@mikeargento/bitgraph-audit 0.1.0

package/dist/tar.js

@@ -0,0 +1,483 @@
+// Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
+/**
+ * Minimal streaming tar reader.
+ *
+ * Coverage, per docs/BUNDLE-FORMAT.md section 4: POSIX ustar headers, PAX
+ * extended headers (typeflags 'x' and 'g'; the 'path' and 'size' keywords
+ * are applied, other keywords are parsed and ignored), and GNU long-name
+ * entries (typeflag 'L'; 'K' long-linkname entries are consumed and
+ * discarded because links are not bundle entries). GNU base-256 numeric
+ * fields are supported for large sizes.
+ *
+ * Design constraints:
+ *   - Pure streaming over an AsyncIterable of byte chunks. Nothing is
+ *     written to disk and no entry is buffered by this module; entry bodies
+ *     are exposed as async chunk generators the caller consumes (or
+ *     abandons; unconsumed bytes are skipped automatically).
+ *   - Only regular-file entries carry content of interest. Directories,
+ *     symlinks, hard links, devices, and FIFOs are yielded as kind "other"
+ *     so callers can count them, but their bodies are never interpreted and
+ *     links are never followed or dereferenced.
+ *   - Corrupt structure (bad checksum, truncation, malformed PAX records)
+ *     throws; a corrupt container is not a readable bundle.
+ */
+const BLOCK = 512;
+/**
+ * Read tar entries sequentially from a byte stream.
+ *
+ * When `limits` is supplied, the reader enforces caps against untrusted
+ * archives: a total decompressed-byte ceiling, a maximum entry count, and
+ * a maximum size for metadata entries buffered whole (PAX headers and GNU
+ * long names). Exceeding any cap throws so the caller aborts cleanly.
+ */
+export async function* readTarEntries(source, limits) {
+    const reader = new ChunkReader(source, limits?.maxTotalBytes);
+    const maxEntryCount = limits?.maxEntryCount ?? Number.POSITIVE_INFINITY;
+    const maxMetadataEntryBytes = limits?.maxMetadataEntryBytes ?? Number.POSITIVE_INFINITY;
+    let pendingPax = null;
+    let globalPax = null;
+    let pendingLongName = null;
+    let entryCount = 0;
+    const guardMetadata = (size, kind) => {
+        if (size > maxMetadataEntryBytes) {
+            throw new Error(`tar: ${kind} metadata entry of ${size} bytes exceeds the ${maxMetadataEntryBytes}-byte cap`);
+        }
+    };
+    for (;;) {
+        const block = await reader.readExact(BLOCK);
+        if (block === null) {
+            // EOF at a block boundary without the two-zero-block trailer.
+            // Tolerated: everything read so far was structurally complete.
+            return;
+        }
+        if (isZeroBlock(block)) {
+            // End-of-archive marker. The second zero block and any trailing
+            // padding are irrelevant.
+            return;
+        }
+        if (++entryCount > maxEntryCount) {
+            throw new Error(`tar: archive exceeds the maximum of ${maxEntryCount} entries`);
+        }
+        const header = parseHeader(block);
+        const typeflag = header.typeflag;
+        // --- Metadata entries that modify the NEXT real entry ---------------
+        if (typeflag === "x" || typeflag === "g") {
+            guardMetadata(header.size, "PAX");
+            const data = await readAll(reader, header.size);
+            await reader.skip(padOf(header.size));
+            const records = parsePaxRecords(data);
+            if (typeflag === "x") {
+                pendingPax = records;
+            }
+            else {
+                globalPax = mergePax(globalPax, records);
+            }
+            continue;
+        }
+        if (typeflag === "L") {
+            guardMetadata(header.size, "GNU long-name");
+            const data = await readAll(reader, header.size);
+            await reader.skip(padOf(header.size));
+            pendingLongName = decodeString(stripTrailingNuls(data));
+            continue;
+        }
+        if (typeflag === "K") {
+            // GNU long linkname. Links are not bundle entries; discard.
+            await reader.skip(header.size + padOf(header.size));
+            continue;
+        }
+        // --- Real entry ------------------------------------------------------
+        let path = header.name;
+        if (globalPax !== null && globalPax.has("path"))
+            path = globalPax.get("path");
+        if (pendingLongName !== null)
+            path = pendingLongName;
+        if (pendingPax !== null && pendingPax.has("path"))
+            path = pendingPax.get("path");
+        let size = header.size;
+        const paxSize = pendingPax?.get("size") ?? globalPax?.get("size");
+        if (paxSize !== undefined) {
+            const parsed = Number(paxSize);
+            if (!Number.isSafeInteger(parsed) || parsed < 0) {
+                throw new Error("tar: invalid PAX size value");
+            }
+            size = parsed;
+        }
+        pendingPax = null;
+        pendingLongName = null;
+        const isFile = typeflag === "0" || typeflag === "\0";
+        const state = { remaining: size };
+        const body = bodyGenerator(reader, state);
+        yield {
+            path,
+            size,
+            kind: isFile ? "file" : "other",
+            typeflag,
+            body,
+        };
+        // Skip whatever the consumer left unread, plus block padding.
+        if (state.remaining > 0) {
+            await reader.skip(state.remaining);
+            state.remaining = 0;
+        }
+        await reader.skip(padOf(size));
+    }
+}
+// ---------------------------------------------------------------------------
+// Body streaming
+// ---------------------------------------------------------------------------
+async function* bodyGenerator(reader, state) {
+    while (state.remaining > 0) {
+        const chunk = await reader.readSome(state.remaining);
+        if (chunk === null) {
+            throw new Error("tar: truncated archive (unexpected end of stream inside entry body)");
+        }
+        state.remaining -= chunk.length;
+        yield chunk;
+    }
+}
+async function readAll(reader, size) {
+    if (size === 0)
+        return new Uint8Array(0);
+    const data = await reader.readExact(size);
+    if (data === null) {
+        throw new Error("tar: truncated archive (unexpected end of stream)");
+    }
+    return data;
+}
+function parseHeader(block) {
+    verifyChecksum(block);
+    const rawType = block[156];
+    const typeflag = rawType === 0 ? "\0" : String.fromCharCode(rawType);
+    let name = decodeString(fieldBytes(block, 0, 100));
+    const magic = decodeString(fieldBytes(block, 257, 6));
+    if (magic === "ustar") {
+        const prefix = decodeString(fieldBytes(block, 345, 155));
+        if (prefix.length > 0) {
+            name = `${prefix}/${name}`;
+        }
+    }
+    const size = parseNumeric(block.subarray(124, 136));
+    return { name, size, typeflag };
+}
+/** Extract a NUL-terminated field. */
+function fieldBytes(block, offset, length) {
+    const raw = block.subarray(offset, offset + length);
+    let end = raw.indexOf(0);
+    if (end === -1)
+        end = raw.length;
+    return raw.subarray(0, end);
+}
+/**
+ * Parse a tar numeric field: ASCII octal (NUL/space padded), or GNU
+ * base-256 when the high bit of the first byte is set.
+ */
+function parseNumeric(field) {
+    if (field.length > 0 && (field[0] & 0x80) !== 0) {
+        // GNU base-256: big-endian binary, first byte's low 7 bits included.
+        let value = 0n;
+        for (let i = 0; i < field.length; i++) {
+            const byte = i === 0 ? field[0] & 0x7f : field[i];
+            value = (value << 8n) | BigInt(byte);
+        }
+        if (value > BigInt(Number.MAX_SAFE_INTEGER)) {
+            throw new Error("tar: numeric field exceeds the supported range");
+        }
+        return Number(value);
+    }
+    const text = decodeString(field).trim().replace(/\0+$/, "").trim();
+    if (text.length === 0)
+        return 0;
+    const value = Number.parseInt(text, 8);
+    if (!Number.isSafeInteger(value) || value < 0) {
+        throw new Error(`tar: invalid octal numeric field: "${text}"`);
+    }
+    return value;
+}
+function verifyChecksum(block) {
+    const stored = parseNumeric(block.subarray(148, 156));
+    let sum = 0;
+    for (let i = 0; i < BLOCK; i++) {
+        sum += i >= 148 && i < 156 ? 0x20 : block[i];
+    }
+    if (sum !== stored) {
+        throw new Error("tar: header checksum mismatch (corrupt or not a tar archive)");
+    }
+}
+function isZeroBlock(block) {
+    for (let i = 0; i < block.length; i++) {
+        if (block[i] !== 0)
+            return false;
+    }
+    return true;
+}
+// ---------------------------------------------------------------------------
+// PAX records
+// ---------------------------------------------------------------------------
+/**
+ * Parse PAX extended-header data: a sequence of "len key=value\n" records
+ * where len is the decimal byte length of the whole record including the
+ * digits, the space, and the trailing newline.
+ */
+function parsePaxRecords(data) {
+    const records = new Map();
+    let offset = 0;
+    while (offset < data.length) {
+        let cursor = offset;
+        while (cursor < data.length && data[cursor] !== 0x20)
+            cursor++;
+        if (cursor >= data.length) {
+            throw new Error("tar: malformed PAX record (no length delimiter)");
+        }
+        const length = Number(decodeString(data.subarray(offset, cursor)));
+        if (!Number.isInteger(length) || length <= 0 || offset + length > data.length) {
+            throw new Error("tar: malformed PAX record (bad length)");
+        }
+        const record = data.subarray(cursor + 1, offset + length);
+        if (record.length === 0 || record[record.length - 1] !== 0x0a) {
+            throw new Error("tar: malformed PAX record (missing newline)");
+        }
+        const text = decodeString(record.subarray(0, record.length - 1));
+        const eq = text.indexOf("=");
+        if (eq === -1) {
+            throw new Error("tar: malformed PAX record (missing '=')");
+        }
+        records.set(text.slice(0, eq), text.slice(eq + 1));
+        offset += length;
+    }
+    return records;
+}
+function mergePax(base, overlay) {
+    const merged = new Map(base ?? []);
+    for (const [key, value] of overlay)
+        merged.set(key, value);
+    return merged;
+}
+// ---------------------------------------------------------------------------
+// Byte helpers
+// ---------------------------------------------------------------------------
+function decodeString(bytes) {
+    return new TextDecoder("utf-8").decode(bytes);
+}
+function stripTrailingNuls(bytes) {
+    let end = bytes.length;
+    while (end > 0 && bytes[end - 1] === 0)
+        end--;
+    return bytes.subarray(0, end);
+}
+/**
+ * Pull-based reader over an async chunk stream.
+ */
+class ChunkReader {
+    iter;
+    chunks = [];
+    head = 0;
+    available = 0;
+    ended = false;
+    totalPulled = 0;
+    maxTotalBytes;
+    constructor(source, maxTotalBytes) {
+        this.iter = source[Symbol.asyncIterator]();
+        this.maxTotalBytes = maxTotalBytes ?? Number.POSITIVE_INFINITY;
+    }
+    async fill() {
+        if (this.ended)
+            return false;
+        const result = await this.iter.next();
+        if (result.done === true) {
+            this.ended = true;
+            return false;
+        }
+        const chunk = result.value;
+        if (chunk.length > 0) {
+            this.totalPulled += chunk.length;
+            if (this.totalPulled > this.maxTotalBytes) {
+                throw new Error(`tar: archive exceeds the maximum decompressed size of ${this.maxTotalBytes} bytes`);
+            }
+            this.chunks.push(chunk);
+            this.available += chunk.length;
+        }
+        return true;
+    }
+    /**
+     * Read exactly n bytes. Returns null on a clean EOF with nothing
+     * buffered; throws if the stream ends mid-read.
+     */
+    async readExact(n) {
+        while (this.available < n) {
+            const more = await this.fill();
+            if (!more) {
+                if (this.available === 0)
+                    return null;
+                throw new Error("tar: truncated archive (unexpected end of stream)");
+            }
+        }
+        return this.take(n);
+    }
+    /** Read between 1 and max bytes. Returns null at EOF. */
+    async readSome(max) {
+        while (this.available === 0) {
+            const more = await this.fill();
+            if (!more)
+                return null;
+        }
+        const first = this.chunks[0];
+        const take = Math.min(max, first.length - this.head);
+        const out = first.subarray(this.head, this.head + take);
+        this.advance(take, first);
+        return out;
+    }
+    async skip(n) {
+        let remaining = n;
+        while (remaining > 0) {
+            const chunk = await this.readSome(remaining);
+            if (chunk === null) {
+                throw new Error("tar: truncated archive (unexpected end of stream)");
+            }
+            remaining -= chunk.length;
+        }
+    }
+    take(n) {
+        const out = new Uint8Array(n);
+        let copied = 0;
+        while (copied < n) {
+            const first = this.chunks[0];
+            const take = Math.min(n - copied, first.length - this.head);
+            out.set(first.subarray(this.head, this.head + take), copied);
+            copied += take;
+            this.advance(take, first);
+        }
+        return out;
+    }
+    advance(consumed, first) {
+        this.head += consumed;
+        this.available -= consumed;
+        if (this.head === first.length) {
+            this.chunks.shift();
+            this.head = 0;
+        }
+    }
+}
+function padOf(size) {
+    return (BLOCK - (size % BLOCK)) % BLOCK;
+}
+/** Build a complete tar archive (ustar + PAX long paths) in memory. */
+export function writeTarArchive(files) {
+    const parts = [];
+    for (const file of files) {
+        const pathBytes = new TextEncoder().encode(file.path);
+        if (pathBytes.length <= 100) {
+            parts.push(writeHeader(file.path, "", file.content.length, "0"));
+        }
+        else {
+            const split = splitUstarPath(file.path, pathBytes);
+            if (split !== null) {
+                parts.push(writeHeader(split.name, split.prefix, file.content.length, "0"));
+            }
+            else {
+                // PAX extended header carrying the full path, then a header whose
+                // name field holds a deterministic truncation.
+                const record = paxPathRecord(file.path);
+                const paxName = truncateBytes(`PaxHeaders.0/${file.path}`, 100);
+                parts.push(writeHeader(paxName, "", record.length, "x"), padBlock(record));
+                parts.push(writeHeader(truncateBytes(file.path, 100), "", file.content.length, "0"));
+            }
+        }
+        parts.push(padBlock(file.content));
+    }
+    parts.push(new Uint8Array(BLOCK), new Uint8Array(BLOCK));
+    return concatParts(parts);
+}
+/**
+ * Split a long path for the ustar prefix field: the rightmost "/" such
+ * that the name part fits 100 bytes and the prefix part fits 155 bytes.
+ * Returns null when no split works (PAX fallback).
+ */
+function splitUstarPath(path, pathBytes) {
+    for (let i = path.length - 1; i > 0; i--) {
+        if (path.charCodeAt(i) !== 0x2f)
+            continue;
+        const prefix = path.slice(0, i);
+        const name = path.slice(i + 1);
+        const prefixLen = new TextEncoder().encode(prefix).length;
+        const nameLen = pathBytes.length - prefixLen - 1;
+        if (name.length > 0 && nameLen <= 100 && prefixLen <= 155) {
+            return { prefix, name };
+        }
+    }
+    return null;
+}
+function writeHeader(name, prefix, size, typeflag) {
+    const block = new Uint8Array(BLOCK);
+    const ascii = (text, offset, length) => {
+        const bytes = new TextEncoder().encode(text);
+        block.set(bytes.subarray(0, Math.min(bytes.length, length)), offset);
+    };
+    ascii(name, 0, 100);
+    block.set(octal(0o644, 8), 100); // mode
+    block.set(octal(0, 8), 108); // uid
+    block.set(octal(0, 8), 116); // gid
+    block.set(octal(size, 12), 124); // size
+    block.set(octal(0, 12), 136); // mtime, fixed 0 for determinism
+    for (let i = 148; i < 156; i++)
+        block[i] = 0x20; // checksum spaces
+    block[156] = typeflag.charCodeAt(0);
+    ascii("ustar", 257, 6); // magic, NUL-terminated by the zeroed block
+    ascii("00", 263, 2); // version
+    if (prefix.length > 0)
+        ascii(prefix, 345, 155);
+    let sum = 0;
+    for (let i = 0; i < BLOCK; i++)
+        sum += block[i];
+    ascii(sum.toString(8).padStart(6, "0"), 148, 6);
+    block[154] = 0;
+    block[155] = 0x20;
+    return block;
+}
+function octal(value, length) {
+    const out = new Uint8Array(length);
+    const text = value.toString(8).padStart(length - 1, "0");
+    for (let i = 0; i < text.length; i++)
+        out[i] = text.charCodeAt(i);
+    out[length - 1] = 0;
+    return out;
+}
+/** PAX record "<len> path=<value>\n" where len counts the whole record. */
+function paxPathRecord(path) {
+    const baseBytes = new TextEncoder().encode(` path=${path}\n`);
+    let length = baseBytes.length + 1;
+    while (String(length).length + baseBytes.length !== length) {
+        length = String(length).length + baseBytes.length;
+    }
+    return concatParts([new TextEncoder().encode(String(length)), baseBytes]);
+}
+/** Truncate a string to at most n UTF-8 bytes (paths here are ASCII in practice). */
+function truncateBytes(text, n) {
+    const bytes = new TextEncoder().encode(text);
+    if (bytes.length <= n)
+        return text;
+    let end = n;
+    // Do not cut inside a multi-byte sequence.
+    while (end > 0 && (bytes[end] & 0xc0) === 0x80)
+        end--;
+    return new TextDecoder("utf-8").decode(bytes.subarray(0, end));
+}
+function padBlock(content) {
+    const padding = padOf(content.length);
+    if (padding === 0)
+        return content;
+    const out = new Uint8Array(content.length + padding);
+    out.set(content, 0);
+    return out;
+}
+function concatParts(parts) {
+    const total = parts.reduce((sum, part) => sum + part.length, 0);
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const part of parts) {
+        out.set(part, offset);
+        offset += part.length;
+    }
+    return out;
+}
+//# sourceMappingURL=tar.js.map

package/dist/tar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.js","sourceRoot":"","sources":["../src/tar.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,KAAK,GAAG,GAAG,CAAC;AAiClB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,cAAc,CACnC,MAAiC,EACjC,MAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,MAAM,EAAE,aAAa,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACxE,MAAM,qBAAqB,GAAG,MAAM,EAAE,qBAAqB,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACxF,IAAI,UAAU,GAA+B,IAAI,CAAC;IAClD,IAAI,SAAS,GAA+B,IAAI,CAAC;IACjD,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAY,EAAQ,EAAE;QACzD,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,QAAQ,IAAI,sBAAsB,IAAI,sBAAsB,qBAAqB,WAAW,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,8DAA8D;YAC9D,+DAA+D;YAC/D,OAAO;QACT,CAAC;QACD,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,gEAAgE;YAChE,0BAA0B;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,EAAE,UAAU,GAAG,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,aAAa,UAAU,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEjC,uEAAuE;QACvE,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACzC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;gBACrB,UAAU,GAAG,OAAO,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACtC,eAAe,GAAG,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,4DAA4D;YAC5D,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACvB,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC;QACxF,IAAI,eAAe,KAAK,IAAI;YAAE,IAAI,GAAG,eAAe,CAAC;QACrD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC;QAE3F,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACvB,MAAM,OAAO,GAAG,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;QACD,UAAU,GAAG,IAAI,CAAC;QAClB,eAAe,GAAG,IAAI,CAAC;QAEvB,MAAM,MAAM,GAAG,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,CAAC;QACrD,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAE1C,MAAM;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAC/B,QAAQ;YACR,IAAI;SACL,CAAC;QAEF,8DAA8D;QAC9D,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACnC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,KAAK,SAAS,CAAC,CAAC,aAAa,CAC3B,MAAmB,EACnB,KAA4B;IAE5B,OAAO,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAChC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAmB,EAAE,IAAY;IACtD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,SAAS,WAAW,CAAC,KAAiB;IACpC,cAAc,CAAC,KAAK,CAAC,CAAC;IAEtB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAW,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAErE,IAAI,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAEpD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED,sCAAsC;AACtC,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAc,EAAE,MAAc;IACnE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACpD,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACjC,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAE,KAAK,CAAC,CAAC,CAAY,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,qEAAqE;QACrE,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,GAAG,IAAI,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC;YAC1E,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC;IAC3D,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAK,KAAK,CAAC,CAAC,CAAY,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAgB;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,MAAM,GAAG,MAAM,CAAC;QACpB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAK,IAAI,CAAC,MAAM,CAAY,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC;QAC3E,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAK,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAY,KAAK,IAAI,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CACf,IAAgC,EAChC,OAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB;IAC1C,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,OAAO,GAAG,GAAG,CAAC,IAAK,KAAK,CAAC,GAAG,GAAG,CAAC,CAAY,KAAK,CAAC;QAAE,GAAG,EAAE,CAAC;IAC1D,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,WAAW;IACE,IAAI,CAA4B;IACzC,MAAM,GAAiB,EAAE,CAAC;IAC1B,IAAI,GAAG,CAAC,CAAC;IACT,SAAS,GAAG,CAAC,CAAC;IACd,KAAK,GAAG,KAAK,CAAC;IACd,WAAW,GAAG,CAAC,CAAC;IACP,aAAa,CAAS;IAEvC,YAAY,MAAiC,EAAE,aAAsB;QACnE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YACjC,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,yDAAyD,IAAI,CAAC,aAAa,QAAQ,CACpF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,CAAS;QACvB,OAAO,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,OAAO,IAAI,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;QACzB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAe,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAS;QAClB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,CAAS;QACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAe,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,IAAI,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,OAAO,CAAC,QAAgB,EAAE,KAAiB;QACjD,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC;QACtB,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;CACF;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;AAC1C,CAAC;AA0BD,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,KAAqB;IACnD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,SAAS,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,kEAAkE;gBAClE,+CAA+C;gBAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,aAAa,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;gBAChE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC3E,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,IAAY,EACZ,SAAqB;IAErB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,SAAS;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY,EAAE,QAAgB;IAC/E,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,MAAc,EAAQ,EAAE;QACnE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACpB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO;IACxC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM;IACnC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM;IACnC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO;IACxC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,iCAAiC;IAC/D,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,kBAAkB;IACnE,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,4CAA4C;IACpE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU;IAC/B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAW,CAAC;IAC1D,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAChD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,MAAc;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAC9D,IAAI,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IACpD,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,qFAAqF;AACrF,SAAS,aAAa,CAAC,IAAY,EAAE,CAAS;IAC5C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,2CAA2C;IAC3C,OAAO,GAAG,GAAG,CAAC,IAAI,CAAE,KAAK,CAAC,GAAG,CAAY,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,GAAG,EAAE,CAAC;IAClE,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,OAAmB;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAmB;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/temporal.d.ts

@@ -0,0 +1,55 @@
+/**
+ * bitgraph-audit temporal bounds
+ *
+ * Turns verified anchor witnesses into one-sided wall-clock bounds on
+ * segments of the observed record. Only anchors with a VERIFIED witness
+ * (witness.ts) contribute: an anchor without one still establishes causal
+ * order, but confers no wall-clock evidence. Nothing here reads a block
+ * number as a time, an unsigned metadata timestamp, or a manifest time.
+ *
+ * Bound semantics, stated once and enforced everywhere:
+ *
+ *   not-before (lower bound): a proof causally AFTER an anchor that
+ *   consumed the hash of a block published at time T was COMMITTED no
+ *   earlier than T. Grounded in block-hash unpredictability: the hash did
+ *   not exist before T and the covered proofs embed it through the chain.
+ *   This additionally assumes the anchored header is a genuine, publicly
+ *   published Ethereum block, which this offline audit cannot confirm: it
+ *   checks the header's structure and hash binding, not proof-of-work,
+ *   consensus, or chain membership. Every not-before claim states that
+ *   assumption. Sound along chain-link evidence, subject to it.
+ *
+ *   not-after (upper bound): a proof causally BEFORE an anchor existed
+ *   before that anchor's commit, and the consumed block proves the commit
+ *   came AT OR AFTER its timestamp T, not how promptly. Reading T as a
+ *   wall-clock ceiling therefore additionally assumes the anchor consumed
+ *   a recently published block. The deployed anchor service commits the
+ *   latest block on a short interval, but that is service behavior, not
+ *   proof; the assumption is stated on every not-after bound and on every
+ *   cross-epoch ordering derived from one. This is a deliberate
+ *   correction toward honesty over the looser "existed by T" phrasing:
+ *   the anchor mechanism is inbound-only (a block hash committed INTO the
+ *   chain), and an inbound commitment cannot cryptographically upper-bound
+ *   prior events.
+ *
+ * Evidence classes: a bound holds along a verified prevB64 hash-link path
+ * ("chain-link") or, weaker, by commit-counter ordering within the same
+ * partition ("counter-order", which relies on the authority's counter
+ * discipline rather than verifiable links). Every bound record states
+ * which class supports it. Bounds never cross partitions; epoch-level
+ * aggregation only collects the per-partition results.
+ *
+ * Bounds attach to segments, never to individual proofs, and a one-sided
+ * bound is never presented as an interval. Segments with no verified
+ * anchor evidence are ordered-but-unanchored. Cross-epoch ordering pairs
+ * are evidence, never divergence; overlapping or absent bounds mean
+ * concurrent-or-unordered.
+ *
+ * Run after verifyObservedProofs, reconstructChains, identifyAnchors, and
+ * verifyAnchorWitnesses. Populates EpochRecord.anchorBounds on the given
+ * reconstruction (the typed Phase 4c extension point) and returns the
+ * segment-level analysis.
+ */
+import type { AnchorIdentification, AnchorWitnessAnalysis, IngestResult, ReconstructionResult, TemporalAnalysis } from "./types.js";
+export declare function deriveTemporalBounds(ingest: IngestResult, reconstruction: ReconstructionResult, identification: AnchorIdentification, witnessAnalysis: AnchorWitnessAnalysis): TemporalAnalysis;
+//# sourceMappingURL=temporal.d.ts.map

package/dist/temporal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal.d.ts","sourceRoot":"","sources":["../src/temporal.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EACV,oBAAoB,EAEpB,qBAAqB,EAIrB,YAAY,EAEZ,oBAAoB,EAEpB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAOpB,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,YAAY,EACpB,cAAc,EAAE,oBAAoB,EACpC,cAAc,EAAE,oBAAoB,EACpC,eAAe,EAAE,qBAAqB,GACrC,gBAAgB,CAuClB"}