@keyneom/sync-kit 0.1.1 → 0.2.0-rc.0

package/dist/sharing/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/sharing/controller.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,iBAAiB,EAEtB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EASL,KAAK,wBAAwB,EAE9B,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,2BAA2B,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG;IAClE,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC9B,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;IACpE,GAAG,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,qBAAa,0BAA2B,YAAW,oBAAoB;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAE1E,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAKnE,GAAG,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAIzC;AAED,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAAI;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,CAAC,CAAC;IACT,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;CACzD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,UAAU,EAAE,mBAAmB,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,6BAA6B,CAAC,CAAC,IAAI;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACtC,QAAQ,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9C,SAAS,EAAE,qBAAqB,CAAC;IACjC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IAC1B,oBAAoB,CAAC,CAAC,OAAO,EAAE;QAC7B,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,oBAAoB,CAAC,CACnB,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;KACtB,GACA,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,WAAW,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC;QACd,WAAW,EAAE,CAAC,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC;CACjC,CAAC;AAEF;;;GAGG;AACH,qBAAa,sBAAsB,CAAC,CAAC;IAGvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,KAAK,CAAoC;gBAEpB,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAItE,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAI7C,YAAY,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAI5C,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,CAAC,GACP,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAmClC,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAiB/D,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,CAAC,GACZ,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAsDlC,iBAAiB,CAAC,KAAK,EAAE;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,qBAAqB,EAAE,CAAC;QACzC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAChC,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAmEpC,aAAa,CAAC,OAAO,CAAC,EAAE;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;KACnC,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAIjC,iBAAiB,CACf,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IA6E1D,iBAAiB,CAAC,KAAK,EAAE;QACvB,UAAU,EAAE,mBAAmB,CAAC;QAChC,cAAc,EAAE,MAAM,CAAC;QACvB,qBAAqB,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAqIpC,cAAc,CAAC,KAAK,EAAE;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAiDnC,gBAAgB,CAAC,KAAK,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IA2CnC,cAAc,CACZ,mBAAmB,EAAE,wBAAwB,EAC7C,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAwFlC,OAAO,CAAC,kBAAkB;YA4DZ,eAAe;YAmBf,gBAAgB;YAahB,UAAU;IAgCxB,OAAO,CAAC,kBAAkB;YAmBZ,WAAW;IAyBzB,OAAO,CAAC,MAAM;IAWd,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,UAAU;CAQnB;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC,GACxC,sBAAsB,CAAC,CAAC,CAAC,CAE3B"}

package/dist/sharing/controller.js

@@ -0,0 +1,549 @@
+import { SyncKitError } from "../core/errors.js";
+import { canAdministerSharedBackup, parseSharedBackupEnvelopeV1, sharedBackupParticipant, sharedBackupParticipants, } from "./index.js";
+import { acceptSharingPublicKeyResponseV1, createSharedBackupEnvelopeV1, createSharingInvitationV1, createSharingPublicKeyResponseV1, decryptSharedBackupEnvelopeV1, verifySharedBackupEnvelopeV1, verifySharingInvitationV1, } from "./web-crypto.js";
+export class MemorySharedBackupRegistry {
+    records = new Map();
+    get(datasetId) {
+        const record = this.records.get(datasetId);
+        return Promise.resolve(record ? structuredClone(record) : null);
+    }
+    set(record) {
+        this.records.set(record.datasetId, structuredClone(record));
+        return Promise.resolve();
+    }
+    delete(datasetId) {
+        this.records.delete(datasetId);
+        return Promise.resolve();
+    }
+}
+/**
+ * Headless, backend-independent sharing orchestration. Consumers own UI,
+ * persistence, lifecycle policy, and conflict resolution.
+ */
+export class SharedBackupController {
+    options;
+    queue = Promise.resolve();
+    constructor(options) {
+        this.options = options;
+        if (!options.appId.trim())
+            throw new TypeError("appId must not be empty.");
+    }
+    ensureStorage() {
+        return this.options.transport.ensureStorage();
+    }
+    listDatasets() {
+        return this.options.transport.listDatasets();
+    }
+    createDataset(datasetId, value) {
+        return this.serialized(async () => {
+            requireNonEmpty(datasetId, "datasetId");
+            const duplicate = (await this.options.transport.listDatasets()).find((dataset) => dataset.datasetId === datasetId);
+            if (duplicate) {
+                throw new SyncKitError("conflict", `Dataset ${datasetId} already exists.`);
+            }
+            const identity = await this.options.identity();
+            const envelope = await createSharedBackupEnvelopeV1(value, this.options.codec, identity, {
+                appId: this.options.appId,
+                backupId: datasetId,
+                participants: [
+                    { publicKey: identity.publicKey, role: "owner" },
+                ],
+            }, this.cryptoOptions());
+            const stored = await this.options.transport.createDataset(datasetId, envelope);
+            await this.persistHead(stored, identity.publicKey.keyId);
+            return result(stored, value, "created");
+        });
+    }
+    loadDataset(datasetId) {
+        return this.serialized(async () => {
+            const stored = await this.readDatasetById(datasetId);
+            const record = await this.requiredRegistry(datasetId);
+            await this.verifyHead(stored, record);
+            const value = await decryptSharedBackupEnvelopeV1(stored.envelope, this.options.codec, await this.options.identity(), this.crypto(), { trustedOwnerKeyId: record.trustedOwnerKeyId });
+            await this.persistHead(stored, record.trustedOwnerKeyId, record);
+            return result(stored, value, "loaded");
+        });
+    }
+    syncDataset(datasetId, localValue) {
+        return this.serialized(async () => {
+            const stored = await this.readDatasetById(datasetId);
+            const record = await this.requiredRegistry(datasetId);
+            const forked = await this.verifyHead(stored, record, true);
+            const identity = await this.options.identity();
+            const remoteValue = await decryptSharedBackupEnvelopeV1(stored.envelope, this.options.codec, identity, this.crypto(), { trustedOwnerKeyId: record.trustedOwnerKeyId });
+            if (forked) {
+                const decision = await this.options.resolveFork?.({
+                    datasetId,
+                    lastVerifiedRevisionId: record.lastRevisionId ?? "",
+                    remoteRevisionId: stored.envelope.revisionId,
+                    localValue,
+                    remoteValue,
+                });
+                if (decision !== "merge") {
+                    throw new SyncKitError("conflict", `Dataset ${datasetId} has a divergent signed head.`);
+                }
+            }
+            const merged = this.options.codec.merge(localValue, remoteValue);
+            if (this.options.codec.fingerprint(merged) ===
+                this.options.codec.fingerprint(remoteValue)) {
+                await this.persistHead(stored, record.trustedOwnerKeyId, record);
+                return result(stored, merged, "unchanged");
+            }
+            const next = await createSharedBackupEnvelopeV1(merged, this.options.codec, identity, {
+                appId: this.options.appId,
+                backupId: datasetId,
+                participants: participantInputs(stored.envelope),
+                previous: stored.envelope,
+            }, this.cryptoOptions());
+            const updated = await this.options.transport.writeDataset(stored, next);
+            await this.persistHead(updated, record.trustedOwnerKeyId, record);
+            return result(updated, merged, "updated");
+        });
+    }
+    inviteParticipant(input) {
+        return this.serialized(async () => {
+            const identity = await this.options.identity();
+            const trustedOwnerKeyIds = new Set();
+            for (const grant of input.requestedGrants) {
+                const stored = await this.readDatasetById(grant.datasetId);
+                const record = await this.requiredRegistry(grant.datasetId);
+                const verified = await verifySharedBackupEnvelopeV1(stored.envelope, this.crypto(), { trustedOwnerKeyId: record.trustedOwnerKeyId });
+                const actor = sharedBackupParticipant(verified, identity.publicKey.keyId);
+                if (!actor || !canAdministerSharedBackup(actor.role)) {
+                    throw new SyncKitError("authorization", `This identity cannot invite participants to ${grant.datasetId}.`);
+                }
+                trustedOwnerKeyIds.add(record.trustedOwnerKeyId);
+            }
+            if (trustedOwnerKeyIds.size !== 1) {
+                throw new SyncKitError("configuration", "One invitation cannot combine datasets with different owner trust roots.");
+            }
+            const trustedOwnerKeyId = [...trustedOwnerKeyIds][0];
+            if (!trustedOwnerKeyId) {
+                throw new SyncKitError("state", "The invitation has no owner trust root.");
+            }
+            const access = await this.options.transport.grantExchangeAccess(input.emailAddress, {
+                ...(input.sendNotificationEmail === undefined
+                    ? {}
+                    : { sendNotificationEmail: input.sendNotificationEmail }),
+                ...(input.emailMessage ? { emailMessage: input.emailMessage } : {}),
+            });
+            const invitation = await createSharingInvitationV1(identity, {
+                appId: this.options.appId,
+                appFolderId: access.appFolderId,
+                recipientDrivePermissionId: access.drivePermissionId,
+                requestedGrants: input.requestedGrants,
+                trustedOwnerKeyId,
+                ...(input.expiresAt ? { expiresAt: input.expiresAt } : {}),
+            }, this.cryptoOptions());
+            return {
+                invitation,
+                invitationFileId: await this.options.transport.createInvitation(invitation),
+                drivePermissionId: access.drivePermissionId,
+            };
+        });
+    }
+    listExchanges(options) {
+        return this.options.transport.listExchanges(options);
+    }
+    submitKeyResponse(invitationFileId) {
+        return this.serialized(async () => {
+            const invitation = await verifySharingInvitationV1(await this.options.transport.readInvitation(invitationFileId), {
+                crypto: this.crypto(),
+                ...(this.options.now ? { now: this.options.now } : {}),
+            });
+            const storage = await this.options.transport.ensureStorage();
+            if (invitation.appId !== this.options.appId ||
+                invitation.appFolderId !== storage.appFolderId) {
+                throw new SyncKitError("compatibility", "The invitation belongs to another app storage hierarchy.");
+            }
+            const identity = await this.options.identity();
+            const accountBinding = await this.options.createAccountBinding?.({
+                appId: this.options.appId,
+                exchangeId: invitation.exchangeId,
+                sharingKeyId: identity.publicKey.keyId,
+            });
+            const response = await createSharingPublicKeyResponseV1(identity, {
+                appId: this.options.appId,
+                exchangeId: invitation.exchangeId,
+                ...(accountBinding ? { accountBinding } : {}),
+            }, this.cryptoOptions());
+            const datasets = await this.options.transport.listDatasets();
+            const registrations = await Promise.all(invitation.requestedGrants.map(async (grant) => {
+                const file = datasets.find((dataset) => dataset.datasetId === grant.datasetId);
+                const existing = await this.options.registry.get(grant.datasetId);
+                return { grant, file, existing };
+            }));
+            for (const { grant, existing } of registrations) {
+                if (existing &&
+                    existing.trustedOwnerKeyId !== invitation.trustedOwnerKeyId) {
+                    throw new SyncKitError("conflict", `Dataset ${grant.datasetId} is already pinned to another owner key.`);
+                }
+            }
+            for (const { grant, file, existing } of registrations) {
+                await this.options.registry.set(existing
+                    ? {
+                        ...existing,
+                        ...(file ? { fileId: file.fileId } : {}),
+                    }
+                    : {
+                        datasetId: grant.datasetId,
+                        ...(file ? { fileId: file.fileId } : {}),
+                        trustedOwnerKeyId: invitation.trustedOwnerKeyId,
+                    });
+            }
+            return {
+                responseFileId: await this.options.transport.createKeyResponse(response),
+                exchangeId: invitation.exchangeId,
+            };
+        });
+    }
+    acceptKeyResponse(input) {
+        return this.serialized(async () => {
+            const identity = await this.options.identity();
+            const responseFile = await this.options.transport.readKeyResponse(input.responseFileId, input.invitation.recipientDrivePermissionId);
+            const binding = responseFile.response.accountBinding;
+            if (this.options.requireAccountBinding && !binding) {
+                throw new SyncKitError("authorization", "The key response has no required Google/passkey account binding.");
+            }
+            const verifiedAccount = binding && this.options.verifyAccountBinding
+                ? await this.options.verifyAccountBinding(binding, {
+                    appId: this.options.appId,
+                    exchangeId: input.invitation.exchangeId,
+                    sharingKeyId: responseFile.response.keyId,
+                    credentialId: binding.passkey.credentialId,
+                })
+                : undefined;
+            if (binding &&
+                this.options.requireAccountBinding &&
+                !this.options.verifyAccountBinding) {
+                throw new SyncKitError("configuration", "Account binding is required but no verifier is configured.");
+            }
+            const accepted = await acceptSharingPublicKeyResponseV1(input.invitation, responseFile.response, {
+                acceptedByKeyId: identity.publicKey.keyId,
+                drivePermissionId: responseFile.ownerPermissionId,
+                ...(verifiedAccount
+                    ? { googleSubject: verifiedAccount.subject }
+                    : {}),
+            }, this.cryptoOptions());
+            if (verifiedAccount) {
+                await this.options.transport.deleteExchange(input.responseFileId);
+            }
+            const results = [];
+            for (const grant of accepted) {
+                try {
+                    const stored = await this.readDatasetById(grant.datasetId);
+                    const record = (await this.options.registry.get(grant.datasetId)) ??
+                        this.initialOwnerRecord(stored);
+                    await this.verifyHead(stored, record);
+                    const value = await decryptSharedBackupEnvelopeV1(stored.envelope, this.options.codec, identity, this.crypto(), { trustedOwnerKeyId: record.trustedOwnerKeyId });
+                    const participants = participantInputs(stored.envelope).filter((participant) => participant.publicKey.keyId !==
+                        grant.participant.publicKey.keyId);
+                    participants.push(grant.participant);
+                    const next = await createSharedBackupEnvelopeV1(value, this.options.codec, identity, {
+                        appId: this.options.appId,
+                        backupId: grant.datasetId,
+                        participants,
+                        previous: stored.envelope,
+                    }, this.cryptoOptions());
+                    const updated = await this.options.transport.writeDataset(stored, next);
+                    const permission = await this.options.transport.setDatasetPermission(stored.fileId, input.recipientEmailAddress, grant.participant.role === "owner"
+                        ? "admin"
+                        : grant.participant.role, {
+                        hasInheritedReadAccess: true,
+                    });
+                    const participantPermissionIds = {
+                        ...record.participantPermissionIds,
+                        ...(permission.permissionId
+                            ? {
+                                [grant.participant.publicKey.keyId]: permission.permissionId,
+                            }
+                            : {}),
+                    };
+                    const nextRecord = {
+                        ...record,
+                        fileId: updated.fileId,
+                        lastRevisionId: updated.envelope.revisionId,
+                        participantPermissionIds,
+                    };
+                    await this.options.registry.set(nextRecord);
+                    results.push({
+                        datasetId: grant.datasetId,
+                        fileId: updated.fileId,
+                        revisionId: updated.envelope.revisionId,
+                        ...(permission.permissionId
+                            ? { permissionId: permission.permissionId }
+                            : {}),
+                        status: "accepted",
+                    });
+                }
+                catch (error) {
+                    results.push({
+                        datasetId: grant.datasetId,
+                        status: "failed",
+                        error,
+                    });
+                }
+            }
+            return results;
+        });
+    }
+    setDatasetRole(input) {
+        return this.changeParticipants(input.datasetId, (stored, value) => {
+            const participants = participantInputs(stored.envelope);
+            const participant = participants.find((candidate) => candidate.publicKey.keyId === input.keyId);
+            if (!participant) {
+                throw new SyncKitError("not-found", `Participant ${input.keyId} is not in this dataset.`);
+            }
+            participant.role = input.role;
+            return Promise.resolve({
+                participants,
+                value,
+                afterWrite: async (updated, record) => {
+                    const permission = await this.options.transport.setDatasetPermission(updated.fileId, input.emailAddress, input.role, {
+                        ...(record.participantPermissionIds?.[input.keyId]
+                            ? {
+                                existingDirectPermissionId: record.participantPermissionIds[input.keyId],
+                            }
+                            : {}),
+                        ...(input.role === "viewer"
+                            ? { hasInheritedReadAccess: true }
+                            : {}),
+                    });
+                    const participantPermissionIds = {
+                        ...record.participantPermissionIds,
+                        ...(permission.permissionId
+                            ? { [input.keyId]: permission.permissionId }
+                            : {}),
+                    };
+                    await this.options.registry.set({
+                        ...record,
+                        participantPermissionIds,
+                    });
+                },
+            });
+        });
+    }
+    revokeDatasetKey(input) {
+        return this.changeParticipants(input.datasetId, (stored, value) => {
+            const participant = sharedBackupParticipant(stored.envelope, input.keyId);
+            if (!participant) {
+                throw new SyncKitError("not-found", `Participant ${input.keyId} is not in this dataset.`);
+            }
+            if (participant.role === "owner") {
+                throw new SyncKitError("authorization", "Owner transfer or removal is not supported by sharing v1.");
+            }
+            const participants = participantInputs(stored.envelope).filter((candidate) => candidate.publicKey.keyId !== input.keyId);
+            return Promise.resolve({
+                participants,
+                value,
+                afterWrite: async (_updated, record) => {
+                    const permissionId = record.participantPermissionIds?.[input.keyId];
+                    if (permissionId) {
+                        await this.options.transport.removeDatasetPermission(stored.fileId, permissionId);
+                    }
+                    const participantPermissionIds = Object.fromEntries(Object.entries(record.participantPermissionIds ?? {}).filter(([keyId]) => keyId !== input.keyId));
+                    await this.options.registry.set({
+                        ...record,
+                        participantPermissionIds,
+                    });
+                },
+            });
+        });
+    }
+    rotateLocalKey(replacementIdentity, datasetIds) {
+        return this.serialized(async () => {
+            const currentIdentity = await this.options.identity();
+            const results = [];
+            for (const datasetId of datasetIds) {
+                try {
+                    const stored = await this.readDatasetById(datasetId);
+                    const record = await this.requiredRegistry(datasetId);
+                    await this.verifyHead(stored, record);
+                    const current = sharedBackupParticipant(stored.envelope, currentIdentity.publicKey.keyId);
+                    if (!current || current.role === "viewer") {
+                        throw new SyncKitError("authorization", "Only a current owner, admin, or writer can rotate its own key.");
+                    }
+                    const value = await decryptSharedBackupEnvelopeV1(stored.envelope, this.options.codec, currentIdentity, this.crypto(), { trustedOwnerKeyId: record.trustedOwnerKeyId });
+                    const participants = participantInputs(stored.envelope).map((participant) => participant.publicKey.keyId === currentIdentity.publicKey.keyId
+                        ? {
+                            publicKey: replacementIdentity.publicKey,
+                            role: participant.role,
+                            ...(participant.accepted
+                                ? { accepted: participant.accepted }
+                                : {}),
+                        }
+                        : participant);
+                    const next = await createSharedBackupEnvelopeV1(value, this.options.codec, replacementIdentity, {
+                        appId: this.options.appId,
+                        backupId: datasetId,
+                        participants,
+                        previous: stored.envelope,
+                        keyRotation: { previousIdentity: currentIdentity },
+                    }, this.cryptoOptions());
+                    const updated = await this.options.transport.writeDataset(stored, next);
+                    const permission = record.participantPermissionIds?.[currentIdentity.publicKey.keyId];
+                    const permissions = Object.fromEntries(Object.entries(record.participantPermissionIds ?? {}).filter(([keyId]) => keyId !== currentIdentity.publicKey.keyId));
+                    if (permission) {
+                        permissions[replacementIdentity.publicKey.keyId] = permission;
+                    }
+                    await this.persistHead(updated, record.trustedOwnerKeyId, {
+                        ...record,
+                        participantPermissionIds: permissions,
+                    });
+                    results.push({
+                        datasetId,
+                        status: "rotated",
+                        revisionId: updated.envelope.revisionId,
+                    });
+                }
+                catch (error) {
+                    results.push({ datasetId, status: "failed", error });
+                }
+            }
+            return results;
+        });
+    }
+    changeParticipants(datasetId, change) {
+        return this.serialized(async () => {
+            const stored = await this.readDatasetById(datasetId);
+            const record = await this.requiredRegistry(datasetId);
+            await this.verifyHead(stored, record);
+            const identity = await this.options.identity();
+            const actor = sharedBackupParticipant(stored.envelope, identity.publicKey.keyId);
+            if (!actor || !canAdministerSharedBackup(actor.role)) {
+                throw new SyncKitError("authorization", "Only a current owner or admin can change dataset access.");
+            }
+            const value = await decryptSharedBackupEnvelopeV1(stored.envelope, this.options.codec, identity, this.crypto(), { trustedOwnerKeyId: record.trustedOwnerKeyId });
+            const changed = await change(stored, value);
+            const next = await createSharedBackupEnvelopeV1(changed.value, this.options.codec, identity, {
+                appId: this.options.appId,
+                backupId: datasetId,
+                participants: changed.participants,
+                previous: stored.envelope,
+            }, this.cryptoOptions());
+            const updated = await this.options.transport.writeDataset(stored, next);
+            const nextRecord = await this.persistHead(updated, record.trustedOwnerKeyId, record);
+            await changed.afterWrite?.(updated, nextRecord);
+            return result(updated, changed.value, "updated");
+        });
+    }
+    async readDatasetById(datasetId) {
+        requireNonEmpty(datasetId, "datasetId");
+        const record = await this.options.registry.get(datasetId);
+        const file = record?.fileId ??
+            (await this.options.transport.listDatasets()).find((candidate) => candidate.datasetId === datasetId)?.fileId;
+        if (!file) {
+            throw new SyncKitError("not-found", `Dataset ${datasetId} was not found.`);
+        }
+        return this.options.transport.readDataset(file);
+    }
+    async requiredRegistry(datasetId) {
+        const record = await this.options.registry.get(datasetId);
+        if (!record) {
+            throw new SyncKitError("state", `Dataset ${datasetId} has no pinned owner key. Open it from a verified invitation first.`);
+        }
+        return record;
+    }
+    async verifyHead(stored, record, allowFork = false) {
+        await verifySharedBackupEnvelopeV1(stored.envelope, this.crypto(), {
+            trustedOwnerKeyId: record.trustedOwnerKeyId,
+        });
+        if (!record.lastRevisionId)
+            return false;
+        if (stored.envelope.revisionId !== record.lastRevisionId &&
+            record.seenRevisionIds?.includes(stored.envelope.revisionId)) {
+            throw new SyncKitError("conflict", `Dataset ${stored.datasetId} rolled back to a previously verified revision.`);
+        }
+        if (stored.envelope.revisionId === record.lastRevisionId ||
+            stored.envelope.parentRevisionId === record.lastRevisionId ||
+            stored.envelope.revisionAncestors?.includes(record.lastRevisionId)) {
+            return false;
+        }
+        if (allowFork)
+            return true;
+        throw new SyncKitError("conflict", `Dataset ${stored.datasetId} has a divergent signed head.`);
+    }
+    initialOwnerRecord(stored) {
+        const owner = sharedBackupParticipants(stored.envelope).find((participant) => participant.role === "owner");
+        if (!owner) {
+            throw new SyncKitError("compatibility", "The dataset has no owner.");
+        }
+        return {
+            datasetId: stored.datasetId,
+            fileId: stored.fileId,
+            trustedOwnerKeyId: owner.keyId,
+        };
+    }
+    async persistHead(stored, trustedOwnerKeyId, previous) {
+        const record = {
+            datasetId: stored.datasetId,
+            fileId: stored.fileId,
+            trustedOwnerKeyId,
+            lastRevisionId: stored.envelope.revisionId,
+            seenRevisionIds: [
+                ...new Set([
+                    ...(previous?.seenRevisionIds ?? []),
+                    ...(previous?.lastRevisionId ? [previous.lastRevisionId] : []),
+                    stored.envelope.revisionId,
+                ]),
+            ].slice(-256),
+            ...(previous?.participantPermissionIds
+                ? { participantPermissionIds: previous.participantPermissionIds }
+                : {}),
+        };
+        await this.options.registry.set(record);
+        return record;
+    }
+    crypto() {
+        const implementation = this.options.crypto ?? globalThis.crypto;
+        if (!implementation?.subtle) {
+            throw new SyncKitError("configuration", "WebCrypto is required by the sharing controller.");
+        }
+        return implementation;
+    }
+    cryptoOptions() {
+        return {
+            crypto: this.crypto(),
+            ...(this.options.now ? { now: this.options.now } : {}),
+            ...(this.options.randomUUID
+                ? { randomUUID: this.options.randomUUID }
+                : {}),
+        };
+    }
+    serialized(operation) {
+        const run = this.queue.then(operation, operation);
+        this.queue = run.then(() => undefined, () => undefined);
+        return run;
+    }
+}
+export function createSharedBackupController(options) {
+    return new SharedBackupController(options);
+}
+function participantInputs(envelope) {
+    return sharedBackupParticipants(envelope).map((participant) => ({
+        publicKey: {
+            keyId: participant.keyId,
+            encryptionAlgorithm: participant.encryptionAlgorithm,
+            encryptionPublicKey: participant.encryptionPublicKey,
+            signatureAlgorithm: participant.signatureAlgorithm,
+            signingPublicKey: participant.signingPublicKey,
+        },
+        role: participant.role,
+        ...(participant.accepted ? { accepted: participant.accepted } : {}),
+    }));
+}
+function result(stored, value, outcome) {
+    const envelope = parseSharedBackupEnvelopeV1(stored.envelope);
+    return {
+        datasetId: stored.datasetId,
+        fileId: stored.fileId,
+        revisionId: envelope.revisionId,
+        value,
+        outcome,
+    };
+}
+function requireNonEmpty(value, name) {
+    if (!value.trim())
+        throw new TypeError(`${name} must not be empty.`);
+}
+//# sourceMappingURL=controller.js.map

package/dist/sharing/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/sharing/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,GAOzB,MAAM,YAAY,CAAC;AAQpB,OAAO,EACL,gCAAgC,EAChC,4BAA4B,EAC5B,yBAAyB,EACzB,gCAAgC,EAChC,6BAA6B,EAC7B,4BAA4B,EAC5B,yBAAyB,GAI1B,MAAM,iBAAiB,CAAC;AAsBzB,MAAM,OAAO,0BAA0B;IACpB,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE1E,GAAG,CAAC,SAAiB;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,MAAmC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAiED;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAGJ;IAFrB,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEjD,YAA6B,OAAyC;QAAzC,YAAO,GAAP,OAAO,CAAkC;QACpE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAC7E,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;IAC/C,CAAC;IAED,aAAa,CACX,SAAiB,EACjB,KAAQ;QAER,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAClE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAC7C,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,WAAW,SAAS,kBAAkB,CACvC,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CACjD,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,QAAQ,EACR;gBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE;oBACZ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;iBACjD;aACF,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CACvD,SAAS,EACT,QAAQ,CACT,CAAC;YACF,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzD,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAC/C,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAC7B,IAAI,CAAC,MAAM,EAAE,EACb,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAChD,CAAC;YACF,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CACT,SAAiB,EACjB,UAAa;QAEb,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,MAAM,6BAA6B,CACrD,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,QAAQ,EACR,IAAI,CAAC,MAAM,EAAE,EACb,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAChD,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBAChD,SAAS;oBACT,sBAAsB,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;oBACnD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;oBAC5C,UAAU;oBACV,WAAW;iBACZ,CAAC,CAAC;gBACH,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,WAAW,SAAS,+BAA+B,CACpD,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACjE,IACE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;gBACtC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,EAC3C,CAAC;gBACD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBACjE,OAAO,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC7C,MAAM,EACN,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,QAAQ,EACR;gBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAMjB;QACC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CACjD,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,MAAM,EAAE,EACb,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAChD,CAAC;gBACF,MAAM,KAAK,GAAG,uBAAuB,CACnC,QAAQ,EACR,QAAQ,CAAC,SAAS,CAAC,KAAK,CACzB,CAAC;gBACF,IAAI,CAAC,KAAK,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,+CAA+C,KAAK,CAAC,SAAS,GAAG,CAClE,CAAC;gBACJ,CAAC;gBACD,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,kBAAkB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,MAAM,iBAAiB,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAC7D,KAAK,CAAC,YAAY,EAClB;gBACE,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,EAAE,CAAC;gBAC3D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,CACF,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAChD,QAAQ,EACR;gBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,0BAA0B,EAAE,MAAM,CAAC,iBAAiB;gBACpD,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,iBAAiB;gBACjB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;YACF,OAAO;gBACL,UAAU;gBACV,gBAAgB,EACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC;gBAC3D,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;aAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,OAGb;QACC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,iBAAiB,CACf,gBAAwB;QAExB,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAChD,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAC7D;gBACE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;gBACrB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CACF,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAC7D,IACE,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK;gBACvC,UAAU,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAC9C,CAAC;gBACD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBAC/D,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK;aACvC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CACrD,QAAQ,EACR;gBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAC7D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CACxB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CACnD,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAClE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACnC,CAAC,CAAC,CACH,CAAC;YACF,KAAK,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,aAAa,EAAE,CAAC;gBAChD,IACE,QAAQ;oBACR,QAAQ,CAAC,iBAAiB,KAAK,UAAU,CAAC,iBAAiB,EAC3D,CAAC;oBACD,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,WAAW,KAAK,CAAC,SAAS,0CAA0C,CACrE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,aAAa,EAAE,CAAC;gBACtD,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAC7B,QAAQ;oBACN,CAAC,CAAC;wBACE,GAAG,QAAQ;wBACX,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzC;oBACH,CAAC,CAAC;wBACE,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;qBAChD,CACN,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,cAAc,EACZ,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC;gBAC1D,UAAU,EAAE,UAAU,CAAC,UAAU;aAClC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAIjB;QACC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAC/D,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,UAAU,CAAC,0BAA0B,CAC5C,CAAC;YACF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC;YACrD,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,kEAAkE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,eAAe,GACnB,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB;gBAC1C,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,EAAE;oBAC/C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;oBACzB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU;oBACvC,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK;oBACzC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;iBAC3C,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;YAChB,IACE,OAAO;gBACP,IAAI,CAAC,OAAO,CAAC,qBAAqB;gBAClC,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAClC,CAAC;gBACD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CACrD,KAAK,CAAC,UAAU,EAChB,YAAY,CAAC,QAAQ,EACrB;gBACE,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK;gBACzC,iBAAiB,EAAE,YAAY,CAAC,iBAAiB;gBACjD,GAAG,CAAC,eAAe;oBACjB,CAAC,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC,OAAO,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;YACF,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,OAAO,GAA4B,EAAE,CAAC;YAC5C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAC3D,MAAM,MAAM,GACV,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;wBAClD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;oBAClC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACtC,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAC/C,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,QAAQ,EACR,IAAI,CAAC,MAAM,EAAE,EACb,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAChD,CAAC;oBACF,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC5D,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,SAAS,CAAC,KAAK;wBAC3B,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CACpC,CAAC;oBACF,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBACrC,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC7C,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,QAAQ,EACR;wBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;wBACzB,QAAQ,EAAE,KAAK,CAAC,SAAS;wBACzB,YAAY;wBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;qBAC1B,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;oBACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CACvD,MAAM,EACN,IAAI,CACL,CAAC;oBACF,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAC/C,MAAM,CAAC,MAAM,EACb,KAAK,CAAC,qBAAqB,EAC3B,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO;wBAChC,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAC1B;wBACE,sBAAsB,EAAE,IAAI;qBAC7B,CACF,CAAC;oBACJ,MAAM,wBAAwB,GAAG;wBAC/B,GAAG,MAAM,CAAC,wBAAwB;wBAClC,GAAG,CAAC,UAAU,CAAC,YAAY;4BACzB,CAAC,CAAC;gCACE,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,EACjC,UAAU,CAAC,YAAY;6BAC1B;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;oBACF,MAAM,UAAU,GAAgC;wBAC9C,GAAG,MAAM;wBACT,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;wBAC3C,wBAAwB;qBACzB,CAAC;oBACF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC5C,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;wBACvC,GAAG,CAAC,UAAU,CAAC,YAAY;4BACzB,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE;4BAC3C,CAAC,CAAC,EAAE,CAAC;wBACP,MAAM,EAAE,UAAU;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,MAAM,EAAE,QAAQ;wBAChB,KAAK;qBACN,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,KAKd;QACC,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAChE,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CACnC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CACzD,CAAC;YACF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,eAAe,KAAK,CAAC,KAAK,0BAA0B,CACrD,CAAC;YACJ,CAAC;YACD,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAC9B,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY;gBACZ,KAAK;gBACL,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;oBACpC,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAC/C,OAAO,CAAC,MAAM,EACd,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,IAAI,EACV;wBACE,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;4BAChD,CAAC,CAAC;gCACE,0BAA0B,EACxB,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC;6BAC/C;4BACH,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;4BACzB,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE;4BAClC,CAAC,CAAC,EAAE,CAAC;qBACR,CACF,CAAC;oBACJ,MAAM,wBAAwB,GAAG;wBAC/B,GAAG,MAAM,CAAC,wBAAwB;wBAClC,GAAG,CAAC,UAAU,CAAC,YAAY;4BACzB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,YAAY,EAAE;4BAC5C,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;oBACF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAC9B,GAAG,MAAM;wBACT,wBAAwB;qBACzB,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,KAGhB;QACC,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAChE,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,eAAe,KAAK,CAAC,KAAK,0BAA0B,CACrD,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC5D,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CACzD,CAAC;YACF,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY;gBACZ,KAAK;gBACL,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;oBACrC,MAAM,YAAY,GAAG,MAAM,CAAC,wBAAwB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpE,IAAI,YAAY,EAAE,CAAC;wBACjB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,uBAAuB,CAClD,MAAM,CAAC,MAAM,EACb,YAAY,CACb,CAAC;oBACJ,CAAC;oBACD,MAAM,wBAAwB,GAAG,MAAM,CAAC,WAAW,CACjD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1D,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CACnC,CACF,CAAC;oBACF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAC9B,GAAG,MAAM;wBACT,wBAAwB;qBACzB,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CACZ,mBAA6C,EAC7C,UAAoB;QAEpB,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;oBACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;oBACtD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACtC,MAAM,OAAO,GAAG,uBAAuB,CACrC,MAAM,CAAC,QAAQ,EACf,eAAe,CAAC,SAAS,CAAC,KAAK,CAChC,CAAC;oBACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1C,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,gEAAgE,CACjE,CAAC;oBACJ,CAAC;oBACD,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAC/C,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,eAAe,EACf,IAAI,CAAC,MAAM,EAAE,EACb,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAChD,CAAC;oBACF,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CACzD,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,SAAS,CAAC,KAAK,KAAK,eAAe,CAAC,SAAS,CAAC,KAAK;wBAC7D,CAAC,CAAC;4BACE,SAAS,EAAE,mBAAmB,CAAC,SAAS;4BACxC,IAAI,EAAE,WAAW,CAAC,IAAI;4BACtB,GAAG,CAAC,WAAW,CAAC,QAAQ;gCACtB,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE;gCACpC,CAAC,CAAC,EAAE,CAAC;yBACR;wBACH,CAAC,CAAC,WAAW,CAClB,CAAC;oBACF,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC7C,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,mBAAmB,EACnB;wBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;wBACzB,QAAQ,EAAE,SAAS;wBACnB,YAAY;wBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,WAAW,EAAE,EAAE,gBAAgB,EAAE,eAAe,EAAE;qBACnD,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;oBACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CACvD,MAAM,EACN,IAAI,CACL,CAAC;oBACF,MAAM,UAAU,GACd,MAAM,CAAC,wBAAwB,EAAE,CAC/B,eAAe,CAAC,SAAS,CAAC,KAAK,CAChC,CAAC;oBACJ,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1D,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,eAAe,CAAC,SAAS,CAAC,KAAK,CACvD,CACF,CAAC;oBACF,IAAI,UAAU,EAAE,CAAC;wBACf,WAAW,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC;oBAChE,CAAC;oBACD,MAAM,IAAI,CAAC,WAAW,CACpB,OAAO,EACP,MAAM,CAAC,iBAAiB,EACxB;wBACE,GAAG,MAAM;wBACT,wBAAwB,EAAE,WAAW;qBACtC,CACF,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS;wBACT,MAAM,EAAE,SAAS;wBACjB,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;qBACxC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB,CACxB,SAAiB,EACjB,MAUE;QAEF,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,uBAAuB,CACnC,MAAM,CAAC,QAAQ,EACf,QAAQ,CAAC,SAAS,CAAC,KAAK,CACzB,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAC/C,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,QAAQ,EACR,IAAI,CAAC,MAAM,EAAE,EACb,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAChD,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,KAAK,EACb,IAAI,CAAC,OAAO,CAAC,KAAK,EAClB,QAAQ,EACR;gBACE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,EACD,IAAI,CAAC,aAAa,EAAE,CACrB,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CACvC,OAAO,EACP,MAAM,CAAC,iBAAiB,EACxB,MAAM,CACP,CAAC;YACF,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAChD,OAAO,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,SAAiB;QAEjB,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,IAAI,GACR,MAAM,EAAE,MAAM;YACd,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CACjD,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,WAAW,SAAS,iBAAiB,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,SAAiB;QAEjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,WAAW,SAAS,qEAAqE,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAA8B,EAC9B,MAAmC,EACnC,SAAS,GAAG,KAAK;QAEjB,MAAM,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;YACjE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QACzC,IACE,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc;YACpD,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC5D,CAAC;YACD,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,WAAW,MAAM,CAAC,SAAS,iDAAiD,CAC7E,CAAC;QACJ,CAAC;QACD,IACE,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc;YACpD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,MAAM,CAAC,cAAc;YAC1D,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,EAClE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,WAAW,MAAM,CAAC,SAAS,+BAA+B,CAC3D,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,MAA8B;QAE9B,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC1D,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO,CAC9C,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,iBAAiB,EAAE,KAAK,CAAC,KAAK;SAC/B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,MAA8B,EAC9B,iBAAyB,EACzB,QAAsC;QAEtC,MAAM,MAAM,GAAgC;YAC1C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,iBAAiB;YACjB,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YAC1C,eAAe,EAAE;gBACf,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC;oBACpC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,MAAM,CAAC,QAAQ,CAAC,UAAU;iBAC3B,CAAC;aACH,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;YACb,GAAG,CAAC,QAAQ,EAAE,wBAAwB;gBACpC,CAAC,CAAC,EAAE,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,EAAE;gBACjE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;QAChE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,aAAa;QACnB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YACrB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;gBACzB,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAEO,UAAU,CAAI,SAA2B;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CACnB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAyC;IAEzC,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgC;IAEhC,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9D,SAAS,EAAE;YACT,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;YACpD,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;YACpD,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;YAClD,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;SAC/C;QACD,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,MAAM,CACb,MAA8B,EAC9B,KAAQ,EACR,OAA0C;IAE1C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;AACvE,CAAC"}