@atlasauth/pca-mpc 0.3.0 → 0.4.0

package/dist/net/ot-net.js

@@ -0,0 +1,219 @@
+"use strict";
+/**
+ * Pairwise base oblivious transfer OVER THE NETWORK (research prototype), running the WASM-backed
+ * primitives on two separate hosts:
+ *   - 'ec'  : the malicious-secure Chou-Orlandi-style base OT on Ed25519 (`@atlasauth/pca-mpc-wasm`,
+ *             curve25519-dalek constant-time scalar multiplication), with Schnorr proof of knowledge and
+ *             subgroup validation of every received point.
+ *   - 'lwe' : the post-quantum ENDEMIC OT of Masny-Rindal over Module-LWE (`@atlasauth/pca-mpc-lwe-ot-wasm`,
+ *             audited pqc_kyber K-PKE).
+ *
+ * This is a FUNCTIONAL-CORRECTNESS demonstration: after the protocol the receiver reveals its choice bits
+ * and a hash of each received pad (a demo-only step, NOT part of the OT) so the sender can check that the
+ * pad the receiver got equals the sender's pad at the receiver's choice, over a real network.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hexBig = exports.J = exports.ptJ = exports.unb64 = exports.b64 = void 0;
+exports.jPt = jPt;
+exports.netBinding = netBinding;
+exports.runOtSender = runOtSender;
+exports.runOtReceiver = runOtReceiver;
+const node_crypto_1 = require("node:crypto");
+const ot_1 = require("../ot");
+const ec_1 = require("../ec");
+const endemic_ot_1 = require("../endemic-ot");
+const csprng_1 = require("../csprng");
+const wire_1 = require("./wire");
+const sha = (...p) => {
+    const h = (0, node_crypto_1.createHash)('sha256');
+    for (const x of p)
+        h.update(x);
+    return h.digest('hex');
+};
+const b64 = (u) => Buffer.from(u).toString('base64');
+exports.b64 = b64;
+/** @internal exported for the canonical-encoding regression test. Strict: re-encoding must reproduce `s` (no trailing-bit / padding aliases). */
+const unb64 = (s, len) => {
+    if (typeof s !== 'string' || !/^[A-Za-z0-9+/]*={0,2}$/.test(s))
+        throw new Error('bad base64');
+    const b = Buffer.from(s, 'base64');
+    if (b.toString('base64') !== s)
+        throw new Error('non-canonical base64');
+    if (len !== undefined && b.length !== len)
+        throw new Error('bad length');
+    return new Uint8Array(b);
+};
+exports.unb64 = unb64;
+const ptJ = (p) => {
+    const a = (0, ec_1.toAffine)(p);
+    return { x: (0, wire_1.hx)(a.x), y: (0, wire_1.hx)(a.y) };
+};
+exports.ptJ = ptJ;
+const FQ = ec_1.Q;
+const J = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+exports.J = J;
+/** @internal exported for the canonical-encoding regression test. Canonical lowercase hex, no leading zeros (matches `hx`). */
+const hexBig = (s) => {
+    if (typeof s !== 'string' || !/^(0|[1-9a-f][0-9a-f]{0,63})$/.test(s))
+        throw new Error('bad field element');
+    const v = BigInt('0x' + s);
+    if (v >= FQ)
+        throw new Error('non-canonical field element');
+    return v;
+};
+exports.hexBig = hexBig;
+function jPt(v) {
+    if (!(0, exports.J)(v))
+        throw new Error('bad point');
+    const x = (0, exports.hexBig)(v.x);
+    const y = (0, exports.hexBig)(v.y);
+    const p = { X: x, Y: y, Z: 1n, T: (0, ec_1.modFq)(x * y) };
+    (0, ec_1.assertInSubgroup)(p, 'received point');
+    return p;
+}
+/** Wrap peer-supplied data parsing so any failure aborts naming the peer. */
+function parsing(mesh, peer, rd, f) {
+    try {
+        return f();
+    }
+    catch (e) {
+        const ne = new wire_1.NetAbort('malformed', peer, mesh.selfId, `round '${rd}': ${e.message}`);
+        mesh.fail(ne);
+        throw ne;
+    }
+}
+/** Binding of a base OT on this mesh: session (hashed to a fixed length), who sends, who receives, which round. */
+function netBinding(mesh, senderIndex, receiverIndex, round) {
+    const sid = (0, node_crypto_1.createHash)('sha256').update('atlas-pca-mpc/net-session/v2').update(mesh.sessionId).digest();
+    return { sessionId: new Uint8Array(sid), senderIndex, receiverIndex, round };
+}
+async function runOtSender(mesh, peer, kind, count) {
+    const t0 = performance.now();
+    const rng = (0, csprng_1.secureOtRandom)();
+    let senderPads;
+    if (kind === 'ec') {
+        const binding = netBinding(mesh, mesh.selfId, peer, 'ot-ec');
+        const setup = (0, ot_1.malBaseOtSenderSetup)(rng, binding);
+        mesh.send(peer, 'ot-S', { S: (0, exports.ptJ)(setup.S), U: (0, exports.ptJ)(setup.proof.U), z: (0, wire_1.hx)(setup.proof.z) });
+        const rRaw = (await mesh.recv(peer, 'ot-R'));
+        const R = parsing(mesh, peer, 'ot-R', () => {
+            if (!Array.isArray(rRaw) || rRaw.length !== count)
+                throw new Error('bad R array');
+            return rRaw.map(jPt);
+        });
+        try {
+            senderPads = (0, ot_1.malBaseOtSenderDerive)(setup.y, setup.T, R, setup.S, binding);
+        }
+        catch (e) {
+            const ne = new wire_1.NetAbort('malformed', peer, mesh.selfId, e.message);
+            mesh.fail(ne);
+            throw ne;
+        }
+    }
+    else {
+        const m = (await mesh.recv(peer, 'ot-recv'));
+        const msg = parsing(mesh, peer, 'ot-recv', () => {
+            if (!(0, exports.J)(m) || !Array.isArray(m.points) || !Array.isArray(m.rhos) || m.points.length !== count || m.rhos.length !== count) {
+                throw new Error('bad receiver message');
+            }
+            return {
+                rn: (0, exports.unb64)(m.rn, 32),
+                points: m.points.map((pp) => {
+                    if (!Array.isArray(pp) || pp.length !== 2)
+                        throw new Error('bad point pair');
+                    return [(0, exports.unb64)(pp[0]), (0, exports.unb64)(pp[1])];
+                }),
+                rhos: m.rhos.map((r) => (0, exports.unb64)(r, 32)),
+            };
+        });
+        let sm;
+        try {
+            sm = (0, endemic_ot_1.endemicLweSendRandom)(msg, rng);
+        }
+        catch (e) {
+            const ne = new wire_1.NetAbort('malformed', peer, mesh.selfId, `lwe sender: ${e.message}`);
+            mesh.fail(ne);
+            throw ne;
+        }
+        senderPads = sm.senderPads;
+        mesh.send(peer, 'ot-ct', sm.ciphertexts.map(([a, b]) => [(0, exports.b64)(a), (0, exports.b64)(b)]));
+    }
+    // demo-only verification: the receiver reveals choices + pad hashes
+    const v = (await mesh.recv(peer, 'ot-verify'));
+    const ok = parsing(mesh, peer, 'ot-verify', () => {
+        if (!(0, exports.J)(v) || !Array.isArray(v.choices) || !Array.isArray(v.padHashes) || v.choices.length !== count || v.padHashes.length !== count) {
+            throw new Error('bad verify message');
+        }
+        return v.choices.every((c, i) => (c === 0 || c === 1) && sha(senderPads[i][c]) === v.padHashes[i]);
+    });
+    mesh.send(peer, 'ot-done', { matched: ok });
+    await mesh.finish();
+    return {
+        kind,
+        role: 'sender',
+        count,
+        ms: performance.now() - t0,
+        wasmCurveActive: (0, ec_1.isWasmCurveActive)(),
+        matched: ok,
+        padDigest: sha(...senderPads.flatMap(([a, b]) => [a, b])),
+    };
+}
+async function runOtReceiver(mesh, peer, kind, count) {
+    const t0 = performance.now();
+    const rng = (0, csprng_1.secureOtRandom)();
+    const choices = Array.from({ length: count }, () => rng.bytes(1)[0] & 1);
+    let recvPads;
+    if (kind === 'ec') {
+        const sRaw = (await mesh.recv(peer, 'ot-S'));
+        const { S, proof } = parsing(mesh, peer, 'ot-S', () => {
+            if (!(0, exports.J)(sRaw))
+                throw new Error('bad S message');
+            const proof = { U: jPt(sRaw.U), z: (0, exports.hexBig)(sRaw.z) };
+            return { S: jPt(sRaw.S), proof };
+        });
+        let res;
+        try {
+            res = (0, ot_1.malBaseOtReceiverRespond)(S, proof, choices, rng, netBinding(mesh, peer, mesh.selfId, 'ot-ec'));
+        }
+        catch (e) {
+            const ne = new wire_1.NetAbort(e instanceof ot_1.BaseOtAbort ? 'commitment' : 'malformed', peer, mesh.selfId, e.message);
+            mesh.fail(ne);
+            throw ne;
+        }
+        recvPads = res.recvPads;
+        mesh.send(peer, 'ot-R', res.R.map(exports.ptJ));
+    }
+    else {
+        const { message, state } = (0, endemic_ot_1.endemicLweReceive)(choices, rng);
+        mesh.send(peer, 'ot-recv', {
+            rn: (0, exports.b64)(message.rn),
+            points: message.points.map(([a, b]) => [(0, exports.b64)(a), (0, exports.b64)(b)]),
+            rhos: message.rhos.map(exports.b64),
+        });
+        const ctRaw = (await mesh.recv(peer, 'ot-ct'));
+        const ciphertexts = parsing(mesh, peer, 'ot-ct', () => {
+            if (!Array.isArray(ctRaw) || ctRaw.length !== count)
+                throw new Error('bad ciphertext array');
+            return ctRaw.map((pp) => {
+                if (!Array.isArray(pp) || pp.length !== 2)
+                    throw new Error('bad ct pair');
+                return [(0, exports.unb64)(pp[0]), (0, exports.unb64)(pp[1])];
+            });
+        });
+        recvPads = parsing(mesh, peer, 'ot-ct', () => (0, endemic_ot_1.endemicLweRecoverRandom)(state, { ciphertexts, senderPads: [] }));
+    }
+    mesh.send(peer, 'ot-verify', { choices, padHashes: recvPads.map((p) => sha(p)) });
+    const d = (await mesh.recv(peer, 'ot-done'));
+    const matched = (0, exports.J)(d) && d.matched === true;
+    await mesh.finish();
+    return {
+        kind,
+        role: 'receiver',
+        count,
+        ms: performance.now() - t0,
+        wasmCurveActive: (0, ec_1.isWasmCurveActive)(),
+        matched,
+        padDigest: sha(...recvPads),
+    };
+}
+//# sourceMappingURL=ot-net.js.map

package/dist/net/ot-net.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ot-net.js","sourceRoot":"","sources":["../../src/net/ot-net.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAwDH,kBAOC;AAcD,gCAGC;AAED,kCAiEC;AAED,sCAoDC;AAvMD,6CAAyC;AACzC,8BAMe;AACf,8BAA+G;AAC/G,8CAAiG;AACjG,sCAA2C;AAC3C,iCAAsC;AAgBtC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAe,EAAU,EAAE;IACzC,MAAM,CAAC,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC,CAAC;AACK,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAAnE,QAAA,GAAG,OAAgE;AAChF,iJAAiJ;AAC1I,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,GAAY,EAAc,EAAE;IAC5D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9F,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxE,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IACzE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC;AANW,QAAA,KAAK,SAMhB;AACK,MAAM,GAAG,GAAG,CAAC,CAAQ,EAA4B,EAAE;IACxD,MAAM,CAAC,GAAG,IAAA,aAAQ,EAAC,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,EAAE,IAAA,SAAE,EAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,SAAE,EAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC,CAAC;AAHW,QAAA,GAAG,OAGd;AACF,MAAM,EAAE,GAAG,MAAC,CAAC;AACN,MAAM,CAAC,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAA3G,QAAA,CAAC,KAA0G;AACxH,+HAA+H;AACxH,MAAM,MAAM,GAAG,CAAC,CAAU,EAAU,EAAE;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC3G,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AALW,QAAA,MAAM,UAKjB;AACF,SAAgB,GAAG,CAAC,CAAU;IAC5B,IAAI,CAAC,IAAA,SAAC,EAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,CAAC,GAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAA,UAAK,EAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACxD,IAAA,qBAAgB,EAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAI,IAAU,EAAE,IAAY,EAAE,EAAU,EAAE,CAAU;IAClE,IAAI,CAAC;QACH,OAAO,CAAC,EAAE,CAAC;IACb,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,IAAI,eAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,MAAM,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,SAAgB,UAAU,CAAC,IAAU,EAAE,WAAmB,EAAE,aAAqB,EAAE,KAAa;IAC9F,MAAM,GAAG,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;IACxG,OAAO,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC/E,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,IAAU,EAAE,IAAY,EAAE,IAAY,EAAE,KAAa;IACrF,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAA,uBAAc,GAAE,CAAC;IAC7B,IAAI,UAA2C,CAAC;IAChD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAA,yBAAoB,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,IAAA,WAAG,EAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,WAAG,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,SAAE,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACxD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;YACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,UAAU,GAAG,IAAA,0BAAqB,EAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,eAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAY,CAAC;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC9C,IAAI,CAAC,IAAA,SAAC,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACxH,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAA,aAAK,EAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;gBACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAW,EAAE,EAAE;oBACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBAC7E,OAAO,CAAC,IAAA,aAAK,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAA,aAAK,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAA6B,CAAC;gBAClE,CAAC,CAAC;gBACF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,IAAA,aAAK,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC;aAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,IAAA,iCAAoB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,eAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,eAAgB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,MAAM,EAAE,CAAC;QACX,CAAC;QACD,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,WAAG,EAAC,CAAC,CAAC,EAAE,IAAA,WAAG,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,oEAAoE;IACpE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAY,CAAC;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;QAC/C,IAAI,CAAC,IAAA,SAAC,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACpI,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAU,CAAC,CAAC,KAAM,CAAC,CAAC,SAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/I,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACpB,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,EAAE,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;QAC1B,eAAe,EAAE,IAAA,sBAAiB,GAAE;QACpC,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;KAC1D,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,IAAU,EAAE,IAAY,EAAE,IAAY,EAAE,KAAa;IACvF,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAA,uBAAc,GAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,QAAsB,CAAC;IAC3B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACxD,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;YACpD,IAAI,CAAC,IAAA,SAAC,EAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAiB,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,cAAM,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,6BAAwB,EAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACvG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,eAAQ,CAAC,CAAC,YAAY,gBAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;YACxH,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,MAAM,EAAE,CAAC;QACX,CAAC;QACD,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAA,8BAAiB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE;YACzB,EAAE,EAAE,IAAA,WAAG,EAAC,OAAO,CAAC,EAAE,CAAC;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,WAAG,EAAC,CAAC,CAAC,EAAE,IAAA,WAAG,EAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAG,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE;YACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC7F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAW,EAAE,EAAE;gBAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;gBAC1E,OAAO,CAAC,IAAA,aAAK,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAA,aAAK,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAA6B,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAA,oCAAuB,EAAC,KAAK,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAY,CAAC;IACxD,MAAM,OAAO,GAAG,IAAA,SAAC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC;IAC3C,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACpB,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,UAAU;QAChB,KAAK;QACL,EAAE,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;QAC1B,eAAe,EAAE,IAAA,sBAAiB,GAAE;QACpC,OAAO;QACP,SAAS,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC;KAC5B,CAAC;AACJ,CAAC"}

package/dist/net/pa.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Pairwise-authenticated shares (BDOZ-style information-theoretic MACs on each party's OWN share).
+ *
+ * This is what makes an abort IDENTIFIABLE in the trusted-dealer mode. A share `x_i` held by party `i` carries,
+ * for every other party `j`, a tag `T_ij` that only `i` holds and a key `K_ij` that only `j` holds, with
+ *
+ *     T_ij = K_ij + Δ_j · x_i      (Δ_j: party j's secret verification key, one per verifier)
+ *
+ * When `i` opens `x_i`, it sends the tag `T_ij` to each verifier `j`, who checks the relation locally. A party
+ * that lies about its share (or its tag) passes with probability ≤ 1/p per verifier, so an honest verifier that
+ * sees the relation fail KNOWS the sender misbehaved (an honest sender's pair is always consistent): first-hand,
+ * attributable evidence, with no help from anyone else.
+ *
+ * Everything is linear, so tags and keys follow the local linear operations of the SPDZ layer for free:
+ *   add / sub / neg / scale by a public constant: apply the same operation to x, every tag and every key;
+ *   add a PUBLIC constant c to party 0's share: party 0 changes only x; every other party j re-keys
+ *   K_0j <- K_0j - Δ_j·c  (it holds Δ_j), which restores T_0j = K_0j + Δ_j·(x_0 + c).
+ *
+ * Untagged mode (no trusted dealer) uses the same type with empty `tag`/`key` arrays; all operations then
+ * reduce to plain share arithmetic.
+ */
+/** A pairwise-authenticated field share. `tag[j]`: my tag for verifier j; `key[j]`: my key for verifying j's share. */
+export interface PA {
+    x: bigint;
+    tag: bigint[];
+    key: bigint[];
+}
+/** One authenticated value: its value share and one MAC share per global key, each pairwise-authenticated. */
+export interface AW {
+    v: PA;
+    m: PA[];
+}
+export interface PaEnv {
+    id: number;
+    n: number;
+    /** My verification key Δ_id (0n and unused when untagged). */
+    delta: bigint;
+    tagged: boolean;
+}
+export declare const paAdd: (a: PA, b: PA) => PA;
+export declare const paSub: (a: PA, b: PA) => PA;
+export declare const paNeg: (a: PA) => PA;
+export declare const paScale: (a: PA, c: bigint) => PA;
+/** Add a PUBLIC constant to party 0's share of `a` (every party applies this same call). */
+export declare function paAddPublic0(env: PaEnv, a: PA, c: bigint): PA;
+export declare const wAdd: (a: AW, b: AW) => AW;
+export declare const wSub: (a: AW, b: AW) => AW;
+export declare const wNeg: (a: AW) => AW;
+export declare const wScale: (a: AW, c: bigint) => AW;
+/**
+ * ⟦x⟧ + c for a PUBLIC c: the value share of party 0 moves by c, and EVERY party's MAC share under key l moves
+ * by α_i^(l)·c (computed from its own α share, whose pairwise tags are `alpha[l]`).
+ */
+export declare function wAddPublic(env: PaEnv, a: AW, c: bigint, alpha: PA[]): AW;
+/** Verify peer `from`'s opened share `x` with tag `tag` against my key for `from`. */
+export declare function paVerify(env: PaEnv, a: PA, from: number, x: bigint, tag: bigint): boolean;
+/** Numbers per pairwise-authenticated share on the wire (x, n-1 tags, n-1 keys; or just x when untagged). */
+export declare const paWidth: (n: number, tagged: boolean) => number;
+/** Flatten a PA for party `id`: x, then tag[j] for j != id ascending, then key[j] for j != id ascending. */
+export declare function paFlat(a: PA, id: number, n: number, tagged: boolean): bigint[];
+/** Inverse of `paFlat`: read one PA starting at `off`. */
+export declare function paParse(nums: readonly bigint[], off: number, id: number, n: number, tagged: boolean): PA;
+export declare const awWidth: (n: number, keys: number, tagged: boolean) => number;
+export declare function awFlat(a: AW, id: number, n: number, tagged: boolean): bigint[];
+export declare function awParse(nums: readonly bigint[], off: number, id: number, n: number, keys: number, tagged: boolean): AW;

package/dist/net/pa.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * Pairwise-authenticated shares (BDOZ-style information-theoretic MACs on each party's OWN share).
+ *
+ * This is what makes an abort IDENTIFIABLE in the trusted-dealer mode. A share `x_i` held by party `i` carries,
+ * for every other party `j`, a tag `T_ij` that only `i` holds and a key `K_ij` that only `j` holds, with
+ *
+ *     T_ij = K_ij + Δ_j · x_i      (Δ_j: party j's secret verification key, one per verifier)
+ *
+ * When `i` opens `x_i`, it sends the tag `T_ij` to each verifier `j`, who checks the relation locally. A party
+ * that lies about its share (or its tag) passes with probability ≤ 1/p per verifier, so an honest verifier that
+ * sees the relation fail KNOWS the sender misbehaved (an honest sender's pair is always consistent): first-hand,
+ * attributable evidence, with no help from anyone else.
+ *
+ * Everything is linear, so tags and keys follow the local linear operations of the SPDZ layer for free:
+ *   add / sub / neg / scale by a public constant: apply the same operation to x, every tag and every key;
+ *   add a PUBLIC constant c to party 0's share: party 0 changes only x; every other party j re-keys
+ *   K_0j <- K_0j - Δ_j·c  (it holds Δ_j), which restores T_0j = K_0j + Δ_j·(x_0 + c).
+ *
+ * Untagged mode (no trusted dealer) uses the same type with empty `tag`/`key` arrays; all operations then
+ * reduce to plain share arithmetic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awWidth = exports.paWidth = exports.wScale = exports.wNeg = exports.wSub = exports.wAdd = exports.paScale = exports.paNeg = exports.paSub = exports.paAdd = void 0;
+exports.paAddPublic0 = paAddPublic0;
+exports.wAddPublic = wAddPublic;
+exports.paVerify = paVerify;
+exports.paFlat = paFlat;
+exports.paParse = paParse;
+exports.awFlat = awFlat;
+exports.awParse = awParse;
+const field_1 = require("../field");
+const zip = (a, b, f) => a.map((x, i) => f(x, b[i]));
+const paAdd = (a, b) => ({ x: (0, field_1.fadd)(a.x, b.x), tag: zip(a.tag, b.tag, field_1.fadd), key: zip(a.key, b.key, field_1.fadd) });
+exports.paAdd = paAdd;
+const paSub = (a, b) => ({ x: (0, field_1.fsub)(a.x, b.x), tag: zip(a.tag, b.tag, field_1.fsub), key: zip(a.key, b.key, field_1.fsub) });
+exports.paSub = paSub;
+const paNeg = (a) => ({ x: (0, field_1.fneg)(a.x), tag: a.tag.map(field_1.fneg), key: a.key.map(field_1.fneg) });
+exports.paNeg = paNeg;
+const paScale = (a, c) => ({ x: (0, field_1.fmul)(a.x, c), tag: a.tag.map((t) => (0, field_1.fmul)(t, c)), key: a.key.map((k) => (0, field_1.fmul)(k, c)) });
+exports.paScale = paScale;
+/** Add a PUBLIC constant to party 0's share of `a` (every party applies this same call). */
+function paAddPublic0(env, a, c) {
+    if (env.id === 0)
+        return { x: (0, field_1.fadd)(a.x, c), tag: a.tag, key: a.key };
+    if (!env.tagged)
+        return a;
+    const key = a.key.slice();
+    key[0] = (0, field_1.fsub)(key[0], (0, field_1.fmul)(env.delta, c));
+    return { x: a.x, tag: a.tag, key };
+}
+const wAdd = (a, b) => ({ v: (0, exports.paAdd)(a.v, b.v), m: a.m.map((p, l) => (0, exports.paAdd)(p, b.m[l])) });
+exports.wAdd = wAdd;
+const wSub = (a, b) => ({ v: (0, exports.paSub)(a.v, b.v), m: a.m.map((p, l) => (0, exports.paSub)(p, b.m[l])) });
+exports.wSub = wSub;
+const wNeg = (a) => ({ v: (0, exports.paNeg)(a.v), m: a.m.map(exports.paNeg) });
+exports.wNeg = wNeg;
+const wScale = (a, c) => ({ v: (0, exports.paScale)(a.v, c), m: a.m.map((p) => (0, exports.paScale)(p, c)) });
+exports.wScale = wScale;
+/**
+ * ⟦x⟧ + c for a PUBLIC c: the value share of party 0 moves by c, and EVERY party's MAC share under key l moves
+ * by α_i^(l)·c (computed from its own α share, whose pairwise tags are `alpha[l]`).
+ */
+function wAddPublic(env, a, c, alpha) {
+    return {
+        v: paAddPublic0(env, a.v, c),
+        m: a.m.map((p, l) => (0, exports.paAdd)(p, (0, exports.paScale)(alpha[l], c))),
+    };
+}
+/** Verify peer `from`'s opened share `x` with tag `tag` against my key for `from`. */
+function paVerify(env, a, from, x, tag) {
+    return (0, field_1.fadd)(a.key[from], (0, field_1.fmul)(env.delta, x)) === tag;
+}
+// ---------------------------------------------------------------------------------------------- codec
+/** Numbers per pairwise-authenticated share on the wire (x, n-1 tags, n-1 keys; or just x when untagged). */
+const paWidth = (n, tagged) => (tagged ? 1 + 2 * (n - 1) : 1);
+exports.paWidth = paWidth;
+/** Flatten a PA for party `id`: x, then tag[j] for j != id ascending, then key[j] for j != id ascending. */
+function paFlat(a, id, n, tagged) {
+    const out = [a.x];
+    if (tagged) {
+        for (let j = 0; j < n; j++)
+            if (j !== id)
+                out.push(a.tag[j]);
+        for (let j = 0; j < n; j++)
+            if (j !== id)
+                out.push(a.key[j]);
+    }
+    return out;
+}
+/** Inverse of `paFlat`: read one PA starting at `off`. */
+function paParse(nums, off, id, n, tagged) {
+    const x = nums[off];
+    if (!tagged)
+        return { x, tag: [], key: [] };
+    const tag = new Array(n).fill(0n);
+    const key = new Array(n).fill(0n);
+    let o = off + 1;
+    for (let j = 0; j < n; j++)
+        if (j !== id)
+            tag[j] = nums[o++];
+    for (let j = 0; j < n; j++)
+        if (j !== id)
+            key[j] = nums[o++];
+    return { x, tag, key };
+}
+const awWidth = (n, keys, tagged) => (1 + keys) * (0, exports.paWidth)(n, tagged);
+exports.awWidth = awWidth;
+function awFlat(a, id, n, tagged) {
+    return [a.v, ...a.m].flatMap((p) => paFlat(p, id, n, tagged));
+}
+function awParse(nums, off, id, n, keys, tagged) {
+    const w = (0, exports.paWidth)(n, tagged);
+    const v = paParse(nums, off, id, n, tagged);
+    const m = Array.from({ length: keys }, (_, l) => paParse(nums, off + (1 + l) * w, id, n, tagged));
+    return { v, m };
+}
+//# sourceMappingURL=pa.js.map

package/dist/net/pa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pa.js","sourceRoot":"","sources":["../../src/net/pa.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAiCH,oCAMC;AAWD,gCAKC;AAGD,4BAEC;AAQD,wBAOC;AAGD,0BASC;AAID,wBAEC;AAED,0BAKC;AAlGD,oCAAkD;AAuBlD,MAAM,GAAG,GAAG,CAAC,CAAW,EAAE,CAAW,EAAE,CAAmC,EAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AAE/G,MAAM,KAAK,GAAG,CAAC,CAAK,EAAE,CAAK,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,YAAI,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,YAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,YAAI,CAAC,EAAE,CAAC,CAAC;AAAlH,QAAA,KAAK,SAA6G;AACxH,MAAM,KAAK,GAAG,CAAC,CAAK,EAAE,CAAK,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,YAAI,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,YAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,YAAI,CAAC,EAAE,CAAC,CAAC;AAAlH,QAAA,KAAK,SAA6G;AACxH,MAAM,KAAK,GAAG,CAAC,CAAK,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,YAAI,EAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAI,CAAC,EAAE,CAAC,CAAC;AAAtF,QAAA,KAAK,SAAiF;AAC5F,MAAM,OAAO,GAAG,CAAC,CAAK,EAAE,CAAS,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,YAAI,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,YAAI,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,YAAI,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAAhI,QAAA,OAAO,WAAyH;AAE7I,4FAA4F;AAC5F,SAAgB,YAAY,CAAC,GAAU,EAAE,CAAK,EAAE,CAAS;IACvD,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,IAAA,YAAI,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACrE,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAA,YAAI,EAAC,GAAG,CAAC,CAAC,CAAE,EAAE,IAAA,YAAI,EAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;AACrC,CAAC;AAEM,MAAM,IAAI,GAAG,CAAC,CAAK,EAAE,CAAK,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,aAAK,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAA,aAAK,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAA/F,QAAA,IAAI,QAA2F;AACrG,MAAM,IAAI,GAAG,CAAC,CAAK,EAAE,CAAK,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,aAAK,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAA,aAAK,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAA/F,QAAA,IAAI,QAA2F;AACrG,MAAM,IAAI,GAAG,CAAC,CAAK,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,aAAK,EAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAK,CAAC,EAAE,CAAC,CAAC;AAA7D,QAAA,IAAI,QAAyD;AACnE,MAAM,MAAM,GAAG,CAAC,CAAK,EAAE,CAAS,EAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAA,eAAO,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,eAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAA9F,QAAA,MAAM,UAAwF;AAE3G;;;GAGG;AACH,SAAgB,UAAU,CAAC,GAAU,EAAE,CAAK,EAAE,CAAS,EAAE,KAAW;IAClE,OAAO;QACL,CAAC,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAA,aAAK,EAAC,CAAC,EAAE,IAAA,eAAO,EAAC,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAgB,QAAQ,CAAC,GAAU,EAAE,CAAK,EAAE,IAAY,EAAE,CAAS,EAAE,GAAW;IAC9E,OAAO,IAAA,YAAI,EAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAE,EAAE,IAAA,YAAI,EAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;AACxD,CAAC;AAED,uGAAuG;AAEvG,6GAA6G;AACtG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,MAAe,EAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAAjF,QAAA,OAAO,WAA0E;AAE9F,4GAA4G;AAC5G,SAAgB,MAAM,CAAC,CAAK,EAAE,EAAU,EAAE,CAAS,EAAE,MAAe;IAClE,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,KAAK,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,KAAK,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0DAA0D;AAC1D,SAAgB,OAAO,CAAC,IAAuB,EAAE,GAAW,EAAE,EAAU,EAAE,CAAS,EAAE,MAAe;IAClG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAE,CAAC;IACrB,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,KAAK,CAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,KAAK,CAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAE,CAAC;IAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAE,CAAC;IAC9D,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACzB,CAAC;AAEM,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,IAAY,EAAE,MAAe,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAA,eAAO,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAAhG,QAAA,OAAO,WAAyF;AAE7G,SAAgB,MAAM,CAAC,CAAK,EAAE,EAAU,EAAE,CAAS,EAAE,MAAe;IAClE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,OAAO,CAAC,IAAuB,EAAE,GAAW,EAAE,EAAU,EAAE,CAAS,EAAE,IAAY,EAAE,MAAe;IAChH,MAAM,CAAC,GAAG,IAAA,eAAO,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AAClB,CAAC"}

package/dist/net/party-main.d.ts

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+/**
+ * One MPC node (a party or the dealer) as its OWN OS process, talking to the others only over the TLS
+ * mesh. Usage:  node party-main.js <config.json>      (or:  node party-main.js keygen <dir> <cn>)
+ * Prints exactly one JSON line (the result or the attributable abort) on stdout.
+ */
+import { type FrameFault } from './faults';
+import { type Behavior } from './protocol';
+import type { DecisionVector } from '../party';
+export interface NodeConfig {
+    role: 'party' | 'dealer' | 'ot-sender' | 'ot-receiver';
+    /** For the ot-* roles: which base OT and how many transfers. */
+    ot?: {
+        kind: 'ec' | 'lwe';
+        count: number;
+    };
+    id: number;
+    n: number;
+    Q?: number;
+    sessionId: string;
+    input?: DecisionVector;
+    listenHost?: string;
+    nodes: {
+        id: number;
+        host: string;
+        port: number;
+        certPath: string;
+    }[];
+    keyPath: string;
+    certPath: string;
+    recvTimeoutMs?: number;
+    connectTimeoutMs?: number;
+    /** TEST ONLY: needs `unsafeTestHooks` AND env PCA_MPC_UNSAFE_TEST_HOOKS=1, else the node refuses to start. */
+    behavior?: Behavior;
+    /** TEST ONLY: same gating as `behavior`. */
+    frameFault?: FrameFault;
+    /** Explicit opt-in for the test hooks; never set by production configs. */
+    unsafeTestHooks?: boolean;
+    dealerSeed?: string;
+    /** Which offline phase the parties run (default `trusted-dealer`). With `no-dealer` there is no dealer node. */
+    offline?: 'trusted-dealer' | 'no-dealer';
+    /** TEST ONLY (dealer role): a lying dealer, `c = a*b + keepCDelta` (decimal string); same gating as `behavior`. */
+    dealerFault?: {
+        keepCDelta?: string;
+        partnerCDelta?: Array<string | null>;
+        macFaultAtInput?: number;
+    };
+}

package/dist/net/party-main.js

@@ -0,0 +1,146 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * One MPC node (a party or the dealer) as its OWN OS process, talking to the others only over the TLS
+ * mesh. Usage:  node party-main.js <config.json>      (or:  node party-main.js keygen <dir> <cn>)
+ * Prints exactly one JSON line (the result or the attributable abort) on stdout.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = require("node:fs");
+const certs_1 = require("./certs");
+const faults_1 = require("./faults");
+const mesh_1 = require("./mesh");
+const protocol_1 = require("./protocol");
+const wire_1 = require("./wire");
+async function main() {
+    const argv = process.argv.slice(2);
+    if (argv[0] === 'keygen') {
+        const id = (0, certs_1.generateIdentity)(argv[1], argv[2] ?? 'mpc-node');
+        process.stdout.write(JSON.stringify(id) + '\n');
+        return;
+    }
+    const cfg = JSON.parse((0, node_fs_1.readFileSync)(argv[0], 'utf8'));
+    const hooksRequested = cfg.behavior !== undefined || cfg.frameFault !== undefined || cfg.dealerFault !== undefined;
+    if (hooksRequested && !(cfg.unsafeTestHooks === true && process.env.PCA_MPC_UNSAFE_TEST_HOOKS === '1')) {
+        out({
+            ok: false,
+            role: cfg.role,
+            id: cfg.id,
+            error: { kind: 'local', blamed: null, reporter: cfg.id, message: 'refusing to start: test hooks (behavior/frameFault) are not enabled in this environment' },
+        });
+        process.exitCode = 3;
+        return;
+    }
+    const nodes = cfg.nodes.map((x) => ({ id: x.id, host: x.host, port: x.port, certPem: (0, certs_1.readPem)(x.certPath) }));
+    const linkTo = cfg.role === 'dealer' ? nodes.filter((x) => x.id < cfg.n).map((x) => x.id) : undefined;
+    const mesh = new mesh_1.Mesh({
+        selfId: cfg.id,
+        nodes,
+        linkTo,
+        keyPem: (0, certs_1.readPem)(cfg.keyPath),
+        certPem: (0, certs_1.readPem)(cfg.certPath),
+        sessionId: cfg.sessionId,
+        listenHost: cfg.listenHost,
+        recvTimeoutMs: cfg.recvTimeoutMs,
+        connectTimeoutMs: cfg.connectTimeoutMs,
+        tamper: cfg.frameFault ? (0, faults_1.tamperFor)(cfg.frameFault) : undefined,
+        unsafeTestHooks: hooksRequested ? true : undefined,
+    });
+    const t0 = Date.now();
+    try {
+        await mesh.connect();
+        const connectMs = Date.now() - t0;
+        if (cfg.role === 'dealer') {
+            const df = cfg.dealerFault;
+            await (0, protocol_1.runDealer)({
+                n: cfg.n,
+                Q: cfg.Q,
+                mesh,
+                seed: cfg.dealerSeed ? BigInt(cfg.dealerSeed) : undefined,
+                macFaultAtInput: df?.macFaultAtInput,
+                fault: df
+                    ? {
+                        keepCDelta: df.keepCDelta !== undefined ? BigInt(df.keepCDelta) : undefined,
+                        partnerCDelta: df.partnerCDelta?.map((x) => (x === null ? undefined : BigInt(x))),
+                    }
+                    : undefined,
+            });
+            out({ ok: true, role: 'dealer', id: cfg.id, connectMs, links: mesh.stats(), events: mesh.events });
+        }
+        else if (cfg.role === 'ot-sender' || cfg.role === 'ot-receiver') {
+            // lazy: pulls in the WASM-backed OT stack only for these roles
+            const ot = await Promise.resolve().then(() => __importStar(require('./ot-net')));
+            const k = cfg.ot ?? { kind: 'ec', count: 128 };
+            const peer = cfg.role === 'ot-sender' ? 1 : 0;
+            const r = cfg.role === 'ot-sender' ? await ot.runOtSender(mesh, peer, k.kind, k.count) : await ot.runOtReceiver(mesh, peer, k.kind, k.count);
+            out({ ok: true, role: cfg.role, connectMs, result: r, links: mesh.stats(), events: mesh.events });
+        }
+        else {
+            const r = await (0, protocol_1.runParty)({
+                id: cfg.id,
+                n: cfg.n,
+                Q: cfg.Q,
+                input: cfg.input,
+                mesh,
+                offline: cfg.offline,
+                behavior: cfg.behavior,
+                unsafeTestHooks: hooksRequested ? true : undefined,
+                sessionId: cfg.sessionId,
+            });
+            out({ ok: true, role: 'party', connectMs, result: r, links: mesh.stats(), events: mesh.events });
+        }
+    }
+    catch (e) {
+        const ne = e instanceof wire_1.NetAbort ? e : (mesh.failed ?? new wire_1.NetAbort('local', null, cfg.id, e.message));
+        out({
+            ok: false,
+            role: cfg.role,
+            id: cfg.id,
+            error: { kind: ne.kind, blamed: ne.blamed, reporter: ne.reporter, claimedKind: ne.claimedKind, claimedBlame: ne.claimedBlame, reason: ne.reason, evidence: ne.evidence, deadlineMs: ne.deadlineMs, message: ne.message },
+            links: mesh.stats(),
+            events: mesh.events,
+        });
+        process.exitCode = 3;
+    }
+    // give sockets a moment to flush abort frames, then exit regardless of lingering handles
+    setTimeout(() => process.exit(process.exitCode ?? 0), 300).unref();
+}
+function out(o) {
+    // BigInt-safe
+    process.stdout.write(JSON.stringify(o, (_k, v) => (typeof v === 'bigint' ? v.toString() : v)) + '\n');
+}
+void main();
+//# sourceMappingURL=party-main.js.map

package/dist/net/party-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"party-main.js","sourceRoot":"","sources":["../../src/net/party-main.ts"],"names":[],"mappings":";;AACA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,qCAAuC;AACvC,mCAAoD;AACpD,qCAAsD;AACtD,iCAA6C;AAC7C,yCAAgE;AAChE,iCAAkC;AA+BlC,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAA,wBAAgB,EAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAe,CAAC;IACrE,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC;IACnH,IAAI,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC;YACF,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,yFAAyF,EAAE;SAC7J,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAe,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAA,eAAO,EAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,MAAM,IAAI,GAAG,IAAI,WAAI,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,EAAE;QACd,KAAK;QACL,MAAM;QACN,MAAM,EAAE,IAAA,eAAO,EAAC,GAAG,CAAC,OAAO,CAAC;QAC5B,OAAO,EAAE,IAAA,eAAO,EAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KACnD,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;YAC3B,MAAM,IAAA,oBAAS,EAAC;gBACd,CAAC,EAAE,GAAG,CAAC,CAAC;gBACR,CAAC,EAAE,GAAG,CAAC,CAAC;gBACR,IAAI;gBACJ,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACzD,eAAe,EAAE,EAAE,EAAE,eAAe;gBACpC,KAAK,EAAE,EAAE;oBACP,CAAC,CAAC;wBACE,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;wBAC3E,aAAa,EAAE,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;qBAClF;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClE,+DAA+D;YAC/D,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;YACpC,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC7I,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,MAAM,IAAA,mBAAQ,EAAC;gBACvB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,CAAC,EAAE,GAAG,CAAC,CAAC;gBACR,CAAC,EAAE,GAAG,CAAC,CAAC;gBACR,KAAK,EAAE,GAAG,CAAC,KAAM;gBACjB,IAAI;gBACJ,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBAClD,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,CAAC,YAAY,eAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,eAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAClH,GAAG,CAAC;YACF,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE;YACxN,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,yFAAyF;IACzF,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,cAAc;IACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,KAAK,IAAI,EAAE,CAAC"}