@opendatalabs/personal-server-ts-server 1.34.2 → 1.35.0

package/dist/routes/pdpp-replica-quarantine-fixture.js

@@ -0,0 +1,389 @@
+/** Test-only real issuer/replica HTTP fixture; never imports the live harness. */
+import assert from "node:assert/strict";
+import { join } from "node:path";
+import { serve } from "@hono/node-server";
+import { Hono } from "hono";
+import pino from "pino";
+import { AuthorizationSessionStore, computeS256Challenge, openPdppAuthStore, PDPP_DATA_ACCESS_TYPE_V02, PdppTokenService, } from "@opendatalabs/personal-server-ts-core/pdpp";
+import { createStreamDeclarationRegistry } from "@opendatalabs/personal-server-ts-core/storage/pdpp-records";
+import { pdppAuthRoutes } from "./pdpp-auth.js";
+import { pdppRecordsRoutes, } from "./pdpp-records.js";
+import { pdppBlobsRoutes } from "./pdpp-blobs.js";
+import { replicaChainCommitment, } from "@opendatalabs/personal-server-ts-core/replication/dpv2";
+import { fragmentReplicaPayload, prepareReplicaManifest, replicaDigest, replicaFragmentKey, replicaManifestKey, replicaScope, } from "@opendatalabs/personal-server-ts-core/replication/transport";
+const sourceId = "https://replica-journey.invalid/declaration";
+const logger = pino({ level: "silent" });
+const clientId = "replica-consent-acceptance";
+const redirect = "https://replica-app.invalid/callback";
+const verifier = "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk";
+export const window = {
+    since: "2026-10-01T00:00:00Z",
+    until: "2026-11-01T00:00:00Z",
+};
+const fields = ["text", "collected_at", "blob_ref"];
+const snapshot = {
+    source_id: sourceId,
+    source_kind: "connector",
+    version: "1",
+    digest: "a".repeat(64),
+    streams: [
+        {
+            name: "messages",
+            fields: ["id", ...fields, "private_note"],
+            required_fields: ["id", "private_note"],
+            primary_key: ["id"],
+            consent_time_field: "collected_at",
+        },
+    ],
+};
+async function listen(app) {
+    const server = serve({ fetch: app.fetch, hostname: "127.0.0.1", port: 0 });
+    await new Promise((resolve, reject) => {
+        server.once("listening", resolve);
+        server.once("error", reject);
+    });
+    const address = server.address();
+    assert(address && typeof address === "object");
+    const origin = `http://127.0.0.1:${address.port}`;
+    return {
+        origin,
+        close: async () => {
+            await new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
+        },
+    };
+}
+export async function openConsentIssuer(root, owner, ttlSeconds = 12) {
+    const store = openPdppAuthStore(join(root, "auth.sqlite"));
+    const tokens = new PdppTokenService(store, {
+        accessTokenTtlSeconds: ttlSeconds,
+    });
+    const ownerToken = (subjectId = owner) => tokens.issueOwnerToken({ subjectId, sourceId, ttlSeconds: 3600 })
+        .access_token;
+    const credential = ownerToken();
+    const foreignCredential = ownerToken(`foreign-${owner}`);
+    const app = new Hono();
+    app.route("/pdpp/v1", pdppAuthRoutes({
+        logger,
+        store,
+        tokens,
+        sessions: new AuthorizationSessionStore(),
+        resolveDeclaration: (id) => (id === sourceId ? snapshot : null),
+        inventoryFor: () => ({ eligibleFor: () => ["conn", "conn-other"] }),
+        currentSubjectId: (c) => {
+            const context = tokens.resolveToken(c.req.header("authorization")?.replace(/^Bearer /, "") ?? "");
+            return context.active && context.tokenKind === "owner"
+                ? (context.subjectId ?? null)
+                : null;
+        },
+        registeredClient: (id) => id === clientId ? { client_id: id, redirect_uris: [redirect] } : null,
+    }));
+    const httpServer = await listen(app);
+    return {
+        ...httpServer,
+        credential,
+        foreignCredential,
+        tokens,
+        close: async () => {
+            await httpServer.close();
+            store.close();
+        },
+    };
+}
+export async function openReplicaResourceServer(store, options) {
+    // Co-located AS/RS seam: consult the one live issuer token service per read.
+    // Replica SQLite contains only data; no auth state is copied or synthesized.
+    const auth = {
+        async resolveToken(accessToken) {
+            const context = options.tokens.resolveToken(accessToken);
+            // Same retained AS-grant -> RS-port mirror used by the supported
+            // coLocatedAuthorizationService; no fixture grant is manufactured.
+            return { ...context, grant: context.grant };
+        },
+    };
+    const declarations = createStreamDeclarationRegistry([
+        {
+            name: "messages",
+            semantics: "mutable_state",
+            primaryKey: ["id"],
+            cursorField: "collected_at",
+            consentTimeField: "collected_at",
+            requiredFields: ["id", "private_note"],
+            declaredFields: snapshot.streams[0].fields,
+        },
+    ]);
+    const app = new Hono();
+    app.route("/pdpp/v1", pdppRecordsRoutes({
+        logger,
+        store,
+        bindingStore: store,
+        auth,
+        declarations,
+        ownerSubjectId: options.owner,
+        reads: options.reads,
+        instancesForSource: (subject, source) => subject === options.owner && source === sourceId
+            ? ["conn", "conn-other"]
+            : [],
+    }));
+    app.route("/pdpp/v1/blobs", pdppBlobsRoutes({
+        store,
+        auth,
+        declarations,
+        reads: options.reads,
+        instancesForSource: (subject, source) => subject === options.owner && source === sourceId
+            ? ["conn", "conn-other"]
+            : [],
+        readBlobBytes: async (id) => {
+            const bytes = store.getBlobBytes(id);
+            return bytes ? new Uint8Array(bytes) : undefined;
+        },
+    }));
+    return listen(app);
+}
+async function json(response, status, label) {
+    // Never include raw HTTP bodies in errors: a token response can contain credentials.
+    const value = (await response.json());
+    assert.equal(response.status, status, `${label}: HTTP ${response.status}, error=${typeof value.error === "string" ? value.error : "none"}`);
+    return value;
+}
+function api(origin, path, token, body) {
+    return globalThis.fetch(origin + "/pdpp/v1" + path, {
+        method: body === undefined ? "GET" : "POST",
+        headers: {
+            ...(token && { authorization: `Bearer ${token}` }),
+            ...(body !== undefined && { "content-type": "application/json" }),
+        },
+        ...(body !== undefined && { body: JSON.stringify(body) }),
+    });
+}
+function form(origin, path, body, token) {
+    return globalThis.fetch(origin + "/pdpp/v1" + path, {
+        method: "POST",
+        headers: {
+            "content-type": "application/x-www-form-urlencoded",
+            ...(token && { authorization: `Bearer ${token}` }),
+        },
+        body: new URLSearchParams(body),
+    });
+}
+/** Same authorize/review/approve wire contract used by Account, with no UI claim. */
+export async function approveNarrowConsent(issuer, ownerCredential = issuer.credential) {
+    const created = await json(await api(issuer.origin, "/authorize", ownerCredential, {
+        client_id: clientId,
+        redirect_uri: redirect,
+        state: "replica-8b",
+        code_challenge: computeS256Challenge(verifier),
+        code_challenge_method: "S256",
+        authorization_details: [
+            {
+                type: PDPP_DATA_ACCESS_TYPE_V02,
+                source: { id: sourceId },
+                purpose_code: "https://replica-app.invalid/purposes/acceptance",
+                access_mode: "continuous",
+                retention: { max_duration: "P1D", on_expiry: "delete" },
+                streams: [
+                    {
+                        name: "messages",
+                        necessity: "required",
+                        fields: snapshot.streams[0].fields,
+                        time_range: {
+                            since: "2026-01-01T00:00:00Z",
+                            until: "2027-01-01T00:00:00Z",
+                        },
+                        minimum: { fields: ["text"], time_range: window },
+                    },
+                ],
+            },
+        ],
+    }), 201, "authorize");
+    const base = `/authorize/${created.session_id}`;
+    const picks = new URLSearchParams({ "instance[messages]": "conn" });
+    const original = await json(await api(issuer.origin, `${base}/review?${picks}`, ownerCredential), 200, "initial review");
+    const choices = {
+        fields: { messages: fields },
+        time_ranges: { messages: window },
+    };
+    const instanceChoices = { messages: ["conn"] };
+    const stale = await json(await api(issuer.origin, `${base}/approve`, ownerCredential, {
+        review_digest: original.review
+            .review_digest,
+        instance_choices: instanceChoices,
+        owner_choices: choices,
+    }), 409, "stale digest");
+    assert.equal(stale.error, "stale_review");
+    for (const field of fields)
+        picks.append("field[messages]", field);
+    picks.append("since[messages]", window.since);
+    picks.append("until[messages]", window.until);
+    const narrowed = await json(await api(issuer.origin, `${base}/review?${picks}`, ownerCredential), 200, "narrowed review");
+    const reviewDigest = narrowed.review
+        .review_digest;
+    const approvalBody = {
+        review_digest: reviewDigest,
+        instance_choices: instanceChoices,
+        owner_choices: choices,
+    };
+    const approved = await json(await api(issuer.origin, `${base}/approve`, ownerCredential, approvalBody), 200, "approve exact digest");
+    const returned = new URL(String(approved.redirect_uri));
+    assert.equal(returned.origin + returned.pathname, redirect);
+    assert.equal(returned.searchParams.get("state"), "replica-8b");
+    const code = returned.searchParams.get("code");
+    assert(code);
+    const redeem = () => form(issuer.origin, "/token", {
+        grant_type: "authorization_code",
+        code,
+        client_id: clientId,
+        redirect_uri: redirect,
+        code_verifier: verifier,
+    });
+    const issued = await json(await redeem(), 200, "redeem");
+    const entry = issued.authorization_details[0];
+    assert.equal(entry.type, PDPP_DATA_ACCESS_TYPE_V02);
+    assert.equal(entry.grant.version, "0.2.0");
+    assert.deepEqual(entry.grant.streams, [
+        {
+            name: "messages",
+            instance_ids: ["conn"],
+            fields,
+            time_constraint: { field: "collected_at", ...window },
+        },
+    ]);
+    assert.deepEqual(entry.grant.retention, {
+        max_duration: "P1D",
+        on_expiry: "delete",
+    });
+    const replayCode = async () => {
+        const denied = await json(await redeem(), 400, "code replay");
+        assert.equal(denied.error, "invalid_grant");
+    };
+    const replayApproval = async () => {
+        const response = await api(issuer.origin, `${base}/approve`, ownerCredential, approvalBody);
+        assert.equal(response.status, 400, "old approval replay denied");
+        await response.body?.cancel();
+    };
+    await replayCode();
+    await replayApproval();
+    return {
+        token: String(issued.access_token),
+        grantId: String(issued.grant_id),
+        ttlSeconds: Number(issued.expires_in),
+        reviewDigest,
+        replayCode,
+        replayApproval,
+    };
+}
+/** Finalized DPv2 evidence of one registered manifest slot. */
+export function finalizedEvidence(owner, manifest, currentVersion = String(manifest.version)) {
+    return {
+        head: {
+            owner,
+            scope: manifest.scope,
+            version: String(manifest.version),
+            dataHash: manifest.dataHash,
+            metadataHash: manifest.metadataHash,
+            deleted: false,
+        },
+        chain: {
+            owner,
+            scope: manifest.scope,
+            version: String(manifest.version),
+            currentVersion,
+            status: "Active",
+            commitment: replicaChainCommitment(manifest.dataHash, manifest.metadataHash),
+            chainId: 14800,
+            registry: `0x${"2".repeat(40)}`,
+            blockNumber: 123n,
+            blockHash: `0x${"3".repeat(64)}`,
+            blockTimestamp: 1000n,
+        },
+        pending: false,
+    };
+}
+/**
+ * An in-memory storage and registry with finalized evidence. Codec identity
+ * is deliberate: crypto is covered by transport tests; here the finalized
+ * hash bindings and the authorization/read boundary are the oracle.
+ */
+export function finalizedReplicaNetwork(owner) {
+    const objects = new Map();
+    const evidence = new Map();
+    const latest = new Map();
+    const observed = [];
+    const register = (manifest) => {
+        const slot = replicaManifestKey(manifest.scope, manifest.version);
+        objects.set(slot, manifest.encrypted);
+        evidence.set(slot, finalizedEvidence(owner, manifest));
+        latest.set(manifest.scope, Math.max(latest.get(manifest.scope) ?? 0, manifest.version));
+        return slot;
+    };
+    const read = (key) => {
+        const bytes = objects.get(key);
+        if (!bytes)
+            throw new Error("not found");
+        return bytes;
+    };
+    const port = {
+        encryptedByteLength: (bytes) => bytes,
+        encrypt: async (_scope, bytes) => bytes,
+        decrypt: async (_scope, bytes) => bytes,
+        putFragment: async (f) => {
+            objects.set(replicaFragmentKey(f.scope, f.digest), f.encrypted);
+        },
+        getFragment: async (scope, digest) => read(replicaFragmentKey(scope, digest)),
+        hasFragment: async (scope, digest) => objects.has(replicaFragmentKey(scope, digest)),
+        put: async (manifest) => {
+            objects.set(replicaManifestKey(manifest.scope, manifest.version), manifest.encrypted);
+        },
+        register: async (manifest) => {
+            register(manifest);
+        },
+        get: async (scope, version) => read(replicaManifestKey(scope, version)),
+        list: async () => ({
+            points: [...latest].map(([scope, version]) => ({
+                scope,
+                version: String(version),
+            })),
+            cursor: null,
+        }),
+        evidence: async (scope, version) => {
+            const slot = replicaManifestKey(scope, version);
+            observed.push(slot);
+            return evidence.get(slot) ?? { head: null, chain: null, pending: false };
+        },
+    };
+    /**
+     * Store a batch's fragments and register its manifest at the next version.
+     * `sign` is the writer's server key, as `remoteReplicaTestWriter().sign`.
+     */
+    async function publish(input) {
+        const statement = {
+            owner,
+            writer: input.writer,
+            batch: input.batch,
+            sequence: input.sequence ?? 1,
+            previous: input.previous ?? null,
+            collectedAt: input.collectedAt,
+        };
+        const fragments = await fragmentReplicaPayload({
+            ...statement,
+            bytes: input.bytes,
+            encrypt: port.encrypt,
+        });
+        for (const fragment of fragments)
+            await port.putFragment(fragment);
+        const manifest = await prepareReplicaManifest({
+            ...statement,
+            version: (latest.get(replicaScope(input.writer)) ?? 0) + 1,
+            digest: replicaDigest(input.bytes),
+            totalBytes: input.bytes.length,
+            fragments: fragments.map((f) => ({
+                digest: f.digest,
+                bytes: f.encrypted.length,
+            })),
+            sign: input.sign,
+            encrypt: port.encrypt,
+        });
+        return { slot: register(manifest), manifest, fragments };
+    }
+    return { port, objects, evidence, observed, publish };
+}
+//# sourceMappingURL=pdpp-replica-quarantine-fixture.js.map

package/dist/routes/pdpp-replica-quarantine-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-replica-quarantine-fixture.js","sourceRoot":"","sources":["../../src/routes/pdpp-replica-quarantine-fixture.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,GAGjB,MAAM,4CAA4C,CAAC;AAKpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,4DAA4D,CAAC;AAC7G,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAA2B,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EACL,sBAAsB,GAGvB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,GAIb,MAAM,6DAA6D,CAAC;AAIrE,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACzC,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAC9C,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AACxD,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAC/D,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,sBAAsB;IAC7B,KAAK,EAAE,sBAAsB;CAC9B,CAAC;AACF,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;AACpD,MAAM,QAAQ,GAAwB;IACpC,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,WAAW;IACxB,OAAO,EAAE,GAAG;IACZ,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACtB,OAAO,EAAE;QACP;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,cAAc,CAAC;YACzC,eAAe,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;YACvC,WAAW,EAAE,CAAC,IAAI,CAAC;YACnB,kBAAkB,EAAE,cAAc;SACnC;KACF;CACF,CAAC;AAEF,KAAK,UAAU,MAAM,CAAC,GAAS;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,KAAa,EACb,UAAU,GAAG,EAAE;IAEf,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,KAAK,EAAE;QACzC,qBAAqB,EAAE,UAAU;KAClC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,CAAC,SAAS,GAAG,KAAK,EAAE,EAAE,CACvC,MAAM,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SAC9D,YAAY,CAAC;IAClB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAG,UAAU,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,GAAG,CAAC,KAAK,CACP,UAAU,EACV,cAAc,CAAC;QACb,MAAM;QACN,KAAK;QACL,MAAM;QACN,QAAQ,EAAE,IAAI,yBAAyB,EAAE;QACzC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QACnE,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CACjC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAC7D,CAAC;YACF,OAAO,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;gBACpD,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;gBAC7B,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CACvB,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC,CACH,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO;QACL,GAAG,UAAU;QACb,UAAU;QACV,iBAAiB;QACjB,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAkD,EAClD,OAMC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,IAAI,GAA6B;QACrC,KAAK,CAAC,YAAY,CAAC,WAAmB;YACpC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YACzD,iEAAiE;YACjE,mEAAmE;YACnE,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAkC,EAAE,CAAC;QAC3E,CAAC;KACF,CAAC;IACF,MAAM,YAAY,GAAG,+BAA+B,CAAC;QACnD;YACE,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,eAAe;YAC1B,UAAU,EAAE,CAAC,IAAI,CAAC;YAClB,WAAW,EAAE,cAAc;YAC3B,gBAAgB,EAAE,cAAc;YAChC,cAAc,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;YACtC,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM;SAC3C;KACF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,GAAG,CAAC,KAAK,CACP,UAAU,EACV,iBAAiB,CAAC;QAChB,MAAM;QACN,KAAK;QACL,YAAY,EAAE,KAAK;QACnB,IAAI;QACJ,YAAY;QACZ,cAAc,EAAE,OAAO,CAAC,KAAK;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACtC,OAAO,KAAK,OAAO,CAAC,KAAK,IAAI,MAAM,KAAK,QAAQ;YAC9C,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC;YACxB,CAAC,CAAC,EAAE;KACT,CAAC,CACH,CAAC;IACF,GAAG,CAAC,KAAK,CACP,gBAAgB,EAChB,eAAe,CAAC;QACd,KAAK;QACL,IAAI;QACJ,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACtC,OAAO,KAAK,OAAO,CAAC,KAAK,IAAI,MAAM,KAAK,QAAQ;YAC9C,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC;YACxB,CAAC,CAAC,EAAE;QACR,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;KACF,CAAC,CACH,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,QAAkB,EAAE,MAAc,EAAE,KAAa;IACnE,qFAAqF;IACrF,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IACjE,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,MAAM,EACf,MAAM,EACN,GAAG,KAAK,UAAU,QAAQ,CAAC,MAAM,WAAW,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CACrG,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,KAAc,EAAE,IAAc;IACvE,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,GAAG,IAAI,EAAE;QAClD,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QAC3C,OAAO,EAAE;YACP,GAAG,CAAC,KAAK,IAAI,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;SAClE;QACD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AACD,SAAS,IAAI,CACX,MAAc,EACd,IAAY,EACZ,IAA4B,EAC5B,KAAc;IAEd,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,GAAG,IAAI,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,GAAG,CAAC,KAAK,IAAI,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;SACnD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAqB,EACrB,eAAe,GAAG,MAAM,CAAC,UAAU;IAEnC,MAAM,OAAO,GAAG,MAAM,IAAI,CACxB,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE;QACtD,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,QAAQ;QACtB,KAAK,EAAE,YAAY;QACnB,cAAc,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC9C,qBAAqB,EAAE,MAAM;QAC7B,qBAAqB,EAAE;YACrB;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACxB,YAAY,EAAE,iDAAiD;gBAC/D,WAAW,EAAE,YAAY;gBACzB,SAAS,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE;gBACvD,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,UAAU;wBAChB,SAAS,EAAE,UAAU;wBACrB,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM;wBAClC,UAAU,EAAE;4BACV,KAAK,EAAE,sBAAsB;4BAC7B,KAAK,EAAE,sBAAsB;yBAC9B;wBACD,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE;qBAClD;iBACF;aACF;SACF;KACF,CAAC,EACF,GAAG,EACH,WAAW,CACZ,CAAC;IACF,MAAM,IAAI,GAAG,cAAc,OAAO,CAAC,UAAU,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,WAAW,KAAK,EAAE,EAAE,eAAe,CAAC,EACpE,GAAG,EACH,gBAAgB,CACjB,CAAC;IACF,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC5B,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAClC,CAAC;IACF,MAAM,eAAe,GAAG,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CACtB,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,eAAe,EAAE;QAC3D,aAAa,EAAG,QAAQ,CAAC,MAAoC;aAC1D,aAAa;QAChB,gBAAgB,EAAE,eAAe;QACjC,aAAa,EAAE,OAAO;KACvB,CAAC,EACF,GAAG,EACH,cAAc,CACf,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACnE,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,WAAW,KAAK,EAAE,EAAE,eAAe,CAAC,EACpE,GAAG,EACH,iBAAiB,CAClB,CAAC;IACF,MAAM,YAAY,GAAI,QAAQ,CAAC,MAAoC;SAChE,aAAa,CAAC;IACjB,MAAM,YAAY,GAAG;QACnB,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,eAAe;QACjC,aAAa,EAAE,OAAO;KACvB,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,eAAe,EAAE,YAAY,CAAC,EAC1E,GAAG,EACH,sBAAsB,CACvB,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE;QAC5B,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,QAAQ;QACtB,aAAa,EAAE,QAAQ;KACxB,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,KAAK,GACT,MAAM,CAAC,qBACR,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;QACpC;YACE,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,CAAC,MAAM,CAAC;YACtB,MAAM;YACN,eAAe,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE;SACtD;KACF,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE;QACtC,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,MAAM,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,QAAQ,GAAG,MAAM,GAAG,CACxB,MAAM,CAAC,MAAM,EACb,GAAG,IAAI,UAAU,EACjB,eAAe,EACf,YAAY,CACb,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC;QACjE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,UAAU,EAAE,CAAC;IACnB,MAAM,cAAc,EAAE,CAAC;IACvB,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,YAAY;QACZ,UAAU;QACV,cAAc;KACf,CAAC;AACJ,CAAC;AAGD,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,QAGC,EACD,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;IAEzC,OAAO;QACL,IAAI,EAAE;YACJ,KAAK;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,KAAK;SACf;QACD,KAAK,EAAE;YACL,KAAK;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjC,cAAc;YACd,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,sBAAsB,CAChC,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,YAAY,CACtB;YACD,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAC/B,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAChC,cAAc,EAAE,KAAK;SACtB;QACD,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,QAA0B,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CACR,QAAQ,CAAC,KAAK,EACd,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAC5D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,IAAI,GAAyB;QACjC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;QACrC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK;QACvC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK;QACvC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CACnC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CACnC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YACtB,OAAO,CAAC,GAAG,CACT,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,EACpD,QAAQ,CAAC,SAAS,CACnB,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC3B,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7C,KAAK;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;aACzB,CAAC,CAAC;YACH,MAAM,EAAE,IAAI;SACb,CAAC;QACF,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;KACF,CAAC;IACF;;;OAGG;IACH,KAAK,UAAU,OAAO,CAAC,KAQtB;QAKC,MAAM,SAAS,GAAG;YAChB,KAAK;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC;YAC7C,GAAG,SAAS;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;YAC5C,GAAG,SAAS;YACZ,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1D,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;YAClC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC9B,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACxD,CAAC"}

package/dist/storage/claude-method-transition.d.ts

@@ -0,0 +1,12 @@
+import type { DataStoragePort } from "@opendatalabs/personal-server-ts-core/ports";
+import { type LegacyScopeViewPort } from "@opendatalabs/personal-server-ts-core/storage/legacy-scope-view";
+import { type createSqliteRecordStore } from "./pdpp-records-sqlite-store.js";
+type Store = ReturnType<typeof createSqliteRecordStore>;
+/** Owner-only, one-way transition. Preparation reads the old public bodies;
+ * the store archives raw rows and binds the live writer in one transaction. */
+export declare function createClaudeMethodTransition(store: Store, base: LegacyScopeViewPort, files: DataStoragePort): {
+    transition: (instance: string, expectedGeneration: number) => Promise<import("./pdpp-records-sqlite-store.js").PdppInstanceBinding>;
+    view: LegacyScopeViewPort;
+};
+export {};
+//# sourceMappingURL=claude-method-transition.d.ts.map

package/dist/storage/claude-method-transition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-method-transition.d.ts","sourceRoot":"","sources":["../../src/storage/claude-method-transition.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAEL,KAAK,uBAAuB,EAE7B,MAAM,gCAAgC,CAAC;AAGxC,KAAK,KAAK,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExD;+EAC+E;AAC/E,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,eAAe;2BAEc,MAAM,sBAAsB,MAAM;;EA+IvE"}

package/dist/storage/claude-method-transition.js

@@ -0,0 +1,139 @@
+import { createHash } from "node:crypto";
+import { coversClaudeTransition, } from "@opendatalabs/personal-server-ts-core/storage/legacy-scope-view";
+import { PdppBindingError, } from "./pdpp-records-sqlite-store.js";
+const scopes = ["claude.conversations", "claude.projects"];
+/** Owner-only, one-way transition. Preparation reads the old public bodies;
+ * the store archives raw rows and binds the live writer in one transaction. */
+export function createClaudeMethodTransition(store, base, files) {
+    async function transition(instance, expectedGeneration) {
+        const existing = store.claudeTransition(instance);
+        if (existing)
+            return store.transitionClaudeToLive({
+                instance,
+                expectedGeneration,
+                expectedWriteClock: 0,
+                snapshots: {},
+            });
+        const clock = store.transitionWriteClock();
+        const heads = scopes.map((scope) => JSON.stringify(files.findEntry({ scope })));
+        const snapshots = {};
+        for (const scope of scopes) {
+            const read = await base.readLatest(scope);
+            if (read.kind === "canonical")
+                snapshots[scope] = read.envelope;
+            else if (read.kind === "file") {
+                const head = files.findEntry({ scope });
+                if (head)
+                    snapshots[scope] = await files.readEnvelope(scope, head.collectedAt);
+            }
+            else {
+                // An empty failed export is safe to transition. Partial records are
+                // retained but cannot be silently passed off as a complete baseline.
+                if (!store.getInstanceBinding(instance).empty)
+                    throw new PdppBindingError("claude_previous_data_not_readable");
+            }
+        }
+        return store.readSnapshot(() => {
+            // Legacy file sync has its own index clock. Revalidate it under the same
+            // SQLite transaction as the binding/record archive, not just the PDPP clock.
+            if (scopes.some((scope, index) => JSON.stringify(files.findEntry({ scope })) !== heads[index])) {
+                throw new PdppBindingError("binding_generation_mismatch");
+            }
+            return store.transitionClaudeToLive({
+                instance,
+                expectedGeneration,
+                expectedWriteClock: clock,
+                snapshots,
+            });
+        });
+    }
+    function snapshot(scope) {
+        if (!scopes.includes(scope) ||
+            base.isReset(scope))
+            return null;
+        const transitions = store.listClaudeTransitions();
+        if (transitions.length !== 1)
+            return null;
+        const saved = transitions[0];
+        const binding = store.getInstanceBinding(saved.instance);
+        if (binding.deletedAt !== null ||
+            binding.method !== "anthropic-live" ||
+            binding.generation !== saved.generation ||
+            store.listConnections("https://registry.pdpp.dev/sources/claude")
+                .length !== 1)
+            return null;
+        const envelope = saved.snapshots[scope];
+        return envelope
+            ? {
+                envelope,
+                instance: saved.instance,
+                generation: saved.generation,
+                covered: scope === "claude.conversations" && saved.conversationsCovered,
+                revision: `claude-transition:${saved.generation}:${createHash("sha256").update(JSON.stringify(envelope)).digest("hex")}`,
+            }
+            : null;
+    }
+    const view = {
+        ...base,
+        async readLatest(scope) {
+            const before = snapshot(scope);
+            const current = await base.readLatest(scope);
+            if (!before)
+                return current;
+            const covered = current.kind === "canonical" &&
+                (await coversClaudeTransition(current, before.envelope));
+            // A reset/deletion or replacement during the asynchronous read invalidates
+            // this result, including its archived baseline.
+            const after = snapshot(scope);
+            if (after?.revision !== before.revision)
+                return base.readLatest(scope);
+            if (after.covered !== before.covered)
+                return view.readLatest(scope);
+            if (covered) {
+                store.confirmClaudeTransition(before.instance, before.generation);
+                return current;
+            }
+            if (before.covered)
+                return {
+                    kind: "refused",
+                    refusal: {
+                        status: "unavailable",
+                        reason: "store_inconsistent_read",
+                        detail: "Live Claude no longer covers the preserved export",
+                    },
+                };
+            return {
+                kind: "canonical",
+                envelope: before.envelope,
+                revision: before.revision,
+            };
+        },
+        listingFor(scope) {
+            const previous = snapshot(scope);
+            return previous && !previous.covered
+                ? { kind: "canonical", collectedAt: previous.envelope.collectedAt }
+                : base.listingFor(scope);
+        },
+        listCanonicalScopes(prefix) {
+            const listed = new Map(base.listCanonicalScopes(prefix).map((item) => [item.scope, item]));
+            for (const scope of scopes) {
+                const previous = snapshot(scope);
+                if (previous &&
+                    !previous.covered &&
+                    (!prefix || scope.startsWith(prefix)))
+                    listed.set(scope, {
+                        scope,
+                        collectedAt: previous.envelope.collectedAt,
+                    });
+            }
+            return [...listed.values()];
+        },
+        resetTakeover(scope) {
+            base.resetTakeover(scope);
+            store.clearClaudeTransitionScope(scope);
+        },
+        ownsScope: (scope) => snapshot(scope) !== null || base.ownsScope(scope),
+    };
+    return { transition, view };
+}
+//# sourceMappingURL=claude-method-transition.js.map

package/dist/storage/claude-method-transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-method-transition.js","sourceRoot":"","sources":["../../src/storage/claude-method-transition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,sBAAsB,GAGvB,MAAM,iEAAiE,CAAC;AACzE,OAAO,EACL,gBAAgB,GAGjB,MAAM,gCAAgC,CAAC;AAExC,MAAM,MAAM,GAAG,CAAC,sBAAsB,EAAE,iBAAiB,CAAU,CAAC;AAGpE;+EAC+E;AAC/E,MAAM,UAAU,4BAA4B,CAC1C,KAAY,EACZ,IAAyB,EACzB,KAAsB;IAEtB,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,kBAA0B;QACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ;YACV,OAAO,KAAK,CAAC,sBAAsB,CAAC;gBAClC,QAAQ;gBACR,kBAAkB;gBAClB,kBAAkB,EAAE,CAAC;gBACrB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,MAAM,KAAK,GAAG,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAC3C,CAAC;QACF,MAAM,SAAS,GAAkC,EAAE,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;iBAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxC,IAAI,IAAI;oBACN,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,oEAAoE;gBACpE,qEAAqE;gBACrE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK;oBAC3C,MAAM,IAAI,gBAAgB,CAAC,mCAAmC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE;YAC7B,yEAAyE;YACzE,6EAA6E;YAC7E,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAC9D,EACD,CAAC;gBACD,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,KAAK,CAAC,sBAAsB,CAAC;gBAClC,QAAQ;gBACR,kBAAkB;gBAClB,kBAAkB,EAAE,KAAK;gBACzB,SAAS;aACV,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,QAAQ,CAAC,KAAa;QAC7B,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAgC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAEnB,OAAO,IAAI,CAAC;QACd,MAAM,WAAW,GAAG,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAClD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzD,IACE,OAAO,CAAC,SAAS,KAAK,IAAI;YAC1B,OAAO,CAAC,MAAM,KAAK,gBAAgB;YACnC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YACvC,KAAK,CAAC,eAAe,CAAC,0CAA0C,CAAC;iBAC9D,MAAM,KAAK,CAAC;YAEf,OAAO,IAAI,CAAC;QACd,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAgC,CAAC,CAAC;QACnE,OAAO,QAAQ;YACb,CAAC,CAAC;gBACE,QAAQ;gBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EACL,KAAK,KAAK,sBAAsB,IAAI,KAAK,CAAC,oBAAoB;gBAChE,QAAQ,EAAE,qBAAqB,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACzH;YACH,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAwB;QAChC,GAAG,IAAI;QACP,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC;YAC5B,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,KAAK,WAAW;gBAC5B,CAAC,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,2EAA2E;YAC3E,gDAAgD;YAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,KAAK,EAAE,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBAClE,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,IAAI,MAAM,CAAC,OAAO;gBAChB,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,aAAa;wBACrB,MAAM,EAAE,yBAAyB;wBACjC,MAAM,EAAE,mDAAmD;qBAC5D;iBACF,CAAC;YACJ,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,KAAK;YACd,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAClC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACnE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,mBAAmB,CAAC,MAAM;YACxB,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CACnE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACjC,IACE,QAAQ;oBACR,CAAC,QAAQ,CAAC,OAAO;oBACjB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBAErC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;wBAChB,KAAK;wBACL,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW;qBAC3C,CAAC,CAAC;YACP,CAAC;YACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,aAAa,CAAC,KAAK;YACjB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KACxE,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC"}

package/dist/storage/import-operations.d.ts

@@ -2,9 +2,25 @@ import type Database from "better-sqlite3";
 import type { VersionCommit, VersionCommitResult } from "@opendatalabs/personal-server-ts-core/ports";
 import type { IndexManager } from "@opendatalabs/personal-server-ts-core/storage/index";
 import { type HierarchyManagerOptions } from "@opendatalabs/personal-server-ts-core/storage/hierarchy";
+import type { VersionFence } from "@opendatalabs/personal-server-ts-core/ports";
 export declare function createImportOperations(db: Database.Database, index: IndexManager, options: HierarchyManagerOptions): {
     commitVersion: (command: VersionCommit) => Promise<VersionCommitResult>;
     deleteScope(scope: string): number;
+    /**
+     * Erases one version only while its row is still the one the caller
+     * decided on (same local id and path). The check, the retirement of that
+     * row's import operation and the erase run in one immediate transaction,
+     * the same kind every owner import commits in, so a replacement row cannot
+     * land between them. A row erased or replaced since is left alone.
+     */
+    deleteFencedVersion(scope: string, collectedAt: string, fence: VersionFence): boolean;
+    /**
+     * Like `deleteFencedVersion`, and only while the envelope file is absent.
+     * The file check runs in the same immediate transaction that a replica
+     * write publishes in, so a restored file cannot be erased. Only ENOENT is
+     * absence; any other fault throws and the row stays.
+     */
+    deleteFencedVersionIfMissing(scope: string, collectedAt: string, fence: VersionFence): boolean;
     deleteVersion(scope: string, collectedAt: string, indexedPath?: string): boolean;
     dropUnsyncedEntry(path: string): boolean;
 };

package/dist/storage/import-operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"import-operations.d.ts","sourceRoot":"","sources":["../../src/storage/import-operations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAGV,aAAa,EACb,mBAAmB,EACpB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACxF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,yDAAyD,CAAC;AA+BjE,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,uBAAuB;6BA6IrB,aAAa,KACrB,OAAO,CAAC,mBAAmB,CAAC;uBAiIV,MAAM,GAAG,MAAM;yBAwBzB,MAAM,eACA,MAAM,gBACL,MAAM,GACnB,OAAO;4BAqBc,MAAM,GAAG,OAAO;EAS3C"}
+{"version":3,"file":"import-operations.d.ts","sourceRoot":"","sources":["../../src/storage/import-operations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAGV,aAAa,EACb,mBAAmB,EACpB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACxF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,yDAAyD,CAAC;AAajE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAmBhF,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,uBAAuB;6BA6IrB,aAAa,KACrB,OAAO,CAAC,mBAAmB,CAAC;uBAiIV,MAAM,GAAG,MAAM;IAuBlC;;;;;;OAMG;+BAEM,MAAM,eACA,MAAM,SACZ,YAAY,GAClB,OAAO;IAkBV;;;;;OAKG;wCAEM,MAAM,eACA,MAAM,SACZ,YAAY,GAClB,OAAO;yBAyBD,MAAM,eACA,MAAM,gBACL,MAAM,GACnB,OAAO;4BAqBc,MAAM,GAAG,OAAO;EAS3C"}