@atlasauth/pca-mpc 0.3.0 → 0.4.0

package/dist/net/mesh.js

@@ -0,0 +1,491 @@
+"use strict";
+/**
+ * Authenticated, confidential, fail-closed point-to-point mesh over TLS 1.3 (research prototype).
+ *
+ *  - MUTUAL TLS with PINNED self-signed certificates (generated per run by `certs.ts`). A peer is
+ *    identified by the SHA-256 fingerprint of its certificate, never by anything it claims; the claimed
+ *    id in the hello frame must agree with the pinned fingerprint.
+ *  - Strict framing + per-link sequence numbers. A malformed frame, a duplicate / replayed frame, a
+ *    skipped (out-of-order) frame, a frame for the wrong round or session, or an oversize length
+ *    prefix aborts the whole run with an ATTRIBUTABLE `NetAbort` naming the sender.
+ *  - Timeouts on every receive (no hangs); a silent peer is blamed after `recvTimeoutMs`.
+ *  - ABORT PROPAGATION: the first failure poisons the mesh, wakes every pending receive, best-effort
+ *    sends an `abort` frame to every peer (so they stop immediately and learn who we blame), then
+ *    closes the sockets. Once failed, nothing further is sent as protocol data (fail closed).
+ *
+ * Network faults (drop, truncate, bit-flip, reorder, duplicate at the TCP level) are all caught by TLS
+ * record authentication and surface as `disconnect` on that link. Application-level misbehaviour
+ * (replay, skipped sequence, garbage, wrong round) is caught by the framing checks here. See the tests.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Mesh = exports.MAX_MESH_EVENTS = exports.wallClock = void 0;
+const node_crypto_1 = require("node:crypto");
+const node_events_1 = require("node:events");
+const tls = __importStar(require("node:tls"));
+const node_tls_1 = require("node:tls");
+const wire_1 = require("./wire");
+const certs_1 = require("./certs");
+exports.wallClock = {
+    now: () => Date.now(),
+    setTimer: (fn, ms) => setTimeout(fn, ms),
+    clearTimer: (h) => clearTimeout(h),
+};
+/** Most non-fatal observations kept in `Mesh.events`; further ones are only counted. */
+exports.MAX_MESH_EVENTS = 64;
+class Mesh {
+    selfId;
+    cfg;
+    links = new Map();
+    pinned = new Map(); // fingerprint -> node id
+    ev = new node_events_1.EventEmitter();
+    server = null;
+    failure = null;
+    finished = false;
+    clock;
+    recvTimeoutMs;
+    connectTimeoutMs;
+    /** Non-fatal observations (e.g. a TLS client rejected at the door) for evidence logs. */
+    events = [];
+    /** Observations beyond `MAX_MESH_EVENTS` that were counted but not stored. */
+    eventsDropped = 0;
+    maxInboxFrames;
+    maxInboxBytes;
+    constructor(cfg) {
+        this.cfg = cfg;
+        this.selfId = cfg.selfId;
+        this.clock = cfg.clock ?? exports.wallClock;
+        this.recvTimeoutMs = cfg.recvTimeoutMs ?? 20_000;
+        this.connectTimeoutMs = cfg.connectTimeoutMs ?? 30_000;
+        if (cfg.tamper && cfg.unsafeTestHooks !== true) {
+            throw new Error('mesh: the tamper test hook requires unsafeTestHooks: true (test-only)');
+        }
+        this.maxInboxFrames = cfg.maxInboxFrames ?? 1024;
+        this.maxInboxBytes = cfg.maxInboxBytes ?? 32 * 1024 * 1024;
+        this.ev.setMaxListeners(0);
+        const want = cfg.linkTo ?? cfg.nodes.map((n) => n.id).filter((i) => i !== cfg.selfId);
+        for (const n of cfg.nodes) {
+            if (n.id !== cfg.selfId)
+                this.pinned.set((0, certs_1.fingerprintOf)(n.certPem), n.id);
+        }
+        for (const id of want) {
+            if (!cfg.nodes.some((n) => n.id === id))
+                throw new Error(`mesh: unknown link target ${id}`);
+            this.links.set(id, newLink(id));
+        }
+    }
+    note(msg) {
+        if (this.events.length < exports.MAX_MESH_EVENTS)
+            this.events.push(msg);
+        else
+            this.eventsDropped++;
+    }
+    /** The session id every frame on this mesh carries (used to bind sub-protocols to this session). */
+    get sessionId() {
+        return this.cfg.sessionId;
+    }
+    get peers() {
+        return [...this.links.keys()].sort((a, b) => a - b);
+    }
+    get failed() {
+        return this.failure;
+    }
+    // ------------------------------------------------------------------ connect
+    /** Listen, dial every lower-numbered link target, and wait until all links are authenticated. */
+    async connect() {
+        const self = this.cfg.nodes.find((n) => n.id === this.selfId);
+        if (!self)
+            throw new Error('mesh: self not in nodes');
+        const others = this.cfg.nodes.filter((n) => n.id !== this.selfId);
+        this.server = (0, node_tls_1.createServer)({
+            key: this.cfg.keyPem,
+            cert: this.cfg.certPem,
+            ca: others.map((n) => n.certPem),
+            requestCert: true,
+            rejectUnauthorized: true,
+            minVersion: 'TLSv1.3',
+        }, (sock) => this.onIncoming(sock));
+        this.server.on('tlsClientError', (e) => this.note(`tlsClientError: ${e.message.slice(0, 120)}`));
+        this.server.on('error', (e) => this.note(`server error: ${e.message}`));
+        await new Promise((res, rej) => {
+            this.server.once('error', rej);
+            this.server.listen(self.port, this.cfg.listenHost ?? '0.0.0.0', () => res());
+        });
+        const deadline = this.clock.now() + this.connectTimeoutMs;
+        for (const id of this.peers) {
+            if (id < this.selfId)
+                void this.dial(id, deadline);
+        }
+        // wait for all links to complete the authenticated hello exchange (poll; bounded by the deadline)
+        for (;;) {
+            if (this.failure)
+                throw this.failure;
+            const missing = this.peers.filter((i) => !this.links.get(i).helloSeen);
+            if (missing.length === 0)
+                return;
+            if (this.clock.now() > deadline) {
+                const e = new wire_1.NetAbort('timeout', missing[0], this.selfId, `connect: no authenticated link from ${missing.join(',')}`);
+                this.fail(e);
+                throw e;
+            }
+            await new Promise((r) => setTimeout(r, 20)); // a poll interval, not a decision: real time
+        }
+    }
+    async dial(id, deadline) {
+        const node = this.cfg.nodes.find((n) => n.id === id);
+        while (!this.failure && this.clock.now() < deadline) {
+            const ok = await new Promise((resolve) => {
+                const sock = tls.connect({
+                    host: node.host,
+                    port: node.port,
+                    key: this.cfg.keyPem,
+                    cert: this.cfg.certPem,
+                    ca: [node.certPem],
+                    minVersion: 'TLSv1.3',
+                    // We pin by certificate (ca = exactly that cert + fingerprint check below), not by hostname.
+                    checkServerIdentity: () => undefined,
+                });
+                let settled = false;
+                sock.once('secureConnect', () => {
+                    settled = true;
+                    const fp = sock.getPeerCertificate().fingerprint256;
+                    if (!sock.authorized || this.pinned.get(fp) !== id) {
+                        sock.destroy();
+                        this.fail(new wire_1.NetAbort('identity', id, this.selfId, `dial: peer certificate is not the pinned identity of node ${id}`));
+                        return resolve(true);
+                    }
+                    this.attach(id, sock);
+                    resolve(true);
+                });
+                sock.once('error', () => {
+                    if (!settled) {
+                        sock.destroy();
+                        resolve(false);
+                    }
+                });
+            });
+            if (ok)
+                return;
+            await new Promise((r) => setTimeout(r, 150)); // retry pacing, not a decision: real time
+        }
+    }
+    onIncoming(sock) {
+        sock.on('error', () => undefined);
+        const fp = sock.getPeerCertificate().fingerprint256;
+        const id = fp ? this.pinned.get(fp) : undefined;
+        if (!sock.authorized || id === undefined || !this.links.has(id) || id < this.selfId) {
+            this.note(`rejected incoming connection (fp=${fp ?? 'none'})`);
+            sock.destroy();
+            return;
+        }
+        const l = this.links.get(id);
+        if (l.socket) {
+            // a second connection claiming an already-linked identity
+            this.note(`duplicate connection from node ${id}`);
+            sock.destroy();
+            return;
+        }
+        this.attach(id, sock);
+    }
+    attach(id, sock) {
+        const l = this.links.get(id);
+        if (l.socket) {
+            sock.destroy();
+            return;
+        }
+        l.socket = sock;
+        sock.setNoDelay(true);
+        sock.on('data', (chunk) => this.onData(l, chunk));
+        sock.on('error', (e) => this.onClosed(l, `socket error: ${e.message}`));
+        sock.on('close', () => this.onClosed(l, 'socket closed'));
+        sock.on('end', () => this.onClosed(l, 'peer ended'));
+        // hello: first frame on every link (seq 0); carries our id so the peer can cross-check the pin.
+        this.sendFrame(l, 'hello', 'hello', { id: this.selfId });
+    }
+    // ------------------------------------------------------------------ receive path
+    onData(l, chunk) {
+        if (this.failure)
+            return;
+        l.bytesIn += chunk.length;
+        let bodies;
+        try {
+            bodies = l.splitter.push(chunk);
+        }
+        catch {
+            return this.fail(new wire_1.NetAbort('oversize', l.id, this.selfId, 'length prefix above MAX_FRAME_BYTES'));
+        }
+        for (const b of bodies) {
+            const f = (0, wire_1.parseFrame)(b);
+            if (!f) {
+                const pv = (0, wire_1.versionMismatch)(b);
+                if (pv !== null) {
+                    return this.fail(new wire_1.NetAbort('version', l.id, this.selfId, `peer ${l.id} speaks wire version ${pv}, this node speaks ${wire_1.WIRE_VERSION}; upgrade both peers`));
+                }
+            }
+            if (!f)
+                return this.fail(new wire_1.NetAbort('malformed', l.id, this.selfId, 'undecodable or ill-shaped frame'));
+            if (f.sid !== this.cfg.sessionId) {
+                return this.fail(new wire_1.NetAbort('wrong-session', l.id, this.selfId, 'frame from another session'));
+            }
+            if (f.ty === 'abort') {
+                // An abort frame is only a CLAIM by the peer that sent it. We blame that peer (the authenticated
+                // sender), never the party it names: otherwise any peer could frame an honest one.
+                const d = f.d;
+                // a relayed abort is second-hand (an honest peer passing on what ITS peer said): it names no one
+                const relayed = d?.relayed === true;
+                const claimedKind = typeof d?.kind === 'string' && wire_1.ABORT_KINDS.has(d.kind) ? d.kind : undefined;
+                const maxId = Math.max(...this.cfg.nodes.map((x) => x.id));
+                const claimedBlame = typeof d?.blamed === 'number' && Number.isInteger(d.blamed) && d.blamed >= 0 && d.blamed <= maxId ? d.blamed : null;
+                const detail = typeof d?.detail === 'string' ? sanitize(d.detail, 120) : '';
+                return this.fail(new wire_1.NetAbort('peer-abort', relayed ? null : l.id, this.selfId, `peer ${l.id} ${relayed ? 'relayed' : 'reported'} an abort (${claimedKind ?? 'unspecified'}, accuses ${claimedBlame === null ? 'no one' : claimedBlame}, unverified) ${detail}`, claimedKind, claimedBlame, relayed ? { reason: 'relayed abort: a second-hand claim passed on by an honest peer; it names no one and is never evidence' } : {}), l.id);
+            }
+            if (f.seq !== l.recvSeq) {
+                const kind = f.seq < l.recvSeq ? 'duplicate' : 'out-of-order';
+                return this.fail(new wire_1.NetAbort(kind, l.id, this.selfId, `expected seq ${l.recvSeq}, got ${f.seq} (round ${f.rd})`));
+            }
+            l.recvSeq++;
+            l.framesIn++;
+            if (f.ty === 'hello') {
+                const d = f.d;
+                if (l.helloSeen || d?.id !== l.id) {
+                    return this.fail(new wire_1.NetAbort('identity', l.id, this.selfId, `hello claims id ${String(d?.id)} on the link pinned to ${l.id}`));
+                }
+                l.helloSeen = true;
+            }
+            else {
+                if (!l.helloSeen)
+                    return this.fail(new wire_1.NetAbort('malformed', l.id, this.selfId, 'data before hello'));
+                l.inbox.push({ f, size: b.length });
+                l.inboxBytes += b.length;
+                if (l.inbox.length > this.maxInboxFrames || l.inboxBytes > this.maxInboxBytes) {
+                    return this.fail(new wire_1.NetAbort('flood', l.id, this.selfId, `peer ${l.id} queued more than the inbox cap allows`));
+                }
+                if (!l.paused && (l.inbox.length > this.maxInboxFrames / 2 || l.inboxBytes > this.maxInboxBytes / 2)) {
+                    l.paused = true;
+                    l.socket?.pause();
+                }
+            }
+        }
+        this.ev.emit('wake');
+    }
+    onClosed(l, why) {
+        if (l.closed)
+            return;
+        l.closed = true;
+        if (!this.finished && !this.failure && !l.helloSeen) {
+            this.note(`link ${l.id} closed before hello: ${why}`);
+        }
+        this.ev.emit('wake');
+    }
+    // ------------------------------------------------------------------ send path
+    sendFrame(l, ty, rd, d) {
+        const frame = { v: wire_1.WIRE_VERSION, ty, sid: this.cfg.sessionId, seq: l.sendSeq++, rd, d };
+        const raw = (0, wire_1.encodeFrame)(frame);
+        const outs = this.cfg.tamper && ty !== 'hello' ? this.cfg.tamper({ to: l.id, frame, raw }) : [raw];
+        for (const b of outs) {
+            if (l.socket && !l.socket.destroyed) {
+                l.socket.write(b);
+                l.bytesOut += b.length;
+            }
+        }
+        l.framesOut++;
+    }
+    /** Send a protocol message to one peer. Throws the mesh failure if already aborted (fail closed). */
+    send(to, round, payload) {
+        if (this.failure)
+            throw this.failure;
+        const l = this.links.get(to);
+        if (!l)
+            throw new Error(`mesh: no link to ${to}`);
+        this.sendFrame(l, 'msg', round, payload);
+    }
+    broadcast(round, payload, to = this.peers) {
+        for (const p of to)
+            this.send(p, round, payload);
+    }
+    /** ECDSA-P256/SHA-256 signature over `data` with this node's TLS identity key (transferable: verifiable against the pinned certificate). */
+    sign(data) {
+        return (0, node_crypto_1.sign)('sha256', Buffer.from(data), this.cfg.keyPem);
+    }
+    /** Verify `sig` over `data` against the PINNED certificate of node `peer`. False on any failure (never throws). */
+    verify(peer, data, sig) {
+        const n = this.cfg.nodes.find((x) => x.id === peer);
+        if (!n || peer === this.selfId)
+            return false;
+        try {
+            return (0, node_crypto_1.verify)('sha256', Buffer.from(data), new node_crypto_1.X509Certificate(n.certPem).publicKey, Buffer.from(sig));
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Receive the next message from `from`, which must belong to `round`. Times out; never hangs. */
+    async recv(from, round, timeoutMs = this.recvTimeoutMs) {
+        const l = this.links.get(from);
+        if (!l)
+            throw new Error(`mesh: no link to ${from}`);
+        const deadline = this.clock.now() + timeoutMs;
+        for (;;) {
+            if (this.failure)
+                throw this.failure;
+            const it = l.inbox.shift();
+            if (it) {
+                const f = it.f;
+                l.inboxBytes -= it.size;
+                if (l.paused && l.inbox.length <= this.maxInboxFrames / 2 && l.inboxBytes <= this.maxInboxBytes / 2) {
+                    l.paused = false;
+                    l.socket?.resume();
+                }
+                if (f.rd !== round) {
+                    const e = new wire_1.NetAbort('wrong-round', from, this.selfId, `expected round '${round}', got '${f.rd}'`);
+                    this.fail(e);
+                    throw e;
+                }
+                return f.d;
+            }
+            if (l.closed) {
+                const e = new wire_1.NetAbort('disconnect', from, this.selfId, `link to ${from} closed while awaiting '${round}'`);
+                this.fail(e);
+                throw e;
+            }
+            const left = deadline - this.clock.now();
+            if (left <= 0) {
+                const e = new wire_1.NetAbort('timeout', from, this.selfId, `no '${round}' message from ${from} within ${timeoutMs}ms (deadline ${timeoutMs}ms; a silent peer is blamed on this local observation only)`, undefined, undefined, { deadlineMs: timeoutMs });
+                this.fail(e);
+                throw e;
+            }
+            await new Promise((res) => {
+                const done = () => {
+                    this.clock.clearTimer(t);
+                    this.ev.off('wake', done);
+                    res();
+                };
+                const t = this.clock.setTimer(done, left);
+                this.ev.on('wake', done);
+            });
+        }
+    }
+    /** Receive `round` from every peer in `from` concurrently. A failure on any link rejects the whole call. */
+    async collect(round, from = this.peers, timeoutMs) {
+        const got = await Promise.all(from.map(async (p) => [p, await this.recv(p, round, timeoutMs)]));
+        return new Map(got);
+    }
+    // ------------------------------------------------------------------ failure / shutdown
+    /**
+     * Poison the mesh: record the first failure, tell EVERY peer except `skipPeer` (the one that just told us;
+     * forwarding the original accusation so an innocent bystander is never blamed for merely closing), close all.
+     */
+    fail(err, skipPeer) {
+        if (this.failure)
+            return;
+        this.failure = err;
+        {
+            for (const l of this.links.values()) {
+                if (l.id === skipPeer)
+                    continue;
+                if (l.socket && !l.socket.destroyed && !l.closed) {
+                    try {
+                        // a forwarded peer-abort stays a claim: we pass on what was claimed, receivers re-attribute to us
+                        const kind = err.kind === 'peer-abort' ? (err.claimedKind ?? 'peer-abort') : err.kind;
+                        const blamed = err.kind === 'peer-abort' ? (err.claimedBlame ?? null) : err.blamed;
+                        this.sendFrameRaw(l, { kind, blamed, detail: sanitize(err.message, 200), ...(err.kind === 'peer-abort' ? { relayed: true } : {}) });
+                    }
+                    catch {
+                        /* best effort */
+                    }
+                }
+            }
+        }
+        this.ev.emit('wake');
+        setTimeout(() => this.closeAll(), 50).unref();
+    }
+    sendFrameRaw(l, d) {
+        const frame = { v: wire_1.WIRE_VERSION, ty: 'abort', sid: this.cfg.sessionId, seq: l.sendSeq++, rd: 'abort', d };
+        l.socket.write((0, wire_1.encodeFrame)(frame));
+    }
+    /** Normal completion: flush and close. Peers that are still reading will see EOF only after our data. */
+    async finish() {
+        this.finished = true;
+        await new Promise((r) => setTimeout(r, 100));
+        this.closeAll();
+    }
+    closeAll() {
+        for (const l of this.links.values())
+            l.socket?.end();
+        setTimeout(() => {
+            for (const l of this.links.values())
+                l.socket?.destroy();
+            this.server?.close();
+        }, 100).unref();
+    }
+    stats() {
+        return this.peers.map((p) => {
+            const l = this.links.get(p);
+            return {
+                peer: p,
+                appBytesOut: l.bytesOut,
+                appBytesIn: l.bytesIn,
+                framesOut: l.framesOut,
+                framesIn: l.framesIn,
+                tlsBytesWritten: l.socket?.bytesWritten ?? 0,
+                tlsBytesRead: l.socket?.bytesRead ?? 0,
+            };
+        });
+    }
+}
+exports.Mesh = Mesh;
+function newLink(id) {
+    return {
+        id,
+        socket: null,
+        splitter: new wire_1.FrameSplitter(),
+        inbox: [],
+        inboxBytes: 0,
+        paused: false,
+        sendSeq: 0,
+        recvSeq: 0,
+        closed: false,
+        helloSeen: false,
+        bytesIn: 0,
+        bytesOut: 0,
+        framesIn: 0,
+        framesOut: 0,
+    };
+}
+/** Printable-ASCII, length-capped copy of untrusted text (no control characters, no log forging). */
+function sanitize(x, max) {
+    return x.replace(/[^\x20-\x7e]/g, '?').slice(0, max);
+}
+//# sourceMappingURL=mesh.js.map

package/dist/net/mesh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh.js","sourceRoot":"","sources":["../../src/net/mesh.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,6CAA0F;AAC1F,6CAA2C;AAC3C,8CAAgC;AAChC,uCAA2E;AAC3E,iCAWgB;AAChB,mCAAwC;AAsB3B,QAAA,SAAS,GAAc;IAClC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAkC,CAAC;CACpE,CAAC;AA6BF,wFAAwF;AAC3E,QAAA,eAAe,GAAG,EAAE,CAAC;AAoClC,MAAa,IAAI;IACN,MAAM,CAAS;IACP,GAAG,CAAa;IAChB,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAChC,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,yBAAyB;IAC7D,EAAE,GAAG,IAAI,0BAAY,EAAE,CAAC;IACjC,MAAM,GAAsB,IAAI,CAAC;IACjC,OAAO,GAAoB,IAAI,CAAC;IAChC,QAAQ,GAAG,KAAK,CAAC;IACR,KAAK,CAAY;IACjB,aAAa,CAAS;IACtB,gBAAgB,CAAS;IAC1C,yFAAyF;IAChF,MAAM,GAAa,EAAE,CAAC;IAC/B,8EAA8E;IAC9E,aAAa,GAAG,CAAC,CAAC;IACD,cAAc,CAAS;IACvB,aAAa,CAAS;IAEvC,YAAY,GAAe;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,iBAAS,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;QACtF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,GAAW;QACtB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,uBAAe;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;IAC5B,CAAC;IAED,oGAAoG;IACpG,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,6EAA6E;IAE7E,iGAAiG;IACjG,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,GAAG,IAAA,uBAAe,EAC3B;YACE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACpB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO;YACtB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAChC,WAAW,EAAE,IAAI;YACjB,kBAAkB,EAAE,IAAI;YACxB,UAAU,EAAE,SAAS;SACtB,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAChC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAoB,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5G,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnC,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC1D,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM;gBAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QACD,kGAAkG;QAClG,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,IAAI,eAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,MAAM,EAAE,uCAAuC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,CAAC;YACV,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,6CAA6C;QAClG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,QAAgB;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;gBAChD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;oBACpB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO;oBACtB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;oBAClB,UAAU,EAAE,SAAS;oBACrB,6FAA6F;oBAC7F,mBAAmB,EAAE,GAAG,EAAE,CAAC,SAAS;iBACrC,CAAC,CAAC;gBACH,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;oBAC9B,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,cAAc,CAAC;oBACpD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;wBACnD,IAAI,CAAC,OAAO,EAAE,CAAC;wBACf,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,6DAA6D,EAAE,EAAE,CAAC,CAAC,CAAC;wBACxH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;oBACvB,CAAC;oBACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;oBACtB,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,IAAI,CAAC,OAAO,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,EAAE;gBAAE,OAAO;YACf,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,0CAA0C;QAChG,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAAe;QAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,cAAc,CAAC;QACpD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC,oCAAoC,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,0DAA0D;YAC1D,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAEO,MAAM,CAAC,EAAU,EAAE,IAAe;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACrD,gGAAgG;QAChG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,kFAAkF;IAE1E,MAAM,CAAC,CAAO,EAAE,KAAa;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,IAAA,iBAAU,EAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,EAAE,GAAG,IAAA,sBAAe,EAAC,CAAC,CAAC,CAAC;gBAC9B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,wBAAwB,EAAE,sBAAsB,mBAAY,sBAAsB,CAAC,CAAC,CAAC;gBAC/J,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;YAC1G,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;gBACrB,iGAAiG;gBACjG,mFAAmF;gBACnF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAqF,CAAC;gBAClG,iGAAiG;gBACjG,MAAM,OAAO,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;gBACpC,MAAM,WAAW,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,kBAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,IAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC/G,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3D,MAAM,YAAY,GAChB,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtH,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,eAAQ,CACV,YAAY,EACZ,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EACrB,IAAI,CAAC,MAAM,EACX,QAAQ,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,cAAc,WAAW,IAAI,aAAa,aAAa,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,iBAAiB,MAAM,EAAE,EAC/K,WAAW,EACX,YAAY,EACZ,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,uGAAuG,EAAE,CAAC,CAAC,CAAC,EAAE,CACnI,EACD,CAAC,CAAC,EAAE,CACL,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAc,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBACzE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACrH,CAAC;YACD,CAAC,CAAC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAA4B,CAAC;gBACzC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oBAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAClI,CAAC;gBACD,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,CAAC,CAAC,SAAS;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;gBACtG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,eAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,CAAC;gBACnH,CAAC;gBACD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC;oBACrG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;oBAChB,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,CAAO,EAAE,GAAW;QACnC,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO;QACrB,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,+EAA+E;IAEvE,SAAS,CAAC,CAAO,EAAE,EAAa,EAAE,EAAU,EAAE,CAAU;QAC9D,MAAM,KAAK,GAAU,EAAE,CAAC,EAAE,mBAAY,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,MAAM,GAAG,GAAG,IAAA,kBAAW,EAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnG,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC;YACzB,CAAC;QACH,CAAC;QACD,CAAC,CAAC,SAAS,EAAE,CAAC;IAChB,CAAC;IAED,qGAAqG;IACrG,IAAI,CAAC,EAAU,EAAE,KAAa,EAAE,OAAgB;QAC9C,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,SAAS,CAAC,KAAa,EAAE,OAAgB,EAAE,KAAwB,IAAI,CAAC,KAAK;QAC3E,KAAK,MAAM,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,4IAA4I;IAC5I,IAAI,CAAC,IAAgB;QACnB,OAAO,IAAA,kBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,mHAAmH;IACnH,MAAM,CAAC,IAAY,EAAE,IAAgB,EAAE,GAAe;QACpD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,IAAA,oBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,6BAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,KAAa,EAAE,SAAS,GAAG,IAAI,CAAC,aAAa;QACpE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC9C,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACf,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,CAAC;gBACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;oBACpG,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC;oBACjB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,GAAG,IAAI,eAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,KAAK,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACrG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACb,MAAM,CAAC,CAAC;gBACV,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,IAAI,eAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,IAAI,2BAA2B,KAAK,GAAG,CAAC,CAAC;gBAC5G,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,CAAC;YACV,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACzC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,IAAI,eAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,kBAAkB,IAAI,WAAW,SAAS,gBAAgB,SAAS,6DAA6D,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;gBACpP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,CAAC;YACV,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE;gBAC9B,MAAM,IAAI,GAAG,GAAS,EAAE;oBACtB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACzB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBAC1B,GAAG,EAAE,CAAC;gBACR,CAAC,CAAC;gBACF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,OAA0B,IAAI,CAAC,KAAK,EAAE,SAAkB;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAU,CAAC,CAAC,CAAC;QACzG,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,wFAAwF;IAExF;;;OAGG;IACH,IAAI,CAAC,GAAa,EAAE,QAAiB;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,CAAC;YACC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ;oBAAE,SAAS;gBAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;oBACjD,IAAI,CAAC;wBACH,kGAAkG;wBAClG,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;wBACtF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;wBACnF,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBACtI,CAAC;oBAAC,MAAM,CAAC;wBACP,iBAAiB;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,CAAC;IAEO,YAAY,CAAC,CAAO,EAAE,CAAU;QACtC,MAAM,KAAK,GAAU,EAAE,CAAC,EAAE,mBAAY,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACjH,CAAC,CAAC,MAAO,CAAC,KAAK,CAAC,IAAA,kBAAW,EAAC,KAAK,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAEO,QAAQ;QACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QACrD,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACvB,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,QAAQ;gBACvB,UAAU,EAAE,CAAC,CAAC,OAAO;gBACrB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC;gBAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC;aACvC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA/ZD,oBA+ZC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO;QACL,EAAE;QACF,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI,oBAAa,EAAE;QAC7B,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,CAAC;QACb,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,CAAC;KACb,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC"}

package/dist/net/offline-net.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The NO-DEALER offline phase over the mutual-TLS mesh (research prototype).
+ *
+ * Each party is its own process holding only its own shares. Nobody is trusted to know the MAC keys, the
+ * triples or the inputs: every party samples its own key shares and its own triple shares, and the products
+ * needed for the triples and the MACs are computed by Gilboa OT multiplication between every ordered pair of
+ * parties (`mascot.ts` is the in-process model of exactly this computation):
+ *
+ *   ob-S / ob-R / ob-C   all-to-all  the kappa = 128 base OTs of every ordered pair (malicious-secure, session-bound
+ *                                    Chou-Orlandi: Schnorr proof of knowledge, point validation, transcript KDF)
+ *   in-share             all-to-all  each owner splits every input bit into additive shares and sends one to each peer
+ *   ox<layer>.<chunk>.u  all-to-all  OT-extension receiver messages (u matrix + KOS pair)  -> KOS correlation check
+ *   ox<layer>.<chunk>.y  all-to-all  OT-extension sender ciphertexts
+ *
+ * Two multiplication layers (plus the tag layer 3): layer 1 = the triple products c = a*b and c-hat = a-hat*b, and the MACs of every
+ * value that is known before them (a, b, a-hat, the inputs, the input-check mask); layer 2 = the MACs of the
+ * products. The triple SACRIFICE and the input-consistency opening run in the online phase (`protocol.ts`),
+ * on top of the same batched MAC-check, so a party that feeds wrong OT inputs yields a wrong triple that the
+ * sacrifice catches, and an input whose MAC does not match its value fails the check.
+ *
+ * Statistical/computational parameters: 2 independent MAC keys (>= 2^-120), 2 sacrifice partners per triple
+ * (>= 2^-122), KOS check with SSEC = 128 extra rows (best known attack about 2^-128, argued; see ot.ts), Ed25519 base OTs.
+ *
+ * PAIRWISE TAGS (identifiable abort): after the MACs are known, a third OT layer gives every share a pairwise tag
+ * T_ij = K_ij + Δ_j·x_i for every peer j (one OT product of my x with j's secret Δ_j per item), so the online
+ * phase can name a party that lies about a share, a MAC share or a residual (`pa.ts`).
+ *
+ * SELECTIVE FAILURE (RT-04): receivers do not choose with the bits of their share. Each share they multiply with is the gadget
+ * sum `<g, b>` of 61 + 3s = 253 uniform choice bits (s = 64, `enc.ts`), so whether a run aborts is statistically independent of
+ * the share (about 2^-63); the gadget is a commit-reveal value contributed by all parties. The tag layer splits its derived operands as `e + d` with an encoded `e`.
+ *
+ * What is NOT here: any security proof, and attribution of a wrong OT operand in the offline triple products
+ * (the sacrifice detects the bad triple, but the tags are computed on the already-wrong value): named only for n = 2.
+ */
+import type { DecisionVector } from '../party';
+import type { Mesh } from './mesh';
+import { type Prep } from './prep';
+export interface OfflineNetArgs {
+    mesh: Mesh;
+    id: number;
+    n: number;
+    C: number;
+    keys: number;
+    partners: number;
+    sessionId: string;
+    input: DecisionVector;
+    Q: number;
+    /** TEST ONLY (gated by the caller): an offline misbehaviour of this party. */
+    behavior?: {
+        kind: string;
+    };
+    /** One un-echoed all-to-all round (errors while parsing a peer's message abort naming that peer). */
+    exchange: <T>(rd: string, mine: (peer: number) => unknown, parse: (p: number, raw: unknown) => T) => Promise<Map<number, T>>;
+    crashIf: (rd: string) => void;
+    bad: (p: number, what: string) => never;
+    arr: (p: number, raw: unknown, len: number) => bigint[];
+}
+export declare function runOfflineNet(a: OfflineNetArgs): Promise<Prep>;