@emilia-protocol/gate 0.15.0 → 0.15.2

package/dist/proposal-to-effect-status-head-store.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Durable relying-party custody for accepted EP-STATUS-v1 heads.
+ *
+ * The presenter supplies only a candidate status artifact. The store loads the
+ * authenticated predecessor, passes that predecessor to trusted verification
+ * code, and advances the exact tenant/relying-party/target head only when one
+ * database-side compare-and-advance still observes that predecessor. This
+ * keeps cryptographic work outside database transactions without opening a
+ * time-of-check/time-of-use acceptance race.
+ */
+import { type StatusTarget, type StatusVerification } from '@emilia-protocol/verify/status';
+export declare const PROPOSAL_TO_EFFECT_STATUS_HEAD_STORE_VERSION = "EP-GATE-PTE-STATUS-HEAD-PG-v1";
+export declare const PROPOSAL_TO_EFFECT_STATUS_HEAD_TABLE = "ep_aeb_status_heads";
+export declare const PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL: Readonly<{
+    get: "SELECT status_digest, sequence, status_state, previous_status_digest,\n  issued_at, next_update, status_json, predecessor_status_json\nFROM ep_aeb_private.get_status_head(\n  $1::text, $2::text, $3::text, $4::text, $5::text, $6::text\n)";
+    compareAndAdvance: "SELECT accepted, reason\nFROM ep_aeb_private.compare_and_advance_status_head(\n  $1::text, $2::text, $3::text, $4::text, $5::text, $6::text,\n  $7::text, $8::text, $9::bigint, $10::text, $11::text,\n  $12::timestamptz, $13::timestamptz, $14::text\n)";
+}>;
+type MaybePromise<T> = T | Promise<T>;
+type QueryResult = {
+    rowCount: number | null;
+    rows?: Record<string, unknown>[];
+};
+export type ProposalToEffectStatusHeadPgClient = {
+    query: (text: string, params?: any[]) => Promise<QueryResult>;
+    release: () => void;
+};
+export type ProposalToEffectStatusHeadPgPool = {
+    connect: () => Promise<ProposalToEffectStatusHeadPgClient>;
+};
+export interface ProposalToEffectStatusHeadAcceptance {
+    accepted: boolean;
+    source: 'advanced' | 'existing' | null;
+    reason: string | null;
+    verification: StatusVerification;
+}
+export interface ProposalToEffectStatusHeadAcceptanceInput {
+    target: Readonly<StatusTarget>;
+    status: unknown;
+    /**
+     * Trusted verification callback. Its argument is loaded from durable
+     * relying-party custody; no presenter-provided predecessor is accepted.
+     */
+    verify(previousStatus: unknown | undefined): MaybePromise<StatusVerification>;
+}
+export interface ProposalToEffectStatusHeadStore {
+    durable: true;
+    readonly tenantId: string;
+    readonly relyingPartyId: string;
+    accept(input: ProposalToEffectStatusHeadAcceptanceInput): Promise<ProposalToEffectStatusHeadAcceptance>;
+}
+export interface PostgresProposalToEffectStatusHeadStoreOptions {
+    /** Pool authenticated as a tenant-bound member of ep_aeb_executor. */
+    pool?: ProposalToEffectStatusHeadPgPool;
+    tenantId?: string;
+    relyingPartyId?: string;
+}
+/**
+ * Create a durable accepted-head store. The PostgreSQL principal must be bound
+ * to tenantId in ep_aeb_private.tenant_principals and inherit ep_aeb_executor.
+ */
+export declare function createPostgresProposalToEffectStatusHeadStore({ pool, tenantId, relyingPartyId, }?: PostgresProposalToEffectStatusHeadStoreOptions): ProposalToEffectStatusHeadStore;
+declare const _default: {
+    PROPOSAL_TO_EFFECT_STATUS_HEAD_STORE_VERSION: string;
+    PROPOSAL_TO_EFFECT_STATUS_HEAD_TABLE: string;
+    PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL: Readonly<{
+        get: "SELECT status_digest, sequence, status_state, previous_status_digest,\n  issued_at, next_update, status_json, predecessor_status_json\nFROM ep_aeb_private.get_status_head(\n  $1::text, $2::text, $3::text, $4::text, $5::text, $6::text\n)";
+        compareAndAdvance: "SELECT accepted, reason\nFROM ep_aeb_private.compare_and_advance_status_head(\n  $1::text, $2::text, $3::text, $4::text, $5::text, $6::text,\n  $7::text, $8::text, $9::bigint, $10::text, $11::text,\n  $12::timestamptz, $13::timestamptz, $14::text\n)";
+    }>;
+    createPostgresProposalToEffectStatusHeadStore: typeof createPostgresProposalToEffectStatusHeadStore;
+};
+export default _default;
+//# sourceMappingURL=proposal-to-effect-status-head-store.d.ts.map

package/dist/proposal-to-effect-status-head-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-to-effect-status-head-store.d.ts","sourceRoot":"","sources":["../src/proposal-to-effect-status-head-store.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAExC,eAAO,MAAM,4CAA4C,kCACxB,CAAC;AAClC,eAAO,MAAM,oCAAoC,wBAAwB,CAAC;AAE1E,eAAO,MAAM,kCAAkC;;;EAY7C,CAAC;AAEH,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,KAAK,WAAW,GAAG;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,OAAO,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAC5D,CAAC;AAEF,MAAM,WAAW,oCAAoC;IACnD,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,kBAAkB,CAAC;CAClC;AAED,MAAM,WAAW,yCAAyC;IACxD,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,IAAI,CAAC;IACd,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,MAAM,CACJ,KAAK,EAAE,yCAAyC,GAC/C,OAAO,CAAC,oCAAoC,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,8CAA8C;IAC7D,sEAAsE;IACtE,IAAI,CAAC,EAAE,gCAAgC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAiOD;;;GAGG;AACH,wBAAgB,6CAA6C,CAAC,EAC5D,IAAI,EACJ,QAAQ,EACR,cAAc,GACf,GAAE,8CAAmD,GAAG,+BAA+B,CA6HvF;;;;;;;;;;AAED,wBAKE"}

package/dist/proposal-to-effect-status-head-store.js

@@ -0,0 +1,355 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Durable relying-party custody for accepted EP-STATUS-v1 heads.
+ *
+ * The presenter supplies only a candidate status artifact. The store loads the
+ * authenticated predecessor, passes that predecessor to trusted verification
+ * code, and advances the exact tenant/relying-party/target head only when one
+ * database-side compare-and-advance still observes that predecessor. This
+ * keeps cryptographic work outside database transactions without opening a
+ * time-of-check/time-of-use acceptance race.
+ */
+import { statusArtifactDigest, } from '@emilia-protocol/verify/status';
+export const PROPOSAL_TO_EFFECT_STATUS_HEAD_STORE_VERSION = 'EP-GATE-PTE-STATUS-HEAD-PG-v1';
+export const PROPOSAL_TO_EFFECT_STATUS_HEAD_TABLE = 'ep_aeb_status_heads';
+export const PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL = Object.freeze({
+    get: `SELECT status_digest, sequence, status_state, previous_status_digest,
+  issued_at, next_update, status_json, predecessor_status_json
+FROM ep_aeb_private.get_status_head(
+  $1::text, $2::text, $3::text, $4::text, $5::text, $6::text
+)`,
+    compareAndAdvance: `SELECT accepted, reason
+FROM ep_aeb_private.compare_and_advance_status_head(
+  $1::text, $2::text, $3::text, $4::text, $5::text, $6::text,
+  $7::text, $8::text, $9::bigint, $10::text, $11::text,
+  $12::timestamptz, $13::timestamptz, $14::text
+)`,
+});
+const DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/;
+const TARGET_TYPES = new Set(['receipt', 'commit', 'delegation']);
+const TARGET_USAGES = new Set(['authorization', 'execution', 'delegation']);
+function dataRecord(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        return false;
+    return Reflect.ownKeys(value).every((key) => {
+        if (typeof key !== 'string')
+            return false;
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        return Boolean(descriptor?.enumerable && Object.hasOwn(descriptor, 'value'));
+    });
+}
+function denseDataArray(value) {
+    if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype)
+        return false;
+    const keys = Reflect.ownKeys(value);
+    if (keys.length !== value.length + 1 || !keys.includes('length'))
+        return false;
+    for (let index = 0; index < value.length; index += 1) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+        if (!descriptor?.enumerable || !Object.hasOwn(descriptor, 'value'))
+            return false;
+    }
+    return true;
+}
+function snapshotJson(value, seen = new WeakSet()) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number') {
+        if (Number.isFinite(value))
+            return value;
+        throw new TypeError('status head contains a non-finite JSON number');
+    }
+    if (typeof value !== 'object' || seen.has(value)) {
+        throw new TypeError('status head is outside the JSON data model');
+    }
+    seen.add(value);
+    if (denseDataArray(value)) {
+        return value.map((member) => snapshotJson(member, seen));
+    }
+    if (!dataRecord(value))
+        throw new TypeError('status head is not a plain data object');
+    const snapshot = {};
+    for (const key of Object.keys(value))
+        snapshot[key] = snapshotJson(value[key], seen);
+    return snapshot;
+}
+function assertText(value, label, maximumBytes) {
+    if (typeof value !== 'string'
+        || Buffer.byteLength(value, 'utf8') < 1
+        || Buffer.byteLength(value, 'utf8') > maximumBytes
+        || /[\u0000-\u001f\u007f]/.test(value)) {
+        throw new TypeError(`proposal-to-effect status head ${label} is invalid`);
+    }
+}
+function digest(value) {
+    return typeof value === 'string' && DIGEST_PATTERN.test(value);
+}
+function normalizedInstant(value, nullable = false) {
+    if (nullable && value === null)
+        return null;
+    if (typeof value !== 'string')
+        return null;
+    const milliseconds = Date.parse(value);
+    if (!Number.isFinite(milliseconds))
+        return null;
+    return new Date(milliseconds).toISOString();
+}
+function safeInteger(value) {
+    const parsed = typeof value === 'string' && /^[0-9]+$/.test(value)
+        ? Number(value) : value;
+    return Number.isSafeInteger(parsed) && parsed >= 0
+        ? parsed : null;
+}
+function targetSnapshot(value) {
+    if (!dataRecord(value)
+        || Reflect.ownKeys(value).length !== 4
+        || !Object.hasOwn(value, 'type')
+        || !Object.hasOwn(value, 'id')
+        || !Object.hasOwn(value, 'digest')
+        || !Object.hasOwn(value, 'usage')
+        || !TARGET_TYPES.has(value.type)
+        || !TARGET_USAGES.has(value.usage)
+        || typeof value.id !== 'string'
+        || Buffer.byteLength(value.id, 'utf8') < 1
+        || Buffer.byteLength(value.id, 'utf8') > 512
+        || /[\u0000-\u001f\u007f]/.test(value.id)
+        || !digest(value.digest)) {
+        throw new TypeError('proposal-to-effect status head target is invalid');
+    }
+    return Object.freeze({
+        type: value.type,
+        id: value.id,
+        digest: value.digest,
+        usage: value.usage,
+    });
+}
+function exactRowCount(result, operation) {
+    if (!result || !Number.isSafeInteger(result.rowCount) || result.rowCount < 0) {
+        throw new Error(`${operation}: malformed PostgreSQL result`);
+    }
+    return result.rowCount;
+}
+function parseJsonText(value, label) {
+    if (typeof value !== 'string'
+        || Buffer.byteLength(value, 'utf8') < 2
+        || Buffer.byteLength(value, 'utf8') > 1_048_576) {
+        throw new Error(`malformed PostgreSQL status head: ${label}`);
+    }
+    try {
+        return snapshotJson(JSON.parse(value));
+    }
+    catch {
+        throw new Error(`malformed PostgreSQL status head: ${label}`);
+    }
+}
+function storedHead(result) {
+    const rows = exactRowCount(result, 'load status head');
+    if (rows === 0 && (!result.rows || result.rows.length === 0))
+        return null;
+    if (rows !== 1 || result.rows?.length !== 1 || !dataRecord(result.rows[0])) {
+        throw new Error('malformed PostgreSQL status head: row cardinality');
+    }
+    const row = result.rows[0];
+    const sequence = safeInteger(row.sequence);
+    const issuedAt = normalizedInstant(row.issued_at);
+    const nextUpdate = normalizedInstant(row.next_update, true);
+    const statusState = row.status_state;
+    const previousStatusDigest = row.previous_status_digest;
+    if (!digest(row.status_digest)
+        || sequence === null
+        || (statusState !== 'not_revoked' && statusState !== 'revoked')
+        || (previousStatusDigest !== null && !digest(previousStatusDigest))
+        || !issuedAt
+        || (statusState === 'not_revoked' && !nextUpdate)
+        || (statusState === 'revoked' && nextUpdate !== null)) {
+        throw new Error('malformed PostgreSQL status head: metadata');
+    }
+    const status = parseJsonText(row.status_json, 'status_json');
+    const predecessorStatus = row.predecessor_status_json === null
+        ? undefined : parseJsonText(row.predecessor_status_json, 'predecessor_status_json');
+    if (statusArtifactDigest(status) !== row.status_digest
+        || (sequence === 0
+            && (previousStatusDigest !== null || predecessorStatus !== undefined))
+        || (sequence > 0
+            && (previousStatusDigest === null
+                || predecessorStatus === undefined
+                || statusArtifactDigest(predecessorStatus) !== previousStatusDigest))) {
+        throw new Error('malformed PostgreSQL status head: chain');
+    }
+    return {
+        statusDigest: row.status_digest,
+        sequence,
+        statusState,
+        previousStatusDigest,
+        issuedAt,
+        nextUpdate,
+        status,
+        predecessorStatus,
+    };
+}
+function candidateMetadata(status, verification) {
+    if (!dataRecord(status)
+        || !digest(verification.status_digest)
+        || !Number.isSafeInteger(verification.sequence)
+        || verification.sequence === null
+        || verification.sequence < 0
+        || verification.status_digest !== statusArtifactDigest(status)
+        || status.sequence !== verification.sequence
+        || (status.status !== 'not_revoked' && status.status !== 'revoked')
+        || (status.previous_status_digest !== null
+            && !digest(status.previous_status_digest))) {
+        throw new Error('verified status head metadata is inconsistent');
+    }
+    const issuedAt = normalizedInstant(status.issued_at);
+    const nextUpdate = normalizedInstant(status.next_update, true);
+    const verificationNextUpdate = normalizedInstant(verification.next_update, true);
+    if (!issuedAt
+        || nextUpdate !== verificationNextUpdate
+        || (status.status === 'not_revoked' && !nextUpdate)
+        || (status.status === 'revoked' && nextUpdate !== null)) {
+        throw new Error('verified status head timing is inconsistent');
+    }
+    return {
+        statusDigest: verification.status_digest,
+        sequence: verification.sequence,
+        statusState: status.status,
+        previousStatusDigest: status.previous_status_digest,
+        issuedAt,
+        nextUpdate,
+    };
+}
+function verificationRefusal(verification) {
+    return {
+        accepted: false,
+        source: null,
+        reason: verification.reasons[0] ?? 'status_verification_failed',
+        verification,
+    };
+}
+/**
+ * Create a durable accepted-head store. The PostgreSQL principal must be bound
+ * to tenantId in ep_aeb_private.tenant_principals and inherit ep_aeb_executor.
+ */
+export function createPostgresProposalToEffectStatusHeadStore({ pool, tenantId, relyingPartyId, } = {}) {
+    if (!pool || typeof pool.connect !== 'function') {
+        throw new TypeError('createPostgresProposalToEffectStatusHeadStore requires an ep_aeb_executor pg pool');
+    }
+    assertText(tenantId, 'tenantId', 512);
+    assertText(relyingPartyId, 'relyingPartyId', 512);
+    const store = {
+        durable: true,
+        tenantId,
+        relyingPartyId,
+        async accept(input) {
+            const target = targetSnapshot(input?.target);
+            const candidate = snapshotJson(input?.status);
+            if (typeof input?.verify !== 'function') {
+                throw new TypeError('proposal-to-effect status head verify callback is required');
+            }
+            const candidateDigest = statusArtifactDigest(candidate);
+            if (!digest(candidateDigest)) {
+                throw new TypeError('proposal-to-effect status head digest is invalid');
+            }
+            const client = await pool.connect();
+            if (!client || typeof client.query !== 'function' || typeof client.release !== 'function') {
+                throw new TypeError('status head pg pool returned an invalid client');
+            }
+            try {
+                const current = storedHead(await client.query(PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL.get, [tenantId, relyingPartyId, target.type, target.id, target.digest, target.usage]));
+                const exactReplay = current?.statusDigest === candidateDigest;
+                const statusForVerification = exactReplay ? current.status : candidate;
+                const previousForVerification = exactReplay
+                    ? current.predecessorStatus
+                    : current?.status;
+                const verification = await input.verify(previousForVerification);
+                if (!dataRecord(verification)
+                    || typeof verification.valid !== 'boolean'
+                    || !Array.isArray(verification.reasons)) {
+                    throw new Error('status head verifier returned a malformed result');
+                }
+                if (!verification.valid || verification.outcome === 'indeterminate') {
+                    return verificationRefusal(verification);
+                }
+                const metadata = candidateMetadata(statusForVerification, verification);
+                if (exactReplay) {
+                    if (metadata.statusDigest !== current.statusDigest
+                        || metadata.sequence !== current.sequence
+                        || metadata.statusState !== current.statusState
+                        || metadata.previousStatusDigest !== current.previousStatusDigest
+                        || metadata.issuedAt !== current.issuedAt
+                        || metadata.nextUpdate !== current.nextUpdate) {
+                        throw new Error('authenticated status head replay metadata mismatch');
+                    }
+                }
+                if (!exactReplay && ((!current
+                    && (metadata.sequence !== 0 || metadata.previousStatusDigest !== null))
+                    || (current
+                        && (current.statusState === 'revoked'
+                            || metadata.sequence !== current.sequence + 1
+                            || metadata.previousStatusDigest !== current.statusDigest)))) {
+                    return {
+                        accepted: false,
+                        source: null,
+                        reason: 'status_head_conflict',
+                        verification,
+                    };
+                }
+                const result = await client.query(PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL.compareAndAdvance, [
+                    tenantId,
+                    relyingPartyId,
+                    target.type,
+                    target.id,
+                    target.digest,
+                    target.usage,
+                    current?.statusDigest ?? null,
+                    metadata.statusDigest,
+                    metadata.sequence,
+                    metadata.statusState,
+                    metadata.previousStatusDigest,
+                    metadata.issuedAt,
+                    metadata.nextUpdate,
+                    JSON.stringify(exactReplay ? current.status : candidate),
+                ]);
+                const rows = exactRowCount(result, 'advance status head');
+                const accepted = result.rows?.[0]?.accepted;
+                const reason = result.rows?.[0]?.reason;
+                if (rows !== 1
+                    || result.rows?.length !== 1
+                    || typeof accepted !== 'boolean'
+                    || (reason !== null && typeof reason !== 'string')
+                    || (accepted && reason !== null)) {
+                    throw new Error('advance status head: malformed PostgreSQL result');
+                }
+                if (!accepted) {
+                    return {
+                        accepted: false,
+                        source: null,
+                        reason: 'status_head_conflict',
+                        verification,
+                    };
+                }
+                return {
+                    accepted: true,
+                    source: exactReplay ? 'existing' : 'advanced',
+                    reason: null,
+                    verification,
+                };
+            }
+            finally {
+                client.release();
+            }
+        },
+    };
+    return Object.freeze(store);
+}
+export default {
+    PROPOSAL_TO_EFFECT_STATUS_HEAD_STORE_VERSION,
+    PROPOSAL_TO_EFFECT_STATUS_HEAD_TABLE,
+    PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL,
+    createPostgresProposalToEffectStatusHeadStore,
+};
+//# sourceMappingURL=proposal-to-effect-status-head-store.js.map

package/dist/proposal-to-effect-status-head-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-to-effect-status-head-store.js","sourceRoot":"","sources":["../src/proposal-to-effect-status-head-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;GASG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,4CAA4C,GACvD,+BAA+B,CAAC;AAClC,MAAM,CAAC,MAAM,oCAAoC,GAAG,qBAAqB,CAAC;AAE1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9D,GAAG,EAAE;;;;EAIL;IACA,iBAAiB,EAAE;;;;;EAKnB;CACD,CAAC,CAAC;AA8DH,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAClE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAE5E,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,UAAU,EAAE,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,OAAO,IAAI,OAAO,EAAU;IAChE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACtF,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACrF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,KAAa,EACb,YAAoB;IAEpB,IAAI,OAAO,KAAK,KAAK,QAAQ;WACtB,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;WACpC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY;WAC/C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,kCAAkC,KAAK,aAAa,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK;IACzD,IAAI,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAK,MAAiB,IAAI,CAAC;QAC5D,CAAC,CAAC,MAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;WACf,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;WACnC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;WAC7B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;WAC3B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;WAC/B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;WAC9B,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC;WACvC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC;WACzC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;WAC5B,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;WACvC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,GAAG;WACzC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;WACtC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC,IAA4B;QACxC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAA8B;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB,EAAE,SAAiB;IAC3D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAK,MAAM,CAAC,QAAmB,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,+BAA+B,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,QAAkB,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;WACtB,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;WACpC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,MAAM,oBAAoB,GAAG,GAAG,CAAC,sBAAsB,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;WACvB,QAAQ,KAAK,IAAI;WACjB,CAAC,WAAW,KAAK,aAAa,IAAI,WAAW,KAAK,SAAS,CAAC;WAC5D,CAAC,oBAAoB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;WAChE,CAAC,QAAQ;WACT,CAAC,WAAW,KAAK,aAAa,IAAI,CAAC,UAAU,CAAC;WAC9C,CAAC,WAAW,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,GAAG,CAAC,uBAAuB,KAAK,IAAI;QAC5D,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IACtF,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,aAAa;WAC/C,CAAC,QAAQ,KAAK,CAAC;eACb,CAAC,oBAAoB,KAAK,IAAI,IAAI,iBAAiB,KAAK,SAAS,CAAC,CAAC;WACrE,CAAC,QAAQ,GAAG,CAAC;eACX,CAAC,oBAAoB,KAAK,IAAI;mBAC5B,iBAAiB,KAAK,SAAS;mBAC/B,oBAAoB,CAAC,iBAAiB,CAAC,KAAK,oBAAoB,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,QAAQ;QACR,WAAW;QACX,oBAAoB;QACpB,QAAQ;QACR,UAAU;QACV,MAAM;QACN,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAe,EACf,YAAgC;IAEhC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;WAChB,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC;WACnC,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC;WAC5C,YAAY,CAAC,QAAQ,KAAK,IAAI;WAC9B,YAAY,CAAC,QAAQ,GAAG,CAAC;WACzB,YAAY,CAAC,aAAa,KAAK,oBAAoB,CAAC,MAAM,CAAC;WAC3D,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ;WACzC,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;WAChE,CAAC,MAAM,CAAC,sBAAsB,KAAK,IAAI;eACrC,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ;WACN,UAAU,KAAK,sBAAsB;WACrC,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,UAAU,CAAC;WAChD,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO;QACL,YAAY,EAAE,YAAY,CAAC,aAAa;QACxC,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,oBAAoB,EAAE,MAAM,CAAC,sBAAsB;QACnD,QAAQ;QACR,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,YAAgC;IAEhC,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,4BAA4B;QAC/D,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6CAA6C,CAAC,EAC5D,IAAI,EACJ,QAAQ,EACR,cAAc,MACoC,EAAE;IACpD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CACjB,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IACtC,UAAU,CAAC,cAAc,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAElD,MAAM,KAAK,GAAoC;QAC7C,OAAO,EAAE,IAAI;QACb,QAAQ;QACR,cAAc;QAEd,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxC,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC1F,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,KAAK,CAC3C,kCAAkC,CAAC,GAAG,EACtC,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAChF,CAAC,CAAC;gBACH,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,KAAK,eAAe,CAAC;gBAC9D,MAAM,qBAAqB,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,MAAM,uBAAuB,GAAG,WAAW;oBACzC,CAAC,CAAC,OAAO,CAAC,iBAAiB;oBAC3B,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;gBACpB,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBACjE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;uBACtB,OAAO,YAAY,CAAC,KAAK,KAAK,SAAS;uBACvC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBACtE,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;oBACpE,OAAO,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAC3C,CAAC;gBAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;gBACxE,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;2BAC3C,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;2BACtC,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;2BAC5C,QAAQ,CAAC,oBAAoB,KAAK,OAAO,CAAC,oBAAoB;2BAC9D,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;2BACtC,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;wBAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;oBACxE,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,OAAO;uBACzB,CAAC,QAAQ,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC;uBACpE,CAAC,OAAO;2BACN,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;+BAChC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC;+BAC1C,QAAQ,CAAC,oBAAoB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,OAAO;wBACL,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,sBAAsB;wBAC9B,YAAY;qBACb,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,kCAAkC,CAAC,iBAAiB,EACpD;oBACE,QAAQ;oBACR,cAAc;oBACd,MAAM,CAAC,IAAI;oBACX,MAAM,CAAC,EAAE;oBACT,MAAM,CAAC,MAAM;oBACb,MAAM,CAAC,KAAK;oBACZ,OAAO,EAAE,YAAY,IAAI,IAAI;oBAC7B,QAAQ,CAAC,YAAY;oBACrB,QAAQ,CAAC,QAAQ;oBACjB,QAAQ,CAAC,WAAW;oBACpB,QAAQ,CAAC,oBAAoB;oBAC7B,QAAQ,CAAC,QAAQ;oBACjB,QAAQ,CAAC,UAAU;oBACnB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;iBACzD,CACF,CAAC;gBACF,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;gBAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;gBAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;gBACxC,IAAI,IAAI,KAAK,CAAC;uBACP,MAAM,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC;uBACzB,OAAO,QAAQ,KAAK,SAAS;uBAC7B,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;uBAC/C,CAAC,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBACtE,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO;wBACL,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,sBAAsB;wBAC9B,YAAY;qBACb,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;oBAC7C,MAAM,EAAE,IAAI;oBACZ,YAAY;iBACb,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,eAAe;IACb,4CAA4C;IAC5C,oCAAoC;IACpC,kCAAkC;IAClC,6CAA6C;CAC9C,CAAC"}

package/dist/proposal-to-effect-status.d.ts

@@ -9,6 +9,9 @@
 import type { AebDigest } from '@emilia-protocol/verify/aeb-adapter-contract';
 import { type RevokerAuthorityPin, type StatusTarget } from '@emilia-protocol/verify/status';
 import type { ProposalToEffectOptions } from './proposal-to-effect.js';
+import type { ProposalToEffectStatusHeadStore } from './proposal-to-effect-status-head-store.js';
+export { PROPOSAL_TO_EFFECT_STATUS_HEAD_STORE_VERSION, PROPOSAL_TO_EFFECT_STATUS_HEAD_TABLE, PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL, createPostgresProposalToEffectStatusHeadStore, } from './proposal-to-effect-status-head-store.js';
+export type { PostgresProposalToEffectStatusHeadStoreOptions, ProposalToEffectStatusHeadAcceptance, ProposalToEffectStatusHeadAcceptanceInput, ProposalToEffectStatusHeadPgClient, ProposalToEffectStatusHeadPgPool, ProposalToEffectStatusHeadStore, } from './proposal-to-effect-status-head-store.js';
 type MaybePromise<T> = T | Promise<T>;
 type ProposalToEffectStatusVerifier = ProposalToEffectOptions['aeb']['statusVerifier'];
 export type ProposalToEffectStatusVerifierInput = Parameters<ProposalToEffectStatusVerifier>[0];
@@ -17,12 +20,6 @@ export interface ProposalToEffectStatusResolverContext {
     expected: ProposalToEffectStatusExpected;
     target: Readonly<StatusTarget>;
 }
-export interface ProposalToEffectPreviousHeadResolution {
-    /** Confirms this result came from the relying party's authenticated store. */
-    authenticated: boolean;
-    /** Null means the store authoritatively has no accepted head for the target. */
-    status: unknown | null;
-}
 export interface ProposalToEffectConsumptionState {
     /** Must be true; presenter assertions and unauthenticated cache data fail. */
     authenticated: boolean;
@@ -41,8 +38,12 @@ export interface ProposalToEffectStatusVerifierOptions {
     }): MaybePromise<StatusTarget>;
     /** Server-side certificate lookup. The presenter never supplies this certificate. */
     certificateResolver(input: ProposalToEffectStatusResolverContext): MaybePromise<unknown>;
-    /** Server-side lookup of the relying party's previously accepted status head. */
-    previousHeadResolver(input: ProposalToEffectStatusResolverContext): MaybePromise<ProposalToEffectPreviousHeadResolution>;
+    /**
+     * Durable relying-party status custody. It loads the accepted predecessor,
+     * verifies the candidate against that predecessor, and compare-and-advances
+     * one fixed tenant/relying-party/target head atomically.
+     */
+    statusHeadStore: ProposalToEffectStatusHeadStore;
     /** Authenticated local consumption lookup; this is not inferred from EP-STATUS-v1. */
     consumptionStateResolver(input: ProposalToEffectConsumptionResolverContext): MaybePromise<ProposalToEffectConsumptionState>;
 }
@@ -51,5 +52,4 @@ export interface ProposalToEffectStatusVerifierOptions {
  * `ProposalToEffectOptions.aeb.statusVerifier`.
  */
 export declare function createProposalToEffectStatusVerifier(options: ProposalToEffectStatusVerifierOptions): ProposalToEffectStatusVerifier;
-export {};
 //# sourceMappingURL=proposal-to-effect-status.d.ts.map

package/dist/proposal-to-effect-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proposal-to-effect-status.d.ts","sourceRoot":"","sources":["../src/proposal-to-effect-status.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAkB,MAAM,8CAA8C,CAAC;AAC9F,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAClB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAEV,uBAAuB,EACxB,MAAM,yBAAyB,CAAC;AAEjC,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AACtC,KAAK,8BAA8B,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;AAEvF,MAAM,MAAM,mCAAmC,GAC7C,UAAU,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,MAAM,MAAM,8BAA8B,GACxC,QAAQ,CAAC,mCAAmC,CAAC,UAAU,CAAC,CAAC,CAAC;AAE5D,MAAM,WAAW,qCAAqC;IACpD,QAAQ,EAAE,8BAA8B,CAAC;IACzC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,sCAAsC;IACrD,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAC;IACvB,gFAAgF;IAChF,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gCAAgC;IAC/C,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0CACf,SAAQ,qCAAqC;IAC7C,aAAa,EAAE,SAAS,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qCAAqC;IACpD,mFAAmF;IACnF,YAAY,EAAE,mBAAmB,CAAC;IAClC,uFAAuF;IACvF,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,8BAA8B,CAAC;KAC1C,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC/B,qFAAqF;IACrF,mBAAmB,CACjB,KAAK,EAAE,qCAAqC,GAC3C,YAAY,CAAC,OAAO,CAAC,CAAC;IACzB,iFAAiF;IACjF,oBAAoB,CAClB,KAAK,EAAE,qCAAqC,GAC3C,YAAY,CAAC,sCAAsC,CAAC,CAAC;IACxD,sFAAsF;IACtF,wBAAwB,CACtB,KAAK,EAAE,0CAA0C,GAChD,YAAY,CAAC,gCAAgC,CAAC,CAAC;CACnD;AAqKD;;;GAGG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,qCAAqC,GAC7C,8BAA8B,CAgHhC"}
+{"version":3,"file":"proposal-to-effect-status.d.ts","sourceRoot":"","sources":["../src/proposal-to-effect-status.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAkB,MAAM,8CAA8C,CAAC;AAC9F,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAElB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAEV,uBAAuB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,+BAA+B,EAChC,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,4CAA4C,EAC5C,oCAAoC,EACpC,kCAAkC,EAClC,6CAA6C,GAC9C,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,8CAA8C,EAC9C,oCAAoC,EACpC,yCAAyC,EACzC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,2CAA2C,CAAC;AAEnD,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AACtC,KAAK,8BAA8B,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;AAEvF,MAAM,MAAM,mCAAmC,GAC7C,UAAU,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,MAAM,MAAM,8BAA8B,GACxC,QAAQ,CAAC,mCAAmC,CAAC,UAAU,CAAC,CAAC,CAAC;AAE5D,MAAM,WAAW,qCAAqC;IACpD,QAAQ,EAAE,8BAA8B,CAAC;IACzC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,gCAAgC;IAC/C,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0CACf,SAAQ,qCAAqC;IAC7C,aAAa,EAAE,SAAS,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qCAAqC;IACpD,mFAAmF;IACnF,YAAY,EAAE,mBAAmB,CAAC;IAClC,uFAAuF;IACvF,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,8BAA8B,CAAC;KAC1C,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC/B,qFAAqF;IACrF,mBAAmB,CACjB,KAAK,EAAE,qCAAqC,GAC3C,YAAY,CAAC,OAAO,CAAC,CAAC;IACzB;;;;OAIG;IACH,eAAe,EAAE,+BAA+B,CAAC;IACjD,sFAAsF;IACtF,wBAAwB,CACtB,KAAK,EAAE,0CAA0C,GAChD,YAAY,CAAC,gCAAgC,CAAC,CAAC;CACnD;AAyKD;;;GAGG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,qCAAqC,GAC7C,8BAA8B,CA6HhC"}

package/dist/proposal-to-effect-status.js

@@ -9,6 +9,7 @@
  * latter. The later atomic AEB reserve remains the race-closing operation.
  */
 import { verifyStatusArtifact, } from '@emilia-protocol/verify/status';
+export { PROPOSAL_TO_EFFECT_STATUS_HEAD_STORE_VERSION, PROPOSAL_TO_EFFECT_STATUS_HEAD_TABLE, PROPOSAL_TO_EFFECT_STATUS_HEAD_SQL, createPostgresProposalToEffectStatusHeadStore, } from './proposal-to-effect-status-head-store.js';
 const DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/;
 const CAID_PATTERN = /^caid:1:[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)*\.[1-9][0-9]*:[a-z0-9]+(?:-[a-z0-9]+)*:[A-Za-z0-9_-]{43}$/;
 const EXPECTED_KEYS = [
@@ -159,7 +160,11 @@ function verifierConfiguration(options) {
     if (!authorityPin
         || typeof options.targetMapper !== 'function'
         || typeof options.certificateResolver !== 'function'
-        || typeof options.previousHeadResolver !== 'function'
+        || !dataRecord(options.statusHeadStore)
+        || options.statusHeadStore.durable !== true
+        || !boundedString(options.statusHeadStore.tenantId)
+        || !boundedString(options.statusHeadStore.relyingPartyId)
+        || typeof options.statusHeadStore.accept !== 'function'
         || typeof options.consumptionStateResolver !== 'function') {
         throw new TypeError('proposal_to_effect_status_configuration_invalid');
     }
@@ -173,7 +178,7 @@ export function createProposalToEffectStatusVerifier(options) {
     const authorityPin = verifierConfiguration(options);
     const targetMapper = options.targetMapper;
     const certificateResolver = options.certificateResolver;
-    const previousHeadResolver = options.previousHeadResolver;
+    const statusHeadStore = options.statusHeadStore;
     const consumptionStateResolver = options.consumptionStateResolver;
     return async (input) => {
         const expected = snapshotExpected(input?.expected);
@@ -196,7 +201,6 @@ export function createProposalToEffectStatusVerifier(options) {
         }
         const context = Object.freeze({ expected, target });
         let certificate;
-        let previousStatus;
         try {
             const resolvedCertificate = await certificateResolver(context);
             if (resolvedCertificate === undefined || resolvedCertificate === null) {
@@ -207,26 +211,36 @@ export function createProposalToEffectStatusVerifier(options) {
         catch {
             return refusal('indeterminate', 'status_certificate_unavailable');
         }
+        if (statusHeadStore.tenantId !== expected.tenant_id) {
+            return refusal('indeterminate', 'status_head_scope_mismatch');
+        }
+        let acceptance;
         try {
-            const resolution = await previousHeadResolver(context);
-            if (!dataRecord(resolution)
-                || resolution.authenticated !== true
-                || !Object.hasOwn(resolution, 'status')
-                || resolution.status === undefined) {
-                return refusal('indeterminate', 'status_previous_head_unavailable');
-            }
-            previousStatus = resolution.status === null
-                ? undefined : snapshotJson(resolution.status);
+            acceptance = await statusHeadStore.accept({
+                target,
+                status: statusArtifact,
+                verify: (previousStatus) => verifyStatusArtifact(target, statusArtifact, {
+                    authorityPin,
+                    certificate,
+                    previousStatus,
+                    now: input.now,
+                }),
+            });
         }
         catch {
-            return refusal('indeterminate', 'status_previous_head_unavailable');
+            return refusal('indeterminate', 'status_head_store_unavailable');
+        }
+        if (!dataRecord(acceptance)
+            || typeof acceptance.accepted !== 'boolean'
+            || !Object.hasOwn(acceptance, 'verification')
+            || !dataRecord(acceptance.verification)) {
+            return refusal('indeterminate', 'status_head_store_invalid');
+        }
+        if (!acceptance.accepted) {
+            return refusal('indeterminate', boundedString(acceptance.reason)
+                ? acceptance.reason : 'status_head_store_refused');
         }
-        const verification = verifyStatusArtifact(target, statusArtifact, {
-            authorityPin,
-            certificate,
-            previousStatus,
-            now: input.now,
-        });
+        const verification = acceptance.verification;
         if (!verification.valid || verification.outcome === 'indeterminate') {
             return refusal('indeterminate', verification.reasons[0] ?? 'status_verification_failed');
         }