mindoodb 0.0.1

package/dist/appendonlystores/network/ServerNetworkContentAddressedStore.js

@@ -0,0 +1,248 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerNetworkContentAddressedStore = void 0;
+const types_1 = require("../../core/appendonlystores/network/types");
+const RSAEncryption_1 = require("../../core/crypto/RSAEncryption");
+/**
+ * Server-side network handler for ContentAddressedStore operations.
+ *
+ * This class handles incoming sync requests from clients:
+ * 1. Validates authentication tokens
+ * 2. Retrieves entries from the local store
+ * 3. Encrypts entries with the requesting user's RSA public key
+ * 4. Returns encrypted entries to the client
+ *
+ * This is not a ContentAddressedStore implementation itself, but rather
+ * a service that wraps a local ContentAddressedStore and handles network requests.
+ */
+class ServerNetworkContentAddressedStore {
+    /**
+     * Create a new ServerNetworkContentAddressedStore.
+     *
+     * @param localStore The local store containing the actual data
+     * @param directory The tenant directory for user lookup
+     * @param authService The authentication service for token validation
+     * @param cryptoAdapter The crypto adapter for encryption
+     */
+    constructor(localStore, directory, authService, cryptoAdapter) {
+        this.localStore = localStore;
+        this.directory = directory;
+        this.authService = authService;
+        this.cryptoAdapter = cryptoAdapter;
+        this.rsaEncryption = new RSAEncryption_1.RSAEncryption(cryptoAdapter);
+    }
+    /**
+     * Get the ID of the underlying store.
+     */
+    getId() {
+        return this.localStore.getId();
+    }
+    /**
+     * Handle a challenge request from a client.
+     *
+     * @param username The username requesting authentication
+     * @returns The challenge string
+     */
+    async handleChallengeRequest(username) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling challenge request for user: ${username}`);
+        return this.authService.generateChallenge(username);
+    }
+    /**
+     * Handle an authentication request from a client.
+     *
+     * @param challenge The challenge string
+     * @param signature The client's signature
+     * @returns The authentication result with JWT token
+     */
+    async handleAuthenticate(challenge, signature) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling authentication for challenge: ${challenge}`);
+        return this.authService.authenticate(challenge, signature);
+    }
+    /**
+     * Handle a findNewEntries request from a client.
+     *
+     * @param token The JWT access token
+     * @param knownIds The entry IDs the client already has
+     * @returns List of new entry metadata
+     */
+    async handleFindNewEntries(token, knownIds) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling findNewEntries request`);
+        // Validate token
+        const tokenPayload = await this.validateToken(token);
+        console.log(`[ServerNetworkContentAddressedStore] Token validated for user: ${tokenPayload.sub}`);
+        // Find new entries
+        const newEntries = await this.localStore.findNewEntries(knownIds);
+        console.log(`[ServerNetworkContentAddressedStore] Found ${newEntries.length} new entries`);
+        return newEntries;
+    }
+    /**
+     * Handle a findNewEntriesForDoc request from a client.
+     * This is an optimized version that only returns entries for a specific document.
+     *
+     * @param token The JWT access token
+     * @param knownIds The entry IDs the client already has for this document
+     * @param docId The document ID to filter by
+     * @returns List of new entry metadata for the specified document
+     */
+    async handleFindNewEntriesForDoc(token, knownIds, docId) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling findNewEntriesForDoc request for doc ${docId}`);
+        // Validate token
+        const tokenPayload = await this.validateToken(token);
+        console.log(`[ServerNetworkContentAddressedStore] Token validated for user: ${tokenPayload.sub}`);
+        // Find new entries for the specific document
+        const newEntries = await this.localStore.findNewEntriesForDoc(knownIds, docId);
+        console.log(`[ServerNetworkContentAddressedStore] Found ${newEntries.length} new entries for doc ${docId}`);
+        return newEntries;
+    }
+    /**
+     * Handle a getEntries request from a client.
+     * Encrypts the entries with the client's RSA public key.
+     *
+     * @param token The JWT access token
+     * @param ids The IDs of entries to retrieve
+     * @returns The entries with RSA-encrypted payloads
+     */
+    async handleGetEntries(token, ids) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling getEntries request for ${ids.length} entries`);
+        // Validate token
+        const tokenPayload = await this.validateToken(token);
+        const username = tokenPayload.sub;
+        console.log(`[ServerNetworkContentAddressedStore] Token validated for user: ${username}`);
+        // Get user's public encryption key
+        const userKeys = await this.directory.getUserPublicKeys(username);
+        if (!userKeys) {
+            throw new types_1.NetworkError(types_1.NetworkErrorType.USER_NOT_FOUND, `User ${username} not found or revoked`);
+        }
+        console.log(`[ServerNetworkContentAddressedStore] Retrieved encryption key for user: ${username}`);
+        // Get the entries from local store
+        const entries = await this.localStore.getEntries(ids);
+        console.log(`[ServerNetworkContentAddressedStore] Retrieved ${entries.length} entries from local store`);
+        // Encrypt each entry with the user's RSA public key
+        const encryptedEntries = await this.encryptEntriesForUser(entries, userKeys.encryptionPublicKey);
+        console.log(`[ServerNetworkContentAddressedStore] Encrypted ${encryptedEntries.length} entries for user: ${username}`);
+        return encryptedEntries;
+    }
+    /**
+     * Handle a putEntries request from a client.
+     *
+     * @param token The JWT access token
+     * @param entries The entries to store
+     */
+    async handlePutEntries(token, entries) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling putEntries request for ${entries.length} entries`);
+        // Validate token
+        const tokenPayload = await this.validateToken(token);
+        console.log(`[ServerNetworkContentAddressedStore] Token validated for user: ${tokenPayload.sub}`);
+        // Process each entry
+        for (const entry of entries) {
+            // Verify the entry was created by a trusted user
+            const isValidKey = await this.directory.validatePublicSigningKey(entry.createdByPublicKey);
+            if (!isValidKey) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.INVALID_SIGNATURE, `Entry ${entry.id} was not signed by a trusted user`);
+            }
+        }
+        // Store all entries
+        await this.localStore.putEntries(entries);
+        console.log(`[ServerNetworkContentAddressedStore] Successfully stored ${entries.length} entries`);
+    }
+    /**
+     * Handle a hasEntries request from a client.
+     * Checks which of the provided IDs exist in the store.
+     *
+     * @param token The JWT access token
+     * @param ids The IDs to check for existence
+     * @returns List of IDs that exist in the store
+     */
+    async handleHasEntries(token, ids) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling hasEntries request for ${ids.length} IDs`);
+        // Validate token
+        const tokenPayload = await this.validateToken(token);
+        console.log(`[ServerNetworkContentAddressedStore] Token validated for user: ${tokenPayload.sub}`);
+        // Check which IDs exist in local store
+        const existingIds = await this.localStore.hasEntries(ids);
+        console.log(`[ServerNetworkContentAddressedStore] Found ${existingIds.length} existing entries out of ${ids.length} checked`);
+        return existingIds;
+    }
+    /**
+     * Handle a getAllIds request from a client.
+     * This is used by clients to determine which entries they need to push.
+     *
+     * @param token The JWT access token
+     * @returns List of all entry IDs in the store
+     */
+    async handleGetAllIds(token) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling getAllIds request`);
+        // Validate token
+        const tokenPayload = await this.validateToken(token);
+        console.log(`[ServerNetworkContentAddressedStore] Token validated for user: ${tokenPayload.sub}`);
+        // Get all entry IDs from local store
+        const allIds = await this.localStore.getAllIds();
+        console.log(`[ServerNetworkContentAddressedStore] Returning ${allIds.length} entry IDs`);
+        return allIds;
+    }
+    /**
+     * Handle a resolveDependencies request from a client.
+     * Resolves the dependency chain starting from an entry ID.
+     *
+     * @param token The JWT access token
+     * @param startId The entry ID to start traversal from
+     * @param options Optional traversal options
+     * @returns List of entry IDs in dependency order
+     */
+    async handleResolveDependencies(token, startId, options) {
+        console.log(`[ServerNetworkContentAddressedStore] Handling resolveDependencies request for ${startId}`);
+        // Validate token
+        const tokenPayload = await this.validateToken(token);
+        console.log(`[ServerNetworkContentAddressedStore] Token validated for user: ${tokenPayload.sub}`);
+        // Resolve dependencies in local store
+        const resolvedIds = await this.localStore.resolveDependencies(startId, options);
+        console.log(`[ServerNetworkContentAddressedStore] Resolved ${resolvedIds.length} dependencies`);
+        return resolvedIds;
+    }
+    /**
+     * Validate a JWT token and return the payload.
+     *
+     * @param token The JWT token
+     * @returns The token payload
+     * @throws NetworkError if token is invalid
+     */
+    async validateToken(token) {
+        const payload = await this.authService.validateToken(token);
+        if (!payload) {
+            throw new types_1.NetworkError(types_1.NetworkErrorType.INVALID_TOKEN, "Invalid or expired token");
+        }
+        return payload;
+    }
+    /**
+     * Encrypt entries with a user's RSA public key.
+     * Transforms StoreEntry[] to NetworkEncryptedEntry[].
+     */
+    async encryptEntriesForUser(entries, encryptionPublicKey) {
+        const results = [];
+        // Import the public key once for all entries
+        const publicKey = await this.rsaEncryption.importPublicKey(encryptionPublicKey);
+        for (const entry of entries) {
+            // Encrypt the payload with RSA
+            const rsaEncryptedPayload = await this.rsaEncryption.encrypt(entry.encryptedData, publicKey);
+            // Create NetworkEncryptedEntry with all metadata plus RSA-encrypted payload
+            const encryptedEntry = {
+                entryType: entry.entryType,
+                id: entry.id,
+                contentHash: entry.contentHash,
+                docId: entry.docId,
+                dependencyIds: entry.dependencyIds,
+                createdAt: entry.createdAt,
+                createdByPublicKey: entry.createdByPublicKey,
+                decryptionKeyId: entry.decryptionKeyId,
+                signature: entry.signature,
+                originalSize: entry.originalSize,
+                encryptedSize: entry.encryptedSize,
+                rsaEncryptedPayload,
+            };
+            results.push(encryptedEntry);
+        }
+        return results;
+    }
+}
+exports.ServerNetworkContentAddressedStore = ServerNetworkContentAddressedStore;
+//# sourceMappingURL=ServerNetworkContentAddressedStore.js.map

package/dist/appendonlystores/network/ServerNetworkContentAddressedStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServerNetworkContentAddressedStore.js","sourceRoot":"","sources":["../../../src/appendonlystores/network/ServerNetworkContentAddressedStore.ts"],"names":[],"mappings":";;;AAIA,qEAA2F;AAC3F,mEAAgE;AAGhE;;;;;;;;;;;GAWG;AACH,MAAa,kCAAkC;IAO7C;;;;;;;OAOG;IACH,YACE,UAAiC,EACjC,SAAgC,EAChC,WAAkC,EAClC,aAA4B;QAE5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAAC,QAAgB;QAC3C,OAAO,CAAC,GAAG,CAAC,6EAA6E,QAAQ,EAAE,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,SAAqB;QAK/D,OAAO,CAAC,GAAG,CAAC,+EAA+E,SAAS,EAAE,CAAC,CAAC;QACxG,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,QAAkB;QAElB,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QAEpF,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,kEAAkE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAElG,mBAAmB;QACnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,8CAA8C,UAAU,CAAC,MAAM,cAAc,CAAC,CAAC;QAE3F,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,0BAA0B,CAC9B,KAAa,EACb,QAAkB,EAClB,KAAa;QAEb,OAAO,CAAC,GAAG,CAAC,sFAAsF,KAAK,EAAE,CAAC,CAAC;QAE3G,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,kEAAkE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAElG,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,8CAA8C,UAAU,CAAC,MAAM,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAE5G,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,GAAa;QAEb,OAAO,CAAC,GAAG,CAAC,wEAAwE,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;QAE1G,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,kEAAkE,QAAQ,EAAE,CAAC,CAAC;QAE1F,mCAAmC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,cAAc,EAC/B,QAAQ,QAAQ,uBAAuB,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2EAA2E,QAAQ,EAAE,CAAC,CAAC;QAEnG,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,kDAAkD,OAAO,CAAC,MAAM,2BAA2B,CAAC,CAAC;QAEzG,oDAAoD;QACpD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACvD,OAAO,EACP,QAAQ,CAAC,mBAAmB,CAC7B,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,kDAAkD,gBAAgB,CAAC,MAAM,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QACvH,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,OAAqB;QACzD,OAAO,CAAC,GAAG,CAAC,wEAAwE,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;QAE9G,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,kEAAkE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAElG,qBAAqB;QACrB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,iDAAiD;YACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC3F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,iBAAiB,EAClC,SAAS,KAAK,CAAC,EAAE,mCAAmC,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,4DAA4D,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;IACpG,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,GAAa;QACjD,OAAO,CAAC,GAAG,CAAC,wEAAwE,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;QAEtG,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,kEAAkE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAElG,uCAAuC;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,8CAA8C,WAAW,CAAC,MAAM,4BAA4B,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;QAE9H,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAE/E,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,kEAAkE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAElG,qCAAqC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC;QAEzF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,yBAAyB,CAC7B,KAAa,EACb,OAAe,EACf,OAAiC;QAEjC,OAAO,CAAC,GAAG,CAAC,iFAAiF,OAAO,EAAE,CAAC,CAAC;QAExG,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,kEAAkE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAElG,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,iDAAiD,WAAW,CAAC,MAAM,eAAe,CAAC,CAAC;QAEhG,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa,CAAC,KAAa;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB,CACjC,OAAqB,EACrB,mBAA2B;QAE3B,MAAM,OAAO,GAA4B,EAAE,CAAC;QAE5C,6CAA6C;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;QAEhF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,+BAA+B;YAC/B,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAC1D,KAAK,CAAC,aAAa,EACnB,SAAS,CACV,CAAC;YAEF,4EAA4E;YAC5E,MAAM,cAAc,GAA0B;gBAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,mBAAmB;aACpB,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AA9TD,gFA8TC"}

package/dist/appendonlystores/network/index.d.ts

@@ -0,0 +1,8 @@
+export type { NetworkEncryptedEntry, UserPublicKeys, NetworkAuthTokenPayload, AuthChallenge, AuthResult, } from "../../core/appendonlystores/network/types";
+export { NetworkError, NetworkErrorType } from "../../core/appendonlystores/network/types";
+export type { NetworkTransport, NetworkTransportConfig } from "../../core/appendonlystores/network/NetworkTransport";
+export { ClientNetworkContentAddressedStore } from "./ClientNetworkContentAddressedStore";
+export { ServerNetworkContentAddressedStore } from "./ServerNetworkContentAddressedStore";
+export { AuthenticationService } from "../../core/appendonlystores/network/AuthenticationService";
+export { HttpTransport } from "./HttpTransport";
+//# sourceMappingURL=index.d.ts.map

package/dist/appendonlystores/network/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/appendonlystores/network/index.ts"],"names":[],"mappings":"AAIA,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,uBAAuB,EACvB,aAAa,EACb,UAAU,GACX,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAG3F,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAGrH,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAG1F,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAG1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAGlG,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/appendonlystores/network/index.js

@@ -0,0 +1,21 @@
+"use strict";
+// Network synchronization module for MindooDB
+// Provides secure network-based ContentAddressedStore implementations
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpTransport = exports.AuthenticationService = exports.ServerNetworkContentAddressedStore = exports.ClientNetworkContentAddressedStore = exports.NetworkErrorType = exports.NetworkError = void 0;
+var types_1 = require("../../core/appendonlystores/network/types");
+Object.defineProperty(exports, "NetworkError", { enumerable: true, get: function () { return types_1.NetworkError; } });
+Object.defineProperty(exports, "NetworkErrorType", { enumerable: true, get: function () { return types_1.NetworkErrorType; } });
+// Client-side
+var ClientNetworkContentAddressedStore_1 = require("./ClientNetworkContentAddressedStore");
+Object.defineProperty(exports, "ClientNetworkContentAddressedStore", { enumerable: true, get: function () { return ClientNetworkContentAddressedStore_1.ClientNetworkContentAddressedStore; } });
+// Server-side
+var ServerNetworkContentAddressedStore_1 = require("./ServerNetworkContentAddressedStore");
+Object.defineProperty(exports, "ServerNetworkContentAddressedStore", { enumerable: true, get: function () { return ServerNetworkContentAddressedStore_1.ServerNetworkContentAddressedStore; } });
+// Authentication
+var AuthenticationService_1 = require("../../core/appendonlystores/network/AuthenticationService");
+Object.defineProperty(exports, "AuthenticationService", { enumerable: true, get: function () { return AuthenticationService_1.AuthenticationService; } });
+// Transport implementations
+var HttpTransport_1 = require("./HttpTransport");
+Object.defineProperty(exports, "HttpTransport", { enumerable: true, get: function () { return HttpTransport_1.HttpTransport; } });
+//# sourceMappingURL=index.js.map

package/dist/appendonlystores/network/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/appendonlystores/network/index.ts"],"names":[],"mappings":";AAAA,8CAA8C;AAC9C,sEAAsE;;;AAUtE,mEAA2F;AAAlF,qGAAA,YAAY,OAAA;AAAE,yGAAA,gBAAgB,OAAA;AAKvC,cAAc;AACd,2FAA0F;AAAjF,wJAAA,kCAAkC,OAAA;AAE3C,cAAc;AACd,2FAA0F;AAAjF,wJAAA,kCAAkC,OAAA;AAE3C,iBAAiB;AACjB,mGAAkG;AAAzF,8HAAA,qBAAqB,OAAA;AAE9B,4BAA4B;AAC5B,iDAAgD;AAAvC,8GAAA,aAAa,OAAA"}

package/dist/browser/crypto/BrowserCryptoAdapter.d.ts

@@ -0,0 +1,14 @@
+import type { CryptoAdapter } from "../../core/crypto/CryptoAdapter";
+/**
+ * Browser implementation of CryptoAdapter.
+ * Uses window.crypto which is available in modern browsers.
+ */
+export declare class BrowserCryptoAdapter implements CryptoAdapter {
+    getSubtle(): SubtleCrypto;
+    getRandomValues(array: Uint8Array): Uint8Array;
+}
+/**
+ * Factory function to create the BrowserCryptoAdapter.
+ */
+export declare function createCryptoAdapter(): CryptoAdapter;
+//# sourceMappingURL=BrowserCryptoAdapter.d.ts.map

package/dist/browser/crypto/BrowserCryptoAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCryptoAdapter.d.ts","sourceRoot":"","sources":["../../../src/browser/crypto/BrowserCryptoAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE;;;GAGG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,SAAS,IAAI,YAAY;IAOzB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;CAM/C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD"}

package/dist/browser/crypto/BrowserCryptoAdapter.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BrowserCryptoAdapter = void 0;
+exports.createCryptoAdapter = createCryptoAdapter;
+/**
+ * Browser implementation of CryptoAdapter.
+ * Uses window.crypto which is available in modern browsers.
+ */
+class BrowserCryptoAdapter {
+    getSubtle() {
+        if (typeof window === "undefined" || !window.crypto || !window.crypto.subtle) {
+            throw new Error("Web Crypto API not available in browser environment");
+        }
+        return window.crypto.subtle;
+    }
+    getRandomValues(array) {
+        if (typeof window === "undefined" || !window.crypto || !window.crypto.getRandomValues) {
+            throw new Error("getRandomValues not available in browser environment");
+        }
+        return window.crypto.getRandomValues(array);
+    }
+}
+exports.BrowserCryptoAdapter = BrowserCryptoAdapter;
+/**
+ * Factory function to create the BrowserCryptoAdapter.
+ */
+function createCryptoAdapter() {
+    return new BrowserCryptoAdapter();
+}
+//# sourceMappingURL=BrowserCryptoAdapter.js.map

package/dist/browser/crypto/BrowserCryptoAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCryptoAdapter.js","sourceRoot":"","sources":["../../../src/browser/crypto/BrowserCryptoAdapter.ts"],"names":[],"mappings":";;;AAyBA,kDAEC;AAzBD;;;GAGG;AACH,MAAa,oBAAoB;IAC/B,SAAS;QACP,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,eAAe,CAAC,KAAiB;QAC/B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;CACF;AAdD,oDAcC;AAED;;GAEG;AACH,SAAgB,mBAAmB;IACjC,OAAO,IAAI,oBAAoB,EAAE,CAAC;AACpC,CAAC"}

package/dist/browser/index.d.ts

@@ -0,0 +1,3 @@
+export * from "../core";
+export { BrowserCryptoAdapter, createCryptoAdapter } from "./crypto/BrowserCryptoAdapter";
+//# sourceMappingURL=index.d.ts.map

package/dist/browser/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/browser/index.ts"],"names":[],"mappings":"AAIA,cAAc,SAAS,CAAC;AAGxB,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/browser/index.js

@@ -0,0 +1,26 @@
+"use strict";
+// Browser-specific exports
+// Re-exports everything from core plus browser-specific implementations
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCryptoAdapter = exports.BrowserCryptoAdapter = void 0;
+// Re-export all core exports
+__exportStar(require("../core"), exports);
+// Browser-specific crypto adapter
+var BrowserCryptoAdapter_1 = require("./crypto/BrowserCryptoAdapter");
+Object.defineProperty(exports, "BrowserCryptoAdapter", { enumerable: true, get: function () { return BrowserCryptoAdapter_1.BrowserCryptoAdapter; } });
+Object.defineProperty(exports, "createCryptoAdapter", { enumerable: true, get: function () { return BrowserCryptoAdapter_1.createCryptoAdapter; } });
+//# sourceMappingURL=index.js.map

package/dist/browser/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/browser/index.ts"],"names":[],"mappings":";AAAA,2BAA2B;AAC3B,wEAAwE;;;;;;;;;;;;;;;;;AAExE,6BAA6B;AAC7B,0CAAwB;AAExB,kCAAkC;AAClC,sEAA0F;AAAjF,4HAAA,oBAAoB,OAAA;AAAE,2HAAA,mBAAmB,OAAA"}

package/dist/core/BaseMindooDB.d.ts

@@ -0,0 +1,182 @@
+import { MindooDB, MindooDoc, MindooTenant, ProcessChangesCursor, ProcessChangesResult, AttachmentConfig, SigningKeyPair } from "./types";
+import { BaseMindooTenant } from "./BaseMindooTenant";
+import type { ContentAddressedStore } from "./appendonlystores/types";
+/**
+ * BaseMindooDB is a platform-agnostic implementation of MindooDB
+ * that works in both browser and server environments.
+ *
+ * It receives MindooTenant and ContentAddressedStore in the constructor,
+ * allowing platform-specific implementations of those interfaces.
+ *
+ * Dependencies:
+ * - @automerge/automerge: For CRDT document management
+ * - Web Crypto API: Available in both browser (window.crypto) and Node.js (crypto)
+ *   - Ed25519 signing/verification (Node.js 15+, Chrome 92+)
+ *   - AES-256-GCM encryption (widely supported)
+ *
+ * TODO: Verify Automerge 2.x API methods:
+ * - Automerge.getChangeHash(change) - verify method name
+ * - Automerge.getHeads(doc) - verify method name
+ * - Automerge.load(bytes) - verify method name for snapshots
+ * - Automerge.applyChanges(doc, changes) - verify method signature
+ */
+export declare class BaseMindooDB implements MindooDB {
+    private tenant;
+    private store;
+    private attachmentStore;
+    private chunkSizeBytes;
+    private _isAdminOnlyDb;
+    private index;
+    private indexLookup;
+    private docCache;
+    private processedEntryIds;
+    private automergeHashToEntryId;
+    constructor(tenant: BaseMindooTenant, store: ContentAddressedStore, attachmentStore?: ContentAddressedStore, attachmentConfig?: AttachmentConfig, adminOnlyDb?: boolean);
+    /**
+     * Get the admin public key from the tenant.
+     * Only used when adminOnlyDb is true.
+     */
+    private getAdminPublicKey;
+    isAdminOnlyDb(): boolean;
+    /**
+     * Compare two index entries for sorting.
+     * Returns negative if a < b, positive if a > b, 0 if equal.
+     * Sorts by lastModified first, then by docId for uniqueness.
+     */
+    private compareIndexEntries;
+    /**
+     * Update the index entry for a document.
+     * When a document changes, it's removed from its current position and inserted
+     * at the correct sorted position to maintain order by (lastModified, docId).
+     *
+     * @param docId The document ID
+     * @param lastModified The new last modified timestamp
+     * @param isDeleted Whether the document is deleted
+     */
+    private updateIndex;
+    /**
+     * Register an automerge hash -> entry ID mapping for a document.
+     * This is used to resolve Automerge dependency hashes to entry IDs.
+     */
+    private registerAutomergeHashMapping;
+    /**
+     * Get the entry ID for an automerge hash within a document.
+     * Returns null if not found.
+     */
+    private getEntryIdForAutomergeHash;
+    /**
+     * Resolve Automerge dependency hashes to entry IDs for a document.
+     * Returns the entry IDs for the given automerge hashes.
+     */
+    private resolveAutomergeDepsToEntryIds;
+    /**
+     * Get the SubtleCrypto instance from the tenant's crypto adapter.
+     */
+    private getSubtle;
+    /**
+     * Initialize the database instance.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Sync changes from the content-addressed store by finding new entries and processing them.
+     * This method can be called multiple times to incrementally sync new entries.
+     * On first call (when processedEntryIds is empty), it will process all entries.
+     */
+    syncStoreChanges(): Promise<void>;
+    getStore(): ContentAddressedStore;
+    getAttachmentStore(): ContentAddressedStore | undefined;
+    getTenant(): MindooTenant;
+    createDocument(): Promise<MindooDoc>;
+    createEncryptedDocument(decryptionKeyId?: string): Promise<MindooDoc>;
+    createDocumentWithSigningKey(signingKeyPair: SigningKeyPair, signingKeyPassword: string, decryptionKeyId?: string): Promise<MindooDoc>;
+    /**
+     * Internal method to create a new document.
+     * Handles both regular document creation (signed by current user) and
+     * document creation with a custom signing key (e.g., for directory operations).
+     */
+    private createDocumentInternal;
+    getDocument(docId: string): Promise<MindooDoc>;
+    getDocumentAtTimestamp(docId: string, timestamp: number): Promise<MindooDoc | null>;
+    getAllDocumentIds(): Promise<string[]>;
+    deleteDocument(docId: string): Promise<void>;
+    deleteDocumentWithSigningKey(docId: string, signingKeyPair: SigningKeyPair, signingKeyPassword: string): Promise<void>;
+    /**
+     * Internal method to delete a document.
+     * Handles both regular deletion (signed by current user) and
+     * deletion with a custom signing key (e.g., for directory operations).
+     */
+    private deleteDocInternal;
+    changeDoc(doc: MindooDoc, changeFunc: (doc: MindooDoc) => void | Promise<void>): Promise<void>;
+    changeDocWithSigningKey(doc: MindooDoc, changeFunc: (doc: MindooDoc) => void | Promise<void>, signingKeyPair: SigningKeyPair, signingKeyPassword: string): Promise<void>;
+    private changeDocInternal;
+    processChangesSince(cursor: ProcessChangesCursor | null, limit: number, callback: (change: MindooDoc, currentCursor: ProcessChangesCursor) => boolean | void): Promise<ProcessChangesCursor>;
+    iterateChangesSince(cursor: ProcessChangesCursor | null, pageSize?: number): AsyncGenerator<ProcessChangesResult, void, unknown>;
+    /**
+     * Internal method to load a document from the content-addressed store
+     */
+    private loadDocumentInternal;
+    /**
+     * Wrap an internal document in the MindooDoc interface.
+     * This is the read-only wrapper - write methods throw errors.
+     */
+    private wrapDocument;
+    /**
+     * Get an attachment reference by ID from a document's _attachments array.
+     */
+    private getAttachmentRefInternal;
+    /**
+     * Internal method to fetch and concatenate all chunks for an attachment.
+     */
+    private getAttachmentInternal;
+    /**
+     * Internal method to get a byte range from an attachment.
+     */
+    private getAttachmentRangeInternal;
+    /**
+     * Internal async generator to stream attachment data.
+     */
+    private streamAttachmentInternal;
+    /**
+     * Get the effective attachment store (attachment store if configured, otherwise doc store).
+     */
+    private getEffectiveAttachmentStore;
+    /**
+     * Internal method to add an attachment by chunking the file and storing chunks.
+     */
+    private addAttachmentInternal;
+    /**
+     * Internal method to add an attachment from a streaming data source.
+     * Memory efficient - processes data chunk by chunk without loading entire file into memory.
+     */
+    private addAttachmentStreamInternal;
+    /**
+     * Internal method to append data to an existing attachment.
+     */
+    private appendToAttachmentInternal;
+    /**
+     * Pull changes from a remote content-addressed store.
+     *
+     * This method:
+     * 1. Finds entries in the remote store that we don't have locally
+     * 2. Retrieves those entries from the remote store
+     * 3. Stores them in our local store
+     * 4. Syncs the local store to process the new entries
+     *
+     * @param remoteStore The remote store to pull entries from
+     * @return A promise that resolves when the pull is complete
+     */
+    pullChangesFrom(remoteStore: ContentAddressedStore): Promise<void>;
+    /**
+     * Push changes to a remote content-addressed store.
+     *
+     * This method:
+     * 1. Finds entries in our local store that the remote doesn't have
+     * 2. Retrieves those entries from our local store
+     * 3. Stores them in the remote store
+     *
+     * @param remoteStore The remote store to push entries to
+     * @return A promise that resolves when the push is complete
+     */
+    pushChangesTo(remoteStore: ContentAddressedStore): Promise<void>;
+}
+//# sourceMappingURL=BaseMindooDB.d.ts.map

package/dist/core/BaseMindooDB.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseMindooDB.d.ts","sourceRoot":"","sources":["../../src/core/BaseMindooDB.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,QAAQ,EACR,SAAS,EAKT,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,EAEpB,gBAAgB,EAChB,cAAc,EACf,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AA2BtE;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,YAAa,YAAW,QAAQ;IAC3C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,KAAK,CAAwB;IACrC,OAAO,CAAC,eAAe,CAAoC;IAC3D,OAAO,CAAC,cAAc,CAAS;IAG/B,OAAO,CAAC,cAAc,CAAU;IAIhC,OAAO,CAAC,KAAK,CAA0E;IAGvF,OAAO,CAAC,WAAW,CAAkC;IAGrD,OAAO,CAAC,QAAQ,CAAuC;IAGvD,OAAO,CAAC,iBAAiB,CAAgB;IAIzC,OAAO,CAAC,sBAAsB,CAA+C;gBAG3E,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,qBAAqB,EAC5B,eAAe,CAAC,EAAE,qBAAqB,EACvC,gBAAgB,CAAC,EAAE,gBAAgB,EACnC,WAAW,GAAE,OAAe;IAS9B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAIzB,aAAa,IAAI,OAAO;IAIxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IA0CnB;;;OAGG;IACH,OAAO,CAAC,4BAA4B;IAOpC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAQlC;;;OAGG;IACH,OAAO,CAAC,8BAA8B;IAatC;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC;;;;OAIG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAsEvC,QAAQ,IAAI,qBAAqB;IAIjC,kBAAkB,IAAI,qBAAqB,GAAG,SAAS;IAIvD,SAAS,IAAI,YAAY;IAInB,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC;IAIpC,uBAAuB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAIrE,4BAA4B,CAChC,cAAc,EAAE,cAAc,EAC9B,kBAAkB,EAAE,MAAM,EAC1B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,SAAS,CAAC;IAIrB;;;;OAIG;YACW,sBAAsB;IA+I9B,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAc9C,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAgFnF,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAWtC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C,4BAA4B,CAChC,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,cAAc,EAC9B,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;OAIG;YACW,iBAAiB;IA+GzB,SAAS,CACb,GAAG,EAAE,SAAS,EACd,UAAU,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC;IAIV,uBAAuB,CAC3B,GAAG,EAAE,SAAS,EACd,UAAU,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EACpD,cAAc,EAAE,cAAc,EAC9B,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;YAIF,iBAAiB;IAsZzB,mBAAmB,CACvB,MAAM,EAAE,oBAAoB,GAAG,IAAI,EACnC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,oBAAoB,KAAK,OAAO,GAAG,IAAI,GACnF,OAAO,CAAC,oBAAoB,CAAC;IAmFzB,mBAAmB,CACxB,MAAM,EAAE,oBAAoB,GAAG,IAAI,EACnC,QAAQ,GAAE,MAAY,GACrB,cAAc,CAAC,oBAAoB,EAAE,IAAI,EAAE,OAAO,CAAC;IAgDtD;;OAEG;YACW,oBAAoB;IA4OlC;;;OAGG;IACH,OAAO,CAAC,YAAY;IAgFpB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAchC;;OAEG;YACW,qBAAqB;IAyDnC;;OAEG;YACW,0BAA0B;IAgFxC;;OAEG;YACY,wBAAwB;IAsDvC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAInC;;OAEG;YACW,qBAAqB;IA0EnC;;;OAGG;YACW,2BAA2B;IAyGzC;;OAEG;YACW,0BAA0B;IAgExC;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCxE;;;;;;;;;;OAUG;IACG,aAAa,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CA8BvE"}