@mcsherrylabs/evolver-mcp 0.12.0 → 0.14.0

package/dist/write.js

@@ -1,385 +0,0 @@
-// Signing and submitting, as two capabilities that never fuse.
-//
-// `signTransfer` produces a transaction that has gone nowhere (SIGN-20: a `txId`, NO submit).
-// `submitSigned` sends one this session already signed, refusing anything else (SUBM-08) and
-// refusing a repeat (SAFE-01). The ledger is pinned (LEDGER.identity) so no caller-chosen ledger
-// ever reaches the signed bytes — a signing tool composes what it signs from named, typed fields
-// and chooses the ledger itself.
-//
-// The two-step contract is STRUCTURAL, not advisory: an in-memory record of what THIS session
-// signed is what `submitSigned` resolves a `txId` against, and what `inspectSigned` (READ-05)
-// answers from. A description telling the model "don't re-sign" competes with chain text the
-// model reads by design, so the guards are here, in code.
-import { LEDGER, buildSignedTx, transferBody, txIdHex, channelBody, hexToBytes, CORE_LEDGER_IDS, RESERVED_LEDGER_PREFIX, } from "@mcsherrylabs/evolver-client";
-// ONE hex decoder, re-exported: the SDK's `hexToBytes` (which refuses non-hex rather than coercing).
-// `signOpaque` and the identity verbs both use it — a second hand-rolled decoder is the bug class.
-export { hexToBytes };
-import { formatAmount, parseAmount } from "./amount.js";
-import { classifySubmit } from "./result.js";
-/** Rounds of life given to a signed transaction.
- *
- *  ⚠️ SHORT ON PURPOSE. A signed transaction is a bearer artefact: valid until it expires,
- *  submission unauthenticated, no cancel. Nothing here waits on a human between signing and
- *  submitting, so a long window buys nothing and leaves a live artefact in a transcript. */
-export const DEFAULT_TTL_OFFSET = 50;
-/** The largest body `signOpaque` will sign, in bytes: the node's HTTP request cap (65536) less
- *  room for the transaction envelope. An oversized POST is refused by the listener before the
- *  node reads it, unreadably, so the outcome would arrive as `unknown` after submit already marked
- *  the id sent — a dead end. Refusing here is free and names the bound. */
-const MAX_BODY_BYTES = 65536 - 1024;
-/** A channel id a caller may write to — NOT a core ledger, NOT the reserved namespace.
- *
- *  ⚠️ CASE-INSENSITIVE ON PURPOSE, AND NOT BECAUSE THE NODE IS. The node compares ledger ids
- *  exactly, but refusing every casing costs nothing and removes a whole class of bypass that opens
- *  the moment anything in the path normalises case. This refusal is the only thing between a
- *  caller and the node's own interpreters. This single refusal is EXPORTED so `src/channel.ts`
- *  imports and REUSES it verbatim — never re-implements it (single dispatch-safety rule). */
-export function writableChannelId(raw) {
-    const id = String(raw ?? "").trim();
-    if (id.length === 0)
-        return { kind: "partial", what: "channel", cause: "no channel given" };
-    const lower = id.toLowerCase();
-    if (CORE_LEDGER_IDS.some((c) => c.toLowerCase() === lower))
-        return {
-            kind: "partial",
-            what: "channel",
-            cause: `"${id}" is a CORE ledger, not a channel. Writing to it would not be an opaque message — ` +
-                `the node parses that ledger's bodies and applies what it finds, so these bytes could be a ` +
-                `transfer or key registration signed as this identity. Refused before anything was signed.`,
-        };
-    if (lower.startsWith(RESERVED_LEDGER_PREFIX))
-        return {
-            kind: "partial",
-            what: "channel",
-            cause: `"${id}" is in the reserved "${RESERVED_LEDGER_PREFIX}" namespace, which belongs to the node's own ledgers. A channel lives outside it.`,
-        };
-    return id;
-}
-// ── session stores ────────────────────────────────────────────────────────────
-//
-// Three maps, two audiences. The RECORD (`signedThisSession`) is intent: what `inspectSigned`
-// answers from. The BYTES (`bytesThisSession`, base64) are the bearer artefact submitted to the
-// chain. They are deliberately separate so the transaction id is the only lookup key and the
-// base64 never reaches a signing or inspection result (~86 KB each otherwise). `alreadySubmitted`
-// is the "never twice" guard.
-const signedThisSession = new Map();
-const alreadySubmitted = new Set();
-const bytesThisSession = new Map();
-/** A transaction id as a lookup key. Ids are lowercase hex, but a model retyping one should not
- *  fail on case or a stray space. */
-const asKey = (txId) => String(txId ?? "").trim().toLowerCase();
-/** A caller-supplied id, safe to name in a refusal. Echoing it verbatim gifts an attacker content
- *  AND size in the transcript; the id is named only when it LOOKS like one. */
-export const namedInRefusal = (txId) => {
-    const k = asKey(txId);
-    if (k.length === 0)
-        return "(empty)";
-    return /^[0-9a-f]{64}$/.test(k) ? k : `(not a transaction id: ${k.length} characters)`;
-};
-/** Everything this session signed, by id. */
-export function recordedById(txId) {
-    return signedThisSession.get(asKey(txId));
-}
-/** Record a signed operation into BOTH session stores — the intent record AND the base64 bearer
- *  bytes. This is the single record path shared by `signTransfer` and `composeIdentityTx` (via
- *  `src/identity.ts`); composing and recording in one call is what keeps inspect/submit from ever
- *  seeing a signed transaction whose record is missing. */
-export function recordSigned(signed, bytes) {
-    const k = asKey(signed.txId);
-    signedThisSession.set(k, signed);
-    if (!bytesThisSession.has(k))
-        bytesThisSession.set(k, Buffer.from(bytes).toString("base64"));
-}
-/** Record an operation whose envelope carries auths assembled from MORE than this session's signer
- *  (the group ownership transfer). Strict where `recordSigned` is lenient: it never replaces or
- *  merges an existing id, so a verified multi-auth envelope cannot be shadowed by, or shadow, an
- *  earlier record. Returns false (recording nothing) when the id is already known. */
-export function recordAssembledOnce(signed, bytes) {
-    const k = asKey(signed.txId);
-    if (signedThisSession.has(k) || bytesThisSession.has(k))
-        return false;
-    signedThisSession.set(k, signed);
-    bytesThisSession.set(k, Buffer.from(bytes).toString("base64"));
-    return true;
-}
-// Prepared-but-unconsented ownership transfers. Bounded so a looping caller cannot grow it.
-export const MAX_PENDING_OWNERSHIP = 16;
-const pendingOwnershipThisSession = new Map();
-/** Remember a prepared transfer. False when the bound is reached or the id is already known. */
-export function recordPendingOwnership(p) {
-    const k = asKey(p.txId);
-    if (pendingOwnershipThisSession.has(k) || signedThisSession.has(k))
-        return false;
-    if (pendingOwnershipThisSession.size >= MAX_PENDING_OWNERSHIP)
-        return false;
-    pendingOwnershipThisSession.set(k, p);
-    return true;
-}
-export function pendingOwnershipById(txId) {
-    return pendingOwnershipThisSession.get(asKey(txId));
-}
-export function dropPendingOwnership(txId) {
-    pendingOwnershipThisSession.delete(asKey(txId));
-}
-/** Forget prepared transfers that can no longer be admitted (expiry <= round). They were never
- *  signed, so nothing submittable is lost; this keeps the bound from filling with dead entries. */
-export function pruneExpiredPendingOwnership(round) {
-    for (const [k, p] of pendingOwnershipThisSession)
-        if (p.expiresAtRound <= round)
-            pendingOwnershipThisSession.delete(k);
-}
-/** The signed bytes for one recorded transaction, base64. Undefined for anything this session
- *  did not sign. */
-export function peekBytes(txId) {
-    return bytesThisSession.get(asKey(txId));
-}
-/**
- * Sign a credit transfer to a `txId` and record it — no network submit (SIGN-20).
- *
- * Reads the chain tip to bound the TTL (the read is mandatory: a transaction's life is relative
- * to the current round, and a guessed round is refused). If the chain is unreachable, signing
- * fails as `unreachable` — but it still does NOT submit.
- */
-export async function signTransfer(deps, params) {
-    const recipient = String(params.recipient ?? "").trim();
-    if (recipient.length === 0)
-        return { kind: "partial", what: "recipient", cause: "no recipient given" };
-    // Validate BEFORE anything touches the chain: a refusal here costs nothing, while a bad amount
-    // that reaches the wire becomes a transaction that does the wrong thing.
-    const amount = parseAmount(String(params.amount ?? ""));
-    if (!amount.ok)
-        return { kind: "partial", what: "amount", cause: amount.error };
-    let tip;
-    try {
-        tip = await deps.reads.currentRound();
-    }
-    catch (e) {
-        return { kind: "unreachable", chain: "", cause: e instanceof Error ? e.message : String(e) };
-    }
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const body = transferBody([{ recipient, amount: amount.value }]);
-    const bytes = buildSignedTx({
-        ledgerId: LEDGER.identity,
-        senderNodeId: deps.identity,
-        body,
-        ttlRound: expiresAtRound,
-        signers: [deps.signer],
-    });
-    const signed = {
-        txId: txIdHex(LEDGER.identity, deps.identity, expiresAtRound, body),
-        expiresAtRound,
-        signedAtRound: tip,
-        summary: { sender: deps.identity, recipient, amount: formatAmount(amount.value) },
-    };
-    signedThisSession.set(asKey(signed.txId), signed);
-    bytesThisSession.set(asKey(signed.txId), Buffer.from(bytes).toString("base64"));
-    return { kind: "ok", value: signed };
-}
-/**
- * Sign a write to a channel — the generic escape hatch (SUBM-07). Signs only; a separate
- * `evolver_submit` or `evolver_submit_da` call is what reaches a chain.
- *
- * ⚠️ WHAT THE CALLER IS TRUSTED WITH, AND WHAT IT IS NOT. The caller chooses the bytes and the
- * channel. It does NOT choose the interpreter: `writableChannelId` below refuses every CORE ledger
- * id and the whole reserved `ce.evolver.` namespace, so the bytes reach a ledger the core never
- * parses. That is the whole safety argument — a caller who could name `ce.evolver.ledger.identity`
- * with a crafted body would be handing the node a transfer or key registration signed as this
- * identity. The sign DIGEST was never the weak point; DISPATCH was.
- *
- * ⚠️ NOT THE 157 LOGIN. The `signedRequest` SDK path is a challenge-response login proof that sends
- * its own HTTP and carries no commit interval; it is a DIFFERENT affordance and is not wired here.
- */
-export async function signOpaque(deps, params) {
-    // 1. the channel — the refusal that pays for the caller-chosen-ledger exemption.
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    // 2. the body, hex. Decoded by a parser that refuses a non-hex / odd-length input rather than
-    //    silently producing a wrong-length run of bytes.
-    let body;
-    try {
-        body = hexToBytes(String(params.bodyHex ?? "").trim());
-    }
-    catch (e) {
-        return { kind: "partial", what: "bodyHex", cause: e instanceof Error ? e.message : String(e) };
-    }
-    if (body.length === 0)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: "no body given — a channel write carries the bytes you supply, and an empty one costs the same while conveying nothing",
-        };
-    if (body.length > MAX_BODY_BYTES)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: `${body.length} bytes is over the ${MAX_BODY_BYTES}-byte limit this verb will sign ` +
-                `(the node's HTTP request cap, less the transaction envelope). A larger body is rejected ` +
-                `by the listener before the node sees it, unreadably. Split the payload, or put it in ` +
-                `content storage and write the digest.`,
-        };
-    // 3. the chain tip, to bound the life. A guessed expiry round is refused outright.
-    let tip;
-    try {
-        tip = await deps.reads.currentRound();
-    }
-    catch (e) {
-        return { kind: "unreachable", chain: "", cause: e instanceof Error ? e.message : String(e) };
-    }
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const bodyBytes = channelBody(body);
-    // This escape hatch grants no toll consent; disclose the same fixed zero it signs.
-    const maxToll = 0n;
-    const fields = { channel, bodyBytes: body.length, maxToll: maxToll.toString() };
-    const bytes = buildSignedTx({
-        ledgerId: channel,
-        senderNodeId: deps.identity,
-        body: bodyBytes,
-        ttlRound: expiresAtRound,
-        signers: [deps.signer],
-        maxToll,
-    });
-    const signed = {
-        txId: txIdHex(channel, deps.identity, expiresAtRound, bodyBytes, maxToll),
-        expiresAtRound,
-        signedAtRound: tip,
-        verb: "opaque",
-        fields,
-        summary: { sender: deps.identity, ...fields },
-    };
-    signedThisSession.set(asKey(signed.txId), signed);
-    bytesThisSession.set(asKey(signed.txId), Buffer.from(bytes).toString("base64"));
-    return { kind: "ok", value: signed };
-}
-/**
- * Submit a transaction this session signed, by its `txId` (SIGN-19). Never signs, never does
- * network work before the guards clear:
- *
- *   Rule 1 (SUBM-08) — only what this session signed: otherwise this agent is a submission relay.
- *   Rule 2 (SAFE-01) — never twice: a repeat is a no-op the chain refuses, and re-signing is the
- *                      loop that pays twice. Here the refusal names "look it up", never re-sign.
- *
- * The `txId` resolves the signed record and the exact stored bytes. Both routes share these guards
- * and mark the id before awaiting the network, including when the result is unknown. DA permits
- * only channel-write intent, never a core-ledger operation or owners-ledger administration.
- */
-export async function submitSigned(deps, txId, mode = "ordinary") {
-    const signed = recordedById(txId);
-    if (signed === undefined)
-        return {
-            kind: "refused",
-            reason: "not_signed_here",
-            message: `no transaction with id ${namedInRefusal(txId)} was signed by this agent in this ` +
-                `session, so nothing will be submitted. Sign it first, and submit the id the signing ` +
-                `step returned.`,
-        };
-    if (alreadySubmitted.has(signed.txId))
-        return {
-            kind: "refused",
-            reason: "already_submitted",
-            message: `this transaction (${signed.txId}) has already been submitted in this session. Do NOT ` +
-                `sign the payment again — that makes a DIFFERENT transaction that nothing deduplicates, ` +
-                `and both may commit. Look it up instead.`,
-            txId: signed.txId,
-        };
-    if (mode === "da") {
-        if (!("verb" in signed) || (signed.verb !== "opaque" && signed.verb !== "channel_write"))
-            return { kind: "refused", reason: "not_channel_write", txId: signed.txId,
-                message: "DA submission accepts only session-signed opaque/channel_write intent. Use evolver_submit for transfers and administration; nothing was sent." };
-        const channel = writableChannelId(signed.fields.channel);
-        if (typeof channel !== "string")
-            return { kind: "refused", reason: "not_channel_write", txId: signed.txId,
-                message: "DA submission refuses core/reserved or missing channel targets; nothing was sent." };
-        if (!deps.submitTxWithDa)
-            return { kind: "refused", reason: "da_not_configured", txId: signed.txId,
-                message: "DA gateway submission is not configured; nothing was sent. No ordinary-submit fallback was attempted." };
-    }
-    const bytes = peekBytes(signed.txId);
-    if (bytes === undefined)
-        return {
-            kind: "refused",
-            reason: "not_signed_here",
-            message: `this session recorded transaction ${signed.txId} but holds no bytes for it, so there is ` +
-                `nothing to submit. Sign it again.`,
-            txId: signed.txId,
-        };
-    alreadySubmitted.add(signed.txId);
-    const raw = Uint8Array.from(Buffer.from(bytes, "base64"));
-    // Monotonic timestamps bracket exactly ONE SDK call, after all local guards. The DA call
-    // includes collection/assembly: elapsed time is not commit-only latency, even when committed.
-    const t0 = performance.now();
-    let result;
-    try {
-        result = mode === "da" ? await deps.submitTxWithDa(raw) : await deps.submitTx(raw);
-    }
-    catch (e) {
-        return {
-            kind: "unknown",
-            why: `the submission could not be completed: ${e instanceof Error ? e.message : String(e)}`,
-            txId: signed.txId,
-            ...(mode === "da" ? { daSubmitDurationMs: Math.round(performance.now() - t0) } : {}),
-            submitted: { ...signed.summary, expiresAtRound: signed.expiresAtRound },
-        };
-    }
-    const durationMs = Math.round(performance.now() - t0);
-    const daTiming = mode === "da" ? { daSubmitDurationMs: durationMs } : {};
-    let outcome = classifySubmit(result);
-    if (mode === "da" && outcome.kind === "unknown") {
-        // SDK 0.21.0 parseSubmit drops reason/message on `timeout`, including the node's
-        // da_collection_in_progress response. Do not infer which phase is pending from that shape.
-        const detail = result.kind === "timeout" ? "the gateway returned a pending/timeout outcome" : outcome.why;
-        outcome = { ...outcome, why: `${detail}. DA collection may still be in progress or submission may be uncertain; the SDK does not distinguish these phases. This is not da_unavailable or a final refusal` };
-    }
-    // An EXACT, FREE version-skew detector. The id is computed independently on both ends over the
-    // same fields, so a disagreement is unambiguous evidence the two ends encode differently. A
-    // mismatch is `unknown` with NO interval: the wrong id means the commit was never identified, so
-    // there is no coherent "time to commit" to report.
-    if (outcome.kind === "committed" && outcome.txId && outcome.txId.toLowerCase() !== signed.txId.toLowerCase())
-        return {
-            kind: "unknown",
-            why: `the node computed a different transaction id (${outcome.txId}) than this client did ` +
-                `(${signed.txId}). Treat the outcome as unknown and look the transaction up.`,
-            txId: signed.txId,
-            ...daTiming,
-            submitted: { ...signed.summary, expiresAtRound: signed.expiresAtRound },
-        };
-    if (outcome.kind === "committed") {
-        return {
-            ...outcome,
-            txId: signed.txId,
-            ...(mode === "ordinary" ? { commitIntervalMs: durationMs } : daTiming),
-            submitted: { ...signed.summary, expiresAtRound: signed.expiresAtRound },
-        };
-    }
-    // Reconciliation always uses the original signed-intent ID, even when the gateway omits or
-    // echoes a different ID. Adding gateway DA auths does not change that intent.
-    return { ...outcome, txId: signed.txId, ...daTiming,
-        submitted: { ...signed.summary, expiresAtRound: signed.expiresAtRound } };
-}
-/**
- * Read back what a signed transaction would do (READ-05). Answers from the session RECORD, not
- * by decoding — and not from any other transaction. Contacts no chain.
- */
-export function inspectSigned(txId) {
-    const rec = recordedById(txId);
-    if (rec !== undefined)
-        return { kind: "ok", value: rec };
-    const pending = pendingOwnershipById(txId);
-    if (pending !== undefined)
-        return { kind: "ok", value: pending };
-    return {
-        kind: "not_found",
-        what: `transaction ${namedInRefusal(txId)} was not signed in this session — this tool contacts no chain; this is not evidence of on-chain absence`,
-    };
-}
-/** Test seam only: forget this session's signing history (all three stores). */
-export function __resetSession() {
-    signedThisSession.clear();
-    alreadySubmitted.clear();
-    bytesThisSession.clear();
-    pendingOwnershipThisSession.clear();
-}
-/** The single compose→sign→record helper, re-exported from `src/identity.ts` so every identity verb
- *  and any future signing verb shares ONE compose implementation (never two). */
-export { composeIdentityTx as composeAndSign } from "./identity.js";
-//# sourceMappingURL=write.js.map

package/dist/write.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"write.js","sourceRoot":"","sources":["../src/write.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,iGAAiG;AACjG,iGAAiG;AACjG,iCAAiC;AACjC,EAAE;AACF,8FAA8F;AAC9F,8FAA8F;AAC9F,6FAA6F;AAC7F,0DAA0D;AAE1D,OAAO,EACL,MAAM,EACN,aAAa,EACb,YAAY,EACZ,OAAO,EACP,WAAW,EACX,UAAU,EACV,eAAe,EACf,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAGtC,qGAAqG;AACrG,mGAAmG;AACnG,OAAO,EAAE,UAAU,EAAE,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C;;;;4FAI4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AA+FrC;;;2EAG2E;AAC3E,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,CAAC;AAEpC;;;;;;6FAM6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5F,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAK,eAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;QAC/E,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EACH,IAAI,EAAE,oFAAoF;gBAC1F,4FAA4F;gBAC5F,2FAA2F;SAC9F,CAAC;IACJ,IAAI,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,IAAI,EAAE,yBAAyB,sBAAsB,mFAAmF;SAChJ,CAAC;IACJ,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iFAAiF;AACjF,EAAE;AACF,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,kGAAkG;AAClG,8BAA8B;AAE9B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAwB,CAAC;AAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAC3C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEnD;qCACqC;AACrC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAEhF;+EAC+E;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAU,EAAE;IACrD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,MAAM,cAAc,CAAC;AACzF,CAAC,CAAC;AAEF,6CAA6C;AAC7C,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;2DAG2D;AAC3D,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,KAAiB;IAClE,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;sFAGsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,MAAmB,EAAE,KAAiB;IACxE,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,2BAA2B,GAAG,IAAI,GAAG,EAAoC,CAAC;AAEhF,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CAAC,CAA2B;IAChE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,2BAA2B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,2BAA2B,CAAC,IAAI,IAAI,qBAAqB;QAAE,OAAO,KAAK,CAAC;IAC5E,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,2BAA2B,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;mGACmG;AACnG,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,2BAA2B;QAAE,IAAI,CAAC,CAAC,cAAc,IAAI,KAAK;YAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACzH,CAAC;AAED;oBACoB;AACpB,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAe,EACf,MAA6C;IAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAE7E,+FAA+F;IAC/F,yEAAyE;IACzE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAEhF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,aAAa,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,IAAI;QACJ,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;KACvB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAmB;QAC7B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC;QACnE,cAAc;QACd,aAAa,EAAE,GAAG;QAClB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;KAClF,CAAC;IACF,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAClD,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAe,EACf,MAA4C;IAE5C,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,8FAA8F;IAC9F,qDAAqD;IACrD,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,uHAAuH;SAC/H,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAC9B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EACH,GAAG,IAAI,CAAC,MAAM,sBAAsB,cAAc,kCAAkC;gBACpF,0FAA0F;gBAC1F,uFAAuF;gBACvF,uCAAuC;SAC1C,CAAC;IAEJ,mFAAmF;IACnF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACpC,mFAAmF;IACnF,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,aAAa,CAAC;QAC1B,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QACtB,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC;QACzE,cAAc;QACd,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE;KAC9C,CAAC;IACF,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAClD,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAe,EAAE,IAAY,EAAE,OAA0B,UAAU;IAEnE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,MAAM,KAAK,SAAS;QACtB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,iBAAiB;YACzB,OAAO,EACL,0BAA0B,cAAc,CAAC,IAAI,CAAC,oCAAoC;gBAClF,sFAAsF;gBACtF,gBAAgB;SACnB,CAAC;IAEJ,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EACL,qBAAqB,MAAM,CAAC,IAAI,uDAAuD;gBACvF,yFAAyF;gBACzF,0CAA0C;YAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IAEJ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,CAAC;YACtF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACtE,OAAO,EAAE,+IAA+I,EAAE,CAAC;QAC/J,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,OAAO,OAAO,KAAK,QAAQ;YAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACtE,OAAO,EAAE,mFAAmF,EAAE,CAAC;QACnG,IAAI,CAAC,IAAI,CAAC,cAAc;YACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACtE,OAAO,EAAE,uGAAuG,EAAE,CAAC;IACzH,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS;QACrB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,iBAAiB;YACzB,OAAO,EACL,qCAAqC,MAAM,CAAC,IAAI,0CAA0C;gBAC1F,mCAAmC;YACrC,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IAEJ,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1D,yFAAyF;IACzF,8FAA8F;IAC9F,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,0CAA0C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC3F,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;SACxE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEzE,IAAI,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChD,iFAAiF;QACjF,2FAA2F;QAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAC1G,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,mKAAmK,EAAE,CAAC;IAC9M,CAAC;IAED,+FAA+F;IAC/F,4FAA4F;IAC5F,iGAAiG;IACjG,mDAAmD;IACnD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC1G,OAAO;YACL,IAAI,EAAE,SAAS;YACf,GAAG,EACD,iDAAiD,OAAO,CAAC,IAAI,yBAAyB;gBACtF,IAAI,MAAM,CAAC,IAAI,8DAA8D;YAC/E,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,QAAQ;YACX,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;SACxE,CAAC;IAEJ,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO;YACL,GAAG,OAAO;YACV,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtE,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,8EAA8E;IAC9E,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ;QACjD,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,eAAe,cAAc,CAAC,IAAI,CAAC,yGAAyG;KACnJ,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc;IAC5B,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAC1B,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,2BAA2B,CAAC,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;iFACiF;AACjF,OAAO,EAAE,iBAAiB,IAAI,cAAc,EAAE,MAAM,eAAe,CAAC"}