@keyneom/sync-kit 0.2.0-rc.1 → 0.2.0-rc.11

package/dist/sharing/control.js

@@ -0,0 +1,486 @@
+import { SyncKitError } from "../core/errors.js";
+import { base64UrlToBytes, bytesToBase64Url } from "../crypto/base64url.js";
+import { canonicalAad, canonicalJson, compareUtf16CodeUnits } from "../crypto/canonical.js";
+import { copyBuffer } from "../crypto/runtime.js";
+import { createSharingPublicKeyV1, } from "./web-crypto.js";
+/**
+ * An encrypted, merge-safe coordination dataset. It is intentionally separate
+ * from application data so every profile participant may acknowledge a
+ * migration without being allowed to modify the data being migrated.
+ */
+export const SHARING_CONTROL_KIND = "sync-kit-sharing-control";
+export const SHARING_CONTROL_EVENT_KIND = "sync-kit-sharing-control-event";
+/**
+ * Creates a codec whose merge is an event-id union. Signature and authority
+ * validation is intentionally asynchronous and is performed by
+ * `verifySharingControlStateV1` before callers act on the state.
+ */
+export function createSharingControlCodec() {
+    return {
+        serialize: (value) => parseSharingControlStateV1(value),
+        parse: parseSharingControlStateV1,
+        merge: mergeSharingControlStates,
+        fingerprint: canonicalJson,
+    };
+}
+export function parseSharingControlStateV1(value) {
+    const state = object(value, "control state");
+    exact(state.schemaVersion, 1, "control state schemaVersion");
+    exact(state.kind, SHARING_CONTROL_KIND, "control state kind");
+    nonEmpty(state.profileId, "control state profileId");
+    if (!Array.isArray(state.events)) {
+        throw new SyncKitError("compatibility", "Control state events must be an array.");
+    }
+    const events = state.events.map(parseSharingControlEventV1);
+    const eventIds = new Set();
+    for (const event of events) {
+        if (event.profileId !== state.profileId) {
+            throw new SyncKitError("compatibility", "A control event belongs to another profile.");
+        }
+        if (eventIds.has(event.eventId)) {
+            throw new SyncKitError("compatibility", `Duplicate control event ${event.eventId}.`);
+        }
+        eventIds.add(event.eventId);
+    }
+    return { schemaVersion: 1, kind: SHARING_CONTROL_KIND, profileId: state.profileId, events: sortEvents(events) };
+}
+export function parseSharingControlEventV1(value) {
+    const event = object(value, "control event");
+    exact(event.schemaVersion, 1, "control event schemaVersion");
+    exact(event.kind, SHARING_CONTROL_EVENT_KIND, "control event kind");
+    for (const key of ["eventId", "profileId", "actorKeyId", "createdAt", "signature"]) {
+        nonEmpty(event[key], `control event ${key}`);
+    }
+    if (!Number.isSafeInteger(event.sequence) || event.sequence < 0) {
+        throw new SyncKitError("compatibility", "control event sequence must be a non-negative integer.");
+    }
+    validTime(event.createdAt, "control event createdAt");
+    const base = {
+        schemaVersion: 1,
+        kind: SHARING_CONTROL_EVENT_KIND,
+        eventId: event.eventId,
+        profileId: event.profileId,
+        actorKeyId: event.actorKeyId,
+        sequence: event.sequence,
+        createdAt: event.createdAt,
+        signature: event.signature,
+    };
+    switch (event.type) {
+        case "member-upsert":
+            return { ...base, type: "member-upsert", member: parseMember(event.member) };
+        case "migration-announced":
+            return { ...base, type: "migration-announced", migration: parseMigration(event.migration) };
+        case "migration-acknowledged":
+            nonEmpty(event.migrationId, "control acknowledgement migrationId");
+            return {
+                ...base,
+                type: "migration-acknowledged",
+                migrationId: event.migrationId,
+                openedFileIds: stringArray(event.openedFileIds, "control acknowledgement openedFileIds"),
+            };
+        case "migration-closed":
+            nonEmpty(event.migrationId, "control close migrationId");
+            if (event.forced !== undefined && typeof event.forced !== "boolean") {
+                throw new SyncKitError("compatibility", "control close forced must be a boolean.");
+            }
+            return {
+                ...base,
+                type: "migration-closed",
+                migrationId: event.migrationId,
+                ...(event.forced === undefined ? {} : { forced: event.forced }),
+            };
+        default:
+            throw new SyncKitError("compatibility", "Unsupported control event type.");
+    }
+}
+export function mergeSharingControlStates(local, remote) {
+    const left = parseSharingControlStateV1(local);
+    const right = parseSharingControlStateV1(remote);
+    if (left.profileId !== right.profileId) {
+        throw new SyncKitError("compatibility", "Cannot merge control states for different profiles.");
+    }
+    const events = new Map();
+    for (const event of [...left.events, ...right.events]) {
+        const existing = events.get(event.eventId);
+        if (existing && canonicalJson(existing) !== canonicalJson(event)) {
+            throw new SyncKitError("conflict", `Control event ${event.eventId} has conflicting contents.`);
+        }
+        events.set(event.eventId, event);
+    }
+    return { schemaVersion: 1, kind: SHARING_CONTROL_KIND, profileId: left.profileId, events: sortEvents([...events.values()]) };
+}
+export async function verifySharingControlStateV1(input, cryptoImplementation = globalThis.crypto, options = {}) {
+    const state = parseSharingControlStateV1(input);
+    const members = new Map();
+    const migrations = new Map();
+    const acknowledgements = new Map();
+    const closedMigrations = new Set();
+    const events = sortEvents(state.events);
+    const genesis = events[0];
+    if (genesis?.sequence !== 0 || genesis.type !== "member-upsert" || genesis.actorKeyId !== genesis.member.publicKey.keyId) {
+        throw new SyncKitError("authorization", "The first control event must be a self-signed owner member record.");
+    }
+    const ownerKeyId = genesis.actorKeyId;
+    if (options.trustedOwnerKeyId && ownerKeyId !== options.trustedOwnerKeyId) {
+        throw new SyncKitError("authorization", "The control ledger owner does not match the pinned dataset owner.");
+    }
+    for (const event of events) {
+        const actor = members.get(event.actorKeyId) ??
+            (event === genesis ? genesis.member : undefined);
+        if (!actor) {
+            throw new SyncKitError("authorization", `Control event ${event.eventId} has an unknown actor.`);
+        }
+        await verifyEvent(event, actor.publicKey, cryptoImplementation);
+        if (event.type === "member-upsert") {
+            if (event.actorKeyId !== ownerKeyId) {
+                throw new SyncKitError("authorization", "Only the control owner may publish membership records.");
+            }
+            members.set(event.member.publicKey.keyId, event.member);
+            continue;
+        }
+        if (event.type === "migration-announced") {
+            if (event.actorKeyId !== ownerKeyId) {
+                throw new SyncKitError("authorization", "Only the control owner may announce a migration.");
+            }
+            if (migrations.has(event.migration.migrationId)) {
+                throw new SyncKitError("conflict", `Migration ${event.migration.migrationId} was announced twice.`);
+            }
+            for (const requirement of event.migration.requiredAcks) {
+                if (!members.has(requirement.keyId)) {
+                    throw new SyncKitError("authorization", `Migration ${event.migration.migrationId} requires an unknown member.`);
+                }
+            }
+            migrations.set(event.migration.migrationId, event.migration);
+            continue;
+        }
+        if (event.type === "migration-acknowledged") {
+            const migration = migrations.get(event.migrationId);
+            if (!migration) {
+                throw new SyncKitError("state", `Acknowledgement references unknown migration ${event.migrationId}.`);
+            }
+            const requirement = migration.requiredAcks.find((candidate) => candidate.keyId === event.actorKeyId);
+            if (!requirement) {
+                throw new SyncKitError("authorization", "This member is not required to acknowledge the migration.");
+            }
+            if (closedMigrations.has(event.migrationId)) {
+                throw new SyncKitError("state", "A closed migration cannot receive another acknowledgement.");
+            }
+            if (missingSharingControlPickerFiles(requirement, event.openedFileIds).length > 0) {
+                throw new SyncKitError("state", "Migration acknowledgement omits one or more required Picker files.");
+            }
+            if (unexpectedPickerFiles(requirement, event.openedFileIds).length > 0) {
+                throw new SyncKitError("state", "Migration acknowledgement includes an unexpected Picker file.");
+            }
+            const acknowledgementsForMigration = acknowledgements.get(event.migrationId) ??
+                new Map();
+            acknowledgementsForMigration.set(event.actorKeyId, event);
+            acknowledgements.set(event.migrationId, acknowledgementsForMigration);
+            continue;
+        }
+        const migration = migrations.get(event.migrationId);
+        if (!migration) {
+            throw new SyncKitError("state", `Close references unknown migration ${event.migrationId}.`);
+        }
+        if (event.actorKeyId !== ownerKeyId) {
+            throw new SyncKitError("authorization", "Only the control owner may close a migration.");
+        }
+        const pending = migration.requiredAcks.filter((requirement) => !acknowledgements.get(event.migrationId)?.has(requirement.keyId));
+        if (pending.length > 0 && !event.forced) {
+            throw new SyncKitError("state", "A migration cannot close before every required acknowledgement arrives.");
+        }
+        closedMigrations.add(event.migrationId);
+    }
+    return { state, ownerKeyId, members, migrations, acknowledgements, closedMigrations };
+}
+export function missingSharingControlPickerFiles(requirement, openedFileIds) {
+    const opened = new Set(openedFileIds);
+    return requirement.targetFileIds.filter((fileId) => !opened.has(fileId));
+}
+export class SharingControlDataset {
+    options;
+    constructor(options) {
+        this.options = options;
+        nonEmpty(options.datasetId, "control datasetId");
+        nonEmpty(options.profileId, "control profileId");
+    }
+    async create(owner = {}) {
+        const identity = await this.options.identity();
+        const event = await this.sign({
+            type: "member-upsert",
+            member: { publicKey: identity.publicKey, ...owner },
+        }, identity, 0);
+        return this.options.controller.createDataset(this.options.datasetId, {
+            schemaVersion: 1,
+            kind: SHARING_CONTROL_KIND,
+            profileId: this.options.profileId,
+            events: [event],
+        });
+    }
+    async read() {
+        const trust = await this.options.controller.getDatasetTrust(this.options.datasetId);
+        const loaded = await this.options.controller.loadDataset(this.options.datasetId);
+        return verifySharingControlStateV1(loaded.value, this.crypto(), trust);
+    }
+    addMember(member) {
+        return this.publish(() => ({ type: "member-upsert", member }), identityMustBeOwner);
+    }
+    /**
+     * Mirrors cryptographically accepted control-file participants into the
+     * signed directory. Call this after accepting a join response; `metadata`
+     * supplies the application-visible email/Drive details that envelopes do
+     * not contain.
+     */
+    async synchronizeMembers(metadata = {}) {
+        const verified = await this.read();
+        const identity = await this.options.identity();
+        identityMustBeOwner(verified, identity);
+        const participants = await this.options.controller.getDatasetParticipants(this.options.datasetId);
+        let last = null;
+        for (const participant of participants.participants) {
+            const current = verified.members.get(participant.keyId);
+            const details = metadata[participant.keyId] ?? {};
+            const member = {
+                publicKey: {
+                    keyId: participant.keyId,
+                    encryptionAlgorithm: participant.encryptionAlgorithm,
+                    encryptionPublicKey: participant.encryptionPublicKey,
+                    signatureAlgorithm: participant.signatureAlgorithm,
+                    signingPublicKey: participant.signingPublicKey,
+                },
+                ...details,
+            };
+            if (!current || canonicalJson(current) !== canonicalJson(member)) {
+                last = await this.addMember(member);
+            }
+        }
+        return last;
+    }
+    announceMigration(migration) {
+        return this.publish(() => ({ type: "migration-announced", migration }), identityMustBeOwner);
+    }
+    acknowledgeMigration(input) {
+        return this.publish(() => ({
+            type: "migration-acknowledged",
+            migrationId: input.migrationId,
+            openedFileIds: [...new Set(input.openedFileIds)].sort(compareUtf16CodeUnits),
+        }), (verified, identity) => {
+            const migration = verified.migrations.get(input.migrationId);
+            const requirement = migration?.requiredAcks.find((candidate) => candidate.keyId === identity.publicKey.keyId);
+            if (!requirement) {
+                throw new SyncKitError("authorization", "This identity is not required to acknowledge this migration.");
+            }
+            const missing = missingSharingControlPickerFiles(requirement, input.openedFileIds);
+            if (missing.length > 0) {
+                throw new SyncKitError("state", `Select every required migration file before acknowledging: ${missing.join(", ")}.`);
+            }
+            const unexpected = unexpectedPickerFiles(requirement, input.openedFileIds);
+            if (unexpected.length > 0) {
+                throw new SyncKitError("state", `Do not acknowledge unexpected Picker files: ${unexpected.join(", ")}.`);
+            }
+        });
+    }
+    closeMigration(input) {
+        return this.publish(() => ({ type: "migration-closed", migrationId: input.migrationId, ...(input.force ? { forced: true } : {}) }), (verified, identity) => {
+            identityMustBeOwner(verified, identity);
+            const migration = verified.migrations.get(input.migrationId);
+            if (!migration)
+                throw new SyncKitError("not-found", `Migration ${input.migrationId} was not found.`);
+            if (!input.force) {
+                const pending = migration.requiredAcks.filter((requirement) => !verified.acknowledgements.get(input.migrationId)?.has(requirement.keyId));
+                if (pending.length > 0) {
+                    throw new SyncKitError("state", `Migration still awaits: ${pending.map((entry) => entry.keyId).join(", ")}.`);
+                }
+            }
+        });
+    }
+    async migrationStatus(migrationId) {
+        const verified = await this.read();
+        const migration = verified.migrations.get(migrationId);
+        if (!migration)
+            throw new SyncKitError("not-found", `Migration ${migrationId} was not found.`);
+        const acknowledgements = verified.acknowledgements.get(migrationId) ??
+            new Map();
+        const pendingKeyIds = migration.requiredAcks
+            .filter((requirement) => !acknowledgements.has(requirement.keyId))
+            .map((requirement) => requirement.keyId);
+        return {
+            migration,
+            acknowledgedKeyIds: [...acknowledgements.keys()].sort(compareUtf16CodeUnits),
+            pendingKeyIds,
+            closed: verified.closedMigrations.has(migrationId),
+        };
+    }
+    async publish(build, authorize) {
+        const attempts = this.options.maxPublishAttempts ?? 3;
+        let lastError;
+        for (let attempt = 0; attempt < attempts; attempt += 1) {
+            try {
+                const trust = await this.options.controller.getDatasetTrust(this.options.datasetId);
+                const loaded = await this.options.controller.loadDataset(this.options.datasetId);
+                const verified = await verifySharingControlStateV1(loaded.value, this.crypto(), trust);
+                const identity = await this.options.identity();
+                await authorize(verified, identity);
+                const sequence = Math.max(...loaded.value.events.map((event) => event.sequence), -1) + 1;
+                const event = await this.sign(build(identity), identity, sequence);
+                return await this.options.controller.syncDataset(this.options.datasetId, {
+                    ...loaded.value,
+                    events: [...loaded.value.events, event],
+                });
+            }
+            catch (error) {
+                lastError = error;
+                if (!(error instanceof SyncKitError) || error.code !== "conflict" || attempt + 1 >= attempts)
+                    throw error;
+            }
+        }
+        throw lastError;
+    }
+    async sign(event, identity, sequence) {
+        const unsigned = {
+            schemaVersion: 1,
+            kind: SHARING_CONTROL_EVENT_KIND,
+            eventId: this.randomUUID(),
+            profileId: this.options.profileId,
+            actorKeyId: identity.publicKey.keyId,
+            sequence,
+            createdAt: this.now().toISOString(),
+            ...event,
+        };
+        const signature = new Uint8Array(await this.crypto().subtle.sign({ name: "ECDSA", hash: "SHA-256" }, identity.signingPrivateKey, copyBuffer(canonicalAad(unsigned))));
+        return parseSharingControlEventV1({ ...unsigned, signature: bytesToBase64Url(signature) });
+    }
+    now() {
+        return (this.options.now ?? (() => new Date()))();
+    }
+    randomUUID() {
+        const value = this.options.randomUUID ?? globalThis.crypto?.randomUUID?.bind(globalThis.crypto);
+        if (!value)
+            throw new SyncKitError("configuration", "Secure UUID generation is unavailable.");
+        return value();
+    }
+    crypto() {
+        const value = this.options.crypto ?? globalThis.crypto;
+        if (!value?.subtle)
+            throw new SyncKitError("configuration", "WebCrypto is required for sharing control.");
+        return value;
+    }
+}
+export function createSharingControlDataset(options) {
+    return new SharingControlDataset(options);
+}
+function identityMustBeOwner(verified, identity) {
+    if (verified.ownerKeyId !== identity.publicKey.keyId) {
+        throw new SyncKitError("authorization", "Only the control owner may perform this operation.");
+    }
+}
+async function verifyEvent(event, publicKey, cryptoImplementation) {
+    const expected = await createSharingPublicKeyV1(publicKey.encryptionPublicKey, publicKey.signingPublicKey, cryptoImplementation);
+    if (expected.keyId !== publicKey.keyId) {
+        throw new SyncKitError("key", `Control member ${publicKey.keyId} has an invalid fingerprint.`);
+    }
+    const { signature, ...unsigned } = event;
+    const signingKey = await cryptoImplementation.subtle.importKey("raw", copyBuffer(base64UrlToBytes(publicKey.signingPublicKey)), { name: "ECDSA", namedCurve: "P-256" }, false, ["verify"]);
+    const valid = await cryptoImplementation.subtle.verify({ name: "ECDSA", hash: "SHA-256" }, signingKey, copyBuffer(base64UrlToBytes(signature)), copyBuffer(canonicalAad(unsigned)));
+    if (!valid)
+        throw new SyncKitError("crypto", `Control event ${event.eventId} has an invalid signature.`);
+}
+function parseMember(value) {
+    const member = object(value, "control member");
+    const publicKey = object(member.publicKey, "control member publicKey");
+    for (const key of ["keyId", "encryptionAlgorithm", "encryptionPublicKey", "signatureAlgorithm", "signingPublicKey"]) {
+        nonEmpty(publicKey[key], `control member publicKey ${key}`);
+    }
+    if (member.email !== undefined)
+        nonEmpty(member.email, "control member email");
+    if (member.googleSubject !== undefined)
+        nonEmpty(member.googleSubject, "control member googleSubject");
+    if (member.drivePermissionId !== undefined)
+        nonEmpty(member.drivePermissionId, "control member drivePermissionId");
+    return {
+        publicKey: {
+            keyId: publicKey.keyId,
+            encryptionAlgorithm: publicKey.encryptionAlgorithm,
+            encryptionPublicKey: publicKey.encryptionPublicKey,
+            signatureAlgorithm: publicKey.signatureAlgorithm,
+            signingPublicKey: publicKey.signingPublicKey,
+        },
+        ...(member.email === undefined ? {} : { email: member.email }),
+        ...(member.googleSubject === undefined ? {} : { googleSubject: member.googleSubject }),
+        ...(member.drivePermissionId === undefined ? {} : { drivePermissionId: member.drivePermissionId }),
+    };
+}
+function parseMigration(value) {
+    const migration = object(value, "control migration");
+    nonEmpty(migration.migrationId, "control migrationId");
+    exact(migration.mode, "hard-cutover", "control migration mode");
+    const sourceDatasetIds = stringArray(migration.sourceDatasetIds, "control sourceDatasetIds");
+    const targets = array(migration.targets, "control targets").map((value) => {
+        const target = object(value, "control migration target");
+        nonEmpty(target.datasetId, "control target datasetId");
+        nonEmpty(target.fileId, "control target fileId");
+        if (target.revisionId !== undefined)
+            nonEmpty(target.revisionId, "control target revisionId");
+        return {
+            datasetId: target.datasetId,
+            fileId: target.fileId,
+            ...(target.revisionId === undefined ? {} : { revisionId: target.revisionId }),
+        };
+    });
+    const requiredAcks = array(migration.requiredAcks, "control requiredAcks").map((value) => {
+        const requirement = object(value, "control acknowledgement requirement");
+        nonEmpty(requirement.keyId, "control acknowledgement keyId");
+        return { keyId: requirement.keyId, targetFileIds: stringArray(requirement.targetFileIds, "control acknowledgement targetFileIds") };
+    });
+    unique(sourceDatasetIds, "control source dataset");
+    unique(targets.map((target) => target.fileId), "control target file");
+    unique(requiredAcks.map((requirement) => requirement.keyId), "control acknowledgement member");
+    return { migrationId: migration.migrationId, sourceDatasetIds, targets, requiredAcks, mode: "hard-cutover" };
+}
+function sortEvents(events) {
+    return [...events].sort((left, right) => left.sequence === right.sequence
+        ? compareUtf16CodeUnits(left.eventId, right.eventId)
+        : left.sequence - right.sequence);
+}
+function unexpectedPickerFiles(requirement, openedFileIds) {
+    const expected = new Set(requirement.targetFileIds);
+    return openedFileIds.filter((fileId) => !expected.has(fileId));
+}
+function object(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new SyncKitError("compatibility", `${name} must be an object.`);
+    }
+    return value;
+}
+function array(value, name) {
+    if (!Array.isArray(value))
+        throw new SyncKitError("compatibility", `${name} must be an array.`);
+    return value;
+}
+function stringArray(value, name) {
+    const values = array(value, name);
+    const result = values.map((entry) => {
+        nonEmpty(entry, name);
+        return entry;
+    });
+    unique(result, name);
+    return result.sort(compareUtf16CodeUnits);
+}
+function unique(values, name) {
+    if (new Set(values).size !== values.length) {
+        throw new SyncKitError("compatibility", `${name} contains duplicates.`);
+    }
+}
+function nonEmpty(value, name) {
+    if (typeof value !== "string" || !value.trim()) {
+        throw new SyncKitError("compatibility", `${name} must be a non-empty string.`);
+    }
+}
+function exact(value, expected, name) {
+    if (value !== expected)
+        throw new SyncKitError("compatibility", `${name} is unsupported.`);
+}
+function validTime(value, name) {
+    if (Number.isNaN(Date.parse(value)))
+        throw new SyncKitError("compatibility", `${name} must be an ISO timestamp.`);
+}
+//# sourceMappingURL=control.js.map

package/dist/sharing/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/sharing/control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EACL,wBAAwB,GAEzB,MAAM,iBAAiB,CAAC;AAOzB;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAAmC,CAAC;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,gCAAyC,CAAC;AA6GpF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC;QACvD,KAAK,EAAE,0BAA0B;QACjC,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,aAAa;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC7C,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,6BAA6B,CAAC,CAAC;IAC7D,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,2BAA2B,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AAClH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC7C,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,6BAA6B,CAAC,CAAC;IAC7D,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,EAAE,oBAAoB,CAAC,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAU,EAAE,CAAC;QAC5F,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAK,KAAK,CAAC,QAAmB,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,wDAAwD,CAAC,CAAC;IACpG,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,SAAmB,EAAE,yBAAyB,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,CAAU;QACzB,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,KAAK,CAAC,OAAiB;QAChC,SAAS,EAAE,KAAK,CAAC,SAAmB;QACpC,UAAU,EAAE,KAAK,CAAC,UAAoB;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAkB;QAClC,SAAS,EAAE,KAAK,CAAC,SAAmB;QACpC,SAAS,EAAE,KAAK,CAAC,SAAmB;KACrC,CAAC;IACF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,eAAe;YAClB,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,KAAK,qBAAqB;YACxB,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9F,KAAK,wBAAwB;YAC3B,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAC;YACnE,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,uCAAuC,CAAC;aACzF,CAAC;QACJ,KAAK,kBAAkB;YACrB,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;YACrF,CAAC;YACD,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aAChE,CAAC;QACJ;YACE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAA4B,EAC5B,MAA6B;IAE7B,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,qDAAqD,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,iBAAiB,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;AAC/H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAA4B,EAC5B,uBAA+B,UAAU,CAAC,MAAM,EAChD,UAA0C,EAAE;IAE5C,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqC,CAAC;IAChE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmE,CAAC;IACpG,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzH,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,oEAAoE,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,IAAI,OAAO,CAAC,iBAAiB,IAAI,UAAU,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC1E,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,mEAAmE,CAAC,CAAC;IAC/G,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACzC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,iBAAiB,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,wDAAwD,CAAC,CAAC;YACpG,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,aAAa,KAAK,CAAC,SAAS,CAAC,WAAW,uBAAuB,CAAC,CAAC;YACtG,CAAC;YACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;gBACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,aAAa,KAAK,CAAC,SAAS,CAAC,WAAW,8BAA8B,CAAC,CAAC;gBAClH,CAAC;YACH,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,gDAAgD,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;YACrG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,2DAA2D,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,4DAA4D,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,gCAAgC,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClF,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,oEAAoE,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,+DAA+D,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,4BAA4B,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC1E,IAAI,GAAG,EAAsD,CAAC;YAChE,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1D,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,sCAAsC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,+CAA+C,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,CAC3C,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAClF,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,yEAAyE,CAAC,CAAC;QAC7G,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,WAAiD,EACjD,aAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACtC,OAAO,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAqC;QAArC,YAAO,GAAP,OAAO,CAA8B;QAChE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACjD,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAmD,EAAE;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;YAC5B,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,KAAK,EAAE;SACpD,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YACnE,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,MAAM,EAAE,CAAC,KAAK,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjF,OAAO,2BAA2B,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,SAAS,CAAC,MAA8B;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACtF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CACtB,WAAsE,EAAE;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/C,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClG,IAAI,IAAI,GAAsD,IAAI,CAAC;QACnE,KAAK,MAAM,WAAW,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,MAAM,GAA2B;gBACrC,SAAS,EAAE;oBACT,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;oBACpD,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;oBACpD,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;oBAClD,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;iBAC/C;gBACD,GAAG,OAAO;aACX,CAAC;YACF,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iBAAiB,CAAC,SAAoC;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC/F,CAAC;IAED,oBAAoB,CAAC,KAGpB;QACC,OAAO,IAAI,CAAC,OAAO,CACjB,GAAG,EAAE,CAAC,CAAC;YACL,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;SAC7E,CAAC,EACF,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9G,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,8DAA8D,CAAC,CAAC;YAC1G,CAAC;YACD,MAAM,OAAO,GAAG,gCAAgC,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,8DAA8D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvH,CAAC;YACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,+CAA+C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,KAGd;QACC,OAAO,IAAI,CAAC,OAAO,CACjB,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAC9G,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACrB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,aAAa,KAAK,CAAC,WAAW,iBAAiB,CAAC,CAAC;YACrG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,CAC3C,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAC3F,CAAC;gBACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,2BAA2B,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChH,CAAC;YACH,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,aAAa,WAAW,iBAAiB,CAAC,CAAC;QAC/F,MAAM,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC;YACjE,IAAI,GAAG,EAAsD,CAAC;QAChE,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY;aACzC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;aACjE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO;YACL,SAAS;YACT,kBAAkB,EAAE,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;YAC5E,aAAa;YACb,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC;SACnD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,KAA4E,EAC5E,SAAgH;QAEhH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;QACtD,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACjF,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;gBACvF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC/C,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACnE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBACvE,GAAG,MAAM,CAAC,KAAK;oBACf,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,IAAI,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAC5G,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,KAAoC,EACpC,QAAkC,EAClC,QAAgB;QAEhB,MAAM,QAAQ,GAAG;YACf,aAAa,EAAE,CAAU;YACzB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC1B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK;YACpC,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,KAAK;SACT,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAC7B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,QAAQ,CAAC,iBAAiB,EAC1B,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CACnC,CACF,CAAC;QACF,OAAO,0BAA0B,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAEO,GAAG;QACT,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC;IAEO,UAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAChG,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;QAC9F,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IAEO,MAAM;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;QACvD,IAAI,CAAC,KAAK,EAAE,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC;QAC1G,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAqC;IAC/E,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAuC,EACvC,QAAkC;IAElC,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACrD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAA4B,EAC5B,SAA6B,EAC7B,oBAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,SAAS,CAAC,mBAAmB,EAC7B,SAAS,CAAC,gBAAgB,EAC1B,oBAAoB,CACrB,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,kBAAkB,SAAS,CAAC,KAAK,8BAA8B,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAC5D,KAAK,EACL,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,EACxD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,MAAM,CACpD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,UAAU,EACV,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,EACvC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CACnC,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,iBAAiB,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACvE,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,CAAU,EAAE,CAAC;QAC7H,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,4BAA4B,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;IACvG,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;IACnH,OAAO;QACL,SAAS,EAAE;YACT,KAAK,EAAE,SAAS,CAAC,KAAe;YAChC,mBAAmB,EAAE,SAAS,CAAC,mBAAgE;YAC/F,mBAAmB,EAAE,SAAS,CAAC,mBAA6B;YAC5D,kBAAkB,EAAE,SAAS,CAAC,kBAA8D;YAC5F,gBAAgB,EAAE,SAAS,CAAC,gBAA0B;SACvD;QACD,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QACtF,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;KACnG,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACvD,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,WAAW,CAAC,SAAS,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QACzD,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACvD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;QAC9F,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;SAC9E,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvF,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;QACzE,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC,WAAW,CAAC,aAAa,EAAE,uCAAuC,CAAC,EAAE,CAAC;IACtI,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IACnD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAC/F,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAC/G,CAAC;AAED,SAAS,UAAU,CAAC,MAA+B;IACjD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAC9B,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAAiD,EACjD,aAAgC;IAEhC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACpD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB,EAAE,IAAY;IAC5C,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,QAAiB,EAAE,IAAY;IAC5D,IAAI,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,IAAI,kBAAkB,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAY;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;AACpH,CAAC"}

package/dist/sharing/controller.d.ts

@@ -1,4 +1,5 @@
-import { type SharedBackupCodec, type SharingAccountBindingV1, type SharingDatasetGrantV1, type SharingInvitationV1, type SharingRole } from "./index.js";
+import { type SharedBackupCodec, type SharingAccountBindingV1, type SharingDatasetGrantV1, type SharingInvitationV1, type SharingPublicKeyResponseV1, type SharingRole, type SharedBackupParticipantV1 } from "./index.js";
+import type { SharingDatasetFileV1 } from "./link-exchange.js";
 import type { SharedBackupStorage, SharedBackupTransport, SharedDatasetFile, SharedExchangeFile } from "./transport.js";
 import { type WebCryptoSharingIdentity } from "./web-crypto.js";
 export { IndexedDbSharedBackupRegistry } from "./registry-indexeddb.js";
@@ -30,7 +31,7 @@ export type SharedDatasetResult<T> = {
     fileId: string;
     revisionId: string;
     value: T;
-    outcome: "created" | "loaded" | "updated" | "unchanged";
+    outcome: "created" | "adopted" | "loaded" | "updated" | "unchanged";
 };
 export type SharingInvitationResult = {
     invitation: SharingInvitationV1;
@@ -74,6 +75,13 @@ export type DrivePermissionReconciliationResult = {
 export type SharedBackupControllerOptions<T> = {
     appId: string;
     codec: SharedBackupControllerCodec<T>;
+    /**
+     * Optional codec override for a protocol-owned companion dataset such as a
+     * sharing control ledger. It lets one signed invitation accept several
+     * application datasets plus that ledger without treating the ledger as app
+     * payload. Ordinary create/load/sync calls continue to use `codec`.
+     */
+    codecForDataset?(datasetId: string): SharedBackupControllerCodec<unknown> | undefined;
     identity(): Promise<WebCryptoSharingIdentity>;
     transport: SharedBackupTransport;
     registry: SharedBackupRegistry;
@@ -112,7 +120,33 @@ export declare class SharedBackupController<T> {
     constructor(options: SharedBackupControllerOptions<T>);
     ensureStorage(): Promise<SharedBackupStorage>;
     listDatasets(): Promise<SharedDatasetFile[]>;
+    /** Returns the locally pinned genesis owner for a previously trusted dataset. */
+    getDatasetTrust(datasetId: string): Promise<{
+        trustedOwnerKeyId: string;
+    }>;
+    /**
+     * Reads the verified cryptographic membership for a dataset. This is useful
+     * for a companion control ledger that mirrors key provenance and user-facing
+     * contact metadata without making application payloads authoritative.
+     */
+    getDatasetParticipants(datasetId: string): Promise<{
+        trustedOwnerKeyId: string;
+        participants: SharedBackupParticipantV1[];
+    }>;
     createDataset(datasetId: string, value: T): Promise<SharedDatasetResult<T>>;
+    /**
+     * Reconnect to an existing dataset this identity can already decrypt —
+     * e.g. after a reinstall, or when an interrupted setup left the remote
+     * file without a local registry record. The owner key is pinned from the
+     * envelope itself (trust-on-first-use), so callers recovering their own
+     * dataset should pass `requireOwned` to insist this identity is the
+     * dataset's owner.
+     */
+    adoptDataset(datasetId: string, options?: {
+        requireOwned?: boolean;
+    }): Promise<SharedDatasetResult<T>>;
+    /** Delete a dataset file from the transport and forget its local record. */
+    deleteDataset(datasetId: string): Promise<void>;
     loadDataset(datasetId: string): Promise<SharedDatasetResult<T>>;
     syncDataset(datasetId: string, localValue: T): Promise<SharedDatasetResult<T>>;
     inviteParticipant(input: {
@@ -140,6 +174,46 @@ export declare class SharedBackupController<T> {
         responseFileId: string;
         recipientEmailAddress: string;
     }): Promise<AcceptedDatasetResult[]>;
+    /**
+     * Applies verified acceptance grants to each dataset: add the participant,
+     * re-encrypt, write, and per-email-share the dataset file. Shared by the
+     * Drive-file accept path and the link-payload accept path.
+     */
+    private applyAcceptedGrants;
+    /**
+     * Owner side of the link-carried exchange. Shares each granted dataset file
+     * with the recipient's email (so it lands in their Picker) and returns the
+     * signed invitation plus the file list to embed in the join link. Unlike
+     * {@link inviteParticipant} it writes no Drive `exchanges/` invitation file.
+     */
+    inviteParticipantForLink(input: {
+        emailAddress: string;
+        requestedGrants: SharingDatasetGrantV1[];
+        expiresAt?: string;
+    }): Promise<{
+        invitation: SharingInvitationV1;
+        files: SharingDatasetFileV1[];
+    }>;
+    /**
+     * Recipient side of the link-carried exchange. Verifies the invitation carried
+     * in the join link, registers the granted datasets with their file ids (so
+     * later reads/writes resolve without listing the owner's folder), and returns
+     * a signed key response to send back to the owner. Reads/writes no Drive
+     * `exchanges/` file.
+     */
+    submitKeyResponseFromInvitation(invitation: SharingInvitationV1, datasetFiles: SharingDatasetFileV1[]): Promise<SharingPublicKeyResponseV1>;
+    /**
+     * Owner side. Accepts a key response carried in a response link (no Drive
+     * `exchanges/` read), adds the recipient to each granted dataset, and
+     * per-email shares the dataset files (re-affirming the invite-time share).
+     * The invitation must be supplied by the caller (persisted at invite time,
+     * keyed by exchange id).
+     */
+    acceptKeyResponseFromPayload(input: {
+        invitation: SharingInvitationV1;
+        response: SharingPublicKeyResponseV1;
+        recipientEmailAddress: string;
+    }): Promise<AcceptedDatasetResult[]>;
     setDatasetRole(input: {
         datasetId: string;
         keyId: string;
@@ -149,19 +223,21 @@ export declare class SharedBackupController<T> {
     revokeDatasetKey(input: {
         datasetId: string;
         keyId: string;
+        emailAddress?: string;
     }): Promise<SharedDatasetResult<T>>;
+    private findDirectDatasetPermission;
     rotateLocalKey(replacementIdentity: WebCryptoSharingIdentity, datasetIds: string[]): Promise<RotatedDatasetResult[]>;
     reconcileDrivePermissions(input: {
         datasetId: string;
         participantEmails: Record<string, string>;
     }): Promise<DrivePermissionReconciliationResult>;
-    private changeParticipants;
     private readDatasetById;
     private requiredRegistry;
     private verifyHead;
     private initialOwnerRecord;
     private persistHead;
     private crypto;
+    private codecForDataset;
     private cryptoOptions;
     private serialized;
 }