@izagood/avcs 0.1.0

package/dist/hub/hubServer.js

@@ -0,0 +1,365 @@
+// A self-contained HTTP hub for object-gossip over the network (M2 / docs/10 WS-B).
+//
+// The hub is just an ObjectStore behind three minimal endpoints. Because objects are
+// content-addressed and append-only, sync is a conflict-free union: clients diff their
+// local oid set against the hub's "have" set and transfer only what's missing, in
+// either direction. The hub never mutates an existing object (idempotent put).
+//
+//   GET  /have          → JSON array of every oid the hub holds (the "have" set)
+//   GET  /objects/:oid  → the stored object JSON (404 if absent)
+//   POST /objects       → store an object (body = object JSON), returns { oid }
+//
+// Node builtins only: node:http + the existing ObjectStore.
+import { createServer } from "node:http";
+import { ObjectStore } from "../store/objectStore.js";
+import { verifyMessage } from "../core/identity.js";
+import { computeOid } from "../core/canonical.js";
+import { silentLogger } from "../observe/logger.js";
+import { Metrics } from "../observe/metrics.js";
+import { MATERIALIZER_VERSION } from "../reducer/policy.js";
+/** Wire-protocol version the hub speaks (have/objects/refs gossip). Bumped on breaking changes. */
+export const HUB_PROTOCOL_VERSION = 1;
+const ROLE_WEIGHT = { reader: 0, proposer: 1, reviewer: 2, maintainer: 3, admin: 4 };
+function authRequirement(obj) {
+    switch (obj.type) {
+        case "operation": return { signerId: obj.actor.id, minRole: "proposer" };
+        case "evidence": return { signerId: obj.producedBy.id, minRole: "proposer" };
+        case "decision": return { signerId: obj.decidedBy.id, minRole: "reviewer" };
+        case "approval": return { signerId: obj.by, minRole: "reviewer" };
+        case "promotion": return { signerId: obj.by, minRole: "reviewer" };
+        case "override": return { signerId: obj.by, minRole: "admin" };
+        case "redaction": return { signerId: obj.by, minRole: "admin" };
+        case "membership":
+        case "protection":
+        case "policy": return "reject";
+        default: return "allow";
+    }
+}
+/**
+ * Authorize a pushed object against the hub's membership. Verifies the signer is a
+ * non-revoked member with a sufficient role AND that the signature is valid over the
+ * RECOMPUTED content oid (E1) — never the client-claimed oid — so hub-accept ⟹
+ * replica-accept. Returns a reason string when denied (for the 403 body).
+ */
+async function authorizePush(store, obj) {
+    const req = authRequirement(obj);
+    if (req === "allow")
+        return { ok: true };
+    if (req === "reject")
+        return { ok: false, reason: `${obj.type} is central-authoritative; pull it via /refs, do not push` };
+    const memRef = await store.getRef(`member:${req.signerId}`);
+    if (!memRef || !(await store.has(memRef)))
+        return { ok: false, reason: `signer ${req.signerId} is not a member` };
+    const m = await store.get(memRef);
+    if (m.revokedAt || m.actorId !== req.signerId)
+        return { ok: false, reason: "membership revoked or mismatched" };
+    if (ROLE_WEIGHT[m.role] < ROLE_WEIGHT[req.minRole])
+        return { ok: false, reason: `role ${m.role} below required ${req.minRole}` };
+    const sig = obj.sig;
+    if (!sig)
+        return { ok: false, reason: "object is unsigned" };
+    const oid = computeOid(obj.type, obj);
+    if (!verifyMessage(m.publicKey, oid, sig.sig))
+        return { ok: false, reason: "signature does not verify over the content oid" };
+    return { ok: true };
+}
+const MAX_BODY = 64 * 1024 * 1024; // 64 MiB guard against unbounded request bodies
+/** Read a request body fully into a string, rejecting if it grows past MAX_BODY. */
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on("data", (c) => {
+            size += c.length;
+            if (size > MAX_BODY) {
+                reject(new Error("request body too large"));
+                req.destroy();
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+        req.on("error", reject);
+    });
+}
+function sendJson(res, status, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(status, { "content-type": "application/json" });
+    res.end(payload);
+}
+/**
+ * Start an HTTP hub backed by `new ObjectStore(opts.repoDir)`. The store is init()'d
+ * so an empty repo dir works. Pass `port: 0` (or omit) to get an OS-assigned port,
+ * read back from the returned handle.
+ */
+export async function startHub(opts) {
+    const store = new ObjectStore(opts.repoDir);
+    await store.init(); // tolerate a fresh/empty repo dir
+    const gated = opts.gated ?? false;
+    const logger = opts.logger ?? silentLogger();
+    const metrics = opts.metrics ?? new Metrics();
+    // E7 operability: per-actor push quota (a rolling-window counter) + an append-only
+    // audit log of accepted mutations (provenance beyond the signed object itself).
+    const rl = opts.rateLimit;
+    const windowMs = rl?.windowMs ?? 60_000;
+    const hits = new Map();
+    const allow = (key) => {
+        if (!rl)
+            return true;
+        const now = Date.now();
+        const arr = (hits.get(key) ?? []).filter((t) => now - t < windowMs);
+        if (arr.length >= rl.maxPerWindow) {
+            hits.set(key, arr);
+            return false;
+        }
+        arr.push(now);
+        hits.set(key, arr);
+        return true;
+    };
+    const audit = async (rec) => {
+        try {
+            await store.appendAux("hub-audit.log", `${JSON.stringify({ ts: new Date().toISOString(), ...rec })}\n`);
+        }
+        catch (e) {
+            logger.warn("hub.audit.fail", { error: String(e.message) });
+        }
+    };
+    const ctx = { audit, allow };
+    const server = createServer((req, res) => {
+        const startedAt = process.hrtime.bigint();
+        const path = (req.url ?? "/").split("?")[0];
+        metrics.inc("hub.requests");
+        res.on("finish", () => {
+            const ms = Number(process.hrtime.bigint() - startedAt) / 1e6;
+            metrics.observe("hub.request.ms", ms);
+            metrics.inc(`hub.status.${Math.floor(res.statusCode / 100)}xx`);
+            logger.info("hub.request", { method: req.method, path, status: res.statusCode, ms: Math.round(ms * 100) / 100 });
+        });
+        handle(store, req, res, gated, metrics, opts.repoDir, ctx).catch((err) => {
+            // Last-resort guard: never let a handler rejection crash the server.
+            metrics.inc("hub.errors");
+            logger.error("hub.error", { method: req.method, path, error: String(err?.message ?? err) });
+            if (!res.headersSent)
+                sendJson(res, 500, { error: String(err?.message ?? err) });
+            else
+                res.end();
+        });
+    });
+    await new Promise((resolve) => server.listen(opts.port ?? 0, "127.0.0.1", resolve));
+    const addr = server.address();
+    if (addr === null || typeof addr === "string") {
+        await new Promise((r) => server.close(() => r()));
+        throw new Error("hub failed to bind a TCP port");
+    }
+    const port = addr.port;
+    const url = `http://127.0.0.1:${port}`;
+    return {
+        url,
+        port,
+        metrics,
+        close() {
+            return new Promise((resolve, reject) => {
+                server.close((err) => (err ? reject(err) : resolve()));
+            });
+        },
+    };
+}
+/** Authenticate a finalize request (E6): the signature must be by `by`'s registered
+ *  membership key over the canonical finalize message. Role authorization is enforced
+ *  separately by repo.finalize (finalizeRole). */
+async function verifyFinalizeSig(store, by, view, newCheckpoint, parentHead, sig) {
+    const s = sig;
+    if (!s || typeof s.sig !== "string")
+        return false;
+    const memRef = await store.getRef(`member:${by}`);
+    if (!memRef || !(await store.has(memRef)))
+        return false;
+    const m = await store.get(memRef);
+    if (m.revokedAt || m.actorId !== by)
+        return false;
+    return verifyMessage(m.publicKey, `finalize:${view}:${newCheckpoint}:${parentHead ?? ""}`, s.sig);
+}
+/** The actor a push is attributed to (for the audit log + quota): the object's signer
+ *  field when there is one, else null (the caller falls back to the remote address). */
+function attributedActor(obj) {
+    const req = authRequirement(obj);
+    return typeof req === "object" ? req.signerId : null;
+}
+async function handle(store, req, res, gated, metrics, repoDir, ops) {
+    // Parse path only (ignore query); the host is irrelevant for routing.
+    const url = new URL(req.url ?? "/", "http://localhost");
+    const path = url.pathname;
+    const method = req.method ?? "GET";
+    // GET /healthz → liveness/readiness probe (O(1), no store scan) for LBs/orchestrators.
+    if (method === "GET" && (path === "/healthz" || path === "/health")) {
+        sendJson(res, 200, { status: "ok", gated });
+        return;
+    }
+    // GET /version → identify the hub and the gossip protocol/materializer it speaks, so a
+    // client can refuse to sync against an incompatible peer.
+    if (method === "GET" && path === "/version") {
+        sendJson(res, 200, { name: "avcs-hub", protocol: HUB_PROTOCOL_VERSION, materializer: MATERIALIZER_VERSION, gated });
+        return;
+    }
+    // GET /metrics → in-process counters/timings snapshot (request counts, status classes,
+    // latency). Production forwards this to Prometheus/OTel; here it's a scrapeable JSON.
+    if (method === "GET" && path === "/metrics") {
+        sendJson(res, 200, metrics.snapshot());
+        return;
+    }
+    // GET /have → all oids the hub holds (full set; initial clone / older clients).
+    if (method === "GET" && path === "/have") {
+        const oids = [];
+        for await (const obj of store.list())
+            oids.push(obj.oid);
+        sendJson(res, 200, oids);
+        return;
+    }
+    // GET /sync?since=N → incremental object discovery (E5). Returns the oids appended to
+    // the object-log after index N, plus the new cursor (log length). since=0 / out-of-range
+    // returns the full set (a first sync or a client whose cursor is stale). The object-log
+    // is append-only in normal operation, so the cursor is stable across syncs; the client
+    // always falls back to /have if this endpoint is absent, so correctness never depends
+    // on the cursor — it is a pure transfer optimization.
+    if (method === "GET" && path === "/sync") {
+        const sinceRaw = Number(url.searchParams.get("since") ?? "0");
+        const since = Number.isFinite(sinceRaw) && sinceRaw > 0 ? Math.floor(sinceRaw) : 0;
+        const all = await store.readObjLog();
+        const oids = since > 0 && since <= all.length ? all.slice(since) : all;
+        sendJson(res, 200, { oids, cursor: all.length });
+        return;
+    }
+    // GET /refs → governance refs the hub is authoritative for (policy/membership/
+    // protection/head). Clients pull these to adopt the org's canonical governance.
+    if (method === "GET" && path === "/refs") {
+        sendJson(res, 200, { refs: Object.fromEntries(await store.listRefs()) });
+        return;
+    }
+    // GET /objects/:oid → the object JSON (404 if absent).
+    if (method === "GET" && path.startsWith("/objects/")) {
+        const oid = decodeURIComponent(path.slice("/objects/".length));
+        if (!oid) {
+            sendJson(res, 400, { error: "missing oid" });
+            return;
+        }
+        if (!(await store.has(oid))) {
+            sendJson(res, 404, { error: "not found", oid });
+            return;
+        }
+        sendJson(res, 200, await store.get(oid));
+        return;
+    }
+    // POST /objects → store the object, return its oid.
+    if (method === "POST" && path === "/objects") {
+        let raw;
+        try {
+            raw = await readBody(req);
+        }
+        catch (err) {
+            sendJson(res, 413, { error: String(err.message) });
+            return;
+        }
+        let obj;
+        try {
+            obj = JSON.parse(raw);
+        }
+        catch {
+            sendJson(res, 400, { error: "invalid JSON" });
+            return;
+        }
+        if (typeof obj !== "object" || obj === null || typeof obj.type !== "string") {
+            sendJson(res, 400, { error: "object must have a string `type`" });
+            return;
+        }
+        // E7 per-actor push quota: key on the object's signer, else the remote address.
+        const actor = attributedActor(obj);
+        const rlKey = actor ? `actor:${actor}` : `addr:${req.socket.remoteAddress ?? "?"}`;
+        if (!ops.allow(rlKey)) {
+            metrics.inc("hub.ratelimited");
+            sendJson(res, 429, { error: "rate limit exceeded" });
+            return;
+        }
+        // Authorize the push (E2). On a gated hub EVERY mutating governance object is
+        // checked. A `redaction` is checked ALWAYS — even on an ungated hub (E3): it
+        // overwrites blob bytes irrecoverably, so an unauthenticated redaction is a
+        // data-destruction DoS. authorizePush requires an admin-signed redaction; an open
+        // hub with no admin membership therefore rejects all redactions (no DoS) rather
+        // than the old trust-all behavior.
+        const isRedaction = obj.type === "redaction";
+        if (gated || isRedaction) {
+            const auth = await authorizePush(store, obj);
+            if (!auth.ok) {
+                sendJson(res, 403, { error: auth.reason });
+                return;
+            }
+        }
+        // put() recomputes the oid from content, so a forged/incorrect inbound oid cannot
+        // poison the store — it lands at its true content address (or is a no-op if present).
+        const oid = await store.put(obj);
+        // A pushed (now admin-authorized) redaction evicts the hub's own copy of the blob.
+        // Serialize the read-modify-write under a cross-process lock (E3): the scan +
+        // overwriteAt over shared blob files must not interleave with a concurrent push or
+        // a puller's applyRedactions, or two redactions could race on the same blob.
+        if (isRedaction) {
+            await store.withLock("redactions", async () => {
+                const { applyRedactions } = await import("../store/applyRedactions.js");
+                await applyRedactions(store);
+            });
+        }
+        await ops.audit({ action: "put", type: obj.type, oid, actor }); // E7 provenance
+        sendJson(res, 200, { oid });
+        return;
+    }
+    // POST /finalize → advance a view's protected head via the authoritative compare-and-
+    // swap (E6). The hub had no finalize endpoint, so a remote client couldn't merge and
+    // setRef had no CAS — two finalizes could clobber. This runs repo.finalize, which does
+    // the CAS on parentHead under a cross-process lock plus the role/checks/approvals/
+    // causal-completeness gates. On a gated hub the request must be signed by `by`.
+    if (method === "POST" && path === "/finalize") {
+        let raw;
+        try {
+            raw = await readBody(req);
+        }
+        catch (err) {
+            sendJson(res, 413, { error: String(err.message) });
+            return;
+        }
+        let body;
+        try {
+            body = JSON.parse(raw);
+        }
+        catch {
+            sendJson(res, 400, { error: "invalid JSON" });
+            return;
+        }
+        const { view, newCheckpoint, by } = body;
+        if (typeof view !== "string" || typeof newCheckpoint !== "string" || typeof by !== "string") {
+            sendJson(res, 400, { error: "finalize requires string { view, newCheckpoint, by }" });
+            return;
+        }
+        const parentHead = typeof body.parentHead === "string" ? body.parentHead : null;
+        if (gated && !(await verifyFinalizeSig(store, by, view, newCheckpoint, parentHead, body.sig))) {
+            sendJson(res, 403, { error: "finalize not signed by the claimed member" });
+            return;
+        }
+        if (!ops.allow(`actor:${by}`)) {
+            metrics.inc("hub.ratelimited");
+            sendJson(res, 429, { error: "rate limit exceeded" });
+            return;
+        }
+        const { Repo } = await import("../api/repo.js");
+        const repo = await Repo.open(repoDir);
+        const result = await repo.finalize({ view, newCheckpoint, parentHead, by });
+        await ops.audit({ action: "finalize", view, newCheckpoint, by, finalized: result.finalized, reason: result.finalized ? undefined : result.reason }); // E7
+        if (result.finalized) {
+            sendJson(res, 200, result);
+            return;
+        }
+        // A stale parentHead (lost the CAS race) is a 409 conflict; everything else (role,
+        // checks, approvals, incomplete history) is a 422 unprocessable.
+        sendJson(res, /head moved/.test(result.reason) ? 409 : 422, result);
+        return;
+    }
+    sendJson(res, 404, { error: "no such route", method, path });
+}
+//# sourceMappingURL=hubServer.js.map

package/dist/hub/hubServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hubServer.js","sourceRoot":"","sources":["../../src/hub/hubServer.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,EAAE;AACF,qFAAqF;AACrF,uFAAuF;AACvF,kFAAkF;AAClF,+EAA+E;AAC/E,EAAE;AACF,iFAAiF;AACjF,iEAAiE;AACjE,gFAAgF;AAChF,EAAE;AACF,4DAA4D;AAE5D,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAe,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAM5D,mGAAmG;AACnG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAStC,MAAM,WAAW,GAA6B,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAe/G,SAAS,eAAe,CAAC,GAAc;IACrC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,WAAW,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAG,GAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACxF,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAG,GAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAC3F,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAG,GAAgB,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAC1F,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAG,GAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAChF,KAAK,WAAW,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAG,GAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAClF,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAG,GAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC7E,KAAK,WAAW,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAG,GAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC/E,KAAK,YAAY,CAAC;QAAC,KAAK,YAAY,CAAC;QAAC,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QACrE,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,KAAkB,EAAE,GAAc;IAC7D,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,2DAA2D,EAAE,CAAC;IAC3H,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,QAAQ,kBAAkB,EAAE,CAAC;IAClH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAa,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IAChH,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,mBAAmB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IACjI,MAAM,GAAG,GAAI,GAA2B,CAAC,GAAG,CAAC;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAyC,CAAC,CAAC;IAC5E,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IAC9H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gDAAgD;AAEnF,oFAAoF;AACpF,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAI9B;IACC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,kCAAkC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,OAAO,EAAE,CAAC;IAE9C,mFAAmF;IACnF,gFAAgF;IAChF,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IAC1B,MAAM,QAAQ,GAAG,EAAE,EAAE,QAAQ,IAAI,MAAM,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAW,EAAE;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QACpE,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,EAAE,GAA4B,EAAiB,EAAE;QAClE,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChH,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACvF,CAAC,CAAC;IACF,MAAM,GAAG,GAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAErC,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,GAAG,CAAC;YAC7D,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QACnH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACvE,qEAAqE;YACrE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;;gBAC5E,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAEvC,OAAO;QACL,GAAG;QACH,IAAI;QACJ,OAAO;QACP,KAAK;YACH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;kDAEkD;AAClD,KAAK,UAAU,iBAAiB,CAAC,KAAkB,EAAE,EAAU,EAAE,IAAY,EAAE,aAAqB,EAAE,UAAyB,EAAE,GAAY;IAC3I,MAAM,CAAC,GAAG,GAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAa,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,IAAI,IAAI,aAAa,IAAI,UAAU,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;AACpG,CAAC;AAQD;wFACwF;AACxF,SAAS,eAAe,CAAC,GAAc;IACrC,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAkB,EAAE,GAAoB,EAAE,GAAmB,EAAE,KAAc,EAAE,OAAgB,EAAE,OAAe,EAAE,GAAW;IACjJ,sEAAsE;IACtE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IAEnC,uFAAuF;IACvF,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QACpE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,uFAAuF;IACvF,0DAA0D;IAC1D,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,YAAY,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;QACpH,OAAO;IACT,CAAC;IAED,uFAAuF;IACvF,sFAAsF;IACtF,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,gFAAgF;IAChF,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAa,CAAC,CAAC;QACnE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,sFAAsF;IACtF,yFAAyF;IACzF,wFAAwF;IACxF,uFAAuF;IACvF,sFAAsF;IACtF,sDAAsD;IACtD,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,uDAAuD;IACvD,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,oDAAoD;IACpD,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAQ,GAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,gFAAgF;QAChF,MAAM,KAAK,GAAG,eAAe,CAAC,GAAgB,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,8EAA8E;QAC9E,6EAA6E;QAC7E,4EAA4E;QAC5E,kFAAkF;QAClF,gFAAgF;QAChF,mCAAmC;QACnC,MAAM,WAAW,GAAI,GAAiB,CAAC,IAAI,KAAK,WAAW,CAAC;QAC5D,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAgB,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;QACH,CAAC;QACD,kFAAkF;QAClF,sFAAsF;QACtF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAgB,CAAC,CAAC;QAC9C,mFAAmF;QACnF,8EAA8E;QAC9E,mFAAmF;QACnF,6EAA6E;QAC7E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;gBAC5C,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;gBACxE,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAG,GAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB;QAC/F,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,sFAAsF;IACtF,qFAAqF;IACrF,uFAAuF;IACvF,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACzH,IAAI,IAAoG,CAAC;QACzG,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChG,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;QACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5F,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9F,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChI,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK;QAC1J,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7D,mFAAmF;QACnF,iEAAiE;QACjE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export { Repo } from "./api/repo.ts";
+export { ObjectStore, CorruptObjectError } from "./store/objectStore.ts";
+export type { FsckReport } from "./store/objectStore.ts";
+export { startHub, HUB_PROTOCOL_VERSION } from "./hub/hubServer.ts";
+export type { HubHandle } from "./hub/hubServer.ts";
+export { pushToHub, pullFromHub, finalizeOnHub } from "./hub/hubClient.ts";
+export { Keyring, generateKeypair, signMessage, verifyMessage } from "./core/identity.ts";
+export type { Keypair, KeyRecord, Signature } from "./core/identity.ts";
+export { Logger, consoleLogger, silentLogger } from "./observe/logger.ts";
+export type { LogEntry, LogLevel } from "./observe/logger.ts";
+export { Metrics } from "./observe/metrics.ts";
+export type { Timing } from "./observe/metrics.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAGrC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACzE,YAAY,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACpE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3E,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC1F,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAGxE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC1E,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+// Public API surface for `@izagood/avcs` consumers (e.g. the avcshub hosting server).
+//
+// This is the package root export. Subpath exports (`@izagood/avcs/hub`, `/store`,
+// `/identity`, `/types`, …) are declared in package.json#exports for callers that want a
+// single module. Development and tests still run the raw `.ts` via type-stripping; only
+// the published build (tsconfig.build.json → dist/) compiles this to JS + .d.ts.
+// Repository / materialization
+export { Repo } from "./api/repo.js";
+// Object storage + integrity
+export { ObjectStore, CorruptObjectError } from "./store/objectStore.js";
+// Hub (server + client) — the replication / trust boundary avcshub productionizes
+export { startHub, HUB_PROTOCOL_VERSION } from "./hub/hubServer.js";
+export { pushToHub, pullFromHub, finalizeOnHub } from "./hub/hubClient.js";
+// Cryptographic actor identity (the app-layer authz backbone)
+export { Keyring, generateKeypair, signMessage, verifyMessage } from "./core/identity.js";
+// Observability seams (avcshub wires these to OTel / a real collector)
+export { Logger, consoleLogger, silentLogger } from "./observe/logger.js";
+export { Metrics } from "./observe/metrics.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,EAAE;AACF,mFAAmF;AACnF,yFAAyF;AACzF,wFAAwF;AACxF,iFAAiF;AAEjF,+BAA+B;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGzE,kFAAkF;AAClF,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE3E,8DAA8D;AAC9D,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG1F,uEAAuE;AACvE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC"}