npm - @parity/product-sdk-terminal - Versions diffs - 0.5.3 → 0.6.0 - Mend

@parity/product-sdk-terminal 0.5.3 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

package/dist/chunk-MQGGUAWC.js +1422 -0
package/dist/chunk-MQGGUAWC.js.map +1 -0
package/dist/host-C1yt3kMf.d.ts +192 -0
package/dist/host.d.ts +4 -113
package/dist/host.js +9 -1408
package/dist/host.js.map +1 -1
package/dist/index.d.ts +38 -8
package/dist/index.js +48 -5
package/dist/index.js.map +1 -1
package/package.json +4 -3
package/dist/adapter-Dt3ryKnw.d.ts +0 -72

package/dist/host.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/host.ts","../src/host-cache.ts","../src/host-signer.ts"],"sourcesContent":["// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/*\n Host-runner facet of `@parity/product-sdk-terminal`. A CLI using this\n * package plays the Host role per RFC-10; this module implements the\n * three §Stakeholders Host responsibilities (AP client, cache, signer)\n * over `@novasamatech/host-papp@0.7.7`'s `UserSession`.\n \n @module\n /\nimport type { UserSession } from \"@novasamatech/host-papp\";\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport type { ResultAsync } from \"neverthrow\";\nimport type { PolkadotSigner } from \"polkadot-api\";\n\nimport type { TerminalAdapter } from \"./adapter.js\";\nimport {\n type CachedAllocation,\n loadCache,\n mergeOutcomes,\n pickOnExistingPolicy,\n readCacheEntry,\n saveCache,\n withCacheLock,\n} from \"./host-cache.js\";\nimport { buildSignerFromEntry, createSlotAccountSigner } from \"./host-signer.js\";\n\n// `terminal` namespace matches adapter.ts / node-storage.ts.\nconst log = createLogger(\"terminal\");\n\n// Public re-exports — internal helpers (loadCache, mergeOutcomes, etc.)\n// stay private. CachedAllocation must be exported because it's the return\n// type of getCachedAllocation.\nexport type { CachedAllocation };\nexport { createSlotAccountSigner };\n\n// Types derived from `UserSession['requestResourceAllocation']` so upstream\n// codec changes surface as compile errors here, not runtime decode failures.\n// host-papp doesn't re-export these codec types from its root.\ntype ResourceAllocationRequest = Parameters<UserSession[\"requestResourceAllocation\"]>[0];\n\n/\n One resource a Host can request from the Account Holder. AutoSigning\n * currently returns `NotAvailable` on both Android and iOS wallets.\n /\nexport type AllocatableResource = ResourceAllocationRequest[\"resources\"][number];\n\n/\n `\"Ignore\"`: return existing keys if any, else allocate one slot.\n * `\"Increase\"`: add one slot to an existing allowance account.\n /\nexport type OnExistingAllowancePolicy = ResourceAllocationRequest[\"onExisting\"];\n\ntype ExtractOk<R> = R extends ResultAsync<infer T, unknown> ? T : never;\n\n/\n Per-resource outcome. `Allocated.value` carries the materialized payload\n * (slot account key for Bulletin/SSS; subtree key + secret for AutoSigning;\n * undefined for SC). Each entry is independent — no rollback on partial\n * success.\n /\nexport type ApAllocationOutcome = ExtractOk<\n ReturnType<UserSession[\"requestResourceAllocation\"]>\n>[number];\n\nexport interface RequestResourceAllocationOptions {\n /\n Override the auto-picked `onExisting`. Default: `Ignore` unless every\n * requested resource is a cached slot-table variant, then `Increase`.\n /\n onExisting?: OnExistingAllowancePolicy;\n}\n\n/\n Send the AP `request_resource_allocation` message over the paired\n * session; block on the user's mobile dialog; return outcomes in request\n * order. Granted key material is cached on disk so subsequent calls skip\n * the wallet prompt.\n \n @throws If the session call fails (transport, timeout, AH protocol error).\n \n @example\n * ```ts\n * const [session] = adapter.sessions.sessions.read();\n * const outcomes = await requestResourceAllocation(session, adapter, [\n * { tag: \"BulletInAllowance\", value: undefined },\n * ]);\n * ```\n /\nexport async function requestResourceAllocation(\n session: UserSession,\n adapter: TerminalAdapter,\n resources: AllocatableResource[],\n options: RequestResourceAllocationOptions = {},\n): Promise<ApAllocationOutcome[]> {\n return withCacheLock(adapter.appId, adapter.storageDir, async () => {\n const cache = await loadCache(adapter.appId, adapter.storageDir);\n const onExisting = options.onExisting ?? pickOnExistingPolicy(cache, resources);\n log.debug(\"requestResourceAllocation\", {\n productId: adapter.appId,\n resources: resources.map((r) => r.tag),\n onExisting,\n autoPolicy: options.onExisting === undefined,\n });\n\n const result = await session.requestResourceAllocation({\n callingProductId: adapter.appId,\n resources,\n onExisting,\n });\n\n if (result.isErr()) {\n throw new Error(`requestResourceAllocation failed: ${result.error.message}`);\n }\n\n const next = mergeOutcomes(cache, resources, result.value);\n if (next !== cache) {\n await saveCache(adapter.appId, next, adapter.storageDir);\n }\n\n return result.value;\n });\n}\n\n/\n Read a cached allowance entry without going over the wire. Returns\n * `null` if nothing's cached for `(adapter.appId, resource)`. For\n * `SmartContractAllowance`, the same `dest` must be passed — entries\n * are keyed per-dest.\n /\nexport async function getCachedAllocation(\n adapter: TerminalAdapter,\n resource: AllocatableResource,\n): Promise<CachedAllocation \| null> {\n const cache = await loadCache(adapter.appId, adapter.storageDir);\n return readCacheEntry(cache, resource);\n}\n\n/\n Cache hit → return signer. Cache miss → call\n * {@link requestResourceAllocation} for `[resource]`, then build the signer.\n * Throws on `Rejected` / `NotAvailable`.\n \n @example\n * ```ts\n * const signer = await ensureSlotAccountSigner(session, adapter, {\n * tag: \"BulletInAllowance\", value: undefined,\n * });\n * await someBulletinTx.submitAndWatch(signer);\n * ```\n /\nexport async function ensureSlotAccountSigner(\n session: UserSession,\n adapter: TerminalAdapter,\n resource: AllocatableResource,\n): Promise<PolkadotSigner> {\n // The cache-hit check and the allocation path must share the same\n // critical section: otherwise two concurrent calls for the same\n // resource both see an empty cache, then both serialize through the\n // lock but each issues its own wallet prompt and burns a slot.\n return withCacheLock(adapter.appId, adapter.storageDir, async () => {\n // Single loadCache for the whole critical section — we hold the\n // lock, so no other writer can change disk under us. The fast\n // cache-hit path and the slow allocate-then-build path both\n // reuse this in-memory `cache` reference.\n const cache = await loadCache(adapter.appId, adapter.storageDir);\n const hit = readCacheEntry(cache, resource);\n if (hit) return buildSignerFromEntry(hit);\n\n log.debug(\"ensureSlotAccountSigner: cache miss, allocating\", { resource: resource.tag });\n\n // Inline the wire → merge → save sequence rather than calling the\n // public `requestResourceAllocation` wrapper. `withCacheLock` is\n // non-reentrant, so calling the wrapper from inside would deadlock\n // on the second lock acquisition.\n const onExisting = pickOnExistingPolicy(cache, [resource]);\n const result = await session.requestResourceAllocation({\n callingProductId: adapter.appId,\n resources: [resource],\n onExisting,\n });\n if (result.isErr()) {\n throw new Error(`requestResourceAllocation failed: ${result.error.message}`);\n }\n const outcomes = result.value;\n const next = mergeOutcomes(cache, [resource], outcomes);\n if (next !== cache) {\n await saveCache(adapter.appId, next, adapter.storageDir);\n }\n\n const outcome = outcomes[0];\n if (!outcome) {\n // Unreachable: mergeOutcomes throws on length mismatch first.\n // Kept as a typed-non-null guard.\n throw new Error(\n `ensureSlotAccountSigner: protocol violation — empty outcomes for ${resource.tag}`,\n );\n }\n if (outcome.tag !== \"Allocated\") {\n throw new Error(\n `ensureSlotAccountSigner: allocation ${outcome.tag} for ${resource.tag}`,\n );\n }\n\n // Build the signer from the in-memory post-merge cache — no third\n // disk read.\n const freshEntry = readCacheEntry(next, resource);\n if (!freshEntry) {\n // Unreachable: the entry was just merged in.\n // Kept as a typed-non-null guard against mergeOutcomes regressions.\n throw new Error(\n `ensureSlotAccountSigner: allocation succeeded but cache lookup returned null for ${resource.tag}`,\n );\n }\n return buildSignerFromEntry(freshEntry);\n });\n}\n\nif (import.meta.vitest) {\n const { describe, test, expect, vi, beforeEach } = import.meta.vitest;\n const { ok, err } = await import(\"neverthrow\");\n const { mkdtempSync, rmSync } = await import(\"node:fs\");\n const { tmpdir } = await import(\"node:os\");\n const { join: pathJoin } = await import(\"node:path\");\n // Needed by the ensureSlotAccountSigner suite. Lifted up here because\n // top-level await is only allowed at module top-level (or inside this\n // top-level vitest block), not inside `describe`.\n const { mnemonicToMiniSecret, DEV_PHRASE } = await import(\"@polkadot-labs/hdkd-helpers\");\n const { toHex } = await import(\"@polkadot-api/utils\");\n\n let testStorageDir: string;\n beforeEach(() => {\n // Per-test temp dir so cache writes don't leak between tests or\n // touch the real default storage directory. The wrapper inherits\n // `storageDir` from `adapter.storageDir`; we pin it here.\n testStorageDir = mkdtempSync(pathJoin(tmpdir(), \"host-test-\"));\n return () => rmSync(testStorageDir, { recursive: true, force: true });\n });\n\n function fakeAdapter(appId: string): TerminalAdapter {\n // appId + storageDir are the only fields the wrapper touches.\n return { appId, storageDir: testStorageDir } as unknown as TerminalAdapter;\n }\n\n type RequestCapture = ResourceAllocationRequest;\n type StubReturn = Awaited<ReturnType<UserSession[\"requestResourceAllocation\"]>>;\n\n function makeSession(opts: {\n requestResourceAllocation?: (req: RequestCapture) => Promise<StubReturn>;\n }): UserSession {\n return {\n requestResourceAllocation: vi.fn(\n opts.requestResourceAllocation ??\n (async () => {\n throw new Error(\"requestResourceAllocation not stubbed in this test\");\n }),\n ),\n } as unknown as UserSession;\n }\n\n describe(\"requestResourceAllocation\", () => {\n test(\"forwards resources verbatim and returns outcomes in order\", async () => {\n const captured: RequestCapture[] = [];\n const stubbed = [\n {\n tag: \"Allocated\" as const,\n value: {\n tag: \"BulletInAllowance\" as const,\n value: { slotAccountKey: new Uint8Array([1, 2, 3]) },\n },\n },\n { tag: \"Rejected\" as const, value: undefined },\n ];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok(stubbed) as StubReturn;\n },\n });\n\n const outcomes = await requestResourceAllocation(session, fakeAdapter(\"my-app\"), [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ]);\n\n expect(captured).toHaveLength(1);\n expect(captured[0].callingProductId).toBe(\"my-app\");\n expect(captured[0].resources.map((r) => r.tag)).toEqual([\n \"BulletInAllowance\",\n \"StatementStoreAllowance\",\n ]);\n expect(outcomes).toEqual(stubbed);\n });\n\n test(\"uses adapter.appId as callingProductId\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok([]) as StubReturn;\n },\n });\n\n await requestResourceAllocation(session, fakeAdapter(\"alt-product.dot\"), []);\n\n expect(captured[0].callingProductId).toBe(\"alt-product.dot\");\n });\n\n test(\"auto-picks Ignore for an empty resources array\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok([]) as StubReturn;\n },\n });\n\n await requestResourceAllocation(session, fakeAdapter(\"p\"), []);\n\n expect(captured[0].onExisting).toBe(\"Ignore\");\n });\n\n test(\"forwards onExisting when explicitly set to 'Increase'\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok([{ tag: \"Rejected\" as const, value: undefined }]) as StubReturn;\n },\n });\n\n await requestResourceAllocation(\n session,\n fakeAdapter(\"p\"),\n [{ tag: \"BulletInAllowance\", value: undefined }],\n { onExisting: \"Increase\" },\n );\n\n expect(captured[0].onExisting).toBe(\"Increase\");\n });\n\n test(\"forwards SmartContractAllowance derivation index\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok([{ tag: \"Rejected\" as const, value: undefined }]) as StubReturn;\n },\n });\n\n await requestResourceAllocation(session, fakeAdapter(\"p\"), [\n { tag: \"SmartContractAllowance\", value: 7 },\n ]);\n\n const sent = captured[0].resources[0];\n expect(sent.tag).toBe(\"SmartContractAllowance\");\n if (sent.tag === \"SmartContractAllowance\") {\n expect(sent.value).toBe(7);\n }\n });\n\n test(\"throws a clear error when the session call fails\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () =>\n err(new Error(\"mobile disconnected\")) as StubReturn,\n });\n\n await expect(\n requestResourceAllocation(session, fakeAdapter(\"p\"), [\n { tag: \"BulletInAllowance\", value: undefined },\n ]),\n ).rejects.toThrow(\"requestResourceAllocation failed: mobile disconnected\");\n });\n\n test(\"forwards AutoSigning and returns NotAvailable verbatim (mobile-default path)\", async () => {\n // Both Android (paritytech/polkadot-app-android-v2#563) and iOS\n // (paritytech/polkadot-app-ios-v2#759) currently return NotAvailable\n // for any AutoSigning request. The wrapper must round-trip both\n // the request variant and the NotAvailable outcome without\n // filtering, transforming, or throwing — that's the only state\n // real users see for one of the four AllocatableResource variants\n // today.\n const captured: RequestCapture[] = [];\n const stubbed = [{ tag: \"NotAvailable\" as const, value: undefined }];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok(stubbed) as StubReturn;\n },\n });\n\n const outcomes = await requestResourceAllocation(session, fakeAdapter(\"p\"), [\n { tag: \"AutoSigning\", value: undefined },\n ]);\n\n const sent = captured[0].resources[0];\n expect(sent.tag).toBe(\"AutoSigning\");\n expect(outcomes).toEqual(stubbed);\n });\n\n test(\"passes empty resources through (no-op request still hits the wire)\", async () => {\n // Wrappers shouldn't second-guess the caller: an empty resource\n // list is a legitimate (if degenerate) request and the wire\n // accepts it. The Account Holder may use it as a probe.\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok([]) as StubReturn;\n },\n });\n\n const outcomes = await requestResourceAllocation(session, fakeAdapter(\"p\"), []);\n\n expect(captured).toHaveLength(1);\n expect(captured[0].resources).toEqual([]);\n expect(outcomes).toEqual([]);\n });\n });\n\n describe(\"requestResourceAllocation — cache integration\", () => {\n function bulletinAllocated(slotKey: Uint8Array): StubReturn {\n return ok([\n {\n tag: \"Allocated\" as const,\n value: {\n tag: \"BulletInAllowance\" as const,\n value: { slotAccountKey: slotKey },\n },\n },\n ]) as StubReturn;\n }\n\n test(\"first call sends Ignore when cache is empty\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return bulletinAllocated(new Uint8Array([1, 2, 3]));\n },\n });\n\n await requestResourceAllocation(session, fakeAdapter(\"p\"), [\n { tag: \"BulletInAllowance\", value: undefined },\n ]);\n\n expect(captured[0].onExisting).toBe(\"Ignore\");\n });\n\n test(\"second call for same slot-table resource auto-picks Increase\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return bulletinAllocated(new Uint8Array([1, 2, 3]));\n },\n });\n\n const adapter = fakeAdapter(\"p\");\n const req: AllocatableResource[] = [{ tag: \"BulletInAllowance\", value: undefined }];\n\n await requestResourceAllocation(session, adapter, req);\n await requestResourceAllocation(session, adapter, req);\n\n expect(captured.map((c) => c.onExisting)).toEqual([\"Ignore\", \"Increase\"]);\n });\n\n test(\"explicit options.onExisting overrides the auto-pick\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return bulletinAllocated(new Uint8Array([1, 2, 3]));\n },\n });\n\n const adapter = fakeAdapter(\"p\");\n const req: AllocatableResource[] = [{ tag: \"BulletInAllowance\", value: undefined }];\n\n // Even after a cache-populating first call, passing Ignore\n // explicitly forces Ignore — useful for callers that want\n // idempotent \"ensure I have allowance\" semantics rather than\n // the additive-scaling default.\n await requestResourceAllocation(session, adapter, req);\n await requestResourceAllocation(session, adapter, req, { onExisting: \"Ignore\" });\n\n expect(captured.map((c) => c.onExisting)).toEqual([\"Ignore\", \"Ignore\"]);\n });\n\n test(\"populates cache on Allocated and survives across separate calls\", async () => {\n const slotKey = new Uint8Array([0xde, 0xad, 0xbe, 0xef]);\n const session = makeSession({\n requestResourceAllocation: async () => bulletinAllocated(slotKey),\n });\n\n const adapter = fakeAdapter(\"p\");\n await requestResourceAllocation(session, adapter, [\n { tag: \"BulletInAllowance\", value: undefined },\n ]);\n\n // Second call reads cache via the public lookup, no wire.\n const cached = await getCachedAllocation(adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(cached).toEqual({\n tag: \"BulletInAllowance\",\n slotAccountKey: \"0xdeadbeef\",\n });\n });\n\n test(\"does not cache Rejected or NotAvailable outcomes\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () =>\n ok([\n { tag: \"Rejected\" as const, value: undefined },\n { tag: \"NotAvailable\" as const, value: undefined },\n ]) as StubReturn,\n });\n\n const adapter = fakeAdapter(\"p\");\n await requestResourceAllocation(session, adapter, [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ]);\n\n expect(\n await getCachedAllocation(adapter, { tag: \"BulletInAllowance\", value: undefined }),\n ).toBeNull();\n expect(\n await getCachedAllocation(adapter, {\n tag: \"StatementStoreAllowance\",\n value: undefined,\n }),\n ).toBeNull();\n });\n\n test(\"mixed cached + uncached request stays on Ignore (conservative)\", async () => {\n // Bulletin cached, SSS not. Auto-pick must NOT send Increase\n // — the wire takes one policy for the whole request, and\n // Increase against an uncached resource is at-best a no-op\n // and at-worst a mis-allocation.\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n // Length-match the request: 1 or 2 outcomes as needed.\n return ok(\n req.resources.map((_r, i) =>\n i === 0\n ? {\n tag: \"Allocated\" as const,\n value: {\n tag: \"BulletInAllowance\" as const,\n value: { slotAccountKey: new Uint8Array([1]) },\n },\n }\n : { tag: \"Rejected\" as const, value: undefined },\n ),\n ) as StubReturn;\n },\n });\n\n const adapter = fakeAdapter(\"p\");\n // Populate Bulletin in cache.\n await requestResourceAllocation(session, adapter, [\n { tag: \"BulletInAllowance\", value: undefined },\n ]);\n\n // Now request both Bulletin (cached) and SSS (uncached).\n await requestResourceAllocation(session, adapter, [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ]);\n\n expect(captured[captured.length - 1].onExisting).toBe(\"Ignore\");\n });\n\n test(\"AutoSigning never auto-Increases even when cached\", async () => {\n // AutoSigning isn't slot-additive; auto-pick must stay on Ignore.\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return ok([\n {\n tag: \"Allocated\" as const,\n value: {\n tag: \"AutoSigning\" as const,\n value: {\n productDerivationSecret: \"secret\",\n productRootPrivateKey: new Uint8Array([0xab]),\n },\n },\n },\n ]) as StubReturn;\n },\n });\n\n const adapter = fakeAdapter(\"p\");\n const req: AllocatableResource[] = [{ tag: \"AutoSigning\", value: undefined }];\n\n await requestResourceAllocation(session, adapter, req);\n await requestResourceAllocation(session, adapter, req);\n\n expect(captured.map((c) => c.onExisting)).toEqual([\"Ignore\", \"Ignore\"]);\n });\n\n test(\"parallel calls for different resources both persist their keys (no last-writer-wins)\", async () => {\n // Regression test for the load → wire → save race: without\n // serialization, both calls snapshot an empty cache, do their\n // wire round-trip, then save — the second save clobbers the\n // first. Both keys must end up in the cache.\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n // Force interleaving: each call yields before responding.\n await new Promise((r) => setTimeout(r, 5));\n const tag = req.resources[0]?.tag;\n return ok([\n {\n tag: \"Allocated\" as const,\n value:\n tag === \"BulletInAllowance\"\n ? {\n tag: \"BulletInAllowance\" as const,\n value: { slotAccountKey: new Uint8Array([0xaa]) },\n }\n : {\n tag: \"StatementStoreAllowance\" as const,\n value: { slotAccountKey: new Uint8Array([0xbb]) },\n },\n },\n ]) as StubReturn;\n },\n });\n const adapter = fakeAdapter(\"p\");\n\n await Promise.all([\n requestResourceAllocation(session, adapter, [\n { tag: \"BulletInAllowance\", value: undefined },\n ]),\n requestResourceAllocation(session, adapter, [\n { tag: \"StatementStoreAllowance\", value: undefined },\n ]),\n ]);\n\n expect(\n await getCachedAllocation(adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ).not.toBeNull();\n expect(\n await getCachedAllocation(adapter, {\n tag: \"StatementStoreAllowance\",\n value: undefined,\n }),\n ).not.toBeNull();\n });\n\n test(\"two appIds maintain independent caches in the same storageDir\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () => bulletinAllocated(new Uint8Array([1, 2, 3])),\n });\n\n const adapterA = fakeAdapter(\"app-a\");\n const adapterB = fakeAdapter(\"app-b\");\n\n await requestResourceAllocation(session, adapterA, [\n { tag: \"BulletInAllowance\", value: undefined },\n ]);\n\n // app-b's cache is empty even though app-a's is populated.\n expect(\n await getCachedAllocation(adapterB, {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ).toBeNull();\n expect(\n await getCachedAllocation(adapterA, {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ).not.toBeNull();\n });\n });\n\n describe(\"getCachedAllocation\", () => {\n test(\"returns null when nothing is cached\", async () => {\n const adapter = fakeAdapter(\"p\");\n const cached = await getCachedAllocation(adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(cached).toBeNull();\n });\n\n test(\"disambiguates SmartContractAllowance entries by dest\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () =>\n ok([\n {\n tag: \"Allocated\" as const,\n value: {\n tag: \"SmartContractAllowance\" as const,\n value: undefined,\n },\n },\n ]) as StubReturn,\n });\n const adapter = fakeAdapter(\"p\");\n await requestResourceAllocation(session, adapter, [\n { tag: \"SmartContractAllowance\", value: 5 },\n ]);\n\n expect(\n await getCachedAllocation(adapter, { tag: \"SmartContractAllowance\", value: 5 }),\n ).toEqual({ tag: \"SmartContractAllowance\", dest: 5 });\n // Different dest doesn't match.\n expect(\n await getCachedAllocation(adapter, { tag: \"SmartContractAllowance\", value: 6 }),\n ).toBeNull();\n });\n });\n\n describe(\"ensureSlotAccountSigner\", () => {\n // Deterministic mini-secret so the signer is constructable.\n const slotKey = mnemonicToMiniSecret(DEV_PHRASE);\n\n function bulletinAllocatedResponse() {\n return ok([\n {\n tag: \"Allocated\" as const,\n value: {\n tag: \"BulletInAllowance\" as const,\n value: { slotAccountKey: slotKey },\n },\n },\n ]) as StubReturn;\n }\n\n test(\"cache hit returns a signer without invoking the AP wire\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return bulletinAllocatedResponse();\n },\n });\n const adapter = fakeAdapter(\"p\");\n\n // Populate cache.\n await requestResourceAllocation(session, adapter, [\n { tag: \"BulletInAllowance\", value: undefined },\n ]);\n expect(captured).toHaveLength(1);\n\n // ensureSlotAccountSigner should find the cached key and NOT\n // call the wire again.\n const signer = await ensureSlotAccountSigner(session, adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(signer.publicKey).toBeInstanceOf(Uint8Array);\n expect(captured).toHaveLength(1); // still 1 — no extra round-trip\n });\n\n test(\"cache miss triggers allocation and returns a fresh signer\", async () => {\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n return bulletinAllocatedResponse();\n },\n });\n const adapter = fakeAdapter(\"p\");\n\n // No prior call. ensureSlotAccountSigner should round-trip.\n const signer = await ensureSlotAccountSigner(session, adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(signer.publicKey).toBeInstanceOf(Uint8Array);\n expect(captured).toHaveLength(1);\n // Implicit allocation requests exactly one resource.\n expect(captured[0].resources.map((r) => r.tag)).toEqual([\"BulletInAllowance\"]);\n });\n\n test(\"Rejected outcome surfaces as a throw — no signer to return\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () =>\n ok([{ tag: \"Rejected\" as const, value: undefined }]) as StubReturn,\n });\n\n await expect(\n ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ).rejects.toThrow(/allocation Rejected for BulletInAllowance/);\n });\n\n test(\"empty outcomes array from the wire surfaces as a length-mismatch throw\", async () => {\n // mergeOutcomes enforces the length contract and throws before\n // the downstream `outcomes[0]` defensive guard is reached.\n const session = makeSession({\n requestResourceAllocation: async () => ok([]) as StubReturn,\n });\n\n await expect(\n ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ).rejects.toThrow(/length mismatch — requested 1, got 0/);\n });\n\n test(\"NotAvailable outcome surfaces as a throw\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () =>\n ok([{ tag: \"NotAvailable\" as const, value: undefined }]) as StubReturn,\n });\n\n await expect(\n ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n tag: \"StatementStoreAllowance\",\n value: undefined,\n }),\n ).rejects.toThrow(/allocation NotAvailable for StatementStoreAllowance/);\n });\n\n test(\"transport error propagates from the underlying allocation call\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () =>\n err(new Error(\"mobile timed out\")) as StubReturn,\n });\n\n await expect(\n ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ).rejects.toThrow(/mobile timed out/);\n });\n\n test(\"populates the cache so a later call is a hit\", async () => {\n const session = makeSession({\n requestResourceAllocation: async () => bulletinAllocatedResponse(),\n });\n const adapter = fakeAdapter(\"p\");\n\n await ensureSlotAccountSigner(session, adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n\n // After the implicit allocation, getCachedAllocation should see the key.\n const cached = await getCachedAllocation(adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(cached?.tag).toBe(\"BulletInAllowance\");\n });\n\n test(\"parallel calls for the SAME resource share one allocation (no double-prompt)\", async () => {\n // Regression: previously the cache-hit check ran outside the\n // lock, so two concurrent same-resource calls both passed it,\n // then both hit the wire under the serialized lock — burning\n // two slots and prompting the wallet twice. Both calls must\n // resolve from a single allocation.\n const captured: RequestCapture[] = [];\n const session = makeSession({\n requestResourceAllocation: async (req) => {\n captured.push(req);\n // Force a yield so the second caller has a chance to\n // race past the cache check if the lock isn't around it.\n await new Promise((r) => setTimeout(r, 5));\n return bulletinAllocatedResponse();\n },\n });\n const adapter = fakeAdapter(\"p\");\n\n const [signerA, signerB] = await Promise.all([\n ensureSlotAccountSigner(session, adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ensureSlotAccountSigner(session, adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ]);\n\n // Exactly one wire round-trip — the second caller must observe\n // the freshly-cached key, not start a second allocation.\n expect(captured).toHaveLength(1);\n // Both calls return functioning signers backed by the same key.\n expect(signerA.publicKey).toBeInstanceOf(Uint8Array);\n expect(signerB.publicKey).toBeInstanceOf(Uint8Array);\n expect(toHex(signerA.publicKey)).toBe(toHex(signerB.publicKey));\n });\n });\n}\n","// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/\n Persistent allowance-key cache. One JSON file per `appId`, 0o600.\n \n Cache key is the variant tag, except `SmartContractAllowance::{dest}`\n * which disambiguates per-derivation-index PGAS pre-warming.\n \n @internal\n /\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport { toHex } from \"@polkadot-api/utils\";\nimport { mkdir, readFile, rename, writeFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nimport type { AllocatableResource, ApAllocationOutcome } from \"./host.js\";\n\nconst log = createLogger(\"terminal\");\n\nconst DEFAULT_STORAGE_DIR = join(homedir(), \".polkadot-apps\");\nconst CACHE_FILE_MODE = 0o600;\n\n/* One cached allowance entry. Hex strings are 0x-prefixed. /\nexport type CachedAllocation =\n \| { tag: \"BulletInAllowance\"; slotAccountKey: string }\n \| { tag: \"StatementStoreAllowance\"; slotAccountKey: string }\n \| { tag: \"SmartContractAllowance\"; dest: number }\n \| {\n tag: \"AutoSigning\";\n productDerivationSecret: string;\n productRootPrivateKey: string;\n };\n\ninterface AllowanceCacheV1 {\n version: 1;\n entries: Record<string, CachedAllocation>;\n}\n\nfunction sanitizeAppId(appId: string): string {\n return appId.replace(/[^a-zA-Z0-9_.-]/g, \"_\");\n}\n\nfunction cachePath(appId: string, storageDir?: string): string {\n return join(storageDir ?? DEFAULT_STORAGE_DIR, `${sanitizeAppId(appId)}_AllowanceKeys.json`);\n}\n\nfunction emptyCache(): AllowanceCacheV1 {\n return { version: 1, entries: {} };\n}\n\nexport async function loadCache(appId: string, storageDir?: string): Promise<AllowanceCacheV1> {\n const path = cachePath(appId, storageDir);\n let raw: string;\n try {\n raw = await readFile(path, \"utf-8\");\n } catch (e: unknown) {\n if ((e as NodeJS.ErrnoException)?.code === \"ENOENT\") return emptyCache();\n throw e;\n }\n try {\n const parsed = JSON.parse(raw) as AllowanceCacheV1;\n if (\n parsed?.version !== 1 \|\|\n typeof parsed.entries !== \"object\" \|\|\n parsed.entries === null\n ) {\n log.warn(\"allowance cache schema mismatch; starting fresh\", { appId, path });\n return emptyCache();\n }\n return parsed;\n } catch (e) {\n log.warn(\"allowance cache parse failed; starting fresh\", { appId, path, error: String(e) });\n return emptyCache();\n }\n}\n\nexport async function saveCache(\n appId: string,\n cache: AllowanceCacheV1,\n storageDir?: string,\n): Promise<void> {\n const path = cachePath(appId, storageDir);\n await mkdir(dirname(path), { recursive: true });\n // Temp + rename so a mid-write crash can't leave a half-written file.\n // Concurrent Hosts: the Account Holder serializes per (user, product,\n // resource) and returns the same key to all callers, so racing writes\n // converge on identical bytes.\n const tmp = `${path}.tmp`;\n await writeFile(tmp, JSON.stringify(cache, null, 2), { mode: CACHE_FILE_MODE });\n await rename(tmp, path);\n}\n\nexport function cacheKey(resource: AllocatableResource): string {\n if (resource.tag === \"SmartContractAllowance\") {\n return `${resource.tag}::${resource.value}`;\n }\n return resource.tag;\n}\n\n/\n Pick the wire `onExisting` policy from current cache state. `Ignore`\n * unless every requested resource is a slot-table variant (Bulletin /\n * SSS) AND already cached, in which case `Increase`. SC and AutoSigning\n * aren't slot-additive so they always force `Ignore`.\n /\nexport function pickOnExistingPolicy(\n cache: AllowanceCacheV1,\n resources: AllocatableResource[],\n): \"Ignore\" \| \"Increase\" {\n if (resources.length === 0) return \"Ignore\";\n const allSlotTableAndCached = resources.every((r) => {\n if (r.tag !== \"BulletInAllowance\" && r.tag !== \"StatementStoreAllowance\") return false;\n return Object.hasOwn(cache.entries, cacheKey(r));\n });\n return allSlotTableAndCached ? \"Increase\" : \"Ignore\";\n}\n\n/\n Merge `Allocated` outcomes into the cache. Non-`Allocated` outcomes\n * leave the cache unchanged. Returns the input `cache` reference rather\n * than a copy when no entry was added, so callers can short-circuit a\n * disk write via reference equality.\n \n Throws on length mismatch — `outcomes` must be length-matched with\n * `requested`. A divergence is a wire contract violation, not data to\n * silently truncate.\n /\nexport function mergeOutcomes(\n cache: AllowanceCacheV1,\n requested: AllocatableResource[],\n outcomes: ApAllocationOutcome[],\n): AllowanceCacheV1 {\n if (requested.length !== outcomes.length) {\n throw new Error(\n `mergeOutcomes: length mismatch — requested ${requested.length}, got ${outcomes.length}`,\n );\n }\n const entries = { ...cache.entries };\n let mutated = false;\n for (let i = 0; i < outcomes.length; i++) {\n const req = requested[i];\n const out = outcomes[i];\n if (out.tag !== \"Allocated\") continue;\n const inner = out.value;\n // outcomes must align positionally AND by variant with the request.\n // A divergence is a wire contract violation: throw rather than\n // silently miscaching a key under the wrong cache slot.\n if (inner.tag !== req.tag) {\n throw new Error(\n `mergeOutcomes: variant mismatch at index ${i} — requested ${req.tag}, got Allocated<${inner.tag}>`,\n );\n }\n const key = cacheKey(req);\n switch (inner.tag) {\n case \"BulletInAllowance\":\n case \"StatementStoreAllowance\":\n entries[key] = {\n tag: inner.tag,\n slotAccountKey: toHex(inner.value.slotAccountKey),\n };\n mutated = true;\n break;\n case \"SmartContractAllowance\":\n // dest comes from the request; the response payload is undefined.\n // Variant alignment is enforced above, so req.tag is guaranteed\n // to be SmartContractAllowance here — the cast narrows it.\n if (req.tag === \"SmartContractAllowance\") {\n entries[key] = { tag: \"SmartContractAllowance\", dest: req.value };\n mutated = true;\n }\n break;\n case \"AutoSigning\":\n entries[key] = {\n tag: \"AutoSigning\",\n productDerivationSecret: inner.value.productDerivationSecret,\n productRootPrivateKey: toHex(inner.value.productRootPrivateKey),\n };\n mutated = true;\n break;\n }\n }\n return mutated ? { version: 1, entries } : cache;\n}\n\n/* Look up a single cached allocation, or `null` if absent. /\nexport function readCacheEntry(\n cache: AllowanceCacheV1,\n resource: AllocatableResource,\n): CachedAllocation \| null {\n return cache.entries[cacheKey(resource)] ?? null;\n}\n\n/\n Serialize load/merge/save sequences for the same cache file within a\n * single process. Without this, parallel `requestResourceAllocation`\n * calls for different resources can race: each snapshots the cache\n * before the other writes, last writer wins, the loser's key is lost.\n \n Cross-process races are out of scope here — the Account Holder\n * serializes per user/product/resource and returns identical bytes\n * to concurrent callers for the same resource, so two CLI processes\n * writing the same key converge.\n /\nconst cacheLocks = new Map<string, Promise<unknown>>();\n\nexport function withCacheLock<T>(\n appId: string,\n storageDir: string \| undefined,\n fn: () => Promise<T>,\n): Promise<T> {\n const key = cachePath(appId, storageDir);\n const prev = cacheLocks.get(key) ?? Promise.resolve();\n // Neutralize a prior rejection so one failure doesn't block subsequent waiters.\n const next = prev.catch(() => {}).then(fn);\n cacheLocks.set(\n key,\n next.catch(() => {}),\n );\n return next;\n}\n\nif (import.meta.vitest) {\n const { describe, test, expect, beforeEach } = import.meta.vitest;\n const { mkdtempSync, rmSync } = await import(\"node:fs\");\n const { tmpdir } = await import(\"node:os\");\n\n let storageDir: string;\n beforeEach(() => {\n storageDir = mkdtempSync(join(tmpdir(), \"host-cache-test-\"));\n return () => rmSync(storageDir, { recursive: true, force: true });\n });\n\n describe(\"cacheKey\", () => {\n test(\"returns the variant tag for slot-table resources and AutoSigning\", () => {\n expect(cacheKey({ tag: \"BulletInAllowance\", value: undefined })).toBe(\n \"BulletInAllowance\",\n );\n expect(cacheKey({ tag: \"StatementStoreAllowance\", value: undefined })).toBe(\n \"StatementStoreAllowance\",\n );\n expect(cacheKey({ tag: \"AutoSigning\", value: undefined })).toBe(\"AutoSigning\");\n });\n\n test(\"disambiguates SmartContractAllowance by dest\", () => {\n expect(cacheKey({ tag: \"SmartContractAllowance\", value: 0 })).toBe(\n \"SmartContractAllowance::0\",\n );\n expect(cacheKey({ tag: \"SmartContractAllowance\", value: 7 })).toBe(\n \"SmartContractAllowance::7\",\n );\n });\n });\n\n describe(\"loadCache / saveCache round-trip\", () => {\n test(\"loadCache on missing file returns empty cache, not an error\", async () => {\n const cache = await loadCache(\"my-app\", storageDir);\n expect(cache).toEqual({ version: 1, entries: {} });\n });\n\n test(\"saveCache then loadCache returns the same content\", async () => {\n const original: AllowanceCacheV1 = {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0xdeadbeef\" },\n },\n };\n await saveCache(\"my-app\", original, storageDir);\n const reloaded = await loadCache(\"my-app\", storageDir);\n expect(reloaded).toEqual(original);\n });\n\n test(\"two appIds in the same storageDir don't collide\", async () => {\n const a: AllowanceCacheV1 = {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x01\" },\n },\n };\n const b: AllowanceCacheV1 = {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x02\" },\n },\n };\n await saveCache(\"app-a\", a, storageDir);\n await saveCache(\"app-b\", b, storageDir);\n expect((await loadCache(\"app-a\", storageDir)).entries.BulletInAllowance).toEqual(\n a.entries.BulletInAllowance,\n );\n expect((await loadCache(\"app-b\", storageDir)).entries.BulletInAllowance).toEqual(\n b.entries.BulletInAllowance,\n );\n });\n\n test(\"appId with non-alphanumeric characters sanitizes to a safe path\", async () => {\n // Verifies a path-traversal-style appId can't escape storageDir.\n const cache: AllowanceCacheV1 = { version: 1, entries: {} };\n await expect(saveCache(\"../escape\", cache, storageDir)).resolves.toBeUndefined();\n const reloaded = await loadCache(\"../escape\", storageDir);\n expect(reloaded).toEqual(cache);\n });\n\n test(\"malformed cache file is treated as empty, not thrown\", async () => {\n await writeFile(cachePath(\"my-app\", storageDir), \"{ not valid json\", \"utf-8\");\n const cache = await loadCache(\"my-app\", storageDir);\n expect(cache).toEqual({ version: 1, entries: {} });\n });\n\n test(\"version mismatch is treated as empty, not thrown\", async () => {\n await writeFile(\n cachePath(\"my-app\", storageDir),\n JSON.stringify({ version: 99, entries: {} }),\n \"utf-8\",\n );\n const cache = await loadCache(\"my-app\", storageDir);\n expect(cache).toEqual({ version: 1, entries: {} });\n });\n\n test(\"file is written with 0o600 permissions (defense-in-depth)\", async () => {\n const { stat } = await import(\"node:fs/promises\");\n const cache: AllowanceCacheV1 = { version: 1, entries: {} };\n await saveCache(\"my-app\", cache, storageDir);\n const s = await stat(cachePath(\"my-app\", storageDir));\n // Mask to permission bits only — file type bits are above 0o777.\n expect(s.mode & 0o777).toBe(0o600);\n });\n });\n\n describe(\"pickOnExistingPolicy\", () => {\n test(\"empty request resolves to Ignore\", () => {\n const cache = emptyCache();\n expect(pickOnExistingPolicy(cache, [])).toBe(\"Ignore\");\n });\n\n test(\"no cached entries → Ignore\", () => {\n const cache = emptyCache();\n expect(\n pickOnExistingPolicy(cache, [{ tag: \"BulletInAllowance\", value: undefined }]),\n ).toBe(\"Ignore\");\n });\n\n test(\"all slot-table resources cached → Increase\", () => {\n const cache: AllowanceCacheV1 = {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x01\" },\n StatementStoreAllowance: {\n tag: \"StatementStoreAllowance\",\n slotAccountKey: \"0x02\",\n },\n },\n };\n expect(\n pickOnExistingPolicy(cache, [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ]),\n ).toBe(\"Increase\");\n });\n\n test(\"mixed cached + uncached → Ignore (conservative)\", () => {\n const cache: AllowanceCacheV1 = {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x01\" },\n },\n };\n expect(\n pickOnExistingPolicy(cache, [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ]),\n ).toBe(\"Ignore\");\n });\n\n test(\"AutoSigning in the request → Ignore even if cached (not slot-additive)\", () => {\n const cache: AllowanceCacheV1 = {\n version: 1,\n entries: {\n AutoSigning: {\n tag: \"AutoSigning\",\n productDerivationSecret: \"x\",\n productRootPrivateKey: \"0xaa\",\n },\n },\n };\n expect(pickOnExistingPolicy(cache, [{ tag: \"AutoSigning\", value: undefined }])).toBe(\n \"Ignore\",\n );\n });\n\n test(\"SC in the request → Ignore (not slot-additive; PGAS claim is per-call)\", () => {\n const cache: AllowanceCacheV1 = {\n version: 1,\n entries: {\n \"SmartContractAllowance::5\": { tag: \"SmartContractAllowance\", dest: 5 },\n },\n };\n expect(pickOnExistingPolicy(cache, [{ tag: \"SmartContractAllowance\", value: 5 }])).toBe(\n \"Ignore\",\n );\n });\n });\n\n describe(\"mergeOutcomes\", () => {\n test(\"ignores Rejected and NotAvailable\", () => {\n const cache = emptyCache();\n const requested: AllocatableResource[] = [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ];\n const outcomes: ApAllocationOutcome[] = [\n { tag: \"Rejected\", value: undefined },\n { tag: \"NotAvailable\", value: undefined },\n ];\n const merged = mergeOutcomes(cache, requested, outcomes);\n expect(merged.entries).toEqual({});\n });\n\n test(\"stores Allocated Bulletin/SSS keys with hex encoding\", () => {\n const cache = emptyCache();\n const requested: AllocatableResource[] = [\n { tag: \"BulletInAllowance\", value: undefined },\n ];\n const outcomes: ApAllocationOutcome[] = [\n {\n tag: \"Allocated\",\n value: {\n tag: \"BulletInAllowance\",\n value: { slotAccountKey: new Uint8Array([0xde, 0xad, 0xbe, 0xef]) },\n },\n },\n ];\n const merged = mergeOutcomes(cache, requested, outcomes);\n expect(merged.entries.BulletInAllowance).toEqual({\n tag: \"BulletInAllowance\",\n slotAccountKey: \"0xdeadbeef\",\n });\n });\n\n test(\"stores SmartContractAllowance with dest from the request\", () => {\n const cache = emptyCache();\n const requested: AllocatableResource[] = [{ tag: \"SmartContractAllowance\", value: 7 }];\n const outcomes: ApAllocationOutcome[] = [\n {\n tag: \"Allocated\",\n value: { tag: \"SmartContractAllowance\", value: undefined },\n },\n ];\n const merged = mergeOutcomes(cache, requested, outcomes);\n expect(merged.entries[\"SmartContractAllowance::7\"]).toEqual({\n tag: \"SmartContractAllowance\",\n dest: 7,\n });\n });\n\n test(\"stores AutoSigning subtree key + secret\", () => {\n const cache = emptyCache();\n const requested: AllocatableResource[] = [{ tag: \"AutoSigning\", value: undefined }];\n const outcomes: ApAllocationOutcome[] = [\n {\n tag: \"Allocated\",\n value: {\n tag: \"AutoSigning\",\n value: {\n productDerivationSecret: \"secret-hex\",\n productRootPrivateKey: new Uint8Array([0xab, 0xcd]),\n },\n },\n },\n ];\n const merged = mergeOutcomes(cache, requested, outcomes);\n expect(merged.entries.AutoSigning).toEqual({\n tag: \"AutoSigning\",\n productDerivationSecret: \"secret-hex\",\n productRootPrivateKey: \"0xabcd\",\n });\n });\n\n test(\"returns the same cache reference when no Allocated outcomes (no-op)\", () => {\n // Lets callers gate disk writes on reference equality.\n const cache: AllowanceCacheV1 = {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0xaa\" },\n },\n };\n const requested: AllocatableResource[] = [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ];\n const outcomes: ApAllocationOutcome[] = [\n { tag: \"Rejected\", value: undefined },\n { tag: \"NotAvailable\", value: undefined },\n ];\n expect(mergeOutcomes(cache, requested, outcomes)).toBe(cache);\n });\n\n test(\"empty inputs return the same cache reference\", () => {\n const cache = emptyCache();\n expect(mergeOutcomes(cache, [], [])).toBe(cache);\n });\n\n test(\"returns a new object reference when at least one entry is added\", () => {\n const cache = emptyCache();\n const requested: AllocatableResource[] = [\n { tag: \"BulletInAllowance\", value: undefined },\n ];\n const outcomes: ApAllocationOutcome[] = [\n {\n tag: \"Allocated\",\n value: {\n tag: \"BulletInAllowance\",\n value: { slotAccountKey: new Uint8Array([1]) },\n },\n },\n ];\n expect(mergeOutcomes(cache, requested, outcomes)).not.toBe(cache);\n });\n\n test(\"throws when outcomes do not length-match requested\", () => {\n const cache = emptyCache();\n const requested: AllocatableResource[] = [\n { tag: \"BulletInAllowance\", value: undefined },\n { tag: \"StatementStoreAllowance\", value: undefined },\n ];\n const outcomes: ApAllocationOutcome[] = [{ tag: \"Rejected\", value: undefined }];\n expect(() => mergeOutcomes(cache, requested, outcomes)).toThrow(/length mismatch/);\n });\n\n test(\"throws when an Allocated outcome's variant does not match the requested variant\", () => {\n // outcomes must align positionally AND by variant with the\n // request. Without this guard, a Bulletin key would get stored\n // under the StatementStoreAllowance cache slot.\n const cache = emptyCache();\n const requested: AllocatableResource[] = [\n { tag: \"StatementStoreAllowance\", value: undefined },\n ];\n const outcomes: ApAllocationOutcome[] = [\n {\n tag: \"Allocated\",\n value: {\n tag: \"BulletInAllowance\",\n value: { slotAccountKey: new Uint8Array([0xaa]) },\n },\n },\n ];\n expect(() => mergeOutcomes(cache, requested, outcomes)).toThrow(\n /variant mismatch at index 0 — requested StatementStoreAllowance, got Allocated<BulletInAllowance>/,\n );\n });\n\n test(\"preserves existing entries when merging new ones\", () => {\n const cache: AllowanceCacheV1 = {\n version: 1,\n entries: {\n StatementStoreAllowance: {\n tag: \"StatementStoreAllowance\",\n slotAccountKey: \"0xaa\",\n },\n },\n };\n const requested: AllocatableResource[] = [\n { tag: \"BulletInAllowance\", value: undefined },\n ];\n const outcomes: ApAllocationOutcome[] = [\n {\n tag: \"Allocated\",\n value: {\n tag: \"BulletInAllowance\",\n value: { slotAccountKey: new Uint8Array([0xbb]) },\n },\n },\n ];\n const merged = mergeOutcomes(cache, requested, outcomes);\n expect(Object.keys(merged.entries).sort()).toEqual([\n \"BulletInAllowance\",\n \"StatementStoreAllowance\",\n ]);\n expect(merged.entries.StatementStoreAllowance).toEqual({\n tag: \"StatementStoreAllowance\",\n slotAccountKey: \"0xaa\",\n });\n });\n });\n\n describe(\"readCacheEntry\", () => {\n test(\"returns the cached entry by resource discriminator\", () => {\n const cache: AllowanceCacheV1 = {\n version: 1,\n entries: {\n \"SmartContractAllowance::5\": {\n tag: \"SmartContractAllowance\",\n dest: 5,\n },\n },\n };\n expect(readCacheEntry(cache, { tag: \"SmartContractAllowance\", value: 5 })).toEqual({\n tag: \"SmartContractAllowance\",\n dest: 5,\n });\n // Different dest doesn't match.\n expect(readCacheEntry(cache, { tag: \"SmartContractAllowance\", value: 6 })).toBeNull();\n });\n\n test(\"returns null when nothing cached\", () => {\n const cache = emptyCache();\n expect(\n readCacheEntry(cache, { tag: \"BulletInAllowance\", value: undefined }),\n ).toBeNull();\n });\n });\n\n describe(\"withCacheLock\", () => {\n test(\"serializes calls for the same (appId, storageDir)\", async () => {\n const order: string[] = [];\n const a = withCacheLock(\"app\", storageDir, async () => {\n order.push(\"a-start\");\n await new Promise((r) => setTimeout(r, 10));\n order.push(\"a-end\");\n });\n const b = withCacheLock(\"app\", storageDir, async () => {\n order.push(\"b-start\");\n order.push(\"b-end\");\n });\n await Promise.all([a, b]);\n expect(order).toEqual([\"a-start\", \"a-end\", \"b-start\", \"b-end\"]);\n });\n\n test(\"different (appId, storageDir) keys do not block each other\", async () => {\n let bRan = false;\n const a = withCacheLock(\"app-a\", storageDir, async () => {\n // b should run while a is still inside the await\n await new Promise((r) => setTimeout(r, 20));\n expect(bRan).toBe(true);\n });\n const b = withCacheLock(\"app-b\", storageDir, async () => {\n bRan = true;\n });\n await Promise.all([a, b]);\n });\n\n test(\"a rejection in one call does not block subsequent calls on the same key\", async () => {\n const a = withCacheLock(\"app\", storageDir, async () => {\n throw new Error(\"boom\");\n });\n await expect(a).rejects.toThrow(\"boom\");\n const b = await withCacheLock(\"app\", storageDir, async () => \"ok\");\n expect(b).toBe(\"ok\");\n });\n });\n}\n","// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/\n Slot-account signer: reads the cached Bulletin/SSS allowance key and\n * returns a `PolkadotSigner` that signs locally with sr25519. SC and\n * AutoSigning are not slot-table variants and throw.\n \n @module\n /\nimport { bytesToNumberLE, numberToBytesLE } from \"@noble/curves/utils.js\";\nimport { fromHex } from \"@polkadot-api/utils\";\nimport { createDerive, sr25519, sr25519Derive } from \"@polkadot-labs/hdkd-helpers\";\nimport type { PolkadotSigner } from \"polkadot-api\";\nimport { getPolkadotSigner } from \"polkadot-api/signer\";\n\nimport type { TerminalAdapter } from \"./adapter.js\";\nimport { type CachedAllocation, loadCache, readCacheEntry } from \"./host-cache.js\";\nimport type { AllocatableResource } from \"./host.js\";\n\n// schnorrkel to_bytes() (canonical scalar) -> to_ed25519_bytes() form @scure expects (×8 cofactor).\nfunction canonicalSr25519SecretToEd25519Bytes(secret: Uint8Array): Uint8Array {\n const ed25519Scalar = numberToBytesLE(bytesToNumberLE(secret.subarray(0, 32)) << 3n, 32);\n const out = new Uint8Array(64);\n out.set(ed25519Scalar, 0);\n out.set(secret.subarray(32, 64), 32);\n return out;\n}\n\n// Wire encoding for slotAccountKey isn't pinned: mobile may send a\n// 32-byte mini-secret or a 64-byte expanded secret. Detect length and\n// route; any other length throws.\nfunction buildKeypair(secret: Uint8Array): {\n publicKey: Uint8Array;\n sign: (data: Uint8Array) => Uint8Array;\n} {\n if (secret.length === 32) {\n const derive = createDerive({ seed: secret, curve: sr25519, derive: sr25519Derive });\n const keypair = derive(\"\");\n return { publicKey: keypair.publicKey, sign: (data) => keypair.sign(data) };\n }\n if (secret.length === 64) {\n const ed25519Secret = canonicalSr25519SecretToEd25519Bytes(secret);\n return {\n publicKey: sr25519.getPublicKey(ed25519Secret),\n sign: (data) => sr25519.sign(data, ed25519Secret),\n };\n }\n throw new Error(\n `createSlotAccountSigner: unexpected slotAccountKey length ${secret.length}. Expected 32 (mini-secret) or 64 (expanded secret).`,\n );\n}\n\n/\n Build a `PolkadotSigner` from an already-loaded cache entry. Throws\n * for SC and AutoSigning — they don't carry a slot account key. See\n * the module docstring.\n \n Useful when the caller already holds the cache in memory, e.g. inside\n * a `withCacheLock` block, and wants to avoid re-reading disk.\n /\nexport function buildSignerFromEntry(entry: CachedAllocation): PolkadotSigner {\n if (entry.tag !== \"BulletInAllowance\" && entry.tag !== \"StatementStoreAllowance\") {\n throw new Error(\n `createSlotAccountSigner: ${entry.tag} does not carry a slot account key. Slot-table signing is defined for BulletInAllowance and StatementStoreAllowance only.`,\n );\n }\n const secret = fromHex(entry.slotAccountKey);\n const { publicKey, sign } = buildKeypair(secret);\n return getPolkadotSigner(publicKey, \"Sr25519\", async (data) => sign(data));\n}\n\n/\n `PolkadotSigner` backed by the cached slot account key. Returns `null`\n * when nothing's cached for `(adapter.appId, resource)`. Throws for SC\n * and AutoSigning (no slot account key — see module docstring).\n \n Signs locally with sr25519 — no wallet round-trip on the hot path.\n \n @example\n * ```ts\n * const signer = await createSlotAccountSigner(adapter, {\n * tag: \"BulletInAllowance\", value: undefined,\n * });\n * if (signer) await tx.submitAndWatch(signer);\n * ```\n */\nexport async function createSlotAccountSigner(\n adapter: TerminalAdapter,\n resource: AllocatableResource,\n): Promise<PolkadotSigner \| null> {\n const cache = await loadCache(adapter.appId, adapter.storageDir);\n const entry = readCacheEntry(cache, resource);\n if (!entry) return null;\n return buildSignerFromEntry(entry);\n}\n\nif (import.meta.vitest) {\n const { describe, test, expect, beforeEach } = import.meta.vitest;\n const { mkdtempSync, rmSync } = await import(\"node:fs\");\n const { tmpdir } = await import(\"node:os\");\n const { join: pathJoin } = await import(\"node:path\");\n const { saveCache } = await import(\"./host-cache.js\");\n const { DEV_PHRASE, mnemonicToMiniSecret } = await import(\"@polkadot-labs/hdkd-helpers\");\n const { toHex } = await import(\"@polkadot-api/utils\");\n\n let storageDir: string;\n beforeEach(() => {\n storageDir = mkdtempSync(pathJoin(tmpdir(), \"host-signer-test-\"));\n return () => rmSync(storageDir, { recursive: true, force: true });\n });\n\n function fakeAdapter(appId: string): TerminalAdapter {\n return { appId, storageDir } as unknown as TerminalAdapter;\n }\n\n function knownSecret(): {\n secret: Uint8Array;\n publicKey: Uint8Array;\n hex: string;\n sign: (msg: Uint8Array) => Uint8Array;\n } {\n // Deterministic across runs — uses the standard substrate dev\n // mnemonic. `mnemonicToMiniSecret` returns the 32-byte mini-secret\n // form (one of the two shapes `createSlotAccountSigner` accepts).\n const secret = mnemonicToMiniSecret(DEV_PHRASE);\n const derive = createDerive({ seed: secret, curve: sr25519, derive: sr25519Derive });\n const keypair = derive(\"\");\n return {\n secret,\n publicKey: keypair.publicKey,\n hex: toHex(secret),\n sign: (msg) => keypair.sign(msg),\n };\n }\n\n describe(\"createSlotAccountSigner\", () => {\n test(\"returns null when no allocation is cached\", async () => {\n const adapter = fakeAdapter(\"p\");\n const signer = await createSlotAccountSigner(adapter, {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(signer).toBeNull();\n });\n\n test(\"returns a signer with the sr25519 public key derived from the cached secret\", async () => {\n const { hex, publicKey } = knownSecret();\n await saveCache(\n \"p\",\n {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: hex },\n },\n },\n storageDir,\n );\n\n const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(signer).not.toBeNull();\n expect(signer?.publicKey).toEqual(publicKey);\n });\n\n test(\"signs locally and the signature verifies against the cached account\", async () => {\n const { hex, publicKey } = knownSecret();\n await saveCache(\n \"p\",\n {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: hex },\n },\n },\n storageDir,\n );\n\n const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n // `signBytes` wraps with `<Bytes>...</Bytes>` like all PAPI\n // PolkadotSigners do; for direct payload signing PAPI calls\n // `signTx` which routes through the same `sign` callback we\n // installed. Test that callback directly by reaching for the\n // typed surface: PAPI exposes signTx but the easiest direct\n // verification is `signBytes` which is wired through our sign.\n const payload = new TextEncoder().encode(\"hello slot\");\n // signBytes wraps in <Bytes>...</Bytes> before calling our sign.\n // To verify, reconstruct the wrap manually.\n const wrapped = new Uint8Array([\n ...new TextEncoder().encode(\"<Bytes>\"),\n ...payload,\n ...new TextEncoder().encode(\"</Bytes>\"),\n ]);\n const signature = await signer!.signBytes(payload);\n expect(sr25519.verify(signature, wrapped, publicKey)).toBe(true);\n });\n\n test(\"64-byte expanded-secret form produces a valid signer\", async () => {\n // Canonical schnorrkel to_bytes() for DEV_PHRASE (scalar + nonce), the mobile wire form.\n const SECRET_64_HEX =\n \"0x05d65584630d16cd4af6d0bec10f34bb504a5dcb62dba2122d49f5a663763d0afd190cce74df356432b410bd64682309d6dedb27c76845daf388557cbac3ca34\";\n\n await saveCache(\n \"p\",\n {\n version: 1,\n entries: {\n BulletInAllowance: {\n tag: \"BulletInAllowance\",\n slotAccountKey: SECRET_64_HEX,\n },\n },\n },\n storageDir,\n );\n\n const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(signer).not.toBeNull();\n\n // Public key from the 64-byte path matches the 32-byte path's\n // — same logical key, two encodings.\n const { publicKey: pubFrom32Bytes } = knownSecret();\n expect(signer?.publicKey).toEqual(pubFrom32Bytes);\n\n // Signature from the 64-byte branch verifies against the same\n // public key.\n const payload = new TextEncoder().encode(\"hello 64-byte path\");\n const wrapped = new Uint8Array([\n ...new TextEncoder().encode(\"<Bytes>\"),\n ...payload,\n ...new TextEncoder().encode(\"</Bytes>\"),\n ]);\n const sig = await signer!.signBytes(payload);\n expect(sr25519.verify(sig, wrapped, pubFrom32Bytes)).toBe(true);\n });\n\n test(\"works for StatementStoreAllowance the same way\", async () => {\n const { hex, publicKey } = knownSecret();\n await saveCache(\n \"p\",\n {\n version: 1,\n entries: {\n StatementStoreAllowance: {\n tag: \"StatementStoreAllowance\",\n slotAccountKey: hex,\n },\n },\n },\n storageDir,\n );\n\n const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n tag: \"StatementStoreAllowance\",\n value: undefined,\n });\n expect(signer?.publicKey).toEqual(publicKey);\n });\n\n test(\"throws for SmartContractAllowance (no slot account key)\", async () => {\n await saveCache(\n \"p\",\n {\n version: 1,\n entries: {\n \"SmartContractAllowance::5\": { tag: \"SmartContractAllowance\", dest: 5 },\n },\n },\n storageDir,\n );\n\n await expect(\n createSlotAccountSigner(fakeAdapter(\"p\"), {\n tag: \"SmartContractAllowance\",\n value: 5,\n }),\n ).rejects.toThrow(/SmartContractAllowance does not carry a slot account key/);\n });\n\n test(\"throws for AutoSigning (subtree key, not slot account)\", async () => {\n await saveCache(\n \"p\",\n {\n version: 1,\n entries: {\n AutoSigning: {\n tag: \"AutoSigning\",\n productDerivationSecret: \"secret\",\n productRootPrivateKey: \"0xabcd\",\n },\n },\n },\n storageDir,\n );\n\n await expect(\n createSlotAccountSigner(fakeAdapter(\"p\"), {\n tag: \"AutoSigning\",\n value: undefined,\n }),\n ).rejects.toThrow(/AutoSigning does not carry a slot account key/);\n });\n\n test(\"different appIds yield different signers from disjoint caches\", async () => {\n const a = knownSecret();\n // Distinct mini-secret → distinct derived keypair.\n const otherMiniSecret = new Uint8Array(32).fill(0x07);\n const otherKeypair = createDerive({\n seed: otherMiniSecret,\n curve: sr25519,\n derive: sr25519Derive,\n })(\"\");\n\n await saveCache(\n \"app-a\",\n {\n version: 1,\n entries: {\n BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: a.hex },\n },\n },\n storageDir,\n );\n await saveCache(\n \"app-b\",\n {\n version: 1,\n entries: {\n BulletInAllowance: {\n tag: \"BulletInAllowance\",\n slotAccountKey: toHex(otherMiniSecret),\n },\n },\n },\n storageDir,\n );\n\n const signerA = await createSlotAccountSigner(fakeAdapter(\"app-a\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n const signerB = await createSlotAccountSigner(fakeAdapter(\"app-b\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n });\n expect(signerA?.publicKey).toEqual(a.publicKey);\n expect(signerB?.publicKey).toEqual(otherKeypair.publicKey);\n expect(signerA?.publicKey).not.toEqual(signerB?.publicKey);\n });\n\n test(\"rejects an unexpected slotAccountKey length\", async () => {\n // Variable-length codec on the wire, but our keypair builder\n // only recognizes the standard 32 / 64 byte forms.\n await saveCache(\n \"p\",\n {\n version: 1,\n entries: {\n BulletInAllowance: {\n tag: \"BulletInAllowance\",\n slotAccountKey: toHex(new Uint8Array(48).fill(1)),\n },\n },\n },\n storageDir,\n );\n\n await expect(\n createSlotAccountSigner(fakeAdapter(\"p\"), {\n tag: \"BulletInAllowance\",\n value: undefined,\n }),\n ).rejects.toThrow(/unexpected slotAccountKey length 48/);\n });\n });\n}\n"],"mappings":";AAWA,SAAS,gBAAAA,qBAAoB;;;ACD7B,SAAS,oBAAoB;AAC7B,SAAS,aAAa;AACtB,SAAS,OAAO,UAAU,QAAQ,iBAAiB;AACnD,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAI9B,IAAM,MAAM,aAAa,UAAU;AAEnC,IAAM,sBAAsB,KAAK,QAAQ,GAAG,gBAAgB;AAC5D,IAAM,kBAAkB;AAkBxB,SAAS,cAAc,OAAuB;AAC1C,SAAO,MAAM,QAAQ,oBAAoB,GAAG;AAChD;AAEA,SAAS,UAAU,OAAe,YAA6B;AAC3D,SAAO,KAAK,cAAc,qBAAqB,GAAG,cAAc,KAAK,CAAC,qBAAqB;AAC/F;AAEA,SAAS,aAA+B;AACpC,SAAO,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE;AACrC;AAEA,eAAsB,UAAU,OAAe,YAAgD;AAC3F,QAAM,OAAO,UAAU,OAAO,UAAU;AACxC,MAAI;AACJ,MAAI;AACA,UAAM,MAAM,SAAS,MAAM,OAAO;AAAA,EACtC,SAAS,GAAY;AACjB,QAAK,GAA6B,SAAS,SAAU,QAAO,WAAW;AACvE,UAAM;AAAA,EACV;AACA,MAAI;AACA,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QACI,QAAQ,YAAY,KACpB,OAAO,OAAO,YAAY,YAC1B,OAAO,YAAY,MACrB;AACE,UAAI,KAAK,mDAAmD,EAAE,OAAO,KAAK,CAAC;AAC3E,aAAO,WAAW;AAAA,IACtB;AACA,WAAO;AAAA,EACX,SAAS,GAAG;AACR,QAAI,KAAK,gDAAgD,EAAE,OAAO,MAAM,OAAO,OAAO,CAAC,EAAE,CAAC;AAC1F,WAAO,WAAW;AAAA,EACtB;AACJ;AAEA,eAAsB,UAClB,OACA,OACA,YACa;AACb,QAAM,OAAO,UAAU,OAAO,UAAU;AACxC,QAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAK9C,QAAM,MAAM,GAAG,IAAI;AACnB,QAAM,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC9E,QAAM,OAAO,KAAK,IAAI;AAC1B;AAEO,SAAS,SAAS,UAAuC;AAC5D,MAAI,SAAS,QAAQ,0BAA0B;AAC3C,WAAO,GAAG,SAAS,GAAG,KAAK,SAAS,KAAK;AAAA,EAC7C;AACA,SAAO,SAAS;AACpB;AAQO,SAAS,qBACZ,OACA,WACqB;AACrB,MAAI,UAAU,WAAW,EAAG,QAAO;AACnC,QAAM,wBAAwB,UAAU,MAAM,CAAC,MAAM;AACjD,QAAI,EAAE,QAAQ,uBAAuB,EAAE,QAAQ,0BAA2B,QAAO;AACjF,WAAO,OAAO,OAAO,MAAM,SAAS,SAAS,CAAC,CAAC;AAAA,EACnD,CAAC;AACD,SAAO,wBAAwB,aAAa;AAChD;AAYO,SAAS,cACZ,OACA,WACA,UACgB;AAChB,MAAI,UAAU,WAAW,SAAS,QAAQ;AACtC,UAAM,IAAI;AAAA,MACN,mDAA8C,UAAU,MAAM,SAAS,SAAS,MAAM;AAAA,IAC1F;AAAA,EACJ;AACA,QAAM,UAAU,EAAE,GAAG,MAAM,QAAQ;AACnC,MAAI,UAAU;AACd,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACtC,UAAM,MAAM,UAAU,CAAC;AACvB,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,QAAQ,YAAa;AAC7B,UAAM,QAAQ,IAAI;AAIlB,QAAI,MAAM,QAAQ,IAAI,KAAK;AACvB,YAAM,IAAI;AAAA,QACN,4CAA4C,CAAC,qBAAgB,IAAI,GAAG,mBAAmB,MAAM,GAAG;AAAA,MACpG;AAAA,IACJ;AACA,UAAM,MAAM,SAAS,GAAG;AACxB,YAAQ,MAAM,KAAK;AAAA,MACf,KAAK;AAAA,MACL,KAAK;AACD,gBAAQ,GAAG,IAAI;AAAA,UACX,KAAK,MAAM;AAAA,UACX,gBAAgB,MAAM,MAAM,MAAM,cAAc;AAAA,QACpD;AACA,kBAAU;AACV;AAAA,MACJ,KAAK;AAID,YAAI,IAAI,QAAQ,0BAA0B;AACtC,kBAAQ,GAAG,IAAI,EAAE,KAAK,0BAA0B,MAAM,IAAI,MAAM;AAChE,oBAAU;AAAA,QACd;AACA;AAAA,MACJ,KAAK;AACD,gBAAQ,GAAG,IAAI;AAAA,UACX,KAAK;AAAA,UACL,yBAAyB,MAAM,MAAM;AAAA,UACrC,uBAAuB,MAAM,MAAM,MAAM,qBAAqB;AAAA,QAClE;AACA,kBAAU;AACV;AAAA,IACR;AAAA,EACJ;AACA,SAAO,UAAU,EAAE,SAAS,GAAG,QAAQ,IAAI;AAC/C;AAGO,SAAS,eACZ,OACA,UACuB;AACvB,SAAO,MAAM,QAAQ,SAAS,QAAQ,CAAC,KAAK;AAChD;AAaA,IAAM,aAAa,oBAAI,IAA8B;AAE9C,SAAS,cACZ,OACA,YACA,IACU;AACV,QAAM,MAAM,UAAU,OAAO,UAAU;AACvC,QAAM,OAAO,WAAW,IAAI,GAAG,KAAK,QAAQ,QAAQ;AAEpD,QAAM,OAAO,KAAK,MAAM,MAAM;AAAA,EAAC,CAAC,EAAE,KAAK,EAAE;AACzC,aAAW;AAAA,IACP;AAAA,IACA,KAAK,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACvB;AACA,SAAO;AACX;AAEA,IAAI,QAAoB;AACpB,QAAM,EAAE,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC/C,QAAM,EAAE,aAAa,OAAO,IAAI,MAAa;AAC7C,QAAM,EAAE,OAAO,IAAI,MAAa;AAEhC,MAAI;AACJ,aAAW,MAAM;AACb,iBAAa,YAAY,KAAK,OAAO,GAAG,kBAAkB,CAAC;AAC3D,WAAO,MAAM,OAAO,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AAED,WAAS,YAAY,MAAM;AACvB,SAAK,oEAAoE,MAAM;AAC3E,aAAO,SAAS,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC,CAAC,EAAE;AAAA,QAC7D;AAAA,MACJ;AACA,aAAO,SAAS,EAAE,KAAK,2BAA2B,OAAO,OAAU,CAAC,CAAC,EAAE;AAAA,QACnE;AAAA,MACJ;AACA,aAAO,SAAS,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC,CAAC,EAAE,KAAK,aAAa;AAAA,IACjF,CAAC;AAED,SAAK,gDAAgD,MAAM;AACvD,aAAO,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE;AAAA,QAC1D;AAAA,MACJ;AACA,aAAO,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE;AAAA,QAC1D;AAAA,MACJ;AAAA,IACJ,CAAC;AAAA,EACL,CAAC;AAED,WAAS,oCAAoC,MAAM;AAC/C,SAAK,+DAA+D,YAAY;AAC5E,YAAM,QAAQ,MAAM,UAAU,UAAU,UAAU;AAClD,aAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,IACrD,CAAC;AAED,SAAK,qDAAqD,YAAY;AAClE,YAAM,WAA6B;AAAA,QAC/B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,aAAa;AAAA,QAChF;AAAA,MACJ;AACA,YAAM,UAAU,UAAU,UAAU,UAAU;AAC9C,YAAM,WAAW,MAAM,UAAU,UAAU,UAAU;AACrD,aAAO,QAAQ,EAAE,QAAQ,QAAQ;AAAA,IACrC,CAAC;AAED,SAAK,mDAAmD,YAAY;AAChE,YAAM,IAAsB;AAAA,QACxB,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA,YAAM,IAAsB;AAAA,QACxB,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA,YAAM,UAAU,SAAS,GAAG,UAAU;AACtC,YAAM,UAAU,SAAS,GAAG,UAAU;AACtC,cAAQ,MAAM,UAAU,SAAS,UAAU,GAAG,QAAQ,iBAAiB,EAAE;AAAA,QACrE,EAAE,QAAQ;AAAA,MACd;AACA,cAAQ,MAAM,UAAU,SAAS,UAAU,GAAG,QAAQ,iBAAiB,EAAE;AAAA,QACrE,EAAE,QAAQ;AAAA,MACd;AAAA,IACJ,CAAC;AAED,SAAK,mEAAmE,YAAY;AAEhF,YAAM,QAA0B,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE;AAC1D,YAAM,OAAO,UAAU,aAAa,OAAO,UAAU,CAAC,EAAE,SAAS,cAAc;AAC/E,YAAM,WAAW,MAAM,UAAU,aAAa,UAAU;AACxD,aAAO,QAAQ,EAAE,QAAQ,KAAK;AAAA,IAClC,CAAC;AAED,SAAK,wDAAwD,YAAY;AACrE,YAAM,UAAU,UAAU,UAAU,UAAU,GAAG,oBAAoB,OAAO;AAC5E,YAAM,QAAQ,MAAM,UAAU,UAAU,UAAU;AAClD,aAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,IACrD,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM;AAAA,QACF,UAAU,UAAU,UAAU;AAAA,QAC9B,KAAK,UAAU,EAAE,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC;AAAA,QAC3C;AAAA,MACJ;AACA,YAAM,QAAQ,MAAM,UAAU,UAAU,UAAU;AAClD,aAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,IACrD,CAAC;AAED,SAAK,6DAA6D,YAAY;AAC1E,YAAM,EAAE,KAAK,IAAI,MAAa;AAC9B,YAAM,QAA0B,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE;AAC1D,YAAM,UAAU,UAAU,OAAO,UAAU;AAC3C,YAAM,IAAI,MAAM,KAAK,UAAU,UAAU,UAAU,CAAC;AAEpD,aAAO,EAAE,OAAO,GAAK,EAAE,KAAK,GAAK;AAAA,IACrC,CAAC;AAAA,EACL,CAAC;AAED,WAAS,wBAAwB,MAAM;AACnC,SAAK,oCAAoC,MAAM;AAC3C,YAAM,QAAQ,WAAW;AACzB,aAAO,qBAAqB,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ;AAAA,IACzD,CAAC;AAED,SAAK,mCAA8B,MAAM;AACrC,YAAM,QAAQ,WAAW;AACzB;AAAA,QACI,qBAAqB,OAAO,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,MAChF,EAAE,KAAK,QAAQ;AAAA,IACnB,CAAC;AAED,SAAK,mDAA8C,MAAM;AACrD,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,UACtE,yBAAyB;AAAA,YACrB,KAAK;AAAA,YACL,gBAAgB;AAAA,UACpB;AAAA,QACJ;AAAA,MACJ;AACA;AAAA,QACI,qBAAqB,OAAO;AAAA,UACxB,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,UAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,QACvD,CAAC;AAAA,MACL,EAAE,KAAK,UAAU;AAAA,IACrB,CAAC;AAED,SAAK,wDAAmD,MAAM;AAC1D,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA;AAAA,QACI,qBAAqB,OAAO;AAAA,UACxB,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,UAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,QACvD,CAAC;AAAA,MACL,EAAE,KAAK,QAAQ;AAAA,IACnB,CAAC;AAED,SAAK,+EAA0E,MAAM;AACjF,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,aAAa;AAAA,YACT,KAAK;AAAA,YACL,yBAAyB;AAAA,YACzB,uBAAuB;AAAA,UAC3B;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,qBAAqB,OAAO,CAAC,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC,CAAC,CAAC,EAAE;AAAA,QAC5E;AAAA,MACJ;AAAA,IACJ,CAAC;AAED,SAAK,+EAA0E,MAAM;AACjF,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,6BAA6B,EAAE,KAAK,0BAA0B,MAAM,EAAE;AAAA,QAC1E;AAAA,MACJ;AACA,aAAO,qBAAqB,OAAO,CAAC,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;AAAA,QAC/E;AAAA,MACJ;AAAA,IACJ,CAAC;AAAA,EACL,CAAC;AAED,WAAS,iBAAiB,MAAM;AAC5B,SAAK,qCAAqC,MAAM;AAC5C,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC;AAAA,QACpC,EAAE,KAAK,YAAY,OAAO,OAAU;AAAA,QACpC,EAAE,KAAK,gBAAgB,OAAO,OAAU;AAAA,MAC5C;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,OAAO,EAAE,QAAQ,CAAC,CAAC;AAAA,IACrC,CAAC;AAED,SAAK,wDAAwD,MAAM;AAC/D,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,KAAM,KAAM,KAAM,GAAI,CAAC,EAAE;AAAA,UACtE;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,QAAQ,iBAAiB,EAAE,QAAQ;AAAA,QAC7C,KAAK;AAAA,QACL,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL,CAAC;AAED,SAAK,4DAA4D,MAAM;AACnE,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC,CAAC,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC;AACrF,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO,EAAE,KAAK,0BAA0B,OAAO,OAAU;AAAA,QAC7D;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,QAAQ,2BAA2B,CAAC,EAAE,QAAQ;AAAA,QACxD,KAAK;AAAA,QACL,MAAM;AAAA,MACV,CAAC;AAAA,IACL,CAAC;AAED,SAAK,2CAA2C,MAAM;AAClD,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC,CAAC,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC;AAClF,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO;AAAA,cACH,yBAAyB;AAAA,cACzB,uBAAuB,IAAI,WAAW,CAAC,KAAM,GAAI,CAAC;AAAA,YACtD;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,QAAQ,WAAW,EAAE,QAAQ;AAAA,QACvC,KAAK;AAAA,QACL,yBAAyB;AAAA,QACzB,uBAAuB;AAAA,MAC3B,CAAC;AAAA,IACL,CAAC;AAED,SAAK,uEAAuE,MAAM;AAE9E,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC;AAAA,QACpC,EAAE,KAAK,YAAY,OAAO,OAAU;AAAA,QACpC,EAAE,KAAK,gBAAgB,OAAO,OAAU;AAAA,MAC5C;AACA,aAAO,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE,KAAK,KAAK;AAAA,IAChE,CAAC;AAED,SAAK,gDAAgD,MAAM;AACvD,YAAM,QAAQ,WAAW;AACzB,aAAO,cAAc,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK;AAAA,IACnD,CAAC;AAED,SAAK,mEAAmE,MAAM;AAC1E,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE;AAAA,UACjD;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE,IAAI,KAAK,KAAK;AAAA,IACpE,CAAC;AAED,SAAK,sDAAsD,MAAM;AAC7D,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC,CAAC,EAAE,KAAK,YAAY,OAAO,OAAU,CAAC;AAC9E,aAAO,MAAM,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE,QAAQ,iBAAiB;AAAA,IACrF,CAAC;AAED,SAAK,mFAAmF,MAAM;AAI1F,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,UACpD;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,MAAM,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE;AAAA,QACpD;AAAA,MACJ;AAAA,IACJ,CAAC;AAED,SAAK,oDAAoD,MAAM;AAC3D,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,yBAAyB;AAAA,YACrB,KAAK;AAAA,YACL,gBAAgB;AAAA,UACpB;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,UACpD;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,KAAK,OAAO,OAAO,EAAE,KAAK,CAAC,EAAE,QAAQ;AAAA,QAC/C;AAAA,QACA;AAAA,MACJ,CAAC;AACD,aAAO,OAAO,QAAQ,uBAAuB,EAAE,QAAQ;AAAA,QACnD,KAAK;AAAA,QACL,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL,CAAC;AAAA,EACL,CAAC;AAED,WAAS,kBAAkB,MAAM;AAC7B,SAAK,sDAAsD,MAAM;AAC7D,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,6BAA6B;AAAA,YACzB,KAAK;AAAA,YACL,MAAM;AAAA,UACV;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,eAAe,OAAO,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ;AAAA,QAC/E,KAAK;AAAA,QACL,MAAM;AAAA,MACV,CAAC;AAED,aAAO,eAAe,OAAO,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS;AAAA,IACxF,CAAC;AAED,SAAK,oCAAoC,MAAM;AAC3C,YAAM,QAAQ,WAAW;AACzB;AAAA,QACI,eAAe,OAAO,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAAA,MACxE,EAAE,SAAS;AAAA,IACf,CAAC;AAAA,EACL,CAAC;AAED,WAAS,iBAAiB,MAAM;AAC5B,SAAK,qDAAqD,YAAY;AAClE,YAAM,QAAkB,CAAC;AACzB,YAAM,IAAI,cAAc,OAAO,YAAY,YAAY;AACnD,cAAM,KAAK,SAAS;AACpB,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC1C,cAAM,KAAK,OAAO;AAAA,MACtB,CAAC;AACD,YAAM,IAAI,cAAc,OAAO,YAAY,YAAY;AACnD,cAAM,KAAK,SAAS;AACpB,cAAM,KAAK,OAAO;AAAA,MACtB,CAAC;AACD,YAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC;AACxB,aAAO,KAAK,EAAE,QAAQ,CAAC,WAAW,SAAS,WAAW,OAAO,CAAC;AAAA,IAClE,CAAC;AAED,SAAK,8DAA8D,YAAY;AAC3E,UAAI,OAAO;AACX,YAAM,IAAI,cAAc,SAAS,YAAY,YAAY;AAErD,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC1C,eAAO,IAAI,EAAE,KAAK,IAAI;AAAA,MAC1B,CAAC;AACD,YAAM,IAAI,cAAc,SAAS,YAAY,YAAY;AACrD,eAAO;AAAA,MACX,CAAC;AACD,YAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,IAC5B,CAAC;AAED,SAAK,2EAA2E,YAAY;AACxF,YAAM,IAAI,cAAc,OAAO,YAAY,YAAY;AACnD,cAAM,IAAI,MAAM,MAAM;AAAA,MAC1B,CAAC;AACD,YAAM,OAAO,CAAC,EAAE,QAAQ,QAAQ,MAAM;AACtC,YAAM,IAAI,MAAM,cAAc,OAAO,YAAY,YAAY,IAAI;AACjE,aAAO,CAAC,EAAE,KAAK,IAAI;AAAA,IACvB,CAAC;AAAA,EACL,CAAC;AACL;;;ACnoBA,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,eAAe;AACxB,SAAS,cAAc,SAAS,qBAAqB;AAErD,SAAS,yBAAyB;AAOlC,SAAS,qCAAqC,QAAgC;AAC1E,QAAM,gBAAgB,gBAAgB,gBAAgB,OAAO,SAAS,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE;AACvF,QAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,MAAI,IAAI,eAAe,CAAC;AACxB,MAAI,IAAI,OAAO,SAAS,IAAI,EAAE,GAAG,EAAE;AACnC,SAAO;AACX;AAKA,SAAS,aAAa,QAGpB;AACE,MAAI,OAAO,WAAW,IAAI;AACtB,UAAM,SAAS,aAAa,EAAE,MAAM,QAAQ,OAAO,SAAS,QAAQ,cAAc,CAAC;AACnF,UAAM,UAAU,OAAO,EAAE;AACzB,WAAO,EAAE,WAAW,QAAQ,WAAW,MAAM,CAAC,SAAS,QAAQ,KAAK,IAAI,EAAE;AAAA,EAC9E;AACA,MAAI,OAAO,WAAW,IAAI;AACtB,UAAM,gBAAgB,qCAAqC,MAAM;AACjE,WAAO;AAAA,MACH,WAAW,QAAQ,aAAa,aAAa;AAAA,MAC7C,MAAM,CAAC,SAAS,QAAQ,KAAK,MAAM,aAAa;AAAA,IACpD;AAAA,EACJ;AACA,QAAM,IAAI;AAAA,IACN,6DAA6D,OAAO,MAAM;AAAA,EAC9E;AACJ;AAUO,SAAS,qBAAqB,OAAyC;AAC1E,MAAI,MAAM,QAAQ,uBAAuB,MAAM,QAAQ,2BAA2B;AAC9E,UAAM,IAAI;AAAA,MACN,4BAA4B,MAAM,GAAG;AAAA,IACzC;AAAA,EACJ;AACA,QAAM,SAAS,QAAQ,MAAM,cAAc;AAC3C,QAAM,EAAE,WAAW,KAAK,IAAI,aAAa,MAAM;AAC/C,SAAO,kBAAkB,WAAW,WAAW,OAAO,SAAS,KAAK,IAAI,CAAC;AAC7E;AAiBA,eAAsB,wBAClB,SACA,UAC8B;AAC9B,QAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,QAAM,QAAQ,eAAe,OAAO,QAAQ;AAC5C,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,qBAAqB,KAAK;AACrC;AAEA,IAAI,QAAoB;AAepB,MAAS,cAAT,SAAqB,OAAgC;AACjD,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B,GAES,cAAT,WAKE;AAIE,UAAM,SAAS,qBAAqB,UAAU;AAC9C,UAAM,SAAS,aAAa,EAAE,MAAM,QAAQ,OAAO,SAAS,QAAQ,cAAc,CAAC;AACnF,UAAM,UAAU,OAAO,EAAE;AACzB,WAAO;AAAA,MACH;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,KAAKC,OAAM,MAAM;AAAA,MACjB,MAAM,CAAC,QAAQ,QAAQ,KAAK,GAAG;AAAA,IACnC;AAAA,EACJ;AAtBS,EAAAC,eAAA,aAIAC,eAAA;AAlBT,QAAM,EAAE,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC/C,QAAM,EAAE,aAAa,OAAO,IAAI,MAAa;AAC7C,QAAM,EAAE,OAAO,IAAI,MAAa;AAChC,QAAM,EAAE,MAAM,SAAS,IAAI,MAAa;AACxC,QAAM,EAAE,WAAAC,WAAU,IAAI,MAAa;AACnC,QAAM,EAAE,YAAY,qBAAqB,IAAI,MAAa;AAC1D,QAAM,EAAE,OAAAH,OAAM,IAAI,MAAa;AAE/B,MAAI;AACJ,aAAW,MAAM;AACb,iBAAa,YAAY,SAAS,OAAO,GAAG,mBAAmB,CAAC;AAChE,WAAO,MAAM,OAAO,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AA0BD,WAAS,2BAA2B,MAAM;AACtC,SAAK,6CAA6C,YAAY;AAC1D,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,SAAS,MAAM,wBAAwB,SAAS;AAAA,QAClD,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,SAAS;AAAA,IAC5B,CAAC;AAED,SAAK,+EAA+E,YAAY;AAC5F,YAAM,EAAE,KAAK,UAAU,IAAI,YAAY;AACvC,YAAMG;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,IAAI;AAAA,UACvE;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,IAAI,SAAS;AAC5B,aAAO,QAAQ,SAAS,EAAE,QAAQ,SAAS;AAAA,IAC/C,CAAC;AAED,SAAK,uEAAuE,YAAY;AACpF,YAAM,EAAE,KAAK,UAAU,IAAI,YAAY;AACvC,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,IAAI;AAAA,UACvE;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AAOD,YAAM,UAAU,IAAI,YAAY,EAAE,OAAO,YAAY;AAGrD,YAAM,UAAU,IAAI,WAAW;AAAA,QAC3B,GAAG,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,QACrC,GAAG;AAAA,QACH,GAAG,IAAI,YAAY,EAAE,OAAO,UAAU;AAAA,MAC1C,CAAC;AACD,YAAM,YAAY,MAAM,OAAQ,UAAU,OAAO;AACjD,aAAO,QAAQ,OAAO,WAAW,SAAS,SAAS,CAAC,EAAE,KAAK,IAAI;AAAA,IACnE,CAAC;AAED,SAAK,wDAAwD,YAAY;AAErE,YAAM,gBACF;AAEJ,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB;AAAA,cACf,KAAK;AAAA,cACL,gBAAgB;AAAA,YACpB;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,IAAI,SAAS;AAI5B,YAAM,EAAE,WAAW,eAAe,IAAI,YAAY;AAClD,aAAO,QAAQ,SAAS,EAAE,QAAQ,cAAc;AAIhD,YAAM,UAAU,IAAI,YAAY,EAAE,OAAO,oBAAoB;AAC7D,YAAM,UAAU,IAAI,WAAW;AAAA,QAC3B,GAAG,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,QACrC,GAAG;AAAA,QACH,GAAG,IAAI,YAAY,EAAE,OAAO,UAAU;AAAA,MAC1C,CAAC;AACD,YAAM,MAAM,MAAM,OAAQ,UAAU,OAAO;AAC3C,aAAO,QAAQ,OAAO,KAAK,SAAS,cAAc,CAAC,EAAE,KAAK,IAAI;AAAA,IAClE,CAAC;AAED,SAAK,kDAAkD,YAAY;AAC/D,YAAM,EAAE,KAAK,UAAU,IAAI,YAAY;AACvC,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,yBAAyB;AAAA,cACrB,KAAK;AAAA,cACL,gBAAgB;AAAA,YACpB;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,QAAQ,SAAS,EAAE,QAAQ,SAAS;AAAA,IAC/C,CAAC;AAED,SAAK,2DAA2D,YAAY;AACxE,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,6BAA6B,EAAE,KAAK,0BAA0B,MAAM,EAAE;AAAA,UAC1E;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM;AAAA,QACF,wBAAwB,YAAY,GAAG,GAAG;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,0DAA0D;AAAA,IAChF,CAAC;AAED,SAAK,0DAA0D,YAAY;AACvE,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,aAAa;AAAA,cACT,KAAK;AAAA,cACL,yBAAyB;AAAA,cACzB,uBAAuB;AAAA,YAC3B;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM;AAAA,QACF,wBAAwB,YAAY,GAAG,GAAG;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,+CAA+C;AAAA,IACrE,CAAC;AAED,SAAK,iEAAiE,YAAY;AAC9E,YAAM,IAAI,YAAY;AAEtB,YAAM,kBAAkB,IAAI,WAAW,EAAE,EAAE,KAAK,CAAI;AACpD,YAAM,eAAe,aAAa;AAAA,QAC9B,MAAM;AAAA,QACN,OAAO;AAAA,QACP,QAAQ;AAAA,MACZ,CAAC,EAAE,EAAE;AAEL,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,EAAE,IAAI;AAAA,UACzE;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AACA,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB;AAAA,cACf,KAAK;AAAA,cACL,gBAAgBH,OAAM,eAAe;AAAA,YACzC;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,UAAU,MAAM,wBAAwB,YAAY,OAAO,GAAG;AAAA,QAChE,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,YAAM,UAAU,MAAM,wBAAwB,YAAY,OAAO,GAAG;AAAA,QAChE,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,SAAS,SAAS,EAAE,QAAQ,EAAE,SAAS;AAC9C,aAAO,SAAS,SAAS,EAAE,QAAQ,aAAa,SAAS;AACzD,aAAO,SAAS,SAAS,EAAE,IAAI,QAAQ,SAAS,SAAS;AAAA,IAC7D,CAAC;AAED,SAAK,+CAA+C,YAAY;AAG5D,YAAMG;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB;AAAA,cACf,KAAK;AAAA,cACL,gBAAgBH,OAAM,IAAI,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;AAAA,YACpD;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM;AAAA,QACF,wBAAwB,YAAY,GAAG,GAAG;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,qCAAqC;AAAA,IAC3D,CAAC;AAAA,EACL,CAAC;AACL;AA/Qa,IAAAC;AAIA,IAAAC;;;AFvFb,IAAME,OAAMC,cAAa,UAAU;AA6DnC,eAAsB,0BAClB,SACA,SACA,WACA,UAA4C,CAAC,GACf;AAC9B,SAAO,cAAc,QAAQ,OAAO,QAAQ,YAAY,YAAY;AAChE,UAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,UAAM,aAAa,QAAQ,cAAc,qBAAqB,OAAO,SAAS;AAC9E,IAAAC,KAAI,MAAM,6BAA6B;AAAA,MACnC,WAAW,QAAQ;AAAA,MACnB,WAAW,UAAU,IAAI,CAAC,MAAM,EAAE,GAAG;AAAA,MACrC;AAAA,MACA,YAAY,QAAQ,eAAe;AAAA,IACvC,CAAC;AAED,UAAM,SAAS,MAAM,QAAQ,0BAA0B;AAAA,MACnD,kBAAkB,QAAQ;AAAA,MAC1B;AAAA,MACA;AAAA,IACJ,CAAC;AAED,QAAI,OAAO,MAAM,GAAG;AAChB,YAAM,IAAI,MAAM,qCAAqC,OAAO,MAAM,OAAO,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,cAAc,OAAO,WAAW,OAAO,KAAK;AACzD,QAAI,SAAS,OAAO;AAChB,YAAM,UAAU,QAAQ,OAAO,MAAM,QAAQ,UAAU;AAAA,IAC3D;AAEA,WAAO,OAAO;AAAA,EAClB,CAAC;AACL;AAQA,eAAsB,oBAClB,SACA,UACgC;AAChC,QAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,SAAO,eAAe,OAAO,QAAQ;AACzC;AAeA,eAAsB,wBAClB,SACA,SACA,UACuB;AAKvB,SAAO,cAAc,QAAQ,OAAO,QAAQ,YAAY,YAAY;AAKhE,UAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,UAAM,MAAM,eAAe,OAAO,QAAQ;AAC1C,QAAI,IAAK,QAAO,qBAAqB,GAAG;AAExC,IAAAA,KAAI,MAAM,mDAAmD,EAAE,UAAU,SAAS,IAAI,CAAC;AAMvF,UAAM,aAAa,qBAAqB,OAAO,CAAC,QAAQ,CAAC;AACzD,UAAM,SAAS,MAAM,QAAQ,0BAA0B;AAAA,MACnD,kBAAkB,QAAQ;AAAA,MAC1B,WAAW,CAAC,QAAQ;AAAA,MACpB;AAAA,IACJ,CAAC;AACD,QAAI,OAAO,MAAM,GAAG;AAChB,YAAM,IAAI,MAAM,qCAAqC,OAAO,MAAM,OAAO,EAAE;AAAA,IAC/E;AACA,UAAM,WAAW,OAAO;AACxB,UAAM,OAAO,cAAc,OAAO,CAAC,QAAQ,GAAG,QAAQ;AACtD,QAAI,SAAS,OAAO;AAChB,YAAM,UAAU,QAAQ,OAAO,MAAM,QAAQ,UAAU;AAAA,IAC3D;AAEA,UAAM,UAAU,SAAS,CAAC;AAC1B,QAAI,CAAC,SAAS;AAGV,YAAM,IAAI;AAAA,QACN,yEAAoE,SAAS,GAAG;AAAA,MACpF;AAAA,IACJ;AACA,QAAI,QAAQ,QAAQ,aAAa;AAC7B,YAAM,IAAI;AAAA,QACN,uCAAuC,QAAQ,GAAG,QAAQ,SAAS,GAAG;AAAA,MAC1E;AAAA,IACJ;AAIA,UAAM,aAAa,eAAe,MAAM,QAAQ;AAChD,QAAI,CAAC,YAAY;AAGb,YAAM,IAAI;AAAA,QACN,oFAAoF,SAAS,GAAG;AAAA,MACpG;AAAA,IACJ;AACA,WAAO,qBAAqB,UAAU;AAAA,EAC1C,CAAC;AACL;AAEA,IAAI,QAAoB;AAqBpB,MAAS,cAAT,SAAqB,OAAgC;AAEjD,WAAO,EAAE,OAAO,YAAY,eAAe;AAAA,EAC/C,GAKS,cAAT,SAAqB,MAEL;AACZ,WAAO;AAAA,MACH,2BAA2B,GAAG;AAAA,QAC1B,KAAK,8BACA,YAAY;AACT,gBAAM,IAAI,MAAM,oDAAoD;AAAA,QACxE;AAAA,MACR;AAAA,IACJ;AAAA,EACJ;AAnBS,EAAAC,eAAA,aAQAC,eAAA;AA5BT,QAAM,EAAE,UAAU,MAAM,QAAQ,IAAI,WAAW,IAAI;AACnD,QAAM,EAAE,IAAI,IAAI,IAAI,MAAa;AACjC,QAAM,EAAE,aAAa,OAAO,IAAI,MAAa;AAC7C,QAAM,EAAE,OAAO,IAAI,MAAa;AAChC,QAAM,EAAE,MAAM,SAAS,IAAI,MAAa;AAIxC,QAAM,EAAE,sBAAsB,WAAW,IAAI,MAAa;AAC1D,QAAM,EAAE,OAAAC,OAAM,IAAI,MAAa;AAE/B,MAAI;AACJ,aAAW,MAAM;AAIb,qBAAiB,YAAY,SAAS,OAAO,GAAG,YAAY,CAAC;AAC7D,WAAO,MAAM,OAAO,gBAAgB,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACxE,CAAC;AAuBD,WAAS,6BAA6B,MAAM;AACxC,SAAK,6DAA6D,YAAY;AAC1E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU;AAAA,QACZ;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE;AAAA,UACvD;AAAA,QACJ;AAAA,QACA,EAAE,KAAK,YAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,OAAO;AAAA,QACrB;AAAA,MACJ,CAAC;AAED,YAAM,WAAW,MAAM,0BAA0B,SAAS,YAAY,QAAQ,GAAG;AAAA,QAC7E,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD,CAAC;AAED,aAAO,QAAQ,EAAE,aAAa,CAAC;AAC/B,aAAO,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,QAAQ;AAClD,aAAO,SAAS,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ;AAAA,QACpD;AAAA,QACA;AAAA,MACJ,CAAC;AACD,aAAO,QAAQ,EAAE,QAAQ,OAAO;AAAA,IACpC,CAAC;AAED,SAAK,0CAA0C,YAAY;AACvD,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,CAAC;AAAA,QAChB;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,iBAAiB,GAAG,CAAC,CAAC;AAE3E,aAAO,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,iBAAiB;AAAA,IAC/D,CAAC;AAED,SAAK,kDAAkD,YAAY;AAC/D,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,CAAC;AAAA,QAChB;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG,CAAC,CAAC;AAE7D,aAAO,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,QAAQ;AAAA,IAChD,CAAC;AAED,SAAK,yDAAyD,YAAY;AACtE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,EAAE,KAAK,YAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,QAC9D;AAAA,MACJ,CAAC;AAED,YAAM;AAAA,QACF;AAAA,QACA,YAAY,GAAG;AAAA,QACf,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAAA,QAC/C,EAAE,YAAY,WAAW;AAAA,MAC7B;AAEA,aAAO,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,UAAU;AAAA,IAClD,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,EAAE,KAAK,YAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,QAC9D;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,QACvD,EAAE,KAAK,0BAA0B,OAAO,EAAE;AAAA,MAC9C,CAAC;AAED,YAAM,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC;AACpC,aAAO,KAAK,GAAG,EAAE,KAAK,wBAAwB;AAC9C,UAAI,KAAK,QAAQ,0BAA0B;AACvC,eAAO,KAAK,KAAK,EAAE,KAAK,CAAC;AAAA,MAC7B;AAAA,IACJ,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,IAAI,IAAI,MAAM,qBAAqB,CAAC;AAAA,MAC5C,CAAC;AAED,YAAM;AAAA,QACF,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,UACjD,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QACjD,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,uDAAuD;AAAA,IAC7E,CAAC;AAED,SAAK,gFAAgF,YAAY;AAQ7F,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,CAAC,EAAE,KAAK,gBAAyB,OAAO,OAAU,CAAC;AACnE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,OAAO;AAAA,QACrB;AAAA,MACJ,CAAC;AAED,YAAM,WAAW,MAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,QACxE,EAAE,KAAK,eAAe,OAAO,OAAU;AAAA,MAC3C,CAAC;AAED,YAAM,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC;AACpC,aAAO,KAAK,GAAG,EAAE,KAAK,aAAa;AACnC,aAAO,QAAQ,EAAE,QAAQ,OAAO;AAAA,IACpC,CAAC;AAED,SAAK,sEAAsE,YAAY;AAInF,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,CAAC;AAAA,QAChB;AAAA,MACJ,CAAC;AAED,YAAM,WAAW,MAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG,CAAC,CAAC;AAE9E,aAAO,QAAQ,EAAE,aAAa,CAAC;AAC/B,aAAO,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxC,aAAO,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC/B,CAAC;AAAA,EACL,CAAC;AAED,WAAS,sDAAiD,MAAM;AAC5D,aAAS,kBAAkB,SAAiC;AACxD,aAAO,GAAG;AAAA,QACN;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,QAAQ;AAAA,UACrC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,SAAK,+CAA+C,YAAY;AAC5D,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,QACtD;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,QACvD,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAED,aAAO,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,QAAQ;AAAA,IAChD,CAAC;AAED,SAAK,gEAAgE,YAAY;AAC7E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAOC,SAAQ;AACtC,mBAAS,KAAKA,IAAG;AACjB,iBAAO,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,QACtD;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,MAA6B,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAElF,YAAM,0BAA0B,SAAS,SAAS,GAAG;AACrD,YAAM,0BAA0B,SAAS,SAAS,GAAG;AAErD,aAAO,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,UAAU,UAAU,CAAC;AAAA,IAC5E,CAAC;AAED,SAAK,uDAAuD,YAAY;AACpE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAOA,SAAQ;AACtC,mBAAS,KAAKA,IAAG;AACjB,iBAAO,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,QACtD;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,MAA6B,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAMlF,YAAM,0BAA0B,SAAS,SAAS,GAAG;AACrD,YAAM,0BAA0B,SAAS,SAAS,KAAK,EAAE,YAAY,SAAS,CAAC;AAE/E,aAAO,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,UAAU,QAAQ,CAAC;AAAA,IAC1E,CAAC;AAED,SAAK,mEAAmE,YAAY;AAChF,YAAM,UAAU,IAAI,WAAW,CAAC,KAAM,KAAM,KAAM,GAAI,CAAC;AACvD,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,kBAAkB,OAAO;AAAA,MACpE,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAGD,YAAM,SAAS,MAAM,oBAAoB,SAAS;AAAA,QAC9C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,QAAQ;AAAA,QACnB,KAAK;AAAA,QACL,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG;AAAA,UACC,EAAE,KAAK,YAAqB,OAAO,OAAU;AAAA,UAC7C,EAAE,KAAK,gBAAyB,OAAO,OAAU;AAAA,QACrD,CAAC;AAAA,MACT,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD,CAAC;AAED;AAAA,QACI,MAAM,oBAAoB,SAAS,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAAA,MACrF,EAAE,SAAS;AACX;AAAA,QACI,MAAM,oBAAoB,SAAS;AAAA,UAC/B,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,SAAS;AAAA,IACf,CAAC;AAED,SAAK,kEAAkE,YAAY;AAK/E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AAEjB,iBAAO;AAAA,YACH,IAAI,UAAU;AAAA,cAAI,CAAC,IAAI,MACnB,MAAM,IACA;AAAA,gBACI,KAAK;AAAA,gBACL,OAAO;AAAA,kBACH,KAAK;AAAA,kBACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE;AAAA,gBACjD;AAAA,cACJ,IACA,EAAE,KAAK,YAAqB,OAAO,OAAU;AAAA,YACvD;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAGD,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD,CAAC;AAED,aAAO,SAAS,SAAS,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,QAAQ;AAAA,IAClE,CAAC;AAED,SAAK,qDAAqD,YAAY;AAElE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAOA,SAAQ;AACtC,mBAAS,KAAKA,IAAG;AACjB,iBAAO,GAAG;AAAA,YACN;AAAA,cACI,KAAK;AAAA,cACL,OAAO;AAAA,gBACH,KAAK;AAAA,gBACL,OAAO;AAAA,kBACH,yBAAyB;AAAA,kBACzB,uBAAuB,IAAI,WAAW,CAAC,GAAI,CAAC;AAAA,gBAChD;AAAA,cACJ;AAAA,YACJ;AAAA,UACJ,CAAC;AAAA,QACL;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,MAA6B,CAAC,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC;AAE5E,YAAM,0BAA0B,SAAS,SAAS,GAAG;AACrD,YAAM,0BAA0B,SAAS,SAAS,GAAG;AAErD,aAAO,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,UAAU,QAAQ,CAAC;AAAA,IAC1E,CAAC;AAED,SAAK,wFAAwF,YAAY;AAKrG,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AAEtC,gBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AACzC,gBAAM,MAAM,IAAI,UAAU,CAAC,GAAG;AAC9B,iBAAO,GAAG;AAAA,YACN;AAAA,cACI,KAAK;AAAA,cACL,OACI,QAAQ,sBACF;AAAA,gBACI,KAAK;AAAA,gBACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,cACpD,IACA;AAAA,gBACI,KAAK;AAAA,gBACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,cACpD;AAAA,YACd;AAAA,UACJ,CAAC;AAAA,QACL;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,QAAQ,IAAI;AAAA,QACd,0BAA0B,SAAS,SAAS;AAAA,UACxC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QACjD,CAAC;AAAA,QACD,0BAA0B,SAAS,SAAS;AAAA,UACxC,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,QACvD,CAAC;AAAA,MACL,CAAC;AAED;AAAA,QACI,MAAM,oBAAoB,SAAS;AAAA,UAC/B,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,IAAI,SAAS;AACf;AAAA,QACI,MAAM,oBAAoB,SAAS;AAAA,UAC/B,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,IAAI,SAAS;AAAA,IACnB,CAAC;AAED,SAAK,iEAAiE,YAAY;AAC9E,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,MACtF,CAAC;AAED,YAAM,WAAW,YAAY,OAAO;AACpC,YAAM,WAAW,YAAY,OAAO;AAEpC,YAAM,0BAA0B,SAAS,UAAU;AAAA,QAC/C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAGD;AAAA,QACI,MAAM,oBAAoB,UAAU;AAAA,UAChC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,SAAS;AACX;AAAA,QACI,MAAM,oBAAoB,UAAU;AAAA,UAChC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,IAAI,SAAS;AAAA,IACnB,CAAC;AAAA,EACL,CAAC;AAED,WAAS,uBAAuB,MAAM;AAClC,SAAK,uCAAuC,YAAY;AACpD,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,SAAS,MAAM,oBAAoB,SAAS;AAAA,QAC9C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,SAAS;AAAA,IAC5B,CAAC;AAED,SAAK,wDAAwD,YAAY;AACrE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG;AAAA,UACC;AAAA,YACI,KAAK;AAAA,YACL,OAAO;AAAA,cACH,KAAK;AAAA,cACL,OAAO;AAAA,YACX;AAAA,UACJ;AAAA,QACJ,CAAC;AAAA,MACT,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,0BAA0B,OAAO,EAAE;AAAA,MAC9C,CAAC;AAED;AAAA,QACI,MAAM,oBAAoB,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC;AAAA,MAClF,EAAE,QAAQ,EAAE,KAAK,0BAA0B,MAAM,EAAE,CAAC;AAEpD;AAAA,QACI,MAAM,oBAAoB,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC;AAAA,MAClF,EAAE,SAAS;AAAA,IACf,CAAC;AAAA,EACL,CAAC;AAED,WAAS,2BAA2B,MAAM;AAEtC,UAAM,UAAU,qBAAqB,UAAU;AAE/C,aAAS,4BAA4B;AACjC,aAAO,GAAG;AAAA,QACN;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,QAAQ;AAAA,UACrC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,SAAK,2DAA2D,YAAY;AACxE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,0BAA0B;AAAA,QACrC;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAG/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AACD,aAAO,QAAQ,EAAE,aAAa,CAAC;AAI/B,YAAM,SAAS,MAAM,wBAAwB,SAAS,SAAS;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,OAAO,SAAS,EAAE,eAAe,UAAU;AAClD,aAAO,QAAQ,EAAE,aAAa,CAAC;AAAA,IACnC,CAAC;AAED,SAAK,6DAA6D,YAAY;AAC1E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,0BAA0B;AAAA,QACrC;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAG/B,YAAM,SAAS,MAAM,wBAAwB,SAAS,SAAS;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,OAAO,SAAS,EAAE,eAAe,UAAU;AAClD,aAAO,QAAQ,EAAE,aAAa,CAAC;AAE/B,aAAO,SAAS,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC;AAAA,IACjF,CAAC;AAED,SAAK,mEAA8D,YAAY;AAC3E,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG,CAAC,EAAE,KAAK,YAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,MAC3D,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,2CAA2C;AAAA,IACjE,CAAC;AAED,SAAK,0EAA0E,YAAY;AAGvF,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,GAAG,CAAC,CAAC;AAAA,MAChD,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,sCAAsC;AAAA,IAC5D,CAAC;AAED,SAAK,4CAA4C,YAAY;AACzD,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG,CAAC,EAAE,KAAK,gBAAyB,OAAO,OAAU,CAAC,CAAC;AAAA,MAC/D,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,qDAAqD;AAAA,IAC3E,CAAC;AAED,SAAK,kEAAkE,YAAY;AAC/E,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,IAAI,IAAI,MAAM,kBAAkB,CAAC;AAAA,MACzC,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,kBAAkB;AAAA,IACxC,CAAC;AAED,SAAK,gDAAgD,YAAY;AAC7D,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,0BAA0B;AAAA,MACrE,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,wBAAwB,SAAS,SAAS;AAAA,QAC5C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AAGD,YAAM,SAAS,MAAM,oBAAoB,SAAS;AAAA,QAC9C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,QAAQ,GAAG,EAAE,KAAK,mBAAmB;AAAA,IAChD,CAAC;AAED,SAAK,gFAAgF,YAAY;AAM7F,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AAGjB,gBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AACzC,iBAAO,0BAA0B;AAAA,QACrC;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,CAAC,SAAS,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,QACzC,wBAAwB,SAAS,SAAS;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,QACD,wBAAwB,SAAS,SAAS;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,CAAC;AAID,aAAO,QAAQ,EAAE,aAAa,CAAC;AAE/B,aAAO,QAAQ,SAAS,EAAE,eAAe,UAAU;AACnD,aAAO,QAAQ,SAAS,EAAE,eAAe,UAAU;AACnD,aAAOD,OAAM,QAAQ,SAAS,CAAC,EAAE,KAAKA,OAAM,QAAQ,SAAS,CAAC;AAAA,IAClE,CAAC;AAAA,EACL,CAAC;AACL;AAxpBa,IAAAF;AAQA,IAAAC;","names":["createLogger","toHex","fakeAdapter","knownSecret","saveCache","log","createLogger","log","fakeAdapter","makeSession","toHex","req"]}
1	+ {"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts CHANGED Viewed

@@ -1,10 +1,11 @@
-import { T as TerminalAdapter } from './adapter-Dt3ryKnw.js';
-export { a as TerminalAdapterOptions, c as createTerminalAdapter } from './adapter-Dt3ryKnw.js';
+import { T as TerminalAdapter } from './host-C1yt3kMf.js';
+export { A as AllocatableResource, a as ApAllocationOutcome, O as OnExistingAllowancePolicy, R as RequestResourceAllocationOptions, b as TerminalAdapterOptions, c as createTerminalAdapter, r as requestResourceAllocation, s as sendResourceAllocation } from './host-C1yt3kMf.js';
 import { UserSession } from '@novasamatech/host-papp';
 export { AllowanceError, AllowanceErrorReason, AllowanceService, HostMetadata, PairingStatus, PappAdapter, SS_PASEO_STABLE_STAGE_ENDPOINTS, SS_STABLE_STAGE_ENDPOINTS, SigningPayloadRequest, SigningPayloadResponse, SigningRawRequest, StoredUserSession, UserSession } from '@novasamatech/host-papp';
 import { PolkadotSigner } from 'polkadot-api';
 import { StatementProver } from '@novasamatech/statement-store';
 import { StorageAdapter } from '@novasamatech/storage-adapter';
+import 'neverthrow';
 /**
  * Create a PolkadotSigner from a QR-paired session.
@@ -69,11 +70,41 @@ interface ProductAccountRef {
      * wallet's selected/root account (`session.remoteAccount.accountId`). A
      * mismatch produces an invalid signature.
      *
-     * When omitted, the signer falls back to the session's selected account,
-     * which is only correct when the product account *is* the selected account.
+     * When omitted, the signer soft-derives it from the session's root account
+     * (`mnemonic + "/product/{productId}/{derivationIndex}"`), which is correct
+     * for every product account. Supply it explicitly only to avoid the
+     * re-derivation or when you've already derived it elsewhere.
      */
     publicKey?: Uint8Array;
 }
+declare const INCOMPLETE_SESSION_MESSAGE = "Stored login session is missing the root account public key. Run \"logout\" and then \"login\" to pair again.";
+/**
+ * The session's handshake-time root account public key (`rootUserAccountId` =
+ * the user's bare-mnemonic keypair on current mobile builds). This is the
+ * parent key product accounts soft-derive from. host-papp's live `UserSession`
+ * doesn't surface it on the public type, so we read it structurally.
+ *
+ * @throws {@link INCOMPLETE_SESSION_MESSAGE} if the session predates the
+ *   `rootAccountId` field (a stale login that must re-pair).
+ */
+declare function sessionRootPublicKey(session: UserSession): Uint8Array;
+/**
+ * Soft-derive a product account's sr25519 public key from a paired session's
+ * root account.
+ *
+ * This is the single source of truth for product-account math. The session
+ * signer uses it to stamp the correct signer address; consumers that need the
+ * product address *without* building a signer (e.g. a login-status display
+ * triple) call it directly so the displayed address can't desync from what the
+ * signer actually signs with.
+ *
+ * sr25519 soft derivation is composable on public keys alone, so deriving from
+ * `session.rootAccountId` locally produces the SAME key the host derives
+ * privately via `mnemonic + "/product/{productId}/{derivationIndex}"`.
+ *
+ * @throws {@link INCOMPLETE_SESSION_MESSAGE} on a stale session with no root key.
+ */
+declare function deriveProductPublicKey(session: UserSession, ref: ProductAccountRef): Uint8Array;
 /**
  * Create a `PolkadotSigner` backed by a QR-paired mobile wallet session,
  * using the session's **default account** (`derivationIndex: 0`).
@@ -84,9 +115,8 @@ interface ProductAccountRef {
  * @param adapter The {@link TerminalAdapter} that loaded the session. Its `appId`
  *   is used as the `productId` in the wire request.
  * @param publicKey The product account's sr25519 public key for
- *   `[adapter.appId, 0]`, as derived by the host. See
- *   {@link ProductAccountRef.publicKey}; omit only when the product account is
- *   the session's selected account.
+ *   `[adapter.appId, 0]`. Optional — when omitted it's soft-derived from the
+ *   session root. See {@link ProductAccountRef.publicKey}.
  */
 declare function createSessionSigner(session: UserSession, adapter: TerminalAdapter, publicKey?: Uint8Array): PolkadotSigner;
 /**
@@ -228,4 +258,4 @@ declare function renderQrCode(data: string, options?: QrRenderOptions): Promise<
  */
 declare function createNodeStorageAdapter(appId: string, storageDir?: string): StorageAdapter;
-export { type ProductAccountRef, type QrRenderOptions, TerminalAdapter, createNodeStorageAdapter, createSessionSigner, createSessionSignerForAccount, getBulletinSigner, getStatementStoreProver, hasBulletinAllowance, hasStatementStoreAllowance, renderQrCode, waitForSessions };
+export { INCOMPLETE_SESSION_MESSAGE, type ProductAccountRef, type QrRenderOptions, TerminalAdapter, createNodeStorageAdapter, createSessionSigner, createSessionSignerForAccount, deriveProductPublicKey, getBulletinSigner, getStatementStoreProver, hasBulletinAllowance, hasStatementStoreAllowance, renderQrCode, sessionRootPublicKey, waitForSessions };

package/dist/index.js CHANGED Viewed

@@ -1,3 +1,7 @@
+import {
+  requestResourceAllocation,
+  sendResourceAllocation
+} from "./chunk-MQGGUAWC.js";
 import {
   createNodeStorageAdapter,
   sanitizeKey
@@ -274,6 +278,7 @@ var fakeLazyClient2;
 // src/signer.ts
 import { decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";
+import { deriveProductAccountPublicKey } from "@parity/product-sdk-keys";
 function buildCreateTransactionRequest(productAccountId, callData, signedExtensions, txExtVersion) {
   const checkGenesis = signedExtensions.CheckGenesis;
   if (!checkGenesis) {
@@ -336,9 +341,25 @@ function makeRawBytesSignCallback(session, productAccountId) {
     return result.value.signature;
   };
 }
+var INCOMPLETE_SESSION_MESSAGE = 'Stored login session is missing the root account public key. Run "logout" and then "login" to pair again.';
+function sessionRootPublicKey(session) {
+  const rootAccountId = session.rootAccountId;
+  const publicKey = rootAccountId ? new Uint8Array(rootAccountId) : new Uint8Array();
+  if (publicKey.length !== 32) {
+    throw new Error(INCOMPLETE_SESSION_MESSAGE);
+  }
+  return publicKey;
+}
+function deriveProductPublicKey(session, ref) {
+  return deriveProductAccountPublicKey(
+    sessionRootPublicKey(session),
+    ref.productId,
+    ref.derivationIndex
+  );
+}
 function buildSessionSigner(session, ref) {
   const productAccountId = [ref.productId, ref.derivationIndex];
-  const publicKey = ref.publicKey ?? new Uint8Array(session.remoteAccount.accountId);
+  const publicKey = ref.publicKey ?? deriveProductPublicKey(session, ref);
   return {
     publicKey,
     // Transaction signing → host-papp `createTransaction`: the wallet builds
@@ -360,8 +381,10 @@ function createSessionSignerForAccount(session, ref) {
 if (void 0) {
   let makeSession = function(opts) {
     const accountIdBytes = opts.accountIdBytes ?? new Array(32).fill(0).map((_, i) => i);
+    const rootAccountId = opts.rootAccountId === void 0 ? Array.from(DEV_ROOT_PUBLIC_KEY) : opts.rootAccountId;
     return {
       remoteAccount: { accountId: accountIdBytes },
+      ...rootAccountId === null ? {} : { rootAccountId: new Uint8Array(rootAccountId) },
       signPayload: vi.fn(
         opts.signPayload ?? (async () => {
           throw new Error("signPayload not stubbed in this test");
@@ -390,14 +413,29 @@ if (void 0) {
   makeSession2 = makeSession, ext2 = ext, fakeAdapter2 = fakeAdapter;
   const { describe, test, expect, vi } = void 0;
   const { ok, err } = await null;
+  const { seedToAccount } = await null;
+  const DEV_ROOT_PUBLIC_KEY = seedToAccount(
+    "bottom drive obey lake curtain smoke basket hold race lonely fit walk",
+    ""
+  ).publicKey;
   describe("createSessionSigner", () => {
-    test("falls back to remoteAccount.accountId when no product key is passed", () => {
-      const bytes = Array.from({ length: 32 }, (_, i) => i);
+    test("self-derives the product key from the session root when none is passed", () => {
+      const walletBytes = Array.from({ length: 32 }, (_, i) => i);
       const signer = createSessionSigner(
-        makeSession({ accountIdBytes: bytes }),
+        makeSession({
+          accountIdBytes: walletBytes,
+          rootAccountId: Array.from(DEV_ROOT_PUBLIC_KEY)
+        }),
         fakeAdapter("test-app")
       );
-      expect(signer.publicKey).toEqual(new Uint8Array(bytes));
+      const expected = deriveProductAccountPublicKey(DEV_ROOT_PUBLIC_KEY, "test-app", 0);
+      expect(signer.publicKey).toEqual(expected);
+      expect(signer.publicKey).not.toEqual(new Uint8Array(walletBytes));
+    });
+    test("throws on a stale session with no root account key", () => {
+      expect(
+        () => createSessionSigner(makeSession({ rootAccountId: null }), fakeAdapter("test-app"))
+      ).toThrow(INCOMPLETE_SESSION_MESSAGE);
     });
     test("uses the host-supplied product-account public key when provided", () => {
       const walletBytes = Array.from({ length: 32 }, (_, i) => i);
@@ -1009,17 +1047,22 @@ if (void 0) {
 }
 export {
   AllowanceError2 as AllowanceError,
+  INCOMPLETE_SESSION_MESSAGE,
   SS_PASEO_STABLE_STAGE_ENDPOINTS,
   SS_STABLE_STAGE_ENDPOINTS,
   createNodeStorageAdapter,
   createSessionSigner,
   createSessionSignerForAccount,
   createTerminalAdapter,
+  deriveProductPublicKey,
   getBulletinSigner,
   getStatementStoreProver,
   hasBulletinAllowance,
   hasStatementStoreAllowance,
   renderQrCode,
+  requestResourceAllocation,
+  sendResourceAllocation,
+  sessionRootPublicKey,
   waitForSessions
 };
 //# sourceMappingURL=index.js.map