@serfab/cadre-host 0.12.0 → 1.0.0

package/dist/server/routes/bootstrap-node-validation.js

@@ -0,0 +1,197 @@
+/**
+ * Shape validation for the requester-supplied `bootstrapNodes` of `POST /grants`
+ * — the requester's control-network addresses the donated node is started with
+ * (written into the child's `cadre.json` as `controlNetwork.bootstrapNodes` by
+ * `orchestrator/host-process-orchestrator.ts`) and hands to `@libp2p/bootstrap`.
+ *
+ * Its own module rather than part of `grants.ts`: the per-entry rule is a duplicate
+ * of cadre-provider's copy (`packages/cadre-provider/src/server/bootstrap-node-validation.ts`)
+ * and must stay identical to it, so it is worth reading, testing and changing on
+ * its own, without a routing file around it — the same arrangement cadre-provider
+ * uses for its restatement of cadre-core's owner-key rule.
+ *
+ * ## An empty list is accepted — where this copy differs, on purpose
+ *
+ * The field may be absent or `[]`; cadre-provider's copy still requires at least one
+ * address. A lent node's requester is typically a phone, and a phone has no address
+ * to give — its node listens on nothing and can only dial out. Such a requester sends
+ * no addresses and dials the node itself, at the WebSocket address
+ * `GET /grants/:id/peer` reports. The node starts with no bootstrap peers and waits,
+ * and admits that first inbound connection because it holds no authorized members
+ * yet (`admitInboundControlConnection` / `authorizeInboundControlStream` in
+ * `cadre-core/src/cadre-node.ts`). A provider container has no such requester yet, so
+ * there an empty list is still the node-comes-up-alone failure described below
+ * (`backlog/feat-provider-drone-reachable-by-phone`).
+ *
+ * The difference is at the list level only: every entry that IS given must pass the
+ * rule below, which is identical in both packages.
+ *
+ * ## The rule, and why each clause is there
+ *
+ * An entry is usable exactly when it is a string, parses as a multiaddr, carries
+ * a `/p2p/<peerId>` component whose peer id decodes, and says where that peer is.
+ * Each clause corresponds to a distinct downstream failure the caller would
+ * otherwise never be told about — the value is forwarded verbatim into the spawned
+ * child, so every one of these surfaces where the caller cannot see it:
+ *
+ * - **Not parsable as a multiaddr → the child dies at boot.** `@libp2p/bootstrap`'s
+ *   constructor maps `multiaddr()` over the whole list *before* filtering anything,
+ *   and `multiaddr()` throws on a string that does not start with `/` (and on a
+ *   non-string outright). libp2p construction throws and the node never starts.
+ * - **No `/p2p/<peerId>` → the node starts and never joins.** The quiet one.
+ *   `/ip4/127.0.0.1/tcp/4001` parses fine, then `@libp2p/bootstrap` filters it out
+ *   ("invalid bootstrap multiaddr without peer id", logged inside the child) and
+ *   the node comes up with *zero* bootstrap peers: healthy-looking, permanently
+ *   alone, never reaching the party it was created for. cadre-core's
+ *   `getBootstrapPeerIds` (`packages/cadre-core/src/cadre-node.ts`) skips such an
+ *   entry silently for the same reason.
+ * - **Malformed peer id → the child dies at boot.** `multiaddr()` does *not*
+ *   validate the `/p2p/` value — parsing `/ip4/1.2.3.4/tcp/1/p2p/12D3KooReq` yields
+ *   a `p2p` component whose value is the junk string unchanged — but
+ *   `@libp2p/bootstrap` then calls `peerIdFromString` on it, unguarded, and it
+ *   throws `Incorrect length`. A truncated copy-paste of a 52-character peer id is
+ *   the likeliest human typo in this field.
+ * - **No location at all → the node starts and never joins.** `/p2p/<peerId>` (and
+ *   `/p2p/<relay>/p2p-circuit/p2p/<target>`) parses and names a decodable peer, and
+ *   `@libp2p/bootstrap` keeps it — but it says nothing about *where* the peer is, so
+ *   libp2p finds no transport for it and the dial fails with no valid addresses.
+ *   The node comes up with a bootstrap peer it can never reach, which looks the same
+ *   from outside as having none. Only the total absence of a location is rejected:
+ *   which transports the child can actually dial is the embedder's choice
+ *   (`NetworkConfig.transports`), invisible from here, so a partial address like
+ *   `/ip4/1.2.3.4/p2p/<peerId>` is deliberately left to the child.
+ *
+ * The peer id is read the way `@libp2p/bootstrap` reads it — the `p2p` components
+ * of `getComponents()` — rather than through the deprecated `getPeerId()`, so the
+ * two cannot disagree about which part of the address is the peer. Bootstrap uses
+ * only the *last* `p2p` component; this checks **every** one, so the relay half of
+ * a `…/p2p/<relay>/p2p-circuit/p2p/<target>` address must decode too. An address
+ * naming an undecodable relay is not dialable either, and bootstrap's own
+ * `P2P.matches` filter accepts any address carrying a `p2p` component, so nothing
+ * this accepts is dropped there.
+ *
+ * Requiring a multiaddr also closes a downstream ambiguity on the *other* side of
+ * this rule: cadre-provider joins its list with `,` into `CADRE_BOOTSTRAP_NODES`
+ * and cadre-cli's env loader splits it back on `,`, so an entry containing a comma
+ * would silently become two addresses there. This host writes JSON rather than an
+ * env var and so is not exposed to that, but the two per-entry rules are kept
+ * identical — see the note about manual upkeep below.
+ *
+ * Reachability is deliberately NOT checked: a well-formed address for a peer that
+ * happens to be down is indistinguishable here from one that is up, and no
+ * boundary check can tell them apart. This validates the *shape* the child must be
+ * able to parse, nothing more.
+ *
+ * Keeping the two per-entry rules in step is **manual** — neither package can see
+ * the other's rule, so no test can compare them. What the tests give instead is a
+ * tripwire on each side: `../__tests__/bootstrap-node-validation.test.ts` here and
+ * `packages/cadre-provider/src/server/__tests__/bootstrap-node-validation.test.ts`
+ * there each pin their own copy to the same per-entry accept/reject table (the
+ * empty-list row is the one that differs), so changing either rule fails that
+ * package's own suite — and the comment above the rule you just changed is what
+ * points at the other copy.
+ */
+import debug from 'debug';
+import { CODE_P2P, CODE_P2P_CIRCUIT, multiaddr } from '@multiformats/multiaddr';
+import { peerIdFromString } from '@libp2p/peer-id';
+const log = debug('cadre:host:bootstrap-nodes');
+/**
+ * Longest rejected address echoed back in an error message. Generous compared to
+ * the owner-key limit because a legitimate address is long: a plain
+ * `/ip4/…/tcp/…/p2p/<52 chars>` runs ~80 characters and a relayed
+ * `…/p2p-circuit/p2p/<52 chars>` about 150, so a smaller cap would truncate the
+ * very values an operator needs to read back.
+ */
+const REJECTED_ADDRESS_ECHO_LIMIT = 192;
+/**
+ * Render a rejected address for an error message, capped: `bootstrapNodes`
+ * arrives from a caller over the network, so an unbounded echo would let one junk
+ * string become a megabyte of log line.
+ */
+function describeRejectedAddress(value) {
+    return value.length <= REJECTED_ADDRESS_ECHO_LIMIT
+        ? value
+        : `${value.slice(0, REJECTED_ADDRESS_ECHO_LIMIT)}… (${value.length} chars)`;
+}
+/** The message of a thrown parse/decode failure, whatever the thrower used. */
+function reasonOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * Apply the rule above to one entry. Returns the trimmed value, so the create
+ * provision request carries exactly what was validated.
+ */
+function validateBootstrapNode(value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        return { error: 'bootstrapNodes entries must not be empty or whitespace-only' };
+    }
+    let address;
+    try {
+        address = multiaddr(trimmed);
+    }
+    catch (error) {
+        log('rejecting bootstrapNodes entry: %s', reasonOf(error));
+        return {
+            error: `bootstrapNodes entries must be multiaddrs (could not parse "${describeRejectedAddress(trimmed)}": ${reasonOf(error)})`,
+        };
+    }
+    const components = address.getComponents();
+    const peerIds = components.filter(component => component.code === CODE_P2P);
+    if (peerIds.length === 0) {
+        return {
+            error: `bootstrapNodes entries must include a /p2p/<peerId> component ("${describeRejectedAddress(trimmed)}" names no peer, so the node would drop it and start with no bootstrap peers)`,
+        };
+    }
+    if (!components.some(component => component.code !== CODE_P2P && component.code !== CODE_P2P_CIRCUIT)) {
+        return {
+            error: `bootstrapNodes entries must name where to reach the peer ("${describeRejectedAddress(trimmed)}" names only peer ids, so no transport can dial it and the node would start with no reachable bootstrap peers)`,
+        };
+    }
+    for (const { value } of peerIds) {
+        try {
+            peerIdFromString(value ?? '');
+        }
+        catch (error) {
+            log('rejecting bootstrapNodes peer id: %s', reasonOf(error));
+            return {
+                error: `bootstrapNodes entries must carry a decodable peer id ("${describeRejectedAddress(trimmed)}" names peer "${describeRejectedAddress(value ?? '')}", which does not decode: ${reasonOf(error)})`,
+            };
+        }
+    }
+    return { node: trimmed };
+}
+/**
+ * Validate the optional `bootstrapNodes` field of a provision request: absent, or an
+ * array of dialable control-network addresses (see {@link validateBootstrapNode}).
+ * Absent and `[]` alike mean the requester dials the node itself — see "An empty list
+ * is accepted" in the module comment.
+ *
+ * Provisioning is the last point at which the requester can still fix a typo, so
+ * the shape is checked here: without it a bad address is answered 201 and then
+ * produces a donated node that either dies at boot or comes up permanently alone
+ * — the requester learning about it, if ever, from donation status rather than
+ * from a 400 naming the bad address.
+ *
+ * Every rejection names the offending entry: with several addresses in one
+ * request the message is the only thing that says WHICH one.
+ *
+ * @returns the trimmed addresses (`[]` when none were given), so the provision request carries exactly what was validated.
+ */
+export function validateBootstrapNodes(value) {
+    if (value === undefined) {
+        return { nodes: [] };
+    }
+    if (!Array.isArray(value) || !value.every((entry) => typeof entry === 'string')) {
+        return { error: 'bootstrapNodes must be an array of strings' };
+    }
+    const nodes = [];
+    for (const entry of value) {
+        const checked = validateBootstrapNode(entry);
+        if ('error' in checked)
+            return checked;
+        nodes.push(checked.node);
+    }
+    return { nodes };
+}
+//# sourceMappingURL=bootstrap-node-validation.js.map

package/dist/server/routes/bootstrap-node-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap-node-validation.js","sourceRoot":"","sources":["../../../src/server/routes/bootstrap-node-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAkB,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,GAAG,GAAG,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,KAAa;IAC5C,OAAO,KAAK,CAAC,MAAM,IAAI,2BAA2B;QAChD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,2BAA2B,CAAC,MAAM,KAAK,CAAC,MAAM,SAAS,CAAC;AAChF,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,6DAA6D,EAAE,CAAC;IAClF,CAAC;IAED,IAAI,OAAkB,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,OAAO;YACL,KAAK,EAAE,+DAA+D,uBAAuB,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG;SAC/H,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,mEAAmE,uBAAuB,CAAC,OAAO,CAAC,+EAA+E;SAC1L,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,CAAC,EAAE,CAAC;QACtG,OAAO;YACL,KAAK,EAAE,8DAA8D,uBAAuB,CAAC,OAAO,CAAC,gHAAgH;SACtN,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,gBAAgB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,2DAA2D,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,uBAAuB,CAAC,KAAK,IAAI,EAAE,CAAC,6BAA6B,QAAQ,CAAC,KAAK,CAAC,GAAG;aACvM,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QACjG,OAAO,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/server/routes/grants.js

@@ -17,6 +17,7 @@
  * `DonationError`, which `server/error-handler.ts` maps to the matching HTTP
  * status and the same envelope.
  */
+import { validateProvisionRequest } from './provision-request-validation.js';
 /** Uniform error envelope (matches `error-handler.ts` and the provider API). */
 function errorResponse(reply, code, message, status) {
     return reply.status(status).send({ ok: false, error: { code, message } });
@@ -83,32 +84,14 @@ export function registerGrantsRoutes(app, opts) {
         if (!token) {
             return errorResponse(reply, 'unauthorized', 'Missing bearer grant token', 401);
         }
-        const body = (request.body ?? {});
-        if (typeof body.partyId !== 'string' || body.partyId.length === 0) {
-            return errorResponse(reply, 'invalid_request', 'partyId is required', 400);
-        }
-        if (!Array.isArray(body.bootstrapNodes) || body.bootstrapNodes.length === 0) {
-            return errorResponse(reply, 'invalid_request', 'bootstrapNodes is required', 400);
-        }
-        if (!Array.isArray(body.ownerKeys) || body.ownerKeys.length === 0) {
-            return errorResponse(reply, 'invalid_request', 'ownerKeys is required', 400);
-        }
-        // Element types too, not just the array: `provision`'s shape check trims each
-        // entry, so a non-string reaches the caller as an internal `.trim is not a
-        // function` rather than as a message naming what is wrong with the request.
-        if (!body.ownerKeys.every(key => typeof key === 'string')) {
-            return errorResponse(reply, 'invalid_request', 'ownerKeys must be an array of strings', 400);
-        }
-        if (body.profile !== undefined && body.profile !== 'storage' && body.profile !== 'transaction') {
-            return errorResponse(reply, 'invalid_request', 'profile must be "storage" or "transaction"', 400);
+        // One validator owns the whole body — see `provision-request-validation.ts`
+        // for why no per-field check lives here. Nothing is provisioned on a
+        // rejection: this runs before the service is touched.
+        const validated = validateProvisionRequest(request.body ?? {}, token);
+        if ('error' in validated) {
+            return errorResponse(reply, 'invalid_request', validated.error, 400);
         }
-        const donation = await donations.provision({
-            grantToken: token,
-            partyId: body.partyId,
-            bootstrapNodes: body.bootstrapNodes,
-            ownerKeys: body.ownerKeys,
-            ...(body.profile ? { profile: body.profile } : {}),
-        });
+        const donation = await donations.provision(validated.request);
         return reply.status(201).send({ ok: true, data: { donation } });
     });
     // GET /grants — list only the donations this grant authorized.

package/dist/server/routes/grants.js.map

@@ -1 +1 @@
-{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../../src/server/routes/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAaH,gFAAgF;AAChF,SAAS,aAAa,CAAC,KAAmB,EAAE,IAAY,EAAE,OAAe,EAAE,MAAc;IACvF,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,uEAAuE;AACvE,SAAS,UAAU,CAAC,MAA0B;IAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAC7D,OAAO,GAAG,CAAC,CAAC,0BAA0B;AACxC,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,OAAuB,EACvB,KAAmB,EACnB,MAAsB;IAEtB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,IAAI,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;QAC3D,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,UAAU,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,SAA0B,EAC1B,EAAU,EACV,KAAa,EACb,KAAmB;IAEnB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC/C,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAoB,EAAE,IAAyB;IAClF,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEnC,yEAAyE;IACzE,wEAAwE;IACxE,8EAA8E;IAC9E,qEAAqE;IACrE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAsC,CAAC;QACvE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,8EAA8E;QAC9E,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1D,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YAC/F,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,4CAA4C,EAAE,GAAG,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC;YACzC,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAA6B,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,mFAAmF;IACnF,GAAG,CAAC,GAAG,CAA6B,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAA6B,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE5E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAuB,CAAC;QACxD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,yDAAyD;QACzD,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,UAAU;gBACb,OAAO,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,IAAI,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC5F,sEAAsE;YACtE,0EAA0E;YAC1E,oEAAoE;YACpE,KAAK,WAAW;gBACd,OAAO,MAAM,CAAC,MAAM;oBAClB,CAAC,CAAC,aAAa,CACX,KAAK,EACL,eAAe,EACf,YAAY,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,MAAM,CAAC,MAAM,gCAAgC,EACrF,GAAG,CACJ;oBACH,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,qBAAqB,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACvF,KAAK,QAAQ;gBACX,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,GAAG,CAAC,MAAM,CAA6B,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../../src/server/routes/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAQ7E,gFAAgF;AAChF,SAAS,aAAa,CAAC,KAAmB,EAAE,IAAY,EAAE,OAAe,EAAE,MAAc;IACvF,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,uEAAuE;AACvE,SAAS,UAAU,CAAC,MAA0B;IAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAC7D,OAAO,GAAG,CAAC,CAAC,0BAA0B;AACxC,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,OAAuB,EACvB,KAAmB,EACnB,MAAsB;IAEtB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,IAAI,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;QAC3D,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,UAAU,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,SAA0B,EAC1B,EAAU,EACV,KAAa,EACb,KAAmB;IAEnB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC/C,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAoB,EAAE,IAAyB;IAClF,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEnC,yEAAyE;IACzE,wEAAwE;IACxE,8EAA8E;IAC9E,qEAAqE;IACrE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,4EAA4E;QAC5E,qEAAqE;QACrE,sDAAsD;QACtD,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;YACzB,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAA6B,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,mFAAmF;IACnF,GAAG,CAAC,GAAG,CAA6B,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAA6B,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE5E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAuB,CAAC;QACxD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,yDAAyD;QACzD,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,UAAU;gBACb,OAAO,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,IAAI,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC5F,sEAAsE;YACtE,0EAA0E;YAC1E,oEAAoE;YACpE,KAAK,WAAW;gBACd,OAAO,MAAM,CAAC,MAAM;oBAClB,CAAC,CAAC,aAAa,CACX,KAAK,EACL,eAAe,EACf,YAAY,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,MAAM,CAAC,MAAM,gCAAgC,EACrF,GAAG,CACJ;oBACH,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,qBAAqB,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACvF,KAAK,QAAQ;gBACX,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,GAAG,CAAC,MAAM,CAA6B,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/provision-request-validation.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The whole shape check for `POST /grants` — one call that either yields the
+ * typed {@link DonationProvisionRequest} the `DonationService` is handed, or the
+ * message the route answers 400 with.
+ *
+ * **Why a validator rather than a few more `if`s in the route.** Every field in
+ * this body is forwarded into a child process the requester cannot see:
+ * `partyId`, `bootstrapNodes` and `profile` are written into the child's
+ * `cadre.json` (`orchestrator/host-process-orchestrator.ts`) and `ownerKeys`
+ * become its cold-start seed-trust anchors. A field the route forgets to check is
+ * not a 400 — it is a donated node that dies at boot, or comes up subtly wrong,
+ * with a 201 already sent. Routing the body through one function that *constructs*
+ * the request object means a field can only reach the spawn path by having been
+ * through here; adding a field to `DonationProvisionRequest` without validating it
+ * stops compiling rather than silently shipping.
+ *
+ * **Division of labour with `DonationService.provision`.** The Ed25519 rule for
+ * `ownerKeys` stays in the service, where it is applied by cadre-core's own
+ * `requireEd25519PublicKeyB64` — the service is also reached by the respawn path,
+ * which replays a persisted record rather than an HTTP body, so the crypto rule
+ * has to live there to cover both. What this validator owns for `ownerKeys` is the
+ * *container* shape (present, non-empty, all strings), which the service's rule
+ * assumes: a number reaching it surfaces as an internal `.trim is not a function`
+ * rather than as a message naming what is wrong with the request.
+ *
+ * The multiaddr rule has no such home — it is duplicated in cadre-provider — so it
+ * lives in `bootstrap-node-validation.ts` next to the comment saying so.
+ */
+import type { DonationProvisionRequest } from '../../donation/donation-service.js';
+/**
+ * Validate a `POST /grants` body and build the request `DonationService.provision`
+ * is handed.
+ *
+ * `grantToken` comes from the `Authorization` bearer rather than the body — a
+ * requester does not get to name which grant pays for this — so it is a
+ * parameter, not a validated field. Whether that grant is live and within quota is
+ * `provision`'s call, not this function's.
+ *
+ * @returns the typed provision request, or the message to answer `invalid_request` with.
+ */
+export declare function validateProvisionRequest(body: unknown, grantToken: string): {
+    request: DonationProvisionRequest;
+} | {
+    error: string;
+};

package/dist/server/routes/provision-request-validation.js

@@ -0,0 +1,97 @@
+/**
+ * The whole shape check for `POST /grants` — one call that either yields the
+ * typed {@link DonationProvisionRequest} the `DonationService` is handed, or the
+ * message the route answers 400 with.
+ *
+ * **Why a validator rather than a few more `if`s in the route.** Every field in
+ * this body is forwarded into a child process the requester cannot see:
+ * `partyId`, `bootstrapNodes` and `profile` are written into the child's
+ * `cadre.json` (`orchestrator/host-process-orchestrator.ts`) and `ownerKeys`
+ * become its cold-start seed-trust anchors. A field the route forgets to check is
+ * not a 400 — it is a donated node that dies at boot, or comes up subtly wrong,
+ * with a 201 already sent. Routing the body through one function that *constructs*
+ * the request object means a field can only reach the spawn path by having been
+ * through here; adding a field to `DonationProvisionRequest` without validating it
+ * stops compiling rather than silently shipping.
+ *
+ * **Division of labour with `DonationService.provision`.** The Ed25519 rule for
+ * `ownerKeys` stays in the service, where it is applied by cadre-core's own
+ * `requireEd25519PublicKeyB64` — the service is also reached by the respawn path,
+ * which replays a persisted record rather than an HTTP body, so the crypto rule
+ * has to live there to cover both. What this validator owns for `ownerKeys` is the
+ * *container* shape (present, non-empty, all strings), which the service's rule
+ * assumes: a number reaching it surfaces as an internal `.trim is not a function`
+ * rather than as a message naming what is wrong with the request.
+ *
+ * The multiaddr rule has no such home — it is duplicated in cadre-provider — so it
+ * lives in `bootstrap-node-validation.ts` next to the comment saying so.
+ */
+import { validateBootstrapNodes } from './bootstrap-node-validation.js';
+/** `partyId` becomes `controlNetwork.partyId` in the child's config. */
+function validatePartyId(value) {
+    if (typeof value !== 'string' || value.trim().length === 0) {
+        return { error: 'partyId is required' };
+    }
+    return { partyId: value.trim() };
+}
+/**
+ * Container shape only — see the module comment: the per-key Ed25519 rule is
+ * `DonationService.provision`'s, so the respawn path gets it too.
+ */
+function validateOwnerKeys(value) {
+    if (!Array.isArray(value) || value.length === 0) {
+        return { error: 'ownerKeys is required' };
+    }
+    if (!value.every((key) => typeof key === 'string')) {
+        return { error: 'ownerKeys must be an array of strings' };
+    }
+    return { ownerKeys: value };
+}
+/** Absent means `storage` — see {@link DonationProvisionRequest.profile}. */
+function validateProfile(value) {
+    if (value === undefined)
+        return {};
+    if (value !== 'storage' && value !== 'transaction') {
+        return { error: 'profile must be "storage" or "transaction"' };
+    }
+    return { profile: value };
+}
+/**
+ * Validate a `POST /grants` body and build the request `DonationService.provision`
+ * is handed.
+ *
+ * `grantToken` comes from the `Authorization` bearer rather than the body — a
+ * requester does not get to name which grant pays for this — so it is a
+ * parameter, not a validated field. Whether that grant is live and within quota is
+ * `provision`'s call, not this function's.
+ *
+ * @returns the typed provision request, or the message to answer `invalid_request` with.
+ */
+export function validateProvisionRequest(body, grantToken) {
+    if (typeof body !== 'object' || body === null || Array.isArray(body)) {
+        return { error: 'request body must be a JSON object' };
+    }
+    const fields = body;
+    const partyId = validatePartyId(fields.partyId);
+    if ('error' in partyId)
+        return partyId;
+    const bootstrap = validateBootstrapNodes(fields.bootstrapNodes);
+    if ('error' in bootstrap)
+        return bootstrap;
+    const ownerKeys = validateOwnerKeys(fields.ownerKeys);
+    if ('error' in ownerKeys)
+        return ownerKeys;
+    const profile = validateProfile(fields.profile);
+    if ('error' in profile)
+        return profile;
+    return {
+        request: {
+            grantToken,
+            partyId: partyId.partyId,
+            bootstrapNodes: bootstrap.nodes,
+            ownerKeys: ownerKeys.ownerKeys,
+            ...(profile.profile ? { profile: profile.profile } : {}),
+        },
+    };
+}
+//# sourceMappingURL=provision-request-validation.js.map

package/dist/server/routes/provision-request-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision-request-validation.js","sourceRoot":"","sources":["../../../src/server/routes/provision-request-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,wEAAwE;AACxE,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,6EAA6E;AAC7E,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAa,EACb,UAAkB;IAElB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAE/C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAEvC,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAChE,IAAI,OAAO,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,OAAO,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAEvC,OAAO;QACL,OAAO,EAAE;YACP,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,SAAS,CAAC,KAAK;YAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD;KACF,CAAC;AACJ,CAAC"}

package/dist/server/server.d.ts

@@ -36,5 +36,8 @@ export declare function startListening(app: FastifyInstance, opts: StartServerOp
  * from a SIGINT/SIGTERM handler that may fire twice.
  */
 export declare function stopListening(app: FastifyInstance, opts?: ShutdownOptions): Promise<void>;
-/** Create a bare Fastify instance with the project's logging convention. */
+/**
+ * Create a Fastify instance with the project's logging convention and the
+ * empty-body-tolerant JSON parser (see {@link acceptEmptyJsonBodies}).
+ */
 export declare function buildFastify(): FastifyInstance;

package/dist/server/server.js

@@ -71,14 +71,48 @@ export async function stopListening(app, opts = {}) {
         log('shutdown drain timeout after %dms', drainMs);
     }
 }
-/** Create a bare Fastify instance with the project's logging convention. */
+/**
+ * Create a Fastify instance with the project's logging convention and the
+ * empty-body-tolerant JSON parser (see {@link acceptEmptyJsonBodies}).
+ */
 export function buildFastify() {
-    return Fastify({
+    const app = Fastify({
         // Stay quiet by default — request-level logs are noisy on a local UI.
         // Operators can opt in via the `debug` env var (cadre:host:*).
         logger: false,
         disableRequestLogging: true,
     });
+    acceptEmptyJsonBodies(app);
+    return app;
+}
+/**
+ * Treat a request that declares `application/json` but carries no body as a
+ * request with no body (`request.body === undefined`), instead of Fastify's
+ * default `400 FST_ERR_CTP_EMPTY_JSON_BODY`.
+ *
+ * `/grants` is served to other people's clients, and sending the JSON content
+ * type on every request, body or not, is a common client habit — the phone app
+ * did it, and the refused body-less `DELETE /grants/:id` left the loan and its
+ * node running. Every route that reads a body already reads `request.body ?? {}`,
+ * so a route that needs a field still answers its own `invalid_request` naming it.
+ * A non-empty body goes to Fastify's own parser, so malformed JSON is still a 400
+ * and the prototype-poisoning checks are unchanged (`'error'` is Fastify's default
+ * for both).
+ */
+function acceptEmptyJsonBodies(app) {
+    // NOTE: 'error', 'error' mirrors Fastify's defaults for proto/constructor poisoning; if
+    // buildFastify ever sets `onProtoPoisoning` / `onConstructorPoisoning`, pass them here too.
+    const parseJson = app.getDefaultJsonParser('error', 'error');
+    app.removeContentTypeParser('application/json');
+    app.addContentTypeParser('application/json', { parseAs: 'string' }, (request, body, done) => {
+        if (body.length === 0) {
+            done(null, undefined);
+            return;
+        }
+        // Typed as possibly promise-returning; Fastify's default parser is the
+        // callback form and answers through `done`.
+        void parseJson(request, body, done);
+    });
 }
 function parsePort(address) {
     // address is e.g. http://127.0.0.1:8765

package/dist/server/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,OAAiC,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,GAAG,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEvC,yDAAyD;AACzD,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,oEAAoE;AACpE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,oDAAoD;AACpD,MAAM,aAAa,GAAG,WAAW,CAAC;AAsBlC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAoB,EACpB,IAAwB;IAExB,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,aAAa,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAiB,IAAI,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,mBAAmB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACV,GAAG,CAAC,2CAA2C,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,aAAa,IAAI,KAAK,EAAE,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,GAAG,GAAY,CAAC;YACvB,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mBAAmB,mBAAmB,+BAA+B;QACrE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C;QACjE,eAAe,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAC/C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,OAAwB,EAAE;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,yBAAyB,CAAC;IACjE,IAAI,KAAgD,CAAC;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAkB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK;QAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC;QACb,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,EAAE,KAAK;QACb,qBAAqB,EAAE,IAAI;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,wCAAwC;IACxC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,EAAE,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,OAAiC,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,GAAG,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEvC,yDAAyD;AACzD,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,oEAAoE;AACpE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,oDAAoD;AACpD,MAAM,aAAa,GAAG,WAAW,CAAC;AAsBlC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAoB,EACpB,IAAwB;IAExB,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,aAAa,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAiB,IAAI,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,mBAAmB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACV,GAAG,CAAC,2CAA2C,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,aAAa,IAAI,KAAK,EAAE,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,GAAG,GAAY,CAAC;YACvB,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mBAAmB,mBAAmB,+BAA+B;QACrE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C;QACjE,eAAe,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAC/C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,OAAwB,EAAE;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,yBAAyB,CAAC;IACjE,IAAI,KAAgD,CAAC;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAkB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK;QAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,EAAE,KAAK;QACb,qBAAqB,EAAE,IAAI;KAC5B,CAAC,CAAC;IACH,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,qBAAqB,CAAC,GAAoB;IACjD,wFAAwF;IACxF,4FAA4F;IAC5F,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,GAAG,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;IAChD,GAAG,CAAC,oBAAoB,CAAS,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAClG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,uEAAuE;QACvE,4CAA4C;QAC5C,KAAK,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,wCAAwC;IACxC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,EAAE,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC"}