@peerbit/trusted-network 6.0.112 → 6.0.113

package/dist/src/v2-authority-entry.d.ts

@@ -0,0 +1,27 @@
+import { NetworkDescriptorV2 } from "./v2.js";
+/** Internal limits selected by a concrete TrustedNetwork v2 record profile. */
+export type AuthorityEntryV0LimitsV2 = {
+    maximumEntryBytes: number;
+    maximumDirectParents: number;
+    exactPayloadBytes?: number;
+};
+export type AuthenticatedAuthorityEntryV0V2 = {
+    descriptor: NetworkDescriptorV2;
+    entryBytes: Uint8Array;
+    entryCid: string;
+    entryDigest: Uint8Array;
+    gid: string;
+    metaData?: Uint8Array;
+    directParents: Array<{
+        cid: string;
+        digest: Uint8Array;
+    }>;
+    payloadBytes: Uint8Array;
+};
+/**
+ * Authenticate one bounded raw EntryV0 authority envelope. This establishes
+ * canonical bytes, authority signature, and structural facts only. It does not
+ * establish policy acceptance, causal ancestry, freshness, or durability.
+ */
+export declare const authenticateAuthorityEntryV0V2: (entryBytes: Uint8Array, descriptor: NetworkDescriptorV2, limits: AuthorityEntryV0LimitsV2) => Promise<AuthenticatedAuthorityEntryV0V2>;
+//# sourceMappingURL=v2-authority-entry.d.ts.map

package/dist/src/v2-authority-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-authority-entry.d.ts","sourceRoot":"","sources":["../../src/v2-authority-entry.ts"],"names":[],"mappings":"AAWA,OAAO,EACN,mBAAmB,EAKnB,MAAM,SAAS,CAAC;AAEjB,+EAA+E;AAC/E,MAAM,MAAM,wBAAwB,GAAG;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC7C,UAAU,EAAE,mBAAmB,CAAC;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC1D,YAAY,EAAE,UAAU,CAAC;CACzB,CAAC;AAwRF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,GAC1C,YAAY,UAAU,EACtB,YAAY,mBAAmB,EAC/B,QAAQ,wBAAwB,KAC9B,OAAO,CAAC,+BAA+B,CAyGzC,CAAC"}

package/dist/src/v2-authority-entry.js

@@ -0,0 +1,304 @@
+import { deserialize, serialize } from "@dao-xyz/borsh";
+import { calculateRawCid, cidifyString, codecMap, defaultHasher, stringifyCid, } from "@peerbit/blocks-interface";
+import { DecryptedThing, verify } from "@peerbit/crypto";
+import { Entry, EntryType, EntryV0, NO_ENCODING } from "@peerbit/log";
+import { equals } from "uint8arrays";
+import { NetworkDescriptorV2, assertNetworkDescriptorV2, copyUint8ArrayV2, copyUint8ArrayWithLengthV2, exactUint8ArrayByteLengthV2, } from "./v2.js";
+class BoundsReaderV2 {
+    bytes;
+    offset = 0;
+    view;
+    constructor(bytes) {
+        this.bytes = bytes;
+        this.view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+    }
+    get position() {
+        return this.offset;
+    }
+    readU8(label) {
+        return this.readExact(1, label)[0];
+    }
+    readU32(label) {
+        this.requireRemaining(4, label);
+        const value = this.view.getUint32(this.offset, true);
+        this.offset += 4;
+        return value;
+    }
+    readBytes(label) {
+        return this.readExact(this.readU32(`${label} length`), label);
+    }
+    readExact(byteLength, label) {
+        this.requireRemaining(byteLength, label);
+        const start = this.offset;
+        this.offset += byteLength;
+        return this.bytes.subarray(start, this.offset);
+    }
+    expectU8(expected, label) {
+        if (this.readU8(label) !== expected) {
+            throw new Error(`Authority EntryV0 has invalid ${label}`);
+        }
+    }
+    expectDone(label) {
+        if (this.offset !== this.bytes.byteLength) {
+            throw new Error(`Authority EntryV0 has trailing ${label} bytes`);
+        }
+    }
+    requireRemaining(byteLength, label) {
+        if (!Number.isSafeInteger(byteLength) ||
+            byteLength < 0 ||
+            byteLength > this.bytes.byteLength - this.offset) {
+            throw new Error(`Authority EntryV0 has truncated ${label}`);
+        }
+    }
+}
+const readPublicWrapperV2 = (reader, label) => {
+    reader.expectU8(0, `${label} MaybeEncrypted variant`);
+    reader.expectU8(0, `${label} DecryptedThing variant`);
+    return reader.readBytes(label);
+};
+const scanMetaV2 = (metaBytes, authorityBytes, maximumDirectParents) => {
+    const reader = new BoundsReaderV2(metaBytes);
+    reader.expectU8(0, "metadata variant");
+    reader.expectU8(0, "clock variant");
+    if (!equals(reader.readBytes("clock id"), authorityBytes)) {
+        throw new Error("Authority EntryV0 clock id is not the policy authority");
+    }
+    reader.expectU8(0, "timestamp variant");
+    reader.readExact(8, "timestamp wall time");
+    reader.readExact(4, "timestamp logical time");
+    reader.readBytes("gid");
+    const directParentCount = reader.readU32("direct-parent count");
+    if (directParentCount > maximumDirectParents) {
+        throw new Error(`Authority EntryV0 may contain at most ${maximumDirectParents} direct parents`);
+    }
+    for (let i = 0; i < directParentCount; i++) {
+        reader.readBytes("direct parent");
+    }
+    if (reader.readU8("entry type") !== EntryType.APPEND) {
+        throw new Error("Authority EntryV0 must be an APPEND entry");
+    }
+    const metaDataOption = reader.readU8("metadata data option");
+    if (metaDataOption === 1) {
+        reader.readBytes("metadata data");
+    }
+    else if (metaDataOption !== 0) {
+        throw new Error("Authority EntryV0 has invalid metadata data option");
+    }
+    reader.expectDone("metadata");
+};
+const scanPayloadV2 = (payloadBytes, exactPayloadBytes) => {
+    const reader = new BoundsReaderV2(payloadBytes);
+    reader.expectU8(0, "payload variant");
+    const data = reader.readBytes("payload data");
+    if (exactPayloadBytes !== undefined &&
+        data.byteLength !== exactPayloadBytes) {
+        throw new Error(`Authority EntryV0 payload must contain exactly ${exactPayloadBytes} bytes`);
+    }
+    reader.expectDone("payload");
+};
+const SECP256K1_SIGNATURE_TEXT_BYTES = 132;
+const SECP256K1_LOW_S_MAX_HEX = "7fffffffffffffffffffffffffffffff5d576e7357a4501ddfe92f46681b20a0";
+const isLowerHexByteV2 = (value) => (value >= 0x30 && value <= 0x39) || (value >= 0x61 && value <= 0x66);
+const assertCanonicalSecp256k1SignatureV2 = (signature) => {
+    if (signature.byteLength !== SECP256K1_SIGNATURE_TEXT_BYTES ||
+        signature[0] !== 0x30 ||
+        signature[1] !== 0x78) {
+        throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+    }
+    for (let i = 2; i < signature.byteLength; i++) {
+        if (!isLowerHexByteV2(signature[i])) {
+            throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+        }
+    }
+    if (signature[130] !== 0x31 ||
+        (signature[131] !== 0x62 && signature[131] !== 0x63)) {
+        throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+    }
+    for (let i = 0; i < SECP256K1_LOW_S_MAX_HEX.length; i++) {
+        const actual = signature[66 + i];
+        const maximum = SECP256K1_LOW_S_MAX_HEX.charCodeAt(i);
+        if (actual < maximum)
+            break;
+        if (actual > maximum) {
+            throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+        }
+    }
+};
+const scanSignatureV2 = (signatureBytes, authorityBytes) => {
+    const reader = new BoundsReaderV2(signatureBytes);
+    reader.expectU8(0, "signature variant");
+    const signature = reader.readBytes("signature data");
+    const publicKeyVariant = reader.readU8("signature public-key variant");
+    const publicKeyLength = publicKeyVariant === 0 ? 32 : publicKeyVariant === 1 ? 33 : undefined;
+    if (publicKeyLength === undefined) {
+        throw new Error("Authority EntryV0 uses an unsupported signing key");
+    }
+    const publicKey = reader.readExact(publicKeyLength, "signature public key");
+    const serializedPublicKey = new Uint8Array(publicKeyLength + 1);
+    serializedPublicKey[0] = publicKeyVariant;
+    serializedPublicKey.set(publicKey, 1);
+    if (!equals(serializedPublicKey, authorityBytes)) {
+        throw new Error("Authority EntryV0 signer is not the policy authority");
+    }
+    if (publicKeyVariant === 1) {
+        assertCanonicalSecp256k1SignatureV2(signature);
+    }
+    reader.readU8("signature prehash");
+    reader.expectDone("signature");
+};
+const scanAuthorityEntryV0 = (entryBytes, authorityBytes, limits) => {
+    const reader = new BoundsReaderV2(entryBytes);
+    reader.expectU8(0, "entry variant");
+    const metaBytes = readPublicWrapperV2(reader, "metadata");
+    const payloadBytes = readPublicWrapperV2(reader, "payload");
+    const reserved = reader.readExact(4, "reserved bytes");
+    if (reserved[0] !== 0 ||
+        reserved[1] !== 0 ||
+        reserved[2] !== 0 ||
+        reserved[3] !== 0) {
+        throw new Error("Authority EntryV0 reserved bytes must be zero");
+    }
+    const signablePrefixLength = reader.position;
+    reader.expectU8(1, "signatures option");
+    reader.expectU8(0, "signatures variant");
+    if (reader.readU32("signature count") !== 1) {
+        throw new Error("Authority EntryV0 must contain exactly one signature");
+    }
+    const signatureBytes = readPublicWrapperV2(reader, "signature");
+    reader.expectU8(0, "hash option");
+    reader.expectDone("storage");
+    scanMetaV2(metaBytes, authorityBytes, limits.maximumDirectParents);
+    scanPayloadV2(payloadBytes, limits.exactPayloadBytes);
+    scanSignatureV2(signatureBytes, authorityBytes);
+    const signableBytes = new Uint8Array(signablePrefixLength + 2);
+    signableBytes.set(entryBytes.subarray(0, signablePrefixLength));
+    return { metaBytes, payloadBytes, signatureBytes, signableBytes };
+};
+const validateLimitsV2 = (limits) => {
+    if (!Number.isSafeInteger(limits.maximumEntryBytes) ||
+        limits.maximumEntryBytes < 1 ||
+        !Number.isSafeInteger(limits.maximumDirectParents) ||
+        limits.maximumDirectParents < 0 ||
+        (limits.exactPayloadBytes !== undefined &&
+            (!Number.isSafeInteger(limits.exactPayloadBytes) ||
+                limits.exactPayloadBytes < 0))) {
+        throw new Error("Invalid internal authority EntryV0 limits");
+    }
+};
+const canonicalDirectParentsV2 = (parents) => {
+    const seen = new Set();
+    return parents.map((cid) => {
+        let parsed;
+        try {
+            parsed = cidifyString(cid);
+        }
+        catch {
+            throw new Error("Authority EntryV0 direct parents must use canonical CIDv1/raw/sha2-256");
+        }
+        if (!cid ||
+            parsed.version !== 1 ||
+            parsed.code !== codecMap.raw.code ||
+            parsed.multihash.code !== defaultHasher.code ||
+            parsed.multihash.digest.byteLength !== 32 ||
+            stringifyCid(parsed) !== cid) {
+            throw new Error("Authority EntryV0 direct parents must use canonical CIDv1/raw/sha2-256");
+        }
+        if (seen.has(cid)) {
+            throw new Error("Authority EntryV0 direct parents must be unique");
+        }
+        seen.add(cid);
+        return {
+            cid,
+            digest: copyUint8ArrayV2(parsed.multihash.digest),
+        };
+    });
+};
+/**
+ * Authenticate one bounded raw EntryV0 authority envelope. This establishes
+ * canonical bytes, authority signature, and structural facts only. It does not
+ * establish policy acceptance, causal ancestry, freshness, or durability.
+ */
+export const authenticateAuthorityEntryV0V2 = async (entryBytes, descriptor, limits) => {
+    validateLimitsV2(limits);
+    let byteLength;
+    try {
+        byteLength = exactUint8ArrayByteLengthV2(entryBytes);
+    }
+    catch {
+        throw new Error("Authority entry must use canonical EntryV0 bytes");
+    }
+    if (byteLength < 1 || byteLength > limits.maximumEntryBytes) {
+        throw new Error(`Authority EntryV0 must contain 1-${limits.maximumEntryBytes} bytes`);
+    }
+    const capturedEntryBytes = copyUint8ArrayWithLengthV2(entryBytes, byteLength);
+    assertNetworkDescriptorV2(descriptor);
+    const authorityBytes = serialize(descriptor.policyAuthority);
+    const scanned = scanAuthorityEntryV0(capturedEntryBytes, authorityBytes, limits);
+    const capturedDescriptor = deserialize(serialize(descriptor), NetworkDescriptorV2);
+    assertNetworkDescriptorV2(capturedDescriptor);
+    if (!equals(serialize(capturedDescriptor.policyAuthority), authorityBytes)) {
+        throw new Error("Network descriptor changed during capture");
+    }
+    const entry = deserialize(capturedEntryBytes, Entry);
+    if (!(entry instanceof EntryV0)) {
+        throw new Error("Authority entry must use EntryV0");
+    }
+    if (!equals(capturedEntryBytes, serialize(entry))) {
+        throw new Error("Authority EntryV0 storage is not canonical");
+    }
+    if (!(entry._meta instanceof DecryptedThing)) {
+        throw new Error("Authority EntryV0 metadata must be public");
+    }
+    if (!(entry._payload instanceof DecryptedThing)) {
+        throw new Error("Authority EntryV0 payload must be public");
+    }
+    if (entry._signatures === undefined ||
+        entry._signatures.signatures.length !== 1 ||
+        !(entry._signatures.signatures[0] instanceof DecryptedThing)) {
+        throw new Error("Authority EntryV0 must contain one public signature");
+    }
+    entry.init({ encoding: NO_ENCODING });
+    const meta = entry.meta;
+    const payload = entry.payload;
+    const signatures = entry.signatures;
+    if (!equals(scanned.metaBytes, serialize(meta)) ||
+        !equals(scanned.payloadBytes, serialize(payload)) ||
+        !equals(scanned.signatureBytes, serialize(signatures[0]))) {
+        throw new Error("Authority EntryV0 nested encoding is not canonical");
+    }
+    if (meta.type !== EntryType.APPEND ||
+        meta.next.length > limits.maximumDirectParents ||
+        !equals(meta.clock.id, authorityBytes)) {
+        throw new Error("Authority EntryV0 metadata does not match its profile");
+    }
+    if (signatures.length !== 1 ||
+        !equals(serialize(signatures[0].publicKey), authorityBytes)) {
+        throw new Error("Authority EntryV0 signer is not the policy authority");
+    }
+    if (limits.exactPayloadBytes !== undefined &&
+        payload.data.byteLength !== limits.exactPayloadBytes) {
+        throw new Error(`Authority EntryV0 payload must contain exactly ${limits.exactPayloadBytes} bytes`);
+    }
+    let signatureIsValid = false;
+    try {
+        signatureIsValid = await verify(signatures[0], scanned.signableBytes);
+    }
+    catch {
+        // Unsupported prehashes and malformed signatures fail closed.
+    }
+    if (!signatureIsValid) {
+        throw new Error("Authority EntryV0 signature is invalid");
+    }
+    const prepared = await calculateRawCid(capturedEntryBytes);
+    return {
+        descriptor: capturedDescriptor,
+        entryBytes: capturedEntryBytes,
+        entryCid: prepared.cid,
+        entryDigest: copyUint8ArrayV2(prepared.block.cid.multihash.digest),
+        gid: meta.gid,
+        metaData: meta.data === undefined ? undefined : copyUint8ArrayV2(meta.data),
+        directParents: canonicalDirectParentsV2(meta.next),
+        payloadBytes: copyUint8ArrayV2(payload.data),
+    };
+};
+//# sourceMappingURL=v2-authority-entry.js.map

package/dist/src/v2-authority-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-authority-entry.js","sourceRoot":"","sources":["../../src/v2-authority-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EACN,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,YAAY,GACZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACN,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,EAC1B,2BAA2B,GAC3B,MAAM,SAAS,CAAC;AA2BjB,MAAM,cAAc;IAIU;IAHrB,MAAM,GAAG,CAAC,CAAC;IACF,IAAI,CAAW;IAEhC,YAA6B,KAAiB;QAAjB,UAAK,GAAL,KAAK,CAAY;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,KAAa;QACpB,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,SAAS,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IAED,SAAS,CAAC,UAAkB,EAAE,KAAa;QAC1C,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,KAAa;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IAED,UAAU,CAAC,KAAa;QACvB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,QAAQ,CAAC,CAAC;QAClE,CAAC;IACF,CAAC;IAEO,gBAAgB,CAAC,UAAkB,EAAE,KAAa;QACzD,IACC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,EAC/C,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;CACD;AAED,MAAM,mBAAmB,GAAG,CAC3B,MAAsB,EACtB,KAAa,EACA,EAAE;IACf,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAClB,SAAqB,EACrB,cAA0B,EAC1B,oBAA4B,EACrB,EAAE;IACT,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC9C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAExB,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAChE,IAAI,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACd,yCAAyC,oBAAoB,iBAAiB,CAC9E,CAAC;IACH,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7D,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACrB,YAAwB,EACxB,iBAA0B,EACnB,EAAE;IACT,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC9C,IACC,iBAAiB,KAAK,SAAS;QAC/B,IAAI,CAAC,UAAU,KAAK,iBAAiB,EACpC,CAAC;QACF,MAAM,IAAI,KAAK,CACd,kDAAkD,iBAAiB,QAAQ,CAC3E,CAAC;IACH,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAC3C,MAAM,uBAAuB,GAC5B,kEAAkE,CAAC;AAEpE,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAW,EAAE,CACnD,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC;AAEtE,MAAM,mCAAmC,GAAG,CAAC,SAAqB,EAAQ,EAAE;IAC3E,IACC,SAAS,CAAC,UAAU,KAAK,8BAA8B;QACvD,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI;QACrB,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EACpB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IACD,IACC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI;QACvB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EACnD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC;QAClC,MAAM,OAAO,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,MAAM,GAAG,OAAO;YAAE,MAAM;QAC5B,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACvB,cAA0B,EAC1B,cAA0B,EACnB,EAAE;IACT,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACvE,MAAM,eAAe,GACpB,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAC5E,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;IAChE,mBAAmB,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC;IAC1C,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,cAAc,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QAC5B,mCAAmC,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC5B,UAAsB,EACtB,cAA0B,EAC1B,MAAgC,EACN,EAAE;IAC5B,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvD,IACC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACjB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACjB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACjB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAChB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAClC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAE7B,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnE,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACtD,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC;IAC/D,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAChE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,MAAgC,EAAQ,EAAE;IACnE,IACC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC/C,MAAM,CAAC,iBAAiB,GAAG,CAAC;QAC5B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAClD,MAAM,CAAC,oBAAoB,GAAG,CAAC;QAC/B,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;YACtC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBAC/C,MAAM,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAC/B,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAChC,OAAiB,EAC4B,EAAE;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,IAAI,MAAuC,CAAC;QAC5C,IAAI,CAAC;YACJ,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,KAAK,CACd,wEAAwE,CACxE,CAAC;QACH,CAAC;QACD,IACC,CAAC,GAAG;YACJ,MAAM,CAAC,OAAO,KAAK,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,GAAG,CAAC,IAAI;YACjC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI;YAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,KAAK,EAAE;YACzC,YAAY,CAAC,MAAM,CAAC,KAAK,GAAG,EAC3B,CAAC;YACF,MAAM,IAAI,KAAK,CACd,wEAAwE,CACxE,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO;YACN,GAAG;YACH,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;SACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EAClD,UAAsB,EACtB,UAA+B,EAC/B,MAAgC,EACW,EAAE;IAC7C,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACd,oCAAoC,MAAM,CAAC,iBAAiB,QAAQ,CACpE,CAAC;IACH,CAAC;IACD,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAE9E,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,oBAAoB,CACnC,kBAAkB,EAClB,cAAc,EACd,MAAM,CACN,CAAC;IACF,MAAM,kBAAkB,GAAG,WAAW,CACrC,SAAS,CAAC,UAAU,CAAC,EACrB,mBAAmB,CACnB,CAAC;IACF,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,cAAc,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,YAAY,cAAc,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IACD,IACC,KAAK,CAAC,WAAW,KAAK,SAAS;QAC/B,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QACzC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,cAAc,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IACC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC,EACzD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,IACC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB;QAC9C,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,EACrC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,IACC,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,EAC3D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACzE,CAAC;IACD,IACC,MAAM,CAAC,iBAAiB,KAAK,SAAS;QACtC,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,iBAAiB,EACnD,CAAC;QACF,MAAM,IAAI,KAAK,CACd,kDAAkD,MAAM,CAAC,iBAAiB,QAAQ,CAClF,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC;QACJ,gBAAgB,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACR,8DAA8D;IAC/D,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC3D,OAAO;QACN,UAAU,EAAE,kBAAkB;QAC9B,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,QAAQ,CAAC,GAAG;QACtB,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;QAClE,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3E,aAAa,EAAE,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QAClD,YAAY,EAAE,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC;KAC5C,CAAC;AACH,CAAC,CAAC"}

package/dist/src/v2-resource-fence-entry.d.ts

@@ -0,0 +1,26 @@
+import { NetworkDescriptorV2, ResourceFenceV2 } from "./v2.js";
+export type AuthenticatedResourceFenceEntryV2 = Readonly<{
+    entryBytes: Uint8Array;
+    entryCid: string;
+    digest: Uint8Array;
+    body: ResourceFenceV2;
+    gid: string;
+    metaData?: Uint8Array;
+    directParents: ReadonlyArray<Readonly<{
+        cid: string;
+        digest: Uint8Array;
+    }>>;
+}>;
+export type AuthenticateResourceFenceEntryV2Properties = Readonly<{
+    entryBytes: Uint8Array;
+    descriptor: NetworkDescriptorV2;
+    expectedResourceId: Uint8Array;
+    expectedGid: string;
+}>;
+/**
+ * Authenticate a raw resource-fence EntryV0 against immutable resource
+ * context. The returned token does not prove policy acceptance, causal
+ * ancestry, fork freedom, freshness, or durability.
+ */
+export declare const authenticateResourceFenceEntryV2: ({ entryBytes, descriptor, expectedResourceId, expectedGid, }: AuthenticateResourceFenceEntryV2Properties) => Promise<AuthenticatedResourceFenceEntryV2>;
+//# sourceMappingURL=v2-resource-fence-entry.d.ts.map

package/dist/src/v2-resource-fence-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-resource-fence-entry.d.ts","sourceRoot":"","sources":["../../src/v2-resource-fence-entry.ts"],"names":[],"mappings":"AAKA,OAAO,EACN,mBAAmB,EACnB,eAAe,EAOf,MAAM,SAAS,CAAC;AAQjB,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IACxD,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,eAAe,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAM,MAAM,0CAA0C,GAAG,QAAQ,CAAC;IACjE,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,mBAAmB,CAAC;IAChC,kBAAkB,EAAE,UAAU,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AA4BH;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,GAAU,8DAKpD,0CAA0C,KAAG,OAAO,CAAC,iCAAiC,CAqBxF,CAAC"}

package/dist/src/v2-resource-fence-entry.js

@@ -0,0 +1,51 @@
+import { equals } from "uint8arrays";
+import { authenticateAuthorityEntryV0V2, } from "./v2-authority-entry.js";
+import { NetworkDescriptorV2, ResourceFenceV2, TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS, TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES, TRUSTED_NETWORK_V2_RESOURCE_FENCE_BODY_BYTES, copyUint8ArrayWithLengthV2, decodeResourceFenceV2, exactUint8ArrayByteLengthV2, } from "./v2.js";
+const RESOURCE_FENCE_AUTHORITY_LIMITS_V2 = Object.freeze({
+    maximumEntryBytes: TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES,
+    maximumDirectParents: TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS,
+    exactPayloadBytes: TRUSTED_NETWORK_V2_RESOURCE_FENCE_BODY_BYTES,
+});
+const captureResourceIdV2 = (resourceId) => {
+    let byteLength;
+    try {
+        byteLength = exactUint8ArrayByteLengthV2(resourceId);
+    }
+    catch {
+        throw new Error("Expected resource id must contain exactly 32 bytes");
+    }
+    if (byteLength !== 32) {
+        throw new Error("Expected resource id must contain exactly 32 bytes");
+    }
+    return copyUint8ArrayWithLengthV2(resourceId, byteLength);
+};
+const toResourceFenceTokenV2 = (authenticated, body) => ({
+    entryBytes: authenticated.entryBytes,
+    entryCid: authenticated.entryCid,
+    digest: authenticated.entryDigest,
+    body,
+    gid: authenticated.gid,
+    metaData: authenticated.metaData,
+    directParents: authenticated.directParents,
+});
+/**
+ * Authenticate a raw resource-fence EntryV0 against immutable resource
+ * context. The returned token does not prove policy acceptance, causal
+ * ancestry, fork freedom, freshness, or durability.
+ */
+export const authenticateResourceFenceEntryV2 = async ({ entryBytes, descriptor, expectedResourceId, expectedGid, }) => {
+    if (typeof expectedGid !== "string") {
+        throw new Error("Expected resource gid must be a string");
+    }
+    const capturedResourceId = captureResourceIdV2(expectedResourceId);
+    const authenticated = await authenticateAuthorityEntryV0V2(entryBytes, descriptor, RESOURCE_FENCE_AUTHORITY_LIMITS_V2);
+    if (authenticated.gid !== expectedGid) {
+        throw new Error("Resource fence belongs to another resource log");
+    }
+    const body = decodeResourceFenceV2(authenticated.payloadBytes, authenticated.descriptor);
+    if (!equals(body.resourceId, capturedResourceId)) {
+        throw new Error("Resource fence belongs to another resource");
+    }
+    return toResourceFenceTokenV2(authenticated, body);
+};
+//# sourceMappingURL=v2-resource-fence-entry.js.map

package/dist/src/v2-resource-fence-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-resource-fence-entry.js","sourceRoot":"","sources":["../../src/v2-resource-fence-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAEN,8BAA8B,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,mBAAmB,EACnB,eAAe,EACf,oDAAoD,EACpD,iDAAiD,EACjD,4CAA4C,EAC5C,0BAA0B,EAC1B,qBAAqB,EACrB,2BAA2B,GAC3B,MAAM,SAAS,CAAC;AAEjB,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,iBAAiB,EAAE,iDAAiD;IACpE,oBAAoB,EAAE,oDAAoD;IAC1E,iBAAiB,EAAE,4CAA4C;CAC/D,CAAC,CAAC;AAmBH,MAAM,mBAAmB,GAAG,CAAC,UAAsB,EAAc,EAAE;IAClE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,0BAA0B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC9B,aAA8C,EAC9C,IAAqB,EACe,EAAE,CAAC,CAAC;IACxC,UAAU,EAAE,aAAa,CAAC,UAAU;IACpC,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,MAAM,EAAE,aAAa,CAAC,WAAW;IACjC,IAAI;IACJ,GAAG,EAAE,aAAa,CAAC,GAAG;IACtB,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,aAAa,EAAE,aAAa,CAAC,aAAa;CAC1C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,EAAE,EACtD,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,WAAW,GACiC,EAA8C,EAAE;IAC5F,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,MAAM,8BAA8B,CACzD,UAAU,EACV,UAAU,EACV,kCAAkC,CAClC,CAAC;IACF,IAAI,aAAa,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CACjC,aAAa,CAAC,YAAY,EAC1B,aAAa,CAAC,UAAU,CACxB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,sBAAsB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC,CAAC"}

package/dist/src/v2.d.ts

@@ -23,6 +23,12 @@ export declare const TRUSTED_NETWORK_V2_ENTRY_V0_AUTHORITY_ONLY_SIGNATURE_PROFIL
  * it is part of signature profile 1 rather than a replica-local resource knob.
  */
 export declare const TRUSTED_NETWORK_V2_MAX_POLICY_ENTRY_BYTES: number;
+/**
+ * Consensus bounds for a canonical signed resource-fence EntryV0. These are
+ * protocol constants, not resource-adapter configuration.
+ */
+export declare const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES: number;
+export declare const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS = 64;
 export declare const TRUSTED_NETWORK_V2_NETWORK_ID_DOMAIN = "peerbit/trusted-network/v2/network-id/v1";
 export declare const TRUSTED_NETWORK_V2_POLICY_DIGEST_DOMAIN = "peerbit/trusted-network/v2/policy-body/v1";
 /** Fixed first-profile record lengths. Changing either requires a new variant. */
@@ -35,6 +41,9 @@ export declare const TrustedNetworkRole: Readonly<{
     readonly REPLICATOR: 8;
 }>;
 export declare const TRUSTED_NETWORK_V2_KNOWN_ROLE_BITS: number;
+export declare const exactUint8ArrayByteLengthV2: (value: unknown) => number;
+export declare const copyUint8ArrayWithLengthV2: (value: Uint8Array, byteLength: number) => Uint8Array;
+export declare const copyUint8ArrayV2: (value: Uint8Array) => Uint8Array;
 export declare class NetworkDescriptorV2 {
     protocolVersion: number;
     networkNonce: Uint8Array;

package/dist/src/v2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAc,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACN,OAAO,EACP,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,MAAM,kBAAkB,CAAC;AAG1B;;;;;;GAMG;AAEH,eAAO,MAAM,mCAAmC,IAAI,CAAC;AACrD,eAAO,MAAM,qCAAqC,IAAI,CAAC;AAEvD;;;;;;GAMG;AACH,eAAO,MAAM,4DAA4D,IAAI,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,QAAa,CAAC;AAEpE,eAAO,MAAM,oCAAoC,6CACN,CAAC;AAC5C,eAAO,MAAM,uCAAuC,8CACR,CAAC;AAE7C,kFAAkF;AAClF,eAAO,MAAM,4CAA4C,MAAM,CAAC;AAChE,eAAO,MAAM,+CAA+C,MAAM,CAAC;AAEnE,eAAO,MAAM,kBAAkB;;;;;EAKpB,CAAC;AAEZ,eAAO,MAAM,kCAAkC,QAIjB,CAAC;AA4E/B,qBACa,mBAAmB;IAE/B,eAAe,EAAE,MAAM,CAAC;IAGxB,YAAY,EAAE,UAAU,CAAC;IAGzB,eAAe,EAAE,aAAa,CAAC;IAG/B,mBAAmB,EAAE,UAAU,CAAC;IAGhC,iBAAiB,EAAE,MAAM,CAAC;IAG1B,qBAAqB,EAAE,MAAM,CAAC;gBAElB,UAAU,CAAC,EAAE;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,UAAU,CAAC;QACzB,eAAe,EAAE,aAAa,CAAC;QAC/B,mBAAmB,EAAE,UAAU,CAAC;QAChC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,qBAAqB,EAAE,MAAM,CAAC;KAC9B;CAGD;AAED,qBAAa,yBAAyB;IAErC,OAAO,EAAE,MAAM,CAAC;IAGhB,MAAM,EAAE,UAAU,CAAC;gBAEP,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE;CAGhE;AAED,qBAAa,sBAAsB;IAElC,UAAU,EAAE,aAAa,CAAC;IAG1B,KAAK,EAAE,MAAM,CAAC;IAGd,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;gBAExC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,aAAa,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;KACpD;CAGD;AAED,qBACa,oBAAoB;IAEhC,SAAS,EAAE,UAAU,CAAC;IAGtB,QAAQ,EAAE,MAAM,CAAC;IAGjB,oBAAoB,EAAE,UAAU,CAAC;IAGjC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;gBAEvB,UAAU,CAAC,EAAE;QACxB,SAAS,EAAE,UAAU,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,EAAE,UAAU,CAAC;QACjC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;KACnC;CAGD;AAED,+EAA+E;AAC/E,qBACa,eAAe;IAE3B,SAAS,EAAE,UAAU,CAAC;IAGtB,UAAU,EAAE,UAAU,CAAC;IAGvB,aAAa,EAAE,MAAM,CAAC;IAGtB,mBAAmB,EAAE,UAAU,CAAC;IAGhC,cAAc,EAAE,MAAM,CAAC;IAGvB,YAAY,EAAE,UAAU,CAAC;IAGzB,YAAY,EAAE,MAAM,CAAC;IAGrB,mBAAmB,EAAE,UAAU,CAAC;gBAEpB,UAAU,CAAC,EAAE;QACxB,SAAS,EAAE,UAAU,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,EAAE,UAAU,CAAC;QAChC,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,UAAU,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,UAAU,CAAC;KAChC;CAGD;AAED,gFAAgF;AAChF,qBACa,sBAAsB;IAElC,SAAS,EAAE,UAAU,CAAC;IAGtB,UAAU,EAAE,UAAU,CAAC;IAGvB,cAAc,EAAE,MAAM,CAAC;IAGvB,YAAY,EAAE,UAAU,CAAC;IAGzB,WAAW,EAAE,UAAU,CAAC;IAGxB,YAAY,EAAE,MAAM,CAAC;gBAET,UAAU,CAAC,EAAE;QACxB,SAAS,EAAE,UAAU,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,UAAU,CAAC;QACzB,WAAW,EAAE,UAAU,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;KACrB;CAGD;AAED,qBACa,gBAAiB,SAAQ,OAAO,CAAC,KAAK,CAAC;IAEnD,UAAU,EAAE,mBAAmB,CAAC;gBAEpB,UAAU,CAAC,EAAE;QAAE,UAAU,EAAE,mBAAmB,CAAA;KAAE;IAK7C,UAAU,CACxB,KAAK,EAAE,aAAa,EACpB,QAAQ,CAAC,EAAE,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,GAClD,OAAO,CAAC,KAAK,CAAC;IAMX,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;CAKzC;AAED,eAAO,MAAM,yBAAyB,GACrC,YAAY,mBAAmB,KAC7B,IAqBF,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC7B,YAAY,mBAAmB,KAC7B,UAUF,CAAC;AAEF,eAAO,MAAM,0BAA0B,GACtC,MAAM,oBAAoB,KACxB,UAQF,CAAC;AAEF,eAAO,MAAM,0BAA0B,GACtC,MAAM,oBAAoB,EAC1B,YAAY,mBAAmB,KAC7B,IAiEF,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,OAAO,UAAU,KAAG,gBAK1D,CAAC;AAEF,eAAO,MAAM,0BAA0B,GACtC,OAAO,UAAU,EACjB,YAAY,mBAAmB,KAC7B,oBAKF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GACjC,OAAO,eAAe,EACtB,YAAY,mBAAmB,KAC7B,IAsBF,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACxC,OAAO,sBAAsB,EAC7B,YAAY,mBAAmB,KAC7B,IAWF,CAAC;AA2BF,eAAO,MAAM,qBAAqB,GACjC,OAAO,UAAU,EACjB,YAAY,mBAAmB,KAC7B,eAQF,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACxC,OAAO,UAAU,EACjB,YAAY,mBAAmB,KAC7B,sBAQF,CAAC"}
+{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAc,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACN,OAAO,EACP,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,MAAM,kBAAkB,CAAC;AAG1B;;;;;;GAMG;AAEH,eAAO,MAAM,mCAAmC,IAAI,CAAC;AACrD,eAAO,MAAM,qCAAqC,IAAI,CAAC;AAEvD;;;;;;GAMG;AACH,eAAO,MAAM,4DAA4D,IAAI,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,QAAa,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,iDAAiD,QAAW,CAAC;AAC1E,eAAO,MAAM,oDAAoD,KAAK,CAAC;AAEvE,eAAO,MAAM,oCAAoC,6CACN,CAAC;AAC5C,eAAO,MAAM,uCAAuC,8CACR,CAAC;AAE7C,kFAAkF;AAClF,eAAO,MAAM,4CAA4C,MAAM,CAAC;AAChE,eAAO,MAAM,+CAA+C,MAAM,CAAC;AAEnE,eAAO,MAAM,kBAAkB;;;;;EAKpB,CAAC;AAEZ,eAAO,MAAM,kCAAkC,QAIjB,CAAC;AAc/B,eAAO,MAAM,2BAA2B,GAAI,OAAO,OAAO,KAAG,MAY5D,CAAC;AAEF,eAAO,MAAM,0BAA0B,GACtC,OAAO,UAAU,EACjB,YAAY,MAAM,KAChB,UAIF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,UAAU,KAAG,UAGpD,CAAC;AAkDF,qBACa,mBAAmB;IAE/B,eAAe,EAAE,MAAM,CAAC;IAGxB,YAAY,EAAE,UAAU,CAAC;IAGzB,eAAe,EAAE,aAAa,CAAC;IAG/B,mBAAmB,EAAE,UAAU,CAAC;IAGhC,iBAAiB,EAAE,MAAM,CAAC;IAG1B,qBAAqB,EAAE,MAAM,CAAC;gBAElB,UAAU,CAAC,EAAE;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,UAAU,CAAC;QACzB,eAAe,EAAE,aAAa,CAAC;QAC/B,mBAAmB,EAAE,UAAU,CAAC;QAChC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,qBAAqB,EAAE,MAAM,CAAC;KAC9B;CAGD;AAED,qBAAa,yBAAyB;IAErC,OAAO,EAAE,MAAM,CAAC;IAGhB,MAAM,EAAE,UAAU,CAAC;gBAEP,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE;CAGhE;AAED,qBAAa,sBAAsB;IAElC,UAAU,EAAE,aAAa,CAAC;IAG1B,KAAK,EAAE,MAAM,CAAC;IAGd,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;gBAExC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,aAAa,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;KACpD;CAGD;AAED,qBACa,oBAAoB;IAEhC,SAAS,EAAE,UAAU,CAAC;IAGtB,QAAQ,EAAE,MAAM,CAAC;IAGjB,oBAAoB,EAAE,UAAU,CAAC;IAGjC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;gBAEvB,UAAU,CAAC,EAAE;QACxB,SAAS,EAAE,UAAU,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,EAAE,UAAU,CAAC;QACjC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;KACnC;CAGD;AAED,+EAA+E;AAC/E,qBACa,eAAe;IAE3B,SAAS,EAAE,UAAU,CAAC;IAGtB,UAAU,EAAE,UAAU,CAAC;IAGvB,aAAa,EAAE,MAAM,CAAC;IAGtB,mBAAmB,EAAE,UAAU,CAAC;IAGhC,cAAc,EAAE,MAAM,CAAC;IAGvB,YAAY,EAAE,UAAU,CAAC;IAGzB,YAAY,EAAE,MAAM,CAAC;IAGrB,mBAAmB,EAAE,UAAU,CAAC;gBAEpB,UAAU,CAAC,EAAE;QACxB,SAAS,EAAE,UAAU,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,EAAE,UAAU,CAAC;QAChC,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,UAAU,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,UAAU,CAAC;KAChC;CAGD;AAED,gFAAgF;AAChF,qBACa,sBAAsB;IAElC,SAAS,EAAE,UAAU,CAAC;IAGtB,UAAU,EAAE,UAAU,CAAC;IAGvB,cAAc,EAAE,MAAM,CAAC;IAGvB,YAAY,EAAE,UAAU,CAAC;IAGzB,WAAW,EAAE,UAAU,CAAC;IAGxB,YAAY,EAAE,MAAM,CAAC;gBAET,UAAU,CAAC,EAAE;QACxB,SAAS,EAAE,UAAU,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,UAAU,CAAC;QACzB,WAAW,EAAE,UAAU,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;KACrB;CAGD;AAED,qBACa,gBAAiB,SAAQ,OAAO,CAAC,KAAK,CAAC;IAEnD,UAAU,EAAE,mBAAmB,CAAC;gBAEpB,UAAU,CAAC,EAAE;QAAE,UAAU,EAAE,mBAAmB,CAAA;KAAE;IAK7C,UAAU,CACxB,KAAK,EAAE,aAAa,EACpB,QAAQ,CAAC,EAAE,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,GAClD,OAAO,CAAC,KAAK,CAAC;IAMX,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;CAKzC;AAED,eAAO,MAAM,yBAAyB,GACrC,YAAY,mBAAmB,KAC7B,IAqBF,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC7B,YAAY,mBAAmB,KAC7B,UAUF,CAAC;AAEF,eAAO,MAAM,0BAA0B,GACtC,MAAM,oBAAoB,KACxB,UAQF,CAAC;AAEF,eAAO,MAAM,0BAA0B,GACtC,MAAM,oBAAoB,EAC1B,YAAY,mBAAmB,KAC7B,IAiEF,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,OAAO,UAAU,KAAG,gBAK1D,CAAC;AAEF,eAAO,MAAM,0BAA0B,GACtC,OAAO,UAAU,EACjB,YAAY,mBAAmB,KAC7B,oBAKF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GACjC,OAAO,eAAe,EACtB,YAAY,mBAAmB,KAC7B,IAsBF,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACxC,OAAO,sBAAsB,EAC7B,YAAY,mBAAmB,KAC7B,IAWF,CAAC;AA0BF,eAAO,MAAM,qBAAqB,GACjC,OAAO,UAAU,EACjB,YAAY,mBAAmB,KAC7B,eAQF,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACxC,OAAO,UAAU,EACjB,YAAY,mBAAmB,KAC7B,sBAQF,CAAC"}

package/dist/src/v2.js

@@ -59,6 +59,12 @@ export const TRUSTED_NETWORK_V2_ENTRY_V0_AUTHORITY_ONLY_SIGNATURE_PROFILE = 1;
  * it is part of signature profile 1 rather than a replica-local resource knob.
  */
 export const TRUSTED_NETWORK_V2_MAX_POLICY_ENTRY_BYTES = 128 * 1024;
+/**
+ * Consensus bounds for a canonical signed resource-fence EntryV0. These are
+ * protocol constants, not resource-adapter configuration.
+ */
+export const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES = 8 * 1024;
+export const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS = 64;
 export const TRUSTED_NETWORK_V2_NETWORK_ID_DOMAIN = "peerbit/trusted-network/v2/network-id/v1";
 export const TRUSTED_NETWORK_V2_POLICY_DIGEST_DOMAIN = "peerbit/trusted-network/v2/policy-body/v1";
 /** Fixed first-profile record lengths. Changing either requires a new variant. */
@@ -79,7 +85,7 @@ const textEncoder = new TextEncoder();
 const TYPED_ARRAY_PROTOTYPE = Object.getPrototypeOf(Uint8Array.prototype);
 const TYPED_ARRAY_BYTE_LENGTH = Object.getOwnPropertyDescriptor(TYPED_ARRAY_PROTOTYPE, "byteLength").get;
 const TYPED_ARRAY_TAG = Object.getOwnPropertyDescriptor(TYPED_ARRAY_PROTOTYPE, Symbol.toStringTag).get;
-const exactUint8ArrayByteLength = (value) => {
+export const exactUint8ArrayByteLengthV2 = (value) => {
     if (!ArrayBuffer.isView(value) ||
         TYPED_ARRAY_TAG.call(value) !== "Uint8Array") {
         throw new TypeError("Expected a genuine Uint8Array");
@@ -90,6 +96,15 @@ const exactUint8ArrayByteLength = (value) => {
     }
     return byteLength;
 };
+export const copyUint8ArrayWithLengthV2 = (value, byteLength) => {
+    const copy = new Uint8Array(byteLength);
+    Uint8Array.prototype.set.call(copy, value);
+    return copy;
+};
+export const copyUint8ArrayV2 = (value) => {
+    const byteLength = exactUint8ArrayByteLengthV2(value);
+    return copyUint8ArrayWithLengthV2(value, byteLength);
+};
 const assertByte = (value, label) => {
     if (!Number.isInteger(value) || value < 0 || value > 0xff) {
         throw new Error(`${label} must be a u8`);
@@ -108,7 +123,7 @@ const assertU64 = (value, label) => {
 const assertBytes32 = (value, label) => {
     let byteLength;
     try {
-        byteLength = exactUint8ArrayByteLength(value);
+        byteLength = exactUint8ArrayByteLengthV2(value);
     }
     catch {
         throw new Error(`${label} must contain exactly 32 bytes`);
@@ -607,7 +622,7 @@ export const assertOperationPolicyProofV2 = (proof, descriptor) => {
 const decodeExactCanonicalV2 = (bytes, exactLength, type) => {
     let byteLength;
     try {
-        byteLength = exactUint8ArrayByteLength(bytes);
+        byteLength = exactUint8ArrayByteLengthV2(bytes);
     }
     catch {
         throw new Error(`TrustedNetwork v2 record must contain ${exactLength} bytes`);
@@ -615,8 +630,7 @@ const decodeExactCanonicalV2 = (bytes, exactLength, type) => {
     if (byteLength !== exactLength) {
         throw new Error(`TrustedNetwork v2 record must contain ${exactLength} bytes`);
     }
-    const captured = new Uint8Array(byteLength);
-    Uint8Array.prototype.set.call(captured, bytes);
+    const captured = copyUint8ArrayWithLengthV2(bytes, byteLength);
     const value = deserialize(captured, type);
     assertCanonicalEncoding(captured, value);
     return value;

package/dist/src/v2.js.map

@@ -1 +1 @@
-{"version":3,"file":"v2.js","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EACN,WAAW,EACX,KAAK,EACL,UAAU,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,GAAG,GACH,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACN,OAAO,GAGP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4DAA4D,GAAG,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,GAAG,GAAG,IAAI,CAAC;AAEpE,MAAM,CAAC,MAAM,oCAAoC,GAChD,0CAA0C,CAAC;AAC5C,MAAM,CAAC,MAAM,uCAAuC,GACnD,2CAA2C,CAAC;AAE7C,kFAAkF;AAClF,MAAM,CAAC,MAAM,4CAA4C,GAAG,GAAG,CAAC;AAChE,MAAM,CAAC,MAAM,+CAA+C,GAAG,GAAG,CAAC;AAEnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;CACP,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,kCAAkC,GAC9C,kBAAkB,CAAC,KAAK;IACxB,kBAAkB,CAAC,MAAM;IACzB,kBAAkB,CAAC,MAAM;IACzB,kBAAkB,CAAC,UAAU,CAAC;AAE/B,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AACvC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,qBAAqB,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC1E,MAAM,uBAAuB,GAAG,MAAM,CAAC,wBAAwB,CAC9D,qBAAqB,EACrB,YAAY,CACX,CAAC,GAAI,CAAC;AACR,MAAM,eAAe,GAAG,MAAM,CAAC,wBAAwB,CACtD,qBAAqB,EACrB,MAAM,CAAC,WAAW,CACjB,CAAC,GAAI,CAAC;AAER,MAAM,yBAAyB,GAAG,CAAC,KAAc,EAAU,EAAE;IAC5D,IACC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;QAC1B,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,YAAY,EAC3C,CAAC;QACF,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAW,CAAC;IACjE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACtB,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,KAAmB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC1C,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAE,KAAa,EAAQ,EAAE;IAChE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAc,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAc,EAAE;IAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,KAAiB,EAAE,KAAc,EAAQ,EAAE;IAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;AACF,CAAC,CAAC;IAGW,mBAAmB;4BAD/B,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;2CAEd,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wCAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;2CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;+CAG9B,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;6CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;iDAGrB,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAdtB,+LAAA,eAAe,6BAAf,eAAe,yGAAS;YAGxB,sLAAA,YAAY,6BAAZ,YAAY,mGAAa;YAGzB,+LAAA,eAAe,6BAAf,eAAe,yGAAgB;YAG/B,2MAAA,mBAAmB,6BAAnB,mBAAmB,iHAAa;YAGhC,qMAAA,iBAAiB,6BAAjB,iBAAiB,6GAAS;YAG1B,iNAAA,qBAAqB,6BAArB,qBAAqB,qHAAS;YAjB/B,6KA6BC;;;YA7BY,uDAAmB;;QAE/B,eAAe,kEAAS;QAGxB,YAAY,8HAAa;QAGzB,eAAe,8HAAgB;QAG/B,mBAAmB,qIAAa;QAGhC,iBAAiB,uIAAS;QAG1B,qBAAqB,yIAAS;QAE9B,YAAY,UAOX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SA5BW,mBAAmB;IA+BnB,yBAAyB;;;;;;;iBAAzB,yBAAyB;;;mCACpC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;kCAGrB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAFtC,uKAAA,OAAO,6BAAP,OAAO,yFAAS;YAGhB,oKAAA,MAAM,6BAAN,MAAM,uFAAa;;;QAHnB,OAAO,0DAAS;QAGhB,MAAM,gHAAa;QAEnB,YAAY,UAAoD;;YAC/D,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;SATW,yBAAyB;IAYzB,sBAAsB;;;;;;;;;;iBAAtB,sBAAsB;;;sCACjC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;iCAG9B,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;mDAGrB,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC;YALnD,gLAAA,UAAU,6BAAV,UAAU,+FAAgB;YAG1B,iKAAA,KAAK,6BAAL,KAAK,qFAAS;YAGd,uNAAA,uBAAuB,6BAAvB,uBAAuB,yHAA6B;;;QANpD,UAAU,6DAAgB;QAG1B,KAAK,kHAAS;QAGd,uBAAuB,+HAA6B;QAEpD,YAAY,UAIX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;SAhBW,sBAAsB;IAoBtB,oBAAoB;4BADhC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;qCAEd,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;oCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gDAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;oCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAR7C,6KAAA,SAAS,6BAAT,SAAS,6FAAa;YAGtB,0KAAA,QAAQ,6BAAR,QAAQ,2FAAS;YAGjB,8MAAA,oBAAoB,6BAApB,oBAAoB,mHAAa;YAGjC,0KAAA,QAAQ,6BAAR,QAAQ,2FAA2B;YAXpC,6KAqBC;;;YArBY,uDAAoB;;QAEhC,SAAS,4DAAa;QAGtB,QAAQ,oHAAS;QAGjB,oBAAoB,+HAAa;QAGjC,QAAQ,+HAA2B;QAEnC,YAAY,UAKX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SApBW,oBAAoB;AAuBjC,+EAA+E;IAElE,eAAe;4BAD3B,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAEd,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;sCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;yCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;+CAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;0CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wCAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;wCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;+CAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YApBtC,6KAAA,SAAS,6BAAT,SAAS,6FAAa;YAGtB,gLAAA,UAAU,6BAAV,UAAU,+FAAa;YAGvB,yLAAA,aAAa,6BAAb,aAAa,qGAAS;YAGtB,2MAAA,mBAAmB,6BAAnB,mBAAmB,iHAAa;YAGhC,4LAAA,cAAc,6BAAd,cAAc,uGAAS;YAGvB,sLAAA,YAAY,6BAAZ,YAAY,mGAAa;YAGzB,sLAAA,YAAY,6BAAZ,YAAY,mGAAS;YAGrB,2MAAA,mBAAmB,6BAAnB,mBAAmB,iHAAa;YAvBjC,6KAqCC;;;YArCY,uDAAe;;QAE3B,SAAS,4DAAa;QAGtB,UAAU,sHAAa;QAGvB,aAAa,0HAAS;QAGtB,mBAAmB,mIAAa;QAGhC,cAAc,oIAAS;QAGvB,YAAY,6HAAa;QAGzB,YAAY,2HAAS;QAGrB,mBAAmB,kIAAa;QAEhC,YAAY,UASX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SApCW,eAAe;AAuC5B,gFAAgF;IAEnE,sBAAsB;4BADlC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;qCAEd,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;sCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;0CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wCAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;uCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;wCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAdvB,6KAAA,SAAS,6BAAT,SAAS,6FAAa;YAGtB,gLAAA,UAAU,6BAAV,UAAU,+FAAa;YAGvB,4LAAA,cAAc,6BAAd,cAAc,uGAAS;YAGvB,sLAAA,YAAY,6BAAZ,YAAY,mGAAa;YAGzB,mLAAA,WAAW,6BAAX,WAAW,iGAAa;YAGxB,sLAAA,YAAY,6BAAZ,YAAY,mGAAS;YAjBtB,6KA6BC;;;YA7BY,uDAAsB;;QAElC,SAAS,4DAAa;QAGtB,UAAU,sHAAa;QAGvB,cAAc,2HAAS;QAGvB,YAAY,6HAAa;QAGzB,WAAW,0HAAa;QAGxB,YAAY,0HAAS;QAErB,YAAY,UAOX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SA5BW,sBAAsB;IAgCtB,gBAAgB;4BAD5B,OAAO,CAAC,oBAAoB,CAAC;;;;sBACQ,OAAO;;;;gCAAf,SAAQ,WAAc;;;;sCAClD,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;YACrC,gLAAA,UAAU,6BAAV,UAAU,+FAAsB;YAFjC,6KAuBC;;;YAvBY,uDAAgB;;QAE5B,UAAU,6DAAsB;QAEhC,YAAY,UAAgD;YAC3D,KAAK,EAAE,CAAC;;YACR,IAAI,UAAU;gBAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;SACxD;QAEQ,KAAK,CAAC,UAAU,CACxB,KAAoB,EACpB,QAAoD;YAEpD,MAAM,IAAI,KAAK,CACd,kEAAkE,CAClE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAa;YACvB,MAAM,IAAI,KAAK,CACd,kEAAkE,CAClE,CAAC;QACH,CAAC;;;;SAtBW,gBAAgB;AAyB7B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,UAA+B,EACxB,EAAE;IACT,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,eAAe,KAAK,mCAAmC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;IACD,aAAa,CAAC,UAAU,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,UAAU,CAAC,eAAe,YAAY,aAAa,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,aAAa,CAAC,UAAU,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACrE,UAAU,CAAC,UAAU,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,iBAAiB,KAAK,qCAAqC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,UAAU,CAAC,UAAU,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtE,IACC,UAAU,CAAC,qBAAqB;QAChC,4DAA4D,EAC3D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,UAA+B,EAClB,EAAE;IACf,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,UAAU,CAChB,MAAM,CAAC;QACN,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;QACtE,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC;QACrC,UAAU,CAAC,YAAY;QACvB,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;KACnD,CAAC,CACF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,IAA0B,EACb,EAAE;IACf,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,UAAU,CAChB,MAAM,CAAC;QACN,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACzE,YAAY,CAAC,KAAK,CAAC;KACnB,CAAC,CACF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,IAA0B,EAC1B,UAA+B,EACxB,EAAE;IACT,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,aAAa,CAAC,IAAI,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACrE,CAAC;IACF,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,gBAAwC,CAAC;IAC7C,IAAI,gBAAoD,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,YAAY,aAAa,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,IACC,gBAAgB,KAAK,SAAS;YAC9B,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,EACvC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9D,CAAC;QACD,gBAAgB,GAAG,QAAQ,CAAC;QAE5B,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,kCAAkC,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACd,gEAAgE,CAChE,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC3D,gBAAgB,GAAG,OAAO,CAAC;QAC5B,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;IACD,IACC,gBAAgB,KAAK,SAAS;QAC9B,CAAC,gBAAgB,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EACxD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrD,CAAC;IACD,IACC,IAAI,CAAC,QAAQ,KAAK,EAAE;QACpB,CAAC,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,mBAAmB,CAAC,EACxE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAiB,EAAoB,EAAE;IAC7E,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACrD,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxC,yBAAyB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,KAAiB,EACjB,UAA+B,EACR,EAAE;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACtD,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,KAAsB,EACtB,UAA+B,EACxB,EAAE;IACT,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9C,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAChD,aAAa,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACd,0DAA0D,CAC1D,CAAC;QACH,CAAC;IACF,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAClD,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAClD,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC9C,aAAa,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,KAA6B,EAC7B,UAA+B,EACxB,EAAE;IACT,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9C,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAClD,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAClD,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChD,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC9B,KAAiB,EACjB,WAAmB,EACnB,IAAiB,EACb,EAAE;IACN,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CACd,yCAAyC,WAAW,QAAQ,CAC5D,CAAC;IACH,CAAC;IACD,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,yCAAyC,WAAW,QAAQ,CAC5D,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,KAAiB,EACjB,UAA+B,EACb,EAAE;IACpB,MAAM,KAAK,GAAG,sBAAsB,CACnC,KAAK,EACL,4CAA4C,EAC5C,eAAe,CACf,CAAC;IACF,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,KAAiB,EACjB,UAA+B,EACN,EAAE;IAC3B,MAAM,KAAK,GAAG,sBAAsB,CACnC,KAAK,EACL,+CAA+C,EAC/C,sBAAsB,CACtB,CAAC;IACF,4BAA4B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC"}
+{"version":3,"file":"v2.js","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EACN,WAAW,EACX,KAAK,EACL,UAAU,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,GAAG,GACH,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACN,OAAO,GAGP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4DAA4D,GAAG,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,GAAG,GAAG,IAAI,CAAC;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,GAAG,IAAI,CAAC;AAC1E,MAAM,CAAC,MAAM,oDAAoD,GAAG,EAAE,CAAC;AAEvE,MAAM,CAAC,MAAM,oCAAoC,GAChD,0CAA0C,CAAC;AAC5C,MAAM,CAAC,MAAM,uCAAuC,GACnD,2CAA2C,CAAC;AAE7C,kFAAkF;AAClF,MAAM,CAAC,MAAM,4CAA4C,GAAG,GAAG,CAAC;AAChE,MAAM,CAAC,MAAM,+CAA+C,GAAG,GAAG,CAAC;AAEnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;CACP,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,kCAAkC,GAC9C,kBAAkB,CAAC,KAAK;IACxB,kBAAkB,CAAC,MAAM;IACzB,kBAAkB,CAAC,MAAM;IACzB,kBAAkB,CAAC,UAAU,CAAC;AAE/B,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AACvC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,qBAAqB,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC1E,MAAM,uBAAuB,GAAG,MAAM,CAAC,wBAAwB,CAC9D,qBAAqB,EACrB,YAAY,CACX,CAAC,GAAI,CAAC;AACR,MAAM,eAAe,GAAG,MAAM,CAAC,wBAAwB,CACtD,qBAAqB,EACrB,MAAM,CAAC,WAAW,CACjB,CAAC,GAAI,CAAC;AAER,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,KAAc,EAAU,EAAE;IACrE,IACC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;QAC1B,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,YAAY,EAC3C,CAAC;QACF,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAW,CAAC;IACjE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACtB,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,KAAmB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,KAAiB,EACjB,UAAkB,EACL,EAAE;IACf,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAc,EAAE;IACjE,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,0BAA0B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC1C,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAE,KAAa,EAAQ,EAAE;IAChE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAc,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAc,EAAE;IAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,KAAiB,EAAE,KAAc,EAAQ,EAAE;IAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;AACF,CAAC,CAAC;IAGW,mBAAmB;4BAD/B,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;2CAEd,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wCAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;2CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;+CAG9B,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;6CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;iDAGrB,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAdtB,+LAAA,eAAe,6BAAf,eAAe,yGAAS;YAGxB,sLAAA,YAAY,6BAAZ,YAAY,mGAAa;YAGzB,+LAAA,eAAe,6BAAf,eAAe,yGAAgB;YAG/B,2MAAA,mBAAmB,6BAAnB,mBAAmB,iHAAa;YAGhC,qMAAA,iBAAiB,6BAAjB,iBAAiB,6GAAS;YAG1B,iNAAA,qBAAqB,6BAArB,qBAAqB,qHAAS;YAjB/B,6KA6BC;;;YA7BY,uDAAmB;;QAE/B,eAAe,kEAAS;QAGxB,YAAY,8HAAa;QAGzB,eAAe,8HAAgB;QAG/B,mBAAmB,qIAAa;QAGhC,iBAAiB,uIAAS;QAG1B,qBAAqB,yIAAS;QAE9B,YAAY,UAOX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SA5BW,mBAAmB;IA+BnB,yBAAyB;;;;;;;iBAAzB,yBAAyB;;;mCACpC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;kCAGrB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAFtC,uKAAA,OAAO,6BAAP,OAAO,yFAAS;YAGhB,oKAAA,MAAM,6BAAN,MAAM,uFAAa;;;QAHnB,OAAO,0DAAS;QAGhB,MAAM,gHAAa;QAEnB,YAAY,UAAoD;;YAC/D,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;SATW,yBAAyB;IAYzB,sBAAsB;;;;;;;;;;iBAAtB,sBAAsB;;;sCACjC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;iCAG9B,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;mDAGrB,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC;YALnD,gLAAA,UAAU,6BAAV,UAAU,+FAAgB;YAG1B,iKAAA,KAAK,6BAAL,KAAK,qFAAS;YAGd,uNAAA,uBAAuB,6BAAvB,uBAAuB,yHAA6B;;;QANpD,UAAU,6DAAgB;QAG1B,KAAK,kHAAS;QAGd,uBAAuB,+HAA6B;QAEpD,YAAY,UAIX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;SAhBW,sBAAsB;IAoBtB,oBAAoB;4BADhC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;qCAEd,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;oCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gDAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;oCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAR7C,6KAAA,SAAS,6BAAT,SAAS,6FAAa;YAGtB,0KAAA,QAAQ,6BAAR,QAAQ,2FAAS;YAGjB,8MAAA,oBAAoB,6BAApB,oBAAoB,mHAAa;YAGjC,0KAAA,QAAQ,6BAAR,QAAQ,2FAA2B;YAXpC,6KAqBC;;;YArBY,uDAAoB;;QAEhC,SAAS,4DAAa;QAGtB,QAAQ,oHAAS;QAGjB,oBAAoB,+HAAa;QAGjC,QAAQ,+HAA2B;QAEnC,YAAY,UAKX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SApBW,oBAAoB;AAuBjC,+EAA+E;IAElE,eAAe;4BAD3B,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAEd,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;sCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;yCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;+CAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;0CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wCAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;wCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;+CAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YApBtC,6KAAA,SAAS,6BAAT,SAAS,6FAAa;YAGtB,gLAAA,UAAU,6BAAV,UAAU,+FAAa;YAGvB,yLAAA,aAAa,6BAAb,aAAa,qGAAS;YAGtB,2MAAA,mBAAmB,6BAAnB,mBAAmB,iHAAa;YAGhC,4LAAA,cAAc,6BAAd,cAAc,uGAAS;YAGvB,sLAAA,YAAY,6BAAZ,YAAY,mGAAa;YAGzB,sLAAA,YAAY,6BAAZ,YAAY,mGAAS;YAGrB,2MAAA,mBAAmB,6BAAnB,mBAAmB,iHAAa;YAvBjC,6KAqCC;;;YArCY,uDAAe;;QAE3B,SAAS,4DAAa;QAGtB,UAAU,sHAAa;QAGvB,aAAa,0HAAS;QAGtB,mBAAmB,mIAAa;QAGhC,cAAc,oIAAS;QAGvB,YAAY,6HAAa;QAGzB,YAAY,2HAAS;QAGrB,mBAAmB,kIAAa;QAEhC,YAAY,UASX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SApCW,eAAe;AAuC5B,gFAAgF;IAEnE,sBAAsB;4BADlC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;qCAEd,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;sCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;0CAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wCAGtB,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;uCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;wCAGrC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAdvB,6KAAA,SAAS,6BAAT,SAAS,6FAAa;YAGtB,gLAAA,UAAU,6BAAV,UAAU,+FAAa;YAGvB,4LAAA,cAAc,6BAAd,cAAc,uGAAS;YAGvB,sLAAA,YAAY,6BAAZ,YAAY,mGAAa;YAGzB,mLAAA,WAAW,6BAAX,WAAW,iGAAa;YAGxB,sLAAA,YAAY,6BAAZ,YAAY,mGAAS;YAjBtB,6KA6BC;;;YA7BY,uDAAsB;;QAElC,SAAS,4DAAa;QAGtB,UAAU,sHAAa;QAGvB,cAAc,2HAAS;QAGvB,YAAY,6HAAa;QAGzB,WAAW,0HAAa;QAGxB,YAAY,0HAAS;QAErB,YAAY,UAOX;;YACA,IAAI,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SAChD;;;;SA5BW,sBAAsB;IAgCtB,gBAAgB;4BAD5B,OAAO,CAAC,oBAAoB,CAAC;;;;sBACQ,OAAO;;;;gCAAf,SAAQ,WAAc;;;;sCAClD,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;YACrC,gLAAA,UAAU,6BAAV,UAAU,+FAAsB;YAFjC,6KAuBC;;;YAvBY,uDAAgB;;QAE5B,UAAU,6DAAsB;QAEhC,YAAY,UAAgD;YAC3D,KAAK,EAAE,CAAC;;YACR,IAAI,UAAU;gBAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;SACxD;QAEQ,KAAK,CAAC,UAAU,CACxB,KAAoB,EACpB,QAAoD;YAEpD,MAAM,IAAI,KAAK,CACd,kEAAkE,CAClE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAa;YACvB,MAAM,IAAI,KAAK,CACd,kEAAkE,CAClE,CAAC;QACH,CAAC;;;;SAtBW,gBAAgB;AAyB7B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,UAA+B,EACxB,EAAE;IACT,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,eAAe,KAAK,mCAAmC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;IACD,aAAa,CAAC,UAAU,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,UAAU,CAAC,eAAe,YAAY,aAAa,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,aAAa,CAAC,UAAU,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACrE,UAAU,CAAC,UAAU,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,iBAAiB,KAAK,qCAAqC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,UAAU,CAAC,UAAU,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtE,IACC,UAAU,CAAC,qBAAqB;QAChC,4DAA4D,EAC3D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,UAA+B,EAClB,EAAE;IACf,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,UAAU,CAChB,MAAM,CAAC;QACN,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;QACtE,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC;QACrC,UAAU,CAAC,YAAY;QACvB,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;KACnD,CAAC,CACF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,IAA0B,EACb,EAAE;IACf,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,UAAU,CAChB,MAAM,CAAC;QACN,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACzE,YAAY,CAAC,KAAK,CAAC;KACnB,CAAC,CACF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,IAA0B,EAC1B,UAA+B,EACxB,EAAE;IACT,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,aAAa,CAAC,IAAI,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACrE,CAAC;IACF,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,gBAAwC,CAAC;IAC7C,IAAI,gBAAoD,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,YAAY,aAAa,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,IACC,gBAAgB,KAAK,SAAS;YAC9B,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,EACvC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9D,CAAC;QACD,gBAAgB,GAAG,QAAQ,CAAC;QAE5B,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,kCAAkC,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACd,gEAAgE,CAChE,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC3D,gBAAgB,GAAG,OAAO,CAAC;QAC5B,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;IACD,IACC,gBAAgB,KAAK,SAAS;QAC9B,CAAC,gBAAgB,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EACxD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrD,CAAC;IACD,IACC,IAAI,CAAC,QAAQ,KAAK,EAAE;QACpB,CAAC,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,mBAAmB,CAAC,EACxE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAiB,EAAoB,EAAE;IAC7E,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACrD,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxC,yBAAyB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,KAAiB,EACjB,UAA+B,EACR,EAAE;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACtD,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,KAAsB,EACtB,UAA+B,EACxB,EAAE;IACT,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9C,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAChD,aAAa,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACd,0DAA0D,CAC1D,CAAC;QACH,CAAC;IACF,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAClD,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAClD,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC9C,aAAa,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,KAA6B,EAC7B,UAA+B,EACxB,EAAE;IACT,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9C,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAClD,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAClD,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChD,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC9B,KAAiB,EACjB,WAAmB,EACnB,IAAiB,EACb,EAAE;IACN,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CACd,yCAAyC,WAAW,QAAQ,CAC5D,CAAC;IACH,CAAC;IACD,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,yCAAyC,WAAW,QAAQ,CAC5D,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,KAAiB,EACjB,UAA+B,EACb,EAAE;IACpB,MAAM,KAAK,GAAG,sBAAsB,CACnC,KAAK,EACL,4CAA4C,EAC5C,eAAe,CACf,CAAC;IACF,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC3C,KAAiB,EACjB,UAA+B,EACN,EAAE;IAC3B,MAAM,KAAK,GAAG,sBAAsB,CACnC,KAAK,EACL,+CAA+C,EAC/C,sBAAsB,CACtB,CAAC;IACF,4BAA4B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peerbit/trusted-network",
-  "version": "6.0.112",
+  "version": "6.0.113",
   "description": "Access controller that operates on a DB",
   "sideEffects": false,
   "type": "module",
@@ -55,18 +55,19 @@
     "@dao-xyz/borsh": "^6.0.0",
     "@libp2p/interface": "^3.2.5",
     "uint8arrays": "^5.1.0",
-    "@peerbit/any-store": "2.2.17",
     "@peerbit/any-store-interface": "1.1.4",
+    "@peerbit/any-store": "2.2.17",
+    "@peerbit/blocks-interface": "2.1.7",
     "@peerbit/crypto": "3.1.6",
     "@peerbit/document": "15.0.18",
     "@peerbit/log": "6.2.27",
-    "@peerbit/program": "6.0.57",
-    "@peerbit/shared-log": "16.0.17"
+    "@peerbit/shared-log": "16.0.17",
+    "@peerbit/program": "6.0.57"
   },
   "devDependencies": {
     "ethers": "^6.17.0",
-    "@peerbit/time": "3.0.1",
-    "@peerbit/test-utils": "3.1.36"
+    "@peerbit/test-utils": "3.1.36",
+    "@peerbit/time": "3.0.1"
   },
   "repository": {
     "type": "git",

package/src/v2-authority-entry.ts

@@ -0,0 +1,430 @@
+import { deserialize, serialize } from "@dao-xyz/borsh";
+import {
+	calculateRawCid,
+	cidifyString,
+	codecMap,
+	defaultHasher,
+	stringifyCid,
+} from "@peerbit/blocks-interface";
+import { DecryptedThing, verify } from "@peerbit/crypto";
+import { Entry, EntryType, EntryV0, NO_ENCODING } from "@peerbit/log";
+import { equals } from "uint8arrays";
+import {
+	NetworkDescriptorV2,
+	assertNetworkDescriptorV2,
+	copyUint8ArrayV2,
+	copyUint8ArrayWithLengthV2,
+	exactUint8ArrayByteLengthV2,
+} from "./v2.js";
+
+/** Internal limits selected by a concrete TrustedNetwork v2 record profile. */
+export type AuthorityEntryV0LimitsV2 = {
+	maximumEntryBytes: number;
+	maximumDirectParents: number;
+	exactPayloadBytes?: number;
+};
+
+export type AuthenticatedAuthorityEntryV0V2 = {
+	descriptor: NetworkDescriptorV2;
+	entryBytes: Uint8Array;
+	entryCid: string;
+	entryDigest: Uint8Array;
+	gid: string;
+	metaData?: Uint8Array;
+	directParents: Array<{ cid: string; digest: Uint8Array }>;
+	payloadBytes: Uint8Array;
+};
+
+type ScannedAuthorityEntryV0 = {
+	metaBytes: Uint8Array;
+	payloadBytes: Uint8Array;
+	signatureBytes: Uint8Array;
+	signableBytes: Uint8Array;
+};
+
+class BoundsReaderV2 {
+	private offset = 0;
+	private readonly view: DataView;
+
+	constructor(private readonly bytes: Uint8Array) {
+		this.view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+	}
+
+	get position(): number {
+		return this.offset;
+	}
+
+	readU8(label: string): number {
+		return this.readExact(1, label)[0]!;
+	}
+
+	readU32(label: string): number {
+		this.requireRemaining(4, label);
+		const value = this.view.getUint32(this.offset, true);
+		this.offset += 4;
+		return value;
+	}
+
+	readBytes(label: string): Uint8Array {
+		return this.readExact(this.readU32(`${label} length`), label);
+	}
+
+	readExact(byteLength: number, label: string): Uint8Array {
+		this.requireRemaining(byteLength, label);
+		const start = this.offset;
+		this.offset += byteLength;
+		return this.bytes.subarray(start, this.offset);
+	}
+
+	expectU8(expected: number, label: string): void {
+		if (this.readU8(label) !== expected) {
+			throw new Error(`Authority EntryV0 has invalid ${label}`);
+		}
+	}
+
+	expectDone(label: string): void {
+		if (this.offset !== this.bytes.byteLength) {
+			throw new Error(`Authority EntryV0 has trailing ${label} bytes`);
+		}
+	}
+
+	private requireRemaining(byteLength: number, label: string): void {
+		if (
+			!Number.isSafeInteger(byteLength) ||
+			byteLength < 0 ||
+			byteLength > this.bytes.byteLength - this.offset
+		) {
+			throw new Error(`Authority EntryV0 has truncated ${label}`);
+		}
+	}
+}
+
+const readPublicWrapperV2 = (
+	reader: BoundsReaderV2,
+	label: string,
+): Uint8Array => {
+	reader.expectU8(0, `${label} MaybeEncrypted variant`);
+	reader.expectU8(0, `${label} DecryptedThing variant`);
+	return reader.readBytes(label);
+};
+
+const scanMetaV2 = (
+	metaBytes: Uint8Array,
+	authorityBytes: Uint8Array,
+	maximumDirectParents: number,
+): void => {
+	const reader = new BoundsReaderV2(metaBytes);
+	reader.expectU8(0, "metadata variant");
+	reader.expectU8(0, "clock variant");
+	if (!equals(reader.readBytes("clock id"), authorityBytes)) {
+		throw new Error("Authority EntryV0 clock id is not the policy authority");
+	}
+	reader.expectU8(0, "timestamp variant");
+	reader.readExact(8, "timestamp wall time");
+	reader.readExact(4, "timestamp logical time");
+	reader.readBytes("gid");
+
+	const directParentCount = reader.readU32("direct-parent count");
+	if (directParentCount > maximumDirectParents) {
+		throw new Error(
+			`Authority EntryV0 may contain at most ${maximumDirectParents} direct parents`,
+		);
+	}
+	for (let i = 0; i < directParentCount; i++) {
+		reader.readBytes("direct parent");
+	}
+
+	if (reader.readU8("entry type") !== EntryType.APPEND) {
+		throw new Error("Authority EntryV0 must be an APPEND entry");
+	}
+	const metaDataOption = reader.readU8("metadata data option");
+	if (metaDataOption === 1) {
+		reader.readBytes("metadata data");
+	} else if (metaDataOption !== 0) {
+		throw new Error("Authority EntryV0 has invalid metadata data option");
+	}
+	reader.expectDone("metadata");
+};
+
+const scanPayloadV2 = (
+	payloadBytes: Uint8Array,
+	exactPayloadBytes?: number,
+): void => {
+	const reader = new BoundsReaderV2(payloadBytes);
+	reader.expectU8(0, "payload variant");
+	const data = reader.readBytes("payload data");
+	if (
+		exactPayloadBytes !== undefined &&
+		data.byteLength !== exactPayloadBytes
+	) {
+		throw new Error(
+			`Authority EntryV0 payload must contain exactly ${exactPayloadBytes} bytes`,
+		);
+	}
+	reader.expectDone("payload");
+};
+
+const SECP256K1_SIGNATURE_TEXT_BYTES = 132;
+const SECP256K1_LOW_S_MAX_HEX =
+	"7fffffffffffffffffffffffffffffff5d576e7357a4501ddfe92f46681b20a0";
+
+const isLowerHexByteV2 = (value: number): boolean =>
+	(value >= 0x30 && value <= 0x39) || (value >= 0x61 && value <= 0x66);
+
+const assertCanonicalSecp256k1SignatureV2 = (signature: Uint8Array): void => {
+	if (
+		signature.byteLength !== SECP256K1_SIGNATURE_TEXT_BYTES ||
+		signature[0] !== 0x30 ||
+		signature[1] !== 0x78
+	) {
+		throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+	}
+	for (let i = 2; i < signature.byteLength; i++) {
+		if (!isLowerHexByteV2(signature[i]!)) {
+			throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+		}
+	}
+	if (
+		signature[130] !== 0x31 ||
+		(signature[131] !== 0x62 && signature[131] !== 0x63)
+	) {
+		throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+	}
+	for (let i = 0; i < SECP256K1_LOW_S_MAX_HEX.length; i++) {
+		const actual = signature[66 + i]!;
+		const maximum = SECP256K1_LOW_S_MAX_HEX.charCodeAt(i);
+		if (actual < maximum) break;
+		if (actual > maximum) {
+			throw new Error("Authority EntryV0 secp256k1 signature is not canonical");
+		}
+	}
+};
+
+const scanSignatureV2 = (
+	signatureBytes: Uint8Array,
+	authorityBytes: Uint8Array,
+): void => {
+	const reader = new BoundsReaderV2(signatureBytes);
+	reader.expectU8(0, "signature variant");
+	const signature = reader.readBytes("signature data");
+	const publicKeyVariant = reader.readU8("signature public-key variant");
+	const publicKeyLength =
+		publicKeyVariant === 0 ? 32 : publicKeyVariant === 1 ? 33 : undefined;
+	if (publicKeyLength === undefined) {
+		throw new Error("Authority EntryV0 uses an unsupported signing key");
+	}
+	const publicKey = reader.readExact(publicKeyLength, "signature public key");
+	const serializedPublicKey = new Uint8Array(publicKeyLength + 1);
+	serializedPublicKey[0] = publicKeyVariant;
+	serializedPublicKey.set(publicKey, 1);
+	if (!equals(serializedPublicKey, authorityBytes)) {
+		throw new Error("Authority EntryV0 signer is not the policy authority");
+	}
+	if (publicKeyVariant === 1) {
+		assertCanonicalSecp256k1SignatureV2(signature);
+	}
+	reader.readU8("signature prehash");
+	reader.expectDone("signature");
+};
+
+const scanAuthorityEntryV0 = (
+	entryBytes: Uint8Array,
+	authorityBytes: Uint8Array,
+	limits: AuthorityEntryV0LimitsV2,
+): ScannedAuthorityEntryV0 => {
+	const reader = new BoundsReaderV2(entryBytes);
+	reader.expectU8(0, "entry variant");
+	const metaBytes = readPublicWrapperV2(reader, "metadata");
+	const payloadBytes = readPublicWrapperV2(reader, "payload");
+	const reserved = reader.readExact(4, "reserved bytes");
+	if (
+		reserved[0] !== 0 ||
+		reserved[1] !== 0 ||
+		reserved[2] !== 0 ||
+		reserved[3] !== 0
+	) {
+		throw new Error("Authority EntryV0 reserved bytes must be zero");
+	}
+	const signablePrefixLength = reader.position;
+	reader.expectU8(1, "signatures option");
+	reader.expectU8(0, "signatures variant");
+	if (reader.readU32("signature count") !== 1) {
+		throw new Error("Authority EntryV0 must contain exactly one signature");
+	}
+	const signatureBytes = readPublicWrapperV2(reader, "signature");
+	reader.expectU8(0, "hash option");
+	reader.expectDone("storage");
+
+	scanMetaV2(metaBytes, authorityBytes, limits.maximumDirectParents);
+	scanPayloadV2(payloadBytes, limits.exactPayloadBytes);
+	scanSignatureV2(signatureBytes, authorityBytes);
+	const signableBytes = new Uint8Array(signablePrefixLength + 2);
+	signableBytes.set(entryBytes.subarray(0, signablePrefixLength));
+	return { metaBytes, payloadBytes, signatureBytes, signableBytes };
+};
+
+const validateLimitsV2 = (limits: AuthorityEntryV0LimitsV2): void => {
+	if (
+		!Number.isSafeInteger(limits.maximumEntryBytes) ||
+		limits.maximumEntryBytes < 1 ||
+		!Number.isSafeInteger(limits.maximumDirectParents) ||
+		limits.maximumDirectParents < 0 ||
+		(limits.exactPayloadBytes !== undefined &&
+			(!Number.isSafeInteger(limits.exactPayloadBytes) ||
+				limits.exactPayloadBytes < 0))
+	) {
+		throw new Error("Invalid internal authority EntryV0 limits");
+	}
+};
+
+const canonicalDirectParentsV2 = (
+	parents: string[],
+): Array<{ cid: string; digest: Uint8Array }> => {
+	const seen = new Set<string>();
+	return parents.map((cid) => {
+		let parsed: ReturnType<typeof cidifyString>;
+		try {
+			parsed = cidifyString(cid);
+		} catch {
+			throw new Error(
+				"Authority EntryV0 direct parents must use canonical CIDv1/raw/sha2-256",
+			);
+		}
+		if (
+			!cid ||
+			parsed.version !== 1 ||
+			parsed.code !== codecMap.raw.code ||
+			parsed.multihash.code !== defaultHasher.code ||
+			parsed.multihash.digest.byteLength !== 32 ||
+			stringifyCid(parsed) !== cid
+		) {
+			throw new Error(
+				"Authority EntryV0 direct parents must use canonical CIDv1/raw/sha2-256",
+			);
+		}
+		if (seen.has(cid)) {
+			throw new Error("Authority EntryV0 direct parents must be unique");
+		}
+		seen.add(cid);
+		return {
+			cid,
+			digest: copyUint8ArrayV2(parsed.multihash.digest),
+		};
+	});
+};
+
+/**
+ * Authenticate one bounded raw EntryV0 authority envelope. This establishes
+ * canonical bytes, authority signature, and structural facts only. It does not
+ * establish policy acceptance, causal ancestry, freshness, or durability.
+ */
+export const authenticateAuthorityEntryV0V2 = async (
+	entryBytes: Uint8Array,
+	descriptor: NetworkDescriptorV2,
+	limits: AuthorityEntryV0LimitsV2,
+): Promise<AuthenticatedAuthorityEntryV0V2> => {
+	validateLimitsV2(limits);
+	let byteLength: number;
+	try {
+		byteLength = exactUint8ArrayByteLengthV2(entryBytes);
+	} catch {
+		throw new Error("Authority entry must use canonical EntryV0 bytes");
+	}
+	if (byteLength < 1 || byteLength > limits.maximumEntryBytes) {
+		throw new Error(
+			`Authority EntryV0 must contain 1-${limits.maximumEntryBytes} bytes`,
+		);
+	}
+	const capturedEntryBytes = copyUint8ArrayWithLengthV2(entryBytes, byteLength);
+
+	assertNetworkDescriptorV2(descriptor);
+	const authorityBytes = serialize(descriptor.policyAuthority);
+	const scanned = scanAuthorityEntryV0(
+		capturedEntryBytes,
+		authorityBytes,
+		limits,
+	);
+	const capturedDescriptor = deserialize(
+		serialize(descriptor),
+		NetworkDescriptorV2,
+	);
+	assertNetworkDescriptorV2(capturedDescriptor);
+	if (!equals(serialize(capturedDescriptor.policyAuthority), authorityBytes)) {
+		throw new Error("Network descriptor changed during capture");
+	}
+	const entry = deserialize(capturedEntryBytes, Entry);
+	if (!(entry instanceof EntryV0)) {
+		throw new Error("Authority entry must use EntryV0");
+	}
+	if (!equals(capturedEntryBytes, serialize(entry))) {
+		throw new Error("Authority EntryV0 storage is not canonical");
+	}
+	if (!(entry._meta instanceof DecryptedThing)) {
+		throw new Error("Authority EntryV0 metadata must be public");
+	}
+	if (!(entry._payload instanceof DecryptedThing)) {
+		throw new Error("Authority EntryV0 payload must be public");
+	}
+	if (
+		entry._signatures === undefined ||
+		entry._signatures.signatures.length !== 1 ||
+		!(entry._signatures.signatures[0] instanceof DecryptedThing)
+	) {
+		throw new Error("Authority EntryV0 must contain one public signature");
+	}
+
+	entry.init({ encoding: NO_ENCODING });
+	const meta = entry.meta;
+	const payload = entry.payload;
+	const signatures = entry.signatures;
+	if (
+		!equals(scanned.metaBytes, serialize(meta)) ||
+		!equals(scanned.payloadBytes, serialize(payload)) ||
+		!equals(scanned.signatureBytes, serialize(signatures[0]!))
+	) {
+		throw new Error("Authority EntryV0 nested encoding is not canonical");
+	}
+	if (
+		meta.type !== EntryType.APPEND ||
+		meta.next.length > limits.maximumDirectParents ||
+		!equals(meta.clock.id, authorityBytes)
+	) {
+		throw new Error("Authority EntryV0 metadata does not match its profile");
+	}
+	if (
+		signatures.length !== 1 ||
+		!equals(serialize(signatures[0]!.publicKey), authorityBytes)
+	) {
+		throw new Error("Authority EntryV0 signer is not the policy authority");
+	}
+	if (
+		limits.exactPayloadBytes !== undefined &&
+		payload.data.byteLength !== limits.exactPayloadBytes
+	) {
+		throw new Error(
+			`Authority EntryV0 payload must contain exactly ${limits.exactPayloadBytes} bytes`,
+		);
+	}
+
+	let signatureIsValid = false;
+	try {
+		signatureIsValid = await verify(signatures[0]!, scanned.signableBytes);
+	} catch {
+		// Unsupported prehashes and malformed signatures fail closed.
+	}
+	if (!signatureIsValid) {
+		throw new Error("Authority EntryV0 signature is invalid");
+	}
+
+	const prepared = await calculateRawCid(capturedEntryBytes);
+	return {
+		descriptor: capturedDescriptor,
+		entryBytes: capturedEntryBytes,
+		entryCid: prepared.cid,
+		entryDigest: copyUint8ArrayV2(prepared.block.cid.multihash.digest),
+		gid: meta.gid,
+		metaData: meta.data === undefined ? undefined : copyUint8ArrayV2(meta.data),
+		directParents: canonicalDirectParentsV2(meta.next),
+		payloadBytes: copyUint8ArrayV2(payload.data),
+	};
+};

package/src/v2-resource-fence-entry.ts

@@ -0,0 +1,97 @@
+import { equals } from "uint8arrays";
+import {
+	type AuthenticatedAuthorityEntryV0V2,
+	authenticateAuthorityEntryV0V2,
+} from "./v2-authority-entry.js";
+import {
+	NetworkDescriptorV2,
+	ResourceFenceV2,
+	TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS,
+	TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES,
+	TRUSTED_NETWORK_V2_RESOURCE_FENCE_BODY_BYTES,
+	copyUint8ArrayWithLengthV2,
+	decodeResourceFenceV2,
+	exactUint8ArrayByteLengthV2,
+} from "./v2.js";
+
+const RESOURCE_FENCE_AUTHORITY_LIMITS_V2 = Object.freeze({
+	maximumEntryBytes: TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES,
+	maximumDirectParents: TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS,
+	exactPayloadBytes: TRUSTED_NETWORK_V2_RESOURCE_FENCE_BODY_BYTES,
+});
+
+export type AuthenticatedResourceFenceEntryV2 = Readonly<{
+	entryBytes: Uint8Array;
+	entryCid: string;
+	digest: Uint8Array;
+	body: ResourceFenceV2;
+	gid: string;
+	metaData?: Uint8Array;
+	directParents: ReadonlyArray<Readonly<{ cid: string; digest: Uint8Array }>>;
+}>;
+
+export type AuthenticateResourceFenceEntryV2Properties = Readonly<{
+	entryBytes: Uint8Array;
+	descriptor: NetworkDescriptorV2;
+	expectedResourceId: Uint8Array;
+	expectedGid: string;
+}>;
+
+const captureResourceIdV2 = (resourceId: Uint8Array): Uint8Array => {
+	let byteLength: number;
+	try {
+		byteLength = exactUint8ArrayByteLengthV2(resourceId);
+	} catch {
+		throw new Error("Expected resource id must contain exactly 32 bytes");
+	}
+	if (byteLength !== 32) {
+		throw new Error("Expected resource id must contain exactly 32 bytes");
+	}
+	return copyUint8ArrayWithLengthV2(resourceId, byteLength);
+};
+
+const toResourceFenceTokenV2 = (
+	authenticated: AuthenticatedAuthorityEntryV0V2,
+	body: ResourceFenceV2,
+): AuthenticatedResourceFenceEntryV2 => ({
+	entryBytes: authenticated.entryBytes,
+	entryCid: authenticated.entryCid,
+	digest: authenticated.entryDigest,
+	body,
+	gid: authenticated.gid,
+	metaData: authenticated.metaData,
+	directParents: authenticated.directParents,
+});
+
+/**
+ * Authenticate a raw resource-fence EntryV0 against immutable resource
+ * context. The returned token does not prove policy acceptance, causal
+ * ancestry, fork freedom, freshness, or durability.
+ */
+export const authenticateResourceFenceEntryV2 = async ({
+	entryBytes,
+	descriptor,
+	expectedResourceId,
+	expectedGid,
+}: AuthenticateResourceFenceEntryV2Properties): Promise<AuthenticatedResourceFenceEntryV2> => {
+	if (typeof expectedGid !== "string") {
+		throw new Error("Expected resource gid must be a string");
+	}
+	const capturedResourceId = captureResourceIdV2(expectedResourceId);
+	const authenticated = await authenticateAuthorityEntryV0V2(
+		entryBytes,
+		descriptor,
+		RESOURCE_FENCE_AUTHORITY_LIMITS_V2,
+	);
+	if (authenticated.gid !== expectedGid) {
+		throw new Error("Resource fence belongs to another resource log");
+	}
+	const body = decodeResourceFenceV2(
+		authenticated.payloadBytes,
+		authenticated.descriptor,
+	);
+	if (!equals(body.resourceId, capturedResourceId)) {
+		throw new Error("Resource fence belongs to another resource");
+	}
+	return toResourceFenceTokenV2(authenticated, body);
+};

package/src/v2.ts

@@ -42,6 +42,13 @@ export const TRUSTED_NETWORK_V2_ENTRY_V0_AUTHORITY_ONLY_SIGNATURE_PROFILE = 1;
  */
 export const TRUSTED_NETWORK_V2_MAX_POLICY_ENTRY_BYTES = 128 * 1024;
 
+/**
+ * Consensus bounds for a canonical signed resource-fence EntryV0. These are
+ * protocol constants, not resource-adapter configuration.
+ */
+export const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES = 8 * 1024;
+export const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS = 64;
+
 export const TRUSTED_NETWORK_V2_NETWORK_ID_DOMAIN =
 	"peerbit/trusted-network/v2/network-id/v1";
 export const TRUSTED_NETWORK_V2_POLICY_DIGEST_DOMAIN =
@@ -76,7 +83,7 @@ const TYPED_ARRAY_TAG = Object.getOwnPropertyDescriptor(
 	Symbol.toStringTag,
 )!.get!;
 
-const exactUint8ArrayByteLength = (value: unknown): number => {
+export const exactUint8ArrayByteLengthV2 = (value: unknown): number => {
 	if (
 		!ArrayBuffer.isView(value) ||
 		TYPED_ARRAY_TAG.call(value) !== "Uint8Array"
@@ -90,6 +97,20 @@ const exactUint8ArrayByteLength = (value: unknown): number => {
 	return byteLength;
 };
 
+export const copyUint8ArrayWithLengthV2 = (
+	value: Uint8Array,
+	byteLength: number,
+): Uint8Array => {
+	const copy = new Uint8Array(byteLength);
+	Uint8Array.prototype.set.call(copy, value);
+	return copy;
+};
+
+export const copyUint8ArrayV2 = (value: Uint8Array): Uint8Array => {
+	const byteLength = exactUint8ArrayByteLengthV2(value);
+	return copyUint8ArrayWithLengthV2(value, byteLength);
+};
+
 const assertByte = (value: number, label: string): void => {
 	if (!Number.isInteger(value) || value < 0 || value > 0xff) {
 		throw new Error(`${label} must be a u8`);
@@ -111,7 +132,7 @@ const assertU64 = (value: bigint, label: string): void => {
 const assertBytes32 = (value: Uint8Array, label: string): void => {
 	let byteLength: number;
 	try {
-		byteLength = exactUint8ArrayByteLength(value);
+		byteLength = exactUint8ArrayByteLengthV2(value);
 	} catch {
 		throw new Error(`${label} must contain exactly 32 bytes`);
 	}
@@ -513,7 +534,7 @@ const decodeExactCanonicalV2 = <T>(
 ): T => {
 	let byteLength: number;
 	try {
-		byteLength = exactUint8ArrayByteLength(bytes);
+		byteLength = exactUint8ArrayByteLengthV2(bytes);
 	} catch {
 		throw new Error(
 			`TrustedNetwork v2 record must contain ${exactLength} bytes`,
@@ -524,8 +545,7 @@ const decodeExactCanonicalV2 = <T>(
 			`TrustedNetwork v2 record must contain ${exactLength} bytes`,
 		);
 	}
-	const captured = new Uint8Array(byteLength);
-	Uint8Array.prototype.set.call(captured, bytes);
+	const captured = copyUint8ArrayWithLengthV2(bytes, byteLength);
 	const value = deserialize(captured, type);
 	assertCanonicalEncoding(captured, value);
 	return value;