@cello-protocol/client 0.0.2

package/dist/network-directory-node.js

@@ -0,0 +1,584 @@
+/**
+ * NetworkDirectoryNode — DirectoryNodeStub backed by a real libp2p connection.
+ *
+ * Implements the DirectoryNodeStub interface by dialing the directory node's
+ * /cello/frost/1.0.0 endpoint. Used in live e2e mode instead of InProcessDirectoryNodeStub.
+ *
+ * Wire protocol (one stream per operation, CBOR + it-length-prefixed):
+ *   frost_bootstrap:      push share material to directory (called from bootstrapKeyShares)
+ *   frost_commit_request: ask directory to generate a nonce commitment
+ *   frost_sign_request:   ask directory to compute a partial signature
+ */
+import { Encoder, decode as cborDecode } from "cbor-x";
+import * as lp from "it-length-prefixed";
+import { ed25519_FROST, FrostThresholdSigner } from "@cello-protocol/crypto";
+import { bootstrapKeyShares, storeDkgResult } from "@cello-protocol/crypto/frost/frost-threshold-signer.js";
+const FROST_PROTOCOL_ID = "/cello/frost/1.0.0";
+const CBOR_ENC = new Encoder({ tagUint8Array: false });
+// ─── NetworkDirectoryNode ─────────────────────────────────────────────────────
+export class NetworkDirectoryNode {
+    id;
+    #node;
+    #directoryPeerId;
+    #directoryMultiaddrs;
+    // Set during bootstrapKeyShares — used to identify which agent's share to retrieve
+    #agentPubkeyHex = null;
+    #epochId = null;
+    // Stored during receiveShare — used by tests to get the FrostPublic for signRound calls
+    #lastPub = null;
+    constructor(opts) {
+        this.id = opts.id;
+        this.#node = opts.node;
+        this.#directoryPeerId = opts.directoryPeerId;
+        this.#directoryMultiaddrs = opts.directoryMultiaddrs;
+    }
+    isReachable() {
+        // For the network path, optimistically return true at pre-ceremony check time.
+        // Actual reachability is discovered during generateCommitment/signRound.
+        return true;
+    }
+    /** Return the FrostPublic from the last receiveShare call. Used by tests to construct signRound params. */
+    getLastPub() {
+        return this.#lastPub;
+    }
+    async receiveShare(...[secret, pub]) {
+        this.#lastPub = pub;
+        if (!this.#agentPubkeyHex || !this.#epochId) {
+            throw new Error("NetworkDirectoryNode: setBootstrapContext must be called before receiveShare");
+        }
+        // Serialize FrostSecret: { identifier, signingShare }
+        const secretSerialized = {
+            identifier: secret.identifier,
+            signingShare: secret.signingShare,
+        };
+        // Serialize FrostPublic: { signers, commitments[], verifyingShares{} }
+        const pubSerialized = {
+            signers: pub.signers,
+            commitments: pub.commitments,
+            verifyingShares: pub.verifyingShares,
+        };
+        const frame = CBOR_ENC.encode({
+            type: "frost_bootstrap",
+            agentPubkey: this.#agentPubkeyHex,
+            epochId: this.#epochId,
+            secret: secretSerialized.signingShare,
+            identifier: secretSerialized.identifier,
+            commitments: pubSerialized.commitments,
+            verifyingShares: pubSerialized.verifyingShares,
+            signers: pubSerialized.signers,
+        });
+        const stream = await this.#openStream();
+        try {
+            stream.send(lp.encode.single(frame));
+            // Read the response before closing — directory sends frost_bootstrap_ok
+            for await (const chunk of lp.decode(stream)) {
+                const bytes = chunk instanceof Uint8Array ? chunk : chunk.slice();
+                const resp = cborDecode(bytes);
+                if (resp.type !== "frost_bootstrap_ok") {
+                    throw new Error(`NetworkDirectoryNode: unexpected bootstrap response: ${resp.type}`);
+                }
+                break;
+            }
+        }
+        finally {
+            stream.close().catch(() => { });
+        }
+    }
+    async generateCommitment() {
+        if (!this.#agentPubkeyHex || !this.#epochId) {
+            throw new Error("NetworkDirectoryNode: setBootstrapContext must be called before generateCommitment");
+        }
+        const frame = CBOR_ENC.encode({
+            type: "frost_commit_request",
+            agentPubkey: this.#agentPubkeyHex,
+            epochId: this.#epochId,
+            peerIdString: this.#node.getPeerId(),
+        });
+        const stream = await this.#openStream();
+        try {
+            stream.send(lp.encode.single(frame));
+            await stream.close();
+            for await (const chunk of lp.decode(stream)) {
+                const bytes = chunk instanceof Uint8Array ? chunk : chunk.slice();
+                const resp = cborDecode(bytes);
+                if (!resp.ok) {
+                    throw new Error(`NetworkDirectoryNode: commit request failed: ${resp.reason}`);
+                }
+                return {
+                    nodeId: resp.nodeId,
+                    nonceCommitment: resp.nonceCommitment,
+                    nonces: null,
+                };
+            }
+        }
+        finally {
+            stream.close().catch(() => { });
+        }
+        throw new Error("NetworkDirectoryNode: no response to frost_commit_request");
+    }
+    async signRound(params) {
+        if (!this.#agentPubkeyHex || !this.#epochId) {
+            throw new Error("NetworkDirectoryNode: setBootstrapContext must be called before signRound");
+        }
+        const frame = CBOR_ENC.encode({
+            type: "frost_sign_request",
+            agentPubkey: this.#agentPubkeyHex,
+            epochId: this.#epochId,
+            framedMsg: params.msg, // already framed (context\0tbs) by the coordinator
+            commitmentList: params.commitmentList,
+            ceremonyId: params.ceremonyId,
+            // Use ceremonyId as peerIdString to match directory's markInFlight registration
+            peerIdString: params.ceremonyId,
+        });
+        const stream = await this.#openStream();
+        try {
+            stream.send(lp.encode.single(frame));
+            await stream.close();
+            for await (const chunk of lp.decode(stream)) {
+                const bytes = chunk instanceof Uint8Array ? chunk : chunk.slice();
+                const resp = cborDecode(bytes);
+                if (!resp.ok) {
+                    return null; // treat as timeout — coordinator will exclude this node
+                }
+                const sig = resp.partialSignature;
+                if (!sig)
+                    return null;
+                return sig instanceof Uint8Array ? sig : new Uint8Array(sig);
+            }
+        }
+        finally {
+            stream.close().catch(() => { });
+        }
+        return null;
+    }
+    // Called by the network-aware bootstrapKeyShares before distributing shares
+    setBootstrapContext(agentPubkeyHex, epochId) {
+        this.#agentPubkeyHex = agentPubkeyHex;
+        this.#epochId = epochId;
+    }
+    /** Open a /cello/frost/1.0.0 stream to this directory node. Used by DKG coordinator. */
+    async openStream() {
+        return this.#openStream();
+    }
+    async #openStream() {
+        // Ensure we have a connection to the directory node
+        try {
+            return await this.#node.newStream(this.#directoryPeerId, FROST_PROTOCOL_ID);
+        }
+        catch {
+            // Try dialing first if not connected
+            await this.#node.dial(this.#directoryMultiaddrs[0]);
+            return await this.#node.newStream(this.#directoryPeerId, FROST_PROTOCOL_ID);
+        }
+    }
+}
+// ─── DKG round methods on NetworkDirectoryNode ───────────────────────────────
+// These methods are used by runNetworkDkg to execute the 3 DKG rounds
+// over /cello/frost/1.0.0 streams. They are internal to the DKG coordinator flow.
+/**
+ * Run DKG round 1 with this directory node.
+ * Opens a new stream, sends frost_dkg_round1_request, returns the broadcast.
+ */
+async function dkgRound1WithNode(node, agentPubkeyHex, epochId, signers, preAuthToken) {
+    const frame = CBOR_ENC.encode({
+        type: "frost_dkg_round1_request",
+        agentPubkey: agentPubkeyHex,
+        epochId,
+        signers,
+        // OPS-AGENT-001: include preAuthToken when present (mandatory in M6+)
+        ...(preAuthToken !== undefined ? { preAuthToken } : {}),
+    });
+    const stream = await node.openStream();
+    try {
+        stream.send(lp.encode.single(frame));
+        for await (const chunk of lp.decode(stream)) {
+            const bytes = chunk instanceof Uint8Array ? chunk : chunk.slice();
+            const parsed = parseDkgRound1Response(bytes);
+            if (parsed.kind === "invalid")
+                throw new Error("dkgRound1: invalid response");
+            if (parsed.kind === "preauth_error")
+                throw new Error(`dkgRound1 rejected: ${parsed.reason}`);
+            const resp = parsed.response;
+            if (!resp.ok)
+                throw new Error(`dkgRound1 failed: ${resp.reason}`);
+            return resp.broadcast;
+        }
+    }
+    finally {
+        stream.close().catch(() => { });
+    }
+    throw new Error("dkgRound1: no response received");
+}
+/**
+ * Run DKG round 2 with this directory node.
+ * Opens a new stream, sends frost_dkg_round2_request, returns sharesForOthers.
+ */
+async function dkgRound2WithNode(node, agentPubkeyHex, epochId, othersRound1) {
+    const frame = CBOR_ENC.encode({
+        type: "frost_dkg_round2_request",
+        agentPubkey: agentPubkeyHex,
+        epochId,
+        othersRound1: othersRound1.map((b) => ({
+            identifier: b.identifier,
+            commitment: b.commitment,
+            proofOfKnowledge: b.proofOfKnowledge,
+        })),
+    });
+    const stream = await node.openStream();
+    try {
+        stream.send(lp.encode.single(frame));
+        for await (const chunk of lp.decode(stream)) {
+            const bytes = chunk instanceof Uint8Array ? chunk : chunk.slice();
+            const resp = parseDkgRound2Response(bytes);
+            if (!resp)
+                throw new Error("dkgRound2: invalid response");
+            if (!resp.ok)
+                throw new Error(`dkgRound2 failed: ${resp.reason}`);
+            return resp.sharesForOthers;
+        }
+    }
+    finally {
+        stream.close().catch(() => { });
+    }
+    throw new Error("dkgRound2: no response received");
+}
+/**
+ * Run DKG round 3 with this directory node.
+ * Opens a new stream, sends frost_dkg_round3_request, returns shareCommitment.
+ */
+async function dkgRound3WithNode(node, agentPubkeyHex, epochId, sharesForMe, allRound1) {
+    const frame = CBOR_ENC.encode({
+        type: "frost_dkg_round3_request",
+        agentPubkey: agentPubkeyHex,
+        epochId,
+        sharesForMe: sharesForMe.map((s) => ({
+            identifier: s.signerIdentifier,
+            targetIdentifier: s.targetIdentifier,
+            signingShare: s.signingShare,
+        })),
+        allOthersRound1: allRound1.map((b) => ({
+            identifier: b.identifier,
+            commitment: b.commitment,
+            proofOfKnowledge: b.proofOfKnowledge,
+        })),
+    });
+    const stream = await node.openStream();
+    try {
+        stream.send(lp.encode.single(frame));
+        for await (const chunk of lp.decode(stream)) {
+            const bytes = chunk instanceof Uint8Array ? chunk : chunk.slice();
+            const resp = parseDkgRound3Response(bytes);
+            if (!resp)
+                throw new Error("dkgRound3: invalid response");
+            if (!resp.ok)
+                throw new Error(`dkgRound3 failed: ${resp.reason}`);
+            return resp.shareCommitment;
+        }
+    }
+    finally {
+        stream.close().catch(() => { });
+    }
+    throw new Error("dkgRound3: no response received");
+}
+function parseDkgRound1Response(bytes) {
+    let obj;
+    try {
+        obj = cborDecode(bytes);
+    }
+    catch {
+        return { kind: "invalid" };
+    }
+    if (typeof obj !== "object" || obj === null)
+        return { kind: "invalid" };
+    const o = obj;
+    // Handle preauth_error frames from the directory (CRIT-1: previously silently dropped)
+    if (o["type"] === "preauth_error") {
+        const reason = typeof o["reason"] === "string" ? o["reason"] : "PRE_AUTH_TOKEN_MISSING";
+        return { kind: "preauth_error", reason };
+    }
+    if (o["type"] !== "frost_dkg_round1_response")
+        return { kind: "invalid" };
+    if (o["ok"] === true) {
+        const raw = o["broadcast"];
+        if (typeof raw !== "object" || raw === null)
+            return { kind: "invalid" };
+        const b = raw;
+        const identifier = typeof b["identifier"] === "string" ? b["identifier"] : null;
+        const proofOfKnowledge = toU8(b["proofOfKnowledge"]);
+        const commitment = parseU8Array(b["commitment"]);
+        if (!identifier || !proofOfKnowledge || !commitment)
+            return { kind: "invalid" };
+        return { kind: "response", response: { type: "frost_dkg_round1_response", ok: true, broadcast: { identifier, commitment, proofOfKnowledge } } };
+    }
+    const reason = o["reason"];
+    if (reason !== "already_in_progress" && reason !== "internal_error")
+        return { kind: "invalid" };
+    return { kind: "response", response: { type: "frost_dkg_round1_response", ok: false, reason } };
+}
+function parseDkgRound2Response(bytes) {
+    let obj;
+    try {
+        obj = cborDecode(bytes);
+    }
+    catch {
+        return null;
+    }
+    if (typeof obj !== "object" || obj === null)
+        return null;
+    const o = obj;
+    if (o["type"] !== "frost_dkg_round2_response")
+        return null;
+    if (o["ok"] === true) {
+        const rawShares = o["sharesForOthers"];
+        if (!Array.isArray(rawShares))
+            return null;
+        const sharesForOthers = [];
+        for (const item of rawShares) {
+            if (typeof item !== "object" || item === null)
+                return null;
+            const s = item;
+            // Accept both "signerIdentifier" (protocol-types canonical) and "identifier" (new wire)
+            const signerIdentifier = typeof s["signerIdentifier"] === "string" ? s["signerIdentifier"] :
+                typeof s["identifier"] === "string" ? s["identifier"] : null;
+            const targetIdentifier = typeof s["targetIdentifier"] === "string" ? s["targetIdentifier"] : null;
+            const signingShare = toU8(s["signingShare"]);
+            if (!signerIdentifier || !targetIdentifier || !signingShare)
+                return null;
+            sharesForOthers.push({ signerIdentifier, targetIdentifier, signingShare });
+        }
+        return { type: "frost_dkg_round2_response", ok: true, sharesForOthers };
+    }
+    const reason = o["reason"];
+    if (reason !== "round1_not_complete" && reason !== "verification_failed" && reason !== "internal_error")
+        return null;
+    return { type: "frost_dkg_round2_response", ok: false, reason };
+}
+function parseDkgRound3Response(bytes) {
+    let obj;
+    try {
+        obj = cborDecode(bytes);
+    }
+    catch {
+        return null;
+    }
+    if (typeof obj !== "object" || obj === null)
+        return null;
+    const o = obj;
+    if (o["type"] !== "frost_dkg_round3_response")
+        return null;
+    if (o["ok"] === true) {
+        const sc = o["shareCommitment"];
+        // shareCommitment comes as raw bytes (CBOR-encoded Uint8Array)
+        const shareCommitment = typeof sc === "string"
+            ? new Uint8Array(Buffer.from(sc, "hex"))
+            : sc instanceof Uint8Array ? sc
+                : Buffer.isBuffer(sc) ? new Uint8Array(sc)
+                    : null;
+        if (!shareCommitment || shareCommitment.length !== 32)
+            return null;
+        return { type: "frost_dkg_round3_response", ok: true, shareCommitment };
+    }
+    const reason = o["reason"];
+    if (reason !== "round2_not_complete" && reason !== "share_verification_failed" && reason !== "internal_error")
+        return null;
+    return { type: "frost_dkg_round3_response", ok: false, reason };
+}
+function toU8(v) {
+    if (v instanceof Uint8Array)
+        return v;
+    if (Buffer.isBuffer(v))
+        return new Uint8Array(v);
+    return null;
+}
+function parseU8Array(v) {
+    if (!Array.isArray(v))
+        return null;
+    const result = [];
+    for (const item of v) {
+        const b = toU8(item);
+        if (!b)
+            return null;
+        result.push(b);
+    }
+    return result;
+}
+// ─── bootstrapNetworkKeyShares ────────────────────────────────────────────────
+/**
+ * Network-aware FROST bootstrap for live e2e mode.
+ *
+ * Runs trustedDealer locally, then pushes each directory node's share over the
+ * /cello/frost/1.0.0 network protocol. Returns a FrostThresholdSigner configured
+ * to use NetworkDirectoryNodes, plus the primaryPubkey.
+ *
+ * NODE_ENV=test guard is kept because this still uses the trustedDealer shortcut.
+ * Real DKG (M3) will replace this entirely.
+ */
+export async function bootstrapNetworkKeyShares(agentPubkey, opts) {
+    // bootstrapKeyShares uses trustedDealer — a test-harness shortcut, not real DKG (M3+).
+    // This function inherits that constraint. The caller (cello-mcp.ts) guards with NODE_ENV=test.
+    if (process.env.NODE_ENV !== "test") {
+        throw new Error("bootstrapNetworkKeyShares uses trustedDealer which is test-only. Real DKG (M3) required in production.");
+    }
+    const agentPubkeyHex = Buffer.from(agentPubkey).toString("hex");
+    const epochId = `${agentPubkeyHex}:epoch:1`;
+    // Set context on all nodes so receiveShare knows which agent/epoch to use
+    for (const node of opts.directoryNodes) {
+        node.setBootstrapContext(agentPubkeyHex, epochId);
+    }
+    // bootstrapKeyShares runs trustedDealer and calls node.receiveShare() on each node.
+    // For NetworkDirectoryNode, receiveShare() sends the share over the network.
+    const result = await bootstrapKeyShares(agentPubkey, {
+        threshold: opts.threshold,
+        participants: opts.participants,
+        directoryNodeStubs: opts.directoryNodes,
+    });
+    const signer = new FrostThresholdSigner({
+        threshold: opts.threshold,
+        participants: opts.participants,
+        directoryNodeStubs: opts.directoryNodes,
+    }, agentPubkey);
+    return { signer, primaryPubkey: result.primaryPubkey };
+}
+// ─── runNetworkDkg ─────────────────────────────────────────────────────────────
+/**
+ * Run a real 3-round FROST DKG ceremony with directory nodes over /cello/frost/1.0.0.
+ *
+ * Production path for key establishment. The client acts as DKG coordinator:
+ *   Round 1: All nodes generate their secret polynomials. Client does the same.
+ *   Round 2: Client collects all round1 broadcasts and distributes them to all nodes.
+ *            All nodes compute shares for every other participant.
+ *   Round 3: Client routes round2 shares to recipients and all nodes finalize.
+ *            All nodes return shareCommitment = group public key.
+ *
+ * Validates that all nodes derive the same primary_pubkey before returning.
+ *
+ * After a successful DKG:
+ *   - Each directory node has its FrostSecret stored (via dkgRound3)
+ *   - The client's local share is stored via storeDkgResult
+ *   - Returns a FrostThresholdSigner for future signing ceremonies
+ *
+ * Crypto reference: RFC 9591 (FROST DKG)
+ *
+ * @param agentPubkey - client's Ed25519 K_local public key (32 bytes)
+ * @param opts.threshold - minimum signers required (t in t-of-n)
+ * @param opts.directoryNodes - the n directory nodes (each will hold a share)
+ */
+export async function runNetworkDkg(agentPubkey, opts) {
+    const agentPubkeyHex = Buffer.from(agentPubkey).toString("hex");
+    // Client identifier: same derivation as used in bootstrapKeyShares for consistency
+    const clientIdStr = `client:${agentPubkeyHex}`;
+    const clientIdentifier = ed25519_FROST.Identifier.derive(clientIdStr);
+    const epochId = `${agentPubkeyHex}:epoch:1`;
+    // Total participants = directory nodes + 1 (client)
+    // threshold is the signing threshold (t-of-n where n = directoryNodes.length + 1)
+    const signers = { min: opts.threshold, max: opts.participants + 1 };
+    // ─── Round 1 ────────────────────────────────────────────────────────────────
+    // Client runs DKG.round1 locally; all directory nodes run round1 via streams.
+    // RFC 9591 §5.1
+    const clientR1 = ed25519_FROST.DKG.round1(clientIdentifier, signers);
+    const clientRound1Broadcast = {
+        identifier: clientR1.public.identifier,
+        commitment: clientR1.public.commitment.map((c) => new Uint8Array(c)),
+        proofOfKnowledge: new Uint8Array(clientR1.public.proofOfKnowledge),
+    };
+    // Directory nodes run round1 in parallel
+    const nodeRound1Broadcasts = await Promise.all(opts.directoryNodes.map((node) => dkgRound1WithNode(node, agentPubkeyHex, epochId, signers, opts.preAuthToken)));
+    // allRound1 = client + all directory node broadcasts
+    const allRound1 = [clientRound1Broadcast, ...nodeRound1Broadcasts];
+    // ─── Round 2 ────────────────────────────────────────────────────────────────
+    // Client runs DKG.round2 locally (receives others' round1 → generates shares for others).
+    // All directory nodes run round2 in parallel.
+    // RFC 9591 §5.2
+    // For the client, othersRound1 = all directory nodes' broadcasts
+    const clientOthersRound1 = nodeRound1Broadcasts.map((b) => ({
+        identifier: b.identifier,
+        commitment: b.commitment.map((c) => new Uint8Array(c)),
+        proofOfKnowledge: new Uint8Array(b.proofOfKnowledge),
+    }));
+    const clientR2 = ed25519_FROST.DKG.round2(clientR1.secret, clientOthersRound1);
+    // For each directory node, othersRound1 = all other participants EXCEPT that node itself
+    const nodeRound2Results = await Promise.all(opts.directoryNodes.map((node, i) => {
+        // Each node receives round1 from everyone EXCEPT itself
+        const othersForNode = allRound1.filter((_, j) => j !== i + 1 // i+1 because index 0 is the client
+        );
+        return dkgRound2WithNode(node, agentPubkeyHex, epochId, othersForNode);
+    }));
+    // ─── Route round2 shares ─────────────────────────────────────────────────────
+    // Collect all shares (client-generated + node-generated), route to recipients.
+    // Each participant needs shares from all OTHER participants.
+    // sharesForClient: shares where targetIdentifier === clientIdentifier
+    // sharesForNode[i]: shares where targetIdentifier === nodeRound1Broadcasts[i].identifier
+    // Build a map: targetIdentifier → accumulated DkgRound2Share[]
+    const sharesForAll = new Map();
+    // Add client's shares (for each directory node)
+    const clientSharesRecord = clientR2;
+    for (const [targetId, share] of Object.entries(clientSharesRecord)) {
+        const shares = sharesForAll.get(targetId) ?? [];
+        shares.push({
+            signerIdentifier: clientIdentifier,
+            targetIdentifier: targetId,
+            signingShare: new Uint8Array(share.signingShare),
+        });
+        sharesForAll.set(targetId, shares);
+    }
+    // Add directory node shares (for client and other directory nodes)
+    for (const nodeShares of nodeRound2Results) {
+        for (const share of nodeShares) {
+            const shares = sharesForAll.get(share.targetIdentifier) ?? [];
+            shares.push(share);
+            sharesForAll.set(share.targetIdentifier, shares);
+        }
+    }
+    // ─── Round 3 ────────────────────────────────────────────────────────────────
+    // Client runs DKG.round3 locally.
+    // All directory nodes run round3 in parallel.
+    // RFC 9591 §5.3
+    // Client's round3: receives shares addressed to clientIdentifier
+    const clientSharesForMe = (sharesForAll.get(clientIdentifier) ?? []).map((s) => ({
+        identifier: s.signerIdentifier, // SENDER's identifier (for round3 matching)
+        signingShare: new Uint8Array(s.signingShare),
+    }));
+    const clientKey = ed25519_FROST.DKG.round3(clientR1.secret, clientOthersRound1, clientSharesForMe);
+    // Directory nodes' round3: parallel
+    const nodeCommitments = await Promise.all(opts.directoryNodes.map((node, i) => {
+        const nodeId = nodeRound1Broadcasts[i].identifier;
+        const nodeSharesForMe = sharesForAll.get(nodeId) ?? [];
+        const allOthersForNode = allRound1.filter((_, j) => j !== i + 1);
+        return dkgRound3WithNode(node, agentPubkeyHex, epochId, nodeSharesForMe, allOthersForNode);
+    }));
+    // ─── Verify all nodes agree on primary_pubkey ─────────────────────────────
+    const primaryPubkey = new Uint8Array(clientKey.public.commitments[0]);
+    const primaryPubkeyHex = Buffer.from(primaryPubkey).toString("hex");
+    for (const nodeCommitment of nodeCommitments) {
+        const nodeHex = Buffer.from(nodeCommitment).toString("hex");
+        if (nodeHex !== primaryPubkeyHex) {
+            // Clean up client secret to avoid leaking state
+            try {
+                ed25519_FROST.DKG.clean(clientR1.secret);
+            }
+            catch { /* ignore */ }
+            throw new Error(`DKG failed: node commitment ${nodeHex.slice(0, 16)}… does not match client primary_pubkey ${primaryPubkeyHex.slice(0, 16)}…`);
+        }
+    }
+    // ─── Store client's local DKG share ──────────────────────────────────────
+    // storeDkgResult is the production key storage path (no NODE_ENV guard).
+    storeDkgResult(agentPubkeyHex, clientKey.secret, clientKey.public);
+    // Clean up DKG secret now that it's been safely stored
+    try {
+        ed25519_FROST.DKG.clean(clientR1.secret);
+    }
+    catch { /* ignore */ }
+    // Set signing context on each directory node so generateCommitment/signRound can
+    // identify which agent's share to use in future FROST signing ceremonies.
+    for (const node of opts.directoryNodes) {
+        node.setBootstrapContext(agentPubkeyHex, epochId);
+    }
+    // ─── Build FrostThresholdSigner ───────────────────────────────────────────
+    const signer = new FrostThresholdSigner({
+        threshold: opts.threshold,
+        participants: opts.participants,
+        directoryNodeStubs: opts.directoryNodes,
+    }, agentPubkey);
+    return { signer, primaryPubkey };
+}
+//# sourceMappingURL=network-directory-node.js.map

package/dist/network-directory-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-directory-node.js","sourceRoot":"","sources":["../src/network-directory-node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AAgB5G,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAC/C,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAEvD,iFAAiF;AAEjF,MAAM,OAAO,oBAAoB;IACtB,EAAE,CAAS;IAEX,KAAK,CAAY;IACjB,gBAAgB,CAAS;IACzB,oBAAoB,CAAW;IAExC,mFAAmF;IACnF,eAAe,GAAkB,IAAI,CAAC;IACtC,QAAQ,GAAkB,IAAI,CAAC;IAE/B,wFAAwF;IACxF,QAAQ,GAA4D,IAAI,CAAC;IAEzE,YAAY,IAKX;QACC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC;QAC7C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,mBAAmB,CAAC;IACvD,CAAC;IAED,WAAW;QACT,+EAA+E;QAC/E,yEAAyE;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2GAA2G;IAC3G,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAgD;QAChF,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAClG,CAAC;QAED,sDAAsD;QACtD,MAAM,gBAAgB,GAAG;YACvB,UAAU,EAAG,MAA4C,CAAC,UAAU;YACpE,YAAY,EAAG,MAAkD,CAAC,YAAY;SAC/E,CAAC;QAEF,uEAAuE;QACvE,MAAM,aAAa,GAAG;YACpB,OAAO,EAAG,GAA4D,CAAC,OAAO;YAC9E,WAAW,EAAG,GAAgD,CAAC,WAAW;YAC1E,eAAe,EAAG,GAAkE,CAAC,eAAe;SACrG,CAAC;QAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,IAAI,CAAC,eAAe;YACjC,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,MAAM,EAAE,gBAAgB,CAAC,YAAY;YACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;YACvC,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,OAAO,EAAE,aAAa,CAAC,OAAO;SAC/B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,wEAAwE;YACxE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAA4C,CAAC,KAAK,EAAE,CAAC;gBAC1G,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAqB,CAAC;gBACnD,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,IAAI,CAAC,eAAe;YACjC,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;SACrC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAErB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAA4C,CAAC,KAAK,EAAE,CAAC;gBAC1G,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAM5B,CAAC;gBAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjF,CAAC;gBAED,OAAO;oBACL,MAAM,EAAE,IAAI,CAAC,MAAO;oBACpB,eAAe,EAAE,IAAI,CAAC,eAAgB;oBACtC,MAAM,EAAE,IAA2C;iBACpD,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,IAAI,CAAC,eAAe;YACjC,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,mDAAmD;YAC1E,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gFAAgF;YAChF,YAAY,EAAE,MAAM,CAAC,UAAU;SAChC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAErB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAA4C,CAAC,KAAK,EAAE,CAAC;gBAC1G,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAK5B,CAAC;gBAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,CAAC,wDAAwD;gBACvE,CAAC;gBAED,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC;gBAClC,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC;gBACtB,OAAO,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAA6B,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,mBAAmB,CAAC,cAAsB,EAAE,OAAe;QACzD,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,oDAAoD;QACpD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAE,CAAC,CAAC;YACrD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF;AAED,gFAAgF;AAEhF,sEAAsE;AACtE,kFAAkF;AAElF;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAA0B,EAC1B,cAAsB,EACtB,OAAe,EACf,OAAqC,EACrC,YAAqB;IAErB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,cAAc;QAC3B,OAAO;QACP,OAAO;QACP,sEAAsE;QACtE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAA4C,CAAC,KAAK,EAAE,CAAC;YAC1G,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC9E,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAA0B,EAC1B,cAAsB,EACtB,OAAe,EACf,YAAkC;IAElC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,cAAc;QAC3B,OAAO;QACP,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;SACrC,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAA4C,CAAC,KAAK,EAAE,CAAC;YAC1G,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAA0B,EAC1B,cAAsB,EACtB,OAAe,EACf,WAA6B,EAC7B,SAA+B;IAE/B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,cAAc;QAC3B,OAAO;QACP,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,UAAU,EAAE,CAAC,CAAC,gBAAgB;YAC9B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAC;QACH,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;SACrC,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAA4C,CAAC,KAAK,EAAE,CAAC;YAC1G,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACrD,CAAC;AAUD,SAAS,sBAAsB,CAAC,KAAiB;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAAC,CAAC;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxE,MAAM,CAAC,GAAG,GAA8B,CAAC;IAEzC,uFAAuF;IACvF,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,eAAe,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC;QACxF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,2BAA2B;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1E,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IAClJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAiB;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,eAAe,GAAqB,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC3D,MAAM,CAAC,GAAG,IAA+B,CAAC;YAC1C,wFAAwF;YACxF,MAAM,gBAAgB,GACpB,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACnE,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClG,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC;YACzE,eAAe,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACrH,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAiB;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAChC,+DAA+D;QAC/D,MAAM,eAAe,GAAG,OAAO,EAAE,KAAK,QAAQ;YAC5C,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE;gBAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,EAAY,CAAC;oBACpD,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,2BAA2B,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC3H,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,IAAI,CAAC,CAAU;IACtB,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAW,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAuB,EACvB,IAIC;IAED,uFAAuF;IACvF,+FAA+F;IAC/F,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,GAAG,cAAc,UAAU,CAAC;IAE5C,0EAA0E;IAC1E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,oFAAoF;IACpF,6EAA6E;IAC7E,MAAM,MAAM,GAAoB,MAAM,kBAAkB,CAAC,WAAW,EAAE;QACpE,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,IAAI,CAAC,cAAc;KACxC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC;QACE,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,IAAI,CAAC,cAAc;KACxC,EACD,WAAW,CACZ,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;AACzD,CAAC;AAED,kFAAkF;AAElF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAuB,EACvB,IAMC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,mFAAmF;IACnF,MAAM,WAAW,GAAG,UAAU,cAAc,EAAE,CAAC;IAC/C,MAAM,gBAAgB,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,cAAc,UAAU,CAAC;IAE5C,oDAAoD;IACpD,kFAAkF;IAClF,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;IAEpE,+EAA+E;IAC/E,8EAA8E;IAC9E,gBAAgB;IAEhB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,qBAAqB,GAAuB;QAChD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;QACtC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAChF,gBAAgB,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACnE,CAAC;IAEF,yCAAyC;IACzC,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAC7E,CACF,CAAC;IAEF,qDAAqD;IACrD,MAAM,SAAS,GAAyB,CAAC,qBAAqB,EAAE,GAAG,oBAAoB,CAAC,CAAC;IAEzF,+EAA+E;IAC/E,0FAA0F;IAC1F,8CAA8C;IAC9C,gBAAgB;IAEhB,iEAAiE;IACjE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACtD,gBAAgB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC;KACrD,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAE/E,yFAAyF;IACzF,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAClC,wDAAwD;QACxD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9C,CAAC,KAAK,CAAC,GAAG,CAAC,CAAE,oCAAoC;SAClD,CAAC;QACF,OAAO,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC,CAAC,CACH,CAAC;IAEF,gFAAgF;IAChF,+EAA+E;IAC/E,6DAA6D;IAC7D,sEAAsE;IACtE,yFAAyF;IAEzF,+DAA+D;IAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEzD,gDAAgD;IAChD,MAAM,kBAAkB,GAAG,QAA4E,CAAC;IACxG,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC;YACV,gBAAgB,EAAE,gBAAgB;YAClC,gBAAgB,EAAE,QAAQ;YAC1B,YAAY,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;SACjD,CAAC,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,kCAAkC;IAClC,8CAA8C;IAC9C,gBAAgB;IAEhB,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,UAAU,EAAE,CAAC,CAAC,gBAAgB,EAAG,4CAA4C;QAC7E,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;KAC7C,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;IAEnG,oCAAoC;IACpC,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,GAAG,CACvC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC;QACnD,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,OAAO,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAC7F,CAAC,CAAC,CACH,CAAC;IAEF,6EAA6E;IAC7E,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEpE,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,gDAAgD;YAChD,IAAI,CAAC;gBAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,0CAA0C,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAC9H,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAEnE,uDAAuD;IACvD,IAAI,CAAC;QAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExE,iFAAiF;IACjF,0EAA0E;IAC1E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC;QACE,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,IAAI,CAAC,cAAc;KACxC,EACD,WAAW,CACZ,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnC,CAAC"}