@cello-protocol/protocol-types 0.0.43 → 0.0.45

package/dist/document-control.js

@@ -0,0 +1,174 @@
+/**
+ * DOD-DOC-TOOLS-1 — the document CONTROL frame: close and kill (§16.5).
+ *
+ * A unilateral end, told to the other party.
+ *
+ * ── WHY THE PEER MUST BE TOLD, AND WHY IT IS BEST-EFFORT ──────────────────────────────────────
+ *
+ * `DocumentLifecycle` already ends a document locally without asking anyone — that is deliberate: a
+ * kill is a safety verb, and a safety verb that needs the counterparty's cooperation is not one. But
+ * a peer who is never told keeps publishing into a document that will never answer. Their updates
+ * are refused at the far end forever, and nothing on their screen explains why. So the notification
+ * is REQUIRED to be attempted and ALLOWED to fail, and the operator is told which happened.
+ *
+ * ── CLOSE AND KILL ARE DIFFERENT FRAMES OF THE SAME SHAPE ─────────────────────────────────────
+ *
+ * `close` is "I am done with this, and I expect you are too" — the document settles when both sides
+ * have said it. `kill` is "this is over now", one-sided and immediate. They travel as one frame with
+ * a verb rather than two types because the receiving side's routing, verification and settle-once
+ * rules are identical, and two decoders for one shape is how the rules drift apart.
+ *
+ * The verb is REFUSED BY VALUE on decode. A third verb from a future build must not be admitted as
+ * one of these two — a `kill` silently read as a `close` would leave a killed document waiting for
+ * a reciprocal close that is never coming.
+ *
+ * ── WHY IT IS SIGNED ──────────────────────────────────────────────────────────────────────────
+ *
+ * A kill frame ends a collaboration. Unsigned, anyone reaching the channel could end any document
+ * between any two parties, and each operator would believe the other walked away. The signature
+ * covers the document id — which commits to both parties, the properties and the nonce — and the
+ * verb, because the whole statement is the claim.
+ */
+import { createHash } from "node:crypto";
+import { encodeCbor, decodeCbor } from "./cbor.js";
+/** Domain tag in slot 0. Distinct from every other document domain. */
+export const DOCUMENT_CONTROL_DOMAIN = "CELLO-DOCUMENT-CONTROL-v1";
+/** The frame version, ON THE WIRE, so skew is DETECTED rather than misread as a bad signature. */
+export const DOCUMENT_CONTROL_VERSION = 1;
+/** Peer-controlled display text bound for an operator's screen. Capped for that reason. */
+export const MAX_CONTROL_REASON_LENGTH = 200;
+/** The two ways a document ends. Closed set — see the header on refusing a third by value. */
+export const DOCUMENT_CONTROL_VERBS = ["close", "kill"];
+const HEX32 = /^[0-9a-f]{64}$/;
+function normalizeReason(reason) {
+    return reason === undefined || reason === "" ? null : reason;
+}
+export function assertDocumentControlConsistent(control) {
+    if (!DOCUMENT_CONTROL_VERBS.includes(control.verb)) {
+        throw new Error(`document_control_verb: expected one of ${DOCUMENT_CONTROL_VERBS.join(", ")}, got "${control.verb}"`);
+    }
+    if (!HEX32.test(control.document_id)) {
+        throw new Error("document_control_document_id: expected 64 lowercase hex characters");
+    }
+    const reason = normalizeReason(control.reason);
+    if (reason !== null && reason.length > MAX_CONTROL_REASON_LENGTH) {
+        throw new Error(`document_control_reason: a reason may be at most ${MAX_CONTROL_REASON_LENGTH} characters, ` +
+            `and this one is ${reason.length}`);
+    }
+}
+/**
+ * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
+ *
+ * An array rather than a map for the reason `cbor.ts` gives — this encoder is deliberately not
+ * deterministic for maps, so a map preimage would make the signature depend on the order the sender
+ * happened to build the object in, and two honest implementations would disagree.
+ */
+export function buildDocumentControlTbs(control, opts = {}) {
+    assertDocumentControlConsistent(control);
+    const preimage = encodeCbor([
+        DOCUMENT_CONTROL_DOMAIN,
+        control.control_version,
+        control.document_id,
+        control.sender_agent_id,
+        // THE VERB IS SIGNED. Unsigned, a captured `close` could be replayed as a `kill` — the peer
+        // would end a collaboration the sender only meant to wind down, with a valid signature on it.
+        control.verb,
+        normalizeReason(control.reason),
+        // BIGINT past 0xffffffff — cbor-x encodes a large JS number as IEEE float64 (`fb`) rather than
+        // uint64 (`1b`), so a canonically-encoding implementation would compute different TBS bytes and
+        // reject a GENUINE frame, surfacing as a signature failure that reads as forgery.
+        typeof control.sent_at_ms === "number" && control.sent_at_ms > 0xffffffff
+            ? BigInt(control.sent_at_ms)
+            : control.sent_at_ms,
+    ]);
+    if (opts.preHash === false)
+        return preimage;
+    return new Uint8Array(createHash("sha256").update(preimage).digest());
+}
+export function encodeDocumentControl(control) {
+    assertDocumentControlConsistent(control);
+    return encodeCbor({
+        type: control.type,
+        control_version: control.control_version,
+        document_id: control.document_id,
+        sender_agent_id: control.sender_agent_id,
+        verb: control.verb,
+        reason: normalizeReason(control.reason),
+        sent_at_ms: control.sent_at_ms,
+        signature: control.signature,
+    });
+}
+function present(map, field) {
+    if (!(field in map)) {
+        throw new Error(`document_control_missing_field: ${field} is mandatory and was not present`);
+    }
+    return map[field];
+}
+/**
+ * Decode and validate. Refuses rather than defaulting on every field.
+ *
+ * The one that matters most is `verb`. Defaulted or coerced, a `kill` read as a `close` leaves a
+ * killed document waiting for a reciprocal close that is never coming — the operator sees a
+ * collaboration that will not settle and no reason anywhere for why.
+ */
+export function decodeDocumentControl(bytes) {
+    const decoded = decodeCbor(bytes);
+    if (typeof decoded !== "object" || decoded === null || Array.isArray(decoded)) {
+        throw new Error("document_control_malformed: not a CBOR map");
+    }
+    const map = decoded;
+    if (present(map, "type") !== "document_control") {
+        throw new Error("document_control_type: expected document_control");
+    }
+    const version = present(map, "control_version");
+    if (typeof version !== "number" || !Number.isInteger(version)) {
+        throw new Error("document_control_version: must be an integer");
+    }
+    if (version !== DOCUMENT_CONTROL_VERSION) {
+        throw new Error(`document_control_version_unsupported: this build speaks version ${DOCUMENT_CONTROL_VERSION} ` +
+            `and the frame declares ${version} — the peer is running a newer CELLO and one of you needs ` +
+            `to upgrade`);
+    }
+    const documentId = present(map, "document_id");
+    if (typeof documentId !== "string" || !HEX32.test(documentId)) {
+        throw new Error("document_control_document_id: expected 64 lowercase hex characters");
+    }
+    const senderAgentId = present(map, "sender_agent_id");
+    if (typeof senderAgentId !== "string" || senderAgentId.length === 0) {
+        throw new Error("document_control_sender: must be a non-empty string");
+    }
+    const verb = present(map, "verb");
+    if (typeof verb !== "string" || !DOCUMENT_CONTROL_VERBS.includes(verb)) {
+        // REFUSED BY VALUE. A third verb from a future build must not be admitted as one of these two.
+        throw new Error(`document_control_verb_unsupported: this build understands ` +
+            `${DOCUMENT_CONTROL_VERBS.join(" and ")}, and the frame says "${String(verb)}" — the peer is ` +
+            `running a newer CELLO and one of you needs to upgrade`);
+    }
+    const reason = present(map, "reason");
+    if (reason !== null && typeof reason !== "string") {
+        throw new Error("document_control_reason: must be a string or null");
+    }
+    const sentAt = present(map, "sent_at_ms");
+    if (typeof sentAt !== "number" || !Number.isFinite(sentAt)) {
+        throw new Error("document_control_sent_at: must be a finite number");
+    }
+    const signature = present(map, "signature");
+    if (!(signature instanceof Uint8Array) || signature.length !== 64) {
+        throw new Error("document_control_signature: expected 64 bytes");
+    }
+    const control = {
+        type: "document_control",
+        control_version: version,
+        document_id: documentId,
+        sender_agent_id: senderAgentId,
+        verb: verb,
+        ...(reason !== null && reason !== "" ? { reason } : {}),
+        sent_at_ms: sentAt,
+        // COPIED out of the decode buffer — cbor-x returns byte strings as VIEWS into the input, so
+        // retaining one pins the whole frame and lets a later reuse mutate a verified signature.
+        signature: Uint8Array.from(signature),
+    };
+    assertDocumentControlConsistent(control);
+    return control;
+}
+//# sourceMappingURL=document-control.js.map

package/dist/document-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-control.js","sourceRoot":"","sources":["../src/document-control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAEnE,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAE7C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,MAAM,CAAU,CAAC;AAGjE,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAgB/B,SAAS,eAAe,CAAC,MAA0B;IACjD,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAwB;IACtE,IAAI,CAAE,sBAA4C,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,0CAA0C,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,IAAI,GAAG,CACrG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,oDAAoD,yBAAyB,eAAe;YAC1F,mBAAmB,MAAM,CAAC,MAAM,EAAE,CACrC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAwB,EACxB,OAA8B,EAAE;IAEhC,+BAA+B,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,uBAAuB;QACvB,OAAO,CAAC,eAAe;QACvB,OAAO,CAAC,WAAW;QACnB,OAAO,CAAC,eAAe;QACvB,4FAA4F;QAC5F,8FAA8F;QAC9F,OAAO,CAAC,IAAI;QACZ,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QAC/B,+FAA+F;QAC/F,gGAAgG;QAChG,kFAAkF;QAClF,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,UAAU;YACvE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,OAAO,CAAC,UAAU;KACvB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,+BAA+B,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,mCAAmC,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAiB;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,kBAAkB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,KAAK,wBAAwB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,mEAAmE,wBAAwB,GAAG;YAC5F,0BAA0B,OAAO,4DAA4D;YAC7F,YAAY,CACf,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAE,sBAA4C,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9F,+FAA+F;QAC/F,MAAM,IAAI,KAAK,CACb,4DAA4D;YAC1D,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,MAAM,CAAC,IAAI,CAAC,kBAAkB;YAC9F,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,kBAAkB;QACxB,eAAe,EAAE,OAAO;QACxB,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE,aAAa;QAC9B,IAAI,EAAE,IAA2B;QACjC,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,UAAU,EAAE,MAAM;QAClB,4FAA4F;QAC5F,yFAAyF;QACzF,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;KACtC,CAAC;IACF,+BAA+B,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/document-proposal-ack.d.ts

@@ -0,0 +1,98 @@
+/**
+ * DOD-DOC-TOOLS-1 — the PROPOSAL ack (§16.3).
+ *
+ * The consent decision, told to the party who asked for it.
+ *
+ * ── WHY THIS EXISTS ───────────────────────────────────────────────────────────────────────────
+ *
+ * Without it the proposer is never told the answer. `cello_doc_list` had to INFER acceptance from
+ * "the peer has published into it", which conflates three different situations — refused, never
+ * received, and accepted-but-untouched — into one absent flag. Two of those want the operator to
+ * act and one does not, and the surface could not tell them apart. A protocol that asks for consent
+ * and never reports it is not asking; it is announcing.
+ *
+ * ── WHY IT IS SEPARATE FROM `document_ack` ────────────────────────────────────────────────────
+ *
+ * `document_ack` settles an ENVELOPE, identified by its hash in the log. A proposal is not in the
+ * envelope log — there is no document yet, which is the whole point — so an ack shaped around an
+ * envelope hash would carry a hash of nothing, and its consumer looks the envelope up. Overloading
+ * the frame would mean one decoder branching on whether the thing it references exists, which is
+ * how a settle-once rule gets applied to the wrong table.
+ *
+ * ── WHY IT IS SIGNED, AND WHAT THE SIGNATURE COVERS ───────────────────────────────────────────
+ *
+ * A refusal ack tells the proposer to stop: no retry, no document. Unsigned, anyone reaching the
+ * channel could make a proposal appear refused by a party who never saw it, and the two operators
+ * would each believe the other had walked away. The signature covers the DOCUMENT ID — which
+ * commits to the proposer, the peer, the properties and the nonce — so an ack cannot be moved to
+ * another proposal, and the decision itself, because the whole statement is the claim.
+ *
+ * ── SETTLE ONCE ───────────────────────────────────────────────────────────────────────────────
+ *
+ * Nothing here orders two acks from one acker, and the same rule `document_ack` states applies: a
+ * second, CONTRADICTING ack is an error with both signatures retained, never an update. A peer that
+ * accepted must not be able to later claim it refused — the proposer would tear down a document the
+ * peer is still editing.
+ */
+/** Domain tag in slot 0. Distinct from the update, ack, proposal and rejection domains. */
+export declare const DOCUMENT_PROPOSAL_ACK_DOMAIN = "CELLO-DOCUMENT-PROPOSAL-ACK-v1";
+/**
+ * The frame version, ON THE WIRE.
+ *
+ * The `-v1` in the domain never travels, so a V2 acker's frame would decode cleanly as V1 and fail
+ * SIGNATURE verification — sending an operator to key management for a version-skew bug. Skew that
+ * is not SAID becomes silent loss or a misattributed error.
+ */
+export declare const DOCUMENT_PROPOSAL_ACK_VERSION = 1;
+/** A refusal reason is peer-controlled text bound for an operator's screen. Capped for that reason. */
+export declare const MAX_PROPOSAL_REFUSAL_REASON_LENGTH = 200;
+export interface DocumentProposalAck {
+    type: "document_proposal_ack";
+    ack_version: number;
+    /** The proposal being answered. Hash of the proposal's own preimage — see `documentIdFromProposal`. */
+    document_id: string;
+    /** Who decided — the party the proposal was addressed to. */
+    acker_agent_id: string;
+    /**
+     * `true` accepted, `false` refused. Both are ANSWERS; there is no third value, because an ack
+     * that does not say which is not a decision.
+     */
+    accepted: boolean;
+    /** Present iff `accepted` is false. The operator's words, or the machine reason that auto-refused. */
+    refusal_reason?: string;
+    decided_at_ms: number;
+    /** Ed25519 (RFC 8032) over `buildDocumentProposalAckTbs`. */
+    signature: Uint8Array;
+}
+/**
+ * The cross-field rules, checked on ENCODE as well as decode.
+ *
+ * On encode too, because a locally-built contradictory ack would otherwise be signed and shipped and
+ * fail only at the remote decode: the acker sees success, the proposer sees an error, and the two
+ * never meet. The rule belongs where the object is built, not only where it is read.
+ */
+export declare function assertDocumentProposalAckConsistent(ack: DocumentProposalAck): void;
+/**
+ * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
+ *
+ * An array rather than a map for the reason `cbor.ts` gives — this encoder is deliberately not
+ * deterministic for maps, so a map preimage would make the signature depend on the order the acker
+ * happened to build the object in, and two honest implementations would disagree.
+ *
+ * `refusal_reason` occupies its slot as `null` when absent, so no field's meaning depends on
+ * whether the one before it was present.
+ */
+export declare function buildDocumentProposalAckTbs(ack: DocumentProposalAck, opts?: {
+    preHash?: boolean;
+}): Uint8Array;
+export declare function encodeDocumentProposalAck(ack: DocumentProposalAck): Uint8Array;
+/**
+ * Decode and validate. Refuses rather than defaulting on every field.
+ *
+ * The one that matters most is `accepted`. Coerced, a truthy string like `"false"` would record a
+ * REFUSED proposal as accepted, and the proposer would keep a document, keep publishing into it,
+ * and keep delivering to a peer who declined — every update refused at the far end for a reason
+ * neither operator can see.
+ */
+export declare function decodeDocumentProposalAck(bytes: Uint8Array): DocumentProposalAck;
+//# sourceMappingURL=document-proposal-ack.d.ts.map

package/dist/document-proposal-ack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-proposal-ack.d.ts","sourceRoot":"","sources":["../src/document-proposal-ack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAKH,2FAA2F;AAC3F,eAAO,MAAM,4BAA4B,mCAAmC,CAAC;AAE7E;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,uGAAuG;AACvG,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAItD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,uGAAuG;IACvG,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB,sGAAsG;IACtG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,SAAS,EAAE,UAAU,CAAC;CACvB;AAOD;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAsBlF;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,mBAAmB,EACxB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,UAAU,CAoBZ;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,mBAAmB,GAAG,UAAU,CAY9E;AAWD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,UAAU,GAAG,mBAAmB,CAgEhF"}

package/dist/document-proposal-ack.js

@@ -0,0 +1,203 @@
+/**
+ * DOD-DOC-TOOLS-1 — the PROPOSAL ack (§16.3).
+ *
+ * The consent decision, told to the party who asked for it.
+ *
+ * ── WHY THIS EXISTS ───────────────────────────────────────────────────────────────────────────
+ *
+ * Without it the proposer is never told the answer. `cello_doc_list` had to INFER acceptance from
+ * "the peer has published into it", which conflates three different situations — refused, never
+ * received, and accepted-but-untouched — into one absent flag. Two of those want the operator to
+ * act and one does not, and the surface could not tell them apart. A protocol that asks for consent
+ * and never reports it is not asking; it is announcing.
+ *
+ * ── WHY IT IS SEPARATE FROM `document_ack` ────────────────────────────────────────────────────
+ *
+ * `document_ack` settles an ENVELOPE, identified by its hash in the log. A proposal is not in the
+ * envelope log — there is no document yet, which is the whole point — so an ack shaped around an
+ * envelope hash would carry a hash of nothing, and its consumer looks the envelope up. Overloading
+ * the frame would mean one decoder branching on whether the thing it references exists, which is
+ * how a settle-once rule gets applied to the wrong table.
+ *
+ * ── WHY IT IS SIGNED, AND WHAT THE SIGNATURE COVERS ───────────────────────────────────────────
+ *
+ * A refusal ack tells the proposer to stop: no retry, no document. Unsigned, anyone reaching the
+ * channel could make a proposal appear refused by a party who never saw it, and the two operators
+ * would each believe the other had walked away. The signature covers the DOCUMENT ID — which
+ * commits to the proposer, the peer, the properties and the nonce — so an ack cannot be moved to
+ * another proposal, and the decision itself, because the whole statement is the claim.
+ *
+ * ── SETTLE ONCE ───────────────────────────────────────────────────────────────────────────────
+ *
+ * Nothing here orders two acks from one acker, and the same rule `document_ack` states applies: a
+ * second, CONTRADICTING ack is an error with both signatures retained, never an update. A peer that
+ * accepted must not be able to later claim it refused — the proposer would tear down a document the
+ * peer is still editing.
+ */
+import { createHash } from "node:crypto";
+import { encodeCbor, decodeCbor } from "./cbor.js";
+/** Domain tag in slot 0. Distinct from the update, ack, proposal and rejection domains. */
+export const DOCUMENT_PROPOSAL_ACK_DOMAIN = "CELLO-DOCUMENT-PROPOSAL-ACK-v1";
+/**
+ * The frame version, ON THE WIRE.
+ *
+ * The `-v1` in the domain never travels, so a V2 acker's frame would decode cleanly as V1 and fail
+ * SIGNATURE verification — sending an operator to key management for a version-skew bug. Skew that
+ * is not SAID becomes silent loss or a misattributed error.
+ */
+export const DOCUMENT_PROPOSAL_ACK_VERSION = 1;
+/** A refusal reason is peer-controlled text bound for an operator's screen. Capped for that reason. */
+export const MAX_PROPOSAL_REFUSAL_REASON_LENGTH = 200;
+const HEX32 = /^[0-9a-f]{64}$/;
+/** Empty string means ABSENT — see `assertDocumentProposalAckConsistent`. */
+function normalizeReason(reason) {
+    return reason === undefined || reason === "" ? null : reason;
+}
+/**
+ * The cross-field rules, checked on ENCODE as well as decode.
+ *
+ * On encode too, because a locally-built contradictory ack would otherwise be signed and shipped and
+ * fail only at the remote decode: the acker sees success, the proposer sees an error, and the two
+ * never meet. The rule belongs where the object is built, not only where it is read.
+ */
+export function assertDocumentProposalAckConsistent(ack) {
+    const reason = normalizeReason(ack.refusal_reason);
+    if (!ack.accepted && reason === null) {
+        // A refusal with no reason leaves the proposer unable to propose anything better. That is the
+        // failure that makes people give up on a protocol rather than adjust to it.
+        throw new Error("document_proposal_ack_reason: a refusal must carry its reason");
+    }
+    if (ack.accepted && reason !== null) {
+        // A contradiction: whichever field a reader trusts, the other is lying to them.
+        throw new Error(`document_proposal_ack_reason: an acceptance must not carry a refusal reason, and this one carries "${reason}"`);
+    }
+    if (reason !== null && reason.length > MAX_PROPOSAL_REFUSAL_REASON_LENGTH) {
+        throw new Error(`document_proposal_ack_reason: a refusal reason may be at most ` +
+            `${MAX_PROPOSAL_REFUSAL_REASON_LENGTH} characters, and this one is ${reason.length}`);
+    }
+    if (!HEX32.test(ack.document_id)) {
+        throw new Error(`document_proposal_ack_document_id: expected 64 lowercase hex characters`);
+    }
+}
+/**
+ * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
+ *
+ * An array rather than a map for the reason `cbor.ts` gives — this encoder is deliberately not
+ * deterministic for maps, so a map preimage would make the signature depend on the order the acker
+ * happened to build the object in, and two honest implementations would disagree.
+ *
+ * `refusal_reason` occupies its slot as `null` when absent, so no field's meaning depends on
+ * whether the one before it was present.
+ */
+export function buildDocumentProposalAckTbs(ack, opts = {}) {
+    assertDocumentProposalAckConsistent(ack);
+    const preimage = encodeCbor([
+        DOCUMENT_PROPOSAL_ACK_DOMAIN,
+        ack.ack_version,
+        ack.document_id,
+        ack.acker_agent_id,
+        ack.accepted,
+        normalizeReason(ack.refusal_reason),
+        // BIGINT past 0xffffffff. cbor-x encodes a JS number that large as an IEEE float64 (`fb`)
+        // rather than a uint64 (`1b`), so an implementation encoding RFC 8949-canonically would compute
+        // different TBS bytes and reject a GENUINE ack — surfacing as a signature failure, which reads
+        // as forgery. A millisecond timestamp is always that large. Four sibling builders carry this
+        // same coercion.
+        typeof ack.decided_at_ms === "number" && ack.decided_at_ms > 0xffffffff
+            ? BigInt(ack.decided_at_ms)
+            : ack.decided_at_ms,
+    ]);
+    if (opts.preHash === false)
+        return preimage;
+    return new Uint8Array(createHash("sha256").update(preimage).digest());
+}
+export function encodeDocumentProposalAck(ack) {
+    assertDocumentProposalAckConsistent(ack);
+    return encodeCbor({
+        type: ack.type,
+        ack_version: ack.ack_version,
+        document_id: ack.document_id,
+        acker_agent_id: ack.acker_agent_id,
+        accepted: ack.accepted,
+        refusal_reason: normalizeReason(ack.refusal_reason),
+        decided_at_ms: ack.decided_at_ms,
+        signature: ack.signature,
+    });
+}
+function present(map, field) {
+    // `in`, not a nullish check. A defaulted field is a claim the acker never made, and carrying
+    // their claim is this frame's entire job.
+    if (!(field in map)) {
+        throw new Error(`document_proposal_ack_missing_field: ${field} is mandatory and was not present`);
+    }
+    return map[field];
+}
+/**
+ * Decode and validate. Refuses rather than defaulting on every field.
+ *
+ * The one that matters most is `accepted`. Coerced, a truthy string like `"false"` would record a
+ * REFUSED proposal as accepted, and the proposer would keep a document, keep publishing into it,
+ * and keep delivering to a peer who declined — every update refused at the far end for a reason
+ * neither operator can see.
+ */
+export function decodeDocumentProposalAck(bytes) {
+    const decoded = decodeCbor(bytes);
+    if (typeof decoded !== "object" || decoded === null || Array.isArray(decoded)) {
+        throw new Error("document_proposal_ack_malformed: not a CBOR map");
+    }
+    const map = decoded;
+    if (present(map, "type") !== "document_proposal_ack") {
+        throw new Error(`document_proposal_ack_type: expected document_proposal_ack`);
+    }
+    const ackVersion = present(map, "ack_version");
+    if (typeof ackVersion !== "number" || !Number.isInteger(ackVersion)) {
+        throw new Error("document_proposal_ack_version: must be an integer");
+    }
+    if (ackVersion !== DOCUMENT_PROPOSAL_ACK_VERSION) {
+        // REFUSED BY VALUE, and said out loud. A frame from a future build would otherwise decode
+        // cleanly and fail signature verification, sending whoever reads the error to key management.
+        throw new Error(`document_proposal_ack_version_unsupported: this build speaks version ` +
+            `${DOCUMENT_PROPOSAL_ACK_VERSION} and the ack declares ${ackVersion} — the peer is running a ` +
+            `newer CELLO and one of you needs to upgrade`);
+    }
+    const documentId = present(map, "document_id");
+    if (typeof documentId !== "string" || !HEX32.test(documentId)) {
+        throw new Error("document_proposal_ack_document_id: expected 64 lowercase hex characters");
+    }
+    const ackerAgentId = present(map, "acker_agent_id");
+    if (typeof ackerAgentId !== "string" || ackerAgentId.length === 0) {
+        throw new Error("document_proposal_ack_acker: must be a non-empty string");
+    }
+    const accepted = present(map, "accepted");
+    if (typeof accepted !== "boolean") {
+        throw new Error("document_proposal_ack_accepted: must be a boolean, never a coerced value");
+    }
+    const refusalReason = present(map, "refusal_reason");
+    if (refusalReason !== null && typeof refusalReason !== "string") {
+        throw new Error("document_proposal_ack_reason: must be a string or null");
+    }
+    const decidedAt = present(map, "decided_at_ms");
+    if (typeof decidedAt !== "number" || !Number.isFinite(decidedAt)) {
+        throw new Error("document_proposal_ack_decided_at: must be a finite number");
+    }
+    const signature = present(map, "signature");
+    if (!(signature instanceof Uint8Array) || signature.length !== 64) {
+        throw new Error("document_proposal_ack_signature: expected 64 bytes");
+    }
+    const ack = {
+        type: "document_proposal_ack",
+        ack_version: ackVersion,
+        document_id: documentId,
+        acker_agent_id: ackerAgentId,
+        accepted,
+        ...(refusalReason !== null && refusalReason !== "" ? { refusal_reason: refusalReason } : {}),
+        decided_at_ms: decidedAt,
+        // COPIED out of the decode buffer. cbor-x returns byte strings as VIEWS into the input, so
+        // retaining one pins the whole frame and lets a later reuse of that buffer mutate a signature
+        // already verified.
+        signature: Uint8Array.from(signature),
+    };
+    assertDocumentProposalAckConsistent(ack);
+    return ack;
+}
+//# sourceMappingURL=document-proposal-ack.js.map

package/dist/document-proposal-ack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-proposal-ack.js","sourceRoot":"","sources":["../src/document-proposal-ack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAgC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,uGAAuG;AACvG,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAEtD,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAqB/B,6EAA6E;AAC7E,SAAS,eAAe,CAAC,MAA0B;IACjD,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC,CAAC,GAAwB;IAC1E,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACrC,8FAA8F;QAC9F,4EAA4E;QAC5E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpC,gFAAgF;QAChF,MAAM,IAAI,KAAK,CACb,sGAAsG,MAAM,GAAG,CAChH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,gEAAgE;YAC9D,GAAG,kCAAkC,gCAAgC,MAAM,CAAC,MAAM,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAwB,EACxB,OAA8B,EAAE;IAEhC,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,4BAA4B;QAC5B,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,cAAc;QAClB,GAAG,CAAC,QAAQ;QACZ,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC;QACnC,0FAA0F;QAC1F,gGAAgG;QAChG,+FAA+F;QAC/F,6FAA6F;QAC7F,iBAAiB;QACjB,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,GAAG,UAAU;YACrE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;YAC3B,CAAC,CAAC,GAAG,CAAC,aAAa;KACtB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAwB;IAChE,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC;QACnD,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,6FAA6F;IAC7F,0CAA0C;IAC1C,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,mCAAmC,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAiB;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,uBAAuB,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,UAAU,KAAK,6BAA6B,EAAE,CAAC;QACjD,0FAA0F;QAC1F,8FAA8F;QAC9F,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,GAAG,6BAA6B,yBAAyB,UAAU,2BAA2B;YAC9F,6CAA6C,CAChD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACpD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACrD,IAAI,aAAa,KAAK,IAAI,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,GAAG,GAAwB;QAC/B,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,YAAY;QAC5B,QAAQ;QACR,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,aAAa,EAAE,SAAS;QACxB,2FAA2F;QAC3F,8FAA8F;QAC9F,oBAAoB;QACpB,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;KACtC,CAAC;IACF,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/document-proposal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-proposal.d.ts","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,kGAAkG;AAClG,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,2FAA2F;AAC3F,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AACjD,sEAAsE;AACtE,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,mGAAmG;IACnG,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,kBAAkB,CAAC;IAC/B;;;;OAIG;IACH,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,yFAAyF;IACzF,KAAK,EAAE,UAAU,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,wBAAwB,EAC7B,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,UAAU,CAiBZ;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAI5E;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAoBtE;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAoB/F;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,UAAU,CAkBhF;AA6BD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,wBAAwB,CA8DlF"}
+{"version":3,"file":"document-proposal.d.ts","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,kGAAkG;AAClG,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,2FAA2F;AAC3F,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AACjD,sEAAsE;AACtE,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,mGAAmG;IACnG,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,kBAAkB,CAAC;IAC/B;;;;OAIG;IACH,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,yFAAyF;IACzF,KAAK,EAAE,UAAU,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,wBAAwB,EAC7B,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,UAAU,CA4BZ;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAI5E;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAoBtE;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAoB/F;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,UAAU,CAkBhF;AA6BD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,wBAAwB,CA8DlF"}

package/dist/document-proposal.js

@@ -66,7 +66,18 @@ export function buildDocumentProposalTbs(env, opts = {}) {
         env.properties.append_only,
         env.starting_content,
         env.nonce,
-        env.proposed_at_ms,
+        // BIGINT past 0xffffffff — the same coercion three sibling builders carry and which
+        // primary-transfer.ts names as a defect it shipped without. cbor-x encodes a JS number that
+        // large as an IEEE float64 (`fb`), not a uint64 (`1b`), so any implementation encoding RFC
+        // 8949-canonically would compute a DIFFERENT document_id from the same proposal — and for this
+        // envelope the id IS the hash, so the two parties would be on two documents.
+        //
+        // Fixed now rather than left as a known wart: M14 is unreleased, nothing is wired, and no
+        // proposal has ever been signed. The frozen vector below is reissued deliberately, which is
+        // exactly the case its own comment describes.
+        typeof env.proposed_at_ms === "number" && env.proposed_at_ms > 0xffffffff
+            ? BigInt(env.proposed_at_ms)
+            : env.proposed_at_ms,
     ]);
     if (opts.preHash === false)
         return preimage;

package/dist/document-proposal.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-proposal.js","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AA2C3C;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAA6B,EAC7B,OAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,wBAAwB;QACxB,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,iBAAiB;QACrB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,UAAU,CAAC,cAAc;QAC7B,GAAG,CAAC,UAAU,CAAC,kBAAkB;QACjC,GAAG,CAAC,UAAU,CAAC,QAAQ;QACvB,GAAG,CAAC,UAAU,CAAC,WAAW;QAC1B,GAAG,CAAC,gBAAgB;QACpB,GAAG,CAAC,KAAK;QACT,GAAG,CAAC,cAAc;KACnB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,KAAK,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;QAC/C,OAAO,CACL,wDAAwD,iBAAiB,kBAAkB;YAC3F,sBAAsB,KAAK,CAAC,cAAc,sDAAsD,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,CACL,2FAA2F;YAC3F,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CACL,kDAAkD,WAAW,gCAAgC;YAC7F,QAAQ,KAAK,CAAC,QAAQ,8CAA8C,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,kBAAiC;IAC9E,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CACL,6FAA6F;YAC7F,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,iDAAiD,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,wBAAwB,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc;YAC7C,kBAAkB,EAAE,GAAG,CAAC,UAAU,CAAC,kBAAkB;YACrD,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ;YACjC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW;SACxC;QACD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,iGAAiG;IACjG,4EAA4E;IAC5E,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,mCAAmC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,kCAAkC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAA4B,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,+FAA+F;IAC/F,0FAA0F;IAC1F,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CACb,sEAAsE,MAAM,CAAC,cAAc,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,GAAG,QAAmC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3D,IAAI,OAAO,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,YAAY,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAChD,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;YACxC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;YAC5B,WAAW,EAAE,UAAU;SACxB;QACD,gBAAgB,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC;QACnF,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1B,cAAc,EAAE,UAAU;QAC1B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;KACnC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"document-proposal.js","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AA2C3C;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAA6B,EAC7B,OAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,wBAAwB;QACxB,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,iBAAiB;QACrB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,UAAU,CAAC,cAAc;QAC7B,GAAG,CAAC,UAAU,CAAC,kBAAkB;QACjC,GAAG,CAAC,UAAU,CAAC,QAAQ;QACvB,GAAG,CAAC,UAAU,CAAC,WAAW;QAC1B,GAAG,CAAC,gBAAgB;QACpB,GAAG,CAAC,KAAK;QACT,oFAAoF;QACpF,4FAA4F;QAC5F,2FAA2F;QAC3F,+FAA+F;QAC/F,6EAA6E;QAC7E,EAAE;QACF,0FAA0F;QAC1F,4FAA4F;QAC5F,8CAA8C;QAC9C,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,UAAU;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;YAC5B,CAAC,CAAC,GAAG,CAAC,cAAc;KACvB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,KAAK,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;QAC/C,OAAO,CACL,wDAAwD,iBAAiB,kBAAkB;YAC3F,sBAAsB,KAAK,CAAC,cAAc,sDAAsD,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,CACL,2FAA2F;YAC3F,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CACL,kDAAkD,WAAW,gCAAgC;YAC7F,QAAQ,KAAK,CAAC,QAAQ,8CAA8C,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,kBAAiC;IAC9E,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CACL,6FAA6F;YAC7F,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,iDAAiD,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,wBAAwB,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc;YAC7C,kBAAkB,EAAE,GAAG,CAAC,UAAU,CAAC,kBAAkB;YACrD,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ;YACjC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW;SACxC;QACD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,iGAAiG;IACjG,4EAA4E;IAC5E,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,mCAAmC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,kCAAkC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAA4B,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,+FAA+F;IAC/F,0FAA0F;IAC1F,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CACb,sEAAsE,MAAM,CAAC,cAAc,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,GAAG,QAAmC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3D,IAAI,OAAO,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,YAAY,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAChD,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;YACxC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;YAC5B,WAAW,EAAE,UAAU;SACxB;QACD,gBAAgB,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC;QACnF,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1B,cAAc,EAAE,UAAU;QAC1B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;KACnC,CAAC;AACJ,CAAC"}