attaform 0.20.2 → 0.21.1

package/dist/chunks/multi-tab-sync.cjs

@@ -0,0 +1,367 @@
+'use strict';
+
+const injectWizard = require('../shared/attaform.ClXwitZj.cjs');
+const paths = require('../shared/attaform.D32WwKk6.cjs');
+
+const PROTOCOL_VERSION = 1;
+const JOIN_COLLECTION_WINDOW_MS = 50;
+const SNAPSHOT_TIMEOUT_MS = 200;
+const MAX_LEADER_ATTEMPTS = 3;
+const SNAPSHOT_RESPONSE_MIN_INTERVAL_MS = 500;
+function isFileLikeValue(value) {
+  if (typeof File !== "undefined" && value instanceof File) return true;
+  if (typeof Blob !== "undefined" && value instanceof Blob) return true;
+  return false;
+}
+function isInboundShapeAcceptable(schema, path, value) {
+  if (isFileLikeValue(value)) return false;
+  let kind;
+  if (Array.isArray(value)) {
+    kind = "array";
+  } else if (value !== null && typeof value === "object" && injectWizard.isPlainRecord(value)) {
+    kind = "object";
+  } else {
+    kind = injectWizard.slimKindOf(value);
+  }
+  const accepted = schema.getSlimPrimitiveTypesAtPath(path);
+  if (!accepted.has(kind)) return false;
+  if (Array.isArray(value)) {
+    for (let i = 0; i < value.length; i++) {
+      if (!isInboundShapeAcceptable(schema, [...path, i], value[i])) return false;
+    }
+    return true;
+  }
+  if (injectWizard.isPlainRecord(value)) {
+    for (const key of Object.keys(value)) {
+      if (!isInboundShapeAcceptable(schema, [...path, key], value[key])) return false;
+    }
+    return true;
+  }
+  return true;
+}
+function diffBlankPaths(prev, curr) {
+  const added = [];
+  const removed = [];
+  const prevSet = new Set(prev);
+  for (const k of curr) if (!prevSet.has(k)) added.push(k);
+  for (const k of prev) if (!curr.has(k)) removed.push(k);
+  return { added, removed };
+}
+function stripSensitivePathsDeep(value, pathSoFar, isSensitivePath) {
+  if (isFileLikeValue(value)) return void 0;
+  if (value === null || typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    return value.map((item, i) => stripSensitivePathsDeep(item, [...pathSoFar, i], isSensitivePath));
+  }
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null) return value;
+  const out = {};
+  const src = value;
+  for (const key of Object.keys(src)) {
+    const childPath = [...pathSoFar, key];
+    if (isSensitivePath(childPath)) {
+      injectWizard.safeAssign(out, key, void 0);
+      continue;
+    }
+    injectWizard.safeAssign(out, key, stripSensitivePathsDeep(src[key], childPath, isSensitivePath));
+  }
+  return out;
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isPatchArray(value) {
+  return Array.isArray(value) && value.every(
+    (p) => p !== null && typeof p === "object" && Array.isArray(p.path)
+  );
+}
+function isValidSyncMessage(data) {
+  if (data === null || typeof data !== "object") return false;
+  const m = data;
+  if (m["v"] !== PROTOCOL_VERSION) return false;
+  if (typeof m["senderId"] !== "string") return false;
+  if (typeof m["kind"] !== "string") return false;
+  switch (m["kind"]) {
+    case "hello":
+    case "announce":
+      return true;
+    case "requestSnapshot":
+      return typeof m["targetId"] === "string";
+    case "snapshot":
+      return isStringArray(m["blankPaths"]) && "form" in m;
+    case "patches":
+      return isPatchArray(m["formPatches"]) && isStringArray(m["blankPathsAdded"]) && isStringArray(m["blankPathsRemoved"]);
+    default:
+      return false;
+  }
+}
+function generateSenderId() {
+  try {
+    return globalThis.crypto.randomUUID();
+  } catch {
+    return `atta-${Math.random().toString(36).slice(2)}-${Date.now().toString(36)}`;
+  }
+}
+function createMultiTabSyncModule(state, channelName, options) {
+  if (typeof BroadcastChannel === "undefined") {
+    return {
+      dispose: () => void 0,
+      lifecycle: () => "established",
+      senderId: "",
+      channelName
+    };
+  }
+  let channel;
+  try {
+    channel = new BroadcastChannel(channelName);
+  } catch {
+    return {
+      dispose: () => void 0,
+      lifecycle: () => "established",
+      senderId: "",
+      channelName
+    };
+  }
+  const senderId = generateSenderId();
+  let lifecycle = "joining";
+  let disposed = false;
+  const peerIds = /* @__PURE__ */ new Set();
+  const lastSnapshotResponseAt = /* @__PURE__ */ new Map();
+  let joinCollectionTimer = null;
+  let snapshotTimeoutTimer = null;
+  let leaderAttempts = 0;
+  let prior = {
+    form: injectWizard.structuralSnapshot(state.form.value),
+    blankPathsSnapshot: [...state.blankPaths]
+  };
+  function safePost(msg) {
+    if (disposed) return;
+    try {
+      channel.postMessage(msg);
+    } catch {
+    }
+  }
+  function refreshPrior() {
+    prior = {
+      form: injectWizard.structuralSnapshot(state.form.value),
+      blankPathsSnapshot: [...state.blankPaths]
+    };
+  }
+  function isPathLocallySuppressed(path) {
+    if (options.isSensitivePath(path)) return true;
+    const { key } = paths.canonicalizePath([...path]);
+    if (options.noSyncPaths.has(key)) return true;
+    return false;
+  }
+  function postPatches() {
+    if (lifecycle !== "established") return;
+    const next = injectWizard.structuralSnapshot(state.form.value);
+    const rawPatches = [];
+    injectWizard.diffAndApply(prior.form, next, [], (p) => rawPatches.push(p));
+    const safePatches = [];
+    for (const p of rawPatches) {
+      if (isPathLocallySuppressed(p.path)) continue;
+      if ("value" in p && isFileLikeValue(p.value)) continue;
+      safePatches.push(p);
+    }
+    const { added, removed } = diffBlankPaths(prior.blankPathsSnapshot, state.blankPaths);
+    if (safePatches.length === 0 && added.length === 0 && removed.length === 0) {
+      prior = { form: next, blankPathsSnapshot: [...state.blankPaths] };
+      return;
+    }
+    safePost({
+      v: PROTOCOL_VERSION,
+      kind: "patches",
+      senderId,
+      formPatches: safePatches,
+      blankPathsAdded: added,
+      blankPathsRemoved: removed
+    });
+    prior = { form: next, blankPathsSnapshot: [...state.blankPaths] };
+  }
+  const unsubscribeChange = state.onFormChange((_next, meta) => {
+    if (disposed) return;
+    if (lifecycle !== "established") return;
+    if (meta?.crossTab === true) return;
+    if (meta?.hydration === true) {
+      refreshPrior();
+      return;
+    }
+    postPatches();
+  });
+  function applyIncomingForm(form, blankPaths) {
+    state.blankPaths.clear();
+    for (const k of blankPaths) state.blankPaths.add(k);
+    state.applyFormReplacement(form, { crossTab: true, persist: false });
+    refreshPrior();
+  }
+  function handlePatches(msg) {
+    if (lifecycle !== "established") return;
+    const safePatches = [];
+    for (const p of msg.formPatches) {
+      if (!Array.isArray(p.path)) continue;
+      if (isPathLocallySuppressed(p.path)) continue;
+      if ("value" in p && !isInboundShapeAcceptable(state.schema, p.path, p.value)) {
+        continue;
+      }
+      safePatches.push(p);
+    }
+    const safeBlankAdded = [];
+    for (const k of msg.blankPathsAdded) {
+      const segs = paths.canonicalizePath(k).segments;
+      if (isPathLocallySuppressed(segs)) continue;
+      safeBlankAdded.push(k);
+    }
+    const safeBlankRemoved = [];
+    for (const k of msg.blankPathsRemoved) {
+      const segs = paths.canonicalizePath(k).segments;
+      if (isPathLocallySuppressed(segs)) continue;
+      safeBlankRemoved.push(k);
+    }
+    if (safePatches.length === 0 && safeBlankAdded.length === 0 && safeBlankRemoved.length === 0) {
+      return;
+    }
+    const candidate = injectWizard.applyPatchesForward(state.form.value, safePatches);
+    try {
+      options.validateForm(state.form.value);
+      try {
+        options.validateForm(candidate);
+      } catch {
+        return;
+      }
+    } catch {
+    }
+    const nextBlankPaths = new Set(state.blankPaths);
+    for (const k of safeBlankRemoved) nextBlankPaths.delete(k);
+    for (const k of safeBlankAdded) nextBlankPaths.add(k);
+    applyIncomingForm(candidate, [...nextBlankPaths]);
+  }
+  function handleSnapshot(msg) {
+    if (lifecycle !== "joining") return;
+    if (!isInboundShapeAcceptable(state.schema, [], msg.form)) return;
+    if (snapshotTimeoutTimer !== null) {
+      clearTimeout(snapshotTimeoutTimer);
+      snapshotTimeoutTimer = null;
+    }
+    if (joinCollectionTimer !== null) {
+      clearTimeout(joinCollectionTimer);
+      joinCollectionTimer = null;
+    }
+    applyIncomingForm(msg.form, msg.blankPaths);
+    lifecycle = "established";
+    peerIds.clear();
+  }
+  function respondToHello() {
+    safePost({ v: PROTOCOL_VERSION, kind: "announce", senderId });
+  }
+  function respondToSnapshotRequest(requesterId) {
+    const now = Date.now();
+    const last = lastSnapshotResponseAt.get(requesterId);
+    if (last !== void 0 && now - last < SNAPSHOT_RESPONSE_MIN_INTERVAL_MS) return;
+    lastSnapshotResponseAt.set(requesterId, now);
+    const scrubbedForm = stripSensitivePathsDeep(state.form.value, [], options.isSensitivePath);
+    safePost({
+      v: PROTOCOL_VERSION,
+      kind: "snapshot",
+      senderId,
+      form: scrubbedForm,
+      blankPaths: [...state.blankPaths]
+    });
+  }
+  channel.onmessage = (event) => {
+    if (disposed) return;
+    try {
+      const data = event.data;
+      if (!isValidSyncMessage(data)) return;
+      const msg = data;
+      if (msg.senderId === senderId) return;
+      switch (msg.kind) {
+        case "hello":
+          if (lifecycle !== "established") return;
+          respondToHello();
+          break;
+        case "announce":
+          if (lifecycle === "joining") peerIds.add(msg.senderId);
+          break;
+        case "requestSnapshot":
+          if (lifecycle !== "established") return;
+          if (msg.targetId !== senderId) return;
+          respondToSnapshotRequest(msg.senderId);
+          break;
+        case "snapshot":
+          handleSnapshot(msg);
+          break;
+        case "patches":
+          handlePatches(msg);
+          break;
+      }
+    } catch {
+    }
+  };
+  function electLeaderAndRequest() {
+    if (disposed) return;
+    if (peerIds.size === 0) {
+      lifecycle = "established";
+      refreshPrior();
+      return;
+    }
+    const sorted = [...peerIds].sort();
+    const leaderId = sorted[0];
+    peerIds.delete(leaderId);
+    leaderAttempts++;
+    safePost({
+      v: PROTOCOL_VERSION,
+      kind: "requestSnapshot",
+      senderId,
+      targetId: leaderId
+    });
+    snapshotTimeoutTimer = setTimeout(() => {
+      snapshotTimeoutTimer = null;
+      if (disposed) return;
+      if (lifecycle === "established") return;
+      if (leaderAttempts >= MAX_LEADER_ATTEMPTS || peerIds.size === 0) {
+        lifecycle = "established";
+        refreshPrior();
+        return;
+      }
+      electLeaderAndRequest();
+    }, SNAPSHOT_TIMEOUT_MS);
+  }
+  function joinFlow() {
+    safePost({ v: PROTOCOL_VERSION, kind: "hello", senderId });
+    joinCollectionTimer = setTimeout(() => {
+      joinCollectionTimer = null;
+      if (disposed) return;
+      if (lifecycle === "established") return;
+      electLeaderAndRequest();
+    }, JOIN_COLLECTION_WINDOW_MS);
+  }
+  joinFlow();
+  return {
+    dispose: () => {
+      if (disposed) return;
+      disposed = true;
+      if (joinCollectionTimer !== null) {
+        clearTimeout(joinCollectionTimer);
+        joinCollectionTimer = null;
+      }
+      if (snapshotTimeoutTimer !== null) {
+        clearTimeout(snapshotTimeoutTimer);
+        snapshotTimeoutTimer = null;
+      }
+      unsubscribeChange();
+      try {
+        channel.close();
+      } catch {
+      }
+    },
+    lifecycle: () => lifecycle,
+    senderId,
+    channelName
+  };
+}
+const MULTI_TAB_SYNC_MODULE_KEY = "multiTabSync";
+
+exports.MULTI_TAB_SYNC_MODULE_KEY = MULTI_TAB_SYNC_MODULE_KEY;
+exports.createMultiTabSyncModule = createMultiTabSyncModule;
+//# sourceMappingURL=multi-tab-sync.cjs.map

package/dist/chunks/multi-tab-sync.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-tab-sync.cjs","sources":["../../src/runtime/core/multi-tab-sync.ts"],"sourcesContent":["import type { AbstractSchema, SlimPrimitiveKind } from '../types/types-api'\nimport type { GenericForm } from '../types/types-core'\nimport type { FormStore } from './create-form-store'\nimport { applyPatchesForward, diffAndApply, structuralSnapshot, type Patch } from './diff-apply'\nimport { isPlainRecord } from './path-walker'\nimport { canonicalizePath, type Path, type PathKey } from './paths'\nimport { safeAssign } from './safe-assign'\nimport { slimKindOf } from './slim-primitive-gate'\n\n/**\n * Cross-tab form-state synchronisation over a `BroadcastChannel`.\n *\n * **Identity model.** Two `useForm({ key, schema })` callsites in\n * same-origin tabs join the same channel by deriving its name from the\n * consumer-supplied `formKey` + the schema fingerprint. Tabs auto-pair\n * without an opt-in flag; the only switch is `multiTab: false` to\n * disable. Anonymous (auto-keyed) forms skip the module entirely (no\n * shared identity → no channel to join).\n *\n * **Handshake.** A joining tab posts `{kind: 'hello'}`. Every\n * established tab responds with `{kind: 'announce', senderId}` (UUID\n * only — cheap). The joining tab waits a short collection window\n * (~50ms), picks the lowest-sorted `senderId` as leader, and posts\n * `{kind: 'requestSnapshot', targetId: leaderId}`. Only the leader\n * replies with `{kind: 'snapshot', form, blankPaths}`. Bandwidth on\n * N-tab join is N tiny announces + 1 snapshot — vs. the naive\n * \"everyone responds with a full snapshot\" which would be O(N) full\n * snapshots.\n *\n * **Steady state.** Every local mutation fires an `onFormChange`\n * listener that diffs against a per-module prior snapshot and posts\n * `{kind: 'patches', formPatches, blankPathsAdded, blankPathsRemoved}`\n * over the channel. Receivers apply via `applyPatchesForward` +\n * `state.applyFormReplacement(merged, { crossTab: true, persist: false })`.\n *\n * **Defenses (see the recipe's Security section for the threat model).**\n * 1. **`senderId` echo drop.** Per-module UUID stamped on every\n *    outbound message; receivers drop messages whose `senderId` ===\n *    own. Handles intra-tab self-loops (two `useForm({key:'x'})` in\n *    one tab) and any UA echo behaviour.\n * 2. **Protocol versioning.** Every message carries `v: 1`; receivers\n *    drop unknown versions silently. Lets us evolve the wire format\n *    without silently corrupting older tabs running stale bundles.\n * 3. **Sensitive-path filtering.** Outbound strips patches at paths\n *    matching `options.isSensitivePath`; inbound REJECTS the same\n *    paths (defense in depth — the wire is never trusted, even though\n *    the originating tab \"should have\" stripped them).\n * 4. **Path-segment safety.** Inbound rejects patches containing\n *    `__proto__` / `constructor` / `prototype` — prototype-pollution\n *    defense before `applyPatchesForward` touches the form.\n * 5. **Post-apply schema validate + rollback.** After applying\n *    surviving patches, the caller's `validateForm` callback runs; on\n *    throw the entire message is dropped and the form state stays\n *    where it was.\n * 6. **Per-register opt-out (`noSyncPaths`).** Paths the consumer\n *    marked `register('x', { multiTab: false })` are stripped on\n *    outbound AND rejected on inbound — symmetric tab-local\n *    behaviour for selected fields.\n *\n * **History stays local.** Inbound applies set `meta.crossTab: true`;\n * the history listener updates its diff anchor but does NOT push a\n * delta. `undo()` walks the local user's intent, not a sibling tab's.\n */\n\nexport type MultiTabSyncModule = {\n  /** Tear down the channel + outbound listener. */\n  dispose(): void\n  /**\n   * Lifecycle observable for tests. `'joining'` during the\n   * mount-time handshake collection window; `'established'` once a\n   * snapshot has arrived (or the join timed out into solo-tab mode).\n   */\n  readonly lifecycle: () => 'joining' | 'established'\n  /**\n   * The module's UUID. Stamped on every outbound message; receivers\n   * drop messages with their own `senderId`. Exposed for tests that\n   * need to verify echo-drop or fabricate hostile messages.\n   */\n  readonly senderId: string\n  /** The channel name this module is bound to. Exposed for tests. */\n  readonly channelName: string\n}\n\nexport type MultiTabSyncOptions<F> = {\n  /**\n   * Sensitive-path predicate threaded from the FormStore. Patches at\n   * matching paths are stripped from outbound AND rejected on inbound\n   * — defense in depth.\n   */\n  readonly isSensitivePath: (path: Path | PathKey | string) => boolean\n  /**\n   * Per-register opt-out registry — paths the consumer marked\n   * `{ multiTab: false }` are tab-local in BOTH directions. Empty by\n   * default; populated by Phase 7's register hook.\n   */\n  readonly noSyncPaths: ReadonlySet<PathKey>\n  /**\n   * Post-apply schema validation. Called by the inbound handler on\n   * the candidate form value AFTER patches apply but BEFORE the\n   * candidate replaces live state. MUST throw on validation failure;\n   * the inbound handler catches and rolls back.\n   *\n   * Adapter implementations should call\n   * `state.schema.validateAtPath(form, undefined, { sync: true })` and\n   * throw on any non-success-sync result (or skip validation entirely\n   * for async-only schemas — see the recipe for rationale).\n   */\n  readonly validateForm: (form: F) => void\n}\n\n/** Wire-format version. Bumps require coordinated deploys. */\nconst PROTOCOL_VERSION = 1 as const\n\n/** Collection window for `announce` messages during the join flow. */\nconst JOIN_COLLECTION_WINDOW_MS = 50\n/** Timeout per `requestSnapshot` attempt before falling back to next-lowest leader. */\nconst SNAPSHOT_TIMEOUT_MS = 200\n/** Max retries for leader-election before giving up and proceeding solo. */\nconst MAX_LEADER_ATTEMPTS = 3\n/**\n * Minimum gap between snapshot replies to the SAME requesting sender.\n * Each reply is a full-form deep-clone + sensitive-scrub + serialise, so\n * an unthrottled responder is a CPU-amplification target for a hostile\n * same-origin tab that spams `requestSnapshot`. A legitimate joiner\n * sends a leader exactly one request (a lost reply retries the\n * next-lowest leader, not the same one), so this never drops real\n * traffic. Comfortably above `SNAPSHOT_TIMEOUT_MS` for that reason.\n */\nconst SNAPSHOT_RESPONSE_MIN_INTERVAL_MS = 500\n\ntype SyncMessage<F> =\n  | { readonly v: 1; readonly kind: 'hello'; readonly senderId: string }\n  | { readonly v: 1; readonly kind: 'announce'; readonly senderId: string }\n  | {\n      readonly v: 1\n      readonly kind: 'requestSnapshot'\n      readonly senderId: string\n      readonly targetId: string\n    }\n  | {\n      readonly v: 1\n      readonly kind: 'snapshot'\n      readonly senderId: string\n      readonly form: F\n      readonly blankPaths: readonly PathKey[]\n    }\n  | {\n      readonly v: 1\n      readonly kind: 'patches'\n      readonly senderId: string\n      readonly formPatches: readonly Patch[]\n      readonly blankPathsAdded: readonly PathKey[]\n      readonly blankPathsRemoved: readonly PathKey[]\n    }\n\ntype Lifecycle = 'joining' | 'established'\n\ntype SnapshotState<F> = {\n  readonly form: F\n  readonly blankPathsSnapshot: ReadonlyArray<PathKey>\n}\n\n/**\n * `File` and `Blob` values are never sent or accepted over the\n * cross-tab channel. Two reasons:\n *\n * 1. **Security.** File blobs are user-private content (passport scans,\n *    tax forms, ID documents, attachment uploads). If a sibling tab is\n *    open on the same origin (shared computer, forgotten popup, hostile\n *    XSS-opened window), an unconditional broadcast lets it capture the\n *    selected File before the user even submits. The default-deny stance\n *    is the only safe one; a dev who genuinely needs cross-tab file\n *    sharing serialises to a string (base64, blob URL) at a different\n *    field and accepts the explicit trade-off.\n * 2. **Performance.** `structuredClone` of a multi-megabyte File is\n *    measurable on the originator (synchronous clone) and the receiver\n *    (synchronous deserialise). The channel is for low-cost coordination\n *    signals, not bulk content transfer.\n *\n * This predicate gates both directions: outbound traffic strips\n * File-valued patches and File leaves on snapshot scrubbing, and\n * inbound traffic rejects File-valued patches / File leaves on\n * snapshot apply (defense in depth, in case a peer bundles an older\n * version that didn't strip).\n */\nfunction isFileLikeValue(value: unknown): boolean {\n  if (typeof File !== 'undefined' && value instanceof File) return true\n  if (typeof Blob !== 'undefined' && value instanceof Blob) return true\n  return false\n}\n\n/**\n * Walk an inbound value tree and verify every leaf's primitive kind\n * matches the schema's slim accept-set at its sub-path. Returns\n * `false` on the first mismatch.\n *\n * Mirrors the local-write slim-primitive gate (`isSlimPrimitiveValid`)\n * but without its dev-warn side effect: an inbound rejection is a\n * sibling-tab integrity issue, not a local-write bug, so the warn\n * message (\"writing X to Y\") would mislead the dev about the origin.\n * Cross-tab rejection is a silent drop; the channel converges on\n * the next valid message from another peer.\n *\n * An empty accept-set (unresolvable path or `never`-typed schema\n * leaf) rejects every kind, so a path that doesn't exist in the\n * schema at all also fails here.\n */\nfunction isInboundShapeAcceptable(\n  schema: AbstractSchema<unknown, unknown>,\n  path: Path,\n  value: unknown\n): boolean {\n  // File / Blob values never traverse the channel. Even if a hostile\n  // or older peer sent one, we drop it before any apply runs.\n  if (isFileLikeValue(value)) return false\n  let kind: SlimPrimitiveKind\n  if (Array.isArray(value)) {\n    kind = 'array'\n  } else if (value !== null && typeof value === 'object' && isPlainRecord(value)) {\n    kind = 'object'\n  } else {\n    kind = slimKindOf(value)\n  }\n  const accepted = schema.getSlimPrimitiveTypesAtPath(path)\n  if (!accepted.has(kind)) return false\n  if (Array.isArray(value)) {\n    for (let i = 0; i < value.length; i++) {\n      if (!isInboundShapeAcceptable(schema, [...path, i], value[i])) return false\n    }\n    return true\n  }\n  if (isPlainRecord(value)) {\n    for (const key of Object.keys(value)) {\n      if (!isInboundShapeAcceptable(schema, [...path, key], value[key])) return false\n    }\n    return true\n  }\n  return true\n}\n\nfunction diffBlankPaths(\n  prev: ReadonlyArray<PathKey>,\n  curr: ReadonlySet<PathKey>\n): { added: PathKey[]; removed: PathKey[] } {\n  const added: PathKey[] = []\n  const removed: PathKey[] = []\n  const prevSet = new Set<PathKey>(prev)\n  for (const k of curr) if (!prevSet.has(k)) added.push(k)\n  for (const k of prev) if (!curr.has(k)) removed.push(k)\n  return { added, removed }\n}\n\n/**\n * Deep-clone `value` while substituting any leaf whose enclosing path\n * matches `isSensitivePath` with `undefined`. Used to scrub\n * snapshots before posting them — even on the originating tab, a\n * snapshot in response to `hello` should not carry sensitive values\n * to fresh-mount siblings.\n */\nfunction stripSensitivePathsDeep(\n  value: unknown,\n  pathSoFar: Path,\n  isSensitivePath: (p: Path) => boolean\n): unknown {\n  // File / Blob values are unconditionally stripped from cross-tab\n  // traffic regardless of the path's sensitive-name match. See the\n  // `isFileLikeValue` rationale above.\n  if (isFileLikeValue(value)) return undefined\n  if (value === null || typeof value !== 'object') return value\n  if (Array.isArray(value)) {\n    return value.map((item, i) => stripSensitivePathsDeep(item, [...pathSoFar, i], isSensitivePath))\n  }\n  const proto = Object.getPrototypeOf(value)\n  if (proto !== Object.prototype && proto !== null) return value\n  // Scrub container mirrors `structuralSnapshot`'s allocator. The\n  // outgoing snapshot is passed through `structuredClone` by\n  // `BroadcastChannel.postMessage` before crossing the tab boundary\n  // (which would discard the prototype anyway), but matching the rest\n  // of the runtime's `Object.prototype` shape keeps the in-process\n  // shape consistent. `safeAssign` lands a literal `__proto__` key as\n  // an own data property regardless of the source.\n  const out: Record<string, unknown> = {}\n  const src = value as Record<string, unknown>\n  for (const key of Object.keys(src)) {\n    const childPath = [...pathSoFar, key]\n    if (isSensitivePath(childPath)) {\n      safeAssign(out, key, undefined)\n      continue\n    }\n    safeAssign(out, key, stripSensitivePathsDeep(src[key], childPath, isSensitivePath))\n  }\n  return out\n}\n\n/** Every element is a string (the on-wire form of a `PathKey`). */\nfunction isStringArray(value: unknown): boolean {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/** Every element is a patch-shaped object with an array `path`. */\nfunction isPatchArray(value: unknown): boolean {\n  return (\n    Array.isArray(value) &&\n    value.every(\n      (p) => p !== null && typeof p === 'object' && Array.isArray((p as { path?: unknown }).path)\n    )\n  )\n}\n\n/**\n * Type-guard for incoming messages. Validates the structural shape\n * before dispatch so a hostile sender can't crash the listener with\n * garbage. Rejects messages missing `v` / `kind` / `senderId`, and\n * validates the ELEMENT types of the array payloads — a blank-path\n * array of non-strings (`[null]`) or a patch array of non-patches would\n * otherwise survive the bare `Array.isArray` check and trip a\n * downstream walk (`canonicalizePath(null)` throws). The `onmessage`\n * try/catch is the backstop; this rejects the common shape at the door.\n */\nfunction isValidSyncMessage(data: unknown): data is SyncMessage<unknown> {\n  if (data === null || typeof data !== 'object') return false\n  const m = data as Record<string, unknown>\n  if (m['v'] !== PROTOCOL_VERSION) return false\n  if (typeof m['senderId'] !== 'string') return false\n  if (typeof m['kind'] !== 'string') return false\n  switch (m['kind']) {\n    case 'hello':\n    case 'announce':\n      return true\n    case 'requestSnapshot':\n      return typeof m['targetId'] === 'string'\n    case 'snapshot':\n      return isStringArray(m['blankPaths']) && 'form' in m\n    case 'patches':\n      return (\n        isPatchArray(m['formPatches']) &&\n        isStringArray(m['blankPathsAdded']) &&\n        isStringArray(m['blankPathsRemoved'])\n      )\n    default:\n      return false\n  }\n}\n\nfunction generateSenderId(): string {\n  try {\n    // Available in evergreen browsers and Node 19+. Library code calls\n    // it elsewhere (e.g. instanceId allocation), so the dependency is\n    // already on the runtime surface.\n    return globalThis.crypto.randomUUID()\n  } catch {\n    // Pathological fallback for ancient environments — collision\n    // resistance is reduced but the module still functions; same-tab\n    // dedup is the only consumer of senderId equality and intra-tab\n    // collisions are vanishingly unlikely.\n    return `atta-${Math.random().toString(36).slice(2)}-${Date.now().toString(36)}`\n  }\n}\n\n/**\n * Construct a cross-tab sync module bound to `channelName`. Returns a\n * stub no-op module if `BroadcastChannel` is unavailable in the\n * runtime — callers should already have gated on availability +\n * `window.isSecureContext`, but the guard makes the module safe to\n * instantiate from any environment.\n */\nexport function createMultiTabSyncModule<F extends GenericForm>(\n  state: FormStore<F, GenericForm>,\n  channelName: string,\n  options: MultiTabSyncOptions<F>\n): MultiTabSyncModule {\n  if (typeof BroadcastChannel === 'undefined') {\n    return {\n      dispose: () => undefined,\n      lifecycle: () => 'established',\n      senderId: '',\n      channelName,\n    }\n  }\n\n  let channel: BroadcastChannel\n  try {\n    channel = new BroadcastChannel(channelName)\n  } catch {\n    return {\n      dispose: () => undefined,\n      lifecycle: () => 'established',\n      senderId: '',\n      channelName,\n    }\n  }\n\n  const senderId = generateSenderId()\n  let lifecycle: Lifecycle = 'joining'\n  let disposed = false\n\n  // Ephemeral roster for the join flow. Populated by `announce`\n  // messages during the collection window; consumed by the leader\n  // election. Cleared once the joining tab transitions to\n  // `'established'` (no further use case for the set).\n  const peerIds = new Set<string>()\n  // Last snapshot-reply timestamp per requesting sender — throttles the\n  // expensive scrub+serialise against a spamming peer (SEC-4).\n  const lastSnapshotResponseAt = new Map<string, number>()\n  let joinCollectionTimer: ReturnType<typeof setTimeout> | null = null\n  let snapshotTimeoutTimer: ReturnType<typeof setTimeout> | null = null\n  let leaderAttempts = 0\n\n  // Per-module prior anchor for outbound diffs. Refreshed after every\n  // posted `patches` message AND after every accepted inbound apply\n  // (so the next local diff is against post-apply state, not the\n  // stale pre-apply form). `structuralSnapshot` walks the object +\n  // array spine and leaves non-descendable leaves (BigInt, Date, Map,\n  // Set, class instances) by reference: fine as a diff anchor, and\n  // BroadcastChannel's `postMessage` structuredClone handles those leaf\n  // types when the diff'd patches go over the wire.\n  let prior: SnapshotState<F> = {\n    form: structuralSnapshot(state.form.value),\n    blankPathsSnapshot: [...state.blankPaths],\n  }\n\n  function safePost(msg: SyncMessage<F>): void {\n    if (disposed) return\n    try {\n      channel.postMessage(msg)\n    } catch {\n      // Channel closed under our feet (e.g., tab navigating away\n      // while a postMessage queues). Drop silently.\n    }\n  }\n\n  function refreshPrior(): void {\n    prior = {\n      form: structuralSnapshot(state.form.value),\n      blankPathsSnapshot: [...state.blankPaths],\n    }\n  }\n\n  function isPathLocallySuppressed(path: Path): boolean {\n    // The dangerous-segment guard the SEC-2 audit added here is now\n    // load-bearing on `setAtPath`'s proto-less intermediates AND\n    // `structuralSnapshot`'s proto-less containers. With both in place\n    // the patch-apply pipeline writes `__proto__` / `constructor` /\n    // `prototype` segments as ordinary own-property pairs that never\n    // walk into `Object.prototype`, so the gate is no longer needed\n    // and dropping it lets a legit schema field literally named\n    // `prototype` sync cross-tab like every other field.\n    if (options.isSensitivePath(path)) return true\n    const { key } = canonicalizePath([...path])\n    if (options.noSyncPaths.has(key)) return true\n    return false\n  }\n\n  function postPatches(): void {\n    if (lifecycle !== 'established') return\n    const next = structuralSnapshot(state.form.value)\n    const rawPatches: Patch[] = []\n    diffAndApply(prior.form, next, [], (p) => rawPatches.push(p))\n    const safePatches: Patch[] = []\n    for (const p of rawPatches) {\n      if (isPathLocallySuppressed(p.path)) continue\n      // Strip File / Blob-valued patches before they reach the channel.\n      // Same default-deny rationale as the snapshot-side scrub above.\n      if ('value' in p && isFileLikeValue((p as { value: unknown }).value)) continue\n      safePatches.push(p)\n    }\n    const { added, removed } = diffBlankPaths(prior.blankPathsSnapshot, state.blankPaths)\n    // Suppress noisy zero-delta posts (e.g., the form changed only at\n    // a sensitive path — after filtering, nothing remains).\n    if (safePatches.length === 0 && added.length === 0 && removed.length === 0) {\n      prior = { form: next, blankPathsSnapshot: [...state.blankPaths] }\n      return\n    }\n    safePost({\n      v: PROTOCOL_VERSION,\n      kind: 'patches',\n      senderId,\n      formPatches: safePatches,\n      blankPathsAdded: added,\n      blankPathsRemoved: removed,\n    })\n    prior = { form: next, blankPathsSnapshot: [...state.blankPaths] }\n  }\n\n  // Outbound: every local non-crossTab non-hydration mutation diffs\n  // against `prior` and posts the resulting patches. Joining tabs\n  // suppress their own outbound traffic until they're established —\n  // otherwise they'd broadcast pre-handshake noise.\n  const unsubscribeChange = state.onFormChange((_next, meta) => {\n    if (disposed) return\n    if (lifecycle !== 'established') return\n    if (meta?.crossTab === true) return\n    if (meta?.hydration === true) {\n      // Hydration realigned local state; refresh the diff anchor\n      // without posting. Siblings hydrate independently to the same\n      // value, so channel traffic would be wasted.\n      refreshPrior()\n      return\n    }\n    postPatches()\n  })\n\n  function applyIncomingForm(form: F, blankPaths: ReadonlyArray<PathKey>): void {\n    // Sync blank-paths set BEFORE applying the form value so the\n    // resulting `onFormChange` emission sees a coherent (form,\n    // blankPaths) pair. Listeners that read both during a single\n    // microtick (history, persistence, devtools) wouldn't observe\n    // mid-update divergence.\n    state.blankPaths.clear()\n    for (const k of blankPaths) state.blankPaths.add(k)\n    state.applyFormReplacement(form, { crossTab: true, persist: false })\n    refreshPrior()\n  }\n\n  function handlePatches(msg: SyncMessage<F> & { kind: 'patches' }): void {\n    if (lifecycle !== 'established') return\n    const safePatches: Patch[] = []\n    for (const p of msg.formPatches) {\n      if (!Array.isArray(p.path)) continue\n      if (isPathLocallySuppressed(p.path)) continue\n      // Slim-shape check on the patch's value at its path. A peer\n      // sending a number where the schema expects a string (whether\n      // via a buggy bundle or a hostile tab) is rejected before the\n      // patch ever lands on the local store. Patches without a\n      // `value` field (e.g., `remove` ops) skip the check.\n      if (\n        'value' in p &&\n        !isInboundShapeAcceptable(state.schema, p.path, (p as { value: unknown }).value)\n      ) {\n        continue\n      }\n      safePatches.push(p)\n    }\n    // Filter blank-path deltas with the same predicate. A sensitive\n    // blank-path key shouldn't leak via the membership signal either.\n    const safeBlankAdded: PathKey[] = []\n    for (const k of msg.blankPathsAdded) {\n      const segs = canonicalizePath(k).segments\n      if (isPathLocallySuppressed(segs)) continue\n      safeBlankAdded.push(k)\n    }\n    const safeBlankRemoved: PathKey[] = []\n    for (const k of msg.blankPathsRemoved) {\n      const segs = canonicalizePath(k).segments\n      if (isPathLocallySuppressed(segs)) continue\n      safeBlankRemoved.push(k)\n    }\n    if (safePatches.length === 0 && safeBlankAdded.length === 0 && safeBlankRemoved.length === 0) {\n      return\n    }\n    const candidate = applyPatchesForward(state.form.value, safePatches) as F\n    // Post-apply schema validation runs ONLY if the pre-apply form\n    // was already valid — otherwise a form that mounts in an\n    // intentionally-invalid state (empty defaults that violate\n    // refinements, mid-edit field-array seeds) would reject every\n    // remote update. The local `validateOn` cycle surfaces any\n    // resulting errors on the receiver normally.\n    try {\n      options.validateForm(state.form.value)\n      try {\n        options.validateForm(candidate)\n      } catch {\n        // Patches would have invalidated a previously-valid form —\n        // rollback. The originating tab's mutation is dropped on\n        // this receiver; last-writer-wins re-converges on the next\n        // valid mutation.\n        return\n      }\n    } catch {\n      // Pre-apply form was already invalid; skip post-validation\n      // (no new attack surface — the form was already in an invalid\n      // state from the user's POV, the local validate cycle\n      // surfaces errors regardless of where the data came from).\n    }\n    const nextBlankPaths = new Set(state.blankPaths)\n    for (const k of safeBlankRemoved) nextBlankPaths.delete(k)\n    for (const k of safeBlankAdded) nextBlankPaths.add(k)\n    applyIncomingForm(candidate, [...nextBlankPaths])\n  }\n\n  function handleSnapshot(msg: SyncMessage<F> & { kind: 'snapshot' }): void {\n    if (lifecycle !== 'joining') return\n    // No deep-validate gate here. Snapshots carry the leader's live\n    // state, including mid-edit values that wouldn't parse cleanly yet\n    // (a half-typed email, a string still under its min length). Every\n    // peer in a shared channel holds the same in-progress state, so a\n    // deep-validate gate would force the joiner to drop every leader\n    // and fall back to solo mode with empty defaults, silently throwing\n    // away the live shared state the user is editing in another tab.\n    //\n    // The slim-shape check below IS still in force though: an inbound\n    // form whose primitive shape doesn't match the schema (e.g., a\n    // number where a string is expected) is structural garbage, not a\n    // mid-edit value, and would corrupt the local store.\n    if (!isInboundShapeAcceptable(state.schema, [], msg.form)) return\n    if (snapshotTimeoutTimer !== null) {\n      clearTimeout(snapshotTimeoutTimer)\n      snapshotTimeoutTimer = null\n    }\n    if (joinCollectionTimer !== null) {\n      clearTimeout(joinCollectionTimer)\n      joinCollectionTimer = null\n    }\n    applyIncomingForm(msg.form, msg.blankPaths)\n    lifecycle = 'established'\n    peerIds.clear()\n  }\n\n  function respondToHello(): void {\n    safePost({ v: PROTOCOL_VERSION, kind: 'announce', senderId })\n  }\n\n  function respondToSnapshotRequest(requesterId: string): void {\n    // Throttle per requester: a hostile tab that learned our senderId\n    // could otherwise spam requests and force a full scrub+serialise on\n    // each. A real joiner only asks once, so this is invisible to it.\n    const now = Date.now()\n    const last = lastSnapshotResponseAt.get(requesterId)\n    if (last !== undefined && now - last < SNAPSHOT_RESPONSE_MIN_INTERVAL_MS) return\n    lastSnapshotResponseAt.set(requesterId, now)\n    const scrubbedForm = stripSensitivePathsDeep(state.form.value, [], options.isSensitivePath) as F\n    safePost({\n      v: PROTOCOL_VERSION,\n      kind: 'snapshot',\n      senderId,\n      form: scrubbedForm,\n      blankPaths: [...state.blankPaths],\n    })\n  }\n\n  channel.onmessage = (event: MessageEvent): void => {\n    if (disposed) return\n    // Backstop: this callback is invoked by the platform, so any throw\n    // escapes uncaught into the consumer app. A same-origin hostile or\n    // stale-bundle peer can post a message that survives the shape guard\n    // yet trips a downstream walk. Drop it; the channel reconverges on\n    // the next valid message. The library never throws from a callback\n    // it owns.\n    try {\n      const data = event.data\n      if (!isValidSyncMessage(data)) return\n      const msg = data as SyncMessage<F>\n      // Echo drop — own messages NEVER apply (intra-tab self-loop +\n      // any UA echo behaviour).\n      if (msg.senderId === senderId) return\n      switch (msg.kind) {\n        case 'hello':\n          if (lifecycle !== 'established') return\n          respondToHello()\n          break\n        case 'announce':\n          if (lifecycle === 'joining') peerIds.add(msg.senderId)\n          break\n        case 'requestSnapshot':\n          if (lifecycle !== 'established') return\n          if (msg.targetId !== senderId) return\n          respondToSnapshotRequest(msg.senderId)\n          break\n        case 'snapshot':\n          handleSnapshot(msg)\n          break\n        case 'patches':\n          handlePatches(msg)\n          break\n      }\n    } catch {\n      // Malformed / hostile inbound message reached a throwing path.\n    }\n  }\n\n  function electLeaderAndRequest(): void {\n    if (disposed) return\n    if (peerIds.size === 0) {\n      // No siblings answered — proceed solo. Local hydration/defaults\n      // become this tab's baseline.\n      lifecycle = 'established'\n      refreshPrior()\n      return\n    }\n    const sorted = [...peerIds].sort()\n    const leaderId = sorted[0] as string\n    peerIds.delete(leaderId)\n    leaderAttempts++\n    safePost({\n      v: PROTOCOL_VERSION,\n      kind: 'requestSnapshot',\n      senderId,\n      targetId: leaderId,\n    })\n    snapshotTimeoutTimer = setTimeout(() => {\n      snapshotTimeoutTimer = null\n      if (disposed) return\n      if (lifecycle === 'established') return\n      if (leaderAttempts >= MAX_LEADER_ATTEMPTS || peerIds.size === 0) {\n        // Out of retries / out of candidates — fall back to solo.\n        lifecycle = 'established'\n        refreshPrior()\n        return\n      }\n      electLeaderAndRequest()\n    }, SNAPSHOT_TIMEOUT_MS)\n  }\n\n  function joinFlow(): void {\n    safePost({ v: PROTOCOL_VERSION, kind: 'hello', senderId })\n    joinCollectionTimer = setTimeout(() => {\n      joinCollectionTimer = null\n      if (disposed) return\n      if (lifecycle === 'established') return\n      electLeaderAndRequest()\n    }, JOIN_COLLECTION_WINDOW_MS)\n  }\n\n  joinFlow()\n\n  return {\n    dispose: () => {\n      if (disposed) return\n      disposed = true\n      if (joinCollectionTimer !== null) {\n        clearTimeout(joinCollectionTimer)\n        joinCollectionTimer = null\n      }\n      if (snapshotTimeoutTimer !== null) {\n        clearTimeout(snapshotTimeoutTimer)\n        snapshotTimeoutTimer = null\n      }\n      unsubscribeChange()\n      try {\n        channel.close()\n      } catch {\n        // No-op — close failures are non-recoverable.\n      }\n    },\n    lifecycle: () => lifecycle,\n    senderId,\n    channelName,\n  }\n}\n\n/** Shared module-cache key used by `state.modules.set/get`. */\nexport const MULTI_TAB_SYNC_MODULE_KEY = 'multiTabSync'\n"],"names":["isPlainRecord","slimKindOf","safeAssign","structuralSnapshot","canonicalizePath","diffAndApply","applyPatchesForward"],"mappings":";;;;;AA+GA,MAAM,gBAAA,GAAmB,CAAA;AAGzB,MAAM,yBAAA,GAA4B,EAAA;AAElC,MAAM,mBAAA,GAAsB,GAAA;AAE5B,MAAM,mBAAA,GAAsB,CAAA;AAU5B,MAAM,iCAAA,GAAoC,GAAA;AAyD1C,SAAS,gBAAgB,KAAA,EAAyB;AAChD,EAAA,IAAI,OAAO,IAAA,KAAS,WAAA,IAAe,KAAA,YAAiB,MAAM,OAAO,IAAA;AACjE,EAAA,IAAI,OAAO,IAAA,KAAS,WAAA,IAAe,KAAA,YAAiB,MAAM,OAAO,IAAA;AACjE,EAAA,OAAO,KAAA;AACT;AAkBA,SAAS,wBAAA,CACP,MAAA,EACA,IAAA,EACA,KAAA,EACS;AAGT,EAAA,IAAI,eAAA,CAAgB,KAAK,CAAA,EAAG,OAAO,KAAA;AACnC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,IAAA,GAAO,OAAA;AAAA,EACT,CAAA,MAAA,IAAW,UAAU,IAAA,IAAQ,OAAO,UAAU,QAAA,IAAYA,0BAAA,CAAc,KAAK,CAAA,EAAG;AAC9E,IAAA,IAAA,GAAO,QAAA;AAAA,EACT,CAAA,MAAO;AACL,IAAA,IAAA,GAAOC,wBAAW,KAAK,CAAA;AAAA,EACzB;AACA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,2BAAA,CAA4B,IAAI,CAAA;AACxD,EAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,IAAI,GAAG,OAAO,KAAA;AAChC,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,MAAA,IAAI,CAAC,wBAAA,CAAyB,MAAA,EAAQ,CAAC,GAAG,IAAA,EAAM,CAAC,CAAA,EAAG,KAAA,CAAM,CAAC,CAAC,CAAA,EAAG,OAAO,KAAA;AAAA,IACxE;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAID,0BAAA,CAAc,KAAK,CAAA,EAAG;AACxB,IAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAG;AACpC,MAAA,IAAI,CAAC,wBAAA,CAAyB,MAAA,EAAQ,CAAC,GAAG,IAAA,EAAM,GAAG,CAAA,EAAG,KAAA,CAAM,GAAG,CAAC,CAAA,EAAG,OAAO,KAAA;AAAA,IAC5E;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CACP,MACA,IAAA,EAC0C;AAC1C,EAAA,MAAM,QAAmB,EAAC;AAC1B,EAAA,MAAM,UAAqB,EAAC;AAC5B,EAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAa,IAAI,CAAA;AACrC,EAAA,KAAA,MAAW,CAAA,IAAK,IAAA,EAAM,IAAI,CAAC,OAAA,CAAQ,IAAI,CAAC,CAAA,EAAG,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA;AACvD,EAAA,KAAA,MAAW,CAAA,IAAK,IAAA,EAAM,IAAI,CAAC,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AACtD,EAAA,OAAO,EAAE,OAAO,OAAA,EAAQ;AAC1B;AASA,SAAS,uBAAA,CACP,KAAA,EACA,SAAA,EACA,eAAA,EACS;AAIT,EAAA,IAAI,eAAA,CAAgB,KAAK,CAAA,EAAG,OAAO,MAAA;AACnC,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,EAAM,CAAA,KAAM,uBAAA,CAAwB,IAAA,EAAM,CAAC,GAAG,SAAA,EAAW,CAAC,CAAA,EAAG,eAAe,CAAC,CAAA;AAAA,EACjG;AACA,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA;AACzC,EAAA,IAAI,KAAA,KAAU,MAAA,CAAO,SAAA,IAAa,KAAA,KAAU,MAAM,OAAO,KAAA;AAQzD,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,MAAM,GAAA,GAAM,KAAA;AACZ,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,IAAA,MAAM,SAAA,GAAY,CAAC,GAAG,SAAA,EAAW,GAAG,CAAA;AACpC,IAAA,IAAI,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC9B,MAAAE,uBAAA,CAAW,GAAA,EAAK,KAAK,MAAS,CAAA;AAC9B,MAAA;AAAA,IACF;AACA,IAAAA,uBAAA,CAAW,GAAA,EAAK,KAAK,uBAAA,CAAwB,GAAA,CAAI,GAAG,CAAA,EAAG,SAAA,EAAW,eAAe,CAAC,CAAA;AAAA,EACpF;AACA,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,cAAc,KAAA,EAAyB;AAC9C,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAGA,SAAS,aAAa,KAAA,EAAyB;AAC7C,EAAA,OACE,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IACnB,KAAA,CAAM,KAAA;AAAA,IACJ,CAAC,CAAA,KAAM,CAAA,KAAM,IAAA,IAAQ,OAAO,MAAM,QAAA,IAAY,KAAA,CAAM,OAAA,CAAS,CAAA,CAAyB,IAAI;AAAA,GAC5F;AAEJ;AAYA,SAAS,mBAAmB,IAAA,EAA6C;AACvE,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,UAAU,OAAO,KAAA;AACtD,EAAA,MAAM,CAAA,GAAI,IAAA;AACV,EAAA,IAAI,CAAA,CAAE,GAAG,CAAA,KAAM,gBAAA,EAAkB,OAAO,KAAA;AACxC,EAAA,IAAI,OAAO,CAAA,CAAE,UAAU,CAAA,KAAM,UAAU,OAAO,KAAA;AAC9C,EAAA,IAAI,OAAO,CAAA,CAAE,MAAM,CAAA,KAAM,UAAU,OAAO,KAAA;AAC1C,EAAA,QAAQ,CAAA,CAAE,MAAM,CAAA;AAAG,IACjB,KAAK,OAAA;AAAA,IACL,KAAK,UAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,iBAAA;AACH,MAAA,OAAO,OAAO,CAAA,CAAE,UAAU,CAAA,KAAM,QAAA;AAAA,IAClC,KAAK,UAAA;AACH,MAAA,OAAO,aAAA,CAAc,CAAA,CAAE,YAAY,CAAC,KAAK,MAAA,IAAU,CAAA;AAAA,IACrD,KAAK,SAAA;AACH,MAAA,OACE,YAAA,CAAa,CAAA,CAAE,aAAa,CAAC,CAAA,IAC7B,aAAA,CAAc,CAAA,CAAE,iBAAiB,CAAC,CAAA,IAClC,aAAA,CAAc,CAAA,CAAE,mBAAmB,CAAC,CAAA;AAAA,IAExC;AACE,MAAA,OAAO,KAAA;AAAA;AAEb;AAEA,SAAS,gBAAA,GAA2B;AAClC,EAAA,IAAI;AAIF,IAAA,OAAO,UAAA,CAAW,OAAO,UAAA,EAAW;AAAA,EACtC,CAAA,CAAA,MAAQ;AAKN,IAAA,OAAO,QAAQ,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,IAAI,IAAA,CAAK,GAAA,EAAI,CAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA;AAAA,EAC/E;AACF;AASO,SAAS,wBAAA,CACd,KAAA,EACA,WAAA,EACA,OAAA,EACoB;AACpB,EAAA,IAAI,OAAO,qBAAqB,WAAA,EAAa;AAC3C,IAAA,OAAO;AAAA,MACL,SAAS,MAAM,MAAA;AAAA,MACf,WAAW,MAAM,aAAA;AAAA,MACjB,QAAA,EAAU,EAAA;AAAA,MACV;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,IAAI,iBAAiB,WAAW,CAAA;AAAA,EAC5C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,SAAS,MAAM,MAAA;AAAA,MACf,WAAW,MAAM,aAAA;AAAA,MACjB,QAAA,EAAU,EAAA;AAAA,MACV;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,gBAAA,EAAiB;AAClC,EAAA,IAAI,SAAA,GAAuB,SAAA;AAC3B,EAAA,IAAI,QAAA,GAAW,KAAA;AAMf,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAGhC,EAAA,MAAM,sBAAA,uBAA6B,GAAA,EAAoB;AACvD,EAAA,IAAI,mBAAA,GAA4D,IAAA;AAChE,EAAA,IAAI,oBAAA,GAA6D,IAAA;AACjE,EAAA,IAAI,cAAA,GAAiB,CAAA;AAUrB,EAAA,IAAI,KAAA,GAA0B;AAAA,IAC5B,IAAA,EAAMC,+BAAA,CAAmB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAAA,IACzC,kBAAA,EAAoB,CAAC,GAAG,KAAA,CAAM,UAAU;AAAA,GAC1C;AAEA,EAAA,SAAS,SAAS,GAAA,EAA2B;AAC3C,IAAA,IAAI,QAAA,EAAU;AACd,IAAA,IAAI;AACF,MAAA,OAAA,CAAQ,YAAY,GAAG,CAAA;AAAA,IACzB,CAAA,CAAA,MAAQ;AAAA,IAGR;AAAA,EACF;AAEA,EAAA,SAAS,YAAA,GAAqB;AAC5B,IAAA,KAAA,GAAQ;AAAA,MACN,IAAA,EAAMA,+BAAA,CAAmB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAAA,MACzC,kBAAA,EAAoB,CAAC,GAAG,KAAA,CAAM,UAAU;AAAA,KAC1C;AAAA,EACF;AAEA,EAAA,SAAS,wBAAwB,IAAA,EAAqB;AASpD,IAAA,IAAI,OAAA,CAAQ,eAAA,CAAgB,IAAI,CAAA,EAAG,OAAO,IAAA;AAC1C,IAAA,MAAM,EAAE,GAAA,EAAI,GAAIC,uBAAiB,CAAC,GAAG,IAAI,CAAC,CAAA;AAC1C,IAAA,IAAI,OAAA,CAAQ,WAAA,CAAY,GAAA,CAAI,GAAG,GAAG,OAAO,IAAA;AACzC,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,SAAS,WAAA,GAAoB;AAC3B,IAAA,IAAI,cAAc,aAAA,EAAe;AACjC,IAAA,MAAM,IAAA,GAAOD,+BAAA,CAAmB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAChD,IAAA,MAAM,aAAsB,EAAC;AAC7B,IAAAE,yBAAA,CAAa,KAAA,CAAM,IAAA,EAAM,IAAA,EAAM,EAAC,EAAG,CAAC,CAAA,KAAM,UAAA,CAAW,IAAA,CAAK,CAAC,CAAC,CAAA;AAC5D,IAAA,MAAM,cAAuB,EAAC;AAC9B,IAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,MAAA,IAAI,uBAAA,CAAwB,CAAA,CAAE,IAAI,CAAA,EAAG;AAGrC,MAAA,IAAI,OAAA,IAAW,CAAA,IAAK,eAAA,CAAiB,CAAA,CAAyB,KAAK,CAAA,EAAG;AACtE,MAAA,WAAA,CAAY,KAAK,CAAC,CAAA;AAAA,IACpB;AACA,IAAA,MAAM,EAAE,OAAO,OAAA,EAAQ,GAAI,eAAe,KAAA,CAAM,kBAAA,EAAoB,MAAM,UAAU,CAAA;AAGpF,IAAA,IAAI,WAAA,CAAY,WAAW,CAAA,IAAK,KAAA,CAAM,WAAW,CAAA,IAAK,OAAA,CAAQ,WAAW,CAAA,EAAG;AAC1E,MAAA,KAAA,GAAQ,EAAE,MAAM,IAAA,EAAM,kBAAA,EAAoB,CAAC,GAAG,KAAA,CAAM,UAAU,CAAA,EAAE;AAChE,MAAA;AAAA,IACF;AACA,IAAA,QAAA,CAAS;AAAA,MACP,CAAA,EAAG,gBAAA;AAAA,MACH,IAAA,EAAM,SAAA;AAAA,MACN,QAAA;AAAA,MACA,WAAA,EAAa,WAAA;AAAA,MACb,eAAA,EAAiB,KAAA;AAAA,MACjB,iBAAA,EAAmB;AAAA,KACpB,CAAA;AACD,IAAA,KAAA,GAAQ,EAAE,MAAM,IAAA,EAAM,kBAAA,EAAoB,CAAC,GAAG,KAAA,CAAM,UAAU,CAAA,EAAE;AAAA,EAClE;AAMA,EAAA,MAAM,iBAAA,GAAoB,KAAA,CAAM,YAAA,CAAa,CAAC,OAAO,IAAA,KAAS;AAC5D,IAAA,IAAI,QAAA,EAAU;AACd,IAAA,IAAI,cAAc,aAAA,EAAe;AACjC,IAAA,IAAI,IAAA,EAAM,aAAa,IAAA,EAAM;AAC7B,IAAA,IAAI,IAAA,EAAM,cAAc,IAAA,EAAM;AAI5B,MAAA,YAAA,EAAa;AACb,MAAA;AAAA,IACF;AACA,IAAA,WAAA,EAAY;AAAA,EACd,CAAC,CAAA;AAED,EAAA,SAAS,iBAAA,CAAkB,MAAS,UAAA,EAA0C;AAM5E,IAAA,KAAA,CAAM,WAAW,KAAA,EAAM;AACvB,IAAA,KAAA,MAAW,CAAA,IAAK,UAAA,EAAY,KAAA,CAAM,UAAA,CAAW,IAAI,CAAC,CAAA;AAClD,IAAA,KAAA,CAAM,qBAAqB,IAAA,EAAM,EAAE,UAAU,IAAA,EAAM,OAAA,EAAS,OAAO,CAAA;AACnE,IAAA,YAAA,EAAa;AAAA,EACf;AAEA,EAAA,SAAS,cAAc,GAAA,EAAiD;AACtE,IAAA,IAAI,cAAc,aAAA,EAAe;AACjC,IAAA,MAAM,cAAuB,EAAC;AAC9B,IAAA,KAAA,MAAW,CAAA,IAAK,IAAI,WAAA,EAAa;AAC/B,MAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,IAAI,CAAA,EAAG;AAC5B,MAAA,IAAI,uBAAA,CAAwB,CAAA,CAAE,IAAI,CAAA,EAAG;AAMrC,MAAA,IACE,OAAA,IAAW,CAAA,IACX,CAAC,wBAAA,CAAyB,KAAA,CAAM,QAAQ,CAAA,CAAE,IAAA,EAAO,CAAA,CAAyB,KAAK,CAAA,EAC/E;AACA,QAAA;AAAA,MACF;AACA,MAAA,WAAA,CAAY,KAAK,CAAC,CAAA;AAAA,IACpB;AAGA,IAAA,MAAM,iBAA4B,EAAC;AACnC,IAAA,KAAA,MAAW,CAAA,IAAK,IAAI,eAAA,EAAiB;AACnC,MAAA,MAAM,IAAA,GAAOD,sBAAA,CAAiB,CAAC,CAAA,CAAE,QAAA;AACjC,MAAA,IAAI,uBAAA,CAAwB,IAAI,CAAA,EAAG;AACnC,MAAA,cAAA,CAAe,KAAK,CAAC,CAAA;AAAA,IACvB;AACA,IAAA,MAAM,mBAA8B,EAAC;AACrC,IAAA,KAAA,MAAW,CAAA,IAAK,IAAI,iBAAA,EAAmB;AACrC,MAAA,MAAM,IAAA,GAAOA,sBAAA,CAAiB,CAAC,CAAA,CAAE,QAAA;AACjC,MAAA,IAAI,uBAAA,CAAwB,IAAI,CAAA,EAAG;AACnC,MAAA,gBAAA,CAAiB,KAAK,CAAC,CAAA;AAAA,IACzB;AACA,IAAA,IAAI,WAAA,CAAY,WAAW,CAAA,IAAK,cAAA,CAAe,WAAW,CAAA,IAAK,gBAAA,CAAiB,WAAW,CAAA,EAAG;AAC5F,MAAA;AAAA,IACF;AACA,IAAA,MAAM,SAAA,GAAYE,gCAAA,CAAoB,KAAA,CAAM,IAAA,CAAK,OAAO,WAAW,CAAA;AAOnE,IAAA,IAAI;AACF,MAAA,OAAA,CAAQ,YAAA,CAAa,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AACrC,MAAA,IAAI;AACF,QAAA,OAAA,CAAQ,aAAa,SAAS,CAAA;AAAA,MAChC,CAAA,CAAA,MAAQ;AAKN,QAAA;AAAA,MACF;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAKR;AACA,IAAA,MAAM,cAAA,GAAiB,IAAI,GAAA,CAAI,KAAA,CAAM,UAAU,CAAA;AAC/C,IAAA,KAAA,MAAW,CAAA,IAAK,gBAAA,EAAkB,cAAA,CAAe,MAAA,CAAO,CAAC,CAAA;AACzD,IAAA,KAAA,MAAW,CAAA,IAAK,cAAA,EAAgB,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA;AACpD,IAAA,iBAAA,CAAkB,SAAA,EAAW,CAAC,GAAG,cAAc,CAAC,CAAA;AAAA,EAClD;AAEA,EAAA,SAAS,eAAe,GAAA,EAAkD;AACxE,IAAA,IAAI,cAAc,SAAA,EAAW;AAa7B,IAAA,IAAI,CAAC,yBAAyB,KAAA,CAAM,MAAA,EAAQ,EAAC,EAAG,GAAA,CAAI,IAAI,CAAA,EAAG;AAC3D,IAAA,IAAI,yBAAyB,IAAA,EAAM;AACjC,MAAA,YAAA,CAAa,oBAAoB,CAAA;AACjC,MAAA,oBAAA,GAAuB,IAAA;AAAA,IACzB;AACA,IAAA,IAAI,wBAAwB,IAAA,EAAM;AAChC,MAAA,YAAA,CAAa,mBAAmB,CAAA;AAChC,MAAA,mBAAA,GAAsB,IAAA;AAAA,IACxB;AACA,IAAA,iBAAA,CAAkB,GAAA,CAAI,IAAA,EAAM,GAAA,CAAI,UAAU,CAAA;AAC1C,IAAA,SAAA,GAAY,aAAA;AACZ,IAAA,OAAA,CAAQ,KAAA,EAAM;AAAA,EAChB;AAEA,EAAA,SAAS,cAAA,GAAuB;AAC9B,IAAA,QAAA,CAAS,EAAE,CAAA,EAAG,gBAAA,EAAkB,IAAA,EAAM,UAAA,EAAY,UAAU,CAAA;AAAA,EAC9D;AAEA,EAAA,SAAS,yBAAyB,WAAA,EAA2B;AAI3D,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,IAAA,GAAO,sBAAA,CAAuB,GAAA,CAAI,WAAW,CAAA;AACnD,IAAA,IAAI,IAAA,KAAS,MAAA,IAAa,GAAA,GAAM,IAAA,GAAO,iCAAA,EAAmC;AAC1E,IAAA,sBAAA,CAAuB,GAAA,CAAI,aAAa,GAAG,CAAA;AAC3C,IAAA,MAAM,YAAA,GAAe,wBAAwB,KAAA,CAAM,IAAA,CAAK,OAAO,EAAC,EAAG,QAAQ,eAAe,CAAA;AAC1F,IAAA,QAAA,CAAS;AAAA,MACP,CAAA,EAAG,gBAAA;AAAA,MACH,IAAA,EAAM,UAAA;AAAA,MACN,QAAA;AAAA,MACA,IAAA,EAAM,YAAA;AAAA,MACN,UAAA,EAAY,CAAC,GAAG,KAAA,CAAM,UAAU;AAAA,KACjC,CAAA;AAAA,EACH;AAEA,EAAA,OAAA,CAAQ,SAAA,GAAY,CAAC,KAAA,KAA8B;AACjD,IAAA,IAAI,QAAA,EAAU;AAOd,IAAA,IAAI;AACF,MAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,MAAA,IAAI,CAAC,kBAAA,CAAmB,IAAI,CAAA,EAAG;AAC/B,MAAA,MAAM,GAAA,GAAM,IAAA;AAGZ,MAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC/B,MAAA,QAAQ,IAAI,IAAA;AAAM,QAChB,KAAK,OAAA;AACH,UAAA,IAAI,cAAc,aAAA,EAAe;AACjC,UAAA,cAAA,EAAe;AACf,UAAA;AAAA,QACF,KAAK,UAAA;AACH,UAAA,IAAI,SAAA,KAAc,SAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,IAAI,QAAQ,CAAA;AACrD,UAAA;AAAA,QACF,KAAK,iBAAA;AACH,UAAA,IAAI,cAAc,aAAA,EAAe;AACjC,UAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC/B,UAAA,wBAAA,CAAyB,IAAI,QAAQ,CAAA;AACrC,UAAA;AAAA,QACF,KAAK,UAAA;AACH,UAAA,cAAA,CAAe,GAAG,CAAA;AAClB,UAAA;AAAA,QACF,KAAK,SAAA;AACH,UAAA,aAAA,CAAc,GAAG,CAAA;AACjB,UAAA;AAAA;AACJ,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF,CAAA;AAEA,EAAA,SAAS,qBAAA,GAA8B;AACrC,IAAA,IAAI,QAAA,EAAU;AACd,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AAGtB,MAAA,SAAA,GAAY,aAAA;AACZ,MAAA,YAAA,EAAa;AACb,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,OAAO,EAAE,IAAA,EAAK;AACjC,IAAA,MAAM,QAAA,GAAW,OAAO,CAAC,CAAA;AACzB,IAAA,OAAA,CAAQ,OAAO,QAAQ,CAAA;AACvB,IAAA,cAAA,EAAA;AACA,IAAA,QAAA,CAAS;AAAA,MACP,CAAA,EAAG,gBAAA;AAAA,MACH,IAAA,EAAM,iBAAA;AAAA,MACN,QAAA;AAAA,MACA,QAAA,EAAU;AAAA,KACX,CAAA;AACD,IAAA,oBAAA,GAAuB,WAAW,MAAM;AACtC,MAAA,oBAAA,GAAuB,IAAA;AACvB,MAAA,IAAI,QAAA,EAAU;AACd,MAAA,IAAI,cAAc,aAAA,EAAe;AACjC,MAAA,IAAI,cAAA,IAAkB,mBAAA,IAAuB,OAAA,CAAQ,IAAA,KAAS,CAAA,EAAG;AAE/D,QAAA,SAAA,GAAY,aAAA;AACZ,QAAA,YAAA,EAAa;AACb,QAAA;AAAA,MACF;AACA,MAAA,qBAAA,EAAsB;AAAA,IACxB,GAAG,mBAAmB,CAAA;AAAA,EACxB;AAEA,EAAA,SAAS,QAAA,GAAiB;AACxB,IAAA,QAAA,CAAS,EAAE,CAAA,EAAG,gBAAA,EAAkB,IAAA,EAAM,OAAA,EAAS,UAAU,CAAA;AACzD,IAAA,mBAAA,GAAsB,WAAW,MAAM;AACrC,MAAA,mBAAA,GAAsB,IAAA;AACtB,MAAA,IAAI,QAAA,EAAU;AACd,MAAA,IAAI,cAAc,aAAA,EAAe;AACjC,MAAA,qBAAA,EAAsB;AAAA,IACxB,GAAG,yBAAyB,CAAA;AAAA,EAC9B;AAEA,EAAA,QAAA,EAAS;AAET,EAAA,OAAO;AAAA,IACL,SAAS,MAAM;AACb,MAAA,IAAI,QAAA,EAAU;AACd,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,IAAI,wBAAwB,IAAA,EAAM;AAChC,QAAA,YAAA,CAAa,mBAAmB,CAAA;AAChC,QAAA,mBAAA,GAAsB,IAAA;AAAA,MACxB;AACA,MAAA,IAAI,yBAAyB,IAAA,EAAM;AACjC,QAAA,YAAA,CAAa,oBAAoB,CAAA;AACjC,QAAA,oBAAA,GAAuB,IAAA;AAAA,MACzB;AACA,MAAA,iBAAA,EAAkB;AAClB,MAAA,IAAI;AACF,QAAA,OAAA,CAAQ,KAAA,EAAM;AAAA,MAChB,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA;AAAA,IACA,WAAW,MAAM,SAAA;AAAA,IACjB,QAAA;AAAA,IACA;AAAA,GACF;AACF;AAGO,MAAM,yBAAA,GAA4B;;;;;"}