@parity/product-sdk-terminal 0.5.4 → 0.6.0

package/dist/chunk-MQGGUAWC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/host.ts","../src/host-cache.ts","../src/host-signer.ts"],"sourcesContent":["// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Host-runner facet of `@parity/product-sdk-terminal`. A CLI using this\n * package plays the Host role per RFC-10; this module implements the\n * three §Stakeholders Host responsibilities (AP client, cache, signer)\n * over `@novasamatech/host-papp@0.7.7`'s `UserSession`.\n *\n * @module\n */\nimport type { UserSession } from \"@novasamatech/host-papp\";\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport type { ResultAsync } from \"neverthrow\";\nimport type { PolkadotSigner } from \"polkadot-api\";\n\nimport type { TerminalAdapter } from \"./adapter.js\";\nimport {\n    type CachedAllocation,\n    loadCache,\n    mergeOutcomes,\n    pickOnExistingPolicy,\n    readCacheEntry,\n    saveCache,\n    withCacheLock,\n} from \"./host-cache.js\";\nimport { buildSignerFromEntry, createSlotAccountSigner } from \"./host-signer.js\";\n\n// `terminal` namespace matches adapter.ts / node-storage.ts.\nconst log = createLogger(\"terminal\");\n\n// Public re-exports — internal helpers (loadCache, mergeOutcomes, etc.)\n// stay private. CachedAllocation must be exported because it's the return\n// type of getCachedAllocation.\nexport type { CachedAllocation };\nexport { createSlotAccountSigner };\n\n// Types derived from `UserSession['requestResourceAllocation']` so upstream\n// codec changes surface as compile errors here, not runtime decode failures.\n// host-papp doesn't re-export these codec types from its root.\ntype ResourceAllocationRequest = Parameters<UserSession[\"requestResourceAllocation\"]>[0];\n\n/**\n * One resource a Host can request from the Account Holder. AutoSigning\n * currently returns `NotAvailable` on both Android and iOS wallets.\n */\nexport type AllocatableResource = ResourceAllocationRequest[\"resources\"][number];\n\n/**\n * `\"Ignore\"`: return existing keys if any, else allocate one slot.\n * `\"Increase\"`: add one slot to an existing allowance account.\n */\nexport type OnExistingAllowancePolicy = ResourceAllocationRequest[\"onExisting\"];\n\ntype ExtractOk<R> = R extends ResultAsync<infer T, unknown> ? T : never;\n\n/**\n * Per-resource outcome. `Allocated.value` carries the materialized payload\n * (slot account key for Bulletin/SSS; subtree key + secret for AutoSigning;\n * undefined for SC). Each entry is independent — no rollback on partial\n * success.\n */\nexport type ApAllocationOutcome = ExtractOk<\n    ReturnType<UserSession[\"requestResourceAllocation\"]>\n>[number];\n\nexport interface RequestResourceAllocationOptions {\n    /**\n     * Override the auto-picked `onExisting`. Default: `Ignore` unless every\n     * requested resource is a cached slot-table variant, then `Increase`.\n     */\n    onExisting?: OnExistingAllowancePolicy;\n}\n\n/**\n * Send the AP `request_resource_allocation` message over the paired\n * session; block on the user's mobile dialog; return outcomes in request\n * order. Granted key material is cached on disk so subsequent calls skip\n * the wallet prompt.\n *\n * @throws If the session call fails (transport, timeout, AH protocol error).\n *\n * @example\n * ```ts\n * const [session] = adapter.sessions.sessions.read();\n * const outcomes = await requestResourceAllocation(session, adapter, [\n *   { tag: \"BulletInAllowance\", value: undefined },\n * ]);\n * ```\n */\nexport async function requestResourceAllocation(\n    session: UserSession,\n    adapter: TerminalAdapter,\n    resources: AllocatableResource[],\n    options: RequestResourceAllocationOptions = {},\n): Promise<ApAllocationOutcome[]> {\n    return withCacheLock(adapter.appId, adapter.storageDir, async () => {\n        const cache = await loadCache(adapter.appId, adapter.storageDir);\n        const onExisting = options.onExisting ?? pickOnExistingPolicy(cache, resources);\n        log.debug(\"requestResourceAllocation\", {\n            productId: adapter.appId,\n            resources: resources.map((r) => r.tag),\n            onExisting,\n            autoPolicy: options.onExisting === undefined,\n        });\n\n        const outcomes = await sendResourceAllocation(\n            session,\n            adapter.appId,\n            resources,\n            onExisting,\n        );\n\n        const next = mergeOutcomes(cache, resources, outcomes);\n        if (next !== cache) {\n            await saveCache(adapter.appId, next, adapter.storageDir);\n        }\n\n        return outcomes;\n    });\n}\n\n/**\n * Send an AP `request_resource_allocation` message over the paired session and\n * return the outcomes in request order. This is the raw wire call: no disk\n * cache, no `onExisting` auto-pick, no adapter. Callers that want the caching /\n * slot-reuse behaviour should use {@link requestResourceAllocation} instead;\n * this primitive exists for consumers (e.g. `@parity/product-sdk-auth`) that\n * only hold a `productId` and manage their own policy.\n *\n * @throws If the session call fails (transport, timeout, AH protocol error).\n */\nexport async function sendResourceAllocation(\n    session: UserSession,\n    productId: string,\n    resources: AllocatableResource[],\n    onExisting: OnExistingAllowancePolicy,\n): Promise<ApAllocationOutcome[]> {\n    const result = await session.requestResourceAllocation({\n        callingProductId: productId,\n        resources,\n        onExisting,\n    });\n\n    if (result.isErr()) {\n        throw new Error(`requestResourceAllocation failed: ${result.error.message}`);\n    }\n\n    return result.value;\n}\n\n/**\n * Read a cached allowance entry without going over the wire. Returns\n * `null` if nothing's cached for `(adapter.appId, resource)`. For\n * `SmartContractAllowance`, the same `dest` must be passed — entries\n * are keyed per-dest.\n */\nexport async function getCachedAllocation(\n    adapter: TerminalAdapter,\n    resource: AllocatableResource,\n): Promise<CachedAllocation | null> {\n    const cache = await loadCache(adapter.appId, adapter.storageDir);\n    return readCacheEntry(cache, resource);\n}\n\n/**\n * Cache hit → return signer. Cache miss → call\n * {@link requestResourceAllocation} for `[resource]`, then build the signer.\n * Throws on `Rejected` / `NotAvailable`.\n *\n * @example\n * ```ts\n * const signer = await ensureSlotAccountSigner(session, adapter, {\n *   tag: \"BulletInAllowance\", value: undefined,\n * });\n * await someBulletinTx.submitAndWatch(signer);\n * ```\n */\nexport async function ensureSlotAccountSigner(\n    session: UserSession,\n    adapter: TerminalAdapter,\n    resource: AllocatableResource,\n): Promise<PolkadotSigner> {\n    // The cache-hit check and the allocation path must share the same\n    // critical section: otherwise two concurrent calls for the same\n    // resource both see an empty cache, then both serialize through the\n    // lock but each issues its own wallet prompt and burns a slot.\n    return withCacheLock(adapter.appId, adapter.storageDir, async () => {\n        // Single loadCache for the whole critical section — we hold the\n        // lock, so no other writer can change disk under us. The fast\n        // cache-hit path and the slow allocate-then-build path both\n        // reuse this in-memory `cache` reference.\n        const cache = await loadCache(adapter.appId, adapter.storageDir);\n        const hit = readCacheEntry(cache, resource);\n        if (hit) return buildSignerFromEntry(hit);\n\n        log.debug(\"ensureSlotAccountSigner: cache miss, allocating\", { resource: resource.tag });\n\n        // Use the cache-free `sendResourceAllocation` primitive, not the public\n        // `requestResourceAllocation` wrapper: `withCacheLock` is non-reentrant,\n        // so calling the wrapper from inside this critical section would\n        // deadlock on the second lock acquisition. We do the merge → save here.\n        const onExisting = pickOnExistingPolicy(cache, [resource]);\n        const outcomes = await sendResourceAllocation(\n            session,\n            adapter.appId,\n            [resource],\n            onExisting,\n        );\n        const next = mergeOutcomes(cache, [resource], outcomes);\n        if (next !== cache) {\n            await saveCache(adapter.appId, next, adapter.storageDir);\n        }\n\n        const outcome = outcomes[0];\n        if (!outcome) {\n            // Unreachable: mergeOutcomes throws on length mismatch first.\n            // Kept as a typed-non-null guard.\n            throw new Error(\n                `ensureSlotAccountSigner: protocol violation — empty outcomes for ${resource.tag}`,\n            );\n        }\n        if (outcome.tag !== \"Allocated\") {\n            throw new Error(\n                `ensureSlotAccountSigner: allocation ${outcome.tag} for ${resource.tag}`,\n            );\n        }\n\n        // Build the signer from the in-memory post-merge cache — no third\n        // disk read.\n        const freshEntry = readCacheEntry(next, resource);\n        if (!freshEntry) {\n            // Unreachable: the entry was just merged in.\n            // Kept as a typed-non-null guard against mergeOutcomes regressions.\n            throw new Error(\n                `ensureSlotAccountSigner: allocation succeeded but cache lookup returned null for ${resource.tag}`,\n            );\n        }\n        return buildSignerFromEntry(freshEntry);\n    });\n}\n\nif (import.meta.vitest) {\n    const { describe, test, expect, vi, beforeEach } = import.meta.vitest;\n    const { ok, err } = await import(\"neverthrow\");\n    const { mkdtempSync, rmSync } = await import(\"node:fs\");\n    const { tmpdir } = await import(\"node:os\");\n    const { join: pathJoin } = await import(\"node:path\");\n    // Needed by the ensureSlotAccountSigner suite. Lifted up here because\n    // top-level await is only allowed at module top-level (or inside this\n    // top-level vitest block), not inside `describe`.\n    const { mnemonicToMiniSecret, DEV_PHRASE } = await import(\"@polkadot-labs/hdkd-helpers\");\n    const { toHex } = await import(\"@polkadot-api/utils\");\n\n    let testStorageDir: string;\n    beforeEach(() => {\n        // Per-test temp dir so cache writes don't leak between tests or\n        // touch the real default storage directory. The wrapper inherits\n        // `storageDir` from `adapter.storageDir`; we pin it here.\n        testStorageDir = mkdtempSync(pathJoin(tmpdir(), \"host-test-\"));\n        return () => rmSync(testStorageDir, { recursive: true, force: true });\n    });\n\n    function fakeAdapter(appId: string): TerminalAdapter {\n        // appId + storageDir are the only fields the wrapper touches.\n        return { appId, storageDir: testStorageDir } as unknown as TerminalAdapter;\n    }\n\n    type RequestCapture = ResourceAllocationRequest;\n    type StubReturn = Awaited<ReturnType<UserSession[\"requestResourceAllocation\"]>>;\n\n    function makeSession(opts: {\n        requestResourceAllocation?: (req: RequestCapture) => Promise<StubReturn>;\n    }): UserSession {\n        return {\n            requestResourceAllocation: vi.fn(\n                opts.requestResourceAllocation ??\n                    (async () => {\n                        throw new Error(\"requestResourceAllocation not stubbed in this test\");\n                    }),\n            ),\n        } as unknown as UserSession;\n    }\n\n    describe(\"requestResourceAllocation\", () => {\n        test(\"forwards resources verbatim and returns outcomes in order\", async () => {\n            const captured: RequestCapture[] = [];\n            const stubbed = [\n                {\n                    tag: \"Allocated\" as const,\n                    value: {\n                        tag: \"BulletInAllowance\" as const,\n                        value: { slotAccountKey: new Uint8Array([1, 2, 3]) },\n                    },\n                },\n                { tag: \"Rejected\" as const, value: undefined },\n            ];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok(stubbed) as StubReturn;\n                },\n            });\n\n            const outcomes = await requestResourceAllocation(session, fakeAdapter(\"my-app\"), [\n                { tag: \"BulletInAllowance\", value: undefined },\n                { tag: \"StatementStoreAllowance\", value: undefined },\n            ]);\n\n            expect(captured).toHaveLength(1);\n            expect(captured[0].callingProductId).toBe(\"my-app\");\n            expect(captured[0].resources.map((r) => r.tag)).toEqual([\n                \"BulletInAllowance\",\n                \"StatementStoreAllowance\",\n            ]);\n            expect(outcomes).toEqual(stubbed);\n        });\n\n        test(\"uses adapter.appId as callingProductId\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok([]) as StubReturn;\n                },\n            });\n\n            await requestResourceAllocation(session, fakeAdapter(\"alt-product.dot\"), []);\n\n            expect(captured[0].callingProductId).toBe(\"alt-product.dot\");\n        });\n\n        test(\"auto-picks Ignore for an empty resources array\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok([]) as StubReturn;\n                },\n            });\n\n            await requestResourceAllocation(session, fakeAdapter(\"p\"), []);\n\n            expect(captured[0].onExisting).toBe(\"Ignore\");\n        });\n\n        test(\"forwards onExisting when explicitly set to 'Increase'\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok([{ tag: \"Rejected\" as const, value: undefined }]) as StubReturn;\n                },\n            });\n\n            await requestResourceAllocation(\n                session,\n                fakeAdapter(\"p\"),\n                [{ tag: \"BulletInAllowance\", value: undefined }],\n                { onExisting: \"Increase\" },\n            );\n\n            expect(captured[0].onExisting).toBe(\"Increase\");\n        });\n\n        test(\"forwards SmartContractAllowance derivation index\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok([{ tag: \"Rejected\" as const, value: undefined }]) as StubReturn;\n                },\n            });\n\n            await requestResourceAllocation(session, fakeAdapter(\"p\"), [\n                { tag: \"SmartContractAllowance\", value: 7 },\n            ]);\n\n            const sent = captured[0].resources[0];\n            expect(sent.tag).toBe(\"SmartContractAllowance\");\n            if (sent.tag === \"SmartContractAllowance\") {\n                expect(sent.value).toBe(7);\n            }\n        });\n\n        test(\"throws a clear error when the session call fails\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () =>\n                    err(new Error(\"mobile disconnected\")) as StubReturn,\n            });\n\n            await expect(\n                requestResourceAllocation(session, fakeAdapter(\"p\"), [\n                    { tag: \"BulletInAllowance\", value: undefined },\n                ]),\n            ).rejects.toThrow(\"requestResourceAllocation failed: mobile disconnected\");\n        });\n\n        test(\"forwards AutoSigning and returns NotAvailable verbatim (mobile-default path)\", async () => {\n            // Both Android (paritytech/polkadot-app-android-v2#563) and iOS\n            // (paritytech/polkadot-app-ios-v2#759) currently return NotAvailable\n            // for any AutoSigning request. The wrapper must round-trip both\n            // the request variant and the NotAvailable outcome without\n            // filtering, transforming, or throwing — that's the only state\n            // real users see for one of the four AllocatableResource variants\n            // today.\n            const captured: RequestCapture[] = [];\n            const stubbed = [{ tag: \"NotAvailable\" as const, value: undefined }];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok(stubbed) as StubReturn;\n                },\n            });\n\n            const outcomes = await requestResourceAllocation(session, fakeAdapter(\"p\"), [\n                { tag: \"AutoSigning\", value: undefined },\n            ]);\n\n            const sent = captured[0].resources[0];\n            expect(sent.tag).toBe(\"AutoSigning\");\n            expect(outcomes).toEqual(stubbed);\n        });\n\n        test(\"passes empty resources through (no-op request still hits the wire)\", async () => {\n            // Wrappers shouldn't second-guess the caller: an empty resource\n            // list is a legitimate (if degenerate) request and the wire\n            // accepts it. The Account Holder may use it as a probe.\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok([]) as StubReturn;\n                },\n            });\n\n            const outcomes = await requestResourceAllocation(session, fakeAdapter(\"p\"), []);\n\n            expect(captured).toHaveLength(1);\n            expect(captured[0].resources).toEqual([]);\n            expect(outcomes).toEqual([]);\n        });\n    });\n\n    describe(\"requestResourceAllocation — cache integration\", () => {\n        function bulletinAllocated(slotKey: Uint8Array): StubReturn {\n            return ok([\n                {\n                    tag: \"Allocated\" as const,\n                    value: {\n                        tag: \"BulletInAllowance\" as const,\n                        value: { slotAccountKey: slotKey },\n                    },\n                },\n            ]) as StubReturn;\n        }\n\n        test(\"first call sends Ignore when cache is empty\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return bulletinAllocated(new Uint8Array([1, 2, 3]));\n                },\n            });\n\n            await requestResourceAllocation(session, fakeAdapter(\"p\"), [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ]);\n\n            expect(captured[0].onExisting).toBe(\"Ignore\");\n        });\n\n        test(\"second call for same slot-table resource auto-picks Increase\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return bulletinAllocated(new Uint8Array([1, 2, 3]));\n                },\n            });\n\n            const adapter = fakeAdapter(\"p\");\n            const req: AllocatableResource[] = [{ tag: \"BulletInAllowance\", value: undefined }];\n\n            await requestResourceAllocation(session, adapter, req);\n            await requestResourceAllocation(session, adapter, req);\n\n            expect(captured.map((c) => c.onExisting)).toEqual([\"Ignore\", \"Increase\"]);\n        });\n\n        test(\"explicit options.onExisting overrides the auto-pick\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return bulletinAllocated(new Uint8Array([1, 2, 3]));\n                },\n            });\n\n            const adapter = fakeAdapter(\"p\");\n            const req: AllocatableResource[] = [{ tag: \"BulletInAllowance\", value: undefined }];\n\n            // Even after a cache-populating first call, passing Ignore\n            // explicitly forces Ignore — useful for callers that want\n            // idempotent \"ensure I have allowance\" semantics rather than\n            // the additive-scaling default.\n            await requestResourceAllocation(session, adapter, req);\n            await requestResourceAllocation(session, adapter, req, { onExisting: \"Ignore\" });\n\n            expect(captured.map((c) => c.onExisting)).toEqual([\"Ignore\", \"Ignore\"]);\n        });\n\n        test(\"populates cache on Allocated and survives across separate calls\", async () => {\n            const slotKey = new Uint8Array([0xde, 0xad, 0xbe, 0xef]);\n            const session = makeSession({\n                requestResourceAllocation: async () => bulletinAllocated(slotKey),\n            });\n\n            const adapter = fakeAdapter(\"p\");\n            await requestResourceAllocation(session, adapter, [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ]);\n\n            // Second call reads cache via the public lookup, no wire.\n            const cached = await getCachedAllocation(adapter, {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(cached).toEqual({\n                tag: \"BulletInAllowance\",\n                slotAccountKey: \"0xdeadbeef\",\n            });\n        });\n\n        test(\"does not cache Rejected or NotAvailable outcomes\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () =>\n                    ok([\n                        { tag: \"Rejected\" as const, value: undefined },\n                        { tag: \"NotAvailable\" as const, value: undefined },\n                    ]) as StubReturn,\n            });\n\n            const adapter = fakeAdapter(\"p\");\n            await requestResourceAllocation(session, adapter, [\n                { tag: \"BulletInAllowance\", value: undefined },\n                { tag: \"StatementStoreAllowance\", value: undefined },\n            ]);\n\n            expect(\n                await getCachedAllocation(adapter, { tag: \"BulletInAllowance\", value: undefined }),\n            ).toBeNull();\n            expect(\n                await getCachedAllocation(adapter, {\n                    tag: \"StatementStoreAllowance\",\n                    value: undefined,\n                }),\n            ).toBeNull();\n        });\n\n        test(\"mixed cached + uncached request stays on Ignore (conservative)\", async () => {\n            // Bulletin cached, SSS not. Auto-pick must NOT send Increase\n            // — the wire takes one policy for the whole request, and\n            // Increase against an uncached resource is at-best a no-op\n            // and at-worst a mis-allocation.\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    // Length-match the request: 1 or 2 outcomes as needed.\n                    return ok(\n                        req.resources.map((_r, i) =>\n                            i === 0\n                                ? {\n                                      tag: \"Allocated\" as const,\n                                      value: {\n                                          tag: \"BulletInAllowance\" as const,\n                                          value: { slotAccountKey: new Uint8Array([1]) },\n                                      },\n                                  }\n                                : { tag: \"Rejected\" as const, value: undefined },\n                        ),\n                    ) as StubReturn;\n                },\n            });\n\n            const adapter = fakeAdapter(\"p\");\n            // Populate Bulletin in cache.\n            await requestResourceAllocation(session, adapter, [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ]);\n\n            // Now request both Bulletin (cached) and SSS (uncached).\n            await requestResourceAllocation(session, adapter, [\n                { tag: \"BulletInAllowance\", value: undefined },\n                { tag: \"StatementStoreAllowance\", value: undefined },\n            ]);\n\n            expect(captured[captured.length - 1].onExisting).toBe(\"Ignore\");\n        });\n\n        test(\"AutoSigning never auto-Increases even when cached\", async () => {\n            // AutoSigning isn't slot-additive; auto-pick must stay on Ignore.\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return ok([\n                        {\n                            tag: \"Allocated\" as const,\n                            value: {\n                                tag: \"AutoSigning\" as const,\n                                value: {\n                                    productDerivationSecret: \"secret\",\n                                    productRootPrivateKey: new Uint8Array([0xab]),\n                                },\n                            },\n                        },\n                    ]) as StubReturn;\n                },\n            });\n\n            const adapter = fakeAdapter(\"p\");\n            const req: AllocatableResource[] = [{ tag: \"AutoSigning\", value: undefined }];\n\n            await requestResourceAllocation(session, adapter, req);\n            await requestResourceAllocation(session, adapter, req);\n\n            expect(captured.map((c) => c.onExisting)).toEqual([\"Ignore\", \"Ignore\"]);\n        });\n\n        test(\"parallel calls for different resources both persist their keys (no last-writer-wins)\", async () => {\n            // Regression test for the load → wire → save race: without\n            // serialization, both calls snapshot an empty cache, do their\n            // wire round-trip, then save — the second save clobbers the\n            // first. Both keys must end up in the cache.\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    // Force interleaving: each call yields before responding.\n                    await new Promise((r) => setTimeout(r, 5));\n                    const tag = req.resources[0]?.tag;\n                    return ok([\n                        {\n                            tag: \"Allocated\" as const,\n                            value:\n                                tag === \"BulletInAllowance\"\n                                    ? {\n                                          tag: \"BulletInAllowance\" as const,\n                                          value: { slotAccountKey: new Uint8Array([0xaa]) },\n                                      }\n                                    : {\n                                          tag: \"StatementStoreAllowance\" as const,\n                                          value: { slotAccountKey: new Uint8Array([0xbb]) },\n                                      },\n                        },\n                    ]) as StubReturn;\n                },\n            });\n            const adapter = fakeAdapter(\"p\");\n\n            await Promise.all([\n                requestResourceAllocation(session, adapter, [\n                    { tag: \"BulletInAllowance\", value: undefined },\n                ]),\n                requestResourceAllocation(session, adapter, [\n                    { tag: \"StatementStoreAllowance\", value: undefined },\n                ]),\n            ]);\n\n            expect(\n                await getCachedAllocation(adapter, {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ).not.toBeNull();\n            expect(\n                await getCachedAllocation(adapter, {\n                    tag: \"StatementStoreAllowance\",\n                    value: undefined,\n                }),\n            ).not.toBeNull();\n        });\n\n        test(\"two appIds maintain independent caches in the same storageDir\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () => bulletinAllocated(new Uint8Array([1, 2, 3])),\n            });\n\n            const adapterA = fakeAdapter(\"app-a\");\n            const adapterB = fakeAdapter(\"app-b\");\n\n            await requestResourceAllocation(session, adapterA, [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ]);\n\n            // app-b's cache is empty even though app-a's is populated.\n            expect(\n                await getCachedAllocation(adapterB, {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ).toBeNull();\n            expect(\n                await getCachedAllocation(adapterA, {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ).not.toBeNull();\n        });\n    });\n\n    describe(\"getCachedAllocation\", () => {\n        test(\"returns null when nothing is cached\", async () => {\n            const adapter = fakeAdapter(\"p\");\n            const cached = await getCachedAllocation(adapter, {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(cached).toBeNull();\n        });\n\n        test(\"disambiguates SmartContractAllowance entries by dest\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () =>\n                    ok([\n                        {\n                            tag: \"Allocated\" as const,\n                            value: {\n                                tag: \"SmartContractAllowance\" as const,\n                                value: undefined,\n                            },\n                        },\n                    ]) as StubReturn,\n            });\n            const adapter = fakeAdapter(\"p\");\n            await requestResourceAllocation(session, adapter, [\n                { tag: \"SmartContractAllowance\", value: 5 },\n            ]);\n\n            expect(\n                await getCachedAllocation(adapter, { tag: \"SmartContractAllowance\", value: 5 }),\n            ).toEqual({ tag: \"SmartContractAllowance\", dest: 5 });\n            // Different dest doesn't match.\n            expect(\n                await getCachedAllocation(adapter, { tag: \"SmartContractAllowance\", value: 6 }),\n            ).toBeNull();\n        });\n    });\n\n    describe(\"ensureSlotAccountSigner\", () => {\n        // Deterministic mini-secret so the signer is constructable.\n        const slotKey = mnemonicToMiniSecret(DEV_PHRASE);\n\n        function bulletinAllocatedResponse() {\n            return ok([\n                {\n                    tag: \"Allocated\" as const,\n                    value: {\n                        tag: \"BulletInAllowance\" as const,\n                        value: { slotAccountKey: slotKey },\n                    },\n                },\n            ]) as StubReturn;\n        }\n\n        test(\"cache hit returns a signer without invoking the AP wire\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return bulletinAllocatedResponse();\n                },\n            });\n            const adapter = fakeAdapter(\"p\");\n\n            // Populate cache.\n            await requestResourceAllocation(session, adapter, [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ]);\n            expect(captured).toHaveLength(1);\n\n            // ensureSlotAccountSigner should find the cached key and NOT\n            // call the wire again.\n            const signer = await ensureSlotAccountSigner(session, adapter, {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(signer.publicKey).toBeInstanceOf(Uint8Array);\n            expect(captured).toHaveLength(1); // still 1 — no extra round-trip\n        });\n\n        test(\"cache miss triggers allocation and returns a fresh signer\", async () => {\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    return bulletinAllocatedResponse();\n                },\n            });\n            const adapter = fakeAdapter(\"p\");\n\n            // No prior call. ensureSlotAccountSigner should round-trip.\n            const signer = await ensureSlotAccountSigner(session, adapter, {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(signer.publicKey).toBeInstanceOf(Uint8Array);\n            expect(captured).toHaveLength(1);\n            // Implicit allocation requests exactly one resource.\n            expect(captured[0].resources.map((r) => r.tag)).toEqual([\"BulletInAllowance\"]);\n        });\n\n        test(\"Rejected outcome surfaces as a throw — no signer to return\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () =>\n                    ok([{ tag: \"Rejected\" as const, value: undefined }]) as StubReturn,\n            });\n\n            await expect(\n                ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ).rejects.toThrow(/allocation Rejected for BulletInAllowance/);\n        });\n\n        test(\"empty outcomes array from the wire surfaces as a length-mismatch throw\", async () => {\n            // mergeOutcomes enforces the length contract and throws before\n            // the downstream `outcomes[0]` defensive guard is reached.\n            const session = makeSession({\n                requestResourceAllocation: async () => ok([]) as StubReturn,\n            });\n\n            await expect(\n                ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ).rejects.toThrow(/length mismatch — requested 1, got 0/);\n        });\n\n        test(\"NotAvailable outcome surfaces as a throw\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () =>\n                    ok([{ tag: \"NotAvailable\" as const, value: undefined }]) as StubReturn,\n            });\n\n            await expect(\n                ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n                    tag: \"StatementStoreAllowance\",\n                    value: undefined,\n                }),\n            ).rejects.toThrow(/allocation NotAvailable for StatementStoreAllowance/);\n        });\n\n        test(\"transport error propagates from the underlying allocation call\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () =>\n                    err(new Error(\"mobile timed out\")) as StubReturn,\n            });\n\n            await expect(\n                ensureSlotAccountSigner(session, fakeAdapter(\"p\"), {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ).rejects.toThrow(/mobile timed out/);\n        });\n\n        test(\"populates the cache so a later call is a hit\", async () => {\n            const session = makeSession({\n                requestResourceAllocation: async () => bulletinAllocatedResponse(),\n            });\n            const adapter = fakeAdapter(\"p\");\n\n            await ensureSlotAccountSigner(session, adapter, {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n\n            // After the implicit allocation, getCachedAllocation should see the key.\n            const cached = await getCachedAllocation(adapter, {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(cached?.tag).toBe(\"BulletInAllowance\");\n        });\n\n        test(\"parallel calls for the SAME resource share one allocation (no double-prompt)\", async () => {\n            // Regression: previously the cache-hit check ran outside the\n            // lock, so two concurrent same-resource calls both passed it,\n            // then both hit the wire under the serialized lock — burning\n            // two slots and prompting the wallet twice. Both calls must\n            // resolve from a single allocation.\n            const captured: RequestCapture[] = [];\n            const session = makeSession({\n                requestResourceAllocation: async (req) => {\n                    captured.push(req);\n                    // Force a yield so the second caller has a chance to\n                    // race past the cache check if the lock isn't around it.\n                    await new Promise((r) => setTimeout(r, 5));\n                    return bulletinAllocatedResponse();\n                },\n            });\n            const adapter = fakeAdapter(\"p\");\n\n            const [signerA, signerB] = await Promise.all([\n                ensureSlotAccountSigner(session, adapter, {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n                ensureSlotAccountSigner(session, adapter, {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ]);\n\n            // Exactly one wire round-trip — the second caller must observe\n            // the freshly-cached key, not start a second allocation.\n            expect(captured).toHaveLength(1);\n            // Both calls return functioning signers backed by the same key.\n            expect(signerA.publicKey).toBeInstanceOf(Uint8Array);\n            expect(signerB.publicKey).toBeInstanceOf(Uint8Array);\n            expect(toHex(signerA.publicKey)).toBe(toHex(signerB.publicKey));\n        });\n    });\n}\n","// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Persistent allowance-key cache. One JSON file per `appId`, 0o600.\n *\n * Cache key is the variant tag, except `SmartContractAllowance::{dest}`\n * which disambiguates per-derivation-index PGAS pre-warming.\n *\n * @internal\n */\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport { toHex } from \"@polkadot-api/utils\";\nimport { mkdir, readFile, rename, writeFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nimport type { AllocatableResource, ApAllocationOutcome } from \"./host.js\";\n\nconst log = createLogger(\"terminal\");\n\nconst DEFAULT_STORAGE_DIR = join(homedir(), \".polkadot-apps\");\nconst CACHE_FILE_MODE = 0o600;\n\n/** One cached allowance entry. Hex strings are 0x-prefixed. */\nexport type CachedAllocation =\n    | { tag: \"BulletInAllowance\"; slotAccountKey: string }\n    | { tag: \"StatementStoreAllowance\"; slotAccountKey: string }\n    | { tag: \"SmartContractAllowance\"; dest: number }\n    | {\n          tag: \"AutoSigning\";\n          productDerivationSecret: string;\n          productRootPrivateKey: string;\n      };\n\ninterface AllowanceCacheV1 {\n    version: 1;\n    entries: Record<string, CachedAllocation>;\n}\n\nfunction sanitizeAppId(appId: string): string {\n    return appId.replace(/[^a-zA-Z0-9_.-]/g, \"_\");\n}\n\nfunction cachePath(appId: string, storageDir?: string): string {\n    return join(storageDir ?? DEFAULT_STORAGE_DIR, `${sanitizeAppId(appId)}_AllowanceKeys.json`);\n}\n\nfunction emptyCache(): AllowanceCacheV1 {\n    return { version: 1, entries: {} };\n}\n\nexport async function loadCache(appId: string, storageDir?: string): Promise<AllowanceCacheV1> {\n    const path = cachePath(appId, storageDir);\n    let raw: string;\n    try {\n        raw = await readFile(path, \"utf-8\");\n    } catch (e: unknown) {\n        if ((e as NodeJS.ErrnoException)?.code === \"ENOENT\") return emptyCache();\n        throw e;\n    }\n    try {\n        const parsed = JSON.parse(raw) as AllowanceCacheV1;\n        if (\n            parsed?.version !== 1 ||\n            typeof parsed.entries !== \"object\" ||\n            parsed.entries === null\n        ) {\n            log.warn(\"allowance cache schema mismatch; starting fresh\", { appId, path });\n            return emptyCache();\n        }\n        return parsed;\n    } catch (e) {\n        log.warn(\"allowance cache parse failed; starting fresh\", { appId, path, error: String(e) });\n        return emptyCache();\n    }\n}\n\nexport async function saveCache(\n    appId: string,\n    cache: AllowanceCacheV1,\n    storageDir?: string,\n): Promise<void> {\n    const path = cachePath(appId, storageDir);\n    await mkdir(dirname(path), { recursive: true });\n    // Temp + rename so a mid-write crash can't leave a half-written file.\n    // Concurrent Hosts: the Account Holder serializes per (user, product,\n    // resource) and returns the same key to all callers, so racing writes\n    // converge on identical bytes.\n    const tmp = `${path}.tmp`;\n    await writeFile(tmp, JSON.stringify(cache, null, 2), { mode: CACHE_FILE_MODE });\n    await rename(tmp, path);\n}\n\nexport function cacheKey(resource: AllocatableResource): string {\n    if (resource.tag === \"SmartContractAllowance\") {\n        return `${resource.tag}::${resource.value}`;\n    }\n    return resource.tag;\n}\n\n/**\n * Pick the wire `onExisting` policy from current cache state. `Ignore`\n * unless every requested resource is a slot-table variant (Bulletin /\n * SSS) AND already cached, in which case `Increase`. SC and AutoSigning\n * aren't slot-additive so they always force `Ignore`.\n */\nexport function pickOnExistingPolicy(\n    cache: AllowanceCacheV1,\n    resources: AllocatableResource[],\n): \"Ignore\" | \"Increase\" {\n    if (resources.length === 0) return \"Ignore\";\n    const allSlotTableAndCached = resources.every((r) => {\n        if (r.tag !== \"BulletInAllowance\" && r.tag !== \"StatementStoreAllowance\") return false;\n        return Object.hasOwn(cache.entries, cacheKey(r));\n    });\n    return allSlotTableAndCached ? \"Increase\" : \"Ignore\";\n}\n\n/**\n * Merge `Allocated` outcomes into the cache. Non-`Allocated` outcomes\n * leave the cache unchanged. Returns the input `cache` reference rather\n * than a copy when no entry was added, so callers can short-circuit a\n * disk write via reference equality.\n *\n * Throws on length mismatch — `outcomes` must be length-matched with\n * `requested`. A divergence is a wire contract violation, not data to\n * silently truncate.\n */\nexport function mergeOutcomes(\n    cache: AllowanceCacheV1,\n    requested: AllocatableResource[],\n    outcomes: ApAllocationOutcome[],\n): AllowanceCacheV1 {\n    if (requested.length !== outcomes.length) {\n        throw new Error(\n            `mergeOutcomes: length mismatch — requested ${requested.length}, got ${outcomes.length}`,\n        );\n    }\n    const entries = { ...cache.entries };\n    let mutated = false;\n    for (let i = 0; i < outcomes.length; i++) {\n        const req = requested[i];\n        const out = outcomes[i];\n        if (out.tag !== \"Allocated\") continue;\n        const inner = out.value;\n        // outcomes must align positionally AND by variant with the request.\n        // A divergence is a wire contract violation: throw rather than\n        // silently miscaching a key under the wrong cache slot.\n        if (inner.tag !== req.tag) {\n            throw new Error(\n                `mergeOutcomes: variant mismatch at index ${i} — requested ${req.tag}, got Allocated<${inner.tag}>`,\n            );\n        }\n        const key = cacheKey(req);\n        switch (inner.tag) {\n            case \"BulletInAllowance\":\n            case \"StatementStoreAllowance\":\n                entries[key] = {\n                    tag: inner.tag,\n                    slotAccountKey: toHex(inner.value.slotAccountKey),\n                };\n                mutated = true;\n                break;\n            case \"SmartContractAllowance\":\n                // dest comes from the request; the response payload is undefined.\n                // Variant alignment is enforced above, so req.tag is guaranteed\n                // to be SmartContractAllowance here — the cast narrows it.\n                if (req.tag === \"SmartContractAllowance\") {\n                    entries[key] = { tag: \"SmartContractAllowance\", dest: req.value };\n                    mutated = true;\n                }\n                break;\n            case \"AutoSigning\":\n                entries[key] = {\n                    tag: \"AutoSigning\",\n                    productDerivationSecret: inner.value.productDerivationSecret,\n                    productRootPrivateKey: toHex(inner.value.productRootPrivateKey),\n                };\n                mutated = true;\n                break;\n        }\n    }\n    return mutated ? { version: 1, entries } : cache;\n}\n\n/** Look up a single cached allocation, or `null` if absent. */\nexport function readCacheEntry(\n    cache: AllowanceCacheV1,\n    resource: AllocatableResource,\n): CachedAllocation | null {\n    return cache.entries[cacheKey(resource)] ?? null;\n}\n\n/**\n * Serialize load/merge/save sequences for the same cache file within a\n * single process. Without this, parallel `requestResourceAllocation`\n * calls for *different* resources can race: each snapshots the cache\n * before the other writes, last writer wins, the loser's key is lost.\n *\n * Cross-process races are out of scope here — the Account Holder\n * serializes per user/product/resource and returns identical bytes\n * to concurrent callers for the same resource, so two CLI processes\n * writing the same key converge.\n */\nconst cacheLocks = new Map<string, Promise<unknown>>();\n\nexport function withCacheLock<T>(\n    appId: string,\n    storageDir: string | undefined,\n    fn: () => Promise<T>,\n): Promise<T> {\n    const key = cachePath(appId, storageDir);\n    const prev = cacheLocks.get(key) ?? Promise.resolve();\n    // Neutralize a prior rejection so one failure doesn't block subsequent waiters.\n    const next = prev.catch(() => {}).then(fn);\n    cacheLocks.set(\n        key,\n        next.catch(() => {}),\n    );\n    return next;\n}\n\nif (import.meta.vitest) {\n    const { describe, test, expect, beforeEach } = import.meta.vitest;\n    const { mkdtempSync, rmSync } = await import(\"node:fs\");\n    const { tmpdir } = await import(\"node:os\");\n\n    let storageDir: string;\n    beforeEach(() => {\n        storageDir = mkdtempSync(join(tmpdir(), \"host-cache-test-\"));\n        return () => rmSync(storageDir, { recursive: true, force: true });\n    });\n\n    describe(\"cacheKey\", () => {\n        test(\"returns the variant tag for slot-table resources and AutoSigning\", () => {\n            expect(cacheKey({ tag: \"BulletInAllowance\", value: undefined })).toBe(\n                \"BulletInAllowance\",\n            );\n            expect(cacheKey({ tag: \"StatementStoreAllowance\", value: undefined })).toBe(\n                \"StatementStoreAllowance\",\n            );\n            expect(cacheKey({ tag: \"AutoSigning\", value: undefined })).toBe(\"AutoSigning\");\n        });\n\n        test(\"disambiguates SmartContractAllowance by dest\", () => {\n            expect(cacheKey({ tag: \"SmartContractAllowance\", value: 0 })).toBe(\n                \"SmartContractAllowance::0\",\n            );\n            expect(cacheKey({ tag: \"SmartContractAllowance\", value: 7 })).toBe(\n                \"SmartContractAllowance::7\",\n            );\n        });\n    });\n\n    describe(\"loadCache / saveCache round-trip\", () => {\n        test(\"loadCache on missing file returns empty cache, not an error\", async () => {\n            const cache = await loadCache(\"my-app\", storageDir);\n            expect(cache).toEqual({ version: 1, entries: {} });\n        });\n\n        test(\"saveCache then loadCache returns the same content\", async () => {\n            const original: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0xdeadbeef\" },\n                },\n            };\n            await saveCache(\"my-app\", original, storageDir);\n            const reloaded = await loadCache(\"my-app\", storageDir);\n            expect(reloaded).toEqual(original);\n        });\n\n        test(\"two appIds in the same storageDir don't collide\", async () => {\n            const a: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x01\" },\n                },\n            };\n            const b: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x02\" },\n                },\n            };\n            await saveCache(\"app-a\", a, storageDir);\n            await saveCache(\"app-b\", b, storageDir);\n            expect((await loadCache(\"app-a\", storageDir)).entries.BulletInAllowance).toEqual(\n                a.entries.BulletInAllowance,\n            );\n            expect((await loadCache(\"app-b\", storageDir)).entries.BulletInAllowance).toEqual(\n                b.entries.BulletInAllowance,\n            );\n        });\n\n        test(\"appId with non-alphanumeric characters sanitizes to a safe path\", async () => {\n            // Verifies a path-traversal-style appId can't escape storageDir.\n            const cache: AllowanceCacheV1 = { version: 1, entries: {} };\n            await expect(saveCache(\"../escape\", cache, storageDir)).resolves.toBeUndefined();\n            const reloaded = await loadCache(\"../escape\", storageDir);\n            expect(reloaded).toEqual(cache);\n        });\n\n        test(\"malformed cache file is treated as empty, not thrown\", async () => {\n            await writeFile(cachePath(\"my-app\", storageDir), \"{ not valid json\", \"utf-8\");\n            const cache = await loadCache(\"my-app\", storageDir);\n            expect(cache).toEqual({ version: 1, entries: {} });\n        });\n\n        test(\"version mismatch is treated as empty, not thrown\", async () => {\n            await writeFile(\n                cachePath(\"my-app\", storageDir),\n                JSON.stringify({ version: 99, entries: {} }),\n                \"utf-8\",\n            );\n            const cache = await loadCache(\"my-app\", storageDir);\n            expect(cache).toEqual({ version: 1, entries: {} });\n        });\n\n        test(\"file is written with 0o600 permissions (defense-in-depth)\", async () => {\n            const { stat } = await import(\"node:fs/promises\");\n            const cache: AllowanceCacheV1 = { version: 1, entries: {} };\n            await saveCache(\"my-app\", cache, storageDir);\n            const s = await stat(cachePath(\"my-app\", storageDir));\n            // Mask to permission bits only — file type bits are above 0o777.\n            expect(s.mode & 0o777).toBe(0o600);\n        });\n    });\n\n    describe(\"pickOnExistingPolicy\", () => {\n        test(\"empty request resolves to Ignore\", () => {\n            const cache = emptyCache();\n            expect(pickOnExistingPolicy(cache, [])).toBe(\"Ignore\");\n        });\n\n        test(\"no cached entries → Ignore\", () => {\n            const cache = emptyCache();\n            expect(\n                pickOnExistingPolicy(cache, [{ tag: \"BulletInAllowance\", value: undefined }]),\n            ).toBe(\"Ignore\");\n        });\n\n        test(\"all slot-table resources cached → Increase\", () => {\n            const cache: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x01\" },\n                    StatementStoreAllowance: {\n                        tag: \"StatementStoreAllowance\",\n                        slotAccountKey: \"0x02\",\n                    },\n                },\n            };\n            expect(\n                pickOnExistingPolicy(cache, [\n                    { tag: \"BulletInAllowance\", value: undefined },\n                    { tag: \"StatementStoreAllowance\", value: undefined },\n                ]),\n            ).toBe(\"Increase\");\n        });\n\n        test(\"mixed cached + uncached → Ignore (conservative)\", () => {\n            const cache: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0x01\" },\n                },\n            };\n            expect(\n                pickOnExistingPolicy(cache, [\n                    { tag: \"BulletInAllowance\", value: undefined },\n                    { tag: \"StatementStoreAllowance\", value: undefined },\n                ]),\n            ).toBe(\"Ignore\");\n        });\n\n        test(\"AutoSigning in the request → Ignore even if cached (not slot-additive)\", () => {\n            const cache: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    AutoSigning: {\n                        tag: \"AutoSigning\",\n                        productDerivationSecret: \"x\",\n                        productRootPrivateKey: \"0xaa\",\n                    },\n                },\n            };\n            expect(pickOnExistingPolicy(cache, [{ tag: \"AutoSigning\", value: undefined }])).toBe(\n                \"Ignore\",\n            );\n        });\n\n        test(\"SC in the request → Ignore (not slot-additive; PGAS claim is per-call)\", () => {\n            const cache: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    \"SmartContractAllowance::5\": { tag: \"SmartContractAllowance\", dest: 5 },\n                },\n            };\n            expect(pickOnExistingPolicy(cache, [{ tag: \"SmartContractAllowance\", value: 5 }])).toBe(\n                \"Ignore\",\n            );\n        });\n    });\n\n    describe(\"mergeOutcomes\", () => {\n        test(\"ignores Rejected and NotAvailable\", () => {\n            const cache = emptyCache();\n            const requested: AllocatableResource[] = [\n                { tag: \"BulletInAllowance\", value: undefined },\n                { tag: \"StatementStoreAllowance\", value: undefined },\n            ];\n            const outcomes: ApAllocationOutcome[] = [\n                { tag: \"Rejected\", value: undefined },\n                { tag: \"NotAvailable\", value: undefined },\n            ];\n            const merged = mergeOutcomes(cache, requested, outcomes);\n            expect(merged.entries).toEqual({});\n        });\n\n        test(\"stores Allocated Bulletin/SSS keys with hex encoding\", () => {\n            const cache = emptyCache();\n            const requested: AllocatableResource[] = [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ];\n            const outcomes: ApAllocationOutcome[] = [\n                {\n                    tag: \"Allocated\",\n                    value: {\n                        tag: \"BulletInAllowance\",\n                        value: { slotAccountKey: new Uint8Array([0xde, 0xad, 0xbe, 0xef]) },\n                    },\n                },\n            ];\n            const merged = mergeOutcomes(cache, requested, outcomes);\n            expect(merged.entries.BulletInAllowance).toEqual({\n                tag: \"BulletInAllowance\",\n                slotAccountKey: \"0xdeadbeef\",\n            });\n        });\n\n        test(\"stores SmartContractAllowance with dest from the request\", () => {\n            const cache = emptyCache();\n            const requested: AllocatableResource[] = [{ tag: \"SmartContractAllowance\", value: 7 }];\n            const outcomes: ApAllocationOutcome[] = [\n                {\n                    tag: \"Allocated\",\n                    value: { tag: \"SmartContractAllowance\", value: undefined },\n                },\n            ];\n            const merged = mergeOutcomes(cache, requested, outcomes);\n            expect(merged.entries[\"SmartContractAllowance::7\"]).toEqual({\n                tag: \"SmartContractAllowance\",\n                dest: 7,\n            });\n        });\n\n        test(\"stores AutoSigning subtree key + secret\", () => {\n            const cache = emptyCache();\n            const requested: AllocatableResource[] = [{ tag: \"AutoSigning\", value: undefined }];\n            const outcomes: ApAllocationOutcome[] = [\n                {\n                    tag: \"Allocated\",\n                    value: {\n                        tag: \"AutoSigning\",\n                        value: {\n                            productDerivationSecret: \"secret-hex\",\n                            productRootPrivateKey: new Uint8Array([0xab, 0xcd]),\n                        },\n                    },\n                },\n            ];\n            const merged = mergeOutcomes(cache, requested, outcomes);\n            expect(merged.entries.AutoSigning).toEqual({\n                tag: \"AutoSigning\",\n                productDerivationSecret: \"secret-hex\",\n                productRootPrivateKey: \"0xabcd\",\n            });\n        });\n\n        test(\"returns the same cache reference when no Allocated outcomes (no-op)\", () => {\n            // Lets callers gate disk writes on reference equality.\n            const cache: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: \"0xaa\" },\n                },\n            };\n            const requested: AllocatableResource[] = [\n                { tag: \"BulletInAllowance\", value: undefined },\n                { tag: \"StatementStoreAllowance\", value: undefined },\n            ];\n            const outcomes: ApAllocationOutcome[] = [\n                { tag: \"Rejected\", value: undefined },\n                { tag: \"NotAvailable\", value: undefined },\n            ];\n            expect(mergeOutcomes(cache, requested, outcomes)).toBe(cache);\n        });\n\n        test(\"empty inputs return the same cache reference\", () => {\n            const cache = emptyCache();\n            expect(mergeOutcomes(cache, [], [])).toBe(cache);\n        });\n\n        test(\"returns a new object reference when at least one entry is added\", () => {\n            const cache = emptyCache();\n            const requested: AllocatableResource[] = [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ];\n            const outcomes: ApAllocationOutcome[] = [\n                {\n                    tag: \"Allocated\",\n                    value: {\n                        tag: \"BulletInAllowance\",\n                        value: { slotAccountKey: new Uint8Array([1]) },\n                    },\n                },\n            ];\n            expect(mergeOutcomes(cache, requested, outcomes)).not.toBe(cache);\n        });\n\n        test(\"throws when outcomes do not length-match requested\", () => {\n            const cache = emptyCache();\n            const requested: AllocatableResource[] = [\n                { tag: \"BulletInAllowance\", value: undefined },\n                { tag: \"StatementStoreAllowance\", value: undefined },\n            ];\n            const outcomes: ApAllocationOutcome[] = [{ tag: \"Rejected\", value: undefined }];\n            expect(() => mergeOutcomes(cache, requested, outcomes)).toThrow(/length mismatch/);\n        });\n\n        test(\"throws when an Allocated outcome's variant does not match the requested variant\", () => {\n            // outcomes must align positionally AND by variant with the\n            // request. Without this guard, a Bulletin key would get stored\n            // under the StatementStoreAllowance cache slot.\n            const cache = emptyCache();\n            const requested: AllocatableResource[] = [\n                { tag: \"StatementStoreAllowance\", value: undefined },\n            ];\n            const outcomes: ApAllocationOutcome[] = [\n                {\n                    tag: \"Allocated\",\n                    value: {\n                        tag: \"BulletInAllowance\",\n                        value: { slotAccountKey: new Uint8Array([0xaa]) },\n                    },\n                },\n            ];\n            expect(() => mergeOutcomes(cache, requested, outcomes)).toThrow(\n                /variant mismatch at index 0 — requested StatementStoreAllowance, got Allocated<BulletInAllowance>/,\n            );\n        });\n\n        test(\"preserves existing entries when merging new ones\", () => {\n            const cache: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    StatementStoreAllowance: {\n                        tag: \"StatementStoreAllowance\",\n                        slotAccountKey: \"0xaa\",\n                    },\n                },\n            };\n            const requested: AllocatableResource[] = [\n                { tag: \"BulletInAllowance\", value: undefined },\n            ];\n            const outcomes: ApAllocationOutcome[] = [\n                {\n                    tag: \"Allocated\",\n                    value: {\n                        tag: \"BulletInAllowance\",\n                        value: { slotAccountKey: new Uint8Array([0xbb]) },\n                    },\n                },\n            ];\n            const merged = mergeOutcomes(cache, requested, outcomes);\n            expect(Object.keys(merged.entries).sort()).toEqual([\n                \"BulletInAllowance\",\n                \"StatementStoreAllowance\",\n            ]);\n            expect(merged.entries.StatementStoreAllowance).toEqual({\n                tag: \"StatementStoreAllowance\",\n                slotAccountKey: \"0xaa\",\n            });\n        });\n    });\n\n    describe(\"readCacheEntry\", () => {\n        test(\"returns the cached entry by resource discriminator\", () => {\n            const cache: AllowanceCacheV1 = {\n                version: 1,\n                entries: {\n                    \"SmartContractAllowance::5\": {\n                        tag: \"SmartContractAllowance\",\n                        dest: 5,\n                    },\n                },\n            };\n            expect(readCacheEntry(cache, { tag: \"SmartContractAllowance\", value: 5 })).toEqual({\n                tag: \"SmartContractAllowance\",\n                dest: 5,\n            });\n            // Different dest doesn't match.\n            expect(readCacheEntry(cache, { tag: \"SmartContractAllowance\", value: 6 })).toBeNull();\n        });\n\n        test(\"returns null when nothing cached\", () => {\n            const cache = emptyCache();\n            expect(\n                readCacheEntry(cache, { tag: \"BulletInAllowance\", value: undefined }),\n            ).toBeNull();\n        });\n    });\n\n    describe(\"withCacheLock\", () => {\n        test(\"serializes calls for the same (appId, storageDir)\", async () => {\n            const order: string[] = [];\n            const a = withCacheLock(\"app\", storageDir, async () => {\n                order.push(\"a-start\");\n                await new Promise((r) => setTimeout(r, 10));\n                order.push(\"a-end\");\n            });\n            const b = withCacheLock(\"app\", storageDir, async () => {\n                order.push(\"b-start\");\n                order.push(\"b-end\");\n            });\n            await Promise.all([a, b]);\n            expect(order).toEqual([\"a-start\", \"a-end\", \"b-start\", \"b-end\"]);\n        });\n\n        test(\"different (appId, storageDir) keys do not block each other\", async () => {\n            let bRan = false;\n            const a = withCacheLock(\"app-a\", storageDir, async () => {\n                // b should run while a is still inside the await\n                await new Promise((r) => setTimeout(r, 20));\n                expect(bRan).toBe(true);\n            });\n            const b = withCacheLock(\"app-b\", storageDir, async () => {\n                bRan = true;\n            });\n            await Promise.all([a, b]);\n        });\n\n        test(\"a rejection in one call does not block subsequent calls on the same key\", async () => {\n            const a = withCacheLock(\"app\", storageDir, async () => {\n                throw new Error(\"boom\");\n            });\n            await expect(a).rejects.toThrow(\"boom\");\n            const b = await withCacheLock(\"app\", storageDir, async () => \"ok\");\n            expect(b).toBe(\"ok\");\n        });\n    });\n}\n","// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * Slot-account signer: reads the cached Bulletin/SSS allowance key and\n * returns a `PolkadotSigner` that signs locally with sr25519. SC and\n * AutoSigning are not slot-table variants and throw.\n *\n * @module\n */\nimport { bytesToNumberLE, numberToBytesLE } from \"@noble/curves/utils.js\";\nimport { fromHex } from \"@polkadot-api/utils\";\nimport { createDerive, sr25519, sr25519Derive } from \"@polkadot-labs/hdkd-helpers\";\nimport type { PolkadotSigner } from \"polkadot-api\";\nimport { getPolkadotSigner } from \"polkadot-api/signer\";\n\nimport type { TerminalAdapter } from \"./adapter.js\";\nimport { type CachedAllocation, loadCache, readCacheEntry } from \"./host-cache.js\";\nimport type { AllocatableResource } from \"./host.js\";\n\n// schnorrkel to_bytes() (canonical scalar) -> to_ed25519_bytes() form @scure expects (×8 cofactor).\nfunction canonicalSr25519SecretToEd25519Bytes(secret: Uint8Array): Uint8Array {\n    const ed25519Scalar = numberToBytesLE(bytesToNumberLE(secret.subarray(0, 32)) << 3n, 32);\n    const out = new Uint8Array(64);\n    out.set(ed25519Scalar, 0);\n    out.set(secret.subarray(32, 64), 32);\n    return out;\n}\n\n// Wire encoding for slotAccountKey isn't pinned: mobile may send a\n// 32-byte mini-secret or a 64-byte expanded secret. Detect length and\n// route; any other length throws.\nfunction buildKeypair(secret: Uint8Array): {\n    publicKey: Uint8Array;\n    sign: (data: Uint8Array) => Uint8Array;\n} {\n    if (secret.length === 32) {\n        const derive = createDerive({ seed: secret, curve: sr25519, derive: sr25519Derive });\n        const keypair = derive(\"\");\n        return { publicKey: keypair.publicKey, sign: (data) => keypair.sign(data) };\n    }\n    if (secret.length === 64) {\n        const ed25519Secret = canonicalSr25519SecretToEd25519Bytes(secret);\n        return {\n            publicKey: sr25519.getPublicKey(ed25519Secret),\n            sign: (data) => sr25519.sign(data, ed25519Secret),\n        };\n    }\n    throw new Error(\n        `createSlotAccountSigner: unexpected slotAccountKey length ${secret.length}. Expected 32 (mini-secret) or 64 (expanded secret).`,\n    );\n}\n\n/**\n * Build a `PolkadotSigner` from an already-loaded cache entry. Throws\n * for SC and AutoSigning — they don't carry a slot account key. See\n * the module docstring.\n *\n * Useful when the caller already holds the cache in memory, e.g. inside\n * a `withCacheLock` block, and wants to avoid re-reading disk.\n */\nexport function buildSignerFromEntry(entry: CachedAllocation): PolkadotSigner {\n    if (entry.tag !== \"BulletInAllowance\" && entry.tag !== \"StatementStoreAllowance\") {\n        throw new Error(\n            `createSlotAccountSigner: ${entry.tag} does not carry a slot account key. Slot-table signing is defined for BulletInAllowance and StatementStoreAllowance only.`,\n        );\n    }\n    const secret = fromHex(entry.slotAccountKey);\n    const { publicKey, sign } = buildKeypair(secret);\n    return getPolkadotSigner(publicKey, \"Sr25519\", async (data) => sign(data));\n}\n\n/**\n * `PolkadotSigner` backed by the cached slot account key. Returns `null`\n * when nothing's cached for `(adapter.appId, resource)`. Throws for SC\n * and AutoSigning (no slot account key — see module docstring).\n *\n * Signs locally with sr25519 — no wallet round-trip on the hot path.\n *\n * @example\n * ```ts\n * const signer = await createSlotAccountSigner(adapter, {\n *   tag: \"BulletInAllowance\", value: undefined,\n * });\n * if (signer) await tx.submitAndWatch(signer);\n * ```\n */\nexport async function createSlotAccountSigner(\n    adapter: TerminalAdapter,\n    resource: AllocatableResource,\n): Promise<PolkadotSigner | null> {\n    const cache = await loadCache(adapter.appId, adapter.storageDir);\n    const entry = readCacheEntry(cache, resource);\n    if (!entry) return null;\n    return buildSignerFromEntry(entry);\n}\n\nif (import.meta.vitest) {\n    const { describe, test, expect, beforeEach } = import.meta.vitest;\n    const { mkdtempSync, rmSync } = await import(\"node:fs\");\n    const { tmpdir } = await import(\"node:os\");\n    const { join: pathJoin } = await import(\"node:path\");\n    const { saveCache } = await import(\"./host-cache.js\");\n    const { DEV_PHRASE, mnemonicToMiniSecret } = await import(\"@polkadot-labs/hdkd-helpers\");\n    const { toHex } = await import(\"@polkadot-api/utils\");\n\n    let storageDir: string;\n    beforeEach(() => {\n        storageDir = mkdtempSync(pathJoin(tmpdir(), \"host-signer-test-\"));\n        return () => rmSync(storageDir, { recursive: true, force: true });\n    });\n\n    function fakeAdapter(appId: string): TerminalAdapter {\n        return { appId, storageDir } as unknown as TerminalAdapter;\n    }\n\n    function knownSecret(): {\n        secret: Uint8Array;\n        publicKey: Uint8Array;\n        hex: string;\n        sign: (msg: Uint8Array) => Uint8Array;\n    } {\n        // Deterministic across runs — uses the standard substrate dev\n        // mnemonic. `mnemonicToMiniSecret` returns the 32-byte mini-secret\n        // form (one of the two shapes `createSlotAccountSigner` accepts).\n        const secret = mnemonicToMiniSecret(DEV_PHRASE);\n        const derive = createDerive({ seed: secret, curve: sr25519, derive: sr25519Derive });\n        const keypair = derive(\"\");\n        return {\n            secret,\n            publicKey: keypair.publicKey,\n            hex: toHex(secret),\n            sign: (msg) => keypair.sign(msg),\n        };\n    }\n\n    describe(\"createSlotAccountSigner\", () => {\n        test(\"returns null when no allocation is cached\", async () => {\n            const adapter = fakeAdapter(\"p\");\n            const signer = await createSlotAccountSigner(adapter, {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(signer).toBeNull();\n        });\n\n        test(\"returns a signer with the sr25519 public key derived from the cached secret\", async () => {\n            const { hex, publicKey } = knownSecret();\n            await saveCache(\n                \"p\",\n                {\n                    version: 1,\n                    entries: {\n                        BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: hex },\n                    },\n                },\n                storageDir,\n            );\n\n            const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(signer).not.toBeNull();\n            expect(signer?.publicKey).toEqual(publicKey);\n        });\n\n        test(\"signs locally and the signature verifies against the cached account\", async () => {\n            const { hex, publicKey } = knownSecret();\n            await saveCache(\n                \"p\",\n                {\n                    version: 1,\n                    entries: {\n                        BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: hex },\n                    },\n                },\n                storageDir,\n            );\n\n            const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            // `signBytes` wraps with `<Bytes>...</Bytes>` like all PAPI\n            // PolkadotSigners do; for direct payload signing PAPI calls\n            // `signTx` which routes through the same `sign` callback we\n            // installed. Test that callback directly by reaching for the\n            // typed surface: PAPI exposes signTx but the easiest direct\n            // verification is `signBytes` which is wired through our sign.\n            const payload = new TextEncoder().encode(\"hello slot\");\n            // signBytes wraps in <Bytes>...</Bytes> before calling our sign.\n            // To verify, reconstruct the wrap manually.\n            const wrapped = new Uint8Array([\n                ...new TextEncoder().encode(\"<Bytes>\"),\n                ...payload,\n                ...new TextEncoder().encode(\"</Bytes>\"),\n            ]);\n            const signature = await signer!.signBytes(payload);\n            expect(sr25519.verify(signature, wrapped, publicKey)).toBe(true);\n        });\n\n        test(\"64-byte expanded-secret form produces a valid signer\", async () => {\n            // Canonical schnorrkel to_bytes() for DEV_PHRASE (scalar + nonce), the mobile wire form.\n            const SECRET_64_HEX =\n                \"0x05d65584630d16cd4af6d0bec10f34bb504a5dcb62dba2122d49f5a663763d0afd190cce74df356432b410bd64682309d6dedb27c76845daf388557cbac3ca34\";\n\n            await saveCache(\n                \"p\",\n                {\n                    version: 1,\n                    entries: {\n                        BulletInAllowance: {\n                            tag: \"BulletInAllowance\",\n                            slotAccountKey: SECRET_64_HEX,\n                        },\n                    },\n                },\n                storageDir,\n            );\n\n            const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(signer).not.toBeNull();\n\n            // Public key from the 64-byte path matches the 32-byte path's\n            // — same logical key, two encodings.\n            const { publicKey: pubFrom32Bytes } = knownSecret();\n            expect(signer?.publicKey).toEqual(pubFrom32Bytes);\n\n            // Signature from the 64-byte branch verifies against the same\n            // public key.\n            const payload = new TextEncoder().encode(\"hello 64-byte path\");\n            const wrapped = new Uint8Array([\n                ...new TextEncoder().encode(\"<Bytes>\"),\n                ...payload,\n                ...new TextEncoder().encode(\"</Bytes>\"),\n            ]);\n            const sig = await signer!.signBytes(payload);\n            expect(sr25519.verify(sig, wrapped, pubFrom32Bytes)).toBe(true);\n        });\n\n        test(\"works for StatementStoreAllowance the same way\", async () => {\n            const { hex, publicKey } = knownSecret();\n            await saveCache(\n                \"p\",\n                {\n                    version: 1,\n                    entries: {\n                        StatementStoreAllowance: {\n                            tag: \"StatementStoreAllowance\",\n                            slotAccountKey: hex,\n                        },\n                    },\n                },\n                storageDir,\n            );\n\n            const signer = await createSlotAccountSigner(fakeAdapter(\"p\"), {\n                tag: \"StatementStoreAllowance\",\n                value: undefined,\n            });\n            expect(signer?.publicKey).toEqual(publicKey);\n        });\n\n        test(\"throws for SmartContractAllowance (no slot account key)\", async () => {\n            await saveCache(\n                \"p\",\n                {\n                    version: 1,\n                    entries: {\n                        \"SmartContractAllowance::5\": { tag: \"SmartContractAllowance\", dest: 5 },\n                    },\n                },\n                storageDir,\n            );\n\n            await expect(\n                createSlotAccountSigner(fakeAdapter(\"p\"), {\n                    tag: \"SmartContractAllowance\",\n                    value: 5,\n                }),\n            ).rejects.toThrow(/SmartContractAllowance does not carry a slot account key/);\n        });\n\n        test(\"throws for AutoSigning (subtree key, not slot account)\", async () => {\n            await saveCache(\n                \"p\",\n                {\n                    version: 1,\n                    entries: {\n                        AutoSigning: {\n                            tag: \"AutoSigning\",\n                            productDerivationSecret: \"secret\",\n                            productRootPrivateKey: \"0xabcd\",\n                        },\n                    },\n                },\n                storageDir,\n            );\n\n            await expect(\n                createSlotAccountSigner(fakeAdapter(\"p\"), {\n                    tag: \"AutoSigning\",\n                    value: undefined,\n                }),\n            ).rejects.toThrow(/AutoSigning does not carry a slot account key/);\n        });\n\n        test(\"different appIds yield different signers from disjoint caches\", async () => {\n            const a = knownSecret();\n            // Distinct mini-secret → distinct derived keypair.\n            const otherMiniSecret = new Uint8Array(32).fill(0x07);\n            const otherKeypair = createDerive({\n                seed: otherMiniSecret,\n                curve: sr25519,\n                derive: sr25519Derive,\n            })(\"\");\n\n            await saveCache(\n                \"app-a\",\n                {\n                    version: 1,\n                    entries: {\n                        BulletInAllowance: { tag: \"BulletInAllowance\", slotAccountKey: a.hex },\n                    },\n                },\n                storageDir,\n            );\n            await saveCache(\n                \"app-b\",\n                {\n                    version: 1,\n                    entries: {\n                        BulletInAllowance: {\n                            tag: \"BulletInAllowance\",\n                            slotAccountKey: toHex(otherMiniSecret),\n                        },\n                    },\n                },\n                storageDir,\n            );\n\n            const signerA = await createSlotAccountSigner(fakeAdapter(\"app-a\"), {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            const signerB = await createSlotAccountSigner(fakeAdapter(\"app-b\"), {\n                tag: \"BulletInAllowance\",\n                value: undefined,\n            });\n            expect(signerA?.publicKey).toEqual(a.publicKey);\n            expect(signerB?.publicKey).toEqual(otherKeypair.publicKey);\n            expect(signerA?.publicKey).not.toEqual(signerB?.publicKey);\n        });\n\n        test(\"rejects an unexpected slotAccountKey length\", async () => {\n            // Variable-length codec on the wire, but our keypair builder\n            // only recognizes the standard 32 / 64 byte forms.\n            await saveCache(\n                \"p\",\n                {\n                    version: 1,\n                    entries: {\n                        BulletInAllowance: {\n                            tag: \"BulletInAllowance\",\n                            slotAccountKey: toHex(new Uint8Array(48).fill(1)),\n                        },\n                    },\n                },\n                storageDir,\n            );\n\n            await expect(\n                createSlotAccountSigner(fakeAdapter(\"p\"), {\n                    tag: \"BulletInAllowance\",\n                    value: undefined,\n                }),\n            ).rejects.toThrow(/unexpected slotAccountKey length 48/);\n        });\n    });\n}\n"],"mappings":";AAWA,SAAS,gBAAAA,qBAAoB;;;ACD7B,SAAS,oBAAoB;AAC7B,SAAS,aAAa;AACtB,SAAS,OAAO,UAAU,QAAQ,iBAAiB;AACnD,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAI9B,IAAM,MAAM,aAAa,UAAU;AAEnC,IAAM,sBAAsB,KAAK,QAAQ,GAAG,gBAAgB;AAC5D,IAAM,kBAAkB;AAkBxB,SAAS,cAAc,OAAuB;AAC1C,SAAO,MAAM,QAAQ,oBAAoB,GAAG;AAChD;AAEA,SAAS,UAAU,OAAe,YAA6B;AAC3D,SAAO,KAAK,cAAc,qBAAqB,GAAG,cAAc,KAAK,CAAC,qBAAqB;AAC/F;AAEA,SAAS,aAA+B;AACpC,SAAO,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE;AACrC;AAEA,eAAsB,UAAU,OAAe,YAAgD;AAC3F,QAAM,OAAO,UAAU,OAAO,UAAU;AACxC,MAAI;AACJ,MAAI;AACA,UAAM,MAAM,SAAS,MAAM,OAAO;AAAA,EACtC,SAAS,GAAY;AACjB,QAAK,GAA6B,SAAS,SAAU,QAAO,WAAW;AACvE,UAAM;AAAA,EACV;AACA,MAAI;AACA,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QACI,QAAQ,YAAY,KACpB,OAAO,OAAO,YAAY,YAC1B,OAAO,YAAY,MACrB;AACE,UAAI,KAAK,mDAAmD,EAAE,OAAO,KAAK,CAAC;AAC3E,aAAO,WAAW;AAAA,IACtB;AACA,WAAO;AAAA,EACX,SAAS,GAAG;AACR,QAAI,KAAK,gDAAgD,EAAE,OAAO,MAAM,OAAO,OAAO,CAAC,EAAE,CAAC;AAC1F,WAAO,WAAW;AAAA,EACtB;AACJ;AAEA,eAAsB,UAClB,OACA,OACA,YACa;AACb,QAAM,OAAO,UAAU,OAAO,UAAU;AACxC,QAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAK9C,QAAM,MAAM,GAAG,IAAI;AACnB,QAAM,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC9E,QAAM,OAAO,KAAK,IAAI;AAC1B;AAEO,SAAS,SAAS,UAAuC;AAC5D,MAAI,SAAS,QAAQ,0BAA0B;AAC3C,WAAO,GAAG,SAAS,GAAG,KAAK,SAAS,KAAK;AAAA,EAC7C;AACA,SAAO,SAAS;AACpB;AAQO,SAAS,qBACZ,OACA,WACqB;AACrB,MAAI,UAAU,WAAW,EAAG,QAAO;AACnC,QAAM,wBAAwB,UAAU,MAAM,CAAC,MAAM;AACjD,QAAI,EAAE,QAAQ,uBAAuB,EAAE,QAAQ,0BAA2B,QAAO;AACjF,WAAO,OAAO,OAAO,MAAM,SAAS,SAAS,CAAC,CAAC;AAAA,EACnD,CAAC;AACD,SAAO,wBAAwB,aAAa;AAChD;AAYO,SAAS,cACZ,OACA,WACA,UACgB;AAChB,MAAI,UAAU,WAAW,SAAS,QAAQ;AACtC,UAAM,IAAI;AAAA,MACN,mDAA8C,UAAU,MAAM,SAAS,SAAS,MAAM;AAAA,IAC1F;AAAA,EACJ;AACA,QAAM,UAAU,EAAE,GAAG,MAAM,QAAQ;AACnC,MAAI,UAAU;AACd,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACtC,UAAM,MAAM,UAAU,CAAC;AACvB,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,QAAQ,YAAa;AAC7B,UAAM,QAAQ,IAAI;AAIlB,QAAI,MAAM,QAAQ,IAAI,KAAK;AACvB,YAAM,IAAI;AAAA,QACN,4CAA4C,CAAC,qBAAgB,IAAI,GAAG,mBAAmB,MAAM,GAAG;AAAA,MACpG;AAAA,IACJ;AACA,UAAM,MAAM,SAAS,GAAG;AACxB,YAAQ,MAAM,KAAK;AAAA,MACf,KAAK;AAAA,MACL,KAAK;AACD,gBAAQ,GAAG,IAAI;AAAA,UACX,KAAK,MAAM;AAAA,UACX,gBAAgB,MAAM,MAAM,MAAM,cAAc;AAAA,QACpD;AACA,kBAAU;AACV;AAAA,MACJ,KAAK;AAID,YAAI,IAAI,QAAQ,0BAA0B;AACtC,kBAAQ,GAAG,IAAI,EAAE,KAAK,0BAA0B,MAAM,IAAI,MAAM;AAChE,oBAAU;AAAA,QACd;AACA;AAAA,MACJ,KAAK;AACD,gBAAQ,GAAG,IAAI;AAAA,UACX,KAAK;AAAA,UACL,yBAAyB,MAAM,MAAM;AAAA,UACrC,uBAAuB,MAAM,MAAM,MAAM,qBAAqB;AAAA,QAClE;AACA,kBAAU;AACV;AAAA,IACR;AAAA,EACJ;AACA,SAAO,UAAU,EAAE,SAAS,GAAG,QAAQ,IAAI;AAC/C;AAGO,SAAS,eACZ,OACA,UACuB;AACvB,SAAO,MAAM,QAAQ,SAAS,QAAQ,CAAC,KAAK;AAChD;AAaA,IAAM,aAAa,oBAAI,IAA8B;AAE9C,SAAS,cACZ,OACA,YACA,IACU;AACV,QAAM,MAAM,UAAU,OAAO,UAAU;AACvC,QAAM,OAAO,WAAW,IAAI,GAAG,KAAK,QAAQ,QAAQ;AAEpD,QAAM,OAAO,KAAK,MAAM,MAAM;AAAA,EAAC,CAAC,EAAE,KAAK,EAAE;AACzC,aAAW;AAAA,IACP;AAAA,IACA,KAAK,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACvB;AACA,SAAO;AACX;AAEA,IAAI,QAAoB;AACpB,QAAM,EAAE,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC/C,QAAM,EAAE,aAAa,OAAO,IAAI,MAAa;AAC7C,QAAM,EAAE,OAAO,IAAI,MAAa;AAEhC,MAAI;AACJ,aAAW,MAAM;AACb,iBAAa,YAAY,KAAK,OAAO,GAAG,kBAAkB,CAAC;AAC3D,WAAO,MAAM,OAAO,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AAED,WAAS,YAAY,MAAM;AACvB,SAAK,oEAAoE,MAAM;AAC3E,aAAO,SAAS,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC,CAAC,EAAE;AAAA,QAC7D;AAAA,MACJ;AACA,aAAO,SAAS,EAAE,KAAK,2BAA2B,OAAO,OAAU,CAAC,CAAC,EAAE;AAAA,QACnE;AAAA,MACJ;AACA,aAAO,SAAS,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC,CAAC,EAAE,KAAK,aAAa;AAAA,IACjF,CAAC;AAED,SAAK,gDAAgD,MAAM;AACvD,aAAO,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE;AAAA,QAC1D;AAAA,MACJ;AACA,aAAO,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE;AAAA,QAC1D;AAAA,MACJ;AAAA,IACJ,CAAC;AAAA,EACL,CAAC;AAED,WAAS,oCAAoC,MAAM;AAC/C,SAAK,+DAA+D,YAAY;AAC5E,YAAM,QAAQ,MAAM,UAAU,UAAU,UAAU;AAClD,aAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,IACrD,CAAC;AAED,SAAK,qDAAqD,YAAY;AAClE,YAAM,WAA6B;AAAA,QAC/B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,aAAa;AAAA,QAChF;AAAA,MACJ;AACA,YAAM,UAAU,UAAU,UAAU,UAAU;AAC9C,YAAM,WAAW,MAAM,UAAU,UAAU,UAAU;AACrD,aAAO,QAAQ,EAAE,QAAQ,QAAQ;AAAA,IACrC,CAAC;AAED,SAAK,mDAAmD,YAAY;AAChE,YAAM,IAAsB;AAAA,QACxB,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA,YAAM,IAAsB;AAAA,QACxB,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA,YAAM,UAAU,SAAS,GAAG,UAAU;AACtC,YAAM,UAAU,SAAS,GAAG,UAAU;AACtC,cAAQ,MAAM,UAAU,SAAS,UAAU,GAAG,QAAQ,iBAAiB,EAAE;AAAA,QACrE,EAAE,QAAQ;AAAA,MACd;AACA,cAAQ,MAAM,UAAU,SAAS,UAAU,GAAG,QAAQ,iBAAiB,EAAE;AAAA,QACrE,EAAE,QAAQ;AAAA,MACd;AAAA,IACJ,CAAC;AAED,SAAK,mEAAmE,YAAY;AAEhF,YAAM,QAA0B,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE;AAC1D,YAAM,OAAO,UAAU,aAAa,OAAO,UAAU,CAAC,EAAE,SAAS,cAAc;AAC/E,YAAM,WAAW,MAAM,UAAU,aAAa,UAAU;AACxD,aAAO,QAAQ,EAAE,QAAQ,KAAK;AAAA,IAClC,CAAC;AAED,SAAK,wDAAwD,YAAY;AACrE,YAAM,UAAU,UAAU,UAAU,UAAU,GAAG,oBAAoB,OAAO;AAC5E,YAAM,QAAQ,MAAM,UAAU,UAAU,UAAU;AAClD,aAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,IACrD,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM;AAAA,QACF,UAAU,UAAU,UAAU;AAAA,QAC9B,KAAK,UAAU,EAAE,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC;AAAA,QAC3C;AAAA,MACJ;AACA,YAAM,QAAQ,MAAM,UAAU,UAAU,UAAU;AAClD,aAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;AAAA,IACrD,CAAC;AAED,SAAK,6DAA6D,YAAY;AAC1E,YAAM,EAAE,KAAK,IAAI,MAAa;AAC9B,YAAM,QAA0B,EAAE,SAAS,GAAG,SAAS,CAAC,EAAE;AAC1D,YAAM,UAAU,UAAU,OAAO,UAAU;AAC3C,YAAM,IAAI,MAAM,KAAK,UAAU,UAAU,UAAU,CAAC;AAEpD,aAAO,EAAE,OAAO,GAAK,EAAE,KAAK,GAAK;AAAA,IACrC,CAAC;AAAA,EACL,CAAC;AAED,WAAS,wBAAwB,MAAM;AACnC,SAAK,oCAAoC,MAAM;AAC3C,YAAM,QAAQ,WAAW;AACzB,aAAO,qBAAqB,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ;AAAA,IACzD,CAAC;AAED,SAAK,mCAA8B,MAAM;AACrC,YAAM,QAAQ,WAAW;AACzB;AAAA,QACI,qBAAqB,OAAO,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,MAChF,EAAE,KAAK,QAAQ;AAAA,IACnB,CAAC;AAED,SAAK,mDAA8C,MAAM;AACrD,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,UACtE,yBAAyB;AAAA,YACrB,KAAK;AAAA,YACL,gBAAgB;AAAA,UACpB;AAAA,QACJ;AAAA,MACJ;AACA;AAAA,QACI,qBAAqB,OAAO;AAAA,UACxB,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,UAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,QACvD,CAAC;AAAA,MACL,EAAE,KAAK,UAAU;AAAA,IACrB,CAAC;AAED,SAAK,wDAAmD,MAAM;AAC1D,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA;AAAA,QACI,qBAAqB,OAAO;AAAA,UACxB,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,UAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,QACvD,CAAC;AAAA,MACL,EAAE,KAAK,QAAQ;AAAA,IACnB,CAAC;AAED,SAAK,+EAA0E,MAAM;AACjF,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,aAAa;AAAA,YACT,KAAK;AAAA,YACL,yBAAyB;AAAA,YACzB,uBAAuB;AAAA,UAC3B;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,qBAAqB,OAAO,CAAC,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC,CAAC,CAAC,EAAE;AAAA,QAC5E;AAAA,MACJ;AAAA,IACJ,CAAC;AAED,SAAK,+EAA0E,MAAM;AACjF,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,6BAA6B,EAAE,KAAK,0BAA0B,MAAM,EAAE;AAAA,QAC1E;AAAA,MACJ;AACA,aAAO,qBAAqB,OAAO,CAAC,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;AAAA,QAC/E;AAAA,MACJ;AAAA,IACJ,CAAC;AAAA,EACL,CAAC;AAED,WAAS,iBAAiB,MAAM;AAC5B,SAAK,qCAAqC,MAAM;AAC5C,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC;AAAA,QACpC,EAAE,KAAK,YAAY,OAAO,OAAU;AAAA,QACpC,EAAE,KAAK,gBAAgB,OAAO,OAAU;AAAA,MAC5C;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,OAAO,EAAE,QAAQ,CAAC,CAAC;AAAA,IACrC,CAAC;AAED,SAAK,wDAAwD,MAAM;AAC/D,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,KAAM,KAAM,KAAM,GAAI,CAAC,EAAE;AAAA,UACtE;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,QAAQ,iBAAiB,EAAE,QAAQ;AAAA,QAC7C,KAAK;AAAA,QACL,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL,CAAC;AAED,SAAK,4DAA4D,MAAM;AACnE,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC,CAAC,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC;AACrF,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO,EAAE,KAAK,0BAA0B,OAAO,OAAU;AAAA,QAC7D;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,QAAQ,2BAA2B,CAAC,EAAE,QAAQ;AAAA,QACxD,KAAK;AAAA,QACL,MAAM;AAAA,MACV,CAAC;AAAA,IACL,CAAC;AAED,SAAK,2CAA2C,MAAM;AAClD,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC,CAAC,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC;AAClF,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO;AAAA,cACH,yBAAyB;AAAA,cACzB,uBAAuB,IAAI,WAAW,CAAC,KAAM,GAAI,CAAC;AAAA,YACtD;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,QAAQ,WAAW,EAAE,QAAQ;AAAA,QACvC,KAAK;AAAA,QACL,yBAAyB;AAAA,QACzB,uBAAuB;AAAA,MAC3B,CAAC;AAAA,IACL,CAAC;AAED,SAAK,uEAAuE,MAAM;AAE9E,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,OAAO;AAAA,QAC1E;AAAA,MACJ;AACA,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC;AAAA,QACpC,EAAE,KAAK,YAAY,OAAO,OAAU;AAAA,QACpC,EAAE,KAAK,gBAAgB,OAAO,OAAU;AAAA,MAC5C;AACA,aAAO,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE,KAAK,KAAK;AAAA,IAChE,CAAC;AAED,SAAK,gDAAgD,MAAM;AACvD,YAAM,QAAQ,WAAW;AACzB,aAAO,cAAc,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK;AAAA,IACnD,CAAC;AAED,SAAK,mEAAmE,MAAM;AAC1E,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE;AAAA,UACjD;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE,IAAI,KAAK,KAAK;AAAA,IACpE,CAAC;AAED,SAAK,sDAAsD,MAAM;AAC7D,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC,CAAC,EAAE,KAAK,YAAY,OAAO,OAAU,CAAC;AAC9E,aAAO,MAAM,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE,QAAQ,iBAAiB;AAAA,IACrF,CAAC;AAED,SAAK,mFAAmF,MAAM;AAI1F,YAAM,QAAQ,WAAW;AACzB,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,UACpD;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,MAAM,cAAc,OAAO,WAAW,QAAQ,CAAC,EAAE;AAAA,QACpD;AAAA,MACJ;AAAA,IACJ,CAAC;AAED,SAAK,oDAAoD,MAAM;AAC3D,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,yBAAyB;AAAA,YACrB,KAAK;AAAA,YACL,gBAAgB;AAAA,UACpB;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,YAAmC;AAAA,QACrC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,WAAkC;AAAA,QACpC;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,UACpD;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,SAAS,cAAc,OAAO,WAAW,QAAQ;AACvD,aAAO,OAAO,KAAK,OAAO,OAAO,EAAE,KAAK,CAAC,EAAE,QAAQ;AAAA,QAC/C;AAAA,QACA;AAAA,MACJ,CAAC;AACD,aAAO,OAAO,QAAQ,uBAAuB,EAAE,QAAQ;AAAA,QACnD,KAAK;AAAA,QACL,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL,CAAC;AAAA,EACL,CAAC;AAED,WAAS,kBAAkB,MAAM;AAC7B,SAAK,sDAAsD,MAAM;AAC7D,YAAM,QAA0B;AAAA,QAC5B,SAAS;AAAA,QACT,SAAS;AAAA,UACL,6BAA6B;AAAA,YACzB,KAAK;AAAA,YACL,MAAM;AAAA,UACV;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,eAAe,OAAO,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ;AAAA,QAC/E,KAAK;AAAA,QACL,MAAM;AAAA,MACV,CAAC;AAED,aAAO,eAAe,OAAO,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS;AAAA,IACxF,CAAC;AAED,SAAK,oCAAoC,MAAM;AAC3C,YAAM,QAAQ,WAAW;AACzB;AAAA,QACI,eAAe,OAAO,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAAA,MACxE,EAAE,SAAS;AAAA,IACf,CAAC;AAAA,EACL,CAAC;AAED,WAAS,iBAAiB,MAAM;AAC5B,SAAK,qDAAqD,YAAY;AAClE,YAAM,QAAkB,CAAC;AACzB,YAAM,IAAI,cAAc,OAAO,YAAY,YAAY;AACnD,cAAM,KAAK,SAAS;AACpB,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC1C,cAAM,KAAK,OAAO;AAAA,MACtB,CAAC;AACD,YAAM,IAAI,cAAc,OAAO,YAAY,YAAY;AACnD,cAAM,KAAK,SAAS;AACpB,cAAM,KAAK,OAAO;AAAA,MACtB,CAAC;AACD,YAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC;AACxB,aAAO,KAAK,EAAE,QAAQ,CAAC,WAAW,SAAS,WAAW,OAAO,CAAC;AAAA,IAClE,CAAC;AAED,SAAK,8DAA8D,YAAY;AAC3E,UAAI,OAAO;AACX,YAAM,IAAI,cAAc,SAAS,YAAY,YAAY;AAErD,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC1C,eAAO,IAAI,EAAE,KAAK,IAAI;AAAA,MAC1B,CAAC;AACD,YAAM,IAAI,cAAc,SAAS,YAAY,YAAY;AACrD,eAAO;AAAA,MACX,CAAC;AACD,YAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,IAC5B,CAAC;AAED,SAAK,2EAA2E,YAAY;AACxF,YAAM,IAAI,cAAc,OAAO,YAAY,YAAY;AACnD,cAAM,IAAI,MAAM,MAAM;AAAA,MAC1B,CAAC;AACD,YAAM,OAAO,CAAC,EAAE,QAAQ,QAAQ,MAAM;AACtC,YAAM,IAAI,MAAM,cAAc,OAAO,YAAY,YAAY,IAAI;AACjE,aAAO,CAAC,EAAE,KAAK,IAAI;AAAA,IACvB,CAAC;AAAA,EACL,CAAC;AACL;;;ACnoBA,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,eAAe;AACxB,SAAS,cAAc,SAAS,qBAAqB;AAErD,SAAS,yBAAyB;AAOlC,SAAS,qCAAqC,QAAgC;AAC1E,QAAM,gBAAgB,gBAAgB,gBAAgB,OAAO,SAAS,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE;AACvF,QAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,MAAI,IAAI,eAAe,CAAC;AACxB,MAAI,IAAI,OAAO,SAAS,IAAI,EAAE,GAAG,EAAE;AACnC,SAAO;AACX;AAKA,SAAS,aAAa,QAGpB;AACE,MAAI,OAAO,WAAW,IAAI;AACtB,UAAM,SAAS,aAAa,EAAE,MAAM,QAAQ,OAAO,SAAS,QAAQ,cAAc,CAAC;AACnF,UAAM,UAAU,OAAO,EAAE;AACzB,WAAO,EAAE,WAAW,QAAQ,WAAW,MAAM,CAAC,SAAS,QAAQ,KAAK,IAAI,EAAE;AAAA,EAC9E;AACA,MAAI,OAAO,WAAW,IAAI;AACtB,UAAM,gBAAgB,qCAAqC,MAAM;AACjE,WAAO;AAAA,MACH,WAAW,QAAQ,aAAa,aAAa;AAAA,MAC7C,MAAM,CAAC,SAAS,QAAQ,KAAK,MAAM,aAAa;AAAA,IACpD;AAAA,EACJ;AACA,QAAM,IAAI;AAAA,IACN,6DAA6D,OAAO,MAAM;AAAA,EAC9E;AACJ;AAUO,SAAS,qBAAqB,OAAyC;AAC1E,MAAI,MAAM,QAAQ,uBAAuB,MAAM,QAAQ,2BAA2B;AAC9E,UAAM,IAAI;AAAA,MACN,4BAA4B,MAAM,GAAG;AAAA,IACzC;AAAA,EACJ;AACA,QAAM,SAAS,QAAQ,MAAM,cAAc;AAC3C,QAAM,EAAE,WAAW,KAAK,IAAI,aAAa,MAAM;AAC/C,SAAO,kBAAkB,WAAW,WAAW,OAAO,SAAS,KAAK,IAAI,CAAC;AAC7E;AAiBA,eAAsB,wBAClB,SACA,UAC8B;AAC9B,QAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,QAAM,QAAQ,eAAe,OAAO,QAAQ;AAC5C,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,qBAAqB,KAAK;AACrC;AAEA,IAAI,QAAoB;AAepB,MAAS,cAAT,SAAqB,OAAgC;AACjD,WAAO,EAAE,OAAO,WAAW;AAAA,EAC/B,GAES,cAAT,WAKE;AAIE,UAAM,SAAS,qBAAqB,UAAU;AAC9C,UAAM,SAAS,aAAa,EAAE,MAAM,QAAQ,OAAO,SAAS,QAAQ,cAAc,CAAC;AACnF,UAAM,UAAU,OAAO,EAAE;AACzB,WAAO;AAAA,MACH;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,KAAKC,OAAM,MAAM;AAAA,MACjB,MAAM,CAAC,QAAQ,QAAQ,KAAK,GAAG;AAAA,IACnC;AAAA,EACJ;AAtBS,EAAAC,eAAA,aAIAC,eAAA;AAlBT,QAAM,EAAE,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC/C,QAAM,EAAE,aAAa,OAAO,IAAI,MAAa;AAC7C,QAAM,EAAE,OAAO,IAAI,MAAa;AAChC,QAAM,EAAE,MAAM,SAAS,IAAI,MAAa;AACxC,QAAM,EAAE,WAAAC,WAAU,IAAI,MAAa;AACnC,QAAM,EAAE,YAAY,qBAAqB,IAAI,MAAa;AAC1D,QAAM,EAAE,OAAAH,OAAM,IAAI,MAAa;AAE/B,MAAI;AACJ,aAAW,MAAM;AACb,iBAAa,YAAY,SAAS,OAAO,GAAG,mBAAmB,CAAC;AAChE,WAAO,MAAM,OAAO,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpE,CAAC;AA0BD,WAAS,2BAA2B,MAAM;AACtC,SAAK,6CAA6C,YAAY;AAC1D,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,SAAS,MAAM,wBAAwB,SAAS;AAAA,QAClD,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,SAAS;AAAA,IAC5B,CAAC;AAED,SAAK,+EAA+E,YAAY;AAC5F,YAAM,EAAE,KAAK,UAAU,IAAI,YAAY;AACvC,YAAMG;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,IAAI;AAAA,UACvE;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,IAAI,SAAS;AAC5B,aAAO,QAAQ,SAAS,EAAE,QAAQ,SAAS;AAAA,IAC/C,CAAC;AAED,SAAK,uEAAuE,YAAY;AACpF,YAAM,EAAE,KAAK,UAAU,IAAI,YAAY;AACvC,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,IAAI;AAAA,UACvE;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AAOD,YAAM,UAAU,IAAI,YAAY,EAAE,OAAO,YAAY;AAGrD,YAAM,UAAU,IAAI,WAAW;AAAA,QAC3B,GAAG,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,QACrC,GAAG;AAAA,QACH,GAAG,IAAI,YAAY,EAAE,OAAO,UAAU;AAAA,MAC1C,CAAC;AACD,YAAM,YAAY,MAAM,OAAQ,UAAU,OAAO;AACjD,aAAO,QAAQ,OAAO,WAAW,SAAS,SAAS,CAAC,EAAE,KAAK,IAAI;AAAA,IACnE,CAAC;AAED,SAAK,wDAAwD,YAAY;AAErE,YAAM,gBACF;AAEJ,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB;AAAA,cACf,KAAK;AAAA,cACL,gBAAgB;AAAA,YACpB;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,IAAI,SAAS;AAI5B,YAAM,EAAE,WAAW,eAAe,IAAI,YAAY;AAClD,aAAO,QAAQ,SAAS,EAAE,QAAQ,cAAc;AAIhD,YAAM,UAAU,IAAI,YAAY,EAAE,OAAO,oBAAoB;AAC7D,YAAM,UAAU,IAAI,WAAW;AAAA,QAC3B,GAAG,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,QACrC,GAAG;AAAA,QACH,GAAG,IAAI,YAAY,EAAE,OAAO,UAAU;AAAA,MAC1C,CAAC;AACD,YAAM,MAAM,MAAM,OAAQ,UAAU,OAAO;AAC3C,aAAO,QAAQ,OAAO,KAAK,SAAS,cAAc,CAAC,EAAE,KAAK,IAAI;AAAA,IAClE,CAAC;AAED,SAAK,kDAAkD,YAAY;AAC/D,YAAM,EAAE,KAAK,UAAU,IAAI,YAAY;AACvC,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,yBAAyB;AAAA,cACrB,KAAK;AAAA,cACL,gBAAgB;AAAA,YACpB;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,SAAS,MAAM,wBAAwB,YAAY,GAAG,GAAG;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,QAAQ,SAAS,EAAE,QAAQ,SAAS;AAAA,IAC/C,CAAC;AAED,SAAK,2DAA2D,YAAY;AACxE,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,6BAA6B,EAAE,KAAK,0BAA0B,MAAM,EAAE;AAAA,UAC1E;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM;AAAA,QACF,wBAAwB,YAAY,GAAG,GAAG;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,0DAA0D;AAAA,IAChF,CAAC;AAED,SAAK,0DAA0D,YAAY;AACvE,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,aAAa;AAAA,cACT,KAAK;AAAA,cACL,yBAAyB;AAAA,cACzB,uBAAuB;AAAA,YAC3B;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM;AAAA,QACF,wBAAwB,YAAY,GAAG,GAAG;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,+CAA+C;AAAA,IACrE,CAAC;AAED,SAAK,iEAAiE,YAAY;AAC9E,YAAM,IAAI,YAAY;AAEtB,YAAM,kBAAkB,IAAI,WAAW,EAAE,EAAE,KAAK,CAAI;AACpD,YAAM,eAAe,aAAa;AAAA,QAC9B,MAAM;AAAA,QACN,OAAO;AAAA,QACP,QAAQ;AAAA,MACZ,CAAC,EAAE,EAAE;AAEL,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB,EAAE,KAAK,qBAAqB,gBAAgB,EAAE,IAAI;AAAA,UACzE;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AACA,YAAMA;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB;AAAA,cACf,KAAK;AAAA,cACL,gBAAgBH,OAAM,eAAe;AAAA,YACzC;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM,UAAU,MAAM,wBAAwB,YAAY,OAAO,GAAG;AAAA,QAChE,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,YAAM,UAAU,MAAM,wBAAwB,YAAY,OAAO,GAAG;AAAA,QAChE,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,SAAS,SAAS,EAAE,QAAQ,EAAE,SAAS;AAC9C,aAAO,SAAS,SAAS,EAAE,QAAQ,aAAa,SAAS;AACzD,aAAO,SAAS,SAAS,EAAE,IAAI,QAAQ,SAAS,SAAS;AAAA,IAC7D,CAAC;AAED,SAAK,+CAA+C,YAAY;AAG5D,YAAMG;AAAA,QACF;AAAA,QACA;AAAA,UACI,SAAS;AAAA,UACT,SAAS;AAAA,YACL,mBAAmB;AAAA,cACf,KAAK;AAAA,cACL,gBAAgBH,OAAM,IAAI,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;AAAA,YACpD;AAAA,UACJ;AAAA,QACJ;AAAA,QACA;AAAA,MACJ;AAEA,YAAM;AAAA,QACF,wBAAwB,YAAY,GAAG,GAAG;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,qCAAqC;AAAA,IAC3D,CAAC;AAAA,EACL,CAAC;AACL;AA/Qa,IAAAC;AAIA,IAAAC;;;AFvFb,IAAME,OAAMC,cAAa,UAAU;AA6DnC,eAAsB,0BAClB,SACA,SACA,WACA,UAA4C,CAAC,GACf;AAC9B,SAAO,cAAc,QAAQ,OAAO,QAAQ,YAAY,YAAY;AAChE,UAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,UAAM,aAAa,QAAQ,cAAc,qBAAqB,OAAO,SAAS;AAC9E,IAAAC,KAAI,MAAM,6BAA6B;AAAA,MACnC,WAAW,QAAQ;AAAA,MACnB,WAAW,UAAU,IAAI,CAAC,MAAM,EAAE,GAAG;AAAA,MACrC;AAAA,MACA,YAAY,QAAQ,eAAe;AAAA,IACvC,CAAC;AAED,UAAM,WAAW,MAAM;AAAA,MACnB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACJ;AAEA,UAAM,OAAO,cAAc,OAAO,WAAW,QAAQ;AACrD,QAAI,SAAS,OAAO;AAChB,YAAM,UAAU,QAAQ,OAAO,MAAM,QAAQ,UAAU;AAAA,IAC3D;AAEA,WAAO;AAAA,EACX,CAAC;AACL;AAYA,eAAsB,uBAClB,SACA,WACA,WACA,YAC8B;AAC9B,QAAM,SAAS,MAAM,QAAQ,0BAA0B;AAAA,IACnD,kBAAkB;AAAA,IAClB;AAAA,IACA;AAAA,EACJ,CAAC;AAED,MAAI,OAAO,MAAM,GAAG;AAChB,UAAM,IAAI,MAAM,qCAAqC,OAAO,MAAM,OAAO,EAAE;AAAA,EAC/E;AAEA,SAAO,OAAO;AAClB;AAQA,eAAsB,oBAClB,SACA,UACgC;AAChC,QAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,SAAO,eAAe,OAAO,QAAQ;AACzC;AAeA,eAAsB,wBAClB,SACA,SACA,UACuB;AAKvB,SAAO,cAAc,QAAQ,OAAO,QAAQ,YAAY,YAAY;AAKhE,UAAM,QAAQ,MAAM,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC/D,UAAM,MAAM,eAAe,OAAO,QAAQ;AAC1C,QAAI,IAAK,QAAO,qBAAqB,GAAG;AAExC,IAAAA,KAAI,MAAM,mDAAmD,EAAE,UAAU,SAAS,IAAI,CAAC;AAMvF,UAAM,aAAa,qBAAqB,OAAO,CAAC,QAAQ,CAAC;AACzD,UAAM,WAAW,MAAM;AAAA,MACnB;AAAA,MACA,QAAQ;AAAA,MACR,CAAC,QAAQ;AAAA,MACT;AAAA,IACJ;AACA,UAAM,OAAO,cAAc,OAAO,CAAC,QAAQ,GAAG,QAAQ;AACtD,QAAI,SAAS,OAAO;AAChB,YAAM,UAAU,QAAQ,OAAO,MAAM,QAAQ,UAAU;AAAA,IAC3D;AAEA,UAAM,UAAU,SAAS,CAAC;AAC1B,QAAI,CAAC,SAAS;AAGV,YAAM,IAAI;AAAA,QACN,yEAAoE,SAAS,GAAG;AAAA,MACpF;AAAA,IACJ;AACA,QAAI,QAAQ,QAAQ,aAAa;AAC7B,YAAM,IAAI;AAAA,QACN,uCAAuC,QAAQ,GAAG,QAAQ,SAAS,GAAG;AAAA,MAC1E;AAAA,IACJ;AAIA,UAAM,aAAa,eAAe,MAAM,QAAQ;AAChD,QAAI,CAAC,YAAY;AAGb,YAAM,IAAI;AAAA,QACN,oFAAoF,SAAS,GAAG;AAAA,MACpG;AAAA,IACJ;AACA,WAAO,qBAAqB,UAAU;AAAA,EAC1C,CAAC;AACL;AAEA,IAAI,QAAoB;AAqBpB,MAAS,cAAT,SAAqB,OAAgC;AAEjD,WAAO,EAAE,OAAO,YAAY,eAAe;AAAA,EAC/C,GAKS,cAAT,SAAqB,MAEL;AACZ,WAAO;AAAA,MACH,2BAA2B,GAAG;AAAA,QAC1B,KAAK,8BACA,YAAY;AACT,gBAAM,IAAI,MAAM,oDAAoD;AAAA,QACxE;AAAA,MACR;AAAA,IACJ;AAAA,EACJ;AAnBS,EAAAC,eAAA,aAQAC,eAAA;AA5BT,QAAM,EAAE,UAAU,MAAM,QAAQ,IAAI,WAAW,IAAI;AACnD,QAAM,EAAE,IAAI,IAAI,IAAI,MAAa;AACjC,QAAM,EAAE,aAAa,OAAO,IAAI,MAAa;AAC7C,QAAM,EAAE,OAAO,IAAI,MAAa;AAChC,QAAM,EAAE,MAAM,SAAS,IAAI,MAAa;AAIxC,QAAM,EAAE,sBAAsB,WAAW,IAAI,MAAa;AAC1D,QAAM,EAAE,OAAAC,OAAM,IAAI,MAAa;AAE/B,MAAI;AACJ,aAAW,MAAM;AAIb,qBAAiB,YAAY,SAAS,OAAO,GAAG,YAAY,CAAC;AAC7D,WAAO,MAAM,OAAO,gBAAgB,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACxE,CAAC;AAuBD,WAAS,6BAA6B,MAAM;AACxC,SAAK,6DAA6D,YAAY;AAC1E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU;AAAA,QACZ;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE;AAAA,UACvD;AAAA,QACJ;AAAA,QACA,EAAE,KAAK,YAAqB,OAAO,OAAU;AAAA,MACjD;AACA,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,OAAO;AAAA,QACrB;AAAA,MACJ,CAAC;AAED,YAAM,WAAW,MAAM,0BAA0B,SAAS,YAAY,QAAQ,GAAG;AAAA,QAC7E,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD,CAAC;AAED,aAAO,QAAQ,EAAE,aAAa,CAAC;AAC/B,aAAO,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,QAAQ;AAClD,aAAO,SAAS,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ;AAAA,QACpD;AAAA,QACA;AAAA,MACJ,CAAC;AACD,aAAO,QAAQ,EAAE,QAAQ,OAAO;AAAA,IACpC,CAAC;AAED,SAAK,0CAA0C,YAAY;AACvD,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,CAAC;AAAA,QAChB;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,iBAAiB,GAAG,CAAC,CAAC;AAE3E,aAAO,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,iBAAiB;AAAA,IAC/D,CAAC;AAED,SAAK,kDAAkD,YAAY;AAC/D,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,CAAC;AAAA,QAChB;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG,CAAC,CAAC;AAE7D,aAAO,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,QAAQ;AAAA,IAChD,CAAC;AAED,SAAK,yDAAyD,YAAY;AACtE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,EAAE,KAAK,YAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,QAC9D;AAAA,MACJ,CAAC;AAED,YAAM;AAAA,QACF;AAAA,QACA,YAAY,GAAG;AAAA,QACf,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAAA,QAC/C,EAAE,YAAY,WAAW;AAAA,MAC7B;AAEA,aAAO,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,UAAU;AAAA,IAClD,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,EAAE,KAAK,YAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,QAC9D;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,QACvD,EAAE,KAAK,0BAA0B,OAAO,EAAE;AAAA,MAC9C,CAAC;AAED,YAAM,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC;AACpC,aAAO,KAAK,GAAG,EAAE,KAAK,wBAAwB;AAC9C,UAAI,KAAK,QAAQ,0BAA0B;AACvC,eAAO,KAAK,KAAK,EAAE,KAAK,CAAC;AAAA,MAC7B;AAAA,IACJ,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,IAAI,IAAI,MAAM,qBAAqB,CAAC;AAAA,MAC5C,CAAC;AAED,YAAM;AAAA,QACF,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,UACjD,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QACjD,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,uDAAuD;AAAA,IAC7E,CAAC;AAED,SAAK,gFAAgF,YAAY;AAQ7F,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,CAAC,EAAE,KAAK,gBAAyB,OAAO,OAAU,CAAC;AACnE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,OAAO;AAAA,QACrB;AAAA,MACJ,CAAC;AAED,YAAM,WAAW,MAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,QACxE,EAAE,KAAK,eAAe,OAAO,OAAU;AAAA,MAC3C,CAAC;AAED,YAAM,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC;AACpC,aAAO,KAAK,GAAG,EAAE,KAAK,aAAa;AACnC,aAAO,QAAQ,EAAE,QAAQ,OAAO;AAAA,IACpC,CAAC;AAED,SAAK,sEAAsE,YAAY;AAInF,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,GAAG,CAAC,CAAC;AAAA,QAChB;AAAA,MACJ,CAAC;AAED,YAAM,WAAW,MAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG,CAAC,CAAC;AAE9E,aAAO,QAAQ,EAAE,aAAa,CAAC;AAC/B,aAAO,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxC,aAAO,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC/B,CAAC;AAAA,EACL,CAAC;AAED,WAAS,sDAAiD,MAAM;AAC5D,aAAS,kBAAkB,SAAiC;AACxD,aAAO,GAAG;AAAA,QACN;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,QAAQ;AAAA,UACrC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,SAAK,+CAA+C,YAAY;AAC5D,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,QACtD;AAAA,MACJ,CAAC;AAED,YAAM,0BAA0B,SAAS,YAAY,GAAG,GAAG;AAAA,QACvD,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAED,aAAO,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,QAAQ;AAAA,IAChD,CAAC;AAED,SAAK,gEAAgE,YAAY;AAC7E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAOC,SAAQ;AACtC,mBAAS,KAAKA,IAAG;AACjB,iBAAO,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,QACtD;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,MAA6B,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAElF,YAAM,0BAA0B,SAAS,SAAS,GAAG;AACrD,YAAM,0BAA0B,SAAS,SAAS,GAAG;AAErD,aAAO,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,UAAU,UAAU,CAAC;AAAA,IAC5E,CAAC;AAED,SAAK,uDAAuD,YAAY;AACpE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAOA,SAAQ;AACtC,mBAAS,KAAKA,IAAG;AACjB,iBAAO,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,QACtD;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,MAA6B,CAAC,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAMlF,YAAM,0BAA0B,SAAS,SAAS,GAAG;AACrD,YAAM,0BAA0B,SAAS,SAAS,KAAK,EAAE,YAAY,SAAS,CAAC;AAE/E,aAAO,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,UAAU,QAAQ,CAAC;AAAA,IAC1E,CAAC;AAED,SAAK,mEAAmE,YAAY;AAChF,YAAM,UAAU,IAAI,WAAW,CAAC,KAAM,KAAM,KAAM,GAAI,CAAC;AACvD,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,kBAAkB,OAAO;AAAA,MACpE,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAGD,YAAM,SAAS,MAAM,oBAAoB,SAAS;AAAA,QAC9C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,QAAQ;AAAA,QACnB,KAAK;AAAA,QACL,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL,CAAC;AAED,SAAK,oDAAoD,YAAY;AACjE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG;AAAA,UACC,EAAE,KAAK,YAAqB,OAAO,OAAU;AAAA,UAC7C,EAAE,KAAK,gBAAyB,OAAO,OAAU;AAAA,QACrD,CAAC;AAAA,MACT,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD,CAAC;AAED;AAAA,QACI,MAAM,oBAAoB,SAAS,EAAE,KAAK,qBAAqB,OAAO,OAAU,CAAC;AAAA,MACrF,EAAE,SAAS;AACX;AAAA,QACI,MAAM,oBAAoB,SAAS;AAAA,UAC/B,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,SAAS;AAAA,IACf,CAAC;AAED,SAAK,kEAAkE,YAAY;AAK/E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AAEjB,iBAAO;AAAA,YACH,IAAI,UAAU;AAAA,cAAI,CAAC,IAAI,MACnB,MAAM,IACA;AAAA,gBACI,KAAK;AAAA,gBACL,OAAO;AAAA,kBACH,KAAK;AAAA,kBACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE;AAAA,gBACjD;AAAA,cACJ,IACA,EAAE,KAAK,YAAqB,OAAO,OAAU;AAAA,YACvD;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAGD,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QAC7C,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,MACvD,CAAC;AAED,aAAO,SAAS,SAAS,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,QAAQ;AAAA,IAClE,CAAC;AAED,SAAK,qDAAqD,YAAY;AAElE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAOA,SAAQ;AACtC,mBAAS,KAAKA,IAAG;AACjB,iBAAO,GAAG;AAAA,YACN;AAAA,cACI,KAAK;AAAA,cACL,OAAO;AAAA,gBACH,KAAK;AAAA,gBACL,OAAO;AAAA,kBACH,yBAAyB;AAAA,kBACzB,uBAAuB,IAAI,WAAW,CAAC,GAAI,CAAC;AAAA,gBAChD;AAAA,cACJ;AAAA,YACJ;AAAA,UACJ,CAAC;AAAA,QACL;AAAA,MACJ,CAAC;AAED,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,MAA6B,CAAC,EAAE,KAAK,eAAe,OAAO,OAAU,CAAC;AAE5E,YAAM,0BAA0B,SAAS,SAAS,GAAG;AACrD,YAAM,0BAA0B,SAAS,SAAS,GAAG;AAErD,aAAO,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,UAAU,QAAQ,CAAC;AAAA,IAC1E,CAAC;AAED,SAAK,wFAAwF,YAAY;AAKrG,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AAEtC,gBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AACzC,gBAAM,MAAM,IAAI,UAAU,CAAC,GAAG;AAC9B,iBAAO,GAAG;AAAA,YACN;AAAA,cACI,KAAK;AAAA,cACL,OACI,QAAQ,sBACF;AAAA,gBACI,KAAK;AAAA,gBACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,cACpD,IACA;AAAA,gBACI,KAAK;AAAA,gBACL,OAAO,EAAE,gBAAgB,IAAI,WAAW,CAAC,GAAI,CAAC,EAAE;AAAA,cACpD;AAAA,YACd;AAAA,UACJ,CAAC;AAAA,QACL;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,QAAQ,IAAI;AAAA,QACd,0BAA0B,SAAS,SAAS;AAAA,UACxC,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,QACjD,CAAC;AAAA,QACD,0BAA0B,SAAS,SAAS;AAAA,UACxC,EAAE,KAAK,2BAA2B,OAAO,OAAU;AAAA,QACvD,CAAC;AAAA,MACL,CAAC;AAED;AAAA,QACI,MAAM,oBAAoB,SAAS;AAAA,UAC/B,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,IAAI,SAAS;AACf;AAAA,QACI,MAAM,oBAAoB,SAAS;AAAA,UAC/B,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,IAAI,SAAS;AAAA,IACnB,CAAC;AAED,SAAK,iEAAiE,YAAY;AAC9E,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,kBAAkB,IAAI,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAAA,MACtF,CAAC;AAED,YAAM,WAAW,YAAY,OAAO;AACpC,YAAM,WAAW,YAAY,OAAO;AAEpC,YAAM,0BAA0B,SAAS,UAAU;AAAA,QAC/C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AAGD;AAAA,QACI,MAAM,oBAAoB,UAAU;AAAA,UAChC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,SAAS;AACX;AAAA,QACI,MAAM,oBAAoB,UAAU;AAAA,UAChC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,IAAI,SAAS;AAAA,IACnB,CAAC;AAAA,EACL,CAAC;AAED,WAAS,uBAAuB,MAAM;AAClC,SAAK,uCAAuC,YAAY;AACpD,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,SAAS,MAAM,oBAAoB,SAAS;AAAA,QAC9C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,MAAM,EAAE,SAAS;AAAA,IAC5B,CAAC;AAED,SAAK,wDAAwD,YAAY;AACrE,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG;AAAA,UACC;AAAA,YACI,KAAK;AAAA,YACL,OAAO;AAAA,cACH,KAAK;AAAA,cACL,OAAO;AAAA,YACX;AAAA,UACJ;AAAA,QACJ,CAAC;AAAA,MACT,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAC/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,0BAA0B,OAAO,EAAE;AAAA,MAC9C,CAAC;AAED;AAAA,QACI,MAAM,oBAAoB,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC;AAAA,MAClF,EAAE,QAAQ,EAAE,KAAK,0BAA0B,MAAM,EAAE,CAAC;AAEpD;AAAA,QACI,MAAM,oBAAoB,SAAS,EAAE,KAAK,0BAA0B,OAAO,EAAE,CAAC;AAAA,MAClF,EAAE,SAAS;AAAA,IACf,CAAC;AAAA,EACL,CAAC;AAED,WAAS,2BAA2B,MAAM;AAEtC,UAAM,UAAU,qBAAqB,UAAU;AAE/C,aAAS,4BAA4B;AACjC,aAAO,GAAG;AAAA,QACN;AAAA,UACI,KAAK;AAAA,UACL,OAAO;AAAA,YACH,KAAK;AAAA,YACL,OAAO,EAAE,gBAAgB,QAAQ;AAAA,UACrC;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,SAAK,2DAA2D,YAAY;AACxE,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,0BAA0B;AAAA,QACrC;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAG/B,YAAM,0BAA0B,SAAS,SAAS;AAAA,QAC9C,EAAE,KAAK,qBAAqB,OAAO,OAAU;AAAA,MACjD,CAAC;AACD,aAAO,QAAQ,EAAE,aAAa,CAAC;AAI/B,YAAM,SAAS,MAAM,wBAAwB,SAAS,SAAS;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,OAAO,SAAS,EAAE,eAAe,UAAU;AAClD,aAAO,QAAQ,EAAE,aAAa,CAAC;AAAA,IACnC,CAAC;AAED,SAAK,6DAA6D,YAAY;AAC1E,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AACjB,iBAAO,0BAA0B;AAAA,QACrC;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAG/B,YAAM,SAAS,MAAM,wBAAwB,SAAS,SAAS;AAAA,QAC3D,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,OAAO,SAAS,EAAE,eAAe,UAAU;AAClD,aAAO,QAAQ,EAAE,aAAa,CAAC;AAE/B,aAAO,SAAS,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC;AAAA,IACjF,CAAC;AAED,SAAK,mEAA8D,YAAY;AAC3E,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG,CAAC,EAAE,KAAK,YAAqB,OAAO,OAAU,CAAC,CAAC;AAAA,MAC3D,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,2CAA2C;AAAA,IACjE,CAAC;AAED,SAAK,0EAA0E,YAAY;AAGvF,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,GAAG,CAAC,CAAC;AAAA,MAChD,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,sCAAsC;AAAA,IAC5D,CAAC;AAED,SAAK,4CAA4C,YAAY;AACzD,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,GAAG,CAAC,EAAE,KAAK,gBAAyB,OAAO,OAAU,CAAC,CAAC;AAAA,MAC/D,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,qDAAqD;AAAA,IAC3E,CAAC;AAED,SAAK,kEAAkE,YAAY;AAC/E,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YACvB,IAAI,IAAI,MAAM,kBAAkB,CAAC;AAAA,MACzC,CAAC;AAED,YAAM;AAAA,QACF,wBAAwB,SAAS,YAAY,GAAG,GAAG;AAAA,UAC/C,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,EAAE,QAAQ,QAAQ,kBAAkB;AAAA,IACxC,CAAC;AAED,SAAK,gDAAgD,YAAY;AAC7D,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,YAAY,0BAA0B;AAAA,MACrE,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,wBAAwB,SAAS,SAAS;AAAA,QAC5C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AAGD,YAAM,SAAS,MAAM,oBAAoB,SAAS;AAAA,QAC9C,KAAK;AAAA,QACL,OAAO;AAAA,MACX,CAAC;AACD,aAAO,QAAQ,GAAG,EAAE,KAAK,mBAAmB;AAAA,IAChD,CAAC;AAED,SAAK,gFAAgF,YAAY;AAM7F,YAAM,WAA6B,CAAC;AACpC,YAAM,UAAU,YAAY;AAAA,QACxB,2BAA2B,OAAO,QAAQ;AACtC,mBAAS,KAAK,GAAG;AAGjB,gBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AACzC,iBAAO,0BAA0B;AAAA,QACrC;AAAA,MACJ,CAAC;AACD,YAAM,UAAU,YAAY,GAAG;AAE/B,YAAM,CAAC,SAAS,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,QACzC,wBAAwB,SAAS,SAAS;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,QACD,wBAAwB,SAAS,SAAS;AAAA,UACtC,KAAK;AAAA,UACL,OAAO;AAAA,QACX,CAAC;AAAA,MACL,CAAC;AAID,aAAO,QAAQ,EAAE,aAAa,CAAC;AAE/B,aAAO,QAAQ,SAAS,EAAE,eAAe,UAAU;AACnD,aAAO,QAAQ,SAAS,EAAE,eAAe,UAAU;AACnD,aAAOD,OAAM,QAAQ,SAAS,CAAC,EAAE,KAAKA,OAAM,QAAQ,SAAS,CAAC;AAAA,IAClE,CAAC;AAAA,EACL,CAAC;AACL;AAxpBa,IAAAF;AAQA,IAAAC;","names":["createLogger","toHex","fakeAdapter","knownSecret","saveCache","log","createLogger","log","fakeAdapter","makeSession","toHex","req"]}

package/dist/host-C1yt3kMf.d.ts

@@ -0,0 +1,192 @@
+import { PappAdapter, HostMetadata, UserSession } from '@novasamatech/host-papp';
+import { ResultAsync } from 'neverthrow';
+import { PolkadotSigner } from 'polkadot-api';
+
+/**
+ * Node.js adapter for the Polkadot host-papp SDK.
+ *
+ * Provides Node.js-compatible implementations of the SDK's storage and
+ * transport layers, enabling QR login, attestation, and signing in
+ * terminal/CLI environments.
+ */
+
+/** Options for creating a terminal adapter. */
+interface TerminalAdapterOptions {
+    /** Unique app identifier. Used as the storage namespace. */
+    appId: string;
+    /** Statement store WebSocket endpoints. Defaults to Paseo stable endpoints. */
+    endpoints?: string[];
+    /** Optional host metadata for the Sign-In screen. */
+    hostMetadata?: HostMetadata;
+    /**
+     * Directory where session files are persisted. Defaults to
+     * `~/.polkadot-apps/`. Override in tests to point at a temporary
+     * directory populated with `createTestSession` from
+     * `@parity/product-sdk-terminal/testing`.
+     */
+    storageDir?: string;
+}
+/**
+ * Create a terminal adapter backed by the host-papp SDK.
+ *
+ * This sets up:
+ * - File-based storage in `~/.polkadot-apps/` (since Node.js has no localStorage)
+ * - WebSocket connection to the statement store
+ * - The full SSO flow: QR pairing + on-chain attestation
+ * - Session manager for signing requests
+ */
+/** A PappAdapter with the `appId` it was created with and a `destroy` method for cleanup. */
+type TerminalAdapter = PappAdapter & {
+    /** The `appId` passed to {@link createTerminalAdapter}. Useful for {@link createSessionSigner}. */
+    readonly appId: string;
+    /**
+     * The on-disk storage directory used for sessions and (when the
+     * host-runner facet is in use) for the allowance-key cache the
+     * `./host` subpath maintains. `undefined` when the default
+     * is in use; set explicitly when the caller passed `storageDir` to
+     * {@link createTerminalAdapter}.
+     */
+    readonly storageDir?: string;
+    /**
+     * Disconnect the WebSocket and release resources.
+     *
+     * @remarks
+     * Idempotent. Returns a Promise that resolves once all in-flight
+     * statement-subscription teardowns have settled and the underlying
+     * substrate client has been disconnected. **Awaiting is recommended
+     * but not required** — callers that don't await get the same
+     * fire-and-forget shape the previous version had, but they may see
+     * the destroy-time RPC traffic finish after the function returns.
+     *
+     * The implementation tracks the server-side `statement_unsubscribe…`
+     * RPCs `sessions.dispose()` fires, then awaits them via
+     * `Promise.allSettled` before destroying the substrate-client request
+     * queue. No timing-based guesses; no global-state mutations of
+     * `console.error` or `process.on('unhandledRejection')`. Pending
+     * subscribes (where `onSuccess` hasn't fired yet) are cancelled by
+     * the underlying `getSubscribeFn` teardown via `cancelRequest()`,
+     * which is the in-band fast-path and doesn't surface as a rejection.
+     */
+    destroy(): Promise<void>;
+};
+declare function createTerminalAdapter(options: TerminalAdapterOptions): TerminalAdapter;
+
+/** One cached allowance entry. Hex strings are 0x-prefixed. */
+type CachedAllocation = {
+    tag: "BulletInAllowance";
+    slotAccountKey: string;
+} | {
+    tag: "StatementStoreAllowance";
+    slotAccountKey: string;
+} | {
+    tag: "SmartContractAllowance";
+    dest: number;
+} | {
+    tag: "AutoSigning";
+    productDerivationSecret: string;
+    productRootPrivateKey: string;
+};
+
+/**
+ * `PolkadotSigner` backed by the cached slot account key. Returns `null`
+ * when nothing's cached for `(adapter.appId, resource)`. Throws for SC
+ * and AutoSigning (no slot account key — see module docstring).
+ *
+ * Signs locally with sr25519 — no wallet round-trip on the hot path.
+ *
+ * @example
+ * ```ts
+ * const signer = await createSlotAccountSigner(adapter, {
+ *   tag: "BulletInAllowance", value: undefined,
+ * });
+ * if (signer) await tx.submitAndWatch(signer);
+ * ```
+ */
+declare function createSlotAccountSigner(adapter: TerminalAdapter, resource: AllocatableResource): Promise<PolkadotSigner | null>;
+
+/**
+ * Host-runner facet of `@parity/product-sdk-terminal`. A CLI using this
+ * package plays the Host role per RFC-10; this module implements the
+ * three §Stakeholders Host responsibilities (AP client, cache, signer)
+ * over `@novasamatech/host-papp@0.7.7`'s `UserSession`.
+ *
+ * @module
+ */
+
+type ResourceAllocationRequest = Parameters<UserSession["requestResourceAllocation"]>[0];
+/**
+ * One resource a Host can request from the Account Holder. AutoSigning
+ * currently returns `NotAvailable` on both Android and iOS wallets.
+ */
+type AllocatableResource = ResourceAllocationRequest["resources"][number];
+/**
+ * `"Ignore"`: return existing keys if any, else allocate one slot.
+ * `"Increase"`: add one slot to an existing allowance account.
+ */
+type OnExistingAllowancePolicy = ResourceAllocationRequest["onExisting"];
+type ExtractOk<R> = R extends ResultAsync<infer T, unknown> ? T : never;
+/**
+ * Per-resource outcome. `Allocated.value` carries the materialized payload
+ * (slot account key for Bulletin/SSS; subtree key + secret for AutoSigning;
+ * undefined for SC). Each entry is independent — no rollback on partial
+ * success.
+ */
+type ApAllocationOutcome = ExtractOk<ReturnType<UserSession["requestResourceAllocation"]>>[number];
+interface RequestResourceAllocationOptions {
+    /**
+     * Override the auto-picked `onExisting`. Default: `Ignore` unless every
+     * requested resource is a cached slot-table variant, then `Increase`.
+     */
+    onExisting?: OnExistingAllowancePolicy;
+}
+/**
+ * Send the AP `request_resource_allocation` message over the paired
+ * session; block on the user's mobile dialog; return outcomes in request
+ * order. Granted key material is cached on disk so subsequent calls skip
+ * the wallet prompt.
+ *
+ * @throws If the session call fails (transport, timeout, AH protocol error).
+ *
+ * @example
+ * ```ts
+ * const [session] = adapter.sessions.sessions.read();
+ * const outcomes = await requestResourceAllocation(session, adapter, [
+ *   { tag: "BulletInAllowance", value: undefined },
+ * ]);
+ * ```
+ */
+declare function requestResourceAllocation(session: UserSession, adapter: TerminalAdapter, resources: AllocatableResource[], options?: RequestResourceAllocationOptions): Promise<ApAllocationOutcome[]>;
+/**
+ * Send an AP `request_resource_allocation` message over the paired session and
+ * return the outcomes in request order. This is the raw wire call: no disk
+ * cache, no `onExisting` auto-pick, no adapter. Callers that want the caching /
+ * slot-reuse behaviour should use {@link requestResourceAllocation} instead;
+ * this primitive exists for consumers (e.g. `@parity/product-sdk-auth`) that
+ * only hold a `productId` and manage their own policy.
+ *
+ * @throws If the session call fails (transport, timeout, AH protocol error).
+ */
+declare function sendResourceAllocation(session: UserSession, productId: string, resources: AllocatableResource[], onExisting: OnExistingAllowancePolicy): Promise<ApAllocationOutcome[]>;
+/**
+ * Read a cached allowance entry without going over the wire. Returns
+ * `null` if nothing's cached for `(adapter.appId, resource)`. For
+ * `SmartContractAllowance`, the same `dest` must be passed — entries
+ * are keyed per-dest.
+ */
+declare function getCachedAllocation(adapter: TerminalAdapter, resource: AllocatableResource): Promise<CachedAllocation | null>;
+/**
+ * Cache hit → return signer. Cache miss → call
+ * {@link requestResourceAllocation} for `[resource]`, then build the signer.
+ * Throws on `Rejected` / `NotAvailable`.
+ *
+ * @example
+ * ```ts
+ * const signer = await ensureSlotAccountSigner(session, adapter, {
+ *   tag: "BulletInAllowance", value: undefined,
+ * });
+ * await someBulletinTx.submitAndWatch(signer);
+ * ```
+ */
+declare function ensureSlotAccountSigner(session: UserSession, adapter: TerminalAdapter, resource: AllocatableResource): Promise<PolkadotSigner>;
+
+export { type AllocatableResource as A, type CachedAllocation as C, type OnExistingAllowancePolicy as O, type RequestResourceAllocationOptions as R, type TerminalAdapter as T, type ApAllocationOutcome as a, type TerminalAdapterOptions as b, createTerminalAdapter as c, createSlotAccountSigner as d, ensureSlotAccountSigner as e, getCachedAllocation as g, requestResourceAllocation as r, sendResourceAllocation as s };

package/dist/host.d.ts

@@ -1,113 +1,4 @@
-import { UserSession } from '@novasamatech/host-papp';
-import { ResultAsync } from 'neverthrow';
-import { PolkadotSigner } from 'polkadot-api';
-import { T as TerminalAdapter } from './adapter-Dt3ryKnw.js';
-
-/** One cached allowance entry. Hex strings are 0x-prefixed. */
-type CachedAllocation = {
-    tag: "BulletInAllowance";
-    slotAccountKey: string;
-} | {
-    tag: "StatementStoreAllowance";
-    slotAccountKey: string;
-} | {
-    tag: "SmartContractAllowance";
-    dest: number;
-} | {
-    tag: "AutoSigning";
-    productDerivationSecret: string;
-    productRootPrivateKey: string;
-};
-
-/**
- * `PolkadotSigner` backed by the cached slot account key. Returns `null`
- * when nothing's cached for `(adapter.appId, resource)`. Throws for SC
- * and AutoSigning (no slot account key — see module docstring).
- *
- * Signs locally with sr25519 — no wallet round-trip on the hot path.
- *
- * @example
- * ```ts
- * const signer = await createSlotAccountSigner(adapter, {
- *   tag: "BulletInAllowance", value: undefined,
- * });
- * if (signer) await tx.submitAndWatch(signer);
- * ```
- */
-declare function createSlotAccountSigner(adapter: TerminalAdapter, resource: AllocatableResource): Promise<PolkadotSigner | null>;
-
-/**
- * Host-runner facet of `@parity/product-sdk-terminal`. A CLI using this
- * package plays the Host role per RFC-10; this module implements the
- * three §Stakeholders Host responsibilities (AP client, cache, signer)
- * over `@novasamatech/host-papp@0.7.7`'s `UserSession`.
- *
- * @module
- */
-
-type ResourceAllocationRequest = Parameters<UserSession["requestResourceAllocation"]>[0];
-/**
- * One resource a Host can request from the Account Holder. AutoSigning
- * currently returns `NotAvailable` on both Android and iOS wallets.
- */
-type AllocatableResource = ResourceAllocationRequest["resources"][number];
-/**
- * `"Ignore"`: return existing keys if any, else allocate one slot.
- * `"Increase"`: add one slot to an existing allowance account.
- */
-type OnExistingAllowancePolicy = ResourceAllocationRequest["onExisting"];
-type ExtractOk<R> = R extends ResultAsync<infer T, unknown> ? T : never;
-/**
- * Per-resource outcome. `Allocated.value` carries the materialized payload
- * (slot account key for Bulletin/SSS; subtree key + secret for AutoSigning;
- * undefined for SC). Each entry is independent — no rollback on partial
- * success.
- */
-type ApAllocationOutcome = ExtractOk<ReturnType<UserSession["requestResourceAllocation"]>>[number];
-interface RequestResourceAllocationOptions {
-    /**
-     * Override the auto-picked `onExisting`. Default: `Ignore` unless every
-     * requested resource is a cached slot-table variant, then `Increase`.
-     */
-    onExisting?: OnExistingAllowancePolicy;
-}
-/**
- * Send the AP `request_resource_allocation` message over the paired
- * session; block on the user's mobile dialog; return outcomes in request
- * order. Granted key material is cached on disk so subsequent calls skip
- * the wallet prompt.
- *
- * @throws If the session call fails (transport, timeout, AH protocol error).
- *
- * @example
- * ```ts
- * const [session] = adapter.sessions.sessions.read();
- * const outcomes = await requestResourceAllocation(session, adapter, [
- *   { tag: "BulletInAllowance", value: undefined },
- * ]);
- * ```
- */
-declare function requestResourceAllocation(session: UserSession, adapter: TerminalAdapter, resources: AllocatableResource[], options?: RequestResourceAllocationOptions): Promise<ApAllocationOutcome[]>;
-/**
- * Read a cached allowance entry without going over the wire. Returns
- * `null` if nothing's cached for `(adapter.appId, resource)`. For
- * `SmartContractAllowance`, the same `dest` must be passed — entries
- * are keyed per-dest.
- */
-declare function getCachedAllocation(adapter: TerminalAdapter, resource: AllocatableResource): Promise<CachedAllocation | null>;
-/**
- * Cache hit → return signer. Cache miss → call
- * {@link requestResourceAllocation} for `[resource]`, then build the signer.
- * Throws on `Rejected` / `NotAvailable`.
- *
- * @example
- * ```ts
- * const signer = await ensureSlotAccountSigner(session, adapter, {
- *   tag: "BulletInAllowance", value: undefined,
- * });
- * await someBulletinTx.submitAndWatch(signer);
- * ```
- */
-declare function ensureSlotAccountSigner(session: UserSession, adapter: TerminalAdapter, resource: AllocatableResource): Promise<PolkadotSigner>;
-
-export { type AllocatableResource, type ApAllocationOutcome, type CachedAllocation, type OnExistingAllowancePolicy, type RequestResourceAllocationOptions, createSlotAccountSigner, ensureSlotAccountSigner, getCachedAllocation, requestResourceAllocation };
+import '@novasamatech/host-papp';
+import 'neverthrow';
+import 'polkadot-api';
+export { A as AllocatableResource, a as ApAllocationOutcome, C as CachedAllocation, O as OnExistingAllowancePolicy, R as RequestResourceAllocationOptions, d as createSlotAccountSigner, e as ensureSlotAccountSigner, g as getCachedAllocation, r as requestResourceAllocation, s as sendResourceAllocation } from './host-C1yt3kMf.js';