@teepin/sdk 0.2.1 → 0.3.0

package/dist/types/direct/reads.d.ts

@@ -0,0 +1,306 @@
+import { type TeepinClient } from '../client.js';
+import { TeepinError } from '../errors.js';
+import type { ObjectInfo, StorageObject } from '../storage.js';
+/** The server's read window until it shows its own: 64 MiB of stored bytes. */
+export declare const DEFAULT_WINDOW: number;
+/** How long a data key stays cached, in ms, unless the client says. */
+export declare const DEFAULT_KEY_CACHE_TTL_MS = 600000;
+/** The error for reading an object still in the API's old stage (a session with source "api"): it can't be read yet. */
+export declare function stagedError(key: string): TeepinError;
+/** A controller that aborts with parent's reason, and a function that unlinks it once it is no longer needed. */
+export declare function linked(parent?: AbortSignal): {
+    ctl: AbortController;
+    unlink: () => void;
+};
+/** One signed request to the storage network. */
+export declare class Signed {
+    readonly url: string;
+    readonly headers: Record<string, string>;
+    /** When the signature expires (ms since the epoch); undefined when the session didn't say. */
+    readonly expires: number | undefined;
+    /** Bytes before the object's own (a packed object's needle). */
+    readonly prefix: number;
+    /** The object's stored bytes it covers, inclusive. */
+    readonly first: number;
+    readonly last: number;
+    constructor(url: string, headers: Record<string, string>, 
+    /** When the signature expires (ms since the epoch); undefined when the session didn't say. */
+    expires: number | undefined, 
+    /** Bytes before the object's own (a packed object's needle). */
+    prefix: number, 
+    /** The object's stored bytes it covers, inclusive. */
+    first: number, last: number);
+    static of(d: Record<string, unknown>): Signed;
+    /** The bytes it answers: the prefix and the object's own. */
+    get length(): number;
+    /** Whether it can still be used: not within a minute of its expiry. */
+    fresh(): boolean;
+}
+/** One read session. dek is this session's own copy of the data key. */
+export declare class Session {
+    readonly bucket: string;
+    readonly key: string;
+    readonly version: string;
+    readonly size: number;
+    readonly storedSize: number;
+    readonly etag: string;
+    readonly sha256: string;
+    readonly contentType: string;
+    readonly metadata: Record<string, string>;
+    readonly format: string;
+    readonly source: string;
+    readonly uploadedAt?: Date;
+    dek: Uint8Array | null;
+    readonly ad: Uint8Array;
+    readonly requests: Signed[];
+    constructor(bucket: string, d: Record<string, unknown>);
+    /** Still in the API's old stage: not readable yet (stagedError). */
+    get staged(): boolean;
+    get packed(): boolean;
+    /** The window it signs: its last request (a later window's first one is the header). */
+    get window(): Signed;
+    get needsKey(): boolean;
+    /** Whether the whole object's SHA-256 can be checked (not a legacy composite of parts). */
+    get checkable(): boolean;
+    /** Zeroes this session's copy of the key. */
+    forget(): void;
+    /** The object's details, as statObject would give them. */
+    object(): StorageObject;
+}
+/**
+ * Data keys by bucket and key, each for one version, for ttl ms (0: none are kept). It hands out copies, so zeroing one
+ * never breaks a read in progress, and zeroes its own on expiry, replacement, drop and clear.
+ */
+export declare class KeyCache {
+    readonly ttl: number;
+    /** The clock, in ms (monotonic); a test may move it. */
+    now: () => number;
+    private readonly entries;
+    constructor(ttl: number);
+    private static id;
+    /** The cached version and a copy of its key, or undefined. */
+    get(bucket: string, key: string): {
+        version: string;
+        key: Uint8Array;
+    } | undefined;
+    /** Keeps a copy of dek for this version (the caller keeps its own). */
+    put(bucket: string, key: string, version: string, dek: Uint8Array): void;
+    drop(bucket: string, key: string): void;
+    clear(): void;
+    get size(): number;
+}
+/** One read's failures since its last verified bytes, and what each means. */
+export declare class Tries {
+    readonly reads: DirectReads;
+    readonly s: Session;
+    readonly signal?: AbortSignal | undefined;
+    passing: number;
+    bad: number;
+    notFound: boolean;
+    constructor(reads: DirectReads, s: Session, signal?: AbortSignal | undefined);
+    progressed(): void;
+    /** Resolves when the read should try again (after any wait); throws otherwise. An abort is never tried again. */
+    failed(err: unknown): Promise<void>;
+}
+/** A signed GET's body as it arrives, read a piece at a time; each read waits at most idleMs for bytes. */
+export declare class Body {
+    private readonly ctl;
+    private readonly unlink;
+    private readonly idleMs;
+    private readonly signal?;
+    private readonly reader?;
+    private rest;
+    private ended;
+    private closed;
+    constructor(response: Response, ctl: AbortController, unlink: () => void, idleMs: number, signal?: AbortSignal | undefined);
+    /** Up to max bytes (fewer is fine), empty at the end. A body that breaks off throws ConnectionError. */
+    read(max: number): Promise<Uint8Array>;
+    /** n bytes, or fewer where the body ends. */
+    readExact(n: number): Promise<Uint8Array>;
+    private next;
+    /** Ends the request: a body not read to its end is cancelled and its connection dropped. Never waits. */
+    close(): void;
+}
+/** A read about to stream: its session, its own key copy, and the object's bytes [a, b) it reads. */
+export interface Opened {
+    session: Session;
+    dek: Uint8Array | null;
+    a: number;
+    b: number;
+    /** A range was asked for (so the whole object's SHA-256 isn't checked). */
+    ranged: boolean;
+}
+/** Where a download writes: any offset, in any order. sha256, when it can read back what it holds, hashes its first size bytes. */
+export interface Target {
+    write(offset: number, data: Uint8Array): void | Promise<void>;
+    sha256?(size: number): Promise<string>;
+}
+export interface DownloadParams {
+    /** Plaintext bytes per range inside a window (0: one range per window). */
+    partSize: number;
+    /** Ranges fetched at once. */
+    concurrency: number;
+    onProgress?: (done: number, total: number) => void;
+    /** Check the whole object's SHA-256. */
+    verify: boolean;
+    signal?: AbortSignal;
+}
+/**
+ * Reads through read sessions, for one client. The methods tests replace (as the Python tests patch _reads.py) are
+ * call, session, window, open and plaintext.
+ */
+export declare class DirectReads {
+    readonly client: TeepinClient;
+    readonly keys: KeyCache;
+    constructor(client: TeepinClient);
+    /** Zeroes the cached data keys. */
+    close(): void;
+    /** One read session (object/read), retried by the client as a safe call. */
+    call(bucket: string, key: string, off: number, length: number, includeKey: boolean, signal?: AbortSignal): Promise<Session>;
+    /**
+     * A read's first session, with the data key: from the cache when it holds this version's, so the server needn't send
+     * it again. An object still in the old stage throws stagedError.
+     */
+    session(bucket: string, key: string, off?: number, length?: number, signal?: AbortSignal): Promise<Session>;
+    /**
+     * Read sessions for many objects, signed 1,000 to a request (objects/read): a Session, or the error for an object
+     * that can't be read (each on its own; stagedError for one still in the old stage). Each Session holds its own key;
+     * the caller forgets it.
+     */
+    sessions(bucket: string, keys: readonly string[], signal?: AbortSignal): Promise<Map<string, Session | TeepinError>>;
+    /** A later window of the same version, signed without the key. */
+    window(s0: Session, off: number, length: number, signal?: AbortSignal): Promise<Session>;
+    /** A signed GET, its headers in (the client's timeout), its body to read; Expired for a signature about to expire. */
+    open(r: Signed, signal?: AbortSignal): Promise<Body>;
+    /**
+     * The object's bytes [a, b), each verified before it is yielded; with check (a whole read), the object's SHA-256
+     * too, throwing ChecksumMismatchError after the last bytes.
+     */
+    plaintext(s: Session, dek: Uint8Array | null, a: number, b: number, check: boolean, signal?: AbortSignal): AsyncGenerator<Uint8Array, void, undefined>;
+    /** A packed object, its needle checked and decrypted whole; or a teepin-v1 object in its own blob, read whole and opened. */
+    private whole;
+    private packed;
+    private tws1Blob;
+    /** The object's keys from the header a later window's session signs first; its commitment is checked. */
+    private header;
+    /** Stored bytes [a, b) of an object in its own blob, as stored. */
+    private rawBlob;
+    /** How a download splits: one range per server window (partSize may split finer), or one range for an object read whole. */
+    ranges(s: Session, partSize: number): [number, number][];
+    /**
+     * Writes the whole object to the target open makes (once per attempt, given the object's details): windows in
+     * parallel, each pinned to the first session's version. A SHA-256 mismatch is tried again once.
+     */
+    download(bucket: string, key: string, open: (obj: StorageObject) => Target, p: DownloadParams): Promise<StorageObject>;
+    private writeRange;
+    /**
+     * The first part of getObject: the session, checked, and the range [a, b) to read (start and end inclusive, end
+     * undefined for to the end); the bytes come from body.
+     */
+    get(bucket: string, key: string, start: number, end: number | undefined, ifMatch: string, signal?: AbortSignal): Promise<Opened>;
+    /** The verified bytes [a, b); the key copy is zeroed at the end, or when the reader stops early. */
+    body(s: Session, dek: Uint8Array | null, a: number, b: number, check: boolean, signal?: AbortSignal): AsyncGenerator<Uint8Array, void, undefined>;
+    /**
+     * The first part of openObject: the session, the key copy, the block (one window, or the whole object) and the
+     * alignment of a jump.
+     */
+    openFile(bucket: string, key: string, signal?: AbortSignal): Promise<{
+        session: Session;
+        dek: Uint8Array | null;
+        block: number;
+        align: number;
+    }>;
+    /** How an ObjectFile reads s: its block (one window, or the whole object) and the alignment of a jump. */
+    layout(s: Session): {
+        block: number;
+        align: number;
+    };
+    /** The verified bytes [a, b), joined; the whole object's SHA-256 is checked when that is what's asked for. */
+    fetch(s: Session, dek: Uint8Array | null, a: number, b: number, signal?: AbortSignal): Promise<Uint8Array>;
+}
+/** The route that opens a share link: a read session for the token, with no sign-in (section 26.2). */
+export declare const LINK_READ_PATH = "/v1/storage/links/read";
+/**
+ * Reads through a share link (section 26.3): the same engine and checks as DirectReads, with the link's read sessions
+ * (POST /v1/storage/links/read) in place of the authenticated ones. Every session carries the data key, so none is
+ * cached (the client's keyCacheTtl is 0), and every session after the first must be of the version the link first
+ * opened: ObjectChangedError otherwise. The bucket and key the engine passes around are unused: the token names the
+ * object.
+ *
+ * The first session takes the link's token. Each answer brings a continuation, and every later session takes the
+ * newest one instead: it reads only the version first opened (the server answers 412 for a replaced object, which is
+ * ObjectChangedError here), lasts 30 minutes from its issue, and never past the link's expiry plus 24 hours, so a
+ * download that began while the link was valid can finish after it expires. A continuation left idle too long is
+ * refused; the link's token is then tried once more, which opens only while the link itself is valid.
+ */
+export declare class LinkReads extends DirectReads {
+    private readonly token;
+    /** The version the link first opened (set by openLink); '' until then. */
+    version: string;
+    /** From the link's answers: how the link is meant to be offered, and the name to save the object as. */
+    disposition: string;
+    fileName: string;
+    /** The newest continuation, and when it stops working (ms); '' until the first answer. */
+    private continuation;
+    private continuationEnds;
+    constructor(client: TeepinClient, token: string);
+    /** One read session for the link, retried by the client as a safe call; the version pinned once it is known. */
+    call(bucket: string, _key: string, off: number, length: number, _includeKey: boolean, signal?: AbortSignal): Promise<Session>;
+    /** POST /v1/storage/links/read with the link's token or a continuation. */
+    private openWith;
+    /** Keeps an answer's continuation when it lasts at least as long as the one held (windows may answer out of order). */
+    private keep;
+    /** A read's first session, always with its key (nothing is cached); an object still in the old stage throws stagedError. */
+    session(bucket: string, key: string, off?: number, length?: number, signal?: AbortSignal): Promise<Session>;
+}
+/** Everything chunks yields, joined. */
+export declare function collect(chunks: AsyncIterable<Uint8Array>): Promise<Uint8Array>;
+/**
+ * A ReadableStream of a read's verified chunks, made only as they are asked for. An abort of signal, or a cancel, ends
+ * it at once: the stream errors with the reason, the read's requests stop, and release runs (it zeroes the read's key
+ * copy), as it does when the stream ends.
+ */
+export declare function readable(chunks: (signal: AbortSignal) => AsyncGenerator<Uint8Array, void, undefined>, signal?: AbortSignal, release?: () => void): ReadableStream<Uint8Array>;
+/** A stream's bytes, joined; its error, as it is. */
+export declare function drain(body: ReadableStream<Uint8Array>): Promise<Uint8Array>;
+/**
+ * An object open for reading at any offset (TEEPIN-STORAGE-DESIGN.md section 22.5): read(offset, length), size, info
+ * and close().
+ *
+ * Reading straight on (each read starting where the last ended) fetches a block at a time (one window, 64 MiB on the
+ * storage network) and the next prefetch blocks ahead, each signed as it is fetched; a read somewhere else fetches
+ * only what it needs, in whole segments. Up to prefetch + 2 blocks are held. Every byte is verified before it is read,
+ * and every block is read from the version first opened: ObjectChangedError if the object is replaced. Close it when
+ * done: that stops its fetches and zeroes its copy of the data key.
+ */
+export declare class ObjectFile {
+    /** The object's size in bytes. */
+    readonly size: number;
+    /** The object's details, as headObject gives them. */
+    readonly info: ObjectInfo;
+    private fetch;
+    private readonly block;
+    private readonly align;
+    private readonly prefetch;
+    private readonly onClose?;
+    private readonly signal?;
+    private readonly ctl;
+    private readonly unlink;
+    private readonly blocks;
+    private end;
+    private isClosed;
+    constructor(fetch: (a: number, b: number, signal: AbortSignal) => Promise<Uint8Array>, size: number, block: number, align: number, info: ObjectInfo, prefetch?: number, onClose?: () => void, signal?: AbortSignal);
+    get closed(): boolean;
+    /** Up to length bytes from offset: fewer only at the object's end, none past it. */
+    read(offset: number, length: number): Promise<Uint8Array>;
+    /** Stops every fetch and zeroes this file's copy of the data key. Reads after it fail. */
+    close(): void;
+    private checkOpen;
+    /** Block i's fetch, started if it isn't, and made the newest; the oldest past the bound are dropped. */
+    private submit;
+    private get;
+    private ahead;
+    /** n bytes from pos, fetched alone, whole segments only. */
+    private some;
+}
+//# sourceMappingURL=reads.d.ts.map

package/dist/types/direct/reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reads.d.ts","sourceRoot":"","sources":["../../../src/direct/reads.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAW,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EASL,WAAW,EAEZ,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAO/D,+EAA+E;AAC/E,eAAO,MAAM,cAAc,QAAe,CAAC;AAC3C,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,SAAU,CAAC;AAuBhD,wHAAwH;AACxH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAEpD;AAaD,iHAAiH;AACjH,wBAAgB,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG;IAAE,GAAG,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,IAAI,CAAA;CAAE,CAUzF;AAID,iDAAiD;AACjD,qBAAa,MAAM;IAEf,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS;IACpC,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM;gBARZ,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC,8FAA8F;IACrF,OAAO,EAAE,MAAM,GAAG,SAAS;IACpC,gEAAgE;IACvD,MAAM,EAAE,MAAM;IACvB,sDAAsD;IAC7C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM;IAGvB,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAM7C,6DAA6D;IAC7D,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,uEAAuE;IACvE,KAAK,IAAI,OAAO;CAGjB;AAED,wEAAwE;AACxE,qBAAa,OAAO;IAiBhB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAhBzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;IAC3B,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;gBAGjB,MAAM,EAAE,MAAM,EACvB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAqB5B,oEAAoE;IACpE,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,wFAAwF;IACxF,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,2FAA2F;IAC3F,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,6CAA6C;IAC7C,MAAM,IAAI,IAAI;IAKd,2DAA2D;IAC3D,MAAM,IAAI,aAAa;CAmBxB;AASD;;;GAGG;AACH,qBAAa,QAAQ;IAKP,QAAQ,CAAC,GAAG,EAAE,MAAM;IAJhC,wDAAwD;IACxD,GAAG,EAAE,MAAM,MAAM,CAA2B;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;gBAEnC,GAAG,EAAE,MAAM;IAEhC,OAAO,CAAC,MAAM,CAAC,EAAE;IAIjB,8DAA8D;IAC9D,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,GAAG,SAAS;IAYlF,uEAAuE;IACvE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IASxE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAOvC,KAAK,IAAI,IAAI;IAKb,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED,8EAA8E;AAC9E,qBAAa,KAAK;IAMd,QAAQ,CAAC,KAAK,EAAE,WAAW;IAC3B,QAAQ,CAAC,CAAC,EAAE,OAAO;IACnB,QAAQ,CAAC,MAAM,CAAC;IAPlB,OAAO,SAAK;IACZ,GAAG,SAAK;IACR,QAAQ,UAAS;gBAGN,KAAK,EAAE,WAAW,EAClB,CAAC,EAAE,OAAO,EACV,MAAM,CAAC,yBAAa;IAG/B,UAAU,IAAI,IAAI;IAKlB,iHAAiH;IAC3G,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CA4B1C;AAED,2GAA2G;AAC3G,qBAAa,IAAI;IAQb,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAV1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA0C;IAClE,OAAO,CAAC,IAAI,CAAqB;IACjC,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,MAAM,CAAS;gBAGrB,QAAQ,EAAE,QAAQ,EACD,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,IAAI,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,yBAAa;IAMvC,wGAAwG;IAClG,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAW5C,6CAA6C;IACvC,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;YAcjC,IAAI;IAqBlB,yGAAyG;IACzG,KAAK,IAAI,IAAI;CASd;AAED,qGAAqG;AACrG,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;IACvB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,mIAAmI;AACnI,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,wCAAwC;IACxC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAeD;;;GAGG;AACH,qBAAa,WAAW;IAGV,QAAQ,CAAC,MAAM,EAAE,YAAY;IAFzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAEH,MAAM,EAAE,YAAY;IAIzC,mCAAmC;IACnC,KAAK,IAAI,IAAI;IAMb,4EAA4E;IACtE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAYjI;;;OAGG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,SAAI,EAAE,MAAM,SAAI,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBvG;;;;OAIG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC,CAAC;IAwC1H,kEAAkE;IAC5D,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAU9F,sHAAsH;IAChH,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB1D;;;OAGG;IACI,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC;IAiC7J,6HAA6H;YAC/G,KAAK;YAaL,MAAM;YAwBL,QAAQ;IA2DvB,yGAAyG;YAC3F,MAAM;IAcpB,mEAAmE;YACpD,OAAO;IAsCtB,4HAA4H;IAC5H,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;IAgBxD;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,MAAM,EAAE,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;YA4B9G,UAAU;IAkBxB;;;OAGG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBtI,oGAAoG;IAC7F,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC;IAQxJ;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAOtJ,0GAA0G;IAC1G,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAMpD,8GAA8G;IAC9G,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAG3G;AAID,uGAAuG;AACvG,eAAO,MAAM,cAAc,2BAA2B,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,qBAAa,SAAU,SAAQ,WAAW;IAYtC,OAAO,CAAC,QAAQ,CAAC,KAAK;IAXxB,0EAA0E;IAC1E,OAAO,SAAM;IACb,wGAAwG;IACxG,WAAW,SAAM;IACjB,QAAQ,SAAM;IACd,0FAA0F;IAC1F,OAAO,CAAC,YAAY,CAAM;IAC1B,OAAO,CAAC,gBAAgB,CAAK;gBAG3B,MAAM,EAAE,YAAY,EACH,KAAK,EAAE,MAAM;IAKhC,gHAAgH;IACjG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAsB5I,2EAA2E;YAC7D,QAAQ;IAWtB,uHAAuH;IACvH,OAAO,CAAC,IAAI;IASZ,4HAA4H;IAC7G,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,SAAI,EAAE,MAAM,SAAI,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAQjH;AAED,wCAAwC;AACxC,wBAAsB,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAIpF;AAkCD;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,EAC5E,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,MAAM,IAAI,GACnB,cAAc,CAAC,UAAU,CAAC,CA+C5B;AAED,qDAAqD;AACrD,wBAAsB,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAajF;AAaD;;;;;;;;;GASG;AACH,qBAAa,UAAU;IACrB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAqE;IAClF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAS;gBAGvB,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,UAAU,CAAC,EACzE,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,UAAU,EAChB,QAAQ,SAAI,EACZ,OAAO,CAAC,EAAE,MAAM,IAAI,EACpB,MAAM,CAAC,EAAE,WAAW;IAetB,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,oFAAoF;IAC9E,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA0C/D,0FAA0F;IAC1F,KAAK,IAAI,IAAI;IASb,OAAO,CAAC,SAAS;IAKjB,wGAAwG;IACxG,OAAO,CAAC,MAAM;YA+BA,GAAG;IAUjB,OAAO,CAAC,KAAK;IAKb,4DAA4D;YAC9C,IAAI;CAMnB"}

package/dist/types/direct/sha256.d.ts

@@ -0,0 +1,16 @@
+/** An incremental SHA-256: update with each piece in order, then digest once. */
+export declare class Sha256 {
+    private readonly h;
+    private readonly w;
+    private readonly block;
+    private filled;
+    private bytes;
+    private done;
+    update(data: Uint8Array): this;
+    /** The 32-byte digest. The hash can't be updated after. */
+    digest(): Uint8Array;
+    /** The digest as lowercase hex. */
+    hexDigest(): string;
+    private compress;
+}
+//# sourceMappingURL=sha256.d.ts.map

package/dist/types/direct/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../../../src/direct/sha256.ts"],"names":[],"mappings":"AAmBA,iFAAiF;AACjF,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,IAAI,CAAS;IAErB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAqB9B,2DAA2D;IAC3D,MAAM,IAAI,UAAU;IAiBpB,mCAAmC;IACnC,SAAS,IAAI,MAAM;IAInB,OAAO,CAAC,QAAQ;CA+CjB"}

package/dist/types/direct/tws1.d.ts

@@ -0,0 +1,157 @@
+import { DataIntegrityError } from '../errors.js';
+/**
+ * Data that failed a check (errors.ts): reason is "segment", "commitment", "needle", "truncated" or "format" here.
+ * Re-exported, as this module threw its own before the read surface landed.
+ */
+export { DataIntegrityError };
+export declare const HEADER_SIZE = 72;
+export declare const SEGMENT_SIZE: number;
+export declare const TAG_SIZE = 16;
+export declare const STORED_SEGMENT_SIZE: number;
+export declare const KEY_SIZE = 32;
+export declare const SALT_SIZE = 32;
+/** The most segments one object may have (the index is a uint32). */
+export declare const MAX_SEGMENTS: number;
+export declare const NEEDLE_HEADER_SIZE = 64;
+/**
+ * Where fresh salts come from. Only tests replace salt, to reproduce the shared vectors; the public functions take no
+ * salt, so callers can't choose one, and a test checks that no file under src assigns it. Shared state is safe here,
+ * unlike for HPKE's ephemeral keys (hpke.sealWith): every object has a fresh random data key, so even a fixed salt
+ * never repeats a segment key and nonce.
+ */
+export declare const testHooks: {
+    salt: () => Uint8Array;
+};
+/** A fresh 32-byte data key; the caller zeroes it (fill(0)) when done. */
+export declare function newDataKey(): Uint8Array;
+/** How many segments an object of this size has: at least one, since an empty object is one empty last segment. */
+export declare function segments(plaintextSize: number): number;
+/** The size of the stored object, from the plaintext's size alone. */
+export declare function storedSize(plaintextSize: number): number;
+/** The keys derived from a data key and an object's header. */
+export declare class Keys {
+    private readonly aad;
+    private readonly commit;
+    private readonly aead;
+    private readonly prefix;
+    private constructor();
+    /**
+     * The keys for an object's header. Given only the header's first 40 bytes, the derived commitment completes it (how
+     * a new header is made); a full header's commitment is not checked here, openHeader does that.
+     */
+    static derive(dek: Uint8Array, header: Uint8Array): Promise<Keys>;
+    /** The object's 72-byte header (a copy). */
+    get header(): Uint8Array;
+    /** The commitment derived from the data key (a copy); in a valid header it is the last 32 bytes. */
+    get commitment(): Uint8Array;
+    /** Segment index's nonce: the prefix, the index (uint32 big-endian) and 1 on the last segment, else 0. */
+    nonce(index: number, last: boolean): Uint8Array;
+    /** One segment, sealed: its ciphertext and tag. */
+    seal(index: number, last: boolean, plain: Uint8Array): Promise<Uint8Array>;
+    /** One segment, opened; DataIntegrityError if it fails authentication. */
+    open(index: number, last: boolean, sealed: Uint8Array): Promise<Uint8Array>;
+}
+/** A new object's header, with a fresh salt and its commitment, and the keys to seal its segments. */
+export declare function newHeader(dek: Uint8Array): Promise<{
+    header: Uint8Array;
+    keys: Keys;
+}>;
+/** The keys for an existing object, after checking its header and, in constant time, that the data key matches its commitment. */
+export declare function openHeader(dek: Uint8Array, header: Uint8Array): Promise<Keys>;
+/** A whole object, encrypted with a fresh salt. */
+export declare function encrypt(dek: Uint8Array, plaintext: Uint8Array): Promise<Uint8Array>;
+/** A whole object, decrypted and verified. */
+export declare function decrypt(dek: Uint8Array, stored: Uint8Array): Promise<Uint8Array>;
+/** The stored bytes that hold a plaintext range: whole segments only. */
+export interface Range {
+    /** The index of the first segment to fetch. */
+    readonly firstSegment: number;
+    /** Where that segment starts in the stored object. */
+    readonly storedOffset: number;
+    /** How many stored bytes to fetch. */
+    readonly storedLength: number;
+    /** Plaintext bytes to drop from the front of the decrypted segments. */
+    readonly skip: number;
+    /** Plaintext bytes to return after skip. */
+    readonly length: number;
+}
+/** The segments holding plaintext bytes [offset, offset + length). */
+export declare function locate(plaintextSize: number, offset: number, length: number): Range;
+/** A located range, decrypted from exactly its stored bytes. */
+export declare function decryptRange(keys: Keys, plaintextSize: number, r: Range, stored: Uint8Array): Promise<Uint8Array>;
+/** [stored offset, stored length] of segment index. */
+export declare function segmentAt(plaintextSize: number, index: number): [offset: number, length: number];
+/** One part of a large object: where its plaintext and stored bytes are. */
+export interface Part {
+    readonly number: number;
+    readonly plainFirst: number;
+    readonly plainSize: number;
+    /** Part 1 starts at 0, with the header. */
+    readonly storedFirst: number;
+    readonly storedSize: number;
+}
+/** How many parts parts() makes, without making them. */
+export declare function partCount(plaintextSize: number, partSize: number): number;
+/** Every part of an object of plaintextSize cut into partSize plaintext bytes (a multiple of 64 KiB). */
+export declare function parts(plaintextSize: number, partSize: number): Part[];
+/** Part number (1-based) of the layout parts() makes. */
+export declare function partOf(plaintextSize: number, partSize: number, number: number): Part;
+/** One large object's encryption, sealed a part at a time in any order. */
+export declare class Stream {
+    readonly size: number;
+    readonly partSize: number;
+    readonly partCount: number;
+    private readonly keys;
+    private readonly segmentCount;
+    constructor(keys: Keys, size: number, partSize: number);
+    /** A new stream, with a fresh header. */
+    static create(dek: Uint8Array, size: number, partSize: number): Promise<Stream>;
+    /** The stream an earlier header began, to seal its remaining parts. */
+    static resume(dek: Uint8Array, header: Uint8Array, size: number, partSize: number): Promise<Stream>;
+    /** The object's header (a copy): the start of part 1, kept to seal any part again after a restart. */
+    get header(): Uint8Array;
+    /** Part number, sealed from exactly its plaintext. */
+    sealPart(number: number, plain: Uint8Array): Promise<Uint8Array>;
+}
+/**
+ * A stream whose size isn't known yet (section 22.1, E2 b), sealed a part at a time in any order. Every part but the
+ * last holds exactly partSize plaintext bytes; the last holds 1 to partSize and is sealed as the last, so its final
+ * segment carries the last flag. For the same key, header and plaintext it seals exactly the bytes Stream would, so
+ * storage and readers can't tell the two apart.
+ */
+export declare class OpenStream {
+    readonly partSize: number;
+    private readonly keys;
+    constructor(keys: Keys, partSize: number);
+    /** A new stream, with a fresh header. */
+    static create(dek: Uint8Array, partSize: number): Promise<OpenStream>;
+    /** The object's header (a copy): the start of part 1. */
+    get header(): Uint8Array;
+    /** Part number, sealed from exactly its plaintext; last says it ends the stream. */
+    sealPart(number: number, plain: Uint8Array, last: boolean): Promise<Uint8Array>;
+    /** sealPart as its pieces (the header first on part 1), so a caller can drop the plaintext before joining them. */
+    sealSegments(number: number, plain: Uint8Array, last: boolean): Promise<Uint8Array[]>;
+}
+/** The 64-byte header that precedes an object in a pack. */
+export declare function needle(objectId: Uint8Array, stored: Uint8Array): Promise<Uint8Array>;
+/** A pack being built: each object's needle, then its stored bytes. */
+export declare class Pack {
+    private readonly chunks;
+    private length;
+    /** The pack's size so far, in bytes. */
+    get size(): number;
+    /**
+     * Appends an object's needle and a copy of its stored bytes; returns the offset of the stored bytes in the pack.
+     * Appends may overlap: each lands whole, and returns where its own bytes are.
+     */
+    appendNeedle(objectId: Uint8Array, stored: Uint8Array): Promise<number>;
+    /** The whole pack (await every appendNeedle first). */
+    bytes(): Uint8Array;
+}
+/** Checks that a needle names this object, its size and its stored bytes' SHA-256; DataIntegrityError otherwise. */
+export declare function checkNeedle(head: Uint8Array, objectId: Uint8Array, stored: Uint8Array): Promise<void>;
+/** The stored bytes (a copy) of the object at offset in a pack, after checking its needle. */
+export declare function readNeedle(pack: Uint8Array, offset: number, objectId: Uint8Array, size: number): Promise<Uint8Array>;
+/** A UUID string's 16 bytes (hyphens, braces and a urn:uuid: prefix are allowed). */
+export declare function objectIdBytes(objectId: string): Uint8Array;
+//# sourceMappingURL=tws1.d.ts.map

package/dist/types/direct/tws1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tws1.d.ts","sourceRoot":"","sources":["../../../src/direct/tws1.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,kBAAkB,EAAe,MAAM,cAAc,CAAC;AAG/D;;;GAGG;AACH,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B,eAAO,MAAM,WAAW,KAAK,CAAC;AAC9B,eAAO,MAAM,YAAY,QAAU,CAAC;AACpC,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,mBAAmB,QAA0B,CAAC;AAC3D,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,qEAAqE;AACrE,eAAO,MAAM,YAAY,QAAc,CAAC;AACxC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAUrC;;;;;GAKG;AACH,eAAO,MAAM,SAAS;gBACV,UAAU;CACrB,CAAC;AAEF,0EAA0E;AAC1E,wBAAgB,UAAU,IAAI,UAAU,CAEvC;AAED,mHAAmH;AACnH,wBAAgB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAExD;AAID,+DAA+D;AAC/D,qBAAa,IAAI;IACf,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IAEpC,OAAO;IAOP;;;OAGG;WACU,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBvE,4CAA4C;IAC5C,IAAI,MAAM,IAAI,UAAU,CAEvB;IAED,oGAAoG;IACpG,IAAI,UAAU,IAAI,UAAU,CAE3B;IAED,0GAA0G;IAC1G,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,UAAU;IAS/C,mDAAmD;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAKhF,0EAA0E;IACpE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;CAUlF;AAED,sGAAsG;AACtG,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC,CAY5F;AAED,kIAAkI;AAClI,wBAAsB,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAWnF;AAID,mDAAmD;AACnD,wBAAsB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAWzF;AAED,8CAA8C;AAC9C,wBAAsB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAYtF;AAID,yEAAyE;AACzE,MAAM,WAAW,KAAK;IACpB,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sCAAsC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,sEAAsE;AACtE,wBAAgB,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAUnF;AAED,gEAAgE;AAChE,wBAAsB,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAevH;AAED,uDAAuD;AACvD,wBAAgB,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAMhG;AAID,4EAA4E;AAC5E,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAuBD,yDAAyD;AACzD,wBAAgB,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGzE;AAED,yGAAyG;AACzG,wBAAgB,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,CAKrE;AAED,yDAAyD;AACzD,wBAAgB,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAIpF;AAED,2EAA2E;AAC3E,qBAAa,MAAM;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAQtD,yCAAyC;WAC5B,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMrF,uEAAuE;WAC1D,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKzG,sGAAsG;IACtG,IAAI,MAAM,IAAI,UAAU,CAEvB;IAED,sDAAsD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;CAMvE;AAED;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;gBAEhB,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM;IAMxC,yCAAyC;WAC5B,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAM3E,yDAAyD;IACzD,IAAI,MAAM,IAAI,UAAU,CAEvB;IAED,oFAAoF;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAIrF,mHAAmH;IAC7G,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CAW5F;AAkBD,4DAA4D;AAC5D,wBAAsB,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAQ1F;AAED,uEAAuE;AACvE,qBAAa,IAAI;IACf,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,MAAM,CAAK;IAEnB,wCAAwC;IACxC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;OAGG;IACG,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAS7E,uDAAuD;IACvD,KAAK,IAAI,UAAU;CAGpB;AAED,oHAAoH;AACpH,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3G;AAED,8FAA8F;AAC9F,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAQ1H;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAU1D"}