@opendatalabs/personal-server-ts-core 0.0.1-canary.01ca694 → 0.0.1-canary.052d47e

package/dist/lineage/gateway.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Gateway client for the lineage endpoints. A thin fetch wrapper (not the SDK
+ * GatewayClient) because the three calls need things the SDK client does not
+ * expose yet: `includeDeleted=true` on the data point lookup, a server-signed
+ * request on the lineage read, and the `lineage` field on registration.
+ */
+import type { RequestSigner } from "../signing/request-signer.js";
+import type { LineageDataPointRecord } from "./lineage.js";
+export type LineageNode = {
+    dataPointId: string;
+    scope: string;
+    version: string;
+    deletedAt: string | null;
+}
+/**
+ * A node the caller's grant does not cover. It carries NO identifier:
+ * dataPointId is keccak256(owner, scope) and a grantee knows the owner,
+ * so an id would let it dictionary-test scope names. Only position and
+ * count survive, which is all a consent UI needs to show the shape.
+ */
+ | {
+    redacted: true;
+};
+/** `data` of a gateway lineage response (see docs/derivative-data-api.md). */
+export interface LineageView {
+    dataPointId: string;
+    ownerAddress: string;
+    scope: string;
+    version: string;
+    deletedAt: string | null;
+    sources: LineageNode[];
+    derivatives: LineageNode[];
+    /** Present (true) only when the gateway capped `derivatives`. */
+    derivativesTruncated?: true;
+    /**
+     * The grant this view was attested for. Absent on the owner's full view;
+     * set (lowercase) on a redacted grant view. The client refuses a view
+     * whose grantId does not match the one it asked for.
+     */
+    grantId?: string;
+}
+export type LineageGatewayResult = {
+    ok: true;
+    data: LineageView;
+    proof: GatewayProof;
+} | {
+    ok: false;
+    status: number;
+    body: unknown;
+};
+export interface GetLineageInput {
+    dataPointId: string;
+    /** Decimal version string; absent = the current version. */
+    version?: string;
+    /**
+     * Ask for the view a specific grant sees (nodes outside the grant's scopes
+     * come back redacted), attested as such. The gateway only honors it for the
+     * owner or one of the owner's registered servers.
+     */
+    grantId?: string;
+}
+export interface RegisterDataPointWithLineageParams {
+    ownerAddress: string;
+    scope: string;
+    dataHash: string;
+    metadataHash: string;
+    expectedVersion: string;
+    signature: string;
+    lineage: readonly string[];
+    /** LineageAttestation signature over (owner, scope, version, dataHash, lineage). */
+    lineageSignature: string;
+}
+export interface RegisterDataPointWithLineageResult {
+    dataPointId?: string;
+    expectedVersion?: string;
+}
+export interface LineageGatewayPort {
+    /** GET /v1/data/:id?includeDeleted=true; null on 404. */
+    getDataPoint(dataPointId: string): Promise<LineageDataPointRecord | null>;
+    /** GET /v1/data/:id/lineage, signed with the server key. */
+    getLineage(input: GetLineageInput): Promise<LineageGatewayResult>;
+    /**
+     * POST /v1/data with `lineage`. Same body and error contract as the SDK's
+     * registerDataPoint (a non-2xx throws `Gateway error: <status> <detail>`)
+     * so the upload worker's stale-version handling applies unchanged.
+     */
+    registerDataPoint(params: RegisterDataPointWithLineageParams): Promise<RegisterDataPointWithLineageResult>;
+}
+export interface GatewayLineageClientOptions {
+    gatewayUrl: string;
+    /** Signs lineage reads as this server; absent = getLineage is unavailable. */
+    requestSigner?: RequestSigner;
+    fetch?: typeof fetch;
+}
+/** The gateway attestation shape (ProofData); a 200 without it is not a view. */
+export interface GatewayProof {
+    userSignature: string;
+    gatewaySignature: string;
+    timestamp: number;
+    status: string;
+    estimatedConfirmation: string | null;
+    chainBlockHeight: number | null;
+}
+export declare function createGatewayLineageClient(options: GatewayLineageClientOptions): LineageGatewayPort;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/lineage/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/lineage/gateway.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,MAAM,WAAW,GACnB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AACH;;;;;GAKG;GACD;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAEvB,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,WAAW,EAAE,CAAC;IAC3B,iEAAiE;IACjE,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GACpD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEjD,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kCAAkC;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,oFAAoF;IACpF,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kCAAkC;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC1E,4DAA4D;IAC5D,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClE;;;;OAIG;IACH,iBAAiB,CACf,MAAM,EAAE,kCAAkC,GACzC,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAwBD,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AA2DD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,kBAAkB,CA2LpB"}

package/dist/lineage/gateway.js

@@ -0,0 +1,242 @@
+/**
+ * Gateway client for the lineage endpoints. A thin fetch wrapper (not the SDK
+ * GatewayClient) because the three calls need things the SDK client does not
+ * expose yet: `includeDeleted=true` on the data point lookup, a server-signed
+ * request on the lineage read, and the `lineage` field on registration.
+ */
+import { LineageUnavailableError } from "../errors/catalog.js";
+import { computeDataPointId } from "../sync/data-point-id.js";
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isLineageNode(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.redacted === true) {
+        // A redacted node must be exactly { redacted: true }. A gateway that
+        // attaches an id, scope or version to a redacted node is leaking, and the
+        // view is refused rather than passed on with the leak intact.
+        return Object.keys(value).length === 1;
+    }
+    if (typeof value.dataPointId !== "string")
+        return false;
+    return (typeof value.scope === "string" &&
+        typeof value.version === "string" &&
+        (value.deletedAt === null || typeof value.deletedAt === "string"));
+}
+function isGatewayProof(value) {
+    return (isRecord(value) &&
+        typeof value.userSignature === "string" &&
+        typeof value.gatewaySignature === "string" &&
+        typeof value.timestamp === "number" &&
+        typeof value.status === "string" &&
+        (value.estimatedConfirmation === null ||
+            typeof value.estimatedConfirmation === "string") &&
+        (value.chainBlockHeight === null ||
+            typeof value.chainBlockHeight === "number"));
+}
+/**
+ * A data point id is keccak256(owner, scope). Any gateway response that
+ * labels an owner and scope with an id must derive that id from them; an
+ * owner that is not an address, or a pair that hashes elsewhere, fails.
+ */
+function derivesDataPointId(id, ownerAddress, scope) {
+    try {
+        return (computeDataPointId(ownerAddress, scope).toLowerCase() ===
+            id.toLowerCase());
+    }
+    catch {
+        return false;
+    }
+}
+function parseLineageView(value) {
+    if (!isRecord(value) ||
+        typeof value.dataPointId !== "string" ||
+        typeof value.ownerAddress !== "string" ||
+        typeof value.scope !== "string" ||
+        typeof value.version !== "string" ||
+        !(value.deletedAt === null || typeof value.deletedAt === "string") ||
+        !Array.isArray(value.sources) ||
+        !value.sources.every(isLineageNode) ||
+        !Array.isArray(value.derivatives) ||
+        !value.derivatives.every(isLineageNode) ||
+        !(value.grantId === undefined || typeof value.grantId === "string") ||
+        !(value.derivativesTruncated === undefined ||
+            value.derivativesTruncated === true)) {
+        return null;
+    }
+    return value;
+}
+export function createGatewayLineageClient(options) {
+    const base = options.gatewayUrl.replace(/\/+$/, "");
+    const origin = new URL(base).origin;
+    const doFetch = options.fetch ?? fetch;
+    async function readJson(res) {
+        try {
+            return await res.json();
+        }
+        catch {
+            return null;
+        }
+    }
+    return {
+        async getDataPoint(dataPointId) {
+            const res = await doFetch(`${base}/v1/data/${encodeURIComponent(dataPointId)}?includeDeleted=true`);
+            if (res.status === 404)
+                return null;
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            const body = await readJson(res);
+            const data = isRecord(body) ? body.data : undefined;
+            if (!isRecord(data) ||
+                typeof data.id !== "string" ||
+                typeof data.ownerAddress !== "string" ||
+                typeof data.scope !== "string" ||
+                typeof data.expectedVersion !== "string") {
+                throw new Error("Gateway error: malformed data point response");
+            }
+            // Bind the record to what was asked for: a stale or misrouted 200 must
+            // not validate a different source than the one the caller named.
+            if (data.id.toLowerCase() !== dataPointId.toLowerCase()) {
+                throw new Error(`Gateway error: data point response is for ${data.id}, requested ${dataPointId}`);
+            }
+            // The id is keccak256(owner, scope): the record's own owner and scope
+            // must derive the id it claims, or a malformed response could pair the
+            // requested id with an arbitrary same-owner scope and slip past local
+            // naming validation.
+            if (!derivesDataPointId(data.id, data.ownerAddress, data.scope)) {
+                throw new Error(`Gateway error: data point ${data.id} does not derive from its owner and scope`);
+            }
+            return {
+                dataPointId: data.id,
+                ownerAddress: data.ownerAddress,
+                scope: data.scope,
+                version: data.expectedVersion,
+                deletedAt: typeof data.deletedAt === "string" ? data.deletedAt : null,
+            };
+        },
+        async getLineage(input) {
+            if (!options.requestSigner) {
+                throw new LineageUnavailableError({ reason: "no request signer" });
+            }
+            // The view selectors are signed, never free query parameters: the
+            // version is a path segment (inside the signed uri) and the grant view
+            // is the scheme's own `grantId` claim, so a captured signature cannot
+            // be replayed for another version or grant view.
+            const uri = `/v1/data/${input.dataPointId.toLowerCase()}/lineage` +
+                (input.version !== undefined ? `/${input.version}` : "");
+            const authorization = await options.requestSigner.signRequest({
+                aud: origin,
+                method: "GET",
+                uri,
+                grantId: input.grantId?.toLowerCase(),
+            });
+            const res = await doFetch(`${base}${uri}`, {
+                headers: { Authorization: authorization },
+            });
+            const body = await readJson(res);
+            if (!res.ok)
+                return { ok: false, status: res.status, body };
+            // The API promises an attested view: a 200 whose data or proof does
+            // not have the documented shape is reported as a gateway error, never
+            // passed on as a view.
+            const data = parseLineageView(isRecord(body) ? body.data : undefined);
+            const proof = isRecord(body) ? body.proof : undefined;
+            if (!data || !isGatewayProof(proof)) {
+                return {
+                    ok: false,
+                    status: res.status,
+                    body: { error: "malformed lineage response", received: body },
+                };
+            }
+            // The attested view must be the one that was requested. A response for
+            // another data point, or for a version other than the signed path
+            // segment, is a gateway error, never served to an authorized caller.
+            const requestedId = input.dataPointId.toLowerCase();
+            // The grant view is part of the identity of the response: a builder
+            // asking under its grant must get a view attested for that grant, and
+            // a full owner view (no grantId) must never be handed to a builder.
+            const requestedGrant = input.grantId?.toLowerCase();
+            const servedGrant = data.grantId?.toLowerCase();
+            const viewMismatch = data.dataPointId.toLowerCase() !== requestedId ||
+                (input.version !== undefined && data.version !== input.version) ||
+                requestedGrant !== servedGrant;
+            if (viewMismatch) {
+                return {
+                    ok: false,
+                    status: res.status,
+                    body: {
+                        error: "lineage response does not match the requested view",
+                        requested: {
+                            dataPointId: requestedId,
+                            version: input.version,
+                            grantId: requestedGrant,
+                        },
+                        received: {
+                            dataPointId: data.dataPointId,
+                            version: data.version,
+                            grantId: servedGrant,
+                        },
+                    },
+                };
+            }
+            // The view's own owner and scope must derive the id it is labeled
+            // with, exactly as getDataPoint demands of a record. Otherwise a
+            // malformed response could carry the requested id while exposing the
+            // lineage of another owner or scope under that label.
+            if (!derivesDataPointId(data.dataPointId, data.ownerAddress, data.scope)) {
+                return {
+                    ok: false,
+                    status: res.status,
+                    body: {
+                        error: "lineage view does not derive from its owner and scope",
+                        received: {
+                            dataPointId: data.dataPointId,
+                            ownerAddress: data.ownerAddress,
+                            scope: data.scope,
+                        },
+                    },
+                };
+            }
+            return { ok: true, data, proof };
+        },
+        async registerDataPoint(params) {
+            const res = await doFetch(`${base}/v1/data`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Web3Signed ${params.signature}`,
+                },
+                body: JSON.stringify({
+                    ownerAddress: params.ownerAddress,
+                    scope: params.scope,
+                    dataHash: params.dataHash,
+                    metadataHash: params.metadataHash,
+                    expectedVersion: params.expectedVersion,
+                    lineage: [...params.lineage],
+                    lineageSignature: params.lineageSignature,
+                }),
+            });
+            if (!res.ok) {
+                const body = await readJson(res);
+                const detail = (isRecord(body) && typeof body.error === "string" && body.error) ||
+                    res.statusText;
+                throw new Error(`Gateway error: ${res.status} ${detail}`);
+            }
+            const body = await readJson(res);
+            const record = isRecord(body) ? body : {};
+            return {
+                dataPointId: typeof record.dataPointId === "string"
+                    ? record.dataPointId
+                    : typeof record.id === "string"
+                        ? record.id
+                        : undefined,
+                expectedVersion: typeof record.expectedVersion === "string"
+                    ? record.expectedVersion
+                    : undefined,
+            };
+        },
+    };
+}
+//# sourceMappingURL=gateway.js.map

package/dist/lineage/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/lineage/gateway.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AA6F/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC5B,qEAAqE;QACrE,0EAA0E;QAC1E,8DAA8D;QAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,CACL,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAClE,CAAC;AACJ,CAAC;AAYD,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAC1C,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,CAAC,KAAK,CAAC,qBAAqB,KAAK,IAAI;YACnC,OAAO,KAAK,CAAC,qBAAqB,KAAK,QAAQ,CAAC;QAClD,CAAC,KAAK,CAAC,gBAAgB,KAAK,IAAI;YAC9B,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,EAAU,EACV,YAAoB,EACpB,KAAa;IAEb,IAAI,CAAC;QACH,OAAO,CACL,kBAAkB,CAAC,YAA6B,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE;YACtE,EAAE,CAAC,WAAW,EAAE,CACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;QAClE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACjC,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QACnE,CAAC,CACC,KAAK,CAAC,oBAAoB,KAAK,SAAS;YACxC,KAAK,CAAC,oBAAoB,KAAK,IAAI,CACpC,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAA+B,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAoC;IAEpC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAEvC,KAAK,UAAU,QAAQ,CAAC,GAAa;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,WAAW;YAC5B,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,GAAG,IAAI,YAAY,kBAAkB,CAAC,WAAW,CAAC,sBAAsB,CACzE,CAAC;YACF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACf,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAC3B,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;gBACrC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC9B,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EACxC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YACD,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CACb,6CAA6C,IAAI,CAAC,EAAE,eAAe,WAAW,EAAE,CACjF,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,qBAAqB;YACrB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,CAAC,EAAE,2CAA2C,CAChF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,EAAE;gBACpB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,eAAe;gBAC7B,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;aACtE,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,MAAM,IAAI,uBAAuB,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,kEAAkE;YAClE,uEAAuE;YACvE,sEAAsE;YACtE,iDAAiD;YACjD,MAAM,GAAG,GACP,YAAY,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,UAAU;gBACrD,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC;gBAC5D,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,KAAK;gBACb,GAAG;gBACH,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE;aACtC,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,EAAE;gBACzC,OAAO,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE;aAC1C,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YAC5D,oEAAoE;YACpE,sEAAsE;YACtE,uBAAuB;YACvB,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC9D,CAAC;YACJ,CAAC;YACD,uEAAuE;YACvE,kEAAkE;YAClE,qEAAqE;YACrE,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YACpD,oEAAoE;YACpE,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;YAChD,MAAM,YAAY,GAChB,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,WAAW;gBAC9C,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;gBAC/D,cAAc,KAAK,WAAW,CAAC;YACjC,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE;wBACJ,KAAK,EAAE,oDAAoD;wBAC3D,SAAS,EAAE;4BACT,WAAW,EAAE,WAAW;4BACxB,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,OAAO,EAAE,cAAc;yBACxB;wBACD,QAAQ,EAAE;4BACR,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,OAAO,EAAE,WAAW;yBACrB;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,iEAAiE;YACjE,qEAAqE;YACrE,sDAAsD;YACtD,IACE,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,EACpE,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE;wBACJ,KAAK,EAAE,uDAAuD;wBAC9D,QAAQ,EAAE;4BACR,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;4BAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;yBAClB;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,MAAM;YAC5B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,cAAc,MAAM,CAAC,SAAS,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;oBAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC;aACH,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,MAAM,GACV,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;oBAChE,GAAG,CAAC,UAAU,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,WAAW,EACT,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;oBACpC,CAAC,CAAC,MAAM,CAAC,WAAW;oBACpB,CAAC,CAAC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;wBAC7B,CAAC,CAAC,MAAM,CAAC,EAAE;wBACX,CAAC,CAAC,SAAS;gBACjB,eAAe,EACb,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;oBACxC,CAAC,CAAC,MAAM,CAAC,eAAe;oBACxB,CAAC,CAAC,SAAS;aAChB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lineage/index.d.ts

@@ -0,0 +1,5 @@
+export { LINEAGE_FIELD, LINEAGE_KEY, LOCAL_SCOPE_SCAN_PAGE, MAX_LINEAGE_SOURCES, assertDerivedScopeNaming, derivedScopeViolatesNaming, extractLineageField, hasReservedLineageKey, parseLineageSources, prepareLineage, readStoredLineage, resolveLineageSources, scopeNamespace, stampLineage, type LineageDataPointRecord, type LineageSourceLookup, type PrepareLineageInput, type ResolveLineageSourcesInput, type ResolvedLineageSource, type StoredLineage, } from "./lineage.js";
+export { createGatewayLineageClient, type GatewayLineageClientOptions, type GatewayProof, type GetLineageInput, type LineageGatewayPort, type LineageGatewayResult, type LineageNode, type LineageView, type RegisterDataPointWithLineageParams, type RegisterDataPointWithLineageResult, } from "./gateway.js";
+export { LINEAGE_ATTESTATION_TYPES, type LineageAttestationMessage, } from "./attestation.js";
+export { computeDataPointId } from "../sync/data-point-id.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/lineage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lineage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,EAC1B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,kCAAkC,EACvC,KAAK,kCAAkC,GACxC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/lineage/index.js

@@ -0,0 +1,5 @@
+export { LINEAGE_FIELD, LINEAGE_KEY, LOCAL_SCOPE_SCAN_PAGE, MAX_LINEAGE_SOURCES, assertDerivedScopeNaming, derivedScopeViolatesNaming, extractLineageField, hasReservedLineageKey, parseLineageSources, prepareLineage, readStoredLineage, resolveLineageSources, scopeNamespace, stampLineage, } from "./lineage.js";
+export { createGatewayLineageClient, } from "./gateway.js";
+export { LINEAGE_ATTESTATION_TYPES, } from "./attestation.js";
+export { computeDataPointId } from "../sync/data-point-id.js";
+//# sourceMappingURL=index.js.map

package/dist/lineage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lineage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,EACd,YAAY,GAOb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,GAU3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,GAE1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/lineage/lineage.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Derivative data: lineage on the write path.
+ *
+ * A derivative is an ordinary write whose body names the data points it was
+ * computed from. The caller's `lineage` field (top level of a JSON body, or
+ * inside the `X-Vana-Metadata` object of a binary write) is a list of data
+ * point ids, `keccak256(abi.encode(owner, scope))`. The Personal Server
+ * validates it against the owner's own data points and mirrors it into the
+ * envelope `data` under the reserved `$lineage` key, the same in-`data`
+ * marker idiom as `$writtenBy` and `$binary`, so lineage rides the unchanged
+ * encrypt / upload / register path and `metadataHash` commits to it.
+ *
+ * The caller's `lineage` field is left in the record untouched: for session
+ * writes it is inside the bytes the builder signed, so the lineage claim is
+ * builder-signed and `$lineage` is the server-validated mirror of it.
+ *
+ * See docs/derivative-data-api.md for the wire contract.
+ */
+import type { DataStoragePort } from "../ports/index.js";
+/** Reserved key inside the envelope `data` record for validated lineage. */
+export declare const LINEAGE_KEY: "$lineage";
+/** The caller-facing field name (JSON body top level / binary metadata). */
+export declare const LINEAGE_FIELD: "lineage";
+/** Upper bound on sources per record; keeps validation and hashing bounded. */
+export declare const MAX_LINEAGE_SOURCES = 256;
+/** Page size of the local index scan the source resolver runs. */
+export declare const LOCAL_SCOPE_SCAN_PAGE = 1000;
+export interface StoredLineage {
+    /** Validated, lowercased source data point ids in the order given. */
+    sources: `0x${string}`[];
+    /** ISO timestamp the Personal Server validated and stamped the lineage. */
+    writtenAt: string;
+}
+/** A source as the resolver saw it (local index or gateway). */
+export interface ResolvedLineageSource {
+    dataPointId: `0x${string}`;
+    scope: string;
+    /** Null while the source is only known locally (not registered yet). */
+    version: string | null;
+    deletedAt: string | null;
+}
+/** The subset of a gateway data-point record the resolver needs. */
+export interface LineageDataPointRecord {
+    dataPointId: string;
+    ownerAddress: string;
+    scope: string;
+    version: string;
+    deletedAt: string | null;
+}
+/**
+ * Gateway lookup for a source that is not in the local index. Must include
+ * deleted (tombstoned) data points: a deleted source is still a valid
+ * lineage target, it is only reported as deleted when the lineage is walked.
+ */
+export interface LineageSourceLookup {
+    getDataPoint(dataPointId: string): Promise<LineageDataPointRecord | null>;
+}
+export declare function hasReservedLineageKey(data: Record<string, unknown>): boolean;
+/** Stamp validated lineage into an envelope `data` record. */
+export declare function stampLineage(data: Record<string, unknown>, lineage: StoredLineage): Record<string, unknown>;
+/**
+ * The stored `$lineage` of a record, or null for a root record. Tolerates
+ * hand-crafted envelopes: anything that is not the exact stamped shape is
+ * treated as no lineage rather than thrown on.
+ */
+export declare class StoredLineageMalformedError extends Error {
+    constructor(detail: string);
+}
+/**
+ * Absent `$lineage` (or a data object that is not a record) is `null`: no
+ * statement. A PRESENT but malformed `$lineage` throws: a corrupted or
+ * hand-crafted derivative must fail closed, never fall through the root
+ * path and get registered as if it made no lineage statement.
+ */
+export declare function readStoredLineage(data: Record<string, unknown> | undefined): StoredLineage | null;
+/**
+ * The caller's `lineage` field from a JSON body or a binary write's parsed
+ * metadata. `undefined` when the container is not an object or carries no
+ * such field, so a bare-string metadata header or a lineage-less body is a
+ * root record.
+ */
+export declare function extractLineageField(container: unknown): unknown;
+/**
+ * Parse the caller's `lineage` value: an array of distinct 0x-prefixed
+ * 32-byte hex strings, at most MAX_LINEAGE_SOURCES long. Ids are lowercased
+ * so equal ids compare equal wherever they are stored. Throws
+ * LineageInvalidError (400).
+ */
+export declare function parseLineageSources(value: unknown): `0x${string}`[];
+/** First dot-segment of a scope (`chatgpt` for `chatgpt.conversations`). */
+export declare function scopeNamespace(scope: string): string;
+/**
+ * The naming rule. Grant patterns are exact, `prefix.*` or `*`; `prefix.*`
+ * covers every scope that starts with `prefix.`. A derived scope and a
+ * source scope are both covered by the same non-universal pattern exactly
+ * when they share their first segment, and that is the one way the current
+ * grammar can leak across a lineage edge (a grant on `chatgpt.*` would read
+ * both `chatgpt.conversations` and a derivative named `chatgpt.summary`).
+ * `*` reads everything by definition and is not a lineage leak.
+ */
+export declare function derivedScopeViolatesNaming(derivedScope: string, sourceScope: string): boolean;
+export declare function assertDerivedScopeNaming(derivedScope: string, sourceScopes: readonly string[]): void;
+export interface ResolveLineageSourcesInput {
+    /** The derived record's scope. */
+    scope: string;
+    sources: readonly `0x${string}`[];
+    serverOwner: `0x${string}`;
+    storage: Pick<DataStoragePort, "listScopes">;
+    /** Absent = sources must be in the local index. */
+    gateway?: LineageSourceLookup;
+}
+/**
+ * Resolve every source id to a data point of this owner. The local index is
+ * consulted first (`keccak256(owner, scope)` over the server's own scopes,
+ * so an unsynced local scope is a valid source), then the gateway with
+ * deleted points included. An id that resolves to nothing, or to another
+ * owner's data point, fails the whole write with 422
+ * LINEAGE_SOURCE_UNKNOWN listing every offending id; a gateway that cannot
+ * be reached fails with 502 so the builder retries instead of being told
+ * its source does not exist.
+ */
+export declare function resolveLineageSources(input: ResolveLineageSourcesInput): Promise<ResolvedLineageSource[]>;
+export interface PrepareLineageInput {
+    scope: string;
+    /** The raw caller value (`body.lineage` / `metadata.lineage`). */
+    field: unknown;
+    serverOwner: `0x${string}` | undefined;
+    storage: Pick<DataStoragePort, "listScopes">;
+    gateway?: LineageSourceLookup;
+    now: () => Date;
+}
+/**
+ * Validate a write's lineage end to end (shape, sources, naming rule) and
+ * produce the `$lineage` record to stamp. An empty list is an EXPLICIT root
+ * statement: it is stamped (`sources: []`) and registered as an attested
+ * root, distinct from an absent field, which makes no lineage statement.
+ * Throws ProtocolErrors; callers on the write path let them propagate
+ * before anything is stored.
+ */
+export declare function prepareLineage(input: PrepareLineageInput): Promise<StoredLineage>;
+//# sourceMappingURL=lineage.d.ts.map

package/dist/lineage/lineage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lineage.d.ts","sourceRoot":"","sources":["../../src/lineage/lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAG,UAAmB,CAAC;AAE/C,4EAA4E;AAC5E,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAC;AAEhD,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAI1C,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,OAAO,EAAE,KAAK,MAAM,EAAE,EAAE,CAAC;IACzB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;CAC3E;AAMD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAE5E;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,aAAa,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,MAAM,EAAE,MAAM;CAI3B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACxC,aAAa,GAAG,IAAI,CAsBtB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAG/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,MAAM,EAAE,EAAE,CAgCnE;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAET;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,IAAI,CASN;AAED,MAAM,WAAW,0BAA0B;IACzC,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,SAAS,KAAK,MAAM,EAAE,EAAE,CAAC;IAClC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC7C,mDAAmD;IACnD,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA2DlC;AAkCD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,KAAK,MAAM,EAAE,GAAG,SAAS,CAAC;IACvC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,aAAa,CAAC,CAmBxB"}