@run402/sdk 4.95.0 → 4.97.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +27 -27
- package/core-dist/keystore.d.ts +1 -1
- package/core-dist/keystore.js +1 -1
- package/dist/errors.d.ts +5 -5
- package/dist/errors.d.ts.map +1 -1
- package/dist/errors.js +2 -2
- package/dist/errors.js.map +1 -1
- package/dist/grant-key-credentials.d.ts +38 -0
- package/dist/grant-key-credentials.d.ts.map +1 -0
- package/dist/grant-key-credentials.js +42 -0
- package/dist/grant-key-credentials.js.map +1 -0
- package/dist/index.d.ts +16 -23
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +14 -21
- package/dist/index.js.map +1 -1
- package/dist/namespaces/billing.d.ts +1 -1
- package/dist/namespaces/billing.js +1 -1
- package/dist/namespaces/buzz.js +1 -1
- package/dist/namespaces/buzz.js.map +1 -1
- package/dist/namespaces/credentials.d.ts +4 -4
- package/dist/namespaces/credentials.js +4 -4
- package/dist/namespaces/deploy.d.ts +5 -5
- package/dist/namespaces/deploy.d.ts.map +1 -1
- package/dist/namespaces/deploy.js +25 -25
- package/dist/namespaces/deploy.js.map +1 -1
- package/dist/namespaces/deploy.types.d.ts +17 -17
- package/dist/namespaces/deploy.types.d.ts.map +1 -1
- package/dist/namespaces/domains.d.ts +1 -1
- package/dist/namespaces/domains.js +1 -1
- package/dist/namespaces/errors.d.ts +1 -1
- package/dist/namespaces/errors.js +2 -2
- package/dist/namespaces/escalations.d.ts +2 -2
- package/dist/namespaces/escalations.js +2 -2
- package/dist/namespaces/escalations.types.d.ts +3 -3
- package/dist/namespaces/escalations.types.d.ts.map +1 -1
- package/dist/namespaces/events.d.ts +1 -1
- package/dist/namespaces/events.js +1 -1
- package/dist/namespaces/functions.js +1 -1
- package/dist/namespaces/functions.js.map +1 -1
- package/dist/namespaces/grants.d.ts +43 -9
- package/dist/namespaces/grants.d.ts.map +1 -1
- package/dist/namespaces/grants.js +99 -10
- package/dist/namespaces/grants.js.map +1 -1
- package/dist/namespaces/grants.types.d.ts +120 -15
- package/dist/namespaces/grants.types.d.ts.map +1 -1
- package/dist/namespaces/grants.types.js +12 -3
- package/dist/namespaces/grants.types.js.map +1 -1
- package/dist/namespaces/identity-links.types.d.ts +2 -2
- package/dist/namespaces/identity-links.types.d.ts.map +1 -1
- package/dist/namespaces/org.d.ts +3 -3
- package/dist/namespaces/org.js +3 -3
- package/dist/namespaces/org.types.d.ts +3 -3
- package/dist/namespaces/pay.js +1 -1
- package/dist/namespaces/projects.d.ts +1 -1
- package/dist/namespaces/projects.js +1 -1
- package/dist/namespaces/{gitvault.d.ts → repos.d.ts} +436 -449
- package/dist/namespaces/repos.d.ts.map +1 -0
- package/dist/namespaces/{gitvault.js → repos.js} +452 -460
- package/dist/namespaces/repos.js.map +1 -0
- package/dist/namespaces/rooms.d.ts +3 -3
- package/dist/namespaces/rooms.js +5 -5
- package/dist/namespaces/rooms.js.map +1 -1
- package/dist/namespaces/session.d.ts +2 -2
- package/dist/namespaces/session.d.ts.map +1 -1
- package/dist/namespaces/session.js +2 -2
- package/dist/namespaces/session.js.map +1 -1
- package/dist/namespaces/tier.d.ts +3 -3
- package/dist/namespaces/tier.d.ts.map +1 -1
- package/dist/namespaces/{gitvault.crypto.d.ts → vault.crypto.d.ts} +141 -141
- package/dist/namespaces/vault.crypto.d.ts.map +1 -0
- package/dist/namespaces/{gitvault.crypto.js → vault.crypto.js} +173 -173
- package/dist/namespaces/vault.crypto.js.map +1 -0
- package/dist/namespaces/{gitvault.types.d.ts → vault.types.d.ts} +136 -136
- package/dist/namespaces/vault.types.d.ts.map +1 -0
- package/dist/namespaces/{gitvault.types.js → vault.types.js} +4 -4
- package/dist/namespaces/vault.types.js.map +1 -0
- package/dist/node/bearer-redeem-key.d.ts +1 -1
- package/dist/node/bearer-redeem-key.js +5 -5
- package/dist/node/bearer-redeem-key.js.map +1 -1
- package/dist/node/credentials.d.ts +9 -9
- package/dist/node/credentials.d.ts.map +1 -1
- package/dist/node/credentials.js +12 -12
- package/dist/node/credentials.js.map +1 -1
- package/dist/node/http-dispatcher.js +5 -5
- package/dist/node/http-dispatcher.js.map +1 -1
- package/dist/node/index.d.ts +34 -34
- package/dist/node/index.d.ts.map +1 -1
- package/dist/node/index.js +41 -41
- package/dist/node/index.js.map +1 -1
- package/dist/node/{gitvault-address.d.ts → vault-address.d.ts} +42 -42
- package/dist/node/vault-address.d.ts.map +1 -0
- package/dist/node/{gitvault-address.js → vault-address.js} +43 -43
- package/dist/node/vault-address.js.map +1 -0
- package/dist/node/{gitvault-apply.d.ts → vault-apply.d.ts} +27 -27
- package/dist/node/vault-apply.d.ts.map +1 -0
- package/dist/node/{gitvault-apply.js → vault-apply.js} +38 -38
- package/dist/node/vault-apply.js.map +1 -0
- package/dist/node/vault-byo-config.d.ts +29 -0
- package/dist/node/vault-byo-config.d.ts.map +1 -0
- package/dist/node/{gitvault-byo-config.js → vault-byo-config.js} +18 -18
- package/dist/node/vault-byo-config.js.map +1 -0
- package/dist/node/vault-byo-probe.d.ts +20 -0
- package/dist/node/vault-byo-probe.d.ts.map +1 -0
- package/dist/node/vault-byo-probe.js +57 -0
- package/dist/node/vault-byo-probe.js.map +1 -0
- package/dist/node/{gitvault-creation-journal.d.ts → vault-creation-journal.d.ts} +69 -69
- package/dist/node/vault-creation-journal.d.ts.map +1 -0
- package/dist/node/{gitvault-creation-journal.js → vault-creation-journal.js} +54 -54
- package/dist/node/vault-creation-journal.js.map +1 -0
- package/dist/node/{gitvault-degraded-read.d.ts → vault-degraded-read.d.ts} +34 -34
- package/dist/node/vault-degraded-read.d.ts.map +1 -0
- package/dist/node/{gitvault-degraded-read.js → vault-degraded-read.js} +24 -24
- package/dist/node/vault-degraded-read.js.map +1 -0
- package/dist/node/{gitvault-deploy.d.ts → vault-deploy.d.ts} +67 -67
- package/dist/node/vault-deploy.d.ts.map +1 -0
- package/dist/node/{gitvault-deploy.js → vault-deploy.js} +27 -27
- package/dist/node/vault-deploy.js.map +1 -0
- package/dist/node/{gitvault-edge-fetch.d.ts → vault-edge-fetch.d.ts} +9 -9
- package/dist/node/vault-edge-fetch.d.ts.map +1 -0
- package/dist/node/{gitvault-edge-fetch.js → vault-edge-fetch.js} +11 -11
- package/dist/node/vault-edge-fetch.js.map +1 -0
- package/dist/node/{gitvault-handoff.d.ts → vault-handoff.d.ts} +9 -9
- package/dist/node/vault-handoff.d.ts.map +1 -0
- package/dist/node/{gitvault-handoff.js → vault-handoff.js} +24 -24
- package/dist/node/vault-handoff.js.map +1 -0
- package/dist/node/{gitvault-keystore.d.ts → vault-keystore.d.ts} +87 -77
- package/dist/node/vault-keystore.d.ts.map +1 -0
- package/dist/node/{gitvault-keystore.js → vault-keystore.js} +105 -68
- package/dist/node/vault-keystore.js.map +1 -0
- package/dist/node/{gitvault-member-bundle.d.ts → vault-member-bundle.d.ts} +17 -17
- package/dist/node/vault-member-bundle.d.ts.map +1 -0
- package/dist/node/{gitvault-member-bundle.js → vault-member-bundle.js} +11 -11
- package/dist/node/vault-member-bundle.js.map +1 -0
- package/dist/node/{gitvault-mirror-backend.d.ts → vault-mirror-backend.d.ts} +26 -26
- package/dist/node/vault-mirror-backend.d.ts.map +1 -0
- package/dist/node/{gitvault-mirror-backend.js → vault-mirror-backend.js} +25 -25
- package/dist/node/vault-mirror-backend.js.map +1 -0
- package/dist/node/{gitvault-mirror-config.d.ts → vault-mirror-config.d.ts} +23 -23
- package/dist/node/vault-mirror-config.d.ts.map +1 -0
- package/dist/node/{gitvault-mirror-config.js → vault-mirror-config.js} +16 -16
- package/dist/node/vault-mirror-config.js.map +1 -0
- package/dist/node/{gitvault-mirror.d.ts → vault-mirror.d.ts} +36 -36
- package/dist/node/vault-mirror.d.ts.map +1 -0
- package/dist/node/{gitvault-mirror.js → vault-mirror.js} +75 -75
- package/dist/node/vault-mirror.js.map +1 -0
- package/dist/node/{gitvault-native-crypto.d.ts → vault-native-crypto.d.ts} +10 -10
- package/dist/node/vault-native-crypto.d.ts.map +1 -0
- package/dist/node/{gitvault-native-crypto.js → vault-native-crypto.js} +16 -16
- package/dist/node/vault-native-crypto.js.map +1 -0
- package/dist/node/{gitvault-open-or-create.d.ts → vault-open-or-create.d.ts} +16 -16
- package/dist/node/vault-open-or-create.d.ts.map +1 -0
- package/dist/node/{gitvault-open-or-create.js → vault-open-or-create.js} +10 -10
- package/dist/node/vault-open-or-create.js.map +1 -0
- package/dist/node/{gitvault-prewarm.d.ts → vault-prewarm.d.ts} +13 -13
- package/dist/node/vault-prewarm.d.ts.map +1 -0
- package/dist/node/{gitvault-prewarm.js → vault-prewarm.js} +25 -25
- package/dist/node/vault-prewarm.js.map +1 -0
- package/dist/node/{gitvault-profile-scan.d.ts → vault-profile-scan.d.ts} +3 -3
- package/dist/node/vault-profile-scan.d.ts.map +1 -0
- package/dist/node/{gitvault-profile-scan.js → vault-profile-scan.js} +12 -12
- package/dist/node/vault-profile-scan.js.map +1 -0
- package/dist/node/{gitvault-prune.d.ts → vault-prune.d.ts} +61 -61
- package/dist/node/vault-prune.d.ts.map +1 -0
- package/dist/node/{gitvault-prune.js → vault-prune.js} +34 -34
- package/dist/node/vault-prune.js.map +1 -0
- package/dist/node/{gitvault-publication.d.ts → vault-publication.d.ts} +399 -399
- package/dist/node/vault-publication.d.ts.map +1 -0
- package/dist/node/{gitvault-publication.js → vault-publication.js} +584 -584
- package/dist/node/vault-publication.js.map +1 -0
- package/dist/node/{gitvault-push-to-create.d.ts → vault-push-to-create.d.ts} +16 -16
- package/dist/node/vault-push-to-create.d.ts.map +1 -0
- package/dist/node/{gitvault-push-to-create.js → vault-push-to-create.js} +9 -9
- package/dist/node/vault-push-to-create.js.map +1 -0
- package/dist/node/{gitvault-recover.d.ts → vault-recover.d.ts} +50 -50
- package/dist/node/vault-recover.d.ts.map +1 -0
- package/dist/node/{gitvault-recover.js → vault-recover.js} +84 -84
- package/dist/node/vault-recover.js.map +1 -0
- package/dist/node/{gitvault-restore.d.ts → vault-restore.d.ts} +8 -8
- package/dist/node/vault-restore.d.ts.map +1 -0
- package/dist/node/{gitvault-restore.js → vault-restore.js} +11 -11
- package/dist/node/vault-restore.js.map +1 -0
- package/dist/node/{gitvault-snapshot.d.ts → vault-snapshot.d.ts} +48 -48
- package/dist/node/vault-snapshot.d.ts.map +1 -0
- package/dist/node/{gitvault-snapshot.js → vault-snapshot.js} +61 -61
- package/dist/node/vault-snapshot.js.map +1 -0
- package/dist/node/{gitvault-writer-state.d.ts → vault-writer-state.d.ts} +8 -8
- package/dist/node/vault-writer-state.d.ts.map +1 -0
- package/dist/node/{gitvault-writer-state.js → vault-writer-state.js} +15 -15
- package/dist/node/vault-writer-state.js.map +1 -0
- package/dist/node/workflow-output.js +4 -4
- package/dist/node/workflow-output.js.map +1 -1
- package/dist/project-auth-classification.d.ts +8 -8
- package/dist/project-auth-classification.d.ts.map +1 -1
- package/dist/project-auth-classification.js +7 -7
- package/dist/project-auth-classification.js.map +1 -1
- package/dist/scoped.d.ts +6 -14
- package/dist/scoped.d.ts.map +1 -1
- package/dist/scoped.js +10 -21
- package/dist/scoped.js.map +1 -1
- package/package.json +1 -1
- package/dist/delegate-credentials.d.ts +0 -37
- package/dist/delegate-credentials.d.ts.map +0 -1
- package/dist/delegate-credentials.js +0 -41
- package/dist/delegate-credentials.js.map +0 -1
- package/dist/namespaces/delegates.d.ts +0 -50
- package/dist/namespaces/delegates.d.ts.map +0 -1
- package/dist/namespaces/delegates.js +0 -99
- package/dist/namespaces/delegates.js.map +0 -1
- package/dist/namespaces/delegates.types.d.ts +0 -88
- package/dist/namespaces/delegates.types.d.ts.map +0 -1
- package/dist/namespaces/delegates.types.js +0 -10
- package/dist/namespaces/delegates.types.js.map +0 -1
- package/dist/namespaces/gitvault.crypto.d.ts.map +0 -1
- package/dist/namespaces/gitvault.crypto.js.map +0 -1
- package/dist/namespaces/gitvault.d.ts.map +0 -1
- package/dist/namespaces/gitvault.js.map +0 -1
- package/dist/namespaces/gitvault.types.d.ts.map +0 -1
- package/dist/namespaces/gitvault.types.js.map +0 -1
- package/dist/node/gitvault-address.d.ts.map +0 -1
- package/dist/node/gitvault-address.js.map +0 -1
- package/dist/node/gitvault-apply.d.ts.map +0 -1
- package/dist/node/gitvault-apply.js.map +0 -1
- package/dist/node/gitvault-byo-config.d.ts +0 -29
- package/dist/node/gitvault-byo-config.d.ts.map +0 -1
- package/dist/node/gitvault-byo-config.js.map +0 -1
- package/dist/node/gitvault-byo-probe.d.ts +0 -20
- package/dist/node/gitvault-byo-probe.d.ts.map +0 -1
- package/dist/node/gitvault-byo-probe.js +0 -57
- package/dist/node/gitvault-byo-probe.js.map +0 -1
- package/dist/node/gitvault-creation-journal.d.ts.map +0 -1
- package/dist/node/gitvault-creation-journal.js.map +0 -1
- package/dist/node/gitvault-degraded-read.d.ts.map +0 -1
- package/dist/node/gitvault-degraded-read.js.map +0 -1
- package/dist/node/gitvault-deploy.d.ts.map +0 -1
- package/dist/node/gitvault-deploy.js.map +0 -1
- package/dist/node/gitvault-edge-fetch.d.ts.map +0 -1
- package/dist/node/gitvault-edge-fetch.js.map +0 -1
- package/dist/node/gitvault-handoff.d.ts.map +0 -1
- package/dist/node/gitvault-handoff.js.map +0 -1
- package/dist/node/gitvault-keystore.d.ts.map +0 -1
- package/dist/node/gitvault-keystore.js.map +0 -1
- package/dist/node/gitvault-member-bundle.d.ts.map +0 -1
- package/dist/node/gitvault-member-bundle.js.map +0 -1
- package/dist/node/gitvault-mirror-backend.d.ts.map +0 -1
- package/dist/node/gitvault-mirror-backend.js.map +0 -1
- package/dist/node/gitvault-mirror-config.d.ts.map +0 -1
- package/dist/node/gitvault-mirror-config.js.map +0 -1
- package/dist/node/gitvault-mirror.d.ts.map +0 -1
- package/dist/node/gitvault-mirror.js.map +0 -1
- package/dist/node/gitvault-native-crypto.d.ts.map +0 -1
- package/dist/node/gitvault-native-crypto.js.map +0 -1
- package/dist/node/gitvault-open-or-create.d.ts.map +0 -1
- package/dist/node/gitvault-open-or-create.js.map +0 -1
- package/dist/node/gitvault-prewarm.d.ts.map +0 -1
- package/dist/node/gitvault-prewarm.js.map +0 -1
- package/dist/node/gitvault-profile-scan.d.ts.map +0 -1
- package/dist/node/gitvault-profile-scan.js.map +0 -1
- package/dist/node/gitvault-prune.d.ts.map +0 -1
- package/dist/node/gitvault-prune.js.map +0 -1
- package/dist/node/gitvault-publication.d.ts.map +0 -1
- package/dist/node/gitvault-publication.js.map +0 -1
- package/dist/node/gitvault-push-to-create.d.ts.map +0 -1
- package/dist/node/gitvault-push-to-create.js.map +0 -1
- package/dist/node/gitvault-recover.d.ts.map +0 -1
- package/dist/node/gitvault-recover.js.map +0 -1
- package/dist/node/gitvault-restore.d.ts.map +0 -1
- package/dist/node/gitvault-restore.js.map +0 -1
- package/dist/node/gitvault-snapshot.d.ts.map +0 -1
- package/dist/node/gitvault-snapshot.js.map +0 -1
- package/dist/node/gitvault-writer-state.d.ts.map +0 -1
- package/dist/node/gitvault-writer-state.js.map +0 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vault-deploy.js","sourceRoot":"","sources":["../../src/node/vault-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAE3F,OAAO,EAAiB,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAS,cAAc,EAAE,oBAAoB,EAA2B,MAAM,wBAAwB,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAA6E,MAAM,qBAAqB,CAAC;AAEtQ,gFAAgF;AAEhF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,sBAAsB;IACtB,4BAA4B;IAC5B,uBAAuB;IACvB,yBAAyB;IACzB,6BAA6B;CACrB,CAAC;AAgGX,MAAM,UAAU,kBAAkB,CAAC,QAAuB;IACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAuB,EAAE,WAAmB;IAC9E,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,EAAE,iCAAiC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IAC5K,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAuB,EAAE,OAA6B;IACzF,mBAAmB,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3G,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,OAAO,CAAC,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAClJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAuB,EAAE,WAAmB;IAC9E,MAAM,IAAI,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,2BAA2B,CAAC,QAAuB,EAAE,MAAe;IAClF,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;QACnD,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,KAAK,WAAW;YAAE,SAAS;QACrE,IAAI,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,SAAS;QAC7C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,wJAAwJ;AACxJ,MAAM,UAAU,mBAAmB,CAAC,OAA4B,EAAE,QAAmI;IACnM,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;QAAE,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnG,IAAI,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;QAAE,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnG,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,cAAsB;IAChF,IAAI,UAAU,KAAK,cAAc;QAAE,OAAO;IAC1C,MAAM,IAAI,UAAU,CAClB,uBAAuB,UAAU,+BAA+B,cAAc,yDAAyD,EACvI,8BAA8B,EAC9B,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,yBAAyB,EAAE,UAAU,EAAE,6BAA6B,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC,EAAE,CACpO,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,2BAA2B,CAAC,KAA2B,EAAE,QAAsK;IAC7O,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvH,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,CAAU,EAAE,CAAC;QAC1I,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC5F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAmBD,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,CAA+E,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClK,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gCAAgC,CAAC,CAAU;IACzD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAsH,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChL,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,IAAI,OAAO,CAAC,kBAAkB;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,GAAG,EAAE,uGAAuG,EAAE,CAAC,CAAC;IACjM,IAAI,OAAO,CAAC,sBAAsB;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,+CAA+C,EAAE,GAAG,EAAE,mTAAmT,EAAE,CAAC,CAAC;IACpa,IAAI,OAAO,CAAC,oBAAoB;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sCAAsC,EAAE,GAAG,EAAE,2EAA2E,EAAE,CAAC,CAAC;IACjL,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAY3E,SAAS,YAAY,CAAC,KAA4B;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAe,EAAQ,EAAE;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,0BAA0B,CACvC,QAAuB,EACvB,OAAoD;IAEpD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO;IACxC,MAAM,OAAO,GAA8B;QACzC,GAAG,KAAK;QACR,YAAY,EAAE,QAAQ,CAAC,GAAG;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,eAAe,EAAE,iBAAiB,CAAC,GAAG,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;IACF,MAAM,IAAI,UAAU,CAClB,2DAA2D,YAAY,CAAC,KAAK,CAAC,0DAA0D,QAAQ,CAAC,GAAG,oBAAoB,EACxK,mCAAmC,EACnC;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO;QACP,YAAY,EAAE;YACZ,EAAE,MAAM,EAAE,wDAAwD,EAAE;YACpE,EAAE,MAAM,EAAE,yEAAyE,EAAE;SACtF;KACF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA2B;IAC9D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE1C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;IACnC,0GAA0G;IAC1G,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAC;IACnD,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,CAAC,MAAsC,EAAyB,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe;QAClK,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,MAAM;KACzE,CAAC,CAAC;IAEH,yEAAyE;IACzE,6DAA6D;IAC7D,IAAI,IAAI,GAA+B,IAAI,CAAC;IAC5C,IAAI,SAAS,GAAY,IAAI,CAAC;IAC9B,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9H,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,GAAG,CAAC,CAAC;QAAC,CAAC;IAC9B,CAAC,CAAC,EAAE,CAAC;IAEL,iHAAiH;IACjH,IAAI,SAAS,GAA8B,IAAI,CAAC;IAChD,IAAI,SAAS,GAAY,IAAI,CAAC;IAC9B,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1C,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;gBAC3B,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC;gBAC7D,WAAW,EAAE,QAAQ,CAAC,IAAI;gBAC1B,aAAa,EAAE,OAAO;gBACtB,eAAe,EAAE,KAAK,IAAkC,EAAE;oBACxD,MAAM,WAAW,CAAC,CAAC,sEAAsE;oBACzF,OAAO,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAE,IAA4B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBACnH,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,GAAG,CAAC,CAAC;QAAC,CAAC;IAChC,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,IAAkC,CAAC;IACnD,MAAM,GAAG,GAAG,SAAsC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;IAE5H,cAAc;IACd,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,EAAE,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC,EAAE,CAAC;QAC5N,CAAC;QACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,uEAAuE;YACvE,sEAAsE;YACtE,yCAAyC;YACzC,MAAM,0BAA0B,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACtE,0FAA0F;YAC1F,MAAM,OAAO,GAAyB;gBACpC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC1I,QAAQ,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,eAAe;gBACtH,iBAAiB,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,MAAM;gBAChI,UAAU,EAAE,oBAAoB,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,GAAG,EAAE,CAAC;aACjF,CAAC;YACF,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;YACzI,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,yBAAyB,EAAE,CAAC;oBAC1C,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,0CAA0C;oBAC9H,MAAM,CAAC,CAAC;gBACV,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,qFAAqF,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;YACtP,CAAC;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,6BAA6B,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,gJAAgJ,EAAE,CAAC,EAAE,CAAC;QAC5R,CAAC;QACD,OAAO;YACL,GAAG,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,UAAU,EAAE,8BAA8B,EAAE,IAAI;YAClG,YAAY,EAAE;gBACZ,EAAE,MAAM,EAAE,kFAAkF,EAAE;gBAC9F,EAAE,MAAM,EAAE,gGAAgG,EAAE,QAAQ,EAAE,6BAA6B,EAAE;gBACrJ,+DAA+D;gBAC/D,oEAAoE;gBACpE,+DAA+D;gBAC/D,kEAAkE;gBAClE,oEAAoE;gBACpE,0DAA0D;gBAC1D,0CAA0C;gBAC1C,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACtG;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;IACnH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,iFAAiF,GAAG,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;IAC/O,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,mHAAmH,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;IAC7T,CAAC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,0BAA0B,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClG,IAAI,KAA2B,CAAC;IAChC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3J,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;QACtR,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,0DAA0D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtP,8FAA8F;QAC9F,0EAA0E;QAC1E,uBAAuB,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,2BAA2B,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC;IAC3P,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACxH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC,EAAE,CAAC;IAC3M,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAC7J,CAAC;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAY,EAAE,UAAgC,EAAE;IAC1F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAA6B,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1E,KAAK,MAAM,OAAO,IAAI,2BAA2B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,OAAO,CAAC;YAChB,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;oBAC3B,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAC/D,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW;oBACnC,aAAa,EAAE,OAAO;oBACtB,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC;iBACxF,CAAC,CAAC;gBACH,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE,oBAAoB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;gBACtL,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,WAAW;gBAAE,MAAM,IAAI,UAAU,CAAC,6DAA6D,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtM,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACnN,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,UAAU,CAAC,iEAAiE,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAClQ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACrJ,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,kDAAkD,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACvK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,oBAAoB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACtF,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
*
|
|
2
|
+
* vault — CDN-edge read preference + silent fallback (vault-read-edge-
|
|
3
3
|
* cache, task 2.4, design D5).
|
|
4
4
|
*
|
|
5
5
|
* The gateway's `POST …/object-reads` (and the composite `GET …/state`
|
|
@@ -23,8 +23,8 @@
|
|
|
23
23
|
* reading `url` directly, both on the happy path and on fallback.
|
|
24
24
|
*
|
|
25
25
|
* Deliberately a standalone module with no imports of its own, rather than
|
|
26
|
-
* folded into `
|
|
27
|
-
* `
|
|
26
|
+
* folded into `vault-publication.ts` and exported from there:
|
|
27
|
+
* `vault-mirror.ts` reimplements its own presigned-read call site
|
|
28
28
|
* specifically so it has NO dependency on the live-push module (see that
|
|
29
29
|
* file's own header comment). Routing both call sites through this one tiny
|
|
30
30
|
* sibling instead keeps that independence intact while STILL sharing the
|
|
@@ -38,7 +38,7 @@
|
|
|
38
38
|
* this module just never imports the `Client` type itself, so it stays
|
|
39
39
|
* usable from any call site without pulling in the kernel.
|
|
40
40
|
*/
|
|
41
|
-
export interface
|
|
41
|
+
export interface VaultEdgeFetchClient {
|
|
42
42
|
fetch: typeof globalThis.fetch;
|
|
43
43
|
}
|
|
44
44
|
/**
|
|
@@ -47,7 +47,7 @@ export interface GitvaultEdgeFetchClient {
|
|
|
47
47
|
* shape this module needs: the always-present authoritative URL, plus the
|
|
48
48
|
* optional same-bytes edge URL.
|
|
49
49
|
*/
|
|
50
|
-
export interface
|
|
50
|
+
export interface VaultEdgeReadTarget {
|
|
51
51
|
url: string;
|
|
52
52
|
edge_url?: string;
|
|
53
53
|
}
|
|
@@ -55,14 +55,14 @@ export interface GitvaultEdgeReadTarget {
|
|
|
55
55
|
* @internal Test seam; not re-exported from `@run402/sdk/node`. Resets the
|
|
56
56
|
* process-lifetime "edge already failed once" flag between test cases.
|
|
57
57
|
*/
|
|
58
|
-
export declare function
|
|
58
|
+
export declare function _resetVaultEdgeFetchStateForTest(): void;
|
|
59
59
|
/**
|
|
60
|
-
* Fetch one
|
|
60
|
+
* Fetch one vault object's bytes, preferring `target.edge_url` over
|
|
61
61
|
* `target.url` per the policy above. Returns the same kind of `Response` a
|
|
62
62
|
* plain `client.fetch(target.url, init)` would — this function never
|
|
63
63
|
* inspects or decodes the body and never throws on a non-ok response; only
|
|
64
64
|
* a thrown fetch error against `url` itself propagates, exactly as it does
|
|
65
65
|
* today for every existing caller.
|
|
66
66
|
*/
|
|
67
|
-
export declare function
|
|
68
|
-
//# sourceMappingURL=
|
|
67
|
+
export declare function fetchVaultObjectBytes(client: VaultEdgeFetchClient, target: VaultEdgeReadTarget, init?: RequestInit): Promise<Response>;
|
|
68
|
+
//# sourceMappingURL=vault-edge-fetch.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vault-edge-fetch.d.ts","sourceRoot":"","sources":["../../src/node/vault-edge-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AASD;;;GAGG;AACH,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,mBAAmB,EAC3B,IAAI,GAAE,WAA+B,GACpC,OAAO,CAAC,QAAQ,CAAC,CAWnB"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
*
|
|
2
|
+
* vault — CDN-edge read preference + silent fallback (vault-read-edge-
|
|
3
3
|
* cache, task 2.4, design D5).
|
|
4
4
|
*
|
|
5
5
|
* The gateway's `POST …/object-reads` (and the composite `GET …/state`
|
|
@@ -23,8 +23,8 @@
|
|
|
23
23
|
* reading `url` directly, both on the happy path and on fallback.
|
|
24
24
|
*
|
|
25
25
|
* Deliberately a standalone module with no imports of its own, rather than
|
|
26
|
-
* folded into `
|
|
27
|
-
* `
|
|
26
|
+
* folded into `vault-publication.ts` and exported from there:
|
|
27
|
+
* `vault-mirror.ts` reimplements its own presigned-read call site
|
|
28
28
|
* specifically so it has NO dependency on the live-push module (see that
|
|
29
29
|
* file's own header comment). Routing both call sites through this one tiny
|
|
30
30
|
* sibling instead keeps that independence intact while STILL sharing the
|
|
@@ -37,24 +37,24 @@
|
|
|
37
37
|
* edge failure anywhere stops every subsequent attempt at `edge_url` for
|
|
38
38
|
* the rest of this process, across every call site that shares this module.
|
|
39
39
|
*/
|
|
40
|
-
let
|
|
40
|
+
let vaultEdgeDisabledForProcess = false;
|
|
41
41
|
/**
|
|
42
42
|
* @internal Test seam; not re-exported from `@run402/sdk/node`. Resets the
|
|
43
43
|
* process-lifetime "edge already failed once" flag between test cases.
|
|
44
44
|
*/
|
|
45
|
-
export function
|
|
46
|
-
|
|
45
|
+
export function _resetVaultEdgeFetchStateForTest() {
|
|
46
|
+
vaultEdgeDisabledForProcess = false;
|
|
47
47
|
}
|
|
48
48
|
/**
|
|
49
|
-
* Fetch one
|
|
49
|
+
* Fetch one vault object's bytes, preferring `target.edge_url` over
|
|
50
50
|
* `target.url` per the policy above. Returns the same kind of `Response` a
|
|
51
51
|
* plain `client.fetch(target.url, init)` would — this function never
|
|
52
52
|
* inspects or decodes the body and never throws on a non-ok response; only
|
|
53
53
|
* a thrown fetch error against `url` itself propagates, exactly as it does
|
|
54
54
|
* today for every existing caller.
|
|
55
55
|
*/
|
|
56
|
-
export async function
|
|
57
|
-
if (target.edge_url && !
|
|
56
|
+
export async function fetchVaultObjectBytes(client, target, init = { method: "GET" }) {
|
|
57
|
+
if (target.edge_url && !vaultEdgeDisabledForProcess) {
|
|
58
58
|
try {
|
|
59
59
|
const r = await client.fetch(target.edge_url, init);
|
|
60
60
|
if (r.ok)
|
|
@@ -63,8 +63,8 @@ export async function fetchGitvaultObjectBytes(client, target, init = { method:
|
|
|
63
63
|
catch {
|
|
64
64
|
// a thrown (network) fetch error against the edge — fall through to `url` below
|
|
65
65
|
}
|
|
66
|
-
|
|
66
|
+
vaultEdgeDisabledForProcess = true;
|
|
67
67
|
}
|
|
68
68
|
return client.fetch(target.url, init);
|
|
69
69
|
}
|
|
70
|
-
//# sourceMappingURL=
|
|
70
|
+
//# sourceMappingURL=vault-edge-fetch.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vault-edge-fetch.js","sourceRoot":"","sources":["../../src/node/vault-edge-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAuBH;;;;GAIG;AACH,IAAI,2BAA2B,GAAG,KAAK,CAAC;AAExC;;;GAGG;AACH,MAAM,UAAU,gCAAgC;IAC9C,2BAA2B,GAAG,KAAK,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAA4B,EAC5B,MAA2B,EAC3B,OAAoB,EAAE,MAAM,EAAE,KAAK,EAAE;IAErC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,EAAE;gBAAE,OAAO,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;QAClF,CAAC;QACD,2BAA2B,GAAG,IAAI,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import { VAULT_FORMAT, VAULT_SUITE } from "../namespaces/vault.crypto.js";
|
|
2
2
|
import { type RedeemKind, type HandoffKeyPrefixEntry, type RedeemKeyParts, type HandoffKeyParts, type InviteKeyParts, type HandoffSecrets, HANDOFF_KEY_PREFIXES, uuidToBytes, assembleHandoffKey, assembleInviteKey, parseRedeemKey, parseHandoffKey, parseInviteKey, deriveHandoffSecrets, deriveInviteSecrets } from "./bearer-redeem-key.js";
|
|
3
3
|
export { HANDOFF_KEY_PREFIXES, uuidToBytes, assembleHandoffKey, assembleInviteKey, parseRedeemKey, parseHandoffKey, parseInviteKey, deriveHandoffSecrets, deriveInviteSecrets, };
|
|
4
4
|
export type { RedeemKind, HandoffKeyPrefixEntry, RedeemKeyParts, HandoffKeyParts, InviteKeyParts, HandoffSecrets };
|
|
@@ -18,12 +18,12 @@ export declare function deriveRedeemWriterAdmissionSeed(kind: RedeemKind, idByte
|
|
|
18
18
|
export declare function deriveWriterAdmissionSeed(handoffIdBytes: Uint8Array, masterSecret: Uint8Array): Uint8Array;
|
|
19
19
|
/** The invite-kind sibling of {@link deriveWriterAdmissionSeed} — `kygit/invite/writer-admission/v1` (kygit-invite design D3). */
|
|
20
20
|
export declare function deriveInviteWriterAdmissionSeed(inviteIdBytes: Uint8Array, masterSecret: Uint8Array): Uint8Array;
|
|
21
|
-
export type
|
|
21
|
+
export type VaultWriterMintedRole = "owner" | "admin" | "developer" | "billing" | "viewer";
|
|
22
22
|
/** Signed by the MINTING writer's own writer key, at handoff mint time. Never chain-stored directly — embedded verbatim inside an admitted `add_writer_key` transition's `authorization.kind:"handoff".grant` once consumed. */
|
|
23
23
|
export interface WriterAdmissionGrant {
|
|
24
|
-
format: typeof
|
|
24
|
+
format: typeof VAULT_FORMAT;
|
|
25
25
|
object_kind: "writer_admission_grant";
|
|
26
|
-
suite: typeof
|
|
26
|
+
suite: typeof VAULT_SUITE;
|
|
27
27
|
repo_id: string;
|
|
28
28
|
handoff_id: string;
|
|
29
29
|
auth_hash: string;
|
|
@@ -31,7 +31,7 @@ export interface WriterAdmissionGrant {
|
|
|
31
31
|
checkpoint_head_sha256: string;
|
|
32
32
|
grantor_writer_key_id: string;
|
|
33
33
|
handoff_admission_pubkey: string;
|
|
34
|
-
minted_role:
|
|
34
|
+
minted_role: VaultWriterMintedRole;
|
|
35
35
|
claim_not_after: string;
|
|
36
36
|
created_at: string;
|
|
37
37
|
signature: string;
|
|
@@ -43,7 +43,7 @@ export interface BuildWriterAdmissionGrantInput {
|
|
|
43
43
|
auth_hash: string;
|
|
44
44
|
checkpoint_generation: string;
|
|
45
45
|
checkpoint_head_sha256: string;
|
|
46
|
-
minted_role:
|
|
46
|
+
minted_role: VaultWriterMintedRole;
|
|
47
47
|
claim_not_after: string;
|
|
48
48
|
created_at?: string;
|
|
49
49
|
/** The MINTER's own existing active writer signing seed — NOT {@link deriveWriterAdmissionSeed}'s one-use seed, which belongs to the grant's `handoff_admission_pubkey` field, never to its signer. */
|
|
@@ -127,7 +127,7 @@ export interface HandoffEnvelopePayload {
|
|
|
127
127
|
};
|
|
128
128
|
note_schema: "kygit.handoff-note.v1";
|
|
129
129
|
}
|
|
130
|
-
/** Frame tag for the handoff envelope format — DISTINCT from `r402s/v0`'s `"R402S0"` object frame (design D3: never stored as a vault object). The LEGACY v1 tag: nothing seals it any more, but a pre-
|
|
130
|
+
/** Frame tag for the handoff envelope format — DISTINCT from `r402s/v0`'s `"R402S0"` object frame (design D3: never stored as a vault object). The LEGACY v1 tag: nothing seals it any more, but a pre-vault-multi-writer handoff row still carries one and {@link openHandoffEnvelope} still opens it. */
|
|
131
131
|
export declare const HANDOFF_ENVELOPE_KIND: "kygit-handoff-envelope-v1";
|
|
132
132
|
/** Seal the handoff payload under `wrap_key` as a LEGACY v1 envelope. Returns the standard-base64 wire form (openapi `format: byte`) + its declared kind tag. Nothing in the shipped flow calls this any more — {@link sealHandoffEnvelopeV2} is what `handoff` seals — but the v1 shape stays openable and sealable for the conformance vectors. */
|
|
133
133
|
export declare function sealHandoffEnvelope(handoffIdBytes: Uint8Array, wrapKey: Uint8Array, payload: HandoffEnvelopePayload, nonce?: Uint8Array): {
|
|
@@ -169,7 +169,7 @@ export declare function sealInviteEnvelope(inviteIdBytes: Uint8Array, wrapKey: U
|
|
|
169
169
|
/**
|
|
170
170
|
* Open a v2 envelope for a writer-activation flow. Refuses a v1 (or any
|
|
171
171
|
* other non-v2) `envelope_kind` LOCALLY with `HANDOFF_ENVELOPE_UNSUPPORTED`
|
|
172
|
-
* BEFORE attempting to decrypt anything — post-
|
|
172
|
+
* BEFORE attempting to decrypt anything — post-vault-multi-writer, a
|
|
173
173
|
* writer-activation-aware `resume` needs `writer_admission_grant_sha256` to
|
|
174
174
|
* cross-check the returned grant, and a pre-rev-47 v1 envelope structurally
|
|
175
175
|
* has none. Shares ONLY the frame/AEAD-opening step with
|
|
@@ -241,4 +241,4 @@ export declare function scanInviteNoteForSecrets(note: KygitInviteNote): Handoff
|
|
|
241
241
|
export declare function assertHandoffNoteHasNoSecret(note: KygitHandoffNote): void;
|
|
242
242
|
/** Throws `INVITE_NOTE_CONTAINS_SECRET` naming the field — call before the invite commit is written (kygit-invite design D3). */
|
|
243
243
|
export declare function assertInviteNoteHasNoSecret(note: KygitInviteNote): void;
|
|
244
|
-
//# sourceMappingURL=
|
|
244
|
+
//# sourceMappingURL=vault-handoff.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vault-handoff.d.ts","sourceRoot":"","sources":["../../src/node/vault-handoff.ts"],"names":[],"mappings":"AA0CA,OAAO,EAKL,YAAY,EACZ,WAAW,EASZ,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,mBAAmB,GACpB,CAAC;AACF,YAAY,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AA8BnH;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,UAAU,CAE3H;AAED,4GAA4G;AAC5G,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,UAAU,CAE1G;AAED,kIAAkI;AAClI,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,UAAU,CAE/G;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAG3F,gOAAgO;AAChO,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,YAAY,CAAC;IAC5B,WAAW,EAAE,wBAAwB,CAAC;IACtC,KAAK,EAAE,OAAO,WAAW,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,qBAAqB,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,2HAA2H;IAC3H,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,qBAAqB,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uMAAuM;IACvM,oBAAoB,EAAE,UAAU,CAAC;IACjC,0FAA0F;IAC1F,wBAAwB,EAAE,UAAU,CAAC;CACtC;AAED,2OAA2O;AAC3O,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,8BAA8B,GAAG,oBAAoB,CAsBrG;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,UAAU,GAAG,OAAO,CAWpH;AAED,6KAA6K;AAC7K,eAAO,MAAM,4BAA4B,EAAG,mCAA4C,CAAC;AAGzF,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,OAAO,4BAA4B,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,gXAAgX;AAChX,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,4BAA4B,CAAC;IACxC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,0HAA0H;IAC1H,cAAc,EAAE,UAAU,CAAC;IAC3B,oHAAoH;IACpH,qBAAqB,EAAE,UAAU,CAAC;IAClC,8BAA8B,EAAE,UAAU,CAAC;CAC5C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,gBAAgB,CAkBzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,GAAG,OAAO,CAe5G;AAKD,+FAA+F;AAC/F,MAAM,WAAW,sBAAsB;IACrC,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,UAAU,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,WAAW,EAAE,uBAAuB,CAAC;CACtC;AAED,2SAA2S;AAC3S,eAAO,MAAM,qBAAqB,EAAG,2BAAoC,CAAC;AAmH1E,qVAAqV;AACrV,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAE5L;AAED,6RAA6R;AAC7R,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,GAAE,MAA8B,GAAG,sBAAsB,CAMjL;AAcD,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,EAAG,2BAAoC,CAAC;AAC7E,qJAAqJ;AACrJ,eAAO,MAAM,uBAAuB,EAAG,0BAAmC,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,sBAAsB,EAAE,GAAG,CAAC;IACjF,CAAC,EAAE,CAAC,CAAC;IACL,6BAA6B,EAAE,MAAM,CAAC;CACvC;AAED,2PAA2P;AAC3P,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,wBAAwB,EAAE,MAAM,GAAG,aAAa,CAAC;IACrG,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED,8NAA8N;AAC9N,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAKhM;AAED,6HAA6H;AAC7H,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAK3L;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,wBAAwB,CAwB7J;AAED,yLAAyL;AACzL,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,GAAE,MAAgC,GAAG,uBAAuB,CAwBlL;AAID,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,6BAA6B,EAAE,MAAM,CAAC;CACvC;AAED,mFAAmF;AACnF,UAAU,mBAAmB;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,uBAAuB,CAAC;CAClC;AAED,6EAA6E;AAC7E,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,MAAM,EAAE,uBAAuB,CAAC;CACjC;AAED,6IAA6I;AAC7I,MAAM,WAAW,eAAgB,SAAQ,mBAAmB;IAC1D,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAI5E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAI1E;AA0CD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAyCD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,GAAG,wBAAwB,GAAG,IAAI,CAEjG;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,IAAI,CAE/F;AAED,0GAA0G;AAC1G,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAKzE;AAED,iIAAiI;AACjI,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAKvE"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
*
|
|
2
|
+
* vault — the Handoff Key and the Invite Key, one kind-parameterized
|
|
3
3
|
* module (kygit-handoff design D3/D6/D10; kygit-invite design D3).
|
|
4
4
|
*
|
|
5
5
|
* Both keys are bearer bridges, never a K_repo derivation of their own:
|
|
@@ -23,7 +23,7 @@
|
|
|
23
23
|
* one parser — every existing handoff export and test stays byte-identical.
|
|
24
24
|
*
|
|
25
25
|
* Reuses ONLY existing primitives — `jcs`/HKDF/HMAC/SHA-256 from
|
|
26
|
-
* `@noble/hashes`, the SAME `
|
|
26
|
+
* `@noble/hashes`, the SAME `_vaultAeadBackend()` XChaCha20-Poly1305
|
|
27
27
|
* seam `sealFrame`/`openFrame` use — never a second crypto path. The wire
|
|
28
28
|
* envelope here is a DIFFERENT, smaller frame than `r402s/v0`'s seven-member
|
|
29
29
|
* object frame (design D3: "the sealed envelope lives in the gateway ROW,
|
|
@@ -40,7 +40,7 @@ import { concatBytes, utf8ToBytes } from "@noble/hashes/utils.js";
|
|
|
40
40
|
import { xchacha20poly1305 } from "@noble/ciphers/chacha.js";
|
|
41
41
|
import { base64 } from "@scure/base";
|
|
42
42
|
import { LocalError } from "../errors.js";
|
|
43
|
-
import {
|
|
43
|
+
import { _vaultAeadBackend, fromBase64url, randomBytes, toBase64url, VAULT_FORMAT, VAULT_SUITE, VAULT_HEX16_RE, VAULT_SHA256_RE, signaturePreimage, ed25519Sign, ed25519PublicKey, ed25519VerifyStrict, vkFingerprint, ekFingerprint, } from "../namespaces/vault.crypto.js";
|
|
44
44
|
// add-room-invite design D2: the pure key-format primitives (the registry,
|
|
45
45
|
// uuidToBytes, assemble/parse, the HKDF derive) moved to
|
|
46
46
|
// `bearer-redeem-key.ts` — a move, not a copy — so the room kind (`kri1_`)
|
|
@@ -54,17 +54,17 @@ function fail(code, message, context, details) {
|
|
|
54
54
|
}
|
|
55
55
|
const HANDOFF_ENTRY = HANDOFF_KEY_PREFIXES[0];
|
|
56
56
|
const INVITE_ENTRY = HANDOFF_KEY_PREFIXES[1];
|
|
57
|
-
// ─── Writer-admission grant + acceptance (
|
|
57
|
+
// ─── Writer-admission grant + acceptance (vault-multi-writer D4/§4.17) ───
|
|
58
58
|
//
|
|
59
59
|
// The bearer-completable path for `add_writer_key{authorization.kind:
|
|
60
60
|
// "handoff"}` — an unknown-at-mint, possibly-sender-gone recipient becomes a
|
|
61
61
|
// vault WRITER (not just a K_repo holder) via a sender-signed grant plus the
|
|
62
62
|
// redeemer's own two-signature acceptance. Reuses ONLY existing primitives:
|
|
63
63
|
// `signaturePreimage`/`ed25519Sign`/`ed25519VerifyStrict`/`vkFingerprint`/
|
|
64
|
-
// `ekFingerprint` from `
|
|
64
|
+
// `ekFingerprint` from `vault.crypto.ts` — the SAME "r402s/v0/<kind>\n" +
|
|
65
65
|
// JCS(object minus signature) preimage rule every other chain object uses
|
|
66
66
|
// (protocol §1), NOT a bespoke construction. Verified against the gateway's
|
|
67
|
-
// OWN `services/
|
|
67
|
+
// OWN `services/vault/claims.ts` (not just the protocol prose, which
|
|
68
68
|
// describes the acceptance statement's preimage as `lp(domain) ‖
|
|
69
69
|
// JCS(statement)` — that text is stale; the shipped gateway code calls its
|
|
70
70
|
// own `signaturePreimage("handoff-writer-accept/v1", acceptance.statement)`,
|
|
@@ -94,18 +94,18 @@ export function deriveInviteWriterAdmissionSeed(inviteIdBytes, masterSecret) {
|
|
|
94
94
|
const WRITER_MINTED_ROLES = ["owner", "admin", "developer", "billing", "viewer"];
|
|
95
95
|
/** Mint side (D4): builds + signs `writer_admission_grant`. The gateway's own mint-time validation (grantor active + self-consistent, field equality) is server-side; this function only builds a well-formed, correctly-signed object. */
|
|
96
96
|
export function buildWriterAdmissionGrant(input) {
|
|
97
|
-
if (!
|
|
97
|
+
if (!VAULT_SHA256_RE.test(input.auth_hash))
|
|
98
98
|
fail("VALIDATION_FAILED", "auth_hash must be 64 lowercase hex", "building writer_admission_grant", { field: "auth_hash" });
|
|
99
|
-
if (!
|
|
99
|
+
if (!VAULT_HEX16_RE.test(input.checkpoint_generation))
|
|
100
100
|
fail("VALIDATION_FAILED", "checkpoint_generation must be 16 lowercase hex", "building writer_admission_grant", { field: "checkpoint_generation" });
|
|
101
|
-
if (!
|
|
101
|
+
if (!VAULT_SHA256_RE.test(input.checkpoint_head_sha256))
|
|
102
102
|
fail("VALIDATION_FAILED", "checkpoint_head_sha256 must be 64 lowercase hex", "building writer_admission_grant", { field: "checkpoint_head_sha256" });
|
|
103
103
|
if (!WRITER_MINTED_ROLES.includes(input.minted_role))
|
|
104
104
|
fail("VALIDATION_FAILED", "minted_role is not a recognized role", "building writer_admission_grant", { field: "minted_role" });
|
|
105
105
|
const withoutSignature = {
|
|
106
|
-
format:
|
|
106
|
+
format: VAULT_FORMAT,
|
|
107
107
|
object_kind: "writer_admission_grant",
|
|
108
|
-
suite:
|
|
108
|
+
suite: VAULT_SUITE,
|
|
109
109
|
repo_id: input.repo_id,
|
|
110
110
|
handoff_id: input.handoff_id,
|
|
111
111
|
auth_hash: input.auth_hash,
|
|
@@ -128,7 +128,7 @@ export function buildWriterAdmissionGrant(input) {
|
|
|
128
128
|
* client-side pre-check before spending a grant it did not itself mint.
|
|
129
129
|
*/
|
|
130
130
|
export function verifyWriterAdmissionGrant(grant, grantorSigningPubkeyRaw) {
|
|
131
|
-
if (grant.format !==
|
|
131
|
+
if (grant.format !== VAULT_FORMAT || grant.object_kind !== "writer_admission_grant" || grant.suite !== VAULT_SUITE)
|
|
132
132
|
return false;
|
|
133
133
|
if (grant.grantor_writer_key_id !== vkFingerprint(grantorSigningPubkeyRaw))
|
|
134
134
|
return false;
|
|
@@ -152,7 +152,7 @@ const HANDOFF_WRITER_ACCEPT_PREIMAGE_DOMAIN = "handoff-writer-accept/v1";
|
|
|
152
152
|
* {@link deriveHandoffSecrets}), and its own keys.
|
|
153
153
|
*/
|
|
154
154
|
export function buildWriterAcceptance(input) {
|
|
155
|
-
if (!
|
|
155
|
+
if (!VAULT_SHA256_RE.test(input.auth_hash))
|
|
156
156
|
fail("VALIDATION_FAILED", "auth_hash must be 64 lowercase hex", "building writer_acceptance", { field: "auth_hash" });
|
|
157
157
|
const signingPubkeyRaw = ed25519PublicKey(input.redeemer_signing_seed);
|
|
158
158
|
const statement = {
|
|
@@ -199,21 +199,21 @@ export function verifyWriterAcceptance(acceptance, admissionPubkeyRaw) {
|
|
|
199
199
|
const preimage = signaturePreimage(HANDOFF_WRITER_ACCEPT_PREIMAGE_DOMAIN, acceptance.statement);
|
|
200
200
|
return ed25519VerifyStrict(acceptanceSig, preimage, admissionPubkeyRaw) && ed25519VerifyStrict(possessionSig, preimage, signingPubkey);
|
|
201
201
|
}
|
|
202
|
-
/** Frame tag for the handoff envelope format — DISTINCT from `r402s/v0`'s `"R402S0"` object frame (design D3: never stored as a vault object). The LEGACY v1 tag: nothing seals it any more, but a pre-
|
|
202
|
+
/** Frame tag for the handoff envelope format — DISTINCT from `r402s/v0`'s `"R402S0"` object frame (design D3: never stored as a vault object). The LEGACY v1 tag: nothing seals it any more, but a pre-vault-multi-writer handoff row still carries one and {@link openHandoffEnvelope} still opens it. */
|
|
203
203
|
export const HANDOFF_ENVELOPE_KIND = "kygit-handoff-envelope-v1";
|
|
204
204
|
const FRAME_MAGIC_BYTES = 4;
|
|
205
205
|
const FRAME_VERSION_BYTE = 0x01;
|
|
206
206
|
const CLAIM_NONCE_BYTES = 24;
|
|
207
207
|
const CLAIM_FRAME_HEADER_BYTES = FRAME_MAGIC_BYTES + 1 + CLAIM_NONCE_BYTES;
|
|
208
208
|
function redeemAeadSeal(key32, nonce24, aad, plaintext) {
|
|
209
|
-
const backend =
|
|
209
|
+
const backend = _vaultAeadBackend();
|
|
210
210
|
if (backend)
|
|
211
211
|
return backend.seal(key32, nonce24, aad, plaintext);
|
|
212
212
|
return xchacha20poly1305(key32, nonce24, aad).encrypt(plaintext);
|
|
213
213
|
}
|
|
214
214
|
function redeemAeadOpen(key32, nonce24, aad, ctAndTag) {
|
|
215
215
|
try {
|
|
216
|
-
const backend =
|
|
216
|
+
const backend = _vaultAeadBackend();
|
|
217
217
|
if (backend)
|
|
218
218
|
return backend.open(key32, nonce24, aad, ctAndTag);
|
|
219
219
|
return xchacha20poly1305(key32, nonce24, aad).decrypt(ctAndTag);
|
|
@@ -328,7 +328,7 @@ export function openHandoffEnvelope(handoffIdBytes, wrapKey, sealedEnvelope, env
|
|
|
328
328
|
}
|
|
329
329
|
return p;
|
|
330
330
|
}
|
|
331
|
-
// ─── Envelope v2 (
|
|
331
|
+
// ─── Envelope v2 (vault-multi-writer D4/§4.17; kygit-invite design D3) ───
|
|
332
332
|
//
|
|
333
333
|
// `writer_admission_grant_sha256` is what makes v2 v2 — design D4's "no hash
|
|
334
334
|
// cycle: grant first, then seal": the minter builds + signs
|
|
@@ -345,14 +345,14 @@ export const HANDOFF_ENVELOPE_V2_KIND = "kygit-handoff-envelope-v2";
|
|
|
345
345
|
export const INVITE_ENVELOPE_V2_KIND = "kygit-invite-envelope-v2";
|
|
346
346
|
/** Seal a v2 handoff envelope — identical framing to {@link sealHandoffEnvelope}, tagged `kygit-handoff-envelope-v2` so its AAD (and therefore its ciphertext) is never confusable with a v1 envelope of the same handoff. */
|
|
347
347
|
export function sealHandoffEnvelopeV2(handoffIdBytes, wrapKey, payload, nonce) {
|
|
348
|
-
if (!
|
|
348
|
+
if (!VAULT_SHA256_RE.test(payload.writer_admission_grant_sha256)) {
|
|
349
349
|
fail("VALIDATION_FAILED", "writer_admission_grant_sha256 must be 64 lowercase hex", "sealing handoff envelope v2", { field: "writer_admission_grant_sha256" });
|
|
350
350
|
}
|
|
351
351
|
return sealRedeemEnvelope(HANDOFF_ENTRY, handoffIdBytes, wrapKey, payload, HANDOFF_ENVELOPE_V2_KIND, nonce);
|
|
352
352
|
}
|
|
353
353
|
/** The invite-kind sibling of {@link sealHandoffEnvelopeV2} — the ONLY invite envelope there is (kygit-invite design D3). */
|
|
354
354
|
export function sealInviteEnvelope(inviteIdBytes, wrapKey, payload, nonce) {
|
|
355
|
-
if (!
|
|
355
|
+
if (!VAULT_SHA256_RE.test(payload.writer_admission_grant_sha256)) {
|
|
356
356
|
fail("VALIDATION_FAILED", "writer_admission_grant_sha256 must be 64 lowercase hex", "sealing invite envelope", { field: "writer_admission_grant_sha256" });
|
|
357
357
|
}
|
|
358
358
|
return sealRedeemEnvelope(INVITE_ENTRY, inviteIdBytes, wrapKey, payload, INVITE_ENVELOPE_V2_KIND, nonce);
|
|
@@ -360,7 +360,7 @@ export function sealInviteEnvelope(inviteIdBytes, wrapKey, payload, nonce) {
|
|
|
360
360
|
/**
|
|
361
361
|
* Open a v2 envelope for a writer-activation flow. Refuses a v1 (or any
|
|
362
362
|
* other non-v2) `envelope_kind` LOCALLY with `HANDOFF_ENVELOPE_UNSUPPORTED`
|
|
363
|
-
* BEFORE attempting to decrypt anything — post-
|
|
363
|
+
* BEFORE attempting to decrypt anything — post-vault-multi-writer, a
|
|
364
364
|
* writer-activation-aware `resume` needs `writer_admission_grant_sha256` to
|
|
365
365
|
* cross-check the returned grant, and a pre-rev-47 v1 envelope structurally
|
|
366
366
|
* has none. Shares ONLY the frame/AEAD-opening step with
|
|
@@ -374,7 +374,7 @@ export function sealInviteEnvelope(inviteIdBytes, wrapKey, payload, nonce) {
|
|
|
374
374
|
*/
|
|
375
375
|
export function openHandoffEnvelopeV2(handoffIdBytes, wrapKey, sealedEnvelope, envelopeKind) {
|
|
376
376
|
if (envelopeKind !== HANDOFF_ENVELOPE_V2_KIND) {
|
|
377
|
-
fail("HANDOFF_ENVELOPE_UNSUPPORTED", `this handoff's envelope is ${envelopeKind ? `\`${envelopeKind}\`` : "of an unrecognized kind"}, not \`${HANDOFF_ENVELOPE_V2_KIND}\` — writer activation needs the v2 envelope's writer_admission_grant_sha256, which a pre-
|
|
377
|
+
fail("HANDOFF_ENVELOPE_UNSUPPORTED", `this handoff's envelope is ${envelopeKind ? `\`${envelopeKind}\`` : "of an unrecognized kind"}, not \`${HANDOFF_ENVELOPE_V2_KIND}\` — writer activation needs the v2 envelope's writer_admission_grant_sha256, which a pre-vault-multi-writer handoff never carries`, "opening handoff envelope for writer activation", { received: envelopeKind, required: HANDOFF_ENVELOPE_V2_KIND });
|
|
378
378
|
}
|
|
379
379
|
const p = openRedeemEnvelope(HANDOFF_ENTRY, handoffIdBytes, wrapKey, sealedEnvelope, envelopeKind);
|
|
380
380
|
if (p.v !== 2 ||
|
|
@@ -385,7 +385,7 @@ export function openHandoffEnvelopeV2(handoffIdBytes, wrapKey, sealedEnvelope, e
|
|
|
385
385
|
!p.checkpoint ||
|
|
386
386
|
p.note_schema !== "kygit.handoff-note.v1" ||
|
|
387
387
|
typeof p.writer_admission_grant_sha256 !== "string" ||
|
|
388
|
-
!
|
|
388
|
+
!VAULT_SHA256_RE.test(p.writer_admission_grant_sha256)) {
|
|
389
389
|
fail("HANDOFF_ENVELOPE_INVALID", "opened envelope does not match the v2 kygit.handoff-note.v1 payload shape", "opening handoff envelope for writer activation");
|
|
390
390
|
}
|
|
391
391
|
return p;
|
|
@@ -404,7 +404,7 @@ export function openInviteEnvelope(inviteIdBytes, wrapKey, sealedEnvelope, envel
|
|
|
404
404
|
!p.checkpoint ||
|
|
405
405
|
p.note_schema !== "kygit.invite-note.v1" ||
|
|
406
406
|
typeof p.writer_admission_grant_sha256 !== "string" ||
|
|
407
|
-
!
|
|
407
|
+
!VAULT_SHA256_RE.test(p.writer_admission_grant_sha256)) {
|
|
408
408
|
fail("INVITE_ENVELOPE_INVALID", "opened envelope does not match the v2 kygit.invite-note.v1 payload shape", "opening invite envelope");
|
|
409
409
|
}
|
|
410
410
|
return p;
|
|
@@ -526,4 +526,4 @@ export function assertInviteNoteHasNoSecret(note) {
|
|
|
526
526
|
fail("INVITE_NOTE_CONTAINS_SECRET", `the invite note's \`${finding.field}\` ${finding.reason} — edit the note; secrets belong in the secrets API, never in a note another agent will read`, "scanning invite note", { field: finding.field });
|
|
527
527
|
}
|
|
528
528
|
}
|
|
529
|
-
//# sourceMappingURL=
|
|
529
|
+
//# sourceMappingURL=vault-handoff.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vault-handoff.js","sourceRoot":"","sources":["../../src/node/vault-handoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,WAAW,EACX,YAAY,EACZ,WAAW,EACX,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,aAAa,GACd,MAAM,+BAA+B,CAAC;AACvC,2EAA2E;AAC3E,yDAAyD;AACzD,2EAA2E;AAC3E,yEAAyE;AACzE,yEAAyE;AACzE,4DAA4D;AAC5D,OAAO,EAOL,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,mBAAmB,GACpB,CAAC;AAGF,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe,EAAE,OAAiB;IAC7E,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAOD,MAAM,aAAa,GAAG,oBAAoB,CAAC,CAAC,CAAwB,CAAC;AACrE,MAAM,YAAY,GAAG,oBAAoB,CAAC,CAAC,CAAwB,CAAC;AAEpE,4EAA4E;AAC5E,EAAE;AACF,sEAAsE;AACtE,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,iEAAiE;AACjE,2EAA2E;AAC3E,6EAA6E;AAC7E,uCAAuC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAgB,EAAE,OAAmB,EAAE,YAAwB;IAC7G,OAAO,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,IAAI,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,yBAAyB,CAAC,cAA0B,EAAE,YAAwB;IAC5F,OAAO,+BAA+B,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;AAClF,CAAC;AAED,kIAAkI;AAClI,MAAM,UAAU,+BAA+B,CAAC,aAAyB,EAAE,YAAwB;IACjG,OAAO,+BAA+B,CAAC,QAAQ,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AAChF,CAAC;AAGD,MAAM,mBAAmB,GAAqC,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAoCnH,2OAA2O;AAC3O,MAAM,UAAU,yBAAyB,CAAC,KAAqC;IAC7E,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,mBAAmB,EAAE,oCAAoC,EAAE,iCAAiC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACvK,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAAE,IAAI,CAAC,mBAAmB,EAAE,gDAAgD,EAAE,iCAAiC,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC1M,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAAE,IAAI,CAAC,mBAAmB,EAAE,iDAAiD,EAAE,iCAAiC,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC9M,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,IAAI,CAAC,mBAAmB,EAAE,sCAAsC,EAAE,iCAAiC,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACrL,MAAM,gBAAgB,GAAG;QACvB,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,wBAAiC;QAC9C,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,qBAAqB,EAAE,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAClF,wBAAwB,EAAE,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC;QACrE,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACzD,CAAC;IACF,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACtI,OAAO,EAAE,GAAG,gBAAgB,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA2B,EAAE,uBAAmC;IACzG,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,WAAW,KAAK,wBAAwB,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACjI,IAAI,KAAK,CAAC,qBAAqB,KAAK,aAAa,CAAC,uBAAuB,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,MAAM,EAAE,SAAS,EAAE,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC;IACjD,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,EAAE,uBAAuB,CAAC,CAAC;AAC/H,CAAC;AAED,6KAA6K;AAC7K,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAA4C,CAAC;AACzF,MAAM,qCAAqC,GAAG,0BAA0B,CAAC;AA6BzE;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,mBAAmB,EAAE,oCAAoC,EAAE,4BAA4B,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAClK,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACvE,MAAM,SAAS,GAAiC;QAC9C,MAAM,EAAE,4BAA4B;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,aAAa,CAAC,gBAAgB,CAAC;QAC9C,cAAc,EAAE,WAAW,CAAC,gBAAgB,CAAC;QAC7C,iBAAiB,EAAE,WAAW,CAAC,KAAK,CAAC,8BAA8B,CAAC;QACpE,sBAAsB,EAAE,aAAa,CAAC,KAAK,CAAC,8BAA8B,CAAC;KAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,qCAAqC,EAAE,SAA+C,CAAC,CAAC;IAC3H,OAAO;QACL,SAAS;QACT,oBAAoB,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9E,oBAAoB,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;KACtF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAA4B,EAAE,kBAA8B;IACjG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,4BAA4B;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,aAAyB,CAAC;IAC9B,IAAI,aAAyB,CAAC;IAC9B,IAAI,aAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,aAAa,GAAG,aAAa,CAAC,UAAU,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;QACzG,aAAa,GAAG,aAAa,CAAC,UAAU,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;QACzG,aAAa,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,KAAK,aAAa,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,qCAAqC,EAAE,UAAU,CAAC,SAA+C,CAAC,CAAC;IACtI,OAAO,mBAAmB,CAAC,aAAa,EAAE,QAAQ,EAAE,kBAAkB,CAAC,IAAI,mBAAmB,CAAC,aAAa,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AACzI,CAAC;AA0BD,2SAA2S;AAC3S,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAAoC,CAAC;AAE1E,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,wBAAwB,GAAG,iBAAiB,GAAG,CAAC,GAAG,iBAAiB,CAAC;AAE3E,SAAS,cAAc,CAAC,KAAiB,EAAE,OAAmB,EAAE,GAAe,EAAE,SAAqB;IACpG,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACjE,OAAO,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB,EAAE,OAAmB,EAAE,GAAe,EAAE,QAAoB;IACnG,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChE,OAAO,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAS,iBAAiB,CAAC,OAAmB,EAAE,YAAoB;IAClE,OAAO,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,KAA0B,EAAE,OAAmB,EAAE,OAAmB,EAAE,OAAgB,EAAE,YAAoB,EAAE,KAAkB;IAC1J,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,KAAK,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,iBAAiB;QAAE,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,mBAAmB,EAAE,wBAAwB,EAAE,WAAW,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IAC9I,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtG,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CAAC,KAA0B,EAAE,OAAmB,EAAE,OAAmB,EAAE,cAAsB,EAAE,YAAoB;IAC5I,MAAM,KAAK,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,mBAAmB,EAAE,qCAAqC,EAAE,WAAW,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB,GAAG,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,mBAAmB,EAAE,mDAAmD,EAAE,WAAW,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7E,IAAI,KAAK,KAAK,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,kBAAkB,EAAE,CAAC;QAClF,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,mBAAmB,EAAE,+CAA+C,EAAE,WAAW,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,IAAI;QAAE,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,oBAAoB,EAAE,+DAA+D,EAAE,WAAW,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IACvK,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,mBAAmB,EAAE,mCAAmC,EAAE,WAAW,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC;IACvH,CAAC;AACH,CAAC;AAED,qVAAqV;AACrV,MAAM,UAAU,mBAAmB,CAAC,cAA0B,EAAE,OAAmB,EAAE,OAA+B,EAAE,KAAkB;IACtI,OAAO,kBAAkB,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;AAC3G,CAAC;AAED,6RAA6R;AAC7R,MAAM,UAAU,mBAAmB,CAAC,cAA0B,EAAE,OAAmB,EAAE,cAAsB,EAAE,eAAuB,qBAAqB;IACvJ,MAAM,CAAC,GAAG,kBAAkB,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,CAAoC,CAAC;IACtI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,KAAK,uBAAuB,EAAE,CAAC;QACrM,IAAI,CAAC,0BAA0B,EAAE,wEAAwE,EAAE,0BAA0B,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,CAA2B,CAAC;AACrC,CAAC;AAED,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,4DAA4D;AAC5D,0EAA0E;AAC1E,iEAAiE;AACjE,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,qEAAqE;AAErE,mDAAmD;AACnD,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAAoC,CAAC;AAC7E,qJAAqJ;AACrJ,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAAmC,CAAC;AAoB3E,8NAA8N;AAC9N,MAAM,UAAU,qBAAqB,CAAC,cAA0B,EAAE,OAAmB,EAAE,OAAiC,EAAE,KAAkB;IAC1I,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,mBAAmB,EAAE,wDAAwD,EAAE,6BAA6B,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACjK,CAAC;IACD,OAAO,kBAAkB,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,kBAAkB,CAAC,aAAyB,EAAE,OAAmB,EAAE,OAAgC,EAAE,KAAkB;IACrI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,mBAAmB,EAAE,wDAAwD,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAC7J,CAAC;IACD,OAAO,kBAAkB,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;AAC3G,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAA0B,EAAE,OAAmB,EAAE,cAAsB,EAAE,YAAoB;IACjI,IAAI,YAAY,KAAK,wBAAwB,EAAE,CAAC;QAC9C,IAAI,CACF,8BAA8B,EAC9B,8BAA8B,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,yBAAyB,WAAW,wBAAwB,oIAAoI,EACrQ,gDAAgD,EAChD,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,kBAAkB,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,CAAsC,CAAC;IACxI,IACE,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,CAAC,CAAC,IAAI,KAAK,SAAS;QACpB,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,CAAC,UAAU;QACb,CAAC,CAAC,WAAW,KAAK,uBAAuB;QACzC,OAAO,CAAC,CAAC,6BAA6B,KAAK,QAAQ;QACnD,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B,CAAC,EACtD,CAAC;QACD,IAAI,CAAC,0BAA0B,EAAE,2EAA2E,EAAE,gDAAgD,CAAC,CAAC;IAClK,CAAC;IACD,OAAO,CAA6B,CAAC;AACvC,CAAC;AAED,yLAAyL;AACzL,MAAM,UAAU,kBAAkB,CAAC,aAAyB,EAAE,OAAmB,EAAE,cAAsB,EAAE,eAAuB,uBAAuB;IACvJ,IAAI,YAAY,KAAK,uBAAuB,EAAE,CAAC;QAC7C,IAAI,CACF,6BAA6B,EAC7B,6BAA6B,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,yBAAyB,WAAW,uBAAuB,IAAI,EACnI,yBAAyB,EACzB,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,kBAAkB,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,CAAqC,CAAC;IACrI,IACE,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,CAAC,CAAC,IAAI,KAAK,QAAQ;QACnB,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,CAAC,UAAU;QACb,CAAC,CAAC,WAAW,KAAK,sBAAsB;QACxC,OAAO,CAAC,CAAC,6BAA6B,KAAK,QAAQ;QACnD,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B,CAAC,EACtD,CAAC;QACD,IAAI,CAAC,yBAAyB,EAAE,0EAA0E,EAAE,yBAAyB,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,CAA4B,CAAC;AACtC,CAAC;AAuCD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,KAAK,uBAAuB,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9I,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,KAAK,sBAAsB,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7I,CAAC;AAED,+EAA+E;AAE/E,MAAM,4BAA4B,GAAsB;IACtD,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,oBAAoB;IACpB,oCAAoC;IACpC,oCAAoC;IACpC,sBAAsB;IACtB,uEAAuE;IACvE,yEAAyE;IACzE,gBAAgB;IAChB,sBAAsB;CACvB,CAAC;AAEF,6CAA6C;AAC7C,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,EAAE,IAAI,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;QAC3B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0HAA0H;AAC1H,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,wBAAwB,CAAC;IACzC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,+EAA+E;AAC/E,QAAQ,CAAC,CAAC,gBAAgB,CAAC,IAAyB;IAClD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI;QACzB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;QAC7B,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC;QACjC,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC;QACzB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;QACrB,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC;QAC/B,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;QAC7B,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC;KAC/B,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;YAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC;gBAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,IAAyB;IACnD,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,KAAK,MAAM,EAAE,IAAI,4BAA4B,EAAE,CAAC;YAC9C,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;QACpG,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,kCAAkC,KAAK,CAAC,MAAM,qCAAqC,EAAE,CAAC;IACjI,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAsB;IAC9D,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,IAAqB;IAC5D,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,4BAA4B,CAAC,IAAsB;IACjE,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,8BAA8B,EAAE,wBAAwB,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,MAAM,8FAA8F,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACnP,CAAC;AACH,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,2BAA2B,CAAC,IAAqB;IAC/D,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,6BAA6B,EAAE,uBAAuB,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,MAAM,8FAA8F,EAAE,sBAAsB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAChP,CAAC;AACH,CAAC"}
|