mindoodb 0.0.24 → 0.0.32

package/dist/appendonlystores/network/ServerNetworkContentAddressedStore.js

@@ -4,6 +4,8 @@ exports.ServerNetworkContentAddressedStore = void 0;
 const bloom_1 = require("../../core/appendonlystores/bloom");
 const types_1 = require("../../core/appendonlystores/network/types");
 const RSAEncryption_1 = require("../../core/crypto/RSAEncryption");
+const EntrySignature_1 = require("../../core/crypto/EntrySignature");
+const idGeneration_1 = require("../../core/utils/idGeneration");
 const logging_1 = require("../../core/logging");
 /**
  * Server-side network handler for ContentAddressedStore operations.
@@ -27,7 +29,7 @@ class ServerNetworkContentAddressedStore {
      * @param cryptoAdapter The crypto adapter for encryption
      * @param logger Optional logger instance
      */
-    constructor(localStore, directory, authService, cryptoAdapter, logger) {
+    constructor(localStore, directory, authService, cryptoAdapter, logger, accessControl) {
         this.localStore = localStore;
         this.directory = directory;
         this.authService = authService;
@@ -37,6 +39,97 @@ class ServerNetworkContentAddressedStore {
                 new logging_1.MindooLogger((0, logging_1.getDefaultLogLevel)(), `ServerNetworkStore:${localStore.getId()}`, true);
         const rsaLogger = this.logger.createChild("RSAEncryption");
         this.rsaEncryption = new RSAEncryption_1.RSAEncryption(cryptoAdapter, rsaLogger);
+        this.timestampProvider = accessControl?.timestampProvider;
+        this.witnessDbid = accessControl?.witnessDbid;
+        this.tier1Evaluator = accessControl?.tier1Evaluator;
+        this.wipeGrantDocIdResolver = accessControl?.wipeGrantDocIdResolver;
+        this.dbAccessEvaluator = accessControl?.dbAccessEvaluator;
+        this.revokedKeyResolver = accessControl?.revokedKeyResolver;
+        this.purgedDocResolver = accessControl?.purgedDocResolver;
+    }
+    /**
+     * Resolve the reader's RSA encryption public key for transport encryption.
+     * Prefers the authenticated device signing key (so key-based tokens whose
+     * `sub` is a key, not a username, still resolve), falling back to a
+     * username-based lookup for legacy tokens. Returns null when no active grant
+     * is found.
+     */
+    async resolveReaderEncryptionKey(payload) {
+        if (payload.deviceSigningKey && typeof this.directory.getUserBySigningPublicKey === "function") {
+            const lookup = await this.directory.getUserBySigningPublicKey(payload.deviceSigningKey);
+            if (lookup?.encryptionPublicKey) {
+                return lookup.encryptionPublicKey;
+            }
+        }
+        const userKeys = await this.directory.getUserPublicKeys(payload.sub);
+        return userKeys?.encryptionPublicKey ?? null;
+    }
+    /**
+     * Compute the id allow-list for a (possibly wipe-scoped) token
+     * (docs/accesscontrol.md §6.5). Returns:
+     *  - `null` for a normal token: serving is unrestricted; OR
+     *  - a `Set<string>` for a wipe-scoped token: only these entry ids may be
+     *    served. On the directory store this is exactly the admin-signed grant
+     *    document carrying the directive; on any data store it is empty.
+     */
+    async wipeAllowedIds(payload) {
+        if (!payload.wipe || !payload.deviceSigningKey || !this.wipeGrantDocIdResolver) {
+            return null;
+        }
+        // A wipe-targeted device gets no data-database content at all.
+        if (this.localStore.getId() !== ServerNetworkContentAddressedStore.DIRECTORY_DB_ID) {
+            return new Set();
+        }
+        const grantDocId = await this.wipeGrantDocIdResolver(payload.deviceSigningKey);
+        if (!grantDocId) {
+            return new Set();
+        }
+        const metas = await this.localStore.findNewEntriesForDoc([], grantDocId);
+        return new Set(metas.map((m) => m.id));
+    }
+    /**
+     * The authenticated principal used for blacklist resolution: the device
+     * signing public key carried by the token (§13).
+     */
+    readPrincipal(payload) {
+        return { signingKey: payload.deviceSigningKey };
+    }
+    /**
+     * The set of revoked decryption key ids for the request's principal (§13), or
+     * `null` when the blacklist is disabled (no resolver) or this is the directory
+     * store (never blacklisted, so its policy can always be read). Resolved once
+     * per request and reused across the per-entry filter.
+     */
+    async resolveRevokedKeyIds(payload) {
+        if (!this.revokedKeyResolver)
+            return null;
+        if (this.localStore.getId() === ServerNetworkContentAddressedStore.DIRECTORY_DB_ID) {
+            return null;
+        }
+        return this.revokedKeyResolver(this.readPrincipal(payload));
+    }
+    /** Drop metadata whose `decryptionKeyId` is in the revoked set (§13). */
+    filterMetasByRevokedKeys(metas, revoked) {
+        if (!revoked || revoked.size === 0)
+            return metas;
+        return metas.filter((m) => !m.decryptionKeyId || !revoked.has(m.decryptionKeyId));
+    }
+    /**
+     * Drop ids whose entry `decryptionKeyId` is revoked (§13). Resolves each id's
+     * metadata from the local store; ids with no resolvable metadata are kept
+     * (they carry no revocable key).
+     */
+    async filterIdsByRevokedKeys(ids, revoked) {
+        if (!revoked || revoked.size === 0)
+            return ids;
+        const kept = [];
+        for (const id of ids) {
+            const meta = await this.localStore.getEntryMetadata(id);
+            if (!meta?.decryptionKeyId || !revoked.has(meta.decryptionKeyId)) {
+                kept.push(id);
+            }
+        }
+        return kept;
     }
     /**
      * Get the ID of the underlying store.
@@ -47,12 +140,17 @@ class ServerNetworkContentAddressedStore {
     /**
      * Handle a challenge request from a client.
      *
-     * @param username The username requesting authentication
+     * The username is optional: a client may identify itself by its device
+     * signing public key instead, so the server never needs the cleartext name.
+     *
+     * @param username The username requesting authentication (optional)
+     * @param options.signingPublicKey The device signing public key the client is
+     *        identifying with, when no username is supplied
      * @returns The challenge string
      */
-    async handleChallengeRequest(username) {
-        this.logger.debug(`Handling challenge request for user: ${username}`);
-        return this.authService.generateChallenge(username);
+    async handleChallengeRequest(username, options) {
+        this.logger.debug(`Handling challenge request${username ? ` for user: ${username}` : " by signing key"}`);
+        return this.authService.generateChallenge(username, options);
     }
     /**
      * Handle an authentication request from a client.
@@ -80,7 +178,10 @@ class ServerNetworkContentAddressedStore {
         // Find new entries
         const newEntries = await this.localStore.findNewEntries(knownIds);
         this.logger.debug(`Found ${newEntries.length} new entries`);
-        return newEntries;
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        const scoped = allowed ? newEntries.filter((e) => allowed.has(e.id)) : newEntries;
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        return this.filterMetasByRevokedKeys(scoped, revoked);
     }
     /**
      * Handle a findNewEntriesForDoc request from a client.
@@ -99,7 +200,10 @@ class ServerNetworkContentAddressedStore {
         // Find new entries for the specific document
         const newEntries = await this.localStore.findNewEntriesForDoc(knownIds, docId);
         this.logger.debug(`Found ${newEntries.length} new entries for doc ${docId}`);
-        return newEntries;
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        const scoped = allowed ? newEntries.filter((e) => allowed.has(e.id)) : newEntries;
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        return this.filterMetasByRevokedKeys(scoped, revoked);
     }
     /**
      * Handle a findEntries request from a client.
@@ -118,7 +222,10 @@ class ServerNetworkContentAddressedStore {
         // Find entries
         const entries = await this.localStore.findEntries(type, creationDateFrom, creationDateUntil);
         this.logger.debug(`Found ${entries.length} entries`);
-        return entries;
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        const scoped = allowed ? entries.filter((e) => allowed.has(e.id)) : entries;
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        return this.filterMetasByRevokedKeys(scoped, revoked);
     }
     /**
      * Handle a cursor-based scanEntriesSince request from a client.
@@ -129,8 +236,32 @@ class ServerNetworkContentAddressedStore {
         // Validate token
         const tokenPayload = await this.validateToken(token);
         this.logger.debug(`Token validated for user: ${tokenPayload.sub}`);
+        // Wipe-scoped token (§6.5): return only the allowed entries (the grant
+        // directive on the directory store, nothing on data stores) in a single
+        // terminal page, regardless of cursor.
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        if (allowed) {
+            if (allowed.size === 0) {
+                return { entries: [], nextCursor: cursor, hasMore: false };
+            }
+            const all = await this.localStore.findNewEntries([]);
+            const entries = all.filter((e) => allowed.has(e.id));
+            return { entries, nextCursor: cursor, hasMore: false };
+        }
+        // Clamp the page size server-side (DoS guard): never trust the client's
+        // `limit` to bound the work/response. A missing or non-finite limit falls
+        // back to the maximum page size.
+        const requestedLimit = typeof limit === "number" && Number.isFinite(limit)
+            ? Math.floor(limit)
+            : ServerNetworkContentAddressedStore.MAX_SCAN_PAGE_SIZE;
+        const effectiveLimit = Math.max(1, Math.min(requestedLimit, ServerNetworkContentAddressedStore.MAX_SCAN_PAGE_SIZE));
+        // Per-user revoked-key blacklist (§13): silently omit revoked entries from
+        // the page. Filtering after paging only shrinks a page; the store's own
+        // cursor still advances so the client keeps making progress.
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
         if (this.localStore.scanEntriesSince) {
-            return this.localStore.scanEntriesSince(cursor, limit, filters);
+            const result = await this.localStore.scanEntriesSince(cursor, effectiveLimit, filters);
+            return { ...result, entries: this.filterMetasByRevokedKeys(result.entries, revoked) };
         }
         // Fallback: emulate cursor scan using existing metadata query.
         const all = filters?.docId
@@ -156,7 +287,7 @@ class ServerNetworkContentAddressedStore {
                 ? a.id.localeCompare(b.id)
                 : leftReceiptOrder - rightReceiptOrder;
         });
-        const max = limit ?? Number.MAX_SAFE_INTEGER;
+        const max = effectiveLimit;
         const startIndex = cursor === null
             ? 0
             : sorted.findIndex((meta) => (meta.receiptOrder ?? 0) > cursor.receiptOrder ||
@@ -167,7 +298,7 @@ class ServerNetworkContentAddressedStore {
         const page = sorted.slice(startIndex, startIndex + max);
         const last = page.length > 0 ? page[page.length - 1] : null;
         return {
-            entries: page,
+            entries: this.filterMetasByRevokedKeys(page, revoked),
             nextCursor: last ? { receiptOrder: last.receiptOrder ?? 0, id: last.id } : cursor,
             hasMore: startIndex + page.length < sorted.length,
         };
@@ -199,6 +330,12 @@ class ServerNetworkContentAddressedStore {
             supportsMaterializationPlanning: typeof this.localStore.planDocumentMaterialization === "function",
             supportsBatchMaterializationPlanning: typeof this.localStore.planDocumentMaterializationBatch === "function",
             supportsAttachmentReadPlanning: typeof this.localStore.planAttachmentReadByWalkingMetadata === "function",
+            // Access-control v1 negotiation (docs/accesscontrol.md §4). `serverTime`
+            // lets the client run its clock-skew guard before syncing; the flag
+            // advertises that this server stamps witness receipts and enforces Tier 1.
+            serverTime: Date.now(),
+            supportsAccessControlV1: this.timestampProvider !== undefined,
+            supportsRemoteWipeV1: this.wipeGrantDocIdResolver !== undefined,
         };
     }
     /**
@@ -239,19 +376,31 @@ class ServerNetworkContentAddressedStore {
         const tokenPayload = await this.validateToken(token);
         const username = tokenPayload.sub;
         this.logger.debug(`Token validated for user: ${username}`);
-        // Get user's public encryption key
-        const userKeys = await this.directory.getUserPublicKeys(username);
-        if (!userKeys) {
+        // Resolve the reader's RSA encryption public key for transport encryption.
+        // Prefer the authenticated device signing key, which works for key-based
+        // tokens whose `sub` is a key rather than a cleartext username; fall back to
+        // the username for legacy tokens.
+        const encryptionPublicKey = await this.resolveReaderEncryptionKey(tokenPayload);
+        if (!encryptionPublicKey) {
             throw new types_1.NetworkError(types_1.NetworkErrorType.USER_NOT_FOUND, `User "${username}" is not found, or has no active access grant on this server. `
                 + `The tenant's directory database may not have been synced to this server yet, `
                 + `or the access was revoked.`);
         }
         this.logger.debug(`Retrieved encryption key for user: ${username}`);
+        // Restrict a wipe-scoped token to only the grant directive (§6.5).
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        const requestedIds = allowed ? ids.filter((id) => allowed.has(id)) : ids;
         // Get the entries from local store
-        const entries = await this.localStore.getEntries(ids);
+        const entries = await this.localStore.getEntries(requestedIds);
         this.logger.debug(`Retrieved ${entries.length} entries from local store`);
+        // Per-user revoked-key blacklist (§13): fail-closed on the data-serving
+        // path. Even if a client already knows a revoked entry's id, the server
+        // never hands back its bytes. A StoreEntry carries its own decryptionKeyId,
+        // so we filter without an extra metadata lookup.
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        const servableEntries = this.filterMetasByRevokedKeys(entries, revoked);
         // Encrypt each entry with the user's RSA public key
-        const encryptedEntries = await this.encryptEntriesForUser(entries, userKeys.encryptionPublicKey);
+        const encryptedEntries = await this.encryptEntriesForUser(servableEntries, encryptionPublicKey);
         this.logger.debug(`Encrypted ${encryptedEntries.length} entries for user: ${username}`);
         return encryptedEntries;
     }
@@ -259,7 +408,20 @@ class ServerNetworkContentAddressedStore {
         this.logger.debug(`Handling getEntryMetadata request for ${id}`);
         const tokenPayload = await this.validateToken(token);
         this.logger.debug(`Token validated for user: ${tokenPayload.sub}`);
-        return this.localStore.getEntryMetadata(id);
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        if (allowed && !allowed.has(id)) {
+            return null;
+        }
+        const meta = await this.localStore.getEntryMetadata(id);
+        if (!meta)
+            return null;
+        // Per-user revoked-key blacklist (§13): fail-closed — never reveal metadata
+        // for a revoked entry.
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        if (revoked && meta.decryptionKeyId && revoked.has(meta.decryptionKeyId)) {
+            return null;
+        }
+        return meta;
     }
     /**
      * Handle a putEntries request from a client.
@@ -272,17 +434,131 @@ class ServerNetworkContentAddressedStore {
         // Validate token
         const tokenPayload = await this.validateToken(token);
         this.logger.debug(`Token validated for user: ${tokenPayload.sub}`);
+        // A wipe-targeted device may not push anything (§6.5): it exists only to
+        // receive the wipe directive and then delete its local copy.
+        if (tokenPayload.wipe && this.wipeGrantDocIdResolver) {
+            throw new types_1.NetworkError(types_1.NetworkErrorType.ACCESS_DENIED, "Device is targeted for remote wipe and may not push entries");
+        }
+        // Per-user revoked-key blacklist (§13): a revoked key id is also a write
+        // blacklist — the user may neither receive further updates for it nor push
+        // new ones. Resolved once per batch (null for the directory store / when the
+        // blacklist is disabled).
+        const revokedKeyIds = await this.resolveRevokedKeyIds(tokenPayload);
+        // Purged-document denylist (§13): entries belonging to a document whose
+        // history was purged on the server may never be re-ingested, so a stale
+        // client cannot resurrect purged data. Resolved once per batch (null when
+        // disabled / for the directory store).
+        const purgedDocIds = this.purgedDocResolver
+            ? await this.purgedDocResolver()
+            : null;
+        // A single acceptance time for this batch so receipts are consistent and a
+        // batch cannot interleave with the witness's own monotonic clock (§5.3).
+        const receivedAt = Date.now();
+        const stampedMetadata = [];
+        // Storage-format floor (requireMetadataSignatureSince): this is the
+        // authoritative v2 enforcement point. The server compares the admin-signed
+        // cutoff against its OWN clock (receivedAt) — never the entry's
+        // attacker-settable createdAt — so once the cutoff has passed, no new v1
+        // entry can be ingested and a forged v1 entry cannot bypass the floor by
+        // backdating. Resolved once per batch. The directory store is exempt: it
+        // must always accept so the policy that defines the floor can be read.
+        let requireMetadataSignature = false;
+        if ((this.witnessDbid ?? this.localStore.getId()) !== "directory" &&
+            typeof this.directory.getRequireMetadataSignatureSince === "function") {
+            const cutoff = await this.directory.getRequireMetadataSignatureSince();
+            requireMetadataSignature = cutoff !== undefined && receivedAt >= cutoff;
+        }
         // Process each entry
+        const toStore = [];
+        // Audit #4 (revocation lag): force a directory trust refresh once at the
+        // start of the batch so a just-pushed revocation is observed immediately
+        // instead of lagging by up to DIRECTORY_SYNC_INTERVAL_MS. The refresh
+        // updates the shared trust cache, so subsequent entries in the batch reuse
+        // it without re-syncing.
+        let forceTrustRefresh = true;
         for (const entry of entries) {
-            // Verify the entry was created by a trusted user
-            const isValidKey = await this.directory.validatePublicSigningKey(entry.createdByPublicKey);
+            // Reject a push carrying a revoked decryptionKeyId (§13). The user has
+            // been removed from this key's distribution, so the server refuses to
+            // ingest or propagate further writes under it.
+            if (revokedKeyIds &&
+                entry.decryptionKeyId &&
+                revokedKeyIds.has(entry.decryptionKeyId)) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.ACCESS_DENIED, `Entry ${entry.id} carries a revoked decryptionKeyId and may not be pushed`);
+            }
+            // Reject a push for a purged document (§13). The document's history was
+            // physically purged on the server; re-ingesting these entries would
+            // resurrect data that must stay deleted.
+            if (purgedDocIds && entry.docId && purgedDocIds.has(entry.docId)) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.ACCESS_DENIED, `Entry ${entry.id} belongs to a purged document and may not be pushed`);
+            }
+            // Verify the entry was created by a trusted user (baseline Tier 1).
+            const isValidKey = await this.directory.validatePublicSigningKey(entry.createdByPublicKey, { forceRefresh: forceTrustRefresh });
+            forceTrustRefresh = false;
             if (!isValidKey) {
                 throw new types_1.NetworkError(types_1.NetworkErrorType.INVALID_SIGNATURE, `Entry ${entry.id} was not signed by a trusted user`);
             }
+            // Zero-trust ingest (audit finding #1 & #5): the server must not witness or
+            // propagate an entry it cannot authenticate. Verify that the served bytes
+            // hash to the entry's contentHash and that the author signature (the
+            // metadata-binding signature when present, otherwise the legacy ciphertext
+            // signature) is valid. A trusted key alone is NOT sufficient: anyone
+            // holding any trusted key could otherwise push entries with mismatched or
+            // absent signatures.
+            const subtle = this.cryptoAdapter.getSubtle();
+            const actualHash = await (0, idGeneration_1.computeContentHash)(entry.encryptedData, subtle);
+            if (actualHash !== entry.contentHash) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.INVALID_SIGNATURE, `Entry ${entry.id} content hash does not match its payload`);
+            }
+            // Enforce the v2 floor with a clear, dedicated error before the generic
+            // signature check (which would also reject it via requireMetadataSignature).
+            if (requireMetadataSignature && !entry.metadataSignature) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.INVALID_SIGNATURE, `Entry ${entry.id} must carry a v2 metadata signature (tenant requires v2 as of the configured cutoff)`);
+            }
+            const isValidSignature = await (0, EntrySignature_1.verifyEntrySignatureCrypto)(entry, entry.encryptedData, entry.createdByPublicKey, subtle, { requireMetadataSignature });
+            if (!isValidSignature) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.INVALID_SIGNATURE, `Entry ${entry.id} has an invalid author signature`);
+            }
+            // Rule-based Tier 1 enforcement (docs/accesscontrol.md §7). The server can
+            // only decide the identity tier; content-tier (Tier 2) gates are deferred
+            // to clients and treated as allowed here.
+            if (this.tier1Evaluator) {
+                const decision = await this.tier1Evaluator(entry, this.witnessDbid ?? this.localStore.getId());
+                if (!decision.allowed) {
+                    throw new types_1.NetworkError(types_1.NetworkErrorType.ACCESS_DENIED, `Entry ${entry.id} denied by Tier 1 policy: ${decision.reason}`);
+                }
+            }
+            // Stamp a witness receipt onto the accepted entry (§5.3). Self-authored
+            // entries (the witness pushing its own data) are not self-witnessed.
+            //
+            // Legacy entries (no `entryVersion`) are NOT witnessed: they predate the
+            // witness era and the version-aware trusted-time rule treats them as
+            // stable at their `createdAt` (see core/storeEntryTime.ts). Stamping a
+            // `receivedAt = now` on them when an old local DB first syncs to a fresh
+            // server would collapse every old doc onto "today" and re-introduce the
+            // "access since: today" bug. Only witness-era writers (`entryVersion`
+            // present) are eligible for a receipt.
+            if (this.timestampProvider
+                && entry.entryVersion !== undefined
+                && entry.createdByPublicKey !== this.timestampProvider.issuerPublicKey) {
+                const stamp = await this.timestampProvider.stamp(entry, { dbid: this.witnessDbid ?? this.localStore.getId(), receivedAt });
+                const witnessed = { ...entry, ...stamp };
+                toStore.push(witnessed);
+                stampedMetadata.push(this.toMetadata(witnessed));
+            }
+            else {
+                toStore.push(entry);
+                stampedMetadata.push(this.toMetadata(entry));
+            }
         }
-        // Store all entries
-        await this.localStore.putEntries(entries);
-        this.logger.debug(`Successfully stored ${entries.length} entries`);
+        // Store all entries (witnessed where applicable)
+        await this.localStore.putEntries(toStore);
+        this.logger.debug(`Successfully stored ${toStore.length} entries`);
+        return stampedMetadata;
+    }
+    /** Project a store entry to its metadata (including any witness fields). */
+    toMetadata(entry) {
+        const { encryptedData: _encryptedData, ...metadata } = entry;
+        return metadata;
     }
     /**
      * Handle a hasEntries request from a client.
@@ -300,7 +576,10 @@ class ServerNetworkContentAddressedStore {
         // Check which IDs exist in local store
         const existingIds = await this.localStore.hasEntries(ids);
         this.logger.debug(`Found ${existingIds.length} existing entries out of ${ids.length} checked`);
-        return existingIds;
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        const scoped = allowed ? existingIds.filter((id) => allowed.has(id)) : existingIds;
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        return this.filterIdsByRevokedKeys(scoped, revoked);
     }
     /**
      * Handle a getAllIds request from a client.
@@ -317,7 +596,10 @@ class ServerNetworkContentAddressedStore {
         // Get all entry IDs from local store
         const allIds = await this.localStore.getAllIds();
         this.logger.debug(`Returning ${allIds.length} entry IDs`);
-        return allIds;
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        const scoped = allowed ? allIds.filter((id) => allowed.has(id)) : allIds;
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        return this.filterIdsByRevokedKeys(scoped, revoked);
     }
     /**
      * Handle a resolveDependencies request from a client.
@@ -333,10 +615,16 @@ class ServerNetworkContentAddressedStore {
         // Validate token
         const tokenPayload = await this.validateToken(token);
         this.logger.debug(`Token validated for user: ${tokenPayload.sub}`);
+        // A wipe-scoped token may not traverse the DAG beyond its grant directive.
+        const allowed = await this.wipeAllowedIds(tokenPayload);
+        if (allowed) {
+            return allowed.has(startId) ? [startId] : [];
+        }
         // Resolve dependencies in local store
         const resolvedIds = await this.localStore.resolveDependencies(startId, options);
         this.logger.debug(`Resolved ${resolvedIds.length} dependencies`);
-        return resolvedIds;
+        const revoked = await this.resolveRevokedKeyIds(tokenPayload);
+        return this.filterIdsByRevokedKeys(resolvedIds, revoked);
     }
     async handlePlanDocumentMaterialization(token, docId, options) {
         const tokenPayload = await this.validateToken(token);
@@ -368,6 +656,17 @@ class ServerNetworkContentAddressedStore {
         if (!payload) {
             throw new types_1.NetworkError(types_1.NetworkErrorType.INVALID_TOKEN, "Invalid or expired token");
         }
+        // Database-open gate (docs/accesscontrol.md, directory-restricted policy).
+        // Applied here so it covers every authenticated sync operation (reads and
+        // writes) in one place. The directory store is never wired with an
+        // evaluator, so it always syncs.
+        if (this.dbAccessEvaluator) {
+            const dbid = this.witnessDbid ?? this.localStore.getId();
+            const allowed = await this.dbAccessEvaluator({ signingKey: payload.deviceSigningKey }, dbid);
+            if (!allowed) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.ACCESS_DENIED, `Database "${dbid}" is not in the tenant's allowed database list`);
+            }
+        }
         return payload;
     }
     /**
@@ -396,6 +695,7 @@ class ServerNetworkContentAddressedStore {
                 signature: entry.signature,
                 originalSize: entry.originalSize,
                 encryptedSize: entry.encryptedSize,
+                attachmentRefs: entry.attachmentRefs,
                 rsaEncryptedPayload,
             };
             results.push(encryptedEntry);
@@ -404,4 +704,13 @@ class ServerNetworkContentAddressedStore {
     }
 }
 exports.ServerNetworkContentAddressedStore = ServerNetworkContentAddressedStore;
+/** The directory database id, where grant documents live (§6.5). */
+ServerNetworkContentAddressedStore.DIRECTORY_DB_ID = "directory";
+/**
+ * Server-side cap on a single `scanEntriesSince` page (DoS guard). A client
+ * may request fewer, but never more — an unbounded/huge `limit` would let a
+ * caller force the server to materialize and serialize the entire store in one
+ * response. Clients page via `nextCursor`/`hasMore` to read more.
+ */
+ServerNetworkContentAddressedStore.MAX_SCAN_PAGE_SIZE = 1000;
 //# sourceMappingURL=ServerNetworkContentAddressedStore.js.map

package/dist/appendonlystores/network/ServerNetworkContentAddressedStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"ServerNetworkContentAddressedStore.js","sourceRoot":"","sources":["../../../src/appendonlystores/network/ServerNetworkContentAddressedStore.ts"],"names":[],"mappings":";;;AAmBA,6DAAyE;AAOzE,qEAA2F;AAC3F,mEAAgE;AAEhE,gDAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAa,kCAAkC;IAQ7C;;;;;;;;OAQG;IACH,YACE,UAAiC,EACjC,SAAgC,EAChC,WAAkC,EAClC,aAA4B,EAC5B,MAAe;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,MAAM;YACT,MAAM;gBACN,IAAI,sBAAY,CAAC,IAAA,4BAAkB,GAAE,EAAE,sBAAsB,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAAC,QAAgB;QAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,SAAqB;QAK/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,SAAS,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,QAAkB;QAElB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAErD,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,mBAAmB;QACnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,MAAM,cAAc,CAAC,CAAC;QAE5D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,0BAA0B,CAC9B,KAAa,EACb,QAAkB,EAClB,KAAa;QAEb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;QAE5E,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,MAAM,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAE7E,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,IAAoB,EACpB,gBAA+B,EAC/B,iBAAgC;QAEhC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;QAEnE,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,eAAe;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAC/C,IAAI,EACJ,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;QAErD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,MAA8B,EAC9B,KAAc,EACd,OAA0B;QAE1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEvD,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QAED,+DAA+D;QAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,KAAK;YACxB,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;YAC/D,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG;aACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,IAAI,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzG,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,OAAO,EAAE,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC9H,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,OAAO,EAAE,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAClI,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC7C,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC9C,OAAO,gBAAgB,KAAK,iBAAiB;gBAC3C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,CAAC,CAAC,gBAAgB,GAAG,iBAAiB,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEL,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAC7C,MAAM,UAAU,GACd,MAAM,KAAK,IAAI;YACb,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY;gBAC9C,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAC1E,CAAC;QAER,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM;YACjF,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;SAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAAC,KAAa;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAExD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAA,4BAAoB,EAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAAa;QACvC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,OAAO;YACL,eAAe,EAAE,SAAS;YAC1B,kBAAkB,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,KAAK,UAAU;YAC1E,sBAAsB,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,KAAK,UAAU;YAC/E,wBAAwB,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB,KAAK,UAAU;YACnF,+BAA+B,EAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,2BAA2B,KAAK,UAAU;YACnE,oCAAoC,EAClC,OAAO,IAAI,CAAC,UAAU,CAAC,gCAAgC,KAAK,UAAU;YACxE,8BAA8B,EAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,mCAAmC,KAAK,UAAU;SAC5E,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,KAAa;QAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAE1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QAC/C,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,gBAAgB,EAAE,CAAC;YACnB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,CAAC;YACtB,yBAAyB,EAAE,CAAC;YAC5B,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,wBAAwB,EAAE,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,GAAa;QAEb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;QAE3E,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QAE3D,mCAAmC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,cAAc,EAC/B,SAAS,QAAQ,gEAAgE;kBAC7E,+EAA+E;kBAC/E,4BAA4B,CACjC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;QAEpE,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,MAAM,2BAA2B,CAAC,CAAC;QAE1E,oDAAoD;QACpD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACvD,OAAO,EACP,QAAQ,CAAC,mBAAmB,CAC7B,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,gBAAgB,CAAC,MAAM,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QACxF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,EAAU;QAEV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,CAAC,CAAC;QAEjE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,OAAqB;QACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;QAE/E,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,qBAAqB;QACrB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,iDAAiD;YACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC3F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,iBAAiB,EAClC,SAAS,KAAK,CAAC,EAAE,mCAAmC,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,GAAa;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;QAEvE,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,uCAAuC;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,WAAW,CAAC,MAAM,4BAA4B,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;QAE/F,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAEhD,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,qCAAqC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC;QAE1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,yBAAyB,CAC7B,KAAa,EACb,OAAe,EACf,OAAiC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;QAEzE,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,WAAW,CAAC,MAAM,eAAe,CAAC,CAAC;QAEjE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,KAAa,EACb,KAAa,EACb,OAAoC;QAEpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,sCAAsC,CAC1C,KAAa,EACb,MAAgB,EAChB,OAAoC;QAEpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,UAAU,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,yCAAyC,CAC7C,KAAa,EACb,WAAmB,EACnB,cAAsB,EACtB,OAAkC;QAElC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,mCAAmC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,mCAAmC,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa,CAAC,KAAa;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB,CACjC,OAAqB,EACrB,mBAA2B;QAE3B,MAAM,OAAO,GAA4B,EAAE,CAAC;QAE5C,6CAA6C;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;QAEhF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,+BAA+B;YAC/B,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAC1D,KAAK,CAAC,aAAa,EACnB,SAAS,CACV,CAAC;YAEF,4EAA4E;YAC5E,MAAM,cAAc,GAA0B;gBAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,mBAAmB;aACpB,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AA5hBD,gFA4hBC"}
+{"version":3,"file":"ServerNetworkContentAddressedStore.js","sourceRoot":"","sources":["../../../src/appendonlystores/network/ServerNetworkContentAddressedStore.ts"],"names":[],"mappings":";;;AAmBA,6DAAyE;AAOzE,qEAA2F;AAC3F,mEAAgE;AAChE,qEAA8E;AAC9E,gEAAmE;AAEnE,gDAA8E;AAkG9E;;;;;;;;;;;GAWG;AACH,MAAa,kCAAkC;IA+B7C;;;;;;;;OAQG;IACH,YACE,UAAiC,EACjC,SAAgC,EAChC,WAAkC,EAClC,aAA4B,EAC5B,MAAe,EACf,aAA0C;QAE1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,MAAM;YACT,MAAM;gBACN,IAAI,sBAAY,CAAC,IAAA,4BAAkB,GAAE,EAAE,sBAAsB,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,iBAAiB,GAAG,aAAa,EAAE,iBAAiB,CAAC;QAC1D,IAAI,CAAC,WAAW,GAAG,aAAa,EAAE,WAAW,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,aAAa,EAAE,cAAc,CAAC;QACpD,IAAI,CAAC,sBAAsB,GAAG,aAAa,EAAE,sBAAsB,CAAC;QACpE,IAAI,CAAC,iBAAiB,GAAG,aAAa,EAAE,iBAAiB,CAAC;QAC1D,IAAI,CAAC,kBAAkB,GAAG,aAAa,EAAE,kBAAkB,CAAC;QAC5D,IAAI,CAAC,iBAAiB,GAAG,aAAa,EAAE,iBAAiB,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,0BAA0B,CACtC,OAAgC;QAEhC,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,yBAAyB,KAAK,UAAU,EAAE,CAAC;YAC/F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACxF,IAAI,MAAM,EAAE,mBAAmB,EAAE,CAAC;gBAChC,OAAO,MAAM,CAAC,mBAAmB,CAAC;YACpC,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrE,OAAO,QAAQ,EAAE,mBAAmB,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,cAAc,CAC1B,OAAgC;QAEhC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,+DAA+D;QAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,kCAAkC,CAAC,eAAe,EAAE,CAAC;YACnF,OAAO,IAAI,GAAG,EAAU,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,GAAG,EAAU,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACzE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,OAAgC;QACpD,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,oBAAoB,CAChC,OAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,kCAAkC,CAAC,eAAe,EAAE,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,yEAAyE;IACjE,wBAAwB,CAC9B,KAAU,EACV,OAA2B;QAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACpF,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,sBAAsB,CAClC,GAAa,EACb,OAA2B;QAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAC/C,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,EAAE,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,sBAAsB,CAC1B,QAAiB,EACjB,OAAuC;QAEvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,CAAC,CAAC,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,SAAqB;QAK/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,SAAS,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,QAAkB;QAElB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAErD,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,mBAAmB;QACnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,MAAM,cAAc,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAClF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,0BAA0B,CAC9B,KAAa,EACb,QAAkB,EAClB,KAAa;QAEb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;QAE5E,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,MAAM,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAClF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,IAAoB,EACpB,gBAA+B,EAC/B,iBAAgC;QAEhC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;QAEnE,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,eAAe;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAC/C,IAAI,EACJ,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,MAA8B,EAC9B,KAAc,EACd,OAA0B;QAE1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEvD,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,uEAAuE;QACvE,wEAAwE;QACxE,uCAAuC;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC7D,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC;QAED,wEAAwE;QACxE,0EAA0E;QAC1E,iCAAiC;QACjC,MAAM,cAAc,GAClB,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACjD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YACnB,CAAC,CAAC,kCAAkC,CAAC,kBAAkB,CAAC;QAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAC7B,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,kCAAkC,CAAC,kBAAkB,CAAC,CAChF,CAAC;QAEF,2EAA2E;QAC3E,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAE9D,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YACvF,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACxF,CAAC;QAED,+DAA+D;QAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,KAAK;YACxB,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;YAC/D,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG;aACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,IAAI,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzG,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,OAAO,EAAE,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC9H,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,OAAO,EAAE,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAClI,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC7C,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC9C,OAAO,gBAAgB,KAAK,iBAAiB;gBAC3C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,CAAC,CAAC,gBAAgB,GAAG,iBAAiB,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEL,MAAM,GAAG,GAAG,cAAc,CAAC;QAC3B,MAAM,UAAU,GACd,MAAM,KAAK,IAAI;YACb,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY;gBAC9C,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAC1E,CAAC;QAER,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC;YACrD,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM;YACjF,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;SAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAAC,KAAa;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAExD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAA,4BAAoB,EAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAAa;QACvC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,OAAO;YACL,eAAe,EAAE,SAAS;YAC1B,kBAAkB,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,KAAK,UAAU;YAC1E,sBAAsB,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,KAAK,UAAU;YAC/E,wBAAwB,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB,KAAK,UAAU;YACnF,+BAA+B,EAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,2BAA2B,KAAK,UAAU;YACnE,oCAAoC,EAClC,OAAO,IAAI,CAAC,UAAU,CAAC,gCAAgC,KAAK,UAAU;YACxE,8BAA8B,EAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,mCAAmC,KAAK,UAAU;YAC3E,yEAAyE;YACzE,oEAAoE;YACpE,2EAA2E;YAC3E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,uBAAuB,EAAE,IAAI,CAAC,iBAAiB,KAAK,SAAS;YAC7D,oBAAoB,EAAE,IAAI,CAAC,sBAAsB,KAAK,SAAS;SAChE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,KAAa;QAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAE1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QAC/C,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,gBAAgB,EAAE,CAAC;YACnB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,CAAC;YACtB,yBAAyB,EAAE,CAAC;YAC5B,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,wBAAwB,EAAE,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,GAAa;QAEb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;QAE3E,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QAE3D,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,kCAAkC;QAClC,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAChF,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,cAAc,EAC/B,SAAS,QAAQ,gEAAgE;kBAC7E,+EAA+E;kBAC/E,4BAA4B,CACjC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;QAEpE,mEAAmE;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEzE,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,MAAM,2BAA2B,CAAC,CAAC;QAE1E,wEAAwE;QACxE,wEAAwE;QACxE,4EAA4E;QAC5E,iDAAiD;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAExE,oDAAoD;QACpD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACvD,eAAe,EACf,mBAAmB,CACpB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,gBAAgB,CAAC,MAAM,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QACxF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,EAAU;QAEV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,CAAC,CAAC;QAEjE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,4EAA4E;QAC5E,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,IAAI,OAAO,IAAI,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,OAAqB;QACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;QAE/E,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,yEAAyE;QACzE,6DAA6D;QAC7D,IAAI,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACrD,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,2EAA2E;QAC3E,6EAA6E;QAC7E,0BAA0B;QAC1B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAEpE,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,uCAAuC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB;YACzC,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE;YAChC,CAAC,CAAC,IAAI,CAAC;QAET,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,eAAe,GAAyB,EAAE,CAAC;QAEjD,oEAAoE;QACpE,2EAA2E;QAC3E,gEAAgE;QAChE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,wBAAwB,GAAG,KAAK,CAAC;QACrC,IACE,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,WAAW;YAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,gCAAgC,KAAK,UAAU,EACrE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gCAAgC,EAAE,CAAC;YACvE,wBAAwB,GAAG,MAAM,KAAK,SAAS,IAAI,UAAU,IAAI,MAAM,CAAC;QAC1E,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,yBAAyB;QACzB,IAAI,iBAAiB,GAAG,IAAI,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,uEAAuE;YACvE,sEAAsE;YACtE,+CAA+C;YAC/C,IACE,aAAa;gBACb,KAAK,CAAC,eAAe;gBACrB,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EACxC,CAAC;gBACD,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,SAAS,KAAK,CAAC,EAAE,0DAA0D,CAC5E,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,oEAAoE;YACpE,yCAAyC;YACzC,IAAI,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,SAAS,KAAK,CAAC,EAAE,qDAAqD,CACvE,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAC9D,KAAK,CAAC,kBAAkB,EACxB,EAAE,YAAY,EAAE,iBAAiB,EAAE,CACpC,CAAC;YACF,iBAAiB,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,iBAAiB,EAClC,SAAS,KAAK,CAAC,EAAE,mCAAmC,CACrD,CAAC;YACJ,CAAC;YAED,4EAA4E;YAC5E,0EAA0E;YAC1E,qEAAqE;YACrE,2EAA2E;YAC3E,qEAAqE;YACrE,0EAA0E;YAC1E,qBAAqB;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAkB,EAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACzE,IAAI,UAAU,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,iBAAiB,EAClC,SAAS,KAAK,CAAC,EAAE,0CAA0C,CAC5D,CAAC;YACJ,CAAC;YACD,wEAAwE;YACxE,6EAA6E;YAC7E,IAAI,wBAAwB,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBACzD,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,iBAAiB,EAClC,SAAS,KAAK,CAAC,EAAE,sFAAsF,CACxG,CAAC;YACJ,CAAC;YACD,MAAM,gBAAgB,GAAG,MAAM,IAAA,2CAA0B,EACvD,KAAK,EACL,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,kBAAkB,EACxB,MAAM,EACN,EAAE,wBAAwB,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,iBAAiB,EAClC,SAAS,KAAK,CAAC,EAAE,kCAAkC,CACpD,CAAC;YACJ,CAAC;YAED,2EAA2E;YAC3E,0EAA0E;YAC1E,0CAA0C;YAC1C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/F,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,SAAS,KAAK,CAAC,EAAE,6BAA6B,QAAQ,CAAC,MAAM,EAAE,CAChE,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,qEAAqE;YACrE,EAAE;YACF,yEAAyE;YACzE,qEAAqE;YACrE,uEAAuE;YACvE,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,uCAAuC;YACvC,IACE,IAAI,CAAC,iBAAiB;mBACnB,KAAK,CAAC,YAAY,KAAK,SAAS;mBAChC,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC,iBAAiB,CAAC,eAAe,EACtE,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAC9C,KAAK,EACL,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAClE,CAAC;gBACF,MAAM,SAAS,GAAe,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC;QACnE,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,4EAA4E;IACpE,UAAU,CAAC,KAAiB;QAClC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC7D,OAAO,QAA8B,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,GAAa;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;QAEvE,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,uCAAuC;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,WAAW,CAAC,MAAM,4BAA4B,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;QAE/F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAEhD,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,qCAAqC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC;QAE1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,yBAAyB,CAC7B,KAAa,EACb,OAAe,EACf,OAAiC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;QAEzE,iBAAiB;QACjB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,2EAA2E;QAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC;QAED,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,WAAW,CAAC,MAAM,eAAe,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,KAAa,EACb,KAAa,EACb,OAAoC;QAEpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,sCAAsC,CAC1C,KAAa,EACb,MAAgB,EAChB,OAAoC;QAEpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,UAAU,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,yCAAyC,CAC7C,KAAa,EACb,WAAmB,EACnB,cAAsB,EACtB,OAAkC;QAElC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,mCAAmC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,mCAAmC,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa,CAAC,KAAa;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,iCAAiC;QACjC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC1C,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,EACxC,IAAI,CACL,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,oBAAY,CACpB,wBAAgB,CAAC,aAAa,EAC9B,aAAa,IAAI,gDAAgD,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB,CACjC,OAAqB,EACrB,mBAA2B;QAE3B,MAAM,OAAO,GAA4B,EAAE,CAAC;QAE5C,6CAA6C;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;QAEhF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,+BAA+B;YAC/B,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAC1D,KAAK,CAAC,aAAa,EACnB,SAAS,CACV,CAAC;YAEF,4EAA4E;YAC5E,MAAM,cAAc,GAA0B;gBAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,mBAAmB;aACpB,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;;AAh7BH,gFAi7BC;AA55BC,oEAAoE;AAC5C,kDAAe,GAAG,WAAW,CAAC;AACtD;;;;;GAKG;AACa,qDAAkB,GAAG,IAAI,CAAC"}

package/dist/browser/appendonlystores/IndexedDBContentAddressedStore.d.ts

@@ -67,6 +67,15 @@ export declare class IndexedDBContentAddressedStore implements ContentAddressedS
      */
     getStoredBytes(): Promise<StoreByteTotals>;
     putEntries(entries: StoreEntry[]): Promise<void>;
+    /**
+     * Apply witness receipts to already-stored entries (docs/accesscontrol.md §5.3).
+     *
+     * Updates the witness fields on the affected entry metadata and assigns each a
+     * fresh `receiptOrder` (from the persisted counter) so the revision feed's
+     * `scanEntriesSince` cursor re-discovers the now-witnessed entries. Receipts
+     * whose entry is absent locally, or that match the stored witness, are skipped.
+     */
+    applyWitnessReceipts(receipts: StoreEntryMetadata[]): Promise<void>;
     getEntries(ids: string[]): Promise<StoreEntry[]>;
     getEntryMetadata(id: string): Promise<StoreEntryMetadata | null>;
     planAttachmentReadByWalkingMetadata(lastChunkId: string, attachmentSize: number, options: AttachmentReadPlanOptions): Promise<AttachmentReadPlan>;

package/dist/browser/appendonlystores/IndexedDBContentAddressedStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IndexedDBContentAddressedStore.d.ts","sourceRoot":"","sources":["../../../src/browser/appendonlystores/IndexedDBContentAddressedStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,SAAS,EACV,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,gCAAgC,EAChC,2BAA2B,EAC3B,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,KAAK,EACV,UAAU,EACV,kBAAkB,EAClB,cAAc,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAoC,MAAM,oBAAoB,CAAC;AAqC9E,UAAU,eAAe;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAYtE;AAqRD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,8BAA+B,YAAW,qBAAqB;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,OAAO,CAAC,EAAE,CAA4B;IACtC,OAAO,CAAC,WAAW,CAAqC;gBAGtD,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,SAA0B,EACrC,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,gBAAgB;IAoB5B,4EAA4E;IAC5E,OAAO,CAAC,UAAU;IA8HlB,KAAK,IAAI,MAAM;IAIf,YAAY,IAAI,SAAS;IAIzB,gBAAgB,IAAI,MAAM;IAI1B,OAAO,CAAC,eAAe;YAWT,gBAAgB;IAyB9B;;;;;;;;;OASG;IACG,cAAc,IAAI,OAAO,CAAC,eAAe,CAAC;IAiB1C,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoIhD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAyChD,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUhE,mCAAmC,CACvC,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,kBAAkB,CAAC;IAIxB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuB5C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA+BjE,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAgC1B,WAAW,CACf,IAAI,EAAE,cAAc,EACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,EAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAsC1B,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAwB9B,gBAAgB,CACpB,MAAM,EAAE,eAAe,GAAG,IAAI,EAC9B,KAAK,GAAE,MAAgC,EACvC,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC;IA8DrB,iBAAiB,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAmCjD,2BAA2B,CAC/B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,2BAA2B,CAAC;IAOjC,gCAAgC,CACpC,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,gCAAgC,CAAC;IAmBtC,mBAAmB,CACvB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,MAAM,EAAE,CAAC;IAyDd,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuF7C,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUhF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAWtD,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBlC,eAAe,CACnB,QAAQ,CAAC,EAAE,sBAAsB,GAChC,OAAO,CAAC,qBAAqB,CAAC;IAQjC,mBAAmB,IAAI,qBAAqB;IAY5C,OAAO,CAAC,kBAAkB;YA+BZ,kBAAkB;YA4ElB,iBAAiB;IAwB/B;;;;OAIG;YACW,2BAA2B;CAqC1C;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,CAmFrD"}
+{"version":3,"file":"IndexedDBContentAddressedStore.d.ts","sourceRoot":"","sources":["../../../src/browser/appendonlystores/IndexedDBContentAddressedStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,SAAS,EACV,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,gCAAgC,EAChC,2BAA2B,EAC3B,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,mCAAmC,CAAC;AAI3C,OAAO,KAAK,EACV,UAAU,EACV,kBAAkB,EAClB,cAAc,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAoC,MAAM,oBAAoB,CAAC;AAqC9E,UAAU,eAAe;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAYtE;AAqRD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,8BAA+B,YAAW,qBAAqB;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,OAAO,CAAC,EAAE,CAA4B;IACtC,OAAO,CAAC,WAAW,CAAqC;gBAGtD,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,SAA0B,EACrC,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,gBAAgB;IAoB5B,4EAA4E;IAC5E,OAAO,CAAC,UAAU;IA8HlB,KAAK,IAAI,MAAM;IAIf,YAAY,IAAI,SAAS;IAIzB,gBAAgB,IAAI,MAAM;IAI1B,OAAO,CAAC,eAAe;YAWT,gBAAgB;IAyB9B;;;;;;;;;OASG;IACG,cAAc,IAAI,OAAO,CAAC,eAAe,CAAC;IAiB1C,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoItD;;;;;;;OAOG;IACG,oBAAoB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwDnE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAyDhD,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUhE,mCAAmC,CACvC,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,kBAAkB,CAAC;IAIxB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuB5C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA+BjE,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAgC1B,WAAW,CACf,IAAI,EAAE,cAAc,EACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,EAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAsC1B,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAwB9B,gBAAgB,CACpB,MAAM,EAAE,eAAe,GAAG,IAAI,EAC9B,KAAK,GAAE,MAAgC,EACvC,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC;IAuErB,iBAAiB,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAmCjD,2BAA2B,CAC/B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,2BAA2B,CAAC;IAOjC,gCAAgC,CACpC,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,gCAAgC,CAAC;IAmBtC,mBAAmB,CACvB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,MAAM,EAAE,CAAC;IAyDd,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuF7C,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUhF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAWtD,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBlC,eAAe,CACnB,QAAQ,CAAC,EAAE,sBAAsB,GAChC,OAAO,CAAC,qBAAqB,CAAC;IAQjC,mBAAmB,IAAI,qBAAqB;IAY5C,OAAO,CAAC,kBAAkB;YA+BZ,kBAAkB;YA4ElB,iBAAiB;IAwB/B;;;;OAIG;YACW,2BAA2B;CAqC1C;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,CAmFrD"}