@mcsherrylabs/evolver-client 0.8.0

package/dist/crypto/stream.js

@@ -0,0 +1,186 @@
+// Attachment envelope v2 — segmented AEAD (STREAM-style AES-256-GCM).
+// Normative format: specs/143-content-streaming/contracts/attachment-envelope-v2.md.
+//
+//   blob   := header(16) ‖ noncePrefix(7) ‖ segment*
+//   header := "EVAT2" ‖ 0x02 ‖ segBytes u32BE ‖ zeros(6)
+//   seg[i] := AES-256-GCM(key, iv(i), aad = header‖noncePrefix, P[i]) ‖ tag(16)
+//   iv(i)  := noncePrefix ‖ i u32BE ‖ lastFlag(0x00|0x01)
+//
+// Both transforms buffer at most one segment (+tag) — memory is size-independent.
+// Decrypt emits ONLY tag-verified segments; ordering, truncation, duplication and
+// parameter tampering all surface as stream errors (the IV/AAD schedule binds them).
+const MAGIC = new Uint8Array([0x45, 0x56, 0x41, 0x54, 0x32]); // "EVAT2"
+const VERSION = 0x02;
+const HEADER_LEN = 16;
+const PREFIX_LEN = 7;
+const TAG_LEN = 16;
+export const SEG_BYTES = 1_048_576;
+/** Exact ciphertext length for a known plaintext length. */
+export function ctSize(plaintextBytes) {
+    const segs = Math.max(1, Math.ceil(plaintextBytes / SEG_BYTES));
+    return HEADER_LEN + PREFIX_LEN + plaintextBytes + TAG_LEN * segs;
+}
+function buildHeader(segBytes) {
+    const h = new Uint8Array(HEADER_LEN);
+    h.set(MAGIC, 0);
+    h[5] = VERSION;
+    new DataView(h.buffer).setUint32(6, segBytes);
+    return h; // bytes 10..15 stay zero (reserved)
+}
+function iv(prefix, index, last) {
+    if (index > 0xffffffff)
+        throw new Error("attachment too large (segment index overflow)");
+    const v = new Uint8Array(12);
+    v.set(prefix, 0);
+    new DataView(v.buffer).setUint32(PREFIX_LEN, index);
+    v[11] = last ? 0x01 : 0x00;
+    return v;
+}
+/** Bounded byte accumulator: holds pending input, releases exact-sized slices. */
+class Pending {
+    chunks = [];
+    len = 0;
+    get length() { return this.len; }
+    push(c) { if (c.length) {
+        this.chunks.push(c);
+        this.len += c.length;
+    } }
+    /** Remove and return exactly n bytes (caller checks length ≥ n). */
+    take(n) {
+        const out = new Uint8Array(n);
+        let o = 0;
+        while (o < n) {
+            const head = this.chunks[0];
+            const want = n - o;
+            if (head.length <= want) {
+                out.set(head, o);
+                o += head.length;
+                this.chunks.shift();
+            }
+            else {
+                out.set(head.subarray(0, want), o);
+                this.chunks[0] = head.subarray(want);
+                o += want;
+            }
+        }
+        this.len -= n;
+        return out;
+    }
+}
+async function importGcm(key, usage) {
+    if (key.length !== 32)
+        throw new Error("content key must be 32 bytes");
+    return crypto.subtle.importKey("raw", key, "AES-GCM", false, [usage]);
+}
+/** Plaintext → v2 envelope. Buffers ≤ one segment.
+ *
+ *  `noncePrefix` is injectable so format vectors are reproducible. IV uniqueness
+ *  rests on (key, prefix) being used for exactly ONE file: reusing a key across
+ *  files REQUIRES a distinct random prefix per file, and reusing a prefix
+ *  REQUIRES a fresh key. Breaking that reuses an IV under one key, which forfeits
+ *  both confidentiality and authenticity for every affected segment. The default
+ *  (random prefix, and a fresh per-attachment key from the caller) satisfies it
+ *  structurally — pass this only where both halves are known-fresh. */
+export function encryptStream(key, opts) {
+    const prefix = opts?.noncePrefix ?? crypto.getRandomValues(new Uint8Array(PREFIX_LEN));
+    if (prefix.length !== PREFIX_LEN)
+        throw new Error("noncePrefix must be 7 bytes");
+    const header = buildHeader(SEG_BYTES);
+    const aad = new Uint8Array(HEADER_LEN + PREFIX_LEN);
+    aad.set(header, 0);
+    aad.set(prefix, HEADER_LEN);
+    let ck;
+    let index = 0;
+    let headerSent = false;
+    const pending = new Pending();
+    const seal = async (pt, last, ctrl) => {
+        const ct = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: iv(prefix, index, last), additionalData: aad }, ck, pt));
+        if (!headerSent) {
+            ctrl.enqueue(aad.slice());
+            headerSent = true;
+        }
+        ctrl.enqueue(ct);
+        index++;
+    };
+    const transform = new TransformStream({
+        async start() { ck = await importGcm(key, "encrypt"); },
+        async transform(chunk, ctrl) {
+            pending.push(chunk);
+            // retain ≥ one full segment so lastFlag is only ever decided at flush
+            while (pending.length > SEG_BYTES)
+                await seal(pending.take(SEG_BYTES), false, ctrl);
+        },
+        async flush(ctrl) {
+            await seal(pending.take(pending.length), true, ctrl); // 0..SEG bytes; empty file = one empty last segment
+        },
+    });
+    return { transform };
+}
+/** v2 envelope → plaintext. Errors on ANY decrypt-obligation violation; only
+ *  verified segments are emitted. rangeMode: the stream carries header+prefix
+ *  followed by segments starting at firstSegIndex; ONLY the terminal-flag
+ *  obligation is relaxed (an interior range cannot observe finality). */
+export function decryptStream(key, opts) {
+    let ck;
+    let aad = null;
+    let prefix = new Uint8Array(0);
+    let segBytes = 0;
+    let index = opts?.rangeMode ? opts.rangeMode.firstSegIndex : 0;
+    const pending = new Pending();
+    const open = async (blob, last) => {
+        const pt = await crypto.subtle.decrypt({ name: "AES-GCM", iv: iv(prefix, index, last), additionalData: aad }, ck, blob)
+            .catch(() => { throw new Error("attachment failed integrity check"); });
+        index++;
+        return new Uint8Array(pt);
+    };
+    const parseHeaderIfReady = () => {
+        if (aad !== null || pending.length < HEADER_LEN + PREFIX_LEN)
+            return;
+        const hp = pending.take(HEADER_LEN + PREFIX_LEN);
+        if (!MAGIC.every((b, i) => hp[i] === b))
+            throw new Error("unsupported attachment (old format)");
+        if (hp[5] !== VERSION)
+            throw new Error("unsupported attachment (old format)");
+        segBytes = new DataView(hp.buffer, hp.byteOffset + 6, 4).getUint32(0);
+        // the header is peer-authored: a segment is the decrypt buffer bound, so an
+        // announced segBytes beyond 8× the producer's size is refused outright
+        if (segBytes < 1 || segBytes > 8 * SEG_BYTES)
+            throw new Error("attachment failed integrity check");
+        prefix = hp.subarray(HEADER_LEN);
+        aad = hp;
+    };
+    return new TransformStream({
+        async start() { ck = await importGcm(key, "decrypt"); },
+        async transform(chunk, ctrl) {
+            pending.push(chunk);
+            parseHeaderIfReady();
+            if (aad === null)
+                return;
+            // a full segment followed by more bytes is necessarily non-last
+            while (pending.length > segBytes + TAG_LEN)
+                ctrl.enqueue(await open(pending.take(segBytes + TAG_LEN), false));
+        },
+        async flush(ctrl) {
+            parseHeaderIfReady();
+            if (aad === null)
+                throw new Error("attachment failed integrity check"); // shorter than header+prefix
+            if (pending.length < TAG_LEN)
+                throw new Error("attachment failed integrity check"); // truncated mid-segment
+            const tail = pending.take(pending.length);
+            if (opts?.rangeMode) {
+                // interior ranges end on a non-last segment; ranges reaching the true
+                // tail end on the lastFlag one — accept either, tags still authenticate
+                try {
+                    ctrl.enqueue(await open(tail, false));
+                }
+                catch {
+                    ctrl.enqueue(await open(tail, true));
+                }
+            }
+            else {
+                ctrl.enqueue(await open(tail, true)); // exactly one terminal segment, nothing after it
+            }
+        },
+    });
+}
+//# sourceMappingURL=stream.js.map

package/dist/crypto/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/crypto/stream.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,qFAAqF;AACrF,EAAE;AACF,qDAAqD;AACrD,yDAAyD;AACzD,gFAAgF;AAChF,0DAA0D;AAC1D,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,qFAAqF;AAErF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU;AACxE,MAAM,OAAO,GAAG,IAAI,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,OAAO,GAAG,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC;AAEnC,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CAAC,cAAsB;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC;IAChE,OAAO,UAAU,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,GAAG,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IACf,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,CAAC,oCAAoC;AAChD,CAAC;AAED,SAAS,EAAE,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAa;IAC1D,IAAI,KAAK,GAAG,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACzF,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjB,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO;IACH,MAAM,GAAiB,EAAE,CAAC;IAC1B,GAAG,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,KAAa,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,CAAa,IAAU,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC,CAAC,CAAC;IAC1F,oEAAoE;IACpE,IAAI,CAAC,CAAS;QACZ,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;iBAChF,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC,IAAI,IAAI,CAAC;YAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,KAAK,UAAU,SAAS,CAAC,GAAe,EAAE,KAAe;IACvD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;uEAQuE;AACvE,MAAM,UAAU,aAAa,CAC3B,GAAe,EACf,IAAmC;IAEnC,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;IACpD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE5B,IAAI,EAAa,CAAC;IAClB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,MAAM,IAAI,GAAG,KAAK,EAAE,EAAc,EAAE,IAAa,EAAE,IAAkD,EAAE,EAAE;QACvG,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACnD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAiB,EAAE,cAAc,EAAE,GAAmB,EAAE,EACrG,EAAE,EAAE,EAAkB,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC;QAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjB,KAAK,EAAE,CAAC;IACV,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,eAAe,CAAyB;QAC5D,KAAK,CAAC,KAAK,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI;YACzB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,sEAAsE;YACtE,OAAO,OAAO,CAAC,MAAM,GAAG,SAAS;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI;YACd,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,oDAAoD;QAC5G,CAAC;KACF,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED;;;yEAGyE;AACzE,MAAM,UAAU,aAAa,CAC3B,GAAe,EACf,IAAgD;IAEhD,IAAI,EAAa,CAAC;IAClB,IAAI,GAAG,GAAsB,IAAI,CAAC;IAClC,IAAI,MAAM,GAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,MAAM,IAAI,GAAG,KAAK,EAAE,IAAgB,EAAE,IAAa,EAAE,EAAE;QACrD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAiB,EAAE,cAAc,EAAE,GAAoB,EAAE,EACtG,EAAE,EAAE,IAAoB,CAAC;aACxB,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,EAAE,CAAC;QACR,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,GAAG,UAAU;YAAE,OAAO;QACrE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAChG,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC9E,QAAQ,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtE,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,GAAG,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnG,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjC,GAAG,GAAG,EAAE,CAAC;IACX,CAAC,CAAC;IAEF,OAAO,IAAI,eAAe,CAAyB;QACjD,KAAK,CAAC,KAAK,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI;YACzB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,kBAAkB,EAAE,CAAC;YACrB,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,gEAAgE;YAChE,OAAO,OAAO,CAAC,MAAM,GAAG,QAAQ,GAAG,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI;YACd,kBAAkB,EAAE,CAAC;YACrB,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,6BAA6B;YACrG,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,wBAAwB;YAC5G,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,wEAAwE;gBACxE,IAAI,CAAC;oBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAC9C,MAAM,CAAC;oBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,iDAAiD;YACzF,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/envelope.d.ts

@@ -0,0 +1,28 @@
+import type { Signer, Auth } from "./types.js";
+/** The unified txId for a tx (== the digest its auths sign).
+ *
+ *  The body-FULL form: the description's body slot takes the 085 fold, so the caller hands over
+ *  the body and the generated encoder hashes it. (The id-only form folds `verbatim` and a tx
+ *  carrying neither folds `empty` — the node produces the same digest for all three.) */
+export declare function txId(ledgerId: string, senderNodeId: string, ttlRound: number | bigint, body: Uint8Array, maxToll?: number | bigint): Uint8Array;
+export declare function txIdHex(ledgerId: string, senderNodeId: string, ttlRound: number | bigint, body: Uint8Array, maxToll?: number | bigint): string;
+export declare function encodeSignedTx(args: {
+    ledgerId: string;
+    senderNodeId: string;
+    body: Uint8Array;
+    ttlRound: number | bigint;
+    auths: Auth[];
+    maxToll?: number | bigint;
+}): Uint8Array;
+/** Build a fully-signed SignedTx: compute the digest, have each signer sign it, encode.
+ *  153 — `maxToll` (the signed toll ceiling) is optional; 0/omitted means the tx consents to no
+ *  toll. It is BOTH folded into the digest the signers cover AND carried on the wire (field 6). */
+export declare function buildSignedTx(args: {
+    ledgerId: string;
+    senderNodeId: string;
+    body: Uint8Array;
+    ttlRound: number | bigint;
+    signers: Signer[];
+    maxToll?: number | bigint;
+}): Uint8Array;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;yFAIyF;AACzF,wBAAgB,IAAI,CAClB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,MAAM,EACzB,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,MAAM,GAAG,MAAW,GAC5B,UAAU,CAQZ;AAED,wBAAgB,OAAO,CACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,MAAM,EACzB,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,MAAM,GAAG,MAAW,GAC5B,MAAM,CAER;AASD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B,GAAG,UAAU,CAWb;AAED;;mGAEmG;AACnG,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B,GAAG,UAAU,CAiBb"}

package/dist/envelope.js

@@ -0,0 +1,68 @@
+// The SignedTx envelope + the single tx-signing recipe.
+//
+// ⚠️ 149 — THE RECIPE IS NO LONGER WRITTEN HERE. `TX_AUTH_DST` and the hand-composed
+// `signingDigest` (a length-prefix-by-length-prefix twin of the node's `AuthBodySignable`) are
+// GONE; `authBody` in ./generated/codecs is emitted from the node's own description, so there is
+// no second statement of this format to keep in step. This header used to restate the recipe too,
+// which is why it is not restated now: consult the description, or the generated file.
+//
+// What remains here is TRANSPORT (the proto3 SignedTx/TxAuth encoders) and the two compositions
+// over the digest — `txId` and `buildSignedTx` — which decide WHICH body slot applies, a choice
+// no schema can carry (`Branch.select` is a Scala function).
+//
+// The digest binds ledger_id, sender, the TTL deadline and the body — but NOT
+// the auths — so co-signed (multi-auth) txs all sign the same target, and the
+// digest doubles as the representation-independent txId (085).
+import { fString, fBytes, fMessage, fVarint, concat } from "./wire.js";
+import { bytesToHex } from "./crypto/hash.js";
+import { authBody } from "./generated/codecs.js";
+/** The unified txId for a tx (== the digest its auths sign).
+ *
+ *  The body-FULL form: the description's body slot takes the 085 fold, so the caller hands over
+ *  the body and the generated encoder hashes it. (The id-only form folds `verbatim` and a tx
+ *  carrying neither folds `empty` — the node produces the same digest for all three.) */
+export function txId(ledgerId, senderNodeId, ttlRound, body, maxToll = 0n) {
+    return authBody({
+        ledgerId,
+        senderNodeId,
+        ttlRound: BigInt(ttlRound),
+        maxToll: BigInt(maxToll),
+        bodySlot: { fold: "sha256Of", bytes: body },
+    });
+}
+export function txIdHex(ledgerId, senderNodeId, ttlRound, body, maxToll = 0n) {
+    return bytesToHex(txId(ledgerId, senderNodeId, ttlRound, body, maxToll));
+}
+// TxAuth: 1 key_type | 2 key_label | 3 signature | 4 node_id
+function encodeTxAuth(a) {
+    return concat(fString(1, a.keyType), fString(2, a.keyLabel), fBytes(3, a.signature), fString(4, a.nodeId));
+}
+// SignedTx: 1 ledger_id | 2 sender_node_id | 3 tx (Tx) | 4 auths (repeated) | 5 ttl_round | 6 max_toll
+// Tx.content oneof: 1 tx_body (bytes)
+export function encodeSignedTx(args) {
+    const tx = concat(fBytes(1, args.body)); // Tx{ tx_body = 1 }
+    const maxToll = args.maxToll ?? 0n;
+    return concat(fString(1, args.ledgerId), fString(2, args.senderNodeId), fMessage(3, tx), ...args.auths.map((a) => fMessage(4, encodeTxAuth(a))), fVarint(5, args.ttlRound), ...(BigInt(maxToll) !== 0n ? [fVarint(6, maxToll)] : []));
+}
+/** Build a fully-signed SignedTx: compute the digest, have each signer sign it, encode.
+ *  153 — `maxToll` (the signed toll ceiling) is optional; 0/omitted means the tx consents to no
+ *  toll. It is BOTH folded into the digest the signers cover AND carried on the wire (field 6). */
+export function buildSignedTx(args) {
+    const maxToll = args.maxToll ?? 0n;
+    const digest = txId(args.ledgerId, args.senderNodeId, args.ttlRound, args.body, maxToll);
+    const auths = args.signers.map((s) => ({
+        keyType: s.keyType,
+        keyLabel: s.keyLabel,
+        nodeId: s.nodeId,
+        signature: s.sign(digest),
+    }));
+    return encodeSignedTx({
+        ledgerId: args.ledgerId,
+        senderNodeId: args.senderNodeId,
+        body: args.body,
+        ttlRound: args.ttlRound,
+        auths,
+        maxToll,
+    });
+}
+//# sourceMappingURL=envelope.js.map

package/dist/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,qFAAqF;AACrF,+FAA+F;AAC/F,iGAAiG;AACjG,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,gGAAgG;AAChG,gGAAgG;AAChG,6DAA6D;AAC7D,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,+DAA+D;AAE/D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAGjD;;;;yFAIyF;AACzF,MAAM,UAAU,IAAI,CAClB,QAAgB,EAChB,YAAoB,EACpB,QAAyB,EACzB,IAAgB,EAChB,UAA2B,EAAE;IAE7B,OAAO,QAAQ,CAAC;QACd,QAAQ;QACR,YAAY;QACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;QACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,QAAgB,EAChB,YAAoB,EACpB,QAAyB,EACzB,IAAgB,EAChB,UAA2B,EAAE;IAE7B,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,6DAA6D;AAC7D,SAAS,YAAY,CAAC,CAAO;IAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,uGAAuG;AACvG,sCAAsC;AACtC,MAAM,UAAU,cAAc,CAAC,IAO9B;IACC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,OAAO,MAAM,CACX,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EACzB,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,EAC7B,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EACf,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EACtD,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EACzB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACzD,CAAC;AACJ,CAAC;AAED;;mGAEmG;AACnG,MAAM,UAAU,aAAa,CAAC,IAO7B;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzF,MAAM,KAAK,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;KAC1B,CAAC,CAAC,CAAC;IACJ,OAAO,cAAc,CAAC;QACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK;QACL,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist/generated/codecs.d.ts

@@ -0,0 +1,145 @@
+/** The bytes are folded with SHA-256 into this field's slot. */
+export interface Sha256OfFold {
+    readonly fold: "sha256Of";
+    readonly bytes: Uint8Array;
+}
+/** The bytes occupy the slot as they stand. */
+export interface VerbatimFold {
+    readonly fold: "verbatim";
+    readonly bytes: Uint8Array;
+}
+/** The explicit empty case — written as length 0, NEVER omitted (rule 3). */
+export interface EmptyFold {
+    readonly fold: "empty";
+}
+export type FoldChoice = Sha256OfFold | VerbatimFold | EmptyFold;
+/** One field of a described message, as data. Mirrors contracts/schema-export.md. */
+export interface CodecFieldSchema {
+    readonly name: string;
+    readonly kind: string;
+    readonly elements?: readonly {
+        readonly name: string;
+        readonly kind: string;
+    }[];
+    readonly derivation: string | {
+        readonly oneOf: readonly string[];
+    };
+}
+export interface CodecSchema {
+    readonly name: string;
+    readonly tag: string;
+    readonly output: "digest" | "material";
+    readonly fields: readonly CodecFieldSchema[];
+}
+export interface AuthBodyFields {
+    readonly ledgerId: string;
+    readonly senderNodeId: string;
+    readonly ttlRound: bigint;
+    readonly maxToll: bigint;
+    readonly bodySlot: Sha256OfFold | VerbatimFold | EmptyFold;
+}
+/** `ce.evolver/153/tx-auth/v2` — digest. */
+export declare function authBody(f: AuthBodyFields): Uint8Array;
+export interface AuthsDigestAuthsElement {
+    readonly nodeId: string;
+    readonly keyType: string;
+    readonly keyLabel: string;
+    readonly purpose: number;
+    readonly signature: Uint8Array;
+}
+export interface AuthsDigestFields {
+    readonly auths: readonly AuthsDigestAuthsElement[];
+}
+/** `ce.evolver/148/auths-digest/v1` — digest. */
+export declare function authsDigest(f: AuthsDigestFields): Uint8Array;
+export interface VoteFields {
+    readonly roundNum: number;
+    readonly blockId: Uint8Array;
+}
+/** `ce.evolver/148/vote/v1` — material (signed as-is, NOT hashed). */
+export declare function vote(f: VoteFields): Uint8Array;
+export interface NewViewFields {
+    readonly roundNum: number;
+    readonly highQcBlockId: Uint8Array;
+    readonly highQcRoundNum: number;
+}
+/** `ce.evolver/148/new-view/v1` — material (signed as-is, NOT hashed). */
+export declare function newView(f: NewViewFields): Uint8Array;
+export interface P2pSignableFields {
+    readonly sender: string;
+    readonly keyType: string;
+    readonly keyLabel: string;
+    readonly recipient: string;
+    readonly channel: string;
+    readonly timestamp: bigint;
+    readonly nonce: Uint8Array;
+    readonly payload: Uint8Array;
+}
+/** `ce.evolver/145/p2p-msg/v1` — digest. */
+export declare function p2pSignable(f: P2pSignableFields): Uint8Array;
+export interface PopCreateIdentityKeysElement {
+    readonly keyType: string;
+    readonly publicKey: Uint8Array;
+    readonly keyLabel: string;
+}
+export interface PopCreateIdentityFields {
+    readonly nodeId: string;
+    readonly initialCredit: bigint;
+    readonly keys: readonly PopCreateIdentityKeysElement[];
+}
+/** `ce.evolver/148/pop-create-identity/v1` — digest. */
+export declare function popCreateIdentity(f: PopCreateIdentityFields): Uint8Array;
+export interface PopAddKeyFields {
+    readonly publicKey: Uint8Array;
+    readonly keyType: string;
+    readonly keyLabel: string;
+}
+/** `ce.evolver/148/pop-add-key/v1` — digest. */
+export declare function popAddKey(f: PopAddKeyFields): Uint8Array;
+export interface PopReplaceKeyFields {
+    readonly publicKey: Uint8Array;
+    readonly keyType: string;
+    readonly keyLabel: string;
+}
+/** `ce.evolver/148/pop-replace-key/v1` — digest. */
+export declare function popReplaceKey(f: PopReplaceKeyFields): Uint8Array;
+export interface ProposalIdAdmissionFields {
+    readonly candidateNodeId: string;
+    readonly startBlockHeight: number;
+    readonly proposerNodeId: string;
+    readonly donatedStake: number;
+}
+/** `ce.evolver/149/proposal-id-admission/v1` — digest. */
+export declare function proposalIdAdmission(f: ProposalIdAdmissionFields): Uint8Array;
+export interface ProposalIdRemovalFields {
+    readonly targetNodeId: string;
+    readonly removalBlockHeight: number;
+    readonly proposerNodeId: string;
+}
+/** `ce.evolver/149/proposal-id-removal/v1` — digest. */
+export declare function proposalIdRemoval(f: ProposalIdRemovalFields): Uint8Array;
+export interface BlockIdFields {
+    readonly roundNum: number;
+    readonly parentId: Uint8Array;
+    readonly merkleRoot: Uint8Array;
+    readonly parentQcSigners: Uint8Array;
+}
+/** `ce.evolver/148/block-id/v1` — digest. */
+export declare function blockId(f: BlockIdFields): Uint8Array;
+export interface ListTxIdTxIdsElement {
+    readonly txId: Uint8Array;
+}
+export interface ListTxIdFields {
+    readonly txIds: readonly ListTxIdTxIdsElement[];
+}
+/** `ce.evolver/149/list-tx-id/v1` — digest. */
+export declare function listTxId(f: ListTxIdFields): Uint8Array;
+export interface ListContextFields {
+    readonly listTxId: Uint8Array;
+    readonly txId: Uint8Array;
+}
+/** `ce.evolver/149/list-context/v1` — digest. */
+export declare function listContext(f: ListContextFields): Uint8Array;
+export declare const CODECS: readonly CodecSchema[];
+export declare const ENCODERS: Readonly<Record<string, (row: any) => Uint8Array>>;
+//# sourceMappingURL=codecs.d.ts.map

package/dist/generated/codecs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecs.d.ts","sourceRoot":"","sources":["../../src/generated/codecs.ts"],"names":[],"mappings":"AAqBA,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;AAuBjE,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CACrE;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;CAC5D;AAED,4CAA4C;AAC5C,wBAAgB,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,UAAU,CAStD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACpD;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,CAAC,EAAE,iBAAiB,GAAG,UAAU,CAK5D;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED,sEAAsE;AACtE,wBAAgB,IAAI,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,CAM9C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,0EAA0E;AAC1E,wBAAgB,OAAO,CAAC,CAAC,EAAE,aAAa,GAAG,UAAU,CAOpD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED,4CAA4C;AAC5C,wBAAgB,WAAW,CAAC,CAAC,EAAE,iBAAiB,GAAG,UAAU,CAY5D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,SAAS,4BAA4B,EAAE,CAAC;CACxD;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,uBAAuB,GAAG,UAAU,CAOxE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,gDAAgD;AAChD,wBAAgB,SAAS,CAAC,CAAC,EAAE,eAAe,GAAG,UAAU,CAOxD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,CAAC,EAAE,mBAAmB,GAAG,UAAU,CAOhE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,0DAA0D;AAC1D,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,yBAAyB,GAAG,UAAU,CAQ5E;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,uBAAuB,GAAG,UAAU,CAOxE;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;CACtC;AAED,6CAA6C;AAC7C,wBAAgB,OAAO,CAAC,CAAC,EAAE,aAAa,GAAG,UAAU,CAQpD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD;AAED,+CAA+C;AAC/C,wBAAgB,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,UAAU,CAKtD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,CAAC,EAAE,iBAAiB,GAAG,UAAU,CAM5D;AAED,eAAO,MAAM,MAAM,EAAE,SAAS,WAAW,EAsIxC,CAAC;AAGF,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC,CAcvE,CAAC"}