@cotal-ai/core 0.12.0 → 0.13.1

package/dist/endpoint-receipt.js

@@ -0,0 +1,417 @@
+/**
+ * RECEIPTS (SPEC §13.10): a receipt binds a request to its outcome, signed and non-repudiable,
+ * for metering, disputes, and pipeline causality; payment semantics stay opaque to core.
+ *
+ * The artifact is the normative `Receipt` shape, RFC 8785 canonical, Ed25519-signed (D28: the
+ * signature is over the sig-absent canonical form and is VERIFIED over the exact raw presented
+ * artifact, never a reconstructed projection). Lifecycle and epoch ride as EVIDENCE, never
+ * redemption authority. The fact lives create-only on the caller- and execution-scoped subject
+ * `epf.<endpoint>.receipt.<cOwner>.<cActor>.<cUid>.<id>.<sourceSeq>` (§13.2) — one receipt per
+ * accepted execution, forever; a lost publish CAS must observe a canonically IDENTICAL winner
+ * or fail loud (a foreign receipt on the subject never becomes "the" receipt), and the
+ * candidate is a DETACHED snapshot taken at entry, so a caller mutating the receipt across the
+ * publish await can neither change what is stored nor what the winner is compared against.
+ * The store seams run on a space-bonded context (§13.4): JS + JSM derive from ONE connection
+ * by construction, so a lost CAS can never adopt a "winner" read from a different broker.
+ *
+ * VERIFICATION (§13.10, unconditional): "signature against the anchor registry + digest
+ * recomputation" — BOTH are mandatory. `verifyReceipt` therefore REQUIRES the raw args
+ * evidence (and the raw result evidence exactly when the receipt carries a resultDigest); the
+ * digests are recomputed from evidence read ONCE at entry and compared BEFORE any await, so
+ * mid-verification mutation of the presented proof values can never split what was checked
+ * from what is attested. A reader that does not hold the raw evidence uses the deliberately
+ * weaker, separately named {@link verifyReceiptSignature} — authenticity and coordinates only,
+ * never a §13.10 verification. Forged or request-mismatched receipts fail loud; the artifact's
+ * caller evidence must NAME the subject's caller triple (a cross-caller receipt never attests).
+ * A command carrying `ai.cotal.priced` MUST emit one; receipts MAY be emitted for unpriced
+ * commands. Retention: default 90d, >= the idempotency horizon (§13.10) — realized by the EPF
+ * stream configuration, not per-message.
+ */
+import { jetstream, jetstreamManager } from "@nats-io/jetstream";
+import { headers as natsHeaders } from "@nats-io/transport-node";
+import { canonicalJson, contractDigest, isContractDigest } from "./canonical.js";
+import { EpEnvelopeError } from "./endpoint-envelope.js";
+import { epfSubject, assertIdToken } from "./endpoint-subjects.js";
+import { epfStreamName, readLastFact } from "./endpoint-journal.js";
+import { verifyArtifactSignature, resolveAnchorForUse, assertAnchorScopeCovers, signArtifact } from "./endpoint-signing.js";
+/** The resources live here, unreachable from the context token itself. A structural look-alike
+ *  never appears in this map, so it never authorizes; and `ctx.js`/`ctx.jsm` do not exist to be
+ *  reassigned after construction. */
+const RECEIPT_RESOURCES = new WeakMap();
+/** The store's source connection, held privately for the §13.4 one-connection bond check. */
+const RECEIPT_CONNECTIONS = new WeakMap();
+/** Bond the resources to one space by CONSTRUCTION (frozen token + WeakMap-private resources,
+ *  same discipline as the other store contexts): a hand-assembled structural look-alike is
+ *  rejected at every seam, and the broker cannot be rebound out from under a live operation. */
+export async function receiptStoreContext(nc, space) {
+    if (nc === null || typeof nc !== "object" || typeof nc.close !== "function")
+        throw new EpEnvelopeError("failed-precondition", "a receipt-store context is constructed from ONE binding-layer connection; separate resources are never accepted (SPEC 13.4)");
+    if (typeof space !== "string" || space.length === 0)
+        throw new EpEnvelopeError("failed-precondition", "a receipt-store context needs a space");
+    const js = jetstream(nc);
+    const jsm = await jetstreamManager(nc);
+    const ctx = Object.freeze({ space });
+    RECEIPT_RESOURCES.set(ctx, { js, jsm });
+    RECEIPT_CONNECTIONS.set(ctx, nc);
+    return ctx;
+}
+/** The brand check AND the resource fetch, in one: a context not minted by receiptStoreContext()
+ *  is absent from the map and never authorizes. */
+function resources(ctx) {
+    const r = ctx === null || typeof ctx !== "object" ? undefined : RECEIPT_RESOURCES.get(ctx);
+    if (r === undefined)
+        throw new EpEnvelopeError("failed-precondition", `the receipt-store context was not constructed by receiptStoreContext(); a hand-assembled resource bundle never authorizes - the space bond is constructed, not asserted (SPEC 13.4)`);
+    return r;
+}
+/** Prove a context is store-branded (minted by {@link receiptStoreContext}) without touching the
+ *  broker: emission wiring is validated at seam ENTRY, so a hand-assembled store bundle refuses
+ *  BEFORE any terminal is committed against it, never as a post-commit emission failure. */
+export function assertReceiptStoreContext(ctx) { resources(ctx); }
+/** Prove the store derives from EXACTLY this binding-layer connection (§13.4: "JS + JSM derive
+ *  from ONE connection by construction"): a same-space store built over a DIFFERENT connection
+ *  or broker passes any string-space compare, yet its publishes and lost-CAS winner reads land
+ *  on ANOTHER broker's streams - splicing one operation's authority across brokers. The bond is
+ *  connection IDENTITY, never a name. */
+export function assertReceiptStoreConnection(ctx, nc) {
+    resources(ctx);
+    if (nc === undefined || RECEIPT_CONNECTIONS.get(ctx) !== nc)
+        throw new EpEnvelopeError("failed-precondition", "the receipt store does not derive from this operation's own connection; one operation binds ONE broker connection, so a cross-connection (or cross-broker) store never publishes (SPEC 13.4)");
+}
+/** Snapshot the ref to a validated, DETACHED copy at seam entry (single-read: every property
+ *  is read exactly once, so a shifting getter cannot split one operation's identity across
+ *  its subject derivation and its artifact binding). */
+function snapshotReceiptRef(ref) {
+    if (ref === null || typeof ref !== "object")
+        throw new EpEnvelopeError("failed-precondition", `a receipt ref must carry endpoint, the caller triple, requestId, and sourceSeq (SPEC 13.2)`);
+    const endpoint = ref.endpoint;
+    const requestId = ref.requestId;
+    const sourceSeq = ref.sourceSeq;
+    const c = ref.caller;
+    if (typeof endpoint !== "string" || typeof requestId !== "string" || c === null || typeof c !== "object")
+        throw new EpEnvelopeError("failed-precondition", `a receipt ref must carry endpoint, the caller triple, requestId, and sourceSeq (SPEC 13.2)`);
+    const owner = c.owner;
+    const actor = c.actor;
+    const uid = c.uid;
+    if (typeof owner !== "string" || typeof actor !== "string" || typeof uid !== "string")
+        throw new EpEnvelopeError("failed-precondition", `a receipt ref must carry endpoint, the caller triple, requestId, and sourceSeq (SPEC 13.2)`);
+    return Object.freeze({ endpoint, caller: Object.freeze({ owner, actor, uid }), requestId, sourceSeq });
+}
+const isRec = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+function garbled(what) { throw new EpEnvelopeError("internal", `${what}; a garbled receipt never attests (SPEC 13.10)`); }
+/** The receipt-fact subject (`epf.<e>.receipt.<cO>.<cA>.<cUid>.<id>.<sourceSeq>`, §13.2). */
+export function receiptSubject(space, ref) {
+    if (!Number.isSafeInteger(ref.sourceSeq) || ref.sourceSeq < 1)
+        throw new EpEnvelopeError("failed-precondition", `a receipt's sourceSeq is the accepted submission's positive stream sequence; got ${JSON.stringify(ref.sourceSeq)} (SPEC 13.10)`);
+    return epfSubject(space, ref.endpoint, ["receipt", ref.caller.owner, ref.caller.actor, ref.caller.uid, assertIdToken(ref.requestId, "requestId"), String(ref.sourceSeq)]);
+}
+/** Build and SIGN a receipt from the raw execution evidence: the digests are computed HERE from
+ *  the actual args/result (single source — an emitted digest can never mismatch what was
+ *  digested), the outcome is closed, and the artifact signs D28 over its canonical form. */
+export function mintReceipt(args, keyPair) {
+    if (!Number.isSafeInteger(args.ts) || args.ts < 0)
+        throw new EpEnvelopeError("failed-precondition", `a receipt ts must be a non-negative safe integer; got ${JSON.stringify(args.ts)}`);
+    if (!isContractDigest(args.schemaDigests?.input) || !isContractDigest(args.schemaDigests?.output))
+        throw new EpEnvelopeError("failed-precondition", `a receipt requires the described contract's input/output schema digests (SPEC 13.10)`);
+    if (typeof args.outcome?.ok !== "boolean" || (args.outcome.code !== undefined && typeof args.outcome.code !== "string"))
+        throw new EpEnvelopeError("failed-precondition", `a receipt outcome is { ok: boolean, code?: string }; got ${JSON.stringify(args.outcome)}`);
+    if (args.result !== undefined && args.resultDigest !== undefined)
+        throw new EpEnvelopeError("failed-precondition", `a receipt takes a raw result OR a pre-committed resultDigest, never both (a single source of the result digest, SPEC 13.10)`);
+    if (args.resultDigest !== undefined && !isContractDigest(args.resultDigest))
+        throw new EpEnvelopeError("failed-precondition", `a receipt resultDigest is a sha256 digest; got ${JSON.stringify(args.resultDigest)}`);
+    const resultDigest = args.resultDigest !== undefined ? args.resultDigest
+        : args.result !== undefined ? contractDigest(args.result) : undefined;
+    const body = {
+        v: 1, requestId: args.ref.requestId, sourceSeq: args.ref.sourceSeq, space: args.space,
+        endpoint: args.ref.endpoint, command: args.command, instance: args.instance, caller: args.caller,
+        schemaDigests: { input: args.schemaDigests.input, output: args.schemaDigests.output },
+        argsDigest: contractDigest(args.args === undefined ? null : args.args),
+        outcome: { ok: args.outcome.ok, ...(args.outcome.code !== undefined ? { code: args.outcome.code } : {}) },
+        ...(resultDigest !== undefined ? { resultDigest } : {}),
+        ts: args.ts, signer: { keyId: args.signer.keyId },
+    };
+    receiptSubject(args.space, args.ref); // validates the subject coordinates before signing
+    return signArtifact(body, keyPair);
+}
+/** Map an action goal's committed terminal (`state` + its `outcomeDigest`) onto the receipt
+ *  outcome: only `succeeded` is `ok`; every other terminal state IS its own catalog code, so a
+ *  receipt's `outcome.code` can never disagree with the committed goal state. The digest is the
+ *  terminal fact's OWN `outcomeDigest` (the receipt attests the committed value, never re-digests
+ *  a substitute). Kept generic (state + digest, not the GoalResultFact type) so the receipt
+ *  module stays free of an action-composite dependency. */
+export function receiptOutcomeOfGoal(state, outcomeDigest) {
+    const OK_STATES = new Set(["succeeded"]);
+    const CODE_STATES = new Set(["failed", "cancelled", "expired", "uncertain"]);
+    if (!OK_STATES.has(state) && !CODE_STATES.has(state))
+        throw new EpEnvelopeError("internal", `goal terminal state ${JSON.stringify(state)} is not a §13.6 outcome; a receipt never attests an unknown terminal (SPEC 13.10)`);
+    if (!isContractDigest(outcomeDigest))
+        throw new EpEnvelopeError("internal", `a goal terminal's outcomeDigest is a sha256 digest; got ${JSON.stringify(outcomeDigest)} (SPEC 13.10)`);
+    return { ok: state === "succeeded", ...(state === "succeeded" ? {} : { code: state }), resultDigest: outcomeDigest };
+}
+/** Build and sign a receipt whose EVERY attestation field is DERIVED from the two authoritative
+ *  facts, never a caller's free parameter (distsys CF-1: an emitted receipt can no longer attest
+ *  an outcome or identity that disagrees with the committed record). Identity (requestId,
+ *  sourceSeq, caller, endpoint, command, schema digests, argsDigest) comes from the ACCEPTANCE
+ *  fact; the outcome (ok/code/resultDigest) comes from the committed TERMINAL. The only inputs
+ *  the caller supplies are the executing-instance EVIDENCE, the wall clock, the signer id, and
+ *  the key. A receipt minted here is reconstructable from the two facts, so a crash between
+ *  effect and emission is repaired by re-minting from the same facts (idempotent publish). */
+export function mintReceiptFromFacts(args, keyPair) {
+    const a = args.acceptance;
+    if (a === null || typeof a !== "object" || a.decision !== "accepted")
+        throw new EpEnvelopeError("internal", `a receipt is minted from an ACCEPTED submission's acceptance fact; got ${JSON.stringify(a?.decision)} (SPEC 13.10)`);
+    const op = a.request?.op;
+    if (op === undefined || typeof op.endpoint !== "string" || typeof op.command !== "string")
+        throw new EpEnvelopeError("internal", `the acceptance fact for "${a.id}" carries no invocation binding; a receipt derives its endpoint/command from the accepted request, never a free param (SPEC 13.10)`);
+    // The acceptance records the pinned contract digests twice (its `contractDigests` and the
+    // embedded request's op digests); they MUST agree, else the acceptance is internally garbled
+    // and a receipt built from either could disagree with the other.
+    if (a.contractDigests.input !== op.inputDigest || a.contractDigests.output !== op.outputDigest)
+        throw new EpEnvelopeError("internal", `the acceptance fact for "${a.id}" disagrees with its own embedded request on the pinned contract digests; a garbled acceptance never mints a receipt (SPEC 13.10)`);
+    // BIND the authoritative caller triple (from the acceptance subject) to the fact body's caller
+    // evidence: id = "owner.actor" and uid = lifecycleUid, else the receipt subject and its body
+    // would name different principals (forged attribution, the same class parseReceipt closes on read).
+    if (`${args.caller.owner}.${args.caller.actor}` !== a.caller.id || args.caller.uid !== a.caller.lifecycleUid)
+        throw new EpEnvelopeError("internal", `the acceptance subject caller ${args.caller.owner}.${args.caller.actor}/${args.caller.uid} disagrees with the fact body caller ${a.caller.id}/${a.caller.lifecycleUid}; a receipt never attests split attribution (SPEC 13.10)`);
+    if (typeof args.terminal?.ok !== "boolean"
+        || (args.terminal.code !== undefined && typeof args.terminal.code !== "string")
+        || (args.terminal.resultDigest !== undefined && !isContractDigest(args.terminal.resultDigest)))
+        throw new EpEnvelopeError("internal", `a receipt terminal is { ok, code?, resultDigest? } derived from the committed terminal; got ${JSON.stringify(args.terminal)} (SPEC 13.10)`);
+    return mintReceipt({
+        ref: { endpoint: op.endpoint, caller: args.caller, requestId: a.id, sourceSeq: a.sourceSeq },
+        space: args.space,
+        command: op.command,
+        instance: args.instance,
+        caller: a.caller,
+        schemaDigests: a.contractDigests,
+        args: a.request.args,
+        outcome: { ok: args.terminal.ok, ...(args.terminal.code !== undefined ? { code: args.terminal.code } : {}) },
+        ...(args.terminal.resultDigest !== undefined ? { resultDigest: args.terminal.resultDigest } : {}),
+        ts: args.ts,
+        signer: args.signer,
+    }, keyPair);
+}
+/** Prove a RECORDED receipt attests the same facts as a freshly fact-derived candidate: every
+ *  attestation field (identity + outcome) must agree; only the emission evidence (instance, ts,
+ *  signer, sig) may differ, because two legitimate emitters — the inline commit path and the
+ *  reconciler — mint from the SAME facts at different moments. First-recorded-wins is the §13.10
+ *  rule; a recorded receipt that DISAGREES with the facts is exactly the forged-attestation class
+ *  CF-1 closes and is a loud `conflict`, never silently adopted. */
+export function assertReceiptAttestsSameFacts(recorded, candidate) {
+    const same = recorded.requestId === candidate.requestId && recorded.sourceSeq === candidate.sourceSeq
+        && recorded.space === candidate.space && recorded.endpoint === candidate.endpoint
+        && recorded.command === candidate.command
+        && recorded.caller.id === candidate.caller.id && recorded.caller.lifecycleUid === candidate.caller.lifecycleUid
+        && recorded.schemaDigests.input === candidate.schemaDigests.input
+        && recorded.schemaDigests.output === candidate.schemaDigests.output
+        && recorded.argsDigest === candidate.argsDigest
+        && recorded.outcome.ok === candidate.outcome.ok && recorded.outcome.code === candidate.outcome.code
+        && recorded.resultDigest === candidate.resultDigest;
+    if (!same)
+        throw new EpEnvelopeError("conflict", `the recorded receipt for ${recorded.endpoint}/${recorded.requestId}#${recorded.sourceSeq} disagrees with the committed facts it claims to attest; one execution has one receipt and it must attest the committed record (SPEC 13.10)`);
+}
+/** Closed shape validation, IDENTITY-BOUND to the ref/subject it was read for (§13.4/§13.10):
+ *  a mis-subjected, cross-request, cross-caller, or garbled receipt never attests. The
+ *  artifact's caller EVIDENCE must name the subject's caller triple — a receipt whose body
+ *  names a different principal than its execution-scoped subject is forged attribution. */
+export function parseReceipt(raw, ref, space) {
+    // Detach to a plain tree at ENTRY (distsys c50817d MEDIUM): the exported parser validates and
+    // RETURNS this snapshot, never the caller's live view. A caller getter/Proxy therefore cannot
+    // pass a check with one value and then answer a different one when a later field (or the
+    // returned `parsed.caller.id`) is read - the snapshot has no live accessors left.
+    const snap = snapshotRawReceipt(raw);
+    if (!isRec(snap))
+        garbled("the receipt is not an object");
+    const o = snap;
+    const allowed = new Set(["v", "requestId", "sourceSeq", "space", "endpoint", "command", "instance", "caller", "schemaDigests", "argsDigest", "outcome", "resultDigest", "ts", "signer", "sig"]);
+    for (const k of Object.keys(o))
+        if (!allowed.has(k))
+            garbled(`the receipt carries the unknown field "${k}" (closed schema)`);
+    if (o.v !== 1)
+        garbled("the receipt version is not 1");
+    if (o.requestId !== ref.requestId || o.sourceSeq !== ref.sourceSeq || o.endpoint !== ref.endpoint || o.space !== space)
+        garbled(`the receipt names (${String(o.space)}, ${String(o.endpoint)}, ${String(o.requestId)}, ${String(o.sourceSeq)}), not its subject's (${space}, ${ref.endpoint}, ${ref.requestId}, ${ref.sourceSeq}); request-mismatched receipts fail loud`);
+    if (typeof o.command !== "string" || o.command.length === 0)
+        garbled("the receipt has no command");
+    const inst = o.instance;
+    if (!isRec(inst) || typeof inst.id !== "string" || typeof inst.instanceId !== "string"
+        || typeof inst.epoch !== "number" || !Number.isSafeInteger(inst.epoch) || inst.epoch < 0)
+        garbled("the receipt instance evidence is not { id, instanceId, epoch }");
+    const cal = o.caller;
+    if (!isRec(cal) || typeof cal.id !== "string" || typeof cal.lifecycleUid !== "string")
+        garbled("the receipt caller evidence is not { id, lifecycleUid }");
+    if (cal.id !== `${ref.caller.owner}.${ref.caller.actor}` || cal.lifecycleUid !== ref.caller.uid)
+        garbled(`the receipt's caller evidence (${String(cal.id)}/${String(cal.lifecycleUid)}) does not name its subject's caller (${ref.caller.owner}.${ref.caller.actor}/${ref.caller.uid}); a cross-caller receipt never attests`);
+    const sd = o.schemaDigests;
+    if (!isRec(sd) || !isContractDigest(sd.input) || !isContractDigest(sd.output))
+        garbled("the receipt schemaDigests are not sha256 digests");
+    if (!isContractDigest(o.argsDigest))
+        garbled("the receipt argsDigest is not a sha256 digest");
+    if (o.resultDigest !== undefined && !isContractDigest(o.resultDigest))
+        garbled("the receipt resultDigest is not a sha256 digest");
+    const out = o.outcome;
+    if (!isRec(out) || typeof out.ok !== "boolean" || (out.code !== undefined && typeof out.code !== "string"))
+        garbled("the receipt outcome is not { ok, code? }");
+    if (typeof o.ts !== "number" || !Number.isSafeInteger(o.ts) || o.ts < 0)
+        garbled("the receipt ts is not a non-negative safe integer");
+    if (!isRec(o.signer) || typeof o.signer.keyId !== "string")
+        garbled("the receipt names no signer keyId");
+    if (typeof o.sig !== "string" || o.sig.length === 0)
+        garbled("the receipt is unsigned");
+    return o;
+}
+/** Publish a receipt create-only on its execution-scoped subject, with EXPLICIT subject
+ *  coordinates (the artifact's caller evidence carries `{id, lifecycleUid}`, not the subject
+ *  triple, and a publisher never derives one by guessing). The receipt is SNAPSHOTTED to a
+ *  detached canonical candidate at entry: the identity binding ({@link parseReceipt}), the
+ *  published bytes, the lost-CAS winner comparison, and the returned value are all EXACTLY
+ *  that candidate — a caller mutating the receipt across the publish await can neither change
+ *  what is stored nor smuggle a "winner" past the equality proof. A lost CAS reads the winner
+ *  through the SAME bonded context and PROVES canonical identity — a DIFFERENT receipt already
+ *  on the subject is a loud `conflict` (one execution, one receipt, forever), never adopted. */
+export async function publishReceipt(ctx, ref, receipt) {
+    const { js } = resources(ctx);
+    const refSnap = snapshotReceiptRef(ref);
+    let candidate;
+    try {
+        candidate = JSON.parse(canonicalJson(receipt));
+    } // detached; the caller's live object is never read again
+    catch (e) {
+        throw new EpEnvelopeError("internal", `the receipt is not interchangeable JSON (${e.message}); garbled state is never published (SPEC 13.10)`);
+    }
+    parseReceipt(candidate, refSnap, ctx.space); // identity-bind before writing
+    const subject = receiptSubject(ctx.space, refSnap);
+    const h = natsHeaders();
+    h.set("Nats-Expected-Last-Subject-Sequence", "0");
+    try {
+        await js.publish(subject, new TextEncoder().encode(canonicalJson(candidate)), { headers: h });
+        return { won: true, receipt: candidate };
+    }
+    catch (e) {
+        const code = e?.code;
+        if (code !== 10071 && code !== 10164)
+            throw e;
+        const winner = await readReceipt(ctx, refSnap);
+        if (winner === undefined)
+            throw new EpEnvelopeError("internal", `the receipt CAS for ${subject} was lost but no winning receipt is readable (SPEC 13.4)`);
+        if (canonicalJson(winner) !== canonicalJson(candidate))
+            throw new EpEnvelopeError("conflict", `a DIFFERENT receipt is already recorded for this execution (${subject}); one execution has one receipt, forever (SPEC 13.10)`);
+        return { won: false, receipt: winner };
+    }
+}
+/** Read the execution's recorded receipt (`undefined` = none emitted yet), identity-bound. */
+export async function readReceipt(ctx, ref) {
+    const { jsm } = resources(ctx);
+    const refSnap = snapshotReceiptRef(ref);
+    const subject = receiptSubject(ctx.space, refSnap);
+    const raw = await readLastFact(jsm, epfStreamName(ctx.space), subject);
+    return raw === undefined ? undefined : parseReceipt(raw, refSnap, ctx.space);
+}
+/** Race the anchor resolution against the verification budget: a stuck registry is a bounded
+ *  `unavailable` refusal, never a hung verification. Races `Promise.resolve(p)` unconditionally
+ *  (a non-native thenable must not bypass the deadline). */
+async function withVerifyBudget(p, budgetMs, what) {
+    let timer;
+    const deadline = new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new EpEnvelopeError("unavailable", `${what} did not answer within ${budgetMs}ms; receipt verification is bounded and fails closed (SPEC 13.10)`)), budgetMs);
+    });
+    try {
+        return await Promise.race([Promise.resolve(p), deadline]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function assertBudget(v) {
+    const budget = v ?? 5_000;
+    if (!Number.isSafeInteger(budget) || budget <= 0)
+        throw new EpEnvelopeError("failed-precondition", `verifyBudgetMs must be a positive integer; got ${JSON.stringify(v)}`);
+    return budget;
+}
+/** Snapshot the raw artifact to a DETACHED value at entry: the parse, the scope check, and the
+ *  D28 signature all read EXACTLY these bytes, so a caller mutating the raw receipt during an
+ *  awaited anchor resolution can never split what was parsed from what the signature verifies
+ *  (the D28 consuming boundary). */
+function snapshotRawReceipt(raw) {
+    try {
+        return JSON.parse(canonicalJson(raw));
+    } // throws on non-interchangeable I-JSON; the detached tree is unreachable to the caller
+    catch (e) {
+        throw new EpEnvelopeError("internal", `the receipt is not interchangeable JSON (${e.message}); garbled state never verifies (SPEC 13.10)`);
+    }
+}
+/** The shared authenticity core: FRESH-resolve the signer anchor (role `receipts`, scope
+ *  covering the attested endpoint, window at the receipt's `ts`, bounded), then verify the D28
+ *  signature over the detached snapshot. */
+async function verifySignatureCore(rawSnapshot, receipt, resolveAnchor, budget) {
+    const anchor = await withVerifyBudget(resolveAnchorForUse(resolveAnchor, { keyId: receipt.signer.keyId, role: "receipts", at: receipt.ts }), budget, `the anchor resolution for receipt signer "${receipt.signer.keyId}"`);
+    assertAnchorScopeCovers(anchor, "receipts", receipt.endpoint, "the receipt's attested endpoint");
+    verifyArtifactSignature(rawSnapshot, anchor); // the DETACHED snapshot the parse read, not the live caller-owned raw
+    return anchor;
+}
+/** VERIFY a receipt (§13.10, fail loud, UNCONDITIONAL): D28 signature over the EXACT RAW
+ *  artifact against the FRESH-resolved anchor PLUS digest recomputation — both mandatory
+ *  ("signature against the anchor registry + digest recomputation", §13.10). The raw args
+ *  evidence is REQUIRED (undefined digests as null); the raw result evidence is REQUIRED
+ *  exactly when the receipt carries a resultDigest (a receipt attesting a result is only
+ *  verified against that result), and FORBIDDEN when it does not (a receipt with no
+ *  resultDigest cannot attest a presented result). The evidence is read ONCE and its digests
+ *  are computed at ENTRY, then compared BEFORE the anchor await — mutating the presented proof
+ *  values mid-verification changes nothing. A reader without raw evidence uses the explicitly
+ *  weaker {@link verifyReceiptSignature}. Returns the parsed receipt. */
+export async function verifyReceipt(raw, opts) {
+    const budget = assertBudget(opts.verifyBudgetMs);
+    // ENTRY SNAPSHOTS (single-read): ref, evidence, and the raw artifact all detach here.
+    const refSnap = snapshotReceiptRef(opts.ref);
+    const rec = opts.recompute;
+    if (rec === null || typeof rec !== "object" || Array.isArray(rec) || !("args" in rec))
+        throw new EpEnvelopeError("failed-precondition", `receipt verification is signature PLUS digest recomputation (SPEC 13.10, unconditional); the raw args evidence is mandatory - a reader without evidence uses verifyReceiptSignature, the explicitly weaker authenticity read`);
+    const argsEvidence = rec.args; // the ONLY read of rec.args
+    let argsProof;
+    let hasResult = false;
+    let resultProof;
+    try {
+        // Digest args IMMEDIATELY after its single read, BEFORE touching `rec` again (distsys c50817d
+        // HIGH): a `result` getter or Proxy has-trap must not run between the args read and its
+        // digest, or it could mutate the args object to match a foreign receipt. The evidence is
+        // single-read AND single-digest, not read-then-later-digest. Only once argsProof is a fixed
+        // scalar do we consult `rec` for the result evidence.
+        argsProof = contractDigest(argsEvidence === undefined ? null : argsEvidence);
+        hasResult = "result" in rec;
+        resultProof = hasResult ? contractDigest(rec.result) : undefined;
+    }
+    catch (e) {
+        throw new EpEnvelopeError("failed-precondition", `the presented evidence does not digest (${e.message}); evidence that cannot digest cannot verify (SPEC 13.10)`);
+    }
+    const rawSnapshot = snapshotRawReceipt(raw);
+    const receipt = parseReceipt(rawSnapshot, refSnap, opts.space);
+    // DIGEST RECOMPUTATION BEFORE THE ANCHOR AWAIT: the proofs are entry-time detached scalars,
+    // so nothing a caller mutates after entry can influence what is attested — and a mismatched
+    // receipt fails fast without touching the registry.
+    if (argsProof !== receipt.argsDigest)
+        throw new EpEnvelopeError("permission-denied", `the receipt's argsDigest does not recompute from the presented args; a request-mismatched receipt fails loud (SPEC 13.10)`);
+    if (receipt.resultDigest !== undefined) {
+        if (!hasResult)
+            throw new EpEnvelopeError("failed-precondition", `the receipt attests a result (resultDigest present) but no result evidence is presented; verification recomputes EVERY digest the receipt carries (SPEC 13.10)`);
+        if (resultProof !== receipt.resultDigest)
+            throw new EpEnvelopeError("permission-denied", `the receipt's resultDigest does not recompute from the presented result; a forged or mismatched receipt fails loud (SPEC 13.10)`);
+    }
+    else if (hasResult) {
+        throw new EpEnvelopeError("permission-denied", `the receipt carries no resultDigest but a result is presented for attestation; a receipt attests only what it digested (SPEC 13.10)`);
+    }
+    await verifySignatureCore(rawSnapshot, receipt, opts.resolveAnchor, budget);
+    return receipt;
+}
+/** The deliberately WEAKER, separately named authenticity read: closed identity-bound parse +
+ *  D28 signature against the fresh-resolved anchor, with NO digest attestation — for a reader
+ *  that does not hold the raw args/result. This is NOT the §13.10 verification (which is
+ *  unconditionally signature PLUS digest recomputation, {@link verifyReceipt}); it proves the
+ *  artifact is authentic and names these coordinates, nothing about what was executed. */
+export async function verifyReceiptSignature(raw, opts) {
+    const budget = assertBudget(opts.verifyBudgetMs);
+    const refSnap = snapshotReceiptRef(opts.ref);
+    const rawSnapshot = snapshotRawReceipt(raw);
+    const receipt = parseReceipt(rawSnapshot, refSnap, opts.space);
+    await verifySignatureCore(rawSnapshot, receipt, opts.resolveAnchor, budget);
+    return receipt;
+}
+//# sourceMappingURL=endpoint-receipt.js.map

package/dist/endpoint-receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-receipt.js","sourceRoot":"","sources":["../src/endpoint-receipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAA+C,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,OAAO,IAAI,WAAW,EAAuB,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAiB,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAuB,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,YAAY,EAA0C,MAAM,uBAAuB,CAAC;AAapK;;qCAEqC;AACrC,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAyC,CAAC;AAC/E,6FAA6F;AAC7F,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAuC,CAAC;AAE/E;;gGAEgG;AAChG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAkB,EAAE,KAAa;IACzE,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAQ,EAAqC,CAAC,KAAK,KAAK,UAAU;QAC7G,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,6HAA6H,CAAC,CAAC;IAClL,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QACjD,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;IAC5F,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;mDACmD;AACnD,SAAS,SAAS,CAAC,GAAwB;IACzC,MAAM,CAAC,GAAG,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK,SAAS;QACjB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,qLAAqL,CAAC,CAAC;IAC1O,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;4FAE4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,GAAwB,IAAU,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE7F;;;;yCAIyC;AACzC,MAAM,UAAU,4BAA4B,CAAC,GAAwB,EAAE,EAAW;IAChF,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,IAAI,EAAE,KAAK,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE;QACzD,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8LAA8L,CAAC,CAAC;AACrP,CAAC;AAYD;;wDAEwD;AACxD,SAAS,kBAAkB,CAAC,GAAe;IACzC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QACzC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4FAA4F,CAAC,CAAC;IACjJ,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAChC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QACtG,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4FAA4F,CAAC,CAAC;IACjJ,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QACnF,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4FAA4F,CAAC,CAAC;IACjJ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AACzG,CAAC;AAwBD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrH,SAAS,OAAO,CAAC,IAAY,IAAW,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,IAAI,gDAAgD,CAAC,CAAC,CAAC,CAAC;AAEzI,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,GAAe;IAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC;QAC3D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,oFAAoF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACrL,OAAO,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC5K,CAAC;AAED;;4FAE4F;AAC5F,MAAM,UAAU,WAAW,CACzB,IAmBC,EACD,OAAgD;IAEhD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC;QAC/C,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,yDAAyD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/F,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,sFAAsF,CAAC,CAAC;IAC3I,IAAI,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC;QACrH,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4DAA4D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/I,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAC9D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,6HAA6H,CAAC,CAAC;IAClL,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC;QACzE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,kDAAkD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1I,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY;QACtE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,IAAI,GAAyB;QACjC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;QACrF,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;QAChG,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;QACrF,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACzG,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;KAClD,CAAC;IACF,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mDAAmD;IACzF,OAAO,YAAY,CAAC,IAA0C,EAAE,OAAO,CAAuB,CAAC;AACjG,CAAC;AAYD;;;;;2DAK2D;AAC3D,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,aAAqB;IACvE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACzK,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC;QAClC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,2DAA2D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;IACjJ,OAAO,EAAE,EAAE,EAAE,KAAK,KAAK,WAAW,EAAE,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACvH,CAAC;AAED;;;;;;;8FAO8F;AAC9F,MAAM,UAAU,oBAAoB,CAClC,IAgBC,EACD,OAAgD;IAEhD,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;QAClE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,0EAA0E,IAAI,CAAC,SAAS,CAAE,CAA4B,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC1L,MAAM,EAAE,GAAI,CAAC,CAAC,OAA6G,EAAE,EAAE,CAAC;IAChI,IAAI,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ;QACvF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC,EAAE,oIAAoI,CAAC,CAAC;IAC9M,0FAA0F;IAC1F,6FAA6F;IAC7F,iEAAiE;IACjE,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,KAAK,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,EAAE,CAAC,YAAY;QAC5F,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC,EAAE,mIAAmI,CAAC,CAAC;IAC7M,+FAA+F;IAC/F,6FAA6F;IAC7F,oGAAoG;IACpG,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY;QAC1G,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,iCAAiC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,wCAAwC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,0DAA0D,CAAC,CAAC;IAC1Q,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,SAAS;WACrC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC;WAC5E,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9F,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,+FAA+F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACrL,OAAO,WAAW,CAAC;QACjB,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;QAC5F,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,aAAa,EAAE,CAAC,CAAC,eAAe;QAChC,IAAI,EAAG,CAAC,CAAC,OAA8B,CAAC,IAAI;QAC5C,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC5G,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;;;;oEAKoE;AACpE,MAAM,UAAU,6BAA6B,CAAC,QAAiB,EAAE,SAAkB;IACjF,MAAM,IAAI,GACR,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;WACrF,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ;WAC9E,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;WACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,MAAM,CAAC,YAAY;WAC5G,QAAQ,CAAC,aAAa,CAAC,KAAK,KAAK,SAAS,CAAC,aAAa,CAAC,KAAK;WAC9D,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,SAAS,CAAC,aAAa,CAAC,MAAM;WAChE,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;WAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,CAAC,IAAI;WAChG,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,CAAC;IACtD,IAAI,CAAC,IAAI;QACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,4BAA4B,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,6IAA6I,CAAC,CAAC;AAClR,CAAC;AAED;;;2FAG2F;AAC3F,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,GAAe,EAAE,KAAa;IACvE,8FAA8F;IAC9F,8FAA8F;IAC9F,yFAAyF;IACzF,kFAAkF;IAClF,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAChM,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,0CAA0C,CAAC,mBAAmB,CAAC,CAAC;IAC7H,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK;QACpH,OAAO,CAAC,sBAAsB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,KAAK,KAAK,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,0CAA0C,CAAC,CAAC;IACrP,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,CAAC,CAAC,QAAmC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;WACjF,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;QACxF,OAAO,CAAC,gEAAgE,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,CAAC,CAAC,MAAiC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QACnF,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG;QAC7F,OAAO,CAAC,kCAAkC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,yCAAyC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,yCAAyC,CAAC,CAAC;IAChO,MAAM,EAAE,GAAG,CAAC,CAAC,aAAwC,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,KAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,MAAgB,CAAC;QAC/F,OAAO,CAAC,kDAAkD,CAAC,CAAC;IAC9D,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAoB,CAAC;QAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAsB,CAAC;QAAE,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAC5I,MAAM,GAAG,GAAG,CAAC,CAAC,OAAkC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;QACxG,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;QAAE,OAAO,CAAC,mDAAmD,CAAC,CAAC;IACtI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,OAAQ,CAAC,CAAC,MAAkC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACtI,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxF,OAAO,CAAuB,CAAC;AACjC,CAAC;AAED;;;;;;;;gGAQgG;AAChG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAwB,EACxB,GAAe,EACf,OAAgB;IAEhB,MAAM,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAY,CAAC;IAAC,CAAC,CAAC,yDAAyD;IAC5H,OAAO,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,4CAA6C,CAAW,CAAC,OAAO,kDAAkD,CAAC,CAAC;IAAC,CAAC;IACxK,YAAY,CAAC,SAA+C,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,+BAA+B;IAClH,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,GAAG,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAAwB,EAAE,IAAI,CAAC;QAC7C,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK;YAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS;YACtB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,OAAO,0DAA0D,CAAC,CAAC;QAClI,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,SAAS,CAAC;YACpD,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,+DAA+D,OAAO,wDAAwD,CAAC,CAAC;QACxK,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAwB,EAAE,GAAe;IACzE,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED;;4DAE4D;AAC5D,KAAK,UAAU,gBAAgB,CAAI,CAAiB,EAAE,QAAgB,EAAE,IAAY;IAClF,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,GAAG,IAAI,0BAA0B,QAAQ,mEAAmE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/L,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QAAC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AACrG,CAAC;AAED,SAAS,YAAY,CAAC,CAAqB;IACzC,MAAM,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,kDAAkD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1H,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;oCAGoC;AACpC,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC,CAAC,uFAAuF;IACtI,OAAO,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,4CAA6C,CAAW,CAAC,OAAO,8CAA8C,CAAC,CAAC;IAAC,CAAC;AACtK,CAAC;AAED;;4CAE4C;AAC5C,KAAK,UAAU,mBAAmB,CAAC,WAAoB,EAAE,OAAgB,EAAE,aAA6B,EAAE,MAAc;IACtH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,mBAAmB,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,EACrG,MAAM,EAAE,6CAA6C,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAChF,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;IACjG,uBAAuB,CAAC,WAAsC,EAAE,MAAM,CAAC,CAAC,CAAC,sEAAsE;IAC/I,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;yEASyE;AACzE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,IAUC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,sFAAsF;IACtF,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;QACnF,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8NAA8N,CAAC,CAAC;IACnR,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,4BAA4B;IAC3D,IAAI,SAAiB,CAAC;IACtB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACH,8FAA8F;QAC9F,wFAAwF;QACxF,yFAAyF;QACzF,4FAA4F;QAC5F,sDAAsD;QACtD,SAAS,GAAG,cAAc,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7E,SAAS,GAAG,QAAQ,IAAI,GAAG,CAAC;QAC5B,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,2CAA4C,CAAW,CAAC,OAAO,2DAA2D,CAAC,CAAC;IAC/K,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,4FAA4F;IAC5F,4FAA4F;IAC5F,oDAAoD;IACpD,IAAI,SAAS,KAAK,OAAO,CAAC,UAAU;QAClC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2HAA2H,CAAC,CAAC;IAC9K,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS;YACZ,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,gKAAgK,CAAC,CAAC;QACrN,IAAI,WAAW,KAAK,OAAO,CAAC,YAAY;YACtC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,iIAAiI,CAAC,CAAC;IACtL,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,qIAAqI,CAAC,CAAC;IACxL,CAAC;IACD,MAAM,mBAAmB,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;0FAI0F;AAC1F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAY,EACZ,IAAgG;IAEhG,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,mBAAmB,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC"}