@blockcast/mmt-container 0.1.0 → 0.3.0-main.d9354616fdf2

package/node_modules/@blockcast/mmt-fec/src/repair-group.ts

@@ -0,0 +1,195 @@
+/**
+ * MoQ repair group ids for `iso-ssbg1-v1` FEC blocks (BLO-35597, decision D2(a)).
+ *
+ * SS_ID and SS_Start are 32-bit wire fields that wrap at 2^32 (ISO/IEC
+ * 23008-1 C.5.2, C.5.3; RFC 1982 serial arithmetic). A MoQ group id is a
+ * 62-bit unsigned integer that must never go backwards, so the repair group
+ * of an `iso-ssbg1-v1` block is the wrap-epoch-extended SS_Start:
+ *
+ *   ext(SS_Start) = (wrap_epoch << 32) | SS_Start
+ *
+ * Repair group ids are therefore sparse (one per block, at the block's first
+ * SS_ID) and strictly increasing. A receiver that lost SS_ID x in a block it
+ * has not delimited FETCHes the absolute group range of draft-ramadan-moq-fec
+ * §7.5 (`repairFetchRange`); the last group that range returns is the block
+ * containing x.
+ *
+ * A receiver establishes its wrap-epoch reference from the Group ID of a
+ * repair object it received over MoQ, from the Largest Location a
+ * TRACK_STATUS for a repair track reports, or as epoch 0 when it observed the
+ * instance from its first block (draft-ramadan-moq-fec §7.5). The first two
+ * take the epoch from a Group ID itself (`groupId >> 32`): the publisher
+ * assigns repair Group IDs and MoQ delivers them unaltered, so a delivered
+ * Group ID is the epoch reference, on the same footing as the Largest
+ * Location, not a candidate for this module to verify. Nothing a receiver
+ * holds before its first reference can check an epoch: without one,
+ * `repairGroupIdMatches` checks only the low 32 bits, and its `true` means
+ * "this object can be this block's", never "this epoch is verified". It
+ * screens out an object to discard; it does not confirm an epoch. No other
+ * value is an epoch reference: not a group id computed from a 32-bit SS_ID,
+ * and not one carried in a payload rather than as an object's MoQ Group ID.
+ *
+ * All values are bigint: 62-bit group ids exceed Number's 2^53 exact range.
+ */
+import { SERIAL32_HALF, SERIAL32_SPAN, serial32Distance } from "@blockcast/mmt-base";
+
+/** Bits of a MoQ group id above the 32-bit SS_Start: 62 - 32. */
+const WRAP_EPOCH_BITS = 30n;
+/** 2^32 as a bigint: the SS_ID wrap and the shift of the wrap epoch. */
+const SS_ID_SPAN = BigInt(SERIAL32_SPAN);
+/** Exclusive bound of the wrap epoch: 2^30. */
+const WRAP_EPOCH_SPAN = 1n << WRAP_EPOCH_BITS;
+/** Exclusive bound of a MoQ group id: 2^62. */
+const MOQ_GROUP_ID_SPAN = WRAP_EPOCH_SPAN * SS_ID_SPAN;
+
+function assertSsId(value: number, name: string): void {
+	if (!Number.isInteger(value) || value < 0 || value >= SERIAL32_SPAN) {
+		throw new RangeError(`${name} must be a uint32 SS_ID (got ${value})`);
+	}
+}
+
+function assertGroupId(value: bigint, name: string): void {
+	if (typeof value !== "bigint" || value < 0n || value >= MOQ_GROUP_ID_SPAN) {
+		throw new RangeError(`${name} must be a 62-bit MoQ group id in [0, 2^62) (got ${String(value)})`);
+	}
+}
+
+/**
+ * The MoQ repair group id of an `iso-ssbg1-v1` block: `(wrapEpoch << 32) | ssStart`.
+ *
+ * @param wrapEpoch - How many times SS_ID has wrapped before this block, in `[0, 2^30)`
+ * @param ssStart - The block's SS_Start (uint32) from its Repair FEC Payload ID
+ * @returns The 62-bit repair group id
+ * @throws RangeError unless `ssStart` is a uint32 and `wrapEpoch` a bigint in `[0, 2^30)`
+ */
+export function extSsStart(wrapEpoch: bigint, ssStart: number): bigint {
+	if (typeof wrapEpoch !== "bigint" || wrapEpoch < 0n || wrapEpoch >= WRAP_EPOCH_SPAN) {
+		throw new RangeError(`wrap epoch must be a bigint in [0, 2^30) (got ${String(wrapEpoch)})`);
+	}
+	assertSsId(ssStart, "ssStart");
+	return (wrapEpoch << 32n) | BigInt(ssStart);
+}
+
+/**
+ * Extend a 32-bit SS_ID to the 62-bit value congruent to it mod 2^32 that is
+ * nearest `reference` in RFC 1982 serial order: forward when `ssId` follows
+ * the reference's low 32 bits serially, backward when it precedes them, and
+ * `reference` itself when they are equal.
+ *
+ * @param reference - A 62-bit extended SS_ID or repair group id the receiver already holds
+ * @param ssId - The 32-bit SS_ID (or SS_Start) to extend
+ * @returns The extended 62-bit value
+ * @throws RangeError when `ssId` lies exactly 2^31 from the reference's low
+ *   32 bits (RFC 1982 leaves that pair unordered, so no direction exists), or
+ *   when the extension falls outside `[0, 2^62)`
+ */
+export function extendSsId(reference: bigint, ssId: number): bigint {
+	assertGroupId(reference, "reference");
+	assertSsId(ssId, "ssId");
+	const low = Number(reference & (SS_ID_SPAN - 1n));
+	const forward = serial32Distance(low, ssId);
+	if (forward === SERIAL32_HALF) {
+		throw new RangeError(
+			`SS_ID ${ssId} is exactly 2^31 from ${low}; RFC 1982 leaves the pair unordered`,
+		);
+	}
+	const extended = forward < SERIAL32_HALF
+		? reference + BigInt(forward)
+		: reference - BigInt(SERIAL32_SPAN - forward);
+	if (extended < 0n || extended >= MOQ_GROUP_ID_SPAN) {
+		throw new RangeError(
+			`SS_ID ${ssId} extends from ${String(reference)} to ${String(extended)}, outside [0, 2^62)`,
+		);
+	}
+	return extended;
+}
+
+/** An absolute, inclusive MoQ group range for a repair FETCH. */
+export interface RepairFetchRange {
+	/** First group of the FETCH. */
+	readonly startGroup: bigint;
+	/** Last group of the FETCH: the extended lost SS_ID. */
+	readonly endGroup: bigint;
+}
+
+/** What a lost SS_ID is extended from (draft-ramadan-moq-fec §7.5). */
+export type RepairFetchAnchor =
+	/** ext(S_prev): the extended SS_Start of the last block the receiver
+	 *  delimited that ends before the lost SS_ID. The caller vouches for that
+	 *  ordering; only a lost SS_ID at or before the block's start is
+	 *  detectable here, since the block's length is not an input. */
+	| { readonly previousBlockStart: bigint }
+	/** The reference value r of the receiver's wrap epoch, when it has
+	 *  delimited no block that ends before the lost SS_ID. */
+	| { readonly reference: bigint };
+
+/**
+ * The repair FETCH for a lost SS_ID x whose block the receiver has not
+ * delimited (draft-ramadan-moq-fec §7.5): the absolute, inclusive group range
+ *
+ *   [max(ext(S_prev) + 1, ext(x) - (K - 1)), ext(x)]
+ *
+ * or, with no S_prev, `[max(ext(x) - (K - 1), 0), ext(x)]`, where ext(x) is x
+ * extended relative to ext(S_prev), or else to the epoch reference r. Repair
+ * group ids sit at block starts and no block holds more than K source symbols,
+ * so the block containing x starts at most K - 1 SS_IDs before x and is the
+ * last group the range returns. The range is never empty.
+ *
+ * @param lostSsId - The lost 32-bit SS_ID x
+ * @param kMax - K: the instance's catalog `sourceSymbols`, the largest
+ *   SSB_length a block can have
+ * @param anchor - ext(S_prev), or the epoch reference r without one
+ * @throws RangeError when `kMax` is not a positive safe integer, when x does
+ *   not extend past `previousBlockStart`, or whenever {@link extendSsId} throws
+ */
+export function repairFetchRange(lostSsId: number, kMax: number, anchor: RepairFetchAnchor): RepairFetchRange {
+	if (!Number.isSafeInteger(kMax) || kMax <= 0) {
+		throw new RangeError(`kMax must be a positive integer (got ${kMax})`);
+	}
+	let floor: bigint;
+	let endGroup: bigint;
+	if ("previousBlockStart" in anchor) {
+		assertGroupId(anchor.previousBlockStart, "previousBlockStart");
+		floor = anchor.previousBlockStart + 1n;
+		endGroup = extendSsId(anchor.previousBlockStart, lostSsId);
+		if (endGroup < floor) {
+			throw new RangeError(
+				`lost SS_ID ${lostSsId} extends to ${String(endGroup)}, not after the previous block at ${String(anchor.previousBlockStart)}`,
+			);
+		}
+	} else {
+		floor = 0n;
+		endGroup = extendSsId(anchor.reference, lostSsId);
+	}
+	const reach = endGroup - BigInt(kMax - 1);
+	return { startGroup: reach > floor ? reach : floor, endGroup };
+}
+
+/**
+ * Whether a repair object received over MoQ may be used: its Group ID must
+ * agree with the SS_Start of its Repair FEC Payload ID, which is authoritative
+ * (draft-ramadan-moq-fec §7.5). The Group ID must equal SS_Start modulo 2^32
+ * and, once the receiver holds an epoch reference, equal ext(SS_Start)
+ * extended relative to it. A receiver discards a repair object for which this
+ * is false, leaving every block's state unchanged, and never takes its Group
+ * ID as an epoch reference. An SS_Start that cannot be extended (exactly 2^31
+ * from the reference) cannot be checked, so it does not match either.
+ *
+ * @param groupId - The repair object's MoQ Group ID
+ * @param ssStart - The SS_Start of its Repair FEC Payload ID
+ * @param reference - The receiver's epoch reference r, once it holds one
+ * @throws RangeError unless `ssStart` is a uint32 or `reference` (when given)
+ *   a 62-bit group id
+ */
+export function repairGroupIdMatches(groupId: bigint, ssStart: number, reference?: bigint): boolean {
+	assertSsId(ssStart, "ssStart");
+	if (reference !== undefined) assertGroupId(reference, "reference");
+	if (typeof groupId !== "bigint" || groupId < 0n || groupId >= MOQ_GROUP_ID_SPAN) return false;
+	if ((groupId & (SS_ID_SPAN - 1n)) !== BigInt(ssStart)) return false;
+	if (reference === undefined) return true;
+	try {
+		return extendSsId(reference, ssStart) === groupId;
+	} catch {
+		return false;
+	}
+}

package/node_modules/@blockcast/mmt-manifest-verify/dist/admission.d.ts

@@ -0,0 +1,28 @@
+import { type SourceAuthGroupClose, type SourceAuthObjectEntry } from './source-auth.js';
+export type SourceAuthAdmissionState = 'pending-entry' | 'pending-object' | 'provisional' | 'authenticated';
+export interface SourceAuthObjectAdmission {
+    groupId: bigint;
+    objectId: number;
+    recovered: boolean;
+    state: Exclude<SourceAuthAdmissionState, 'pending-object'>;
+}
+/**
+ * Bounded media/manifest rendezvous for the browser player receive path.
+ * Object digest admission is synchronous; only the group-close signature is deferred.
+ */
+export declare class SourceAuthAdmission {
+    #private;
+    constructor(options: {
+        manifestAuthenticated: boolean;
+    });
+    admitObject(input: {
+        groupId: bigint;
+        objectId: number;
+        bytes: Uint8Array;
+        recovered?: boolean;
+    }): SourceAuthObjectAdmission;
+    admitEntry(entry: SourceAuthObjectEntry): SourceAuthObjectAdmission | SourceAuthAdmissionState;
+    objectState(objectId: number): SourceAuthAdmissionState | undefined;
+    verifyClose(close: SourceAuthGroupClose, authScope: Uint8Array, publicKey: CryptoKey, subtle?: SubtleCrypto): Promise<void>;
+}
+//# sourceMappingURL=admission.d.ts.map

package/node_modules/@blockcast/mmt-manifest-verify/dist/admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.d.ts","sourceRoot":"","sources":["../src/admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,kBAAkB,CAAA;AAEzB,MAAM,MAAM,wBAAwB,GAChC,eAAe,GACf,gBAAgB,GAChB,aAAa,GACb,eAAe,CAAA;AAEnB,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,OAAO,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,CAAA;CAC3D;AAkBD;;;GAGG;AACH,qBAAa,mBAAmB;;gBASlB,OAAO,EAAE;QAAE,qBAAqB,EAAE,OAAO,CAAA;KAAE;IAIvD,WAAW,CAAC,KAAK,EAAE;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,UAAU,CAAA;QACjB,SAAS,CAAC,EAAE,OAAO,CAAA;KACpB,GAAG,yBAAyB;IA0B7B,UAAU,CAAC,KAAK,EAAE,qBAAqB,GAAG,yBAAyB,GAAG,wBAAwB;IAmB9F,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAO7D,WAAW,CACf,KAAK,EAAE,oBAAoB,EAC3B,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,SAAS,EACpB,MAAM,GAAE,YAAuC,GAC9C,OAAO,CAAC,IAAI,CAAC;CAqDjB"}

package/node_modules/@blockcast/mmt-manifest-verify/dist/admission.js

@@ -0,0 +1,128 @@
+import { sourceAuthMerkleRoot, sourceAuthObjectDigest, sourceAuthSignaturePreimage, trimRecoveredSourceAuthObject, } from './source-auth.js';
+function requireU64(name, value) {
+    if (value < 0n || value > 0xffffffffffffffffn) {
+        throw new Error(`${name} must be an unsigned 64-bit integer`);
+    }
+}
+function equalBytes(left, right) {
+    if (left.byteLength !== right.byteLength)
+        return false;
+    return left.every((value, index) => value === right[index]);
+}
+/**
+ * Bounded media/manifest rendezvous for the browser player receive path.
+ * Object digest admission is synchronous; only the group-close signature is deferred.
+ */
+export class SourceAuthAdmission {
+    #manifestAuthenticated;
+    #entries = new Map();
+    #pendingObjects = new Map();
+    #entriesAwaitingObjects = new Set();
+    #admissions = new Map();
+    #groupId = null;
+    #closed = false;
+    constructor(options) {
+        this.#manifestAuthenticated = options.manifestAuthenticated;
+    }
+    admitObject(input) {
+        this.#requireGroup(input.groupId);
+        if (this.#closed)
+            throw new Error('source-auth group is already closed');
+        if (this.#admissions.has(input.objectId) || this.#pendingObjects.has(input.objectId)) {
+            throw new Error(`duplicate source-auth object ${input.objectId}`);
+        }
+        const entry = this.#entries.get(input.objectId);
+        if (entry) {
+            this.#entriesAwaitingObjects.delete(input.objectId);
+            return this.#verifyObject(entry, input.bytes, input.recovered ?? false);
+        }
+        if (this.#pendingObjects.size >= 1) {
+            throw new Error('source-auth media exceeds one-object manifest skew');
+        }
+        this.#pendingObjects.set(input.objectId, {
+            bytes: input.bytes,
+            recovered: input.recovered ?? false,
+        });
+        return {
+            groupId: input.groupId,
+            objectId: input.objectId,
+            recovered: input.recovered ?? false,
+            state: 'pending-entry',
+        };
+    }
+    admitEntry(entry) {
+        this.#requireGroup(entry.groupId);
+        if (this.#closed)
+            throw new Error('source-auth group is already closed');
+        if (this.#entries.has(entry.objectId)) {
+            throw new Error(`duplicate source-auth manifest entry ${entry.objectId}`);
+        }
+        const pending = this.#pendingObjects.get(entry.objectId);
+        if (!pending && this.#entriesAwaitingObjects.size >= 1) {
+            throw new Error('source-auth manifest exceeds one-object media skew');
+        }
+        this.#entries.set(entry.objectId, entry);
+        if (!pending) {
+            this.#entriesAwaitingObjects.add(entry.objectId);
+            return 'pending-object';
+        }
+        this.#pendingObjects.delete(entry.objectId);
+        return this.#verifyObject(entry, pending.bytes, pending.recovered);
+    }
+    objectState(objectId) {
+        if (this.#pendingObjects.has(objectId))
+            return 'pending-entry';
+        if (this.#entriesAwaitingObjects.has(objectId))
+            return 'pending-object';
+        if (this.#closed && this.#admissions.has(objectId))
+            return 'authenticated';
+        return this.#admissions.get(objectId)?.state;
+    }
+    async verifyClose(close, authScope, publicKey, subtle = globalThis.crypto.subtle) {
+        this.#requireGroup(close.groupId);
+        if (this.#closed)
+            throw new Error('source-auth group is already closed');
+        if (this.#pendingObjects.size !== 0 || this.#entriesAwaitingObjects.size !== 0) {
+            throw new Error('source-auth group closed with unmatched objects or entries');
+        }
+        if (close.objectCount !== this.#entries.size || this.#admissions.size !== this.#entries.size) {
+            throw new Error('source-auth group close object count mismatch');
+        }
+        const root = sourceAuthMerkleRoot([...this.#entries.values()]);
+        if (!equalBytes(root, close.root))
+            throw new Error('source-auth group root mismatch');
+        const verified = await subtle.verify('Ed25519', publicKey, new Uint8Array(close.signature).buffer, new Uint8Array(sourceAuthSignaturePreimage(authScope, close.groupId, close.objectCount, root)).buffer);
+        if (!verified)
+            throw new Error('source-auth group close signature failed');
+        for (const admission of this.#admissions.values())
+            admission.state = 'authenticated';
+        this.#closed = true;
+    }
+    #requireGroup(groupId) {
+        requireU64('groupId', groupId);
+        if (this.#groupId === null)
+            this.#groupId = groupId;
+        else if (this.#groupId !== groupId)
+            throw new Error('source-auth group identity mismatch');
+    }
+    #verifyObject(entry, bytes, recovered) {
+        const authenticated = recovered
+            ? trimRecoveredSourceAuthObject(bytes, entry.trueLength)
+            : bytes;
+        if (!recovered && bytes.byteLength !== entry.trueLength) {
+            throw new Error(`direct source-auth object length mismatch for ${entry.objectId}`);
+        }
+        if (!equalBytes(sourceAuthObjectDigest(authenticated), entry.digest)) {
+            throw new Error(`source-auth object digest mismatch for ${entry.objectId}`);
+        }
+        const admission = {
+            groupId: entry.groupId,
+            objectId: entry.objectId,
+            recovered,
+            state: this.#manifestAuthenticated ? 'authenticated' : 'provisional',
+        };
+        this.#admissions.set(entry.objectId, admission);
+        return admission;
+    }
+}
+//# sourceMappingURL=admission.js.map

package/node_modules/@blockcast/mmt-manifest-verify/dist/admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.js","sourceRoot":"","sources":["../src/admission.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,6BAA6B,GAG9B,MAAM,kBAAkB,CAAA;AAoBzB,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,mBAAsB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB;IACrD,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACrB,sBAAsB,CAAS;IAC/B,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAA;IACnD,eAAe,GAAG,IAAI,GAAG,EAAmC,CAAA;IAC5D,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC3C,WAAW,GAAG,IAAI,GAAG,EAAqC,CAAA;IACnE,QAAQ,GAAkB,IAAI,CAAA;IAC9B,OAAO,GAAG,KAAK,CAAA;IAEf,YAAY,OAA2C;QACrD,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAA;IAC7D,CAAC;IAED,WAAW,CAAC,KAKX;QACC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACnD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;QACzE,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE;YACvC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;SACpC,CAAC,CAAA;QACF,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;YACnC,KAAK,EAAE,eAAe;SACvB,CAAA;IACH,CAAC;IAED,UAAU,CAAC,KAA4B;QACrC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACxD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAChD,OAAO,gBAAgB,CAAA;QACzB,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC3C,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,CAAC;IAED,WAAW,CAAC,QAAgB;QAC1B,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,eAAe,CAAA;QAC9D,IAAI,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,gBAAgB,CAAA;QACvE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,eAAe,CAAA;QAC1E,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAA2B,EAC3B,SAAqB,EACrB,SAAoB,EACpB,SAAuB,UAAU,CAAC,MAAM,CAAC,MAAM;QAE/C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACrF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAClC,SAAS,EACT,SAAS,EACT,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,EACtC,IAAI,UAAU,CACZ,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAC/E,CAAC,MAAM,CACT,CAAA;QACD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC1E,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE;YAAE,SAAS,CAAC,KAAK,GAAG,eAAe,CAAA;QACpF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;IACrB,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;aAC9C,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC5F,CAAC;IAED,aAAa,CACX,KAA4B,EAC5B,KAAiB,EACjB,SAAkB;QAElB,MAAM,aAAa,GAAG,SAAS;YAC7B,CAAC,CAAC,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACxD,CAAC,CAAC,KAAK,CAAA;QACT,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QACpF,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC7E,CAAC;QACD,MAAM,SAAS,GAA8B;YAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS;YACT,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa;SACrE,CAAA;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QAC/C,OAAO,SAAS,CAAA;IAClB,CAAC;CACF"}

package/node_modules/@blockcast/mmt-manifest-verify/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from './source-auth.js';
+export * from './admission.js';
+export * from './verifier.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@blockcast/mmt-manifest-verify/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA"}

package/node_modules/@blockcast/mmt-manifest-verify/dist/index.js

@@ -0,0 +1,4 @@
+export * from './source-auth.js';
+export * from './admission.js';
+export * from './verifier.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@blockcast/mmt-manifest-verify/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA"}

package/node_modules/@blockcast/mmt-manifest-verify/dist/source-auth.d.ts

@@ -0,0 +1,37 @@
+export declare const SOURCE_AUTH_MANIFEST_VERSION = 1;
+export declare const SOURCE_AUTH_OBJECT_ENTRY_FRAME = 1;
+export declare const SOURCE_AUTH_GROUP_CLOSE_FRAME = 2;
+export declare const SOURCE_AUTH_OBJECT_ENTRY_LENGTH = 52;
+export declare const SOURCE_AUTH_GROUP_CLOSE_LENGTH = 112;
+export declare const SOURCE_AUTH_MAX_OBJECTS_PER_GROUP = 4096;
+export declare const SOURCE_AUTH_MAX_TRUE_LENGTH: number;
+export declare const SOURCE_AUTH_SCOPE_LENGTH = 32;
+export interface SourceAuthObjectEntry {
+    kind: 'object';
+    groupId: bigint;
+    objectId: number;
+    trueLength: number;
+    digest: Uint8Array;
+}
+export interface SourceAuthGroupClose {
+    kind: 'close';
+    groupId: bigint;
+    objectCount: number;
+    root: Uint8Array;
+    signature: Uint8Array;
+}
+export type SourceAuthManifestFrame = SourceAuthObjectEntry | SourceAuthGroupClose;
+export declare function sourceAuthObjectDigest(object: Uint8Array): Uint8Array;
+export declare function sourceAuthLeafHash(groupId: bigint, objectId: number, digest: Uint8Array, trueLength: number): Uint8Array;
+export declare function sourceAuthMerkleRoot(entries: readonly {
+    groupId: bigint;
+    objectId: number;
+    digest: Uint8Array;
+    trueLength: number;
+}[]): Uint8Array;
+export declare function trimRecoveredSourceAuthObject(recoveredSymbol: Uint8Array, trueLength: number): Uint8Array;
+export declare function encodeSourceAuthObjectEntry(entry: Omit<SourceAuthObjectEntry, 'kind'>): Uint8Array;
+export declare function encodeSourceAuthGroupClose(close: Omit<SourceAuthGroupClose, 'kind'>): Uint8Array;
+export declare function sourceAuthSignaturePreimage(authScope: Uint8Array, groupId: bigint, objectCount: number, root: Uint8Array): Uint8Array;
+export declare function decodeSourceAuthManifestFrame(frame: Uint8Array): SourceAuthManifestFrame;
+//# sourceMappingURL=source-auth.d.ts.map

package/node_modules/@blockcast/mmt-manifest-verify/dist/source-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-auth.d.ts","sourceRoot":"","sources":["../src/source-auth.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,4BAA4B,IAAI,CAAA;AAC7C,eAAO,MAAM,8BAA8B,IAAI,CAAA;AAC/C,eAAO,MAAM,6BAA6B,IAAI,CAAA;AAC9C,eAAO,MAAM,+BAA+B,KAAK,CAAA;AACjD,eAAO,MAAM,8BAA8B,MAAM,CAAA;AACjD,eAAO,MAAM,iCAAiC,OAAO,CAAA;AACrD,eAAO,MAAM,2BAA2B,QAAmB,CAAA;AAC3D,eAAO,MAAM,wBAAwB,KAAK,CAAA;AAI1C,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,UAAU,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,UAAU,CAAA;IAChB,SAAS,EAAE,UAAU,CAAA;CACtB;AAED,MAAM,MAAM,uBAAuB,GAAG,qBAAqB,GAAG,oBAAoB,CAAA;AA2BlF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAErE;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,GACjB,UAAU,CAYZ;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,SAAS;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,UAAU,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACnB,EAAE,GACF,UAAU,CA4BZ;AAED,wBAAgB,6BAA6B,CAC3C,eAAe,EAAE,UAAU,EAC3B,UAAU,EAAE,MAAM,GACjB,UAAU,CAMZ;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,GACzC,UAAU,CAcZ;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,GACxC,UAAU,CAiBZ;AAED,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,GACf,UAAU,CAgBZ;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,UAAU,GAAG,uBAAuB,CAwCxF"}

package/node_modules/@blockcast/mmt-manifest-verify/dist/source-auth.js

@@ -0,0 +1,179 @@
+import { blake3 } from '@noble/hashes/blake3';
+export const SOURCE_AUTH_MANIFEST_VERSION = 1;
+export const SOURCE_AUTH_OBJECT_ENTRY_FRAME = 1;
+export const SOURCE_AUTH_GROUP_CLOSE_FRAME = 2;
+export const SOURCE_AUTH_OBJECT_ENTRY_LENGTH = 52;
+export const SOURCE_AUTH_GROUP_CLOSE_LENGTH = 112;
+export const SOURCE_AUTH_MAX_OBJECTS_PER_GROUP = 4096;
+export const SOURCE_AUTH_MAX_TRUE_LENGTH = 16 * 1024 * 1024;
+export const SOURCE_AUTH_SCOPE_LENGTH = 32;
+const SIGNATURE_DOMAIN = new TextEncoder().encode('blockcast-mmt-root-v1\0\0\0');
+function requireBytes(name, value, length) {
+    if (value.byteLength !== length) {
+        throw new Error(`${name} must be ${length} bytes, got ${value.byteLength}`);
+    }
+}
+function requireU32(name, value) {
+    if (!Number.isInteger(value) || value < 0 || value > 0xffff_ffff) {
+        throw new Error(`${name} must be an unsigned 32-bit integer`);
+    }
+}
+function requireU64(name, value) {
+    if (value < 0n || value > 0xffffffffffffffffn) {
+        throw new Error(`${name} must be an unsigned 64-bit integer`);
+    }
+}
+function requireTrueLength(value) {
+    requireU32('trueLength', value);
+    if (value > SOURCE_AUTH_MAX_TRUE_LENGTH) {
+        throw new Error(`trueLength exceeds the ${SOURCE_AUTH_MAX_TRUE_LENGTH}-byte profile maximum`);
+    }
+}
+export function sourceAuthObjectDigest(object) {
+    return blake3(object);
+}
+export function sourceAuthLeafHash(groupId, objectId, digest, trueLength) {
+    requireU64('groupId', groupId);
+    requireU32('objectId', objectId);
+    requireBytes('digest', digest, 32);
+    requireTrueLength(trueLength);
+    const preimage = new Uint8Array(49);
+    const view = new DataView(preimage.buffer);
+    view.setBigUint64(1, groupId);
+    view.setUint32(9, objectId);
+    preimage.set(digest, 13);
+    view.setUint32(45, trueLength);
+    return blake3(preimage);
+}
+export function sourceAuthMerkleRoot(entries) {
+    if (entries.length === 0)
+        throw new Error('Merkle tree requires at least one object');
+    if (entries.length > SOURCE_AUTH_MAX_OBJECTS_PER_GROUP) {
+        throw new Error(`group exceeds ${SOURCE_AUTH_MAX_OBJECTS_PER_GROUP} objects`);
+    }
+    const groupId = entries[0].groupId;
+    const objectIds = new Set();
+    const ordered = [...entries].sort((left, right) => left.objectId - right.objectId);
+    let level = ordered.map((entry) => {
+        if (entry.groupId !== groupId)
+            throw new Error('Merkle entries must belong to one group');
+        if (objectIds.has(entry.objectId))
+            throw new Error(`duplicate objectId ${entry.objectId}`);
+        objectIds.add(entry.objectId);
+        return sourceAuthLeafHash(entry.groupId, entry.objectId, entry.digest, entry.trueLength);
+    });
+    while (level.length > 1) {
+        const parents = [];
+        for (let index = 0; index < level.length; index += 2) {
+            const left = level[index];
+            const right = level[index + 1] ?? left;
+            const preimage = new Uint8Array(65);
+            preimage[0] = 1;
+            preimage.set(left, 1);
+            preimage.set(right, 33);
+            parents.push(blake3(preimage));
+        }
+        level = parents;
+    }
+    return level[0];
+}
+export function trimRecoveredSourceAuthObject(recoveredSymbol, trueLength) {
+    requireTrueLength(trueLength);
+    if (trueLength > recoveredSymbol.byteLength) {
+        throw new Error(`true length ${trueLength} exceeds recovered object size ${recoveredSymbol.byteLength}`);
+    }
+    return recoveredSymbol.subarray(0, trueLength);
+}
+export function encodeSourceAuthObjectEntry(entry) {
+    requireU32('objectId', entry.objectId);
+    requireTrueLength(entry.trueLength);
+    requireU64('groupId', entry.groupId);
+    requireBytes('digest', entry.digest, 32);
+    const frame = new Uint8Array(SOURCE_AUTH_OBJECT_ENTRY_LENGTH);
+    const view = new DataView(frame.buffer);
+    frame[0] = SOURCE_AUTH_OBJECT_ENTRY_FRAME;
+    frame[1] = SOURCE_AUTH_MANIFEST_VERSION;
+    view.setBigUint64(4, entry.groupId);
+    view.setUint32(12, entry.objectId);
+    view.setUint32(16, entry.trueLength);
+    frame.set(entry.digest, 20);
+    return frame;
+}
+export function encodeSourceAuthGroupClose(close) {
+    requireU32('objectCount', close.objectCount);
+    if (close.objectCount === 0 || close.objectCount > SOURCE_AUTH_MAX_OBJECTS_PER_GROUP) {
+        throw new Error(`objectCount must be between 1 and ${SOURCE_AUTH_MAX_OBJECTS_PER_GROUP}`);
+    }
+    requireU64('groupId', close.groupId);
+    requireBytes('root', close.root, 32);
+    requireBytes('signature', close.signature, 64);
+    const frame = new Uint8Array(SOURCE_AUTH_GROUP_CLOSE_LENGTH);
+    const view = new DataView(frame.buffer);
+    frame[0] = SOURCE_AUTH_GROUP_CLOSE_FRAME;
+    frame[1] = SOURCE_AUTH_MANIFEST_VERSION;
+    view.setBigUint64(4, close.groupId);
+    view.setUint32(12, close.objectCount);
+    frame.set(close.root, 16);
+    frame.set(close.signature, 48);
+    return frame;
+}
+export function sourceAuthSignaturePreimage(authScope, groupId, objectCount, root) {
+    requireU32('objectCount', objectCount);
+    if (objectCount === 0 || objectCount > SOURCE_AUTH_MAX_OBJECTS_PER_GROUP) {
+        throw new Error(`objectCount must be between 1 and ${SOURCE_AUTH_MAX_OBJECTS_PER_GROUP}`);
+    }
+    requireU64('groupId', groupId);
+    requireBytes('authScope', authScope, SOURCE_AUTH_SCOPE_LENGTH);
+    requireBytes('root', root, 32);
+    const preimage = new Uint8Array(100);
+    const view = new DataView(preimage.buffer);
+    preimage.set(SIGNATURE_DOMAIN);
+    preimage.set(authScope, 24);
+    view.setBigUint64(56, groupId);
+    view.setUint32(64, objectCount);
+    preimage.set(root, 68);
+    return preimage;
+}
+export function decodeSourceAuthManifestFrame(frame) {
+    const frameType = frame[0];
+    const expectedLength = frameType === SOURCE_AUTH_OBJECT_ENTRY_FRAME
+        ? SOURCE_AUTH_OBJECT_ENTRY_LENGTH
+        : frameType === SOURCE_AUTH_GROUP_CLOSE_FRAME
+            ? SOURCE_AUTH_GROUP_CLOSE_LENGTH
+            : 0;
+    if (expectedLength === 0)
+        throw new Error(`unsupported manifest frame type ${frameType}`);
+    if (frame.byteLength !== expectedLength) {
+        throw new Error(`manifest frame has invalid length ${frame.byteLength} for type ${frameType}`);
+    }
+    if (frame[1] !== SOURCE_AUTH_MANIFEST_VERSION) {
+        throw new Error(`unsupported manifest version ${frame[1]}`);
+    }
+    if (frame[2] !== 0 || frame[3] !== 0)
+        throw new Error('manifest reserved bits must be zero');
+    const view = new DataView(frame.buffer, frame.byteOffset, frame.byteLength);
+    const groupId = view.getBigUint64(4);
+    if (frameType === SOURCE_AUTH_OBJECT_ENTRY_FRAME) {
+        const entry = {
+            kind: 'object',
+            groupId,
+            objectId: view.getUint32(12),
+            trueLength: view.getUint32(16),
+            digest: frame.slice(20, 52),
+        };
+        requireTrueLength(entry.trueLength);
+        return entry;
+    }
+    const close = {
+        kind: 'close',
+        groupId,
+        objectCount: view.getUint32(12),
+        root: frame.slice(16, 48),
+        signature: frame.slice(48, 112),
+    };
+    if (close.objectCount === 0 || close.objectCount > SOURCE_AUTH_MAX_OBJECTS_PER_GROUP) {
+        throw new Error(`objectCount must be between 1 and ${SOURCE_AUTH_MAX_OBJECTS_PER_GROUP}`);
+    }
+    return close;
+}
+//# sourceMappingURL=source-auth.js.map

package/node_modules/@blockcast/mmt-manifest-verify/dist/source-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-auth.js","sourceRoot":"","sources":["../src/source-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAA;AAC7C,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAA;AAC/C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAA;AAC9C,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAA;AACjD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAA;AACjD,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAA;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAA;AAE1C,MAAM,gBAAgB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAA;AAoBhF,SAAS,YAAY,CAAC,IAAY,EAAE,KAAiB,EAAE,MAAc;IACnE,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,MAAM,eAAe,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,WAAW,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,mBAAsB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IAC/B,IAAI,KAAK,GAAG,2BAA2B,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,2BAA2B,uBAAuB,CAAC,CAAA;IAC/F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,QAAgB,EAChB,MAAkB,EAClB,UAAkB;IAElB,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC9B,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAChC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAClC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC7B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC3B,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxB,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAKG;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IACrF,IAAI,OAAO,CAAC,MAAM,GAAG,iCAAiC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iBAAiB,iCAAiC,UAAU,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAA;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClF,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QACzF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC1F,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC7B,OAAO,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAiB,EAAE,CAAA;QAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAA;YAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAA;YACtC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;YACnC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YACf,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YACrB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QAChC,CAAC;QACD,KAAK,GAAG,OAAO,CAAA;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAE,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,eAA2B,EAC3B,UAAkB;IAElB,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC7B,IAAI,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,kCAAkC,eAAe,CAAC,UAAU,EAAE,CAAC,CAAA;IAC1G,CAAC;IACD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;AAChD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAA0C;IAE1C,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IACtC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACnC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACpC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,8BAA8B,CAAA;IACzC,KAAK,CAAC,CAAC,CAAC,GAAG,4BAA4B,CAAA;IACvC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACpC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC3B,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAyC;IAEzC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,KAAK,CAAC,WAAW,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,GAAG,iCAAiC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,qCAAqC,iCAAiC,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACpC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACpC,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,6BAA6B,CAAA;IACxC,KAAK,CAAC,CAAC,CAAC,GAAG,4BAA4B,CAAA;IACvC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACrC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC9B,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,SAAqB,EACrB,OAAe,EACf,WAAmB,EACnB,IAAgB;IAEhB,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IACtC,IAAI,WAAW,KAAK,CAAC,IAAI,WAAW,GAAG,iCAAiC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,qCAAqC,iCAAiC,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC9B,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAA;IAC9D,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC9B,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC3B,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;IAC/B,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACtB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAiB;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,cAAc,GAAG,SAAS,KAAK,8BAA8B;QACjE,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,SAAS,KAAK,6BAA6B;YAC3C,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,CAAC,CAAA;IACP,IAAI,cAAc,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAA;IACzF,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,CAAC,UAAU,aAAa,SAAS,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,4BAA4B,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAE5F,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,SAAS,KAAK,8BAA8B,EAAE,CAAC;QACjD,MAAM,KAAK,GAA0B;YACnC,IAAI,EAAE,QAAQ;YACd,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;SAC5B,CAAA;QACD,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACnC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,KAAK,GAAyB;QAClC,IAAI,EAAE,OAAO;QACb,OAAO;QACP,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACzB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC;KAChC,CAAA;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,GAAG,iCAAiC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,qCAAqC,iCAAiC,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}