@cello-protocol/daemon 0.0.225 → 0.0.227

package/dist/registration-manager.js

@@ -1,585 +0,0 @@
-/**
- * RegistrationManager — REG-001, ML-DSA keygen, DKG (daemon port).
- *
- * Ported from cello-client's RegistrationManager. Owns registration domain
- * state (#registrationState, #mlDsaProvider). The only adaptation vs the client
- * is the signaling seam: the client wrote directly to a raw persistent libp2p
- * Stream, whereas the daemon's directory signaling lives behind SignalingManager.
- * So RegistrationContext exposes `sendSignalingFrame` (→ SignalingManager.sendRaw,
- * which CBOR/length-prefix-encodes internally) and `isSignalingConnected`, and a
- * single daemon-owned inbound handler drives the pending dkg_ready/register
- * resolvers (see DaemonRegistrationContext). The register() control flow is
- * otherwise unchanged.
- */
-import { randomUUID } from "node:crypto";
-import { encodeCbor } from "@cello-protocol/protocol-types";
-import { mlDsaKeygen, mlDsaKeygenWithBytes, FileMlDsaKeyProvider, buildKeyBindingTbs } from "@cello-protocol/crypto";
-import { NetworkDirectoryNode, runNetworkDkg } from "./network-directory-node.js";
-import { extractErrorMessage } from "./error-message.js";
-const ADMIN_PUBKEY_HEX_RE = /^[0-9a-f]{64}$/;
-export class RegistrationManager {
-    #ctx;
-    // Registration state owned by this manager
-    #registrationState = null;
-    #mlDsaProvider = null;
-    constructor(ctx) {
-        this.#ctx = ctx;
-    }
-    // ─── Public state accessors ──────────────────────────────────────────────────
-    getRegistrationState() {
-        return this.#registrationState;
-    }
-    setRegistrationState(state) {
-        this.#registrationState = state;
-    }
-    getMlDsaProvider() {
-        return this.#mlDsaProvider;
-    }
-    setMlDsaProvider(provider) {
-        this.#mlDsaProvider = provider;
-    }
-    /**
-     * PERSIST-002 (SI-003/AC-005/AC-012): AWAIT every identity persist (was fire-and-forget) and
-     * report whether all succeeded. A failure is logged as persist.identity.persist.failed and turns
-     * the registration into an identity_persist_failed error — registration never reports success with
-     * an uncommitted identity. SI-001: the error message carries no secret (the persist methods never
-     * receive the secret in a loggable form here).
-     */
-    async #persistAll(ops) {
-        try {
-            for (const op of ops)
-                await op();
-            return true;
-        }
-        catch (err) {
-            this.#ctx.logger.error("persist.identity.persist.failed", {
-                error: extractErrorMessage(err),
-            });
-            return false;
-        }
-    }
-    /**
-     * The awaited identity-persist operations for a successful registration: the ML-DSA keypair (only
-     * when its secret blob is available) and ALWAYS the registration state. Registration state is never
-     * gated on the ml-dsa blob — so an agent is never left durably-unregistered when the blob is absent.
-     * Requires `this.#ctx.persistence` to be present (callers check).
-     */
-    #identityPersistOps(state, mlDsaPubkeyHex, mlDsaSecretKeyBlob, keyBinding, channelOpts) {
-        const persistence = this.#ctx.persistence;
-        const ops = [];
-        if (mlDsaSecretKeyBlob) {
-            ops.push(() => persistence.persistMlDsaKeypair({ mlDsaPubkey: mlDsaPubkeyHex, secretKeyBlob: mlDsaSecretKeyBlob }));
-        }
-        ops.push(() => persistence.persistRegistrationState({
-            agentId: state.agent_id,
-            primaryPubkey: state.primary_pubkey,
-            mlDsaPubkey: state.ml_dsa_pubkey,
-            registeredAt: state.registered_at,
-            keyBinding,
-            // Only ever reached after #channelEchoed passed, so a persisted channel is one the directory
-            // recorded as a channel.
-            ...(channelOpts ? { channel: true, adminPubkey: channelOpts.adminPubkeyHex } : {}),
-        }));
-        return ops;
-    }
-    /**
-     * M16: a CHANNEL registration only counts when the directory says it stored a channel.
-     *
-     * ⚠️ NO SILENT DOWNGRADE. A directory that does not know the `channel` field ignores it and
-     * registers an ordinary agent. Accepting that answer would leave an identity this daemon treats as
-     * a channel and every directory treats as an agent that may converse, which nobody would notice.
-     * So a missing echo FAILS the registration: nothing persisted, nothing cached, one error event.
-     * This applies to every frame that ends a registration, including an `already_registered`
-     * answer, which hands back an existing profile without running a ceremony.
-     *
-     * Returns null when the registration may proceed, or the error to return verbatim.
-     */
-    #channelEchoed(channelOpts, frame, correlationId, kLocalPubkeyHex) {
-        // Immutability, the other direction: the directory holds this identity as a channel, and this
-        // registration asked for an ordinary agent. Accepting it would record the channel locally as an
-        // agent that may converse.
-        if (!channelOpts) {
-            if (frame["channel"] !== true)
-                return null;
-            return {
-                error: "channel_fields_immutable",
-                detail: "The directory holds this identity as a broadcast channel, and a channel stays a channel. Register it with its channel settings, or use a different agent for ordinary conversations.",
-            };
-        }
-        if (frame["channel"] === true)
-            return null;
-        this.#ctx.logger.error("registration.channel.echo_missing", {
-            correlationId,
-            k_local_pubkey: kLocalPubkeyHex,
-            frameType: frame["type"],
-            impact: "a channel registration was answered without channel: true, so the directory did not record this identity as a channel; the registration failed and no registration state was persisted",
-        });
-        // A `register_success` means the directory has just STORED this identity, as an ordinary agent.
-        // Retrying cannot change that: every later attempt gets `already_registered`. An
-        // `already_registered` answer can mean the same, or nodes that predate channel support.
-        const detail = frame["type"] === "register_success"
-            ? "The directory registered this identity as an ordinary agent, not a channel: its nodes do not support channels yet. That profile is now fixed, so this identity cannot become a channel. Once the directory supports channels, register the channel under a new identity."
-            : "The directory already holds this identity without a channel flag. Either it was registered as an ordinary agent, which cannot change, or the directory nodes do not support channels yet. Register the channel under a new identity once they do.";
-        return { error: "directory_missing_channel_support", detail };
-    }
-    /**
-     * 038-KEYBIND — sign the statement "this FROST group key is mine" with K_local.
-     *
-     * ⚠️ NEVER A RE-DKG. An agent that already exists holds both keys and can produce this on
-     * demand: K_local is on this machine and the group key is either just out of the DKG or handed
-     * back by the directory on `already_registered`. Key refresh preserves the group key
-     * (`session-ceremony.ts` aborts if the primary changes), so the binding is signed once for the
-     * life of the agent — which is why every path that learns a `primary_pubkey` mints one, rather
-     * than only the path that ran a ceremony.
-     *
-     * The signer is a key NO DIRECTORY HOLDS. That is the whole property: the directory carries this
-     * value to the counterparty and cannot forge it, cannot swap it, and cannot lift it onto another
-     * identity — the signed bytes name the K_local it belongs to as well as the group key.
-     */
-    async #mintKeyBinding(kLocalPubkeyHex, primaryPubkeyHex) {
-        const tbs = buildKeyBindingTbs(new Uint8Array(Buffer.from(kLocalPubkeyHex, "hex")), new Uint8Array(Buffer.from(primaryPubkeyHex, "hex")));
-        return Buffer.from(await this.#ctx.keyProvider.sign(tbs)).toString("hex");
-    }
-    /**
-     * 038-KEYBIND review F4 — mint a binding ONLY over a group key this machine can corroborate.
-     *
-     * ⚠️ THE `already_registered` PATHS RUN NO CEREMONY, so the group key arrives in a directory's
-     * reply and there is nothing in that frame to check it against. Signing over it regardless is the
-     * defect this order exists to remove, relocated from the verify site to the mint site: K_local
-     * would be making a non-repudiable statement about a key chosen by the one party the binding is
-     * designed to take out of the trust path.
-     *
-     * The anchor this machine DOES hold is its FROST share. `commitments[0]` is the group key the
-     * DKG produced — computed here, from every participant's commitment — and it cannot be edited by
-     * a directory. So the answered key is checked against it, and only then signed over.
-     *
-     * ⚠️ NO SHARE IS A REFUSAL, not a licence to sign. An agent with no share cannot co-sign anything
-     * anyway; minting a binding for it would produce a proof that its group key is one it has no way
-     * to use, and the absent share is the fault worth reporting.
-     *
-     * Returns the binding, or the error the caller returns verbatim.
-     */
-    async #mintCorroboratedKeyBinding(kLocalPubkeyHex, answeredPrimaryHex) {
-        const share = await this.#ctx.persistence?.loadActiveFrostKeyShare();
-        if (!share) {
-            this.#ctx.logger.error("registration.key_binding.no_share", {
-                agentPubkey: kLocalPubkeyHex,
-                impact: "the directory reports this agent already registered, but this machine holds no FROST share for it — so the threshold key in the reply could not be checked against anything local and no key binding was signed; nothing was persisted",
-            });
-            return {
-                ok: false,
-                error: "registration_share_missing",
-                detail: "The directory says this agent is already registered, but this machine holds no signing share for it — so it cannot take part in ceremonies and cannot vouch for its own threshold key. This usually means the agent was registered on a different device. Restore that device's backup, or remove this agent and register a new one.",
-            };
-        }
-        if (share.primaryPubkey.toLowerCase() !== answeredPrimaryHex.toLowerCase()) {
-            this.#ctx.logger.error("registration.primary_pubkey.mismatch", {
-                agentPubkey: kLocalPubkeyHex,
-                derivedPrefix: share.primaryPubkey.slice(0, 16),
-                answeredPrefix: answeredPrimaryHex.slice(0, 16),
-                impact: "the directory named a threshold group key other than the one this agent's own share belongs to; nothing was persisted and no key binding was signed, because signing one would have vouched for a key this agent cannot sign with",
-            });
-            return {
-                ok: false,
-                error: "registration_primary_pubkey_mismatch",
-                detail: "The directory named a different threshold key for this agent than the one its signing share belongs to. Nothing was saved. Retry registration; if it repeats, the node that answered is serving a profile that does not match this agent and cello status will show which one it was.",
-            };
-        }
-        return { ok: true, keyBinding: await this.#mintKeyBinding(kLocalPubkeyHex, answeredPrimaryHex) };
-    }
-    /**
-     * Register this agent with the directory.
-     * REG-001: ML-DSA keygen → signaling stream → register_request → DKG → register_success.
-     */
-    async register(phoneStub = "", preAuthToken, channelOpts) {
-        // Step 1: already registered
-        if (this.#registrationState) {
-            return { error: "already_registered" };
-        }
-        const correlationId = randomUUID();
-        // Step 2: generate or load ML-DSA-44 keypair
-        let mlDsaProvider;
-        let mlDsaSecretKeyBlob = null;
-        if (this.#ctx.mlDsaKeyFile) {
-            mlDsaProvider = await FileMlDsaKeyProvider.load(this.#ctx.mlDsaKeyFile);
-        }
-        else if (this.#ctx.persistence) {
-            const { provider, secretKeyBlob } = await mlDsaKeygenWithBytes();
-            mlDsaProvider = provider;
-            mlDsaSecretKeyBlob = secretKeyBlob;
-        }
-        else {
-            mlDsaProvider = await mlDsaKeygen();
-        }
-        const mlDsaPubkey = await mlDsaProvider.getPublicKey();
-        const mlDsaPubkeyHex = Buffer.from(mlDsaPubkey).toString("hex");
-        // Step 3: require the directory signaling stream to be connected.
-        // (The daemon keeps it connected via SignalingManager; we don't open it here.)
-        if (!this.#ctx.isSignalingConnected()) {
-            return { error: "directory_unreachable" };
-        }
-        // Step 4: get K_local pubkey hex
-        if (!this.#ctx.getMyPubkeyHex()) {
-            const pubkey = await this.#ctx.keyProvider.getPublicKey();
-            this.#ctx.setMyPubkeyHex(Buffer.from(pubkey).toString("hex"));
-        }
-        const kLocalPubkeyHex = this.#ctx.getMyPubkeyHex();
-        // Step 4a (M16): a channel names its administrator, and cannot administer itself. Refused
-        // before anything reaches the directory.
-        if (channelOpts) {
-            if (!ADMIN_PUBKEY_HEX_RE.test(channelOpts.adminPubkeyHex)) {
-                return {
-                    error: "invalid_channel_registration",
-                    detail: "adminPubkeyHex must be exactly 64 lowercase hex characters (a 32-byte public key).",
-                };
-            }
-            if (channelOpts.adminPubkeyHex === kLocalPubkeyHex.toLowerCase()) {
-                return {
-                    error: "invalid_channel_registration",
-                    detail: "A channel cannot administer itself: adminPubkeyHex must be a different agent's public key.",
-                };
-            }
-        }
-        // Step 5: send register_request (SignalingManager CBOR/lp-encodes the frame)
-        // M8B quorum: include the nodeIds we can reach right now (our resolved roster) so the directory can
-        // pick the DKG quorum Q = these ∩ its manifest, |Q| ≥ T=majority(N). getConsortiumEndpoints() is
-        // null on the single-node back-compat path (no consortium manifest) → omit the field.
-        const reachableRoster = this.#ctx.getConsortiumEndpoints();
-        const reachableNodeIds = reachableRoster?.map((e) => e.nodeId);
-        const regSent = await this.#ctx.sendSignalingFrame({
-            type: "register_request",
-            phone_stub: phoneStub,
-            k_local_pubkey: kLocalPubkeyHex,
-            ml_dsa_pubkey: mlDsaPubkeyHex,
-            ...(reachableNodeIds ? { reachable_node_ids: reachableNodeIds } : {}),
-            // M16: present only for a channel. An ordinary registration carries neither key — absent
-            // means not a channel, and there is no `channel: false` on the wire.
-            ...(channelOpts ? { channel: true, admin_pubkey: channelOpts.adminPubkeyHex } : {}),
-        });
-        if (!regSent.ok) {
-            return { error: regSent.reason ?? "directory_unreachable" };
-        }
-        // Step 5a: await dkg_ready
-        const DKG_READY_TIMEOUT_MS = 15_000;
-        let dkgReadyTimeoutHandle;
-        const dkgReadyFrame = await Promise.race([
-            new Promise((resolve) => {
-                this.#ctx.setPendingDkgReadyResolve(resolve);
-            }),
-            new Promise((resolve) => {
-                dkgReadyTimeoutHandle = setTimeout(() => {
-                    this.#ctx.setPendingDkgReadyResolve(null);
-                    resolve({ type: "register_error", reason: "timeout" });
-                }, DKG_READY_TIMEOUT_MS);
-            }),
-        ]);
-        clearTimeout(dkgReadyTimeoutHandle);
-        if (dkgReadyFrame["type"] !== "dkg_ready") {
-            const reason = dkgReadyFrame["reason"] ?? "unknown";
-            if (reason === "already_registered" &&
-                dkgReadyFrame["agent_id"] &&
-                dkgReadyFrame["primary_pubkey"]) {
-                const state = {
-                    agent_id: dkgReadyFrame["agent_id"],
-                    primary_pubkey: dkgReadyFrame["primary_pubkey"],
-                    ml_dsa_pubkey: dkgReadyFrame["ml_dsa_pubkey"] ?? mlDsaPubkeyHex,
-                    registered_at: Date.now(),
-                    status: "active",
-                };
-                const echo = this.#channelEchoed(channelOpts, dkgReadyFrame, correlationId, kLocalPubkeyHex);
-                if (echo)
-                    return echo;
-                // SI-003: persist BEFORE caching the in-memory registered state, so a persist failure does
-                // not leave a phantom "registered" manager (which would short-circuit a retry). Registration
-                // state is persisted whenever persistence is present — NOT gated on the ml-dsa blob (so an
-                // already_registered agent is never left durably-unregistered when the blob is absent).
-                if (this.#ctx.persistence) {
-                    // 038-KEYBIND: no ceremony runs on this path, so the group key comes from the directory's
-                    // reply — checked against this machine's own share before K_local signs over it (F4).
-                    const minted = await this.#mintCorroboratedKeyBinding(kLocalPubkeyHex, state.primary_pubkey);
-                    if (!minted.ok)
-                        return { error: minted.error, detail: minted.detail };
-                    const ok = await this.#persistAll(this.#identityPersistOps(state, mlDsaPubkeyHex, mlDsaSecretKeyBlob, minted.keyBinding, channelOpts));
-                    if (!ok)
-                        return { error: "identity_persist_failed" };
-                }
-                this.#registrationState = state;
-                this.#mlDsaProvider = mlDsaProvider;
-                return state;
-            }
-            return { error: reason };
-        }
-        // Step 5b: run real FROST DKG
-        const epochId = dkgReadyFrame["epochId"];
-        const participants = dkgReadyFrame["participants"];
-        const threshold = dkgReadyFrame["threshold"];
-        // getNode() may be null even when signaling reads connected (brief
-        // stream-death window) — null-check before FROST DKG opens streams on it.
-        const dkgNode = this.#ctx.getNode();
-        if (!dkgNode) {
-            /**
-             * NAMES THE LOCAL STATE, not the network. This returned `directory_unreachable` — a network
-             * verdict for a purely local lifecycle fact, and the comment two lines above already says so:
-             * the daemon's own node reference is briefly null while a stream dies and is rebuilt. The
-             * directory may be perfectly reachable.
-             *
-             * Found by the `DOD-M15-SURFACE-1` review as `[pre-existing]`; fixed under the standing rule
-             * that an error naming the wrong subsystem gets corrected when it is found. It is also the
-             * exact shape M15 is closing elsewhere — one string sending an investigation at the network
-             * when the cause is local — so leaving it while fixing its siblings would be inconsistent.
-             */
-            this.#ctx.logger.warn("registration.dkg.node_unavailable", {
-                impact: "the daemon's own transport node was momentarily absent while a signaling stream was rebuilt; registration was not attempted and nothing about the directory's reachability was established",
-            });
-            // `detail` is the shape this return type carries — the affordance rides there rather than in
-            // a `guidance` key the caller would drop on the floor.
-            return {
-                error: "transport_node_unavailable",
-                detail: "The daemon's transport node was briefly unavailable while its directory connection was rebuilding. This is local and usually clears within seconds; it says nothing about whether the directory is reachable. Retry registration, and if it repeats check the directory connection state with cello status.",
-            };
-        }
-        // DOD-DKG-1: build the directory-node set the DKG fans across. With a verified consortium
-        // manifest the client resolved the full N-node roster (getConsortiumEndpoints) and the DKG
-        // runs across ALL of them (the generated key is T-of-N). Without a manifest the roster is
-        // empty → the single primary endpoint (single-node DKG, M6/M7 back-compat).
-        // getConsortiumEndpoints() returns the resolved roster when a consortium manifest IS
-        // configured, or NULL when none is (the M6/M7 single-node back-compat path). Branching on
-        // "manifest configured" (roster !== null) — NOT "roster non-empty" — is the load-bearing
-        // distinction (code-reviewer B1 / cello-fallback-finder HIGH): an EMPTY roster with a
-        // manifest configured (the whole consortium momentarily unreachable) must REFUSE, never
-        // silently fall back to a 2-of-2 DKG against an unverified single directory.
-        const roster = this.#ctx.getConsortiumEndpoints();
-        let directoryNodes;
-        if (roster !== null) {
-            // M8B quorum: the directory set `participants` = |Q| = |R ∩ manifest| from the reachable_node_ids
-            // we reported. Our resolved roster IS Q (Q = R ∩ manifest, and R = our roster), so we fan the DKG
-            // to it directly. The count must still agree: roster.length !== participants ⇒ a node we reported
-            // is now unreachable, or a manifest version skew ⇒ REFUSE rather than DKG a divergent set.
-            // (Replaces the old all-N check — `participants` is now the quorum size, not the full manifest N.)
-            if (roster.length !== participants) {
-                this.#ctx.logger.warn("registration.dkg.quorum_mismatch", {
-                    resolvedRoster: roster.length,
-                    declaredParticipants: participants,
-                });
-                return { error: "dkg_below_threshold" };
-            }
-            directoryNodes = roster.map((ep) => new NetworkDirectoryNode({
-                id: ep.peerId,
-                node: dkgNode,
-                directoryPeerId: ep.peerId,
-                directoryMultiaddrs: [ep.multiaddr],
-                logger: this.#ctx.logger,
-            }));
-        }
-        else {
-            // No consortium manifest configured → single-node DKG (M6/M7 back-compat).
-            const directoryEndpoint = this.#ctx.getDirectoryEndpoint();
-            if (!directoryEndpoint) {
-                return { error: "directory_unreachable" };
-            }
-            directoryNodes = [
-                new NetworkDirectoryNode({
-                    id: directoryEndpoint.peer_id,
-                    node: dkgNode,
-                    directoryPeerId: directoryEndpoint.peer_id,
-                    directoryMultiaddrs: directoryEndpoint.multiaddrs,
-                    logger: this.#ctx.logger,
-                }),
-            ];
-        }
-        void epochId;
-        const kLocalPubkeyBytes = Buffer.from(kLocalPubkeyHex, "hex");
-        let dkgPrimaryPubkeyHex;
-        // The share to persist, captured inside the DKG try (a DKG error → dkg_failed) but persisted
-        // AFTER it, so a persist failure surfaces as identity_persist_failed, not dkg_failed.
-        let shareToPersist = null;
-        try {
-            const dkgResult = await runNetworkDkg(kLocalPubkeyBytes, {
-                threshold,
-                participants,
-                directoryNodes,
-                preAuthToken,
-                signAuth: (h) => this.#ctx.keyProvider.sign(h), // SEC-2
-            });
-            dkgPrimaryPubkeyHex = Buffer.from(dkgResult.primaryPubkey).toString("hex");
-            this.#ctx.setThresholdSigner(dkgResult.signer);
-            this.#ctx.setMyPrimaryPubkey(new Uint8Array(dkgResult.primaryPubkey));
-            if (this.#ctx.persistence) {
-                shareToPersist = {
-                    epochId,
-                    primaryPubkey: dkgPrimaryPubkeyHex,
-                    identifier: dkgResult.identifier,
-                    signingShare: dkgResult.signingShare,
-                    threshold: dkgResult.threshold,
-                    participants: dkgResult.participants,
-                    commitmentsCbor: encodeCbor(dkgResult.commitments),
-                    verifyingSharesCbor: encodeCbor(dkgResult.verifyingShares),
-                    dkgMethod: "network_dkg",
-                    // M8B quorum: persist the quorum Q (nodeIds the DKG ran among) so a restored signer targets the
-                    // actual share-holders, not the full live roster. null on the single-node back-compat path.
-                    directoryNodeIds: roster ? roster.map((e) => e.nodeId) : undefined,
-                };
-            }
-        }
-        catch (err) {
-            // NOT a bare catch. Everything runNetworkDkg can throw was being discarded here, and this is
-            // the client's own log — where the operator actually is. The messages destroyed included the
-            // only diagnosis of a colliding FROST identifier (`Duplicate id=5375…`, thrown by
-            // @noble/curves DKG.round2 when two nodes derive the same identifier) and the
-            // commitment-vs-primary_pubkey mismatch, plus every stream/transport failure from
-            // dkgRound1WithNode / dkgRound2WithNode. All of them reached the operator as `dkg_failed` —
-            // one exit-point label standing in for a dozen unrelated causes, sending them to debug FROST
-            // when the cause was a duplicate nodeId in a manifest or an unreachable node.
-            this.#ctx.logger.error("registration.dkg.failed", {
-                reason: extractErrorMessage(err),
-                // WHICH registration and WHICH nodes. `reason` alone cannot be acted on: on a multi-agent
-                // daemon the operator cannot tell which agent failed, and a nested
-                // "dkgRound2: no response received" does not say from whom. These are also what let this line
-                // be correlated with the registration.dkg.quorum_mismatch warning that may precede it.
-                agentPubkey: kLocalPubkeyHex,
-                directoryNodeIds: roster ? roster.map((e) => e.nodeId) : undefined,
-                // The stack, not just the message — a wrapped throw from two frames down otherwise loses the
-                // frame that names the node.
-                stack: err instanceof Error ? err.stack : undefined,
-            });
-            // The cause travels WITH the code. `dkg_failed` is the closed protocol union the wire needs;
-            // `detail` is what lets the operator-facing guidance say which failure it actually was.
-            return { error: "dkg_failed", detail: extractErrorMessage(err) };
-        }
-        // SI-003/AC-005: AWAIT the share persist (was fire-and-forget) before register reports success —
-        // so a register-success guarantees the share is durably committed (no can't-sign zombie).
-        if (shareToPersist && this.#ctx.persistence) {
-            const persistence = this.#ctx.persistence;
-            const share = shareToPersist;
-            const ok = await this.#persistAll([() => persistence.persistFrostKeyShare(share)]);
-            if (!ok)
-                return { error: "identity_persist_failed" };
-        }
-        /**
-         * ─── 038-KEYBIND: MINT THE BINDING, THEN HAND IT OVER WITH THE GROUP KEY ────────────────────
-         *
-         * THE TAIL OF REGISTRATION IS THE ONLY MOMENT THIS CAN HAPPEN. At agent creation the group key
-         * does not exist — a FROST DKG's group key is the sum of every participant's commitment, so by
-         * construction it is nobody's existing key. After this frame the ceremony is over. Right here
-         * is the one point where K_local's private half and the finished group key are both on this
-         * machine.
-         *
-         * It rides on `dkg_complete` rather than in a frame of its own so the directory can never hold
-         * a group key it has no binding for: one frame, both values, or neither.
-         */
-        const keyBinding = await this.#mintKeyBinding(kLocalPubkeyHex, dkgPrimaryPubkeyHex);
-        // Step 5c: send dkg_complete (SignalingManager CBOR/lp-encodes the frame)
-        const dkgSent = await this.#ctx.sendSignalingFrame({
-            type: "dkg_complete",
-            primary_pubkey: dkgPrimaryPubkeyHex,
-            key_binding: keyBinding,
-        });
-        if (!dkgSent.ok) {
-            return { error: dkgSent.reason ?? "directory_unreachable" };
-        }
-        // Step 6: await register_success or register_error
-        const REGISTER_TIMEOUT_MS = 15_000;
-        let timeoutHandle;
-        const responseWithTimeout = await Promise.race([
-            new Promise((resolve) => {
-                this.#ctx.setPendingRegisterResolve(resolve);
-            }),
-            new Promise((resolve) => {
-                timeoutHandle = setTimeout(() => {
-                    this.#ctx.setPendingRegisterResolve(null);
-                    resolve({ type: "register_error", reason: "timeout" });
-                }, REGISTER_TIMEOUT_MS);
-            }),
-        ]);
-        clearTimeout(timeoutHandle);
-        if (responseWithTimeout["type"] !== "register_success") {
-            const reason = responseWithTimeout["reason"] ?? "unknown";
-            if (reason === "already_registered" &&
-                responseWithTimeout["agent_id"] &&
-                responseWithTimeout["primary_pubkey"]) {
-                const state = {
-                    agent_id: responseWithTimeout["agent_id"],
-                    primary_pubkey: responseWithTimeout["primary_pubkey"],
-                    ml_dsa_pubkey: responseWithTimeout["ml_dsa_pubkey"] ?? mlDsaPubkeyHex,
-                    registered_at: Date.now(),
-                    status: "active",
-                };
-                const echo = this.#channelEchoed(channelOpts, responseWithTimeout, correlationId, kLocalPubkeyHex);
-                if (echo)
-                    return echo;
-                // SI-003: persist before caching the registered state (see the dkg_ready branch).
-                if (this.#ctx.persistence) {
-                    // 038-KEYBIND: the DKG ran, but the directory already held a profile and answered with
-                    // ITS key. Checked against this machine's own share before signing over it (F4) — an
-                    // answer that disagrees with the share is a directory contradicting the ceremony, not a
-                    // more authoritative value.
-                    const minted = await this.#mintCorroboratedKeyBinding(kLocalPubkeyHex, state.primary_pubkey);
-                    if (!minted.ok)
-                        return { error: minted.error, detail: minted.detail };
-                    const ok = await this.#persistAll(this.#identityPersistOps(state, mlDsaPubkeyHex, mlDsaSecretKeyBlob, minted.keyBinding, channelOpts));
-                    if (!ok)
-                        return { error: "identity_persist_failed" };
-                }
-                this.#registrationState = state;
-                this.#mlDsaProvider = mlDsaProvider;
-                return state;
-            }
-            return { error: reason };
-        }
-        // Step 6a (M16): the echo check. A channel the directory did not store as a channel is a failed
-        // registration, not an ordinary agent.
-        const echo = this.#channelEchoed(channelOpts, responseWithTimeout, correlationId, kLocalPubkeyHex);
-        if (echo)
-            return echo;
-        // Step 7: build RegistrationState and cache
-        const agentId = responseWithTimeout["agent_id"];
-        const primaryPubkey = responseWithTimeout["primary_pubkey"];
-        /**
-         * ─── 038-KEYBIND review F4: A DIRECTORY THAT ANSWERS A DIFFERENT GROUP KEY IS REFUSED ───────
-         *
-         * ⚠️ THE EARLIER SHAPE HERE WAS THE DEFECT THIS ORDER EXISTS TO REMOVE, one level up. It
-         * re-minted the binding over `primaryPubkey` whenever it differed from what the DKG derived,
-         * and argued that "binding what was ANSWERED cannot drift". It cannot drift, and it is the
-         * wrong thing to bind: K_local would be signing a statement about a group key this agent never
-         * derived and holds no share for, on the say-so of the one party the binding exists to remove
-         * from the trust path. A directory would get to choose which key is yours, which is exactly
-         * what Part 4.2 of the order rules out.
-         *
-         * `dkgPrimaryPubkeyHex` is the sum of the commitments this daemon computed in the ceremony it
-         * ran. That is the value that is ours. A `register_success` naming anything else is a directory
-         * contradicting the ceremony, and there is no honest reading of it — so the registration fails
-         * and no binding is signed. Mirrors `session-ceremony.ts`, which already aborts a key refresh
-         * when the primary changes.
-         */
-        if (primaryPubkey !== dkgPrimaryPubkeyHex) {
-            this.#ctx.logger.error("registration.primary_pubkey.mismatch", {
-                agentPubkey: kLocalPubkeyHex,
-                derivedPrefix: dkgPrimaryPubkeyHex.slice(0, 16),
-                answeredPrefix: primaryPubkey.slice(0, 16),
-                impact: "the directory confirmed registration under a threshold group key other than the one this agent's own DKG produced; nothing was persisted and no key binding was signed, because signing one would have vouched for a key this agent does not hold a share for",
-            });
-            return {
-                error: "registration_primary_pubkey_mismatch",
-                detail: "The directory confirmed your registration under a different threshold key than the ceremony on this machine produced. Nothing was saved. Retry registration; if it repeats, the node that answered is not completing ceremonies correctly and cello status will show which one it was.",
-            };
-        }
-        const state = {
-            agent_id: agentId,
-            primary_pubkey: primaryPubkey,
-            ml_dsa_pubkey: mlDsaPubkeyHex,
-            registered_at: Date.now(),
-            status: "active",
-        };
-        // SI-003: AWAIT the final identity persists before reporting success, and cache the registered
-        // state only after they commit — a register-success guarantees a durable identity row.
-        if (this.#ctx.persistence) {
-            const ok = await this.#persistAll(this.#identityPersistOps(state, mlDsaPubkeyHex, mlDsaSecretKeyBlob, keyBinding, channelOpts));
-            if (!ok)
-                return { error: "identity_persist_failed" };
-        }
-        this.#registrationState = state;
-        this.#mlDsaProvider = mlDsaProvider;
-        return state;
-    }
-}
-//# sourceMappingURL=registration-manager.js.map

package/dist/registration-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registration-manager.js","sourceRoot":"","sources":["../src/registration-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGrH,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAOlF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AA2DzD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAE7C,MAAM,OAAO,mBAAmB;IACrB,IAAI,CAAsB;IAEnC,2CAA2C;IAC3C,kBAAkB,GAA6B,IAAI,CAAC;IACpD,cAAc,GAA4B,IAAI,CAAC;IAE/C,YAAY,GAAwB;QAClC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,gFAAgF;IAEhF,oBAAoB;QAClB,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,oBAAoB,CAAC,KAA+B;QAClD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,gBAAgB,CAAC,QAAiC;QAChD,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,GAA+B;QAC/C,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,MAAM,EAAE,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBACxD,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;aAChC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CACjB,KAAwB,EACxB,cAAsB,EACtB,kBAAqC,EACrC,UAAkB,EAClB,WAAgD;QAEhD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAY,CAAC;QAC3C,MAAM,GAAG,GAA+B,EAAE,CAAC;QAC3C,IAAI,kBAAkB,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACtH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,wBAAwB,CAAC;YAClD,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,aAAa,EAAE,KAAK,CAAC,cAAc;YACnC,WAAW,EAAE,KAAK,CAAC,aAAa;YAChC,YAAY,EAAE,KAAK,CAAC,aAAa;YACjC,UAAU;YACV,6FAA6F;YAC7F,yBAAyB;YACzB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACZ,WAAgD,EAChD,KAA8B,EAC9B,aAAqB,EACrB,eAAuB;QAEvB,8FAA8F;QAC9F,gGAAgG;QAChG,2BAA2B;QAC3B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC3C,OAAO;gBACL,KAAK,EAAE,0BAA0B;gBACjC,MAAM,EACJ,sLAAsL;aACzL,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAC1D,aAAa;YACb,cAAc,EAAE,eAAe;YAC/B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,MAAM,EAAE,wLAAwL;SACjM,CAAC,CAAC;QACH,gGAAgG;QAChG,iFAAiF;QACjF,wFAAwF;QACxF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,kBAAkB;YACjD,CAAC,CAAC,0QAA0Q;YAC5Q,CAAC,CAAC,mPAAmP,CAAC;QACxP,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,eAAe,CAAC,eAAuB,EAAE,gBAAwB;QACrE,MAAM,GAAG,GAAG,kBAAkB,CAC5B,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,EACnD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CACrD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,2BAA2B,CAC/B,eAAuB,EACvB,kBAA0B;QAE1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,EAAE,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAC1D,WAAW,EAAE,eAAe;gBAC5B,MAAM,EAAE,wOAAwO;aACjP,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4BAA4B;gBACnC,MAAM,EACJ,sUAAsU;aACzU,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBAC7D,WAAW,EAAE,eAAe;gBAC5B,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/C,cAAc,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/C,MAAM,EAAE,mOAAmO;aAC5O,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,sCAAsC;gBAC7C,MAAM,EACJ,uRAAuR;aAC1R,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAE,CAAC;IACnG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,YAAoB,EAAE,EACtB,YAAqB,EACrB,WAAqC;QAErC,6BAA6B;QAC7B,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QAEnC,6CAA6C;QAC7C,IAAI,aAA+B,CAAC;QACpC,IAAI,kBAAkB,GAAsB,IAAI,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3B,aAAa,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC;YACjE,aAAa,GAAG,QAAQ,CAAC;YACzB,kBAAkB,GAAG,aAAa,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,MAAM,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEhE,kEAAkE;QAClE,+EAA+E;QAC/E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5C,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAG,CAAC;QAEpD,0FAA0F;QAC1F,yCAAyC;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1D,OAAO;oBACL,KAAK,EAAE,8BAA8B;oBACrC,MAAM,EAAE,oFAAoF;iBAC7F,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,cAAc,KAAK,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;gBACjE,OAAO;oBACL,KAAK,EAAE,8BAA8B;oBACrC,MAAM,EAAE,4FAA4F;iBACrG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,oGAAoG;QACpG,iGAAiG;QACjG,sFAAsF;QACtF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC3D,MAAM,gBAAgB,GAAG,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACjD,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,eAAe;YAC/B,aAAa,EAAE,cAAc;YAC7B,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,yFAAyF;YACzF,qEAAqE;YACrE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC9D,CAAC;QAED,2BAA2B;QAC3B,MAAM,oBAAoB,GAAG,MAAM,CAAC;QACpC,IAAI,qBAAgE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAA0B;YAChE,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,qBAAqB,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzD,CAAC,EAAE,oBAAoB,CAAC,CAAC;YAC3B,CAAC,CAAC;SACH,CAAC,CAAC;QACH,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAEpC,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAI,aAAa,CAAC,QAAQ,CAAwB,IAAI,SAAS,CAAC;YAC5E,IACE,MAAM,KAAK,oBAAoB;gBAC/B,aAAa,CAAC,UAAU,CAAC;gBACzB,aAAa,CAAC,gBAAgB,CAAC,EAC/B,CAAC;gBACD,MAAM,KAAK,GAAsB;oBAC/B,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAW;oBAC7C,cAAc,EAAE,aAAa,CAAC,gBAAgB,CAAW;oBACzD,aAAa,EAAG,aAAa,CAAC,eAAe,CAAwB,IAAI,cAAc;oBACvF,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;gBAC7F,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACtB,2FAA2F;gBAC3F,6FAA6F;gBAC7F,2FAA2F;gBAC3F,wFAAwF;gBACxF,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1B,0FAA0F;oBAC1F,sFAAsF;oBACtF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,eAAe,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;oBAC7F,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;oBACvI,IAAI,CAAC,EAAE;wBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;gBACvD,CAAC;gBACD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,8BAA8B;QAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAW,CAAC;QACnD,MAAM,YAAY,GAAG,aAAa,CAAC,cAAc,CAAW,CAAC;QAC7D,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAW,CAAC;QACvD,mEAAmE;QACnE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb;;;;;;;;;;eAUG;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBACzD,MAAM,EAAE,4LAA4L;aACrM,CAAC,CAAC;YACH,6FAA6F;YAC7F,uDAAuD;YACvD,OAAO;gBACL,KAAK,EAAE,4BAA4B;gBACnC,MAAM,EACJ,6SAA6S;aAChT,CAAC;QACJ,CAAC;QACD,0FAA0F;QAC1F,2FAA2F;QAC3F,0FAA0F;QAC1F,4EAA4E;QAC5E,qFAAqF;QACrF,0FAA0F;QAC1F,yFAAyF;QACzF,sFAAsF;QACtF,wFAAwF;QACxF,6EAA6E;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAClD,IAAI,cAAsC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,kGAAkG;YAClG,kGAAkG;YAClG,kGAAkG;YAClG,2FAA2F;YAC3F,mGAAmG;YACnG,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;oBACxD,cAAc,EAAE,MAAM,CAAC,MAAM;oBAC7B,oBAAoB,EAAE,YAAY;iBACnC,CAAC,CAAC;gBACH,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YAC1C,CAAC;YACD,cAAc,GAAG,MAAM,CAAC,GAAG,CACzB,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,oBAAoB,CAAC;gBACvB,EAAE,EAAE,EAAE,CAAC,MAAM;gBACb,IAAI,EAAE,OAAO;gBACb,eAAe,EAAE,EAAE,CAAC,MAAM;gBAC1B,mBAAmB,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;aACzB,CAAC,CACL,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,2EAA2E;YAC3E,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YAC5C,CAAC;YACD,cAAc,GAAG;gBACf,IAAI,oBAAoB,CAAC;oBACvB,EAAE,EAAE,iBAAiB,CAAC,OAAO;oBAC7B,IAAI,EAAE,OAAO;oBACb,eAAe,EAAE,iBAAiB,CAAC,OAAO;oBAC1C,mBAAmB,EAAE,iBAAiB,CAAC,UAAU;oBACjD,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;iBACzB,CAAC;aACH,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC;QACb,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,mBAA2B,CAAC;QAChC,6FAA6F;QAC7F,sFAAsF;QACtF,IAAI,cAAc,GAAgF,IAAI,CAAC;QACvG,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE;gBACvD,SAAS;gBACT,YAAY;gBACZ,cAAc;gBACd,YAAY;gBACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ;aACzD,CAAC,CAAC;YACH,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1B,cAAc,GAAG;oBACf,OAAO;oBACP,aAAa,EAAE,mBAAmB;oBAClC,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,eAAe,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,CAAe;oBAChE,mBAAmB,EAAE,UAAU,CAAC,SAAS,CAAC,eAAe,CAAe;oBACxE,SAAS,EAAE,aAAa;oBACxB,gGAAgG;oBAChG,4FAA4F;oBAC5F,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;iBACnE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,6FAA6F;YAC7F,6FAA6F;YAC7F,kFAAkF;YAClF,8EAA8E;YAC9E,kFAAkF;YAClF,4FAA4F;YAC5F,6FAA6F;YAC7F,8EAA8E;YAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBAChD,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC;gBAChC,0FAA0F;gBAC1F,mEAAmE;gBACnE,8FAA8F;gBAC9F,uFAAuF;gBACvF,WAAW,EAAE,eAAe;gBAC5B,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClE,6FAA6F;gBAC7F,6BAA6B;gBAC7B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACpD,CAAC,CAAC;YACH,6FAA6F;YAC7F,wFAAwF;YACxF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,CAAC;QACD,iGAAiG;QACjG,0FAA0F;QAC1F,IAAI,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAC1C,MAAM,KAAK,GAAG,cAAc,CAAC;YAC7B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QACvD,CAAC;QAED;;;;;;;;;;;WAWG;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QAEpF,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACjD,IAAI,EAAE,cAAc;YACpB,cAAc,EAAE,mBAAmB;YACnC,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC9D,CAAC;QAED,mDAAmD;QACnD,MAAM,mBAAmB,GAAG,MAAM,CAAC;QACnC,IAAI,aAAwD,CAAC;QAC7D,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,IAAI,CAA0B;YACtE,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzD,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC1B,CAAC,CAAC;SACH,CAAC,CAAC;QACH,YAAY,CAAC,aAAa,CAAC,CAAC;QAE5B,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACvD,MAAM,MAAM,GAAI,mBAAmB,CAAC,QAAQ,CAAwB,IAAI,SAAS,CAAC;YAClF,IACE,MAAM,KAAK,oBAAoB;gBAC/B,mBAAmB,CAAC,UAAU,CAAC;gBAC/B,mBAAmB,CAAC,gBAAgB,CAAC,EACrC,CAAC;gBACD,MAAM,KAAK,GAAsB;oBAC/B,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAW;oBACnD,cAAc,EAAE,mBAAmB,CAAC,gBAAgB,CAAW;oBAC/D,aAAa,EAAG,mBAAmB,CAAC,eAAe,CAAwB,IAAI,cAAc;oBAC7F,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;gBACnG,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACtB,kFAAkF;gBAClF,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1B,uFAAuF;oBACvF,qFAAqF;oBACrF,wFAAwF;oBACxF,4BAA4B;oBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,eAAe,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;oBAC7F,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;oBACvI,IAAI,CAAC,EAAE;wBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;gBACvD,CAAC;gBACD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,gGAAgG;QAChG,uCAAuC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QACnG,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAEtB,4CAA4C;QAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAW,CAAC;QAC1D,MAAM,aAAa,GAAG,mBAAmB,CAAC,gBAAgB,CAAW,CAAC;QAEtE;;;;;;;;;;;;;;;;WAgBG;QACH,IAAI,aAAa,KAAK,mBAAmB,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBAC7D,WAAW,EAAE,eAAe;gBAC5B,aAAa,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/C,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,EAAE,+PAA+P;aACxQ,CAAC,CAAC;YACH,OAAO;gBACL,KAAK,EAAE,sCAAsC;gBAC7C,MAAM,EACJ,wRAAwR;aAC3R,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAsB;YAC/B,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,QAAQ;SACjB,CAAC;QACF,+FAA+F;QAC/F,uFAAuF;QACvF,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CACxD,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,CACnE,CAAC,CAAC;YACH,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}