, target: targetValue }, (msg) => voidResult(msg, 'ble unsubscribe failed')),\n      close: (sessionId: string, reason?: string) => req('close', { sessionId, ...(reason ? { reason } : {}) }, (msg) => voidResult(msg, 'ble close failed')),\n      onEvent: (callback: (event: unknown) => void) => domainEventHandle('ble.event', callback),\n    };\n  }\n\n  function makeSerial(): Record<string, unknown> {\n    return {\n      open: (requestPayload?: unknown) => request(\n        { type: 'serial.open', request: requestPayload },\n        'serial.open.result',\n        (msg) => ({ session: fieldOrThrow(msg, 'session', 'serial.open.result missing session') }),\n      ),\n      write: (sessionId: string, data: Uint8Array | number[]) => request(\n        { type: 'serial.write', sessionId, data: Array.from(data) },\n        'serial.write.result',\n        (msg) => voidResult(msg, 'serial write failed'),\n      ),\n      close: (sessionId: string, reason?: string) => request(\n        { type: 'serial.close', sessionId, ...(reason === undefined ? {} : { reason }) },\n        'serial.close.result',\n        (msg) => voidResult(msg, 'serial close failed'),\n      ),\n      onEvent: (callback: (event: unknown) => void) => domainEventHandle('serial.event', callback),\n    };\n  }\n\n  function makeLink(): Record<string, unknown> {\n    return {\n      open: (url: string, options?: Record<string, unknown>) => request(\n        { type: 'link.open', url, ...(options ? { options } : {}) },\n        'link.open.result',\n        resultOrError,\n        { rejectOnError: false },\n      ),\n    };\n  }\n\n  function makeCount(): Record<string, unknown> {\n    return {\n      query: (filters: unknown, options?: Record<string, unknown>) => request(\n        { type: 'count.query', filters: Array.isArray(filters) ? filters : [filters], ...(options ? { options } : {}) },\n        'count.query.result',\n        resultOrError,\n        { rejectOnError: false },\n      ),\n    };\n  }\n\n  function makeLists(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>) => request({ type, ...payload }, `${type}.result`, resultOrError, { rejectOnError: false });\n    return {\n      supported: () => req('lists.supported', {}),\n      add: (list: unknown, items: unknown, options?: unknown) => req('lists.add', { list, items, ...(options ? { options } : {}) }),\n      remove: (list: unknown, items: unknown, options?: unknown) => req('lists.remove', { list, items, ...(options ? { options } : {}) }),\n    };\n  }\n\n  function makeCommon(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>) => request({ type, ...payload }, `${type}.result`, withoutEnvelope, { rejectOnError: false });\n    return {\n      encodeNip19: (input: unknown) => req('common.encodeNip19', { input }),\n      decodeNip19: (value: string) => req('common.decodeNip19', { value }),\n      getProfile: (targetValue: unknown) => req('common.getProfile', { target: targetValue }),\n      follows: () => req('common.follows', {}),\n      follow: (...pubkeys: string[]) => req('common.follow', { pubkeys }),\n      unfollow: (...pubkeys: string[]) => req('common.unfollow', { pubkeys }),\n      react: (targetEventId: string, reaction?: string, customEmojiHref?: string) => req('common.react', {\n        targetEventId,\n        reaction,\n        ...(customEmojiHref === undefined ? {} : { customEmojiHref }),\n      }),\n      report: (targetValue: unknown, reason?: string, text?: string) => req('common.report', {\n        target: targetValue,\n        reason,\n        text,\n      }),\n    };\n  }\n\n  function makeDm(): Record<string, unknown> {\n    const req = (type: string, payload: Record<string, unknown>) => request({ type, ...payload }, `${type}.result`, withoutEnvelope, { rejectOnError: false });\n    return {\n      status: () => req('dm.status', {}),\n      conversations: (query?: Record<string, unknown>) => req('dm.conversations', query ?? {}),\n      messages: (query: Record<string, unknown>) => req('dm.messages', query ?? {}),\n      send: (requestPayload: Record<string, unknown>) => req('dm.send', requestPayload ?? {}),\n      subscribe: (requestPayload?: Record<string, unknown>) => req('dm.subscribe', requestPayload ?? {}),\n      unsubscribe: (subscriptionId: string) => req('dm.unsubscribe', { subscriptionId }),\n      onMessage(callback: (message: unknown, subscriptionId: string) => void) {\n        const off = listen((event) => {\n          if (!isParentMessage(event)) return;\n          const msg = event.data as RuntimeMessage;\n          if (\n            typeof msg === 'object'\n            && msg !== null\n            && msg.type === 'dm.message'\n            && typeof msg.subscriptionId === 'string'\n          ) {\n            callback(msg.message, msg.subscriptionId);\n          }\n        });\n        return subscriptionHandle(off);\n      },\n    };\n  }\n\n  function makeFs(): Record<string, unknown> {\n    const withOptions = (payload: Record<string, unknown>, options: unknown) => {\n      if (options !== undefined) payload.options = options;\n      return payload;\n    };\n    const req = (\n      action: string,\n      payload: Record<string, unknown>,\n      map: (msg: RuntimeMessage) => unknown,\n    ) => request({ type: `fs.${action}`, ...payload }, `fs.${action}.result`, map);\n    return {\n      info: () => req('info', {}, (msg) => fieldOrThrow(msg, 'info', 'fs.info.result missing info')),\n      pickFile: (options?: unknown) => req('pickFile', withOptions({}, options), (msg) => fieldOrThrow(msg, 'result', 'fs.pickFile.result missing result')),\n      pickFiles: (options?: unknown) => req('pickFiles', withOptions({}, options), (msg) => fieldOrThrow(msg, 'result', 'fs.pickFiles.result missing result')),\n      pickDirectory: (options?: unknown) => req('pickDirectory', withOptions({}, options), (msg) => fieldOrThrow(msg, 'result', 'fs.pickDirectory.result missing result')),\n      pickSaveFile: (options?: unknown) => req('pickSaveFile', withOptions({}, options), (msg) => fieldOrThrow(msg, 'result', 'fs.pickSaveFile.result missing result')),\n      stat: (path: string) => req('stat', { path }, (msg) => fieldOrThrow(msg, 'metadata', 'fs.stat.result missing metadata')),\n      list: (path: string) => req('list', { path }, (msg) => fieldOrThrow(msg, 'entries', 'fs.list.result missing entries')),\n      read: (path: string, options?: unknown) => req('read', withOptions({ path }, options), (msg) => fieldOrThrow(msg, 'result', 'fs.read.result missing result')),\n      write: (path: string, data: string, options?: unknown) => req('write', withOptions({ path, data }, options), (msg) => fieldOrThrow(msg, 'result', 'fs.write.result missing result')),\n      mkdir: (path: string, options?: unknown) => req('mkdir', withOptions({ path }, options), (msg) => voidResult(msg, 'fs mkdir failed')),\n      remove: (path: string, recursive?: boolean) => req('remove', { path, ...(recursive === undefined ? {} : { recursive }) }, (msg) => voidResult(msg, 'fs remove failed')),\n      move: (fromPath: string, toPath: string) => req('move', { fromPath, toPath }, (msg) => voidResult(msg, 'fs move failed')),\n      watch: (path: string, options?: unknown) => req('watch', withOptions({ path }, options), (msg) => fieldOrThrow(msg, 'watchId', 'fs.watch.result missing watchId')),\n      unwatch: (watchId: string) => req('unwatch', { watchId }, (msg) => voidResult(msg, 'fs unwatch failed')),\n      onChanged: (callback: (change: unknown) => void) => domainEventHandle('fs.changed', callback, (msg) => msg.change),\n    };\n  }\n\n  const shell = makeShell();\n  let inc: Record<string, unknown> | undefined;\n  let identity: Record<string, unknown> | undefined;\n  let theme: Record<string, unknown> | undefined;\n  let intent: Record<string, unknown> | undefined;\n\n  function makeProtectedInc(existing: unknown): Record<string, unknown> {\n    const extensions = existing && typeof existing === 'object'\n      ? existing as Record<string, unknown>\n      : {};\n    inc ??= makeInc();\n    return { ...extensions, ...inc };\n  }\n\n  function makeProtectedIdentity(): Record<string, unknown> {\n    identity ??= makeIdentity();\n    return identity;\n  }\n\n  function makeProtectedTheme(): Record<string, unknown> {\n    theme ??= Object.freeze(makeTheme());\n    return theme;\n  }\n\n  function makeProtectedIntent(): Record<string, unknown> {\n    intent ??= Object.freeze(makeIntent());\n    return intent;\n  }\n\n  function isProtectedDomain(domain: string): boolean {\n    return domain === 'shell'\n      || domain === 'inc'\n      || domain === 'identity'\n      || domain === 'theme'\n      || domain === 'intent';\n  }\n\n  function makeDomain(domain: string, existing: unknown): unknown {\n    if (domain === 'shell') return shell;\n    if (domain === 'inc') return makeProtectedInc(existing);\n    if (domain === 'identity') return makeProtectedIdentity();\n    if (domain === 'theme') return makeProtectedTheme();\n    if (domain === 'intent') return makeProtectedIntent();\n    if (existing && typeof existing === 'object' && Object.keys(existing).length > 0) return existing;\n    switch (domain) {\n      case 'relay': return makeRelay();\n      case 'storage': return makeStorage();\n      case 'keys': return makeKeys();\n      case 'media': return makeMedia();\n      case 'notify': return makeNotify();\n      case 'config': return makeConfig();\n      case 'resource': return makeResource();\n      case 'cvm': return makeCvm();\n      case 'outbox': return makeOutbox();\n      case 'upload': return makeUpload();\n      case 'webrtc': return makeWebrtc();\n      case 'ble': return makeBle();\n      case 'link': return makeLink();\n      case 'count': return makeCount();\n      case 'lists': return makeLists();\n      case 'common': return makeCommon();\n      case 'serial': return makeSerial();\n      case 'dm': return makeDm();\n      case 'fs': return makeFs();\n      default: return {};\n    }\n  }\n\n  function guardNappletNamespace(namespace: Record<string, unknown>): Record<string, unknown> {\n    return new Proxy(namespace, {\n      set(obj, prop, value) {\n        if (typeof prop !== 'string' || !allowed.has(prop)) return true;\n        obj[prop] = makeDomain(prop, value);\n        return true;\n      },\n      defineProperty(obj, prop, descriptor) {\n        if (typeof prop !== 'string' || !allowed.has(prop)) return true;\n        if (isProtectedDomain(prop)) {\n          return Reflect.defineProperty(obj, prop, {\n            value: makeDomain(prop, descriptor.value),\n            enumerable: true,\n            configurable: true,\n            writable: true,\n          });\n        }\n        return Reflect.defineProperty(obj, prop, {\n          ...descriptor,\n          value: makeDomain(prop, descriptor.value),\n        });\n      },\n      deleteProperty(obj, prop) {\n        if (typeof prop === 'string' && allowed.has(prop) && isProtectedDomain(prop)) return true;\n        return Reflect.deleteProperty(obj, prop);\n      },\n    });\n  }\n\n  function buildNappletNamespace(value: unknown): Record<string, unknown> {\n    const candidate = typeof value === 'object' && value !== null\n      ? value as Record<string, unknown>\n      : {};\n    const next: Record<string, unknown> = {};\n    for (const domain of domains) {\n      if (!allowed.has(domain)) continue;\n      Object.defineProperty(next, domain, {\n        value: makeDomain(\n          domain,\n          Object.prototype.hasOwnProperty.call(candidate, domain) ? candidate[domain] : undefined,\n        ),\n        enumerable: true,\n        configurable: true,\n        writable: true,\n      });\n    }\n    return guardNappletNamespace(next);\n  }\n\n  let root = buildNappletNamespace(target.napplet);\n  Object.defineProperty(target, 'napplet', {\n    get() {\n      return root;\n    },\n    set(value) {\n      root = buildNappletNamespace(value);\n    },\n    enumerable: false,\n    configurable: false,\n  });\n}\n","\n// Factory function — main entry point\nexport { createShellBridge } from './shell-bridge.js';\nexport type { ShellBridge } from './shell-bridge.js';\nexport {\n  injectNappletNamespacePrelude,\n  renderNappletNamespacePrelude,\n} from './napplet-namespace.js';\nexport type { NappletNamespacePreludeOptions } from './napplet-namespace.js';\n\n// Hooks adapter — for advanced integrators who need to customize the adapter\nexport { adaptHooks } from './hooks-adapter.js';\nexport type { BrowserDeps } from './hooks-adapter.js';\n\n// Protocol types (re-exported from @napplet/core + @kehto/runtime).\n// Phase 24 DRIFT-01: former @napplet/core compatibility shim deleted; legacy\n// NIP-01 constants no longer re-exported. Shell consumers import Capability +\n// ALL_CAPABILITIES from @kehto/runtime (sourced from @kehto/acl/capabilities).\nexport type { NostrEvent, NostrFilter, NappletMessage } from '@napplet/core';\nexport type { Capability } from '@kehto/runtime';\nexport { ALL_CAPABILITIES } from '@kehto/runtime';\n\n// Types for host app integration (shell-specific)\nexport type {\n  ShellAdapter,\n  ShellCapabilities,\n  ShellEnvironment,\n  RelayPoolHooks,\n  RelayPoolLike,\n  RelayConfigHooks,\n  WindowManagerHooks,\n  AuthHooks,\n  ConfigHooks,\n  HotkeyHooks,\n  WorkerRelayHooks,\n  WorkerRelayLike,\n  CryptoHooks,\n  DmHooks,\n  UploadHooks,\n  UploadBackendLike,\n  IntentHooks,\n  LinkHooks,\n  CommonHooks,\n  ListsHooks,\n  SerialHooks,\n  BleHooks,\n  WebrtcHooks,\n  CapabilityHooks,\n  SessionEntry,\n  NappKeyEntry,  // @deprecated — use SessionEntry\n  AclEntry,\n  AclCheckEvent,\n  UnroutedMessageInfo,\n  ServiceDescriptor,\n  ServiceHandler,\n  ServiceRegistry,\n} from './types.js';\n\n// Shell initialization — capability construction for shell.ready / shell.init handshake\nexport { buildShellCapabilities, resolveShellEnvironment } from './shell-init.js';\n\nexport { sessionRegistry, nappKeyRegistry } from './session-registry.js';\nexport type { PendingUpdate, SessionRegistry } from './session-registry.js';\n\n// Standalone utilities (usable without full shell)\nexport { originRegistry } from './origin-registry.js';\nexport type { OriginIdentity, OriginRegistry } from './origin-registry.js';\nexport { audioManager } from './audio-manager.js';\nexport type { AudioManager, AudioSource } from './audio-manager.js';\nexport { manifestCache } from './manifest-cache.js';\nexport type { ManifestCache, ManifestCacheEntry } from './manifest-cache.js';\nexport type { AclStore } from './acl-store.js';\n\n// Enforcement gate (re-exported from @kehto/runtime for backwards compatibility)\nexport { createEnforceGate, createNapEnforceGate, formatDenialReason } from '@kehto/runtime';\nexport type { EnforceResult, EnforceConfig, NapEnforceConfig, IdentityResolver, AclChecker, NapMessage } from '@kehto/runtime';\n// ConsentRequest canonical definition re-exported from @kehto/runtime\nexport type { ConsentRequest } from '@kehto/runtime';\n\n// Topic constants for shell command routing\nexport { TOPICS } from './topics.js';\nexport type { TopicKey, TopicValue } from './topics.js';\n\nexport { createIdentityProxy } from './identity-proxy.js';\nexport type { IdentityProxy, IdentityProxyDeps, ProxyOriginRegistry } from './identity-proxy.js';\nexport { createThemeProxy } from './theme-proxy.js';\nexport type { ThemeProxy, ThemeProxyDeps } from './theme-proxy.js';\nexport { createKeysProxy } from './keys-proxy.js';\nexport type { KeysProxy, KeysProxyDeps } from './keys-proxy.js';\nexport { createMediaProxy } from './media-proxy.js';\nexport type { MediaProxy, MediaProxyDeps } from './media-proxy.js';\nexport { createNotifyProxy } from './notify-proxy.js';\nexport type { NotifyProxy, NotifyProxyDeps } from './notify-proxy.js';\n\nexport type {\n  ResourceBytesRequest,\n  ResourceInfo,\n  ResourceInfoError,\n  ResourceInfoRequest,\n  ResourceInfoResult,\n  ResourceBytesManyRequest,\n  ResourceBytesManyItem,\n  ResourceCancelRequest,\n  ResourceBytesResult,\n  ResourceBytesManyResult,\n  ResourceBytesError,\n  ResourceBytesManyError,\n  ResourceErrorCode,\n  ResourceRequestId,\n  ResourceInbound,\n  ResourceOutbound,\n} from './types/internal-resource.js';\n","/**\n * topics.ts — Re-exports topic constants from @napplet/core.\n *\n * Shell previously owned these constants. They now live in @napplet/core\n * so all packages share a single source of truth.\n */\nexport { TOPICS } from '@napplet/core';\nexport type { TopicKey, TopicValue } from '@napplet/core';\n","/**\n * identity-proxy.ts — Shell-side per-domain proxy for identity.* envelopes.\n *\n * Establishes the canonical proxy shape for @kehto/shell (Plan 12-11): each\n * per-domain proxy exposes a `dispatch` method that delegates napplet→shell\n * requests to the runtime.\n *\n * By default, `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime already owns identity.* dispatch per Plan\n * 12-03 (see @kehto/services identity-service). This module exists as an\n * optional composition point for host apps that want to intercept or\n * augment identity dispatch (e.g. custom logging, sandboxed rewrites, test\n * doubles).\n *\n * Identity changes are deliberately not emitted through this proxy. Hosts\n * must use `ShellBridge.publishIdentityChanged()`, which enforces the live\n * session, granted-domain, and current recipient-capability checks.\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\n\n/**\n * Minimal origin-registry contract used by per-domain proxies.\n *\n * Accepts the `@kehto/shell` singleton `originRegistry` as well as any test\n * double with a matching `getIframeWindow` method.\n */\nexport interface ProxyOriginRegistry {\n  /** Resolve a registered napplet windowId to its iframe Window, or null. */\n  getIframeWindow(windowId: string): Window | null;\n}\n\n/**\n * Dependencies for `createIdentityProxy`.\n *\n * @example\n * ```ts\n * const proxy = createIdentityProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface IdentityProxyDeps {\n  /** The runtime engine that owns identity.* dispatch (Plan 12-03). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `identity.*` envelopes.\n *\n * `dispatch` routes napplet→shell requests into the runtime. The deprecated\n * `emit` member remains only as a fail-closed compatibility trap.\n */\nexport interface IdentityProxy {\n  /**\n   * Route a napplet-originated identity.* envelope into the runtime.\n   *\n   * Delegation only — the runtime already owns identity.* dispatch after\n   * Plan 12-03. Override by wrapping or replacing this method.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Direct identity delivery is prohibited.\n   *\n   * @deprecated Use `ShellBridge.publishIdentityChanged()` so delivery is\n   * filtered by live session, granted domain, and current ACL.\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical identity-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns An {@link IdentityProxy} ready to route identity.* envelopes\n * @example\n * ```ts\n * import { createIdentityProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const identityProxy = createIdentityProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Optional composition: intercept napplet->shell identity requests\n * const originalDispatch = identityProxy.dispatch;\n * identityProxy.dispatch = (windowId, envelope) => {\n *   console.log('identity dispatch', windowId, envelope.type);\n *   originalDispatch(windowId, envelope);\n * };\n * ```\n */\nexport function createIdentityProxy(deps: IdentityProxyDeps): IdentityProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(_windowId: string, _envelope: NappletMessage): void {\n      throw new Error(\n        'Direct identity proxy emit is prohibited; use ShellBridge.publishIdentityChanged()',\n      );\n    },\n  };\n}\n","/**\n * theme-proxy.ts — Shell-side per-domain proxy for theme.* envelopes.\n *\n * Establishes the shell-side shape that Phase 13 composes into. Phase 13 is\n * expected to add `theme-service.ts` (runtime) + the shell-side `theme.set`\n * API that emits `theme.changed` push envelopes to registered napplets;\n * this proxy is the canonical seam those pieces plug into.\n *\n * `dispatch(windowId, envelope)` routes napplet→shell `theme.get` into the\n * runtime. Theme changes must use `ShellBridge.publishTheme()` so the host\n * projection enforces live-session, granted-domain, and current-ACL checks.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns theme.* dispatch. This module is an\n * optional composition point for host apps or Phase 13 wiring.\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createThemeProxy`.\n *\n * @example\n * ```ts\n * const proxy = createThemeProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface ThemeProxyDeps {\n  /** The runtime engine that will own theme.* dispatch (Phase 13). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `theme.*` envelopes.\n *\n * `dispatch` routes napplet→shell requests into the runtime. The deprecated\n * `emit` member remains only as a fail-closed compatibility trap.\n */\nexport interface ThemeProxy {\n  /**\n   * Route a napplet-originated theme.* envelope (e.g. `theme.get`) into\n   * the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Direct theme delivery is prohibited.\n   *\n   * @deprecated Use `ShellBridge.publishTheme()` so delivery is filtered by\n   * live session, granted domain, and current ACL.\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical theme-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link ThemeProxy} ready to route theme.* envelopes\n * @example\n * ```ts\n * import { createThemeProxy, originRegistry } from '@kehto/shell';\n *\n * const themeProxy = createThemeProxy({\n *   runtime,\n *   originRegistry,\n * });\n * themeProxy.dispatch(windowId, { type: 'theme.get', id: requestId });\n * ```\n */\nexport function createThemeProxy(deps: ThemeProxyDeps): ThemeProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(_windowId: string, _envelope: NappletMessage): void {\n      throw new Error(\n        'Direct theme proxy emit is prohibited; use ShellBridge.publishTheme()',\n      );\n    },\n  };\n}\n","/**\n * keys-proxy.ts — Shell-side per-domain proxy for keys.* envelopes.\n *\n * The runtime already dispatches napplet-originated `keys.*` (forward,\n * registerAction, unregisterAction) to the keys service. This proxy is the\n * shell-side composition point for host apps that want to observe requests or\n * inject shell-originated keys envelopes such as `keys.action` and\n * `keys.bindings`.\n *\n * Shape mirrors identity-proxy (Plan 12-11):\n *\n *   - `dispatch(windowId, envelope)` routes napplet→shell keys requests\n *     into the runtime.\n *   - `emit(windowId, envelope)` posts shell→napplet pushes (`keys.action`,\n *     `keys.bindings`, `keys.registerAction.result`) through the origin\n *     registry.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns keys.* dispatch. This module is an\n * optional composition point for host apps (e.g. global hotkey UIs).\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createKeysProxy`.\n *\n * @example\n * ```ts\n * const proxy = createKeysProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface KeysProxyDeps {\n  /** The runtime engine that owns keys.* dispatch (Plan 12-05). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `keys.*` envelopes.\n *\n * Shape: `dispatch` routes napplet→shell requests into the runtime; `emit`\n * pushes shell→napplet envelopes through the iframe's Window.\n */\nexport interface KeysProxy {\n  /**\n   * Route a napplet-originated keys.* envelope (e.g. `keys.forward`,\n   * `keys.registerAction`) into the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Push a shell-initiated keys-domain envelope (e.g. `keys.action`,\n   * `keys.bindings`) into a napplet iframe.\n   *\n   * No-op when the originRegistry cannot resolve the windowId (unknown or\n   * unregistered napplet). Never throws.\n   *\n   * @param windowId - The target napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope to deliver\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical keys-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link KeysProxy} ready to route keys.* envelopes\n * @example\n * ```ts\n * import { createKeysProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const keysProxy = createKeysProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Host-app-initiated action trigger:\n * keysProxy.emit('win-editor', { type: 'keys.action', actionId: 'editor.save' });\n * ```\n */\nexport function createKeysProxy(deps: KeysProxyDeps): KeysProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(windowId: string, envelope: NappletMessage): void {\n      const win = deps.originRegistry.getIframeWindow(windowId);\n      if (win) win.postMessage(envelope, '*');\n    },\n  };\n}\n","/**\n * media-proxy.ts — Shell-side per-domain proxy for media.* envelopes.\n *\n * Establishes the shell-side composition seam for `@napplet/nap/media`\n * session-control envelopes. Shape mirrors identity-proxy (Plan 12-11):\n *\n *   - `dispatch(windowId, envelope)` routes napplet→shell media requests\n *     (`media.session.create`, `media.session.update`, `media.session.destroy`,\n *     `media.state`, `media.capabilities`) into the runtime (Plan 12-06).\n *   - `emit(windowId, envelope)` posts shell→napplet pushes (`media.command`,\n *     `media.controls`, `media.session.create.result`) through the origin\n *     registry.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns media.* dispatch. This module is an\n * optional composition point for host apps (e.g. shell-rendered playback\n * UIs that want to send `media.command` pushes).\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createMediaProxy`.\n *\n * @example\n * ```ts\n * const proxy = createMediaProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface MediaProxyDeps {\n  /** The runtime engine that owns media.* dispatch (Plan 12-06). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `media.*` envelopes.\n *\n * Shape: `dispatch` routes napplet→shell requests into the runtime; `emit`\n * pushes shell→napplet envelopes through the iframe's Window.\n */\nexport interface MediaProxy {\n  /**\n   * Route a napplet-originated media.* envelope into the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Push a shell-initiated media-domain envelope (e.g. `media.command`,\n   * `media.controls`) into a napplet iframe.\n   *\n   * No-op when the originRegistry cannot resolve the windowId (unknown or\n   * unregistered napplet). Never throws.\n   *\n   * @param windowId - The target napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope to deliver\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical media-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link MediaProxy} ready to route media.* envelopes\n * @example\n * ```ts\n * import { createMediaProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const mediaProxy = createMediaProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Shell-UI-initiated media command:\n * mediaProxy.emit('win-player', {\n *   type: 'media.command',\n *   sessionId: 's1',\n *   action: 'seek',\n *   value: 120,\n * });\n * ```\n */\nexport function createMediaProxy(deps: MediaProxyDeps): MediaProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(windowId: string, envelope: NappletMessage): void {\n      const win = deps.originRegistry.getIframeWindow(windowId);\n      if (win) win.postMessage(envelope, '*');\n    },\n  };\n}\n","/**\n * notify-proxy.ts — Shell-side per-domain proxy for notify.* envelopes.\n *\n * Establishes the shell-side composition seam for `@napplet/nap/notify`\n * notification envelopes. Shape mirrors identity-proxy (Plan 12-11):\n *\n *   - `dispatch(windowId, envelope)` routes napplet→shell notify requests\n *     (`notify.send`, `notify.dismiss`, `notify.badge`,\n *     `notify.channel.register`, `notify.permission.request`) into the\n *     runtime (Plan 12-07).\n *   - `emit(windowId, envelope)` posts shell→napplet pushes\n *     (`notify.send.result`, `notify.permission.result`, `notify.action`,\n *     `notify.clicked`, `notify.dismissed`, `notify.controls`) through the\n *     origin registry.\n *\n * By default `createShellBridge()` does NOT compose this proxy into its\n * dispatch path — the runtime owns notify.* dispatch. This module is an\n * optional composition point for host apps (e.g. custom notification UIs\n * that need to emit `notify.clicked` / `notify.action` pushes).\n */\n\nimport type { Runtime } from '@kehto/runtime';\nimport type { NappletMessage } from '@napplet/core';\nimport type { ProxyOriginRegistry } from './identity-proxy.js';\n\n/**\n * Dependencies for `createNotifyProxy`.\n *\n * @example\n * ```ts\n * const proxy = createNotifyProxy({\n *   runtime: shellBridge.runtime,\n *   originRegistry,\n * });\n * ```\n */\nexport interface NotifyProxyDeps {\n  /** The runtime engine that owns notify.* dispatch (Plan 12-07). */\n  runtime: Runtime;\n  /** Origin registry for resolving windowId → iframe Window. */\n  originRegistry: ProxyOriginRegistry;\n}\n\n/**\n * Per-domain proxy for `notify.*` envelopes.\n *\n * Shape: `dispatch` routes napplet→shell requests into the runtime; `emit`\n * pushes shell→napplet envelopes through the iframe's Window.\n */\nexport interface NotifyProxy {\n  /**\n   * Route a napplet-originated notify.* envelope into the runtime.\n   *\n   * @param windowId - The source napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope\n   */\n  dispatch(windowId: string, envelope: NappletMessage): void;\n  /**\n   * Push a shell-initiated notify-domain envelope (e.g. `notify.action`,\n   * `notify.clicked`) into a napplet iframe.\n   *\n   * No-op when the originRegistry cannot resolve the windowId (unknown or\n   * unregistered napplet). Never throws.\n   *\n   * @param windowId - The target napplet's windowId\n   * @param envelope - The NIP-5D NappletMessage envelope to deliver\n   */\n  emit(windowId: string, envelope: NappletMessage): void;\n}\n\n/**\n * Factory for the canonical notify-domain proxy.\n *\n * @param deps - Runtime + origin registry\n * @returns A {@link NotifyProxy} ready to route notify.* envelopes\n * @example\n * ```ts\n * import { createNotifyProxy, originRegistry, createShellBridge } from '@kehto/shell';\n *\n * const bridge = createShellBridge(hooks);\n * const notifyProxy = createNotifyProxy({\n *   runtime: bridge.runtime,\n *   originRegistry,\n * });\n *\n * // Shell-UI notifies napplet that user clicked its toast:\n * notifyProxy.emit('win-chat', {\n *   type: 'notify.clicked',\n *   notificationId: 'shell-42',\n * });\n * ```\n */\nexport function createNotifyProxy(deps: NotifyProxyDeps): NotifyProxy {\n  return {\n    dispatch(windowId: string, envelope: NappletMessage): void {\n      deps.runtime.handleMessage(windowId, envelope);\n    },\n    emit(windowId: string, envelope: NappletMessage): void {\n      const win = deps.originRegistry.getIframeWindow(windowId);\n      if (win) win.postMessage(envelope, '*');\n    },\n  };\n}\n"],"mappings":";AACA,SAAS,qBAAwD;;;AC6BjE,SAAS,WAAW,OAA2B;AAC7C,SAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC1E;AAEA,SAAS,WAAW,KAAyB;AAC3C,QAAM,QAAQ,IAAI,WAAW,IAAI,SAAS,CAAC;AAC3C,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,GAAG;AACtC,UAAM,IAAI,CAAC,IAAI,SAAS,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE;AAAA,EACrD;AACA,SAAO;AACT;AAqBA,SAAS,oBAAoBA,iBAA8D;AACzF,SAAO,CAAC,UAAU,QAAQ;AACxB,UAAM,MAAMA,gBAAe,gBAAgB,QAAQ;AACnD,QAAI,IAAK,KAAI,YAAY,KAAK,GAAG;AAAA,EACnC;AACF;AAEA,SAAS,uBACP,YACAA,iBACkB;AAClB,SAAO;AAAA,IACL,UACE,SACA,UACA,WACyB;AACzB,YAAM,OAAO,WAAW,UAAU,aAAa;AAC/C,UAAI,CAAC,KAAM,QAAO,EAAE,cAAc;AAAA,MAAc,EAAE;AAElD,YAAM,OAAO,aAAa,WAAW,UAAU,gBAAgB,OAAO;AACtE,YAAM,MAAM,KAAK,aAAa,MAAM,OAAO,EAAE,UAAU,CAAC,SAAS;AAC/D,YAAI,SAAS,OAAQ,UAAS,MAAM;AAAA,YAC/B,UAAS,IAAkB;AAAA,MAClC,CAAC;AACD,aAAO,EAAE,aAAa,MAAM,IAAI,YAAY,EAAE;AAAA,IAChD;AAAA,IAEA,QAAQ,OAAyC;AAC/C,YAAM,OAAO,WAAW,UAAU,aAAa;AAC/C,UAAI,CAAC,KAAM;AACX,YAAM,YAAY,WAAW,UAAU,gBAAgB,CAAC,CAAC;AACzD,aAAO,KAAK,QAAQ,WAAW,KAAK;AAAA,IACtC;AAAA,IAEA,gBAAgB,SAAkC;AAChD,aAAO,WAAW,UAAU,gBAAgB,OAAO;AAAA,IACrD;AAAA,IAEA,kBAAkB,QAAgB,SAA2B;AAC3D,iBAAW,UAAU,kBAAkB,QAAQ,OAAO;AAAA,IACxD;AAAA,IAEA,oBAAoB,QAAsB;AACxC,iBAAW,UAAU,oBAAoB,MAAM;AAAA,IACjD;AAAA,IAEA,gBACE,UACA,UACA,OACA,SACA,SACM;AACN,YAAM,MAAMA,gBAAe,gBAAgB,QAAQ;AACnD,UAAI,IAAK,YAAW,UAAU,gBAAgB,UAAU,UAAU,OAAO,SAAS,GAAG;AAAA,IACvF;AAAA,IAEA,iBAAiB,UAAwB;AACvC,iBAAW,UAAU,iBAAiB,QAAQ;AAAA,IAChD;AAAA,IAEA,qBAAqB,UAAkB,OAA+C;AACpF,aAAO,WAAW,UAAU,qBAAqB,UAAU,KAAK;AAAA,IAClE;AAAA,IAEA,cAAuB;AACrB,aAAO,WAAW,UAAU,aAAa,MAAM;AAAA,IACjD;AAAA,EACF;AACF;AAEA,SAAS,mBAAmB,YAAwC;AAClE,SAAO;AAAA,IACL,MAAM,MAAM,SAA+C;AACzD,YAAM,cAAc,WAAW,YAAY,eAAe;AAC1D,UAAI,CAAC,YAAa,QAAO,CAAC;AAC1B,YAAM,QAAQ,OAAO,WAAW;AAChC,aAAO,YAAY,MAAM,CAAC,OAAO,OAAO,GAAG,OAAO,CAAC;AAAA,IACrD;AAAA,IAEA,MAAM,OAAyB;AAC7B,YAAM,cAAc,WAAW,YAAY,eAAe;AAC1D,UAAI,CAAC,YAAa;AAClB,UAAI;AAAE,oBAAY,MAAM,KAAK,GAAG,QAAQ,MAAM;AAAA,QAAoB,CAAC;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IACpG;AAAA,IAEA,cAAuB;AACrB,aAAO,WAAW,YAAY,eAAe,MAAM;AAAA,IACrD;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,YAAuC;AAChE,SAAO;AAAA,IACL,gBAA+B;AAC7B,aAAO,WAAW,KAAK,cAAc;AAAA,IACvC;AAAA,IACA,YAA2B;AACzB,aAAO,WAAW,KAAK,UAAU;AAAA,IACnC;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,YAAyC;AACpE,SAAO;AAAA,IACL,wBAAqE;AACnE,aAAO,WAAW,OAAO,sBAAsB;AAAA,IACjD;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,YAAyC;AACpE,SAAO;AAAA,IACL,yBAAyB,OAAa;AACpC,iBAAW,QAAQ,yBAAyB,KAAK;AAAA,IACnD;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,YAAyC;AACpE,SAAO;AAAA,IACL,MAAM,YAAY,OAAqC;AACrD,aAAO,WAAW,OAAO,YAAY,KAAK;AAAA,IAC5C;AAAA,IACA,aAAqB;AACnB,aAAO,OAAO,WAAW;AAAA,IAC3B;AAAA,IACA,YAAY,QAA4B;AACtC,YAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,aAAO,gBAAgB,KAAK;AAC5B,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,uBAAuC;AAC9C,SAAO;AAAA,IACL,QAAQ,MAAoB;AAC1B,UAAI;AAAE,qBAAa,QAAQ,eAAe,IAAI;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IAC/E;AAAA,IACA,OAAsB;AACpB,UAAI;AAAE,eAAO,aAAa,QAAQ,aAAa;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IAC3E;AAAA,EACF;AACF;AAEA,SAAS,4BAAiD;AACxD,SAAO;AAAA,IACL,QAAQ,MAAoB;AAC1B,UAAI;AAAE,qBAAa,QAAQ,0BAA0B,IAAI;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IAC1F;AAAA,IACA,OAAsB;AACpB,UAAI;AAAE,eAAO,aAAa,QAAQ,wBAAwB;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACtF;AAAA,EACF;AACF;AAEA,SAAS,yBAA2C;AAClD,SAAO;AAAA,IACL,IAAI,WAAkC;AACpC,UAAI;AAAE,eAAO,aAAa,QAAQ,SAAS;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACvE;AAAA,IACA,IAAI,WAAmB,OAAwB;AAC7C,UAAI;AAAE,qBAAa,QAAQ,WAAW,KAAK;AAAG,eAAO;AAAA,MAAM,QAAQ;AAAE,eAAO;AAAA,MAAO;AAAA,IACrF;AAAA,IACA,OAAO,WAAyB;AAC9B,UAAI;AAAE,qBAAa,WAAW,SAAS;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IACxE;AAAA,IACA,MAAM,QAAsB;AAC1B,UAAI;AACF,cAAM,eAAyB,CAAC;AAChC,iBAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,gBAAM,MAAM,aAAa,IAAI,CAAC;AAC9B,cAAI,KAAK,WAAW,MAAM,EAAG,cAAa,KAAK,GAAG;AAAA,QACpD;AACA,mBAAW,OAAO,aAAc,cAAa,WAAW,GAAG;AAAA,MAC7D,QAAQ;AAAA,MAAoB;AAAA,IAC9B;AAAA,IACA,KAAK,QAA0B;AAC7B,UAAI;AACF,cAAM,SAAmB,CAAC;AAC1B,iBAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,gBAAM,MAAM,aAAa,IAAI,CAAC;AAC9B,cAAI,KAAK,WAAW,MAAM,EAAG,QAAO,KAAK,GAAG;AAAA,QAC9C;AACA,eAAO;AAAA,MACT,QAAQ;AAAE,eAAO,CAAC;AAAA,MAAG;AAAA,IACvB;AAAA,IACA,eAAe,QAAgB,YAA6B;AAC1D,UAAI;AACF,YAAI,QAAQ;AACZ,iBAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,gBAAM,MAAM,aAAa,IAAI,CAAC;AAC9B,cAAI,CAAC,KAAK,WAAW,MAAM,EAAG;AAC9B,cAAI,cAAc,QAAQ,WAAY;AACtC,gBAAM,QAAQ,aAAa,QAAQ,GAAG,KAAK;AAC3C,mBAAS,IAAI,YAAY,EAAE,OAAO,MAAM,KAAK,EAAE;AAAA,QACjD;AACA,eAAO;AAAA,MACT,QAAQ;AAAE,eAAO;AAAA,MAAG;AAAA,IACtB;AAAA,EACF;AACF;AAEA,SAAS,2BAA2B,YAAgD;AAClF,SAAO;AAAA,IACL,aAAa,SAAwB;AACnC,aAAO,WAAW,cAAc,aAAa,OAAO;AAAA,IACtD;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,YAA8C;AAC9E,SAAO;AAAA,IACL,SAAS,MAAc,KAAmB;AACxC,iBAAW,YAAY,SAAS,MAAM,GAAG;AAAA,IAC3C;AAAA,IACA,YAAY,MAAc,KAAmB;AAC3C,iBAAW,YAAY,YAAY,MAAM,GAAG;AAAA,IAC9C;AAAA,IACA,iBAA6E;AAC3E,aAAO,WAAW,YAAY,eAAe;AAAA,IAC/C;AAAA,IACA,sBAA+B;AAC7B,aAAO,WAAW,YAAY,oBAAoB;AAAA,IACpD;AAAA,EACF;AACF;AAEA,SAAS,+BAAuD;AAC9D,SAAO;AAAA,IACL,MAAyB;AACvB,UAAI;AACF,cAAM,MAAM,aAAa,QAAQ,sBAAsB;AACvD,YAAI,CAAC,IAAK,QAAO;AACjB,eAAO,WAAW,GAAG;AAAA,MACvB,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACzB;AAAA,IACA,IAAI,QAA0B;AAC5B,UAAI;AACF,qBAAa,QAAQ,wBAAwB,WAAW,MAAM,CAAC;AAAA,MACjE,QAAQ;AAAA,MAAiC;AAAA,IAC3C;AAAA,EACF;AACF;AAEA,SAAS,wBAAyC;AAChD,SAAO;AAAA,IACL,IAAI,UAAiC;AACnC,UAAI;AACF,eAAO,aAAa,QAAQ,gBAAgB,QAAQ,EAAE;AAAA,MACxD,QAAQ;AAAE,eAAO;AAAA,MAAM;AAAA,IACzB;AAAA,IACA,IAAI,UAAkB,MAAoB;AACxC,UAAI;AACF,qBAAa,QAAQ,gBAAgB,QAAQ,IAAI,IAAI;AAAA,MACvD,QAAQ;AAAA,MAAiC;AAAA,IAC3C;AAAA,IACA,OAAO,UAAwB;AAC7B,UAAI;AACF,qBAAa,WAAW,gBAAgB,QAAQ,EAAE;AAAA,MACpD,QAAQ;AAAA,MAAiC;AAAA,IAC3C;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,YAAiD;AACxE,SAAO,WAAW,KACd;AAAA,IACE,OAAO,iBAAyB,SAAiB;AAC/C,aAAO,WAAW,GAAI,OAAO,iBAAiB,OAAO;AAAA,IACvD;AAAA,EACF,IACA;AACN;AAuBO,SAAS,WAAW,YAA0B,MAAmC;AACtF,QAAM,EAAE,gBAAAA,gBAAe,IAAI;AAE3B,SAAO;AAAA,IACL,eAAe,oBAAoBA,eAAc;AAAA,IACjD,WAAW,uBAAuB,YAAYA,eAAc;AAAA,IAC5D,OAAO,mBAAmB,UAAU;AAAA,IACpC,MAAM,kBAAkB,UAAU;AAAA,IAClC,QAAQ,oBAAoB,UAAU;AAAA,IACtC,SAAS,oBAAoB,UAAU;AAAA,IACvC,QAAQ,oBAAoB,UAAU;AAAA,IACtC,gBAAgB,qBAAqB;AAAA,IACrC,qBAAqB,0BAA0B;AAAA,IAC/C,kBAAkB,uBAAuB;AAAA,IACzC,eAAe,2BAA2B,UAAU;AAAA,IACpD,aAAa,yBAAyB,UAAU;AAAA,IAChD,IAAI,gBAAgB,UAAU;AAAA,IAC9B,wBAAwB,6BAA6B;AAAA,IACrD,iBAAiB,sBAAsB;AAAA,IACvC,YAAY,WAAW;AAAA,IACvB,gBAAgB,WAAW;AAAA,IAC3B,UAAU,WAAW;AAAA,IACrB,oBAAoB,WAAW;AAAA,EACjC;AACF;;;AC9WA,IAAM,WAAW,oBAAI,IAAyB;AAC9C,IAAI,qBAAqB;AA4BlB,IAAM,iBAAiC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ5C,SAAS,KAAa,UAAkB,UAAiC;AACvE,eAAW,CAAC,eAAe,KAAK,KAAK,SAAS,QAAQ,GAAG;AACvD,UAAI,kBAAkB,OAAO,MAAM,aAAa,UAAU;AACxD,iBAAS,OAAO,aAAa;AAAA,MAC/B;AAAA,IACF;AAEA,aAAS,IAAI,KAAK;AAAA,MAChB;AAAA,MACA,MAAM,UAAU;AAAA,MAChB,eAAe,UAAU;AAAA,MACzB,gBAAgB,EAAE;AAAA,IACpB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,UAAwB;AACjC,eAAW,CAAC,KAAK,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC7C,UAAI,MAAM,aAAa,UAAU;AAC/B,iBAAS,OAAO,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,KAAiC;AAC3C,WAAO,SAAS,IAAI,GAAG,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,UAAiC;AAC/C,eAAW,CAAC,KAAK,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC7C,UAAI,MAAM,aAAa,SAAU,QAAO;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,kBAA4B;AAC1B,WAAO,MAAM,KAAK,SAAS,OAAO,CAAC,EAAE,IAAI,WAAS,MAAM,QAAQ;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,KAAyC;AACnD,UAAM,QAAQ,SAAS,IAAI,GAAG;AAC9B,QAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,cAAe,QAAO;AAClD,WAAO,EAAE,MAAM,MAAM,MAAM,eAAe,MAAM,cAAc;AAAA,EAChE;AAAA;AAAA,EAGA,eAAe,KAAa,aAAqC;AAC/D,UAAM,QAAQ,SAAS,IAAI,GAAG;AAC9B,QAAI,CAAC,MAAO;AACZ,UAAM,cAAc,OAAO,OAAO;AAAA,MAChC,cAAc,OAAO,OAAO,EAAE,SAAS,OAAO,OAAO,CAAC,GAAG,YAAY,aAAa,OAAO,CAAC,EAAE,CAAC;AAAA,MAC7F,UAAU,OAAO,OAAO,CAAC,GAAG,YAAY,QAAQ,CAAC;AAAA,IACnD,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,eAAe,KAA2C;AACxD,WAAO,SAAS,IAAI,GAAG,GAAG;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,kBAAkB,KAAiC;AACjD,WAAO,SAAS,IAAI,GAAG,GAAG;AAAA,EAC5B;AAAA;AAAA,EAGA,QAAc;AACZ,aAAS,MAAM;AAAA,EACjB;AACF;;;ACrIA,IAAM,aAAa,oBAAI,IAAoB;AAC3C,IAAM,WAAW,oBAAI,IAA0B;AAC/C,IAAM,iBAAiB,oBAAI,IAA2B;AAEtD,IAAI,kBAAkB;AA6Bf,IAAM,kBAAmC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO9C,SAAS,UAAkB,OAA2B;AACpD,eAAW,IAAI,UAAU,MAAM,MAAM;AACrC,aAAS,IAAI,MAAM,QAAQ,KAAK;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,UAAwB;AACjC,UAAM,SAAS,WAAW,IAAI,QAAQ;AACtC,QAAI,QAAQ;AACV,eAAS,OAAO,MAAM;AACtB,iBAAW,OAAO,QAAQ;AAAA,IAC5B;AACA,mBAAe,OAAO,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,UAAU,UAAsC;AAC9C,WAAO,WAAW,IAAI,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,SAAS,QAA0C;AACjD,WAAO,SAAS,IAAI,MAAM;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,QAAoC;AAC9C,WAAO,SAAS,IAAI,MAAM,GAAG;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAa,UAA2B;AACtC,WAAO,WAAW,IAAI,QAAQ;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgC;AAC9B,WAAO,MAAM,KAAK,SAAS,OAAO,CAAC;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAAkB,QAA6B;AAC9D,mBAAe,IAAI,UAAU,MAAM;AACnC;AACA,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,cAAc,IAAI,YAAY,0BAA0B,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAA6C;AAC5D,WAAO,eAAe,IAAI,QAAQ;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,mBAAmB,UAAwB;AACzC,mBAAe,OAAO,QAAQ;AAC9B;AACA,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,cAAc,IAAI,YAAY,0BAA0B,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA,EAGA,QAAc;AACZ,eAAW,MAAM;AACjB,aAAS,MAAM;AACf,mBAAe,MAAM;AAAA,EACvB;AACF;AAGO,IAAM,kBAAmC;;;AC/KhD,SAAS,wBAAyC;AAClD,SAAS,uBAAsC;AAG/C,IAAM,cAAc;AAGb,IAAM,sBAAsB,MAAM;AAYzC,SAAS,OAAO,SAAiB,MAAc,eAA+B;AAC5E,SAAO,GAAG,IAAI,IAAI,aAAa;AACjC;AAEA,IAAM,QAAQ,oBAAI,IAA8B;AAQhD,IAAM,WAAmC;AAAA,EACvC,cAAc;AAAA,EAAG,eAAe;AAAA,EAAG,cAAc;AAAA,EAAG,eAAe;AAAA,EACnE,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EAAI,aAAa;AAAA,EAAI,gBAAgB;AAAA,EACtD,cAAc;AAAA,EAAK,eAAe;AAAA,EAClC,iBAAiB;AAAA,EAAM,eAAe;AAAA,EAAM,kBAAkB;AAAA,EAC9D,cAAc;AAAA;AAAA;AAGhB;AAEA,SAAS,mBAAmB,MAA4B;AACtD,MAAI,OAAO;AACX,aAAW,OAAO,KAAM,SAAS,SAAS,GAAG,KAAK;AAClD,SAAO;AACT;AAEA,SAAS,mBAAmB,MAA4B;AACtD,SAAQ,OAAO,QAAQ,QAAQ,EAC5B,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,OAAO,SAAS,CAAC,EACtC,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI;AACzB;AAEA,SAAS,YAAY,QAAgB,MAAc,eAAyC;AAC1F,QAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,MAAI,QAAQ,MAAM,IAAI,GAAG;AACzB,MAAI,CAAC,OAAO;AACV,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,IAAI,IAAI,gBAAgB;AAAA,MACtC,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AACA,UAAM,IAAI,KAAK,KAAK;AAAA,EACtB;AACA,SAAO;AACT;AA8BO,IAAM,WAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWhC,MAAM,QAAgB,MAAc,eAAuB,YAAiC;AAC1F,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,UAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,QAAS,QAAO;AAC1B,WAAO,MAAM,aAAa,IAAI,UAAU;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,QAAgB,MAAc,eAAuB,YAA8B;AACvF,gBAAY,QAAQ,MAAM,aAAa,EAAE,aAAa,IAAI,UAAU;AAAA,EACtE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,OAAO,QAAgB,MAAc,eAAuB,YAA8B;AACxF,gBAAY,QAAQ,MAAM,aAAa,EAAE,aAAa,OAAO,UAAU;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,QAAgB,MAAc,eAA6B;AAC/D,gBAAY,QAAQ,MAAM,aAAa,EAAE,UAAU;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,QAAQ,QAAgB,MAAc,eAA6B;AACjE,gBAAY,QAAQ,MAAM,aAAa,EAAE,UAAU;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,UAAU,QAAgB,MAAc,eAAgC;AACtE,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,WAAO,MAAM,IAAI,GAAG,GAAG,WAAW;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,SAAS,QAAgB,MAAc,eAA6C;AAClF,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,UAAM,WAAW,MAAM,IAAI,GAAG;AAC9B,QAAI,CAAC,SAAU,QAAO;AACtB,WAAO;AAAA,MACL,QAAQ,SAAS;AAAA,MACjB,cAAc,MAAM,KAAK,SAAS,YAAY;AAAA,MAC9C,SAAS,SAAS;AAAA,MAClB,YAAY,SAAS;AAAA,IACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAA4B;AAC1B,WAAO,MAAM,KAAK,MAAM,OAAO,CAAC,EAAE,IAAI,QAAM;AAAA,MAC1C,QAAQ,EAAE;AAAA,MACV,cAAc,MAAM,KAAK,EAAE,YAAY;AAAA,MACvC,SAAS,EAAE;AAAA,MACX,YAAY,EAAE;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA;AAAA,EAGA,UAAgB;AACd,QAAI;AACF,YAAM,UAAU,MAAM,KAAK,MAAM,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM;AAAA,QAC9D;AAAA,QACA;AAAA,UACE,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,UACV,eAAe,IAAI;AAAA,UACnB,cAAc,MAAM,KAAK,IAAI,YAAY;AAAA,UACzC,SAAS,IAAI;AAAA,UACb,YAAY,IAAI;AAAA,QAClB;AAAA,MACF,CAAC;AACD,mBAAa,QAAQ,aAAa,KAAK,UAAU,OAAO,CAAC;AAAA,IAC3D,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA,EAGA,OAAa;AACX,QAAI;AACF,YAAM,MAAM,aAAa,QAAQ,WAAW;AAC5C,UAAI,CAAC,IAAK;AACV,UAAI,UAAU,KAAK,MAAM,GAAG;AAW5B,YAAM,aAAa,QAAQ,KAAK,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,GAAG,EAAE,WAAW,CAAC;AACtE,UAAI,YAAY;AACd,cAAM,YAAsB;AAAA,UAC1B,eAAe;AAAA,UACf,SAAS,OAAO;AAAA,YACd,QAAQ,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK;AAAA,cAChC,MAAM,mBAAmB,IAAI,YAAY;AAAA,cACzC,SAAS,IAAI;AAAA,cACb,OAAO,IAAI,cAAc;AAAA,YAC3B,CAAC,CAAC;AAAA,UACJ;AAAA,QACF;AACA,cAAM,WAAW,gBAAgB,SAAS;AAC1C,YAAI,aAAa,WAAW;AAE1B,oBAAU,OAAO,QAAQ,SAAS,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/D,kBAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,mBAAO,CAAC,KAAK;AAAA,cACX,QAAQ;AAAA,cACR,MAAM,MAAM,CAAC,KAAK;AAAA,cAClB,eAAe,MAAM,CAAC,KAAK;AAAA,cAC3B,cAAc,mBAAmB,MAAM,IAAI;AAAA,cAC3C,SAAS,MAAM;AAAA,cACf,YAAY,MAAM;AAAA,YACpB,CAAC;AAAA,UACH,CAAC;AAED,uBAAa,QAAQ,aAAa,KAAK,UAAU,OAAO,CAAC;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,MAAM;AACZ,iBAAW,CAAC,KAAK,GAAG,KAAK,SAAS;AAChC,YAAI,IAAI,SAAS,UAAa,IAAI,kBAAkB,OAAW;AAC/D,cAAM,IAAI,KAAK;AAAA,UACb;AAAA,UACA,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,UACV,eAAe,IAAI;AAAA,UACnB,cAAc,IAAI,IAAI,IAAI,YAAY;AAAA,UACtC,SAAS,IAAI;AAAA,UACb,YAAY,IAAI,cAAc;AAAA,QAChC,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAEN,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,cAAc,QAAgB,MAAc,eAA+B;AACzE,UAAM,MAAM,OAAO,QAAQ,MAAM,aAAa;AAC9C,WAAO,MAAM,IAAI,GAAG,GAAG,cAAc;AAAA,EACvC;AAAA;AAAA,EAGA,QAAc;AACZ,UAAM,MAAM;AACZ,QAAI;AACF,mBAAa,WAAW,WAAW;AAAA,IACrC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AC5SA,IAAMC,eAAc;AACpB,IAAM,QAAQ,oBAAI,IAAgC;AAElD,SAAS,SAAS,QAAgB,MAAsB;AACtD,SAAO,GAAG,MAAM,IAAI,IAAI;AAC1B;AAyBO,IAAM,gBAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ1C,IAAI,QAAgB,MAA8C;AAChE,WAAO,MAAM,IAAI,SAAS,QAAQ,IAAI,CAAC;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,OAAiC;AACnC,UAAM,IAAI,SAAS,MAAM,QAAQ,MAAM,IAAI,GAAG,KAAK;AACnD,kBAAc,QAAQ;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,IAAI,QAAgB,MAAc,MAAuB;AACvD,UAAM,QAAQ,MAAM,IAAI,SAAS,QAAQ,IAAI,CAAC;AAC9C,WAAO,CAAC,CAAC,SAAS,MAAM,kBAAkB;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,QAAgB,MAAoB;AACzC,UAAM,OAAO,SAAS,QAAQ,IAAI,CAAC;AACnC,kBAAc,QAAQ;AAAA,EACxB;AAAA;AAAA,EAGA,OAAa;AACX,QAAI;AACF,YAAM,MAAM,aAAa,QAAQA,YAAW;AAC5C,UAAI,CAAC,IAAK;AACV,YAAM,UAAU,KAAK,MAAM,GAAG;AAC9B,YAAM,MAAM;AACZ,iBAAW,CAAC,KAAK,GAAG,KAAK,QAAS,OAAM,IAAI,KAAK,GAAG;AAAA,IACtD,QAAQ;AAAqD,YAAM,MAAM;AAAA,IAAG;AAAA,EAC9E;AAAA;AAAA,EAGA,UAAgB;AACd,QAAI;AACF,mBAAa,QAAQA,cAAa,KAAK,UAAU,MAAM,KAAK,MAAM,QAAQ,CAAC,CAAC,CAAC;AAAA,IAC/E,QAAQ;AAAA,IAAgF;AAAA,EAC1F;AAAA;AAAA,EAGA,QAAc;AACZ,UAAM,MAAM;AACZ,QAAI;AAAE,mBAAa,WAAWA,YAAW;AAAA,IAAG,QAAQ;AAAA,IAA0D;AAAA,EAChH;AACF;;;AC9FA,IAAM,UAAoC,oBAAI,IAAyB;AACvE,IAAI,UAAU;AAEd,SAAS,OAAa;AACpB;AACA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,cAAc,IAAI,YAAY,uBAAuB,CAAC;AAAA,EAC/D;AACF;AA4BO,IAAM,eAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQxC,SAAS,UAAkB,cAAsB,OAAqB;AACpE,YAAQ,IAAI,UAAU,EAAE,UAAU,cAAc,OAAO,OAAO,MAAM,CAAC;AACrE,SAAK;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,UAAwB;AACjC,QAAI,QAAQ,OAAO,QAAQ,EAAG,MAAK;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,UAAkB,QAAkC;AAC9D,UAAM,MAAM,QAAQ,IAAI,QAAQ;AAChC,QAAI,CAAC,IAAK;AACV,QAAI,OAAO,UAAU,OAAW,KAAI,QAAQ,OAAO;AACnD,SAAK;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,KAAK,UAAkB,OAAsB;AAC3C,UAAM,MAAM,QAAQ,IAAI,QAAQ;AAChC,QAAI,KAAK;AAAE,UAAI,QAAQ;AAAO,WAAK;AAAA,IAAG;AACtC,UAAM,eAAe,eAAe,gBAAgB,QAAQ;AAC5D,QAAI,cAAc;AAChB,YAAM,YAAY;AAAA,QAChB,MAAM;AAAA;AAAA,QACN,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,QACxC,MAAM,CAAC,CAAC,KAAK,qBAAqB,CAAC;AAAA,QACnC,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,QACjC,QAAQ;AAAA,QACR,IAAI,cAAc,QAAQ,IAAI,KAAK,IAAI,CAAC;AAAA,QACxC,KAAK;AAAA,MACP;AACA,mBAAa,YAAY,CAAC,SAAS,aAAa,SAAS,GAAG,GAAG;AAAA,IACjE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,IAAI,UAA2B;AAAE,WAAO,QAAQ,IAAI,QAAQ;AAAA,EAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ/D,IAAI,UAA2C;AAAE,WAAO,QAAQ,IAAI,QAAQ;AAAA,EAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO/E,aAAuC;AAAE,WAAO,IAAI,IAAI,OAAO;AAAA,EAAG;AAAA;AAAA,EAGlE,IAAI,UAAkB;AAAE,WAAO;AAAA,EAAS;AAAA;AAAA,EAGxC,IAAI,QAAgB;AAAE,WAAO,QAAQ;AAAA,EAAM;AAAA;AAAA,EAG3C,QAAc;AAAE,YAAQ,MAAM;AAAG,cAAU;AAAA,EAAG;AAChD;;;AC1JA,IAAM,yBAAyB;AAAA,EAC7B;AAAA,EAAS;AAAA,EAAY;AAAA,EAAW;AAAA,EAAO;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAS;AACnE;AAEA,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EAAU;AAAA,EAAU;AAAA,EAAY;AAAA,EAAO;AAAA,EAAU;AAAA,EAAU;AAAA,EAAQ;AAAA,EACnE;AAAA,EAAS;AAAA,EAAU;AAAA,EAAO;AAAA,EAAU;AAAA,EAAM;AAAA,EAC1C;AACF;AAaO,SAAS,uBAAuB,OAAwC;AAC7E,QAAM,WAAW,IAAI,IAAI,MAAM,cAAc,mBAAmB,CAAC,CAAC;AAClE,QAAM,UAAoB,uBAAuB,OAAO,CAAC,WAAW,CAAC,SAAS,IAAI,MAAM,CAAC;AAEzF,aAAW,UAAU,sBAAsB;AACzC,QAAI,CAAC,SAAS,IAAI,MAAM,KAAK,oBAAoB,OAAO,MAAM,EAAG,SAAQ,KAAK,MAAM;AAAA,EACtF;AAEA,SAAO,OAAO,OAAO,EAAE,SAAS,WAAW,OAAO,EAAE,CAAC;AACvD;AAaO,SAAS,wBACd,OACA,UACkB;AAClB,QAAM,eAAe,uBAAuB,KAAK;AACjD,QAAM,WAAW,IAAI,IAAI,MAAM,cAAc,mBAAmB,CAAC,CAAC;AAClE,QAAM,WAAW,gBAAgB,OAAO,aAAa,SAAS,QAAQ;AACtE,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,SAAS,WAAW,aAAa,OAAO;AAAA,IACxC,UAAU,WAAW,QAAQ;AAAA,EAC/B,CAAC;AACD,QAAM,UAAU,MAAM,cAAc,qBAAqB,UAAU,SAAS,KAAK;AAEjF,SAAO,OAAO,OAAO;AAAA,IACnB,cAAc,OAAO,OAAO;AAAA,MAC1B,SAAS,WAAW,iBAAiB,UAAU,SAAS,QAAQ,OAAO,CAAC;AAAA,IAC1E,CAAC;AAAA,IACD,UAAU,WAAW,iBAAiB,UAAU,UAAU,QAAQ,QAAQ,CAAC;AAAA,EAC7E,CAAC;AACH;AAEA,SAAS,oBAAoB,OAAqB,QAAyB;AACzE,MAAI,CAAC,MAAM,WAAW,MAAM,EAAG,QAAO;AAEtC,UAAQ,QAAQ;AAAA,IACd,KAAK;AAAU,aAAO,QAAQ,MAAM,SAAS;AAAA,IAC7C,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM,QAAQ,MAAM,QAAQ,YAAY,MAAM;AAAA,IAC9F,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD,KAAK;AAAQ,aAAO,MAAM,MAAM,YAAY,MAAM;AAAA,IAClD,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD,KAAK;AAAS,aAAO,MAAM,OAAO,YAAY,MAAM;AAAA,IACpD,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD,KAAK;AAAO,aAAO,MAAM,KAAK,YAAY,MAAM;AAAA,IAChD,KAAK;AAAU,aAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,IACtD;AAAS,aAAO;AAAA,EAClB;AACF;AAEA,SAAS,gBACP,OACA,SACA,UACU;AACV,QAAM,cAAc,IAAI,IAAI,OAAO;AACnC,SAAO,OAAO,KAAK,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS;AACxD,QAAI,SAAS,IAAI,IAAI,EAAG,QAAO;AAC/B,WAAO,CAAC,qBAAqB,SAAS,IAA2C,KAAK,YAAY,IAAI,IAAI;AAAA,EAC5G,CAAC;AACH;AAEA,SAAS,iBAAiB,WAA8B,WAAwC;AAC9F,QAAM,eAAe,IAAI,IAAI,SAAS;AACtC,SAAO,UAAU,OAAO,CAAC,UAAU,aAAa,IAAI,KAAK,CAAC;AAC5D;AAEA,SAAS,WAAW,QAA8C;AAChE,SAAO,OAAO,OAAO,CAAC,GAAG,MAAM,CAAC;AAClC;;;AC9EO,SAAS,wBAAyC;AACvD,QAAM,WAAW,oBAAI,QAAwB;AAC7C,QAAM,sBAAsB,oBAAI,IAAoB;AACpD,QAAM,eAAe,oBAAI,IAA8B;AACvD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,UAAU,QAAiB;AACzC,aAAO,aAAa,IAAI,QAAQ,GAAG,aAAa,QAAQ,SAAS,MAAM,KAAK;AAAA,IAC9E;AAAA,IACA,QAAc;AACZ,0BAAoB,MAAM;AAC1B,mBAAa,MAAM;AAAA,IACrB;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA4B;AAE1B,MAAI,MAAM,SAAS,IAAI,YAAY,MAAM,sBAAsB;AAC7D;AAAA,EACF;AAEA,QAAM,WAAW,qBAAqB,OAAO,UAAU,YAAY;AACnE,MAAI,CAAC,SAAU;AAEf,+BAA6B,EAAE,QAAQ,SAAS,OAAO,sBAAsB,UAAU,SAAS,CAAC;AACjG,QAAM,cAAc,eAAe,eAAe,YAAY,KAAK,wBAAwB,OAAO,QAAQ;AAC1G,QAAM,aAAa,IAAI,UAAU,WAAW;AAC5C,gBAAc,cAAc,WAAW;AACvC,QAAM,SAAS,IAAI,cAAc,oBAAoB;AACvD;AAEA,SAAS,6BAA6B;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAES;AAKP,QAAM,WAAW,QAAQ,gBAAgB,mBAAmB,QAAQ;AACpE,QAAM,uBAAuB,MAAM,oBAAoB,IAAI,QAAQ;AACnE,MAAI,YAAY,yBAAyB,sBAAsB;AAC7D;AAAA,EACF;AACA,MAAI,YAAY,yBAAyB,QAAW;AAClD,YAAQ,gBAAgB,WAAW,QAAQ;AAAA,EAC7C;AACA,MAAI,YAAY,yBAAyB,OAAW;AAEpD,QAAM,QAAsB;AAAA,IAC1B,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,MAAM,SAAS;AAAA,IACf,eAAe,SAAS;AAAA,IACxB,cAAc,KAAK,IAAI;AAAA,IACvB,YAAY,OAAO,WAAW;AAAA,IAC9B,YAAY;AAAA,EACd;AACA,UAAQ,gBAAgB,SAAS,UAAU,KAAK;AAChD,QAAM,oBAAoB,IAAI,UAAU,oBAAoB;AAC9D;AAEA,SAAS,qBACP,OACA,UACA,cACgD;AAKhD,QAAM,eAAe,MAAM,sBAAsB,QAAQ;AACzD,MAAI,iBAAiB,QAAQ,iBAAiB,QAAW;AACvD,WAAO,OAAO,OAAO;AAAA,MACnB,MAAM,aAAa;AAAA,MACnB,eAAe,aAAa;AAAA,IAC9B,CAAC;AAAA,EACH;AAEA,QAAM,iBAAiB,eAAe,YAAY,YAAY;AAC9D,MAAI,CAAC,gBAAgB;AACnB,WAAO;AAAA,EACT;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB,MAAM,eAAe;AAAA,IACrB,eAAe,eAAe;AAAA,EAChC,CAAC;AACH;AAEA,SAAS,cACP,KACA,aACM;AACN,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,cAAc,YAAY;AAAA,IAC1B,UAAU,YAAY;AAAA,EACxB;AACA,MAAI,YAAY,SAAS,GAAG;AAC9B;;;ARuBA,SAAS,eACP,OACA,OACA,QACM;AACN,MAAI,CAAC,MAAM,kBAAmB;AAC9B,QAAM,OAAO,MAAM;AACnB,QAAM,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,OAAO,KAAK,SAAS,WAC3E,KAAK,OACL;AACJ,MAAI;AACF,UAAM,kBAAkB,EAAE,MAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC;AAAA,EAChE,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,kBAAkB,OAAkC;AAClE,QAAM,kBAAkB,sBAAsB;AAC9C,QAAM,eAAe,WAAW,OAAO;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,UAAmB,cAAc;AAAA,IACrC,GAAG;AAAA,IACH,iBAAiB,gBAAgB;AAAA,EACnC,CAAC;AAED,WAAS,0BACP,UACA,QACA,YACM;AAGN,eAAW,SAAS,QAAQ,gBAAgB,cAAc,GAAG;AAC3D,YAAM,cAAc,gBAAgB,aAAa,IAAI,MAAM,QAAQ;AACnE,UAAI,CAAC,aAAa,aAAa,QAAQ,SAAS,MAAM,EAAG;AACzD,UAAI,CAAC,QAAQ,SAAS,MAAM,MAAM,QAAQ,MAAM,MAAM,MAAM,eAAe,UAAU,EAAG;AAExF,YAAM,MAAM,eAAe,gBAAgB,MAAM,QAAQ;AACzD,UAAI,CAAC,IAAK;AACV,UAAI,YAAY,UAAU,GAAG;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,cAAc,OAA2B;AACvC,YAAM,eAAe,MAAM;AAC3B,UAAI,CAAC,cAAc;AACjB,uBAAe,OAAO,OAAO,kBAAkB;AAC/C;AAAA,MACF;AACA,YAAM,WAAW,eAAe,YAAY,YAAY;AACxD,UAAI,CAAC,UAAU;AACb,uBAAe,OAAO,OAAO,qBAAqB;AAClD;AAAA,MACF;AACA,YAAM,MAAM,MAAM;AAGlB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,OAAO,IAAI,SAAS,SAAU;AAG7E,UAAI,IAAI,SAAS,eAAe;AAC9B,yBAAiB;AAAA,UACf;AAAA,UACA,QAAQ,MAAM;AAAA,UACd;AAAA,UACA,OAAO;AAAA,UACP,sBAAsB,eAAe,kBAAkB,YAAY,KAAK;AAAA,UACxE;AAAA,UACA;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAGA,cAAQ,cAAc,UAAU,GAAG;AAAA,IACrC;AAAA,IAEA,YAAY,OAAe,SAAwB;AACjD,cAAQ,YAAY,OAAO,OAAO;AAAA,IACpC;AAAA,IAEA,UAAgB;AACd,cAAQ,QAAQ;AAChB,sBAAgB,MAAM;AAAA,IACxB;AAAA,IAEA,uBAAuB,SAAkD;AACvE,cAAQ,uBAAuB,OAAO;AAAA,IACxC;AAAA,IAEA,aAAa,OAAoB;AAC/B,YAAM,WAA2B,EAAE,MAAM,iBAAiB,MAAM;AAChE,gCAA0B,UAAU,SAAS,YAAY;AAAA,IAC3D;AAAA,IAEA,uBAAuB,QAAsB;AAC3C,YAAM,WAA2B,EAAE,MAAM,oBAAoB,OAAO;AACpE,gCAA0B,UAAU,YAAY,eAAe;AAAA,IACjE;AAAA,IAEA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;AS5PA,SAAS,kBAAkB,SAAsC;AAC/D,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,aAAuB,CAAC;AAC9B,aAAW,UAAU,SAAS;AAC5B,UAAM,QAAQ,OAAO,KAAK;AAC1B,QAAI,CAAC,SAAS,MAAM,SAAS,GAAG,KAAK,MAAM,WAAW,OAAO,KAAK,KAAK,IAAI,KAAK,GAAG;AACjF;AAAA,IACF;AACA,SAAK,IAAI,KAAK;AACd,eAAW,KAAK,KAAK;AAAA,EACvB;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAwB;AAC1C,SAAO,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,SAAS;AACtD;AAeO,SAAS,8BAA8B,SAAiD;AAC7F,QAAM,UAAU,kBAAkB,CAAC,SAAS,GAAG,QAAQ,OAAO,CAAC;AAC/D,SAAO,uCAAuC,wBAAwB,SAAS,CAAC,KAAK,WAAW,OAAO,CAAC;AAC1G;AAgBO,SAAS,8BACd,MACA,SACQ;AACR,QAAM,UAAU,8BAA8B,OAAO;AACrD,QAAM,UAAU;AAChB,MAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,WAAO,KAAK,QAAQ,SAAS,CAAC,UAAU,GAAG,KAAK,GAAG,OAAO,EAAE;AAAA,EAC9D;AACA,MAAI,eAAe,KAAK,IAAI,GAAG;AAC7B,WAAO,KAAK,QAAQ,gBAAgB,CAAC,SAAS,GAAG,IAAI,GAAG,OAAO,EAAE;AAAA,EACnE;AACA,MAAI,eAAe,KAAK,IAAI,GAAG;AAC7B,WAAO,KAAK,QAAQ,gBAAgB,CAAC,SAAS,GAAG,IAAI,SAAS,OAAO,SAAS;AAAA,EAChF;AACA,SAAO,GAAG,OAAO,GAAG,IAAI;AAC1B;AAEA,SAAS,wBAAwB,SAAyB;AACxD,QAAM,SAAS;AACf,QAAM,UAAU,IAAI,IAAI,OAAO;AAC/B,QAAM,mBAAmB;AAKzB,WAAS,KAAa;AACpB,QAAI,OAAO,QAAQ,WAAY,QAAO,OAAO,OAAO,WAAW;AAC/D,WAAO,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAAA,EACrE;AAEA,WAAS,KAAK,SAA+B;AAC3C,WAAO,OAAO,YAAY,SAAS,GAAG;AAAA,EACxC;AAEA,WAAS,OAAO,UAAgC;AAC9C,WAAO,iBAAiB,WAAW,QAAQ;AAC3C,WAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAAA,EAC7D;AAEA,WAAS,gBAAgB,OAA8B;AACrD,WAAO,MAAM,WAAW,OAAO;AAAA,EACjC;AAEA,WAAS,QACP,SACA,YACA,KACA,UAAuC,CAAC,GAC5B;AACZ,UAAM,YAAY,QAAQ,MAAM,GAAG;AACnC,UAAM,WAAW,EAAE,GAAG,SAAS,IAAI,UAAU;AAC7C,WAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,YAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,YAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,cAAM,WAAW,MAAM;AACvB,YAAI,OAAO,aAAa,YAAY,aAAa,KAAM;AACvD,cAAM,MAAM;AACZ,YAAI,IAAI,SAAS,cAAc,IAAI,SAAS,GAAG,QAAQ,IAAI,SAAU;AACrE,YAAI,IAAI,OAAO,UAAW;AAC1B,YAAI;AACJ,qBAAa,KAAK;AAClB,cAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAC1D,YAAI,SAAS,QAAQ,kBAAkB,OAAO;AAC5C,iBAAO,IAAI,MAAM,KAAK,CAAC;AACvB;AAAA,QACF;AACA,YAAI;AACF,kBAAQ,IAAI,GAAG,CAAC;AAAA,QAClB,SAAS,KAAK;AACZ,iBAAO,GAAG;AAAA,QACZ;AAAA,MACF,CAAC;AACD,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI;AACJ,eAAO,IAAI,MAAM,GAAG,QAAQ,IAAI,YAAY,CAAC;AAAA,MAC/C,GAAG,gBAAgB;AACnB,WAAK,QAAQ;AAAA,IACf,CAAC;AAAA,EACH;AAEA,WAAS,KAAK,SAA+B;AAC3C,SAAK,OAAO;AAAA,EACd;AAEA,WAAS,kBAAkB,OAAwB;AACjD,UAAM,UAAU,MAAM,OAAO,MAAM;AACnC,UAAM,OAAO,YAAY,KAAK,QAAQ,MAAM,MAAM,GAAG,OAAO;AAC5D,WAAO,6BAA6B,KAAK,IAAI;AAAA,EAC/C;AAEA,WAAS,uBACP,OACA,oBACqD;AACrD,QAAI,OAAO,UAAU,SAAU,OAAM,IAAI,UAAU,wBAAwB;AAC3E,QAAI,CAAC,kBAAkB,KAAK,EAAG,QAAO,EAAE,MAAM;AAC9C,QAAI,MAAM,SAAS,GAAG,EAAG,OAAM,IAAI,UAAU,4CAA4C;AACzF,UAAM,aAAa,MAAM,QAAQ,GAAG;AACpC,QAAI,eAAe,IAAI;AACrB,aAAO,EAAE,MAAM;AAAA,IACjB;AACA,QAAI,oBAAoB;AACtB,YAAM,IAAI,UAAU,gEAAgE;AAAA,IACtF;AAEA,UAAM,UAAmC,CAAC;AAC1C,UAAM,QAAQ,oBAAI,IAAY;AAC9B,UAAM,QAAQ,MAAM,MAAM,aAAa,CAAC;AACxC,QAAI,OAAO;AACT,iBAAW,QAAQ,MAAM,MAAM,GAAG,GAAG;AACnC,cAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,YAAI,YAAY,GAAG;AACjB,gBAAM,IAAI,UAAU,sDAAsD;AAAA,QAC5E;AACA,YAAI;AACJ,YAAI;AACJ,YAAI;AACF,iBAAO,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;AAClD,kBAAQ,mBAAmB,KAAK,MAAM,YAAY,CAAC,CAAC;AAAA,QACtD,QAAQ;AACN,gBAAM,IAAI,UAAU,sDAAsD;AAAA,QAC5E;AACA,YAAI,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,UAAU,uCAAuC;AAChF,cAAM,IAAI,IAAI;AACd,gBAAQ,KAAK,CAAC,MAAM,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF;AACA,WAAO,EAAE,OAAO,MAAM,MAAM,GAAG,UAAU,GAAG,SAAS,OAAO,YAAY,OAAO,EAAE;AAAA,EACnF;AAEA,WAAS,cAAc,KAA8C;AACnE,WAAO;AAAA,EACT;AAEA,WAAS,gBAAgB,KAAuD;AAC9E,UAAM,EAAE,MAAM,OAAO,IAAI,KAAK,GAAG,OAAO,IAAI;AAC5C,WAAO;AAAA,EACT;AAEA,WAAS,aAAgB,KAAqB,OAAe,UAAqB;AAChF,QAAI,OAAO,UAAU,eAAe,KAAK,KAAK,KAAK,EAAG,QAAO,IAAI,KAAK;AACtE,UAAM,IAAI,MAAM,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,QAAQ;AAAA,EACtE;AAEA,WAAS,WAAW,KAAqB,UAAwB;AAC/D,QAAI,OAAO,IAAI,UAAU,YAAY,IAAI,MAAO,OAAM,IAAI,MAAM,IAAI,KAAK;AACzE,QAAI,IAAI,OAAO,MAAO,OAAM,IAAI,MAAM,QAAQ;AAAA,EAChD;AAEA,WAAS,mBAAmB,OAAsC;AAChE,QAAI,SAAS;AACb,WAAO;AAAA,MACL,QAAQ;AACN,YAAI,OAAQ;AACZ,iBAAS;AACT,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAO5C,UAAM,gBAAgB,OAAO,OAAO,CAAC,CAAa;AAClD,UAAM,gBAAgB,oBAAI,IAAkB;AAC5C,QAAI;AACJ,QAAI,eAAwD,MAAM;AAClE,UAAM,QAAQ,IAAI,QAA0B,CAAC,YAAY;AACvD,qBAAe;AAAA,IACjB,CAAC;AAED,UAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,UAAI,CAAC,gBAAgB,KAAK,KAAK,YAAa;AAC5C,YAAM,WAAW,MAAM;AACvB,UAAI,OAAO,aAAa,YAAY,aAAa,KAAM;AACvD,YAAM,UAAU;AAChB,UAAI,QAAQ,SAAS,aAAc;AAEnC,YAAM,kBAAkB,QAAQ;AAChC,YAAM,aAAa,OAAO,oBAAoB,YAAY,oBAAoB,OACzE,gBAA4C,UAC7C;AACJ,UAAI,CAAC,MAAM,QAAQ,UAAU,EAAG;AAEhC,YAAMC,WAAU,cAAc,UAAU;AACxC,YAAM,WAAW,cAAc,MAAM,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,WAAW,CAAC,CAAC;AACtF,oBAAc,OAAO,OAAO;AAAA,QAC1B,cAAc,OAAO,OAAO,EAAE,SAAAA,SAAQ,CAAC;AAAA,QACvC;AAAA,MACF,CAAC;AACD,UAAI;AACJ,mBAAa,WAAW;AACxB,iBAAW,WAAW,cAAe,SAAQ,WAAW;AACxD,oBAAc,MAAM;AAAA,IACtB,CAAC;AAED,aAAS,cAAc,QAA+C;AACpE,YAAM,OAAO,oBAAI,IAAY;AAC7B,YAAM,UAAoB,CAAC;AAC3B,iBAAW,SAAS,QAAQ;AAC1B,YAAI,OAAO,UAAU,YAAY,MAAM,WAAW,KAAK,KAAK,IAAI,KAAK,EAAG;AACxE,aAAK,IAAI,KAAK;AACd,gBAAQ,KAAK,KAAK;AAAA,MACpB;AACA,aAAO,OAAO,OAAO,OAAO;AAAA,IAC9B;AAEA,aAAS,SAAS,QAAyB;AACzC,aAAO,OAAO,WAAW,YAAY,aAAa,aAAa,QAAQ,SAAS,MAAM,MAAM;AAAA,IAC9F;AAEA,UAAMC,SAAQ;AAAA,MACZ,OAAO,MAAM;AAAA,MACb;AAAA,MACA,IAAI,WAA8B;AAChC,eAAO,aAAa,YAAY;AAAA,MAClC;AAAA,MACA,IAAI,SAAS,WAA8B;AAAA,MAE3C;AAAA,MACA,QAAQ,SAAuB;AAC7B,YAAI,aAAa;AACf,kBAAQ,WAAW;AACnB,iBAAO,mBAAmB,MAAM,MAAS;AAAA,QAC3C;AACA,sBAAc,IAAI,OAAO;AACzB,eAAO,mBAAmB,MAAM,cAAc,OAAO,OAAO,CAAC;AAAA,MAC/D;AAAA,IACF;AAEA,SAAK,EAAE,MAAM,cAAc,CAAC;AAC5B,WAAOA;AAAA,EACT;AAEA,WAAS,kBACP,WACA,UACA,SAA+C,CAAC,YAAY,QAAQ,OACjD;AACnB,UAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,UAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,YAAM,MAAM,MAAM;AAClB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,UAAW,UAAS,OAAO,GAAG,CAAC;AAAA,IAC7F,CAAC;AACD,WAAO,mBAAmB,GAAG;AAAA,EAC/B;AAEA,WAAS,YAAqC;AAC5C,WAAO;AAAA,MACL,UAAU,SAAkB,SAAoC,QAAoB,SAA8B;AAChH,cAAM,QAAQ,GAAG;AACjB,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,UAAU,MAAO;AACpE,cAAI,IAAI,SAAS,cAAe,SAAQ,IAAI,MAAM;AAAA,mBACzC,IAAI,SAAS,aAAc,QAAO;AAAA,mBAClC,IAAI,SAAS,eAAgB,KAAI;AAAA,QAC5C,CAAC;AACD,aAAK;AAAA,UACH,MAAM;AAAA,UACN,IAAI,GAAG;AAAA,UACP;AAAA,UACA,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO;AAAA,UACpD,GAAI,SAAS,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QACnD,CAAC;AACD,eAAO,mBAAmB,MAAM;AAC9B,eAAK,EAAE,MAAM,eAAe,IAAI,GAAG,GAAG,MAAM,CAAC;AAC7C,cAAI;AAAA,QACN,CAAC;AAAA,MACH;AAAA,MACA,QAAQ,UAAmB;AACzB,eAAO;AAAA,UACL,EAAE,MAAM,iBAAiB,OAAO,SAAS;AAAA,UACzC;AAAA,UACA,CAAC,QAAQ;AACP,gBAAI,CAAC,IAAI,MAAO,OAAM,IAAI,MAAM,oCAAoC;AACpE,mBAAO,IAAI;AAAA,UACb;AAAA,QACF;AAAA,MACF;AAAA,MACA,iBAAiB,UAAmB,WAAmB,aAAa,SAAS;AAC3E,eAAO;AAAA,UACL,EAAE,MAAM,0BAA0B,OAAO,UAAU,WAAW,WAAW;AAAA,UACzE;AAAA,UACA,CAAC,QAAQ;AACP,gBAAI,CAAC,IAAI,MAAO,OAAM,IAAI,MAAM,6CAA6C;AAC7E,mBAAO,IAAI;AAAA,UACb;AAAA,QACF;AAAA,MACF;AAAA,MACA,MAAM,SAAkB;AACtB,eAAO;AAAA,UACL,EAAE,MAAM,eAAe,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE;AAAA,UAC7E;AAAA,UACA,CAAC,QAAQ,MAAM,QAAQ,IAAI,MAAM,IAAI,IAAI,SAAS,CAAC;AAAA,QACrD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,WAAS,UAAmC;AAO1C,UAAM,cAAc,oBAAI,IAAwB;AAWhD,UAAM,oBAAoB;AAC1B,UAAM,gBAAgB,oBAAI,IAA0B;AACpD,UAAM,iBAAiB,oBAAI,IAA+C;AAC1E,UAAM,gBAAgC,CAAC;AACvC,UAAM,iBAAiB,oBAAI,IAA4B;AACvD,UAAM,iBAAiB,oBAAI,IAA2B;AAEtD,aAAS,wBAAwB,OAAwB;AACvD,UAAI,OAAO,UAAU,SAAU,OAAM,IAAI,UAAU,wBAAwB;AAC3E,UAAI,kBAAkB,KAAK,MAAM,MAAM,SAAS,GAAG,KAAK,MAAM,SAAS,GAAG,IAAI;AAC5E,cAAM,IAAI,UAAU,sDAAsD;AAAA,MAC5E;AACA,aAAO;AAAA,IACT;AAEA,aAAS,kBAAkB,OAAqB,QAAuB,aAA4B;AACjG,UAAI,MAAM,OAAQ;AAClB,YAAM,SAAS;AACf,UAAI,YAAa,MAAK,EAAE,MAAM,qBAAqB,WAAW,MAAM,UAAU,CAAC;AAC/E,iBAAW,WAAW,MAAM,eAAgB,SAAQ,MAAM;AAAA,IAC5D;AAEA,aAAS,kBAAkB,OAA8C;AACvE,aAAO;AAAA,QACL,IAAI,MAAM;AAAA,QACV,MAAM,MAAM;AAAA,QACZ,KAAK,SAAmB;AACtB,cAAI,MAAM,OAAQ;AAClB,eAAK,EAAE,MAAM,oBAAoB,WAAW,MAAM,WAAW,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,EAAG,CAAC;AAAA,QAC9G;AAAA,QACA,GAAG,SAAwC;AACzC,cAAI,OAAO,YAAY,WAAY,OAAM,IAAI,UAAU,8CAA8C;AACrG,gBAAM,cAAc,IAAI,OAAO;AAC/B,gBAAM,UAAU,MAAM,cAAc,OAAO,CAAC;AAC5C,qBAAW,SAAS,QAAS,SAAQ,KAAK;AAC1C,iBAAO,mBAAmB,MAAM,MAAM,cAAc,OAAO,OAAO,CAAC;AAAA,QACrE;AAAA,QACA,SAAS,SAA0C;AACjD,cAAI,OAAO,YAAY,WAAY,OAAM,IAAI,UAAU,8CAA8C;AACrG,gBAAM,eAAe,IAAI,OAAO;AAChC,cAAI,MAAM,OAAQ,SAAQ,MAAM,MAAM;AACtC,iBAAO,mBAAmB,MAAM,MAAM,eAAe,OAAO,OAAO,CAAC;AAAA,QACtE;AAAA,QACA,QAAQ;AACN,4BAAkB,OAAO,EAAE,WAAW,MAAM,UAAU,GAAG,IAAI;AAAA,QAC/D;AAAA,MACF;AAAA,IACF;AAEA,aAAS,mBAAmB,WAAmB,MAA4B;AACzE,YAAM,WAAW,cAAc,IAAI,SAAS;AAC5C,UAAI,SAAU,QAAO;AACrB,YAAM,QAAsB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA,eAAe,oBAAI,IAAI;AAAA,QACvB,gBAAgB,oBAAI,IAAI;AAAA,QACxB,eAAe,eAAe,IAAI,SAAS,KAAK,CAAC;AAAA,MACnD;AACA,qBAAe,OAAO,SAAS;AAC/B,oBAAc,IAAI,WAAW,KAAK;AAClC,YAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,qBAAe,OAAO,SAAS;AAC/B,UAAI,OAAQ,mBAAkB,OAAO,QAAQ,KAAK;AAClD,aAAO;AAAA,IACT;AAEA,aAAS,cAAc,OAA2B;AAChD,YAAM,SAAS,kBAAkB,KAAK;AACtC,UAAI,eAAe,OAAO,GAAG;AAC3B,mBAAW,WAAW,eAAgB,SAAQ,MAAM;AACpD;AAAA,MACF;AACA,oBAAc,KAAK,KAAK;AAAA,IAC1B;AAEA,aAAS,oBAAoB,WAAmB,QAAgB,gBAAyB,SAAwB;AAC/G,YAAM,QAAsB,iBAAiB,EAAE,WAAW,QAAQ,QAAQ,IAAI,EAAE,WAAW,OAAO;AAClG,YAAM,QAAQ,cAAc,IAAI,SAAS;AACzC,UAAI,CAAC,OAAO;AACV,cAAM,UAAU,eAAe,IAAI,SAAS,KAAK,CAAC;AAClD,YAAI,QAAQ,UAAU,mBAAmB;AACvC,yBAAe,OAAO,SAAS;AAC/B,yBAAe,IAAI,WAAW,EAAE,WAAW,QAAQ,kBAAkB,CAAC;AACtE,eAAK,EAAE,MAAM,qBAAqB,UAAU,CAAC;AAC7C;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK;AAClB,uBAAe,IAAI,WAAW,OAAO;AACrC;AAAA,MACF;AACA,UAAI,MAAM,OAAQ;AAClB,UAAI,MAAM,cAAc,OAAO,GAAG;AAChC,mBAAW,WAAW,MAAM,cAAe,SAAQ,KAAK;AACxD;AAAA,MACF;AACA,UAAI,MAAM,cAAc,UAAU,mBAAmB;AACnD,0BAAkB,OAAO,EAAE,WAAW,QAAQ,kBAAkB,GAAG,IAAI;AACvE;AAAA,MACF;AACA,YAAM,cAAc,KAAK,KAAK;AAAA,IAChC;AAEA,WAAO,CAAC,UAAU;AAChB,UAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,YAAM,MAAM,MAAM;AAClB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,OAAO,IAAI,SAAS,SAAU;AAC7E,UAAI,IAAI,SAAS,wBAAwB,OAAO,IAAI,cAAc,YAAY,OAAO,IAAI,SAAS,UAAU;AAC1G,sBAAc,mBAAmB,IAAI,WAAW,IAAI,IAAI,CAAC;AACzD;AAAA,MACF;AACA,UAAI,IAAI,SAAS,uBAAuB,OAAO,IAAI,cAAc,YAAY,OAAO,IAAI,WAAW,UAAU;AAC3G,4BAAoB,IAAI,WAAW,IAAI,QAAQ,OAAO,UAAU,eAAe,KAAK,KAAK,SAAS,GAAG,IAAI,OAAO;AAChH;AAAA,MACF;AACA,UAAI,IAAI,SAAS,wBAAwB,OAAO,IAAI,cAAc,UAAU;AAC1E,cAAM,SAAwB,OAAO,IAAI,WAAW,WAChD,EAAE,WAAW,IAAI,WAAW,QAAQ,IAAI,OAAO,IAC/C,EAAE,WAAW,IAAI,UAAU;AAC/B,cAAM,QAAQ,cAAc,IAAI,IAAI,SAAS;AAC7C,YAAI,MAAO,mBAAkB,OAAO,QAAQ,KAAK;AAAA,YAC5C,gBAAe,IAAI,IAAI,WAAW,MAAM;AAAA,MAC/C;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,KAAK,OAAe,SAAmB;AACrC,cAAM,aAAa,uBAAuB,OAAO,UAAU,SAAS,CAAC;AACrE,aAAK;AAAA,UACH,MAAM;AAAA,UACN,OAAO,WAAW;AAAA,UAClB,GAAI,WAAW,YAAY,UAAa,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,WAAW,WAAW,QAAQ;AAAA,QAChH,CAAC;AAAA,MACH;AAAA,MACA,GAAG,OAAe,UAAqC;AACrD,cAAM,cAAc,wBAAwB,KAAK;AACjD,YAAI,OAAO,aAAa,WAAY,OAAM,IAAI,UAAU,6CAA6C;AACrG,YAAI,QAAQ,YAAY,IAAI,WAAW;AACvC,YAAI,CAAC,OAAO;AACV,gBAAM,WAAW,oBAAI,IAA+B;AACpD,gBAAM,iBAAiB,GAAG;AAC1B,gBAAM,WAAW,OAAO,CAAC,UAAU;AACjC,gBAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,kBAAM,MAAM,MAAM;AAClB,gBACE,OAAO,QAAQ,YACZ,QAAQ,QACR,IAAI,SAAS,eACb,IAAI,UAAU,eACd,OAAO,IAAI,WAAW,SACzB;AACF,kBAAM,YAAsB,OAAO,UAAU,eAAe,KAAK,KAAK,SAAS,IAC3E,EAAE,OAAO,aAAa,QAAQ,IAAI,QAAQ,SAAS,IAAI,QAAQ,IAC/D,EAAE,OAAO,aAAa,QAAQ,IAAI,OAAO;AAC7C,uBAAW,WAAW,SAAU,SAAQ,SAAS;AAAA,UACnD,CAAC;AACD,gBAAM,YAAY,OAAO,CAAC,UAAU;AAClC,gBAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,kBAAM,MAAM,MAAM;AAClB,gBAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,0BAA0B,IAAI,OAAO,eAAgB;AACjH,sBAAU;AACV,gBAAI,OAAO,IAAI,UAAU,YAAY,IAAI,OAAO;AAC9C,uBAAS;AACT,0BAAY,OAAO,WAAW;AAAA,YAChC;AAAA,UACF,CAAC;AACD,kBAAQ,EAAE,UAAU,UAAU,UAAU;AACxC,sBAAY,IAAI,aAAa,KAAK;AAClC,eAAK,EAAE,MAAM,iBAAiB,IAAI,gBAAgB,OAAO,YAAY,CAAC;AAAA,QACxE;AACA,cAAM,SAAS,IAAI,QAAQ;AAC3B,eAAO,mBAAmB,MAAM;AAC9B,gBAAM,UAAU,YAAY,IAAI,WAAW;AAC3C,cAAI,CAAC,QAAS;AACd,kBAAQ,SAAS,OAAO,QAAQ;AAChC,cAAI,QAAQ,SAAS,SAAS,EAAG;AACjC,kBAAQ,SAAS;AACjB,kBAAQ,UAAU;AAClB,sBAAY,OAAO,WAAW;AAC9B,eAAK,EAAE,MAAM,mBAAmB,OAAO,YAAY,CAAC;AAAA,QACtD,CAAC;AAAA,MACH;AAAA,MACA,SAAS;AAAA,QACP,KAAK,YAAoB;AACvB,iBAAO;AAAA,YACL,EAAE,MAAM,oBAAoB,QAAQ,WAAW;AAAA,YAC/C;AAAA,YACA,CAAC,QAAQ;AACP,kBAAI,OAAO,IAAI,cAAc,YAAY,OAAO,IAAI,SAAS,UAAU;AACrE,sBAAM,IAAI,MAAM,kDAAkD;AAAA,cACpE;AACA,qBAAO,kBAAkB,mBAAmB,IAAI,WAAW,IAAI,IAAI,CAAC;AAAA,YACtE;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAS,SAAoD;AAC3D,cAAI,OAAO,YAAY,WAAY,OAAM,IAAI,UAAU,uCAAuC;AAC9F,yBAAe,IAAI,OAAO;AAC1B,gBAAM,UAAU,cAAc,OAAO,CAAC;AACtC,qBAAW,SAAS,QAAS,SAAQ,kBAAkB,KAAK,CAAC;AAC7D,iBAAO,mBAAmB,MAAM,eAAe,OAAO,OAAO,CAAC;AAAA,QAChE;AAAA,QACA,OAAO;AACL,iBAAO;AAAA,YACL,EAAE,MAAM,mBAAmB;AAAA,YAC3B;AAAA,YACA,CAAC,QAAQ,OAAO,QAAQ,MAAM,QAAQ,IAAI,QAAQ,IAAI,IAAI,WAAW,CAAC,GAAG,QAAQ,CAAC,YAChF,WACG,OAAO,YAAY,YACnB,OAAQ,QAAoC,OAAO,YACnD,OAAQ,QAAoC,SAAS,WACpD,CAAC,OAAO,OAAO;AAAA,cACf,IAAK,QAAoC;AAAA,cACzC,MAAO,QAAoC;AAAA,YAC7C,CAAC,CAAC,IACA,CAAC,CACN,CAAC;AAAA,UACJ;AAAA,QACF;AAAA,QACA,UAAU,SAAmB;AAC3B,eAAK,EAAE,MAAM,yBAAyB,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,EAAG,CAAC;AAAA,QACvF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,WAAS,cAAuC;AAC9C,UAAM,YAAY,CAAC,WAAoB;AAAA,MACrC,QAAQ,KAAa;AACnB,eAAO;AAAA,UACL,EAAE,MAAM,eAAe,KAAK,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UACxD;AAAA,UACA,CAAC,QAAQ,IAAI,SAAS;AAAA,QACxB;AAAA,MACF;AAAA,MACA,QAAQ,KAAa,OAAe;AAClC,eAAO;AAAA,UACL,EAAE,MAAM,eAAe,KAAK,OAAO,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UAC/D;AAAA,UACA,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,WAAW,KAAa;AACtB,eAAO;AAAA,UACL,EAAE,MAAM,kBAAkB,KAAK,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UAC3D;AAAA,UACA,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA,OAAO;AACL,eAAO;AAAA,UACL,EAAE,MAAM,gBAAgB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,UACpD;AAAA,UACA,CAAC,QAAQ,MAAM,QAAQ,IAAI,IAAI,IAAI,IAAI,OAAO,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,GAAG,UAAU,GAAG,UAAU,UAAU,UAAU,EAAE;AAAA,EAC3D;AAEA,WAAS,eAAwC;AAC/C,UAAM,OAAO,CAAI,MAAc,OAAe,UAAa,UAAmC,CAAC,MAAM;AAAA,MACnG,EAAE,MAAM,GAAG,QAAQ;AAAA,MACnB,GAAG,IAAI;AAAA,MACP,CAAC,QAAS,OAAO,UAAU,eAAe,KAAK,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;AAAA,MAC1E,EAAE,eAAe,SAAS,wBAAwB;AAAA,IACpD;AACA,WAAO,OAAO,OAAO;AAAA,MACnB,cAAc,MAAM,KAAK,yBAAyB,UAAU,EAAE;AAAA,MAC9D,WAAW,MAAM,KAAK,sBAAsB,UAAU,CAAC,CAAC;AAAA,MACxD,YAAY,MAAM,KAAK,uBAAuB,WAAW,IAAI;AAAA,MAC7D,YAAY,MAAM,KAAK,uBAAuB,WAAW,CAAC,CAAC;AAAA,MAC3D,SAAS,CAAC,aAAqB,KAAK,oBAAoB,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;AAAA,MACnF,SAAS,MAAM,KAAK,oBAAoB,QAAQ,CAAC,CAAC;AAAA,MAClD,UAAU,MAAM,KAAK,qBAAqB,WAAW,CAAC,CAAC;AAAA,MACvD,YAAY,MAAM,KAAK,uBAAuB,WAAW,CAAC,CAAC;AAAA,MAC3D,WAAW,MAAM,KAAK,sBAAsB,UAAU,CAAC,CAAC;AAAA,MACxD,UAAU,SAAmC;AAC3C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,mBAAoB;AAChF,cAAI,OAAO,IAAI,WAAW,SAAU,SAAQ,IAAI,MAAM;AAAA,QACxD,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,YAAqC;AAC5C,WAAO;AAAA,MACL,KAAK,MAAM,QAAQ,EAAE,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,IAAI,KAAK;AAAA,MAChF,UAAU,SAAmC;AAC3C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,gBAAiB,SAAQ,IAAI,KAAK;AAAA,QAChG,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,qBAAqB,oBAAI,IAA6B;AAC5D,QAAM,oBAAoB,oBAAI,IAAoB;AAClD,QAAM,eAAe,oBAAI,IAAI,CAAC,WAAW,OAAO,SAAS,MAAM,CAAC;AAChE,QAAM,mBAAmB,oBAAI,IAAI,CAAC,OAAO,QAAQ,CAAC;AAClD,QAAM,oBAAoB,oBAAI,IAAI;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,+BAA+B;AAEnC,WAAS,iBAAiB,KAAsB;AAC9C,QAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,WAAO,IAAI,WAAW,IAAI,IAAI,YAAY,IAAI;AAAA,EAChD;AAEA,WAAS,YAAY,OAMV;AACT,WAAO,GAAG,MAAM,IAAI,IAAI,MAAM,GAAG,IAAI,MAAM,KAAK,IAAI,MAAM,IAAI,IAAI,iBAAiB,MAAM,GAAG,CAAC;AAAA,EAC/F;AAEA,WAAS,gBAAgB,SAAiC;AACxD,QAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,MAAM,GAAI,QAAO;AACjE,UAAM,QAAQ,QAAQ,MAAM,GAAG;AAC/B,UAAM,MAAM,MAAM,IAAI,GAAG,KAAK;AAC9B,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,QAAQ,EAAE,MAAM,OAAO,KAAK,OAAO,OAAO,OAAO,MAAM,OAAO,IAAI;AACxE,eAAW,OAAO,OAAO;AACvB,YAAM,QAAQ,IAAI,KAAK,EAAE,YAAY;AACrC,UAAI,CAAC,MAAO;AACZ,UAAI,UAAU,UAAU,UAAU,UAAW,OAAM,OAAO;AAAA,eACjD,UAAU,SAAS,UAAU,SAAU,OAAM,MAAM;AAAA,eACnD,UAAU,QAAS,OAAM,QAAQ;AAAA,eACjC,UAAU,UAAU,UAAU,SAAS,UAAU,aAAa,UAAU,SAAS,UAAU,QAAS,OAAM,OAAO;AAAA,UACrH,QAAO;AAAA,IACd;AACA,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,WAAS,cAAc,OAML;AAChB,UAAM,MAAM,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AACxD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,YAAY;AAAA,MACjB,MAAM,QAAQ,MAAM,OAAO;AAAA,MAC3B,KAAK,QAAQ,MAAM,MAAM;AAAA,MACzB,OAAO,QAAQ,MAAM,QAAQ;AAAA,MAC7B,MAAM,QAAQ,MAAM,OAAO;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,kBAAkB,OAAyB;AAClD,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,UAAM,aAAa;AAMnB,QAAI,WAAW,sBAAsB,KAAM,QAAO;AAClD,UAAM,UAAU,OAAO,WAAW,YAAY,WAAW,WAAW,QAAQ,YAAY,IAAI;AAC5F,QAAI,YAAY,cAAc,YAAY,SAAU,QAAO;AAC3D,QAAI,YAAY,SAAS;AACvB,YAAM,OAAO,OAAO,WAAW,SAAS,YAAY,WAAW,OAAO,WAAW,KAAK,YAAY,IAAI;AACtG,aAAO,CAAC,kBAAkB,IAAI,IAAI;AAAA,IACpC;AACA,QAAI,OAAO,WAAW,YAAY,YAAY;AAC5C,UAAI;AACF,eAAO,QAAQ,WAAW,QAAQ,kFAAkF,CAAC;AAAA,MACvH,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,WAAS,mBAAmB,UAAmB,SAAwB;AACrE,QAAI,OAAO,aAAa,SAAU;AAClC,UAAM,QAAQ,gBAAgB,OAAO;AACrC,QAAI,MAAO,mBAAkB,IAAI,OAAO,QAAQ;AAAA,EAClD;AAEA,WAAS,2BAA2B,UAAwB;AAC1D,eAAW,CAAC,OAAO,aAAa,KAAK,mBAAmB;AACtD,UAAI,kBAAkB,SAAU,mBAAkB,OAAO,KAAK;AAAA,IAChE;AAAA,EACF;AAEA,WAAS,mBAAmB,UAAyB;AACnD,sBAAkB,MAAM;AACxB,QAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG;AAC9B,eAAW,WAAW,UAAU;AAC9B,UAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,YAAM,QAAQ;AACd,yBAAmB,MAAM,UAAU,MAAM,GAAG;AAAA,IAC9C;AAAA,EACF;AAEA,WAAS,gBAAgB,UAAwB;AAC/C,eAAW,YAAY,mBAAmB,IAAI,QAAQ,KAAK,CAAC,EAAG,UAAS;AAAA,EAC1E;AAEA,WAAS,gBAAgB,QAWrB,CAAC,GAAS;AACZ,SAAK;AAAA,MACH,MAAM;AAAA,MACN,KAAK,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AAAA,MACjD,MAAM,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,MACpD,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO;AAAA,MACzC,KAAK,QAAQ,MAAM,OAAO,MAAM,MAAM;AAAA,MACtC,OAAO,QAAQ,MAAM,SAAS,MAAM,QAAQ;AAAA,MAC5C,MAAM,QAAQ,MAAM,QAAQ,MAAM,OAAO;AAAA,IAC3C,CAAC;AAAA,EACH;AAEA,WAAS,6BAAmC;AAC1C,QAAI,6BAA8B;AAClC,mCAA+B;AAE/B,WAAO,CAAC,UAAU;AAChB,UAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,YAAM,MAAM,MAAM;AAClB,UAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,iBAAiB;AAC3E,2BAAmB,IAAI,QAAQ;AAAA,MACjC;AAAA,IACF,CAAC;AAED,UAAM,eAAe,OAAO;AAI5B,UAAM,iBAAiB,OAAO,cAAc,qBAAqB,aAAa,eAAe;AAC7F,QAAI,OAAO,eAAe,qBAAqB,WAAY;AAE3D,mBAAe,iBAAiB,WAAW,CAAC,UAAiB;AAC3D,YAAM,WAAW;AAWjB,UAAI,SAAS,YAAa;AAC1B,UAAI,OAAO,SAAS,QAAQ,YAAY,aAAa,IAAI,SAAS,GAAG,EAAG;AACxE,UAAI,kBAAkB,SAAS,UAAU,cAAc,aAAa,EAAG;AAEvE,YAAM,QAAQ,cAAc,QAAQ;AACpC,YAAM,WAAW,QAAQ,kBAAkB,IAAI,KAAK,IAAI;AACxD,YAAM,aAAa,OAAO,SAAS,QAAQ,YAAY,iBAAiB,IAAI,SAAS,GAAG;AACxF,UAAI,YAAY,CAAC,YAAY;AAC3B,iBAAS,iBAAiB;AAC1B,wBAAgB,QAAQ;AACxB;AAAA,MACF;AAEA,sBAAgB,QAAQ;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,WAAS,WAAoC;AAC3C,+BAA2B;AAC3B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,gBAAgB,CAAC,WAAoB;AAAA,QACnC,EAAE,MAAM,uBAAuB,OAAO;AAAA,QACtC;AAAA,QACA;AAAA,MACF,EAAE,KAAK,CAAC,WAAW;AACjB,cAAM,eAAe,UAAU,OAAO,WAAW,WAAW,SAA6B,CAAC;AAC1F,cAAM,eAAe;AACrB;AAAA,UACE,OAAO,aAAa,aAAa,WAAW,aAAa,WAAW,aAAa;AAAA,UACjF,aAAa;AAAA,QACf;AACA,eAAO;AAAA,MACT,CAAC;AAAA,MACD,kBAAkB,CAAC,aAAqB;AACtC,mCAA2B,QAAQ;AACnC,aAAK,EAAE,MAAM,yBAAyB,SAAS,CAAC;AAAA,MAClD;AAAA,MACA,SAAS,UAAkB,UAAsB;AAC/C,YAAI,YAAY,mBAAmB,IAAI,QAAQ;AAC/C,YAAI,CAAC,WAAW;AACd,sBAAY,oBAAI,IAAI;AACpB,6BAAmB,IAAI,UAAU,SAAS;AAAA,QAC5C;AACA,kBAAU,IAAI,QAAQ;AACtB,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,iBAAiB,IAAI,aAAa,SAAU,UAAS;AAAA,QACnH,CAAC;AACD,eAAO,mBAAmB,MAAM;AAC9B,cAAI;AACJ,oBAAU,OAAO,QAAQ;AACzB,cAAI,UAAU,SAAS,EAAG,oBAAmB,OAAO,QAAQ;AAAA,QAC9D,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAC5C,UAAM,KAAK,CAAC,MAAc,WAAmB,aAA4C;AACvF,YAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,YAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,cAAM,MAAM,MAAM;AAClB,YAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,QAAQ,IAAI,cAAc,UAAW,UAAS,GAAG;AAAA,MAC/G,CAAC;AACD,aAAO,mBAAmB,GAAG;AAAA,IAC/B;AACA,WAAO;AAAA,MACL,eAAe,CAAC,YAAqB;AAAA,QACnC,EAAE,MAAM,wBAAwB,GAAK,WAAW,OAAO,YAAY,WAAY,UAAqC,CAAC,EAAG;AAAA,QACxH;AAAA,QACA;AAAA,QACA,EAAE,eAAe,MAAM;AAAA,MACzB;AAAA,MACA,eAAe,CAAC,WAAmB,aAAsB,KAAK,EAAE,MAAM,wBAAwB,WAAW,SAAS,CAAC;AAAA,MACnH,gBAAgB,CAAC,cAAsB,KAAK,EAAE,MAAM,yBAAyB,UAAU,CAAC;AAAA,MACxF,aAAa,CAAC,WAAmB,UAAmB,KAAK,EAAE,MAAM,eAAe,WAAW,GAAK,SAAS,OAAO,UAAU,WAAY,QAAmC,CAAC,EAAG,CAAC;AAAA,MAC9K,oBAAoB,CAAC,WAAmB,YAAqB,KAAK,EAAE,MAAM,sBAAsB,WAAW,QAAQ,CAAC;AAAA,MACpH,aAAa,CAAC,WAAmB,QAAgB,UAAoB,KAAK,EAAE,MAAM,iBAAiB,WAAW,QAAQ,GAAI,UAAU,SAAY,CAAC,IAAI,EAAE,MAAM,EAAG,CAAC;AAAA,MACjK,WAAW,CAAC,WAAmB,aAAyD,GAAG,iBAAiB,WAAW,CAAC,QAAQ,SAAS,IAAI,QAAQ,IAAI,KAAK,CAAC;AAAA,MAC/J,SAAS,CAAC,WAAmB,aAAuD,GAAG,eAAe,WAAW,CAAC,QAAQ,SAAS;AAAA,QACjI,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,UAAU,IAAI;AAAA,QACd,QAAQ,IAAI;AAAA,MACd,CAAC,CAAC;AAAA,MACF,gBAAgB,CAAC,WAAmB,aAAyC,GAAG,sBAAsB,WAAW,CAAC,QAAQ,SAAS,IAAI,OAAO,CAAC;AAAA,MAC/I,YAAY,CAAC,WAAmB,aAA0C,GAAG,kBAAkB,WAAW,CAAC,QAAQ,SAAS,IAAI,QAAQ,CAAC;AAAA,IAC3I;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,KAAK,CAAC,MAAc,aAA4C;AACpE,YAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,YAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,cAAM,MAAM,MAAM;AAClB,YAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,KAAM,UAAS,GAAG;AAAA,MAChF,CAAC;AACD,aAAO,mBAAmB,GAAG;AAAA,IAC/B;AACA,WAAO;AAAA,MACL,MAAM,CAAC,iBAA0C;AAAA,QAC/C,EAAE,MAAM,eAAe,GAAG,aAAa;AAAA,QACvC;AAAA,QACA,CAAC,SAAS,EAAE,gBAAgB,aAAa,KAAK,kBAAkB,2CAA2C,EAAE;AAAA,MAC/G;AAAA,MACA,SAAS,CAAC,mBAA2B,KAAK,EAAE,MAAM,kBAAkB,eAAe,CAAC;AAAA,MACpF,OAAO,CAAC,UAAkB,KAAK,EAAE,MAAM,gBAAgB,MAAM,CAAC;AAAA,MAC9D,iBAAiB,CAAC,YAAqC,KAAK,EAAE,MAAM,2BAA2B,GAAG,QAAQ,CAAC;AAAA,MAC3G,mBAAmB,CAAC,YAAqB;AAAA,QACvC,EAAE,MAAM,6BAA6B,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QACrE;AAAA,QACA,CAAC,SAAS,EAAE,SAAS,IAAI,QAAQ;AAAA,MACnC;AAAA,MACA,UAAU,CAAC,aAAmE,GAAG,iBAAiB,CAAC,QAAQ,SAAS,IAAI,gBAAgB,IAAI,QAAQ,CAAC;AAAA,MACrJ,WAAW,CAAC,aAAgD,GAAG,kBAAkB,CAAC,QAAQ,SAAS,IAAI,cAAc,CAAC;AAAA,MACtH,aAAa,CAAC,aAAiE,GAAG,oBAAoB,CAAC,QAAQ,SAAS,IAAI,gBAAgB,IAAI,MAAM,CAAC;AAAA,MACvJ,YAAY,CAAC,aAA0C,GAAG,mBAAmB,CAAC,QAAQ,SAAS,IAAI,QAAQ,CAAC;AAAA,IAC9G;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,QAAI,SAAkB;AACtB,WAAO;AAAA,MACL,gBAAgB,CAAC,YAAqBC,aAAqB;AAAA,QACzD,EAAE,MAAM,yBAAyB,QAAQ,YAAY,GAAIA,aAAY,SAAY,CAAC,IAAI,EAAE,SAAAA,SAAQ,EAAG;AAAA,QACnG;AAAA,QACA,CAAC,QAAQ;AACP,cAAI,CAAC,IAAI,MAAO,UAAS;AACzB,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA,KAAK,MAAM,QAAQ,EAAE,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;AAAA,MACrF,UAAU,UAAqC;AAC7C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,gBAAiB,UAAS,IAAI,UAAU,CAAC,CAAC;AAAA,QACxG,CAAC;AACD,aAAK,EAAE,MAAM,mBAAmB,CAAC;AACjC,eAAO,mBAAmB,MAAM;AAC9B,eAAK,EAAE,MAAM,qBAAqB,CAAC;AACnC,cAAI;AAAA,QACN,CAAC;AAAA,MACH;AAAA,MACA,cAAc,CAAC,YAAsB,KAAK,EAAE,MAAM,uBAAuB,GAAK,WAAW,OAAO,YAAY,WAAY,UAAqC,CAAC,EAAG,CAAC;AAAA,MAClK,cAAc,UAAoC;AAChD,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,qBAAsB,UAAS,GAAG;AAAA,QAChG,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MACA,IAAI,SAAS;AACX,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,WAAS,eAAwC;AAC/C,UAAM,aAAa,oBAAI,IAAY;AACnC,UAAM,QAAQ,CAAC,QAAgB,QAAQ,EAAE,MAAM,kBAAkB,IAAI,GAAG,yBAAyB,CAAC,QAAQ,IAAI,IAAI;AAClH,WAAO;AAAA,MACL,MAAM,MAAM,QAAQ,EAAE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,QAAQ,IAAI,IAAI;AAAA,MACxF;AAAA,MACA,WAAW,CAAC,SAAmB,QAAQ,EAAE,MAAM,sBAAsB,KAAK,GAAG,6BAA6B,CAAC,QAAQ,MAAM,QAAQ,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC;AAAA,MAC5J,iBAAiB,KAAa;AAC5B,YAAI,YAAY;AAChB,cAAM,SAAS;AAAA,UACb,IAAI,MAAM;AACR,mBAAO;AAAA,UACT;AAAA,UACA,SAAS;AACP,gBAAI,WAAW;AACb,kBAAI,gBAAgB,SAAS;AAC7B,yBAAW,OAAO,SAAS;AAC3B,0BAAY;AAAA,YACd;AAAA,UACF;AAAA,QACF;AACA,aAAK,MAAM,GAAG,EAAE,KAAK,CAAC,SAAS;AAC7B,sBAAY,IAAI,gBAAgB,IAAY;AAC5C,qBAAW,IAAI,SAAS;AAAA,QAC1B,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MACA,sBAAsB,MAAM;AAAA,MAC5B,sBAAsB;AACpB,mBAAW,OAAO,WAAY,KAAI,gBAAgB,GAAG;AACrD,mBAAW,MAAM;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,UAAmC;AAC1C,UAAM,MAAM,CAAI,MAAc,SAAkC,QAAoC;AAAA,MAClG,EAAE,MAAM,GAAG,QAAQ;AAAA,MACnB,GAAG,IAAI;AAAA,MACP;AAAA,IACF;AACA,UAAM,aAAa,CAAC,QAAiB,SAAkB,YAAsC;AAAA,MAC3F;AAAA,MACA,EAAE,QAAQ,SAAS,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,EAAG;AAAA,MACjE,CAAC,QAAQ,aAAa,KAAK,WAAW,oCAAoC;AAAA,IAC5E;AACA,UAAM,UAAU,OACd,QACA,QACA,QACA,YACG;AACH,YAAM,QAAQ,MAAM,WAAW,QAAQ;AAAA,QACrC,SAAS;AAAA,QACT,IAAI,GAAG;AAAA,QACP;AAAA,QACA,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO;AAAA,MAC3C,GAAG,OAAO;AACV,UAAI,MAAM,UAAU,QAAW;AAC7B,cAAM,QAAQ,MAAM;AACpB,cAAM,IAAI,MAAM,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,MAAM,YAAY,WACpF,GAAG,MAAM,KAAK,MAAM,OAAO,KAC3B,GAAG,MAAM,SAAS;AAAA,MACxB;AACA,aAAO,MAAM;AAAA,IACf;AACA,WAAO;AAAA,MACL,UAAU,CAAC,UAAoB,IAAI,gBAAgB,UAAU,SAAY,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,QAAQ,MAAM,QAAQ,IAAI,OAAO,IAAI,IAAI,UAAU,CAAC,CAAC;AAAA,MAC/I,SAAS;AAAA,MACT,WAAW,OAAO,QAAiB,YAAsC;AACvE,cAAM,SAAS,MAAM,QAAQ,QAAQ,cAAc,QAAW,OAAO;AACrE,eAAO,QAAQ,SAAS,CAAC;AAAA,MAC3B;AAAA,MACA,UAAU,CAAC,QAAiB,MAAc,MAAgB,YAAsC;AAAA,QAC9F;AAAA,QACA;AAAA,QACA,EAAE,MAAM,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,WAAW,KAAK,EAAG;AAAA,QAC3D;AAAA,MACF;AAAA,MACA,eAAe,OAAO,QAAiB,YAAsC;AAC3E,cAAM,SAAS,MAAM,QAAQ,QAAQ,kBAAkB,QAAW,OAAO;AACzE,eAAO,QAAQ,aAAa,CAAC;AAAA,MAC/B;AAAA,MACA,cAAc,OAAO,QAAiB,KAAa,YAAsC;AACvF,cAAM,SAAS,MAAM,QAAQ,QAAQ,kBAAkB,EAAE,IAAI,GAAG,OAAO;AACvE,cAAM,QAAQ,QAAQ,WAAW,CAAC;AAClC,YAAI,CAAC,MAAO,OAAM,IAAI,MAAM,2CAA2C,GAAG,EAAE;AAC5E,eAAO;AAAA,MACT;AAAA,MACA,OAAO,CAAC,WAAoB,IAAI,aAAa,EAAE,OAAO,GAAG,CAAC,QAAQ,WAAW,KAAK,kBAAkB,CAAC;AAAA,MACrG,QAAQ,UAAuD;AAC7D,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cACE,OAAO,QAAQ,YACZ,QAAQ,QACR,IAAI,SAAS,eACb,IAAI,WAAW,UACf,IAAI,YAAY,QACnB;AACA,qBAAS,IAAI,QAAQ,IAAI,OAAO;AAAA,UAClC;AAAA,QACF,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,MAAM,CAAC,MAAc,SAAkC,aAAa,GAAG,IAAI,cAAc;AAAA,MAC7F,EAAE,MAAM,GAAG,QAAQ;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,eAAe,MAAM;AAAA,IACzB;AACA,WAAO;AAAA,MACL,UAAU,CAAC,SAAiB,YAAsC,IAAI,mBAAmB,EAAE,SAAS,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MACrI,OAAO,CAAC,SAAkB,YAAsC,IAAI,gBAAgB,EAAE,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MAC9K,UAAU,SAAkB,SAAmC;AAC7D,cAAM,QAAQ,GAAG;AACjB,cAAM,WAAW,EAAE,OAAO,oBAAI,IAA+B,GAAG,QAAQ,oBAAI,IAAgC,EAAE;AAC9G,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,UAAU,MAAO;AACpE,cAAI,IAAI,SAAS,eAAgB,YAAW,WAAW,SAAS,MAAO,SAAQ,IAAI,MAAM;AACzF,cAAI,IAAI,SAAS,iBAAiB;AAChC,uBAAW,WAAW,SAAS,OAAQ,SAAQ,IAAI,MAAM;AACzD,gBAAI;AAAA,UACN;AAAA,QACF,CAAC;AACD,aAAK,EAAE,MAAM,oBAAoB,IAAI,GAAG,GAAG,OAAO,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAC1I,eAAO;AAAA,UACL,GAAG,OAA2B,SAAoC;AAChE,qBAAS,KAAK,EAAE,IAAI,OAAO;AAC3B,mBAAO,EAAE,OAAO,MAAM,SAAS,KAAK,EAAE,OAAO,OAAO,EAAE;AAAA,UACxD;AAAA,UACA,QAAQ;AACN,iBAAK,EAAE,MAAM,gBAAgB,IAAI,GAAG,GAAG,MAAM,CAAC;AAC9C,gBAAI;AACJ,qBAAS,MAAM,MAAM;AACrB,qBAAS,OAAO,MAAM;AAAA,UACxB;AAAA,QACF;AAAA,MACF;AAAA,MACA,SAAS,CAAC,OAAgB,YAAsC,IAAI,kBAAkB,EAAE,OAAO,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MAChI,eAAe,CAAC,gBAAyB,IAAI,wBAAwB,EAAE,QAAQ,YAAY,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,GAAG;AAAA,IAC7H;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,WAAO;AAAA,MACL,MAAM,MAAM,QAAQ,EAAE,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,aAAa,KAAK,QAAQ,yBAAyB,CAAC;AAAA,MAChI,QAAQ,CAAC,mBAA4B,QAAQ,EAAE,MAAM,iBAAiB,SAAS,eAAe,GAAG,wBAAwB,CAAC,QAAQ,aAAa,KAAK,UAAU,eAAe,CAAC;AAAA,MAC9K,QAAQ,CAAC,aAAqB,QAAQ,EAAE,MAAM,iBAAiB,SAAS,GAAG,wBAAwB,CAAC,QAAQ,aAAa,KAAK,UAAU,2BAA2B,CAAC;AAAA,MACpK,SAAS,UAAqC;AAC5C,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,IAAI,SAAS,2BAA2B,IAAI,WAAW,OAAW,UAAS,IAAI,MAAM;AAAA,QACtI,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,SAAS,CAAC,OAAgC,QAC9C,OAAO,UAAU,eAAe,KAAK,OAAO,GAAG;AAEjD,UAAM,mBAAmB,CAAC,UAA4C;AACpE,UAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,cAAM,IAAI,UAAU,kCAAkC;AAAA,MACxD;AACA,YAAM,WAAW;AACjB,UAAI,OAAO,UAAU,QAAQ,GAAG;AAC9B,cAAM,IAAI,UAAU,qCAAqC;AAAA,MAC3D;AACA,YAAMC,WAAU,CAAC,aAAa,UAAU,cAAc,WAAW,WAAW,UAAU;AACtF,UAAI,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,UAAU,CAACA,SAAQ,SAAS,KAAK,CAAC,GAAG;AACnE,cAAM,IAAI,UAAU,4CAA4C;AAAA,MAClE;AACA,UAAI,OAAO,SAAS,cAAc,YAAY,SAAS,UAAU,WAAW,GAAG;AAC7E,cAAM,IAAI,UAAU,sCAAsC;AAAA,MAC5D;AACA,YAAM,SAAS,SAAS,WAAW,SAAY,SAAS,SAAS;AACjE,UAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,cAAM,IAAI,UAAU,0CAA0C;AAAA,MAChE;AACA,UACE,SAAS,eAAe,WAEtB,OAAO,SAAS,eAAe,YAC5B,CAAC,iCAAiC,KAAK,SAAS,UAAU,IAE/D;AACA,cAAM,IAAI,UAAU,qCAAqC;AAAA,MAC3D;AACA,UACE,SAAS,YAAY,WACjB,OAAO,SAAS,YAAY,YAAY,SAAS,QAAQ,WAAW,IACxE;AACA,cAAM,IAAI,UAAU,2CAA2C;AAAA,MACjE;AACA,YAAM,gBAAgB,UAAU;AAChC,YAAM,WAAW,iBAAiB,OAAO,kBAAkB,WACvD,gBACA;AACJ,UACE,kBAAkB,WAEhB,CAAC,YACE,MAAM,QAAQ,aAAa,KAC3B,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,UAC7B,UAAU,WAAW,UAAU,eAAe,UAAU,OAAO,KAC7D,OAAO,UAAU,OAAO,KAAK,OAAO,SAAS,UAAU,aACvD,OAAO,UAAU,WAAW,KAAK,OAAO,SAAS,cAAc,aAC/D,OAAO,UAAU,OAAO,KAAK,OAAO,SAAS,UAAU,YAE7D;AACA,cAAM,IAAI,UAAU,6CAA6C;AAAA,MACnE;AACA,YAAM,oBAAoB;AAAA,QACxB,GAAI,OAAO,UAAU,UAAU,YAAY,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;AAAA,QACxE,GAAI,OAAO,UAAU,cAAc,YAC/B,EAAE,WAAW,SAAS,UAAU,IAChC,CAAC;AAAA,QACL,GAAI,OAAO,UAAU,UAAU,YAAY,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;AAAA,MAC1E;AACA,aAAO;AAAA,QACL,WAAW,SAAS;AAAA,QACpB;AAAA,QACA,GAAI,OAAO,SAAS,eAAe,WAC/B,EAAE,YAAY,SAAS,WAAW,IAClC,CAAC;AAAA,QACL,GAAI,OAAO,UAAU,SAAS,IAAI,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,QACnE,GAAI,OAAO,SAAS,YAAY,WAAW,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,QAC5E,GAAI,OAAO,KAAK,iBAAiB,EAAE,WAAW,IAC1C,CAAC,IACD,EAAE,UAAU,kBAAkB;AAAA,MACpC;AAAA,IACF;AACA,UAAM,SAAS,CAAC,UAAmB;AACjC,YAAM,aAAa,iBAAiB,KAAK;AACzC,aAAO;AAAA,QACL;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,QACX;AAAA,QACA;AAAA,QACA,CAAC,QAAQ,aAAa,KAAK,UAAU,qCAAqC;AAAA,MAC5E;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,CACJ,WACA,SACA,SACG,OAAO;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,QACR,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ;AAAA,QAC3C,GAAG;AAAA,MACL,CAAC;AAAA,MACD,WAAW,CAAC,cAAsB;AAAA,QAChC,EAAE,MAAM,oBAAoB,UAAU;AAAA,QACtC;AAAA,QACA,CAAC,QAAQ,aAAa,KAAK,gBAAgB,8CAA8C;AAAA,MAC3F;AAAA,MACA,UAAU,MAAM;AAAA,QACd,EAAE,MAAM,kBAAkB;AAAA,QAC1B;AAAA,QACA,CAAC,QAAQ,aAAa,KAAK,YAAY,yCAAyC;AAAA,MAClF;AAAA,MACA,WAAW,CAAC,aAA8C;AAAA,QACxD;AAAA,QACA;AAAA,QACA,CAAC,QAAQ,IAAI;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,WAAO;AAAA,MACL,MAAM,CAAC,mBAA6B;AAAA,QAClC,EAAE,MAAM,eAAe,SAAS,eAAe;AAAA,QAC/C;AAAA,QACA,CAAC,SAAS,EAAE,SAAS,aAAa,KAAK,WAAW,oCAAoC,EAAE;AAAA,MAC1F;AAAA,MACA,MAAM,CAAC,WAAmB,YAAqB;AAAA,QAC7C,EAAE,MAAM,eAAe,WAAW,QAAQ;AAAA,QAC1C;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,oBAAoB;AAAA,MAC/C;AAAA,MACA,OAAO,CAAC,WAAmB,WAAoB;AAAA,QAC7C,EAAE,MAAM,gBAAgB,WAAW,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG;AAAA,QACjE;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,qBAAqB;AAAA,MAChD;AAAA,MACA,SAAS,CAAC,aAAuC,kBAAkB,gBAAgB,QAAQ;AAAA,IAC7F;AAAA,EACF;AAEA,WAAS,UAAmC;AAC1C,UAAM,MAAM,CAAC,QAAgB,SAAkC,QAA0C;AAAA,MACvG,EAAE,MAAM,OAAO,MAAM,IAAI,GAAG,QAAQ;AAAA,MACpC,OAAO,MAAM;AAAA,MACb;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM,CAAC,mBAA6B,IAAI,QAAQ,EAAE,SAAS,eAAe,GAAG,CAAC,SAAS,EAAE,SAAS,aAAa,KAAK,WAAW,iCAAiC,EAAE,EAAE;AAAA,MACpK,UAAU,CAAC,cAAsB,IAAI,YAAY,EAAE,UAAU,GAAG,CAAC,QAAQ,aAAa,KAAK,YAAY,sCAAsC,CAAC;AAAA,MAC9I,MAAM,CAAC,WAAmB,gBAAyB,IAAI,QAAQ,EAAE,WAAW,QAAQ,YAAY,GAAG,CAAC,QAAQ,aAAa,KAAK,QAAQ,8BAA8B,CAAC;AAAA,MACrK,OAAO,CAAC,WAAmB,aAAsB,MAAe,YAAsC;AAAA,QACpG;AAAA,QACA,EAAE,WAAW,QAAQ,aAAa,MAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QACxE,CAAC,QAAQ,WAAW,KAAK,kBAAkB;AAAA,MAC7C;AAAA,MACA,WAAW,CAAC,WAAmB,gBAAyB,IAAI,aAAa,EAAE,WAAW,QAAQ,YAAY,GAAG,CAAC,QAAQ,WAAW,KAAK,sBAAsB,CAAC;AAAA,MAC7J,aAAa,CAAC,WAAmB,gBAAyB,IAAI,eAAe,EAAE,WAAW,QAAQ,YAAY,GAAG,CAAC,QAAQ,WAAW,KAAK,wBAAwB,CAAC;AAAA,MACnK,OAAO,CAAC,WAAmB,WAAoB,IAAI,SAAS,EAAE,WAAW,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG,GAAG,CAAC,QAAQ,WAAW,KAAK,kBAAkB,CAAC;AAAA,MACtJ,SAAS,CAAC,aAAuC,kBAAkB,aAAa,QAAQ;AAAA,IAC1F;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,WAAO;AAAA,MACL,MAAM,CAAC,mBAA6B;AAAA,QAClC,EAAE,MAAM,eAAe,SAAS,eAAe;AAAA,QAC/C;AAAA,QACA,CAAC,SAAS,EAAE,SAAS,aAAa,KAAK,WAAW,oCAAoC,EAAE;AAAA,MAC1F;AAAA,MACA,OAAO,CAAC,WAAmB,SAAgC;AAAA,QACzD,EAAE,MAAM,gBAAgB,WAAW,MAAM,MAAM,KAAK,IAAI,EAAE;AAAA,QAC1D;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,qBAAqB;AAAA,MAChD;AAAA,MACA,OAAO,CAAC,WAAmB,WAAoB;AAAA,QAC7C,EAAE,MAAM,gBAAgB,WAAW,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO,EAAG;AAAA,QAC/E;AAAA,QACA,CAAC,QAAQ,WAAW,KAAK,qBAAqB;AAAA,MAChD;AAAA,MACA,SAAS,CAAC,aAAuC,kBAAkB,gBAAgB,QAAQ;AAAA,IAC7F;AAAA,EACF;AAEA,WAAS,WAAoC;AAC3C,WAAO;AAAA,MACL,MAAM,CAAC,KAAa,YAAsC;AAAA,QACxD,EAAE,MAAM,aAAa,KAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QAC1D;AAAA,QACA;AAAA,QACA,EAAE,eAAe,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAC5C,WAAO;AAAA,MACL,OAAO,CAAC,SAAkB,YAAsC;AAAA,QAC9D,EAAE,MAAM,eAAe,SAAS,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,QAC9G;AAAA,QACA;AAAA,QACA,EAAE,eAAe,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,YAAqC;AAC5C,UAAM,MAAM,CAAC,MAAc,YAAqC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,GAAG,IAAI,WAAW,eAAe,EAAE,eAAe,MAAM,CAAC;AACvJ,WAAO;AAAA,MACL,WAAW,MAAM,IAAI,mBAAmB,CAAC,CAAC;AAAA,MAC1C,KAAK,CAAC,MAAe,OAAgB,YAAsB,IAAI,aAAa,EAAE,MAAM,OAAO,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,MAC5H,QAAQ,CAAC,MAAe,OAAgB,YAAsB,IAAI,gBAAgB,EAAE,MAAM,OAAO,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAAA,IACpI;AAAA,EACF;AAEA,WAAS,aAAsC;AAC7C,UAAM,MAAM,CAAC,MAAc,YAAqC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,GAAG,IAAI,WAAW,iBAAiB,EAAE,eAAe,MAAM,CAAC;AACzJ,WAAO;AAAA,MACL,aAAa,CAAC,UAAmB,IAAI,sBAAsB,EAAE,MAAM,CAAC;AAAA,MACpE,aAAa,CAAC,UAAkB,IAAI,sBAAsB,EAAE,MAAM,CAAC;AAAA,MACnE,YAAY,CAAC,gBAAyB,IAAI,qBAAqB,EAAE,QAAQ,YAAY,CAAC;AAAA,MACtF,SAAS,MAAM,IAAI,kBAAkB,CAAC,CAAC;AAAA,MACvC,QAAQ,IAAI,YAAsB,IAAI,iBAAiB,EAAE,QAAQ,CAAC;AAAA,MAClE,UAAU,IAAI,YAAsB,IAAI,mBAAmB,EAAE,QAAQ,CAAC;AAAA,MACtE,OAAO,CAAC,eAAuB,UAAmB,oBAA6B,IAAI,gBAAgB;AAAA,QACjG;AAAA,QACA;AAAA,QACA,GAAI,oBAAoB,SAAY,CAAC,IAAI,EAAE,gBAAgB;AAAA,MAC7D,CAAC;AAAA,MACD,QAAQ,CAAC,aAAsB,QAAiB,SAAkB,IAAI,iBAAiB;AAAA,QACrF,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,WAAS,SAAkC;AACzC,UAAM,MAAM,CAAC,MAAc,YAAqC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,GAAG,IAAI,WAAW,iBAAiB,EAAE,eAAe,MAAM,CAAC;AACzJ,WAAO;AAAA,MACL,QAAQ,MAAM,IAAI,aAAa,CAAC,CAAC;AAAA,MACjC,eAAe,CAAC,UAAoC,IAAI,oBAAoB,SAAS,CAAC,CAAC;AAAA,MACvF,UAAU,CAAC,UAAmC,IAAI,eAAe,SAAS,CAAC,CAAC;AAAA,MAC5E,MAAM,CAAC,mBAA4C,IAAI,WAAW,kBAAkB,CAAC,CAAC;AAAA,MACtF,WAAW,CAAC,mBAA6C,IAAI,gBAAgB,kBAAkB,CAAC,CAAC;AAAA,MACjG,aAAa,CAAC,mBAA2B,IAAI,kBAAkB,EAAE,eAAe,CAAC;AAAA,MACjF,UAAU,UAA8D;AACtE,cAAM,MAAM,OAAO,CAAC,UAAU;AAC5B,cAAI,CAAC,gBAAgB,KAAK,EAAG;AAC7B,gBAAM,MAAM,MAAM;AAClB,cACE,OAAO,QAAQ,YACZ,QAAQ,QACR,IAAI,SAAS,gBACb,OAAO,IAAI,mBAAmB,UACjC;AACA,qBAAS,IAAI,SAAS,IAAI,cAAc;AAAA,UAC1C;AAAA,QACF,CAAC;AACD,eAAO,mBAAmB,GAAG;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,SAAkC;AACzC,UAAM,cAAc,CAAC,SAAkC,YAAqB;AAC1E,UAAI,YAAY,OAAW,SAAQ,UAAU;AAC7C,aAAO;AAAA,IACT;AACA,UAAM,MAAM,CACV,QACA,SACA,QACG,QAAQ,EAAE,MAAM,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,MAAM,MAAM,WAAW,GAAG;AAC7E,WAAO;AAAA,MACL,MAAM,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,aAAa,KAAK,QAAQ,6BAA6B,CAAC;AAAA,MAC7F,UAAU,CAAC,YAAsB,IAAI,YAAY,YAAY,CAAC,GAAG,OAAO,GAAG,CAAC,QAAQ,aAAa,KAAK,UAAU,mCAAmC,CAAC;AAAA,MACpJ,WAAW,CAAC,YAAsB,IAAI,aAAa,YAAY,CAAC,GAAG,OAAO,GAAG,CAAC,QAAQ,aAAa,KAAK,UAAU,oCAAoC,CAAC;AAAA,MACvJ,eAAe,CAAC,YAAsB,IAAI,iBAAiB,YAAY,CAAC,GAAG,OAAO,GAAG,CAAC,QAAQ,aAAa,KAAK,UAAU,wCAAwC,CAAC;AAAA,MACnK,cAAc,CAAC,YAAsB,IAAI,gBAAgB,YAAY,CAAC,GAAG,OAAO,GAAG,CAAC,QAAQ,aAAa,KAAK,UAAU,uCAAuC,CAAC;AAAA,MAChK,MAAM,CAAC,SAAiB,IAAI,QAAQ,EAAE,KAAK,GAAG,CAAC,QAAQ,aAAa,KAAK,YAAY,iCAAiC,CAAC;AAAA,MACvH,MAAM,CAAC,SAAiB,IAAI,QAAQ,EAAE,KAAK,GAAG,CAAC,QAAQ,aAAa,KAAK,WAAW,gCAAgC,CAAC;AAAA,MACrH,MAAM,CAAC,MAAc,YAAsB,IAAI,QAAQ,YAAY,EAAE,KAAK,GAAG,OAAO,GAAG,CAAC,QAAQ,aAAa,KAAK,UAAU,+BAA+B,CAAC;AAAA,MAC5J,OAAO,CAAC,MAAc,MAAc,YAAsB,IAAI,SAAS,YAAY,EAAE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,QAAQ,aAAa,KAAK,UAAU,gCAAgC,CAAC;AAAA,MACnL,OAAO,CAAC,MAAc,YAAsB,IAAI,SAAS,YAAY,EAAE,KAAK,GAAG,OAAO,GAAG,CAAC,QAAQ,WAAW,KAAK,iBAAiB,CAAC;AAAA,MACpI,QAAQ,CAAC,MAAc,cAAwB,IAAI,UAAU,EAAE,MAAM,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAAU,EAAG,GAAG,CAAC,QAAQ,WAAW,KAAK,kBAAkB,CAAC;AAAA,MACtK,MAAM,CAAC,UAAkB,WAAmB,IAAI,QAAQ,EAAE,UAAU,OAAO,GAAG,CAAC,QAAQ,WAAW,KAAK,gBAAgB,CAAC;AAAA,MACxH,OAAO,CAAC,MAAc,YAAsB,IAAI,SAAS,YAAY,EAAE,KAAK,GAAG,OAAO,GAAG,CAAC,QAAQ,aAAa,KAAK,WAAW,iCAAiC,CAAC;AAAA,MACjK,SAAS,CAAC,YAAoB,IAAI,WAAW,EAAE,QAAQ,GAAG,CAAC,QAAQ,WAAW,KAAK,mBAAmB,CAAC;AAAA,MACvG,WAAW,CAAC,aAAwC,kBAAkB,cAAc,UAAU,CAAC,QAAQ,IAAI,MAAM;AAAA,IACnH;AAAA,EACF;AAEA,QAAM,QAAQ,UAAU;AACxB,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,WAAS,iBAAiB,UAA4C;AACpE,UAAM,aAAa,YAAY,OAAO,aAAa,WAC/C,WACA,CAAC;AACL,YAAQ,QAAQ;AAChB,WAAO,EAAE,GAAG,YAAY,GAAG,IAAI;AAAA,EACjC;AAEA,WAAS,wBAAiD;AACxD,iBAAa,aAAa;AAC1B,WAAO;AAAA,EACT;AAEA,WAAS,qBAA8C;AACrD,cAAU,OAAO,OAAO,UAAU,CAAC;AACnC,WAAO;AAAA,EACT;AAEA,WAAS,sBAA+C;AACtD,eAAW,OAAO,OAAO,WAAW,CAAC;AACrC,WAAO;AAAA,EACT;AAEA,WAAS,kBAAkB,QAAyB;AAClD,WAAO,WAAW,WACb,WAAW,SACX,WAAW,cACX,WAAW,WACX,WAAW;AAAA,EAClB;AAEA,WAAS,WAAW,QAAgB,UAA4B;AAC9D,QAAI,WAAW,QAAS,QAAO;AAC/B,QAAI,WAAW,MAAO,QAAO,iBAAiB,QAAQ;AACtD,QAAI,WAAW,WAAY,QAAO,sBAAsB;AACxD,QAAI,WAAW,QAAS,QAAO,mBAAmB;AAClD,QAAI,WAAW,SAAU,QAAO,oBAAoB;AACpD,QAAI,YAAY,OAAO,aAAa,YAAY,OAAO,KAAK,QAAQ,EAAE,SAAS,EAAG,QAAO;AACzF,YAAQ,QAAQ;AAAA,MACd,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAW,eAAO,YAAY;AAAA,MACnC,KAAK;AAAQ,eAAO,SAAS;AAAA,MAC7B,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAY,eAAO,aAAa;AAAA,MACrC,KAAK;AAAO,eAAO,QAAQ;AAAA,MAC3B,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAO,eAAO,QAAQ;AAAA,MAC3B,KAAK;AAAQ,eAAO,SAAS;AAAA,MAC7B,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAS,eAAO,UAAU;AAAA,MAC/B,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAU,eAAO,WAAW;AAAA,MACjC,KAAK;AAAM,eAAO,OAAO;AAAA,MACzB,KAAK;AAAM,eAAO,OAAO;AAAA,MACzB;AAAS,eAAO,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,WAAS,sBAAsB,WAA6D;AAC1F,WAAO,IAAI,MAAM,WAAW;AAAA,MAC1B,IAAI,KAAK,MAAM,OAAO;AACpB,YAAI,OAAO,SAAS,YAAY,CAAC,QAAQ,IAAI,IAAI,EAAG,QAAO;AAC3D,YAAI,IAAI,IAAI,WAAW,MAAM,KAAK;AAClC,eAAO;AAAA,MACT;AAAA,MACA,eAAe,KAAK,MAAM,YAAY;AACpC,YAAI,OAAO,SAAS,YAAY,CAAC,QAAQ,IAAI,IAAI,EAAG,QAAO;AAC3D,YAAI,kBAAkB,IAAI,GAAG;AAC3B,iBAAO,QAAQ,eAAe,KAAK,MAAM;AAAA,YACvC,OAAO,WAAW,MAAM,WAAW,KAAK;AAAA,YACxC,YAAY;AAAA,YACZ,cAAc;AAAA,YACd,UAAU;AAAA,UACZ,CAAC;AAAA,QACH;AACA,eAAO,QAAQ,eAAe,KAAK,MAAM;AAAA,UACvC,GAAG;AAAA,UACH,OAAO,WAAW,MAAM,WAAW,KAAK;AAAA,QAC1C,CAAC;AAAA,MACH;AAAA,MACA,eAAe,KAAK,MAAM;AACxB,YAAI,OAAO,SAAS,YAAY,QAAQ,IAAI,IAAI,KAAK,kBAAkB,IAAI,EAAG,QAAO;AACrF,eAAO,QAAQ,eAAe,KAAK,IAAI;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,sBAAsB,OAAyC;AACtE,UAAM,YAAY,OAAO,UAAU,YAAY,UAAU,OACrD,QACA,CAAC;AACL,UAAM,OAAgC,CAAC;AACvC,eAAW,UAAU,SAAS;AAC5B,UAAI,CAAC,QAAQ,IAAI,MAAM,EAAG;AAC1B,aAAO,eAAe,MAAM,QAAQ;AAAA,QAClC,OAAO;AAAA,UACL;AAAA,UACA,OAAO,UAAU,eAAe,KAAK,WAAW,MAAM,IAAI,UAAU,MAAM,IAAI;AAAA,QAChF;AAAA,QACA,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,WAAO,sBAAsB,IAAI;AAAA,EACnC;AAEA,MAAI,OAAO,sBAAsB,OAAO,OAAO;AAC/C,SAAO,eAAe,QAAQ,WAAW;AAAA,IACvC,MAAM;AACJ,aAAO;AAAA,IACT;AAAA,IACA,IAAI,OAAO;AACT,aAAO,sBAAsB,KAAK;AAAA,IACpC;AAAA,IACA,YAAY;AAAA,IACZ,cAAc;AAAA,EAChB,CAAC;AACH;;;ACpkDA,SAAS,oBAAAC,yBAAwB;AAsDjC,SAAS,mBAAmB,sBAAsB,0BAA0B;;;ACpE5E,SAAS,cAAc;;;AC8FhB,SAAS,oBAAoB,MAAwC;AAC1E,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,WAAmB,WAAiC;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AChCO,SAAS,iBAAiB,MAAkC;AACjE,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,WAAmB,WAAiC;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACCO,SAAS,gBAAgB,MAAgC;AAC9D,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,UAAkB,UAAgC;AACrD,YAAM,MAAM,KAAK,eAAe,gBAAgB,QAAQ;AACxD,UAAI,IAAK,KAAI,YAAY,UAAU,GAAG;AAAA,IACxC;AAAA,EACF;AACF;;;ACTO,SAAS,iBAAiB,MAAkC;AACjE,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,UAAkB,UAAgC;AACrD,YAAM,MAAM,KAAK,eAAe,gBAAgB,QAAQ;AACxD,UAAI,IAAK,KAAI,YAAY,UAAU,GAAG;AAAA,IACxC;AAAA,EACF;AACF;;;ACVO,SAAS,kBAAkB,MAAoC;AACpE,SAAO;AAAA,IACL,SAAS,UAAkB,UAAgC;AACzD,WAAK,QAAQ,cAAc,UAAU,QAAQ;AAAA,IAC/C;AAAA,IACA,KAAK,UAAkB,UAAgC;AACrD,YAAM,MAAM,KAAK,eAAe,gBAAgB,QAAQ;AACxD,UAAI,IAAK,KAAI,YAAY,UAAU,GAAG;AAAA,IACxC;AAAA,EACF;AACF;","names":["originRegistry","STORAGE_KEY","domains","shell","version","allowed","ALL_CAPABILITIES"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kehto/shell",
-  "version": "0.19.2",
+  "version": "0.20.0",
   "description": "Shell runtime — relay bridge, ACL enforcement, signer proxy, storage proxy for hosting napplet iframe applications",
   "type": "module",
   "main": "./dist/index.js",
@@ -20,8 +20,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@kehto/acl": "^0.17.0",
-    "@kehto/runtime": "^0.21.0"
+    "@kehto/acl": "^0.18.0",
+    "@kehto/runtime": "^0.22.0"
   },
   "peerDependencies": {
     "@napplet/core": ">=0.31.0 <0.32.0",
@@ -31,7 +31,7 @@
   "devDependencies": {
     "@napplet/core": ">=0.31.0 <0.32.0",
     "@napplet/nap": ">=0.31.0 <0.32.0",
-    "@napplet/shim": "0.29.0",
+    "@napplet/shim": "0.29.2",
     "nostr-tools": "^2.23.3",
     "tsup": "^8.5.0",
     "typescript": "^5.9.3"