@run402/sdk 4.94.0 → 4.96.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +44 -44
- package/core-dist/keystore.d.ts +1 -1
- package/core-dist/keystore.js +1 -1
- package/dist/actions.d.ts +3 -3
- package/dist/actions.d.ts.map +1 -1
- package/dist/app-up.d.ts +2 -2
- package/dist/app-up.d.ts.map +1 -1
- package/dist/config.d.ts +1 -2
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js.map +1 -1
- package/dist/credentials.d.ts +1 -1
- package/dist/errors.d.ts +6 -6
- package/dist/errors.d.ts.map +1 -1
- package/dist/errors.js +1 -1
- package/dist/errors.js.map +1 -1
- package/dist/index.d.ts +9 -9
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +9 -9
- package/dist/index.js.map +1 -1
- package/dist/namespaces/admin.d.ts +1 -1
- package/dist/namespaces/admin.d.ts.map +1 -1
- package/dist/namespaces/ai.d.ts +1 -1
- package/dist/namespaces/ai.js +2 -2
- package/dist/namespaces/ai.js.map +1 -1
- package/dist/namespaces/assets.js +1 -1
- package/dist/namespaces/assets.js.map +1 -1
- package/dist/namespaces/ci.js +3 -3
- package/dist/namespaces/ci.js.map +1 -1
- package/dist/namespaces/deploy.d.ts +5 -5
- package/dist/namespaces/deploy.d.ts.map +1 -1
- package/dist/namespaces/deploy.js +45 -46
- package/dist/namespaces/deploy.js.map +1 -1
- package/dist/namespaces/deploy.types.d.ts +19 -19
- package/dist/namespaces/deploy.types.d.ts.map +1 -1
- package/dist/namespaces/domains.d.ts +10 -2
- package/dist/namespaces/domains.d.ts.map +1 -1
- package/dist/namespaces/domains.js +10 -5
- package/dist/namespaces/domains.js.map +1 -1
- package/dist/namespaces/errors.js +1 -1
- package/dist/namespaces/functions.js +1 -1
- package/dist/namespaces/functions.js.map +1 -1
- package/dist/namespaces/org.d.ts +2 -2
- package/dist/namespaces/org.js +2 -2
- package/dist/namespaces/org.types.d.ts +3 -3
- package/dist/namespaces/pay.js +1 -1
- package/dist/namespaces/{gitvault.d.ts → repos.d.ts} +438 -451
- package/dist/namespaces/repos.d.ts.map +1 -0
- package/dist/namespaces/{gitvault.js → repos.js} +454 -462
- package/dist/namespaces/repos.js.map +1 -0
- package/dist/namespaces/rooms.js +2 -2
- package/dist/namespaces/rooms.js.map +1 -1
- package/dist/namespaces/session.d.ts +2 -2
- package/dist/namespaces/session.d.ts.map +1 -1
- package/dist/namespaces/session.js +2 -2
- package/dist/namespaces/session.js.map +1 -1
- package/dist/namespaces/tier.d.ts +4 -4
- package/dist/namespaces/tier.d.ts.map +1 -1
- package/dist/namespaces/transfers.d.ts +46 -15
- package/dist/namespaces/transfers.d.ts.map +1 -1
- package/dist/namespaces/transfers.js.map +1 -1
- package/dist/namespaces/{gitvault.crypto.d.ts → vault.crypto.d.ts} +141 -141
- package/dist/namespaces/vault.crypto.d.ts.map +1 -0
- package/dist/namespaces/{gitvault.crypto.js → vault.crypto.js} +173 -173
- package/dist/namespaces/vault.crypto.js.map +1 -0
- package/dist/namespaces/{gitvault.types.d.ts → vault.types.d.ts} +136 -136
- package/dist/namespaces/vault.types.d.ts.map +1 -0
- package/dist/namespaces/{gitvault.types.js → vault.types.js} +4 -4
- package/dist/namespaces/vault.types.js.map +1 -0
- package/dist/node/actions-node.js +8 -8
- package/dist/node/actions-node.js.map +1 -1
- package/dist/node/assets-node.js +6 -6
- package/dist/node/assets-node.js.map +1 -1
- package/dist/node/bearer-redeem-key.d.ts +1 -1
- package/dist/node/bearer-redeem-key.js +5 -5
- package/dist/node/bearer-redeem-key.js.map +1 -1
- package/dist/node/ci.js +1 -1
- package/dist/node/ci.js.map +1 -1
- package/dist/node/credentials.d.ts +1 -1
- package/dist/node/credentials.js +1 -1
- package/dist/node/deploy-manifest.d.ts +3 -5
- package/dist/node/deploy-manifest.d.ts.map +1 -1
- package/dist/node/deploy-manifest.js +3 -12
- package/dist/node/deploy-manifest.js.map +1 -1
- package/dist/node/http-dispatcher.js +5 -5
- package/dist/node/http-dispatcher.js.map +1 -1
- package/dist/node/index.d.ts +29 -29
- package/dist/node/index.d.ts.map +1 -1
- package/dist/node/index.js +39 -39
- package/dist/node/index.js.map +1 -1
- package/dist/node/manifest-export.js +2 -2
- package/dist/node/manifest-export.js.map +1 -1
- package/dist/node/org-adopt.js +1 -1
- package/dist/node/org-adopt.js.map +1 -1
- package/dist/node/sites-node.js +1 -1
- package/dist/node/sites-node.js.map +1 -1
- package/dist/node/{gitvault-address.d.ts → vault-address.d.ts} +42 -42
- package/dist/node/vault-address.d.ts.map +1 -0
- package/dist/node/{gitvault-address.js → vault-address.js} +43 -43
- package/dist/node/vault-address.js.map +1 -0
- package/dist/node/{gitvault-apply.d.ts → vault-apply.d.ts} +27 -27
- package/dist/node/vault-apply.d.ts.map +1 -0
- package/dist/node/{gitvault-apply.js → vault-apply.js} +38 -38
- package/dist/node/vault-apply.js.map +1 -0
- package/dist/node/vault-byo-config.d.ts +29 -0
- package/dist/node/vault-byo-config.d.ts.map +1 -0
- package/dist/node/{gitvault-byo-config.js → vault-byo-config.js} +18 -18
- package/dist/node/vault-byo-config.js.map +1 -0
- package/dist/node/vault-byo-probe.d.ts +20 -0
- package/dist/node/vault-byo-probe.d.ts.map +1 -0
- package/dist/node/vault-byo-probe.js +57 -0
- package/dist/node/vault-byo-probe.js.map +1 -0
- package/dist/node/{gitvault-creation-journal.d.ts → vault-creation-journal.d.ts} +69 -69
- package/dist/node/vault-creation-journal.d.ts.map +1 -0
- package/dist/node/{gitvault-creation-journal.js → vault-creation-journal.js} +54 -54
- package/dist/node/vault-creation-journal.js.map +1 -0
- package/dist/node/{gitvault-degraded-read.d.ts → vault-degraded-read.d.ts} +34 -34
- package/dist/node/vault-degraded-read.d.ts.map +1 -0
- package/dist/node/{gitvault-degraded-read.js → vault-degraded-read.js} +24 -24
- package/dist/node/vault-degraded-read.js.map +1 -0
- package/dist/node/{gitvault-deploy.d.ts → vault-deploy.d.ts} +67 -67
- package/dist/node/vault-deploy.d.ts.map +1 -0
- package/dist/node/{gitvault-deploy.js → vault-deploy.js} +27 -27
- package/dist/node/vault-deploy.js.map +1 -0
- package/dist/node/{gitvault-edge-fetch.d.ts → vault-edge-fetch.d.ts} +9 -9
- package/dist/node/vault-edge-fetch.d.ts.map +1 -0
- package/dist/node/{gitvault-edge-fetch.js → vault-edge-fetch.js} +11 -11
- package/dist/node/vault-edge-fetch.js.map +1 -0
- package/dist/node/{gitvault-handoff.d.ts → vault-handoff.d.ts} +9 -9
- package/dist/node/vault-handoff.d.ts.map +1 -0
- package/dist/node/{gitvault-handoff.js → vault-handoff.js} +24 -24
- package/dist/node/vault-handoff.js.map +1 -0
- package/dist/node/{gitvault-keystore.d.ts → vault-keystore.d.ts} +87 -77
- package/dist/node/vault-keystore.d.ts.map +1 -0
- package/dist/node/{gitvault-keystore.js → vault-keystore.js} +105 -68
- package/dist/node/vault-keystore.js.map +1 -0
- package/dist/node/{gitvault-member-bundle.d.ts → vault-member-bundle.d.ts} +17 -17
- package/dist/node/vault-member-bundle.d.ts.map +1 -0
- package/dist/node/{gitvault-member-bundle.js → vault-member-bundle.js} +11 -11
- package/dist/node/vault-member-bundle.js.map +1 -0
- package/dist/node/{gitvault-mirror-backend.d.ts → vault-mirror-backend.d.ts} +26 -26
- package/dist/node/vault-mirror-backend.d.ts.map +1 -0
- package/dist/node/{gitvault-mirror-backend.js → vault-mirror-backend.js} +25 -25
- package/dist/node/vault-mirror-backend.js.map +1 -0
- package/dist/node/{gitvault-mirror-config.d.ts → vault-mirror-config.d.ts} +23 -23
- package/dist/node/vault-mirror-config.d.ts.map +1 -0
- package/dist/node/{gitvault-mirror-config.js → vault-mirror-config.js} +16 -16
- package/dist/node/vault-mirror-config.js.map +1 -0
- package/dist/node/{gitvault-mirror.d.ts → vault-mirror.d.ts} +36 -36
- package/dist/node/vault-mirror.d.ts.map +1 -0
- package/dist/node/{gitvault-mirror.js → vault-mirror.js} +75 -75
- package/dist/node/vault-mirror.js.map +1 -0
- package/dist/node/{gitvault-native-crypto.d.ts → vault-native-crypto.d.ts} +10 -10
- package/dist/node/vault-native-crypto.d.ts.map +1 -0
- package/dist/node/{gitvault-native-crypto.js → vault-native-crypto.js} +16 -16
- package/dist/node/vault-native-crypto.js.map +1 -0
- package/dist/node/{gitvault-open-or-create.d.ts → vault-open-or-create.d.ts} +16 -16
- package/dist/node/vault-open-or-create.d.ts.map +1 -0
- package/dist/node/{gitvault-open-or-create.js → vault-open-or-create.js} +10 -10
- package/dist/node/vault-open-or-create.js.map +1 -0
- package/dist/node/{gitvault-prewarm.d.ts → vault-prewarm.d.ts} +13 -13
- package/dist/node/vault-prewarm.d.ts.map +1 -0
- package/dist/node/{gitvault-prewarm.js → vault-prewarm.js} +25 -25
- package/dist/node/vault-prewarm.js.map +1 -0
- package/dist/node/{gitvault-profile-scan.d.ts → vault-profile-scan.d.ts} +3 -3
- package/dist/node/vault-profile-scan.d.ts.map +1 -0
- package/dist/node/{gitvault-profile-scan.js → vault-profile-scan.js} +12 -12
- package/dist/node/vault-profile-scan.js.map +1 -0
- package/dist/node/{gitvault-prune.d.ts → vault-prune.d.ts} +61 -61
- package/dist/node/vault-prune.d.ts.map +1 -0
- package/dist/node/{gitvault-prune.js → vault-prune.js} +34 -34
- package/dist/node/vault-prune.js.map +1 -0
- package/dist/node/{gitvault-publication.d.ts → vault-publication.d.ts} +399 -399
- package/dist/node/vault-publication.d.ts.map +1 -0
- package/dist/node/{gitvault-publication.js → vault-publication.js} +584 -584
- package/dist/node/vault-publication.js.map +1 -0
- package/dist/node/{gitvault-push-to-create.d.ts → vault-push-to-create.d.ts} +16 -16
- package/dist/node/vault-push-to-create.d.ts.map +1 -0
- package/dist/node/{gitvault-push-to-create.js → vault-push-to-create.js} +9 -9
- package/dist/node/vault-push-to-create.js.map +1 -0
- package/dist/node/{gitvault-recover.d.ts → vault-recover.d.ts} +50 -50
- package/dist/node/vault-recover.d.ts.map +1 -0
- package/dist/node/{gitvault-recover.js → vault-recover.js} +84 -84
- package/dist/node/vault-recover.js.map +1 -0
- package/dist/node/{gitvault-restore.d.ts → vault-restore.d.ts} +8 -8
- package/dist/node/vault-restore.d.ts.map +1 -0
- package/dist/node/{gitvault-restore.js → vault-restore.js} +11 -11
- package/dist/node/vault-restore.js.map +1 -0
- package/dist/node/{gitvault-snapshot.d.ts → vault-snapshot.d.ts} +48 -48
- package/dist/node/vault-snapshot.d.ts.map +1 -0
- package/dist/node/{gitvault-snapshot.js → vault-snapshot.js} +61 -61
- package/dist/node/vault-snapshot.js.map +1 -0
- package/dist/node/{gitvault-writer-state.d.ts → vault-writer-state.d.ts} +8 -8
- package/dist/node/vault-writer-state.d.ts.map +1 -0
- package/dist/node/{gitvault-writer-state.js → vault-writer-state.js} +15 -15
- package/dist/node/vault-writer-state.js.map +1 -0
- package/dist/node/workflow-output.js +4 -4
- package/dist/node/workflow-output.js.map +1 -1
- package/dist/scoped.d.ts +8 -8
- package/dist/scoped.d.ts.map +1 -1
- package/dist/scoped.js +3 -3
- package/dist/scoped.js.map +1 -1
- package/package.json +1 -1
- package/dist/namespaces/gitvault.crypto.d.ts.map +0 -1
- package/dist/namespaces/gitvault.crypto.js.map +0 -1
- package/dist/namespaces/gitvault.d.ts.map +0 -1
- package/dist/namespaces/gitvault.js.map +0 -1
- package/dist/namespaces/gitvault.types.d.ts.map +0 -1
- package/dist/namespaces/gitvault.types.js.map +0 -1
- package/dist/node/gitvault-address.d.ts.map +0 -1
- package/dist/node/gitvault-address.js.map +0 -1
- package/dist/node/gitvault-apply.d.ts.map +0 -1
- package/dist/node/gitvault-apply.js.map +0 -1
- package/dist/node/gitvault-byo-config.d.ts +0 -29
- package/dist/node/gitvault-byo-config.d.ts.map +0 -1
- package/dist/node/gitvault-byo-config.js.map +0 -1
- package/dist/node/gitvault-byo-probe.d.ts +0 -20
- package/dist/node/gitvault-byo-probe.d.ts.map +0 -1
- package/dist/node/gitvault-byo-probe.js +0 -57
- package/dist/node/gitvault-byo-probe.js.map +0 -1
- package/dist/node/gitvault-creation-journal.d.ts.map +0 -1
- package/dist/node/gitvault-creation-journal.js.map +0 -1
- package/dist/node/gitvault-degraded-read.d.ts.map +0 -1
- package/dist/node/gitvault-degraded-read.js.map +0 -1
- package/dist/node/gitvault-deploy.d.ts.map +0 -1
- package/dist/node/gitvault-deploy.js.map +0 -1
- package/dist/node/gitvault-edge-fetch.d.ts.map +0 -1
- package/dist/node/gitvault-edge-fetch.js.map +0 -1
- package/dist/node/gitvault-handoff.d.ts.map +0 -1
- package/dist/node/gitvault-handoff.js.map +0 -1
- package/dist/node/gitvault-keystore.d.ts.map +0 -1
- package/dist/node/gitvault-keystore.js.map +0 -1
- package/dist/node/gitvault-member-bundle.d.ts.map +0 -1
- package/dist/node/gitvault-member-bundle.js.map +0 -1
- package/dist/node/gitvault-mirror-backend.d.ts.map +0 -1
- package/dist/node/gitvault-mirror-backend.js.map +0 -1
- package/dist/node/gitvault-mirror-config.d.ts.map +0 -1
- package/dist/node/gitvault-mirror-config.js.map +0 -1
- package/dist/node/gitvault-mirror.d.ts.map +0 -1
- package/dist/node/gitvault-mirror.js.map +0 -1
- package/dist/node/gitvault-native-crypto.d.ts.map +0 -1
- package/dist/node/gitvault-native-crypto.js.map +0 -1
- package/dist/node/gitvault-open-or-create.d.ts.map +0 -1
- package/dist/node/gitvault-open-or-create.js.map +0 -1
- package/dist/node/gitvault-prewarm.d.ts.map +0 -1
- package/dist/node/gitvault-prewarm.js.map +0 -1
- package/dist/node/gitvault-profile-scan.d.ts.map +0 -1
- package/dist/node/gitvault-profile-scan.js.map +0 -1
- package/dist/node/gitvault-prune.d.ts.map +0 -1
- package/dist/node/gitvault-prune.js.map +0 -1
- package/dist/node/gitvault-publication.d.ts.map +0 -1
- package/dist/node/gitvault-publication.js.map +0 -1
- package/dist/node/gitvault-push-to-create.d.ts.map +0 -1
- package/dist/node/gitvault-push-to-create.js.map +0 -1
- package/dist/node/gitvault-recover.d.ts.map +0 -1
- package/dist/node/gitvault-recover.js.map +0 -1
- package/dist/node/gitvault-restore.d.ts.map +0 -1
- package/dist/node/gitvault-restore.js.map +0 -1
- package/dist/node/gitvault-snapshot.d.ts.map +0 -1
- package/dist/node/gitvault-snapshot.js.map +0 -1
- package/dist/node/gitvault-writer-state.d.ts.map +0 -1
- package/dist/node/gitvault-writer-state.js.map +0 -1
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
*
|
|
2
|
+
* vault — the six-stage crash-safe creation journal (protocol rev 41 §5.2;
|
|
3
3
|
* task 5.3).
|
|
4
4
|
*
|
|
5
5
|
* LOCAL_KEYS_PREPARED identity + client_creation_id (no ciphertext yet —
|
|
@@ -29,16 +29,16 @@
|
|
|
29
29
|
* does not publish.
|
|
30
30
|
* - anything the journal cannot explain → refuse the destructive retry.
|
|
31
31
|
*
|
|
32
|
-
* The control-plane calls ride an injectable {@link
|
|
32
|
+
* The control-plane calls ride an injectable {@link VaultCreationTransport}
|
|
33
33
|
* — task 5.4 wires the HTTP one; tests supply an in-memory bucket.
|
|
34
34
|
*/
|
|
35
|
-
import {
|
|
36
|
-
import type {
|
|
37
|
-
import {
|
|
38
|
-
export declare const
|
|
39
|
-
export type
|
|
35
|
+
import { VAULT_TERMINAL_LOSS_DOCTOR_TEXT, VAULT_TERMINAL_LOSS_STATEMENT } from "../namespaces/vault.crypto.js";
|
|
36
|
+
import type { VaultAllocation, VaultKeyEnvelopeReceipt, VaultRecoveryReceipt, VaultGenesis } from "../namespaces/vault.types.js";
|
|
37
|
+
import { VaultKeystore } from "./vault-keystore.js";
|
|
38
|
+
export declare const VAULT_CREATION_STAGES: readonly ["LOCAL_KEYS_PREPARED", "ALLOCATED", "OBJECTS_PREPARED", "OBJECTS_FINALIZED", "GENESIS_PREPARED", "ACTIVE"];
|
|
39
|
+
export type VaultCreationStage = (typeof VAULT_CREATION_STAGES)[number];
|
|
40
40
|
/** One prepared object: exact bytes + identity, durable before any PUT. */
|
|
41
|
-
export interface
|
|
41
|
+
export interface VaultJournaledObject {
|
|
42
42
|
object_kind: "key_envelope";
|
|
43
43
|
/** Storage path relative to the vault root (`envelopes/<epoch>/<recipient_fingerprint>`). */
|
|
44
44
|
path: string;
|
|
@@ -47,7 +47,7 @@ export interface GitvaultJournaledObject {
|
|
|
47
47
|
stored_bytes_sha256: string;
|
|
48
48
|
size_bytes: string;
|
|
49
49
|
/** The genesis receipt for this object. */
|
|
50
|
-
receipt:
|
|
50
|
+
receipt: VaultKeyEnvelopeReceipt;
|
|
51
51
|
/** Set once the server receipt was compared equal to the local manifest. */
|
|
52
52
|
finalized: boolean;
|
|
53
53
|
}
|
|
@@ -55,11 +55,11 @@ export interface GitvaultJournaledObject {
|
|
|
55
55
|
* Push-to-create addressing (repo-first-onramp task 4.5; design D6). A journal
|
|
56
56
|
* opened this way does not know its `org_id`/`project_id` until the ALLOCATED
|
|
57
57
|
* stage's response tells it (the gateway resolves `org_slug` and creates the
|
|
58
|
-
* project atomically inside the SAME allocate call — see routes/
|
|
59
|
-
* `resolveAllocationAuthz` in run402-private) — see `
|
|
58
|
+
* project atomically inside the SAME allocate call — see routes/repos.ts's
|
|
59
|
+
* `resolveAllocationAuthz` in run402-private) — see `VaultCreationJournal`'s
|
|
60
60
|
* doc comment on why `org_id`/`project_id` are nullable.
|
|
61
61
|
*/
|
|
62
|
-
export interface
|
|
62
|
+
export interface VaultPushToCreateAddress {
|
|
63
63
|
org_slug: string;
|
|
64
64
|
repo_name: string;
|
|
65
65
|
}
|
|
@@ -79,15 +79,15 @@ export interface GitvaultPushToCreateAddress {
|
|
|
79
79
|
* life — it is the RESUMABILITY KEY for a push-to-create attempt, the way
|
|
80
80
|
* `(org_id, project_id)` is for the ordinary path.
|
|
81
81
|
*/
|
|
82
|
-
export interface
|
|
82
|
+
export interface VaultCreationJournal {
|
|
83
83
|
version: 1;
|
|
84
|
-
stage:
|
|
84
|
+
stage: VaultCreationStage;
|
|
85
85
|
client_creation_id: string;
|
|
86
86
|
org_id: string | null;
|
|
87
87
|
project_id: string | null;
|
|
88
88
|
/** Set only for a push-to-create journal (task 4.5); `null` otherwise. */
|
|
89
|
-
push_to_create:
|
|
90
|
-
/**
|
|
89
|
+
push_to_create: VaultPushToCreateAddress | null;
|
|
90
|
+
/** vault-byo-primary-bucket task 3.1 — `"byo"` when this journal requested a BYO vault at open time; `null` (managed, byte-identical to today) otherwise. Set once at open, never changes across the journal's life (mirrors `push_to_create`'s own resumability-key discipline). */
|
|
91
91
|
storage_profile: "byo" | null;
|
|
92
92
|
/** Set iff `storage_profile === "byo"`; `null` otherwise. */
|
|
93
93
|
byo_destination: string | null;
|
|
@@ -96,21 +96,21 @@ export interface GitvaultCreationJournal {
|
|
|
96
96
|
created_at: string;
|
|
97
97
|
updated_at: string;
|
|
98
98
|
/** ALLOCATED — the verified allocation verbatim. */
|
|
99
|
-
allocation:
|
|
99
|
+
allocation: VaultAllocation | null;
|
|
100
100
|
/** OBJECTS_PREPARED — K_repo (hex) lives ONLY here until ACTIVE moves it to the repo file. */
|
|
101
101
|
k_repo_hex: string | null;
|
|
102
|
-
objects:
|
|
102
|
+
objects: VaultJournaledObject[];
|
|
103
103
|
/** GENESIS_PREPARED — the exact signed genesis and its stored-bytes hash. */
|
|
104
|
-
genesis:
|
|
104
|
+
genesis: VaultGenesis | null;
|
|
105
105
|
genesis_sha256: string | null;
|
|
106
106
|
/** ACTIVE — the emitted recovery receipt. */
|
|
107
|
-
recovery_receipt:
|
|
107
|
+
recovery_receipt: VaultRecoveryReceipt | null;
|
|
108
108
|
/**
|
|
109
109
|
* A terminal refusal, if reconciliation hit one (the journal is kept for
|
|
110
110
|
* diagnosis, never retried destructively). `REPO_CREATION_CONFLICT` (task
|
|
111
111
|
* 4.5) marks a push-to-create journal that lost the atomic name-claim race
|
|
112
112
|
* — `details.project_id` names the winner, exactly what
|
|
113
|
-
* `
|
|
113
|
+
* `pushToCreateVault` needs to resolve to it and proceed as an ordinary
|
|
114
114
|
* push (design D6: "the loser's work is not lost — it just wasn't the
|
|
115
115
|
* creator").
|
|
116
116
|
*/
|
|
@@ -121,7 +121,7 @@ export interface GitvaultCreationJournal {
|
|
|
121
121
|
} | null;
|
|
122
122
|
}
|
|
123
123
|
/**
|
|
124
|
-
* `POST /
|
|
124
|
+
* `POST /vaults/v1` — the allocate REQUEST.
|
|
125
125
|
*
|
|
126
126
|
* READ THIS BEFORE CHANGING THESE FIELD NAMES. The request carries the raw
|
|
127
127
|
* PUBLIC KEYS; the signed `allocation` RECORD the gateway returns carries the
|
|
@@ -138,7 +138,7 @@ export interface GitvaultCreationJournal {
|
|
|
138
138
|
* `checkAllocation` compares the record's fingerprints back against this
|
|
139
139
|
* principal's — which is what proves the keys we sent are the keys it stored.
|
|
140
140
|
*/
|
|
141
|
-
export type
|
|
141
|
+
export type VaultAllocateRequest = {
|
|
142
142
|
client_creation_id: string;
|
|
143
143
|
org_id: string;
|
|
144
144
|
project_id: string;
|
|
@@ -146,7 +146,7 @@ export type GitvaultAllocateRequest = {
|
|
|
146
146
|
creator_signing_pubkey: string;
|
|
147
147
|
/** Raw X25519 public key, canonical base64url (43 chars, decodes to 32 bytes). */
|
|
148
148
|
creator_encryption_pubkey: string;
|
|
149
|
-
/**
|
|
149
|
+
/** vault-byo-primary-bucket task 3.1/3.5 — omitted/absent is byte-identical to today ("managed"). Present only to request a BYO vault; `byo_destination` is the address only, never credential material (D2). */
|
|
150
150
|
storage_profile?: "byo";
|
|
151
151
|
byo_destination?: string;
|
|
152
152
|
} | {
|
|
@@ -155,7 +155,7 @@ export type GitvaultAllocateRequest = {
|
|
|
155
155
|
* `{org_slug, repo_name}` in place of `{org_id, project_id}`. The
|
|
156
156
|
* gateway resolves the slug, atomically claims the name, creates the
|
|
157
157
|
* project, and allocates the vault — all inside this one call
|
|
158
|
-
* (`POST /
|
|
158
|
+
* (`POST /vaults/v1`, same route, alternate body shape).
|
|
159
159
|
*/
|
|
160
160
|
client_creation_id: string;
|
|
161
161
|
org_slug: string;
|
|
@@ -165,30 +165,30 @@ export type GitvaultAllocateRequest = {
|
|
|
165
165
|
storage_profile?: "byo";
|
|
166
166
|
byo_destination?: string;
|
|
167
167
|
};
|
|
168
|
-
export interface
|
|
168
|
+
export interface VaultPutObjectRequest {
|
|
169
169
|
repo_id: string;
|
|
170
170
|
path: string;
|
|
171
171
|
bytes: Uint8Array;
|
|
172
172
|
/** What the client expects the server to acknowledge — the server's receipt is compared against it. */
|
|
173
173
|
expected_sha256: string;
|
|
174
174
|
expected_size_bytes: string;
|
|
175
|
-
/**
|
|
175
|
+
/** vault-byo-primary-bucket task 3.2 — present iff this vault is `storage_profile: "byo"`; the object is written directly to `byo.destination` (never run402's own bucket). Omitted is byte-identical to today. */
|
|
176
176
|
byo?: {
|
|
177
|
-
destination: import("./
|
|
178
|
-
credential?: import("./
|
|
177
|
+
destination: import("./vault-mirror-config.js").VaultMirrorDestination;
|
|
178
|
+
credential?: import("./vault-mirror-config.js").VaultMirrorCredential;
|
|
179
179
|
};
|
|
180
180
|
}
|
|
181
|
-
export interface
|
|
181
|
+
export interface VaultObjectReceipt {
|
|
182
182
|
stored_bytes_sha256: string;
|
|
183
183
|
size_bytes: string;
|
|
184
184
|
}
|
|
185
|
-
export interface
|
|
185
|
+
export interface VaultAdmitGenesisRequest {
|
|
186
186
|
repo_id: string;
|
|
187
187
|
allocation_generation: string;
|
|
188
188
|
stored_bytes: Uint8Array;
|
|
189
189
|
stored_bytes_sha256: string;
|
|
190
190
|
}
|
|
191
|
-
export type
|
|
191
|
+
export type VaultAdmitGenesisResult = {
|
|
192
192
|
outcome: "admitted";
|
|
193
193
|
admitted_sha256: string;
|
|
194
194
|
}
|
|
@@ -204,15 +204,15 @@ export type GitvaultAdmitGenesisResult = {
|
|
|
204
204
|
* idempotent from the journal's point of view; the journal never relies on a
|
|
205
205
|
* call having NOT happened.
|
|
206
206
|
*/
|
|
207
|
-
export interface
|
|
207
|
+
export interface VaultCreationTransport {
|
|
208
208
|
/** Idempotent on `client_creation_id`; returns the current representation (which may be `superseded`). */
|
|
209
|
-
allocate(request:
|
|
209
|
+
allocate(request: VaultAllocateRequest): Promise<VaultAllocation>;
|
|
210
210
|
/** Create-only PUT; on a pre-existing object the server MAY return its receipt instead of overwriting. */
|
|
211
|
-
putObject(request:
|
|
211
|
+
putObject(request: VaultPutObjectRequest): Promise<VaultObjectReceipt>;
|
|
212
212
|
/**
|
|
213
213
|
* Read an object back (`null` when absent) — the read-and-compare primitive.
|
|
214
214
|
*
|
|
215
|
-
* `expected_sha256` (
|
|
215
|
+
* `expected_sha256` (vault-small-object-inline design D3) is OPTIONAL,
|
|
216
216
|
* client-internal plumbing: an `object-reads`-backed implementation MAY
|
|
217
217
|
* use it to verify a gateway-supplied `inline` reply before trusting it,
|
|
218
218
|
* falling back to the ordinary fetch on a mismatch — never a NEW
|
|
@@ -226,15 +226,15 @@ export interface GitvaultCreationTransport {
|
|
|
226
226
|
expected_sha256?: string;
|
|
227
227
|
}): Promise<Uint8Array | null>;
|
|
228
228
|
/** Generation-zero admission (the §5A machine at generation zero). */
|
|
229
|
-
admitGenesis(request:
|
|
229
|
+
admitGenesis(request: VaultAdmitGenesisRequest): Promise<VaultAdmitGenesisResult>;
|
|
230
230
|
/** Read the admitted genesis bytes back (`null` when none). */
|
|
231
231
|
getGenesis(request: {
|
|
232
232
|
repo_id: string;
|
|
233
233
|
}): Promise<Uint8Array | null>;
|
|
234
234
|
}
|
|
235
|
-
export interface
|
|
236
|
-
keystore:
|
|
237
|
-
transport:
|
|
235
|
+
export interface VaultCreationOptions {
|
|
236
|
+
keystore: VaultKeystore;
|
|
237
|
+
transport: VaultCreationTransport;
|
|
238
238
|
/**
|
|
239
239
|
* Exactly ONE addressing form: either `{org_id, project_id}` (the ordinary
|
|
240
240
|
* path — a project already exists) or `push_to_create` (task 4.5 — the
|
|
@@ -244,14 +244,14 @@ export interface GitvaultCreationOptions {
|
|
|
244
244
|
org_id?: string;
|
|
245
245
|
project_id?: string;
|
|
246
246
|
/** Push-to-create addressing (repo-first-onramp task 4.5, design D6) — mutually exclusive with `{org_id, project_id}`. */
|
|
247
|
-
push_to_create?:
|
|
247
|
+
push_to_create?: VaultPushToCreateAddress;
|
|
248
248
|
/** Resume an existing journal, or pin the idempotency key (tests). Fresh CSPRNG when omitted. */
|
|
249
249
|
client_creation_id?: string;
|
|
250
250
|
/**
|
|
251
|
-
*
|
|
251
|
+
* vault-byo-primary-bucket task 3.1/3.5 — request a BYO vault at
|
|
252
252
|
* allocation. Omitted (the default) is byte-identical to today. The
|
|
253
253
|
* caller MUST have already run the allocation-time bucket probe
|
|
254
|
-
* ({@link ../node/
|
|
254
|
+
* ({@link ../node/vault-byo-probe.js probeVaultByoDestination})
|
|
255
255
|
* against `byo_destination` BEFORE reaching here — this option only
|
|
256
256
|
* threads the already-validated request through; it does not probe.
|
|
257
257
|
*/
|
|
@@ -259,10 +259,10 @@ export interface GitvaultCreationOptions {
|
|
|
259
259
|
/** Required iff `storage_profile === "byo"` — the destination ADDRESS only (never credential material, D2). */
|
|
260
260
|
byo_destination?: string;
|
|
261
261
|
/**
|
|
262
|
-
*
|
|
262
|
+
* vault-byo-primary-bucket task 3.1/3.2 — the LOCAL write target that
|
|
263
263
|
* drives the genesis `key_envelope`'s own PUT (the one object every
|
|
264
264
|
* vault creates, and the one this class's own `run()` writes directly,
|
|
265
|
-
* bypassing `
|
|
265
|
+
* bypassing `Vault.uploadAll`'s resolver since no `Vault`
|
|
266
266
|
* exists yet at creation time). Deliberately NOT persisted into the
|
|
267
267
|
* journal file (unlike `storage_profile`/`byo_destination` above) — a
|
|
268
268
|
* credential name is a local, per-invocation fact the caller resupplies
|
|
@@ -273,32 +273,32 @@ export interface GitvaultCreationOptions {
|
|
|
273
273
|
* run402's own bucket.
|
|
274
274
|
*/
|
|
275
275
|
byo_write_target?: {
|
|
276
|
-
destination: import("./
|
|
277
|
-
credential?: import("./
|
|
276
|
+
destination: import("./vault-mirror-config.js").VaultMirrorDestination;
|
|
277
|
+
credential?: import("./vault-mirror-config.js").VaultMirrorCredential;
|
|
278
278
|
};
|
|
279
279
|
/** Clock injection. */
|
|
280
280
|
now?: () => Date;
|
|
281
281
|
/** Optional pinned service public key for allocation-signature verification (5.4 supplies it from the registry). */
|
|
282
282
|
service_public_key?: Uint8Array | string;
|
|
283
283
|
/** Test hook: called after each stage is durable, BEFORE the next step — throw to simulate a crash. */
|
|
284
|
-
onStage?: (stage:
|
|
284
|
+
onStage?: (stage: VaultCreationStage, journal: VaultCreationJournal) => void | Promise<void>;
|
|
285
285
|
}
|
|
286
|
-
export interface
|
|
286
|
+
export interface VaultCreationResult {
|
|
287
287
|
repo_id: string;
|
|
288
288
|
/** The owning org/project, resolved by ACTIVE either way — trust-on-first-use for a push-to-create journal (task 4.5). */
|
|
289
289
|
org_id: string;
|
|
290
290
|
project_id: string;
|
|
291
291
|
genesis_sha256: string;
|
|
292
|
-
recovery_receipt:
|
|
293
|
-
journal:
|
|
292
|
+
recovery_receipt: VaultRecoveryReceipt;
|
|
293
|
+
journal: VaultCreationJournal;
|
|
294
294
|
/** `created` on the first pass; `reconciled` when a restart completed an earlier attempt. */
|
|
295
295
|
how: "created" | "reconciled";
|
|
296
296
|
}
|
|
297
297
|
/** Journal file for one creation attempt. */
|
|
298
|
-
export declare function
|
|
299
|
-
export declare function
|
|
298
|
+
export declare function vaultJournalPath(keystore: VaultKeystore, clientCreationId: string): string;
|
|
299
|
+
export declare function readVaultJournal(keystore: VaultKeystore, clientCreationId: string): VaultCreationJournal | null;
|
|
300
300
|
/** Every journal on disk that has not reached ACTIVE (what `doctor` lists as "creation in progress"). */
|
|
301
|
-
export declare function
|
|
301
|
+
export declare function listIncompleteVaultJournals(keystore: VaultKeystore): VaultCreationJournal[];
|
|
302
302
|
/**
|
|
303
303
|
* The client-side half of D2's resumability guarantee (repo-first-onramp
|
|
304
304
|
* task 2.2): find an in-progress LOCAL creation attempt for this exact
|
|
@@ -313,26 +313,26 @@ export declare function listIncompleteGitvaultJournals(keystore: GitvaultKeystor
|
|
|
313
313
|
* drives to ACTIVE.
|
|
314
314
|
*
|
|
315
315
|
* Refused journals (`VAULT_CREATION_CONFLICT` / `ALLOCATION_SUPERSEDED`) are
|
|
316
|
-
* skipped: `
|
|
316
|
+
* skipped: `VaultCreation.run()` refuses to retry a refused journal
|
|
317
317
|
* destructively, so resuming one here would only reproduce the refusal.
|
|
318
318
|
* When more than one live candidate exists (should not happen in practice —
|
|
319
319
|
* this function is what prevents it — but a manually-edited keystore or a
|
|
320
320
|
* pre-D2 stray journal could produce one), the most recently updated one is
|
|
321
321
|
* preferred, on the theory that it is the attempt most likely still moving.
|
|
322
322
|
*/
|
|
323
|
-
export declare function
|
|
323
|
+
export declare function findResumableVaultJournal(keystore: VaultKeystore, orgId: string, projectId: string): VaultCreationJournal | null;
|
|
324
324
|
/**
|
|
325
|
-
* The push-to-create sibling of {@link
|
|
325
|
+
* The push-to-create sibling of {@link findResumableVaultJournal} (task
|
|
326
326
|
* 4.5): find an in-progress LOCAL push-to-create attempt for this exact
|
|
327
327
|
* `(org_slug, repo_name)` address, so a retry after a crash resumes it rather
|
|
328
328
|
* than starting a second competing attempt. A journal that already lost the
|
|
329
329
|
* name-claim race (`REPO_CREATION_CONFLICT`) is excluded — resuming it would
|
|
330
|
-
* only reproduce the same refusal; `
|
|
330
|
+
* only reproduce the same refusal; `pushToCreateVault` starts a fresh
|
|
331
331
|
* attempt in that case (and typically does not even reach here, since its
|
|
332
332
|
* own fast-path read resolves the winner's repo directly).
|
|
333
333
|
*/
|
|
334
|
-
export declare function findResumablePushToCreateJournal(keystore:
|
|
335
|
-
export declare class
|
|
334
|
+
export declare function findResumablePushToCreateJournal(keystore: VaultKeystore, orgSlug: string, repoName: string): VaultCreationJournal | null;
|
|
335
|
+
export declare class VaultCreation {
|
|
336
336
|
private readonly keystore;
|
|
337
337
|
private readonly transport;
|
|
338
338
|
private readonly now;
|
|
@@ -345,8 +345,8 @@ export declare class GitvaultCreation {
|
|
|
345
345
|
* exists, else write stage 1 (LOCAL_KEYS_PREPARED). Nothing here touches the
|
|
346
346
|
* network; no ciphertext exists yet.
|
|
347
347
|
*/
|
|
348
|
-
static open(options:
|
|
349
|
-
get current():
|
|
348
|
+
static open(options: VaultCreationOptions): VaultCreation;
|
|
349
|
+
get current(): VaultCreationJournal;
|
|
350
350
|
private persist;
|
|
351
351
|
private advance;
|
|
352
352
|
private refuse;
|
|
@@ -371,17 +371,17 @@ export declare class GitvaultCreation {
|
|
|
371
371
|
* Drive the journal to ACTIVE from whatever stage is durable. Safe to call
|
|
372
372
|
* again after any crash; a refused journal stays refused.
|
|
373
373
|
*/
|
|
374
|
-
run(): Promise<
|
|
374
|
+
run(): Promise<VaultCreationResult>;
|
|
375
375
|
private verifyAllocation;
|
|
376
376
|
}
|
|
377
377
|
/** Convenience: open + run in one call. */
|
|
378
|
-
export declare function
|
|
378
|
+
export declare function createVault(options: VaultCreationOptions): Promise<VaultCreationResult>;
|
|
379
379
|
/** What `doctor`/`status` print about V0-A recovery — the verbatim statement plus the pointers it must carry. */
|
|
380
|
-
export interface
|
|
381
|
-
statement: typeof
|
|
382
|
-
doctor_text: typeof
|
|
380
|
+
export interface VaultDoctorRecoveryText {
|
|
381
|
+
statement: typeof VAULT_TERMINAL_LOSS_STATEMENT;
|
|
382
|
+
doctor_text: typeof VAULT_TERMINAL_LOSS_DOCTOR_TEXT;
|
|
383
383
|
/** The platform's custodial restore of deployed artifacts (the deploy lane's CAS) — the support path when every principal envelope is lost. */
|
|
384
384
|
cas_restore_pointer: string;
|
|
385
385
|
}
|
|
386
|
-
export declare function
|
|
387
|
-
//# sourceMappingURL=
|
|
386
|
+
export declare function vaultDoctorRecoveryText(): VaultDoctorRecoveryText;
|
|
387
|
+
//# sourceMappingURL=vault-creation-journal.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vault-creation-journal.d.ts","sourceRoot":"","sources":["../../src/node/vault-creation-journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH,OAAO,EAEL,+BAA+B,EAC/B,6BAA6B,EAa9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,eAAe,EAEf,uBAAuB,EACvB,oBAAoB,EAEpB,YAAY,EACb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,aAAa,EAAyC,MAAM,qBAAqB,CAAC;AAK3F,eAAO,MAAM,qBAAqB,sHAOxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,cAAc,CAAC;IAC5B,6FAA6F;IAC7F,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,OAAO,EAAE,uBAAuB,CAAC;IACjC,4EAA4E;IAC5E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,kBAAkB,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,cAAc,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAChD,qRAAqR;IACrR,eAAe,EAAE,KAAK,GAAG,IAAI,CAAC;IAC9B,6DAA6D;IAC7D,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,2BAA2B,EAAE,MAAM,CAAC;IACpC,8BAA8B,EAAE,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC,8FAA8F;IAC9F,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,6EAA6E;IAC7E,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6CAA6C;IAC7C,gBAAgB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9C;;;;;;;;OAQG;IACH,OAAO,EAAE;QAAE,IAAI,EAAE,yBAAyB,GAAG,uBAAuB,GAAG,wBAAwB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;CACzJ;AAID;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IACE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kFAAkF;IAClF,yBAAyB,EAAE,MAAM,CAAC;IAClC,iNAAiN;IACjN,eAAe,CAAC,EAAE,KAAK,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GACD;IACE;;;;;;OAMG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yBAAyB,EAAE,MAAM,CAAC;IAClC,eAAe,CAAC,EAAE,KAAK,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,uGAAuG;IACvG,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mNAAmN;IACnN,GAAG,CAAC,EAAE;QAAE,WAAW,EAAE,OAAO,0BAA0B,EAAE,sBAAsB,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,0BAA0B,EAAE,qBAAqB,CAAA;KAAE,CAAC;CACzJ;AAED,MAAM,WAAW,kBAAkB;IACjC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,UAAU,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE;AAClD,qHAAqH;GACnH;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,OAAO,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAEzC;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,0GAA0G;IAC1G,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE,0GAA0G;IAC1G,SAAS,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE;;;;;;;;;;OAUG;IACH,SAAS,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC5G,sEAAsE;IACtE,YAAY,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAClF,+DAA+D;IAC/D,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CACtE;AAID,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,sBAAsB,CAAC;IAClC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0HAA0H;IAC1H,cAAc,CAAC,EAAE,wBAAwB,CAAC;IAC1C,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,KAAK,CAAC;IACxB,+GAA+G;IAC/G,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE;QAAE,WAAW,EAAE,OAAO,0BAA0B,EAAE,sBAAsB,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,0BAA0B,EAAE,qBAAqB,CAAA;KAAE,CAAC;IACrK,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,oHAAoH;IACpH,kBAAkB,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACzC,uGAAuG;IACvG,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9F;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,0HAA0H;IAC1H,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,6FAA6F;IAC7F,GAAG,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/B;AAUD,6CAA6C;AAC7C,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAG1F;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAQ/G;AAED,yGAAyG;AACzG,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,aAAa,GAAG,oBAAoB,EAAE,CAW3F;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAOhI;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAOxI;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,OAAO,CAAS;IAExB,OAAO;IASP;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa;IAmEzD,IAAI,OAAO,IAAI,oBAAoB,CAElC;IAED,OAAO,CAAC,OAAO;YAMD,OAAO;IAMrB,OAAO,CAAC,MAAM;IAMd;;;;;;;;;;;;;;;OAeG;YACW,yBAAyB;IAkDvC;;;OAGG;IACG,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAiOzC,OAAO,CAAC,gBAAgB;CAuBzB;AAED,2CAA2C;AAC3C,wBAAsB,WAAW,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAE7F;AAID,iHAAiH;AACjH,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,6BAA6B,CAAC;IAChD,WAAW,EAAE,OAAO,+BAA+B,CAAC;IACpD,+IAA+I;IAC/I,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,uBAAuB,IAAI,uBAAuB,CAMjE"}
|