@agentunion/fastaun-browser 0.2.13 → 0.2.15

package/dist/namespaces/meta.js

@@ -0,0 +1,498 @@
+// ── MetaNamespace（元数据命名空间 — 浏览器完整实现）──────────────
+// 与 TS SDK MetaNamespace 对齐，使用 WebCrypto + IndexedDB 替代 node:crypto + fs。
+import { ValidationError } from '../errors.js';
+import { pemToArrayBuffer, base64ToUint8, toBufferSource, } from '../crypto.js';
+/** 全局信任根列表端点 */
+const AUTHORITY_ENDPOINT = 'https://trust.aun.network/.well-known/aun/trust-roots.json';
+/** 允许的最大时钟偏移（秒） */
+const MAX_CLOCK_SKEW = 300;
+/**
+ * Meta 命名空间 — 心跳、状态和信任根管理。
+ *
+ * 浏览器环境适配要点：
+ * - 签名验证使用 SubtleCrypto（异步）
+ * - 指纹计算使用 SubtleCrypto SHA-256
+ * - 持久化通过 keystore（IndexedDB）的可选方法
+ * - 无文件系统访问
+ */
+export class MetaNamespace {
+    _client;
+    constructor(client) {
+        this._client = client;
+    }
+    get _internal() {
+        return this._client;
+    }
+    // ── RPC 直通 ──────────────────────────────────────────────
+    async ping(params) {
+        return await this._client.call('meta.ping', params ?? {});
+    }
+    async status(params) {
+        return await this._client.call('meta.status', params ?? {});
+    }
+    async trustRoots(params) {
+        return await this._client.call('meta.trust_roots', params ?? {});
+    }
+    // ── 信任根下载 ────────────────────────────────────────────
+    async downloadTrustRoots(opts) {
+        const target = this._resolveTrustRootsUrl(opts?.url, opts?.issuer, opts?.gateway_url);
+        if (!target.toLowerCase().startsWith('https://') && !target.toLowerCase().startsWith('http://')) {
+            throw new ValidationError('trust roots url must be http(s)');
+        }
+        const timeoutMs = (opts?.timeout ?? 10) * 1000;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const response = await fetch(target, {
+                headers: { Accept: 'application/json' },
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new ValidationError(`trust roots download failed: HTTP ${response.status}`);
+            }
+            const payload = await response.json();
+            if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
+                throw new ValidationError('trust roots endpoint returned non-object JSON');
+            }
+            return payload;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async downloadIssuerRootCert(issuer, opts) {
+        const normalizedIssuer = MetaNamespace._validateIssuer(issuer);
+        const target = opts?.url?.trim() || this._issuerRootCertUrl(normalizedIssuer);
+        if (!target.toLowerCase().startsWith('https://') && !target.toLowerCase().startsWith('http://')) {
+            throw new ValidationError('issuer root certificate url must be http(s)');
+        }
+        const timeoutMs = (opts?.timeout ?? 10) * 1000;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const response = await fetch(target, {
+                headers: { Accept: 'application/x-pem-file,text/plain' },
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new ValidationError(`issuer root cert download failed: HTTP ${response.status}`);
+            }
+            const certPem = (await response.text()).trim();
+            MetaNamespace._validateCertPem(certPem, normalizedIssuer);
+            return certPem + '\n';
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    // ── 信任根验证 ────────────────────────────────────────────
+    async verifyTrustRoots(trustList, opts) {
+        if (!trustList || typeof trustList !== 'object') {
+            throw new ValidationError('trust roots list must be a JSON object');
+        }
+        const signature = String(trustList.authority_signature ?? '').trim();
+        if (!signature && !opts?.allow_unsigned) {
+            throw new ValidationError('trust roots list missing authority_signature');
+        }
+        MetaNamespace._validateListMetadata(trustList);
+        // 签名验证（WebCrypto 异步）
+        if (signature) {
+            const publicKey = await this._loadAuthorityPublicKey(opts?.authority_cert_pem, opts?.authority_public_key_pem, trustList);
+            const signedPayload = MetaNamespace._canonicalSignedPayload(trustList);
+            const sigBytes = MetaNamespace._decodeSignature(signature);
+            const ok = await crypto.subtle.verify({ name: 'ECDSA', hash: 'SHA-256' }, publicKey, toBufferSource(sigBytes), toBufferSource(signedPayload));
+            if (!ok) {
+                throw new ValidationError('trust roots authority_signature verification failed');
+            }
+        }
+        const roots = MetaNamespace._extractRootEntries(trustList);
+        const imported = [];
+        const skipped = [];
+        for (const item of roots) {
+            const status = String(item.status ?? 'active').trim().toLowerCase();
+            const certPem = String(item.certificate ?? item.cert_pem ?? '').trim();
+            const rootId = String(item.id ?? item.agentid ?? '').trim();
+            if (status !== 'active') {
+                skipped.push({ id: rootId, reason: `status=${status}` });
+                continue;
+            }
+            MetaNamespace._validateCertPem(certPem, rootId || 'root');
+            const fingerprint = await MetaNamespace._certFingerprint(certPem);
+            const expectedFp = MetaNamespace._normalizeFingerprint(item.fingerprint_sha256);
+            if (expectedFp.length !== 64) {
+                throw new ValidationError(`root certificate missing or invalid fingerprint_sha256: ${rootId || fingerprint}`);
+            }
+            if (expectedFp !== fingerprint) {
+                throw new ValidationError(`root certificate fingerprint mismatch: ${rootId || fingerprint}`);
+            }
+            imported.push({ id: rootId || fingerprint, cert_pem: certPem, fingerprint_sha256: fingerprint });
+        }
+        if (imported.length === 0) {
+            throw new ValidationError('trust roots list contains no active root certificates');
+        }
+        return { imported, skipped, count: imported.length };
+    }
+    // ── 信任根导入 ────────────────────────────────────────────
+    async importTrustRoots(trustList, opts) {
+        const verified = await this.verifyTrustRoots(trustList, opts);
+        await this._enforceMonotonicVersion(trustList);
+        const ks = this._internal._keystore;
+        // 持久化：优先使用 keystore 提供的 saveTrustRoots 方法
+        let bundlePath = '';
+        if (typeof ks.saveTrustRoots === 'function') {
+            bundlePath = await ks.saveTrustRoots(trustList, verified.imported);
+        }
+        else {
+            console.warn('[MetaNamespace] keystore 没有 saveTrustRoots 方法，跳过持久化');
+        }
+        const auth = this._internal._auth;
+        const reloaded = auth.reloadTrustedRoots?.() ?? auth.reload_trusted_roots?.() ?? 0;
+        return {
+            imported: verified.count,
+            skipped: verified.skipped,
+            bundle_path: bundlePath,
+            reloaded_roots: reloaded,
+            fingerprints: verified.imported.map((i) => i.fingerprint_sha256),
+        };
+    }
+    async refreshTrustRoots(opts) {
+        const sourceUrl = this._resolveTrustRootsUrl(opts?.url, opts?.issuer, opts?.gateway_url);
+        const trustList = await this.downloadTrustRoots({ url: sourceUrl, timeout: opts?.timeout });
+        const result = await this.importTrustRoots(trustList, {
+            authority_cert_pem: opts?.authority_cert_pem,
+            authority_public_key_pem: opts?.authority_public_key_pem,
+            allow_unsigned: opts?.allow_unsigned,
+        });
+        result.source_url = sourceUrl;
+        return result;
+    }
+    async updateIssuerRootCert(issuer, opts) {
+        const normalizedIssuer = MetaNamespace._validateIssuer(issuer);
+        const sourceUrl = opts?.url?.trim() || this._issuerRootCertUrl(normalizedIssuer);
+        let rootPem = opts?.cert_pem?.trim() ? opts.cert_pem.trim() + '\n' : '';
+        if (!rootPem) {
+            rootPem = await this.downloadIssuerRootCert(normalizedIssuer, { url: sourceUrl, timeout: opts?.timeout });
+        }
+        MetaNamespace._validateCertPem(rootPem, normalizedIssuer);
+        const fingerprint = await MetaNamespace._certFingerprint(rootPem);
+        // 获取信任列表：优先参数 → 本地 → 远程下载
+        let effectiveTrustList = opts?.trust_list ?? await this._loadLocalTrustList();
+        let trustSource = 'local';
+        if (!effectiveTrustList) {
+            effectiveTrustList = await this.downloadTrustRoots({ issuer: normalizedIssuer, timeout: opts?.timeout });
+            trustSource = this._issuerTrustRootUrl(normalizedIssuer);
+        }
+        const verified = await this.verifyTrustRoots(effectiveTrustList, {
+            authority_cert_pem: opts?.authority_cert_pem,
+            authority_public_key_pem: opts?.authority_public_key_pem,
+            allow_unsigned: opts?.allow_unsigned,
+        });
+        await this._enforceMonotonicVersion(effectiveTrustList);
+        // 交叉验证：下载的证书必须在信任列表中
+        const trustedFingerprints = new Set(verified.imported.map((i) => i.fingerprint_sha256));
+        if (!trustedFingerprints.has(fingerprint)) {
+            throw new ValidationError('issuer root certificate is not in trusted root list');
+        }
+        // 持久化
+        const ks = this._internal._keystore;
+        let certPath = '';
+        let bundlePath = '';
+        if (typeof ks.saveIssuerRootCert === 'function') {
+            [certPath, bundlePath] = await ks.saveIssuerRootCert(normalizedIssuer, rootPem, fingerprint);
+        }
+        else {
+            console.warn('[MetaNamespace] keystore 没有 saveIssuerRootCert 方法，跳过持久化');
+        }
+        const auth = this._internal._auth;
+        const reloaded = auth.reloadTrustedRoots?.() ?? auth.reload_trusted_roots?.() ?? 0;
+        return {
+            issuer: normalizedIssuer,
+            fingerprint_sha256: fingerprint,
+            cert_path: certPath,
+            bundle_path: bundlePath,
+            reloaded_roots: reloaded,
+            source_url: sourceUrl,
+            trust_source: trustSource,
+        };
+    }
+    // ── URL 解析 ──────────────────────────────────────────────
+    _resolveTrustRootsUrl(url, issuer, gatewayUrl) {
+        const target = (url ?? '').trim();
+        if (target)
+            return target;
+        if (issuer)
+            return this._issuerTrustRootUrl(issuer);
+        const gw = (gatewayUrl ?? this._internal._gatewayUrl ?? '').trim();
+        return gw ? this._gatewayTrustRootsUrl(gw) : AUTHORITY_ENDPOINT;
+    }
+    _issuerTrustRootUrl(issuer) {
+        const authority = this._pkiAuthority(issuer);
+        return `https://${authority}/trust-root.json`;
+    }
+    _issuerRootCertUrl(issuer) {
+        const authority = this._pkiAuthority(issuer);
+        return `https://${authority}/root.crt`;
+    }
+    _pkiAuthority(issuer) {
+        const normalized = MetaNamespace._validateIssuer(issuer);
+        const port = this._internal.configModel.discoveryPort;
+        const portSuffix = port && !normalized.includes(':') ? `:${port}` : '';
+        return `pki.${normalized}${portSuffix}`;
+    }
+    _gatewayTrustRootsUrl(gatewayUrl) {
+        let parsed;
+        try {
+            parsed = new URL(gatewayUrl);
+        }
+        catch {
+            throw new ValidationError('gateway_url must include scheme and host');
+        }
+        if (!parsed.host) {
+            throw new ValidationError('gateway_url must include scheme and host');
+        }
+        const scheme = ['wss:', 'https:'].includes(parsed.protocol) ? 'https' : 'http';
+        return `${scheme}://${parsed.host}/pki/trust-roots.json`;
+    }
+    // ── 内部辅助 ──────────────────────────────────────────────
+    /** 校验 issuer 域名格式 */
+    static _validateIssuer(issuer) {
+        const value = (issuer ?? '').trim().toLowerCase();
+        if (!value || value.includes('://') || value.includes('/') || value.includes('\\') || value.startsWith('.')) {
+            throw new ValidationError('issuer must be a domain name');
+        }
+        return value;
+    }
+    /** 校验信任列表元数据（版本、时间戳） */
+    static _validateListMetadata(trustList) {
+        const version = trustList.version;
+        if (typeof version !== 'number' || !Number.isInteger(version) || version < 0) {
+            throw new ValidationError('trust roots list version must be a non-negative integer');
+        }
+        const issuedAt = MetaNamespace._parseTimestamp(trustList.issued_at, 'issued_at');
+        const nextUpdate = MetaNamespace._parseTimestamp(trustList.next_update, 'next_update');
+        if (nextUpdate < issuedAt) {
+            throw new ValidationError('trust roots list next_update must not be earlier than issued_at');
+        }
+        if (issuedAt > Date.now() + MAX_CLOCK_SKEW * 1000) {
+            throw new ValidationError('trust roots list issued_at is too far in the future');
+        }
+    }
+    static _parseTimestamp(value, field) {
+        const text = String(value ?? '').trim();
+        if (!text)
+            throw new ValidationError(`trust roots list missing ${field}`);
+        const ts = new Date(text).getTime();
+        if (isNaN(ts))
+            throw new ValidationError(`trust roots list ${field} must be ISO-8601`);
+        return ts;
+    }
+    /** 构建用于签名验证的规范化 JSON 载荷 */
+    static _canonicalSignedPayload(trustList) {
+        const payload = { ...trustList };
+        delete payload.authority_signature;
+        const canonical = MetaNamespace._stableStringify(payload);
+        return new TextEncoder().encode(canonical);
+    }
+    /** 递归稳定排序 JSON 序列化 */
+    static _stableStringify(obj) {
+        if (obj === null || obj === undefined)
+            return JSON.stringify(obj);
+        if (typeof obj !== 'object')
+            return JSON.stringify(obj);
+        if (Array.isArray(obj)) {
+            return '[' + obj.map(v => MetaNamespace._stableStringify(v)).join(',') + ']';
+        }
+        const keys = Object.keys(obj).sort();
+        const pairs = keys.map(k => JSON.stringify(k) + ':' + MetaNamespace._stableStringify(obj[k]));
+        return '{' + pairs.join(',') + '}';
+    }
+    /** 解码 base64 编码的签名 */
+    static _decodeSignature(signature) {
+        let value = signature.trim();
+        if (value.startsWith('base64:')) {
+            value = value.slice(7);
+        }
+        // 处理 URL-safe base64 并补齐 padding
+        const normalized = value.replace(/-/g, '+').replace(/_/g, '/');
+        const padding = '='.repeat((4 - (normalized.length % 4)) % 4);
+        return base64ToUint8(normalized + padding);
+    }
+    /** 提取信任列表中的根 CA 条目 */
+    static _extractRootEntries(trustList) {
+        const roots = trustList.root_cas;
+        if (Array.isArray(roots)) {
+            return roots.filter(item => item && typeof item === 'object');
+        }
+        const legacy = trustList.roots;
+        if (Array.isArray(legacy)) {
+            return legacy
+                .filter(item => item && typeof item === 'object')
+                .map((item) => ({
+                id: item.agentid ?? item.id ?? item.cert_sn,
+                certificate: item.cert_pem ?? item.certificate,
+                fingerprint_sha256: item.fingerprint_sha256,
+                status: item.status ?? 'active',
+            }));
+        }
+        throw new ValidationError('trust roots list missing root_cas');
+    }
+    /** 规范化指纹字符串（去除前缀和分隔符） */
+    static _normalizeFingerprint(value) {
+        let text = String(value ?? '').trim().toLowerCase();
+        if (text.startsWith('sha256:'))
+            text = text.slice(7);
+        return text.replace(/[^0-9a-f]/g, '');
+    }
+    /** 计算证书 PEM 的 SHA-256 指纹（纯 hex，不含 sha256: 前缀） */
+    static async _certFingerprint(certPem) {
+        const der = pemToArrayBuffer(certPem);
+        const hash = await crypto.subtle.digest('SHA-256', der);
+        return Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('');
+    }
+    /** 校验 PEM 格式是否包含 BEGIN CERTIFICATE */
+    static _validateCertPem(certPem, rootId) {
+        if (!certPem.includes('BEGIN CERTIFICATE')) {
+            throw new ValidationError(`root certificate missing PEM data: ${rootId}`);
+        }
+    }
+    /**
+     * 加载权威公钥用于签名验证。
+     * 浏览器环境：从 PEM 提取 SPKI 并导入为 CryptoKey。
+     * 支持 P-256 和 P-384 曲线。
+     */
+    async _loadAuthorityPublicKey(authorityCertPem, authorityPublicKeyPem, trustList) {
+        // 优先使用直接提供的公钥 PEM
+        if (authorityPublicKeyPem) {
+            return this._importPublicKeyPem(authorityPublicKeyPem);
+        }
+        // 其次使用证书 PEM 中的公钥
+        const candidateCert = authorityCertPem
+            || String(trustList?.authority_cert_pem ?? '');
+        if (!candidateCert) {
+            throw new ValidationError('authority certificate/public key is required to verify trust roots');
+        }
+        return this._importCertPublicKey(candidateCert);
+    }
+    /** 从 SPKI PEM 导入公钥（尝试 P-384，降级 P-256） */
+    async _importPublicKeyPem(pem) {
+        const der = pemToArrayBuffer(pem);
+        // 尝试 P-384（信任根权威通常用 P-384）
+        for (const curve of ['P-384', 'P-256']) {
+            try {
+                return await crypto.subtle.importKey('spki', der, { name: 'ECDSA', namedCurve: curve }, true, ['verify']);
+            }
+            catch { /* 尝试下一条曲线 */ }
+        }
+        throw new ValidationError('invalid authority public key PEM');
+    }
+    /**
+     * 从证书 PEM 提取公钥并导入。
+     * 使用简化 ASN.1 解析提取 SPKI 段。
+     */
+    async _importCertPublicKey(certPem) {
+        if (!certPem.includes('BEGIN CERTIFICATE')) {
+            throw new ValidationError('invalid authority certificate PEM');
+        }
+        const certDer = new Uint8Array(pemToArrayBuffer(certPem));
+        const spki = this._extractSpkiFromDer(certDer);
+        if (!spki) {
+            throw new ValidationError('invalid authority certificate PEM');
+        }
+        // 尝试 P-384 优先（信任根常用），降级 P-256
+        for (const curve of ['P-384', 'P-256']) {
+            try {
+                return await crypto.subtle.importKey('spki', spki, { name: 'ECDSA', namedCurve: curve }, true, ['verify']);
+            }
+            catch { /* 尝试下一条曲线 */ }
+        }
+        throw new ValidationError('invalid authority certificate PEM');
+    }
+    /**
+     * 从 X.509 DER 证书中提取 SubjectPublicKeyInfo。
+     * 搜索 EC 公钥 OID (1.2.840.10045.2.1)。
+     */
+    _extractSpkiFromDer(certDer) {
+        // EC 公钥 OID: 06 07 2a 86 48 ce 3d 02 01
+        const ecOid = [0x06, 0x07, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01];
+        for (let i = 0; i < certDer.length - ecOid.length; i++) {
+            let match = true;
+            for (let j = 0; j < ecOid.length; j++) {
+                if (certDer[i + j] !== ecOid[j]) {
+                    match = false;
+                    break;
+                }
+            }
+            if (!match)
+                continue;
+            // 往前回溯找 SEQUENCE (0x30) 起始
+            for (let back = 1; back <= 4; back++) {
+                const seqStart = i - back;
+                if (seqStart < 0)
+                    continue;
+                if (certDer[seqStart] !== 0x30)
+                    continue;
+                const seqLen = this._parseDerLength(certDer, seqStart + 1);
+                if (!seqLen)
+                    continue;
+                const totalLen = 1 + seqLen.lenBytes + seqLen.value;
+                if (totalLen < 50 || totalLen > 200)
+                    continue;
+                return certDer.slice(seqStart, seqStart + totalLen).buffer;
+            }
+        }
+        return null;
+    }
+    /** 解析 DER 长度字段 */
+    _parseDerLength(data, offset) {
+        if (offset >= data.length)
+            return null;
+        const first = data[offset];
+        if (first < 0x80)
+            return { value: first, lenBytes: 1 };
+        const numBytes = first & 0x7f;
+        if (numBytes === 0 || numBytes > 4 || offset + 1 + numBytes > data.length)
+            return null;
+        let value = 0;
+        for (let i = 0; i < numBytes; i++) {
+            value = (value << 8) | data[offset + 1 + i];
+        }
+        return { value, lenBytes: 1 + numBytes };
+    }
+    /** 版本单调递增检查（通过 keystore 加载已有版本） */
+    async _enforceMonotonicVersion(trustList) {
+        const version = trustList.version;
+        if (typeof version !== 'number')
+            return;
+        const ks = this._internal._keystore;
+        if (typeof ks.loadTrustRoots !== 'function')
+            return;
+        try {
+            const current = await ks.loadTrustRoots();
+            const currentVersion = current?.version;
+            if (typeof currentVersion === 'number' && version < currentVersion) {
+                throw new ValidationError('trust roots list version rollback is not allowed');
+            }
+        }
+        catch (e) {
+            if (e instanceof ValidationError)
+                throw e;
+            // keystore 读取失败等情况忽略
+        }
+    }
+    /** 从 keystore 加载本地已存储的信任列表 */
+    async _loadLocalTrustList() {
+        const ks = this._internal._keystore;
+        if (typeof ks.loadTrustRoots !== 'function')
+            return null;
+        try {
+            const payload = await ks.loadTrustRoots();
+            if (!payload || typeof payload !== 'object')
+                return null;
+            return payload;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=meta.js.map

package/dist/namespaces/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../../src/namespaces/meta.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,0EAA0E;AAG1E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EACL,gBAAgB,EAAE,aAAa,EAAiB,cAAc,GAC/D,MAAM,cAAc,CAAC;AAEtB,gBAAgB;AAChB,MAAM,kBAAkB,GAAG,4DAA4D,CAAC;AACxF,mBAAmB;AACnB,MAAM,cAAc,GAAG,GAAG,CAAC;AAY3B;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IAChB,OAAO,CAAY;IAE3B,YAAY,MAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,IAAY,SAAS;QACnB,OAAO,IAAI,CAAC,OAAc,CAAC;IAC7B,CAAC;IAED,2DAA2D;IAE3D,KAAK,CAAC,IAAI,CAAC,MAAkB;QAC3B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAkB;QAC7B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAkB;QACjC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,wDAAwD;IAExD,KAAK,CAAC,kBAAkB,CAAC,IAKxB;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACvC,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,WAAW,CAClB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;gBACnC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,eAAe,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,OAAqB,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,MAAc,EACd,IAAyC;QAEzC,MAAM,gBAAgB,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;gBACnC,OAAO,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE;gBACxD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,eAAe,CAAC,0CAA0C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAC1D,OAAO,OAAO,GAAG,IAAI,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,wDAAwD;IAExD,KAAK,CAAC,gBAAgB,CACpB,SAAqB,EACrB,IAIC;QAED,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAC;QAC5E,CAAC;QACD,aAAa,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAE/C,qBAAqB;QACrB,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAClD,IAAI,EAAE,kBAAkB,EACxB,IAAI,EAAE,wBAAwB,EAC9B,SAAS,CACV,CAAC;YACF,MAAM,aAAa,GAAG,aAAa,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,SAAS,EACT,cAAc,CAAC,QAAQ,CAAC,EACxB,cAAc,CAAC,aAAa,CAAC,CAC9B,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,eAAe,CAAC,qDAAqD,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAwE,EAAE,CAAC;QACzF,MAAM,OAAO,GAA0C,EAAE,CAAC;QAE1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAE5D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,UAAU,GAAG,aAAa,CAAC,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAChF,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC7B,MAAM,IAAI,eAAe,CAAC,2DAA2D,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,0CAA0C,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,IAAI,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,uDAAuD,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,wDAAwD;IAExD,KAAK,CAAC,gBAAgB,CACpB,SAAqB,EACrB,IAIC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAQ,CAAC;QACrE,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAE/C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACpC,0CAA0C;QAC1C,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YAC5C,UAAU,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QAEnF,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,KAAK;YACxB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,QAAQ;YACxB,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;SACtE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAQvB;QACC,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;YACpD,kBAAkB,EAAE,IAAI,EAAE,kBAAkB;YAC5C,wBAAwB,EAAE,IAAI,EAAE,wBAAwB;YACxD,cAAc,EAAE,IAAI,EAAE,cAAc;SACrC,CAAC,CAAC;QACF,MAAc,CAAC,UAAU,GAAG,SAAS,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,MAAc,EACd,IAQC;QAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAEjF,IAAI,OAAO,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5G,CAAC;QAED,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAElE,0BAA0B;QAC1B,IAAI,kBAAkB,GAAG,IAAI,EAAE,UAAU,IAAI,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9E,IAAI,WAAW,GAAG,OAAO,CAAC;QAC1B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACzG,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE;YAC/D,kBAAkB,EAAE,IAAI,EAAE,kBAAkB;YAC5C,wBAAwB,EAAE,IAAI,EAAE,wBAAwB;YACxD,cAAc,EAAE,IAAI,EAAE,cAAc;SACrC,CAAQ,CAAC;QACV,MAAM,IAAI,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;QAExD,qBAAqB;QACrB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,qDAAqD,CAAC,CAAC;QACnF,CAAC;QAED,MAAM;QACN,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACpC,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,OAAO,EAAE,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;YAChD,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QAEnF,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,kBAAkB,EAAE,WAAW;YAC/B,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,QAAQ;YACxB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;SAC1B,CAAC;IACJ,CAAC;IAED,2DAA2D;IAEnD,qBAAqB,CAC3B,GAAmB,EACnB,MAAsB,EACtB,UAA0B;QAE1B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAClE,CAAC;IAED,mBAAmB,CAAC,MAAc;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,WAAW,SAAS,kBAAkB,CAAC;IAChD,CAAC;IAED,kBAAkB,CAAC,MAAc;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,WAAW,SAAS,WAAW,CAAC;IACzC,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,aAAa,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,OAAO,UAAU,GAAG,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,qBAAqB,CAAC,UAAkB;QACtC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/E,OAAO,GAAG,MAAM,MAAM,MAAM,CAAC,IAAI,uBAAuB,CAAC;IAC3D,CAAC;IAED,yDAAyD;IAEzD,qBAAqB;IACb,MAAM,CAAC,eAAe,CAAC,MAAc;QAC3C,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wBAAwB;IAChB,MAAM,CAAC,qBAAqB,CAAC,SAAqB;QACxD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACvF,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,iEAAiE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,eAAe,CAAC,qDAAqD,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,KAAc,EAAE,KAAa;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,KAAK,mBAAmB,CAAC,CAAC;QACvF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2BAA2B;IACnB,MAAM,CAAC,uBAAuB,CAAC,SAAqB;QAC1D,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,mBAAmB,CAAC;QACnC,MAAM,SAAS,GAAG,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,sBAAsB;IACd,MAAM,CAAC,gBAAgB,CAAC,GAAQ;QACtC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrC,CAAC;IAED,sBAAsB;IACd,MAAM,CAAC,gBAAgB,CAAC,SAAiB;QAC/C,IAAI,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,iCAAiC;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,OAAO,aAAa,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,sBAAsB;IACd,MAAM,CAAC,mBAAmB,CAAC,SAAqB;QACtD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM;iBACV,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;iBAChD,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;gBACnB,EAAE,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO;gBAC3C,WAAW,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW;gBAC9C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,QAAQ;aAChC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IACjE,CAAC;IAED,yBAAyB;IACjB,MAAM,CAAC,qBAAqB,CAAC,KAAc;QACjD,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,iDAAiD;IACzC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACnD,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,sCAAsC;IAC9B,MAAM,CAAC,gBAAgB,CAAC,OAAe,EAAE,MAAc;QAC7D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,uBAAuB,CACnC,gBAAgC,EAChC,qBAAqC,EACrC,SAAsB;QAEtB,kBAAkB;QAClB,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QACD,kBAAkB;QAClB,MAAM,aAAa,GAAG,gBAAgB;eACjC,MAAM,CAAC,SAAS,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,oEAAoE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,yCAAyC;IACjC,KAAK,CAAC,mBAAmB,CAAC,GAAW;QAC3C,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,2BAA2B;QAC3B,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAClC,MAAM,EAAE,GAAG,EACX,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EACpC,IAAI,EAAE,CAAC,QAAQ,CAAC,CACjB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAAC,OAAe;QAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACjE,CAAC;QACD,8BAA8B;QAC9B,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAClC,MAAM,EAAE,IAAI,EACZ,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EACpC,IAAI,EAAE,CAAC,QAAQ,CAAC,CACjB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACK,mBAAmB,CAAC,OAAmB;QAC7C,wCAAwC;QACxC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvD,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,KAAK,GAAG,KAAK,CAAC;oBAAC,MAAM;gBAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,2BAA2B;YAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC;gBAC1B,IAAI,QAAQ,GAAG,CAAC;oBAAE,SAAS;gBAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI;oBAAE,SAAS;gBACzC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;gBACpD,IAAI,QAAQ,GAAG,EAAE,IAAI,QAAQ,GAAG,GAAG;oBAAE,SAAS;gBAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kBAAkB;IACV,eAAe,CAAC,IAAgB,EAAE,MAAc;QACtD,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC;QAC9B,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACvF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC;IAC3C,CAAC;IAED,mCAAmC;IAC3B,KAAK,CAAC,wBAAwB,CAAC,SAAqB;QAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAClC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO;QAExC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC,cAAc,KAAK,UAAU;YAAE,OAAO;QAEpD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;YAC1C,MAAM,cAAc,GAAG,OAAO,EAAE,OAAO,CAAC;YACxC,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;gBACnE,MAAM,IAAI,eAAe,CAAC,kDAAkD,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe;gBAAE,MAAM,CAAC,CAAC;YAC1C,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,8BAA8B;IACtB,KAAK,CAAC,mBAAmB;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC,cAAc,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACzD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/seq-tracker.d.ts

@@ -12,6 +12,9 @@ export declare class SeqTracker {
     onMessageSeq(ns: string, seq: number): boolean;
     /** pull 返回后更新 tracker 状态 */
     onPullResult(ns: string, messages: JsonObject[]): void;
+    /** P1-07: 内存保护 — 当 receivedSeqs 超过上限时，
+     *  找到最小 seq 强制推进 contiguousSeq，释放已无意义的条目。 */
+    private _forceCompact;
     private _tryAdvance;
     private _shouldProbe;
     /** S2: 服务端明确告知某区间无消息（tombstone）→ 将 gap 标记为 resolved */

package/dist/seq-tracker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seq-tracker.d.ts","sourceRoot":"","sources":["../src/seq-tracker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA8B7C,qBAAa,UAAU;IACrB,OAAO,CAAC,SAAS,CAAwC;IAEzD,OAAO,CAAC,IAAI;IASZ,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAIpC,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAIjC;;wBAEoB;IACpB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IASlD,uCAAuC;IACvC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAyD9C,4BAA4B;IAC5B,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI;IAoCtD,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,YAAY;IASpB,uDAAuD;IACvD,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAU9E,+BAA+B;IAC/B,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIjC;;sDAEkD;IAClD,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAmBjD,mCAAmC;IACnC,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAQrC,mCAAmC;IACnC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;CASlD"}
+{"version":3,"file":"seq-tracker.d.ts","sourceRoot":"","sources":["../src/seq-tracker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAkC7C,qBAAa,UAAU;IACrB,OAAO,CAAC,SAAS,CAAwC;IAEzD,OAAO,CAAC,IAAI;IASZ,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAIpC,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAIjC;;wBAEoB;IACpB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IASlD,uCAAuC;IACvC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IA8D9C,4BAA4B;IAC5B,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI;IAoCtD;iDAC6C;IAC7C,OAAO,CAAC,aAAa;IAuBrB,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,YAAY;IASpB,uDAAuD;IACvD,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAU9E,+BAA+B;IAC/B,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIjC;;sDAEkD;IAClD,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAmBjD,mCAAmC;IACnC,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAQrC,mCAAmC;IACnC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;CASlD"}

package/dist/seq-tracker.js

@@ -6,11 +6,15 @@ const BACKOFF_INTERVALS = [1, 3, 10, 30, 60]; // 秒
 // S2: 删除"probeCount >= 5 强制 resolved"的硬限制；仅用作 backoff 索引上限。
 // resolved 只应由"完整补齐"或服务端明确 tombstone 驱动。
 const MAX_PROBE_COUNT = 5;
+// P1-07: receivedSeqs 内存保护上限，超过时触发 forceCompact 释放内存
+const RECEIVED_SEQS_LIMIT = 5000;
 function gapKey(start, end) {
     return `${start}:${end}`;
 }
+/** 统一使用 Date.now() 返回绝对时间戳（毫秒），
+ *  避免 performance.now()（相对时间）与 Date.now()（绝对时间）混用导致语义不一致。 */
 function nowMs() {
-    return typeof performance !== 'undefined' ? performance.now() : Date.now();
+    return Date.now();
 }
 export class SeqTracker {
     _trackers = new Map();
@@ -66,6 +70,10 @@ export class SeqTracker {
         }
         t.receivedSeqs.add(seq);
         t.maxSeenSeq = Math.max(t.maxSeenSeq, seq);
+        // P1-07: 内存保护 — receivedSeqs 超限时强制推进 contiguousSeq 释放内存
+        if (t.receivedSeqs.size > RECEIVED_SEQS_LIMIT) {
+            this._forceCompact(t);
+        }
         if (seq === t.contiguousSeq + 1) {
             t.contiguousSeq = seq;
             t.receivedSeqs.delete(seq);
@@ -100,7 +108,7 @@ export class SeqTracker {
         const t = this._get(ns);
         const pulledSeqs = new Set();
         for (const m of messages) {
-            const s = m.seq;
+            const s = typeof m.seq === 'number' && m.seq > 0 ? m.seq : m.event_seq;
             if (typeof s === 'number' && s > 0)
                 pulledSeqs.add(s);
         }
@@ -133,6 +141,34 @@ export class SeqTracker {
         }
         this._tryAdvance(t);
     }
+    /** P1-07: 内存保护 — 当 receivedSeqs 超过上限时，
+     *  找到最小 seq 强制推进 contiguousSeq，释放已无意义的条目。 */
+    _forceCompact(t) {
+        if (t.receivedSeqs.size === 0)
+            return;
+        let minSeq = Infinity;
+        for (const s of t.receivedSeqs) {
+            if (s < minSeq)
+                minSeq = s;
+        }
+        if (minSeq === Infinity)
+            return;
+        // 强制推进到 minSeq（跳过空洞）
+        t.contiguousSeq = minSeq;
+        t.receivedSeqs.delete(minSeq);
+        // 清理被跳过区间内的 pendingGaps
+        for (const [key, probe] of t.pendingGaps) {
+            if (probe.gapEnd <= t.contiguousSeq) {
+                t.pendingGaps.delete(key);
+            }
+        }
+        // 清理 receivedSeqs 中 <= contiguousSeq 的条目
+        for (const s of t.receivedSeqs) {
+            if (s <= t.contiguousSeq)
+                t.receivedSeqs.delete(s);
+        }
+        this._tryAdvance(t);
+    }
     _tryAdvance(t) {
         // 先清理已解决的空洞
         let changed = true;