@nekzus/liop 2.4.0-alpha.21 → 2.4.0-alpha.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (67) hide show
  1. package/README.md +72 -36
  2. package/dist/bin/agent.js +8 -7
  3. package/dist/bin/agent.js.map +1 -1
  4. package/dist/bridge.d.ts +4 -3
  5. package/dist/bridge.js +3 -2
  6. package/dist/{chunk-FCFTYOAS.js → chunk-3WKFZQ34.js} +22 -12
  7. package/dist/chunk-3WKFZQ34.js.map +1 -0
  8. package/dist/{chunk-VRB5HUYU.js → chunk-AMSFSS2I.js} +14 -9
  9. package/dist/chunk-AMSFSS2I.js.map +1 -0
  10. package/dist/{chunk-VRDZ5IKE.js → chunk-E2CFIWD6.js} +15 -9
  11. package/dist/chunk-E2CFIWD6.js.map +1 -0
  12. package/dist/{chunk-EJ426URA.js → chunk-E7RSX476.js} +4 -4
  13. package/dist/{chunk-EJ426URA.js.map → chunk-E7RSX476.js.map} +1 -1
  14. package/dist/{chunk-UJFWPRDM.js → chunk-GFGSHQN5.js} +3 -3
  15. package/dist/{chunk-UJFWPRDM.js.map → chunk-GFGSHQN5.js.map} +1 -1
  16. package/dist/{chunk-XRDN232O.js → chunk-KB3HUVMD.js} +2 -2
  17. package/dist/chunk-KB3HUVMD.js.map +1 -0
  18. package/dist/chunk-OHMZZMMC.js +58 -0
  19. package/dist/chunk-OHMZZMMC.js.map +1 -0
  20. package/dist/chunk-P34HDRN5.js +213 -0
  21. package/dist/chunk-P34HDRN5.js.map +1 -0
  22. package/dist/{chunk-PAICJCKJ.js → chunk-Q3FKHJ3B.js} +17 -4
  23. package/dist/chunk-Q3FKHJ3B.js.map +1 -0
  24. package/dist/{chunk-5SWHE62F.js → chunk-T2QDHVUD.js} +71 -11
  25. package/dist/chunk-T2QDHVUD.js.map +1 -0
  26. package/dist/{chunk-2KSO3W4A.js → chunk-YLFNJQI2.js} +2 -2
  27. package/dist/{chunk-2KSO3W4A.js.map → chunk-YLFNJQI2.js.map} +1 -1
  28. package/dist/{chunk-2STZHJ24.js → chunk-ZRWNMP5L.js} +58 -7
  29. package/dist/chunk-ZRWNMP5L.js.map +1 -0
  30. package/dist/client.d.ts +5 -4
  31. package/dist/client.js +7 -6
  32. package/dist/gateway.d.ts +6 -5
  33. package/dist/gateway.js +7 -6
  34. package/dist/{hybrid-DWe1bMoV.d.ts → hybrid-B7EjCj3q.d.ts} +4 -4
  35. package/dist/{index-CdW8j8Bn.d.ts → index-D2P6Z_hP.d.ts} +25 -2
  36. package/dist/{index-BuEQtBHD.d.ts → index-DDwiS7tf.d.ts} +8 -4
  37. package/dist/index.d.ts +51 -9
  38. package/dist/index.js +12 -10
  39. package/dist/index.js.map +1 -1
  40. package/dist/mesh.d.ts +1 -1
  41. package/dist/mesh.js +1 -1
  42. package/dist/{node-B0b2vUFS.d.ts → node-Djzm6UYd.d.ts} +8 -0
  43. package/dist/protocol/liop_core.proto +22 -6
  44. package/dist/server.d.ts +4 -3
  45. package/dist/server.js +5 -4
  46. package/dist/{types-CzRSOlOo.d.ts → types-rxL19f0l.d.ts} +3 -0
  47. package/dist/types.d.ts +2 -1
  48. package/dist/types.js +2 -1
  49. package/dist/{verifier-COnid_dg.d.ts → verifier-DTn1LXDU.d.ts} +25 -3
  50. package/dist/verifier-UBJTZQSA.js +6 -0
  51. package/dist/{verifier-XFU7ZB2W.js.map → verifier-UBJTZQSA.js.map} +1 -1
  52. package/dist/workers/logic-execution.d.ts +6 -0
  53. package/dist/workers/logic-execution.js +56 -1
  54. package/dist/workers/logic-execution.js.map +1 -1
  55. package/dist/workers/zk-verifier.d.ts +9 -0
  56. package/dist/workers/zk-verifier.js +119 -47
  57. package/dist/workers/zk-verifier.js.map +1 -1
  58. package/dist/zk-CYImPsa6.d.ts +91 -0
  59. package/package.json +2 -1
  60. package/dist/chunk-2STZHJ24.js.map +0 -1
  61. package/dist/chunk-5SWHE62F.js.map +0 -1
  62. package/dist/chunk-FCFTYOAS.js.map +0 -1
  63. package/dist/chunk-PAICJCKJ.js.map +0 -1
  64. package/dist/chunk-VRB5HUYU.js.map +0 -1
  65. package/dist/chunk-VRDZ5IKE.js.map +0 -1
  66. package/dist/chunk-XRDN232O.js.map +0 -1
  67. package/dist/verifier-XFU7ZB2W.js +0 -6
@@ -873,5 +873,5 @@ var MeshNode = class _MeshNode {
873
873
  };
874
874
 
875
875
  export { MeshNode };
876
- //# sourceMappingURL=chunk-XRDN232O.js.map
877
- //# sourceMappingURL=chunk-XRDN232O.js.map
876
+ //# sourceMappingURL=chunk-KB3HUVMD.js.map
877
+ //# sourceMappingURL=chunk-KB3HUVMD.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/mesh/node.ts"],"names":["privateKey","resolve","raw"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiGA,IAAM,uBAAA,GAA0B;AAAA,EAC/B,iFAAA;AAAA,EACA,iFAAA;AAAA,EACA,iFAAA;AAAA,EACA;AACD,CAAA;AAEA,IAAM,sBAAA,GAAyB,sBAAA;AAC/B,IAAM,wBAAA,GAA2B,eAAA;AAQ1B,IAAM,QAAA,GAAN,MAAM,SAAA,CAAS;AAAA,EACb,IAAA,GAAsB,IAAA;AAAA,EACtB,MAAA;AAAA,EACA,wBAAA,uBAGA,GAAA,EAAI;AAAA,EACZ,OAAwB,8BAAA,GAAiC,GAAA;AAAA,EACzD,OAAwB,gCAAgC,CAAA,GAAI,GAAA;AAAA,EAC5D,OAAwB,kCAAA,GAAqC,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQrD,qBAAA,uBAAyC,GAAA,EAAI;AAAA;AAAA,EAG7C,YAAA,GAAe,KAAA;AAAA;AAAA,EAGf,gBAAA,GAAgD,IAAA;AAAA;AAAA,EAGhD,0BAAA,GAA6B,KAAA;AAAA;AAAA;AAAA,EAI7B,eAAA,GAA8B,IAAA;AAAA,EAEtC,WAAA,CAAY,MAAA,GAAyB,EAAC,EAAG;AACxC,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACb,eAAA,EAAiB,OAAO,eAAA,IAAmB;AAAA,QAC1C,uBAAA;AAAA,QACA;AAAA,OACD;AAAA,MACA,cAAA,EAAgB,MAAA,CAAO,cAAA,IAAkB,EAAC;AAAA,MAC1C,cAAc,MAAA,CAAO,YAAA;AAAA,MACrB,SAAA,EAAW,OAAO,SAAA,IAAa,KAAA;AAAA,MAC/B,gBAAgB,MAAA,CAAO,cAAA;AAAA,MACvB,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,UAAU,MAAA,CAAO;AAAA,KAClB;AAAA,EACD;AAAA,EAEQ,uBAAuB,SAAA,EAA4B;AAC1D,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,wBAAA,CAAyB,GAAA,CAAI,SAAS,CAAA;AACzD,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,IAAO,KAAA,CAAM,aAAA,EAAe,OAAO,KAAA;AACvC,IAAA,IACC,GAAA,GAAM,KAAA,CAAM,aAAA,GACZ,SAAA,CAAS,kCAAA,EACR;AACD,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,uCAAA,EAA0C,SAAS,CAAA,kBAAA,EAAqB,IAAA,CAAK,MAAM,KAAA,CAAM,aAAA,GAAgB,GAAA,IAAO,GAAI,CAAC,CAAA,YAAA;AAAA,OACtH;AACA,MAAA,KAAA,CAAM,aAAA,GAAgB,GAAA;AAAA,IACvB;AACA,IAAA,OAAO,IAAA;AAAA,EACR;AAAA,EAEQ,0BAA0B,SAAA,EAAyB;AAC1D,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,wBAAA,CAAyB,GAAA,CAAI,SAAS,CAAA;AACxD,IAAA,MAAM,QAAA,GAAA,CAAY,IAAA,EAAM,QAAA,IAAY,CAAA,IAAK,CAAA;AACzC,IAAA,MAAM,UAAU,IAAA,CAAK,GAAA;AAAA,MACpB,UAAS,8BAAA,GAAiC,CAAA,IAAK,KAAK,GAAA,CAAI,CAAA,EAAG,WAAW,CAAC,CAAA;AAAA,MACvE,SAAA,CAAS;AAAA,KACV;AACA,IAAA,IAAA,CAAK,wBAAA,CAAyB,IAAI,SAAA,EAAW;AAAA,MAC5C,QAAA;AAAA,MACA,eAAe,GAAA,GAAM,OAAA;AAAA,MACrB,aAAA,EAAe;AAAA,KACf,CAAA;AAAA,EACF;AAAA,EAEQ,yBAAyB,SAAA,EAAyB;AACzD,IAAA,IAAA,CAAK,wBAAA,CAAyB,OAAO,SAAS,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,oBAAA,GAAuB;AACpC,IAAA,IAAI;AACH,MAAA,MAAM,EAAE,eAAA,EAAiB,sBAAA,EAAuB,GAAK,MAAM;AAAA,QAC1D;AAAA;AAAA,OAED;AACA,MAAA,MAAM,EAAE,UAAA,EAAY,YAAA,EAAa,GAAI,MAAM,OAC1C,yBACD,CAAA;AAEA,MAAA,IAAI,IAAA,CAAK,OAAO,YAAA,EAAc;AAC7B,QAAA,MAAM,YAAA,GAAoB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA;AAC1D,QAAA,IAAI;AACH,UAAA,MAAM,IAAA,GAAO,MAAS,EAAA,CAAA,QAAA,CAAS,YAAA,EAAc,OAAO,CAAA;AACpD,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC5B,UAAA,MAAM,aAAA,GAAgB,YAAA,CAAa,IAAA,CAAK,OAAA,EAAS,QAAQ,CAAA;AACzD,UAAA,IAAI;AACH,YAAA,MAAMA,WAAAA,GAAa,uBAAuB,aAAa,CAAA;AACvD,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,+CAA+C,YAAY,CAAA;AAAA,aAC5D;AACA,YAAA,OAAO,EAAE,UAAA,EAAAA,WAAAA,EAAY,KAAA,EAAO,KAAA,EAAM;AAAA,UACnC,SAAS,UAAA,EAAqB;AAC7B,YAAA,GAAA,CAAI,KAAA;AAAA,cACH,CAAA,mCAAA,EAAsC,YAAY,CAAA,mDAAA,EACjD,UAAA,YAAsB,QACnB,UAAA,CAAW,OAAA,GACX,MAAA,CAAO,UAAU,CACrB,CAAA;AAAA,aACD;AAAA,UAED;AAAA,QACD,SAAS,KAAA,EAAgB;AACxB,UAAA,MAAM,CAAA,GAAI,KAAA;AACV,UAAA,IAAI,CAAA,CAAE,SAAS,QAAA,EAAU;AACxB,YAAA,GAAA,CAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,UAC7D;AAAA,QACD;AAAA,MACD;AAEA,MAAA,MAAM,UAAA,GAAa,MAAM,eAAA,CAAgB,SAAS,CAAA;AAClD,MAAA,OAAO,EAAE,UAAA,EAAY,KAAA,EAAO,IAAA,EAAK;AAAA,IAClC,SAAS,KAAA,EAAO;AACf,MAAA,GAAA,CAAI,KAAA;AAAA,QACH,sDAAsD,KAAK,CAAA,qCAAA;AAAA,OAC5D;AAIA,MAAA,IAAI;AACH,QAAA,MAAM,EAAE,eAAA,EAAgB,GAAK,MAAM;AAAA,UAClC;AAAA;AAAA,SAED;AACA,QAAA,MAAM,YAAA,GAAe,MAAM,eAAA,CAAgB,SAAS,CAAA;AACpD,QAAA,OAAO,EAAE,UAAA,EAAY,YAAA,EAAc,KAAA,EAAO,IAAA,EAAK;AAAA,MAChD,SAAS,aAAA,EAAe;AACvB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,aAAa,CAAA,CAAE,CAAA;AAAA,MAC5D;AAAA,IACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,aAAa,UAAA,EAAiB;AAC3C,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,YAAA,IAAgB,CAAC,KAAK,IAAA,EAAM;AAE7C,IAAA,IAAI;AACH,MAAA,MAAM,YAAA,GAAoB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA;AAC1D,MAAA,MAAM,EAAE,oBAAA,EAAqB,GAAK,MAAM;AAAA,QACvC;AAAA;AAAA,OAED;AACA,MAAA,MAAM,EAAE,QAAA,EAAU,UAAA,EAAW,GAAI,MAAM,OAAO,uBAAuB,CAAA;AAErE,MAAA,MAAM,aAAA,GAAgB,qBAAqB,UAAU,CAAA;AACrD,MAAA,MAAM,cAAA,GAAiB,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA;AAEzD,MAAA,MAAM,IAAA,GAAO;AAAA,QACZ,EAAA,EAAI,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS;AAAA,QAC9B,OAAA,EAAS;AAAA,OACV;AAEA,MAAA,MAAS,SAAW,IAAA,CAAA,OAAA,CAAQ,YAAY,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9D,MAAA,MAAS,aAAU,YAAA,EAAc,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAC,CAAA;AAC9D,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,kCAAA,EAAqC,YAAY,CAAA,CAAE,CAAA;AAAA,IAC7D,SAAS,KAAA,EAAO;AACf,MAAA,GAAA,CAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,KAAK,CAAA,CAAE,CAAA;AAAA,IAC7D;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,gBAAgB,UAAA,EAAkC;AAC/D,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,UAAU,CAAC,CAAA;AACrE,IAAA,OAAO,GAAA,CAAI,MAAA,CAAO,CAAA,EAAG,EAAA,EAAM,IAAI,CAAA;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,aAAA,GAA+B;AAC5C,IAAA,IACC,KAAK,YAAA,IACL,CAAC,KAAK,IAAA,IACN,IAAA,CAAK,sBAAsB,IAAA,KAAS,CAAA;AAEpC,MAAA;AAED,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,IAAA,IAAI;AAEH,MAAA,MAAM,IAAI,OAAA,CAAQ,CAACC,aAAY,UAAA,CAAWA,QAAAA,EAAS,GAAG,CAAC,CAAA;AAEvD,MAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AAEhB,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,0BAAA,EAA6B,IAAA,CAAK,qBAAA,CAAsB,IAAI,CAAA,yCAAA;AAAA,OAC7D;AAEA,MAAA,KAAA,MAAW,IAAA,IAAQ,KAAK,qBAAA,EAAuB;AAC9C,QAAA,IAAI;AACH,UAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,eAAA,CAAgB,IAAI,CAAA;AAC3C,UAAA,MAAM,IAAA,CAAK,IAAA,CAAK,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA;AAC1C,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAE,CAAA;AAAA,QAC7C,SAAS,EAAA,EAAI;AACZ,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,mCAAA,EAAsC,IAAI,CAAA,EAAA,EAAK,EAAE,CAAA,CAAE,CAAA;AAAA,QAC7D;AAAA,MACD;AAAA,IACD,CAAA,SAAE;AACD,MAAA,IAAA,CAAK,YAAA,GAAe,KAAA;AAAA,IACrB;AAAA,EACD;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC5B,IAAA,IAAI,KAAK,IAAA,EAAM;AACf,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,oBAAA,EAAqB;AAC/C,IAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAEhE,IAAA,MAAM,EAAE,UAAA,EAAY,KAAA,EAAM,GAAI,MAAA;AAC9B,IAAA,IAAA,CAAK,eAAA,GAAkB,UAAA;AAEvB,IAAA,IAAI,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,cAAA,IAAkB,EAAC;AAC/C,IAAA,IAAI,SAAA,CAAU,MAAA,KAAW,CAAA,IAAK,IAAA,CAAK,OAAO,SAAA,EAAW;AACpD,MAAA,SAAA,GAAY,uBAAA;AAAA,IACb;AAEA,IAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,MAAA,CAAO,aAAA,IAAiB,IAAA;AACnD,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,MAAA,CAAO,WAAA,IAAe,IAAA;AAC/C,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,MAAA,CAAO,WAAA,IAAe,IAAA;AAC/C,IAAA,MAAM,aAAa,IAAA,CAAK,MAAA,CAAO,UAAA,IAAc,CAAC,KAAK,MAAA,CAAO,SAAA;AAG1D,IAAA,MAAM,gBAAuB,EAAC;AAC9B,IAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACzB,MAAA,aAAA,CAAc,IAAA;AAAA,QACb,SAAA,CAAU;AAAA,UACT,IAAA,EAAM;AAAA,SACN;AAAA,OACF;AAAA,IACD;AACA,IAAA,IAAI,UAAA,EAAY;AACf,MAAA,aAAA,CAAc,IAAA,CAAK,MAAM,CAAA;AAAA,IAC1B;AAEA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,MAAA,CAAO,SAAA,GAC7B,iBAAA,GACA,qBAAA;AAGH,IAAA,MAAM,UAAA,GAAoB,CAAC,GAAA,EAAI,EAAG,YAAY,CAAA;AAC9C,IAAA,IAAI,WAAA,EAAa;AAChB,MAAA,UAAA,CAAW,IAAA,CAAK,uBAAuB,CAAA;AAAA,IACxC;AAGA,IAAA,MAAM,QAAA,GAAgC;AAAA,MACrC,UAAU,QAAA,EAAS;AAAA,MACnB,MAAM,IAAA,EAAK;AAAA,MACX,KAAK,MAAA,CAAO;AAAA,QACX,QAAA,EAAU,WAAA;AAAA,QACV,UAAA,EAAY,KAAA;AAAA;AAAA,QAEZ,uBAAA,EAAyB,IAAA;AAAA;AAAA,QAEzB,cAAA,EAAgB,CAAC,IAAA,KAAS;AAAA,OAC1B;AAAA,KACF;AAEA,IAAA,IAAI,aAAA,EAAe;AAClB,MAAA,QAAA,CAAS,UAAU,OAAA,EAAQ;AAAA,IAC5B;AACA,IAAA,IAAI,WAAA,EAAa;AAChB,MAAA,QAAA,CAAS,QAAQ,kBAAA,EAAmB;AAAA,IACrC;AACA,IAAA,IAAI,WAAA,EAAa;AAChB,MAAA,QAAA,CAAS,QAAQ,KAAA,EAAM;AAAA,IACxB;AAIA,IAAA,IAAI,mBAAA;AACJ,IAAA,IAAI,IAAA,CAAK,OAAO,QAAA,EAAU;AACzB,MAAA,MAAM,EAAE,YAAA,EAAa,GAAI,MAAM,OAAO,cAAc,CAAA;AACpD,MAAA,mBAAA,GAAsB,YAAA,CAAa;AAAA,QAClC,GAAA,EAAK,KAAK,MAAA,CAAO;AAAA,OACjB,CAAA;AACD,MAAA,GAAA,CAAI,IAAA;AAAA,QACH;AAAA,OACD;AAAA,IACD;AAEA,IAAA,IAAA,CAAK,IAAA,GAAO,MAAM,YAAA,CAAa;AAAA,MAC9B,UAAA;AAAA,MACA,SAAA,EAAW;AAAA,QACV,MAAA,EAAQ,KAAK,MAAA,CAAO;AAAA,OACrB;AAAA,MACA,UAAA;AAAA,MACA,oBAAA,EAAsB,CAAC,KAAA,EAAO,CAAA;AAAA,MAC9B,YAAA,EAAc,CAAC,KAAA,EAAO,CAAA;AAAA,MACtB,GAAI,mBAAA,GAAsB,EAAE,mBAAA,KAAwB,EAAC;AAAA;AAAA,MAErD,QAAA;AAAA,MACA,aAAA;AAAA;AAAA,QAEC,aAAA,CAAc,MAAA,GAAS,CAAA,GAAK,aAAA,GAAwB;AAAA;AAAA,KACrD,CAAA;AAGD,IAAA,IAAA,CAAK,IAAA,CAAK,gBAAA,CAAiB,gBAAA,EAAkB,CAAC,GAAA,KAAQ;AACrD,MAAA,MAAM,MAAA,GAAS,IAAI,MAAA,CAAO,EAAA;AAC1B,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,6BAAA,EAAgC,MAAA,CAAO,QAAA,EAAU,CAAA,CAAE,CAAA;AAE5D,MAAA,IAAI,KAAK,IAAA,EAAM;AAEd,QAAA,IAAI,UAAA,GAAkB,MAAA;AAGtB,QAAA,IAAI,KAAK,MAAA,CAAO,aAAA,IAAiB,IAAI,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAClE,UAAA,MAAM,aAAa,GAAA,CAAI,MAAA,CAAO,UAAA,CAC5B,GAAA,CAAI,CAAC,EAAA,KAAO;AAEZ,YAAA,MAAM,SAAS,IAAA,CAAK,MAAA,CAAO,aAAA,CAAe,EAAA,CAAG,UAAU,CAAA;AACvD,YAAA,OAAO,MAAA,GAAS,SAAA,CAAU,MAAM,CAAA,GAAI,IAAA;AAAA,UACrC,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,CAAA,KAAkC,MAAM,IAAI,CAAA;AAEtD,UAAA,MAAM,YAAY,UAAA,CAAW,IAAA;AAAA,YAC5B,CAAC,EAAA,KACA,EAAA,CAAG,QAAA,EAAS,CAAE,QAAA,CAAS,OAAO,CAAA,IAAK,CAAC,EAAA,CAAG,QAAA,EAAS,CAAE,SAAS,KAAK;AAAA,WAClE;AACA,UAAA,IAAI,WAAW,UAAA,GAAa,SAAA;AAAA,QAC7B;AAEA,QAAA,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,UAAU,CAAA,CAAE,MAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MAC1C;AAAA,IACD,CAAC,CAAA;AAED,IAAA,IAAA,CAAK,IAAA,CAAK,gBAAA,CAAiB,cAAA,EAAgB,CAAC,GAAA,KAAQ;AACnD,MAAA,MAAM,SAAS,GAAA,CAAI,MAAA;AACnB,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,+BAAA,EAAkC,MAAA,CAAO,QAAA,EAAU,CAAA,CAAE,CAAA;AAE9D,MAAA,IAAI,CAAC,KAAK,IAAA,EAAM;AAEhB,MAAA,MAAM,GAAA,GAAO,IAAA,CAAK,IAAA,CAAK,QAAA,CAAiB,GAAA;AACxC,MAAA,IAAI,KAAK,YAAA,EAAc;AACtB,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,mBAAA,EAAsB,MAAA,CAAO,QAAA,EAAU,CAAA,qBAAA;AAAA,SACxC;AACA,QAAA,GAAA,CAAI,aAAa,GAAA,CAAI,MAAM,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAiB;AACpD,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,oDAAoD,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,WACrG;AAAA,QACD,CAAC,CAAA;AAAA,MACF;AAIA,MAAA,IAAA,CAAK,aAAA,EAAc,CAAE,KAAA,CAAM,CAAC,GAAA,KAAiB;AAC5C,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,kCAAkC,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,SACnF;AAAA,MACD,CAAC,CAAA;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAM,IAAA,CAAK,KAAK,KAAA,EAAM;AAGtB,IAAA,MAAM,KAAK,gBAAA,EAAiB;AAG5B,IAAA,IAAA,CAAK,aAAA,EAAc;AAEnB,IAAA,IAAI,KAAA,IAAS,IAAA,CAAK,MAAA,CAAO,YAAA,EAAc;AACtC,MAAA,MAAM,IAAA,CAAK,aAAa,UAAU,CAAA;AAAA,IACnC;AAEA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,CAAA,kCAAA,EAAqC,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,UAAU,CAAA;AAAA,KACjE;AACA,IAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAc,CAAE,OAAA,CAAQ,CAAC,IAAA,KAAS;AAC3C,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,0BAAA,EAA6B,IAAA,CAAK,QAAA,EAAU,CAAA,CAAE,CAAA;AAAA,IACxD,CAAC,CAAA;AAGD,IAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACzB,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,uCAAA,EAA0C,UAAU,MAAM,CAAA,mBAAA;AAAA,OAC3D;AAEA,MAAA,MAAM,UAAA,GAAa,CAAA;AACnB,MAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC7B,QAAA,IAAI,OAAA,GAAU,KAAA;AACd,QAAA,IAAI,OAAA,GAAU,CAAA;AAEd,QAAA,OAAO,OAAA,IAAW,UAAA,IAAc,CAAC,OAAA,EAAS;AACzC,UAAA,IAAI;AACH,YAAA,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACpC,YAAA,GAAA,CAAI,IAAA,CAAK,CAAA,uCAAA,EAAqC,IAAI,CAAA,CAAE,CAAA;AACpD,YAAA,OAAA,GAAU,IAAA;AAAA,UACX,SAAS,EAAA,EAAI;AACZ,YAAA,MAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,MAAO,CAAA,KAAM,OAAA,GAAU,IAAI,GAAI,CAAA;AACtD,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,sCAAA,EAA+B,OAAO,CAAA,CAAA,EAAI,UAAU,OAAO,IAAI,CAAA,qBAAA,EAAwB,QAAQ,GAAI,CAAA,IAAA;AAAA,aACpG;AACA,YAAA,IAAI,UAAU,UAAA,EAAY;AACzB,cAAA,MAAM,IAAI,OAAA,CAAQ,CAACA,aAAY,UAAA,CAAWA,QAAAA,EAAS,KAAK,CAAC,CAAA;AAAA,YAC1D,CAAA,MAAO;AACN,cAAA,GAAA,CAAI,KAAA;AAAA,gBACH,CAAA,kDAAA,EAAgD,IAAI,CAAA,OAAA,EAAU,UAAU,CAAA,wBAAA;AAAA,eACzE;AAAA,YACD;AACA,YAAA,OAAA,EAAA;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAM,IAAA,GAAsB;AAC3B,IAAA,IAAI,KAAK,IAAA,EAAM;AACd,MAAA,MAAM,KAAK,gBAAA,EAAiB;AAC5B,MAAA,MAAM,IAAA,CAAK,KAAK,IAAA,EAAK;AACrB,MAAA,GAAA,CAAI,KAAK,0BAA0B,CAAA;AAAA,IACpC;AAAA,EACD;AAAA,EAEA,MAAc,gBAAA,GAAmB;AAChC,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,IAAkB,CAAC,KAAK,IAAA,EAAM;AAC/C,IAAA,IAAI;AACH,MAAA,MAAM,YAAA,GAAoB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,cAAc,CAAA;AAC5D,MAAA,MAAM,IAAA,GAAO,MAAS,EAAA,CAAA,QAAA,CAAS,YAAA,EAAc,OAAO,CAAA;AACpD,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,MAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,iBAAiB,CAAA;AAE3D,MAAA,IAAI,WAAA,GAAc,CAAA;AAClB,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACzB,QAAA,IAAI,CAAC,IAAA,CAAK,EAAA,IAAM,CAAC,KAAK,SAAA,EAAW;AACjC,QAAA,IAAI;AACH,UAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,IAAA,CAAK,EAAE,CAAA;AACvC,UAAA,MAAM,KAAA,GAAQ,KAAK,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,KAAc,SAAA,CAAU,CAAC,CAAC,CAAA;AAE5D,UAAA,MAAM,IAAA,CAAK,KAAK,SAAA,CAAU,IAAA,CAAK,QAAe,EAAE,UAAA,EAAY,OAAO,CAAA;AAInE,UAAA,MAAM,GAAA,GAAO,IAAA,CAAK,IAAA,CAAK,QAAA,CAAiB,GAAA;AACxC,UAAA,IAAI,KAAK,YAAA,EAAc;AACtB,YAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA,CAAE,MAAM,MAAM;AAAA,YAAC,CAAC,CAAA;AAAA,UAC5C;AACA,UAAA,WAAA,EAAA;AAAA,QACD,SAAS,EAAA,EAAI;AAAA,QAAC;AAAA,MACf;AACA,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,mBAAA,EAAsB,WAAW,CAAA,uBAAA,CAAyB,CAAA;AAAA,IACpE,SAAS,KAAA,EAAgB;AACxB,MAAA,MAAM,CAAA,GAAI,KAAA;AACV,MAAA,IAAI,CAAA,CAAE,SAAS,QAAA,EAAU;AACxB,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA,sCAAA,EAAyC,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,MAC/D;AAAA,IACD;AAAA,EACD;AAAA,EAEA,MAAc,gBAAA,GAAmB;AAChC,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,IAAkB,CAAC,KAAK,IAAA,EAAM;AAC/C,IAAA,IAAI;AACH,MAAA,MAAM,YAAA,GAAoB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,cAAc,CAAA;AAC5D,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,UAAU,GAAA,EAAI;AAC/C,MAAA,MAAM,cAAc,EAAC;AACrB,MAAA,KAAA,MAAW,QAAQ,QAAA,EAAU;AAC5B,QAAA,IAAI,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG;AAC9B,UAAA,WAAA,CAAY,IAAA,CAAK;AAAA,YAChB,EAAA,EAAI,IAAA,CAAK,EAAA,CAAG,QAAA,EAAS;AAAA;AAAA,YAErB,SAAA,EAAW,KAAK,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,KAAW,CAAA,CAAE,SAAA,CAAU,QAAA,EAAU;AAAA,WAChE,CAAA;AAAA,QACF;AAAA,MACD;AACA,MAAA,MAAS,SAAW,IAAA,CAAA,OAAA,CAAQ,YAAY,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9D,MAAA,MAAS,aAAU,YAAA,EAAc,IAAA,CAAK,UAAU,WAAA,EAAa,IAAA,EAAM,CAAC,CAAC,CAAA;AACrE,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,kBAAA,EAAqB,WAAA,CAAY,MAAM,CAAA,qBAAA,CAAuB,CAAA;AAAA,IACxE,SAAS,KAAA,EAAO;AACf,MAAA,GAAA,CAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,KAAK,CAAA,CAAE,CAAA;AAAA,IACnE;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,aAAA,GAAsB;AAC7B,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,0BAAA,EAA4B;AACnD,IAAA,IAAI,CAAC,KAAK,gBAAA,EAAkB;AAE5B,IAAA,IAAA,CAAK,0BAAA,GAA6B,IAAA;AAGlC,IAAA,IAAA,CAAK,kBAAA,CAAmB,wBAAwB,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AAChE,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,kDAAA,EAAqD,GAAG,CAAA,CAAE,CAAA;AAAA,IACpE,CAAC,CAAA;AAGD,IAAA,IAAA,CAAK,IAAA,CAAK,MAAA;AAAA,MACT,sBAAA;AAAA;AAAA,MAEA,OAAO,WAAgB,aAAA,KAAwB;AAE9C,QAAA,MAAM,MAAA,GAAS,WAAW,MAAA,IAAU,SAAA;AACpC,QAAA,MAAM,IAAA,GAAO,WAAW,UAAA,IAAc,aAAA;AACtC,QAAA,MAAM,UAAA,GAAa,IAAA,EAAM,UAAA,EAAY,QAAA,EAAS,IAAK,SAAA;AAEnD,QAAA,GAAA,CAAI,IAAA,CAAK,CAAA,2CAAA,EAA8C,UAAU,CAAA,CAAA,CAAG,CAAA;AAEpE,QAAA,IAAI;AACH,UAAA,MAAM,QAAA,GAAW,KAAK,gBAAA,IAAmB;AACzC,UAAA,IAAI,CAAC,QAAA,IAAY,CAAC,MAAA,EAAQ;AACzB,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,6DAAA;AAAA,aACD;AACA,YAAA,IAAI;AACH,cAAA,IAAI,OAAO,MAAA,EAAQ,KAAA,KAAU,UAAA,EAAY,MAAM,OAAO,KAAA,EAAM;AAAA,YAC7D,SAAS,EAAA,EAAI;AAAA,YAAC;AACd,YAAA;AAAA,UACD;AAEA,UAAA,MAAM,WAAA,GAAc,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA;AAC3C,UAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,WAAW,CAAA;AAGpD,UAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAChC,UAAA,SAAA,CAAU,aAAA,CAAc,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AACzC,UAAA,MAAM,UAAA,GAAa,OAAO,MAAA,CAAO,CAAC,WAAW,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC,CAAC,CAAA;AAElE,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,iCAAiC,UAAA,CAAW,MAAM,CAAA,WAAA,EAAc,UAAU,YAAY,QAAA,CAAS,KAAA,CAAM,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,WACnI;AAEA,UAAA,IAAI;AAEH,YAAA,IAAI,OAAO,MAAA,CAAO,IAAA,KAAS,UAAA,EAAY;AACtC,cAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AACvC,cAAA,IAAI,CAAC,QAAA,IAAY,OAAO,MAAA,CAAO,YAAY,UAAA,EAAY;AACtD,gBAAA,IAAI;AACH,kBAAA,MAAM,MAAA,CAAO,QAAQ,EAAE,MAAA,EAAQ,YAAY,OAAA,CAAQ,GAAI,GAAG,CAAA;AAAA,gBAC3D,SAAS,QAAA,EAAU;AAClB,kBAAA,GAAA,CAAI,IAAA;AAAA,oBACH,CAAA,oCAAA,EAAuC,UAAU,CAAA,EAAA,EAAK,QAAA,YAAoB,QAAQ,QAAA,CAAS,OAAA,GAAU,MAAA,CAAO,QAAQ,CAAC,CAAA;AAAA,mBACtH;AAAA,gBACD;AAAA,cACD;AAAA,YACD,CAAA,MAAO;AAEN,cAAA,MAAM,IAAA,CAAK,CAAC,UAAU,CAAA,EAAG,MAAM,CAAA;AAAA,YAChC;AACA,YAAA,GAAA,CAAI,IAAA,CAAK,CAAA,0CAAA,EAA6C,UAAU,CAAA,CAAE,CAAA;AAAA,UACnE,SAAS,QAAA,EAAmB;AAC3B,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,4CAAA,EAA+C,UAAU,CAAA,EAAA,EAAK,QAAA,YAAoB,QAAQ,QAAA,CAAS,OAAA,GAAU,MAAA,CAAO,QAAQ,CAAC,CAAA;AAAA,aAC9H;AAAA,UACD,CAAA,SAAE;AACD,YAAA,IAAI;AACH,cAAA,IAAI,OAAO,MAAA,CAAO,KAAA,KAAU,UAAA,EAAY,MAAM,OAAO,KAAA,EAAM;AAAA,YAC5D,SAAS,EAAA,EAAI;AAAA,YAEb;AAAA,UACD;AACA,UAAA;AAAA,QACD,SAAS,GAAA,EAAc;AACtB,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,sCAAA,EAAyC,UAAU,CAAA,EAAA,EAAK,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,WACzG;AAAA,QACD;AAAA,MACD;AAAA,KACD;AAEA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,6CAA6C,sBAAsB,CAAA;AAAA,KACpE;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,wBAAwB,QAAA,EAAoC;AAC3D,IAAA,IAAA,CAAK,gBAAA,GAAmB,QAAA;AACxB,IAAA,IAAI,KAAK,IAAA,EAAM;AACd,MAAA,IAAA,CAAK,aAAA,EAAc;AAAA,IACpB;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,SAAA,EAAiD;AACpE,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAI1D,IAAA,IAAI,SAAA,KAAc,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,UAAS,EAAG;AAC9C,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,+DAA+D,SAAS,CAAA;AAAA,OACzE;AACA,MAAA,OAAO,IAAA,CAAK,oBAAmB,IAAK,IAAA;AAAA,IACrC;AACA,IAAA,IAAI,IAAA,CAAK,sBAAA,CAAuB,SAAS,CAAA,EAAG;AAC3C,MAAA,OAAO,IAAA;AAAA,IACR;AAEA,IAAA,MAAM,YAAA,GAAe,CAAA;AACrB,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,YAAA,EAAc,OAAA,EAAA,EAAW;AACzD,MAAA,IAAI;AAIH,QAAA,IAAI,UAAA,GAAkB,IAAA;AACtB,QAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,cAAA,EAAe;AAC7C,QAAA,MAAM,aAAa,WAAA,CAAY,IAAA;AAAA,UAC9B,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,UAAS,KAAM;AAAA,SACpC;AAEA,QAAA,IAAI,UAAA,EAAY;AACf,UAAA,UAAA,GAAa,UAAA,CAAW,UAAA;AAAA,QACzB,CAAA,MAAO;AAEN,UAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,UAAU,GAAA,EAAI;AAC/C,UAAA,MAAM,MAAA,GAAS,SAAS,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,CAAG,QAAA,EAAS,KAAM,SAAS,CAAA;AACjE,UAAA,IAAI,MAAA,EAAQ;AACX,YAAA,UAAA,GAAa,MAAA,CAAO,EAAA;AAAA,UACrB,CAAA,MAAO;AAGN,YAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,iBAAiB,CAAA;AAC3D,YAAA,UAAA,GAAa,iBAAiB,SAAS,CAAA;AAAA,UACxC;AAAA,QACD;AAIA,QAAA,MAAM,kBAAA,GAAqB,UAAA;AAC3B,QAAA,IAAI,UAAA,GAAyB,kBAAA;AAC7B,QAAA,IAAI,IAAA,CAAK,MAAA,CAAO,aAAA,IAAiB,IAAA,CAAK,IAAA,EAAM;AAC3C,UAAA,MAAM,MAAA,GAAS,KAAK,MAAA,CAAO,aAAA;AAC3B,UAAA,MAAM,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,IAAI,UAAU,CAAA;AACrD,UAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG;AACtC,YAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CACtB,GAAA,CAAI,CAAC,EAAA,KAAO;AACZ,cAAA,MAAM,QAAA,GAAW,EAAA,CAAG,SAAA,CAAU,QAAA,EAAS;AACvC,cAAA,MAAM,MAAA,GAAS,OAAO,QAAQ,CAAA;AAC9B,cAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,cAAA,OAAO;AAAA,gBACN,aAAa,EAAA,CAAG,WAAA;AAAA,gBAChB,SAAA,EAAW,UAAU,MAAM;AAAA,eAC5B;AAAA,YACD,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,CAAA,KAAkC,MAAM,IAAI,CAAA;AAGtD,YAAA,MAAM,YAAY,UAAA,CAAW,IAAA;AAAA,cAC5B,CAAC,CAAA,KACA,CAAA,CAAE,SAAA,CAAU,UAAS,CAAE,QAAA,CAAS,OAAO,CAAA,IACvC,CAAC,CAAA,CAAE,SAAA,CAAU,QAAA,EAAS,CAAE,SAAS,KAAK;AAAA,aACxC;AACA,YAAA,IAAI,SAAA,EAAW;AACd,cAAA,UAAA,GAAa,SAAA,CAAU,SAAA;AACvB,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,CAAA,mDAAA,EAAiD,UAAA,CAAW,QAAA,EAAU,CAAA;AAAA,eACvE;AAAA,YACD;AAIA,YAAA,MAAO,IAAA,CAAK,IAAA,CAAa,SAAA,CAAU,IAAA,CAAK,UAAA,EAAY;AAAA,cACnD,YAAY,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,SAAS;AAAA,aAC7C,CAAA;AAAA,UACF;AAAA,QACD;AAIA,QAAA,IAAI,MAAA;AACJ,QAAA,IAAI;AAEH,UAAA,MAAM,MAAA,GAAc,MAAM,IAAA,CAAK,IAAA,CAC7B,YAAA,CAAa,YAAY,sBAAsB,CAAA,CAC/C,KAAA,CAAM,CAAC,CAAA,KAAe;AAEtB,YAAA,IAAI,MAAA,CAAO,CAAC,CAAA,CAAE,QAAA,CAAS,aAAa,CAAA,EAAG;AACtC,cAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,YACjD;AACA,YAAA,MAAM,CAAA;AAAA,UACP,CAAC,CAAA;AACF,UAAA,MAAA,GAAS,OAAO,MAAA,IAAU,MAAA;AAAA,QAC3B,SAAS,OAAA,EAAS;AACjB,UAAA,IAAI,YAAY,YAAA,EAAc;AAC7B,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,2BAAA,EAA8B,SAAS,CAAA,OAAA,EAAU,YAAY,cAAc,OAAO,CAAA;AAAA,aACnF;AACA,YAAA,OAAO,IAAA;AAAA,UACR;AACA,UAAA,MAAM,KAAA,GAAQ,MAAM,CAAA,IAAK,OAAA;AACzB,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,2BAAA,EAA8B,SAAS,CAAA,UAAA,EAAa,OAAO,kBAAkB,KAAK,CAAA,KAAA;AAAA,WACnF;AACA,UAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,KAAK,CAAC,CAAA;AAC7C,UAAA;AAAA,QACD;AAIA,QAAA,MAAM,MAAA,GACL,OAAO,MAAA,KACN,OAAO,OAAO,MAAA,CAAO,aAAa,CAAA,KAAM,UAAA,GAAa,MAAA,GAAS,IAAA,CAAA;AAEhE,QAAA,IAAI,CAAC,MAAA,EAAQ;AACZ,UAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,QAC5D;AAEA,QAAA,MAAM,SAAuB,EAAC;AAC9B,QAAA,IAAI,aAAA,GAAgB,CAAA;AACpB,QAAA,IAAI,qBAAA,GAAwB,CAAA,CAAA;AAG5B,QAAA,IAAI,iBAAA;AACJ,QAAA,MAAM,cAAA,GAAiB,IAAI,OAAA,CAAe,CAAC,GAAG,MAAA,KAAW;AACxD,UAAA,iBAAA,GAAoB,UAAA;AAAA,YACnB,MAAM,MAAA,CAAO,IAAI,KAAA,CAAM,8BAA8B,CAAC,CAAA;AAAA,YACtD;AAAA,WACD;AAAA,QACD,CAAC,CAAA;AAED,QAAA,IAAI;AACH,UAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,YAAA,CACjB,YAAY;AACZ,cAAA,WAAA,MAAiB,SAAS,MAAA,EAAQ;AACjC,gBAAA,IAAI,CAAC,KAAA,EAAO;AAIZ,gBAAA,MAAMC,IAAAA;AAAA;AAAA,kBAEL,OAAQ,KAAA,CAAc,QAAA,KAAa,UAAA,GAC/B,KAAA,CAAyC,QAAA,EAAS,GACnD,KAAA,YAAiB,UAAA,GAChB,KAAA,GACA,IAAI,UAAA,CAAW,CAAC;AAAA,iBAAA;AACrB,gBAAA,MAAM,QAAQ,MAAA,CAAO,IAAA;AAAA,kBACpBA,IAAAA,CAAI,MAAA;AAAA,kBACJA,IAAAA,CAAI,UAAA;AAAA,kBACJA,IAAAA,CAAI;AAAA,iBACL;AAEA,gBAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACrB,kBAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AACjB,kBAAA,aAAA,IAAiB,KAAA,CAAM,MAAA;AAGvB,kBAAA,IAAI,qBAAA,GAAwB,CAAA,IAAK,aAAA,IAAiB,CAAA,EAAG;AACpD,oBAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AACnC,oBAAA,qBAAA,GAAwB,MAAA,CAAO,aAAa,CAAC,CAAA;AAAA,kBAC9C;AAGA,kBAAA,IACC,qBAAA,IAAyB,CAAA,IACzB,aAAA,IAAiB,CAAA,GAAI,qBAAA,EACpB;AACD,oBAAA;AAAA,kBACD;AAAA,gBACD;AAAA,cACD;AAAA,YACD,CAAA,GAAG;AAAA,YACH;AAAA,WACA,CAAA;AAAA,QACF,SAAS,KAAA,EAAgB;AACxB,UAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,MAAM,KAAA;AAC/B,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,uCAAA,EAA0C,SAAS,CAAA,EAAA,EAAK,KAAA,YAAiB,QAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,WAC/G;AAAA,QACD,CAAA,SAAE;AACD,UAAA,IAAI,iBAAA,eAAgC,iBAAiB,CAAA;AAAA,QACtD;AAEA,QAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAChC,QAAA,IAAI,GAAA,CAAI,SAAS,CAAA,EAAG;AACnB,UAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,QAC9D;AAGA,QAAA,MAAM,WAAA,GAAc,GAAA,CAAI,YAAA,CAAa,CAAC,CAAA;AACtC,QAAA,MAAM,OAAA,GAAU,IAAI,QAAA,CAAS,CAAA,EAAG,IAAI,WAAW,CAAA,CAAE,SAAS,OAAO,CAAA;AACjE,QAAA,MAAM,QAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAEjD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,mCAAA,EAAsC,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,MAAM,MAAM,CAAA,MAAA;AAAA,SAC1E;AACA,QAAA,IAAA,CAAK,yBAAyB,SAAS,CAAA;AAEvC,QAAA,OAAO,QAAA;AAAA,MACR,SAAS,GAAA,EAAc;AACtB,QAAA,IAAI,YAAY,YAAA,EAAc;AAC7B,UAAA,IAAA,CAAK,0BAA0B,SAAS,CAAA;AACxC,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,0CAAA,EAA6C,SAAS,CAAA,OAAA,EAAU,YAAY,CAAA,WAAA,EAAc,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,WAC3I;AACA,UAAA,OAAO,IAAA;AAAA,QACR;AACA,QAAA,MAAM,KAAA,GAAQ,MAAM,CAAA,IAAK,OAAA;AACzB,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,4BAAA,EAA+B,SAAS,CAAA,UAAA,EAAa,OAAO,CAAA,GAAA,EAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,iBAAiB,KAAK,CAAA,KAAA;AAAA,SACzI;AACA,QAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,KAAK,CAAC,CAAA;AAAA,MAC9C;AAAA,IACD;AACA,IAAA,OAAO,IAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,yBAAA,GAA+C;AACpD,IAAA,OAAO,IAAA,CAAK,cAAc,wBAAwB,CAAA;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAAA,GAAkC;AACvC,IAAA,MAAM,IAAA,CAAK,mBAAmB,wBAAwB,CAAA;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,mBAAA,GAA8B;AAC7B,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAO,CAAA;AAEvB,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,GAAA,EAAK,cAAc,IAAA,IAAQ,CAAA;AAAA,EACtD;AAAA,EAEA,SAAA,GAAoB;AACnB,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAC1D,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS;AAAA,EAClC;AAAA,EAEA,MAAM,KAAK,IAAA,EAAuC;AACjD,IAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AAC1B,MAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,IAC3D;AAEA,IAAA,OAAO,OAAO,IAAA,CAAK,MAAM,KAAK,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,EACzD;AAAA,EAEA,aAAA,GAA0B;AACzB,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAC1D,IAAA,OAAO,IAAA,CAAK,KAAK,aAAA,EAAc,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,mBAAmB,IAAA,EAA6B;AACrD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAG1D,IAAA,IAAA,CAAK,qBAAA,CAAsB,IAAI,IAAI,CAAA;AAEnC,IAAA,IAAI;AACH,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,eAAA,CAAgB,IAAI,CAAA;AAC3C,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,mCAAA,EAAsC,IAAI,CAAA,OAAA,EAAU,GAAA,CAAI,UAAU,CAAA,CAAA;AAAA,OACnE;AAGA,MAAA,MAAM,IAAA,CAAK,IAAA,CAAK,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA;AAC1C,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,+CAAA,EAAkD,IAAI,CAAA,CAAE,CAAA;AAGjE,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS;AACzC,MAAA,WAAA,MAAiB,QAAQ,IAAA,CAAK,IAAA,CAAK,cAAA,CAAe,aAAA,CAAc,GAAG,CAAA,EAAG;AACrE,QAAA,IAAI,IAAA,CAAK,EAAA,CAAG,QAAA,EAAS,KAAM,MAAA,EAAQ;AAClC,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,4DAA4D,IAAI,CAAA;AAAA,WACjE;AACA,UAAA;AAAA,QACD;AAAA,MACD;AAAA,IACD,SAAS,KAAA,EAAO;AACf,MAAA,GAAA,CAAI,KAAA,CAAM,CAAA,2CAAA,EAA8C,KAAK,CAAA,CAAE,CAAA;AAAA,IAChE;AAAA,EACD;AAAA,EAEA,MAAM,cAAc,IAAA,EAAiC;AACpD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAC1D,IAAA,MAAM,YAAsB,EAAC;AAC7B,IAAA,IAAI;AACH,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,eAAA,CAAgB,IAAI,CAAA;AAC3C,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,6BAAA,EAAgC,IAAI,CAAA,OAAA,EAAU,GAAA,CAAI,UAAU,CAAA,IAAA;AAAA,OAC7D;AAEA,MAAA,IAAI,QAAA,GAAW,KAAA;AAGf,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,cAAA,MAAoB,MAAA,IAAU,CAAA;AAC5D,MAAA,MAAM,aAAA,GAAgB,WAAA,GAAc,CAAA,GAAI,IAAA,GAAO,GAAA;AAC/C,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,iEAAA,EAAoE,aAAa,CAAA,wBAAA,EAA2B,WAAW,CAAA,CAAA;AAAA,OACxH;AAGA,MAAA,MAAM,QAAA,GAAW,KAAK,IAAA,CAAK,cAAA,CACzB,cAAc,GAAG,CAAA,CACjB,MAAA,CAAO,aAAa,CAAA,EAAE;AACxB,MAAA,IAAI,MAAA,GAAS,KAAA;AAEb,MAAA,OAAO,CAAC,MAAA,EAAQ;AACf,QAAA,MAAM,WAAA,GAAc,SAAS,IAAA,EAAK;AAClC,QAAA,MAAM,iBAAiB,IAAI,OAAA;AAAA,UAA2B,CAACD,QAAAA,KACtD,UAAA,CAAW,MAAMA,QAAAA,CAAQ,EAAE,OAAA,EAAS,IAAA,EAAM,CAAA,EAAG,aAAa;AAAA,SAC3D;AAEA,QAAA,IAAI;AACH,UAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,KAAK,CAAC,WAAA,EAAa,cAAc,CAAC,CAAA;AAE/D,UAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,aAAa,MAAA,EAAQ;AAChE,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,sEAAA;AAAA,aACD;AACA,YAAA,IAAI,OAAO,QAAA,CAAS,MAAA,KAAW,UAAA,EAAY;AAE1C,cAAA,QAAA,CAAS,MAAA,EAAO,CAAE,KAAA,CAAM,MAAM;AAAA,cAAC,CAAC,CAAA;AAAA,YACjC;AACA,YAAA,MAAA,GAAS,IAAA;AACT,YAAA;AAAA,UACD;AAGA,UAAA,MAAM,QAAA,GAAW,MAAA;AACjB,UAAA,IAAI,SAAS,IAAA,EAAM;AAClB,YAAA,MAAA,GAAS,IAAA;AACT,YAAA;AAAA,UACD;AAEA,UAAA,QAAA,GAAW,IAAA;AACX,UAAA,MAAM,OAAO,QAAA,CAAS,KAAA;AACtB,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,EAAA,CAAG,QAAA,EAAS;AAChC,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,4BAAA,EAA+B,MAAM,CAAA,CAAE,CAAA;AAChD,UAAA,IAAI,CAAC,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA,EAAG;AAChC,YAAA,SAAA,CAAU,KAAK,MAAM,CAAA;AAAA,UACtB;AAAA,QACD,SAAS,CAAA,EAAY;AACpB,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,oCAAoC,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,WAC/E;AACA,UAAA,MAAA,GAAS,IAAA;AACT,UAAA;AAAA,QACD;AAAA,MACD;AAEA,MAAA,IAAI,CAAC,QAAA,EAAU;AACd,QAAA,MAAM,QAAA,GAAW,KAAK,IAAA,CAAK,QAAA;AAG3B,QAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,EAAK,YAAA,EAAc,IAAA,IAAQ,CAAA;AACpD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,2BAAA,EAA8B,IAAI,CAAA,4CAAA,EAA+C,OAAO,CAAA,CAAA;AAAA,SACzF;AAAA,MACD;AAIA,MAAA,IAAI,IAAA,CAAK,qBAAA,CAAsB,GAAA,CAAI,IAAI,CAAA,EAAG;AACzC,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS;AACzC,QAAA,IAAI,CAAC,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA,EAAG;AAChC,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,kCAAA,EAAqC,MAAM,CAAA,iBAAA,EAAoB,IAAI,CAAA;AAAA,WACpE;AACA,UAAA,SAAA,CAAU,KAAK,MAAM,CAAA;AAAA,QACtB;AAAA,MACD;AAAA,IACD,SAAS,KAAA,EAAgB;AACxB,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,wCAAA,EAA2C,IAAI,CAAA,EAAA,EAAK,KAAA,YAAiB,QAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,OAC3G;AAAA,IACD;AAEA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,CAAA,2BAAA,EAA8B,IAAI,CAAA,iBAAA,EAAoB,SAAA,CAAU,MAAM,CAAA,WAAA;AAAA,KACvE;AACA,IAAA,OAAO,SAAA;AAAA,EACR;AAAA,EAEA,MAAM,YAAY,SAAA,EAAsC;AACvD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAC1D,IAAA,IAAI;AAEH,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,cAAA,EAAe;AAC7C,MAAA,KAAA,MAAW,QAAQ,WAAA,EAAa;AAC/B,QAAA,IAAI,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS,KAAM,SAAA,EAAW;AAC7C,UAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS;AAC5C,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,0BAAA,EAA6B,SAAS,CAAA,wBAAA,EAA2B,UAAU,CAAA;AAAA,WAC5E;AACA,UAAA,OAAO,CAAC,UAAU,CAAA;AAAA,QACnB;AAAA,MACD;AAGA,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,UAAU,GAAA,EAAI;AAC/C,MAAA,KAAA,MAAW,QAAQ,QAAA,EAAU;AAC5B,QAAA,IAAI,IAAA,CAAK,GAAG,QAAA,EAAS,KAAM,aAAa,IAAA,CAAK,SAAA,CAAU,SAAS,CAAA,EAAG;AAElE,UAAA,MAAM,KAAA,GAAQ,KAAK,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,KAAW,CAAA,CAAE,SAAA,CAAU,QAAA,EAAU,CAAA;AACnE,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,0BAAA,EAA6B,SAAS,CAAA,gBAAA,EAAmB,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,WAClE;AACA,UAAA,OAAO,KAAA;AAAA,QACR;AAAA,MACD;AAEA,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,oBAAoB,SAAS,CAAA,sCAAA;AAAA,OAC9B;AAAA,IACD,SAAS,KAAA,EAAO;AACf,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,mCAAA,EAAsC,SAAS,CAAA,EAAA,EAAK,KAAK,CAAA,CAAE,CAAA;AAAA,IACrE;AACA,IAAA,OAAO,EAAC;AAAA,EACT;AAAA,EAEO,SAAA,GAAqB;AAC3B,IAAA,OAAO,CAAC,CAAC,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,KAAK,MAAA,KAAW,SAAA;AAAA,EAC5C;AAAA,EAEO,QAAA,GAAqB;AAC3B,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAO,EAAC;AACxB,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,cAAA,EAAe,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,QAAA,EAAU,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKO,gBAAA,GAA4B;AAClC,IAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,QAAQ,CAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKO,WAAA,GAAsC;AAC5C,IAAA,OAAO,KAAK,MAAA,CAAO,QAAA;AAAA,EACpB;AACD","file":"chunk-KB3HUVMD.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport * as fs from \"node:fs/promises\";\nimport * as path from \"node:path\";\nimport { noise } from \"@chainsafe/libp2p-noise\";\nimport { yamux } from \"@chainsafe/libp2p-yamux\";\nimport { autoNAT } from \"@libp2p/autonat\";\nimport { bootstrap } from \"@libp2p/bootstrap\";\nimport {\n\tcircuitRelayServer,\n\tcircuitRelayTransport,\n} from \"@libp2p/circuit-relay-v2\";\nimport { dcutr } from \"@libp2p/dcutr\";\nimport { identify } from \"@libp2p/identify\";\nimport { kadDHT } from \"@libp2p/kad-dht\";\nimport { mdns } from \"@libp2p/mdns\";\nimport { ping } from \"@libp2p/ping\";\nimport { tcp } from \"@libp2p/tcp\";\nimport { webSockets } from \"@libp2p/websockets\";\nimport { multiaddr } from \"@multiformats/multiaddr\";\nimport { pipe } from \"it-pipe\";\nimport type { Libp2p } from \"libp2p\";\nimport { createLibp2p } from \"libp2p\";\nimport { CID } from \"multiformats/cid\";\nimport { sha256 } from \"multiformats/hashes/sha2\";\nimport { log } from \"../utils/logger.js\";\n// import { pEvent } from \"p-event\"; // Disabled to avoid ESM conflicts in tests\n\n/**\n * Manifest describing a node's capabilities in the LIOP Mesh.\n * Exchanged via the /liop/manifest/1.0.0 protocol stream.\n */\nexport interface LiopManifest {\n\tpeerId: string;\n\tgrpcPort: number;\n\ttools: Array<{\n\t\tname: string;\n\t\tdescription?: string;\n\t\tinputSchema?: Record<string, unknown>;\n\t\tzkMode?: \"none\" | \"optimistic\" | \"required\";\n\t\tguestImageId?: string;\n\t\tcircuitName?: string;\n\t\tvkey?: Record<string, unknown>;\n\t}>;\n\tresources: Array<{\n\t\tname: string;\n\t\turi: string;\n\t\tdescription?: string;\n\t\tmimeType?: string;\n\t\ttext?: string;\n\t}>;\n\tserverInfo: { name: string; version: string };\n\ttaxonomy?: {\n\t\tdomain: string;\n\t\tclearanceTier: number;\n\t\texecutionTypes: string[];\n\t};\n\tauthRequired?: boolean;\n\t/** Canonical slug for deterministic token resolution. Agents resolve LIOP_TOKEN_<tokenSlug>. Must match /^[A-Z][A-Z0-9_]*$/. */\n\ttokenSlug?: string;\n\t/** Expected guest image identifier hash for sovereign enclaves (Hex) */\n\tguestImageId?: string;\n\t/** Static verification key mappings for fast-path analytical circuits */\n\tvkeys?: Record<string, unknown>;\n\t/** ML-DSA-65 (FIPS 204) Post-Quantum Digital Signature for Manifest Attestation (Base64) */\n\tpqcSignature?: string;\n\t/** ML-DSA-65 (FIPS 204) Post-Quantum Public Key (Base64) */\n\tpqcPublicKey?: string;\n}\n\nexport interface MeshNodeConfig {\n\tlistenAddresses?: string[];\n\tbootstrapNodes?: string[];\n\tidentityPath?: string;\n\tenableWAN?: boolean;\n\tdhtStoragePath?: string;\n\t/** Optional function to translate multiaddrs (e.g. for Docker NAT traversal). Return null to drop an address. */\n\taddressMapper?: (addr: string) => string | null;\n\t/** Enable AutoNAT reachability detection (default: true) */\n\tenableAutoNAT?: boolean;\n\t/** Enable Circuit Relay v2 transport & server for NAT traversal (default: true) */\n\tenableRelay?: boolean;\n\t/** Enable DCUtR decentralized hole punching (default: true) */\n\tenableDcutr?: boolean;\n\t/** Enable mDNS peer discovery for local networks (default: false in WAN, true in LAN) */\n\tenableMdns?: boolean;\n\t/**\n\t * Pre-Shared Key for libp2p Private Network isolation (Tier 1 Enclave Hardening).\n\t * When provided, the node will reject ALL connections from peers that do not\n\t * possess the identical 95-byte PSK at the transport framing layer,\n\t * BEFORE the Noise XX handshake is attempted.\n\t * @see https://github.com/libp2p/specs/blob/master/pnet/Private-Networks-PSK-V1.md\n\t */\n\tswarmKey?: Uint8Array;\n}\n\nconst DEFAULT_BOOTSTRAP_NODES = [\n\t\"/dnsaddr/bootstrap.libp2p.io/p2p/QmNnooDuVkcruPhcoXdia1vAHm1qrCEYWvmqVkMBjeEbFR\",\n\t\"/dnsaddr/bootstrap.libp2p.io/p2p/QmQCU2EcMqAqQPR2i9bChDtGNJchTbq5TbXJJ16u19uLTa\",\n\t\"/dnsaddr/bootstrap.libp2p.io/p2p/QmbLHAnMoJPWSCR5Zhtx6BHJX9KiKNN6tpvbUcqanj75Nb\",\n\t\"/dnsaddr/bootstrap.libp2p.io/p2p/QmcZf59bWwK5XFi76CZX8cbJ4BhTzzA3gU1ZjWZcYW7dwt\",\n];\n\nconst LIOP_MANIFEST_PROTOCOL = \"/liop/manifest/1.0.0\";\nconst LIOP_MANIFEST_CAPABILITY = \"liop:manifest\";\n\n/**\n * P2P Mesh Node backed by libp2p + Kademlia DHT.\n *\n * Provides capability advertisement via CID-based content routing\n * and decentralized peer discovery.\n */\nexport class MeshNode {\n\tprivate node: Libp2p | null = null;\n\tprivate config: MeshNodeConfig;\n\tprivate manifestDialFailureState: Map<\n\t\tstring,\n\t\t{ failures: number; cooldownUntil: number; lastSkipLogAt: number }\n\t> = new Map();\n\tprivate static readonly MANIFEST_DIAL_BASE_COOLDOWN_MS = 10_000;\n\tprivate static readonly MANIFEST_DIAL_MAX_COOLDOWN_MS = 2 * 60_000;\n\tprivate static readonly MANIFEST_DIAL_SKIP_LOG_THROTTLE_MS = 30_000;\n\n\t/**\n\t * Buffer of capability hashes that have been announced.\n\t * Used to re-announce capabilities when new peers connect\n\t * (critical for small / isolated clusters where the initial\n\t * provide() finds zero peers in the routing table).\n\t */\n\tprivate announcedCapabilities: Set<string> = new Set();\n\n\t/** Guards against concurrent re-announcement storms. */\n\tprivate reannouncing = false;\n\n\t/** Callback that returns the local node's manifest on request. */\n\tprivate manifestProvider: (() => LiopManifest) | null = null;\n\n\t/** Flag to ensure the manifest protocol is only registered once. */\n\tprivate manifestProtocolRegistered = false;\n\n\t/** Local Ed25519 Private Key for protocol signatures */\n\t// biome-ignore lint/suspicious/noExplicitAny: libp2p keys type\n\tprivate localPrivateKey: any | null = null;\n\n\tconstructor(config: MeshNodeConfig = {}) {\n\t\tthis.config = {\n\t\t\tlistenAddresses: config.listenAddresses || [\n\t\t\t\t\"/ip4/0.0.0.0/tcp/0/ws\",\n\t\t\t\t\"/ip4/0.0.0.0/tcp/0\",\n\t\t\t],\n\t\t\tbootstrapNodes: config.bootstrapNodes || [],\n\t\t\tidentityPath: config.identityPath,\n\t\t\tenableWAN: config.enableWAN ?? false,\n\t\t\tdhtStoragePath: config.dhtStoragePath,\n\t\t\taddressMapper: config.addressMapper,\n\t\t\tswarmKey: config.swarmKey,\n\t\t};\n\t}\n\n\tprivate shouldSkipManifestDial(peerIdStr: string): boolean {\n\t\tconst state = this.manifestDialFailureState.get(peerIdStr);\n\t\tif (!state) return false;\n\t\tconst now = Date.now();\n\t\tif (now >= state.cooldownUntil) return false;\n\t\tif (\n\t\t\tnow - state.lastSkipLogAt >\n\t\t\tMeshNode.MANIFEST_DIAL_SKIP_LOG_THROTTLE_MS\n\t\t) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Skipping manifest dial for ${peerIdStr} during cooldown (${Math.ceil((state.cooldownUntil - now) / 1000)}s remaining)`,\n\t\t\t);\n\t\t\tstate.lastSkipLogAt = now;\n\t\t}\n\t\treturn true;\n\t}\n\n\tprivate recordManifestDialFailure(peerIdStr: string): void {\n\t\tconst now = Date.now();\n\t\tconst prev = this.manifestDialFailureState.get(peerIdStr);\n\t\tconst failures = (prev?.failures || 0) + 1;\n\t\tconst backoff = Math.min(\n\t\t\tMeshNode.MANIFEST_DIAL_BASE_COOLDOWN_MS * 2 ** Math.max(0, failures - 1),\n\t\t\tMeshNode.MANIFEST_DIAL_MAX_COOLDOWN_MS,\n\t\t);\n\t\tthis.manifestDialFailureState.set(peerIdStr, {\n\t\t\tfailures,\n\t\t\tcooldownUntil: now + backoff,\n\t\t\tlastSkipLogAt: 0,\n\t\t});\n\t}\n\n\tprivate clearManifestDialFailure(peerIdStr: string): void {\n\t\tthis.manifestDialFailureState.delete(peerIdStr);\n\t}\n\n\t/**\n\t * Loads a persistent identity from disk or generates a new Ed25519 keypair.\n\t * Uses privateKeyToProtobuf/privateKeyFromProtobuf (libp2p v3.x official API).\n\t */\n\tprivate async loadOrCreateIdentity() {\n\t\ttry {\n\t\t\tconst { generateKeyPair, privateKeyFromProtobuf } = (await import(\n\t\t\t\t\"@libp2p/crypto/keys\"\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: <libp2p type workaround>\n\t\t\t)) as any;\n\t\t\tconst { fromString: u8FromString } = await import(\n\t\t\t\t\"uint8arrays/from-string\"\n\t\t\t);\n\n\t\t\tif (this.config.identityPath) {\n\t\t\t\tconst absolutePath = path.resolve(this.config.identityPath);\n\t\t\t\ttry {\n\t\t\t\t\tconst data = await fs.readFile(absolutePath, \"utf-8\");\n\t\t\t\t\tconst json = JSON.parse(data);\n\t\t\t\t\tconst protobufBytes = u8FromString(json.privKey, \"base64\");\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst privateKey = privateKeyFromProtobuf(protobufBytes);\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Mesh] Loaded persistent identity from ${absolutePath}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn { privateKey, isNew: false };\n\t\t\t\t\t} catch (parseError: unknown) {\n\t\t\t\t\t\tlog.error(\n\t\t\t\t\t\t\t`[LIOP-Mesh] Persistent identity at ${absolutePath} is invalid or corrupt. Generating new one. Error: ${\n\t\t\t\t\t\t\t\tparseError instanceof Error\n\t\t\t\t\t\t\t\t\t? parseError.message\n\t\t\t\t\t\t\t\t\t: String(parseError)\n\t\t\t\t\t\t\t}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\t// Fall through to generate new key\n\t\t\t\t\t}\n\t\t\t\t} catch (error: unknown) {\n\t\t\t\t\tconst e = error as Error & { code?: string };\n\t\t\t\t\tif (e.code !== \"ENOENT\") {\n\t\t\t\t\t\tlog.error(`[LIOP-Mesh] Error loading identity: ${e.message}`);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst privateKey = await generateKeyPair(\"Ed25519\");\n\t\t\treturn { privateKey, isNew: true };\n\t\t} catch (error) {\n\t\t\tlog.error(\n\t\t\t\t`[LIOP-Mesh] Critical error in identity management: ${error}. Falling back to ephemeral identity.`,\n\t\t\t);\n\n\t\t\t// EPOCH FALLBACK: In extreme cases (corrupt env), use a volatile in-memory identity\n\t\t\t// to allow the node to start and serve traffic.\n\t\t\ttry {\n\t\t\t\tconst { generateKeyPair } = (await import(\n\t\t\t\t\t\"@libp2p/crypto/keys\"\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: libp2p ESM dynamic import type workaround\n\t\t\t\t)) as any;\n\t\t\t\tconst ephemeralKey = await generateKeyPair(\"Ed25519\");\n\t\t\t\treturn { privateKey: ephemeralKey, isNew: true };\n\t\t\t} catch (fallbackError) {\n\t\t\t\tthrow new Error(`Identity system failure: ${fallbackError}`);\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Persists the private key to disk using protobuf serialization (libp2p v3.x).\n\t */\n\t// biome-ignore lint/suspicious/noExplicitAny: Libp2p private key type is complex for Alpha\n\tprivate async saveIdentity(privateKey: any) {\n\t\tif (!this.config.identityPath || !this.node) return;\n\n\t\ttry {\n\t\t\tconst absolutePath = path.resolve(this.config.identityPath);\n\t\t\tconst { privateKeyToProtobuf } = (await import(\n\t\t\t\t\"@libp2p/crypto/keys\"\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: <libp2p type workaround>\n\t\t\t)) as any;\n\t\t\tconst { toString: u8ToString } = await import(\"uint8arrays/to-string\");\n\n\t\t\tconst protobufBytes = privateKeyToProtobuf(privateKey);\n\t\t\tconst privKeyEncoded = u8ToString(protobufBytes, \"base64\");\n\n\t\t\tconst json = {\n\t\t\t\tid: this.node.peerId.toString(),\n\t\t\t\tprivKey: privKeyEncoded,\n\t\t\t};\n\n\t\t\tawait fs.mkdir(path.dirname(absolutePath), { recursive: true });\n\t\t\tawait fs.writeFile(absolutePath, JSON.stringify(json, null, 2));\n\t\t\tlog.info(`[LIOP-Mesh] Identity persisted to ${absolutePath}`);\n\t\t} catch (error) {\n\t\t\tlog.error(`[LIOP-Mesh] FAILED to persist identity: ${error}`);\n\t\t}\n\t}\n\n\t/**\n\t * Creates a CID v1 (raw codec 0x55) from a SHA-256 hash of the capability string.\n\t * Required by @libp2p/kad-dht v16+ for provide/findProviders.\n\t */\n\tprivate async capabilityToCID(capability: string): Promise<CID> {\n\t\tconst hash = await sha256.digest(new TextEncoder().encode(capability));\n\t\treturn CID.create(1, 0x55, hash);\n\t}\n\n\t/**\n\t * Re-announces all buffered capabilities after a new peer connects.\n\t * Uses a small delay to allow the DHT protocol handshake to complete.\n\t */\n\tprivate async reannounceAll(): Promise<void> {\n\t\tif (\n\t\t\tthis.reannouncing ||\n\t\t\t!this.node ||\n\t\t\tthis.announcedCapabilities.size === 0\n\t\t)\n\t\t\treturn;\n\n\t\tthis.reannouncing = true;\n\t\ttry {\n\t\t\t// Wait for the DHT protocol handshake to settle\n\t\t\tawait new Promise((resolve) => setTimeout(resolve, 500));\n\n\t\t\tif (!this.node) return;\n\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Re-announcing ${this.announcedCapabilities.size} capabilities to updated routing table...`,\n\t\t\t);\n\n\t\t\tfor (const hash of this.announcedCapabilities) {\n\t\t\t\ttry {\n\t\t\t\t\tconst cid = await this.capabilityToCID(hash);\n\t\t\t\t\tawait this.node.contentRouting.provide(cid);\n\t\t\t\t\tlog.info(`[LIOP-Mesh] Re-announced: ${hash}`);\n\t\t\t\t} catch (_e) {\n\t\t\t\t\tlog.info(`[LIOP-Mesh] Re-announce failed for ${hash}: ${_e}`);\n\t\t\t\t}\n\t\t\t}\n\t\t} finally {\n\t\t\tthis.reannouncing = false;\n\t\t}\n\t}\n\n\tasync start(): Promise<void> {\n\t\tif (this.node) return;\n\t\tconst result = await this.loadOrCreateIdentity();\n\t\tif (!result) throw new Error(\"Could not initialize P2P Identity\");\n\n\t\tconst { privateKey, isNew } = result;\n\t\tthis.localPrivateKey = privateKey;\n\n\t\tlet bootNodes = this.config.bootstrapNodes || [];\n\t\tif (bootNodes.length === 0 && this.config.enableWAN) {\n\t\t\tbootNodes = DEFAULT_BOOTSTRAP_NODES;\n\t\t}\n\n\t\tconst enableAutoNAT = this.config.enableAutoNAT ?? true;\n\t\tconst enableRelay = this.config.enableRelay ?? true;\n\t\tconst enableDcutr = this.config.enableDcutr ?? true;\n\t\tconst enableMdns = this.config.enableMdns ?? !this.config.enableWAN;\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: discovery polymorphic list\n\t\tconst discoveryList: any[] = [];\n\t\tif (bootNodes.length > 0) {\n\t\t\tdiscoveryList.push(\n\t\t\t\tbootstrap({\n\t\t\t\t\tlist: bootNodes,\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\t\tif (enableMdns) {\n\t\t\tdiscoveryList.push(mdns());\n\t\t}\n\n\t\tconst dhtProtocol = this.config.enableWAN\n\t\t\t? \"/ipfs/kad/1.0.0\"\n\t\t\t: \"/ipfs/lan/kad/1.0.0\";\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: transports list\n\t\tconst transports: any[] = [tcp(), webSockets()];\n\t\tif (enableRelay) {\n\t\t\ttransports.push(circuitRelayTransport());\n\t\t}\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: services map\n\t\tconst services: Record<string, any> = {\n\t\t\tidentify: identify(),\n\t\t\tping: ping(),\n\t\t\tdht: kadDHT({\n\t\t\t\tprotocol: dhtProtocol,\n\t\t\t\tclientMode: false,\n\t\t\t\t// Allow local/private IPs in the DHT routing table for development/testing\n\t\t\t\tallowQueryWithZeroPeers: true,\n\t\t\t\t// By default kadDHT drops local IP addresses. Override the mapper to keep them.\n\t\t\t\tpeerInfoMapper: (peer) => peer,\n\t\t\t}),\n\t\t};\n\n\t\tif (enableAutoNAT) {\n\t\t\tservices.autoNAT = autoNAT();\n\t\t}\n\t\tif (enableRelay) {\n\t\t\tservices.relay = circuitRelayServer();\n\t\t}\n\t\tif (enableDcutr) {\n\t\t\tservices.dcutr = dcutr();\n\t\t}\n\n\t\t// Tier 1 Enclave: Pre-Shared Key (pnet) Connection Protection\n\t\t// biome-ignore lint/suspicious/noExplicitAny: ConnectionProtector factory type\n\t\tlet connectionProtector: any;\n\t\tif (this.config.swarmKey) {\n\t\t\tconst { preSharedKey } = await import(\"@libp2p/pnet\");\n\t\t\tconnectionProtector = preSharedKey({\n\t\t\t\tpsk: this.config.swarmKey,\n\t\t\t});\n\t\t\tlog.info(\n\t\t\t\t\"[LIOP-Mesh] 🔒 Private Network (pnet) enabled — transport-layer PSK isolation active\",\n\t\t\t);\n\t\t}\n\n\t\tthis.node = await createLibp2p({\n\t\t\tprivateKey,\n\t\t\taddresses: {\n\t\t\t\tlisten: this.config.listenAddresses,\n\t\t\t},\n\t\t\ttransports,\n\t\t\tconnectionEncrypters: [noise()],\n\t\t\tstreamMuxers: [yamux()],\n\t\t\t...(connectionProtector ? { connectionProtector } : {}),\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: services polymorphic definition\n\t\t\tservices: services as any,\n\t\t\tpeerDiscovery:\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: discovery polymorphic list casting\n\t\t\t\tdiscoveryList.length > 0 ? (discoveryList as any) : undefined,\n\t\t});\n\n\t\t// Monitor Connectivity Events\n\t\tthis.node.addEventListener(\"peer:discovery\", (evt) => {\n\t\t\tconst peerId = evt.detail.id;\n\t\t\tlog.info(`[LIOP-Mesh] Discovered peer: ${peerId.toString()}`);\n\t\t\t// [Phase 104] Auto-dial discovered peers to bypass DHT propagation latency\n\t\t\tif (this.node) {\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: target polymorphic type\n\t\t\t\tlet dialTarget: any = peerId;\n\n\t\t\t\t// Apply port translation if necessary (Docker -> Windows Host)\n\t\t\t\tif (this.config.addressMapper && evt.detail.multiaddrs.length > 0) {\n\t\t\t\t\tconst translated = evt.detail.multiaddrs\n\t\t\t\t\t\t.map((ma) => {\n\t\t\t\t\t\t\t// biome-ignore lint/style/noNonNullAssertion: mapped conditionally\n\t\t\t\t\t\t\tconst mapped = this.config.addressMapper!(ma.toString());\n\t\t\t\t\t\t\treturn mapped ? multiaddr(mapped) : null;\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.filter((t): t is NonNullable<typeof t> => t !== null);\n\n\t\t\t\t\tconst directTCP = translated.find(\n\t\t\t\t\t\t(ma) =>\n\t\t\t\t\t\t\tma.toString().includes(\"/tcp/\") && !ma.toString().includes(\"/ws\"),\n\t\t\t\t\t);\n\t\t\t\t\tif (directTCP) dialTarget = directTCP;\n\t\t\t\t}\n\n\t\t\t\tthis.node.dial(dialTarget).catch(() => {});\n\t\t\t}\n\t\t});\n\n\t\tthis.node.addEventListener(\"peer:connect\", (evt) => {\n\t\t\tconst peerId = evt.detail;\n\t\t\tlog.info(`[LIOP-Mesh] Connected to peer: ${peerId.toString()}`);\n\n\t\t\tif (!this.node) return;\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal services\n\t\t\tconst dht = (this.node.services as any).dht;\n\t\t\tif (dht?.routingTable) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Mesh] Adding ${peerId.toString()} to DHT Routing Table`,\n\t\t\t\t);\n\t\t\t\tdht.routingTable.add(peerId).catch((err: unknown) => {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Failed to add peer to routing table: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t\t);\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Trigger reactive re-announcement of all capabilities\n\t\t\t// so that ADD_PROVIDER messages reach the new peer\n\t\t\tthis.reannounceAll().catch((err: unknown) => {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Mesh] Re-announce error: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t});\n\n\t\tawait this.node.start();\n\n\t\t// Load persisted DHT routing table to enable rapid cold-start reconnections\n\t\tawait this.loadRoutingTable();\n\n\t\t// [LIOP-ALPHA] Protocols and services setup\n\t\tthis.applyHandlers();\n\n\t\tif (isNew && this.config.identityPath) {\n\t\t\tawait this.saveIdentity(privateKey);\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LIOP-Mesh] Node started with id: ${this.node.peerId.toString()}`,\n\t\t);\n\t\tthis.node.getMultiaddrs().forEach((addr) => {\n\t\t\tlog.info(`[LIOP-Mesh] Listening on: ${addr.toString()}`);\n\t\t});\n\n\t\t// Force explicit dialing of Bootstrap nodes with bounded backoff\n\t\tif (bootNodes.length > 0) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Forcing direct P2P dial to ${bootNodes.length} bootstrap nodes...`,\n\t\t\t);\n\n\t\t\tconst maxRetries = 5;\n\t\t\tfor (const addr of bootNodes) {\n\t\t\t\tlet success = false;\n\t\t\t\tlet attempt = 1;\n\n\t\t\t\twhile (attempt <= maxRetries && !success) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait this.node.dial(multiaddr(addr));\n\t\t\t\t\t\tlog.info(`[LIOP-Mesh] ✅ Successfully dialed ${addr}`);\n\t\t\t\t\t\tsuccess = true;\n\t\t\t\t\t} catch (_e) {\n\t\t\t\t\t\tconst delay = Math.min(1000 * 2 ** (attempt - 1), 3000);\n\t\t\t\t\t\tlog.warn(\n\t\t\t\t\t\t\t`[LIOP-Mesh] ⚠️ Dial attempt ${attempt}/${maxRetries} to ${addr} failed. Retrying in ${delay / 1000}s...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (attempt < maxRetries) {\n\t\t\t\t\t\t\tawait new Promise((resolve) => setTimeout(resolve, delay));\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tlog.error(\n\t\t\t\t\t\t\t\t`[LIOP-Mesh] ❌ Could not connect to bootstrap ${addr} after ${maxRetries} attempts. Continuing...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tattempt++;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tasync stop(): Promise<void> {\n\t\tif (this.node) {\n\t\t\tawait this.saveRoutingTable();\n\t\t\tawait this.node.stop();\n\t\t\tlog.info(\"[LIOP-Mesh] Node stopped\");\n\t\t}\n\t}\n\n\tprivate async loadRoutingTable() {\n\t\tif (!this.config.dhtStoragePath || !this.node) return;\n\t\ttry {\n\t\t\tconst absolutePath = path.resolve(this.config.dhtStoragePath);\n\t\t\tconst data = await fs.readFile(absolutePath, \"utf-8\");\n\t\t\tconst peers = JSON.parse(data);\n\t\t\tconst { peerIdFromString } = await import(\"@libp2p/peer-id\");\n\n\t\t\tlet loadedCount = 0;\n\t\t\tfor (const peer of peers) {\n\t\t\t\tif (!peer.id || !peer.addresses) continue;\n\t\t\t\ttry {\n\t\t\t\t\tconst peerId = peerIdFromString(peer.id);\n\t\t\t\t\tconst addrs = peer.addresses.map((a: string) => multiaddr(a));\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: bypass libp2p version-drift type mismatch on PeerId\n\t\t\t\t\tawait this.node.peerStore.save(peerId as any, { multiaddrs: addrs });\n\n\t\t\t\t\t// Pre-seed DHT routing table\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Internal service access\n\t\t\t\t\tconst dht = (this.node.services as any).dht;\n\t\t\t\t\tif (dht?.routingTable) {\n\t\t\t\t\t\tdht.routingTable.add(peerId).catch(() => {});\n\t\t\t\t\t}\n\t\t\t\t\tloadedCount++;\n\t\t\t\t} catch (_e) {}\n\t\t\t}\n\t\t\tlog.info(`[LIOP-Mesh] Loaded ${loadedCount} peers from DHT storage`);\n\t\t} catch (error: unknown) {\n\t\t\tconst e = error as Error & { code?: string };\n\t\t\tif (e.code !== \"ENOENT\") {\n\t\t\t\tlog.error(`[LIOP-Mesh] Failed to load DHT table: ${e.message}`);\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate async saveRoutingTable() {\n\t\tif (!this.config.dhtStoragePath || !this.node) return;\n\t\ttry {\n\t\t\tconst absolutePath = path.resolve(this.config.dhtStoragePath);\n\t\t\tconst allPeers = await this.node.peerStore.all();\n\t\t\tconst peersToSave = [];\n\t\t\tfor (const peer of allPeers) {\n\t\t\t\tif (peer.addresses.length > 0) {\n\t\t\t\t\tpeersToSave.push({\n\t\t\t\t\t\tid: peer.id.toString(),\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: internal libp2p addr\n\t\t\t\t\t\taddresses: peer.addresses.map((a: any) => a.multiaddr.toString()),\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t\tawait fs.mkdir(path.dirname(absolutePath), { recursive: true });\n\t\t\tawait fs.writeFile(absolutePath, JSON.stringify(peersToSave, null, 2));\n\t\t\tlog.info(`[LIOP-Mesh] Saved ${peersToSave.length} peers to DHT storage`);\n\t\t} catch (error) {\n\t\t\tlog.error(`[LIOP-Mesh] FAILED to save DHT routing table: ${error}`);\n\t\t}\n\t}\n\n\t/**\n\t * Internal logic to register protocol handlers against the libp2p node.\n\t * Can be called multiple times; handles idempotent registration.\n\t */\n\tprivate applyHandlers(): void {\n\t\tif (!this.node || this.manifestProtocolRegistered) return;\n\t\tif (!this.manifestProvider) return;\n\n\t\tthis.manifestProtocolRegistered = true;\n\n\t\t// Announce manifest capability to the Mesh DHT for discovery\n\t\tthis.announceCapability(LIOP_MANIFEST_CAPABILITY).catch((err) => {\n\t\t\tlog.info(`[LIOP-Mesh] Initial manifest announcement failed: ${err}`);\n\t\t});\n\n\t\t// libp2p v3.x: handler receives (stream, connection) as separate args\n\t\tthis.node.handle(\n\t\t\tLIOP_MANIFEST_PROTOCOL,\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: libp2p v3.x stream/connection types\n\t\t\tasync (streamArg: any, connectionArg?: any) => {\n\t\t\t\t// v3.x passes (stream, connection); v1.x passed ({ stream, connection })\n\t\t\t\tconst stream = streamArg?.stream ?? streamArg;\n\t\t\t\tconst conn = streamArg?.connection ?? connectionArg;\n\t\t\t\tconst remotePeer = conn?.remotePeer?.toString() || \"unknown\";\n\n\t\t\t\tlog.info(`[LIOP-Mesh] Incoming manifest request from ${remotePeer}.`);\n\n\t\t\t\ttry {\n\t\t\t\t\tconst manifest = this.manifestProvider?.();\n\t\t\t\t\tif (!manifest || !stream) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Mesh] Skipping manifest request (no provider or stream)`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tif (typeof stream?.close === \"function\") await stream.close();\n\t\t\t\t\t\t} catch (_e) {}\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\n\t\t\t\t\tconst manifestStr = JSON.stringify(manifest);\n\t\t\t\t\tconst payload = new TextEncoder().encode(manifestStr);\n\n\t\t\t\t\t// Write length-prefixed payload (Big Endian 4 bytes)\n\t\t\t\t\tconst lengthBuf = Buffer.alloc(4);\n\t\t\t\t\tlengthBuf.writeUInt32BE(payload.length, 0);\n\t\t\t\t\tconst fullPacket = Buffer.concat([lengthBuf, Buffer.from(payload)]);\n\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Serving manifest (${fullPacket.length} bytes) to ${remotePeer} [Tools: ${manifest.tools.map((t) => t.name).join(\", \")}]`,\n\t\t\t\t\t);\n\n\t\t\t\t\ttry {\n\t\t\t\t\t\t// libp2p v3.x: stream.send() for writing\n\t\t\t\t\t\tif (typeof stream.send === \"function\") {\n\t\t\t\t\t\t\tconst accepted = stream.send(fullPacket);\n\t\t\t\t\t\t\tif (!accepted && typeof stream.onDrain === \"function\") {\n\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\tawait stream.onDrain({ signal: AbortSignal.timeout(5000) });\n\t\t\t\t\t\t\t\t} catch (drainErr) {\n\t\t\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t\t\t`[LIOP-Mesh] WARN: Drain timeout for ${remotePeer}: ${drainErr instanceof Error ? drainErr.message : String(drainErr)}`,\n\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t// Fallback for environments where stream.send is not available\n\t\t\t\t\t\t\tawait pipe([fullPacket], stream);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlog.info(`[LIOP-Mesh] Manifest sent successfully to ${remotePeer}`);\n\t\t\t\t\t} catch (writeErr: unknown) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Mesh] Write error serving manifest to ${remotePeer}: ${writeErr instanceof Error ? writeErr.message : String(writeErr)}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} finally {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tif (typeof stream.close === \"function\") await stream.close();\n\t\t\t\t\t\t} catch (_e) {\n\t\t\t\t\t\t\t// Ignore close errors\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\treturn;\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Error serving manifest to ${remotePeer}: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t},\n\t\t);\n\n\t\tlog.info(\n\t\t\t`[LIOP-Mesh] Manifest Protocol registered: ${LIOP_MANIFEST_PROTOCOL}`,\n\t\t);\n\t}\n\n\t/**\n\t * Registers a callback as the manifest provider.\n\t * Will be applied immediately if the node is already initialized.\n\t */\n\tregisterManifestHandler(provider: () => LiopManifest): void {\n\t\tthis.manifestProvider = provider;\n\t\tif (this.node) {\n\t\t\tthis.applyHandlers();\n\t\t}\n\t}\n\n\t/**\n\t * Queries a remote peer's manifest by opening a /liop/manifest/1.0.0 stream.\n\t * Returns null if the peer doesn't support the protocol or is unreachable.\n\t */\n\tasync queryManifest(peerIdStr: string): Promise<LiopManifest | null> {\n\t\tif (!this.node) throw new Error(\"Mesh Node is not running\");\n\n\t\t// [ALPHA-OPTIMIZATION] Local Loopback Bypass\n\t\t// If we are querying our own manifest, return it directly from the provider.\n\t\tif (peerIdStr === this.node.peerId.toString()) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Loopback: Returning local manifest directly for ${peerIdStr}`,\n\t\t\t);\n\t\t\treturn this.manifestProvider?.() || null;\n\t\t}\n\t\tif (this.shouldSkipManifestDial(peerIdStr)) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst MAX_ATTEMPTS = 3;\n\t\tfor (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n\t\t\ttry {\n\t\t\t\ttype DialTarget = Parameters<Libp2p[\"dialProtocol\"]>[0];\n\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: targetPeer can be from connections or from string\n\t\t\t\tlet targetPeer: any = null;\n\t\t\t\tconst connections = this.node.getConnections();\n\t\t\t\tconst activeConn = connections.find(\n\t\t\t\t\t(c) => c.remotePeer.toString() === peerIdStr,\n\t\t\t\t);\n\n\t\t\t\tif (activeConn) {\n\t\t\t\t\ttargetPeer = activeConn.remotePeer;\n\t\t\t\t} else {\n\t\t\t\t\t// Fallback: search peerStore to find a valid PeerId object that libp2p understands natively\n\t\t\t\t\tconst allPeers = await this.node.peerStore.all();\n\t\t\t\t\tconst stored = allPeers.find((p) => p.id.toString() === peerIdStr);\n\t\t\t\t\tif (stored) {\n\t\t\t\t\t\ttargetPeer = stored.id;\n\t\t\t\t\t} else {\n\t\t\t\t\t\t// Final fallback parsing.\n\t\t\t\t\t\t// [LIOP-CAUTION] This is where the toMultihash error usually triggers if libp2p version drift exists.\n\t\t\t\t\t\tconst { peerIdFromString } = await import(\"@libp2p/peer-id\");\n\t\t\t\t\t\ttargetPeer = peerIdFromString(peerIdStr);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// [LIOP-PORT-TRANSLATION] If an address mapper is configured (e.g. in the Host Agent),\n\t\t\t\t// ensure the targetPeer's addresses are translated before libp2p attempts to dial.\n\t\t\t\tconst dialTargetFromPeer = targetPeer as DialTarget;\n\t\t\t\tlet dialTarget: DialTarget = dialTargetFromPeer;\n\t\t\t\tif (this.config.addressMapper && this.node) {\n\t\t\t\t\tconst mapper = this.config.addressMapper;\n\t\t\t\t\tconst peer = await this.node.peerStore.get(targetPeer);\n\t\t\t\t\tif (peer && peer.addresses.length > 0) {\n\t\t\t\t\t\tconst translated = peer.addresses\n\t\t\t\t\t\t\t.map((oa) => {\n\t\t\t\t\t\t\t\tconst original = oa.multiaddr.toString();\n\t\t\t\t\t\t\t\tconst mapped = mapper(original);\n\t\t\t\t\t\t\t\tif (!mapped) return null;\n\t\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\t\tisCertified: oa.isCertified,\n\t\t\t\t\t\t\t\t\tmultiaddr: multiaddr(mapped),\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t.filter((t): t is NonNullable<typeof t> => t !== null);\n\n\t\t\t\t\t\t// Strategy: Force direct dial to the first translated TCP address to bypass DHT routing delays\n\t\t\t\t\t\tconst directTCP = translated.find(\n\t\t\t\t\t\t\t(t) =>\n\t\t\t\t\t\t\t\tt.multiaddr.toString().includes(\"/tcp/\") &&\n\t\t\t\t\t\t\t\t!t.multiaddr.toString().includes(\"/ws\"),\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (directTCP) {\n\t\t\t\t\t\t\tdialTarget = directTCP.multiaddr as DialTarget;\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Mesh] ⚡ Direct dial to translated addr: ${dialTarget.toString()}`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\t// Update the peerStore so subsequent dials also use the right path\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal peerStore\n\t\t\t\t\t\tawait (this.node as any).peerStore.save(targetPeer, {\n\t\t\t\t\t\t\tmultiaddrs: translated.map((t) => t.multiaddr),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Open a protocol stream using high-level dialProtocol for automated it-stream wrapping\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: stream type varies by transport\n\t\t\t\tlet stream: any;\n\t\t\t\ttry {\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: libp2p returns polymorphic dialProtocol result\n\t\t\t\t\tconst result: any = await this.node\n\t\t\t\t\t\t.dialProtocol(dialTarget, LIOP_MANIFEST_PROTOCOL)\n\t\t\t\t\t\t.catch((e: unknown) => {\n\t\t\t\t\t\t\t// Catch specific TypeError that breaks the loop\n\t\t\t\t\t\t\tif (String(e).includes(\"toMultihash\")) {\n\t\t\t\t\t\t\t\tthrow new Error(\"INCOMPATIBLE_PEER_ID_INTERFACE\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tthrow e;\n\t\t\t\t\t\t});\n\t\t\t\t\tstream = result.stream || result;\n\t\t\t\t} catch (dialErr) {\n\t\t\t\t\tif (attempt === MAX_ATTEMPTS) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Mesh] Dial error for ${peerIdStr} after ${MAX_ATTEMPTS} attempts: ${dialErr}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn null;\n\t\t\t\t\t}\n\t\t\t\t\tconst delay = 500 * 2 ** attempt;\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Dial error for ${peerIdStr} (Attempt ${attempt}). Retrying in ${delay}ms...`,\n\t\t\t\t\t);\n\t\t\t\t\tawait new Promise((r) => setTimeout(r, delay));\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\n\t\t\t\t// libp2p v3.x: stream IS the AsyncIterable<Uint8Array>\n\t\t\t\t// v1.x had stream.source; v3.x has the stream itself as iterable\n\t\t\t\tconst source: AsyncIterable<Uint8Array> =\n\t\t\t\t\tstream.source ??\n\t\t\t\t\t(typeof stream[Symbol.asyncIterator] === \"function\" ? stream : null);\n\n\t\t\t\tif (!source) {\n\t\t\t\t\tthrow new Error(\"Target stream has no AsyncIterable source\");\n\t\t\t\t}\n\n\t\t\t\tconst chunks: Uint8Array[] = [];\n\t\t\t\tlet totalReceived = 0;\n\t\t\t\tlet expectedPayloadLength = -1;\n\n\t\t\t\t// Read length-prefixed manifest: first 4 bytes = payload length (BE)\n\t\t\t\tlet manifestTimeoutId: NodeJS.Timeout | undefined;\n\t\t\t\tconst timeoutPromise = new Promise<never>((_, reject) => {\n\t\t\t\t\tmanifestTimeoutId = setTimeout(\n\t\t\t\t\t\t() => reject(new Error(\"Manifest read timeout (5.0s)\")),\n\t\t\t\t\t\t5000,\n\t\t\t\t\t);\n\t\t\t\t});\n\n\t\t\t\ttry {\n\t\t\t\t\tawait Promise.race([\n\t\t\t\t\t\t(async () => {\n\t\t\t\t\t\t\tfor await (const chunk of source) {\n\t\t\t\t\t\t\t\tif (!chunk) continue;\n\t\t\t\t\t\t\t\t// libp2p streams yield Uint8ArrayList (from uint8arraylist package)\n\t\t\t\t\t\t\t\t// which reports .length correctly but Buffer.from() produces zeros.\n\t\t\t\t\t\t\t\t// .subarray() returns a flat contiguous Uint8Array with actual data.\n\t\t\t\t\t\t\t\tconst raw =\n\t\t\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Uint8ArrayList type guard\n\t\t\t\t\t\t\t\t\ttypeof (chunk as any).subarray === \"function\"\n\t\t\t\t\t\t\t\t\t\t? (chunk as { subarray: () => Uint8Array }).subarray()\n\t\t\t\t\t\t\t\t\t\t: chunk instanceof Uint8Array\n\t\t\t\t\t\t\t\t\t\t\t? chunk\n\t\t\t\t\t\t\t\t\t\t\t: new Uint8Array(0);\n\t\t\t\t\t\t\t\tconst bytes = Buffer.from(\n\t\t\t\t\t\t\t\t\traw.buffer,\n\t\t\t\t\t\t\t\t\traw.byteOffset,\n\t\t\t\t\t\t\t\t\traw.byteLength,\n\t\t\t\t\t\t\t\t);\n\n\t\t\t\t\t\t\t\tif (bytes.length > 0) {\n\t\t\t\t\t\t\t\t\tchunks.push(bytes);\n\t\t\t\t\t\t\t\t\ttotalReceived += bytes.length;\n\n\t\t\t\t\t\t\t\t\t// Extract expected length from the first 4 bytes once available\n\t\t\t\t\t\t\t\t\tif (expectedPayloadLength < 0 && totalReceived >= 4) {\n\t\t\t\t\t\t\t\t\t\tconst header = Buffer.concat(chunks);\n\t\t\t\t\t\t\t\t\t\texpectedPayloadLength = header.readUInt32BE(0);\n\t\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t\t// Stop reading once we have the full payload (4 prefix + N payload)\n\t\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\t\texpectedPayloadLength >= 0 &&\n\t\t\t\t\t\t\t\t\t\ttotalReceived >= 4 + expectedPayloadLength\n\t\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t})(),\n\t\t\t\t\t\ttimeoutPromise,\n\t\t\t\t\t]);\n\t\t\t\t} catch (itErr: unknown) {\n\t\t\t\t\tif (chunks.length === 0) throw itErr;\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Partial manifest read from ${peerIdStr}: ${itErr instanceof Error ? itErr.message : String(itErr)}`,\n\t\t\t\t\t);\n\t\t\t\t} finally {\n\t\t\t\t\tif (manifestTimeoutId) clearTimeout(manifestTimeoutId);\n\t\t\t\t}\n\n\t\t\t\tconst raw = Buffer.concat(chunks);\n\t\t\t\tif (raw.length < 4) {\n\t\t\t\t\tthrow new Error(\"Received empty/invalid manifest (too short)\");\n\t\t\t\t}\n\n\t\t\t\t// Use the length prefix to extract exactly the expected JSON\n\t\t\t\tconst declaredLen = raw.readUInt32BE(0);\n\t\t\t\tconst jsonStr = raw.subarray(4, 4 + declaredLen).toString(\"utf-8\");\n\t\t\t\tconst manifest: LiopManifest = JSON.parse(jsonStr);\n\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Mesh] Received manifest from ${peerIdStr}: ${manifest.tools.length} tools`,\n\t\t\t\t);\n\t\t\t\tthis.clearManifestDialFailure(peerIdStr);\n\n\t\t\t\treturn manifest;\n\t\t\t} catch (err: unknown) {\n\t\t\t\tif (attempt === MAX_ATTEMPTS) {\n\t\t\t\t\tthis.recordManifestDialFailure(peerIdStr);\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Failed to query manifest from ${peerIdStr} after ${MAX_ATTEMPTS} attempts: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\t\t\t\tconst delay = 500 * 2 ** attempt;\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Mesh] Query error for ${peerIdStr} (Attempt ${attempt}): ${err instanceof Error ? err.message : String(err)}. Retrying in ${delay}ms...`,\n\t\t\t\t);\n\t\t\t\tawait new Promise((r) => setTimeout(r, delay));\n\t\t\t}\n\t\t}\n\t\treturn null;\n\t}\n\n\t/**\n\t * Discovers all peers in the DHT that have announced \"liop:manifest\".\n\t * Returns their PeerIDs for subsequent manifest queries.\n\t */\n\tasync discoverManifestProviders(): Promise<string[]> {\n\t\treturn this.findProviders(LIOP_MANIFEST_CAPABILITY);\n\t}\n\n\t/**\n\t * Announces this node as a manifest provider in the DHT.\n\t * Should be called after tools/resources have been registered.\n\t */\n\tasync announceManifest(): Promise<void> {\n\t\tawait this.announceCapability(LIOP_MANIFEST_CAPABILITY);\n\t}\n\n\t/**\n\t * Returns the current size of the routing table for diagnostic purposes.\n\t */\n\tgetRoutingTableSize(): number {\n\t\tif (!this.node) return 0;\n\t\t// @ts-expect-error: Accessing internal routing table size for diagnostics\n\t\treturn this.node.services.dht?.routingTable?.size || 0;\n\t}\n\n\tgetPeerId(): string {\n\t\tif (!this.node) throw new Error(\"Mesh Node is not running\");\n\t\treturn this.node.peerId.toString();\n\t}\n\n\tasync sign(data: Uint8Array): Promise<Uint8Array> {\n\t\tif (!this.localPrivateKey) {\n\t\t\tthrow new Error(\"Local identity not loaded or initialized\");\n\t\t}\n\t\t// libp2p private key implementations typically return a Promise<Uint8Array> or Uint8Array\n\t\treturn Buffer.from(await this.localPrivateKey.sign(data));\n\t}\n\n\tgetMultiaddrs(): string[] {\n\t\tif (!this.node) throw new Error(\"Mesh Node is not running\");\n\t\treturn this.node.getMultiaddrs().map((a) => a.toString());\n\t}\n\n\tasync announceCapability(hash: string): Promise<void> {\n\t\tif (!this.node) throw new Error(\"Mesh Node is not running\");\n\n\t\t// Buffer the capability for reactive re-announcement\n\t\tthis.announcedCapabilities.add(hash);\n\n\t\ttry {\n\t\t\tconst cid = await this.capabilityToCID(hash);\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Announcing capability: ${hash} (CID: ${cid.toString()})`,\n\t\t\t);\n\n\t\t\t// In libp2p v1.x, contentRouting.provide returns Promise<void>\n\t\t\tawait this.node.contentRouting.provide(cid);\n\t\t\tlog.info(`[LIOP-Mesh] Successfully announced capability: ${hash}`);\n\n\t\t\t// [DEV-ONLY] Self-verification\n\t\t\tconst selfId = this.node.peerId.toString();\n\t\t\tfor await (const peer of this.node.contentRouting.findProviders(cid)) {\n\t\t\t\tif (peer.id.toString() === selfId) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Self-verification success: Node is providing ${hash}`,\n\t\t\t\t\t);\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tlog.error(`[LIOP-Mesh] Failed to announce capability: ${error}`);\n\t\t}\n\t}\n\n\tasync findProviders(hash: string): Promise<string[]> {\n\t\tif (!this.node) throw new Error(\"Mesh Node is not running\");\n\t\tconst providers: string[] = [];\n\t\ttry {\n\t\t\tconst cid = await this.capabilityToCID(hash);\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Querying DHT for ${hash} (CID: ${cid.toString()})...`,\n\t\t\t);\n\n\t\t\tlet foundAny = false;\n\n\t\t\t// Phase 103: Adaptive Tail-Wait Polling for DHT Discovery\n\t\t\tconst connections = this.node.getConnections?.()?.length || 0;\n\t\t\tconst idleTimeoutMs = connections > 1 ? 1500 : 3000;\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Starting DHT search with intelligent idle-timeout of ${idleTimeoutMs}ms (Active connections: ${connections})`,\n\t\t\t);\n\n\t\t\t// We manually iterate the AsyncIterable to abort it via Promise.race\n\t\t\tconst iterator = this.node.contentRouting\n\t\t\t\t.findProviders(cid)\n\t\t\t\t[Symbol.asyncIterator]();\n\t\t\tlet isDone = false;\n\n\t\t\twhile (!isDone) {\n\t\t\t\tconst nextPromise = iterator.next();\n\t\t\t\tconst timeoutPromise = new Promise<{ timeout: true }>((resolve) =>\n\t\t\t\t\tsetTimeout(() => resolve({ timeout: true }), idleTimeoutMs),\n\t\t\t\t);\n\n\t\t\t\ttry {\n\t\t\t\t\tconst result = await Promise.race([nextPromise, timeoutPromise]);\n\n\t\t\t\t\tif (result && typeof result === \"object\" && \"timeout\" in result) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Mesh] DHT discovery idle-timeout reached. Stopping search early.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (typeof iterator.return === \"function\") {\n\t\t\t\t\t\t\t// Fire-and-forget: Kademlia iterators can block for 30s on return()\n\t\t\t\t\t\t\titerator.return().catch(() => {});\n\t\t\t\t\t\t}\n\t\t\t\t\t\tisDone = true;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic Kademlia peer result\n\t\t\t\t\tconst itResult = result as IteratorResult<any>;\n\t\t\t\t\tif (itResult.done) {\n\t\t\t\t\t\tisDone = true;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\n\t\t\t\t\tfoundAny = true;\n\t\t\t\t\tconst peer = itResult.value;\n\t\t\t\t\tconst peerId = peer.id.toString();\n\t\t\t\t\tlog.info(`[LIOP-Mesh] Found provider: ${peerId}`);\n\t\t\t\t\tif (!providers.includes(peerId)) {\n\t\t\t\t\t\tproviders.push(peerId);\n\t\t\t\t\t}\n\t\t\t\t} catch (e: unknown) {\n\t\t\t\t\tlog.warn(\n\t\t\t\t\t\t`[LIOP-Mesh] DHT iteration error: ${e instanceof Error ? e.message : String(e)}`,\n\t\t\t\t\t);\n\t\t\t\t\tisDone = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (!foundAny) {\n\t\t\t\tconst services = this.node.services as {\n\t\t\t\t\tdht?: { routingTable?: { size: number } };\n\t\t\t\t};\n\t\t\t\tconst dhtSize = services.dht?.routingTable?.size || 0;\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Mesh] DHT search for ${hash} returned zero results (routing table size: ${dhtSize})`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// [DEVELOPER-EXPERIENCE] Local Loopback Discovery\n\t\t\t// If we are providing this capability, ensure we find ourselves even if DHT findProviders doesn't return us.\n\t\t\tif (this.announcedCapabilities.has(hash)) {\n\t\t\t\tconst selfId = this.node.peerId.toString();\n\t\t\t\tif (!providers.includes(selfId)) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Including local node (${selfId}) in results for ${hash}`,\n\t\t\t\t\t);\n\t\t\t\t\tproviders.push(selfId);\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (error: unknown) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Error finding providers for ${hash}: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t);\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LIOP-Mesh] DHT search for ${hash} finished. Found ${providers.length} providers.`,\n\t\t);\n\t\treturn providers;\n\t}\n\n\tasync resolvePeer(peerIdStr: string): Promise<string[]> {\n\t\tif (!this.node) throw new Error(\"Mesh Node is not running\");\n\t\ttry {\n\t\t\t// Strategy 1: Check active connections for the peer's multiaddrs\n\t\t\tconst connections = this.node.getConnections();\n\t\t\tfor (const conn of connections) {\n\t\t\t\tif (conn.remotePeer.toString() === peerIdStr) {\n\t\t\t\t\tconst remoteAddr = conn.remoteAddr.toString();\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Resolved peer ${peerIdStr} via active connection: ${remoteAddr}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn [remoteAddr];\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Strategy 2: Try peerStore (iterate all peers to avoid toMultihash conflict)\n\t\t\tconst allPeers = await this.node.peerStore.all();\n\t\t\tfor (const peer of allPeers) {\n\t\t\t\tif (peer.id.toString() === peerIdStr && peer.addresses.length > 0) {\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Internal libp2p addr type\n\t\t\t\t\tconst addrs = peer.addresses.map((a: any) => a.multiaddr.toString());\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Mesh] Resolved peer ${peerIdStr} via peerStore: ${addrs[0]}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn addrs;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Mesh] Peer ${peerIdStr} not found in connections or peerStore`,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tlog.info(`[LIOP-Mesh] Failed to resolve peer ${peerIdStr}: ${error}`);\n\t\t}\n\t\treturn [];\n\t}\n\n\tpublic isStarted(): boolean {\n\t\treturn !!this.node && this.node.status === \"started\";\n\t}\n\n\tpublic getPeers(): string[] {\n\t\tif (!this.node) return [];\n\t\treturn this.node.getConnections().map((c) => c.remotePeer.toString());\n\t}\n\n\t/**\n\t * Returns true if this MeshNode was booted inside an isolated libp2p private network (pnet PSK).\n\t */\n\tpublic isPrivateNetwork(): boolean {\n\t\treturn Boolean(this.config.swarmKey);\n\t}\n\n\t/**\n\t * Returns the configured 95-byte Swarm Key, or undefined if running in a public/consortium mesh.\n\t */\n\tpublic getSwarmKey(): Uint8Array | undefined {\n\t\treturn this.config.swarmKey;\n\t}\n}\n"]}
@@ -0,0 +1,58 @@
1
+ import { ZkVerificationError } from './chunk-P34HDRN5.js';
2
+ import { bn254, stringBigints } from 'micro-zk-proofs';
3
+
4
+ var VERIFICATION_LATENCY_BUDGET_MS = 250;
5
+ function verifyGroth16Proof(vkey, proofWithSignals) {
6
+ if (!vkey || !proofWithSignals?.proof) {
7
+ return false;
8
+ }
9
+ try {
10
+ return bn254.groth.verifyProof(vkey, proofWithSignals);
11
+ } catch (_error) {
12
+ return false;
13
+ }
14
+ }
15
+ function serializeVKey(vkey) {
16
+ try {
17
+ const encoded = stringBigints.encode(vkey);
18
+ return Buffer.from(JSON.stringify(encoded), "utf-8");
19
+ } catch (error) {
20
+ throw new ZkVerificationError(
21
+ `Failed to serialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`
22
+ );
23
+ }
24
+ }
25
+ function deserializeVKey(buf) {
26
+ try {
27
+ const parsed = JSON.parse(buf.toString("utf-8"));
28
+ return stringBigints.decode(parsed);
29
+ } catch (error) {
30
+ throw new ZkVerificationError(
31
+ `Failed to deserialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`
32
+ );
33
+ }
34
+ }
35
+ function serializeGrothProof(proofWithSignals) {
36
+ try {
37
+ const encoded = stringBigints.encode(proofWithSignals);
38
+ return Buffer.from(JSON.stringify(encoded), "utf-8");
39
+ } catch (error) {
40
+ throw new ZkVerificationError(
41
+ `Failed to serialize GrothProof: ${error instanceof Error ? error.message : String(error)}`
42
+ );
43
+ }
44
+ }
45
+ function deserializeGrothProof(buf) {
46
+ try {
47
+ const parsed = JSON.parse(buf.toString("utf-8"));
48
+ return stringBigints.decode(parsed);
49
+ } catch (error) {
50
+ throw new ZkVerificationError(
51
+ `Failed to deserialize GrothProof: ${error instanceof Error ? error.message : String(error)}`
52
+ );
53
+ }
54
+ }
55
+
56
+ export { VERIFICATION_LATENCY_BUDGET_MS, deserializeGrothProof, deserializeVKey, serializeGrothProof, serializeVKey, verifyGroth16Proof };
57
+ //# sourceMappingURL=chunk-OHMZZMMC.js.map
58
+ //# sourceMappingURL=chunk-OHMZZMMC.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/crypto/groth16-verifier.ts"],"names":[],"mappings":";;;AAWO,IAAM,8BAAA,GAAiC;AAQvC,SAAS,kBAAA,CACf,MACA,gBAAA,EACU;AACV,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,gBAAA,EAAkB,KAAA,EAAO;AACtC,IAAA,OAAO,KAAA;AAAA,EACR;AAEA,EAAA,IAAI;AACH,IAAA,OAAO,KAAA,CAAM,KAAA,CAAM,WAAA,CAAY,IAAA,EAAM,gBAAgB,CAAA;AAAA,EACtD,SAAS,MAAA,EAAQ;AAEhB,IAAA,OAAO,KAAA;AAAA,EACR;AACD;AAKO,SAAS,cAAc,IAAA,EAA+B;AAC5D,EAAA,IAAI;AACH,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AACzC,IAAA,OAAO,OAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,OAAO,CAAA;AAAA,EACpD,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,wCAAwC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KAC/F;AAAA,EACD;AACD;AAKO,SAAS,gBAAgB,GAAA,EAA8B;AAC7D,EAAA,IAAI;AACH,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,QAAA,CAAS,OAAO,CAAC,CAAA;AAC/C,IAAA,OAAO,aAAA,CAAc,OAAO,MAAM,CAAA;AAAA,EACnC,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,0CAA0C,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KACjG;AAAA,EACD;AACD;AAKO,SAAS,oBACf,gBAAA,EACS;AACT,EAAA,IAAI;AACH,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,CAAO,gBAAgB,CAAA;AACrD,IAAA,OAAO,OAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,OAAO,CAAA;AAAA,EACpD,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,mCAAmC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KAC1F;AAAA,EACD;AACD;AAKO,SAAS,sBAAsB,GAAA,EAA+B;AACpE,EAAA,IAAI;AACH,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,QAAA,CAAS,OAAO,CAAC,CAAA;AAC/C,IAAA,OAAO,aAAA,CAAc,OAAO,MAAM,CAAA;AAAA,EACnC,SAAS,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,qCAAqC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KAC5F;AAAA,EACD;AACD","file":"chunk-OHMZZMMC.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n\tbn254,\n\ttype ProofWithSignals,\n\tstringBigints,\n\ttype VerificationKey,\n} from \"micro-zk-proofs\";\nimport { ZkVerificationError } from \"../security/zk.js\";\n\nexport const VERIFICATION_LATENCY_BUDGET_MS = 250;\n\nexport type { ProofWithSignals, VerificationKey };\n\n/**\n * Verifies a Groth16 Zero-Knowledge proof against a verification key.\n * Traps curve validation errors gracefully to ensure safe verification.\n */\nexport function verifyGroth16Proof(\n\tvkey: VerificationKey,\n\tproofWithSignals: ProofWithSignals,\n): boolean {\n\tif (!vkey || !proofWithSignals?.proof) {\n\t\treturn false;\n\t}\n\n\ttry {\n\t\treturn bn254.groth.verifyProof(vkey, proofWithSignals);\n\t} catch (_error) {\n\t\t// Curve point validation or pairing failure (e.g. invalid curve point, subgroup violation)\n\t\treturn false;\n\t}\n}\n\n/**\n * Serializes a VerificationKey into a Buffer.\n */\nexport function serializeVKey(vkey: VerificationKey): Buffer {\n\ttry {\n\t\tconst encoded = stringBigints.encode(vkey);\n\t\treturn Buffer.from(JSON.stringify(encoded), \"utf-8\");\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to serialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n\n/**\n * Deserializes a Buffer into a typed VerificationKey.\n */\nexport function deserializeVKey(buf: Buffer): VerificationKey {\n\ttry {\n\t\tconst parsed = JSON.parse(buf.toString(\"utf-8\"));\n\t\treturn stringBigints.decode(parsed) as VerificationKey;\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to deserialize VerificationKey: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n\n/**\n * Serializes a ProofWithSignals into a Buffer.\n */\nexport function serializeGrothProof(\n\tproofWithSignals: ProofWithSignals,\n): Buffer {\n\ttry {\n\t\tconst encoded = stringBigints.encode(proofWithSignals);\n\t\treturn Buffer.from(JSON.stringify(encoded), \"utf-8\");\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to serialize GrothProof: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n\n/**\n * Deserializes a Buffer into a typed ProofWithSignals.\n */\nexport function deserializeGrothProof(buf: Buffer): ProofWithSignals {\n\ttry {\n\t\tconst parsed = JSON.parse(buf.toString(\"utf-8\"));\n\t\treturn stringBigints.decode(parsed) as ProofWithSignals;\n\t} catch (error) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Failed to deserialize GrothProof: ${error instanceof Error ? error.message : String(error)}`,\n\t\t);\n\t}\n}\n"]}
@@ -0,0 +1,213 @@
1
+ import crypto from 'crypto';
2
+
3
+ // src/security/zk.ts
4
+ var ProofType = /* @__PURE__ */ ((ProofType2) => {
5
+ ProofType2[ProofType2["HMAC_LEGACY"] = 0] = "HMAC_LEGACY";
6
+ ProofType2[ProofType2["GROTH16"] = 2] = "GROTH16";
7
+ return ProofType2;
8
+ })(ProofType || {});
9
+ var RECEIPT_VERSION_V1 = 1;
10
+ var RECEIPT_VERSION_V2 = 2;
11
+ var ZK_JOURNAL_V2_SIZE = 144;
12
+ var ZkVerificationError = class extends Error {
13
+ constructor(message) {
14
+ super(`ZK Verification Failed: ${message}`);
15
+ this.name = "ZkVerificationError";
16
+ }
17
+ };
18
+ function encodeJournalV2(fields) {
19
+ if (fields.guestImageId.length !== 32) {
20
+ throw new ZkVerificationError(
21
+ `Invalid guestImageId size: expected 32 bytes, got ${fields.guestImageId.length}`
22
+ );
23
+ }
24
+ if (fields.logicDigest.length !== 32) {
25
+ throw new ZkVerificationError(
26
+ `Invalid logicDigest size: expected 32 bytes, got ${fields.logicDigest.length}`
27
+ );
28
+ }
29
+ if (fields.datasetDigest.length !== 32) {
30
+ throw new ZkVerificationError(
31
+ `Invalid datasetDigest size: expected 32 bytes, got ${fields.datasetDigest.length}`
32
+ );
33
+ }
34
+ if (fields.outputDigest.length !== 32) {
35
+ throw new ZkVerificationError(
36
+ `Invalid outputDigest size: expected 32 bytes, got ${fields.outputDigest.length}`
37
+ );
38
+ }
39
+ const buf = Buffer.alloc(ZK_JOURNAL_V2_SIZE);
40
+ fields.guestImageId.copy(buf, 0);
41
+ fields.logicDigest.copy(buf, 32);
42
+ fields.datasetDigest.copy(buf, 64);
43
+ fields.outputDigest.copy(buf, 96);
44
+ buf.writeBigUInt64BE(BigInt(fields.fuelConsumed), 128);
45
+ buf.writeBigUInt64BE(BigInt(fields.executionTimestamp), 136);
46
+ return buf;
47
+ }
48
+ function decodeJournalV2(buf) {
49
+ if (buf.length !== ZK_JOURNAL_V2_SIZE) {
50
+ throw new ZkVerificationError(
51
+ `Invalid ZkJournalV2 size: expected ${ZK_JOURNAL_V2_SIZE} bytes, got ${buf.length}`
52
+ );
53
+ }
54
+ return {
55
+ guestImageId: Buffer.from(buf.subarray(0, 32)),
56
+ logicDigest: Buffer.from(buf.subarray(32, 64)),
57
+ datasetDigest: Buffer.from(buf.subarray(64, 96)),
58
+ outputDigest: Buffer.from(buf.subarray(96, 128)),
59
+ fuelConsumed: buf.readBigUInt64BE(128),
60
+ executionTimestamp: buf.readBigUInt64BE(136)
61
+ };
62
+ }
63
+ var receiptCodec = {
64
+ /**
65
+ * Encodes a version 2 Binary Receipt with trailing SHA-256 checksum.
66
+ * Layout: [0x02][proofType: 1B][journalLen: 4B UInt32BE][journal][proof][checksum: 32B]
67
+ */
68
+ encodeV2(proofType, journal, proof) {
69
+ const header = Buffer.alloc(6);
70
+ header.writeUInt8(RECEIPT_VERSION_V2, 0);
71
+ header.writeUInt8(proofType, 1);
72
+ header.writeUInt32BE(journal.length, 2);
73
+ const payload = Buffer.concat([header, journal, proof]);
74
+ const checksum = crypto.createHash("sha256").update(payload).digest();
75
+ return Buffer.concat([payload, checksum]);
76
+ },
77
+ /**
78
+ * Decodes any LIOP Binary Receipt (v1 HMAC or v2 ZK).
79
+ */
80
+ decode(raw) {
81
+ if (!raw || raw.length === 0) {
82
+ throw new ZkVerificationError(
83
+ "Empty or malformed zero-knowledge proof array."
84
+ );
85
+ }
86
+ const version = raw[0];
87
+ if (version === RECEIPT_VERSION_V1) {
88
+ if (raw.length < 35) {
89
+ throw new ZkVerificationError(
90
+ "Malformed receipt: invalid header or length."
91
+ );
92
+ }
93
+ const journalLen = raw.readUInt16BE(1);
94
+ if (raw.length < 3 + journalLen + 32) {
95
+ throw new ZkVerificationError(
96
+ "Malformed receipt: truncated journal or seal."
97
+ );
98
+ }
99
+ const journal = Buffer.from(raw.subarray(3, 3 + journalLen));
100
+ const seal = Buffer.from(
101
+ raw.subarray(3 + journalLen, 3 + journalLen + 32)
102
+ );
103
+ return {
104
+ version: RECEIPT_VERSION_V1,
105
+ proofType: 0 /* HMAC_LEGACY */,
106
+ journal,
107
+ proof: seal,
108
+ raw
109
+ };
110
+ }
111
+ if (version === RECEIPT_VERSION_V2) {
112
+ if (raw.length < 38) {
113
+ throw new ZkVerificationError(
114
+ "Malformed receipt v2: buffer too short (< 38 bytes)."
115
+ );
116
+ }
117
+ const proofType = raw[1];
118
+ const journalLen = raw.readUInt32BE(2);
119
+ if (raw.length < 6 + journalLen + 32) {
120
+ throw new ZkVerificationError(
121
+ "Malformed receipt v2: truncated payload."
122
+ );
123
+ }
124
+ const payload = raw.subarray(0, raw.length - 32);
125
+ const expectedChecksum = raw.subarray(raw.length - 32);
126
+ const actualChecksum = crypto.createHash("sha256").update(payload).digest();
127
+ if (!crypto.timingSafeEqual(expectedChecksum, actualChecksum)) {
128
+ throw new ZkVerificationError("Receipt checksum verification failed.");
129
+ }
130
+ const journal = Buffer.from(raw.subarray(6, 6 + journalLen));
131
+ const proof = Buffer.from(raw.subarray(6 + journalLen, raw.length - 32));
132
+ return {
133
+ version: RECEIPT_VERSION_V2,
134
+ proofType,
135
+ journal,
136
+ proof,
137
+ raw
138
+ };
139
+ }
140
+ throw new ZkVerificationError(
141
+ `Unsupported receipt version: 0x${version.toString(16)}`
142
+ );
143
+ }
144
+ };
145
+ var ZkVerifier = {
146
+ /**
147
+ * Validates a ZK receipt using structural Binary Receipt verification.
148
+ * Parses the HMAC-SHA256 commitment format (v1) and verifies journal integrity.
149
+ *
150
+ * @param receipt - Complete ZkReceipt to verify
151
+ * @param expectedImageId - Hash or ImageID of the WASM file dispatched to the host
152
+ * @throws ZkVerificationError if the proof is invalid or image IDs mismatch
153
+ * @returns true if the proof mathematically verifies the execution
154
+ */
155
+ verify(receipt, expectedImageId, sessionSecret) {
156
+ if (!receipt.imageId.equals(expectedImageId)) {
157
+ throw new ZkVerificationError(
158
+ "ImageID mismatch. The remote origin executed a different WASM payload."
159
+ );
160
+ }
161
+ if (receipt.proof.length === 0) {
162
+ throw new ZkVerificationError(
163
+ "Empty or malformed zero-knowledge proof array."
164
+ );
165
+ }
166
+ const proofBuf = Buffer.from(receipt.proof);
167
+ if (proofBuf.length < 35 || proofBuf[0] !== 1) {
168
+ throw new ZkVerificationError(
169
+ "Malformed receipt: invalid header or length."
170
+ );
171
+ }
172
+ const journalLen = proofBuf.readUInt16BE(1);
173
+ const journal = proofBuf.subarray(3, 3 + journalLen);
174
+ const seal = proofBuf.subarray(3 + journalLen);
175
+ if (seal.length !== 32) {
176
+ throw new ZkVerificationError(
177
+ "Invalid seal: expected 32-byte HMAC-SHA256."
178
+ );
179
+ }
180
+ try {
181
+ const journalData = JSON.parse(journal.toString());
182
+ if (journalData.image_id !== receipt.imageId.toString("hex")) {
183
+ throw new ZkVerificationError(
184
+ "Journal imageId does not match receipt header."
185
+ );
186
+ }
187
+ } catch (_e) {
188
+ throw new ZkVerificationError("Failed to parse journal data.");
189
+ }
190
+ if (sessionSecret && sessionSecret.length > 0) {
191
+ const expectedSeal = crypto.createHmac("sha256", sessionSecret).update(journal).digest();
192
+ if (!crypto.timingSafeEqual(seal, expectedSeal)) {
193
+ throw new ZkVerificationError(
194
+ "Invalid seal: HMAC verification failed."
195
+ );
196
+ }
197
+ }
198
+ return true;
199
+ },
200
+ /**
201
+ * Derives a predictable ImageID (usually a Hash) from a raw WASM binary.
202
+ *
203
+ * @param wasmBytes - The raw bytes of the WASM logic file
204
+ * @returns The SHA-256 ImageID of the logic
205
+ */
206
+ deriveImageId(wasmBytes) {
207
+ return crypto.createHash("sha256").update(wasmBytes).digest();
208
+ }
209
+ };
210
+
211
+ export { ProofType, RECEIPT_VERSION_V1, RECEIPT_VERSION_V2, ZK_JOURNAL_V2_SIZE, ZkVerificationError, ZkVerifier, decodeJournalV2, encodeJournalV2, receiptCodec };
212
+ //# sourceMappingURL=chunk-P34HDRN5.js.map
213
+ //# sourceMappingURL=chunk-P34HDRN5.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/security/zk.ts"],"names":["ProofType"],"mappings":";;;AAKO,IAAK,SAAA,qBAAAA,UAAAA,KAAL;AACN,EAAAA,UAAAA,CAAAA,UAAAA,CAAA,iBAAc,CAAA,CAAA,GAAd,aAAA;AACA,EAAAA,UAAAA,CAAAA,UAAAA,CAAA,aAAU,CAAA,CAAA,GAAV,SAAA;AAFW,EAAA,OAAAA,UAAAA;AAAA,CAAA,EAAA,SAAA,IAAA,EAAA;AAKL,IAAM,kBAAA,GAAqB;AAC3B,IAAM,kBAAA,GAAqB;AAC3B,IAAM,kBAAA,GAAqB;AAgC3B,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC9C,YAAY,OAAA,EAAiB;AAC5B,IAAA,KAAA,CAAM,CAAA,wBAAA,EAA2B,OAAO,CAAA,CAAE,CAAA;AAC1C,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACb;AACD;AAKO,SAAS,gBAAgB,MAAA,EAA6B;AAC5D,EAAA,IAAI,MAAA,CAAO,YAAA,CAAa,MAAA,KAAW,EAAA,EAAI;AACtC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,kDAAA,EAAqD,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA;AAAA,KAChF;AAAA,EACD;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,CAAY,MAAA,KAAW,EAAA,EAAI;AACrC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,iDAAA,EAAoD,MAAA,CAAO,WAAA,CAAY,MAAM,CAAA;AAAA,KAC9E;AAAA,EACD;AACA,EAAA,IAAI,MAAA,CAAO,aAAA,CAAc,MAAA,KAAW,EAAA,EAAI;AACvC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,mDAAA,EAAsD,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA;AAAA,KAClF;AAAA,EACD;AACA,EAAA,IAAI,MAAA,CAAO,YAAA,CAAa,MAAA,KAAW,EAAA,EAAI;AACtC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,kDAAA,EAAqD,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA;AAAA,KAChF;AAAA,EACD;AAEA,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,kBAAkB,CAAA;AAC3C,EAAA,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,GAAA,EAAK,CAAC,CAAA;AAC/B,EAAA,MAAA,CAAO,WAAA,CAAY,IAAA,CAAK,GAAA,EAAK,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,EAAE,CAAA;AACjC,EAAA,MAAA,CAAO,YAAA,CAAa,IAAA,CAAK,GAAA,EAAK,EAAE,CAAA;AAChC,EAAA,GAAA,CAAI,gBAAA,CAAiB,MAAA,CAAO,MAAA,CAAO,YAAY,GAAG,GAAG,CAAA;AACrD,EAAA,GAAA,CAAI,gBAAA,CAAiB,MAAA,CAAO,MAAA,CAAO,kBAAkB,GAAG,GAAG,CAAA;AAE3D,EAAA,OAAO,GAAA;AACR;AAKO,SAAS,gBAAgB,GAAA,EAA0B;AACzD,EAAA,IAAI,GAAA,CAAI,WAAW,kBAAA,EAAoB;AACtC,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,mCAAA,EAAsC,kBAAkB,CAAA,YAAA,EAAe,GAAA,CAAI,MAAM,CAAA;AAAA,KAClF;AAAA,EACD;AAEA,EAAA,OAAO;AAAA,IACN,cAAc,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,IAC7C,aAAa,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,IAC7C,eAAe,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,IAC/C,cAAc,MAAA,CAAO,IAAA,CAAK,IAAI,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA;AAAA,IAC/C,YAAA,EAAc,GAAA,CAAI,eAAA,CAAgB,GAAG,CAAA;AAAA,IACrC,kBAAA,EAAoB,GAAA,CAAI,eAAA,CAAgB,GAAG;AAAA,GAC5C;AACD;AAUO,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,QAAA,CAAS,SAAA,EAAsB,OAAA,EAAiB,KAAA,EAAuB;AACtE,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA;AAC7B,IAAA,MAAA,CAAO,UAAA,CAAW,oBAAoB,CAAC,CAAA;AACvC,IAAA,MAAA,CAAO,UAAA,CAAW,WAAW,CAAC,CAAA;AAC9B,IAAA,MAAA,CAAO,aAAA,CAAc,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAEtC,IAAA,MAAM,UAAU,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,EAAQ,OAAA,EAAS,KAAK,CAAC,CAAA;AACtD,IAAA,MAAM,QAAA,GAAW,OAAO,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAO,OAAO,EAAE,MAAA,EAAO;AAEpE,IAAA,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,OAAA,EAAS,QAAQ,CAAC,CAAA;AAAA,EACzC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAA6B;AACnC,IAAA,IAAI,CAAC,GAAA,IAAO,GAAA,CAAI,MAAA,KAAW,CAAA,EAAG;AAC7B,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,CAAC,CAAA;AAErB,IAAA,IAAI,YAAY,kBAAA,EAAoB;AACnC,MAAA,IAAI,GAAA,CAAI,SAAS,EAAA,EAAI;AACpB,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AACA,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,YAAA,CAAa,CAAC,CAAA;AACrC,MAAA,IAAI,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,EAAA,EAAI;AACrC,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AACA,MAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,EAAG,CAAA,GAAI,UAAU,CAAC,CAAA;AAC3D,MAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AAAA,QACnB,IAAI,QAAA,CAAS,CAAA,GAAI,UAAA,EAAY,CAAA,GAAI,aAAa,EAAE;AAAA,OACjD;AAEA,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,kBAAA;AAAA,QACT,SAAA,EAAW,CAAA;AAAA,QACX,OAAA;AAAA,QACA,KAAA,EAAO,IAAA;AAAA,QACP;AAAA,OACD;AAAA,IACD;AAEA,IAAA,IAAI,YAAY,kBAAA,EAAoB;AAEnC,MAAA,IAAI,GAAA,CAAI,SAAS,EAAA,EAAI;AACpB,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,SAAA,GAAY,IAAI,CAAC,CAAA;AACvB,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,YAAA,CAAa,CAAC,CAAA;AAErC,MAAA,IAAI,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,EAAA,EAAI;AACrC,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,UAAU,GAAA,CAAI,QAAA,CAAS,CAAA,EAAG,GAAA,CAAI,SAAS,EAAE,CAAA;AAC/C,MAAA,MAAM,gBAAA,GAAmB,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,SAAS,EAAE,CAAA;AACrD,MAAA,MAAM,cAAA,GAAiB,OACrB,UAAA,CAAW,QAAQ,EACnB,MAAA,CAAO,OAAO,EACd,MAAA,EAAO;AAET,MAAA,IAAI,CAAC,MAAA,CAAO,eAAA,CAAgB,gBAAA,EAAkB,cAAc,CAAA,EAAG;AAC9D,QAAA,MAAM,IAAI,oBAAoB,uCAAuC,CAAA;AAAA,MACtE;AAEA,MAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,EAAG,CAAA,GAAI,UAAU,CAAC,CAAA;AAC3D,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,IAAI,UAAA,EAAY,GAAA,CAAI,MAAA,GAAS,EAAE,CAAC,CAAA;AAEvE,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,kBAAA;AAAA,QACT,SAAA;AAAA,QACA,OAAA;AAAA,QACA,KAAA;AAAA,QACA;AAAA,OACD;AAAA,IACD;AAEA,IAAA,MAAM,IAAI,mBAAA;AAAA,MACT,CAAA,+BAAA,EAAkC,OAAA,CAAQ,QAAA,CAAS,EAAE,CAAC,CAAA;AAAA,KACvD;AAAA,EACD;AACD;AASO,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUzB,MAAA,CACC,OAAA,EACA,eAAA,EACA,aAAA,EACU;AAEV,IAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,eAAe,CAAA,EAAG;AAC7C,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,IAAI,OAAA,CAAQ,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG;AAC/B,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA;AAC1C,IAAA,IAAI,SAAS,MAAA,GAAS,EAAA,IAAM,QAAA,CAAS,CAAC,MAAM,CAAA,EAAM;AACjD,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AACA,IAAA,MAAM,UAAA,GAAa,QAAA,CAAS,YAAA,CAAa,CAAC,CAAA;AAC1C,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,QAAA,CAAS,CAAA,EAAG,IAAI,UAAU,CAAA;AACnD,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,QAAA,CAAS,CAAA,GAAI,UAAU,CAAA;AAE7C,IAAA,IAAI,IAAA,CAAK,WAAW,EAAA,EAAI;AACvB,MAAA,MAAM,IAAI,mBAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,IAAI;AACH,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA;AACjD,MAAA,IAAI,YAAY,QAAA,KAAa,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,KAAK,CAAA,EAAG;AAC7D,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAAA,IACD,SAAS,EAAA,EAAI;AACZ,MAAA,MAAM,IAAI,oBAAoB,+BAA+B,CAAA;AAAA,IAC9D;AAGA,IAAA,IAAI,aAAA,IAAiB,aAAA,CAAc,MAAA,GAAS,CAAA,EAAG;AAC9C,MAAA,MAAM,YAAA,GAAe,OACnB,UAAA,CAAW,QAAA,EAAU,aAAa,CAAA,CAClC,MAAA,CAAO,OAAO,CAAA,CACd,MAAA,EAAO;AACT,MAAA,IAAI,CAAC,MAAA,CAAO,eAAA,CAAgB,IAAA,EAAM,YAAY,CAAA,EAAG;AAChD,QAAA,MAAM,IAAI,mBAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,IAAA;AAAA,EACR,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,cAAc,SAAA,EAA2B;AACxC,IAAA,OAAO,OAAO,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAO,SAAS,EAAE,MAAA,EAAO;AAAA,EAC7D;AACD","file":"chunk-P34HDRN5.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport crypto from \"node:crypto\";\n\nexport enum ProofType {\n\tHMAC_LEGACY = 0x00,\n\tGROTH16 = 0x02,\n}\n\nexport const RECEIPT_VERSION_V1 = 0x01;\nexport const RECEIPT_VERSION_V2 = 0x02;\nexport const ZK_JOURNAL_V2_SIZE = 144;\n\nexport interface ZkJournalV2 {\n\t/** Image ID (SHA-256) of the guest interpreter */\n\tguestImageId: Buffer;\n\t/** SHA-256 digest of injected logic */\n\tlogicDigest: Buffer;\n\t/** SHA-256 digest of dataset records */\n\tdatasetDigest: Buffer;\n\t/** SHA-256 digest of sanitized output */\n\toutputDigest: Buffer;\n\t/** Micro-instruction fuel consumed */\n\tfuelConsumed: bigint;\n\t/** Timestamp in milliseconds since unix epoch */\n\texecutionTimestamp: bigint;\n}\n\nexport type ZkPolicy = \"none\" | \"optimistic\" | \"required\";\n\nexport interface ZkReceipt {\n\t/** Cryptographic proof generated by a zero-knowledge VM (e.g., RISC Zero, SP1) or Groth16 */\n\tproof: Buffer;\n\t/** The public inputs/outputs of the execution (the \"Journal\" in RISC Zero terminology) */\n\tjournal: Buffer;\n\t/** The expected image ID / verification key of the WASM binary that was executed */\n\timageId: Buffer;\n\t/** Type of cryptographic proof (HMAC legacy or Groth16) */\n\tproofType?: ProofType;\n\t/** Binary receipt version (0x01 or 0x02) */\n\tversion?: number;\n}\n\nexport class ZkVerificationError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(`ZK Verification Failed: ${message}`);\n\t\tthis.name = \"ZkVerificationError\";\n\t}\n}\n\n/**\n * Serializes a structured ZkJournalV2 into a strictly validated 144-byte binary layout.\n */\nexport function encodeJournalV2(fields: ZkJournalV2): Buffer {\n\tif (fields.guestImageId.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid guestImageId size: expected 32 bytes, got ${fields.guestImageId.length}`,\n\t\t);\n\t}\n\tif (fields.logicDigest.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid logicDigest size: expected 32 bytes, got ${fields.logicDigest.length}`,\n\t\t);\n\t}\n\tif (fields.datasetDigest.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid datasetDigest size: expected 32 bytes, got ${fields.datasetDigest.length}`,\n\t\t);\n\t}\n\tif (fields.outputDigest.length !== 32) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid outputDigest size: expected 32 bytes, got ${fields.outputDigest.length}`,\n\t\t);\n\t}\n\n\tconst buf = Buffer.alloc(ZK_JOURNAL_V2_SIZE);\n\tfields.guestImageId.copy(buf, 0);\n\tfields.logicDigest.copy(buf, 32);\n\tfields.datasetDigest.copy(buf, 64);\n\tfields.outputDigest.copy(buf, 96);\n\tbuf.writeBigUInt64BE(BigInt(fields.fuelConsumed), 128);\n\tbuf.writeBigUInt64BE(BigInt(fields.executionTimestamp), 136);\n\n\treturn buf;\n}\n\n/**\n * Deserializes and validates a 144-byte binary buffer into a typed ZkJournalV2.\n */\nexport function decodeJournalV2(buf: Buffer): ZkJournalV2 {\n\tif (buf.length !== ZK_JOURNAL_V2_SIZE) {\n\t\tthrow new ZkVerificationError(\n\t\t\t`Invalid ZkJournalV2 size: expected ${ZK_JOURNAL_V2_SIZE} bytes, got ${buf.length}`,\n\t\t);\n\t}\n\n\treturn {\n\t\tguestImageId: Buffer.from(buf.subarray(0, 32)),\n\t\tlogicDigest: Buffer.from(buf.subarray(32, 64)),\n\t\tdatasetDigest: Buffer.from(buf.subarray(64, 96)),\n\t\toutputDigest: Buffer.from(buf.subarray(96, 128)),\n\t\tfuelConsumed: buf.readBigUInt64BE(128),\n\t\texecutionTimestamp: buf.readBigUInt64BE(136),\n\t};\n}\n\nexport interface DecodedReceipt {\n\tversion: number;\n\tproofType: ProofType;\n\tjournal: Buffer;\n\tproof: Buffer;\n\traw: Buffer;\n}\n\nexport const receiptCodec = {\n\t/**\n\t * Encodes a version 2 Binary Receipt with trailing SHA-256 checksum.\n\t * Layout: [0x02][proofType: 1B][journalLen: 4B UInt32BE][journal][proof][checksum: 32B]\n\t */\n\tencodeV2(proofType: ProofType, journal: Buffer, proof: Buffer): Buffer {\n\t\tconst header = Buffer.alloc(6);\n\t\theader.writeUInt8(RECEIPT_VERSION_V2, 0);\n\t\theader.writeUInt8(proofType, 1);\n\t\theader.writeUInt32BE(journal.length, 2);\n\n\t\tconst payload = Buffer.concat([header, journal, proof]);\n\t\tconst checksum = crypto.createHash(\"sha256\").update(payload).digest();\n\n\t\treturn Buffer.concat([payload, checksum]);\n\t},\n\n\t/**\n\t * Decodes any LIOP Binary Receipt (v1 HMAC or v2 ZK).\n\t */\n\tdecode(raw: Buffer): DecodedReceipt {\n\t\tif (!raw || raw.length === 0) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Empty or malformed zero-knowledge proof array.\",\n\t\t\t);\n\t\t}\n\n\t\tconst version = raw[0];\n\n\t\tif (version === RECEIPT_VERSION_V1) {\n\t\t\tif (raw.length < 35) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt: invalid header or length.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst journalLen = raw.readUInt16BE(1);\n\t\t\tif (raw.length < 3 + journalLen + 32) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt: truncated journal or seal.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst journal = Buffer.from(raw.subarray(3, 3 + journalLen));\n\t\t\tconst seal = Buffer.from(\n\t\t\t\traw.subarray(3 + journalLen, 3 + journalLen + 32),\n\t\t\t);\n\n\t\t\treturn {\n\t\t\t\tversion: RECEIPT_VERSION_V1,\n\t\t\t\tproofType: ProofType.HMAC_LEGACY,\n\t\t\t\tjournal,\n\t\t\t\tproof: seal,\n\t\t\t\traw,\n\t\t\t};\n\t\t}\n\n\t\tif (version === RECEIPT_VERSION_V2) {\n\t\t\t// Minimum size: 1 (version) + 1 (proofType) + 4 (journalLen) + 0 (journal) + 0 (proof) + 32 (checksum) = 38\n\t\t\tif (raw.length < 38) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt v2: buffer too short (< 38 bytes).\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst proofType = raw[1] as ProofType;\n\t\t\tconst journalLen = raw.readUInt32BE(2);\n\n\t\t\tif (raw.length < 6 + journalLen + 32) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Malformed receipt v2: truncated payload.\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst payload = raw.subarray(0, raw.length - 32);\n\t\t\tconst expectedChecksum = raw.subarray(raw.length - 32);\n\t\t\tconst actualChecksum = crypto\n\t\t\t\t.createHash(\"sha256\")\n\t\t\t\t.update(payload)\n\t\t\t\t.digest();\n\n\t\t\tif (!crypto.timingSafeEqual(expectedChecksum, actualChecksum)) {\n\t\t\t\tthrow new ZkVerificationError(\"Receipt checksum verification failed.\");\n\t\t\t}\n\n\t\t\tconst journal = Buffer.from(raw.subarray(6, 6 + journalLen));\n\t\t\tconst proof = Buffer.from(raw.subarray(6 + journalLen, raw.length - 32));\n\n\t\t\treturn {\n\t\t\t\tversion: RECEIPT_VERSION_V2,\n\t\t\t\tproofType,\n\t\t\t\tjournal,\n\t\t\t\tproof,\n\t\t\t\traw,\n\t\t\t};\n\t\t}\n\n\t\tthrow new ZkVerificationError(\n\t\t\t`Unsupported receipt version: 0x${version.toString(16)}`,\n\t\t);\n\t},\n};\n\n/**\n * ZK-Proofs Verifier for Logic-Injection-on-Origin Protocol (LIOP)\n *\n * Validates that an executed Logic (WASM) actually produced the reported output,\n * verifying the Zero-Knowledge receipt generated by the remote host's Trusted Execution\n * Environment (TEE) or zkVM (Zero-Knowledge Virtual Machine).\n */\nexport const ZkVerifier = {\n\t/**\n\t * Validates a ZK receipt using structural Binary Receipt verification.\n\t * Parses the HMAC-SHA256 commitment format (v1) and verifies journal integrity.\n\t *\n\t * @param receipt - Complete ZkReceipt to verify\n\t * @param expectedImageId - Hash or ImageID of the WASM file dispatched to the host\n\t * @throws ZkVerificationError if the proof is invalid or image IDs mismatch\n\t * @returns true if the proof mathematically verifies the execution\n\t */\n\tverify(\n\t\treceipt: ZkReceipt,\n\t\texpectedImageId: Buffer,\n\t\tsessionSecret?: Buffer,\n\t): boolean {\n\t\t// 1. Verify Image ID (Ensures the host executed the exact logic we sent, not a malicious one)\n\t\tif (!receipt.imageId.equals(expectedImageId)) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"ImageID mismatch. The remote origin executed a different WASM payload.\",\n\t\t\t);\n\t\t}\n\n\t\t// 2. Validate Proof Structure\n\t\tif (receipt.proof.length === 0) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Empty or malformed zero-knowledge proof array.\",\n\t\t\t);\n\t\t}\n\n\t\t// 3. Cryptographic Validation (Binary Receipt)\n\t\tconst proofBuf = Buffer.from(receipt.proof);\n\t\tif (proofBuf.length < 35 || proofBuf[0] !== 0x01) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Malformed receipt: invalid header or length.\",\n\t\t\t);\n\t\t}\n\t\tconst journalLen = proofBuf.readUInt16BE(1);\n\t\tconst journal = proofBuf.subarray(3, 3 + journalLen);\n\t\tconst seal = proofBuf.subarray(3 + journalLen);\n\n\t\tif (seal.length !== 32) {\n\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\"Invalid seal: expected 32-byte HMAC-SHA256.\",\n\t\t\t);\n\t\t}\n\n\t\t// Verify journal contains matching imageId\n\t\ttry {\n\t\t\tconst journalData = JSON.parse(journal.toString());\n\t\t\tif (journalData.image_id !== receipt.imageId.toString(\"hex\")) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Journal imageId does not match receipt header.\",\n\t\t\t\t);\n\t\t\t}\n\t\t} catch (_e) {\n\t\t\tthrow new ZkVerificationError(\"Failed to parse journal data.\");\n\t\t}\n\n\t\t// 4. Mathematical Verification (HMAC-SHA256)\n\t\tif (sessionSecret && sessionSecret.length > 0) {\n\t\t\tconst expectedSeal = crypto\n\t\t\t\t.createHmac(\"sha256\", sessionSecret)\n\t\t\t\t.update(journal)\n\t\t\t\t.digest();\n\t\t\tif (!crypto.timingSafeEqual(seal, expectedSeal)) {\n\t\t\t\tthrow new ZkVerificationError(\n\t\t\t\t\t\"Invalid seal: HMAC verification failed.\",\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t},\n\n\t/**\n\t * Derives a predictable ImageID (usually a Hash) from a raw WASM binary.\n\t *\n\t * @param wasmBytes - The raw bytes of the WASM logic file\n\t * @returns The SHA-256 ImageID of the logic\n\t */\n\tderiveImageId(wasmBytes: Buffer): Buffer {\n\t\treturn crypto.createHash(\"sha256\").update(wasmBytes).digest();\n\t},\n};\n"]}
@@ -286,12 +286,25 @@ var egressBlocksTotal = protocolMetrics.counter(
286
286
  var zkVerificationDurationMs = protocolMetrics.histogram(
287
287
  "liop_zk_verification_duration_ms",
288
288
  "Duration of ZK-Receipt and HMAC cryptographic attestation in ms",
289
- [1, 2, 5, 10, 25, 50, 100]
289
+ [1, 2, 5, 10, 25, 50, 100, 250, 500]
290
290
  );
291
291
  var zkVerificationsTotal = protocolMetrics.counter(
292
292
  "liop_zk_verifications_total",
293
293
  "Total number of ZK-Receipt cryptographic attestation checks"
294
294
  );
295
+ var zkProofsByTypeTotal = protocolMetrics.counter(
296
+ "liop_zk_proofs_by_type_total",
297
+ "Total number of verified ZK receipts partitioned by proof type (groth16, hmac)"
298
+ );
299
+ var zkProvingDurationMs = protocolMetrics.histogram(
300
+ "liop_zk_proving_duration_ms",
301
+ "Duration of native ZK proof generation in ms",
302
+ [10, 25, 50, 100, 250, 500, 1e3, 2500]
303
+ );
304
+ var zkVkeyCacheSize = protocolMetrics.gauge(
305
+ "liop_zk_vkey_cache_size",
306
+ "Number of registered verification keys in memory cache"
307
+ );
295
308
  var tokensInputTotal = protocolMetrics.counter(
296
309
  "liop_tokens_input_total",
297
310
  "Total BPE input tokens processed by LIOP"
@@ -327,6 +340,6 @@ var wireSavedBytesTotal = protocolMetrics.counter(
327
340
  "Estimated wire egress bytes saved compared to MCP context extraction baseline"
328
341
  );
329
342
 
330
- export { Counter, Gauge, Histogram, MetricsRegistry, egressBlocksTotal, fuelConsumed, manifestCacheSize, meshPeersConnected, operationDurationMs, pqcHandshakeDurationMs, pqcHandshakesTotal, protocolMetrics, tokensInputTotal, tokensOutputTotal, tokensSavedTotal, toolCallErrorsTotal, toolCallsTotal, wireEgressBytesTotal, wireSavedBytesTotal, zkVerificationDurationMs, zkVerificationsTotal };
331
- //# sourceMappingURL=chunk-PAICJCKJ.js.map
332
- //# sourceMappingURL=chunk-PAICJCKJ.js.map
343
+ export { Counter, Gauge, Histogram, MetricsRegistry, egressBlocksTotal, fuelConsumed, manifestCacheSize, meshPeersConnected, operationDurationMs, pqcHandshakeDurationMs, pqcHandshakesTotal, protocolMetrics, tokensInputTotal, tokensOutputTotal, tokensSavedTotal, toolCallErrorsTotal, toolCallsTotal, wireEgressBytesTotal, wireSavedBytesTotal, zkProofsByTypeTotal, zkProvingDurationMs, zkVerificationDurationMs, zkVerificationsTotal, zkVkeyCacheSize };
344
+ //# sourceMappingURL=chunk-Q3FKHJ3B.js.map
345
+ //# sourceMappingURL=chunk-Q3FKHJ3B.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/observability/metrics.ts"],"names":[],"mappings":";AAkBA,SAAS,aAAa,MAAA,EAA+B;AACpD,EAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,WAAW,CAAA,EAAG;AAChD,IAAA,OAAO,EAAA;AAAA,EACR;AACA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,MAAM,EACnC,IAAA,CAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,KAAM,CAAA,CAAE,cAAc,CAAC,CAAC,CAAA,CACrC,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,MAAM,CAAA,EAAG,CAAC,CAAA,EAAA,EAAK,MAAA,CAAO,CAAC,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,KAAK,CAAC,CAAA,CAAA,CAAG,CAAA;AAC5D,EAAA,OAAO,CAAA,CAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAC7B;AAEA,SAAS,YAAY,MAAA,EAA+B;AACnD,EAAA,IAAI,CAAC,QAAQ,OAAO,EAAA;AACpB,EAAA,OAAO,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,CAC1B,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA,EAAG,CAAC,CAAC,CAAA,KAAM,EAAE,aAAA,CAAc,CAAC,CAAC,CAAA,CACrC,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE,CAAA,CAC3B,KAAK,GAAG,CAAA;AACX;AAEO,IAAM,UAAN,MAAc;AAAA,EAGpB,WAAA,CACiB,MACA,IAAA,EACf;AAFe,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EACd;AAAA,EAFc,IAAA;AAAA,EACA,IAAA;AAAA,EAJT,MAAA,uBAAa,GAAA,EAAsD;AAAA,EAO3E,GAAA,CAAI,MAAA,EAAuB,KAAA,GAAQ,CAAA,EAAS;AAC3C,IAAA,IAAI,QAAQ,CAAA,EAAG;AACd,MAAA,MAAM,IAAI,MAAM,yCAAyC,CAAA;AAAA,IAC1D;AACA,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,MAAM,OAAA,GAAU,KAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,IAAK,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAO;AAC3D,IAAA,OAAA,CAAQ,KAAA,IAAS,KAAA;AACjB,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEA,IAAI,MAAA,EAA+B;AAClC,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,GAAG,KAAA,IAAS,CAAA;AAAA,EACvC;AAAA,EAEA,KAAA,GAAc;AACb,IAAA,IAAA,CAAK,OAAO,KAAA,EAAM;AAAA,EACnB;AAAA,EAEA,YAAA,GAAyB;AACxB,IAAA,MAAM,KAAA,GAAkB;AAAA,MACvB,CAAA,OAAA,EAAU,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,KAAK,IAAI,CAAA,CAAA;AAAA,MAChC,CAAA,OAAA,EAAU,KAAK,IAAI,CAAA,QAAA;AAAA,KACpB;AACA,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,IAAA,KAAS,CAAA,EAAG;AAC3B,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,EAAA,CAAI,CAAA;AAC3B,MAAA,OAAO,KAAA;AAAA,IACR;AACA,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,MAAA,CAAO,MAAA,EAAO,EAAG;AACzC,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,EAAG,YAAA,CAAa,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,KAAA;AAAA,EACR;AACD;AAEO,IAAM,QAAN,MAAY;AAAA,EAGlB,WAAA,CACiB,MACA,IAAA,EACf;AAFe,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EACd;AAAA,EAFc,IAAA;AAAA,EACA,IAAA;AAAA,EAJT,MAAA,uBAAa,GAAA,EAAsD;AAAA,EAO3E,GAAA,CAAI,eAAsC,UAAA,EAA2B;AACpE,IAAA,IAAI,OAAO,kBAAkB,QAAA,EAAU;AACtC,MAAA,IAAA,CAAK,OAAO,GAAA,CAAI,EAAA,EAAI,EAAE,KAAA,EAAO,eAAe,CAAA;AAC5C,MAAA;AAAA,IACD;AACA,IAAA,MAAM,MAAA,GAAS,aAAA;AACf,IAAA,MAAM,GAAA,GAAM,OAAO,UAAA,KAAe,QAAA,GAAW,UAAA,GAAa,CAAA;AAC1D,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,IAAA,CAAK,OAAO,GAAA,CAAI,GAAA,EAAK,EAAE,KAAA,EAAO,GAAA,EAAK,QAAQ,CAAA;AAAA,EAC5C;AAAA,EAEA,GAAA,CAAI,MAAA,EAAuB,KAAA,GAAQ,CAAA,EAAS;AAC3C,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,MAAM,OAAA,GAAU,KAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,IAAK,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAO;AAC3D,IAAA,OAAA,CAAQ,KAAA,IAAS,KAAA;AACjB,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEA,GAAA,CAAI,MAAA,EAAuB,KAAA,GAAQ,CAAA,EAAS;AAC3C,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,MAAM,OAAA,GAAU,KAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,IAAK,EAAE,KAAA,EAAO,CAAA,EAAG,MAAA,EAAO;AAC3D,IAAA,OAAA,CAAQ,KAAA,IAAS,KAAA;AACjB,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEA,IAAI,MAAA,EAA+B;AAClC,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,GAAG,KAAA,IAAS,CAAA;AAAA,EACvC;AAAA,EAEA,KAAA,GAAc;AACb,IAAA,IAAA,CAAK,OAAO,KAAA,EAAM;AAAA,EACnB;AAAA,EAEA,YAAA,GAAyB;AACxB,IAAA,MAAM,KAAA,GAAkB;AAAA,MACvB,CAAA,OAAA,EAAU,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,KAAK,IAAI,CAAA,CAAA;AAAA,MAChC,CAAA,OAAA,EAAU,KAAK,IAAI,CAAA,MAAA;AAAA,KACpB;AACA,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,IAAA,KAAS,CAAA,EAAG;AAC3B,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,EAAA,CAAI,CAAA;AAC3B,MAAA,OAAO,KAAA;AAAA,IACR;AACA,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,MAAA,CAAO,MAAA,EAAO,EAAG;AACzC,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,EAAG,YAAA,CAAa,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAAA,IACtE;AACA,IAAA,OAAO,KAAA;AAAA,EACR;AACD;AAEO,IAAM,YAAN,MAAgB;AAAA,EAYtB,YACiB,IAAA,EACA,IAAA,EAChB,OAAA,GAAoB,CAAC,GAAG,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,GAAA,EAAK,KAAK,GAAA,EAAK,GAAA,EAAM,IAAA,EAAM,GAAA,EAAM,GAAK,CAAA,EACzE;AAHe,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAGhB,IAAA,IAAA,CAAK,OAAA,GAAU,CAAC,GAAG,OAAO,CAAA,CAAE,KAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,GAAI,CAAC,CAAA;AAAA,EACjD;AAAA,EALiB,IAAA;AAAA,EACA,IAAA;AAAA,EAbD,OAAA;AAAA,EACR,YAAA,uBAAmB,GAAA,EAQzB;AAAA,EAUF,OAAA,CAAQ,eAAsC,UAAA,EAA2B;AACxE,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI,GAAA;AAEJ,IAAA,IAAI,OAAO,kBAAkB,QAAA,EAAU;AACtC,MAAA,GAAA,GAAM,aAAA;AAAA,IACP,CAAA,MAAO;AACN,MAAA,MAAA,GAAS,aAAA;AACT,MAAA,GAAA,GAAM,OAAO,UAAA,KAAe,QAAA,GAAW,UAAA,GAAa,CAAA;AAAA,IACrD;AAEA,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,IAAI,KAAA,GAAQ,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,KAAA,EAAO;AACX,MAAA,KAAA,GAAQ;AAAA,QACP,KAAA,EAAO,CAAA;AAAA,QACP,GAAA,EAAK,CAAA;AAAA,QACL,YAAA,EAAc,IAAI,GAAA,CAAI,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,EAAG,CAAC,CAAC,CAAC,CAAA;AAAA,QACrD;AAAA,OACD;AACA,MAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IACjC;AAEA,IAAA,KAAA,CAAM,KAAA,IAAS,CAAA;AACf,IAAA,KAAA,CAAM,GAAA,IAAO,GAAA;AAEb,IAAA,KAAA,MAAW,KAAA,IAAS,KAAK,OAAA,EAAS;AACjC,MAAA,IAAI,OAAO,KAAA,EAAO;AACjB,QAAA,MAAM,GAAA,GAAM,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,KAAK,CAAA,IAAK,CAAA;AAC7C,QAAA,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,GAAA,GAAM,CAAC,CAAA;AAAA,MACtC;AAAA,IACD;AAAA,EACD;AAAA,EAEA,KAAA,GAAc;AACb,IAAA,IAAA,CAAK,aAAa,KAAA,EAAM;AAAA,EACzB;AAAA,EAEA,YAAA,GAAyB;AACxB,IAAA,MAAM,KAAA,GAAkB;AAAA,MACvB,CAAA,OAAA,EAAU,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,KAAK,IAAI,CAAA,CAAA;AAAA,MAChC,CAAA,OAAA,EAAU,KAAK,IAAI,CAAA,UAAA;AAAA,KACpB;AACA,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,IAAA,KAAS,CAAA,EAAG;AACjC,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,QAAA,CAAU,CAAA;AACjC,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,MAAA,CAAQ,CAAA;AAC/B,MAAA,OAAO,KAAA;AAAA,IACR;AAEA,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,YAAA,CAAa,MAAA,EAAO,EAAG;AAC/C,MAAA,MAAM,UAAA,GAAa,KAAA,CAAM,MAAA,IAAU,EAAC;AACpC,MAAA,KAAA,MAAW,KAAA,IAAS,KAAK,OAAA,EAAS;AACjC,QAAA,MAAM,eAAe,EAAE,GAAG,YAAY,EAAA,EAAI,MAAA,CAAO,KAAK,CAAA,EAAE;AACxD,QAAA,KAAA,CAAM,IAAA;AAAA,UACL,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,OAAA,EAAU,YAAA,CAAa,YAAY,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,KAAK,KAAK,CAAC,CAAA;AAAA,SACvF;AAAA,MACD;AACA,MAAA,MAAM,SAAA,GAAY,EAAE,GAAG,UAAA,EAAY,IAAI,MAAA,EAAO;AAC9C,MAAA,KAAA,CAAM,IAAA;AAAA,QACL,CAAA,EAAG,KAAK,IAAI,CAAA,OAAA,EAAU,aAAa,SAAS,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,KAAK,CAAA;AAAA,OAC7D;AACA,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,IAAA,EAAO,YAAA,CAAa,UAAU,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAA;AACrE,MAAA,KAAA,CAAM,IAAA;AAAA,QACL,CAAA,EAAG,KAAK,IAAI,CAAA,MAAA,EAAS,aAAa,UAAU,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,KAAK,CAAA;AAAA,OAC7D;AAAA,IACD;AACA,IAAA,OAAO,KAAA;AAAA,EACR;AACD;AAEO,IAAM,kBAAN,MAAsB;AAAA,EACpB,QAAA,uBAAe,GAAA,EAAqB;AAAA,EACpC,MAAA,uBAAa,GAAA,EAAmB;AAAA,EAChC,UAAA,uBAAiB,GAAA,EAAuB;AAAA,EAEhD,OAAA,CAAQ,MAAc,IAAA,EAAuB;AAC5C,IAAA,IAAI,CAAA,GAAI,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC9B,IAAA,IAAI,CAAC,CAAA,EAAG;AACP,MAAA,CAAA,GAAI,IAAI,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAA;AAC1B,MAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,IAAA,EAAM,CAAC,CAAA;AAAA,IAC1B;AACA,IAAA,OAAO,CAAA;AAAA,EACR;AAAA,EAEA,KAAA,CAAM,MAAc,IAAA,EAAqB;AACxC,IAAA,IAAI,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA;AAC5B,IAAA,IAAI,CAAC,CAAA,EAAG;AACP,MAAA,CAAA,GAAI,IAAI,KAAA,CAAM,IAAA,EAAM,IAAI,CAAA;AACxB,MAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,IAAA,EAAM,CAAC,CAAA;AAAA,IACxB;AACA,IAAA,OAAO,CAAA;AAAA,EACR;AAAA,EAEA,SAAA,CAAU,IAAA,EAAc,IAAA,EAAc,OAAA,EAA+B;AACpE,IAAA,IAAI,CAAA,GAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA;AAChC,IAAA,IAAI,CAAC,CAAA,EAAG;AACP,MAAA,CAAA,GAAI,IAAI,SAAA,CAAU,IAAA,EAAM,IAAA,EAAM,OAAO,CAAA;AACrC,MAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,IAAA,EAAM,CAAC,CAAA;AAAA,IAC5B;AACA,IAAA,OAAO,CAAA;AAAA,EACR;AAAA,EAEA,qBAAA,GAA8B;AAC7B,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA;AAAA,MACnB,6BAAA;AAAA,MACA;AAAA,KACD;AACA,IAAA,MAAA,CAAO,IAAI,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAEvC,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA;AAAA,MACnB,yBAAA;AAAA,MACA;AAAA,KACD;AACA,IAAA,MAAA,CAAO,IAAI,CAAC,CAAA;AAEZ,IAAA,IAAI,OAAO,OAAA,CAAQ,WAAA,KAAgB,UAAA,EAAY;AAC9C,MAAA,MAAM,GAAA,GAAM,QAAQ,WAAA,EAAY;AAChC,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA;AAAA,QAChB,+BAAA;AAAA,QACA;AAAA,OACD;AACA,MAAA,GAAA,CAAI,GAAA,CAAI,IAAI,GAAG,CAAA;AAEf,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AAAA,QACrB,qCAAA;AAAA,QACA;AAAA,OACD;AACA,MAAA,QAAA,CAAS,GAAA,CAAI,IAAI,QAAQ,CAAA;AAEzB,MAAA,MAAM,YAAY,IAAA,CAAK,KAAA;AAAA,QACtB,sCAAA;AAAA,QACA;AAAA,OACD;AACA,MAAA,SAAA,CAAU,GAAA,CAAI,IAAI,SAAS,CAAA;AAE3B,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AAAA,QACrB,oCAAA;AAAA,QACA;AAAA,OACD;AACA,MAAA,QAAA,CAAS,GAAA,CAAI,IAAI,QAAQ,CAAA;AAAA,IAC1B;AAAA,EACD;AAAA,EAEA,oBAAA,GAA+B;AAC9B,IAAA,IAAA,CAAK,qBAAA,EAAsB;AAE3B,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,MAAA,EAAO,EAAG;AACvC,MAAA,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA,CAAE,YAAA,EAAc,CAAA;AAAA,IAC/B;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,MAAA,CAAO,MAAA,EAAO,EAAG;AACrC,MAAA,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA,CAAE,YAAA,EAAc,CAAA;AAAA,IAC/B;AACA,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,MAAA,EAAO,EAAG;AACzC,MAAA,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA,CAAE,YAAA,EAAc,CAAA;AAAA,IAC/B;AACA,IAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,IAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AAAA,EACvB;AAAA,EAEA,QAAA,GAAiB;AAChB,IAAA,KAAA,MAAW,KAAK,IAAA,CAAK,QAAA,CAAS,MAAA,EAAO,IAAK,KAAA,EAAM;AAChD,IAAA,KAAA,MAAW,KAAK,IAAA,CAAK,MAAA,CAAO,MAAA,EAAO,IAAK,KAAA,EAAM;AAC9C,IAAA,KAAA,MAAW,KAAK,IAAA,CAAK,UAAA,CAAW,MAAA,EAAO,IAAK,KAAA,EAAM;AAAA,EACnD;AACD;AAIO,IAAM,eAAA,GAAkB,IAAI,eAAA;AAE5B,IAAM,iBAAiB,eAAA,CAAgB,OAAA;AAAA,EAC7C,uBAAA;AAAA,EACA;AACD;AAEO,IAAM,sBAAsB,eAAA,CAAgB,OAAA;AAAA,EAClD,6BAAA;AAAA,EACA;AACD;AAEO,IAAM,eAAe,eAAA,CAAgB,SAAA;AAAA,EAC3C,0BAAA;AAAA,EACA,qDAAA;AAAA,EACA,CAAC,KAAK,GAAA,EAAK,GAAA,EAAM,MAAM,GAAA,EAAM,GAAA,EAAO,KAAO,GAAM;AAClD;AAEO,IAAM,qBAAqB,eAAA,CAAgB,KAAA;AAAA,EACjD,2BAAA;AAAA,EACA;AACD;AAEO,IAAM,oBAAoB,eAAA,CAAgB,KAAA;AAAA,EAChD,0BAAA;AAAA,EACA;AACD;AAEO,IAAM,oBAAoB,eAAA,CAAgB,OAAA;AAAA,EAChD,0BAAA;AAAA,EACA;AACD;AAEO,IAAM,2BAA2B,eAAA,CAAgB,SAAA;AAAA,EACvD,kCAAA;AAAA,EACA,iEAAA;AAAA,EACA,CAAC,GAAG,CAAA,EAAG,CAAA,EAAG,IAAI,EAAA,EAAI,EAAA,EAAI,GAAA,EAAK,GAAA,EAAK,GAAG;AACpC;AAEO,IAAM,uBAAuB,eAAA,CAAgB,OAAA;AAAA,EACnD,6BAAA;AAAA,EACA;AACD;AAEO,IAAM,sBAAsB,eAAA,CAAgB,OAAA;AAAA,EAClD,8BAAA;AAAA,EACA;AACD;AAEO,IAAM,sBAAsB,eAAA,CAAgB,SAAA;AAAA,EAClD,6BAAA;AAAA,EACA,8CAAA;AAAA,EACA,CAAC,IAAI,EAAA,EAAI,EAAA,EAAI,KAAK,GAAA,EAAK,GAAA,EAAK,KAAM,IAAI;AACvC;AAEO,IAAM,kBAAkB,eAAA,CAAgB,KAAA;AAAA,EAC9C,yBAAA;AAAA,EACA;AACD;AAEO,IAAM,mBAAmB,eAAA,CAAgB,OAAA;AAAA,EAC/C,yBAAA;AAAA,EACA;AACD;AAEO,IAAM,oBAAoB,eAAA,CAAgB,OAAA;AAAA,EAChD,0BAAA;AAAA,EACA;AACD;AAEO,IAAM,mBAAmB,eAAA,CAAgB,OAAA;AAAA,EAC/C,yBAAA;AAAA,EACA;AACD;AAEO,IAAM,sBAAsB,eAAA,CAAgB,SAAA;AAAA,EAClD,4BAAA;AAAA,EACA,qCAAA;AAAA,EACA,CAAC,CAAA,EAAG,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,KAAK,GAAA,EAAK,GAAA,EAAK,GAAA,EAAM,IAAA,EAAM,GAAI;AAChD;AAEO,IAAM,yBAAyB,eAAA,CAAgB,SAAA;AAAA,EACrD,gCAAA;AAAA,EACA,2EAAA;AAAA,EACA,CAAC,GAAG,CAAA,EAAG,EAAA,EAAI,IAAI,EAAA,EAAI,GAAA,EAAK,KAAK,GAAG;AACjC;AAEO,IAAM,qBAAqB,eAAA,CAAgB,OAAA;AAAA,EACjD,2BAAA;AAAA,EACA;AACD;AAEO,IAAM,uBAAuB,eAAA,CAAgB,OAAA;AAAA,EACnD,8BAAA;AAAA,EACA;AACD;AAEO,IAAM,sBAAsB,eAAA,CAAgB,OAAA;AAAA,EAClD,6BAAA;AAAA,EACA;AACD","file":"chunk-Q3FKHJ3B.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * LIOP Prometheus Metrics Registry (Phase Beta-3)\n * Lightweight, zero-dependency, high-performance metrics collector\n * complying with Prometheus and OpenMetrics exposition format.\n */\n\nexport type MetricLabels = Record<string, string | number>;\n\nexport interface MetricDefinition {\n\tname: string;\n\thelp: string;\n\ttype: \"counter\" | \"gauge\" | \"histogram\";\n\tbuckets?: number[];\n}\n\nfunction formatLabels(labels?: MetricLabels): string {\n\tif (!labels || Object.keys(labels).length === 0) {\n\t\treturn \"\";\n\t}\n\tconst entries = Object.entries(labels)\n\t\t.sort(([a], [b]) => a.localeCompare(b))\n\t\t.map(([k, v]) => `${k}=\"${String(v).replace(/\"/g, '\\\\\"')}\"`);\n\treturn `{${entries.join(\",\")}}`;\n}\n\nfunction labelsToKey(labels?: MetricLabels): string {\n\tif (!labels) return \"\";\n\treturn Object.entries(labels)\n\t\t.sort(([a], [b]) => a.localeCompare(b))\n\t\t.map(([k, v]) => `${k}:${v}`)\n\t\t.join(\"|\");\n}\n\nexport class Counter {\n\tprivate values = new Map<string, { value: number; labels?: MetricLabels }>();\n\n\tconstructor(\n\t\tpublic readonly name: string,\n\t\tpublic readonly help: string,\n\t) {}\n\n\tinc(labels?: MetricLabels, value = 1): void {\n\t\tif (value < 0) {\n\t\t\tthrow new Error(\"Counter increments must be non-negative\");\n\t\t}\n\t\tconst key = labelsToKey(labels);\n\t\tconst current = this.values.get(key) || { value: 0, labels };\n\t\tcurrent.value += value;\n\t\tthis.values.set(key, current);\n\t}\n\n\tget(labels?: MetricLabels): number {\n\t\tconst key = labelsToKey(labels);\n\t\treturn this.values.get(key)?.value || 0;\n\t}\n\n\treset(): void {\n\t\tthis.values.clear();\n\t}\n\n\ttoPrometheus(): string[] {\n\t\tconst lines: string[] = [\n\t\t\t`# HELP ${this.name} ${this.help}`,\n\t\t\t`# TYPE ${this.name} counter`,\n\t\t];\n\t\tif (this.values.size === 0) {\n\t\t\tlines.push(`${this.name} 0`);\n\t\t\treturn lines;\n\t\t}\n\t\tfor (const entry of this.values.values()) {\n\t\t\tlines.push(`${this.name}${formatLabels(entry.labels)} ${entry.value}`);\n\t\t}\n\t\treturn lines;\n\t}\n}\n\nexport class Gauge {\n\tprivate values = new Map<string, { value: number; labels?: MetricLabels }>();\n\n\tconstructor(\n\t\tpublic readonly name: string,\n\t\tpublic readonly help: string,\n\t) {}\n\n\tset(labelsOrValue: MetricLabels | number, maybeValue?: number): void {\n\t\tif (typeof labelsOrValue === \"number\") {\n\t\t\tthis.values.set(\"\", { value: labelsOrValue });\n\t\t\treturn;\n\t\t}\n\t\tconst labels = labelsOrValue;\n\t\tconst val = typeof maybeValue === \"number\" ? maybeValue : 0;\n\t\tconst key = labelsToKey(labels);\n\t\tthis.values.set(key, { value: val, labels });\n\t}\n\n\tinc(labels?: MetricLabels, value = 1): void {\n\t\tconst key = labelsToKey(labels);\n\t\tconst current = this.values.get(key) || { value: 0, labels };\n\t\tcurrent.value += value;\n\t\tthis.values.set(key, current);\n\t}\n\n\tdec(labels?: MetricLabels, value = 1): void {\n\t\tconst key = labelsToKey(labels);\n\t\tconst current = this.values.get(key) || { value: 0, labels };\n\t\tcurrent.value -= value;\n\t\tthis.values.set(key, current);\n\t}\n\n\tget(labels?: MetricLabels): number {\n\t\tconst key = labelsToKey(labels);\n\t\treturn this.values.get(key)?.value || 0;\n\t}\n\n\treset(): void {\n\t\tthis.values.clear();\n\t}\n\n\ttoPrometheus(): string[] {\n\t\tconst lines: string[] = [\n\t\t\t`# HELP ${this.name} ${this.help}`,\n\t\t\t`# TYPE ${this.name} gauge`,\n\t\t];\n\t\tif (this.values.size === 0) {\n\t\t\tlines.push(`${this.name} 0`);\n\t\t\treturn lines;\n\t\t}\n\t\tfor (const entry of this.values.values()) {\n\t\t\tlines.push(`${this.name}${formatLabels(entry.labels)} ${entry.value}`);\n\t\t}\n\t\treturn lines;\n\t}\n}\n\nexport class Histogram {\n\tpublic readonly buckets: number[];\n\tprivate observations = new Map<\n\t\tstring,\n\t\t{\n\t\t\tcount: number;\n\t\t\tsum: number;\n\t\t\tbucketCounts: Map<number, number>;\n\t\t\tlabels?: MetricLabels;\n\t\t}\n\t>();\n\n\tconstructor(\n\t\tpublic readonly name: string,\n\t\tpublic readonly help: string,\n\t\tbuckets: number[] = [5, 10, 25, 50, 100, 250, 500, 1000, 2500, 5000, 10000],\n\t) {\n\t\tthis.buckets = [...buckets].sort((a, b) => a - b);\n\t}\n\n\tobserve(labelsOrValue: MetricLabels | number, maybeValue?: number): void {\n\t\tlet labels: MetricLabels | undefined;\n\t\tlet val: number;\n\n\t\tif (typeof labelsOrValue === \"number\") {\n\t\t\tval = labelsOrValue;\n\t\t} else {\n\t\t\tlabels = labelsOrValue;\n\t\t\tval = typeof maybeValue === \"number\" ? maybeValue : 0;\n\t\t}\n\n\t\tconst key = labelsToKey(labels);\n\t\tlet state = this.observations.get(key);\n\t\tif (!state) {\n\t\t\tstate = {\n\t\t\t\tcount: 0,\n\t\t\t\tsum: 0,\n\t\t\t\tbucketCounts: new Map(this.buckets.map((b) => [b, 0])),\n\t\t\t\tlabels,\n\t\t\t};\n\t\t\tthis.observations.set(key, state);\n\t\t}\n\n\t\tstate.count += 1;\n\t\tstate.sum += val;\n\n\t\tfor (const bound of this.buckets) {\n\t\t\tif (val <= bound) {\n\t\t\t\tconst cur = state.bucketCounts.get(bound) || 0;\n\t\t\t\tstate.bucketCounts.set(bound, cur + 1);\n\t\t\t}\n\t\t}\n\t}\n\n\treset(): void {\n\t\tthis.observations.clear();\n\t}\n\n\ttoPrometheus(): string[] {\n\t\tconst lines: string[] = [\n\t\t\t`# HELP ${this.name} ${this.help}`,\n\t\t\t`# TYPE ${this.name} histogram`,\n\t\t];\n\t\tif (this.observations.size === 0) {\n\t\t\tlines.push(`${this.name}_count 0`);\n\t\t\tlines.push(`${this.name}_sum 0`);\n\t\t\treturn lines;\n\t\t}\n\n\t\tfor (const state of this.observations.values()) {\n\t\t\tconst baseLabels = state.labels || {};\n\t\t\tfor (const bound of this.buckets) {\n\t\t\t\tconst bucketLabels = { ...baseLabels, le: String(bound) };\n\t\t\t\tlines.push(\n\t\t\t\t\t`${this.name}_bucket${formatLabels(bucketLabels)} ${state.bucketCounts.get(bound) || 0}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst infLabels = { ...baseLabels, le: \"+Inf\" };\n\t\t\tlines.push(\n\t\t\t\t`${this.name}_bucket${formatLabels(infLabels)} ${state.count}`,\n\t\t\t);\n\t\t\tlines.push(`${this.name}_sum${formatLabels(baseLabels)} ${state.sum}`);\n\t\t\tlines.push(\n\t\t\t\t`${this.name}_count${formatLabels(baseLabels)} ${state.count}`,\n\t\t\t);\n\t\t}\n\t\treturn lines;\n\t}\n}\n\nexport class MetricsRegistry {\n\tprivate counters = new Map<string, Counter>();\n\tprivate gauges = new Map<string, Gauge>();\n\tprivate histograms = new Map<string, Histogram>();\n\n\tcounter(name: string, help: string): Counter {\n\t\tlet c = this.counters.get(name);\n\t\tif (!c) {\n\t\t\tc = new Counter(name, help);\n\t\t\tthis.counters.set(name, c);\n\t\t}\n\t\treturn c;\n\t}\n\n\tgauge(name: string, help: string): Gauge {\n\t\tlet g = this.gauges.get(name);\n\t\tif (!g) {\n\t\t\tg = new Gauge(name, help);\n\t\t\tthis.gauges.set(name, g);\n\t\t}\n\t\treturn g;\n\t}\n\n\thistogram(name: string, help: string, buckets?: number[]): Histogram {\n\t\tlet h = this.histograms.get(name);\n\t\tif (!h) {\n\t\t\th = new Histogram(name, help, buckets);\n\t\t\tthis.histograms.set(name, h);\n\t\t}\n\t\treturn h;\n\t}\n\n\tcollectProcessMetrics(): void {\n\t\tconst uptime = this.gauge(\n\t\t\t\"liop_process_uptime_seconds\",\n\t\t\t\"Process uptime in seconds\",\n\t\t);\n\t\tuptime.set(Math.floor(process.uptime()));\n\n\t\tconst health = this.gauge(\n\t\t\t\"liop_node_health_status\",\n\t\t\t\"Operational health status of the LIOP node (1 = healthy, 0 = degraded)\",\n\t\t);\n\t\thealth.set(1);\n\n\t\tif (typeof process.memoryUsage === \"function\") {\n\t\t\tconst mem = process.memoryUsage();\n\t\t\tconst rss = this.gauge(\n\t\t\t\t\"liop_process_memory_rss_bytes\",\n\t\t\t\t\"Resident set size memory in bytes\",\n\t\t\t);\n\t\t\trss.set(mem.rss);\n\n\t\t\tconst heapUsed = this.gauge(\n\t\t\t\t\"liop_process_memory_heap_used_bytes\",\n\t\t\t\t\"Heap memory used in bytes\",\n\t\t\t);\n\t\t\theapUsed.set(mem.heapUsed);\n\n\t\t\tconst heapTotal = this.gauge(\n\t\t\t\t\"liop_process_memory_heap_total_bytes\",\n\t\t\t\t\"Total V8 allocated heap memory in bytes\",\n\t\t\t);\n\t\t\theapTotal.set(mem.heapTotal);\n\n\t\t\tconst external = this.gauge(\n\t\t\t\t\"liop_process_memory_external_bytes\",\n\t\t\t\t\"External memory bound to C++ objects and buffers in bytes\",\n\t\t\t);\n\t\t\texternal.set(mem.external);\n\t\t}\n\t}\n\n\texportPrometheusText(): string {\n\t\tthis.collectProcessMetrics();\n\n\t\tconst lines: string[] = [];\n\t\tfor (const c of this.counters.values()) {\n\t\t\tlines.push(...c.toPrometheus());\n\t\t}\n\t\tfor (const g of this.gauges.values()) {\n\t\t\tlines.push(...g.toPrometheus());\n\t\t}\n\t\tfor (const h of this.histograms.values()) {\n\t\t\tlines.push(...h.toPrometheus());\n\t\t}\n\t\tlines.push(\"\"); // Trailing newline\n\t\treturn lines.join(\"\\n\");\n\t}\n\n\tresetAll(): void {\n\t\tfor (const c of this.counters.values()) c.reset();\n\t\tfor (const g of this.gauges.values()) g.reset();\n\t\tfor (const h of this.histograms.values()) h.reset();\n\t}\n}\n\n// ── Global Standard Protocol Metrics Instance ──────────────────────────────────\n\nexport const protocolMetrics = new MetricsRegistry();\n\nexport const toolCallsTotal = protocolMetrics.counter(\n\t\"liop_tool_calls_total\",\n\t\"Total number of tool logic-injection executions\",\n);\n\nexport const toolCallErrorsTotal = protocolMetrics.counter(\n\t\"liop_tool_call_errors_total\",\n\t\"Total number of failed tool logic-injection executions or policy rejections\",\n);\n\nexport const fuelConsumed = protocolMetrics.histogram(\n\t\"liop_fuel_consumed_total\",\n\t\"Deterministic fuel units consumed by injected logic\",\n\t[100, 500, 1000, 2500, 5000, 10000, 50000, 100000],\n);\n\nexport const meshPeersConnected = protocolMetrics.gauge(\n\t\"liop_mesh_peers_connected\",\n\t\"Active peer connections in the P2P mesh\",\n);\n\nexport const manifestCacheSize = protocolMetrics.gauge(\n\t\"liop_manifest_cache_size\",\n\t\"Number of verified remote tool manifests in cache\",\n);\n\nexport const egressBlocksTotal = protocolMetrics.counter(\n\t\"liop_egress_blocks_total\",\n\t\"Total number of outputs blocked by Egress Shield\",\n);\n\nexport const zkVerificationDurationMs = protocolMetrics.histogram(\n\t\"liop_zk_verification_duration_ms\",\n\t\"Duration of ZK-Receipt and HMAC cryptographic attestation in ms\",\n\t[1, 2, 5, 10, 25, 50, 100, 250, 500],\n);\n\nexport const zkVerificationsTotal = protocolMetrics.counter(\n\t\"liop_zk_verifications_total\",\n\t\"Total number of ZK-Receipt cryptographic attestation checks\",\n);\n\nexport const zkProofsByTypeTotal = protocolMetrics.counter(\n\t\"liop_zk_proofs_by_type_total\",\n\t\"Total number of verified ZK receipts partitioned by proof type (groth16, hmac)\",\n);\n\nexport const zkProvingDurationMs = protocolMetrics.histogram(\n\t\"liop_zk_proving_duration_ms\",\n\t\"Duration of native ZK proof generation in ms\",\n\t[10, 25, 50, 100, 250, 500, 1000, 2500],\n);\n\nexport const zkVkeyCacheSize = protocolMetrics.gauge(\n\t\"liop_zk_vkey_cache_size\",\n\t\"Number of registered verification keys in memory cache\",\n);\n\nexport const tokensInputTotal = protocolMetrics.counter(\n\t\"liop_tokens_input_total\",\n\t\"Total BPE input tokens processed by LIOP\",\n);\n\nexport const tokensOutputTotal = protocolMetrics.counter(\n\t\"liop_tokens_output_total\",\n\t\"Total BPE output tokens emitted by LIOP\",\n);\n\nexport const tokensSavedTotal = protocolMetrics.counter(\n\t\"liop_tokens_saved_total\",\n\t\"Estimated tokens saved compared to MCP context-pulling baseline\",\n);\n\nexport const operationDurationMs = protocolMetrics.histogram(\n\t\"liop_operation_duration_ms\",\n\t\"End-to-end operation duration in ms\",\n\t[5, 15, 30, 50, 100, 250, 500, 1000, 2500, 5000],\n);\n\nexport const pqcHandshakeDurationMs = protocolMetrics.histogram(\n\t\"liop_pqc_handshake_duration_ms\",\n\t\"Duration of ML-KEM-768 post-quantum cryptographic key encapsulation in ms\",\n\t[1, 5, 10, 25, 50, 100, 250, 500],\n);\n\nexport const pqcHandshakesTotal = protocolMetrics.counter(\n\t\"liop_pqc_handshakes_total\",\n\t\"Total number of ML-KEM-768 key encapsulation operations\",\n);\n\nexport const wireEgressBytesTotal = protocolMetrics.counter(\n\t\"liop_wire_egress_bytes_total\",\n\t\"Total wire egress bytes emitted by logic executions\",\n);\n\nexport const wireSavedBytesTotal = protocolMetrics.counter(\n\t\"liop_wire_saved_bytes_total\",\n\t\"Estimated wire egress bytes saved compared to MCP context extraction baseline\",\n);\n"]}