@bounded-sh/core 0.0.69 → 0.0.71

package/dist/{solana-operations-Bte92rmq.mjs → solana-operations-DEWIxJS8.mjs}

@@ -1,4 +1,4 @@
-import { g as getConfig, b as bufferExports } from './index-B3aNfGi6.mjs';
+import { g as getConfig, b as bufferExports } from './index-P4eUuhOB.mjs';
 import 'axios';
 import 'tweetnacl';
 import 'reconnecting-websocket';
@@ -93,11 +93,36 @@ const BOUNDED_PROGRAM_MAINNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6
 const BOUNDED_PROGRAM_DEVNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6F'].join('');
 const COMPUTE_BUDGET_PROGRAM = 'ComputeBudget111111111111111111111111111111';
 const SYSTEM_PROGRAM_ID = '11111111111111111111111111111111';
+// SPL Associated Token program and the two SPL Token programs it may create an
+// account under. The server builder compiles idempotent ATA-create setup
+// instructions ahead of the Bounded write for every ATA-creating plugin.
+const ASSOCIATED_TOKEN_PROGRAM_ID = 'ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL';
+const TOKEN_PROGRAM_ID = 'TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA';
+const TOKEN_2022_PROGRAM_ID = 'TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb';
+const SPL_TOKEN_PROGRAM_IDS = new Set([TOKEN_PROGRAM_ID, TOKEN_2022_PROGRAM_ID]);
+// Idempotent ATA create carries a single instruction byte 0x01 (CreateIdempotent)
+// and exactly six accounts: funding, ATA, owner, mint, system program, token
+// program.
+const ATA_CREATE_IDEMPOTENT_DISCRIMINATOR = 1;
+const ATA_CREATE_ACCOUNT_COUNT = 6;
+// System Program `transfer` is instruction index 2 (u32 LE) followed by a u64
+// lamports amount: a 12-byte data payload over exactly two accounts.
+const SYSTEM_TRANSFER_INSTRUCTION_INDEX = 2;
+const SYSTEM_TRANSFER_DATA_LENGTH = 12;
+const SYSTEM_TRANSFER_ACCOUNT_COUNT = 2;
+// Gas-sponsorship top-up cap. Mirrors the server builder's ATA-inclusive
+// absolute maximum (0.05 SOL); the fee payer (the gas sponsor) can only move its
+// OWN lamports up to this bound, and only to a co-signing account.
+const SPONSOR_TOPUP_MAX_LAMPORTS = BigInt(50000000);
+// The four setup/write programs a server-built transaction may reference. System
+// and Associated-Token are typed-validated per instruction below; a bare
+// presence in this set is NOT sufficient authorization.
 const ALLOWED_SERVER_TX_PROGRAMS = new Set([
     BOUNDED_PROGRAM_MAINNET,
     BOUNDED_PROGRAM_DEVNET,
     COMPUTE_BUDGET_PROGRAM,
     SYSTEM_PROGRAM_ID,
+    ASSOCIATED_TOKEN_PROGRAM_ID,
 ]);
 // Canonical set_documents discriminator (single wire format: ra_indices Vec<u8>).
 const SET_DOCUMENTS_DISCRIMINATOR = '79,46,72,73,24,79,66,245';
@@ -208,11 +233,97 @@ function assertSamePathSet(label, expectedPaths, actualPaths) {
         throw new Error(`${label} Bounded instruction paths do not match requested write paths (${details})`);
     }
 }
-function deserializeAndValidateServerTransaction(serializedTransaction, VersionedTransactionClass, options) {
+/** Read a little-endian u64 as a BigInt (lamport amounts can exceed 2^53). */
+function readU64LE(bytes, offset) {
+    let value = BigInt(0);
+    for (let i = 0; i < 8; i++)
+        value |= BigInt(bytes[offset + i]) << BigInt(8 * i);
+    return value;
+}
+/**
+ * Resolve an instruction's referenced account keys against the transaction's
+ * STATIC key list. A setup instruction that reaches into an address-lookup
+ * table for any account it needs cannot be validated offline, so it fails
+ * closed: every index must resolve to a static key.
+ */
+function resolveInstructionAccounts(ix, accountKeys, label) {
+    return ix.accountKeyIndexes.map(index => {
+        if (index >= accountKeys.length) {
+            throw new Error(`${label} setup instruction references an address-lookup-table account (not allowed)`);
+        }
+        return accountKeys[index];
+    });
+}
+/**
+ * A server-built idempotent ATA create is authorized ONLY when it is exactly the
+ * canonical shape: instruction byte 0x01, six accounts, funded by the
+ * transaction fee payer, over the System and an SPL Token program, and where the
+ * account being created recomputes to the associated-token-account PDA of its
+ * stated owner and mint. Nothing else - no arbitrary account create - passes.
+ */
+function validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label) {
+    if (data.length !== 1 || data[0] !== ATA_CREATE_IDEMPOTENT_DISCRIMINATOR) {
+        throw new Error(`${label} contains a non-idempotent or malformed associated-token-account instruction`);
+    }
+    if (ix.accountKeyIndexes.length !== ATA_CREATE_ACCOUNT_COUNT) {
+        throw new Error(`${label} associated-token-account create has an unexpected account layout`);
+    }
+    const [funding, ata, owner, mint, systemProgram, tokenProgram] = resolveInstructionAccounts(ix, accountKeys, label);
+    if (!funding.equals(feePayer)) {
+        throw new Error(`${label} associated-token-account create is not funded by the transaction fee payer`);
+    }
+    if (systemProgram.toBase58() !== SYSTEM_PROGRAM_ID) {
+        throw new Error(`${label} associated-token-account create references an unexpected system program`);
+    }
+    if (!SPL_TOKEN_PROGRAM_IDS.has(tokenProgram.toBase58())) {
+        throw new Error(`${label} associated-token-account create references an unexpected token program`);
+    }
+    const [expectedAta] = PublicKeyCtor.findProgramAddressSync([owner.toBuffer(), tokenProgram.toBuffer(), mint.toBuffer()], new PublicKeyCtor(ASSOCIATED_TOKEN_PROGRAM_ID));
+    if (!ata.equals(expectedAta)) {
+        throw new Error(`${label} associated-token-account create does not derive the canonical account for its owner and mint`);
+    }
+}
+/**
+ * A server-built System Program instruction is authorized ONLY as the gas
+ * sponsor's top-up: a `transfer` FROM the transaction fee payer (the sponsor),
+ * capped at the sponsorship maximum, TO a co-signing account (the sponsored
+ * user). The fee payer can therefore only move its OWN lamports, bounded, and
+ * only to an account that itself signed the transaction - never a drain to an
+ * arbitrary address. Every other System instruction (createAccount, an
+ * uncapped or misdirected transfer, ...) is rejected.
+ */
+function validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label) {
+    const isTransfer = data.length === SYSTEM_TRANSFER_DATA_LENGTH &&
+        (data[0] | (data[1] << 8) | (data[2] << 16) | (data[3] << 24)) === SYSTEM_TRANSFER_INSTRUCTION_INDEX;
+    if (!isTransfer) {
+        throw new Error(`${label} contains an unauthorized System Program instruction`);
+    }
+    if (ix.accountKeyIndexes.length !== SYSTEM_TRANSFER_ACCOUNT_COUNT) {
+        throw new Error(`${label} contains an unauthorized System Program instruction`);
+    }
+    const [from, to] = resolveInstructionAccounts(ix, accountKeys, label);
+    if (!from.equals(feePayer)) {
+        throw new Error(`${label} System Program transfer must originate from the transaction fee payer (gas sponsor)`);
+    }
+    const lamports = readU64LE(data, 4);
+    if (lamports > SPONSOR_TOPUP_MAX_LAMPORTS) {
+        throw new Error(`${label} System Program transfer exceeds the gas-sponsorship cap`);
+    }
+    const recipientIndex = ix.accountKeyIndexes[1];
+    if (!isAccountSigner(recipientIndex) || to.equals(feePayer)) {
+        throw new Error(`${label} System Program transfer recipient must be a co-signing sponsored account`);
+    }
+}
+function deserializeAndValidateServerTransaction(serializedTransaction, web3, options) {
     var _a;
+    const { VersionedTransaction: VersionedTransactionClass, PublicKey: PublicKeyCtor } = web3;
     const transaction = VersionedTransactionClass.deserialize(bufferExports.Buffer.from(serializedTransaction, 'base64'));
     const { label, expectedAppId, expectedWritePaths } = options;
     const accountKeys = transaction.message.staticAccountKeys;
+    if (accountKeys.length === 0)
+        throw new Error(`${label} has no static account keys`);
+    const feePayer = accountKeys[0];
+    const isAccountSigner = (index) => transaction.message.isAccountSigner(index);
     let boundedInstructionCount = 0;
     const actualWritePaths = [];
     for (const ix of transaction.message.compiledInstructions) {
@@ -222,9 +333,17 @@ function deserializeAndValidateServerTransaction(serializedTransaction, Versione
         if (!ALLOWED_SERVER_TX_PROGRAMS.has(programId))
             throw new Error(`${label} contains unauthorized program: ${programId}`);
         const data = ix.data instanceof Uint8Array ? ix.data : bufferExports.Buffer.from((_a = ix.data) !== null && _a !== void 0 ? _a : []);
-        if (programId === SYSTEM_PROGRAM_ID)
-            throw new Error(`${label} contains unauthorized System Program instruction`);
-        if (programId === BOUNDED_PROGRAM_MAINNET || programId === BOUNDED_PROGRAM_DEVNET) {
+        // Typed setup checks replace the old blanket System-Program ban: each of the
+        // two setup shapes the server builder emits (idempotent ATA create, gas
+        // sponsor top-up) is bound to recompute to the values this write needs, and
+        // anything else fails closed.
+        if (programId === SYSTEM_PROGRAM_ID) {
+            validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label);
+        }
+        else if (programId === ASSOCIATED_TOKEN_PROGRAM_ID) {
+            validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label);
+        }
+        else if (programId === BOUNDED_PROGRAM_MAINNET || programId === BOUNDED_PROGRAM_DEVNET) {
             boundedInstructionCount++;
             const parsed = parseBoundedSetDocumentsInstruction(data, label);
             if (parsed.appId !== expectedAppId)
@@ -239,11 +358,11 @@ function deserializeAndValidateServerTransaction(serializedTransaction, Versione
 }
 async function handlePreBuiltTransaction(tx, authProvider, options, expectedWritePaths) {
     var _a, _b, _c, _d, _e, _f, _g, _h;
-    const { Connection, VersionedTransaction } = await import('@solana/web3.js');
+    const { Connection, VersionedTransaction, PublicKey } = await import('@solana/web3.js');
     // Honor a wallet client's immutable config snapshot for the expected app-id
     // binding and RPC endpoint (CTA-05); otherwise read the global init() config.
     const config = (_b = (_a = options === null || options === void 0 ? void 0 : options._overrides) === null || _a === void 0 ? void 0 : _a._config) !== null && _b !== void 0 ? _b : await getConfig();
-    const transaction = deserializeAndValidateServerTransaction(tx.serializedTransaction, VersionedTransaction, {
+    const transaction = deserializeAndValidateServerTransaction(tx.serializedTransaction, { VersionedTransaction, PublicKey }, {
         label: 'Pre-built transaction', expectedAppId: config.appId, expectedWritePaths,
     });
     const shouldSubmit = (options === null || options === void 0 ? void 0 : options.shouldSubmitTx) !== false;
@@ -332,4 +451,4 @@ async function handlePreBuiltTransaction(tx, authProvider, options, expectedWrit
 }
 
 export { deriveTransactionSignature, handlePreBuiltTransaction, isDefinitiveSolanaSendFailure };
-//# sourceMappingURL=solana-operations-Bte92rmq.mjs.map
+//# sourceMappingURL=solana-operations-DEWIxJS8.mjs.map

package/dist/solana-operations-DEWIxJS8.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-operations-DEWIxJS8.mjs","sources":["../.rollup-tmp/client/solana-operations.js"],"sourcesContent":["import { Buffer } from 'buffer';\nimport { getConfig } from './config';\nconst BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';\n/**\n * Minimal base58 encoder, used ONLY to derive a Solana transaction signature\n * from already-signed bytes. Core deliberately does not take a `bs58`\n * dependency for eighteen lines of arithmetic.\n */\nfunction encodeBase58(bytes) {\n    if (bytes.length === 0)\n        return '';\n    const digits = [0];\n    for (const byte of bytes) {\n        let carry = byte;\n        for (let i = 0; i < digits.length; i++) {\n            carry += digits[i] << 8;\n            digits[i] = carry % 58;\n            carry = (carry / 58) | 0;\n        }\n        while (carry > 0) {\n            digits.push(carry % 58);\n            carry = (carry / 58) | 0;\n        }\n    }\n    let out = '';\n    for (let i = 0; i < bytes.length && bytes[i] === 0; i++)\n        out += BASE58_ALPHABET[0];\n    for (let i = digits.length - 1; i >= 0; i--)\n        out += BASE58_ALPHABET[digits[i]];\n    return out;\n}\n/**\n * Derive the transaction signature from the SIGNED bytes, before broadcasting.\n *\n * Without this the signature is only learned when `sendRawTransaction` resolves,\n * so an RPC that accepted the bytes but whose response was lost throws with\n * nothing recorded — and a retry builds a DIFFERENT transaction that can land\n * beside the first.\n */\nexport function deriveTransactionSignature(signedTransaction) {\n    var _a;\n    const signature = (_a = signedTransaction.signatures) === null || _a === void 0 ? void 0 : _a[0];\n    if (!signature || signature.length === 0) {\n        throw new Error('Signed Solana transaction carries no signature to broadcast');\n    }\n    if (signature.every(byte => byte === 0)) {\n        throw new Error('Signed Solana transaction carries an empty fee-payer signature');\n    }\n    return encodeBase58(Uint8Array.from(signature));\n}\n/**\n * Whether a send failure PROVES the transaction was never accepted. A preflight\n * rejection, a signature-verification failure, or an oversized/invalid\n * transaction is definitive and keeps throwing. A transport failure (timeout,\n * socket reset, aborted fetch) is ambiguous — the node may hold the bytes — and\n * must resolve as `submitted` carrying the pre-derived signature.\n *\n * \"already processed\" is deliberately NOT definitive: it means the signature\n * landed, which is the opposite of a failure.\n */\nconst DEFINITIVE_SEND_FAILURE_MARKERS = [\n    'simulation failed',\n    'preflight',\n    'blockhash not found',\n    'signature verification failure',\n    'transaction too large',\n    'invalid transaction',\n    'insufficient funds for rent',\n    'attempt to debit an account but found no record of a prior credit',\n];\nexport function isDefinitiveSolanaSendFailure(error) {\n    var _a, _b, _c;\n    const err = error;\n    if (err && Array.isArray(err.logs))\n        return true;\n    if (err && String((_a = err.name) !== null && _a !== void 0 ? _a : '') === 'SendTransactionError')\n        return true;\n    const message = String((_c = (_b = err === null || err === void 0 ? void 0 : err.message) !== null && _b !== void 0 ? _b : err) !== null && _c !== void 0 ? _c : '').toLowerCase();\n    if (!message)\n        return false;\n    if (message.includes('already been processed') || message.includes('already processed'))\n        return false;\n    return DEFINITIVE_SEND_FAILURE_MARKERS.some(marker => message.includes(marker));\n}\nfunction errorText(error) {\n    const message = error === null || error === void 0 ? void 0 : error.message;\n    return typeof message === 'string' && message.length > 0 ? message : String(error);\n}\nconst BOUNDED_PROGRAM_MAINNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6F'].join('');\nconst BOUNDED_PROGRAM_DEVNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6F'].join('');\nconst COMPUTE_BUDGET_PROGRAM = 'ComputeBudget111111111111111111111111111111';\nconst SYSTEM_PROGRAM_ID = '11111111111111111111111111111111';\n// SPL Associated Token program and the two SPL Token programs it may create an\n// account under. The server builder compiles idempotent ATA-create setup\n// instructions ahead of the Bounded write for every ATA-creating plugin.\nconst ASSOCIATED_TOKEN_PROGRAM_ID = 'ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL';\nconst TOKEN_PROGRAM_ID = 'TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA';\nconst TOKEN_2022_PROGRAM_ID = 'TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb';\nconst SPL_TOKEN_PROGRAM_IDS = new Set([TOKEN_PROGRAM_ID, TOKEN_2022_PROGRAM_ID]);\n// Idempotent ATA create carries a single instruction byte 0x01 (CreateIdempotent)\n// and exactly six accounts: funding, ATA, owner, mint, system program, token\n// program.\nconst ATA_CREATE_IDEMPOTENT_DISCRIMINATOR = 1;\nconst ATA_CREATE_ACCOUNT_COUNT = 6;\n// System Program `transfer` is instruction index 2 (u32 LE) followed by a u64\n// lamports amount: a 12-byte data payload over exactly two accounts.\nconst SYSTEM_TRANSFER_INSTRUCTION_INDEX = 2;\nconst SYSTEM_TRANSFER_DATA_LENGTH = 12;\nconst SYSTEM_TRANSFER_ACCOUNT_COUNT = 2;\n// Gas-sponsorship top-up cap. Mirrors the server builder's ATA-inclusive\n// absolute maximum (0.05 SOL); the fee payer (the gas sponsor) can only move its\n// OWN lamports up to this bound, and only to a co-signing account.\nconst SPONSOR_TOPUP_MAX_LAMPORTS = BigInt(50000000);\n// The four setup/write programs a server-built transaction may reference. System\n// and Associated-Token are typed-validated per instruction below; a bare\n// presence in this set is NOT sufficient authorization.\nconst ALLOWED_SERVER_TX_PROGRAMS = new Set([\n    BOUNDED_PROGRAM_MAINNET,\n    BOUNDED_PROGRAM_DEVNET,\n    COMPUTE_BUDGET_PROGRAM,\n    SYSTEM_PROGRAM_ID,\n    ASSOCIATED_TOKEN_PROGRAM_ID,\n]);\n// Canonical set_documents discriminator (single wire format: ra_indices Vec<u8>).\nconst SET_DOCUMENTS_DISCRIMINATOR = '79,46,72,73,24,79,66,245';\nconst ALLOWED_BOUNDED_SET_DISCRIMINATORS = new Set([\n    SET_DOCUMENTS_DISCRIMINATOR,\n]);\nclass BorshCursor {\n    constructor(data, offset, label) {\n        this.data = data;\n        this.offset = offset;\n        this.label = label;\n    }\n    requireBytes(length, field) {\n        if (this.offset + length > this.data.length) {\n            throw new Error(`${this.label} has malformed Bounded instruction data while reading ${field}`);\n        }\n    }\n    readU8(field) { this.requireBytes(1, field); return this.data[this.offset++]; }\n    readU32(field) {\n        this.requireBytes(4, field);\n        const value = this.data[this.offset] | (this.data[this.offset + 1] << 8) |\n            (this.data[this.offset + 2] << 16) | (this.data[this.offset + 3] << 24);\n        this.offset += 4;\n        return value >>> 0;\n    }\n    skip(length, field) { this.requireBytes(length, field); this.offset += length; }\n    readString(field) {\n        const length = this.readU32(`${field} length`);\n        this.requireBytes(length, field);\n        const raw = this.data.slice(this.offset, this.offset + length);\n        this.offset += length;\n        return Buffer.from(raw).toString('utf8');\n    }\n    skipBytes(field) { this.skip(this.readU32(`${field} length`), field); }\n    isAtEnd() { return this.offset === this.data.length; }\n}\nfunction skipBoundedFieldValue(cursor) {\n    const option = cursor.readU8('operation value option');\n    if (option === 0)\n        return;\n    if (option !== 1)\n        throw new Error('Server transaction has malformed Bounded field value option');\n    const variant = cursor.readU8('operation value variant');\n    if (variant === 0 || variant === 1)\n        cursor.skip(8, 'operation numeric value');\n    else if (variant === 2)\n        cursor.skip(1, 'operation bool value');\n    else if (variant === 3)\n        cursor.readString('operation string value');\n    else if (variant === 4)\n        cursor.skip(32, 'operation address value');\n    else\n        throw new Error(`Server transaction has unsupported Bounded field value variant: ${variant}`);\n}\nfunction normalizeOnchainPath(path) {\n    let normalized = path.startsWith('/') ? path.slice(1) : path;\n    if (normalized.endsWith('*') && normalized.length > 1)\n        normalized = normalized.slice(0, -1);\n    if (normalized.endsWith('/'))\n        normalized = normalized.slice(0, -1);\n    return normalized;\n}\nfunction parseBoundedSetDocumentsInstruction(data, label) {\n    if (data.length < 8)\n        throw new Error(`${label} has malformed Bounded instruction data`);\n    const discriminator = Array.from(data.slice(0, 8)).join(',');\n    if (!ALLOWED_BOUNDED_SET_DISCRIMINATORS.has(discriminator)) {\n        throw new Error(`${label} contains unsupported Bounded instruction`);\n    }\n    const cursor = new BorshCursor(data, 8, label);\n    const appId = cursor.readString('appId');\n    const documentPaths = [];\n    const documentCount = cursor.readU32('documents length');\n    for (let i = 0; i < documentCount; i++) {\n        documentPaths.push(normalizeOnchainPath(cursor.readString('document path')));\n        const operationCount = cursor.readU32('operations length');\n        for (let j = 0; j < operationCount; j++) {\n            cursor.readString('operation key');\n            skipBoundedFieldValue(cursor);\n            cursor.skip(1, 'operation kind');\n        }\n    }\n    const deletePaths = [];\n    const deleteCount = cursor.readU32('delete paths length');\n    for (let i = 0; i < deleteCount; i++)\n        deletePaths.push(normalizeOnchainPath(cursor.readString('delete path')));\n    const txDataCount = cursor.readU32('txData length');\n    for (let i = 0; i < txDataCount; i++) {\n        cursor.readString('txData plugin function key');\n        cursor.skipBytes('txData bytes');\n        cursor.skipBytes('txData raIndices');\n    }\n    const simulate = cursor.readU8('simulate');\n    if (simulate !== 0 && simulate !== 1)\n        throw new Error(`${label} has malformed Bounded simulate flag`);\n    if (!cursor.isAtEnd())\n        throw new Error(`${label} has trailing Bounded instruction data`);\n    return { appId, documentPaths, deletePaths };\n}\nfunction assertSamePathSet(label, expectedPaths, actualPaths) {\n    const expected = new Set(expectedPaths.map(normalizeOnchainPath).filter(Boolean));\n    const actual = new Set(actualPaths.map(normalizeOnchainPath).filter(Boolean));\n    const missing = [...expected].filter(path => !actual.has(path));\n    const extra = [...actual].filter(path => !expected.has(path));\n    if (missing.length || extra.length) {\n        const details = [missing.length ? `missing paths: ${missing.join(', ')}` : '', extra.length ? `unexpected paths: ${extra.join(', ')}` : '']\n            .filter(Boolean).join('; ');\n        throw new Error(`${label} Bounded instruction paths do not match requested write paths (${details})`);\n    }\n}\n/** Read a little-endian u64 as a BigInt (lamport amounts can exceed 2^53). */\nfunction readU64LE(bytes, offset) {\n    let value = BigInt(0);\n    for (let i = 0; i < 8; i++)\n        value |= BigInt(bytes[offset + i]) << BigInt(8 * i);\n    return value;\n}\n/**\n * Resolve an instruction's referenced account keys against the transaction's\n * STATIC key list. A setup instruction that reaches into an address-lookup\n * table for any account it needs cannot be validated offline, so it fails\n * closed: every index must resolve to a static key.\n */\nfunction resolveInstructionAccounts(ix, accountKeys, label) {\n    return ix.accountKeyIndexes.map(index => {\n        if (index >= accountKeys.length) {\n            throw new Error(`${label} setup instruction references an address-lookup-table account (not allowed)`);\n        }\n        return accountKeys[index];\n    });\n}\n/**\n * A server-built idempotent ATA create is authorized ONLY when it is exactly the\n * canonical shape: instruction byte 0x01, six accounts, funded by the\n * transaction fee payer, over the System and an SPL Token program, and where the\n * account being created recomputes to the associated-token-account PDA of its\n * stated owner and mint. Nothing else - no arbitrary account create - passes.\n */\nfunction validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label) {\n    if (data.length !== 1 || data[0] !== ATA_CREATE_IDEMPOTENT_DISCRIMINATOR) {\n        throw new Error(`${label} contains a non-idempotent or malformed associated-token-account instruction`);\n    }\n    if (ix.accountKeyIndexes.length !== ATA_CREATE_ACCOUNT_COUNT) {\n        throw new Error(`${label} associated-token-account create has an unexpected account layout`);\n    }\n    const [funding, ata, owner, mint, systemProgram, tokenProgram] = resolveInstructionAccounts(ix, accountKeys, label);\n    if (!funding.equals(feePayer)) {\n        throw new Error(`${label} associated-token-account create is not funded by the transaction fee payer`);\n    }\n    if (systemProgram.toBase58() !== SYSTEM_PROGRAM_ID) {\n        throw new Error(`${label} associated-token-account create references an unexpected system program`);\n    }\n    if (!SPL_TOKEN_PROGRAM_IDS.has(tokenProgram.toBase58())) {\n        throw new Error(`${label} associated-token-account create references an unexpected token program`);\n    }\n    const [expectedAta] = PublicKeyCtor.findProgramAddressSync([owner.toBuffer(), tokenProgram.toBuffer(), mint.toBuffer()], new PublicKeyCtor(ASSOCIATED_TOKEN_PROGRAM_ID));\n    if (!ata.equals(expectedAta)) {\n        throw new Error(`${label} associated-token-account create does not derive the canonical account for its owner and mint`);\n    }\n}\n/**\n * A server-built System Program instruction is authorized ONLY as the gas\n * sponsor's top-up: a `transfer` FROM the transaction fee payer (the sponsor),\n * capped at the sponsorship maximum, TO a co-signing account (the sponsored\n * user). The fee payer can therefore only move its OWN lamports, bounded, and\n * only to an account that itself signed the transaction - never a drain to an\n * arbitrary address. Every other System instruction (createAccount, an\n * uncapped or misdirected transfer, ...) is rejected.\n */\nfunction validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label) {\n    const isTransfer = data.length === SYSTEM_TRANSFER_DATA_LENGTH &&\n        (data[0] | (data[1] << 8) | (data[2] << 16) | (data[3] << 24)) === SYSTEM_TRANSFER_INSTRUCTION_INDEX;\n    if (!isTransfer) {\n        throw new Error(`${label} contains an unauthorized System Program instruction`);\n    }\n    if (ix.accountKeyIndexes.length !== SYSTEM_TRANSFER_ACCOUNT_COUNT) {\n        throw new Error(`${label} contains an unauthorized System Program instruction`);\n    }\n    const [from, to] = resolveInstructionAccounts(ix, accountKeys, label);\n    if (!from.equals(feePayer)) {\n        throw new Error(`${label} System Program transfer must originate from the transaction fee payer (gas sponsor)`);\n    }\n    const lamports = readU64LE(data, 4);\n    if (lamports > SPONSOR_TOPUP_MAX_LAMPORTS) {\n        throw new Error(`${label} System Program transfer exceeds the gas-sponsorship cap`);\n    }\n    const recipientIndex = ix.accountKeyIndexes[1];\n    if (!isAccountSigner(recipientIndex) || to.equals(feePayer)) {\n        throw new Error(`${label} System Program transfer recipient must be a co-signing sponsored account`);\n    }\n}\nfunction deserializeAndValidateServerTransaction(serializedTransaction, web3, options) {\n    var _a;\n    const { VersionedTransaction: VersionedTransactionClass, PublicKey: PublicKeyCtor } = web3;\n    const transaction = VersionedTransactionClass.deserialize(Buffer.from(serializedTransaction, 'base64'));\n    const { label, expectedAppId, expectedWritePaths } = options;\n    const accountKeys = transaction.message.staticAccountKeys;\n    if (accountKeys.length === 0)\n        throw new Error(`${label} has no static account keys`);\n    const feePayer = accountKeys[0];\n    const isAccountSigner = (index) => transaction.message.isAccountSigner(index);\n    let boundedInstructionCount = 0;\n    const actualWritePaths = [];\n    for (const ix of transaction.message.compiledInstructions) {\n        if (ix.programIdIndex >= accountKeys.length)\n            throw new Error(`${label} has program ID in lookup table (not allowed)`);\n        const programId = accountKeys[ix.programIdIndex].toBase58();\n        if (!ALLOWED_SERVER_TX_PROGRAMS.has(programId))\n            throw new Error(`${label} contains unauthorized program: ${programId}`);\n        const data = ix.data instanceof Uint8Array ? ix.data : Buffer.from((_a = ix.data) !== null && _a !== void 0 ? _a : []);\n        // Typed setup checks replace the old blanket System-Program ban: each of the\n        // two setup shapes the server builder emits (idempotent ATA create, gas\n        // sponsor top-up) is bound to recompute to the values this write needs, and\n        // anything else fails closed.\n        if (programId === SYSTEM_PROGRAM_ID) {\n            validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label);\n        }\n        else if (programId === ASSOCIATED_TOKEN_PROGRAM_ID) {\n            validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label);\n        }\n        else if (programId === BOUNDED_PROGRAM_MAINNET || programId === BOUNDED_PROGRAM_DEVNET) {\n            boundedInstructionCount++;\n            const parsed = parseBoundedSetDocumentsInstruction(data, label);\n            if (parsed.appId !== expectedAppId)\n                throw new Error(`${label} Bounded instruction appId does not match configured appId`);\n            actualWritePaths.push(...parsed.documentPaths, ...parsed.deletePaths);\n        }\n    }\n    if (boundedInstructionCount !== 1)\n        throw new Error(`${label} must contain exactly one Bounded set-documents instruction`);\n    assertSamePathSet(label, expectedWritePaths, actualWritePaths);\n    return transaction;\n}\nexport async function handlePreBuiltTransaction(tx, authProvider, options, expectedWritePaths) {\n    var _a, _b, _c, _d, _e, _f, _g, _h;\n    const { Connection, VersionedTransaction, PublicKey } = await import(\"@solana/web3.js\");\n    // Honor a wallet client's immutable config snapshot for the expected app-id\n    // binding and RPC endpoint (CTA-05); otherwise read the global init() config.\n    const config = (_b = (_a = options === null || options === void 0 ? void 0 : options._overrides) === null || _a === void 0 ? void 0 : _a._config) !== null && _b !== void 0 ? _b : await getConfig();\n    const transaction = deserializeAndValidateServerTransaction(tx.serializedTransaction, { VersionedTransaction, PublicKey }, {\n        label: 'Pre-built transaction', expectedAppId: config.appId, expectedWritePaths,\n    });\n    const shouldSubmit = (options === null || options === void 0 ? void 0 : options.shouldSubmitTx) !== false;\n    const rpcUrl = (_c = config.rpcUrl) === null || _c === void 0 ? void 0 : _c.trim();\n    const injectedRpc = (_d = options === null || options === void 0 ? void 0 : options._overrides) === null || _d === void 0 ? void 0 : _d._solanaRpc;\n    if (shouldSubmit && !rpcUrl && !injectedRpc) {\n        throw new Error(`Pre-built Solana transaction submission requires init({ rpcUrl }) for ${tx.network}`);\n    }\n    const signedTx = await authProvider.signTransaction(transaction);\n    const rawTx = signedTx.serialize();\n    const signedTransaction = Buffer.from(rawTx).toString('base64');\n    // Keep the worker's expiry fence instead of discarding it: it is what makes\n    // bounded same-signature reconciliation (and therefore the retry-safe\n    // `expired_not_landed` exit) possible at all.\n    const fence = { blockhash: tx.blockhash, lastValidBlockHeight: tx.lastValidBlockHeight };\n    if (!shouldSubmit) {\n        // Signed and NOT sent. There is no signature and nothing to mirror.\n        return { outcome: 'signed', lane: 'solana', transactionSignature: null, signedTransaction, fence };\n    }\n    // Derive the signature from the signed bytes BEFORE broadcasting, so a send\n    // whose response is lost still yields a reconcilable identifier.\n    const signature = deriveTransactionSignature(signedTx);\n    const connection = injectedRpc !== null && injectedRpc !== void 0 ? injectedRpc : new Connection(rpcUrl, 'confirmed');\n    try {\n        await connection.sendRawTransaction(rawTx, { skipPreflight: false, maxRetries: 3 });\n    }\n    catch (error) {\n        // A definitive rejection never entered the network — keep throwing.\n        if (isDefinitiveSolanaSendFailure(error))\n            throw error;\n        // Ambiguous transport outcome: the node may hold these exact bytes. Report\n        // the pre-derived signature so the caller reconciles it instead of building\n        // a second transaction that could land beside the first.\n        return {\n            outcome: 'submitted',\n            lane: 'solana',\n            transactionSignature: signature,\n            signedTransaction,\n            fence,\n            reason: `Broadcast response was lost or inconclusive: ${errorText(error)}`,\n        };\n    }\n    let confirmation;\n    try {\n        confirmation = await connection.confirmTransaction({\n            signature, blockhash: tx.blockhash, lastValidBlockHeight: tx.lastValidBlockHeight,\n        }, 'confirmed');\n    }\n    catch (error) {\n        // The bytes were accepted; only the confirmation outcome is unknown.\n        return {\n            outcome: 'submitted',\n            lane: 'solana',\n            transactionSignature: signature,\n            signedTransaction,\n            fence,\n            reason: `Confirmation outcome unknown: ${errorText(error)}`,\n        };\n    }\n    // #310: \"confirmed\" only means the network recorded the transaction, not that it\n    // succeeded - a landed-but-failed transaction carries an err. Report it as a failure\n    // (with on-chain logs) instead of a fake success, mirroring the server keypair provider.\n    if ((_e = confirmation.value) === null || _e === void 0 ? void 0 : _e.err) {\n        let logMessages;\n        try {\n            const txInfo = await connection.getTransaction(signature, {\n                maxSupportedTransactionVersion: 0,\n                commitment: 'confirmed',\n            });\n            logMessages = (_f = txInfo === null || txInfo === void 0 ? void 0 : txInfo.meta) === null || _f === void 0 ? void 0 : _f.logMessages;\n        }\n        catch (_j) {\n            // Log retrieval is diagnostic only; the on-chain error is the verdict.\n        }\n        const errorMessage = logMessages ? JSON.stringify(logMessages) : JSON.stringify(confirmation.value.err);\n        throw new Error(`Transaction failed: ${errorMessage}`);\n    }\n    return {\n        outcome: 'confirmed',\n        lane: 'solana',\n        transactionSignature: signature,\n        signedTransaction,\n        fence,\n        confirmationContextSlot: (_h = (_g = confirmation.context) === null || _g === void 0 ? void 0 : _g.slot) !== null && _h !== void 0 ? _h : 0,\n    };\n}\n"],"names":["Buffer"],"mappings":";;;;;AAEA,MAAM,eAAe,GAAG,4DAA4D;AACpF;AACA;AACA;AACA;AACA;AACA,SAAS,YAAY,CAAC,KAAK,EAAE;AAC7B,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAC1B,QAAQ,OAAO,EAAE;AACjB,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC;AACtB,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC9B,QAAQ,IAAI,KAAK,GAAG,IAAI;AACxB,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChD,YAAY,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,YAAY,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE;AAClC,YAAY,KAAK,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,CAAC;AACpC,QAAQ;AACR,QAAQ,OAAO,KAAK,GAAG,CAAC,EAAE;AAC1B,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;AACnC,YAAY,KAAK,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,CAAC;AACpC,QAAQ;AACR,IAAI;AACJ,IAAI,IAAI,GAAG,GAAG,EAAE;AAChB,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;AAC3D,QAAQ,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC;AACjC,IAAI,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;AAC/C,QAAQ,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACzC,IAAI,OAAO,GAAG;AACd;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,0BAA0B,CAAC,iBAAiB,EAAE;AAC9D,IAAI,IAAI,EAAE;AACV,IAAI,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,iBAAiB,CAAC,UAAU,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AACpG,IAAI,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE;AAC9C,QAAQ,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;AACtF,IAAI;AACJ,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE;AAC7C,QAAQ,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC;AACzF,IAAI;AACJ,IAAI,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACnD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,+BAA+B,GAAG;AACxC,IAAI,mBAAmB;AACvB,IAAI,WAAW;AACf,IAAI,qBAAqB;AACzB,IAAI,gCAAgC;AACpC,IAAI,uBAAuB;AAC3B,IAAI,qBAAqB;AACzB,IAAI,6BAA6B;AACjC,IAAI,mEAAmE;AACvE,CAAC;AACM,SAAS,6BAA6B,CAAC,KAAK,EAAE;AACrD,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE;AAClB,IAAI,MAAM,GAAG,GAAG,KAAK;AACrB,IAAI,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;AACtC,QAAQ,OAAO,IAAI;AACnB,IAAI,IAAI,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,sBAAsB;AACrG,QAAQ,OAAO,IAAI;AACnB,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;AACtL,IAAI,IAAI,CAAC,OAAO;AAChB,QAAQ,OAAO,KAAK;AACpB,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;AAC3F,QAAQ,OAAO,KAAK;AACpB,IAAI,OAAO,+BAA+B,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnF;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO;AAC/E,IAAI,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;AACtF;AACA,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5F,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3F,MAAM,sBAAsB,GAAG,6CAA6C;AAC5E,MAAM,iBAAiB,GAAG,kCAAkC;AAC5D;AACA;AACA;AACA,MAAM,2BAA2B,GAAG,8CAA8C;AAClF,MAAM,gBAAgB,GAAG,6CAA6C;AACtE,MAAM,qBAAqB,GAAG,6CAA6C;AAC3E,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;AAChF;AACA;AACA;AACA,MAAM,mCAAmC,GAAG,CAAC;AAC7C,MAAM,wBAAwB,GAAG,CAAC;AAClC;AACA;AACA,MAAM,iCAAiC,GAAG,CAAC;AAC3C,MAAM,2BAA2B,GAAG,EAAE;AACtC,MAAM,6BAA6B,GAAG,CAAC;AACvC;AACA;AACA;AACA,MAAM,0BAA0B,GAAG,MAAM,CAAC,QAAQ,CAAC;AACnD;AACA;AACA;AACA,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;AAC3C,IAAI,uBAAuB;AAC3B,IAAI,sBAAsB;AAC1B,IAAI,sBAAsB;AAC1B,IAAI,iBAAiB;AACrB,IAAI,2BAA2B;AAC/B,CAAC,CAAC;AACF;AACA,MAAM,2BAA2B,GAAG,0BAA0B;AAC9D,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC;AACnD,IAAI,2BAA2B;AAC/B,CAAC,CAAC;AACF,MAAM,WAAW,CAAC;AAClB,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;AACrC,QAAQ,IAAI,CAAC,IAAI,GAAG,IAAI;AACxB,QAAQ,IAAI,CAAC,MAAM,GAAG,MAAM;AAC5B,QAAQ,IAAI,CAAC,KAAK,GAAG,KAAK;AAC1B,IAAI;AACJ,IAAI,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE;AAChC,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;AACrD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1G,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClF,IAAI,OAAO,CAAC,KAAK,EAAE;AACnB,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC;AACnC,QAAQ,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AAChF,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACnF,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC;AACxB,QAAQ,OAAO,KAAK,KAAK,CAAC;AAC1B,IAAI;AACJ,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;AACnF,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,QAAQ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACtD,QAAQ,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;AACxC,QAAQ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACtE,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM;AAC7B,QAAQ,OAAOA,oBAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AAChD,IAAI;AACJ,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1E,IAAI,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzD;AACA,SAAS,qBAAqB,CAAC,MAAM,EAAE;AACvC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;AAC1D,IAAI,IAAI,MAAM,KAAK,CAAC;AACpB,QAAQ;AACR,IAAI,IAAI,MAAM,KAAK,CAAC;AACpB,QAAQ,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;AACtF,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC;AAC5D,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;AACtC,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,yBAAyB,CAAC;AACjD,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,sBAAsB,CAAC;AAC9C,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC;AACnD,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,yBAAyB,CAAC;AAClD;AACA,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,gEAAgE,EAAE,OAAO,CAAC,CAAC,CAAC;AACrG;AACA,SAAS,oBAAoB,CAAC,IAAI,EAAE;AACpC,IAAI,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI;AAChE,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;AACzD,QAAQ,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5C,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;AAChC,QAAQ,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5C,IAAI,OAAO,UAAU;AACrB;AACA,SAAS,mCAAmC,CAAC,IAAI,EAAE,KAAK,EAAE;AAC1D,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;AACvB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC1E,IAAI,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAChE,IAAI,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE;AAChE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC5E,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;AAClD,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;AAC5C,IAAI,MAAM,aAAa,GAAG,EAAE;AAC5B,IAAI,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;AAC5D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE;AAC5C,QAAQ,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;AACpF,QAAQ,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;AAClE,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE;AACjD,YAAY,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;AAC9C,YAAY,qBAAqB,CAAC,MAAM,CAAC;AACzC,YAAY,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,gBAAgB,CAAC;AAC5C,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,WAAW,GAAG,EAAE;AAC1B,IAAI,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;AAC7D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE;AACxC,QAAQ,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;AAChF,IAAI,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;AACvD,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE;AAC1C,QAAQ,MAAM,CAAC,UAAU,CAAC,4BAA4B,CAAC;AACvD,QAAQ,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;AACxC,QAAQ,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC;AAC5C,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;AAC9C,IAAI,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACvE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACzB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,sCAAsC,CAAC,CAAC;AACzE,IAAI,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE;AAChD;AACA,SAAS,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE;AAC9D,IAAI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrF,IAAI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACjF,IAAI,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnE,IAAI,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE;AACxC,QAAQ,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE;AAClJ,aAAa,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACvC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,+DAA+D,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC7G,IAAI;AACJ;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;AAClC,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;AACzB,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;AAC9B,QAAQ,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3D,IAAI,OAAO,KAAK;AAChB;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,0BAA0B,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;AAC5D,IAAI,OAAO,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,IAAI;AAC7C,QAAQ,IAAI,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE;AACzC,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,WAAW,CAAC,KAAK,CAAC;AACjC,IAAI,CAAC,CAAC;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,2BAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE;AAC5F,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,mCAAmC,EAAE;AAC9E,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,4EAA4E,CAAC,CAAC;AAC/G,IAAI;AACJ,IAAI,IAAI,EAAE,CAAC,iBAAiB,CAAC,MAAM,KAAK,wBAAwB,EAAE;AAClE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACpG,IAAI;AACJ,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,GAAG,0BAA0B,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC;AACvH,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACnC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAC9G,IAAI;AACJ,IAAI,IAAI,aAAa,CAAC,QAAQ,EAAE,KAAK,iBAAiB,EAAE;AACxD,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAC3G,IAAI;AACJ,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,EAAE;AAC7D,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,uEAAuE,CAAC,CAAC;AAC1G,IAAI;AACJ,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,aAAa,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC5K,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;AAClC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,6FAA6F,CAAC,CAAC;AAChI,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE;AAC1F,IAAI,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,2BAA2B;AAClE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,iCAAiC;AAC5G,IAAI,IAAI,CAAC,UAAU,EAAE;AACrB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACvF,IAAI;AACJ,IAAI,IAAI,EAAE,CAAC,iBAAiB,CAAC,MAAM,KAAK,6BAA6B,EAAE;AACvE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACvF,IAAI;AACJ,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC;AACzE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oFAAoF,CAAC,CAAC;AACvH,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;AACvC,IAAI,IAAI,QAAQ,GAAG,0BAA0B,EAAE;AAC/C,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC3F,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAClD,IAAI,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACjE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,yEAAyE,CAAC,CAAC;AAC5G,IAAI;AACJ;AACA,SAAS,uCAAuC,CAAC,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE;AACvF,IAAI,IAAI,EAAE;AACV,IAAI,MAAM,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,IAAI;AAC9F,IAAI,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,CAACA,oBAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AAC3G,IAAI,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,OAAO;AAChE,IAAI,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB;AAC7D,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC9D,IAAI,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC;AACnC,IAAI,MAAM,eAAe,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;AACjF,IAAI,IAAI,uBAAuB,GAAG,CAAC;AACnC,IAAI,MAAM,gBAAgB,GAAG,EAAE;AAC/B,IAAI,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE;AAC/D,QAAQ,IAAI,EAAE,CAAC,cAAc,IAAI,WAAW,CAAC,MAAM;AACnD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACpF,QAAQ,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;AACnE,QAAQ,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC;AACtD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAC,CAAC;AACnF,QAAQ,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,YAAY,UAAU,GAAG,EAAE,CAAC,IAAI,GAAGA,oBAAM,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9H;AACA;AACA;AACA;AACA,QAAQ,IAAI,SAAS,KAAK,iBAAiB,EAAE;AAC7C,YAAY,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC;AAC5F,QAAQ;AACR,aAAa,IAAI,SAAS,KAAK,2BAA2B,EAAE;AAC5D,YAAY,2BAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC;AAC9F,QAAQ;AACR,aAAa,IAAI,SAAS,KAAK,uBAAuB,IAAI,SAAS,KAAK,sBAAsB,EAAE;AAChG,YAAY,uBAAuB,EAAE;AACrC,YAAY,MAAM,MAAM,GAAG,mCAAmC,CAAC,IAAI,EAAE,KAAK,CAAC;AAC3E,YAAY,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;AAC9C,gBAAgB,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,0DAA0D,CAAC,CAAC;AACrG,YAAY,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;AACjF,QAAQ;AACR,IAAI;AACJ,IAAI,IAAI,uBAAuB,KAAK,CAAC;AACrC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2DAA2D,CAAC,CAAC;AAC9F,IAAI,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;AAClE,IAAI,OAAO,WAAW;AACtB;AACO,eAAe,yBAAyB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE;AAC/F,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AACtC,IAAI,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAC3F;AACA;AACA,IAAI,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,MAAM,SAAS,EAAE;AACxM,IAAI,MAAM,WAAW,GAAG,uCAAuC,CAAC,EAAE,CAAC,qBAAqB,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,EAAE;AAC/H,QAAQ,KAAK,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,kBAAkB;AACvF,KAAK,CAAC;AACN,IAAI,MAAM,YAAY,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAC7G,IAAI,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,EAAE;AACtF,IAAI,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,UAAU;AACtJ,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE;AACjD,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,sEAAsE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9G,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,WAAW,CAAC;AACpE,IAAI,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE;AACtC,IAAI,MAAM,iBAAiB,GAAGA,oBAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACnE;AACA;AACA;AACA,IAAI,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,EAAE;AAC5F,IAAI,IAAI,CAAC,YAAY,EAAE;AACvB;AACA,QAAQ,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE;AAC1G,IAAI;AACJ;AACA;AACA,IAAI,MAAM,SAAS,GAAG,0BAA0B,CAAC,QAAQ,CAAC;AAC1D,IAAI,MAAM,UAAU,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,MAAM,GAAG,WAAW,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC;AACzH,IAAI,IAAI;AACR,QAAQ,MAAM,UAAU,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC3F,IAAI;AACJ,IAAI,OAAO,KAAK,EAAE;AAClB;AACA,QAAQ,IAAI,6BAA6B,CAAC,KAAK,CAAC;AAChD,YAAY,MAAM,KAAK;AACvB;AACA;AACA;AACA,QAAQ,OAAO;AACf,YAAY,OAAO,EAAE,WAAW;AAChC,YAAY,IAAI,EAAE,QAAQ;AAC1B,YAAY,oBAAoB,EAAE,SAAS;AAC3C,YAAY,iBAAiB;AAC7B,YAAY,KAAK;AACjB,YAAY,MAAM,EAAE,CAAC,6CAA6C,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACtF,SAAS;AACT,IAAI;AACJ,IAAI,IAAI,YAAY;AACpB,IAAI,IAAI;AACR,QAAQ,YAAY,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC;AAC3D,YAAY,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,CAAC,oBAAoB;AAC7F,SAAS,EAAE,WAAW,CAAC;AACvB,IAAI;AACJ,IAAI,OAAO,KAAK,EAAE;AAClB;AACA,QAAQ,OAAO;AACf,YAAY,OAAO,EAAE,WAAW;AAChC,YAAY,IAAI,EAAE,QAAQ;AAC1B,YAAY,oBAAoB,EAAE,SAAS;AAC3C,YAAY,iBAAiB;AAC7B,YAAY,KAAK;AACjB,YAAY,MAAM,EAAE,CAAC,8BAA8B,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,SAAS;AACT,IAAI;AACJ;AACA;AACA;AACA,IAAI,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE;AAC/E,QAAQ,IAAI,WAAW;AACvB,QAAQ,IAAI;AACZ,YAAY,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE;AACtE,gBAAgB,8BAA8B,EAAE,CAAC;AACjD,gBAAgB,UAAU,EAAE,WAAW;AACvC,aAAa,CAAC;AACd,YAAY,WAAW,GAAG,CAAC,EAAE,GAAG,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW;AAChJ,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB;AACA,QAAQ;AACR,QAAQ,MAAM,YAAY,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;AAC/G,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC;AAC9D,IAAI;AACJ,IAAI,OAAO;AACX,QAAQ,OAAO,EAAE,WAAW;AAC5B,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,oBAAoB,EAAE,SAAS;AACvC,QAAQ,iBAAiB;AACzB,QAAQ,KAAK;AACb,QAAQ,uBAAuB,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,YAAY,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,CAAC;AACnJ,KAAK;AACL;;;;"}

package/dist/{solana-operations-DPul1dWo.js → solana-operations-DGEGqFd9.js}

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-DlJKTmRv.js');
+var index = require('./index-yT8ZfzrL.js');
 require('axios');
 require('tweetnacl');
 require('reconnecting-websocket');
@@ -95,11 +95,36 @@ const BOUNDED_PROGRAM_MAINNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6
 const BOUNDED_PROGRAM_DEVNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6F'].join('');
 const COMPUTE_BUDGET_PROGRAM = 'ComputeBudget111111111111111111111111111111';
 const SYSTEM_PROGRAM_ID = '11111111111111111111111111111111';
+// SPL Associated Token program and the two SPL Token programs it may create an
+// account under. The server builder compiles idempotent ATA-create setup
+// instructions ahead of the Bounded write for every ATA-creating plugin.
+const ASSOCIATED_TOKEN_PROGRAM_ID = 'ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL';
+const TOKEN_PROGRAM_ID = 'TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA';
+const TOKEN_2022_PROGRAM_ID = 'TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb';
+const SPL_TOKEN_PROGRAM_IDS = new Set([TOKEN_PROGRAM_ID, TOKEN_2022_PROGRAM_ID]);
+// Idempotent ATA create carries a single instruction byte 0x01 (CreateIdempotent)
+// and exactly six accounts: funding, ATA, owner, mint, system program, token
+// program.
+const ATA_CREATE_IDEMPOTENT_DISCRIMINATOR = 1;
+const ATA_CREATE_ACCOUNT_COUNT = 6;
+// System Program `transfer` is instruction index 2 (u32 LE) followed by a u64
+// lamports amount: a 12-byte data payload over exactly two accounts.
+const SYSTEM_TRANSFER_INSTRUCTION_INDEX = 2;
+const SYSTEM_TRANSFER_DATA_LENGTH = 12;
+const SYSTEM_TRANSFER_ACCOUNT_COUNT = 2;
+// Gas-sponsorship top-up cap. Mirrors the server builder's ATA-inclusive
+// absolute maximum (0.05 SOL); the fee payer (the gas sponsor) can only move its
+// OWN lamports up to this bound, and only to a co-signing account.
+const SPONSOR_TOPUP_MAX_LAMPORTS = BigInt(50000000);
+// The four setup/write programs a server-built transaction may reference. System
+// and Associated-Token are typed-validated per instruction below; a bare
+// presence in this set is NOT sufficient authorization.
 const ALLOWED_SERVER_TX_PROGRAMS = new Set([
     BOUNDED_PROGRAM_MAINNET,
     BOUNDED_PROGRAM_DEVNET,
     COMPUTE_BUDGET_PROGRAM,
     SYSTEM_PROGRAM_ID,
+    ASSOCIATED_TOKEN_PROGRAM_ID,
 ]);
 // Canonical set_documents discriminator (single wire format: ra_indices Vec<u8>).
 const SET_DOCUMENTS_DISCRIMINATOR = '79,46,72,73,24,79,66,245';
@@ -210,11 +235,97 @@ function assertSamePathSet(label, expectedPaths, actualPaths) {
         throw new Error(`${label} Bounded instruction paths do not match requested write paths (${details})`);
     }
 }
-function deserializeAndValidateServerTransaction(serializedTransaction, VersionedTransactionClass, options) {
+/** Read a little-endian u64 as a BigInt (lamport amounts can exceed 2^53). */
+function readU64LE(bytes, offset) {
+    let value = BigInt(0);
+    for (let i = 0; i < 8; i++)
+        value |= BigInt(bytes[offset + i]) << BigInt(8 * i);
+    return value;
+}
+/**
+ * Resolve an instruction's referenced account keys against the transaction's
+ * STATIC key list. A setup instruction that reaches into an address-lookup
+ * table for any account it needs cannot be validated offline, so it fails
+ * closed: every index must resolve to a static key.
+ */
+function resolveInstructionAccounts(ix, accountKeys, label) {
+    return ix.accountKeyIndexes.map(index => {
+        if (index >= accountKeys.length) {
+            throw new Error(`${label} setup instruction references an address-lookup-table account (not allowed)`);
+        }
+        return accountKeys[index];
+    });
+}
+/**
+ * A server-built idempotent ATA create is authorized ONLY when it is exactly the
+ * canonical shape: instruction byte 0x01, six accounts, funded by the
+ * transaction fee payer, over the System and an SPL Token program, and where the
+ * account being created recomputes to the associated-token-account PDA of its
+ * stated owner and mint. Nothing else - no arbitrary account create - passes.
+ */
+function validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label) {
+    if (data.length !== 1 || data[0] !== ATA_CREATE_IDEMPOTENT_DISCRIMINATOR) {
+        throw new Error(`${label} contains a non-idempotent or malformed associated-token-account instruction`);
+    }
+    if (ix.accountKeyIndexes.length !== ATA_CREATE_ACCOUNT_COUNT) {
+        throw new Error(`${label} associated-token-account create has an unexpected account layout`);
+    }
+    const [funding, ata, owner, mint, systemProgram, tokenProgram] = resolveInstructionAccounts(ix, accountKeys, label);
+    if (!funding.equals(feePayer)) {
+        throw new Error(`${label} associated-token-account create is not funded by the transaction fee payer`);
+    }
+    if (systemProgram.toBase58() !== SYSTEM_PROGRAM_ID) {
+        throw new Error(`${label} associated-token-account create references an unexpected system program`);
+    }
+    if (!SPL_TOKEN_PROGRAM_IDS.has(tokenProgram.toBase58())) {
+        throw new Error(`${label} associated-token-account create references an unexpected token program`);
+    }
+    const [expectedAta] = PublicKeyCtor.findProgramAddressSync([owner.toBuffer(), tokenProgram.toBuffer(), mint.toBuffer()], new PublicKeyCtor(ASSOCIATED_TOKEN_PROGRAM_ID));
+    if (!ata.equals(expectedAta)) {
+        throw new Error(`${label} associated-token-account create does not derive the canonical account for its owner and mint`);
+    }
+}
+/**
+ * A server-built System Program instruction is authorized ONLY as the gas
+ * sponsor's top-up: a `transfer` FROM the transaction fee payer (the sponsor),
+ * capped at the sponsorship maximum, TO a co-signing account (the sponsored
+ * user). The fee payer can therefore only move its OWN lamports, bounded, and
+ * only to an account that itself signed the transaction - never a drain to an
+ * arbitrary address. Every other System instruction (createAccount, an
+ * uncapped or misdirected transfer, ...) is rejected.
+ */
+function validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label) {
+    const isTransfer = data.length === SYSTEM_TRANSFER_DATA_LENGTH &&
+        (data[0] | (data[1] << 8) | (data[2] << 16) | (data[3] << 24)) === SYSTEM_TRANSFER_INSTRUCTION_INDEX;
+    if (!isTransfer) {
+        throw new Error(`${label} contains an unauthorized System Program instruction`);
+    }
+    if (ix.accountKeyIndexes.length !== SYSTEM_TRANSFER_ACCOUNT_COUNT) {
+        throw new Error(`${label} contains an unauthorized System Program instruction`);
+    }
+    const [from, to] = resolveInstructionAccounts(ix, accountKeys, label);
+    if (!from.equals(feePayer)) {
+        throw new Error(`${label} System Program transfer must originate from the transaction fee payer (gas sponsor)`);
+    }
+    const lamports = readU64LE(data, 4);
+    if (lamports > SPONSOR_TOPUP_MAX_LAMPORTS) {
+        throw new Error(`${label} System Program transfer exceeds the gas-sponsorship cap`);
+    }
+    const recipientIndex = ix.accountKeyIndexes[1];
+    if (!isAccountSigner(recipientIndex) || to.equals(feePayer)) {
+        throw new Error(`${label} System Program transfer recipient must be a co-signing sponsored account`);
+    }
+}
+function deserializeAndValidateServerTransaction(serializedTransaction, web3, options) {
     var _a;
+    const { VersionedTransaction: VersionedTransactionClass, PublicKey: PublicKeyCtor } = web3;
     const transaction = VersionedTransactionClass.deserialize(index.bufferExports.Buffer.from(serializedTransaction, 'base64'));
     const { label, expectedAppId, expectedWritePaths } = options;
     const accountKeys = transaction.message.staticAccountKeys;
+    if (accountKeys.length === 0)
+        throw new Error(`${label} has no static account keys`);
+    const feePayer = accountKeys[0];
+    const isAccountSigner = (index) => transaction.message.isAccountSigner(index);
     let boundedInstructionCount = 0;
     const actualWritePaths = [];
     for (const ix of transaction.message.compiledInstructions) {
@@ -224,9 +335,17 @@ function deserializeAndValidateServerTransaction(serializedTransaction, Versione
         if (!ALLOWED_SERVER_TX_PROGRAMS.has(programId))
             throw new Error(`${label} contains unauthorized program: ${programId}`);
         const data = ix.data instanceof Uint8Array ? ix.data : index.bufferExports.Buffer.from((_a = ix.data) !== null && _a !== void 0 ? _a : []);
-        if (programId === SYSTEM_PROGRAM_ID)
-            throw new Error(`${label} contains unauthorized System Program instruction`);
-        if (programId === BOUNDED_PROGRAM_MAINNET || programId === BOUNDED_PROGRAM_DEVNET) {
+        // Typed setup checks replace the old blanket System-Program ban: each of the
+        // two setup shapes the server builder emits (idempotent ATA create, gas
+        // sponsor top-up) is bound to recompute to the values this write needs, and
+        // anything else fails closed.
+        if (programId === SYSTEM_PROGRAM_ID) {
+            validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label);
+        }
+        else if (programId === ASSOCIATED_TOKEN_PROGRAM_ID) {
+            validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label);
+        }
+        else if (programId === BOUNDED_PROGRAM_MAINNET || programId === BOUNDED_PROGRAM_DEVNET) {
             boundedInstructionCount++;
             const parsed = parseBoundedSetDocumentsInstruction(data, label);
             if (parsed.appId !== expectedAppId)
@@ -241,11 +360,11 @@ function deserializeAndValidateServerTransaction(serializedTransaction, Versione
 }
 async function handlePreBuiltTransaction(tx, authProvider, options, expectedWritePaths) {
     var _a, _b, _c, _d, _e, _f, _g, _h;
-    const { Connection, VersionedTransaction } = await import('@solana/web3.js');
+    const { Connection, VersionedTransaction, PublicKey } = await import('@solana/web3.js');
     // Honor a wallet client's immutable config snapshot for the expected app-id
     // binding and RPC endpoint (CTA-05); otherwise read the global init() config.
     const config = (_b = (_a = options === null || options === void 0 ? void 0 : options._overrides) === null || _a === void 0 ? void 0 : _a._config) !== null && _b !== void 0 ? _b : await index.getConfig();
-    const transaction = deserializeAndValidateServerTransaction(tx.serializedTransaction, VersionedTransaction, {
+    const transaction = deserializeAndValidateServerTransaction(tx.serializedTransaction, { VersionedTransaction, PublicKey }, {
         label: 'Pre-built transaction', expectedAppId: config.appId, expectedWritePaths,
     });
     const shouldSubmit = (options === null || options === void 0 ? void 0 : options.shouldSubmitTx) !== false;
@@ -336,4 +455,4 @@ async function handlePreBuiltTransaction(tx, authProvider, options, expectedWrit
 exports.deriveTransactionSignature = deriveTransactionSignature;
 exports.handlePreBuiltTransaction = handlePreBuiltTransaction;
 exports.isDefinitiveSolanaSendFailure = isDefinitiveSolanaSendFailure;
-//# sourceMappingURL=solana-operations-DPul1dWo.js.map
+//# sourceMappingURL=solana-operations-DGEGqFd9.js.map

package/dist/solana-operations-DGEGqFd9.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-operations-DGEGqFd9.js","sources":["../.rollup-tmp/client/solana-operations.js"],"sourcesContent":["import { Buffer } from 'buffer';\nimport { getConfig } from './config';\nconst BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';\n/**\n * Minimal base58 encoder, used ONLY to derive a Solana transaction signature\n * from already-signed bytes. Core deliberately does not take a `bs58`\n * dependency for eighteen lines of arithmetic.\n */\nfunction encodeBase58(bytes) {\n    if (bytes.length === 0)\n        return '';\n    const digits = [0];\n    for (const byte of bytes) {\n        let carry = byte;\n        for (let i = 0; i < digits.length; i++) {\n            carry += digits[i] << 8;\n            digits[i] = carry % 58;\n            carry = (carry / 58) | 0;\n        }\n        while (carry > 0) {\n            digits.push(carry % 58);\n            carry = (carry / 58) | 0;\n        }\n    }\n    let out = '';\n    for (let i = 0; i < bytes.length && bytes[i] === 0; i++)\n        out += BASE58_ALPHABET[0];\n    for (let i = digits.length - 1; i >= 0; i--)\n        out += BASE58_ALPHABET[digits[i]];\n    return out;\n}\n/**\n * Derive the transaction signature from the SIGNED bytes, before broadcasting.\n *\n * Without this the signature is only learned when `sendRawTransaction` resolves,\n * so an RPC that accepted the bytes but whose response was lost throws with\n * nothing recorded — and a retry builds a DIFFERENT transaction that can land\n * beside the first.\n */\nexport function deriveTransactionSignature(signedTransaction) {\n    var _a;\n    const signature = (_a = signedTransaction.signatures) === null || _a === void 0 ? void 0 : _a[0];\n    if (!signature || signature.length === 0) {\n        throw new Error('Signed Solana transaction carries no signature to broadcast');\n    }\n    if (signature.every(byte => byte === 0)) {\n        throw new Error('Signed Solana transaction carries an empty fee-payer signature');\n    }\n    return encodeBase58(Uint8Array.from(signature));\n}\n/**\n * Whether a send failure PROVES the transaction was never accepted. A preflight\n * rejection, a signature-verification failure, or an oversized/invalid\n * transaction is definitive and keeps throwing. A transport failure (timeout,\n * socket reset, aborted fetch) is ambiguous — the node may hold the bytes — and\n * must resolve as `submitted` carrying the pre-derived signature.\n *\n * \"already processed\" is deliberately NOT definitive: it means the signature\n * landed, which is the opposite of a failure.\n */\nconst DEFINITIVE_SEND_FAILURE_MARKERS = [\n    'simulation failed',\n    'preflight',\n    'blockhash not found',\n    'signature verification failure',\n    'transaction too large',\n    'invalid transaction',\n    'insufficient funds for rent',\n    'attempt to debit an account but found no record of a prior credit',\n];\nexport function isDefinitiveSolanaSendFailure(error) {\n    var _a, _b, _c;\n    const err = error;\n    if (err && Array.isArray(err.logs))\n        return true;\n    if (err && String((_a = err.name) !== null && _a !== void 0 ? _a : '') === 'SendTransactionError')\n        return true;\n    const message = String((_c = (_b = err === null || err === void 0 ? void 0 : err.message) !== null && _b !== void 0 ? _b : err) !== null && _c !== void 0 ? _c : '').toLowerCase();\n    if (!message)\n        return false;\n    if (message.includes('already been processed') || message.includes('already processed'))\n        return false;\n    return DEFINITIVE_SEND_FAILURE_MARKERS.some(marker => message.includes(marker));\n}\nfunction errorText(error) {\n    const message = error === null || error === void 0 ? void 0 : error.message;\n    return typeof message === 'string' && message.length > 0 ? message : String(error);\n}\nconst BOUNDED_PROGRAM_MAINNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6F'].join('');\nconst BOUNDED_PROGRAM_DEVNET = ['open', 'Tv7fbpYSseNHYmCZFZ1CZgj4r8D9fKNgEz1qo6F'].join('');\nconst COMPUTE_BUDGET_PROGRAM = 'ComputeBudget111111111111111111111111111111';\nconst SYSTEM_PROGRAM_ID = '11111111111111111111111111111111';\n// SPL Associated Token program and the two SPL Token programs it may create an\n// account under. The server builder compiles idempotent ATA-create setup\n// instructions ahead of the Bounded write for every ATA-creating plugin.\nconst ASSOCIATED_TOKEN_PROGRAM_ID = 'ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL';\nconst TOKEN_PROGRAM_ID = 'TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA';\nconst TOKEN_2022_PROGRAM_ID = 'TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb';\nconst SPL_TOKEN_PROGRAM_IDS = new Set([TOKEN_PROGRAM_ID, TOKEN_2022_PROGRAM_ID]);\n// Idempotent ATA create carries a single instruction byte 0x01 (CreateIdempotent)\n// and exactly six accounts: funding, ATA, owner, mint, system program, token\n// program.\nconst ATA_CREATE_IDEMPOTENT_DISCRIMINATOR = 1;\nconst ATA_CREATE_ACCOUNT_COUNT = 6;\n// System Program `transfer` is instruction index 2 (u32 LE) followed by a u64\n// lamports amount: a 12-byte data payload over exactly two accounts.\nconst SYSTEM_TRANSFER_INSTRUCTION_INDEX = 2;\nconst SYSTEM_TRANSFER_DATA_LENGTH = 12;\nconst SYSTEM_TRANSFER_ACCOUNT_COUNT = 2;\n// Gas-sponsorship top-up cap. Mirrors the server builder's ATA-inclusive\n// absolute maximum (0.05 SOL); the fee payer (the gas sponsor) can only move its\n// OWN lamports up to this bound, and only to a co-signing account.\nconst SPONSOR_TOPUP_MAX_LAMPORTS = BigInt(50000000);\n// The four setup/write programs a server-built transaction may reference. System\n// and Associated-Token are typed-validated per instruction below; a bare\n// presence in this set is NOT sufficient authorization.\nconst ALLOWED_SERVER_TX_PROGRAMS = new Set([\n    BOUNDED_PROGRAM_MAINNET,\n    BOUNDED_PROGRAM_DEVNET,\n    COMPUTE_BUDGET_PROGRAM,\n    SYSTEM_PROGRAM_ID,\n    ASSOCIATED_TOKEN_PROGRAM_ID,\n]);\n// Canonical set_documents discriminator (single wire format: ra_indices Vec<u8>).\nconst SET_DOCUMENTS_DISCRIMINATOR = '79,46,72,73,24,79,66,245';\nconst ALLOWED_BOUNDED_SET_DISCRIMINATORS = new Set([\n    SET_DOCUMENTS_DISCRIMINATOR,\n]);\nclass BorshCursor {\n    constructor(data, offset, label) {\n        this.data = data;\n        this.offset = offset;\n        this.label = label;\n    }\n    requireBytes(length, field) {\n        if (this.offset + length > this.data.length) {\n            throw new Error(`${this.label} has malformed Bounded instruction data while reading ${field}`);\n        }\n    }\n    readU8(field) { this.requireBytes(1, field); return this.data[this.offset++]; }\n    readU32(field) {\n        this.requireBytes(4, field);\n        const value = this.data[this.offset] | (this.data[this.offset + 1] << 8) |\n            (this.data[this.offset + 2] << 16) | (this.data[this.offset + 3] << 24);\n        this.offset += 4;\n        return value >>> 0;\n    }\n    skip(length, field) { this.requireBytes(length, field); this.offset += length; }\n    readString(field) {\n        const length = this.readU32(`${field} length`);\n        this.requireBytes(length, field);\n        const raw = this.data.slice(this.offset, this.offset + length);\n        this.offset += length;\n        return Buffer.from(raw).toString('utf8');\n    }\n    skipBytes(field) { this.skip(this.readU32(`${field} length`), field); }\n    isAtEnd() { return this.offset === this.data.length; }\n}\nfunction skipBoundedFieldValue(cursor) {\n    const option = cursor.readU8('operation value option');\n    if (option === 0)\n        return;\n    if (option !== 1)\n        throw new Error('Server transaction has malformed Bounded field value option');\n    const variant = cursor.readU8('operation value variant');\n    if (variant === 0 || variant === 1)\n        cursor.skip(8, 'operation numeric value');\n    else if (variant === 2)\n        cursor.skip(1, 'operation bool value');\n    else if (variant === 3)\n        cursor.readString('operation string value');\n    else if (variant === 4)\n        cursor.skip(32, 'operation address value');\n    else\n        throw new Error(`Server transaction has unsupported Bounded field value variant: ${variant}`);\n}\nfunction normalizeOnchainPath(path) {\n    let normalized = path.startsWith('/') ? path.slice(1) : path;\n    if (normalized.endsWith('*') && normalized.length > 1)\n        normalized = normalized.slice(0, -1);\n    if (normalized.endsWith('/'))\n        normalized = normalized.slice(0, -1);\n    return normalized;\n}\nfunction parseBoundedSetDocumentsInstruction(data, label) {\n    if (data.length < 8)\n        throw new Error(`${label} has malformed Bounded instruction data`);\n    const discriminator = Array.from(data.slice(0, 8)).join(',');\n    if (!ALLOWED_BOUNDED_SET_DISCRIMINATORS.has(discriminator)) {\n        throw new Error(`${label} contains unsupported Bounded instruction`);\n    }\n    const cursor = new BorshCursor(data, 8, label);\n    const appId = cursor.readString('appId');\n    const documentPaths = [];\n    const documentCount = cursor.readU32('documents length');\n    for (let i = 0; i < documentCount; i++) {\n        documentPaths.push(normalizeOnchainPath(cursor.readString('document path')));\n        const operationCount = cursor.readU32('operations length');\n        for (let j = 0; j < operationCount; j++) {\n            cursor.readString('operation key');\n            skipBoundedFieldValue(cursor);\n            cursor.skip(1, 'operation kind');\n        }\n    }\n    const deletePaths = [];\n    const deleteCount = cursor.readU32('delete paths length');\n    for (let i = 0; i < deleteCount; i++)\n        deletePaths.push(normalizeOnchainPath(cursor.readString('delete path')));\n    const txDataCount = cursor.readU32('txData length');\n    for (let i = 0; i < txDataCount; i++) {\n        cursor.readString('txData plugin function key');\n        cursor.skipBytes('txData bytes');\n        cursor.skipBytes('txData raIndices');\n    }\n    const simulate = cursor.readU8('simulate');\n    if (simulate !== 0 && simulate !== 1)\n        throw new Error(`${label} has malformed Bounded simulate flag`);\n    if (!cursor.isAtEnd())\n        throw new Error(`${label} has trailing Bounded instruction data`);\n    return { appId, documentPaths, deletePaths };\n}\nfunction assertSamePathSet(label, expectedPaths, actualPaths) {\n    const expected = new Set(expectedPaths.map(normalizeOnchainPath).filter(Boolean));\n    const actual = new Set(actualPaths.map(normalizeOnchainPath).filter(Boolean));\n    const missing = [...expected].filter(path => !actual.has(path));\n    const extra = [...actual].filter(path => !expected.has(path));\n    if (missing.length || extra.length) {\n        const details = [missing.length ? `missing paths: ${missing.join(', ')}` : '', extra.length ? `unexpected paths: ${extra.join(', ')}` : '']\n            .filter(Boolean).join('; ');\n        throw new Error(`${label} Bounded instruction paths do not match requested write paths (${details})`);\n    }\n}\n/** Read a little-endian u64 as a BigInt (lamport amounts can exceed 2^53). */\nfunction readU64LE(bytes, offset) {\n    let value = BigInt(0);\n    for (let i = 0; i < 8; i++)\n        value |= BigInt(bytes[offset + i]) << BigInt(8 * i);\n    return value;\n}\n/**\n * Resolve an instruction's referenced account keys against the transaction's\n * STATIC key list. A setup instruction that reaches into an address-lookup\n * table for any account it needs cannot be validated offline, so it fails\n * closed: every index must resolve to a static key.\n */\nfunction resolveInstructionAccounts(ix, accountKeys, label) {\n    return ix.accountKeyIndexes.map(index => {\n        if (index >= accountKeys.length) {\n            throw new Error(`${label} setup instruction references an address-lookup-table account (not allowed)`);\n        }\n        return accountKeys[index];\n    });\n}\n/**\n * A server-built idempotent ATA create is authorized ONLY when it is exactly the\n * canonical shape: instruction byte 0x01, six accounts, funded by the\n * transaction fee payer, over the System and an SPL Token program, and where the\n * account being created recomputes to the associated-token-account PDA of its\n * stated owner and mint. Nothing else - no arbitrary account create - passes.\n */\nfunction validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label) {\n    if (data.length !== 1 || data[0] !== ATA_CREATE_IDEMPOTENT_DISCRIMINATOR) {\n        throw new Error(`${label} contains a non-idempotent or malformed associated-token-account instruction`);\n    }\n    if (ix.accountKeyIndexes.length !== ATA_CREATE_ACCOUNT_COUNT) {\n        throw new Error(`${label} associated-token-account create has an unexpected account layout`);\n    }\n    const [funding, ata, owner, mint, systemProgram, tokenProgram] = resolveInstructionAccounts(ix, accountKeys, label);\n    if (!funding.equals(feePayer)) {\n        throw new Error(`${label} associated-token-account create is not funded by the transaction fee payer`);\n    }\n    if (systemProgram.toBase58() !== SYSTEM_PROGRAM_ID) {\n        throw new Error(`${label} associated-token-account create references an unexpected system program`);\n    }\n    if (!SPL_TOKEN_PROGRAM_IDS.has(tokenProgram.toBase58())) {\n        throw new Error(`${label} associated-token-account create references an unexpected token program`);\n    }\n    const [expectedAta] = PublicKeyCtor.findProgramAddressSync([owner.toBuffer(), tokenProgram.toBuffer(), mint.toBuffer()], new PublicKeyCtor(ASSOCIATED_TOKEN_PROGRAM_ID));\n    if (!ata.equals(expectedAta)) {\n        throw new Error(`${label} associated-token-account create does not derive the canonical account for its owner and mint`);\n    }\n}\n/**\n * A server-built System Program instruction is authorized ONLY as the gas\n * sponsor's top-up: a `transfer` FROM the transaction fee payer (the sponsor),\n * capped at the sponsorship maximum, TO a co-signing account (the sponsored\n * user). The fee payer can therefore only move its OWN lamports, bounded, and\n * only to an account that itself signed the transaction - never a drain to an\n * arbitrary address. Every other System instruction (createAccount, an\n * uncapped or misdirected transfer, ...) is rejected.\n */\nfunction validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label) {\n    const isTransfer = data.length === SYSTEM_TRANSFER_DATA_LENGTH &&\n        (data[0] | (data[1] << 8) | (data[2] << 16) | (data[3] << 24)) === SYSTEM_TRANSFER_INSTRUCTION_INDEX;\n    if (!isTransfer) {\n        throw new Error(`${label} contains an unauthorized System Program instruction`);\n    }\n    if (ix.accountKeyIndexes.length !== SYSTEM_TRANSFER_ACCOUNT_COUNT) {\n        throw new Error(`${label} contains an unauthorized System Program instruction`);\n    }\n    const [from, to] = resolveInstructionAccounts(ix, accountKeys, label);\n    if (!from.equals(feePayer)) {\n        throw new Error(`${label} System Program transfer must originate from the transaction fee payer (gas sponsor)`);\n    }\n    const lamports = readU64LE(data, 4);\n    if (lamports > SPONSOR_TOPUP_MAX_LAMPORTS) {\n        throw new Error(`${label} System Program transfer exceeds the gas-sponsorship cap`);\n    }\n    const recipientIndex = ix.accountKeyIndexes[1];\n    if (!isAccountSigner(recipientIndex) || to.equals(feePayer)) {\n        throw new Error(`${label} System Program transfer recipient must be a co-signing sponsored account`);\n    }\n}\nfunction deserializeAndValidateServerTransaction(serializedTransaction, web3, options) {\n    var _a;\n    const { VersionedTransaction: VersionedTransactionClass, PublicKey: PublicKeyCtor } = web3;\n    const transaction = VersionedTransactionClass.deserialize(Buffer.from(serializedTransaction, 'base64'));\n    const { label, expectedAppId, expectedWritePaths } = options;\n    const accountKeys = transaction.message.staticAccountKeys;\n    if (accountKeys.length === 0)\n        throw new Error(`${label} has no static account keys`);\n    const feePayer = accountKeys[0];\n    const isAccountSigner = (index) => transaction.message.isAccountSigner(index);\n    let boundedInstructionCount = 0;\n    const actualWritePaths = [];\n    for (const ix of transaction.message.compiledInstructions) {\n        if (ix.programIdIndex >= accountKeys.length)\n            throw new Error(`${label} has program ID in lookup table (not allowed)`);\n        const programId = accountKeys[ix.programIdIndex].toBase58();\n        if (!ALLOWED_SERVER_TX_PROGRAMS.has(programId))\n            throw new Error(`${label} contains unauthorized program: ${programId}`);\n        const data = ix.data instanceof Uint8Array ? ix.data : Buffer.from((_a = ix.data) !== null && _a !== void 0 ? _a : []);\n        // Typed setup checks replace the old blanket System-Program ban: each of the\n        // two setup shapes the server builder emits (idempotent ATA create, gas\n        // sponsor top-up) is bound to recompute to the values this write needs, and\n        // anything else fails closed.\n        if (programId === SYSTEM_PROGRAM_ID) {\n            validateSponsorTransfer(ix, data, accountKeys, feePayer, isAccountSigner, label);\n        }\n        else if (programId === ASSOCIATED_TOKEN_PROGRAM_ID) {\n            validateIdempotentAtaCreate(ix, data, accountKeys, feePayer, PublicKeyCtor, label);\n        }\n        else if (programId === BOUNDED_PROGRAM_MAINNET || programId === BOUNDED_PROGRAM_DEVNET) {\n            boundedInstructionCount++;\n            const parsed = parseBoundedSetDocumentsInstruction(data, label);\n            if (parsed.appId !== expectedAppId)\n                throw new Error(`${label} Bounded instruction appId does not match configured appId`);\n            actualWritePaths.push(...parsed.documentPaths, ...parsed.deletePaths);\n        }\n    }\n    if (boundedInstructionCount !== 1)\n        throw new Error(`${label} must contain exactly one Bounded set-documents instruction`);\n    assertSamePathSet(label, expectedWritePaths, actualWritePaths);\n    return transaction;\n}\nexport async function handlePreBuiltTransaction(tx, authProvider, options, expectedWritePaths) {\n    var _a, _b, _c, _d, _e, _f, _g, _h;\n    const { Connection, VersionedTransaction, PublicKey } = await import(\"@solana/web3.js\");\n    // Honor a wallet client's immutable config snapshot for the expected app-id\n    // binding and RPC endpoint (CTA-05); otherwise read the global init() config.\n    const config = (_b = (_a = options === null || options === void 0 ? void 0 : options._overrides) === null || _a === void 0 ? void 0 : _a._config) !== null && _b !== void 0 ? _b : await getConfig();\n    const transaction = deserializeAndValidateServerTransaction(tx.serializedTransaction, { VersionedTransaction, PublicKey }, {\n        label: 'Pre-built transaction', expectedAppId: config.appId, expectedWritePaths,\n    });\n    const shouldSubmit = (options === null || options === void 0 ? void 0 : options.shouldSubmitTx) !== false;\n    const rpcUrl = (_c = config.rpcUrl) === null || _c === void 0 ? void 0 : _c.trim();\n    const injectedRpc = (_d = options === null || options === void 0 ? void 0 : options._overrides) === null || _d === void 0 ? void 0 : _d._solanaRpc;\n    if (shouldSubmit && !rpcUrl && !injectedRpc) {\n        throw new Error(`Pre-built Solana transaction submission requires init({ rpcUrl }) for ${tx.network}`);\n    }\n    const signedTx = await authProvider.signTransaction(transaction);\n    const rawTx = signedTx.serialize();\n    const signedTransaction = Buffer.from(rawTx).toString('base64');\n    // Keep the worker's expiry fence instead of discarding it: it is what makes\n    // bounded same-signature reconciliation (and therefore the retry-safe\n    // `expired_not_landed` exit) possible at all.\n    const fence = { blockhash: tx.blockhash, lastValidBlockHeight: tx.lastValidBlockHeight };\n    if (!shouldSubmit) {\n        // Signed and NOT sent. There is no signature and nothing to mirror.\n        return { outcome: 'signed', lane: 'solana', transactionSignature: null, signedTransaction, fence };\n    }\n    // Derive the signature from the signed bytes BEFORE broadcasting, so a send\n    // whose response is lost still yields a reconcilable identifier.\n    const signature = deriveTransactionSignature(signedTx);\n    const connection = injectedRpc !== null && injectedRpc !== void 0 ? injectedRpc : new Connection(rpcUrl, 'confirmed');\n    try {\n        await connection.sendRawTransaction(rawTx, { skipPreflight: false, maxRetries: 3 });\n    }\n    catch (error) {\n        // A definitive rejection never entered the network — keep throwing.\n        if (isDefinitiveSolanaSendFailure(error))\n            throw error;\n        // Ambiguous transport outcome: the node may hold these exact bytes. Report\n        // the pre-derived signature so the caller reconciles it instead of building\n        // a second transaction that could land beside the first.\n        return {\n            outcome: 'submitted',\n            lane: 'solana',\n            transactionSignature: signature,\n            signedTransaction,\n            fence,\n            reason: `Broadcast response was lost or inconclusive: ${errorText(error)}`,\n        };\n    }\n    let confirmation;\n    try {\n        confirmation = await connection.confirmTransaction({\n            signature, blockhash: tx.blockhash, lastValidBlockHeight: tx.lastValidBlockHeight,\n        }, 'confirmed');\n    }\n    catch (error) {\n        // The bytes were accepted; only the confirmation outcome is unknown.\n        return {\n            outcome: 'submitted',\n            lane: 'solana',\n            transactionSignature: signature,\n            signedTransaction,\n            fence,\n            reason: `Confirmation outcome unknown: ${errorText(error)}`,\n        };\n    }\n    // #310: \"confirmed\" only means the network recorded the transaction, not that it\n    // succeeded - a landed-but-failed transaction carries an err. Report it as a failure\n    // (with on-chain logs) instead of a fake success, mirroring the server keypair provider.\n    if ((_e = confirmation.value) === null || _e === void 0 ? void 0 : _e.err) {\n        let logMessages;\n        try {\n            const txInfo = await connection.getTransaction(signature, {\n                maxSupportedTransactionVersion: 0,\n                commitment: 'confirmed',\n            });\n            logMessages = (_f = txInfo === null || txInfo === void 0 ? void 0 : txInfo.meta) === null || _f === void 0 ? void 0 : _f.logMessages;\n        }\n        catch (_j) {\n            // Log retrieval is diagnostic only; the on-chain error is the verdict.\n        }\n        const errorMessage = logMessages ? JSON.stringify(logMessages) : JSON.stringify(confirmation.value.err);\n        throw new Error(`Transaction failed: ${errorMessage}`);\n    }\n    return {\n        outcome: 'confirmed',\n        lane: 'solana',\n        transactionSignature: signature,\n        signedTransaction,\n        fence,\n        confirmationContextSlot: (_h = (_g = confirmation.context) === null || _g === void 0 ? void 0 : _g.slot) !== null && _h !== void 0 ? _h : 0,\n    };\n}\n"],"names":["Buffer","getConfig"],"mappings":";;;;;;;AAEA,MAAM,eAAe,GAAG,4DAA4D;AACpF;AACA;AACA;AACA;AACA;AACA,SAAS,YAAY,CAAC,KAAK,EAAE;AAC7B,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAC1B,QAAQ,OAAO,EAAE;AACjB,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC;AACtB,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC9B,QAAQ,IAAI,KAAK,GAAG,IAAI;AACxB,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChD,YAAY,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,YAAY,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE;AAClC,YAAY,KAAK,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,CAAC;AACpC,QAAQ;AACR,QAAQ,OAAO,KAAK,GAAG,CAAC,EAAE;AAC1B,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;AACnC,YAAY,KAAK,GAAG,CAAC,KAAK,GAAG,EAAE,IAAI,CAAC;AACpC,QAAQ;AACR,IAAI;AACJ,IAAI,IAAI,GAAG,GAAG,EAAE;AAChB,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;AAC3D,QAAQ,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC;AACjC,IAAI,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;AAC/C,QAAQ,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACzC,IAAI,OAAO,GAAG;AACd;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,0BAA0B,CAAC,iBAAiB,EAAE;AAC9D,IAAI,IAAI,EAAE;AACV,IAAI,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,iBAAiB,CAAC,UAAU,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AACpG,IAAI,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE;AAC9C,QAAQ,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;AACtF,IAAI;AACJ,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE;AAC7C,QAAQ,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC;AACzF,IAAI;AACJ,IAAI,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACnD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,+BAA+B,GAAG;AACxC,IAAI,mBAAmB;AACvB,IAAI,WAAW;AACf,IAAI,qBAAqB;AACzB,IAAI,gCAAgC;AACpC,IAAI,uBAAuB;AAC3B,IAAI,qBAAqB;AACzB,IAAI,6BAA6B;AACjC,IAAI,mEAAmE;AACvE,CAAC;AACM,SAAS,6BAA6B,CAAC,KAAK,EAAE;AACrD,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE;AAClB,IAAI,MAAM,GAAG,GAAG,KAAK;AACrB,IAAI,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;AACtC,QAAQ,OAAO,IAAI;AACnB,IAAI,IAAI,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,sBAAsB;AACrG,QAAQ,OAAO,IAAI;AACnB,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;AACtL,IAAI,IAAI,CAAC,OAAO;AAChB,QAAQ,OAAO,KAAK;AACpB,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;AAC3F,QAAQ,OAAO,KAAK;AACpB,IAAI,OAAO,+BAA+B,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnF;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO;AAC/E,IAAI,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;AACtF;AACA,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5F,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3F,MAAM,sBAAsB,GAAG,6CAA6C;AAC5E,MAAM,iBAAiB,GAAG,kCAAkC;AAC5D;AACA;AACA;AACA,MAAM,2BAA2B,GAAG,8CAA8C;AAClF,MAAM,gBAAgB,GAAG,6CAA6C;AACtE,MAAM,qBAAqB,GAAG,6CAA6C;AAC3E,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;AAChF;AACA;AACA;AACA,MAAM,mCAAmC,GAAG,CAAC;AAC7C,MAAM,wBAAwB,GAAG,CAAC;AAClC;AACA;AACA,MAAM,iCAAiC,GAAG,CAAC;AAC3C,MAAM,2BAA2B,GAAG,EAAE;AACtC,MAAM,6BAA6B,GAAG,CAAC;AACvC;AACA;AACA;AACA,MAAM,0BAA0B,GAAG,MAAM,CAAC,QAAQ,CAAC;AACnD;AACA;AACA;AACA,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;AAC3C,IAAI,uBAAuB;AAC3B,IAAI,sBAAsB;AAC1B,IAAI,sBAAsB;AAC1B,IAAI,iBAAiB;AACrB,IAAI,2BAA2B;AAC/B,CAAC,CAAC;AACF;AACA,MAAM,2BAA2B,GAAG,0BAA0B;AAC9D,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC;AACnD,IAAI,2BAA2B;AAC/B,CAAC,CAAC;AACF,MAAM,WAAW,CAAC;AAClB,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;AACrC,QAAQ,IAAI,CAAC,IAAI,GAAG,IAAI;AACxB,QAAQ,IAAI,CAAC,MAAM,GAAG,MAAM;AAC5B,QAAQ,IAAI,CAAC,KAAK,GAAG,KAAK;AAC1B,IAAI;AACJ,IAAI,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE;AAChC,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;AACrD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1G,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClF,IAAI,OAAO,CAAC,KAAK,EAAE;AACnB,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC;AACnC,QAAQ,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AAChF,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACnF,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC;AACxB,QAAQ,OAAO,KAAK,KAAK,CAAC;AAC1B,IAAI;AACJ,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;AACnF,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,QAAQ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACtD,QAAQ,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;AACxC,QAAQ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACtE,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM;AAC7B,QAAQ,OAAOA,0BAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AAChD,IAAI;AACJ,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1E,IAAI,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzD;AACA,SAAS,qBAAqB,CAAC,MAAM,EAAE;AACvC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;AAC1D,IAAI,IAAI,MAAM,KAAK,CAAC;AACpB,QAAQ;AACR,IAAI,IAAI,MAAM,KAAK,CAAC;AACpB,QAAQ,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;AACtF,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC;AAC5D,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;AACtC,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,yBAAyB,CAAC;AACjD,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,sBAAsB,CAAC;AAC9C,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC;AACnD,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,yBAAyB,CAAC;AAClD;AACA,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,gEAAgE,EAAE,OAAO,CAAC,CAAC,CAAC;AACrG;AACA,SAAS,oBAAoB,CAAC,IAAI,EAAE;AACpC,IAAI,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI;AAChE,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;AACzD,QAAQ,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5C,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;AAChC,QAAQ,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5C,IAAI,OAAO,UAAU;AACrB;AACA,SAAS,mCAAmC,CAAC,IAAI,EAAE,KAAK,EAAE;AAC1D,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;AACvB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC1E,IAAI,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAChE,IAAI,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE;AAChE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC5E,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;AAClD,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;AAC5C,IAAI,MAAM,aAAa,GAAG,EAAE;AAC5B,IAAI,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;AAC5D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE;AAC5C,QAAQ,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;AACpF,QAAQ,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;AAClE,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE;AACjD,YAAY,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;AAC9C,YAAY,qBAAqB,CAAC,MAAM,CAAC;AACzC,YAAY,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,gBAAgB,CAAC;AAC5C,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,WAAW,GAAG,EAAE;AAC1B,IAAI,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;AAC7D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE;AACxC,QAAQ,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;AAChF,IAAI,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;AACvD,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE;AAC1C,QAAQ,MAAM,CAAC,UAAU,CAAC,4BAA4B,CAAC;AACvD,QAAQ,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;AACxC,QAAQ,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC;AAC5C,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;AAC9C,IAAI,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACvE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACzB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,sCAAsC,CAAC,CAAC;AACzE,IAAI,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE;AAChD;AACA,SAAS,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE;AAC9D,IAAI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrF,IAAI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACjF,IAAI,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnE,IAAI,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE;AACxC,QAAQ,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE;AAClJ,aAAa,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACvC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,+DAA+D,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC7G,IAAI;AACJ;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;AAClC,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;AACzB,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;AAC9B,QAAQ,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3D,IAAI,OAAO,KAAK;AAChB;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,0BAA0B,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;AAC5D,IAAI,OAAO,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,IAAI;AAC7C,QAAQ,IAAI,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE;AACzC,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,WAAW,CAAC,KAAK,CAAC;AACjC,IAAI,CAAC,CAAC;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,2BAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE;AAC5F,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,mCAAmC,EAAE;AAC9E,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,4EAA4E,CAAC,CAAC;AAC/G,IAAI;AACJ,IAAI,IAAI,EAAE,CAAC,iBAAiB,CAAC,MAAM,KAAK,wBAAwB,EAAE;AAClE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACpG,IAAI;AACJ,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,GAAG,0BAA0B,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC;AACvH,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACnC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAC9G,IAAI;AACJ,IAAI,IAAI,aAAa,CAAC,QAAQ,EAAE,KAAK,iBAAiB,EAAE;AACxD,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAC3G,IAAI;AACJ,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,EAAE;AAC7D,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,uEAAuE,CAAC,CAAC;AAC1G,IAAI;AACJ,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,aAAa,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,aAAa,CAAC,2BAA2B,CAAC,CAAC;AAC5K,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;AAClC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,6FAA6F,CAAC,CAAC;AAChI,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE;AAC1F,IAAI,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,2BAA2B;AAClE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,iCAAiC;AAC5G,IAAI,IAAI,CAAC,UAAU,EAAE;AACrB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACvF,IAAI;AACJ,IAAI,IAAI,EAAE,CAAC,iBAAiB,CAAC,MAAM,KAAK,6BAA6B,EAAE;AACvE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACvF,IAAI;AACJ,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,0BAA0B,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC;AACzE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oFAAoF,CAAC,CAAC;AACvH,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;AACvC,IAAI,IAAI,QAAQ,GAAG,0BAA0B,EAAE;AAC/C,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC3F,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAClD,IAAI,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACjE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,yEAAyE,CAAC,CAAC;AAC5G,IAAI;AACJ;AACA,SAAS,uCAAuC,CAAC,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE;AACvF,IAAI,IAAI,EAAE;AACV,IAAI,MAAM,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,IAAI;AAC9F,IAAI,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,CAACA,0BAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AAC3G,IAAI,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,OAAO;AAChE,IAAI,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB;AAC7D,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC9D,IAAI,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC;AACnC,IAAI,MAAM,eAAe,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;AACjF,IAAI,IAAI,uBAAuB,GAAG,CAAC;AACnC,IAAI,MAAM,gBAAgB,GAAG,EAAE;AAC/B,IAAI,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE;AAC/D,QAAQ,IAAI,EAAE,CAAC,cAAc,IAAI,WAAW,CAAC,MAAM;AACnD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACpF,QAAQ,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;AACnE,QAAQ,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC;AACtD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAC,CAAC;AACnF,QAAQ,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,YAAY,UAAU,GAAG,EAAE,CAAC,IAAI,GAAGA,0BAAM,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9H;AACA;AACA;AACA;AACA,QAAQ,IAAI,SAAS,KAAK,iBAAiB,EAAE;AAC7C,YAAY,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC;AAC5F,QAAQ;AACR,aAAa,IAAI,SAAS,KAAK,2BAA2B,EAAE;AAC5D,YAAY,2BAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC;AAC9F,QAAQ;AACR,aAAa,IAAI,SAAS,KAAK,uBAAuB,IAAI,SAAS,KAAK,sBAAsB,EAAE;AAChG,YAAY,uBAAuB,EAAE;AACrC,YAAY,MAAM,MAAM,GAAG,mCAAmC,CAAC,IAAI,EAAE,KAAK,CAAC;AAC3E,YAAY,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;AAC9C,gBAAgB,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,0DAA0D,CAAC,CAAC;AACrG,YAAY,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;AACjF,QAAQ;AACR,IAAI;AACJ,IAAI,IAAI,uBAAuB,KAAK,CAAC;AACrC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2DAA2D,CAAC,CAAC;AAC9F,IAAI,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;AAClE,IAAI,OAAO,WAAW;AACtB;AACO,eAAe,yBAAyB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE;AAC/F,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AACtC,IAAI,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAC3F;AACA;AACA,IAAI,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,MAAMC,eAAS,EAAE;AACxM,IAAI,MAAM,WAAW,GAAG,uCAAuC,CAAC,EAAE,CAAC,qBAAqB,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,EAAE;AAC/H,QAAQ,KAAK,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,kBAAkB;AACvF,KAAK,CAAC;AACN,IAAI,MAAM,YAAY,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAC7G,IAAI,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,EAAE;AACtF,IAAI,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,UAAU;AACtJ,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE;AACjD,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,sEAAsE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9G,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,WAAW,CAAC;AACpE,IAAI,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE;AACtC,IAAI,MAAM,iBAAiB,GAAGD,0BAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACnE;AACA;AACA;AACA,IAAI,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,EAAE;AAC5F,IAAI,IAAI,CAAC,YAAY,EAAE;AACvB;AACA,QAAQ,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE;AAC1G,IAAI;AACJ;AACA;AACA,IAAI,MAAM,SAAS,GAAG,0BAA0B,CAAC,QAAQ,CAAC;AAC1D,IAAI,MAAM,UAAU,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,MAAM,GAAG,WAAW,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC;AACzH,IAAI,IAAI;AACR,QAAQ,MAAM,UAAU,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC3F,IAAI;AACJ,IAAI,OAAO,KAAK,EAAE;AAClB;AACA,QAAQ,IAAI,6BAA6B,CAAC,KAAK,CAAC;AAChD,YAAY,MAAM,KAAK;AACvB;AACA;AACA;AACA,QAAQ,OAAO;AACf,YAAY,OAAO,EAAE,WAAW;AAChC,YAAY,IAAI,EAAE,QAAQ;AAC1B,YAAY,oBAAoB,EAAE,SAAS;AAC3C,YAAY,iBAAiB;AAC7B,YAAY,KAAK;AACjB,YAAY,MAAM,EAAE,CAAC,6CAA6C,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACtF,SAAS;AACT,IAAI;AACJ,IAAI,IAAI,YAAY;AACpB,IAAI,IAAI;AACR,QAAQ,YAAY,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC;AAC3D,YAAY,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,CAAC,oBAAoB;AAC7F,SAAS,EAAE,WAAW,CAAC;AACvB,IAAI;AACJ,IAAI,OAAO,KAAK,EAAE;AAClB;AACA,QAAQ,OAAO;AACf,YAAY,OAAO,EAAE,WAAW;AAChC,YAAY,IAAI,EAAE,QAAQ;AAC1B,YAAY,oBAAoB,EAAE,SAAS;AAC3C,YAAY,iBAAiB;AAC7B,YAAY,KAAK;AACjB,YAAY,MAAM,EAAE,CAAC,8BAA8B,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,SAAS;AACT,IAAI;AACJ;AACA;AACA;AACA,IAAI,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE;AAC/E,QAAQ,IAAI,WAAW;AACvB,QAAQ,IAAI;AACZ,YAAY,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE;AACtE,gBAAgB,8BAA8B,EAAE,CAAC;AACjD,gBAAgB,UAAU,EAAE,WAAW;AACvC,aAAa,CAAC;AACd,YAAY,WAAW,GAAG,CAAC,EAAE,GAAG,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW;AAChJ,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB;AACA,QAAQ;AACR,QAAQ,MAAM,YAAY,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;AAC/G,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC;AAC9D,IAAI;AACJ,IAAI,OAAO;AACX,QAAQ,OAAO,EAAE,WAAW;AAC5B,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,oBAAoB,EAAE,SAAS;AACvC,QAAQ,iBAAiB;AACzB,QAAQ,KAAK;AACb,QAAQ,uBAAuB,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,YAAY,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,CAAC;AACnJ,KAAK;AACL;;;;;;"}

package/dist/utils/refresh-error.d.ts

@@ -0,0 +1,9 @@
+export declare function isDefinitiveRejection(err: unknown): boolean;
+export declare const TRANSPORT_RETENTION_GRACE_MS: number;
+/**
+ * May a session whose refresh failed WITHOUT a definitive rejection be kept?
+ *
+ * `expSeconds` is the id token's `exp` claim. Fails closed: a missing or
+ * non-numeric expiry is not a usable bound, so such a session is never retained.
+ */
+export declare function mayRetainAfterTransportFailure(expSeconds: unknown, now?: number): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bounded-sh/core",
-  "version": "0.0.69",
+  "version": "0.0.71",
   "description": "Shared client, data-plane, and transport primitives for Bounded, the full-stack app builder and runtime for AI-built apps: policy-enforced operations, files, functions, and realtime.",
   "homepage": "https://bounded.sh/docs/sdk",
   "main": "./dist/index.js",
@@ -16,7 +16,7 @@
   "scripts": {
     "build": "rm -rf ./dist ./.rollup-tmp && tsc -p tsconfig.build.json --outDir .rollup-tmp --declarationDir .rollup-tmp --emitDeclarationOnly false && rollup -c && tsc -p tsconfig.build.json --emitDeclarationOnly --declarationDir dist && rm -rf ./.rollup-tmp",
     "watch": "rollup -c -w",
-    "test": "node src/client/run-config-network-test.mjs && node src/client/run-read-principal-test.mjs && node src/client/run-principal-collision-test.mjs && node src/client/run-abortable-read-test.mjs && node src/utils/run-api-abort-test.mjs && node src/utils/run-api-transient-get-retry-test.mjs && node src/utils/run-auth-api-issuer-switch-test.mjs && node src/utils/run-auth-api-server-credential-test.mjs && node src/utils/run-auth-api-revoke-test.mjs && node src/utils/run-session-manager-binding-test.mjs && node src/utils/run-web-session-manager-signout-test.mjs && node src/utils/run-auth-api-refresh-per-token-test.mjs && node src/utils/run-core-platform-encode-test.mjs && node src/utils/rn-session-manager-example.source.test.mjs && node src/utils/run-session-protocol-test.mjs && node src/utils/run-auth-token-freshness-test.mjs && node src/utils/run-api-401-recovery-test.mjs && node src/utils/run-server-session-manager-test.mjs && node src/utils/api-refresh-inflight-key.source.test.mjs && node src/client/run-row-shape-test.mjs && node src/client/run-transport-test.mjs && node src/client/run-queries-coalesce-test.mjs && node src/client/run-runexpression-overrides-test.mjs && node src/client/run-subscribe-query-test.mjs && node src/client/subscribe-query-defaults.source.test.mjs && node src/client/run-public-export-surface-test.mjs && node src/client/run-decline-cause-test.mjs && node src/client/run-live-auth-test.mjs && node src/client/run-live-view-principal-test.mjs && node src/client/run-subscription-auth-error-test.mjs && node src/client/run-subscription-confirmation-retry-test.mjs && node src/client/subscription-handoff-grace.source.test.mjs && node src/client/run-onchain-validation-test.mjs && node src/client/run-set-result-test.mjs && node src/client/run-reconcile-set-result-test.mjs && node src/client/run-set-file-result-test.mjs && node src/client/run-set-result-types-test.mjs && node src/utils/evm/run-evm-utils-test.mjs && node src/client/websocket-auth-url.test.mjs && node src/client/run-create-client-http-test.mjs && node src/client/run-create-client-subscribe-test.mjs && node src/client/run-wallet-config-binding-test.mjs && node src/client/run-functions-timeout-test.mjs && node src/run-user-address-nullable-test.mjs",
+    "test": "node src/client/run-config-network-test.mjs && node src/client/run-read-principal-test.mjs && node src/client/run-principal-collision-test.mjs && node src/client/run-abortable-read-test.mjs && node src/utils/run-api-abort-test.mjs && node src/utils/run-api-transient-get-retry-test.mjs && node src/utils/run-auth-api-issuer-switch-test.mjs && node src/utils/run-auth-api-server-credential-test.mjs && node src/utils/run-auth-api-revoke-test.mjs && node src/utils/run-session-manager-binding-test.mjs && node src/utils/run-web-session-manager-signout-test.mjs && node src/utils/run-web-session-manager-refresh-transport-test.mjs && node src/utils/refresh-error.source.test.mjs && node src/utils/run-auth-api-refresh-per-token-test.mjs && node src/utils/run-core-platform-encode-test.mjs && node src/utils/rn-session-manager-example.source.test.mjs && node src/utils/run-session-protocol-test.mjs && node src/utils/run-auth-token-freshness-test.mjs && node src/utils/run-api-401-recovery-test.mjs && node src/utils/run-server-session-manager-test.mjs && node src/utils/api-refresh-inflight-key.source.test.mjs && node src/client/run-row-shape-test.mjs && node src/client/run-transport-test.mjs && node src/client/run-queries-coalesce-test.mjs && node src/client/run-runexpression-overrides-test.mjs && node src/client/run-subscribe-query-test.mjs && node src/client/subscribe-query-defaults.source.test.mjs && node src/client/run-public-export-surface-test.mjs && node src/client/run-decline-cause-test.mjs && node src/client/run-live-auth-test.mjs && node src/client/run-live-view-principal-test.mjs && node src/client/run-subscription-auth-error-test.mjs && node src/client/run-subscription-confirmation-retry-test.mjs && node src/client/subscription-handoff-grace.source.test.mjs && node src/client/run-onchain-validation-test.mjs && node src/client/run-set-result-test.mjs && node src/client/run-reconcile-set-result-test.mjs && node src/client/run-set-file-result-test.mjs && node src/client/run-set-result-types-test.mjs && node src/utils/evm/run-evm-utils-test.mjs && node src/client/websocket-auth-url.test.mjs && node src/client/run-create-client-http-test.mjs && node src/client/run-create-client-subscribe-test.mjs && node src/client/run-wallet-config-binding-test.mjs && node src/client/run-functions-timeout-test.mjs && node src/run-user-address-nullable-test.mjs",
     "prepare": "npm run build"
   },
   "files": [