@milaboratories/pl-middle-layer 1.64.42 → 1.65.1

package/dist/index.cjs

@@ -69,6 +69,7 @@ exports.acceptanceFieldLogin = require_sharing_model.acceptanceFieldLogin;
 exports.asShareId = require_sharing_model.asShareId;
 exports.cacheBlockPackTemplate = require_template_cache.cacheBlockPackTemplate;
 exports.canGrantToEveryone = require_sharing_model.canGrantToEveryone;
+exports.canImpersonate = require_sharing_model.canImpersonate;
 exports.checkNetwork = require_network_check.checkNetwork;
 exports.createRenderTemplate = require_render_template.createRenderTemplate;
 exports.decisionField = require_sharing_model.decisionField;

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { V2RegistryProvider } from "./block_registry/registry-v2-provider.js";
 import { BlockPackRegistry, getDevV1PacketMtime, getDevV2PacketMtime, getFromPackV2Mtime } from "./block_registry/registry.js";
 import { CentralBlockRegistry, V1CentralDevSnapshotRegistry, V1CentralRegistry } from "./block_registry/well_known_registries.js";
 import { BlockArgsAuthorKeyPrefix, ProjectCreatedTimestamp, ProjectField, ProjectId, ProjectLastModifiedTimestamp, ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey } from "./model/project_model.js";
-import { AcceptanceFieldPrefix, EnvelopeAcceptance, EnvelopeData, EnvelopeMode, EnvelopeProject, ProjectChangeAction, ProjectFieldUuid, ShareId, ShareProjectsOptions, SharedEnvelopeResourceType, SharingDecision, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId } from "./model/sharing_model.js";
+import { AcceptanceFieldPrefix, EnvelopeAcceptance, EnvelopeData, EnvelopeMode, EnvelopeProject, ProjectChangeAction, ProjectFieldUuid, ShareId, ShareProjectsOptions, SharedEnvelopeResourceType, SharingDecision, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, canImpersonate, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId } from "./model/sharing_model.js";
 import { OutgoingShare, PendingShare } from "./middle_layer/sharing_list.js";
 import { CachedTemplate, ExplicitTemplate, PreparedTemplate, TemplateFromFile, TemplateFromRegistry, TemplateSpecAny, TemplateSpecPrepared } from "./model/template_spec.js";
 import { BlockPackExplicit, BlockPackSpecAny, BlockPackSpecPrepared, FrontendFromFolder, FrontendFromFolderData, FrontendFromFolderResourceType, FrontendFromLocalTgz, FrontendFromLocalTgzData, FrontendFromLocalTgzResourceType, FrontendFromUrl, FrontendFromUrlData, FrontendFromUrlResourceType, FrontendSpec } from "./model/block_pack_spec.js";
@@ -24,4 +24,4 @@ export * from "@platforma-sdk/model";
 export * from "@milaboratories/pl-model-middle-layer";
 export * from "@milaboratories/pl-deployments";
 export * from "@milaboratories/pl-client";
-export { ACCESS_COUNT_KEY, ACCESS_KEY_PREFIX, AcceptanceFieldPrefix, BlockArgsAuthorKeyPrefix, BlockPackExplicit, BlockPackRegistry, BlockPackSpecAny, BlockPackSpecPrepared, CachedTemplate, CentralBlockRegistry, CheckNetworkOpts, DefaultDriverKitOpsPaths, DefaultDriverKitOpsSettings, DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings, DriverKitOps, DriverKitOpsConstructor, DriverKitOpsPaths, DriverKitOpsSettings, EnvelopeAcceptance, EnvelopeData, EnvelopeMode, EnvelopeProject, ExplicitTemplate, type FieldType, FrontendFromFolder, FrontendFromFolderData, FrontendFromFolderResourceType, FrontendFromLocalTgz, FrontendFromLocalTgzData, FrontendFromLocalTgzResourceType, FrontendFromUrl, FrontendFromUrlData, FrontendFromUrlResourceType, FrontendSpec, GC_ACCESS_THRESHOLD, GC_MAX_ENTRIES, type InternalLsDriver, MiddleLayer, MiddleLayerDebugOptions, MiddleLayerDriverKit, MiddleLayerOps, MiddleLayerOpsConstructor, MiddleLayerOpsPaths, MiddleLayerOpsSettings, type OutgoingShare, type PendingShare, PreparedTemplate, Project, ProjectChangeAction, ProjectCreatedTimestamp, type ProjectField, ProjectFieldUuid, type ProjectId, ProjectLastModifiedTimestamp, type ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, ProjectsField, type ResourceType, SchemaVersionCurrent, SchemaVersionKey, ShareId, ShareProjectsOptions, SharedEnvelopeResourceType, SharingDecision, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, TemplateCacheFieldName, TemplateCacheStat, TemplateCacheType, TemplateFromFile, TemplateFromRegistry, TemplateSpecAny, TemplateSpecPrepared, TengoTemplateGet, TengoTemplateGetRegistry, TengoTemplateGetTemplate, TengoTemplateGetTemplateURI, TengoTemplatePack, TengoTemplatePackConvert, TengoTemplatePackConvertTemplate, TengoTemplatePackConvertTemplatePack, V1CentralDevSnapshotRegistry, V1CentralRegistry, V2RegistryProvider, acceptanceField, acceptanceFieldLogin, asShareId, cacheBlockPackTemplate, canGrantToEveryone, checkNetwork, createRenderTemplate, decisionField, decodeEnvelopeData, deriveGlobalPObjectId, deriveLocalPObjectId, dropTemplateCache, duplicateProject, flattenTemplateTree, getDevV1PacketMtime, getDevV2PacketMtime, getFromPackV2Mtime, getOrCreateTemplateCache, initDriverKit, initNetworkCheck, invalidateTemplateCacheId, isAcceptanceField, loadTemplate, loadTemplateCached, newShareId, parseFinalPObjectCollection, prepareTemplateSpec, runGc };
+export { ACCESS_COUNT_KEY, ACCESS_KEY_PREFIX, AcceptanceFieldPrefix, BlockArgsAuthorKeyPrefix, BlockPackExplicit, BlockPackRegistry, BlockPackSpecAny, BlockPackSpecPrepared, CachedTemplate, CentralBlockRegistry, CheckNetworkOpts, DefaultDriverKitOpsPaths, DefaultDriverKitOpsSettings, DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings, DriverKitOps, DriverKitOpsConstructor, DriverKitOpsPaths, DriverKitOpsSettings, EnvelopeAcceptance, EnvelopeData, EnvelopeMode, EnvelopeProject, ExplicitTemplate, type FieldType, FrontendFromFolder, FrontendFromFolderData, FrontendFromFolderResourceType, FrontendFromLocalTgz, FrontendFromLocalTgzData, FrontendFromLocalTgzResourceType, FrontendFromUrl, FrontendFromUrlData, FrontendFromUrlResourceType, FrontendSpec, GC_ACCESS_THRESHOLD, GC_MAX_ENTRIES, type InternalLsDriver, MiddleLayer, MiddleLayerDebugOptions, MiddleLayerDriverKit, MiddleLayerOps, MiddleLayerOpsConstructor, MiddleLayerOpsPaths, MiddleLayerOpsSettings, type OutgoingShare, type PendingShare, PreparedTemplate, Project, ProjectChangeAction, ProjectCreatedTimestamp, type ProjectField, ProjectFieldUuid, type ProjectId, ProjectLastModifiedTimestamp, type ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, ProjectsField, type ResourceType, SchemaVersionCurrent, SchemaVersionKey, ShareId, ShareProjectsOptions, SharedEnvelopeResourceType, SharingDecision, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, TemplateCacheFieldName, TemplateCacheStat, TemplateCacheType, TemplateFromFile, TemplateFromRegistry, TemplateSpecAny, TemplateSpecPrepared, TengoTemplateGet, TengoTemplateGetRegistry, TengoTemplateGetTemplate, TengoTemplateGetTemplateURI, TengoTemplatePack, TengoTemplatePackConvert, TengoTemplatePackConvertTemplate, TengoTemplatePackConvertTemplatePack, V1CentralDevSnapshotRegistry, V1CentralRegistry, V2RegistryProvider, acceptanceField, acceptanceFieldLogin, asShareId, cacheBlockPackTemplate, canGrantToEveryone, canImpersonate, checkNetwork, createRenderTemplate, decisionField, decodeEnvelopeData, deriveGlobalPObjectId, deriveLocalPObjectId, dropTemplateCache, duplicateProject, flattenTemplateTree, getDevV1PacketMtime, getDevV2PacketMtime, getFromPackV2Mtime, getOrCreateTemplateCache, initDriverKit, initNetworkCheck, invalidateTemplateCacheId, isAcceptanceField, loadTemplate, loadTemplateCached, newShareId, parseFinalPObjectCollection, prepareTemplateSpec, runGc };

package/dist/index.js

@@ -7,7 +7,7 @@ import { ProjectsField } from "./middle_layer/project_list.js";
 import { createRenderTemplate } from "./mutator/template/render_template.js";
 import { TengoTemplateGet, TengoTemplateGetRegistry, TengoTemplateGetTemplate, TengoTemplateGetTemplateURI, TengoTemplatePack, TengoTemplatePackConvert, TengoTemplatePackConvertTemplate, TengoTemplatePackConvertTemplatePack, loadTemplate, prepareTemplateSpec } from "./mutator/template/template_loading.js";
 import { FrontendFromFolderResourceType, FrontendFromLocalTgzResourceType, FrontendFromUrlResourceType } from "./model/block_pack_spec.js";
-import { AcceptanceFieldPrefix, SharedEnvelopeResourceType, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId } from "./model/sharing_model.js";
+import { AcceptanceFieldPrefix, SharedEnvelopeResourceType, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, canImpersonate, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId } from "./model/sharing_model.js";
 import "./model/index.js";
 import { duplicateProject } from "./mutator/project.js";
 import { deriveGlobalPObjectId, deriveLocalPObjectId } from "./pool/data.js";
@@ -23,4 +23,4 @@ export * from "@platforma-sdk/model";
 export * from "@milaboratories/pl-model-middle-layer";
 export * from "@milaboratories/pl-deployments";
 export * from "@milaboratories/pl-client";
-export { ACCESS_COUNT_KEY, ACCESS_KEY_PREFIX, AcceptanceFieldPrefix, BlockArgsAuthorKeyPrefix, BlockPackRegistry, CentralBlockRegistry, DefaultDriverKitOpsPaths, DefaultDriverKitOpsSettings, DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings, FrontendFromFolderResourceType, FrontendFromLocalTgzResourceType, FrontendFromUrlResourceType, GC_ACCESS_THRESHOLD, GC_MAX_ENTRIES, MiddleLayer, Project, ProjectCreatedTimestamp, ProjectLastModifiedTimestamp, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, ProjectsField, SchemaVersionCurrent, SchemaVersionKey, SharedEnvelopeResourceType, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, TemplateCacheFieldName, TemplateCacheType, TengoTemplateGet, TengoTemplateGetRegistry, TengoTemplateGetTemplate, TengoTemplateGetTemplateURI, TengoTemplatePack, TengoTemplatePackConvert, TengoTemplatePackConvertTemplate, TengoTemplatePackConvertTemplatePack, V1CentralDevSnapshotRegistry, V1CentralRegistry, V2RegistryProvider, acceptanceField, acceptanceFieldLogin, asShareId, cacheBlockPackTemplate, canGrantToEveryone, checkNetwork, createRenderTemplate, decisionField, decodeEnvelopeData, deriveGlobalPObjectId, deriveLocalPObjectId, dropTemplateCache, duplicateProject, flattenTemplateTree, getDevV1PacketMtime, getDevV2PacketMtime, getFromPackV2Mtime, getOrCreateTemplateCache, initDriverKit, initNetworkCheck, invalidateTemplateCacheId, isAcceptanceField, loadTemplate, loadTemplateCached, newShareId, parseFinalPObjectCollection, prepareTemplateSpec, runGc };
+export { ACCESS_COUNT_KEY, ACCESS_KEY_PREFIX, AcceptanceFieldPrefix, BlockArgsAuthorKeyPrefix, BlockPackRegistry, CentralBlockRegistry, DefaultDriverKitOpsPaths, DefaultDriverKitOpsSettings, DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings, FrontendFromFolderResourceType, FrontendFromLocalTgzResourceType, FrontendFromUrlResourceType, GC_ACCESS_THRESHOLD, GC_MAX_ENTRIES, MiddleLayer, Project, ProjectCreatedTimestamp, ProjectLastModifiedTimestamp, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, ProjectsField, SchemaVersionCurrent, SchemaVersionKey, SharedEnvelopeResourceType, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, TemplateCacheFieldName, TemplateCacheType, TengoTemplateGet, TengoTemplateGetRegistry, TengoTemplateGetTemplate, TengoTemplateGetTemplateURI, TengoTemplatePack, TengoTemplatePackConvert, TengoTemplatePackConvertTemplate, TengoTemplatePackConvertTemplatePack, V1CentralDevSnapshotRegistry, V1CentralRegistry, V2RegistryProvider, acceptanceField, acceptanceFieldLogin, asShareId, cacheBlockPackTemplate, canGrantToEveryone, canImpersonate, checkNetwork, createRenderTemplate, decisionField, decodeEnvelopeData, deriveGlobalPObjectId, deriveLocalPObjectId, dropTemplateCache, duplicateProject, flattenTemplateTree, getDevV1PacketMtime, getDevV2PacketMtime, getFromPackV2Mtime, getOrCreateTemplateCache, initDriverKit, initNetworkCheck, invalidateTemplateCacheId, isAcceptanceField, loadTemplate, loadTemplateCached, newShareId, parseFinalPObjectCollection, prepareTemplateSpec, runGc };

package/dist/middle_layer/middle_layer.cjs

@@ -104,7 +104,11 @@ var MiddleLayer = class MiddleLayer {
 	* additional required capabilities later without a UI change.
 	*/
 	get sharingSupported() {
-		return this.serverCapabilities.includes("crossTreeRefs:v1");
+		return this.serverCapabilities.includes("crossTreeRefs:v1") && !this.impersonating;
+	}
+	/** True when this session is impersonating another user (an admin opened another user's root). */
+	get impersonating() {
+		return this.pl.conf.asUser !== void 0;
 	}
 	/**
 	* Role of the authenticated user, from the `GetSessionInfo` RPC surfaced through the
@@ -120,7 +124,17 @@ var MiddleLayer = class MiddleLayer {
 	* permission-ceiling gate.
 	*/
 	get canShareWithEveryone() {
-		return this.serverCapabilities.includes("publicGrants:v1") && require_sharing_model.canGrantToEveryone(this.currentUserRole);
+		return !this.impersonating && this.serverCapabilities.includes("publicGrants:v1") && require_sharing_model.canGrantToEveryone(this.currentUserRole);
+	}
+	/**
+	* Whether the authenticated user may impersonate others (open another user's root). Mirrors
+	* the backend's `CanImpersonate` role gate — admin/controller only, never a regular user.
+	* Derived from the session role, which stays the authenticated admin's even while
+	* impersonating, so this stays true across a switch: the "return to my root" affordance must
+	* not vanish mid-impersonation. Not a security boundary; the backend re-checks on every call.
+	*/
+	get currentUserCanImpersonate() {
+		return require_sharing_model.canImpersonate(this.currentUserRole);
 	}
 	/** Adds a runtime capability to the middle layer. */
 	addRuntimeCapability(requirement, value = true) {
@@ -222,6 +236,31 @@ var MiddleLayer = class MiddleLayer {
 		return newProjectId;
 	}
 	/**
+	* Duplicates a project into another user's root, minted in the TARGET user's color so the target
+	* owns it. Sibling of {@link duplicateProject}, but writes into a different root. The source
+	* project (on the current client root) is referenced cross-color for its block data, kept alive
+	* by refcounting, exactly like accepting a shared project. Works both ways: pull (while
+	* impersonating a user, copy their project to yourself) and push (from your own root, copy a
+	* project to a user). Admin cross-root op; requires the crossTreeRefs:v1 backend capability.
+	*/
+	async duplicateProjectToUser(srcProjectId, targetLogin, rename) {
+		if (!this.serverCapabilities.includes("crossTreeRefs:v1")) throw new Error("duplicateProjectToUser requires the crossTreeRefs:v1 backend capability.");
+		const sourceRid = await this.resolveProjectId(srcProjectId);
+		const targetRoot = await this.pl.getUserRoot({
+			login: targetLogin,
+			createIfNotExists: true
+		});
+		await this.pl.withWriteTxOnRoot(targetRoot, "MLDuplicateProjectToUser", async (tx) => {
+			const targetProjectListRid = await require_project_list.ensureProjectListRid(tx);
+			const sourceMeta = await tx.getKValueJson(sourceRid, require_project_model.ProjectMetaKey);
+			const targetListData = await tx.getResourceData(targetProjectListRid, true);
+			const existingLabels = (await Promise.all(targetListData.fields.map((f) => f.value).filter(_milaboratories_pl_client.isNotNullSignedResourceId).map((rid) => tx.getKValueJson(rid, require_project_model.ProjectMetaKey)))).map((m) => m.label);
+			const newPrj = await require_project.duplicateProject(tx, sourceRid, { label: rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label });
+			tx.createField((0, _milaboratories_pl_client.field)(targetProjectListRid, (0, node_crypto.randomUUID)()), "Dynamic", newPrj);
+			await tx.commit();
+		});
+	}
+	/**
 	* Shares the given projects (Copy & Share). Snapshots the projects, creates one envelope, and
 	* grants it — all in one atomic write transaction, so a failed grant rolls the whole thing back
 	* and the outbox is left as it was.

package/dist/middle_layer/middle_layer.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"middle_layer.cjs","names":["canGrantToEveryone","LRUCache","createProject","withProjectAuthored","ProjectMetaKey","isNotNullSignedResourceId","duplicateProject","buildShareEnvelope","GrantType","isEnvelopeProjectField","envelopeProjectFieldUuid","isAcceptanceField","acceptanceFieldLogin","decodeEnvelopeData","copyEnvelopeProjectsIntoList","resourceIdsToStrings","Project","HmacSha256Signer","DefaultMiddleLayerOpsSettings","DefaultMiddleLayerOpsPaths","getDebugFlags","ProjectsField","ProjectsResourceType","SharingOutboxField","SharingOutboxResourceType","SharingStateField","SharingStateResourceType","initDriverKit","RetryAgent","V2RegistryProvider","BlockPackPreparer","RuntimeCapabilities","REQUIRES_PFRAMES_VERSION","createModelServiceRegistry","BlockEventDispatcher","BlockUpdateWatcher","ProjectHelper","WatchableValue","createProjectList","createOutgoingShares","createSharingStateTree","createPendingSharesTree","createPendingSharesComputable","createLiveEnvelopesComputable"],"sources":["../../src/middle_layer/middle_layer.ts"],"sourcesContent":["import type {\n  PlClient,\n  PlTransaction,\n  SignedResourceId,\n  ResourceRef,\n  Role,\n} from \"@milaboratories/pl-client\";\nimport {\n  isEveryoneUserLogin,\n  field,\n  GrantType,\n  isNotNullSignedResourceId,\n  isNullSignedResourceId,\n  resourceIdToString,\n} from \"@milaboratories/pl-client\";\nimport { LRUCache } from \"lru-cache\";\nimport { createProjectList, ProjectsField, ProjectsResourceType } from \"./project_list\";\nimport { createProject, duplicateProject, withProjectAuthored } from \"../mutator/project\";\nimport { ProjectMetaKey } from \"../model/project_model\";\nimport type { ProjectId } from \"../model/project_model\";\nimport type { SynchronizedTreeState } from \"@milaboratories/pl-tree\";\nimport {\n  acceptanceFieldLogin,\n  canGrantToEveryone,\n  decodeEnvelopeData,\n  isAcceptanceField,\n  SharingOutboxField,\n  SharingOutboxResourceType,\n  SharingStateField,\n  SharingStateResourceType,\n  type EnvelopeAcceptance,\n  type EnvelopeData,\n  type ProjectChangeAction,\n  type ProjectFieldUuid,\n  type ShareId,\n  type ShareProjectsOptions,\n} from \"../model/sharing_model\";\nimport {\n  buildShareEnvelope,\n  copyEnvelopeProjectsIntoList,\n  envelopeProjectFieldUuid,\n  isEnvelopeProjectField,\n  resourceIdsToStrings,\n  writeEnvelopeAcceptance,\n  writeSharingDecision,\n  type EnvelopeProjectSource,\n} from \"../mutator/sharing\";\nimport type { LiveEnvelope, OutgoingShare, PendingShare } from \"./sharing_list\";\nimport {\n  createLiveEnvelopesComputable,\n  createOutgoingShares,\n  createPendingSharesComputable,\n  createPendingSharesTree,\n  createSharingStateTree,\n} from \"./sharing_list\";\nimport { BlockPackPreparer } from \"../mutator/block-pack/block_pack\";\nimport type { MiLogger, Signer } from \"@milaboratories/ts-helpers\";\nimport { BlockEventDispatcher, cachedDeserialize } from \"@milaboratories/ts-helpers\";\nimport { HmacSha256Signer } from \"@milaboratories/ts-helpers\";\nimport type { Computable, ComputableStableDefined } from \"@milaboratories/computable\";\nimport { WatchableValue } from \"@milaboratories/computable\";\nimport { Project } from \"./project\";\nimport type { MiddleLayerOps, MiddleLayerOpsConstructor } from \"./ops\";\nimport { DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings } from \"./ops\";\nimport { randomUUID } from \"node:crypto\";\nimport type { ProjectListEntry } from \"../model\";\nimport type {\n  AuthorMarker,\n  ProjectMeta,\n  BlockPlatform,\n} from \"@milaboratories/pl-model-middle-layer\";\nimport { BlockUpdateWatcher } from \"../block_registry/watcher\";\nimport type { QuickJSWASMModule } from \"quickjs-emscripten\";\nimport { getQuickJS } from \"quickjs-emscripten\";\nimport type { MiddleLayerDriverKit } from \"./driver_kit\";\nimport { initDriverKit } from \"./driver_kit\";\nimport type { BlockCodeFeatureFlags, DriverKit, SupportedRequirement } from \"@platforma-sdk/model\";\nimport { RuntimeCapabilities } from \"@platforma-sdk/model\";\nimport {\n  type ModelServiceRegistry,\n  registerServiceCapabilities,\n  REQUIRES_PFRAMES_VERSION,\n} from \"@milaboratories/pl-model-common\";\nimport { createModelServiceRegistry } from \"../service_factories\";\nimport type { DownloadUrlDriver } from \"@milaboratories/pl-drivers\";\nimport { V2RegistryProvider } from \"../block_registry\";\nimport type { Dispatcher } from \"undici\";\nimport { RetryAgent } from \"undici\";\nimport { getDebugFlags } from \"../debug\";\nimport { ProjectHelper } from \"../model/project_helper\";\n\nexport interface MiddleLayerEnvironment {\n  dispose(): Promise<void>;\n  readonly pl: PlClient;\n  readonly runtimeCapabilities: RuntimeCapabilities;\n  readonly logger: MiLogger;\n  readonly blockEventDispatcher: BlockEventDispatcher;\n  readonly httpDispatcher: Dispatcher;\n  readonly retryHttpDispatcher: Dispatcher;\n  readonly signer: Signer;\n  readonly ops: MiddleLayerOps;\n  readonly bpPreparer: BlockPackPreparer;\n  readonly frontendDownloadDriver: DownloadUrlDriver;\n  readonly blockUpdateWatcher: BlockUpdateWatcher;\n  readonly quickJs: QuickJSWASMModule;\n  readonly driverKit: MiddleLayerDriverKit;\n  readonly serviceRegistry: ModelServiceRegistry;\n  readonly projectHelper: ProjectHelper;\n}\n\n/**\n * Main access object to work with pl from UI.\n *\n * It implements an abstraction layer of projects and blocks.\n *\n * As a main entry point inside the pl, this object uses a resource attached\n * via the {@link ProjectsField} to the pl client's root, this resource\n * contains project list.\n *\n * Read about alternative roots, if isolated project lists (working environments)\n * are required.\n * */\nexport class MiddleLayer {\n  public readonly pl: PlClient;\n\n  private constructor(\n    private readonly env: MiddleLayerEnvironment,\n    public readonly driverKit: DriverKit,\n    public readonly signer: Signer,\n    private readonly projectListResourceId: SignedResourceId,\n    private readonly sharingOutboxResourceId: SignedResourceId,\n    private readonly sharingStateResourceId: SignedResourceId,\n    private readonly openedProjectsList: WatchableValue<ProjectId[]>,\n    private readonly projectListTree: SynchronizedTreeState,\n    private readonly sharingOutboxTree: SynchronizedTreeState,\n    private readonly sharingStateTree: SynchronizedTreeState,\n    private readonly pendingSharesTree: SynchronizedTreeState,\n    public readonly blockRegistryProvider: V2RegistryProvider,\n    /** Contains a reactive list of projects along with their meta information. */\n    public readonly projectList: ComputableStableDefined<ProjectListEntry[]>,\n    /** Reactive view of the donor's outbox — the shares this user has created.\n     *  v1: API only, no UI. */\n    public outgoingShares: Computable<OutgoingShare[] | undefined>,\n    /** Envelopes granted to this user, not yet accepted or rejected. Fed by the\n     *  shared-resource discovery tree. */\n    public pendingShares: Computable<PendingShare[] | undefined>,\n    /** Internal: the acceptor's currently-live envelopes, read from the same shared-resource\n     *  discovery tree as {@link pendingShares}. The single source the accept/reject flow resolves\n     *  live envelopes from — no second discovery path. */\n    private readonly liveEnvelopes: Computable<LiveEnvelope[] | undefined>,\n  ) {\n    this.pl = this.env.pl;\n    this.startEnvelopeCleanup();\n  }\n\n  /**\n   * Get the OS where backend is running.\n   * For old backend versions returns undefined.\n   */\n  public get serverPlatform(): BlockPlatform | undefined {\n    return this.pl.serverInfo.platform as BlockPlatform | undefined;\n  }\n\n  /**\n   * Runtime capabilities advertised by the connected backend (tokens of\n   * the form `<feature>:<version>`, e.g. \"wasm:v1\"). Empty list if the\n   * backend predates the capability mechanism — that's the desired\n   * fail-closed behaviour for blocks declaring any `requiredCapabilities`.\n   */\n  public get serverCapabilities(): string[] {\n    return this.pl.serverInfo.capabilities ?? [];\n  }\n\n  /**\n   * Login of the authenticated user, for the \"Signed in as\" UI. `null` when the\n   * backend has no auth (local/dev mode) — the UI hides the element.\n   */\n  public get currentUserLogin(): string | null {\n    return this.pl.userResources.authUser;\n  }\n\n  /**\n   * Whether the connected backend supports project sharing. Synthetic — computed\n   * in the middle layer from the backend capabilities the share flow needs (the\n   * cross-color field-reference relaxation the accept flow rests on). It can absorb\n   * additional required capabilities later without a UI change.\n   */\n  public get sharingSupported(): boolean {\n    return this.serverCapabilities.includes(\"crossTreeRefs:v1\");\n  }\n\n  /**\n   * Role of the authenticated user, from the `GetSessionInfo` RPC surfaced through the\n   * pl-client. `null` in no-auth mode (when {@link currentUserLogin} is null).\n   */\n  public get currentUserRole(): Role | null {\n    return this.pl.currentUserRole;\n  }\n\n  /**\n   * Whether the UI offers share-with-everybody — no role policy lives in the UI:\n   *   serverCapabilities.has(\"publicGrants:v1\") && canGrantToEveryone(currentUserRole)\n   * Not a security boundary: a crafted call still hits the backend's role +\n   * permission-ceiling gate.\n   */\n  public get canShareWithEveryone(): boolean {\n    return (\n      this.serverCapabilities.includes(\"publicGrants:v1\") &&\n      canGrantToEveryone(this.currentUserRole)\n    );\n  }\n\n  /** Adds a runtime capability to the middle layer. */\n  public addRuntimeCapability(\n    requirement: SupportedRequirement,\n    value: number | boolean = true,\n  ): void {\n    this.env.runtimeCapabilities.addSupportedRequirement(requirement, value);\n  }\n\n  /** Checks if the given block feature flags are compatible with the runtime capabilities. */\n  public checkBlockCompatibility(featureFlags: BlockCodeFeatureFlags | undefined): boolean {\n    return this.env.runtimeCapabilities.checkCompatibility(featureFlags);\n  }\n\n  /** Returns extended API driver kit used internally by middle layer. */\n  public get internalDriverKit(): MiddleLayerDriverKit {\n    return this.env.driverKit;\n  }\n\n  /** Returns the service registry for service introspection. */\n  public get serviceRegistry(): ModelServiceRegistry {\n    return this.env.serviceRegistry;\n  }\n\n  //\n  // ProjectId ↔ SignedResourceId resolution\n  //\n\n  private readonly projectIdCache = new LRUCache<ProjectId, SignedResourceId>({ max: 1024 });\n\n  /** Resolves a ProjectId to a signed SignedResourceId.\n   * Uses LRU cache with TX-scan fallback. */\n  private async resolveProjectId(projectId: ProjectId): Promise<SignedResourceId> {\n    const cached = this.projectIdCache.get(projectId);\n    if (cached !== undefined) return cached;\n\n    // Cache miss — scan project list fields to find the matching resource\n    const rid = await this.pl.withReadTx(\"ResolveProjectId\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (projectId as string)) return f.value;\n      }\n      throw new Error(`Project ${projectId} not found in project list.`);\n    });\n\n    this.projectIdCache.set(projectId, rid);\n    return rid;\n  }\n\n  //\n  // Project List Manipulation\n  //\n\n  /** Creates a project with initial state and adds it to project list. */\n  public async createProject(meta: ProjectMeta): Promise<ProjectId> {\n    let prj: ResourceRef;\n    await this.pl.withWriteTx(\"MLCreateProject\", async (tx) => {\n      prj = await createProject(tx, meta);\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", prj);\n      await tx.commit();\n    });\n    await this.projectListTree.refreshState();\n\n    const signedRid = await prj!.globalId;\n    const projectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(projectId, signedRid);\n    return projectId;\n  }\n\n  /** Updates project metadata */\n  public async setProjectMeta(\n    id: ProjectId,\n    meta: ProjectMeta,\n    author?: AuthorMarker,\n  ): Promise<void> {\n    const rid = await this.resolveProjectId(id);\n    await withProjectAuthored(\n      this.env.projectHelper,\n      this.pl,\n      rid,\n      author,\n      (prj) => {\n        prj.setMeta(meta);\n      },\n      { name: \"setProjectMeta\" },\n    );\n    await this.projectListTree.refreshState();\n  }\n\n  /** Permanently deletes project from the project list, this will result in\n   * destruction of all attached objects, like files, analysis results etc. */\n  public async deleteProject(id: ProjectId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRemoveProject\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      let fieldName: string | undefined;\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (id as string)) {\n          fieldName = f.name;\n          break;\n        }\n      }\n      if (fieldName === undefined) throw new Error(`Project ${id} not found in project list.`);\n      tx.removeField(field(this.projectListResourceId, fieldName));\n      await tx.commit();\n    });\n    this.projectIdCache.delete(id);\n    await this.projectListTree.refreshState();\n  }\n\n  /**\n   * Duplicates an existing project and adds the copy to this user's project list.\n   *\n   * @param srcProjectId - project id of the project to duplicate\n   * @param rename - optional function that receives the source label and all existing\n   *   project labels (read within the same transaction), and returns the label for the copy\n   */\n  public async duplicateProject(\n    srcProjectId: ProjectId,\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<ProjectId> {\n    const sourceRid = await this.resolveProjectId(srcProjectId);\n\n    const newPrj: ResourceRef = await this.pl.withWriteTx(\"MLDuplicateProject\", async (tx) => {\n      // Read source project meta\n      const sourceMeta = await tx.getKValueJson<ProjectMeta>(sourceRid, ProjectMetaKey);\n\n      // Read all existing project labels from the project list (parallel reads)\n      const projectListData = await tx.getResourceData(this.projectListResourceId, true);\n      const projectRids = projectListData.fields\n        .map((f) => f.value)\n        .filter(isNotNullSignedResourceId);\n      const existingLabels = (\n        await Promise.all(\n          projectRids.map((rid) => tx.getKValueJson<ProjectMeta>(rid, ProjectMetaKey)),\n        )\n      ).map((m) => m.label);\n\n      // Compute new label\n      const newLabel = rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label;\n\n      // Create the duplicate\n      const newPrj = await duplicateProject(tx, sourceRid, { label: newLabel });\n\n      // Attach to project list with a random UUID field name\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", newPrj);\n      await tx.commit();\n\n      return newPrj;\n    });\n\n    await this.projectListTree.refreshState();\n\n    const signedRid = await newPrj.globalId;\n    const newProjectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(newProjectId, signedRid);\n    return newProjectId;\n  }\n\n  //\n  // Project Sharing (Copy & Share)\n  //\n\n  /**\n   * Shares the given projects (Copy & Share). Snapshots the projects, creates one envelope, and\n   * grants it — all in one atomic write transaction, so a failed grant rolls the whole thing back\n   * and the outbox is left as it was.\n   *\n   * Two variants (see {@link ShareProjectsOptions}):\n   * - `{ recipients }` — one writable grant per named recipient; the envelope expires after the\n   *   default TTL (`sharedAt + envelopeTtlMs`).\n   * - `{ everyone: true }` — one make-public grant (backend rewrites the target to the\n   *   everyone-user); the envelope's `expiresAt` is `null`, so it never expires.\n   *\n   * v1 always passes `mode: \"copy\"`.\n   */\n  public async shareProjects(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    if (projectIds.length === 0) throw new Error(\"shareProjects: no projects given\");\n\n    // Everyone + replace: refresh the existing everyone-share of this project under its stable\n    // shareId (so recipients who already decided aren't re-prompted), if one exists. Found\n    // automatically by project overlap; falls through to a fresh share when none exists.\n    if (\"everyone\" in options && options.replace) {\n      const priorEveryone = (await this.findSupersedableEnvelopes(projectIds)).find(\n        (p) => p.everyone,\n      );\n      if (priorEveryone !== undefined) {\n        await this.changeShare(priorEveryone.shareId, { title: options.title });\n        return;\n      }\n    }\n\n    await this.createNewShare(projectIds, options);\n  }\n\n  /**\n   * Mints a fresh share: snapshots the projects into one new envelope (a fresh shareId),\n   * supersedes prior shares of the same project, and grants it — all in one atomic write\n   * transaction, so a failed grant rolls the whole thing back and the outbox is left as it was.\n   * The everyone-refresh path is the {@link changeShare} branch of {@link shareProjects}; this is\n   * the mint-a-new-envelope branch.\n   */\n  private async createNewShare(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    const everyone = \"everyone\" in options;\n    const sources: EnvelopeProjectSource[] = await Promise.all(\n      projectIds.map(\n        async (id): Promise<EnvelopeProjectSource> => ({\n          kind: \"fresh\",\n          projectId: id,\n          sourceRid: await this.resolveProjectId(id),\n        }),\n      ),\n    );\n    const sender = this.currentUserLogin ?? \"\";\n    // Targeted share: sharedAt + ttl. Share-with-everybody: never expires (null).\n    const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n    // Supersede prior shares of the same project(s) so they never pile up. Resolved before\n    // the write tx (ListGrants is a separate RPC). Everyone-share supersedes a prior\n    // everyone-share of the same project; a targeted share pulls each named recipient out of\n    // any prior share of that project, deleting that share if it ends up with no recipients.\n    const priors = await this.findSupersedableEnvelopes(projectIds);\n\n    await this.pl.withWriteTx(\"MLShareProjects\", async (tx) => {\n      if (everyone) {\n        for (const prior of priors) {\n          if (prior.everyone) tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n        }\n      } else {\n        const newRecipients = new Set(options.recipients);\n        for (const prior of priors) {\n          if (prior.everyone) continue; // a single user can't be pulled from an everyone-grant\n          const toRemove = prior.recipients.filter((u) => newRecipients.has(u));\n          if (toRemove.length === 0) continue;\n          const remaining = prior.recipients.filter((u) => !newRecipients.has(u));\n          if (remaining.length === 0) {\n            // Nobody left on the old share — drop the whole envelope.\n            tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n          } else {\n            for (const u of toRemove) tx.revokeAccess(prior.rid, u);\n          }\n        }\n      }\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: options.mode,\n        sender,\n        title: options.title,\n        expiresAt,\n      });\n\n      // Grant in the same transaction (writable: the cross-color accept rule demands a writable\n      // grant on the envelope). Atomic with the create.\n      const envelopeGid = await envelope.globalId;\n      if (everyone) {\n        // One everyone-grant: empty/ignored target, ANY_AUTHORISED. The backend rewrites\n        // the target to the everyone-user; gated by role + permission ceiling.\n        tx.grantAccess(envelopeGid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      } else {\n        for (const recipient of options.recipients) {\n          tx.grantAccess(envelopeGid, recipient, { writable: true });\n        }\n      }\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Changes a share in place (same {@link ShareId}), in one write transaction: re-snapshots live\n   * source projects and carries deleted ones' snapshots forward; applies edited recipients/title;\n   * transfers already-decided recipients' accept/reject records (they keep their copy and aren't\n   * re-prompted); re-grants; drops the old envelope.\n   *\n   * `opts.recipients` is the full targeted set (decided users are always kept). `opts.title`\n   * replaces the title — omit keeps the current one. `opts.everyone` upgrades targeted ->\n   * everyone; the reverse is impossible and ignored.\n   *\n   * `opts.projectActions` is a per-source-project decision, keyed by projectId: `update`\n   * re-snapshots the live source (falls back to carry if the source is gone), `keep` carries the\n   * existing snapshot (and its timestamp), `remove` drops the project from the pack. A project not\n   * in the map defaults to `keep`. Omit the whole map for the legacy auto behavior (live sources\n   * updated, gone ones kept) — the everyone-refresh path relies on that.\n   */\n  public async changeShare(\n    shareId: ShareId,\n    opts: {\n      recipients?: string[];\n      everyone?: boolean;\n      title?: string;\n      projectActions?: Record<ProjectId, ProjectChangeAction>;\n    } = {},\n  ): Promise<void> {\n    await this.pl.withWriteTx(\"MLChangeShare\", async (tx) => {\n      const old = await this.resolveOutboxEnvelope(tx, shareId);\n      if (old === undefined)\n        throw new Error(`changeShare: no live share with id ${shareId} in the outbox.`);\n\n      const self = this.currentUserLogin ?? \"\";\n      const grants = await tx.listGrants(old.rid);\n      // A targeted share may be upgraded to everyone; an everyone-share can't be narrowed back.\n      const everyone = grants.some((g) => isEveryoneUserLogin(g.user)) || opts.everyone === true;\n\n      // Read the old envelope's project snapshots (uuid -> rid) and accept/reject records.\n      const oldRd = await tx.getResourceData(old.rid, true);\n      const snapshotByUuid = new Map<string, SignedResourceId>();\n      const acceptances: { login: string; acc: EnvelopeAcceptance }[] = [];\n      for (const f of oldRd.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (isEnvelopeProjectField(f.name)) {\n          snapshotByUuid.set(envelopeProjectFieldUuid(f.name), f.value);\n        } else if (isAcceptanceField(f.name)) {\n          const raw = (await tx.getResourceData(f.value, false)).data;\n          if (raw === undefined) continue;\n          acceptances.push({\n            login: acceptanceFieldLogin(f.name),\n            acc: cachedDeserialize(raw) as EnvelopeAcceptance,\n          });\n        }\n      }\n      const decidedLogins = acceptances.map((a) => a.login);\n\n      // Everyone-shares ignore recipients; targeted shares keep decided users plus the edited set.\n      const priorRecipients = grants\n        .filter((g) => !isEveryoneUserLogin(g.user) && g.user !== self)\n        .map((g) => g.user);\n      const recipients = everyone\n        ? []\n        : Array.from(new Set([...(opts.recipients ?? priorRecipients), ...decidedLogins]));\n\n      // Live source projects by persistable id — these get a fresh snapshot.\n      const liveProjects = new Map<string, SignedResourceId>();\n      const projList = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of projList.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        liveProjects.set(resourceIdToString(f.value), f.value);\n      }\n\n      // Per project (keyed by field uuid), apply the caller's decision (default `keep`); with no\n      // projectActions map, fall back to the legacy auto behavior: update a live source, keep a gone one.\n      const actions = opts.projectActions;\n      const sources: EnvelopeProjectSource[] = [];\n      for (const uuid of Object.keys(old.data.projects) as ProjectFieldUuid[]) {\n        const { label, source, updatedAt } = old.data.projects[uuid];\n        const liveRid = liveProjects.get(source);\n\n        const action = actions\n          ? (actions[source] ?? \"keep\")\n          : liveRid !== undefined\n            ? \"update\"\n            : \"keep\";\n        if (action === \"remove\") continue;\n\n        if (action === \"update\" && liveRid !== undefined) {\n          sources.push({ kind: \"fresh\", projectId: source, sourceRid: liveRid });\n        } else {\n          // keep, or an \"update\" whose source vanished before commit (deleted meanwhile, e.g. from\n          // another client): carry the prior snapshot. Liveness is read inside this write tx — race-safe.\n          const snapshotRid = snapshotByUuid.get(uuid);\n          if (snapshotRid !== undefined)\n            sources.push({ kind: \"carry\", projectId: source, label, snapshotRid, updatedAt });\n        }\n      }\n\n      // Omit (undefined) keeps the current title; a provided value replaces it.\n      const title = opts.title === undefined ? old.data.title : opts.title.trim();\n      const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n      // Same shareId, same outbox field name — detach the old field before rebuilding, or they collide.\n      tx.removeField(field(this.sharingOutboxResourceId, old.fieldName));\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: old.data.mode,\n        sender: self,\n        title,\n        expiresAt,\n        shareId, // SAME shareId — the essence of change\n      });\n\n      // Transfer the decided users' records onto the new envelope (donor-written copies).\n      for (const { login, acc } of acceptances) {\n        if (!everyone && !recipients.includes(login)) continue;\n        writeEnvelopeAcceptance(tx, envelope, login, acc.action, acc.timestamp);\n      }\n\n      const gid = await envelope.globalId;\n      if (everyone) tx.grantAccess(gid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      else for (const r of recipients) tx.grantAccess(gid, r, { writable: true });\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Finds the donor's own outgoing envelopes built from any of the given source projects —\n   * the supersede candidates for a fresh share of the same project(s). Reads each envelope's\n   * recipient set via `ListGrants` so the caller can pull individual recipients or detect an\n   * everyone-share.\n   */\n  private async findSupersedableEnvelopes(projectIds: ProjectId[]): Promise<\n    {\n      fieldName: string;\n      rid: SignedResourceId;\n      shareId: ShareId;\n      everyone: boolean;\n      recipients: string[];\n    }[]\n  > {\n    const wanted = new Set(projectIds);\n\n    const matched = await this.pl.withReadTx(\"MLFindSupersede\", async (tx) => {\n      const outbox = await tx.getResourceData(this.sharingOutboxResourceId, true);\n      const out: { fieldName: string; rid: SignedResourceId; shareId: ShareId }[] = [];\n      for (const f of outbox.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        const rd = await tx.getResourceData(f.value, false);\n        if (rd.data === undefined) continue;\n        const data = decodeEnvelopeData(rd.data);\n        if (Object.values(data.projects).some((p) => wanted.has(p.source)))\n          out.push({ fieldName: f.name, rid: f.value, shareId: data.shareId });\n      }\n      return out;\n    });\n\n    return await Promise.all(\n      matched.map(async ({ fieldName, rid, shareId }) => {\n        const grants = await this.pl.userResources.listGrants(rid);\n        return {\n          fieldName,\n          rid,\n          shareId,\n          everyone: grants.some((g) => isEveryoneUserLogin(g.user)),\n          recipients: grants.filter((g) => !isEveryoneUserLogin(g.user)).map((g) => g.user),\n        };\n      }),\n    );\n  }\n\n  /**\n   * Revokes and deletes an outgoing share for all recipients: detaches and deletes the envelope, and\n   * its grants are revoked along with it. Already-accepted copies are unaffected (ref-counting keeps\n   * the adopted resources alive). Idempotent — revoking a share that is already gone is a no-op.\n   */\n  public async revokeShare(shareId: ShareId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRevokeShare\", async (tx) => {\n      const target = await this.resolveOutboxEnvelope(tx, shareId);\n      if (target === undefined) return;\n      tx.removeField(field(this.sharingOutboxResourceId, target.fieldName));\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Resolves a live envelope from the donor's own outbox by its logical `shareId`, returning the\n   * outbox field name (for detach), the signed envelope id, and its decoded {@link EnvelopeData}.\n   * The outbox is keyed by `{shareId}` directly, but a replaced/legacy share may have drifted, so\n   * we match on the decoded `shareId` rather than the field name alone.\n   */\n  private async resolveOutboxEnvelope(\n    tx: PlTransaction,\n    shareId: ShareId,\n  ): Promise<{ fieldName: string; rid: SignedResourceId; data: EnvelopeData } | undefined> {\n    const outboxData = await tx.getResourceData(this.sharingOutboxResourceId, true);\n    for (const f of outboxData.fields) {\n      if (isNullSignedResourceId(f.value)) continue;\n      const rd = await tx.getResourceData(f.value, false);\n      if (rd.data === undefined) continue;\n      const data = decodeEnvelopeData(rd.data);\n      if (data.shareId === shareId) return { fieldName: f.name, rid: f.value, data };\n    }\n    return undefined;\n  }\n\n  /**\n   * Resolves currently-shared envelopes (granted to this user) to their resource ids, keyed by\n   * the envelope's logical `shareId`.\n   *\n   * Reads the {@link liveEnvelopes} Computable — the same shared-resource discovery tree that\n   * feeds {@link pendingShares}. This is the single discovery mechanism: there is no separate\n   * `ListUserResources` re-stream on every accept/reject. `refreshState()` is awaited first so a\n   * just-granted envelope is observed (the tree's discovery poll may otherwise lag a freshly\n   * landed grant). The tree is gRPC-only, so this is empty on a REST-connected client.\n   */\n  private async resolveLiveEnvelopes(): Promise<Map<ShareId, LiveEnvelope>> {\n    await this.pendingSharesTree.refreshState();\n    const live = (await this.liveEnvelopes.getValue()) ?? [];\n    // Dedup by logical shareId (last writer wins — at most one live envelope per shareId).\n    const map = new Map<ShareId, LiveEnvelope>();\n    for (const e of live) map.set(e.data.shareId, e);\n    return map;\n  }\n\n  /**\n   * Accepts one or more pending shares: duplicates each share's projects into this user's\n   * project list, records the decision per share, and (read-write share) writes the donor-visible\n   * acceptance onto the envelope. Per-share failures (e.g. an expiry race) are collected, not\n   * short-circuited — the rest still get accepted. Accept-all = pass every current pending shareId.\n   *\n   * `rename` resolves label collisions (same callback contract as {@link duplicateProject}), but\n   * the source lives in the envelope tree, so accept calls the low-level mutator directly.\n   */\n  public async acceptShare(\n    shareIds: ShareId[],\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<{ accepted: ProjectId[]; failed: { shareId: ShareId; error: string }[] }> {\n    const live = await this.resolveLiveEnvelopes();\n    const login = this.currentUserLogin;\n\n    const accepted: ProjectId[] = [];\n    const failed: { shareId: ShareId; error: string }[] = [];\n\n    for (const shareId of shareIds) {\n      const envelope = live.get(shareId);\n      if (envelope === undefined) {\n        failed.push({ shareId, error: \"Share is no longer available.\" });\n        continue;\n      }\n      try {\n        const now = Date.now();\n        const createdRids = await this.pl.withWriteTx(\"MLAcceptShare\", async (tx) => {\n          const created = await copyEnvelopeProjectsIntoList(\n            tx,\n            envelope.rid,\n            this.projectListResourceId,\n            rename,\n          );\n\n          // Record the decision on the acceptor's own SharingState, keyed on shareId.\n          writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n            decision: \"accepted\",\n            timestamp: now,\n            envelopeSharedAt: envelope.data.sharedAt,\n            acceptedProjects: resourceIdsToStrings(created),\n          });\n\n          // Read-write share: write the donor-visible acceptance onto the envelope.\n          if (login !== null && envelope.data.mode !== \"read-only\")\n            writeEnvelopeAcceptance(tx, envelope.rid, login, \"accepted\", now);\n\n          await tx.commit();\n          return created;\n        });\n        for (const rid of createdRids) {\n          const projectId = resourceIdToString(rid) as ProjectId;\n          this.projectIdCache.set(projectId, rid);\n          accepted.push(projectId);\n        }\n      } catch (e) {\n        failed.push({ shareId, error: e instanceof Error ? e.message : String(e) });\n      }\n    }\n\n    await Promise.all([this.projectListTree.refreshState(), this.sharingStateTree.refreshState()]);\n    return { accepted, failed };\n  }\n\n  /** Records rejection of a pending share; it never surfaces again. */\n  public async rejectShare(shareId: ShareId): Promise<void> {\n    const live = await this.resolveLiveEnvelopes();\n    const envelope = live.get(shareId);\n    const login = this.currentUserLogin;\n    const now = Date.now();\n\n    await this.pl.withWriteTx(\"MLRejectShare\", async (tx) => {\n      writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n        decision: \"rejected\",\n        timestamp: now,\n        envelopeSharedAt: envelope?.data.sharedAt ?? now,\n        acceptedProjects: [],\n      });\n\n      // Read-write share: write the donor-visible rejection onto the envelope (if still live).\n      if (envelope !== undefined && login !== null && envelope.data.mode !== \"read-only\")\n        writeEnvelopeAcceptance(tx, envelope.rid, login, \"rejected\", now);\n\n      await tx.commit();\n    });\n\n    await this.sharingStateTree.refreshState();\n  }\n\n  //\n  // Outbox cleanup (donor side)\n  //\n\n  private static readonly EnvelopeCleanupIntervalMs = 6 * 3600 * 1000; // every 6h\n  private envelopeCleanupTimer: ReturnType<typeof setInterval> | undefined;\n\n  /** On ML start and every 6h, delete envelopes whose immutable `expiresAt` has passed. */\n  private startEnvelopeCleanup(): void {\n    void this.runEnvelopeCleanup();\n    this.envelopeCleanupTimer = setInterval(() => {\n      void this.runEnvelopeCleanup();\n    }, MiddleLayer.EnvelopeCleanupIntervalMs);\n    // Don't keep the process alive solely for cleanup.\n    this.envelopeCleanupTimer.unref?.();\n  }\n\n  /** Scans the donor's outbox and deletes expired envelopes (backend auto-revokes their grants).\n   *  Envelopes with `expiresAt: null` (share-with-everybody) are skipped. */\n  private async runEnvelopeCleanup(): Promise<void> {\n    try {\n      const now = Date.now();\n      const expired = await this.pl.withReadTx(\"MLEnvelopeCleanupScan\", async (tx) => {\n        const data = await tx.getResourceData(this.sharingOutboxResourceId, true);\n        const toDelete: { fieldName: string }[] = [];\n        for (const f of data.fields) {\n          if (isNullSignedResourceId(f.value)) continue;\n          const rd = await tx.getResourceData(f.value, false);\n          if (rd.data === undefined) continue;\n          const envData = decodeEnvelopeData(rd.data);\n          if (envData.expiresAt === null) continue; // never expires\n          if (envData.expiresAt <= now) toDelete.push({ fieldName: f.name });\n        }\n        return toDelete;\n      });\n\n      if (expired.length === 0) return;\n\n      await this.pl.withWriteTx(\"MLEnvelopeCleanup\", async (tx) => {\n        for (const { fieldName } of expired)\n          tx.removeField(field(this.sharingOutboxResourceId, fieldName));\n        await tx.commit();\n      });\n\n      await this.sharingOutboxTree.refreshState();\n    } catch (e) {\n      this.env.logger.warn(\n        `envelope cleanup failed: ${e instanceof Error ? e.message : String(e)}`,\n      );\n    }\n  }\n\n  //\n  // Projects\n  //\n\n  private readonly openedProjects = new Map<ProjectId, Project>();\n\n  /** Opens a project, and starts corresponding project maintenance loop. */\n  public async openProject(id: ProjectId): Promise<void> {\n    if (this.openedProjects.has(id)) throw new Error(`Project ${id} already opened`);\n    const rid = await this.resolveProjectId(id);\n    this.openedProjects.set(id, await Project.init(this.env, id, rid));\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Closes the project, and deallocate all corresponding resources. */\n  public async closeProject(id: ProjectId): Promise<void> {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    this.openedProjects.delete(id);\n    await prj.destroy();\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Returns a project access object for an opened project. */\n  public getOpenedProject(id: ProjectId): Project {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    return prj;\n  }\n\n  /** Returns true if project with given id is currently opened. */\n  public isProjectOpened(id: ProjectId): boolean {\n    return this.openedProjects.has(id);\n  }\n\n  /**\n   * Deallocates all runtime resources consumed by this object and awaits\n   * actual termination of event loops and other processes associated with\n   * them.\n   */\n  public async close() {\n    if (this.envelopeCleanupTimer !== undefined) clearInterval(this.envelopeCleanupTimer);\n    await Promise.all([...this.openedProjects.values()].map((prj) => prj.destroy()));\n    // this.env.quickJs;\n    await Promise.all([\n      this.projectListTree.terminate(),\n      this.sharingOutboxTree.terminate(),\n      this.sharingStateTree.terminate(),\n      this.pendingSharesTree.terminate(),\n    ]);\n    await this.env.dispose();\n    await this.pl.close();\n  }\n\n  /** @deprecated */\n  public async closeAndAwaitTermination() {\n    await this.close();\n  }\n\n  /** Generates sufficiently random string to be used as local secret for the\n   * middle layer */\n  public static generateLocalSecret(): string {\n    return HmacSha256Signer.generateSecret();\n  }\n\n  /** Returns a block event dispatcher, which can be used to listen to block events. */\n  public get blockEventDispatcher(): BlockEventDispatcher {\n    return this.env.blockEventDispatcher;\n  }\n\n  /** Initialize middle layer */\n  public static async init(\n    pl: PlClient,\n    workdir: string,\n    _ops: MiddleLayerOpsConstructor,\n  ): Promise<MiddleLayer> {\n    const ops: MiddleLayerOps = {\n      ...DefaultMiddleLayerOpsSettings,\n      ...DefaultMiddleLayerOpsPaths(workdir),\n      ..._ops,\n    };\n\n    // overriding debug options from environment variables\n    ops.defaultTreeOptions.logStat = getDebugFlags().logTreeStats;\n    ops.debugOps.dumpInitialTreeState = getDebugFlags().dumpInitialTreeState;\n    // apply MI_TREE_TRAVERSAL only when the embedder hasn't set an explicit mode\n    if (\n      ops.defaultTreeOptions.traversalMode === undefined &&\n      getDebugFlags().treeTraversalMode !== undefined\n    )\n      ops.defaultTreeOptions.traversalMode = getDebugFlags().treeTraversalMode;\n\n    const { projects, sharingOutbox, sharingState } = await pl.withWriteTx(\n      \"MLInitialization\",\n      async (tx) => {\n        // Lazily create each clientRoot-attached singleton resource. Returns the existing\n        // resource id if the field is already populated, otherwise creates + locks + sets it.\n        const lazyInit = async (\n          fieldName: string,\n          type: { name: string; version: string },\n        ): Promise<{ ref?: ResourceRef; existing?: SignedResourceId }> => {\n          const f = field(tx.clientRoot, fieldName);\n          tx.createField(f, \"Dynamic\");\n          const fData = await tx.getField(f);\n          if (isNullSignedResourceId(fData.value)) {\n            const ref = tx.createEphemeral(type);\n            tx.lock(ref);\n            tx.setField(f, ref);\n            return { ref };\n          }\n          return { existing: fData.value };\n        };\n\n        const projectsR = await lazyInit(ProjectsField, ProjectsResourceType);\n        const outboxR = await lazyInit(SharingOutboxField, SharingOutboxResourceType);\n        const stateR = await lazyInit(SharingStateField, SharingStateResourceType);\n\n        await tx.commit();\n\n        return {\n          projects: projectsR.existing ?? (await projectsR.ref!.globalId),\n          sharingState: stateR.existing ?? (await stateR.ref!.globalId),\n          sharingOutbox: outboxR.existing ?? (await outboxR.ref!.globalId),\n        };\n      },\n    );\n\n    const logger = ops.logger;\n\n    const driverKit = await initDriverKit(pl, workdir, ops.frontendDownloadPath, ops);\n\n    // passed to components having no own retry logic\n    const retryHttpDispatcher = new RetryAgent(pl.httpDispatcher);\n\n    const v2RegistryProvider = new V2RegistryProvider(retryHttpDispatcher);\n\n    const bpPreparer = new BlockPackPreparer(\n      v2RegistryProvider,\n      driverKit.signer,\n      retryHttpDispatcher,\n    );\n\n    const quickJs = await getQuickJS();\n\n    const runtimeCapabilities = new RuntimeCapabilities();\n    // add runtime capabilities of model here\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 1);\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresCreatePTable\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresPFramesVersion\", REQUIRES_PFRAMES_VERSION);\n    registerServiceCapabilities((flag, value) =>\n      runtimeCapabilities.addSupportedRequirement(flag, value),\n    );\n    // runtime capabilities of the desktop are to be added by the desktop app / test framework\n\n    const serviceRegistry = createModelServiceRegistry({ logger });\n\n    const env: MiddleLayerEnvironment = {\n      pl,\n      blockEventDispatcher: new BlockEventDispatcher(),\n      signer: driverKit.signer,\n      logger,\n      httpDispatcher: pl.httpDispatcher,\n      retryHttpDispatcher,\n      ops,\n      bpPreparer,\n      frontendDownloadDriver: driverKit.frontendDriver,\n      driverKit,\n      blockUpdateWatcher: new BlockUpdateWatcher(v2RegistryProvider, logger, {\n        minDelay: ops.devBlockUpdateRecheckInterval,\n        http: retryHttpDispatcher,\n        preferredUpdateChannel: ops.preferredUpdateChannel,\n      }),\n      runtimeCapabilities,\n      serviceRegistry,\n      quickJs,\n      projectHelper: new ProjectHelper(quickJs, logger),\n      dispose: async () => {\n        await serviceRegistry.dispose();\n        await retryHttpDispatcher.destroy();\n        await driverKit.dispose();\n      },\n    };\n\n    const openedProjects = new WatchableValue<ProjectId[]>([]);\n    const projectListTC = await createProjectList(pl, projects, openedProjects, env);\n\n    // Project sharing trees and reactive views.\n    const outgoingTC = await createOutgoingShares(pl, sharingOutbox, env);\n    const sharingStateTree = await createSharingStateTree(pl, sharingState, env);\n    const pendingSharesTree = await createPendingSharesTree(pl, env);\n    const pendingShares = createPendingSharesComputable(\n      pendingSharesTree,\n      sharingStateTree,\n      pl.userResources.authUser,\n    );\n    const liveEnvelopes = createLiveEnvelopesComputable(pendingSharesTree);\n\n    return new MiddleLayer(\n      env,\n      driverKit,\n      driverKit.signer,\n      projects,\n      sharingOutbox,\n      sharingState,\n      openedProjects,\n      projectListTC.tree,\n      outgoingTC.tree,\n      sharingStateTree,\n      pendingSharesTree,\n      v2RegistryProvider,\n      projectListTC.computable,\n      outgoingTC.computable,\n      pendingShares,\n      liveEnvelopes,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0HA,IAAa,cAAb,MAAa,YAAY;CAIJ;CACD;CACA;CACC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;CAEA;CAGT;CAGA;CAIU;CA1BnB;CAEA,YACE,KACA,WACA,QACA,uBACA,yBACA,wBACA,oBACA,iBACA,mBACA,kBACA,mBACA,uBAEA,aAGA,gBAGA,eAIA,eACA;EAxBiB,KAAA,MAAA;EACD,KAAA,YAAA;EACA,KAAA,SAAA;EACC,KAAA,wBAAA;EACA,KAAA,0BAAA;EACA,KAAA,yBAAA;EACA,KAAA,qBAAA;EACA,KAAA,kBAAA;EACA,KAAA,oBAAA;EACA,KAAA,mBAAA;EACA,KAAA,oBAAA;EACD,KAAA,wBAAA;EAEA,KAAA,cAAA;EAGT,KAAA,iBAAA;EAGA,KAAA,gBAAA;EAIU,KAAA,gBAAA;EAEjB,KAAK,KAAK,KAAK,IAAI;EACnB,KAAK,qBAAqB;CAC5B;;;;;CAMA,IAAW,iBAA4C;EACrD,OAAO,KAAK,GAAG,WAAW;CAC5B;;;;;;;CAQA,IAAW,qBAA+B;EACxC,OAAO,KAAK,GAAG,WAAW,gBAAgB,CAAC;CAC7C;;;;;CAMA,IAAW,mBAAkC;EAC3C,OAAO,KAAK,GAAG,cAAc;CAC/B;;;;;;;CAQA,IAAW,mBAA4B;EACrC,OAAO,KAAK,mBAAmB,SAAS,kBAAkB;CAC5D;;;;;CAMA,IAAW,kBAA+B;EACxC,OAAO,KAAK,GAAG;CACjB;;;;;;;CAQA,IAAW,uBAAgC;EACzC,OACE,KAAK,mBAAmB,SAAS,iBAAiB,KAClDA,sBAAAA,mBAAmB,KAAK,eAAe;CAE3C;;CAGA,qBACE,aACA,QAA0B,MACpB;EACN,KAAK,IAAI,oBAAoB,wBAAwB,aAAa,KAAK;CACzE;;CAGA,wBAA+B,cAA0D;EACvF,OAAO,KAAK,IAAI,oBAAoB,mBAAmB,YAAY;CACrE;;CAGA,IAAW,oBAA0C;EACnD,OAAO,KAAK,IAAI;CAClB;;CAGA,IAAW,kBAAwC;EACjD,OAAO,KAAK,IAAI;CAClB;CAMA,iBAAkC,IAAIC,UAAAA,SAAsC,EAAE,KAAK,KAAK,CAAC;;;CAIzF,MAAc,iBAAiB,WAAiD;EAC9E,MAAM,SAAS,KAAK,eAAe,IAAI,SAAS;EAChD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,MAAM,MAAM,MAAM,KAAK,GAAG,WAAW,oBAAoB,OAAO,OAAO;GACrE,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,WAAsB,OAAO,EAAE;GACtE;GACA,MAAM,IAAI,MAAM,WAAW,UAAU,4BAA4B;EACnE,CAAC;EAED,KAAK,eAAe,IAAI,WAAW,GAAG;EACtC,OAAO;CACT;;CAOA,MAAa,cAAc,MAAuC;EAChE,IAAI;EACJ,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,MAAMC,gBAAAA,cAAc,IAAI,IAAI;GAClC,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,GAAG;GAC9E,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,IAAK;EAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,SAAS;EAC9C,KAAK,eAAe,IAAI,WAAW,SAAS;EAC5C,OAAO;CACT;;CAGA,MAAa,eACX,IACA,MACA,QACe;EACf,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,MAAMC,gBAAAA,oBACJ,KAAK,IAAI,eACT,KAAK,IACL,KACA,SACC,QAAQ;GACP,IAAI,QAAQ,IAAI;EAClB,GACA,EAAE,MAAM,iBAAiB,CAC3B;EACA,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;CAIA,MAAa,cAAc,IAA8B;EACvD,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,IAAI;GACJ,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,IAAe;KAClD,YAAY,EAAE;KACd;IACF;GACF;GACA,IAAI,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,4BAA4B;GACvF,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,uBAAuB,SAAS,CAAC;GAC3D,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;;;;;;CASA,MAAa,iBACX,cACA,QACoB;EACpB,MAAM,YAAY,MAAM,KAAK,iBAAiB,YAAY;EAE1D,MAAM,SAAsB,MAAM,KAAK,GAAG,YAAY,sBAAsB,OAAO,OAAO;GAExF,MAAM,aAAa,MAAM,GAAG,cAA2B,WAAWC,sBAAAA,cAAc;GAIhF,MAAM,eAAc,MADU,GAAG,gBAAgB,KAAK,uBAAuB,IAAI,EAAA,CAC7C,OACjC,KAAK,MAAM,EAAE,KAAK,CAAC,CACnB,OAAOC,0BAAAA,yBAAyB;GACnC,MAAM,kBACJ,MAAM,QAAQ,IACZ,YAAY,KAAK,QAAQ,GAAG,cAA2B,KAAKD,sBAAAA,cAAc,CAAC,CAC7E,EAAA,CACA,KAAK,MAAM,EAAE,KAAK;GAMpB,MAAM,SAAS,MAAME,gBAAAA,iBAAiB,IAAI,WAAW,EAAE,OAHtC,SAAS,OAAO,WAAW,OAAO,cAAc,IAAI,WAAW,MAGT,CAAC;GAGxE,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,MAAM;GACjF,MAAM,GAAG,OAAO;GAEhB,OAAO;EACT,CAAC;EAED,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,OAAO;EAC/B,MAAM,gBAAA,GAAA,0BAAA,mBAAA,CAAkC,SAAS;EACjD,KAAK,eAAe,IAAI,cAAc,SAAS;EAC/C,OAAO;CACT;;;;;;;;;;;;;;CAmBA,MAAa,cACX,YACA,SACe;EACf,IAAI,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,kCAAkC;EAK/E,IAAI,cAAc,WAAW,QAAQ,SAAS;GAC5C,MAAM,iBAAiB,MAAM,KAAK,0BAA0B,UAAU,EAAA,CAAG,MACtE,MAAM,EAAE,QACX;GACA,IAAI,kBAAkB,KAAA,GAAW;IAC/B,MAAM,KAAK,YAAY,cAAc,SAAS,EAAE,OAAO,QAAQ,MAAM,CAAC;IACtE;GACF;EACF;EAEA,MAAM,KAAK,eAAe,YAAY,OAAO;CAC/C;;;;;;;;CASA,MAAc,eACZ,YACA,SACe;EACf,MAAM,WAAW,cAAc;EAC/B,MAAM,UAAmC,MAAM,QAAQ,IACrD,WAAW,IACT,OAAO,QAAwC;GAC7C,MAAM;GACN,WAAW;GACX,WAAW,MAAM,KAAK,iBAAiB,EAAE;EAC3C,EACF,CACF;EACA,MAAM,SAAS,KAAK,oBAAoB;EAExC,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;EAM9D,MAAM,SAAS,MAAM,KAAK,0BAA0B,UAAU;EAE9D,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,IAAI;SACG,MAAM,SAAS,QAClB,IAAI,MAAM,UAAU,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;GAAA,OAEpF;IACL,MAAM,gBAAgB,IAAI,IAAI,QAAQ,UAAU;IAChD,KAAK,MAAM,SAAS,QAAQ;KAC1B,IAAI,MAAM,UAAU;KACpB,MAAM,WAAW,MAAM,WAAW,QAAQ,MAAM,cAAc,IAAI,CAAC,CAAC;KACpE,IAAI,SAAS,WAAW,GAAG;KAE3B,IADkB,MAAM,WAAW,QAAQ,MAAM,CAAC,cAAc,IAAI,CAAC,CACzD,CAAC,CAAC,WAAW,GAEvB,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;UAEnE,KAAK,MAAM,KAAK,UAAU,GAAG,aAAa,MAAM,KAAK,CAAC;IAE1D;GACF;GAEA,MAAM,EAAE,aAAa,MAAMC,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,QAAQ;IACd;IACA,OAAO,QAAQ;IACf;GACF,CAAC;GAID,MAAM,cAAc,MAAM,SAAS;GACnC,IAAI,UAGF,GAAG,YAAY,aAAa,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAE5E,KAAK,MAAM,aAAa,QAAQ,YAC9B,GAAG,YAAY,aAAa,WAAW,EAAE,UAAU,KAAK,CAAC;GAI7D,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;;;;;;;;;;;CAkBA,MAAa,YACX,SACA,OAKI,CAAC,GACU;EACf,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,MAAM,MAAM,KAAK,sBAAsB,IAAI,OAAO;GACxD,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,MAAM,sCAAsC,QAAQ,gBAAgB;GAEhF,MAAM,OAAO,KAAK,oBAAoB;GACtC,MAAM,SAAS,MAAM,GAAG,WAAW,IAAI,GAAG;GAE1C,MAAM,WAAW,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC,KAAK,KAAK,aAAa;GAGtF,MAAM,QAAQ,MAAM,GAAG,gBAAgB,IAAI,KAAK,IAAI;GACpD,MAAM,iCAAiB,IAAI,IAA8B;GACzD,MAAM,cAA4D,CAAC;GACnE,KAAK,MAAM,KAAK,MAAM,QAAQ;IAC5B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,IAAIC,gBAAAA,uBAAuB,EAAE,IAAI,GAC/B,eAAe,IAAIC,gBAAAA,yBAAyB,EAAE,IAAI,GAAG,EAAE,KAAK;SACvD,IAAIC,sBAAAA,kBAAkB,EAAE,IAAI,GAAG;KACpC,MAAM,OAAO,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK,EAAA,CAAG;KACvD,IAAI,QAAQ,KAAA,GAAW;KACvB,YAAY,KAAK;MACf,OAAOC,sBAAAA,qBAAqB,EAAE,IAAI;MAClC,MAAA,GAAA,2BAAA,kBAAA,CAAuB,GAAG;KAC5B,CAAC;IACH;GACF;GACA,MAAM,gBAAgB,YAAY,KAAK,MAAM,EAAE,KAAK;GAGpD,MAAM,kBAAkB,OACrB,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,KAAK,EAAE,SAAS,IAAI,CAAC,CAC9D,KAAK,MAAM,EAAE,IAAI;GACpB,MAAM,aAAa,WACf,CAAC,IACD,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAI,KAAK,cAAc,iBAAkB,GAAG,aAAa,CAAC,CAAC;GAGnF,MAAM,+BAAe,IAAI,IAA8B;GACvD,MAAM,WAAW,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GAC1E,KAAK,MAAM,KAAK,SAAS,QAAQ;IAC/B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,aAAa,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,GAAG,EAAE,KAAK;GACvD;GAIA,MAAM,UAAU,KAAK;GACrB,MAAM,UAAmC,CAAC;GAC1C,KAAK,MAAM,QAAQ,OAAO,KAAK,IAAI,KAAK,QAAQ,GAAyB;IACvE,MAAM,EAAE,OAAO,QAAQ,cAAc,IAAI,KAAK,SAAS;IACvD,MAAM,UAAU,aAAa,IAAI,MAAM;IAEvC,MAAM,SAAS,UACV,QAAQ,WAAW,SACpB,YAAY,KAAA,IACV,WACA;IACN,IAAI,WAAW,UAAU;IAEzB,IAAI,WAAW,YAAY,YAAY,KAAA,GACrC,QAAQ,KAAK;KAAE,MAAM;KAAS,WAAW;KAAQ,WAAW;IAAQ,CAAC;SAChE;KAGL,MAAM,cAAc,eAAe,IAAI,IAAI;KAC3C,IAAI,gBAAgB,KAAA,GAClB,QAAQ,KAAK;MAAE,MAAM;MAAS,WAAW;MAAQ;MAAO;MAAa;KAAU,CAAC;IACpF;GACF;GAGA,MAAM,QAAQ,KAAK,UAAU,KAAA,IAAY,IAAI,KAAK,QAAQ,KAAK,MAAM,KAAK;GAC1E,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;GAG9D,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,IAAI,SAAS,CAAC;GAEjE,MAAM,EAAE,aAAa,MAAML,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,IAAI,KAAK;IACf,QAAQ;IACR;IACA;IACA;GACF,CAAC;GAGD,KAAK,MAAM,EAAE,OAAO,SAAS,aAAa;IACxC,IAAI,CAAC,YAAY,CAAC,WAAW,SAAS,KAAK,GAAG;IAC9C,gBAAA,wBAAwB,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,SAAS;GACxE;GAEA,MAAM,MAAM,MAAM,SAAS;GAC3B,IAAI,UAAU,GAAG,YAAY,KAAK,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAC7E,KAAK,MAAM,KAAK,YAAY,GAAG,YAAY,KAAK,GAAG,EAAE,UAAU,KAAK,CAAC;GAE1E,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,0BAA0B,YAQtC;EACA,MAAM,SAAS,IAAI,IAAI,UAAU;EAEjC,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,mBAAmB,OAAO,OAAO;GACxE,MAAM,SAAS,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;GAC1E,MAAM,MAAwE,CAAC;GAC/E,KAAK,MAAM,KAAK,OAAO,QAAQ;IAC7B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;IAClD,IAAI,GAAG,SAAS,KAAA,GAAW;IAC3B,MAAM,OAAOK,sBAAAA,mBAAmB,GAAG,IAAI;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAM,MAAM,OAAO,IAAI,EAAE,MAAM,CAAC,GAC/D,IAAI,KAAK;KAAE,WAAW,EAAE;KAAM,KAAK,EAAE;KAAO,SAAS,KAAK;IAAQ,CAAC;GACvE;GACA,OAAO;EACT,CAAC;EAED,OAAO,MAAM,QAAQ,IACnB,QAAQ,IAAI,OAAO,EAAE,WAAW,KAAK,cAAc;GACjD,MAAM,SAAS,MAAM,KAAK,GAAG,cAAc,WAAW,GAAG;GACzD,OAAO;IACL;IACA;IACA;IACA,UAAU,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC;IACxD,YAAY,OAAO,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;GAClF;EACF,CAAC,CACH;CACF;;;;;;CAOA,MAAa,YAAY,SAAiC;EACxD,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,SAAS,MAAM,KAAK,sBAAsB,IAAI,OAAO;GAC3D,IAAI,WAAW,KAAA,GAAW;GAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,OAAO,SAAS,CAAC;GACpE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,sBACZ,IACA,SACuF;EACvF,MAAM,aAAa,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;EAC9E,KAAK,MAAM,KAAK,WAAW,QAAQ;GACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;GACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;GAClD,IAAI,GAAG,SAAS,KAAA,GAAW;GAC3B,MAAM,OAAOA,sBAAAA,mBAAmB,GAAG,IAAI;GACvC,IAAI,KAAK,YAAY,SAAS,OAAO;IAAE,WAAW,EAAE;IAAM,KAAK,EAAE;IAAO;GAAK;EAC/E;CAEF;;;;;;;;;;;CAYA,MAAc,uBAA4D;EACxE,MAAM,KAAK,kBAAkB,aAAa;EAC1C,MAAM,OAAQ,MAAM,KAAK,cAAc,SAAS,KAAM,CAAC;EAEvD,MAAM,sBAAM,IAAI,IAA2B;EAC3C,KAAK,MAAM,KAAK,MAAM,IAAI,IAAI,EAAE,KAAK,SAAS,CAAC;EAC/C,OAAO;CACT;;;;;;;;;;CAWA,MAAa,YACX,UACA,QACmF;EACnF,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAC7C,MAAM,QAAQ,KAAK;EAEnB,MAAM,WAAwB,CAAC;EAC/B,MAAM,SAAgD,CAAC;EAEvD,KAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,WAAW,KAAK,IAAI,OAAO;GACjC,IAAI,aAAa,KAAA,GAAW;IAC1B,OAAO,KAAK;KAAE;KAAS,OAAO;IAAgC,CAAC;IAC/D;GACF;GACA,IAAI;IACF,MAAM,MAAM,KAAK,IAAI;IACrB,MAAM,cAAc,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;KAC3E,MAAM,UAAU,MAAMC,gBAAAA,6BACpB,IACA,SAAS,KACT,KAAK,uBACL,MACF;KAGA,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;MAC7D,UAAU;MACV,WAAW;MACX,kBAAkB,SAAS,KAAK;MAChC,kBAAkBC,gBAAAA,qBAAqB,OAAO;KAChD,CAAC;KAGD,IAAI,UAAU,QAAQ,SAAS,KAAK,SAAS,aAC3C,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;KAElE,MAAM,GAAG,OAAO;KAChB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,OAAO,aAAa;KAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,GAAG;KACxC,KAAK,eAAe,IAAI,WAAW,GAAG;KACtC,SAAS,KAAK,SAAS;IACzB;GACF,SAAS,GAAG;IACV,OAAO,KAAK;KAAE;KAAS,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;IAAE,CAAC;GAC5E;EACF;EAEA,MAAM,QAAQ,IAAI,CAAC,KAAK,gBAAgB,aAAa,GAAG,KAAK,iBAAiB,aAAa,CAAC,CAAC;EAC7F,OAAO;GAAE;GAAU;EAAO;CAC5B;;CAGA,MAAa,YAAY,SAAiC;EAExD,MAAM,YAAW,MADE,KAAK,qBAAqB,EAAA,CACvB,IAAI,OAAO;EACjC,MAAM,QAAQ,KAAK;EACnB,MAAM,MAAM,KAAK,IAAI;EAErB,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;IAC7D,UAAU;IACV,WAAW;IACX,kBAAkB,UAAU,KAAK,YAAY;IAC7C,kBAAkB,CAAC;GACrB,CAAC;GAGD,IAAI,aAAa,KAAA,KAAa,UAAU,QAAQ,SAAS,KAAK,SAAS,aACrE,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;GAElE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,iBAAiB,aAAa;CAC3C;CAMA,OAAwB,4BAA4B,IAAI,OAAO;CAC/D;;CAGA,uBAAqC;EACnC,KAAU,mBAAmB;EAC7B,KAAK,uBAAuB,kBAAkB;GAC5C,KAAU,mBAAmB;EAC/B,GAAG,YAAY,yBAAyB;EAExC,KAAK,qBAAqB,QAAQ;CACpC;;;CAIA,MAAc,qBAAoC;EAChD,IAAI;GACF,MAAM,MAAM,KAAK,IAAI;GACrB,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,yBAAyB,OAAO,OAAO;IAC9E,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;IACxE,MAAM,WAAoC,CAAC;IAC3C,KAAK,MAAM,KAAK,KAAK,QAAQ;KAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;KACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;KAClD,IAAI,GAAG,SAAS,KAAA,GAAW;KAC3B,MAAM,UAAUF,sBAAAA,mBAAmB,GAAG,IAAI;KAC1C,IAAI,QAAQ,cAAc,MAAM;KAChC,IAAI,QAAQ,aAAa,KAAK,SAAS,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;IACnE;IACA,OAAO;GACT,CAAC;GAED,IAAI,QAAQ,WAAW,GAAG;GAE1B,MAAM,KAAK,GAAG,YAAY,qBAAqB,OAAO,OAAO;IAC3D,KAAK,MAAM,EAAE,eAAe,SAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,SAAS,CAAC;IAC/D,MAAM,GAAG,OAAO;GAClB,CAAC;GAED,MAAM,KAAK,kBAAkB,aAAa;EAC5C,SAAS,GAAG;GACV,KAAK,IAAI,OAAO,KACd,4BAA4B,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,GACvE;EACF;CACF;CAMA,iCAAkC,IAAI,IAAwB;;CAG9D,MAAa,YAAY,IAA8B;EACrD,IAAI,KAAK,eAAe,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,WAAW,GAAG,gBAAgB;EAC/E,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,KAAK,eAAe,IAAI,IAAI,MAAMG,kBAAAA,QAAQ,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC;EACjE,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,MAAa,aAAa,IAA8B;EACtD,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,IAAI,QAAQ;EAClB,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,iBAAwB,IAAwB;EAC9C,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,OAAO;CACT;;CAGA,gBAAuB,IAAwB;EAC7C,OAAO,KAAK,eAAe,IAAI,EAAE;CACnC;;;;;;CAOA,MAAa,QAAQ;EACnB,IAAI,KAAK,yBAAyB,KAAA,GAAW,cAAc,KAAK,oBAAoB;EACpF,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,eAAe,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC;EAE/E,MAAM,QAAQ,IAAI;GAChB,KAAK,gBAAgB,UAAU;GAC/B,KAAK,kBAAkB,UAAU;GACjC,KAAK,iBAAiB,UAAU;GAChC,KAAK,kBAAkB,UAAU;EACnC,CAAC;EACD,MAAM,KAAK,IAAI,QAAQ;EACvB,MAAM,KAAK,GAAG,MAAM;CACtB;;CAGA,MAAa,2BAA2B;EACtC,MAAM,KAAK,MAAM;CACnB;;;CAIA,OAAc,sBAA8B;EAC1C,OAAOC,2BAAAA,iBAAiB,eAAe;CACzC;;CAGA,IAAW,uBAA6C;EACtD,OAAO,KAAK,IAAI;CAClB;;CAGA,aAAoB,KAClB,IACA,SACA,MACsB;EACtB,MAAM,MAAsB;GAC1B,GAAGC,YAAAA;GACH,GAAGC,YAAAA,2BAA2B,OAAO;GACrC,GAAG;EACL;EAGA,IAAI,mBAAmB,UAAUC,gBAAAA,cAAc,CAAC,CAAC;EACjD,IAAI,SAAS,uBAAuBA,gBAAAA,cAAc,CAAC,CAAC;EAEpD,IACE,IAAI,mBAAmB,kBAAkB,KAAA,KACzCA,gBAAAA,cAAc,CAAC,CAAC,sBAAsB,KAAA,GAEtC,IAAI,mBAAmB,gBAAgBA,gBAAAA,cAAc,CAAC,CAAC;EAEzD,MAAM,EAAE,UAAU,eAAe,iBAAiB,MAAM,GAAG,YACzD,oBACA,OAAO,OAAO;GAGZ,MAAM,WAAW,OACf,WACA,SACgE;IAChE,MAAM,KAAA,GAAA,0BAAA,MAAA,CAAU,GAAG,YAAY,SAAS;IACxC,GAAG,YAAY,GAAG,SAAS;IAC3B,MAAM,QAAQ,MAAM,GAAG,SAAS,CAAC;IACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,MAAM,KAAK,GAAG;KACvC,MAAM,MAAM,GAAG,gBAAgB,IAAI;KACnC,GAAG,KAAK,GAAG;KACX,GAAG,SAAS,GAAG,GAAG;KAClB,OAAO,EAAE,IAAI;IACf;IACA,OAAO,EAAE,UAAU,MAAM,MAAM;GACjC;GAEA,MAAM,YAAY,MAAM,SAASC,qBAAAA,eAAeC,qBAAAA,oBAAoB;GACpE,MAAM,UAAU,MAAM,SAASC,sBAAAA,oBAAoBC,sBAAAA,yBAAyB;GAC5E,MAAM,SAAS,MAAM,SAASC,sBAAAA,mBAAmBC,sBAAAA,wBAAwB;GAEzE,MAAM,GAAG,OAAO;GAEhB,OAAO;IACL,UAAU,UAAU,YAAa,MAAM,UAAU,IAAK;IACtD,cAAc,OAAO,YAAa,MAAM,OAAO,IAAK;IACpD,eAAe,QAAQ,YAAa,MAAM,QAAQ,IAAK;GACzD;EACF,CACF;EAEA,MAAM,SAAS,IAAI;EAEnB,MAAM,YAAY,MAAMC,mBAAAA,cAAc,IAAI,SAAS,IAAI,sBAAsB,GAAG;EAGhF,MAAM,sBAAsB,IAAIC,OAAAA,WAAW,GAAG,cAAc;EAE5D,MAAM,qBAAqB,IAAIC,6BAAAA,mBAAmB,mBAAmB;EAErE,MAAM,aAAa,IAAIC,mBAAAA,kBACrB,oBACA,UAAU,QACV,mBACF;EAEA,MAAM,UAAU,OAAA,GAAA,mBAAA,WAAA,CAAiB;EAEjC,MAAM,sBAAsB,IAAIC,qBAAAA,oBAAoB;EAEpD,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,wBAAwB,CAAC;EACrE,oBAAoB,wBAAwB,0BAA0BC,gCAAAA,wBAAwB;EAC9F,CAAA,GAAA,gCAAA,4BAAA,EAA6B,MAAM,UACjC,oBAAoB,wBAAwB,MAAM,KAAK,CACzD;EAGA,MAAM,kBAAkBC,0BAAAA,2BAA2B,EAAE,OAAO,CAAC;EAE7D,MAAM,MAA8B;GAClC;GACA,sBAAsB,IAAIC,2BAAAA,qBAAqB;GAC/C,QAAQ,UAAU;GAClB;GACA,gBAAgB,GAAG;GACnB;GACA;GACA;GACA,wBAAwB,UAAU;GAClC;GACA,oBAAoB,IAAIC,gBAAAA,mBAAmB,oBAAoB,QAAQ;IACrE,UAAU,IAAI;IACd,MAAM;IACN,wBAAwB,IAAI;GAC9B,CAAC;GACD;GACA;GACA;GACA,eAAe,IAAIC,uBAAAA,cAAc,SAAS,MAAM;GAChD,SAAS,YAAY;IACnB,MAAM,gBAAgB,QAAQ;IAC9B,MAAM,oBAAoB,QAAQ;IAClC,MAAM,UAAU,QAAQ;GAC1B;EACF;EAEA,MAAM,iBAAiB,IAAIC,2BAAAA,eAA4B,CAAC,CAAC;EACzD,MAAM,gBAAgB,MAAMC,qBAAAA,kBAAkB,IAAI,UAAU,gBAAgB,GAAG;EAG/E,MAAM,aAAa,MAAMC,qBAAAA,qBAAqB,IAAI,eAAe,GAAG;EACpE,MAAM,mBAAmB,MAAMC,qBAAAA,uBAAuB,IAAI,cAAc,GAAG;EAC3E,MAAM,oBAAoB,MAAMC,qBAAAA,wBAAwB,IAAI,GAAG;EAC/D,MAAM,gBAAgBC,qBAAAA,8BACpB,mBACA,kBACA,GAAG,cAAc,QACnB;EACA,MAAM,gBAAgBC,qBAAAA,8BAA8B,iBAAiB;EAErE,OAAO,IAAI,YACT,KACA,WACA,UAAU,QACV,UACA,eACA,cACA,gBACA,cAAc,MACd,WAAW,MACX,kBACA,mBACA,oBACA,cAAc,YACd,WAAW,YACX,eACA,aACF;CACF;AACF"}
+{"version":3,"file":"middle_layer.cjs","names":["canGrantToEveryone","canImpersonate","LRUCache","createProject","withProjectAuthored","ProjectMetaKey","isNotNullSignedResourceId","duplicateProject","ensureProjectListRid","buildShareEnvelope","GrantType","isEnvelopeProjectField","envelopeProjectFieldUuid","isAcceptanceField","acceptanceFieldLogin","decodeEnvelopeData","copyEnvelopeProjectsIntoList","resourceIdsToStrings","Project","HmacSha256Signer","DefaultMiddleLayerOpsSettings","DefaultMiddleLayerOpsPaths","getDebugFlags","ProjectsField","ProjectsResourceType","SharingOutboxField","SharingOutboxResourceType","SharingStateField","SharingStateResourceType","initDriverKit","RetryAgent","V2RegistryProvider","BlockPackPreparer","RuntimeCapabilities","REQUIRES_PFRAMES_VERSION","createModelServiceRegistry","BlockEventDispatcher","BlockUpdateWatcher","ProjectHelper","WatchableValue","createProjectList","createOutgoingShares","createSharingStateTree","createPendingSharesTree","createPendingSharesComputable","createLiveEnvelopesComputable"],"sources":["../../src/middle_layer/middle_layer.ts"],"sourcesContent":["import type {\n  PlClient,\n  PlTransaction,\n  SignedResourceId,\n  ResourceRef,\n  Role,\n} from \"@milaboratories/pl-client\";\nimport {\n  isEveryoneUserLogin,\n  field,\n  GrantType,\n  isNotNullSignedResourceId,\n  isNullSignedResourceId,\n  resourceIdToString,\n} from \"@milaboratories/pl-client\";\nimport { LRUCache } from \"lru-cache\";\nimport {\n  createProjectList,\n  ensureProjectListRid,\n  ProjectsField,\n  ProjectsResourceType,\n} from \"./project_list\";\nimport { createProject, duplicateProject, withProjectAuthored } from \"../mutator/project\";\nimport { ProjectMetaKey } from \"../model/project_model\";\nimport type { ProjectId } from \"../model/project_model\";\nimport type { SynchronizedTreeState } from \"@milaboratories/pl-tree\";\nimport {\n  acceptanceFieldLogin,\n  canGrantToEveryone,\n  canImpersonate,\n  decodeEnvelopeData,\n  isAcceptanceField,\n  SharingOutboxField,\n  SharingOutboxResourceType,\n  SharingStateField,\n  SharingStateResourceType,\n  type EnvelopeAcceptance,\n  type EnvelopeData,\n  type ProjectChangeAction,\n  type ProjectFieldUuid,\n  type ShareId,\n  type ShareProjectsOptions,\n} from \"../model/sharing_model\";\nimport {\n  buildShareEnvelope,\n  copyEnvelopeProjectsIntoList,\n  envelopeProjectFieldUuid,\n  isEnvelopeProjectField,\n  resourceIdsToStrings,\n  writeEnvelopeAcceptance,\n  writeSharingDecision,\n  type EnvelopeProjectSource,\n} from \"../mutator/sharing\";\nimport type { LiveEnvelope, OutgoingShare, PendingShare } from \"./sharing_list\";\nimport {\n  createLiveEnvelopesComputable,\n  createOutgoingShares,\n  createPendingSharesComputable,\n  createPendingSharesTree,\n  createSharingStateTree,\n} from \"./sharing_list\";\nimport { BlockPackPreparer } from \"../mutator/block-pack/block_pack\";\nimport type { MiLogger, Signer } from \"@milaboratories/ts-helpers\";\nimport { BlockEventDispatcher, cachedDeserialize } from \"@milaboratories/ts-helpers\";\nimport { HmacSha256Signer } from \"@milaboratories/ts-helpers\";\nimport type { Computable, ComputableStableDefined } from \"@milaboratories/computable\";\nimport { WatchableValue } from \"@milaboratories/computable\";\nimport { Project } from \"./project\";\nimport type { MiddleLayerOps, MiddleLayerOpsConstructor } from \"./ops\";\nimport { DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings } from \"./ops\";\nimport { randomUUID } from \"node:crypto\";\nimport type { ProjectListEntry } from \"../model\";\nimport type {\n  AuthorMarker,\n  ProjectMeta,\n  BlockPlatform,\n} from \"@milaboratories/pl-model-middle-layer\";\nimport { BlockUpdateWatcher } from \"../block_registry/watcher\";\nimport type { QuickJSWASMModule } from \"quickjs-emscripten\";\nimport { getQuickJS } from \"quickjs-emscripten\";\nimport type { MiddleLayerDriverKit } from \"./driver_kit\";\nimport { initDriverKit } from \"./driver_kit\";\nimport type { BlockCodeFeatureFlags, DriverKit, SupportedRequirement } from \"@platforma-sdk/model\";\nimport { RuntimeCapabilities } from \"@platforma-sdk/model\";\nimport {\n  type ModelServiceRegistry,\n  registerServiceCapabilities,\n  REQUIRES_PFRAMES_VERSION,\n} from \"@milaboratories/pl-model-common\";\nimport { createModelServiceRegistry } from \"../service_factories\";\nimport type { DownloadUrlDriver } from \"@milaboratories/pl-drivers\";\nimport { V2RegistryProvider } from \"../block_registry\";\nimport type { Dispatcher } from \"undici\";\nimport { RetryAgent } from \"undici\";\nimport { getDebugFlags } from \"../debug\";\nimport { ProjectHelper } from \"../model/project_helper\";\n\nexport interface MiddleLayerEnvironment {\n  dispose(): Promise<void>;\n  readonly pl: PlClient;\n  readonly runtimeCapabilities: RuntimeCapabilities;\n  readonly logger: MiLogger;\n  readonly blockEventDispatcher: BlockEventDispatcher;\n  readonly httpDispatcher: Dispatcher;\n  readonly retryHttpDispatcher: Dispatcher;\n  readonly signer: Signer;\n  readonly ops: MiddleLayerOps;\n  readonly bpPreparer: BlockPackPreparer;\n  readonly frontendDownloadDriver: DownloadUrlDriver;\n  readonly blockUpdateWatcher: BlockUpdateWatcher;\n  readonly quickJs: QuickJSWASMModule;\n  readonly driverKit: MiddleLayerDriverKit;\n  readonly serviceRegistry: ModelServiceRegistry;\n  readonly projectHelper: ProjectHelper;\n}\n\n/**\n * Main access object to work with pl from UI.\n *\n * It implements an abstraction layer of projects and blocks.\n *\n * As a main entry point inside the pl, this object uses a resource attached\n * via the {@link ProjectsField} to the pl client's root, this resource\n * contains project list.\n *\n * Read about alternative roots, if isolated project lists (working environments)\n * are required.\n * */\nexport class MiddleLayer {\n  public readonly pl: PlClient;\n\n  private constructor(\n    private readonly env: MiddleLayerEnvironment,\n    public readonly driverKit: DriverKit,\n    public readonly signer: Signer,\n    private readonly projectListResourceId: SignedResourceId,\n    private readonly sharingOutboxResourceId: SignedResourceId,\n    private readonly sharingStateResourceId: SignedResourceId,\n    private readonly openedProjectsList: WatchableValue<ProjectId[]>,\n    private readonly projectListTree: SynchronizedTreeState,\n    private readonly sharingOutboxTree: SynchronizedTreeState,\n    private readonly sharingStateTree: SynchronizedTreeState,\n    private readonly pendingSharesTree: SynchronizedTreeState,\n    public readonly blockRegistryProvider: V2RegistryProvider,\n    /** Contains a reactive list of projects along with their meta information. */\n    public readonly projectList: ComputableStableDefined<ProjectListEntry[]>,\n    /** Reactive view of the donor's outbox — the shares this user has created.\n     *  v1: API only, no UI. */\n    public outgoingShares: Computable<OutgoingShare[] | undefined>,\n    /** Envelopes granted to this user, not yet accepted or rejected. Fed by the\n     *  shared-resource discovery tree. */\n    public pendingShares: Computable<PendingShare[] | undefined>,\n    /** Internal: the acceptor's currently-live envelopes, read from the same shared-resource\n     *  discovery tree as {@link pendingShares}. The single source the accept/reject flow resolves\n     *  live envelopes from — no second discovery path. */\n    private readonly liveEnvelopes: Computable<LiveEnvelope[] | undefined>,\n  ) {\n    this.pl = this.env.pl;\n    this.startEnvelopeCleanup();\n  }\n\n  /**\n   * Get the OS where backend is running.\n   * For old backend versions returns undefined.\n   */\n  public get serverPlatform(): BlockPlatform | undefined {\n    return this.pl.serverInfo.platform as BlockPlatform | undefined;\n  }\n\n  /**\n   * Runtime capabilities advertised by the connected backend (tokens of\n   * the form `<feature>:<version>`, e.g. \"wasm:v1\"). Empty list if the\n   * backend predates the capability mechanism — that's the desired\n   * fail-closed behaviour for blocks declaring any `requiredCapabilities`.\n   */\n  public get serverCapabilities(): string[] {\n    return this.pl.serverInfo.capabilities ?? [];\n  }\n\n  /**\n   * Login of the authenticated user, for the \"Signed in as\" UI. `null` when the\n   * backend has no auth (local/dev mode) — the UI hides the element.\n   */\n  public get currentUserLogin(): string | null {\n    return this.pl.userResources.authUser;\n  }\n\n  /**\n   * Whether the connected backend supports project sharing. Synthetic — computed\n   * in the middle layer from the backend capabilities the share flow needs (the\n   * cross-color field-reference relaxation the accept flow rests on). It can absorb\n   * additional required capabilities later without a UI change.\n   */\n  public get sharingSupported(): boolean {\n    // Sharing does not compose with impersonation (discovery is scoped to the admin's session,\n    // decisions attribute to the admin), so it is disabled while impersonating. Admins move\n    // projects across roots with duplicateProjectToUser instead.\n    return this.serverCapabilities.includes(\"crossTreeRefs:v1\") && !this.impersonating;\n  }\n\n  /** True when this session is impersonating another user (an admin opened another user's root). */\n  public get impersonating(): boolean {\n    return this.pl.conf.asUser !== undefined;\n  }\n\n  /**\n   * Role of the authenticated user, from the `GetSessionInfo` RPC surfaced through the\n   * pl-client. `null` in no-auth mode (when {@link currentUserLogin} is null).\n   */\n  public get currentUserRole(): Role | null {\n    return this.pl.currentUserRole;\n  }\n\n  /**\n   * Whether the UI offers share-with-everybody — no role policy lives in the UI:\n   *   serverCapabilities.has(\"publicGrants:v1\") && canGrantToEveryone(currentUserRole)\n   * Not a security boundary: a crafted call still hits the backend's role +\n   * permission-ceiling gate.\n   */\n  public get canShareWithEveryone(): boolean {\n    return (\n      !this.impersonating &&\n      this.serverCapabilities.includes(\"publicGrants:v1\") &&\n      canGrantToEveryone(this.currentUserRole)\n    );\n  }\n\n  /**\n   * Whether the authenticated user may impersonate others (open another user's root). Mirrors\n   * the backend's `CanImpersonate` role gate — admin/controller only, never a regular user.\n   * Derived from the session role, which stays the authenticated admin's even while\n   * impersonating, so this stays true across a switch: the \"return to my root\" affordance must\n   * not vanish mid-impersonation. Not a security boundary; the backend re-checks on every call.\n   */\n  public get currentUserCanImpersonate(): boolean {\n    return canImpersonate(this.currentUserRole);\n  }\n\n  /** Adds a runtime capability to the middle layer. */\n  public addRuntimeCapability(\n    requirement: SupportedRequirement,\n    value: number | boolean = true,\n  ): void {\n    this.env.runtimeCapabilities.addSupportedRequirement(requirement, value);\n  }\n\n  /** Checks if the given block feature flags are compatible with the runtime capabilities. */\n  public checkBlockCompatibility(featureFlags: BlockCodeFeatureFlags | undefined): boolean {\n    return this.env.runtimeCapabilities.checkCompatibility(featureFlags);\n  }\n\n  /** Returns extended API driver kit used internally by middle layer. */\n  public get internalDriverKit(): MiddleLayerDriverKit {\n    return this.env.driverKit;\n  }\n\n  /** Returns the service registry for service introspection. */\n  public get serviceRegistry(): ModelServiceRegistry {\n    return this.env.serviceRegistry;\n  }\n\n  //\n  // ProjectId ↔ SignedResourceId resolution\n  //\n\n  private readonly projectIdCache = new LRUCache<ProjectId, SignedResourceId>({ max: 1024 });\n\n  /** Resolves a ProjectId to a signed SignedResourceId.\n   * Uses LRU cache with TX-scan fallback. */\n  private async resolveProjectId(projectId: ProjectId): Promise<SignedResourceId> {\n    const cached = this.projectIdCache.get(projectId);\n    if (cached !== undefined) return cached;\n\n    // Cache miss — scan project list fields to find the matching resource\n    const rid = await this.pl.withReadTx(\"ResolveProjectId\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (projectId as string)) return f.value;\n      }\n      throw new Error(`Project ${projectId} not found in project list.`);\n    });\n\n    this.projectIdCache.set(projectId, rid);\n    return rid;\n  }\n\n  //\n  // Project List Manipulation\n  //\n\n  /** Creates a project with initial state and adds it to project list. */\n  public async createProject(meta: ProjectMeta): Promise<ProjectId> {\n    let prj: ResourceRef;\n    await this.pl.withWriteTx(\"MLCreateProject\", async (tx) => {\n      prj = await createProject(tx, meta);\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", prj);\n      await tx.commit();\n    });\n    await this.projectListTree.refreshState();\n\n    const signedRid = await prj!.globalId;\n    const projectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(projectId, signedRid);\n    return projectId;\n  }\n\n  /** Updates project metadata */\n  public async setProjectMeta(\n    id: ProjectId,\n    meta: ProjectMeta,\n    author?: AuthorMarker,\n  ): Promise<void> {\n    const rid = await this.resolveProjectId(id);\n    await withProjectAuthored(\n      this.env.projectHelper,\n      this.pl,\n      rid,\n      author,\n      (prj) => {\n        prj.setMeta(meta);\n      },\n      { name: \"setProjectMeta\" },\n    );\n    await this.projectListTree.refreshState();\n  }\n\n  /** Permanently deletes project from the project list, this will result in\n   * destruction of all attached objects, like files, analysis results etc. */\n  public async deleteProject(id: ProjectId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRemoveProject\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      let fieldName: string | undefined;\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (id as string)) {\n          fieldName = f.name;\n          break;\n        }\n      }\n      if (fieldName === undefined) throw new Error(`Project ${id} not found in project list.`);\n      tx.removeField(field(this.projectListResourceId, fieldName));\n      await tx.commit();\n    });\n    this.projectIdCache.delete(id);\n    await this.projectListTree.refreshState();\n  }\n\n  /**\n   * Duplicates an existing project and adds the copy to this user's project list.\n   *\n   * @param srcProjectId - project id of the project to duplicate\n   * @param rename - optional function that receives the source label and all existing\n   *   project labels (read within the same transaction), and returns the label for the copy\n   */\n  public async duplicateProject(\n    srcProjectId: ProjectId,\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<ProjectId> {\n    const sourceRid = await this.resolveProjectId(srcProjectId);\n\n    const newPrj: ResourceRef = await this.pl.withWriteTx(\"MLDuplicateProject\", async (tx) => {\n      // Read source project meta\n      const sourceMeta = await tx.getKValueJson<ProjectMeta>(sourceRid, ProjectMetaKey);\n\n      // Read all existing project labels from the project list (parallel reads)\n      const projectListData = await tx.getResourceData(this.projectListResourceId, true);\n      const projectRids = projectListData.fields\n        .map((f) => f.value)\n        .filter(isNotNullSignedResourceId);\n      const existingLabels = (\n        await Promise.all(\n          projectRids.map((rid) => tx.getKValueJson<ProjectMeta>(rid, ProjectMetaKey)),\n        )\n      ).map((m) => m.label);\n\n      // Compute new label\n      const newLabel = rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label;\n\n      // Create the duplicate\n      const newPrj = await duplicateProject(tx, sourceRid, { label: newLabel });\n\n      // Attach to project list with a random UUID field name\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", newPrj);\n      await tx.commit();\n\n      return newPrj;\n    });\n\n    await this.projectListTree.refreshState();\n\n    const signedRid = await newPrj.globalId;\n    const newProjectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(newProjectId, signedRid);\n    return newProjectId;\n  }\n\n  /**\n   * Duplicates a project into another user's root, minted in the TARGET user's color so the target\n   * owns it. Sibling of {@link duplicateProject}, but writes into a different root. The source\n   * project (on the current client root) is referenced cross-color for its block data, kept alive\n   * by refcounting, exactly like accepting a shared project. Works both ways: pull (while\n   * impersonating a user, copy their project to yourself) and push (from your own root, copy a\n   * project to a user). Admin cross-root op; requires the crossTreeRefs:v1 backend capability.\n   */\n  public async duplicateProjectToUser(\n    srcProjectId: ProjectId,\n    targetLogin: string,\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<void> {\n    if (!this.serverCapabilities.includes(\"crossTreeRefs:v1\"))\n      throw new Error(\"duplicateProjectToUser requires the crossTreeRefs:v1 backend capability.\");\n\n    const sourceRid = await this.resolveProjectId(srcProjectId);\n    const targetRoot = await this.pl.getUserRoot({ login: targetLogin, createIfNotExists: true });\n\n    // Run on the target root: the tx default color is the target's, so the new project (and the\n    // target's project list, if created here) are minted in the target's color.\n    await this.pl.withWriteTxOnRoot(targetRoot, \"MLDuplicateProjectToUser\", async (tx) => {\n      // Resolve or lazily create the target root's project list (tx.clientRoot === targetRoot).\n      const targetProjectListRid = await ensureProjectListRid(tx);\n\n      // Source label + the target's existing labels, for collision-aware renaming.\n      const sourceMeta = await tx.getKValueJson<ProjectMeta>(sourceRid, ProjectMetaKey);\n      const targetListData = await tx.getResourceData(targetProjectListRid, true);\n      const existingLabels = (\n        await Promise.all(\n          targetListData.fields\n            .map((f) => f.value)\n            .filter(isNotNullSignedResourceId)\n            .map((rid) => tx.getKValueJson<ProjectMeta>(rid, ProjectMetaKey)),\n        )\n      ).map((m) => m.label);\n      const newLabel = rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label;\n\n      const newPrj = await duplicateProject(tx, sourceRid, { label: newLabel });\n      tx.createField(field(targetProjectListRid, randomUUID()), \"Dynamic\", newPrj);\n      await tx.commit();\n    });\n  }\n\n  //\n  // Project Sharing (Copy & Share)\n  //\n\n  /**\n   * Shares the given projects (Copy & Share). Snapshots the projects, creates one envelope, and\n   * grants it — all in one atomic write transaction, so a failed grant rolls the whole thing back\n   * and the outbox is left as it was.\n   *\n   * Two variants (see {@link ShareProjectsOptions}):\n   * - `{ recipients }` — one writable grant per named recipient; the envelope expires after the\n   *   default TTL (`sharedAt + envelopeTtlMs`).\n   * - `{ everyone: true }` — one make-public grant (backend rewrites the target to the\n   *   everyone-user); the envelope's `expiresAt` is `null`, so it never expires.\n   *\n   * v1 always passes `mode: \"copy\"`.\n   */\n  public async shareProjects(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    if (projectIds.length === 0) throw new Error(\"shareProjects: no projects given\");\n\n    // Everyone + replace: refresh the existing everyone-share of this project under its stable\n    // shareId (so recipients who already decided aren't re-prompted), if one exists. Found\n    // automatically by project overlap; falls through to a fresh share when none exists.\n    if (\"everyone\" in options && options.replace) {\n      const priorEveryone = (await this.findSupersedableEnvelopes(projectIds)).find(\n        (p) => p.everyone,\n      );\n      if (priorEveryone !== undefined) {\n        await this.changeShare(priorEveryone.shareId, { title: options.title });\n        return;\n      }\n    }\n\n    await this.createNewShare(projectIds, options);\n  }\n\n  /**\n   * Mints a fresh share: snapshots the projects into one new envelope (a fresh shareId),\n   * supersedes prior shares of the same project, and grants it — all in one atomic write\n   * transaction, so a failed grant rolls the whole thing back and the outbox is left as it was.\n   * The everyone-refresh path is the {@link changeShare} branch of {@link shareProjects}; this is\n   * the mint-a-new-envelope branch.\n   */\n  private async createNewShare(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    const everyone = \"everyone\" in options;\n    const sources: EnvelopeProjectSource[] = await Promise.all(\n      projectIds.map(\n        async (id): Promise<EnvelopeProjectSource> => ({\n          kind: \"fresh\",\n          projectId: id,\n          sourceRid: await this.resolveProjectId(id),\n        }),\n      ),\n    );\n    const sender = this.currentUserLogin ?? \"\";\n    // Targeted share: sharedAt + ttl. Share-with-everybody: never expires (null).\n    const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n    // Supersede prior shares of the same project(s) so they never pile up. Resolved before\n    // the write tx (ListGrants is a separate RPC). Everyone-share supersedes a prior\n    // everyone-share of the same project; a targeted share pulls each named recipient out of\n    // any prior share of that project, deleting that share if it ends up with no recipients.\n    const priors = await this.findSupersedableEnvelopes(projectIds);\n\n    await this.pl.withWriteTx(\"MLShareProjects\", async (tx) => {\n      if (everyone) {\n        for (const prior of priors) {\n          if (prior.everyone) tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n        }\n      } else {\n        const newRecipients = new Set(options.recipients);\n        for (const prior of priors) {\n          if (prior.everyone) continue; // a single user can't be pulled from an everyone-grant\n          const toRemove = prior.recipients.filter((u) => newRecipients.has(u));\n          if (toRemove.length === 0) continue;\n          const remaining = prior.recipients.filter((u) => !newRecipients.has(u));\n          if (remaining.length === 0) {\n            // Nobody left on the old share — drop the whole envelope.\n            tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n          } else {\n            for (const u of toRemove) tx.revokeAccess(prior.rid, u);\n          }\n        }\n      }\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: options.mode,\n        sender,\n        title: options.title,\n        expiresAt,\n      });\n\n      // Grant in the same transaction (writable: the cross-color accept rule demands a writable\n      // grant on the envelope). Atomic with the create.\n      const envelopeGid = await envelope.globalId;\n      if (everyone) {\n        // One everyone-grant: empty/ignored target, ANY_AUTHORISED. The backend rewrites\n        // the target to the everyone-user; gated by role + permission ceiling.\n        tx.grantAccess(envelopeGid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      } else {\n        for (const recipient of options.recipients) {\n          tx.grantAccess(envelopeGid, recipient, { writable: true });\n        }\n      }\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Changes a share in place (same {@link ShareId}), in one write transaction: re-snapshots live\n   * source projects and carries deleted ones' snapshots forward; applies edited recipients/title;\n   * transfers already-decided recipients' accept/reject records (they keep their copy and aren't\n   * re-prompted); re-grants; drops the old envelope.\n   *\n   * `opts.recipients` is the full targeted set (decided users are always kept). `opts.title`\n   * replaces the title — omit keeps the current one. `opts.everyone` upgrades targeted ->\n   * everyone; the reverse is impossible and ignored.\n   *\n   * `opts.projectActions` is a per-source-project decision, keyed by projectId: `update`\n   * re-snapshots the live source (falls back to carry if the source is gone), `keep` carries the\n   * existing snapshot (and its timestamp), `remove` drops the project from the pack. A project not\n   * in the map defaults to `keep`. Omit the whole map for the legacy auto behavior (live sources\n   * updated, gone ones kept) — the everyone-refresh path relies on that.\n   */\n  public async changeShare(\n    shareId: ShareId,\n    opts: {\n      recipients?: string[];\n      everyone?: boolean;\n      title?: string;\n      projectActions?: Record<ProjectId, ProjectChangeAction>;\n    } = {},\n  ): Promise<void> {\n    await this.pl.withWriteTx(\"MLChangeShare\", async (tx) => {\n      const old = await this.resolveOutboxEnvelope(tx, shareId);\n      if (old === undefined)\n        throw new Error(`changeShare: no live share with id ${shareId} in the outbox.`);\n\n      const self = this.currentUserLogin ?? \"\";\n      const grants = await tx.listGrants(old.rid);\n      // A targeted share may be upgraded to everyone; an everyone-share can't be narrowed back.\n      const everyone = grants.some((g) => isEveryoneUserLogin(g.user)) || opts.everyone === true;\n\n      // Read the old envelope's project snapshots (uuid -> rid) and accept/reject records.\n      const oldRd = await tx.getResourceData(old.rid, true);\n      const snapshotByUuid = new Map<string, SignedResourceId>();\n      const acceptances: { login: string; acc: EnvelopeAcceptance }[] = [];\n      for (const f of oldRd.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (isEnvelopeProjectField(f.name)) {\n          snapshotByUuid.set(envelopeProjectFieldUuid(f.name), f.value);\n        } else if (isAcceptanceField(f.name)) {\n          const raw = (await tx.getResourceData(f.value, false)).data;\n          if (raw === undefined) continue;\n          acceptances.push({\n            login: acceptanceFieldLogin(f.name),\n            acc: cachedDeserialize(raw) as EnvelopeAcceptance,\n          });\n        }\n      }\n      const decidedLogins = acceptances.map((a) => a.login);\n\n      // Everyone-shares ignore recipients; targeted shares keep decided users plus the edited set.\n      const priorRecipients = grants\n        .filter((g) => !isEveryoneUserLogin(g.user) && g.user !== self)\n        .map((g) => g.user);\n      const recipients = everyone\n        ? []\n        : Array.from(new Set([...(opts.recipients ?? priorRecipients), ...decidedLogins]));\n\n      // Live source projects by persistable id — these get a fresh snapshot.\n      const liveProjects = new Map<string, SignedResourceId>();\n      const projList = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of projList.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        liveProjects.set(resourceIdToString(f.value), f.value);\n      }\n\n      // Per project (keyed by field uuid), apply the caller's decision (default `keep`); with no\n      // projectActions map, fall back to the legacy auto behavior: update a live source, keep a gone one.\n      const actions = opts.projectActions;\n      const sources: EnvelopeProjectSource[] = [];\n      for (const uuid of Object.keys(old.data.projects) as ProjectFieldUuid[]) {\n        const { label, source, updatedAt } = old.data.projects[uuid];\n        const liveRid = liveProjects.get(source);\n\n        const action = actions\n          ? (actions[source] ?? \"keep\")\n          : liveRid !== undefined\n            ? \"update\"\n            : \"keep\";\n        if (action === \"remove\") continue;\n\n        if (action === \"update\" && liveRid !== undefined) {\n          sources.push({ kind: \"fresh\", projectId: source, sourceRid: liveRid });\n        } else {\n          // keep, or an \"update\" whose source vanished before commit (deleted meanwhile, e.g. from\n          // another client): carry the prior snapshot. Liveness is read inside this write tx — race-safe.\n          const snapshotRid = snapshotByUuid.get(uuid);\n          if (snapshotRid !== undefined)\n            sources.push({ kind: \"carry\", projectId: source, label, snapshotRid, updatedAt });\n        }\n      }\n\n      // Omit (undefined) keeps the current title; a provided value replaces it.\n      const title = opts.title === undefined ? old.data.title : opts.title.trim();\n      const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n      // Same shareId, same outbox field name — detach the old field before rebuilding, or they collide.\n      tx.removeField(field(this.sharingOutboxResourceId, old.fieldName));\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: old.data.mode,\n        sender: self,\n        title,\n        expiresAt,\n        shareId, // SAME shareId — the essence of change\n      });\n\n      // Transfer the decided users' records onto the new envelope (donor-written copies).\n      for (const { login, acc } of acceptances) {\n        if (!everyone && !recipients.includes(login)) continue;\n        writeEnvelopeAcceptance(tx, envelope, login, acc.action, acc.timestamp);\n      }\n\n      const gid = await envelope.globalId;\n      if (everyone) tx.grantAccess(gid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      else for (const r of recipients) tx.grantAccess(gid, r, { writable: true });\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Finds the donor's own outgoing envelopes built from any of the given source projects —\n   * the supersede candidates for a fresh share of the same project(s). Reads each envelope's\n   * recipient set via `ListGrants` so the caller can pull individual recipients or detect an\n   * everyone-share.\n   */\n  private async findSupersedableEnvelopes(projectIds: ProjectId[]): Promise<\n    {\n      fieldName: string;\n      rid: SignedResourceId;\n      shareId: ShareId;\n      everyone: boolean;\n      recipients: string[];\n    }[]\n  > {\n    const wanted = new Set(projectIds);\n\n    const matched = await this.pl.withReadTx(\"MLFindSupersede\", async (tx) => {\n      const outbox = await tx.getResourceData(this.sharingOutboxResourceId, true);\n      const out: { fieldName: string; rid: SignedResourceId; shareId: ShareId }[] = [];\n      for (const f of outbox.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        const rd = await tx.getResourceData(f.value, false);\n        if (rd.data === undefined) continue;\n        const data = decodeEnvelopeData(rd.data);\n        if (Object.values(data.projects).some((p) => wanted.has(p.source)))\n          out.push({ fieldName: f.name, rid: f.value, shareId: data.shareId });\n      }\n      return out;\n    });\n\n    return await Promise.all(\n      matched.map(async ({ fieldName, rid, shareId }) => {\n        const grants = await this.pl.userResources.listGrants(rid);\n        return {\n          fieldName,\n          rid,\n          shareId,\n          everyone: grants.some((g) => isEveryoneUserLogin(g.user)),\n          recipients: grants.filter((g) => !isEveryoneUserLogin(g.user)).map((g) => g.user),\n        };\n      }),\n    );\n  }\n\n  /**\n   * Revokes and deletes an outgoing share for all recipients: detaches and deletes the envelope, and\n   * its grants are revoked along with it. Already-accepted copies are unaffected (ref-counting keeps\n   * the adopted resources alive). Idempotent — revoking a share that is already gone is a no-op.\n   */\n  public async revokeShare(shareId: ShareId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRevokeShare\", async (tx) => {\n      const target = await this.resolveOutboxEnvelope(tx, shareId);\n      if (target === undefined) return;\n      tx.removeField(field(this.sharingOutboxResourceId, target.fieldName));\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Resolves a live envelope from the donor's own outbox by its logical `shareId`, returning the\n   * outbox field name (for detach), the signed envelope id, and its decoded {@link EnvelopeData}.\n   * The outbox is keyed by `{shareId}` directly, but a replaced/legacy share may have drifted, so\n   * we match on the decoded `shareId` rather than the field name alone.\n   */\n  private async resolveOutboxEnvelope(\n    tx: PlTransaction,\n    shareId: ShareId,\n  ): Promise<{ fieldName: string; rid: SignedResourceId; data: EnvelopeData } | undefined> {\n    const outboxData = await tx.getResourceData(this.sharingOutboxResourceId, true);\n    for (const f of outboxData.fields) {\n      if (isNullSignedResourceId(f.value)) continue;\n      const rd = await tx.getResourceData(f.value, false);\n      if (rd.data === undefined) continue;\n      const data = decodeEnvelopeData(rd.data);\n      if (data.shareId === shareId) return { fieldName: f.name, rid: f.value, data };\n    }\n    return undefined;\n  }\n\n  /**\n   * Resolves currently-shared envelopes (granted to this user) to their resource ids, keyed by\n   * the envelope's logical `shareId`.\n   *\n   * Reads the {@link liveEnvelopes} Computable — the same shared-resource discovery tree that\n   * feeds {@link pendingShares}. This is the single discovery mechanism: there is no separate\n   * `ListUserResources` re-stream on every accept/reject. `refreshState()` is awaited first so a\n   * just-granted envelope is observed (the tree's discovery poll may otherwise lag a freshly\n   * landed grant). The tree is gRPC-only, so this is empty on a REST-connected client.\n   */\n  private async resolveLiveEnvelopes(): Promise<Map<ShareId, LiveEnvelope>> {\n    await this.pendingSharesTree.refreshState();\n    const live = (await this.liveEnvelopes.getValue()) ?? [];\n    // Dedup by logical shareId (last writer wins — at most one live envelope per shareId).\n    const map = new Map<ShareId, LiveEnvelope>();\n    for (const e of live) map.set(e.data.shareId, e);\n    return map;\n  }\n\n  /**\n   * Accepts one or more pending shares: duplicates each share's projects into this user's\n   * project list, records the decision per share, and (read-write share) writes the donor-visible\n   * acceptance onto the envelope. Per-share failures (e.g. an expiry race) are collected, not\n   * short-circuited — the rest still get accepted. Accept-all = pass every current pending shareId.\n   *\n   * `rename` resolves label collisions (same callback contract as {@link duplicateProject}), but\n   * the source lives in the envelope tree, so accept calls the low-level mutator directly.\n   */\n  public async acceptShare(\n    shareIds: ShareId[],\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<{ accepted: ProjectId[]; failed: { shareId: ShareId; error: string }[] }> {\n    const live = await this.resolveLiveEnvelopes();\n    const login = this.currentUserLogin;\n\n    const accepted: ProjectId[] = [];\n    const failed: { shareId: ShareId; error: string }[] = [];\n\n    for (const shareId of shareIds) {\n      const envelope = live.get(shareId);\n      if (envelope === undefined) {\n        failed.push({ shareId, error: \"Share is no longer available.\" });\n        continue;\n      }\n      try {\n        const now = Date.now();\n        const createdRids = await this.pl.withWriteTx(\"MLAcceptShare\", async (tx) => {\n          const created = await copyEnvelopeProjectsIntoList(\n            tx,\n            envelope.rid,\n            this.projectListResourceId,\n            rename,\n          );\n\n          // Record the decision on the acceptor's own SharingState, keyed on shareId.\n          writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n            decision: \"accepted\",\n            timestamp: now,\n            envelopeSharedAt: envelope.data.sharedAt,\n            acceptedProjects: resourceIdsToStrings(created),\n          });\n\n          // Read-write share: write the donor-visible acceptance onto the envelope.\n          if (login !== null && envelope.data.mode !== \"read-only\")\n            writeEnvelopeAcceptance(tx, envelope.rid, login, \"accepted\", now);\n\n          await tx.commit();\n          return created;\n        });\n        for (const rid of createdRids) {\n          const projectId = resourceIdToString(rid) as ProjectId;\n          this.projectIdCache.set(projectId, rid);\n          accepted.push(projectId);\n        }\n      } catch (e) {\n        failed.push({ shareId, error: e instanceof Error ? e.message : String(e) });\n      }\n    }\n\n    await Promise.all([this.projectListTree.refreshState(), this.sharingStateTree.refreshState()]);\n    return { accepted, failed };\n  }\n\n  /** Records rejection of a pending share; it never surfaces again. */\n  public async rejectShare(shareId: ShareId): Promise<void> {\n    const live = await this.resolveLiveEnvelopes();\n    const envelope = live.get(shareId);\n    const login = this.currentUserLogin;\n    const now = Date.now();\n\n    await this.pl.withWriteTx(\"MLRejectShare\", async (tx) => {\n      writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n        decision: \"rejected\",\n        timestamp: now,\n        envelopeSharedAt: envelope?.data.sharedAt ?? now,\n        acceptedProjects: [],\n      });\n\n      // Read-write share: write the donor-visible rejection onto the envelope (if still live).\n      if (envelope !== undefined && login !== null && envelope.data.mode !== \"read-only\")\n        writeEnvelopeAcceptance(tx, envelope.rid, login, \"rejected\", now);\n\n      await tx.commit();\n    });\n\n    await this.sharingStateTree.refreshState();\n  }\n\n  //\n  // Outbox cleanup (donor side)\n  //\n\n  private static readonly EnvelopeCleanupIntervalMs = 6 * 3600 * 1000; // every 6h\n  private envelopeCleanupTimer: ReturnType<typeof setInterval> | undefined;\n\n  /** On ML start and every 6h, delete envelopes whose immutable `expiresAt` has passed. */\n  private startEnvelopeCleanup(): void {\n    void this.runEnvelopeCleanup();\n    this.envelopeCleanupTimer = setInterval(() => {\n      void this.runEnvelopeCleanup();\n    }, MiddleLayer.EnvelopeCleanupIntervalMs);\n    // Don't keep the process alive solely for cleanup.\n    this.envelopeCleanupTimer.unref?.();\n  }\n\n  /** Scans the donor's outbox and deletes expired envelopes (backend auto-revokes their grants).\n   *  Envelopes with `expiresAt: null` (share-with-everybody) are skipped. */\n  private async runEnvelopeCleanup(): Promise<void> {\n    try {\n      const now = Date.now();\n      const expired = await this.pl.withReadTx(\"MLEnvelopeCleanupScan\", async (tx) => {\n        const data = await tx.getResourceData(this.sharingOutboxResourceId, true);\n        const toDelete: { fieldName: string }[] = [];\n        for (const f of data.fields) {\n          if (isNullSignedResourceId(f.value)) continue;\n          const rd = await tx.getResourceData(f.value, false);\n          if (rd.data === undefined) continue;\n          const envData = decodeEnvelopeData(rd.data);\n          if (envData.expiresAt === null) continue; // never expires\n          if (envData.expiresAt <= now) toDelete.push({ fieldName: f.name });\n        }\n        return toDelete;\n      });\n\n      if (expired.length === 0) return;\n\n      await this.pl.withWriteTx(\"MLEnvelopeCleanup\", async (tx) => {\n        for (const { fieldName } of expired)\n          tx.removeField(field(this.sharingOutboxResourceId, fieldName));\n        await tx.commit();\n      });\n\n      await this.sharingOutboxTree.refreshState();\n    } catch (e) {\n      this.env.logger.warn(\n        `envelope cleanup failed: ${e instanceof Error ? e.message : String(e)}`,\n      );\n    }\n  }\n\n  //\n  // Projects\n  //\n\n  private readonly openedProjects = new Map<ProjectId, Project>();\n\n  /** Opens a project, and starts corresponding project maintenance loop. */\n  public async openProject(id: ProjectId): Promise<void> {\n    if (this.openedProjects.has(id)) throw new Error(`Project ${id} already opened`);\n    const rid = await this.resolveProjectId(id);\n    this.openedProjects.set(id, await Project.init(this.env, id, rid));\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Closes the project, and deallocate all corresponding resources. */\n  public async closeProject(id: ProjectId): Promise<void> {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    this.openedProjects.delete(id);\n    await prj.destroy();\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Returns a project access object for an opened project. */\n  public getOpenedProject(id: ProjectId): Project {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    return prj;\n  }\n\n  /** Returns true if project with given id is currently opened. */\n  public isProjectOpened(id: ProjectId): boolean {\n    return this.openedProjects.has(id);\n  }\n\n  /**\n   * Deallocates all runtime resources consumed by this object and awaits\n   * actual termination of event loops and other processes associated with\n   * them.\n   */\n  public async close() {\n    if (this.envelopeCleanupTimer !== undefined) clearInterval(this.envelopeCleanupTimer);\n    await Promise.all([...this.openedProjects.values()].map((prj) => prj.destroy()));\n    // this.env.quickJs;\n    await Promise.all([\n      this.projectListTree.terminate(),\n      this.sharingOutboxTree.terminate(),\n      this.sharingStateTree.terminate(),\n      this.pendingSharesTree.terminate(),\n    ]);\n    await this.env.dispose();\n    await this.pl.close();\n  }\n\n  /** @deprecated */\n  public async closeAndAwaitTermination() {\n    await this.close();\n  }\n\n  /** Generates sufficiently random string to be used as local secret for the\n   * middle layer */\n  public static generateLocalSecret(): string {\n    return HmacSha256Signer.generateSecret();\n  }\n\n  /** Returns a block event dispatcher, which can be used to listen to block events. */\n  public get blockEventDispatcher(): BlockEventDispatcher {\n    return this.env.blockEventDispatcher;\n  }\n\n  /** Initialize middle layer */\n  public static async init(\n    pl: PlClient,\n    workdir: string,\n    _ops: MiddleLayerOpsConstructor,\n  ): Promise<MiddleLayer> {\n    const ops: MiddleLayerOps = {\n      ...DefaultMiddleLayerOpsSettings,\n      ...DefaultMiddleLayerOpsPaths(workdir),\n      ..._ops,\n    };\n\n    // overriding debug options from environment variables\n    ops.defaultTreeOptions.logStat = getDebugFlags().logTreeStats;\n    ops.debugOps.dumpInitialTreeState = getDebugFlags().dumpInitialTreeState;\n    // apply MI_TREE_TRAVERSAL only when the embedder hasn't set an explicit mode\n    if (\n      ops.defaultTreeOptions.traversalMode === undefined &&\n      getDebugFlags().treeTraversalMode !== undefined\n    )\n      ops.defaultTreeOptions.traversalMode = getDebugFlags().treeTraversalMode;\n\n    const { projects, sharingOutbox, sharingState } = await pl.withWriteTx(\n      \"MLInitialization\",\n      async (tx) => {\n        // Lazily create each clientRoot-attached singleton resource. Returns the existing\n        // resource id if the field is already populated, otherwise creates + locks + sets it.\n        const lazyInit = async (\n          fieldName: string,\n          type: { name: string; version: string },\n        ): Promise<{ ref?: ResourceRef; existing?: SignedResourceId }> => {\n          const f = field(tx.clientRoot, fieldName);\n          tx.createField(f, \"Dynamic\");\n          const fData = await tx.getField(f);\n          if (isNullSignedResourceId(fData.value)) {\n            const ref = tx.createEphemeral(type);\n            tx.lock(ref);\n            tx.setField(f, ref);\n            return { ref };\n          }\n          return { existing: fData.value };\n        };\n\n        const projectsR = await lazyInit(ProjectsField, ProjectsResourceType);\n        const outboxR = await lazyInit(SharingOutboxField, SharingOutboxResourceType);\n        const stateR = await lazyInit(SharingStateField, SharingStateResourceType);\n\n        await tx.commit();\n\n        return {\n          projects: projectsR.existing ?? (await projectsR.ref!.globalId),\n          sharingState: stateR.existing ?? (await stateR.ref!.globalId),\n          sharingOutbox: outboxR.existing ?? (await outboxR.ref!.globalId),\n        };\n      },\n    );\n\n    const logger = ops.logger;\n\n    const driverKit = await initDriverKit(pl, workdir, ops.frontendDownloadPath, ops);\n\n    // passed to components having no own retry logic\n    const retryHttpDispatcher = new RetryAgent(pl.httpDispatcher);\n\n    const v2RegistryProvider = new V2RegistryProvider(retryHttpDispatcher);\n\n    const bpPreparer = new BlockPackPreparer(\n      v2RegistryProvider,\n      driverKit.signer,\n      retryHttpDispatcher,\n    );\n\n    const quickJs = await getQuickJS();\n\n    const runtimeCapabilities = new RuntimeCapabilities();\n    // add runtime capabilities of model here\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 1);\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresCreatePTable\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresPFramesVersion\", REQUIRES_PFRAMES_VERSION);\n    registerServiceCapabilities((flag, value) =>\n      runtimeCapabilities.addSupportedRequirement(flag, value),\n    );\n    // runtime capabilities of the desktop are to be added by the desktop app / test framework\n\n    const serviceRegistry = createModelServiceRegistry({ logger });\n\n    const env: MiddleLayerEnvironment = {\n      pl,\n      blockEventDispatcher: new BlockEventDispatcher(),\n      signer: driverKit.signer,\n      logger,\n      httpDispatcher: pl.httpDispatcher,\n      retryHttpDispatcher,\n      ops,\n      bpPreparer,\n      frontendDownloadDriver: driverKit.frontendDriver,\n      driverKit,\n      blockUpdateWatcher: new BlockUpdateWatcher(v2RegistryProvider, logger, {\n        minDelay: ops.devBlockUpdateRecheckInterval,\n        http: retryHttpDispatcher,\n        preferredUpdateChannel: ops.preferredUpdateChannel,\n      }),\n      runtimeCapabilities,\n      serviceRegistry,\n      quickJs,\n      projectHelper: new ProjectHelper(quickJs, logger),\n      dispose: async () => {\n        await serviceRegistry.dispose();\n        await retryHttpDispatcher.destroy();\n        await driverKit.dispose();\n      },\n    };\n\n    const openedProjects = new WatchableValue<ProjectId[]>([]);\n    const projectListTC = await createProjectList(pl, projects, openedProjects, env);\n\n    // Project sharing trees and reactive views.\n    const outgoingTC = await createOutgoingShares(pl, sharingOutbox, env);\n    const sharingStateTree = await createSharingStateTree(pl, sharingState, env);\n    const pendingSharesTree = await createPendingSharesTree(pl, env);\n    const pendingShares = createPendingSharesComputable(\n      pendingSharesTree,\n      sharingStateTree,\n      pl.userResources.authUser,\n    );\n    const liveEnvelopes = createLiveEnvelopesComputable(pendingSharesTree);\n\n    return new MiddleLayer(\n      env,\n      driverKit,\n      driverKit.signer,\n      projects,\n      sharingOutbox,\n      sharingState,\n      openedProjects,\n      projectListTC.tree,\n      outgoingTC.tree,\n      sharingStateTree,\n      pendingSharesTree,\n      v2RegistryProvider,\n      projectListTC.computable,\n      outgoingTC.computable,\n      pendingShares,\n      liveEnvelopes,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgIA,IAAa,cAAb,MAAa,YAAY;CAIJ;CACD;CACA;CACC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;CAEA;CAGT;CAGA;CAIU;CA1BnB;CAEA,YACE,KACA,WACA,QACA,uBACA,yBACA,wBACA,oBACA,iBACA,mBACA,kBACA,mBACA,uBAEA,aAGA,gBAGA,eAIA,eACA;EAxBiB,KAAA,MAAA;EACD,KAAA,YAAA;EACA,KAAA,SAAA;EACC,KAAA,wBAAA;EACA,KAAA,0BAAA;EACA,KAAA,yBAAA;EACA,KAAA,qBAAA;EACA,KAAA,kBAAA;EACA,KAAA,oBAAA;EACA,KAAA,mBAAA;EACA,KAAA,oBAAA;EACD,KAAA,wBAAA;EAEA,KAAA,cAAA;EAGT,KAAA,iBAAA;EAGA,KAAA,gBAAA;EAIU,KAAA,gBAAA;EAEjB,KAAK,KAAK,KAAK,IAAI;EACnB,KAAK,qBAAqB;CAC5B;;;;;CAMA,IAAW,iBAA4C;EACrD,OAAO,KAAK,GAAG,WAAW;CAC5B;;;;;;;CAQA,IAAW,qBAA+B;EACxC,OAAO,KAAK,GAAG,WAAW,gBAAgB,CAAC;CAC7C;;;;;CAMA,IAAW,mBAAkC;EAC3C,OAAO,KAAK,GAAG,cAAc;CAC/B;;;;;;;CAQA,IAAW,mBAA4B;EAIrC,OAAO,KAAK,mBAAmB,SAAS,kBAAkB,KAAK,CAAC,KAAK;CACvE;;CAGA,IAAW,gBAAyB;EAClC,OAAO,KAAK,GAAG,KAAK,WAAW,KAAA;CACjC;;;;;CAMA,IAAW,kBAA+B;EACxC,OAAO,KAAK,GAAG;CACjB;;;;;;;CAQA,IAAW,uBAAgC;EACzC,OACE,CAAC,KAAK,iBACN,KAAK,mBAAmB,SAAS,iBAAiB,KAClDA,sBAAAA,mBAAmB,KAAK,eAAe;CAE3C;;;;;;;;CASA,IAAW,4BAAqC;EAC9C,OAAOC,sBAAAA,eAAe,KAAK,eAAe;CAC5C;;CAGA,qBACE,aACA,QAA0B,MACpB;EACN,KAAK,IAAI,oBAAoB,wBAAwB,aAAa,KAAK;CACzE;;CAGA,wBAA+B,cAA0D;EACvF,OAAO,KAAK,IAAI,oBAAoB,mBAAmB,YAAY;CACrE;;CAGA,IAAW,oBAA0C;EACnD,OAAO,KAAK,IAAI;CAClB;;CAGA,IAAW,kBAAwC;EACjD,OAAO,KAAK,IAAI;CAClB;CAMA,iBAAkC,IAAIC,UAAAA,SAAsC,EAAE,KAAK,KAAK,CAAC;;;CAIzF,MAAc,iBAAiB,WAAiD;EAC9E,MAAM,SAAS,KAAK,eAAe,IAAI,SAAS;EAChD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,MAAM,MAAM,MAAM,KAAK,GAAG,WAAW,oBAAoB,OAAO,OAAO;GACrE,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,WAAsB,OAAO,EAAE;GACtE;GACA,MAAM,IAAI,MAAM,WAAW,UAAU,4BAA4B;EACnE,CAAC;EAED,KAAK,eAAe,IAAI,WAAW,GAAG;EACtC,OAAO;CACT;;CAOA,MAAa,cAAc,MAAuC;EAChE,IAAI;EACJ,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,MAAMC,gBAAAA,cAAc,IAAI,IAAI;GAClC,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,GAAG;GAC9E,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,IAAK;EAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,SAAS;EAC9C,KAAK,eAAe,IAAI,WAAW,SAAS;EAC5C,OAAO;CACT;;CAGA,MAAa,eACX,IACA,MACA,QACe;EACf,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,MAAMC,gBAAAA,oBACJ,KAAK,IAAI,eACT,KAAK,IACL,KACA,SACC,QAAQ;GACP,IAAI,QAAQ,IAAI;EAClB,GACA,EAAE,MAAM,iBAAiB,CAC3B;EACA,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;CAIA,MAAa,cAAc,IAA8B;EACvD,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,IAAI;GACJ,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,IAAe;KAClD,YAAY,EAAE;KACd;IACF;GACF;GACA,IAAI,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,4BAA4B;GACvF,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,uBAAuB,SAAS,CAAC;GAC3D,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;;;;;;CASA,MAAa,iBACX,cACA,QACoB;EACpB,MAAM,YAAY,MAAM,KAAK,iBAAiB,YAAY;EAE1D,MAAM,SAAsB,MAAM,KAAK,GAAG,YAAY,sBAAsB,OAAO,OAAO;GAExF,MAAM,aAAa,MAAM,GAAG,cAA2B,WAAWC,sBAAAA,cAAc;GAIhF,MAAM,eAAc,MADU,GAAG,gBAAgB,KAAK,uBAAuB,IAAI,EAAA,CAC7C,OACjC,KAAK,MAAM,EAAE,KAAK,CAAC,CACnB,OAAOC,0BAAAA,yBAAyB;GACnC,MAAM,kBACJ,MAAM,QAAQ,IACZ,YAAY,KAAK,QAAQ,GAAG,cAA2B,KAAKD,sBAAAA,cAAc,CAAC,CAC7E,EAAA,CACA,KAAK,MAAM,EAAE,KAAK;GAMpB,MAAM,SAAS,MAAME,gBAAAA,iBAAiB,IAAI,WAAW,EAAE,OAHtC,SAAS,OAAO,WAAW,OAAO,cAAc,IAAI,WAAW,MAGT,CAAC;GAGxE,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,MAAM;GACjF,MAAM,GAAG,OAAO;GAEhB,OAAO;EACT,CAAC;EAED,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,OAAO;EAC/B,MAAM,gBAAA,GAAA,0BAAA,mBAAA,CAAkC,SAAS;EACjD,KAAK,eAAe,IAAI,cAAc,SAAS;EAC/C,OAAO;CACT;;;;;;;;;CAUA,MAAa,uBACX,cACA,aACA,QACe;EACf,IAAI,CAAC,KAAK,mBAAmB,SAAS,kBAAkB,GACtD,MAAM,IAAI,MAAM,0EAA0E;EAE5F,MAAM,YAAY,MAAM,KAAK,iBAAiB,YAAY;EAC1D,MAAM,aAAa,MAAM,KAAK,GAAG,YAAY;GAAE,OAAO;GAAa,mBAAmB;EAAK,CAAC;EAI5F,MAAM,KAAK,GAAG,kBAAkB,YAAY,4BAA4B,OAAO,OAAO;GAEpF,MAAM,uBAAuB,MAAMC,qBAAAA,qBAAqB,EAAE;GAG1D,MAAM,aAAa,MAAM,GAAG,cAA2B,WAAWH,sBAAAA,cAAc;GAChF,MAAM,iBAAiB,MAAM,GAAG,gBAAgB,sBAAsB,IAAI;GAC1E,MAAM,kBACJ,MAAM,QAAQ,IACZ,eAAe,OACZ,KAAK,MAAM,EAAE,KAAK,CAAC,CACnB,OAAOC,0BAAAA,yBAAyB,CAAC,CACjC,KAAK,QAAQ,GAAG,cAA2B,KAAKD,sBAAAA,cAAc,CAAC,CACpE,EAAA,CACA,KAAK,MAAM,EAAE,KAAK;GAGpB,MAAM,SAAS,MAAME,gBAAAA,iBAAiB,IAAI,WAAW,EAAE,OAFtC,SAAS,OAAO,WAAW,OAAO,cAAc,IAAI,WAAW,MAET,CAAC;GACxE,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,uBAAA,GAAA,YAAA,WAAA,CAAiC,CAAC,GAAG,WAAW,MAAM;GAC3E,MAAM,GAAG,OAAO;EAClB,CAAC;CACH;;;;;;;;;;;;;;CAmBA,MAAa,cACX,YACA,SACe;EACf,IAAI,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,kCAAkC;EAK/E,IAAI,cAAc,WAAW,QAAQ,SAAS;GAC5C,MAAM,iBAAiB,MAAM,KAAK,0BAA0B,UAAU,EAAA,CAAG,MACtE,MAAM,EAAE,QACX;GACA,IAAI,kBAAkB,KAAA,GAAW;IAC/B,MAAM,KAAK,YAAY,cAAc,SAAS,EAAE,OAAO,QAAQ,MAAM,CAAC;IACtE;GACF;EACF;EAEA,MAAM,KAAK,eAAe,YAAY,OAAO;CAC/C;;;;;;;;CASA,MAAc,eACZ,YACA,SACe;EACf,MAAM,WAAW,cAAc;EAC/B,MAAM,UAAmC,MAAM,QAAQ,IACrD,WAAW,IACT,OAAO,QAAwC;GAC7C,MAAM;GACN,WAAW;GACX,WAAW,MAAM,KAAK,iBAAiB,EAAE;EAC3C,EACF,CACF;EACA,MAAM,SAAS,KAAK,oBAAoB;EAExC,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;EAM9D,MAAM,SAAS,MAAM,KAAK,0BAA0B,UAAU;EAE9D,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,IAAI;SACG,MAAM,SAAS,QAClB,IAAI,MAAM,UAAU,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;GAAA,OAEpF;IACL,MAAM,gBAAgB,IAAI,IAAI,QAAQ,UAAU;IAChD,KAAK,MAAM,SAAS,QAAQ;KAC1B,IAAI,MAAM,UAAU;KACpB,MAAM,WAAW,MAAM,WAAW,QAAQ,MAAM,cAAc,IAAI,CAAC,CAAC;KACpE,IAAI,SAAS,WAAW,GAAG;KAE3B,IADkB,MAAM,WAAW,QAAQ,MAAM,CAAC,cAAc,IAAI,CAAC,CACzD,CAAC,CAAC,WAAW,GAEvB,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;UAEnE,KAAK,MAAM,KAAK,UAAU,GAAG,aAAa,MAAM,KAAK,CAAC;IAE1D;GACF;GAEA,MAAM,EAAE,aAAa,MAAME,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,QAAQ;IACd;IACA,OAAO,QAAQ;IACf;GACF,CAAC;GAID,MAAM,cAAc,MAAM,SAAS;GACnC,IAAI,UAGF,GAAG,YAAY,aAAa,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAE5E,KAAK,MAAM,aAAa,QAAQ,YAC9B,GAAG,YAAY,aAAa,WAAW,EAAE,UAAU,KAAK,CAAC;GAI7D,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;;;;;;;;;;;CAkBA,MAAa,YACX,SACA,OAKI,CAAC,GACU;EACf,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,MAAM,MAAM,KAAK,sBAAsB,IAAI,OAAO;GACxD,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,MAAM,sCAAsC,QAAQ,gBAAgB;GAEhF,MAAM,OAAO,KAAK,oBAAoB;GACtC,MAAM,SAAS,MAAM,GAAG,WAAW,IAAI,GAAG;GAE1C,MAAM,WAAW,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC,KAAK,KAAK,aAAa;GAGtF,MAAM,QAAQ,MAAM,GAAG,gBAAgB,IAAI,KAAK,IAAI;GACpD,MAAM,iCAAiB,IAAI,IAA8B;GACzD,MAAM,cAA4D,CAAC;GACnE,KAAK,MAAM,KAAK,MAAM,QAAQ;IAC5B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,IAAIC,gBAAAA,uBAAuB,EAAE,IAAI,GAC/B,eAAe,IAAIC,gBAAAA,yBAAyB,EAAE,IAAI,GAAG,EAAE,KAAK;SACvD,IAAIC,sBAAAA,kBAAkB,EAAE,IAAI,GAAG;KACpC,MAAM,OAAO,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK,EAAA,CAAG;KACvD,IAAI,QAAQ,KAAA,GAAW;KACvB,YAAY,KAAK;MACf,OAAOC,sBAAAA,qBAAqB,EAAE,IAAI;MAClC,MAAA,GAAA,2BAAA,kBAAA,CAAuB,GAAG;KAC5B,CAAC;IACH;GACF;GACA,MAAM,gBAAgB,YAAY,KAAK,MAAM,EAAE,KAAK;GAGpD,MAAM,kBAAkB,OACrB,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,KAAK,EAAE,SAAS,IAAI,CAAC,CAC9D,KAAK,MAAM,EAAE,IAAI;GACpB,MAAM,aAAa,WACf,CAAC,IACD,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAI,KAAK,cAAc,iBAAkB,GAAG,aAAa,CAAC,CAAC;GAGnF,MAAM,+BAAe,IAAI,IAA8B;GACvD,MAAM,WAAW,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GAC1E,KAAK,MAAM,KAAK,SAAS,QAAQ;IAC/B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,aAAa,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,GAAG,EAAE,KAAK;GACvD;GAIA,MAAM,UAAU,KAAK;GACrB,MAAM,UAAmC,CAAC;GAC1C,KAAK,MAAM,QAAQ,OAAO,KAAK,IAAI,KAAK,QAAQ,GAAyB;IACvE,MAAM,EAAE,OAAO,QAAQ,cAAc,IAAI,KAAK,SAAS;IACvD,MAAM,UAAU,aAAa,IAAI,MAAM;IAEvC,MAAM,SAAS,UACV,QAAQ,WAAW,SACpB,YAAY,KAAA,IACV,WACA;IACN,IAAI,WAAW,UAAU;IAEzB,IAAI,WAAW,YAAY,YAAY,KAAA,GACrC,QAAQ,KAAK;KAAE,MAAM;KAAS,WAAW;KAAQ,WAAW;IAAQ,CAAC;SAChE;KAGL,MAAM,cAAc,eAAe,IAAI,IAAI;KAC3C,IAAI,gBAAgB,KAAA,GAClB,QAAQ,KAAK;MAAE,MAAM;MAAS,WAAW;MAAQ;MAAO;MAAa;KAAU,CAAC;IACpF;GACF;GAGA,MAAM,QAAQ,KAAK,UAAU,KAAA,IAAY,IAAI,KAAK,QAAQ,KAAK,MAAM,KAAK;GAC1E,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;GAG9D,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,IAAI,SAAS,CAAC;GAEjE,MAAM,EAAE,aAAa,MAAML,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,IAAI,KAAK;IACf,QAAQ;IACR;IACA;IACA;GACF,CAAC;GAGD,KAAK,MAAM,EAAE,OAAO,SAAS,aAAa;IACxC,IAAI,CAAC,YAAY,CAAC,WAAW,SAAS,KAAK,GAAG;IAC9C,gBAAA,wBAAwB,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,SAAS;GACxE;GAEA,MAAM,MAAM,MAAM,SAAS;GAC3B,IAAI,UAAU,GAAG,YAAY,KAAK,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAC7E,KAAK,MAAM,KAAK,YAAY,GAAG,YAAY,KAAK,GAAG,EAAE,UAAU,KAAK,CAAC;GAE1E,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,0BAA0B,YAQtC;EACA,MAAM,SAAS,IAAI,IAAI,UAAU;EAEjC,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,mBAAmB,OAAO,OAAO;GACxE,MAAM,SAAS,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;GAC1E,MAAM,MAAwE,CAAC;GAC/E,KAAK,MAAM,KAAK,OAAO,QAAQ;IAC7B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;IAClD,IAAI,GAAG,SAAS,KAAA,GAAW;IAC3B,MAAM,OAAOK,sBAAAA,mBAAmB,GAAG,IAAI;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAM,MAAM,OAAO,IAAI,EAAE,MAAM,CAAC,GAC/D,IAAI,KAAK;KAAE,WAAW,EAAE;KAAM,KAAK,EAAE;KAAO,SAAS,KAAK;IAAQ,CAAC;GACvE;GACA,OAAO;EACT,CAAC;EAED,OAAO,MAAM,QAAQ,IACnB,QAAQ,IAAI,OAAO,EAAE,WAAW,KAAK,cAAc;GACjD,MAAM,SAAS,MAAM,KAAK,GAAG,cAAc,WAAW,GAAG;GACzD,OAAO;IACL;IACA;IACA;IACA,UAAU,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC;IACxD,YAAY,OAAO,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;GAClF;EACF,CAAC,CACH;CACF;;;;;;CAOA,MAAa,YAAY,SAAiC;EACxD,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,SAAS,MAAM,KAAK,sBAAsB,IAAI,OAAO;GAC3D,IAAI,WAAW,KAAA,GAAW;GAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,OAAO,SAAS,CAAC;GACpE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,sBACZ,IACA,SACuF;EACvF,MAAM,aAAa,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;EAC9E,KAAK,MAAM,KAAK,WAAW,QAAQ;GACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;GACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;GAClD,IAAI,GAAG,SAAS,KAAA,GAAW;GAC3B,MAAM,OAAOA,sBAAAA,mBAAmB,GAAG,IAAI;GACvC,IAAI,KAAK,YAAY,SAAS,OAAO;IAAE,WAAW,EAAE;IAAM,KAAK,EAAE;IAAO;GAAK;EAC/E;CAEF;;;;;;;;;;;CAYA,MAAc,uBAA4D;EACxE,MAAM,KAAK,kBAAkB,aAAa;EAC1C,MAAM,OAAQ,MAAM,KAAK,cAAc,SAAS,KAAM,CAAC;EAEvD,MAAM,sBAAM,IAAI,IAA2B;EAC3C,KAAK,MAAM,KAAK,MAAM,IAAI,IAAI,EAAE,KAAK,SAAS,CAAC;EAC/C,OAAO;CACT;;;;;;;;;;CAWA,MAAa,YACX,UACA,QACmF;EACnF,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAC7C,MAAM,QAAQ,KAAK;EAEnB,MAAM,WAAwB,CAAC;EAC/B,MAAM,SAAgD,CAAC;EAEvD,KAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,WAAW,KAAK,IAAI,OAAO;GACjC,IAAI,aAAa,KAAA,GAAW;IAC1B,OAAO,KAAK;KAAE;KAAS,OAAO;IAAgC,CAAC;IAC/D;GACF;GACA,IAAI;IACF,MAAM,MAAM,KAAK,IAAI;IACrB,MAAM,cAAc,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;KAC3E,MAAM,UAAU,MAAMC,gBAAAA,6BACpB,IACA,SAAS,KACT,KAAK,uBACL,MACF;KAGA,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;MAC7D,UAAU;MACV,WAAW;MACX,kBAAkB,SAAS,KAAK;MAChC,kBAAkBC,gBAAAA,qBAAqB,OAAO;KAChD,CAAC;KAGD,IAAI,UAAU,QAAQ,SAAS,KAAK,SAAS,aAC3C,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;KAElE,MAAM,GAAG,OAAO;KAChB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,OAAO,aAAa;KAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,GAAG;KACxC,KAAK,eAAe,IAAI,WAAW,GAAG;KACtC,SAAS,KAAK,SAAS;IACzB;GACF,SAAS,GAAG;IACV,OAAO,KAAK;KAAE;KAAS,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;IAAE,CAAC;GAC5E;EACF;EAEA,MAAM,QAAQ,IAAI,CAAC,KAAK,gBAAgB,aAAa,GAAG,KAAK,iBAAiB,aAAa,CAAC,CAAC;EAC7F,OAAO;GAAE;GAAU;EAAO;CAC5B;;CAGA,MAAa,YAAY,SAAiC;EAExD,MAAM,YAAW,MADE,KAAK,qBAAqB,EAAA,CACvB,IAAI,OAAO;EACjC,MAAM,QAAQ,KAAK;EACnB,MAAM,MAAM,KAAK,IAAI;EAErB,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;IAC7D,UAAU;IACV,WAAW;IACX,kBAAkB,UAAU,KAAK,YAAY;IAC7C,kBAAkB,CAAC;GACrB,CAAC;GAGD,IAAI,aAAa,KAAA,KAAa,UAAU,QAAQ,SAAS,KAAK,SAAS,aACrE,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;GAElE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,iBAAiB,aAAa;CAC3C;CAMA,OAAwB,4BAA4B,IAAI,OAAO;CAC/D;;CAGA,uBAAqC;EACnC,KAAU,mBAAmB;EAC7B,KAAK,uBAAuB,kBAAkB;GAC5C,KAAU,mBAAmB;EAC/B,GAAG,YAAY,yBAAyB;EAExC,KAAK,qBAAqB,QAAQ;CACpC;;;CAIA,MAAc,qBAAoC;EAChD,IAAI;GACF,MAAM,MAAM,KAAK,IAAI;GACrB,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,yBAAyB,OAAO,OAAO;IAC9E,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;IACxE,MAAM,WAAoC,CAAC;IAC3C,KAAK,MAAM,KAAK,KAAK,QAAQ;KAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;KACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;KAClD,IAAI,GAAG,SAAS,KAAA,GAAW;KAC3B,MAAM,UAAUF,sBAAAA,mBAAmB,GAAG,IAAI;KAC1C,IAAI,QAAQ,cAAc,MAAM;KAChC,IAAI,QAAQ,aAAa,KAAK,SAAS,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;IACnE;IACA,OAAO;GACT,CAAC;GAED,IAAI,QAAQ,WAAW,GAAG;GAE1B,MAAM,KAAK,GAAG,YAAY,qBAAqB,OAAO,OAAO;IAC3D,KAAK,MAAM,EAAE,eAAe,SAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,SAAS,CAAC;IAC/D,MAAM,GAAG,OAAO;GAClB,CAAC;GAED,MAAM,KAAK,kBAAkB,aAAa;EAC5C,SAAS,GAAG;GACV,KAAK,IAAI,OAAO,KACd,4BAA4B,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,GACvE;EACF;CACF;CAMA,iCAAkC,IAAI,IAAwB;;CAG9D,MAAa,YAAY,IAA8B;EACrD,IAAI,KAAK,eAAe,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,WAAW,GAAG,gBAAgB;EAC/E,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,KAAK,eAAe,IAAI,IAAI,MAAMG,kBAAAA,QAAQ,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC;EACjE,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,MAAa,aAAa,IAA8B;EACtD,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,IAAI,QAAQ;EAClB,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,iBAAwB,IAAwB;EAC9C,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,OAAO;CACT;;CAGA,gBAAuB,IAAwB;EAC7C,OAAO,KAAK,eAAe,IAAI,EAAE;CACnC;;;;;;CAOA,MAAa,QAAQ;EACnB,IAAI,KAAK,yBAAyB,KAAA,GAAW,cAAc,KAAK,oBAAoB;EACpF,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,eAAe,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC;EAE/E,MAAM,QAAQ,IAAI;GAChB,KAAK,gBAAgB,UAAU;GAC/B,KAAK,kBAAkB,UAAU;GACjC,KAAK,iBAAiB,UAAU;GAChC,KAAK,kBAAkB,UAAU;EACnC,CAAC;EACD,MAAM,KAAK,IAAI,QAAQ;EACvB,MAAM,KAAK,GAAG,MAAM;CACtB;;CAGA,MAAa,2BAA2B;EACtC,MAAM,KAAK,MAAM;CACnB;;;CAIA,OAAc,sBAA8B;EAC1C,OAAOC,2BAAAA,iBAAiB,eAAe;CACzC;;CAGA,IAAW,uBAA6C;EACtD,OAAO,KAAK,IAAI;CAClB;;CAGA,aAAoB,KAClB,IACA,SACA,MACsB;EACtB,MAAM,MAAsB;GAC1B,GAAGC,YAAAA;GACH,GAAGC,YAAAA,2BAA2B,OAAO;GACrC,GAAG;EACL;EAGA,IAAI,mBAAmB,UAAUC,gBAAAA,cAAc,CAAC,CAAC;EACjD,IAAI,SAAS,uBAAuBA,gBAAAA,cAAc,CAAC,CAAC;EAEpD,IACE,IAAI,mBAAmB,kBAAkB,KAAA,KACzCA,gBAAAA,cAAc,CAAC,CAAC,sBAAsB,KAAA,GAEtC,IAAI,mBAAmB,gBAAgBA,gBAAAA,cAAc,CAAC,CAAC;EAEzD,MAAM,EAAE,UAAU,eAAe,iBAAiB,MAAM,GAAG,YACzD,oBACA,OAAO,OAAO;GAGZ,MAAM,WAAW,OACf,WACA,SACgE;IAChE,MAAM,KAAA,GAAA,0BAAA,MAAA,CAAU,GAAG,YAAY,SAAS;IACxC,GAAG,YAAY,GAAG,SAAS;IAC3B,MAAM,QAAQ,MAAM,GAAG,SAAS,CAAC;IACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,MAAM,KAAK,GAAG;KACvC,MAAM,MAAM,GAAG,gBAAgB,IAAI;KACnC,GAAG,KAAK,GAAG;KACX,GAAG,SAAS,GAAG,GAAG;KAClB,OAAO,EAAE,IAAI;IACf;IACA,OAAO,EAAE,UAAU,MAAM,MAAM;GACjC;GAEA,MAAM,YAAY,MAAM,SAASC,qBAAAA,eAAeC,qBAAAA,oBAAoB;GACpE,MAAM,UAAU,MAAM,SAASC,sBAAAA,oBAAoBC,sBAAAA,yBAAyB;GAC5E,MAAM,SAAS,MAAM,SAASC,sBAAAA,mBAAmBC,sBAAAA,wBAAwB;GAEzE,MAAM,GAAG,OAAO;GAEhB,OAAO;IACL,UAAU,UAAU,YAAa,MAAM,UAAU,IAAK;IACtD,cAAc,OAAO,YAAa,MAAM,OAAO,IAAK;IACpD,eAAe,QAAQ,YAAa,MAAM,QAAQ,IAAK;GACzD;EACF,CACF;EAEA,MAAM,SAAS,IAAI;EAEnB,MAAM,YAAY,MAAMC,mBAAAA,cAAc,IAAI,SAAS,IAAI,sBAAsB,GAAG;EAGhF,MAAM,sBAAsB,IAAIC,OAAAA,WAAW,GAAG,cAAc;EAE5D,MAAM,qBAAqB,IAAIC,6BAAAA,mBAAmB,mBAAmB;EAErE,MAAM,aAAa,IAAIC,mBAAAA,kBACrB,oBACA,UAAU,QACV,mBACF;EAEA,MAAM,UAAU,OAAA,GAAA,mBAAA,WAAA,CAAiB;EAEjC,MAAM,sBAAsB,IAAIC,qBAAAA,oBAAoB;EAEpD,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,wBAAwB,CAAC;EACrE,oBAAoB,wBAAwB,0BAA0BC,gCAAAA,wBAAwB;EAC9F,CAAA,GAAA,gCAAA,4BAAA,EAA6B,MAAM,UACjC,oBAAoB,wBAAwB,MAAM,KAAK,CACzD;EAGA,MAAM,kBAAkBC,0BAAAA,2BAA2B,EAAE,OAAO,CAAC;EAE7D,MAAM,MAA8B;GAClC;GACA,sBAAsB,IAAIC,2BAAAA,qBAAqB;GAC/C,QAAQ,UAAU;GAClB;GACA,gBAAgB,GAAG;GACnB;GACA;GACA;GACA,wBAAwB,UAAU;GAClC;GACA,oBAAoB,IAAIC,gBAAAA,mBAAmB,oBAAoB,QAAQ;IACrE,UAAU,IAAI;IACd,MAAM;IACN,wBAAwB,IAAI;GAC9B,CAAC;GACD;GACA;GACA;GACA,eAAe,IAAIC,uBAAAA,cAAc,SAAS,MAAM;GAChD,SAAS,YAAY;IACnB,MAAM,gBAAgB,QAAQ;IAC9B,MAAM,oBAAoB,QAAQ;IAClC,MAAM,UAAU,QAAQ;GAC1B;EACF;EAEA,MAAM,iBAAiB,IAAIC,2BAAAA,eAA4B,CAAC,CAAC;EACzD,MAAM,gBAAgB,MAAMC,qBAAAA,kBAAkB,IAAI,UAAU,gBAAgB,GAAG;EAG/E,MAAM,aAAa,MAAMC,qBAAAA,qBAAqB,IAAI,eAAe,GAAG;EACpE,MAAM,mBAAmB,MAAMC,qBAAAA,uBAAuB,IAAI,cAAc,GAAG;EAC3E,MAAM,oBAAoB,MAAMC,qBAAAA,wBAAwB,IAAI,GAAG;EAC/D,MAAM,gBAAgBC,qBAAAA,8BACpB,mBACA,kBACA,GAAG,cAAc,QACnB;EACA,MAAM,gBAAgBC,qBAAAA,8BAA8B,iBAAiB;EAErE,OAAO,IAAI,YACT,KACA,WACA,UAAU,QACV,UACA,eACA,cACA,gBACA,cAAc,MACd,WAAW,MACX,kBACA,mBACA,oBACA,cAAc,YACd,WAAW,YACX,eACA,aACF;CACF;AACF"}

package/dist/middle_layer/middle_layer.d.ts

@@ -100,6 +100,8 @@ declare class MiddleLayer {
    * additional required capabilities later without a UI change.
    */
   get sharingSupported(): boolean;
+  /** True when this session is impersonating another user (an admin opened another user's root). */
+  get impersonating(): boolean;
   /**
    * Role of the authenticated user, from the `GetSessionInfo` RPC surfaced through the
    * pl-client. `null` in no-auth mode (when {@link currentUserLogin} is null).
@@ -112,6 +114,14 @@ declare class MiddleLayer {
    * permission-ceiling gate.
    */
   get canShareWithEveryone(): boolean;
+  /**
+   * Whether the authenticated user may impersonate others (open another user's root). Mirrors
+   * the backend's `CanImpersonate` role gate — admin/controller only, never a regular user.
+   * Derived from the session role, which stays the authenticated admin's even while
+   * impersonating, so this stays true across a switch: the "return to my root" affordance must
+   * not vanish mid-impersonation. Not a security boundary; the backend re-checks on every call.
+   */
+  get currentUserCanImpersonate(): boolean;
   /** Adds a runtime capability to the middle layer. */
   addRuntimeCapability(requirement: SupportedRequirement, value?: number | boolean): void;
   /** Checks if the given block feature flags are compatible with the runtime capabilities. */
@@ -139,6 +149,15 @@ declare class MiddleLayer {
    *   project labels (read within the same transaction), and returns the label for the copy
    */
   duplicateProject(srcProjectId: ProjectId$1, rename?: (previousLabel: string, existingLabels: string[]) => string): Promise<ProjectId$1>;
+  /**
+   * Duplicates a project into another user's root, minted in the TARGET user's color so the target
+   * owns it. Sibling of {@link duplicateProject}, but writes into a different root. The source
+   * project (on the current client root) is referenced cross-color for its block data, kept alive
+   * by refcounting, exactly like accepting a shared project. Works both ways: pull (while
+   * impersonating a user, copy their project to yourself) and push (from your own root, copy a
+   * project to a user). Admin cross-root op; requires the crossTreeRefs:v1 backend capability.
+   */
+  duplicateProjectToUser(srcProjectId: ProjectId$1, targetLogin: string, rename?: (previousLabel: string, existingLabels: string[]) => string): Promise<void>;
   /**
    * Shares the given projects (Copy & Share). Snapshots the projects, creates one envelope, and
    * grants it — all in one atomic write transaction, so a failed grant rolls the whole thing back

package/dist/middle_layer/middle_layer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middle_layer.d.ts","names":[],"sources":["../../src/middle_layer/middle_layer.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;UA2FiB,sBAAA;EACf,OAAA,IAAW,OAAA;EAAA,SACF,EAAA,EAAI,QAAA;EAAA,SACJ,mBAAA,EAAqB,mBAAA;EAAA,SACrB,MAAA,EAAQ,QAAA;EAAA,SACR,oBAAA,EAAsB,oBAAA;EAAA,SACtB,cAAA,EAAgB,UAAA;EAAA,SAChB,mBAAA,EAAqB,UAAA;EAAA,SACrB,MAAA,EAAQ,MAAA;EAAA,SACR,GAAA,EAAK,cAAA;EAAA,SACL,UAAA,EAAY,iBAAA;EAAA,SACZ,sBAAA,EAAwB,iBAAA;EAAA,SACxB,kBAAA,EAAoB,kBAAA;EAAA,SACpB,OAAA,EAAS,iBAAA;EAAA,SACT,SAAA,EAAW,oBAAA;EAAA,SACX,eAAA,EAAiB,oBAAA;EAAA,SACjB,aAAA,EAAe,aAAA;AAAA;;;;;;;;;;;;;cAeb,WAAA;EAAA,iBAIQ,GAAA;EAAA,SACD,SAAA,EAAW,SAAA;EAAA,SACX,MAAA,EAAQ,MAAA;EAAA,iBACP,qBAAA;EAAA,iBACA,uBAAA;EAAA,iBACA,sBAAA;EAAA,iBACA,kBAAA;EAAA,iBACA,eAAA;EAAA,iBACA,iBAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,iBAAA;EAAA,SACD,qBAAA,EAAuB,kBAAA;EAnCR;EAAA,SAqCf,WAAA,EAAa,uBAAA,CAAwB,kBAAA;EApC1B;;EAuCpB,cAAA,EAAgB,UAAA,CAAW,aAAA;EArC3B;;EAwCA,aAAA,EAAe,UAAA,CAAW,YAAA;EAvCT;;;EAAA,iBA2CP,aAAA;EAAA,SA1BH,EAAA,EAAI,QAAA;EAAA,QAEb,WAAA;EAHe;;;;EAAA,IAqCX,cAAA,IAAkB,aAAA;EApB0B;;;;;;EAAA,IA8B5C,kBAAA;EAVkB;;;;EAAA,IAkBlB,gBAAA;EAsDmB;;;;;;EAAA,IA5CnB,gBAAA;EAmGR;;;;EAAA,IA3FQ,eAAA,IAAmB,IAAA;EAyI3B;;;;;;EAAA,IA/HQ,oBAAA;EAiTU;EAzSd,oBAAA,CACL,WAAA,EAAa,oBAAA,EACb,KAAA;EAkcgC;EA5b3B,uBAAA,CAAwB,YAAA,EAAc,qBAAA;EAyfjC;EAAA,IApfD,iBAAA,IAAqB,oBAAA;EAsfuB;EAAA,IAjf5C,eAAA,IAAmB,oBAAA;EAAA,iBAQb,cAAA;EA8hB2B;;EAAA,QA1hB9B,gBAAA;EAqnBgB;EA9lBjB,aAAA,CAAc,IAAA,EAAM,WAAA,GAAc,OAAA,CAAQ,WAAA;EAumB3B;EAvlBf,cAAA,CACX,EAAA,EAAI,WAAA,EACJ,IAAA,EAAM,WAAA,EACN,MAAA,GAAS,YAAA,GACR,OAAA;EA0lBwB;;EAzkBd,aAAA,CAAc,EAAA,EAAI,WAAA,GAAY,OAAA;EA4mBR;;;;;;;EAllBtB,gBAAA,CACX,YAAA,EAAc,WAAA,EACd,MAAA,IAAU,aAAA,UAAuB,cAAA,wBAChC,OAAA,CAAQ,WAAA;EA7MO;;;;;;;;;;;;;EAqQL,aAAA,CACX,UAAA,EAAY,WAAA,IACZ,OAAA,EAAS,oBAAA,GACR,OAAA;EA5Pe;;;;;;;EAAA,QAsRJ,cAAA;EAhRqB;;;;;;;;;;;;;;;;EAuWtB,WAAA,CACX,OAAA,EAAS,OAAA,EACT,IAAA;IACE,UAAA;IACA,QAAA;IACA,KAAA;IACA,cAAA,GAAiB,MAAA,CAAO,WAAA,EAAW,mBAAA;EAAA,IAEpC,OAAA;EAzRQ;;;;;;EAAA,QAsYG,yBAAA;EAnWiC;;;;;EA+YlC,WAAA,CAAY,OAAA,EAAS,OAAA,GAAU,OAAA;EA7X1C;;;;;;EAAA,QA8YY,qBAAA;EA3X6B;;;;;;;;;;EAAA,QAoZ7B,oBAAA;EA9TZ;;;;;;;;;EAgVW,WAAA,CACX,QAAA,EAAU,OAAA,IACV,MAAA,IAAU,aAAA,UAAuB,cAAA,wBAChC,OAAA;IAAU,QAAA,EAAU,WAAA;IAAa,MAAA;MAAU,OAAA,EAAS,OAAA;MAAS,KAAA;IAAA;EAAA;EAxN7D;EA6QU,WAAA,CAAY,OAAA,EAAS,OAAA,GAAU,OAAA;EAAA,wBA4BpB,yBAAA;EAAA,QAChB,oBAAA;EAjJiB;EAAA,QAoJjB,oBAAA;EAnIM;;EAAA,QA8IA,kBAAA;EAAA,iBAqCG,cAAA;EAvIf;EA0IW,WAAA,CAAY,EAAA,EAAI,WAAA,GAAY,OAAA;EAzIN;EAiJtB,YAAA,CAAa,EAAA,EAAI,WAAA,GAAY,OAAA;EAhJvC;EAyJI,gBAAA,CAAiB,EAAA,EAAI,WAAA,GAAY,OAAA;EAzJjB;EAgKhB,eAAA,CAAgB,EAAA,EAAI,WAAA;EAhKmB;;;;;EAyKjC,KAAA,IAAK,OAAA;EApH0B;EAmI/B,wBAAA,IAAwB,OAAA;EAtG7B;;EAAA,OA4GM,mBAAA;EAzDG;EAAA,IA8DN,oBAAA,IAAwB,oBAAA;EA3DN;EAAA,OAgET,IAAA,CAClB,EAAA,EAAI,QAAA,EACJ,OAAA,UACA,IAAA,EAAM,yBAAA,GACL,OAAA,CAAQ,WAAA;AAAA"}
+{"version":3,"file":"middle_layer.d.ts","names":[],"sources":["../../src/middle_layer/middle_layer.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;UAiGiB,sBAAA;EACf,OAAA,IAAW,OAAA;EAAA,SACF,EAAA,EAAI,QAAA;EAAA,SACJ,mBAAA,EAAqB,mBAAA;EAAA,SACrB,MAAA,EAAQ,QAAA;EAAA,SACR,oBAAA,EAAsB,oBAAA;EAAA,SACtB,cAAA,EAAgB,UAAA;EAAA,SAChB,mBAAA,EAAqB,UAAA;EAAA,SACrB,MAAA,EAAQ,MAAA;EAAA,SACR,GAAA,EAAK,cAAA;EAAA,SACL,UAAA,EAAY,iBAAA;EAAA,SACZ,sBAAA,EAAwB,iBAAA;EAAA,SACxB,kBAAA,EAAoB,kBAAA;EAAA,SACpB,OAAA,EAAS,iBAAA;EAAA,SACT,SAAA,EAAW,oBAAA;EAAA,SACX,eAAA,EAAiB,oBAAA;EAAA,SACjB,aAAA,EAAe,aAAA;AAAA;;;;;;;;;;;;;cAeb,WAAA;EAAA,iBAIQ,GAAA;EAAA,SACD,SAAA,EAAW,SAAA;EAAA,SACX,MAAA,EAAQ,MAAA;EAAA,iBACP,qBAAA;EAAA,iBACA,uBAAA;EAAA,iBACA,sBAAA;EAAA,iBACA,kBAAA;EAAA,iBACA,eAAA;EAAA,iBACA,iBAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,iBAAA;EAAA,SACD,qBAAA,EAAuB,kBAAA;EAnCR;EAAA,SAqCf,WAAA,EAAa,uBAAA,CAAwB,kBAAA;EApC1B;;EAuCpB,cAAA,EAAgB,UAAA,CAAW,aAAA;EArC3B;;EAwCA,aAAA,EAAe,UAAA,CAAW,YAAA;EAvCT;;;EAAA,iBA2CP,aAAA;EAAA,SA1BH,EAAA,EAAI,QAAA;EAAA,QAEb,WAAA;EAHe;;;;EAAA,IAqCX,cAAA,IAAkB,aAAA;EApB0B;;;;;;EAAA,IA8B5C,kBAAA;EAVkB;;;;EAAA,IAkBlB,gBAAA;EA0EmB;;;;;;EAAA,IAhEnB,gBAAA;EAuHR;EAAA,IA/GQ,aAAA;EAgIgC;;;;EAAA,IAxHhC,eAAA,IAAmB,IAAA;EAwM3B;;;;;;EAAA,IA9LQ,oBAAA;EAyWU;;;;;;;EAAA,IA1VV,yBAAA;EAymBuB;EApmB3B,oBAAA,CACL,WAAA,EAAa,oBAAA,EACb,KAAA;EAqrB2B;EA/qBtB,uBAAA,CAAwB,YAAA,EAAc,qBAAA;EAurBf;EAAA,IAlrBnB,iBAAA,IAAqB,oBAAA;EA2rBJ;EAAA,IAtrBjB,eAAA,IAAmB,oBAAA;EAAA,iBAQb,cAAA;EA8rBC;;EAAA,QA1rBJ,gBAAA;EA0tBR;EAnsBO,aAAA,CAAc,IAAA,EAAM,WAAA,GAAc,OAAA,CAAQ,WAAA;EAssB5C;EAtrBE,cAAA,CACX,EAAA,EAAI,WAAA,EACJ,IAAA,EAAM,WAAA,EACN,MAAA,GAAS,YAAA,GACR,OAAA;EAkrBO;;EAjqBG,aAAA,CAAc,EAAA,EAAI,WAAA,GAAY,OAAA;EApMzB;;;;;;;EA8NL,gBAAA,CACX,YAAA,EAAc,WAAA,EACd,MAAA,IAAU,aAAA,UAAuB,cAAA,wBAChC,OAAA,CAAQ,WAAA;EA3NQ;;;;;;;;EA0QN,sBAAA,CACX,YAAA,EAAc,WAAA,EACd,WAAA,UACA,MAAA,IAAU,aAAA,UAAuB,cAAA,wBAChC,OAAA;EArQM;;;;;;;;;;;;;EAsTI,aAAA,CACX,UAAA,EAAY,WAAA,IACZ,OAAA,EAAS,oBAAA,GACR,OAAA;EA5QQ;;;;;;;EAAA,QAsSG,cAAA;EAvPZ;;;;;;;;;;;;;;;;EA8UW,WAAA,CACX,OAAA,EAAS,OAAA,EACT,IAAA;IACE,UAAA;IACA,QAAA;IACA,KAAA;IACA,cAAA,GAAiB,MAAA,CAAO,WAAA,EAAW,mBAAA;EAAA,IAEpC,OAAA;EA/QD;;;;;;EAAA,QA4XY,yBAAA;EA/UE;;;;;EA2XH,WAAA,CAAY,OAAA,EAAS,OAAA,GAAU,OAAA;EAzXjC;;;;;;EAAA,QA0YG,qBAAA;EAxVZ;;;;;;;;;;EAAA,QAiXY,oBAAA;EA1MZ;;;;;;;;;EA4NW,WAAA,CACX,QAAA,EAAU,OAAA,IACV,MAAA,IAAU,aAAA,UAAuB,cAAA,wBAChC,OAAA;IAAU,QAAA,EAAU,WAAA;IAAa,MAAA;MAAU,OAAA,EAAS,OAAA;MAAS,KAAA;IAAA;EAAA;EArBlD;EA0ED,WAAA,CAAY,OAAA,EAAS,OAAA,GAAU,OAAA;EAAA,wBA4BpB,yBAAA;EAAA,QAChB,oBAAA;EAnFI;EAAA,QAsFJ,oBAAA;EAtFN;;EAAA,QAiGY,kBAAA;EAAA,iBAqCG,cAAA;EArImB;EAwIvB,WAAA,CAAY,EAAA,EAAI,WAAA,GAAY,OAAA;EAxIc;EAgJ1C,YAAA,CAAa,EAAA,EAAI,WAAA,GAAY,OAAA;EA3F7B;EAoGN,gBAAA,CAAiB,EAAA,EAAI,WAAA,GAAY,OAAA;EApGf;EA2GlB,eAAA,CAAgB,EAAA,EAAI,WAAA;EA/EH;;;;;EAwFX,KAAA,IAAK,OAAA;EAjCW;EAgDhB,wBAAA,IAAwB,OAAA;EAhDI;;EAAA,OAsD3B,mBAAA;EA9CY;EAAA,IAmDf,oBAAA,IAAwB,oBAAA;EA1C5B;EAAA,OA+Ca,IAAA,CAClB,EAAA,EAAI,QAAA,EACJ,OAAA,UACA,IAAA,EAAM,yBAAA,GACL,OAAA,CAAQ,WAAA;AAAA"}

package/dist/middle_layer/middle_layer.js

@@ -1,8 +1,8 @@
 import { V2RegistryProvider } from "../block_registry/registry-v2-provider.js";
 import "../block_registry/index.js";
 import { ProjectMetaKey } from "../model/project_model.js";
-import { ProjectsField, ProjectsResourceType, createProjectList } from "./project_list.js";
-import { SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceFieldLogin, canGrantToEveryone, decodeEnvelopeData, isAcceptanceField } from "../model/sharing_model.js";
+import { ProjectsField, ProjectsResourceType, createProjectList, ensureProjectListRid } from "./project_list.js";
+import { SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceFieldLogin, canGrantToEveryone, canImpersonate, decodeEnvelopeData, isAcceptanceField } from "../model/sharing_model.js";
 import { BlockPackPreparer } from "../mutator/block-pack/block_pack.js";
 import { getDebugFlags } from "../debug/index.js";
 import { createProject, duplicateProject, withProjectAuthored } from "../mutator/project.js";
@@ -104,7 +104,11 @@ var MiddleLayer = class MiddleLayer {
 	* additional required capabilities later without a UI change.
 	*/
 	get sharingSupported() {
-		return this.serverCapabilities.includes("crossTreeRefs:v1");
+		return this.serverCapabilities.includes("crossTreeRefs:v1") && !this.impersonating;
+	}
+	/** True when this session is impersonating another user (an admin opened another user's root). */
+	get impersonating() {
+		return this.pl.conf.asUser !== void 0;
 	}
 	/**
 	* Role of the authenticated user, from the `GetSessionInfo` RPC surfaced through the
@@ -120,7 +124,17 @@ var MiddleLayer = class MiddleLayer {
 	* permission-ceiling gate.
 	*/
 	get canShareWithEveryone() {
-		return this.serverCapabilities.includes("publicGrants:v1") && canGrantToEveryone(this.currentUserRole);
+		return !this.impersonating && this.serverCapabilities.includes("publicGrants:v1") && canGrantToEveryone(this.currentUserRole);
+	}
+	/**
+	* Whether the authenticated user may impersonate others (open another user's root). Mirrors
+	* the backend's `CanImpersonate` role gate — admin/controller only, never a regular user.
+	* Derived from the session role, which stays the authenticated admin's even while
+	* impersonating, so this stays true across a switch: the "return to my root" affordance must
+	* not vanish mid-impersonation. Not a security boundary; the backend re-checks on every call.
+	*/
+	get currentUserCanImpersonate() {
+		return canImpersonate(this.currentUserRole);
 	}
 	/** Adds a runtime capability to the middle layer. */
 	addRuntimeCapability(requirement, value = true) {
@@ -222,6 +236,31 @@ var MiddleLayer = class MiddleLayer {
 		return newProjectId;
 	}
 	/**
+	* Duplicates a project into another user's root, minted in the TARGET user's color so the target
+	* owns it. Sibling of {@link duplicateProject}, but writes into a different root. The source
+	* project (on the current client root) is referenced cross-color for its block data, kept alive
+	* by refcounting, exactly like accepting a shared project. Works both ways: pull (while
+	* impersonating a user, copy their project to yourself) and push (from your own root, copy a
+	* project to a user). Admin cross-root op; requires the crossTreeRefs:v1 backend capability.
+	*/
+	async duplicateProjectToUser(srcProjectId, targetLogin, rename) {
+		if (!this.serverCapabilities.includes("crossTreeRefs:v1")) throw new Error("duplicateProjectToUser requires the crossTreeRefs:v1 backend capability.");
+		const sourceRid = await this.resolveProjectId(srcProjectId);
+		const targetRoot = await this.pl.getUserRoot({
+			login: targetLogin,
+			createIfNotExists: true
+		});
+		await this.pl.withWriteTxOnRoot(targetRoot, "MLDuplicateProjectToUser", async (tx) => {
+			const targetProjectListRid = await ensureProjectListRid(tx);
+			const sourceMeta = await tx.getKValueJson(sourceRid, ProjectMetaKey);
+			const targetListData = await tx.getResourceData(targetProjectListRid, true);
+			const existingLabels = (await Promise.all(targetListData.fields.map((f) => f.value).filter(isNotNullSignedResourceId).map((rid) => tx.getKValueJson(rid, ProjectMetaKey)))).map((m) => m.label);
+			const newPrj = await duplicateProject(tx, sourceRid, { label: rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label });
+			tx.createField(field(targetProjectListRid, randomUUID()), "Dynamic", newPrj);
+			await tx.commit();
+		});
+	}
+	/**
 	* Shares the given projects (Copy & Share). Snapshots the projects, creates one envelope, and
 	* grants it — all in one atomic write transaction, so a failed grant rolls the whole thing back
 	* and the outbox is left as it was.