@collectorcrypt/vrf-client 0.1.0

package/dist/operations.js

@@ -0,0 +1,417 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeAuthority = decodeAuthority;
+exports.decodeProofCommit = decodeProofCommit;
+exports.decodeProofCommitWithBeta = decodeProofCommitWithBeta;
+exports.fetchAuthority = fetchAuthority;
+exports.fetchProofCommit = fetchProofCommit;
+exports.buildInitAuthorityIx = buildInitAuthorityIx;
+exports.buildFreezeAuthorityIx = buildFreezeAuthorityIx;
+exports.buildRevokeAuthorityIx = buildRevokeAuthorityIx;
+exports.buildCommitProofIx = buildCommitProofIx;
+exports.buildCommitProofEventIx = buildCommitProofEventIx;
+exports.fetchProofCommitEvents = fetchProofCommitEvents;
+exports.buildCommitProofWithBetaIx = buildCommitProofWithBetaIx;
+exports.fetchProofCommitWithBeta = fetchProofCommitWithBeta;
+exports.asTx = asTx;
+const anchor = __importStar(require("@coral-xyz/anchor"));
+const anchor_1 = require("@coral-xyz/anchor");
+const web3_js_1 = require("@solana/web3.js");
+const stateless_js_1 = require("@lightprotocol/stateless.js");
+const ecvrf_1 = require("@collectorcrypt/ecvrf");
+const addresses_1 = require("./addresses");
+const constants_1 = require("./constants");
+const light_1 = require("./light");
+/**
+ * Decode a VrfAuthority record from a fetched compressed-account row.
+ * Wraps the Anchor coder so callers can stay in terms of typed fields.
+ */
+function decodeAuthority(program, dataBytes) {
+    // Anchor 0.31 normalizes IDL type names to camelCase on `program.idl`.
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return program.coder.types.decode("vrfAuthority", Buffer.from(dataBytes));
+}
+function decodeProofCommit(program, dataBytes) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return program.coder.types.decode("vrfProofCommit", Buffer.from(dataBytes));
+}
+function decodeProofCommitWithBeta(program, dataBytes) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return program.coder.types.decode("vrfProofCommitWithBeta", Buffer.from(dataBytes));
+}
+/**
+ * Fetch a VrfAuthority compressed account by (owner, label). Returns null
+ * if no such authority exists.
+ */
+async function fetchAuthority(program, rpc, owner, label) {
+    (0, light_1.forceLightV2)();
+    const labelBytes = typeof label === "string" ? (0, addresses_1.encodeLabel)(label) : label;
+    const authorityAddress = (0, addresses_1.deriveAuthorityAddress)(owner, labelBytes, program.programId);
+    const account = await rpc.getCompressedAccount((0, stateless_js_1.bn)(authorityAddress.toBytes()));
+    if (!account)
+        return null;
+    const decoded = decodeAuthority(program, Uint8Array.from(account.data.data));
+    return {
+        authorityAddress,
+        account,
+        decoded,
+        onChainAuthority: {
+            authorityAddress,
+            owner: decoded.owner,
+            pk: Uint8Array.from(decoded.pk),
+            suite: decoded.suite,
+            frozen: decoded.frozen,
+            revoked: decoded.revoked,
+            label: Uint8Array.from(decoded.label),
+        },
+    };
+}
+/**
+ * Fetch a VrfProofCommit by (authority, memo). Returns null if no such
+ * commit exists yet.
+ */
+async function fetchProofCommit(program, rpc, authority, memo) {
+    (0, light_1.forceLightV2)();
+    const mh = (0, addresses_1.memoHash)(memo);
+    const commitAddress = (0, addresses_1.deriveProofCommitAddress)(authority, mh, program.programId);
+    const account = await rpc.getCompressedAccount((0, stateless_js_1.bn)(commitAddress.toBytes()));
+    if (!account)
+        return null;
+    const decoded = decodeProofCommit(program, Uint8Array.from(account.data.data));
+    return {
+        commitAddress,
+        account,
+        decoded,
+        onChainCommit: {
+            authority: decoded.authority,
+            memoHash: Uint8Array.from(decoded.memoHash),
+            proofHash: Uint8Array.from(decoded.proofHash),
+            alphaHash: Uint8Array.from(decoded.alphaHash),
+            committedSlot: BigInt(decoded.committedSlot.toString()),
+        },
+    };
+}
+/**
+ * Build the init_authority instruction. Caller is responsible for adding it
+ * to a transaction with the owner as signer and submitting it.
+ */
+async function buildInitAuthorityIx(program, rpc, input) {
+    if (input.pk.length !== 32) {
+        throw new Error("pk must be 32 bytes");
+    }
+    if (input.suite !== constants_1.SUITE_EDWARDS25519_SHA512_TAI) {
+        throw new Error("only ECVRF-EDWARDS25519-SHA512-TAI suite 0x03 is supported");
+    }
+    const labelBytes = typeof input.label === "string" ? (0, addresses_1.encodeLabel)(input.label) : input.label;
+    if (labelBytes.length !== 32) {
+        throw new Error("label must encode to exactly 32 bytes");
+    }
+    const authorityAddress = (0, addresses_1.deriveAuthorityAddress)(input.owner, labelBytes, program.programId);
+    const ctx = await (0, light_1.buildCreateContext)(rpc, program.programId, authorityAddress);
+    const ix = await program.methods
+        // @ts-ignore: Anchor IDL types are dynamic at this layer
+        .initAuthority(ctx.proof, ctx.packedAddressTreeInfo, ctx.outputStateTreeIndex, Array.from(input.pk), input.suite, Array.from(labelBytes))
+        .accounts({
+        owner: input.owner,
+        systemProgram: anchor.web3.SystemProgram.programId,
+    })
+        .remainingAccounts(ctx.remainingAccountMetas)
+        .instruction();
+    return { ix, authorityAddress };
+}
+async function buildFreezeAuthorityIx(program, rpc, input) {
+    const auth = await fetchAuthority(program, rpc, input.owner, input.label);
+    if (!auth)
+        throw new Error("authority not found");
+    const ctx = await (0, light_1.buildMutateContext)(rpc, program.programId, auth.account);
+    const ix = await program.methods
+        // @ts-ignore: Anchor IDL types are dynamic at this layer
+        .freezeAuthority(ctx.proof, auth.decoded, ctx.accountMeta)
+        .accounts({ owner: input.owner })
+        .remainingAccounts(ctx.remainingAccountMetas)
+        .instruction();
+    return ix;
+}
+async function buildRevokeAuthorityIx(program, rpc, input) {
+    const auth = await fetchAuthority(program, rpc, input.owner, input.label);
+    if (!auth)
+        throw new Error("authority not found");
+    const ctx = await (0, light_1.buildMutateContext)(rpc, program.programId, auth.account);
+    const ix = await program.methods
+        // @ts-ignore: Anchor IDL types are dynamic at this layer
+        .revokeAuthority(ctx.proof, auth.decoded, ctx.accountMeta)
+        .accounts({ owner: input.owner })
+        .remainingAccounts(ctx.remainingAccountMetas)
+        .instruction();
+    return ix;
+}
+function assertAuthorityCanCommit(auth) {
+    if (!auth)
+        throw new Error("authority not found");
+    if (auth.decoded.suite !== constants_1.SUITE_EDWARDS25519_SHA512_TAI) {
+        throw new Error("authority suite is not supported");
+    }
+    if (!auth.decoded.frozen)
+        throw new Error("authority is not frozen");
+    if (auth.decoded.revoked)
+        throw new Error("authority is revoked");
+}
+function assertProofMatchesAuthority(auth, input) {
+    const pk = Uint8Array.from(auth.decoded.pk);
+    if (!(0, ecvrf_1.verifyVRF)(pk, input.alpha, input.proof)) {
+        throw new Error("proof does not verify against authority pk and alpha");
+    }
+}
+/**
+ * Build the commit_proof instruction. The authority is looked up via
+ * (owner, label) — must already exist on chain. memo/alpha/proof are hashed
+ * via SHA-256 and stored in the new VrfProofCommit PDA.
+ */
+async function buildCommitProofIx(program, rpc, input) {
+    if (input.proof.length !== 80) {
+        throw new Error("proof must be 80 bytes (RFC 9381 Ed25519 ECVRF proof)");
+    }
+    const auth = await fetchAuthority(program, rpc, input.owner, input.label);
+    assertAuthorityCanCommit(auth);
+    assertProofMatchesAuthority(auth, input);
+    const mh = (0, addresses_1.memoHash)(input.memo);
+    const commitAddress = (0, addresses_1.deriveProofCommitAddress)(auth.authorityAddress, mh, program.programId);
+    // One unified context: a single validity proof covers both the authority
+    // input (read-only) and the new commit address, and both pack against the
+    // same remainingAccounts list.
+    const ctx = await (0, light_1.buildCommitProofContext)(rpc, program.programId, auth.account, commitAddress);
+    const ix = await program.methods
+        // @ts-ignore: Anchor IDL types are dynamic at this layer
+        .commitProof(ctx.proof, ctx.authorityReadOnlyMeta, auth.decoded, ctx.packedAddressTreeInfo, ctx.outputStateTreeIndex, Array.from(mh), Array.from((0, addresses_1.proofHash)(input.proof)), Array.from((0, addresses_1.alphaHash)(input.alpha)))
+        .accounts({ owner: input.owner })
+        .remainingAccounts(ctx.remainingAccountMetas)
+        .instruction();
+    return { ix, commitAddress };
+}
+/**
+ * Build the commit_proof_event instruction (event mode). Proves the authority
+ * read-only, requires it to be frozen and unrevoked, and emits a Solana log
+ * event rather than writing a compressed PDA.
+ *
+ * The trade-off is that the chain doesn't enforce one-commit-per-memo;
+ * verifiers must scan for duplicate `memo_hash` events and pick the one where
+ * ECVRF math passes.
+ */
+async function buildCommitProofEventIx(program, rpc, input) {
+    if (input.proof.length !== 80) {
+        throw new Error("proof must be 80 bytes (RFC 9381 Ed25519 ECVRF proof)");
+    }
+    const labelBytes = typeof input.label === "string" ? (0, addresses_1.encodeLabel)(input.label) : input.label;
+    if (labelBytes.length !== 32) {
+        throw new Error("label must encode to exactly 32 bytes");
+    }
+    const auth = await fetchAuthority(program, rpc, input.owner, labelBytes);
+    assertAuthorityCanCommit(auth);
+    assertProofMatchesAuthority(auth, input);
+    const ctx = await (0, light_1.buildReadOnlyAuthorityContext)(rpc, program.programId, auth.account);
+    const mh = (0, addresses_1.memoHash)(input.memo);
+    const ix = await program.methods
+        // @ts-ignore: Anchor IDL types are dynamic at this layer
+        .commitProofEvent(ctx.proof, ctx.authorityReadOnlyMeta, auth.decoded, Array.from(labelBytes), Array.from(mh), Array.from((0, addresses_1.proofHash)(input.proof)), Array.from((0, addresses_1.alphaHash)(input.alpha)))
+        .accounts({ owner: input.owner })
+        .remainingAccounts(ctx.remainingAccountMetas)
+        .instruction();
+    return ix;
+}
+/**
+ * Fetch all `VrfProofCommitted` events emitted for a given `(owner, label,
+ * memo)` tuple, ordered oldest → newest. Returns an empty array if none
+ * exist.
+ *
+ * IMPORTANT: this can return MORE than one row. The on-chain program does
+ * not enforce uniqueness in event mode. A safe verifier:
+ *
+ *   1. Collects all matches for the requested memo.
+ *   2. Runs `verifyAuthorityCommitEndToEnd` against each candidate proof.
+ *   3. Accepts the unique row where the ECVRF math passes.
+ *
+ * Because ECVRF proofs are deterministic for a fixed (pk, alpha), at most
+ * one of the candidates can have a valid `proof_hash`. The presence of extra
+ * events is detectable noise, not a successful forgery — but a naive verifier
+ * that picks "the latest event" without running ECVRF can be misled, which is
+ * the only soundness gap relative to the PDA path.
+ *
+ * `connection` and `programId` are passed in explicitly so log scanning works
+ * against a plain Solana RPC. Fetching compressed authority state still needs
+ * a Photon-capable RPC unless the verifier already has that state.
+ *
+ * `limit` caps how many recent signatures to scan (default 1000); pagination
+ * happens automatically via `getSignaturesForAddress`'s `before` cursor.
+ */
+async function fetchProofCommitEvents(program, connection, owner, label, memo, options = {}) {
+    const labelBytes = typeof label === "string" ? (0, addresses_1.encodeLabel)(label) : label;
+    const targetMemoHash = (0, addresses_1.memoHash)(memo);
+    const parser = new anchor_1.EventParser(program.programId, new anchor_1.BorshCoder(program.idl));
+    const out = [];
+    const limit = options.limit ?? 1000;
+    let before;
+    let scanned = 0;
+    while (scanned < limit) {
+        const pageLimit = Math.min(1000, limit - scanned);
+        const sigInfos = await connection.getSignaturesForAddress(owner, {
+            limit: pageLimit,
+            before,
+        });
+        if (sigInfos.length === 0)
+            break;
+        scanned += sigInfos.length;
+        before = sigInfos[sigInfos.length - 1].signature;
+        for (const sigInfo of sigInfos) {
+            if (sigInfo.err)
+                continue;
+            const tx = await connection.getTransaction(sigInfo.signature, {
+                commitment: "confirmed",
+                maxSupportedTransactionVersion: 0,
+            });
+            if (!tx?.meta?.logMessages)
+                continue;
+            for (const ev of parser.parseLogs(tx.meta.logMessages, false)) {
+                if (ev.name !== "VrfProofCommitted" && ev.name !== "vrfProofCommitted")
+                    continue;
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                const data = ev.data;
+                const eventOwner = data.owner;
+                const eventLabel = Uint8Array.from(data.label);
+                const eventMemoHash = Uint8Array.from(data.memoHash);
+                if (!eventOwner.equals(owner))
+                    continue;
+                if (!bytesEqual(eventLabel, labelBytes))
+                    continue;
+                if (!bytesEqual(eventMemoHash, targetMemoHash))
+                    continue;
+                const authority = (0, addresses_1.deriveAuthorityAddress)(eventOwner, eventLabel, program.programId);
+                out.push({
+                    owner: eventOwner,
+                    label: eventLabel,
+                    txSignature: sigInfo.signature,
+                    slot: tx.slot,
+                    onChainCommit: {
+                        authority,
+                        memoHash: eventMemoHash,
+                        proofHash: Uint8Array.from(data.proofHash),
+                        alphaHash: Uint8Array.from(data.alphaHash),
+                        committedSlot: BigInt(data.committedSlot.toString()),
+                    },
+                });
+            }
+        }
+    }
+    // RPC returns newest first — reverse so oldest comes first.
+    out.reverse();
+    return out;
+}
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++)
+        if (a[i] !== b[i])
+            return false;
+    return true;
+}
+/**
+ * Build the commit_proof_with_beta instruction (PDA mode + on-chain beta).
+ * Like buildCommitProofIx, but additionally stores the 64-byte ECVRF beta
+ * (output of vrfProofToHash) in the new compressed PDA so other Solana
+ * programs can read it via a Light SDK CPI.
+ *
+ * Stored at the same seed prefix as regular commits, so one authority+memo can
+ * only use one registry mode.
+ */
+async function buildCommitProofWithBetaIx(program, rpc, input) {
+    if (input.proof.length !== 80) {
+        throw new Error("proof must be 80 bytes (RFC 9381 Ed25519 ECVRF proof)");
+    }
+    if (input.beta.length !== 64) {
+        throw new Error("beta must be 64 bytes (SHA-512 output of vrfProofToHash)");
+    }
+    const auth = await fetchAuthority(program, rpc, input.owner, input.label);
+    assertAuthorityCanCommit(auth);
+    assertProofMatchesAuthority(auth, input);
+    if (!bytesEqual(input.beta, (0, ecvrf_1.vrfProofToHash)(input.proof))) {
+        throw new Error("beta does not match vrfProofToHash(proof)");
+    }
+    const mh = (0, addresses_1.memoHash)(input.memo);
+    const commitAddress = (0, addresses_1.deriveProofCommitWithBetaAddress)(auth.authorityAddress, mh, program.programId);
+    const ctx = await (0, light_1.buildCommitProofContext)(rpc, program.programId, auth.account, commitAddress);
+    // Split beta into two 32-byte halves to match the on-chain field layout.
+    const betaLo = input.beta.slice(0, 32);
+    const betaHi = input.beta.slice(32, 64);
+    const ix = await program.methods
+        // @ts-ignore: Anchor IDL types are dynamic at this layer
+        .commitProofWithBeta(ctx.proof, ctx.authorityReadOnlyMeta, auth.decoded, ctx.packedAddressTreeInfo, ctx.outputStateTreeIndex, Array.from(mh), Array.from((0, addresses_1.proofHash)(input.proof)), Array.from((0, addresses_1.alphaHash)(input.alpha)), Array.from(betaLo), Array.from(betaHi))
+        .accounts({ owner: input.owner })
+        .remainingAccounts(ctx.remainingAccountMetas)
+        .instruction();
+    return { ix, commitAddress };
+}
+/**
+ * Fetch a VrfProofCommitWithBeta by (authority, memo). Returns null if no such
+ * commit exists yet. Reassembles the 64-byte beta from its two on-chain halves.
+ */
+async function fetchProofCommitWithBeta(program, rpc, authority, memo) {
+    const mh = (0, addresses_1.memoHash)(memo);
+    const commitAddress = (0, addresses_1.deriveProofCommitWithBetaAddress)(authority, mh, program.programId);
+    const account = await rpc.getCompressedAccount((0, stateless_js_1.bn)(commitAddress.toBytes()));
+    if (!account)
+        return null;
+    const decoded = decodeProofCommitWithBeta(program, Uint8Array.from(account.data.data));
+    const beta = new Uint8Array(64);
+    beta.set(Uint8Array.from(decoded.betaLo), 0);
+    beta.set(Uint8Array.from(decoded.betaHi), 32);
+    return {
+        commitAddress,
+        account,
+        decoded,
+        beta,
+        onChainCommit: {
+            authority: decoded.authority,
+            memoHash: Uint8Array.from(decoded.memoHash),
+            proofHash: Uint8Array.from(decoded.proofHash),
+            alphaHash: Uint8Array.from(decoded.alphaHash),
+            committedSlot: BigInt(decoded.committedSlot.toString()),
+        },
+    };
+}
+/** Convenience: wrap a single ix into a Transaction. */
+function asTx(ix) {
+    return new web3_js_1.Transaction().add(ix);
+}
+//# sourceMappingURL=operations.js.map

package/dist/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../src/operations.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,0CAeC;AAED,8CAYC;AAED,8DAiBC;AAMD,wCAqCC;AAMD,4CAoCC;AAaD,oDAgDC;AAOD,wDAiBC;AAED,wDAiBC;AAsCD,gDA+CC;AAWD,0DAwCC;AA0CD,wDA4EC;AAiBD,gEAwDC;AAMD,4DAyCC;AAGD,oBAEC;AA9oBD,0DAA4C;AAC5C,8CAAqE;AACrE,6CAKyB;AACzB,8DAIqC;AACrC,iDAAkE;AAElE,2CAQqB;AACrB,2CAA4D;AAC5D,mCAMiB;AAGjB;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAAgB,EAAE,SAAqB;IACrE,uEAAuE;IACvE,8DAA8D;IAC9D,OAAQ,OAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CACxC,cAAc,EACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CASvB,CAAC;AACJ,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAgB,EAAE,SAAqB;IACvE,8DAA8D;IAC9D,OAAQ,OAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CACxC,gBAAgB,EAChB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAOvB,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAAgB,EAChB,SAAqB;IAErB,8DAA8D;IAC9D,OAAQ,OAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CACxC,wBAAwB,EACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CASvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,GAAQ,EACR,KAAgB,EAChB,KAA0B;IAO1B,IAAA,oBAAY,GAAE,CAAC;IACf,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1E,MAAM,gBAAgB,GAAG,IAAA,kCAAsB,EAC7C,KAAK,EACL,UAAU,EACV,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAC5C,IAAA,iBAAE,EAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAC/B,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,gBAAgB;QAChB,OAAO;QACP,OAAO;QACP,gBAAgB,EAAE;YAChB,gBAAgB;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;SACtC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,GAAQ,EACR,SAAoB,EACpB,IAAyB;IAOzB,IAAA,oBAAY,GAAE,CAAC;IACf,MAAM,EAAE,GAAG,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,aAAa,GAAG,IAAA,oCAAwB,EAC5C,SAAS,EACT,EAAE,EACF,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,IAAA,iBAAE,EAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,iBAAiB,CAC/B,OAAO,EACP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,OAAO;QACL,aAAa;QACb,OAAO;QACP,OAAO;QACP,aAAa,EAAE;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3C,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;SACxD;KACF,CAAC;AACJ,CAAC;AASD;;;GAGG;AACI,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,GAAQ,EACR,KAAyB;IAEzB,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,yCAA6B,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAC3E,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAA,kCAAsB,EAC7C,KAAK,CAAC,KAAK,EACX,UAAU,EACV,OAAO,CAAC,SAAS,CAClB,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAkB,EAClC,GAAG,EACH,OAAO,CAAC,SAAS,EACjB,gBAAgB,CACjB,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO;QAC9B,yDAAyD;SACxD,aAAa,CACZ,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,qBAAqB,EACzB,GAAG,CAAC,oBAAoB,EACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EACpB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CACvB;SACA,QAAQ,CAAC;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS;KAC1C,CAAC;SACV,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC;SAC5C,WAAW,EAAE,CAAC;IAEjB,OAAO,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC;AAClC,CAAC;AAOM,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,GAAQ,EACR,KAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAkB,EAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAE3E,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO;QAC9B,yDAAyD;SACxD,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC;SACzD,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAW,CAAC;SACzC,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC;SAC5C,WAAW,EAAE,CAAC;IACjB,OAAO,EAAE,CAAC;AACZ,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,GAAQ,EACR,KAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAkB,EAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAE3E,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO;QAC9B,yDAAyD;SACxD,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC;SACzD,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAW,CAAC;SACzC,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC;SAC5C,WAAW,EAAE,CAAC;IACjB,OAAO,EAAE,CAAC;AACZ,CAAC;AAYD,SAAS,wBAAwB,CAC/B,IAA6B;IAE7B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,yCAA6B,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAsB,EACtB,KAAuB;IAEvB,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAA,iBAAS,EAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,GAAQ,EACR,KAAuB;IAEvB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1E,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEzC,MAAM,EAAE,GAAG,IAAA,oBAAU,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,IAAA,oCAAwB,EAC5C,IAAI,CAAC,gBAAgB,EACrB,EAAE,EACF,OAAO,CAAC,SAAS,CAClB,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAuB,EACvC,GAAG,EACH,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,OAAO,EACZ,aAAa,CACd,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO;QAC9B,yDAAyD;SACxD,WAAW,CACV,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,qBAAqB,EACzB,IAAI,CAAC,OAAO,EACZ,GAAG,CAAC,qBAAqB,EACzB,GAAG,CAAC,oBAAoB,EACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EACd,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACpC,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACrC;SACA,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAW,CAAC;SACzC,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC;SAC5C,WAAW,EAAE,CAAC;IAEjB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,uBAAuB,CAC3C,OAAgB,EAChB,GAAQ,EACR,KAAuB;IAEvB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAC3E,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACzE,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEzC,MAAM,GAAG,GAAG,MAAM,IAAA,qCAA6B,EAC7C,GAAG,EACH,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,OAAO,CACb,CAAC;IACF,MAAM,EAAE,GAAG,IAAA,oBAAU,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO;QAC9B,yDAAyD;SACxD,gBAAgB,CACf,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,qBAAqB,EACzB,IAAI,CAAC,OAAO,EACZ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EACd,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACpC,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACrC;SACA,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAW,CAAC;SACzC,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC;SAC5C,WAAW,EAAE,CAAC;IAEjB,OAAO,EAAE,CAAC;AACZ,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACI,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,UAAsB,EACtB,KAAgB,EAChB,KAA0B,EAC1B,IAAyB,EACzB,UAA8B,EAAE;IAEhC,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1E,MAAM,cAAc,GAAG,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,oBAAW,CAC5B,OAAO,CAAC,SAAS,EACjB,IAAI,mBAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAC5B,CAAC;IACF,MAAM,GAAG,GAAuB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACpC,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,OAAO,GAAG,KAAK,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,uBAAuB,CAAC,KAAK,EAAE;YAC/D,KAAK,EAAE,SAAS;YAChB,MAAM;SACP,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QACjC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAEjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,GAAG;gBAAE,SAAS;YAC1B,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE;gBAC5D,UAAU,EAAE,WAAW;gBACvB,8BAA8B,EAAE,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW;gBAAE,SAAS;YAErC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC9D,IAAI,EAAE,CAAC,IAAI,KAAK,mBAAmB,IAAI,EAAE,CAAC,IAAI,KAAK,mBAAmB;oBACpE,SAAS;gBACX,8DAA8D;gBAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,IAAW,CAAC;gBAC5B,MAAM,UAAU,GAAc,IAAI,CAAC,KAAK,CAAC;gBACzC,MAAM,UAAU,GAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3D,MAAM,aAAa,GAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAEjE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACxC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC;oBAAE,SAAS;gBAClD,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,cAAc,CAAC;oBAAE,SAAS;gBAEzD,MAAM,SAAS,GAAG,IAAA,kCAAsB,EACtC,UAAU,EACV,UAAU,EACV,OAAO,CAAC,SAAS,CAClB,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC;oBACP,KAAK,EAAE,UAAU;oBACjB,KAAK,EAAE,UAAU;oBACjB,WAAW,EAAE,OAAO,CAAC,SAAS;oBAC9B,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,aAAa,EAAE;wBACb,SAAS;wBACT,QAAQ,EAAE,aAAa;wBACvB,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBAC1C,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBAC1C,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;qBACrD;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,GAAG,CAAC,OAAO,EAAE,CAAC;IACd,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,GAAQ,EACR,KAA8C;IAE9C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1E,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAA,sBAAc,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,oBAAU,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,IAAA,4CAAgC,EACpD,IAAI,CAAC,gBAAgB,EACrB,EAAE,EACF,OAAO,CAAC,SAAS,CAClB,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,IAAA,+BAAuB,EACvC,GAAG,EACH,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,OAAO,EACZ,aAAa,CACd,CAAC;IAEF,yEAAyE;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAExC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO;QAC9B,yDAAyD;SACxD,mBAAmB,CAClB,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,qBAAqB,EACzB,IAAI,CAAC,OAAO,EACZ,GAAG,CAAC,qBAAqB,EACzB,GAAG,CAAC,oBAAoB,EACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EACd,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACpC,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACpC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAClB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CACnB;SACA,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAW,CAAC;SACzC,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC;SAC5C,WAAW,EAAE,CAAC;IAEjB,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,GAAQ,EACR,SAAoB,EACpB,IAAyB;IASzB,MAAM,EAAE,GAAG,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,aAAa,GAAG,IAAA,4CAAgC,EACpD,SAAS,EACT,EAAE,EACF,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,IAAA,iBAAE,EAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,yBAAyB,CACvC,OAAO,EACP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO;QACL,aAAa;QACb,OAAO;QACP,OAAO;QACP,IAAI;QACJ,aAAa,EAAE;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3C,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;SACxD;KACF,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,SAAgB,IAAI,CAAC,EAA0B;IAC7C,OAAO,IAAI,qBAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/program.d.ts

@@ -0,0 +1,9 @@
+import * as anchor from "@coral-xyz/anchor";
+import { Program } from "@coral-xyz/anchor";
+/**
+ * Build an Anchor Program handle for cc-vrf. Pass an AnchorProvider with a
+ * Connection and Wallet — operations that mutate state (init/freeze/etc)
+ * use this provider's wallet as signer.
+ */
+export declare function getProgram(provider: anchor.AnchorProvider): Program;
+//# sourceMappingURL=program.d.ts.map

package/dist/program.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAO5C;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,GAAG,OAAO,CAGnE"}

package/dist/program.js

@@ -0,0 +1,21 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProgram = getProgram;
+const anchor_1 = require("@coral-xyz/anchor");
+// IDL is vendored into the package so the SDK is browser-safe. Refresh
+// the file with `pnpm refresh:idl` from the workspace root whenever the
+// program changes (it copies target/idl/cc_vrf.json here).
+const cc_vrf_json_1 = __importDefault(require("./idl/cc_vrf.json"));
+/**
+ * Build an Anchor Program handle for cc-vrf. Pass an AnchorProvider with a
+ * Connection and Wallet — operations that mutate state (init/freeze/etc)
+ * use this provider's wallet as signer.
+ */
+function getProgram(provider) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return new anchor_1.Program(cc_vrf_json_1.default, provider);
+}
+//# sourceMappingURL=program.js.map

package/dist/program.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":";;;;;AAaA,gCAGC;AAfD,8CAA4C;AAE5C,uEAAuE;AACvE,wEAAwE;AACxE,2DAA2D;AAC3D,oEAAoC;AAEpC;;;;GAIG;AACH,SAAgB,UAAU,CAAC,QAA+B;IACxD,8DAA8D;IAC9D,OAAO,IAAI,gBAAO,CAAC,qBAAU,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC"}

package/dist/verifyEndToEnd.d.ts

@@ -0,0 +1,124 @@
+import { PublicKey } from "@solana/web3.js";
+export interface OnChainAuthority {
+    authorityAddress?: PublicKey;
+    owner: PublicKey;
+    pk: Uint8Array;
+    suite: number;
+    frozen: boolean;
+    revoked: boolean;
+    label: Uint8Array;
+}
+/**
+ * On-chain commitment record fetched from a VrfProofCommit compressed PDA.
+ * Either the consumer fetches this themselves via fetchProofCommit() and
+ * passes it in, or they construct it from raw fields if validating offline.
+ */
+export interface OnChainCommit {
+    authority?: PublicKey;
+    memoHash: Uint8Array;
+    proofHash: Uint8Array;
+    alphaHash: Uint8Array;
+    committedSlot: bigint | number;
+}
+export interface VerifyEndToEndInput {
+    /** The operator's published VRF public key (32 bytes Ed25519). */
+    pk: Uint8Array;
+    /** The exact alpha bytes the operator hashed and signed over. */
+    alpha: Uint8Array;
+    /** The 80-byte VRF proof the operator produced. */
+    proof: Uint8Array;
+    /** The on-chain commitment row, fetched from the program. */
+    onChainCommit: OnChainCommit;
+    /** Original memo string/bytes, used to verify the memo hash. */
+    memo: string | Uint8Array;
+    /** VRF suite. Omitted means RFC 9381 Ed25519-SHA512-TAI. */
+    suite?: number;
+}
+export interface VerifyEndToEndResult {
+    /**
+     * True iff every check passed: ECVRF math, on-chain proof hash, on-chain
+     * alpha hash, on-chain memo hash. Any failure flips this false.
+     */
+    valid: boolean;
+    ecvrfValid: boolean;
+    suiteSupported: boolean;
+    proofHashMatches: boolean;
+    alphaHashMatches: boolean;
+    memoHashMatches: boolean;
+    /** SHA-512 (64-byte) beta derived from the proof, present iff `ecvrfValid`. */
+    beta: Uint8Array | null;
+    reasons: string[];
+}
+/**
+ * Single-call full verification for a VRF outcome that's been committed
+ * on-chain. Validates:
+ *
+ *   1. ECVRF math: `verifyVRF(pk, alpha, proof)` → true
+ *   2. sha256(proof) == on-chain commit.proof_hash
+ *   3. sha256(alpha) == on-chain commit.alpha_hash
+ *   4. sha256(memo)  == on-chain commit.memo_hash
+ *
+ * If all four hold, the operator cannot have substituted the proof, alpha,
+ * or memo after the fact — the result is provably tied to the on-chain
+ * commitment.
+ */
+/**
+ * Result of picking the canonical commit from a list of events for the same
+ * `(authority, memo)`. The "canonical" commit is the unique event whose
+ * `proof_hash` matches the SHA-256 of a proof that verifies under ECVRF.
+ *
+ * Because ECVRF proofs are deterministic for a given (pk, alpha), at most one
+ * candidate can have a valid `proof_hash`. Extra events (which the chain
+ * allows in event-mode) are simply garbage payloads — detectable, not a
+ * successful forgery.
+ */
+export interface PickCanonicalResult {
+    /** The single event whose committed hash matches the verifying proof, or null if none verify. */
+    canonical: OnChainCommit | null;
+    /** All candidates inspected, in the order supplied. */
+    candidates: OnChainCommit[];
+    /** Whether more than one event was found for the same memo. Informational. */
+    duplicateMemoEvents: boolean;
+    /** Whether more than one candidate's `proof_hash` matched a verifying proof (should be impossible if ECVRF is sound). */
+    multipleVerifying: boolean;
+}
+export interface VerifyAuthorityCommitEndToEndInput extends Omit<VerifyEndToEndInput, "pk" | "suite"> {
+    /** Authority state fetched from the VrfAuthority compressed PDA. */
+    authority: OnChainAuthority;
+    /** Expected owner for the authority, usually the operator wallet. */
+    expectedOwner?: PublicKey;
+    /** Expected 32-byte authority label. */
+    expectedLabel?: Uint8Array;
+    /**
+     * Optional sanity check: redundant against the address rederived from
+     * `(owner, label)` inside the verifier. If provided, it must match the
+     * derived address or `valid` flips false.
+     */
+    expectedAuthorityAddress?: PublicKey;
+    /**
+     * Optional program ID override. Defaults to the canonical cc-vrf program
+     * ID and only needs to be set for forked deployments.
+     */
+    programId?: PublicKey;
+    /** 64-byte beta fetched from a VrfProofCommitWithBeta account. */
+    onChainBeta?: Uint8Array;
+}
+export interface VerifyAuthorityCommitEndToEndResult extends VerifyEndToEndResult {
+    authorityFrozen: boolean;
+    authorityNotRevoked: boolean;
+    authorityOwnerMatches: boolean;
+    authorityLabelMatches: boolean;
+    commitAuthorityMatches: boolean;
+    betaMatches: boolean | null;
+}
+/**
+ * Resolve which committed event corresponds to a known-valid proof. Use this
+ * when fetching event-mode commits where the chain doesn't enforce
+ * one-commit-per-memo. Pass in all candidates from `fetchProofCommitEvents`
+ * plus the proof bytes the operator gave you; you get back the unique
+ * canonical row (or null if none match).
+ */
+export declare function pickCanonicalCommit(candidates: OnChainCommit[], proof: Uint8Array): PickCanonicalResult;
+export declare function verifyEndToEnd(input: VerifyEndToEndInput): VerifyEndToEndResult;
+export declare function verifyAuthorityCommitEndToEnd(input: VerifyAuthorityCommitEndToEndInput): VerifyAuthorityCommitEndToEndResult;
+//# sourceMappingURL=verifyEndToEnd.d.ts.map

package/dist/verifyEndToEnd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyEndToEnd.d.ts","sourceRoot":"","sources":["../src/verifyEndToEnd.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAI5C,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,CAAC,EAAE,SAAS,CAAC;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,EAAE,UAAU,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,EAAE,EAAE,UAAU,CAAC;IACf,iEAAiE;IACjE,KAAK,EAAE,UAAU,CAAC;IAClB,mDAAmD;IACnD,KAAK,EAAE,UAAU,CAAC;IAClB,6DAA6D;IAC7D,aAAa,EAAE,aAAa,CAAC;IAC7B,gEAAgE;IAChE,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IAC1B,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AASD;;;;;;;;;;;;GAYG;AACH;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,iGAAiG;IACjG,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;IAChC,uDAAuD;IACvD,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,8EAA8E;IAC9E,mBAAmB,EAAE,OAAO,CAAC;IAC7B,yHAAyH;IACzH,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAmC,SAAQ,IAAI,CAC9D,mBAAmB,EACnB,IAAI,GAAG,OAAO,CACf;IACC,oEAAoE;IACpE,SAAS,EAAE,gBAAgB,CAAC;IAC5B,qEAAqE;IACrE,aAAa,CAAC,EAAE,SAAS,CAAC;IAC1B,wCAAwC;IACxC,aAAa,CAAC,EAAE,UAAU,CAAC;IAC3B;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,SAAS,CAAC;IACrC;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,kEAAkE;IAClE,WAAW,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,mCAAoC,SAAQ,oBAAoB;IAC/E,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,sBAAsB,EAAE,OAAO,CAAC;IAChC,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,aAAa,EAAE,EAC3B,KAAK,EAAE,UAAU,GAChB,mBAAmB,CASrB;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,mBAAmB,GACzB,oBAAoB,CA0DtB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kCAAkC,GACxC,mCAAmC,CAoFrC"}