@meshline/sdk 0.0.0-stage → 0.1.0-alpha.1

package/dist/groups/operations.js

@@ -0,0 +1,225 @@
+import { ProtocolError, StateConflictError } from '../errors.js';
+import { validateAccountId } from '../identity/neo.js';
+import { groupApplicationCodec, groupCreateRequestCodec, groupEventCodec, groupInviteCodec, groupManagementPayloadCodec, groupMemberRecoveryRequestCodec, groupStateCodec, validateGroupApplication, validateGroupCreateRequest, validateGroupInvite, validateGroupManagementPayload, validateGroupMemberRecoveryRequest, validateGroupState } from '../models/group-management.js';
+import { groupAccountsRequestCodec, groupApplicationApproveRequestCodec, groupInviteQueryCodec, groupRecoveryApproveRequestCodec, groupRecoverySubmitResultCodec, validateGroupAccountsRequest, validateGroupApplicationApproveRequest, validateGroupInviteQuery, validateGroupRecoveryApproveRequest, validateGroupRecoverySubmitResult } from '../models/group-admission.js';
+import { groupMessageEnvelopeCodec, validateGroupMessageEnvelope, validateGroupRef } from '../models/groups.js';
+import { equalBytes } from '../protocol/encoding.js';
+import { canonicalJson, requireObject, requireSafeInteger } from '../protocol/json.js';
+import { updateStore } from '../storage/transaction.js';
+import { decodeGroupProjection, groupAcceptanceKey, groupEventKey, groupKey } from './repository.js';
+import { groupMemberSecretKey, groupRotationKey } from './secrets.js';
+export const groupOperationMethods = {
+    'group.create': 'POST', 'group.update': 'PATCH', 'group.close': 'DELETE', 'group.message.send': 'POST',
+    'group.member.leave': 'DELETE', 'group.member.remove': 'DELETE', 'group.member.ban': 'PUT', 'group.member.unban': 'DELETE',
+    'group.role.update': 'PUT', 'group.owner.transfer': 'POST',
+    'group.invite.create': 'POST', 'group.invite.revoke': 'DELETE',
+    'group.application.submit': 'POST', 'group.application.approve': 'POST', 'group.application.reject': 'DELETE',
+    'group.member.recovery.submit': 'POST', 'group.member.recovery.approve': 'POST', 'group.member.recovery.reject': 'DELETE',
+    'group.secret.rotation.commit': 'POST',
+};
+const key = (operation) => ({ collection: 'group_operations', key: `${operation.group.groupId}|${operation.method}` });
+const put = (record, value) => ({ ...record, kind: 'put', value });
+export function groupOperationPayload(operation) {
+    validateGroupRef(operation.group);
+    if (!Object.hasOwn(groupOperationMethods, operation.method))
+        throw new ProtocolError('invalid_operation', 'Unknown stored group operation.');
+    let payload;
+    if (operation.method === 'group.create') {
+        const request = groupCreateRequestCodec.decode(operation.request);
+        validateGroupCreateRequest(request);
+        payload = requireObject(operation.request.create);
+    }
+    else if (operation.method === 'group.invite.create') {
+        const request = groupInviteCodec.decode(operation.request);
+        validateGroupInvite(request, request.createdAt);
+    }
+    else if (operation.method === 'group.invite.revoke')
+        validateGroupInviteQuery(groupInviteQueryCodec.decode(operation.request));
+    else if (operation.method === 'group.application.submit')
+        validateGroupApplication(groupApplicationCodec.decode(operation.request));
+    else if (operation.method === 'group.member.recovery.submit')
+        validateGroupMemberRecoveryRequest(groupMemberRecoveryRequestCodec.decode(operation.request));
+    else if (operation.method === 'group.application.reject' || operation.method === 'group.member.recovery.reject')
+        validateGroupAccountsRequest(groupAccountsRequestCodec.decode(operation.request));
+    else if (operation.method === 'group.application.approve') {
+        validateGroupApplicationApproveRequest(groupApplicationApproveRequestCodec.decode(operation.request));
+        payload = requireObject(operation.request.approval);
+    }
+    else if (operation.method === 'group.member.recovery.approve') {
+        validateGroupRecoveryApproveRequest(groupRecoveryApproveRequestCodec.decode(operation.request));
+        payload = requireObject(operation.request.approval);
+    }
+    else if (operation.method === 'group.message.send') {
+        validateGroupMessageEnvelope(groupMessageEnvelopeCodec.decode(operation.request));
+        payload = operation.request;
+    }
+    else {
+        const value = groupManagementPayloadCodec.decode(operation.request);
+        validateGroupManagementPayload(value);
+        const expected = { 'group.update': 'update', 'group.close': 'close', 'group.member.leave': 'memberLeave', 'group.member.remove': 'memberRemoval', 'group.member.ban': 'memberBan', 'group.member.unban': 'memberUnban', 'group.role.update': 'roleUpdate', 'group.owner.transfer': 'ownerTransfer', 'group.secret.rotation.commit': 'secretRotation' };
+        if (value.kind !== expected[operation.method])
+            throw new ProtocolError('invalid_operation', 'Stored operation method and signed payload differ.');
+        payload = operation.request;
+    }
+    if ((payload ?? operation.request).group_id !== operation.group.groupId)
+        throw new ProtocolError('invalid_binding', 'Stored operation belongs to another group.');
+    if (operation.acceptedSequence !== undefined) {
+        requireSafeInteger(operation.acceptedSequence, 1);
+        if (operation.method !== 'group.message.send' || !operation.accepted)
+            throw new ProtocolError('invalid_operation', 'Unexpected group operation sequence acknowledgement.');
+    }
+    if (operation.acceptedResult !== undefined) {
+        if (operation.method !== 'group.member.recovery.submit' || !operation.accepted)
+            throw new ProtocolError('invalid_operation', 'Unexpected group operation acceptance result.');
+        validateGroupRecoverySubmitResult(groupRecoverySubmitResultCodec.decode(operation.acceptedResult));
+    }
+    return payload;
+}
+function encode(operation) { return { groupId: operation.group.groupId, relayId: operation.group.relayId, method: operation.method, request: operation.request, ...(operation.accepted ? { accepted: true } : {}), ...(operation.acceptedSequence === undefined ? {} : { acceptedSequence: operation.acceptedSequence }), ...(operation.acceptedResult === undefined ? {} : { acceptedResult: operation.acceptedResult }) }; }
+function decode(value) {
+    if (typeof value.groupId !== 'string' || typeof value.relayId !== 'string' || typeof value.method !== 'string' || value.accepted !== undefined && value.accepted !== true)
+        throw new ProtocolError('invalid_storage', 'Malformed stored group operation.');
+    const operation = { group: { groupId: value.groupId, relayId: value.relayId }, method: value.method, request: requireObject(value.request), ...(value.accepted ? { accepted: true } : {}), ...(value.acceptedSequence === undefined ? {} : { acceptedSequence: value.acceptedSequence }), ...(value.acceptedResult === undefined ? {} : { acceptedResult: requireObject(value.acceptedResult) }) };
+    groupOperationPayload(operation);
+    return operation;
+}
+const same = (a, b) => a.group.relayId === b.group.relayId && canonicalJson(a.request) === canonicalJson(b.request);
+/** Exact signed requests survive uncertain responses; positive receipts are durable before any follow-up I/O. */
+export class GroupOperations {
+    store;
+    context;
+    accountId;
+    constructor(store, context, accountId) {
+        this.store = store;
+        this.context = context;
+        this.accountId = accountId;
+        validateAccountId(accountId);
+    }
+    async all(signal) { return (await this.store.read([{ collection: 'group_operations' }], signal)).sets[0].map(row => { const value = decode(row.value); if (key(value).key !== row.key)
+        throw new ProtocolError('invalid_storage', 'Group operation key differs from its record.'); return value; }); }
+    async ensureAvailable(group, method, signal) {
+        if ((await this.store.read([key({ group, method })], signal)).sets[0].length)
+            throw new StateConflictError('An earlier group operation is awaiting confirmation; start the manager to recover it.');
+    }
+    async save(operation, member, signal, preview) {
+        operation = decode(encode(operation));
+        const queries = [key(operation), groupKey(operation.group)];
+        const previewWire = preview === undefined ? undefined : groupStateCodec.encode(preview);
+        if (preview) {
+            validateGroupState(preview);
+            if (preview.groupId !== operation.group.groupId)
+                throw new ProtocolError('invalid_binding', 'Group preview belongs to another group.');
+        }
+        if (member) {
+            if (member.group.groupId !== operation.group.groupId || member.group.relayId !== operation.group.relayId)
+                throw new ProtocolError('invalid_binding', 'Prepared member key belongs to another group.');
+            queries.push(groupMemberSecretKey(member.group.groupId, member.publicKey));
+        }
+        await updateStore(this.store, queries, snapshot => {
+            if (snapshot.sets[0].length)
+                throw new StateConflictError('An earlier group operation is awaiting confirmation.');
+            const group = snapshot.sets[1][0]?.value;
+            if (group && group.relayId !== operation.group.relayId)
+                throw new ProtocolError('invalid_binding', 'Stored group belongs to another hosting relay.');
+            const mutations = [put(key(operation), encode(operation))];
+            if (!group || previewWire && !group.projection)
+                mutations.push(put(groupKey(operation.group), { ...group, relayId: operation.group.relayId, ...(previewWire ? { preview: previewWire } : {}) }));
+            if (member) {
+                if (snapshot.sets[2].length)
+                    throw new StateConflictError('Prepared member key already exists.');
+                mutations.push(put(queries[2], { publicKey: queries[2].key.split('|')[1], protectedKey: member.protectedKey, shared: false }));
+            }
+            return { mutations, result: undefined };
+        }, signal);
+    }
+    async acknowledge(operation, acceptedSequence, acceptedResult) {
+        if (acceptedSequence !== undefined)
+            requireSafeInteger(acceptedSequence, 1);
+        return updateStore(this.store, [key(operation)], snapshot => {
+            const row = snapshot.sets[0][0];
+            if (!row)
+                throw new StateConflictError('Group operation disappeared before its acceptance was recorded.');
+            const current = decode(row.value);
+            if (!same(current, operation) || current.acceptedSequence !== undefined && current.acceptedSequence !== acceptedSequence || current.acceptedResult !== undefined && canonicalJson(current.acceptedResult) !== canonicalJson(acceptedResult ?? null))
+                throw new StateConflictError('Group operation acknowledgement conflicts with the pending request.');
+            const result = { ...current, accepted: true, ...(acceptedSequence === undefined ? {} : { acceptedSequence }), ...(acceptedResult === undefined ? {} : { acceptedResult }) };
+            groupOperationPayload(result);
+            return { mutations: [put(key(operation), encode(result))], result };
+        });
+    }
+    async acceptedEvent(operation, signal) {
+        const payload = groupOperationPayload(operation);
+        if (!payload)
+            return undefined;
+        const row = (await this.store.read([groupAcceptanceKey(operation.group, payload, this.context)], signal)).sets[0][0];
+        if (!row)
+            return undefined;
+        requireSafeInteger(row.value.sequence, 0);
+        const sequence = row.value.sequence;
+        const record = (await this.store.read([groupEventKey(operation.group, sequence)], signal)).sets[0][0]?.value;
+        if (!record || canonicalJson(groupEventCodec.decode(record.event).payload) !== canonicalJson(payload))
+            throw new ProtocolError('invalid_storage', 'Group acceptance evidence differs from its indexed signed payload.');
+        if (operation.acceptedSequence !== undefined && operation.acceptedSequence !== sequence)
+            throw new ProtocolError('conflicting_acknowledgement', 'Relay acknowledgement and verified group message sequence differ.');
+        return { sequence, record };
+    }
+    /** Approval can outlive a lost or malformed submission acknowledgement. */
+    async acceptedMemberRequest(operation, signal) {
+        const recovery = operation.method === 'group.member.recovery.submit';
+        if (!recovery && operation.method !== 'group.application.submit')
+            return false;
+        const request = recovery ? groupMemberRecoveryRequestCodec.decode(operation.request) : groupApplicationCodec.decode(operation.request);
+        if (request.account !== this.accountId)
+            throw new ProtocolError('invalid_binding', 'Pending member request belongs to another account.');
+        const snapshot = await this.store.read([groupKey(operation.group), { collection: 'group_events', prefix: `${operation.group.groupId}|` }], signal);
+        const group = snapshot.sets[0][0]?.value;
+        if (!group?.projection)
+            return false;
+        if (group.relayId !== operation.group.relayId)
+            throw new ProtocolError('invalid_binding', 'Pending member request belongs to another hosting relay.');
+        const projection = decodeGroupProjection(requireObject(group.projection), operation.group);
+        for (const row of snapshot.sets[1]) {
+            if (row.value.rejection !== undefined)
+                continue;
+            const event = groupEventCodec.decode(row.value.event);
+            if (event.payload.$type !== (recovery ? 'meshline.group.member.recovery.approval' : 'meshline.group.application.approval'))
+                continue;
+            const approval = groupManagementPayloadCodec.decode(event.payload);
+            if (approval.kind !== 'applicationApproval' && approval.kind !== 'memberRecoveryApproval')
+                continue;
+            if (approval.value.groupId !== operation.group.groupId
+                || !approval.value.members.some(member => member.account === request.account && equalBytes(member.memberEncryptionPublicKey, request.memberEncryptionPublicKey)))
+                continue;
+            const index = (await this.store.read([groupAcceptanceKey(operation.group, event.payload, this.context)], signal)).sets[0][0];
+            if (!event.signerDeviceId || event.sequence > projection.sequence || row.key !== groupEventKey(operation.group, event.sequence).key || index?.value.sequence !== event.sequence)
+                throw new ProtocolError('invalid_storage', 'Member request approval is not indexed in verified group history.');
+            return true;
+        }
+        return false;
+    }
+    /** The caller supplies verified evidence or a positive acknowledgement. Rejections never erase an earlier uncertain operation. */
+    async complete(operation, localEffect = false) {
+        return updateStore(this.store, [key(operation), groupKey(operation.group), groupRotationKey(operation.group)], snapshot => {
+            const row = snapshot.sets[0][0];
+            if (!row)
+                return { mutations: [], result: undefined };
+            if (!same(decode(row.value), operation))
+                throw new StateConflictError('Pending group request changed before completion.');
+            const mutations = [{ kind: 'delete', ...key(operation) }];
+            const group = snapshot.sets[1][0]?.value;
+            if (localEffect && group) {
+                if (operation.method === 'group.close')
+                    mutations.push(put(groupKey(operation.group), { ...group, locallyClosed: true }));
+                if (operation.method === 'group.member.leave')
+                    mutations.push(put(groupKey(operation.group), { ...group, localDepartureAfter: requireObject(group.projection).sequence }));
+                if (operation.method === 'group.application.submit' && (!group.projection || !decodeGroupProjection(requireObject(group.projection), operation.group).members.some(member => member.account === this.accountId)))
+                    mutations.push(put(groupKey(operation.group), { ...group, pendingApplication: true }));
+                if (operation.method === 'group.secret.rotation.commit' && snapshot.sets[2][0]?.value.commitment === operation.request.client_secret_commitment)
+                    mutations.push({ kind: 'delete', ...groupRotationKey(operation.group) });
+            }
+            const change = mutations.find(mutation => mutation.collection === 'groups' && mutation.kind === 'put');
+            return { mutations, result: change?.kind === 'put' ? change.value : undefined };
+        });
+    }
+}
+//# sourceMappingURL=operations.js.map

package/dist/groups/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/groups/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,eAAe,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,+BAA+B,EAAE,eAAe,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,kCAAkC,EAAE,kBAAkB,EAAmB,MAAM,+BAA+B,CAAC;AACrY,OAAO,EAAE,yBAAyB,EAAE,mCAAmC,EAAE,qBAAqB,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,sCAAsC,EAAE,wBAAwB,EAAE,mCAAmC,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AAC/W,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,gBAAgB,EAAiB,MAAM,qBAAqB,CAAC;AAE/H,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AAExG,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAA+B,MAAM,cAAc,CAAC;AAEnG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACjC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM;IACtG,oBAAoB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ;IAC1H,mBAAmB,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM;IAC1D,qBAAqB,EAAE,MAAM,EAAE,qBAAqB,EAAE,QAAQ;IAC9D,0BAA0B,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ;IAC7G,8BAA8B,EAAE,MAAM,EAAE,+BAA+B,EAAE,MAAM,EAAE,8BAA8B,EAAE,QAAQ;IACzH,8BAA8B,EAAE,MAAM;CACK,CAAC;AAGhD,MAAM,GAAG,GAAG,CAAC,SAAmD,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5K,MAAM,GAAG,GAAG,CAAC,MAAiB,EAAE,KAAiB,EAAiB,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACzG,MAAM,UAAU,qBAAqB,CAAC,SAAyB;IAC3D,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,SAAS,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;IAChL,IAAI,OAA+B,CAAC;IACpC,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;IAAC,CAAC;SACnM,IAAI,SAAS,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;SAChK,IAAI,SAAS,CAAC,MAAM,KAAK,qBAAqB;QAAE,wBAAwB,CAAC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;SAC1H,IAAI,SAAS,CAAC,MAAM,KAAK,0BAA0B;QAAE,wBAAwB,CAAC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;SAC/H,IAAI,SAAS,CAAC,MAAM,KAAK,8BAA8B;QAAE,kCAAkC,CAAC,+BAA+B,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;SACvJ,IAAI,SAAS,CAAC,MAAM,KAAK,0BAA0B,IAAI,SAAS,CAAC,MAAM,KAAK,8BAA8B;QAAE,4BAA4B,CAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;SAC9L,IAAI,SAAS,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;QAAC,sCAAsC,CAAC,mCAAmC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,QAAS,CAAC,CAAC;IAAC,CAAC;SACtN,IAAI,SAAS,CAAC,MAAM,KAAK,+BAA+B,EAAE,CAAC;QAAC,mCAAmC,CAAC,gCAAgC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,QAAS,CAAC,CAAC;IAAC,CAAC;SACpN,IAAI,SAAS,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAAC,4BAA4B,CAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAAC,CAAC;SAClK,CAAC;QACF,MAAM,KAAK,GAAG,2BAA2B,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAC3G,MAAM,QAAQ,GAA6D,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,qBAAqB,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,EAAE,mBAAmB,EAAE,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,CAAC;QACjZ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,oDAAoD,CAAC,CAAC;QAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IACnL,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;IAClK,IAAI,SAAS,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAAC,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAAC,IAAI,SAAS,CAAC,MAAM,KAAK,oBAAoB,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,sDAAsD,CAAC,CAAC;IAAC,CAAC;IAChR,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,MAAM,KAAK,8BAA8B,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAC;QAC9K,iCAAiC,CAAC,8BAA8B,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AACD,SAAS,MAAM,CAAC,SAAyB,IAAgB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1b,SAAS,MAAM,CAAC,KAAiB;IAC7B,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IAC3P,MAAM,SAAS,GAAmB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAA8B,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAA0B,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;IACtb,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAAC,OAAO,SAAS,CAAC;AACvD,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAE,CAAiB,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAE7J,iHAAiH;AACjH,MAAM,OAAO,eAAe;IACH,KAAK;IAA0B,OAAO;IAA2B,SAAS;IAA/F,YAAqB,KAAoB,EAAW,OAAuB,EAAW,SAAiB;qBAAlF,KAAK;uBAA0B,OAAO;yBAA2B,SAAS;QAAY,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAC1I,KAAK,CAAC,GAAG,CAAC,MAAoB,IAAwC,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzV,KAAK,CAAC,eAAe,CAAC,KAAe,EAAE,MAA4B,EAAE,MAAoB;QACrF,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM;YAAE,MAAM,IAAI,kBAAkB,CAAC,uFAAuF,CAAC,CAAC;IACzM,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAyB,EAAE,MAA0C,EAAE,MAAoB,EAAE,OAAoB;QACxH,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnG,MAAM,WAAW,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxF,IAAI,OAAO,EAAE,CAAC;YAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;QAAC,CAAC;QACrL,IAAI,MAAM,EAAE,CAAC;YAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAClS,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM;gBAAE,MAAM,IAAI,kBAAkB,CAAC,sDAAsD,CAAC,CAAC;YACnH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAC1C,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;YACrJ,MAAM,SAAS,GAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK,IAAI,WAAW,IAAI,CAAC,KAAK,CAAC,UAAU;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACjM,IAAI,MAAM,EAAE,CAAC;gBACT,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM;oBAAE,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;gBAClG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACtI,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,SAAyB,EAAE,gBAAyB,EAAE,cAA2B;QAC/F,IAAI,gBAAgB,KAAK,SAAS;YAAE,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC5E,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE;YACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,kBAAkB,CAAC,iEAAiE,CAAC,CAAC;YAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/K,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,cAAc,IAAI,IAAI,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,qEAAqE,CAAC,CAAC;YACzV,MAAM,MAAM,GAAmB,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;YAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC3N,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QACxE,CAAC,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,SAAyB,EAAE,MAAoB;QAC/D,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACjF,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAClJ,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC/E,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAC9G,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,oEAAoE,CAAC,CAAC;QACzN,IAAI,SAAS,CAAC,gBAAgB,KAAK,SAAS,IAAI,SAAS,CAAC,gBAAgB,KAAK,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,6BAA6B,EAAE,mEAAmE,CAAC,CAAC;QACrN,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;IACD,2EAA2E;IAC3E,KAAK,CAAC,qBAAqB,CAAC,SAAyB,EAAE,MAAoB;QACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,KAAK,8BAA8B,CAAC;QACrE,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,0BAA0B;YAAE,OAAO,KAAK,CAAC;QAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvI,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,oDAAoD,CAAC,CAAC;QACzI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACnJ,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,UAAU;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAC;QACtJ,MAAM,UAAU,GAAG,qBAAqB,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3F,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YAChD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAM,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,qCAAqC,CAAC;gBAAE,SAAS;YACrI,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB,IAAI,QAAQ,CAAC,IAAI,KAAK,wBAAwB;gBAAE,SAAS;YACpG,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO;mBAC/C,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;gBAAE,SAAS;YAC/K,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;YAC9H,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,KAAK,EAAE,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,mEAAmE,CAAC,CAAC;YACjS,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,kIAAkI;IAClI,KAAK,CAAC,QAAQ,CAAC,SAAyB,EAAE,WAAW,GAAG,KAAK;QACzD,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE;YACtH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACxF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,CAAC,CAAC;YAC1H,MAAM,SAAS,GAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YACtH,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,SAAS,CAAC,MAAM,KAAK,aAAa;oBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC1H,IAAI,SAAS,CAAC,MAAM,KAAK,oBAAoB;oBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,mBAAmB,EAAE,aAAa,CAAC,KAAK,CAAC,UAAW,CAAC,CAAC,QAAS,EAAE,CAAC,CAAC,CAAC;gBAC7K,IAAI,SAAS,CAAC,MAAM,KAAK,0BAA0B,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzS,IAAI,SAAS,CAAC,MAAM,KAAK,8BAA8B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,OAAO,CAAC,wBAAwB;oBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/N,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YACvG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACpF,CAAC,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/groups/repository.d.ts

@@ -0,0 +1,56 @@
+import { ProtocolError } from '../errors.js';
+import { groupStateCodec, type GroupSequenceQuery, type GroupSyncPage } from '../models/group-management.js';
+import { type GroupKeyEntry, type GroupKeyPage } from '../models/group-keys.js';
+import { type GroupRef } from '../models/groups.js';
+import type { NetworkContext } from '../protocol/context.js';
+import { type JsonObject } from '../protocol/json.js';
+import type { MeshlineStore, RecordKey } from '../storage/store.js';
+import { type GroupChangeKind, type GroupProjection } from './state.js';
+export interface GroupEpochRecord {
+    readonly group: GroupRef;
+    readonly epoch: number;
+    readonly commitment: string;
+    readonly memberPublicKey?: Uint8Array;
+    readonly keyEntry?: GroupKeyEntry;
+}
+export interface GroupPageResult {
+    readonly projection?: GroupProjection;
+    readonly hasMore: boolean;
+    readonly rejected: readonly {
+        readonly sequence: number;
+        readonly error: ProtocolError;
+    }[];
+    readonly messageSequences: readonly number[];
+    readonly change?: {
+        readonly record: JsonObject;
+        readonly kinds: readonly GroupChangeKind[];
+    };
+}
+export interface GroupTimelineSource {
+    read(query: GroupSequenceQuery, signal?: AbortSignal): Promise<GroupSyncPage>;
+}
+export declare const groupKey: (group: GroupRef) => RecordKey;
+export declare const groupEventKey: (group: GroupRef, sequence: number) => RecordKey;
+export declare const groupEpochKey: (group: GroupRef, epoch: number) => RecordKey;
+export declare const groupPendingMessageKey: (group: GroupRef, sequence: number) => RecordKey;
+export declare const groupAcceptanceKey: (group: GroupRef, payload: JsonObject, context: NetworkContext) => RecordKey;
+export declare function encodeGroupProjection(value: GroupProjection): JsonObject;
+/** Persisted projections are validated as local state, never accepted from a relay preview. */
+export declare function decodeGroupProjection(value: JsonObject, group: GroupRef): GroupProjection;
+/** Commits verified group state, epoch authority, signed evidence, deduplication and cursor in one CAS batch. */
+export declare class GroupRepository {
+    readonly store: MeshlineStore;
+    readonly context: NetworkContext;
+    readonly accountId: string;
+    constructor(store: MeshlineStore, context: NetworkContext, accountId: string);
+    get(group: GroupRef, signal?: AbortSignal): Promise<GroupProjection | undefined>;
+    /** Pre-admission relay previews are presentation data and never replace verified history or establish epoch authority. */
+    savePreview(group: GroupRef, source: ReturnType<typeof groupStateCodec.decode>, signal?: AbortSignal): Promise<void>;
+    event(group: GroupRef, sequence: number, signal?: AbortSignal): Promise<JsonObject | undefined>;
+    epochs(group: GroupRef, signal?: AbortSignal): Promise<readonly GroupEpochRecord[]>;
+    keyProgress(group: GroupRef, signal?: AbortSignal): Promise<number>;
+    synchronizePage(group: GroupRef, source: GroupTimelineSource, signal?: AbortSignal): Promise<GroupPageResult>;
+    /** Reuses an omitted client box only inside this page and only while both verified commitment and account key remain unchanged. */
+    saveKeyPage(group: GroupRef, source: GroupKeyPage, after: number, signal?: AbortSignal): Promise<void>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/dist/groups/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/groups/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAsB,MAAM,cAAc,CAAC;AAIjE,OAAO,EAAqC,eAAe,EAAkF,KAAK,kBAAkB,EAAE,KAAK,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAChO,OAAO,EAA+D,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7I,OAAO,EAAoB,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAoD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAExG,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAA+B,MAAM,qBAAqB,CAAC;AAEjG,OAAO,EAAqC,KAAK,eAAe,EAAyE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAElL,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;CAAE;AAC7L,MAAM,WAAW,eAAe;IAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;KAAE,EAAE,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1O,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAA;KAAE,CAAA;CAAE;AACnG,MAAM,WAAW,mBAAmB;IAAG,IAAI,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;CAAE;AAEtH,eAAO,MAAM,QAAQ,UAAW,QAAQ,KAAG,SAA2D,CAAC;AACvG,eAAO,MAAM,aAAa,UAAW,QAAQ,YAAY,MAAM,KAAG,SAAyF,CAAC;AAC5J,eAAO,MAAM,aAAa,UAAW,QAAQ,SAAS,MAAM,KAAG,SAAsF,CAAC;AACtJ,eAAO,MAAM,sBAAsB,UAAW,QAAQ,YAAY,MAAM,KAAG,SAAmG,CAAC;AAC/K,eAAO,MAAM,kBAAkB,UAAW,QAAQ,WAAW,UAAU,WAAW,cAAc,KAAG,SAAoH,CAAC;AAIxN,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CAIxE;AACD,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,GAAG,eAAe,CAoBzF;AAcD,iHAAiH;AACjH,qBAAa,eAAe;IACZ,QAAQ,CAAC,KAAK,EAAE,aAAa;IAAE,QAAQ,CAAC,OAAO,EAAE,cAAc;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAAvG,YAAqB,KAAK,EAAE,aAAa,EAAW,OAAO,EAAE,cAAc,EAAW,SAAS,EAAE,MAAM,EAAmC;IACpI,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAoI;IAC1N,0HAA0H;IACpH,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAOzH;IACK,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAEpG;IACK,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAExF;IACK,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAwJ;IAC3N,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAoDlH;IACD,mIAAmI;IAC7H,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3G;CACJ"}

package/dist/groups/repository.js

@@ -0,0 +1,254 @@
+import { ProtocolError, StateConflictError } from '../errors.js';
+import { groupManagementHash } from '../crypto/groups.js';
+import { validateAccountId } from '../identity/neo.js';
+import { contentHashBytes } from '../models/content.js';
+import { groupEventCodec, groupMemberCodec, groupStateCodec, groupSyncPageCodec, validateGroupState, validateGroupSyncPage } from '../models/group-management.js';
+import { groupKeyEntryCodec, groupKeyPageCodec, validateGroupKeyPage } from '../models/group-keys.js';
+import { validateGroupRef } from '../models/groups.js';
+import { certificateId, deviceCertificateCodec } from '../models/identity.js';
+import { decodeBase64Url, encodeBase64Url, equalBytes } from '../protocol/encoding.js';
+import { canonicalJson, requireObject, requireSafeInteger } from '../protocol/json.js';
+import { requireLength } from '../crypto/primitives.js';
+import { updateStore } from '../storage/transaction.js';
+import { applyGroupEvent, groupChangeKinds } from './state.js';
+const index = (value) => { requireSafeInteger(value, 0); return String(value).padStart(16, '0'); };
+export const groupKey = (group) => ({ collection: 'groups', key: group.groupId });
+export const groupEventKey = (group, sequence) => ({ collection: 'group_events', key: `${group.groupId}|${index(sequence)}` });
+export const groupEpochKey = (group, epoch) => ({ collection: 'group_epochs', key: `${group.groupId}|${index(epoch)}` });
+export const groupPendingMessageKey = (group, sequence) => ({ collection: 'group_pending_messages', key: `${group.groupId}|${index(sequence)}` });
+export const groupAcceptanceKey = (group, payload, context) => ({ collection: 'group_acceptances', key: `${group.groupId}|${groupManagementHash(payload, context)}` });
+const messageKey = (group, sender, messageId) => ({ collection: 'group_message_ids', key: `${group.groupId}|${sender}|${messageId}` });
+const put = (key, value) => ({ ...key, kind: 'put', value });
+const fingerprint = (value) => canonicalJson(value ?? null);
+export function encodeGroupProjection(value) {
+    return { sequence: value.sequence, epoch: value.epoch, managementHash: value.managementHash, clientSecretCommitment: value.clientSecretCommitment, state: groupStateCodec.encode(value.state),
+        members: value.members.map(member => ({ ...groupMemberCodec.encode({ account: member.account, role: member.role, memberEncryptionPublicKey: member.memberEncryptionPublicKey }), joinedAtSequence: member.joinedAtSequence,
+            ...(member.nickname === undefined ? {} : { nickname: member.nickname }), ...(member.nicknameSequence === undefined ? {} : { nicknameSequence: member.nicknameSequence }) })), bans: [...value.bans], departures: { ...value.departures } };
+}
+/** Persisted projections are validated as local state, never accepted from a relay preview. */
+export function decodeGroupProjection(value, group) {
+    validateGroupRef(group);
+    requireSafeInteger(value.sequence, 0);
+    requireSafeInteger(value.epoch, 0);
+    const sequence = value.sequence;
+    const state = groupStateCodec.decode(value.state);
+    validateGroupState(state);
+    if (state.groupId !== group.groupId || typeof value.managementHash !== 'string' || typeof value.clientSecretCommitment !== 'string' || !Array.isArray(value.members) || !Array.isArray(value.bans))
+        throw new ProtocolError('invalid_storage', 'Malformed verified group state.');
+    contentHashBytes(value.managementHash);
+    contentHashBytes(value.clientSecretCommitment);
+    const seen = new Set();
+    const members = value.members.map(item => {
+        const wire = { ...requireObject(item) };
+        const joinedAtSequence = wire.joinedAtSequence;
+        const nickname = wire.nickname;
+        const nicknameSequence = wire.nicknameSequence;
+        delete wire.joinedAtSequence;
+        delete wire.nickname;
+        delete wire.nicknameSequence;
+        const member = groupMemberCodec.decode(wire);
+        validateAccountId(member.account);
+        requireLength(member.memberEncryptionPublicKey, 32, 'Stored member public key');
+        requireSafeInteger(joinedAtSequence, 0);
+        if (joinedAtSequence > sequence || seen.has(member.account))
+            throw new ProtocolError('invalid_storage', 'Stored group member has an invalid join sequence or duplicate account.');
+        seen.add(member.account);
+        if (nickname !== undefined && typeof nickname !== 'string')
+            throw new ProtocolError('invalid_storage', 'Stored nickname must be a string.');
+        if (nicknameSequence !== undefined) {
+            requireSafeInteger(nicknameSequence, joinedAtSequence);
+            if (nicknameSequence > sequence)
+                throw new ProtocolError('invalid_storage', 'Stored nickname sequence exceeds group position.');
+        }
+        return { ...member, joinedAtSequence, ...(nickname === undefined ? {} : { nickname }), ...(nicknameSequence === undefined ? {} : { nicknameSequence }) };
+    });
+    const bans = value.bans.map(item => { if (typeof item !== 'string')
+        throw new ProtocolError('invalid_storage', 'Stored ban must name an account.'); validateAccountId(item); return item; });
+    if (new Set(bans).size !== bans.length || bans.some(account => seen.has(account)) || members.length !== state.memberCount || members.filter(member => member.role === 'owner').length !== 1 || members.find(member => member.role === 'owner').account !== state.owner)
+        throw new ProtocolError('invalid_storage', 'Stored group membership, owner or bans are inconsistent.');
+    const departures = Object.create(null);
+    for (const [account, departure] of Object.entries(requireObject(value.departures))) {
+        validateAccountId(account);
+        if (typeof departure !== 'string' || !['left', 'removed', 'banned', 'not_member'].includes(departure) || seen.has(account))
+            throw new ProtocolError('invalid_storage', 'Invalid stored departure.');
+        departures[account] = departure;
+    }
+    return { ...group, sequence: value.sequence, epoch: value.epoch, managementHash: value.managementHash, clientSecretCommitment: value.clientSecretCommitment, state, members, bans, departures };
+}
+function recordProjection(value, group) {
+    if (!value)
+        return undefined;
+    if (value.relayId !== group.relayId)
+        throw new ProtocolError('invalid_binding', 'Stored group belongs to another hosting relay.');
+    return value.projection === undefined ? undefined : decodeGroupProjection(requireObject(value.projection), group);
+}
+function decodeEpoch(row, group) {
+    const value = row.value;
+    requireSafeInteger(value.epoch, 0);
+    if (row.key !== groupEpochKey(group, value.epoch).key || typeof value.commitment !== 'string')
+        throw new ProtocolError('invalid_storage', 'Stored group epoch has an invalid identity or commitment.');
+    contentHashBytes(value.commitment);
+    const memberPublicKey = value.memberPublicKey === undefined ? undefined : decodeBase64Url(String(value.memberPublicKey));
+    if (memberPublicKey)
+        requireLength(memberPublicKey, 32, 'Epoch member public key');
+    const keyEntry = value.keyEntry === undefined ? undefined : groupKeyEntryCodec.decode(value.keyEntry);
+    if (keyEntry && keyEntry.epoch !== value.epoch)
+        throw new ProtocolError('invalid_storage', 'Stored group key entry belongs to another epoch.');
+    return { group, epoch: value.epoch, commitment: value.commitment, ...(memberPublicKey ? { memberPublicKey } : {}), ...(keyEntry ? { keyEntry } : {}) };
+}
+/** Commits verified group state, epoch authority, signed evidence, deduplication and cursor in one CAS batch. */
+export class GroupRepository {
+    store;
+    context;
+    accountId;
+    constructor(store, context, accountId) {
+        this.store = store;
+        this.context = context;
+        this.accountId = accountId;
+        validateAccountId(accountId);
+    }
+    async get(group, signal) { validateGroupRef(group); return recordProjection((await this.store.read([groupKey(group)], signal)).sets[0][0]?.value, group); }
+    /** Pre-admission relay previews are presentation data and never replace verified history or establish epoch authority. */
+    async savePreview(group, source, signal) {
+        group = { ...group };
+        validateGroupRef(group);
+        const state = groupStateCodec.decode(groupStateCodec.encode(source));
+        validateGroupState(state);
+        if (state.groupId !== group.groupId)
+            throw new ProtocolError('invalid_binding', 'Relay preview belongs to another group.');
+        await updateStore(this.store, [groupKey(group)], snapshot => {
+            const current = snapshot.sets[0][0]?.value;
+            recordProjection(current, group);
+            return { mutations: current?.projection ? [] : [put(groupKey(group), { ...current, relayId: group.relayId, preview: groupStateCodec.encode(state) })], result: undefined };
+        }, signal);
+    }
+    async event(group, sequence, signal) {
+        validateGroupRef(group);
+        const snapshot = await this.store.read([groupKey(group), groupEventKey(group, sequence)], signal);
+        recordProjection(snapshot.sets[0][0]?.value, group);
+        return snapshot.sets[1][0]?.value;
+    }
+    async epochs(group, signal) {
+        validateGroupRef(group);
+        const snapshot = await this.store.read([groupKey(group), { collection: 'group_epochs', prefix: `${group.groupId}|` }], signal);
+        recordProjection(snapshot.sets[0][0]?.value, group);
+        return snapshot.sets[1].map(row => decodeEpoch(row, group));
+    }
+    async keyProgress(group, signal) { const values = await this.epochs(group, signal); return values.reduce((after, entry) => entry.keyEntry ? Math.max(after, entry.epoch) : after, -1); }
+    async synchronizePage(group, source, signal) {
+        validateGroupRef(group);
+        const initial = (await this.store.read([groupKey(group)], signal)).sets[0][0]?.value;
+        const before = recordProjection(initial, group);
+        const query = { groupId: group.groupId, after: before?.sequence ?? -1 };
+        const page = groupSyncPageCodec.decode(groupSyncPageCodec.encode(await source.read(query, signal)));
+        validateGroupSyncPage(page, query, this.context);
+        const certificates = new Map(page.certificates.map(certificate => [certificateId(certificate, this.context), certificate]));
+        const verified = [];
+        let projection = before;
+        for (const entry of page.events) {
+            const result = applyGroupEvent(projection, entry, entry.signerDeviceId === undefined ? undefined : certificates.get(entry.signerDeviceId), group, this.context);
+            verified.push({ entry, result, epochChanged: projection?.epoch !== result.projection.epoch });
+            projection = result.projection;
+        }
+        const keys = new Map();
+        const addKey = (key) => { keys.set(`${key.collection}|${key.key}`, key); };
+        addKey(groupKey(group));
+        for (const item of verified) {
+            addKey(groupEventKey(group, item.entry.sequence));
+            if (item.epochChanged)
+                addKey(groupEpochKey(group, item.entry.epoch));
+            const message = item.result.message;
+            if (message)
+                addKey(messageKey(group, message.sender.account, message.envelope.messageId));
+        }
+        const queries = [...keys.values()];
+        return updateStore(this.store, queries, snapshot => {
+            const rows = new Map(queries.map((key, i) => [`${key.collection}|${key.key}`, snapshot.sets[i][0]]));
+            const row = (key) => rows.get(`${key.collection}|${key.key}`);
+            if (fingerprint(row(groupKey(group))?.value) !== fingerprint(initial))
+                throw new StateConflictError('Group state changed while its timeline was being verified.');
+            const mutations = [];
+            const rejected = [];
+            const messageSequences = [];
+            const newMessages = new Set();
+            for (const { entry, result, epochChanged } of verified) {
+                const key = groupEventKey(group, entry.sequence);
+                if (row(key))
+                    throw new ProtocolError('conflicting_event', 'Group event already exists beyond the verified cursor.');
+                let rejection = result.rejection;
+                const message = result.message;
+                const identity = message && messageKey(group, message.sender.account, message.envelope.messageId);
+                if (identity && (row(identity) || newMessages.has(identity.key)))
+                    rejection = new ProtocolError('duplicate_message', 'Relay assigned a second sequence to an existing logical group message.');
+                const certificate = entry.signerDeviceId === undefined ? undefined : certificates.get(entry.signerDeviceId);
+                const value = { event: groupEventCodec.encode(entry), ...(certificate ? { certificate: deviceCertificateCodec.encode(certificate) } : {}) };
+                if (rejection) {
+                    value.rejection = { code: rejection.code, message: rejection.message };
+                    rejected.push({ sequence: entry.sequence, error: rejection });
+                }
+                else if (message && identity) {
+                    value.message = { sender: message.sender.account, messageId: message.envelope.messageId, senderDeviceId: message.signerDeviceId, createdAt: message.envelope.createdAt, joinedAtSequence: message.joinedAtSequence };
+                    newMessages.add(identity.key);
+                    mutations.push(put(identity, { sequence: entry.sequence }), put(groupPendingMessageKey(group, entry.sequence), { sequence: entry.sequence }));
+                    messageSequences.push(entry.sequence);
+                }
+                mutations.push(put(key, value));
+                if (!rejection && entry.signerDeviceId)
+                    mutations.push(put(groupAcceptanceKey(group, entry.payload, this.context), { sequence: entry.sequence }));
+                if (epochChanged) {
+                    const epochKey = groupEpochKey(group, entry.epoch);
+                    const old = row(epochKey)?.value;
+                    const memberPublicKey = result.projection.members.find(member => member.account === this.accountId)?.memberEncryptionPublicKey;
+                    if (old?.commitment !== undefined && (old.commitment !== result.projection.clientSecretCommitment || old.memberPublicKey !== (memberPublicKey && encodeBase64Url(memberPublicKey))))
+                        throw new ProtocolError('conflicting_epoch', 'Stored group epoch authority conflicts with verified management history.');
+                    mutations.push(put(epochKey, { ...old, epoch: entry.epoch, commitment: result.projection.clientSecretCommitment, ...(memberPublicKey ? { memberPublicKey: encodeBase64Url(memberPublicKey) } : {}) }));
+                }
+            }
+            let change;
+            if (verified.length) {
+                const ownerSequence = verified.filter(item => item.entry.payload.$type === 'meshline.group.owner.transfer').at(-1)?.entry.sequence ?? initial?.ownerSequence ?? 0;
+                const next = { ...initial, relayId: group.relayId, projection: encodeGroupProjection(projection), ownerSequence };
+                if (projection.members.some(member => member.account === this.accountId))
+                    delete next.pendingApplication;
+                mutations.push(put(groupKey(group), next));
+                const kinds = groupChangeKinds.filter(kind => verified.some(item => item.result.changeKinds?.includes(kind)));
+                if (kinds.length)
+                    change = { record: next, kinds };
+            }
+            return { mutations, result: { ...(projection ? { projection } : {}), ...(change ? { change } : {}), hasMore: page.hasMore, rejected, messageSequences } };
+        }, signal);
+    }
+    /** Reuses an omitted client box only inside this page and only while both verified commitment and account key remain unchanged. */
+    async saveKeyPage(group, source, after, signal) {
+        validateGroupRef(group);
+        const page = groupKeyPageCodec.decode(groupKeyPageCodec.encode(source));
+        validateGroupKeyPage(page, after);
+        const keys = page.keys.map(entry => groupEpochKey(group, entry.epoch));
+        await updateStore(this.store, [groupKey(group), ...keys], snapshot => {
+            const projection = recordProjection(snapshot.sets[0][0]?.value, group);
+            const mutations = [];
+            let previous;
+            let previousBox;
+            for (let i = 0; i < page.keys.length; i++) {
+                const entry = page.keys[i];
+                const row = snapshot.sets[i + 1][0];
+                if (!projection || entry.epoch > projection.epoch || !row)
+                    throw new ProtocolError('unverified_epoch', 'Management history has not established this group key epoch.');
+                const epoch = decodeEpoch(row, group);
+                if (!epoch.memberPublicKey)
+                    throw new ProtocolError('unauthorized_epoch', 'Group key epoch was not accessible to this account.');
+                const changed = !previous || previous.commitment !== epoch.commitment || !equalBytes(previous.memberPublicKey, epoch.memberPublicKey);
+                if (changed && !entry.clientSecretBox)
+                    throw new ProtocolError('missing_secret_box', 'A changed verified commitment or member key requires a client secret box.');
+                const expanded = { ...entry, clientSecretBox: entry.clientSecretBox ?? previousBox };
+                const wire = groupKeyEntryCodec.encode(expanded);
+                // Wrapping randomness is not an epoch identity. Derivation must compare any previously verified application secret before replacing it.
+                mutations.push(put(keys[i], { ...row.value, keyEntry: wire }));
+                previous = epoch;
+                previousBox = expanded.clientSecretBox;
+            }
+            return { mutations, result: undefined };
+        }, signal);
+    }
+}
+//# sourceMappingURL=repository.js.map

package/dist/groups/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/groups/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAAgE,MAAM,+BAA+B,CAAC;AAChO,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,EAAyC,MAAM,yBAAyB,CAAC;AAC7I,OAAO,EAAE,gBAAgB,EAAiB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE9E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACxG,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAqH,MAAM,YAAY,CAAC;AAMlL,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE,GAAG,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACnH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACvG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAe,EAAE,QAAgB,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5J,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAe,EAAE,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;AACtJ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAe,EAAE,QAAgB,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,wBAAwB,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/K,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAe,EAAE,OAAmB,EAAE,OAAuB,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AACxN,MAAM,UAAU,GAAG,CAAC,KAAe,EAAE,MAAc,EAAE,SAAiB,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,IAAI,SAAS,EAAE,EAAE,CAAC,CAAC;AAC5K,MAAM,GAAG,GAAG,CAAC,GAAc,EAAE,KAAiB,EAAiB,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACnG,MAAM,WAAW,GAAG,CAAC,KAA6B,EAAU,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5F,MAAM,UAAU,qBAAqB,CAAC,KAAsB;IACxD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACzL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACtN,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;AACvP,CAAC;AACD,+FAA+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,KAAiB,EAAE,KAAe;IACpE,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAAC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,KAAM,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnN,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,sBAAsB,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IAClR,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAAC,gBAAgB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAAC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IACvH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACrC,MAAM,IAAI,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACxK,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAAC,OAAO,IAAI,CAAC,QAAQ,CAAC;QAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC;QACjF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,aAAa,CAAC,MAAM,CAAC,yBAAyB,EAAE,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAAC,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC1M,IAAI,gBAAgB,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,wEAAwE,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5M,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;QAC5I,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAAC,kBAAkB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YAAC,IAAI,gBAAgB,GAAG,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,kDAAkD,CAAC,CAAC;QAAC,CAAC;QAChO,OAAO,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAA0B,CAAC;IACrL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7L,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAE,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAC;IAChX,MAAM,UAAU,GAAmC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAmC,CAAC;IACzG,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,UAAW,CAAC,CAAC,EAAE,CAAC;QAClF,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;QAAC,UAAU,CAAC,OAAO,CAAC,GAAG,SAA2B,CAAC;IACvR,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACpM,CAAC;AACD,SAAS,gBAAgB,CAAC,KAA6B,EAAE,KAAe;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;IAChK,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;AACtH,CAAC;AACD,SAAS,WAAW,CAAC,GAAiB,EAAE,KAAe;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;IAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3O,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAAC,IAAI,eAAe;QAAE,aAAa,CAAC,eAAe,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC7M,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtG,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,kDAAkD,CAAC,CAAC;IAC/I,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3J,CAAC;AAED,iHAAiH;AACjH,MAAM,OAAO,eAAe;IACH,KAAK;IAA0B,OAAO;IAA2B,SAAS;IAA/F,YAAqB,KAAoB,EAAW,OAAuB,EAAW,SAAiB;qBAAlF,KAAK;uBAA0B,OAAO;yBAA2B,SAAS;QAAY,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAC1I,KAAK,CAAC,GAAG,CAAC,KAAe,EAAE,MAAoB,IAA0C,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1N,0HAA0H;IAC1H,KAAK,CAAC,WAAW,CAAC,KAAe,EAAE,MAAiD,EAAE,MAAoB;QACtG,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/I,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;QAC3H,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/K,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,KAAe,EAAE,QAAgB,EAAE,MAAoB;QAC/D,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACzN,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAe,EAAE,MAAoB;QAC9C,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAChR,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,KAAe,EAAE,MAAoB,IAAqB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjO,KAAK,CAAC,eAAe,CAAC,KAAe,EAAE,MAA2B,EAAE,MAAoB;QACpF,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAAC,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChK,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtJ,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5H,MAAM,QAAQ,GAA6E,EAAE,CAAC;QAAC,IAAI,UAAU,GAAG,MAAM,CAAC;QACvH,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAChK,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,KAAK,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAClI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;QAAC,MAAM,MAAM,GAAG,CAAC,GAAc,EAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAC,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACzH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAAC,IAAI,OAAO;gBAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACpI,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtG,MAAM,GAAG,GAAG,CAAC,GAAc,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YACzE,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,4DAA4D,CAAC,CAAC;YAClK,MAAM,SAAS,GAAoB,EAAE,CAAC;YAAC,MAAM,QAAQ,GAAiD,EAAE,CAAC;YAAC,MAAM,gBAAgB,GAAa,EAAE,CAAC;YAAC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YACvL,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACrD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,wDAAwD,CAAC,CAAC;gBACvK,IAAI,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAAC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;gBAAC,MAAM,QAAQ,GAAG,OAAO,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACpK,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAAE,SAAS,GAAG,IAAI,aAAa,CAAC,mBAAmB,EAAE,wEAAwE,CAAC,CAAC;gBAC/L,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAE,CAAC;gBAC7G,MAAM,KAAK,GAAe,EAAE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxJ,IAAI,SAAS,EAAE,CAAC;oBAAC,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAAC,CAAC;qBACpJ,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC3B,KAAK,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBACrN,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;oBAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxN,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;gBAChC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,cAAc;oBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAClJ,IAAI,YAAY,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;oBAAC,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC;oBACrN,IAAI,GAAG,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,sBAAsB,IAAI,GAAG,CAAC,eAAe,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC;wBAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,0EAA0E,CAAC,CAAC;oBAC9S,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,sBAAsB,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,eAAe,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3M,CAAC;YACL,CAAC;YACD,IAAI,MAAiC,CAAC;YACtC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,+BAA+B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,EAAE,aAAa,IAAI,CAAC,CAAC;gBAClK,MAAM,IAAI,GAAe,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,qBAAqB,CAAC,UAAW,CAAC,EAAE,aAAa,EAAE,CAAC;gBAC/H,IAAI,UAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC;oBAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC;gBAC1G,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC9G,IAAI,KAAK,CAAC,MAAM;oBAAE,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACvD,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAC9J,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC;IACD,mIAAmI;IACnI,KAAK,CAAC,WAAW,CAAC,KAAe,EAAE,MAAoB,EAAE,KAAa,EAAE,MAAoB;QACxF,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpI,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE;YACjE,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,SAAS,GAAoB,EAAE,CAAC;YAAC,IAAI,QAAsC,CAAC;YAAC,IAAI,WAA6C,CAAC;YAC9M,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;gBAAC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,8DAA8D,CAAC,CAAC;gBAC1O,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,eAAe;oBAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC;gBACxK,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAgB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;gBACvI,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe;oBAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,2EAA2E,CAAC,CAAC;gBAClK,MAAM,QAAQ,GAAG,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,WAAY,EAAE,CAAC;gBAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACxI,wIAAwI;gBACxI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAC,QAAQ,GAAG,KAAK,CAAC;gBAAC,WAAW,GAAG,QAAQ,CAAC,eAAe,CAAC;YAC9H,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC;CACJ"}