@ixo/decision-oracle 0.0.0-stage → 0.2.1

package/dist/lib/archive.js

@@ -0,0 +1,305 @@
+/**
+ * The answer archive — every ask, answer and photo this oracle evaluated, kept in the operator's
+ * own R2 bucket (`ANSWERS_ARCHIVE`) so the data outlives the stores it was pulled from. Opt-in: no
+ * binding ⇒ a no-op. R2 only, on purpose — no D1 index; list the bucket.
+ *
+ *   <askId>-<title-slug>/about.json              once per ask: what it asked, as people saw it
+ *   <askId>-<title-slug>/<claimId>/answer.json   the Q&A record; re-written on a fold and on payment
+ *   <askId>-<title-slug>/<claimId>/claim.json    the claim body, verbatim (nothing dropped)
+ *   <askId>-<title-slug>/<claimId>/<n>-<name>    each attachment's bytes, unchanged, once
+ *
+ * One bucket per oracle and one network per oracle, so no network in the path. `askId` is the
+ * claim's scope id as the ledger holds it: a chain collection's id, or an API source's
+ * `api:<sourceId>:<protocolDid>`; no title ⇒ the folder is `<askId>` alone. The folder is fixed by
+ * the ask's FIRST archived claim: later claims find it by listing `<askId>` (one R2 list, no
+ * Blocksync), so a retitled ask keeps its folder.
+ *
+ * `about.json` reads the ask's own PUBLIC documents (the deed's `#pro`, `#done`, …) — never the
+ * rubric; the provider's `archive.describe` (oracle.ts) turns them into the people-facing view.
+ * `answer.json`'s `checks` are the frozen `ext`/`ai` facts, its `why` the engine's reason lines.
+ * Every object carries `customMetadata` (askId, title, kind, place, oracle; answeredAt and verdict
+ * on a claim's records), a few hundred bytes against R2's 2 KB cap.
+ *
+ * Called from INSIDE the step that holds the body (`evaluate`, the fold), after the decision row
+ * landed: the body and the attachment bytes go to R2 and nowhere else — never a step result, never
+ * a log field. FAIL-SOFT: an archive failure is `reportError` + one log line and never fails or
+ * retries the evaluation (a retry finds the decision row and returns before reaching here, so a
+ * claim whose archive failed stays un-archived; the decision is what matters).
+ */
+import { readLinkedDoc } from "../facts/linked-doc.js";
+import { fetchClient } from "./http/client.js";
+import { fetchAttachmentBytes } from "./ixo/attachments.js";
+import { getCollection, getEntityDocs } from "./ixo/blocksync/index.js";
+import { reportError } from "./sentry.js";
+/** The documents read per entity — a deed carries a handful; JSON only, each capped. */
+const MAX_ASK_DOCS = 12;
+const MAX_ASK_DOC_BYTES = 256 * 1024;
+const MAX_SLUG = 60;
+const MAX_META_TEXT = 100;
+/** Per attachment: a phone's full-size photo, EXIF and all — well inside a Worker's memory. */
+const MAX_ARCHIVE_FILE_BYTES = 32 * 1024 * 1024;
+export async function archiveAnswer(env, deps, input) {
+    const bucket = env.ANSWERS_ARCHIVE;
+    if (!bucket)
+        return;
+    const { claimId, collectionId } = input.claim;
+    try {
+        const { folder, about } = await ensureAbout(bucket, deps, input);
+        const meta = claimMeta(aboutMeta(about, deps), input);
+        const files = await writeAttachments(bucket, deps, `${folder}/${claimId}`, input.claim, meta);
+        await putJson(bucket, `${folder}/${claimId}/claim.json`, claimBytes(input), meta);
+        await putJson(bucket, `${folder}/${claimId}/answer.json`, JSON.stringify(answerOf(input, about, files)), meta);
+        deps.metrics.count("archive.written", 1, { op: input.reviewerDid ? "fold" : "decide" });
+    }
+    catch (err) {
+        deps.logger.warn("archive.failed", { claimId, collectionId, detail: String(err) });
+        reportError(err, {
+            lane: "archive",
+            step: input.reviewerDid ? "fold" : "evaluate",
+            claimId,
+            collectionId,
+        });
+    }
+}
+/** The verdicts the act lane pays out on. */
+const PAYS = new Set(["approve", "partial"]);
+/**
+ * The act lane signed an approved verdict on chain: `answer.json` says `paid: yes`. Fail-soft like
+ * the rest, and a no-op for a claim the archive never wrote.
+ */
+export async function archivePaid(env, deps, claim) {
+    const bucket = env.ANSWERS_ARCHIVE;
+    if (!bucket)
+        return;
+    try {
+        const folder = await findFolder(bucket, claim.collectionId);
+        if (!folder)
+            return;
+        const key = `${folder}/${claim.claimId}/answer.json`;
+        const obj = await bucket.get(key);
+        if (!obj)
+            return;
+        const answer = await obj.json();
+        if (answer.paid === "yes" || !PAYS.has(answer.verdict ?? ""))
+            return;
+        await putJson(bucket, key, JSON.stringify({ ...answer, paid: "yes" }), obj.customMetadata ?? {});
+    }
+    catch (err) {
+        deps.logger.warn("archive.paid-failed", { ...claim, detail: String(err) });
+        reportError(err, { lane: "archive", step: "act", ...claim });
+    }
+}
+// --- the ask ------------------------------------------------------------------------------------
+/** The ask's folder and its `about.json` — written once, read back after that. */
+async function ensureAbout(bucket, deps, input) {
+    const askId = input.claim.collectionId;
+    const found = await findFolder(bucket, askId);
+    if (found) {
+        const obj = await bucket.get(`${found}/about.json`);
+        if (obj)
+            return { folder: found, about: await obj.json() };
+    }
+    const about = await describeAsk(deps, input);
+    const folder = found ?? folderOf(askId, about.title);
+    await putJson(bucket, `${folder}/about.json`, JSON.stringify(about), aboutMeta(about, deps));
+    return { folder, about };
+}
+/** `<askId>/` or `<askId>-<slug>/` — never a longer id that merely starts with this one. */
+async function findFolder(bucket, askId) {
+    const listed = await bucket.list({ prefix: askId, delimiter: "/" });
+    for (const prefix of listed.delimitedPrefixes) {
+        const name = prefix.slice(0, -1);
+        const rest = name.slice(askId.length);
+        if (rest === "" || /^-[a-z0-9-]+$/.test(rest))
+            return name;
+    }
+    return null;
+}
+export function folderOf(askId, title) {
+    const slug = slugOf(title ?? "");
+    return slug ? `${askId}-${slug}` : askId;
+}
+/** Lowercase ASCII and dashes, at most 60 characters. */
+export function slugOf(title) {
+    return title
+        .normalize("NFKD")
+        .replace(/[̀-ͯ]/g, "")
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+/, "")
+        .slice(0, MAX_SLUG)
+        .replace(/-+$/, "");
+}
+async function describeAsk(deps, input) {
+    const askId = input.claim.collectionId;
+    const docsOf = async (did) => (await entityDocs(deps, did))?.docs ?? [];
+    let ask = {
+        askId,
+        entity: null,
+        alsoKnownAs: null,
+        collection: null,
+        docs: [],
+        docsOf,
+    };
+    // The chain is where an ask lives: its collection (window, pay) and its entity's documents. An
+    // API source has neither.
+    if (input.lane === "chain") {
+        const collection = await getCollection(deps, askId);
+        const entity = collection?.entity ?? null;
+        const read = entity ? await entityDocs(deps, entity) : null;
+        ask = {
+            ...ask,
+            entity,
+            collection,
+            alsoKnownAs: read?.alsoKnownAs ?? null,
+            docs: read?.docs ?? [],
+        };
+    }
+    const base = defaultAbout(ask);
+    const own = (await input.hooks?.describe?.(ask)) ?? {};
+    // The id and the proof are the chain's, never the hook's.
+    return { ...base, ...own, askId, proof: base.proof };
+}
+/** No hook: the `#pro` name (else `alsoKnownAs`), the collection's window and approval pay. */
+function defaultAbout(ask) {
+    const c = ask.collection;
+    const pro = ask.docs.find((d) => d.id?.endsWith("#pro"))?.json;
+    const name = typeof pro?.name === "string" && pro.name.trim() ? pro.name.trim() : null;
+    const aka = ask.alsoKnownAs && !ask.alsoKnownAs.startsWith("did:") ? ask.alsoKnownAs : null;
+    const coin = c?.payments?.approval?.amount?.find((a) => /^[1-9]\d*$/.test(a.amount));
+    return {
+        askId: ask.askId,
+        title: name ?? aka,
+        question: null,
+        kind: "other",
+        place: {},
+        reward: coin ? { amount: coin.amount, denom: coin.denom } : null,
+        postedBy: {},
+        opensAt: c?.startDate ?? null,
+        closesAt: c?.endDate ?? null,
+        proof: { entity: ask.entity, collection: ask.askId },
+    };
+}
+async function entityDocs(deps, did) {
+    const read = await getEntityDocs(deps, did);
+    if (!read)
+        return null;
+    const resources = read.resources
+        .filter((r) => r.serviceEndpoint && r.encrypted !== "true")
+        .slice(0, MAX_ASK_DOCS);
+    const docs = await Promise.all(resources.map(async (r) => {
+        const doc = await readLinkedDoc(r, {
+            ipfsGateway: deps.config.IPFS_GATEWAY_URL,
+            maxBytes: MAX_ASK_DOC_BYTES,
+            fetch: (u, init) => fetchClient(u, { ...init, trace: deps.trace, attempts: 2 }),
+        });
+        const head = { id: r.id ?? null, type: r.type ?? null };
+        return doc.ok ? { ...head, json: doc.json } : { ...head, json: null, error: doc.reason };
+    }));
+    return { alsoKnownAs: read.alsoKnownAs, docs };
+}
+function answerOf(input, about, files) {
+    const { claim, response } = input;
+    const view = input.hooks?.answer?.({ body: claim.body }) ?? {};
+    const verdict = response.decision.verdict;
+    const reasons = response.decision.reasons.map((r) => r.reason).filter(Boolean);
+    const notCopied = files.filter((f) => f.skipped);
+    return {
+        askId: about.askId,
+        question: about.question,
+        answer: {
+            text: view.text ?? null,
+            files: files.filter((f) => !f.skipped).map((f) => f.name),
+            ...(notCopied.length
+                ? { filesNotCopied: notCopied.map((f) => ({ name: f.name, reason: f.skipped })) }
+                : {}),
+            answeredAt: claim.metadata.submissionDate,
+            place: view.place ?? null,
+        },
+        verdict,
+        why: reasons.length ? reasons : response.explanation ? [response.explanation] : [],
+        checks: checksOf(input.facts),
+        // Payment follows the chain write (`archivePaid`); a review, or a write still to come, is pending.
+        paid: response.decision.status === "unusable" || verdict === "reject" ? "no" : "pending",
+        answeredBy: input.submitter,
+        receipt: { cid: response.receipt?.cid ?? null },
+        ...(input.reviewerDid ? { reviewedBy: input.reviewerDid } : {}),
+        archivedAt: new Date().toISOString(),
+    };
+}
+/** One check per frozen fact: a false fact failed, an errored one never ran. */
+function checksOf(facts) {
+    const all = [...Object.entries(facts?.ext ?? {}), ...Object.entries(facts?.ai ?? {})];
+    return all.map(([name, f]) => {
+        if (f.status === "error")
+            return { name, result: "not-run", note: f.detail };
+        const note = f.reason ?? (typeof f.value === "number" ? `measured ${f.value}` : "");
+        return { name, result: f.value === false ? "fail" : "pass", note };
+    });
+}
+/** The body as stored: a chain claim's exact verified bytes, else its JSON. */
+function claimBytes(input) {
+    const c = input.content;
+    if (c?.kind === "chain" && c.document) {
+        return Uint8Array.from(atob(c.document), (ch) => ch.charCodeAt(0));
+    }
+    return JSON.stringify(c?.kind === "api" ? c.body : input.claim.body);
+}
+function aboutMeta(about, deps) {
+    return compact({
+        askId: about.askId,
+        title: about.title?.slice(0, MAX_META_TEXT),
+        kind: about.kind,
+        place: about.place?.name?.slice(0, MAX_META_TEXT),
+        oracle: deps.config.ORACLE_HOSTNAME,
+    });
+}
+function claimMeta(meta, input) {
+    return compact({
+        ...meta,
+        verdict: input.response.decision.verdict,
+        answeredAt: input.claim.metadata.submissionDate?.slice(0, 10),
+    });
+}
+function compact(m) {
+    return Object.fromEntries(Object.entries(m).filter((e) => !!e[1]));
+}
+function putJson(bucket, key, body, customMetadata) {
+    return bucket.put(key, body, {
+        httpMetadata: { contentType: "application/json" },
+        customMetadata,
+    });
+}
+/**
+ * Each attachment's bytes, unchanged and write-once (`head` first: a fold never fetches them
+ * again), up to 32 MB each. One too large or unreadable is listed, not
+ * copied. No `verdict` in their metadata: a fold can change it, and these are never re-written.
+ */
+async function writeAttachments(bucket, deps, folder, claim, meta) {
+    const { verdict: _verdict, ...customMetadata } = meta;
+    const out = [];
+    for (const [i, a] of claim.attachments.entries()) {
+        const name = `${i + 1}-${safeName(a.name)}`;
+        const key = `${folder}/${name}`;
+        if (await bucket.head(key)) {
+            out.push({ name });
+            continue;
+        }
+        const read = await fetchAttachmentBytes(deps, claim.media, a.url, MAX_ARCHIVE_FILE_BYTES);
+        if (!read.ok) {
+            out.push({ name: a.name, skipped: read.reason });
+            continue;
+        }
+        await bucket.put(key, read.bytes, {
+            httpMetadata: { contentType: a.mediaType },
+            customMetadata,
+        });
+        out.push({ name });
+    }
+    return out;
+}
+/** An R2 key segment: no `/`, nothing odd, bounded. */
+function safeName(name) {
+    return name.replace(/[^A-Za-z0-9._-]+/g, "_").slice(0, 100) || "file";
+}
+//# sourceMappingURL=archive.js.map

package/dist/lib/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/lib/archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,wFAAwF;AACxF,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AACrC,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,+FAA+F;AAC/F,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAoBhD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAQ,EAAE,IAAc,EAAE,KAAmB;IAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9F,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAClF,MAAM,OAAO,CACX,MAAM,EACN,GAAG,MAAM,IAAI,OAAO,cAAc,EAClC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EAC7C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,WAAW,CAAC,GAAG,EAAE;YACf,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU;YAC7C,OAAO;YACP,YAAY;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAQ,EACR,IAA8B,EAC9B,KAAgD;IAEhD,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,cAAc,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuC,CAAC;QACrE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YAAE,OAAO;QACrE,MAAM,OAAO,CACX,MAAM,EACN,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAC1C,GAAG,CAAC,cAAc,IAAI,EAAE,CACzB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAW,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,mGAAmG;AAEnG,kFAAkF;AAClF,KAAK,UAAU,WAAW,CACxB,MAAgB,EAChB,IAAc,EACd,KAAmB;IAEnB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;QACpD,IAAI,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,IAAI,EAAgB,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,UAAU,CAAC,MAAgB,EAAE,KAAa;IACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACpE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,KAAoB;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,KAAK;SACT,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc,EAAE,KAAmB;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IAChF,IAAI,GAAG,GAAe;QACpB,KAAK;QACL,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,EAAE;QACR,MAAM;KACP,CAAC;IACF,+FAA+F;IAC/F,0BAA0B;IAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,IAAI,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,GAAG,GAAG;YACJ,GAAG,GAAG;YACN,MAAM;YACN,UAAU;YACV,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI;YACtC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,0DAA0D;IAC1D,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AACvD,CAAC;AAED,+FAA+F;AAC/F,SAAS,YAAY,CAAC,GAAe;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,UAIN,CAAC;IACT,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAsC,CAAC;IACjG,MAAM,IAAI,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,MAAM,IAAI,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACrF,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,IAAI,IAAI,GAAG;QAClB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI;QAChE,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,CAAC,EAAE,SAAS,IAAI,IAAI;QAC7B,QAAQ,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI;QAC5B,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAc,EACd,GAAW;IAEX,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC;SAC1D,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAuB,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE;YACjC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,iBAAiB;YAC3B,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACxD,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC3F,CAAC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAMD,SAAS,QAAQ,CAAC,KAAmB,EAAE,KAAmB,EAAE,KAAe;IACzE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACzD,GAAG,CAAC,SAAS,CAAC,MAAM;gBAClB,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE;gBACjF,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;SAC1B;QACD,OAAO;QACP,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QAClF,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAC7B,mGAAmG;QACnG,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACxF,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE;QAC/C,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,KAAsB;IACtC,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAS,EAAE;QAClC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,KAAmB;IACrC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAMD,SAAS,SAAS,CAAC,KAAmB,EAAE,IAAc;IACpD,OAAO,OAAO,CAAC;QACb,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;QACjD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAAU,EAAE,KAAmB;IAChD,OAAO,OAAO,CAAC;QACb,GAAG,IAAI;QACP,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACxC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,CAA4C;IAC3D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,OAAO,CAAC,MAAgB,EAAE,GAAW,EAAE,IAAyB,EAAE,cAAoB;IAC7F,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE;QAC3B,YAAY,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE;QACjD,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAID;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAgB,EAChB,IAAc,EACd,MAAc,EACd,KAAkB,EAClB,IAAU;IAEV,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,GAAG,IAAI,CAAC;IACtD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;QAChC,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE;YAChC,YAAY,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,SAAS,EAAE;YAC1C,cAAc;SACf,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uDAAuD;AACvD,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC;AACxE,CAAC"}

package/dist/lib/bech32.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Bech32 (BIP-173) checksum, for addresses a config names as a payee: a typo in one of its 38 data
+ * characters fails here, at isolate start, instead of sending money nowhere. No decode; the HRP and
+ * the character set are the caller's regex.
+ */
+/** True when `address` (lower case, `<hrp>1<data>`) carries a valid bech32 checksum. */
+export declare function bech32Valid(address: string): boolean;
+//# sourceMappingURL=bech32.d.ts.map

package/dist/lib/bech32.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bech32.d.ts","sourceRoot":"","sources":["../../src/lib/bech32.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAgBpD"}

package/dist/lib/bech32.js

@@ -0,0 +1,39 @@
+/**
+ * Bech32 (BIP-173) checksum, for addresses a config names as a payee: a typo in one of its 38 data
+ * characters fails here, at isolate start, instead of sending money nowhere. No decode; the HRP and
+ * the character set are the caller's regex.
+ */
+const CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+const GEN = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3];
+function polymod(values) {
+    let chk = 1;
+    for (const v of values) {
+        const top = chk >>> 25;
+        chk = ((chk & 0x1ffffff) << 5) ^ v;
+        for (let i = 0; i < 5; i++)
+            if ((top >>> i) & 1)
+                chk ^= GEN[i];
+    }
+    return chk;
+}
+/** True when `address` (lower case, `<hrp>1<data>`) carries a valid bech32 checksum. */
+export function bech32Valid(address) {
+    const sep = address.lastIndexOf("1");
+    if (sep < 1 || address.length - sep < 7)
+        return false;
+    const hrp = address.slice(0, sep);
+    const data = [];
+    for (const c of address.slice(sep + 1)) {
+        const d = CHARSET.indexOf(c);
+        if (d < 0)
+            return false;
+        data.push(d);
+    }
+    const expanded = [
+        ...[...hrp].map((c) => c.charCodeAt(0) >> 5),
+        0,
+        ...[...hrp].map((c) => c.charCodeAt(0) & 31),
+    ];
+    return polymod([...expanded, ...data]) === 1;
+}
+//# sourceMappingURL=bech32.js.map

package/dist/lib/bech32.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bech32.js","sourceRoot":"","sources":["../../src/lib/bech32.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,OAAO,GAAG,kCAAkC,CAAC;AACnD,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAEzE,SAAS,OAAO,CAAC,MAAgB;IAC/B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC;QACvB,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;gBAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAW,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;KAC7C,CAAC;IACF,OAAO,OAAO,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC"}

package/dist/lib/claim-erase.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The owner's erase of one chain claim (company authority F14, golden scenario G17). The oracle
+ * never deletes chain-lane data on its own (owner, 2026-10-11): the organisation erases its own
+ * claims, through `DELETE /v1/claims/:claimId/body` (or the CLI's `erase`, a loop over it).
+ *
+ * A chain claim's body is never stored here (it lives on the claim's own store), but its answers
+ * shadow into two places this oracle does hold: the fact transcripts frozen on `decisions.facts`
+ * (an AI check's request, an external source's `send` payload) and the duplicate registry's
+ * `normalizedText`. Both go — with the same strip the API lane's erase uses. What survives: the fact
+ * VALUES (the act policy and the record read them — codes and scores, not answers), the decision
+ * and its receipt, the registry digests and pHashes (the duplicate lane's exact match keeps
+ * working; only fuzzy recall over this claim goes), and the ledger row, stamped `erasedAt`.
+ */
+import type { Database } from "../db/client.js";
+/**
+ * Erase one chain claim's answer copies, in ONE batch, idempotently: a second call rewrites the
+ * same stripped facts and nulls nothing new, and `erasedAt` keeps its first stamp. The fact cache
+ * goes too — rows only outlive a crashed attempt, but they carry transcripts as well. The facts are
+ * written once by the evaluate step and never by the fold, so the read-then-write cannot race one.
+ */
+export declare function eraseChainClaim(db: Database, claimId: string, now?: Date): Promise<void>;
+//# sourceMappingURL=claim-erase.d.ts.map

package/dist/lib/claim-erase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-erase.d.ts","sourceRoot":"","sources":["../../src/lib/claim-erase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAI7C;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAa,iBAoBpF"}

package/dist/lib/claim-erase.js

@@ -0,0 +1,44 @@
+/**
+ * The owner's erase of one chain claim (company authority F14, golden scenario G17). The oracle
+ * never deletes chain-lane data on its own (owner, 2026-10-11): the organisation erases its own
+ * claims, through `DELETE /v1/claims/:claimId/body` (or the CLI's `erase`, a loop over it).
+ *
+ * A chain claim's body is never stored here (it lives on the claim's own store), but its answers
+ * shadow into two places this oracle does hold: the fact transcripts frozen on `decisions.facts`
+ * (an AI check's request, an external source's `send` payload) and the duplicate registry's
+ * `normalizedText`. Both go — with the same strip the API lane's erase uses. What survives: the fact
+ * VALUES (the act policy and the record read them — codes and scores, not answers), the decision
+ * and its receipt, the registry digests and pHashes (the duplicate lane's exact match keeps
+ * working; only fuzzy recall over this claim goes), and the ledger row, stamped `erasedAt`.
+ */
+import { and, eq, sql } from "drizzle-orm";
+import { claimBodyDigests, claimIngests, decisions, factCache } from "../db/schema.js";
+import { withoutTranscripts } from "./api-lane/retention.js";
+/**
+ * Erase one chain claim's answer copies, in ONE batch, idempotently: a second call rewrites the
+ * same stripped facts and nulls nothing new, and `erasedAt` keeps its first stamp. The fact cache
+ * goes too — rows only outlive a crashed attempt, but they carry transcripts as well. The facts are
+ * written once by the evaluate step and never by the fold, so the read-then-write cannot race one.
+ */
+export async function eraseChainClaim(db, claimId, now = new Date()) {
+    const decision = await db.query.decisions.findFirst({
+        columns: { facts: true },
+        where: eq(decisions.claimId, claimId),
+    });
+    await db.batch([
+        db
+            .update(claimBodyDigests)
+            .set({ normalizedText: null })
+            .where(eq(claimBodyDigests.claimId, claimId)),
+        db.delete(factCache).where(eq(factCache.claimId, claimId)),
+        db
+            .update(decisions)
+            .set({ facts: decision?.facts ? withoutTranscripts(decision.facts) : null })
+            .where(eq(decisions.claimId, claimId)),
+        db
+            .update(claimIngests)
+            .set({ erasedAt: sql `coalesce(${claimIngests.erasedAt}, ${now.getTime()})` })
+            .where(and(eq(claimIngests.claimId, claimId), eq(claimIngests.lane, "chain"))),
+    ]);
+}
+//# sourceMappingURL=claim-erase.js.map

package/dist/lib/claim-erase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-erase.js","sourceRoot":"","sources":["../../src/lib/claim-erase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAY,EAAE,OAAe,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACnF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;QAClD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;QACxB,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;KACtC,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,KAAK,CAAC;QACb,EAAE;aACC,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;aAC7B,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,EAAE;aACC,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC3E,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,EAAE;aACC,MAAM,CAAC,YAAY,CAAC;aACpB,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAA,YAAY,YAAY,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;aAC5E,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;KACjF,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/cursor.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The keyset cursor every list route shares: (createdAt, claimId), base64 of a JSON pair —
+ * opaque to clients, malformed input is a 400. One implementation (E15 consolidated the three
+ * per-route copies).
+ */
+export declare const encodeCursor: (createdAt: Date, claimId: string) => string;
+export declare function decodeCursor(cursor: string): {
+    createdAt: Date;
+    claimId: string;
+};
+//# sourceMappingURL=cursor.d.ts.map

package/dist/lib/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../src/lib/cursor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,eAAO,MAAM,YAAY,cAAe,IAAI,WAAW,MAAM,KAAG,MACN,CAAC;AAE3D,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CASjF"}

package/dist/lib/cursor.js

@@ -0,0 +1,20 @@
+/**
+ * The keyset cursor every list route shares: (createdAt, claimId), base64 of a JSON pair —
+ * opaque to clients, malformed input is a 400. One implementation (E15 consolidated the three
+ * per-route copies).
+ */
+import { AppError } from "./errors.js";
+export const encodeCursor = (createdAt, claimId) => btoa(JSON.stringify([createdAt.toISOString(), claimId]));
+export function decodeCursor(cursor) {
+    try {
+        const [iso, claimId] = JSON.parse(atob(cursor));
+        const createdAt = new Date(iso);
+        if (Number.isNaN(createdAt.getTime()) || typeof claimId !== "string")
+            throw new Error("shape");
+        return { createdAt, claimId };
+    }
+    catch {
+        throw AppError.badRequest("Malformed cursor");
+    }
+}
+//# sourceMappingURL=cursor.js.map

package/dist/lib/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/lib/cursor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAe,EAAE,OAAe,EAAU,EAAE,CACvE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAE3D,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAqB,CAAC;QACpE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/F,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/lib/email/send.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The email side-effect lane — the twin of `lib/matrix/deliver.ts`, and fail-soft for the
+ * same reason: a notice is delivery, never judgement. Nothing here throws. A missing binding, an
+ * un-onboarded sender domain, a bounce, a rate limit — each is one log line and an outcome the
+ * caller records. No workflow step, route, or Matrix card ever fails because an email did not land.
+ *
+ * Ported near-verbatim from eval-engine's `lib/email/send.ts` (v1 parity port), with one change:
+ * the FROM address is a provider config choice (`EMAIL_FROM_ADDRESS`/`EMAIL_FROM_NAME`), never a
+ * hardcoded constant — this is a boilerplate any provider clones under their own domain.
+ *
+ * `env.EMAIL` is Cloudflare Email Service (`send_email` binding, wrangler.jsonc). The binding is
+ * optional at the type level on purpose: tests, `vitest` isolates and any environment configured
+ * without it get the `skipped` no-op, exactly as an unset `ORACLE_MATRIX_ACCESS_TOKEN` turns the
+ * Matrix lane off. `EMAIL_FROM_ADDRESS` unset is the SAME off-switch: a provider who hasn't
+ * onboarded a sending domain onto Cloudflare Email Sending yet (`wrangler email sending enable
+ * <domain>`) gets a clean `skipped`, never a loud failure at every notice site.
+ *
+ * Sends are NOT retried here. The cron re-scans every collection every tick and the routes re-run
+ * on the next call, so a transient failure is naturally re-attempted by whatever caller decides to
+ * notify again — a retry loop inside a fail-soft lane would only turn one missed email into a
+ * burst of duplicates.
+ */
+import type { Config } from "../../config.js";
+import type { Logger } from "../logger.js";
+import type { Metrics } from "../metrics.js";
+export interface EmailDeps {
+    logger: Logger;
+    metrics: Metrics;
+    config: Pick<Config, "EMAIL_FROM_ADDRESS" | "EMAIL_FROM_NAME">;
+    /** `env.EMAIL`. Absent ⇒ the whole lane is a no-op that logs once. */
+    email?: SendEmail;
+}
+export type EmailOutcome = "sent" | "skipped" | "failed";
+export interface OutboundEmail {
+    to: string;
+    subject: string;
+    html: string;
+    text: string;
+    /** Names the lane in logs and metrics, e.g. `collection_paused`. */
+    kind: string;
+}
+export declare function sendEmail(deps: EmailDeps, mail: OutboundEmail): Promise<EmailOutcome>;
+//# sourceMappingURL=send.d.ts.map

package/dist/lib/email/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../../src/lib/email/send.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,iBAAiB,CAAC,CAAC;IAC/D,sEAAsE;IACtE,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;CACd;AAQD,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAyC3F"}

package/dist/lib/email/send.js

@@ -0,0 +1,71 @@
+/**
+ * The email side-effect lane — the twin of `lib/matrix/deliver.ts`, and fail-soft for the
+ * same reason: a notice is delivery, never judgement. Nothing here throws. A missing binding, an
+ * un-onboarded sender domain, a bounce, a rate limit — each is one log line and an outcome the
+ * caller records. No workflow step, route, or Matrix card ever fails because an email did not land.
+ *
+ * Ported near-verbatim from eval-engine's `lib/email/send.ts` (v1 parity port), with one change:
+ * the FROM address is a provider config choice (`EMAIL_FROM_ADDRESS`/`EMAIL_FROM_NAME`), never a
+ * hardcoded constant — this is a boilerplate any provider clones under their own domain.
+ *
+ * `env.EMAIL` is Cloudflare Email Service (`send_email` binding, wrangler.jsonc). The binding is
+ * optional at the type level on purpose: tests, `vitest` isolates and any environment configured
+ * without it get the `skipped` no-op, exactly as an unset `ORACLE_MATRIX_ACCESS_TOKEN` turns the
+ * Matrix lane off. `EMAIL_FROM_ADDRESS` unset is the SAME off-switch: a provider who hasn't
+ * onboarded a sending domain onto Cloudflare Email Sending yet (`wrangler email sending enable
+ * <domain>`) gets a clean `skipped`, never a loud failure at every notice site.
+ *
+ * Sends are NOT retried here. The cron re-scans every collection every tick and the routes re-run
+ * on the next call, so a transient failure is naturally re-attempted by whatever caller decides to
+ * notify again — a retry loop inside a fail-soft lane would only turn one missed email into a
+ * burst of duplicates.
+ */
+import { getOracle } from "../../oracle.js";
+/** The Email Service error code (`E_SENDER_NOT_VERIFIED`, `E_RECIPIENT_SUPPRESSED`, …), or the error. */
+function reasonOf(err) {
+    const code = err?.code;
+    return typeof code === "string" ? code : String(err);
+}
+export async function sendEmail(deps, mail) {
+    const { kind, to } = mail;
+    if (!deps.email) {
+        deps.logger.info(`email.${kind}.skipped`, { reason: "EMAIL binding not configured" });
+        deps.metrics.count(`email.${kind}`, 1, { status: "skipped" });
+        return "skipped";
+    }
+    if (!deps.config.EMAIL_FROM_ADDRESS) {
+        deps.logger.info(`email.${kind}.skipped`, { reason: "EMAIL_FROM_ADDRESS not configured" });
+        deps.metrics.count(`email.${kind}`, 1, { status: "skipped" });
+        return "skipped";
+    }
+    if (!to.trim()) {
+        deps.logger.info(`email.${kind}.skipped`, { reason: "no recipient address" });
+        deps.metrics.count(`email.${kind}`, 1, { status: "skipped" });
+        return "skipped";
+    }
+    try {
+        const { messageId } = await deps.email.send({
+            to,
+            // The oracle's own name is the default sender label — a provider only sets EMAIL_FROM_NAME
+            // to send under something other than what their listing is called.
+            from: {
+                email: deps.config.EMAIL_FROM_ADDRESS,
+                name: deps.config.EMAIL_FROM_NAME ?? getOracle().config.name,
+            },
+            subject: mail.subject,
+            html: mail.html,
+            text: mail.text,
+        });
+        deps.logger.info(`email.${kind}.sent`, { messageId });
+        deps.metrics.count(`email.${kind}`, 1, { status: "sent" });
+        return "sent";
+    }
+    catch (err) {
+        // The address itself is never logged — it is a customer's personal data and the log is not the
+        // place for it. The failure code is what an operator needs.
+        deps.logger.warn(`email.${kind}.failed`, { reason: reasonOf(err) });
+        deps.metrics.count(`email.${kind}`, 1, { status: "failed" });
+        return "failed";
+    }
+}
+//# sourceMappingURL=send.js.map

package/dist/lib/email/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../../../src/lib/email/send.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAuBzC,yGAAyG;AACzG,SAAS,QAAQ,CAAC,GAAY;IAC5B,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAe,EAAE,IAAmB;IAClE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1C,EAAE;YACF,2FAA2F;YAC3F,mEAAmE;YACnE,IAAI,EAAE;gBACJ,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI;aAC7D;YACD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+FAA+F;QAC/F,4DAA4D;QAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}