@brightchain/brightchain-lib 0.29.10 → 0.29.19

package/src/lib/ledger/ledger.js

@@ -0,0 +1,555 @@
+"use strict";
+/**
+ * @fileoverview Ledger — append-only blockchain ledger persisted as
+ * RawDataBlock instances within any IBlockStore implementation.
+ *
+ * Each entry is serialized, padded to BlockSize, and stored as a RawDataBlock.
+ * A metadata block tracks the chain head, length, ledger ID, and the full
+ * sequenceNumber → blockChecksum index for cold-start reconstruction.
+ *
+ * The metadata block is stored at a deterministic Checksum derived from the
+ * ledgerId so that `Ledger.load()` can locate it without external state.
+ * Because the metadata content changes on each append while the storage key
+ * stays fixed, the metadata block uses a validation-exempt RawDataBlock
+ * subclass that allows a caller-specified checksum to differ from the
+ * content hash.
+ *
+ * Governance support: the Ledger enforces role-based access control via an
+ * AuthorizedSignerSet. The genesis entry must be a governance genesis payload
+ * containing the initial signer set and quorum policy. Subsequent governance
+ * entries require admin role and quorum satisfaction.
+ *
+ * @see Design: Block Chain Ledger — Ledger
+ * @see Requirements 5.1–5.6, 6.1–6.6, 7.1–7.5, 10.1–10.4, 11.2–11.4,
+ *      12.2–12.8, 13.1–13.9, 14.1–14.7, 15.1–15.5, 17.6–17.9, 18.5–18.7
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Ledger = void 0;
+const rawData_1 = require("../blocks/rawData");
+const blockDataType_1 = require("../enumerations/blockDataType");
+const blockType_1 = require("../enumerations/blockType");
+const ledgerError_1 = require("../errors/ledgerError");
+const checksum_service_1 = require("../services/checksum.service");
+const checksum_1 = require("../types/checksum");
+const xorUtils_1 = require("../utils/xorUtils");
+const authorizedSignerSet_1 = require("./authorizedSignerSet");
+const governancePayloadSerializer_1 = require("./governancePayloadSerializer");
+/** Magic bytes identifying a ledger metadata block: "LMET" in ASCII. */
+const METADATA_MAGIC = 0x4c4d4554;
+/** Current metadata format version. */
+const METADATA_VERSION = 0x0001;
+/** SHA3-512 hash length in bytes. */
+const HASH_LENGTH = 64;
+/**
+ * A RawDataBlock subclass that skips checksum validation.
+ *
+ * Used exclusively for the ledger metadata block, which is stored at a
+ * deterministic checksum (derived from the ledgerId) that intentionally
+ * differs from the SHA3-512 of its content. The MemoryBlockStore calls
+ * `block.validate()` during `setData()`; this subclass makes that a no-op
+ * so the block can be stored under the deterministic key.
+ *
+ * @internal
+ */
+class LedgerMetadataBlock extends rawData_1.RawDataBlock {
+    constructor(blockSize, data, checksum) {
+        super(blockSize, data, undefined, checksum, blockType_1.BlockType.RawData, blockDataType_1.BlockDataType.RawData, true, true);
+    }
+    validateSync() {
+        // No-op: metadata block uses a deterministic key, not a content hash.
+    }
+    async validateAsync() {
+        // No-op
+    }
+    validate() {
+        // No-op
+    }
+}
+/**
+ * Append-only blockchain ledger backed by an IBlockStore.
+ *
+ * Maintains an in-memory index (sequenceNumber → block Checksum) for O(1)
+ * lookups and persists a metadata block after each append for cold-start
+ * reconstruction via `Ledger.load()`.
+ *
+ * Enforces role-based access control via an AuthorizedSignerSet when
+ * governance is enabled (i.e., when a GovernancePayloadSerializer is provided).
+ */
+class Ledger {
+    store;
+    blockSize;
+    serializer;
+    ledgerId;
+    governanceSerializer;
+    index = new Map();
+    checksumService = new checksum_service_1.ChecksumService();
+    _length = 0;
+    _head = null;
+    _headEntryHash = null;
+    _authorizedSignerSet = null;
+    constructor(store, blockSize, serializer, ledgerId, governanceSerializer) {
+        this.store = store;
+        this.blockSize = blockSize;
+        this.serializer = serializer;
+        this.ledgerId = ledgerId;
+        this.governanceSerializer = governanceSerializer;
+    }
+    // ── Public getters ────────────────────────────────────────────────
+    /** Current chain length. */
+    get length() {
+        return this._length;
+    }
+    /** Head block Checksum (block storage key), or null if empty. */
+    get head() {
+        return this._head;
+    }
+    /** Current quorum policy, or undefined if governance not initialized. */
+    get quorumPolicy() {
+        return this._authorizedSignerSet?.quorumPolicy;
+    }
+    // ── Append ────────────────────────────────────────────────────────
+    /**
+     * Append a new entry to the ledger.
+     * Returns the Checksum of the stored block.
+     *
+     * If governance is enabled:
+     * - Genesis entry (sequenceNumber 0) must be a governance genesis payload.
+     * - Subsequent entries require the signer to be authorized (active admin or writer).
+     */
+    async append(payload, signer) {
+        const sequenceNumber = this._length;
+        // Governance: handle genesis entry
+        if (sequenceNumber === 0 && this.governanceSerializer) {
+            return this.appendGenesisEntry(payload, signer);
+        }
+        // Governance: check authorization for non-genesis entries
+        if (this._authorizedSignerSet) {
+            if (!this._authorizedSignerSet.canAppend(signer.publicKey)) {
+                throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedSigner, 'Signer is not authorized to append entries');
+            }
+        }
+        return this.appendInternal(payload, signer);
+    }
+    /**
+     * Append a governance entry. Requires admin role and quorum satisfaction.
+     *
+     * @param actions - Governance actions to apply
+     * @param primarySigner - The primary signer (must be active admin)
+     * @param cosigners - Additional signers for quorum (each provides their own signature over the actions)
+     */
+    async appendGovernance(actions, primarySigner, cosigners) {
+        if (!this.governanceSerializer) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedGovernance, 'Governance is not enabled on this ledger');
+        }
+        if (!this._authorizedSignerSet) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedGovernance, 'Authorized signer set not initialized (no genesis entry)');
+        }
+        // Verify primary signer is active admin
+        if (!this._authorizedSignerSet.isActiveAdmin(primarySigner.publicKey)) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedGovernance, 'Primary signer is not an active admin');
+        }
+        // Validate actions speculatively (clone to check safety constraints)
+        const speculative = this._authorizedSignerSet.clone();
+        for (const action of actions) {
+            speculative.applyAction(action); // throws on safety violation
+        }
+        // Serialize actions for signing
+        const actionsForSigning = this.governanceSerializer.serializeActionsForSigning(actions);
+        // Collect cosignatures
+        const cosignatures = [];
+        // Primary signer signs the actions
+        const primarySignature = primarySigner.sign(actionsForSigning);
+        cosignatures.push({
+            signerPublicKey: primarySigner.publicKey,
+            signature: primarySignature,
+        });
+        // Add additional cosigner signatures
+        if (cosigners) {
+            for (const cosigner of cosigners) {
+                if (!this._authorizedSignerSet.isActiveAdmin(cosigner.signer.publicKey)) {
+                    throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedGovernance, 'Cosigner is not an active admin');
+                }
+                cosignatures.push({
+                    signerPublicKey: cosigner.signer.publicKey,
+                    signature: cosigner.signature,
+                });
+            }
+        }
+        // Verify quorum
+        const signerKeys = cosignatures.map((c) => c.signerPublicKey);
+        if (!this._authorizedSignerSet.verifyQuorum(signerKeys)) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.QuorumNotMet, `Quorum not met: have ${signerKeys.length} signatures, need ${this._authorizedSignerSet.requiredSignatures}`);
+        }
+        // Build governance payload
+        const governancePayload = this.governanceSerializer.serialize({
+            actions,
+            cosignatures,
+        });
+        // Append as regular entry
+        const checksum = await this.appendInternal(governancePayload, primarySigner);
+        // Apply governance actions to the live signer set (after successful persistence)
+        for (const action of actions) {
+            this._authorizedSignerSet.applyAction(action);
+        }
+        return checksum;
+    }
+    // ── Signer info ───────────────────────────────────────────────────
+    /** Get info about a specific signer. */
+    getSignerInfo(publicKey) {
+        return this._authorizedSignerSet?.getSigner(publicKey);
+    }
+    /** Get the full current authorized signer set. */
+    getAuthorizedSigners() {
+        return this._authorizedSignerSet?.getAllSigners() ?? [];
+    }
+    // ── Read operations ───────────────────────────────────────────────
+    /**
+     * Get entry by sequence number.
+     * @throws LedgerError if not found
+     */
+    async getEntry(sequenceNumber) {
+        const blockChecksum = this.index.get(sequenceNumber);
+        if (blockChecksum === undefined) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.EntryNotFound, `Entry with sequenceNumber ${sequenceNumber} not found`);
+        }
+        const block = await this.store.getData(blockChecksum);
+        const unpadded = (0, xorUtils_1.unpadCblData)(block.data);
+        return this.serializer.deserialize(unpadded);
+    }
+    /**
+     * Get entries in range [start, end] inclusive.
+     * @throws LedgerError for invalid range
+     */
+    async getEntries(start, end) {
+        if (start > end) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.InvalidRange, `Invalid range: start (${start}) > end (${end})`);
+        }
+        if (start < 0 || end >= this._length) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.InvalidRange, `Range [${start}, ${end}] out of bounds for ledger of length ${this._length}`);
+        }
+        const entries = [];
+        for (let i = start; i <= end; i++) {
+            entries.push(await this.getEntry(i));
+        }
+        return entries;
+    }
+    /**
+     * Get the most recent entry, or null if empty.
+     */
+    async getLatestEntry() {
+        if (this._length === 0) {
+            return null;
+        }
+        return this.getEntry(this._length - 1);
+    }
+    // ── Private: genesis entry handling ───────────────────────────────
+    /**
+     * Handle the genesis entry for a governance-enabled ledger.
+     * The payload must be a governance genesis payload containing the
+     * initial signer set and quorum policy.
+     */
+    async appendGenesisEntry(payload, signer) {
+        if (!this.governanceSerializer) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedGovernance, 'Governance serializer not available');
+        }
+        // Verify payload is a governance genesis payload
+        if (!governancePayloadSerializer_1.GovernancePayloadSerializer.isGovernancePayload(payload)) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedGovernance, 'Genesis entry must be a governance genesis payload (0x01 prefix)');
+        }
+        // Deserialize to extract genesis data
+        const parsed = this.governanceSerializer.deserialize(payload);
+        if (!parsed.genesis) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedGovernance, 'Genesis entry must use genesis subtype (0x00)');
+        }
+        // Initialize the authorized signer set
+        this._authorizedSignerSet = new authorizedSignerSet_1.AuthorizedSignerSet(parsed.genesis.signers, parsed.genesis.quorumPolicy);
+        // Verify the signer is in the initial set and authorized
+        if (!this._authorizedSignerSet.canAppend(signer.publicKey)) {
+            // Roll back
+            this._authorizedSignerSet = null;
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.UnauthorizedSigner, 'Genesis signer is not authorized in the initial signer set');
+        }
+        // Append the genesis entry
+        return this.appendInternal(payload, signer);
+    }
+    // ── Private: core append logic ────────────────────────────────────
+    /**
+     * Internal append logic shared by regular and governance appends.
+     * Does NOT check authorization — callers must do that first.
+     */
+    async appendInternal(payload, signer) {
+        const sequenceNumber = this._length;
+        const previousEntryHash = this._headEntryHash;
+        const timestamp = new Date();
+        // 1. Compute entryHash
+        const partial = {
+            sequenceNumber,
+            timestamp,
+            previousEntryHash,
+            signerPublicKey: signer.publicKey,
+            payload,
+        };
+        const entryHash = this.serializer.computeEntryHash(partial);
+        // 2. Sign the entryHash
+        const signature = signer.sign(entryHash.toUint8Array());
+        // 3. Build full entry
+        const entry = { ...partial, entryHash, signature };
+        // 4. Serialize and pad
+        const serialized = this.serializer.serialize(entry);
+        const padded = (0, xorUtils_1.padToBlockSize)(serialized, this.blockSize);
+        // 5. Create RawDataBlock and store
+        const block = new rawData_1.RawDataBlock(this.blockSize, padded, undefined, undefined, undefined, undefined, true, true, this.checksumService);
+        const blockChecksum = block.idChecksum;
+        // Req 5.5: On BlockStore failure, do not update chain head or index.
+        await this.store.setData(block);
+        // 6. Update in-memory state (only after successful store)
+        this.index.set(sequenceNumber, blockChecksum);
+        this._length = sequenceNumber + 1;
+        this._head = blockChecksum;
+        this._headEntryHash = entryHash;
+        // 7. Persist metadata block
+        try {
+            await this.persistMetadata();
+        }
+        catch {
+            // Metadata persistence failure is non-fatal for the append itself;
+            // the entry is already stored.
+        }
+        return blockChecksum;
+    }
+    // ── Metadata persistence ──────────────────────────────────────────
+    /**
+     * Compute the deterministic storage key for this ledger's metadata block.
+     * The key is SHA3-512("ledger-meta:" + ledgerId).
+     */
+    computeMetadataKey() {
+        return this.checksumService.calculateChecksumForString(`ledger-meta:${this.ledgerId}`);
+    }
+    /**
+     * Serialize the current metadata into binary.
+     *
+     * Format:
+     *   magic           4 bytes  0x4C4D4554 ("LMET")
+     *   version         2 bytes  0x0001
+     *   ledgerIdLength  4 bytes  uint32 BE
+     *   ledgerId        var      UTF-8
+     *   length          4 bytes  uint32 BE
+     *   hasHead         1 byte   0x00 or 0x01
+     *   headChecksum    0|64     SHA3-512 bytes (block checksum of head)
+     *   index entries   var      seqNum (uint32 BE) + blockChecksum (64 bytes)
+     */
+    serializeMetadata() {
+        const encoder = new TextEncoder();
+        const ledgerIdBytes = encoder.encode(this.ledgerId);
+        const headBytes = this._head ? this._head.toUint8Array() : null;
+        const indexEntrySize = 4 + HASH_LENGTH;
+        const indexSize = this._length * indexEntrySize;
+        const size = 4 +
+            2 +
+            4 +
+            ledgerIdBytes.length +
+            4 +
+            1 +
+            (headBytes ? HASH_LENGTH : 0) +
+            indexSize;
+        const buf = new Uint8Array(size);
+        const view = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+        let offset = 0;
+        view.setUint32(offset, METADATA_MAGIC, false);
+        offset += 4;
+        view.setUint16(offset, METADATA_VERSION, false);
+        offset += 2;
+        view.setUint32(offset, ledgerIdBytes.length, false);
+        offset += 4;
+        buf.set(ledgerIdBytes, offset);
+        offset += ledgerIdBytes.length;
+        view.setUint32(offset, this._length, false);
+        offset += 4;
+        if (headBytes) {
+            buf[offset] = 0x01;
+            offset += 1;
+            buf.set(headBytes, offset);
+            offset += HASH_LENGTH;
+        }
+        else {
+            buf[offset] = 0x00;
+            offset += 1;
+        }
+        for (let i = 0; i < this._length; i++) {
+            const checksum = this.index.get(i);
+            if (checksum) {
+                view.setUint32(offset, i, false);
+                offset += 4;
+                buf.set(checksum.toUint8Array(), offset);
+                offset += HASH_LENGTH;
+            }
+        }
+        return buf;
+    }
+    /**
+     * Persist the metadata block to the store under a deterministic key.
+     */
+    async persistMetadata() {
+        const metadataBytes = this.serializeMetadata();
+        const padded = (0, xorUtils_1.padToBlockSize)(metadataBytes, this.blockSize);
+        const metadataKey = this.computeMetadataKey();
+        // Delete old metadata block first (same key, different content)
+        try {
+            await this.store.deleteData(metadataKey);
+        }
+        catch {
+            // May not exist yet — that's fine
+        }
+        const block = new LedgerMetadataBlock(this.blockSize, padded, metadataKey);
+        await this.store.setData(block);
+    }
+    // ── Static load ───────────────────────────────────────────────────
+    /**
+     * Load ledger state from the block store.
+     *
+     * 1. Compute metadata block key from ledgerId
+     * 2. Try to retrieve metadata block from store
+     * 3. If not found, return empty ledger
+     * 4. Parse metadata to get head checksum, length, and index
+     * 5. Restore headEntryHash by reading the head entry
+     * 6. Replay governance entries to reconstruct AuthorizedSignerSet
+     * 7. Return populated ledger
+     */
+    static async load(store, blockSize, serializer, ledgerId, governanceSerializer) {
+        const ledger = new Ledger(store, blockSize, serializer, ledgerId, governanceSerializer);
+        const metadataKey = ledger.computeMetadataKey();
+        const hasMetadata = await store.has(metadataKey);
+        if (!hasMetadata) {
+            return ledger; // Empty ledger (Req 7.5)
+        }
+        let metadataBlock;
+        try {
+            metadataBlock = await store.getData(metadataKey);
+        }
+        catch {
+            return ledger; // Treat as empty if unreadable
+        }
+        const metadataBytes = (0, xorUtils_1.unpadCblData)(metadataBlock.data);
+        const parsed = Ledger.parseMetadata(metadataBytes);
+        if (parsed.length === 0 || parsed.headChecksum === null) {
+            return ledger;
+        }
+        // Populate ledger state
+        ledger._length = parsed.length;
+        ledger._head = parsed.headChecksum;
+        for (const [seqNum, blockChecksum] of parsed.index) {
+            ledger.index.set(seqNum, blockChecksum);
+        }
+        // Restore headEntryHash by reading the head entry
+        try {
+            const headBlock = await store.getData(parsed.headChecksum);
+            const unpadded = (0, xorUtils_1.unpadCblData)(headBlock.data);
+            const headEntry = serializer.deserialize(unpadded);
+            ledger._headEntryHash = headEntry.entryHash;
+        }
+        catch {
+            // Degraded state — reads still work via index
+        }
+        // Replay governance entries to reconstruct AuthorizedSignerSet
+        if (governanceSerializer) {
+            await ledger.replayGovernance();
+        }
+        return ledger;
+    }
+    /**
+     * Replay all entries from genesis to head to reconstruct the
+     * AuthorizedSignerSet from governance entries.
+     */
+    async replayGovernance() {
+        if (!this.governanceSerializer || this._length === 0) {
+            return;
+        }
+        for (let i = 0; i < this._length; i++) {
+            const entry = await this.getEntry(i);
+            if (i === 0) {
+                // Genesis entry — must be governance genesis
+                if (governancePayloadSerializer_1.GovernancePayloadSerializer.isGovernancePayload(entry.payload)) {
+                    const parsed = this.governanceSerializer.deserialize(entry.payload);
+                    if (parsed.genesis) {
+                        this._authorizedSignerSet = new authorizedSignerSet_1.AuthorizedSignerSet(parsed.genesis.signers, parsed.genesis.quorumPolicy);
+                    }
+                }
+            }
+            else if (this._authorizedSignerSet &&
+                governancePayloadSerializer_1.GovernancePayloadSerializer.isGovernancePayload(entry.payload)) {
+                // Governance amendment entry — apply actions
+                const parsed = this.governanceSerializer.deserialize(entry.payload);
+                for (const action of parsed.actions) {
+                    this._authorizedSignerSet.applyAction(action);
+                }
+            }
+        }
+    }
+    /**
+     * Parse a metadata block's binary content.
+     */
+    static parseMetadata(data) {
+        if (data.length < 11) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, 'Metadata block too short');
+        }
+        const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+        let offset = 0;
+        // magic
+        const magic = view.getUint32(offset, false);
+        offset += 4;
+        if (magic !== METADATA_MAGIC) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, `Invalid metadata magic: expected 0x${METADATA_MAGIC.toString(16)}, got 0x${magic.toString(16)}`);
+        }
+        // version
+        const version = view.getUint16(offset, false);
+        offset += 2;
+        if (version !== METADATA_VERSION) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, `Unsupported metadata version: ${version}`);
+        }
+        // ledgerIdLength + ledgerId
+        if (offset + 4 > data.length) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, 'Metadata ledgerIdLength overflows');
+        }
+        const ledgerIdLength = view.getUint32(offset, false);
+        offset += 4;
+        if (offset + ledgerIdLength > data.length) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, 'Metadata ledgerId overflows');
+        }
+        const decoder = new TextDecoder();
+        const ledgerId = decoder.decode(data.slice(offset, offset + ledgerIdLength));
+        offset += ledgerIdLength;
+        // length
+        if (offset + 4 > data.length) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, 'Metadata length field overflows');
+        }
+        const length = view.getUint32(offset, false);
+        offset += 4;
+        // hasHead
+        if (offset + 1 > data.length) {
+            throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, 'Metadata hasHead field overflows');
+        }
+        const hasHead = data[offset];
+        offset += 1;
+        let headChecksum = null;
+        if (hasHead === 0x01) {
+            if (offset + HASH_LENGTH > data.length) {
+                throw new ledgerError_1.LedgerError(ledgerError_1.LedgerErrorType.MetadataCorrupted, 'Metadata headChecksum overflows');
+            }
+            headChecksum = checksum_1.Checksum.fromUint8Array(data.slice(offset, offset + HASH_LENGTH));
+            offset += HASH_LENGTH;
+        }
+        // Parse index entries: each is seqNum (4) + checksum (64) = 68 bytes
+        const index = new Map();
+        const indexEntrySize = 4 + HASH_LENGTH;
+        while (offset + indexEntrySize <= data.length) {
+            const seqNum = view.getUint32(offset, false);
+            offset += 4;
+            const blockChecksum = checksum_1.Checksum.fromUint8Array(data.slice(offset, offset + HASH_LENGTH));
+            offset += HASH_LENGTH;
+            index.set(seqNum, blockChecksum);
+        }
+        return { ledgerId, length, headChecksum, index };
+    }
+}
+exports.Ledger = Ledger;
+//# sourceMappingURL=ledger.js.map

package/src/lib/ledger/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/ledger/ledger.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAGH,+CAAiD;AACjD,iEAA8D;AAE9D,yDAAsD;AACtD,uDAAqE;AAOrE,mEAA+D;AAC/D,gDAA6C;AAC7C,gDAAiE;AACjE,+DAA4D;AAC5D,+EAA4E;AAG5E,wEAAwE;AACxE,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,uCAAuC;AACvC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,qCAAqC;AACrC,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;;;;;;;GAUG;AACH,MAAM,mBAAoB,SAAQ,sBAAY;IAC5C,YAAY,SAAoB,EAAE,IAAgB,EAAE,QAAkB;QACpE,KAAK,CACH,SAAS,EACT,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,qBAAS,CAAC,OAAO,EACjB,6BAAa,CAAC,OAAO,EACrB,IAAI,EACJ,IAAI,CACL,CAAC;IACJ,CAAC;IAEe,YAAY;QAC1B,sEAAsE;IACxE,CAAC;IAEe,KAAK,CAAC,aAAa;QACjC,QAAQ;IACV,CAAC;IAEe,QAAQ;QACtB,QAAQ;IACV,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAa,MAAM;IASE;IACA;IACA;IACA;IACA;IAZF,KAAK,GAA0B,IAAI,GAAG,EAAE,CAAC;IACzC,eAAe,GAAoB,IAAI,kCAAe,EAAE,CAAC;IAClE,OAAO,GAAG,CAAC,CAAC;IACZ,KAAK,GAAoB,IAAI,CAAC;IAC9B,cAAc,GAAoB,IAAI,CAAC;IACvC,oBAAoB,GAA+B,IAAI,CAAC;IAEhE,YACmB,KAAkB,EAClB,SAAoB,EACpB,UAAiC,EACjC,QAAgB,EAChB,oBAAkD;QAJlD,UAAK,GAAL,KAAK,CAAa;QAClB,cAAS,GAAT,SAAS,CAAW;QACpB,eAAU,GAAV,UAAU,CAAuB;QACjC,aAAQ,GAAR,QAAQ,CAAQ;QAChB,yBAAoB,GAApB,oBAAoB,CAA8B;IAClE,CAAC;IAEJ,qEAAqE;IAErE,4BAA4B;IAC5B,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,iEAAiE;IACjE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,yEAAyE;IACzE,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC;IACjD,CAAC;IAED,qEAAqE;IAErE;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,OAAmB,EAAE,MAAqB;QACrD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC;QAEpC,mCAAmC;QACnC,IAAI,cAAc,KAAK,CAAC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,kBAAkB,EAClC,4CAA4C,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAA4B,EAC5B,aAA4B,EAC5B,SAAuE;QAEvE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,sBAAsB,EACtC,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,sBAAsB,EACtC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,sBAAsB,EACtC,uCAAuC,CACxC,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;QACtD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B;QAChE,CAAC;QAED,gCAAgC;QAChC,MAAM,iBAAiB,GACrB,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAEhE,uBAAuB;QACvB,MAAM,YAAY,GAGZ,EAAE,CAAC;QAET,mCAAmC;QACnC,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/D,YAAY,CAAC,IAAI,CAAC;YAChB,eAAe,EAAE,aAAa,CAAC,SAAS;YACxC,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QAEH,qCAAqC;QACrC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IACE,CAAC,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EACnE,CAAC;oBACD,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,sBAAsB,EACtC,iCAAiC,CAClC,CAAC;gBACJ,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC;oBAChB,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;oBAC1C,SAAS,EAAE,QAAQ,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,YAAY,EAC5B,wBAAwB,UAAU,CAAC,MAAM,qBAAqB,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,CAC7G,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC;YAC5D,OAAO;YACP,YAAY;SACb,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAE7E,iFAAiF;QACjF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,qEAAqE;IAErE,wCAAwC;IACxC,aAAa,CAAC,SAAqB;QACjC,OAAO,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,kDAAkD;IAClD,oBAAoB;QAClB,OAAO,IAAI,CAAC,oBAAoB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,qEAAqE;IAErE;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,cAAsB;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,aAAa,EAC7B,6BAA6B,cAAc,YAAY,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAA,uBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,GAAW;QACzC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,YAAY,EAC5B,yBAAyB,KAAK,YAAY,GAAG,GAAG,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,YAAY,EAC5B,UAAU,KAAK,KAAK,GAAG,wCAAwC,IAAI,CAAC,OAAO,EAAE,CAC9E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IAErE;;;;OAIG;IACK,KAAK,CAAC,kBAAkB,CAC9B,OAAmB,EACnB,MAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,sBAAsB,EACtC,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,yDAA2B,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,sBAAsB,EACtC,kEAAkE,CACnE,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,sBAAsB,EACtC,+CAA+C,CAChD,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,IAAI,CAAC,oBAAoB,GAAG,IAAI,yCAAmB,CACjD,MAAM,CAAC,OAAO,CAAC,OAA8B,EAC7C,MAAM,CAAC,OAAO,CAAC,YAAY,CAC5B,CAAC;QAEF,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,YAAY;YACZ,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;YACjC,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,kBAAkB,EAClC,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,qEAAqE;IAErE;;;OAGG;IACK,KAAK,CAAC,cAAc,CAC1B,OAAmB,EACnB,MAAqB;QAErB,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,uBAAuB;QACvB,MAAM,OAAO,GAAG;YACd,cAAc;YACd,SAAS;YACT,iBAAiB;YACjB,eAAe,EAAE,MAAM,CAAC,SAAS;YACjC,OAAO;SACR,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE5D,wBAAwB;QACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;QAExD,sBAAsB;QACtB,MAAM,KAAK,GAAiB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAEjE,uBAAuB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAA,yBAAc,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1D,mCAAmC;QACnC,MAAM,KAAK,GAAG,IAAI,sBAAY,CAC5B,IAAI,CAAC,SAAS,EACd,MAAM,EACN,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,IAAI,CAAC,eAAe,CACrB,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC;QAEvC,qEAAqE;QACrE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEhC,0DAA0D;QAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,cAAc,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAEhC,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,+BAA+B;QACjC,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,qEAAqE;IAErE;;;OAGG;IACK,kBAAkB;QACxB,OAAO,IAAI,CAAC,eAAe,CAAC,0BAA0B,CACpD,eAAe,IAAI,CAAC,QAAQ,EAAE,CAC/B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,iBAAiB;QACvB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAEhE,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC;QAEhD,MAAM,IAAI,GACR,CAAC;YACD,CAAC;YACD,CAAC;YACD,aAAa,CAAC,MAAM;YACpB,CAAC;YACD,CAAC;YACD,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,SAAS,CAAC;QAEZ,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,CAAC;QAEZ,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACnB,MAAM,IAAI,CAAC,CAAC;YACZ,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,IAAI,WAAW,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACnB,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;gBACjC,MAAM,IAAI,CAAC,CAAC;gBACZ,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzC,MAAM,IAAI,WAAW,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe;QAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAA,yBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE9C,gEAAgE;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,qEAAqE;IAErE;;;;;;;;;;OAUG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,KAAkB,EAClB,SAAoB,EACpB,UAAiC,EACjC,QAAgB,EAChB,oBAAkD;QAElD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,KAAK,EACL,SAAS,EACT,UAAU,EACV,QAAQ,EACR,oBAAoB,CACrB,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAEhD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,CAAC,yBAAyB;QAC1C,CAAC;QAED,IAAI,aAA2B,CAAC;QAChC,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,CAAC,+BAA+B;QAChD,CAAC;QAED,MAAM,aAAa,GAAG,IAAA,uBAAY,EAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAEnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,wBAAwB;QACxB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAEnC,KAAK,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC1C,CAAC;QAED,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAA,uBAAY,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC,SAAS,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QAED,+DAA+D;QAC/D,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAErC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,6CAA6C;gBAC7C,IAAI,yDAA2B,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnE,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACpE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,IAAI,CAAC,oBAAoB,GAAG,IAAI,yCAAmB,CACjD,MAAM,CAAC,OAAO,CAAC,OAA8B,EAC7C,MAAM,CAAC,OAAO,CAAC,YAAY,CAC5B,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IACL,IAAI,CAAC,oBAAoB;gBACzB,yDAA2B,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAC9D,CAAC;gBACD,6CAA6C;gBAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,aAAa,CAAC,IAAgB;QAM3C,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzE,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,QAAQ;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,sCAAsC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QAED,UAAU;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,iCAAiC,OAAO,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,mCAAmC,CACpC,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,6BAA6B,CAC9B,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAC5C,CAAC;QACF,MAAM,IAAI,cAAc,CAAC;QAEzB,SAAS;QACT,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,CAAC;QAEZ,UAAU;QACV,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,kCAAkC,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,CAAC;QAEZ,IAAI,YAAY,GAAoB,IAAI,CAAC;QACzC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,IAAI,yBAAW,CACnB,6BAAe,CAAC,iBAAiB,EACjC,iCAAiC,CAClC,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,mBAAQ,CAAC,cAAc,CACpC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CACzC,CAAC;YACF,MAAM,IAAI,WAAW,CAAC;QACxB,CAAC;QAED,qEAAqE;QACrE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC1C,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC;QACvC,OAAO,MAAM,GAAG,cAAc,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,aAAa,GAAG,mBAAQ,CAAC,cAAc,CAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CACzC,CAAC;YACF,MAAM,IAAI,WAAW,CAAC;YACtB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;CACF;AAlqBD,wBAkqBC"}

package/src/lib/ledger/ledgerChainValidator.d.ts

@@ -0,0 +1,80 @@
+/**
+ * @fileoverview LedgerChainValidator — validates chain integrity by walking
+ * entries and checking hashes, signatures, authorization, and governance
+ * constraints.
+ *
+ * Validation does not throw — it returns an IValidationResult with error
+ * descriptors. All errors are collected (validation does not stop at the
+ * first error).
+ *
+ * @see Design: Block Chain Ledger — LedgerChainValidator
+ * @see Requirements 3.2, 3.3, 4.3–4.6, 8.1–8.4, 12.6–12.7, 13.6–13.7,
+ *      14.5, 15.6, 16.1–16.6
+ */
+import { ILedgerEntry } from '../interfaces/ledger/ledgerEntry';
+import { ILedgerSignatureVerifier } from '../interfaces/ledger/ledgerSignatureVerifier';
+import { IValidationResult } from '../interfaces/ledger/validationResult';
+import { AuthorizedSignerSet } from './authorizedSignerSet';
+import { GovernancePayloadSerializer } from './governancePayloadSerializer';
+import { LedgerEntrySerializer } from './ledgerEntrySerializer';
+/**
+ * Validates ledger chain integrity by walking entries and verifying:
+ * - Contiguous sequence numbers
+ * - Genesis entry correctness
+ * - Hash-chain links (previousEntryHash)
+ * - EntryHash recomputation
+ * - Signature verification
+ * - Authorization (signer is in the authorized set)
+ * - Governance constraints (admin role, quorum, safety)
+ */
+export declare class LedgerChainValidator {
+    private readonly serializer;
+    private readonly signatureVerifier;
+    private readonly governanceSerializer?;
+    constructor(serializer: LedgerEntrySerializer, signatureVerifier: ILedgerSignatureVerifier, governanceSerializer?: GovernancePayloadSerializer | undefined);
+    /**
+     * Validate the entire chain from genesis to head.
+     *
+     * Expects entries ordered by sequenceNumber starting from 0.
+     * Returns { isValid: true, entriesChecked: 0, errors: [] } for an empty chain.
+     *
+     * When a governanceSerializer is provided, also validates:
+     * - Genesis entry initializes the signer set
+     * - Each entry's signer is authorized at that chain position
+     * - Governance entries have admin role and satisfy quorum
+     * - Governance actions pass safety constraints
+     */
+    validateAll(entries: ILedgerEntry[]): IValidationResult;
+    /**
+     * Validate a sub-range of entries, including the link to the predecessor.
+     *
+     * @param entries - The sub-range of entries to validate (ordered by sequenceNumber).
+     * @param predecessor - The entry immediately before the sub-range, or null if
+     *   the sub-range starts at genesis.
+     * @param signerSetAtPredecessor - Optional AuthorizedSignerSet state at the predecessor
+     *   for governance validation of the sub-range.
+     */
+    validateRange(entries: ILedgerEntry[], predecessor: ILedgerEntry | null, signerSetAtPredecessor?: AuthorizedSignerSet): IValidationResult;
+    /**
+     * Initialize the AuthorizedSignerSet from a genesis entry.
+     * Returns the signer set, or null if the genesis is not a valid governance payload.
+     */
+    private initSignerSetFromGenesis;
+    /**
+     * Validate authorization and governance constraints for a non-genesis entry.
+     * If the entry is a governance payload, also validates admin role, quorum,
+     * and applies actions to the signer set.
+     */
+    private validateEntryAuthorization;
+    /**
+     * Recompute the entryHash for the given entry and compare it to the
+     * stored entryHash. Pushes an error if they don't match.
+     */
+    private verifyEntryHash;
+    /**
+     * Verify the entry's signature against its signerPublicKey and entryHash.
+     * Pushes an error if verification fails.
+     */
+    private verifySignature;
+}
+//# sourceMappingURL=ledgerChainValidator.d.ts.map

package/src/lib/ledger/ledgerChainValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledgerChainValidator.d.ts","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/ledger/ledgerChainValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAEL,iBAAiB,EAClB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IAE7B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBAFrB,UAAU,EAAE,qBAAqB,EACjC,iBAAiB,EAAE,wBAAwB,EAC3C,oBAAoB,CAAC,EAAE,2BAA2B,YAAA;IAGrE;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,iBAAiB;IAsEvD;;;;;;;;OAQG;IACH,aAAa,CACX,OAAO,EAAE,YAAY,EAAE,EACvB,WAAW,EAAE,YAAY,GAAG,IAAI,EAChC,sBAAsB,CAAC,EAAE,mBAAmB,GAC3C,iBAAiB;IAyFpB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAmDhC;;;;OAIG;IACH,OAAO,CAAC,0BAA0B;IA0ElC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAcvB;;;OAGG;IACH,OAAO,CAAC,eAAe;CAkBxB"}