was-teaching-server 0.9.1 → 0.11.0

package/dist/requests/ChunkRequest.js

@@ -0,0 +1,396 @@
+import { fetchSpaceAndAuthorize, fetchSpaceAndVerify } from './spaceContext.js';
+import { getCollectionOrThrow } from './collectionContext.js';
+import { resolveResourceInput } from './resourceInput.js';
+import { resolveBackend } from '../lib/backendRegistry.js';
+import { assertValidIds } from '../lib/validateId.js';
+import { parseChunkIndexSegment } from '../lib/resourceFileName.js';
+import { chunkPath, chunksContainerPath } from '../lib/paths.js';
+import { formatEtag, parseWritePreconditions } from '../lib/etag.js';
+import { InvalidChunkIndexError, ResourceNotFoundError, rethrowOrWrapStorageError } from '../errors.js';
+/**
+ * Parses and validates the `:chunkIndex` path param -- the canonical decimal
+ * spelling of an integer in `[0, MAX_CHUNK_INDEX]` (see
+ * `parseChunkIndexSegment`) -- throwing `InvalidChunkIndexError` (400)
+ * otherwise. Runs before any storage access, like `assertValidIds`.
+ * @param raw {string}   the `:chunkIndex` path param
+ * @param options {object}
+ * @param options.requestName {string}   request name used in the error title
+ * @returns {number}
+ */
+function parseChunkIndex(raw, { requestName }) {
+    const chunkIndex = parseChunkIndexSegment(raw);
+    if (chunkIndex === undefined) {
+        throw new InvalidChunkIndexError({ requestName });
+    }
+    return chunkIndex;
+}
+export class ChunkRequest {
+    /**
+     * PUT /space/:spaceId/:collectionId/:resourceId/chunks/:chunkIndex
+     * Request handler for "Put Chunk": stores chunk `chunkIndex` of the Resource
+     * (raw bytes body, upsert). The parent Resource MUST already exist (404
+     * otherwise -- chunks cannot be orphaned). Authorization is capability-only
+     * against the chunk's own full URL, the same exact-match zcap target rule as
+     * every other route. Supports `If-Match` / `If-None-Match` on the chunk's
+     * own ETag, and the backend's `maxUploadBytes` cap (413). Returns 204 with
+     * the chunk's new ETag.
+     *
+     * @param request {import('fastify').FastifyRequest}
+     * @param reply {import('fastify').FastifyReply}
+     * @returns {Promise<FastifyReply>}
+     */
+    static async put(request, reply) {
+        const { params: { spaceId, collectionId, resourceId } } = request;
+        const { storage } = request.server;
+        const requestName = 'Put Chunk';
+        // Reject path-traversal / non-URL-safe ids before any storage access.
+        assertValidIds({ spaceId, collectionId, resourceId }, { requestName });
+        const chunkIndex = parseChunkIndex(request.params.chunkIndex, {
+            requestName
+        });
+        // Verify (capability-only): writing a chunk requires a valid capability
+        // invocation against the chunk's own URL; no access-control-policy fallback.
+        await fetchSpaceAndVerify({
+            request,
+            spaceId,
+            targetPath: chunkPath({ spaceId, collectionId, resourceId, chunkIndex }),
+            requestName
+        });
+        // zCap checks out, continue
+        // Fetch collection by id
+        const collectionDescription = await getCollectionOrThrow({
+            storage,
+            spaceId,
+            collectionId,
+            requestName
+        });
+        // Route chunk bytes to the Collection's selected (data-plane) backend.
+        const dataBackend = await resolveBackend({
+            request,
+            spaceId,
+            collectionId,
+            collectionDescription
+        });
+        const input = await resolveResourceInput(request, dataBackend);
+        // Surface any `If-Match` / `If-None-Match` write precondition to the
+        // storage layer, which evaluates it against the chunk's own version
+        // atomically with the write (412 `precondition-failed` on a mismatch).
+        let written;
+        try {
+            written = await dataBackend.writeChunk({
+                spaceId,
+                collectionId,
+                resourceId,
+                chunkIndex,
+                input,
+                ...parseWritePreconditions(request.headers)
+            });
+        }
+        catch (err) {
+            rethrowOrWrapStorageError({ err, requestName });
+        }
+        // Return the new ETag so a client can chain a subsequent conditional write.
+        return reply.status(204).header('etag', formatEtag(written.version)).send();
+    }
+    /**
+     * GET /space/:spaceId/:collectionId/:resourceId/chunks/:chunkIndex
+     * Request handler for "Get Chunk": streams the chunk's stored bytes.
+     * Authorization is capability-or-policy (the same read decision as Get
+     * Resource, resolved at the Resource's policy level -- a chunk reveals a
+     * fragment of the same content).
+     *
+     * @param request {import('fastify').FastifyRequest}
+     * @param reply {import('fastify').FastifyReply}
+     * @returns {Promise<FastifyReply>}
+     */
+    static async get(request, reply) {
+        const { params: { spaceId, collectionId, resourceId } } = request;
+        const { storage } = request.server;
+        const requestName = 'Get Chunk';
+        // Reject path-traversal / non-URL-safe ids before any storage access.
+        assertValidIds({ spaceId, collectionId, resourceId }, { requestName });
+        const chunkIndex = parseChunkIndex(request.params.chunkIndex, {
+            requestName
+        });
+        // Authorize (capability-or-policy) against the chunk's own URL; the policy
+        // level resolves at the parent Resource, as for Get Resource.
+        await fetchSpaceAndAuthorize({
+            request,
+            spaceId,
+            collectionId,
+            resourceId,
+            targetPath: chunkPath({ spaceId, collectionId, resourceId, chunkIndex }),
+            requestName
+        });
+        // authorized, continue
+        // Fetch collection by id
+        const collectionDescription = await getCollectionOrThrow({
+            storage,
+            spaceId,
+            collectionId,
+            requestName
+        });
+        // Read the bytes from the Collection's selected (data-plane) backend.
+        const dataBackend = await resolveBackend({
+            request,
+            spaceId,
+            collectionId,
+            collectionDescription
+        });
+        let result;
+        try {
+            // The parent Resource must exist (and not be a tombstone) for any of
+            // its chunks to be readable: an orphan chunk left behind by
+            // out-of-band state 404s here exactly like the Resource route and the
+            // chunk listing do -- checked via its metadata, never its byte stream.
+            const parent = await dataBackend.getResourceMetadata({
+                spaceId,
+                collectionId,
+                resourceId
+            });
+            if (!parent) {
+                throw new ResourceNotFoundError({ requestName });
+            }
+            result = await dataBackend.getChunk({
+                spaceId,
+                collectionId,
+                resourceId,
+                chunkIndex
+            });
+        }
+        catch (err) {
+            rethrowOrWrapStorageError({ err, requestName });
+        }
+        const getReply = reply.status(200).type(result.storedResourceType);
+        if (result.version !== undefined) {
+            getReply.header('etag', formatEtag(result.version));
+        }
+        return getReply.send(result.resourceStream);
+    }
+    /**
+     * HEAD /space/:spaceId/:collectionId/:resourceId/chunks/:chunkIndex
+     * Request handler for "Head Chunk": the same authorization as Get Chunk with
+     * no response body; `Content-Type` / `Content-Length` come from the chunk's
+     * stored metadata, so the byte stream is never opened (mirrors Head
+     * Resource). Registered explicitly ahead of the GET route for the same
+     * reason Head Resource is.
+     *
+     * @param request {import('fastify').FastifyRequest}
+     * @param reply {import('fastify').FastifyReply}
+     * @returns {Promise<FastifyReply>}
+     */
+    static async head(request, reply) {
+        const { params: { spaceId, collectionId, resourceId } } = request;
+        const { storage } = request.server;
+        const requestName = 'Head Chunk';
+        // Reject path-traversal / non-URL-safe ids before any storage access.
+        assertValidIds({ spaceId, collectionId, resourceId }, { requestName });
+        const chunkIndex = parseChunkIndex(request.params.chunkIndex, {
+            requestName
+        });
+        // Authorize (capability-or-policy): the same read decision as Get Chunk,
+        // against the same target (a HEAD reveals nothing a GET would not).
+        await fetchSpaceAndAuthorize({
+            request,
+            spaceId,
+            collectionId,
+            resourceId,
+            targetPath: chunkPath({ spaceId, collectionId, resourceId, chunkIndex }),
+            requestName
+        });
+        // authorized, continue
+        // Fetch collection by id
+        const collectionDescription = await getCollectionOrThrow({
+            storage,
+            spaceId,
+            collectionId,
+            requestName
+        });
+        // Read chunk metadata from the Collection's selected (data-plane) backend.
+        const dataBackend = await resolveBackend({
+            request,
+            spaceId,
+            collectionId,
+            collectionDescription
+        });
+        let metadata;
+        try {
+            // The same parent-Resource existence gate as Get Chunk: an orphan
+            // chunk's headers reveal what a GET would.
+            const parent = await dataBackend.getResourceMetadata({
+                spaceId,
+                collectionId,
+                resourceId
+            });
+            if (!parent) {
+                throw new ResourceNotFoundError({ requestName });
+            }
+            metadata = await dataBackend.getChunkMetadata({
+                spaceId,
+                collectionId,
+                resourceId,
+                chunkIndex
+            });
+        }
+        catch (err) {
+            rethrowOrWrapStorageError({ err, requestName });
+        }
+        if (!metadata) {
+            throw new ResourceNotFoundError({ requestName });
+        }
+        // Set the payload headers a GET would send, but send no body.
+        const headReply = reply
+            .status(200)
+            .type(metadata.contentType)
+            .header('content-length', metadata.size);
+        if (metadata.version !== undefined) {
+            headReply.header('etag', formatEtag(metadata.version));
+        }
+        return headReply.send();
+    }
+    /**
+     * DELETE /space/:spaceId/:collectionId/:resourceId/chunks/:chunkIndex
+     * Request handler for "Delete Chunk": removes one stored chunk. Unlike
+     * Delete Resource, deleting an absent chunk is a 404 (mirroring the EDV
+     * chunk contract -- a reassembling reader must be able to distinguish "gone"
+     * from "never written"). Authorization is capability-only against the
+     * chunk's own URL. Supports `If-Match` (412 on mismatch). Returns 204.
+     *
+     * @param request {import('fastify').FastifyRequest}
+     * @param reply {import('fastify').FastifyReply}
+     * @returns {Promise<FastifyReply>}
+     */
+    static async delete(request, reply) {
+        const { params: { spaceId, collectionId, resourceId } } = request;
+        const { storage } = request.server;
+        const requestName = 'Delete Chunk';
+        // Reject path-traversal / non-URL-safe ids before any storage access.
+        assertValidIds({ spaceId, collectionId, resourceId }, { requestName });
+        const chunkIndex = parseChunkIndex(request.params.chunkIndex, {
+            requestName
+        });
+        // Verify (capability-only): deleting a chunk requires a valid capability
+        // invocation; no access-control-policy fallback.
+        await fetchSpaceAndVerify({
+            request,
+            spaceId,
+            targetPath: chunkPath({ spaceId, collectionId, resourceId, chunkIndex }),
+            requestName
+        });
+        // Fetch collection by id
+        const collectionDescription = await getCollectionOrThrow({
+            storage,
+            spaceId,
+            collectionId,
+            requestName
+        });
+        // zCap checks out, continue. An `If-Match` precondition is evaluated by
+        // the storage layer atomically with the removal (412 on mismatch).
+        const { ifMatch } = parseWritePreconditions(request.headers);
+        const dataBackend = await resolveBackend({
+            request,
+            spaceId,
+            collectionId,
+            collectionDescription
+        });
+        let removed;
+        try {
+            // The same parent-Resource existence gate as the read handlers: a
+            // chunk of an absent (or tombstoned) parent is a 404, not a deletable
+            // orphan.
+            const parent = await dataBackend.getResourceMetadata({
+                spaceId,
+                collectionId,
+                resourceId
+            });
+            if (!parent) {
+                throw new ResourceNotFoundError({ requestName });
+            }
+            removed = await dataBackend.deleteChunk({
+                spaceId,
+                collectionId,
+                resourceId,
+                chunkIndex,
+                ifMatch
+            });
+        }
+        catch (err) {
+            rethrowOrWrapStorageError({ err, requestName });
+        }
+        if (!removed) {
+            throw new ResourceNotFoundError({ requestName });
+        }
+        return reply.status(204).send();
+    }
+    /**
+     * GET /space/:spaceId/:collectionId/:resourceId/chunks/
+     * Request handler for "List Chunks": the discovery/reassembly listing. The
+     * server never reassembles a chunked Resource -- a reader learns the chunk
+     * set here (count + per-chunk index/size/contentType/version) and fetches
+     * `0..count-1` itself. Requires the parent Resource to exist (404
+     * otherwise). Authorization is capability-or-policy against the `chunks/`
+     * container path, resolved at the Resource's policy level.
+     *
+     * @param request {import('fastify').FastifyRequest}
+     * @param reply {import('fastify').FastifyReply}
+     * @returns {Promise<FastifyReply>}
+     */
+    static async list(request, reply) {
+        const { params: { spaceId, collectionId, resourceId } } = request;
+        const { storage } = request.server;
+        const requestName = 'List Chunks';
+        // Reject path-traversal / non-URL-safe ids before any storage access.
+        assertValidIds({ spaceId, collectionId, resourceId }, { requestName });
+        // Authorize (capability-or-policy) against the `chunks/` container path;
+        // the policy level resolves at the parent Resource.
+        await fetchSpaceAndAuthorize({
+            request,
+            spaceId,
+            collectionId,
+            resourceId,
+            targetPath: chunksContainerPath({ spaceId, collectionId, resourceId }),
+            requestName
+        });
+        // authorized, continue
+        // Fetch collection by id
+        const collectionDescription = await getCollectionOrThrow({
+            storage,
+            spaceId,
+            collectionId,
+            requestName
+        });
+        // List from the Collection's selected (data-plane) backend. The parent
+        // Resource must exist for its chunk listing to (an absent Resource has no
+        // `chunks/` container) -- checked via its metadata, never its byte stream.
+        const dataBackend = await resolveBackend({
+            request,
+            spaceId,
+            collectionId,
+            collectionDescription
+        });
+        let listing;
+        try {
+            const parent = await dataBackend.getResourceMetadata({
+                spaceId,
+                collectionId,
+                resourceId
+            });
+            if (!parent) {
+                throw new ResourceNotFoundError({ requestName });
+            }
+            listing = await dataBackend.listChunks({
+                spaceId,
+                collectionId,
+                resourceId
+            });
+        }
+        catch (err) {
+            rethrowOrWrapStorageError({ err, requestName });
+        }
+        return reply
+            .status(200)
+            .type('application/json')
+            .send(JSON.stringify({ resourceId, ...listing }));
+    }
+}
+//# sourceMappingURL=ChunkRequest.js.map

package/dist/requests/ChunkRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChunkRequest.js","sourceRoot":"","sources":["../../src/requests/ChunkRequest.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AACnE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AACpE,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,EAC1B,MAAM,cAAc,CAAA;AAErB;;;;;;;;;GASG;AACH,SAAS,eAAe,CACtB,GAAW,EACX,EAAE,WAAW,EAA2B;IAExC,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,sBAAsB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAUD,MAAM,OAAO,YAAY;IACvB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CACd,OAAgD,EAChD,KAAmB;QAEnB,MAAM,EACJ,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAC9C,GAAG,OAAO,CAAA;QACX,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAClC,MAAM,WAAW,GAAG,WAAW,CAAA;QAE/B,sEAAsE;QACtE,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;QACtE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YAC5D,WAAW;SACZ,CAAC,CAAA;QAEF,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,mBAAmB,CAAC;YACxB,OAAO;YACP,OAAO;YACP,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;YACxE,WAAW;SACZ,CAAC,CAAA;QAEF,4BAA4B;QAE5B,yBAAyB;QACzB,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CAAC;YACvD,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;SACZ,CAAC,CAAA;QAEF,uEAAuE;QACvE,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;YACvC,OAAO;YACP,OAAO;YACP,YAAY;YACZ,qBAAqB;SACtB,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QAC9D,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,IAAI,OAA4B,CAAA;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;gBACrC,OAAO;gBACP,YAAY;gBACZ,UAAU;gBACV,UAAU;gBACV,KAAK;gBACL,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC;aAC5C,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yBAAyB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,4EAA4E;QAC5E,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7E,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CACd,OAAgD,EAChD,KAAmB;QAEnB,MAAM,EACJ,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAC9C,GAAG,OAAO,CAAA;QACX,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAClC,MAAM,WAAW,GAAG,WAAW,CAAA;QAE/B,sEAAsE;QACtE,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;QACtE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YAC5D,WAAW;SACZ,CAAC,CAAA;QAEF,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAM,sBAAsB,CAAC;YAC3B,OAAO;YACP,OAAO;YACP,YAAY;YACZ,UAAU;YACV,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;YACxE,WAAW;SACZ,CAAC,CAAA;QAEF,uBAAuB;QAEvB,yBAAyB;QACzB,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CAAC;YACvD,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;SACZ,CAAC,CAAA;QAEF,sEAAsE;QACtE,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;YACvC,OAAO;YACP,OAAO;YACP,YAAY;YACZ,qBAAqB;SACtB,CAAC,CAAA;QACF,IAAI,MAAM,CAAA;QACV,IAAI,CAAC;YACH,qEAAqE;YACrE,4DAA4D;YAC5D,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC;gBACnD,OAAO;gBACP,YAAY;gBACZ,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;YAClD,CAAC;YACD,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC;gBAClC,OAAO;gBACP,YAAY;gBACZ,UAAU;gBACV,UAAU;aACX,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yBAAyB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;QACjD,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAClE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAC7C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,OAAgD,EAChD,KAAmB;QAEnB,MAAM,EACJ,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAC9C,GAAG,OAAO,CAAA;QACX,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAClC,MAAM,WAAW,GAAG,YAAY,CAAA;QAEhC,sEAAsE;QACtE,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;QACtE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YAC5D,WAAW;SACZ,CAAC,CAAA;QAEF,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,sBAAsB,CAAC;YAC3B,OAAO;YACP,OAAO;YACP,YAAY;YACZ,UAAU;YACV,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;YACxE,WAAW;SACZ,CAAC,CAAA;QAEF,uBAAuB;QAEvB,yBAAyB;QACzB,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CAAC;YACvD,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;SACZ,CAAC,CAAA;QAEF,2EAA2E;QAC3E,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;YACvC,OAAO;YACP,OAAO;YACP,YAAY;YACZ,qBAAqB;SACtB,CAAC,CAAA;QACF,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YACH,kEAAkE;YAClE,2CAA2C;YAC3C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC;gBACnD,OAAO;gBACP,YAAY;gBACZ,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;YAClD,CAAC;YACD,QAAQ,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC;gBAC5C,OAAO;gBACP,YAAY;gBACZ,UAAU;gBACV,UAAU;aACX,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yBAAyB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QAClD,CAAC;QAED,8DAA8D;QAC9D,MAAM,SAAS,GAAG,KAAK;aACpB,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC1B,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACnC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACxD,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,OAAgD,EAChD,KAAmB;QAEnB,MAAM,EACJ,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAC9C,GAAG,OAAO,CAAA;QACX,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAClC,MAAM,WAAW,GAAG,cAAc,CAAA;QAElC,sEAAsE;QACtE,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;QACtE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YAC5D,WAAW;SACZ,CAAC,CAAA;QAEF,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,mBAAmB,CAAC;YACxB,OAAO;YACP,OAAO;YACP,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;YACxE,WAAW;SACZ,CAAC,CAAA;QAEF,yBAAyB;QACzB,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CAAC;YACvD,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;SACZ,CAAC,CAAA;QAEF,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,OAAO,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;YACvC,OAAO;YACP,OAAO;YACP,YAAY;YACZ,qBAAqB;SACtB,CAAC,CAAA;QACF,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,kEAAkE;YAClE,sEAAsE;YACtE,UAAU;YACV,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC;gBACnD,OAAO;gBACP,YAAY;gBACZ,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC;gBACtC,OAAO;gBACP,YAAY;gBACZ,UAAU;gBACV,UAAU;gBACV,OAAO;aACR,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yBAAyB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QAClD,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACjC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,OAEE,EACF,KAAmB;QAEnB,MAAM,EACJ,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAC9C,GAAG,OAAO,CAAA;QACX,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAClC,MAAM,WAAW,GAAG,aAAa,CAAA;QAEjC,sEAAsE;QACtE,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;QAEtE,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,sBAAsB,CAAC;YAC3B,OAAO;YACP,OAAO;YACP,YAAY;YACZ,UAAU;YACV,UAAU,EAAE,mBAAmB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;YACtE,WAAW;SACZ,CAAC,CAAA;QAEF,uBAAuB;QAEvB,yBAAyB;QACzB,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CAAC;YACvD,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;SACZ,CAAC,CAAA;QAEF,uEAAuE;QACvE,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;YACvC,OAAO;YACP,OAAO;YACP,YAAY;YACZ,qBAAqB;SACtB,CAAC,CAAA;QACF,IAAI,OAAO,CAAA;QACX,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC;gBACnD,OAAO;gBACP,YAAY;gBACZ,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;gBACrC,OAAO;gBACP,YAAY;gBACZ,UAAU;aACX,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yBAAyB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;QACjD,CAAC;QAED,OAAO,KAAK;aACT,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CAAC,kBAAkB,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAA;IACrD,CAAC;CACF"}

package/dist/requests/CollectionRequest.d.ts

@@ -45,6 +45,7 @@ export declare class CollectionRequest {
             name?: string;
             backend?: unknown;
             encryption?: unknown;
+            indexes?: unknown;
         };
     }>, reply: FastifyReply): Promise<FastifyReply>;
     /**
@@ -135,6 +136,12 @@ export declare class CollectionRequest {
      *   the Collection's stored documents, answering `{documents, hasMore,
      *   cursor?}` (matching documents verbatim, opaque-cursor paginated) or
      *   `{count}`.
+     * - `equality` -- the plaintext equality query (the `equality-query` backend
+     *   feature): `{equals | has, count, limit, cursor}` evaluated against the
+     *   attributes the server extracts from the Collection's Resources per its
+     *   declared `indexes`, answering `{documents, hasMore, cursor?}` (each
+     *   document `{id, data?, custom?}`) or `{count}`. Only plaintext Collections
+     *   serve it; an encrypted Collection answers `unsupported-operation` (501).
      *
      * The query parameters ride the signed JSON POST body (covered by the
      * `Digest`), so no `allowTargetQuery` is needed. A body naming any other
@@ -214,7 +221,20 @@ export declare class CollectionRequest {
     }>, reply: FastifyReply): Promise<FastifyReply>;
     /**
      * GET /space/:spaceId/:collectionId/ (with trailing slash):
-     * List Collection items
+     * List Collection items.
+     *
+     * With one or more `filter[<attr>]=<value>` query parameters this becomes the
+     * anonymous-cacheable entry point over the same equality machinery as the
+     * POST `equality` query profile: the filters map to a single-element `equals`
+     * conjunction (string-valued equality only) and the handler answers the same
+     * `{documents, hasMore, cursor?}` page. Authorization is the ordinary
+     * capability-or-policy GET path (a `PublicCanRead` Collection answers a filter
+     * query anonymously, so an HTTP cache can serve it); `allowTargetQuery`
+     * already tolerates the query string. Every filter attribute MUST be declared
+     * in the Collection's `indexes` (fail-closed 400, which also covers encrypted
+     * Collections -- they can never declare `indexes`); the data-plane backend
+     * MUST serve `queryByEquality` (else 501). With no `filter[...]` parameter the
+     * existing listing behavior is unchanged.
      *
      * @param request {import('fastify').FastifyRequest}
      * @param reply {import('fastify').FastifyReply}
@@ -225,10 +245,7 @@ export declare class CollectionRequest {
             spaceId: string;
             collectionId: string;
         };
-        Querystring: {
-            limit?: string;
-            cursor?: string;
-        };
+        Querystring: Record<string, string | string[] | undefined>;
     }>, reply: FastifyReply): Promise<FastifyReply>;
 }
 //# sourceMappingURL=CollectionRequest.d.ts.map

package/dist/requests/CollectionRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CollectionRequest.d.ts","sourceRoot":"","sources":["../../src/requests/CollectionRequest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAU3D,OAAO,KAAK,EAAyB,cAAc,EAAE,MAAM,aAAa,CAAA;AA8BxE,qBAAa,iBAAiB;IAC5B;;;;;;;;;;;OAWG;WACU,IAAI,CACf,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA8FxB;;;;;;;;;;;OAWG;WACU,GAAG,CACd,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,IAAI,EAAE;YACJ,EAAE,CAAC,EAAE,MAAM,CAAA;YACX,IAAI,CAAC,EAAE,MAAM,CAAA;YACb,OAAO,CAAC,EAAE,OAAO,CAAA;YACjB,UAAU,CAAC,EAAE,OAAO,CAAA;SACrB,CAAA;KACF,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAqJxB;;;;;;OAMG;WACU,GAAG,CACd,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA2DxB;;;;;;;;;;OAUG;WACU,OAAO,CAClB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA2BxB;;;;;;;;;;;;;;OAcG;WACU,UAAU,CACrB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAoCxB;;;;;;;;;;;;;;;OAeG;WACU,QAAQ,CACnB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAgDxB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;WACU,KAAK,CAChB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,IAAI,EAAE;YACJ,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,UAAU,CAAC,EAAE;gBAAE,EAAE,CAAC,EAAE,OAAO,CAAC;gBAAC,SAAS,CAAC,EAAE,OAAO,CAAA;aAAE,CAAA;YAClD,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,MAAM,CAAC,EAAE,OAAO,CAAA;YAChB,GAAG,CAAC,EAAE,OAAO,CAAA;YACb,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,MAAM,CAAC,EAAE,OAAO,CAAA;SACjB,CAAA;KACF,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAmExB;;;;;;;;;;;;;OAaG;WACU,aAAa,CAAC,EACzB,KAAK,EACL,WAAW,EACX,OAAO,EACP,YAAY,EACZ,IAAI,EACJ,WAAW,EACZ,EAAE;QACD,KAAK,EAAE,YAAY,CAAA;QACnB,WAAW,EAAE,cAAc,CAAA;QAC3B,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;QACpB,IAAI,EAAE;YACJ,UAAU,CAAC,EAAE;gBAAE,EAAE,CAAC,EAAE,OAAO,CAAC;gBAAC,SAAS,CAAC,EAAE,OAAO,CAAA;aAAE,CAAA;YAClD,KAAK,CAAC,EAAE,OAAO,CAAA;SAChB,CAAA;QACD,WAAW,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,YAAY,CAAC;IA6DzB;;;;;;;;;;;OAWG;WACU,MAAM,CACjB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA+BxB;;;;;;;OAOG;WACU,IAAI,CACf,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,WAAW,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;CAoEzB"}
+{"version":3,"file":"CollectionRequest.d.ts","sourceRoot":"","sources":["../../src/requests/CollectionRequest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAU3D,OAAO,KAAK,EAAyB,cAAc,EAAE,MAAM,aAAa,CAAA;AAyExE,qBAAa,iBAAiB;IAC5B;;;;;;;;;;;OAWG;WACU,IAAI,CACf,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAuGxB;;;;;;;;;;;OAWG;WACU,GAAG,CACd,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,IAAI,EAAE;YACJ,EAAE,CAAC,EAAE,MAAM,CAAA;YACX,IAAI,CAAC,EAAE,MAAM,CAAA;YACb,OAAO,CAAC,EAAE,OAAO,CAAA;YACjB,UAAU,CAAC,EAAE,OAAO,CAAA;YACpB,OAAO,CAAC,EAAE,OAAO,CAAA;SAClB,CAAA;KACF,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAkNxB;;;;;;OAMG;WACU,GAAG,CACd,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA2DxB;;;;;;;;;;OAUG;WACU,OAAO,CAClB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA2BxB;;;;;;;;;;;;;;OAcG;WACU,UAAU,CACrB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAoCxB;;;;;;;;;;;;;;;OAeG;WACU,QAAQ,CACnB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IAgDxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;WACU,KAAK,CAChB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,IAAI,EAAE;YACJ,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,UAAU,CAAC,EAAE;gBAAE,EAAE,CAAC,EAAE,OAAO,CAAC;gBAAC,SAAS,CAAC,EAAE,OAAO,CAAA;aAAE,CAAA;YAClD,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,MAAM,CAAC,EAAE,OAAO,CAAA;YAChB,GAAG,CAAC,EAAE,OAAO,CAAA;YACb,KAAK,CAAC,EAAE,OAAO,CAAA;YACf,MAAM,CAAC,EAAE,OAAO,CAAA;SACjB,CAAA;KACF,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA6FxB;;;;;;;;;;;;;OAaG;WACU,aAAa,CAAC,EACzB,KAAK,EACL,WAAW,EACX,OAAO,EACP,YAAY,EACZ,IAAI,EACJ,WAAW,EACZ,EAAE;QACD,KAAK,EAAE,YAAY,CAAA;QACnB,WAAW,EAAE,cAAc,CAAA;QAC3B,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;QACpB,IAAI,EAAE;YACJ,UAAU,CAAC,EAAE;gBAAE,EAAE,CAAC,EAAE,OAAO,CAAC;gBAAC,SAAS,CAAC,EAAE,OAAO,CAAA;aAAE,CAAA;YAClD,KAAK,CAAC,EAAE,OAAO,CAAA;SAChB,CAAA;QACD,WAAW,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,YAAY,CAAC;IA6DzB;;;;;;;;;;;OAWG;WACU,MAAM,CACjB,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAClD,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;IA+BxB;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,IAAI,CACf,OAAO,EAAE,cAAc,CAAC;QACtB,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;KAC3D,CAAC,EACF,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,YAAY,CAAC;CAsHzB"}