@easy1staking/cip113-sdk-ts 0.3.1 → 0.5.0

package/blueprints/substandards/dummy/v0.1.0/UPSTREAM_PIN.json

@@ -0,0 +1,29 @@
+{
+  "artifact": "plutus.json",
+  "sha256": "42d95e768b991c3dd9fa09e4fd320bb7650a1564d841502248d5623c88e53fa4",
+  "declares": {
+    "title": "wsc-poc/aiken-policy",
+    "description": "Aiken contracts for project 'wsc-poc/aiken-policy'",
+    "version": "0.0.0",
+    "compiler": "Aiken v1.1.19+e525483",
+    "validators": 4
+  },
+  "upstream": {
+    "repo": null,
+    "commit": null,
+    "note": "Source project not recorded anywhere in this repo. Unrelated to both the standard blueprint's project and the freeze-and-seize one."
+  },
+  "blueprint_reproduced": false,
+  "provenance": "UNKNOWN",
+  "verified": {
+    "date": "2026-08-14",
+    "findings": [
+      "The directory name v0.1.0 is an invented label: the artifact declares version 0.0.0.",
+      "Built with Aiken v1.1.19+e525483 - OLDER than every other blueprint in this repo. Three bundled blueprints, three source projects, two compiler versions."
+    ]
+  },
+  "reproduce": {
+    "requires": "Aiken v1.1.19+e525483",
+    "note": "Cannot be reproduced without locating the source project first."
+  }
+}

package/blueprints/substandards/dummy/v0.2.0/UPSTREAM_PIN.json

@@ -0,0 +1,38 @@
+{
+  "artifact": "plutus.json",
+  "sha256": "c75e41f6ff3f71c278ac4765741ea6cf1e222fa24d5601d85e5e3a25bb15ed0f",
+  "declares": {
+    "title": "wsc-poc/aiken-policy",
+    "description": "Aiken contracts for project 'wsc-poc/aiken-policy'",
+    "version": "0.0.0",
+    "compiler": "Aiken v1.1.21+42babe5",
+    "validators": 6
+  },
+  "upstream": {
+    "repo": "https://github.com/cardano-foundation/cip113-programmable-tokens-platform",
+    "path": "src/substandards/dummy",
+    "commit": "e63fa0af433ee39b2069521c2dd7579e1c919f89",
+    "note": "REACHABLE from origin/main, verified with `git merge-base --is-ancestor` after a fetch — not inferred from a PR being merged. Merged and reachable are different claims. ⚠ THIS PIN HAS NAMED AN ORPHAN TWICE. First 013c1154, a commit on no branch anywhere. Then 2e067fe, the PR branch head — GitHub SQUASHED PR #11, so the branch head became unreachable the moment it merged and b169255 with it. A sha that resolves locally, or that you watched being pushed, tells you nothing about whether anyone can fetch it. Full 40-char sha recorded deliberately: an abbreviation is one more thing that can drift.",
+    "ref": "main"
+  },
+  "blueprint_reproduced": true,
+  "provenance": "VERIFIED",
+  "reproduce": {
+    "requires": "Aiken v1.1.21+42babe5",
+    "command": "cd src/substandards/dummy && aiken build",
+    "note": "aiken.toml pins v1.1.21. ⚠ aiken BUILDS ANYWAY on a mismatched compiler, emitting only a warning — a blueprint built on the wrong toolchain is indistinguishable from a correct one by inspection. Check the preamble's compiler field, do not trust the environment."
+  },
+  "verified": {
+    "date": "2026-08-27",
+    "method": "REBUILT FROM THE PINNED REACHABLE COMMIT",
+    "findings": [
+      "OBSERVED: adds `transfer.issue.publish` and `transfer.transfer.publish`, which v0.1.0 lacked entirely. Without them the stake credentials of these two withdraw-0 validators CANNOT BE REGISTERED (a Conway RegCert runs the script under the PUBLISH purpose and falls through to `else`), so the substandard could not register, mint or transfer at all under CIP-113 0.5.x.",
+      "OBSERVED: byte-identical across two clean rebuilds with the pinned compiler.",
+      "⚠ PROVENANCE IS UNVERIFIED, NOT VERIFIED, AND THE DISTINCTION IS THE POINT. The named commit 013c115 exists ONLY IN A LOCAL CLONE on this workstation. It has not been pushed, reviewed or merged, so no third party can reproduce this artifact from the recorded commit. It becomes VERIFIED when that commit is pushed and the hash re-confirmed against the public repo — not before.",
+      "The publish handlers permit REGISTRATION ONLY (RegisterCredential -> True, everything else -> False). Deregistration is refused deliberately: an unregistered credential cannot be withdrawn against, so a permissive publish handler would let any third party disable every token governed by this substandard. Same shape as upstream's core validators.",
+      "v0.1.0 is retained alongside, unchanged. It is the artifact this SDK shipped and its provenance record is part of the history; it is also now known non-functional against 0.5.x.",
+      "For the record, v0.1.0 did NOT match this source project's own committed blueprint either: v0.1.0 is sha256 42d95e76… built with Aiken v1.1.19, while the platform repo's committed copy at 61374e3 is sha256 6574d840… built with v1.1.21. The SDK was shipping an artifact older than the source project's own."
+    ],
+    "reproduction": "Cloned the platform repo at e63fa0af433ee39b2069521c2dd7579e1c919f89 (verified an ancestor of origin/main), ran `aiken build` in src/substandards/dummy with Aiken v1.1.21 as aiken.toml pins. Resulting plutus.json sha256 c75e41f6ff3f71c278ac4765741ea6cf1e222fa24d5601d85e5e3a25bb15ed0f — byte-identical to this vendored artefact. preamble.compiler read FROM THE REBUILT ARTEFACT: Aiken v1.1.21+42babe5. The machine's own toolchain was v1.1.9 before and after; it was borrowed for the build and restored."
+  }
+}

package/blueprints/substandards/dummy/v0.2.0/plutus.json

@@ -0,0 +1,84 @@
+{
+  "preamble": {
+    "title": "wsc-poc/aiken-policy",
+    "description": "Aiken contracts for project 'wsc-poc/aiken-policy'",
+    "version": "0.0.0",
+    "plutusVersion": "v3",
+    "compiler": {
+      "name": "Aiken",
+      "version": "v1.1.21+42babe5"
+    },
+    "license": "Apache-2.0"
+  },
+  "validators": [
+    {
+      "title": "transfer.issue.withdraw",
+      "redeemer": {
+        "title": "redeemer",
+        "schema": {
+          "$ref": "#/definitions/Int"
+        }
+      },
+      "compiledCode": "588901010029800aba2aba1aab9eaab9dab9a488889660026464646644b30013370e900200144c8cdc39bad300a0054832004c024c020dd5001c56600266e1d2006002899192cc004cdc3a400060126ea8c02cc03000a294629410081bad300a0013008375400714a0803100618029baa00130070033006300700130060013003375400d149a26cac80081",
+      "hash": "4be2c6d3f5c5e66f45d20801c0d55341f0ae3b939187c9591ec29028"
+    },
+    {
+      "title": "transfer.issue.publish",
+      "redeemer": {
+        "title": "_r",
+        "schema": {
+          "$ref": "#/definitions/Data"
+        }
+      },
+      "compiledCode": "588901010029800aba2aba1aab9eaab9dab9a488889660026464646644b30013370e900200144c8cdc39bad300a0054832004c024c020dd5001c56600266e1d2006002899192cc004cdc3a400060126ea8c02cc03000a294629410081bad300a0013008375400714a0803100618029baa00130070033006300700130060013003375400d149a26cac80081",
+      "hash": "4be2c6d3f5c5e66f45d20801c0d55341f0ae3b939187c9591ec29028"
+    },
+    {
+      "title": "transfer.issue.else",
+      "redeemer": {
+        "schema": {}
+      },
+      "compiledCode": "588901010029800aba2aba1aab9eaab9dab9a488889660026464646644b30013370e900200144c8cdc39bad300a0054832004c024c020dd5001c56600266e1d2006002899192cc004cdc3a400060126ea8c02cc03000a294629410081bad300a0013008375400714a0803100618029baa00130070033006300700130060013003375400d149a26cac80081",
+      "hash": "4be2c6d3f5c5e66f45d20801c0d55341f0ae3b939187c9591ec29028"
+    },
+    {
+      "title": "transfer.transfer.withdraw",
+      "redeemer": {
+        "title": "redeemer",
+        "schema": {
+          "$ref": "#/definitions/Int"
+        }
+      },
+      "compiledCode": "588901010029800aba2aba1aab9eaab9dab9a488889660026464646644b30013370e900200144c8cdc39bad300a005482400cc024c020dd5001c56600266e1d2006002899192cc004cdc3a400060126ea8c02cc03000a294629410081bad300a0013008375400714a0803100618029baa00130070033006300700130060013003375400d149a26cac80081",
+      "hash": "6ae51f97696717eb0de100c151a30965a3c4ff97c167124b2b206ba9"
+    },
+    {
+      "title": "transfer.transfer.publish",
+      "redeemer": {
+        "title": "_r",
+        "schema": {
+          "$ref": "#/definitions/Data"
+        }
+      },
+      "compiledCode": "588901010029800aba2aba1aab9eaab9dab9a488889660026464646644b30013370e900200144c8cdc39bad300a005482400cc024c020dd5001c56600266e1d2006002899192cc004cdc3a400060126ea8c02cc03000a294629410081bad300a0013008375400714a0803100618029baa00130070033006300700130060013003375400d149a26cac80081",
+      "hash": "6ae51f97696717eb0de100c151a30965a3c4ff97c167124b2b206ba9"
+    },
+    {
+      "title": "transfer.transfer.else",
+      "redeemer": {
+        "schema": {}
+      },
+      "compiledCode": "588901010029800aba2aba1aab9eaab9dab9a488889660026464646644b30013370e900200144c8cdc39bad300a005482400cc024c020dd5001c56600266e1d2006002899192cc004cdc3a400060126ea8c02cc03000a294629410081bad300a0013008375400714a0803100618029baa00130070033006300700130060013003375400d149a26cac80081",
+      "hash": "6ae51f97696717eb0de100c151a30965a3c4ff97c167124b2b206ba9"
+    }
+  ],
+  "definitions": {
+    "Data": {
+      "title": "Data",
+      "description": "Any Plutus data."
+    },
+    "Int": {
+      "dataType": "integer"
+    }
+  }
+}

package/blueprints/substandards/freeze-and-seize/v0.1.0/UPSTREAM_PIN.json

@@ -0,0 +1,36 @@
+{
+  "artifact": "plutus.json",
+  "sha256": "9514852e32ad2181595b6c8e65349ce5636cb3a11d0acd2e47dec55ca9f21c8f",
+  "declares": {
+    "title": "cip113/freeze-unfreeze",
+    "description": "CIP113 Sub Standard for freeze/unfreeze capabilities",
+    "version": "0.0.0",
+    "compiler": "Aiken v1.1.21+42babe5",
+    "validators": 10
+  },
+  "upstream": {
+    "repo": "https://github.com/cardano-foundation/cip113-programmable-tokens-platform",
+    "path": "src/substandards/freeze-and-seize",
+    "commit": "12637c7c8c7b2bbd08b59100bf7ff714401618da",
+    "note": "⚠ THIS PIN PREVIOUSLY NAMED 013c11544839754d462e0603de59f4bbf1769479 — AN ORPHAN, reachable from no ref, while the provenance field said VERIFIED. The registry caught what our own guard did not: it cloned and failed with `fatal: reference is not a tree`, and the record went to FAILED. A `provenance: VERIFIED` field is a CLAIM; reachability is a FACT, and they had diverged. Now 12637c7c8c7b2bbd08b59100bf7ff714401618da, verified an ancestor of origin/main, whose src/substandards/freeze-and-seize/plutus.json is sha256 9514852e… — byte-identical to this vendored artefact.",
+    "ref": "main"
+  },
+  "blueprint_reproduced": true,
+  "provenance": "VERIFIED",
+  "reproduce": {
+    "requires": "Aiken v1.1.21+42babe5",
+    "command": "cd src/substandards/freeze-and-seize && aiken build",
+    "note": "aiken.toml pins compiler v1.1.21 and stdlib v3.0.0. ⚠ aiken BUILDS ANYWAY on a mismatched compiler, emitting only a warning — an artifact built on the wrong toolchain is indistinguishable from a correct one by inspection. Assert the compiler from THIS FILE'S `declares.compiler` and the artifact's own `preamble.compiler`, never from the shell you happen to be in."
+  },
+  "verified": {
+    "date": "2026-08-25",
+    "method": "REPRODUCED FROM SOURCE",
+    "findings": [
+      "OBSERVED: `aiken build` at platform commit 013c1154, with Aiken v1.1.21+42babe5 and stdlib v3.0.0, reproduces this artifact EXACTLY — sha256 9514852e32ad2181595b6c8e65349ce5636cb3a11d0acd2e47dec55ca9f21c8f. Byte-identical across two clean rebuilds, and byte-identical to the copy committed in the platform repo.",
+      "NO DIVERGENCE between the committed artifact and its source. That was the outcome worth checking for: a divergence would have meant the committed blueprint and the code it claims to come from disagree — the silent-corruption channel a shared, mutable toolchain creates.",
+      "The machine-global Aiken was on v1.1.9 when this was rebuilt. It was borrowed to v1.1.21 (the version aiken.toml pins) for the build and RESTORED to v1.1.9 immediately after; the platform repo was left clean.",
+      "This blueprint already carries `publish` handlers on both of its withdraw-0 validators (example_transfer_logic.issuer_admin_contract and .transfer), so — unlike the dummy substandard — it has no registration blocker under CIP-113 0.5.x. Its obstacles are entirely off-chain.",
+      "⚠ PROVENANCE IS VERIFIED FOR THE ARTIFACT, NOT AN ENDORSEMENT OF THE CODE. This blueprint is still written against 0.3.x semantics on the off-chain side: `freeze-and-seize` is quarantined (PLAN.md D-14) and refuses to initialise. Reproducibility says the bytes come from the named source; it says nothing about whether they are correct for the current protocol."
+    ]
+  }
+}

package/dist/core/cip171.d.ts

@@ -0,0 +1,149 @@
+/**
+ * CIP-171 — On-chain Smart Contract Bytecode Verification.
+ *
+ * Builds the transaction metadata payload (label 1984) that links one or more
+ * deployed script hashes back to a source repository + commit, so verifiers can
+ * reproduce the on-chain script hashes by re-compiling the source.
+ *
+ * Wire format per the CIP and the uplc-link reference impl:
+ *
+ *   { 1984: [ <chunk1>, <chunk2>, ..., <chunkN> ] }   ; each chunk ≤ 64 bytes
+ *
+ * Concatenated chunks decode to a single CBOR PlutusData, in the **six-field**
+ * layout — NOT the five-field one in the currently published CIP text:
+ *
+ *   Constr <compilerId>
+ *     [ 0: sourceUrl       : ByteArray (UTF-8)
+ *     , 1: commitHash      : ByteArray (20 or 32 RAW bytes, not UTF-8)
+ *     , 2: sourcePath      : ByteArray (UTF-8, "" for repo root)
+ *     , 3: compilerVersion : ByteArray (UTF-8)
+ *     , 4: env             : ByteArray (UTF-8, "" = built without --env)
+ *     , 5: parameters      : Map<ScriptHash(28b), List<ByteString>>
+ *     ]
+ *
+ * The six-field layout redefines constructor 0 IN PLACE. This matters more than
+ * a version bump would: the reference registry (uplc-link) parses strictly on
+ * `fields.size() == 6` and **drops anything else, log-only, by design**. A
+ * five-field record is therefore not rejected loudly — it is silently ignored.
+ * Encoder and decoder here are both strict on 6 for that reason.
+ *
+ * Byte-level compatibility is asserted against uplc-link's own cross-language
+ * fixture (their FE `metadata-encoding.test.ts` / BE `SerdeTest`), which anchors
+ * the TypeScript and Java implementations to the same bytes. See
+ * CIP171_CBOR_OPTIONS: the encoding is indefinite-length arrays with a
+ * DEFINITE-length, key-sorted map, which is not Evolution's default.
+ *
+ * The `parameters` map keys are the **un-parameterised** (raw) script hashes —
+ * i.e. Aiken's `validators[].hash` straight out of plutus.json. Each value is a
+ * list of **byte strings**, each wrapping the CBOR encoding of one parameter,
+ * which applied to the raw script via `applyParamsToScript` reproduce the
+ * deployed hash.
+ *
+ * The published CDDL says `parameter_list = [ * plutus_data ]` — inline. That is
+ * wrong against the reference, and wrong in the worst way: an inline record
+ * still parses and still shows six fields, but the registry reads `.bytes` on
+ * each element, gets empty strings, and stores a record with its parameters
+ * silently gone. Hence `Cip171ScriptEntry.params` is typed `HexString[]`, so the
+ * mistake is unrepresentable rather than merely documented.
+ *
+ * Limitation: each raw script can appear at most once in `parameters`. Deploying
+ * the same raw script twice with different params (e.g. two `always_fail`
+ * instances with distinct nonces) cannot be fully described in a single record.
+ */
+import type { HexString, ScriptHash, PlutusData } from "../types.js";
+/** CIP-10 metadata label registered for CIP-171. */
+export declare const CIP171_METADATA_LABEL = 1984n;
+/** Maximum size of any single metadata bytestring (Cardano protocol limit). */
+export declare const CIP171_MAX_CHUNK_BYTES = 64;
+/**
+ * PlutusData constructor IDs identifying the compiler + schema version.
+ * Sourced from the CIP-0171 README. Constructor 0 is Aiken (schema v1).
+ */
+export declare const CompilerType: {
+    readonly AIKEN: 0;
+    readonly PLUTARCH: 1;
+    readonly PLUTUS_TX: 2;
+    readonly SCALUS: 3;
+    readonly PLU_TS: 4;
+    readonly OPSHIN: 5;
+};
+export type CompilerType = (typeof CompilerType)[keyof typeof CompilerType];
+/** One entry in the CIP-171 parameters map. */
+export interface Cip171ScriptEntry {
+    /** 28-byte hex Blake2b-224 hash of the **un-parameterised** compiled script. */
+    rawScriptHash: ScriptHash;
+    /**
+     * Arguments applied to that raw script to produce the deployed hash, each as
+     * an **opaque byte string in hex** — NOT inline PlutusData.
+     *
+     * The published CDDL says `parameter_list = [ * plutus_data ]`, and it is
+     * wrong. The reference wire shape is `[ * bytes ]`: every element is a
+     * bytestring whose content is the parameter's CBOR encoding. Emitting inline
+     * PlutusData is not rejected by the registry — its parser reads `.bytes` on
+     * each element, gets an empty string, and stores a record whose parameters
+     * have silently vanished while the record itself still parses.
+     *
+     * The type is `string[]` rather than `PlutusData[]` precisely so that mistake
+     * cannot be made: use {@link cip171Param} to serialize PlutusData.
+     */
+    params: HexString[];
+}
+export interface Cip171Record {
+    compilerType: CompilerType;
+    /** Git-clone-compatible repo URL. */
+    sourceUrl: string;
+    /** Raw git commit hash hex (40 chars for SHA-1, 64 for SHA-256). */
+    commitHash: HexString;
+    /** Path inside the repo. Empty string for root. */
+    sourcePath?: string;
+    /** Exact compiler version string (e.g. "v1.1.21+42babe5"). */
+    compilerVersion: string;
+    /**
+     * Build environment — the value passed to the compiler's `--env` flag.
+     * Empty string (the default) means the script was built without `--env`;
+     * PlutusData has no null, so absence is encoded as empty bytes.
+     *
+     * Field index 4 of the six-field layout. See the note on the layout below.
+     */
+    env?: string;
+    /** Map keyed by raw script hash. */
+    scripts: Cip171ScriptEntry[];
+}
+export declare function buildCip171PlutusData(record: Cip171Record): PlutusData;
+/**
+ * CBOR options reproducing the reference registry's bytes exactly:
+ * indefinite-length arrays/lists (`9f…ff`) with a DEFINITE-length map (`a2`).
+ *
+ * Evolution's default (`CML_DATA_DEFAULT_OPTIONS`) uses indefinite maps (`bf`),
+ * which does not match. Verified byte-identical against uplc-link's
+ * cross-language fixture — see test/cip171.test.mjs.
+ */
+export declare const CIP171_CBOR_OPTIONS: {
+    readonly mode: "custom";
+    readonly useIndefiniteArrays: true;
+    readonly useIndefiniteMaps: false;
+    readonly useDefiniteForEmpty: true;
+    readonly sortMapKeys: true;
+    readonly useMinimalEncoding: true;
+};
+/**
+ * Encode a CIP-171 record to the chunked metadatum value (a list of byte
+ * chunks ≤ 64 bytes each). Drop the result straight into Evolution's
+ * `attachMetadata({ label: CIP171_METADATA_LABEL, metadata: chunks })`.
+ */
+export declare function buildCip171Metadatum(record: Cip171Record, chunkSize?: number): Uint8Array[];
+/** Slice a byte array into ≤ chunkSize pieces in order. */
+export declare function chunkBytes(bytes: Uint8Array, chunkSize: number): Uint8Array[];
+/** Reassemble a chunked metadatum and decode the embedded CIP-171 record. */
+export declare function decodeCip171Metadatum(chunks: ReadonlyArray<Uint8Array>): Cip171Record;
+export declare function decodeCip171PlutusData(data: PlutusData): Cip171Record;
+/**
+ * Serialize a PlutusData parameter to the hex byte string a CIP-171 record
+ * expects, using the encoding the reference registry reproduces.
+ *
+ * A verifier applies these to the un-parameterised script via
+ * `applyParamsToScript` and compares the resulting hash, so the bytes must be
+ * exactly what the original build applied.
+ */
+export declare function cip171Param(data: PlutusData): HexString;
+//# sourceMappingURL=cip171.d.ts.map

package/dist/core/cip171.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cip171.d.ts","sourceRoot":"","sources":["../../src/core/cip171.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMrE,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;CAOf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAM5E,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,aAAa,EAAE,UAAU,CAAC;IAC1B;;;;;;;;;;;;;OAaG;IACH,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,YAAY,CAAC;IAC3B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,UAAU,EAAE,SAAS,CAAC;IACtB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAqED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,CAuCtE;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;CAOtB,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,YAAY,EACpB,SAAS,GAAE,MAA+B,GACzC,UAAU,EAAE,CAMd;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAO7E;AAMD,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,YAAY,CAUrF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAoCrE;AAwBD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAEvD"}

package/dist/core/cip171.js

@@ -0,0 +1,284 @@
+/**
+ * CIP-171 — On-chain Smart Contract Bytecode Verification.
+ *
+ * Builds the transaction metadata payload (label 1984) that links one or more
+ * deployed script hashes back to a source repository + commit, so verifiers can
+ * reproduce the on-chain script hashes by re-compiling the source.
+ *
+ * Wire format per the CIP and the uplc-link reference impl:
+ *
+ *   { 1984: [ <chunk1>, <chunk2>, ..., <chunkN> ] }   ; each chunk ≤ 64 bytes
+ *
+ * Concatenated chunks decode to a single CBOR PlutusData, in the **six-field**
+ * layout — NOT the five-field one in the currently published CIP text:
+ *
+ *   Constr <compilerId>
+ *     [ 0: sourceUrl       : ByteArray (UTF-8)
+ *     , 1: commitHash      : ByteArray (20 or 32 RAW bytes, not UTF-8)
+ *     , 2: sourcePath      : ByteArray (UTF-8, "" for repo root)
+ *     , 3: compilerVersion : ByteArray (UTF-8)
+ *     , 4: env             : ByteArray (UTF-8, "" = built without --env)
+ *     , 5: parameters      : Map<ScriptHash(28b), List<ByteString>>
+ *     ]
+ *
+ * The six-field layout redefines constructor 0 IN PLACE. This matters more than
+ * a version bump would: the reference registry (uplc-link) parses strictly on
+ * `fields.size() == 6` and **drops anything else, log-only, by design**. A
+ * five-field record is therefore not rejected loudly — it is silently ignored.
+ * Encoder and decoder here are both strict on 6 for that reason.
+ *
+ * Byte-level compatibility is asserted against uplc-link's own cross-language
+ * fixture (their FE `metadata-encoding.test.ts` / BE `SerdeTest`), which anchors
+ * the TypeScript and Java implementations to the same bytes. See
+ * CIP171_CBOR_OPTIONS: the encoding is indefinite-length arrays with a
+ * DEFINITE-length, key-sorted map, which is not Evolution's default.
+ *
+ * The `parameters` map keys are the **un-parameterised** (raw) script hashes —
+ * i.e. Aiken's `validators[].hash` straight out of plutus.json. Each value is a
+ * list of **byte strings**, each wrapping the CBOR encoding of one parameter,
+ * which applied to the raw script via `applyParamsToScript` reproduce the
+ * deployed hash.
+ *
+ * The published CDDL says `parameter_list = [ * plutus_data ]` — inline. That is
+ * wrong against the reference, and wrong in the worst way: an inline record
+ * still parses and still shows six fields, but the registry reads `.bytes` on
+ * each element, gets empty strings, and stores a record with its parameters
+ * silently gone. Hence `Cip171ScriptEntry.params` is typed `HexString[]`, so the
+ * mistake is unrepresentable rather than merely documented.
+ *
+ * Limitation: each raw script can appear at most once in `parameters`. Deploying
+ * the same raw script twice with different params (e.g. two `always_fail`
+ * instances with distinct nonces) cannot be fully described in a single record.
+ */
+import { Data, Bytes } from "@evolution-sdk/evolution";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** CIP-10 metadata label registered for CIP-171. */
+export const CIP171_METADATA_LABEL = 1984n;
+/** Maximum size of any single metadata bytestring (Cardano protocol limit). */
+export const CIP171_MAX_CHUNK_BYTES = 64;
+/**
+ * PlutusData constructor IDs identifying the compiler + schema version.
+ * Sourced from the CIP-0171 README. Constructor 0 is Aiken (schema v1).
+ */
+export const CompilerType = {
+    AIKEN: 0,
+    PLUTARCH: 1,
+    PLUTUS_TX: 2,
+    SCALUS: 3,
+    PLU_TS: 4,
+    OPSHIN: 5,
+};
+// ---------------------------------------------------------------------------
+// Encoding
+// ---------------------------------------------------------------------------
+/**
+ * Build the CIP-171 PlutusData record (the structure stored under metadata 1984
+ * once chunks are reassembled and decoded).
+ */
+/** Hex string of exactly `bytes` bytes, case-insensitive. */
+function isHexOfBytes(s, ...bytes) {
+    return typeof s === "string" && bytes.some((b) => new RegExp(`^[0-9a-fA-F]{${b * 2}}$`).test(s));
+}
+/**
+ * Validate a record before it is encoded.
+ *
+ * A CIP-171 record is a PERMANENT, PUBLIC claim that a set of deployed scripts
+ * was produced from a named repository at a named commit. It goes on chain in
+ * transaction metadata and cannot be retracted. A malformed or placeholder
+ * commit hash therefore does not fail loudly at some later point — it becomes
+ * an immutable false provenance record that verifiers will try, and fail, to
+ * reproduce.
+ *
+ * This cannot detect a well-formed but WRONG commit. It does stop the realistic
+ * accidents: a null, empty, truncated or placeholder value reaching the chain
+ * because the blueprint's provenance was never actually established.
+ */
+function validateCip171Record(record) {
+    if (!isHexOfBytes(record.commitHash, 20, 32)) {
+        throw new Error(`CIP-171: commitHash must be a 20- or 32-byte hex string (40 or 64 hex chars), got ` +
+            `${record.commitHash === undefined ? "undefined" : JSON.stringify(record.commitHash)}. ` +
+            `This record is a permanent on-chain claim about where the deployed scripts came from — ` +
+            `do not emit one until the blueprint's provenance is actually known.`);
+    }
+    if (typeof record.sourceUrl !== "string" || record.sourceUrl.trim() === "") {
+        throw new Error("CIP-171: sourceUrl must be a non-empty repository URL");
+    }
+    if (typeof record.compilerVersion !== "string" || record.compilerVersion.trim() === "") {
+        throw new Error("CIP-171: compilerVersion must be non-empty — verifiers reproduce hashes with this exact compiler");
+    }
+    if (record.scripts.length === 0) {
+        throw new Error("CIP-171: a record with no scripts claims nothing; refusing to encode it");
+    }
+    for (const e of record.scripts) {
+        for (const p of e.params) {
+            if (typeof p !== "string" || !/^([0-9a-fA-F]{2})*$/.test(p) || p.length === 0) {
+                throw new Error(`CIP-171: parameters must be non-empty hex byte strings, got ${JSON.stringify(p)} ` +
+                    `for ${e.rawScriptHash}. Serialize PlutusData with cip171Param() — inline PlutusData ` +
+                    `is silently dropped by the reference registry.`);
+            }
+        }
+        if (!isHexOfBytes(e.rawScriptHash, 28)) {
+            throw new Error(`CIP-171: rawScriptHash must be a 28-byte hex string (56 hex chars), got ` +
+                `${JSON.stringify(e.rawScriptHash)}. These are the UN-parameterised hashes from ` +
+                `plutus.json, not the deployed ones.`);
+        }
+    }
+}
+export function buildCip171PlutusData(record) {
+    validateCip171Record(record);
+    const seen = new Set();
+    const entries = [];
+    for (const e of record.scripts) {
+        const k = e.rawScriptHash.toLowerCase();
+        if (seen.has(k)) {
+            throw new Error(`CIP-171: duplicate raw script hash ${k}. Each raw script may appear at most once.`);
+        }
+        seen.add(k);
+        entries.push([
+            Data.bytearray(e.rawScriptHash),
+            // Each param wrapped as a BYTESTRING. Inline PlutusData here is the
+            // published-CDDL reading and it corrupts silently — see Cip171ScriptEntry.
+            Data.list(e.params.map((p) => Data.bytearray(p))),
+        ]);
+    }
+    // Canonical map ordering: ascending by key bytes. The reference registry's
+    // fixtures are byte-sorted, and Evolution's `sortMapKeys` codec option does
+    // not reach Data maps, so the sort is done here rather than delegated.
+    entries.sort((a, b) => {
+        const ka = a[0], kb = b[0];
+        const n = Math.min(ka.length, kb.length);
+        for (let i = 0; i < n; i++)
+            if (ka[i] !== kb[i])
+                return ka[i] - kb[i];
+        return ka.length - kb.length;
+    });
+    return Data.constr(BigInt(record.compilerType), [
+        Data.bytearray(utf8ToHex(record.sourceUrl)),
+        Data.bytearray(record.commitHash),
+        Data.bytearray(utf8ToHex(record.sourcePath ?? "")),
+        Data.bytearray(utf8ToHex(record.compilerVersion)),
+        Data.bytearray(utf8ToHex(record.env ?? "")),
+        Data.map(entries),
+    ]);
+}
+/**
+ * CBOR options reproducing the reference registry's bytes exactly:
+ * indefinite-length arrays/lists (`9f…ff`) with a DEFINITE-length map (`a2`).
+ *
+ * Evolution's default (`CML_DATA_DEFAULT_OPTIONS`) uses indefinite maps (`bf`),
+ * which does not match. Verified byte-identical against uplc-link's
+ * cross-language fixture — see test/cip171.test.mjs.
+ */
+export const CIP171_CBOR_OPTIONS = {
+    mode: "custom",
+    useIndefiniteArrays: true,
+    useIndefiniteMaps: false,
+    useDefiniteForEmpty: true,
+    sortMapKeys: true,
+    useMinimalEncoding: true,
+};
+/**
+ * Encode a CIP-171 record to the chunked metadatum value (a list of byte
+ * chunks ≤ 64 bytes each). Drop the result straight into Evolution's
+ * `attachMetadata({ label: CIP171_METADATA_LABEL, metadata: chunks })`.
+ */
+export function buildCip171Metadatum(record, chunkSize = CIP171_MAX_CHUNK_BYTES) {
+    if (chunkSize < 1 || chunkSize > CIP171_MAX_CHUNK_BYTES) {
+        throw new Error(`CIP-171: chunk size must be in [1, ${CIP171_MAX_CHUNK_BYTES}]`);
+    }
+    const cbor = Data.toCBORBytes(buildCip171PlutusData(record), CIP171_CBOR_OPTIONS);
+    return chunkBytes(cbor, chunkSize);
+}
+/** Slice a byte array into ≤ chunkSize pieces in order. */
+export function chunkBytes(bytes, chunkSize) {
+    const chunks = [];
+    for (let i = 0; i < bytes.length; i += chunkSize) {
+        chunks.push(bytes.slice(i, Math.min(i + chunkSize, bytes.length)));
+    }
+    if (chunks.length === 0)
+        chunks.push(new Uint8Array(0));
+    return chunks;
+}
+// ---------------------------------------------------------------------------
+// Decoding (round-trip helper for tests & verifiers)
+// ---------------------------------------------------------------------------
+/** Reassemble a chunked metadatum and decode the embedded CIP-171 record. */
+export function decodeCip171Metadatum(chunks) {
+    const total = chunks.reduce((n, c) => n + c.length, 0);
+    const merged = new Uint8Array(total);
+    let off = 0;
+    for (const c of chunks) {
+        merged.set(c, off);
+        off += c.length;
+    }
+    const data = Data.fromCBORBytes(merged);
+    return decodeCip171PlutusData(data);
+}
+export function decodeCip171PlutusData(data) {
+    if (!(data instanceof Data.Constr)) {
+        throw new Error("CIP-171: expected Constr at top level");
+    }
+    const compilerType = Number(data.index);
+    const fields = data.fields;
+    // STRICT six fields. The reference registry drops anything else (log-only,
+    // by design), so a five-field record is unparseable there rather than
+    // partially understood. Failing loudly here beats emitting one.
+    if (fields.length !== 6) {
+        throw new Error(`CIP-171: expected exactly 6 fields, got ${fields.length}. ` +
+            `The five-field layout was redefined in place; records in the old shape are ` +
+            `silently dropped by the registry.`);
+    }
+    const sourceUrl = bytesToUtf8(asBytes(fields[0]));
+    const commitHash = Bytes.toHex(asBytes(fields[1]));
+    const sourcePath = bytesToUtf8(asBytes(fields[2]));
+    const compilerVersion = bytesToUtf8(asBytes(fields[3]));
+    const env = bytesToUtf8(asBytes(fields[4]));
+    const paramsField = fields[5];
+    if (!(paramsField instanceof globalThis.Map)) {
+        throw new Error("CIP-171: expected Map for parameters field");
+    }
+    const scripts = [];
+    for (const [k, v] of paramsField.entries()) {
+        const rawScriptHash = Bytes.toHex(asBytes(k));
+        if (!Array.isArray(v)) {
+            throw new Error(`CIP-171: expected List for params of ${rawScriptHash}`);
+        }
+        // Elements are bytestrings on the wire; surface them as hex, matching the
+        // encoder's input shape so a decode/encode round-trip is lossless.
+        scripts.push({ rawScriptHash, params: v.map((p) => Bytes.toHex(asBytes(p))) });
+    }
+    return { compilerType, sourceUrl, commitHash, sourcePath, compilerVersion, env, scripts };
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function asBytes(d) {
+    if (!(d instanceof Uint8Array)) {
+        throw new Error("CIP-171: expected ByteArray (Uint8Array)");
+    }
+    return d;
+}
+function bytesToUtf8(bytes) {
+    return bytes.length === 0 ? "" : new TextDecoder().decode(bytes);
+}
+function utf8ToHex(s) {
+    const bytes = new TextEncoder().encode(s);
+    let out = "";
+    for (const b of bytes)
+        out += b.toString(16).padStart(2, "0");
+    return out;
+}
+/**
+ * Serialize a PlutusData parameter to the hex byte string a CIP-171 record
+ * expects, using the encoding the reference registry reproduces.
+ *
+ * A verifier applies these to the un-parameterised script via
+ * `applyParamsToScript` and compares the resulting hash, so the bytes must be
+ * exactly what the original build applied.
+ */
+export function cip171Param(data) {
+    return Data.toCBORHex(data, CIP171_CBOR_OPTIONS);
+}
+//# sourceMappingURL=cip171.js.map

package/dist/core/cip171.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cip171.js","sourceRoot":"","sources":["../../src/core/cip171.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAGvD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAE3C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;CACD,CAAC;AAkDX,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;GAGG;AACH,6DAA6D;AAC7D,SAAS,YAAY,CAAC,CAAU,EAAE,GAAG,KAAe;IAClD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,oBAAoB,CAAC,MAAoB;IAChD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,oFAAoF;YACpF,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI;YACxF,yFAAyF;YACzF,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CACb,+DAA+D,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;oBACnF,OAAO,CAAC,CAAC,aAAa,gEAAgE;oBACtF,gDAAgD,CACjD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0EAA0E;gBAC1E,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,+CAA+C;gBACjF,qCAAqC,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAoC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,sCAAsC,CAAC,4CAA4C,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/B,oEAAoE;YACpE,2EAA2E;YAC3E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,EAAE,GAAI,CAAC,CAAC,CAAC,CAAgB,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,CAAgB,CAAC;QAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;QAC9C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,QAAQ;IACd,mBAAmB,EAAE,IAAI;IACzB,iBAAiB,EAAE,KAAK;IACxB,mBAAmB,EAAE,IAAI;IACzB,WAAW,EAAE,IAAI;IACjB,kBAAkB,EAAE,IAAI;CAChB,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAoB,EACpB,YAAoB,sBAAsB;IAE1C,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,sBAAsB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,sCAAsC,sBAAsB,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAClF,OAAO,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,SAAiB;IAC7D,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,MAAiC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAgB;IACrD,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAiB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,sEAAsE;IACtE,gEAAgE;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,CAAC,MAAM,IAAI;YAC5D,6EAA6E;YAC7E,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,WAAW,YAAY,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,0EAA0E;QAC1E,mEAAmE;QACnE,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC5F,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,OAAO,CAAC,CAAa;IAC5B,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AACnD,CAAC"}