@sparkvault/sdk-mobile 6.0.2 → 7.0.1

package/dist/app-sdk/entropy-contract.js

@@ -0,0 +1,51 @@
+// GENERATED FILE — do not edit by hand.
+// Source of truth: packages/app-sdk/src/entropy-contract.js
+// Regenerate with: pnpm --filter @sparkvault/sdk-mobile build
+/**
+ * The request contract of the entropy endpoint (POST /v1/entropy/generate):
+ * the output formats it serves and how many bytes one request may ask for.
+ *
+ * Core's route enforces it; the console and both SDKs hold a request to it
+ * before sending, so a request the server would refuse is refused where it is
+ * made. Dependency-free: sdk-js bundles it and sdk-mobile carries a generated
+ * copy.
+ */
+/** Output formats the endpoint serves. `bytes` returns a number array; every other format a string. */
+export const ENTROPY_FORMATS = Object.freeze([
+    'hex',
+    'base64',
+    'base64url',
+    'alphanumeric',
+    'alphanumeric-mixed',
+    'password',
+    'numeric',
+    'uuid',
+    'bytes',
+]);
+/** The hardware ceiling on one entropy draw, in bytes. */
+export const MAX_DRAW_BYTES = 1024;
+/**
+ * Formats whose characters are drawn from an alphabet by rejection sampling.
+ * They open with two raw bytes per output character, so one request's output
+ * caps at half a draw. `numeric` rejects so few bytes that it opens with one
+ * byte per digit and keeps the full ceiling.
+ */
+export const CHARSET_FORMATS = Object.freeze(['alphanumeric', 'alphanumeric-mixed', 'password']);
+/**
+ * @param {unknown} format
+ * @returns {boolean} Whether the endpoint serves this output format
+ */
+export function isEntropyFormat(format) {
+    return ENTROPY_FORMATS.includes(format);
+}
+/**
+ * The most bytes one request may ask for in a format (`num_bytes` runs from 1
+ * to this). A `uuid` always draws 16 bytes, whatever the request names.
+ *
+ * @param {string} format - One of ENTROPY_FORMATS
+ * @returns {number}
+ */
+export function maxBytesFor(format) {
+    return CHARSET_FORMATS.includes(format) ? MAX_DRAW_BYTES / 2 : MAX_DRAW_BYTES;
+}
+//# sourceMappingURL=entropy-contract.js.map

package/dist/app-sdk/entropy-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entropy-contract.js","sourceRoot":"","sources":["../../src/app-sdk/entropy-contract.js"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,4DAA4D;AAC5D,8DAA8D;AAE9D;;;;;;;;GAQG;AAEH,uGAAuG;AACvG,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,KAAK;IACL,QAAQ;IACR,WAAW;IACX,cAAc;IACd,oBAAoB;IACpB,UAAU;IACV,SAAS;IACT,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC;AAEjG;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAM;IACpC,OAAO,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,MAAM;IAChC,OAAO,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;AAChF,CAAC"}

package/dist/app-sdk/filename.d.ts

@@ -0,0 +1,93 @@
+/**
+ * What stops `name` from being stored as a file name, or null when nothing
+ * does. Length and emptiness are the storing runtime's own limits.
+ *
+ * @param {string} name
+ * @returns {string|null} One of FILENAME_PROBLEMS, or null
+ */
+export function storableFilenameProblem(name: string): string | null;
+/**
+ * A name as it is saved to a device: every unsafe character replaced by `_`.
+ *
+ * @param {string} name
+ * @returns {string}
+ */
+export function toSavedFilename(name: string): string;
+/**
+ * The name a download is saved under: the file's own name by the saved-name
+ * rule (toSavedFilename), or SAVED_FILENAME_FALLBACK when it has none.
+ *
+ * @param {string|null|undefined} name
+ * @returns {string}
+ */
+export function savedFilename(name: string | null | undefined): string;
+/**
+ * A storable name derived from text nobody chose as a file name (a note's
+ * title, a device's file name): every unsafe or non-portable character
+ * replaced by `_`. It can still be only dots or spaces, which a caller that
+ * derives a name must refuse or replace itself.
+ *
+ * @param {string} text
+ * @returns {string}
+ */
+export function toStorableFilename(text: string): string;
+/**
+ * A name's stem and extension: "report.pdf" is { stem: "report", extension:
+ * ".pdf" }, "Plan.note.html" is { stem: "Plan", extension: ".note.html" }, and
+ * a leading dot is part of the stem.
+ *
+ * @param {string} name
+ * @returns {{ stem: string, extension: string }}
+ */
+export function splitExtension(name: string): {
+    stem: string;
+    extension: string;
+};
+/**
+ * The longest prefix of `text` within `maxLength` UTF-16 units that splits no
+ * character.
+ *
+ * @param {string} text
+ * @param {number} maxLength
+ * @returns {string}
+ */
+export function truncateToLength(text: string, maxLength: number): string;
+/**
+ * `name` shortened to at most `maxLength` UTF-16 units, keeping its extension:
+ * the stem gives way, and a name whose extension leaves no room for a stem is
+ * shortened as a whole.
+ *
+ * @param {string} name
+ * @param {number} [maxLength=INGOT_NAME_MAX]
+ * @returns {string}
+ */
+export function fitName(name: string, maxLength?: number): string;
+/** Why a name cannot be stored, as storableFilenameProblem reports it. */
+export const FILENAME_PROBLEMS: Readonly<{
+    UNSAFE_CHARACTER: "unsafe_character";
+    NON_PORTABLE_CHARACTER: "non_portable_character";
+    ONLY_DOTS_OR_SPACES: "only_dots_or_spaces";
+}>;
+/** The one name a download is saved under when its file has no name. */
+export const SAVED_FILENAME_FALLBACK: "download";
+/**
+ * The saved-name rule as the source of a classic browser script, for a page
+ * that cannot import an ES module (the x.sv reveal page): it declares
+ * `savedFilename` and everything it reads at the script's top level, built
+ * from the functions and constants above, so the page runs this rule, not a
+ * copy. A new module-scope binding the rule reads must be added here.
+ */
+export const SAVED_FILENAME_SCRIPT: string;
+/** The longest name an ingot stores, in UTF-16 code units. */
+export const INGOT_NAME_MAX: 255;
+/**
+ * Two-part extensions that mark a SparkVault document, by the editor that
+ * opens it. A name's extension is the whole marker, so a numbered or
+ * shortened copy still opens in its editor ("Plan (2).note.html", never
+ * "Plan.note (2).html"); the console and the mobile app classify a document by
+ * these lists (./ingot-kind.js).
+ */
+export const WHITEBOARD_MARKER_EXTENSIONS: readonly string[];
+export const NOTE_MARKER_EXTENSIONS: readonly string[];
+/** Every SparkVault document marker. */
+export const DOCUMENT_MARKER_EXTENSIONS: readonly string[];

package/dist/app-sdk/filename.js

@@ -0,0 +1,161 @@
+// GENERATED FILE — do not edit by hand.
+// Source of truth: packages/app-sdk/src/filename.js
+// Regenerate with: pnpm --filter @sparkvault/sdk-mobile build
+/**
+ * The one rule for which characters a file name may hold, shared by every
+ * runtime that stores a name (Core refuses them at ingest, and clients check
+ * before they send) and every runtime that saves a stored name to a device
+ * (Forge's Content-Disposition, the web console's download, the x.sv reveal
+ * page, the mobile share sheet). A download saves under the file's current
+ * name by this rule, or under SAVED_FILENAME_FALLBACK when it has none.
+ *
+ * UNSAFE characters are never stored, and are replaced in any name saved to a
+ * device: path separators, control characters (C0, DEL and C1), and the
+ * invisible bidirectional controls that make a name display a different
+ * extension than it has (`invoice<U+202E>fdp.exe` shows as `invoiceexe.pdf`).
+ *
+ * NON-PORTABLE characters (`: * ? " < > |`) are refused by the file systems a
+ * name is saved to, so they are never stored either. A saved name keeps them:
+ * a stored name cannot hold one, and Forge carries a name's exact text in the
+ * RFC 5987 `filename*` parameter.
+ *
+ * Pure and import-free, so a browser, a container and a Lambda load it alike;
+ * sdk-mobile mirrors it at build time (scripts/generate-app-sdk-mirrors.mjs).
+ */
+/** Path separators, control characters and bidirectional text controls. */
+const UNSAFE_FILENAME_CHARACTERS = /[\\/\p{Cc}\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]/u;
+/** Characters the file systems a name is saved to refuse. */
+const NON_PORTABLE_FILENAME_CHARACTERS = /[:*?"<>|]/;
+/** Why a name cannot be stored, as storableFilenameProblem reports it. */
+export const FILENAME_PROBLEMS = Object.freeze({
+    UNSAFE_CHARACTER: 'unsafe_character',
+    NON_PORTABLE_CHARACTER: 'non_portable_character',
+    ONLY_DOTS_OR_SPACES: 'only_dots_or_spaces'
+});
+const ONLY_DOTS_OR_SPACES = /^[\s.]+$/;
+/**
+ * What stops `name` from being stored as a file name, or null when nothing
+ * does. Length and emptiness are the storing runtime's own limits.
+ *
+ * @param {string} name
+ * @returns {string|null} One of FILENAME_PROBLEMS, or null
+ */
+export function storableFilenameProblem(name) {
+    if (UNSAFE_FILENAME_CHARACTERS.test(name))
+        return FILENAME_PROBLEMS.UNSAFE_CHARACTER;
+    if (NON_PORTABLE_FILENAME_CHARACTERS.test(name))
+        return FILENAME_PROBLEMS.NON_PORTABLE_CHARACTER;
+    if (ONLY_DOTS_OR_SPACES.test(name))
+        return FILENAME_PROBLEMS.ONLY_DOTS_OR_SPACES;
+    return null;
+}
+/**
+ * A name as it is saved to a device: every unsafe character replaced by `_`.
+ *
+ * @param {string} name
+ * @returns {string}
+ */
+export function toSavedFilename(name) {
+    return name.replace(new RegExp(UNSAFE_FILENAME_CHARACTERS.source, 'gu'), '_');
+}
+/** The one name a download is saved under when its file has no name. */
+export const SAVED_FILENAME_FALLBACK = 'download';
+/**
+ * The name a download is saved under: the file's own name by the saved-name
+ * rule (toSavedFilename), or SAVED_FILENAME_FALLBACK when it has none.
+ *
+ * @param {string|null|undefined} name
+ * @returns {string}
+ */
+export function savedFilename(name) {
+    return typeof name === 'string' && name !== '' ? toSavedFilename(name) : SAVED_FILENAME_FALLBACK;
+}
+/**
+ * The saved-name rule as the source of a classic browser script, for a page
+ * that cannot import an ES module (the x.sv reveal page): it declares
+ * `savedFilename` and everything it reads at the script's top level, built
+ * from the functions and constants above, so the page runs this rule, not a
+ * copy. A new module-scope binding the rule reads must be added here.
+ */
+export const SAVED_FILENAME_SCRIPT = [
+    `var UNSAFE_FILENAME_CHARACTERS = ${UNSAFE_FILENAME_CHARACTERS};`,
+    `var SAVED_FILENAME_FALLBACK = ${JSON.stringify(SAVED_FILENAME_FALLBACK)};`,
+    toSavedFilename,
+    savedFilename
+].join('\n');
+/**
+ * A storable name derived from text nobody chose as a file name (a note's
+ * title, a device's file name): every unsafe or non-portable character
+ * replaced by `_`. It can still be only dots or spaces, which a caller that
+ * derives a name must refuse or replace itself.
+ *
+ * @param {string} text
+ * @returns {string}
+ */
+export function toStorableFilename(text) {
+    return toSavedFilename(text).replace(new RegExp(NON_PORTABLE_FILENAME_CHARACTERS.source, 'g'), '_');
+}
+/** The longest name an ingot stores, in UTF-16 code units. */
+export const INGOT_NAME_MAX = 255;
+/**
+ * Two-part extensions that mark a SparkVault document, by the editor that
+ * opens it. A name's extension is the whole marker, so a numbered or
+ * shortened copy still opens in its editor ("Plan (2).note.html", never
+ * "Plan.note (2).html"); the console and the mobile app classify a document by
+ * these lists (./ingot-kind.js).
+ */
+export const WHITEBOARD_MARKER_EXTENSIONS = Object.freeze(['.whiteboard.svg', '.whiteboard.png']);
+export const NOTE_MARKER_EXTENSIONS = Object.freeze(['.note.html', '.note.htm']);
+/** Every SparkVault document marker. */
+export const DOCUMENT_MARKER_EXTENSIONS = Object.freeze([...WHITEBOARD_MARKER_EXTENSIONS, ...NOTE_MARKER_EXTENSIONS]);
+/**
+ * A name's stem and extension: "report.pdf" is { stem: "report", extension:
+ * ".pdf" }, "Plan.note.html" is { stem: "Plan", extension: ".note.html" }, and
+ * a leading dot is part of the stem.
+ *
+ * @param {string} name
+ * @returns {{ stem: string, extension: string }}
+ */
+export function splitExtension(name) {
+    const lowerName = name.toLowerCase();
+    const marker = DOCUMENT_MARKER_EXTENSIONS.find((candidate) => lowerName.endsWith(candidate) && lowerName.length > candidate.length);
+    const dot = marker ? name.length - marker.length : name.lastIndexOf('.');
+    return dot > 0
+        ? { stem: name.slice(0, dot), extension: name.slice(dot) }
+        : { stem: name, extension: '' };
+}
+/**
+ * The longest prefix of `text` within `maxLength` UTF-16 units that splits no
+ * character.
+ *
+ * @param {string} text
+ * @param {number} maxLength
+ * @returns {string}
+ */
+export function truncateToLength(text, maxLength) {
+    let truncated = '';
+    for (const character of text) {
+        if (truncated.length + character.length > maxLength)
+            break;
+        truncated += character;
+    }
+    return truncated;
+}
+/**
+ * `name` shortened to at most `maxLength` UTF-16 units, keeping its extension:
+ * the stem gives way, and a name whose extension leaves no room for a stem is
+ * shortened as a whole.
+ *
+ * @param {string} name
+ * @param {number} [maxLength=INGOT_NAME_MAX]
+ * @returns {string}
+ */
+export function fitName(name, maxLength = INGOT_NAME_MAX) {
+    if (name.length <= maxLength)
+        return name;
+    const { stem, extension } = splitExtension(name);
+    return extension.length < maxLength
+        ? `${truncateToLength(stem, maxLength - extension.length)}${extension}`
+        : truncateToLength(name, maxLength);
+}
+//# sourceMappingURL=filename.js.map

package/dist/app-sdk/filename.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filename.js","sourceRoot":"","sources":["../../src/app-sdk/filename.js"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,oDAAoD;AACpD,8DAA8D;AAE9D;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,2EAA2E;AAC3E,MAAM,0BAA0B,GAAG,0DAA0D,CAAC;AAE9F,6DAA6D;AAC7D,MAAM,gCAAgC,GAAG,WAAW,CAAC;AAErD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,gBAAgB,EAAE,kBAAkB;IACpC,sBAAsB,EAAE,wBAAwB;IAChD,mBAAmB,EAAE,qBAAqB;CAC3C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAI;IAC1C,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,iBAAiB,CAAC,gBAAgB,CAAC;IACrF,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,iBAAiB,CAAC,sBAAsB,CAAC;IACjG,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,iBAAiB,CAAC,mBAAmB,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAI;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAI;IAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC;AACnG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,oCAAoC,0BAA0B,GAAG;IACjE,iCAAiC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,GAAG;IAC3E,eAAe;IACf,aAAa;CACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAI;IACrC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACtG,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAClG,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAEjF,wCAAwC;AACxC,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,4BAA4B,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC;AAEtH;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAI;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAC5C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CACpF,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzE,OAAO,GAAG,GAAG,CAAC;QACZ,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QAC1D,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAI,EAAE,SAAS;IAC9C,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM;QAC3D,SAAS,IAAI,SAAS,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc;IACtD,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,SAAS,CAAC,MAAM,GAAG,SAAS;QACjC,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE;QACvE,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACxC,CAAC"}

package/dist/app-sdk/forge-url.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Forge's own host, the one a platform-issued transfer URL names.
+ * @param {string} hostname
+ * @returns {boolean}
+ */
+export function isForgeHost(hostname: string): boolean;
+/**
+ * The URL Core issues for a transfer: Forge's operation endpoint carrying the
+ * ISTK.
+ *
+ * @param {'encrypt'|'decrypt'} operation
+ * @param {string} istk
+ * @returns {string}
+ */
+export function forgeTransferUrl(operation: "encrypt" | "decrypt", istk: string): string;
+/**
+ * Read a Core-issued transfer URL. It must be written in printable ASCII, be
+ * https, carry no userinfo, port or fragment, name an allowed host, have the
+ * operation as its whole path, and carry exactly one base64url `istk`. Other
+ * query parameters (a preview URL's `disposition=inline`) ride along; the query
+ * is read the way a form encodes one (`+` is a space, escapes are decoded).
+ *
+ * A download fetches the URL it read as it was written; an upload is created
+ * at `endpoint` with the ISTK in a header.
+ *
+ * @param {unknown} value
+ * @param {Object} options
+ * @param {'encrypt'|'decrypt'} options.operation - The transfer the URL must name
+ * @param {(hostname: string) => boolean} [options.isAllowedHost] - Forge's own
+ *   host by default; a published SDK passes its configured allowlist. It is
+ *   handed the lowercased host name.
+ * @returns {{ ok: true, origin: string, endpoint: string, istk: string } | { ok: false, reason: string }}
+ *   `origin` is the scheme and host; `endpoint` is where a tus upload is created.
+ */
+export function readForgeTransferUrl(value: unknown, { operation, isAllowedHost }: {
+    operation: "encrypt" | "decrypt";
+    isAllowedHost?: ((hostname: string) => boolean) | undefined;
+}): {
+    ok: true;
+    origin: string;
+    endpoint: string;
+    istk: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Whether a value is exactly the URL Core issues for a transfer
+ * (`forgeTransferUrl`), with nothing added or re-spelled. A client deployed
+ * with Core may demand this; a published SDK, which must accept what a newer
+ * Core adds, reads with readForgeTransferUrl.
+ *
+ * @param {unknown} value
+ * @param {'encrypt'|'decrypt'} operation
+ * @returns {boolean}
+ */
+export function isIssuedForgeTransferUrl(value: unknown, operation: "encrypt" | "decrypt"): boolean;
+/**
+ * Place the session a tus create answered with (its `Location`) under the
+ * endpoint the session was created at. Every later request carries the ISTK
+ * and the file's bytes, so the session must be one segment directly under the
+ * endpoint's path on the endpoint's own origin: `<endpoint path>/<session>` as
+ * Forge sends it, or the same with the endpoint's origin written in front.
+ *
+ * @param {unknown} location
+ * @param {string} endpoint - An `endpoint` readForgeTransferUrl returned
+ * @returns {string|null} The session URL, or null when the answer points anywhere else
+ */
+export function resolveForgeSessionUrl(location: unknown, endpoint: string): string | null;
+/**
+ * Read a tus session URL a client kept to resume an upload: a session Forge
+ * opened directly under the operation's endpoint on an allowed host, exactly
+ * as resolveForgeSessionUrl placed it when the session was created. A resumed
+ * session receives the ISTK and the file's bytes, so it is held to the rule a
+ * created one was.
+ *
+ * @param {unknown} value
+ * @param {Object} options
+ * @param {'encrypt'|'decrypt'} options.operation - The transfer the session belongs to
+ * @param {(hostname: string) => boolean} [options.isAllowedHost] - As for readForgeTransferUrl
+ * @returns {{ ok: true, url: string } | { ok: false, reason: string }}
+ */
+export function readForgeSessionUrl(value: unknown, { operation, isAllowedHost }: {
+    operation: "encrypt" | "decrypt";
+    isAllowedHost?: ((hostname: string) => boolean) | undefined;
+}): {
+    ok: true;
+    url: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Why a transfer URL was refused; each caller raises its own error for the reason. */
+export const FORGE_URL_REFUSAL: Readonly<{
+    /** Not a string, or not an absolute URL written in printable ASCII. */
+    INVALID: "invalid_url";
+    /** Not https: the credential and the bytes would cross the network in the clear. */
+    NOT_HTTPS: "not_https";
+    /** Userinfo, a port or a fragment, none of which Core ever issues. */
+    UNSAFE_PARTS: "unsafe_parts";
+    /** A host the caller does not send transfers to, or one that is not a DNS name. */
+    HOST: "host_not_allowed";
+    /** A path other than the transfer operation's own. */
+    OPERATION: "wrong_operation";
+    /** No ISTK, more than one, or one that is not base64url. */
+    ISTK: "bad_istk";
+}>;

package/dist/app-sdk/forge-url.js

@@ -0,0 +1,222 @@
+// GENERATED FILE — do not edit by hand.
+// Source of truth: packages/app-sdk/src/forge-url.js
+// Regenerate with: pnpm --filter @sparkvault/sdk-mobile build
+/**
+ * Forge transfer URLs: the one reading of the URL Core issues for an ingot
+ * transfer, `https://forge.sparkvault.com/{encrypt|decrypt}?istk=…`, and of the
+ * session URL a tus upload continues at, whether just created or kept (resumed,
+ * probed or terminated).
+ *
+ * The URL carries the ISTK, a bearer credential for one transfer, and an upload
+ * sends the plaintext after it, so every client reads the URL here before a
+ * byte or the credential leaves: the Node tus client (forge-tus), both SDKs
+ * (sdk-js bundles this module; sdk-mobile carries a generated copy), the
+ * console, the Slack app, the HubSpot record tab and the Salesforce record
+ * panel (each a generated copy). Core builds the URL with `forgeTransferUrl`.
+ *
+ * Both readings are string rules over the one shape Core and Forge write, not
+ * a URL parser: a React Native host need not provide a WHATWG `URL` (React
+ * Native's own resolves relative references and serializes query strings
+ * differently), and a shape this strict leaves nothing for a parser to
+ * normalize, so a transfer goes to exactly the host and path that was checked.
+ *
+ * Dependency-free and free of runtime globals.
+ */
+import { SPARKVAULT_FORGE_HOST } from './platform-domains.js';
+/** Why a transfer URL was refused; each caller raises its own error for the reason. */
+export const FORGE_URL_REFUSAL = Object.freeze({
+    /** Not a string, or not an absolute URL written in printable ASCII. */
+    INVALID: 'invalid_url',
+    /** Not https: the credential and the bytes would cross the network in the clear. */
+    NOT_HTTPS: 'not_https',
+    /** Userinfo, a port or a fragment, none of which Core ever issues. */
+    UNSAFE_PARTS: 'unsafe_parts',
+    /** A host the caller does not send transfers to, or one that is not a DNS name. */
+    HOST: 'host_not_allowed',
+    /** A path other than the transfer operation's own. */
+    OPERATION: 'wrong_operation',
+    /** No ISTK, more than one, or one that is not base64url. */
+    ISTK: 'bad_istk',
+});
+/** An ISTK is base64url; its length is Core's to choose, so it is not pinned. */
+const ISTK_PATTERN = /^[A-Za-z0-9_-]+$/;
+/** A tus session Forge opens under its endpoint (`tus_<hex>`): one segment, no dot segment or escape. */
+const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]+$/;
+/** Printable ASCII with no space: every character a transfer URL is written in. */
+const URL_TEXT = /^[\x21-\x7e]+$/;
+/** An absolute URL cut at its delimiters: scheme, authority, path, query, fragment. */
+const ABSOLUTE_URL = /^([A-Za-z][A-Za-z0-9+.-]*):\/\/([^/?#]*)([^?#]*)(?:\?([^#]*))?(#.*)?$/;
+/** A DNS name: letter-digit-hyphen labels joined by dots (compared lowercased). */
+const HOSTNAME = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)*$/;
+/**
+ * Forge's own host, the one a platform-issued transfer URL names.
+ * @param {string} hostname
+ * @returns {boolean}
+ */
+export function isForgeHost(hostname) {
+    return hostname === SPARKVAULT_FORGE_HOST;
+}
+/**
+ * The URL Core issues for a transfer: Forge's operation endpoint carrying the
+ * ISTK.
+ *
+ * @param {'encrypt'|'decrypt'} operation
+ * @param {string} istk
+ * @returns {string}
+ */
+export function forgeTransferUrl(operation, istk) {
+    return `https://${SPARKVAULT_FORGE_HOST}/${operation}?istk=${encodeURIComponent(istk)}`;
+}
+/**
+ * Read a Core-issued transfer URL. It must be written in printable ASCII, be
+ * https, carry no userinfo, port or fragment, name an allowed host, have the
+ * operation as its whole path, and carry exactly one base64url `istk`. Other
+ * query parameters (a preview URL's `disposition=inline`) ride along; the query
+ * is read the way a form encodes one (`+` is a space, escapes are decoded).
+ *
+ * A download fetches the URL it read as it was written; an upload is created
+ * at `endpoint` with the ISTK in a header.
+ *
+ * @param {unknown} value
+ * @param {Object} options
+ * @param {'encrypt'|'decrypt'} options.operation - The transfer the URL must name
+ * @param {(hostname: string) => boolean} [options.isAllowedHost] - Forge's own
+ *   host by default; a published SDK passes its configured allowlist. It is
+ *   handed the lowercased host name.
+ * @returns {{ ok: true, origin: string, endpoint: string, istk: string } | { ok: false, reason: string }}
+ *   `origin` is the scheme and host; `endpoint` is where a tus upload is created.
+ */
+export function readForgeTransferUrl(value, { operation, isAllowedHost = isForgeHost }) {
+    const url = readHttpsUrl(value);
+    if (!url.ok)
+        return url;
+    if (!isAllowedHost(url.hostname))
+        return refused(FORGE_URL_REFUSAL.HOST);
+    if (url.path !== `/${operation}`)
+        return refused(FORGE_URL_REFUSAL.OPERATION);
+    const istks = queryValues(url.query, 'istk');
+    if (istks.length !== 1 || !ISTK_PATTERN.test(istks[0]))
+        return refused(FORGE_URL_REFUSAL.ISTK);
+    const origin = `https://${url.hostname}`;
+    return { ok: true, origin, endpoint: `${origin}/${operation}`, istk: istks[0] };
+}
+/**
+ * Whether a value is exactly the URL Core issues for a transfer
+ * (`forgeTransferUrl`), with nothing added or re-spelled. A client deployed
+ * with Core may demand this; a published SDK, which must accept what a newer
+ * Core adds, reads with readForgeTransferUrl.
+ *
+ * @param {unknown} value
+ * @param {'encrypt'|'decrypt'} operation
+ * @returns {boolean}
+ */
+export function isIssuedForgeTransferUrl(value, operation) {
+    const read = readForgeTransferUrl(value, { operation });
+    return read.ok && value === forgeTransferUrl(operation, read.istk);
+}
+/**
+ * Place the session a tus create answered with (its `Location`) under the
+ * endpoint the session was created at. Every later request carries the ISTK
+ * and the file's bytes, so the session must be one segment directly under the
+ * endpoint's path on the endpoint's own origin: `<endpoint path>/<session>` as
+ * Forge sends it, or the same with the endpoint's origin written in front.
+ *
+ * @param {unknown} location
+ * @param {string} endpoint - An `endpoint` readForgeTransferUrl returned
+ * @returns {string|null} The session URL, or null when the answer points anywhere else
+ */
+export function resolveForgeSessionUrl(location, endpoint) {
+    const base = readHttpsUrl(endpoint);
+    if (!base.ok || base.query !== undefined || typeof location !== 'string' || !URL_TEXT.test(location)) {
+        return null;
+    }
+    const origin = `https://${base.hostname}`;
+    let path = null;
+    if (location.startsWith(`${origin}/`)) {
+        path = location.slice(origin.length);
+    }
+    else if (location.startsWith('/') && !location.startsWith('//')) {
+        path = location;
+    }
+    if (path === null || !path.startsWith(`${base.path}/`))
+        return null;
+    const session = path.slice(base.path.length + 1);
+    return SESSION_ID_PATTERN.test(session) ? `${origin}${base.path}/${session}` : null;
+}
+/**
+ * Read a tus session URL a client kept to resume an upload: a session Forge
+ * opened directly under the operation's endpoint on an allowed host, exactly
+ * as resolveForgeSessionUrl placed it when the session was created. A resumed
+ * session receives the ISTK and the file's bytes, so it is held to the rule a
+ * created one was.
+ *
+ * @param {unknown} value
+ * @param {Object} options
+ * @param {'encrypt'|'decrypt'} options.operation - The transfer the session belongs to
+ * @param {(hostname: string) => boolean} [options.isAllowedHost] - As for readForgeTransferUrl
+ * @returns {{ ok: true, url: string } | { ok: false, reason: string }}
+ */
+export function readForgeSessionUrl(value, { operation, isAllowedHost = isForgeHost }) {
+    const url = readHttpsUrl(value);
+    if (!url.ok)
+        return url;
+    if (!isAllowedHost(url.hostname))
+        return refused(FORGE_URL_REFUSAL.HOST);
+    const session = resolveForgeSessionUrl(value, `https://${url.hostname}/${operation}`);
+    return session === null ? refused(FORGE_URL_REFUSAL.OPERATION) : { ok: true, url: session };
+}
+/**
+ * Cut an https URL into its host name, path and query by string rules alone.
+ * @param {unknown} value
+ * @returns {{ ok: true, hostname: string, path: string, query: string|undefined } | { ok: false, reason: string }}
+ */
+function readHttpsUrl(value) {
+    if (typeof value !== 'string' || !URL_TEXT.test(value))
+        return refused(FORGE_URL_REFUSAL.INVALID);
+    const parts = ABSOLUTE_URL.exec(value);
+    if (!parts)
+        return refused(FORGE_URL_REFUSAL.INVALID);
+    const [, scheme, authority, path, query, fragment] = parts;
+    if (scheme.toLowerCase() !== 'https')
+        return refused(FORGE_URL_REFUSAL.NOT_HTTPS);
+    if (authority.includes('@') || /:[0-9]*$/.test(authority) || fragment !== undefined) {
+        return refused(FORGE_URL_REFUSAL.UNSAFE_PARTS);
+    }
+    const hostname = authority.toLowerCase();
+    if (!HOSTNAME.test(hostname))
+        return refused(FORGE_URL_REFUSAL.HOST);
+    return { ok: true, hostname, path, query };
+}
+/**
+ * Every value of one query parameter, names and values read as a form encodes
+ * them: `+` is a space and escapes are decoded (text that is not a valid
+ * escape sequence stays as written).
+ * @param {string|undefined} query
+ * @param {string} name
+ * @returns {string[]}
+ */
+function queryValues(query, name) {
+    const values = [];
+    for (const pair of (query ?? '').split('&')) {
+        if (!pair)
+            continue;
+        const equals = pair.indexOf('=');
+        const key = formDecode(equals === -1 ? pair : pair.slice(0, equals));
+        if (key === name)
+            values.push(equals === -1 ? '' : formDecode(pair.slice(equals + 1)));
+    }
+    return values;
+}
+function formDecode(text) {
+    const spaced = text.replace(/\+/g, ' ');
+    try {
+        return decodeURIComponent(spaced);
+    }
+    catch {
+        return spaced;
+    }
+}
+function refused(reason) {
+    return { ok: false, reason };
+}
+//# sourceMappingURL=forge-url.js.map

package/dist/app-sdk/forge-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-url.js","sourceRoot":"","sources":["../../src/app-sdk/forge-url.js"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,qDAAqD;AACrD,8DAA8D;AAE9D;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,uEAAuE;IACvE,OAAO,EAAE,aAAa;IACtB,oFAAoF;IACpF,SAAS,EAAE,WAAW;IACtB,sEAAsE;IACtE,YAAY,EAAE,cAAc;IAC5B,mFAAmF;IACnF,IAAI,EAAE,kBAAkB;IACxB,sDAAsD;IACtD,SAAS,EAAE,iBAAiB;IAC5B,4DAA4D;IAC5D,IAAI,EAAE,UAAU;CACjB,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAExC,yGAAyG;AACzG,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAE9C,mFAAmF;AACnF,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAElC,uFAAuF;AACvF,MAAM,YAAY,GAAG,uEAAuE,CAAC;AAE7F,mFAAmF;AACnF,MAAM,QAAQ,GAAG,yEAAyE,CAAC;AAE3F;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAQ;IAClC,OAAO,QAAQ,KAAK,qBAAqB,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAS,EAAE,IAAI;IAC9C,OAAO,WAAW,qBAAqB,IAAI,SAAS,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,GAAG,WAAW,EAAE;IACpF,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,SAAS,EAAE;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,WAAW,GAAG,CAAC,QAAQ,EAAE,CAAC;IACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAK,EAAE,SAAS;IACvD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,EAAE,IAAI,KAAK,KAAK,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAQ,EAAE,QAAQ;IACvD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC1C,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,GAAG,WAAW,EAAE;IACnF,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,EAAE,WAAW,GAAG,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;IACtF,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAAK;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;IAC3D,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAClF,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpF,OAAO,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAK,EAAE,IAAI;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,IAAI;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,MAAM;IACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC"}