@opendatalabs/personal-server-ts-core 1.8.0 → 1.10.0

package/dist/derivatives/compute.d.ts

@@ -0,0 +1,106 @@
+/**
+ * The compute job: answer one registered question from local data and
+ * write the answer as a derivative record (owner path, `$lineage` = the
+ * source data points).
+ */
+import type { ScopeDeletionTracker } from "../sync/scope-deletions.js";
+import type { DataStoragePort, RuntimeAvailabilityPort } from "../ports/index.js";
+import { type DataWritePolicyPorts } from "../policy/data-write.js";
+import { type InferenceProvider } from "./inference.js";
+import type { QuestionRegistration, QuestionStore } from "./types.js";
+export interface ComputeLogger {
+    info?(payload: Record<string, unknown>, message: string): void;
+    warn?(payload: Record<string, unknown>, message: string): void;
+}
+export interface ComputeSyncNotifier {
+    notifyNewData?(): void;
+    trigger?(): Promise<void>;
+}
+export interface QuestionComputeDeps {
+    storage: DataStoragePort;
+    store: QuestionStore;
+    provider: InferenceProvider;
+    /** Required: lineage ids are keccak256(owner, scope). */
+    serverOwner: `0x${string}` | undefined;
+    /** Newest-first items kept per source scope (default 50). */
+    maxSourceItems?: number;
+    maxSourceChars?: number;
+    maxTokens?: number;
+    /** Uploads the derivative after it is written locally. */
+    syncManager?: ComputeSyncNotifier | null;
+    /** Re-add marker, same as an HTTP ingest (see api/index.ts). */
+    scopeDeletions?: ScopeDeletionTracker;
+    /**
+     * When present, a builder-registered question re-checks its write grant
+     * before every compute (revoked / expired / scope no longer covered =>
+     * failed, no inference call). Owner registrations skip the check.
+     */
+    writePolicyPorts?: DataWritePolicyPorts;
+    /**
+     * Called after the derivative is written and the question marked ready,
+     * so a question that reads THIS derived scope recomputes in turn
+     * (A -> B -> C chains). The compute path never goes through the HTTP
+     * ingest hook.
+     */
+    onDerivedWritten?: (event: {
+        scope: string;
+        collectedAt: string;
+        lineageSources: string[];
+    }) => void;
+    /** When unavailable the compute is skipped and the status left as is. */
+    runtimeAvailability?: RuntimeAvailabilityPort;
+    /**
+     * Backoff between retries of a transient inference or gateway failure
+     * (default 1s, 4s: three attempts). Tests pass zeros.
+     */
+    retryDelaysMs?: readonly number[];
+    sleep?: (ms: number) => Promise<void>;
+    now?: () => Date;
+    logger?: ComputeLogger;
+}
+export type ComputeOutcome = {
+    status: "ready";
+    registration: QuestionRegistration;
+} | {
+    status: "failed";
+    registration: QuestionRegistration;
+    error: string;
+} | {
+    status: "skipped";
+    reason: "unknown-question" | "runtime-unavailable";
+};
+/** The record written into the derived scope. */
+export interface DerivativeAnswerRecord {
+    questionId: string;
+    question: string;
+    answer: string;
+    evidence: string | null;
+    model: string;
+    computedAt: string;
+    sources: Array<{
+        scope: string;
+        version: number;
+        collectedAt: string;
+    }>;
+    /** Caller-side lineage field, mirrored by the server into `$lineage`. */
+    lineage: `0x${string}`[];
+    inference?: {
+        receiptId?: string;
+        aciIdentity?: string;
+    };
+    [key: string]: unknown;
+}
+/**
+ * Version stamp for the derived record, second precision like an HTTP
+ * ingest. A recompute inside the same second as the previous one would
+ * collide on the (scope, collectedAt) path, so the stamp advances past any
+ * version the scope already holds (bounded: at most one minute ahead).
+ */
+export declare function collectedAtStamp(now: () => Date, isTaken: (collectedAt: string) => boolean): string;
+/**
+ * Compute one question end to end. Never throws for a compute failure: the
+ * registration is marked `failed` with a short reason and the outcome says
+ * so. Throws only when the store itself fails.
+ */
+export declare function computeQuestion(questionId: string, deps: QuestionComputeDeps): Promise<ComputeOutcome>;
+//# sourceMappingURL=compute.d.ts.map

package/dist/derivatives/compute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute.d.ts","sourceRoot":"","sources":["../../src/derivatives/compute.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAO/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,IAAI,IAAI,CAAC;IACvB,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,yDAAyD;IACzD,WAAW,EAAE,KAAK,MAAM,EAAE,GAAG,SAAS,CAAC;IACvC,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzC,gEAAgE;IAChE,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,KAAK,IAAI,CAAC;IACX,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,oBAAoB,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,oBAAoB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,kBAAkB,GAAG,qBAAqB,CAAA;CAAE,CAAC;AAqC9E,iDAAiD;AACjD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,yEAAyE;IACzE,OAAO,EAAE,KAAK,MAAM,EAAE,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAmBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,IAAI,EACf,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,GACxC,MAAM,CAUR;AAwLD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,cAAc,CAAC,CAmKzB"}

package/dist/derivatives/compute.js

@@ -0,0 +1,380 @@
+/**
+ * The compute job: answer one registered question from local data and
+ * write the answer as a derivative record (owner path, `$lineage` = the
+ * source data points).
+ */
+import { DerivativeCycleError, DerivativeSourceNotGrantedError, ProtocolError, } from "../errors/catalog.js";
+import { resolveReadDeletion } from "../api/index.js";
+import { LOCAL_SCOPE_SCAN_PAGE, readStoredLineage, } from "../lineage/lineage.js";
+import { uncoveredSourceScopes } from "./registration.js";
+import { ingestDataContract } from "../contracts/data.js";
+import { isBinaryEnvelope } from "../contracts/binary.js";
+import { assertDerivedScopeNaming } from "../lineage/lineage.js";
+import { computeDataPointId } from "../sync/data-point-id.js";
+import { verifyDataWritePolicy, } from "../policy/data-write.js";
+import { InferenceRequestError } from "./inference.js";
+import { buildQuestionMessages, parseAnswer, trimSourceData, } from "./prompt.js";
+const DEFAULT_RETRY_DELAYS_MS = [1_000, 4_000];
+/**
+ * Transient: no response, rate limited or a provider-side failure. An
+ * explicit `retryable` hint (E2EE key verification or decryption failures
+ * are permanent) wins over the status rule.
+ */
+function isRetryableInferenceError(err) {
+    if (!(err instanceof InferenceRequestError))
+        return false;
+    if (err.retryable !== undefined)
+        return err.retryable;
+    return err.status === null || err.status === 429 || err.status >= 500;
+}
+/**
+ * Run `attempt` up to `delays.length + 1` times while `retryable(err)`;
+ * anything else (a ProtocolError, a permanent status) surfaces at once.
+ */
+async function withRetries(deps, attempt, retryable) {
+    const delays = deps.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS;
+    const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    for (let index = 0;; index += 1) {
+        try {
+            return await attempt();
+        }
+        catch (err) {
+            if (index >= delays.length || !retryable(err))
+                throw err;
+            await sleep(delays[index]);
+        }
+    }
+}
+/** A failure message safe to persist: never the prompt, never the data. */
+class ComputeFailure extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ComputeFailure";
+    }
+}
+function shortError(err) {
+    if (err instanceof ComputeFailure)
+        return err.message;
+    if (err instanceof InferenceRequestError)
+        return err.message;
+    if (err instanceof ProtocolError)
+        return `${err.errorCode}: ${err.message}`;
+    // Unknown errors may quote data (a JSON parse error echoes its input);
+    // keep the class name only.
+    return `compute failed (${err instanceof Error ? err.name : "Error"})`;
+}
+/**
+ * Version stamp for the derived record, second precision like an HTTP
+ * ingest. A recompute inside the same second as the previous one would
+ * collide on the (scope, collectedAt) path, so the stamp advances past any
+ * version the scope already holds (bounded: at most one minute ahead).
+ */
+export function collectedAtStamp(now, isTaken) {
+    const base = now();
+    base.setUTCMilliseconds(0);
+    for (let bump = 0; bump < 60; bump += 1) {
+        const candidate = new Date(base.getTime() + bump * 1000)
+            .toISOString()
+            .replace(/\.\d{3}Z$/, "Z");
+        if (!isTaken(candidate))
+            return candidate;
+    }
+    throw new ComputeFailure("could not allocate a version stamp");
+}
+async function tombstoneMarker(scopeDeletions, scope) {
+    if (!scopeDeletions)
+        return null;
+    const verdict = await scopeDeletions.resolve(scope);
+    if (!verdict.deleted || verdict.version === null)
+        return null;
+    const version = Number(verdict.version);
+    return Number.isSafeInteger(version) ? version : null;
+}
+/**
+ * `dataPointId -> scope` for every scope in the local index, used to walk
+ * stored lineage locally. Paged like the lineage resolver.
+ */
+function localScopesById(storage, serverOwner) {
+    const byId = new Map();
+    for (let offset = 0;; offset += LOCAL_SCOPE_SCAN_PAGE) {
+        const { scopes, total } = storage.listScopes({
+            limit: LOCAL_SCOPE_SCAN_PAGE,
+            offset,
+        });
+        for (const summary of scopes) {
+            byId.set(computeDataPointId(serverOwner, summary.scope), summary.scope);
+        }
+        if (scopes.length === 0 || offset + scopes.length >= total)
+            break;
+    }
+    return byId;
+}
+/**
+ * Cycle guard on ACTUAL lineage, for cycles the per-store registration
+ * check cannot see (two replicas each holding one half: B <- A here, A <- B
+ * there, ping-ponging through sync). Walks `$lineage` from every source's
+ * latest local version through the local index; reaching the derived data
+ * point id means this question would consume its own output. Bounded by
+ * the visited set.
+ */
+async function assertNoLineageCycle(deps, registration, serverOwner, sourceLineage) {
+    const derivedId = computeDataPointId(serverOwner, registration.derivedScope);
+    let byId = null;
+    const visited = new Set();
+    const stack = [];
+    for (const [scope, sources] of sourceLineage) {
+        for (const id of sources)
+            stack.push({ id, path: [scope] });
+    }
+    while (stack.length > 0) {
+        const { id, path } = stack.pop();
+        if (id === derivedId) {
+            throw new DerivativeCycleError({
+                derivedScope: registration.derivedScope,
+                path: [registration.derivedScope, ...path, registration.derivedScope],
+            });
+        }
+        if (visited.has(id))
+            continue;
+        visited.add(id);
+        byId ??= localScopesById(deps.storage, serverOwner);
+        const scope = byId.get(id);
+        if (!scope)
+            continue;
+        const entry = deps.storage.findEntry({ scope });
+        if (!entry)
+            continue;
+        let sources = [];
+        try {
+            const envelope = await deps.storage.readEnvelope(scope, entry.collectedAt);
+            sources = readStoredLineage(envelope.data)?.sources ?? [];
+        }
+        catch {
+            // Unreadable or malformed lineage: nothing further to walk here.
+        }
+        for (const next of sources)
+            stack.push({ id: next, path: [...path, scope] });
+    }
+}
+async function loadSource(deps, scope) {
+    const entry = deps.storage.findEntry({ scope });
+    // The same deletion gate a read applies: a tombstoned scope is refused
+    // (410 on the read path) whether or not a stale local copy remains.
+    const deletion = await resolveReadDeletion({ scopeDeletions: deps.scopeDeletions, serverOwner: deps.serverOwner }, scope, entry);
+    if (deletion) {
+        throw new ComputeFailure(`source scope ${scope} is deleted`);
+    }
+    if (!entry) {
+        throw new ComputeFailure(`source scope ${scope} has no local data`);
+    }
+    let envelope;
+    try {
+        envelope = await deps.storage.readEnvelope(scope, entry.collectedAt);
+    }
+    catch {
+        throw new ComputeFailure(`source scope ${scope} could not be read`);
+    }
+    let lineageSources = [];
+    try {
+        lineageSources = readStoredLineage(envelope.data)?.sources ?? [];
+    }
+    catch {
+        // Malformed stored lineage: treated as a root for the cycle walk.
+    }
+    const raw = isBinaryEnvelope(envelope)
+        ? {
+            binary: true,
+            note: "binary record; its content is not included in the prompt",
+        }
+        : envelope.data;
+    const trimmed = trimSourceData(raw, {
+        maxItems: deps.maxSourceItems,
+        maxChars: deps.maxSourceChars,
+    });
+    return {
+        source: {
+            scope,
+            collectedAt: entry.collectedAt,
+            version: entry.version,
+            data: trimmed.data,
+            kept: trimmed.kept,
+            total: trimmed.total,
+            truncated: trimmed.truncated,
+        },
+        lineageSources,
+    };
+}
+/**
+ * A builder question re-checks its grant before every compute: the write
+ * permission on the derived scope (revocation, expiry, coverage) AND read
+ * coverage of every source scope, since the answer exposes the sources to
+ * the builder. Gateway transport failures are retried; policy failures
+ * (ProtocolErrors) fail closed at once.
+ */
+async function assertGrantStillValid(deps, registration) {
+    if (registration.registeredBy.kind !== "builder")
+        return;
+    if (!deps.writePolicyPorts) {
+        throw new ComputeFailure("builder grant verification is not configured");
+    }
+    if (!deps.serverOwner) {
+        throw new ComputeFailure("server owner is not configured");
+    }
+    const { builder, grantId } = registration.registeredBy;
+    const ports = deps.writePolicyPorts;
+    const serverOwner = deps.serverOwner;
+    const grant = await withRetries(deps, () => verifyDataWritePolicy({
+        signer: builder,
+        grantId,
+        requestedScope: registration.derivedScope,
+        serverOwner,
+    }, ports), (err) => !(err instanceof ProtocolError));
+    const uncovered = uncoveredSourceScopes(registration.sourceScopes, grant.scopes ?? []);
+    if (uncovered.length > 0) {
+        throw new DerivativeSourceNotGrantedError({ scopes: uncovered });
+    }
+}
+/**
+ * Compute one question end to end. Never throws for a compute failure: the
+ * registration is marked `failed` with a short reason and the outcome says
+ * so. Throws only when the store itself fails.
+ */
+export async function computeQuestion(questionId, deps) {
+    const now = deps.now ?? (() => new Date());
+    if ((await deps.runtimeAvailability?.isAvailable()) === false) {
+        return { status: "skipped", reason: "runtime-unavailable" };
+    }
+    const registration = await deps.store.get(questionId);
+    if (!registration)
+        return { status: "skipped", reason: "unknown-question" };
+    try {
+        if (!deps.serverOwner) {
+            throw new ComputeFailure("server owner is not configured");
+        }
+        const serverOwner = deps.serverOwner;
+        await assertGrantStillValid(deps, registration);
+        // Defense in depth: the rule was checked at registration; a registration
+        // row edited by hand must still not produce a leaking derivative.
+        assertDerivedScopeNaming(registration.derivedScope, registration.sourceScopes);
+        const sources = [];
+        const sourceLineage = new Map();
+        for (const scope of registration.sourceScopes) {
+            const loaded = await loadSource(deps, scope);
+            sources.push(loaded.source);
+            sourceLineage.set(scope, loaded.lineageSources);
+        }
+        await assertNoLineageCycle(deps, registration, serverOwner, sourceLineage);
+        const messages = buildQuestionMessages({
+            question: registration.question,
+            sources,
+        });
+        const model = registration.model ?? deps.provider.defaultModel;
+        const reply = await withRetries(deps, () => deps.provider.chat({ model, messages, maxTokens: deps.maxTokens }), isRetryableInferenceError);
+        const parsed = parseAnswer(reply.content);
+        const computedAt = now().toISOString();
+        const lineageIds = registration.sourceScopes.map((scope) => computeDataPointId(serverOwner, scope));
+        const record = {
+            questionId: registration.questionId,
+            question: registration.question,
+            answer: parsed.answer,
+            evidence: parsed.evidence,
+            model,
+            computedAt,
+            sources: sources.map((source) => ({
+                scope: source.scope,
+                version: source.version,
+                collectedAt: source.collectedAt,
+            })),
+            lineage: lineageIds,
+            ...(reply.receiptId || reply.aciIdentity
+                ? {
+                    inference: {
+                        ...(reply.receiptId ? { receiptId: reply.receiptId } : {}),
+                        ...(reply.aciIdentity ? { aciIdentity: reply.aciIdentity } : {}),
+                    },
+                }
+                : {}),
+        };
+        const lineage = {
+            sources: lineageIds,
+            writtenAt: computedAt,
+        };
+        // `findEntry({ at })` may answer the closest version, so compare exactly.
+        const collectedAt = collectedAtStamp(now, (candidate) => deps.storage.findEntry({
+            scope: registration.derivedScope,
+            at: candidate,
+        })?.collectedAt === candidate);
+        const written = await ingestDataContract({
+            storage: deps.storage,
+            scopeParam: registration.derivedScope,
+            body: record,
+            collectedAt,
+            status: deps.syncManager ? "syncing" : "stored",
+            lineage,
+            afterTombstoneVersion: await tombstoneMarker(deps.scopeDeletions, registration.derivedScope),
+        });
+        if (!written.ok) {
+            throw new ComputeFailure(`derived record rejected: ${written.body.error}`);
+        }
+        const entry = deps.storage.findEntry({
+            scope: registration.derivedScope,
+            at: collectedAt,
+        });
+        const updated = await deps.store.update(questionId, {
+            status: "ready",
+            error: null,
+            updatedAt: computedAt,
+            lastComputedAt: computedAt,
+            derivedVersion: entry?.version ?? null,
+            derivedCollectedAt: collectedAt,
+        });
+        if (deps.syncManager?.notifyNewData) {
+            deps.syncManager.notifyNewData();
+        }
+        else if (deps.syncManager?.trigger) {
+            void deps.syncManager.trigger().catch(() => undefined);
+        }
+        try {
+            deps.onDerivedWritten?.({
+                scope: registration.derivedScope,
+                collectedAt,
+                lineageSources: lineageIds,
+            });
+        }
+        catch (err) {
+            deps.logger?.warn?.({
+                questionId,
+                derivedScope: registration.derivedScope,
+                error: err instanceof Error ? err.name : String(err),
+            }, "onDerivedWritten hook failed; derivative already written");
+        }
+        deps.logger?.info?.({
+            questionId,
+            derivedScope: registration.derivedScope,
+            sourceScopes: registration.sourceScopes,
+            model,
+            version: entry?.version ?? null,
+            receiptId: reply.receiptId ?? null,
+        }, "Derivative question computed");
+        return {
+            status: "ready",
+            registration: updated ?? { ...registration, status: "ready" },
+        };
+    }
+    catch (err) {
+        const error = shortError(err);
+        const at = now().toISOString();
+        const updated = await deps.store.update(questionId, {
+            status: "failed",
+            error,
+            updatedAt: at,
+        });
+        deps.logger?.warn?.({ questionId, derivedScope: registration.derivedScope, error }, "Derivative question compute failed");
+        return {
+            status: "failed",
+            registration: updated ?? { ...registration, status: "failed", error },
+            error,
+        };
+    }
+}
+//# sourceMappingURL=compute.js.map

package/dist/derivatives/compute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute.js","sourceRoot":"","sources":["../../src/derivatives/compute.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAM9D,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAA0B,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,WAAW,EACX,cAAc,GAEf,MAAM,aAAa,CAAC;AA6DrB,MAAM,uBAAuB,GAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAElE;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,GAAY;IAC7C,IAAI,CAAC,CAAC,GAAG,YAAY,qBAAqB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IACtD,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,IAA0D,EAC1D,OAAyB,EACzB,SAAoC;IAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC7D,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACzD,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAiBD,2EAA2E;AAC3E,MAAM,cAAe,SAAQ,KAAK;IAChC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,YAAY,cAAc;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACtD,IAAI,GAAG,YAAY,qBAAqB;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7D,IAAI,GAAG,YAAY,aAAa;QAAE,OAAO,GAAG,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5E,uEAAuE;IACvE,4BAA4B;IAC5B,OAAO,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAe,EACf,OAAyC;IAEzC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;aACrD,WAAW,EAAE;aACb,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,cAAgD,EAChD,KAAa;IAEb,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,OAA4C,EAC5C,WAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,qBAAqB;YAC5B,MAAM;SACP,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CACjC,IAAyB,EACzB,YAAkC,EAClC,WAA0B,EAC1B,aAAqD;IAErD,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,IAAI,GAA+B,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;QAC7C,KAAK,MAAM,EAAE,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAClC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,IAAI,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,GAAG,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,OAAO,GAAsB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAC9C,KAAK,EACL,KAAK,CAAC,WAAW,CAClB,CAAC;YACF,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAyB,EACzB,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACtE,KAAK,EACL,KAAK,CACN,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,gBAAgB,KAAK,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,cAAc,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC;QACpC,CAAC,CAAC;YACE,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,0DAA0D;SACjE;QACH,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE;QAClC,QAAQ,EAAE,IAAI,CAAC,cAAc;QAC7B,QAAQ,EAAE,IAAI,CAAC,cAAc;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE;YACN,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;QACD,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAAyB,EACzB,YAAkC;IAElC,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IACzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3B,MAAM,IAAI,cAAc,CAAC,8CAA8C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,YAAY,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,IAAI,EACJ,GAAG,EAAE,CACH,qBAAqB,CACnB;QACE,MAAM,EAAE,OAAO;QACf,OAAO;QACP,cAAc,EAAE,YAAY,CAAC,YAAY;QACzC,WAAW;KACZ,EACD,KAAK,CACN,EACH,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC,CACzC,CAAC;IACF,MAAM,SAAS,GAAG,qBAAqB,CACrC,YAAY,CAAC,YAAY,EACzB,KAAK,CAAC,MAAM,IAAI,EAAE,CACnB,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,+BAA+B,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,IAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,WAAW,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAE5E,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,MAAM,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,yEAAyE;QACzE,kEAAkE;QAClE,wBAAwB,CACtB,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,YAAY,CAC1B,CAAC;QAEF,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,OAAO;SACR,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EACxE,yBAAyB,CAC1B,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzD,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CACvC,CAAC;QACF,MAAM,MAAM,GAA2B;YACrC,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK;YACL,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,OAAO,EAAE,UAAU;YACnB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW;gBACtC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACjE;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,OAAO,GAAkB;YAC7B,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,UAAU;SACtB,CAAC;QACF,0EAA0E;QAC1E,MAAM,WAAW,GAAG,gBAAgB,CAClC,GAAG,EACH,CAAC,SAAS,EAAE,EAAE,CACZ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACrB,KAAK,EAAE,YAAY,CAAC,YAAY;YAChC,EAAE,EAAE,SAAS;SACd,CAAC,EAAE,WAAW,KAAK,SAAS,CAChC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC;YACvC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,YAAY,CAAC,YAAY;YACrC,IAAI,EAAE,MAAM;YACZ,WAAW;YACX,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAC/C,OAAO;YACP,qBAAqB,EAAE,MAAM,eAAe,CAC1C,IAAI,CAAC,cAAc,EACnB,YAAY,CAAC,YAAY,CAC1B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CACtB,4BAA4B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACnC,KAAK,EAAE,YAAY,CAAC,YAAY;YAChC,EAAE,EAAE,WAAW;SAChB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAClD,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,UAAU;YACrB,cAAc,EAAE,UAAU;YAC1B,cAAc,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;YACtC,kBAAkB,EAAE,WAAW;SAChC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,KAAK,EAAE,YAAY,CAAC,YAAY;gBAChC,WAAW;gBACX,cAAc,EAAE,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB;gBACE,UAAU;gBACV,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACrD,EACD,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB;YACE,UAAU;YACV,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,KAAK;YACL,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;SACnC,EACD,8BAA8B,CAC/B,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,YAAY,EAAE,OAAO,IAAI,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;SAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAClD,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,EAC9D,oCAAoC,CACrC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,OAAO,IAAI,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrE,KAAK;SACN,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/derivatives/e2ee/aad.d.ts

@@ -0,0 +1,22 @@
+/**
+ * E2EE v2 associated data (spec section 6): RFC 8785 JCS bytes binding every
+ * ciphertext to its field path and request context. Byte-exact examples are
+ * pinned by the spec test vectors in aad.test.ts.
+ */
+export declare const E2EE_REQUEST_AAD_PURPOSE = "aci.e2ee.request.v2";
+export declare const E2EE_RESPONSE_AAD_PURPOSE = "aci.e2ee.response.v2";
+export interface E2eeRequestContext {
+    /** The selected service key's `algo`. */
+    algo: string;
+    /** The request's top-level `model`, byte-exact. */
+    model: string;
+    /** `X-E2EE-Nonce`, 64 hex characters. */
+    nonce: string;
+    /** `X-E2EE-Timestamp`, Unix seconds. */
+    ts: number;
+}
+export declare function requestFieldAad(context: E2eeRequestContext, field: string): Uint8Array;
+export declare function responseFieldAad(context: E2eeRequestContext, field: string, 
+/** The clear response `id`, or "" when the response has none. */
+id: string): Uint8Array;
+//# sourceMappingURL=aad.d.ts.map

package/dist/derivatives/e2ee/aad.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.d.ts","sourceRoot":"","sources":["../../../src/derivatives/e2ee/aad.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,MAAM,GACZ,UAAU,CASZ;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,MAAM;AACb,iEAAiE;AACjE,EAAE,EAAE,MAAM,GACT,UAAU,CAUZ"}

package/dist/derivatives/e2ee/aad.js

@@ -0,0 +1,32 @@
+/**
+ * E2EE v2 associated data (spec section 6): RFC 8785 JCS bytes binding every
+ * ciphertext to its field path and request context. Byte-exact examples are
+ * pinned by the spec test vectors in aad.test.ts.
+ */
+import { canonicalJsonBytes } from "./jcs.js";
+export const E2EE_REQUEST_AAD_PURPOSE = "aci.e2ee.request.v2";
+export const E2EE_RESPONSE_AAD_PURPOSE = "aci.e2ee.response.v2";
+export function requestFieldAad(context, field) {
+    return canonicalJsonBytes({
+        purpose: E2EE_REQUEST_AAD_PURPOSE,
+        algo: context.algo,
+        model: context.model,
+        field,
+        nonce: context.nonce,
+        ts: context.ts,
+    });
+}
+export function responseFieldAad(context, field, 
+/** The clear response `id`, or "" when the response has none. */
+id) {
+    return canonicalJsonBytes({
+        purpose: E2EE_RESPONSE_AAD_PURPOSE,
+        algo: context.algo,
+        model: context.model,
+        id,
+        field,
+        nonce: context.nonce,
+        ts: context.ts,
+    });
+}
+//# sourceMappingURL=aad.js.map

package/dist/derivatives/e2ee/aad.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.js","sourceRoot":"","sources":["../../../src/derivatives/e2ee/aad.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAahE,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,KAAa;IAEb,OAAO,kBAAkB,CAAC;QACxB,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAA2B,EAC3B,KAAa;AACb,iEAAiE;AACjE,EAAU;IAEV,OAAO,kBAAkB,CAAC;QACxB,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE;QACF,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;KACf,CAAC,CAAC;AACL,CAAC"}