@milaboratories/pl-middle-layer 1.66.19 → 1.67.1

package/dist/middle_layer/middle_layer.cjs

@@ -3,12 +3,16 @@ require("../block_registry/index.cjs");
 const require_project_model = require("../model/project_model.cjs");
 const require_project_list = require("./project_list.cjs");
 const require_sharing_model = require("../model/sharing_model.cjs");
+const require_template_resolve = require("../model/template_resolve.cjs");
+const require_template_apply = require("../model/template_apply.cjs");
 const require_block_pack = require("../mutator/block-pack/block_pack.cjs");
 const require_index$1 = require("../debug/index.cjs");
 const require_project = require("../mutator/project.cjs");
+const require_template_construct = require("../mutator/template_construct.cjs");
+const require_template_cache = require("../mutator/template/template_cache.cjs");
+const require_project$1 = require("./project.cjs");
 const require_sharing = require("../mutator/sharing.cjs");
 const require_sharing_list = require("./sharing_list.cjs");
-const require_project$1 = require("./project.cjs");
 const require_ops = require("./ops.cjs");
 const require_watcher = require("../block_registry/watcher.cjs");
 const require_driver_kit = require("./driver_kit.cjs");
@@ -17,12 +21,12 @@ const require_project_helper = require("../model/project_helper.cjs");
 let _platforma_sdk_model = require("@platforma-sdk/model");
 let undici = require("undici");
 let _milaboratories_ts_helpers = require("@milaboratories/ts-helpers");
+let _milaboratories_pl_model_common = require("@milaboratories/pl-model-common");
 let _milaboratories_pl_client = require("@milaboratories/pl-client");
 let lru_cache = require("lru-cache");
 let _milaboratories_computable = require("@milaboratories/computable");
 let node_crypto = require("node:crypto");
 let quickjs_emscripten = require("quickjs-emscripten");
-let _milaboratories_pl_model_common = require("@milaboratories/pl-model-common");
 //#region src/middle_layer/middle_layer.ts
 /**
 * Main access object to work with pl from UI.
@@ -191,6 +195,144 @@ var MiddleLayer = class MiddleLayer {
 		}, { name: "setProjectMeta" });
 		await this.projectListTree.refreshState();
 	}
+	/**
+	* Renders a project as a `template-v1` YAML document, or reports every reason it
+	* cannot be — the backing call for an "Export Project as Template…" command.
+	*
+	* Takes a project id rather than an open {@link Project} because exporting is a
+	* property of the stored project, not of a session with it: the command belongs on
+	* a project card, where the project is usually closed. Opening one to read it would
+	* spin up trees and watchers for a one-shot read, and then have to decide whether to
+	* close them again.
+	*
+	* Read-only — the underlying mutator touches no field, so the transaction is never
+	* committed and the project list needs no refresh.
+	*
+	* @param id - project id of the project to export
+	*/
+	async exportProjectAsTemplate(id) {
+		const rid = await this.resolveProjectId(id);
+		return await require_project.withProject(this.env.projectHelper, this.pl, rid, (prj) => prj.exportAsTemplateV1(), { name: "exportProjectAsTemplate" });
+	}
+	/**
+	* Creates the blocks a `template-v1` document describes in an existing project, in the
+	* order the document lists them — the backing call for a "Create Project from Template
+	* file…" command, which is `createProject` followed by this.
+	*
+	* Takes a project id rather than an open {@link Project}, like
+	* {@link exportProjectAsTemplate} and for the same reason: applying a template is a
+	* property of the stored project, not of a session with it, and the flow that needs it
+	* has just created the project and has no session yet. An already-open session picks the
+	* new blocks up through its own refresh loop.
+	*
+	* Three stages, and their order is the design:
+	*
+	* 1. **Resolve every entry** to a concrete block pack, through `provider`.
+	* 2. **Prepare every block**: fetch it, check it can run against this backend, cache its
+	*    workflow template, and offer the entry's params to the block's kind for a shape
+	*    check.
+	* 3. **Create the blocks**, in one transaction — each one's params first pointed at this
+	*    project by the block's own model, since which values in there are references is
+	*    knowledge only the block has.
+	*
+	* The first two create nothing, so either of them failing leaves the project exactly as it
+	* was. They are also what leaves stage 3 with only in-memory work, and hence able to be a
+	* single transaction.
+	*
+	* **Stage 3 is all or nothing too**, because it is that one transaction: an entry it cannot
+	* create throws, the transaction is never committed, and the project keeps none of the
+	* blocks the apply had placed. So `problems` non-empty always means `added` is empty, at
+	* every stage — a caller never has to reconcile a half-built project, and never has to ask
+	* which of the blocks present came from the file.
+	*
+	* What is NOT checked before the work starts: which entries an entry references. Reading
+	* that means reading the params, which only the block can do, and no block exists until
+	* stage 2 has fetched one. A file whose entry references one listed below it therefore
+	* applies, and the block it creates reports itself as missing references — the same way a
+	* reference to a deleted block already behaves.
+	*
+	* @param id Project to apply into
+	* @param document A parsed template document
+	* @param provider Where each entry's block comes from
+	* @param options `allowUnstable` widens resolution to pre-release implementations, for
+	*   the whole document
+	*/
+	async applyTemplateToProject(id, document, provider, options = {}) {
+		const resolution = await require_template_resolve.resolveTemplateEntries(document, provider, { allowUnstable: options.allowUnstable ?? false });
+		if (resolution.problems.length > 0) return {
+			added: [],
+			problems: resolution.problems
+		};
+		const byEntryId = new Map(document.blocks.map((entry) => [entry.id, entry]));
+		const prepared = /* @__PURE__ */ new Map();
+		const problems = [];
+		for (const entry of resolution.resolved) try {
+			const documentEntry = byEntryId.get(entry.entryId);
+			const preparedBp = await this.env.bpPreparer.prepare(entry.spec);
+			const blockCfg = (0, _platforma_sdk_model.extractConfig)(preparedBp.config);
+			const mismatch = require_template_apply.kindMismatch(documentEntry.kind, preparedBp.config.kind);
+			if (mismatch !== void 0) {
+				const locator = documentEntry.location ?? documentEntry.block;
+				problems.push({
+					entryId: entry.entryId,
+					error: locator === void 0 ? `${mismatch}.` : `${mismatch} (${locator}).`
+				});
+				continue;
+			}
+			this.env.runtimeCapabilities.throwIfIncompatible(blockCfg.featureFlags);
+			require_project$1.throwIfMissingServerCapabilities(this.pl, preparedBp.requiredCapabilities);
+			const cachedBp = await require_template_cache.cacheBlockPackTemplate(this.pl, preparedBp);
+			const checked = this.env.projectHelper.validateTemplateParamsInVM(blockCfg, documentEntry.params);
+			if (checked.error !== void 0) {
+				problems.push({
+					entryId: entry.entryId,
+					error: checked.error.message
+				});
+				continue;
+			}
+			prepared.set(entry.entryId, {
+				blockPack: cachedBp,
+				label: entry.title
+			});
+		} catch (e) {
+			problems.push({
+				entryId: entry.entryId,
+				error: `This entry's block could not be installed: ${(0, _platforma_sdk_model.ensureError)(e).message}`
+			});
+		}
+		if (problems.length > 0) return {
+			added: [],
+			problems
+		};
+		const rid = await this.resolveProjectId(id);
+		let added = [];
+		try {
+			await require_project.withProjectAuthored(this.env.projectHelper, this.pl, rid, options.author, (mut) => {
+				added = require_template_construct.applyTemplateEntries({
+					document,
+					placer: mut,
+					entries: prepared,
+					projectHelper: this.env.projectHelper
+				});
+			}, {
+				name: "applyTemplateToProject",
+				lockId: `project:${id}`
+			});
+		} catch (e) {
+			if (!(e instanceof require_template_apply.TemplateEntryRejected)) throw e;
+			return {
+				added: [],
+				problems: [{
+					entryId: e.entryId,
+					error: e.message
+				}]
+			};
+		}
+		return {
+			added,
+			problems: []
+		};
+	}
 	/** Permanently deletes project from the project list, this will result in
 	* destruction of all attached objects, like files, analysis results etc. */
 	async deleteProject(id) {

package/dist/middle_layer/middle_layer.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"middle_layer.cjs","names":["canGrantToEveryone","canImpersonate","LRUCache","createProject","withProjectAuthored","ProjectMetaKey","isNotNullSignedResourceId","duplicateProject","ensureProjectListRid","buildShareEnvelope","GrantType","isEnvelopeProjectField","envelopeProjectFieldUuid","isAcceptanceField","acceptanceFieldLogin","decodeEnvelopeData","copyEnvelopeProjectsIntoList","resourceIdsToStrings","Project","HmacSha256Signer","DefaultMiddleLayerOpsSettings","DefaultMiddleLayerOpsPaths","getDebugFlags","ProjectsField","ProjectsResourceType","SharingOutboxField","SharingOutboxResourceType","SharingStateField","SharingStateResourceType","initDriverKit","RetryAgent","V2RegistryProvider","BlockPackPreparer","RuntimeCapabilities","REQUIRES_PFRAMES_VERSION","createModelServiceRegistry","BlockEventDispatcher","BlockUpdateWatcher","ProjectHelper","WatchableValue","createProjectList","createOutgoingShares","createSharingStateTree","createPendingSharesTree","createPendingSharesComputable","createLiveEnvelopesComputable"],"sources":["../../src/middle_layer/middle_layer.ts"],"sourcesContent":["import type {\n  PlClient,\n  PlTransaction,\n  SignedResourceId,\n  ResourceRef,\n  Role,\n} from \"@milaboratories/pl-client\";\nimport {\n  isEveryoneUserLogin,\n  field,\n  GrantType,\n  isNotNullSignedResourceId,\n  isNullSignedResourceId,\n  resourceIdToString,\n} from \"@milaboratories/pl-client\";\nimport { LRUCache } from \"lru-cache\";\nimport {\n  createProjectList,\n  ensureProjectListRid,\n  ProjectsField,\n  ProjectsResourceType,\n} from \"./project_list\";\nimport { createProject, duplicateProject, withProjectAuthored } from \"../mutator/project\";\nimport { ProjectMetaKey } from \"../model/project_model\";\nimport type { ProjectId } from \"../model/project_model\";\nimport type { SynchronizedTreeState } from \"@milaboratories/pl-tree\";\nimport {\n  acceptanceFieldLogin,\n  canGrantToEveryone,\n  canImpersonate,\n  decodeEnvelopeData,\n  isAcceptanceField,\n  SharingOutboxField,\n  SharingOutboxResourceType,\n  SharingStateField,\n  SharingStateResourceType,\n  type EnvelopeAcceptance,\n  type EnvelopeData,\n  type ProjectChangeAction,\n  type ProjectFieldUuid,\n  type ShareId,\n  type ShareProjectsOptions,\n} from \"../model/sharing_model\";\nimport {\n  buildShareEnvelope,\n  copyEnvelopeProjectsIntoList,\n  envelopeProjectFieldUuid,\n  isEnvelopeProjectField,\n  resourceIdsToStrings,\n  writeEnvelopeAcceptance,\n  writeSharingDecision,\n  type EnvelopeProjectSource,\n} from \"../mutator/sharing\";\nimport type { LiveEnvelope, OutgoingShare, PendingShare } from \"./sharing_list\";\nimport {\n  createLiveEnvelopesComputable,\n  createOutgoingShares,\n  createPendingSharesComputable,\n  createPendingSharesTree,\n  createSharingStateTree,\n} from \"./sharing_list\";\nimport { BlockPackPreparer } from \"../mutator/block-pack/block_pack\";\nimport type { MiLogger, Signer } from \"@milaboratories/ts-helpers\";\nimport { BlockEventDispatcher, cachedDeserialize } from \"@milaboratories/ts-helpers\";\nimport { HmacSha256Signer } from \"@milaboratories/ts-helpers\";\nimport type { Computable, ComputableStableDefined } from \"@milaboratories/computable\";\nimport { WatchableValue } from \"@milaboratories/computable\";\nimport { Project } from \"./project\";\nimport type { MiddleLayerOps, MiddleLayerOpsConstructor } from \"./ops\";\nimport { DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings } from \"./ops\";\nimport { randomUUID } from \"node:crypto\";\nimport type { ProjectListEntry } from \"../model\";\nimport type {\n  AuthorMarker,\n  ProjectMeta,\n  BlockPlatform,\n} from \"@milaboratories/pl-model-middle-layer\";\nimport { BlockUpdateWatcher } from \"../block_registry/watcher\";\nimport type { QuickJSWASMModule } from \"quickjs-emscripten\";\nimport { getQuickJS } from \"quickjs-emscripten\";\nimport type { MiddleLayerDriverKit } from \"./driver_kit\";\nimport { initDriverKit } from \"./driver_kit\";\nimport type { BlockCodeFeatureFlags, DriverKit, SupportedRequirement } from \"@platforma-sdk/model\";\nimport { RuntimeCapabilities } from \"@platforma-sdk/model\";\nimport {\n  type ModelServiceRegistry,\n  registerServiceCapabilities,\n  REQUIRES_PFRAMES_VERSION,\n} from \"@milaboratories/pl-model-common\";\nimport { createModelServiceRegistry } from \"../service_factories\";\nimport type { DownloadUrlDriver } from \"@milaboratories/pl-drivers\";\nimport { V2RegistryProvider } from \"../block_registry\";\nimport type { Dispatcher } from \"undici\";\nimport { RetryAgent } from \"undici\";\nimport { getDebugFlags } from \"../debug\";\nimport { ProjectHelper } from \"../model/project_helper\";\n\nexport interface MiddleLayerEnvironment {\n  dispose(): Promise<void>;\n  readonly pl: PlClient;\n  readonly runtimeCapabilities: RuntimeCapabilities;\n  readonly logger: MiLogger;\n  readonly blockEventDispatcher: BlockEventDispatcher;\n  readonly httpDispatcher: Dispatcher;\n  readonly retryHttpDispatcher: Dispatcher;\n  readonly signer: Signer;\n  readonly ops: MiddleLayerOps;\n  readonly bpPreparer: BlockPackPreparer;\n  readonly frontendDownloadDriver: DownloadUrlDriver;\n  readonly blockUpdateWatcher: BlockUpdateWatcher;\n  readonly quickJs: QuickJSWASMModule;\n  readonly driverKit: MiddleLayerDriverKit;\n  readonly serviceRegistry: ModelServiceRegistry;\n  readonly projectHelper: ProjectHelper;\n}\n\n/**\n * Main access object to work with pl from UI.\n *\n * It implements an abstraction layer of projects and blocks.\n *\n * As a main entry point inside the pl, this object uses a resource attached\n * via the {@link ProjectsField} to the pl client's root, this resource\n * contains project list.\n *\n * Read about alternative roots, if isolated project lists (working environments)\n * are required.\n * */\nexport class MiddleLayer {\n  public readonly pl: PlClient;\n\n  private constructor(\n    private readonly env: MiddleLayerEnvironment,\n    public readonly driverKit: DriverKit,\n    public readonly signer: Signer,\n    private readonly projectListResourceId: SignedResourceId,\n    private readonly sharingOutboxResourceId: SignedResourceId,\n    private readonly sharingStateResourceId: SignedResourceId,\n    private readonly openedProjectsList: WatchableValue<ProjectId[]>,\n    private readonly projectListTree: SynchronizedTreeState,\n    private readonly sharingOutboxTree: SynchronizedTreeState,\n    private readonly sharingStateTree: SynchronizedTreeState,\n    private readonly pendingSharesTree: SynchronizedTreeState,\n    public readonly blockRegistryProvider: V2RegistryProvider,\n    /** Contains a reactive list of projects along with their meta information. */\n    public readonly projectList: ComputableStableDefined<ProjectListEntry[]>,\n    /** Reactive view of the donor's outbox — the shares this user has created.\n     *  v1: API only, no UI. */\n    public outgoingShares: Computable<OutgoingShare[] | undefined>,\n    /** Envelopes granted to this user, not yet accepted or rejected. Fed by the\n     *  shared-resource discovery tree. */\n    public pendingShares: Computable<PendingShare[] | undefined>,\n    /** Internal: the acceptor's currently-live envelopes, read from the same shared-resource\n     *  discovery tree as {@link pendingShares}. The single source the accept/reject flow resolves\n     *  live envelopes from — no second discovery path. */\n    private readonly liveEnvelopes: Computable<LiveEnvelope[] | undefined>,\n  ) {\n    this.pl = this.env.pl;\n    this.startEnvelopeCleanup();\n  }\n\n  /**\n   * Get the OS where backend is running.\n   * For old backend versions returns undefined.\n   */\n  public get serverPlatform(): BlockPlatform | undefined {\n    return this.pl.serverInfo.platform as BlockPlatform | undefined;\n  }\n\n  /**\n   * Runtime capabilities advertised by the connected backend (tokens of\n   * the form `<feature>:<version>`, e.g. \"wasm:v1\"). Empty list if the\n   * backend predates the capability mechanism — that's the desired\n   * fail-closed behaviour for blocks declaring any `requiredCapabilities`.\n   */\n  public get serverCapabilities(): string[] {\n    return this.pl.serverInfo.capabilities ?? [];\n  }\n\n  /**\n   * Login of the authenticated user, for the \"Signed in as\" UI. `null` when the\n   * backend has no auth (local/dev mode) — the UI hides the element.\n   */\n  public get currentUserLogin(): string | null {\n    return this.pl.userResources.authUser;\n  }\n\n  /**\n   * Whether the connected backend supports project sharing. Synthetic — computed\n   * in the middle layer from the backend capabilities the share flow needs (the\n   * cross-color field-reference relaxation the accept flow rests on). It can absorb\n   * additional required capabilities later without a UI change.\n   */\n  public get sharingSupported(): boolean {\n    // Sharing does not compose with impersonation (discovery is scoped to the admin's session,\n    // decisions attribute to the admin), so it is disabled while impersonating. Admins move\n    // projects across roots with duplicateProjectToUser instead.\n    return this.serverCapabilities.includes(\"crossTreeRefs:v1\") && !this.impersonating;\n  }\n\n  /** True when this session is impersonating another user (an admin opened another user's root). */\n  public get impersonating(): boolean {\n    return this.pl.conf.asUser !== undefined;\n  }\n\n  /**\n   * Role of the authenticated user, from the `GetSessionInfo` RPC surfaced through the\n   * pl-client. `null` in no-auth mode (when {@link currentUserLogin} is null).\n   */\n  public get currentUserRole(): Role | null {\n    return this.pl.currentUserRole;\n  }\n\n  /**\n   * Whether the UI offers share-with-everybody — no role policy lives in the UI:\n   *   serverCapabilities.has(\"publicGrants:v1\") && canGrantToEveryone(currentUserRole)\n   * Not a security boundary: a crafted call still hits the backend's role +\n   * permission-ceiling gate.\n   */\n  public get canShareWithEveryone(): boolean {\n    return (\n      !this.impersonating &&\n      this.serverCapabilities.includes(\"publicGrants:v1\") &&\n      canGrantToEveryone(this.currentUserRole)\n    );\n  }\n\n  /**\n   * Whether the authenticated user may impersonate others (open another user's root). Mirrors\n   * the backend's `CanImpersonate` role gate — admin/controller only, never a regular user.\n   * Derived from the session role, which stays the authenticated admin's even while\n   * impersonating, so this stays true across a switch: the \"return to my root\" affordance must\n   * not vanish mid-impersonation. Not a security boundary; the backend re-checks on every call.\n   */\n  public get currentUserCanImpersonate(): boolean {\n    return canImpersonate(this.currentUserRole);\n  }\n\n  /** Adds a runtime capability to the middle layer. */\n  public addRuntimeCapability(\n    requirement: SupportedRequirement,\n    value: number | boolean = true,\n  ): void {\n    this.env.runtimeCapabilities.addSupportedRequirement(requirement, value);\n  }\n\n  /** Checks if the given block feature flags are compatible with the runtime capabilities. */\n  public checkBlockCompatibility(featureFlags: BlockCodeFeatureFlags | undefined): boolean {\n    return this.env.runtimeCapabilities.checkCompatibility(featureFlags);\n  }\n\n  /** Returns extended API driver kit used internally by middle layer. */\n  public get internalDriverKit(): MiddleLayerDriverKit {\n    return this.env.driverKit;\n  }\n\n  /** Returns the service registry for service introspection. */\n  public get serviceRegistry(): ModelServiceRegistry {\n    return this.env.serviceRegistry;\n  }\n\n  //\n  // ProjectId ↔ SignedResourceId resolution\n  //\n\n  private readonly projectIdCache = new LRUCache<ProjectId, SignedResourceId>({ max: 1024 });\n\n  /** Resolves a ProjectId to a signed SignedResourceId.\n   * Uses LRU cache with TX-scan fallback. */\n  private async resolveProjectId(projectId: ProjectId): Promise<SignedResourceId> {\n    const cached = this.projectIdCache.get(projectId);\n    if (cached !== undefined) return cached;\n\n    // Cache miss — scan project list fields to find the matching resource\n    const rid = await this.pl.withReadTx(\"ResolveProjectId\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (projectId as string)) return f.value;\n      }\n      throw new Error(`Project ${projectId} not found in project list.`);\n    });\n\n    this.projectIdCache.set(projectId, rid);\n    return rid;\n  }\n\n  //\n  // Project List Manipulation\n  //\n\n  /** Creates a project with initial state and adds it to project list. */\n  public async createProject(meta: ProjectMeta): Promise<ProjectId> {\n    let prj: ResourceRef;\n    await this.pl.withWriteTx(\"MLCreateProject\", async (tx) => {\n      prj = await createProject(tx, meta);\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", prj);\n      await tx.commit();\n    });\n    await this.projectListTree.refreshState();\n\n    const signedRid = await prj!.globalId;\n    const projectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(projectId, signedRid);\n    return projectId;\n  }\n\n  /** Updates project metadata */\n  public async setProjectMeta(\n    id: ProjectId,\n    meta: ProjectMeta,\n    author?: AuthorMarker,\n  ): Promise<void> {\n    const rid = await this.resolveProjectId(id);\n    await withProjectAuthored(\n      this.env.projectHelper,\n      this.pl,\n      rid,\n      author,\n      (prj) => {\n        prj.setMeta(meta);\n      },\n      { name: \"setProjectMeta\" },\n    );\n    await this.projectListTree.refreshState();\n  }\n\n  /** Permanently deletes project from the project list, this will result in\n   * destruction of all attached objects, like files, analysis results etc. */\n  public async deleteProject(id: ProjectId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRemoveProject\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      let fieldName: string | undefined;\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (id as string)) {\n          fieldName = f.name;\n          break;\n        }\n      }\n      if (fieldName === undefined) throw new Error(`Project ${id} not found in project list.`);\n      tx.removeField(field(this.projectListResourceId, fieldName));\n      await tx.commit();\n    });\n    this.projectIdCache.delete(id);\n    await this.projectListTree.refreshState();\n  }\n\n  /**\n   * Duplicates an existing project and adds the copy to this user's project list.\n   *\n   * @param srcProjectId - project id of the project to duplicate\n   * @param rename - optional function that receives the source label and all existing\n   *   project labels (read within the same transaction), and returns the label for the copy\n   */\n  public async duplicateProject(\n    srcProjectId: ProjectId,\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<ProjectId> {\n    const sourceRid = await this.resolveProjectId(srcProjectId);\n\n    const newPrj: ResourceRef = await this.pl.withWriteTx(\"MLDuplicateProject\", async (tx) => {\n      // Read source project meta\n      const sourceMeta = await tx.getKValueJson<ProjectMeta>(sourceRid, ProjectMetaKey);\n\n      // Read all existing project labels from the project list (parallel reads)\n      const projectListData = await tx.getResourceData(this.projectListResourceId, true);\n      const projectRids = projectListData.fields\n        .map((f) => f.value)\n        .filter(isNotNullSignedResourceId);\n      const existingLabels = (\n        await Promise.all(\n          projectRids.map((rid) => tx.getKValueJson<ProjectMeta>(rid, ProjectMetaKey)),\n        )\n      ).map((m) => m.label);\n\n      // Compute new label\n      const newLabel = rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label;\n\n      // Create the duplicate\n      const newPrj = await duplicateProject(\n        tx,\n        sourceRid,\n        { label: newLabel },\n        this.env.projectHelper,\n      );\n\n      // Attach to project list with a random UUID field name\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", newPrj);\n      await tx.commit();\n\n      return newPrj;\n    });\n\n    await this.projectListTree.refreshState();\n\n    const signedRid = await newPrj.globalId;\n    const newProjectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(newProjectId, signedRid);\n    return newProjectId;\n  }\n\n  /**\n   * Duplicates a project into another user's root, minted in the TARGET user's color so the target\n   * owns it. Sibling of {@link duplicateProject}, but writes into a different root. The source\n   * project (on the current client root) is referenced cross-color for its block data, kept alive\n   * by refcounting, exactly like accepting a shared project. Works both ways: pull (while\n   * impersonating a user, copy their project to yourself) and push (from your own root, copy a\n   * project to a user). Admin cross-root op; requires the crossTreeRefs:v1 backend capability.\n   */\n  public async duplicateProjectToUser(\n    srcProjectId: ProjectId,\n    targetLogin: string,\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<void> {\n    if (!this.serverCapabilities.includes(\"crossTreeRefs:v1\"))\n      throw new Error(\"duplicateProjectToUser requires the crossTreeRefs:v1 backend capability.\");\n\n    const sourceRid = await this.resolveProjectId(srcProjectId);\n    const targetRoot = await this.pl.getUserRoot({ login: targetLogin, createIfNotExists: true });\n\n    // Run on the target root: the tx default color is the target's, so the new project (and the\n    // target's project list, if created here) are minted in the target's color.\n    await this.pl.withWriteTxOnRoot(targetRoot, \"MLDuplicateProjectToUser\", async (tx) => {\n      // Resolve or lazily create the target root's project list (tx.clientRoot === targetRoot).\n      const targetProjectListRid = await ensureProjectListRid(tx);\n\n      // Source label + the target's existing labels, for collision-aware renaming.\n      const sourceMeta = await tx.getKValueJson<ProjectMeta>(sourceRid, ProjectMetaKey);\n      const targetListData = await tx.getResourceData(targetProjectListRid, true);\n      const existingLabels = (\n        await Promise.all(\n          targetListData.fields\n            .map((f) => f.value)\n            .filter(isNotNullSignedResourceId)\n            .map((rid) => tx.getKValueJson<ProjectMeta>(rid, ProjectMetaKey)),\n        )\n      ).map((m) => m.label);\n      const newLabel = rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label;\n\n      const newPrj = await duplicateProject(\n        tx,\n        sourceRid,\n        { label: newLabel },\n        this.env.projectHelper,\n      );\n      tx.createField(field(targetProjectListRid, randomUUID()), \"Dynamic\", newPrj);\n      await tx.commit();\n    });\n  }\n\n  //\n  // Project Sharing (Copy & Share)\n  //\n\n  /**\n   * Shares the given projects (Copy & Share). Snapshots the projects, creates one envelope, and\n   * grants it — all in one atomic write transaction, so a failed grant rolls the whole thing back\n   * and the outbox is left as it was.\n   *\n   * Two variants (see {@link ShareProjectsOptions}):\n   * - `{ recipients }` — one writable grant per named recipient; the envelope expires after the\n   *   default TTL (`sharedAt + envelopeTtlMs`).\n   * - `{ everyone: true }` — one make-public grant (backend rewrites the target to the\n   *   everyone-user); the envelope's `expiresAt` is `null`, so it never expires.\n   *\n   * v1 always passes `mode: \"copy\"`.\n   */\n  public async shareProjects(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    if (projectIds.length === 0) throw new Error(\"shareProjects: no projects given\");\n\n    // Everyone + replace: refresh the existing everyone-share of this project under its stable\n    // shareId (so recipients who already decided aren't re-prompted), if one exists. Found\n    // automatically by project overlap; falls through to a fresh share when none exists.\n    if (\"everyone\" in options && options.replace) {\n      const priorEveryone = (await this.findSupersedableEnvelopes(projectIds)).find(\n        (p) => p.everyone,\n      );\n      if (priorEveryone !== undefined) {\n        await this.changeShare(priorEveryone.shareId, { title: options.title });\n        return;\n      }\n    }\n\n    await this.createNewShare(projectIds, options);\n  }\n\n  /**\n   * Mints a fresh share: snapshots the projects into one new envelope (a fresh shareId),\n   * supersedes prior shares of the same project, and grants it — all in one atomic write\n   * transaction, so a failed grant rolls the whole thing back and the outbox is left as it was.\n   * The everyone-refresh path is the {@link changeShare} branch of {@link shareProjects}; this is\n   * the mint-a-new-envelope branch.\n   */\n  private async createNewShare(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    const everyone = \"everyone\" in options;\n    const sources: EnvelopeProjectSource[] = await Promise.all(\n      projectIds.map(\n        async (id): Promise<EnvelopeProjectSource> => ({\n          kind: \"fresh\",\n          projectId: id,\n          sourceRid: await this.resolveProjectId(id),\n        }),\n      ),\n    );\n    const sender = this.currentUserLogin ?? \"\";\n    // Targeted share: sharedAt + ttl. Share-with-everybody: never expires (null).\n    const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n    // Supersede prior shares of the same project(s) so they never pile up. Resolved before\n    // the write tx (ListGrants is a separate RPC). Everyone-share supersedes a prior\n    // everyone-share of the same project; a targeted share pulls each named recipient out of\n    // any prior share of that project, deleting that share if it ends up with no recipients.\n    const priors = await this.findSupersedableEnvelopes(projectIds);\n\n    await this.pl.withWriteTx(\"MLShareProjects\", async (tx) => {\n      if (everyone) {\n        for (const prior of priors) {\n          if (prior.everyone) tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n        }\n      } else {\n        const newRecipients = new Set(options.recipients);\n        for (const prior of priors) {\n          if (prior.everyone) continue; // a single user can't be pulled from an everyone-grant\n          const toRemove = prior.recipients.filter((u) => newRecipients.has(u));\n          if (toRemove.length === 0) continue;\n          const remaining = prior.recipients.filter((u) => !newRecipients.has(u));\n          if (remaining.length === 0) {\n            // Nobody left on the old share — drop the whole envelope.\n            tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n          } else {\n            for (const u of toRemove) tx.revokeAccess(prior.rid, u);\n          }\n        }\n      }\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: options.mode,\n        sender,\n        title: options.title,\n        expiresAt,\n      });\n\n      // Grant in the same transaction (writable: the cross-color accept rule demands a writable\n      // grant on the envelope). Atomic with the create.\n      const envelopeGid = await envelope.globalId;\n      if (everyone) {\n        // One everyone-grant: empty/ignored target, ANY_AUTHORISED. The backend rewrites\n        // the target to the everyone-user; gated by role + permission ceiling.\n        tx.grantAccess(envelopeGid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      } else {\n        for (const recipient of options.recipients) {\n          tx.grantAccess(envelopeGid, recipient, { writable: true });\n        }\n      }\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Changes a share in place (same {@link ShareId}), in one write transaction: re-snapshots live\n   * source projects and carries deleted ones' snapshots forward; applies edited recipients/title;\n   * transfers already-decided recipients' accept/reject records (they keep their copy and aren't\n   * re-prompted); re-grants; drops the old envelope.\n   *\n   * `opts.recipients` is the full targeted set (decided users are always kept). `opts.title`\n   * replaces the title — omit keeps the current one. `opts.everyone` upgrades targeted ->\n   * everyone; the reverse is impossible and ignored.\n   *\n   * `opts.projectActions` is a per-source-project decision, keyed by projectId: `update`\n   * re-snapshots the live source (falls back to carry if the source is gone), `keep` carries the\n   * existing snapshot (and its timestamp), `remove` drops the project from the pack. A project not\n   * in the map defaults to `keep`. Omit the whole map for the legacy auto behavior (live sources\n   * updated, gone ones kept) — the everyone-refresh path relies on that.\n   */\n  public async changeShare(\n    shareId: ShareId,\n    opts: {\n      recipients?: string[];\n      everyone?: boolean;\n      title?: string;\n      projectActions?: Record<ProjectId, ProjectChangeAction>;\n    } = {},\n  ): Promise<void> {\n    await this.pl.withWriteTx(\"MLChangeShare\", async (tx) => {\n      const old = await this.resolveOutboxEnvelope(tx, shareId);\n      if (old === undefined)\n        throw new Error(`changeShare: no live share with id ${shareId} in the outbox.`);\n\n      const self = this.currentUserLogin ?? \"\";\n      const grants = await tx.listGrants(old.rid);\n      // A targeted share may be upgraded to everyone; an everyone-share can't be narrowed back.\n      const everyone = grants.some((g) => isEveryoneUserLogin(g.user)) || opts.everyone === true;\n\n      // Read the old envelope's project snapshots (uuid -> rid) and accept/reject records.\n      const oldRd = await tx.getResourceData(old.rid, true);\n      const snapshotByUuid = new Map<string, SignedResourceId>();\n      const acceptances: { login: string; acc: EnvelopeAcceptance }[] = [];\n      for (const f of oldRd.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (isEnvelopeProjectField(f.name)) {\n          snapshotByUuid.set(envelopeProjectFieldUuid(f.name), f.value);\n        } else if (isAcceptanceField(f.name)) {\n          const raw = (await tx.getResourceData(f.value, false)).data;\n          if (raw === undefined) continue;\n          acceptances.push({\n            login: acceptanceFieldLogin(f.name),\n            acc: cachedDeserialize(raw) as EnvelopeAcceptance,\n          });\n        }\n      }\n      const decidedLogins = acceptances.map((a) => a.login);\n\n      // Everyone-shares ignore recipients; targeted shares keep decided users plus the edited set.\n      const priorRecipients = grants\n        .filter((g) => !isEveryoneUserLogin(g.user) && g.user !== self)\n        .map((g) => g.user);\n      const recipients = everyone\n        ? []\n        : Array.from(new Set([...(opts.recipients ?? priorRecipients), ...decidedLogins]));\n\n      // Live source projects by persistable id — these get a fresh snapshot.\n      const liveProjects = new Map<string, SignedResourceId>();\n      const projList = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of projList.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        liveProjects.set(resourceIdToString(f.value), f.value);\n      }\n\n      // Per project (keyed by field uuid), apply the caller's decision (default `keep`); with no\n      // projectActions map, fall back to the legacy auto behavior: update a live source, keep a gone one.\n      const actions = opts.projectActions;\n      const sources: EnvelopeProjectSource[] = [];\n      for (const uuid of Object.keys(old.data.projects) as ProjectFieldUuid[]) {\n        const { label, source, updatedAt } = old.data.projects[uuid];\n        const liveRid = liveProjects.get(source);\n\n        const action = actions\n          ? (actions[source] ?? \"keep\")\n          : liveRid !== undefined\n            ? \"update\"\n            : \"keep\";\n        if (action === \"remove\") continue;\n\n        if (action === \"update\" && liveRid !== undefined) {\n          sources.push({ kind: \"fresh\", projectId: source, sourceRid: liveRid });\n        } else {\n          // keep, or an \"update\" whose source vanished before commit (deleted meanwhile, e.g. from\n          // another client): carry the prior snapshot. Liveness is read inside this write tx — race-safe.\n          const snapshotRid = snapshotByUuid.get(uuid);\n          if (snapshotRid !== undefined)\n            sources.push({ kind: \"carry\", projectId: source, label, snapshotRid, updatedAt });\n        }\n      }\n\n      // Omit (undefined) keeps the current title; a provided value replaces it.\n      const title = opts.title === undefined ? old.data.title : opts.title.trim();\n      const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n      // Same shareId, same outbox field name — detach the old field before rebuilding, or they collide.\n      tx.removeField(field(this.sharingOutboxResourceId, old.fieldName));\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: old.data.mode,\n        sender: self,\n        title,\n        expiresAt,\n        shareId, // SAME shareId — the essence of change\n      });\n\n      // Transfer the decided users' records onto the new envelope (donor-written copies).\n      for (const { login, acc } of acceptances) {\n        if (!everyone && !recipients.includes(login)) continue;\n        writeEnvelopeAcceptance(tx, envelope, login, acc.action, acc.timestamp);\n      }\n\n      const gid = await envelope.globalId;\n      if (everyone) tx.grantAccess(gid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      else for (const r of recipients) tx.grantAccess(gid, r, { writable: true });\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Finds the donor's own outgoing envelopes built from any of the given source projects —\n   * the supersede candidates for a fresh share of the same project(s). Reads each envelope's\n   * recipient set via `ListGrants` so the caller can pull individual recipients or detect an\n   * everyone-share.\n   */\n  private async findSupersedableEnvelopes(projectIds: ProjectId[]): Promise<\n    {\n      fieldName: string;\n      rid: SignedResourceId;\n      shareId: ShareId;\n      everyone: boolean;\n      recipients: string[];\n    }[]\n  > {\n    const wanted = new Set(projectIds);\n\n    const matched = await this.pl.withReadTx(\"MLFindSupersede\", async (tx) => {\n      const outbox = await tx.getResourceData(this.sharingOutboxResourceId, true);\n      const out: { fieldName: string; rid: SignedResourceId; shareId: ShareId }[] = [];\n      for (const f of outbox.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        const rd = await tx.getResourceData(f.value, false);\n        if (rd.data === undefined) continue;\n        const data = decodeEnvelopeData(rd.data);\n        if (Object.values(data.projects).some((p) => wanted.has(p.source)))\n          out.push({ fieldName: f.name, rid: f.value, shareId: data.shareId });\n      }\n      return out;\n    });\n\n    return await Promise.all(\n      matched.map(async ({ fieldName, rid, shareId }) => {\n        const grants = await this.pl.userResources.listGrants(rid);\n        return {\n          fieldName,\n          rid,\n          shareId,\n          everyone: grants.some((g) => isEveryoneUserLogin(g.user)),\n          recipients: grants.filter((g) => !isEveryoneUserLogin(g.user)).map((g) => g.user),\n        };\n      }),\n    );\n  }\n\n  /**\n   * Revokes and deletes an outgoing share for all recipients: detaches and deletes the envelope, and\n   * its grants are revoked along with it. Already-accepted copies are unaffected (ref-counting keeps\n   * the adopted resources alive). Idempotent — revoking a share that is already gone is a no-op.\n   */\n  public async revokeShare(shareId: ShareId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRevokeShare\", async (tx) => {\n      const target = await this.resolveOutboxEnvelope(tx, shareId);\n      if (target === undefined) return;\n      tx.removeField(field(this.sharingOutboxResourceId, target.fieldName));\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Resolves a live envelope from the donor's own outbox by its logical `shareId`, returning the\n   * outbox field name (for detach), the signed envelope id, and its decoded {@link EnvelopeData}.\n   * The outbox is keyed by `{shareId}` directly, but a replaced/legacy share may have drifted, so\n   * we match on the decoded `shareId` rather than the field name alone.\n   */\n  private async resolveOutboxEnvelope(\n    tx: PlTransaction,\n    shareId: ShareId,\n  ): Promise<{ fieldName: string; rid: SignedResourceId; data: EnvelopeData } | undefined> {\n    const outboxData = await tx.getResourceData(this.sharingOutboxResourceId, true);\n    for (const f of outboxData.fields) {\n      if (isNullSignedResourceId(f.value)) continue;\n      const rd = await tx.getResourceData(f.value, false);\n      if (rd.data === undefined) continue;\n      const data = decodeEnvelopeData(rd.data);\n      if (data.shareId === shareId) return { fieldName: f.name, rid: f.value, data };\n    }\n    return undefined;\n  }\n\n  /**\n   * Resolves currently-shared envelopes (granted to this user) to their resource ids, keyed by\n   * the envelope's logical `shareId`.\n   *\n   * Reads the {@link liveEnvelopes} Computable — the same shared-resource discovery tree that\n   * feeds {@link pendingShares}. This is the single discovery mechanism: there is no separate\n   * `ListUserResources` re-stream on every accept/reject. `refreshState()` is awaited first so a\n   * just-granted envelope is observed (the tree's discovery poll may otherwise lag a freshly\n   * landed grant). The tree is gRPC-only, so this is empty on a REST-connected client.\n   */\n  private async resolveLiveEnvelopes(): Promise<Map<ShareId, LiveEnvelope>> {\n    await this.pendingSharesTree.refreshState();\n    const live = (await this.liveEnvelopes.getValue()) ?? [];\n    // Dedup by logical shareId (last writer wins — at most one live envelope per shareId).\n    const map = new Map<ShareId, LiveEnvelope>();\n    for (const e of live) map.set(e.data.shareId, e);\n    return map;\n  }\n\n  /**\n   * Accepts one or more pending shares: duplicates each share's projects into this user's\n   * project list, records the decision per share, and (read-write share) writes the donor-visible\n   * acceptance onto the envelope. Per-share failures (e.g. an expiry race) are collected, not\n   * short-circuited — the rest still get accepted. Accept-all = pass every current pending shareId.\n   *\n   * `rename` resolves label collisions (same callback contract as {@link duplicateProject}), but\n   * the source lives in the envelope tree, so accept calls the low-level mutator directly.\n   */\n  public async acceptShare(\n    shareIds: ShareId[],\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<{ accepted: ProjectId[]; failed: { shareId: ShareId; error: string }[] }> {\n    const live = await this.resolveLiveEnvelopes();\n    const login = this.currentUserLogin;\n\n    const accepted: ProjectId[] = [];\n    const failed: { shareId: ShareId; error: string }[] = [];\n\n    for (const shareId of shareIds) {\n      const envelope = live.get(shareId);\n      if (envelope === undefined) {\n        failed.push({ shareId, error: \"Share is no longer available.\" });\n        continue;\n      }\n      try {\n        const now = Date.now();\n        const createdRids = await this.pl.withWriteTx(\"MLAcceptShare\", async (tx) => {\n          const created = await copyEnvelopeProjectsIntoList(\n            tx,\n            envelope.rid,\n            this.projectListResourceId,\n            rename,\n          );\n\n          // Record the decision on the acceptor's own SharingState, keyed on shareId.\n          writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n            decision: \"accepted\",\n            timestamp: now,\n            envelopeSharedAt: envelope.data.sharedAt,\n            acceptedProjects: resourceIdsToStrings(created),\n          });\n\n          // Read-write share: write the donor-visible acceptance onto the envelope.\n          if (login !== null && envelope.data.mode !== \"read-only\")\n            writeEnvelopeAcceptance(tx, envelope.rid, login, \"accepted\", now);\n\n          await tx.commit();\n          return created;\n        });\n        for (const rid of createdRids) {\n          const projectId = resourceIdToString(rid) as ProjectId;\n          this.projectIdCache.set(projectId, rid);\n          accepted.push(projectId);\n        }\n      } catch (e) {\n        failed.push({ shareId, error: e instanceof Error ? e.message : String(e) });\n      }\n    }\n\n    await Promise.all([this.projectListTree.refreshState(), this.sharingStateTree.refreshState()]);\n    return { accepted, failed };\n  }\n\n  /** Records rejection of a pending share; it never surfaces again. */\n  public async rejectShare(shareId: ShareId): Promise<void> {\n    const live = await this.resolveLiveEnvelopes();\n    const envelope = live.get(shareId);\n    const login = this.currentUserLogin;\n    const now = Date.now();\n\n    await this.pl.withWriteTx(\"MLRejectShare\", async (tx) => {\n      writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n        decision: \"rejected\",\n        timestamp: now,\n        envelopeSharedAt: envelope?.data.sharedAt ?? now,\n        acceptedProjects: [],\n      });\n\n      // Read-write share: write the donor-visible rejection onto the envelope (if still live).\n      if (envelope !== undefined && login !== null && envelope.data.mode !== \"read-only\")\n        writeEnvelopeAcceptance(tx, envelope.rid, login, \"rejected\", now);\n\n      await tx.commit();\n    });\n\n    await this.sharingStateTree.refreshState();\n  }\n\n  //\n  // Outbox cleanup (donor side)\n  //\n\n  private static readonly EnvelopeCleanupIntervalMs = 6 * 3600 * 1000; // every 6h\n  private envelopeCleanupTimer: ReturnType<typeof setInterval> | undefined;\n\n  /** On ML start and every 6h, delete envelopes whose immutable `expiresAt` has passed. */\n  private startEnvelopeCleanup(): void {\n    void this.runEnvelopeCleanup();\n    this.envelopeCleanupTimer = setInterval(() => {\n      void this.runEnvelopeCleanup();\n    }, MiddleLayer.EnvelopeCleanupIntervalMs);\n    // Don't keep the process alive solely for cleanup.\n    this.envelopeCleanupTimer.unref?.();\n  }\n\n  /** Scans the donor's outbox and deletes expired envelopes (backend auto-revokes their grants).\n   *  Envelopes with `expiresAt: null` (share-with-everybody) are skipped. */\n  private async runEnvelopeCleanup(): Promise<void> {\n    try {\n      const now = Date.now();\n      const expired = await this.pl.withReadTx(\"MLEnvelopeCleanupScan\", async (tx) => {\n        const data = await tx.getResourceData(this.sharingOutboxResourceId, true);\n        const toDelete: { fieldName: string }[] = [];\n        for (const f of data.fields) {\n          if (isNullSignedResourceId(f.value)) continue;\n          const rd = await tx.getResourceData(f.value, false);\n          if (rd.data === undefined) continue;\n          const envData = decodeEnvelopeData(rd.data);\n          if (envData.expiresAt === null) continue; // never expires\n          if (envData.expiresAt <= now) toDelete.push({ fieldName: f.name });\n        }\n        return toDelete;\n      });\n\n      if (expired.length === 0) return;\n\n      await this.pl.withWriteTx(\"MLEnvelopeCleanup\", async (tx) => {\n        for (const { fieldName } of expired)\n          tx.removeField(field(this.sharingOutboxResourceId, fieldName));\n        await tx.commit();\n      });\n\n      await this.sharingOutboxTree.refreshState();\n    } catch (e) {\n      this.env.logger.warn(\n        `envelope cleanup failed: ${e instanceof Error ? e.message : String(e)}`,\n      );\n    }\n  }\n\n  //\n  // Projects\n  //\n\n  private readonly openedProjects = new Map<ProjectId, Project>();\n\n  /** Opens a project, and starts corresponding project maintenance loop. */\n  public async openProject(id: ProjectId): Promise<void> {\n    if (this.openedProjects.has(id)) throw new Error(`Project ${id} already opened`);\n    const rid = await this.resolveProjectId(id);\n    this.openedProjects.set(id, await Project.init(this.env, id, rid));\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Closes the project, and deallocate all corresponding resources. */\n  public async closeProject(id: ProjectId): Promise<void> {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    this.openedProjects.delete(id);\n    await prj.destroy();\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Returns a project access object for an opened project. */\n  public getOpenedProject(id: ProjectId): Project {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    return prj;\n  }\n\n  /** Returns true if project with given id is currently opened. */\n  public isProjectOpened(id: ProjectId): boolean {\n    return this.openedProjects.has(id);\n  }\n\n  /**\n   * Deallocates all runtime resources consumed by this object and awaits\n   * actual termination of event loops and other processes associated with\n   * them.\n   */\n  public async close() {\n    if (this.envelopeCleanupTimer !== undefined) clearInterval(this.envelopeCleanupTimer);\n    await Promise.all([...this.openedProjects.values()].map((prj) => prj.destroy()));\n    // this.env.quickJs;\n    await Promise.all([\n      this.projectListTree.terminate(),\n      this.sharingOutboxTree.terminate(),\n      this.sharingStateTree.terminate(),\n      this.pendingSharesTree.terminate(),\n    ]);\n    await this.env.dispose();\n    await this.pl.close();\n  }\n\n  /** @deprecated */\n  public async closeAndAwaitTermination() {\n    await this.close();\n  }\n\n  /** Generates sufficiently random string to be used as local secret for the\n   * middle layer */\n  public static generateLocalSecret(): string {\n    return HmacSha256Signer.generateSecret();\n  }\n\n  /** Returns a block event dispatcher, which can be used to listen to block events. */\n  public get blockEventDispatcher(): BlockEventDispatcher {\n    return this.env.blockEventDispatcher;\n  }\n\n  /** Initialize middle layer */\n  public static async init(\n    pl: PlClient,\n    workdir: string,\n    _ops: MiddleLayerOpsConstructor,\n  ): Promise<MiddleLayer> {\n    const ops: MiddleLayerOps = {\n      ...DefaultMiddleLayerOpsSettings,\n      ...DefaultMiddleLayerOpsPaths(workdir),\n      ..._ops,\n    };\n\n    // overriding debug options from environment variables\n    ops.defaultTreeOptions.logStat = getDebugFlags().logTreeStats;\n    ops.debugOps.dumpInitialTreeState = getDebugFlags().dumpInitialTreeState;\n    // apply MI_TREE_TRAVERSAL only when the embedder hasn't set an explicit mode\n    if (\n      ops.defaultTreeOptions.traversalMode === undefined &&\n      getDebugFlags().treeTraversalMode !== undefined\n    )\n      ops.defaultTreeOptions.traversalMode = getDebugFlags().treeTraversalMode;\n\n    const { projects, sharingOutbox, sharingState } = await pl.withWriteTx(\n      \"MLInitialization\",\n      async (tx) => {\n        // Lazily create each clientRoot-attached singleton resource. Returns the existing\n        // resource id if the field is already populated, otherwise creates + locks + sets it.\n        const lazyInit = async (\n          fieldName: string,\n          type: { name: string; version: string },\n        ): Promise<{ ref?: ResourceRef; existing?: SignedResourceId }> => {\n          const f = field(tx.clientRoot, fieldName);\n          tx.createField(f, \"Dynamic\");\n          const fData = await tx.getField(f);\n          if (isNullSignedResourceId(fData.value)) {\n            const ref = tx.createEphemeral(type);\n            tx.lock(ref);\n            tx.setField(f, ref);\n            return { ref };\n          }\n          return { existing: fData.value };\n        };\n\n        const projectsR = await lazyInit(ProjectsField, ProjectsResourceType);\n        const outboxR = await lazyInit(SharingOutboxField, SharingOutboxResourceType);\n        const stateR = await lazyInit(SharingStateField, SharingStateResourceType);\n\n        await tx.commit();\n\n        return {\n          projects: projectsR.existing ?? (await projectsR.ref!.globalId),\n          sharingState: stateR.existing ?? (await stateR.ref!.globalId),\n          sharingOutbox: outboxR.existing ?? (await outboxR.ref!.globalId),\n        };\n      },\n    );\n\n    const logger = ops.logger;\n\n    const driverKit = await initDriverKit(pl, workdir, ops.frontendDownloadPath, ops);\n\n    // passed to components having no own retry logic\n    const retryHttpDispatcher = new RetryAgent(pl.httpDispatcher);\n\n    const v2RegistryProvider = new V2RegistryProvider(retryHttpDispatcher);\n\n    const bpPreparer = new BlockPackPreparer(\n      v2RegistryProvider,\n      driverKit.signer,\n      retryHttpDispatcher,\n    );\n\n    const quickJs = await getQuickJS();\n\n    const runtimeCapabilities = new RuntimeCapabilities();\n    // add runtime capabilities of model here\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 1);\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresCreatePTable\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresPFramesVersion\", REQUIRES_PFRAMES_VERSION);\n    registerServiceCapabilities((flag, value) =>\n      runtimeCapabilities.addSupportedRequirement(flag, value),\n    );\n    // runtime capabilities of the desktop are to be added by the desktop app / test framework\n\n    const serviceRegistry = createModelServiceRegistry({ logger });\n\n    const env: MiddleLayerEnvironment = {\n      pl,\n      blockEventDispatcher: new BlockEventDispatcher(),\n      signer: driverKit.signer,\n      logger,\n      httpDispatcher: pl.httpDispatcher,\n      retryHttpDispatcher,\n      ops,\n      bpPreparer,\n      frontendDownloadDriver: driverKit.frontendDriver,\n      driverKit,\n      blockUpdateWatcher: new BlockUpdateWatcher(v2RegistryProvider, logger, {\n        minDelay: ops.devBlockUpdateRecheckInterval,\n        http: retryHttpDispatcher,\n        preferredUpdateChannel: ops.preferredUpdateChannel,\n      }),\n      runtimeCapabilities,\n      serviceRegistry,\n      quickJs,\n      projectHelper: new ProjectHelper(quickJs, logger),\n      dispose: async () => {\n        await serviceRegistry.dispose();\n        await retryHttpDispatcher.destroy();\n        await driverKit.dispose();\n      },\n    };\n\n    const openedProjects = new WatchableValue<ProjectId[]>([]);\n    const projectListTC = await createProjectList(pl, projects, openedProjects, env);\n\n    // Project sharing trees and reactive views.\n    const outgoingTC = await createOutgoingShares(pl, sharingOutbox, env);\n    const sharingStateTree = await createSharingStateTree(pl, sharingState, env);\n    const pendingSharesTree = await createPendingSharesTree(pl, env);\n    const pendingShares = createPendingSharesComputable(\n      pendingSharesTree,\n      sharingStateTree,\n      pl.userResources.authUser,\n    );\n    const liveEnvelopes = createLiveEnvelopesComputable(pendingSharesTree);\n\n    return new MiddleLayer(\n      env,\n      driverKit,\n      driverKit.signer,\n      projects,\n      sharingOutbox,\n      sharingState,\n      openedProjects,\n      projectListTC.tree,\n      outgoingTC.tree,\n      sharingStateTree,\n      pendingSharesTree,\n      v2RegistryProvider,\n      projectListTC.computable,\n      outgoingTC.computable,\n      pendingShares,\n      liveEnvelopes,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgIA,IAAa,cAAb,MAAa,YAAY;CAIJ;CACD;CACA;CACC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;CAEA;CAGT;CAGA;CAIU;CA1BnB;CAEA,YACE,KACA,WACA,QACA,uBACA,yBACA,wBACA,oBACA,iBACA,mBACA,kBACA,mBACA,uBAEA,aAGA,gBAGA,eAIA,eACA;EAxBiB,KAAA,MAAA;EACD,KAAA,YAAA;EACA,KAAA,SAAA;EACC,KAAA,wBAAA;EACA,KAAA,0BAAA;EACA,KAAA,yBAAA;EACA,KAAA,qBAAA;EACA,KAAA,kBAAA;EACA,KAAA,oBAAA;EACA,KAAA,mBAAA;EACA,KAAA,oBAAA;EACD,KAAA,wBAAA;EAEA,KAAA,cAAA;EAGT,KAAA,iBAAA;EAGA,KAAA,gBAAA;EAIU,KAAA,gBAAA;EAEjB,KAAK,KAAK,KAAK,IAAI;EACnB,KAAK,qBAAqB;CAC5B;;;;;CAMA,IAAW,iBAA4C;EACrD,OAAO,KAAK,GAAG,WAAW;CAC5B;;;;;;;CAQA,IAAW,qBAA+B;EACxC,OAAO,KAAK,GAAG,WAAW,gBAAgB,CAAC;CAC7C;;;;;CAMA,IAAW,mBAAkC;EAC3C,OAAO,KAAK,GAAG,cAAc;CAC/B;;;;;;;CAQA,IAAW,mBAA4B;EAIrC,OAAO,KAAK,mBAAmB,SAAS,kBAAkB,KAAK,CAAC,KAAK;CACvE;;CAGA,IAAW,gBAAyB;EAClC,OAAO,KAAK,GAAG,KAAK,WAAW,KAAA;CACjC;;;;;CAMA,IAAW,kBAA+B;EACxC,OAAO,KAAK,GAAG;CACjB;;;;;;;CAQA,IAAW,uBAAgC;EACzC,OACE,CAAC,KAAK,iBACN,KAAK,mBAAmB,SAAS,iBAAiB,KAClDA,sBAAAA,mBAAmB,KAAK,eAAe;CAE3C;;;;;;;;CASA,IAAW,4BAAqC;EAC9C,OAAOC,sBAAAA,eAAe,KAAK,eAAe;CAC5C;;CAGA,qBACE,aACA,QAA0B,MACpB;EACN,KAAK,IAAI,oBAAoB,wBAAwB,aAAa,KAAK;CACzE;;CAGA,wBAA+B,cAA0D;EACvF,OAAO,KAAK,IAAI,oBAAoB,mBAAmB,YAAY;CACrE;;CAGA,IAAW,oBAA0C;EACnD,OAAO,KAAK,IAAI;CAClB;;CAGA,IAAW,kBAAwC;EACjD,OAAO,KAAK,IAAI;CAClB;CAMA,iBAAkC,IAAIC,UAAAA,SAAsC,EAAE,KAAK,KAAK,CAAC;;;CAIzF,MAAc,iBAAiB,WAAiD;EAC9E,MAAM,SAAS,KAAK,eAAe,IAAI,SAAS;EAChD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,MAAM,MAAM,MAAM,KAAK,GAAG,WAAW,oBAAoB,OAAO,OAAO;GACrE,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,WAAsB,OAAO,EAAE;GACtE;GACA,MAAM,IAAI,MAAM,WAAW,UAAU,4BAA4B;EACnE,CAAC;EAED,KAAK,eAAe,IAAI,WAAW,GAAG;EACtC,OAAO;CACT;;CAOA,MAAa,cAAc,MAAuC;EAChE,IAAI;EACJ,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,MAAMC,gBAAAA,cAAc,IAAI,IAAI;GAClC,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,GAAG;GAC9E,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,IAAK;EAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,SAAS;EAC9C,KAAK,eAAe,IAAI,WAAW,SAAS;EAC5C,OAAO;CACT;;CAGA,MAAa,eACX,IACA,MACA,QACe;EACf,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,MAAMC,gBAAAA,oBACJ,KAAK,IAAI,eACT,KAAK,IACL,KACA,SACC,QAAQ;GACP,IAAI,QAAQ,IAAI;EAClB,GACA,EAAE,MAAM,iBAAiB,CAC3B;EACA,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;CAIA,MAAa,cAAc,IAA8B;EACvD,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,IAAI;GACJ,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,IAAe;KAClD,YAAY,EAAE;KACd;IACF;GACF;GACA,IAAI,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,4BAA4B;GACvF,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,uBAAuB,SAAS,CAAC;GAC3D,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;;;;;;CASA,MAAa,iBACX,cACA,QACoB;EACpB,MAAM,YAAY,MAAM,KAAK,iBAAiB,YAAY;EAE1D,MAAM,SAAsB,MAAM,KAAK,GAAG,YAAY,sBAAsB,OAAO,OAAO;GAExF,MAAM,aAAa,MAAM,GAAG,cAA2B,WAAWC,sBAAAA,cAAc;GAIhF,MAAM,eAAc,MADU,GAAG,gBAAgB,KAAK,uBAAuB,IAAI,EAAA,CAC7C,OACjC,KAAK,MAAM,EAAE,KAAK,CAAC,CACnB,OAAOC,0BAAAA,yBAAyB;GACnC,MAAM,kBACJ,MAAM,QAAQ,IACZ,YAAY,KAAK,QAAQ,GAAG,cAA2B,KAAKD,sBAAAA,cAAc,CAAC,CAC7E,EAAA,CACA,KAAK,MAAM,EAAE,KAAK;GAMpB,MAAM,SAAS,MAAME,gBAAAA,iBACnB,IACA,WACA,EAAE,OANa,SAAS,OAAO,WAAW,OAAO,cAAc,IAAI,WAAW,MAM5D,GAClB,KAAK,IAAI,aACX;GAGA,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,MAAM;GACjF,MAAM,GAAG,OAAO;GAEhB,OAAO;EACT,CAAC;EAED,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,OAAO;EAC/B,MAAM,gBAAA,GAAA,0BAAA,mBAAA,CAAkC,SAAS;EACjD,KAAK,eAAe,IAAI,cAAc,SAAS;EAC/C,OAAO;CACT;;;;;;;;;CAUA,MAAa,uBACX,cACA,aACA,QACe;EACf,IAAI,CAAC,KAAK,mBAAmB,SAAS,kBAAkB,GACtD,MAAM,IAAI,MAAM,0EAA0E;EAE5F,MAAM,YAAY,MAAM,KAAK,iBAAiB,YAAY;EAC1D,MAAM,aAAa,MAAM,KAAK,GAAG,YAAY;GAAE,OAAO;GAAa,mBAAmB;EAAK,CAAC;EAI5F,MAAM,KAAK,GAAG,kBAAkB,YAAY,4BAA4B,OAAO,OAAO;GAEpF,MAAM,uBAAuB,MAAMC,qBAAAA,qBAAqB,EAAE;GAG1D,MAAM,aAAa,MAAM,GAAG,cAA2B,WAAWH,sBAAAA,cAAc;GAChF,MAAM,iBAAiB,MAAM,GAAG,gBAAgB,sBAAsB,IAAI;GAC1E,MAAM,kBACJ,MAAM,QAAQ,IACZ,eAAe,OACZ,KAAK,MAAM,EAAE,KAAK,CAAC,CACnB,OAAOC,0BAAAA,yBAAyB,CAAC,CACjC,KAAK,QAAQ,GAAG,cAA2B,KAAKD,sBAAAA,cAAc,CAAC,CACpE,EAAA,CACA,KAAK,MAAM,EAAE,KAAK;GAGpB,MAAM,SAAS,MAAME,gBAAAA,iBACnB,IACA,WACA,EAAE,OALa,SAAS,OAAO,WAAW,OAAO,cAAc,IAAI,WAAW,MAK5D,GAClB,KAAK,IAAI,aACX;GACA,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,uBAAA,GAAA,YAAA,WAAA,CAAiC,CAAC,GAAG,WAAW,MAAM;GAC3E,MAAM,GAAG,OAAO;EAClB,CAAC;CACH;;;;;;;;;;;;;;CAmBA,MAAa,cACX,YACA,SACe;EACf,IAAI,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,kCAAkC;EAK/E,IAAI,cAAc,WAAW,QAAQ,SAAS;GAC5C,MAAM,iBAAiB,MAAM,KAAK,0BAA0B,UAAU,EAAA,CAAG,MACtE,MAAM,EAAE,QACX;GACA,IAAI,kBAAkB,KAAA,GAAW;IAC/B,MAAM,KAAK,YAAY,cAAc,SAAS,EAAE,OAAO,QAAQ,MAAM,CAAC;IACtE;GACF;EACF;EAEA,MAAM,KAAK,eAAe,YAAY,OAAO;CAC/C;;;;;;;;CASA,MAAc,eACZ,YACA,SACe;EACf,MAAM,WAAW,cAAc;EAC/B,MAAM,UAAmC,MAAM,QAAQ,IACrD,WAAW,IACT,OAAO,QAAwC;GAC7C,MAAM;GACN,WAAW;GACX,WAAW,MAAM,KAAK,iBAAiB,EAAE;EAC3C,EACF,CACF;EACA,MAAM,SAAS,KAAK,oBAAoB;EAExC,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;EAM9D,MAAM,SAAS,MAAM,KAAK,0BAA0B,UAAU;EAE9D,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,IAAI;SACG,MAAM,SAAS,QAClB,IAAI,MAAM,UAAU,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;GAAA,OAEpF;IACL,MAAM,gBAAgB,IAAI,IAAI,QAAQ,UAAU;IAChD,KAAK,MAAM,SAAS,QAAQ;KAC1B,IAAI,MAAM,UAAU;KACpB,MAAM,WAAW,MAAM,WAAW,QAAQ,MAAM,cAAc,IAAI,CAAC,CAAC;KACpE,IAAI,SAAS,WAAW,GAAG;KAE3B,IADkB,MAAM,WAAW,QAAQ,MAAM,CAAC,cAAc,IAAI,CAAC,CACzD,CAAC,CAAC,WAAW,GAEvB,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;UAEnE,KAAK,MAAM,KAAK,UAAU,GAAG,aAAa,MAAM,KAAK,CAAC;IAE1D;GACF;GAEA,MAAM,EAAE,aAAa,MAAME,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,QAAQ;IACd;IACA,OAAO,QAAQ;IACf;GACF,CAAC;GAID,MAAM,cAAc,MAAM,SAAS;GACnC,IAAI,UAGF,GAAG,YAAY,aAAa,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAE5E,KAAK,MAAM,aAAa,QAAQ,YAC9B,GAAG,YAAY,aAAa,WAAW,EAAE,UAAU,KAAK,CAAC;GAI7D,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;;;;;;;;;;;CAkBA,MAAa,YACX,SACA,OAKI,CAAC,GACU;EACf,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,MAAM,MAAM,KAAK,sBAAsB,IAAI,OAAO;GACxD,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,MAAM,sCAAsC,QAAQ,gBAAgB;GAEhF,MAAM,OAAO,KAAK,oBAAoB;GACtC,MAAM,SAAS,MAAM,GAAG,WAAW,IAAI,GAAG;GAE1C,MAAM,WAAW,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC,KAAK,KAAK,aAAa;GAGtF,MAAM,QAAQ,MAAM,GAAG,gBAAgB,IAAI,KAAK,IAAI;GACpD,MAAM,iCAAiB,IAAI,IAA8B;GACzD,MAAM,cAA4D,CAAC;GACnE,KAAK,MAAM,KAAK,MAAM,QAAQ;IAC5B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,IAAIC,gBAAAA,uBAAuB,EAAE,IAAI,GAC/B,eAAe,IAAIC,gBAAAA,yBAAyB,EAAE,IAAI,GAAG,EAAE,KAAK;SACvD,IAAIC,sBAAAA,kBAAkB,EAAE,IAAI,GAAG;KACpC,MAAM,OAAO,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK,EAAA,CAAG;KACvD,IAAI,QAAQ,KAAA,GAAW;KACvB,YAAY,KAAK;MACf,OAAOC,sBAAAA,qBAAqB,EAAE,IAAI;MAClC,MAAA,GAAA,2BAAA,kBAAA,CAAuB,GAAG;KAC5B,CAAC;IACH;GACF;GACA,MAAM,gBAAgB,YAAY,KAAK,MAAM,EAAE,KAAK;GAGpD,MAAM,kBAAkB,OACrB,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,KAAK,EAAE,SAAS,IAAI,CAAC,CAC9D,KAAK,MAAM,EAAE,IAAI;GACpB,MAAM,aAAa,WACf,CAAC,IACD,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAI,KAAK,cAAc,iBAAkB,GAAG,aAAa,CAAC,CAAC;GAGnF,MAAM,+BAAe,IAAI,IAA8B;GACvD,MAAM,WAAW,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GAC1E,KAAK,MAAM,KAAK,SAAS,QAAQ;IAC/B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,aAAa,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,GAAG,EAAE,KAAK;GACvD;GAIA,MAAM,UAAU,KAAK;GACrB,MAAM,UAAmC,CAAC;GAC1C,KAAK,MAAM,QAAQ,OAAO,KAAK,IAAI,KAAK,QAAQ,GAAyB;IACvE,MAAM,EAAE,OAAO,QAAQ,cAAc,IAAI,KAAK,SAAS;IACvD,MAAM,UAAU,aAAa,IAAI,MAAM;IAEvC,MAAM,SAAS,UACV,QAAQ,WAAW,SACpB,YAAY,KAAA,IACV,WACA;IACN,IAAI,WAAW,UAAU;IAEzB,IAAI,WAAW,YAAY,YAAY,KAAA,GACrC,QAAQ,KAAK;KAAE,MAAM;KAAS,WAAW;KAAQ,WAAW;IAAQ,CAAC;SAChE;KAGL,MAAM,cAAc,eAAe,IAAI,IAAI;KAC3C,IAAI,gBAAgB,KAAA,GAClB,QAAQ,KAAK;MAAE,MAAM;MAAS,WAAW;MAAQ;MAAO;MAAa;KAAU,CAAC;IACpF;GACF;GAGA,MAAM,QAAQ,KAAK,UAAU,KAAA,IAAY,IAAI,KAAK,QAAQ,KAAK,MAAM,KAAK;GAC1E,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;GAG9D,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,IAAI,SAAS,CAAC;GAEjE,MAAM,EAAE,aAAa,MAAML,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,IAAI,KAAK;IACf,QAAQ;IACR;IACA;IACA;GACF,CAAC;GAGD,KAAK,MAAM,EAAE,OAAO,SAAS,aAAa;IACxC,IAAI,CAAC,YAAY,CAAC,WAAW,SAAS,KAAK,GAAG;IAC9C,gBAAA,wBAAwB,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,SAAS;GACxE;GAEA,MAAM,MAAM,MAAM,SAAS;GAC3B,IAAI,UAAU,GAAG,YAAY,KAAK,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAC7E,KAAK,MAAM,KAAK,YAAY,GAAG,YAAY,KAAK,GAAG,EAAE,UAAU,KAAK,CAAC;GAE1E,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,0BAA0B,YAQtC;EACA,MAAM,SAAS,IAAI,IAAI,UAAU;EAEjC,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,mBAAmB,OAAO,OAAO;GACxE,MAAM,SAAS,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;GAC1E,MAAM,MAAwE,CAAC;GAC/E,KAAK,MAAM,KAAK,OAAO,QAAQ;IAC7B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;IAClD,IAAI,GAAG,SAAS,KAAA,GAAW;IAC3B,MAAM,OAAOK,sBAAAA,mBAAmB,GAAG,IAAI;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAM,MAAM,OAAO,IAAI,EAAE,MAAM,CAAC,GAC/D,IAAI,KAAK;KAAE,WAAW,EAAE;KAAM,KAAK,EAAE;KAAO,SAAS,KAAK;IAAQ,CAAC;GACvE;GACA,OAAO;EACT,CAAC;EAED,OAAO,MAAM,QAAQ,IACnB,QAAQ,IAAI,OAAO,EAAE,WAAW,KAAK,cAAc;GACjD,MAAM,SAAS,MAAM,KAAK,GAAG,cAAc,WAAW,GAAG;GACzD,OAAO;IACL;IACA;IACA;IACA,UAAU,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC;IACxD,YAAY,OAAO,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;GAClF;EACF,CAAC,CACH;CACF;;;;;;CAOA,MAAa,YAAY,SAAiC;EACxD,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,SAAS,MAAM,KAAK,sBAAsB,IAAI,OAAO;GAC3D,IAAI,WAAW,KAAA,GAAW;GAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,OAAO,SAAS,CAAC;GACpE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,sBACZ,IACA,SACuF;EACvF,MAAM,aAAa,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;EAC9E,KAAK,MAAM,KAAK,WAAW,QAAQ;GACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;GACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;GAClD,IAAI,GAAG,SAAS,KAAA,GAAW;GAC3B,MAAM,OAAOA,sBAAAA,mBAAmB,GAAG,IAAI;GACvC,IAAI,KAAK,YAAY,SAAS,OAAO;IAAE,WAAW,EAAE;IAAM,KAAK,EAAE;IAAO;GAAK;EAC/E;CAEF;;;;;;;;;;;CAYA,MAAc,uBAA4D;EACxE,MAAM,KAAK,kBAAkB,aAAa;EAC1C,MAAM,OAAQ,MAAM,KAAK,cAAc,SAAS,KAAM,CAAC;EAEvD,MAAM,sBAAM,IAAI,IAA2B;EAC3C,KAAK,MAAM,KAAK,MAAM,IAAI,IAAI,EAAE,KAAK,SAAS,CAAC;EAC/C,OAAO;CACT;;;;;;;;;;CAWA,MAAa,YACX,UACA,QACmF;EACnF,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAC7C,MAAM,QAAQ,KAAK;EAEnB,MAAM,WAAwB,CAAC;EAC/B,MAAM,SAAgD,CAAC;EAEvD,KAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,WAAW,KAAK,IAAI,OAAO;GACjC,IAAI,aAAa,KAAA,GAAW;IAC1B,OAAO,KAAK;KAAE;KAAS,OAAO;IAAgC,CAAC;IAC/D;GACF;GACA,IAAI;IACF,MAAM,MAAM,KAAK,IAAI;IACrB,MAAM,cAAc,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;KAC3E,MAAM,UAAU,MAAMC,gBAAAA,6BACpB,IACA,SAAS,KACT,KAAK,uBACL,MACF;KAGA,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;MAC7D,UAAU;MACV,WAAW;MACX,kBAAkB,SAAS,KAAK;MAChC,kBAAkBC,gBAAAA,qBAAqB,OAAO;KAChD,CAAC;KAGD,IAAI,UAAU,QAAQ,SAAS,KAAK,SAAS,aAC3C,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;KAElE,MAAM,GAAG,OAAO;KAChB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,OAAO,aAAa;KAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,GAAG;KACxC,KAAK,eAAe,IAAI,WAAW,GAAG;KACtC,SAAS,KAAK,SAAS;IACzB;GACF,SAAS,GAAG;IACV,OAAO,KAAK;KAAE;KAAS,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;IAAE,CAAC;GAC5E;EACF;EAEA,MAAM,QAAQ,IAAI,CAAC,KAAK,gBAAgB,aAAa,GAAG,KAAK,iBAAiB,aAAa,CAAC,CAAC;EAC7F,OAAO;GAAE;GAAU;EAAO;CAC5B;;CAGA,MAAa,YAAY,SAAiC;EAExD,MAAM,YAAW,MADE,KAAK,qBAAqB,EAAA,CACvB,IAAI,OAAO;EACjC,MAAM,QAAQ,KAAK;EACnB,MAAM,MAAM,KAAK,IAAI;EAErB,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;IAC7D,UAAU;IACV,WAAW;IACX,kBAAkB,UAAU,KAAK,YAAY;IAC7C,kBAAkB,CAAC;GACrB,CAAC;GAGD,IAAI,aAAa,KAAA,KAAa,UAAU,QAAQ,SAAS,KAAK,SAAS,aACrE,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;GAElE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,iBAAiB,aAAa;CAC3C;CAMA,OAAwB,4BAA4B,IAAI,OAAO;CAC/D;;CAGA,uBAAqC;EACnC,KAAU,mBAAmB;EAC7B,KAAK,uBAAuB,kBAAkB;GAC5C,KAAU,mBAAmB;EAC/B,GAAG,YAAY,yBAAyB;EAExC,KAAK,qBAAqB,QAAQ;CACpC;;;CAIA,MAAc,qBAAoC;EAChD,IAAI;GACF,MAAM,MAAM,KAAK,IAAI;GACrB,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,yBAAyB,OAAO,OAAO;IAC9E,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;IACxE,MAAM,WAAoC,CAAC;IAC3C,KAAK,MAAM,KAAK,KAAK,QAAQ;KAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;KACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;KAClD,IAAI,GAAG,SAAS,KAAA,GAAW;KAC3B,MAAM,UAAUF,sBAAAA,mBAAmB,GAAG,IAAI;KAC1C,IAAI,QAAQ,cAAc,MAAM;KAChC,IAAI,QAAQ,aAAa,KAAK,SAAS,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;IACnE;IACA,OAAO;GACT,CAAC;GAED,IAAI,QAAQ,WAAW,GAAG;GAE1B,MAAM,KAAK,GAAG,YAAY,qBAAqB,OAAO,OAAO;IAC3D,KAAK,MAAM,EAAE,eAAe,SAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,SAAS,CAAC;IAC/D,MAAM,GAAG,OAAO;GAClB,CAAC;GAED,MAAM,KAAK,kBAAkB,aAAa;EAC5C,SAAS,GAAG;GACV,KAAK,IAAI,OAAO,KACd,4BAA4B,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,GACvE;EACF;CACF;CAMA,iCAAkC,IAAI,IAAwB;;CAG9D,MAAa,YAAY,IAA8B;EACrD,IAAI,KAAK,eAAe,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,WAAW,GAAG,gBAAgB;EAC/E,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,KAAK,eAAe,IAAI,IAAI,MAAMG,kBAAAA,QAAQ,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC;EACjE,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,MAAa,aAAa,IAA8B;EACtD,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,IAAI,QAAQ;EAClB,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,iBAAwB,IAAwB;EAC9C,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,OAAO;CACT;;CAGA,gBAAuB,IAAwB;EAC7C,OAAO,KAAK,eAAe,IAAI,EAAE;CACnC;;;;;;CAOA,MAAa,QAAQ;EACnB,IAAI,KAAK,yBAAyB,KAAA,GAAW,cAAc,KAAK,oBAAoB;EACpF,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,eAAe,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC;EAE/E,MAAM,QAAQ,IAAI;GAChB,KAAK,gBAAgB,UAAU;GAC/B,KAAK,kBAAkB,UAAU;GACjC,KAAK,iBAAiB,UAAU;GAChC,KAAK,kBAAkB,UAAU;EACnC,CAAC;EACD,MAAM,KAAK,IAAI,QAAQ;EACvB,MAAM,KAAK,GAAG,MAAM;CACtB;;CAGA,MAAa,2BAA2B;EACtC,MAAM,KAAK,MAAM;CACnB;;;CAIA,OAAc,sBAA8B;EAC1C,OAAOC,2BAAAA,iBAAiB,eAAe;CACzC;;CAGA,IAAW,uBAA6C;EACtD,OAAO,KAAK,IAAI;CAClB;;CAGA,aAAoB,KAClB,IACA,SACA,MACsB;EACtB,MAAM,MAAsB;GAC1B,GAAGC,YAAAA;GACH,GAAGC,YAAAA,2BAA2B,OAAO;GACrC,GAAG;EACL;EAGA,IAAI,mBAAmB,UAAUC,gBAAAA,cAAc,CAAC,CAAC;EACjD,IAAI,SAAS,uBAAuBA,gBAAAA,cAAc,CAAC,CAAC;EAEpD,IACE,IAAI,mBAAmB,kBAAkB,KAAA,KACzCA,gBAAAA,cAAc,CAAC,CAAC,sBAAsB,KAAA,GAEtC,IAAI,mBAAmB,gBAAgBA,gBAAAA,cAAc,CAAC,CAAC;EAEzD,MAAM,EAAE,UAAU,eAAe,iBAAiB,MAAM,GAAG,YACzD,oBACA,OAAO,OAAO;GAGZ,MAAM,WAAW,OACf,WACA,SACgE;IAChE,MAAM,KAAA,GAAA,0BAAA,MAAA,CAAU,GAAG,YAAY,SAAS;IACxC,GAAG,YAAY,GAAG,SAAS;IAC3B,MAAM,QAAQ,MAAM,GAAG,SAAS,CAAC;IACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,MAAM,KAAK,GAAG;KACvC,MAAM,MAAM,GAAG,gBAAgB,IAAI;KACnC,GAAG,KAAK,GAAG;KACX,GAAG,SAAS,GAAG,GAAG;KAClB,OAAO,EAAE,IAAI;IACf;IACA,OAAO,EAAE,UAAU,MAAM,MAAM;GACjC;GAEA,MAAM,YAAY,MAAM,SAASC,qBAAAA,eAAeC,qBAAAA,oBAAoB;GACpE,MAAM,UAAU,MAAM,SAASC,sBAAAA,oBAAoBC,sBAAAA,yBAAyB;GAC5E,MAAM,SAAS,MAAM,SAASC,sBAAAA,mBAAmBC,sBAAAA,wBAAwB;GAEzE,MAAM,GAAG,OAAO;GAEhB,OAAO;IACL,UAAU,UAAU,YAAa,MAAM,UAAU,IAAK;IACtD,cAAc,OAAO,YAAa,MAAM,OAAO,IAAK;IACpD,eAAe,QAAQ,YAAa,MAAM,QAAQ,IAAK;GACzD;EACF,CACF;EAEA,MAAM,SAAS,IAAI;EAEnB,MAAM,YAAY,MAAMC,mBAAAA,cAAc,IAAI,SAAS,IAAI,sBAAsB,GAAG;EAGhF,MAAM,sBAAsB,IAAIC,OAAAA,WAAW,GAAG,cAAc;EAE5D,MAAM,qBAAqB,IAAIC,6BAAAA,mBAAmB,mBAAmB;EAErE,MAAM,aAAa,IAAIC,mBAAAA,kBACrB,oBACA,UAAU,QACV,mBACF;EAEA,MAAM,UAAU,OAAA,GAAA,mBAAA,WAAA,CAAiB;EAEjC,MAAM,sBAAsB,IAAIC,qBAAAA,oBAAoB;EAEpD,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,wBAAwB,CAAC;EACrE,oBAAoB,wBAAwB,0BAA0BC,gCAAAA,wBAAwB;EAC9F,CAAA,GAAA,gCAAA,4BAAA,EAA6B,MAAM,UACjC,oBAAoB,wBAAwB,MAAM,KAAK,CACzD;EAGA,MAAM,kBAAkBC,0BAAAA,2BAA2B,EAAE,OAAO,CAAC;EAE7D,MAAM,MAA8B;GAClC;GACA,sBAAsB,IAAIC,2BAAAA,qBAAqB;GAC/C,QAAQ,UAAU;GAClB;GACA,gBAAgB,GAAG;GACnB;GACA;GACA;GACA,wBAAwB,UAAU;GAClC;GACA,oBAAoB,IAAIC,gBAAAA,mBAAmB,oBAAoB,QAAQ;IACrE,UAAU,IAAI;IACd,MAAM;IACN,wBAAwB,IAAI;GAC9B,CAAC;GACD;GACA;GACA;GACA,eAAe,IAAIC,uBAAAA,cAAc,SAAS,MAAM;GAChD,SAAS,YAAY;IACnB,MAAM,gBAAgB,QAAQ;IAC9B,MAAM,oBAAoB,QAAQ;IAClC,MAAM,UAAU,QAAQ;GAC1B;EACF;EAEA,MAAM,iBAAiB,IAAIC,2BAAAA,eAA4B,CAAC,CAAC;EACzD,MAAM,gBAAgB,MAAMC,qBAAAA,kBAAkB,IAAI,UAAU,gBAAgB,GAAG;EAG/E,MAAM,aAAa,MAAMC,qBAAAA,qBAAqB,IAAI,eAAe,GAAG;EACpE,MAAM,mBAAmB,MAAMC,qBAAAA,uBAAuB,IAAI,cAAc,GAAG;EAC3E,MAAM,oBAAoB,MAAMC,qBAAAA,wBAAwB,IAAI,GAAG;EAC/D,MAAM,gBAAgBC,qBAAAA,8BACpB,mBACA,kBACA,GAAG,cAAc,QACnB;EACA,MAAM,gBAAgBC,qBAAAA,8BAA8B,iBAAiB;EAErE,OAAO,IAAI,YACT,KACA,WACA,UAAU,QACV,UACA,eACA,cACA,gBACA,cAAc,MACd,WAAW,MACX,kBACA,mBACA,oBACA,cAAc,YACd,WAAW,YACX,eACA,aACF;CACF;AACF"}
+{"version":3,"file":"middle_layer.cjs","names":["canGrantToEveryone","canImpersonate","LRUCache","createProject","withProjectAuthored","withProject","resolveTemplateEntries","kindMismatch","cacheBlockPackTemplate","applyTemplateEntries","TemplateEntryRejected","ProjectMetaKey","isNotNullSignedResourceId","duplicateProject","ensureProjectListRid","buildShareEnvelope","GrantType","isEnvelopeProjectField","envelopeProjectFieldUuid","isAcceptanceField","acceptanceFieldLogin","decodeEnvelopeData","copyEnvelopeProjectsIntoList","resourceIdsToStrings","Project","HmacSha256Signer","DefaultMiddleLayerOpsSettings","DefaultMiddleLayerOpsPaths","getDebugFlags","ProjectsField","ProjectsResourceType","SharingOutboxField","SharingOutboxResourceType","SharingStateField","SharingStateResourceType","initDriverKit","RetryAgent","V2RegistryProvider","BlockPackPreparer","RuntimeCapabilities","REQUIRES_PFRAMES_VERSION","createModelServiceRegistry","BlockEventDispatcher","BlockUpdateWatcher","ProjectHelper","WatchableValue","createProjectList","createOutgoingShares","createSharingStateTree","createPendingSharesTree","createPendingSharesComputable","createLiveEnvelopesComputable"],"sources":["../../src/middle_layer/middle_layer.ts"],"sourcesContent":["import type {\n  PlClient,\n  PlTransaction,\n  SignedResourceId,\n  ResourceRef,\n  Role,\n} from \"@milaboratories/pl-client\";\nimport {\n  isEveryoneUserLogin,\n  field,\n  GrantType,\n  isNotNullSignedResourceId,\n  isNullSignedResourceId,\n  resourceIdToString,\n} from \"@milaboratories/pl-client\";\nimport { LRUCache } from \"lru-cache\";\nimport {\n  createProjectList,\n  ensureProjectListRid,\n  ProjectsField,\n  ProjectsResourceType,\n} from \"./project_list\";\nimport {\n  createProject,\n  duplicateProject,\n  withProject,\n  withProjectAuthored,\n} from \"../mutator/project\";\nimport type { ProjectTemplateExportOutcome } from \"../model/template_serializer\";\nimport type { ProjectTemplateV1 } from \"@milaboratories/pl-model-common\";\nimport { extractConfig, ensureError } from \"@platforma-sdk/model\";\nimport type { TemplateApplyProblem, TemplateApplyReport } from \"../model/template_apply\";\nimport { TemplateEntryRejected, kindMismatch } from \"../model/template_apply\";\nimport type { BlockPackProvider } from \"../model/template_resolve\";\nimport { resolveTemplateEntries } from \"../model/template_resolve\";\nimport type { PreparedTemplateEntry } from \"../mutator/template_construct\";\nimport { applyTemplateEntries } from \"../mutator/template_construct\";\nimport { throwIfMissingServerCapabilities } from \"./project\";\nimport { cacheBlockPackTemplate } from \"../mutator/template/template_cache\";\nimport { ProjectMetaKey } from \"../model/project_model\";\nimport type { ProjectId } from \"../model/project_model\";\nimport type { SynchronizedTreeState } from \"@milaboratories/pl-tree\";\nimport {\n  acceptanceFieldLogin,\n  canGrantToEveryone,\n  canImpersonate,\n  decodeEnvelopeData,\n  isAcceptanceField,\n  SharingOutboxField,\n  SharingOutboxResourceType,\n  SharingStateField,\n  SharingStateResourceType,\n  type EnvelopeAcceptance,\n  type EnvelopeData,\n  type ProjectChangeAction,\n  type ProjectFieldUuid,\n  type ShareId,\n  type ShareProjectsOptions,\n} from \"../model/sharing_model\";\nimport {\n  buildShareEnvelope,\n  copyEnvelopeProjectsIntoList,\n  envelopeProjectFieldUuid,\n  isEnvelopeProjectField,\n  resourceIdsToStrings,\n  writeEnvelopeAcceptance,\n  writeSharingDecision,\n  type EnvelopeProjectSource,\n} from \"../mutator/sharing\";\nimport type { LiveEnvelope, OutgoingShare, PendingShare } from \"./sharing_list\";\nimport {\n  createLiveEnvelopesComputable,\n  createOutgoingShares,\n  createPendingSharesComputable,\n  createPendingSharesTree,\n  createSharingStateTree,\n} from \"./sharing_list\";\nimport { BlockPackPreparer } from \"../mutator/block-pack/block_pack\";\nimport type { MiLogger, Signer } from \"@milaboratories/ts-helpers\";\nimport { BlockEventDispatcher, cachedDeserialize } from \"@milaboratories/ts-helpers\";\nimport { HmacSha256Signer } from \"@milaboratories/ts-helpers\";\nimport type { Computable, ComputableStableDefined } from \"@milaboratories/computable\";\nimport { WatchableValue } from \"@milaboratories/computable\";\nimport { Project } from \"./project\";\nimport type { MiddleLayerOps, MiddleLayerOpsConstructor } from \"./ops\";\nimport { DefaultMiddleLayerOpsPaths, DefaultMiddleLayerOpsSettings } from \"./ops\";\nimport { randomUUID } from \"node:crypto\";\nimport type { ProjectListEntry } from \"../model\";\nimport type {\n  AuthorMarker,\n  ProjectMeta,\n  BlockPlatform,\n} from \"@milaboratories/pl-model-middle-layer\";\nimport type { AppliedEntry } from \"../model/template_apply\";\nimport { BlockUpdateWatcher } from \"../block_registry/watcher\";\nimport type { QuickJSWASMModule } from \"quickjs-emscripten\";\nimport { getQuickJS } from \"quickjs-emscripten\";\nimport type { MiddleLayerDriverKit } from \"./driver_kit\";\nimport { initDriverKit } from \"./driver_kit\";\nimport type { BlockCodeFeatureFlags, DriverKit, SupportedRequirement } from \"@platforma-sdk/model\";\nimport { RuntimeCapabilities } from \"@platforma-sdk/model\";\nimport {\n  type ModelServiceRegistry,\n  registerServiceCapabilities,\n  REQUIRES_PFRAMES_VERSION,\n} from \"@milaboratories/pl-model-common\";\nimport { createModelServiceRegistry } from \"../service_factories\";\nimport type { DownloadUrlDriver } from \"@milaboratories/pl-drivers\";\nimport { V2RegistryProvider } from \"../block_registry\";\nimport type { Dispatcher } from \"undici\";\nimport { RetryAgent } from \"undici\";\nimport { getDebugFlags } from \"../debug\";\nimport { ProjectHelper } from \"../model/project_helper\";\n\nexport interface MiddleLayerEnvironment {\n  dispose(): Promise<void>;\n  readonly pl: PlClient;\n  readonly runtimeCapabilities: RuntimeCapabilities;\n  readonly logger: MiLogger;\n  readonly blockEventDispatcher: BlockEventDispatcher;\n  readonly httpDispatcher: Dispatcher;\n  readonly retryHttpDispatcher: Dispatcher;\n  readonly signer: Signer;\n  readonly ops: MiddleLayerOps;\n  readonly bpPreparer: BlockPackPreparer;\n  readonly frontendDownloadDriver: DownloadUrlDriver;\n  readonly blockUpdateWatcher: BlockUpdateWatcher;\n  readonly quickJs: QuickJSWASMModule;\n  readonly driverKit: MiddleLayerDriverKit;\n  readonly serviceRegistry: ModelServiceRegistry;\n  readonly projectHelper: ProjectHelper;\n}\n\n/**\n * Main access object to work with pl from UI.\n *\n * It implements an abstraction layer of projects and blocks.\n *\n * As a main entry point inside the pl, this object uses a resource attached\n * via the {@link ProjectsField} to the pl client's root, this resource\n * contains project list.\n *\n * Read about alternative roots, if isolated project lists (working environments)\n * are required.\n * */\nexport class MiddleLayer {\n  public readonly pl: PlClient;\n\n  private constructor(\n    private readonly env: MiddleLayerEnvironment,\n    public readonly driverKit: DriverKit,\n    public readonly signer: Signer,\n    private readonly projectListResourceId: SignedResourceId,\n    private readonly sharingOutboxResourceId: SignedResourceId,\n    private readonly sharingStateResourceId: SignedResourceId,\n    private readonly openedProjectsList: WatchableValue<ProjectId[]>,\n    private readonly projectListTree: SynchronizedTreeState,\n    private readonly sharingOutboxTree: SynchronizedTreeState,\n    private readonly sharingStateTree: SynchronizedTreeState,\n    private readonly pendingSharesTree: SynchronizedTreeState,\n    public readonly blockRegistryProvider: V2RegistryProvider,\n    /** Contains a reactive list of projects along with their meta information. */\n    public readonly projectList: ComputableStableDefined<ProjectListEntry[]>,\n    /** Reactive view of the donor's outbox — the shares this user has created.\n     *  v1: API only, no UI. */\n    public outgoingShares: Computable<OutgoingShare[] | undefined>,\n    /** Envelopes granted to this user, not yet accepted or rejected. Fed by the\n     *  shared-resource discovery tree. */\n    public pendingShares: Computable<PendingShare[] | undefined>,\n    /** Internal: the acceptor's currently-live envelopes, read from the same shared-resource\n     *  discovery tree as {@link pendingShares}. The single source the accept/reject flow resolves\n     *  live envelopes from — no second discovery path. */\n    private readonly liveEnvelopes: Computable<LiveEnvelope[] | undefined>,\n  ) {\n    this.pl = this.env.pl;\n    this.startEnvelopeCleanup();\n  }\n\n  /**\n   * Get the OS where backend is running.\n   * For old backend versions returns undefined.\n   */\n  public get serverPlatform(): BlockPlatform | undefined {\n    return this.pl.serverInfo.platform as BlockPlatform | undefined;\n  }\n\n  /**\n   * Runtime capabilities advertised by the connected backend (tokens of\n   * the form `<feature>:<version>`, e.g. \"wasm:v1\"). Empty list if the\n   * backend predates the capability mechanism — that's the desired\n   * fail-closed behaviour for blocks declaring any `requiredCapabilities`.\n   */\n  public get serverCapabilities(): string[] {\n    return this.pl.serverInfo.capabilities ?? [];\n  }\n\n  /**\n   * Login of the authenticated user, for the \"Signed in as\" UI. `null` when the\n   * backend has no auth (local/dev mode) — the UI hides the element.\n   */\n  public get currentUserLogin(): string | null {\n    return this.pl.userResources.authUser;\n  }\n\n  /**\n   * Whether the connected backend supports project sharing. Synthetic — computed\n   * in the middle layer from the backend capabilities the share flow needs (the\n   * cross-color field-reference relaxation the accept flow rests on). It can absorb\n   * additional required capabilities later without a UI change.\n   */\n  public get sharingSupported(): boolean {\n    // Sharing does not compose with impersonation (discovery is scoped to the admin's session,\n    // decisions attribute to the admin), so it is disabled while impersonating. Admins move\n    // projects across roots with duplicateProjectToUser instead.\n    return this.serverCapabilities.includes(\"crossTreeRefs:v1\") && !this.impersonating;\n  }\n\n  /** True when this session is impersonating another user (an admin opened another user's root). */\n  public get impersonating(): boolean {\n    return this.pl.conf.asUser !== undefined;\n  }\n\n  /**\n   * Role of the authenticated user, from the `GetSessionInfo` RPC surfaced through the\n   * pl-client. `null` in no-auth mode (when {@link currentUserLogin} is null).\n   */\n  public get currentUserRole(): Role | null {\n    return this.pl.currentUserRole;\n  }\n\n  /**\n   * Whether the UI offers share-with-everybody — no role policy lives in the UI:\n   *   serverCapabilities.has(\"publicGrants:v1\") && canGrantToEveryone(currentUserRole)\n   * Not a security boundary: a crafted call still hits the backend's role +\n   * permission-ceiling gate.\n   */\n  public get canShareWithEveryone(): boolean {\n    return (\n      !this.impersonating &&\n      this.serverCapabilities.includes(\"publicGrants:v1\") &&\n      canGrantToEveryone(this.currentUserRole)\n    );\n  }\n\n  /**\n   * Whether the authenticated user may impersonate others (open another user's root). Mirrors\n   * the backend's `CanImpersonate` role gate — admin/controller only, never a regular user.\n   * Derived from the session role, which stays the authenticated admin's even while\n   * impersonating, so this stays true across a switch: the \"return to my root\" affordance must\n   * not vanish mid-impersonation. Not a security boundary; the backend re-checks on every call.\n   */\n  public get currentUserCanImpersonate(): boolean {\n    return canImpersonate(this.currentUserRole);\n  }\n\n  /** Adds a runtime capability to the middle layer. */\n  public addRuntimeCapability(\n    requirement: SupportedRequirement,\n    value: number | boolean = true,\n  ): void {\n    this.env.runtimeCapabilities.addSupportedRequirement(requirement, value);\n  }\n\n  /** Checks if the given block feature flags are compatible with the runtime capabilities. */\n  public checkBlockCompatibility(featureFlags: BlockCodeFeatureFlags | undefined): boolean {\n    return this.env.runtimeCapabilities.checkCompatibility(featureFlags);\n  }\n\n  /** Returns extended API driver kit used internally by middle layer. */\n  public get internalDriverKit(): MiddleLayerDriverKit {\n    return this.env.driverKit;\n  }\n\n  /** Returns the service registry for service introspection. */\n  public get serviceRegistry(): ModelServiceRegistry {\n    return this.env.serviceRegistry;\n  }\n\n  //\n  // ProjectId ↔ SignedResourceId resolution\n  //\n\n  private readonly projectIdCache = new LRUCache<ProjectId, SignedResourceId>({ max: 1024 });\n\n  /** Resolves a ProjectId to a signed SignedResourceId.\n   * Uses LRU cache with TX-scan fallback. */\n  private async resolveProjectId(projectId: ProjectId): Promise<SignedResourceId> {\n    const cached = this.projectIdCache.get(projectId);\n    if (cached !== undefined) return cached;\n\n    // Cache miss — scan project list fields to find the matching resource\n    const rid = await this.pl.withReadTx(\"ResolveProjectId\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (projectId as string)) return f.value;\n      }\n      throw new Error(`Project ${projectId} not found in project list.`);\n    });\n\n    this.projectIdCache.set(projectId, rid);\n    return rid;\n  }\n\n  //\n  // Project List Manipulation\n  //\n\n  /** Creates a project with initial state and adds it to project list. */\n  public async createProject(meta: ProjectMeta): Promise<ProjectId> {\n    let prj: ResourceRef;\n    await this.pl.withWriteTx(\"MLCreateProject\", async (tx) => {\n      prj = await createProject(tx, meta);\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", prj);\n      await tx.commit();\n    });\n    await this.projectListTree.refreshState();\n\n    const signedRid = await prj!.globalId;\n    const projectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(projectId, signedRid);\n    return projectId;\n  }\n\n  /** Updates project metadata */\n  public async setProjectMeta(\n    id: ProjectId,\n    meta: ProjectMeta,\n    author?: AuthorMarker,\n  ): Promise<void> {\n    const rid = await this.resolveProjectId(id);\n    await withProjectAuthored(\n      this.env.projectHelper,\n      this.pl,\n      rid,\n      author,\n      (prj) => {\n        prj.setMeta(meta);\n      },\n      { name: \"setProjectMeta\" },\n    );\n    await this.projectListTree.refreshState();\n  }\n\n  /**\n   * Renders a project as a `template-v1` YAML document, or reports every reason it\n   * cannot be — the backing call for an \"Export Project as Template…\" command.\n   *\n   * Takes a project id rather than an open {@link Project} because exporting is a\n   * property of the stored project, not of a session with it: the command belongs on\n   * a project card, where the project is usually closed. Opening one to read it would\n   * spin up trees and watchers for a one-shot read, and then have to decide whether to\n   * close them again.\n   *\n   * Read-only — the underlying mutator touches no field, so the transaction is never\n   * committed and the project list needs no refresh.\n   *\n   * @param id - project id of the project to export\n   */\n  public async exportProjectAsTemplate(id: ProjectId): Promise<ProjectTemplateExportOutcome> {\n    const rid = await this.resolveProjectId(id);\n    return await withProject(\n      this.env.projectHelper,\n      this.pl,\n      rid,\n      (prj) => prj.exportAsTemplateV1(),\n      { name: \"exportProjectAsTemplate\" },\n    );\n  }\n\n  /**\n   * Creates the blocks a `template-v1` document describes in an existing project, in the\n   * order the document lists them — the backing call for a \"Create Project from Template\n   * file…\" command, which is `createProject` followed by this.\n   *\n   * Takes a project id rather than an open {@link Project}, like\n   * {@link exportProjectAsTemplate} and for the same reason: applying a template is a\n   * property of the stored project, not of a session with it, and the flow that needs it\n   * has just created the project and has no session yet. An already-open session picks the\n   * new blocks up through its own refresh loop.\n   *\n   * Three stages, and their order is the design:\n   *\n   * 1. **Resolve every entry** to a concrete block pack, through `provider`.\n   * 2. **Prepare every block**: fetch it, check it can run against this backend, cache its\n   *    workflow template, and offer the entry's params to the block's kind for a shape\n   *    check.\n   * 3. **Create the blocks**, in one transaction — each one's params first pointed at this\n   *    project by the block's own model, since which values in there are references is\n   *    knowledge only the block has.\n   *\n   * The first two create nothing, so either of them failing leaves the project exactly as it\n   * was. They are also what leaves stage 3 with only in-memory work, and hence able to be a\n   * single transaction.\n   *\n   * **Stage 3 is all or nothing too**, because it is that one transaction: an entry it cannot\n   * create throws, the transaction is never committed, and the project keeps none of the\n   * blocks the apply had placed. So `problems` non-empty always means `added` is empty, at\n   * every stage — a caller never has to reconcile a half-built project, and never has to ask\n   * which of the blocks present came from the file.\n   *\n   * What is NOT checked before the work starts: which entries an entry references. Reading\n   * that means reading the params, which only the block can do, and no block exists until\n   * stage 2 has fetched one. A file whose entry references one listed below it therefore\n   * applies, and the block it creates reports itself as missing references — the same way a\n   * reference to a deleted block already behaves.\n   *\n   * @param id Project to apply into\n   * @param document A parsed template document\n   * @param provider Where each entry's block comes from\n   * @param options `allowUnstable` widens resolution to pre-release implementations, for\n   *   the whole document\n   */\n  public async applyTemplateToProject(\n    id: ProjectId,\n    document: ProjectTemplateV1,\n    provider: BlockPackProvider,\n    options: { allowUnstable?: boolean; author?: AuthorMarker } = {},\n  ): Promise<TemplateApplyReport> {\n    const resolution = await resolveTemplateEntries(document, provider, {\n      allowUnstable: options.allowUnstable ?? false,\n    });\n    if (resolution.problems.length > 0) return { added: [], problems: resolution.problems };\n\n    // One map, not one per field: resolution reports by entry id, so everything this loop\n    // needs about an entry is looked up the same way.\n    const byEntryId = new Map(document.blocks.map((entry) => [entry.id, entry]));\n    const prepared = new Map<string, PreparedTemplateEntry>();\n    const problems: TemplateApplyProblem[] = [];\n\n    for (const entry of resolution.resolved) {\n      try {\n        const documentEntry = byEntryId.get(entry.entryId)!;\n        const preparedBp = await this.env.bpPreparer.prepare(entry.spec);\n        const blockCfg = extractConfig(preparedBp.config);\n\n        // The first question asked of the prepared block: is it the block this entry meant.\n        // Everything below is only meaningful once the answer is yes.\n        //\n        // The locator is appended here rather than inside the check, which names no route:\n        // when the file chose the implementation itself, what it chose is the thing to correct.\n        const mismatch = kindMismatch(documentEntry.kind, preparedBp.config.kind);\n        if (mismatch !== undefined) {\n          const locator = documentEntry.location ?? documentEntry.block;\n          problems.push({\n            entryId: entry.entryId,\n            error: locator === undefined ? `${mismatch}.` : `${mismatch} (${locator}).`,\n          });\n          continue;\n        }\n\n        // The same two gates `Project.addBlock` applies, for the same reason: a block that\n        // cannot run here must not be installed. Here they become per-entry problems\n        // rather than throws, so one unusable block reads as one bad entry.\n        this.env.runtimeCapabilities.throwIfIncompatible(blockCfg.featureFlags);\n        throwIfMissingServerCapabilities(this.pl, preparedBp.requiredCapabilities);\n\n        const cachedBp = await cacheBlockPackTemplate(this.pl, preparedBp);\n\n        // Offered to the block's kind while nothing has been created yet. Every entry is\n        // checked, including one whose file omitted `params` — the parser read that as `{}`,\n        // which a kind with required fields rejects, and rightly: it would otherwise apply as\n        // a block that looks configured and is not.\n        const checked = this.env.projectHelper.validateTemplateParamsInVM(\n          blockCfg,\n          documentEntry.params,\n        );\n        if (checked.error !== undefined) {\n          problems.push({ entryId: entry.entryId, error: checked.error.message });\n          continue;\n        }\n\n        // The block package's own title, the same thing the add-block UI writes. It is\n        // what the user sees for a block whose model derives no title of its own, and it\n        // is resolution's to supply — nothing here could reconstruct it.\n        prepared.set(entry.entryId, { blockPack: cachedBp, label: entry.title });\n      } catch (e) {\n        problems.push({\n          entryId: entry.entryId,\n          error: `This entry's block could not be installed: ${ensureError(e).message}`,\n        });\n      }\n    }\n\n    if (problems.length > 0) return { added: [], problems };\n\n    const rid = await this.resolveProjectId(id);\n    let added: AppliedEntry[] = [];\n    try {\n      await withProjectAuthored(\n        this.env.projectHelper,\n        this.pl,\n        rid,\n        options.author,\n        (mut) => {\n          added = applyTemplateEntries({\n            document,\n            placer: mut,\n            entries: prepared,\n            projectHelper: this.env.projectHelper,\n          });\n        },\n        // Under the same lock an open session's own mutations take, so an apply and a user\n        // editing the project cannot interleave.\n        { name: \"applyTemplateToProject\", lockId: `project:${id}` },\n      );\n    } catch (e: unknown) {\n      // A statement about the file: the transaction went with the throw, so the project kept\n      // none of the blocks the apply had placed, and `added` is empty by construction.\n      // Anything else — a backend that refused the write, say — is not about the file and\n      // keeps propagating.\n      if (!(e instanceof TemplateEntryRejected)) throw e;\n      return { added: [], problems: [{ entryId: e.entryId, error: e.message }] };\n    }\n\n    return { added, problems: [] };\n  }\n\n  /** Permanently deletes project from the project list, this will result in\n   * destruction of all attached objects, like files, analysis results etc. */\n  public async deleteProject(id: ProjectId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRemoveProject\", async (tx) => {\n      const data = await tx.getResourceData(this.projectListResourceId, true);\n      let fieldName: string | undefined;\n      for (const f of data.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (resourceIdToString(f.value) === (id as string)) {\n          fieldName = f.name;\n          break;\n        }\n      }\n      if (fieldName === undefined) throw new Error(`Project ${id} not found in project list.`);\n      tx.removeField(field(this.projectListResourceId, fieldName));\n      await tx.commit();\n    });\n    this.projectIdCache.delete(id);\n    await this.projectListTree.refreshState();\n  }\n\n  /**\n   * Duplicates an existing project and adds the copy to this user's project list.\n   *\n   * @param srcProjectId - project id of the project to duplicate\n   * @param rename - optional function that receives the source label and all existing\n   *   project labels (read within the same transaction), and returns the label for the copy\n   */\n  public async duplicateProject(\n    srcProjectId: ProjectId,\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<ProjectId> {\n    const sourceRid = await this.resolveProjectId(srcProjectId);\n\n    const newPrj: ResourceRef = await this.pl.withWriteTx(\"MLDuplicateProject\", async (tx) => {\n      // Read source project meta\n      const sourceMeta = await tx.getKValueJson<ProjectMeta>(sourceRid, ProjectMetaKey);\n\n      // Read all existing project labels from the project list (parallel reads)\n      const projectListData = await tx.getResourceData(this.projectListResourceId, true);\n      const projectRids = projectListData.fields\n        .map((f) => f.value)\n        .filter(isNotNullSignedResourceId);\n      const existingLabels = (\n        await Promise.all(\n          projectRids.map((rid) => tx.getKValueJson<ProjectMeta>(rid, ProjectMetaKey)),\n        )\n      ).map((m) => m.label);\n\n      // Compute new label\n      const newLabel = rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label;\n\n      // Create the duplicate\n      const newPrj = await duplicateProject(\n        tx,\n        sourceRid,\n        { label: newLabel },\n        this.env.projectHelper,\n      );\n\n      // Attach to project list with a random UUID field name\n      tx.createField(field(this.projectListResourceId, randomUUID()), \"Dynamic\", newPrj);\n      await tx.commit();\n\n      return newPrj;\n    });\n\n    await this.projectListTree.refreshState();\n\n    const signedRid = await newPrj.globalId;\n    const newProjectId = resourceIdToString(signedRid) as ProjectId;\n    this.projectIdCache.set(newProjectId, signedRid);\n    return newProjectId;\n  }\n\n  /**\n   * Duplicates a project into another user's root, minted in the TARGET user's color so the target\n   * owns it. Sibling of {@link duplicateProject}, but writes into a different root. The source\n   * project (on the current client root) is referenced cross-color for its block data, kept alive\n   * by refcounting, exactly like accepting a shared project. Works both ways: pull (while\n   * impersonating a user, copy their project to yourself) and push (from your own root, copy a\n   * project to a user). Admin cross-root op; requires the crossTreeRefs:v1 backend capability.\n   */\n  public async duplicateProjectToUser(\n    srcProjectId: ProjectId,\n    targetLogin: string,\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<void> {\n    if (!this.serverCapabilities.includes(\"crossTreeRefs:v1\"))\n      throw new Error(\"duplicateProjectToUser requires the crossTreeRefs:v1 backend capability.\");\n\n    const sourceRid = await this.resolveProjectId(srcProjectId);\n    const targetRoot = await this.pl.getUserRoot({ login: targetLogin, createIfNotExists: true });\n\n    // Run on the target root: the tx default color is the target's, so the new project (and the\n    // target's project list, if created here) are minted in the target's color.\n    await this.pl.withWriteTxOnRoot(targetRoot, \"MLDuplicateProjectToUser\", async (tx) => {\n      // Resolve or lazily create the target root's project list (tx.clientRoot === targetRoot).\n      const targetProjectListRid = await ensureProjectListRid(tx);\n\n      // Source label + the target's existing labels, for collision-aware renaming.\n      const sourceMeta = await tx.getKValueJson<ProjectMeta>(sourceRid, ProjectMetaKey);\n      const targetListData = await tx.getResourceData(targetProjectListRid, true);\n      const existingLabels = (\n        await Promise.all(\n          targetListData.fields\n            .map((f) => f.value)\n            .filter(isNotNullSignedResourceId)\n            .map((rid) => tx.getKValueJson<ProjectMeta>(rid, ProjectMetaKey)),\n        )\n      ).map((m) => m.label);\n      const newLabel = rename ? rename(sourceMeta.label, existingLabels) : sourceMeta.label;\n\n      const newPrj = await duplicateProject(\n        tx,\n        sourceRid,\n        { label: newLabel },\n        this.env.projectHelper,\n      );\n      tx.createField(field(targetProjectListRid, randomUUID()), \"Dynamic\", newPrj);\n      await tx.commit();\n    });\n  }\n\n  //\n  // Project Sharing (Copy & Share)\n  //\n\n  /**\n   * Shares the given projects (Copy & Share). Snapshots the projects, creates one envelope, and\n   * grants it — all in one atomic write transaction, so a failed grant rolls the whole thing back\n   * and the outbox is left as it was.\n   *\n   * Two variants (see {@link ShareProjectsOptions}):\n   * - `{ recipients }` — one writable grant per named recipient; the envelope expires after the\n   *   default TTL (`sharedAt + envelopeTtlMs`).\n   * - `{ everyone: true }` — one make-public grant (backend rewrites the target to the\n   *   everyone-user); the envelope's `expiresAt` is `null`, so it never expires.\n   *\n   * v1 always passes `mode: \"copy\"`.\n   */\n  public async shareProjects(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    if (projectIds.length === 0) throw new Error(\"shareProjects: no projects given\");\n\n    // Everyone + replace: refresh the existing everyone-share of this project under its stable\n    // shareId (so recipients who already decided aren't re-prompted), if one exists. Found\n    // automatically by project overlap; falls through to a fresh share when none exists.\n    if (\"everyone\" in options && options.replace) {\n      const priorEveryone = (await this.findSupersedableEnvelopes(projectIds)).find(\n        (p) => p.everyone,\n      );\n      if (priorEveryone !== undefined) {\n        await this.changeShare(priorEveryone.shareId, { title: options.title });\n        return;\n      }\n    }\n\n    await this.createNewShare(projectIds, options);\n  }\n\n  /**\n   * Mints a fresh share: snapshots the projects into one new envelope (a fresh shareId),\n   * supersedes prior shares of the same project, and grants it — all in one atomic write\n   * transaction, so a failed grant rolls the whole thing back and the outbox is left as it was.\n   * The everyone-refresh path is the {@link changeShare} branch of {@link shareProjects}; this is\n   * the mint-a-new-envelope branch.\n   */\n  private async createNewShare(\n    projectIds: ProjectId[],\n    options: ShareProjectsOptions,\n  ): Promise<void> {\n    const everyone = \"everyone\" in options;\n    const sources: EnvelopeProjectSource[] = await Promise.all(\n      projectIds.map(\n        async (id): Promise<EnvelopeProjectSource> => ({\n          kind: \"fresh\",\n          projectId: id,\n          sourceRid: await this.resolveProjectId(id),\n        }),\n      ),\n    );\n    const sender = this.currentUserLogin ?? \"\";\n    // Targeted share: sharedAt + ttl. Share-with-everybody: never expires (null).\n    const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n    // Supersede prior shares of the same project(s) so they never pile up. Resolved before\n    // the write tx (ListGrants is a separate RPC). Everyone-share supersedes a prior\n    // everyone-share of the same project; a targeted share pulls each named recipient out of\n    // any prior share of that project, deleting that share if it ends up with no recipients.\n    const priors = await this.findSupersedableEnvelopes(projectIds);\n\n    await this.pl.withWriteTx(\"MLShareProjects\", async (tx) => {\n      if (everyone) {\n        for (const prior of priors) {\n          if (prior.everyone) tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n        }\n      } else {\n        const newRecipients = new Set(options.recipients);\n        for (const prior of priors) {\n          if (prior.everyone) continue; // a single user can't be pulled from an everyone-grant\n          const toRemove = prior.recipients.filter((u) => newRecipients.has(u));\n          if (toRemove.length === 0) continue;\n          const remaining = prior.recipients.filter((u) => !newRecipients.has(u));\n          if (remaining.length === 0) {\n            // Nobody left on the old share — drop the whole envelope.\n            tx.removeField(field(this.sharingOutboxResourceId, prior.fieldName));\n          } else {\n            for (const u of toRemove) tx.revokeAccess(prior.rid, u);\n          }\n        }\n      }\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: options.mode,\n        sender,\n        title: options.title,\n        expiresAt,\n      });\n\n      // Grant in the same transaction (writable: the cross-color accept rule demands a writable\n      // grant on the envelope). Atomic with the create.\n      const envelopeGid = await envelope.globalId;\n      if (everyone) {\n        // One everyone-grant: empty/ignored target, ANY_AUTHORISED. The backend rewrites\n        // the target to the everyone-user; gated by role + permission ceiling.\n        tx.grantAccess(envelopeGid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      } else {\n        for (const recipient of options.recipients) {\n          tx.grantAccess(envelopeGid, recipient, { writable: true });\n        }\n      }\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Changes a share in place (same {@link ShareId}), in one write transaction: re-snapshots live\n   * source projects and carries deleted ones' snapshots forward; applies edited recipients/title;\n   * transfers already-decided recipients' accept/reject records (they keep their copy and aren't\n   * re-prompted); re-grants; drops the old envelope.\n   *\n   * `opts.recipients` is the full targeted set (decided users are always kept). `opts.title`\n   * replaces the title — omit keeps the current one. `opts.everyone` upgrades targeted ->\n   * everyone; the reverse is impossible and ignored.\n   *\n   * `opts.projectActions` is a per-source-project decision, keyed by projectId: `update`\n   * re-snapshots the live source (falls back to carry if the source is gone), `keep` carries the\n   * existing snapshot (and its timestamp), `remove` drops the project from the pack. A project not\n   * in the map defaults to `keep`. Omit the whole map for the legacy auto behavior (live sources\n   * updated, gone ones kept) — the everyone-refresh path relies on that.\n   */\n  public async changeShare(\n    shareId: ShareId,\n    opts: {\n      recipients?: string[];\n      everyone?: boolean;\n      title?: string;\n      projectActions?: Record<ProjectId, ProjectChangeAction>;\n    } = {},\n  ): Promise<void> {\n    await this.pl.withWriteTx(\"MLChangeShare\", async (tx) => {\n      const old = await this.resolveOutboxEnvelope(tx, shareId);\n      if (old === undefined)\n        throw new Error(`changeShare: no live share with id ${shareId} in the outbox.`);\n\n      const self = this.currentUserLogin ?? \"\";\n      const grants = await tx.listGrants(old.rid);\n      // A targeted share may be upgraded to everyone; an everyone-share can't be narrowed back.\n      const everyone = grants.some((g) => isEveryoneUserLogin(g.user)) || opts.everyone === true;\n\n      // Read the old envelope's project snapshots (uuid -> rid) and accept/reject records.\n      const oldRd = await tx.getResourceData(old.rid, true);\n      const snapshotByUuid = new Map<string, SignedResourceId>();\n      const acceptances: { login: string; acc: EnvelopeAcceptance }[] = [];\n      for (const f of oldRd.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        if (isEnvelopeProjectField(f.name)) {\n          snapshotByUuid.set(envelopeProjectFieldUuid(f.name), f.value);\n        } else if (isAcceptanceField(f.name)) {\n          const raw = (await tx.getResourceData(f.value, false)).data;\n          if (raw === undefined) continue;\n          acceptances.push({\n            login: acceptanceFieldLogin(f.name),\n            acc: cachedDeserialize(raw) as EnvelopeAcceptance,\n          });\n        }\n      }\n      const decidedLogins = acceptances.map((a) => a.login);\n\n      // Everyone-shares ignore recipients; targeted shares keep decided users plus the edited set.\n      const priorRecipients = grants\n        .filter((g) => !isEveryoneUserLogin(g.user) && g.user !== self)\n        .map((g) => g.user);\n      const recipients = everyone\n        ? []\n        : Array.from(new Set([...(opts.recipients ?? priorRecipients), ...decidedLogins]));\n\n      // Live source projects by persistable id — these get a fresh snapshot.\n      const liveProjects = new Map<string, SignedResourceId>();\n      const projList = await tx.getResourceData(this.projectListResourceId, true);\n      for (const f of projList.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        liveProjects.set(resourceIdToString(f.value), f.value);\n      }\n\n      // Per project (keyed by field uuid), apply the caller's decision (default `keep`); with no\n      // projectActions map, fall back to the legacy auto behavior: update a live source, keep a gone one.\n      const actions = opts.projectActions;\n      const sources: EnvelopeProjectSource[] = [];\n      for (const uuid of Object.keys(old.data.projects) as ProjectFieldUuid[]) {\n        const { label, source, updatedAt } = old.data.projects[uuid];\n        const liveRid = liveProjects.get(source);\n\n        const action = actions\n          ? (actions[source] ?? \"keep\")\n          : liveRid !== undefined\n            ? \"update\"\n            : \"keep\";\n        if (action === \"remove\") continue;\n\n        if (action === \"update\" && liveRid !== undefined) {\n          sources.push({ kind: \"fresh\", projectId: source, sourceRid: liveRid });\n        } else {\n          // keep, or an \"update\" whose source vanished before commit (deleted meanwhile, e.g. from\n          // another client): carry the prior snapshot. Liveness is read inside this write tx — race-safe.\n          const snapshotRid = snapshotByUuid.get(uuid);\n          if (snapshotRid !== undefined)\n            sources.push({ kind: \"carry\", projectId: source, label, snapshotRid, updatedAt });\n        }\n      }\n\n      // Omit (undefined) keeps the current title; a provided value replaces it.\n      const title = opts.title === undefined ? old.data.title : opts.title.trim();\n      const expiresAt = everyone ? null : Date.now() + this.env.ops.envelopeTtlMs;\n\n      // Same shareId, same outbox field name — detach the old field before rebuilding, or they collide.\n      tx.removeField(field(this.sharingOutboxResourceId, old.fieldName));\n\n      const { envelope } = await buildShareEnvelope(tx, this.sharingOutboxResourceId, sources, {\n        mode: old.data.mode,\n        sender: self,\n        title,\n        expiresAt,\n        shareId, // SAME shareId — the essence of change\n      });\n\n      // Transfer the decided users' records onto the new envelope (donor-written copies).\n      for (const { login, acc } of acceptances) {\n        if (!everyone && !recipients.includes(login)) continue;\n        writeEnvelopeAcceptance(tx, envelope, login, acc.action, acc.timestamp);\n      }\n\n      const gid = await envelope.globalId;\n      if (everyone) tx.grantAccess(gid, \"\", { writable: true }, GrantType.ANY_AUTHORISED);\n      else for (const r of recipients) tx.grantAccess(gid, r, { writable: true });\n\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Finds the donor's own outgoing envelopes built from any of the given source projects —\n   * the supersede candidates for a fresh share of the same project(s). Reads each envelope's\n   * recipient set via `ListGrants` so the caller can pull individual recipients or detect an\n   * everyone-share.\n   */\n  private async findSupersedableEnvelopes(projectIds: ProjectId[]): Promise<\n    {\n      fieldName: string;\n      rid: SignedResourceId;\n      shareId: ShareId;\n      everyone: boolean;\n      recipients: string[];\n    }[]\n  > {\n    const wanted = new Set(projectIds);\n\n    const matched = await this.pl.withReadTx(\"MLFindSupersede\", async (tx) => {\n      const outbox = await tx.getResourceData(this.sharingOutboxResourceId, true);\n      const out: { fieldName: string; rid: SignedResourceId; shareId: ShareId }[] = [];\n      for (const f of outbox.fields) {\n        if (isNullSignedResourceId(f.value)) continue;\n        const rd = await tx.getResourceData(f.value, false);\n        if (rd.data === undefined) continue;\n        const data = decodeEnvelopeData(rd.data);\n        if (Object.values(data.projects).some((p) => wanted.has(p.source)))\n          out.push({ fieldName: f.name, rid: f.value, shareId: data.shareId });\n      }\n      return out;\n    });\n\n    return await Promise.all(\n      matched.map(async ({ fieldName, rid, shareId }) => {\n        const grants = await this.pl.userResources.listGrants(rid);\n        return {\n          fieldName,\n          rid,\n          shareId,\n          everyone: grants.some((g) => isEveryoneUserLogin(g.user)),\n          recipients: grants.filter((g) => !isEveryoneUserLogin(g.user)).map((g) => g.user),\n        };\n      }),\n    );\n  }\n\n  /**\n   * Revokes and deletes an outgoing share for all recipients: detaches and deletes the envelope, and\n   * its grants are revoked along with it. Already-accepted copies are unaffected (ref-counting keeps\n   * the adopted resources alive). Idempotent — revoking a share that is already gone is a no-op.\n   */\n  public async revokeShare(shareId: ShareId): Promise<void> {\n    await this.pl.withWriteTx(\"MLRevokeShare\", async (tx) => {\n      const target = await this.resolveOutboxEnvelope(tx, shareId);\n      if (target === undefined) return;\n      tx.removeField(field(this.sharingOutboxResourceId, target.fieldName));\n      await tx.commit();\n    });\n\n    await this.sharingOutboxTree.refreshState();\n  }\n\n  /**\n   * Resolves a live envelope from the donor's own outbox by its logical `shareId`, returning the\n   * outbox field name (for detach), the signed envelope id, and its decoded {@link EnvelopeData}.\n   * The outbox is keyed by `{shareId}` directly, but a replaced/legacy share may have drifted, so\n   * we match on the decoded `shareId` rather than the field name alone.\n   */\n  private async resolveOutboxEnvelope(\n    tx: PlTransaction,\n    shareId: ShareId,\n  ): Promise<{ fieldName: string; rid: SignedResourceId; data: EnvelopeData } | undefined> {\n    const outboxData = await tx.getResourceData(this.sharingOutboxResourceId, true);\n    for (const f of outboxData.fields) {\n      if (isNullSignedResourceId(f.value)) continue;\n      const rd = await tx.getResourceData(f.value, false);\n      if (rd.data === undefined) continue;\n      const data = decodeEnvelopeData(rd.data);\n      if (data.shareId === shareId) return { fieldName: f.name, rid: f.value, data };\n    }\n    return undefined;\n  }\n\n  /**\n   * Resolves currently-shared envelopes (granted to this user) to their resource ids, keyed by\n   * the envelope's logical `shareId`.\n   *\n   * Reads the {@link liveEnvelopes} Computable — the same shared-resource discovery tree that\n   * feeds {@link pendingShares}. This is the single discovery mechanism: there is no separate\n   * `ListUserResources` re-stream on every accept/reject. `refreshState()` is awaited first so a\n   * just-granted envelope is observed (the tree's discovery poll may otherwise lag a freshly\n   * landed grant). The tree is gRPC-only, so this is empty on a REST-connected client.\n   */\n  private async resolveLiveEnvelopes(): Promise<Map<ShareId, LiveEnvelope>> {\n    await this.pendingSharesTree.refreshState();\n    const live = (await this.liveEnvelopes.getValue()) ?? [];\n    // Dedup by logical shareId (last writer wins — at most one live envelope per shareId).\n    const map = new Map<ShareId, LiveEnvelope>();\n    for (const e of live) map.set(e.data.shareId, e);\n    return map;\n  }\n\n  /**\n   * Accepts one or more pending shares: duplicates each share's projects into this user's\n   * project list, records the decision per share, and (read-write share) writes the donor-visible\n   * acceptance onto the envelope. Per-share failures (e.g. an expiry race) are collected, not\n   * short-circuited — the rest still get accepted. Accept-all = pass every current pending shareId.\n   *\n   * `rename` resolves label collisions (same callback contract as {@link duplicateProject}), but\n   * the source lives in the envelope tree, so accept calls the low-level mutator directly.\n   */\n  public async acceptShare(\n    shareIds: ShareId[],\n    rename?: (previousLabel: string, existingLabels: string[]) => string,\n  ): Promise<{ accepted: ProjectId[]; failed: { shareId: ShareId; error: string }[] }> {\n    const live = await this.resolveLiveEnvelopes();\n    const login = this.currentUserLogin;\n\n    const accepted: ProjectId[] = [];\n    const failed: { shareId: ShareId; error: string }[] = [];\n\n    for (const shareId of shareIds) {\n      const envelope = live.get(shareId);\n      if (envelope === undefined) {\n        failed.push({ shareId, error: \"Share is no longer available.\" });\n        continue;\n      }\n      try {\n        const now = Date.now();\n        const createdRids = await this.pl.withWriteTx(\"MLAcceptShare\", async (tx) => {\n          const created = await copyEnvelopeProjectsIntoList(\n            tx,\n            envelope.rid,\n            this.projectListResourceId,\n            rename,\n          );\n\n          // Record the decision on the acceptor's own SharingState, keyed on shareId.\n          writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n            decision: \"accepted\",\n            timestamp: now,\n            envelopeSharedAt: envelope.data.sharedAt,\n            acceptedProjects: resourceIdsToStrings(created),\n          });\n\n          // Read-write share: write the donor-visible acceptance onto the envelope.\n          if (login !== null && envelope.data.mode !== \"read-only\")\n            writeEnvelopeAcceptance(tx, envelope.rid, login, \"accepted\", now);\n\n          await tx.commit();\n          return created;\n        });\n        for (const rid of createdRids) {\n          const projectId = resourceIdToString(rid) as ProjectId;\n          this.projectIdCache.set(projectId, rid);\n          accepted.push(projectId);\n        }\n      } catch (e) {\n        failed.push({ shareId, error: e instanceof Error ? e.message : String(e) });\n      }\n    }\n\n    await Promise.all([this.projectListTree.refreshState(), this.sharingStateTree.refreshState()]);\n    return { accepted, failed };\n  }\n\n  /** Records rejection of a pending share; it never surfaces again. */\n  public async rejectShare(shareId: ShareId): Promise<void> {\n    const live = await this.resolveLiveEnvelopes();\n    const envelope = live.get(shareId);\n    const login = this.currentUserLogin;\n    const now = Date.now();\n\n    await this.pl.withWriteTx(\"MLRejectShare\", async (tx) => {\n      writeSharingDecision(tx, this.sharingStateResourceId, shareId, {\n        decision: \"rejected\",\n        timestamp: now,\n        envelopeSharedAt: envelope?.data.sharedAt ?? now,\n        acceptedProjects: [],\n      });\n\n      // Read-write share: write the donor-visible rejection onto the envelope (if still live).\n      if (envelope !== undefined && login !== null && envelope.data.mode !== \"read-only\")\n        writeEnvelopeAcceptance(tx, envelope.rid, login, \"rejected\", now);\n\n      await tx.commit();\n    });\n\n    await this.sharingStateTree.refreshState();\n  }\n\n  //\n  // Outbox cleanup (donor side)\n  //\n\n  private static readonly EnvelopeCleanupIntervalMs = 6 * 3600 * 1000; // every 6h\n  private envelopeCleanupTimer: ReturnType<typeof setInterval> | undefined;\n\n  /** On ML start and every 6h, delete envelopes whose immutable `expiresAt` has passed. */\n  private startEnvelopeCleanup(): void {\n    void this.runEnvelopeCleanup();\n    this.envelopeCleanupTimer = setInterval(() => {\n      void this.runEnvelopeCleanup();\n    }, MiddleLayer.EnvelopeCleanupIntervalMs);\n    // Don't keep the process alive solely for cleanup.\n    this.envelopeCleanupTimer.unref?.();\n  }\n\n  /** Scans the donor's outbox and deletes expired envelopes (backend auto-revokes their grants).\n   *  Envelopes with `expiresAt: null` (share-with-everybody) are skipped. */\n  private async runEnvelopeCleanup(): Promise<void> {\n    try {\n      const now = Date.now();\n      const expired = await this.pl.withReadTx(\"MLEnvelopeCleanupScan\", async (tx) => {\n        const data = await tx.getResourceData(this.sharingOutboxResourceId, true);\n        const toDelete: { fieldName: string }[] = [];\n        for (const f of data.fields) {\n          if (isNullSignedResourceId(f.value)) continue;\n          const rd = await tx.getResourceData(f.value, false);\n          if (rd.data === undefined) continue;\n          const envData = decodeEnvelopeData(rd.data);\n          if (envData.expiresAt === null) continue; // never expires\n          if (envData.expiresAt <= now) toDelete.push({ fieldName: f.name });\n        }\n        return toDelete;\n      });\n\n      if (expired.length === 0) return;\n\n      await this.pl.withWriteTx(\"MLEnvelopeCleanup\", async (tx) => {\n        for (const { fieldName } of expired)\n          tx.removeField(field(this.sharingOutboxResourceId, fieldName));\n        await tx.commit();\n      });\n\n      await this.sharingOutboxTree.refreshState();\n    } catch (e) {\n      this.env.logger.warn(\n        `envelope cleanup failed: ${e instanceof Error ? e.message : String(e)}`,\n      );\n    }\n  }\n\n  //\n  // Projects\n  //\n\n  private readonly openedProjects = new Map<ProjectId, Project>();\n\n  /** Opens a project, and starts corresponding project maintenance loop. */\n  public async openProject(id: ProjectId): Promise<void> {\n    if (this.openedProjects.has(id)) throw new Error(`Project ${id} already opened`);\n    const rid = await this.resolveProjectId(id);\n    this.openedProjects.set(id, await Project.init(this.env, id, rid));\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Closes the project, and deallocate all corresponding resources. */\n  public async closeProject(id: ProjectId): Promise<void> {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    this.openedProjects.delete(id);\n    await prj.destroy();\n    this.openedProjectsList.setValue([...this.openedProjects.keys()]);\n  }\n\n  /** Returns a project access object for an opened project. */\n  public getOpenedProject(id: ProjectId): Project {\n    const prj = this.openedProjects.get(id);\n    if (prj === undefined) throw new Error(`Project ${id} not found among opened projects`);\n    return prj;\n  }\n\n  /** Returns true if project with given id is currently opened. */\n  public isProjectOpened(id: ProjectId): boolean {\n    return this.openedProjects.has(id);\n  }\n\n  /**\n   * Deallocates all runtime resources consumed by this object and awaits\n   * actual termination of event loops and other processes associated with\n   * them.\n   */\n  public async close() {\n    if (this.envelopeCleanupTimer !== undefined) clearInterval(this.envelopeCleanupTimer);\n    await Promise.all([...this.openedProjects.values()].map((prj) => prj.destroy()));\n    // this.env.quickJs;\n    await Promise.all([\n      this.projectListTree.terminate(),\n      this.sharingOutboxTree.terminate(),\n      this.sharingStateTree.terminate(),\n      this.pendingSharesTree.terminate(),\n    ]);\n    await this.env.dispose();\n    await this.pl.close();\n  }\n\n  /** @deprecated */\n  public async closeAndAwaitTermination() {\n    await this.close();\n  }\n\n  /** Generates sufficiently random string to be used as local secret for the\n   * middle layer */\n  public static generateLocalSecret(): string {\n    return HmacSha256Signer.generateSecret();\n  }\n\n  /** Returns a block event dispatcher, which can be used to listen to block events. */\n  public get blockEventDispatcher(): BlockEventDispatcher {\n    return this.env.blockEventDispatcher;\n  }\n\n  /** Initialize middle layer */\n  public static async init(\n    pl: PlClient,\n    workdir: string,\n    _ops: MiddleLayerOpsConstructor,\n  ): Promise<MiddleLayer> {\n    const ops: MiddleLayerOps = {\n      ...DefaultMiddleLayerOpsSettings,\n      ...DefaultMiddleLayerOpsPaths(workdir),\n      ..._ops,\n    };\n\n    // overriding debug options from environment variables\n    ops.defaultTreeOptions.logStat = getDebugFlags().logTreeStats;\n    ops.debugOps.dumpInitialTreeState = getDebugFlags().dumpInitialTreeState;\n    // apply MI_TREE_TRAVERSAL only when the embedder hasn't set an explicit mode\n    if (\n      ops.defaultTreeOptions.traversalMode === undefined &&\n      getDebugFlags().treeTraversalMode !== undefined\n    )\n      ops.defaultTreeOptions.traversalMode = getDebugFlags().treeTraversalMode;\n\n    const { projects, sharingOutbox, sharingState } = await pl.withWriteTx(\n      \"MLInitialization\",\n      async (tx) => {\n        // Lazily create each clientRoot-attached singleton resource. Returns the existing\n        // resource id if the field is already populated, otherwise creates + locks + sets it.\n        const lazyInit = async (\n          fieldName: string,\n          type: { name: string; version: string },\n        ): Promise<{ ref?: ResourceRef; existing?: SignedResourceId }> => {\n          const f = field(tx.clientRoot, fieldName);\n          tx.createField(f, \"Dynamic\");\n          const fData = await tx.getField(f);\n          if (isNullSignedResourceId(fData.value)) {\n            const ref = tx.createEphemeral(type);\n            tx.lock(ref);\n            tx.setField(f, ref);\n            return { ref };\n          }\n          return { existing: fData.value };\n        };\n\n        const projectsR = await lazyInit(ProjectsField, ProjectsResourceType);\n        const outboxR = await lazyInit(SharingOutboxField, SharingOutboxResourceType);\n        const stateR = await lazyInit(SharingStateField, SharingStateResourceType);\n\n        await tx.commit();\n\n        return {\n          projects: projectsR.existing ?? (await projectsR.ref!.globalId),\n          sharingState: stateR.existing ?? (await stateR.ref!.globalId),\n          sharingOutbox: outboxR.existing ?? (await outboxR.ref!.globalId),\n        };\n      },\n    );\n\n    const logger = ops.logger;\n\n    const driverKit = await initDriverKit(pl, workdir, ops.frontendDownloadPath, ops);\n\n    // passed to components having no own retry logic\n    const retryHttpDispatcher = new RetryAgent(pl.httpDispatcher);\n\n    const v2RegistryProvider = new V2RegistryProvider(retryHttpDispatcher);\n\n    const bpPreparer = new BlockPackPreparer(\n      v2RegistryProvider,\n      driverKit.signer,\n      retryHttpDispatcher,\n    );\n\n    const quickJs = await getQuickJS();\n\n    const runtimeCapabilities = new RuntimeCapabilities();\n    // add runtime capabilities of model here\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 1);\n    runtimeCapabilities.addSupportedRequirement(\"requiresModelAPIVersion\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresCreatePTable\", 2);\n    runtimeCapabilities.addSupportedRequirement(\"requiresPFramesVersion\", REQUIRES_PFRAMES_VERSION);\n    registerServiceCapabilities((flag, value) =>\n      runtimeCapabilities.addSupportedRequirement(flag, value),\n    );\n    // runtime capabilities of the desktop are to be added by the desktop app / test framework\n\n    const serviceRegistry = createModelServiceRegistry({ logger });\n\n    const env: MiddleLayerEnvironment = {\n      pl,\n      blockEventDispatcher: new BlockEventDispatcher(),\n      signer: driverKit.signer,\n      logger,\n      httpDispatcher: pl.httpDispatcher,\n      retryHttpDispatcher,\n      ops,\n      bpPreparer,\n      frontendDownloadDriver: driverKit.frontendDriver,\n      driverKit,\n      blockUpdateWatcher: new BlockUpdateWatcher(v2RegistryProvider, logger, {\n        minDelay: ops.devBlockUpdateRecheckInterval,\n        http: retryHttpDispatcher,\n        preferredUpdateChannel: ops.preferredUpdateChannel,\n      }),\n      runtimeCapabilities,\n      serviceRegistry,\n      quickJs,\n      projectHelper: new ProjectHelper(quickJs, logger),\n      dispose: async () => {\n        await serviceRegistry.dispose();\n        await retryHttpDispatcher.destroy();\n        await driverKit.dispose();\n      },\n    };\n\n    const openedProjects = new WatchableValue<ProjectId[]>([]);\n    const projectListTC = await createProjectList(pl, projects, openedProjects, env);\n\n    // Project sharing trees and reactive views.\n    const outgoingTC = await createOutgoingShares(pl, sharingOutbox, env);\n    const sharingStateTree = await createSharingStateTree(pl, sharingState, env);\n    const pendingSharesTree = await createPendingSharesTree(pl, env);\n    const pendingShares = createPendingSharesComputable(\n      pendingSharesTree,\n      sharingStateTree,\n      pl.userResources.authUser,\n    );\n    const liveEnvelopes = createLiveEnvelopesComputable(pendingSharesTree);\n\n    return new MiddleLayer(\n      env,\n      driverKit,\n      driverKit.signer,\n      projects,\n      sharingOutbox,\n      sharingState,\n      openedProjects,\n      projectListTC.tree,\n      outgoingTC.tree,\n      sharingStateTree,\n      pendingSharesTree,\n      v2RegistryProvider,\n      projectListTC.computable,\n      outgoingTC.computable,\n      pendingShares,\n      liveEnvelopes,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiJA,IAAa,cAAb,MAAa,YAAY;CAIJ;CACD;CACA;CACC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;CAEA;CAGT;CAGA;CAIU;CA1BnB;CAEA,YACE,KACA,WACA,QACA,uBACA,yBACA,wBACA,oBACA,iBACA,mBACA,kBACA,mBACA,uBAEA,aAGA,gBAGA,eAIA,eACA;EAxBiB,KAAA,MAAA;EACD,KAAA,YAAA;EACA,KAAA,SAAA;EACC,KAAA,wBAAA;EACA,KAAA,0BAAA;EACA,KAAA,yBAAA;EACA,KAAA,qBAAA;EACA,KAAA,kBAAA;EACA,KAAA,oBAAA;EACA,KAAA,mBAAA;EACA,KAAA,oBAAA;EACD,KAAA,wBAAA;EAEA,KAAA,cAAA;EAGT,KAAA,iBAAA;EAGA,KAAA,gBAAA;EAIU,KAAA,gBAAA;EAEjB,KAAK,KAAK,KAAK,IAAI;EACnB,KAAK,qBAAqB;CAC5B;;;;;CAMA,IAAW,iBAA4C;EACrD,OAAO,KAAK,GAAG,WAAW;CAC5B;;;;;;;CAQA,IAAW,qBAA+B;EACxC,OAAO,KAAK,GAAG,WAAW,gBAAgB,CAAC;CAC7C;;;;;CAMA,IAAW,mBAAkC;EAC3C,OAAO,KAAK,GAAG,cAAc;CAC/B;;;;;;;CAQA,IAAW,mBAA4B;EAIrC,OAAO,KAAK,mBAAmB,SAAS,kBAAkB,KAAK,CAAC,KAAK;CACvE;;CAGA,IAAW,gBAAyB;EAClC,OAAO,KAAK,GAAG,KAAK,WAAW,KAAA;CACjC;;;;;CAMA,IAAW,kBAA+B;EACxC,OAAO,KAAK,GAAG;CACjB;;;;;;;CAQA,IAAW,uBAAgC;EACzC,OACE,CAAC,KAAK,iBACN,KAAK,mBAAmB,SAAS,iBAAiB,KAClDA,sBAAAA,mBAAmB,KAAK,eAAe;CAE3C;;;;;;;;CASA,IAAW,4BAAqC;EAC9C,OAAOC,sBAAAA,eAAe,KAAK,eAAe;CAC5C;;CAGA,qBACE,aACA,QAA0B,MACpB;EACN,KAAK,IAAI,oBAAoB,wBAAwB,aAAa,KAAK;CACzE;;CAGA,wBAA+B,cAA0D;EACvF,OAAO,KAAK,IAAI,oBAAoB,mBAAmB,YAAY;CACrE;;CAGA,IAAW,oBAA0C;EACnD,OAAO,KAAK,IAAI;CAClB;;CAGA,IAAW,kBAAwC;EACjD,OAAO,KAAK,IAAI;CAClB;CAMA,iBAAkC,IAAIC,UAAAA,SAAsC,EAAE,KAAK,KAAK,CAAC;;;CAIzF,MAAc,iBAAiB,WAAiD;EAC9E,MAAM,SAAS,KAAK,eAAe,IAAI,SAAS;EAChD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,MAAM,MAAM,MAAM,KAAK,GAAG,WAAW,oBAAoB,OAAO,OAAO;GACrE,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,WAAsB,OAAO,EAAE;GACtE;GACA,MAAM,IAAI,MAAM,WAAW,UAAU,4BAA4B;EACnE,CAAC;EAED,KAAK,eAAe,IAAI,WAAW,GAAG;EACtC,OAAO;CACT;;CAOA,MAAa,cAAc,MAAuC;EAChE,IAAI;EACJ,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,MAAMC,gBAAAA,cAAc,IAAI,IAAI;GAClC,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,GAAG;GAC9E,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,IAAK;EAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,SAAS;EAC9C,KAAK,eAAe,IAAI,WAAW,SAAS;EAC5C,OAAO;CACT;;CAGA,MAAa,eACX,IACA,MACA,QACe;EACf,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,MAAMC,gBAAAA,oBACJ,KAAK,IAAI,eACT,KAAK,IACL,KACA,SACC,QAAQ;GACP,IAAI,QAAQ,IAAI;EAClB,GACA,EAAE,MAAM,iBAAiB,CAC3B;EACA,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;;;;;;;;;;;;;;CAiBA,MAAa,wBAAwB,IAAsD;EACzF,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,OAAO,MAAMC,gBAAAA,YACX,KAAK,IAAI,eACT,KAAK,IACL,MACC,QAAQ,IAAI,mBAAmB,GAChC,EAAE,MAAM,0BAA0B,CACpC;CACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6CA,MAAa,uBACX,IACA,UACA,UACA,UAA8D,CAAC,GACjC;EAC9B,MAAM,aAAa,MAAMC,yBAAAA,uBAAuB,UAAU,UAAU,EAClE,eAAe,QAAQ,iBAAiB,MAC1C,CAAC;EACD,IAAI,WAAW,SAAS,SAAS,GAAG,OAAO;GAAE,OAAO,CAAC;GAAG,UAAU,WAAW;EAAS;EAItF,MAAM,YAAY,IAAI,IAAI,SAAS,OAAO,KAAK,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;EAC3E,MAAM,2BAAW,IAAI,IAAmC;EACxD,MAAM,WAAmC,CAAC;EAE1C,KAAK,MAAM,SAAS,WAAW,UAC7B,IAAI;GACF,MAAM,gBAAgB,UAAU,IAAI,MAAM,OAAO;GACjD,MAAM,aAAa,MAAM,KAAK,IAAI,WAAW,QAAQ,MAAM,IAAI;GAC/D,MAAM,YAAA,GAAA,qBAAA,cAAA,CAAyB,WAAW,MAAM;GAOhD,MAAM,WAAWC,uBAAAA,aAAa,cAAc,MAAM,WAAW,OAAO,IAAI;GACxE,IAAI,aAAa,KAAA,GAAW;IAC1B,MAAM,UAAU,cAAc,YAAY,cAAc;IACxD,SAAS,KAAK;KACZ,SAAS,MAAM;KACf,OAAO,YAAY,KAAA,IAAY,GAAG,SAAS,KAAK,GAAG,SAAS,IAAI,QAAQ;IAC1E,CAAC;IACD;GACF;GAKA,KAAK,IAAI,oBAAoB,oBAAoB,SAAS,YAAY;GACtE,kBAAA,iCAAiC,KAAK,IAAI,WAAW,oBAAoB;GAEzE,MAAM,WAAW,MAAMC,uBAAAA,uBAAuB,KAAK,IAAI,UAAU;GAMjE,MAAM,UAAU,KAAK,IAAI,cAAc,2BACrC,UACA,cAAc,MAChB;GACA,IAAI,QAAQ,UAAU,KAAA,GAAW;IAC/B,SAAS,KAAK;KAAE,SAAS,MAAM;KAAS,OAAO,QAAQ,MAAM;IAAQ,CAAC;IACtE;GACF;GAKA,SAAS,IAAI,MAAM,SAAS;IAAE,WAAW;IAAU,OAAO,MAAM;GAAM,CAAC;EACzE,SAAS,GAAG;GACV,SAAS,KAAK;IACZ,SAAS,MAAM;IACf,OAAO,+CAAA,GAAA,qBAAA,YAAA,CAA0D,CAAC,CAAC,CAAC;GACtE,CAAC;EACH;EAGF,IAAI,SAAS,SAAS,GAAG,OAAO;GAAE,OAAO,CAAC;GAAG;EAAS;EAEtD,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,IAAI,QAAwB,CAAC;EAC7B,IAAI;GACF,MAAMJ,gBAAAA,oBACJ,KAAK,IAAI,eACT,KAAK,IACL,KACA,QAAQ,SACP,QAAQ;IACP,QAAQK,2BAAAA,qBAAqB;KAC3B;KACA,QAAQ;KACR,SAAS;KACT,eAAe,KAAK,IAAI;IAC1B,CAAC;GACH,GAGA;IAAE,MAAM;IAA0B,QAAQ,WAAW;GAAK,CAC5D;EACF,SAAS,GAAY;GAKnB,IAAI,EAAE,aAAaC,uBAAAA,wBAAwB,MAAM;GACjD,OAAO;IAAE,OAAO,CAAC;IAAG,UAAU,CAAC;KAAE,SAAS,EAAE;KAAS,OAAO,EAAE;IAAQ,CAAC;GAAE;EAC3E;EAEA,OAAO;GAAE;GAAO,UAAU,CAAC;EAAE;CAC/B;;;CAIA,MAAa,cAAc,IAA8B;EACvD,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GACtE,IAAI;GACJ,KAAK,MAAM,KAAK,KAAK,QAAQ;IAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,MAAO,IAAe;KAClD,YAAY,EAAE;KACd;IACF;GACF;GACA,IAAI,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,4BAA4B;GACvF,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,uBAAuB,SAAS,CAAC;GAC3D,MAAM,GAAG,OAAO;EAClB,CAAC;EACD,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,KAAK,gBAAgB,aAAa;CAC1C;;;;;;;;CASA,MAAa,iBACX,cACA,QACoB;EACpB,MAAM,YAAY,MAAM,KAAK,iBAAiB,YAAY;EAE1D,MAAM,SAAsB,MAAM,KAAK,GAAG,YAAY,sBAAsB,OAAO,OAAO;GAExF,MAAM,aAAa,MAAM,GAAG,cAA2B,WAAWC,sBAAAA,cAAc;GAIhF,MAAM,eAAc,MADU,GAAG,gBAAgB,KAAK,uBAAuB,IAAI,EAAA,CAC7C,OACjC,KAAK,MAAM,EAAE,KAAK,CAAC,CACnB,OAAOC,0BAAAA,yBAAyB;GACnC,MAAM,kBACJ,MAAM,QAAQ,IACZ,YAAY,KAAK,QAAQ,GAAG,cAA2B,KAAKD,sBAAAA,cAAc,CAAC,CAC7E,EAAA,CACA,KAAK,MAAM,EAAE,KAAK;GAMpB,MAAM,SAAS,MAAME,gBAAAA,iBACnB,IACA,WACA,EAAE,OANa,SAAS,OAAO,WAAW,OAAO,cAAc,IAAI,WAAW,MAM5D,GAClB,KAAK,IAAI,aACX;GAGA,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,wBAAA,GAAA,YAAA,WAAA,CAAkC,CAAC,GAAG,WAAW,MAAM;GACjF,MAAM,GAAG,OAAO;GAEhB,OAAO;EACT,CAAC;EAED,MAAM,KAAK,gBAAgB,aAAa;EAExC,MAAM,YAAY,MAAM,OAAO;EAC/B,MAAM,gBAAA,GAAA,0BAAA,mBAAA,CAAkC,SAAS;EACjD,KAAK,eAAe,IAAI,cAAc,SAAS;EAC/C,OAAO;CACT;;;;;;;;;CAUA,MAAa,uBACX,cACA,aACA,QACe;EACf,IAAI,CAAC,KAAK,mBAAmB,SAAS,kBAAkB,GACtD,MAAM,IAAI,MAAM,0EAA0E;EAE5F,MAAM,YAAY,MAAM,KAAK,iBAAiB,YAAY;EAC1D,MAAM,aAAa,MAAM,KAAK,GAAG,YAAY;GAAE,OAAO;GAAa,mBAAmB;EAAK,CAAC;EAI5F,MAAM,KAAK,GAAG,kBAAkB,YAAY,4BAA4B,OAAO,OAAO;GAEpF,MAAM,uBAAuB,MAAMC,qBAAAA,qBAAqB,EAAE;GAG1D,MAAM,aAAa,MAAM,GAAG,cAA2B,WAAWH,sBAAAA,cAAc;GAChF,MAAM,iBAAiB,MAAM,GAAG,gBAAgB,sBAAsB,IAAI;GAC1E,MAAM,kBACJ,MAAM,QAAQ,IACZ,eAAe,OACZ,KAAK,MAAM,EAAE,KAAK,CAAC,CACnB,OAAOC,0BAAAA,yBAAyB,CAAC,CACjC,KAAK,QAAQ,GAAG,cAA2B,KAAKD,sBAAAA,cAAc,CAAC,CACpE,EAAA,CACA,KAAK,MAAM,EAAE,KAAK;GAGpB,MAAM,SAAS,MAAME,gBAAAA,iBACnB,IACA,WACA,EAAE,OALa,SAAS,OAAO,WAAW,OAAO,cAAc,IAAI,WAAW,MAK5D,GAClB,KAAK,IAAI,aACX;GACA,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,uBAAA,GAAA,YAAA,WAAA,CAAiC,CAAC,GAAG,WAAW,MAAM;GAC3E,MAAM,GAAG,OAAO;EAClB,CAAC;CACH;;;;;;;;;;;;;;CAmBA,MAAa,cACX,YACA,SACe;EACf,IAAI,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,kCAAkC;EAK/E,IAAI,cAAc,WAAW,QAAQ,SAAS;GAC5C,MAAM,iBAAiB,MAAM,KAAK,0BAA0B,UAAU,EAAA,CAAG,MACtE,MAAM,EAAE,QACX;GACA,IAAI,kBAAkB,KAAA,GAAW;IAC/B,MAAM,KAAK,YAAY,cAAc,SAAS,EAAE,OAAO,QAAQ,MAAM,CAAC;IACtE;GACF;EACF;EAEA,MAAM,KAAK,eAAe,YAAY,OAAO;CAC/C;;;;;;;;CASA,MAAc,eACZ,YACA,SACe;EACf,MAAM,WAAW,cAAc;EAC/B,MAAM,UAAmC,MAAM,QAAQ,IACrD,WAAW,IACT,OAAO,QAAwC;GAC7C,MAAM;GACN,WAAW;GACX,WAAW,MAAM,KAAK,iBAAiB,EAAE;EAC3C,EACF,CACF;EACA,MAAM,SAAS,KAAK,oBAAoB;EAExC,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;EAM9D,MAAM,SAAS,MAAM,KAAK,0BAA0B,UAAU;EAE9D,MAAM,KAAK,GAAG,YAAY,mBAAmB,OAAO,OAAO;GACzD,IAAI;SACG,MAAM,SAAS,QAClB,IAAI,MAAM,UAAU,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;GAAA,OAEpF;IACL,MAAM,gBAAgB,IAAI,IAAI,QAAQ,UAAU;IAChD,KAAK,MAAM,SAAS,QAAQ;KAC1B,IAAI,MAAM,UAAU;KACpB,MAAM,WAAW,MAAM,WAAW,QAAQ,MAAM,cAAc,IAAI,CAAC,CAAC;KACpE,IAAI,SAAS,WAAW,GAAG;KAE3B,IADkB,MAAM,WAAW,QAAQ,MAAM,CAAC,cAAc,IAAI,CAAC,CACzD,CAAC,CAAC,WAAW,GAEvB,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,MAAM,SAAS,CAAC;UAEnE,KAAK,MAAM,KAAK,UAAU,GAAG,aAAa,MAAM,KAAK,CAAC;IAE1D;GACF;GAEA,MAAM,EAAE,aAAa,MAAME,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,QAAQ;IACd;IACA,OAAO,QAAQ;IACf;GACF,CAAC;GAID,MAAM,cAAc,MAAM,SAAS;GACnC,IAAI,UAGF,GAAG,YAAY,aAAa,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAE5E,KAAK,MAAM,aAAa,QAAQ,YAC9B,GAAG,YAAY,aAAa,WAAW,EAAE,UAAU,KAAK,CAAC;GAI7D,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;;;;;;;;;;;CAkBA,MAAa,YACX,SACA,OAKI,CAAC,GACU;EACf,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,MAAM,MAAM,KAAK,sBAAsB,IAAI,OAAO;GACxD,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,MAAM,sCAAsC,QAAQ,gBAAgB;GAEhF,MAAM,OAAO,KAAK,oBAAoB;GACtC,MAAM,SAAS,MAAM,GAAG,WAAW,IAAI,GAAG;GAE1C,MAAM,WAAW,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC,KAAK,KAAK,aAAa;GAGtF,MAAM,QAAQ,MAAM,GAAG,gBAAgB,IAAI,KAAK,IAAI;GACpD,MAAM,iCAAiB,IAAI,IAA8B;GACzD,MAAM,cAA4D,CAAC;GACnE,KAAK,MAAM,KAAK,MAAM,QAAQ;IAC5B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,IAAIC,gBAAAA,uBAAuB,EAAE,IAAI,GAC/B,eAAe,IAAIC,gBAAAA,yBAAyB,EAAE,IAAI,GAAG,EAAE,KAAK;SACvD,IAAIC,sBAAAA,kBAAkB,EAAE,IAAI,GAAG;KACpC,MAAM,OAAO,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK,EAAA,CAAG;KACvD,IAAI,QAAQ,KAAA,GAAW;KACvB,YAAY,KAAK;MACf,OAAOC,sBAAAA,qBAAqB,EAAE,IAAI;MAClC,MAAA,GAAA,2BAAA,kBAAA,CAAuB,GAAG;KAC5B,CAAC;IACH;GACF;GACA,MAAM,gBAAgB,YAAY,KAAK,MAAM,EAAE,KAAK;GAGpD,MAAM,kBAAkB,OACrB,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,KAAK,EAAE,SAAS,IAAI,CAAC,CAC9D,KAAK,MAAM,EAAE,IAAI;GACpB,MAAM,aAAa,WACf,CAAC,IACD,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAI,KAAK,cAAc,iBAAkB,GAAG,aAAa,CAAC,CAAC;GAGnF,MAAM,+BAAe,IAAI,IAA8B;GACvD,MAAM,WAAW,MAAM,GAAG,gBAAgB,KAAK,uBAAuB,IAAI;GAC1E,KAAK,MAAM,KAAK,SAAS,QAAQ;IAC/B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,aAAa,KAAA,GAAA,0BAAA,mBAAA,CAAuB,EAAE,KAAK,GAAG,EAAE,KAAK;GACvD;GAIA,MAAM,UAAU,KAAK;GACrB,MAAM,UAAmC,CAAC;GAC1C,KAAK,MAAM,QAAQ,OAAO,KAAK,IAAI,KAAK,QAAQ,GAAyB;IACvE,MAAM,EAAE,OAAO,QAAQ,cAAc,IAAI,KAAK,SAAS;IACvD,MAAM,UAAU,aAAa,IAAI,MAAM;IAEvC,MAAM,SAAS,UACV,QAAQ,WAAW,SACpB,YAAY,KAAA,IACV,WACA;IACN,IAAI,WAAW,UAAU;IAEzB,IAAI,WAAW,YAAY,YAAY,KAAA,GACrC,QAAQ,KAAK;KAAE,MAAM;KAAS,WAAW;KAAQ,WAAW;IAAQ,CAAC;SAChE;KAGL,MAAM,cAAc,eAAe,IAAI,IAAI;KAC3C,IAAI,gBAAgB,KAAA,GAClB,QAAQ,KAAK;MAAE,MAAM;MAAS,WAAW;MAAQ;MAAO;MAAa;KAAU,CAAC;IACpF;GACF;GAGA,MAAM,QAAQ,KAAK,UAAU,KAAA,IAAY,IAAI,KAAK,QAAQ,KAAK,MAAM,KAAK;GAC1E,MAAM,YAAY,WAAW,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI;GAG9D,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,IAAI,SAAS,CAAC;GAEjE,MAAM,EAAE,aAAa,MAAML,gBAAAA,mBAAmB,IAAI,KAAK,yBAAyB,SAAS;IACvF,MAAM,IAAI,KAAK;IACf,QAAQ;IACR;IACA;IACA;GACF,CAAC;GAGD,KAAK,MAAM,EAAE,OAAO,SAAS,aAAa;IACxC,IAAI,CAAC,YAAY,CAAC,WAAW,SAAS,KAAK,GAAG;IAC9C,gBAAA,wBAAwB,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,SAAS;GACxE;GAEA,MAAM,MAAM,MAAM,SAAS;GAC3B,IAAI,UAAU,GAAG,YAAY,KAAK,IAAI,EAAE,UAAU,KAAK,GAAGC,0BAAAA,UAAU,cAAc;QAC7E,KAAK,MAAM,KAAK,YAAY,GAAG,YAAY,KAAK,GAAG,EAAE,UAAU,KAAK,CAAC;GAE1E,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,0BAA0B,YAQtC;EACA,MAAM,SAAS,IAAI,IAAI,UAAU;EAEjC,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,mBAAmB,OAAO,OAAO;GACxE,MAAM,SAAS,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;GAC1E,MAAM,MAAwE,CAAC;GAC/E,KAAK,MAAM,KAAK,OAAO,QAAQ;IAC7B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;IACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;IAClD,IAAI,GAAG,SAAS,KAAA,GAAW;IAC3B,MAAM,OAAOK,sBAAAA,mBAAmB,GAAG,IAAI;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAM,MAAM,OAAO,IAAI,EAAE,MAAM,CAAC,GAC/D,IAAI,KAAK;KAAE,WAAW,EAAE;KAAM,KAAK,EAAE;KAAO,SAAS,KAAK;IAAQ,CAAC;GACvE;GACA,OAAO;EACT,CAAC;EAED,OAAO,MAAM,QAAQ,IACnB,QAAQ,IAAI,OAAO,EAAE,WAAW,KAAK,cAAc;GACjD,MAAM,SAAS,MAAM,KAAK,GAAG,cAAc,WAAW,GAAG;GACzD,OAAO;IACL;IACA;IACA;IACA,UAAU,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC;IACxD,YAAY,OAAO,QAAQ,MAAM,EAAA,GAAA,0BAAA,oBAAA,CAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;GAClF;EACF,CAAC,CACH;CACF;;;;;;CAOA,MAAa,YAAY,SAAiC;EACxD,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,MAAM,SAAS,MAAM,KAAK,sBAAsB,IAAI,OAAO;GAC3D,IAAI,WAAW,KAAA,GAAW;GAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,OAAO,SAAS,CAAC;GACpE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,kBAAkB,aAAa;CAC5C;;;;;;;CAQA,MAAc,sBACZ,IACA,SACuF;EACvF,MAAM,aAAa,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;EAC9E,KAAK,MAAM,KAAK,WAAW,QAAQ;GACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;GACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;GAClD,IAAI,GAAG,SAAS,KAAA,GAAW;GAC3B,MAAM,OAAOA,sBAAAA,mBAAmB,GAAG,IAAI;GACvC,IAAI,KAAK,YAAY,SAAS,OAAO;IAAE,WAAW,EAAE;IAAM,KAAK,EAAE;IAAO;GAAK;EAC/E;CAEF;;;;;;;;;;;CAYA,MAAc,uBAA4D;EACxE,MAAM,KAAK,kBAAkB,aAAa;EAC1C,MAAM,OAAQ,MAAM,KAAK,cAAc,SAAS,KAAM,CAAC;EAEvD,MAAM,sBAAM,IAAI,IAA2B;EAC3C,KAAK,MAAM,KAAK,MAAM,IAAI,IAAI,EAAE,KAAK,SAAS,CAAC;EAC/C,OAAO;CACT;;;;;;;;;;CAWA,MAAa,YACX,UACA,QACmF;EACnF,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAC7C,MAAM,QAAQ,KAAK;EAEnB,MAAM,WAAwB,CAAC;EAC/B,MAAM,SAAgD,CAAC;EAEvD,KAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,WAAW,KAAK,IAAI,OAAO;GACjC,IAAI,aAAa,KAAA,GAAW;IAC1B,OAAO,KAAK;KAAE;KAAS,OAAO;IAAgC,CAAC;IAC/D;GACF;GACA,IAAI;IACF,MAAM,MAAM,KAAK,IAAI;IACrB,MAAM,cAAc,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;KAC3E,MAAM,UAAU,MAAMC,gBAAAA,6BACpB,IACA,SAAS,KACT,KAAK,uBACL,MACF;KAGA,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;MAC7D,UAAU;MACV,WAAW;MACX,kBAAkB,SAAS,KAAK;MAChC,kBAAkBC,gBAAAA,qBAAqB,OAAO;KAChD,CAAC;KAGD,IAAI,UAAU,QAAQ,SAAS,KAAK,SAAS,aAC3C,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;KAElE,MAAM,GAAG,OAAO;KAChB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,OAAO,aAAa;KAC7B,MAAM,aAAA,GAAA,0BAAA,mBAAA,CAA+B,GAAG;KACxC,KAAK,eAAe,IAAI,WAAW,GAAG;KACtC,SAAS,KAAK,SAAS;IACzB;GACF,SAAS,GAAG;IACV,OAAO,KAAK;KAAE;KAAS,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;IAAE,CAAC;GAC5E;EACF;EAEA,MAAM,QAAQ,IAAI,CAAC,KAAK,gBAAgB,aAAa,GAAG,KAAK,iBAAiB,aAAa,CAAC,CAAC;EAC7F,OAAO;GAAE;GAAU;EAAO;CAC5B;;CAGA,MAAa,YAAY,SAAiC;EAExD,MAAM,YAAW,MADE,KAAK,qBAAqB,EAAA,CACvB,IAAI,OAAO;EACjC,MAAM,QAAQ,KAAK;EACnB,MAAM,MAAM,KAAK,IAAI;EAErB,MAAM,KAAK,GAAG,YAAY,iBAAiB,OAAO,OAAO;GACvD,gBAAA,qBAAqB,IAAI,KAAK,wBAAwB,SAAS;IAC7D,UAAU;IACV,WAAW;IACX,kBAAkB,UAAU,KAAK,YAAY;IAC7C,kBAAkB,CAAC;GACrB,CAAC;GAGD,IAAI,aAAa,KAAA,KAAa,UAAU,QAAQ,SAAS,KAAK,SAAS,aACrE,gBAAA,wBAAwB,IAAI,SAAS,KAAK,OAAO,YAAY,GAAG;GAElE,MAAM,GAAG,OAAO;EAClB,CAAC;EAED,MAAM,KAAK,iBAAiB,aAAa;CAC3C;CAMA,OAAwB,4BAA4B,IAAI,OAAO;CAC/D;;CAGA,uBAAqC;EACnC,KAAU,mBAAmB;EAC7B,KAAK,uBAAuB,kBAAkB;GAC5C,KAAU,mBAAmB;EAC/B,GAAG,YAAY,yBAAyB;EAExC,KAAK,qBAAqB,QAAQ;CACpC;;;CAIA,MAAc,qBAAoC;EAChD,IAAI;GACF,MAAM,MAAM,KAAK,IAAI;GACrB,MAAM,UAAU,MAAM,KAAK,GAAG,WAAW,yBAAyB,OAAO,OAAO;IAC9E,MAAM,OAAO,MAAM,GAAG,gBAAgB,KAAK,yBAAyB,IAAI;IACxE,MAAM,WAAoC,CAAC;IAC3C,KAAK,MAAM,KAAK,KAAK,QAAQ;KAC3B,KAAA,GAAA,0BAAA,uBAAA,CAA2B,EAAE,KAAK,GAAG;KACrC,MAAM,KAAK,MAAM,GAAG,gBAAgB,EAAE,OAAO,KAAK;KAClD,IAAI,GAAG,SAAS,KAAA,GAAW;KAC3B,MAAM,UAAUF,sBAAAA,mBAAmB,GAAG,IAAI;KAC1C,IAAI,QAAQ,cAAc,MAAM;KAChC,IAAI,QAAQ,aAAa,KAAK,SAAS,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;IACnE;IACA,OAAO;GACT,CAAC;GAED,IAAI,QAAQ,WAAW,GAAG;GAE1B,MAAM,KAAK,GAAG,YAAY,qBAAqB,OAAO,OAAO;IAC3D,KAAK,MAAM,EAAE,eAAe,SAC1B,GAAG,aAAA,GAAA,0BAAA,MAAA,CAAkB,KAAK,yBAAyB,SAAS,CAAC;IAC/D,MAAM,GAAG,OAAO;GAClB,CAAC;GAED,MAAM,KAAK,kBAAkB,aAAa;EAC5C,SAAS,GAAG;GACV,KAAK,IAAI,OAAO,KACd,4BAA4B,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,GACvE;EACF;CACF;CAMA,iCAAkC,IAAI,IAAwB;;CAG9D,MAAa,YAAY,IAA8B;EACrD,IAAI,KAAK,eAAe,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,WAAW,GAAG,gBAAgB;EAC/E,MAAM,MAAM,MAAM,KAAK,iBAAiB,EAAE;EAC1C,KAAK,eAAe,IAAI,IAAI,MAAMG,kBAAAA,QAAQ,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC;EACjE,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,MAAa,aAAa,IAA8B;EACtD,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,KAAK,eAAe,OAAO,EAAE;EAC7B,MAAM,IAAI,QAAQ;EAClB,KAAK,mBAAmB,SAAS,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,CAAC;CAClE;;CAGA,iBAAwB,IAAwB;EAC9C,MAAM,MAAM,KAAK,eAAe,IAAI,EAAE;EACtC,IAAI,QAAQ,KAAA,GAAW,MAAM,IAAI,MAAM,WAAW,GAAG,iCAAiC;EACtF,OAAO;CACT;;CAGA,gBAAuB,IAAwB;EAC7C,OAAO,KAAK,eAAe,IAAI,EAAE;CACnC;;;;;;CAOA,MAAa,QAAQ;EACnB,IAAI,KAAK,yBAAyB,KAAA,GAAW,cAAc,KAAK,oBAAoB;EACpF,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,eAAe,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC;EAE/E,MAAM,QAAQ,IAAI;GAChB,KAAK,gBAAgB,UAAU;GAC/B,KAAK,kBAAkB,UAAU;GACjC,KAAK,iBAAiB,UAAU;GAChC,KAAK,kBAAkB,UAAU;EACnC,CAAC;EACD,MAAM,KAAK,IAAI,QAAQ;EACvB,MAAM,KAAK,GAAG,MAAM;CACtB;;CAGA,MAAa,2BAA2B;EACtC,MAAM,KAAK,MAAM;CACnB;;;CAIA,OAAc,sBAA8B;EAC1C,OAAOC,2BAAAA,iBAAiB,eAAe;CACzC;;CAGA,IAAW,uBAA6C;EACtD,OAAO,KAAK,IAAI;CAClB;;CAGA,aAAoB,KAClB,IACA,SACA,MACsB;EACtB,MAAM,MAAsB;GAC1B,GAAGC,YAAAA;GACH,GAAGC,YAAAA,2BAA2B,OAAO;GACrC,GAAG;EACL;EAGA,IAAI,mBAAmB,UAAUC,gBAAAA,cAAc,CAAC,CAAC;EACjD,IAAI,SAAS,uBAAuBA,gBAAAA,cAAc,CAAC,CAAC;EAEpD,IACE,IAAI,mBAAmB,kBAAkB,KAAA,KACzCA,gBAAAA,cAAc,CAAC,CAAC,sBAAsB,KAAA,GAEtC,IAAI,mBAAmB,gBAAgBA,gBAAAA,cAAc,CAAC,CAAC;EAEzD,MAAM,EAAE,UAAU,eAAe,iBAAiB,MAAM,GAAG,YACzD,oBACA,OAAO,OAAO;GAGZ,MAAM,WAAW,OACf,WACA,SACgE;IAChE,MAAM,KAAA,GAAA,0BAAA,MAAA,CAAU,GAAG,YAAY,SAAS;IACxC,GAAG,YAAY,GAAG,SAAS;IAC3B,MAAM,QAAQ,MAAM,GAAG,SAAS,CAAC;IACjC,KAAA,GAAA,0BAAA,uBAAA,CAA2B,MAAM,KAAK,GAAG;KACvC,MAAM,MAAM,GAAG,gBAAgB,IAAI;KACnC,GAAG,KAAK,GAAG;KACX,GAAG,SAAS,GAAG,GAAG;KAClB,OAAO,EAAE,IAAI;IACf;IACA,OAAO,EAAE,UAAU,MAAM,MAAM;GACjC;GAEA,MAAM,YAAY,MAAM,SAASC,qBAAAA,eAAeC,qBAAAA,oBAAoB;GACpE,MAAM,UAAU,MAAM,SAASC,sBAAAA,oBAAoBC,sBAAAA,yBAAyB;GAC5E,MAAM,SAAS,MAAM,SAASC,sBAAAA,mBAAmBC,sBAAAA,wBAAwB;GAEzE,MAAM,GAAG,OAAO;GAEhB,OAAO;IACL,UAAU,UAAU,YAAa,MAAM,UAAU,IAAK;IACtD,cAAc,OAAO,YAAa,MAAM,OAAO,IAAK;IACpD,eAAe,QAAQ,YAAa,MAAM,QAAQ,IAAK;GACzD;EACF,CACF;EAEA,MAAM,SAAS,IAAI;EAEnB,MAAM,YAAY,MAAMC,mBAAAA,cAAc,IAAI,SAAS,IAAI,sBAAsB,GAAG;EAGhF,MAAM,sBAAsB,IAAIC,OAAAA,WAAW,GAAG,cAAc;EAE5D,MAAM,qBAAqB,IAAIC,6BAAAA,mBAAmB,mBAAmB;EAErE,MAAM,aAAa,IAAIC,mBAAAA,kBACrB,oBACA,UAAU,QACV,mBACF;EAEA,MAAM,UAAU,OAAA,GAAA,mBAAA,WAAA,CAAiB;EAEjC,MAAM,sBAAsB,IAAIC,qBAAAA,oBAAoB;EAEpD,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,2BAA2B,CAAC;EACxE,oBAAoB,wBAAwB,wBAAwB,CAAC;EACrE,oBAAoB,wBAAwB,0BAA0BC,gCAAAA,wBAAwB;EAC9F,CAAA,GAAA,gCAAA,4BAAA,EAA6B,MAAM,UACjC,oBAAoB,wBAAwB,MAAM,KAAK,CACzD;EAGA,MAAM,kBAAkBC,0BAAAA,2BAA2B,EAAE,OAAO,CAAC;EAE7D,MAAM,MAA8B;GAClC;GACA,sBAAsB,IAAIC,2BAAAA,qBAAqB;GAC/C,QAAQ,UAAU;GAClB;GACA,gBAAgB,GAAG;GACnB;GACA;GACA;GACA,wBAAwB,UAAU;GAClC;GACA,oBAAoB,IAAIC,gBAAAA,mBAAmB,oBAAoB,QAAQ;IACrE,UAAU,IAAI;IACd,MAAM;IACN,wBAAwB,IAAI;GAC9B,CAAC;GACD;GACA;GACA;GACA,eAAe,IAAIC,uBAAAA,cAAc,SAAS,MAAM;GAChD,SAAS,YAAY;IACnB,MAAM,gBAAgB,QAAQ;IAC9B,MAAM,oBAAoB,QAAQ;IAClC,MAAM,UAAU,QAAQ;GAC1B;EACF;EAEA,MAAM,iBAAiB,IAAIC,2BAAAA,eAA4B,CAAC,CAAC;EACzD,MAAM,gBAAgB,MAAMC,qBAAAA,kBAAkB,IAAI,UAAU,gBAAgB,GAAG;EAG/E,MAAM,aAAa,MAAMC,qBAAAA,qBAAqB,IAAI,eAAe,GAAG;EACpE,MAAM,mBAAmB,MAAMC,qBAAAA,uBAAuB,IAAI,cAAc,GAAG;EAC3E,MAAM,oBAAoB,MAAMC,qBAAAA,wBAAwB,IAAI,GAAG;EAC/D,MAAM,gBAAgBC,qBAAAA,8BACpB,mBACA,kBACA,GAAG,cAAc,QACnB;EACA,MAAM,gBAAgBC,qBAAAA,8BAA8B,iBAAiB;EAErE,OAAO,IAAI,YACT,KACA,WACA,UAAU,QACV,UACA,eACA,cACA,gBACA,cAAc,MACd,WAAW,MACX,kBACA,mBACA,oBACA,cAAc,YACd,WAAW,YACX,eACA,aACF;CACF;AACF"}

package/dist/middle_layer/middle_layer.d.ts

@@ -1,5 +1,8 @@
 import { V2RegistryProvider } from "../block_registry/registry-v2-provider.js";
+import { TemplateApplyReport } from "../model/template_apply.js";
+import { BlockPackProvider } from "../model/template_resolve.js";
 import { ProjectId as ProjectId$1, ProjectListEntry as ProjectListEntry$1 } from "../model/project_model.js";
+import { ProjectTemplateExportOutcome } from "../model/template_serializer.js";
 import { ProjectChangeAction, ShareId, ShareProjectsOptions } from "../model/sharing_model.js";
 import { OutgoingShare, PendingShare } from "./sharing_list.js";
 import { BlockPackPreparer } from "../mutator/block-pack/block_pack.js";
@@ -12,11 +15,11 @@ import { BlockCodeFeatureFlags, DriverKit, RuntimeCapabilities, SupportedRequire
 import { AuthorMarker, BlockPlatform, ProjectMeta } from "@milaboratories/pl-model-middle-layer";
 import { Dispatcher } from "undici";
 import { BlockEventDispatcher, MiLogger, Signer } from "@milaboratories/ts-helpers";
+import { ModelServiceRegistry, ProjectTemplateV1 } from "@milaboratories/pl-model-common";
 import { PlClient, Role } from "@milaboratories/pl-client";
 import { Computable, ComputableStableDefined } from "@milaboratories/computable";
 import { DownloadUrlDriver } from "@milaboratories/pl-drivers";
 import { QuickJSWASMModule } from "quickjs-emscripten";
-import { ModelServiceRegistry } from "@milaboratories/pl-model-common";
 
 //#region src/middle_layer/middle_layer.d.ts
 interface MiddleLayerEnvironment {
@@ -138,6 +141,69 @@ declare class MiddleLayer {
   createProject(meta: ProjectMeta): Promise<ProjectId$1>;
   /** Updates project metadata */
   setProjectMeta(id: ProjectId$1, meta: ProjectMeta, author?: AuthorMarker): Promise<void>;
+  /**
+   * Renders a project as a `template-v1` YAML document, or reports every reason it
+   * cannot be — the backing call for an "Export Project as Template…" command.
+   *
+   * Takes a project id rather than an open {@link Project} because exporting is a
+   * property of the stored project, not of a session with it: the command belongs on
+   * a project card, where the project is usually closed. Opening one to read it would
+   * spin up trees and watchers for a one-shot read, and then have to decide whether to
+   * close them again.
+   *
+   * Read-only — the underlying mutator touches no field, so the transaction is never
+   * committed and the project list needs no refresh.
+   *
+   * @param id - project id of the project to export
+   */
+  exportProjectAsTemplate(id: ProjectId$1): Promise<ProjectTemplateExportOutcome>;
+  /**
+   * Creates the blocks a `template-v1` document describes in an existing project, in the
+   * order the document lists them — the backing call for a "Create Project from Template
+   * file…" command, which is `createProject` followed by this.
+   *
+   * Takes a project id rather than an open {@link Project}, like
+   * {@link exportProjectAsTemplate} and for the same reason: applying a template is a
+   * property of the stored project, not of a session with it, and the flow that needs it
+   * has just created the project and has no session yet. An already-open session picks the
+   * new blocks up through its own refresh loop.
+   *
+   * Three stages, and their order is the design:
+   *
+   * 1. **Resolve every entry** to a concrete block pack, through `provider`.
+   * 2. **Prepare every block**: fetch it, check it can run against this backend, cache its
+   *    workflow template, and offer the entry's params to the block's kind for a shape
+   *    check.
+   * 3. **Create the blocks**, in one transaction — each one's params first pointed at this
+   *    project by the block's own model, since which values in there are references is
+   *    knowledge only the block has.
+   *
+   * The first two create nothing, so either of them failing leaves the project exactly as it
+   * was. They are also what leaves stage 3 with only in-memory work, and hence able to be a
+   * single transaction.
+   *
+   * **Stage 3 is all or nothing too**, because it is that one transaction: an entry it cannot
+   * create throws, the transaction is never committed, and the project keeps none of the
+   * blocks the apply had placed. So `problems` non-empty always means `added` is empty, at
+   * every stage — a caller never has to reconcile a half-built project, and never has to ask
+   * which of the blocks present came from the file.
+   *
+   * What is NOT checked before the work starts: which entries an entry references. Reading
+   * that means reading the params, which only the block can do, and no block exists until
+   * stage 2 has fetched one. A file whose entry references one listed below it therefore
+   * applies, and the block it creates reports itself as missing references — the same way a
+   * reference to a deleted block already behaves.
+   *
+   * @param id Project to apply into
+   * @param document A parsed template document
+   * @param provider Where each entry's block comes from
+   * @param options `allowUnstable` widens resolution to pre-release implementations, for
+   *   the whole document
+   */
+  applyTemplateToProject(id: ProjectId$1, document: ProjectTemplateV1, provider: BlockPackProvider, options?: {
+    allowUnstable?: boolean;
+    author?: AuthorMarker;
+  }): Promise<TemplateApplyReport>;
   /** Permanently deletes project from the project list, this will result in
    * destruction of all attached objects, like files, analysis results etc. */
   deleteProject(id: ProjectId$1): Promise<void>;