@brightchain/brightchain-lib 0.29.17 → 0.29.21

package/src/lib/ledger/governancePayloadSerializer.js

@@ -0,0 +1,499 @@
+"use strict";
+/**
+ * @fileoverview Governance payload serializer for the blockchain ledger.
+ *
+ * Handles deterministic binary serialization of governance payloads,
+ * including the 0x01 type prefix that distinguishes governance entries
+ * from regular (0x00) entries.
+ *
+ * Binary format (after 0x01 type prefix):
+ * - 1 byte: subtype (0x00 = genesis, 0x01 = amendment)
+ * - For genesis: quorum policy + initial signer list
+ * - 2 bytes: actionCount (uint16 BE)
+ * - variable: serialized actions
+ * - 2 bytes: cosignatureCount (uint16 BE)
+ * - variable: cosignatures
+ *
+ * @see Design: Governance Payload Serialization Format
+ * @see Requirements 13.9
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GovernancePayloadSerializer = void 0;
+const governanceAction_1 = require("../interfaces/ledger/governanceAction");
+const quorumPolicy_1 = require("../interfaces/ledger/quorumPolicy");
+const signerRole_1 = require("../interfaces/ledger/signerRole");
+const signerStatus_1 = require("../interfaces/ledger/signerStatus");
+const ledgerSerializationError_1 = require("../errors/ledgerSerializationError");
+/** Governance payload type prefix byte. */
+const GOVERNANCE_PREFIX = 0x01;
+/** Subtype bytes. */
+const SUBTYPE_GENESIS = 0x00;
+const SUBTYPE_AMENDMENT = 0x01;
+/** Action type byte mapping. */
+const ACTION_TYPE_BYTES = {
+    [governanceAction_1.GovernanceActionType.AddSigner]: 0x00,
+    [governanceAction_1.GovernanceActionType.RemoveSigner]: 0x01,
+    [governanceAction_1.GovernanceActionType.ChangeRole]: 0x02,
+    [governanceAction_1.GovernanceActionType.UpdateQuorum]: 0x03,
+    [governanceAction_1.GovernanceActionType.SuspendSigner]: 0x04,
+    [governanceAction_1.GovernanceActionType.ReactivateSigner]: 0x05,
+    [governanceAction_1.GovernanceActionType.SetMemberData]: 0x06,
+};
+/** Reverse mapping from byte to action type. */
+const BYTE_TO_ACTION_TYPE = {};
+for (const [key, value] of Object.entries(ACTION_TYPE_BYTES)) {
+    BYTE_TO_ACTION_TYPE[value] = key;
+}
+/** Role byte mapping. */
+const ROLE_BYTES = {
+    [signerRole_1.SignerRole.Admin]: 0x00,
+    [signerRole_1.SignerRole.Writer]: 0x01,
+    [signerRole_1.SignerRole.Reader]: 0x02,
+};
+const BYTE_TO_ROLE = {
+    0x00: signerRole_1.SignerRole.Admin,
+    0x01: signerRole_1.SignerRole.Writer,
+    0x02: signerRole_1.SignerRole.Reader,
+};
+/** Status byte mapping. */
+const STATUS_BYTES = {
+    [signerStatus_1.SignerStatus.Active]: 0x00,
+    [signerStatus_1.SignerStatus.Suspended]: 0x01,
+    [signerStatus_1.SignerStatus.Retired]: 0x02,
+};
+const BYTE_TO_STATUS = {
+    0x00: signerStatus_1.SignerStatus.Active,
+    0x01: signerStatus_1.SignerStatus.Suspended,
+    0x02: signerStatus_1.SignerStatus.Retired,
+};
+/** Quorum type byte mapping. */
+const QUORUM_TYPE_BYTES = {
+    [quorumPolicy_1.QuorumType.Unanimous]: 0x00,
+    [quorumPolicy_1.QuorumType.Majority]: 0x01,
+    [quorumPolicy_1.QuorumType.Threshold]: 0x02,
+};
+const BYTE_TO_QUORUM_TYPE = {
+    0x00: quorumPolicy_1.QuorumType.Unanimous,
+    0x01: quorumPolicy_1.QuorumType.Majority,
+    0x02: quorumPolicy_1.QuorumType.Threshold,
+};
+/** Text encoder/decoder for UTF-8 string serialization. */
+const textEncoder = new TextEncoder();
+const textDecoder = new TextDecoder();
+class GovernancePayloadSerializer {
+    /**
+     * Check if a payload Uint8Array is a governance payload (starts with 0x01).
+     */
+    static isGovernancePayload(payload) {
+        return payload.length > 0 && payload[0] === GOVERNANCE_PREFIX;
+    }
+    /**
+     * Serialize a governance payload into a Uint8Array with 0x01 prefix.
+     * This produces an amendment-subtype payload.
+     */
+    serialize(payload) {
+        const actionBytes = this.serializeActions(payload.actions);
+        const cosigBytes = this.serializeCosignatures(payload.cosignatures);
+        // 1 (prefix) + 1 (subtype) + 2 (actionCount) + actions + 2 (cosigCount) + cosigs
+        const totalSize = 1 + 1 + 2 + actionBytes.length + 2 + cosigBytes.length;
+        const result = new Uint8Array(totalSize);
+        let offset = 0;
+        result[offset++] = GOVERNANCE_PREFIX;
+        result[offset++] = SUBTYPE_AMENDMENT;
+        // Action count (uint16 BE)
+        const view = new DataView(result.buffer, result.byteOffset, result.byteLength);
+        view.setUint16(offset, payload.actions.length, false);
+        offset += 2;
+        // Actions
+        result.set(actionBytes, offset);
+        offset += actionBytes.length;
+        // Cosignature count (uint16 BE)
+        view.setUint16(offset, payload.cosignatures.length, false);
+        offset += 2;
+        // Cosignatures
+        result.set(cosigBytes, offset);
+        return result;
+    }
+    /**
+     * Serialize a genesis governance payload with initial signer set and quorum policy.
+     */
+    serializeGenesis(data) {
+        const quorumBytes = this.serializeQuorumPolicy(data.quorumPolicy);
+        const signerBytes = this.serializeSignerList(data.signers);
+        // 1 (prefix) + 1 (subtype) + quorum + 2 (signerCount) + signers + 2 (cosigCount=0)
+        const totalSize = 1 + 1 + quorumBytes.length + 2 + signerBytes.length + 2;
+        const result = new Uint8Array(totalSize);
+        let offset = 0;
+        result[offset++] = GOVERNANCE_PREFIX;
+        result[offset++] = SUBTYPE_GENESIS;
+        // Quorum policy
+        result.set(quorumBytes, offset);
+        offset += quorumBytes.length;
+        // Signer count (uint16 BE)
+        const view = new DataView(result.buffer, result.byteOffset, result.byteLength);
+        view.setUint16(offset, data.signers.length, false);
+        offset += 2;
+        // Signers
+        result.set(signerBytes, offset);
+        offset += signerBytes.length;
+        // Cosignature count = 0 for genesis
+        view.setUint16(offset, 0, false);
+        return result;
+    }
+    /**
+     * Deserialize a Uint8Array (with 0x01 prefix) back into an IGovernancePayload.
+     * For genesis payloads, also returns the genesis data.
+     */
+    deserialize(data) {
+        if (data.length < 4) {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.DataTooShort, 'Governance payload too short');
+        }
+        if (data[0] !== GOVERNANCE_PREFIX) {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.InvalidMagic, `Expected governance prefix 0x01, got 0x${data[0].toString(16).padStart(2, '0')}`);
+        }
+        const subtype = data[1];
+        let offset = 2;
+        const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+        if (subtype === SUBTYPE_GENESIS) {
+            return this.deserializeGenesis(data, offset, view);
+        }
+        else if (subtype === SUBTYPE_AMENDMENT) {
+            return this.deserializeAmendment(data, offset, view);
+        }
+        else {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.UnsupportedVersion, `Unknown governance subtype: 0x${subtype.toString(16).padStart(2, '0')}`);
+        }
+    }
+    /**
+     * Serialize the governance actions only (without cosignatures) for hashing/signing by co-signers.
+     */
+    serializeActionsForSigning(actions) {
+        const actionBytes = this.serializeActions(actions);
+        // 2 (actionCount) + actions
+        const result = new Uint8Array(2 + actionBytes.length);
+        const view = new DataView(result.buffer, result.byteOffset, result.byteLength);
+        view.setUint16(0, actions.length, false);
+        result.set(actionBytes, 2);
+        return result;
+    }
+    // ---- Private serialization helpers ----
+    serializeActions(actions) {
+        const parts = [];
+        for (const action of actions) {
+            parts.push(this.serializeAction(action));
+        }
+        return concatUint8Arrays(parts);
+    }
+    serializeAction(action) {
+        const parts = [];
+        // Action type byte
+        parts.push(new Uint8Array([ACTION_TYPE_BYTES[action.type]]));
+        switch (action.type) {
+            case governanceAction_1.GovernanceActionType.AddSigner: {
+                parts.push(serializePubKey(action.publicKey));
+                parts.push(new Uint8Array([ROLE_BYTES[action.role]]));
+                parts.push(this.serializeMetadata(action.metadata ?? new Map()));
+                break;
+            }
+            case governanceAction_1.GovernanceActionType.RemoveSigner:
+            case governanceAction_1.GovernanceActionType.SuspendSigner:
+            case governanceAction_1.GovernanceActionType.ReactivateSigner: {
+                parts.push(serializePubKey(action.publicKey));
+                break;
+            }
+            case governanceAction_1.GovernanceActionType.ChangeRole: {
+                parts.push(serializePubKey(action.publicKey));
+                parts.push(new Uint8Array([ROLE_BYTES[action.newRole]]));
+                break;
+            }
+            case governanceAction_1.GovernanceActionType.UpdateQuorum: {
+                parts.push(this.serializeQuorumPolicy(action.newPolicy));
+                break;
+            }
+            case governanceAction_1.GovernanceActionType.SetMemberData: {
+                parts.push(serializePubKey(action.publicKey));
+                parts.push(this.serializeMetadata(action.metadata));
+                break;
+            }
+        }
+        return concatUint8Arrays(parts);
+    }
+    serializeQuorumPolicy(policy) {
+        if (policy.type === quorumPolicy_1.QuorumType.Threshold) {
+            const result = new Uint8Array(5);
+            result[0] = QUORUM_TYPE_BYTES[policy.type];
+            const view = new DataView(result.buffer, result.byteOffset, result.byteLength);
+            view.setUint32(1, policy.threshold ?? 1, false);
+            return result;
+        }
+        return new Uint8Array([QUORUM_TYPE_BYTES[policy.type]]);
+    }
+    serializeMetadata(metadata) {
+        const parts = [];
+        // Entry count (uint16 BE)
+        const countBuf = new Uint8Array(2);
+        new DataView(countBuf.buffer).setUint16(0, metadata.size, false);
+        parts.push(countBuf);
+        // Sort keys for deterministic serialization
+        const sortedEntries = [...metadata.entries()].sort((a, b) => a[0].localeCompare(b[0]));
+        for (const [key, value] of sortedEntries) {
+            const keyBytes = textEncoder.encode(key);
+            const valueBytes = textEncoder.encode(value);
+            const keyLenBuf = new Uint8Array(2);
+            new DataView(keyLenBuf.buffer).setUint16(0, keyBytes.length, false);
+            parts.push(keyLenBuf);
+            parts.push(keyBytes);
+            const valueLenBuf = new Uint8Array(2);
+            new DataView(valueLenBuf.buffer).setUint16(0, valueBytes.length, false);
+            parts.push(valueLenBuf);
+            parts.push(valueBytes);
+        }
+        return concatUint8Arrays(parts);
+    }
+    serializeSignerList(signers) {
+        const parts = [];
+        for (const signer of signers) {
+            parts.push(serializePubKey(signer.publicKey));
+            parts.push(new Uint8Array([ROLE_BYTES[signer.role]]));
+            parts.push(new Uint8Array([STATUS_BYTES[signer.status]]));
+            parts.push(this.serializeMetadata(signer.metadata));
+        }
+        return concatUint8Arrays(parts);
+    }
+    serializeCosignatures(cosignatures) {
+        const parts = [];
+        for (const cosig of cosignatures) {
+            parts.push(serializePubKey(cosig.signerPublicKey));
+            parts.push(new Uint8Array(cosig.signature));
+        }
+        return concatUint8Arrays(parts);
+    }
+    // ---- Private deserialization helpers ----
+    deserializeGenesis(data, offset, view) {
+        // Quorum policy
+        const { policy: quorumPolicy, bytesRead: quorumBytes } = this.deserializeQuorumPolicy(data, offset, view);
+        offset += quorumBytes;
+        // Signer count
+        this.ensureBytes(data, offset, 2, 'signer count');
+        const signerCount = view.getUint16(offset, false);
+        offset += 2;
+        // Signers
+        const signers = [];
+        for (let i = 0; i < signerCount; i++) {
+            const { signer, bytesRead } = this.deserializeSigner(data, offset, view);
+            signers.push(signer);
+            offset += bytesRead;
+        }
+        // Cosignature count
+        this.ensureBytes(data, offset, 2, 'cosignature count');
+        const cosigCount = view.getUint16(offset, false);
+        offset += 2;
+        const cosignatures = this.deserializeCosignatures(data, offset, view, cosigCount);
+        return {
+            actions: [],
+            cosignatures: cosignatures.cosigs,
+            genesis: { quorumPolicy, signers },
+        };
+    }
+    deserializeAmendment(data, offset, view) {
+        // Action count
+        this.ensureBytes(data, offset, 2, 'action count');
+        const actionCount = view.getUint16(offset, false);
+        offset += 2;
+        // Actions
+        const actions = [];
+        for (let i = 0; i < actionCount; i++) {
+            const { action, bytesRead } = this.deserializeAction(data, offset, view);
+            actions.push(action);
+            offset += bytesRead;
+        }
+        // Cosignature count
+        this.ensureBytes(data, offset, 2, 'cosignature count');
+        const cosigCount = view.getUint16(offset, false);
+        offset += 2;
+        const cosignatures = this.deserializeCosignatures(data, offset, view, cosigCount);
+        return { actions, cosignatures: cosignatures.cosigs };
+    }
+    deserializeAction(data, offset, view) {
+        const startOffset = offset;
+        this.ensureBytes(data, offset, 1, 'action type');
+        const actionTypeByte = data[offset++];
+        const actionType = BYTE_TO_ACTION_TYPE[actionTypeByte];
+        if (actionType === undefined) {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, `Unknown action type byte: 0x${actionTypeByte.toString(16).padStart(2, '0')}`);
+        }
+        switch (actionType) {
+            case governanceAction_1.GovernanceActionType.AddSigner: {
+                const { publicKey, bytesRead: pkBytes } = deserializePubKey(data, offset, view);
+                offset += pkBytes;
+                this.ensureBytes(data, offset, 1, 'role');
+                const role = BYTE_TO_ROLE[data[offset++]];
+                if (role === undefined) {
+                    throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, 'Invalid role byte');
+                }
+                const { metadata, bytesRead: metaBytes } = this.deserializeMetadata(data, offset, view);
+                offset += metaBytes;
+                return {
+                    action: { type: actionType, publicKey, role, metadata },
+                    bytesRead: offset - startOffset,
+                };
+            }
+            case governanceAction_1.GovernanceActionType.RemoveSigner:
+            case governanceAction_1.GovernanceActionType.SuspendSigner:
+            case governanceAction_1.GovernanceActionType.ReactivateSigner: {
+                const { publicKey, bytesRead: pkBytes } = deserializePubKey(data, offset, view);
+                offset += pkBytes;
+                return {
+                    action: { type: actionType, publicKey },
+                    bytesRead: offset - startOffset,
+                };
+            }
+            case governanceAction_1.GovernanceActionType.ChangeRole: {
+                const { publicKey, bytesRead: pkBytes } = deserializePubKey(data, offset, view);
+                offset += pkBytes;
+                this.ensureBytes(data, offset, 1, 'new role');
+                const newRole = BYTE_TO_ROLE[data[offset++]];
+                if (newRole === undefined) {
+                    throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, 'Invalid role byte');
+                }
+                return {
+                    action: { type: actionType, publicKey, newRole },
+                    bytesRead: offset - startOffset,
+                };
+            }
+            case governanceAction_1.GovernanceActionType.UpdateQuorum: {
+                const { policy, bytesRead: qBytes } = this.deserializeQuorumPolicy(data, offset, view);
+                offset += qBytes;
+                return {
+                    action: { type: actionType, newPolicy: policy },
+                    bytesRead: offset - startOffset,
+                };
+            }
+            case governanceAction_1.GovernanceActionType.SetMemberData: {
+                const { publicKey, bytesRead: pkBytes } = deserializePubKey(data, offset, view);
+                offset += pkBytes;
+                const { metadata, bytesRead: metaBytes } = this.deserializeMetadata(data, offset, view);
+                offset += metaBytes;
+                return {
+                    action: { type: actionType, publicKey, metadata },
+                    bytesRead: offset - startOffset,
+                };
+            }
+            default:
+                throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, `Unhandled action type: ${actionType}`);
+        }
+    }
+    deserializeQuorumPolicy(data, offset, view) {
+        this.ensureBytes(data, offset, 1, 'quorum type');
+        const quorumTypeByte = data[offset];
+        const quorumType = BYTE_TO_QUORUM_TYPE[quorumTypeByte];
+        if (quorumType === undefined) {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, `Unknown quorum type byte: 0x${quorumTypeByte.toString(16).padStart(2, '0')}`);
+        }
+        if (quorumType === quorumPolicy_1.QuorumType.Threshold) {
+            this.ensureBytes(data, offset, 5, 'quorum threshold');
+            const threshold = view.getUint32(offset + 1, false);
+            return { policy: { type: quorumType, threshold }, bytesRead: 5 };
+        }
+        return { policy: { type: quorumType }, bytesRead: 1 };
+    }
+    deserializeMetadata(data, offset, view) {
+        const startOffset = offset;
+        this.ensureBytes(data, offset, 2, 'metadata entry count');
+        const entryCount = view.getUint16(offset, false);
+        offset += 2;
+        const metadata = new Map();
+        for (let i = 0; i < entryCount; i++) {
+            // Key
+            this.ensureBytes(data, offset, 2, 'metadata key length');
+            const keyLen = view.getUint16(offset, false);
+            offset += 2;
+            this.ensureBytes(data, offset, keyLen, 'metadata key');
+            const key = textDecoder.decode(data.subarray(offset, offset + keyLen));
+            offset += keyLen;
+            // Value
+            this.ensureBytes(data, offset, 2, 'metadata value length');
+            const valueLen = view.getUint16(offset, false);
+            offset += 2;
+            this.ensureBytes(data, offset, valueLen, 'metadata value');
+            const value = textDecoder.decode(data.subarray(offset, offset + valueLen));
+            offset += valueLen;
+            metadata.set(key, value);
+        }
+        return { metadata, bytesRead: offset - startOffset };
+    }
+    deserializeSigner(data, offset, view) {
+        const startOffset = offset;
+        const { publicKey, bytesRead: pkBytes } = deserializePubKey(data, offset, view);
+        offset += pkBytes;
+        this.ensureBytes(data, offset, 1, 'signer role');
+        const role = BYTE_TO_ROLE[data[offset++]];
+        if (role === undefined) {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, 'Invalid role byte in signer list');
+        }
+        this.ensureBytes(data, offset, 1, 'signer status');
+        const status = BYTE_TO_STATUS[data[offset++]];
+        if (status === undefined) {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, 'Invalid status byte in signer list');
+        }
+        const { metadata, bytesRead: metaBytes } = this.deserializeMetadata(data, offset, view);
+        offset += metaBytes;
+        return {
+            signer: { publicKey, role, status, metadata },
+            bytesRead: offset - startOffset,
+        };
+    }
+    deserializeCosignatures(data, offset, view, count) {
+        const startOffset = offset;
+        const cosigs = [];
+        for (let i = 0; i < count; i++) {
+            const { publicKey, bytesRead: pkBytes } = deserializePubKey(data, offset, view);
+            offset += pkBytes;
+            this.ensureBytes(data, offset, 64, 'cosignature');
+            const signature = new Uint8Array(data.buffer, data.byteOffset + offset, 64);
+            offset += 64;
+            cosigs.push({ signerPublicKey: publicKey, signature: new Uint8Array(signature) });
+        }
+        return { cosigs, bytesRead: offset - startOffset };
+    }
+    ensureBytes(data, offset, needed, fieldName) {
+        if (offset + needed > data.length) {
+            throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, `Not enough bytes for ${fieldName}: need ${needed} at offset ${offset}, have ${data.length - offset}`);
+        }
+    }
+}
+exports.GovernancePayloadSerializer = GovernancePayloadSerializer;
+// ---- Module-level utility functions ----
+function serializePubKey(publicKey) {
+    const result = new Uint8Array(4 + publicKey.length);
+    const view = new DataView(result.buffer, result.byteOffset, result.byteLength);
+    view.setUint32(0, publicKey.length, false);
+    result.set(publicKey, 4);
+    return result;
+}
+function deserializePubKey(data, offset, view) {
+    if (offset + 4 > data.length) {
+        throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, 'Not enough bytes for public key length');
+    }
+    const keyLen = view.getUint32(offset, false);
+    offset += 4;
+    if (offset + keyLen > data.length) {
+        throw new ledgerSerializationError_1.LedgerSerializationError(ledgerSerializationError_1.LedgerSerializationErrorType.FieldOverflow, `Not enough bytes for public key: need ${keyLen}, have ${data.length - offset}`);
+    }
+    const publicKey = new Uint8Array(data.subarray(offset, offset + keyLen));
+    return { publicKey, bytesRead: 4 + keyLen };
+}
+function concatUint8Arrays(arrays) {
+    let totalLength = 0;
+    for (const arr of arrays) {
+        totalLength += arr.length;
+    }
+    const result = new Uint8Array(totalLength);
+    let offset = 0;
+    for (const arr of arrays) {
+        result.set(arr, offset);
+        offset += arr.length;
+    }
+    return result;
+}
+//# sourceMappingURL=governancePayloadSerializer.js.map

package/src/lib/ledger/governancePayloadSerializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governancePayloadSerializer.js","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/ledger/governancePayloadSerializer.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAGH,4EAG+C;AAE/C,oEAA8E;AAC9E,gEAA6D;AAC7D,oEAAiE;AAEjE,iFAG4C;AAE5C,2CAA2C;AAC3C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,qBAAqB;AACrB,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,gCAAgC;AAChC,MAAM,iBAAiB,GAAyC;IAC9D,CAAC,uCAAoB,CAAC,SAAS,CAAC,EAAE,IAAI;IACtC,CAAC,uCAAoB,CAAC,YAAY,CAAC,EAAE,IAAI;IACzC,CAAC,uCAAoB,CAAC,UAAU,CAAC,EAAE,IAAI;IACvC,CAAC,uCAAoB,CAAC,YAAY,CAAC,EAAE,IAAI;IACzC,CAAC,uCAAoB,CAAC,aAAa,CAAC,EAAE,IAAI;IAC1C,CAAC,uCAAoB,CAAC,gBAAgB,CAAC,EAAE,IAAI;IAC7C,CAAC,uCAAoB,CAAC,aAAa,CAAC,EAAE,IAAI;CAC3C,CAAC;AAEF,gDAAgD;AAChD,MAAM,mBAAmB,GAAyC,EAAE,CAAC;AACrE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;IAC7D,mBAAmB,CAAC,KAAK,CAAC,GAAG,GAA2B,CAAC;AAC3D,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,GAA+B;IAC7C,CAAC,uBAAU,CAAC,KAAK,CAAC,EAAE,IAAI;IACxB,CAAC,uBAAU,CAAC,MAAM,CAAC,EAAE,IAAI;IACzB,CAAC,uBAAU,CAAC,MAAM,CAAC,EAAE,IAAI;CAC1B,CAAC;AAEF,MAAM,YAAY,GAA+B;IAC/C,IAAI,EAAE,uBAAU,CAAC,KAAK;IACtB,IAAI,EAAE,uBAAU,CAAC,MAAM;IACvB,IAAI,EAAE,uBAAU,CAAC,MAAM;CACxB,CAAC;AAEF,2BAA2B;AAC3B,MAAM,YAAY,GAAiC;IACjD,CAAC,2BAAY,CAAC,MAAM,CAAC,EAAE,IAAI;IAC3B,CAAC,2BAAY,CAAC,SAAS,CAAC,EAAE,IAAI;IAC9B,CAAC,2BAAY,CAAC,OAAO,CAAC,EAAE,IAAI;CAC7B,CAAC;AAEF,MAAM,cAAc,GAAiC;IACnD,IAAI,EAAE,2BAAY,CAAC,MAAM;IACzB,IAAI,EAAE,2BAAY,CAAC,SAAS;IAC5B,IAAI,EAAE,2BAAY,CAAC,OAAO;CAC3B,CAAC;AAEF,gCAAgC;AAChC,MAAM,iBAAiB,GAA+B;IACpD,CAAC,yBAAU,CAAC,SAAS,CAAC,EAAE,IAAI;IAC5B,CAAC,yBAAU,CAAC,QAAQ,CAAC,EAAE,IAAI;IAC3B,CAAC,yBAAU,CAAC,SAAS,CAAC,EAAE,IAAI;CAC7B,CAAC;AAEF,MAAM,mBAAmB,GAA+B;IACtD,IAAI,EAAE,yBAAU,CAAC,SAAS;IAC1B,IAAI,EAAE,yBAAU,CAAC,QAAQ;IACzB,IAAI,EAAE,yBAAU,CAAC,SAAS;CAC3B,CAAC;AAEF,2DAA2D;AAC3D,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAUtC,MAAa,2BAA2B;IACtC;;OAEG;IACH,MAAM,CAAC,mBAAmB,CAAC,OAAmB;QAC5C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,OAA2B;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEpE,iFAAiF;QACjF,MAAM,SAAS,GACb,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,iBAAiB,CAAC;QACrC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,iBAAiB,CAAC;QAErC,2BAA2B;QAC3B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,CAAC;QAEZ,UAAU;QACV,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;QAE7B,gCAAgC;QAChC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,CAAC;QAEZ,eAAe;QACf,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAE/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAyB;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3D,mFAAmF;QACnF,MAAM,SAAS,GACb,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,iBAAiB,CAAC;QACrC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,eAAe,CAAC;QAEnC,gBAAgB;QAChB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;QAE7B,2BAA2B;QAC3B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,CAAC;QAEZ,UAAU;QACV,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;QAE7B,oCAAoC;QACpC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAEjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,IAAgB;QAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,YAAY,EACzC,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,iBAAiB,EAAE,CAAC;YAClC,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,YAAY,EACzC,0CAA0C,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAEzE,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,kBAAkB,EAC/C,iCAAiC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,0BAA0B,CAAC,OAAqC;QAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnD,4BAA4B;QAC5B,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0CAA0C;IAElC,gBAAgB,CAAC,OAAqC;QAC5D,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,eAAe,CAAC,MAAyB;QAC/C,MAAM,KAAK,GAAiB,EAAE,CAAC;QAE/B,mBAAmB;QACnB,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,uCAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;gBACjE,MAAM;YACR,CAAC;YACD,KAAK,uCAAoB,CAAC,YAAY,CAAC;YACvC,KAAK,uCAAoB,CAAC,aAAa,CAAC;YACxC,KAAK,uCAAoB,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,MAAM;YACR,CAAC;YACD,KAAK,uCAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,MAAM;YACR,CAAC;YACD,KAAK,uCAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBACzD,MAAM;YACR,CAAC;YACD,KAAK,uCAAoB,CAAC,aAAa,CAAC,CAAC,CAAC;gBACxC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACpD,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,qBAAqB,CAAC,MAAqB;QACjD,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAU,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/E,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,iBAAiB,CAAC,QAAqC;QAC7D,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAErB,4CAA4C;QAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1D,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzB,CAAC;QAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE7C,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAErB,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,mBAAmB,CAAC,OAAqC;QAC/D,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,qBAAqB,CAC3B,YAAgD;QAEhD,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,4CAA4C;IAEpC,kBAAkB,CACxB,IAAgB,EAChB,MAAc,EACd,IAAc;QAEd,gBAAgB;QAChB,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,GACpD,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,WAAW,CAAC;QAEtB,eAAe;QACf,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,CAAC;QAEZ,UAAU;QACV,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,CAAC;QAEZ,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAElF,OAAO;YACL,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE;SACnC,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,IAAgB,EAChB,MAAc,EACd,IAAc;QAEd,eAAe;QACf,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,CAAC;QAEZ,UAAU;QACV,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,CAAC;QAEZ,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAElF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;IAEO,iBAAiB,CACvB,IAAgB,EAChB,MAAc,EACd,IAAc;QAEd,MAAM,WAAW,GAAG,MAAM,CAAC;QAE3B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACvD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,+BAA+B,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC9E,CAAC;QACJ,CAAC;QAED,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,uCAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAChF,MAAM,IAAI,OAAO,CAAC;gBAClB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC1C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,mBAAmB,CACpB,CAAC;gBACJ,CAAC;gBACD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxF,MAAM,IAAI,SAAS,CAAC;gBACpB,OAAO;oBACL,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACvD,SAAS,EAAE,MAAM,GAAG,WAAW;iBAChC,CAAC;YACJ,CAAC;YACD,KAAK,uCAAoB,CAAC,YAAY,CAAC;YACvC,KAAK,uCAAoB,CAAC,aAAa,CAAC;YACxC,KAAK,uCAAoB,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAC3C,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAChF,MAAM,IAAI,OAAO,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAuB;oBAC5D,SAAS,EAAE,MAAM,GAAG,WAAW;iBAChC,CAAC;YACJ,CAAC;YACD,KAAK,uCAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;gBACrC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAChF,MAAM,IAAI,OAAO,CAAC;gBAClB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,mBAAmB,CACpB,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE;oBAChD,SAAS,EAAE,MAAM,GAAG,WAAW;iBAChC,CAAC;YACJ,CAAC;YACD,KAAK,uCAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;gBACvC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBACvF,MAAM,IAAI,MAAM,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE;oBAC/C,SAAS,EAAE,MAAM,GAAG,WAAW;iBAChC,CAAC;YACJ,CAAC;YACD,KAAK,uCAAoB,CAAC,aAAa,CAAC,CAAC,CAAC;gBACxC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAChF,MAAM,IAAI,OAAO,CAAC;gBAClB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxF,MAAM,IAAI,SAAS,CAAC;gBACpB,OAAO;oBACL,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE;oBACjD,SAAS,EAAE,MAAM,GAAG,WAAW;iBAChC,CAAC;YACJ,CAAC;YACD;gBACE,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,0BAA0B,UAAU,EAAE,CACvC,CAAC;QACN,CAAC;IACH,CAAC;IAEO,uBAAuB,CAC7B,IAAgB,EAChB,MAAc,EACd,IAAc;QAEd,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACvD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,+BAA+B,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC9E,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,KAAK,yBAAU,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACnE,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxD,CAAC;IAEO,mBAAmB,CACzB,IAAgB,EAChB,MAAc,EACd,IAAc;QAEd,MAAM,WAAW,GAAG,MAAM,CAAC;QAE3B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,CAAC;QAEZ,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM;YACN,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;YACvE,MAAM,IAAI,MAAM,CAAC;YAEjB,QAAQ;YACR,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC;YAEnB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACvD,CAAC;IAEO,iBAAiB,CACvB,IAAgB,EAChB,MAAc,EACd,IAAc;QAEd,MAAM,WAAW,GAAG,MAAM,CAAC;QAE3B,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,IAAI,OAAO,CAAC;QAElB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,kCAAkC,CACnC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,oCAAoC,CACrC,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxF,MAAM,IAAI,SAAS,CAAC;QAEpB,OAAO;YACL,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC7C,SAAS,EAAE,MAAM,GAAG,WAAW;SAChC,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAC7B,IAAgB,EAChB,MAAc,EACd,IAAc,EACd,KAAa;QAEb,MAAM,WAAW,GAAG,MAAM,CAAC;QAC3B,MAAM,MAAM,GAAsE,EAAE,CAAC;QAErF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAChF,MAAM,IAAI,OAAO,CAAC;YAElB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,GAAG,MAAM,EACxB,EAAE,CACoB,CAAC;YACzB,MAAM,IAAI,EAAE,CAAC;YAEb,MAAM,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,SAAS,CAAwB,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACrD,CAAC;IAEO,WAAW,CACjB,IAAgB,EAChB,MAAc,EACd,MAAc,EACd,SAAiB;QAEjB,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,wBAAwB,SAAS,UAAU,MAAM,cAAc,MAAM,UAAU,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAjhBD,kEAihBC;AAED,2CAA2C;AAE3C,SAAS,eAAe,CAAC,SAAqB;IAC5C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAgB,EAChB,MAAc,EACd,IAAc;IAEd,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,IAAI,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,aAAa,EAC1C,yCAAyC,MAAM,UAAU,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,WAAW,IAAI,GAAG,CAAC,MAAM,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/src/lib/ledger/ledger.d.ts

@@ -13,14 +13,25 @@
  * subclass that allows a caller-specified checksum to differ from the
  * content hash.
  *
+ * Governance support: the Ledger enforces role-based access control via an
+ * AuthorizedSignerSet. The genesis entry must be a governance genesis payload
+ * containing the initial signer set and quorum policy. Subsequent governance
+ * entries require admin role and quorum satisfaction.
+ *
  * @see Design: Block Chain Ledger — Ledger
- * @see Requirements 5.1–5.6, 6.1–6.6, 7.1–7.5, 10.1–10.4, 11.2–11.4
+ * @see Requirements 5.1–5.6, 6.1–6.6, 7.1–7.5, 10.1–10.4, 11.2–11.4,
+ *      12.2–12.8, 13.1–13.9, 14.1–14.7, 15.1–15.5, 17.6–17.9, 18.5–18.7
  */
+import { SignatureUint8Array } from '@digitaldefiance/ecies-lib';
 import { BlockSize } from '../enumerations/blockSize';
+import { IAuthorizedSigner } from '../interfaces/ledger/authorizedSigner';
+import { IGovernanceAction } from '../interfaces/ledger/governanceAction';
 import { ILedgerEntry } from '../interfaces/ledger/ledgerEntry';
 import { ILedgerSigner } from '../interfaces/ledger/ledgerSigner';
+import { IQuorumPolicy } from '../interfaces/ledger/quorumPolicy';
 import { IBlockStore } from '../interfaces/storage/blockStore';
 import { Checksum } from '../types/checksum';
+import { GovernancePayloadSerializer } from './governancePayloadSerializer';
 import { LedgerEntrySerializer } from './ledgerEntrySerializer';
 /**
  * Append-only blockchain ledger backed by an IBlockStore.
@@ -28,27 +39,53 @@ import { LedgerEntrySerializer } from './ledgerEntrySerializer';
  * Maintains an in-memory index (sequenceNumber → block Checksum) for O(1)
  * lookups and persists a metadata block after each append for cold-start
  * reconstruction via `Ledger.load()`.
+ *
+ * Enforces role-based access control via an AuthorizedSignerSet when
+ * governance is enabled (i.e., when a GovernancePayloadSerializer is provided).
  */
 export declare class Ledger {
     private readonly store;
     private readonly blockSize;
     private readonly serializer;
     private readonly ledgerId;
+    private readonly governanceSerializer?;
     private readonly index;
     private readonly checksumService;
     private _length;
     private _head;
     private _headEntryHash;
-    constructor(store: IBlockStore, blockSize: BlockSize, serializer: LedgerEntrySerializer, ledgerId: string);
+    private _authorizedSignerSet;
+    constructor(store: IBlockStore, blockSize: BlockSize, serializer: LedgerEntrySerializer, ledgerId: string, governanceSerializer?: GovernancePayloadSerializer | undefined);
     /** Current chain length. */
     get length(): number;
     /** Head block Checksum (block storage key), or null if empty. */
     get head(): Checksum | null;
+    /** Current quorum policy, or undefined if governance not initialized. */
+    get quorumPolicy(): IQuorumPolicy | undefined;
     /**
      * Append a new entry to the ledger.
      * Returns the Checksum of the stored block.
+     *
+     * If governance is enabled:
+     * - Genesis entry (sequenceNumber 0) must be a governance genesis payload.
+     * - Subsequent entries require the signer to be authorized (active admin or writer).
      */
     append(payload: Uint8Array, signer: ILedgerSigner): Promise<Checksum>;
+    /**
+     * Append a governance entry. Requires admin role and quorum satisfaction.
+     *
+     * @param actions - Governance actions to apply
+     * @param primarySigner - The primary signer (must be active admin)
+     * @param cosigners - Additional signers for quorum (each provides their own signature over the actions)
+     */
+    appendGovernance(actions: IGovernanceAction[], primarySigner: ILedgerSigner, cosigners?: {
+        signer: ILedgerSigner;
+        signature: SignatureUint8Array;
+    }[]): Promise<Checksum>;
+    /** Get info about a specific signer. */
+    getSignerInfo(publicKey: Uint8Array): IAuthorizedSigner | undefined;
+    /** Get the full current authorized signer set. */
+    getAuthorizedSigners(): IAuthorizedSigner[];
     /**
      * Get entry by sequence number.
      * @throws LedgerError if not found
@@ -63,6 +100,17 @@ export declare class Ledger {
      * Get the most recent entry, or null if empty.
      */
     getLatestEntry(): Promise<ILedgerEntry | null>;
+    /**
+     * Handle the genesis entry for a governance-enabled ledger.
+     * The payload must be a governance genesis payload containing the
+     * initial signer set and quorum policy.
+     */
+    private appendGenesisEntry;
+    /**
+     * Internal append logic shared by regular and governance appends.
+     * Does NOT check authorization — callers must do that first.
+     */
+    private appendInternal;
     /**
      * Compute the deterministic storage key for this ledger's metadata block.
      * The key is SHA3-512("ledger-meta:" + ledgerId).
@@ -84,10 +132,6 @@ export declare class Ledger {
     private serializeMetadata;
     /**
      * Persist the metadata block to the store under a deterministic key.
-     *
-     * Uses a LedgerMetadataBlock (validation-exempt RawDataBlock subclass)
-     * so the block can be stored at the deterministic checksum derived from
-     * the ledgerId, even though the content hash differs.
      */
     private persistMetadata;
     /**
@@ -98,9 +142,15 @@ export declare class Ledger {
      * 3. If not found, return empty ledger
      * 4. Parse metadata to get head checksum, length, and index
      * 5. Restore headEntryHash by reading the head entry
-     * 6. Return populated ledger
+     * 6. Replay governance entries to reconstruct AuthorizedSignerSet
+     * 7. Return populated ledger
+     */
+    static load(store: IBlockStore, blockSize: BlockSize, serializer: LedgerEntrySerializer, ledgerId: string, governanceSerializer?: GovernancePayloadSerializer): Promise<Ledger>;
+    /**
+     * Replay all entries from genesis to head to reconstruct the
+     * AuthorizedSignerSet from governance entries.
      */
-    static load(store: IBlockStore, blockSize: BlockSize, serializer: LedgerEntrySerializer, ledgerId: string): Promise<Ledger>;
+    private replayGovernance;
     /**
      * Parse a metadata block's binary content.
      */