@cello-protocol/client 0.0.21 → 0.0.23

package/dist/client-send-helpers.d.ts

@@ -0,0 +1,25 @@
+/**
+ * client-send-helpers.ts — low-level send and receive utilities for CelloClientImpl.
+ *
+ * Extracted from client.ts to keep the facade under the 600-line AC budget.
+ */
+import type { CelloNode } from "@cello-protocol/transport";
+import type { Stream } from "@libp2p/interface";
+import type { SendResult, ReceivedEnvelope } from "./types.js";
+export declare function isStructuredError(err: unknown, reason: string): boolean;
+export declare function mapSendError(err: unknown): "remote_rejected" | "connection_lost" | "peer_unreachable" | "transport_not_started";
+/**
+ * Open a CELLO_PROTOCOL_ID stream to peerId, send bytes length-prefixed,
+ * drain the read side, and return a SendResult.
+ */
+export declare function sendBytesViaNode(node: CelloNode, peerId: string, bytes: Uint8Array, contentHash: Uint8Array | undefined): Promise<SendResult>;
+/**
+ * Read a single length-prefixed envelope from an inbound stream,
+ * validate it, and push it onto the receive queue.
+ * Extracted from CelloClientImpl.handleInbound.
+ */
+export declare function handleInboundEnvelope(stream: Stream, receiveQueues: Map<string, ReceivedEnvelope[]>, arrivalLog: Array<{
+    senderPubkeyHex: string;
+    envelope: ReceivedEnvelope;
+}>, onMessageQueued: ((senderPubkeyHex: string) => void) | undefined): Promise<void>;
+//# sourceMappingURL=client-send-helpers.d.ts.map

package/dist/client-send-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-send-helpers.d.ts","sourceRoot":"","sources":["../src/client-send-helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAI/D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOvE;AAED,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,GACX,iBAAiB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,uBAAuB,CAOtF;AAID;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,SAAS,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,UAAU,CAAC,CA6BrB;AAID;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAC9C,UAAU,EAAE,KAAK,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAC1E,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,GAC/D,OAAO,CAAC,IAAI,CAAC,CAyCf"}

package/dist/client-send-helpers.js

@@ -0,0 +1,118 @@
+/**
+ * client-send-helpers.ts — low-level send and receive utilities for CelloClientImpl.
+ *
+ * Extracted from client.ts to keep the facade under the 600-line AC budget.
+ */
+import * as lp from "it-length-prefixed";
+import { deserializeEnvelope, validateEnvelope } from "@cello-protocol/protocol-types";
+import { CELLO_PROTOCOL_ID } from "@cello-protocol/transport";
+// ─── Error helpers ────────────────────────────────────────────────────────────
+export function isStructuredError(err, reason) {
+    return (typeof err === "object" &&
+        err !== null &&
+        "reason" in err &&
+        err.reason === reason);
+}
+export function mapSendError(err) {
+    if (isStructuredError(err, "node_stopped"))
+        return "transport_not_started";
+    if (isStructuredError(err, "connection_lost"))
+        return "connection_lost";
+    if (isStructuredError(err, "protocol_not_supported"))
+        return "peer_unreachable";
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg.includes("reset") || msg.includes("aborted"))
+        return "remote_rejected";
+    return "connection_lost";
+}
+// ─── Core send path ───────────────────────────────────────────────────────────
+/**
+ * Open a CELLO_PROTOCOL_ID stream to peerId, send bytes length-prefixed,
+ * drain the read side, and return a SendResult.
+ */
+export async function sendBytesViaNode(node, peerId, bytes, contentHash) {
+    let stream;
+    try {
+        stream = await node.newStream(peerId, CELLO_PROTOCOL_ID);
+    }
+    catch (err) {
+        const reason = isStructuredError(err, "node_stopped")
+            ? "transport_not_started"
+            : "peer_unreachable";
+        return { delivered: false, reason };
+    }
+    try {
+        stream.send(lp.encode.single(bytes));
+        await stream.close();
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-unused-vars
+            for await (const _ of lp.decode(stream)) { /* drain */ }
+        }
+        catch { /* read side error — ignore */ }
+        if (stream.status === "reset" || stream.status === "aborted") {
+            return { delivered: false, reason: "remote_rejected" };
+        }
+        const hashHex = contentHash ? Buffer.from(contentHash).toString("hex") : "";
+        return { delivered: true, contentHash: hashHex };
+    }
+    catch (err) {
+        return { delivered: false, reason: mapSendError(err) };
+    }
+}
+// ─── Inbound envelope handler ─────────────────────────────────────────────────
+/**
+ * Read a single length-prefixed envelope from an inbound stream,
+ * validate it, and push it onto the receive queue.
+ * Extracted from CelloClientImpl.handleInbound.
+ */
+export async function handleInboundEnvelope(stream, receiveQueues, arrivalLog, onMessageQueued) {
+    let payload;
+    let timeoutFired = false;
+    const readFrame = async () => {
+        for await (const chunk of lp.decode(stream)) {
+            payload = chunk.slice();
+            return;
+        }
+    };
+    let timerId;
+    const timeout = new Promise((_, reject) => {
+        timerId = setTimeout(() => { timeoutFired = true; reject(new Error("truncated_frame")); }, 5_000);
+    });
+    try {
+        await Promise.race([readFrame(), timeout]);
+        clearTimeout(timerId);
+    }
+    catch {
+        clearTimeout(timerId);
+        stream.abort(new Error(timeoutFired ? "truncated_frame: read timeout" : "truncated_frame: stream error"));
+        return;
+    }
+    if (!payload) {
+        stream.abort(new Error("truncated_frame: no frame received"));
+        return;
+    }
+    const deserResult = deserializeEnvelope(payload);
+    if (!deserResult.ok) {
+        stream.abort(new Error(`malformed_envelope: ${deserResult.error.reason}`));
+        return;
+    }
+    const validateResult = validateEnvelope(deserResult.envelope);
+    if (!validateResult.ok) {
+        stream.abort(new Error(`validation_failed: ${validateResult.error.reason}`));
+        return;
+    }
+    const senderHex = Buffer.from(deserResult.envelope.sender_pubkey).toString("hex");
+    const received = {
+        content: deserResult.envelope.content,
+        senderPubkey: deserResult.envelope.sender_pubkey,
+        contentHash: deserResult.envelope.content_hash,
+        timestamp: deserResult.envelope.timestamp,
+    };
+    if (!receiveQueues.has(senderHex))
+        receiveQueues.set(senderHex, []);
+    receiveQueues.get(senderHex).push(received);
+    arrivalLog.push({ senderPubkeyHex: senderHex, envelope: received });
+    onMessageQueued?.(senderHex);
+    await stream.close().catch(() => { });
+}
+//# sourceMappingURL=client-send-helpers.js.map

package/dist/client-send-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-send-helpers.js","sourceRoot":"","sources":["../src/client-send-helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAK9D,iFAAiF;AAEjF,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,MAAc;IAC5D,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,QAAQ,IAAI,GAAG;QACd,GAA+B,CAAC,MAAM,KAAK,MAAM,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAY;IAEZ,IAAI,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC3E,IAAI,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACxE,IAAI,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAChF,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC/E,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAe,EACf,MAAc,EACd,KAAiB,EACjB,WAAmC;IAEnC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC;YACnD,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,kBAAkB,CAAC;QACvB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,IAAI,CAAC;YACH,6DAA6D;YAC7D,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;QAE1C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,aAA8C,EAC9C,UAA0E,EAC1E,eAAgE;IAEhE,IAAI,OAA+B,CAAC;IACpC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;QAC1C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO,GAAI,KAA4C,CAAC,KAAK,EAAE,CAAC;YAChE,OAAO;QACT,CAAC;IACH,CAAC,CAAC;IACF,IAAI,OAAkD,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC9C,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,GAAG,YAAY,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EACpE,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC1G,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACxF,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,uBAAuB,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC5G,MAAM,cAAc,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,sBAAsB,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACjH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAqB;QACjC,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO;QACrC,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC,aAAa;QAChD,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,YAAY;QAC9C,SAAS,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS;KAC1C,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACpE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,UAAU,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/client-startup.d.ts

@@ -0,0 +1,74 @@
+/**
+ * client-startup.ts — PERSIST-024: loadClientStartupState
+ *
+ * Extracted from CelloClientImpl.loadPersistedState to keep client.ts under AC-005 line budget.
+ * Loads all durable state from the SQLCipher DB and populates in-memory state via the
+ * StartupContext interface.
+ *
+ * Security invariants:
+ *   SI-001: signing_share bytes never appear in any log event.
+ *   SI-002: secret_key_blob bytes never appear in any log event.
+ *
+ * Crypto refs: RFC 9591 (FROST), NIST FIPS 204 (ML-DSA-44)
+ */
+import type { IThresholdSigner, MlDsaKeyProvider } from "@cello-protocol/crypto";
+import type { CelloNode } from "@cello-protocol/transport";
+import type { RegistrationState, ClientConnectionRecord } from "@cello-protocol/protocol-types";
+import type { Logger } from "@cello-protocol/interfaces";
+import type { ClientStatePersistence } from "./client-state-persistence.js";
+import type { SessionRecord, PeerEntry } from "./types.js";
+import type { SignalRequirementPolicy } from "./connection-policy.js";
+import type { ReviewQueueItem } from "./connection-manager.js";
+/**
+ * Narrow interface providing access to the facade's mutable state and manager callbacks
+ * needed during startup state restoration.
+ */
+export interface StartupContext {
+    readonly node: CelloNode;
+    readonly logger: Logger;
+    readonly persistence: ClientStatePersistence;
+    getDirectoryEndpoint(): {
+        peer_id: string;
+        multiaddrs: string[];
+    } | null;
+    getThresholdSigner(): IThresholdSigner | undefined;
+    setThresholdSigner(signer: IThresholdSigner): void;
+    getMyPubkeyHex(): string | null;
+    setMyPubkeyHex(hex: string): void;
+    setRegistrationState(state: RegistrationState): void;
+    setMlDsaProvider(provider: MlDsaKeyProvider): void;
+    addConnection(connectionId: string, record: ClientConnectionRecord): void;
+    addConnectionByPeer(counterpartyPubkey: string, connectionId: string): void;
+    addProfileUncheckedPeer(pubkey: string): void;
+    setConnectionPolicy(policy: SignalRequirementPolicy): void;
+    addPeer(peerPubkeyHex: string, entry: PeerEntry): void;
+    hasPeer(peerPubkeyHex: string): boolean;
+    setEndorsements(endorsements: Array<Record<string, unknown>>): void;
+    setAttestations(attestations: Array<Record<string, unknown>>): void;
+    setLoadedPendingHashes(hashes: Array<{
+        sessionId: string;
+        hashHex: string;
+        enqueuedAt: number;
+    }>): void;
+    getSessionById(sessionIdHex: string): SessionRecord | undefined;
+    setSession(sessionIdHex: string, record: SessionRecord): void;
+    initSessionMessageQueue(sessionIdHex: string): void;
+    getMyPrimaryPubkey(): Uint8Array | null;
+    setMyPrimaryPubkey(pubkey: Uint8Array): void;
+    restoreDecidedRequest(requestId: string): void;
+    restorePendingInboundRequest(opts: {
+        connection_request_id: string;
+        from_pubkey: string;
+        package_cbor: Uint8Array;
+        round: number;
+    }): void;
+    restoreReviewQueueItem(item: ReviewQueueItem): void;
+}
+/**
+ * Load all durable state from the SQLCipher DB and populate in-memory state.
+ * Called by CelloClientImpl.loadPersistedState() after SQLCipher store opens.
+ *
+ * Returns the pending hashes loaded from the DB for the composition root to enqueue.
+ */
+export declare function loadClientStartupState(ctx: StartupContext): Promise<void>;
+//# sourceMappingURL=client-startup.d.ts.map

package/dist/client-startup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-startup.d.ts","sourceRoot":"","sources":["../src/client-startup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG/D;;;GAGG;AACH,MAAM,WAAW,cAAc;IAE7B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAE7C,oBAAoB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IACzE,kBAAkB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACnD,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnD,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACrD,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnD,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC1E,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5E,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,mBAAmB,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC3D,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACvD,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IACxC,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACpE,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACpE,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAExG,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAChE,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9D,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD,kBAAkB,IAAI,UAAU,GAAG,IAAI,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC7C,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,4BAA4B,CAAC,IAAI,EAAE;QAAE,qBAAqB,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1I,sBAAsB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;CACrD;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAwU/E"}

package/dist/client-startup.js

@@ -0,0 +1,338 @@
+/**
+ * client-startup.ts — PERSIST-024: loadClientStartupState
+ *
+ * Extracted from CelloClientImpl.loadPersistedState to keep client.ts under AC-005 line budget.
+ * Loads all durable state from the SQLCipher DB and populates in-memory state via the
+ * StartupContext interface.
+ *
+ * Security invariants:
+ *   SI-001: signing_share bytes never appear in any log event.
+ *   SI-002: secret_key_blob bytes never appear in any log event.
+ *
+ * Crypto refs: RFC 9591 (FROST), NIST FIPS 204 (ML-DSA-44)
+ */
+import { decode } from "cbor-x";
+import { InMemoryMlDsaKeyProvider } from "@cello-protocol/crypto";
+import { storeDkgResult } from "@cello-protocol/crypto/frost/frost-threshold-signer.js";
+import { FrostThresholdSigner } from "@cello-protocol/crypto/frost/frost-threshold-signer.js";
+import { NetworkDirectoryNode } from "./network-directory-node.js";
+/**
+ * Load all durable state from the SQLCipher DB and populate in-memory state.
+ * Called by CelloClientImpl.loadPersistedState() after SQLCipher store opens.
+ *
+ * Returns the pending hashes loaded from the DB for the composition root to enqueue.
+ */
+export async function loadClientStartupState(ctx) {
+    const p = ctx.persistence;
+    const state = await p.loadStartupState();
+    // ── 1. FROST key share ────────────────────────────────────────────────────
+    if (state.frostShare) {
+        const row = state.frostShare;
+        const signingShareBytes = row.signing_share instanceof Buffer
+            ? new Uint8Array(row.signing_share)
+            : new Uint8Array(row.signing_share);
+        const frostSecret = { identifier: row.identifier, signingShare: signingShareBytes };
+        let commitments = [];
+        let verifyingShares = {};
+        try {
+            const commitmentsCborBytes = row.commitments_cbor instanceof Buffer
+                ? row.commitments_cbor
+                : Buffer.from(row.commitments_cbor);
+            const decodedCommitments = decode(commitmentsCborBytes);
+            if (Array.isArray(decodedCommitments)) {
+                commitments = decodedCommitments.map((c) => c instanceof Uint8Array ? c : Buffer.isBuffer(c) ? new Uint8Array(c) : new Uint8Array(0));
+            }
+            const verifyingSharesCborBytes = row.verifying_shares_cbor instanceof Buffer
+                ? row.verifying_shares_cbor
+                : Buffer.from(row.verifying_shares_cbor);
+            const decodedVerifyingShares = decode(verifyingSharesCborBytes);
+            if (decodedVerifyingShares && typeof decodedVerifyingShares === "object" && !Array.isArray(decodedVerifyingShares)) {
+                for (const [k, v] of Object.entries(decodedVerifyingShares)) {
+                    verifyingShares[k] = v instanceof Uint8Array ? v : Buffer.isBuffer(v) ? new Uint8Array(v) : new Uint8Array(0);
+                }
+            }
+        }
+        catch {
+            ctx.logger.error("client.frost.share.load.failed", {
+                agentPubkey: row.agent_pubkey,
+                reason: "cbor_deserialize_failed",
+            });
+            return;
+        }
+        const frostPublic = {
+            signers: { min: row.threshold, max: row.participants + 1 },
+            commitments,
+            verifyingShares,
+        };
+        const myPubkeyHex = row.agent_pubkey;
+        try {
+            // SI-001: storeDkgResult does not log the secret
+            storeDkgResult(myPubkeyHex, frostSecret, frostPublic);
+        }
+        catch {
+            ctx.logger.error("client.frost.share.load.failed", {
+                agentPubkey: myPubkeyHex,
+                reason: "storeDkgResult_failed",
+            });
+            return;
+        }
+        // Reconstruct FrostThresholdSigner if not already set.
+        // AC-003 (DX-001): directoryNodeStubs MUST be populated from the current directoryEndpoint.
+        if (!ctx.getThresholdSigner()) {
+            let directoryNodeStubsForSigner;
+            const directoryEndpoint = ctx.getDirectoryEndpoint();
+            if (directoryEndpoint) {
+                const stub = new NetworkDirectoryNode({
+                    id: directoryEndpoint.peer_id,
+                    node: ctx.node,
+                    directoryPeerId: directoryEndpoint.peer_id,
+                    directoryMultiaddrs: directoryEndpoint.multiaddrs,
+                    logger: ctx.logger,
+                });
+                stub.setBootstrapContext(myPubkeyHex, `${myPubkeyHex}:epoch:1`);
+                directoryNodeStubsForSigner = [stub];
+            }
+            ctx.setThresholdSigner(new FrostThresholdSigner({
+                threshold: row.threshold,
+                participants: row.participants,
+                directoryNodeStubs: directoryNodeStubsForSigner,
+            }, Buffer.from(myPubkeyHex, "hex")));
+        }
+        if (commitments.length > 0 && !ctx.getMyPrimaryPubkey()) {
+            ctx.setMyPrimaryPubkey(new Uint8Array(commitments[0]));
+        }
+        ctx.logger.info("client.frost.share.loaded", {
+            agentPubkey: myPubkeyHex,
+            epochId: row.epoch_id,
+            threshold: row.threshold,
+            participants: row.participants,
+        });
+    }
+    // HIGH-3: emit alarm when registration exists but no FROST share found
+    if (!state.frostShare && state.registrationState) {
+        ctx.logger.error("client.frost.share.missing", {
+            agentPubkey: state.registrationState.agent_pubkey,
+            reason: "no_active_share_in_db",
+        });
+    }
+    // ── 2. ML-DSA keypair ─────────────────────────────────────────────────────
+    if (state.mlDsaKeypair) {
+        const row = state.mlDsaKeypair;
+        try {
+            const secretKeyBlob = row.secret_key_blob instanceof Buffer
+                ? new Uint8Array(row.secret_key_blob)
+                : new Uint8Array(row.secret_key_blob);
+            const mlDsaPubkeyBytes = Buffer.from(row.ml_dsa_pubkey, "hex");
+            // SI-002: InMemoryMlDsaKeyProvider does not log secret key
+            ctx.setMlDsaProvider(new InMemoryMlDsaKeyProvider(mlDsaPubkeyBytes, secretKeyBlob));
+            ctx.logger.info("client.mldsa.keypair.loaded", {
+                agentPubkey: row.agent_pubkey,
+                mlDsaPubkey: row.ml_dsa_pubkey,
+            });
+        }
+        catch (err) {
+            ctx.logger.error("client.mldsa.load.failed", {
+                agentPubkey: row.agent_pubkey,
+                reason: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    // ── 3. Registration state ─────────────────────────────────────────────────
+    if (state.registrationState) {
+        const row = state.registrationState;
+        ctx.setRegistrationState({
+            agent_id: row.agent_id,
+            primary_pubkey: row.primary_pubkey,
+            ml_dsa_pubkey: row.ml_dsa_pubkey,
+            registered_at: row.registered_at,
+            status: "active",
+        });
+        ctx.logger.info("client.registration.loaded", {
+            agentPubkey: row.agent_pubkey,
+            agentId: row.agent_id,
+            status: row.status,
+        });
+    }
+    // ── 4. Connections ────────────────────────────────────────────────────────
+    for (const row of state.connections) {
+        const record = {
+            connection_id: row.connection_id,
+            counterparty_primary_pubkey: row.counterparty_primary_pubkey ?? "",
+            counterparty_ml_dsa_pubkey: row.counterparty_ml_dsa_pubkey ?? "",
+            counterparty_pubkey: row.counterparty_pubkey,
+            established_at: row.established_at,
+            status: row.status,
+        };
+        ctx.addConnection(row.connection_id, record);
+        ctx.addConnectionByPeer(row.counterparty_pubkey, row.connection_id);
+        if (row.profile_unchecked) {
+            ctx.addProfileUncheckedPeer(row.counterparty_pubkey);
+        }
+    }
+    // ── 5. Connection policy ──────────────────────────────────────────────────
+    if (state.connectionPolicy) {
+        ctx.setConnectionPolicy(state.connectionPolicy);
+    }
+    // ── 6. Sessions + leaves ──────────────────────────────────────────────────
+    for (const row of state.sessions) {
+        const sessionIdHex = row.session_id;
+        if (ctx.getSessionById(sessionIdHex))
+            continue;
+        const leaves = await p.loadSessionTreeLeaves(sessionIdHex);
+        const localTreeLeaves = leaves.map((l) => ({
+            kind: l.leaf_kind,
+            s2_cbor: l.s2_cbor instanceof Buffer
+                ? new Uint8Array(l.s2_cbor)
+                : new Uint8Array(l.s2_cbor),
+        }));
+        const counterpartyPubkey = row.counterparty_pubkey instanceof Buffer
+            ? new Uint8Array(row.counterparty_pubkey)
+            : new Uint8Array(row.counterparty_pubkey);
+        const directoryPubkey = row.directory_pubkey instanceof Buffer
+            ? new Uint8Array(row.directory_pubkey)
+            : new Uint8Array(row.directory_pubkey);
+        const genesisPrevRoot = row.genesis_prev_root instanceof Buffer
+            ? new Uint8Array(row.genesis_prev_root)
+            : new Uint8Array(row.genesis_prev_root);
+        let counterpartyMultiaddrs = [];
+        let relayMultiaddrs = [];
+        let directoryMultiaddrs = [];
+        try {
+            counterpartyMultiaddrs = JSON.parse(row.counterparty_multiaddrs);
+        }
+        catch { /* ignore */ }
+        try {
+            relayMultiaddrs = JSON.parse(row.relay_multiaddrs);
+        }
+        catch { /* ignore */ }
+        try {
+            directoryMultiaddrs = JSON.parse(row.directory_multiaddrs);
+        }
+        catch { /* ignore */ }
+        const record = {
+            session_id: Buffer.from(sessionIdHex, "hex"),
+            counterparty_pubkey: counterpartyPubkey,
+            counterparty_peer_id: row.counterparty_peer_id,
+            counterparty_multiaddrs: counterpartyMultiaddrs,
+            relay_endpoint: { peer_id: row.relay_peer_id, multiaddrs: relayMultiaddrs },
+            directory_endpoint: { peer_id: row.directory_peer_id, multiaddrs: directoryMultiaddrs },
+            directory_pubkey: directoryPubkey,
+            genesis_prev_root: genesisPrevRoot,
+            last_seen_seq: row.last_seen_seq,
+            last_sent_seq: row.last_sent_seq,
+            next_expected_seq: row.next_expected_seq,
+            status: row.status,
+            desynchronized: row.desynchronized !== 0,
+            local_tree_leaves: localTreeLeaves,
+            sealed_root: row.sealed_root
+                ? (row.sealed_root instanceof Buffer ? new Uint8Array(row.sealed_root) : new Uint8Array(row.sealed_root))
+                : undefined,
+            seal_type: row.seal_type ?? undefined,
+            close_timestamp: row.close_timestamp ?? undefined,
+            frost_signature: row.frost_signature
+                ? (row.frost_signature instanceof Buffer ? new Uint8Array(row.frost_signature) : new Uint8Array(row.frost_signature))
+                : undefined,
+            signer_pubkey: row.signer_pubkey
+                ? (row.signer_pubkey instanceof Buffer ? new Uint8Array(row.signer_pubkey) : new Uint8Array(row.signer_pubkey))
+                : undefined,
+            directory_signature: row.directory_signature
+                ? (row.directory_signature instanceof Buffer ? new Uint8Array(row.directory_signature) : new Uint8Array(row.directory_signature))
+                : undefined,
+        };
+        ctx.setSession(sessionIdHex, record);
+        ctx.initSessionMessageQueue(sessionIdHex);
+        // HIGH-4: emit alarm when loaded leaf count doesn't match sessions.leaf_count
+        if (leaves.length !== row.leaf_count) {
+            ctx.logger.error("client.session.leaves.mismatch", {
+                agentPubkey: row.agent_pubkey,
+                sessionId: sessionIdHex,
+                expectedLeafCount: row.leaf_count,
+                actualLeafCount: leaves.length,
+            });
+        }
+    }
+    // ── 7. Peers ──────────────────────────────────────────────────────────────
+    for (const row of state.peers) {
+        if (!ctx.hasPeer(row.peer_pubkey_hex)) {
+            let multiaddrs = [];
+            try {
+                multiaddrs = JSON.parse(row.multiaddrs);
+            }
+            catch { /* ignore */ }
+            ctx.addPeer(row.peer_pubkey_hex, { peerId: row.peer_id, multiaddrs, connected: false });
+        }
+    }
+    // ── 8. Decided requests ───────────────────────────────────────────────────
+    for (const row of state.decidedRequests) {
+        ctx.restoreDecidedRequest(row.request_id);
+    }
+    // ── 9. Pending connection requests ────────────────────────────────────────
+    for (const row of state.pendingConnectionRequests) {
+        const packageCbor = row.package_cbor instanceof Buffer
+            ? new Uint8Array(row.package_cbor)
+            : new Uint8Array(row.package_cbor);
+        ctx.restorePendingInboundRequest({
+            connection_request_id: row.request_id,
+            from_pubkey: row.from_pubkey,
+            package_cbor: packageCbor,
+            round: row.round,
+        });
+        ctx.restoreReviewQueueItem({
+            connection_request_id: row.request_id,
+            from_pubkey: row.from_pubkey,
+            report: {
+                verdict: "pending_agent_review",
+                policy_summary: {
+                    mode: "unknown",
+                    review_mode: "inference",
+                    requirements_met: [],
+                    requirements_unmet: [],
+                },
+                package_summary: {
+                    pseudonym_label: "",
+                    endorsement_count: 0,
+                    attestation_types: [],
+                    pseudonym_age_days: 0,
+                    registration_age_days: 0,
+                    is_provisional: false,
+                },
+                is_round_2: row.round > 1,
+            },
+            package_cbor: packageCbor,
+            sender_registered_at: 0,
+            sender_is_provisional: false,
+        });
+    }
+    // ── 10. Endorsements and attestations (MED-4) ────────────────────────────
+    if (state.endorsements.length > 0) {
+        ctx.setEndorsements(state.endorsements);
+    }
+    if (state.attestations.length > 0) {
+        ctx.setAttestations(state.attestations);
+    }
+    // HIGH-3: set myPubkeyHex from registration state if sessions were loaded
+    if (!ctx.getMyPubkeyHex() && state.registrationState) {
+        ctx.setMyPubkeyHex(state.registrationState.agent_pubkey);
+    }
+    // PERSIST-024 FINDING-4: store loaded pending hashes for caller consumption
+    ctx.setLoadedPendingHashes(state.pendingHashes.map((row) => ({
+        sessionId: row.session_id,
+        hashHex: row.hash_hex,
+        enqueuedAt: row.enqueued_at,
+    })));
+    // M-5: upsertAgent at the END of startup
+    await p.upsertAgent();
+    // PERSIST-024 FINDING-3: emit client.startup.state.loaded AFTER all in-memory structures populated
+    ctx.logger.info("client.startup.state.loaded", {
+        agentPubkey: ctx.getMyPubkeyHex() ?? state.registrationState?.agent_pubkey ?? "unknown",
+        connectionCount: state.connectionCount,
+        sessionCount: state.sessionCount,
+        leafCount: state.leafCount,
+        pendingHashCount: state.pendingHashCount,
+        hasFrostShare: state.hasFrostShare,
+        hasMlDsaKeypair: state.hasMlDsaKeypair,
+        hasRegistration: state.hasRegistration,
+        hasPolicy: state.hasPolicy,
+    });
+}
+//# sourceMappingURL=client-startup.js.map

package/dist/client-startup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-startup.js","sourceRoot":"","sources":["../src/client-startup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wDAAwD,CAAC;AAS9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAuCnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAmB;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAEzC,6EAA6E;IAC7E,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC,aAAa,YAAY,MAAM;YAC3D,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;YACnC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,aAA2B,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;QAEpF,IAAI,WAAW,GAAiB,EAAE,CAAC;QACnC,IAAI,eAAe,GAA+B,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,oBAAoB,GAAG,GAAG,CAAC,gBAAgB,YAAY,MAAM;gBACjE,CAAC,CAAC,GAAG,CAAC,gBAAgB;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAA8B,CAAC,CAAC;YACpD,MAAM,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAY,CAAC;YACnE,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACtC,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAClD,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CACnG,CAAC;YACJ,CAAC;YACD,MAAM,wBAAwB,GAAG,GAAG,CAAC,qBAAqB,YAAY,MAAM;gBAC1E,CAAC,CAAC,GAAG,CAAC,qBAAqB;gBAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAmC,CAAC,CAAC;YACzD,MAAM,sBAAsB,GAAG,MAAM,CAAC,wBAAwB,CAAY,CAAC;YAC3E,IAAI,sBAAsB,IAAI,OAAO,sBAAsB,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACnH,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAiD,CAAC,EAAE,CAAC;oBACvF,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC1H,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBACjD,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,MAAM,EAAE,yBAAyB;aAClC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE;YAC1D,WAAW;YACX,eAAe;SAChB,CAAC;QAEF,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;QACrC,IAAI,CAAC;YACH,iDAAiD;YACjD,cAAc,CAAC,WAAW,EAAE,WAAoE,EAAE,WAAoE,CAAC,CAAC;QAC1K,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBACjD,WAAW,EAAE,WAAW;gBACxB,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,uDAAuD;QACvD,4FAA4F;QAC5F,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC9B,IAAI,2BAA+D,CAAC;YACpE,MAAM,iBAAiB,GAAG,GAAG,CAAC,oBAAoB,EAAE,CAAC;YACrD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC;oBACpC,EAAE,EAAE,iBAAiB,CAAC,OAAO;oBAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,eAAe,EAAE,iBAAiB,CAAC,OAAO;oBAC1C,mBAAmB,EAAE,iBAAiB,CAAC,UAAU;oBACjD,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB,CAAC,CAAC;gBACH,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,GAAG,WAAW,UAAU,CAAC,CAAC;gBAChE,2BAA2B,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YACD,GAAG,CAAC,kBAAkB,CAAC,IAAI,oBAAoB,CAC7C;gBACE,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,kBAAkB,EAAE,2BAA2B;aAChD,EACD,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACxD,GAAG,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAC3C,WAAW,EAAE,WAAW;YACxB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;YAC7C,WAAW,EAAE,KAAK,CAAC,iBAAiB,CAAC,YAAY;YACjD,MAAM,EAAE,uBAAuB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,YAAY,MAAM;gBACzD,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC;gBACrC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,eAA6B,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC/D,2DAA2D;YAC3D,GAAG,CAAC,gBAAgB,CAAC,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBAC7C,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,WAAW,EAAE,GAAG,CAAC,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBAC3C,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACpC,GAAG,CAAC,oBAAoB,CAAC;YACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;YAC5C,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAA2B;YACrC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,2BAA2B,EAAE,GAAG,CAAC,2BAA2B,IAAI,EAAE;YAClE,0BAA0B,EAAE,GAAG,CAAC,0BAA0B,IAAI,EAAE;YAChE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;YAC5C,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,MAAM,EAAE,GAAG,CAAC,MAAkB;SAC/B,CAAC;QACF,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC7C,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC1B,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAClD,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC;QACpC,IAAI,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC;YAAE,SAAS;QAE/C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAuC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,IAAI,EAAE,CAAC,CAAC,SAA2B;YACnC,OAAO,EAAE,CAAC,CAAC,OAAO,YAAY,MAAM;gBAClC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,OAAqB,CAAC;SAC5C,CAAC,CAAC,CAAC;QAEJ,MAAM,kBAAkB,GAAG,GAAG,CAAC,mBAAmB,YAAY,MAAM;YAClE,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACzC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,mBAAiC,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,GAAG,CAAC,gBAAgB,YAAY,MAAM;YAC5D,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACtC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,gBAA8B,CAAC,CAAC;QACvD,MAAM,eAAe,GAAG,GAAG,CAAC,iBAAiB,YAAY,MAAM;YAC7D,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACvC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,iBAA+B,CAAC,CAAC;QAExD,IAAI,sBAAsB,GAAa,EAAE,CAAC;QAC1C,IAAI,eAAe,GAAa,EAAE,CAAC;QACnC,IAAI,mBAAmB,GAAa,EAAE,CAAC;QACvC,IAAI,CAAC;YAAC,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAa,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5G,IAAI,CAAC;YAAC,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC;YAAC,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAa,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAEtG,MAAM,MAAM,GAAkB;YAC5B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;YAC5C,mBAAmB,EAAE,kBAAkB;YACvC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,uBAAuB,EAAE,sBAAsB;YAC/C,cAAc,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE;YAC3E,kBAAkB,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,mBAAmB,EAAE;YACvF,gBAAgB,EAAE,eAAe;YACjC,iBAAiB,EAAE,eAAe;YAClC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,MAAM,EAAE,GAAG,CAAC,MAAiC;YAC7C,cAAc,EAAE,GAAG,CAAC,cAAc,KAAK,CAAC;YACxC,iBAAiB,EAAE,eAAe;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC1B,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,WAAyB,CAAC,CAAC;gBACvH,CAAC,CAAC,SAAS;YACb,SAAS,EAAE,GAAG,CAAC,SAAuC,IAAI,SAAS;YACnE,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,SAAS;YACjD,eAAe,EAAE,GAAG,CAAC,eAAe;gBAClC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,eAA6B,CAAC,CAAC;gBACnI,CAAC,CAAC,SAAS;YACb,aAAa,EAAE,GAAG,CAAC,aAAa;gBAC9B,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,aAA2B,CAAC,CAAC;gBAC7H,CAAC,CAAC,SAAS;YACb,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC1C,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,mBAAiC,CAAC,CAAC;gBAC/I,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrC,GAAG,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAE1C,8EAA8E;QAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBACjD,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,SAAS,EAAE,YAAY;gBACvB,iBAAiB,EAAE,GAAG,CAAC,UAAU;gBACjC,eAAe,EAAE,MAAM,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,IAAI,UAAU,GAAa,EAAE,CAAC;YAC9B,IAAI,CAAC;gBAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACnF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACxC,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,YAAY,MAAM;YACpD,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;YAClC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,YAA0B,CAAC,CAAC;QACnD,GAAG,CAAC,4BAA4B,CAAC;YAC/B,qBAAqB,EAAE,GAAG,CAAC,UAAU;YACrC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;QACH,GAAG,CAAC,sBAAsB,CAAC;YACzB,qBAAqB,EAAE,GAAG,CAAC,UAAU;YACrC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE;gBACN,OAAO,EAAE,sBAA+B;gBACxC,cAAc,EAAE;oBACd,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,WAAoB;oBACjC,gBAAgB,EAAE,EAAE;oBACpB,kBAAkB,EAAE,EAAE;iBACvB;gBACD,eAAe,EAAE;oBACf,eAAe,EAAE,EAAE;oBACnB,iBAAiB,EAAE,CAAC;oBACpB,iBAAiB,EAAE,EAAE;oBACrB,kBAAkB,EAAE,CAAC;oBACrB,qBAAqB,EAAE,CAAC;oBACxB,cAAc,EAAE,KAAK;iBACtB;gBACD,UAAU,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC;aAC1B;YACD,YAAY,EAAE,WAAW;YACzB,oBAAoB,EAAE,CAAC;YACvB,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACrD,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC;IAED,4EAA4E;IAC5E,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3D,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,UAAU,EAAE,GAAG,CAAC,WAAW;KAC5B,CAAC,CAAC,CAAC,CAAC;IAEL,yCAAyC;IACzC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAEtB,mGAAmG;IACnG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;QAC7C,WAAW,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,iBAAiB,EAAE,YAAY,IAAI,SAAS;QACvF,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC"}