@eco-incorp/sauce 0.99.1 → 0.99.2

package/sdk/dist/svm/verify.d.ts

@@ -1,4 +1,4 @@
-import type { Address } from "@solana/kit";
+import { type Address } from "@solana/kit";
 export { decodePortalCalldataWithAccounts, encodePortalCalldataWithAccounts, extractSvmSettleFromCalls, extractSvmSettleFromIntent, type PortalAccountMeta, type PortalCalldataWithAccounts, type PortalCalldataWithAccountsInput, type BytesInput, type UniversalAddressInput, type SvmIntentCallLike, type SvmIntentLike, type ExtractSvmSettleOptions, type ExtractedSvmSettle, type SvmSettleTarget, } from "./intent.js";
 /**
  * The values a settle program was compiled with. Both are folded into the bytecode, so they are what
@@ -41,172 +41,66 @@ export interface SvmSettleVerification {
  * Never throws for a non-genuine program; returns `{ genuine: false, mismatch }`.
  */
 export declare function verifySvmSettleProgram(bytecode: Uint8Array, manifest: SettleManifestLike, expected: SvmSettleExpectation): SvmSettleVerification;
-/** An account entry as either the base58 address itself or an object carrying it (the recipes split
- *  response uses `{ pubkey, isSigner, isWritable, ref }`; a resolved instruction meta uses `{ address }`). */
+/** Released engine CPI wire, or an explicitly selected pre-gate inspection format. */
+export type SvmExecutionWireFormat = "gated-v1" | "legacy-ungated";
 export type SvmSettleAccountLike = string | {
     address?: string;
     pubkey?: string;
     ref?: string;
 };
 export interface SvmSettleExecutionInput {
-    /**
-     * The instruction data. On the released engine that is the 8-byte discriminator and nothing else:
-     * `executeFromAccount` reads account 0's data verbatim, and a settle's params are defines folded
-     * into the bytecode. From the recipes split response this is
-     * base64-decode(`execution.instructionData`); from an executed instruction it is the raw ix data.
-     */
+    /** Raw ENGINE instruction data, not a Kitchen cook instruction. */
     instructionData: Uint8Array;
-    /**
-     * The instruction's account list — EITHER the user tail alone (`3N+3`, the recipes
-     * `execution.accounts[]`) OR the full list with the leading buffer (`3N+4`, a raw instruction). The
-     * leading buffer is detected by length and stripped; each entry is a base58 address or an object
-     * with `.address`/`.pubkey`.
-     */
+    /** Full gated CPI list: [user accounts..., Pot], or [code, user accounts..., Pot] when staged. */
     accounts: readonly SvmSettleAccountLike[];
+    /** Defaults to the released gated wire. Legacy mode accepts a user tail or a code-prefixed tail. */
+    wireFormat?: SvmExecutionWireFormat;
+}
+/** Parsed derivation material only; this does not validate the Pot PDA or its signature. */
+export interface SvmExecutionGate {
+    owner: Address;
+    salt: Uint8Array;
+    bump: number;
+    pot: Address;
 }
 export interface DecodedSvmSettleExecution {
-    /**
-     * Which engine instruction the calldata is.
-     *
-     * `execute_and_close` is gone with the pre-release engine, and so are the `pin` and `slice` this
-     * used to report: the released engine carries no payload here, so there is nothing on this wire
-     * committing to the staged bytecode. **A caller that wants that commitment must read the
-     * KITCHEN's `cook_from_account`**, whose `pin` refuses unless the staged bytes hash to it — see
-     * `kitchen.ts`. Reporting a pin from here would now always be `undefined`, which reads as "no pin
-     * was given" rather than "this wire cannot carry one".
-     */
     instruction: "execute" | "execute_from_account";
-    /** The escrow count inferred from the account-list length. */
+    wireFormat: SvmExecutionWireFormat;
+    gate?: SvmExecutionGate;
+    codeAccount?: Address;
     escrowCount: number;
-    /** The canonical ref order for `escrowCount` — `svmSettleRefs(escrowCount)`. */
     refs: string[];
-    /** Each settle account ref → the pubkey attached at that slot, positionally against `refs`. */
     accounts: Record<string, Address>;
-    /** True iff a leading bytecode-buffer account was detected in `accounts` and skipped. */
     hadBufferAccount: boolean;
-    /** Whether the provided account labels matched the canonical refs, or null if entries carried no
-     *  `ref` (a bare address list). Identities are resolved positionally regardless — this only reports
-     *  whether a caller-supplied label agreed with the slot it landed in. */
+    /** Labels are diagnostic; identities always come from account positions. */
     labeledRefsConsistent: boolean | null;
 }
 /**
- * Decodes a full settle execution — the calldata AND the account list — into its staged-execute header
- * and resolved account identities in one call. It parses the execute payload grammar off
- * `instructionData`, infers the escrow count from the account-list length, and resolves each
- * `svmSettleRefs(N)` slot to the attached pubkey. Consumes the sauce-recipes `split=1` settle sauce
- * (`execution.instructionData` + `execution.accounts[]`) directly, and equally an executed engine
- * instruction (full data + `[buffer, …user]` account list).
- *
- * `minOut`/`splCount` are NOT among the results, and cannot be: they are defines folded into the
- * bytecode, so no amount of reading the calldata recovers them. `verifySvmSettleExecution` establishes
- * them the only way available — by recompiling with the values a caller expects and byte-comparing.
- *
- * What IS here is not trusted either: the header comes from the raw calldata (not from a receipt), and
- * the account identities are resolved positionally against the canonical refs, never from
- * caller-supplied labels — `labeledRefsConsistent` only reports whether a label the caller happened to
- * attach agreed with the slot it landed in.
- *
- * IMPORTANT — this is a STRUCTURAL decode, NOT a genuineness proof. A staged settle's calldata
- * carries no structural signature: any staged Sauce execute with a `3N+3`/`3N+4` account count has
- * this exact shape. So a non-settle execution (or an adversarial decoy) decodes here without error
- * into any staged program at all. To prove the execution actually runs the genuine settle program,
- * use `verifySvmSettleExecution` (or `extractSvmSettleFromIntent`), which ties the calldata to the
- * SDK's own recompiled canonical settle bytecode.
- *
- * The EVM half splits the same two questions the same way — `decodeSettleProgram` is structural and
- * accepts any 362-byte program, `validateSettleProgram` is the genuineness proof — but reaches the
- * second one WITHOUT a compiler: an EVM settle's params ride the payload after the program, so the
- * program is a constant and one `keccak256` settles it. Here they are `defines` folded into the
- * bytecode, which is why this side recompiles.
+ * Decode the released engine's 65-byte gate header and full CPI account list.
+ * This inspects bytes and positions; it authenticates neither execution nor account roles.
+ * A Kitchen instruction has a different layout and must be decoded separately.
  */
 export declare function decodeSvmSettleExecution(input: SvmSettleExecutionInput): DecodedSvmSettleExecution;
 export interface SvmSettleExecutionVerifyInput extends SvmSettleExecutionInput, SvmSettleExpectation {
-    /**
-     * OPTIONAL. The compiled settle bytecode this execution runs (from the recipes split response this is
-     * base64-decode(`sauces[settleIdx].program.bytecode`); from an eco-solver intent it is
-     * base64-decode(`fulfillmentMetadata.svm.sauceStage.buffers[settleIdx].bytecode`)). When supplied, the
-     * actual staged bytes are byte-compared to the canonical settle and tied to the pin.
-     *
-     * A partner usually does NOT have this (only the on-chain `route.calls`), and does not need it: the SDK
-     * recompiles the canonical settle itself and proves genuineness via the calldata pin (see below).
-     */
+    /** Staged bytes obtained independently from the code account that will execute. */
     bytecode?: Uint8Array;
-    /**
-     * OPTIONAL. The 32-byte content pin committing to the staged bytes.
-     *
-     * **Supplied by the caller, not read off this instruction.** It used to be decoded from the
-     * engine's own calldata; the released engine's `executeFromAccount` carries no payload, so the
-     * commitment lives one layer up — in the KITCHEN's `cook_from_account`, whose `pin` refuses unless
-     * the staged bytes hash to it. Read it from that instruction and pass it here.
-     *
-     * Without it, supplying `bytecode` proves only that YOUR copy is canonical: nothing ties those
-     * bytes to the code account this execution actually runs, and the verdict says so rather than
-     * calling the execution genuine.
-     */
+    /** Caller-supplied SHA-256 pin, normally from the matching Kitchen cook_from_account. */
     pin?: Uint8Array;
 }
-/**
- * How genuineness was established. The verdicts differ in what they actually prove, and the gap
- * between the strongest and the weakest is the whole reason this type is not a boolean.
- *
- * `inline-bytecode` — an `execute`: the program is IN the calldata, and it byte-matches the
- * canonical settle. The bytes verified are the bytes that run, with nothing in between. A pin means
- * nothing on this path (the engine never reads one) and cannot make an inline execution genuine.
- *
- * `bytecode` — an `execute_from_account` where the caller supplied the staged bytes: they match the
- * canonical settle AND the caller's pin ties to them. A pinless calldata commits to nothing, so it
- * is never genuine here however good the bytes are.
- *
- * `caller-asserted-pin` — an `execute_from_account` with no bytecode, whose pin equals
- * `sha256(canonical settle)`. **This is not an on-chain guarantee.** The released engine's
- * `execute_from_account` has no payload, so nothing enforces this pin at execute time; it means
- * "the caller asserts these staged bytes hash to this", and it is only as good as the caller's
- * evidence — a kitchen `cook_from_account` they witnessed. It was named `pin` while documented as
- * engine-enforced, which is precisely the belief that made it dangerous.
- *
- * `none` — no pin and no bytecode. Genuineness cannot be established from structure alone.
- *
- * The instruction's CALLEE is outside every verdict here: an arbitrary program accepting the same
- * discriminator can do whatever it likes — see `ExtractedSvmSettle.target`, whose `program` state a
- * caller must compare against the engine program id it trusts.
- */
 export type SvmSettleVerifiedBy = "inline-bytecode" | "bytecode" | "caller-asserted-pin" | "none";
 export interface SvmSettleExecutionVerification extends DecodedSvmSettleExecution {
-    /** True iff the execution provably runs the genuine `svmSettleSource(escrowCount)` program. */
+    /** Program matches the expected settlement; staged results depend on the caller's pin evidence. */
     genuine: boolean;
-    /** How `genuine` was established (or why it could not be). */
     verifiedBy: SvmSettleVerifiedBy;
-    /** `sha256(canonical recompiled settle)` === the calldata pin. null iff the calldata carried no pin. */
     pinMatchesCanonical: boolean | null;
-    /** Only when `bytecode` was supplied: `sha256(bytecode)` === the calldata pin. null otherwise. */
     pinMatchesBytecode: boolean | null;
-    /** Only when `bytecode` was supplied: the bytes byte-match the canonical settle. null otherwise. */
     bytecodeMatchesCanonical: boolean | null;
-    /** Present iff not genuine: what failed. */
     mismatch?: string;
 }
 /**
- * The genuineness check for a settle execution — the crucial companion to `decodeSvmSettleExecution`,
- * whose structural decode alone CANNOT tell a settle from any other staged Sauce execute (an account
- * count is not a signature). This ties the calldata to the SDK's own recompiled canonical settle
- * bytecode, in one of two ways, no partner bytecode required for either verdict:
- *
- *   - `bytecode` supplied → byte-compare it to `compileCanonicalSettle(escrowCount)` AND require the pin
- *     to tie to it (`sha256(bytecode) === pin`). Proves the exact staged bytes ARE the settle and WILL run.
- *     Both halves are load-bearing: calldata with no pin commits to no program at all, so bytes alone —
- *     however genuine — prove nothing about what runs, and the verdict is not genuine.
- *   - no bytecode, but a pin was supplied → check `pin === sha256(canonical settle)`. NOTHING ENFORCES
- *     THIS ON CHAIN: the released engine's `execute_from_account` has no payload, so this is the
- *     caller asserting the staged bytes hash to that value, and it is worth exactly what their
- *     evidence is worth — hence `verifiedBy: 'caller-asserted-pin'`.
- *   - neither → `genuine: false`, `verifiedBy: 'none'` (structure alone is not proof).
- *
- * An `execute` is handled separately and BEFORE any of the above: its program is inline in the
- * calldata, so it is compared directly and a pin cannot make it genuine.
- *
- * Because `minOut`/`splCount` are folded into the bytecode, a `genuine` result also proves the program
- * enforces the `minOut`/`splCount` passed in — leaving only the resolved account identities for the
- * caller to check. Never throws beyond the shared structural decode; reports failures in `mismatch`.
+ * Compare inline bytes, or caller-supplied staged bytes/pin, with a canonical recompile.
+ * This does not check the callee, gate derivation/signature, account roles, or transaction success.
+ * Engine calldata has no staged content pin; the caller must connect its pin to the code account.
  */
 export declare function verifySvmSettleExecution(input: SvmSettleExecutionVerifyInput): SvmSettleExecutionVerification;
 //# sourceMappingURL=verify.d.ts.map

package/sdk/dist/svm/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/svm/verify.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAQ3C,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAIrB;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,qBAAqB;IACpC,+GAA+G;IAC/G,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kGAAkG;IAClG,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA+BD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,UAAU,EACpB,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,EAAE,oBAAoB,GAC7B,qBAAqB,CAiCvB;AAiBD;8GAC8G;AAC9G,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AA+ChG,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,eAAe,EAAE,UAAU,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;OASG;IACH,WAAW,EAAE,SAAS,GAAG,sBAAsB,CAAC;IAChD,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,+FAA+F;IAC/F,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,yFAAyF;IACzF,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;6EAEyE;IACzE,qBAAqB,EAAE,OAAO,GAAG,IAAI,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,yBAAyB,CAkC3B;AAED,MAAM,WAAW,6BACf,SAAQ,uBAAuB,EAAE,oBAAoB;IACrD;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,UAAU,GAAG,qBAAqB,GAAG,MAAM,CAAC;AAElG,MAAM,WAAW,8BAA+B,SAAQ,yBAAyB;IAC/E,+FAA+F;IAC/F,OAAO,EAAE,OAAO,CAAC;IACjB,8DAA8D;IAC9D,UAAU,EAAE,mBAAmB,CAAC;IAChC,wGAAwG;IACxG,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,kGAAkG;IAClG,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,oGAAoG;IACpG,wBAAwB,EAAE,OAAO,GAAG,IAAI,CAAC;IACzC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,6BAA6B,GACnC,8BAA8B,CAmFhC"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/svm/verify.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAQvE,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAIrB;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,qBAAqB;IACpC,+GAA+G;IAC/G,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kGAAkG;IAClG,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA+BD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,UAAU,EACpB,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,EAAE,oBAAoB,GAC7B,qBAAqB,CAiCvB;AAED,sFAAsF;AACtF,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAEnE,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,eAAe,EAAE,UAAU,CAAC;IAC5B,kGAAkG;IAClG,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1C,oGAAoG;IACpG,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACrC;AAED,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,SAAS,GAAG,sBAAsB,CAAC;IAChD,UAAU,EAAE,sBAAsB,CAAC;IACnC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,4EAA4E;IAC5E,qBAAqB,EAAE,OAAO,GAAG,IAAI,CAAC;CACvC;AA0CD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,yBAAyB,CAsD3B;AAED,MAAM,WAAW,6BACf,SAAQ,uBAAuB,EAAE,oBAAoB;IACrD,mFAAmF;IACnF,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,yFAAyF;IACzF,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,UAAU,GAAG,qBAAqB,GAAG,MAAM,CAAC;AAElG,MAAM,WAAW,8BAA+B,SAAQ,yBAAyB;IAC/E,mGAAmG;IACnG,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,mBAAmB,CAAC;IAChC,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,wBAAwB,EAAE,OAAO,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,6BAA6B,GACnC,8BAA8B,CA8DhC"}

package/sdk/dist/svm/verify.js

@@ -1,26 +1,7 @@
-// @eco-incorp/sauce/svm/verify — the SVM counterpart of `@eco-incorp/sauce/verify`, for a
-// compiled `settle` program.
-//
-// VERIFICATION IS BY RECOMPILE, on both VMs. A settle program's per-execution values
-// (`minOut`, `splCount`) are compile-time `defines`, constant-folded into the bytecode, and every
-// account identity is an attach slot that never appears in it. So there is nothing to decode OUT of
-// a program — and nothing that needs to be: a caller checking an execution already knows the values
-// it expects. What it needs is proof that the program it was handed IS the one those values produce.
-//
-// `verifySvmSettleProgram` is that proof: recompile `svmSettleSource(N)` with the expected defines
-// and byte-compare. A match establishes THREE things at once — the logic is the genuine settle
-// logic, `minOut` is the expected floor, and `splCount` is the expected token-program split —
-// because all three are folded into the same bytes. Under the older staged form the blob was a pure
-// function of N and the scalars rode the instruction payload, so they had to be decoded and checked
-// separately; binding them into the program is strictly stronger.
-//
-// The account identities are never in the bytecode on SVM in either form — Solana requires them
-// attached — so they come from the executed instruction's account list, matched positionally against
-// `svmSettleRefs(N)`. `decodeSvmSettleExecution` does that half; `verifySvmSettleExecution` adds the
-// recompile check and the pin↔bytecode tie.
-//
-// Unlike `@eco-incorp/sauce/verify`, this pulls the compiler in to recompile — a node-side check.
+// SVM settlement identity is checked by recompiling the expected parameters. Account addresses
+// come from the instruction separately; successful verification does not authenticate execution.
 import { createHash } from "node:crypto";
+import { address, getAddressDecoder } from "@solana/kit";
 import { compileWithRs } from "../routes/rs-compile.js";
 import { EXECUTE_DISCRIMINATOR, EXECUTE_FROM_ACCOUNT_DISCRIMINATOR } from "./engine.js";
 import { SVM_MAX_ESCROWS, svmSettleRefs, svmSettleSource } from "./recipes/index.js";
@@ -100,100 +81,87 @@ export function verifySvmSettleProgram(bytecode, manifest, expected) {
     }
     return { genuine: true, escrowCount, refs };
 }
-function accountAddress(a, i) {
-    const raw = typeof a === "string" ? a : (a.address ?? a.pubkey);
+const GATED_PROGRAM_OFFSET = 8 + 32 + 32 + 1;
+function accountAddress(account, index) {
+    const raw = typeof account === "string" ? account : (account.address ?? account.pubkey);
     if (typeof raw !== "string" || raw.length === 0) {
-        throw new Error(`account ${i} is not an address (expected a base58 string, or an object with .address/.pubkey)`);
+        throw new Error("account " + index + " is not an address (expected a base58 string, or .address/.pubkey)");
     }
-    return raw;
+    return address(raw);
 }
-/** Classifies an account-list length as a settle shape: `3N+3` is the user tail alone, `3N+4` is that
- *  tail with the leading bytecode-buffer account. Returns null for any other length (the two never
- *  collide — `3N+3 = 3M+4` has no integer solution). */
-function classifyAccountList(length) {
-    for (const hasBuffer of [false, true]) {
-        const userCount = hasBuffer ? length - 1 : length;
-        if ((userCount - 3) % 3 !== 0)
-            continue;
-        const escrowCount = (userCount - 3) / 3;
-        if (Number.isInteger(escrowCount) && escrowCount >= 1 && escrowCount <= SVM_MAX_ESCROWS) {
-            return { escrowCount, hasBuffer };
-        }
-    }
-    return null;
-}
-/**
- * Names the engine instruction from its discriminator alone.
- *
- * Replaces a parser for the `[disc][flags][pin?][slice?]` grammar the pre-release engine took here;
- * the released engine has no payload beyond the discriminator, so there is nothing left to parse.
- */
-function classifyEngineInstruction(data) {
+function engineInstruction(data, wireFormat) {
     if (!(data instanceof Uint8Array))
         throw new Error("instructionData must be a Uint8Array");
-    if (data.length < 8)
-        throw new Error(`instructionData is ${data.length} bytes — too short for an 8-byte discriminator`);
-    const disc = data.subarray(0, 8);
-    if (bytesEqual(disc, EXECUTE_FROM_ACCOUNT_DISCRIMINATOR))
+    if (wireFormat !== "gated-v1" && wireFormat !== "legacy-ungated") {
+        throw new Error("unrecognized SVM execution wire format");
+    }
+    const headerBytes = wireFormat === "gated-v1" ? GATED_PROGRAM_OFFSET : 8;
+    if (data.length < headerBytes) {
+        throw new Error("instructionData requires at least " + headerBytes + " bytes for " + wireFormat);
+    }
+    const discriminator = data.subarray(0, 8);
+    if (bytesEqual(discriminator, EXECUTE_FROM_ACCOUNT_DISCRIMINATOR)) {
+        if (data.length !== headerBytes) {
+            throw new Error("execute_from_account does not accept bytes after its header");
+        }
         return "execute_from_account";
-    if (bytesEqual(disc, EXECUTE_DISCRIMINATOR))
+    }
+    if (bytesEqual(discriminator, EXECUTE_DISCRIMINATOR))
         return "execute";
     throw new Error("instructionData does not begin with a Sauce engine execute discriminator");
 }
 /**
- * Decodes a full settle execution — the calldata AND the account list — into its staged-execute header
- * and resolved account identities in one call. It parses the execute payload grammar off
- * `instructionData`, infers the escrow count from the account-list length, and resolves each
- * `svmSettleRefs(N)` slot to the attached pubkey. Consumes the sauce-recipes `split=1` settle sauce
- * (`execution.instructionData` + `execution.accounts[]`) directly, and equally an executed engine
- * instruction (full data + `[buffer, …user]` account list).
- *
- * `minOut`/`splCount` are NOT among the results, and cannot be: they are defines folded into the
- * bytecode, so no amount of reading the calldata recovers them. `verifySvmSettleExecution` establishes
- * them the only way available — by recompiling with the values a caller expects and byte-comparing.
- *
- * What IS here is not trusted either: the header comes from the raw calldata (not from a receipt), and
- * the account identities are resolved positionally against the canonical refs, never from
- * caller-supplied labels — `labeledRefsConsistent` only reports whether a label the caller happened to
- * attach agreed with the slot it landed in.
- *
- * IMPORTANT — this is a STRUCTURAL decode, NOT a genuineness proof. A staged settle's calldata
- * carries no structural signature: any staged Sauce execute with a `3N+3`/`3N+4` account count has
- * this exact shape. So a non-settle execution (or an adversarial decoy) decodes here without error
- * into any staged program at all. To prove the execution actually runs the genuine settle program,
- * use `verifySvmSettleExecution` (or `extractSvmSettleFromIntent`), which ties the calldata to the
- * SDK's own recompiled canonical settle bytecode.
- *
- * The EVM half splits the same two questions the same way — `decodeSettleProgram` is structural and
- * accepts any 362-byte program, `validateSettleProgram` is the genuineness proof — but reaches the
- * second one WITHOUT a compiler: an EVM settle's params ride the payload after the program, so the
- * program is a constant and one `keccak256` settles it. Here they are `defines` folded into the
- * bytecode, which is why this side recompiles.
+ * Decode the released engine's 65-byte gate header and full CPI account list.
+ * This inspects bytes and positions; it authenticates neither execution nor account roles.
+ * A Kitchen instruction has a different layout and must be decoded separately.
  */
 export function decodeSvmSettleExecution(input) {
-    const instruction = classifyEngineInstruction(input.instructionData);
-    const shape = classifyAccountList(input.accounts.length);
-    if (shape === null) {
-        throw new Error(`account list has ${input.accounts.length} accounts, which is neither 3N+3 (user tail) nor 3N+4 (with buffer) for any settle escrow count 1..${SVM_MAX_ESCROWS}`);
+    const wireFormat = input.wireFormat ?? "gated-v1";
+    const instruction = engineInstruction(input.instructionData, wireFormat);
+    const gated = wireFormat === "gated-v1";
+    const hasBuffer = gated
+        ? instruction === "execute_from_account"
+        : escrowCountFromPlan(input.accounts.length) === null;
+    const prefixCount = hasBuffer ? 1 : 0;
+    const suffixCount = gated ? 1 : 0;
+    const escrowCount = escrowCountFromPlan(input.accounts.length - prefixCount - suffixCount);
+    if (escrowCount === null) {
+        throw new Error("account list has " +
+            input.accounts.length +
+            " accounts: expected 3N+3 settlement accounts" +
+            (hasBuffer ? ", a leading code account" : "") +
+            (gated ? ", and a trailing Pot" : "") +
+            " for an escrow count 1.." +
+            SVM_MAX_ESCROWS);
     }
-    const { escrowCount, hasBuffer } = shape;
+    const userAccounts = input.accounts.slice(prefixCount, input.accounts.length - suffixCount);
     const refs = svmSettleRefs(escrowCount);
-    const userAccounts = hasBuffer ? input.accounts.slice(1) : input.accounts;
     const accounts = {};
     let labeledRefsConsistent = true;
-    refs.forEach((ref, i) => {
-        accounts[ref] = accountAddress(userAccounts[i], i);
-        const entry = userAccounts[i];
-        if (typeof entry === "object" && entry !== null && typeof entry.ref === "string") {
-            if (entry.ref !== ref)
+    refs.forEach((ref, index) => {
+        const account = userAccounts[index];
+        accounts[ref] = accountAddress(account, index + prefixCount);
+        if (typeof account === "object" && account !== null && typeof account.ref === "string") {
+            if (account.ref !== ref)
                 labeledRefsConsistent = false;
         }
         else if (labeledRefsConsistent !== false) {
-            labeledRefsConsistent = null; // at least one entry carried no label → can't confirm
+            labeledRefsConsistent = null;
         }
     });
+    const gate = gated
+        ? {
+            owner: getAddressDecoder().decode(input.instructionData.subarray(8, 40)),
+            salt: input.instructionData.slice(40, 72),
+            bump: input.instructionData[72],
+            pot: accountAddress(input.accounts[input.accounts.length - 1], input.accounts.length - 1),
+        }
+        : undefined;
     return {
         instruction,
+        wireFormat,
+        ...(gate ? { gate } : {}),
+        ...(hasBuffer ? { codeAccount: accountAddress(input.accounts[0], 0) } : {}),
         escrowCount,
         refs,
         accounts,
@@ -202,35 +170,13 @@ export function decodeSvmSettleExecution(input) {
     };
 }
 /**
- * The genuineness check for a settle execution — the crucial companion to `decodeSvmSettleExecution`,
- * whose structural decode alone CANNOT tell a settle from any other staged Sauce execute (an account
- * count is not a signature). This ties the calldata to the SDK's own recompiled canonical settle
- * bytecode, in one of two ways, no partner bytecode required for either verdict:
- *
- *   - `bytecode` supplied → byte-compare it to `compileCanonicalSettle(escrowCount)` AND require the pin
- *     to tie to it (`sha256(bytecode) === pin`). Proves the exact staged bytes ARE the settle and WILL run.
- *     Both halves are load-bearing: calldata with no pin commits to no program at all, so bytes alone —
- *     however genuine — prove nothing about what runs, and the verdict is not genuine.
- *   - no bytecode, but a pin was supplied → check `pin === sha256(canonical settle)`. NOTHING ENFORCES
- *     THIS ON CHAIN: the released engine's `execute_from_account` has no payload, so this is the
- *     caller asserting the staged bytes hash to that value, and it is worth exactly what their
- *     evidence is worth — hence `verifiedBy: 'caller-asserted-pin'`.
- *   - neither → `genuine: false`, `verifiedBy: 'none'` (structure alone is not proof).
- *
- * An `execute` is handled separately and BEFORE any of the above: its program is inline in the
- * calldata, so it is compared directly and a pin cannot make it genuine.
- *
- * Because `minOut`/`splCount` are folded into the bytecode, a `genuine` result also proves the program
- * enforces the `minOut`/`splCount` passed in — leaving only the resolved account identities for the
- * caller to check. Never throws beyond the shared structural decode; reports failures in `mismatch`.
+ * Compare inline bytes, or caller-supplied staged bytes/pin, with a canonical recompile.
+ * This does not check the callee, gate derivation/signature, account roles, or transaction success.
+ * Engine calldata has no staged content pin; the caller must connect its pin to the code account.
  */
 export function verifySvmSettleExecution(input) {
     const decoded = decodeSvmSettleExecution(input);
     const canonical = compileCanonicalSettle(decoded.escrowCount, input);
-    // The CALLER's pin. This instruction has no payload to carry one, and nothing on chain checks it
-    // at execute time, so it is an assertion by whoever supplied it — not a guarantee. On the staged
-    // path it is the only thing tying the bytes verified here to the bytes that run, which is exactly
-    // why the verdict it produces is named `caller-asserted-pin`.
     const pin = input.pin;
     const pinMatchesCanonical = pin === undefined ? null : bytesEqual(sha256(canonical), pin);
     const bytecodeMatchesCanonical = input.bytecode === undefined ? null : bytesEqual(input.bytecode, canonical);
@@ -240,41 +186,28 @@ export function verifySvmSettleExecution(input) {
     let genuine;
     let verifiedBy;
     let mismatch;
-    // An inline `execute` carries its program in the calldata, so it is verifiable directly and a pin
-    // is irrelevant to it — the engine never reads one. Before this, the branch order below ignored
-    // `decoded.instruction` entirely, so an inline execute carrying ARBITRARY bytecode plus
-    // `pin = sha256(canonical)` returned `genuine: true`.
     if (decoded.instruction === "execute") {
-        const inline = input.instructionData.subarray(8);
+        const inline = input.instructionData.subarray(decoded.wireFormat === "gated-v1" ? GATED_PROGRAM_OFFSET : 8);
         const inlineMatchesCanonical = bytesEqual(inline, canonical);
         const suppliedMatchesInline = input.bytecode === undefined ? null : bytesEqual(input.bytecode, inline);
         verifiedBy = "inline-bytecode";
         genuine = inlineMatchesCanonical && suppliedMatchesInline !== false;
         mismatch = !inlineMatchesCanonical
-            ? `inline execute bytecode does not byte-match svmSettleSource(${decoded.escrowCount})`
+            ? "inline execute bytecode does not byte-match svmSettleSource(" + decoded.escrowCount + ")"
             : suppliedMatchesInline === false
                 ? "supplied bytecode does not match the bytecode inline in this execute"
                 : undefined;
-        return {
-            ...decoded,
-            genuine,
-            verifiedBy,
-            pinMatchesCanonical,
-            pinMatchesBytecode,
-            bytecodeMatchesCanonical,
-            mismatch,
-        };
     }
-    if (input.bytecode !== undefined) {
+    else if (input.bytecode !== undefined) {
         verifiedBy = "bytecode";
         genuine = bytecodeMatchesCanonical === true && pinMatchesBytecode === true;
         mismatch =
             bytecodeMatchesCanonical !== true
-                ? `bytecode does not byte-match svmSettleSource(${decoded.escrowCount})`
+                ? "bytecode does not byte-match svmSettleSource(" + decoded.escrowCount + ")"
                 : pinMatchesBytecode === false
-                    ? "calldata pin does not equal sha256(bytecode) — the calldata targets different bytecode"
+                    ? "caller pin does not equal sha256(bytecode)"
                     : pinMatchesBytecode === null
-                        ? "calldata carries no pin, so it does not commit to the supplied bytecode — the staged bytes verified here need not be the bytes that run"
+                        ? "caller supplied no pin, so the staged bytes are not tied to this execution"
                         : undefined;
     }
     else if (pin !== undefined) {
@@ -282,13 +215,13 @@ export function verifySvmSettleExecution(input) {
         genuine = pinMatchesCanonical === true;
         mismatch = genuine
             ? undefined
-            : `pin does not match sha256(svmSettleSource(${decoded.escrowCount})) — not a genuine settle execution`;
+            : "pin does not match sha256(svmSettleSource(" + decoded.escrowCount + "))";
     }
     else {
         verifiedBy = "none";
         genuine = false;
         mismatch =
-            "no calldata pin and no bytecode supplied — a staged settle has no structural signature, so genuineness cannot be proven";
+            "no caller pin and no bytecode supplied: staged program identity cannot be established";
     }
     return {
         ...decoded,

package/sdk/dist/svm/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/svm/verify.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,6BAA6B;AAC7B,EAAE;AACF,qFAAqF;AACrF,kGAAkG;AAClG,oGAAoG;AACpG,oGAAoG;AACpG,qGAAqG;AACrG,EAAE;AACF,mGAAmG;AACnG,+FAA+F;AAC/F,8FAA8F;AAC9F,oGAAoG;AACpG,oGAAoG;AACpG,kEAAkE;AAClE,EAAE;AACF,gGAAgG;AAChG,qGAAqG;AACrG,qGAAqG;AACrG,4CAA4C;AAC5C,EAAE;AACF,kGAAkG;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErF,wGAAwG;AACxG,qGAAqG;AACrG,kEAAkE;AAClE,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,EACzB,0BAA0B,GAW3B,MAAM,aAAa,CAAC;AAkCrB,gGAAgG;AAChG,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;iCAGiC;AACjC,SAAS,sBAAsB,CAAC,WAAmB,EAAE,QAA8B;IACjF,OAAO,aAAa,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC,WAAW,CAAC;QACpC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE;KAClF,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAoB,EACpB,QAA4B,EAC5B,QAA8B;IAE9B,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;YACjB,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,wBAAwB,KAAK,CAAC,MAAM,8DAA8D,eAAe,EAAE;SAC9H,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW;YACX,IAAI;YACJ,QAAQ,EAAE,qDAAqD,WAAW,GAAG;SAC9E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW;YACX,IAAI;YACJ,QAAQ,EAAE,gDAAgD,WAAW,eAAe,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,QAAQ,EAAE;SACrI,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAqBD,SAAS,cAAc,CAAC,CAAuB,EAAE,CAAS;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,WAAW,CAAC,mFAAmF,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,GAAc,CAAC;AACxB,CAAC;AAED;;wDAEwD;AACxD,SAAS,mBAAmB,CAAC,MAAc;IACzC,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACxC,MAAM,WAAW,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,WAAW,IAAI,eAAe,EAAE,CAAC;YACxF,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAAC,IAAgB;IACjD,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3F,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,CAAC,MAAM,gDAAgD,CAClF,CAAC;IAEJ,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,IAAI,UAAU,CAAC,IAAI,EAAE,kCAAkC,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACxF,IAAI,UAAU,CAAC,IAAI,EAAE,qBAAqB,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9D,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;AAC9F,CAAC;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA8B;IAE9B,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAErE,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,CAAC,QAAQ,CAAC,MAAM,sGAAsG,eAAe,EAAE,CACjK,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAEzC,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAExC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC1E,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,qBAAqB,GAAmB,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtB,QAAQ,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACjF,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;gBAAE,qBAAqB,GAAG,KAAK,CAAC;QACvD,CAAC;aAAM,IAAI,qBAAqB,KAAK,KAAK,EAAE,CAAC;YAC3C,qBAAqB,GAAG,IAAI,CAAC,CAAC,sDAAsD;QACtF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW;QACX,WAAW;QACX,IAAI;QACJ,QAAQ;QACR,gBAAgB,EAAE,SAAS;QAC3B,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAuED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAoC;IAEpC,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACrE,iGAAiG;IACjG,iGAAiG;IACjG,kGAAkG;IAClG,8DAA8D;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAEtB,MAAM,mBAAmB,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1F,MAAM,wBAAwB,GAC5B,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,MAAM,kBAAkB,GACtB,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QAC/C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAE9C,IAAI,OAAgB,CAAC;IACrB,IAAI,UAA+B,CAAC;IACpC,IAAI,QAA4B,CAAC;IAEjC,kGAAkG;IAClG,gGAAgG;IAChG,wFAAwF;IACxF,sDAAsD;IACtD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,sBAAsB,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,qBAAqB,GACzB,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE3E,UAAU,GAAG,iBAAiB,CAAC;QAC/B,OAAO,GAAG,sBAAsB,IAAI,qBAAqB,KAAK,KAAK,CAAC;QACpE,QAAQ,GAAG,CAAC,sBAAsB;YAChC,CAAC,CAAC,+DAA+D,OAAO,CAAC,WAAW,GAAG;YACvF,CAAC,CAAC,qBAAqB,KAAK,KAAK;gBAC/B,CAAC,CAAC,sEAAsE;gBACxE,CAAC,CAAC,SAAS,CAAC;QAEhB,OAAO;YACL,GAAG,OAAO;YACV,OAAO;YACP,UAAU;YACV,mBAAmB;YACnB,kBAAkB;YAClB,wBAAwB;YACxB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,UAAU,GAAG,UAAU,CAAC;QACxB,OAAO,GAAG,wBAAwB,KAAK,IAAI,IAAI,kBAAkB,KAAK,IAAI,CAAC;QAC3E,QAAQ;YACN,wBAAwB,KAAK,IAAI;gBAC/B,CAAC,CAAC,gDAAgD,OAAO,CAAC,WAAW,GAAG;gBACxE,CAAC,CAAC,kBAAkB,KAAK,KAAK;oBAC5B,CAAC,CAAC,wFAAwF;oBAC1F,CAAC,CAAC,kBAAkB,KAAK,IAAI;wBAC3B,CAAC,CAAC,yIAAyI;wBAC3I,CAAC,CAAC,SAAS,CAAC;IACtB,CAAC;SAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,GAAG,qBAAqB,CAAC;QACnC,OAAO,GAAG,mBAAmB,KAAK,IAAI,CAAC;QACvC,QAAQ,GAAG,OAAO;YAChB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,6CAA6C,OAAO,CAAC,WAAW,qCAAqC,CAAC;IAC5G,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,MAAM,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC;QAChB,QAAQ;YACN,yHAAyH,CAAC;IAC9H,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,OAAO;QACP,UAAU;QACV,mBAAmB;QACnB,kBAAkB;QAClB,wBAAwB;QACxB,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/svm/verify.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,iGAAiG;AACjG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAgB,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErF,wGAAwG;AACxG,qGAAqG;AACrG,kEAAkE;AAClE,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,EACzB,0BAA0B,GAW3B,MAAM,aAAa,CAAC;AAkCrB,gGAAgG;AAChG,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;iCAGiC;AACjC,SAAS,sBAAsB,CAAC,WAAmB,EAAE,QAA8B;IACjF,OAAO,aAAa,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC,WAAW,CAAC;QACpC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE;KAClF,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAoB,EACpB,QAA4B,EAC5B,QAA8B;IAE9B,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;YACjB,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,wBAAwB,KAAK,CAAC,MAAM,8DAA8D,eAAe,EAAE;SAC9H,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW;YACX,IAAI;YACJ,QAAQ,EAAE,qDAAqD,WAAW,GAAG;SAC9E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW;YACX,IAAI;YACJ,QAAQ,EAAE,gDAAgD,WAAW,eAAe,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,QAAQ,EAAE;SACrI,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAqCD,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAE7C,SAAS,cAAc,CAAC,OAA6B,EAAE,KAAa;IAClE,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,UAAU,GAAG,KAAK,GAAG,oEAAoE,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAgB,EAChB,UAAkC;IAElC,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3F,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,gBAAgB,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,WAAW,GAAG,aAAa,GAAG,UAAU,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,aAAa,EAAE,kCAAkC,CAAC,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA8B;IAE9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC;IAClD,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,UAAU,KAAK,UAAU,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK;QACrB,CAAC,CAAC,WAAW,KAAK,sBAAsB;QACxC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IACxD,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC;IAC3F,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,mBAAmB;YACjB,KAAK,CAAC,QAAQ,CAAC,MAAM;YACrB,8CAA8C;YAC9C,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,0BAA0B;YAC1B,eAAe,CAClB,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,qBAAqB,GAAmB,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAE,CAAC;QACrC,QAAQ,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,GAAG,WAAW,CAAC,CAAC;QAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACvF,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG;gBAAE,qBAAqB,GAAG,KAAK,CAAC;QACzD,CAAC;aAAM,IAAI,qBAAqB,KAAK,KAAK,EAAE,CAAC;YAC3C,qBAAqB,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK;QAChB,CAAC,CAAC;YACE,KAAK,EAAE,iBAAiB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxE,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACzC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAE;YAChC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3F;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,WAAW;QACX,UAAU;QACV,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,WAAW;QACX,IAAI;QACJ,QAAQ;QACR,gBAAgB,EAAE,SAAS;QAC3B,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAsBD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAoC;IAEpC,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,mBAAmB,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1F,MAAM,wBAAwB,GAC5B,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,MAAM,kBAAkB,GACtB,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QAC/C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAE9C,IAAI,OAAgB,CAAC;IACrB,IAAI,UAA+B,CAAC;IACpC,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,QAAQ,CAC3C,OAAO,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAC7D,CAAC;QACF,MAAM,sBAAsB,GAAG,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,qBAAqB,GACzB,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3E,UAAU,GAAG,iBAAiB,CAAC;QAC/B,OAAO,GAAG,sBAAsB,IAAI,qBAAqB,KAAK,KAAK,CAAC;QACpE,QAAQ,GAAG,CAAC,sBAAsB;YAChC,CAAC,CAAC,8DAA8D,GAAG,OAAO,CAAC,WAAW,GAAG,GAAG;YAC5F,CAAC,CAAC,qBAAqB,KAAK,KAAK;gBAC/B,CAAC,CAAC,sEAAsE;gBACxE,CAAC,CAAC,SAAS,CAAC;IAClB,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACxC,UAAU,GAAG,UAAU,CAAC;QACxB,OAAO,GAAG,wBAAwB,KAAK,IAAI,IAAI,kBAAkB,KAAK,IAAI,CAAC;QAC3E,QAAQ;YACN,wBAAwB,KAAK,IAAI;gBAC/B,CAAC,CAAC,+CAA+C,GAAG,OAAO,CAAC,WAAW,GAAG,GAAG;gBAC7E,CAAC,CAAC,kBAAkB,KAAK,KAAK;oBAC5B,CAAC,CAAC,4CAA4C;oBAC9C,CAAC,CAAC,kBAAkB,KAAK,IAAI;wBAC3B,CAAC,CAAC,4EAA4E;wBAC9E,CAAC,CAAC,SAAS,CAAC;IACtB,CAAC;SAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,GAAG,qBAAqB,CAAC;QACnC,OAAO,GAAG,mBAAmB,KAAK,IAAI,CAAC;QACvC,QAAQ,GAAG,OAAO;YAChB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,4CAA4C,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,MAAM,CAAC;QACpB,OAAO,GAAG,KAAK,CAAC;QAChB,QAAQ;YACN,uFAAuF,CAAC;IAC5F,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,OAAO;QACP,UAAU;QACV,mBAAmB;QACnB,kBAAkB;QAClB,wBAAwB;QACxB,QAAQ;KACT,CAAC;AACJ,CAAC"}