@opendatalabs/personal-server-ts-core 0.0.1-canary.00328bf

package/dist/schemas/server-config.d.ts

@@ -0,0 +1,190 @@
+import { z } from "zod";
+export declare const DEFAULTS: {
+    server: {
+        port: number;
+        origin: string;
+    };
+    logging: {
+        level: "info";
+        pretty: boolean;
+    };
+    storage: {
+        backend: "local";
+        config: {
+            vana: {
+                apiUrl: string;
+            };
+        };
+    };
+    gateway: {
+        url: string;
+        chainId: number;
+        contracts: {
+            dataRegistry: string;
+            dataPortabilityPermissions: string;
+            dataPortabilityServer: string;
+            dataPortabilityGrantees: string;
+            dataPortabilityEscrow: string;
+            feeRegistry: string;
+        };
+    };
+    devUi: {
+        enabled: boolean;
+    };
+    payment: {
+        enabled: boolean;
+    };
+    sync: {
+        enabled: boolean;
+        lastProcessedTimestamp: null;
+    };
+    tunnel: {
+        enabled: boolean;
+        serverAddr: string;
+        serverPort: number;
+    };
+    inference: {
+        baseUrl: string;
+        model: string;
+        e2ee: boolean;
+        maxSourceItems: number;
+        recomputeDebounceMs: number;
+    };
+    pdpp: {
+        enabled: boolean;
+        declarationPaths: string[];
+        requirePkce: boolean;
+        clients: Array<{
+            clientId: string;
+            redirectUris: string[];
+        }>;
+    };
+};
+export declare const StorageBackend: z.ZodEnum<{
+    local: "local";
+    vana: "vana";
+    ipfs: "ipfs";
+    gdrive: "gdrive";
+    dropbox: "dropbox";
+}>;
+export declare const VanaStorageConfigSchema: z.ZodObject<{
+    apiUrl: z.ZodDefault<z.ZodURL>;
+}, z.core.$strip>;
+export declare const ServerConfigSchema: z.ZodObject<{
+    server: z.ZodDefault<z.ZodObject<{
+        port: z.ZodDefault<z.ZodNumber>;
+        origin: z.ZodDefault<z.ZodURL>;
+    }, z.core.$strip>>;
+    logging: z.ZodDefault<z.ZodObject<{
+        level: z.ZodDefault<z.ZodEnum<{
+            error: "error";
+            info: "info";
+            fatal: "fatal";
+            warn: "warn";
+            debug: "debug";
+        }>>;
+        pretty: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    storage: z.ZodDefault<z.ZodObject<{
+        backend: z.ZodDefault<z.ZodEnum<{
+            local: "local";
+            vana: "vana";
+            ipfs: "ipfs";
+            gdrive: "gdrive";
+            dropbox: "dropbox";
+        }>>;
+        config: z.ZodDefault<z.ZodObject<{
+            vana: z.ZodOptional<z.ZodObject<{
+                apiUrl: z.ZodDefault<z.ZodURL>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    gateway: z.ZodDefault<z.ZodObject<{
+        url: z.ZodDefault<z.ZodURL>;
+        chainId: z.ZodDefault<z.ZodNumber>;
+        contracts: z.ZodDefault<z.ZodObject<{
+            dataRegistry: z.ZodDefault<z.ZodString>;
+            dataPortabilityPermissions: z.ZodDefault<z.ZodString>;
+            dataPortabilityServer: z.ZodDefault<z.ZodString>;
+            dataPortabilityGrantees: z.ZodDefault<z.ZodString>;
+            dataPortabilityEscrow: z.ZodDefault<z.ZodString>;
+            feeRegistry: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    devUi: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    payment: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    sync: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        lastProcessedTimestamp: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    tunnel: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        serverAddr: z.ZodDefault<z.ZodString>;
+        serverPort: z.ZodDefault<z.ZodNumber>;
+        binaryPath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    inference: z.ZodDefault<z.ZodObject<{
+        baseUrl: z.ZodDefault<z.ZodURL>;
+        model: z.ZodDefault<z.ZodString>;
+        e2ee: z.ZodDefault<z.ZodBoolean>;
+        maxSourceItems: z.ZodDefault<z.ZodNumber>;
+        recomputeDebounceMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    pdpp: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        declarationPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        requirePkce: z.ZodDefault<z.ZodBoolean>;
+        clients: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            clientId: z.ZodString;
+            redirectUris: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ServerConfig = z.infer<typeof ServerConfigSchema>;
+export type LoggingConfig = ServerConfig["logging"];
+/** Chain + contract config needed for EIP-712 signing. */
+export type GatewayConfig = {
+    chainId: number;
+    contracts: {
+        dataRegistry: string;
+        dataPortabilityPermissions: string;
+        dataPortabilityServer: string;
+        dataPortabilityGrantees: string;
+        dataPortabilityEscrow: string;
+        feeRegistry: string;
+    };
+};
+/**
+ * Model ids that shipped as {@link DEFAULTS}`.inference.model` before the
+ * current one.
+ *
+ * A persisted config that still names one of these was never a choice anyone
+ * made. Both persistence paths materialize schema defaults into the stored
+ * config on first boot — `loadConfig` writes the parsed config back to
+ * `server.json`, PS Lite stores the parsed config under its config key — so
+ * every install pins whatever default it first ran, and Desktop then hands
+ * that pinned value back as an explicit `configDefaults` entry. Without a
+ * forward step a default bump reaches new installs only.
+ *
+ * Anything outside this list is left alone: it can only have come from an
+ * operator editing the config or a host choosing a model, and that choice
+ * outranks ours.
+ */
+export declare const SUPERSEDED_INFERENCE_MODELS: readonly string[];
+/**
+ * Move a superseded default model forward to the current one.
+ *
+ * Returns the same object when there is nothing to move, so a caller can
+ * persist on identity change alone:
+ *
+ * ```ts
+ * const next = withCurrentInferenceModel(stored);
+ * if (next !== stored) await save(next);
+ * ```
+ */
+export declare function withCurrentInferenceModel(config: ServerConfig): ServerConfig;
+//# sourceMappingURL=server-config.d.ts.map

package/dist/schemas/server-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-config.d.ts","sourceRoot":"","sources":["../../src/schemas/server-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BA+EO,MAAM,EAAE;;iBAUjB,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;;CAErE,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;EAMzB,CAAC;AAEH,eAAO,MAAM,uBAAuB;;iBAElC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4I7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAEpD,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QACT,YAAY,EAAE,MAAM,CAAC;QACrB,0BAA0B,EAAE,MAAM,CAAC;QACnC,qBAAqB,EAAE,MAAM,CAAC;QAC9B,uBAAuB,EAAE,MAAM,CAAC;QAEhC,qBAAqB,EAAE,MAAM,CAAC;QAG9B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAAqB,CAAC;AAE/E;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAY5E"}

package/dist/schemas/server-config.js

@@ -0,0 +1,282 @@
+import { z } from "zod";
+export const DEFAULTS = {
+    server: {
+        port: 8080,
+        origin: "http://localhost:8080",
+    },
+    logging: {
+        level: "info",
+        pretty: false,
+    },
+    storage: {
+        backend: "local",
+        config: {
+            vana: {
+                apiUrl: "https://storage.vana.org",
+            },
+        },
+    },
+    gateway: {
+        url: "https://data-gateway-env-dev-opendatalabs.vercel.app",
+        chainId: 14800,
+        contracts: {
+            // DataRegistryV2 — addData, recordDataAccess
+            dataRegistry: "0x8f1eFCdff3d0d5BB535e32620721c7EBed151867",
+            // DataPortabilityPermissionsV2 — grant register/revoke
+            dataPortabilityPermissions: "0x4d3FA76064D88e0454cFc4CaD7e5FeC3e3124011",
+            // DataPortabilityServersV2 — server registration / trust check
+            dataPortabilityServer: "0xCae2CE0e9caa6643ed28186cF57bd40Bd9E17Eab",
+            // DataPortabilityGrantees (v1 retained)
+            dataPortabilityGrantees: "0x8325C0A0948483EdA023A1A2Fd895e62C5131234",
+            // DataPortabilityEscrow — verifyingContract for the EIP-712 domain
+            // backing /v1/escrow/pay (X402 payment validation).
+            dataPortabilityEscrow: "0x07d7769081adc3a3DBe91f5E4B98E9A5a6B292e3",
+            // FeeRegistry — declared for SDK-type compatibility. The personal
+            // server doesn't call FeeRegistry directly; fees are read off
+            // gateway.getGrant().fee, which the gateway re-resolves per request.
+            feeRegistry: "0xb4FA18443E0FA6cdC0280D20b8cCDB2377D13Bf2",
+            // Schema registration (POST /v1/schemas) is signed against the Data
+        },
+    },
+    devUi: {
+        enabled: true,
+    },
+    payment: {
+        // Off by default. When true, data reads are gated on the grant's
+        // payment status from DP RPC (BUI-398).
+        enabled: false,
+    },
+    sync: {
+        enabled: false,
+        lastProcessedTimestamp: null,
+    },
+    tunnel: {
+        enabled: true,
+        serverAddr: "frpc.server.vana.org",
+        serverPort: 7000,
+    },
+    inference: {
+        // OpenAI-compatible chat completions endpoint the derivative compute
+        // layer calls. Point it at the Vana inference relay (which holds the
+        // provider key) or straight at a provider for local development.
+        baseUrl: "https://inference.phala.com/v1",
+        model: "z-ai/glm-5.3-flash",
+        // End to end encryption of prompt and answer to the Phala gateway
+        // (E2EE v2): the relay only sees ciphertext. Set false only for local
+        // development against a provider without ACI attestation.
+        e2ee: true,
+        // Newest-first items kept per source scope when a prompt is assembled.
+        maxSourceItems: 50,
+        // Quiet period after a source scope changes before a recompute starts.
+        recomputeDebounceMs: 5_000,
+    },
+    pdpp: {
+        // The PDPP Authorization Server is opt-in. Off by default so an existing
+        // deployment gains no new authorization surface on upgrade.
+        enabled: false,
+        // Absolute file paths of retained SourceDeclaration documents. There is
+        // deliberately no trust-all option and no default: an AS that accepts any
+        // declaration it can reach will issue grants over data it was never meant
+        // to speak for. Empty means this server retains none and issues nothing.
+        declarationPaths: [],
+        // Require PKCE (RFC 7636, S256) on the authorization-code flow. PDPP
+        // clients are public clients; without a verifier an intercepted code is
+        // redeemable by whoever intercepted it.
+        requirePkce: true,
+        // Registered clients. `redirect_uri` is validated by EXACT match against
+        // this list (RFC 6749 §3.1.2.2), because the authorization code is
+        // delivered through that redirect: an unvalidated target is code
+        // exfiltration, and PKCE does not help when the attacker chose the
+        // challenge. Empty means no client may start an authorization flow.
+        clients: [],
+    },
+};
+export const StorageBackend = z.enum([
+    "local",
+    "vana",
+    "ipfs",
+    "gdrive",
+    "dropbox",
+]);
+export const VanaStorageConfigSchema = z.object({
+    apiUrl: z.url().default(DEFAULTS.storage.config.vana.apiUrl),
+});
+export const ServerConfigSchema = z.object({
+    server: z
+        .object({
+        port: z.number().int().min(1).max(65535).default(DEFAULTS.server.port),
+        origin: z.url().default(DEFAULTS.server.origin),
+    })
+        .default(DEFAULTS.server),
+    logging: z
+        .object({
+        level: z
+            .enum(["fatal", "error", "warn", "info", "debug"])
+            .default(DEFAULTS.logging.level),
+        pretty: z.boolean().default(DEFAULTS.logging.pretty),
+    })
+        .default(DEFAULTS.logging),
+    storage: z
+        .object({
+        backend: StorageBackend.default(DEFAULTS.storage.backend),
+        config: z
+            .object({
+            vana: VanaStorageConfigSchema.optional(),
+        })
+            .default({}),
+    })
+        .default(DEFAULTS.storage),
+    gateway: z
+        .object({
+        url: z.url().default(DEFAULTS.gateway.url),
+        chainId: z.number().int().positive().default(DEFAULTS.gateway.chainId),
+        contracts: z
+            .object({
+            dataRegistry: z
+                .string()
+                .startsWith("0x")
+                .default(DEFAULTS.gateway.contracts.dataRegistry),
+            dataPortabilityPermissions: z
+                .string()
+                .startsWith("0x")
+                .default(DEFAULTS.gateway.contracts.dataPortabilityPermissions),
+            dataPortabilityServer: z
+                .string()
+                .startsWith("0x")
+                .default(DEFAULTS.gateway.contracts.dataPortabilityServer),
+            dataPortabilityGrantees: z
+                .string()
+                .startsWith("0x")
+                .default(DEFAULTS.gateway.contracts.dataPortabilityGrantees),
+            dataPortabilityEscrow: z
+                .string()
+                .startsWith("0x")
+                .default(DEFAULTS.gateway.contracts.dataPortabilityEscrow),
+            feeRegistry: z
+                .string()
+                .startsWith("0x")
+                .default(DEFAULTS.gateway.contracts.feeRegistry),
+        })
+            .default(DEFAULTS.gateway.contracts),
+    })
+        .default(DEFAULTS.gateway),
+    devUi: z
+        .object({
+        enabled: z.boolean().default(DEFAULTS.devUi.enabled),
+    })
+        .default(DEFAULTS.devUi),
+    payment: z
+        .object({
+        enabled: z.boolean().default(DEFAULTS.payment.enabled),
+    })
+        .default(DEFAULTS.payment),
+    sync: z
+        .object({
+        enabled: z.boolean().default(DEFAULTS.sync.enabled),
+        lastProcessedTimestamp: z
+            .string()
+            .datetime()
+            .nullable()
+            .default(DEFAULTS.sync.lastProcessedTimestamp),
+    })
+        .default(DEFAULTS.sync),
+    tunnel: z
+        .object({
+        enabled: z.boolean().default(DEFAULTS.tunnel.enabled),
+        serverAddr: z.string().default(DEFAULTS.tunnel.serverAddr),
+        serverPort: z
+            .number()
+            .int()
+            .min(1)
+            .max(65535)
+            .default(DEFAULTS.tunnel.serverPort),
+        /**
+         * A preinstalled frpc executable to run instead of downloading one
+         * into the storage root. A host that ships inside a signed, notarized
+         * bundle (the Desktop app) sets this so the tunnel client carries the
+         * same signature as everything else it runs; an ad-hoc binary fetched
+         * into the user's home directory is what endpoint security flags.
+         * Absent = download and manage the binary as before.
+         */
+        binaryPath: z.string().min(1).optional(),
+    })
+        .default(DEFAULTS.tunnel),
+    inference: z
+        .object({
+        baseUrl: z.url().default(DEFAULTS.inference.baseUrl),
+        model: z.string().min(1).default(DEFAULTS.inference.model),
+        e2ee: z.boolean().default(DEFAULTS.inference.e2ee),
+        maxSourceItems: z
+            .number()
+            .int()
+            .min(1)
+            .max(10_000)
+            .default(DEFAULTS.inference.maxSourceItems),
+        recomputeDebounceMs: z
+            .number()
+            .int()
+            .min(0)
+            .max(3_600_000)
+            .default(DEFAULTS.inference.recomputeDebounceMs),
+    })
+        .default(DEFAULTS.inference),
+    pdpp: z
+        .object({
+        enabled: z.boolean().default(DEFAULTS.pdpp.enabled),
+        // No trust-all switch by design. A declaration is trusted because an
+        // operator retained this exact document, not because it was reachable.
+        declarationPaths: z
+            .array(z.string().min(1))
+            .default(DEFAULTS.pdpp.declarationPaths),
+        requirePkce: z.boolean().default(DEFAULTS.pdpp.requirePkce),
+        clients: z
+            .array(z.object({
+            clientId: z.string().min(1),
+            // Absolute URIs only; the AS additionally enforces https (or
+            // loopback http) and exact matching at request time.
+            redirectUris: z.array(z.string().min(1)).min(1),
+        }))
+            .default(DEFAULTS.pdpp.clients),
+    })
+        .default(DEFAULTS.pdpp),
+});
+/**
+ * Model ids that shipped as {@link DEFAULTS}`.inference.model` before the
+ * current one.
+ *
+ * A persisted config that still names one of these was never a choice anyone
+ * made. Both persistence paths materialize schema defaults into the stored
+ * config on first boot — `loadConfig` writes the parsed config back to
+ * `server.json`, PS Lite stores the parsed config under its config key — so
+ * every install pins whatever default it first ran, and Desktop then hands
+ * that pinned value back as an explicit `configDefaults` entry. Without a
+ * forward step a default bump reaches new installs only.
+ *
+ * Anything outside this list is left alone: it can only have come from an
+ * operator editing the config or a host choosing a model, and that choice
+ * outranks ours.
+ */
+export const SUPERSEDED_INFERENCE_MODELS = ["z-ai/glm-5.2"];
+/**
+ * Move a superseded default model forward to the current one.
+ *
+ * Returns the same object when there is nothing to move, so a caller can
+ * persist on identity change alone:
+ *
+ * ```ts
+ * const next = withCurrentInferenceModel(stored);
+ * if (next !== stored) await save(next);
+ * ```
+ */
+export function withCurrentInferenceModel(config) {
+    const model = config.inference.model;
+    if (model === DEFAULTS.inference.model ||
+        !SUPERSEDED_INFERENCE_MODELS.includes(model)) {
+        return config;
+    }
+    return {
+        ...config,
+        inference: { ...config.inference, model: DEFAULTS.inference.model },
+    };
+}
+//# sourceMappingURL=server-config.js.map

package/dist/schemas/server-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-config.js","sourceRoot":"","sources":["../../src/schemas/server-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,MAAM,EAAE;QACN,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,uBAAuB;KAChC;IACD,OAAO,EAAE;QACP,KAAK,EAAE,MAAe;QACtB,MAAM,EAAE,KAAK;KACd;IACD,OAAO,EAAE;QACP,OAAO,EAAE,OAAgB;QACzB,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,MAAM,EAAE,0BAA0B;aACnC;SACF;KACF;IACD,OAAO,EAAE;QACP,GAAG,EAAE,sDAAsD;QAC3D,OAAO,EAAE,KAAK;QACd,SAAS,EAAE;YACT,6CAA6C;YAC7C,YAAY,EAAE,4CAA4C;YAC1D,uDAAuD;YACvD,0BAA0B,EAAE,4CAA4C;YACxE,+DAA+D;YAC/D,qBAAqB,EAAE,4CAA4C;YACnE,wCAAwC;YACxC,uBAAuB,EAAE,4CAA4C;YACrE,mEAAmE;YACnE,oDAAoD;YACpD,qBAAqB,EAAE,4CAA4C;YACnE,kEAAkE;YAClE,8DAA8D;YAC9D,qEAAqE;YACrE,WAAW,EAAE,4CAA4C;YACzD,oEAAoE;SACrE;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;KACd;IACD,OAAO,EAAE;QACP,iEAAiE;QACjE,wCAAwC;QACxC,OAAO,EAAE,KAAK;KACf;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,IAAI;KAC7B;IACD,MAAM,EAAE;QACN,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,sBAAsB;QAClC,UAAU,EAAE,IAAI;KACjB;IACD,SAAS,EAAE;QACT,qEAAqE;QACrE,qEAAqE;QACrE,iEAAiE;QACjE,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,oBAAoB;QAC3B,kEAAkE;QAClE,sEAAsE;QACtE,0DAA0D;QAC1D,IAAI,EAAE,IAAI;QACV,uEAAuE;QACvE,cAAc,EAAE,EAAE;QAClB,uEAAuE;QACvE,mBAAmB,EAAE,KAAK;KAC3B;IACD,IAAI,EAAE;QACJ,yEAAyE;QACzE,4DAA4D;QAC5D,OAAO,EAAE,KAAK;QACd,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,gBAAgB,EAAE,EAAc;QAChC,qEAAqE;QACrE,wEAAwE;QACxE,wCAAwC;QACxC,WAAW,EAAE,IAAI;QACjB,yEAAyE;QACzE,mEAAmE;QACnE,iEAAiE;QACjE,mEAAmE;QACnE,oEAAoE;QACpE,OAAO,EAAE,EAAyD;KACnE;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;CAC7D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACtE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;KAChD,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;aACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;KACrD,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC5B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QACzD,MAAM,EAAE,CAAC;aACN,MAAM,CAAC;YACN,IAAI,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACzC,CAAC;aACD,OAAO,CAAC,EAAE,CAAC;KACf,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC5B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;QAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QACtE,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,UAAU,CAAC,IAAI,CAAC;iBAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;YACnD,0BAA0B,EAAE,CAAC;iBAC1B,MAAM,EAAE;iBACR,UAAU,CAAC,IAAI,CAAC;iBAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,0BAA0B,CAAC;YACjE,qBAAqB,EAAE,CAAC;iBACrB,MAAM,EAAE;iBACR,UAAU,CAAC,IAAI,CAAC;iBAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC;YAC5D,uBAAuB,EAAE,CAAC;iBACvB,MAAM,EAAE;iBACR,UAAU,CAAC,IAAI,CAAC;iBAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,uBAAuB,CAAC;YAC9D,qBAAqB,EAAE,CAAC;iBACrB,MAAM,EAAE;iBACR,UAAU,CAAC,IAAI,CAAC;iBAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC;YAC5D,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,UAAU,CAAC,IAAI,CAAC;iBAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC;SACnD,CAAC;aACD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC5B,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;KACrD,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC1B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;KACvD,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC5B,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACnD,sBAAsB,EAAE,CAAC;aACtB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC;KACjD,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACzB,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1D,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QACtC;;;;;;;WAOG;QACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC;QACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;QAC1D,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;QAClD,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,MAAM,CAAC;aACX,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC;QAC7C,mBAAmB,EAAE,CAAC;aACnB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,SAAS,CAAC;aACd,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,mBAAmB,CAAC;KACnD,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC9B,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACnD,qEAAqE;QACrE,uEAAuE;QACvE,gBAAgB,EAAE,CAAC;aAChB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC1C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3D,OAAO,EAAE,CAAC;aACP,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;YACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,6DAA6D;YAC7D,qDAAqD;YACrD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;SAChD,CAAC,CACH;aACA,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;KAClC,CAAC;SACD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;CAC1B,CAAC,CAAC;AAqBH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB,CAAC,cAAc,CAAC,CAAC;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAoB;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;IACrC,IACE,KAAK,KAAK,QAAQ,CAAC,SAAS,CAAC,KAAK;QAClC,CAAC,2BAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE;KACpE,CAAC;AACJ,CAAC"}

package/dist/signing/index.d.ts

@@ -0,0 +1,3 @@
+export { createServerSigner, type ServerSigner } from "./signer.js";
+export { createRequestSigner, type RequestSigner } from "./request-signer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/signing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/signing/index.js

@@ -0,0 +1,3 @@
+export { createServerSigner } from "./signer.js";
+export { createRequestSigner } from "./request-signer.js";
+//# sourceMappingURL=index.js.map

package/dist/signing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAsB,MAAM,qBAAqB,CAAC"}

package/dist/signing/request-signer.d.ts

@@ -0,0 +1,20 @@
+/**
+ * RequestSigner — produces Web3Signed Authorization headers for HTTP requests.
+ */
+import type { ServerAccount } from "../keys/server-account.js";
+export interface RequestSigner {
+    signRequest(params: {
+        aud: string;
+        method: string;
+        uri: string;
+        body?: Uint8Array;
+        /** Signed `grantId` claim (the grant view a lineage read asks for). */
+        grantId?: string;
+    }): Promise<string>;
+}
+/**
+ * Create a RequestSigner that produces Web3Signed Authorization headers
+ * using the server account's EIP-191 signing capability.
+ */
+export declare function createRequestSigner(account: ServerAccount): RequestSigner;
+//# sourceMappingURL=request-signer.d.ts.map

package/dist/signing/request-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-signer.d.ts","sourceRoot":"","sources":["../../src/signing/request-signer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,MAAM,EAAE;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,UAAU,CAAC;QAClB,uEAAuE;QACvE,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAazE"}

package/dist/signing/request-signer.js

@@ -0,0 +1,23 @@
+/**
+ * RequestSigner — produces Web3Signed Authorization headers for HTTP requests.
+ */
+import { buildWeb3SignedHeader } from "@opendatalabs/vana-sdk/browser";
+/**
+ * Create a RequestSigner that produces Web3Signed Authorization headers
+ * using the server account's EIP-191 signing capability.
+ */
+export function createRequestSigner(account) {
+    return {
+        async signRequest(params) {
+            return buildWeb3SignedHeader({
+                signMessage: (message) => account.signMessage(message),
+                aud: params.aud,
+                method: params.method,
+                uri: params.uri,
+                body: params.body,
+                grantId: params.grantId,
+            });
+        },
+    };
+}
+//# sourceMappingURL=request-signer.js.map

package/dist/signing/request-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-signer.js","sourceRoot":"","sources":["../../src/signing/request-signer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAcvE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,OAAO,qBAAqB,CAAC;gBAC3B,WAAW,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;gBAC9D,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/signing/signer.d.ts

@@ -0,0 +1,40 @@
+/**
+ * ServerSigner — signs EIP-712 messages for gateway write operations.
+ * Uses the ServerAccount's derived key for all signatures.
+ */
+import type { ServerAccount } from "../keys/server-account.js";
+import type { GatewayConfig } from "../schemas/server-config.js";
+import { type GrantRegistrationMessage, type GrantRevocationMessage, type AddDataMessage, type RecordDataAccessMessage } from "@opendatalabs/vana-sdk/browser";
+import { type LineageAttestationMessage } from "../lineage/attestation.js";
+export interface ServerSigner {
+    /** Address that signs (the server account). */
+    readonly address: `0x${string}`;
+    signGrantRegistration(msg: GrantRegistrationMessage): Promise<`0x${string}`>;
+    signGrantRevocation(msg: GrantRevocationMessage): Promise<`0x${string}`>;
+    /**
+     * DPv2 AddData attestation: registers (scope, dataHash, metadataHash) at
+     * the supplied expectedVersion on behalf of `ownerAddress`. The signer is
+     * the personal server's account; the on-chain contract validates that this
+     * server is a registered trusted server of the owner.
+     */
+    signAddData(msg: AddDataMessage): Promise<`0x${string}`>;
+    /**
+     * RECORD_DATA_ACCESS attestation: a server-signed delivery receipt that a
+     * specific (scope, version) was served to `accessor`. Emitted on every
+     * successful GET /v1/data/:scope; builders attach it to the AccessRecord
+     * on their next gateway.payForOperation call so the gateway can settle
+     * it on-chain via DataRegistryV2.recordDataAccess.
+     *
+     * recordId is a per-event bytes32 the contract pins to prevent replay.
+     */
+    signRecordDataAccess(msg: RecordDataAccessMessage): Promise<`0x${string}`>;
+    /**
+     * LineageAttestation (derivative data): binds a derivative's source list
+     * to the exact (owner, scope, version, dataHash) it is registered with,
+     * under the DataRegistry domain. The gateway requires it on POST /v1/data
+     * with `lineage`; see lineage/attestation.ts for why.
+     */
+    signLineageAttestation(msg: LineageAttestationMessage): Promise<`0x${string}`>;
+}
+export declare function createServerSigner(account: ServerAccount, gatewayConfig: GatewayConfig): ServerSigner;
+//# sourceMappingURL=signer.d.ts.map

package/dist/signing/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/signing/signer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAQL,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IAChC,qBAAqB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC7E,mBAAmB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IACzE;;;;;OAKG;IACH,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IACzD;;;;;;;;OAQG;IACH,oBAAoB,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,sBAAsB,CACpB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;CAC3B;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,aAAa,GAC3B,YAAY,CA6Dd"}

package/dist/signing/signer.js

@@ -0,0 +1,56 @@
+/**
+ * ServerSigner — signs EIP-712 messages for gateway write operations.
+ * Uses the ServerAccount's derived key for all signatures.
+ */
+import { grantRegistrationDomain, grantRevocationDomain, dataRegistryDomain, GRANT_REGISTRATION_TYPES, GRANT_REVOCATION_TYPES, ADD_DATA_TYPES, RECORD_DATA_ACCESS_TYPES, } from "@opendatalabs/vana-sdk/browser";
+import { LINEAGE_ATTESTATION_TYPES, } from "../lineage/attestation.js";
+export function createServerSigner(account, gatewayConfig) {
+    return {
+        address: account.address,
+        async signGrantRegistration(msg) {
+            return account.signTypedData({
+                domain: grantRegistrationDomain(gatewayConfig),
+                types: GRANT_REGISTRATION_TYPES,
+                primaryType: "GrantRegistration",
+                // Canary GrantRegistrationMessage is structured:
+                //   {grantorAddress, granteeId, scopes, grantVersion, expiresAt}
+                // No JSON `grant` blob, no `fileIds`. The legacy mapping that
+                // converted bigint fileIds is gone with the field itself.
+                message: msg,
+            });
+        },
+        async signGrantRevocation(msg) {
+            return account.signTypedData({
+                domain: grantRevocationDomain(gatewayConfig),
+                types: GRANT_REVOCATION_TYPES,
+                primaryType: "GrantRevocation",
+                message: msg,
+            });
+        },
+        async signAddData(msg) {
+            return account.signTypedData({
+                domain: dataRegistryDomain(gatewayConfig),
+                types: ADD_DATA_TYPES,
+                primaryType: "AddData",
+                message: msg,
+            });
+        },
+        async signLineageAttestation(msg) {
+            return account.signTypedData({
+                domain: dataRegistryDomain(gatewayConfig),
+                types: LINEAGE_ATTESTATION_TYPES,
+                primaryType: "LineageAttestation",
+                message: { ...msg, sources: [...msg.sources] },
+            });
+        },
+        async signRecordDataAccess(msg) {
+            return account.signTypedData({
+                domain: dataRegistryDomain(gatewayConfig),
+                types: RECORD_DATA_ACCESS_TYPES,
+                primaryType: "RecordDataAccess",
+                message: msg,
+            });
+        },
+    };
+}
+//# sourceMappingURL=signer.js.map

package/dist/signing/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/signing/signer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,cAAc,EACd,wBAAwB,GAKzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,yBAAyB,GAE1B,MAAM,2BAA2B,CAAC;AAmCnC,MAAM,UAAU,kBAAkB,CAChC,OAAsB,EACtB,aAA4B;IAE5B,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QAExB,KAAK,CAAC,qBAAqB,CACzB,GAA6B;YAE7B,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,uBAAuB,CAAC,aAAa,CAAC;gBAC9C,KAAK,EAAE,wBAAwB;gBAC/B,WAAW,EAAE,mBAAmB;gBAChC,iDAAiD;gBACjD,iEAAiE;gBACjE,8DAA8D;gBAC9D,0DAA0D;gBAC1D,OAAO,EAAE,GAAyC;aACnD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,mBAAmB,CACvB,GAA2B;YAE3B,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,qBAAqB,CAAC,aAAa,CAAC;gBAC5C,KAAK,EAAE,sBAAsB;gBAC7B,WAAW,EAAE,iBAAiB;gBAC9B,OAAO,EAAE,GAAyC;aACnD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,GAAmB;YACnC,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC;gBACzC,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,GAAyC;aACnD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,sBAAsB,CAC1B,GAA8B;YAE9B,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC;gBACzC,KAAK,EAAE,yBAAyB;gBAChC,WAAW,EAAE,oBAAoB;gBACjC,OAAO,EAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,oBAAoB,CACxB,GAA4B;YAE5B,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC;gBACzC,KAAK,EAAE,wBAAwB;gBAC/B,WAAW,EAAE,kBAAkB;gBAC/B,OAAO,EAAE,GAAyC;aACnD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}