@cello-protocol/daemon 0.0.52 → 0.0.54

package/dist/seal-coordinator.js

@@ -0,0 +1,551 @@
+/**
+ * The seal cluster: bilateral seal, unilateral escalation, and the returning-absent-party upgrade.
+ *
+ * Five pieces of mutable state and the four signaling listeners that drive them. They were already
+ * seal-private inside startDaemon — nothing else touched them — but "private" was a convention you
+ * had to verify by reading 6,000 lines. Here it is the module boundary.
+ *
+ * What the cluster actually needs from the daemon is five things: the session store, a logger, the
+ * per-agent FROST persistence, the per-agent key provider, and a way to recover parked content
+ * before ratifying a seal. Notably NOT the signaling hub — a SignalingManager is passed in per
+ * listener registration, so the coordinator never reaches for the daemon's nervous system.
+ *
+ * The state objects (the waiter maps, the in-progress sets) are returned as-is rather than hidden
+ * behind accessors: cello_close_session drives them directly from ~30 sites and stays in daemon.ts
+ * (it inlines the cursor gate, governance, transcript append and retry enqueue — see the refactor
+ * plan's DO-NOT-CUT list). Preserving behavior beats tightening encapsulation in the same move;
+ * the encapsulation is a later, separate change with its own tests.
+ */
+import { Buffer } from "node:buffer";
+import { attemptSealUpgrade as attemptSealUpgradeImpl, verifyUpgradeConfirmedCert } from "./seal-upgrade.js";
+import { upgradeAbsentToRecovered, hasAbsentParticipant } from "./seal-receipt-upgrade.js";
+import { verifyUnilateralCertificate, verifyBilateralSealCertificate } from "./session-ceremony.js";
+import { reDeriveFrontiers, findInflatedFrontier, checkUnilateralFrontier } from "./seal-frontier-verify.js";
+import { frameValueToHex, normalizeLegibility } from "./frame-values.js";
+export function createSealCoordinator(deps) {
+    const { logger, sessionNodeManager, getPersistence, getKeyProvider, recoverContent } = deps;
+    // DOD-LOOP-1: daemon-level seal bookkeeping is keyed by (agentName, sessionId), NOT sessionId
+    // alone — two of the operator's agents can hold both ends of the same session_id on one daemon
+    // (loopback), and each end seals independently. Keying by session_id alone would let A's close
+    // block B's (false seal_interrupted_in_progress) and make their seal waiters collide.
+    const sealKey = (agentName, sessionId) => `${agentName}\x1f${sessionId}`;
+    // M7-SESSION-001: tracks seal-interrupted flows currently in progress.
+    // Prevents duplicate concurrent seal-interrupted attempts for the same (agent, session) (AC-011).
+    const sealInterruptedInProgress = new Set();
+    // M7 DOD-SPINE-7: relay-mediated bilateral seal. cello_close_session registers a waiter
+    // per session_id (hex); the directory's session_sealed frame — delivered over the agent's
+    // signaling stream after FROST notarization, once BOTH parties have submitted their SEAL
+    // ctrl leaf — resolves it with the sealed_root.
+    // M7-SESSION-004: the bilateral seal resolves with the sealed_root AND the legibility
+    // certificate (receipt-not-assent, per-party frontiers, attestation modes, final_message).
+    const pendingSealWaiters = new Map();
+    // M7 DOD-SPINE-7: register the session_sealed completion handler on a signaling manager — per-agent
+    // in production (the directory routes session_sealed to the session-owning agent's authenticated
+    // stream), or the shared manager on the test path. Function declaration so getAgentSignaling
+    // (defined earlier, called at runtime) can wire it per-agent.
+    function registerSessionSealedListener(signaling, agentName, agentPubkeyHex) {
+        return signaling.registerInboundHandler((frame) => {
+            if (frame["type"] !== "session_sealed")
+                return;
+            const sidHex = frameValueToHex(frame["session_id"]);
+            const rootHex = frameValueToHex(frame["sealed_root"]);
+            if (!sidHex || !rootHex)
+                return;
+            void (async () => {
+                const toU8 = (v) => v instanceof Uint8Array ? v : Buffer.isBuffer(v) ? new Uint8Array(v) : null;
+                // M7 legibility-TBS-binding: when THIS party is the seal's signer (the initiator, whose
+                // group key produced the FROST signature), verify the signature over the legibility-bound
+                // TBS. A tampered legibility (answered / content_frontier_seq / attestation_mode, carried
+                // unsigned on the frame) changes the hash → the signature fails → the seal is REJECTED. The
+                // non-initiator does not hold the signer's key, so it accepts (verified:false): the frame
+                // arrived over the authenticated Noise channel, and the binding lets any out-of-band holder
+                // of the initiator's primary verify an exported cert.
+                if (frame["signature_type"] === "frost") {
+                    const sessionIdBytes = toU8(frame["session_id"]);
+                    const sealedRootBytes = toU8(frame["sealed_root"]);
+                    const frostSig = toU8(frame["frost_signature"]);
+                    const signerPubkey = toU8(frame["signer_pubkey"]);
+                    const leafCount = typeof frame["leaf_count"] === "number" ? frame["leaf_count"] : null;
+                    const ctRaw = frame["close_timestamp"];
+                    const closeTs = typeof ctRaw === "number" ? ctRaw : typeof ctRaw === "bigint" ? Number(ctRaw) : null;
+                    if (!sessionIdBytes || !sealedRootBytes || !frostSig || !signerPubkey || leafCount === null || closeTs === null) {
+                        logger.error("session.sealed.signature.invalid", { sessionId: sidHex, reason: "missing_certificate_fields" });
+                        return;
+                    }
+                    const record = sessionNodeManager.getSessionRecord(agentName, sidHex);
+                    const verdict = await verifyBilateralSealCertificate({ persistence: getPersistence(agentName), agentPubkeyHex, logger, counterpartyPrimaryHex: record?.counterparty_primary_pubkey ?? null }, {
+                        sessionId: sessionIdBytes,
+                        sealedRoot: sealedRootBytes,
+                        leafCount,
+                        closeTimestamp: closeTs,
+                        frostSignature: frostSig,
+                        signerPubkey,
+                        signatureType: "frost",
+                        legibility: frame["legibility"] && typeof frame["legibility"] === "object"
+                            ? frame["legibility"]
+                            : null,
+                    });
+                    if (!verdict.ok) {
+                        // tamper-evidence: do NOT mark sealed, do NOT resolve the waiter as success.
+                        logger.error("session.sealed.signature.invalid", { sessionId: sidHex, reason: verdict.reason });
+                        return;
+                    }
+                    // F2-a: on verified:false, surface WHY (signer_key_not_held / no_frost_share / …) so this
+                    // event can never be mistaken for a tolerated failed check. A real failure took the early
+                    // return above (session.sealed.signature.invalid) and never reaches here.
+                    logger.info("session.sealed.signature.checked", {
+                        sessionId: sidHex,
+                        verified: verdict.verified,
+                        ...(verdict.verified ? {} : { reason: verdict.reason }),
+                    });
+                }
+                // M7-SESSION-004 (AC-005): normalise the wire legibility (Uint8Array pubkeys → hex) into a
+                // JSON-safe certificate and persist it with the sealed record so it survives a restart and
+                // is readable via cello_get_sealed_receipt — receipt-not-assent, per-party frontiers,
+                // attestation modes, and final_message.answered.
+                const legibility = normalizeLegibility(frame["legibility"]);
+                logger.info("session.sealed.received", {
+                    sessionId: sidHex,
+                    sealedRoot: rootHex,
+                    hasLegibility: legibility !== undefined,
+                    finalMessageAnswered: legibility && typeof legibility === "object" && "final_message" in legibility
+                        ? legibility.final_message?.answered
+                        : undefined,
+                });
+                // DOD-LEG-2 (SI-002): independently re-derive each party's content_frontier_seq from the
+                // signed leaves the directory shipped, and REJECT the certificate if any published frontier
+                // is inflated beyond what the signed leaves support. The client does NOT trust the directory
+                // for the frontier VALUE — only for transporting signed bytes it re-checks itself. When no
+                // frontier_leaves are present (a pre-LEG-2 directory), the guard is skipped (backward-compat).
+                const frontierLeavesRaw = frame["frontier_leaves"];
+                if (legibility !== undefined) {
+                    const rawParticipants = legibility.participants ?? [];
+                    // Any party claiming to have received content (frontier > 0) MUST be backed by signed leaves.
+                    const anyClaimedFrontier = rawParticipants.some((p) => typeof p.content_frontier_seq === "number" && p.content_frontier_seq > 0);
+                    const haveLeaves = Array.isArray(frontierLeavesRaw) && frontierLeavesRaw.length > 0;
+                    // HIGH (fail-closed): a malicious directory must not bypass the guard by OMITTING the leaves
+                    // while still publishing a frontier. No leaves + a claimed frontier → reject.
+                    if (anyClaimedFrontier && !haveLeaves) {
+                        logger.error("seal.certificate.frontier.unverifiable", { sessionId: sidHex, reason: "frontier_leaves_missing" });
+                        return;
+                    }
+                    // LOW (robustness): a malformed/malicious legibility (null pubkey or non-numeric frontier)
+                    // must be rejected, never crash the guard.
+                    for (const p of rawParticipants) {
+                        if (typeof p.pubkey !== "string" || typeof p.content_frontier_seq !== "number") {
+                            logger.error("seal.certificate.frontier.unverifiable", { sessionId: sidHex, reason: "participant_malformed" });
+                            return;
+                        }
+                    }
+                    const participants = rawParticipants;
+                    if (haveLeaves) {
+                        const toU8 = (v) => (v instanceof Uint8Array ? v : new Uint8Array(v));
+                        const leaves = frontierLeavesRaw.map((l) => {
+                            const o = l;
+                            return {
+                                structure1_cbor: toU8(o["structure1_cbor"]),
+                                sender_pubkey: toU8(o["sender_pubkey"]),
+                                sender_signature: toU8(o["sender_signature"]),
+                            };
+                        });
+                        // Session-bound re-derivation (BLOCKING fix): leaves must be from THIS session, so a
+                        // malicious directory cannot replay a party's leaves from another session to inflate.
+                        const rederived = reDeriveFrontiers(leaves, toU8(frame["session_id"]));
+                        if (!rederived.ok) {
+                            logger.error("seal.certificate.frontier.unverifiable", { sessionId: sidHex, reason: rederived.reason });
+                            return;
+                        }
+                        const inflated = findInflatedFrontier(participants, rederived.frontiers);
+                        if (inflated) {
+                            // The directory published a frontier higher than the signed leaves support — refuse the
+                            // seal (do NOT persist, do NOT resolve the close as success), exactly like a bad signature.
+                            logger.error("seal.certificate.frontier.unverifiable", {
+                                sessionId: sidHex,
+                                party: inflated.party,
+                                publishedFrontier: inflated.publishedFrontier,
+                                derivedFrontier: inflated.derivedFrontier,
+                            });
+                            return;
+                        }
+                        logger.info("seal.certificate.frontier.verified", {
+                            sessionId: sidHex,
+                            parties: participants.length,
+                        });
+                    }
+                }
+                if (legibility !== undefined) {
+                    try {
+                        sessionNodeManager.recordSealCertificate(agentName, sidHex, rootHex, JSON.stringify(legibility));
+                    }
+                    catch (error) {
+                        logger.warn("seal.certificate.persist.failed", {
+                            sessionId: sidHex,
+                            reason: error instanceof Error ? error.message : String(error),
+                        });
+                    }
+                }
+                const waiter = pendingSealWaiters.get(sealKey(agentName, sidHex));
+                if (waiter) {
+                    pendingSealWaiters.delete(sealKey(agentName, sidHex));
+                    waiter({ rootHex, legibility });
+                }
+                // Mark the session sealed + tear the node down (idempotent — safe if already gone).
+                void sessionNodeManager.destroySessionNode(agentName, sidHex, "sealed");
+            })();
+        });
+    }
+    // SESSION-002 (DOD-SEAL): cello_close_session escalates to a UNILATERAL seal when the
+    // counterparty never co-closes. The waiter is resolved by the seal_unilateral_confirmed
+    // listener AFTER it verifies the certificate signature (channel-independent), or by
+    // seal_unilateral_too_early (grace not elapsed). Keyed by session_id hex.
+    // F20: `remainingSeconds` carries the directory's seal_unilateral_too_early countdown so the
+    // close result can tell the operator WHEN a unilateral seal becomes available.
+    // M8B FINDING-3 (cascade-2): a successful unilateral seal now carries the legibility certificate
+    // (normalized, JSON-safe) so cello_close_session returns it inline — the same RESPONSE SHAPE as the
+    // bilateral close (not cryptographic parity: this cert is directory-attested, see FINDING-5). undefined
+    // when the directory shipped none (a pre-cascade-2 directory): the seal still completes, but no
+    // retrievable receipt is produced (the pre-fix behavior).
+    const pendingUnilateralWaiters = new Map();
+    // SESSION-002: per-agent listener for the unilateral certificate. Verifies the FROST
+    // signature over the rebuilt TBS against the agent's own primary_pubkey BEFORE resolving
+    // the close as sealed (SI-003: a channel-swapped sealed_root fails the signature check).
+    function registerUnilateralConfirmedListener(signaling, agentName, agentPubkeyHex) {
+        return signaling.registerInboundHandler((frame) => {
+            const ftype = frame["type"];
+            if (ftype !== "seal_unilateral_confirmed" && ftype !== "seal_unilateral_too_early")
+                return;
+            const sidHex = frameValueToHex(frame["session_id"]);
+            if (!sidHex)
+                return;
+            const waiter = pendingUnilateralWaiters.get(sidHex);
+            if (!waiter)
+                return;
+            if (ftype === "seal_unilateral_too_early") {
+                pendingUnilateralWaiters.delete(sidHex);
+                // F20: thread the directory's remaining_seconds through so the close guidance can
+                // say when the unilateral seal becomes available.
+                const rs = frame["remaining_seconds"];
+                waiter({
+                    ok: false,
+                    reason: "seal_unilateral_too_early",
+                    ...(typeof rs === "number" ? { remainingSeconds: rs } : {}),
+                });
+                return;
+            }
+            void (async () => {
+                const toU8 = (v) => v instanceof Uint8Array ? v : Buffer.isBuffer(v) ? new Uint8Array(v) : null;
+                const sessionId = toU8(frame["session_id"]);
+                const sealedRoot = toU8(frame["sealed_root"]);
+                const frostSig = toU8(frame["frost_signature"]);
+                const leafCount = typeof frame["leaf_count"] === "number" ? frame["leaf_count"] : null;
+                const tsRaw = frame["close_timestamp"];
+                const closeTs = typeof tsRaw === "number" ? tsRaw : typeof tsRaw === "bigint" ? Number(tsRaw) : null;
+                const sigType = frame["signature_type"];
+                if (!sessionId || !sealedRoot || !frostSig || leafCount === null || closeTs === null ||
+                    (sigType !== "frost" && sigType !== "single")) {
+                    logger.warn("session.unilateral.certificate.invalid", { sessionId: sidHex, reason: "malformed_certificate" });
+                    pendingUnilateralWaiters.delete(sidHex);
+                    waiter({ ok: false, reason: "malformed_certificate" });
+                    return;
+                }
+                const result = await verifyUnilateralCertificate({ persistence: getPersistence(agentName), agentPubkeyHex, logger }, { sessionId, sealedRoot, leafCount, closeTimestamp: closeTs, frostSignature: frostSig, signatureType: sigType });
+                pendingUnilateralWaiters.delete(sidHex);
+                if (!result.ok) {
+                    // SI-003: do NOT mark sealed when the certificate signature does not verify.
+                    logger.warn("session.unilateral.certificate.invalid", { sessionId: sidHex, reason: result.reason, signatureType: sigType });
+                    waiter({ ok: false, reason: `certificate_invalid:${result.reason}` });
+                    return;
+                }
+                logger.info("session.unilateral.certificate.verified", { sessionId: sidHex, signatureType: sigType, party: "present" });
+                // M8B FINDING-3 (cascade-2): normalise + PERSIST the legibility certificate the directory
+                // now ships on this frame — the SAME store the bilateral session_sealed handler writes
+                // (recordSealCertificate → read back by cello_get_sealed_receipt). Without this a unilateral
+                // close returned ok+root but sealed_receipt_not_found forever: the whole point of sealing
+                // when your counterparty vanished is walking away with a DURABLE, RETRIEVABLE receipt.
+                // Persist BEFORE destroying the node (bilateral ordering) so the sessions row still exists
+                // for the UPDATE. undefined legibility (a pre-cascade-2 directory) → nothing persisted; the
+                // seal still completes — surfaced loudly so this can never masquerade as a produced receipt.
+                const rootHex = Buffer.from(sealedRoot).toString("hex");
+                const legibility = normalizeLegibility(frame["legibility"]);
+                // M8B FINDING-5 (SI-002): before persisting, INDEPENDENTLY re-derive each CLIENT-VERIFIABLE
+                // ('live', the present party) frontier from the signed frontier_leaves and OVERRIDE an inflated
+                // directory-published value DOWN to the provable one (the directory cannot forge signed leaves,
+                // so the re-derived value is truth). We OVERRIDE, never reject — the unilateral seal has a
+                // directory-side dedup guard that makes a client rejection unrecoverable (a retry close is
+                // silently ignored → no receipt ever, worse than FINDING-3; cascade-2 reviewer Critical 2). The
+                // absent party's frontier stays directory-attested (its remainder is not re-derivable here). No
+                // frontier_leaves (pre-FINDING-5 directory) → the cert stays directory-attested (FINDING-3).
+                // A receipt is ALWAYS persisted; the close never dead-ends here.
+                if (legibility !== undefined) {
+                    const rawParticipants = legibility.participants ?? [];
+                    const guardParticipants = rawParticipants
+                        .filter((p) => typeof p.pubkey === "string" && typeof p.attestation_mode === "string")
+                        .map((p) => ({
+                        pubkey: p.pubkey,
+                        content_frontier_seq: typeof p.content_frontier_seq === "number" ? p.content_frontier_seq : 0,
+                        attestation_mode: p.attestation_mode,
+                    }));
+                    const frontierLeavesRaw = frame["frontier_leaves"];
+                    const toU8f = (v) => (v instanceof Uint8Array ? v : new Uint8Array(v));
+                    const parsedFrontierLeaves = Array.isArray(frontierLeavesRaw) && frontierLeavesRaw.length > 0
+                        ? frontierLeavesRaw.map((l) => {
+                            const o = l;
+                            return {
+                                structure1_cbor: toU8f(o["structure1_cbor"]),
+                                sender_pubkey: toU8f(o["sender_pubkey"]),
+                                sender_signature: toU8f(o["sender_signature"]),
+                            };
+                        })
+                        : undefined;
+                    const check = checkUnilateralFrontier(guardParticipants, parsedFrontierLeaves, sessionId);
+                    // Apply any frontier corrections to the object we persist — override inflated 'live'
+                    // frontier(s) DOWN to the provable value, so the stored receipt never claims more than the
+                    // signed leaves support. Runs for both 'corrected' (valid leaves) and 'leaves_invalid'
+                    // (forged leaves → corrected to 0). Never rejects → the close never dead-ends.
+                    if (check.corrections.size > 0) {
+                        for (const p of rawParticipants) {
+                            if (typeof p.pubkey === "string" && check.corrections.has(p.pubkey.toLowerCase())) {
+                                p.content_frontier_seq = check.corrections.get(p.pubkey.toLowerCase());
+                            }
+                        }
+                    }
+                    if (check.status === "corrected") {
+                        logger.error("seal.certificate.frontier.overridden", {
+                            sessionId: sidHex,
+                            corrections: [...check.corrections.entries()].map(([party, seq]) => ({ party, correctedTo: seq })),
+                            path: "unilateral",
+                        });
+                    }
+                    else if (check.status === "verified") {
+                        logger.info("seal.certificate.frontier.verified", {
+                            sessionId: sidHex,
+                            parties: guardParticipants.filter((p) => p.attestation_mode === "live").length,
+                            path: "unilateral",
+                        });
+                    }
+                    else if (check.status === "leaves_invalid") {
+                        // Forged / cross-session leaves — a tamper signal. The 'live' frontier(s) have been
+                        // corrected to 0 above (zero trustworthy evidence); persist that (never reject → never
+                        // dead-end). Surfaced loudly for audit.
+                        logger.error("seal.certificate.frontier.leaves_invalid", {
+                            sessionId: sidHex,
+                            reason: check.reason,
+                            corrections: [...check.corrections.entries()].map(([party, seq]) => ({ party, correctedTo: seq })),
+                            path: "unilateral",
+                        });
+                    }
+                    else {
+                        // directory_attested: no frontier_leaves shipped (pre-FINDING-5 directory). Frontiers stay
+                        // DIRECTORY-attested (already marked per-participant) — visible/auditable, never silently
+                        // presented as client-verified.
+                        logger.warn("seal.certificate.frontier.directory_attested", {
+                            sessionId: sidHex,
+                            reason: "no_frontier_leaves",
+                            path: "unilateral",
+                        });
+                    }
+                }
+                if (legibility !== undefined) {
+                    try {
+                        sessionNodeManager.recordSealCertificate(agentName, sidHex, rootHex, JSON.stringify(legibility));
+                        logger.info("session.unilateral.receipt.persisted", {
+                            sessionId: sidHex,
+                            sealedRoot: rootHex,
+                            finalMessageAnswered: legibility && typeof legibility === "object" && "final_message" in legibility
+                                ? legibility.final_message?.answered
+                                : undefined,
+                        });
+                    }
+                    catch (error) {
+                        logger.warn("seal.certificate.persist.failed", {
+                            sessionId: sidHex,
+                            reason: error instanceof Error ? error.message : String(error),
+                        });
+                    }
+                }
+                else {
+                    // The seal is valid, but no receipt is retrievable — a directory that predates cascade-2.
+                    logger.warn("session.unilateral.receipt.absent", { sessionId: sidHex, reason: "no_legibility_on_frame" });
+                }
+                void sessionNodeManager.destroySessionNode(agentName, sidHex, "sealed");
+                waiter({ ok: true, sealedRootHex: rootHex, legibility });
+            })();
+        });
+    }
+    // ─── DOD-UP-1: returning-absent-party seal upgrade (unilateral → bilateral) ───
+    // Per-session idempotency guard so a notification burst (reconnect re-delivery) cannot launch
+    // concurrent upgrade attempts. Keyed `${agentName}:${sessionIdHex}`; cleared after each attempt.
+    const sealUpgradeInFlight = new Set();
+    /**
+     * DOD-UP-1: B (the absent party) ratifies a unilateral seal it learns about on reconnect.
+     *
+     * THE KERNEL: B signs the ratification ONLY after it has recovered + integrity-verified the
+     * content behind the sealed root. We (0) verify the unilateral cert so R1 is provably authentic
+     * (SI-003 — a channel-swapped root fails); (1) recover any parked content from the relay; (2) gate
+     * on getSealUpgradeReadiness — refuse content_unrecoverable (session unknown) or content_tamper
+     * (cross-check mismatch, AC-003); only then (3) sign the ack over R1 with B's OWN K_local and send
+     * seal_upgrade_request. B never co-signs content it could not verify.
+     */
+    // Thin wrapper over the extracted, unit-tested seal-upgrade.ts module (the KERNEL + AC-008 + H1/M1
+    // hardening live there so the refusal/reject bodies run under adversarial tests). This wrapper owns
+    // only the per-session in-flight guard and the real-dep injection.
+    async function attemptSealUpgrade(signaling, agentName, agentPubkeyHex, sidHex, frame) {
+        const key = `${agentName}:${sidHex}`;
+        if (sealUpgradeInFlight.has(key))
+            return;
+        sealUpgradeInFlight.add(key);
+        try {
+            const result = await attemptSealUpgradeImpl({
+                logger, agentName, agentPubkeyHex,
+                getReadiness: (a, s) => sessionNodeManager.getSealUpgradeReadiness(a, s),
+                getContentLeafCount: (a, s) => sessionNodeManager.getSessionTree(a, s).size(),
+                recoverContent: (a) => recoverContent(a),
+                getKeyProvider: (a) => getKeyProvider(a),
+                sendRaw: (f) => signaling.sendRaw(f),
+            }, sidHex, frame);
+            // M8B FINDING-6 (3b): the ABSENT party (B) persists its UNILATERAL receipt from the
+            // notification's legibility — but ONLY after the KERNEL content-recovery/verify gate passed.
+            // `result.sent` is true iff attemptSealUpgradeImpl recovered + integrity-verified the content
+            // behind R1 and sent the ratification request; a tampered/unrecoverable/incomplete case returns
+            // sent:false → NO receipt (never a receipt for content B could not verify). B may hold no local
+            // `sessions` row (recordSealCertificateEnsuringRow inserts a stub, counterparty = A's pubkey).
+            // The notification carries no frontier_leaves (FINDING-5 ships those only on the present party's
+            // confirm frame), so B's legibility is directory-attested — consistent with FINDING-5's
+            // directory_attested path; B trusts its own KERNEL-verified content, not a re-derivation.
+            if (result.sent) {
+                try {
+                    // ONE-WAY RATCHET (cascade-2 FINDING-6 review): a re-delivered seal_unilateral_notification
+                    // (reconnect burst) re-runs this path and would re-persist the notification's ORIGINAL
+                    // legibility (counterparty 'absent'). If a prior upgrade already flipped the stored receipt
+                    // to 'recovered' (no 'absent' participant), re-persisting would REGRESS it — and no later
+                    // event restores 'recovered' (the directory dedups the duplicate as already_bilateral →
+                    // seal_upgrade_rejected, which only logs). So skip the re-persist once the cert is upgraded.
+                    const existing = sessionNodeManager.getSealCertificate(agentName, sidHex);
+                    if (existing && !hasAbsentParticipant(existing.legibility)) {
+                        logger.debug("session.unilateral.receipt.persist.skipped", { sessionId: sidHex, reason: "already_upgraded" });
+                    }
+                    else {
+                        const legibility = normalizeLegibility(frame["legibility"]);
+                        const rootHex = frameValueToHex(frame["sealed_root"]);
+                        const counterpartyHex = frameValueToHex(frame["present_pubkey"]); // A — the present party
+                        if (legibility !== undefined && rootHex && counterpartyHex) {
+                            sessionNodeManager.recordSealCertificateEnsuringRow(agentName, sidHex, counterpartyHex, rootHex, JSON.stringify(legibility));
+                            logger.info("session.unilateral.receipt.persisted", { sessionId: sidHex, sealedRoot: rootHex, party: "absent" });
+                        }
+                        else if (legibility === undefined) {
+                            logger.warn("session.unilateral.receipt.absent", { sessionId: sidHex, reason: "no_legibility_on_notification" });
+                        }
+                    }
+                }
+                catch (error) {
+                    logger.warn("seal.certificate.persist.failed", { sessionId: sidHex, reason: error instanceof Error ? error.message : String(error) });
+                }
+            }
+        }
+        finally {
+            // Clear the guard so a later reconnect can retry if the request never reached the directory;
+            // the directory dedups a repeat with already_bilateral.
+            sealUpgradeInFlight.delete(key);
+        }
+    }
+    // Thin wrapper: verify the dual-attestation cert (module, AC-008 + H1), then APPLY — mark bilateral
+    // ONLY on ok. Never trust the directory's "bilateral" claim.
+    async function verifyAndApplyUpgradeConfirmed(agentName, agentPubkeyHex, sidHex, frame) {
+        const result = await verifyUpgradeConfirmedCert({
+            logger, agentName, agentPubkeyHex, persistence: getPersistence(agentName),
+            getCounterpartyHex: (a, s) => sessionNodeManager.getSessionRecord(a, s)?.counterparty_pubkey ?? null,
+        }, sidHex, frame);
+        if (!result.ok)
+            return; // cert.invalid already logged inside; do NOT accept as bilateral.
+        logger.info("session.seal.upgraded", { sessionId: sidHex, agentName, party: result.party });
+        // M8B FINDING-6 (3a): the seal is now BILATERAL (verified) — upgrade THIS party's own stored
+        // receipt so the counterparty recorded 'absent' becomes 'recovered'. Client-side: the directory
+        // ships no bilateral legibility at upgrade time (the seal leaves aren't persisted there), so each
+        // party rebuilds from the cert it already holds — the present party's from its unilateral close
+        // (FINDING-3), the returning party's from the notification it persisted after the KERNEL gate
+        // (3b). The seal signatures do not bind the (unsigned) legibility, so mutating it is sound; only
+        // the attestation flips (frontiers unchanged — never overstated). No-op if no cert is stored yet.
+        const stored = sessionNodeManager.getSealCertificate(agentName, sidHex);
+        if (stored) {
+            try {
+                const upgraded = upgradeAbsentToRecovered(stored.legibility);
+                sessionNodeManager.recordSealCertificate(agentName, sidHex, stored.sealed_root, JSON.stringify(upgraded));
+                logger.info("session.seal.receipt.upgraded", { sessionId: sidHex, agentName, party: result.party });
+            }
+            catch (error) {
+                logger.warn("seal.certificate.persist.failed", { sessionId: sidHex, reason: error instanceof Error ? error.message : String(error) });
+            }
+        }
+        void sessionNodeManager.destroySessionNode(agentName, sidHex, "sealed");
+    }
+    /**
+     * DOD-UP-1: per-agent listener for the absent-party seal upgrade. On reconnect the directory
+     * delivers a queued seal_unilateral_notification to B (the absent party) — that triggers the
+     * ratification attempt. The directory's seal_upgrade_confirmed / seal_upgrade_rejected responses
+     * are observed here too (B marks the session bilaterally sealed / logs the refusal).
+     */
+    function registerUnilateralUpgradeListener(signaling, agentName, agentPubkeyHex) {
+        return signaling.registerInboundHandler((frame) => {
+            const ftype = frame["type"];
+            if (ftype === "seal_upgrade_confirmed") {
+                const sidHex = frameValueToHex(frame["session_id"]);
+                if (!sidHex)
+                    return;
+                // AC-008: do NOT accept "bilateral" on the directory's word — verify the dual attestation.
+                void verifyAndApplyUpgradeConfirmed(agentName, agentPubkeyHex, sidHex, frame);
+                return;
+            }
+            if (ftype === "seal_upgrade_rejected") {
+                const sidHex = frameValueToHex(frame["session_id"]);
+                if (!sidHex)
+                    return;
+                logger.warn("session.seal.upgrade.rejected", { sessionId: sidHex, agentName, reason: frame["reason"] });
+                return;
+            }
+            if (ftype !== "seal_unilateral_notification")
+                return;
+            const sidHex = frameValueToHex(frame["session_id"]);
+            if (!sidHex)
+                return;
+            // Only the ABSENT party receives this frame — B reacts by attempting the ratification.
+            void attemptSealUpgrade(signaling, agentName, agentPubkeyHex, sidHex, frame);
+        });
+    }
+    /**
+     * Wire the WHOLE seal listener set onto an authenticated signaling stream.
+     *
+     * A BUNDLE, deliberately — the three listeners are NOT exported individually, because being able
+     * to register two of the three is what caused the bug this replaced. The daemon's VISITING stream
+     * registered `session_sealed` + `seal_unilateral_confirmed` but not the upgrade listener, and that
+     * looked intentional. It was not: the directory drains its DURABLE notification queue on any
+     * stream that authenticates — visiting included — and DELETES each row once sent. So a
+     * `seal_unilateral_notification` pushed down a visiting stream hit no handler, was dropped, and
+     * its durable row was gone. The absent party never ratified, and the seal stayed unilateral
+     * forever: silent, permanent loss of a notarized receipt.
+     *
+     * Every stream that can carry a seal frame gets every seal listener. Making the partial case
+     * impossible to express is the fix; a comment asking future callers to remember all three is not.
+     *
+     * Safe to call on any stream, including transient ones: `attemptSealUpgrade` holds a per-session
+     * in-flight guard, the receipt persist is behind the one-way ratchet, and the directory dedups a
+     * repeated ratification with `already_bilateral`.
+     */
+    function registerSealListeners(signaling, agentName, agentPubkeyHex) {
+        const unregisterSealed = registerSessionSealedListener(signaling, agentName, agentPubkeyHex);
+        const unregisterUnilateral = registerUnilateralConfirmedListener(signaling, agentName, agentPubkeyHex);
+        const unregisterUpgrade = registerUnilateralUpgradeListener(signaling, agentName, agentPubkeyHex);
+        return () => {
+            unregisterSealed();
+            unregisterUnilateral();
+            unregisterUpgrade();
+        };
+    }
+    return {
+        sealKey,
+        sealInterruptedInProgress,
+        pendingSealWaiters,
+        pendingUnilateralWaiters,
+        registerSealListeners,
+    };
+}
+//# sourceMappingURL=seal-coordinator.js.map

package/dist/seal-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-coordinator.js","sourceRoot":"","sources":["../src/seal-coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,kBAAkB,IAAI,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,uBAAuB,EAAyB,MAAM,2BAA2B,CAAC;AAEpI,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAiCzE,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAE5F,8FAA8F;IAC9F,+FAA+F;IAC/F,+FAA+F;IAC/F,sFAAsF;IACtF,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAE,SAAiB,EAAU,EAAE,CAAC,GAAG,SAAS,OAAO,SAAS,EAAE,CAAC;IAEjG,uEAAuE;IACvE,kGAAkG;IAClG,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpD,wFAAwF;IACxF,0FAA0F;IAC1F,yFAAyF;IACzF,gDAAgD;IAChD,sFAAsF;IACtF,2FAA2F;IAC3F,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAgD,CAAC;IAEnF,oGAAoG;IACpG,iGAAiG;IACjG,6FAA6F;IAC7F,8DAA8D;IAC9D,SAAS,6BAA6B,CAAC,SAA2B,EAAE,SAAiB,EAAE,cAAsB;QAC3G,OAAO,SAAS,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;YAChD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,gBAAgB;gBAAE,OAAO;YAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;gBAAE,OAAO;YAChC,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,IAAI,GAAG,CAAC,CAAU,EAAqB,EAAE,CAC7C,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAExF,wFAAwF;gBACxF,0FAA0F;gBAC1F,0FAA0F;gBAC1F,4FAA4F;gBAC5F,0FAA0F;gBAC1F,4FAA4F;gBAC5F,sDAAsD;gBACtD,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,OAAO,EAAE,CAAC;oBACxC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;oBACjD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBAChD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;oBAClD,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACvF,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;oBACvC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACrG,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;wBAChH,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;wBAC9G,OAAO;oBACT,CAAC;oBACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBACtE,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAClD,EAAE,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,2BAA2B,IAAI,IAAI,EAAE,EACvI;wBACE,SAAS,EAAE,cAAc;wBACzB,UAAU,EAAE,eAAe;wBAC3B,SAAS;wBACT,cAAc,EAAE,OAAO;wBACvB,cAAc,EAAE,QAAQ;wBACxB,YAAY;wBACZ,aAAa,EAAE,OAAO;wBACtB,UAAU,EACR,KAAK,CAAC,YAAY,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,QAAQ;4BAC5D,CAAC,CAAE,KAAK,CAAC,YAAY,CAAuB;4BAC5C,CAAC,CAAC,IAAI;qBACX,CACF,CAAC;oBACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;wBAChB,6EAA6E;wBAC7E,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;wBAChG,OAAO;oBACT,CAAC;oBACD,0FAA0F;oBAC1F,0FAA0F;oBAC1F,0EAA0E;oBAC1E,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;wBAC9C,SAAS,EAAE,MAAM;wBACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;qBACxD,CAAC,CAAC;gBACL,CAAC;gBAED,2FAA2F;gBAC3F,2FAA2F;gBAC3F,sFAAsF;gBACtF,iDAAiD;gBACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;oBACrC,SAAS,EAAE,MAAM;oBACjB,UAAU,EAAE,OAAO;oBACnB,aAAa,EAAE,UAAU,KAAK,SAAS;oBACvC,oBAAoB,EAClB,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,eAAe,IAAI,UAAU;wBAC3E,CAAC,CAAE,UAAyD,CAAC,aAAa,EAAE,QAAQ;wBACpF,CAAC,CAAC,SAAS;iBAChB,CAAC,CAAC;gBACH,yFAAyF;gBACzF,4FAA4F;gBAC5F,6FAA6F;gBAC7F,2FAA2F;gBAC3F,+FAA+F;gBAC/F,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACnD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,eAAe,GAClB,UAA6F,CAAC,YAAY,IAAI,EAAE,CAAC;oBACpH,8FAA8F;oBAC9F,MAAM,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAChF,CAAC;oBACF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;oBACpF,6FAA6F;oBAC7F,8EAA8E;oBAC9E,IAAI,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC;wBACtC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;wBACjH,OAAO;oBACT,CAAC;oBACD,2FAA2F;oBAC3F,2CAA2C;oBAC3C,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;wBAChC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;4BAC/E,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;4BAC/G,OAAO;wBACT,CAAC;oBACH,CAAC;oBACD,MAAM,YAAY,GAAG,eAA0E,CAAC;oBAEhG,IAAI,UAAU,EAAE,CAAC;wBACjB,MAAM,IAAI,GAAG,CAAC,CAAU,EAAc,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAsB,CAAC,CAAC,CAAC;wBAChH,MAAM,MAAM,GAAwB,iBAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;4BAC5E,MAAM,CAAC,GAAG,CAA4B,CAAC;4BACvC,OAAO;gCACL,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;gCAC3C,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;gCACvC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;6BAC9C,CAAC;wBACJ,CAAC,CAAC,CAAC;wBACH,qFAAqF;wBACrF,sFAAsF;wBACtF,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;wBACvE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;4BAClB,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;4BACxG,OAAO;wBACT,CAAC;wBACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;wBACzE,IAAI,QAAQ,EAAE,CAAC;4BACb,wFAAwF;4BACxF,4FAA4F;4BAC5F,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gCACrD,SAAS,EAAE,MAAM;gCACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;gCACrB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gCAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe;6BAC1C,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;4BAChD,SAAS,EAAE,MAAM;4BACjB,OAAO,EAAE,YAAY,CAAC,MAAM;yBAC7B,CAAC,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBACH,kBAAkB,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;oBACnG,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;4BAC7C,SAAS,EAAE,MAAM;4BACjB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC/D,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;gBAClE,IAAI,MAAM,EAAE,CAAC;oBACX,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;oBACtD,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClC,CAAC;gBACD,oFAAoF;gBACpF,KAAK,kBAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1E,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IACtF,wFAAwF;IACxF,oFAAoF;IACpF,0EAA0E;IAC1E,6FAA6F;IAC7F,+EAA+E;IAC/E,iGAAiG;IACjG,oGAAoG;IACpG,wGAAwG;IACxG,gGAAgG;IAChG,0DAA0D;IAC1D,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAyC,CAAC;IAElF,qFAAqF;IACrF,yFAAyF;IACzF,yFAAyF;IACzF,SAAS,mCAAmC,CAC1C,SAA2B,EAC3B,SAAiB,EACjB,cAAsB;QAEtB,OAAO,SAAS,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,2BAA2B,IAAI,KAAK,KAAK,2BAA2B;gBAAE,OAAO;YAC3F,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,IAAI,KAAK,KAAK,2BAA2B,EAAE,CAAC;gBAC1C,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,kFAAkF;gBAClF,kDAAkD;gBAClD,MAAM,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACtC,MAAM,CAAC;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,2BAA2B;oBACnC,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,IAAI,GAAG,CAAC,CAAU,EAAqB,EAAE,CAC7C,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAChD,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACvF,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrG,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACxC,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI;oBAChF,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;oBAClD,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBAC9G,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACxC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBACvD,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAC9C,EAAE,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,EAClE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,CAChH,CAAC;gBACF,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,6EAA6E;oBAC7E,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC5H,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAExH,0FAA0F;gBAC1F,uFAAuF;gBACvF,6FAA6F;gBAC7F,0FAA0F;gBAC1F,uFAAuF;gBACvF,2FAA2F;gBAC3F,4FAA4F;gBAC5F,6FAA6F;gBAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAE5D,4FAA4F;gBAC5F,gGAAgG;gBAChG,gGAAgG;gBAChG,2FAA2F;gBAC3F,2FAA2F;gBAC3F,gGAAgG;gBAChG,gGAAgG;gBAChG,6FAA6F;gBAC7F,iEAAiE;gBACjE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,eAAe,GAClB,UAAyH,CAAC,YAAY,IAAI,EAAE,CAAC;oBAChJ,MAAM,iBAAiB,GAAG,eAAe;yBACtC,MAAM,CAAC,CAAC,CAAC,EAAoF,EAAE,CAC9F,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,CAAC;yBACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACX,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,oBAAoB,EAAE,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;wBAC7F,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;qBACrC,CAAC,CAAC,CAAC;oBACN,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;oBACnD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAc,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAsB,CAAC,CAAC,CAAC;oBACjH,MAAM,oBAAoB,GACxB,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;wBAC9D,CAAC,CAAE,iBAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;4BACzC,MAAM,CAAC,GAAG,CAA4B,CAAC;4BACvC,OAAO;gCACL,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;gCAC5C,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;gCACxC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;6BAC/C,CAAC;wBACJ,CAAC,CAAC;wBACJ,CAAC,CAAC,SAAS,CAAC;oBAChB,MAAM,KAAK,GAAG,uBAAuB,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;oBAC1F,qFAAqF;oBACrF,2FAA2F;oBAC3F,uFAAuF;oBACvF,+EAA+E;oBAC/E,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;wBAC/B,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;4BAChC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gCACjF,CAAwC,CAAC,oBAAoB,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;4BACjH,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBACjC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;4BACnD,SAAS,EAAE,MAAM;4BACjB,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;4BAClG,IAAI,EAAE,YAAY;yBACnB,CAAC,CAAC;oBACL,CAAC;yBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;wBACvC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;4BAChD,SAAS,EAAE,MAAM;4BACjB,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,MAAM;4BAC9E,IAAI,EAAE,YAAY;yBACnB,CAAC,CAAC;oBACL,CAAC;yBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;wBAC7C,oFAAoF;wBACpF,uFAAuF;wBACvF,wCAAwC;wBACxC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;4BACvD,SAAS,EAAE,MAAM;4BACjB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;4BAClG,IAAI,EAAE,YAAY;yBACnB,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,2FAA2F;wBAC3F,0FAA0F;wBAC1F,gCAAgC;wBAChC,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;4BAC1D,SAAS,EAAE,MAAM;4BACjB,MAAM,EAAE,oBAAoB;4BAC5B,IAAI,EAAE,YAAY;yBACnB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBACH,kBAAkB,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;wBACjG,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;4BAClD,SAAS,EAAE,MAAM;4BACjB,UAAU,EAAE,OAAO;4BACnB,oBAAoB,EAClB,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,eAAe,IAAI,UAAU;gCAC3E,CAAC,CAAE,UAAyD,CAAC,aAAa,EAAE,QAAQ;gCACpF,CAAC,CAAC,SAAS;yBAChB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;4BAC7C,SAAS,EAAE,MAAM;4BACjB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC/D,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,0FAA0F;oBAC1F,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC5G,CAAC;gBACD,KAAK,kBAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACxE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACjF,8FAA8F;IAC9F,iGAAiG;IACjG,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C;;;;;;;;;OASG;IACH,mGAAmG;IACnG,oGAAoG;IACpG,mEAAmE;IACnE,KAAK,UAAU,kBAAkB,CAC/B,SAA2B,EAC3B,SAAiB,EACjB,cAAsB,EACtB,MAAc,EACd,KAA8B;QAE9B,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACzC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC;gBACE,MAAM,EAAE,SAAS,EAAE,cAAc;gBACjC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxE,mBAAmB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC7E,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;gBACxC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;gBACxC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;aACrC,EACD,MAAM,EACN,KAAK,CACN,CAAC;YACF,oFAAoF;YACpF,6FAA6F;YAC7F,8FAA8F;YAC9F,gGAAgG;YAChG,gGAAgG;YAChG,+FAA+F;YAC/F,iGAAiG;YACjG,wFAAwF;YACxF,0FAA0F;YAC1F,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,4FAA4F;oBAC5F,uFAAuF;oBACvF,4FAA4F;oBAC5F,0FAA0F;oBAC1F,wFAAwF;oBACxF,6FAA6F;oBAC7F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAC1E,IAAI,QAAQ,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC3D,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAChH,CAAC;yBAAM,CAAC;wBACN,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;wBAC5D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;wBACtD,MAAM,eAAe,GAAG,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,wBAAwB;wBAC1F,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,eAAe,EAAE,CAAC;4BAC3D,kBAAkB,CAAC,gCAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;4BAC7H,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACnH,CAAC;6BAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BACpC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;wBACnH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACxI,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,6FAA6F;YAC7F,wDAAwD;YACxD,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,oGAAoG;IACpG,6DAA6D;IAC7D,KAAK,UAAU,8BAA8B,CAC3C,SAAiB,EACjB,cAAsB,EACtB,MAAc,EACd,KAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAC7C;YACE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC;YACzE,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,mBAAmB,IAAI,IAAI;SACrG,EACD,MAAM,EACN,KAAK,CACN,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,kEAAkE;QAC1F,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5F,6FAA6F;QAC7F,gGAAgG;QAChG,kGAAkG;QAClG,gGAAgG;QAChG,8FAA8F;QAC9F,iGAAiG;QACjG,kGAAkG;QAClG,MAAM,MAAM,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC7D,kBAAkB,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1G,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;QACD,KAAK,kBAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;OAKG;IACH,SAAS,iCAAiC,CACxC,SAA2B,EAC3B,SAAiB,EACjB,cAAsB;QAEtB,OAAO,SAAS,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,wBAAwB,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,2FAA2F;gBAC3F,KAAK,8BAA8B,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YACD,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACxG,OAAO;YACT,CAAC;YACD,IAAI,KAAK,KAAK,8BAA8B;gBAAE,OAAO;YACrD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,uFAAuF;YACvF,KAAK,kBAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;IACD;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,qBAAqB,CAAC,SAA2B,EAAE,SAAiB,EAAE,cAAsB;QACnG,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC7F,MAAM,oBAAoB,GAAG,mCAAmC,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QACvG,MAAM,iBAAiB,GAAG,iCAAiC,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAClG,OAAO,GAAG,EAAE;YACV,gBAAgB,EAAE,CAAC;YACnB,oBAAoB,EAAE,CAAC;YACvB,iBAAiB,EAAE,CAAC;QACtB,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,yBAAyB;QACzB,kBAAkB;QAClB,wBAAwB;QACxB,qBAAqB;KACtB,CAAC;AACJ,CAAC"}