@xescure/keeta-utils 0.0.0-stage → 0.1.1

package/dist/identity/drivers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drivers.js","sourceRoot":"","sources":["../../src/identity/drivers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAInD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAU,CAAC;AAmFrE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;AAGpE,MAAM,CAAC,MAAM,gBAAgB,GAAc,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAiB,WAAW,CAAC;AAC7D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAyD;IACjF,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;IAChC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;IACtC,MAAM,EAAE,CAAC,QAAQ,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAiB;IAClD,OAAM,CAAC;QACN,UAAU,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,mBAAmB,CAAC;QAC5C,QAAQ;QACR,WAAW,EAAE,KAAK;QAClB,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,SAAS;KACxB,CAAC,CAAC;AACJ,CAAC;AAOD,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,gBAAgB,GAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAEjF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA0B;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,QAAQ,EAAE,uCAAuC,CAAC,CAAC,CAAC;YACxF,SAAS;QACV,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACrD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB,IAAI,yBAAyB,CAAC,CAAC,CAAC;YACjG,CAAC;QACF,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,QAAQ,EAAE,kCAAkC,CAAC,CAAC,CAAC;YACrF,SAAS;QACV,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAElC,OAAM,CAAC;QACN,MAAM,EAAE,UAAS,MAAM;YACtB,OAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE;YACR,OAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/identity/env.d.ts

@@ -0,0 +1,7 @@
+import type { SourceDriver } from './drivers.js';
+/**
+ * `env:NAME`: the key bytes are the value of the variable `NAME` in the
+ * environment given to the loader. An empty variable is unset.
+ */
+export declare function environmentSource(): SourceDriver;
+//# sourceMappingURL=env.d.ts.map

package/dist/identity/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/identity/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,cAAc,CAAC;AAMhE;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,YAAY,CAqBhD"}

package/dist/identity/env.js

@@ -0,0 +1,29 @@
+import { issue, KeyConfigError } from './error.js';
+const variableNamePattern = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * `env:NAME`: the key bytes are the value of the variable `NAME` in the
+ * environment given to the loader. An empty variable is unset.
+ */
+export function environmentSource() {
+    return ({
+        kind: 'source',
+        scheme: 'env',
+        checkBody: function (body) {
+            if (!variableNamePattern.test(body)) {
+                return ('the body must be an environment variable name, [A-Za-z_][A-Za-z0-9_]*');
+            }
+            return (undefined);
+        },
+        readsVariables: function (ref) {
+            return ([ref.body]);
+        },
+        read: async function (ref, context) {
+            const value = context.env[ref.body];
+            if (value === undefined || value === '') {
+                throw (new KeyConfigError([issue('READ_FAILED', `env:${ref.body}`, `${ref.body} is not set`)]));
+            }
+            return (new TextEncoder().encode(value));
+        }
+    });
+}
+//# sourceMappingURL=env.js.map

package/dist/identity/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/identity/env.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGnD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAChC,OAAM,CAAC;QACN,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,UAAS,IAAY;YAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAM,CAAC,uEAAuE,CAAC,CAAC;YACjF,CAAC;YACD,OAAM,CAAC,SAAS,CAAC,CAAC;QACnB,CAAC;QACD,cAAc,EAAE,UAAS,GAAiB;YACzC,OAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,EAAE,KAAK,WAAU,GAAiB,EAAE,OAAsB;YAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACzC,MAAK,CAAC,IAAI,cAAc,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAChG,CAAC;YACD,OAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/identity/environment.d.ts

@@ -0,0 +1,14 @@
+import type { Environment } from './drivers.js';
+import type { ConfigText, KeySpec } from './schema.js';
+/**
+ * An actor `anchor` reads `ANCHOR_SIGNER`, `ANCHOR_ACCOUNT`,
+ * `ANCHOR_FEE_PAYER`, `ANCHOR_FEE_ACCOUNT` and `ANCHOR_NETWORK`, as far as it
+ * declares them; any other role reads its prefix alone. Only declared
+ * variables are read, and an empty one is unset.
+ */
+export declare function decodeEnvironment(spec: KeySpec, env: Environment): ConfigText;
+/**
+ * The inverse of `decodeEnvironment`.
+ */
+export declare function encodeEnvironment(spec: KeySpec, config: ConfigText): Record<string, string>;
+//# sourceMappingURL=environment.d.ts.map

package/dist/identity/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/identity/environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEvD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,UAAU,CAS7E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS3F"}

package/dist/identity/environment.js

@@ -0,0 +1,31 @@
+import { fieldsOf } from './schema.js';
+/**
+ * An actor `anchor` reads `ANCHOR_SIGNER`, `ANCHOR_ACCOUNT`,
+ * `ANCHOR_FEE_PAYER`, `ANCHOR_FEE_ACCOUNT` and `ANCHOR_NETWORK`, as far as it
+ * declares them; any other role reads its prefix alone. Only declared
+ * variables are read, and an empty one is unset.
+ */
+export function decodeEnvironment(spec, env) {
+    const config = {};
+    for (const field of fieldsOf(spec)) {
+        const value = env[field.variable];
+        if (value !== undefined && value !== '') {
+            config[field.path] = value;
+        }
+    }
+    return (config);
+}
+/**
+ * The inverse of `decodeEnvironment`.
+ */
+export function encodeEnvironment(spec, config) {
+    const env = {};
+    for (const field of fieldsOf(spec)) {
+        const value = config[field.path];
+        if (value !== undefined) {
+            env[field.variable] = value;
+        }
+    }
+    return (env);
+}
+//# sourceMappingURL=environment.js.map

package/dist/identity/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/identity/environment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,GAAgB;IAChE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC5B,CAAC;IACF,CAAC;IACD,OAAM,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,MAAkB;IAClE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IACD,OAAM,CAAC,GAAG,CAAC,CAAC;AACb,CAAC"}

package/dist/identity/error.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The base of the library's errors. Errors are recognized by a type ID rather
+ * than by `instanceof`, which fails when two copies of the library are loaded.
+ */
+export declare abstract class TypedError extends Error {
+    protected constructor(typeID: string, message: string);
+    protected static hasTypeID(value: unknown, typeID: string): boolean;
+}
+export type KeyConfigIssueCode = 'KEYREF_SYNTAX' | 'UNKNOWN_SCHEME' | 'UNKNOWN_PARAM' | 'REPEATED_PARAM' | 'INVALID_PARAM' | 'PARAM_NOT_ALLOWED' | 'INVALID_BODY' | 'INVALID_ADDRESS' | 'KEY_MATERIAL_AS_REF' | 'DUPLICATE_DRIVER' | 'INVALID_DRIVER' | 'INVALID_SCHEMA' | 'SIGNER_IN_PUBLIC_POSITION' | 'MATERIAL_IN_PUBLIC_POSITION' | 'SIGNER_REQUIRED' | 'EXPECT_REQUIRED' | 'INTERACTIVE_FORBIDDEN' | 'PURPOSE_UNSUPPORTED' | 'ALGORITHM_UNSUPPORTED' | 'EXPECT_MISMATCH' | 'UNKNOWN_VARIABLE' | 'MISSING_KEY' | 'INVALID_NETWORK' | 'INVALID_CONTENT' | 'READ_FAILED' | 'NO_CREDENTIALS_DIRECTORY';
+export type KeyConfigErrorCode = KeyConfigIssueCode | 'INVALID_KEY_CONFIGURATION';
+/**
+ * One problem with a key configuration. `location` is the variable (or ref)
+ * the value came from and `role` the schema path, such as `anchor.signer`.
+ * No field ever contains a value that failed to parse or any key material.
+ */
+export interface KeyConfigIssue {
+    readonly code: KeyConfigIssueCode;
+    readonly location: string;
+    readonly role?: string;
+    readonly message: string;
+}
+export declare class KeyConfigError extends TypedError {
+    #private;
+    readonly name = "KeyConfigError";
+    readonly code: KeyConfigErrorCode;
+    readonly issues: readonly KeyConfigIssue[];
+    constructor(issues: readonly [KeyConfigIssue, ...KeyConfigIssue[]]);
+    static isInstance(value: unknown): value is KeyConfigError;
+    /**
+     * Throws one error that carries every issue, if there are any.
+     */
+    static throwIfAny(issues: readonly KeyConfigIssue[]): void;
+}
+export declare function issue(code: KeyConfigIssueCode, location: string, message: string, role?: string): KeyConfigIssue;
+//# sourceMappingURL=error.d.ts.map

package/dist/identity/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/identity/error.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,8BAAsB,UAAW,SAAQ,KAAK;IAC7C,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAGpD;IAED,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAKlE;CACD;AAED,MAAM,MAAM,kBAAkB,GAC3B,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,mBAAmB,GACnB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,2BAA2B,GAC3B,6BAA6B,GAC7B,iBAAiB,GACjB,iBAAiB,GACjB,uBAAuB,GACvB,qBAAqB,GACrB,uBAAuB,GACvB,iBAAiB,GACjB,kBAAkB,GAClB,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,aAAa,GACb,0BAA0B,CAAC;AAE9B,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,GAAG,2BAA2B,CAAC;AAElF;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,cAAe,SAAQ,UAAU;;IAG7C,SAAkB,IAAI,oBAAoB;IAC1C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAE3C,YAAY,MAAM,EAAE,SAAS,CAAC,cAAc,EAAE,GAAG,cAAc,EAAE,CAAC,EAQjE;IAED,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAEzD;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI,CAKzD;CAeD;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAKhH"}

package/dist/identity/error.js

@@ -0,0 +1,65 @@
+const typeIDProperty = Symbol.for('@xescure/keeta-utils/typeID');
+/**
+ * The base of the library's errors. Errors are recognized by a type ID rather
+ * than by `instanceof`, which fails when two copies of the library are loaded.
+ */
+export class TypedError extends Error {
+    constructor(typeID, message) {
+        super(message);
+        Object.defineProperty(this, typeIDProperty, { value: typeID });
+    }
+    static hasTypeID(value, typeID) {
+        if (typeof value !== 'object' || value === null) {
+            return (false);
+        }
+        return (Reflect.get(value, typeIDProperty) === typeID);
+    }
+}
+export class KeyConfigError extends TypedError {
+    static #typeID = 'KeyConfigError:2b0f6c1e-4f7a-4d1b-9a0e-6f3c8d5e7a21';
+    name = 'KeyConfigError';
+    code;
+    issues;
+    constructor(issues) {
+        super(KeyConfigError.#typeID, KeyConfigError.#describe(issues));
+        this.issues = issues;
+        if (issues.length === 1) {
+            this.code = issues[0].code;
+        }
+        else {
+            this.code = 'INVALID_KEY_CONFIGURATION';
+        }
+    }
+    static isInstance(value) {
+        return (TypedError.hasTypeID(value, KeyConfigError.#typeID));
+    }
+    /**
+     * Throws one error that carries every issue, if there are any.
+     */
+    static throwIfAny(issues) {
+        const [first, ...rest] = issues;
+        if (first !== undefined) {
+            throw (new KeyConfigError([first, ...rest]));
+        }
+    }
+    static #describe(issues) {
+        const lines = issues.map(function (found) {
+            let where = found.location;
+            if (found.role !== undefined) {
+                where = `${found.location} (${found.role})`;
+            }
+            return (`${where}: ${found.message} [${found.code}]`);
+        });
+        if (lines.length === 1) {
+            return (lines.join(''));
+        }
+        return (`${lines.length} key configuration errors:\n${lines.join('\n')}`);
+    }
+}
+export function issue(code, location, message, role) {
+    if (role === undefined) {
+        return ({ code, location, message });
+    }
+    return ({ code, location, role, message });
+}
+//# sourceMappingURL=error.js.map

package/dist/identity/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/identity/error.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAAkB,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEhF;;;GAGG;AACH,MAAM,OAAgB,UAAW,SAAQ,KAAK;IAC7C,YAAsB,MAAc,EAAE,OAAe;QACpD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAES,MAAM,CAAC,SAAS,CAAC,KAAc,EAAE,MAAc;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjD,OAAM,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;QACD,OAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,MAAM,CAAC,CAAC;IACvD,CAAC;CACD;AA4CD,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC7C,MAAM,CAAU,OAAO,GAAG,qDAAqD,CAAC;IAE9D,IAAI,GAAG,gBAAgB,CAAC;IACjC,IAAI,CAAqB;IACzB,MAAM,CAA4B;IAE3C,YAAY,MAAsD;QACjE,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACzC,CAAC;IACF,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,KAAc;QAC/B,OAAM,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,MAAiC;QAClD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAK,CAAC,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAAiC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,UAAS,KAAK;YACtC,IAAI,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,KAAK,GAAG,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC;YAC7C,CAAC;YACD,OAAM,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,OAAM,CAAC,GAAG,KAAK,CAAC,MAAM,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;CACD;AAED,MAAM,UAAU,KAAK,CAAC,IAAwB,EAAE,QAAgB,EAAE,OAAe,EAAE,IAAa;IAC/F,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,OAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3C,CAAC"}

package/dist/identity/files.d.ts

@@ -0,0 +1,13 @@
+import type { SourceDriver } from './drivers.js';
+/**
+ * `file:/absolute/path`: the key bytes are the contents of a file, such as a
+ * Docker or Kubernetes secret. `file:///x` is accepted and written `file:/x`.
+ */
+export declare function fileSource(): SourceDriver;
+/**
+ * `cred:NAME`: the key bytes are the systemd credential `NAME`, the file
+ * `$CREDENTIALS_DIRECTORY/NAME` that `LoadCredential=` provides. Without
+ * that directory there is no fallback.
+ */
+export declare function credentialSource(): SourceDriver;
+//# sourceMappingURL=files.d.ts.map

package/dist/identity/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/identity/files.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,cAAc,CAAC;AA0ChE;;;GAGG;AACH,wBAAgB,UAAU,IAAI,YAAY,CAuBzC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAsB/C"}

package/dist/identity/files.js

@@ -0,0 +1,93 @@
+import { join } from 'node:path';
+import { issue, KeyConfigError } from './error.js';
+const credentialNamePattern = /^[A-Za-z0-9_-][A-Za-z0-9_.-]*$/;
+const credentialsDirectory = 'CREDENTIALS_DIRECTORY';
+function fail(location, message, code = 'READ_FAILED') {
+    throw (new KeyConfigError([issue(code, location, message)]));
+}
+/**
+ * Reads a whole file; a failure names the location and the file, never its
+ * content.
+ */
+async function readKeyFile(path, location, context) {
+    let bytes;
+    try {
+        bytes = await context.readFile(path);
+    }
+    catch (error) {
+        if (typeof error === 'object' && error !== null && Reflect.get(error, 'code') === 'ENOENT') {
+            return (fail(location, `${path} does not exist`));
+        }
+        return (fail(location, `${path} cannot be read`));
+    }
+    if (bytes.length === 0) {
+        return (fail(location, `${path} is empty`));
+    }
+    return (bytes);
+}
+/**
+ * The absolute path of a `file:` body: `/x`, or `///x` with an empty host.
+ */
+function filePath(body) {
+    if (body.startsWith('///')) {
+        return (body.slice(2));
+    }
+    return (body);
+}
+/**
+ * `file:/absolute/path`: the key bytes are the contents of a file, such as a
+ * Docker or Kubernetes secret. `file:///x` is accepted and written `file:/x`.
+ */
+export function fileSource() {
+    return ({
+        kind: 'source',
+        scheme: 'file',
+        checkBody: function (body) {
+            const path = filePath(body);
+            if (!path.startsWith('/') || path.startsWith('//')) {
+                return ('the body must be an absolute path, /x or ///x');
+            }
+            const segments = path.slice(1).split('/');
+            const plain = segments.every(function (segment) {
+                return (segment !== '' && segment !== '.' && segment !== '..');
+            });
+            if (!plain) {
+                return ('the path must not have empty, "." or ".." segments, or a trailing "/"');
+            }
+            return (undefined);
+        },
+        canonicalBody: filePath,
+        read: async function (ref, context) {
+            return (readKeyFile(ref.body, `file:${ref.body}`, context));
+        }
+    });
+}
+/**
+ * `cred:NAME`: the key bytes are the systemd credential `NAME`, the file
+ * `$CREDENTIALS_DIRECTORY/NAME` that `LoadCredential=` provides. Without
+ * that directory there is no fallback.
+ */
+export function credentialSource() {
+    return ({
+        kind: 'source',
+        scheme: 'cred',
+        checkBody: function (body) {
+            if (body.length > 255 || !credentialNamePattern.test(body) || body.includes('..')) {
+                return ('the body must be a credential file name, [A-Za-z0-9_.-]+, without a leading "." or "..", at most 255 characters');
+            }
+            return (undefined);
+        },
+        readsVariables: function () {
+            return ([credentialsDirectory]);
+        },
+        read: async function (ref, context) {
+            const location = `cred:${ref.body}`;
+            const directory = context.env[credentialsDirectory];
+            if (directory === undefined || directory === '') {
+                return (fail(location, `${credentialsDirectory} is not set: the process is not running with systemd credentials`, 'NO_CREDENTIALS_DIRECTORY'));
+            }
+            return (readKeyFile(join(directory, ref.body), location, context));
+        }
+    });
+}
+//# sourceMappingURL=files.js.map

package/dist/identity/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/identity/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAInD,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAErD,SAAS,IAAI,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAI,GAAuB,aAAa;IACxF,MAAK,CAAC,IAAI,cAAc,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAsB;IAChF,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5F,OAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAM,CAAC,KAAK,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,OAAM,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACzB,OAAM,CAAC;QACN,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,UAAS,IAAY;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,OAAM,CAAC,+CAA+C,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAS,OAAO;gBAC5C,OAAM,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAM,CAAC,uEAAuE,CAAC,CAAC;YACjF,CAAC;YACD,OAAM,CAAC,SAAS,CAAC,CAAC;QACnB,CAAC;QACD,aAAa,EAAE,QAAQ;QACvB,IAAI,EAAE,KAAK,WAAU,GAAiB,EAAE,OAAsB;YAC7D,OAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5D,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC/B,OAAM,CAAC;QACN,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,UAAS,IAAY;YAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnF,OAAM,CAAC,iHAAiH,CAAC,CAAC;YAC3H,CAAC;YACD,OAAM,CAAC,SAAS,CAAC,CAAC;QACnB,CAAC;QACD,cAAc,EAAE;YACf,OAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,EAAE,KAAK,WAAU,GAAiB,EAAE,OAAsB;YAC7D,MAAM,QAAQ,GAAG,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACpD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACjD,OAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,oBAAoB,kEAAkE,EAAE,0BAA0B,CAAC,CAAC,CAAC;YAC/I,CAAC;YACD,OAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,17 @@
+export { isNetwork, keyAlgorithms, parseAddress } from './account.js';
+export type { Account, GenericAccount, KeyAlgorithm, Network } from './account.js';
+export { assertNever } from './assert-never.js';
+export { createDriverRegistry, defaultIndex, defaultKeyAlgorithm, defaultKeyFormat, formatParams, keyFormats, localCapabilities, purposes } from './drivers.js';
+export type { Driver, DriverContext, DriverRegistry, Environment, KeyFormat, KeyParamName, ParamSchema, ParamValidator, Purpose, SignerCapabilities, SignerDriver, SourceDriver } from './drivers.js';
+export { environmentSource } from './env.js';
+export { credentialSource, fileSource } from './files.js';
+export { decodeEnvironment, encodeEnvironment } from './environment.js';
+export { KeyConfigError, TypedError } from './error.js';
+export type { KeyConfigErrorCode, KeyConfigIssue, KeyConfigIssueCode } from './error.js';
+export { formatKeyRef, maximumIndex, parseKeyRef, sharedParamNames } from './keyref.js';
+export type { AddressKeyRef, DriverKeyRef, KeyRef } from './keyref.js';
+export { createFeeBlockGenerator, loadKeys } from './load.js';
+export type { FeeBlockClient, GenerateFeeBlock, LoadKeysOptions } from './load.js';
+export { actor, defineKeys, network, publicAccount, screamingSnakeCase, signer } from './schema.js';
+export type { ActorBlock, ActorOptions, Block, ConfigText, DefineKeysOptions, FeePayer, KeySpec, Loaded, LoadedActor, LoadedBlock, NetworkBlock, PublicAccountBlock, Roles, SignerBlock, SignerConstraints, SignerOptions } from './schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAChK,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtM,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxD,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACxF,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9D,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACpG,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/identity/index.js

@@ -0,0 +1,11 @@
+export { isNetwork, keyAlgorithms, parseAddress } from './account.js';
+export { assertNever } from './assert-never.js';
+export { createDriverRegistry, defaultIndex, defaultKeyAlgorithm, defaultKeyFormat, formatParams, keyFormats, localCapabilities, purposes } from './drivers.js';
+export { environmentSource } from './env.js';
+export { credentialSource, fileSource } from './files.js';
+export { decodeEnvironment, encodeEnvironment } from './environment.js';
+export { KeyConfigError, TypedError } from './error.js';
+export { formatKeyRef, maximumIndex, parseKeyRef, sharedParamNames } from './keyref.js';
+export { createFeeBlockGenerator, loadKeys } from './load.js';
+export { actor, defineKeys, network, publicAccount, screamingSnakeCase, signer } from './schema.js';
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEhK,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAExF,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE9D,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/identity/keyref.d.ts

@@ -0,0 +1,55 @@
+import type { KeyAlgorithm } from './account.js';
+import type { DriverRegistry, KeyFormat } from './drivers.js';
+import type { KeyConfigIssue } from './error.js';
+/**
+ * A `keeta_` address: a public key or an identifier, never a signer.
+ */
+export interface AddressKeyRef {
+    readonly kind: 'address';
+    readonly address: string;
+}
+/**
+ * `scheme:body#params`. Only the params written in the ref are present; a
+ * missing one takes its default when the key is loaded.
+ */
+export interface DriverKeyRef {
+    readonly kind: 'driver';
+    readonly scheme: string;
+    readonly body: string;
+    readonly format?: KeyFormat;
+    readonly index?: number;
+    readonly alg?: KeyAlgorithm;
+    readonly expect?: string;
+    /**
+     * The driver's own params.
+     */
+    readonly params: Readonly<Record<string, string>>;
+}
+export type KeyRef = AddressKeyRef | DriverKeyRef;
+export declare const sharedParamNames: readonly ['format', 'index', 'alg', 'expect'];
+export declare const maximumIndex: number;
+type Issues = readonly [KeyConfigIssue, ...KeyConfigIssue[]];
+export type KeyRefReading = {
+    readonly ref: KeyRef;
+    readonly issues: readonly [];
+} | {
+    readonly ref: undefined;
+    readonly issues: Issues;
+};
+/**
+ * Parses a ref and reports every problem with it. No issue ever contains the
+ * text, or any part of it: a value that fails to parse may be a secret.
+ */
+export declare function readKeyRef(text: string, registry: DriverRegistry, location: string, role?: string): KeyRefReading;
+/**
+ * Parses a ref, throwing a `KeyConfigError` with every problem found.
+ */
+export declare function parseKeyRef(text: string, registry: DriverRegistry, location?: string): KeyRef;
+/**
+ * The canonical form: the body as written, then the params present in the
+ * order format, index, alg, expect, then the driver's own params by name,
+ * encoded by `URLSearchParams`.
+ */
+export declare function formatKeyRef(ref: KeyRef): string;
+export {};
+//# sourceMappingURL=keyref.d.ts.map

package/dist/identity/keyref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyref.d.ts","sourceRoot":"","sources":["../../src/identity/keyref.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAU,cAAc,EAAE,SAAS,EAAgB,MAAM,cAAc,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClD;AAED,MAAM,MAAM,MAAM,GAAG,aAAa,GAAG,YAAY,CAAC;AAElD,eAAO,MAAM,gBAAgB,YAAI,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAC9E,eAAO,MAAM,YAAY,EAAE,MAAoB,CAAC;AAQhD,KAAK,MAAM,GAAG,SAAS,CAAC,cAAc,EAAE,GAAG,cAAc,EAAE,CAAC,CAAC;AAC7D,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1I;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAoEjH;AAmGD;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,GAAE,MAAwB,GAAG,MAAM,CAM9G;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmBhD"}