@cello-protocol/daemon 0.0.53 → 0.0.55

package/dist/db-identity-store.d.ts

@@ -1,20 +1,16 @@
 /**
- * CELLO-M7-PERSIST-002 — DB-backed identity store (the `agents` table).
+ * DB-backed identity store (the `agents` table).
  *
  * Every piece of an agent's persisted identity — the K_local Ed25519 seed, the ML-DSA keypair, the
  * FROST signing share, the registration record, and the agent↔user link — lives as ONE row of the
- * `agents` table in the SQLCipher-encrypted daemon DB. This replaces the per-agent plaintext flat
- * files (`agents/<name>/key`, `frost-share.json`, `ml-dsa-keypair.json`, `registration-state.json`,
- * `agent-user-link.json`).
+ * `agents` table in the SQLCipher-encrypted daemon DB. There is no flat-file home for any of it.
  *
- * `DbRegistrationPersistence` implements the SAME `DaemonRegistrationPersistence` interface the
- * daemon's RegistrationManager and the ceremony/seal signer-reconstruction already consume — so the
- * call sites change only their construction (a DB handle + agent name instead of an `agentDir`), not
- * their behaviour. Writes are AWAITED single-row UPSERTs (SI-003: a register-success implies a
- * durably committed row — fixing the old fire-and-forget at registration-manager.ts:229).
+ * `DbRegistrationPersistence` implements the `DaemonRegistrationPersistence` interface the daemon's
+ * RegistrationManager and the ceremony/seal signer-reconstruction consume. Writes are AWAITED
+ * single-row UPSERTs — never fire-and-forget — so a register-success implies a durably committed row.
  *
  * The K_local seed and FROST/ML-DSA secrets are stored as BLOB columns inside the encrypted DB; they
- * are NEVER written to a flat file and NEVER logged (SI-001). The row is the only home.
+ * are NEVER written to a flat file and NEVER logged. The row is the only home.
  */
 import type { DaemonDatabase } from "./sqlcipher-db.js";
 import type { Logger } from "./types.js";
@@ -22,14 +18,14 @@ import type { DaemonRegistrationPersistence, RegistrationStateRecord, MlDsaKeypa
 /**
  * Idempotent schema for the identity store. Called once at daemon init AND defensively by each
  * DbRegistrationPersistence constructor, so the store works whether or not the composition root has
- * run its own ensure. Creates the table on a fresh DB, re-keys a pre-REMOVE-001 table to the
- * stable-agent_id shape once, and (always) ensures the active-name partial unique index.
+ * run its own ensure. Creates the table on a fresh DB, re-keys a legacy table to the stable agent_id
+ * shape once, and (always) ensures the active-name partial unique index.
  */
 export declare function ensureIdentitySchema(db: DaemonDatabase): void;
 /**
- * Row CRUD for the K_local identity — used by the agent-creation path (AC-004) and the DB-backed
- * agent loader (AC-007). Separate from the registration-persistence seam because it owns the
- * seed/lifecycle, not the registration material.
+ * Row CRUD for the K_local identity — used by the agent-creation path and the DB-backed agent loader.
+ * Separate from the registration-persistence seam because it owns the seed/lifecycle, not the
+ * registration material.
  */
 export interface AgentRow {
     agentId: string;
@@ -42,7 +38,7 @@ export declare class DbIdentityStore {
     #private;
     constructor(db: DaemonDatabase, logger: Logger);
     /**
-     * CELLO-M8-TRUST-001: store a received + verified trust signal. Idempotent on signal_hash (the same
+     * Store a received + verified trust signal. Idempotent on signal_hash (the same
      * signal delivered/pulled twice stores once). `payload` is the recovered plaintext JSON.
      */
     storeTrustSignal(args: {
@@ -51,7 +47,7 @@ export declare class DbIdentityStore {
         signalKind: string;
         payload: Uint8Array;
     }): void;
-    /** Read a stored trust signal back by its hash anchor (TRUST-001 — proves local storage). */
+    /** Read a stored trust signal back by its hash anchor. */
     getTrustSignal(signalHash: string): {
         signalKind: string;
         payload: Uint8Array;
@@ -59,23 +55,23 @@ export declare class DbIdentityStore {
     /** True if an ACTIVE (non-retired) agent row with this name exists — the create-collision check. */
     hasActiveAgent(agentName: string): boolean;
     /**
-     * Create a new agent row holding a fresh K_local seed (AC-004), keyed by a freshly-minted stable
-     * agent_id (REMOVE-001 DOD-REMOVE-1; guardrail #1). Explicit only — callers generate the seed
-     * (crypto) and pass it in. Throws if an ACTIVE agent already holds the name (no silent overwrite); a
-     * RETIRED row with the same name does NOT block — the name has been freed. Returns the new agent_id.
+     * Create a new agent row holding a fresh K_local seed, keyed by a freshly-minted stable agent_id.
+     * Explicit only — callers generate the seed (crypto) and pass it in. Throws if an ACTIVE agent
+     * already holds the name (no silent overwrite); a RETIRED row with the same name does NOT block —
+     * the name has been freed. Returns the new agent_id.
      */
     createAgent(agentName: string, kLocalSeed: Uint8Array, kLocalPubkeyHex: string): string;
     /**
-     * Retire (REMOVE-001 DOD-REMOVE-1): flip the ACTIVE row for `agentName` to state='retired' WITHOUT
-     * deleting the row, its keys, or its history (SI-002 — accountability survives). One-way. The name
-     * is freed (the partial unique index excludes retired rows). Returns the retired agent_id, or null if
-     * there was no active agent with that name (fail-loud at the caller).
+     * Retire: flip the ACTIVE row for `agentName` to state='retired' WITHOUT deleting the row, its keys,
+     * or its history — accountability must survive a removal. One-way. The name is freed (the partial
+     * unique index excludes retired rows). Returns the retired agent_id, or null if there was no active
+     * agent with that name (fail-loud at the caller).
      */
     retireAgent(agentName: string): string | null;
     /**
-     * Read the row to act on for a removal / directory-revocation re-push (REMOVE-001 DOD-REMOVE-2): the
-     * ACTIVE row for the name if one exists (a fresh removal), else the MOST-RECENTLY-retired row (a
-     * re-push of an already-retired agent whose directory revocation did not land — DB-001). Includes the
+     * Read the row to act on for a removal / directory-revocation re-push: the ACTIVE row for the name if
+     * one exists (a fresh removal), else the MOST-RECENTLY-retired row (a re-push of an already-retired
+     * agent whose directory revocation did not land). Includes the
      * K_local seed (to re-sign the revocation) and the DIRECTORY-known reg_agent_id (what the directory is
      * asked to revoke; null if the agent was never registered). Returns null if no row with this name
      * exists at all.
@@ -89,20 +85,20 @@ export declare class DbIdentityStore {
     /**
      * Enumerate ACTIVE agents (agent_id + name + seed + pubkey + state) for the daemon's startup loader.
      * Retired rows are EXCLUDED — they must never be resurrected into the runtime — but remain in the DB
-     * and are readable directly for accountability (SI-002).
+     * and are readable directly for accountability.
      */
     listAgents(): AgentRow[];
     /**
-     * MONIKER-1 AC2/AC3: set (or clear, via null) the outbound-name override on the ACTIVE row.
+     * Set (or clear, via null) the outbound-name override on the ACTIVE row.
      * Returns false when no active agent holds the name (fail-loud at the caller — never a silent
      * no-op success). THROWS on an invalid moniker: callers validate first for a friendly error;
      * this is the backstop that makes "an invalid value can never be stored" true at the lowest layer.
      */
     setMoniker(agentName: string, moniker: string | null): boolean;
-    /** MONIKER-1: the stored override for the ACTIVE agent, or null (no override / no such agent). */
+    /** The stored override for the ACTIVE agent, or null (no override / no such agent). */
     getMoniker(agentName: string): string | null;
     /**
-     * MONIKER-1 AC1: the agent's outbound name — the override when set, else the agent name itself.
+     * The agent's outbound name — the override when set, else the agent name itself.
      * There is no separate "self-moniker" concept; the default is valid by construction (the agent
      * name already satisfies MONIKER_RE at creation). Null only when no active agent holds the name.
      */
@@ -111,8 +107,8 @@ export declare class DbIdentityStore {
 /**
  * DB-backed `DaemonRegistrationPersistence`. Scoped to a single agent's row. All persist operations
  * are single-row UPSERTs that update the named agent's row; a register-success therefore implies the
- * material is durably committed (SI-003). A persist against a non-existent agent throws — the row is
- * created by the agent-creation path (AC-004) before registration runs.
+ * material is durably committed. A persist against a non-existent agent throws — the row is created by
+ * the agent-creation path before registration runs.
  */
 export declare class DbRegistrationPersistence implements DaemonRegistrationPersistence {
     #private;
@@ -141,7 +137,7 @@ export declare class DbRegistrationPersistence implements DaemonRegistrationPers
         commitmentsCbor: Uint8Array;
         verifyingSharesCbor: Uint8Array;
         dkgMethod: "trusted_dealer" | "network_dkg";
-        /** M8B quorum: the directory nodeIds (Q) the DKG ran among; a restored signer targets these. */
+        /** The directory nodeIds (Q) the DKG ran among; a restored signer targets these. */
         directoryNodeIds?: string[];
     }): Promise<void>;
     persistAgentUserLink(opts: {

package/dist/db-identity-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db-identity-store.d.ts","sourceRoot":"","sources":["../src/db-identity-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EACV,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,+BAA+B,CAAC;AAmHvC;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAsB7D;AAuBD;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,eAAe;;gBAId,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;IAM9C;;;OAGG;IACH,gBAAgB,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI;IASrH,6FAA6F;IAC7F,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI;IAOtF,oGAAoG;IACpG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAO1C;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM;IAiBvF;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAY7C;;;;;;;OAOG;IACH,qBAAqB,CACnB,SAAS,EAAE,MAAM,GAChB;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAgBpG;;;;OAIG;IACH,UAAU,IAAI,QAAQ,EAAE;IAexB;;;;;OAKG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAU9D,kGAAkG;IAClG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAO5C;;;;OAIG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAOlD;AAED;;;;;GAKG;AACH,qBAAa,yBAA0B,YAAW,6BAA6B;;gBAKjE,IAAI,EAAE;QAAE,EAAE,EAAE,cAAc,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAsBrE,mBAAmB,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5F,wBAAwB,CAAC,IAAI,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWX,oBAAoB,CAAC,IAAI,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,UAAU,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,UAAU,CAAC;QAC5B,mBAAmB,EAAE,UAAU,CAAC;QAChC,SAAS,EAAE,gBAAgB,GAAG,aAAa,CAAC;QAC5C,gGAAgG;QAChG,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BX,oBAAoB,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtG,qBAAqB,IAAI,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAYhE,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUtD,uBAAuB,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IA6B9D,iBAAiB,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;CAS/D"}
+{"version":3,"file":"db-identity-store.d.ts","sourceRoot":"","sources":["../src/db-identity-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EACV,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,+BAA+B,CAAC;AAmHvC;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAsB7D;AAuBD;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,eAAe;;gBAId,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;IAM9C;;;OAGG;IACH,gBAAgB,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI;IASrH,0DAA0D;IAC1D,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI;IAOtF,oGAAoG;IACpG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAO1C;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM;IAiBvF;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAY7C;;;;;;;OAOG;IACH,qBAAqB,CACnB,SAAS,EAAE,MAAM,GAChB;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAgBpG;;;;OAIG;IACH,UAAU,IAAI,QAAQ,EAAE;IAexB;;;;;OAKG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAU9D,uFAAuF;IACvF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAO5C;;;;OAIG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAOlD;AAED;;;;;GAKG;AACH,qBAAa,yBAA0B,YAAW,6BAA6B;;gBAKjE,IAAI,EAAE;QAAE,EAAE,EAAE,cAAc,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAsBrE,mBAAmB,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5F,wBAAwB,CAAC,IAAI,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWX,oBAAoB,CAAC,IAAI,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,UAAU,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,UAAU,CAAC;QAC5B,mBAAmB,EAAE,UAAU,CAAC;QAChC,SAAS,EAAE,gBAAgB,GAAG,aAAa,CAAC;QAC5C,oFAAoF;QACpF,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BX,oBAAoB,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtG,qBAAqB,IAAI,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAYhE,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAUtD,uBAAuB,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IA6B9D,iBAAiB,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;CAS/D"}

package/dist/db-identity-store.js

@@ -1,45 +1,41 @@
 /**
- * CELLO-M7-PERSIST-002 — DB-backed identity store (the `agents` table).
+ * DB-backed identity store (the `agents` table).
  *
  * Every piece of an agent's persisted identity — the K_local Ed25519 seed, the ML-DSA keypair, the
  * FROST signing share, the registration record, and the agent↔user link — lives as ONE row of the
- * `agents` table in the SQLCipher-encrypted daemon DB. This replaces the per-agent plaintext flat
- * files (`agents/<name>/key`, `frost-share.json`, `ml-dsa-keypair.json`, `registration-state.json`,
- * `agent-user-link.json`).
+ * `agents` table in the SQLCipher-encrypted daemon DB. There is no flat-file home for any of it.
  *
- * `DbRegistrationPersistence` implements the SAME `DaemonRegistrationPersistence` interface the
- * daemon's RegistrationManager and the ceremony/seal signer-reconstruction already consume — so the
- * call sites change only their construction (a DB handle + agent name instead of an `agentDir`), not
- * their behaviour. Writes are AWAITED single-row UPSERTs (SI-003: a register-success implies a
- * durably committed row — fixing the old fire-and-forget at registration-manager.ts:229).
+ * `DbRegistrationPersistence` implements the `DaemonRegistrationPersistence` interface the daemon's
+ * RegistrationManager and the ceremony/seal signer-reconstruction consume. Writes are AWAITED
+ * single-row UPSERTs — never fire-and-forget — so a register-success implies a durably committed row.
  *
  * The K_local seed and FROST/ML-DSA secrets are stored as BLOB columns inside the encrypted DB; they
- * are NEVER written to a flat file and NEVER logged (SI-001). The row is the only home.
+ * are NEVER written to a flat file and NEVER logged. The row is the only home.
  */
 import { randomUUID } from "node:crypto";
 import { MONIKER_RE, validateMoniker } from "@cello-protocol/protocol-types";
 const ML_DSA_ALGORITHM = "ML-DSA-44";
 /**
- * The `agents` schema (CELLO-M7-REMOVE-001 DOD-REMOVE-1). The store is keyed by a STABLE `agent_id`,
- * not by `agent_name` — guardrail #1: durable identity hangs off agent_id; the human name and the
- * pubkey are mutable ATTRIBUTES. A partial unique index makes `agent_name` unique only among
- * NON-retired rows, so removal (state='retired') frees the name for reuse while the retired identity
- * survives for accountability (SI-002). `state`: 'created' | 'registered' | 'retired'.
+ * The `agents` schema. The store is keyed by a STABLE `agent_id`, never by `agent_name` — durable
+ * identity hangs off agent_id; the human name and the pubkey are mutable ATTRIBUTES. A partial unique
+ * index makes `agent_name` unique only among NON-retired rows, so removal (state='retired') frees the
+ * name for reuse while the retired identity survives for accountability.
+ * `state`: 'created' | 'registered' | 'retired'.
  */
 const CREATE_AGENTS_SQL = `
   CREATE TABLE IF NOT EXISTS agents (
     agent_id               TEXT PRIMARY KEY,
     agent_name             TEXT NOT NULL,
-    -- K_local Ed25519 identity (PERSIST-002: seed moves from agents/<name>/key into this BLOB).
+    -- K_local Ed25519 identity: the seed lives ONLY in this BLOB, never on the filesystem.
     k_local_seed           BLOB NOT NULL,
     k_local_pubkey         TEXT NOT NULL,
-    -- lifecycle: 'created' (K_local exists, not yet registered) | 'registered' | 'retired' (REMOVE-001).
+    -- lifecycle: 'created' (K_local exists, not yet registered) | 'registered' | 'retired'.
     state                  TEXT NOT NULL DEFAULT 'created',
-    -- ML-DSA keypair (was ml-dsa-keypair.json).
+    -- ML-DSA keypair.
     ml_dsa_pubkey          TEXT,
     ml_dsa_secret          BLOB,
     ml_dsa_algorithm       TEXT,
-    -- FROST signing share (was frost-share.json).
+    -- FROST signing share.
     frost_epoch_id         TEXT,
     frost_primary_pubkey   TEXT,
     frost_identifier       TEXT,
@@ -49,19 +45,19 @@ const CREATE_AGENTS_SQL = `
     frost_commitments      BLOB,
     frost_verifying_shares BLOB,
     frost_dkg_method       TEXT,
-    -- M8B quorum: JSON array of the directory nodeIds (Q) the DKG ran among, so a restored signer
-    -- targets the actual share-holders (not the full live roster). NULL for pre-quorum agents.
+    -- JSON array of the directory nodeIds (Q) the DKG ran among, so a restored signer targets the
+    -- actual share-holders, not the full live roster. NULL for agents registered before quorum DKG.
     frost_directory_node_ids TEXT,
-    -- MONIKER-1: optional outbound-name override. The outbound name defaults to agent_name; this
-    -- column only holds an explicit override. Local-only — never sent to the directory (AC4).
+    -- Optional outbound-name override. The outbound name defaults to agent_name; this column only
+    -- holds an explicit override. Local-only — never sent to the directory.
     moniker                TEXT,
-    -- registration record (was registration-state.json).
+    -- registration record.
     reg_agent_id           TEXT,
     reg_primary_pubkey     TEXT,
     reg_ml_dsa_pubkey      TEXT,
     reg_registered_at      INTEGER,
     reg_status             TEXT,
-    -- agent↔user link captured at registration (was agent-user-link.json).
+    -- agent↔user link captured at registration.
     link_agent_id          TEXT,
     link_pre_auth_token    TEXT,
     link_linked_at         INTEGER,
@@ -71,8 +67,8 @@ const CREATE_AGENTS_SQL = `
 `;
 // A name is unique only among NON-retired agents — the DB-level backstop for "free the name on removal".
 const CREATE_ACTIVE_NAME_INDEX_SQL = "CREATE UNIQUE INDEX IF NOT EXISTS agents_active_name ON agents(agent_name) WHERE state != 'retired'";
-// The columns of the PRE-REMOVE-001 `agents` table (agent_name PK, no agent_id), in order. Used to
-// copy rows verbatim during the one-time re-key rebuild.
+// The columns of the legacy `agents` table (agent_name PK, no agent_id), in order. Used to copy rows
+// verbatim during the one-time re-key rebuild.
 const PRE_REKEY_COLUMNS = [
     "agent_name",
     "k_local_seed",
@@ -102,11 +98,11 @@ const PRE_REKEY_COLUMNS = [
     "updated_at",
 ];
 /**
- * One-time re-key of a PRE-REMOVE-001 `agents` table (PRIMARY KEY agent_name, no agent_id) to the new
- * stable-agent_id shape. Rebuilds the table, backfilling a fresh agent_id per existing row. Runs at
- * most once — `ensureIdentitySchema` guards it behind a column-presence check — and is wrapped in a
- * transaction so a crash mid-rebuild leaves the original table intact. Works on node:sqlite (in-memory
- * test handles) and SQLCipher alike.
+ * One-time re-key of a legacy `agents` table (PRIMARY KEY agent_name, no agent_id) to the stable
+ * agent_id shape. Rebuilds the table, backfilling a fresh agent_id per existing row. Runs at most once
+ * — `ensureIdentitySchema` guards it behind a column-presence check — and is wrapped in a transaction
+ * so a crash mid-rebuild leaves the original table intact. Works on node:sqlite (in-memory test
+ * handles) and SQLCipher alike.
  */
 function rebuildAgentsToAgentIdPk(db) {
     const cols = PRE_REKEY_COLUMNS.join(", ");
@@ -130,8 +126,8 @@ function rebuildAgentsToAgentIdPk(db) {
 /**
  * Idempotent schema for the identity store. Called once at daemon init AND defensively by each
  * DbRegistrationPersistence constructor, so the store works whether or not the composition root has
- * run its own ensure. Creates the table on a fresh DB, re-keys a pre-REMOVE-001 table to the
- * stable-agent_id shape once, and (always) ensures the active-name partial unique index.
+ * run its own ensure. Creates the table on a fresh DB, re-keys a legacy table to the stable agent_id
+ * shape once, and (always) ensures the active-name partial unique index.
  */
 export function ensureIdentitySchema(db) {
     const cols = db.prepare("PRAGMA table_info(agents)").all();
@@ -139,7 +135,7 @@ export function ensureIdentitySchema(db) {
         db.exec(CREATE_AGENTS_SQL);
     }
     else if (!cols.some((c) => c.name === "agent_id")) {
-        // A pre-REMOVE-001 table exists (agent_name PK). Re-key it once to the stable-agent_id shape.
+        // A legacy table exists (agent_name PK). Re-key it once to the stable agent_id shape.
         rebuildAgentsToAgentIdPk(db);
     }
     else {
@@ -147,11 +143,11 @@ export function ensureIdentitySchema(db) {
         // CREATE_AGENTS_SQL). SQLite has no ADD COLUMN IF NOT EXISTS, so each is PRAGMA-guarded — and
         // each guard is an INDEPENDENT `if`: a table missing several must receive every ALTER.
         if (!cols.some((c) => c.name === "frost_directory_node_ids")) {
-            // M8B quorum. Nullable → pre-quorum agents keep the full-roster fallback; no data touched.
+            // Nullable → agents predating quorum DKG keep the full-roster fallback; no data touched.
             db.exec("ALTER TABLE agents ADD COLUMN frost_directory_node_ids TEXT");
         }
         if (!cols.some((c) => c.name === "moniker")) {
-            // MONIKER-1: outbound-name override. Nullable → existing agents keep the agent-name default.
+            // Outbound-name override. Nullable → existing agents keep the agent-name default.
             db.exec("ALTER TABLE agents ADD COLUMN moniker TEXT");
         }
     }
@@ -159,7 +155,7 @@ export function ensureIdentitySchema(db) {
     db.exec(CREATE_TRUST_SIGNALS_SQL);
 }
 /**
- * CELLO-M8-TRUST-001: received trust signals — the daemon's local copy of a signal it pulled from the
+ * Received trust signals — the daemon's local copy of a signal it pulled from the
  * directory pickup queue, opened (k_local), and HASH-VERIFIED against the directory anchor. Keyed by
  * signal_hash (the verification anchor) → storing the same signal twice is idempotent. The payload is
  * the recovered plaintext JSON — the ONLY plaintext copy of the signal (the server side holds only
@@ -185,7 +181,7 @@ export class DbIdentityStore {
         ensureIdentitySchema(db);
     }
     /**
-     * CELLO-M8-TRUST-001: store a received + verified trust signal. Idempotent on signal_hash (the same
+     * Store a received + verified trust signal. Idempotent on signal_hash (the same
      * signal delivered/pulled twice stores once). `payload` is the recovered plaintext JSON.
      */
     storeTrustSignal(args) {
@@ -194,7 +190,7 @@ export class DbIdentityStore {
          VALUES (?, ?, ?, ?, ?)`)
             .run(args.signalHash, args.agentId, args.signalKind, toBuf(args.payload), Date.now());
     }
-    /** Read a stored trust signal back by its hash anchor (TRUST-001 — proves local storage). */
+    /** Read a stored trust signal back by its hash anchor. */
     getTrustSignal(signalHash) {
         const row = this.#db
             .prepare("SELECT signal_kind, payload FROM trust_signals WHERE signal_hash = ?")
@@ -209,10 +205,10 @@ export class DbIdentityStore {
         return row !== undefined;
     }
     /**
-     * Create a new agent row holding a fresh K_local seed (AC-004), keyed by a freshly-minted stable
-     * agent_id (REMOVE-001 DOD-REMOVE-1; guardrail #1). Explicit only — callers generate the seed
-     * (crypto) and pass it in. Throws if an ACTIVE agent already holds the name (no silent overwrite); a
-     * RETIRED row with the same name does NOT block — the name has been freed. Returns the new agent_id.
+     * Create a new agent row holding a fresh K_local seed, keyed by a freshly-minted stable agent_id.
+     * Explicit only — callers generate the seed (crypto) and pass it in. Throws if an ACTIVE agent
+     * already holds the name (no silent overwrite); a RETIRED row with the same name does NOT block —
+     * the name has been freed. Returns the new agent_id.
      */
     createAgent(agentName, kLocalSeed, kLocalPubkeyHex) {
         if (this.hasActiveAgent(agentName)) {
@@ -224,15 +220,15 @@ export class DbIdentityStore {
             .prepare(`INSERT INTO agents (agent_id, agent_name, k_local_seed, k_local_pubkey, state, created_at, updated_at)
          VALUES (?, ?, ?, ?, 'created', ?, ?)`)
             .run(agentId, agentName, toBuf(kLocalSeed), kLocalPubkeyHex, now, now);
-        // SI-001: the seed is NEVER logged — only the agent name, the agent_id, and the PUBLIC key.
+        // The seed is NEVER logged — only the agent name, the agent_id, and the PUBLIC key.
         this.#logger.info("persist.identity.created", { agentName, agentId, agentPubkey: kLocalPubkeyHex });
         return agentId;
     }
     /**
-     * Retire (REMOVE-001 DOD-REMOVE-1): flip the ACTIVE row for `agentName` to state='retired' WITHOUT
-     * deleting the row, its keys, or its history (SI-002 — accountability survives). One-way. The name
-     * is freed (the partial unique index excludes retired rows). Returns the retired agent_id, or null if
-     * there was no active agent with that name (fail-loud at the caller).
+     * Retire: flip the ACTIVE row for `agentName` to state='retired' WITHOUT deleting the row, its keys,
+     * or its history — accountability must survive a removal. One-way. The name is freed (the partial
+     * unique index excludes retired rows). Returns the retired agent_id, or null if there was no active
+     * agent with that name (fail-loud at the caller).
      */
     retireAgent(agentName) {
         const active = this.#db
@@ -248,9 +244,9 @@ export class DbIdentityStore {
         return active.agent_id;
     }
     /**
-     * Read the row to act on for a removal / directory-revocation re-push (REMOVE-001 DOD-REMOVE-2): the
-     * ACTIVE row for the name if one exists (a fresh removal), else the MOST-RECENTLY-retired row (a
-     * re-push of an already-retired agent whose directory revocation did not land — DB-001). Includes the
+     * Read the row to act on for a removal / directory-revocation re-push: the ACTIVE row for the name if
+     * one exists (a fresh removal), else the MOST-RECENTLY-retired row (a re-push of an already-retired
+     * agent whose directory revocation did not land). Includes the
      * K_local seed (to re-sign the revocation) and the DIRECTORY-known reg_agent_id (what the directory is
      * asked to revoke; null if the agent was never registered). Returns null if no row with this name
      * exists at all.
@@ -272,7 +268,7 @@ export class DbIdentityStore {
     /**
      * Enumerate ACTIVE agents (agent_id + name + seed + pubkey + state) for the daemon's startup loader.
      * Retired rows are EXCLUDED — they must never be resurrected into the runtime — but remain in the DB
-     * and are readable directly for accountability (SI-002).
+     * and are readable directly for accountability.
      */
     listAgents() {
         const rows = this.#db
@@ -287,7 +283,7 @@ export class DbIdentityStore {
         }));
     }
     /**
-     * MONIKER-1 AC2/AC3: set (or clear, via null) the outbound-name override on the ACTIVE row.
+     * Set (or clear, via null) the outbound-name override on the ACTIVE row.
      * Returns false when no active agent holds the name (fail-loud at the caller — never a silent
      * no-op success). THROWS on an invalid moniker: callers validate first for a friendly error;
      * this is the backstop that makes "an invalid value can never be stored" true at the lowest layer.
@@ -301,7 +297,7 @@ export class DbIdentityStore {
             .run(moniker, Date.now(), agentName);
         return Number(res.changes) > 0;
     }
-    /** MONIKER-1: the stored override for the ACTIVE agent, or null (no override / no such agent). */
+    /** The stored override for the ACTIVE agent, or null (no override / no such agent). */
     getMoniker(agentName) {
         const row = this.#db
             .prepare("SELECT moniker FROM agents WHERE agent_name = ? AND state != 'retired'")
@@ -309,7 +305,7 @@ export class DbIdentityStore {
         return row?.moniker ?? null;
     }
     /**
-     * MONIKER-1 AC1: the agent's outbound name — the override when set, else the agent name itself.
+     * The agent's outbound name — the override when set, else the agent name itself.
      * There is no separate "self-moniker" concept; the default is valid by construction (the agent
      * name already satisfies MONIKER_RE at creation). Null only when no active agent holds the name.
      */
@@ -325,8 +321,8 @@ export class DbIdentityStore {
 /**
  * DB-backed `DaemonRegistrationPersistence`. Scoped to a single agent's row. All persist operations
  * are single-row UPSERTs that update the named agent's row; a register-success therefore implies the
- * material is durably committed (SI-003). A persist against a non-existent agent throws — the row is
- * created by the agent-creation path (AC-004) before registration runs.
+ * material is durably committed. A persist against a non-existent agent throws — the row is created by
+ * the agent-creation path before registration runs.
  */
 export class DbRegistrationPersistence {
     #db;
@@ -340,7 +336,7 @@ export class DbRegistrationPersistence {
     }
     #updateRow(setClause, params) {
         const now = Date.now();
-        // REMOVE-001: target the ACTIVE row for this name. After name reuse a retired row and a new active
+        // Target the ACTIVE row for this name. After name reuse a retired row and a new active
         // row can share a name; the partial unique index guarantees at most one active row, so this is
         // unambiguous. A retired identity's registration material is never mutated.
         const res = this.#db
@@ -348,12 +344,12 @@ export class DbRegistrationPersistence {
             .run(...params, now, this.#agentName);
         if (Number(res.changes) === 0) {
             // The agent row must exist (created by the agent-creation path before registration). A missing
-            // row is a real fault, not something to paper over — fail loud so registration fails (AC-012).
+            // row is a real fault, not something to paper over — FAIL LOUD so registration fails.
             throw new Error(`identity_persist_failed: no agent row for '${this.#agentName}'`);
         }
     }
     async persistMlDsaKeypair(opts) {
-        // SI-001: secretKeyBlob is written to the encrypted DB only — never logged.
+        // secretKeyBlob is written to the encrypted DB only — never logged.
         this.#updateRow("ml_dsa_pubkey = ?, ml_dsa_secret = ?, ml_dsa_algorithm = ?", [
             opts.mlDsaPubkey,
             toBuf(opts.secretKeyBlob),
@@ -369,7 +365,7 @@ export class DbRegistrationPersistence {
         });
     }
     async persistFrostKeyShare(opts) {
-        // SI-001: signingShare is written to the encrypted DB only — never logged.
+        // signingShare is written to the encrypted DB only — never logged.
         this.#updateRow(`frost_epoch_id = ?, frost_primary_pubkey = ?, frost_identifier = ?, frost_signing_share = ?,
        frost_threshold = ?, frost_participants = ?, frost_commitments = ?, frost_verifying_shares = ?,
        frost_dkg_method = ?, frost_directory_node_ids = ?`, [
@@ -392,7 +388,7 @@ export class DbRegistrationPersistence {
         });
     }
     async persistAgentUserLink(opts) {
-        // SI: the preAuthToken is a bearer ticket — written to the encrypted DB only, never logged.
+        // The preAuthToken is a bearer ticket — written to the encrypted DB only, never logged.
         this.#updateRow("link_agent_id = ?, link_pre_auth_token = ?, link_linked_at = ?", [
             opts.agentId,
             opts.preAuthToken,
@@ -402,7 +398,7 @@ export class DbRegistrationPersistence {
     }
     // ─── Load (restart rehydration) ──────────────────────────────────────────────
     #row() {
-        // REMOVE-001: load the ACTIVE row for this name (never a retired tombstone).
+        // Load the ACTIVE row for this name (never a retired tombstone).
         return this.#db.prepare("SELECT * FROM agents WHERE agent_name = ? AND state != 'retired'").get(this.#agentName);
     }
     async loadRegistrationState() {
@@ -431,8 +427,8 @@ export class DbRegistrationPersistence {
         const r = this.#row();
         if (!r || r["frost_signing_share"] == null)
             return null;
-        // M8B quorum: the DKG's quorum Q (nodeIds). NULL for pre-quorum agents → undefined → seal falls
-        // back to the full roster. Defensive parse: malformed data must not break share loading.
+        // The DKG's quorum Q (nodeIds). NULL → undefined → the seal falls back to the full roster.
+        // Defensive parse: malformed data must not break share loading.
         let directoryNodeIds;
         const rawIds = r["frost_directory_node_ids"];
         if (rawIds != null) {

package/dist/db-identity-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"db-identity-store.js","sourceRoot":"","sources":["../src/db-identity-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAW7E,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CzB,CAAC;AAEF,yGAAyG;AACzG,MAAM,4BAA4B,GAChC,qGAAqG,CAAC;AAExG,mGAAmG;AACnG,yDAAyD;AACzD,MAAM,iBAAiB,GAAG;IACxB,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,OAAO;IACP,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,sBAAsB;IACtB,kBAAkB;IAClB,qBAAqB;IACrB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,qBAAqB;IACrB,gBAAgB;IAChB,YAAY;IACZ,YAAY;CACJ,CAAC;AAEX;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,EAAkB;IAClD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACzD,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,EAAE,CAAC,IAAI,CACL,iCAAiC,IAAI;4CACC,IAAI,wBAAwB,CACnE,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACvC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;QACnG,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAkB;IACrD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAA6B,CAAC;IACtF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QACpD,8FAA8F;QAC9F,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,6FAA6F;QAC7F,8FAA8F;QAC9F,uFAAuF;QACvF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,EAAE,CAAC;YAC7D,2FAA2F;YAC3F,EAAE,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5C,6FAA6F;YAC7F,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACtC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAG;;;;;;;;CAQhC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAc,EAAE,CACzC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAe3G,MAAM,OAAO,eAAe;IACjB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,IAA6F;QAC5G,IAAI,CAAC,GAAG;aACL,OAAO,CACN;gCACwB,CACzB;aACA,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,6FAA6F;IAC7F,cAAc,CAAC,UAAkB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,CAAC,UAAU,CAA0D,CAAC;QAC5E,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,CAAC;IAED,oGAAoG;IACpG,cAAc,CAAC,SAAiB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,yEAAyE,CAAC;aAClF,GAAG,CAAC,SAAS,CAAgC,CAAC;QACjD,OAAO,GAAG,KAAK,SAAS,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB,EAAE,UAAsB,EAAE,eAAuB;QAC5E,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,kBAAkB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;aACL,OAAO,CACN;8CACsC,CACvC;aACA,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACzE,4FAA4F;QAC5F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QACpG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;aACpB,OAAO,CAAC,yEAAyE,CAAC;aAClF,GAAG,CAAC,SAAS,CAAqC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,qBAAqB,CACnB,SAAiB;QAEjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG;aACf,OAAO,CACN;qEAC6D,CAC9D;aACA,GAAG,CAAC,SAAS,CAAwG,CAAC;QACzH,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,QAAQ;YACxB,UAAU,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;YAClC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN,+HAA+H,CAChI;aACA,GAAG,EAAmH,CAAC;QAC1H,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnC,YAAY,EAAE,CAAC,CAAC,cAAc;YAC9B,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,SAAiB,EAAE,OAAsB;QAClD,IAAI,OAAO,KAAK,IAAI,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,iBAAiB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,2FAA2F,CAAC;aACpG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,kGAAkG;IAClG,UAAU,CAAC,SAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,SAAS,CAA2C,CAAC;QAC5D,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,oFAAoF,CAAC;aAC7F,GAAG,CAAC,SAAS,CAA+D,CAAC;QAChF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IAC3B,GAAG,CAAiB;IACpB,UAAU,CAAS;IACnB,OAAO,CAAS;IAEzB,YAAY,IAA+D;QACzE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,MAAiB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,mGAAmG;QACnG,+FAA+F;QAC/F,4EAA4E;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,qBAAqB,SAAS,8DAA8D,CAAC;aACrG,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,+FAA+F;YAC/F,+FAA+F;YAC/F,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAwD;QAChF,4EAA4E;QAC5E,IAAI,CAAC,UAAU,CAAC,4DAA4D,EAAE;YAC5E,IAAI,CAAC,WAAW;YAChB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;YACzB,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,IAK9B;QACC,IAAI,CAAC,UAAU,CACb,qIAAqI,EACrI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CACxE,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAChD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAY1B;QACC,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CACb;;0DAEoD,EACpD;YACE,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,UAAU;YACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;YACxB,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,YAAY;YACjB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAC/B,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;SACrE,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE;YACtD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAAiE;QAC1F,4FAA4F;QAC5F,IAAI,CAAC,UAAU,CAAC,gEAAgE,EAAE;YAChF,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,YAAY;YACjB,IAAI,CAAC,QAAQ;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,gFAAgF;IAEhF,IAAI;QACF,6EAA6E;QAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAElG,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAClC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC9C,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC3C,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACvC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC1C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACxD,gGAAgG;QAChG,yFAAyF;QACzF,IAAI,gBAAsC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAY,CAAC;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACxE,gBAAgB,GAAG,MAAkB,CAAC;gBACxC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACpC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAChD,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACzC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC/C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACvC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC7C,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAChD,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACzD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACxC,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACnC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC9C,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;SACtC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"db-identity-store.js","sourceRoot":"","sources":["../src/db-identity-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAW7E,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CzB,CAAC;AAEF,yGAAyG;AACzG,MAAM,4BAA4B,GAChC,qGAAqG,CAAC;AAExG,qGAAqG;AACrG,+CAA+C;AAC/C,MAAM,iBAAiB,GAAG;IACxB,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,OAAO;IACP,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,sBAAsB;IACtB,kBAAkB;IAClB,qBAAqB;IACrB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,qBAAqB;IACrB,gBAAgB;IAChB,YAAY;IACZ,YAAY;CACJ,CAAC;AAEX;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,EAAkB;IAClD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACzD,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,EAAE,CAAC,IAAI,CACL,iCAAiC,IAAI;4CACC,IAAI,wBAAwB,CACnE,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACvC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;QACnG,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAkB;IACrD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAA6B,CAAC;IACtF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QACpD,sFAAsF;QACtF,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,6FAA6F;QAC7F,8FAA8F;QAC9F,uFAAuF;QACvF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,EAAE,CAAC;YAC7D,yFAAyF;YACzF,EAAE,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5C,kFAAkF;YAClF,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACtC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAG;;;;;;;;CAQhC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAc,EAAE,CACzC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAe3G,MAAM,OAAO,eAAe;IACjB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,IAA6F;QAC5G,IAAI,CAAC,GAAG;aACL,OAAO,CACN;gCACwB,CACzB;aACA,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,0DAA0D;IAC1D,cAAc,CAAC,UAAkB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,CAAC,UAAU,CAA0D,CAAC;QAC5E,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,CAAC;IAED,oGAAoG;IACpG,cAAc,CAAC,SAAiB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,yEAAyE,CAAC;aAClF,GAAG,CAAC,SAAS,CAAgC,CAAC;QACjD,OAAO,GAAG,KAAK,SAAS,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB,EAAE,UAAsB,EAAE,eAAuB;QAC5E,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,kBAAkB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;aACL,OAAO,CACN;8CACsC,CACvC;aACA,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACzE,oFAAoF;QACpF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QACpG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;aACpB,OAAO,CAAC,yEAAyE,CAAC;aAClF,GAAG,CAAC,SAAS,CAAqC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,qBAAqB,CACnB,SAAiB;QAEjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG;aACf,OAAO,CACN;qEAC6D,CAC9D;aACA,GAAG,CAAC,SAAS,CAAwG,CAAC;QACzH,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,QAAQ;YACxB,UAAU,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;YAClC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN,+HAA+H,CAChI;aACA,GAAG,EAAmH,CAAC;QAC1H,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnC,YAAY,EAAE,CAAC,CAAC,cAAc;YAC9B,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,SAAiB,EAAE,OAAsB;QAClD,IAAI,OAAO,KAAK,IAAI,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,iBAAiB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,2FAA2F,CAAC;aACpG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,uFAAuF;IACvF,UAAU,CAAC,SAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,SAAS,CAA2C,CAAC;QAC5D,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,oFAAoF,CAAC;aAC7F,GAAG,CAAC,SAAS,CAA+D,CAAC;QAChF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IAC3B,GAAG,CAAiB;IACpB,UAAU,CAAS;IACnB,OAAO,CAAS;IAEzB,YAAY,IAA+D;QACzE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,MAAiB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,uFAAuF;QACvF,+FAA+F;QAC/F,4EAA4E;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,qBAAqB,SAAS,8DAA8D,CAAC;aACrG,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,+FAA+F;YAC/F,sFAAsF;YACtF,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAwD;QAChF,oEAAoE;QACpE,IAAI,CAAC,UAAU,CAAC,4DAA4D,EAAE;YAC5E,IAAI,CAAC,WAAW;YAChB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;YACzB,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,IAK9B;QACC,IAAI,CAAC,UAAU,CACb,qIAAqI,EACrI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CACxE,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAChD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAY1B;QACC,mEAAmE;QACnE,IAAI,CAAC,UAAU,CACb;;0DAEoD,EACpD;YACE,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,UAAU;YACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;YACxB,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,YAAY;YACjB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAC/B,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;SACrE,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE;YACtD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAAiE;QAC1F,wFAAwF;QACxF,IAAI,CAAC,UAAU,CAAC,gEAAgE,EAAE;YAChF,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,YAAY;YACjB,IAAI,CAAC,QAAQ;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,gFAAgF;IAEhF,IAAI;QACF,iEAAiE;QACjE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAElG,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAClC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC9C,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC3C,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACvC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC1C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACxD,2FAA2F;QAC3F,gEAAgE;QAChE,IAAI,gBAAsC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAY,CAAC;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACxE,gBAAgB,GAAG,MAAkB,CAAC;gBACxC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACpC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAChD,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACzC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC/C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACvC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC7C,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAChD,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACzD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACxC,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACnC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC9C,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;SACtC,CAAC;IACJ,CAAC;CACF"}