@opendatalabs/personal-server-ts-core 0.0.1-canary.00328bf

package/dist/derivatives/compute.js

@@ -0,0 +1,476 @@
+/**
+ * The compute job: answer one registered question from local data and
+ * write the answer as a derivative record (owner path, `$lineage` = the
+ * source data points).
+ */
+import { DerivativeCycleError, DerivativeSourceNotGrantedError, ProtocolError, } from "../errors/catalog.js";
+import { resolveReadDeletion } from "../api/index.js";
+import { LOCAL_SCOPE_SCAN_PAGE, readStoredLineage, } from "../lineage/lineage.js";
+import { uncoveredSourceScopes } from "./registration.js";
+import { ingestDataContract } from "../contracts/data.js";
+import { isBinaryEnvelope } from "../contracts/binary.js";
+import { assertDerivedScopeNaming } from "../lineage/lineage.js";
+import { computeDataPointId } from "../sync/data-point-id.js";
+import { verifyDataWritePolicy, } from "../policy/data-write.js";
+import { InferenceRequestError, } from "./inference.js";
+import { compileAnswerShape, renderShapedAnswer, validateAnswerShape, } from "./answer-shape.js";
+import { buildQuestionMessages, buildShapeRetryMessages, parseAnswer, parseShapedAnswer, trimSourceData, } from "./prompt.js";
+const DEFAULT_RETRY_DELAYS_MS = [1_000, 4_000];
+/**
+ * Transient: no response, rate limited or a provider-side failure. An
+ * explicit `retryable` hint (E2EE key verification or decryption failures
+ * are permanent) wins over the status rule.
+ */
+function isRetryableInferenceError(err) {
+    if (!(err instanceof InferenceRequestError))
+        return false;
+    if (err.retryable !== undefined)
+        return err.retryable;
+    return err.status === null || err.status === 429 || err.status >= 500;
+}
+/**
+ * Run `attempt` up to `delays.length + 1` times while `retryable(err)`;
+ * anything else (a ProtocolError, a permanent status) surfaces at once.
+ */
+async function withRetries(deps, attempt, retryable) {
+    const delays = deps.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS;
+    const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    for (let index = 0;; index += 1) {
+        try {
+            return await attempt();
+        }
+        catch (err) {
+            if (index >= delays.length || !retryable(err))
+                throw err;
+            await sleep(delays[index]);
+        }
+    }
+}
+/** A failure message safe to persist: never the prompt, never the data. */
+class ComputeFailure extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = "ComputeFailure";
+        this.code = code;
+    }
+}
+/**
+ * The machine-readable failure class stored next to the short reason. It is
+ * what the status route serves to readers of the derived scope, so it is a
+ * CLOSED vocabulary: never a scope name, never provider detail. It also
+ * drives the scheduler's automatic retry — `inference_unavailable` is the
+ * one transient class.
+ */
+function classifyComputeError(err) {
+    if (err instanceof ComputeFailure)
+        return err.code ?? "internal";
+    if (err instanceof InferenceRequestError) {
+        return isRetryableInferenceError(err)
+            ? "inference_unavailable"
+            : "internal";
+    }
+    if (err instanceof ProtocolError) {
+        const grantShaped = err.errorCode === "DERIVATIVE_SOURCE_NOT_GRANTED" ||
+            err.errorCode === "SCOPE_MISMATCH" ||
+            err.errorCode === "UNREGISTERED_BUILDER" ||
+            err.errorCode.startsWith("GRANT_");
+        return grantShaped ? "grant_invalid" : "internal";
+    }
+    return "internal";
+}
+function shortError(err) {
+    if (err instanceof ComputeFailure)
+        return err.message;
+    if (err instanceof InferenceRequestError)
+        return err.message;
+    if (err instanceof ProtocolError)
+        return `${err.errorCode}: ${err.message}`;
+    // Unknown errors may quote data (a JSON parse error echoes its input);
+    // keep the class name only.
+    return `compute failed (${err instanceof Error ? err.name : "Error"})`;
+}
+/**
+ * Ask the model, and for a question that declared an answer shape hold the
+ * reply to it. A reply that does not match gets ONE corrective turn (the
+ * model's own reply plus what was wrong with it); a second miss fails the
+ * compute rather than writing a derivative the builder cannot trust. The
+ * failure class is `internal`: the reader-facing vocabulary is closed and
+ * an unknown value would break clients parsing it as an enum.
+ */
+async function produceAnswer(deps, registration, model, messages) {
+    const ask = (turns) => withRetries(deps, () => deps.provider.chat({
+        model,
+        messages: turns,
+        maxTokens: deps.maxTokens,
+    }), isRetryableInferenceError);
+    const shape = registration.answerShape;
+    if (!shape) {
+        const reply = await ask(messages);
+        const parsed = parseAnswer(reply.content);
+        return {
+            reply,
+            answer: parsed.answer,
+            evidence: parsed.evidence,
+            answerData: null,
+        };
+    }
+    const compiled = compileAnswerShape(shape);
+    let turns = messages;
+    for (let attempt = 0;; attempt += 1) {
+        const reply = await ask(turns);
+        const candidates = parseShapedAnswer(reply.content);
+        let issues = ["the reply was not a JSON object"];
+        for (const [index, candidate] of candidates.entries()) {
+            const checked = validateAnswerShape(shape, compiled, candidate.answer);
+            if (checked.ok) {
+                return {
+                    reply,
+                    answer: renderShapedAnswer(shape, checked.value),
+                    evidence: candidate.evidence,
+                    answerData: checked.value,
+                };
+            }
+            // The first candidate is the best framing of the reply, so its
+            // issues are the ones worth handing back.
+            if (index === 0)
+                issues = checked.issues;
+        }
+        if (attempt >= 1)
+            break;
+        turns = buildShapeRetryMessages({
+            messages,
+            reply: reply.content,
+            issues,
+            answerShape: shape,
+        });
+    }
+    throw new ComputeFailure(`answer did not match the declared shape (fields: ${shape.fields
+        .map((field) => field.name)
+        .join(", ")})`, "internal");
+}
+/**
+ * Version stamp for the derived record, second precision like an HTTP
+ * ingest. A recompute inside the same second as the previous one would
+ * collide on the (scope, collectedAt) path, so the stamp advances past any
+ * version the scope already holds (bounded: at most one minute ahead).
+ */
+export function collectedAtStamp(now, isTaken) {
+    const base = now();
+    base.setUTCMilliseconds(0);
+    for (let bump = 0; bump < 60; bump += 1) {
+        const candidate = new Date(base.getTime() + bump * 1000)
+            .toISOString()
+            .replace(/\.\d{3}Z$/, "Z");
+        if (!isTaken(candidate))
+            return candidate;
+    }
+    throw new ComputeFailure("could not allocate a version stamp");
+}
+async function tombstoneMarker(scopeDeletions, scope) {
+    if (!scopeDeletions)
+        return null;
+    const verdict = await scopeDeletions.resolve(scope);
+    if (!verdict.deleted || verdict.version === null)
+        return null;
+    const version = Number(verdict.version);
+    return Number.isSafeInteger(version) ? version : null;
+}
+/**
+ * `dataPointId -> scope` for every scope in the local index, used to walk
+ * stored lineage locally. Paged like the lineage resolver.
+ */
+function localScopesById(storage, serverOwner) {
+    const byId = new Map();
+    for (let offset = 0;; offset += LOCAL_SCOPE_SCAN_PAGE) {
+        const { scopes, total } = storage.listScopes({
+            limit: LOCAL_SCOPE_SCAN_PAGE,
+            offset,
+        });
+        for (const summary of scopes) {
+            byId.set(computeDataPointId(serverOwner, summary.scope), summary.scope);
+        }
+        if (scopes.length === 0 || offset + scopes.length >= total)
+            break;
+    }
+    return byId;
+}
+/**
+ * Cycle guard on ACTUAL lineage, for cycles the per-store registration
+ * check cannot see (two replicas each holding one half: B <- A here, A <- B
+ * there, ping-ponging through sync). Walks `$lineage` from every source's
+ * latest local version through the local index; reaching the derived data
+ * point id means this question would consume its own output. Bounded by
+ * the visited set.
+ */
+async function assertNoLineageCycle(deps, registration, serverOwner, sourceLineage) {
+    const derivedId = computeDataPointId(serverOwner, registration.derivedScope);
+    let byId = null;
+    const visited = new Set();
+    const stack = [];
+    for (const [scope, sources] of sourceLineage) {
+        for (const id of sources)
+            stack.push({ id, path: [scope] });
+    }
+    while (stack.length > 0) {
+        const { id, path } = stack.pop();
+        if (id === derivedId) {
+            throw new DerivativeCycleError({
+                derivedScope: registration.derivedScope,
+                path: [registration.derivedScope, ...path, registration.derivedScope],
+            });
+        }
+        if (visited.has(id))
+            continue;
+        visited.add(id);
+        byId ??= localScopesById(deps.storage, serverOwner);
+        const scope = byId.get(id);
+        if (!scope)
+            continue;
+        const entry = deps.storage.findEntry({ scope });
+        if (!entry)
+            continue;
+        let sources = [];
+        try {
+            const envelope = await deps.storage.readEnvelope(scope, entry.collectedAt);
+            sources = readStoredLineage(envelope.data)?.sources ?? [];
+        }
+        catch {
+            // Unreadable or malformed lineage: nothing further to walk here.
+        }
+        for (const next of sources)
+            stack.push({ id: next, path: [...path, scope] });
+    }
+}
+async function loadSource(deps, scope) {
+    const entry = deps.storage.findEntry({ scope });
+    // The same deletion gate a read applies: a tombstoned scope is refused
+    // (410 on the read path) whether or not a stale local copy remains.
+    const deletion = await resolveReadDeletion({ scopeDeletions: deps.scopeDeletions, serverOwner: deps.serverOwner }, scope, entry);
+    if (deletion) {
+        throw new ComputeFailure(`source scope ${scope} is deleted`, "source_missing");
+    }
+    if (!entry) {
+        throw new ComputeFailure(`source scope ${scope} has no local data`, "source_missing");
+    }
+    let envelope;
+    try {
+        envelope = await deps.storage.readEnvelope(scope, entry.collectedAt);
+    }
+    catch {
+        throw new ComputeFailure(`source scope ${scope} could not be read`);
+    }
+    let lineageSources = [];
+    try {
+        lineageSources = readStoredLineage(envelope.data)?.sources ?? [];
+    }
+    catch {
+        // Malformed stored lineage: treated as a root for the cycle walk.
+    }
+    const raw = isBinaryEnvelope(envelope)
+        ? {
+            binary: true,
+            note: "binary record; its content is not included in the prompt",
+        }
+        : envelope.data;
+    const trimmed = trimSourceData(raw, {
+        maxItems: deps.maxSourceItems,
+        maxChars: deps.maxSourceChars,
+    });
+    return {
+        source: {
+            scope,
+            collectedAt: entry.collectedAt,
+            version: entry.version,
+            data: trimmed.data,
+            kept: trimmed.kept,
+            total: trimmed.total,
+            truncated: trimmed.truncated,
+        },
+        lineageSources,
+    };
+}
+/**
+ * A builder question re-checks its grant before every compute: the write
+ * permission on the derived scope (revocation, expiry, coverage) AND read
+ * coverage of every source scope, since the answer exposes the sources to
+ * the builder. Gateway transport failures are retried; policy failures
+ * (ProtocolErrors) fail closed at once.
+ */
+async function assertGrantStillValid(deps, registration) {
+    if (registration.registeredBy.kind !== "builder")
+        return;
+    if (!deps.writePolicyPorts) {
+        throw new ComputeFailure("builder grant verification is not configured");
+    }
+    if (!deps.serverOwner) {
+        throw new ComputeFailure("server owner is not configured");
+    }
+    const { builder, grantId } = registration.registeredBy;
+    const ports = deps.writePolicyPorts;
+    const serverOwner = deps.serverOwner;
+    const grant = await withRetries(deps, () => verifyDataWritePolicy({
+        signer: builder,
+        grantId,
+        requestedScope: registration.derivedScope,
+        serverOwner,
+    }, ports), (err) => !(err instanceof ProtocolError));
+    const uncovered = uncoveredSourceScopes(registration.sourceScopes, grant.scopes ?? []);
+    if (uncovered.length > 0) {
+        throw new DerivativeSourceNotGrantedError({ scopes: uncovered });
+    }
+}
+/**
+ * Compute one question end to end. Never throws for a compute failure: the
+ * registration is marked `failed` with a short reason and the outcome says
+ * so. Throws only when the store itself fails.
+ */
+export async function computeQuestion(questionId, deps) {
+    const now = deps.now ?? (() => new Date());
+    if ((await deps.runtimeAvailability?.isAvailable()) === false) {
+        return { status: "skipped", reason: "runtime-unavailable" };
+    }
+    const registration = await deps.store.get(questionId);
+    if (!registration)
+        return { status: "skipped", reason: "unknown-question" };
+    try {
+        if (!deps.serverOwner) {
+            throw new ComputeFailure("server owner is not configured");
+        }
+        const serverOwner = deps.serverOwner;
+        await assertGrantStillValid(deps, registration);
+        // Defense in depth: the rule was checked at registration; a registration
+        // row edited by hand must still not produce a leaking derivative.
+        assertDerivedScopeNaming(registration.derivedScope, registration.sourceScopes);
+        const sources = [];
+        const sourceLineage = new Map();
+        for (const scope of registration.sourceScopes) {
+            const loaded = await loadSource(deps, scope);
+            sources.push(loaded.source);
+            sourceLineage.set(scope, loaded.lineageSources);
+        }
+        await assertNoLineageCycle(deps, registration, serverOwner, sourceLineage);
+        const messages = buildQuestionMessages({
+            question: registration.question,
+            sources,
+            answerShape: registration.answerShape,
+        });
+        const model = registration.model ?? deps.provider.defaultModel;
+        const produced = await produceAnswer(deps, registration, model, messages);
+        const reply = produced.reply;
+        const computedAt = now().toISOString();
+        const lineageIds = registration.sourceScopes.map((scope) => computeDataPointId(serverOwner, scope));
+        const record = {
+            questionId: registration.questionId,
+            question: registration.question,
+            answer: produced.answer,
+            ...(produced.answerData ? { answerData: produced.answerData } : {}),
+            evidence: produced.evidence,
+            model,
+            computedAt,
+            sources: sources.map((source) => ({
+                scope: source.scope,
+                version: source.version,
+                collectedAt: source.collectedAt,
+            })),
+            lineage: lineageIds,
+            ...(reply.receiptId || reply.aciIdentity
+                ? {
+                    inference: {
+                        ...(reply.receiptId ? { receiptId: reply.receiptId } : {}),
+                        ...(reply.aciIdentity ? { aciIdentity: reply.aciIdentity } : {}),
+                    },
+                }
+                : {}),
+        };
+        const lineage = {
+            sources: lineageIds,
+            writtenAt: computedAt,
+        };
+        // `findEntry({ at })` may answer the closest version, so compare exactly.
+        const collectedAt = collectedAtStamp(now, (candidate) => deps.storage.findEntry({
+            scope: registration.derivedScope,
+            at: candidate,
+        })?.collectedAt === candidate);
+        const written = await ingestDataContract({
+            storage: deps.storage,
+            scopeParam: registration.derivedScope,
+            body: record,
+            collectedAt,
+            status: deps.syncManager ? "syncing" : "stored",
+            lineage,
+            afterTombstoneVersion: await tombstoneMarker(deps.scopeDeletions, registration.derivedScope),
+        });
+        if (!written.ok) {
+            throw new ComputeFailure(`derived record rejected: ${written.body.error}`);
+        }
+        const entry = deps.storage.findEntry({
+            scope: registration.derivedScope,
+            at: collectedAt,
+        });
+        const updated = await deps.store.update(questionId, {
+            status: "ready",
+            error: null,
+            errorCode: null,
+            updatedAt: computedAt,
+            lastComputedAt: computedAt,
+            derivedVersion: entry?.version ?? null,
+            derivedCollectedAt: collectedAt,
+        });
+        if (deps.syncManager?.notifyNewData) {
+            deps.syncManager.notifyNewData();
+        }
+        else if (deps.syncManager?.trigger) {
+            void deps.syncManager.trigger().catch(() => undefined);
+        }
+        try {
+            deps.onDerivedWritten?.({
+                scope: registration.derivedScope,
+                collectedAt,
+                lineageSources: lineageIds,
+            });
+        }
+        catch (err) {
+            deps.logger?.warn?.({
+                questionId,
+                derivedScope: registration.derivedScope,
+                error: err instanceof Error ? err.name : String(err),
+            }, "onDerivedWritten hook failed; derivative already written");
+        }
+        deps.logger?.info?.({
+            questionId,
+            derivedScope: registration.derivedScope,
+            sourceScopes: registration.sourceScopes,
+            model,
+            version: entry?.version ?? null,
+            receiptId: reply.receiptId ?? null,
+        }, "Derivative question computed");
+        return {
+            status: "ready",
+            registration: updated ?? { ...registration, status: "ready" },
+        };
+    }
+    catch (err) {
+        const error = shortError(err);
+        const errorCode = classifyComputeError(err);
+        const at = now().toISOString();
+        const updated = await deps.store.update(questionId, {
+            status: "failed",
+            error,
+            errorCode,
+            updatedAt: at,
+        });
+        deps.logger?.warn?.({ questionId, derivedScope: registration.derivedScope, error }, "Derivative question compute failed");
+        return {
+            status: "failed",
+            registration: updated ?? {
+                ...registration,
+                status: "failed",
+                error,
+                errorCode,
+            },
+            error,
+        };
+    }
+}
+//# sourceMappingURL=compute.js.map

package/dist/derivatives/compute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute.js","sourceRoot":"","sources":["../../src/derivatives/compute.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAM9D,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAItB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,WAAW,EACX,iBAAiB,EACjB,cAAc,GAEf,MAAM,aAAa,CAAC;AAiErB,MAAM,uBAAuB,GAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAElE;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,GAAY;IAC7C,IAAI,CAAC,CAAC,GAAG,YAAY,qBAAqB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IACtD,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,IAA0D,EAC1D,OAAyB,EACzB,SAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC7D,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACzD,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAuBD,2EAA2E;AAC3E,MAAM,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAgC;IAC7C,YAAY,OAAe,EAAE,IAAwB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,cAAc;QAAE,OAAO,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC;IACjE,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;QACzC,OAAO,yBAAyB,CAAC,GAAG,CAAC;YACnC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;QACjC,MAAM,WAAW,GACf,GAAG,CAAC,SAAS,KAAK,+BAA+B;YACjD,GAAG,CAAC,SAAS,KAAK,gBAAgB;YAClC,GAAG,CAAC,SAAS,KAAK,sBAAsB;YACxC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;IACpD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,YAAY,cAAc;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACtD,IAAI,GAAG,YAAY,qBAAqB;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7D,IAAI,GAAG,YAAY,aAAa;QAAE,OAAO,GAAG,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5E,uEAAuE;IACvE,4BAA4B;IAC5B,OAAO,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC;AACzE,CAAC;AAWD;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAyB,EACzB,YAAkC,EAClC,KAAa,EACb,QAA4B;IAE5B,MAAM,GAAG,GAAG,CAAC,KAAyB,EAAE,EAAE,CACxC,WAAW,CACT,IAAI,EACJ,GAAG,EAAE,CACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjB,KAAK;QACL,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,EACJ,yBAAyB,CAC1B,CAAC;IAEJ,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO;YACL,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,QAAQ,CAAC;IACrB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,MAAM,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACvE,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;oBAChD,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,UAAU,EAAE,OAAO,CAAC,KAAK;iBAC1B,CAAC;YACJ,CAAC;YACD,+DAA+D;YAC/D,0CAA0C;YAC1C,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC;QACD,IAAI,OAAO,IAAI,CAAC;YAAE,MAAM;QACxB,KAAK,GAAG,uBAAuB,CAAC;YAC9B,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,MAAM;YACN,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,cAAc,CACtB,oDAAoD,KAAK,CAAC,MAAM;SAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,EAChB,UAAU,CACX,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAe,EACf,OAAyC;IAEzC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;aACrD,WAAW,EAAE;aACb,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,cAAgD,EAChD,KAAa;IAEb,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,OAA4C,EAC5C,WAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,qBAAqB;YAC5B,MAAM;SACP,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CACjC,IAAyB,EACzB,YAAkC,EAClC,WAA0B,EAC1B,aAAqD;IAErD,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,IAAI,GAA+B,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;QAC7C,KAAK,MAAM,EAAE,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAClC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,IAAI,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,GAAG,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,OAAO,GAAsB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAC9C,KAAK,EACL,KAAK,CAAC,WAAW,CAClB,CAAC;YACF,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAyB,EACzB,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACtE,KAAK,EACL,KAAK,CACN,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CACtB,gBAAgB,KAAK,aAAa,EAClC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,cAAc,CACtB,gBAAgB,KAAK,oBAAoB,EACzC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC;QACpC,CAAC,CAAC;YACE,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,0DAA0D;SACjE;QACH,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE;QAClC,QAAQ,EAAE,IAAI,CAAC,cAAc;QAC7B,QAAQ,EAAE,IAAI,CAAC,cAAc;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE;YACN,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;QACD,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAAyB,EACzB,YAAkC;IAElC,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IACzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3B,MAAM,IAAI,cAAc,CAAC,8CAA8C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,YAAY,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,IAAI,EACJ,GAAG,EAAE,CACH,qBAAqB,CACnB;QACE,MAAM,EAAE,OAAO;QACf,OAAO;QACP,cAAc,EAAE,YAAY,CAAC,YAAY;QACzC,WAAW;KACZ,EACD,KAAK,CACN,EACH,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC,CACzC,CAAC;IACF,MAAM,SAAS,GAAG,qBAAqB,CACrC,YAAY,CAAC,YAAY,EACzB,KAAK,CAAC,MAAM,IAAI,EAAE,CACnB,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,+BAA+B,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,IAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,WAAW,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAE5E,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,MAAM,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,yEAAyE;QACzE,kEAAkE;QAClE,wBAAwB,CACtB,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,YAAY,CAC1B,CAAC;QAEF,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,OAAO;YACP,WAAW,EAAE,YAAY,CAAC,WAAW;SACtC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAE7B,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzD,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CACvC,CAAC;QACF,MAAM,MAAM,GAA2B;YACrC,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK;YACL,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,OAAO,EAAE,UAAU;YACnB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW;gBACtC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACjE;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,OAAO,GAAkB;YAC7B,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,UAAU;SACtB,CAAC;QACF,0EAA0E;QAC1E,MAAM,WAAW,GAAG,gBAAgB,CAClC,GAAG,EACH,CAAC,SAAS,EAAE,EAAE,CACZ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACrB,KAAK,EAAE,YAAY,CAAC,YAAY;YAChC,EAAE,EAAE,SAAS;SACd,CAAC,EAAE,WAAW,KAAK,SAAS,CAChC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC;YACvC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,YAAY,CAAC,YAAY;YACrC,IAAI,EAAE,MAAM;YACZ,WAAW;YACX,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAC/C,OAAO;YACP,qBAAqB,EAAE,MAAM,eAAe,CAC1C,IAAI,CAAC,cAAc,EACnB,YAAY,CAAC,YAAY,CAC1B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CACtB,4BAA4B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACnC,KAAK,EAAE,YAAY,CAAC,YAAY;YAChC,EAAE,EAAE,WAAW;SAChB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAClD,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,UAAU;YACrB,cAAc,EAAE,UAAU;YAC1B,cAAc,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;YACtC,kBAAkB,EAAE,WAAW;SAChC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,KAAK,EAAE,YAAY,CAAC,YAAY;gBAChC,WAAW;gBACX,cAAc,EAAE,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB;gBACE,UAAU;gBACV,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACrD,EACD,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB;YACE,UAAU;YACV,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,KAAK;YACL,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;SACnC,EACD,8BAA8B,CAC/B,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,YAAY,EAAE,OAAO,IAAI,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;SAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAClD,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,SAAS;YACT,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,EAC9D,oCAAoC,CACrC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,OAAO,IAAI;gBACvB,GAAG,YAAY;gBACf,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,SAAS;aACV;YACD,KAAK;SACN,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/derivatives/e2ee/aad.d.ts

@@ -0,0 +1,22 @@
+/**
+ * E2EE v2 associated data (spec section 6): RFC 8785 JCS bytes binding every
+ * ciphertext to its field path and request context. Byte-exact examples are
+ * pinned by the spec test vectors in aad.test.ts.
+ */
+export declare const E2EE_REQUEST_AAD_PURPOSE = "aci.e2ee.request.v2";
+export declare const E2EE_RESPONSE_AAD_PURPOSE = "aci.e2ee.response.v2";
+export interface E2eeRequestContext {
+    /** The selected service key's `algo`. */
+    algo: string;
+    /** The request's top-level `model`, byte-exact. */
+    model: string;
+    /** `X-E2EE-Nonce`, 64 hex characters. */
+    nonce: string;
+    /** `X-E2EE-Timestamp`, Unix seconds. */
+    ts: number;
+}
+export declare function requestFieldAad(context: E2eeRequestContext, field: string): Uint8Array;
+export declare function responseFieldAad(context: E2eeRequestContext, field: string, 
+/** The clear response `id`, or "" when the response has none. */
+id: string): Uint8Array;
+//# sourceMappingURL=aad.d.ts.map

package/dist/derivatives/e2ee/aad.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.d.ts","sourceRoot":"","sources":["../../../src/derivatives/e2ee/aad.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,MAAM,GACZ,UAAU,CASZ;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,MAAM;AACb,iEAAiE;AACjE,EAAE,EAAE,MAAM,GACT,UAAU,CAUZ"}

package/dist/derivatives/e2ee/aad.js

@@ -0,0 +1,32 @@
+/**
+ * E2EE v2 associated data (spec section 6): RFC 8785 JCS bytes binding every
+ * ciphertext to its field path and request context. Byte-exact examples are
+ * pinned by the spec test vectors in aad.test.ts.
+ */
+import { canonicalJsonBytes } from "./jcs.js";
+export const E2EE_REQUEST_AAD_PURPOSE = "aci.e2ee.request.v2";
+export const E2EE_RESPONSE_AAD_PURPOSE = "aci.e2ee.response.v2";
+export function requestFieldAad(context, field) {
+    return canonicalJsonBytes({
+        purpose: E2EE_REQUEST_AAD_PURPOSE,
+        algo: context.algo,
+        model: context.model,
+        field,
+        nonce: context.nonce,
+        ts: context.ts,
+    });
+}
+export function responseFieldAad(context, field, 
+/** The clear response `id`, or "" when the response has none. */
+id) {
+    return canonicalJsonBytes({
+        purpose: E2EE_RESPONSE_AAD_PURPOSE,
+        algo: context.algo,
+        model: context.model,
+        id,
+        field,
+        nonce: context.nonce,
+        ts: context.ts,
+    });
+}
+//# sourceMappingURL=aad.js.map

package/dist/derivatives/e2ee/aad.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.js","sourceRoot":"","sources":["../../../src/derivatives/e2ee/aad.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAahE,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,KAAa;IAEb,OAAO,kBAAkB,CAAC;QACxB,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAA2B,EAC3B,KAAa;AACb,iEAAiE;AACjE,EAAU;IAEV,OAAO,kBAAkB,CAAC;QACxB,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE;QACF,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;KACf,CAAC,CAAC;AACL,CAAC"}